GigAI

GigAI is a contract-first exploration of a local, user-controlled runtime for turning goals into reviewable, finite execution graphs.

Status: pre-alpha contracts and executable research. The installed distribution implements local setup, offline doctor, idempotent target init, the offline proposal lifecycle (create, feedback, revise, approve, and reject), and read/open operations over private workpads. It does not run a scheduler or provide a production execution runtime. The package also exposes versioned pre-release serialized contracts and canonical identity primitives. Their immutable release regime begins at GigAI's deliberately declared first public release. Commands beyond the implemented surface remain planned interfaces, not product behavior.

Why this exists

Agent systems often blur three different decisions: what should happen, who approved it, and what is authorized to execute. GigAI keeps them separate:

create or improve -> non-executable proposal
operator approval -> immutable Gig version
run               -> authority for one execution

A Gig is a finite, user-owned Goal Graph. Its private workpad is authoritative; indexes are rebuildable; provider calls are explicit exposure; and imported user content is hashed as exact bytes rather than silently normalized.

What is implemented

• Eight versioned JSON Schema Draft 2020-12 contracts.
• One production implementation of restricted canonical JSON, owned-text bytes, exact imported-byte digests, prefixed UUIDv4 IDs, and explicit version selection.
• One installed gigai command exposing truthful package help and version, idempotent local setup, structured offline diagnostics, target binding, the non-executable proposal lifecycle, and offline read/open operations.
• A strict versioned config.toml containing structured editor argv, credential references rather than values, one deterministic offline endpoint and target, one default profile, and the authoritative workpad mount.
• An immutable content-addressed standard pack and fixture-backed offline adapter. Setup and doctor prove atomic replacement and real two-process exclusion on the configured mount without network or token use.
• A strict path-free .gigai/project.toml binding for Git targets, one idempotent /.gigai/ local exclude entry, and a versioned private registry.sqlite that owns canonical target and workpad locators. The exact v1 registry migrates transactionally to v2 after retaining a private, validated v1 backup. Explicit non-Git targets are registry-only and receive no implicit target tree.
• An internal caller-ID-only workpad primitive that atomically publishes an empty, unborn, local-only Git repository under the configured mount. It sets repository-local identity and ownership markers, configures no remote, and creates no Gig proposal, semantic file, commit, or active selection.
• One offline proposal lifecycle that allocates a Gig, provisions its private workpad, records semantic local-Git handoffs, and may approve an immutable version without starting a Run.
• Installed gigs, proposals, status, show, history, plan, workpad path, and open commands over explicit or active registered workpads. state.sqlite is rebuilt from committed journal authority when needed.
• A reusable black-box scenario harness for isolated homes, target and workpad manifests, Git state, subprocess recording, and fail-closed effect checks.
• Exact-byte golden vectors that the production implementation must preserve.
• Executable evidence for schema instances, graph semantics, canonicalization, concurrent journal sequencing, and bounded Phase 0 feasibility questions.
• A source suite covering canonical bytes, CLI/process isolation, setup, binding, workpads, journal recovery, proposal lifecycle, contract validators, model-port boundaries, and rebuildable index semantics.
• A wheel-level verifier that proves the exact eight schema resources and their SHA-256 identities survived packaging.

The V14 implementation plan defines the intended product. The command sheet contains both the implemented surface and planned design; this README and installed help state what works today. The cheat sheet is the copy-paste guide for the current installation and local workflow.

Install the published release

GigAI's first production pre-alpha release is 0.1.2. Once it is published, install the exact reviewed release on a clean macOS or Linux machine without cloning this repository:

uv tool install "gigai==0.1.2"
gigai --version
gigai --help

Choose every update deliberately by replacing the pinned version after reading its release notes; GigAI does not self-update:

uv tool install --reinstall "gigai==0.1.2"

Verify the source evidence

Python 3.11 or newer is required. Compatibility is continuously tested rather than capped without evidence; see ADR 0001.

uv sync --extra test
uv run pytest

All configured source tests must pass.

Configure, diagnose, bind, and inspect existing workpads

GigAI v1 currently supports macOS and Linux. Interactive setup reviews the selected machine-state directory, authoritative workpad mount, and structured editor command before applying anything:

gigai setup
gigai doctor
gigai doctor --json

For automation, gigai setup --non-interactive accepts explicit --home, --workpad-root, --editor, and repeated --editor-arg values. Credential configuration accepts references such as --credential-ref provider=environment:PROVIDER_API_TOKEN; it never accepts or copies the referenced value. Run gigai setup --help for the complete current contract.

After setup, bind the current Git repository without changing tracked content:

cd /path/to/repository
gigai init
gigai init --json

Git init writes only the ignored .gigai/project.toml binding and the user-local registry, while adding one /.gigai/ entry to .git/info/exclude. Existing dirty status and file bytes are preserved. An explicit non-Git directory is supported without creating .gigai inside it:

gigai init --target /path/to/non-git-directory

init does not create a Gig, workpad, journal, or remote. The offline create lifecycle owns Gig-ID allocation and invokes G05's private substrate; there is deliberately no standalone public provision or activate command.

Create and review a non-executable proposal locally:

gigai create research-gigai
gigai feedback <proposal-id> --text "clarify the verification"
gigai revise <proposal-id> --change "clarify the verification"
gigai approve <proposal-id>

Creation, feedback, revision, approval, and rejection write only the private workpad journal. Approval starts no Run and no target mutation.

The current offline read/open surface is:

gigai workpad path <gig-id>
gigai open <gig-id>
gigai open <gig-id> --with-target
gigai open --target
gigai gigs --json
gigai proposals <gig-id> --json
gigai status <gig-id> --json
gigai history <gig-id> --json
gigai plan <gig-id> --json

Without an explicit Gig ID, workpad path and open resolve the active private workpad. They return typed no_active_gig only when the bound target has no active Gig.

Canonical identity API

The shipped gigai.canonical module is the only product implementation of canonical rendering and SHA-256 identity. Its API keeps owned and imported bytes visibly separate:

from gigai.canonical import (
    canonical_json_bytes,
    canonical_json_digest,
    canonicalize_owned_text,
    digest_imported_bytes,
)

canonicalize_owned_text() applies GigAI's UTF-8/LF/final-newline contract. digest_imported_bytes() accepts bytes only and hashes them exactly as read; it never performs implicit decoding, encoding, or normalization. The same module owns canonical front matter, prefixed UUIDv4 IDs, and explicit active or requested Gig-version resolution.

Verify the built artifact

The wheel verifier is deliberately separate from the source test suite. Tests are not shipped in the wheel.

rm -rf dist
uv build
uv venv --python 3.11 .wheel-venv
version="$(python -c 'import tomllib; print(tomllib.load(open("pyproject.toml", "rb"))["project"]["version"])')"
set -- "dist/gigai-${version}-"*.whl
if [ "$#" -ne 1 ] || [ ! -f "$1" ]; then
  echo "expected exactly one built GigAI wheel for version ${version}" >&2
  exit 1
fi
uv pip install --python .wheel-venv/bin/python "$1"
.wheel-venv/bin/python tools/verify_installed_schemas.py
.wheel-venv/bin/python tools/verify_installed_canonical.py
.wheel-venv/bin/python tools/verify_installed_cli.py
.wheel-venv/bin/python tools/verify_installed_g03.py
.wheel-venv/bin/python tools/verify_installed_g04.py
.wheel-venv/bin/python tools/verify_installed_g05.py
.wheel-venv/bin/python tools/verify_installed_g06.py
.wheel-venv/bin/python tools/verify_installed_g07.py
.wheel-venv/bin/python tools/verify_installed_g08.py
.wheel-venv/bin/python tools/verify_installed_g09.py
.wheel-venv/bin/python tools/verify_installed_g11.py

Expected result:

verified 8 installed GigAI schemas
verified installed GigAI canonical identity API
verified installed GigAI CLI: help, version, setup, doctor, init, create, feedback, revise, approve, reject, gigs, proposals, status, show, history, plan, workpad path, check, and open only
verified installed GigAI G03 setup, idempotency, pack, and offline doctor
verified installed GigAI G04 Git and non-Git target binding
verified installed GigAI G05 private unborn workpad and read/open surface
verified installed GigAI G06 journal locking and recovery
verified installed GigAI G07 contract validators
verified installed GigAI G08 offline proposal lifecycle
verified installed GigAI G09 rebuildable index and read commands
verified installed GigAI G11 model invocation foundation

The lockfile is committed. CI and release verification use uv with --locked. A standards-based fallback remains available:

python -m venv .venv
source .venv/bin/activate
python -m pip install -e ".[test]"
python -m pytest

Repository map

The schema README documents canonical bytes, identifiers, version selection, journal ordering, and validation beyond JSON Schema.

Non-negotiable boundaries

• Proposals do not execute and cannot approve themselves.
• Approval creates an immutable version and starts no run.
• A run invocation grants authority for exactly one run.
• Workpads remain local and are never published by GigAI.
• SQLite is rebuildable; committed workpad records are authoritative.
• GigAI has no hosted history, background sync, or telemetry service.
• Provider and tool calls are explicit user-authorized exposure.

Roadmap

The next product work follows the canonical Phase 1 G00-G11 development goal graph, derived from the V14 plan. Product modules enter src/gigai/ only through an explicit implementation goal and acceptance tests. The installed entry point exposes only behavior that exists; planned command names are not shipped as placeholders for appearances.

Contributing and security

See CONTRIBUTING.md before changing contracts or research evidence. Report vulnerabilities according to SECURITY.md. Participation is governed by CODE_OF_CONDUCT.md.

Licensed under the Apache License 2.0.