feat(sandbox,kubernetes): warm pool gRPC PoC (Milestone 1)

.claude/agent-memory/arch-doc-writer/MEMORY.md

@@ -15,7 +15,9 @@
 - Sandbox SSH server: `crates/openshell-sandbox/src/ssh.rs`
 - Providers: `crates/openshell-providers/src/providers/` (per-provider modules)
 - Bootstrap: `crates/openshell-bootstrap/src/lib.rs` (cluster lifecycle)
-- Proto files: `proto/` directory (openshell.proto, sandbox.proto, datamodel.proto, inference.proto)
+- Warm pool activation: `crates/openshell-sandbox/src/activation.rs` (SupervisorService gRPC handler)
+- Health server: `crates/openshell-sandbox/src/health.rs` (HTTP /readyz endpoint)
+- Proto files: `proto/` directory (openshell.proto, sandbox.proto, datamodel.proto, inference.proto, supervisor.proto)
 
 ## Architecture Docs
 - Files renamed from numbered prefix format to descriptive names (e.g., `2 - server-architecture.md` -> `gateway-architecture.md`)

.gitignore

@@ -229,3 +229,9 @@ scripts/lint-mermaid/node_modules/
 # Nix
 /result
 /result-*
+
+# spex: generated/local files (only constitution is committed)
+**/.claude/
+**/.specify/**
+!**/.specify/memory/
+!**/.specify/memory/constitution.md

.specify/.pr-triage-state.json

@@ -0,0 +1,67 @@
+{
+  "4": {
+    "lastRun": "2026-07-11T06:27:01Z",
+    "comments": {
+      "3563279070": {
+        "handledAt": "2026-07-11T05:28:22Z",
+        "action": "accepted",
+        "ourReplyId": "3563288955"
+      },
+      "3563279071": {
+        "handledAt": "2026-07-11T05:28:23Z",
+        "action": "deferred",
+        "ourReplyId": "3563289158"
+      },
+      "3563279072": {
+        "handledAt": "2026-07-11T05:28:24Z",
+        "action": "deferred",
+        "ourReplyId": "3563289173"
+      },
+      "3563279074": {
+        "handledAt": "2026-07-11T05:28:24Z",
+        "action": "deferred",
+        "ourReplyId": "3563289191"
+      },
+      "3563290363": {
+        "handledAt": "2026-07-11T06:28:29Z",
+        "action": "accepted",
+        "ourReplyId": "3563441771"
+      },
+      "3563290364": {
+        "handledAt": "2026-07-11T06:28:30Z",
+        "action": "accepted",
+        "ourReplyId": "3563441826"
+      },
+      "3563290365": {
+        "handledAt": "2026-07-11T06:28:31Z",
+        "action": "accepted",
+        "ourReplyId": "3563441883"
+      },
+      "3563290371": {
+        "handledAt": "2026-07-11T06:28:32Z",
+        "action": "accepted",
+        "ourReplyId": "3563441916"
+      }
+    }
+  },
+  "13": {
+    "lastRun": "2026-07-11T11:31:15Z",
+    "comments": {
+      "3564029644": {
+        "handledAt": "2026-07-11T11:40:30Z",
+        "action": "accepted",
+        "ourReplyId": "3564060891"
+      },
+      "3564029695": {
+        "handledAt": "2026-07-11T11:40:30Z",
+        "action": "deferred",
+        "ourReplyId": "3564061185"
+      },
+      "3564029715": {
+        "handledAt": "2026-07-11T11:40:30Z",
+        "action": "accepted",
+        "ourReplyId": "3564061210"
+      }
+    }
+  }
+}

.specify/.spex-state

@@ -0,0 +1,12 @@
+{
+  "mode": "ship",
+  "stage": "specify",
+  "stage_index": 0,
+  "total_stages": 8,
+  "ask": "smart",
+  "started_at": "2026-07-11T09:24:11Z",
+  "retries": 0,
+  "status": "running",
+  "brainstorm_file": "brainstorm/06-warm-pool-grpc-poc.md",
+  "feature_branch": "main"
+}

.specify/extensions.yml

@@ -0,0 +1,290 @@
+installed: []
+settings:
+  auto_execute_hooks: true
+hooks:
+  before_constitution:
+  - extension: git
+    command: speckit.git.initialize
+    enabled: true
+    optional: false
+    prompt: Execute speckit.git.initialize?
+    description: Initialize Git repository before constitution setup
+    condition: null
+  before_specify:
+  - extension: git
+    command: speckit.git.feature
+    enabled: true
+    optional: false
+    prompt: Execute speckit.git.feature?
+    description: Create feature branch before specification
+    condition: null
+  before_clarify:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit outstanding changes before clarification?
+    description: Auto-commit before spec clarification
+    condition: null
+  - extension: spex
+    command: speckit.spex.flow-state
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex.flow-state?
+    description: Mark clarify as active in flow state
+    condition: null
+  before_plan:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit outstanding changes before planning?
+    description: Auto-commit before implementation planning
+    condition: null
+  - extension: spex
+    command: speckit.spex.flow-state
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex.flow-state?
+    description: Mark plan as active in flow state
+    condition: null
+  - extension: spex-teams
+    command: speckit.spex-teams.research
+    enabled: true
+    optional: true
+    prompt: Run parallel codebase research?
+    description: Parallel codebase research during planning via Agent Teams
+    condition: null
+  before_tasks:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit outstanding changes before task generation?
+    description: Auto-commit before task generation
+    condition: null
+  - extension: spex
+    command: speckit.spex.flow-state
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex.flow-state?
+    description: Mark tasks as active in flow state
+    condition: null
+  before_implement:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit outstanding changes before implementation?
+    description: Auto-commit before implementation
+    condition: null
+  - extension: spex
+    command: speckit.spex.flow-state
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex.flow-state?
+    description: Mark implement as active in flow state
+    condition: null
+  - extension: spex-worktrees
+    command: speckit.spex-worktrees.manage
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex-worktrees.manage?
+    description: Verify worktree isolation before implementation
+    condition: null
+  - extension: spex-collab
+    command: speckit.spex-collab.phase-split
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex-collab.phase-split?
+    description: Present phase split proposal and per-phase implementation instructions
+    condition: null
+  before_checklist:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit outstanding changes before checklist?
+    description: Auto-commit before checklist generation
+    condition: null
+  before_analyze:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit outstanding changes before analysis?
+    description: Auto-commit before analysis
+    condition: null
+  before_taskstoissues:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit outstanding changes before issue sync?
+    description: Auto-commit before tasks-to-issues conversion
+    condition: null
+  after_constitution:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit constitution changes?
+    description: Auto-commit after constitution update
+    condition: null
+  after_specify:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit specification changes?
+    description: Auto-commit after specification
+    condition: null
+  - extension: spex
+    command: speckit.spex.flow-state
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex.flow-state?
+    description: Initialize flow state tracking after specification
+    condition: null
+  - extension: spex-gates
+    command: speckit.spex-gates.review-spec
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex-gates.review-spec?
+    description: Review spec soundness after specification
+    condition: null
+  - extension: spex-worktrees
+    command: speckit.spex-worktrees.manage
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex-worktrees.manage?
+    description: Create git worktree after specification
+    condition: null
+  after_clarify:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit clarification changes?
+    description: Auto-commit after spec clarification
+    condition: null
+  - extension: spex
+    command: speckit.spex.flow-state
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex.flow-state?
+    description: Mark clarification complete in flow state
+    condition: null
+  after_plan:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit plan changes?
+    description: Auto-commit after implementation planning
+    condition: null
+  - extension: spex
+    command: speckit.spex.flow-state
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex.flow-state?
+    description: Clear running state after planning
+    condition: null
+  after_tasks:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit task changes?
+    description: Auto-commit after task generation
+    condition: null
+  - extension: spex
+    command: speckit.spex.flow-state
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex.flow-state?
+    description: Clear running state after task generation
+    condition: null
+  - extension: spex-gates
+    command: speckit.spex-gates.review-plan
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex-gates.review-plan?
+    description: Review plan and task quality after task generation
+    condition: null
+  - extension: spex-collab
+    command: speckit.spex-collab.reviewers
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex-collab.reviewers?
+    description: Generate REVIEWERS.md after task generation
+    condition: null
+  after_implement:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit implementation changes?
+    description: Auto-commit after implementation
+    condition: null
+  - extension: spex
+    command: speckit.spex.flow-state
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex.flow-state?
+    description: Mark implementation complete in flow state
+    condition: null
+  - extension: spex-gates
+    command: speckit.spex-gates.review-code
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex-gates.review-code?
+    description: Review code compliance after implementation
+    condition: null
+  - extension: spex-deep-review
+    command: speckit.spex-deep-review.run
+    enabled: true
+    optional: true
+    prompt: Run deep multi-perspective review?
+    description: Multi-agent code review after implementation
+    condition: null
+  after_checklist:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit checklist changes?
+    description: Auto-commit after checklist generation
+    condition: null
+  after_analyze:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit analysis results?
+    description: Auto-commit after analysis
+    condition: null
+  after_taskstoissues:
+  - extension: git
+    command: speckit.git.commit
+    enabled: true
+    optional: true
+    prompt: Commit after syncing issues?
+    description: Auto-commit after tasks-to-issues conversion
+    condition: null
+  after_finish:
+  - extension: spex
+    command: speckit.spex.flow-state
+    enabled: true
+    optional: false
+    prompt: Execute speckit.spex.flow-state?
+    description: Remove flow state file after feature completion
+    condition: null
+  before_finish:
+  - extension: spex-detach
+    command: speckit.spex-detach.detach
+    enabled: false
+    optional: true
+    prompt: Archive specs to project-specs repo before finishing?
+    description: Copy spec artifacts to configured archive path
+    condition: null