@codetreker/daynight 0.25.2 → 0.26.0

package/dist/commands/skill/skills/using-daynight/references/task-content.md

@@ -1,52 +1,88 @@
 # Task content standard
 
 Read this reference when creating, breaking down, handing off, or executing a
-task. An isolated executor does not inherit the originating chat, memory,
-private worktree, temporary files, or session-only authorization. The description
-and its readable references must together explain the current task completely.
-Use the target repository's document and language rules.
+task. The description and its readable references must explain the task without
+the originating chat, memory, private worktree, or temporary files. Use the
+target repository's document and language rules.
+
+## Task and session boundary
+
+Tasks describe what must be achieved and delivered. Sessions hold how the task
+is executed or discussed. Keep task definitions, required inputs, deliverables,
+acceptance criteria, and resulting artifacts in task content. Keep execution and
+discussion plans, steps, tool choices, collaboration, operational authorization,
+progress, blockers, and recovery context in the session. Apply this boundary to
+descriptions, attachments, and referenced task material.
+
+A design supplied as a required input or produced as the task's deliverable is
+task content; the session's plan for producing that deliverable is session
+context. Classify information by its purpose, not its filename or words such as
+"plan", "method", or "steps". A requested migration design, test strategy, or
+runbook can be a task deliverable. Do not invent such a deliverable to upload a
+session checkpoint or execution log.
+
+| Information | Location |
+|---|---|
+| Required sorting behavior; an upstream API contract; a design task's current architecture | Task definition, input, or result |
+| "Register only; do not execute or enable agents in this session"; chosen commands, agent assignments, review rounds | Session context; current operations still obey its restrictions |
+| Required deliverable platform or compatibility threshold; a human-confirmation completion condition | Task scope or acceptance criteria |
+| Authorization to push or merge; CI/review progress, waiting items, claim/worktree/head and next action | Session context or the corresponding platform |
+| A final deliverable's immutable revision; an acceptance conclusion and the key observations needed to support it | Task result, without the execution history |
 
-Distinguish task requirements from session-only constraints, and record only
-task-specific information in the task.
+Operational authorization does not become task content because another session
+might need it. Preserve it in the host's session state or existing local
+checkpoint. Missing authorization or assignment cannot be reconstructed from a
+task's description, attachments, acceptance state, or status.
 
-## Six content requirements
+## Task definition and results
 
-These are content requirements, not six mandatory headings. Provide each item
-in the description, in clearly referenced documents, or through a mixture of
-both. Complete inline content needs no primary attachment; do not duplicate
-complete documents or keep empty template sections.
+Provide the following substantive information in the description, clearly
+referenced documents, or a mixture of both. These are not mandatory headings.
+Complete inline content needs no primary attachment; do not duplicate complete
+documents or keep empty template sections.
 
-| Content | Required information |
+| Definition | Required information |
 |---|---|
 | Objective and requirements | The concrete problem, intended outcome, and required behavior. Use requirement IDs when they help acceptance. |
-| Scope and deliverables | This task's responsibility, outputs, constraints, and boundaries. Identify its applicable parts of shared documents. |
-| Solution and design | The approach, decisions, and architecture constraints needed for this stage, or their actual source. A design-producing task states its inputs, questions, outputs, and confirmation gate. |
-| Input and output contracts | Actual producers or consumers, delivery and reading locations, exchanged structure and semantics, availability, and verification. Explicitly say when there is no task-to-task exchange. |
-| Acceptance criteria and verification | Observable completion conditions, methods, applicable success/failure/boundary cases, and the location of evidence. Requirement and acceptance IDs may establish correspondence. |
-| Sources | Accurate source identities, applicable sections, and purpose for required content and supporting material. One source can cover several items. |
+| Scope and constraints | This task's responsibility and delivery boundaries, including constraints on the product or deliverable and applicable parts of shared documents. |
+| Inputs and sources | Actual required requirements, designs, prototypes, protocols, or deliveries, with accurate source identities, applicable sections, and purpose. |
+| Deliverables and contracts | Expected outputs, delivery and reading locations, and the structure and semantics needed by actual producers or consumers. Explicitly say when there is no task-to-task exchange. |
+| Acceptance criteria | Observable completion conditions, applicable success/failure/boundary behavior, required thresholds, and any human-confirmation gate. |
+
+Save results as they are produced: current reviewable requirements or designs,
+actual deliverables, acceptance conclusions, defects, and material limitations.
+An immutable revision or verified resource location may identify a result.
+Keep the accepted content and its effective state, not successive discussion or
+confirmation records. Acceptance results may include the assessed source and
+key observations needed to understand the conclusion; commands, debugging
+history, CI logs, and review handling remain execution context.
+
+A task does not universally require a separate solution, implementation plan,
+verification procedure, confirmation record, or evidence location. Its starting
+content depends on the stage and actual inputs. Do not require unfinished
+results or prefilled result sections at registration.
 
 The description must identify the concrete current work and responsibility and
 make its content sources discoverable. Judge completeness from the description
 and the contents actually read, not heading presence or whether the description
 repeats the documents. A bare generic problem plus unexplained links, "see the
-previous discussion", unreadable resources, and missing decisions are insufficient.
+previous discussion", unreadable resources, and missing required decisions are
+insufficient. Absence of a session execution plan is not a task-content gap.
 
-## Content ownership and evidence
+## Content ownership
 
 Each detailed explanation has one owner: the description, a referenced task
 attachment, or its actual shared source. Keep shared requirements, architecture,
-and protocols at their owning task. Record this task's user confirmations,
-acceptance conclusions, and delivery evidence in an explicitly identified
-location in its own description or attachments; do not leave them only in chat
-or mix them into shared design. Rewrite the owning material coherently when its
-facts change rather than accumulating an execution log.
-
-For example, a description may identify an upload retry task, reference its own
-`plan.md` for requirements R1–R3 and acceptance AC1–AC4, identify the architecture
-task and `design/upload.md` sections for shared interfaces, and place this task's
-acceptance evidence in `plan.md`. Those identities and paths must be real and
-verified. A simple maintenance task can instead state the approach, contract,
-acceptance, and evidence location inline.
+and protocols at their owning task. Save this task's results at their actual
+owner and make them discoverable from its description. Rewrite the owning
+material coherently when its facts change; do not accumulate an execution log.
+
+For example, an upload retry task may define its required behavior and
+acceptance inline and reference the architecture task's `design/upload.md` for
+shared interfaces. A design task may own that architecture in its description
+or an actual attachment. Neither needs an attachment containing the session's
+implementation steps. Those source identities and paths must be real and
+verified.
 
 ## Resolve and read sources
 
@@ -58,13 +94,13 @@ owning task ID and content location: its description and applicable sections for
 inline content, or the complete attachment path for an actual attachment. Name
 the whole description when all of it applies; sections only delimit a larger
 source and do not require invented headings. Read source task descriptions with
-`task show --json`; list and read attachment
-contents separately with the installed attachment commands. Repository documents
-need accurate paths and the required verified immutable source revision. State
-the sections, requirements, or interfaces applicable to this task when a source
-covers more. Do not invent an attachment path for inline content, relocate or
-copy it merely to satisfy a reference format, or invent a URL scheme, cross-task
-relative link, or fixed service host.
+`task show --json`; list and read attachment contents separately with the
+installed attachment commands. Repository documents need accurate paths and the
+required verified immutable source revision. State the sections, requirements,
+or interfaces applicable to this task when a source covers more. Do not invent
+an attachment path for inline content, relocate or copy it merely to satisfy a
+reference format, or invent a URL scheme, cross-task relative link, or fixed
+service host.
 
 Read the required source contents, including further references needed for the
 current stage. Track already-read resource identities to avoid circular reading.
@@ -102,19 +138,22 @@ Necessary direct prerequisites remain in the complete `dependsOn` set and its
 [the handbook's dependency reduction rule](handbook.md#dependency-reduction).
 Contract source identities do not form a second complete dependency list, and a
 source reference does not create an execution dependency. Use
-[the handbook](handbook.md) for relationship semantics.
+[the handbook](handbook.md) for relationship semantics. Existing status, PR,
+permission, platform, and worker fields keep their own service semantics; do not
+copy them into prose as a second operational record.
 
 ## Apply the current stage
 
-| Stage | Sufficient starting content | Stage outputs |
+| Stage | Sufficient starting content | Stage results |
 |---|---|---|
-| Requirements discussion | Known problem, outcome, scope, open questions, and user-confirmation method | Complete requirements, applicable prototype, and user confirmation |
-| Solution or architecture discussion | Confirmed requirements, applicable prototype, design questions, and confirmation method | Design and candidate breakdown; actual registration after confirmation |
-| Implementation or document delivery | Defined requirements and scope, delivered design and applicable prototype, contracts, and acceptance | The scoped deliverable and its delivery evidence |
-| Independent final acceptance | Whole agreed requirements and confirmed changes, actual deliveries and evidence sources | Requirement-based conclusions, defects, and unverified items |
+| Requirements discussion | Known problem, outcome, scope, constraints, open requirements questions, and completion conditions | Current and confirmed requirements and applicable prototype |
+| Solution or architecture discussion | Confirmed requirements, applicable prototype, design questions, intended deliverables, and completion conditions | Current architecture, key decisions, and delivery breakdown |
+| Implementation or document delivery | Defined requirements and scope, required design and applicable prototype, contracts, deliverables, and acceptance criteria | The scoped deliverable and its actual location or version |
+| Independent final acceptance | Whole agreed requirements and confirmed changes, actual deliveries, and acceptance criteria | Requirement-based conclusions, defects, and unverified items |
 
 A stage's unfinished outputs are not prerequisites for starting that stage.
-Preserve human confirmation as an actual completion condition where required.
+Preserve human confirmation as an actual completion condition where required;
+the execution protocol handles the confirmation action and advancement.
 Explicit prerequisite-produced implementation outputs may still be pending when
 preparing a blocked task, provided the necessary design and agreed interfaces
 already define the successor's work. Do not label future output as an existing
@@ -122,12 +161,18 @@ readable input. Execution still waits for real prerequisites and required inputs
 
 ## Check sufficiency
 
-Before reporting creation, breakdown, or handoff ready, check all six items,
-source readability and applicability, task-specific evidence ownership, and the
-stage's additional conditions. Unknown requirements, design choices, acceptance
-thresholds, and interface decisions are concrete blockers, not details to invent.
-Only organize confirmed information within existing authorization. A material
-scope or behavior change requires user confirmation.
+Before reporting creation, breakdown, or handoff ready, check the task
+definition, source readability and applicability, existing result ownership, and
+the stage's additional conditions. Check both directions: session context stays
+out, and actual requirements, required design inputs, and task results remain
+complete. Unknown requirements, design choices, acceptance thresholds, and
+interface decisions are concrete blockers, not details to invent. Only organize
+confirmed information within existing authorization. A material scope or
+behavior change requires user confirmation.
+
+Apply the boundary when reading existing material and when authoring or
+rewriting authorized task content. It does not authorize bulk edits of historical
+tasks or automatic changes to fields, permissions, or recorded history.
 
 Task versions protect task metadata, not independently mutable attachments or
 cross-task references. Verify mutable contents before enabling permission and

package/dist/commands/skill/skills/using-daynight/references/task-execution.md

@@ -1,19 +1,20 @@
 # Shared task execution
 
 Read this reference after the selected execution mode establishes the task's
-identity. It owns required inputs, authorized work, delivery, evidence, and
+identity. It owns required inputs, authorized work, delivery, results, and
 acceptance readiness. The execution mode owns starting or resuming the task,
 its final status operation, and returning to its caller.
 
 ## Read the task and stage inputs
 
 Read the complete task and its actual required references under
-[the task content standard](task-content.md), including the solution, acceptance
-criteria, and explicit task-owned confirmation/evidence location. Its Markdown
-description must identify the concrete current work, responsibility, and content
-sources. Complete inline content needs no primary attachment; document-owned
-and mixed organization are valid when their combined contents satisfy the same
-six requirements.
+[the task content standard](task-content.md), including the task definition,
+actual required design inputs, acceptance criteria, and existing results. Its
+Markdown description must identify the concrete current work, responsibility,
+and content sources. Complete inline content needs no primary attachment;
+document-owned and mixed organization are valid when their combined contents
+provide the stage-appropriate task definition. A missing session execution plan
+is not a missing task input.
 
 Resolve description-relative links and images from the current task's attachment
 root; links inside a Markdown attachment use its own directory. Resolve real
@@ -65,8 +66,9 @@ apply the shared rule to verification methods, temporary helpers, and result
 ownership.
 
 Follow the target repository's instructions for worktrees, implementation,
-review, validation, and delivery. Use the task's stage-appropriate solution and
+review, validation, and delivery. Use the task's required design inputs and
 acceptance criteria, including applicable final-style prototype interactions.
+Keep the implementation or discussion plan in the session.
 Requirements discussion defines the problem without architecture decisions or
 production implementation. Solution discussion keeps its draft architecture and
 breakdown in its owning task. Preserve the Goal's user-confirmation gates:
@@ -78,24 +80,27 @@ Resolve material changes to the agreed solution or acceptance within the current
 authorization. Rewrite the owning artifact and affected task summaries and input
 references coherently. Preserve requirements; do not silently weaken acceptance.
 Descriptions remain self-contained Markdown task summaries. Preserve valid
-syntax, original content, and actual resource references during full-field
-updates; confirm new or replaced resources before linking them. Dependency edits
+syntax, required task content, and actual resource references during full-field
+updates; confirm new or replaced resources before linking them. Apply the content
+boundary to authorized rewrites without modifying unrelated historical tasks.
+Dependency edits
 must follow the handbook's CLI replacement contract: read full D/E, retain needed
 ordinary D−E and external E declarations, submit their intended complete sets
 with the observed version, and read back both. Omit all dependency options for
-unrelated metadata updates. Keep detailed content at its identified owner and
-confirmations and evidence at their explicit task-owned location; shared inputs
-remain at their verified source.
+unrelated metadata updates. Keep detailed task content and produced results at
+their identified owners; shared inputs remain at their verified source.
 
 Advance only this task. Subagents collaborate on it, and waiting for CI, review,
 approval, or merge remains part of it. Keep all required delivery PR URLs and
 titles in the complete `properties.pullRequests` list, preserving existing
-entries. Record acceptance results and necessary delivery evidence, including
-merge commits, at this task's identified evidence location against the
-corresponding acceptance criteria. Rewrite current evidence coherently rather
-than accumulating an execution log. Keep operational progress, blockers, waiting
-items, and next action in the conversation or existing execution checkpoint,
-retaining the task ID and needed PR and workspace references.
+entries. Save actual task results and acceptance conclusions at their owners.
+Use verified artifact locations or immutable revisions when needed to identify
+the final deliverable. Rewrite current results coherently rather than
+accumulating an execution log. Keep operational authorization, implementation
+steps, CI/review/merge handling, progress, blockers, waiting items, and next
+action in the conversation or existing execution checkpoint, retaining the task
+ID and needed PR and workspace references. Recover authorization and assignment
+from that session context, not task material or status.
 
 ## Confirm acceptance readiness
 
@@ -122,9 +127,10 @@ completion pending and successors blocked.
 
 For tasks without a development or PR delivery path, use their stated stage
 acceptance. For [final acceptance](../SKILL.md#final-acceptance), also apply the
-shared whole-task or whole-Goal completion rule. In every case, confirm required
-evidence is recorded and readable before returning to the execution mode's
-completion operation. Discussion completion establishes that stage's accepted
+shared whole-task or whole-Goal completion rule. In every case, confirm the
+required deliverables and acceptance conclusions are readable before returning
+to the execution mode's completion operation; retain operational verification
+in the session. Discussion completion establishes that stage's accepted
 output; it does not establish whole-Goal completion.
 
 ## Preserve waiting context

package/dist/commands/worker/backend.d.ts

@@ -0,0 +1,7 @@
+import type { AgentControlMode, WorkerAgent } from "../../api/types.js";
+/** Validate effective arguments before a claim can create native execution responsibility. */
+export declare const requireImplementedWorkerBackend: (configuration: {
+    agent: WorkerAgent;
+    agentControlMode?: AgentControlMode;
+    args?: readonly string[];
+} | null) => void;

package/dist/commands/worker/backend.js

@@ -0,0 +1,7 @@
+import { parseProviderArguments } from "../controller/providers/projection.js";
+/** Validate effective arguments before a claim can create native execution responsibility. */
+export const requireImplementedWorkerBackend = (configuration) => {
+    if (configuration?.agentControlMode === "web" && configuration.args !== undefined)
+        parseProviderArguments(configuration.agent, configuration.args);
+};
+//# sourceMappingURL=backend.js.map

package/dist/commands/worker/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../../src/commands/worker/backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAG/E,8FAA8F;AAC9F,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,aAA2G,EAAQ,EAAE;IACnK,IAAI,aAAa,EAAE,gBAAgB,KAAK,KAAK,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS;QAAE,sBAAsB,CAAC,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;AACrJ,CAAC,CAAC"}

package/dist/commands/worker/backends/grant-renewal.d.ts

@@ -0,0 +1,13 @@
+import { readLaunchTicket } from "../../controller/launch-ticket.js";
+import type { WebExecutionStore } from "./web-store.js";
+import type { createWebControllerLauncher } from "./web-process.js";
+/** Keep native channels authorized independently of claim-discovery polling. */
+export declare const maintainWorkerControllerGrants: (options: {
+    homeDirectory: string;
+    serverOrigin: string;
+    store: Pick<WebExecutionStore, "listUnfinishedTasks">;
+    launcher: Pick<ReturnType<typeof createWebControllerLauncher>, "refreshGrant">;
+    signal: AbortSignal;
+    onError(message: string): void;
+    readTicket?: typeof readLaunchTicket;
+}) => Promise<void>;

package/dist/commands/worker/backends/grant-renewal.js

@@ -0,0 +1,42 @@
+import { setTimeout as delay } from "node:timers/promises";
+import { readLaunchTicket } from "../../controller/launch-ticket.js";
+/** Keep native channels authorized independently of claim-discovery polling. */
+export const maintainWorkerControllerGrants = async (options) => {
+    const readTicket = options.readTicket ?? readLaunchTicket;
+    const failures = new Map();
+    while (!options.signal.aborted) {
+        const renewals = await Promise.allSettled(options.store.listUnfinishedTasks().map(async (task) => {
+            if (options.signal.aborted)
+                return;
+            const execution = task.webExecution;
+            if (task.serverOrigin !== options.serverOrigin || !execution?.ticketPath || execution.launchSubmission === "not-submitted" || task.cleanup?.agentStopped)
+                return;
+            try {
+                const ticket = await readTicket(options.homeDirectory, execution.launchId);
+                if (ticket.executionId !== execution.executionId || ticket.executionGeneration !== execution.executionGeneration || ticket.controllerInstanceId !== execution.controllerInstanceId || ticket.claimId !== task.claimId)
+                    throw new Error("Controller credential renewal has conflicting execution evidence.");
+                await options.launcher.refreshGrant(task, ticket, options.signal);
+                failures.delete(execution.executionId);
+            }
+            catch (error) {
+                if (options.signal.aborted)
+                    return;
+                const message = error instanceof Error ? error.message : "Controller credential renewal failed.";
+                if (failures.get(execution.executionId) !== message)
+                    options.onError(message);
+                failures.set(execution.executionId, message);
+            }
+        }));
+        const rejected = renewals.filter(result => result.status === "rejected");
+        if (rejected.length > 0)
+            throw new AggregateError(rejected.map(result => result.reason), "Controller credential renewal could not finish safely.");
+        try {
+            await delay(30_000, undefined, { signal: options.signal });
+        }
+        catch (error) {
+            if (!options.signal.aborted)
+                throw error;
+        }
+    }
+};
+//# sourceMappingURL=grant-renewal.js.map

package/dist/commands/worker/backends/grant-renewal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-renewal.js","sourceRoot":"","sources":["../../../../src/commands/worker/backends/grant-renewal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAIrE,gFAAgF;AAChF,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,EAAE,OAKpD,EAAiB,EAAE;IAClB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YAC7F,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC;YACpC,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,IAAI,CAAC,SAAS,EAAE,UAAU,IAAI,SAAS,CAAC,gBAAgB,KAAK,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,YAAY;gBAAE,OAAO;YACjK,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAC3E,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,CAAC,mBAAmB,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS,CAAC,oBAAoB,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;gBAC5S,MAAM,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACnC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC;gBACjG,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,OAAO;oBAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9E,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACzE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,wDAAwD,CAAC,CAAC;QACnJ,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QACnE,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IAC7D,CAAC;AACH,CAAC,CAAC"}

package/dist/commands/worker/backends/session-api.d.ts

@@ -0,0 +1,66 @@
+import { SESSION_PROTOCOL } from "../../../session/protocol.js";
+import { type ControllerGrantResponse } from "../../../session/controller-protocol.js";
+import type { LocalTask, WebExecutionState } from "./web-types.js";
+export declare const createWorkerSessionApi: (serverOrigin: string, serverToken: string) => {
+    verifyUnregistered: (identity: {
+        projectId: string;
+        taskId: string;
+        claimId: string;
+    }, signal: AbortSignal) => Promise<void>;
+    verifySupport: (provider: string, signal: AbortSignal) => Promise<void>;
+    register: (task: LocalTask, execution: WebExecutionState, signal: AbortSignal) => Promise<{
+        readonly claimId: string;
+        readonly testExecutionId?: never;
+    } & {
+        readonly sessionId: string;
+        readonly executionGeneration: import("../../../session/protocol.js").DecimalSequence;
+    } & {
+        readonly connectionEpoch: import("../../../session/protocol.js").DecimalSequence;
+    } & {
+        readonly controls?: import("../../../session/controls.js").SessionControls;
+        readonly turnStartedAt?: string | null;
+        readonly protocol: typeof SESSION_PROTOCOL;
+        readonly schemaVersion: typeof import("../../../session/protocol.js").SESSION_SCHEMA_VERSION;
+        readonly projectionVersion: typeof import("../../../session/protocol.js").SESSION_PROJECTION_VERSION;
+        readonly identity: ({
+            readonly projectId: string;
+            readonly taskId: string;
+            readonly workerId: string;
+            readonly worktreeId: string;
+            readonly ownerUserId?: never;
+        } | {
+            readonly ownerUserId: string;
+            readonly projectId?: never;
+            readonly taskId?: never;
+            readonly workerId?: never;
+            readonly worktreeId?: never;
+        }) & {
+            readonly controllerId: string;
+            readonly controllerInstanceId: string;
+            readonly agentControlMode: "web";
+            readonly provider: import("../../../session/protocol.js").SessionProvider;
+            readonly nativeSessionId: string | null;
+        };
+        readonly sessionRevision: import("../../../session/protocol.js").DecimalSequence;
+        readonly historyEpoch: string;
+        readonly lastEventSeq: import("../../../session/protocol.js").DecimalSequence;
+        readonly lastTimelineSeq: import("../../../session/protocol.js").DecimalSequence;
+        readonly initialInputState: import("../../../session/protocol.js").InitialInputState;
+        readonly synchronized: boolean;
+        readonly lifecycle: "active" | "draining" | "archived";
+        readonly connectionState: "connected" | "disconnected" | "synchronizing";
+        readonly activity: "initializing" | "idle" | "working" | "waiting_input" | "stopped" | "unknown";
+        readonly currentTurnId: string | null;
+        readonly capabilities: import("../../../session/protocol.js").SessionCapabilities;
+        readonly operations: import("../../../session/protocol.js").SessionOperations;
+        readonly cleanupInteractionIds?: readonly string[];
+    }>;
+    grant: (task: LocalTask, execution: WebExecutionState, signal: AbortSignal, previous?: {
+        generation: string;
+        instanceId: string;
+        recordId: string;
+        stoppedAt: string;
+    }) => Promise<ControllerGrantResponse>;
+};
+export declare const writeControllerCredential: (filename: string, grant: ControllerGrantResponse) => Promise<void>;
+export type WorkerSessionApi = ReturnType<typeof createWorkerSessionApi>;

package/dist/commands/worker/backends/session-api.js

@@ -0,0 +1,84 @@
+import { chmod, mkdir, rename, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
+import { SESSION_PROTOCOL } from "../../../session/protocol.js";
+import { parseRegistrationResponse, parseControllerGrantResponse, parseCurrentSessionResponse } from "../../../session/controller-protocol.js";
+export const createWorkerSessionApi = (serverOrigin, serverToken) => {
+    const request = async (target, body, signal, method = "POST") => {
+        const response = await fetch(`${serverOrigin}${target}`, { method, headers: { authorization: `Bearer ${serverToken}`, "content-type": "application/json" }, ...(body === undefined ? {} : { body: JSON.stringify(body) }), signal: AbortSignal.any([signal, AbortSignal.timeout(30000)]) });
+        const chunks = [];
+        let size = 0;
+        if (response.body !== null) {
+            const reader = response.body.getReader();
+            try {
+                while (true) {
+                    const { done, value } = await reader.read();
+                    if (done)
+                        break;
+                    size += value.byteLength;
+                    if (size > 2 * 1024 * 1024) {
+                        await reader.cancel();
+                        throw new Error("Session registration response exceeds its limit.");
+                    }
+                    chunks.push(value);
+                }
+            }
+            finally {
+                reader.releaseLock();
+            }
+        }
+        const raw = Buffer.concat(chunks).toString("utf8");
+        if (!response.ok)
+            throw new Error(`Session registration failed with HTTP ${response.status}; read back the original registration before replacing its identity.`);
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            throw new Error("Session registration returned invalid JSON; the result is unconfirmed.");
+        }
+    };
+    const prefix = (task) => `/api/v1/projects/${task.projectId}/tasks/${task.taskId}/sessions`;
+    return {
+        verifyUnregistered: async (identity, signal) => {
+            const result = parseCurrentSessionResponse(await request(`/api/v1/projects/${identity.projectId}/tasks/${identity.taskId}/sessions/current`, undefined, signal, "GET"));
+            if (result.status !== "not_registered" || result.claimId !== identity.claimId)
+                throw new Error("The original Web launch provenance is missing; an existing or superseded Session cannot be recreated or deleted. Restore its execution evidence.");
+        },
+        verifySupport: async (provider, signal) => {
+            const response = await fetch(`${serverOrigin}/api/v1/session-capabilities`, { headers: { authorization: `Bearer ${serverToken}` }, signal: AbortSignal.any([signal, AbortSignal.timeout(10000)]) });
+            if (!response.ok)
+                throw new Error("This service has not confirmed Web session protocol support; no claim was submitted.");
+            const value = await response.json();
+            if (value.protocol !== SESSION_PROTOCOL || value.schemaVersion !== 1 || value.projectionVersion !== 1 || !Array.isArray(value.providers) || !value.providers.includes(provider))
+                throw new Error("The service Web session protocol or provider is incompatible; no claim was submitted.");
+        },
+        register: async (task, execution, signal) => {
+            if (task.configuration?.agentControlMode !== "web")
+                throw new Error("Session registration requires a supported web execution.");
+            const input = { protocol: SESSION_PROTOCOL, registrationId: execution.registrationId, claimId: task.claimId, workerId: task.workerId, worktreeId: task.worktreeId, provider: task.configuration.agent, controllerId: execution.controllerId, controllerInstanceId: execution.controllerInstanceId };
+            const result = parseRegistrationResponse(await request(prefix(task), input, signal));
+            const session = result.session;
+            if (session.claimId !== task.claimId || session.identity.taskId !== task.taskId || session.identity.projectId !== task.projectId || session.identity.workerId !== task.workerId || session.identity.worktreeId !== task.worktreeId || session.identity.provider !== task.configuration.agent || session.identity.controllerId !== execution.controllerId || session.identity.controllerInstanceId !== execution.controllerInstanceId)
+                throw new Error("Registered session does not match the frozen execution.");
+            return session;
+        },
+        grant: async (task, execution, signal, previous) => {
+            if (execution.sessionId === null)
+                throw new Error("Controller authorization requires its registered session.");
+            const input = { protocol: SESSION_PROTOCOL, claimId: task.claimId, controllerId: execution.controllerId, controllerInstanceId: execution.controllerInstanceId, executionGeneration: execution.executionGeneration, kind: execution.launchSubmission === "not-submitted" ? "bootstrap" : "reconnect", previousGeneration: previous?.generation ?? null, stopProof: previous === undefined ? null : { recordId: previous.recordId, previousControllerInstanceId: previous.instanceId, stoppedAt: previous.stoppedAt } };
+            const grant = parseControllerGrantResponse(await request(`${prefix(task)}/${execution.sessionId}/controller-grant`, input, signal));
+            if (grant.sessionId !== execution.sessionId || grant.claimId !== task.claimId || grant.executionGeneration !== execution.executionGeneration || grant.controllerId !== execution.controllerId || grant.controllerInstanceId !== execution.controllerInstanceId)
+                throw new Error("Controller grant does not match the frozen execution.");
+            return grant;
+        },
+    };
+};
+export const writeControllerCredential = async (filename, grant) => {
+    await mkdir(path.dirname(filename), { recursive: true, mode: 0o700 });
+    await chmod(path.dirname(filename), 0o700);
+    const temporary = `${filename}.${randomUUID()}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(grant)}\n`, { flag: "wx", mode: 0o600 });
+    await rename(temporary, filename);
+    await chmod(filename, 0o600);
+};
+//# sourceMappingURL=session-api.js.map

package/dist/commands/worker/backends/session-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-api.js","sourceRoot":"","sources":["../../../../src/commands/worker/backends/session-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,2BAA2B,EAAuF,MAAM,yCAAyC,CAAC;AAEpO,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,YAAoB,EAAE,WAAmB,EAAE,EAAE;IAClF,MAAM,OAAO,GAAG,KAAK,EAAE,MAAc,EAAE,IAAa,EAAE,MAAmB,EAAE,MAAM,GAAG,MAAM,EAAoB,EAAE;QAC9G,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5R,MAAM,MAAM,GAAiB,EAAE,CAAC;QAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,OAAO,IAAI,EAAE,CAAC;oBAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAAC,IAAI,IAAI;wBAAE,MAAM;oBAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;oBAAC,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;wBAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;wBAAC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAAC,CAAC;QAAC,CAAC;QAC5W,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,CAAC,MAAM,sEAAsE,CAAC,CAAC;QAClK,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAAC,CAAC;IACjJ,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAe,EAAU,EAAE,CAAC,oBAAoB,IAAI,CAAC,SAAS,UAAU,IAAI,CAAC,MAAM,WAAW,CAAC;IAC/G,OAAO;QACL,kBAAkB,EAAE,KAAK,EAAE,QAAgE,EAAE,MAAmB,EAAiB,EAAE;YACjI,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,OAAO,CAAC,oBAAoB,QAAQ,CAAC,SAAS,UAAU,QAAQ,CAAC,MAAM,mBAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YACxK,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kJAAkJ,CAAC,CAAC;QACrP,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,QAAgB,EAAE,MAAmB,EAAiB,EAAE;YAC5E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,8BAA8B,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpM,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;YAC1H,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAuG,CAAC;YACzI,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;QAC5R,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,IAAe,EAAE,SAA4B,EAAE,MAAmB,EAAE,EAAE;YACrF,IAAI,IAAI,CAAC,aAAa,EAAE,gBAAgB,KAAK,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAChI,MAAM,KAAK,GAAwB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,EAAE,CAAC;YACzT,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YACrF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAC/B,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,CAAC,oBAAoB;gBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACjf,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,IAAe,EAAE,SAA4B,EAAE,MAAmB,EAAE,QAA0F,EAAoC,EAAE;YAChN,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC/G,MAAM,KAAK,GAA2B,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,gBAAgB,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,EAAE,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC;YAC9gB,MAAM,KAAK,GAAG,4BAA4B,CAAC,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,SAAS,mBAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YACpI,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,mBAAmB,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,CAAC,oBAAoB;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACzU,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AACF,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAAE,QAAgB,EAAE,KAA8B,EAAiB,EAAE;IACjH,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAClH,MAAM,SAAS,GAAG,GAAG,QAAQ,IAAI,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAAC,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9M,CAAC,CAAC"}