@fitlab-ai/agent-infra 0.11.4 → 0.11.5

package/dist/lib/task/control-authority.js

@@ -1,20 +1,16 @@
 import path from 'node:path';
 import crypto from 'node:crypto';
-import fs from 'node:fs';
 import { normalizeAgentToken } from '../agent-clients/tokens.js';
 import { isAgentClientId } from '../agent-clients/types.js';
 import { getAgentClientAdapter } from '../agent-clients/registry.js';
-import { consumeHumanOverride, failureId, overrideDryRunConflict } from './human-override.js';
 import { activateMatchingOrchestrationDelegation, activateOrchestrationDelegation, advanceOrchestration, awaitOrchestrationDelegationActivation, beginOrResumeOrchestration, dispatchOrchestrationDelegation, OrchestrationStateError, pauseOrchestration, prepareOrchestrationDelegation, recoverPreparedOrchestrationDelegation, routeOrchestration, sealMatchingOrchestrationDelegation, sealOrchestrationDelegation, statusOrchestration } from './orchestration.js';
 import { applyTaskFinalization, commitPreparedTaskFinalization } from './finalization.js';
 import { applyTaskLifecycle, taskLifecycleFailure } from './lifecycle.js';
-import { locateActivityLog } from './activity-log.js';
 import { resolveTaskRef, TASK_ID_RE } from './resolve-ref.js';
 import { TaskExecutionLockError, withTaskExecutionLock } from './task-execution-lock.js';
 import { verifyTaskEvent } from './verification.js';
 import { createCodexCapabilityStore } from '../agent-clients/adapters/codex-lifecycle/capability-store.js';
-import { findArtifactRecoveryIntentsByOperation, writeArtifactRecoveryIntent } from './artifact-repair-intent.js';
-import { computeLifecycleBuildIdentity, verifyLifecycleBuildIdentity } from '../agent-clients/adapters/codex-lifecycle/build-identity.js';
+import { computeLifecycleBuildIdentity } from '../agent-clients/adapters/codex-lifecycle/build-identity.js';
 const lifecycleAuthorityPhases = [
     'orchestration.prepare', 'artifact.finalize-local', 'task-event.completed'
 ];
@@ -184,7 +180,6 @@ export function queryLifecycleRecoveryOperation(operationId, options = {}) {
     const store = options.capabilityStore ?? createCodexCapabilityStore();
     const registry = authorityOperationMap.get(store);
     const known = [...(registry?.values() ?? [])].filter((value) => value.operationId === operationId);
-    const intents = options.repoRoot ? findArtifactRecoveryIntentsByOperation(options.repoRoot, operationId) : [];
     const capabilities = store.findByRecoveryOperation(operationId);
     const phaseMap = new Map();
     for (const capability of capabilities) {
@@ -208,23 +203,10 @@ export function queryLifecycleRecoveryOperation(operationId, options = {}) {
                 ? 'consumed' : 'issued'
         });
     }
-    for (const intent of intents) {
-        if (!intent.phase)
-            continue;
-        const key = `${intent.phase}\0${intent.requestId}`;
-        if (phaseMap.has(key))
-            continue;
-        phaseMap.set(key, {
-            phase: intent.phase,
-            requestId: intent.requestId,
-            attestationId: null,
-            state: intent.state === 'consumed' ? 'consumed' : 'observed'
-        });
-    }
     const capabilityState = capabilities.some((record) => record.recoveryState === 'consumed')
         ? 'consumed'
         : capabilities.some((record) => record.recoveryState === 'reserved') ? 'reserved' : 'unknown';
-    const committed = capabilityState === 'consumed' || intents.some((intent) => intent.state === 'consumed');
+    const committed = capabilityState === 'consumed';
     return {
         version: 1,
         operationId,
@@ -233,120 +215,6 @@ export function queryLifecycleRecoveryOperation(operationId, options = {}) {
         phases: Object.freeze([...phaseMap.values()])
     };
 }
-function lifecycleRecoveryCompensationError(code, message) {
-    const error = new Error(`${code}: ${message}`);
-    error.name = code;
-    return error;
-}
-function lifecycleRecoveryEventCommitted(selector, repoRoot) {
-    const resolved = resolveTaskRef(selector.taskId, { repoRoot });
-    if (!resolved.ok || resolved.taskId !== selector.taskId)
-        return false;
-    let content;
-    try {
-        content = fs.readFileSync(resolved.taskMdPath, 'utf8');
-    }
-    catch {
-        return false;
-    }
-    const section = locateActivityLog(content);
-    if (!section)
-        return false;
-    const labels = { analysis: 'Analyze Task', plan: 'Plan Task', code: 'Code Task' };
-    const prefix = `${labels[selector.family]} (Round ${selector.round}`;
-    return section.entries.some((entry) => {
-        if (entry.step.endsWith(' [started]') || !entry.step.startsWith(prefix))
-            return false;
-        const delimiter = entry.step[prefix.length];
-        return (delimiter === ',' || delimiter === ')') && entry.note.endsWith(`→ ${selector.artifact}`);
-    });
-}
-function lifecycleRecoveryIntentMatches(intent, selector) {
-    return intent.taskId === selector.taskId
-        && intent.family === selector.family
-        && intent.artifact === selector.artifact
-        && (intent.state === 'commit-started' || intent.state === 'consumption-started' || intent.state === 'consumed');
-}
-/**
- * Completes only the durable tail of a committed task event after a process
- * restart. The task event itself is the commit boundary and is never replayed.
- */
-export function recoverLifecycleRecoveryOperation(input, options) {
-    const selector = validateLifecycleAuthorityRequest(input);
-    if (selector.phase !== 'task-event.completed') {
-        throw lifecycleRecoveryCompensationError('LIFECYCLE_RECOVERY_PHASE_UNSUPPORTED', 'only task-event.completed supports durable compensation');
-    }
-    const buildIdentity = options.buildIdentity ?? computeLifecycleBuildIdentity(options.repoRoot);
-    if (selector.expectedBuildIdentityDigest !== lifecycleAuthorityBuildDigest(buildIdentity)) {
-        throw lifecycleRecoveryCompensationError('LIFECYCLE_AUTHORITY_BUILD_MISMATCH', 'current lifecycle build does not match the recovery request');
-    }
-    if (selector.expectedControlGeneration !== options.controllerBinding.controlGeneration
-        || selector.expectedControllerInstanceDigest !== options.controllerBinding.instanceDigest) {
-        throw lifecycleRecoveryCompensationError('LIFECYCLE_AUTHORITY_CONTROLLER_MISMATCH', 'current controller binding does not match the recovery request');
-    }
-    const store = options.capabilityStore ?? createCodexCapabilityStore();
-    const expected = {
-        taskId: selector.taskId,
-        hookDefinitionHash: selector.expectedHookDefinitionHash,
-        buildIdentity,
-        controller: options.controllerBinding
-    };
-    const capabilities = store.findByRecoveryOperation(selector.operationId);
-    if (capabilities.length !== 1 || capabilities[0].capabilityRefDigest !== lifecycleAuthorityDigest(selector.authorityRef)) {
-        throw lifecycleRecoveryCompensationError('LIFECYCLE_RECOVERY_PROVENANCE_INVALID', 'durable capability provenance does not identify this operation');
-    }
-    const capability = capabilities[0];
-    const build = verifyLifecycleBuildIdentity(capability.buildIdentity, buildIdentity);
-    const expiredReserved = capability.status === 'expired' && capability.recoveryState === 'reserved';
-    if (!build.ok
-        || capability.taskId !== selector.taskId
-        || capability.hookDefinitionHash !== selector.expectedHookDefinitionHash
-        || capability.controller?.controlGeneration !== options.controllerBinding.controlGeneration
-        || capability.controller?.instanceDigest !== options.controllerBinding.instanceDigest
-        || capability.recoveryState === 'unreserved'
-        || capability.recoveryOperationId !== selector.operationId
-        || (!['attested', 'consumed'].includes(capability.status) && !expiredReserved)) {
-        throw lifecycleRecoveryCompensationError('LIFECYCLE_RECOVERY_PROVENANCE_INVALID', 'durable capability provenance does not match the recovery request');
-    }
-    const phase = capability.recoveryPhases.find((entry) => entry.phase === selector.phase);
-    if (!phase) {
-        throw lifecycleRecoveryCompensationError('LIFECYCLE_RECOVERY_PHASE_MISSING', 'durable task completion phase is missing');
-    }
-    const intents = findArtifactRecoveryIntentsByOperation(options.repoRoot, selector.operationId)
-        .filter((intent) => intent.taskId === selector.taskId
-        && intent.family === selector.family
-        && intent.artifact === selector.artifact);
-    if (intents.length !== 1) {
-        throw lifecycleRecoveryCompensationError('LIFECYCLE_RECOVERY_INTENT_INVALID', 'durable artifact recovery intent does not identify this task event');
-    }
-    const intent = intents[0];
-    if (!lifecycleRecoveryIntentMatches(intent, selector)
-        || intent.phase !== selector.phase
-        || intent.requestId !== selector.lifecycleRequestId
-        || intent.authorityDigest === null) {
-        throw lifecycleRecoveryCompensationError('LIFECYCLE_RECOVERY_INTENT_INVALID', 'durable artifact recovery intent does not match the recovery request');
-    }
-    if (!lifecycleRecoveryEventCommitted(selector, options.repoRoot)) {
-        throw lifecycleRecoveryCompensationError('LIFECYCLE_RECOVERY_COMMIT_UNCONFIRMED', 'task completion is not durably present; compensation is not allowed');
-    }
-    if (capability.recoveryState === 'reserved') {
-        if (phase.state === 'issued') {
-            store.consumeRecoveryPhase(selector.authorityRef, selector.operationId, selector.phase, phase.requestId, expected, { allowExpiredReserved: true });
-        }
-        store.consumeReference(selector.authorityRef, selector.operationId, expected, { allowExpiredReserved: true });
-    }
-    else if (phase.state !== 'consumed') {
-        throw lifecycleRecoveryCompensationError('LIFECYCLE_RECOVERY_STATE_INVALID', 'consumed capability has an unconsumed completion phase');
-    }
-    if (intent.state !== 'consumed') {
-        writeArtifactRecoveryIntent(options.repoRoot, {
-            ...intent,
-            state: 'consumed',
-            updatedAt: (options.now ?? Date.now)()
-        }, { expected: intent });
-    }
-    return queryLifecycleRecoveryOperation(selector.operationId, { repoRoot: options.repoRoot, capabilityStore: store });
-}
 function authorityRejected(request, code, message) {
     return { version: 1, requestId: request.requestId, operationId: request.operationId, phase: request.phase, status: 'rejected', attestation: null, error: { code, message } };
 }
@@ -406,6 +274,7 @@ export function createSandboxExecutorExecutionContext(params) {
         generation: params.generation,
         manifestPath: absolute('manifestPath', params.manifestPath),
         requestId: params.requestId,
+        handoffDirectory: absolute('handoffDirectory', params.handoffDirectory ?? path.join(params.worktreeRoot, '.agent-infra-handoff')),
         ...(params.controllerBinding === undefined ? {} : { controllerBinding: binding(params.controllerBinding) }),
         ...(params.lifecycleRecoveryAttestation === undefined ? {} : {
             lifecycleRecoveryAttestation: params.lifecycleRecoveryAttestation === null
@@ -433,6 +302,7 @@ export function assertTaskControlExecutionContext(context) {
     absolute('worktreeRoot', context.worktreeRoot);
     absolute('runtimeDir', context.runtimeDir);
     absolute('manifestPath', context.manifestPath);
+    absolute('handoffDirectory', context.handoffDirectory);
     if (path.resolve(context.runtimeDir) !== path.join(path.dirname(path.resolve(context.manifestPath)), 'runtime')) {
         invalidContext('runtimeDir is not bound to the manifest control root');
     }
@@ -463,10 +333,6 @@ function lifecycleTaskId(request, repoRoot) {
     }
 }
 async function applyLifecycleWithAuthority(context, request) {
-    const conflict = overrideDryRunConflict(request);
-    if (conflict) {
-        return taskLifecycleFailure(request, { code: 'LIFECYCLE_PAYLOAD_INVALID', message: conflict.message });
-    }
     const execute = async () => {
         if (request.intent === 'recover-started') {
             const adapter = isAgentClientId(request.agent)
@@ -481,29 +347,7 @@ async function applyLifecycleWithAuthority(context, request) {
             }
             return adapter.recoverStarted(request, { repoRoot: context.repoRoot });
         }
-        const lifecycleResult = applyTaskLifecycle(request, { repoRoot: context.repoRoot });
-        if (lifecycleResult.status !== 'failed' || !request.overrideTicket)
-            return lifecycleResult;
-        if (!request.overrideTarget || !request.overrideScope) {
-            return {
-                ...lifecycleResult,
-                error: { code: 'OVERRIDE_PAYLOAD_INVALID', message: 'override ticket requires --override-target and --override-scope' }
-            };
-        }
-        const override = await consumeHumanOverride({
-            taskRef: request.taskRef,
-            ticketId: request.overrideTicket,
-            failureId: failureId('lifecycle.apply', lifecycleResult.error?.code ?? 'LIFECYCLE_FAILED'),
-            target: request.overrideTarget,
-            scope: request.overrideScope,
-            intent: request.intent,
-            ...('alertNumber' in request && request.alertNumber ? { alertNumber: request.alertNumber } : {}),
-            ...('issueNumber' in request && request.issueNumber ? { issueNumber: request.issueNumber } : {}),
-            ...('stagingDir' in request && request.stagingDir ? { stagingDir: request.stagingDir } : {})
-        }, { repoRoot: context.repoRoot });
-        if (override.status === 'failed')
-            return { ...lifecycleResult, humanOverride: override };
-        return { ...lifecycleResult, ...override, humanOverride: override, error: null };
+        return applyTaskLifecycle(request, { repoRoot: context.repoRoot });
     };
     const taskId = lifecycleTaskId(request, context.repoRoot);
     if (!taskId)
@@ -594,7 +438,9 @@ export function dispatchTaskControlOperation(context, operation) {
         return finalize(operation.request, {
             repoRoot: context.repoRoot,
             ...(context.source === 'sandbox-executor' ? {
-                controlBinding: { generation: context.generation, requestId: context.requestId }
+                controlBinding: { generation: context.generation, requestId: context.requestId },
+                handoffDirectory: context.handoffDirectory,
+                manifestPath: context.manifestPath
             } : {}),
             preflight: (request, options) => verifyTaskEvent({ ...request, event: 'complete-task.hard-preflight' }, options)
         });
@@ -629,7 +475,7 @@ function operationInvalid(message) {
 }
 const LIFECYCLE_FLAGS = new Set([
     '--agent', '--reason', '--unblock-condition', '--note', '--alert-number', '--staging-dir', '--issue-number',
-    '--auto', '--override-ticket', '--override-target', '--override-scope', '--dry-run'
+    '--auto', '--dry-run'
 ]);
 const FINALIZATION_FLAGS = new Set(['--agent']);
 const ORCHESTRATION_FLAGS = new Set([
@@ -700,9 +546,6 @@ export function parseTaskControlOperation(family, args) {
             ...(value(values, '--unblock-condition') ? { unblockCondition: value(values, '--unblock-condition') } : {}),
             ...(value(values, '--note') ? { note: value(values, '--note') } : {}),
             ...(value(values, '--staging-dir') ? { stagingDir: value(values, '--staging-dir') } : {}),
-            ...(value(values, '--override-ticket') ? { overrideTicket: value(values, '--override-ticket') } : {}),
-            ...(value(values, '--override-target') ? { overrideTarget: value(values, '--override-target') } : {}),
-            ...(value(values, '--override-scope') ? { overrideScope: value(values, '--override-scope') } : {}),
             ...(value(values, '--alert-number') ? { alertNumber: Number(value(values, '--alert-number')) } : {}),
             ...(value(values, '--issue-number') ? { issueNumber: Number(value(values, '--issue-number')) } : {}),
             ...(values['--auto'] === true ? { auto: true } : {}),

package/dist/lib/task/decision-intents.js

@@ -6,7 +6,6 @@ import { LEDGER_COLUMNS, LEDGER_HEADINGS, LEDGER_SECTION_MISSING_CODE, LEDGER_SE
 import { resolveTaskContext } from './resolve-ref.js';
 import { extractSection, extractSubSection, findSectionHeading } from './sections.js';
 import { captureTaskWriteMetadata, writeTask } from './write.js';
-import { allowsManualOverride } from './guard-override.js';
 import { consumeHumanDecisionReworkIntents, parseReworkIntentDocument, reworkIntentMutation } from './rework-intent.js';
 const DECISION_ALIASES = ['人工裁决', 'Human Rulings', 'Human Decisions', 'Human Decision'];
 const ACTIVITY_ALIASES = ['活动日志', 'Activity Log'];
@@ -58,8 +57,7 @@ function applyHumanDecision(request, options = {}) {
     const resolved = resolveTaskContext(request.taskRef, { repoRoot: options.repoRoot });
     if (!resolved.ok)
         return failed(resolved.code, resolved.message, resolved.taskId);
-    const stateOverride = allowsManualOverride(options.manualOverride, 'decision-intent', 'TASK_STATE_MISMATCH');
-    if (resolved.state !== 'active' && !stateOverride)
+    if (resolved.state !== 'active')
         return failed('TASK_STATE_MISMATCH', `task ${resolved.taskId} is ${resolved.state}, expected active`, resolved.taskId);
     let content;
     let rows;
@@ -172,7 +170,7 @@ function applyHumanDecision(request, options = {}) {
     catch (error) {
         return failed('DECISION_DOCUMENT_INVALID', error instanceof Error ? error.message : String(error), resolved.taskId, row.id);
     }
-    const writeResult = writeTask({ taskRef: resolved.taskId, expectedState: stateOverride ? resolved.state : 'active', mutations, dryRun: request.dryRun }, {
+    const writeResult = writeTask({ taskRef: resolved.taskId, expectedState: 'active', mutations, dryRun: request.dryRun }, {
         ...options,
         taskLocation: { repoRoot: resolved.repoRoot, taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, state: resolved.state },
         metadataProvider: () => metadata

package/dist/lib/task/events.js

@@ -1,6 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { execFileSync } from 'node:child_process';
+import { resolveBranchWorktree } from '../git/branch-worktree.js';
 import { appendActivityEntry, locateActivityLog, pairEntries, startedBackedRows } from './activity-log.js';
 import { buildArtifactLinkSection, inspectArtifactDirectory, resolveArtifactContext, validateCompletedArtifact } from './artifact-lifecycle.js';
 import { artifactName, parseArtifactName } from './artifact-name.js';
@@ -16,7 +17,6 @@ import { validateLifecycleExecution } from './lifecycle-execution.js';
 import { commitOrchestrationStageCompletion } from './orchestration.js';
 import { TaskExecutionLockError, withTaskExecutionLock } from './task-execution-lock.js';
 import { captureTaskWriteMetadata, writeTask } from './write.js';
-import { allowsManualOverride } from './guard-override.js';
 import { validateLocalArtifact } from './local-artifact-finalization.js';
 import { buildLifecycleFacts, canStart, effectiveReworkTarget } from './capabilities.js';
 import { createInvalidationOperation, invalidationMutation, parseInvalidationDocument, targetIdFor, upsertInvalidation } from './invalidation.js';
@@ -41,24 +41,7 @@ const eventCatalog = [
 function branchWorktree(repoRoot, branch) {
     if (!branch)
         return repoRoot;
-    try {
-        const records = execFileSync('git', ['worktree', 'list', '--porcelain'], {
-            cwd: repoRoot,
-            encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'pipe']
-        }).trim().split(/\r?\n\r?\n/);
-        const expectedRef = `refs/heads/${branch}`;
-        for (const record of records) {
-            const worktree = /^worktree (.+)$/m.exec(record)?.[1];
-            const branchRef = /^branch (.+)$/m.exec(record)?.[1];
-            if (worktree && branchRef === expectedRef)
-                return worktree;
-        }
-    }
-    catch {
-        // A missing worktree must not anchor a review to an unrelated repository.
-    }
-    return null;
+    return resolveBranchWorktree(repoRoot, branch);
 }
 function approvedCleanReviewedCommit(reviewContent, verdict, repoRoot, branch) {
     if (verdict !== 'approved')
@@ -84,7 +67,7 @@ function approvedCleanReviewedCommit(reviewContent, verdict, repoRoot, branch) {
         return null;
     }
 }
-const BASE_FIELDS = new Set(['taskRef', 'event', 'agent', 'dryRun', 'overrideTicket', 'overrideTarget', 'overrideScope', 'initiator', 'requestId', 'reasonCode', 'sourceFinding', 'sourceArtifact', 'sourceSha256']);
+const BASE_FIELDS = new Set(['taskRef', 'event', 'agent', 'dryRun', 'initiator', 'requestId', 'reasonCode', 'sourceFinding', 'sourceArtifact', 'sourceSha256']);
 const SCHEMAS = {
     'analyze.started': { optional: ['round'] },
     'analyze.awaiting-input': { required: ['question'] },
@@ -722,8 +705,7 @@ function applyTaskEventUnlocked(request, options = {}) {
     const resolved = resolveTaskRef(request.taskRef, { repoRoot: options.repoRoot });
     if (!resolved.ok)
         return failed(request, { code: resolved.code, message: resolved.message }, { taskId: resolved.taskId });
-    const stateOverride = allowsManualOverride(options.manualOverride, 'task-event', 'TASK_STATE_MISMATCH');
-    if (resolved.state !== 'active' && !stateOverride)
+    if (resolved.state !== 'active')
         return failed(request, { code: 'TASK_STATE_MISMATCH', message: `task ${resolved.taskId} is ${resolved.state}, expected active` }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath });
     let content;
     try {
@@ -842,7 +824,7 @@ function applyTaskEventUnlocked(request, options = {}) {
         }
         return successNoOp(normalized, resolved.taskId, resolved.taskMdPath, currentStep, eventIdentity, row.started, frontmatter, artifactContext);
     }
-    if (eventIdentity.phase === 'completed' && !row?.started && completedRows.length === 0 && !allowsManualOverride(options.manualOverride, 'task-event', 'EVENT_START_MISSING'))
+    if (eventIdentity.phase === 'completed' && !row?.started && completedRows.length === 0)
         return failed(normalized, { code: 'EVENT_START_MISSING', message: 'completion requires a started event or an earlier completed attempt' }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
     if (eventIdentity.phase === 'completed') {
         const validated = validateCompletedArtifact(resolved.taskDir, FAMILY[eventIdentity.family].artifact, normalized.artifact, normalized.round);
@@ -912,12 +894,9 @@ function applyTaskEventUnlocked(request, options = {}) {
         if (!facts.ok)
             return failed(normalized, { code: 'EVENT_TRANSITION_INVALID', message: `${facts.code}: ${facts.message}` }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
         const capability = canStart(lifecycleAction(eventIdentity.family), facts.facts, trigger);
-        const capabilityOverride = capability.reasonCode === 'TASK_NOT_ACTIVE'
-            ? stateOverride
-            : allowsManualOverride(options.manualOverride, 'task-event', 'EVENT_TRANSITION_INVALID');
         const safetyFailure = capability.reasonCode === 'TASK_NOT_ACTIVE'
             || capability.reasonCode === 'LIFECYCLE_EXECUTION_OPEN';
-        if (!capability.allowed && (normalized.initiator === 'orchestrator' || safetyFailure) && !capabilityOverride) {
+        if (!capability.allowed && (normalized.initiator === 'orchestrator' || safetyFailure)) {
             const code = capability.reasonCode === 'INVALIDATION_INCOMPLETE' ? 'TASK_INVALIDATION_BLOCKED' : 'EVENT_TRANSITION_INVALID';
             return failed(normalized, { code, message: `${capability.reasonCode}: ${capability.evidence.join(', ')}` }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
         }
@@ -1073,7 +1052,7 @@ function applyTaskEventUnlocked(request, options = {}) {
     mutations.push({ kind: 'section', aliases: ['活动日志', 'Activity Log'], heading: section.heading, body });
     const sourceCompletion = eventIdentity.phase === 'completed'
         && ['analyze', 'plan', 'code'].includes(eventIdentity.family);
-    const result = writeTask({ taskRef: normalized.taskRef, expectedState: stateOverride ? resolved.state : 'active', dryRun: normalized.dryRun, mutations }, { ...options, invalidationContext: sourceCompletion ? 'source-completion' : 'standard', metadataProvider: () => metadata });
+    const result = writeTask({ taskRef: normalized.taskRef, expectedState: 'active', dryRun: normalized.dryRun, mutations }, { ...options, invalidationContext: sourceCompletion ? 'source-completion' : 'standard', metadataProvider: () => metadata });
     if (result.status === 'failed')
         return failed(normalized, result.error, { taskId: result.taskId, taskMdPath: result.taskMdPath, fromStep: currentStep, toStep: step, action: eventIdentity.action, phase: eventIdentity.phase, timestamp: result.timestamp, agentInfraVersion: result.agentInfraVersion, operations: result.operations, artifactContext });
     if (!normalized.dryRun && orchestrationCompletion) {

package/dist/lib/task/finalization-handoff.js

@@ -0,0 +1,92 @@
+import { createHash, randomUUID } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+const HANDOFF_VERSION = 1;
+const MAX_HANDOFF_BYTES = 1024 * 1024;
+function digest(value) {
+    return createHash('sha256').update(JSON.stringify(value)).digest('hex');
+}
+export function finalizationHandoffPath(directory, taskId) {
+    return path.join(directory, '.agent-infra', 'task-finalization', `${taskId}.json`);
+}
+export function publishTaskFinalizationHandoff(directory, receipt, binding) {
+    if (receipt.taskId === '' || receipt.controlBinding?.generation !== binding.generation
+        || receipt.controlBinding.requestId !== binding.requestId) {
+        throw new Error('TASK_FINALIZATION_HANDOFF_BINDING_INVALID');
+    }
+    const envelope = {
+        version: HANDOFF_VERSION, taskId: receipt.taskId, binding, receipt, receiptSha256: digest(receipt)
+    };
+    const target = finalizationHandoffPath(directory, receipt.taskId);
+    fs.mkdirSync(path.dirname(target), { recursive: true, mode: 0o700 });
+    const temporary = `${target}.${process.pid}.${randomUUID()}.tmp`;
+    fs.writeFileSync(temporary, `${JSON.stringify(envelope)}\n`, { mode: 0o600, flag: 'wx' });
+    try {
+        fs.renameSync(temporary, target);
+    }
+    catch (error) {
+        try {
+            fs.unlinkSync(temporary);
+        }
+        catch { /* preserve the primary error */ }
+        throw error;
+    }
+    return digest(envelope);
+}
+export function readTaskFinalizationHandoff(directory, taskId, binding, handoffSha256) {
+    const file = finalizationHandoffPath(directory, taskId);
+    const initial = fs.lstatSync(file);
+    if (!initial.isFile() || initial.isSymbolicLink() || initial.size > MAX_HANDOFF_BYTES) {
+        throw new Error('TASK_FINALIZATION_HANDOFF_INVALID');
+    }
+    const descriptor = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0));
+    let content;
+    try {
+        const opened = fs.fstatSync(descriptor);
+        if (!opened.isFile() || opened.dev !== initial.dev || opened.ino !== initial.ino
+            || opened.size > MAX_HANDOFF_BYTES)
+            throw new Error('TASK_FINALIZATION_HANDOFF_INVALID');
+        const bytes = Buffer.alloc(MAX_HANDOFF_BYTES + 1);
+        const length = fs.readSync(descriptor, bytes, 0, bytes.length, 0);
+        if (length !== opened.size || length > MAX_HANDOFF_BYTES)
+            throw new Error('TASK_FINALIZATION_HANDOFF_INVALID');
+        content = bytes.toString('utf8', 0, length);
+        const after = fs.fstatSync(descriptor);
+        if (after.dev !== opened.dev || after.ino !== opened.ino || after.size !== opened.size) {
+            throw new Error('TASK_FINALIZATION_HANDOFF_INVALID');
+        }
+    }
+    finally {
+        fs.closeSync(descriptor);
+    }
+    const envelope = JSON.parse(content);
+    if (!envelope || typeof envelope !== 'object' || Array.isArray(envelope)
+        || Object.keys(envelope).sort().join('\0') !== ['binding', 'receipt', 'receiptSha256', 'taskId', 'version'].join('\0')
+        || envelope.version !== HANDOFF_VERSION || envelope.taskId !== taskId
+        || !envelope.binding || typeof envelope.binding !== 'object' || Array.isArray(envelope.binding)
+        || Object.keys(envelope.binding).sort().join('\0') !== ['generation', 'requestId'].join('\0')
+        || envelope.binding.generation !== binding.generation
+        || envelope.binding.requestId !== binding.requestId || !envelope.receipt
+        || envelope.receipt.controlBinding?.generation !== binding.generation
+        || envelope.receipt.controlBinding.requestId !== binding.requestId
+        || typeof envelope.receiptSha256 !== 'string' || envelope.receiptSha256 !== digest(envelope.receipt)
+        || digest(envelope) !== handoffSha256) {
+        throw new Error('TASK_FINALIZATION_HANDOFF_INVALID');
+    }
+    return {
+        receipt: envelope.receipt,
+        cleanup: () => {
+            try {
+                const current = fs.lstatSync(file);
+                if (current.isFile() && !current.isSymbolicLink()
+                    && current.dev === initial.dev && current.ino === initial.ino)
+                    fs.unlinkSync(file);
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+        }
+    };
+}
+//# sourceMappingURL=finalization-handoff.js.map