@fitlab-ai/agent-infra 0.11.8 → 0.11.10

package/README.md

@@ -240,7 +240,7 @@ In-depth guides live under [`docs/en/`](./docs/en/README.md):
 - [Feishu Bridge](./docs/en/feishu-bridge.md) — configure the Feishu long-connection adapter, command routing, permissions, and TUI selection
 - [Built-in AI Skills](./docs/en/skills.md) — the full skill catalog by use case
 - [Custom Skills](./docs/en/custom-skills.md) — create and sync project-specific skills
-- [Custom TUI Configuration](./docs/en/custom-tui.md) — adapt agent-infra to non-built-in AI TUIs
+- [Custom Tool Invocations](./docs/en/custom-tool-invocations.md) — configure custom-tool next-step commands
 - [Prebuilt Workflows](./docs/en/workflows.md) — the gated delivery lifecycle and example flow
 - [Configuration Reference](./docs/en/configuration.md) — `.agents/.airc.json`, external sources, version management
 - [File Management Strategies](./docs/en/file-management.md) — managed / merged / ejected update strategies

package/README.zh-CN.md

@@ -239,7 +239,7 @@ my-project/
 - [飞书桥接](./docs/zh-CN/feishu-bridge.md) — 配置飞书长连接 adapter、命令路由、权限和 TUI 选择
 - [内置 AI Skills](./docs/zh-CN/skills.md) — 按使用场景分组的完整 skill 清单
 - [自定义 Skills](./docs/zh-CN/custom-skills.md) — 创建并同步项目专属 skill
-- [自定义 TUI 配置](./docs/zh-CN/custom-tui.md) — 适配非内置的 AI TUI
+- [自定义工具调用](./docs/zh-CN/custom-tool-invocations.md) — 配置自定义工具的下一步命令
 - [预置工作流](./docs/zh-CN/workflows.md) — 分阶段交付链路与示例流程
 - [配置参考](./docs/zh-CN/configuration.md) — `.agents/.airc.json`、外部源、版本管理
 - [文件管理策略](./docs/zh-CN/file-management.md) — managed / merged / ejected 更新策略

package/dist/bin/internal-cli.js

@@ -13,7 +13,6 @@ const taskWorkflowCommand = command === 'task-artifact'
     || command === 'task-review'
     || command === 'task-event'
     || command === 'task-ledger'
-    || command === 'task-invalidation'
     || command === 'task-warning';
 const taskPlatformRecoveryCommand = command === 'task-platform-recovery';
 const manualValidationWorkflowCommand = command === 'manual-validation';
@@ -231,11 +230,6 @@ if (!controlRouted && !taskViewGuardFailed && internalRouteRegistered)
             await taskEvent(process.argv.slice(3));
             break;
         }
-        case 'task-invalidation': {
-            const { taskInvalidation } = await import('../lib/internal/task-invalidation.js');
-            taskInvalidation(process.argv.slice(3));
-            break;
-        }
         case 'task-lifecycle': {
             const { taskLifecycle } = await import('../lib/internal/task-lifecycle.js');
             await taskLifecycle(process.argv.slice(3));

package/dist/lib/agent-clients/custom-tool-invocations.js

@@ -0,0 +1,92 @@
+const ALLOWED_PLACEHOLDERS = Object.freeze(['skillName', 'projectName']);
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isNonEmptySingleLine(value) {
+    return typeof value === 'string'
+        && value.trim() !== ''
+        && !/[\r\n]/.test(value);
+}
+function hasValidPlaceholders(invocation) {
+    const placeholders = [
+        ...invocation.matchAll(/\$\{([^}]+)\}/g)
+    ].map((match) => match[1]);
+    return placeholders.includes('skillName')
+        && placeholders.every((placeholder) => ALLOWED_PLACEHOLDERS.includes(placeholder))
+        && !invocation
+            .replaceAll('${skillName}', '')
+            .replaceAll('${projectName}', '')
+            .includes('${');
+}
+function normalizeCustomToolInvocations(config) {
+    const items = [];
+    const diagnostics = [];
+    const root = isRecord(config) ? config : {};
+    const sandbox = isRecord(root.sandbox) ? root.sandbox : {};
+    const sandboxTools = isRecord(sandbox.tools) ? sandbox.tools : { ids: ['agent-infra'] };
+    const definitions = sandboxTools.definitions ?? {};
+    const selectedIds = sandboxTools.ids;
+    if (!Array.isArray(selectedIds)) {
+        return Object.freeze({
+            items: Object.freeze([]),
+            diagnostics: Object.freeze([
+                Object.freeze({
+                    code: 'INVALID_CUSTOM_TOOL_CONFIG',
+                    path: 'sandbox.tools.ids'
+                })
+            ])
+        });
+    }
+    if (!isRecord(definitions)) {
+        return Object.freeze({
+            items: Object.freeze([]),
+            diagnostics: Object.freeze([
+                Object.freeze({
+                    code: 'INVALID_CUSTOM_TOOL_CONFIG',
+                    path: 'sandbox.tools.definitions'
+                })
+            ])
+        });
+    }
+    for (const [index, id] of selectedIds.entries()) {
+        if (typeof id !== 'string') {
+            diagnostics.push({
+                code: 'INVALID_CUSTOM_TOOL_INVOCATION',
+                path: `sandbox.tools.ids[${index}]`
+            });
+            continue;
+        }
+        const candidate = definitions[id];
+        if (!isRecord(candidate))
+            continue;
+        if (candidate.invoke === undefined)
+            continue;
+        const base = `sandbox.tools.definitions.${id}`;
+        const name = candidate.name === undefined ? id : candidate.name;
+        if (!isNonEmptySingleLine(name)) {
+            diagnostics.push({ code: 'INVALID_CUSTOM_TOOL_INVOCATION', path: `${base}.name` });
+            continue;
+        }
+        if (!isNonEmptySingleLine(candidate.invoke)) {
+            diagnostics.push({ code: 'INVALID_CUSTOM_TOOL_INVOCATION', path: `${base}.invoke` });
+            continue;
+        }
+        if (!hasValidPlaceholders(candidate.invoke)) {
+            diagnostics.push({
+                code: 'INVALID_CUSTOM_TOOL_INVOCATION_PLACEHOLDER',
+                path: `${base}.invoke`
+            });
+            continue;
+        }
+        items.push(Object.freeze({
+            name,
+            invocation: candidate.invoke
+        }));
+    }
+    return Object.freeze({
+        items: Object.freeze(items),
+        diagnostics: Object.freeze(diagnostics.map((diagnostic) => Object.freeze(diagnostic)))
+    });
+}
+export { normalizeCustomToolInvocations };
+//# sourceMappingURL=custom-tool-invocations.js.map

package/dist/lib/agent-clients/next-steps.js

@@ -37,7 +37,7 @@ function renderNextStepCommands(input) {
             args
         })
     }));
-    const custom = input.customTUIs.map((tool) => Object.freeze({
+    const custom = input.customToolInvocations.map((tool) => Object.freeze({
         source: 'custom',
         displayName: tool.name,
         command: renderAgentClientInvocation(tool.invocation, {

package/dist/lib/agent-clients/reconcile.js

@@ -3,7 +3,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import defaults from '../defaults.json' with { type: 'json' };
 import { normalizeAgentClients, serializeAgentClients } from './config.js';
-import { normalizeCustomTUIs } from './custom-tuis.js';
+import { normalizeCustomToolInvocations } from './custom-tool-invocations.js';
 import { renderNextStepCommands } from './next-steps.js';
 import { planAgentClientProjectAssets } from './project-assets.js';
 import { listAgentClientAdapters, listEnabledAgentClientAdapters } from './registry.js';
@@ -141,11 +141,11 @@ function planAgentClientReconciliation(input) {
     if (Object.keys(baselines).length === 0) {
         delete nextConfig.files.managedBaselines;
     }
-    const custom = normalizeCustomTUIs(input.projectRoot, input.config.customTUIs ?? []);
+    const custom = normalizeCustomToolInvocations(input.config);
     const nextSteps = renderNextStepCommands({
         projectName,
         state: desired,
-        customTUIs: custom.items,
+        customToolInvocations: custom.items,
         skillName: 'update-agent-infra'
     });
     const actionableSeed = seedOperations.some((operation) => operation.kind === 'write' || operation.kind === 'remove');

package/dist/lib/agent-clients/schema.js

@@ -38,16 +38,24 @@ const AGENT_CLIENTS_SCHEMA = {
                 }
             }))
         },
-        customTUIs: {
-            type: 'array',
-            items: {
-                type: 'object',
-                additionalProperties: true,
-                required: ['name', 'dir', 'invoke'],
-                properties: {
-                    name: { type: 'string' },
-                    dir: { type: 'string' },
-                    invoke: { type: 'string' }
+        sandbox: {
+            type: 'object',
+            properties: {
+                tools: {
+                    type: 'object',
+                    properties: {
+                        ids: { type: 'array', items: { type: 'string' } },
+                        definitions: {
+                            type: 'object',
+                            additionalProperties: {
+                                type: 'object',
+                                properties: {
+                                    name: { type: 'string' },
+                                    invoke: { type: 'string' }
+                                }
+                            }
+                        }
+                    }
                 }
             }
         }

package/dist/lib/git/workflow.js

@@ -103,7 +103,7 @@ function commitExplicitPaths(input, runner = defaultRunner) {
         if (tree !== input.expectedTree)
             return { status: 'failed', changed: false, snapshot: inspectGitWorkflow(input.cwd, runner).snapshot, operations: [{ name: 'stage', status: 'applied' }], error: { code: 'GIT_TREE_MISMATCH', message: `Expected staged tree ${input.expectedTree}, received ${tree ?? 'unavailable'}` } };
     }
-    const commit = run(runner, input.cwd, ['commit', '-m', input.message]);
+    const commit = run(runner, input.cwd, ['commit', '--cleanup=verbatim', '-m', input.message]);
     const after = inspectGitWorkflow(input.cwd, runner);
     if (commit.status !== 0)
         return { status: 'failed', changed: false, snapshot: after.snapshot, operations: [{ name: 'commit', status: 'failed', message: commit.stderr.trim() }], error: { code: 'GIT_COMMIT_FAILED', message: commit.stderr.trim() } };

package/dist/lib/init.js

@@ -228,8 +228,8 @@ async function cmdInit() {
     console.log('    npm install -g @fitlab-ai/agent-infra');
     console.log('');
     if (workflowPlan.nextSteps.length === 0) {
-        console.log('  No Agent Client project integration enabled.');
-        console.log(`  Configure "customTUIs" in ${configPath} before running update-agent-infra.`);
+        console.log('  No Agent Client or sandbox custom tool integration enabled.');
+        console.log(`  Configure a custom tool in "sandbox.tools.definitions" and select it in "sandbox.tools.ids" in ${configPath}.`);
         console.log('');
     }
     else {

package/dist/lib/internal/agent-client.js

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { AgentClientConfigError, normalizeAgentClients } from '../agent-clients/config.js';
-import { normalizeCustomTUIs } from '../agent-clients/custom-tuis.js';
+import { normalizeCustomToolInvocations } from '../agent-clients/custom-tool-invocations.js';
 import { renderNextStepCommands } from '../agent-clients/next-steps.js';
 import { getAgentClientModelSelection } from '../agent-clients/registry.js';
 import { isAgentClientId } from '../agent-clients/types.js';
@@ -139,11 +139,11 @@ function agentClient(args = []) {
     }
     try {
         const clients = normalizeAgentClients(config);
-        const custom = normalizeCustomTUIs(process.cwd(), config.customTUIs ?? []);
+        const custom = normalizeCustomToolInvocations(config);
         const commands = renderNextStepCommands({
             projectName: String(config.project ?? ''),
             state: clients.state,
-            customTUIs: custom.items,
+            customToolInvocations: custom.items,
             skillName: parsed.skillName,
             ...(parsed.taskRef ? { taskRef: parsed.taskRef } : {}),
             ...(parsed.version ? { version: parsed.version } : {})

package/dist/lib/internal/cli-route-inventory.js

@@ -57,7 +57,6 @@ export const INTERNAL_HANDLER_ROUTE_SELECTORS = Object.freeze({
     'task-orchestration': ['status', 'progress'],
     'task-review': ['preflight', 'finalize-summary'],
     'task-event': ['event'],
-    'task-invalidation': ['reconcile'],
     'task-lifecycle': ['intent'],
     'task-finalization': ['complete'],
     'task-platform-recovery': ['inspect', 'recover'],
@@ -105,8 +104,6 @@ export function internalRouteSelector(command, args) {
         return args[1] === 'status' ? 'status' : args[1] ? 'progress' : '';
     if (command === 'task-review')
         return args[1] ?? '';
-    if (command === 'task-invalidation')
-        return args[1] ?? '';
     if (command === 'task-artifact')
         return args[1] ?? '';
     if (command === 'platform-pr-review' && first(args) === 'publish') {

package/dist/lib/internal/sandbox-control.js

@@ -4,8 +4,9 @@ import { serveSandboxControl } from '../sandbox/control/server.js';
 import { runSandboxControlExecutor } from '../sandbox/control/executor.js';
 import { ensureInternalHandlerRoute, internalHandlerRoute } from './cli-route-inventory.js';
 import { parseTaskCreateResult, taskCreateExitCode } from '../task/create-service.js';
-function writeFinalizationEnvelope(status, accepted, error, changed = false, result = null) {
-    process.stdout.write(`${JSON.stringify({ version: 1, status, changed, accepted, result, error })}\n`);
+import { serializeTaskFinalizationEnvelope } from '../task/finalization-envelope.js';
+function writeFinalizationEnvelope(status, accepted, error, changed = false, result = null, requestId = null) {
+    process.stdout.write(serializeTaskFinalizationEnvelope({ status, changed, accepted, requestId, result, error }));
 }
 function finalizationErrorStatus(error) {
     if (error.code === 'SANDBOX_CONTROL_RESULT_UNKNOWN')
@@ -30,6 +31,28 @@ function recoveredExitCode(response) {
     }
     return response.exitCode ?? 1;
 }
+function finalizationResponseOutput(response) {
+    try {
+        const value = JSON.parse(response.stdout);
+        if (value.version === 2
+            && value.status
+            && ['completed', 'failed', 'blocked', 'unknown'].includes(value.status)
+            && (typeof value.changed === 'boolean' || value.changed === null)) {
+            return serializeTaskFinalizationEnvelope({
+                status: value.status,
+                changed: value.changed,
+                accepted: true,
+                requestId: response.id,
+                result: value.result ?? null,
+                error: value.error ?? null
+            });
+        }
+    }
+    catch {
+        // Preserve non-envelope output for diagnostics from the executor.
+    }
+    return response.stdout;
+}
 function sandboxFinalizationClient(args) {
     if (args.length !== 4 || !args[0] || args[1] !== 'complete' || args[2] !== '--agent' || !args[3]) {
         const error = { code: 'TASK_FINALIZATION_PAYLOAD_INVALID', message: 'task ref, complete intent, and --agent are required', retryable: false };
@@ -52,7 +75,8 @@ function sandboxFinalizationClient(args) {
     catch (error) {
         if (!(error instanceof SandboxControlClientError))
             throw error;
-        writeFinalizationEnvelope(finalizationErrorStatus(error.detail), error.accepted, error.detail);
+        const status = finalizationErrorStatus(error.detail);
+        writeFinalizationEnvelope(status, error.accepted, error.detail, status === 'unknown' ? null : false, null, error.requestId);
         writeClientError(error);
         process.exitCode = error.detail.code === 'SANDBOX_CONTROL_RESULT_UNKNOWN' ? 1 : error.detail.retryable ? 2 : 1;
         return;
@@ -63,12 +87,13 @@ function sandboxFinalizationClient(args) {
             message: 'sandbox control rejected the finalization request',
             retryable: false
         };
-        writeFinalizationEnvelope(finalizationErrorStatus(error), error.code === 'SANDBOX_CONTROL_RESULT_UNKNOWN', error);
+        const status = finalizationErrorStatus(error);
+        writeFinalizationEnvelope(status, error.code === 'SANDBOX_CONTROL_RESULT_UNKNOWN', error, status === 'unknown' ? null : false, null, response.id);
         process.stderr.write(`${error.message}\n`);
         process.exitCode = error.code === 'SANDBOX_CONTROL_RESULT_UNKNOWN' ? 1 : error.retryable ? 2 : 1;
         return;
     }
-    process.stdout.write(response.stdout);
+    process.stdout.write(finalizationResponseOutput(response));
     process.stderr.write(response.stderr);
     process.exitCode = response.exitCode ?? 1;
 }

package/dist/lib/internal/task-finalization.js

@@ -1,14 +1,13 @@
 import { createDirectHostExecutionContext, dispatchTaskControlOperation, parseTaskControlOperation } from '../task/control-authority.js';
-import { applyTaskFinalization, bindTaskFinalizationReceipt, prepareTaskFinalization } from '../task/finalization.js';
-import { publishTaskFinalizationHandoff } from '../task/finalization-handoff.js';
+import { applyTaskFinalization } from '../task/finalization.js';
 import { detectRepoRoot, resolveTaskRef } from '../task/resolve-ref.js';
-import { verifyTaskEvent } from '../task/verification.js';
 import { resolveSandboxControlTransport } from './task-operation-registry.js';
 import { requestSandboxTaskFinalization, SandboxControlClientError } from '../sandbox/control/client.js';
+import { serializeTaskFinalizationEnvelope } from '../task/finalization-envelope.js';
 import { ensureInternalHandlerRoute, internalHandlerRoute } from './cli-route-inventory.js';
 const USAGE = 'Usage: agent-infra-internal task-finalization <N | TASK-id> complete --agent <agent>\n';
-function envelope(status, changed, accepted, result, error) {
-    return `${JSON.stringify({ version: 1, status, changed, accepted, result, error })}\n`;
+function envelope(status, changed, accepted, result, error, requestId = null) {
+    return serializeTaskFinalizationEnvelope({ status, changed, accepted, requestId, result, error });
 }
 function exitCode(status) {
     return status === 'completed' ? 0 : status === 'blocked' ? 2 : 1;
@@ -65,22 +64,9 @@ async function taskFinalization(args = []) {
     };
     const transport = resolveSandboxControlTransport(process.env, { localWorkflow: true });
     if (transport.kind === 'sandbox-local') {
-        const prepared = await prepareTaskFinalization(boundOperation.request, {
-            repoRoot,
-            preflight: (request, options) => verifyTaskEvent({ ...request, event: 'complete-task.hard-preflight' }, options)
-        });
-        if (prepared.status !== 'prepared') {
-            process.stdout.write(envelope(prepared.status, prepared.changed, true, prepared, prepared.error));
-            process.exitCode = exitCode(prepared.status);
-            return;
-        }
         try {
             const response = requestSandboxTaskFinalization({
-                agent: boundOperation.request.agent,
-                prepareHandoff: (binding) => {
-                    const receipt = bindTaskFinalizationReceipt(repoRoot, boundOperation.request.taskRef, binding);
-                    return publishTaskFinalizationHandoff('/share/branch', receipt, binding);
-                }
+                agent: boundOperation.request.agent
             });
             process.stdout.write(response.stdout);
             process.stderr.write(response.stderr);
@@ -88,11 +74,16 @@ async function taskFinalization(args = []) {
             return;
         }
         catch (error) {
-            const detail = error instanceof SandboxControlClientError
-                ? error.detail
+            const clientError = error instanceof SandboxControlClientError ? error : null;
+            const detail = clientError
+                ? clientError.detail
                 : { code: 'SANDBOX_CONTROL_CLIENT_FAILED', message: error instanceof Error ? error.message : String(error), retryable: false };
-            process.stdout.write(envelope(detail.retryable ? 'blocked' : 'failed', false, false, null, detail));
-            process.exitCode = detail.retryable ? 2 : 1;
+            const status = detail.code === 'SANDBOX_CONTROL_RESULT_UNKNOWN'
+                ? 'unknown'
+                : detail.retryable ? 'blocked' : 'failed';
+            const changed = status === 'unknown' ? null : false;
+            process.stdout.write(envelope(status, changed, clientError?.accepted ?? false, null, detail, clientError?.requestId ?? null));
+            process.exitCode = exitCode(status);
             return;
         }
     }

package/dist/lib/internal/task-operation-registry.js

@@ -102,9 +102,8 @@ function internalTaskRoutes() {
         descriptor('internal', 'task-review', 'preflight', 'task-bound', 'artifact-write'),
         descriptor('internal', 'task-review', 'finalize-summary', 'task-bound', 'progress'),
         descriptor('internal', 'task-event', 'event', 'task-bound', 'progress'),
-        descriptor('internal', 'task-invalidation', 'reconcile', 'task-bound', 'progress'),
         descriptor('internal', 'task-lifecycle', 'intent', 'task-bound', 'progress'),
-        descriptor('internal', 'task-finalization', 'complete', 'task-bound', 'progress'),
+        descriptor('internal', 'task-finalization', 'complete', 'task-bound', 'recovery'),
         descriptor('internal', 'task-platform-recovery', 'inspect', 'task-bound', 'diagnostic'),
         descriptor('internal', 'task-platform-recovery', 'recover', 'task-bound', 'recovery'),
         descriptor('internal', 'task-short-id', 'list', 'conditional', 'diagnostic'),
@@ -179,7 +178,7 @@ export const INTERNAL_DISPATCHER_ROUTES = Object.freeze([
     'git-workflow', 'task-delivery', 'release-workflow', 'platform-release-notes', 'platform-security', 'platform-metadata', 'platform-context',
     'platform-comment', 'platform-issue', 'platform-pr', 'platform-pr-review', 'pr-review-grade',
     'platform-checks', 'task-context', 'task-ledger', 'task-warning', 'task-activity', 'task-artifact',
-    'task-orchestration', 'task-review', 'task-event', 'task-invalidation', 'task-lifecycle',
+    'task-orchestration', 'task-review', 'task-event', 'task-lifecycle',
     'task-finalization', 'task-platform-recovery', 'task-short-id', 'task-snapshot', 'task-verify', 'task-validate', 'manual-validation'
 ]);
 export const PUBLIC_DISPATCHER_ROUTES = Object.freeze([

package/dist/lib/internal/task-platform-recovery.js

@@ -2,7 +2,7 @@ import { detectRepoRoot, resolveTaskRef } from '../task/resolve-ref.js';
 import { readPlatformOperationJournal } from '../task/platform-operation-journal.js';
 import { recoverPlatformOperations } from '../task/platform-operation-recovery.js';
 import { ensureInternalHandlerRoute, internalHandlerRoute } from './cli-route-inventory.js';
-const USAGE = 'Usage: agent-infra-internal task-platform-recovery <N | TASK-id> <inspect | recover> [--agent <agent>] [--selection required|deferred|all]\n';
+const USAGE = 'Usage: agent-infra-internal task-platform-recovery <N | TASK-id> <inspect | recover> [--agent <agent>] [--selection required|deferred|all] [--attempts <positive-integer>]\n';
 function option(args, name) {
     const index = args.indexOf(name);
     return index >= 0 ? args[index + 1] : undefined;
@@ -41,14 +41,19 @@ async function taskPlatformRecovery(args = []) {
     }
     const agent = option(args, '--agent');
     const selection = option(args, '--selection') ?? 'all';
+    const attemptsInput = option(args, '--attempts');
+    const attempts = attemptsInput === undefined ? undefined : Number(attemptsInput);
+    const validAttempts = attemptsInput === undefined
+        || (attempts !== undefined && Number.isSafeInteger(attempts) && attempts > 0);
     if (!agent || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u.test(agent)
-        || !['required', 'deferred', 'all'].includes(selection)) {
-        process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code: 'PLATFORM_OPERATION_RECOVERY_PAYLOAD_INVALID', message: 'recover requires a valid --agent and --selection' } })}\n`);
+        || !['required', 'deferred', 'all'].includes(selection)
+        || !validAttempts) {
+        process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code: 'PLATFORM_OPERATION_RECOVERY_PAYLOAD_INVALID', message: 'recover requires a valid --agent, --selection, and positive --attempts when supplied' } })}\n`);
         process.stderr.write(USAGE);
         process.exitCode = 1;
         return;
     }
-    const result = await recoverPlatformOperations(task.taskId, selection, { agent, cwd: repoRoot });
+    const result = await recoverPlatformOperations(task.taskId, selection, { agent, cwd: repoRoot, ...(attempts === undefined ? {} : { attempts }) });
     process.stdout.write(`${JSON.stringify(result)}\n`);
     process.exitCode = result.status === 'applied' || result.status === 'no-op' ? 0 : result.status === 'blocked' ? 2 : 1;
 }

package/dist/lib/platform/completion-backfill.js

@@ -8,6 +8,7 @@ import { getOpenWorkflowWarnings } from '../task/workflow-warnings.js';
 import { applyWorkflowWarningIntent } from '../task/workflow-warning-intents.js';
 import { captureTaskWriteMetadata } from '../task/write.js';
 import { syncPlatformComment } from './issue-comments.js';
+import { providerErrorRetryable } from './provider-validation.js';
 import { platformResult } from './types.js';
 import { taskIssueIdentity } from './task-identities.js';
 function result(base, artifacts, warnings) {
@@ -124,7 +125,7 @@ async function backfillCompletionComments(taskRef, options) {
         if (latest.status === 'failed' || latest.status === 'blocked')
             return result({ ...latest, operations }, artifacts, []);
         if (latest.error)
-            return result(platformResult(latest.error.retryable ? 'blocked' : 'failed', {
+            return result(platformResult(latest.error.retryable || providerErrorRetryable(latest.error.code) ? 'blocked' : 'failed', {
                 platform: latest.platform,
                 resource: latest.resource,
                 capabilities: latest.capabilities,

package/dist/lib/platform/context.js

@@ -1,18 +1,20 @@
 import path from 'node:path';
 import { loadPlatformProvider } from './provider-loader.js';
 import { defaultGitRemote, parseGitHubRemote } from './github-provider.js';
+import { providerErrorRetryable } from './provider-validation.js';
 import { platformResult } from './types.js';
 function errorStatus(error) {
-    if (error.retryable || error.code === 'AUTH_REQUIRED' || error.code === 'PLATFORM_DEPENDENCY_MISSING')
+    if (error.retryable || providerErrorRetryable(error.code) || error.code === 'AUTH_REQUIRED' || error.code === 'PLATFORM_DEPENDENCY_MISSING')
         return 'blocked';
     if (error.code === 'REMOTE_MISSING' || error.code === 'PLATFORM_UNSUPPORTED')
         return 'no-op';
     return 'failed';
 }
 function contextError(providerType, error, repository = null) {
+    const retryable = error.retryable ?? providerErrorRetryable(error.code);
     return platformResult(errorStatus(error), {
         platform: { type: providerType || null, repository, currentUser: null },
-        error: { code: error.code, message: error.message, retryable: error.retryable }
+        error: { code: error.code, message: error.message, retryable }
     });
 }
 function contextFromSnapshot(providerType, snapshot) {

package/dist/lib/platform/github-client.js

@@ -59,30 +59,33 @@ function classifyGitHubFailure(result) {
         return {
             code: 'PLATFORM_OUTPUT_TOO_LARGE',
             message: 'GitHub CLI output exceeded the configured limit',
-            retryable: false
+            requestRetryable: false
         };
     }
     const detail = boundedFailureDetail(result);
     const lower = detail.toLowerCase();
     if (/\b401\b|bad credentials|authentication required|not logged into/.test(lower)) {
-        return { code: 'AUTH_REQUIRED', message: detail || 'GitHub authentication is required', retryable: false };
+        return { code: 'AUTH_REQUIRED', message: detail || 'GitHub authentication is required', requestRetryable: false };
     }
     if (/\b429\b|rate limit|secondary rate|\b5\d\d\b|timeout|timed out|econnreset|enotfound|dns|tls|socket|network/.test(lower)) {
-        return { code: 'NETWORK_TRANSIENT', message: detail || 'GitHub request failed temporarily', retryable: true };
+        return { code: 'NETWORK_TRANSIENT', message: detail || 'GitHub request failed temporarily', requestRetryable: true };
     }
     if (/\b403\b|resource not accessible|permission denied/.test(lower)) {
-        return { code: 'PERMISSION_DENIED', message: detail || 'GitHub permission denied', retryable: false };
+        return { code: 'PERMISSION_DENIED', message: detail || 'GitHub permission denied', requestRetryable: false };
     }
     if (/\b404\b/.test(lower)) {
-        return { code: 'RESOURCE_NOT_FOUND', message: detail || 'GitHub resource not found', retryable: false };
+        return { code: 'RESOURCE_NOT_FOUND', message: detail || 'GitHub resource not found', requestRetryable: false };
     }
     if (/\b422\b|validation failed/.test(lower)) {
-        return { code: 'PLATFORM_REQUEST_INVALID', message: detail || 'GitHub rejected the request', retryable: false };
+        return { code: 'PLATFORM_REQUEST_INVALID', message: detail || 'GitHub rejected the request', requestRetryable: false };
     }
     if (errorCode === 'ENOENT') {
-        return { code: 'PLATFORM_DEPENDENCY_MISSING', message: detail || 'GitHub CLI is unavailable', retryable: false };
+        return { code: 'PLATFORM_DEPENDENCY_MISSING', message: detail || 'GitHub CLI is unavailable', requestRetryable: false };
     }
-    return { code: 'PLATFORM_REQUEST_FAILED', message: detail || 'GitHub request failed', retryable: false };
+    return { code: 'PLATFORM_REQUEST_FAILED', message: detail || 'GitHub request failed', requestRetryable: false };
+}
+function clientError(error) {
+    return { code: error.code, message: error.message };
 }
 function responseUrl(args) {
     const endpoint = args.find((arg, index) => index > 0 && !arg.startsWith('-')) || '';
@@ -132,14 +135,14 @@ function createGitHubClient(options = {}) {
             if (result.status === 0)
                 return { ok: true, value: result.stdout };
             const error = classifyGitHubFailure(result);
-            if (!retryableMethod || !error.retryable)
-                return { ok: false, error };
+            if (!retryableMethod || !error.requestRetryable)
+                return { ok: false, error: clientError(error) };
             if (attempt >= delays.length) {
                 return {
                     ok: false,
                     error: error.code === 'NETWORK_TRANSIENT'
-                        ? { ...error, code: 'NETWORK_RETRY_EXHAUSTED', message: `${error.message} (retry exhausted)` }
-                        : error
+                        ? { ...clientError(error), code: 'NETWORK_RETRY_EXHAUSTED', message: `${error.message} (retry exhausted)` }
+                        : clientError(error)
                 };
             }
             sleep(delays[attempt]);
@@ -150,12 +153,12 @@ function createGitHubClient(options = {}) {
         version(request = {}) {
             const result = runner(['--version'], request);
             if (result.status !== 0)
-                return { ok: false, error: classifyGitHubFailure(result) };
+                return { ok: false, error: clientError(classifyGitHubFailure(result)) };
             const version = result.stdout.match(/^gh version (\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)(?:\s|$)/m)?.[1];
             if (!version || !semver.valid(version)) {
                 return {
                     ok: false,
-                    error: { code: 'GH_CLI_VERSION_INVALID', message: 'GitHub CLI returned an invalid version', retryable: false }
+                    error: { code: 'GH_CLI_VERSION_INVALID', message: 'GitHub CLI returned an invalid version' }
                 };
             }
             return { ok: true, value: version };
@@ -174,7 +177,7 @@ function createGitHubClient(options = {}) {
             catch {
                 return {
                     ok: false,
-                    error: { code: 'INVALID_PLATFORM_RESPONSE', message: 'GitHub returned invalid JSON', retryable: true }
+                    error: { code: 'INVALID_PLATFORM_RESPONSE', message: 'GitHub returned invalid JSON' }
                 };
             }
         },
@@ -189,12 +192,12 @@ function createGitHubClient(options = {}) {
             if (!parsed) {
                 return {
                     ok: false,
-                    error: { code: 'INVALID_PLATFORM_RESPONSE', message: 'GitHub response metadata or JSON is invalid', retryable: true }
+                    error: { code: 'INVALID_PLATFORM_RESPONSE', message: 'GitHub response metadata or JSON is invalid' }
                 };
             }
             return { ok: true, value: parsed };
         }
     };
 }
-export { classifyGitHubFailure, createGitHubClient, MINIMUM_GITHUB_CLI_VERSION, parseIncludedResponse };
+export { createGitHubClient, MINIMUM_GITHUB_CLI_VERSION, parseIncludedResponse };
 //# sourceMappingURL=github-client.js.map