@fitlab-ai/agent-infra 0.12.1 → 0.12.2

package/dist/lib/task/resolve-ref.js

@@ -70,30 +70,6 @@ function findTaskMd(workspaceRoot, taskId) {
     const archived = findInArchive(workspaceRoot, taskId);
     return archived ? { taskMdPath: archived, state: 'archive' } : null;
 }
-/**
- * Enumerate every task directory under the flat workspace states
- * (active / blocked / completed) — archive is intentionally excluded so a
- * full-tree scan never pulls in cold data. Ordered by state, then task id
- * ascending, giving callers a deterministic traversal.
- */
-function enumerateTaskDirs(repoRoot) {
-    const out = [];
-    const workspaceRoot = taskRoot(repoRoot);
-    for (const sub of FLAT_WORKSPACE_DIRS) {
-        const base = path.join(workspaceRoot, sub);
-        if (!fs.existsSync(base))
-            continue;
-        for (const entry of fs.readdirSync(base).sort()) {
-            if (!TASK_ID_RE.test(entry))
-                continue;
-            const taskDir = path.join(base, entry);
-            if (!fs.existsSync(path.join(taskDir, 'task.md')))
-                continue;
-            out.push({ taskId: entry, taskDir });
-        }
-    }
-    return out;
-}
 /**
  * Enumerate every task directory, including the cold YYYY/MM/DD archive.
  * Invalid directory names, symlinks and entries without task.md are ignored;
@@ -316,5 +292,5 @@ function resolveTaskContext(taskRef, options = {}) {
     const match = matches[0];
     return { ok: true, repoRoot, ...match, state: 'active' };
 }
-export { resolveTaskRef, resolveTaskContext, detectRepoRoot, enumerateTaskDirs, enumerateAllTaskDirs, locateHotTaskDirs, TASK_ID_RE };
+export { resolveTaskRef, resolveTaskContext, detectRepoRoot, enumerateAllTaskDirs, locateHotTaskDirs, TASK_ID_RE };
 //# sourceMappingURL=resolve-ref.js.map

package/dist/lib/task/review-command.js

@@ -3,7 +3,7 @@ export function parseReviewCommand(args) {
         throw new Error('task ref and a supported review operation are required');
     const values = {};
     const flags = {
-        '--stage': 'stage', '--artifact': 'artifact', '--orchestrated': 'orchestrated', '--dry-run': 'dryRun'
+        '--stage': 'stage', '--artifact': 'artifact', '--dry-run': 'dryRun'
     };
     for (let index = 2; index < args.length; index += 1) {
         const flag = args[index];
@@ -12,7 +12,7 @@ export function parseReviewCommand(args) {
         const key = flags[flag];
         if (Object.hasOwn(values, key))
             throw new Error(`duplicate option '${flag}'`);
-        const value = flag === '--orchestrated' || flag === '--dry-run' ? true : args[++index];
+        const value = flag === '--dry-run' ? true : args[++index];
         if (!value || typeof value === 'string' && value.startsWith('--'))
             throw new Error(`option '${flag}' requires a value`);
         values[key] = value;

package/dist/lib/task/review-finalization.js

@@ -7,7 +7,6 @@ import { LEDGER_SECTION_MISSING_CODE, LEDGER_SECTION_MISSING_MESSAGE, parseLedge
 import { finalizeReviewSummaryContent } from './review-artifacts.js';
 import { inspectDecisionDetailDuplicates } from './decision-details.js';
 import { resolveTaskRef } from './resolve-ref.js';
-import { validateLifecycleExecution } from './lifecycle-execution.js';
 import { getArtifactSchema } from './artifact-schema.js';
 import { validateQualificationAudit } from './qualification-audit.js';
 import { canonicalSemanticDigest, inspectArtifactContract, sha256Content } from './artifact-operations.js';
@@ -74,13 +73,6 @@ function preflightReviewSummary(request, options = {}) {
     catch (error) {
         return preflightFailed(request, 'REVIEW_ARTIFACT_NOT_REGULAR', String(error), resolved.taskId);
     }
-    const execution = validateLifecycleExecution(request.taskRef, {
-        mode: request.orchestrated ? 'orchestrated' : 'standalone',
-        identity: { stage: spec.family, round: parsed.round, artifact: request.artifact, role: 'reviewer' },
-        dryRun: request.dryRun
-    }, { repoRoot: options.repoRoot });
-    if (!execution.ok)
-        return preflightFailed(request, 'REVIEW_PROVENANCE_INVALID', `${execution.error?.code ?? 'ORCHESTRATION_PROVENANCE_MISMATCH'}: ${execution.error?.message ?? 'orchestration provenance validation failed'}`, resolved.taskId);
     const artifactSha256 = sha256Content(content);
     const semanticDigest = canonicalSemanticDigest(content);
     const detail = inspectDecisionDetailDuplicates(content);
@@ -140,15 +132,6 @@ function prepareReviewSummaryCandidate(request, artifactContent, options = {}) {
     }
     const artifactSha256 = sha256Content(artifactContent);
     const semanticDigest = canonicalSemanticDigest(artifactContent);
-    const digests = { artifactSha256, semanticDigest };
-    const execution = validateLifecycleExecution(request.taskRef, {
-        mode: request.orchestrated ? 'orchestrated' : 'standalone',
-        identity: { stage: spec.family, round: parsed.round, artifact: request.artifact, role: 'reviewer' },
-        dryRun: request.dryRun
-    }, { repoRoot: options.repoRoot });
-    if (!execution.ok) {
-        return reject('REVIEW_PROVENANCE_INVALID', `${execution.error?.code ?? 'ORCHESTRATION_PROVENANCE_MISMATCH'}: ${execution.error?.message ?? 'orchestration provenance validation failed'}`);
-    }
     try {
         const ledger = parseLedgerDocument(taskContent);
         if (!ledger.present)
@@ -194,9 +177,6 @@ function prepareReviewSummaryCandidate(request, artifactContent, options = {}) {
         },
     };
 }
-function commitReviewSummaryProvenance(prepared, repoRoot, options = {}) {
-    return prepared.result;
-}
 function replaceCurrentArtifactAtomically(file, content) {
     const temporary = path.join(path.dirname(file), `.${path.basename(file)}.${process.pid}.${randomUUID()}.tmp`);
     try {
@@ -250,5 +230,5 @@ function finalizeReviewSummary(request, options = {}) {
         return failed(request, 'REVIEW_RECOVERY_COMMIT_FAILED', `cannot update current review artifact: ${error instanceof Error ? error.message : String(error)}`, resolved.taskId);
     }
 }
-export { finalizeReviewSummary, preflightReviewSummary, prepareReviewSummaryCandidate, commitReviewSummaryProvenance };
+export { finalizeReviewSummary, preflightReviewSummary, prepareReviewSummaryCandidate };
 //# sourceMappingURL=review-finalization.js.map

package/dist/lib/task/review-fingerprint.js

@@ -1,10 +1,6 @@
 import fs from "node:fs";
 import path from "node:path";
 import { inspectArtifactDirectory } from "./artifact-lifecycle.js";
-const REVIEWED_TREE_RE = /^[a-f0-9]{40,64}$/;
-export function parseReviewedGitTree(value) {
-    return REVIEWED_TREE_RE.test(value) ? value : null;
-}
 // Paths excluded from the post-review coverage gate. Fail-closed: the gate
 // covers ALL tracked changes by default. This default denylist is EMPTY —
 // projects opt into exclusions explicitly via review.post_review_exclude_globs.

package/dist/lib/task/secure-fs.js

@@ -2,7 +2,6 @@ import { createHash } from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
 const NO_FOLLOW = fs.constants.O_NOFOLLOW ?? 0;
-const DIRECTORY = fs.constants.O_DIRECTORY ?? 0;
 export class SecureFileError extends Error {
     code;
     constructor(code, message) {
@@ -30,9 +29,6 @@ function assertNoSymlinkAncestors(candidate) {
         current = parent;
     }
 }
-export async function readStableFile(candidate, options) {
-    return readStableFileSync(candidate, options);
-}
 export function readStableFileSync(candidate, options) {
     if (!path.isAbsolute(candidate))
         conflict('candidate path must be absolute and terminal');
@@ -74,56 +70,4 @@ export function readStableFileSync(candidate, options) {
             fs.closeSync(descriptor);
     }
 }
-export async function writeAtomicFile(target, bytes, mode = 0o600, expectedSha256) {
-    const parent = path.dirname(target);
-    let current = path.resolve(parent);
-    while (true) {
-        let stat;
-        try {
-            stat = await fs.promises.lstat(current);
-        }
-        catch {
-            throw new SecureFileError('TASK_ARTIFACT_WRITE_CONFLICT', 'authoritative parent directory is missing');
-        }
-        if (!stat.isDirectory() || stat.isSymbolicLink())
-            throw new SecureFileError('TASK_ARTIFACT_WRITE_CONFLICT', 'authoritative parent directory is not a real directory');
-        const next = path.dirname(current);
-        if (next === current)
-            break;
-        current = next;
-    }
-    try {
-        const existing = await fs.promises.lstat(target);
-        if (existing.isSymbolicLink() || !existing.isFile())
-            throw new SecureFileError('TASK_ARTIFACT_WRITE_CONFLICT', 'authoritative target is not a regular file');
-    }
-    catch (error) {
-        if (error.code !== 'ENOENT')
-            throw error;
-    }
-    const temporary = path.join(parent, `.${path.basename(target)}.${process.pid}.${Date.now()}.tmp`);
-    let handle;
-    try {
-        handle = await fs.promises.open(temporary, fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL, mode);
-        await handle.writeFile(bytes);
-        await handle.sync();
-        await handle.chmod(mode);
-        await handle.close();
-        handle = undefined;
-        if (expectedSha256 !== undefined)
-            readStableFileSync(target, { maxBytes: 1024 * 1024, expectedSha256 });
-        fs.renameSync(temporary, target);
-        const directory = await fs.promises.open(parent, fs.constants.O_RDONLY | DIRECTORY);
-        try {
-            await directory.sync();
-        }
-        finally {
-            await directory.close();
-        }
-    }
-    finally {
-        await handle?.close().catch(() => undefined);
-        await fs.promises.rm(temporary, { force: true }).catch(() => undefined);
-    }
-}
 //# sourceMappingURL=secure-fs.js.map

package/dist/lib/task/short-id.js

@@ -343,16 +343,6 @@ function readRegistry(repoRoot) {
         return null;
     }
 }
-function readBranchFromTaskMd(repoRoot, taskId) {
-    const taskMdPath = path.join(resolveProjectTaskWorkspaceRoot(repoRoot), 'active', taskId, 'task.md');
-    if (!fs.existsSync(taskMdPath))
-        return null;
-    const content = fs.readFileSync(taskMdPath, 'utf8');
-    const m = content.match(/^branch:\s*(.+)$/m);
-    if (!m || !m[1])
-        return null;
-    return m[1].trim().replace(/^(["'])(.*)\1$/, '$2');
-}
 function loadShortIdByTaskId(repoRoot) {
     const registry = readRegistry(repoRoot);
     const map = new Map();
@@ -421,33 +411,5 @@ function inspectShortIdRegistry(repoRoot, shortIdLength = configuredShortIdLengt
         };
     }
 }
-/**
- * Resolve a branch to its active-task short id (`NN`), or `null` when no
- * active task is bound to that branch.
- *
- * Two-state semantics: this only consults the active registry
- * (`active/.short-ids.json`) plus each `active/{taskId}/task.md`. Tasks moved
- * to completed/blocked/cancelled/archive have already released their short id,
- * so their branches return `null` — in `ai sandbox ls` that surfaces as `-`,
- * meaning the sandbox is free to remove.
- */
-function lookupShortIdByBranch(branch, repoRoot, _opts) {
-    const registry = readRegistry(repoRoot);
-    if (!registry)
-        return null;
-    const matches = [];
-    for (const [key, taskId] of Object.entries(registry.ids)) {
-        const taskBranch = readBranchFromTaskMd(repoRoot, taskId);
-        if (taskBranch && taskBranch === branch) {
-            matches.push(key);
-        }
-    }
-    if (matches.length === 0)
-        return null;
-    if (matches.length > 1) {
-        process.stderr.write(`Warning: branch '${branch}' is bound to multiple active tasks: ${matches.join(', ')}; using ${matches[0]}\n`);
-    }
-    return matches[0];
-}
-export { normalizeShortIdInput, isRemovedHashShortIdInput, resolveShortIdReadOnly, lookupShortIdByBranch, loadShortIdByTaskId, inspectShortIdRegistry, configuredShortIdLength, mutateShortIdRegistry, releaseStaleShortIdRegistry, executeShortIdCommand };
+export { normalizeShortIdInput, isRemovedHashShortIdInput, resolveShortIdReadOnly, loadShortIdByTaskId, inspectShortIdRegistry, configuredShortIdLength, mutateShortIdRegistry, releaseStaleShortIdRegistry, executeShortIdCommand };
 //# sourceMappingURL=short-id.js.map

package/dist/lib/task/skill-scope.js

@@ -13,7 +13,6 @@ const TASK_SCOPE_SKILLS = new Set([
     'review-code',
     'review-plan',
     'run-manual-validation',
-    'run-task',
     'watch-pr'
 ]);
 function isTaskScopeSkill(skillName) {