@fitlab-ai/agent-infra 0.9.10 → 0.9.12

package/dist/lib/task/control-authority.js

@@ -0,0 +1,431 @@
+import path from 'node:path';
+import { normalizeAgentToken } from '../agent-clients/tokens.js';
+import { isAgentClientId } from '../agent-clients/types.js';
+import { consumeHumanOverride, failureId, overrideDryRunConflict } from './human-override.js';
+import { activateMatchingOrchestrationDelegation, activateOrchestrationDelegation, advanceOrchestration, awaitOrchestrationDelegationActivation, beginOrResumeOrchestration, dispatchOrchestrationDelegation, OrchestrationStateError, pauseOrchestration, prepareOrchestrationDelegation, recoverPreparedOrchestrationDelegation, routeOrchestration, sealMatchingOrchestrationDelegation, sealOrchestrationDelegation, statusOrchestration } from './orchestration.js';
+import { prepareCodexOrchestrationDelegation } from './codex-orchestration.js';
+import { applyTaskFinalization } from './finalization.js';
+import { applyTaskLifecycle, taskLifecycleFailure } from './lifecycle.js';
+import { resolveTaskRef, TASK_ID_RE } from './resolve-ref.js';
+import { TaskExecutionLockError, withTaskExecutionLock } from './task-execution-lock.js';
+import { verifyTaskEvent } from './verification.js';
+function invalidContext(message) {
+    throw new Error(`TASK_CONTROL_CONTEXT_INVALID: ${message}`);
+}
+function absolute(name, value) {
+    if (!value || !path.isAbsolute(value))
+        invalidContext(`${name} must be absolute`);
+    return path.resolve(value);
+}
+function binding(value) {
+    if (value === null || value === undefined)
+        return value;
+    if (!/^[a-f0-9]{64}$/u.test(value.instanceDigest) || !value.controlGeneration) {
+        invalidContext('controller binding is invalid');
+    }
+    return value;
+}
+export function createDirectHostExecutionContext(params) {
+    return {
+        source: 'direct-host',
+        mode: 'direct-host',
+        repoRoot: absolute('repoRoot', params.repoRoot),
+        ...(params.runtimeDir === undefined ? {} : { runtimeDir: absolute('runtimeDir', params.runtimeDir) }),
+        ...(params.controllerBinding === undefined ? {} : { controllerBinding: binding(params.controllerBinding) })
+    };
+}
+export function createSandboxExecutorExecutionContext(params) {
+    if (!/^TASK-\d{8}-\d{6}$/u.test(params.taskId) || !params.generation || !params.requestId) {
+        invalidContext('sandbox binding is incomplete');
+    }
+    const controlRoot = path.dirname(path.resolve(params.manifestPath));
+    if (path.resolve(params.runtimeDir) !== path.join(controlRoot, 'runtime')) {
+        invalidContext('runtimeDir is not bound to the manifest control root');
+    }
+    return {
+        source: 'sandbox-executor',
+        mode: 'task-bound-sandbox',
+        repoRoot: absolute('repoRoot', params.repoRoot),
+        worktreeRoot: absolute('worktreeRoot', params.worktreeRoot),
+        runtimeDir: absolute('runtimeDir', params.runtimeDir),
+        taskId: params.taskId,
+        generation: params.generation,
+        manifestPath: absolute('manifestPath', params.manifestPath),
+        requestId: params.requestId,
+        ...(params.controllerBinding === undefined ? {} : { controllerBinding: binding(params.controllerBinding) })
+    };
+}
+export function assertTaskControlExecutionContext(context) {
+    if (context.source === 'direct-host') {
+        if (context.mode !== 'direct-host')
+            invalidContext('direct-host mode is inconsistent');
+        absolute('repoRoot', context.repoRoot);
+        if (context.runtimeDir !== undefined)
+            absolute('runtimeDir', context.runtimeDir);
+        binding(context.controllerBinding);
+        return;
+    }
+    if (context.mode !== 'task-bound-sandbox' || !/^TASK-\d{8}-\d{6}$/u.test(context.taskId)
+        || !context.generation || !context.requestId) {
+        invalidContext('sandbox executor context is incomplete');
+    }
+    absolute('repoRoot', context.repoRoot);
+    absolute('worktreeRoot', context.worktreeRoot);
+    absolute('runtimeDir', context.runtimeDir);
+    absolute('manifestPath', context.manifestPath);
+    if (path.resolve(context.runtimeDir) !== path.join(path.dirname(path.resolve(context.manifestPath)), 'runtime')) {
+        invalidContext('runtimeDir is not bound to the manifest control root');
+    }
+    binding(context.controllerBinding);
+}
+function operationTaskId(context, taskRef) {
+    if (context.source === 'sandbox-executor' && taskRef !== context.taskId) {
+        throw new Error('TASK_CONTROL_CONTEXT_TASK_MISMATCH: operation task does not match the sandbox manifest');
+    }
+}
+function domainOptions(context, options) {
+    return {
+        ...options,
+        repoRoot: context.repoRoot,
+        ...(context.source === 'sandbox-executor' ? { gitWorktreeRoot: context.worktreeRoot } : {})
+    };
+}
+function lifecycleTaskId(request, repoRoot) {
+    if (request.intent === 'restore')
+        return TASK_ID_RE.test(request.taskRef) ? request.taskRef : null;
+    try {
+        const resolved = resolveTaskRef(request.taskRef, { repoRoot });
+        return resolved.ok ? resolved.taskId : null;
+    }
+    catch {
+        return null;
+    }
+}
+function applyLifecycleWithAuthority(context, request) {
+    const conflict = overrideDryRunConflict(request);
+    if (conflict) {
+        return taskLifecycleFailure(request, { code: 'LIFECYCLE_PAYLOAD_INVALID', message: conflict.message });
+    }
+    const execute = () => {
+        const lifecycleResult = applyTaskLifecycle(request, { repoRoot: context.repoRoot });
+        if (lifecycleResult.status !== 'failed' || !request.overrideTicket)
+            return lifecycleResult;
+        if (!request.overrideTarget || !request.overrideScope) {
+            return {
+                ...lifecycleResult,
+                error: { code: 'OVERRIDE_PAYLOAD_INVALID', message: 'override ticket requires --override-target and --override-scope' }
+            };
+        }
+        const override = consumeHumanOverride({
+            taskRef: request.taskRef,
+            ticketId: request.overrideTicket,
+            failureId: failureId('lifecycle.apply', lifecycleResult.error?.code ?? 'LIFECYCLE_FAILED'),
+            target: request.overrideTarget,
+            scope: request.overrideScope,
+            intent: request.intent,
+            ...('alertNumber' in request && request.alertNumber ? { alertNumber: request.alertNumber } : {}),
+            ...('issueNumber' in request && request.issueNumber ? { issueNumber: request.issueNumber } : {}),
+            ...('stagingDir' in request && request.stagingDir ? { stagingDir: request.stagingDir } : {})
+        }, { repoRoot: context.repoRoot });
+        if (override.status === 'failed')
+            return { ...lifecycleResult, humanOverride: override };
+        return { ...lifecycleResult, ...override, humanOverride: override, error: null };
+    };
+    const taskId = lifecycleTaskId(request, context.repoRoot);
+    if (!taskId)
+        return execute();
+    try {
+        return withTaskExecutionLock(context.repoRoot, taskId, `task-lifecycle.${request.intent}`, execute);
+    }
+    catch (error) {
+        if (!(error instanceof TaskExecutionLockError))
+            throw error;
+        return taskLifecycleFailure(request, { code: error.code, message: error.message }, taskId);
+    }
+}
+function orchestration(context, operation) {
+    operationTaskId(context, operation.taskRef);
+    const input = operation.input;
+    const options = domainOptions(context, operation.options);
+    switch (operation.intent) {
+        case 'begin-or-resume':
+            return beginOrResumeOrchestration(operation.taskRef, {
+                ...options,
+                client: input.client,
+                maxSteps: input.maxSteps,
+                modelPolicy: input.modelPolicy
+            });
+        case 'route': return routeOrchestration(operation.taskRef, options);
+        case 'status': return statusOrchestration(operation.taskRef, options);
+        case 'prepare': {
+            const prepareInput = {
+                client: input.client,
+                requestedModel: input.requestedModel,
+                requestedReasoningEffort: input.requestedReasoningEffort,
+                ...(input.capabilityToken === undefined ? {} : { capabilityToken: input.capabilityToken })
+            };
+            if (prepareInput.client === 'codex') {
+                return prepareCodexOrchestrationDelegation(operation.taskRef, prepareInput, {
+                    repoRoot: context.repoRoot,
+                    orchestrationOptions: options,
+                    ...(context.controllerBinding ? { controllerBinding: context.controllerBinding } : {})
+                });
+            }
+            return prepareOrchestrationDelegation(operation.taskRef, prepareInput, options);
+        }
+        case 'dispatch': return dispatchOrchestrationDelegation(operation.taskRef, options);
+        case 'await-activation':
+            return awaitOrchestrationDelegationActivation(operation.taskRef, input.event, options);
+        case 'recover-prepared': return recoverPreparedOrchestrationDelegation(operation.taskRef, options);
+        case 'hook-start':
+            return input.auto === true
+                ? activateMatchingOrchestrationDelegation(input.client, input.event, options)
+                : activateOrchestrationDelegation(operation.taskRef, input.event, options);
+        case 'hook-stop':
+            return input.auto === true
+                ? sealMatchingOrchestrationDelegation(input.client, input.event, options)
+                : sealOrchestrationDelegation(operation.taskRef, input.event, options);
+        case 'advance': return advanceOrchestration(operation.taskRef, options);
+        case 'pause':
+            return pauseOrchestration(operation.taskRef, input.code, input.message, input.recoverable, options);
+    }
+}
+function orchestrationFailure(error) {
+    if (error instanceof OrchestrationStateError) {
+        return {
+            status: 'failed', changed: false, taskId: error.taskId, run: null, next: null,
+            error: { code: error.code, message: error.message }
+        };
+    }
+    throw error;
+}
+export function dispatchTaskControlOperation(context, operation) {
+    assertTaskControlExecutionContext(context);
+    assertTaskControlOperation(operation);
+    if (operation.family === 'task-lifecycle') {
+        operationTaskId(context, operation.request.taskRef);
+        return applyLifecycleWithAuthority(context, operation.request);
+    }
+    if (operation.family === 'task-finalization') {
+        operationTaskId(context, operation.request.taskRef);
+        return applyTaskFinalization(operation.request, {
+            repoRoot: context.repoRoot,
+            preflight: (request, options) => verifyTaskEvent({ ...request, event: 'complete-task.hard-preflight' }, options)
+        });
+    }
+    try {
+        const result = orchestration(context, operation);
+        return result instanceof Promise ? result.catch(orchestrationFailure) : result;
+    }
+    catch (error) {
+        return orchestrationFailure(error);
+    }
+}
+export function assertTaskControlOperation(operation) {
+    if (operation.family === 'task-lifecycle') {
+        if (!operation.request.taskRef || !normalizeAgentToken(operation.request.agent)) {
+            throw new Error('TASK_CONTROL_OPERATION_INVALID: lifecycle request is invalid');
+        }
+        return;
+    }
+    if (operation.family === 'task-finalization') {
+        if (!operation.request.taskRef || !normalizeAgentToken(operation.request.agent)) {
+            throw new Error('TASK_CONTROL_OPERATION_INVALID: finalization request is invalid');
+        }
+        return;
+    }
+    if (!operation.taskRef || !operation.intent || !operation.input || typeof operation.input !== 'object' || Array.isArray(operation.input)) {
+        throw new Error('TASK_CONTROL_OPERATION_INVALID: orchestration operation is invalid');
+    }
+}
+function operationInvalid(message) {
+    throw new Error(`TASK_CONTROL_OPERATION_INVALID: ${message}`);
+}
+const LIFECYCLE_FLAGS = new Set([
+    '--agent', '--reason', '--unblock-condition', '--note', '--alert-number', '--staging-dir', '--issue-number',
+    '--override-ticket', '--override-target', '--override-scope', '--dry-run'
+]);
+const FINALIZATION_FLAGS = new Set(['--agent']);
+const ORCHESTRATION_FLAGS = new Set([
+    '--agent', '--max-steps', '--executor-model', '--executor-reasoning-effort', '--reviewer-model',
+    '--reviewer-reasoning-effort', '--client', '--requested-model', '--requested-reasoning-effort',
+    '--capability-token', '--parent-id', '--before-fingerprint', '--stage', '--round', '--artifact', '--role',
+    '--native-agent', '--child-id', '--spawn-mode', '--actual-model', '--actual-reasoning-effort',
+    '--model-fallback-reason', '--reasoning-effort-fallback-reason', '--exit-code', '--after-fingerprint',
+    '--changed-paths', '--code', '--message', '--recoverable', '--git-worktree-root'
+]);
+function parseValues(args, start, flags) {
+    const values = {};
+    for (let index = start; index < args.length; index += 1) {
+        const flag = args[index];
+        if (flag === '--dry-run') {
+            if (!flags.has(flag))
+                operationInvalid(`unknown option '${flag}'`);
+            if (values[flag] !== undefined)
+                operationInvalid(`duplicate option '${flag}'`);
+            values[flag] = true;
+            continue;
+        }
+        if (!flags.has(flag))
+            operationInvalid(`unknown option '${flag}'`);
+        if (values[flag] !== undefined)
+            operationInvalid(`duplicate option '${flag}'`);
+        const value = args[++index];
+        if (!value || value.startsWith('--'))
+            operationInvalid(`option '${flag}' requires a value`);
+        values[flag] = value;
+    }
+    return values;
+}
+function value(values, flag) {
+    const current = values[flag];
+    return typeof current === 'string' ? current : undefined;
+}
+function required(values, flags) {
+    const missing = flags.find((flag) => value(values, flag) === undefined);
+    if (missing)
+        operationInvalid(`option '${missing}' is required`);
+}
+export function parseTaskControlOperation(family, args) {
+    if (family === 'task-finalization') {
+        if (args.length !== 4 || args[1] !== 'complete' || args[2] !== '--agent' || !args[0] || !args[3]) {
+            operationInvalid('task ref, complete intent, and --agent are required');
+        }
+        const values = parseValues(args, 2, FINALIZATION_FLAGS);
+        const agent = normalizeAgentToken(value(values, '--agent') ?? '');
+        if (!agent)
+            operationInvalid('finalization agent is invalid');
+        return { family, request: { taskRef: args[0], intent: 'complete', agent } };
+    }
+    if (args.length < 2)
+        operationInvalid('task ref and intent are required');
+    const taskRef = args[0];
+    const intent = args[1];
+    if (family === 'task-lifecycle') {
+        const values = parseValues(args, 2, LIFECYCLE_FLAGS);
+        const agent = normalizeAgentToken(value(values, '--agent') ?? '');
+        if (!agent)
+            operationInvalid('lifecycle agent is invalid');
+        const input = {
+            taskRef,
+            intent,
+            agent,
+            ...(value(values, '--reason') ? { reason: value(values, '--reason') } : {}),
+            ...(value(values, '--unblock-condition') ? { unblockCondition: value(values, '--unblock-condition') } : {}),
+            ...(value(values, '--note') ? { note: value(values, '--note') } : {}),
+            ...(value(values, '--staging-dir') ? { stagingDir: value(values, '--staging-dir') } : {}),
+            ...(value(values, '--override-ticket') ? { overrideTicket: value(values, '--override-ticket') } : {}),
+            ...(value(values, '--override-target') ? { overrideTarget: value(values, '--override-target') } : {}),
+            ...(value(values, '--override-scope') ? { overrideScope: value(values, '--override-scope') } : {}),
+            ...(value(values, '--alert-number') ? { alertNumber: Number(value(values, '--alert-number')) } : {}),
+            ...(value(values, '--issue-number') ? { issueNumber: Number(value(values, '--issue-number')) } : {}),
+            ...(values['--dry-run'] === true ? { dryRun: true } : {})
+        };
+        return { family, request: input };
+    }
+    const values = parseValues(args, 2, ORCHESTRATION_FLAGS);
+    const orchestrationIntents = new Set([
+        'begin-or-resume', 'route', 'prepare', 'dispatch', 'await-activation', 'recover-prepared',
+        'hook-start', 'hook-stop', 'advance', 'pause', 'status'
+    ]);
+    if (!orchestrationIntents.has(intent)) {
+        operationInvalid(`unknown orchestration intent '${intent}'`);
+    }
+    const client = value(values, '--client');
+    if (client !== undefined && !isAgentClientId(client))
+        operationInvalid(`unknown client '${client}'`);
+    const parsedIntent = intent;
+    const input = {};
+    if (parsedIntent === 'begin-or-resume' || parsedIntent === 'prepare') {
+        required(values, ['--client']);
+        if (!client || !isAgentClientId(client))
+            operationInvalid(`unknown client '${client ?? ''}'`);
+        input.client = client;
+    }
+    if (parsedIntent === 'begin-or-resume') {
+        const maxSteps = value(values, '--max-steps');
+        if (maxSteps !== undefined) {
+            const parsed = Number(maxSteps);
+            if (!Number.isInteger(parsed) || parsed < 1)
+                operationInvalid('--max-steps must be a positive integer');
+            input.maxSteps = parsed;
+        }
+        const policyFlags = ['--executor-model', '--executor-reasoning-effort', '--reviewer-model', '--reviewer-reasoning-effort'];
+        const hasPolicy = policyFlags.some((flag) => value(values, flag) !== undefined);
+        if (hasPolicy && policyFlags.some((flag) => value(values, flag) === undefined)) {
+            operationInvalid('explicit model policy requires executor/reviewer model and reasoning effort');
+        }
+        if (hasPolicy) {
+            input.modelPolicy = {
+                executor: { model: value(values, '--executor-model'), reasoningEffort: value(values, '--executor-reasoning-effort') },
+                reviewer: { model: value(values, '--reviewer-model'), reasoningEffort: value(values, '--reviewer-reasoning-effort') }
+            };
+        }
+    }
+    if (parsedIntent === 'prepare') {
+        input.requestedModel = value(values, '--requested-model');
+        input.requestedReasoningEffort = value(values, '--requested-reasoning-effort');
+        input.capabilityToken = value(values, '--capability-token');
+    }
+    if (parsedIntent === 'await-activation') {
+        required(values, ['--stage', '--round', '--artifact', '--role']);
+        const round = Number(value(values, '--round'));
+        if (!Number.isSafeInteger(round) || round < 1)
+            operationInvalid('--round must be a positive integer');
+        const role = value(values, '--role');
+        if (role !== 'executor' && role !== 'reviewer')
+            operationInvalid('--role must be executor or reviewer');
+        input.event = { stage: value(values, '--stage'), round, artifact: value(values, '--artifact'), role };
+    }
+    if (parsedIntent === 'hook-start') {
+        required(values, ['--native-agent', '--child-id', '--parent-id']);
+        if (taskRef === 'auto')
+            required(values, ['--client']);
+        input.auto = taskRef === 'auto';
+        input.client = value(values, '--client');
+        input.event = {
+            nativeAgent: value(values, '--native-agent'), childId: value(values, '--child-id'), parentId: value(values, '--parent-id'),
+            spawnMode: value(values, '--spawn-mode'), actualModel: value(values, '--actual-model'),
+            actualReasoningEffort: value(values, '--actual-reasoning-effort'), modelFallbackReason: value(values, '--model-fallback-reason'),
+            reasoningEffortFallbackReason: value(values, '--reasoning-effort-fallback-reason')
+        };
+    }
+    if (parsedIntent === 'hook-stop') {
+        input.auto = taskRef === 'auto';
+        if (input.auto) {
+            required(values, ['--client', '--native-agent', '--child-id']);
+            input.client = value(values, '--client');
+            input.event = {
+                nativeAgent: value(values, '--native-agent'), childId: value(values, '--child-id'), actualModel: value(values, '--actual-model'),
+                actualReasoningEffort: value(values, '--actual-reasoning-effort'), modelFallbackReason: value(values, '--model-fallback-reason'),
+                reasoningEffortFallbackReason: value(values, '--reasoning-effort-fallback-reason')
+            };
+        }
+        else {
+            required(values, ['--child-id', '--exit-code', '--after-fingerprint']);
+            const exitCode = Number(value(values, '--exit-code'));
+            if (!Number.isInteger(exitCode))
+                operationInvalid('--exit-code must be an integer');
+            input.event = {
+                childId: value(values, '--child-id'), exitCode, afterFingerprint: value(values, '--after-fingerprint'),
+                changedPaths: value(values, '--changed-paths')?.split(',').filter(Boolean) ?? [], actualModel: value(values, '--actual-model'),
+                actualReasoningEffort: value(values, '--actual-reasoning-effort'), modelFallbackReason: value(values, '--model-fallback-reason'),
+                reasoningEffortFallbackReason: value(values, '--reasoning-effort-fallback-reason')
+            };
+        }
+    }
+    if (parsedIntent === 'pause') {
+        required(values, ['--code', '--message', '--recoverable']);
+        const recoverable = value(values, '--recoverable');
+        if (recoverable !== 'true' && recoverable !== 'false')
+            operationInvalid('--recoverable must be true or false');
+        input.code = value(values, '--code');
+        input.message = value(values, '--message');
+        input.recoverable = recoverable === 'true';
+    }
+    const options = value(values, '--git-worktree-root') === undefined
+        ? undefined
+        : { gitWorktreeRoot: value(values, '--git-worktree-root') };
+    return { family, taskRef, intent: parsedIntent, input, ...(options ? { options } : {}) };
+}
+//# sourceMappingURL=control-authority.js.map

package/dist/lib/task/create.js

@@ -1,8 +1,11 @@
 import { createHash, randomUUID } from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
+import { isValidAgentInfraVersion, VERSION } from '../version.js';
 import { loadShortIdByTaskId, mutateShortIdRegistry } from './short-id.js';
 import { TaskExecutionLockError, withTaskExecutionLock } from './task-execution-lock.js';
+import { readDeliveryDefaults, validateBaseRef, validateRemote } from './delivery-target.js';
+import { buildUnboundFact, encodePrDeliveryFact } from './pr-delivery-fact.js';
 const AGENTS = ['claude', 'codex', 'antigravity', 'opencode', 'cursor'];
 const TYPES = ['feature', 'bugfix', 'refactor', 'docs', 'chore'];
 const PRIORITIES = ['Urgent', 'High', 'Medium', 'Low'];
@@ -14,12 +17,15 @@ const TASK_INPUT_KEYS = [
 function payloadError(message) {
     throw new Error(`TASK_CREATE_PAYLOAD_INVALID: ${message}`);
 }
-function exactKeys(value, expected, label) {
+function exactKeys(value, expected, label, optional = []) {
     const actual = Object.keys(value).sort();
     const wanted = [...expected].sort();
-    if (actual.length !== wanted.length || actual.some((key, index) => key !== wanted[index])) {
+    const allowed = new Set([...expected, ...optional]);
+    if (actual.some((key) => !allowed.has(key))) {
         payloadError(`${label} has unknown or missing fields`);
     }
+    if (expected.some((key) => !actual.includes(key)))
+        payloadError(`${label} has unknown or missing fields`);
 }
 function cleanString(value, label, maxBytes, oneLine = false) {
     if (typeof value !== 'string' || value.length === 0 || Buffer.byteLength(value, 'utf8') > maxBytes) {
@@ -42,7 +48,7 @@ function validateTaskCreateCandidate(value) {
     exactKeys(candidate, [
         'version', 'idempotencyKey', 'agent', 'title', 'type', 'branchSlug',
         'priority', 'effort', 'description', 'taskInput'
-    ], 'candidate');
+    ], 'candidate', ['deliveryRemote', 'deliveryBaseRef']);
     if (candidate.version !== 1)
         payloadError('version must be 1');
     const idempotencyKey = cleanString(candidate.idempotencyKey, 'idempotencyKey', 64, true);
@@ -57,6 +63,16 @@ function validateTaskCreateCandidate(value) {
         payloadError('branchSlug must be lowercase ASCII kebab-case with length 3-64');
     }
     const description = cleanString(candidate.description, 'description', 8 * 1024);
+    const deliveryRemote = candidate.deliveryRemote === undefined
+        ? undefined
+        : cleanString(candidate.deliveryRemote, 'deliveryRemote', 200, true);
+    const deliveryBaseRef = candidate.deliveryBaseRef === undefined
+        ? undefined
+        : cleanString(candidate.deliveryBaseRef, 'deliveryBaseRef', 200, true);
+    if (deliveryRemote !== undefined && !validateRemote(deliveryRemote))
+        payloadError('deliveryRemote is invalid');
+    if (deliveryBaseRef !== undefined && !validateBaseRef(deliveryBaseRef))
+        payloadError('deliveryBaseRef is invalid');
     if (!candidate.taskInput || typeof candidate.taskInput !== 'object' || Array.isArray(candidate.taskInput)) {
         payloadError('taskInput must be an object');
     }
@@ -78,6 +94,8 @@ function validateTaskCreateCandidate(value) {
         priority: enumValue(candidate.priority, PRIORITIES, 'priority'),
         effort: enumValue(candidate.effort, EFFORTS, 'effort'),
         description,
+        ...(deliveryRemote === undefined ? {} : { deliveryRemote }),
+        ...(deliveryBaseRef === undefined ? {} : { deliveryBaseRef }),
         taskInput
     };
 }
@@ -93,6 +111,8 @@ function canonicalTaskCreateCandidate(candidate) {
         priority: valid.priority,
         effort: valid.effort,
         description: valid.description,
+        deliveryRemote: valid.deliveryRemote ?? null,
+        deliveryBaseRef: valid.deliveryBaseRef ?? null,
         taskInput: Object.fromEntries(TASK_INPUT_KEYS.map((key) => [key, valid.taskInput[key]]))
     });
 }
@@ -144,7 +164,11 @@ function renderTask(params) {
         'target_date:',
         'current_step: requirement-analysis',
         `assigned_to: ${candidate.agent}`,
-        'pr_status: pending',
+        `pr_delivery_fact: ${JSON.stringify(encodePrDeliveryFact(buildUnboundFact()))}`,
+        `delivery_remote: ${candidate.deliveryRemote ?? params.delivery.remote}`,
+        `delivery_base_ref: ${candidate.deliveryBaseRef ?? params.delivery.baseRef}`,
+        'checkpoint_commit:',
+        'delivery_remote_head:',
         `task_create_key_digest: ${params.keyDigest}`,
         `task_create_candidate_digest: ${params.candidateDigest}`,
         '---'
@@ -174,7 +198,10 @@ function readProject(repoRoot) {
     if (typeof config.project !== 'string' || !/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(config.project)) {
         throw new Error('TASK_CREATE_CONFIG_INVALID: project is missing or invalid');
     }
-    return config.project;
+    const delivery = readDeliveryDefaults(repoRoot);
+    if (!delivery.ok)
+        throw new Error(`TASK_CREATE_CONFIG_INVALID: ${delivery.message}`);
+    return { project: config.project, delivery: delivery.value };
 }
 function assertRealDirectory(directory, code) {
     const stat = fs.lstatSync(directory);
@@ -258,13 +285,17 @@ function recoverPublishedTask(activeRoot, repoRoot, keyDigest, candidateDigest)
 }
 function createLocalTask(value, options) {
     const candidate = validateTaskCreateCandidate(value);
+    const agentInfraVersion = options.agentInfraVersion ?? VERSION;
+    if (!isValidAgentInfraVersion(agentInfraVersion)) {
+        throw new Error('TASK_CREATE_VERSION_INVALID: agentInfraVersion must be a valid v-prefixed semver');
+    }
     const repoRoot = fs.realpathSync.native(options.repoRoot);
     const workspaceRoot = path.join(repoRoot, '.agents', 'workspace');
     const activeRoot = path.join(workspaceRoot, 'active');
     ensureRealDirectory(path.join(repoRoot, '.agents'), 'TASK_CREATE_WORKSPACE_INVALID');
     ensureRealDirectory(workspaceRoot, 'TASK_CREATE_WORKSPACE_INVALID');
     ensureRealDirectory(activeRoot, 'TASK_CREATE_WORKSPACE_INVALID');
-    const project = readProject(repoRoot);
+    const projectConfig = readProject(repoRoot);
     const canonical = canonicalTaskCreateCandidate(candidate);
     const candidateDigest = sha256(canonical);
     const keyDigest = sha256(candidate.idempotencyKey);
@@ -307,8 +338,8 @@ function createLocalTask(value, options) {
         if (!templateStat.isFile() || templateStat.isSymbolicLink())
             throw new Error('TASK_CREATE_TEMPLATE_INVALID');
         const rendered = renderTask({
-            template: fs.readFileSync(templatePath, 'utf8'), candidate, taskId, project, timestamp,
-            agentInfraVersion: options.agentInfraVersion ?? 'unknown', keyDigest, candidateDigest
+            template: fs.readFileSync(templatePath, 'utf8'), candidate, taskId, project: projectConfig.project, delivery: projectConfig.delivery, timestamp,
+            agentInfraVersion, keyDigest, candidateDigest
         });
         const temporary = path.join(workspaceRoot, `.task-create.tmp.${process.pid}.${randomUUID()}`);
         fs.mkdirSync(temporary, { mode: 0o700 });

package/dist/lib/task/current-contract.js

@@ -0,0 +1,35 @@
+import { isValidAgentInfraVersion } from '../version.js';
+import { parseTypedTaskFrontmatter } from './frontmatter.js';
+import { LEDGER_SECTION_MISSING_CODE, LEDGER_SECTION_MISSING_MESSAGE, parseLedgerDocument, validateLedgerRows } from './ledger.js';
+function validateCurrentTaskContract(content) {
+    let metadata;
+    try {
+        metadata = parseTypedTaskFrontmatter(content);
+    }
+    catch (error) {
+        return { ok: false, code: 'TASK_DOCUMENT_INVALID', message: error instanceof Error ? error.message : String(error) };
+    }
+    if (!isValidAgentInfraVersion(metadata.agent_infra_version)) {
+        return {
+            ok: false,
+            code: 'TASK_CURRENT_CONTRACT_INVALID',
+            message: `agent_infra_version must be a valid v-prefixed semver (received ${String(metadata.agent_infra_version ?? 'missing')})`
+        };
+    }
+    let ledger;
+    try {
+        ledger = parseLedgerDocument(content);
+    }
+    catch (error) {
+        return { ok: false, code: 'TASK_DOCUMENT_INVALID', message: error instanceof Error ? error.message : String(error) };
+    }
+    if (!ledger.present) {
+        return { ok: false, code: 'TASK_CURRENT_CONTRACT_INVALID', message: `${LEDGER_SECTION_MISSING_CODE}: ${LEDGER_SECTION_MISSING_MESSAGE}` };
+    }
+    const invalid = validateLedgerRows(ledger.rows);
+    if (invalid)
+        return { ok: false, code: 'TASK_CURRENT_CONTRACT_INVALID', message: `${invalid.code}: ${invalid.message}` };
+    return { ok: true, metadata, ledger };
+}
+export { validateCurrentTaskContract };
+//# sourceMappingURL=current-contract.js.map