@fitlab-ai/agent-infra 0.9.13 → 0.9.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (428) hide show
  1. package/README.md +10 -0
  2. package/README.zh-CN.md +10 -0
  3. package/bin/cli.ts +26 -9
  4. package/bin/internal-cli.sh +45 -0
  5. package/dist/bin/cli.js +173 -157
  6. package/dist/bin/internal-cli.js +126 -42
  7. package/dist/lib/agent-client.js +5 -0
  8. package/dist/lib/agent-clients/adapters/codex-lifecycle/capability-store.js +165 -27
  9. package/dist/lib/agent-clients/adapters/codex-lifecycle/sandbox-controller.js +3 -2
  10. package/dist/lib/defaults.json +103 -103
  11. package/dist/lib/fs/durable-write.js +37 -0
  12. package/dist/lib/fs/file-lock.js +111 -0
  13. package/dist/lib/host-control/audit.js +19 -0
  14. package/dist/lib/host-control/client.js +142 -0
  15. package/dist/lib/host-control/command.js +49 -0
  16. package/dist/lib/host-control/path.js +160 -0
  17. package/dist/lib/host-control/secure-fs.js +140 -0
  18. package/dist/lib/host-control/server.js +159 -0
  19. package/dist/lib/host-control/service.js +112 -0
  20. package/dist/lib/init.js +11 -2
  21. package/dist/lib/internal/agent-client.js +5 -2
  22. package/dist/lib/internal/cli-route-inventory.js +154 -0
  23. package/dist/lib/internal/codex-lifecycle.js +15 -12
  24. package/dist/lib/internal/codex-sandbox-controller.js +8 -2
  25. package/dist/lib/internal/demo-promotion.js +322 -0
  26. package/dist/lib/internal/demo-transcript.js +454 -0
  27. package/dist/lib/internal/git-workflow.js +10 -6
  28. package/dist/lib/internal/host-control.js +28 -0
  29. package/dist/lib/internal/manual-validation.js +322 -0
  30. package/dist/lib/internal/platform-checks.js +16 -4
  31. package/dist/lib/internal/platform-comment.js +16 -4
  32. package/dist/lib/internal/platform-context.js +4 -1
  33. package/dist/lib/internal/platform-issue.js +12 -4
  34. package/dist/lib/internal/platform-metadata.js +88 -0
  35. package/dist/lib/internal/platform-pr-review.js +16 -3
  36. package/dist/lib/internal/platform-pr.js +42 -14
  37. package/dist/lib/internal/platform-release-notes.js +6 -3
  38. package/dist/lib/internal/platform-security.js +93 -0
  39. package/dist/lib/internal/pr-review-grade.js +14 -3
  40. package/dist/lib/internal/release-workflow.js +82 -89
  41. package/dist/lib/internal/sandbox-control.js +171 -7
  42. package/dist/lib/internal/task-activity.js +13 -4
  43. package/dist/lib/internal/task-artifact.js +19 -107
  44. package/dist/lib/internal/task-context.js +4 -1
  45. package/dist/lib/internal/task-create.js +48 -14
  46. package/dist/lib/internal/task-delivery.js +4 -1
  47. package/dist/lib/internal/task-event.js +38 -35
  48. package/dist/lib/internal/task-finalization.js +4 -1
  49. package/dist/lib/internal/task-invalidation.js +4 -1
  50. package/dist/lib/internal/task-ledger.js +12 -1
  51. package/dist/lib/internal/task-lifecycle.js +4 -1
  52. package/dist/lib/internal/task-operation-registry.js +519 -0
  53. package/dist/lib/internal/task-orchestration.js +12 -0
  54. package/dist/lib/internal/task-override.js +10 -3
  55. package/dist/lib/internal/task-qualification.js +90 -0
  56. package/dist/lib/internal/task-review.js +10 -52
  57. package/dist/lib/internal/task-short-id.js +11 -1
  58. package/dist/lib/internal/task-snapshot.js +4 -1
  59. package/dist/lib/internal/task-validate.js +37 -12
  60. package/dist/lib/internal/task-verify.js +5 -1
  61. package/dist/lib/internal/task-warning.js +8 -1
  62. package/dist/lib/owned-path.js +33 -0
  63. package/dist/lib/platform/check-status.js +11 -0
  64. package/dist/lib/platform/comment-safety.js +229 -0
  65. package/dist/lib/platform/completion-backfill.js +1 -1
  66. package/dist/lib/platform/github-data.js +241 -0
  67. package/dist/lib/platform/github-provider.js +248 -26
  68. package/dist/lib/platform/issue-comments.js +146 -34
  69. package/dist/lib/platform/issues.js +1 -179
  70. package/dist/lib/platform/pr-change-report.js +6 -12
  71. package/dist/lib/platform/pr-checks.js +12 -65
  72. package/dist/lib/platform/pr-summary.js +83 -10
  73. package/dist/lib/platform/provider-contract.d.ts +67 -1
  74. package/dist/lib/platform/provider-contract.js +6 -2
  75. package/dist/lib/platform/provider-validation.js +76 -3
  76. package/dist/lib/platform/pull-requests.js +117 -275
  77. package/dist/lib/platform/repository-metadata.js +377 -0
  78. package/dist/lib/platform/security-alerts.js +155 -0
  79. package/dist/lib/platform/snapshots.js +2 -0
  80. package/dist/lib/platform/verification-sync.js +154 -162
  81. package/dist/lib/process-data/index.js +7 -0
  82. package/dist/lib/release/workflow.js +1 -1
  83. package/dist/lib/run/index.js +5 -0
  84. package/dist/lib/sandbox/commands/control-status.js +22 -0
  85. package/dist/lib/sandbox/commands/create.js +39 -8
  86. package/dist/lib/sandbox/commands/ls.js +5 -0
  87. package/dist/lib/sandbox/commands/rm.js +3 -807
  88. package/dist/lib/sandbox/commands/show.js +16 -0
  89. package/dist/lib/sandbox/control/audit.js +203 -0
  90. package/dist/lib/sandbox/control/client.js +125 -12
  91. package/dist/lib/sandbox/control/completed-reentry.js +85 -0
  92. package/dist/lib/sandbox/control/container-identity.js +28 -31
  93. package/dist/lib/sandbox/control/executor.js +233 -34
  94. package/dist/lib/sandbox/control/finalization-response.js +27 -0
  95. package/dist/lib/sandbox/control/identity-sentinel.js +107 -0
  96. package/dist/lib/sandbox/control/lifecycle.js +656 -128
  97. package/dist/lib/sandbox/control/native-file-lock.js +85 -0
  98. package/dist/lib/sandbox/control/protocol.js +55 -4
  99. package/dist/lib/sandbox/control/server.js +720 -79
  100. package/dist/lib/sandbox/control/state.js +63 -3
  101. package/dist/lib/sandbox/control/task-view.js +183 -0
  102. package/dist/lib/sandbox/control/task-workflow.js +74 -0
  103. package/dist/lib/sandbox/control/workflow-executor.js +99 -0
  104. package/dist/lib/sandbox/engines/authority.js +289 -0
  105. package/dist/lib/sandbox/engines/docker-exact-discovery.js +97 -0
  106. package/dist/lib/sandbox/index.js +7 -2
  107. package/dist/lib/sandbox/recovery.js +49 -5
  108. package/dist/lib/sandbox/removal.js +1717 -0
  109. package/dist/lib/sandbox/task-cleanup.js +217 -0
  110. package/dist/lib/sandbox/workspace-view.js +15 -15
  111. package/dist/lib/sandbox/worktree-safety.js +4 -1
  112. package/dist/lib/server/index.js +8 -0
  113. package/dist/lib/task/activity-intent.js +2 -1
  114. package/dist/lib/task/activity-log.js +30 -24
  115. package/dist/lib/task/artifact-command.js +101 -0
  116. package/dist/lib/task/artifact-lifecycle.js +71 -40
  117. package/dist/lib/task/artifact-name.js +36 -0
  118. package/dist/lib/task/artifact-operations.js +474 -0
  119. package/dist/lib/task/artifact-receipts.js +3 -15
  120. package/dist/lib/task/artifact-repair-intent.js +130 -0
  121. package/dist/lib/task/artifact-schema.js +127 -0
  122. package/dist/lib/task/capabilities.js +83 -19
  123. package/dist/lib/task/codex-orchestration.js +71 -25
  124. package/dist/lib/task/commit-identity.js +28 -0
  125. package/dist/lib/task/commit-operation.js +2 -16
  126. package/dist/lib/task/control-authority.js +375 -5
  127. package/dist/lib/task/control-recovery.js +128 -0
  128. package/dist/lib/task/create-service.js +103 -4
  129. package/dist/lib/task/create.js +80 -2
  130. package/dist/lib/task/decision-details.js +2 -46
  131. package/dist/lib/task/events.js +306 -76
  132. package/dist/lib/task/finalization-state.js +9 -0
  133. package/dist/lib/task/human-override.js +3 -6
  134. package/dist/lib/task/implementation-inputs.js +3 -3
  135. package/dist/lib/task/index.js +11 -3
  136. package/dist/lib/task/intermediate-cleanup.js +383 -0
  137. package/dist/lib/task/invalidation.js +18 -65
  138. package/dist/lib/task/ledger-intents.js +7 -22
  139. package/dist/lib/task/ledger.js +1 -3
  140. package/dist/lib/task/lifecycle.js +19 -1
  141. package/dist/lib/task/local-artifact-finalization.js +190 -290
  142. package/dist/lib/task/manual-validation-completion.js +26 -0
  143. package/dist/lib/task/manual-validation-evidence.js +130 -0
  144. package/dist/lib/task/manual-validation-receipt.js +101 -0
  145. package/dist/lib/task/manual-validation-shared.js +40 -0
  146. package/dist/lib/task/manual-validation-transaction.js +243 -0
  147. package/dist/lib/task/markdown.js +47 -0
  148. package/dist/lib/task/orchestration.js +206 -69
  149. package/dist/lib/task/qualification-audit.js +476 -0
  150. package/dist/lib/task/qualification-confirmation.js +109 -0
  151. package/dist/lib/task/qualification-intents.js +148 -0
  152. package/dist/lib/task/review-artifacts.js +23 -40
  153. package/dist/lib/task/review-command.js +25 -0
  154. package/dist/lib/task/review-finalization.js +146 -97
  155. package/dist/lib/task/review-fingerprint.js +2 -2
  156. package/dist/lib/task/sections.js +34 -54
  157. package/dist/lib/task/verification-config.js +11 -0
  158. package/dist/lib/task/verification-engine.js +170 -327
  159. package/dist/lib/task/verification.js +1 -1
  160. package/dist/lib/task/workflow-command.js +17 -0
  161. package/dist/lib/task/workflow-warning-intents.js +0 -16
  162. package/dist/lib/task/workflow-warnings.js +28 -2
  163. package/dist/lib/update.js +2 -0
  164. package/dist/lifecycle-build-manifest.json +3 -3
  165. package/lib/agent-client.ts +9 -0
  166. package/lib/agent-clients/adapters/codex-lifecycle/capability-store.ts +223 -33
  167. package/lib/agent-clients/adapters/codex-lifecycle/sandbox-controller.ts +3 -2
  168. package/lib/fs/durable-write.ts +29 -0
  169. package/lib/fs/file-lock.ts +113 -0
  170. package/lib/host-control/audit.ts +22 -0
  171. package/lib/host-control/client.ts +172 -0
  172. package/lib/host-control/command.ts +60 -0
  173. package/lib/host-control/path.ts +167 -0
  174. package/lib/host-control/secure-fs.ts +135 -0
  175. package/lib/host-control/server.ts +180 -0
  176. package/lib/host-control/service.ts +133 -0
  177. package/lib/init.ts +15 -2
  178. package/lib/internal/agent-client.ts +4 -2
  179. package/lib/internal/cli-route-inventory.ts +142 -0
  180. package/lib/internal/codex-lifecycle.ts +14 -12
  181. package/lib/internal/codex-sandbox-controller.ts +7 -2
  182. package/lib/internal/demo-promotion.ts +354 -0
  183. package/lib/internal/demo-transcript.ts +419 -0
  184. package/lib/internal/git-workflow.ts +9 -6
  185. package/lib/internal/host-control.ts +28 -0
  186. package/lib/internal/manual-validation.ts +306 -0
  187. package/lib/internal/platform-checks.ts +12 -4
  188. package/lib/internal/platform-comment.ts +12 -4
  189. package/lib/internal/platform-context.ts +3 -1
  190. package/lib/internal/platform-issue.ts +11 -4
  191. package/lib/internal/platform-metadata.ts +70 -0
  192. package/lib/internal/platform-pr-review.ts +14 -3
  193. package/lib/internal/platform-pr.ts +38 -14
  194. package/lib/internal/platform-release-notes.ts +5 -3
  195. package/lib/internal/platform-security.ts +83 -0
  196. package/lib/internal/pr-review-grade.ts +10 -3
  197. package/lib/internal/release-workflow.ts +91 -87
  198. package/lib/internal/sandbox-control.ts +181 -6
  199. package/lib/internal/task-activity.ts +12 -4
  200. package/lib/internal/task-artifact.ts +15 -79
  201. package/lib/internal/task-context.ts +3 -1
  202. package/lib/internal/task-create.ts +76 -15
  203. package/lib/internal/task-delivery.ts +3 -1
  204. package/lib/internal/task-event.ts +21 -10
  205. package/lib/internal/task-finalization.ts +3 -1
  206. package/lib/internal/task-invalidation.ts +3 -1
  207. package/lib/internal/task-ledger.ts +11 -1
  208. package/lib/internal/task-lifecycle.ts +3 -1
  209. package/lib/internal/task-operation-registry.ts +590 -0
  210. package/lib/internal/task-orchestration.ts +12 -0
  211. package/lib/internal/task-override.ts +9 -3
  212. package/lib/internal/task-qualification.ts +61 -0
  213. package/lib/internal/task-review.ts +7 -50
  214. package/lib/internal/task-short-id.ts +10 -1
  215. package/lib/internal/task-snapshot.ts +3 -1
  216. package/lib/internal/task-validate.ts +32 -12
  217. package/lib/internal/task-verify.ts +4 -1
  218. package/lib/internal/task-warning.ts +7 -1
  219. package/lib/owned-path.ts +26 -0
  220. package/lib/platform/check-status.ts +9 -0
  221. package/lib/platform/comment-safety.ts +255 -0
  222. package/lib/platform/completion-backfill.ts +1 -1
  223. package/lib/platform/github-data.ts +322 -0
  224. package/lib/platform/github-provider.ts +244 -27
  225. package/lib/platform/issue-comments.ts +159 -35
  226. package/lib/platform/issues.ts +4 -245
  227. package/lib/platform/pr-change-report.ts +6 -12
  228. package/lib/platform/pr-checks.ts +13 -77
  229. package/lib/platform/pr-summary.ts +88 -11
  230. package/lib/platform/provider-contract.ts +78 -3
  231. package/lib/platform/provider-validation.ts +85 -3
  232. package/lib/platform/pull-requests.ts +129 -348
  233. package/lib/platform/repository-metadata.ts +453 -0
  234. package/lib/platform/security-alerts.ts +191 -0
  235. package/lib/platform/snapshots.ts +53 -0
  236. package/lib/platform/verification-sync.ts +171 -177
  237. package/lib/process-data/index.ts +7 -0
  238. package/lib/release/workflow.ts +3 -3
  239. package/lib/run/index.ts +5 -0
  240. package/lib/sandbox/commands/control-status.ts +26 -0
  241. package/lib/sandbox/commands/create.ts +53 -12
  242. package/lib/sandbox/commands/ls.ts +7 -0
  243. package/lib/sandbox/commands/rm.ts +3 -996
  244. package/lib/sandbox/commands/show.ts +16 -0
  245. package/lib/sandbox/control/audit.ts +253 -0
  246. package/lib/sandbox/control/client.ts +150 -13
  247. package/lib/sandbox/control/completed-reentry.ts +98 -0
  248. package/lib/sandbox/control/container-identity.ts +27 -43
  249. package/lib/sandbox/control/executor.ts +262 -37
  250. package/lib/sandbox/control/finalization-response.ts +29 -0
  251. package/lib/sandbox/control/identity-sentinel.ts +137 -0
  252. package/lib/sandbox/control/lifecycle.ts +672 -18
  253. package/lib/sandbox/control/native-file-lock.ts +108 -0
  254. package/lib/sandbox/control/protocol.ts +80 -8
  255. package/lib/sandbox/control/server.ts +779 -82
  256. package/lib/sandbox/control/state.ts +84 -3
  257. package/lib/sandbox/control/task-view.ts +240 -0
  258. package/lib/sandbox/control/task-workflow.ts +95 -0
  259. package/lib/sandbox/control/workflow-executor.ts +102 -0
  260. package/lib/sandbox/engines/authority.ts +365 -0
  261. package/lib/sandbox/engines/docker-exact-discovery.ts +132 -0
  262. package/lib/sandbox/index.ts +9 -2
  263. package/lib/sandbox/recovery.ts +49 -6
  264. package/lib/sandbox/removal.ts +2144 -0
  265. package/lib/sandbox/task-cleanup.ts +209 -0
  266. package/lib/sandbox/workspace-view.ts +26 -18
  267. package/lib/sandbox/worktree-safety.ts +4 -1
  268. package/lib/server/index.ts +10 -0
  269. package/lib/task/activity-intent.ts +2 -2
  270. package/lib/task/activity-log.ts +27 -19
  271. package/lib/task/artifact-command.ts +104 -0
  272. package/lib/task/artifact-lifecycle.ts +66 -39
  273. package/lib/task/artifact-name.ts +55 -0
  274. package/lib/task/artifact-operations.ts +580 -0
  275. package/lib/task/artifact-receipts.ts +3 -14
  276. package/lib/task/artifact-repair-intent.ts +152 -0
  277. package/lib/task/artifact-schema.ts +163 -0
  278. package/lib/task/capabilities.ts +82 -22
  279. package/lib/task/codex-orchestration.ts +85 -24
  280. package/lib/task/commit-identity.ts +31 -0
  281. package/lib/task/commit-operation.ts +2 -16
  282. package/lib/task/control-authority.ts +513 -6
  283. package/lib/task/control-recovery.ts +174 -0
  284. package/lib/task/create-service.ts +131 -6
  285. package/lib/task/create.ts +83 -1
  286. package/lib/task/decision-details.ts +3 -71
  287. package/lib/task/events.ts +292 -75
  288. package/lib/task/finalization-state.ts +11 -0
  289. package/lib/task/human-override.ts +3 -8
  290. package/lib/task/implementation-inputs.ts +3 -3
  291. package/lib/task/index.ts +16 -3
  292. package/lib/task/intermediate-cleanup.ts +455 -0
  293. package/lib/task/invalidation.ts +18 -62
  294. package/lib/task/ledger-intents.ts +7 -24
  295. package/lib/task/ledger.ts +1 -3
  296. package/lib/task/lifecycle.ts +17 -1
  297. package/lib/task/local-artifact-finalization.ts +223 -388
  298. package/lib/task/manual-validation-completion.ts +40 -0
  299. package/lib/task/manual-validation-evidence.ts +209 -0
  300. package/lib/task/manual-validation-receipt.ts +152 -0
  301. package/lib/task/manual-validation-shared.ts +50 -0
  302. package/lib/task/manual-validation-transaction.ts +304 -0
  303. package/lib/task/markdown.ts +70 -0
  304. package/lib/task/orchestration.ts +191 -68
  305. package/lib/task/qualification-audit.ts +588 -0
  306. package/lib/task/qualification-confirmation.ts +117 -0
  307. package/lib/task/qualification-intents.ts +150 -0
  308. package/lib/task/review-artifacts.ts +21 -41
  309. package/lib/task/review-command.ts +23 -0
  310. package/lib/task/review-finalization.ts +154 -153
  311. package/lib/task/review-fingerprint.ts +2 -2
  312. package/lib/task/sections.ts +33 -52
  313. package/lib/task/verification-config.ts +12 -0
  314. package/lib/task/verification-engine.ts +165 -370
  315. package/lib/task/verification-types.ts +17 -0
  316. package/lib/task/verification.ts +1 -1
  317. package/lib/task/workflow-command.ts +18 -0
  318. package/lib/task/workflow-warning-intents.ts +0 -13
  319. package/lib/task/workflow-warnings.ts +21 -2
  320. package/lib/update.ts +6 -0
  321. package/package.json +7 -2
  322. package/templates/.agents/hooks/lifecycle-delegation.js +6 -6
  323. package/templates/.agents/rules/README.en.md +2 -0
  324. package/templates/.agents/rules/README.zh-CN.md +2 -0
  325. package/templates/.agents/rules/decision-qualification.en.md +22 -0
  326. package/templates/.agents/rules/decision-qualification.zh-CN.md +22 -0
  327. package/templates/.agents/rules/evidence-reporting.en.md +28 -0
  328. package/templates/.agents/rules/evidence-reporting.zh-CN.md +28 -0
  329. package/templates/.agents/rules/label-milestone-setup.en.md +7 -7
  330. package/templates/.agents/rules/label-milestone-setup.zh-CN.md +7 -7
  331. package/templates/.agents/rules/local-artifact-repair.en.md +5 -1
  332. package/templates/.agents/rules/local-artifact-repair.zh-CN.md +5 -1
  333. package/templates/.agents/rules/security-alerts.en.md +8 -8
  334. package/templates/.agents/rules/security-alerts.zh-CN.md +8 -8
  335. package/templates/.agents/rules/testing-discipline.en.md +2 -0
  336. package/templates/.agents/rules/testing-discipline.zh-CN.md +2 -0
  337. package/templates/.agents/scripts/package.json +3 -0
  338. package/templates/.agents/skills/analyze-task/SKILL.en.md +15 -2
  339. package/templates/.agents/skills/analyze-task/SKILL.zh-CN.md +19 -2
  340. package/templates/.agents/skills/analyze-task/config/verify.en.json +1 -12
  341. package/templates/.agents/skills/analyze-task/config/verify.zh-CN.json +1 -12
  342. package/templates/.agents/skills/close-codescan/SKILL.en.md +2 -2
  343. package/templates/.agents/skills/close-codescan/SKILL.zh-CN.md +2 -2
  344. package/templates/.agents/skills/close-dependabot/SKILL.en.md +2 -2
  345. package/templates/.agents/skills/close-dependabot/SKILL.zh-CN.md +2 -2
  346. package/templates/.agents/skills/code-task/SKILL.en.md +14 -1
  347. package/templates/.agents/skills/code-task/SKILL.zh-CN.md +14 -1
  348. package/templates/.agents/skills/code-task/config/verify.en.json +5 -14
  349. package/templates/.agents/skills/code-task/config/verify.zh-CN.json +5 -14
  350. package/templates/.agents/skills/code-task/reference/code-rules.en.md +5 -4
  351. package/templates/.agents/skills/code-task/reference/code-rules.zh-CN.md +5 -4
  352. package/templates/.agents/skills/code-task/reference/dual-mode.en.md +1 -1
  353. package/templates/.agents/skills/code-task/reference/dual-mode.zh-CN.md +1 -1
  354. package/templates/.agents/skills/code-task/reference/fix-mode.en.md +3 -1
  355. package/templates/.agents/skills/code-task/reference/fix-mode.zh-CN.md +3 -1
  356. package/templates/.agents/skills/code-task/reference/report-template.en.md +42 -15
  357. package/templates/.agents/skills/code-task/reference/report-template.zh-CN.md +39 -12
  358. package/templates/.agents/skills/complete-manual-validation/SKILL.en.md +37 -21
  359. package/templates/.agents/skills/complete-manual-validation/SKILL.zh-CN.md +37 -21
  360. package/templates/.agents/skills/complete-manual-validation/config/verify.en.json +1 -1
  361. package/templates/.agents/skills/complete-manual-validation/config/verify.zh-CN.json +1 -1
  362. package/templates/.agents/skills/complete-manual-validation/reference/report-template.en.md +4 -0
  363. package/templates/.agents/skills/complete-manual-validation/reference/report-template.zh-CN.md +4 -0
  364. package/templates/.agents/skills/complete-manual-validation/reference/summary-update.en.md +16 -7
  365. package/templates/.agents/skills/complete-manual-validation/reference/summary-update.zh-CN.md +16 -7
  366. package/templates/.agents/skills/complete-task/SKILL.en.md +10 -23
  367. package/templates/.agents/skills/complete-task/SKILL.zh-CN.md +10 -23
  368. package/templates/.agents/skills/create-task/SKILL.en.md +8 -0
  369. package/templates/.agents/skills/create-task/SKILL.zh-CN.md +7 -0
  370. package/templates/.agents/skills/import-codescan/SKILL.en.md +1 -1
  371. package/templates/.agents/skills/import-codescan/SKILL.zh-CN.md +1 -1
  372. package/templates/.agents/skills/import-dependabot/SKILL.en.md +1 -1
  373. package/templates/.agents/skills/import-dependabot/SKILL.zh-CN.md +1 -1
  374. package/templates/.agents/skills/init-labels/SKILL.en.md +8 -8
  375. package/templates/.agents/skills/init-labels/SKILL.zh-CN.md +8 -8
  376. package/templates/.agents/skills/init-milestones/SKILL.en.md +9 -11
  377. package/templates/.agents/skills/init-milestones/SKILL.zh-CN.md +9 -11
  378. package/templates/.agents/skills/plan-task/SKILL.en.md +14 -1
  379. package/templates/.agents/skills/plan-task/SKILL.zh-CN.md +16 -1
  380. package/templates/.agents/skills/plan-task/config/verify.en.json +4 -14
  381. package/templates/.agents/skills/plan-task/config/verify.zh-CN.json +4 -14
  382. package/templates/.agents/skills/release/SKILL.en.md +7 -3
  383. package/templates/.agents/skills/release/SKILL.zh-CN.md +7 -3
  384. package/templates/.agents/skills/review-analysis/SKILL.en.md +14 -1
  385. package/templates/.agents/skills/review-analysis/SKILL.zh-CN.md +14 -1
  386. package/templates/.agents/skills/review-analysis/config/verify.en.json +1 -18
  387. package/templates/.agents/skills/review-analysis/config/verify.zh-CN.json +1 -18
  388. package/templates/.agents/skills/review-analysis/reference/report-template.en.md +50 -23
  389. package/templates/.agents/skills/review-analysis/reference/report-template.zh-CN.md +45 -18
  390. package/templates/.agents/skills/review-code/SKILL.en.md +14 -1
  391. package/templates/.agents/skills/review-code/SKILL.zh-CN.md +14 -1
  392. package/templates/.agents/skills/review-code/config/verify.en.json +1 -23
  393. package/templates/.agents/skills/review-code/config/verify.zh-CN.json +1 -23
  394. package/templates/.agents/skills/review-code/reference/report-template.en.md +49 -22
  395. package/templates/.agents/skills/review-code/reference/report-template.zh-CN.md +45 -18
  396. package/templates/.agents/skills/review-plan/SKILL.en.md +14 -1
  397. package/templates/.agents/skills/review-plan/SKILL.zh-CN.md +14 -1
  398. package/templates/.agents/skills/review-plan/config/verify.en.json +1 -18
  399. package/templates/.agents/skills/review-plan/config/verify.zh-CN.json +1 -18
  400. package/templates/.agents/skills/review-plan/reference/report-template.en.md +49 -22
  401. package/templates/.agents/skills/review-plan/reference/report-template.zh-CN.md +45 -18
  402. package/templates/.agents/skills/review-pr/SKILL.en.md +5 -1
  403. package/templates/.agents/skills/review-pr/SKILL.zh-CN.md +5 -1
  404. package/templates/.agents/skills/review-pr/reference/report-template.en.md +4 -3
  405. package/templates/.agents/skills/review-pr/reference/report-template.zh-CN.md +4 -3
  406. package/templates/.agents/skills/run-manual-validation/SKILL.en.md +25 -4
  407. package/templates/.agents/skills/run-manual-validation/SKILL.zh-CN.md +25 -4
  408. package/templates/.agents/skills/run-manual-validation/reference/discovery-and-execution.en.md +4 -1
  409. package/templates/.agents/skills/run-manual-validation/reference/discovery-and-execution.zh-CN.md +4 -1
  410. package/templates/.agents/skills/run-manual-validation/reference/report-template.en.md +5 -1
  411. package/templates/.agents/skills/run-manual-validation/reference/report-template.zh-CN.md +5 -1
  412. package/templates/.agents/skills/run-task/SKILL.en.md +1 -1
  413. package/templates/.agents/skills/run-task/SKILL.zh-CN.md +1 -1
  414. package/templates/.agents/skills/test/SKILL.en.md +29 -7
  415. package/templates/.agents/skills/test/SKILL.zh-CN.md +29 -7
  416. package/templates/.agents/skills/update-agent-infra/scripts/sync-templates.js +14 -0
  417. package/templates/.agents/templates/task.en.md +6 -0
  418. package/templates/.agents/templates/task.zh-CN.md +6 -0
  419. package/templates/.claude/commands/run-manual-validation.en.md +1 -1
  420. package/templates/.claude/commands/run-manual-validation.zh-CN.md +1 -1
  421. package/dist/lib/platform/adapters.js +0 -56
  422. package/lib/platform/adapters.ts +0 -197
  423. package/templates/.agents/scripts/security-alerts.github.sh +0 -151
  424. package/templates/.agents/scripts/security-alerts.sh +0 -31
  425. package/templates/.agents/skills/init-labels/scripts/init-labels.github.sh +0 -146
  426. package/templates/.agents/skills/init-labels/scripts/init-labels.sh +0 -32
  427. package/templates/.agents/skills/init-milestones/scripts/init-milestones.github.sh +0 -294
  428. package/templates/.agents/skills/init-milestones/scripts/init-milestones.sh +0 -6
@@ -1,119 +1,31 @@
1
- import { resolveArtifactContext } from '../task/artifact-lifecycle.js';
2
- import { finalizeLocalArtifact } from '../task/local-artifact-finalization.js';
3
- import { resolveTaskRef } from '../task/resolve-ref.js';
4
- import { loadVerificationConfig } from '../task/verification-config.js';
5
- const USAGE = `Usage: agent-infra-internal task-artifact <N | TASK-id> inspect --family <family>\n agent-infra-internal task-artifact <N | TASK-id> finalize-local --family <analysis|plan|code> --artifact <artifact>\n\nInspect workflow artifact context or finalize a local analysis/plan/code artifact without changing task state.\n`;
6
- function failUsage(message) {
7
- process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code: 'ARTIFACT_PAYLOAD_INVALID', message } })}\n`);
8
- process.stderr.write(USAGE);
9
- process.exitCode = 2;
10
- }
1
+ import { parseArtifactCommand, executeArtifactCommand } from '../task/artifact-command.js';
2
+ import { ensureInternalHandlerRoute } from './cli-route-inventory.js';
3
+ const USAGE = `Usage: agent-infra-internal task-artifact <N | TASK-id> inspect --family <family>\n agent-infra-internal task-artifact <N | TASK-id> init --family <family> --artifact <artifact> [--locale <zh-CN|en>]\n agent-infra-internal task-artifact <N | TASK-id> repair --family <family> --artifact <artifact> --expected-sha256 <sha256> --expected-semantic-digest <digest>\n agent-infra-internal task-artifact <N | TASK-id> finalize-local --family <analysis|plan|code> --artifact <artifact>\n\nInspect, initialize, repair, or finalize a workflow artifact without changing task state.\n`;
11
4
  function taskArtifact(args = []) {
5
+ if (!ensureInternalHandlerRoute('task-artifact', args))
6
+ return;
12
7
  if (args[0] === '--help' || args[0] === '-h') {
13
8
  process.stdout.write(USAGE);
14
9
  return;
15
10
  }
16
- if (args.length < 2) {
17
- failUsage('task ref and operation are required');
18
- return;
19
- }
20
- const operation = args[1];
21
- if (operation !== 'inspect' && operation !== 'finalize-local') {
22
- failUsage(`unknown operation '${operation}'`);
23
- return;
24
- }
25
- let family = '';
26
- let artifact = '';
27
- const seen = new Set();
28
- for (let index = 2; index < args.length; index += 1) {
29
- const flag = args[index];
30
- if (flag !== '--family' && flag !== '--artifact') {
31
- failUsage(`unknown option '${flag}'`);
32
- return;
33
- }
34
- if (seen.has(flag)) {
35
- failUsage(`duplicate option '${flag}'`);
36
- return;
37
- }
38
- const value = args[++index];
39
- if (!value || value.startsWith('--')) {
40
- failUsage(`option '${flag}' requires a value`);
41
- return;
42
- }
43
- seen.add(flag);
44
- if (flag === '--family')
45
- family = value;
46
- else
47
- artifact = value;
48
- }
49
- if (!family) {
50
- failUsage("option '--family' is required");
51
- return;
52
- }
53
- if (operation === 'inspect') {
54
- if (artifact) {
55
- failUsage("option '--artifact' is only valid for finalize-local");
56
- return;
57
- }
58
- const result = resolveArtifactContext(args[0], family);
59
- const output = family === 'code' && result.codeMode ? {
60
- ...result,
61
- mode: result.codeMode.mode,
62
- code_max: result.codeMode.codeMax,
63
- rev_max: result.codeMode.reviewMax,
64
- verdict: result.codeMode.verdict,
65
- next_round: result.next?.round ?? null,
66
- next_artifact: result.next?.name ?? null,
67
- review_artifact: result.codeMode.reviewArtifact,
68
- implementation_input: result.codeMode.implementationInput,
69
- decision_id: result.codeMode.decisionId,
70
- decision_evidence: result.codeMode.decisionEvidence,
71
- message: result.codeMode.message
72
- } : result;
73
- process.stdout.write(`${JSON.stringify(output)}\n`);
74
- if (result.status === 'refused')
75
- process.exitCode = 1;
76
- else if (result.status === 'failed')
77
- process.exitCode = 2;
78
- return;
79
- }
80
- const resolved = resolveTaskRef(args[0]);
81
- const repositoryRoot = resolved.ok ? resolved.repoRoot : process.cwd();
82
- if (!artifact) {
83
- failUsage("option '--artifact' is required");
84
- return;
85
- }
86
- if (family !== 'analysis' && family !== 'plan' && family !== 'code') {
87
- failUsage("finalize-local only supports 'analysis', 'plan', and 'code'");
88
- return;
89
- }
90
- const skillName = family === 'analysis' ? 'analyze-task' : family === 'plan' ? 'plan-task' : 'code-task';
91
- let config = {};
11
+ let command;
92
12
  try {
93
- const loaded = loadVerificationConfig(repositoryRoot, skillName);
94
- const artifactConfig = loaded.checks.artifact;
95
- if (artifactConfig && typeof artifactConfig === 'object' && !Array.isArray(artifactConfig)) {
96
- const sections = artifactConfig.required_sections;
97
- const patterns = artifactConfig.required_patterns;
98
- config = {
99
- requiredSections: Array.isArray(sections) ? sections.filter((value) => typeof value === 'string') : undefined,
100
- requiredPatterns: Array.isArray(patterns) ? patterns.filter((value) => typeof value === 'string') : undefined
101
- };
102
- }
103
- }
104
- catch {
105
- // Isolated fixture repositories may not contain the project's verification config.
13
+ command = parseArtifactCommand(args);
14
+ }
15
+ catch (error) {
16
+ process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: {
17
+ code: 'ARTIFACT_PAYLOAD_INVALID', message: error instanceof Error ? error.message : String(error)
18
+ } })}\n`);
19
+ process.stderr.write(USAGE);
20
+ process.exitCode = 2;
21
+ return;
106
22
  }
107
- const result = finalizeLocalArtifact({
108
- taskRef: args[0],
109
- family: family,
110
- artifact,
111
- repoRoot: repositoryRoot,
112
- ...config
113
- });
23
+ const result = executeArtifactCommand(command);
114
24
  process.stdout.write(`${JSON.stringify(result)}\n`);
115
- if (result.status === 'failed')
25
+ if (result.status === 'refused')
116
26
  process.exitCode = 1;
27
+ else if (result.status === 'failed')
28
+ process.exitCode = command.operation === 'inspect' ? 2 : 1;
117
29
  }
118
30
  export { taskArtifact };
119
31
  //# sourceMappingURL=task-artifact.js.map
@@ -1,5 +1,6 @@
1
1
  import { parseTaskScope } from '../task/command-options.js';
2
2
  import { resolveTaskContext } from '../task/resolve-ref.js';
3
+ import { ensureInternalHandlerRoute, internalHandlerRoute } from './cli-route-inventory.js';
3
4
  const USAGE = `Usage: agent-infra-internal task-context resolve [<task-ref> | --task <task-ref> | -t <task-ref>]\n`;
4
5
  function fail(code, message, usage = false) {
5
6
  process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code, message } })}\n`);
@@ -8,11 +9,13 @@ function fail(code, message, usage = false) {
8
9
  process.exitCode = 1;
9
10
  }
10
11
  function taskContext(args = []) {
12
+ if (!ensureInternalHandlerRoute('task-context', args))
13
+ return;
11
14
  if (args[0] === '--help' || args[0] === '-h') {
12
15
  process.stdout.write(USAGE);
13
16
  return;
14
17
  }
15
- if (args[0] !== 'resolve') {
18
+ if (!internalHandlerRoute('task-context', 'resolve', args[0] ?? '')) {
16
19
  fail('TASK_CONTEXT_PAYLOAD_INVALID', "operation 'resolve' is required", true);
17
20
  return;
18
21
  }
@@ -1,21 +1,47 @@
1
1
  import fs from 'node:fs';
2
+ import { resolveSandboxControlTransport } from './task-operation-registry.js';
2
3
  import path from 'node:path';
3
4
  import { requestSandboxTaskCreate, SandboxControlClientError } from '../sandbox/control/client.js';
4
5
  import { SANDBOX_CONTROL_MAX_BYTES } from '../sandbox/control/protocol.js';
5
6
  import { validateTaskCreateCandidate } from '../task/create.js';
6
- import { createTask } from '../task/create-service.js';
7
- function failed(code, message, retryable = false) {
8
- return {
9
- status: retryable ? 'blocked' : 'failed', changed: false, task: { id: null, shortId: null }, issue: null,
10
- operations: [], warnings: [], error: { code, message, retryable }
11
- };
7
+ import { createTask, parseTaskCreateResult, projectTaskCreateResult, taskCreateExitCode, taskCreateFailure } from '../task/create-service.js';
8
+ import { ensureInternalHandlerRoute, internalHandlerRoute } from './cli-route-inventory.js';
9
+ function failed(code, message, retryable = false, control) {
10
+ return taskCreateFailure({ code, message, retryable }, control);
12
11
  }
13
12
  function output(result) {
14
13
  process.stdout.write(`${JSON.stringify(result)}\n`);
15
- process.exitCode = result.status === 'blocked' ? 2 : result.status === 'failed' ? 1 : 0;
14
+ process.exitCode = taskCreateExitCode(result);
15
+ }
16
+ function clientErrorControl(error) {
17
+ return {
18
+ requestId: error.requestId,
19
+ accepted: error.accepted,
20
+ recovery: error.accepted ? 'same-request-id' : error.detail.retryable ? 'new-request-id' : 'none'
21
+ };
22
+ }
23
+ function parseControlledResult(response) {
24
+ if (response.phase !== 'completed' || response.error !== null) {
25
+ return failed('SANDBOX_CONTROL_RESPONSE_INVALID', 'SANDBOX_CONTROL_RESPONSE_INVALID: completed task-create response is invalid', false, { requestId: response.id, accepted: true, recovery: 'same-request-id' });
26
+ }
27
+ let result;
28
+ try {
29
+ result = parseTaskCreateResult(JSON.parse(response.stdout));
30
+ }
31
+ catch {
32
+ return failed('TASK_CREATE_RESULT_INVALID', 'TASK_CREATE_RESULT_INVALID: task-create result payload is invalid', false, { requestId: response.id, accepted: true, recovery: 'same-request-id' });
33
+ }
34
+ if (!result.control || result.control.requestId !== response.id || result.control.accepted !== true) {
35
+ return failed('TASK_CREATE_RESULT_INVALID', 'TASK_CREATE_RESULT_INVALID: controlled task-create result is missing request evidence', false, { requestId: response.id, accepted: true, recovery: 'same-request-id' });
36
+ }
37
+ process.stderr.write(response.stderr);
38
+ return result;
16
39
  }
17
40
  async function taskCreate(args) {
18
- const inputIndex = args.indexOf('--input');
41
+ if (!ensureInternalHandlerRoute('task-create', args))
42
+ return;
43
+ const inputSelector = args.includes('--input') ? 'input' : '';
44
+ const inputIndex = internalHandlerRoute('task-create', 'input', inputSelector) ? args.indexOf('--input') : -1;
19
45
  const input = inputIndex >= 0 ? args[inputIndex + 1] : undefined;
20
46
  if (!input || args.length !== 2 || inputIndex !== 0) {
21
47
  output(failed('TASK_CREATE_PAYLOAD_INVALID', 'Usage: agent-infra-internal task-create --input <candidate.json>'));
@@ -29,22 +55,30 @@ async function taskCreate(args) {
29
55
  if (stat.size > SANDBOX_CONTROL_MAX_BYTES)
30
56
  throw new Error('TASK_CREATE_INPUT_TOO_LARGE: input exceeds the control limit');
31
57
  const candidate = validateTaskCreateCandidate(JSON.parse(fs.readFileSync(inputPath, 'utf8')));
32
- if (process.env.AGENT_INFRA_CONTROL_TOKEN) {
58
+ const environment = resolveSandboxControlTransport();
59
+ if (environment.kind === 'fail-closed') {
60
+ output(failed(environment.reasonCode ?? 'TASK_CONTROL_TRANSPORT_INVALID', 'sandbox client control configuration is invalid'));
61
+ return;
62
+ }
63
+ if (environment.kind === 'broker-client') {
33
64
  const response = requestSandboxTaskCreate({ candidate });
34
65
  if (response.phase === 'rejected') {
35
- output(failed(response.error?.code ?? 'SANDBOX_CONTROL_REJECTED', response.error?.message ?? response.stderr, response.error?.retryable ?? false));
66
+ const accepted = response.error?.code === 'SANDBOX_CONTROL_RESULT_UNKNOWN';
67
+ output(failed(response.error?.code ?? 'SANDBOX_CONTROL_REJECTED', response.error?.message ?? response.stderr, response.error?.retryable ?? false, {
68
+ requestId: response.id,
69
+ accepted,
70
+ recovery: accepted ? 'same-request-id' : response.error?.retryable ? 'new-request-id' : 'none'
71
+ }));
36
72
  return;
37
73
  }
38
- process.stdout.write(response.stdout);
39
- process.stderr.write(response.stderr);
40
- process.exitCode = response.exitCode;
74
+ output(parseControlledResult(response));
41
75
  return;
42
76
  }
43
77
  output(await createTask(candidate, { repoRoot: process.cwd() }));
44
78
  }
45
79
  catch (error) {
46
80
  if (error instanceof SandboxControlClientError) {
47
- output(failed(error.detail.code, error.detail.message, error.detail.retryable));
81
+ output(failed(error.detail.code, error.detail.message, error.detail.retryable, clientErrorControl(error)));
48
82
  return;
49
83
  }
50
84
  const message = error instanceof Error ? error.message : String(error);
@@ -1,11 +1,14 @@
1
1
  import path from 'node:path';
2
2
  import { normalizeAgentToken, AGENT_USAGE_HINT } from '../agent-clients/tokens.js';
3
3
  import { deliverTaskBranch } from '../task/delivery.js';
4
+ import { ensureInternalHandlerRoute, internalHandlerRoute } from './cli-route-inventory.js';
4
5
  const USAGE = `Usage: agent-infra-internal task-delivery <task-ref> deliver --agent <agent> [--remote <name>] [--base <branch>] [--dry-run] [--cwd <path>]\n`;
5
6
  function taskDelivery(args = []) {
7
+ if (!ensureInternalHandlerRoute('task-delivery', args))
8
+ return;
6
9
  const taskRef = args[0];
7
10
  const operation = args[1];
8
- if (!taskRef || operation !== 'deliver') {
11
+ if (!taskRef || !internalHandlerRoute('task-delivery', 'deliver', operation ?? '')) {
9
12
  process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code: 'DELIVERY_PAYLOAD_INVALID', message: 'task ref and deliver operation are required' } })}\n`);
10
13
  process.stderr.write(USAGE);
11
14
  process.exitCode = 1;
@@ -3,6 +3,7 @@ import { applyTaskEvent, eventCatalog } from '../task/events.js';
3
3
  import { consumeHumanOverride, failureId, overrideDryRunConflict } from '../task/human-override.js';
4
4
  import { resolveTaskRef } from '../task/resolve-ref.js';
5
5
  import { TaskExecutionLockError, withTaskExecutionLock } from '../task/task-execution-lock.js';
6
+ import { ensureInternalHandlerRoute, internalHandlerRoute } from './cli-route-inventory.js';
6
7
  const USAGE = `Usage: agent-infra-internal task-event <N | TASK-id> <event> --agent <agent> [event options] [--orchestrated] [--dry-run]
7
8
 
8
9
  Apply one closed-set task lifecycle event and print a structured JSON result.
@@ -17,6 +18,7 @@ const FLAGS = {
17
18
  '--verdict': 'verdict', '--blockers': 'blockers', '--major': 'major',
18
19
  '--minor': 'minor', '--manual-validation': 'manualValidation', '--files-modified': 'filesModified',
19
20
  '--tests-passed': 'testsPassed', '--summary-result': 'summaryResult',
21
+ '--transaction-id': 'transactionId', '--receipt-digest': 'receiptDigest', '--pr-head-sha': 'prHeadSha',
20
22
  '--override-ticket': 'overrideTicket', '--override-target': 'overrideTarget', '--override-scope': 'overrideScope'
21
23
  };
22
24
  const NUMERIC = new Set(['round', 'question', 'blockers', 'major', 'minor', 'manualValidation', 'filesModified', 'testsPassed']);
@@ -25,51 +27,35 @@ function usageFailure(message) {
25
27
  process.stderr.write(USAGE);
26
28
  process.exitCode = 1;
27
29
  }
28
- async function taskEvent(args = []) {
29
- if (args[0] === '--help' || args[0] === '-h') {
30
- process.stdout.write(USAGE);
31
- return;
32
- }
33
- if (args.length < 2) {
34
- usageFailure('task ref and event are required');
35
- return;
36
- }
30
+ export function parseTaskEventRequest(args) {
31
+ if (args.length < 2)
32
+ throw new Error('task ref and event are required');
37
33
  const request = { taskRef: args[0], event: args[1], agent: '' };
38
34
  const seen = new Set();
39
35
  for (let index = 2; index < args.length; index += 1) {
40
36
  const flag = args[index];
41
37
  if (flag === '--orchestrated') {
42
- if (seen.has(flag)) {
43
- usageFailure(`duplicate option '${flag}'`);
44
- return;
45
- }
38
+ if (seen.has(flag))
39
+ throw new Error(`duplicate option '${flag}'`);
46
40
  seen.add(flag);
47
41
  request.orchestrated = true;
48
42
  continue;
49
43
  }
50
44
  if (flag === '--dry-run') {
51
- if (seen.has(flag)) {
52
- usageFailure(`duplicate option '${flag}'`);
53
- return;
54
- }
45
+ if (seen.has(flag))
46
+ throw new Error(`duplicate option '${flag}'`);
55
47
  seen.add(flag);
56
48
  request.dryRun = true;
57
49
  continue;
58
50
  }
59
51
  const key = FLAGS[flag];
60
- if (!key) {
61
- usageFailure(`unknown option '${flag}'`);
62
- return;
63
- }
64
- if (seen.has(flag)) {
65
- usageFailure(`duplicate option '${flag}'`);
66
- return;
67
- }
52
+ if (!key)
53
+ throw new Error(`unknown option '${flag}'`);
54
+ if (seen.has(flag))
55
+ throw new Error(`duplicate option '${flag}'`);
68
56
  const value = args[++index];
69
- if (value === undefined || value.startsWith('--')) {
70
- usageFailure(`option '${flag}' requires a value`);
71
- return;
72
- }
57
+ if (value === undefined || value.startsWith('--'))
58
+ throw new Error(`option '${flag}' requires a value`);
73
59
  seen.add(flag);
74
60
  if (NUMERIC.has(key))
75
61
  request[key] = Number(value);
@@ -79,14 +65,31 @@ async function taskEvent(args = []) {
79
65
  request[key] = value;
80
66
  }
81
67
  const agent = normalizeAgentToken(String(request.agent ?? ''));
82
- if (!agent) {
83
- usageFailure(`invalid --agent '${request.agent}': ${AGENT_USAGE_HINT}`);
84
- return;
85
- }
68
+ if (!agent)
69
+ throw new Error(`invalid --agent '${request.agent}': ${AGENT_USAGE_HINT}`);
86
70
  request.agent = agent;
87
71
  const dryRunConflict = overrideDryRunConflict(request);
88
- if (dryRunConflict) {
89
- usageFailure(dryRunConflict.message);
72
+ if (dryRunConflict)
73
+ throw new Error(dryRunConflict.message);
74
+ return request;
75
+ }
76
+ async function taskEvent(args = []) {
77
+ if (!ensureInternalHandlerRoute('task-event', args))
78
+ return;
79
+ if (args[0] === '--help' || args[0] === '-h') {
80
+ process.stdout.write(USAGE);
81
+ return;
82
+ }
83
+ if (!internalHandlerRoute('task-event', 'event', args[1] ? 'event' : '')) {
84
+ usageFailure('task ref and event are required');
85
+ return;
86
+ }
87
+ let request;
88
+ try {
89
+ request = parseTaskEventRequest(args);
90
+ }
91
+ catch (error) {
92
+ usageFailure(error instanceof Error ? error.message : String(error));
90
93
  return;
91
94
  }
92
95
  const resolved = resolveTaskRef(request.taskRef);
@@ -1,6 +1,7 @@
1
1
  import { createDirectHostExecutionContext, dispatchTaskControlOperation, parseTaskControlOperation } from '../task/control-authority.js';
2
2
  import { applyTaskFinalization } from '../task/finalization.js';
3
3
  import { detectRepoRoot, resolveTaskRef } from '../task/resolve-ref.js';
4
+ import { ensureInternalHandlerRoute, internalHandlerRoute } from './cli-route-inventory.js';
4
5
  const USAGE = 'Usage: agent-infra-internal task-finalization <N | TASK-id> complete --agent <agent>\n';
5
6
  function envelope(status, changed, accepted, result, error) {
6
7
  return `${JSON.stringify({ version: 1, status, changed, accepted, result, error })}\n`;
@@ -19,6 +20,8 @@ function parseFailure(error) {
19
20
  return message.replace(/^TASK_CONTROL_OPERATION_INVALID: /u, '');
20
21
  }
21
22
  async function taskFinalization(args = []) {
23
+ if (!ensureInternalHandlerRoute('task-finalization', args))
24
+ return;
22
25
  if (args[0] === '--help' || args[0] === '-h') {
23
26
  process.stdout.write(USAGE);
24
27
  return;
@@ -31,7 +34,7 @@ async function taskFinalization(args = []) {
31
34
  fail(parseFailure(error));
32
35
  return;
33
36
  }
34
- if (operation.family !== 'task-finalization') {
37
+ if (operation.family !== 'task-finalization' || !internalHandlerRoute('task-finalization', 'complete', args[1] ?? '')) {
35
38
  fail('finalization operation is invalid');
36
39
  return;
37
40
  }
@@ -1,14 +1,17 @@
1
1
  import { reconcileTaskInvalidation } from '../task/invalidation-command.js';
2
2
  import { resolveTaskRef } from '../task/resolve-ref.js';
3
3
  import { TaskExecutionLockError, withTaskExecutionLock } from '../task/task-execution-lock.js';
4
+ import { ensureInternalHandlerRoute, internalHandlerRoute } from './cli-route-inventory.js';
4
5
  const USAGE = 'Usage: agent-infra-internal task-invalidation <task-ref> reconcile [--max-targets <n>] [--dry-run]\n';
5
6
  function taskInvalidation(args = []) {
7
+ if (!ensureInternalHandlerRoute('task-invalidation', args))
8
+ return;
6
9
  if (args[0] === '--help' || args[0] === '-h') {
7
10
  process.stdout.write(USAGE);
8
11
  return;
9
12
  }
10
13
  const taskRef = args[0];
11
- if (!taskRef || args[1] !== 'reconcile') {
14
+ if (!taskRef || !internalHandlerRoute('task-invalidation', 'reconcile', args[1] ?? '')) {
12
15
  process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code: 'INVALIDATION_PAYLOAD_INVALID', message: 'task ref and reconcile are required' } })}\n`);
13
16
  process.stderr.write(USAGE);
14
17
  process.exitCode = 1;
@@ -4,6 +4,7 @@ import { consumeHumanOverride, failureId, overrideDryRunConflict } from '../task
4
4
  import { LEDGER_SECTION_MISSING_CODE, LEDGER_SECTION_MISSING_MESSAGE, isReviewStage, parseLedgerDocument, summarizeLedgerStage, validateLedgerRows } from '../task/ledger.js';
5
5
  import { resolveTaskRef } from '../task/resolve-ref.js';
6
6
  import { TaskExecutionLockError, withTaskExecutionLock } from '../task/task-execution-lock.js';
7
+ import { ensureInternalHandlerRoute, internalHandlerRoute } from './cli-route-inventory.js';
7
8
  const USAGE = `Usage: agent-infra-internal task-ledger <task-ref> <intent> [intent flags] [--dry-run]\n\nIntents: finding-upsert, finding-respond, finding-review, decision-next-id, decision-upsert, rework-intent-upsert, stage-status\n`;
8
9
  const FLAGS = {
9
10
  '--stage': 'stage', '--review-artifact': 'reviewArtifact', '--ordinal': 'ordinal',
@@ -21,6 +22,8 @@ function usageFailure(message) {
21
22
  process.exitCode = 1;
22
23
  }
23
24
  async function taskLedger(args = []) {
25
+ if (!ensureInternalHandlerRoute('task-ledger', args))
26
+ return;
24
27
  if (args[0] === '--help' || args[0] === '-h') {
25
28
  process.stdout.write(USAGE);
26
29
  return;
@@ -30,7 +33,15 @@ async function taskLedger(args = []) {
30
33
  usageFailure('task ref and intent are required');
31
34
  return;
32
35
  }
33
- if (!['finding-upsert', 'finding-respond', 'finding-review', 'decision-next-id', 'decision-upsert', 'rework-intent-upsert', 'stage-status'].includes(kind)) {
36
+ if (![
37
+ internalHandlerRoute('task-ledger', 'finding-upsert', kind),
38
+ internalHandlerRoute('task-ledger', 'finding-respond', kind),
39
+ internalHandlerRoute('task-ledger', 'finding-review', kind),
40
+ internalHandlerRoute('task-ledger', 'decision-next-id', kind),
41
+ internalHandlerRoute('task-ledger', 'decision-upsert', kind),
42
+ internalHandlerRoute('task-ledger', 'rework-intent-upsert', kind),
43
+ internalHandlerRoute('task-ledger', 'stage-status', kind)
44
+ ].some(Boolean)) {
34
45
  usageFailure(`unknown ledger intent '${kind}'`);
35
46
  return;
36
47
  }
@@ -1,6 +1,7 @@
1
1
  import { createDirectHostExecutionContext, dispatchTaskControlOperation, parseTaskControlOperation } from '../task/control-authority.js';
2
2
  import { lifecycleIntentCatalog } from '../task/lifecycle.js';
3
3
  import { detectRepoRoot, resolveTaskRef } from '../task/resolve-ref.js';
4
+ import { ensureInternalHandlerRoute, internalHandlerRoute } from './cli-route-inventory.js';
4
5
  const USAGE = `Usage: agent-infra-internal task-lifecycle <N | TASK-id> <intent> --agent <agent> [intent flags] [--dry-run]\n\nIntents: ${lifecycleIntentCatalog.join(', ')}\nOverride: --override-ticket <ticket> --override-target <target> --override-scope <scope>\n`;
5
6
  function usageFailure(message) {
6
7
  process.stdout.write(`${JSON.stringify({ status: 'failed', changed: false, error: { code: 'LIFECYCLE_PAYLOAD_INVALID', message } })}\n`);
@@ -12,6 +13,8 @@ function parseFailure(error) {
12
13
  return message.replace(/^TASK_CONTROL_OPERATION_INVALID: /u, '');
13
14
  }
14
15
  async function taskLifecycle(args = []) {
16
+ if (!ensureInternalHandlerRoute('task-lifecycle', args))
17
+ return;
15
18
  if (args[0] === '--help' || args[0] === '-h') {
16
19
  process.stdout.write(USAGE);
17
20
  return;
@@ -24,7 +27,7 @@ async function taskLifecycle(args = []) {
24
27
  usageFailure(parseFailure(error));
25
28
  return;
26
29
  }
27
- if (operation.family !== 'task-lifecycle') {
30
+ if (operation.family !== 'task-lifecycle' || !internalHandlerRoute('task-lifecycle', 'intent', args[1] ? 'intent' : '')) {
28
31
  usageFailure('lifecycle operation is invalid');
29
32
  return;
30
33
  }