@fitlab-ai/agent-infra 0.9.3 → 0.9.4

package/dist/lib/task/commit-finalization.js

@@ -0,0 +1,267 @@
+import { execFileSync, spawnSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import { locateActivityLog, appendActivityEntry, pairEntries } from './activity-log.js';
+import { commitIntentPath, digest, readCommitIntent } from './commit-intent.js';
+import { parseTypedTaskFrontmatter } from './frontmatter.js';
+import { parseReviewSummary } from './review-artifacts.js';
+import { extractReviewBaseline, extractReviewedSnapshotTree, findAuthoritativeReviewCodeArtifact } from './review-fingerprint.js';
+const SHA_RE = /^[a-f0-9]{40,64}$/;
+function git(repoRoot, args) {
+    return execFileSync('git', args, {
+        cwd: repoRoot,
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'pipe']
+    }).trim();
+}
+function commitExists(repoRoot, value) {
+    return SHA_RE.test(value) && spawnSync('git', ['cat-file', '-e', `${value}^{commit}`], {
+        cwd: repoRoot,
+        stdio: 'ignore'
+    }).status === 0;
+}
+function isAncestor(repoRoot, ancestor, descendant) {
+    return spawnSync('git', ['merge-base', '--is-ancestor', ancestor, descendant], {
+        cwd: repoRoot,
+        stdio: 'ignore'
+    }).status === 0;
+}
+function outcome(disposition, overrides = {}) {
+    return {
+        disposition,
+        code: null,
+        message: disposition,
+        currentHead: '',
+        committedHead: null,
+        commitNote: null,
+        needsAnchor: false,
+        needsLog: false,
+        intent: null,
+        intentDigest: null,
+        ...overrides
+    };
+}
+function invalid(message, currentHead = '', code = 'COMMIT_FINALIZATION_EVIDENCE_INVALID', overrides = {}) {
+    return outcome('invalid', { code, message, currentHead, ...overrides });
+}
+function inspectCommitFinalization(taskDir, repoRoot, taskId) {
+    let currentHead;
+    let taskContent;
+    let metadata;
+    try {
+        currentHead = git(repoRoot, ['rev-parse', 'HEAD']);
+        taskContent = fs.readFileSync(path.join(taskDir, 'task.md'), 'utf8');
+        metadata = parseTypedTaskFrontmatter(taskContent);
+    }
+    catch (error) {
+        return invalid(error instanceof Error ? error.message : String(error));
+    }
+    const activity = locateActivityLog(taskContent);
+    if (!activity)
+        return invalid('task activity log is missing or ambiguous', currentHead);
+    const commitRows = pairEntries(activity.entries).filter((row) => row.step === 'Commit');
+    const openRows = commitRows.filter((row) => row.started !== '' && row.done === '');
+    const file = commitIntentPath(taskDir);
+    if (!fs.existsSync(file)) {
+        if (openRows.length > 0) {
+            return outcome('orphaned-start', {
+                code: 'COMMIT_FINALIZATION_EVIDENCE_MISSING',
+                message: 'an open Commit activity entry exists without a commit intent',
+                currentHead
+            });
+        }
+        return outcome('idle', { message: 'no active commit finalization exists', currentHead });
+    }
+    let raw;
+    let intent;
+    try {
+        raw = fs.readFileSync(file, 'utf8');
+        intent = readCommitIntent(taskDir, taskId);
+    }
+    catch (error) {
+        return invalid(error instanceof Error ? error.message : String(error), currentHead);
+    }
+    const intentDigest = digest(raw);
+    const shared = { currentHead, intent, intentDigest, committedHead: intent.committedHead };
+    if (!commitExists(repoRoot, intent.baselineHead)) {
+        return invalid('commit intent baseline is not a valid Git commit', currentHead, 'COMMIT_FINALIZATION_EVIDENCE_INVALID', shared);
+    }
+    if (intent.phase === 'prepared') {
+        if (intent.committedHead !== null || intent.pushEvidence !== null) {
+            return invalid('prepared commit intent contains commit or push evidence', currentHead, 'COMMIT_FINALIZATION_EVIDENCE_INVALID', shared);
+        }
+        if (currentHead !== intent.baselineHead || openRows.length !== 1) {
+            return outcome('conflict', {
+                ...shared,
+                code: 'COMMIT_FINALIZATION_CONFLICT',
+                message: 'prepared commit intent does not match HEAD and exactly one open Commit entry'
+            });
+        }
+        return outcome('prepared', { ...shared, message: 'prepared commit intent can be safely retried' });
+    }
+    if (!intent.committedHead || !commitExists(repoRoot, intent.committedHead)) {
+        return invalid('committed intent head is missing or invalid', currentHead, 'COMMIT_FINALIZATION_EVIDENCE_INVALID', shared);
+    }
+    if (intent.phase === 'committed' && intent.pushEvidence !== null) {
+        return invalid('committed intent contains premature push evidence', currentHead, 'COMMIT_FINALIZATION_EVIDENCE_INVALID', shared);
+    }
+    if (intent.phase === 'pushed'
+        && (intent.pushEvidence === null
+            || intent.pushEvidence.head !== intent.committedHead
+            || !intent.pushEvidence.remote
+            || !intent.pushEvidence.ref)) {
+        return invalid('pushed intent evidence is missing or inconsistent', currentHead, 'COMMIT_FINALIZATION_EVIDENCE_INVALID', shared);
+    }
+    if (currentHead !== intent.committedHead || !isAncestor(repoRoot, intent.baselineHead, intent.committedHead)) {
+        return outcome('conflict', {
+            ...shared,
+            code: 'COMMIT_FINALIZATION_CONFLICT',
+            message: 'repository HEAD or ancestry conflicts with the commit intent'
+        });
+    }
+    const review = findAuthoritativeReviewCodeArtifact(taskDir);
+    let needsAnchor = false;
+    if (review.ok && review.path) {
+        let reviewContent;
+        try {
+            reviewContent = fs.readFileSync(review.path, 'utf8');
+        }
+        catch (error) {
+            return invalid(error instanceof Error ? error.message : String(error), currentHead, 'COMMIT_FINALIZATION_EVIDENCE_MISSING', shared);
+        }
+        const summary = parseReviewSummary(reviewContent);
+        const reviewBaseline = extractReviewBaseline(reviewContent);
+        const reviewTree = extractReviewedSnapshotTree(reviewContent);
+        if (!summary.ok || summary.summary.verdict !== 'Approved' || !commitExists(repoRoot, reviewBaseline) || !SHA_RE.test(reviewTree)) {
+            return invalid('authoritative review-code evidence is not a valid approved snapshot', currentHead, 'COMMIT_FINALIZATION_EVIDENCE_INVALID', shared);
+        }
+        const committedTree = git(repoRoot, ['rev-parse', `${intent.committedHead}^{tree}`]);
+        if (reviewBaseline !== intent.baselineHead || reviewTree !== committedTree) {
+            return outcome('conflict', {
+                ...shared,
+                code: 'COMMIT_FINALIZATION_CONFLICT',
+                message: 'review baseline or snapshot tree conflicts with the committed intent'
+            });
+        }
+        const anchor = String(metadata.last_reviewed_commit ?? '').trim();
+        if (anchor && anchor !== intent.committedHead) {
+            return outcome('conflict', {
+                ...shared,
+                code: 'COMMIT_FINALIZATION_CONFLICT',
+                message: 'task review anchor conflicts with the committed intent'
+            });
+        }
+        needsAnchor = anchor === '';
+    }
+    const commitNote = git(repoRoot, ['show', '-s', '--format=%h%x20%s', intent.committedHead]);
+    const matchingDone = commitRows.filter((row) => row.done !== '' && row.note === commitNote);
+    const needsLog = matchingDone.length === 0 && openRows.length === 1;
+    if (!(needsLog || (matchingDone.length === 1 && openRows.length === 0))) {
+        return outcome('conflict', {
+            ...shared,
+            code: 'COMMIT_FINALIZATION_CONFLICT',
+            message: 'Commit activity identity is missing, duplicated, or ambiguous',
+            commitNote
+        });
+    }
+    return outcome('recoverable', {
+        ...shared,
+        message: 'commit finalization can be recovered',
+        commitNote,
+        needsAnchor,
+        needsLog
+    });
+}
+function planCommitTaskFinalization(taskDir, inspection, agent, timestamp) {
+    if (inspection.disposition !== 'recoverable' || !inspection.committedHead || !inspection.commitNote) {
+        throw new Error('commit finalization task mutations require a recoverable inspection');
+    }
+    const taskContent = fs.readFileSync(path.join(taskDir, 'task.md'), 'utf8');
+    const frontmatter = { assigned_to: agent };
+    if (inspection.needsAnchor)
+        frontmatter.last_reviewed_commit = inspection.committedHead;
+    const mutations = [{
+            kind: 'frontmatter',
+            set: frontmatter
+        }];
+    if (inspection.needsLog) {
+        const activity = locateActivityLog(taskContent);
+        if (!activity)
+            throw new Error('task activity log is missing or ambiguous');
+        mutations.push({
+            kind: 'section',
+            aliases: ['活动日志', 'Activity Log'],
+            heading: activity.heading,
+            body: appendActivityEntry(activity, {
+                time: timestamp,
+                step: 'Commit',
+                agent,
+                note: inspection.commitNote
+            })
+        });
+    }
+    return { mutations, commitNote: inspection.commitNote };
+}
+function inspectCreatePrCommitGate(taskDir, repoRoot, taskId) {
+    const lifecycle = inspectCommitFinalization(taskDir, repoRoot, taskId);
+    if (lifecycle.disposition !== 'idle') {
+        const pending = lifecycle.disposition === 'prepared' || lifecycle.disposition === 'recoverable';
+        return {
+            allowed: false,
+            code: pending ? 'COMMIT_FINALIZATION_PENDING' : lifecycle.code ?? 'COMMIT_FINALIZATION_CONFLICT',
+            message: pending ? 'commit finalization must complete before creating a pull request' : lifecycle.message,
+            disposition: lifecycle.disposition,
+            action: 'rerun-commit'
+        };
+    }
+    const review = findAuthoritativeReviewCodeArtifact(taskDir);
+    if (!review.ok || !review.path) {
+        return { allowed: true, code: null, message: 'no review-code history requires an anchor', disposition: 'idle', action: 'continue' };
+    }
+    try {
+        const content = fs.readFileSync(review.path, 'utf8');
+        const summary = parseReviewSummary(content);
+        if (!summary.ok || summary.summary.verdict !== 'Approved') {
+            return {
+                allowed: false,
+                code: 'COMMIT_FINALIZATION_EVIDENCE_INVALID',
+                message: 'latest authoritative review-code is not approved',
+                disposition: 'idle',
+                action: 'rerun-review-code'
+            };
+        }
+        const task = parseTypedTaskFrontmatter(fs.readFileSync(path.join(taskDir, 'task.md'), 'utf8'));
+        const currentHead = git(repoRoot, ['rev-parse', 'HEAD']);
+        const anchor = String(task.last_reviewed_commit ?? '').trim();
+        if (!anchor || !commitExists(repoRoot, anchor)) {
+            return {
+                allowed: false,
+                code: 'COMMIT_FINALIZATION_EVIDENCE_MISSING',
+                message: 'approved review snapshot is not anchored to a Git commit',
+                disposition: 'idle',
+                action: 'rerun-commit'
+            };
+        }
+        if (anchor !== currentHead || extractReviewedSnapshotTree(content) !== git(repoRoot, ['rev-parse', 'HEAD^{tree}'])) {
+            return {
+                allowed: false,
+                code: 'COMMIT_FINALIZATION_CONFLICT',
+                message: 'approved review anchor or tree does not match repository HEAD',
+                disposition: 'idle',
+                action: 'rerun-review-code'
+            };
+        }
+        return { allowed: true, code: null, message: 'commit finalization evidence is complete', disposition: 'idle', action: 'continue' };
+    }
+    catch (error) {
+        return {
+            allowed: false,
+            code: 'COMMIT_FINALIZATION_EVIDENCE_INVALID',
+            message: error instanceof Error ? error.message : String(error),
+            disposition: 'idle',
+            action: 'rerun-review-code'
+        };
+    }
+}
+export { inspectCommitFinalization, inspectCreatePrCommitGate, planCommitTaskFinalization };
+//# sourceMappingURL=commit-finalization.js.map

package/dist/lib/task/commit-intent.js

@@ -0,0 +1,165 @@
+import { createHash, randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+class CommitIntentError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.name = 'CommitIntentError';
+        this.code = code;
+    }
+}
+function commitIntentPath(taskDir) {
+    return path.join(taskDir, 'commit-intent.json');
+}
+function digest(value) {
+    return createHash('sha256').update(value).digest('hex');
+}
+function serialize(value) {
+    return `${JSON.stringify(value, null, 2)}\n`;
+}
+function atomicWrite(file, value) {
+    const temp = `${file}.${process.pid}.${randomUUID()}.tmp`;
+    try {
+        fs.writeFileSync(temp, serialize(value), { encoding: 'utf8', flag: 'wx', mode: 0o600 });
+        const handle = fs.openSync(temp, 'r+');
+        try {
+            fs.fsyncSync(handle);
+        }
+        finally {
+            fs.closeSync(handle);
+        }
+        fs.renameSync(temp, file);
+        fs.chmodSync(file, 0o600);
+        try {
+            const directory = fs.openSync(path.dirname(file), 'r');
+            try {
+                fs.fsyncSync(directory);
+            }
+            finally {
+                fs.closeSync(directory);
+            }
+        }
+        catch (error) {
+            const code = error.code;
+            if (!['EACCES', 'EISDIR', 'EINVAL', 'EPERM'].includes(code ?? ''))
+                throw error;
+        }
+    }
+    finally {
+        if (fs.existsSync(temp))
+            fs.unlinkSync(temp);
+    }
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function keysEqual(value, expected) {
+    return Object.keys(value).sort().join('\0') === [...expected].sort().join('\0');
+}
+function validPushEvidence(value) {
+    return value === null || (isRecord(value)
+        && keysEqual(value, ['remote', 'ref', 'head'])
+        && ['remote', 'ref', 'head'].every((key) => typeof value[key] === 'string' && value[key] !== ''));
+}
+function validOrchestration(value) {
+    if (value === null)
+        return true;
+    if (!isRecord(value) || !keysEqual(value, [
+        'runId', 'receiptId', 'authorizationIssuedAt', 'sourceRunDigest', 'plannedRunDigest',
+        'completionUpdatedAt', 'plannedReceipt'
+    ]))
+        return false;
+    return [
+        'runId', 'receiptId', 'authorizationIssuedAt', 'sourceRunDigest', 'plannedRunDigest', 'completionUpdatedAt'
+    ].every((key) => typeof value[key] === 'string' && value[key] !== '') && isRecord(value.plannedReceipt);
+}
+function parseIntent(raw, taskId) {
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch {
+        throw new CommitIntentError('ORCHESTRATION_COMMIT_INTENT_INVALID', 'commit intent is not valid JSON');
+    }
+    if (!isRecord(value) || !keysEqual(value, [
+        'schemaVersion', 'taskId', 'mode', 'phase', 'tokenDigest', 'baselineHead', 'committedHead',
+        'pushEvidence', 'orchestration', 'createdAt', 'updatedAt'
+    ])) {
+        throw new CommitIntentError('ORCHESTRATION_COMMIT_INTENT_INVALID', 'commit intent has an invalid schema');
+    }
+    if (value.schemaVersion !== 1
+        || value.taskId !== taskId
+        || !['standalone', 'orchestrated'].includes(String(value.mode))
+        || !['prepared', 'committed', 'pushed'].includes(String(value.phase))
+        || typeof value.tokenDigest !== 'string'
+        || !/^[a-f0-9]{64}$/.test(value.tokenDigest)
+        || typeof value.baselineHead !== 'string'
+        || (value.committedHead !== null && typeof value.committedHead !== 'string')
+        || !validPushEvidence(value.pushEvidence)
+        || !validOrchestration(value.orchestration)
+        || typeof value.createdAt !== 'string'
+        || typeof value.updatedAt !== 'string'
+        || (value.mode === 'standalone') !== (value.orchestration === null)) {
+        throw new CommitIntentError('ORCHESTRATION_COMMIT_INTENT_INVALID', 'commit intent has invalid field values');
+    }
+    return value;
+}
+function tokenMatches(actualDigest, token) {
+    const actual = Buffer.from(actualDigest, 'hex');
+    const supplied = Buffer.from(digest(token), 'hex');
+    return actual.length === supplied.length && timingSafeEqual(actual, supplied);
+}
+function readCommitIntent(taskDir, taskId, token) {
+    const file = commitIntentPath(taskDir);
+    const intent = parseIntent(fs.readFileSync(file, 'utf8'), taskId);
+    if (token !== undefined && !tokenMatches(intent.tokenDigest, token)) {
+        throw new CommitIntentError('ORCHESTRATION_COMMIT_INTENT_TOKEN_MISMATCH', 'commit intent token does not match');
+    }
+    return intent;
+}
+function createCommitIntent(taskDir, input, options = {}) {
+    const file = commitIntentPath(taskDir);
+    if (fs.existsSync(file)) {
+        throw new CommitIntentError('ORCHESTRATION_COMMIT_INTENT_BUSY', 'an active commit intent already exists');
+    }
+    const token = (options.token ?? (() => randomBytes(32).toString('base64url')))();
+    const intent = Object.freeze({ schemaVersion: 1, ...input, tokenDigest: digest(token) });
+    atomicWrite(file, intent);
+    return { intent, token };
+}
+function updateCommitIntent(taskDir, taskId, token, updates) {
+    const current = readCommitIntent(taskDir, taskId, token);
+    const nextPhase = updates.phase ?? current.phase;
+    const transitions = {
+        prepared: ['prepared', 'committed', 'pushed'],
+        committed: ['committed', 'pushed'],
+        pushed: ['pushed']
+    };
+    if (!transitions[current.phase].includes(nextPhase)) {
+        throw new CommitIntentError('ORCHESTRATION_COMMIT_INTENT_STATE_INVALID', `cannot move commit intent from ${current.phase} to ${nextPhase}`);
+    }
+    const updated = Object.freeze({ ...current, ...updates, phase: nextPhase });
+    atomicWrite(commitIntentPath(taskDir), updated);
+    return updated;
+}
+function removeCommitIntent(taskDir, taskId, token) {
+    readCommitIntent(taskDir, taskId, token);
+    fs.unlinkSync(commitIntentPath(taskDir));
+}
+function removeCommitIntentByDigest(taskDir, taskId, expectedDigest) {
+    const file = commitIntentPath(taskDir);
+    const raw = fs.readFileSync(file);
+    parseIntent(raw.toString('utf8'), taskId);
+    const actual = digest(raw);
+    const expected = Buffer.from(expectedDigest, 'hex');
+    const observed = Buffer.from(actual, 'hex');
+    if (!/^[a-f0-9]{64}$/.test(expectedDigest)
+        || expected.length !== observed.length
+        || !timingSafeEqual(expected, observed)) {
+        throw new CommitIntentError('ORCHESTRATION_COMMIT_RECOVERY_REQUIRED', 'commit intent changed after recovery inspection');
+    }
+    fs.unlinkSync(file);
+}
+export { CommitIntentError, commitIntentPath, createCommitIntent, digest, readCommitIntent, removeCommitIntent, removeCommitIntentByDigest, serialize, updateCommitIntent };
+//# sourceMappingURL=commit-intent.js.map

package/dist/lib/task/decision-intents.js

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import { appendActivityEntry, locateActivityLog } from './activity-log.js';
 import { isDecisionItem, listDecisionItems, selectDecisionItem } from './decision-items.js';
-import { createImplementationInput, IMPLEMENTATION_INPUT_ALIASES, parseImplementationInputs, renderImplementationInputs } from './implementation-inputs.js';
+import { createImplementationInput, finalizeImplementationInput, IMPLEMENTATION_INPUT_ALIASES, parseImplementationInputs, renderImplementationInputs, selectDeclaredImplementationInput } from './implementation-inputs.js';
 import { LEDGER_COLUMNS, LEDGER_HEADINGS, parseLedger } from './ledger.js';
 import { resolveTaskContext } from './resolve-ref.js';
 import { extractSection, extractSubSection, findSectionHeading } from './sections.js';
@@ -45,7 +45,7 @@ function existingDecision(content, row, decision, needsImplementation) {
             ? { recordId, implementationInputId: null }
             : { conflict: '--needs-implementation is only valid for code-stage decisions' };
     const inputs = parseImplementationInputs(content).rows.filter((input) => input.ledgerId === row.id && input.decisionEvidence === row.evidence);
-    if (inputs.length !== 1 || inputs[0].needsImplementation !== needsImplementation) {
+    if (inputs.length !== 1 || (needsImplementation !== undefined && inputs[0].needsImplementation !== needsImplementation)) {
         return { conflict: `implementation intent for '${row.id}' conflicts with the existing decision` };
     }
     return { recordId, implementationInputId: inputs[0].id };
@@ -87,10 +87,29 @@ function applyHumanDecision(request, options = {}) {
         return failed('DECISION_TARGET_INVALID', message, resolved.taskId);
     }
     const row = selected.row;
-    if (row.stage === 'code' && request.needsImplementation === undefined)
-        return failed('DECISION_PAYLOAD_INVALID', 'code-stage decisions require --needs-implementation true|false', resolved.taskId, row.id);
     if (row.stage !== 'code' && request.needsImplementation !== undefined)
         return failed('DECISION_PAYLOAD_INVALID', '--needs-implementation is only valid for code-stage decisions', resolved.taskId, row.id);
+    let parsedInputs = null;
+    let declaredInput = null;
+    let effectiveNeedsImplementation = request.needsImplementation;
+    if (row.stage === 'code') {
+        try {
+            parsedInputs = parseImplementationInputs(content);
+            declaredInput = selectDeclaredImplementationInput(parsedInputs.rows, row.id, row.evidence);
+        }
+        catch (error) {
+            return failed('DECISION_DOCUMENT_INVALID', error instanceof Error ? error.message : String(error), resolved.taskId, row.id);
+        }
+        if (declaredInput) {
+            if (request.needsImplementation !== undefined && request.needsImplementation !== declaredInput.needsImplementation) {
+                return failed('DECISION_CONFLICT', `implementation intent for '${row.id}' conflicts with its declaration`, resolved.taskId, row.id);
+            }
+            effectiveNeedsImplementation = declaredInput.needsImplementation;
+        }
+        else if (effectiveNeedsImplementation === undefined) {
+            return failed('DECISION_PAYLOAD_INVALID', 'code-stage decisions require --needs-implementation true|false when no implementation intent was declared', resolved.taskId, row.id);
+        }
+    }
     let metadata;
     try {
         metadata = (options.metadataProvider ?? captureTaskWriteMetadata)();
@@ -119,22 +138,17 @@ function applyHumanDecision(request, options = {}) {
     ];
     let implementationInputId = null;
     if (row.stage === 'code') {
-        let parsed;
-        try {
-            parsed = parseImplementationInputs(content);
-        }
-        catch (error) {
-            return failed('DECISION_DOCUMENT_INVALID', error instanceof Error ? error.message : String(error), resolved.taskId, row.id);
-        }
-        const input = createImplementationInput(parsed.rows, {
-            ledgerId: row.id, decisionEvidence: evidence,
-            needsImplementation: request.needsImplementation, decidedAt: metadata.timestamp
-        });
-        implementationInputId = input.id;
+        const nextInputs = declaredInput
+            ? finalizeImplementationInput(parsedInputs.rows, declaredInput.id, evidence, metadata.timestamp)
+            : [...parsedInputs.rows, createImplementationInput(parsedInputs.rows, {
+                    ledgerId: row.id, decisionEvidence: evidence,
+                    needsImplementation: effectiveNeedsImplementation, decidedAt: metadata.timestamp
+                })];
+        implementationInputId = declaredInput?.id ?? nextInputs[nextInputs.length - 1].id;
         mutations.push({
             kind: 'section', aliases: IMPLEMENTATION_INPUT_ALIASES,
             heading: findSectionHeading(content, [...IMPLEMENTATION_INPUT_ALIASES]),
-            body: renderImplementationInputs([...parsed.rows, input])
+            body: renderImplementationInputs(nextInputs)
         });
     }
     mutations.push({

package/dist/lib/task/delegation-receipts.js

@@ -1,4 +1,5 @@
 import { randomUUID } from 'node:crypto';
+import { normalizeAgentToken } from '../agent-clients/tokens.js';
 const MANAGED_AGENTS = {
     'agent-infra-lifecycle-executor': 'executor',
     'agent-infra-lifecycle-reviewer': 'reviewer'
@@ -83,8 +84,7 @@ function completeDelegationStage(receipt, event) {
     if (event.stage !== receipt.stage || event.round !== receipt.round || event.artifact !== receipt.artifact) {
         return fail('DELEGATION_STAGE_MISMATCH', 'stage completion identity does not match the active delegation');
     }
-    const acceptedAgents = receipt.client === 'claude-code' ? ['claude', 'claude-code'] : [receipt.client];
-    if (!acceptedAgents.includes(event.agent)) {
+    if (normalizeAgentToken(event.agent) !== normalizeAgentToken(receipt.client)) {
         return fail('DELEGATION_AGENT_MISMATCH', `stage agent '${event.agent}' does not match client '${receipt.client}'`);
     }
     return { ok: true, receipt: Object.freeze({ ...receipt, status: 'stage-completed', agent: event.agent }) };

package/dist/lib/task/implementation-inputs.js

@@ -13,12 +13,11 @@ function validateInput(row) {
         throw new Error(`implementation input ${row.id} has incomplete decision identity`);
     if (row.stage !== 'code')
         throw new Error(`implementation input ${row.id} has invalid stage`);
-    if (!TIMESTAMP_RE.test(row.decidedAt) || !Number.isFinite(Date.parse(row.decidedAt.replace(' ', 'T')))) {
-        throw new Error(`implementation input ${row.id} has invalid decided_at`);
-    }
-    const valid = (row.needsImplementation && row.status === 'pending' && row.consumedBy === '') ||
-        (!row.needsImplementation && row.status === 'not-required' && row.consumedBy === '') ||
-        (row.needsImplementation && row.status === 'consumed' && ARTIFACT_RE.test(row.consumedBy));
+    const hasValidTimestamp = TIMESTAMP_RE.test(row.decidedAt) && Number.isFinite(Date.parse(row.decidedAt.replace(' ', 'T')));
+    const valid = (row.status === 'declared' && row.decidedAt === '' && row.consumedBy === '') ||
+        (hasValidTimestamp && row.needsImplementation && row.status === 'pending' && row.consumedBy === '') ||
+        (hasValidTimestamp && !row.needsImplementation && row.status === 'not-required' && row.consumedBy === '') ||
+        (hasValidTimestamp && row.needsImplementation && row.status === 'consumed' && ARTIFACT_RE.test(row.consumedBy));
     if (!valid)
         throw new Error(`implementation input ${row.id} has an invalid state combination`);
 }
@@ -67,6 +66,54 @@ function createImplementationInput(rows, draft) {
     validateInput(row);
     return row;
 }
+function declareImplementationInput(rows, draft) {
+    const existing = rows.filter((row) => row.ledgerId === draft.ledgerId && row.status === 'declared');
+    if (existing.length > 1)
+        throw new Error(`implementation input declaration for '${draft.ledgerId}' conflicts with existing rows`);
+    if (existing.length === 1) {
+        const row = existing[0];
+        if (row.decisionEvidence !== draft.decisionEvidence || row.needsImplementation !== draft.needsImplementation) {
+            throw new Error(`implementation input declaration for '${draft.ledgerId}' conflicts with the existing row`);
+        }
+        return row;
+    }
+    const row = {
+        id: nextId(rows), ledgerId: draft.ledgerId, decisionEvidence: draft.decisionEvidence,
+        stage: 'code', needsImplementation: draft.needsImplementation, decidedAt: '',
+        status: 'declared', consumedBy: ''
+    };
+    validateInput(row);
+    return row;
+}
+function selectDeclaredImplementationInput(rows, ledgerId, decisionEvidence) {
+    const forLedger = rows.filter((row) => row.ledgerId === ledgerId && row.status === 'declared');
+    if (forLedger.length > 1)
+        throw new Error(`implementation input declaration for '${ledgerId}' is ambiguous`);
+    if (forLedger.length === 0)
+        return null;
+    if (forLedger[0].decisionEvidence !== decisionEvidence) {
+        throw new Error(`implementation input declaration for '${ledgerId}' has conflicting evidence`);
+    }
+    return forLedger[0];
+}
+function finalizeImplementationInput(rows, id, decisionEvidence, decidedAt) {
+    let found = false;
+    const next = rows.map((row) => {
+        if (row.id !== id)
+            return row;
+        found = true;
+        if (row.status !== 'declared')
+            throw new Error(`implementation input ${id} is not declared`);
+        return {
+            ...row, decisionEvidence, decidedAt,
+            status: row.needsImplementation ? 'pending' : 'not-required'
+        };
+    });
+    if (!found)
+        throw new Error(`implementation input ${id} was not found`);
+    next.forEach(validateInput);
+    return next;
+}
 function selectPendingImplementationInput(rows, reviewCompletedAt) {
     const reviewEpoch = Date.parse(reviewCompletedAt.replace(' ', 'T'));
     if (!Number.isFinite(reviewEpoch))
@@ -113,5 +160,5 @@ function renderImplementationInputs(rows) {
         })
     ].join('\n');
 }
-export { SECTION_ALIASES as IMPLEMENTATION_INPUT_ALIASES, createImplementationInput, consumeImplementationInput, parseImplementationInputs, renderImplementationInputs, selectPendingImplementationInput };
+export { SECTION_ALIASES as IMPLEMENTATION_INPUT_ALIASES, createImplementationInput, consumeImplementationInput, declareImplementationInput, finalizeImplementationInput, parseImplementationInputs, renderImplementationInputs, selectDeclaredImplementationInput, selectPendingImplementationInput };
 //# sourceMappingURL=implementation-inputs.js.map

package/dist/lib/task/ledger-intents.js

@@ -1,5 +1,6 @@
 import fs from 'node:fs';
 import path from 'node:path';
+import { declareImplementationInput, IMPLEMENTATION_INPUT_ALIASES, parseImplementationInputs, renderImplementationInputs } from './implementation-inputs.js';
 import { LEDGER_COLUMNS, LEDGER_HEADINGS, nextHdId, parseLedger, validateLedgerRows } from './ledger.js';
 import { resolveTaskRef } from './resolve-ref.js';
 import { writeTask } from './write.js';
@@ -66,6 +67,14 @@ function ledgerSectionMutation(content) {
             body: `| ${LEDGER_COLUMNS.join(' | ')} |\n|----|-------|-------|----------|--------|----------|`
         }];
 }
+function implementationInputMutation(content, rows) {
+    const english = /^##\s+Activity Log\s*$/m.test(content);
+    return {
+        kind: 'section', aliases: IMPLEMENTATION_INPUT_ALIASES,
+        heading: english ? 'Implementation Inputs' : '实现输入',
+        body: renderImplementationInputs(rows)
+    };
+}
 function mapWrite(intent, entityId, before, after, result) {
     if (result.status === 'failed')
         return failed(intent, result.error.code, result.error.message, result.taskId, entityId);
@@ -174,9 +183,34 @@ function applyLedgerIntent(intent, options = {}) {
             }
         }
     }
+    let implementationMutation = null;
+    if (intent.kind === 'decision-upsert' || intent.kind === 'finding-review') {
+        const stage = intent.kind === 'decision-upsert' ? intent.stage : after.stage;
+        const escalates = intent.kind === 'decision-upsert' || intent.status === 'needs-human-decision';
+        if (stage === 'code' && escalates && intent.needsImplementation === undefined) {
+            return failed(intent, 'LEDGER_PAYLOAD_INVALID', 'code-stage decisions require --needs-implementation true|false', resolved.taskId, after.id);
+        }
+        if ((stage !== 'code' || !escalates) && intent.needsImplementation !== undefined) {
+            return failed(intent, 'LEDGER_PAYLOAD_INVALID', '--needs-implementation is only valid for code-stage escalation', resolved.taskId, after.id);
+        }
+        if (stage === 'code' && escalates) {
+            try {
+                const parsed = parseImplementationInputs(content);
+                const declaration = declareImplementationInput(parsed.rows, {
+                    ledgerId: after.id, decisionEvidence: after.evidence,
+                    needsImplementation: intent.needsImplementation
+                });
+                const nextRows = parsed.rows.includes(declaration) ? parsed.rows : [...parsed.rows, declaration];
+                implementationMutation = implementationInputMutation(content, nextRows);
+            }
+            catch (error) {
+                return failed(intent, 'LEDGER_DOCUMENT_INVALID', error instanceof Error ? error.message : String(error), resolved.taskId, after.id);
+            }
+        }
+    }
     const result = writeTask({
         taskRef: intent.taskRef, expectedState: 'active',
-        mutations: [...ledgerSectionMutation(content), rowMutation(after)],
+        mutations: [...ledgerSectionMutation(content), rowMutation(after), ...(implementationMutation ? [implementationMutation] : [])],
         dryRun: 'dryRun' in intent ? intent.dryRun : false
     }, { ...options, taskLocation: { repoRoot: resolved.repoRoot, taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, state: resolved.state } });
     return mapWrite(intent, after.id, before, after, result);