@godv61/dsh-task-engine 0.23.2 → 0.23.4

package/.hook-test.mjs

@@ -0,0 +1,191 @@
+/**
+ * End-to-end test for the installed commit-msg hook.
+ *
+ * The P0 suite asserts on the hook SOURCE (that it disables path quoting, reads
+ * NUL-separated paths, bundles the frozen snapshot). Those assertions catch a
+ * hand-mirror regressing, but they cannot show the gate actually blocks a commit
+ * — a hook that refuses everything, or nothing, passes every one of them.
+ *
+ * This runs the real bundled hook inside a throwaway git repository and asserts
+ * both directions: an illegal commit is refused, a legal one proceeds.
+ *
+ * Run: `node --test .hook-test.mjs`
+ * @module dsh-task-engine/.hook-test
+ */
+
+import assert from 'node:assert/strict'
+import { execFileSync } from 'node:child_process'
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join, resolve, sep } from 'node:path'
+import { test } from 'node:test'
+
+const HOOK = resolve('hooks/commit-msg')
+
+/**
+ * Git runs a hook by handing it to its own POSIX shell, which resolves
+ * `#!/usr/bin/env node` against PATH. On Windows a `node.cmd` shim on PATH is
+ * not executable from that shell, so the installed hook is wrapped in a
+ * launcher that names the very interpreter running this test. Without it the
+ * suite would read as the gate refusing everything, when in truth the hook
+ * never started.
+ */
+const NODE = process.execPath.replace(/\\/gu, '/')
+
+/** Run a git command in `cwd`, returning stdout (throws on non-zero exit). */
+function git(cwd, args) {
+  return execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] })
+}
+
+/**
+ * Run `git commit` and report whether the hook allowed it.
+ * A refused commit surfaces as a non-zero exit whose stderr carries the gate's
+ * own Chinese refusal banner.
+ */
+function tryCommit(cwd, message) {
+  try {
+    execFileSync('git', ['commit', '-m', message], { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] })
+    return { allowed: true, stderr: '' }
+  } catch (error) {
+    return { allowed: false, stderr: String(error.stderr ?? '') }
+  }
+}
+
+/** Build a throwaway repository with the real hook installed and one staged file. */
+function repo(name, task) {
+  const root = mkdtempSync(join(tmpdir(), `engine-hook-${name}-`))
+  git(root, ['init', '-q', '-b', 'main'])
+  git(root, ['config', 'user.email', 'test@example.com'])
+  git(root, ['config', 'user.name', 'Test'])
+  git(root, ['config', 'commit.gpgsign', 'false'])
+  mkdirSync(join(root, '.dsh'), { recursive: true })
+  mkdirSync(join(root, 'src'), { recursive: true })
+  // The gate body stays byte-identical to the shipped hook; only the shebang is
+  // replaced, so the test exercises the real gate under a runnable interpreter.
+  const gate = readFileSync(HOOK, 'utf8').replace(/^#![^\n]*\n/u, '')
+  writeFileSync(join(root, '.git', 'hooks', 'commit-msg'), `#!${NODE}\n${gate}`)
+  writeFileSync(join(root, '.git', 'hooks', 'package.json'), '{\n  "type": "commonjs"\n}\n')
+  writeFileSync(join(root, '.dsh', `task-${task.id}.json`), JSON.stringify(task, null, 2))
+  writeFileSync(join(root, 'src', 'app.js'), 'console.log(1)\n')
+  git(root, ['add', 'src/app.js'])
+  return root
+}
+
+/**
+ * A standard-flow task that has reached the commit checkpoint with a declared
+ * scope. `代码审核` is the checkpoint stage, and the engine only permits a
+ * commit there once that stage's OUTGOING guards already hold — so the fixture
+ * must also satisfy the review artifact and the review verdict.
+ */
+function approvedTask(overrides = {}) {
+  return {
+    schema: 1,
+    id: 'HOOK-1',
+    title: 'hook probe',
+    branch: 'main',
+    work_size: 'standard',
+    risk_level: 'standard',
+    stage: '代码审核',
+    requirement_confirmed: true,
+    solution_confirmed: true,
+    items: [{ id: 'i1', title: 'do the thing', status: 'done', review: { spec: { outcome: 'pass' }, quality: { outcome: 'pass' } } }],
+    verification: { passed: true, evidence: [] },
+    review: { outcome: 'pass' },
+    // The `代码审核 -> 完成` edge requires `review_passed` and `artifacts_present`.
+    artifacts: { review: { conclusion: 'looks good', issues: 'none' } },
+    files: ['src/app.js'],
+    commits: [],
+    flow: { flow: 'standard', version: 2, config: null },
+    ...overrides,
+  }
+}
+
+/** Resolve the standard preset's config the same way the hook does. */
+async function standardConfig() {
+  const { resolveFlow } = await import('./lib/workflows.js')
+  const resolved = resolveFlow('standard')
+  assert.equal(resolved.ok, true, 'the built-in standard preset resolves')
+  return resolved.config
+}
+
+test('a task at its checkpoint with the right message commits', async () => {
+  const config = await standardConfig()
+  const root = repo('allow', approvedTask({ flow: { flow: 'standard', version: 2, config } }))
+  try {
+    const result = tryCommit(root, '【HOOK-1】【TASK】probe the hook')
+    assert.equal(result.allowed, true, `expected the commit to proceed, stderr: ${result.stderr}`)
+  } finally {
+    assert.ok(resolve(root).startsWith(resolve(tmpdir()) + sep))
+    rmSync(root, { recursive: true, force: true })
+  }
+})
+
+test('a message that violates the configured pattern is refused', async () => {
+  const config = await standardConfig()
+  const root = repo('badmsg', approvedTask({ flow: { flow: 'standard', version: 2, config } }))
+  try {
+    const result = tryCommit(root, 'no task id here')
+    assert.equal(result.allowed, false, 'a malformed summary must be refused')
+    assert.match(result.stderr, /提交门禁拒绝/, 'the gate states its own refusal reason')
+  } finally {
+    rmSync(root, { recursive: true, force: true })
+  }
+})
+
+test('a commit touching files outside the declared scope is refused', async () => {
+  const config = await standardConfig()
+  const root = repo('scope', approvedTask({ flow: { flow: 'standard', version: 2, config } }))
+  try {
+    writeFileSync(join(root, 'src', 'other.js'), 'console.log(2)\n')
+    git(root, ['add', 'src/other.js'])
+    const result = tryCommit(root, '【HOOK-1】【TASK】probe the hook')
+    assert.equal(result.allowed, false, 'an out-of-scope path must be refused')
+    assert.match(result.stderr, /任务范围之外/, 'the refusal names the scope violation')
+  } finally {
+    rmSync(root, { recursive: true, force: true })
+  }
+})
+
+test('a commit before the checkpoint stage is refused', async () => {
+  const config = await standardConfig()
+  const root = repo('stage', approvedTask({ stage: '开发', flow: { flow: 'standard', version: 2, config } }))
+  try {
+    const result = tryCommit(root, '【HOOK-1】【TASK】probe the hook')
+    assert.equal(result.allowed, false, 'committing before the checkpoint must be refused')
+    assert.match(result.stderr, /提交门禁拒绝/, 'the gate states its refusal reason')
+  } finally {
+    rmSync(root, { recursive: true, force: true })
+  }
+})
+
+test('a task whose frozen snapshot was edited is refused', async () => {
+  const config = await standardConfig()
+  const tampered = { ...config, start_stage: '开发' }
+  const root = repo('tamper', approvedTask({
+    flow: { flow: 'standard', version: 2, config: tampered, hash: 'not-the-real-hash' },
+  }))
+  try {
+    const result = tryCommit(root, '【HOOK-1】【TASK】probe the hook')
+    assert.equal(result.allowed, false, 'a snapshot hash mismatch must be refused')
+    assert.match(result.stderr, /hash 不匹配/, 'the refusal names the integrity failure')
+  } finally {
+    rmSync(root, { recursive: true, force: true })
+  }
+})
+
+test('touching a sensitive path without a high-risk receipt is refused', async () => {
+  const config = await standardConfig()
+  const root = repo('sensitive', approvedTask({
+    files: ['src/app.js', '.env'],
+    flow: { flow: 'standard', version: 2, config },
+  }))
+  try {
+    writeFileSync(join(root, '.env'), 'SECRET=1\n')
+    git(root, ['add', '.env'])
+    const result = tryCommit(root, '【HOOK-1】【TASK】probe the hook')
+    assert.equal(result.allowed, false, 'a sensitive path without a high-risk receipt must be refused')
+    assert.match(result.stderr, /敏感路径/, 'the refusal names the sensitive path')
+  } finally {
+    rmSync(root, { recursive: true, force: true })
+  }
+})

package/.p0-test.mjs

@@ -736,4 +736,54 @@ function memProbe(files) {
   assert(JSON.parse(fs._files.get('.dsh/task-CAS-RACE.json')).title === 'concurrent writer', 'CAS preserves the concurrent writer record')
 }
 
+// ── 36. 0.23.3: the path guard normalizes BEFORE the forbidden-prefix test ──
+// Testing the raw string let `D:/proj/../../Windows` through: it matches no
+// forbidden prefix as written, yet every later join() resolves it to C:/Windows.
+// NOTE: block 35 above already activated the module-level registry and strict
+// mode, so every path asserted VALID here must be registered first.
+{
+  const ctl = await import('./lib/controller.js')
+  const valid = ['D:/work/my project', 'D:/mydir/users-guide', 'D:/proj/one/']
+  for (const good of valid) ctl.registerWorkspace(good)
+  // Must still accept ordinary workspaces, including names that merely look risky.
+  for (const good of valid) {
+    try {
+      ctl.checkedPath(good)
+    } catch (error) {
+      throw new Error(`checkedPath wrongly rejected a valid workspace "${good}": ${error.message}`)
+    }
+  }
+  assert(ctl.checkedPath('D:/proj/one/') === 'D:/proj/one', 'trailing slash is still normalized away')
+  assert(ctl.checkedPath('D:/work/my project') === 'D:/work/my project', 'a space in a workspace name is preserved')
+  // Traversal must not smuggle a system directory past the guard.
+  await assertThrows(() => ctl.checkedPath('D:/proj/../../Windows'), 'not an allowed workspace', 'traversal into a system dir is rejected after normalization')
+  await assertThrows(() => ctl.checkedPath('C:/Users/x/../../Windows'), 'not an allowed workspace', 'traversal out of C:/Users into Windows is rejected')
+  await assertThrows(() => ctl.checkedPath('D:/proj/../../../Users'), 'not an allowed workspace', 'traversal into a user tree is rejected')
+  // The system list is drive-agnostic: matching only c:/windows left D:/Windows open.
+  await assertThrows(() => ctl.checkedPath('D:/Windows'), 'not an allowed workspace', 'a system dir on a non-C drive is rejected')
+  await assertThrows(() => ctl.checkedPath('E:/Program Files/x'), 'not an allowed workspace', 'Program Files on any drive is rejected')
+  await assertThrows(() => ctl.checkedPath('C:/ProgramData/x'), 'not an allowed workspace', 'ProgramData is rejected')
+  // A bare filesystem root is not a workspace.
+  await assertThrows(() => ctl.checkedPath('D:/'), 'filesystem root', 'a drive root is rejected')
+  await assertThrows(() => ctl.checkedPath('C:/'), 'filesystem root', 'C:/ is rejected')
+  // Regression guard for behaviour block 35 already covered.
+  await assertThrows(() => ctl.checkedPath('C:/Windows/system32'), 'not an allowed workspace', 'the original system-root case still fails closed')
+  await assertThrows(() => ctl.checkedPath('relative/path'), 'must be absolute', 'a relative path is still rejected')
+}
+
+// ── 37. 0.23.3: init writes never escape the authorized workspace ──────────
+{
+  const ctl = await import('./lib/controller.js')
+  assert(typeof ctl.isInside === 'function', 'the containment helper is exported for host integrations')
+  // Segment-level comparison: a name-prefix sibling is NOT inside its neighbour.
+  assert(ctl.isInside('D:/a/b', 'D:/a/b/c') === true, 'a descendant is inside')
+  assert(ctl.isInside('D:/a/b', 'D:/a/b') === true, 'the root itself is inside')
+  assert(ctl.isInside('D:/a/b', 'D:/a/bc') === false, 'a name-prefix sibling is NOT inside')
+  assert(ctl.isInside('D:/a/b', 'D:/a') === false, 'a parent is not inside')
+  assert(ctl.isInside('D:/a/b', 'D:/a/b/../c') === false, 'a traversal out of the workspace is NOT inside')
+  const controllerSrc = readFileSync('./lib/controller.js', 'utf8')
+  assert(controllerSrc.includes('定位到工作区之外'), 'writeInit refuses a target located outside the workspace')
+  assert(controllerSrc.includes('INIT_MAX_ANCESTOR_CLIMB'), 'the ancestor walk is bounded rather than unbounded')
+}
+
 console.log(`\nP0 acceptance: ${passed} checks passed`)

package/docs/CHANGELOG.md

@@ -4,14 +4,28 @@
 
 按版本查阅功能变化。当前使用方式以[项目首页](../README.md)和使用指南为准；历史条目中的实现方式、限制与测试数量可能已被后续版本替代。
 
-## 0.23.2
-
-- 修复 verify / skill_result 先执行命令后审批、批准权限未传入 shell 的问题；拒绝、取消或审批不可用时不执行命令。
-- 审批显示实际验证命令；批准模式只用于本次命令和回执写入，不改变会话策略，也不重复申请保存回执的审批。
-- 修正提交规则与手册中的模块名示例，第一段使用当前任务 id，第二段使用 status 的 commit.label；自定义格式以任务冻结流程为准。
-- dshtest 首轮在 0.23.1 复现权限问题；修复后连续两轮完整开发、验证、审核、本地提交及归档回退通过。专项覆盖审批拒绝、原命令批准执行、证据过期和单次权限恢复，详见[发布说明](release-0.23.2.md)与[测试报告](testing/0.23.2/测试报告.md)。
-
-## 0.23.1
+## 0.23.4
+
+- **关闭两处 Remote 路径边界漏洞**。`checkedPath` 此前用**原始字符串**比对禁止前缀，`D:/proj/../../Windows` 不匹配任何前缀，却被后续 `join()` 解析到 `C:/Windows`；实测 8 个越界样本中旧实现放过 7 个。现在先 `resolve()` 归一化再判断，禁止列表不再绑定盘符（`D:/Windows`、`E:/Program Files` 同样拒绝），并拒绝裸盘符根（`D:/`、`C:/`）。
+- `writeInit` 不再写到工作区之外。`locateInitRoot` 的祖先回溯可能定位到工作区上一级：**读取**该文件是有意的（那才是真正拥有 `AGENTS.md` 的项目），但**写入**不是本工作区的事。现在越界写入直接拒绝并提示改选工作区，与 `dev_task init apply` 的 `assertInsideRoot` 一致；祖先回溯同时加上 8 层上限。新增 `isInside` 按**路径段**而非字符串前缀比较，`D:/a/bc` 不会被误判为在 `D:/a/b` 内。
+- **新增 DSH 契约兼容性检查**（`scripts/verify-dsh-compat.mjs`，`npm run verify:dsh`）。它读取真实 DSH 检出里 typert 协议的类型声明，判断当前契约是 `schema` 还是 `create()`，再断言产物满足它、且 peer 范围确实覆盖该版本。这正是 0.23.3 修复的那类问题——单元测试看不到，因为测试从不通过真实注册表加载 descriptor。CI 新增 `dsh-contract` 作业：对固定基线 `dsh-v0.1.6-alpha.2` 失败即红，对 `master` 仅告警（`continue-on-error`），因此破坏性变更会在发布前暴露。已反向验证：把 peer 范围改回旧值，该检查会失败。
+- **新增提交钩子端到端测试**（`.hook-test.mjs`，6 项）。此前的 P0 断言只检查钩子**源码**的字符串（关闭路径转义、NUL 分隔、捆绑冻结快照），能防手抄回潮，但**无法证明门禁真的拦住了提交**——一个全部拒绝或全部放行的钩子都能通过。新测试在临时 git 仓库里真实执行 `git commit`，双向断言：合法提交放行，消息格式错误、范围外文件、未到检查点、快照被篡改、敏感路径无高风险回执五类均被拒绝且给出对应理由。
+- P0 断言从 126 增至 146；`npm test` 现包含钩子端到端用例（37 → 43 项）。
+
+## 0.23.3
+
+- **适配 DSH 0.1.6-alpha.2 的 typert strict codec 契约变更**。该版本把 codec 从直接携带 `schema` 改为惰性工厂 `create: () => TypertSchema`，并在注册时硬校验 `typeof codec.create === 'function'`；旧写法会在插件加载阶段抛 `strict codec has no create() factory`，整份 Remote 贡献被拒绝。`src/client/remote.ts` 的 36 个 strict codec 现在**同时携带 `create` 与 `schema`**，因此同一份产物在 0.1.2-rc.1（桌面版）与 0.1.6-alpha.2（源码版）上都能加载。两处内联的 `z.object({...})` 提为具名常量，与文件既有风格一致。
+- peer 范围补上 `|| ^0.1.6-alpha.2`。此前声明未覆盖该版本，pnpm 只在安装时警告、运行时不拦，导致问题在启动时才暴露。
+- 注意：npm 的 semver 不匹配未被范围显式点名的预发布版本，因此后续每个新的 DSH alpha 都需要在此处追加，否则会重新出现同类加载失败。
+
+## 0.23.2
+
+- 修复 verify / skill_result 先执行命令后审批、批准权限未传入 shell 的问题；拒绝、取消或审批不可用时不执行命令。
+- 审批显示实际验证命令；批准模式只用于本次命令和回执写入，不改变会话策略，也不重复申请保存回执的审批。
+- 修正提交规则与手册中的模块名示例，第一段使用当前任务 id，第二段使用 status 的 commit.label；自定义格式以任务冻结流程为准。
+- dshtest 首轮在 0.23.1 复现权限问题；修复后连续两轮完整开发、验证、审核、本地提交及归档回退通过。专项覆盖审批拒绝、原命令批准执行、证据过期和单次权限恢复，详见[发布说明](release-0.23.2.md)与[测试报告](testing/0.23.2/测试报告.md)。
+
+## 0.23.1
 
 - 汇总本轮候选版的资源来源、Windows 技能加载、实施审核保留、派工状态、真实技能/验证/提交回执及状态一致性修复。
 - 新增 status.artifact_requirements，提前披露当前阶段的记录字段和缺项；未知字段拒绝时给出恢复指引，整次写入保持不变。

package/lib/client.js

@@ -4251,6 +4251,8 @@ var resourceRequestSchema = external_exports.object({
   expectedHash: external_exports.string().optional()
 });
 var resourcePreviewSchema = external_exports.object({ ok: external_exports.boolean(), name: external_exports.string(), description: external_exports.string(), content: external_exports.string(), target: external_exports.string(), files: external_exports.number(), bytes: external_exports.number(), hash: external_exports.string(), conflict: external_exports.boolean(), error: external_exports.string().optional() });
+var resourceRootsRequestSchema = external_exports.object({ kind: external_exports.enum(["skill", "rule"]), path: external_exports.string() });
+var resourceRootsSchema = external_exports.object({ project: external_exports.string(), user: external_exports.string() });
 var PACKAGE = "@godv61/dsh-task-engine";
 var TYPERT_REMOTE = {
   package: PACKAGE,
@@ -4261,8 +4263,8 @@ var TYPERT_REMOTE = {
       namespace: "task-engine",
       method,
       invocation: { kind: "direct" },
-      parameters: [{ name: "request", wire: "request", source: "json", codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#ResourceImportRequest`, schema: resourceRequestSchema } }],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#ResourcePreview`, schema: resourcePreviewSchema }
+      parameters: [{ name: "request", wire: "request", source: "json", codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#ResourceImportRequest`, create: () => resourceRequestSchema, schema: resourceRequestSchema } }],
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#ResourcePreview`, create: () => resourcePreviewSchema, schema: resourcePreviewSchema }
     })),
     {
       id: `${PACKAGE}#task-engine/resourceRoots`,
@@ -4270,8 +4272,8 @@ var TYPERT_REMOTE = {
       namespace: "task-engine",
       method: "resourceRoots",
       invocation: { kind: "direct" },
-      parameters: [{ name: "request", wire: "request", source: "json", codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#ResourceRootsRequest`, schema: external_exports.object({ kind: external_exports.enum(["skill", "rule"]), path: external_exports.string() }) } }],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#ResourceRoots`, schema: external_exports.object({ project: external_exports.string(), user: external_exports.string() }) }
+      parameters: [{ name: "request", wire: "request", source: "json", codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#ResourceRootsRequest`, create: () => resourceRootsRequestSchema, schema: resourceRootsRequestSchema } }],
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#ResourceRoots`, create: () => resourceRootsSchema, schema: resourceRootsSchema }
     },
     {
       id: `${PACKAGE}#task-engine/read`,
@@ -4284,10 +4286,10 @@ var TYPERT_REMOTE = {
           name: "path",
           wire: "path",
           source: "json",
-          codec: { mode: "strict", typeSymbol: "string", schema: external_exports.string() }
+          codec: { mode: "strict", typeSymbol: "string", create: () => external_exports.string(), schema: external_exports.string() }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#EngConfigView`, schema: viewSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#EngConfigView`, create: () => viewSchema, schema: viewSchema }
     },
     {
       id: `${PACKAGE}#task-engine/write`,
@@ -4300,10 +4302,10 @@ var TYPERT_REMOTE = {
           name: "request",
           wire: "request",
           source: "json",
-          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#EngWriteRequest`, schema: writeRequestSchema }
+          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#EngWriteRequest`, create: () => writeRequestSchema, schema: writeRequestSchema }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#EngConfigView`, schema: viewSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#EngConfigView`, create: () => viewSchema, schema: viewSchema }
     },
     {
       id: `${PACKAGE}#task-engine/listSkills`,
@@ -4316,10 +4318,10 @@ var TYPERT_REMOTE = {
           name: "path",
           wire: "path",
           source: "json",
-          codec: { mode: "strict", typeSymbol: "string", schema: external_exports.string() }
+          codec: { mode: "strict", typeSymbol: "string", create: () => external_exports.string(), schema: external_exports.string() }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#SkillCatalog`, schema: skillCatalogSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#SkillCatalog`, create: () => skillCatalogSchema, schema: skillCatalogSchema }
     },
     {
       id: `${PACKAGE}#task-engine/listRules`,
@@ -4332,10 +4334,10 @@ var TYPERT_REMOTE = {
           name: "path",
           wire: "path",
           source: "json",
-          codec: { mode: "strict", typeSymbol: "string", schema: external_exports.string() }
+          codec: { mode: "strict", typeSymbol: "string", create: () => external_exports.string(), schema: external_exports.string() }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#RuleCatalog`, schema: ruleCatalogSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#RuleCatalog`, create: () => ruleCatalogSchema, schema: ruleCatalogSchema }
     },
     {
       id: `${PACKAGE}#task-engine/writeSkill`,
@@ -4348,10 +4350,10 @@ var TYPERT_REMOTE = {
           name: "request",
           wire: "request",
           source: "json",
-          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteSkillRequest`, schema: writeSkillRequestSchema }
+          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteSkillRequest`, create: () => writeSkillRequestSchema, schema: writeSkillRequestSchema }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteResourceResult`, schema: writeResourceResultSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteResourceResult`, create: () => writeResourceResultSchema, schema: writeResourceResultSchema }
     },
     {
       id: `${PACKAGE}#task-engine/installSkill`,
@@ -4364,10 +4366,10 @@ var TYPERT_REMOTE = {
           name: "request",
           wire: "request",
           source: "json",
-          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#InstallSkillRequest`, schema: installSkillRequestSchema }
+          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#InstallSkillRequest`, create: () => installSkillRequestSchema, schema: installSkillRequestSchema }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteResourceResult`, schema: writeResourceResultSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteResourceResult`, create: () => writeResourceResultSchema, schema: writeResourceResultSchema }
     },
     {
       id: `${PACKAGE}#task-engine/listDirs`,
@@ -4380,10 +4382,10 @@ var TYPERT_REMOTE = {
           name: "request",
           wire: "request",
           source: "json",
-          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#ListDirsRequest`, schema: listDirsRequestSchema }
+          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#ListDirsRequest`, create: () => listDirsRequestSchema, schema: listDirsRequestSchema }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#ListDirsView`, schema: listDirsViewSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#ListDirsView`, create: () => listDirsViewSchema, schema: listDirsViewSchema }
     },
     {
       id: `${PACKAGE}#task-engine/writeRule`,
@@ -4396,10 +4398,10 @@ var TYPERT_REMOTE = {
           name: "request",
           wire: "request",
           source: "json",
-          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteRuleRequest`, schema: writeRuleRequestSchema }
+          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteRuleRequest`, create: () => writeRuleRequestSchema, schema: writeRuleRequestSchema }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteResourceResult`, schema: writeResourceResultSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteResourceResult`, create: () => writeResourceResultSchema, schema: writeResourceResultSchema }
     },
     {
       id: `${PACKAGE}#task-engine/readSkill`,
@@ -4412,10 +4414,10 @@ var TYPERT_REMOTE = {
           name: "request",
           wire: "request",
           source: "json",
-          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#ReadSkillRequest`, schema: readSkillRequestSchema }
+          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#ReadSkillRequest`, create: () => readSkillRequestSchema, schema: readSkillRequestSchema }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#ReadSkillResult`, schema: readSkillResultSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#ReadSkillResult`, create: () => readSkillResultSchema, schema: readSkillResultSchema }
     },
     {
       id: `${PACKAGE}#task-engine/readRule`,
@@ -4428,10 +4430,10 @@ var TYPERT_REMOTE = {
           name: "request",
           wire: "request",
           source: "json",
-          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#ReadRuleRequest`, schema: readRuleRequestSchema }
+          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#ReadRuleRequest`, create: () => readRuleRequestSchema, schema: readRuleRequestSchema }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#ReadRuleResult`, schema: readRuleResultSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#ReadRuleResult`, create: () => readRuleResultSchema, schema: readRuleResultSchema }
     },
     {
       id: `${PACKAGE}#task-engine/deleteSkill`,
@@ -4444,10 +4446,10 @@ var TYPERT_REMOTE = {
           name: "request",
           wire: "request",
           source: "json",
-          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#DeleteSkillRequest`, schema: deleteSkillRequestSchema }
+          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#DeleteSkillRequest`, create: () => deleteSkillRequestSchema, schema: deleteSkillRequestSchema }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteResourceResult`, schema: writeResourceResultSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteResourceResult`, create: () => writeResourceResultSchema, schema: writeResourceResultSchema }
     },
     {
       id: `${PACKAGE}#task-engine/deleteRule`,
@@ -4460,10 +4462,10 @@ var TYPERT_REMOTE = {
           name: "request",
           wire: "request",
           source: "json",
-          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#DeleteRuleRequest`, schema: deleteRuleRequestSchema }
+          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#DeleteRuleRequest`, create: () => deleteRuleRequestSchema, schema: deleteRuleRequestSchema }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteResourceResult`, schema: writeResourceResultSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#WriteResourceResult`, create: () => writeResourceResultSchema, schema: writeResourceResultSchema }
     },
     {
       id: `${PACKAGE}#task-engine/readTasks`,
@@ -4476,10 +4478,10 @@ var TYPERT_REMOTE = {
           name: "path",
           wire: "path",
           source: "json",
-          codec: { mode: "strict", typeSymbol: "string", schema: external_exports.string() }
+          codec: { mode: "strict", typeSymbol: "string", create: () => external_exports.string(), schema: external_exports.string() }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#TaskLedgerView`, schema: taskLedgerViewSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#TaskLedgerView`, create: () => taskLedgerViewSchema, schema: taskLedgerViewSchema }
     },
     {
       id: `${PACKAGE}#task-engine/readInit`,
@@ -4492,10 +4494,10 @@ var TYPERT_REMOTE = {
           name: "path",
           wire: "path",
           source: "json",
-          codec: { mode: "strict", typeSymbol: "string", schema: external_exports.string() }
+          codec: { mode: "strict", typeSymbol: "string", create: () => external_exports.string(), schema: external_exports.string() }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#InitView`, schema: initViewSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#InitView`, create: () => initViewSchema, schema: initViewSchema }
     },
     {
       id: `${PACKAGE}#task-engine/writeInit`,
@@ -4508,10 +4510,10 @@ var TYPERT_REMOTE = {
           name: "request",
           wire: "request",
           source: "json",
-          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#InitWriteRequest`, schema: initWriteRequestSchema }
+          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#InitWriteRequest`, create: () => initWriteRequestSchema, schema: initWriteRequestSchema }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#InitWriteResult`, schema: initWriteResultSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#InitWriteResult`, create: () => initWriteResultSchema, schema: initWriteResultSchema }
     },
     {
       id: `${PACKAGE}#task-engine/generateInit`,
@@ -4524,10 +4526,10 @@ var TYPERT_REMOTE = {
           name: "request",
           wire: "request",
           source: "json",
-          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#InitGenerateRequest`, schema: initGenerateRequestSchema }
+          codec: { mode: "strict", typeSymbol: `${PACKAGE}/types#InitGenerateRequest`, create: () => initGenerateRequestSchema, schema: initGenerateRequestSchema }
         }
       ],
-      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#InitDraft`, schema: initDraftSchema }
+      result: { mode: "strict", typeSymbol: `${PACKAGE}/types#InitDraft`, create: () => initDraftSchema, schema: initDraftSchema }
     }
   ]
 };