@kylecheng3146/agent-ops 0.10.2 → 0.11.1

package/dist/packages/cli/src/debug-intake.js

@@ -1,245 +0,0 @@
-import { join } from "node:path";
-import { TaskService } from "../../../runtime/src/task/service.js";
-import { FileTaskStore } from "../../../runtime/src/task/store.js";
-import { calculateConfigHash } from "../../../runtime/src/config/hash.js";
-import { evaluateGuardrail } from "../../../runtime/src/guardrails/evaluate.js";
-import { isDebugIssue } from "../../../runtime/src/task/debug-intake.js";
-import { ensureSessionWorktree, readWorktreeRecord, sessionWorktreeName } from "../../../runtime/src/parallel/service.js";
-import { listWorktrees, resumeWorktree } from "../../../runtime/src/parallel/manage.js";
-import { collectChangeSurface } from "../../../runtime/src/verify/change-surface.js";
-import { calculateSourceFingerprint } from "../../../runtime/src/verify/source-fingerprint.js";
-import { AgentOpsError } from "../../../runtime/src/fs/paths.js";
-import { loadEffectiveConfig } from "./context.js";
-import { gitRunner, worktreeDependencies } from "./parallel-deps.js";
-const foregroundClockSupported = (host) => host !== "opencode";
-function nativeSessionId(input) {
-    const fromInput = [input.session_id, input.sessionId, input.conversationId, input.thread_id, input.threadId]
-        .find((value) => typeof value === "string" && value.length > 0);
-    return fromInput ?? [process.env.AGENT_OPS_SESSION_ID, process.env.CODEX_THREAD_ID]
-        .find((value) => value !== undefined && value.length > 0);
-}
-/** Start only an already attached DEBUG issue; native hooks never create work. */
-export async function startDebugSession(root, sessionId, host) {
-    if (!foregroundClockSupported(host) || sessionId.length === 0)
-        return;
-    const config = (await loadEffectiveConfig(root, "project")).config;
-    const saved = await readWorktreeRecord(join(root, ".worktrees", sessionWorktreeName(sessionId)));
-    const contextRoot = saved?.mainRoot === root && saved.sessionId === sessionId ? saved.path : root;
-    const contextConfig = contextRoot === root ? config : (await loadEffectiveConfig(contextRoot, "project")).config;
-    const tasks = new TaskService(new FileTaskStore(join(contextRoot, ".agent-ops/tasks/state.json"), contextRoot), { completion: { root: contextRoot, gitRunner: gitRunner(contextRoot), loadConfig: async () => contextConfig } });
-    const attached = await tasks.status({ sessionId }).catch(() => null);
-    if (attached?.status === "active" && attached.task.debug !== undefined)
-        await tasks.debugService().foregroundStart(attached.task.id, sessionId);
-}
-export async function routeDebugPrompt(root, input, host = "claude") {
-    if (typeof input !== "object" || input === null || Array.isArray(input))
-        return null;
-    const fields = input;
-    if (typeof fields.prompt !== "string")
-        return null;
-    const continuation = /^(?:繼續|继续|continue)[。.!！]?$/iu.test(fields.prompt.trim());
-    const debugIssue = isDebugIssue(fields.prompt);
-    const config = (await loadEffectiveConfig(root, "project")).config;
-    if (config.features.debug?.enabled !== true)
-        return null;
-    if (evaluateGuardrail({ kind: "content", content: fields.prompt, scope: root }).action === "block")
-        return null;
-    const session = nativeSessionId(fields);
-    if (session === undefined) {
-        if (!debugIssue && !continuation)
-            return null;
-        return "DEBUG intake unsupported: this hook has no reliable native session identity. Use task create --debug --goal with the original issue in the native conversation.";
-    }
-    const saved = await readWorktreeRecord(join(root, ".worktrees", sessionWorktreeName(session)));
-    const contextRoot = saved?.mainRoot === root && saved.sessionId === session ? saved.path : root;
-    const contextConfig = contextRoot === root ? config : (await loadEffectiveConfig(contextRoot, "project")).config;
-    const original = new TaskService(new FileTaskStore(join(contextRoot, ".agent-ops/tasks/state.json"), contextRoot), { completion: { root: contextRoot, gitRunner: gitRunner(contextRoot), loadConfig: async () => contextConfig } });
-    const attached = await original.status({ sessionId: session }).catch(() => null);
-    if (attached?.status === "active" && attached.task.debug !== undefined) {
-        await original.debugService().syncNativeControl(attached.task.id, session);
-        const control = (await original.debugService().root(attached.task.id)).debug.control;
-        if (control?.paused === true)
-            return `DEBUG original issue ${attached.task.id} is paused by the human. Preserve its task, evidence and remaining budget; stop after saving progress. Only a native human continue event resumes it.`;
-        if (continuation) {
-            let message = `DEBUG continue preserved original issue ${attached.task.id}: native user event did not extend time; other limits remain authoritative.`;
-            try {
-                await original.debugService().extend(attached.task.id, session, "latest");
-                message = `DEBUG original issue ${attached.task.id}: native human time grant applied once; other limits remain authoritative.`;
-            }
-            catch (error) {
-                message = `DEBUG continue preserved original issue ${attached.task.id}: ${error instanceof Error ? error.message : "Native user approval unavailable"}`;
-            }
-            if (foregroundClockSupported(host)) {
-                try {
-                    await original.debugService().foregroundStart(attached.task.id, session);
-                }
-                catch (error) {
-                    message += ` Foreground clock unavailable: ${error instanceof Error ? error.message : "host lifecycle is unsupported"}`;
-                }
-            }
-            else
-                message += " Foreground clock unsupported on this host; preserve the issue and use a host with a trustworthy end-of-turn signal.";
-            if (control?.mode === "diagnose")
-                message += " Diagnosis-only scope remains active; continue discriminating evidence without product repairs until a proven diagnosis or runtime blocker. Only a native human resume repair event restores the full loop.";
-            return message;
-        }
-        if (foregroundClockSupported(host)) {
-            try {
-                await original.debugService().foregroundStart(attached.task.id, session);
-            }
-            catch (error) {
-                return `DEBUG original issue ${attached.task.id}: foreground clock unavailable: ${error instanceof Error ? error.message : "host lifecycle is unsupported"}`;
-            }
-        }
-        if (control?.mode === "diagnose")
-            return `DEBUG original issue ${attached.task.id}: diagnosis only. Continue reproduction and hypothesis evidence until a supported diagnosis or a runtime blocker. Do not repair product behavior. A failure to reproduce is not a stop condition; a human resume repair event restores the full loop.`;
-        if (!debugIssue)
-            return null;
-        return `Continue original DEBUG issue ${attached.task.id}; retain its existing budget, evidence and hypotheses.`;
-    }
-    if (!debugIssue && !continuation)
-        return null;
-    if (continuation) {
-        if (attached?.status !== "active" || attached.task.debug === undefined)
-            return null;
-        try {
-            await original.debugService().extend(attached.task.id, session, "latest");
-            return `DEBUG original issue ${attached.task.id}: native human time grant applied once; other limits remain authoritative.`;
-        }
-        catch (error) {
-            return `DEBUG continue preserved original issue ${attached.task.id}: ${error instanceof Error ? error.message : "Native user approval unavailable"}`;
-        }
-    }
-    if (attached?.status === "active")
-        return attached.task.debug === undefined ? null : `Continue original DEBUG issue ${attached.task.id}; retain its existing budget, evidence and hypotheses.`;
-    // Another session's worktree may already hold this issue; reusing it keeps
-    // its consumed budget and rounds instead of starting a fresh task.
-    const holders = await listWorktrees(worktreeDependencies(), root).catch(() => []);
-    for (const { record: held } of holders) {
-        if (held.sessionId === session)
-            continue;
-        const heldConfig = (await loadEffectiveConfig(held.path, "project").catch(() => null))?.config;
-        if (heldConfig === undefined)
-            continue;
-        const issue = await new TaskService(new FileTaskStore(join(held.path, ".agent-ops/tasks/state.json"), held.path), { completion: { root: held.path, gitRunner: gitRunner(held.path), loadConfig: async () => heldConfig } }).activeDebugRoot(fields.prompt).catch(() => null);
-        if (issue === null)
-            continue;
-        try {
-            await resumeWorktree(worktreeDependencies(), { cwd: root, name: held.name, sessionId: session });
-        }
-        catch (error) {
-            return `DEBUG original issue ${issue.task.id} is still active in ${held.path}; a new task would reset its budget. ${error instanceof Error ? error.message : "Resume needs confirmation."} After the user confirms, run agent-ops worktree resume ${held.name} --session ${session}.`;
-        }
-        return `Continue original DEBUG issue ${issue.task.id} in ${held.path}; its budget, rounds and evidence are preserved.`;
-    }
-    await original.assertDebugBaseline();
-    const record = config.worktree?.mode === "auto" && await readWorktreeRecord(root) === null ?
-        await ensureSessionWorktree(worktreeDependencies(), { cwd: root, sessionId: session }) : null;
-    const path = record?.path ?? root;
-    const effective = (await loadEffectiveConfig(path, "project")).config;
-    const tasks = new TaskService(new FileTaskStore(join(path, ".agent-ops/tasks/state.json"), path), { completion: { root: path, gitRunner: gitRunner(path), loadConfig: async () => effective } });
-    const existing = await tasks.status({ sessionId: session }).catch(() => null);
-    if (existing?.status === "active")
-        return existing.task.debug === undefined ? null : `Continue original DEBUG issue ${existing.task.id}.`;
-    const held = await tasks.activeDebugRoot(fields.prompt);
-    if (held !== null) {
-        await tasks.attach(session, held.task.id);
-        let message = `Continue original DEBUG issue ${held.task.id}; its budget, rounds and evidence are preserved.`;
-        if (foregroundClockSupported(host)) {
-            try {
-                await tasks.debugService().foregroundStart(held.task.id, session);
-            }
-            catch (error) {
-                message += ` Foreground clock unavailable: ${error instanceof Error ? error.message : "host lifecycle is unsupported"}`;
-            }
-        }
-        return message;
-    }
-    const ids = effective.verification.commands.filter(c => c.required).map(c => c.id);
-    const baseline = (await gitRunner(path).run(["rev-parse", "--verify", "HEAD"])).stdout.toString().trim();
-    const criteria = ["issue-regression", "related-checks"].map(id => ({ id, description: id === "issue-regression" ? "Reproduce and fix the original reported issue with relevant regression evidence." : "Pass necessary related checks and two fresh independent reviews.", verifierIds: ids,
-        acceptance: { mode: "review-only", baselineCommit: baseline, bindings: [], reviewOnlyReason: "Provisional investigation intake only. Identify and revise to executable original-issue regression before debug success; this criterion cannot prove reproduction." } }));
-    const created = await tasks.create({ title: fields.prompt.split("\n")[0].slice(0, 160), goal: fields.prompt, intent: "Investigate and fix the original issue through authoritative task debug evidence.", debug: { facts: ["User-reported symptom is unverified."], unknowns: ["Baseline reproduction", "Root cause", "Relevant regression and related checks"] }, criteria, sessionId: session, policyConfigHash: calculateConfigHash(effective), requireSurface: true });
-    let clockNote = "";
-    if (foregroundClockSupported(host)) {
-        try {
-            await tasks.debugService().foregroundStart(created.task.id, session);
-        }
-        catch (error) {
-            return `DEBUG issue ${created.task.id} created in ${path}, but its foreground clock is unavailable: ${error instanceof Error ? error.message : "host lifecycle is unsupported"}. Preserve the issue and do not claim timed completion.`;
-        }
-    }
-    else
-        clockNote = " Native foreground timing is unsupported on this host; controlled operations remain evidence-timed and do not claim a complete active-time budget.";
-    return `DEBUG issue ${created.task.id} created in ${path}. Preserve the original goal. Investigate, record falsifiable hypotheses, revise provisional criteria to relevant behavioral regression, add the surface audit (task revise --surface-file) before the first repair, repair, declare the origin (task debug --debug-action origin) once a hypothesis is confirmed, verify, obtain two fresh independent reviews, then finish. A clean HEAD baseline is fixed automatically; do not ask permission for it or offer diagnosis-only as a fallback. Failure to reproduce alone is not a stop condition: continue discriminating checks within the budget. Defaults: 60 active minutes / 5 material repair candidates. No user-authored debug plan is required.${clockNote}`;
-}
-export async function interruptDebugSession(root, sessionId, nativeInput) {
-    const saved = await readWorktreeRecord(join(root, ".worktrees", sessionWorktreeName(sessionId)));
-    const path = saved?.mainRoot === root && saved.sessionId === sessionId ? saved.path : root;
-    const tasks = new TaskService(new FileTaskStore(join(path, ".agent-ops/tasks/state.json"), path), { completion: { root: path, gitRunner: gitRunner(path), loadConfig: async () => (await loadEffectiveConfig(path, "project")).config } });
-    const attached = await tasks.status({ sessionId }).catch(error => {
-        if (error instanceof AgentOpsError && error.code === "TASK_SESSION_UNATTACHED")
-            return null;
-        throw error;
-    });
-    if (attached?.status === "active" && attached.task.debug !== undefined)
-        await tasks.debugService().interrupt(attached.task.id, sessionId, nativeInput);
-}
-/** Close only the task attached to a native host's verified session. */
-export async function closeDebugSession(root, sessionId, host = "claude") {
-    if (!foregroundClockSupported(host))
-        return;
-    if (sessionId.length === 0)
-        return;
-    const saved = await readWorktreeRecord(join(root, ".worktrees", sessionWorktreeName(sessionId)));
-    const contextRoot = saved?.mainRoot === root && saved.sessionId === sessionId ? saved.path : root;
-    const tasks = new TaskService(new FileTaskStore(join(contextRoot, ".agent-ops/tasks/state.json"), contextRoot), { completion: { root: contextRoot, gitRunner: gitRunner(contextRoot), loadConfig: async () => (await loadEffectiveConfig(contextRoot, "project")).config } });
-    const attached = await tasks.status({ sessionId }).catch(() => null);
-    if (attached?.status === "active" && attached.task.debug !== undefined)
-        await tasks.debugService().foregroundStop(attached.task.id, sessionId);
-}
-/**
- * Without the completion gate, an active DEBUG issue still cannot end a turn
- * unless a current runtime stop checkpoint exists. Sessions without one pass.
- */
-export function debugStopGate(root, rootConfig) {
-    return { handle: async (event) => {
-            if (event.event !== "stop" || event.sessionId === undefined || event.sessionId.length === 0 ||
-                event.terminationReason !== "model_stop" || event.fullyIdle !== true)
-                return null;
-            const sessionId = event.sessionId;
-            const evaluate = async (attempt) => {
-                const saved = await readWorktreeRecord(join(root, ".worktrees", sessionWorktreeName(sessionId))).catch(() => null);
-                const contextRoot = saved?.mainRoot === root && saved.sessionId === sessionId ? saved.path : root;
-                const config = contextRoot === root && attempt === 0 ? rootConfig : (await loadEffectiveConfig(contextRoot, "project")).config;
-                const runner = gitRunner(contextRoot);
-                const tasks = new TaskService(new FileTaskStore(join(contextRoot, ".agent-ops/tasks/state.json"), contextRoot), { completion: { root: contextRoot, gitRunner: runner, loadConfig: async () => config } });
-                const attached = await tasks.status({ sessionId }).catch(error => {
-                    if (error instanceof AgentOpsError && error.code === "TASK_SESSION_UNATTACHED")
-                        return null;
-                    throw error;
-                });
-                if (attached?.status !== "active" || attached.task.debug === undefined)
-                    return null;
-                await tasks.debugService().prepareStop(attached.task.id, sessionId);
-                const surface = await collectChangeSurface(runner);
-                const fingerprint = await calculateSourceFingerprint(contextRoot, { mode: "worktree", changedFiles: surface.paths }, runner);
-                return await tasks.debugService().validCheckpoint(attached.task.id, sessionId, fingerprint)
-                    ? { action: "continue", status: "UNKNOWN", code: "COMPLETION_GATE_TASK_DEBUG_STOPPED", remedy: "Original issue remains active with a runtime-bound non-success checkpoint." }
-                    : { action: "block", status: "FAIL", code: "COMPLETION_GATE_TASK_DEBUG_ACTIVE", remedy: "Continue the original DEBUG investigation, repair, verification and review loop. Failure to reproduce and an arbitrary checkpoint do not permit stopping. Preserve the task and budgets; record a current runtime stop checkpoint only for a proven blocker or exhausted limits." };
-            };
-            // Reload the task/config once for a transient gate fault; never rewrite bad evidence.
-            for (let attempt = 0; attempt < 2; attempt++) {
-                try {
-                    return await evaluate(attempt);
-                }
-                catch (error) {
-                    if (attempt === 0)
-                        continue;
-                    const code = error instanceof AgentOpsError ? error.code : "IO_ERROR";
-                    return { action: "continue", status: "UNKNOWN", code: "TASK_DEBUG_GATE_UNAVAILABLE", remedy: `DEBUG remains incomplete: gate ${code} failed after one targeted reload. Preserve the original task, evidence and budgets; run agent-ops doctor and restore readable task/config evidence before resuming. No completion is attested.` };
-                }
-            }
-            return null;
-        } };
-}

package/dist/runtime/src/task/debug-intake.js

@@ -1,15 +0,0 @@
-/** Conservative intake only; the existing native Agent reasons about the issue. */
-export function isDebugIssue(prompt) {
-    if (prompt.length === 0 || prompt.length > 64 * 1024 || prompt.includes("\0"))
-        return false;
-    // Harness-injected turns (subagent hand-backs, task notifications) are not a human report.
-    if (/^\s*<(?:agent-message|task-notification|teammate-message)\b/u.test(prompt))
-        return false;
-    const value = prompt.normalize("NFKC").toLowerCase();
-    if (/\b(?:explain|describe|what is|how does|refactor|feature|implement|design)\b|說明|解释|解釋|重構|新增功能|設計|實作功能/u.test(value))
-        return false;
-    return /\b(?:bug|error|fail(?:s|ed|ure)?|exception|crash|regression|500)\b|錯誤|错误|失敗|失败|異常|异常|問題|问题|回傳\s*500/u.test(value) &&
-        /\b(?:fix|debug|investigate|reproduce|diagnose|resolve|repair)\b|修復|修复|調查|调查|重現|重现|診斷|诊断|查明|找出原因|解決|解决/u.test(value);
-}
-/** One issue or cause in different spacing or case is still the same one. */
-export const sameDebugText = (left, right) => left.normalize("NFKC").trim().replace(/\s+/gu, " ").toLowerCase() === right.normalize("NFKC").trim().replace(/\s+/gu, " ").toLowerCase();

package/dist/runtime/src/task/debug-state.js

@@ -1,135 +0,0 @@
-import { canonicalJson } from "../config/hash.js";
-import { sha256 } from "../fs/hash.js";
-import { AgentOpsError } from "../fs/paths.js";
-export const DEBUG_DEFAULTS = { enabled: true, budgetMs: 60 * 60_000, maxRounds: 5 };
-export const DEBUG_EXTENSION_MS = 20 * 60_000;
-const object = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-const text = (v) => typeof v === "string" && v.length > 0 && v.length <= 4096 && !v.includes("\0");
-const hash = (v) => typeof v === "string" && /^[a-f0-9]{64}$/u.test(v);
-const integer = (v) => Number.isSafeInteger(v) && v >= 0;
-const strings = (v) => Array.isArray(v) && v.length <= 128 && v.every(text) && new Set(v).size === v.length;
-const exact = (v, names) => object(v) && Object.keys(v).length === names.length && names.every(k => Object.hasOwn(v, k));
-const statuses = ["proposed", "investigating", "confirmed", "rejected", "inconclusive"];
-export const debugCauses = ["budget", "iterations", "strategy-required", "stagnation", "environment", "permission", "user-pause", "diagnosed"];
-export function validDebugSettings(v) {
-    return exact(v, ["enabled", "budgetMs", "maxRounds"]) && typeof v.enabled === "boolean" &&
-        integer(v.budgetMs) && v.budgetMs > 0 && v.budgetMs <= 86_400_000 &&
-        integer(v.maxRounds) && v.maxRounds > 0 && v.maxRounds <= 100;
-}
-export function validDebugIntake(v) {
-    return exact(v, ["rootTaskId", "facts", "unknowns"]) && text(v.rootTaskId) && strings(v.facts) && strings(v.unknowns);
-}
-export function validDebugState(v) {
-    const baseKeys = ["schemaVersion", "rootTaskId", "ownerRoot", "baselineCommit", "budgetMs", "maxRounds", "consumedMs", "regressionChecks", "hypotheses", "receipts", "strategy", "grants", "operation", "checkpoint"];
-    if (!object(v) || Object.keys(v).some(k => !baseKeys.includes(k) && k !== "foreground" && k !== "control") || !baseKeys.every(k => Object.hasOwn(v, k)) ||
-        v.schemaVersion !== 1 || !text(v.rootTaskId) || !text(v.ownerRoot) || typeof v.baselineCommit !== "string" || !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u.test(v.baselineCommit) ||
-        !validDebugSettings({ enabled: true, budgetMs: v.budgetMs, maxRounds: v.maxRounds }) || !integer(v.consumedMs) || !strings(v.regressionChecks) ||
-        !Array.isArray(v.hypotheses) || v.hypotheses.length > 32 || !Array.isArray(v.receipts) || v.receipts.length > 256 ||
-        !Array.isArray(v.grants) || v.grants.length > 128)
-        return false;
-    if (Object.hasOwn(v, "control") && (!exact(v.control, ["mode", "paused", "sessionId", "eventId", "sourceDigest", "timestamp"]) ||
-        !["full", "diagnose"].includes(String(v.control.mode)) || typeof v.control.paused !== "boolean" || !text(v.control.sessionId) ||
-        v.control.sessionId.length > 256 || !hash(v.control.eventId) || !hash(v.control.sourceDigest) || !integer(v.control.timestamp)))
-        return false;
-    for (const h of v.hypotheses) {
-        if (!exact(h, ["id", "statement", "method", "expected", "checkId", "expectedStatus", "status", "supporting", "opposing", "actual", "history"]) ||
-            ![h.id, h.statement, h.method, h.expected, h.checkId].every(text) || !["PASS", "FAIL"].includes(String(h.expectedStatus)) || !statuses.includes(String(h.status)) ||
-            !strings(h.supporting) || !strings(h.opposing) || typeof h.actual !== "string" || h.actual.length > 4096 ||
-            !Array.isArray(h.history) || h.history.length > 128 || h.history.some(entry => !exact(entry, ["status", "actual", "references", "reason"]) ||
-            !statuses.includes(String(entry.status)) || typeof entry.actual !== "string" || entry.actual.length > 4096 || !strings(entry.references) || !text(entry.reason)))
-            return false;
-    }
-    if (new Set(v.hypotheses.map(h => h.id)).size !== v.hypotheses.length)
-        return false;
-    for (const r of v.receipts)
-        if (!exact(r, ["id", "taskId", "kind", "contractHash", "configHash", "sourceFingerprint", "productDigest", "durationMs", "finishedAt", "round", "progress", "references", "outcome", "cause"]) ||
-            !text(r.id) || !text(r.taskId) || !["investigate", "verify", "review"].includes(String(r.kind)) ||
-            ![r.contractHash, r.configHash, r.sourceFingerprint, r.productDigest].every(hash) || !integer(r.durationMs) || !integer(r.finishedAt) || typeof r.round !== "boolean" ||
-            !strings(r.progress) || !strings(r.references) || !["PASS", "FAIL", "UNKNOWN"].includes(String(r.outcome)) || ![null, "environment", "permission"].includes(r.cause))
-            return false;
-    if (new Set(v.receipts.map(r => r.id)).size !== v.receipts.length || v.receipts.filter(r => r.round).length > v.maxRounds)
-        return false;
-    for (const g of v.grants)
-        if (!(exact(g, ["eventId", "sessionId", "sourceDigest", "grantedMs"]) || (exact(g, ["eventId", "sessionId", "sourceDigest", "grantedMs", "spentAtGrantMs"]) && integer(g.spentAtGrantMs))) || !text(g.eventId) || !text(g.sessionId) || !hash(g.sourceDigest) || (g.grantedMs !== DEBUG_EXTENSION_MS && g.grantedMs !== null))
-            return false;
-    if (new Set(v.grants.map(g => g.eventId)).size !== v.grants.length)
-        return false;
-    if (v.strategy !== null && (!exact(v.strategy, ["from", "to", "reason", "references", "afterRound"]) ||
-        ![v.strategy.from, v.strategy.to, v.strategy.reason].every(text) || v.strategy.from === v.strategy.to ||
-        !strings(v.strategy.references) || !integer(v.strategy.afterRound) || v.strategy.afterRound < 2))
-        return false;
-    if (v.foreground !== undefined && v.foreground !== null && (!exact(v.foreground, ["sessionId", "startedAt"]) || !text(v.foreground.sessionId) || v.foreground.sessionId.length > 256 || !integer(v.foreground.startedAt)))
-        return false;
-    if (v.operation !== null && (!((exact(v.operation, ["id", "startedAt", "taskId", "contractHash", "configHash", "sourceFingerprint", "productDigest", "kind"])) ||
-        exact(v.operation, ["id", "startedAt", "taskId", "contractHash", "configHash", "sourceFingerprint", "productDigest", "kind", "processId", "processIdentity"])) ||
-        !text(v.operation.id) || !integer(v.operation.startedAt) || !text(v.operation.taskId) ||
-        ![v.operation.contractHash, v.operation.configHash, v.operation.sourceFingerprint, v.operation.productDigest].every(hash) ||
-        !["investigate", "verify", "review"].includes(String(v.operation.kind)) ||
-        (Object.hasOwn(v.operation, "processId") && (!integer(v.operation.processId) || v.operation.processId < 1)) ||
-        (Object.hasOwn(v.operation, "processIdentity") && (!text(v.operation.processIdentity) || v.operation.processIdentity.length > 256))))
-        return false;
-    if (v.checkpoint !== null && (!exact(v.checkpoint, ["taskId", "sessionId", "root", "sourceFingerprint", "contractHash", "configHash", "cause", "receiptId"]) ||
-        ![v.checkpoint.taskId, v.checkpoint.sessionId, v.checkpoint.root, v.checkpoint.receiptId].every(text) ||
-        ![v.checkpoint.sourceFingerprint, v.checkpoint.contractHash, v.checkpoint.configHash].every(hash) || (v.checkpoint.cause !== null && !debugCauses.includes(v.checkpoint.cause))))
-        return false;
-    return true;
-}
-export function createDebugState(rootTaskId, baselineCommit, settings = DEBUG_DEFAULTS, ownerRoot = ".") {
-    return { schemaVersion: 1, rootTaskId, ownerRoot, baselineCommit, budgetMs: settings.budgetMs, maxRounds: settings.maxRounds, consumedMs: 0, regressionChecks: [],
-        hypotheses: [], receipts: [], strategy: null, grants: [], foreground: null, operation: null, checkpoint: null };
-}
-export function debugRounds(state) { return state.receipts.filter(r => r.round).length; }
-export function debugSpentMs(state, now = Date.now()) {
-    const starts = [state.foreground?.startedAt, state.operation?.startedAt].filter((startedAt) => startedAt !== undefined);
-    const active = starts.length === 0 ? 0 : Math.max(0, now - Math.min(...starts));
-    return state.consumedMs + active;
-}
-export function debugRemainingMs(state, now = Date.now()) {
-    if (state.grants.some(g => g.grantedMs === null))
-        return Number.POSITIVE_INFINITY;
-    const limit = state.grants.reduce((n, g) => Math.max(n, g.spentAtGrantMs ?? n) + (g.grantedMs ?? 0), state.budgetMs);
-    return Math.max(0, limit - debugSpentMs(state, now));
-}
-export function debugStopCause(state, now = Date.now()) {
-    if (state.control?.paused === true)
-        return "user-pause";
-    if (debugRemainingMs(state, now) === 0)
-        return "budget";
-    if (debugRounds(state) >= state.maxRounds)
-        return "iterations";
-    const rounds = state.receipts.filter(r => r.round);
-    const since = rounds.slice(state.strategy?.afterRound ?? 0);
-    let stagnant = 0;
-    for (const round of [...since].reverse()) {
-        if (round.progress.length > 0)
-            break;
-        stagnant++;
-    }
-    if (stagnant >= 2)
-        return state.strategy === null ? "strategy-required" : "stagnation";
-    return state.receipts.at(-1)?.cause ?? null;
-}
-/** Only reviewed reasoning/proof belongs in the digest; operations and clocks do not. */
-export function debugProofDigest(state) {
-    return sha256(canonicalJson({ rootTaskId: state.rootTaskId, baselineCommit: state.baselineCommit, regressionChecks: state.regressionChecks, hypotheses: state.hypotheses,
-        strategy: state.strategy, proof: state.receipts.filter(r => r.kind === "verify").map(r => ({ taskId: r.taskId, contractHash: r.contractHash,
-            configHash: r.configHash, sourceFingerprint: r.sourceFingerprint, productDigest: r.productDigest, references: r.references, outcome: r.outcome })) }));
-}
-export function assertDebugState(value) {
-    if (!validDebugState(value))
-        throw new AgentOpsError("TASK_DEBUG_STATE_INVALID", "Debug state must be strict, bounded and root-bound.");
-}
-export async function loadDebugProof(root, rootTaskId) {
-    const { FileTaskStore } = await import("./store.js");
-    const { join } = await import("node:path");
-    const record = (await new FileTaskStore(join(root, ".agent-ops/tasks/state.json"), root).read()).tasks.find(r => r.task.id === rootTaskId);
-    if (record?.debug === undefined || record.task.debug?.rootTaskId !== rootTaskId)
-        throw new AgentOpsError("TASK_DEBUG_ROOT_MISMATCH", "Original issue proof is unavailable; do not reset its limits.");
-    if (record.debug.ownerRoot !== root) {
-        const owned = (await new FileTaskStore(join(record.debug.ownerRoot, ".agent-ops/tasks/state.json"), record.debug.ownerRoot).read()).tasks.find(r => r.task.id === rootTaskId);
-        if (owned?.debug === undefined || owned.debug.ownerRoot !== record.debug.ownerRoot || owned.task.goal !== record.task.goal)
-            throw new AgentOpsError("TASK_DEBUG_ROOT_MISMATCH", "Original owned issue state is unavailable; do not recreate its budget.");
-        return owned.debug;
-    }
-    return record.debug;
-}

package/dist/runtime/src/task/debug-user-event.js

@@ -1,160 +0,0 @@
-import { constants } from "node:fs";
-import { lstat, open, readdir, realpath } from "node:fs/promises";
-import { homedir } from "node:os";
-import { isAbsolute, join, relative, sep } from "node:path";
-import { sha256 } from "../fs/hash.js";
-import { AgentOpsError } from "../fs/paths.js";
-export function debugUserControl(text) {
-    const value = text.trim();
-    if (/^(?:不要給預算時間(?:\s+直接完整驗證與review)?|取消時間限制|no time limit)[。.!！]?$/iu.test(value))
-        return "unlimited";
-    if (/^(?:暫停|暂停|先暫停|先暂停|停止|stop|pause)[。.!！]?$/iu.test(value))
-        return "pause";
-    if (/^(?:先)?只診斷(?:，等我補失敗時證據)?[。.!！]?$/u.test(value) || /^(?:先)?只诊断[。.!！]?$/u.test(value) || /^diagnos(?:e|is)[ -]only[.!]?$/iu.test(value))
-        return "diagnose";
-    if (/^(?:繼續|继续|continue|resume)[。.!！]?$/iu.test(value))
-        return "resume";
-    if (/^(?:繼續修復|继续修复|開始修復|开始修复|resume repair)[。.!！]?$/iu.test(value))
-        return "repair";
-    return null;
-}
-function codexUserText(row) {
-    if (row?.type === "event_msg" && row.payload?.type === "user_message")
-        return row.payload.message;
-    const message = row?.payload;
-    if (row?.type !== "response_item" || message?.type !== "message" || message.role !== "user")
-        return undefined;
-    const kinds = message.internal_chat_message_metadata_passthrough?.content_item_kinds;
-    if (!Array.isArray(kinds) || kinds.length === 0 || !kinds.every(k => k === "user.text") || !Array.isArray(message.content) ||
-        message.content.length !== kinds.length || !message.content.every((c) => c?.type === "input_text" && typeof c.text === "string"))
-        return undefined;
-    const text = message.content.map((c) => c.text).join("\n");
-    const reply = /^<send_user_message_question_reply>\s*([\s\S]*)\s*<\/send_user_message_question_reply>$/u.exec(text.trim());
-    if (reply === null)
-        return text;
-    try {
-        const answers = JSON.parse(reply[1]);
-        if (Array.isArray(answers) && answers.length === 1 && typeof answers[0]?.answer === "string")
-            return answers[0].answer;
-    }
-    catch { /* An ambiguous reply cannot authorize a control change. */ }
-    return undefined;
-}
-/** Bound each row, not the transcript: assistant/tool output must not hide later human input. */
-async function* nativeLines(path) {
-    const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
-    try {
-        if (!(await file.stat()).isFile())
-            return;
-        let pending = Buffer.alloc(0), oversized = false, index = 0;
-        const started = Date.now();
-        for await (const chunk of file.createReadStream({ autoClose: false })) {
-            if (Date.now() - started > 10_000)
-                throw new Error("Native transcript read timed out");
-            const bytes = chunk;
-            let start = 0;
-            while (start < bytes.length) {
-                const end = bytes.indexOf(10, start), stop = end < 0 ? bytes.length : end;
-                if (!oversized) {
-                    if (pending.length + stop - start > 1024 * 1024) {
-                        pending = Buffer.alloc(0);
-                        oversized = true;
-                    }
-                    else
-                        pending = Buffer.concat([pending, bytes.subarray(start, stop)]);
-                }
-                if (end < 0)
-                    break;
-                if (!oversized)
-                    yield { line: pending.toString("utf8"), index };
-                index++;
-                pending = Buffer.alloc(0);
-                oversized = false;
-                start = end + 1;
-            }
-        }
-        if (!oversized && pending.length > 0)
-            yield { line: pending.toString("utf8"), index };
-    }
-    finally {
-        await file.close();
-    }
-}
-async function ownedNativeSession(root, worktreeRoot, sessionId) {
-    if (process.env.CODEX_THREAD_ID !== sessionId || worktreeRoot === undefined)
-        return false;
-    const { readWorktreeRecord } = await import("../parallel/service.js");
-    const record = await readWorktreeRecord(worktreeRoot);
-    if (record === null || record.sessionId !== sessionId || record.agentId !== undefined || record.runId !== undefined)
-        return false;
-    const [main, worktree, recordMain, recordPath] = await Promise.all([root, worktreeRoot, record.mainRoot, record.path].map(path => realpath(path)));
-    const inside = relative(join(main, ".worktrees"), worktree);
-    return main === recordMain && worktree === recordPath && inside.length > 0 && !inside.startsWith("..") && !isAbsolute(inside);
-}
-/** Host transcripts are the user-event authority; CLI actor/text fields are never accepted. */
-/** `worktreeRoot` is the session's owned worktree: Claude stamps each row with the shell's cwd, which moves there after `cd`. */
-export async function readDebugUserEvent(root, sessionId, home = homedir(), kind = "latest", worktreeRoot) {
-    if (!/^[a-f0-9-]{36}$/u.test(sessionId))
-        throw new AgentOpsError("TASK_DEBUG_GRANT_UNSUPPORTED", "This host has no identifiable native user-event source.");
-    const canonicalHome = await realpath(home).catch(() => home);
-    const paths = [join(home, ".claude/projects", root.replace(/[^a-zA-Z0-9]/gu, "-"), sessionId + ".jsonl")];
-    const codex = join(home, ".codex/sessions");
-    async function visit(path, depth) {
-        if (paths.length > 4096)
-            return;
-        try {
-            for (const entry of await readdir(path, { withFileTypes: true })) {
-                if (entry.isDirectory() && depth > 0)
-                    await visit(join(path, entry.name), depth - 1);
-                else if (entry.isFile() && entry.name.endsWith(sessionId + ".jsonl"))
-                    paths.push(join(path, entry.name));
-            }
-        }
-        catch { /* The host need not be installed. */ }
-    }
-    await visit(codex, 3);
-    const owned = await ownedNativeSession(root, worktreeRoot, sessionId).catch(() => false);
-    for (const path of paths) {
-        try {
-            const stat = await lstat(path), canonical = await realpath(path);
-            const fromHome = relative(canonicalHome, canonical);
-            const codexSource = path.startsWith(codex + sep);
-            if (!stat.isFile() || stat.isSymbolicLink() || (!codexSource && stat.size > 16 * 1024 * 1024) || fromHome.startsWith("..") || isAbsolute(fromHome))
-                continue;
-            let matchedSession = false, event;
-            for await (const { line, index } of nativeLines(path)) {
-                let row;
-                try {
-                    row = JSON.parse(line);
-                }
-                catch {
-                    continue;
-                }
-                if (codexSource && row?.type === "session_meta") {
-                    if (row.payload?.id !== sessionId || (row.payload?.cwd !== root && !owned)) {
-                        event = undefined;
-                        matchedSession = false;
-                        break;
-                    }
-                    matchedSession = true;
-                }
-                const text = codexSource ? codexUserText(row) :
-                    row?.type === "user" && row.sessionId === sessionId && (row.cwd === root || (worktreeRoot !== undefined && row.cwd === worktreeRoot)) && row.message?.role === "user" &&
-                        row.isMeta !== true && (row.origin === undefined || row.origin?.kind === "human") ? row.message.content : undefined;
-                if (typeof text !== "string" || text.length > 64 * 1024 || (kind === "control" && debugUserControl(text) === null))
-                    continue;
-                const timestamp = Date.parse(row.timestamp);
-                if (!Number.isFinite(timestamp)) {
-                    event = undefined;
-                    continue;
-                }
-                const sourceDigest = sha256(line);
-                event = { id: sha256(relative(home, path) + ":" + index + ":" + sourceDigest), sourceDigest, text, timestamp };
-            }
-            if (event !== undefined && (!codexSource || matchedSession))
-                return event;
-        }
-        catch { /* An unavailable native source cannot grant time. */ }
-    }
-    throw new AgentOpsError("TASK_DEBUG_GRANT_UNSUPPORTED", "No current native human event can authorize this extension. Request explicit host approval; this CLI cannot self-grant it.");
-}