@kylecheng3146/agent-ops 0.8.5 → 0.8.6

package/dist/packages/cli/src/args.js

@@ -637,8 +637,8 @@ export function parseArgs(argv) {
         throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--target-version may be used only with update.");
     }
     if (base !== undefined && command !== "verify" && command !== "review" &&
-        command !== "batch" && !(command === "task" && action === "complete")) {
-        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--base may be used only with verify, review, batch or task complete.");
+        command !== "batch" && !(command === "task" && (action === "complete" || action === "debug"))) {
+        throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", "--base may be used only with verify, review, batch, task complete or task debug.");
     }
     if ((parentBase !== undefined || width !== undefined) && command !== "batch") {
         throw new CliArgumentError("CLI_OPTION_NOT_ALLOWED", `${parentBase !== undefined ? "--parent-base" : "--width"} may be used only with batch.`);

package/dist/packages/cli/src/cli.js

@@ -196,7 +196,7 @@ Options:
   --task <id>                           status, attach, revise, replan, pin-finding, complete, archive, export, advance
   --session <id>                        create, attach, status, advance, debug
   --evidence <criterion-id=reference>   complete, repeatable
-  --base <git-ref>                      complete: a clean committed range
+  --base <git-ref>                      complete, debug: a clean committed range
   --yes                                 advance: authorize the two review sessions
   --json
 

package/dist/runtime/src/run/authorization.js

@@ -3,6 +3,10 @@ import { sha256 } from "../fs/hash.js";
 import { AgentOpsError } from "../fs/paths.js";
 import { RunControlService } from "./controls.js";
 const plain = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const MAX_SCOPE = 32 * 1024;
+/** A large Write or patch is still one observation: keep its identity by digest, never block the run on its size. */
+const bounded = (scope) => scope.length <= MAX_SCOPE ? scope :
+    canonicalJson({ truncated: true, length: scope.length, sha256: sha256(scope), head: scope.slice(0, 4096) });
 /** Provider decisions are observations, never an alternate permission executor. */
 export async function recordNativeRunAuthorization(repository, event) {
     if (!plain(event.payload))
@@ -51,10 +55,10 @@ export async function recordNativeRunAuthorization(repository, event) {
     if (event.host === "codex" && payload.threadId !== worker.nativeJobId)
         throw new AgentOpsError("RUN_AUTHORIZATION_STALE", "Native approval belongs to another thread.");
     const service = new RunControlService(repository);
-    for (const decision of decisions)
+    for (const { command, resource, ...decision } of decisions)
         await service.recordAuthorization(event.runId, { ...decision,
-            authorizationId: decision.id, workerId: worker.workerId, generation: worker.generation, nativeSessionId: worker.nativeSessionId,
-            source: event.host === "codex" ? "codex-auto-review" : "claude-auto-mode", commandDigest: sha256(decision.command),
-            resourceDigest: sha256(decision.resource), policyConfigHash: state.policyBinding.configHash,
+            command: bounded(command), resource: bounded(resource), authorizationId: decision.id, workerId: worker.workerId, generation: worker.generation, nativeSessionId: worker.nativeSessionId,
+            source: event.host === "codex" ? "codex-auto-review" : "claude-auto-mode", commandDigest: sha256(bounded(command)),
+            resourceDigest: sha256(bounded(resource)), policyConfigHash: state.policyBinding.configHash,
             runtimeHash: state.policyBinding.runtimeHash, policyArtifactDigest: state.policyBinding.artifactDigest, expiresAt: state.policyBinding.expiresAt });
 }

package/dist/runtime/src/task/debug-intake.js

@@ -2,6 +2,9 @@
 export function isDebugIssue(prompt) {
     if (prompt.length === 0 || prompt.length > 64 * 1024 || prompt.includes("\0"))
         return false;
+    // Harness-injected turns (subagent hand-backs, task notifications) are not a human report.
+    if (/^\s*<(?:agent-message|task-notification|teammate-message)\b/u.test(prompt))
+        return false;
     const value = prompt.normalize("NFKC").toLowerCase();
     if (/\b(?:explain|describe|what is|how does|refactor|feature|implement|design)\b|說明|解释|解釋|重構|新增功能|設計|實作功能/u.test(value))
         return false;

package/dist/runtime/src/task/debug-user-event.js

@@ -38,7 +38,8 @@ function codexUserText(row) {
     return undefined;
 }
 /** Host transcripts are the user-event authority; CLI actor/text fields are never accepted. */
-export async function readDebugUserEvent(root, sessionId, home = homedir(), kind = "latest") {
+/** `worktreeRoot` is the session's owned worktree: Claude stamps each row with the shell's cwd, which moves there after `cd`. */
+export async function readDebugUserEvent(root, sessionId, home = homedir(), kind = "latest", worktreeRoot) {
     if (!/^[a-f0-9-]{36}$/u.test(sessionId))
         throw new AgentOpsError("TASK_DEBUG_GRANT_UNSUPPORTED", "This host has no identifiable native user-event source.");
     const canonicalHome = await realpath(home).catch(() => home);
@@ -77,7 +78,8 @@ export async function readDebugUserEvent(root, sessionId, home = homedir(), kind
             for (let index = rows.length - 1; index >= 0; index--) {
                 const row = rows[index];
                 const text = codexSource ? codexUserText(row) :
-                    row?.type === "user" && row.sessionId === sessionId && row.cwd === root && row.message?.role === "user" ? row.message.content : undefined;
+                    row?.type === "user" && row.sessionId === sessionId && (row.cwd === root || (worktreeRoot !== undefined && row.cwd === worktreeRoot)) && row.message?.role === "user" &&
+                        row.isMeta !== true && (row.origin === undefined || row.origin?.kind === "human") ? row.message.content : undefined;
                 if (typeof text !== "string" || text.length > 64 * 1024 || (kind === "control" && debugUserControl(text) === null))
                     continue;
                 const timestamp = Date.parse(row.timestamp);

package/dist/runtime/src/task/debug.js

@@ -248,7 +248,7 @@ export class DebugService {
         const record = await readWorktreeRecord(this.options.root);
         const origin = record?.mainRoot ?? this.options.root;
         try {
-            return await readDebugUserEvent(origin, sessionId, home, kind);
+            return await readDebugUserEvent(origin, sessionId, home, kind, origin === this.options.root ? undefined : this.options.root);
         }
         catch (error) {
             if (origin === this.options.root || !(error instanceof AgentOpsError) || error.code !== "TASK_DEBUG_GRANT_UNSUPPORTED")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kylecheng3146/agent-ops",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "description": "Evidence-driven development loops for agy, Codex, Claude Code, and opencode",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",