@lazyingart/agintiflow 0.20.280 → 0.20.281

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.280",
+  "version": "0.20.281",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",

package/scripts/smoke-dynamic-step-budget.js

@@ -2782,6 +2782,16 @@ try {
       acceptanceClassification.substantiveTest === true,
     "a structurally named Python acceptance validator was treated as an arbitrary mutating script"
   );
+  const externalAcceptanceValidator =
+    "/opt/conda/bin/python /tmp/supervision/acceptance/webapp_booking_contract.py";
+  const externalAcceptanceClassification = classifyCommand(externalAcceptanceValidator);
+  assert(
+    externalAcceptanceClassification.category === "general-shell" &&
+      externalAcceptanceClassification.writesWorkspace === true &&
+      externalAcceptanceClassification.mayMutateProject === true &&
+      externalAcceptanceClassification.semanticMayMutateProject === false,
+    "trusted-shell authorization for an external Python validator was conflated with project mutation"
+  );
   assert(
     classifyCommand(`${acceptanceValidator} --output report.json`).writesWorkspace === true,
     "a Python acceptance validator with an explicit output destination was treated as read-only"
@@ -3679,6 +3689,32 @@ try {
       readOnlyValidatorResult.projectMutationRevision === 0,
     "a semantically read-only validator fabricated project mutation progress"
   );
+  const externalReadOnlyValidatorState = { meta: { goalContract: { revision: 1 } } };
+  const externalReadOnlyValidatorCommand =
+    "cd . && /opt/conda/bin/python /tmp/supervision/acceptance/webapp_booking_contract.py && git status --short";
+  const externalReadOnlyValidatorResult = {
+    toolName: "run_command",
+    ok: true,
+    exitCode: 0,
+    args: { command: externalReadOnlyValidatorCommand },
+    stdout: "webapp booking contract: PASS\n",
+    stderr: "",
+    commandPolicy: classifyCommand(externalReadOnlyValidatorCommand),
+  };
+  recordProjectVerificationOutcome(
+    externalReadOnlyValidatorState,
+    externalReadOnlyValidatorResult,
+    {
+      commandCwd: workspace,
+      taskProfile: "app",
+      sandboxMode: "host",
+    }
+  );
+  assert(
+    externalReadOnlyValidatorState.meta.projectVerification?.mutationRevision === 0 &&
+      externalReadOnlyValidatorResult.projectMutationRevision === 0,
+    "an absolute-interpreter acceptance validator forced a post-validation commit"
+  );
   const shellMutationState = { meta: { goalContract: { revision: 1 } } };
   const shellMutationResult = {
     toolName: "run_command",

package/src/agent-runner.js

@@ -10110,6 +10110,12 @@ function commandCanMutateProjectContent(command = "", commandPolicy = {}) {
   const category = String(commandPolicy.category || "");
   const requiresGitMutationInspection =
     ["git-workflow", "git-remote"].includes(category);
+  if (
+    commandPolicy.semanticMayMutateProject === false &&
+    !requiresGitMutationInspection
+  ) {
+    return false;
+  }
   if (requiresGitMutationInspection && commandPolicy.gitOnly === true) {
     return inferGitActionsFromCommand(command, { requireFailurePropagation: false }).some((action) =>
       WORKTREE_CHANGING_GIT_ACTIONS.has(action)

package/src/command-policy.js

@@ -293,8 +293,9 @@ function delegatedValidationPlanClassification(tokens = []) {
   const args = tokens.slice(1).map((token) => String(token || ""));
   const executablePath = validationExecutablePathMetadata(tokens[0]);
   const basenameCommand = [executable, ...args].join(" ");
+  const structuredValidation = structuredValidationCommand(basenameCommand);
   const validationLike = Boolean(
-    structuredValidationCommand(basenameCommand) || matchAny(TEST_PATTERNS, basenameCommand)
+    structuredValidation || matchAny(TEST_PATTERNS, basenameCommand)
   );
   if (executablePath.outsideWorkspace && validationLike) {
     return {
@@ -302,6 +303,12 @@ function delegatedValidationPlanClassification(tokens = []) {
       needsNetwork: true,
       writesWorkspace: true,
       mayMutateProject: true,
+      // Requiring trusted-shell authorization for an external executable does
+      // not prove that its bounded validation invocation mutates the project.
+      // Preserve that semantic distinction for post-command evidence tracking.
+      semanticMayMutateProject:
+        structuredValidation?.mayMutateProject ??
+        validationCommandMayMutateProject(basenameCommand),
       substantiveTest: false,
       reason:
         "The validation executable is outside the current workspace and requires trusted shell policy.",