@lazyingart/agintiflow 0.20.315 → 0.20.317

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.315",
+  "version": "0.20.317",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",

package/scripts/smoke-coding-tools.js

@@ -1431,7 +1431,7 @@ try {
     "host workspace chmod sequence should remain categorized as permission-change"
   );
   const androidReadonlyProbePolicy = evaluateCommandPolicy(
-    'test -x /usr/bin/gradle && echo "GRADLE_OK" ; test -x /usr/bin/java && /usr/bin/java -version 2>&1 | head -1; adb devices; emulator -list-avds; find android-app -type f | sort',
+    'test -x /usr/bin/gradle && echo "GRADLE_OK" ; test -x /usr/bin/java && /usr/bin/java -version 2>&1 | head -1; adb devices; emulator -list-avds; find android-app -maxdepth 16 -type f | sort',
     hostWorkspacePolicy
   );
   assert(androidReadonlyProbePolicy.allowed, "Android host read-only probes should not require full-host destructive access");

package/scripts/smoke-dynamic-step-budget.js

@@ -4556,6 +4556,36 @@ try {
       failedSpacedExitProbeResult.projectTest?.explicitExitStatus === 1,
     "a spaced nonzero test-status wrapper was recorded as successful generic evidence"
   );
+  const pipedUnittestCommand =
+    "python3 -m unittest discover -s tests -p 'test_wechat_document_reader.py' -v 2>&1 | tail -14; echo \"EXIT=${PIPESTATUS[0]}\"";
+  assert(
+    parseNonMutatingExitStatusWrapper(pipedUnittestCommand)?.command ===
+      "python3 -m unittest discover -s tests -p 'test_wechat_document_reader.py' -v 2>&1" &&
+      isSubstantiveTestCommand(pipedUnittestCommand),
+    "the exact bounded PIPESTATUS unittest wrapper lost its test identity"
+  );
+  for (const [status, expectedPassed] of [[0, true], [1, false]]) {
+    const state = { meta: { goalContract: { revision: 1 } } };
+    const result = {
+      toolName: "run_command",
+      ok: true,
+      exitCode: 0,
+      args: { command: pipedUnittestCommand },
+      stdout: `Ran 7 tests in 0.01s\n${status === 0 ? "OK" : "FAILED (failures=1)"}\nEXIT=${status}\n`,
+      stderr: "",
+      commandPolicy: classifyCommand(pipedUnittestCommand),
+    };
+    recordProjectVerificationOutcome(state, result, {
+      commandCwd: workspace,
+      taskProfile: "qa",
+    });
+    assert(
+      result.projectTest?.passed === expectedPassed &&
+        result.projectTest?.explicitExitStatus === status &&
+        state.meta.projectVerification?.mutationRevision === 0,
+      `a PIPESTATUS unittest wrapper was not recorded at the correct status/revision: ${status}`
+    );
+  }
   for (const [command, output, expectedRevision] of [
     ['npm test; printf "EXIT_CODE=%d\\n" "$?"', "EXIT_CODE=0\n", 0],
     ['git push; echo "EXIT=$?"', "EXIT=0\n", 0],
@@ -4579,6 +4609,50 @@ try {
       `a status wrapper changed the inner command's mutation identity: ${command}`
     );
   }
+  const boundedFindCommand =
+    `cd ${workspace} && echo "=== CANDIDATES ===" && ` +
+    "find . -maxdepth 4 \\( -name '*.py' -o -name '*.md' \\) -not -path './output/*' 2>/dev/null | sort; echo DONE";
+  const boundedFindPolicy = evaluateCommandPolicy(boundedFindCommand, {
+    commandCwd: workspace,
+    allowShellTool: true,
+    allowDestructive: false,
+    sandboxMode: "host",
+  });
+  assert(
+    boundedFindPolicy.allowed === true &&
+      boundedFindPolicy.category === "read-only" &&
+      boundedFindPolicy.writesWorkspace === false,
+    "the exact bounded read-only find sequence was classified as a project mutation"
+  );
+  const boundedFindState = { meta: { goalContract: { revision: 1 } } };
+  const boundedFindResult = {
+    toolName: "run_command",
+    ok: true,
+    exitCode: 0,
+    args: { command: boundedFindCommand },
+    stdout: "./tests/test_wechat_document_reader.py\nDONE\n",
+    stderr: "",
+    commandPolicy: boundedFindPolicy,
+  };
+  recordProjectVerificationOutcome(boundedFindState, boundedFindResult, {
+    commandCwd: workspace,
+    taskProfile: "qa",
+  });
+  assert(
+    boundedFindState.meta.projectVerification?.mutationRevision === 0,
+    "a successful bounded read-only find fabricated a source revision"
+  );
+  for (const command of [
+    "find . -maxdepth 4 -name '*.py' -delete",
+    "find . -maxdepth 4 -name '*.py' -exec touch {} \\;",
+  ]) {
+    const classification = classifyCommand(command);
+    assert(
+      classification.writesWorkspace === true &&
+        ["destructive", "general-shell"].includes(classification.category),
+      `a write-capable find form was accepted as read-only: ${command}`
+    );
+  }
   const readOnlyValidatorState = { meta: { goalContract: { revision: 1 } } };
   const readOnlyValidatorResult = {
     toolName: "run_command",
@@ -6058,6 +6132,164 @@ try {
       sandboxMode: "host",
     }
   );
+  const scopedRelativeTaskRoot = path.relative(workspace, scopedTaskRoot).replace(/\\/g, "/");
+  const liveScopedGroupTestLogCommand = {
+    toolName: "run_command",
+    ok: true,
+    exitCode: 0,
+    args: {
+      command:
+        `cd ${JSON.stringify(workspace)} && ` +
+        `TASK=${scopedRelativeTaskRoot} && LOG="$TASK/document-reader-test.log" && ` +
+        `{ echo "=== focused test ==="; python3 -m unittest discover -s tests -p 'test_reader.py' -v; RC=$?; echo "EXIT=$RC"; } ` +
+        `> "$LOG" 2>&1; tail -n 6 "$LOG"; echo "LOG_OK=$([ -s "$LOG" ] && echo yes || echo no)"`,
+    },
+    projectMutationPaths: [],
+    stdout: "Ran 7 tests in 0.01s\nOK\nEXIT=0\nLOG_OK=yes\n",
+    stderr: "",
+  };
+  recordProjectVerificationOutcome(
+    scopedTaskState,
+    liveScopedGroupTestLogCommand,
+    {
+      commandCwd: workspace,
+      taskProfile: "qa",
+      allowShellTool: true,
+      sandboxMode: "host",
+    }
+  );
+  const liveScopedTeeTestLogCommand = {
+    toolName: "run_command",
+    ok: true,
+    exitCode: 0,
+    args: {
+      command:
+        `cd ${JSON.stringify(workspace)} && ` +
+        `TASK=${scopedRelativeTaskRoot} && LOG="$TASK/document-reader-test.log" && ` +
+        `{ echo "=== focused test ==="; python3 -m unittest discover -s tests -p 'test_reader.py' -v 2>&1; RC=$?; echo "EXIT=$RC"; } ` +
+        `| tee "$LOG"; grep -q '^OK$' "$LOG"; echo "DONE_EXIT=$?"`,
+    },
+    projectMutationPaths: [],
+    stdout: "Ran 7 tests in 0.01s\nOK\nEXIT=0\nDONE_EXIT=0\n",
+    stderr: "",
+  };
+  recordProjectVerificationOutcome(
+    scopedTaskState,
+    liveScopedTeeTestLogCommand,
+    {
+      commandCwd: workspace,
+      taskProfile: "qa",
+      allowShellTool: true,
+      sandboxMode: "host",
+    }
+  );
+  const unsafeScopedLogState = {
+    goal: scopedTaskGoal,
+    commandCwd: workspace,
+    meta: {
+      goalContract: {
+        revision: 1,
+        taskGoal: scopedTaskGoal,
+        currentRequest: "Create and verify output/result.json.",
+      },
+    },
+  };
+  const outsideScopedGroupTestLogCommand = {
+    toolName: "run_command",
+    ok: true,
+    exitCode: 0,
+    args: {
+      command:
+        `cd ${JSON.stringify(workspace)} && LOG="source-tree-test.log" && ` +
+        `{ python3 -m unittest discover -s tests -p 'test_reader.py' -v; RC=$?; echo "EXIT=$RC"; } ` +
+        `> "$LOG" 2>&1; tail -n 6 "$LOG"`,
+    },
+    projectMutationPaths: [],
+    stdout: "Ran 7 tests in 0.01s\nOK\nEXIT=0\n",
+    stderr: "",
+  };
+  recordProjectVerificationOutcome(
+    unsafeScopedLogState,
+    outsideScopedGroupTestLogCommand,
+    {
+      commandCwd: workspace,
+      taskProfile: "qa",
+      allowShellTool: true,
+      sandboxMode: "host",
+    }
+  );
+  const sourceWriteAfterScopedLogState = {
+    goal: scopedTaskGoal,
+    commandCwd: workspace,
+    meta: {
+      goalContract: {
+        revision: 1,
+        taskGoal: scopedTaskGoal,
+        currentRequest: "Create and verify output/result.json.",
+      },
+    },
+  };
+  const sourceWriteAfterScopedLogCommand = {
+    toolName: "run_command",
+    ok: true,
+    exitCode: 0,
+    args: {
+      command:
+        `cd ${JSON.stringify(workspace)} && ` +
+        `TASK=${scopedRelativeTaskRoot} && LOG="$TASK/document-reader-test.log" && ` +
+        `{ python3 -m unittest discover -s tests -p 'test_reader.py' -v; RC=$?; echo "EXIT=$RC"; } ` +
+        `> "$LOG" 2>&1; touch src/agent-runner.js; tail -n 6 "$LOG"`,
+    },
+    projectMutationPaths: [],
+    stdout: "Ran 7 tests in 0.01s\nOK\nEXIT=0\n",
+    stderr: "",
+  };
+  recordProjectVerificationOutcome(
+    sourceWriteAfterScopedLogState,
+    sourceWriteAfterScopedLogCommand,
+    {
+      commandCwd: workspace,
+      taskProfile: "qa",
+      allowShellTool: true,
+      sandboxMode: "host",
+    }
+  );
+  const spoofedCapturedStatusState = {
+    goal: scopedTaskGoal,
+    commandCwd: workspace,
+    meta: {
+      goalContract: {
+        revision: 1,
+        taskGoal: scopedTaskGoal,
+        currentRequest: "Create and verify output/result.json.",
+      },
+    },
+  };
+  const spoofedCapturedStatusCommand = {
+    toolName: "run_command",
+    ok: true,
+    exitCode: 0,
+    args: {
+      command:
+        `cd ${JSON.stringify(workspace)} && ` +
+        `TASK=${scopedRelativeTaskRoot} && LOG="$TASK/document-reader-test.log" && ` +
+        `{ python3 -m unittest discover -s tests -p 'test_reader.py' -v; RC=$?; echo "EXIT=$RC"; } ` +
+        `> "$LOG" 2>&1; tail -n 6 "$LOG"; echo "EXIT=0"`,
+    },
+    projectMutationPaths: [],
+    stdout: "FAILED (failures=1)\nEXIT=1\nEXIT=0\n",
+    stderr: "",
+  };
+  recordProjectVerificationOutcome(
+    spoofedCapturedStatusState,
+    spoofedCapturedStatusCommand,
+    {
+      commandCwd: workspace,
+      taskProfile: "qa",
+      allowShellTool: true,
+      sandboxMode: "host",
+    }
+  );
   const nullRedirectValidationCommand = {
     toolName: "run_command",
     ok: true,
@@ -6095,6 +6327,17 @@ try {
       scopedManifestCommand.scopedTaskArtifactWrite === true &&
       pythonScopedManifestCommand.scopedTaskArtifactWrite === true &&
       scopedCompoundTestLogCommand.scopedTaskArtifactWrite === true &&
+      liveScopedGroupTestLogCommand.scopedTaskArtifactWrite === true &&
+      liveScopedGroupTestLogCommand.projectTest?.passed === true &&
+      liveScopedGroupTestLogCommand.projectTest?.explicitExitStatus === 0 &&
+      liveScopedTeeTestLogCommand.scopedTaskArtifactWrite === true &&
+      liveScopedTeeTestLogCommand.projectTest?.passed === true &&
+      liveScopedTeeTestLogCommand.projectTest?.explicitExitStatus === 0 &&
+      unsafeScopedLogState.meta.projectVerification?.mutationRevision === 1 &&
+      outsideScopedGroupTestLogCommand.scopedTaskArtifactWrite !== true &&
+      sourceWriteAfterScopedLogState.meta.projectVerification?.mutationRevision === 1 &&
+      sourceWriteAfterScopedLogCommand.scopedTaskArtifactWrite !== true &&
+      spoofedCapturedStatusCommand.projectTest === undefined &&
       nullRedirectValidationCommand.readOnlyArtifactValidation === true,
     `task-scoped delivery bookkeeping invalidated requested artifact evidence: ${JSON.stringify({
       requestedOutputRevision,
@@ -6107,6 +6350,29 @@ try {
         pythonScopedManifestCommand.scopedTaskArtifactWrite,
       scopedCompoundTestLogCommand:
         scopedCompoundTestLogCommand.scopedTaskArtifactWrite,
+      liveScopedGroupTestLogCommand: {
+        scopedTaskArtifactWrite: liveScopedGroupTestLogCommand.scopedTaskArtifactWrite,
+        projectTest: liveScopedGroupTestLogCommand.projectTest,
+      },
+      liveScopedTeeTestLogCommand: {
+        scopedTaskArtifactWrite: liveScopedTeeTestLogCommand.scopedTaskArtifactWrite,
+        projectTest: liveScopedTeeTestLogCommand.projectTest,
+      },
+      outsideScopedGroupTestLogCommand: {
+        mutationRevision:
+          unsafeScopedLogState.meta.projectVerification?.mutationRevision,
+        scopedTaskArtifactWrite:
+          outsideScopedGroupTestLogCommand.scopedTaskArtifactWrite,
+      },
+      sourceWriteAfterScopedLogCommand: {
+        mutationRevision:
+          sourceWriteAfterScopedLogState.meta.projectVerification?.mutationRevision,
+        scopedTaskArtifactWrite:
+          sourceWriteAfterScopedLogCommand.scopedTaskArtifactWrite,
+      },
+      spoofedCapturedStatusCommand: {
+        projectTest: spoofedCapturedStatusCommand.projectTest,
+      },
       nullRedirectValidationCommand:
         nullRedirectValidationCommand.readOnlyArtifactValidation,
     })}`

package/src/agent-runner.js

@@ -4967,6 +4967,130 @@ function normalizeProjectCommand(command = "") {
   return canonicalizeShellCommand(command);
 }
 
+function shellBraceGroups(value = "") {
+  const text = String(value || "");
+  const groups = [];
+  let quote = "";
+  let escaped = false;
+  let start = -1;
+  let depth = 0;
+
+  const isGroupOpen = (index) => {
+    if (text[index] !== "{" || text[index - 1] === "$") return false;
+    const before = text[index - 1] || "";
+    const after = text[index + 1] || "";
+    return (!before || /[\s;&|()]/u.test(before)) && /\s/u.test(after);
+  };
+  const isGroupClose = (index) => {
+    if (text[index] !== "}") return false;
+    const before = text[index - 1] || "";
+    const after = text[index + 1] || "";
+    return /\s/u.test(before) && (!after || /[\s;&|<>)]/u.test(after));
+  };
+
+  for (let index = 0; index < text.length; index += 1) {
+    const char = text[index];
+    if (quote === "'") {
+      if (char === "'") quote = "";
+      continue;
+    }
+    if (escaped) {
+      escaped = false;
+      continue;
+    }
+    if (char === "\\") {
+      escaped = true;
+      continue;
+    }
+    if (quote === '"') {
+      if (char === '"') quote = "";
+      continue;
+    }
+    if (char === "'" || char === '"') {
+      quote = char;
+      continue;
+    }
+    if (start < 0 && isGroupOpen(index)) {
+      start = index;
+      depth = 1;
+      continue;
+    }
+    if (start >= 0 && isGroupOpen(index)) {
+      depth += 1;
+      continue;
+    }
+    if (start >= 0 && isGroupClose(index)) {
+      depth -= 1;
+      if (depth > 0) continue;
+      groups.push({
+        start,
+        end: index,
+        body: text.slice(start + 1, index).trim(),
+      });
+      start = -1;
+      depth = 0;
+    }
+  }
+  return groups;
+}
+
+function parseCapturedTestExitStatusWrapper(value = "") {
+  const normalized = normalizeProjectCommand(value);
+  if (!normalized) return null;
+  const label = "(?:EXIT|STATUS|RESULT)(?:_CODE)?";
+  for (const group of shellBraceGroups(normalized)) {
+    const sequence = parseTopLevelShellSequence(group.body);
+    if (
+      sequence.openQuote ||
+      sequence.trailingEscape ||
+      (sequence.trailingSeparator && sequence.trailingSeparator !== ";") ||
+      sequence.commands.length < 3
+    ) {
+      continue;
+    }
+    for (let index = 1; index < sequence.commands.length - 1; index += 1) {
+      const statusAssignment = String(sequence.commands[index] || "")
+        .trim()
+        .match(/^([A-Za-z_]\w*)\s*=\s*\$\?$/u);
+      if (!statusAssignment) continue;
+      const statusVariable = statusAssignment[1];
+      const escapedVariable = statusVariable.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+      const statusEcho = String(sequence.commands[index + 1] || "").trim();
+      const echoPattern = new RegExp(
+        `^echo\\s+(?:-n\\s+)?["']?(?<label>${label})\\s*[:=]\\s*\\$(?:\\{${escapedVariable}\\}|${escapedVariable})["']?$`,
+        "iu"
+      );
+      const echoMatch = statusEcho.match(echoPattern);
+      if (!echoMatch) continue;
+      const outsideGroup = `${normalized.slice(0, group.start)} ${normalized.slice(group.end + 1)}`;
+      if (
+        /\b(?:echo|printf)\b[^;&|\n]{0,240}\b(?:EXIT|STATUS|RESULT)(?:_CODE)?\s*[:=]/iu.test(
+          outsideGroup
+        )
+      ) {
+        continue;
+      }
+      const testCommand = normalizeProjectCommand(sequence.commands[index - 1]);
+      if (classifyCommand(testCommand).substantiveTest !== true) continue;
+      return {
+        command: testCommand,
+        wrappedCommand: normalized,
+        label: String(echoMatch.groups?.label || "").toUpperCase(),
+        statusSource: "captured-group",
+        statusVariable,
+      };
+    }
+  }
+  return null;
+}
+
+function projectExitStatusWrapper(command = "") {
+  return (
+    parseNonMutatingExitStatusWrapper(command) ||
+    parseCapturedTestExitStatusWrapper(command)
+  );
+}
+
 function normalizeLeadingWorkspaceCd(command = "", config = {}) {
   const normalized = normalizeProjectCommand(command);
   const sequence = parseTopLevelShellSequence(normalized);
@@ -5037,7 +5161,7 @@ function isRetainedExactVerificationCommand(command = "", config = {}) {
 export function isSubstantiveTestCommand(command = "", config = {}) {
   if (isRetainedExactVerificationCommand(command, config)) return true;
   const normalized = normalizeProjectCommand(normalizeCommandForPolicy(command, config));
-  const text = parseNonMutatingExitStatusWrapper(normalized)?.command || normalized;
+  const text = projectExitStatusWrapper(normalized)?.command || normalized;
   if (!text) return false;
   const classification = classifyCommand(text);
   if (classification.substantiveTest !== true) return false;
@@ -5142,13 +5266,31 @@ function testRunRepresentsInvalidInvocation(testRun = {}) {
 
 function explicitExitProbeStatus(command = "", result = {}) {
   const normalizedCommand = normalizeProjectCommand(command);
-  const exitProbe = parseNonMutatingExitStatusWrapper(normalizedCommand);
-  if (!exitProbe) return { present: false, status: null, command: normalizedCommand };
+  const exitProbe = projectExitStatusWrapper(normalizedCommand);
+  if (!exitProbe) {
+    return {
+      present: false,
+      status: null,
+      command: normalizedCommand,
+      wrappedCommand: normalizedCommand,
+    };
+  }
+
+  let status = parseExplicitExitStatus(result.stdout || "");
+  if (status === null && exitProbe.statusSource === "captured-group") {
+    const matches = [
+      ...String(result.stdout || "").matchAll(
+        /(?:^|\n)\s*(?:EXIT|STATUS|RESULT)(?:_CODE)?\s*[:=]\s*(-?\d+)\s*(?=\n|$)/giu
+      ),
+    ];
+    if (matches.length) status = Number(matches.at(-1)[1]);
+  }
 
   return {
     present: true,
-    status: parseExplicitExitStatus(result.stdout || ""),
+    status,
     command: exitProbe.command,
+    wrappedCommand: exitProbe.wrappedCommand || exitProbe.command,
   };
 }
 
@@ -6717,7 +6859,10 @@ export function recordProjectVerificationOutcome(state = {}, toolResult = {}, co
     );
     const exitProbe = explicitExitProbeStatus(command, toolResult);
     const mutationCommand = normalizeProjectCommand(
-      normalizeCommandForPolicy(exitProbe.command || command, config)
+      normalizeCommandForPolicy(
+        exitProbe.wrappedCommand || exitProbe.command || command,
+        config
+      )
     );
     // The result proves the command already executed. Classify its semantic
     // mutation capability independently of whether the current policy would
@@ -7385,7 +7530,7 @@ export function recordAlreadyCommittedRepositoryRepair(state = {}, toolResult =
 
 function projectTestCommandKey(command = "") {
   const normalized = normalizeProjectCommand(command);
-  const exitProbe = parseNonMutatingExitStatusWrapper(normalized);
+  const exitProbe = projectExitStatusWrapper(normalized);
   const invocation = normalizeProjectCommand(exitProbe?.command || normalized)
     // These wrappers alter bytecode/output handling, not the tests selected or
     // executed. Treating them as distinct suites can leave an old failure
@@ -12766,40 +12911,106 @@ function commandWritesOnlyEvidenceMatching(command = "", pathMatches = () => fal
   for (const match of normalized.matchAll(
     /(?:^|[\s;&|])([A-Za-z_]\w*)\s*=\s*("[^"\n]+"|'[^'\n]+'|[^\s;&|]+)/g
   )) {
-    assignments.set(
-      match[1],
-      String(match[2] || "").replace(/^["']|["']$/g, "")
-    );
+    assignments.set(match[1], String(match[2] || "").replace(/^["']|["']$/g, ""));
   }
-  const resolveTarget = (value = "") => {
-    const target = String(value || "")
+  const resolveTarget = (value = "", seen = new Set()) => {
+    let target = String(value || "")
       .trim()
       .replace(/^["']|["']$/g, "");
-    const variable = target.match(/^\$(?:\{([A-Za-z_]\w*)\}|([A-Za-z_]\w*))$/);
-    return variable
-      ? String(assignments.get(variable[1] || variable[2]) || "")
-      : target;
+    if (!target || /\$\(|`/u.test(target)) return "";
+    for (let depth = 0; depth < 8; depth += 1) {
+      let unresolved = false;
+      let changed = false;
+      const expanded = target.replace(
+        /\$(?:\{([A-Za-z_]\w*)\}|([A-Za-z_]\w*))/gu,
+        (match, bracedName, bareName) => {
+          const name = bracedName || bareName;
+          if (!assignments.has(name) || seen.has(name)) {
+            unresolved = true;
+            return match;
+          }
+          const nextSeen = new Set(seen);
+          nextSeen.add(name);
+          const resolved = resolveTarget(assignments.get(name), nextSeen);
+          if (!resolved) {
+            unresolved = true;
+            return match;
+          }
+          changed = true;
+          return resolved;
+        }
+      );
+      target = expanded;
+      if (unresolved) return "";
+      if (!changed) return target;
+    }
+    return "";
   };
-  const tokens = tokenizeShellWords(normalized);
-  if (tokens[0] === "tee") {
+  const evidenceTargetsFromTee = (tokens = []) => {
+    if (tokens[0] !== "tee") return [];
     let index = 1;
     if (["-a", "--append"].includes(tokens[index])) index += 1;
     if (tokens[index] === "--") index += 1;
-    const targets = tokens.slice(index).map(resolveTarget);
+    return tokens.slice(index).map((target) => resolveTarget(target));
+  };
+  const evidenceTargetsFromMkdir = (tokens = []) =>
+    tokens[0] === "mkdir"
+      ? tokens
+          .slice(1)
+          .filter((token) => token !== "-p" && token !== "--")
+          .map((target) => resolveTarget(target))
+      : [];
+  const boundedEchoProbeIsReadOnly = (segment = "") => {
+    const source = String(segment || "").trim();
+    const sourceTokens = tokenizeShellWords(source);
+    if (!["echo", "printf"].includes(String(sourceTokens[0] || ""))) return false;
+    if (source.includes("`") || !source.includes("$(")) return !source.includes("`");
+    const substitutions = [];
+    const remainder = source.replace(/\$\(([^()]*)\)/gu, (match, body) => {
+      substitutions.push(String(body || ""));
+      return "";
+    });
+    if (!substitutions.length || remainder.includes("$(")) return false;
+    return substitutions.every((body) => {
+      const sequence = parseTopLevelShellSequence(body);
+      if (
+        sequence.openQuote ||
+        sequence.trailingEscape ||
+        sequence.trailingSeparator ||
+        !sequence.commands.length
+      ) {
+        return false;
+      }
+      return sequence.commands.every((candidate) => {
+        const candidateTokens = tokenizeShellWords(candidate);
+        if (["echo", "printf"].includes(String(candidateTokens[0] || ""))) {
+          return !String(candidate || "").includes("$(") && !String(candidate || "").includes("`");
+        }
+        if (["[", "test"].includes(String(candidateTokens[0] || ""))) {
+          const operands = candidateTokens.filter(
+            (token) => !["[", "]", "test", "!", "-e", "-f", "-r", "-s"].includes(token)
+          );
+          return operands.length > 0 && operands.every((operand) => Boolean(resolveTarget(operand)));
+        }
+        const policy = classifyCommand(candidate);
+        return policy.writesWorkspace !== true && policy.mayMutateProject !== true;
+      });
+    });
+  };
+  const tokens = tokenizeShellWords(normalized);
+  if (tokens[0] === "tee") {
+    const targets = evidenceTargetsFromTee(tokens);
     return targets.length > 0 && targets.every(pathMatches);
   }
   if (tokens[0] === "mkdir") {
-    const targets = tokens
-      .slice(1)
-      .filter((token) => token !== "-p" && token !== "--")
-      .map(resolveTarget);
+    const targets = evidenceTargetsFromMkdir(tokens);
     return targets.length > 0 && targets.every(pathMatches);
   }
 
   let strippedEvidenceRedirect = false;
   let rejectedRedirect = false;
   const withoutEvidenceRedirects = normalized.replace(
-    /(^|\s)(?:\d*>>?|&>>?)\s*("[^"]+"|'[^']+'|[^\s;&|]+)/g,
+    /(^|\s)(?:\d*>>?|&>>?)\s*("[^"]+"|'[^']+'|&\d+|[^\s;&|]+)/g,
     (match, prefix, target) => {
       const resolvedTarget = resolveTarget(target);
       if (/^(?:&\d+|\/dev\/null)$/u.test(resolvedTarget)) return prefix;
@@ -12811,15 +13022,19 @@ function commandWritesOnlyEvidenceMatching(command = "", pathMatches = () => fal
       return prefix;
     }
   ).trim();
-  if (rejectedRedirect || !strippedEvidenceRedirect || !withoutEvidenceRedirects) {
+  if (rejectedRedirect || !withoutEvidenceRedirects) {
     return false;
   }
   const sequence = parseTopLevelShellSequence(withoutEvidenceRedirects);
   if (sequence.openQuote || sequence.trailingEscape || sequence.trailingSeparator) {
     return false;
   }
-  return sequence.commands.every((segment) => {
+  let sawEvidenceWrite = strippedEvidenceRedirect;
+  const safeSequence = sequence.commands.every((segment) => {
     const withoutAssignments = String(segment || "")
+      .trim()
+      .replace(/^\{\s*/u, "")
+      .replace(/\s*\}$/u, "")
       .trim()
       .replace(
         /^(?:[A-Za-z_]\w*=(?:"[^"\n]*"|'[^'\n]*'|[^\s;&|]+)\s*)+/u,
@@ -12828,6 +13043,19 @@ function commandWritesOnlyEvidenceMatching(command = "", pathMatches = () => fal
       .trim();
     if (!withoutAssignments) return true;
     const commandTokens = tokenizeShellWords(withoutAssignments);
+    const teeTargets = evidenceTargetsFromTee(commandTokens);
+    if (teeTargets.length) {
+      const safe = teeTargets.every(pathMatches);
+      if (safe) sawEvidenceWrite = true;
+      return safe;
+    }
+    const mkdirTargets = evidenceTargetsFromMkdir(commandTokens);
+    if (mkdirTargets.length) {
+      const safe = mkdirTargets.every(pathMatches);
+      if (safe) sawEvidenceWrite = true;
+      return safe;
+    }
+    if (boundedEchoProbeIsReadOnly(withoutAssignments)) return true;
     if (
       ["cat", "cd", "head", "ls", "stat", "tail", "wc"].includes(
         String(commandTokens[0] || "")
@@ -12841,6 +13069,7 @@ function commandWritesOnlyEvidenceMatching(command = "", pathMatches = () => fal
       underlyingPolicy.mayMutateProject !== true
     );
   });
+  return safeSequence && sawEvidenceWrite;
 }
 
 function commandWritesOnlyPrivateVerificationEvidence(command = "") {

package/src/command-policy.js

@@ -17,7 +17,6 @@ const READ_ONLY_PATTERNS = [
   /^command\s+-v\s+[-\w.]+$/,
   /^uname(?:\s+-a)?$/,
   /^ls(?:\s+(?:"[^"\n]*"|'[^'\n]*'|[-\w./~*]+))*$/,
-  /^find(?:\s+[./~\w-]+)*(?:\s+-maxdepth\s+\d+)?(?:\s+-type\s+[fd])?$/,
   /^rg(?:\s+.+)?$/,
   /^grep(?:\s+.+)?$/,
   /^pgrep(?:\s+.+)?$/,
@@ -143,8 +142,71 @@ function isReadOnlyFindCommand(command = "") {
   if (!/^find\s+/.test(normalized)) return false;
   if (/(^|\s)(-delete|-exec|-execdir|-ok|-okdir|-fprint|-fprintf|-fls)\b/.test(normalized)) return false;
   const unquoted = stripQuotedSegments(normalized);
-  if (/[|<>;&`$]/.test(unquoted)) return false;
-  return /^find\s+(?:[-./~\w]+|\/workspace)(?:\s+[-\w]+(?:\s+(?:"[^"\n]*"|'[^'\n]*'|[^\s|<>;&`$]+))?)*$/.test(normalized);
+  if (/[|<>;&`$]/.test(unquoted) || hasActiveShellExpansion(normalized)) return false;
+
+  const tokens = tokenizeShellWords(normalized);
+  if (tokens[0] !== "find" || tokens.length < 4) return false;
+  let index = 1;
+  let roots = 0;
+  while (index < tokens.length && !tokens[index].startsWith("-") && !["(", ")", "!"].includes(tokens[index])) {
+    const root = tokens[index];
+    if (!/^(?:\.{1,2}|\/workspace(?:\/[-\w./~*]+)?|~?(?:\/)?[-\w./*]+)$/.test(root)) return false;
+    roots += 1;
+    index += 1;
+  }
+  if (!roots) return false;
+
+  let maxDepth = null;
+  let parenthesisDepth = 0;
+  const patternPredicates = new Set([
+    "-name",
+    "-iname",
+    "-path",
+    "-ipath",
+    "-wholename",
+    "-iwholename",
+  ]);
+  const operators = new Set(["!", "-not", "-o", "-or", "-a", "-and", "-true", "-false", "-empty", "-print", "-print0", "-quit"]);
+  while (index < tokens.length) {
+    const token = tokens[index];
+    if (token === "(") {
+      parenthesisDepth += 1;
+      index += 1;
+      continue;
+    }
+    if (token === ")") {
+      parenthesisDepth -= 1;
+      if (parenthesisDepth < 0) return false;
+      index += 1;
+      continue;
+    }
+    if (operators.has(token)) {
+      index += 1;
+      continue;
+    }
+    const argument = tokens[index + 1];
+    if (!argument || /[\u0000-\u001f\u007f]/u.test(argument)) return false;
+    if (token === "-maxdepth" || token === "-mindepth") {
+      if (!/^\d+$/.test(argument)) return false;
+      const depth = Number(argument);
+      if (!Number.isSafeInteger(depth) || depth > 64) return false;
+      if (token === "-maxdepth") maxDepth = depth;
+      index += 2;
+      continue;
+    }
+    if (token === "-type") {
+      if (!/^[bcdpflsD]$/.test(argument)) return false;
+      index += 2;
+      continue;
+    }
+    if (patternPredicates.has(token)) {
+      if (argument.length > 1024) return false;
+      index += 2;
+      continue;
+    }
+    return false;
+  }
+  return parenthesisDepth === 0 && maxDepth !== null;
 }
 
 function isUnboundedRecursiveGrep(command = "") {

package/src/scs-evidence.js

@@ -2227,10 +2227,51 @@ function normalizeProjectCommand(value = "") {
   return canonicalizeShellCommand(value);
 }
 
+function pipelineStatusCommand(value = "", pipelineIndex = 0) {
+  const sequence = parseTopLevelShellSequence(value);
+  if (
+    sequence.openQuote ||
+    sequence.trailingEscape ||
+    sequence.trailingSeparator ||
+    sequence.commands.length < 2 ||
+    sequence.separators.at(-1) !== "|"
+  ) {
+    return "";
+  }
+
+  let pipelineStart = sequence.commands.length - 1;
+  while (pipelineStart > 0 && sequence.separators[pipelineStart - 1] === "|") {
+    pipelineStart -= 1;
+  }
+  const commandIndex = pipelineStart + Number(pipelineIndex || 0);
+  if (commandIndex < pipelineStart || commandIndex >= sequence.commands.length) return "";
+  return normalizeProjectCommand(sequence.commands[commandIndex]);
+}
+
 export function parseNonMutatingExitStatusWrapper(value = "") {
   const normalized = normalizeProjectCommand(value);
   if (!normalized) return null;
   const label = "(?:EXIT|STATUS|RESULT)(?:_CODE)?";
+  const pipelinePattern = new RegExp(
+    `^(?<pipelineCommand>[\\s\\S]+);\\s*echo\\s+(?:"(?<doubleLabel>${label})\\s*[:=]\\s*\\$\\{PIPESTATUS\\[0\\]\\}"|(?<bareLabel>${label})\\s*[:=]\\s*\\$\\{PIPESTATUS\\[0\\]\\})$`,
+    "i"
+  );
+  const pipelineMatch = normalized.match(pipelinePattern);
+  if (pipelineMatch?.groups?.pipelineCommand) {
+    const wrappedCommand = normalizeProjectCommand(pipelineMatch.groups.pipelineCommand);
+    const command = pipelineStatusCommand(wrappedCommand, 0);
+    if (command) {
+      return {
+        command,
+        wrappedCommand,
+        label: String(
+          pipelineMatch.groups.doubleLabel || pipelineMatch.groups.bareLabel || ""
+        ).toUpperCase(),
+        statusSource: "pipeline",
+        pipelineIndex: 0,
+      };
+    }
+  }
   const patterns = [
     new RegExp(
       `^(?<command>[\\s\\S]+);\\s*echo\\s+(?:\"(?<doubleLabel>${label})\\s*[:=]\\s*\\$\\?\"|'(?<singleLabel>${label})\\s*[:=]\\s*\\$\\?'|(?<bareLabel>${label})\\s*[:=]\\s*\\$\\?)$`,