@milpa/comal 0.1.7 → 0.2.0

package/governance/chrome-task-v8.json

@@ -0,0 +1,259 @@
+{
+  "profile": {
+    "name": "comal-chrome-task",
+    "version": "8",
+    "decisionIds": [
+      "COMAL-CHROME-008"
+    ]
+  },
+  "decisions": [
+    {
+      "id": "COMAL-CHROME-001",
+      "title": "La casa conserva el encargo y cierra con evidencia vigente",
+      "status": "accepted",
+      "supersedes": null,
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-002",
+      "title": "The accepted Chrome task binds exact artifact bytes through a narrow host hash capability",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-001",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-003",
+      "title": "Conversational declarations preserve original intent and expose scoped live popup inspection without model-managed resources",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-002",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-004",
+      "title": "Reuse completed behavior evidence only for identical source and live document identity, with fresh terminal postconditions; explicit rerun and changed resources execute tests again",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-003",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-005",
+      "title": "An explicit candidate commit composes publication, declared tests and closure with unchanged child authority and durable evidence",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-004",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-006",
+      "title": "Own immutable fixture pages and popup resources are bound separately; cross-surface checks retain source, document, connection and permission gates",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-005",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-007",
+      "title": "Physical input targets are activated and declared reloads require an observed new document; acknowledged dispatch alone is not persistence evidence",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-006",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-008",
+      "title": "Current publication and explicit native worker generation bound diagnostic text; unavailable or historical observations do not grant effects or close work",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-007",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    }
+  ]
+}

package/governance/chrome-task-v9.json

@@ -0,0 +1,291 @@
+{
+  "profile": {
+    "name": "comal-chrome-task",
+    "version": "9",
+    "decisionIds": [
+      "COMAL-CHROME-009"
+    ]
+  },
+  "decisions": [
+    {
+      "id": "COMAL-CHROME-001",
+      "title": "La casa conserva el encargo y cierra con evidencia vigente",
+      "status": "accepted",
+      "supersedes": null,
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-002",
+      "title": "The accepted Chrome task binds exact artifact bytes through a narrow host hash capability",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-001",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-003",
+      "title": "Conversational declarations preserve original intent and expose scoped live popup inspection without model-managed resources",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-002",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-004",
+      "title": "Reuse completed behavior evidence only for identical source and live document identity, with fresh terminal postconditions; explicit rerun and changed resources execute tests again",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-003",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-005",
+      "title": "An explicit candidate commit composes publication, declared tests and closure with unchanged child authority and durable evidence",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-004",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-006",
+      "title": "Own immutable fixture pages and popup resources are bound separately; cross-surface checks retain source, document, connection and permission gates",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-005",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-007",
+      "title": "Physical input targets are activated and declared reloads require an observed new document; acknowledged dispatch alone is not persistence evidence",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-006",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-008",
+      "title": "Current publication and explicit native worker generation bound diagnostic text; unavailable or historical observations do not grant effects or close work",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-007",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-009",
+      "title": "Accepted Chrome source retains exact oversized proposals through native ports, scoped history and current child authority without changing acceptance",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-008",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    }
+  ]
+}

package/governance/source-task-v1.json

@@ -0,0 +1 @@
+{"profile":{"name":"source-task","version":"1","decisionIds":["ADR-SOURCE-TASK-1"]},"decisions":[{"id":"ADR-SOURCE-TASK-1","title":"Host-owned accepted source lifecycle and native close evidence","status":"accepted","gates":[{"id":"scope","operations":["*"],"tier":"enforced","boundTo":"runtime:source-task.scope"},{"id":"close","operations":["WorkTaskUpdate"],"tier":"enforced","boundTo":"runtime:source-task.close"}]}]}

package/governance/source-task-v2.json

@@ -0,0 +1 @@
+{"profile":{"name":"source-task","version":"2","decisionIds":["ADR-SOURCE-TASK-2"]},"decisions":[{"id":"ADR-SOURCE-TASK-2","title":"Host-owned accepted source correction, original lineage and native close evidence","status":"accepted","gates":[{"id":"scope","operations":["*"],"tier":"enforced","boundTo":"runtime:source-task.scope"},{"id":"close","operations":["WorkTaskUpdate"],"tier":"enforced","boundTo":"runtime:source-task.close"}]}]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@milpa/comal",
-  "version": "0.1.7",
+  "version": "0.2.0",
   "description": "Comal: governed operations, execution receipts, and programming assistance in any language",
   "type": "module",
   "private": false,
@@ -23,8 +23,21 @@
     "backend/contracts/artifact-check-v1.schema.json",
     "backend/contracts/remote-commands-v1.json",
     "backend/contracts/remote-workspace-v1.schema.json",
+    "governance/source-task-v1.json",
+    "governance/source-task-v2.json",
     "governance/chrome-task-v1.json",
     "governance/chrome-task-v2.json",
+    "governance/chrome-task-v3.json",
+    "governance/chrome-task-v4.json",
+    "governance/chrome-task-v5.json",
+    "governance/chrome-task-v6.json",
+    "governance/chrome-task-v7.json",
+    "governance/chrome-task-v8.json",
+    "governance/chrome-task-v9.json",
+    "governance/chrome-task-v10.json",
+    "governance/chrome-task-v11.json",
+    "governance/chrome-task-v12.json",
+    "governance/chrome-task-v13.json",
     "docs",
     "README.md"
   ],

package/src/agent-recovery-proof.mjs

@@ -1,3 +1,5 @@
+import {revisionOrigin} from './git-agent-revision.mjs';
+import {preparedEditorRole,reservedEditorRole} from './source-editor-role.mjs';
 import { digest } from './operations.mjs';
 import { agentRuns } from './durable-agent-runs.mjs';
 
@@ -41,11 +43,20 @@ export function agentRecoveryPlan(rows, p, index = rows.length) {
     if (!tasks?.length || prepared.configurations.length !== tasks.length || !prepared.authority || digest(prepared.inherited?.intentions) !== prepared.authority.intention_digest) return null;
     const all = agentRuns(prefix).filter(run => run.parent_invocation_id === target.invocation_id), known = [], missing = [];
     for (let n = 0; n < tasks.length; n++) {
+      // Validate every original slot, including indices not yet reserved when
+      // the host died. Missing Git allocation data must never become shared.
+      if(preparedEditorRole(prepared,n)===undefined)return null;
+      const allocation=prepared.workspace_inputs?.[n];
+      if(tasks[n].isolation==='git'){if(!allocation||allocation.kind!=='git'||typeof allocation.repository_root!=='string'||!allocation.repository_root||! /^[a-f0-9]{64}$/.test(allocation.expected_source_identity||'')||revisionOrigin(prefix,tasks[n],allocation,{parentId:target.session_id,actor:target.actor,cwd:target.house})===undefined||!tasks[n].git_revision&&allocation.source!==(tasks[n].git_source||'working'))return null;}else if(allocation)return null;
       const matches = all.filter(run => run.launch_id === `${target.invocation_id}:${n}`);
       if (!matches.length) { missing.push(n); continue; }
       if (matches.length !== 1) return null;
       const run = matches[0], initial = prefix.find(row => row.type === 'subagent' && row.source === 'delegation_host' && row.run_id === run.run_id && row.runner_state === 'reserved');
-      if (!initial || initial.parent_session_id !== target.session_id || digest(initial.task) !== digest(tasks[n]) || initial.input_digest !== digest(tasks[n]) || digest(initial.configuration) !== digest(prepared.configurations[n].descriptor) || digest(initial.budget_owner || null) !== digest(prepared.configurations[n].budget_owner || null) || digest(initial.tool_scope || []) !== digest(prepared.tool_scopes?.[n] || []) || digest(initial.authority) !== digest(prepared.authority) || digest(initial.inherited) !== digest(prepared.inherited) || initial.system !== prepared.system) return null;
+      const editor=preparedEditorRole(prepared,n);if(editor===undefined)return null;
+      if (!initial || initial.parent_session_id !== target.session_id || digest(initial.task) !== digest(tasks[n]) || initial.input_digest !== digest(tasks[n]) || digest(initial.configuration) !== digest(prepared.configurations[n].descriptor) || digest(initial.budget_owner || null) !== digest(prepared.configurations[n].budget_owner || null) || digest(initial.tool_scope || []) !== digest(prepared.tool_scopes?.[n] || []) || digest(initial.authority) !== digest(prepared.authority) || digest(initial.inherited) !== digest(prepared.inherited) || initial.system !== (editor?.system??prepared.system)||digest(initial.editor_role??null)!==digest(reservedEditorRole(prepared,n))) return null;
+      if(tasks[n].isolation==='git'){
+        const workspace=prepared.workspace_inputs?.[n];if(revisionOrigin(prefix,tasks[n],workspace,{parentId:target.session_id,actor:target.actor,cwd:target.house})===undefined)return null;if(!workspace||workspace.kind!=='git'||!initial.workspace||initial.workspace.request_id!==initial.run_id||digest({...workspace,request_id:initial.run_id,workspace_id:initial.workspace.workspace_id})!==digest(initial.workspace)||digest(run.workspace)!==digest(initial.workspace))return null;
+      }else if(initial.workspace)return null;
       known.push({ index: n, run_id: run.run_id, session_id: run.session_id, runner_state: run.runner_state, turn_state: run.turn_state, work_state: run.work_state, result_ref: run.result_ref || null });
     }
     if (all.length !== known.length || new Set(known.map(run => run.session_id)).size !== known.length) return null;