@moretea-labs/forge 1.8.0 → 1.8.1

package/src/cli/controller/operational-plan.ts

@@ -18,13 +18,13 @@ export interface ControllerOperationalPlan {
     reviewRequired: boolean;
   };
   validationStrategy: {
-    source: "task-targeted-validation-policy";
+    source: "declared-check-projection";
     policy: "minimal" | "task-targeted" | "release-gate";
     checks: string[];
     reason: string;
   };
   recipeSystem: {
-    source: "controller-recipe-system";
+    source: "legacy-recipe-projection";
     recipes: Array<{
       id: string;
       label: string;
@@ -34,7 +34,7 @@ export interface ControllerOperationalPlan {
     }>;
   };
   workerAbstraction: {
-    source: "worker-routing-abstraction";
+    source: "execution-capability-projection";
     workers: Array<{
       id: string;
       role: string;
@@ -107,11 +107,9 @@ export function buildControllerOperationalPlan(repoRoot: string, ledger: TaskLed
   const dirty = changedFiles.length > 0;
   const blocked = ledger.status.kind === "blocked" || ledger.status.kind === "needs_retry_decision";
   const needsAttention = blocked || ledger.status.severity === "action" || ledger.status.severity === "warning" || dirty;
-  const policy = checks.some((check) => check.includes("release") || check.includes("ci"))
-    ? "release-gate" as const
-    : checks.length > 0
-      ? "task-targeted" as const
-      : "minimal" as const;
+  // Compatibility projection only. Declared checks are facts the model may use;
+  // this projection does not choose a validation method or release gate.
+  const policy = "minimal" as const;
 
   return {
     schemaVersion: OPERATIONAL_PLAN_SCHEMA_VERSION,
@@ -122,70 +120,45 @@ export function buildControllerOperationalPlan(repoRoot: string, ledger: TaskLed
       "task-ledger",
       "context-pack",
       "diff-projection",
-      "validation-strategy",
-      "recipe-system",
-      "worker-abstraction",
+      "declared-check-projection",
+      "legacy-recipe-projection",
+      "execution-capability-projection",
       "gui-interaction-model",
       "mcp-tool-schema-convergence",
       "controller-home-runtime-storage-policy",
       "branch-worktree-cleanup-policy",
       "task-recovery-loop",
     ],
-    remainingDecisionPoints: dirty
-      ? ["Review and commit or discard current diff before dispatching unrelated work."]
-      : [],
+    remainingDecisionPoints: [],
     diffProjection: {
       source: "live-git-diff-projection",
       dirty,
       changedFiles,
       diffStat: diffStat.ok ? diffStat.stdout.trim() : diffStat.error || diffStat.stderr.trim(),
-      reviewRequired: dirty,
+      // Legacy field retained for UI ABI only. Dirty state is a fact, not an
+      // automatic review lifecycle decision.
+      reviewRequired: false,
     },
     validationStrategy: {
-      source: "task-targeted-validation-policy",
+      source: "declared-check-projection",
       policy,
       checks,
-      reason: policy === "release-gate"
-        ? "Release or CI checks are declared by the focused work."
-        : policy === "task-targeted"
-          ? "Use checks declared on the focused task or ready queue; do not expand validation scope by default."
-          : "No task-specific checks were found; keep validation minimal and explicit.",
+      reason: checks.length > 0
+        ? "These checks are declared context only; the model decides whether, when, and how to validate."
+        : "No declared checks were found; Forge does not invent a validation strategy.",
     },
     recipeSystem: {
-      source: "controller-recipe-system",
-      recipes: [
-        {
-          id: "scoped-direct-edit",
-          label: "Scoped direct edit",
-          when: "Known files and low/medium-risk bounded changes.",
-          steps: ["build context pack", "read exact ranges", "apply bounded patch", "review diff projection", "run task-targeted checks"],
-          requiredEvidence: ["contextPack", "diffProjection", "validationStrategy"],
-        },
-        {
-          id: "isolated-worker-run",
-          label: "Isolated worker run",
-          when: "Large, risky, or long-running implementation requiring agent execution.",
-          steps: ["derive worker scope", "dispatch isolated run", "inspect run diff", "integrate through edit session", "verify exact revision"],
-          requiredEvidence: ["run", "task diff", "integration session", "checks"],
-        },
-        {
-          id: "recovery-resume",
-          label: "Fresh-session recovery",
-          when: "A controller session restarts or loses conversation state.",
-          steps: ["load task ledger", "read operational plan", "select continuation state", "expand only needed context", "resume or ask for the one missing decision"],
-          requiredEvidence: ["taskLedger", "operationalPlan", "recoveryArtifacts"],
-        },
-      ],
+      source: "legacy-recipe-projection",
+      recipes: [],
     },
     workerAbstraction: {
-      source: "worker-routing-abstraction",
+      source: "execution-capability-projection",
       workers: [
-        { id: "direct_edit", role: "transactional patch executor", preferredFor: ["small scoped edits", "known paths"], avoidWhen: ["unknown architecture", "long-running generation"] },
-        { id: "quick_agent", role: "bounded investigation or small implementation", preferredFor: ["uncertain file discovery", "medium-risk changes"], avoidWhen: ["dirty main workspace", "release-critical changes"] },
-        { id: "isolated_task_run", role: "durable worker with worktree", preferredFor: ["parallel tasks", "risky implementation"], avoidWhen: ["single-line fixes"] },
-        { id: "github_copilot", role: "visible cloud coding session", preferredFor: ["remote reviewable work", "GitHub issue flow"], avoidWhen: ["secret-local context", "offline tasks"] },
+        { id: "direct_capability", role: "direct domain capability execution", preferredFor: [], avoidWhen: [] },
+        { id: "isolated_process", role: "isolated process/workspace capability when explicitly useful", preferredFor: [], avoidWhen: [] },
+        { id: "external_provider", role: "optional external model/provider capability", preferredFor: [], avoidWhen: [] },
       ],
-      recommendedWorker: dirty ? "direct_edit" : ledger.status.kind === "ready_to_dispatch" ? "isolated_task_run" : "direct_edit",
+      recommendedWorker: "model_selected",
     },
     guiInteraction: {
       source: "controller-console-interaction-model",

package/src/cli/controller/runtime-config.ts

@@ -6,7 +6,11 @@ export { FORGE_VERSION } from '../../version';
 /** Product identity exposed by every Forge runtime surface. */
 export const FORGE_TOOL_SURFACE = FORGE_PRODUCT_ID;
 /** Payload schema for MCP health/config records; this is not a product/component version. */
-export const FORGE_MCP_SCHEMA_VERSION = 10;
+// 12: autonomous continuation is addressed by Workflow Supervisor task identity
+// rather than optional Work identity. Tool names stay bounded; the served input
+// schema changes and therefore must fence stale Connector schema snapshots.
+// A served-schema change must be visible to connector freshness checks.
+export const FORGE_MCP_SCHEMA_VERSION = 12;
 
 type ToolSurfaceDefinition = {
   name: string;

package/src/cli/controller/stuck-state-migration.ts

@@ -3,7 +3,7 @@ import { spawnSync } from 'child_process';
 import { createHash } from 'crypto';
 import { inspectCompletionBacklog, type CompletionBacklogItem } from './completion-backlog';
 import { getIssue, listIssues, updateIssue, updateTask } from './issue-store';
-import { completionEvidenceComplete, taskExecutionPolicy, verificationEvidencePassed } from './execution-policy';
+import { completionEvidenceComplete, verificationEvidencePassed } from './execution-policy';
 import type { CompletionReceipt, ControllerIssue, ControllerTask } from './types';
 import { resolveCompletionTargetBranch } from './completion-target';
 import { legacyIssueAuthorityRetired } from './legacy-issue-cutover';
@@ -174,8 +174,7 @@ function reachable(repoRoot: string, revision: string, branch: string): boolean
 
 function historicalCompletionReceipt(repoRoot: string, issue: ControllerIssue, task: ControllerTask): CompletionReceipt | undefined {
   if (!task.verification) return undefined;
-  const policy = taskExecutionPolicy(task);
-  const outcome = verificationEvidencePassed(task, task.verification, policy);
+  const outcome = verificationEvidencePassed(task, task.verification);
   if (!outcome.ok) return undefined;
   const target = currentTarget(repoRoot);
   if (!target) return undefined;

package/src/cli/controller/systemd-user.ts

@@ -1,5 +1,5 @@
 import { spawnSync, type SpawnSyncReturns } from 'child_process';
-import { mkdirSync, renameSync, writeFileSync } from 'fs';
+import { existsSync, mkdirSync, renameSync, rmSync, writeFileSync } from 'fs';
 import { homedir } from 'os';
 import { dirname, join } from 'path';
 
@@ -108,3 +108,41 @@ export function systemdUserServicePid(unitName: string, env: NodeJS.ProcessEnv =
   const pid = Number(result.stdout.trim());
   return Number.isInteger(pid) && pid > 0 ? pid : undefined;
 }
+
+export interface ExactSystemdUserUnitRetirementResult {
+  unitName: string;
+  unitPath: string;
+  serviceWasPresent: boolean;
+  unitFileWasPresent: boolean;
+  absentAfter: boolean;
+}
+
+function systemdUnitLoaded(unitName: string, env: NodeJS.ProcessEnv): boolean {
+  const result = commandSucceeded('systemctl', ['--user', 'show', '--property', 'LoadState', '--value', systemdUserUnitName(unitName)], env);
+  return result.status === 0 && result.stdout.trim() !== '' && result.stdout.trim() !== 'not-found';
+}
+
+export function retireSystemdUserUnitExact(
+  input: { unitName: string; env?: NodeJS.ProcessEnv },
+): ExactSystemdUserUnitRetirementResult {
+  const env = input.env ?? process.env;
+  const unitName = systemdUserUnitName(input.unitName);
+  const unitPath = systemdUserUnitPath(unitName, env);
+  const serviceWasPresent = systemdUnitLoaded(unitName, env);
+  const unitFileWasPresent = existsSync(unitPath);
+  if (serviceWasPresent || unitFileWasPresent) {
+    const disabled = commandSucceeded('systemctl', ['--user', 'disable', '--now', unitName], env);
+    const detail = `${disabled.stderr ?? ''}\n${disabled.stdout ?? ''}`;
+    if (disabled.status !== 0 && !/not loaded|not found|does not exist|not enabled|no files found/i.test(detail)) {
+      throw new Error(`SYSTEMD_USER_EXACT_RETIRE_FAILED: ${unitName}: ${detail.trim()}`);
+    }
+  }
+  rmSync(unitPath, { force: true });
+  const reload = commandSucceeded('systemctl', ['--user', 'daemon-reload'], env);
+  if (reload.status !== 0) {
+    throw new Error(`SYSTEMD_USER_EXACT_RETIRE_RELOAD_FAILED: ${unitName}: ${(reload.stderr || reload.stdout || '').trim()}`);
+  }
+  const absentAfter = !systemdUnitLoaded(unitName, env) && !existsSync(unitPath);
+  if (!absentAfter) throw new Error(`SYSTEMD_USER_EXACT_RETIRE_VERIFY_FAILED: ${unitName}`);
+  return { unitName, unitPath, serviceWasPresent, unitFileWasPresent, absentAfter };
+}

package/src/cli/editing/edit-session.ts

@@ -86,7 +86,6 @@ export interface EditSessionBinding {
   checkoutId?: string;
   principalId?: string;
   controllerInstanceId?: string;
-  routeDecisionFingerprint?: string;
 }
 
 export interface EditSession {
@@ -99,7 +98,6 @@ export interface EditSession {
   checkoutId?: string;
   principalId?: string;
   controllerInstanceId?: string;
-  routeDecisionFingerprint?: string;
   workspaceFingerprint?: string;
   assurance?: EditSessionAssurance;
   purpose: string;
@@ -293,8 +291,7 @@ export function assertEditSessionDurableBinding(
     session.workId
     || session.repoId
     || session.checkoutId
-    || session.principalId
-    || session.routeDecisionFingerprint,
+    || session.principalId,
   );
   if (options.requireBoundIdentity === true && hasDurableIdentity && !binding) {
     throw new Error('EDIT_SESSION_IDENTITY_MISMATCH: binding');
@@ -305,7 +302,6 @@ export function assertEditSessionDurableBinding(
     ['repoId', session.repoId, binding.repoId],
     ['checkoutId', session.checkoutId, binding.checkoutId],
     ['principalId', session.principalId, binding.principalId],
-    ['routeDecisionFingerprint', session.routeDecisionFingerprint, binding.routeDecisionFingerprint],
   ];
   for (const [field, expected, observed] of pairs) {
     if (expected && expected !== observed) throw new Error(`EDIT_SESSION_IDENTITY_MISMATCH: ${String(field)}`);
@@ -404,7 +400,6 @@ function normalizeStoredSession(value: Partial<EditSession> & { sessionId: strin
     checkoutId: value.checkoutId,
     principalId: value.principalId,
     controllerInstanceId: value.controllerInstanceId,
-    routeDecisionFingerprint: value.routeDecisionFingerprint,
     workspaceFingerprint: value.workspaceFingerprint,
     assurance: value.assurance,
     purpose: value.purpose ?? 'Direct edit',
@@ -1206,7 +1201,6 @@ export function beginEditSession(repoRoot: string, input: {
     checkoutId: input.binding?.checkoutId?.trim() || undefined,
     principalId: input.binding?.principalId?.trim() || undefined,
     controllerInstanceId: input.binding?.controllerInstanceId?.trim() || undefined,
-    routeDecisionFingerprint: input.binding?.routeDecisionFingerprint?.trim() || undefined,
     workspaceFingerprint: workspaceFingerprint(repoRoot),
     purpose,
     status: 'open',

package/src/cli/local-bridge/console-automations.ts

@@ -204,32 +204,37 @@ function scheduleNeedsAttention(schedule: RepositorySchedule): boolean {
   return Boolean(schedule.pausedReason && /(?:fail|error|auth|login|block|attention|maximum)/i.test(schedule.pausedReason));
 }
 
-function scheduleStatus(schedule: RepositorySchedule, workStatus?: string): ConsoleAutomationView['status'] {
-  if (workStatus === 'completed' || /is terminal \(completed\)/i.test(schedule.pausedReason ?? '')) return 'completed';
-  if (workStatus === 'failed') return 'attention';
+function scheduleStatus(schedule: RepositorySchedule, workState?: string): ConsoleAutomationView['status'] {
+  if (workState === 'completed' || /is terminal \(completed\)/i.test(schedule.pausedReason ?? '')) return 'completed';
+  if (workState === 'cancelled') return 'paused';
   if (schedule.enabled) return scheduleNeedsAttention(schedule) ? 'attention' : 'enabled';
   return scheduleNeedsAttention(schedule) ? 'attention' : 'paused';
 }
 
-function workBinding(controllerHome: string, repoId: string, schedule: RepositorySchedule): { id?: string; objective?: string; status?: string } {
+function workBinding(controllerHome: string, repoId: string, schedule: RepositorySchedule): { id?: string; objective?: string; state?: string; failed?: boolean } {
   const value = schedule.action.arguments?.work_id;
   const workId = typeof value === 'string' && value.trim() ? value.trim() : undefined;
   if (!workId) return {};
   const work = getWorkContract({ controllerHome, repoId }, workId);
-  return { id: workId, objective: work?.objective, status: work?.status };
+  return {
+    id: workId,
+    objective: work?.objective,
+    state: work?.semanticState,
+    failed: work ? work.evidenceState === 'failed' || work.phaseEvidence[work.phase].state === 'failed' : false,
+  };
 }
 
-function displayPauseReason(schedule: RepositorySchedule, workStatus?: string): string | undefined {
-  if (workStatus === 'completed' || /is terminal \(completed\)/i.test(schedule.pausedReason ?? '')) return '关联工作已经完成，这个自动任务不会再触发。';
+function displayPauseReason(schedule: RepositorySchedule, workState?: string): string | undefined {
+  if (workState === 'completed' || /is terminal \(completed\)/i.test(schedule.pausedReason ?? '')) return '关联工作已经完成，这个自动任务不会再触发。';
   if (schedule.lastObservationStatus === 'auth_required') return '目标登录状态已失效，完成重新登录后即可恢复。';
   if (schedule.consecutiveFailures >= schedule.policy.maxFailures || /maximum consecutive failures/i.test(schedule.pausedReason ?? '')) return '连续执行失败达到上限，已自动暂停。修复问题后可以恢复任务。';
   if (/canary completed/i.test(schedule.pausedReason ?? '')) return '验收任务已经完成。';
   return schedule.pausedReason;
 }
 
-function attentionMessage(schedule: RepositorySchedule, workStatus?: string): string | undefined {
+function attentionMessage(schedule: RepositorySchedule, workFailed = false): string | undefined {
   if (schedule.lastObservationStatus === 'auth_required') return '需要重新登录后才能继续自动执行。';
-  if (workStatus === 'failed') return '关联工作执行失败，需要检查失败原因后再恢复。';
+  if (workFailed) return '关联工作执行失败，需要检查失败原因后再恢复。';
   if (schedule.consecutiveFailures >= schedule.policy.maxFailures) return '连续执行失败达到上限，任务已自动暂停。';
   return undefined;
 }
@@ -256,7 +261,7 @@ export function listConsoleAutomations(controllerHome: string, repositories: Rep
         repositoryName: repository.displayName,
         name: schedule.name,
         summary: scheduleSummary(mode),
-        status: scheduleStatus(schedule, work.status),
+        status: scheduleStatus(schedule, work.state),
         schedule: triggerLabel(schedule),
         timezone: schedule.trigger.timezone,
         delivery: scheduleDelivery(schedule, mode),
@@ -274,10 +279,10 @@ export function listConsoleAutomations(controllerHome: string, repositories: Rep
         lastRunAt: last?.updatedAt ?? schedule.lastTriggeredAt,
         lastResult: observationResult(schedule, last),
         nextRunHint: nextScheduleHint(schedule),
-        pausedReason: displayPauseReason(schedule, work.status),
-        attentionMessage: attentionMessage(schedule, work.status),
+        pausedReason: displayPauseReason(schedule, work.state),
+        attentionMessage: attentionMessage(schedule, work.failed),
         history: occurrenceHistory(occurrences),
-        actions: scheduleStatus(schedule, work.status) === 'completed' ? [] : schedule.enabled ? ['run', 'pause'] : ['resume'],
+        actions: scheduleStatus(schedule, work.state) === 'completed' ? [] : schedule.enabled ? ['run', 'pause'] : ['resume'],
       });
     }
 

package/src/cli/local-bridge/console-view-models.ts

@@ -12,14 +12,6 @@ export interface SuggestedActionViewModel {
   primary?: boolean;
 }
 
-export interface ModePreviewViewModel {
-  mode: 'direct_control' | 'goal_workloop' | 'handoff_only';
-  label: string;
-  explanation: string;
-  createWorkContract: boolean;
-  createHandoff: boolean;
-}
-
 export interface VerificationViewModel {
   label: string;
   tone: PlainStatusTone;
@@ -104,8 +96,6 @@ export interface WorkSummaryViewModel {
   updatedAt: string;
   title: string;
   objective: string;
-  modeLabel: string;
-  mode: ModePreviewViewModel['mode'];
   accessMode: 'request' | 'full_access';
   accessModeLabel: string;
   statusLabel: string;
@@ -127,7 +117,9 @@ export interface WorkSummaryViewModel {
   primaryActionLabel?: string;
   advanced?: {
     workId: string;
-    status: string;
+    state: string;
+    dispatchState: string;
+    evidenceState: string;
     checkIds: string[];
     handoffRefs: string[];
   };
@@ -280,7 +272,6 @@ export interface CommandCenterViewModel {
   /** Assistant/plugin capabilities available to the controller (not the primary workflow). */
   pluginSummary: PluginSummaryViewModel;
   plugins: PluginCardViewModel[];
-  modePreviewDefault: ModePreviewViewModel;
   warnings: string[];
   /** Setup guidance when no usable repository is selected. */
   setupGuide?: {