@moretea-labs/forge 1.8.1 → 1.8.2

package/supervisor/native-messaging/host.ts

@@ -28,11 +28,30 @@ export async function forwardNativeRequest(value: unknown, forgeHome?: string):
 }
 export function runNativeMessagingHost(forgeHome?: string): void {
   const decoder = new NativeMessageDecoder();
-  let chain = Promise.resolve();
   process.stdin.on('data', (chunk: Buffer) => {
     let messages: unknown[];
     try { messages = decoder.push(chunk); } catch (error) { process.stdout.write(encodeNativeMessage({ id: 'invalid', ok: false, error: { code: 'WORKFLOW_SUPERVISOR_NATIVE_FRAME_INVALID', message: String(error) } })); return; }
-    for (const message of messages) chain = chain.then(async () => { process.stdout.write(encodeNativeMessage(await forwardNativeRequest(message, forgeHome))); });
+    // Chrome matches replies by request id, not FIFO position. A slow page
+    // discovery/command must never queue heartbeats behind its 30s RPC budget:
+    // the Computer broker expires a provider heartbeat after 15s. Requests
+    // use independent Supervisor socket calls; the broker still exclusively
+    // owns effect claims, dispatch outcomes and exactly-once Send safety.
+    for (const message of messages) {
+      void forwardNativeRequest(message, forgeHome).then(
+        (response) => { process.stdout.write(encodeNativeMessage(response)); },
+        (error) => {
+          // Bad individual requests must not poison subsequent heartbeats.
+          const id = message && typeof message === 'object' && !Array.isArray(message)
+            && typeof (message as { id?: unknown }).id === 'string'
+            ? (message as { id: string }).id : 'invalid';
+          const detail = error instanceof Error ? error.message : String(error);
+          process.stdout.write(encodeNativeMessage({ id, ok: false, error: {
+            code: detail.split(':', 1)[0] || 'WORKFLOW_SUPERVISOR_NATIVE_REQUEST_INVALID',
+            message: detail,
+          } }));
+        },
+      );
+    }
   });
   process.stdin.resume();
 }

package/supervisor/protocol.ts

@@ -6,7 +6,16 @@ import type { WorkflowEffectKind, WorkflowSupervisorProposal, WorkflowSupervisor
 // block formats remain read-only compatibility for already-durable conversations.
 export const SUPERVISOR_BLOCK_START = 'FORGE_WORKFLOW_SUPERVISOR_V1_BEGIN';
 export const SUPERVISOR_BLOCK_END = 'FORGE_WORKFLOW_SUPERVISOR_V1_END';
-const COMPACT_RECEIPT = /^([CDU]) ([0-9a-f]{7})$/;
+const COMPACT_RECEIPT = /(?:^|\n)([CWDU]) ([0-9a-f]{7})\s*$/;
+// Older installed Chrome content scripts flattened an entire completed reply
+// into one line. The immutable Effect challenge remains the sole authority;
+// recover only its terminal token, never an inline token in multiline text.
+const FLATTENED_COMPACT_RECEIPT = /(?:^| )([CWDU]) ([0-9a-f]{7})$/;
+function terminalCompactReceipt(responseText: string): RegExpExecArray | null {
+  const text = responseText.trim();
+  return COMPACT_RECEIPT.exec(text)
+    ?? (!/[\r\n]/.test(text) ? FLATTENED_COMPACT_RECEIPT.exec(text) : null);
+}
 export const LEGACY_BRACKET_SUPERVISOR_BLOCK_START = '[[[FORGE_WORKFLOW_SUPERVISOR_V1]]]';
 export const LEGACY_BRACKET_SUPERVISOR_BLOCK_END = '[[[END_FORGE_WORKFLOW_SUPERVISOR_V1]]]';
 export const LEGACY_SUPERVISOR_BLOCK_START = '<<<FORGE_WORKFLOW_SUPERVISOR_V1>>>';
@@ -16,6 +25,14 @@ export const SUPERVISOR_TURN_BLOCK_START = 'FORGE_WORKFLOW_TURN_V2_BEGIN';
 export const SUPERVISOR_TURN_BLOCK_END = 'FORGE_WORKFLOW_TURN_V2_END';
 const EFFECT_ID = /^(?:fx|crpe)_[a-zA-Z0-9_-]{8,120}$/;
 const MAX_RESPONSE = 512 * 1024;
+export const MAX_SUPERVISOR_OBJECTIVE_CHARS = 8_000;
+
+/** A goal cannot be silently shortened between durable Task and sent effect. */
+export function validateSupervisorObjective(value: string): string {
+  if (typeof value !== 'string' || !value.trim()) throw new Error('WORKFLOW_SUPERVISOR_OBJECTIVE_REQUIRED');
+  if (value.length > MAX_SUPERVISOR_OBJECTIVE_CHARS) throw new Error('WORKFLOW_SUPERVISOR_OBJECTIVE_TOO_LARGE');
+  return value;
+}
 const SUPERVISOR_BLOCK_MARKERS = [
   { start: SUPERVISOR_BLOCK_START, end: SUPERVISOR_BLOCK_END },
   { start: LEGACY_BRACKET_SUPERVISOR_BLOCK_START, end: LEGACY_BRACKET_SUPERVISOR_BLOCK_END },
@@ -50,7 +67,7 @@ export function renderSupervisorReceipt(
   effectId: string,
   action: WorkflowSupervisorProposal['action'],
 ): string {
-  const code = action === 'CONTINUE' ? 'C' : action === 'DONE' ? 'D' : 'U';
+  const code = action === 'CONTINUE' ? 'C' : action === 'WAIT' ? 'W' : action === 'DONE' ? 'D' : 'U';
   return `${code} ${supervisorReceiptChallenge(task, effectId)}`;
 }
 
@@ -73,34 +90,58 @@ function supervisorBlockEnvelope(responseText: string): { start: number; end: nu
 
 export function hasCommittedSupervisorEnvelope(responseText: string): boolean {
   if (Buffer.byteLength(responseText, 'utf8') > MAX_RESPONSE) return false;
-  if (COMPACT_RECEIPT.test(responseText.trim())) return true;
+  if (terminalCompactReceipt(responseText)) return true;
   try { supervisorBlockEnvelope(responseText); return true; } catch { return false; }
 }
 
 export function parseSupervisorCompletion(
   responseText: string,
-  expected?: { task: Pick<WorkflowSupervisorTask, 'taskId' | 'conversationId'>; effectId: string },
+  expected?: { task: Pick<WorkflowSupervisorTask, 'taskId' | 'conversationId' | 'continuationPolicy'>; effectId: string; prompt?: string },
 ): { proposal: WorkflowSupervisorProposal; controlBlock: string } {
   if (Buffer.byteLength(responseText, 'utf8') > MAX_RESPONSE) throw new Error('WORKFLOW_SUPERVISOR_RESPONSE_TOO_LARGE');
-  const compact = COMPACT_RECEIPT.exec(responseText.trim());
+  const compact = terminalCompactReceipt(responseText);
   if (compact) {
     if (!expected) throw new Error('WORKFLOW_SUPERVISOR_COMPACT_RECEIPT_CONTEXT_REQUIRED');
-    const challenge = supervisorReceiptChallenge(expected.task, expected.effectId);
+    let challenge = supervisorReceiptChallenge(expected.task, expected.effectId);
+    // Bootstrap binding changes the Task's conversation identity after Send.
+    // Validate the challenge actually sent in the immutable effect, never a
+    // recomputation from that subsequently changed Task projection.
+    if (expected.prompt?.includes(SUPERVISOR_TURN_BLOCK_START)) {
+      const start = expected.prompt.indexOf(SUPERVISOR_TURN_BLOCK_START + '\n') + SUPERVISOR_TURN_BLOCK_START.length + 1;
+      const end = expected.prompt.indexOf('\n' + SUPERVISOR_TURN_BLOCK_END, start);
+      let envelope: WorkflowSupervisorTurnEnvelope;
+      try { envelope = JSON.parse(expected.prompt.slice(start, end)); }
+      catch { throw new Error('WORKFLOW_SUPERVISOR_EFFECT_RECEIPT_INVALID'); }
+      if (end < start || envelope?.schema_version !== 2
+        || envelope.identity?.task_id !== expected.task.taskId
+        || envelope.identity?.effect_id !== expected.effectId
+        || !/^[0-9a-f]{7}$/.test(envelope.receipt?.challenge ?? '')) {
+        throw new Error('WORKFLOW_SUPERVISOR_EFFECT_RECEIPT_INVALID');
+      }
+      challenge = envelope.receipt.challenge;
+    }
     if (compact[2] !== challenge) throw new Error('WORKFLOW_SUPERVISOR_COMPACT_RECEIPT_CHALLENGE_MISMATCH');
-    const action = compact[1] === 'C' ? 'CONTINUE' : compact[1] === 'D' ? 'DONE' : 'NEEDS_USER';
-    const supervisorState: WorkflowSupervisorState = action === 'CONTINUE' ? 'running' : action === 'DONE' ? 'done' : 'needs_user';
+    const action = compact[1] === 'C' ? 'CONTINUE' : compact[1] === 'W' ? 'WAIT' : compact[1] === 'D' ? 'DONE' : 'NEEDS_USER';
+    if (action === 'WAIT' && typeof expected.task.continuationPolicy.scheduled_wake_schedule_id !== 'string') {
+      throw new Error('WORKFLOW_SUPERVISOR_WAIT_NOT_SCHEDULED');
+    }
+    const supervisorState: WorkflowSupervisorState = action === 'CONTINUE' ? 'running' : action === 'WAIT' ? 'waiting' : action === 'DONE' ? 'done' : 'needs_user';
     return {
       proposal: {
         action,
         sourceEffectId: validateEffectId(expected.effectId),
         checkpoint: `receipt:${challenge}`,
         reason: 'compact_receipt',
-        evidence: [],
+        // A transient missing tool is mechanical evidence, never user-only
+        // authorization. Persist the explicit model diagnostic on this same
+        // completion so crash reconciliation uses identical validation.
+        evidence: action === 'NEEDS_USER' && /(?:^|\r?\n)\s*NO_TOOL_RECEIPT(?=\s|[:：]|$)/.test(responseText)
+          ? ['NO_TOOL_RECEIPT'] : [],
         conversationId: expected.task.conversationId,
         taskId: expected.task.taskId,
         supervisorState,
       },
-      controlBlock: responseText.trim(),
+      controlBlock: compact[0].trim(),
     };
   }
   const { start, end, startMarker, endMarker } = supervisorBlockEnvelope(responseText);
@@ -112,7 +153,10 @@ export function parseSupervisorCompletion(
   const allowed = new Set(['action', 'source_effect_id', 'checkpoint', 'reason', 'evidence', 'conversation_id', 'task_id', 'supervisor_state', 'active_scope']);
   if (Object.keys(record).some((key) => !allowed.has(key))) throw new Error('WORKFLOW_SUPERVISOR_CONTROL_BLOCK_FIELD_INVALID');
   const action = boundedString(record.action, 'ACTION', 32);
-  if (!['CONTINUE', 'DONE', 'NEEDS_USER'].includes(action)) throw new Error('WORKFLOW_SUPERVISOR_ACTION_INVALID');
+  if (!['CONTINUE', 'WAIT', 'DONE', 'NEEDS_USER'].includes(action)) throw new Error('WORKFLOW_SUPERVISOR_ACTION_INVALID');
+  if (action === 'WAIT' && (!expected || typeof expected.task.continuationPolicy.scheduled_wake_schedule_id !== 'string')) {
+    throw new Error('WORKFLOW_SUPERVISOR_WAIT_NOT_SCHEDULED');
+  }
   const sourceEffectId = validateEffectId(boundedString(record.source_effect_id, 'SOURCE_EFFECT_ID', 128));
   const checkpoint = boundedString(record.checkpoint, 'CHECKPOINT', 2_000);
   const reason = boundedString(record.reason, 'REASON', 2_000);
@@ -122,8 +166,8 @@ export function parseSupervisorCompletion(
   const taskId = record.task_id === undefined ? undefined : boundedString(record.task_id, 'TASK_ID', 512);
   const supervisorState = record.supervisor_state === undefined ? undefined : boundedString(record.supervisor_state, 'SUPERVISOR_STATE', 32) as WorkflowSupervisorState;
   const activeScope = record.active_scope === undefined ? undefined : boundedString(record.active_scope, 'ACTIVE_SCOPE', 512);
-  if (supervisorState && !['running', 'done', 'needs_user'].includes(supervisorState)) throw new Error('WORKFLOW_SUPERVISOR_STATE_INVALID');
-  const expectedState: WorkflowSupervisorState = action === 'CONTINUE' ? 'running' : action === 'DONE' ? 'done' : 'needs_user';
+  if (supervisorState && !['running', 'waiting', 'done', 'needs_user'].includes(supervisorState)) throw new Error('WORKFLOW_SUPERVISOR_STATE_INVALID');
+  const expectedState: WorkflowSupervisorState = action === 'CONTINUE' ? 'running' : action === 'WAIT' ? 'waiting' : action === 'DONE' ? 'done' : 'needs_user';
   if (supervisorState && supervisorState !== expectedState) throw new Error('WORKFLOW_SUPERVISOR_STATE_ACTION_MISMATCH');
   if (activeScope && !/^(?:requirement|goal):[^\s]{1,480}$/.test(activeScope)) throw new Error('WORKFLOW_SUPERVISOR_ACTIVE_SCOPE_INVALID');
   const controlBlock = responseText.slice(start, end + endMarker.length);
@@ -154,7 +198,10 @@ export function renderSupervisorPrompt(
   const checkoutId = typeof task.completionContract.checkout_id === 'string'
     ? task.completionContract.checkout_id.trim()
     : typeof task.continuationPolicy.checkout_id === 'string' ? task.continuationPolicy.checkout_id.trim() : '';
-  const checkpoint = typeof _checkpoint === 'string' ? _checkpoint.trim().slice(0, 2_000) : '';
+  // An automation receipt is a causal key, not an engineering handoff.
+  // Conversation context and live project evidence guide the next action.
+  const rawCheckpoint = typeof _checkpoint === 'string' ? _checkpoint.trim() : '';
+  const checkpoint = /^(?:automation:|receipt:)/.test(rawCheckpoint) ? '' : rawCheckpoint.slice(0, 2_000);
   // Recovery/correction context is model-facing advisory evidence, not another
   // authority. Discarding it made a recovery look like the original request
   // and allowed the model to repeat previously completed work.
@@ -174,28 +221,29 @@ export function renderSupervisorPrompt(
     },
     goal: {
       role: 'outcome',
-      objective: task.objective.slice(0, 8_000),
+      objective: validateSupervisorObjective(task.objective),
     },
     ...(continuity ? { continuity: { role: 'advisory' as const, summary: continuity } } : {}),
     ...(repoId ? { repository: { repo_id: repoId, ...(checkoutId ? { checkout_id: checkoutId } : {}) } } : {}),
     ...(cognition ? { cognition: { role: 'advisory' as const, projection: cognition } } : {}),
-    automation: {
-      automation_task_id: task.taskId,
-      automation_type: 'autonomous_continuation',
-      intermediate_status: 'working',
-      final_statuses: ['continue', 'done', 'needs_user'],
-    },
+    receipt: { challenge: supervisorReceiptChallenge(task, effectId) },
   };
   return [
-    '@forge',
     renderEffectMarker(effectId),
+    // Keep the exact Effect marker first for existing target matching, but
+    // surface tool intent before the potentially long JSON goal envelope.
+    'forge 继续。使用真实可用的 Forge 工具接续未完成的工作；不必每轮先做工具或全局状态自检。',
     SUPERVISOR_TURN_BLOCK_START,
     JSON.stringify(envelope),
     SUPERVISOR_TURN_BLOCK_END,
-    // The tool receipt, not prose in the page, settles the same applied effect.
-    // One instruction for every turn: no new scheduler, no extra state, no
-    // unconditional CONTINUE when no real work has been done.
-    'FORGE_AUTONOMOUS_RECEIPT_V1: Use automation_task_id and automation_type from this envelope on Forge calls. Use automation_status=working during execution. After substantive progress, submit automation_status=continue in the final Forge call; use done only after the stated goal is met, or needs_user only for a genuine external decision/blocker. A text-only answer does not settle the turn. Do not report continue for a status-only or empty round.',
+    // Textual intent only: Project instructions and literal @forge are not proof
+    // of an App binding. No browser/plugin UI mutation belongs in this renderer.
+    'USE FORGE: 使用 forge。已有真实工具时直接执行相关源码、验证或交付动作，不要强制以 rh_status 开始。JSON、项目指令或文字 @forge 不会授予工具权限；如果工具完全不可见，仅检查一次实际提供的发现入口（如有 functions.exec 可经 ALL_TOOLS 查询 mcp__forge__），不要反复自检或要求用户选择 App，也不能伪造调用。无工具时正文写 NO_TOOL_RECEIPT 和真实缺口，不宣称工程产出。',
+    'DELIVER WORK: 把 objective 当作持续目标，像用户直接发送“继续”一样从本会话最近的未完成工作处继续；同一交付仍有安全、相关且必要的步骤时，本轮持续实现、验证、审阅并合法交付，不要因完成一次查询或一个微步而收尾。只补充当前真正缺失的证据，复用已有检查；不重复全局盘点，不机械新增 Work/Plan/测试。守住单一 writer、exact target、未知发送不重放和不可逆发布授权边界。不要在只有状态检查、计划或解释时结束本轮。',
+    ...(typeof task.continuationPolicy.scheduled_wake_schedule_id === 'string' ? [
+      'SCHEDULED WORK: 本轮仍有同一日的必要步骤时继续实现并以 C ' + supervisorReceiptChallenge(task, effectId) + ' 结束；当日目标已完成且没有剩余安全必要步骤时，使用 WAIT 并以 W ' + supervisorReceiptChallenge(task, effectId) + ' 结束。若存在真实人工阻塞，先记录精确且持久的 UserRequest、停止不安全动作，并在授权可用时通知用户，然后使用 WAIT 保持同一任务开放；不要用 DONE 或 NEEDS_USER 终结每日循环，也不要自行创建新日程。WAIT 让同一任务保持非终结状态，直到绑定的 Scheduler 下次触发。',
+    ] : []),
+    'END OF TURN: 本轮工作实际结束时才简述可核验产出和剩余事项，不要为尽快输出 C 提前终止仍可继续的安全开发。NO_TOOL_RECEIPT 只能写在正文中；工具不可用不等于用户必须介入，临时无工具且仍需下一轮探测时同样以 C ' + supervisorReceiptChallenge(task, effectId) + ' 结束，并写明零工程产出；不能将 C 视为成功或进展。D ' + supervisorReceiptChallenge(task, effectId) + ' 仅用于原目标真实交付；U ' + supervisorReceiptChallenge(task, effectId) + ' 仅用于确需用户决定/授权的阻塞。C/D/U' + (typeof task.continuationPolicy.scheduled_wake_schedule_id === 'string' ? '/W' : '') + ' 校验码必须独占最终助手回复最后一行，不得在中间消息提前输出，不要向 MCP 传 automation_status；Supervisor 只结算已完成的最终助手回复（only the completed final assistant reply）。',
   ].join('\n');
 }
 

package/supervisor/server.ts

@@ -347,10 +347,12 @@ async function dispatch(control: WorkflowSupervisorControlPlane, discovery: Work
   if (req.method === 'bootstrap_poll') return control.bootstrapPoll(text(p, 'task_id'));
   if (req.method === 'bootstrap_project_url') return { project_url: control.bootstrapProjectUrl(text(p, 'task_id')) };
   if (req.method === 'bootstrap_begin_effect') return { started: control.bootstrapBeginEffect({ taskId: text(p, 'task_id'), effectId: text(p, 'effect_id'), dispatchId: text(p, 'dispatch_id'), dispatchGeneration: positiveInteger(p, 'dispatch_generation') }) };
-  if (req.method === 'bootstrap_observe_effect') { const outcome = text(p, 'outcome'); if (!['applied','not_applied','unknown'].includes(outcome)) throw new Error('WORKFLOW_SUPERVISOR_RPC_OUTCOME_INVALID'); control.bootstrapObserveEffect({ taskId: text(p, 'task_id'), effectId: text(p, 'effect_id'), observationId: text(p, 'observation_id'), outcome: outcome as 'applied'|'not_applied'|'unknown', evidence: object(p.evidence) }); return { recorded: true }; }
+  if (req.method === 'bootstrap_observe_effect') { const outcome = text(p, 'outcome'); if (!['applied','unknown'].includes(outcome)) throw new Error('WORKFLOW_SUPERVISOR_RPC_OUTCOME_INVALID'); control.bootstrapObserveEffect({ taskId: text(p, 'task_id'), effectId: text(p, 'effect_id'), observationId: text(p, 'observation_id'), outcome: outcome as 'applied'|'unknown', evidence: object(p.evidence) }); return { recorded: true }; }
   if (req.method === 'browser_begin_effect') return control.browserBeginEffect({ conversationId: text(p, 'conversation_id'), conversationUrl: text(p, 'conversation_url'), effectId: text(p, 'effect_id'), dispatchId: text(p, 'dispatch_id'), dispatchGeneration: positiveInteger(p, 'dispatch_generation'), evidence: object(p.evidence) });
   if (req.method === 'browser_observe_effect') { const outcome = text(p, 'outcome'); if (!['applied','not_applied','unknown'].includes(outcome)) throw new Error('WORKFLOW_SUPERVISOR_RPC_OUTCOME_INVALID'); return control.browserObserveEffect({ conversationId: text(p, 'conversation_id'), conversationUrl: text(p, 'conversation_url'), effectId: text(p, 'effect_id'), observationId: text(p, 'observation_id'), outcome: outcome as 'applied'|'not_applied'|'unknown', evidence: object(p.evidence) }); }
-  if (req.method === 'browser_observe_dispatch_failure') { control.browserObserveDispatchFailure({ conversationId: text(p, 'conversation_id'), conversationUrl: text(p, 'conversation_url'), effectId: text(p, 'effect_id'), observationId: text(p, 'observation_id'), dispatchGeneration: positiveInteger(p, 'dispatch_generation'), reason: text(p, 'reason'), surface: 'chrome-extension' }); return { recorded: true }; }
+  // A generic observer cannot attest that a provider dispatch returned before Send.
+  // Only the in-process Computer dispatch owner may write a negative proof.
+  if (req.method === 'browser_observe_dispatch_failure') throw new Error('WORKFLOW_SUPERVISOR_RPC_DISPATCH_OWNER_ONLY');
   if (req.method === 'browser_observe_provider_turn') return control.browserObserveProviderTurn({ conversationId: text(p, 'conversation_id'), conversationUrl: text(p, 'conversation_url'), generating: p.generating === true, latestAssistantResponse: stringValue(p.latest_assistant_response), providerActivityText: stringValue(p.provider_activity_text), providerFailureCode: chatgptProviderPageFailure(stringValue(p.provider_failure_text)), observedAtMs: safeInteger(p, 'observed_at_ms'), graceMs: positiveInteger(p, 'grace_ms') });
   if (req.method === 'browser_observe_assistant') return control.browserObserveAssistant({ conversationId: text(p, 'conversation_id'), conversationUrl: text(p, 'conversation_url'), responseText: text(p, 'response_text') });
   if (req.method === 'task_register') return control.registerTask({ taskId: text(p, 'task_id'), conversationId: text(p, 'conversation_id'), conversationUrl: text(p, 'conversation_url'), objective: text(p, 'objective'), completionContract: object(p.completion_contract), continuationPolicy: object(p.continuation_policy), userBlockerPolicy: object(p.user_blocker_policy) });
@@ -359,9 +361,14 @@ async function dispatch(control: WorkflowSupervisorControlPlane, discovery: Work
     objective: text(p, 'objective'),
     expectedObjectiveSha256: text(p, 'expected_objective_sha256'),
     requestId: text(p, 'request_id'),
+    ...(typeof p.work_id === 'string' && p.work_id.trim() ? { workId: p.work_id.trim() } : {}),
+    ...(typeof p.requirement_id === 'string' && p.requirement_id.trim() ? { requirementId: p.requirement_id.trim() } : {}),
+    ...(typeof p.expected_completion_contract_sha256 === 'string' && p.expected_completion_contract_sha256.trim() ? { expectedCompletionContractSha256: p.expected_completion_contract_sha256.trim() } : {}),
     ...(typeof p.authorized_by === 'string' && p.authorized_by.trim() ? { authorizedBy: p.authorized_by.trim() } : {}),
   });
-  if (req.method === 'task_list') return { tasks: control.listTasks(p.active_only === true) };
+  if (req.method === 'task_list') return p.terminal_only === true
+    ? { tasks: [], terminalTasks: control.listTerminalTasks() }
+    : { tasks: control.listTasks(p.active_only === true) };
   if (req.method === 'task_stop') return control.stopTask(text(p, 'task_id'), typeof p.reason === 'string' && p.reason.trim() ? p.reason.trim() : 'Stopped by operator request.');
   if (req.method === 'task_recover') return control.recoverTask({
     taskId: text(p, 'task_id'),
@@ -372,6 +379,12 @@ async function dispatch(control: WorkflowSupervisorControlPlane, discovery: Work
     ...(typeof p.authorized_by === 'string' && p.authorized_by.trim() ? { authorizedBy: p.authorized_by.trim() } : {}),
   });
   if (req.method === 'task_stall') return control.taskStall(text(p, 'task_id'));
+  if (req.method === 'task_bind_scheduled_wake') return control.bindScheduledWake({
+    taskId: text(p, 'task_id'), repoId: text(p, 'repo_id'), workId: text(p, 'work_id'), scheduleId: text(p, 'schedule_id'),
+  });
+  if (req.method === 'task_wake_scheduled') return control.wakeScheduledTask({
+    taskId: text(p, 'task_id'), scheduleId: text(p, 'schedule_id'), occurrenceId: text(p, 'occurrence_id'),
+  });
   if (req.method === 'task_migrate_conversation') return control.migrateConversation({
     taskId: text(p, 'task_id'),
     expectedConversationId: text(p, 'expected_conversation_id'),
@@ -386,11 +399,6 @@ async function dispatch(control: WorkflowSupervisorControlPlane, discovery: Work
   if (req.method === 'reserve_enrollment') return control.reserveEnrollment(text(p, 'task_id'), typeof p.effect_id === 'string' ? p.effect_id : undefined);
   if (req.method === 'observe_effect') { const outcome = text(p, 'outcome'); if (!['applied','unknown'].includes(outcome)) throw new Error('WORKFLOW_SUPERVISOR_RPC_OUTCOME_INVALID'); control.observeEffect({ effectId: text(p, 'effect_id'), observationId: text(p, 'observation_id'), outcome: outcome as 'applied'|'unknown', evidence: object(p.evidence) }); return { recorded: true }; }
   if (req.method === 'observe_assistant') return control.observeAssistantTurn({ taskId: text(p, 'task_id'), conversationId: text(p, 'conversation_id'), responseText: text(p, 'response_text') });
-  if (req.method === 'automation_receipt') {
-    const status = text(p, 'automation_status');
-    if (!['working', 'continue', 'done', 'needs_user'].includes(status)) throw new Error('WORKFLOW_SUPERVISOR_RPC_AUTOMATION_STATUS_INVALID');
-    return control.observeAutomationReceipt({ taskId: text(p, 'task_id'), conversationId: text(p, 'conversation_id'), status: status as import('./types').WorkflowSupervisorAutomationStatus, receiptId: text(p, 'receipt_id') });
-  }
   if (req.method === 'task_get') return control.getTask(text(p, 'task_id')) ?? null;
   if (req.method === 'task_get_by_conversation') return control.getTaskByConversationId(text(p, 'conversation_id')) ?? null;
   if (req.method === 'effect_get') return control.getEffect(text(p, 'effect_id')) ?? null;