@pennixrv/trellis 0.6.26 → 0.6.27

package/dist/migrations/manifests/0.6.26.json

@@ -0,0 +1,9 @@
+{
+  "version": "0.6.26",
+  "description": "Adds a task-bound continuation record for safe cross-session handoff state.",
+  "breaking": false,
+  "recommendMigrate": false,
+  "changelog": "**Features:**\n- Adds a bounded Continuation Record projection bound to the direct current Trellis session and task.\n- Fails closed when task identity changes while a continuation record operation is acquiring its lock.\n\n**Internal:**\n- Keeps continuation runtime state outside version-controlled project files.",
+  "migrations": [],
+  "notes": "No project migration is required. Existing projects can run the normal `trellis update` flow."
+}

package/dist/templates/trellis/scripts/common/continuation_record.py

@@ -362,10 +362,15 @@ def status(root: Path | None = None) -> dict[str, Any]:
 def seal(root: Path, request_path: Path, expected: str) -> dict[str, Any]:
     expected = _expected_digest(expected)
     request_path = _request_path(root, request_path)
-    task = _task_source(root)
-    path = _record_path(root, task["id"])
+    initial_task = _task_source(root)
+    path = _record_path(root, initial_task["id"])
     with _record_lock(path):
         task = _task_source(root)
+        if (
+            (task["id"], task["path"], task["context_key"])
+            != (initial_task["id"], initial_task["path"], initial_task["context_key"])
+        ):
+            raise ContinuationError("current task changed while acquiring record lock")
         current_digest: str | None = None
         current: dict[str, Any] | None = None
         if path.exists():
@@ -419,9 +424,15 @@ def seal(root: Path, request_path: Path, expected: str) -> dict[str, Any]:
 
 def clear(root: Path, expected: str) -> dict[str, Any]:
     expected = _expected_digest(expected)
-    task = _task_source(root)
-    path = _record_path(root, task["id"])
+    initial_task = _task_source(root)
+    path = _record_path(root, initial_task["id"])
     with _record_lock(path):
+        task = _task_source(root)
+        if (
+            (task["id"], task["path"], task["context_key"])
+            != (initial_task["id"], initial_task["path"], initial_task["context_key"])
+        ):
+            raise ContinuationError("current task changed while acquiring record lock")
         if not path.exists():
             if expected == "absent":
                 return {"status": STATUS_ABSENT}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pennixrv/trellis",
-  "version": "0.6.26",
+  "version": "0.6.27",
   "description": "AI capabilities grow like ivy — Trellis provides the structure to guide them along a disciplined path",
   "type": "module",
   "main": "./dist/index.js",
@@ -34,7 +34,7 @@
     "inquirer": "^9.3.7",
     "undici": "^6.21.0",
     "zod": "^4.4.2",
-    "@pennixrv/trellis-core": "0.6.26"
+    "@pennixrv/trellis-core": "0.6.27"
   },
   "devDependencies": {
     "@eslint/js": "^9.18.0",