@pennixrv/trellis 0.7.0-beta.32 → 0.7.0-beta.34

package/dist/templates/common/bundled-skills/trellis-channel/references/multi-target-dispatch.md

@@ -0,0 +1,113 @@
+# Multiple Evidence Units
+
+Use after the user has authorized independent evidence and the task owns a
+reviewed unit mapping. Read `subnode-work.md` for artifact and acceptance rules.
+Codex inline mode governs native implement/check agents; it does not disable
+explicit Channel evidence. Missing independent reports cannot be replaced by
+main-session pass claims.
+
+## Prepare And Dispatch In One Host Call
+
+Choose units by work, complexity, evidence range, and relationship. Combine only
+individually quick/simple and obviously related points with shared context and
+a bounded total workload. Each scope item keeps its own evidence, conclusion,
+unknowns, and stop condition. Neither eight slots nor eight owner domains imply
+eight work packages. Store this mapping in the task's existing plan or matrix.
+
+Read the actual native guard and current workers/reservations. Initially fill
+all available capacity in FIFO order; a justified dependency or resource limit
+belongs in the task record, not an arbitrary coordinator throttle. Initialize
+all reviewed briefs before queue creation or spawning. A failed initialization
+stops admission; preserve/reconcile partial artifacts without dispatching them.
+
+For a configured subnode profile, `spawn --profile <id> --as <worker>` implies
+the subnode role and inherits its Codex provider; do not repeat
+`--agent subnode --provider codex`. Keep each worker ID and `send --to` explicit.
+Author identity on `send` defaults to `TRELLIS_CHANNEL_AS` or `main`, so routine
+dispatch need not repeat `--as main`.
+
+Coalesce operations that can share one noninteractive host invocation. Use ONE
+native `exec_command` containing a standard-library loop over existing CLI
+commands. Multiple `exec_command` calls inside `functions.exec` still count as
+multiple host calls. This is a procedure, not a new Channel batch API, scheduler,
+or worker-state store. Keep init and dispatch as separate admission stages.
+
+The following runnable pattern consumes a temporary, reviewed JSON array of
+`{"target": "unit-id", "argv": ["trellis", "channel", ...]}` entries. Use
+`[sys.executable, ".trellis/scripts/subnode_artifact.py", ...]` for artifact
+commands. Put claim, spawn, and send in queue order; do not include waits. Review
+each argument vector and the native capacity before executing. The input and
+raw receipts are temporary command data, not task authority; retain only needed
+non-sensitive evidence and clean the temporary input after use.
+
+```bash
+# python on Windows; python3 elsewhere. Execute this whole block in ONE host call.
+python3 - /absolute/path/to/reviewed-actions.json <<'PY'
+import json
+import subprocess
+import sys
+
+actions = json.load(open(sys.argv[1], encoding="utf-8"))
+failed = False
+for action in actions:
+    if failed:
+        print(json.dumps({"target": action["target"], "status": "not_attempted"}))
+        continue
+    argv = [sys.executable if part == "{python}" else part for part in action["argv"]]
+    try:
+        result = subprocess.run(argv, capture_output=True, text=True, check=False)
+        failed = result.returncode != 0
+        receipt = {"target": action["target"], "argv": argv,
+                   "status": "error" if failed else "completed",
+                   "exit_code": result.returncode,
+                   "stdout": result.stdout, "stderr": result.stderr}
+    except OSError as error:
+        failed = True
+        receipt = {"target": action["target"], "argv": argv,
+                   "status": "error", "error": str(error)}
+    print(json.dumps(receipt), flush=True)
+sys.exit(1 if failed else 0)
+PY
+```
+
+The aggregate exit code is not per-target evidence. Inspect every receipt,
+including missing or conflicting receipts; the first error stops later actions
+and pauses the whole queue. Never retry a claimed attempt. A new approved
+attempt needs a new brief and ID.
+
+## Rolling FIFO
+
+1. Capture a durable barrier before dispatch. Claim the earliest unclaimed unit,
+   spawn/send through native Channel, and preserve its receipt. The helper
+   enforces claim order; earlier claims need not be accepted to fill initial slots.
+2. Establish exactly one native waiter for the dispatched workers without
+   `--all`. Resume only its live host continuation until it returns, times out,
+   or errors; run no other host action meanwhile.
+3. Recheck dispatched items for failures, conflicts, and unresolved terminal
+   states. Still-running healthy workers do not need to finish. Validate the
+   completed worker's per-scope report, recheck sources and protected targets,
+   then write its create-once `accepted` disposition.
+4. That acceptance plus verified native capacity authorizes the next unclaimed
+   FIFO unit immediately, while other healthy workers continue. Preserve the
+   barrier/event cursor so already emitted terminal events cannot be lost.
+5. Incomplete/blocked/rejected results, validator concerns, capacity refusal,
+   missing/conflicting receipts, or unresolvable reservations pause the entire
+   queue. A terminal event alone never authorizes replacement. On recovery,
+   reconstruct claims, events, workers/reservations, reports, and dispositions;
+   never redispatch an old claim or require all healthy live predecessors to
+   complete merely to refill an accepted slot.
+
+## Temporary Task Switch
+
+Save the old task's checkpoint. Pause refills and drain ALL already dispatched
+units: wait, validate, and disposition each result, including failures; confirm
+the live continuation, worker, and reservation boundaries are closed. A drain
+does not dispatch pending queue items or turn a failure into acceptance. Do not
+automatically kill, retry, or abandon the old queue. Preserve unclaimed work and
+the old phase. Only after drain, run native `task.py select <new-task>`; it
+changes context without status, branch, after_start hooks, or implementation
+authority. With no in-flight work, select directly after saving the checkpoint.
+
+When returning, reconstruct only the missing old-task facts and resume only
+still-authorized work. Selecting a user-stopped audit never restarts it. Ordinary
+continue and sufficient compaction recovery retain their direct checkpoint path.

package/dist/templates/common/bundled-skills/trellis-channel/references/progress-debugging.md

@@ -127,7 +127,7 @@ wait command starts, capture a barrier before that operation and pass it back:
 ```bash
 BARRIER="$(trellis channel barrier T)"
 # spawn or trigger work that may emit a terminal event
-trellis channel wait T --as main --workers check \
+trellis channel wait T --workers check \
   --after-seq "$BARRIER" --timeout 15m
 ```
 
@@ -146,10 +146,10 @@ The separate event-filter mode wakes on:
 Useful filters:
 
 ```bash
-trellis channel wait T --as main --from check --kind done --timeout 15m
-trellis channel wait T --as main --from check,check-cx --kind done --all --timeout 15m
+trellis channel wait T --from check --kind done --timeout 15m
+trellis channel wait T --from check,check-cx --kind done --all --timeout 15m
 trellis channel wait T --as worker --kind message --timeout 1h
-trellis channel wait T --as main --thread release-note --action status --timeout 10m
+trellis channel wait T --thread release-note --action status --timeout 10m
 ```
 
 Exit codes: `0` matched, `124` timeout, `1`/`2` errors. On `wait --all`

package/dist/templates/common/bundled-skills/trellis-channel/references/subnode-work.md

@@ -20,7 +20,26 @@ dependencies, stop conditions, deadline, and `channel_ref`. Set `retry_of`
 only for an explicit manual retry and `counter_of` only for intentional
 counterwork. A retry names an existing, different subnode in the same task and
 `work_id`; counterwork may be initialized independently. The helper supplies
-the immutable task identity and report path.
+the immutable task identity and report path. New units also require `unit_plan`:
+
+```json
+{
+  "unit_plan": {
+    "plan_ref": ".trellis/tasks/09-07-example/design.md#evidence-units",
+    "sizing_rationale": "One bounded dependency inspection with a separately reviewable result."
+  }
+}
+```
+
+The reference must identify an existing regular Markdown document inside this
+task. For multiple scope items, add `grouping_rationale` explaining why every
+item is quick/simple, obviously related, and uses shared context while retaining
+separate conclusions. Record the actual scope mapping and evidence in the task
+plan before initializing briefs; owner domains and slot counts do not determine
+unit counts. Complex or lengthy points need separate units or further splitting.
+The helper checks structure, not the truth of the sizing judgment. Historical
+brief/report readers remain compatible; new init and queue admission require
+the unit plan.
 
 ```bash
 TASK=.trellis/tasks/09-07-example
@@ -117,19 +136,20 @@ the worker can emit a terminal event. The CLI waits once for a worker lifecycle
 transition after that barrier, including supervisor-authored terminal events:
 
 ```bash
-trellis channel create subnode-example --by main --cwd "$PWD"
+trellis channel create subnode-example
 BARRIER="$(trellis channel barrier subnode-example)"
-trellis channel spawn subnode-example --agent subnode --provider codex \
-  --as "$SUBNODE_ID" --cwd "$PWD"
+trellis channel spawn subnode-example --agent subnode --as "$SUBNODE_ID"
 
 printf '%s\n' "Read $TASK/subnodes/$WORK_ID/$SUBNODE_ID/brief.json and perform only that bounded work." \
-  | trellis channel send subnode-example --as main --to "$SUBNODE_ID" \
+  | trellis channel send subnode-example --to "$SUBNODE_ID" \
       --stdin --delivery-mode requireRunningWorker
 
-trellis channel wait subnode-example --as main --workers "$SUBNODE_ID" \
+trellis channel wait subnode-example --workers "$SUBNODE_ID" \
   --after-seq "$BARRIER" --timeout 30m
 ```
 
+When selecting a configured model profile, use `--profile <id>` in place of `--agent subnode`; it implies the subnode role and reads its Codex provider from role frontmatter. Keep the unique worker `--as` for dispatch identity. Omit author `--as` on `send` and `wait` to use `TRELLIS_CHANNEL_AS` or `main`.
+
 `channel.subnode` in `.trellis/config.yaml` supplies the role defaults for
 `max_live_workers` (generated default `8`), `idle_timeout`, `timeout`, and
 `warn_before`. Change that section before a dispatch group when its resource
@@ -137,7 +157,12 @@ or lifetime needs differ; pass the corresponding `spawn` flag only for a
 one-off override. The generic `channel.worker_guard` remains the fallback for
 ordinary workers and for a subnode key omitted from the project config.
 
-For a group, use `--workers a,b --all` with the barrier captured before dispatch.
+For rolling FIFO dispatch, follow `references/multi-target-dispatch.md`: initially
+fill available native capacity, wait for the first terminal worker, review and
+accept it, then refill while other workers continue. Do not use `--all` as an
+ordinary refill prerequisite. Use `--workers a,b --all` only when the intent
+requires draining all already dispatched workers, with the barrier captured
+before dispatch.
 Worker mode emits one terminal worker projection per satisfied target. Ordinary
 adapter errors and peer turn completion do not end the wait. `--from` remains
 an exact event-author filter; it is not a worker lifecycle selector.

package/dist/templates/common/bundled-skills/trellis-channel/references/workers.md

@@ -106,8 +106,7 @@ trellis channel spawn cr-example --agent check --provider codex --as check-cx \
   --file "$TASK/prd.md" \
   --file "$TASK/design.md" \
   --file "$TASK/implement.md" \
-  --jsonl "$TASK/check.jsonl" \
-  --cwd "$PWD" --timeout 30m
+  --jsonl "$TASK/check.jsonl" --timeout 30m
 ```
 
 The `spawned` event records both the literal `files` array and any `manifests`
@@ -128,7 +127,7 @@ channel:
 trellis channel spawn cr-feature --agent check --as check-claude
 trellis channel spawn cr-feature --agent check --provider codex --as check-cx
 
-trellis channel wait cr-feature --as main \
+trellis channel wait cr-feature \
   --from check-claude,check-cx --kind done --all --timeout 15m
 ```
 

package/dist/templates/common/bundled-skills/trellis-channel/references/workflows.md

@@ -9,7 +9,7 @@ Use when the user says "和 codex/claude 讨论一下", "brainstorm", or "拉一
 进来一起看".
 
 ```bash
-trellis channel create brainstorm-storage-layer --by main \
+trellis channel create brainstorm-storage-layer \
   --task .trellis/tasks/05-XX-storage-adapter
 BARRIER="$(trellis channel barrier brainstorm-storage-layer)"
 
@@ -20,10 +20,10 @@ trellis channel spawn brainstorm-storage-layer \
   --as cx-arch --timeout 30m
 
 trellis channel send brainstorm-storage-layer \
-  --as main --to cx-arch --text-file /tmp/brainstorm-r1.md
+  --to cx-arch --text-file /tmp/brainstorm-r1.md
 
 trellis channel wait brainstorm-storage-layer \
-  --as main --kind done --from cx-arch --after-seq "$BARRIER" --timeout 10m
+  --kind done --from cx-arch --after-seq "$BARRIER" --timeout 10m
 ```
 
 Do not stop after one answer. Read the answer, identify vague areas, send a
@@ -53,7 +53,7 @@ Use when the user asks to dispatch implementation or review work.
 
 ```bash
 TASK=.trellis/tasks/05-12-foo
-trellis channel create cr-foo --task "$TASK" --by main
+trellis channel create cr-foo --task "$TASK"
 BARRIER="$(trellis channel barrier cr-foo)"
 
 trellis channel spawn cr-foo \
@@ -61,11 +61,10 @@ trellis channel spawn cr-foo \
   --jsonl "$TASK/check.jsonl" \
   --file "$TASK/prd.md" \
   --file "$TASK/design.md" \
-  --file "$TASK/implement.md" \
-  --cwd "$PWD" --timeout 15m
+  --file "$TASK/implement.md" --timeout 15m
 
-trellis channel send cr-foo --as main --to check --text-file /tmp/cr-brief.md
-trellis channel wait cr-foo --as main --kind done --from check --after-seq "$BARRIER" --timeout 15m
+trellis channel send cr-foo --to check --text-file /tmp/cr-brief.md
+trellis channel wait cr-foo --kind done --from check --after-seq "$BARRIER" --timeout 15m
 trellis channel messages cr-foo --kind message --from check --tag final_answer
 ```
 
@@ -78,7 +77,7 @@ already run.
 Use one channel and distinct worker names.
 
 ```bash
-trellis channel create cr-feature --by main --ephemeral
+trellis channel create cr-feature --ephemeral
 BARRIER="$(trellis channel barrier cr-feature)"
 
 trellis channel spawn cr-feature --agent check \
@@ -89,9 +88,9 @@ trellis channel spawn cr-feature --agent check --provider codex --as check-cx \
   --jsonl "$TASK/check.jsonl" --file "$TASK/prd.md" --file "$TASK/design.md" \
   --timeout 15m
 
-trellis channel send cr-feature --as main --to check --text-file /tmp/cr-brief.md
-trellis channel send cr-feature --as main --to check-cx --text-file /tmp/cr-brief.md
-trellis channel wait cr-feature --as main --kind done --from check,check-cx --all --after-seq "$BARRIER" --timeout 15m
+trellis channel send cr-feature --to check --text-file /tmp/cr-brief.md
+trellis channel send cr-feature --to check-cx --text-file /tmp/cr-brief.md
+trellis channel wait cr-feature --kind done --from check,check-cx --all --after-seq "$BARRIER" --timeout 15m
 ```
 
 `--all` means every listed worker must emit a matching event.

package/dist/templates/common/bundled-skills/trellis-meta/references/customize-local/change-task-lifecycle.md

@@ -10,6 +10,7 @@ Task lifecycle includes creation, start, context configuration, finish, archive,
 4. `.trellis/scripts/common/task_store.py`
 5. `.trellis/scripts/common/task_utils.py`
 6. The current task's `.trellis/tasks/<task>/task.json`
+7. `.trellis/scripts/common/task_planning.py` for material revisions and start admission
 
 ## Common Needs And Edit Points
 
@@ -23,6 +24,8 @@ Task lifecycle includes creation, start, context configuration, finish, archive,
 | Change default task fields | `.trellis/scripts/common/task_store.py`. |
 | Change task parsing/search | `.trellis/scripts/common/task_utils.py`. |
 | Change active task behavior | `.trellis/scripts/common/active_task.py`. |
+| Select context without starting | Native `task.py select`; preserve phase/branch and drain live Channel work first. |
+| Seal and record later approval of a material plan | Native `task.py plan seal/approve`; reserved `meta.planning`, owned by `common/task_planning.py`. |
 
 ## lifecycle hooks
 
@@ -44,7 +47,7 @@ Hook commands receive the `TASK_JSON_PATH` environment variable, pointing to the
 
 ## Change Task Fields
 
-If the user wants to add project-local fields, prefer putting them under `meta` in `task.json` to avoid breaking existing scripts' assumptions about standard fields.
+If the user wants to add project-local fields, prefer putting them under `meta` in `task.json` to avoid breaking existing scripts' assumptions about standard fields. `meta.planning` is reserved for native seal/approve; do not prefill or overwrite it through generic metadata. Classification uses `execution_class=direct|planned` and `delivery_mode=change_bearing|analysis_only`.
 
 Example:
 
@@ -70,7 +73,8 @@ Active task is session-level state stored in `.trellis/.runtime/sessions/`. Do n
 `cmd_create` in `.trellis/scripts/common/task_store.py` calls `set_active_task` best-effort right after writing the new task directory. The behavior:
 
 - When the calling shell carries session identity (`TRELLIS_CONTEXT_ID` env var, or any platform-specific session env that `resolve_context_key` recognizes — see `active_task.py:_ENV_SESSION_KEYS`), the per-session pointer at `.trellis/.runtime/sessions/<context_key>.json` is rewritten to point at the new task. The task's `status=planning` and `[workflow-state:planning]` fires on the very next `UserPromptSubmit`.
-- When session identity is unavailable (raw CLI invocation outside an AI session, or a platform that doesn't propagate identity to shell), the task directory is still created and `status=planning` is still written, but the active pointer is left untouched. The user can attach the task later with `task.py start <dir>` once they're back in an AI session.
+- When session identity is unavailable (raw CLI invocation outside an AI session, or a platform that doesn't propagate identity to shell), the task directory is still created and `status=planning` is still written, but the active pointer is left untouched. Attach planning context later with `task.py select <dir>` once identity is available; start requires its own phase/approval gates.
+- `create --no-start` deliberately preserves the prior pointer; use select to switch context after saving the checkpoint and draining already dispatched Channel work. Selecting does not change phase/branch, run after_start, or grant implementation authority.
 
 This makes `[workflow-state:planning]` the live breadcrumb during the brainstorm and JSONL curation work that follows `task.py create`. The pre-R7 behavior left the breadcrumb stuck on `no_task` until `task.py start`, so the planning block was effectively dead text.
 

package/dist/templates/common/bundled-skills/trellis-meta/references/local-architecture/task-system.md

@@ -43,6 +43,8 @@ The Trellis task system is stored entirely under `.trellis/tasks/` in the user p
 | `children` / `parent` | Parent/child task relationships. |
 | `commit` / `pr_url` | Commit and PR information after completion. |
 | `meta` | Extension fields. |
+| `meta.execution_class` / `meta.delivery_mode` | Explicit task classification; planned/change-bearing start needs current material-plan approval. |
+| `meta.planning` | Reserved native material revision, seal, and later approval; use plan seal/approve, never generic metadata. |
 
 ## Parent / Child Task Trees
 
@@ -81,7 +83,7 @@ The user sees a "current task," but Trellis stores active task state per session
 .trellis/.runtime/sessions/<context-key>.json
 ```
 
-`task.py start` writes the task path into the runtime session file for the current session. `task.py current --source` shows the current task and where it came from. Different AI windows can point to different tasks without overwriting each other.
+`task.py select` writes only the current session's task context; status/branch and implementation authority are unchanged. `task.py start` also enters execution after its admission gates. `task.py current --source` shows the current task and where it came from. Different AI windows can point to different tasks without overwriting each other. Before switching with live Channel work, pause refills and drain already dispatched units/reservations while preserving pending work and the old phase.
 
 If the platform or shell environment has no stable session identity, `task.py start` may be unable to set the active task. The AI should read the error, inspect the platform hook/session environment, and not fall back to a shared global pointer.
 
@@ -107,6 +109,9 @@ Rules:
 
 ```bash
 python3 ./.trellis/scripts/task.py create "<title>" --description "<one-line summary>" --slug <slug>
+python3 ./.trellis/scripts/task.py select <task>
+python3 ./.trellis/scripts/task.py plan seal <task>
+python3 ./.trellis/scripts/task.py plan approve <task> --revision <n> --basis "<actual later approval>"
 python3 ./.trellis/scripts/task.py start <task>
 python3 ./.trellis/scripts/task.py current --source
 python3 ./.trellis/scripts/task.py add-context <task> implement <file> <reason>

package/dist/templates/common/commands/continue.md

@@ -33,7 +33,8 @@ a direct task binding. For `unbound` / `unbound_ambiguous`, review existing task
 artifacts and select by the user's explicit intent. Exit code 1 for ambiguity
 does not mean identity is absent. Do not guess, duplicate tasks, invent identity,
 or edit runtime pointers. Return a planning candidate to the planning gates below;
-use native `task.py start <task>` only when its activation contract permits it.
+use native `task.py select <task>` to bind planning context after any required
+Channel drain; use `task.py start` only when its activation contract permits it.
 An eligible `analysis_only` candidate remains in planning without start.
 If `session_source` is null, report unavailable identity separately.
 
@@ -55,7 +56,7 @@ Run only when the phase or routing rule is missing; otherwise reuse it.
 - `status=in_progress` + a material unresolved decision → record the reason and run `task.py replan <task> "<reason>"`; do not ask a native question during implementation.
 - `status=planning` + `prd.md` only → decide whether the task is lightweight or complex. Lightweight can move to **1.4** review; complex returns to **1.1** to add `design.md` + `implement.md`.
 - `status=planning` + complex artifacts complete + sub-agent jsonl not curated (empty, or only a legacy `_example` placeholder row) → **1.3**
-- `status=planning` + required artifacts complete + required jsonl curated or inline mode → run the Planning Seal closure pass, then **1.4**; honor existing implementation authorization and ask for start approval only if it is missing.
+- `status=planning` + required artifacts complete + required jsonl curated or inline mode → run the Planning Seal closure pass, then **1.4**. Existing authorization must be a later explicit implementation approval for this task's current sealed material revision. Initial requests, design answers, and parent-task approval do not qualify. Use native plan seal/approve/start; ask only when that approval is missing. A replan invalidates it; minor progress edits do not.
 - `status=in_progress` + implementation not started → **2.1**
 - `status=in_progress` + implementation done, not yet checked → **2.2**
 - `status=in_progress` + check passed → **3.3** (spec update) → **3.4** (commit)

package/dist/templates/common/commands/start.md

@@ -45,6 +45,7 @@ From Step 1 you know the current task and status. Check the task directory:
 - **Active task with `task.json.meta.delivery_mode = "analysis_only"`** → keep `planning`, complete the PRD's bounded evidence work, then verify the no-change boundary, commit task artifacts, and archive directly. Do not run `task.py start`; any protected-target change needs a separate change-bearing task.
 - **Active task status `planning` + no `prd.md`** → Phase 1.1. Load the `trellis-brainstorm` skill.
 - **Active task status `planning` + `prd.md` exists** → stay in Phase 1. Lightweight tasks can be PRD-only; complex tasks need `design.md` + `implement.md`. Load the relevant Phase 1 step detail before `task.py start`.
+- **Existing task selected by explicit intent but not bound** → use native `task.py select` for context only. Drain already dispatched Channel units before a real task switch. Planned/change-bearing start requires native plan seal and matching later approval for this task's current material revision; selecting or recovering context does not approve implementation.
 - **Active task status `in_progress`** → Phase 2 step 2.1. Load the step detail:
   ```bash
   {{PYTHON_CMD}} ./.trellis/scripts/get_context.py --mode phase --step 2.1 --platform {{CLI_FLAG}}

package/dist/templates/common/skills/brainstorm.md

@@ -30,6 +30,15 @@ Repository evidence establishes current behavior and technical constraints. The
 
 When research, audit, review, or investigation is too large to leave one independently useful conclusion in the current bounded session, split it into evidence units. Each unit must have one question or scope, a minimal evidence range, a destination artifact, and a stop condition; write its facts, conclusion or blocker, unknowns, and recovery point before starting another unit. Size units so one normal context window can finish and persist one useful result; do not promise an exact token or time limit. Routine navigation and transient tool output do not need an artifact. Create a child task only when the unit has an independent owner, lifecycle, and acceptance contract.
 
+Persist the unit-to-point mapping in this task's existing plan/matrix before
+dispatch. Include workload rationale, dependencies, minimal evidence, shared
+context, and per-point delivery. Combine points only when each is quick/simple
+and they are obviously related; explain the grouping and bounded total workload.
+Complex or lengthy points need separate units or further splitting. Slots and
+owner domains do not determine unit count. Explicit independent subnodes use
+`trellis-channel`'s unit-plan and multi-target procedure; planning itself does
+not authorize dispatch.
+
 ---
 
 Use this skill during Phase 1 planning to turn the user's request into clear requirements and planning artifacts.
@@ -65,7 +74,11 @@ Use a concise title from the user's request. Both the title and `--description`
 6. When no user-owned decision remains, create or update `design.md` and `implement.md` for complex tasks.
 7. Run the requirement convergence gate, then the PRD convergence pass. Finish with one Planning Seal closure pass.
 8. Present the final planning summary and stop. Do not run `task.py start` or edit product code in the same turn.
-9. Only a subsequent user message that explicitly approves the latest planning summary authorizes `task.py start` and implementation. If implementation reveals a material unresolved decision, record `decision-needed`, run `task.py replan <task> "<reason>"`, and return through this planning flow; do not open a popup during implementation.
+9. For planned/change-bearing tasks, classify `execution_class=planned` and `delivery_mode=change_bearing` in native task meta, then run `task.py plan seal <task>` after closure. Only a subsequent user message explicitly approving this task's current material plan authorizes `task.py plan approve <task> --revision <n> --basis "<short non-sensitive actual approval basis>"`, followed by `task.py start` and implementation. Initial delivery requests, parent-task approval, and design answers are insufficient. If scope, owner, risk, public behavior, or acceptance materially changes, run `task.py replan <task> "<reason>"`; it invalidates seal/approval. Return through planning, seal the new revision, present it, and obtain later approval. Minor wording, formatting, and progress records do not require resealing. The native record enforces structure, not authenticity of chat approval.
+
+When changing the active task only for planning, use native `task.py select`,
+not start. `create --no-start` intentionally preserves the old pointer. Follow
+the Channel drain procedure before switching with live evidence workers.
 
 Do not invent a project-specific product/spec hierarchy. If the repository already has product, domain, or spec docs, use them. If it does not, proceed with the evidence that exists.
 

package/dist/templates/shared-hooks/inject-workflow-state.py

@@ -363,7 +363,8 @@ def _codex_mode_banner(config: dict) -> str:
     else:
         meaning = (
             "inline: the main session implements/checks directly; "
-            "do not dispatch implement/check sub-agents."
+            "do not dispatch implement/check sub-agents. Explicit Channel independent-evidence "
+            "subnodes follow the selected project workflow and remain available in inline mode."
         )
     return f"<codex-mode>{meaning}</codex-mode>"
 

package/dist/templates/trellis/index.d.ts

@@ -36,6 +36,7 @@ export declare const commonTasks: string;
 export declare const commonTaskContext: string;
 export declare const commonContextProjection: string;
 export declare const commonTaskStore: string;
+export declare const commonTaskPlanning: string;
 export declare const commonSessionContext: string;
 export declare const commonContinuationRecord: string;
 export declare const commonOwnershipRecord: string;

package/dist/templates/trellis/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/templates/trellis/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAcH,eAAO,MAAM,WAAW,QAAsC,CAAC;AAG/D,eAAO,MAAM,UAAU,QAA6C,CAAC;AACrE,eAAO,MAAM,WAAW,QAA0C,CAAC;AACnE,eAAO,MAAM,eAAe,QAA8C,CAAC;AAC3E,eAAO,MAAM,gBAAgB,QAAgD,CAAC;AAC9E,eAAO,MAAM,eAAe,QAA+C,CAAC;AAC5E,eAAO,MAAM,eAAe,QAA+C,CAAC;AAC5E,eAAO,MAAM,gBAAgB,QAAgD,CAAC;AAC9E,eAAO,MAAM,gBAAgB,QAAgD,CAAC;AAC9E,eAAO,MAAM,YAAY,QAA2C,CAAC;AACrE,eAAO,MAAM,QAAQ,QAAuC,CAAC;AAC7D,eAAO,MAAM,SAAS,QAAwC,CAAC;AAC/D,eAAO,MAAM,SAAS,QAAwC,CAAC;AAC/D,eAAO,MAAM,WAAW,QAA0C,CAAC;AACnE,eAAO,MAAM,WAAW,QAA0C,CAAC;AACnE,eAAO,MAAM,iBAAiB,QAAiD,CAAC;AAChF,eAAO,MAAM,uBAAuB,QAEnC,CAAC;AACF,eAAO,MAAM,eAAe,QAA+C,CAAC;AAC5E,eAAO,MAAM,oBAAoB,QAEhC,CAAC;AACF,eAAO,MAAM,wBAAwB,QAEpC,CAAC;AACF,eAAO,MAAM,qBAAqB,QAEjC,CAAC;AACF,eAAO,MAAM,qBAAqB,QAEjC,CAAC;AACF,eAAO,MAAM,mBAAmB,QAE/B,CAAC;AACF,eAAO,MAAM,uBAAuB,QAEnC,CAAC;AACF,eAAO,MAAM,mBAAmB,QAE/B,CAAC;AACF,eAAO,MAAM,eAAe,QAA+C,CAAC;AAC5E,eAAO,MAAM,gBAAgB,QAAgD,CAAC;AAC9E,eAAO,MAAM,gBAAgB,QAAgD,CAAC;AAG9E,eAAO,MAAM,kBAAkB,QAA2C,CAAC;AAC3E,eAAO,MAAM,mBAAmB,QAA4C,CAAC;AAC7E,eAAO,MAAM,UAAU,QAAkC,CAAC;AAC1D,eAAO,MAAM,gBAAgB,QAAyC,CAAC;AACvE,eAAO,MAAM,gBAAgB,QAAyC,CAAC;AACvE,eAAO,MAAM,qBAAqB,QAEjC,CAAC;AACF,eAAO,MAAM,mBAAmB,QAA4C,CAAC;AAG7E,eAAO,MAAM,kBAAkB,QAA8B,CAAC;AAC9D,eAAO,MAAM,kBAAkB,QAA8B,CAAC;AAC9D,eAAO,MAAM,iBAAiB,QAAgC,CAAC;AAC/D,eAAO,MAAM,qBAAqB,QAAoC,CAAC;AAMvE,eAAO,MAAM,sBAAsB,QAAsC,CAAC;AAC1E,eAAO,MAAM,kBAAkB,QAAkC,CAAC;AAClE,eAAO,MAAM,oBAAoB,QAAoC,CAAC;AACtE,eAAO,MAAM,uBAAuB,QAEnC,CAAC;AAEF;;GAEG;AACH,wBAAgB,aAAa,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CA6CnD;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAOlD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/templates/trellis/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAcH,eAAO,MAAM,WAAW,QAAsC,CAAC;AAG/D,eAAO,MAAM,UAAU,QAA6C,CAAC;AACrE,eAAO,MAAM,WAAW,QAA0C,CAAC;AACnE,eAAO,MAAM,eAAe,QAA8C,CAAC;AAC3E,eAAO,MAAM,gBAAgB,QAAgD,CAAC;AAC9E,eAAO,MAAM,eAAe,QAA+C,CAAC;AAC5E,eAAO,MAAM,eAAe,QAA+C,CAAC;AAC5E,eAAO,MAAM,gBAAgB,QAAgD,CAAC;AAC9E,eAAO,MAAM,gBAAgB,QAAgD,CAAC;AAC9E,eAAO,MAAM,YAAY,QAA2C,CAAC;AACrE,eAAO,MAAM,QAAQ,QAAuC,CAAC;AAC7D,eAAO,MAAM,SAAS,QAAwC,CAAC;AAC/D,eAAO,MAAM,SAAS,QAAwC,CAAC;AAC/D,eAAO,MAAM,WAAW,QAA0C,CAAC;AACnE,eAAO,MAAM,WAAW,QAA0C,CAAC;AACnE,eAAO,MAAM,iBAAiB,QAAiD,CAAC;AAChF,eAAO,MAAM,uBAAuB,QAEnC,CAAC;AACF,eAAO,MAAM,eAAe,QAA+C,CAAC;AAC5E,eAAO,MAAM,kBAAkB,QAE9B,CAAC;AACF,eAAO,MAAM,oBAAoB,QAEhC,CAAC;AACF,eAAO,MAAM,wBAAwB,QAEpC,CAAC;AACF,eAAO,MAAM,qBAAqB,QAEjC,CAAC;AACF,eAAO,MAAM,qBAAqB,QAEjC,CAAC;AACF,eAAO,MAAM,mBAAmB,QAE/B,CAAC;AACF,eAAO,MAAM,uBAAuB,QAEnC,CAAC;AACF,eAAO,MAAM,mBAAmB,QAE/B,CAAC;AACF,eAAO,MAAM,eAAe,QAA+C,CAAC;AAC5E,eAAO,MAAM,gBAAgB,QAAgD,CAAC;AAC9E,eAAO,MAAM,gBAAgB,QAAgD,CAAC;AAG9E,eAAO,MAAM,kBAAkB,QAA2C,CAAC;AAC3E,eAAO,MAAM,mBAAmB,QAA4C,CAAC;AAC7E,eAAO,MAAM,UAAU,QAAkC,CAAC;AAC1D,eAAO,MAAM,gBAAgB,QAAyC,CAAC;AACvE,eAAO,MAAM,gBAAgB,QAAyC,CAAC;AACvE,eAAO,MAAM,qBAAqB,QAEjC,CAAC;AACF,eAAO,MAAM,mBAAmB,QAA4C,CAAC;AAG7E,eAAO,MAAM,kBAAkB,QAA8B,CAAC;AAC9D,eAAO,MAAM,kBAAkB,QAA8B,CAAC;AAC9D,eAAO,MAAM,iBAAiB,QAAgC,CAAC;AAC/D,eAAO,MAAM,qBAAqB,QAAoC,CAAC;AAMvE,eAAO,MAAM,sBAAsB,QAAsC,CAAC;AAC1E,eAAO,MAAM,kBAAkB,QAAkC,CAAC;AAClE,eAAO,MAAM,oBAAoB,QAAoC,CAAC;AACtE,eAAO,MAAM,uBAAuB,QAEnC,CAAC;AAEF;;GAEG;AACH,wBAAgB,aAAa,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CA8CnD;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAOlD"}

package/dist/templates/trellis/index.js

@@ -46,6 +46,7 @@ export const commonTasks = readTemplate("scripts/common/tasks.py");
 export const commonTaskContext = readTemplate("scripts/common/task_context.py");
 export const commonContextProjection = readTemplate("scripts/common/context_projection.py");
 export const commonTaskStore = readTemplate("scripts/common/task_store.py");
+export const commonTaskPlanning = readTemplate("scripts/common/task_planning.py");
 export const commonSessionContext = readTemplate("scripts/common/session_context.py");
 export const commonContinuationRecord = readTemplate("scripts/common/continuation_record.py");
 export const commonOwnershipRecord = readTemplate("scripts/common/ownership_record.py");
@@ -102,6 +103,7 @@ export function getAllScripts() {
     scripts.set("common/task_context.py", commonTaskContext);
     scripts.set("common/context_projection.py", commonContextProjection);
     scripts.set("common/task_store.py", commonTaskStore);
+    scripts.set("common/task_planning.py", commonTaskPlanning);
     scripts.set("common/session_context.py", commonSessionContext);
     scripts.set("common/continuation_record.py", commonContinuationRecord);
     scripts.set("common/ownership_record.py", commonOwnershipRecord);

package/dist/templates/trellis/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/templates/trellis/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,SAAS,YAAY,CAAC,YAAoB;IACxC,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,gCAAgC;AAChC,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAE/D,0BAA0B;AAC1B,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC,4BAA4B,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC,0BAA0B,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC,sBAAsB,CAAC,CAAC;AAC7D,MAAM,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC,gCAAgC,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CACjD,sCAAsC,CACvC,CAAC;AACF,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAC9C,mCAAmC,CACpC,CAAC;AACF,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAClD,uCAAuC,CACxC,CAAC;AACF,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAC/C,oCAAoC,CACrC,CAAC;AACF,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAC/C,oCAAoC,CACrC,CAAC;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAC7C,kCAAkC,CACnC,CAAC;AACF,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CACjD,sCAAsC,CACvC,CAAC;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAC7C,kCAAkC,CACnC,CAAC;AACF,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAE9E,wBAAwB;AACxB,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,0BAA0B,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAC/C,6BAA6B,CAC9B,CAAC;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAC;AAE7E,sBAAsB;AACtB,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAEvE,+CAA+C;AAC/C,gFAAgF;AAChF,iFAAiF;AACjF,qCAAqC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CACjD,8BAA8B,CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1C,eAAe;IACf,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAExC,SAAS;IACT,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,uBAAuB,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,oBAAoB,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,wBAAwB,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,qBAAqB,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,qBAAqB,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,mBAAmB,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,uBAAuB,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,mBAAmB,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IAEvD,OAAO;IACP,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IAEtD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/templates/trellis/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAEtC,SAAS,YAAY,CAAC,YAAoB;IACxC,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,gCAAgC;AAChC,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAE/D,0BAA0B;AAC1B,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC,4BAA4B,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC,0BAA0B,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC,sBAAsB,CAAC,CAAC;AAC7D,MAAM,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC,gCAAgC,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CACjD,sCAAsC,CACvC,CAAC;AACF,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAC5C,iCAAiC,CAClC,CAAC;AACF,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAC9C,mCAAmC,CACpC,CAAC;AACF,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAClD,uCAAuC,CACxC,CAAC;AACF,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAC/C,oCAAoC,CACrC,CAAC;AACF,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAC/C,oCAAoC,CACrC,CAAC;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAC7C,kCAAkC,CACnC,CAAC;AACF,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CACjD,sCAAsC,CACvC,CAAC;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAC7C,kCAAkC,CACnC,CAAC;AACF,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC,8BAA8B,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAC;AAE9E,wBAAwB;AACxB,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,0BAA0B,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAC;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAC/C,6BAA6B,CAC9B,CAAC;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAC;AAE7E,sBAAsB;AACtB,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAEvE,+CAA+C;AAC/C,gFAAgF;AAChF,iFAAiF;AACjF,qCAAqC;AACrC,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAC1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CACjD,8BAA8B,CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1C,eAAe;IACf,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAExC,SAAS;IACT,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,iBAAiB,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,uBAAuB,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,kBAAkB,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,oBAAoB,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,wBAAwB,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,qBAAqB,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,qBAAqB,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,mBAAmB,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,uBAAuB,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,mBAAmB,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;IAEvD,OAAO;IACP,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,qBAAqB,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IAEtD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/templates/trellis/scripts/common/task_planning.py

@@ -0,0 +1,133 @@
+"""Task-local material plan revisions; chat approval remains coordinator-owned."""
+
+from __future__ import annotations
+
+from datetime import datetime, timezone
+from pathlib import Path
+from typing import Any
+
+
+class PlanningError(ValueError):
+    """A planning contract needs correction before a task can start."""
+
+
+def validate_meta_value(key: str, value: str) -> None:
+    if key == "planning" or key.startswith("planning."):
+        raise PlanningError("meta.planning is reserved; use task.py plan seal/approve")
+    choices = {
+        "execution_class": {"direct", "planned"},
+        "delivery_mode": {"change_bearing", "analysis_only"},
+    }
+    if key in choices and value not in choices[key]:
+        raise PlanningError(f"{key} must be one of: {', '.join(sorted(choices[key]))}")
+
+
+def classification(data: dict[str, Any]) -> tuple[str, str]:
+    meta = data.get("meta", {})
+    if not isinstance(meta, dict):
+        raise PlanningError("task meta must be an object")
+    execution = meta.get("execution_class")
+    delivery = meta.get("delivery_mode")
+    if execution not in ("direct", "planned") or delivery not in ("change_bearing", "analysis_only"):
+        raise PlanningError("classify this task with execution_class=direct|planned and delivery_mode=change_bearing|analysis_only before start")
+    return execution, delivery
+
+
+def planning_record(data: dict[str, Any]) -> dict[str, Any]:
+    meta = data.get("meta", {})
+    if not isinstance(meta, dict):
+        raise PlanningError("task meta must be an object")
+    record = meta.get("planning", {})
+    if not isinstance(record, dict):
+        raise PlanningError("meta.planning must be an object")
+    revision = record.get("revision", 1)
+    if isinstance(revision, bool) or not isinstance(revision, int) or revision < 1:
+        raise PlanningError("planning revision must be a positive integer")
+    return {**record, "revision": revision}
+
+
+def invalidate_plan(data: dict[str, Any]) -> None:
+    record = planning_record(data)
+    data.setdefault("meta", {})["planning"] = {"revision": record["revision"] + 1}
+
+
+def _plan_documents(task_dir: Path, execution: str, delivery: str) -> list[str]:
+    names = ["prd.md"]
+    if execution == "planned":
+        names.append("design.md")
+        if delivery == "change_bearing":
+            names.append("implement.md")
+    for name in names:
+        document = task_dir / name
+        if document.is_symlink() or not document.is_file():
+            raise PlanningError(f"plan requires a regular task document: {name}")
+        if document.stat().st_size > 256 * 1024 or not document.read_text(encoding="utf-8").strip():
+            raise PlanningError(f"plan document must be bounded, non-empty UTF-8: {name}")
+    return names
+
+
+def seal_plan(data: dict[str, Any], task_dir: Path) -> int:
+    execution, delivery = classification(data)
+    documents = _plan_documents(task_dir, execution, delivery)
+    record = planning_record(data)
+    # Resealing an already sealed plan declares a material new version. A replan
+    # already advanced the revision; its first seal keeps that revision.
+    revision = record["revision"] + (1 if record.get("seal") else 0)
+    data.setdefault("meta", {})["planning"] = {
+        "revision": revision,
+        "seal": {
+            "revision": revision,
+            "task_id": data.get("id") or task_dir.name,
+            "task_name": task_dir.name,
+            "documents": documents,
+            "execution_class": execution,
+            "delivery_mode": delivery,
+            "sealed_at": datetime.now(timezone.utc).isoformat(),
+        },
+    }
+    return revision
+
+
+def _require_seal(data: dict[str, Any], task_dir: Path) -> dict[str, Any]:
+    execution, delivery = classification(data)
+    record = planning_record(data)
+    seal = record.get("seal")
+    if not isinstance(seal, dict) or type(seal.get("revision")) is not int or seal.get("revision") != record["revision"]:
+        raise PlanningError("current material plan is not sealed; use task.py plan seal")
+    if seal.get("task_id") != (data.get("id") or task_dir.name) or seal.get("task_name") != task_dir.name:
+        raise PlanningError("sealed plan belongs to another task")
+    if seal.get("execution_class") != execution or seal.get("delivery_mode") != delivery:
+        raise PlanningError("plan classification changed; reseal the material plan")
+    if seal.get("documents") != _plan_documents(task_dir, execution, delivery):
+        raise PlanningError("sealed plan documents do not match this task")
+    return record
+
+
+def approve_plan(data: dict[str, Any], task_dir: Path, revision: int, basis: str) -> None:
+    record = _require_seal(data, task_dir)
+    if revision != record["revision"]:
+        raise PlanningError(f"approval revision must match current revision {record['revision']}")
+    if not basis.strip() or len(basis) > 1024 or "\x00" in basis:
+        raise PlanningError("approval basis must be non-empty bounded text without credentials")
+    record.update({
+        "approved_revision": revision,
+        "approval_basis": basis.strip(),
+        "approved_at": datetime.now(timezone.utc).isoformat(),
+    })
+    data["meta"]["planning"] = record
+
+
+def require_start_approval(data: dict[str, Any], task_dir: Path) -> None:
+    if data.get("status") not in {"planning", "in_progress"}:
+        raise PlanningError("start requires an active planning or in_progress task")
+    # Existing running tasks retain their authorization; only crossing the
+    # planning boundary is gated. Selecting a task never crosses that boundary.
+    if data.get("status") == "in_progress":
+        return
+    execution, delivery = classification(data)
+    if delivery == "analysis_only":
+        raise PlanningError("analysis_only tasks remain in planning and cannot be started")
+    if execution == "planned" and delivery == "change_bearing":
+        record = _require_seal(data, task_dir)
+        if type(record.get("approved_revision")) is not int or record.get("approved_revision") != record["revision"] or not record.get("approval_basis"):
+            raise PlanningError("current sealed plan has no matching later implementation approval; use task.py plan approve only after the user's approval")