@pennixrv/trellis 0.7.0-beta.51 → 0.7.0-beta.52

package/dist/migrations/manifests/0.7.0-beta.52.json

@@ -0,0 +1,9 @@
+{
+  "version": "0.7.0-beta.52",
+  "description": "修复日期任务的交接围栏，并拒绝携带正式 ownership 记录的任务改名",
+  "breaking": false,
+  "recommendMigrate": false,
+  "changelog": "交接围栏使用 task.json 中的规范任务 ID 查询记录，覆盖原生日期目录；任何正式 ownership 记录均阻止任务改名，避免留下失效的路径和身份引用。",
+  "migrations": [],
+  "notes": "无任务 schema、ownership 记录格式或历史迁移。没有正式 ownership 存储的普通任务保留原行为；已有交接记录的任务需保持原名。"
+}

package/dist/templates/trellis/scripts/common/ownership_record.py

@@ -416,20 +416,35 @@ def status(root: Path | None, task_id: str, handoff_id: str, core_digest: str) -
     return _public(record)
 
 
+def _task_ownership_records(root: Path, task_path: Path) -> tuple[dict[str, str], list[Path]]:
+    """Discover records by validated JSON identity, never by directory name."""
+    runtime = root / ".trellis" / ".runtime"
+    ownership = runtime / "handoff-ownership"
+    if runtime.is_symlink() or ownership.is_symlink():
+        raise OwnershipError("ownership record directory is unsafe")
+    if not ownership.exists():
+        return {}, []
+    relative = task_path.relative_to(root).as_posix()
+    try:
+        task = _task_snapshot(root, relative)
+        records_dir = _record_path(root, task["id"], "record-probe").parent
+    except ContinuationError as exc:
+        raise OwnershipError(str(exc)) from exc
+    return task, sorted(records_dir.glob("*.json"))
+
+
+def assert_task_rename_allowed(root: Path, task_path: Path) -> None:
+    """A rename cannot preserve the immutable identity of a formal handoff."""
+    _task, records = _task_ownership_records(root, task_path)
+    if records:
+        raise OwnershipError("refusing rename: task has formal handoff ownership records")
+
+
 def assert_task_mutation_allowed(root: Path, task_path: Path) -> None:
     """Reject ordinary task pointer changes that would bypass ownership fencing."""
+    task, records = _task_ownership_records(root, task_path)
     actor = resolve_context_key()
-    try:
-        task_id = _safe_task_id(task_path.name)
-    except ContinuationError:
-        return
-    relative = task_path.relative_to(root).as_posix()
-    records_dir = root / ".trellis" / ".runtime" / "handoff-ownership" / task_id
-    if records_dir.is_symlink():
-        raise OwnershipError("ownership record directory is unsafe")
-    if not records_dir.is_dir():
-        return
-    for record_path in sorted(records_dir.glob("*.json")):
+    for record_path in records:
         if not actor:
             raise OwnershipError("no_direct_session_identity: task has handoff ownership fencing")
         if record_path.is_symlink():
@@ -437,7 +452,7 @@ def assert_task_mutation_allowed(root: Path, task_path: Path) -> None:
         record = _decode(record_path)
         if record["state"] not in STATES:
             continue
-        if record["task"]["path"] != relative:
+        if record["task"]["path"] != task["path"] or record["task"]["id"] != task["id"]:
             raise OwnershipError("ownership record task path does not match current task")
         if record.get("consumer_session_id") == actor:
             continue

package/dist/templates/trellis/scripts/common/task_store.py

@@ -1095,6 +1095,13 @@ def cmd_rename(args: argparse.Namespace) -> int:
         )
         return 1
 
+    from .ownership_record import assert_task_rename_allowed
+    try:
+        assert_task_rename_allowed(repo_root, task_dir)
+    except (OSError, ValueError) as exc:
+        print(colored(f"Error: {exc}", Colors.RED), file=sys.stderr)
+        return 1
+
     old_name = task_dir.name
     date_prefix, _old_slug = _split_date_prefix(old_name)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pennixrv/trellis",
-  "version": "0.7.0-beta.51",
+  "version": "0.7.0-beta.52",
   "description": "AI capabilities grow like ivy — Trellis provides the structure to guide them along a disciplined path",
   "type": "module",
   "main": "./dist/index.js",
@@ -34,7 +34,7 @@
     "inquirer": "^9.3.7",
     "undici": "^6.21.0",
     "zod": "^4.4.2",
-    "@pennixrv/trellis-core": "0.7.0-beta.51"
+    "@pennixrv/trellis-core": "0.7.0-beta.52"
   },
   "devDependencies": {
     "@eslint/js": "^9.18.0",