@quolu/lattice 0.59.0 → 0.59.1

package/bin/lattice.mjs

@@ -73,6 +73,26 @@ if (sensorRelaunchStatus !== null) {
   } catch (error) {
     process.exitCode = projectCliFailure(process.stderr, error);
   }
+} else if (args.length === 7 && args[0] === 'plan' && args[1] === 'scope-review'
+  && args[2] === '--plan-input' && args[4] === '--review' && args[6] === '--json') {
+  const { runPlanScopeReview } = await import('../src/plan-scope-review.mjs');
+  const { projectCliFailure } = await import('../src/project-cli.mjs');
+  try {
+    process.exitCode = await runPlanScopeReview({
+      cwd: process.cwd(), planInputRef: args[3], reviewRef: args[5], stdout: process.stdout,
+    });
+  } catch (error) {
+    process.exitCode = projectCliFailure(process.stderr, error);
+  }
+} else if (args.length === 4 && args[0] === 'plan' && args[1] === 'scope-review'
+  && args[2] === '--schema' && args[3] === '--json') {
+  const { runPlanScopeReviewSchema } = await import('../src/plan-scope-review.mjs');
+  const { projectCliFailure } = await import('../src/project-cli.mjs');
+  try {
+    process.exitCode = await runPlanScopeReviewSchema({ stdout: process.stdout });
+  } catch (error) {
+    process.exitCode = projectCliFailure(process.stderr, error);
+  }
 } else if (args.length === 2 && args[0] === 'factory-diagnostics' && args[1] === '--json') {
   const { buildFactoryDiagnostics } = await import('../src/factory-diagnostics.mjs');
   const diagnostics = await buildFactoryDiagnostics();

package/docs/schemas/lattice.executor_packet.v1.schema.json

@@ -39,9 +39,9 @@
     },
     "forbidden_operations": {
       "type": "array",
-      "minItems": 1,
       "maxItems": 256,
-      "items": { "type": "string" }
+      "items": { "type": "string" },
+      "description": "Compatibility field. Lattice-produced packets use an empty array; operation authority belongs to the host."
     },
     "context_content_digest": { "$ref": "#/$defs/digest" },
     "packet_digest": { "$ref": "#/$defs/digest" }

package/docs/schemas/lattice.plan_create_input.v4.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/kitepon-rgb/Lattice/blob/main/docs/schemas/lattice.plan_create_input.v4.schema.json",
   "title": "lattice.plan_create_input.v4",
-  "description": "Canonical initial authoring input for a phase-audited plan. Every task requires a design memo. あなたがこのToDoに対して、何も考えていないならば、設計メモに `NO_PLAN` と書いてください",
+  "description": "Canonical initial authoring input for a phase-audited plan. Every task requires a design memo. After the complete plan is written, run `lattice plan scope-review` and confirm that every task preserves an owner-supplied work specification without adding a product purpose. あなたがこのToDoに対して、何も考えていないならば、設計メモに `NO_PLAN` と書いてください",
   "$comment": "Runtime validation additionally enforces canonical JSON+LF bytes, sorted identifiers and edges, unique ids, combined task/phase acyclicity, byte bounds, non-empty design_memo, and input_digest.",
   "type": "object",
   "additionalProperties": false,

package/docs/schemas/lattice.plan_scope_review.v1.schema.json

@@ -0,0 +1,55 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/kitepon-rgb/Lattice/blob/main/docs/schemas/lattice.plan_scope_review.v1.schema.json",
+  "title": "lattice.plan_scope_review.v1",
+  "description": "AI-authored review performed after the complete plan is written and before it is registered. Every planned task is judged against the owner-supplied work specifications; task splitting and parallelization are allowed, but a new product purpose is not.",
+  "$comment": "Lattice validates complete task coverage, known work-spec references, verdict consistency, and digest binding. The operating AI owns the semantic judgment.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema", "authoring_digest", "work_specs", "task_assessments", "verdict", "review_digest"
+  ],
+  "properties": {
+    "schema": { "const": "lattice.plan_scope_review.v1" },
+    "authoring_digest": { "$ref": "#/$defs/digest" },
+    "work_specs": {
+      "type": "array", "minItems": 1, "maxItems": 512,
+      "description": "The owner-supplied work specifications. Do not add inferred improvements as work specifications.",
+      "items": { "$ref": "#/$defs/workSpec" }
+    },
+    "task_assessments": {
+      "type": "array", "minItems": 1, "maxItems": 512,
+      "description": "Exactly one assessment for every task that will be registered. Use out_of_scope when the task creates a purpose not required by any work specification.",
+      "items": { "$ref": "#/$defs/taskAssessment" }
+    },
+    "verdict": { "enum": ["scope_preserved", "scope_mismatch"] },
+    "review_digest": { "$ref": "#/$defs/digest" }
+  },
+  "$defs": {
+    "identifier": { "type": "string", "pattern": "^[0-9A-Za-z](?:[0-9A-Za-z._-]{0,127})$" },
+    "digest": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+    "text": { "type": "string", "minLength": 1, "maxLength": 16384, "pattern": "\\S" },
+    "workSpec": {
+      "type": "object", "additionalProperties": false,
+      "required": ["work_spec_id", "requirement", "acceptance"],
+      "properties": {
+        "work_spec_id": { "$ref": "#/$defs/identifier" },
+        "requirement": { "$ref": "#/$defs/text" },
+        "acceptance": { "$ref": "#/$defs/text" }
+      }
+    },
+    "taskAssessment": {
+      "type": "object", "additionalProperties": false,
+      "required": ["task_id", "work_spec_ids", "judgment", "reason"],
+      "properties": {
+        "task_id": { "$ref": "#/$defs/identifier" },
+        "work_spec_ids": {
+          "type": "array", "maxItems": 512, "uniqueItems": true,
+          "items": { "$ref": "#/$defs/identifier" }
+        },
+        "judgment": { "enum": ["required", "out_of_scope"] },
+        "reason": { "$ref": "#/$defs/text" }
+      }
+    }
+  }
+}

package/docs/schemas/lattice.todo_extraction.v3.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://github.com/kitepon-rgb/Lattice/blob/main/docs/schemas/lattice.todo_extraction.v3.schema.json",
   "title": "lattice.todo_extraction.v3",
-  "description": "AI-authored ToDo migration artifact. Every task carries a non-blank Markdown design_memo. If no plan exists, write NO_PLAN explicitly.",
+  "description": "AI-authored ToDo migration artifact. Every task carries a non-blank Markdown design_memo. After the complete plan is written, run `lattice plan scope-review` and confirm that every registered task preserves an owner-supplied work specification without adding a product purpose. If no plan exists, write NO_PLAN explicitly.",
   "$comment": "あなたがこのToDoに対して、何も考えていないならば、設計メモに `NO_PLAN` と書いてください。Runtime validation also enforces UTF-8 byte bounds, exact keys, strict sort order, referential integrity, disposition consistency, and the canonical self-digest.",
   "type": "object",
   "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quolu/lattice",
-  "version": "0.59.0",
+  "version": "0.59.1",
   "description": "Schedulability compiler for multi-agent development: observe real code boundaries, refactor the conflicting seam, recompile the plan for parallel execution",
   "author": {
     "name": "Quo / クオ at kitepon.dev",
@@ -29,6 +29,7 @@
     "docs/schemas/lattice.plan_create_input.v2.schema.json",
     "docs/schemas/lattice.plan_create_input.v3.schema.json",
     "docs/schemas/lattice.plan_create_input.v4.schema.json",
+    "docs/schemas/lattice.plan_scope_review.v1.schema.json",
     "docs/schemas/lattice.todo_revision.v2.schema.json",
     "docs/schemas/lattice.todo_revision_set.v3.schema.json",
     "docs/schemas/lattice.phase_todo_revision.v3.schema.json",

package/src/cli-help.mjs

@@ -202,6 +202,7 @@ const SUBCOMMAND_USAGE = Object.freeze({
   'session-context': 'session-context --json',
   'plan create': 'plan create --input <file> [--serialization-reviewed] | --schema --json | --schema-version <1|2|3|4> --json',
   'plan show': 'plan show <plan_key> --json',
+  'plan scope-review': 'plan scope-review --plan-input <plan-create-or-extraction.json> --review <scope-review.json> --json | --schema --json',
   'plan compile': 'plan compile --request <request.json> | --schema --json',
   'plan verify': 'plan verify --request <request.json> --plan <plan.json>',
   'run start': 'run start --request <request.json> --executor <adapter>'

package/src/plan-scope-review.mjs

@@ -0,0 +1,211 @@
+import { constants as fsConstants } from 'node:fs';
+import { lstat, open, realpath, readFile } from 'node:fs/promises';
+import path from 'node:path';
+
+import { gitSync } from './git-process.mjs';
+import {
+  exactRecord,
+  isTodoDigest,
+  isTodoIdentifier,
+  isTodoRef,
+  todoSelfDigest,
+} from './todo-contracts.mjs';
+import { TodoStoreError } from './todo-store.mjs';
+
+const REVIEW_SCHEMA = 'lattice.plan_scope_review.v1';
+const RESULT_SCHEMA = 'lattice.plan_scope_review_result.v1';
+const PLAN_CREATE_SCHEMA = 'lattice.plan_create_input.v4';
+const TODO_EXTRACTION_SCHEMA = 'lattice.todo_extraction.v3';
+const MAX_INPUT_BYTES = 8_388_608;
+const JUDGMENTS = new Set(['required', 'out_of_scope']);
+
+function boundedText(value) {
+  return typeof value === 'string' && value.trim().length > 0
+    && Buffer.byteLength(value) <= 16_384;
+}
+
+function sortedStrictly(values, key = (value) => value) {
+  return values.every((value, index) => index === 0 || key(values[index - 1]) < key(value));
+}
+
+function within(root, candidate) {
+  return candidate.startsWith(`${root}${path.sep}`);
+}
+
+function resolveRepoRoot(cwd) {
+  try {
+    return path.resolve(gitSync(['rev-parse', '--show-toplevel'], {
+      cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'],
+    }).replace(/\r?\n$/u, ''));
+  } catch {
+    return null;
+  }
+}
+
+async function readJsonWithinRepo(repoRoot, inputRef) {
+  if (!isTodoRef(inputRef)) {
+    throw new TodoStoreError('INPUT_UNREADABLE', 'input_path_outside_repo', undefined,
+      { input_ref: inputRef });
+  }
+  const canonicalRoot = await realpath(repoRoot);
+  const absolute = path.resolve(canonicalRoot, inputRef);
+  if (!within(canonicalRoot, absolute)) {
+    throw new TodoStoreError('INPUT_UNREADABLE', 'input_path_outside_repo', undefined,
+      { input_ref: inputRef });
+  }
+  let stats;
+  try { stats = await lstat(absolute); } catch {
+    throw new TodoStoreError('INPUT_UNREADABLE', 'input_unreadable', undefined,
+      { input_ref: inputRef });
+  }
+  if (!stats.isFile() || stats.isSymbolicLink() || stats.size > MAX_INPUT_BYTES
+    || await realpath(absolute) !== absolute) {
+    throw new TodoStoreError('INPUT_UNREADABLE', 'input_path_unsafe', undefined,
+      { input_ref: inputRef });
+  }
+  let value;
+  try { value = JSON.parse(await readFile(absolute, 'utf8')); } catch {
+    throw new TodoStoreError('INPUT_INVALID', 'input_json_invalid', undefined,
+      { input_ref: inputRef });
+  }
+  return value;
+}
+
+function authoredPlan(value) {
+  const digestField = value?.schema === PLAN_CREATE_SCHEMA ? 'input_digest'
+    : value?.schema === TODO_EXTRACTION_SCHEMA ? 'extraction_digest' : null;
+  if (digestField === null) {
+    throw new TodoStoreError('PLAN_SCOPE_REVIEW_INVALID', 'authoring_schema_unsupported', undefined, {
+      pointer: '/schema', expected: [PLAN_CREATE_SCHEMA, TODO_EXTRACTION_SCHEMA],
+      actual: typeof value?.schema === 'string' ? value.schema : null,
+    });
+  }
+  if (!isTodoDigest(value[digestField])
+    || value[digestField] !== todoSelfDigest(value, digestField)) {
+    throw new TodoStoreError('PLAN_SCOPE_REVIEW_INVALID', 'authoring_digest_mismatch', undefined, {
+      pointer: `/${digestField}`,
+    });
+  }
+  const selected = value.schema === TODO_EXTRACTION_SCHEMA
+    ? value.tasks?.filter((task) => typeof task?.disposition === 'string'
+      && task.disposition.startsWith('register_'))
+    : value.tasks;
+  if (!Array.isArray(selected) || selected.length === 0
+    || selected.some((task) => !isTodoIdentifier(task?.task_id))) {
+    throw new TodoStoreError('PLAN_SCOPE_REVIEW_INVALID', 'authoring_tasks_invalid', undefined, {
+      pointer: '/tasks',
+    });
+  }
+  const taskIds = selected.map(({ task_id: taskId }) => taskId).sort();
+  if (new Set(taskIds).size !== taskIds.length) {
+    throw new TodoStoreError('PLAN_SCOPE_REVIEW_INVALID', 'authoring_task_ids_duplicate', undefined, {
+      pointer: '/tasks',
+    });
+  }
+  return { schema: value.schema, digest: value[digestField], taskIds };
+}
+
+function invalid(reason, pointer, detail = {}) {
+  throw new TodoStoreError('PLAN_SCOPE_REVIEW_INVALID', reason, undefined, { pointer, ...detail });
+}
+
+function validateReview(review, authored) {
+  if (!exactRecord(review, [
+    'schema', 'authoring_digest', 'work_specs', 'task_assessments', 'verdict', 'review_digest',
+  ]) || review.schema !== REVIEW_SCHEMA) invalid('review_schema_invalid', '/schema');
+  if (!isTodoDigest(review.authoring_digest) || review.authoring_digest !== authored.digest) {
+    invalid('review_authoring_digest_mismatch', '/authoring_digest', {
+      expected: authored.digest, actual: review.authoring_digest ?? null,
+    });
+  }
+  if (!isTodoDigest(review.review_digest)
+    || review.review_digest !== todoSelfDigest(review, 'review_digest')) {
+    invalid('review_digest_mismatch', '/review_digest');
+  }
+  if (!Array.isArray(review.work_specs) || review.work_specs.length === 0
+    || !review.work_specs.every((spec) => exactRecord(spec, [
+      'work_spec_id', 'requirement', 'acceptance',
+    ]) && isTodoIdentifier(spec.work_spec_id) && boundedText(spec.requirement)
+      && boundedText(spec.acceptance))
+    || !sortedStrictly(review.work_specs, ({ work_spec_id: id }) => id)) {
+    invalid('work_specs_invalid', '/work_specs');
+  }
+  const workSpecIds = new Set(review.work_specs.map(({ work_spec_id: id }) => id));
+  if (!Array.isArray(review.task_assessments)
+    || !review.task_assessments.every((assessment) => exactRecord(assessment, [
+      'task_id', 'work_spec_ids', 'judgment', 'reason',
+    ]) && isTodoIdentifier(assessment.task_id) && Array.isArray(assessment.work_spec_ids)
+      && assessment.work_spec_ids.every(isTodoIdentifier)
+      && sortedStrictly(assessment.work_spec_ids) && JUDGMENTS.has(assessment.judgment)
+      && boundedText(assessment.reason)
+      && (assessment.judgment === 'required'
+        ? assessment.work_spec_ids.length > 0 : assessment.work_spec_ids.length === 0)
+      && assessment.work_spec_ids.every((id) => workSpecIds.has(id)))
+    || !sortedStrictly(review.task_assessments, ({ task_id: id }) => id)) {
+    invalid('task_assessments_invalid', '/task_assessments');
+  }
+  const assessedTaskIds = review.task_assessments.map(({ task_id: id }) => id);
+  if (assessedTaskIds.length !== authored.taskIds.length
+    || assessedTaskIds.some((id, index) => id !== authored.taskIds[index])) {
+    invalid('task_assessments_incomplete', '/task_assessments', {
+      expected_task_ids: authored.taskIds, actual_task_ids: assessedTaskIds,
+    });
+  }
+  const outOfScopeTaskIds = review.task_assessments
+    .filter(({ judgment }) => judgment === 'out_of_scope')
+    .map(({ task_id: id }) => id);
+  const covered = new Set(review.task_assessments.flatMap(({ work_spec_ids: ids }) => ids));
+  const uncoveredWorkSpecIds = [...workSpecIds].filter((id) => !covered.has(id));
+  const expectedVerdict = outOfScopeTaskIds.length === 0 && uncoveredWorkSpecIds.length === 0
+    ? 'scope_preserved' : 'scope_mismatch';
+  if (review.verdict !== expectedVerdict) {
+    invalid('review_verdict_inconsistent', '/verdict', {
+      expected: expectedVerdict, actual: review.verdict ?? null,
+    });
+  }
+  return { outOfScopeTaskIds, uncoveredWorkSpecIds };
+}
+
+export function evaluatePlanScopeReview(planInput, review) {
+  const authored = authoredPlan(planInput);
+  const findings = validateReview(review, authored);
+  const result = {
+    schema: RESULT_SCHEMA,
+    authoring_schema: authored.schema,
+    authoring_digest: authored.digest,
+    work_spec_count: review.work_specs.length,
+    reviewed_task_count: review.task_assessments.length,
+    verdict: review.verdict,
+    accepted: review.verdict === 'scope_preserved',
+    out_of_scope_task_ids: findings.outOfScopeTaskIds,
+    uncovered_work_spec_ids: findings.uncoveredWorkSpecIds,
+    review_digest: review.review_digest,
+    result_digest: '',
+  };
+  result.result_digest = todoSelfDigest(result, 'result_digest');
+  return result;
+}
+
+export async function runPlanScopeReview({ cwd, planInputRef, reviewRef, stdout }) {
+  const repoRoot = resolveRepoRoot(cwd);
+  if (repoRoot === null) throw new TodoStoreError('REPO_UNRESOLVED', 'git_toplevel_unresolved');
+  const [planInput, review] = await Promise.all([
+    readJsonWithinRepo(repoRoot, planInputRef), readJsonWithinRepo(repoRoot, reviewRef),
+  ]);
+  const result = evaluatePlanScopeReview(planInput, review);
+  stdout.write(`${JSON.stringify(result)}\n`);
+  return result.accepted ? 0 : 1;
+}
+
+export async function runPlanScopeReviewSchema({ stdout }) {
+  const schemaUrl = new URL('../docs/schemas/lattice.plan_scope_review.v1.schema.json', import.meta.url);
+  const handle = await open(schemaUrl, fsConstants.O_RDONLY);
+  try {
+    const schema = JSON.parse(await handle.readFile('utf8'));
+    if (schema?.title !== REVIEW_SCHEMA) throw new TypeError('bundled plan scope review schema invalid');
+    stdout.write(`${JSON.stringify(schema)}\n`);
+    return 0;
+  } finally {
+    await handle.close();
+  }
+}

package/src/runtime-contracts.mjs

@@ -642,7 +642,7 @@ export function validateExecutorPacket(value) {
     && identifier(packet.plan_ref)
     && nonNegativeInteger(packet.plan_epoch)
     && boundedArray(packet.verifier_refs, (entry) => typeof entry === 'string')
-    && boundedArray(packet.forbidden_operations, (entry) => typeof entry === 'string', { min: 1 })
+    && boundedArray(packet.forbidden_operations, (entry) => typeof entry === 'string')
     && packet.context_content_digest === computeContextContentDigest(packet)
     && selfDigestValid(packet, 'packet_digest')
   ));

package/src/runtime-engine.mjs

@@ -32,18 +32,10 @@ import {
 
 const ENGINE_ACTOR = 'lattice-runtime';
 /**
- * workerへ配る禁止操作。
- *
- * `commit`は含めない。自分の隔離worktreeでdetached HEADへ進めるcommitは、canonical branchを
- * 動かさず外部へ効果を出さない一方で、進行中の成果を耐久化し、diff観測が生み出した木そのものを
- * 縛れるようにする（ADR 0139）。
- *
- * 禁止のままにするのは、HEADをbaseの子孫から外す操作と、外部へ効果を出す操作である。
- * 前者は観測の前提を壊し、後者は承認なしに行わないという公開契約に当たる。
+ * v1 packetの互換field。操作権限はhostへ委ね、Latticeからは禁止操作を配らない。
+ * worktree観測に必要な前提は、実際のHEADとdiffを観測して判定する（ADR 0178）。
  */
-const FORBIDDEN_OPERATIONS = Object.freeze([
-  'push', 'branch', 'merge', 'rebase', 'reset', 'stash',
-]);
+const FORBIDDEN_OPERATIONS = Object.freeze([]);
 
 function fail(reason) {
   throw new TypeError(`runtime engine契約違反: ${reason}`);

package/src/runtime-work-order-contracts.mjs

@@ -57,7 +57,7 @@ export function validateRunWorkOrder(value) {
     && GIT_SHA1.test(value.base_sha ?? '')
     && stringArray(value.scope_writes, { paths: true })
     && stringArray(value.verifier_refs)
-    && stringArray(value.forbidden_operations, { min: 1 })
+    && stringArray(value.forbidden_operations)
     && SHA256.test(value.packet_digest ?? '')
     && SHA256.test(value.order_digest ?? '')
     && selfDigest(value, 'order_digest') === value.order_digest;