@uchibeke/gallivant 0.2.0 → 0.2.1

package/lib/tick.mjs

@@ -20,7 +20,7 @@ import { ROUND_MARKER, NUDGE_MARKER, READY_LABEL, NEEDS_LABEL, actor, normalizeL
 import { publicPrViolations, publicCommentViolations, publicCorrection, publicReviewHash } from "./public_output.mjs";
 import { hasLegacyStatusLabels } from "./public-format.mjs";
 import { adapterFor, buildRun, capabilitiesFor } from "./harness.mjs";
-import { executionRunner, unsubmittedInitialDispatch } from "./execution.mjs";
+import { executionRunner, reserveExecutionEpoch, unsubmittedInitialDispatch } from "./execution.mjs";
 import { reconcileExecutionResult, executionResultCheckpoint, requireVerificationSandbox } from "./execution_result.mjs";
 import { readJson } from "./fs.mjs";
 import { join } from "node:path";
@@ -453,6 +453,16 @@ export function makeTick(deps) {
       prompt = `THE BRIEF HAS CHANGED. Reread the brief and its carried files in the worktree.\n${entry.brief_changes.join("\n")}\n\n${prompt}`;
     }
     const execution = runnerFor(id), remote = execution.capabilities?.transport === "remote";
+    if (execution.ledgerEpoch > 0) reserveExecutionEpoch({ root: execution.root, taskId: id,
+      provider: entry.harness, account: execution.account, epoch: execution.ledgerEpoch, pr: entry.pr });
+    // A registration made by older code can be recognized from its exact settled
+    // old ledger without modifying that ledger. Persist the chosen new epoch
+    // before the first launch changes `last` and `execution`, which are the
+    // evidence the read-only recovery rule needs on later process starts.
+    if (execution.ledgerEpoch > 0 && entry.execution_epoch == null) {
+      entry = state.update(id, { execution_epoch: execution.ledgerEpoch,
+        execution_handoff: { from: entry.execution?.provider, to: entry.harness, previousRun: entry.last?.run ?? null, at: now() } });
+    }
     const mode = entry.session ? "resume" : "start";
     const session = entry.session || entry.learning_continuity?.newSession || (remote ? null : adapterFor(entry.harness).newSession());
     // Extra read-only directories, resolved in one place (lib/config.mjs) from the operator's config list plus the
@@ -924,9 +934,16 @@ export function makeTick(deps) {
     // would undo the record that was just made.
     if (merged?.merged) entry = state.get(id) ?? entry;
     const fix = { repo: entry.repo, pr: entry.pr, headSha: pr.headRefOid, events, receipt: receiptFor(id), denials, merged: merged?.merged ? merged : null };
+    const previousHarness = entry.execution_handoff?.from ?? (entry.execution?.provider !== entry.harness ? entry.execution?.provider : null);
+    // Recovery from a lost registry rebuilds the entry from the PR block, so
+    // neither of those fields survives. The durable ledger epoch still proves
+    // this is a cross-harness takeover and calls for the same context prompt.
+    const handoff = !entry.session && (previousHarness || runnerFor(id).ledgerEpoch > 0)
+      ? `The operator switched this PR from ${previousHarness || "a previous harness"} to ${entry.harness}. This is a new provider session; the previous conversation is unavailable. Before editing, read the approved brief${entry.prd ? ` at ${entry.prd}` : " if one is recorded"}, its carried files, the PR and review threads, and the local checkout's status and unpushed commits. Preserve existing work and review unresolved feedback. The brief's original harness field records its starting route; this explicit PR reset selected ${entry.harness} for subsequent work.`
+      : null;
     const prompt = entry.session
       ? fixPrompt({ ...fix, verify: verifyFor(id) })
-      : `${registerPrompt({ repo: entry.repo, pr: entry.pr })}\n\n${fixPrompt({ ...fix, verify: [] })}`;
+      : `${registerPrompt({ repo: entry.repo, pr: entry.pr })}${handoff ? `\n\n${handoff}` : ""}\n\n${fixPrompt({ ...fix, verify: [] })}`;
     // The invariant: a spawned run must be recorded before anything else can fail. Everything that can throw goes
     // above the spawn, and the state that owns the run is saved immediately below it with no await in between. A
     // process running that the registry does not know about is the worst state this function can leave: `settleRun`
@@ -1152,6 +1169,8 @@ export function makeTick(deps) {
     if (await cancelControl(deps, id)) return;
     if (!settleOnly && await recoverControl(deps, id)) return;
     const execution = runnerFor(id);
+    if (execution.ledgerEpoch > 0) reserveExecutionEpoch({ root: execution.root, taskId: id,
+      provider: entry.harness, account: execution.account, epoch: execution.ledgerEpoch, pr: entry.pr });
     if (execution.reconcile) {
       if (!skipReconciliation) await execution.reconcile({ force: startupReconciliation.delete(id) });
       const pending = execution.current();

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@uchibeke/gallivant",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@uchibeke/gallivant",
-      "version": "0.2.0",
+      "version": "0.2.1",
       "bundleDependencies": [
         "smol-toml"
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uchibeke/gallivant",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Turn repository tasks into reviewed pull requests with local or hosted agents, acceptance checks and a persistent review loop.",
   "type": "module",
   "bin": {