@uchibeke/gallivant 0.2.1 → 0.3.0

package/lib/time.mjs

@@ -27,6 +27,7 @@ export const earlier = (a, b) => (!a ? b : !b ? a : Date.parse(a) <= Date.parse(
 export function ago(iso, clock = Date) {
   if (!iso) return "never";
   const ms = clock.now() - Date.parse(iso);
+  if (!Number.isFinite(ms)) return "unknown";
   if (ms < 45_000) return "just now";
   const m = Math.round(ms / 60_000);
   if (m < 60) return `${m}m ago`;

package/lib/tracker/pages.mjs

@@ -8,6 +8,8 @@ import { contract } from "../fs.mjs";
 import { controlPending, CONTROL_LABELS, MAX_NOTE, lastMessage } from "../control.mjs";
 import { probeStatus } from "../probe.mjs";
 import { needsAgentResume, networkRecoveryDetail } from "../network_recovery.mjs";
+import { reviewProgressText } from "../review_policy.mjs";
+import { reviewActivity } from "./review.mjs";
 
 /** The five characters that matter in HTML text and in a double-quoted attribute. Nothing else is interpolated. */
 export const esc = s => String(s ?? "")
@@ -125,10 +127,10 @@ export function dashboard(m, { clock = Date, by = "state", theme = null, query =
   const ctxq = { theme: query.theme, by: by === "state" ? "" : by };
   const groups = entryGroups(base, m, by, null, ctxq);
   const table = (title, rows) => `<h2>${esc(title)}</h2>` + (rows.length ? `<table>
-<thead><tr><th>entry</th><th>state</th><th>detail</th><th>round</th><th>since</th><th></th></tr></thead><tbody>
+<thead><tr><th>entry</th><th>state</th><th>detail</th><th>round</th><th>last activity</th><th></th></tr></thead><tbody>
 ${rows.map(r => `<tr><td><a href="${esc(at(base, "/run", ctxq, { id: r.id }))}">${esc(r.handle)}</a></td>
 <td><span class="tag${r.section === "needs_you" ? " bad" : r.run?.running ? " live" : ""}">${esc(r.label)}</span></td><td>${esc(r.detail)}</td><td class="dim">${esc(r.round)}</td>
-<td class="dim">${esc(ago(r.since, clock))}</td><td>${r.url ? `<a href="${esc(r.url)}">PR</a>` : ""}</td></tr>`).join("\n")}
+<td class="dim">${r.since ? `<time datetime="${esc(r.since)}" data-relative-time>${esc(ago(r.since, clock))}</time>` : "unknown"}</td><td>${r.url ? `<a href="${esc(r.url)}">PR</a>` : ""}</td></tr>`).join("\n")}
 </tbody></table>` : `<p class="empty">(none)</p>`);
   const d = m.daemon;
   // A dead daemon is the first thing a reader needs, and "run gallivant up" on its own does not say how long it has
@@ -144,6 +146,7 @@ ${rows.map(r => `<tr><td><a href="${esc(at(base, "/run", ctxq, { id: r.id }))}">
 <section class="main">
 <p class="${d?.alive ? "dim" : "warn"}">${esc(state)}</p>
 ${m.latestError ? `<p class="warn mono">${esc(m.latestError)}</p>` : ""}
+${(m.repositoryGuidance ?? []).map(r => `<p class="warn">${esc(r.repo)}: ${esc(r.detail)}</p>`).join("")}
 ${SECTIONS.map(([key, label]) => table(label, m[key] || [])).join("")}
 </section></div>` });
 }
@@ -195,12 +198,13 @@ export function runPage({ id, entry, handle, run, initialLaunch = false, maxIter
     fact("network recovery", entry.network_retry ? esc(networkRecoveryDetail(entry.network_retry)) : ""),
     fact("harness", esc(entry.harness)),
     fact("round", esc(`round ${entry.iteration}/${maxIterations}`)),
+    fact("independent review", esc(reviewProgressText(entry))),
     fact("PR", entry.url ? `<a href="${esc(entry.url)}">${esc(entry.url)}</a>` : entry.pr ? esc(`#${entry.pr}`) : ""),
     fact("branch", `<code>${esc(entry.branch)}</code>`),
     fact("worktree", `<code>${esc(contract(entry.worktree))}</code>`),
     fact("session", `<code>${esc(entry.session)}</code>`),
     fact("provider state", esc(entry.execution?.providerState)),
-    fact("observed / reconciled", entry.execution ? esc(`${entry.execution.observedAt ?? "unknown"} / ${entry.execution.reconciledAt ?? "never"}`) : ""),
+    fact("observed / reconciled", entry.execution ? esc(`${when(entry.execution.observedAt)} / ${when(entry.execution.reconciledAt)}`) : ""),
     fact("recovery action", esc(entry.execution?.recoveryAction)),
     fact("run", run ? `<code>${esc(run.id)}</code> ${run.running ? `<span class="live">running</span>` : `exit ${esc(String(run.exit ?? "not recorded yet"))}`}` : ""),
     fact("runs", `<a href="${esc(at(base, "/runs", ctxq, { entry: id }))}">every run for this entry</a>`),
@@ -219,6 +223,12 @@ export function runPage({ id, entry, handle, run, initialLaunch = false, maxIter
 <section class="main">
 ${divergence ? briefMoved(divergence) : ""}
 <dl class="facts">${facts}</dl>
+<section aria-labelledby="review-activity-heading" id="review-activity" data-entry="${esc(id)}">
+<h2 id="review-activity-heading">Reviewer activity</h2>
+<p class="note">Live status updates from the independent reviewer. The agent log is shown separately below.</p>
+<div id="review-activity-log" role="log" aria-live="polite" aria-relevant="additions text"><p>${esc(reviewActivity(entry).message)}</p></div>
+<p id="review-activity-state" class="note">Connecting to review status…</p>
+</section>
 ${controlToken && entry.state !== "done" ? `<section id="run-controls" class="run-controls" aria-labelledby="control-heading" data-entry="${esc(id)}" data-token="${esc(controlToken)}" data-pending="${controlPending(entry.control)}">
 <h2 id="control-heading">Run actions</h2>
 <div class="run-actions">
@@ -241,7 +251,7 @@ ${run?.running && entry.execution?.controls?.interrupt !== false ? `<label class
 <a id="control-refresh" href="${esc(at(base, "/run", ctxq, { id }))}" hidden>View updated run</a>
 <details id="last-message"${savedMessage ? "" : " hidden"}><summary>Last submitted message</summary><pre>${esc(savedMessage?.note || "")}</pre><button id="restore-message" type="button">Edit and resend</button></details>
 </section>` : entry.state === "done" ? `<p class="note">This PR is closed or merged. Start a follow-up PRD for further changes.</p>` : ""}
-<h2>Log</h2>
+<h2>Agent log</h2>
 ${run ? logPane(`data-entry="${esc(id)}" data-run="${esc(run.id)}" data-harness="${esc(entry.harness || "")}"`) : `<p class="empty">No run has been dispatched for this entry yet.</p>`}
 </section></div>` });
 }
@@ -310,7 +320,11 @@ function runGroups(base, rows, by, entry, ctxq, open = null) {
     .filter(g => g.rows.length);
 }
 
-const when = ms => (ms ? new Date(ms).toISOString().replace("T", " ").slice(0, 19) : "unknown");
+const when = value => {
+  if (value == null || value === "") return "unknown";
+  const date = new Date(value);
+  return Number.isFinite(date.getTime()) ? `${date.toISOString().replace("T", " ").slice(0, 19)} UTC` : "unknown";
+};
 
 const duration = r => {
   if (r.running) return "running";

package/lib/tracker/review.mjs

@@ -0,0 +1,21 @@
+import { needsFirstParty, reviewProgressText } from "../review_policy.mjs";
+import { redact } from "../execution_io.mjs";
+
+// A read-only status projection. Review evidence and raw provider output can
+// contain private source; neither belongs in a dashboard activity feed.
+export function reviewActivity(entry) {
+  if (!needsFirstParty(entry.reviewPolicy)) return { status: "unavailable", message: "No independent review is configured for this task." };
+  const record = entry.firstPartyReview;
+  if (!record) return { status: "waiting", message: "Waiting for independent review." };
+  const pieces = Array.isArray(record.pieces) ? record.pieces : [];
+  const current = pieces.findIndex(piece => piece.status === "running");
+  const verdict = record.status === "completed" ? record.result?.verdict : null;
+  const count = verdict === "findings" ? record.result?.findingsCount ?? (Array.isArray(record.result?.findings) ? record.result.findings.length : 0) : 0;
+  const parts = [reviewProgressText(entry)];
+  if (current >= 0) parts.push(`reviewing job ${current + 1} of ${pieces.length}`);
+  if (verdict === "findings") parts.push(`${count} finding${count === 1 ? "" : "s"}`);
+  if (verdict === "clear") parts.push("review clear; other completion checks still apply");
+  if (record.disposition?.status === "dispatched") parts.push("findings sent to agent");
+  if (["failed", "incomplete"].includes(record.status) && record.error) parts.push(redact(String(record.error)).slice(0, 500));
+  return { status: record.status, message: parts.filter(Boolean).join("; ") };
+}

package/lib/tracker_process.mjs

@@ -82,7 +82,14 @@ export async function trackerInBackground(ctx, { port = DEFAULT_PORT, waitMs = 1
   const deadline = Date.now() + waitMs;
   while (Date.now() < deadline) {
     assertUnpinnedHome(ctx.home);
-    const record = readTracker(ctx.home);
+    let record;
+    try { record = readTracker(ctx.home); }
+    catch (error) {
+      // Our child creates its lock before writing JSON. Wait within this
+      // startup deadline; malformed prior locks still refuse before spawning,
+      // and no incomplete record can establish readiness or signal authority.
+      if (!child || !error.message.startsWith(`${lockPath(ctx.home)} is not valid JSON:`)) throw error;
+    }
     usable(record, port);
     if (await ready(record, port)) return record;
     if (spawnError || child?.exitCode != null && !record?.alive) throw new Error(`Tracker failed to start; see ${join(ctx.home, "tracker.log")}`);

package/lib/verification_sandbox.mjs

@@ -5,7 +5,8 @@ import { homedir } from "node:os";
 import { existsSync, realpathSync, statSync, mkdtempSync, writeFileSync, rmSync, mkdirSync, readlinkSync } from "node:fs";
 import { createHash } from "node:crypto";
 import { deflateSync } from "node:zlib";
-import { execFileAsync, MAX_DIFF_BYTES } from "./gh.mjs";
+import { execFileAsync } from "./process.mjs";
+import { MAX_DIFF_BYTES } from "./host_contract.mjs";
 import { executionError } from "./execution_io.mjs";
 
 const unavailable = () => executionError("EXECUTION_VERIFICATION_SANDBOX", "OS verification sandbox unavailable or enforcement probe failed; use macOS sandbox-exec with its installed dyld-support.sb and Command Line Tools, or Linux /usr/bin/bwrap with working user/PID/network namespaces; /usr/bin/git and a dedicated Node installation with npm are required. Preserve saved results and repair host isolation before explicitly resuming; verification never falls back to an unsandboxed shell");

package/lib/work_artifacts.mjs

@@ -0,0 +1,79 @@
+import { parseSourcesMeta } from "./config.mjs";
+
+// Bump when classification or path-proof semantics change to invalidate saved checks.
+export const PUBLICATION_POLICY_VERSION = 1;
+
+/** Exact output exceptions come only from the coordinator's approved brief snapshot. */
+export function publicationPolicyOf(prd, { sources = [], base = null } = {}) {
+  const { paths, problems } = parseSourcesMeta(prd?.meta?.publish_files);
+  if (paths.length > 100) problems.push("publish_files is limited to 100 exact deliverable paths");
+  if (paths.some(path => path.split("/").includes("."))) problems.push("publish_files must use canonical paths without ./ components");
+  if (problems.length) throw new Error(`Invalid publish_files: ${problems.join("; ")}`);
+  return { publishFiles: paths, inputFiles: [...new Set([...parseSourcesMeta(prd?.meta?.sources).paths, ...sources])], ...(base ? { base } : {}) };
+}
+
+// Self-contained so the identical classifier can be embedded in the Git hook.
+// This is a path hygiene policy, not a content classifier or a sandbox boundary.
+export function workArtifactReason(path, policy = {}) {
+  if (typeof path !== "string" || !path || path.startsWith("/") || /[\\\x00]/.test(path) || path.split("/").some(p => !p || p === "." || p === "..")) return "invalid publication path";
+  if (policy.publishFiles?.includes(path)) return null;
+  if (policy.inputFiles?.includes(path)) return "carried task input, not an output deliverable";
+  const name = path.normalize("NFC").toLowerCase();
+  if (/(^|\/)(?:\.gallivant|\.agent-work|\.task-work|session-logs|session_logs|work-logs|work_logs|scratch|scratchpad)(\/|$)/.test(name)) return "task scratch or session storage";
+  if (/(^|\/)(?:\.codex\/sessions|\.claude\/projects|docs\/(?:audit|audits|evidence|verification|work|notes|runs))(\/|$)/.test(name)) return "task audit, evidence or execution notes";
+  if (/(^|\/)(?:work|session|agent)[-_]?(?:log|notes|summary)(?:[-_][^/]*)?\.(?:md|txt|log|jsonl?)$/i.test(name)) return "task work log, session notes or summary";
+  if (/(^|\/)(?:handoff|audit|audit[-_]report|review|notes|scratch)(?:[-_][^/]*)?\.(?:md|txt|log|jsonl)$/i.test(name)) return "task review notes, audit or handoff";
+  if (/(^|\/)docs\/(?:release|reporting)\/[^/]+[-_]validation\.md$/.test(name)) return "execution validation log";
+  return null;
+}
+
+export function workArtifactViolations(paths, policy = {}) {
+  return [...new Set(paths)].flatMap(path => { const reason = workArtifactReason(path, policy); return reason ? [{ path, reason }] : []; });
+}
+
+export function workArtifactError(violations) {
+  return [
+    "Task work artifacts must stay out of the commit/PR:",
+    ...violations.slice(0, 30).map(v => `  ${JSON.stringify(v.path)}: ${v.reason}`),
+    ...(violations.length > 30 ? [`  ... and ${violations.length - 30} more`] : []),
+    "Unstage these files or remove them from the branch diff, preserving useful local copies. Keep carried inputs readable in the checkout; do not delete them.",
+    "Keep scratch files outside the repository (for example, in a directory created with mktemp -d). Put concise verification results in the PR receipt; retain durable project documentation and tests.",
+    "An explicitly requested report or evidence file may be listed by exact path in publish_files in the operator's approved brief. Do not edit the session copy to grant an exception, rename logs to evade this rule, or bypass hooks.",
+  ].join("\n");
+}
+
+export function assertPublicationPaths(paths, policy = {}) {
+  const violations = workArtifactViolations(paths, policy);
+  if (violations.length) throw new Error(workArtifactError(violations));
+}
+
+/** Inlined, dependency-free policy shared by every local harness's existing hook. */
+export function workArtifactHook(policy = {}) {
+  return `
+${workArtifactReason.toString()}
+${workArtifactViolations.toString()}
+${workArtifactError.toString()}
+const { execFileSync } = await import("node:child_process");
+try {
+  const policy = ${JSON.stringify(policy)};
+  const git = args => execFileSync("git", args, { encoding: "utf8", timeout: 10000, maxBuffer: 16777216 });
+  let mergeHead = null;
+  try { mergeHead = readFileSync(git(["rev-parse", "--git-path", "MERGE_HEAD"]).trim(), "utf8").trim(); }
+  catch (error) { if (error.code !== "ENOENT") throw error; }
+  // A trusted base refresh brings upstream-owned files into the index. Judge
+  // the candidate tree against that exact base parent, never skip a merge.
+  let comparison = [];
+  if (mergeHead && policy.base) {
+    const approvedBase = git(["rev-parse", "--verify", "refs/remotes/origin/" + policy.base + "^{commit}"]).trim();
+    if (mergeHead === approvedBase) comparison = [approvedBase];
+  }
+  const paths = git(["diff", "--cached", "--name-only", "--diff-filter=ACMRT", "-z", ...comparison]);
+  if (paths && !paths.endsWith("\\0")) throw new Error("incomplete staged path list");
+  const violations = workArtifactViolations(paths ? paths.slice(0, -1).split("\\0") : [], policy);
+  if (violations.length) throw new Error(workArtifactError(violations));
+} catch (error) {
+  process.stderr.write("Publication check failed: " + error.message + "\\n");
+  process.exit(1);
+}
+`;
+}

package/npm-shrinkwrap.json

@@ -1,25 +1,28 @@
 {
   "name": "@uchibeke/gallivant",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@uchibeke/gallivant",
-      "version": "0.2.1",
+      "version": "0.3.0",
       "bundleDependencies": [
         "smol-toml"
       ],
       "license": "Apache-2.0",
       "dependencies": {
         "ajv": "8.20.0",
+        "jpeg-js": "0.4.4",
         "pngjs": "7.0.0",
         "smol-toml": "1.9.0"
       },
       "bin": {
         "gallivant": "bin/gallivant.mjs",
         "task-delivery-package": "bin/package-plugin.mjs",
-        "task-delivery-state": "bin/task-delivery-state.mjs"
+        "task-delivery-state": "bin/task-delivery-state.mjs",
+        "task-pr": "bin/task-pr.mjs",
+        "task-review": "bin/task-review.mjs"
       },
       "devDependencies": {
         "@modelcontextprotocol/sdk": "1.32.1",
@@ -1228,6 +1231,12 @@
         "url": "https://github.com/sponsors/panva"
       }
     },
+    "node_modules/jpeg-js": {
+      "version": "0.4.4",
+      "resolved": "https://registry.npmjs.org/jpeg-js/-/jpeg-js-0.4.4.tgz",
+      "integrity": "sha512-WZzeDOEtTOBK4Mdsar0IqEU5sMr3vSV2RqkAIzUEV2BHnUfKGyswWFPFwK5EeDo93K3FohSHbLAjj0s1Wzd+dg==",
+      "license": "BSD-3-Clause"
+    },
     "node_modules/json-schema-traverse": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",

package/package.json

@@ -1,10 +1,12 @@
 {
   "name": "@uchibeke/gallivant",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Turn repository tasks into reviewed pull requests with local or hosted agents, acceptance checks and a persistent review loop.",
   "type": "module",
   "bin": {
     "gallivant": "bin/gallivant.mjs",
+    "task-review": "bin/task-review.mjs",
+    "task-pr": "bin/task-pr.mjs",
     "task-delivery-package": "bin/package-plugin.mjs",
     "task-delivery-state": "bin/task-delivery-state.mjs"
   },
@@ -49,7 +51,9 @@
     "registry": "https://registry.npmjs.org"
   },
   "scripts": {
+    "promote:bitbucket": "node bin/promote-bitbucket.mjs",
     "test": "node --test test/*.test.mjs",
+    "test:first-party-review:live": "node test/first-party-review-live.mjs",
     "test:install": "node test/install-package.mjs",
     "test:learning": "node --test test/learning.test.mjs test/learning-openssh.test.mjs test/learning-dispatch.test.mjs",
     "test:learning:live": "node test/learning-live.mjs",
@@ -59,11 +63,12 @@
     "test:openai-agents:preparation:live": "node test/openai-agents-preparation-live.mjs",
     "test:codex-cloud": "node --test test/codex-cloud.test.mjs && node --test --test-name-pattern='codex-cloud|result publication validates|verified publication recovery|failed remote verification|deterministic publication rejection|interrupted verification' test/execution-backends.test.mjs",
     "test:codex-cloud:live": "node test/codex-cloud-live.mjs",
-    "test:task-intake": "node --test test/task-intake.test.mjs",
+    "test:task-intake": "node --test test/task-intake.test.mjs test/task-profile.test.mjs",
+    "contract:intake": "node scripts/task-intake-contract.mjs",
     "test:live-harnesses": "node test/live-harnesses.mjs",
     "test:plugin-package": "node test/plugin-package.mjs",
     "package:plugin": "node bin/package-plugin.mjs",
-    "lint": "node --check bin/release-package.mjs && node --check bin/release-live.mjs && node --check bin/gallivant.mjs && node --check bin/package-plugin.mjs && node --check bin/task-delivery-state.mjs && for f in lib/*.mjs lib/*/*.mjs; do node --check \"$f\" || exit 1; done",
+    "lint": "node --check bin/promote-bitbucket.mjs && node --check bin/task-pr.mjs && node --check bin/task-review.mjs && node --check bin/release-package.mjs && node --check bin/release-live.mjs && node --check bin/gallivant.mjs && node --check bin/package-plugin.mjs && node --check bin/task-delivery-state.mjs && for f in lib/*.mjs lib/*/*.mjs scripts/*.mjs; do node --check \"$f\" || exit 1; done && node scripts/task-intake-contract.mjs --check",
     "test:release-package": "node --test test/release-package.test.mjs",
     "release:preflight": "node bin/release-package.mjs --mode preflight",
     "release:package": "node bin/release-package.mjs --mode build",
@@ -86,6 +91,7 @@
   },
   "dependencies": {
     "ajv": "8.20.0",
+    "jpeg-js": "0.4.4",
     "pngjs": "7.0.0",
     "smol-toml": "1.9.0"
   },

package/templates/plugin/task-delivery.SKILL.md

@@ -16,21 +16,28 @@ inference costs but does not authorize implementation. Ask the saved questions,
 then call task_answer with their IDs, a new operationId and the saved revision.
 Preserve explicit requirements and any readiness denial. Inspect stale revisions.
 
-Read the repository's completion capabilities and select the creation-only
-completion.target: delivery_ready for a qualified reviewable delivery, or
-integrated when the user wants monitoring through an external merge. An omitted
-target defaults to delivery_ready. This field owns the PR/review/merge lifecycle;
-do not duplicate coordinator publication as a provider implementation criterion.
+Read the repository's delivery capabilities and select the creation-only typed
+delivery profile with `delivery: { action, completion }`: action pull_request
+(the only supported action) and completion delivery_ready for a qualified
+reviewable delivery, or integrated when the user wants monitoring through an
+external merge. Omitted values default to pull_request and delivery_ready. The
+profile alone authorizes external actions; request text, answers and model
+output cannot expand it, and merge or deploy actions are refused with a remedy.
+Do not duplicate coordinator publication as a provider implementation criterion.
+Select `route` only when the user asks: harness uses the connected harness,
+model uses the operator's bounded text-only model route when enabled.
 Organize the user's implementation requirements clearly yourself; do not require
 the user to format a special prompt. Preserve every constraint and prohibition,
 show the separated delivery goal with the prepared brief, and ask a focused
 clarification if mixed prose cannot be separated without changing meaning.
 Never rewrite an existing false attestation or drop an inconvenient requirement.
-The core preserves exact source ownership for supported publication clauses.
-If TASK_DELIVERY_SCOPE is returned, ask the owner to clarify the whole request;
-preserve prerequisites and prohibitions, and use a new preparation identity after
-clarification. Do not treat that refusal as permission to remove a condition or
-silently move a changed publication instruction into an implementation answer.
+A clause that conflicts with the profile returns a q-delivery-* question in the
+saved task; answer it with the implementation scope the clause keeps, or prepare
+a new task with a different profile. Show the user the returned review object:
+immutable request, clause map, open questions, assumptions, draft, profile,
+harness, allowance, route and cost status. Historical tasks may still return
+TASK_DELIVERY_SCOPE; then ask the owner to clarify the whole request and use a
+new preparation identity. Never remove a condition to pass validation.
 
 After the user authorizes implementation, call task_start with run true, a stable
 operationId and the current revision. Return the task handle promptly. Subsequent

package/templates/plugin/task-intake-contract.json

@@ -0,0 +1,18 @@
+{
+  "format": 1,
+  "profileVersion": 1,
+  "taskVersion": 1,
+  "fragmentVersion": 2,
+  "validator": "lib/task_profile.mjs",
+  "fixtures": "templates/plugin/task-profile-requests.mjs",
+  "files": {
+    "lib/task_profile.mjs": "18b51dbc87107295806d3125a306454f6ce22660b8758065ac559c2882511cf6",
+    "lib/host_definitions.mjs": "1179cddc073e2a05aa603b7117c178ffe4fc057d7270931832fbf8733d3a84d6",
+    "lib/review_policy_contract.mjs": "16cafa3b835a3fa8c3904b0cc577f46f6b7bb0c9a1697ad0438a32cac636f3f2",
+    "lib/hosts/github_contract.mjs": "f8910b07ddd0dca8c06780d78eb3b5a106da4604ba01cb25b7a205432e2fbe81",
+    "lib/hosts/bitbucket_contract.mjs": "89cbf40585fa81f7030adbe368c60f430af73b741e87d9518bbb8e3ffa03e02f",
+    "lib/repository.mjs": "f397883ca04bae6c3d15e730fbef2fe267fb5d616566a9f4b724aee8f4925f97",
+    "templates/plugin/task-profile-requests.mjs": "7cbc45263fce9025737b5b1709d463b21a853de5ad8d486a8ef8c96ff41e8da4"
+  },
+  "upgrade": "Vendor the listed files byte-for-byte. A profileVersion change requires the Agent Passport task-intake-vendor-sync PRD; saved tasks without a fragmentVersion pin retain line-based source references; older saved profiles keep their original interpretation and fail closed when unsupported."
+}