@xopcai/xopc 0.0.403 → 0.0.405

package/dist/src/gateway/image-generation-setup.js

@@ -1,11 +1,11 @@
 import { normalizeAgentId } from "../agent-catalog/id.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
 import { init_agent_scope } from "../agent/agent-scope.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
 import { resolveEffectiveAgentConfigForAgent } from "../config/agent-profile.js";
 import { fetchWithTimeoutGuarded } from "../media-shared/http/provider-http.js";
 import "../media-shared/http/index.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { getImageGenerationProvider, listImageGenerationProvidersSummary } from "../agent/image/generation/provider-registry.js";
 //#region src/gateway/image-generation-setup.ts
 init_repository();

package/dist/src/gateway/security/audit.js

@@ -90,12 +90,12 @@ function collectGatewayConfigFindings(params) {
 			detail: "Token consists of a single repeated character, making it trivially guessable.",
 			remediation: "Generate a cryptographically random token: `openssl rand -hex 32`."
 		});
-		if (!process.env.XOPC_GATEWAY_TOKEN) findings.push({
+		if (params.auth.tokenSource === "generated") findings.push({
 			checkId: "gateway.auth.auto_generated_token",
 			severity: "info",
 			title: "Gateway token was auto-generated",
-			detail: "No explicit XOPC_GATEWAY_TOKEN set. The token was auto-generated and will change on each restart.",
-			remediation: "Set XOPC_GATEWAY_TOKEN environment variable for a stable token."
+			detail: "Neither gateway.auth.token nor XOPC_GATEWAY_TOKEN is set. The token was auto-generated and will change on each restart.",
+			remediation: "Save gateway.auth.token in the configuration or set XOPC_GATEWAY_TOKEN for a stable token."
 		});
 	}
 	if (params.corsOrigins?.includes("*")) findings.push({

package/dist/src/gateway/service/run-gateway-agent.js

@@ -103,6 +103,7 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 		taskRun = TaskRunCoordinator.start({
 			runId: runOptions?.taskRunId ?? runId,
 			context: executionContext,
+			inputOrigin: origin,
 			fallbackObjective: message,
 			timeoutMs: executionContext.taskId ? resolveAgentTurnTimeoutMs(deps.config, webchatConversationId) : void 0
 		});

package/dist/src/gateway/service.js

@@ -103,10 +103,6 @@ import { DiscussionSealer } from "../discussions/sealer.js";
 import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
-import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
-import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
-import { HomeIntelligenceHost } from "../home-intelligence/host.js";
-import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
@@ -167,6 +163,10 @@ import { TaskMainUpdateDecisionService } from "../tasks/task-main-update-decisio
 import { selectTaskMainUpdateAttempt, submitAndConfirmTaskMainUpdate } from "../tasks/task-main-update-input.js";
 import { checkAppContextAccess, prepareAppContext } from "./service/app-context-access.js";
 import { applyAutomaticVoiceLanguage, inferProductLanguageFromEnvironment, initializeVoiceDefaults } from "../voice/language-profile.js";
+import { HomeAdviceGenerator } from "../home-intelligence/generator.js";
+import { HomeIntelligenceHost } from "../home-intelligence/host.js";
+import { HomeSnapshotBuilder } from "../home-intelligence/snapshot.js";
+import { HomeCapabilityPreflightService } from "../home-intelligence/capability-preflight.js";
 import crypto from "node:crypto";
 //#region src/gateway/service.ts
 init_session_repository();

package/dist/src/gateway/xopc-cloud-capability-setup.js

@@ -1,13 +1,13 @@
 import "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { ConfigSchema, init_schema } from "../config/schema.js";
 import { init_model_policy, isComputerModel, isDedicatedComputerProfile } from "../computer/model-policy.js";
 import { voiceSupportsMode } from "../../packages/realtime-protocol/src/voice-catalog.js";
 import { init_voice } from "../../packages/realtime-protocol/src/voice.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../providers/model-catalog-store.js";
 import { compareCatalogModels } from "../providers/model-catalog-ranking.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { prepareUpdateGlobalDefaults } from "./global-defaults-admin.js";
 //#region src/gateway/xopc-cloud-capability-setup.ts
 init_voice();

package/dist/src/home-intelligence/host.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { homePatternKey } from "./strategy.js";
+import { HomeAdvicePolicy } from "./policy.js";
 import { HomeIntelligenceRepository } from "./repository.js";
 import { HomeOpportunityApplicationService } from "./application-service.js";
-import { HomeAdvicePolicy } from "./policy.js";
-import { HomeAdviceBudgetExceededError, isHomeProseLocalized } from "./generator.js";
 import { buildHomeOpportunityNotification } from "./notification.js";
 import { createHash } from "node:crypto";
 //#region src/home-intelligence/host.ts

package/dist/src/imports/importService.js

@@ -11,8 +11,8 @@ import { scanLocal } from "./scanner.js";
 import { dirname, join } from "node:path";
 import { existsSync, lstatSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
-import yaml from "js-yaml";
 import lockfile from "proper-lockfile";
+import yaml from "js-yaml";
 //#region src/imports/importService.ts
 init_write_file_atomic();
 init_logger();

package/dist/src/local-apps/service.js

@@ -5,10 +5,10 @@ import { currentOperationId, init_operation_context } from "../infra/operation-c
 import { afterSqliteCommit, init_transaction, runSqliteWriteTransaction } from "../storage/sqlite/transaction.js";
 import { ExtensionCapabilityBindingsSchema, extensionCapabilityPermissions } from "../../packages/gateway-contract/src/extension-capabilities.js";
 import { init_src } from "../../packages/gateway-contract/src/index.js";
-import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { init_paths, resolveExtensionsDir } from "../config/paths.js";
 import { slugifyProjectName } from "../projects/project-store.js";
 import { LocalAppStore } from "./store.js";
+import { CapabilityError } from "../capabilities/runtime/errors.js";
 import { DomainOutboxDispatcher } from "../infra/domain-outbox-dispatcher.js";
 import { validateLocalAppCapabilityContracts } from "./capabilities/contracts.js";
 import { buildLocalAppFixGuidance } from "./fix-guidance.js";

package/dist/src/personal-agent/service.js

@@ -4,13 +4,13 @@ import { init_config_repository, setSessionConfig } from "../storage/sqlite/conf
 import { ResponsePreferencesSchema } from "../agent-config/schema.js";
 import { init_agent_config } from "../agent-config/index.js";
 import { AgentCatalogRepository, init_repository } from "../agent-catalog/repository.js";
-import { AgentCatalogService } from "../agent-catalog/service.js";
 import { createConversation, init_conversation_repository } from "../storage/sqlite/conversation-repository.js";
 import { getAvailableModels, init_providers } from "../providers/index.js";
 import { DEFAULT_PERSONAL_PREFERENCES, getPersonalAgent, personalAgentId } from "./repository.js";
 import { PERSONAL_MAIN_TOOL_IDS, PERSONAL_READ_TOOL_ALIASES } from "./policy.js";
 import { getModelThinking } from "../providers/model-thinking.js";
 import { personalInstructions, upgradePersonalInstructions } from "./prompts.js";
+import { AgentCatalogService } from "../agent-catalog/service.js";
 import { completePersonalOnboarding } from "./onboarding.js";
 import { z } from "zod";
 //#region src/personal-agent/service.ts

package/dist/src/providers/prompt-cache-lifecycle.d.ts

@@ -4,6 +4,6 @@ export declare function resolvePromptCacheTtlMs(model: Model<Api>, policy: Promp
 export declare function recordPromptCacheTouch(conversationId: string, model: Model<Api>, usage: {
     cacheRead?: number;
     cacheWrite?: number;
-}, now?: number): void;
+} | null | undefined, now?: number): void;
 export declare function isPromptCacheExpired(conversationId: string, model: Model<Api>, policy: PromptCachePolicy, now?: number): boolean;
 export declare function clearPromptCacheTouches(): void;

package/dist/src/providers/prompt-cache-lifecycle.js

@@ -9,7 +9,7 @@ function resolvePromptCacheTtlMs(model, policy) {
 	return policy.lifetime === "long" ? 60 * 6e4 : 5 * 6e4;
 }
 function recordPromptCacheTouch(conversationId, model, usage, now = Date.now()) {
-	if ((usage.cacheRead ?? 0) <= 0 && (usage.cacheWrite ?? 0) <= 0) return;
+	if ((usage?.cacheRead ?? 0) <= 0 && (usage?.cacheWrite ?? 0) <= 0) return;
 	const key = scopeKey(conversationId, model);
 	cacheTouchByScope.delete(key);
 	cacheTouchByScope.set(key, now);

package/dist/src/runtime-tools/archive.js

@@ -1,8 +1,8 @@
 import { RuntimeError } from "./errors.js";
 import { isAbsolute, join, posix, relative, resolve } from "node:path";
 import { spawn } from "node:child_process";
-import { lstat, mkdir, readdir, readlink, rename, rm, stat } from "node:fs/promises";
 import AdmZip from "adm-zip";
+import { lstat, mkdir, readdir, readlink, rename, rm, stat } from "node:fs/promises";
 //#region src/runtime-tools/archive.ts
 const MAX_ARCHIVE_ENTRIES = 5e4;
 const MAX_TAR_OUTPUT_BYTES = 16 * 1024 * 1024;

package/dist/src/storage/sqlite/migrations/258_task_phase_changes.sql

@@ -0,0 +1,20 @@
+ALTER TABLE tasks ADD COLUMN manual_phase_revision INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE tasks ADD COLUMN automatic_phase_revision INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE task_runs ADD COLUMN manual_phase_revision INTEGER NOT NULL DEFAULT 0;
+
+CREATE TABLE task_phase_changes (
+  id TEXT PRIMARY KEY,
+  task_id TEXT NOT NULL REFERENCES tasks(task_id) ON DELETE CASCADE,
+  from_phase TEXT NOT NULL,
+  to_phase TEXT NOT NULL,
+  from_resolution TEXT,
+  to_resolution TEXT,
+  actor_json TEXT NOT NULL,
+  source TEXT NOT NULL,
+  operation_id TEXT,
+  run_id TEXT,
+  task_version INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  UNIQUE(task_id, task_version)
+);
+CREATE INDEX idx_task_phase_changes_task ON task_phase_changes(task_id, task_version);

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 217;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 257;
+export declare const XOPC_DB_SCHEMA_VERSION = 258;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -48,7 +48,7 @@ function applySingleMigration(db, migration) {
 function applyPendingMigrations(db, options = {}) {
 	db.function("xopc_memory_search_text", { deterministic: true }, (value) => memorySearchText(String(value ?? "")));
 	db.function("xopc_operation_id", () => currentOperationId() ?? null);
-	const targetVersion = options.targetVersion ?? 257;
+	const targetVersion = options.targetVersion ?? 258;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (!options.migrationsDir && currentVersion < 217) throw new DatabaseSchemaTooOldError(currentVersion, 217);
@@ -65,7 +65,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 257;
+	const appVersion = options.targetVersion ?? 258;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,
@@ -105,7 +105,7 @@ var init_runner = __esmMin((() => {
 	init_errors();
 	log = createLogger("Sqlite:Migrations");
 	XOPC_DB_BASELINE_SCHEMA_VERSION = 217;
-	XOPC_DB_SCHEMA_VERSION = 257;
+	XOPC_DB_SCHEMA_VERSION = 258;
 }));
 //#endregion
 init_runner();

package/dist/src/storage/sqlite/schema.js

@@ -26,7 +26,7 @@ function ensureXopcDatabaseSchema(db) {
 		bootstrapFreshDatabase(db);
 		currentVersion = 217;
 	}
-	applyPendingMigrations(db, { targetVersion: 257 });
+	applyPendingMigrations(db, { targetVersion: 258 });
 }
 var init_schema = __esmMin((() => {
 	init_sql_assets();

package/dist/src/tasks/capabilities/read.js

@@ -2,10 +2,10 @@ import { ProductReadContracts } from "../../../packages/gateway-contract/src/cap
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { TaskRepository, init_task_repository } from "../task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../task-run-repository.js";
-import { CapabilityError } from "../../capabilities/runtime/errors.js";
-import { defineReadCapability } from "../../capabilities/runtime/dispatcher.js";
 import { TaskReadModelProjector } from "../task-read-model-projector.js";
 import { TaskConversationRepository } from "../task-conversation-repository.js";
+import { CapabilityError } from "../../capabilities/runtime/errors.js";
+import { defineReadCapability } from "../../capabilities/runtime/dispatcher.js";
 import { TaskContextRepository } from "../task-context-repository.js";
 import { TaskDependencyService } from "../task-dependency-service.js";
 import { TaskCriterionReviewRepository } from "../task-criterion-review-repository.js";
@@ -105,6 +105,7 @@ function registerTaskReadCapabilities(dispatcher) {
 			return {
 				ok: true,
 				...projector.project(task),
+				phaseChanges: tasks.phaseChanges(id),
 				waits: runs.listActiveWaits(id),
 				runs: runs.listByTask(id),
 				receipts: runs.listReceipts(id),

package/dist/src/tasks/capabilities/write.js

@@ -2,9 +2,9 @@ import { TaskCommandRequestSchema, TaskCreateRequestSchema, TaskDetailResponseSc
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
 import { TaskRepository, init_task_repository } from "../task-repository.js";
 import { TaskRunRepository, init_task_run_repository } from "../task-run-repository.js";
+import { resolveTaskLocale } from "../task-language.js";
 import { CapabilityError } from "../../capabilities/runtime/errors.js";
 import { defineAtomicCapability } from "../../capabilities/runtime/dispatcher.js";
-import { resolveTaskLocale } from "../task-language.js";
 import { resolveProjectAgentId } from "../../projects/project-agent.js";
 import { resolveResponseLanguageForSession } from "../../agent/prompt/response-language.js";
 import { TaskApplicationService } from "../task-application-service.js";
@@ -101,14 +101,14 @@ function registerTaskWriteCapabilities(dispatcher, deps) {
 				idempotencyKey: context.idempotencyKey,
 				actor: context.actor
 			});
-			if (result.ok && input.command.type === "close" && input.command.resolution === "done") new TaskSignalService().dependencyClosed(input.taskId);
+			if (result.ok && result.model.task.phase === "closed" && result.model.task.resolution === "done") new TaskSignalService().dependencyClosed(input.taskId);
 			return result;
 		},
 		async afterCommit(result, input) {
 			if (!result.ok) return;
 			const command = input.command;
 			const denied = command.type === "resolve_wait" && command.resolution?.kind === "task_approval" && command.resolution.decision === "deny";
-			if (command.type === "add_wait" && command.wait.kind === "paused" || command.type === "close" || denied) {
+			if (command.type === "add_wait" && command.wait.kind === "paused" || command.type === "close" && command.resolution !== "done" || denied) {
 				const activeRun = new TaskRunRepository().getActiveRoot(input.taskId);
 				if (activeRun?.conversationId && new TaskRepository().get(input.taskId)?.version === result.model.task.version) await deps.abortConversation?.(activeRun.conversationId);
 			}

package/dist/src/tasks/task-application-service.d.ts

@@ -1,4 +1,4 @@
-import type { ActorRef, TaskCommand, TaskCreateRequest, TaskRunReceipt } from '@xopcai/gateway-contract';
+import type { ActorRef, TaskCommand, TaskChangeSource, TaskCreateRequest, TaskRunReceipt } from '@xopcai/gateway-contract';
 import { type TaskReadModel } from './task-read-model-projector.js';
 import type { TurnContextRef } from '../agent/source-context/types.js';
 export type TaskApplicationResult = {
@@ -37,6 +37,7 @@ export declare class TaskApplicationService {
         command: TaskCommand;
         actor?: ActorRef;
         triggerContext?: Record<string, unknown>;
+        source?: TaskChangeSource;
     }): TaskApplicationResult;
     completeRun(input: {
         runId: string;

package/dist/src/tasks/task-application-service.js

@@ -270,7 +270,10 @@ var TaskApplicationService = class {
 			let current = task.phase === "closed" ? this.#tasks.setLifecycle({
 				taskId: task.id,
 				expectedVersion: task.version,
-				phase: "ready"
+				phase: "ready",
+				actor,
+				source: "api",
+				operationId: input.idempotencyKey
 			}) : task;
 			const contract = task.contract;
 			const originalBody = db.prepare("SELECT original_body FROM task_work_revisions WHERE task_id = ? AND original_body IS NOT NULL ORDER BY contract_version LIMIT 1").get(task.id);
@@ -305,6 +308,7 @@ var TaskApplicationService = class {
         VALUES (?, ?, ?, ?, ?, ?, (SELECT request_input_id FROM task_origin_links WHERE task_id = ?), ?, ?, ?, ?, ?)`).run(randomUUID(), task.id, current.latestContractVersion, baseline.deliveryId, input.baselineVersion, entry.id, task.id, input.idempotencyKey, hash, JSON.stringify(input.supersedesEntryIds ?? []), originalBody ? null : task.body ?? contract.objective, Date.now());
 			db.prepare("UPDATE task_sessions SET status = 'superseded', ended_at = ? WHERE task_id = ? AND role = 'execution' AND status = 'active'").run(Date.now(), task.id);
 			db.prepare("UPDATE task_conversation_state SET active_conversation_id = NULL, current_executor_agent_id = NULL, status = 'idle', updated_at = ? WHERE task_id = ?").run(Date.now(), task.id);
+			this.#tasks.authorizeAutomaticPhase(task.id);
 			const allocation = new TaskAllocationRepository();
 			const previous = allocation.get(task.id);
 			if (previous) db.prepare(`UPDATE task_allocations SET id = ?, status = 'pending', attempts = 0, selected_agent_id = NULL,
@@ -350,18 +354,44 @@ var TaskApplicationService = class {
 			ok: true,
 			model
 		};
+		if (actor.kind !== "user" && [
+			"move",
+			"mark_ready",
+			"request_review",
+			"close",
+			"reopen"
+		].includes(input.command.type) && !this.#tasks.automaticStartAllowed(task.id)) return {
+			ok: false,
+			reason: "blocked",
+			model
+		};
 		return runSqliteWriteTransaction((db) => {
+			const lifecycle = (phase, resolution) => this.lifecycle(task.id, task.version, phase, resolution, {
+				actor,
+				source: input.source ?? (actor.kind === "user" ? "api" : "runtime"),
+				operationId: input.idempotencyKey,
+				manual: actor.kind === "user",
+				runId: this.#runs.getActiveRoot(task.id)?.id
+			});
 			let result;
 			switch (input.command.type) {
 				case "move":
-					result = task.phase !== "closed" && task.phase !== input.command.phase && !this.#runs.getActiveRoot(task.id) && this.#runs.listActiveWaits(task.id).length === 0 ? this.lifecycle(task.id, task.version, input.command.phase) : {
+					if (actor.kind !== "user" && input.command.phase === "closed" && (input.command.resolution ?? "done") === "done" && (!new TaskCriterionReviewRepository().allPassed(task) || this.#runs.getActiveRoot(task.id) || this.#runs.listActiveWaits(task.id).length)) {
+						result = {
+							ok: false,
+							reason: "blocked",
+							model
+						};
+						break;
+					}
+					result = task.phase !== input.command.phase ? lifecycle(input.command.phase, input.command.phase === "closed" ? input.command.resolution ?? "done" : void 0) : {
 						ok: false,
 						reason: "invalid_transition",
 						model
 					};
 					break;
 				case "mark_ready":
-					result = task.phase === "backlog" ? this.lifecycle(task.id, task.version, "ready") : {
+					result = task.phase === "backlog" ? lifecycle("ready") : {
 						ok: false,
 						reason: "invalid_transition",
 						model
@@ -404,21 +434,21 @@ var TaskApplicationService = class {
 					});
 					break;
 				case "request_review":
-					result = task.phase === "active" && !this.#runs.getActiveRoot(task.id) && this.#runs.listActiveWaits(task.id).length === 0 ? this.lifecycle(task.id, task.version, "review") : {
+					result = task.phase === "active" && !this.#runs.getActiveRoot(task.id) && this.#runs.listActiveWaits(task.id).length === 0 ? lifecycle("review") : {
 						ok: false,
 						reason: "invalid_transition",
 						model
 					};
 					break;
 				case "close":
-					result = input.command.resolution === "done" && (!new TaskCriterionReviewRepository().allPassed(task) || this.#runs.getActiveRoot(task.id) !== void 0 || this.#runs.listActiveWaits(task.id).length > 0) ? {
+					result = actor.kind !== "user" && input.command.resolution === "done" && (!new TaskCriterionReviewRepository().allPassed(task) || this.#runs.getActiveRoot(task.id) !== void 0 || this.#runs.listActiveWaits(task.id).length > 0) ? {
 						ok: false,
 						reason: "blocked",
 						model
-					} : this.lifecycle(task.id, task.version, "closed", input.command.resolution);
+					} : lifecycle("closed", input.command.resolution);
 					break;
 				case "reopen":
-					result = task.phase === "closed" ? this.lifecycle(task.id, task.version, input.command.phase) : {
+					result = task.phase === "closed" ? lifecycle(input.command.phase) : {
 						ok: false,
 						reason: "invalid_transition",
 						model
@@ -460,13 +490,21 @@ var TaskApplicationService = class {
 						reason: "not_found",
 						model
 					};
-					else if (wait.status !== "active" || task.phase === "closed" || wait.condition.type === "connection") result = {
+					else if (wait.status !== "active" || task.phase === "closed" && task.resolution !== "done" || wait.condition.type === "connection") result = {
 						ok: false,
 						reason: "invalid_transition",
 						model
 					};
 					else {
 						const response = input.command.resolution;
+						if (wait.kind === "approval" && response?.kind !== "task_approval" || wait.kind === "user_input" && response?.kind !== "user_answer") {
+							result = {
+								ok: false,
+								reason: "invalid_transition",
+								model
+							};
+							break;
+						}
 						if (response?.kind === "task_approval") {
 							if (actor.kind !== "user" || wait.kind !== "approval" || typeof wait.condition.capability !== "string" || response.decision !== "approve" && response.decision !== "deny") {
 								result = {
@@ -537,7 +575,7 @@ var TaskApplicationService = class {
 							resolution: input.command.resolution
 						});
 						const executor = TaskExecutorSelectionSchema.safeParse(wait.condition.executor);
-						result = response?.kind === "task_approval" && executor.success && !this.#runs.getActiveRoot(task.id) && this.#runs.listActiveWaits(task.id).length === 0 ? this.start(task.id, task.version, executor.data, {
+						result = task.phase !== "closed" && response?.kind === "task_approval" && executor.success && !this.#runs.getActiveRoot(task.id) && this.#runs.listActiveWaits(task.id).length === 0 ? this.start(task.id, task.version, executor.data, {
 							idempotencyKey: input.idempotencyKey,
 							actor,
 							correlationId: input.idempotencyKey
@@ -606,6 +644,8 @@ var TaskApplicationService = class {
 					title: result.model.task.title
 				},
 				taskId: task.id,
+				actor,
+				source: input.source ?? (actor.kind === "user" ? "api" : "runtime"),
 				from: task.phase,
 				to: result.model.task.phase,
 				resolution: result.model.task.resolution,
@@ -647,7 +687,7 @@ var TaskApplicationService = class {
 			};
 			const task = this.#tasks.require(run.taskId);
 			const activeConversationId = new TaskConversationRepository().getState(task.id)?.activeConversationId;
-			if (run.parentRunId || task.phase === "closed" || this.#runs.listActiveWaits(task.id).length > 0 || run.conversationId && activeConversationId && run.conversationId !== activeConversationId || run.contractVersion !== task.latestContractVersion) {
+			if (run.parentRunId || task.phase === "closed" && task.resolution !== "done" || this.#runs.listActiveWaits(task.id).length > 0 || run.conversationId && activeConversationId && run.conversationId !== activeConversationId || run.contractVersion !== task.latestContractVersion) {
 				enqueueTaskChangedEvent(db, {
 					taskId: task.id,
 					projectId: task.projectId,
@@ -671,6 +711,19 @@ var TaskApplicationService = class {
 				idempotencyKey: `task-run-receipt:${run.id}`
 			});
 			if (input.receipt.status === "succeeded" || input.receipt.status === "failed") new TaskResultDeliveryRepository().enqueue(run.id, input.receipt.summary, input.receipt.status, input.resultText);
+			if (!this.#tasks.runPhaseUnchanged(task.id, run.id) || task.phase === "closed") {
+				enqueueTaskChangedEvent(db, {
+					taskId: task.id,
+					projectId: task.projectId,
+					version: task.version,
+					changedFields: ["runs", "receipts"],
+					source: "runtime"
+				});
+				return {
+					ok: true,
+					model: this.#projector.project(task)
+				};
+			}
 			if (input.receipt.status !== "succeeded") {
 				const model = this.#projector.project(task);
 				if (!input.suppressAttention) enqueueTaskAttentionRequiredEvent(db, {
@@ -705,6 +758,9 @@ var TaskApplicationService = class {
 			const updated = this.#tasks.setLifecycle({
 				taskId: task.id,
 				expectedVersion: task.version,
+				actor: input.actor ?? { kind: "system" },
+				source: "runtime",
+				runId: run.id,
 				phase,
 				...phase === "closed" ? { resolution: "done" } : {}
 			});
@@ -715,6 +771,8 @@ var TaskApplicationService = class {
 					title: updated.title
 				},
 				taskId: updated.id,
+				actor: input.actor ?? { kind: "system" },
+				source: "runtime",
 				from: task.phase,
 				to: updated.phase,
 				resolution: updated.resolution,
@@ -750,6 +808,11 @@ var TaskApplicationService = class {
 			ok: false,
 			reason: "not_found"
 		};
+		if (options.actor.kind !== "user" && !this.#tasks.automaticStartAllowed(taskId)) return {
+			ok: false,
+			reason: "blocked",
+			model: this.#projector.project(task)
+		};
 		const allocation = new TaskAllocationRepository().get(taskId);
 		if (allocation && allocation.status !== "assigned" && !(options.actor.kind === "system" && options.actor.id === "task-router")) return {
 			ok: false,
@@ -805,6 +868,7 @@ var TaskApplicationService = class {
 				model: this.#projector.get(taskId)
 			};
 		}
+		if (options.actor.kind === "user") this.#tasks.authorizeAutomaticPhase(taskId);
 		const run = this.#runs.create({
 			taskId,
 			executorKind: executor.kind,
@@ -823,7 +887,10 @@ var TaskApplicationService = class {
 		const active = task.phase === "active" ? task : this.#tasks.setLifecycle({
 			taskId,
 			expectedVersion: task.version,
-			phase: "active"
+			phase: "active",
+			actor: options.actor,
+			source: "runtime",
+			runId: run.id
 		});
 		if (!active) throw new Error("Task changed while its run was being created");
 		return {
@@ -832,8 +899,9 @@ var TaskApplicationService = class {
 			runId: run.id
 		};
 	}
-	lifecycle(taskId, expectedVersion, phase, resolution) {
+	lifecycle(taskId, expectedVersion, phase, resolution, metadata = {}) {
 		const updated = this.#tasks.setLifecycle({
+			...metadata,
 			taskId,
 			expectedVersion,
 			phase,

package/dist/src/tasks/task-collaboration-delivery.js

@@ -25,7 +25,8 @@ var TaskCollaborationDelivery = class {
 		for (const pending of this.#entries.pendingDeliveries(limit)) {
 			const { entry, clientMessageId } = pending;
 			const task = this.#tasks.get(entry.taskId);
-			if (!task || task.phase === "closed") {
+			const answersExistingWait = entry.kind === "answer" && entry.causationId && this.#runs.listActiveWaits(entry.taskId).some((wait) => wait.condition.collaborationEntryId === entry.causationId);
+			if (!task || task.phase === "closed" && (task.resolution !== "done" || !answersExistingWait)) {
 				this.#entries.markStale(entry.id);
 				continue;
 			}

package/dist/src/tasks/task-context-assembler.js

@@ -28,8 +28,9 @@ function taskIdForSession(conversationId) {
 function getTaskExecutionBrief(taskId) {
 	if (!isXopcDatabaseOpen()) return void 0;
 	const task = new TaskRepository().get(taskId);
-	if (!task?.contract || task.phase === "closed") return void 0;
+	if (!task?.contract) return void 0;
 	const runs = new TaskRunRepository();
+	if (task.phase === "closed" && (task.resolution !== "done" || !runs.getActiveRoot(taskId))) return void 0;
 	if (runs.listActiveWaits(taskId).some((wait) => wait.kind === "paused")) return void 0;
 	const latestRun = runs.getLatestRoot(taskId);
 	const latestReceipt = latestRun?.contractVersion === task.latestContractVersion ? runs.getReceipt(latestRun.id) : void 0;

package/dist/src/tasks/task-read-model-projector.js

@@ -76,7 +76,7 @@ var TaskReadModelProjector = class {
 			task,
 			allocation,
 			operationalState: task.phase !== "closed" && !paused && !activeRun && waits.length === 0 && allocation ? allocating ? "allocating" : allocation.status === "blocked" ? "blocked" : allocation.status === "failed" ? "failed" : executionState : executionState,
-			attention: task.phase === "closed" || paused ? [] : attention,
+			attention: task.phase === "closed" && (task.resolution !== "done" || waits.length === 0) || paused ? [] : attention,
 			allowedCommands,
 			...revisionBaseline ? { revisionBaseline } : {}
 		};
@@ -93,7 +93,7 @@ var TaskReadModelProjector = class {
 		};
 	}
 	operationalState(input) {
-		if (input.task.phase === "closed") return "idle";
+		if (input.task.phase === "closed" && (input.task.resolution !== "done" || !input.activeRun && input.waits.length === 0)) return "idle";
 		if (input.waits.some((wait) => wait.kind === "paused")) return "waiting";
 		if (input.activeRun?.status === "running") return "running";
 		if (input.activeRun?.status === "verifying") return "verifying";
@@ -107,10 +107,18 @@ var TaskReadModelProjector = class {
 		return "idle";
 	}
 	allowedCommands(task, activeRunStatus, hasWaits, paused) {
-		if (task.phase === "closed") return ["reopen"];
-		const commands = ["revise_contract", "close"];
+		if (task.phase === "closed") return [
+			"move",
+			"reopen",
+			...activeRunStatus ? ["close"] : [],
+			...task.resolution === "done" && hasWaits ? ["resolve_wait"] : []
+		];
+		const commands = [
+			"move",
+			"revise_contract",
+			"close"
+		];
 		if (!paused) commands.push("add_wait");
-		if (!activeRunStatus && !hasWaits) commands.unshift("move");
 		if (hasWaits) commands.unshift("resolve_wait");
 		if (task.phase === "backlog") commands.unshift("mark_ready");
 		if (!activeRunStatus && !hasWaits && task.phase !== "backlog") commands.unshift("start");

package/dist/src/tasks/task-repository.d.ts

@@ -1,4 +1,4 @@
-import type { ActorRef, Task, TaskAcceptancePolicy, TaskContract, TaskPhase, TaskPriority, TaskResolution } from '@xopcai/gateway-contract';
+import type { ActorRef, Task, TaskAcceptancePolicy, TaskContract, TaskPhase, TaskPriority, TaskResolution, TaskPhaseChange, TaskChangeSource } from '@xopcai/gateway-contract';
 export type TaskExecutionSource = 'chat' | 'cli' | 'cron' | 'workflow' | 'channel' | 'api';
 export type TaskUiLocale = 'en' | 'zh';
 export type TaskAggregate = Task;
@@ -65,7 +65,17 @@ export declare class TaskRepository {
         phase: TaskPhase;
         resolution?: TaskResolution;
         now?: number;
+        actor?: ActorRef;
+        source?: TaskChangeSource;
+        operationId?: string;
+        runId?: string;
+        manual?: boolean;
     }): TaskAggregate | undefined;
+    phaseChanges(taskId: string): TaskPhaseChange[];
+    /** A new explicit execution authorizes automation for the current manual revision. */
+    authorizeAutomaticPhase(taskId: string): void;
+    automaticStartAllowed(taskId: string): boolean;
+    runPhaseUnchanged(taskId: string, runId: string): boolean;
     reorder(input: {
         taskId: string;
         expectedVersion: number;