@zq-silk/yui 0.12.3 → 0.12.4

package/dist/cli/commandCatalog.js

@@ -784,8 +784,8 @@ const taskChildren = [
             {
                 name: "retire",
                 summary: "Retire an incorrect historical Agent Run without deleting its audit record.",
-                usage: "yui task run retire <task>/<run> --reason <text>",
-                options: ["--reason"]
+                usage: "yui task run retire <task>/<run> --reason <text> [--expected-progress-at <timestamp>] [--agent-id <id>] [--adapter-id <id>] [--native-session-id <id>] [--launch-id <id>]",
+                options: ["--reason", "--expected-progress-at", "--progress-at", "--agent-id", "--adapter-id", "--native-session-id", "--launch-id"]
             }
         ]
     },

package/dist/commands/durableJobCommands.js

@@ -1,7 +1,7 @@
 import { usageError } from "../errors/cliError.js";
 import { ensureFileTaskController } from "../controller/clientRuntime.js";
 import { acknowledgeDurableJob, cancelDurableJob, getDurableJob, startDurableJob } from "../controller/jobClient.js";
-import { resolveJobCaller, taskActor } from "./taskActor.js";
+import { resolveJobCaller, taskLocalActor } from "./taskActor.js";
 /**
  * The textual `--owner` forms accepted by `job start`. The public help text in
  * the command catalog must document exactly these forms.
@@ -102,14 +102,14 @@ async function acknowledgeJob(args, options) {
     // rr5/f5(a): only the Task Leader may acknowledge an
     // unknown-needs-attention job. A non-Leader (Worker, Operator, or plain
     // user) is rejected at the CLI boundary.
-    const actor = taskActor(options.environment, ref.taskId);
+    if (options.store === undefined) {
+        throw usageError("job acknowledge requires a Task store to resolve the Leader assertion.");
+    }
+    const actor = taskLocalActor(options.store, options.environment, ref.taskId, options.home);
     if (actor !== "leader") {
         throw usageError("Only the Task Leader may acknowledge a DurableJob: "
             + `${ref.taskId}.`);
     }
-    if (options.store === undefined) {
-        throw usageError("job acknowledge requires a Task store to resolve the Leader assertion.");
-    }
     // Carry the full managed task caller, including its ephemeral launch key.
     // A durable leaderAssertion by itself is intentionally not sufficient.
     const caller = resolveJobCaller(options.environment, ref.taskId, options.store);

package/dist/commands/taskActor.js

@@ -30,6 +30,24 @@ export function taskActor(environment, taskId) {
     }
     return "user";
 }
+/**
+ * Resolve authority for a recoverable Task-local mutation. A managed Leader
+ * does not gain that authority from long-lived process environment alone: the
+ * command must carry the exact current Turn assertion and it must still match
+ * the durable active Run, receipt, Role binding, native Session, and Home.
+ * Plain-user and global-Operator behavior remains unchanged.
+ */
+export function taskLocalActor(store, environment, taskId, yuiHome) {
+    const actor = taskActor(environment, taskId);
+    if (actor !== "leader")
+        return actor;
+    const assertion = leaderActionAssertion(environment ?? {});
+    if (assertion === undefined || assertion === "invalid"
+        || taskLeaderActionRunId(store, taskId, environment, yuiHome) === undefined) {
+        throw usageError(`Task-local Leader authority requires the exact current-Turn assertion: ${taskId}.`);
+    }
+    return actor;
+}
 export function projectActor(environment) {
     const env = environment ?? {};
     if (env.YUI_SESSION_SCOPE === "task")