@zq-silk/yui 0.15.11 → 0.16.0

package/ARCHITECTURE.md

@@ -93,8 +93,9 @@ meaning of the report. See [result consumption](docs/agent-result-consumption.md
 ## Planning, workspaces and resources
 
 Draft contains planning facts and Project bindings, not an adopted delivery
-workspace. Its private planning directory is outside the control Home and
-delivery trees. Planning Sessions capture `planning` authority. The Leader can
+workspace. Its private planning directory is under
+`<YUI_HOME>/runtime/task-runtimes/planning`, separate from durable control data
+and delivery trees. Planning Sessions capture `planning` authority. The Leader can
 persist an activation request during a Run or ordinary discussion and return;
 native quiescence releases the intent for current-authority and resource checks.
 
@@ -169,8 +170,9 @@ Leader management is limited to its Task; executable code still requires exact
 Operator-issued grants. Plugin validation is not a security certification.
 
 CLI contributions and controlled Web panels are projections of the Registry.
-Web is loopback-only and Controller-owned; browser credentials do not become
-Operator authority. See [Plugin SDK](docs/plugin-sdk.md) and
+Web is loopback-only and Controller-owned. Its authenticated local-user controls
+share CLI domain operations; query panels remain read-only and cannot borrow
+that user authority for mutations or plugin management. See [Plugin SDK](docs/plugin-sdk.md) and
 [capabilities and resources](docs/architecture/capabilities-and-resources.md).
 
 ## Persistence, completion and operation
@@ -181,8 +183,11 @@ Homes; malformed state is diagnosed, not automatically repaired.
 
 Completion freezes the delivery result and checks applicable acceptance,
 integration and review contracts. It is distinct from publication, verified
-remote merge, physical quiescence and archive. Archive requires settled work
-and clean removable managed resources, preserves Task history, and cannot reopen.
+remote merge, physical quiescence and archive. Ordinary archive requires settled
+work and clean removable managed resources. Explicitly authorized force archive
+can retain unresolved evidence and unsafe resources without claiming delivery or
+quiescence. Both preserve Task history and cannot reopen.
+See [Task delivery and archive](docs/task-delivery.md#archive).
 
 Runtime health and cost are observations, not semantic verdicts. The Agent reads
 exact faults and current intent to choose retry, repair or abandonment. Yui does

package/ARCHITECTURE.zh-CN.md

@@ -72,8 +72,9 @@ Reviewer 输出留在那个 Run 上。审查策略和显式的 Task-final 合同
 
 ## 规划、工作区与资源
 
-Draft 包含规划事实和 Project 绑定，而不是一个已采用的交付工作区。它私有的规划目录在
-控制 Home 和交付树之外。规划 Session 捕获 `planning` 权限。Leader 可以在一个 Run 或
+Draft 包含规划事实和 Project 绑定，而不是一个已采用的交付工作区。它私有的规划目录位于
+`<YUI_HOME>/runtime/task-runtimes/planning`，与持久控制数据和交付树分开。
+规划 Session 捕获 `planning` 权限。Leader 可以在一个 Run 或
 普通讨论中持久化一个激活请求并返回；原生静止会把该意图释放出来，进行当前权限和资源
 检查。
 
@@ -132,7 +133,8 @@ Registry 暴露 context、消息、artifact、环境、插件以及部分 Task/J
 由 Operator 签发的 grant。插件验证不是安全认证。
 
 CLI 贡献和受控的 Web 面板是 Registry 的投影。Web 仅本地回环、由 Controller 拥有；浏览器
-凭据不会变成 Operator 权限。参见[插件 SDK](docs/plugin-sdk.zh-CN.md)和
+凭据认证本地用户控制，这些控制复用 CLI 领域操作；查询面板仍只读，不能借用该用户权限
+执行修改或插件管理。参见[插件 SDK](docs/plugin-sdk.zh-CN.md)和
 [能力与资源](docs/architecture/capabilities-and-resources.zh-CN.md)。
 
 ## 持久化、完成与运维
@@ -141,7 +143,9 @@ Home 有一条只追加的存储迁移链。普通运行时只接受当前记录
 有效 Home；畸形状态被诊断，而不是自动修复。
 
 完成会冻结交付结果，并检查适用的验收、集成和审查合同。它区别于发布、已验证的远程合并、
-物理静止和归档。归档要求工作已了结、受管资源干净可移除，保留 Task 历史，且不可重开。
+物理静止和归档。普通归档要求工作已了结、受管资源干净可移除。明确授权的 force 归档
+可以保留未解决证据与不安全资源，但不宣称交付或物理静止。两者都保留 Task 历史且不可
+重开。参见[Task 交付与归档](docs/task-delivery.zh-CN.md#归档)。
 
 运行时健康度和成本是观察，而不是语义判定。Agent 读取精确的故障和当前意图，以选择重试、
 修复或放弃。Yui 不会自动创建救援 Worker 或选择另一个模型。

package/README.md

@@ -30,7 +30,7 @@ not from terminal windows you juggle or details you have to remember.
 - **Bring your own Agent** — Codex CLI, Claude Code CLI and ACP peers run behind
   one boundary and stay replaceable without losing the Task.
 - **Local-first and private** — everything runs on your machine for one trusted
-  user; the Web view is loopback and read-only.
+  user; Web is loopback-only, with read-only views and authenticated user controls.
 - **Isolated by default** — repository work happens in managed Git worktrees;
   the stable checkout stays read-only.
 
@@ -137,7 +137,11 @@ when necessary. A failed process does not erase the Task, and an uncertain
 submission is not silently repeated.
 
 For a visual overview, run `yui web` in another terminal. The local Web view
-shows the same tasks and pending questions; it is not a separate task system.
+shows the same tasks and pending questions and lets you send messages, answer
+questions and explicitly queue, steer or interrupt Task input. These authenticated
+Task controls use the same operations as the CLI; Web is not a separate task system.
+See [Web permissions](docs/architecture/capabilities-and-resources.md#cli-and-web)
+and [input timing](docs/managed-turn-and-session-runtime.md#input-timing-queue-steer-and-interrupt).
 
 ## Architecture
 
@@ -243,7 +247,7 @@ the Controller are what touch the store:
      it moves work and records facts — it never judges an answer
 
   Agents work in Projects: read-only checkout + isolated worktrees.
-  Web view (yui web): a loopback, read-only projection of the store.
+  Web (yui web): loopback views + authenticated user controls.
 ```
 
 ### Layered design
@@ -253,7 +257,7 @@ never a fixed workflow:
 
 ```text
   Experience   —  how you interact
-    CLI (Operator) · Web (loopback, read-only) · native Agent sessions
+    CLI (Operator) · Web (loopback, authenticated) · native Agent sessions
     collect input · show facts · confirm actions · invoke capabilities
         ▼
   Intelligence —  who decides
@@ -290,9 +294,13 @@ extra states:
   WorkItem  open ─▶ accepted ─▶ retired
 
   Draft holds planning only; activation adopts a delivery workspace.
-  Archive needs settled work and clean worktrees; it cannot reopen.
+  Ordinary archive needs settled work and clean worktrees; it cannot reopen.
 ```
 
+Explicitly authorized force archive can retain unresolved evidence and unsafe
+resources; it does not prove delivery or permission to delete them.
+See the [archive contract](docs/task-delivery.md#archive).
+
 ## Design principles
 
 ### Agents make decisions; Yui makes work durable

package/dist/agentRun/agentRun.js

@@ -2,6 +2,7 @@ import { validateEffectiveLaunchSnapshot } from "../executor/effectiveLaunch.js"
 import { validateTaskRecordReference } from "../task/taskRecordReference.js";
 import { validateManagedWorkspace } from "../worktree/managedWorkspace.js";
 import { createRunInput, createRunInputEnvelope, validateRunInput } from "../context/runInputContract.js";
+import { providerRetryProjection } from "../runtime/providerRetry.js";
 import { boundedRunFailureDiagnostic, MAX_RUN_FAILURE_DIAGNOSTIC_BYTES, MAX_RUN_RESULT_OUTPUT_BYTES } from "../domain/agentResultTransport.js";
 export { boundedRunFailureDiagnostic, MAX_RUN_FAILURE_DIAGNOSTIC_BYTES, MAX_RUN_RESULT_OUTPUT_BYTES, transportAgentResult } from "../domain/agentResultTransport.js";
 /** Record lifecycle and observed delivery are separate read-only facts. */
@@ -17,6 +18,8 @@ export function runExecutionObservation(run, binding, events = []) {
     return {
         recordStatus: run.status,
         delivery,
+        retry: binding?.retry?.previousRunId === run.id || binding?.retry?.successorRunId === run.id
+            ? providerRetryProjection(binding) : null,
         ...(current === undefined ? {} : {
             attemptId: current.attemptId, observedAt: current.updatedAt,
             ...(current.nativeTurnId === undefined ? {} : { nativeTurnId: current.nativeTurnId })

package/dist/artifacts/artifactCommitLock.js

@@ -1,5 +1,6 @@
 import { mkdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+import { currentFileLockOwner, fileLockOwnerIsLive } from "../core/fileLockOwner.js";
 /**
  * Short per-Task commit fence for artifact repositories.
  *
@@ -9,9 +10,9 @@ import { join } from "node:path";
  * into the wrong commit, or race the expected-HEAD check. This fence serializes
  * the commit critical section for one Task.
  *
- * Unlike the Project maintenance fence (which guards long operations and fails
- * fast so the CLI is not blocked), an artifact save is a short operation, so a
- * contended fence briefly RETRIES before giving up. It is otherwise the same
+ * The Project maintenance fence waits asynchronously for longer operations.
+ * An artifact save is short, so this synchronous critical section briefly
+ * retries a contended fence before giving up. It otherwise shares the same
  * crash-safe design: an exclusive directory under the Home's `locks/` area
  * (O_EXCL via mkdir), an owner file recording PID + process start time so a
  * recycled PID can never pass for the original holder, and reclaim of a stale
@@ -47,12 +48,13 @@ export function artifactCommitLockPath(home, taskId) {
  */
 export function acquireArtifactCommitLock(home, taskId) {
     const lock = artifactCommitLockPath(home, taskId);
+    const ownerIdentity = currentFileLockOwner();
     mkdirSync(join(home, "locks", "task-artifacts"), { recursive: true, mode: 0o700 });
     const deadline = Date.now() + ARTIFACT_COMMIT_LOCK_TIMEOUT_MS;
     while (true) {
         try {
             mkdirSync(lock, { mode: 0o700 });
-            const ownerIdentity = writeOwnerIdentity(lock);
+            writeOwnerIdentity(lock, ownerIdentity);
             let released = false;
             return () => {
                 if (released)
@@ -72,8 +74,7 @@ export function acquireArtifactCommitLock(home, taskId) {
     }
 }
 /** Write this process's owner identity and return the exact bytes recorded. */
-function writeOwnerIdentity(lock) {
-    const identity = `${process.pid}:${processStartIdentity() ?? ""}`;
+function writeOwnerIdentity(lock, identity = currentFileLockOwner()) {
     writeFileSync(join(lock, "owner"), `${identity}\n`, { mode: 0o600 });
     return identity;
 }
@@ -109,8 +110,8 @@ function reclaimStaleArtifactCommitLock(lock) {
     catch (error) {
         if (!isEnoent(error))
             throw error;
-        // Ownerless lock: a crash between mkdir and owner publication. Reclaim only
-        // when old enough that the creator is not still initializing.
+        // Allow publication its initial grace period; an older missing owner is
+        // diagnosed as unverified below, never treated as a dead creator.
         try {
             if (Date.now() - statSync(lock).mtimeMs < STALE_ARTIFACT_COMMIT_LOCK_AGE_MS)
                 return;
@@ -131,7 +132,7 @@ function reclaimStaleArtifactCommitLock(lock) {
             return;
         throw error;
     }
-    if (expectedOwner !== null && lockOwnerIsAlive(lock))
+    if (fileLockOwnerIsLive(lock))
         return;
     const reclaimLock = `${lock}.reclaim`;
     for (let attempt = 0; attempt < 2; attempt += 1) {
@@ -171,7 +172,7 @@ function reclaimStaleArtifactCommitLock(lock) {
             }
             if (currentOwner !== expectedOwner)
                 return;
-            if (currentOwner !== null && lockOwnerIsAlive(lock))
+            if (fileLockOwnerIsLive(lock))
                 return;
             rmSync(lock, { recursive: true, force: true });
         }
@@ -182,63 +183,23 @@ function reclaimStaleArtifactCommitLock(lock) {
     }
 }
 /**
- * Reclaim a reclaim-lock directory only when provably orphaned: dead (or
- * unrecorded) owner AND older than the age bound. Returns true when it removed
+ * Reclaim a reclaim-lock directory only with a proven dead generation and
+ * after the age bound. Returns true when it removed
  * the lock (caller retries), false otherwise.
  */
 function reclaimOrphanedReclaimLock(reclaimLock) {
     try {
         if (Date.now() - statSync(reclaimLock).mtimeMs < STALE_ARTIFACT_COMMIT_LOCK_AGE_MS)
             return false;
-        if (lockOwnerIsAlive(reclaimLock))
+        if (fileLockOwnerIsLive(reclaimLock))
             return false;
         rmSync(reclaimLock, { recursive: true, force: true });
         return true;
     }
-    catch (error) {
-        return isEnoent(error);
-    }
-}
-function lockOwnerIsAlive(lock) {
-    let owner;
-    try {
-        owner = readFileSync(join(lock, "owner"), "utf8").trim();
-    }
     catch (error) {
         if (isEnoent(error))
-            return false;
-        return true; // Unreadable owner fails closed: treat the fence as held.
-    }
-    const separator = owner.indexOf(":");
-    const pid = Number.parseInt(separator < 0 ? owner : owner.slice(0, separator), 10);
-    if (!Number.isInteger(pid) || pid <= 0)
-        return false;
-    const recordedIdentity = separator < 0 ? "" : owner.slice(separator + 1);
-    const currentIdentity = processStartIdentity(pid);
-    if (currentIdentity !== undefined) {
-        return recordedIdentity !== "" && currentIdentity === recordedIdentity;
-    }
-    return processIsAlive(pid);
-}
-/** Linux process start time (clock ticks since boot) for a PID; undefined off /proc. */
-function processStartIdentity(pid = process.pid) {
-    try {
-        const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
-        const close = stat.lastIndexOf(")");
-        const fields = stat.slice(close + 2).split(" ");
-        return fields[19] ?? "0"; // field 22: starttime
-    }
-    catch {
-        return undefined;
-    }
-}
-function processIsAlive(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (error) {
-        return error instanceof Error && "code" in error && error.code === "EPERM";
+            return true;
+        throw error;
     }
 }
 function isEnoent(error) {

package/dist/artifacts/taskArtifactRepository.js

@@ -1,10 +1,10 @@
-import { mkdir, writeFile } from "node:fs/promises";
-import { existsSync } from "node:fs";
 import { createHash } from "node:crypto";
+import { existsSync } from "node:fs";
+import { mkdir, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
-import { ManagedGitError, externalProgramConfigViolations, managedGit, managedGitBuffer, managedGitSucceeds, requireCommitId } from "./managedGit.js";
 import { acquireArtifactCommitLock } from "./artifactCommitLock.js";
 import { resolveContainedArtifactPath, safeRelativeArtifactPath, taskArtifactRepoPath } from "./artifactPaths.js";
+import { ManagedGitError, externalProgramConfigViolations, managedGit, managedGitBuffer, managedGitSucceeds, requireCommitId } from "./managedGit.js";
 /**
  * Per-Task local-only Git artifact repository.
  *

package/dist/cli/agentConfigurationPicker.js

@@ -106,7 +106,7 @@ export async function selectAgentPermission(resolved, io, current) {
 export function renderAgentConfigurationResolutionNotice(resolved) {
     const lines = [];
     if (resolved.source === "cache") {
-        lines.push(`! Runtime capability request failed (${resolved.failure?.message ?? "unknown failure"}). `
+        lines.push((resolved.failure === undefined ? "" : `! Runtime capability request failed (${resolved.failure.message}). `)
             + `Showing cached options from ${resolved.fetchedAt ?? "an earlier request"}; they may be stale.`);
     }
     else if (resolved.source === "fallback") {

package/dist/cli/commandCatalog.js

@@ -116,7 +116,8 @@ const agentChildren = [
     {
         name: "capabilities",
         summary: "Probe one Agent CLI for runtime configuration options.",
-        usage: "yui config agent capabilities <id>"
+        usage: "yui config agent capabilities <id> [--refresh]",
+        options: ["--refresh"]
     },
     {
         name: "update",
@@ -215,6 +216,11 @@ const globalSessionChildren = [
         summary: "Reconcile durable Session owners with native sessions.",
         usage: "yui session reconcile [--report] [--cleanup]",
         options: ["--report", "--cleanup"]
+    },
+    {
+        name: "retry",
+        summary: "Inspect or control bounded Provider recovery for this Global Session.",
+        usage: "yui session retry <role> [show|cancel|disable|enable]"
     }
 ];
 const profileChildren = [
@@ -288,7 +294,7 @@ const taskChildren = [
             "--type": ["feature", "bugfix"]
         }
     },
-    { name: "activate", summary: "Activate a Draft Task.", usage: "yui task activate <id>" },
+    { name: "activate", summary: "Adopt an existing Activation request for a Draft Task.", usage: "yui task activate <id>" },
     {
         name: "activation",
         summary: "Request, cancel or inspect explicit Task Activation.",
@@ -373,9 +379,9 @@ const taskChildren = [
     },
     {
         name: "list",
-        summary: "List unarchived Task overviews.",
-        usage: "yui task list [--all] [--verbose]",
-        options: ["--all", "--verbose"]
+        summary: "Discover Tasks through a bounded, filterable catalog.",
+        usage: "yui task list [--all] [--status <status>] [--project <id>] [--search <text>] [--attention <category>] [--limit <1..100>] [--cursor <cursor>]",
+        options: ["--all", "--status", "--project", "--search", "--attention", "--limit", "--cursor"]
     },
     { name: "show", summary: "Show a Task.", usage: "yui task show <id>" },
     {
@@ -406,6 +412,12 @@ const taskChildren = [
         usage: "yui task remote-delivery <task> [--json]",
         options: ["--json"]
     },
+    {
+        name: "archive-preflight",
+        summary: "Inspect current archive and exact-owner cleanup blockers without changing state or authorizing removal.",
+        usage: "yui task archive-preflight <id> (--integrated|--abandon) [--force] [--json]",
+        options: ["--integrated", "--abandon", "--force", "--json"]
+    },
     {
         name: "archive",
         summary: "Archive a terminal Task; explicit --force commits despite delivery/cleanup warnings, retaining unsafe resources.",
@@ -421,8 +433,8 @@ const taskChildren = [
             {
                 name: "integrate",
                 summary: "Rebase Task changes onto the remote development head through Integration.",
-                usage: "yui task upstream integrate <task> (--latest|--project <project>) [--check <command> ...]",
-                options: ["--latest", "--project", "--check"]
+                usage: "yui task upstream integrate <task> (--latest|--project <project>) [--check <command> ...] [--rerun-checks]",
+                options: ["--latest", "--project", "--check", "--rerun-checks"]
             }
         ]
     },
@@ -446,18 +458,17 @@ const taskChildren = [
             {
                 name: "send",
                 summary: "Send a Task message. An unaddressed user/operator message carries a submission intent (record|discuss|develop) and an optional idempotency key.",
-                usage: "yui task message send <id> (<body>|--body-file <path|->) [--intent record|discuss|develop] [--request-id <key>] [--wake-policy leader|none] [--to <role> --work-item <id>|--review-round <id>]",
-                options: ["--body-file", "--intent", "--request-id", "--wake-policy", "--to", "--work-item", "--review-round"],
+                usage: "yui task message send <id> (<body>|--body-file <path|->) [--intent record|discuss|develop] [--request-id <key>] [--to <role> --work-item <id>|--review-round <id>]",
+                options: ["--body-file", "--intent", "--request-id", "--to", "--work-item", "--review-round"],
                 optionValues: {
-                    "--intent": ["record", "discuss", "develop"],
-                    "--wake-policy": ["leader", "none"]
+                    "--intent": ["record", "discuss", "develop"]
                 },
                 fileOptions: ["--body-file"]
             },
             {
                 name: "queue",
-                summary: "Queue an input for delivery at the recipient's next legal opportunity (idempotent by request id).",
-                usage: "yui task message queue <id> (<body>|--body-file <path|->) --request-id <id> [--to <role> --work-item <id>|--review-round <id>]",
+                summary: "Queue ordinary Leader input without --to; an explicit Role requires an existing WorkItem/ReviewRound Assignment. Idempotent by request id.",
+                usage: "yui task message queue <id> (<body>|--body-file <path|->) --request-id <id> [--to <role> (--work-item <id>|--review-round <id>)]",
                 options: ["--body-file", "--request-id", "--to", "--work-item", "--review-round"],
                 fileOptions: ["--body-file"]
             },
@@ -481,12 +492,9 @@ const taskChildren = [
             },
             {
                 name: "update",
-                summary: "Replace the mutable body and wake policy of a Draft user/operator Message.",
-                usage: "yui task message update <task>/<message> (<body>|--body-file <path|->) [--wake-policy leader|none]",
-                options: ["--body-file", "--wake-policy"],
-                optionValues: {
-                    "--wake-policy": ["leader", "none"]
-                },
+                summary: "Edit unkeyed Draft context without changing intent; inputs with request identities require a new Message.",
+                usage: "yui task message update <task>/<message> (<body>|--body-file <path|->)",
+                options: ["--body-file"],
                 fileOptions: ["--body-file"]
             },
             {
@@ -606,17 +614,29 @@ const taskChildren = [
     {
         name: "publication",
         summary: "Create or update external PR/MR publication evidence for a Task.",
-        sections: [{ id: "manage", title: "Commands", entries: ["upsert", "verify", "list", "show"] }],
+        sections: [{ id: "manage", title: "Commands", entries: ["upsert", "diff", "adopt", "verify", "list", "show"] }],
         children: [
             {
                 name: "upsert",
                 summary: "Create or immutably update an external PR/MR and its publication state.",
-                usage: "yui task publication upsert <task> --project <project> --provider <github|gitlab> --repository <owner/name> --kind <pull-request|merge-request> --id <external-id> [--url <url>] [--title <text>] [--source-branch <branch>] [--target-branch <branch>] [--local-commit <sha>] [--remote-commit <sha>] [--state <open|merged|closed>] [--reported|--verified] [--evidence <text>] [--merged-at <iso-timestamp>]",
-                options: ["--project", "--provider", "--repository", "--kind", "--id", "--url", "--title", "--source-branch", "--target-branch", "--local-commit", "--remote-commit", "--state", "--reported", "--verified", "--evidence", "--merged-at"]
+                usage: "yui task publication upsert <task> --project <project> --provider <github|gitlab> --repository <owner/name> --kind <pull-request|merge-request> --id <external-id> [--url <url>] [--title <text>] [--source-branch <branch>] [--target-branch <branch>] [--local-commit <sha>] [--head-commit <sha>] [--remote-commit <sha>] [--state <open|merged|closed>] [--reported|--verified] [--evidence <text>] [--merged-at <iso-timestamp>]",
+                options: ["--project", "--provider", "--repository", "--kind", "--id", "--url", "--title", "--source-branch", "--target-branch", "--local-commit", "--head-commit", "--remote-commit", "--state", "--reported", "--verified", "--evidence", "--merged-at"]
+            },
+            {
+                name: "diff",
+                summary: "Read a completed Task's fixed acceptance-to-publication candidate diff using local Git only.",
+                usage: "yui task publication diff <task>/<publication> [--integration <id>]",
+                options: ["--integration"]
+            },
+            {
+                name: "adopt",
+                summary: "Explicitly accept the reviewed publication candidate as covering the original completion.",
+                usage: "yui task publication adopt <task>/<publication> --reviewed-diff <sha256> --acceptance <text> [--integration <id>]",
+                options: ["--reviewed-diff", "--acceptance", "--integration"]
             },
             {
                 name: "verify",
-                summary: "Verify one current GitHub PR against the exact Task delivery head through gh.",
+                summary: "Observe the current PR/MR head and merge through its provider; record verification separately from Task coverage.",
                 usage: "yui task publication verify (<task>/<publication-id> | <task> <publication-id>)"
             },
             {
@@ -636,7 +656,7 @@ const taskChildren = [
         summary: "Manage Roles within a Task.",
         sections: [{ id: "manage", title: "Commands", entries: [
                     "add", "list", "status", "show", "update", "remove", "bind", "unbind",
-                    "session", "interrupt", "view", "takeover", "release"
+                    "capabilities", "session", "interrupt", "view", "takeover", "release"
                 ] }],
         children: [
             {
@@ -653,6 +673,9 @@ const taskChildren = [
                 usage: "yui task role status <task> <role>"
             },
             { name: "show", summary: "Show one Task Role.", usage: "yui task role show <task> <role>" },
+            { name: "capabilities", summary: "Read native options using this Role's desired or exact failed launch configuration.",
+                usage: "yui task role capabilities <task> <role> [--error <event-id>] [--refresh]",
+                options: ["--error", "--refresh"] },
             {
                 name: "update",
                 summary: "Update a Task Role; Agent settings target the named or active binding without switching it.",
@@ -668,8 +691,13 @@ const taskChildren = [
                 name: "session",
                 summary: "Inspect, stop or explicitly select a new Task Role Session.",
                 executable: true,
-                sections: [{ id: "manage", title: "Commands", entries: ["inspect", "stop", "new"] }],
+                sections: [{ id: "manage", title: "Commands", entries: ["inspect", "retry", "stop", "new"] }],
                 children: [
+                    {
+                        name: "retry",
+                        summary: "Inspect or control Provider recovery without stopping an admitted Turn.",
+                        usage: "yui task role session retry <task> <role> [show|cancel|disable|enable]"
+                    },
                     {
                         name: "inspect",
                         summary: "Read the current Session, Host process, and AgentRun facts.",
@@ -919,13 +947,13 @@ const taskChildren = [
     {
         name: "integration",
         summary: "Integrate WorkItem results and upstream commits with Leader-owned decisions.",
-        sections: [{ id: "manage", title: "Commands", entries: ["start", "continue", "resolve", "abort", "supersede", "list", "show", "cleanup", "queue"] }],
+        sections: [{ id: "manage", title: "Commands", entries: ["start", "continue", "resolve", "abort", "supersede", "list", "show", "cleanup"] }],
         children: [
             {
                 name: "start",
                 summary: "Build, validate, and CAS-commit an integration candidate.",
-                usage: "yui task integration start <task> --work-item <id> --strategy <ff|cherry-pick|merge|manual> [--project <project>] [--target <ref>] [--check <command> ...]",
-                options: ["--work-item", "--strategy", "--project", "--target", "--check"],
+                usage: "yui task integration start <task> --work-item <id> --strategy <ff|cherry-pick|merge|manual> [--project <project>] [--target <ref>] [--check <command> ...] [--rerun-checks]",
+                options: ["--work-item", "--strategy", "--project", "--target", "--check", "--rerun-checks"],
                 optionValues: { "--strategy": ["ff", "cherry-pick", "merge", "manual"] }
             },
             {
@@ -954,21 +982,7 @@ const taskChildren = [
             },
             { name: "list", summary: "List Integration Attempts.", usage: "yui task integration list <task>" },
             { name: "show", summary: "Show one Integration Attempt.", usage: "yui task integration show <task>/<integration>" },
-            { name: "cleanup", summary: "Remove a terminal Integration worktree and branch.", usage: "yui task integration cleanup <task>/<integration>" },
-            {
-                name: "queue",
-                summary: "Manage the serialized integration queue.",
-                sections: [{ id: "queue", title: "Commands", entries: ["enqueue", "list", "show", "process", "supersede", "requeue", "reconcile"] }],
-                children: [
-                    { name: "enqueue", summary: "Enqueue a ChangeSet for serialized integration.", usage: "yui task integration queue enqueue <task> --project <project> --change-set <id> [--target <ref>] [--check <command> ...]", options: ["--project", "--change-set", "--target", "--check"] },
-                    { name: "list", summary: "List integration queue entries.", usage: "yui task integration queue list <task> [--project <project>]", options: ["--project"] },
-                    { name: "show", summary: "Show one integration queue entry.", usage: "yui task integration queue show <task>/<entry>" },
-                    { name: "process", summary: "Process queued integration entries.", usage: "yui task integration queue process <task> [--project <project>] [--limit <n>]", options: ["--project", "--limit"] },
-                    { name: "supersede", summary: "Supersede a queued entry.", usage: "yui task integration queue supersede <task>/<entry> --reason <text>", options: ["--reason"] },
-                    { name: "requeue", summary: "Requeue a conflicted entry.", usage: "yui task integration queue requeue <task>/<entry>" },
-                    { name: "reconcile", summary: "Reconcile a blocked entry.", usage: "yui task integration queue reconcile <task>/<entry>" }
-                ]
-            }
+            { name: "cleanup", summary: "Remove a terminal Integration worktree and branch.", usage: "yui task integration cleanup <task>/<integration>" }
         ]
     },
     {
@@ -1057,10 +1071,12 @@ const taskChildren = [
     {
         name: "wake",
         summary: "Inspect the durable Leader wake ledger and its delta content.",
-        sections: [{ id: "manage", title: "Commands", entries: ["list", "show", "resolve"] }],
+        sections: [{ id: "manage", title: "Commands", entries: ["list", "show", "retry", "resolve"] }],
         children: [
             { name: "list", summary: "List recorded Leader wakes.", usage: "yui task wake list <task>" },
             { name: "show", summary: "Show one wake and its delta content.", usage: "yui task wake show <task> <wake>" },
+            { name: "retry", summary: "Retry a rejected notification after correcting its cause; preserve original input.",
+                usage: "yui task wake retry <task> <wake> --reason <correction>", options: ["--reason"] },
             { name: "resolve", summary: "Release an unknown notification claim after explicit quiescence evidence, without replay.",
                 usage: "yui task wake resolve <task> <wake> --reason <quiescence-evidence>", options: ["--reason"] }
         ]
@@ -1089,13 +1105,41 @@ export const ROOT_COMMAND = buildNode({
         { id: "general", title: "General", entries: [
                 "help", "version", "update", "upgrade", "setup", "doctor"
             ] },
-        { id: "workflow", title: "Workflow", entries: ["operator", "project", "task"] },
+        { id: "workflow", title: "Workflow", entries: ["operator", "role", "project", "task"] },
         { id: "configuration", title: "Configuration", entries: ["config"] },
         { id: "operations", title: "Operations", entries: ["web", "controller", "session", "execution", "capability", "job", "jobs", "telemetry", "release"] },
         { id: "resources", title: "Resources", entries: ["resources"] },
         { id: "internal", title: "Internal", entries: ["internal"] }
     ],
     children: [
+        {
+            name: "role",
+            summary: "Queue input or control an exact current Global Role Turn.",
+            sections: [{ id: "input", title: "Input control", entries: ["message", "interrupt"] }],
+            children: [
+                {
+                    name: "message", summary: "Send durable input to a Global Role.",
+                    sections: [{ id: "input", title: "Input control", entries: ["queue", "steer"] }],
+                    children: [
+                        {
+                            name: "queue", summary: "Queue input for the next legal delivery opportunity.",
+                            usage: "yui role message queue <role> (<text>|--body-file <path|->) --request-id <id>",
+                            options: ["--request-id", "--body-file"], fileOptions: ["--body-file"]
+                        },
+                        {
+                            name: "steer", summary: "Steer the exact current native Turn.",
+                            usage: "yui role message steer <role> (<text>|--body-file <path|->) --request-id <id> --expected-target <turn>",
+                            options: ["--request-id", "--expected-target", "--body-file"], fileOptions: ["--body-file"]
+                        }
+                    ]
+                },
+                {
+                    name: "interrupt", summary: "Request cancellation of the exact current native Turn.",
+                    usage: "yui role interrupt <role> --expected-target <turn> [--request-id <id>] [--then-message <message>]",
+                    options: ["--request-id", "--expected-target", "--then-message"]
+                }
+            ]
+        },
         { name: "help", summary: "Show root or scoped command help.", usage: "yui help [command ...]", commandPathArguments: true },
         { name: "version", summary: "Print the installed Yui version." },
         { name: "update", summary: "Install the latest published Yui package globally." },
@@ -1481,7 +1525,7 @@ export const ROOT_COMMAND = buildNode({
             sections: [
                 { id: "global", title: "Global Role sessions", entries: ["context", "enter", "record", "replace"] },
                 { id: "maintenance", title: "Maintenance", entries: ["stop"] },
-                { id: "recovery", title: "Recovery", entries: ["reconcile"] }
+                { id: "recovery", title: "Recovery", entries: ["reconcile", "retry"] }
             ],
             children: globalSessionChildren
         },
@@ -1489,7 +1533,7 @@ export const ROOT_COMMAND = buildNode({
             name: "task",
             summary: "Manage Tasks, WorkItems, AgentRuns, and integration.",
             sections: [
-                { id: "lifecycle", title: "Lifecycle", entries: ["create", "project", "base", "update", "activate", "activation", "execution", "complete", "cancel", "reopen", "retire", "list", "show", "context", "next-action", "remote-delivery", "archive", "replace", "reconcile", "upstream", "artifact"] },
+                { id: "lifecycle", title: "Lifecycle", entries: ["create", "project", "base", "update", "activate", "activation", "execution", "complete", "cancel", "reopen", "retire", "list", "show", "context", "next-action", "remote-delivery", "archive-preflight", "archive", "replace", "reconcile", "upstream", "artifact"] },
                 { id: "collaboration", title: "Collaboration", entries: ["message", "input", "grant", "workflow", "publication", "work", "run", "review", "integration", "role", "overlap", "change-set"] },
                 { id: "knowledge", title: "Task Knowledge", entries: ["brief", "decision", "milestone", "event", "continuation", "wake"] }
             ],
@@ -1512,7 +1556,7 @@ export const ROOT_COMMAND = buildNode({
             summary: "Start, inspect, cancel, or acknowledge a Controller-managed DurableJob.",
             sections: [{ id: "manage", title: "Commands", entries: ["start", "get", "cancel", "acknowledge"] }],
             children: [
-                { name: "start", summary: "Start a DurableJob for build, test, package, or Integration checks.", usage: "yui job start --task <id> --project <project> --head <sha> --workspace <dir> --step <name>=<command> [--step ...] [--owner task|work-item:<id>|integration-attempt:<id>] [--env <k=v>...]" },
+                { name: "start", summary: "Start a DurableJob under an explicit request identity.", usage: "yui job start --request-id <id> --task <id> --project <project> --head <sha> --workspace <dir> --step <name>=<command> [--step ...] [--owner task|work-item:<id>|integration-attempt:<id>] [--env <k=v>...]" },
                 { name: "get", summary: "Show a DurableJob record and its terminal result.", usage: "yui job get --task <id> --job <job-id>" },
                 { name: "cancel", summary: "Request cancellation of a running or queued DurableJob.", usage: "yui job cancel --task <id> --job <job-id>" },
                 { name: "acknowledge", summary: "Acknowledge an unknown-needs-attention DurableJob so Task lifecycle gates can proceed.", usage: "yui job acknowledge --task <id> --job <job-id>" }