@zq-silk/yui 0.15.11 → 0.16.0

package/dist/context/taskContext.js

@@ -1,12 +1,14 @@
-import { usageError, taskNotFound } from "../errors/cliError.js";
+import { runExecutionObservation } from "../agentRun/agentRun.js";
+import { isGitArtifactRefString, parseGitArtifactRef } from "../artifacts/gitArtifactRef.js";
+import { taskNotFound, usageError } from "../errors/cliError.js";
+import { expandTaskMessageResult } from "../message/message.js";
 import { resolveManagedTaskReader } from "../runtime/managedCaller.js";
+import { providerRetryProjection } from "../runtime/providerRetry.js";
+import { projectTaskRemoteDeliveryFromStore } from "../task/remoteDeliveryService.js";
+import { managedWorkspaceKey } from "../worktree/managedWorkspace.js";
 import { contextContentDigest } from "./contextSnapshot.js";
 import { buildRunContextPack } from "./runContextPack.js";
 import { sourceRunContextValue } from "./sourceRunContext.js";
-import { expandTaskMessageResult } from "../message/message.js";
-import { managedWorkspaceKey } from "../worktree/managedWorkspace.js";
-import { runExecutionObservation } from "../agentRun/agentRun.js";
-import { isGitArtifactRefString, parseGitArtifactRef } from "../artifacts/gitArtifactRef.js";
 const MAX_RECORDS = 256;
 const MAX_VALUE_BYTES = 4096;
 const MAX_PAGE_BYTES = 128 * 1024;
@@ -17,64 +19,74 @@ const MAX_ATTENTION_REFS = 8;
  * Every public path checks the same scope before reading, counting or paging.
  */
 export function readTaskContext(store, taskId, environment = {}) {
-    return store.transaction((reader) => {
-        const entries = authorizedEntries(reader, taskId, environment);
+    return store.readTransaction((reader) => {
+        const scope = authorizeContext(reader, taskId, environment);
+        const sources = authorizedSources(reader, scope);
+        const count = sources.reduce((total, source) => total + source.count, 0);
         const cursor = currentCursor(reader, taskId);
         // Reserve a small, classified view before ordinary history consumes the
         // page. Counts and samples come from the exact same authorized read.
-        const attention = summarizeAttention(entries);
+        const attention = summarizeAttention(reader, taskId, scope.allow);
         let bytes = Buffer.byteLength(JSON.stringify(attention));
         const records = [];
-        const runtimeEvents = entries.some((entry) => entry.ref.store === "run") ? reader.listEvents(taskId) : [];
-        for (const entry of entries) {
-            const valueBytes = Buffer.byteLength(JSON.stringify(entry.value));
-            const content = valueBytes > MAX_VALUE_BYTES
-                ? { ref: entry.ref, summary: summarize(entry.value), omitted: true }
-                : { ...entry, omitted: false };
-            const record = { ...content, ...(entry.ref.store === "run" ? {
-                    execution: runExecutionObservation(entry.value, reader.getTaskRoleSessionSet(taskId, entry.value.roleName)?.providerBinding, runtimeEvents)
-                } : {}) };
-            const size = Buffer.byteLength(JSON.stringify(record));
-            if (records.length >= MAX_RECORDS || bytes + size > MAX_PAGE_BYTES)
-                break;
-            records.push(record);
-            bytes += size;
-        }
+        let runtimeEvents;
+        page: for (const source of sources)
+            for (const entry of source.read()) {
+                if (records.length >= MAX_RECORDS)
+                    break page;
+                if (entry.ref.store === "run")
+                    runtimeEvents ??= reader.listEventsByType(taskId, ["runtime.agent-error"]);
+                const valueBytes = Buffer.byteLength(JSON.stringify(entry.value));
+                const content = valueBytes > MAX_VALUE_BYTES
+                    ? { ref: entry.ref, summary: summarize(entry.value), omitted: true }
+                    : { ...entry, omitted: false };
+                const record = { ...content, ...(entry.ref.store === "run" ? {
+                        execution: runExecutionObservation(entry.value, reader.getTaskRoleSessionSet(taskId, entry.value.roleName)?.providerBinding, runtimeEvents)
+                    } : {}), ...(entry.ref.store === "role" ? {
+                        providerRetry: providerRetryProjection(reader.getTaskRoleSessionSet(taskId, entry.value.name)?.providerBinding)
+                    } : {}) };
+                const size = Buffer.byteLength(JSON.stringify(record));
+                if (bytes + size > MAX_PAGE_BYTES)
+                    break page;
+                records.push(record);
+                bytes += size;
+            }
         return {
             taskId, coreCursor: encode(cursor), throughCursor: encode(cursor),
             attention,
-            records, count: entries.length,
-            omitted: { records: entries.length - records.length, values: records.filter((r) => r.omitted).length },
+            records, count,
+            omitted: { records: count - records.length, values: records.filter((r) => r.omitted).length },
             observations: [],
             limits: { records: MAX_RECORDS, valueBytes: MAX_VALUE_BYTES, pageBytes: MAX_PAGE_BYTES,
                 attentionRefsPerCategory: MAX_ATTENTION_REFS, attentionRefBytesPerCategory: MAX_VALUE_BYTES }
         };
     });
 }
-function summarizeAttention(entries) {
+function summarizeAttention(store, taskId, allow) {
     const group = () => ({ count: 0, refs: [], omittedRefs: 0 });
     const attention = {
         openInputs: group(), pendingOperations: group(), unknownOperations: group()
     };
-    const bytes = { openInputs: 0, pendingOperations: 0, unknownOperations: 0 };
-    for (const entry of entries) {
-        const status = entry.value.status;
-        const category = entry.ref.store === "input-request" && status === "open" ? "openInputs"
-            : entry.ref.store === "job" && status === "unknown-needs-attention" ? "unknownOperations"
-                : entry.ref.store === "job" && (status === "queued" || status === "running") ? "pendingOperations"
-                    : undefined;
-        if (category === undefined)
-            continue;
+    for (const [category, family, statuses] of [
+        ["openInputs", "input-request", ["open"]],
+        ["pendingOperations", "job", ["queued", "running"]],
+        ["unknownOperations", "job", ["unknown-needs-attention"]]
+    ]) {
+        const page = store.queryContextRecords(taskId, {
+            family, statuses, ids: allowedIds(allow, family), limit: MAX_ATTENTION_REFS
+        });
         const summary = attention[category];
-        summary.count++;
-        const size = Buffer.byteLength(JSON.stringify(entry.ref)) + 1;
-        if (summary.refs.length < MAX_ATTENTION_REFS && bytes[category] + size <= MAX_VALUE_BYTES) {
-            summary.refs.push(entry.ref);
-            bytes[category] += size;
-        }
-        else {
-            summary.omittedRefs++;
+        summary.count = page.count;
+        let bytes = 0;
+        for (const { id, value } of page.records) {
+            const ref = materialize(family, id, value).ref;
+            const size = Buffer.byteLength(JSON.stringify(ref)) + 1;
+            if (bytes + size > MAX_VALUE_BYTES)
+                break;
+            summary.refs.push(ref);
+            bytes += size;
         }
+        summary.omittedRefs = summary.count - summary.refs.length;
     }
     return attention;
 }
@@ -83,11 +95,10 @@ function summarizeAttention(entries) {
  * A continuation carries the first page's fixed upper event bound.
  */
 export function readTaskContextDelta(store, taskId, input, environment = {}) {
-    return store.transaction((reader) => {
+    return store.readTransaction((reader) => {
         const { allow } = authorizeContext(reader, taskId, environment);
-        const history = reader.listEvents(taskId);
         const start = decode(input.after, taskId);
-        const now = currentCursor(reader, taskId, history);
+        const now = currentCursor(reader, taskId);
         const continuation = input.continuation === undefined ? undefined : decodePage(input.continuation, taskId);
         const bound = continuation ?? now;
         const after = continuation?.after ?? start.sequence;
@@ -99,13 +110,14 @@ export function readTaskContextDelta(store, taskId, input, environment = {}) {
         if (!Number.isSafeInteger(limit) || limit < 1 || limit > MAX_EVENTS) {
             throw usageError(`Context delta limit must be between 1 and ${MAX_EVENTS}.`);
         }
-        const events = history
-            .filter((event) => isAllowed(allow, "task-event", event.id)
-            && sequence(event.id) > after && sequence(event.id) <= bound.sequence)
-            .sort((a, b) => sequence(a.id) - sequence(b.id));
+        const selected = reader.queryContextRecords(taskId, {
+            family: "task-event", ids: allowedIds(allow, "task-event"),
+            afterSequence: after, throughSequence: bound.sequence, limit
+        });
         const page = [];
         let bytes = 0;
-        for (const event of events) {
+        for (const { value } of selected.records) {
+            const event = value;
             const entry = materialize("task-event", event.id, event);
             const record = Buffer.byteLength(JSON.stringify(event)) > MAX_VALUE_BYTES
                 ? { ref: entry.ref, omitted: true }
@@ -117,10 +129,10 @@ export function readTaskContextDelta(store, taskId, input, environment = {}) {
             bytes += size;
         }
         const last = page.at(-1)?.ref.refId;
-        const more = events.length > page.length;
+        const more = selected.count > page.length;
         const through = { taskId, sequence: bound.sequence, revision: bound.revision };
         return {
-            taskId, events: page, count: events.length, throughCursor: encode(through),
+            taskId, events: page, count: selected.count, throughCursor: encode(through),
             ...(more && last !== undefined
                 ? { continuation: encode({ ...through, after: sequence(last) }) } : {}),
             observations: []
@@ -128,7 +140,7 @@ export function readTaskContextDelta(store, taskId, input, environment = {}) {
     });
 }
 export function inspectTaskContext(store, taskId, selector, environment = {}) {
-    return store.transaction((reader) => {
+    return store.readTransaction((reader) => {
         const scope = authorizeContext(reader, taskId, environment);
         const value = isAllowed(scope.allow, selector.store, selector.refId)
             ? inspectValue(reader, scope, selector) : null;
@@ -148,7 +160,7 @@ export function inspectTaskContext(store, taskId, selector, environment = {}) {
             : undefined;
         const response = { ...entry, ...(expansion !== undefined && "result" in expansion
                 ? { result: expansion.result } : {}),
-            ...(selector.store === "run" ? { execution: runExecutionObservation(value, reader.getTaskRoleSessionSet(taskId, value.roleName)?.providerBinding, reader.listEvents(taskId)) } : {}),
+            ...(selector.store === "run" ? { execution: runExecutionObservation(value, reader.getTaskRoleSessionSet(taskId, value.roleName)?.providerBinding, reader.listEventsByType(taskId, ["runtime.agent-error"])) } : {}),
             coreCursor: encode(currentCursor(reader, taskId)) };
         if (Buffer.byteLength(JSON.stringify(response)) > MAX_INSPECT_BYTES) {
             throw usageError("Expanded Context exceeds the bounded inspect limit.", undefined, { ref: entry.ref, maxBytes: MAX_INSPECT_BYTES });
@@ -157,7 +169,7 @@ export function inspectTaskContext(store, taskId, selector, environment = {}) {
     });
 }
 export function listContextMessages(store, taskId, environment = {}) {
-    return store.transaction((reader) => {
+    return store.readTransaction((reader) => {
         const { allow } = authorizeContext(reader, taskId, environment);
         return reader.listMessages(taskId)
             .filter((message) => isAllowed(allow, "task-message", message.id))
@@ -201,10 +213,9 @@ export async function withContextObservations(core, providers, timeoutMs = 250)
     }));
     return { ...core, observations };
 }
-function authorizeContext(store, taskId, environment) {
+/** Shared current/historical Session read identity; discovery may only narrow it. */
+export function resolveContextReader(store, environment) {
     const caller = resolveManagedTaskReader(store, environment);
-    if (caller !== undefined && caller.taskId !== taskId)
-        throw usageError("Context is outside the caller's Task.");
     if (caller === undefined && environment.YUI_SESSION_SCOPE === "global" && environment.YUI_ROLE !== "operator") {
         throw usageError("Only Operator may read Task context from a global Session.");
     }
@@ -216,6 +227,12 @@ function authorizeContext(store, taskId, environment) {
     if (environment.YUI_SESSION_SCOPE !== undefined && !["task", "global"].includes(environment.YUI_SESSION_SCOPE)) {
         throw usageError("Incomplete managed Context caller identity.");
     }
+    return caller;
+}
+function authorizeContext(store, taskId, environment) {
+    const caller = resolveContextReader(store, environment);
+    if (caller !== undefined && caller.taskId !== taskId)
+        throw usageError("Context is outside the caller's Task.");
     const task = store.getTask(taskId);
     if (task === null)
         throw taskNotFound(taskId);
@@ -227,63 +244,45 @@ function authorizeContext(store, taskId, environment) {
         allow = new Set(pack.authority.readableRefs.map((ref) => `${ref.store}:${ref.refId}`));
         allow.add(`role:${caller.roleName}`);
         allow.add(`turn:${caller.currentRunId}`);
-        // A steer targets exactly one Role's current native Turn and is never shared
-        // Task intent (decision-3 §9). A Leader steer in particular stores as an
-        // untargeted `user` Message (no recipient/WorkItem/Run scope, since a Leader
-        // holds no Assignment), so recognize it explicitly: the shared block below
-        // must never leak it, and the steer-delta block authorizes it only to its own
-        // recipient. `interruptThen.reusedInput` is the interrupt-then composition
-        // whose carried input can itself be a steer.
-        const isSteerMessage = (message) => message.inputControl?.action === "steer"
-            || message.interruptThen?.reusedInput?.action === "steer";
-        // A frozen Assignment is not a cutoff for the Task's current user intent.
-        // Untargeted human/Operator messages are shared Task requirements; scoped
-        // messages, other Roles' results, and steers still require an explicit grant.
-        const sharedMessageIds = new Set(store.listMessages(taskId)
-            .filter(message => (message.kind === "user" || message.kind === "operator")
-            && message.recipient === undefined && message.workItemId === undefined
-            && message.runId === undefined && !isSteerMessage(message))
-            .map(message => message.id));
-        for (const id of sharedMessageIds)
-            allow.add(`task-message:${id}`);
-        for (const event of store.listEvents(taskId)) {
-            if (event.type.startsWith("message.") && sharedMessageIds.has(event.payload.messageId)) {
-                allow.add(`task-event:${event.id}`);
-            }
-        }
-        // A steer targets this Role's exact current native Turn (decision-3 §9,
-        // message-5 gap E). Unlike a queued or addressed Message — which reaches the
-        // Role through a new AgentRun's frozen Context pack — a steer is pushed into
-        // the *current* turn and is never captured by any frozen snapshot. So the
-        // steer header directs the recipient to reconcile the input "through your
-        // authorized Context read path"; that path must therefore resolve the exact
-        // steer Message it names. Authorize the steers addressed to this caller's
-        // exact current Assignment scope as a live delta — the same way untargeted
-        // user intent is layered on — WITHOUT expanding the frozen Assignment's
-        // readableRefs. Scope is the tightest signal a steer carries (it never gains
-        // a continuation runId), so a steer for a different WorkItem/Round is not
-        // authorized, and only genuine steers gain this read (an ordinary addressed
-        // Message still requires its own frozen delta).
+        // Shared current user intent and this exact Assignment's live steers augment
+        // the frozen refs. Query identities only: another Role's results, ordinary
+        // addressed messages and Leader steers remain outside this scope.
         const run = store.getRun(taskId, caller.currentRunId);
-        const steerMessageIds = new Set(store.listMessages(taskId)
-            .filter(message => isSteerMessage(message)
-            && message.recipient?.roleName === caller.roleName
-            && message.recipient.workItemId === run?.workItemId
-            && message.recipient.reviewRoundId === run?.reviewRoundId)
-            .map(message => message.id));
-        for (const id of steerMessageIds)
+        const current = store.contextInputReferences(taskId, {
+            roleName: caller.roleName, workItemId: run?.workItemId, reviewRoundId: run?.reviewRoundId
+        });
+        for (const id of current.messages)
             allow.add(`task-message:${id}`);
-        for (const event of store.listEvents(taskId)) {
-            if (event.type.startsWith("message.") && steerMessageIds.has(event.payload.messageId)) {
-                allow.add(`task-event:${event.id}`);
+        for (const id of current.events)
+            allow.add(`task-event:${id}`);
+        if (run?.workItemId !== undefined) {
+            for (const job of store.listDurableJobs(taskId)) {
+                if (job.owner.kind === "work-item" && job.owner.workItemId === run.workItemId)
+                    allow.add(`job:${job.id}`);
             }
         }
     }
     return { task, allow, caller };
 }
+/** Independent record commands share Context's exact read boundary, not a
+ * second role-based approximation of Assignment visibility. */
+export function contextRecordReader(store, taskId, environment = {}) {
+    const { allow } = authorizeContext(store, taskId, environment);
+    return (family, id) => isAllowed(allow, family, id);
+}
+export function assertContextRecordReadable(store, taskId, family, id, environment = {}) {
+    if (!contextRecordReader(store, taskId, environment)(family, id)) {
+        throw usageError("Context reference is outside the caller's Assignment.");
+    }
+}
 function isAllowed(allow, family, id) {
     return allow === undefined || allow.has(`${family}:${id}`);
 }
+function allowedIds(allow, family) {
+    const prefix = `${family}:`;
+    return allow === undefined ? undefined : [...allow]
+        .filter(ref => ref.startsWith(prefix)).map(ref => ref.slice(prefix.length));
+}
 function roleProfile(role) {
     return {
         name: role.name, defaultAccess: role.defaultAccess, description: role.description,
@@ -299,6 +298,8 @@ function inspectValue(store, { task, allow, caller }, { store: family, refId })
     switch (family) {
         case "task": return refId === taskId ? task : null;
         case "task-brief": return refId === taskId ? store.getTaskBrief(taskId) : null;
+        case "remote-delivery": return refId === taskId && allow === undefined
+            ? projectTaskRemoteDeliveryFromStore(store, task) : null;
         case "role": return store.getRole(taskId, refId);
         case "role-profile": {
             const role = store.getRole(taskId, refId);
@@ -330,7 +331,10 @@ function inspectValue(store, { task, allow, caller }, { store: family, refId })
             return store.getWorkItem(taskId, parts[0])?.candidates
                 .find((candidate) => candidate.id === parts[1]) ?? null;
         }
-        case "task-message": return store.listMessages(taskId).find((message) => message.id === refId) ?? null;
+        case "task-message":
+        case "publication":
+        case "task-event":
+            return store.queryContextRecords(taskId, { family, ids: [refId], limit: 1 }).records[0]?.value ?? null;
         case "run": return store.getRun(taskId, refId);
         case "source-run": {
             if (!allow?.has(`source-turn:${refId}`))
@@ -382,21 +386,31 @@ function inspectValue(store, { task, allow, caller }, { store: family, refId })
         case "task-decision": return store.getDecision(taskId, refId);
         case "task-milestone": return store.getMilestone(taskId, refId);
         case "job": return store.getDurableJob(taskId, refId);
-        case "publication": return store.listPublicationReferences(taskId).find((item) => item.id === refId) ?? null;
-        case "task-event": return store.listEvents(taskId).find((event) => event.id === refId) ?? null;
         default: return null;
     }
 }
-function authorizedEntries(store, taskId, environment) {
-    const { task, allow, caller } = authorizeContext(store, taskId, environment);
-    const entries = [];
+function authorizedSources(store, { task, allow, caller }) {
+    const taskId = task.id;
+    const sources = [];
     const add = (family, id, value) => {
         if (value !== null && isAllowed(allow, family, id)) {
-            entries.push(materialize(family, id, value));
+            sources.push({ count: 1, read: () => [materialize(family, id, value)] });
         }
     };
+    const query = (family, options = {}) => {
+        const selection = { ...options, family, ids: allowedIds(allow, family) };
+        const { count } = store.queryContextRecords(taskId, { ...selection, limit: 0 });
+        sources.push({ count, *read() {
+                for (const { id, value } of store.queryContextRecords(taskId, {
+                    ...selection, limit: MAX_RECORDS
+                }).records)
+                    yield materialize(family, id, value);
+            } });
+    };
     add("task", taskId, task);
     add("task-brief", taskId, store.getTaskBrief(taskId));
+    if (allow === undefined)
+        add("remote-delivery", taskId, projectTaskRemoteDeliveryFromStore(store, task));
     for (const role of store.listRoles(taskId)) {
         add("role", role.name, role);
         add("role-profile", role.name, roleProfile(role));
@@ -412,65 +426,52 @@ function authorizedEntries(store, taskId, environment) {
         }
     }
     // Current responsibilities and unanswered inputs precede historical bulk.
-    for (const request of store.listInputRequests(taskId).filter((r) => r.status === "open"))
-        add("input-request", request.id, request);
-    for (const item of store.listWorkItems(taskId).sort((a, b) => b.updatedAt.localeCompare(a.updatedAt))) {
-        add("work-item", item.id, item);
-        if (allow?.has(`accepted-work-item:${item.id}`))
-            add("accepted-work-item", item.id, item);
-        for (const candidate of [...item.candidates].reverse())
-            add("candidate", `${item.id}/${candidate.id}`, candidate);
+    query("input-request", { statuses: ["open"] });
+    query("work-item");
+    for (const id of allowedIds(allow, "accepted-work-item") ?? []) {
+        add("accepted-work-item", id, store.getWorkItem(taskId, id));
     }
+    query("candidate");
     // File artifacts are not enumerated into the synchronous Context listing: the
     // core cursor does not cover file edits and an ambient directory index here
     // would be the forbidden update-time mirror (§3.7). Current artifacts are
     // listed on demand via the async `artifact.list` capability; frozen Candidate
     // artifacts remain reachable as commit-pinned pointers under their Candidate.
-    for (const preparation of store.listEnvironmentPreparations(taskId))
-        add("environment-preparation", preparation.id, preparation);
-    for (const workspace of store.listManagedWorkspaces(taskId))
-        add("managed-workspace", managedWorkspaceKey(workspace.owner), workspace);
+    query("environment-preparation");
+    query("managed-workspace");
     if (caller?.currentRunId !== undefined) {
         add("managed-workspace", `${taskId}/${caller.roleName}`, store.getRun(taskId, caller.currentRunId)?.workspace ?? null);
     }
-    for (const changeSet of store.listChangeSets(taskId))
-        add("change-set", changeSet.id, changeSet);
-    for (const message of store.listMessages(taskId).reverse())
-        add("task-message", message.id, message);
-    for (const run of store.listRuns(taskId).reverse()) {
-        add("run", run.id, run);
-        if (allow?.has(`source-turn:${run.id}`))
-            add("source-run", run.id, sourceRunContextValue(run));
+    query("change-set");
+    query("task-message", { descending: true });
+    query("run", { descending: true });
+    for (const id of allowedIds(allow, "source-turn") ?? []) {
+        const run = store.getRun(taskId, id);
+        if (run !== null)
+            add("source-run", id, sourceRunContextValue(run));
     }
-    for (const round of store.listReviewRounds(taskId).reverse())
-        add("review-round", round.id, round);
-    for (const request of store.listInputRequests(taskId).filter((r) => r.status !== "open"))
-        add("input-request", request.id, request);
+    query("review-round", { descending: true });
+    query("input-request", { excludeStatuses: ["open"] });
     if (allow === undefined) {
         add("mailbox", "task", store.getWorkMailbox({ kind: "task", taskId }));
         for (const role of store.listRoles(taskId)) {
             add("mailbox", `role:${role.name}`, store.getWorkMailbox({ kind: "role", taskId, roleName: role.name }));
         }
     }
-    for (const decision of store.listDecisions(taskId))
-        add("task-decision", decision.id, decision);
-    for (const milestone of store.listMilestones(taskId))
-        add("task-milestone", milestone.id, milestone);
-    for (const job of store.listDurableJobs(taskId))
-        add("job", job.id, job);
-    for (const publication of store.listPublicationReferences(taskId))
-        add("publication", publication.id, publication);
-    for (const event of store.listEvents(taskId).reverse())
-        add("task-event", event.id, event);
-    return entries;
+    query("task-decision");
+    query("task-milestone");
+    query("job");
+    query("publication");
+    query("task-event", { descending: true });
+    return sources;
 }
-function materialize(store, refId, value) {
+export function materialize(store, refId, value) {
     const digest = contextContentDigest(value);
     const record = value;
     return { ref: { store, refId, revision: String(record.revision ?? record.updatedAt ?? record.createdAt ?? digest), digest }, value };
 }
-function currentCursor(store, taskId, events = store.listEvents(taskId)) {
-    return { taskId, sequence: events.reduce((max, e) => Math.max(max, sequence(e.id)), 0), revision: store.getStateRevision() };
+function currentCursor(store, taskId) {
+    return { taskId, sequence: store.latestEventSequence(taskId), revision: store.getStateRevision() };
 }
 function sequence(id) {
     const result = /^event-(\d+)$/.exec(id);

package/dist/context/wakeRunReferences.js

@@ -0,0 +1,11 @@
+import { operationalTaskRecords } from "../task/taskRecordRetirement.js";
+/** Exact results named by a notification delta, including Runs older than its cursor. */
+export function referencedWakeRunIds(runs, allEvents, terminalEvents) {
+    const runsById = new Map(operationalTaskRecords(runs, allEvents, "run").map(run => [run.id, run]));
+    return [...new Set(terminalEvents.flatMap(event => {
+            if (!["run.completed", "run.failed", "run.cancelled"].includes(event.type))
+                return [];
+            const runId = event.payload.runId;
+            return runId !== undefined && runsById.has(runId) ? [runId] : [];
+        }))];
+}

package/dist/controller/agentCapabilities.js

@@ -0,0 +1,58 @@
+import { usageError } from "../errors/cliError.js";
+import { resolveTaskAgentCapabilities } from "../executor/taskAgentCapabilities.js";
+import { requireManagedGlobalCaller } from "../runtime/managedCaller.js";
+const READER_FIELDS = [
+    "YUI_SESSION_SCOPE", "YUI_TASK_ID", "YUI_ROLE", "YUI_NATIVE_SESSION_ID",
+    "YUI_AGENT_ID", "YUI_ADAPTER_ID", "YUI_WORKSPACE", "CODEX_THREAD_ID"
+];
+/** Transport only the existing reader identity, never the caller's credentials. */
+export function capabilityReaderIdentity(environment) {
+    if (environment.YUI_SESSION_SCOPE === undefined) {
+        if (["YUI_ROLE", "YUI_AGENT_ID", "YUI_NATIVE_SESSION_ID"].some(key => environment[key] !== undefined)) {
+            throw usageError("Managed reader identity is incomplete.");
+        }
+        return {};
+    }
+    return Object.fromEntries(READER_FIELDS.flatMap(key => environment[key] === undefined ? [] : [[key, environment[key]]]));
+}
+/** Metadata discovery uses the Controller's launch environment. No start,
+ * retry, credential forwarding or Role mutation belongs to this read port. */
+export async function readTaskAgentCapabilities(store, catalogs, params) {
+    if (!params || typeof params !== "object" || Array.isArray(params)) {
+        throw usageError("Task capability query parameters are invalid.");
+    }
+    const input = params;
+    if (Object.keys(input).some(key => !["taskId", "roleName", "errorId", "refresh", "reader"].includes(key))
+        || typeof input.taskId !== "string" || input.taskId.length === 0
+        || typeof input.roleName !== "string" || input.roleName.length === 0
+        || (input.errorId !== undefined && (typeof input.errorId !== "string" || input.errorId.length === 0))
+        || (input.refresh !== undefined && typeof input.refresh !== "boolean")
+        || !input.reader || typeof input.reader !== "object" || Array.isArray(input.reader)) {
+        throw usageError("Task capability query parameters are invalid.");
+    }
+    const reader = {};
+    for (const [key, value] of Object.entries(input.reader)) {
+        if (!READER_FIELDS.includes(key) || typeof value !== "string") {
+            throw usageError("Task capability reader contains unsupported fields.");
+        }
+        reader[key] = value;
+    }
+    if (Object.keys(reader).length > 0 && reader.YUI_SESSION_SCOPE !== "task"
+        && reader.YUI_SESSION_SCOPE !== "global")
+        throw usageError("Managed reader scope is invalid.");
+    if (reader.YUI_SESSION_SCOPE === "global") {
+        const caller = requireManagedGlobalCaller(store, reader);
+        if (caller.roleName !== "operator")
+            throw usageError("Only the Operator may query another Role's native configuration.");
+    }
+    const request = resolveTaskAgentCapabilities({
+        taskId: input.taskId, roleName: input.roleName,
+        ...(input.errorId === undefined ? {} : { errorId: input.errorId }),
+        refresh: input.refresh === true,
+    }, store, reader);
+    const resolved = await catalogs.resolve(request.input);
+    const result = {
+        ...resolved, context: { ...request.context, environmentSource: "controller" }
+    };
+    return result;
+}

package/dist/controller/agentRuntimeObserver.js

@@ -238,17 +238,12 @@ export class AgentRuntimeObserver {
     }
     activeSources() {
         const result = [];
-        const indexedTaskIds = this.store.listActiveTaskIds?.();
-        // Stores without the indexed projection remain useful for deterministic
-        // tests. The production SQLite store discovers only its indexed hot set.
-        const activeTasks = indexedTaskIds === undefined
-            ? this.store.listTasks().filter((task) => (task.status === "active" && task.executionGate.state === "enabled"))
-            : [...new Set(indexedTaskIds)]
-                .sort(numericCompare)
-                .map((taskId) => this.store.getTask(taskId))
-                .filter((task) => (task !== null
-                && task.status === "active"
-                && task.executionGate.state === "enabled"));
+        const activeTasks = [...new Set(this.store.listActiveTaskIds())]
+            .sort(numericCompare)
+            .map((taskId) => this.store.getTask(taskId))
+            .filter((task) => (task !== null
+            && task.status === "active"
+            && task.executionGate.state === "enabled"));
         for (const task of activeTasks) {
             // A Task still incurs one O(E) event projection. Group those observations
             // by AgentRun and sort each group once so every active AgentRun can reuse the same