@zq-silk/yui 0.16.2 → 1.0.0-alpha

package/dist/core/controllerServer.js

@@ -171,7 +171,7 @@ async function startControllerServerLocked(home, dispatcher, beforeDiscoveryRemo
     }
 }
 /**
- * Fence an older Controller whose socket name was derived by another protocol.
+ * Prevent a second Controller from claiming a Home with existing discovery.
  * A dead or PID-reused owner is stale and may be replaced; an unverifiable
  * live owner fails closed so an endpoint migration can never create dual
  * writers for one durable Home.
@@ -362,6 +362,8 @@ async function routeRequest(socket, line, token, dispatcher, stop, status, telem
                 cliRealpath: controllerCliRealpath(),
                 controllerRealpath: realpathSync(fileURLToPath(import.meta.url)),
                 controllerProtocolVersion: FILE_TASK_CONTROLLER_PROTOCOL_VERSION,
+                storageVersion: yuiVersionIdentity().storageVersion,
+                minimumStorageVersion: yuiVersionIdentity().minimumStorageVersion,
                 homeId,
                 homeFilesystemId,
                 controllerInstanceId,
@@ -676,7 +678,7 @@ export function buildRuntimeIdentityReceipt(input) {
         }
     })();
     return Object.freeze({
-        schemaVersion: 2,
+        schemaVersion: 1,
         version: YUI_VERSION,
         executablePath: process.execPath,
         args: process.argv.slice(1),

package/dist/core/protocol.js

@@ -3,7 +3,7 @@ import { validateHomeFilesystemId } from "./homeFilesystemIdentity.js";
 export const MAX_CONTROLLER_MESSAGE_BYTES = 1_048_576;
 export const CONTROLLER_DISCOVERY_PATH = "runtime/controller.json";
 /** Bump when a running Controller cannot safely share one YUI_HOME with this CLI. */
-export const FILE_TASK_CONTROLLER_PROTOCOL_VERSION = 4;
+export const FILE_TASK_CONTROLLER_PROTOCOL_VERSION = 1;
 export class ControllerProtocolError extends Error {
     code;
     id;

package/dist/domain/validation.js

@@ -51,6 +51,12 @@ export function normalizedUniqueIdentities(values, label) {
 export function cloneJson(value) {
     return JSON.parse(JSON.stringify(value));
 }
+/** Current envelopes accept only declared fields; no historical-field denylist. */
+export function requireKnownFields(value, fields, label) {
+    const unknown = Object.keys(value).find(key => !fields.includes(key));
+    if (unknown !== undefined)
+        throw new Error(`${label} has unsupported field: ${unknown}.`);
+}
 /**
  * True for a concrete, pinnable package version — a semver-shaped `X.Y.Z` with
  * an optional pre-release/build suffix. Rejects dist-tag sentinels (`latest`,

package/dist/event/taskEvent.js

@@ -2,7 +2,7 @@ import { validateTaskRecordReference } from "../task/taskRecordReference.js";
 import { requireTimestamp } from "../domain/validation.js";
 export function createTaskEvent(id, taskId, type, payload, now) {
     const event = {
-        schemaVersion: 2,
+        schemaVersion: 1,
         id: requireText(id, "Task event id"),
         taskId: requireText(taskId, "Task event Task id"),
         type: requireText(type, "Task event type"),
@@ -12,8 +12,8 @@ export function createTaskEvent(id, taskId, type, payload, now) {
     return validateTaskEvent(event);
 }
 export function validateTaskEvent(event) {
-    if (event.schemaVersion !== 2)
-        throw new Error("Task Event must use schemaVersion 2.");
+    if (event.schemaVersion !== 1)
+        throw new Error("Task Event must use schemaVersion 1.");
     validateTaskRecordReference({ taskId: event.taskId, localId: event.id }, "event");
     requireText(event.type, "Task event type");
     if (event.payload === null || typeof event.payload !== "object" || Array.isArray(event.payload)) {

package/dist/execution/workItemExecution.js

@@ -3,8 +3,8 @@ import { normalizedUniqueIdentities, normalizedUniqueText, requireIdentity, requ
 import { validateContextSnapshotRef } from "../context/contextSnapshot.js";
 import { validateEffectiveLaunchSnapshot } from "../executor/effectiveLaunch.js";
 import { MAX_SYNTHESIS_SOURCE_RUNS } from "../context/sourceRunContext.js";
-export const WORK_ITEM_EXECUTION_GROUP_SCHEMA_VERSION = 2;
-export const WORK_ITEM_EXECUTION_LANE_SCHEMA_VERSION = 2;
+export const WORK_ITEM_EXECUTION_GROUP_SCHEMA_VERSION = 1;
+export const WORK_ITEM_EXECUTION_LANE_SCHEMA_VERSION = 1;
 export const WORK_ITEM_EXECUTION_ASSIGNMENT_SCHEMA_VERSION = 1;
 export const MINIMUM_EXECUTION_GROUP_LANES = 2;
 export const EXECUTION_GROUP_SCHEMA_VERSION = WORK_ITEM_EXECUTION_GROUP_SCHEMA_VERSION;

package/dist/executor/agentExecutor.js

@@ -36,10 +36,10 @@ export function createRoleSessionSet(owner, activeAgentId, now) {
         updatedAt: now.toISOString()
     };
     return owner.scope === "global"
-        ? { ...base, schemaVersion: 5, providerBinding: null }
+        ? { ...base, schemaVersion: 1, providerBinding: null }
         : {
             ...base,
-            schemaVersion: 12,
+            schemaVersion: 1,
             providerBinding: null
         };
 }
@@ -106,7 +106,7 @@ export function recordRoleAgentSession(set, input, now) {
         throw new Error("A native Session cannot change its Endpoint implementation in place.");
     }
     const session = {
-        schemaVersion: 6,
+        schemaVersion: 1,
         agentId,
         adapterId,
         nativeSessionId,
@@ -464,7 +464,7 @@ export function validateRoleSessionSet(set) {
         validateRoleAgentSession(session, agentId);
     }
     if (set.owner.scope === "global") {
-        if (set.schemaVersion !== 5) {
+        if (set.schemaVersion !== 1) {
             throw new Error("Global Role session set schema version is invalid.");
         }
         const globalSet = set;
@@ -503,7 +503,7 @@ export function validateRoleSessionSet(set) {
         }
     }
     else {
-        if (set.schemaVersion !== 12) {
+        if (set.schemaVersion !== 1) {
             throw new Error("Task Role session set schema version is invalid.");
         }
         if (!Object.hasOwn(set, "providerBinding")) {
@@ -550,7 +550,7 @@ export function validateRoleSessionSet(set) {
     return set;
 }
 export function validateRoleAgentSession(session, expectedAgentId = session.agentId) {
-    if (session.schemaVersion !== 6) {
+    if (session.schemaVersion !== 1) {
         throw new Error(`Role Agent session schema version is invalid: ${expectedAgentId}.`);
     }
     const agentId = requireSafeIdentity(session.agentId, "Agent id");

package/dist/executor/effectiveLaunch.js

@@ -172,8 +172,8 @@ function sessionContinuitySnapshot(snapshot) {
     };
 }
 export function validateEffectiveLaunchSnapshot(snapshot) {
-    if (snapshot.schemaVersion !== 4) {
-        throw new Error("Effective launch snapshot must use schemaVersion 4.");
+    if (snapshot.schemaVersion !== 1) {
+        throw new Error("Effective launch snapshot must use schemaVersion 1.");
     }
     if (snapshot.executionAuthority !== "planning" && snapshot.executionAuthority !== "delivery") {
         throw new Error("Effective launch requires its captured execution authority.");
@@ -278,7 +278,7 @@ function snapshotFromConfig(input) {
             reviewBaseCommit: commit(input.reviewBaseCommit ?? "", "Review base commit")
         };
     const common = {
-        schemaVersion: 4,
+        schemaVersion: 1,
         executionAuthority: input.executionAuthority,
         sourceDesiredRevision: positiveInteger(input.sourceDesiredRevision, "Source desired revision"),
         agentId: identity(input.agentId, "Effective Agent id"),

package/dist/grant/capabilityGrant.js

@@ -1,6 +1,6 @@
 import { requireIdentity, requireText, requireTimestamp, requirePositiveInteger } from "../domain/validation.js";
 import { validateTaskRecordReference } from "../task/taskRecordReference.js";
-export const CAPABILITY_GRANT_SCHEMA_VERSION = 2;
+export const CAPABILITY_GRANT_SCHEMA_VERSION = 1;
 const IRREVERSIBILITY_RANK = {
     none: 0,
     reversible: 1,
@@ -105,7 +105,7 @@ export function revokeGrant(grant, revokedBy, now) {
 }
 export function validateCapabilityGrant(grant) {
     if (grant.schemaVersion !== CAPABILITY_GRANT_SCHEMA_VERSION) {
-        throw new Error("Capability grant must use schemaVersion 2.");
+        throw new Error("Capability grant must use schemaVersion 1.");
     }
     validateTaskRecordReference({ taskId: grant.taskId, localId: grant.id }, "capabilityGrant");
     requireIdentity(grant.taskId, "Task id");

package/dist/input/inputRequest.js

@@ -14,7 +14,7 @@ export function createInputRequest(id, taskId, requester, input, now) {
     const timestamp = requireDate(now, "Input request creation time");
     const choices = normalizeChoices(input.choices);
     return validateInputRequest({
-        schemaVersion: 3,
+        schemaVersion: 1,
         id: requireIdentity(id, "Input request id"),
         taskId: requireIdentity(taskId, "Input request Task id"),
         requester: normalizeRequester(requester),
@@ -72,12 +72,12 @@ export function validateInputRequest(value) {
         "schemaVersion", "id", "taskId", "requester", "question", "choices",
         "blockedRefs", "policy", "status", "createdAt", "updatedAt", ...terminalField
     ], "Input request");
-    if (request.schemaVersion !== 3)
-        throw new Error("Input request must use schemaVersion 3.");
+    if (request.schemaVersion !== 1)
+        throw new Error("Input request must use schemaVersion 1.");
     const choices = validateChoices(request.choices);
     const createdAt = requireTimestamp(request.createdAt, "Input request createdAt");
     const base = {
-        schemaVersion: 3,
+        schemaVersion: 1,
         id: requireIdentity(request.id, "Input request id"),
         taskId: requireIdentity(request.taskId, "Input request Task id"),
         requester: normalizeRequester(request.requester),

package/dist/integration/changeSet.js

@@ -3,7 +3,7 @@ import { validateTaskRecordReference } from "../task/taskRecordReference.js";
 import { validateChangeSetManifest } from "./changeSetManifest.js";
 export function createWorkItemChangeSet(input, now) {
     return validateChangeSet({
-        schemaVersion: 4,
+        schemaVersion: 1,
         ...input,
         changedPaths: [...input.changedPaths],
         manifest: validateChangeSetManifest(input.manifest),
@@ -11,8 +11,8 @@ export function createWorkItemChangeSet(input, now) {
     });
 }
 export function validateChangeSet(changeSet) {
-    if (changeSet.schemaVersion !== 4)
-        throw new Error("ChangeSet must use schemaVersion 4.");
+    if (changeSet.schemaVersion !== 1)
+        throw new Error("ChangeSet must use schemaVersion 1.");
     validateTaskRecordReference({ taskId: changeSet.taskId, localId: changeSet.id }, "changeSet");
     validateTaskRecordReference({
         taskId: changeSet.taskId,

package/dist/integration/integrationAttempt.js

@@ -4,7 +4,7 @@ import { normalizeCheckResult } from "./checkResult.js";
 export function createIntegrationAttempt(input, now) {
     const timestamp = now.toISOString();
     return validateIntegrationAttempt({
-        schemaVersion: 6,
+        schemaVersion: 1,
         id: input.id,
         taskId: input.taskId,
         projectId: input.projectId,
@@ -132,8 +132,8 @@ export function supersedeIntegration(attempt, reason, now) {
     });
 }
 export function validateIntegrationAttempt(attempt) {
-    if (attempt.schemaVersion !== 6) {
-        throw new Error("IntegrationAttempt must use schemaVersion 6.");
+    if (attempt.schemaVersion !== 1) {
+        throw new Error("IntegrationAttempt must use schemaVersion 1.");
     }
     validateTaskRecordReference({
         taskId: attempt.taskId,

package/dist/integration/integrationSourceApplication.js

@@ -233,7 +233,7 @@ async function assertOperation(path, kind, commit, before, branch, source) {
         throw new Error(`Integration expected ${kind}, found ${active ?? "no active Git operation"}.`);
     if (kind === "rebase") {
         const directory = await gitPath(path, "rebase-merge");
-        // Yui invokes the merge backend explicitly. A legacy apply-backend
+        // Yui invokes the merge backend explicitly. An apply-backend
         // operation cannot be silently treated as the same execution.
         const [onto, original, headName] = await Promise.all(["onto", "orig-head", "head-name"].map(name => readFile(resolve(directory, name), "utf8")));
         if (source.kind !== "upstream" || onto.trim() !== commit

package/dist/job/durableJob.js

@@ -2,7 +2,7 @@ import { createHash } from "node:crypto";
 import { requireIdentity, requirePositiveInteger, requireText, requireTimestamp } from "../domain/validation.js";
 import { validateTaskRecordReference } from "../task/taskRecordReference.js";
 import { recordOperationEvidence, validateOperationFacts } from "../kernel/operationFacts.js";
-export const CURRENT_DURABLE_JOB_SCHEMA_VERSION = 2;
+export const CURRENT_DURABLE_JOB_SCHEMA_VERSION = 1;
 export const JOB_RUNNER_IMPLEMENTATION = Object.freeze({ id: "yui:job-runner", generation: "1" });
 export const DURABLE_JOB_TERMINAL_STATUSES = [
     "succeeded",

package/dist/job/jobRunner.js

@@ -128,8 +128,8 @@ export async function runDurableJobRunner(specPath) {
             let child;
             try {
                 // Issue 08: a structured argv step executes without a shell so its
-                // tokens can never be reinterpreted; a legacy command step keeps the
-                // shell form. A per-step cwd/env override applies to either form.
+                // tokens can never be reinterpreted; an explicit command step uses
+                // the shell. A per-step cwd/env override applies to either form.
                 const stepCwd = jobStepDirectory(spec.workspace, step.cwd);
                 const stepEnv = step.env === undefined
                     ? spec.env

package/dist/message/message.js

@@ -1,4 +1,5 @@
 import { validateTaskRecordReference } from "../task/taskRecordReference.js";
+import { requireKnownFields } from "../domain/validation.js";
 export const TASK_MESSAGE_KINDS = ["user", "operator", "role-result", "system"];
 /**
  * How a user/operator submission asks its Task to react (task-32 Requirement A).
@@ -24,7 +25,7 @@ export const TASK_MESSAGE_INPUT_CONTROL_OUTCOMES = ["pending", "accepted", "reje
 export function createTaskMessage(id, taskId, body, kind, author, now, context = {}) {
     validateKindAndAuthor(kind, author);
     const message = {
-        schemaVersion: 3,
+        schemaVersion: 1,
         id: requireSafeIdentity(id, "Message id"),
         taskId: requireSafeIdentity(taskId, "Message Task id"),
         kind,
@@ -199,15 +200,16 @@ export function withSubmissionReceipt(message, receipt) {
     return updated;
 }
 export function validateTaskMessage(message) {
-    if (message.schemaVersion !== 3)
-        throw new Error("Task Message must use schemaVersion 3.");
+    if (message.schemaVersion !== 1)
+        throw new Error("Task Message must use schemaVersion 1.");
+    requireKnownFields(message, [
+        "schemaVersion", "id", "taskId", "kind", "author", "body", "intent", "submissionKey", "submissionReceipt",
+        "inputControl", "interruptThen", "control", "runId", "resultRef", "workItemId", "recipient", "continuation", "handovers", "createdAt"
+    ], "Task Message");
     validateTaskRecordReference({ taskId: message.taskId, localId: message.id }, "message");
     requireText(message.body, "Message body");
     validateKindAndAuthor(message.kind, message.author);
     normalizeAuthor(message.author);
-    if (Object.hasOwn(message, "wakePolicy")) {
-        throw new Error("Message contains a retired wake policy; use the storage upgrade boundary.");
-    }
     if ((message.kind === "user" || message.kind === "operator") && message.intent === undefined) {
         throw new Error("User/operator Message intent is required.");
     }

package/dist/milestone/milestone.js

@@ -1,8 +1,8 @@
 import { validateTaskRecordReference } from "../task/taskRecordReference.js";
 import { requireTimestamp } from "../domain/validation.js";
 export function validateMilestone(milestone) {
-    if (milestone.schemaVersion !== 2)
-        throw new Error("Milestone must use schemaVersion 2.");
+    if (milestone.schemaVersion !== 1)
+        throw new Error("Milestone must use schemaVersion 1.");
     validateTaskRecordReference({ taskId: milestone.taskId, localId: milestone.id }, "milestone");
     requireText(milestone.title, "Milestone title");
     requireText(milestone.summary, "Milestone summary");
@@ -12,7 +12,7 @@ export function validateMilestone(milestone) {
 }
 export function createMilestone(id, taskId, title, summary, createdBy, now) {
     return {
-        schemaVersion: 2,
+        schemaVersion: 1,
         id: validateTaskRecordReference({ taskId, localId: id }, "milestone").localId,
         taskId: requireSafeIdentity(taskId, "Task id"),
         title: requireText(title, "Milestone title"),

package/dist/profile/agentProfile.js

@@ -8,7 +8,7 @@ export const BUILTIN_PROFILE_IDS = Object.freeze([
 export function createAgentProfile(input, now) {
     const timestamp = now.toISOString();
     return validateAgentProfile({
-        schemaVersion: 3,
+        schemaVersion: 1,
         id: requireIdentity(input.id, "Agent Profile id"),
         revision: 1,
         ...normalizeInput(input),
@@ -31,8 +31,8 @@ export function updateAgentProfile(profile, patch, now) {
     return validateAgentProfile(candidate);
 }
 export function validateAgentProfile(profile) {
-    if (profile.schemaVersion !== 3) {
-        throw new Error("AgentProfile must use schemaVersion 3.");
+    if (profile.schemaVersion !== 1) {
+        throw new Error("AgentProfile must use schemaVersion 1.");
     }
     requireIdentity(profile.id, "Agent Profile id");
     requirePositiveInteger(profile.revision, "Agent Profile revision");

package/dist/release/runtimeRelease.js

@@ -15,6 +15,7 @@
  * deterministic and recoverable.
  */
 import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { isStorageVersion, compareStorageVersions } from "../storage/storageVersions.js";
 import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, readlinkSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { readLinuxProcessStartIdentity } from "../controller/domainIdentity.js";
@@ -133,7 +134,7 @@ export function writeActiveReleasePointer(home, pointer) {
 }
 /**
  * Resolves the Home's active release. Returns null when no pointer exists
- * (legacy/dev Home). Fails closed when the pointer names a release that is
+ * (no immutable release selected). Fails closed when the pointer names a release that is
  * missing or drifted.
  */
 export function resolveActiveRelease(home) {
@@ -478,7 +479,7 @@ function validatePointer(value) {
 function validateRuntimeIdentity(value) {
     if (value === null
         || typeof value !== "object"
-        || value.schemaVersion !== 2
+        || value.schemaVersion !== 1
         || typeof value.version !== "string"
         || typeof value.executablePath !== "string"
         || value.executablePath === ""
@@ -487,15 +488,16 @@ function validateRuntimeIdentity(value) {
         || typeof value.cliRealpath !== "string"
         || typeof value.controllerRealpath !== "string"
         || !isPositiveInteger(value.controllerProtocolVersion)
-        || !isPositiveInteger(value.storageVersion)
-        || !isPositiveInteger(value.minimumStorageVersion)
-        || value.minimumStorageVersion
-            > value.storageVersion
+        || !isStorageVersion(value.storageVersion)
+        || !isStorageVersion(value.minimumStorageVersion)
+        || compareStorageVersions(value.minimumStorageVersion, value.storageVersion) > 0
         || typeof value.pid !== "number"
         || typeof value.processStartIdentity !== "string"
         || (value.mode !== "primary"
             && value.mode !== "candidate")
-        || typeof value.dualOwner !== "boolean") {
+        || typeof value.dualOwner !== "boolean"
+        || value.storageBackend !== "sqlite"
+        || typeof value.workerEnabled !== "boolean") {
         throw new Error("Runtime identity receipt is invalid.");
     }
     return value;

package/dist/repository/project.js

@@ -8,7 +8,7 @@ export function managedProjectPath(home, projectId) {
 export function createProject(id, name, path, branches, now, metadata = {}) {
     const timestamp = now.toISOString();
     return validateProject({
-        schemaVersion: 6,
+        schemaVersion: 1,
         id: requireIdentity(id, "Project id"),
         name: validateProjectName(name),
         aliases: normalizeAliases(metadata.aliases ?? [], name),
@@ -278,8 +278,8 @@ export function assertProjectCatalog(projects) {
     }
 }
 export function validateProject(project) {
-    if (project.schemaVersion !== 6) {
-        throw new Error("Project must use schemaVersion 6.");
+    if (project.schemaVersion !== 1) {
+        throw new Error("Project must use schemaVersion 1.");
     }
     if (!Array.isArray(project.resourceRefs))
         throw new Error("Project resourceRefs must be an array.");

package/dist/resources/liveReferences.js

@@ -91,7 +91,7 @@ export async function scanLiveReferences(input) {
     diagnostics.push(...tmuxResult.diagnostics);
     // 3. Controller discovery: a running Controller protects only its own
     //    discovery record. Its cwd and open files are covered by the /proc
-    //    scan above, so a live Controller does not blanket-protect legacy
+    //    scan above, so a live Controller does not blanket-protect unattributed
     //    deployments and worktrees that no descriptor references — automatic
     //    GC (which runs inside the Controller) would otherwise be a no-op.
     const discovery = readControllerDiscovery(home);

package/dist/resources/sqliteResourceRegistry.js

@@ -14,7 +14,7 @@ import { existsSync } from "node:fs";
 import { join } from "node:path";
 import { isDeepStrictEqual } from "node:util";
 import Database from "better-sqlite3";
-import { migrateSqliteSchema } from "../storage/sqliteSchema.js";
+import { validateSqliteSchema } from "../storage/sqliteSchema.js";
 import { emptyResourceRegistry, parseResourceRegistryState } from "./resourceRegistry.js";
 import { RESOURCE_REGISTRY_SCHEMA_VERSION } from "./resourceTypes.js";
 export const SQLITE_RESOURCE_REGISTRY_TABLE = "resource_registry";
@@ -31,10 +31,10 @@ export class SqliteResourceRegistry {
         }
         this.#db = new Database(dbPath);
         try {
+            validateSqliteSchema(this.#db);
             this.#db.pragma("journal_mode = WAL");
             this.#db.pragma("foreign_keys = ON");
             this.#db.pragma("busy_timeout = 5000");
-            migrateSqliteSchema(this.#db, { mode: "validate" });
         }
         catch (error) {
             this.#db.close();

package/dist/review/reviewRound.js

@@ -5,7 +5,7 @@ import { validateManagedWorkspace } from "../worktree/managedWorkspace.js";
 import { assertExecutionGroupTransition, retryFailedExecutionLanes, validateExecutionGroup, validateReviewExecutionAssignment } from "../execution/workItemExecution.js";
 export function createReviewRound(id, taskId, workItemId, candidateId, reviewerRoleName, requestedBy, reviewBaseCommit, now, executionGroup) {
     return validateReviewRound({
-        schemaVersion: 8,
+        schemaVersion: 1,
         id: requireIdentity(id, "ReviewRound id"),
         taskId: requireIdentity(taskId, "Task id"),
         workItemId: requireIdentity(workItemId, "Work Item id"),
@@ -22,7 +22,7 @@ export function createReviewRound(id, taskId, workItemId, candidateId, reviewerR
 export function createTaskReviewRound(id, taskId, reviewerRoleName, requestedBy, taskCandidate, now, taskFinalReviewContract, executionGroup) {
     const candidate = validateTaskReviewCandidate(taskCandidate);
     return validateReviewRound({
-        schemaVersion: 8,
+        schemaVersion: 1,
         id: requireIdentity(id, "ReviewRound id"),
         taskId: requireIdentity(taskId, "Task id"),
         reviewerRoleName: requireIdentity(reviewerRoleName, "Reviewer Role"),
@@ -48,7 +48,7 @@ export function createTaskReviewRound(id, taskId, reviewerRoleName, requestedBy,
 export function createTaskDeltaReviewRound(id, taskId, reviewerRoleName, requestedBy, taskCandidate, deltaRecheck, now, taskFinalReviewContract, executionGroup) {
     const candidate = validateTaskReviewCandidate(taskCandidate);
     return validateReviewRound({
-        schemaVersion: 8,
+        schemaVersion: 1,
         id: requireIdentity(id, "ReviewRound id"),
         taskId: requireIdentity(taskId, "Task id"),
         reviewerRoleName: requireIdentity(reviewerRoleName, "Reviewer Role"),
@@ -285,8 +285,8 @@ export function validateReviewRound(round) {
         "createdAt",
         "endedAt"
     ], "ReviewRound");
-    if (round.schemaVersion !== 8)
-        throw new Error("ReviewRound must use schemaVersion 8.");
+    if (round.schemaVersion !== 1)
+        throw new Error("ReviewRound must use schemaVersion 1.");
     validateTaskRecordReference({ taskId: round.taskId, localId: round.id }, "reviewRound");
     requireIdentity(round.reviewerRoleName, "Reviewer Role");
     requireCommit(round.reviewBaseCommit, "Review base commit");

package/dist/role/role.js

@@ -30,14 +30,14 @@ export function createRole(taskId, name, bindings, activeAgentId, workspace, now
     const owner = createRoleOwner(name, bindings, activeAgentId, workspace, now, profile, defaultAccess);
     return validateTaskRole({
         ...owner,
-        schemaVersion: 4,
+        schemaVersion: 1,
         taskId: requireSafeIdentity(taskId, "Task id")
     });
 }
 export function createGlobalRole(name, bindings, activeAgentId, workspace, now, profile = {}, defaultAccess = "write") {
     return validateGlobalRole({
         ...createRoleOwner(name, bindings, activeAgentId, workspace, now, profile, defaultAccess),
-        schemaVersion: 3
+        schemaVersion: 1
     });
 }
 export function copyGlobalRoleToTaskRole(globalRole, taskId, now, name = globalRole.name) {
@@ -45,7 +45,7 @@ export function copyGlobalRoleToTaskRole(globalRole, taskId, now, name = globalR
     const timestamp = now.toISOString();
     return validateTaskRole({
         ...cloneProfile(globalRole),
-        schemaVersion: 4,
+        schemaVersion: 1,
         launchRevision: 1,
         defaultAccess: globalRole.defaultAccess,
         taskId: requireSafeIdentity(taskId, "Task id"),
@@ -189,6 +189,8 @@ export function unbindRoleAgent(role, sessions, agentId, now) {
     return { role: updatedRole, sessions: updatedSessions };
 }
 export function validateGlobalRole(role) {
+    if (Object.hasOwn(role, "taskId"))
+        throw new Error("Global Role cannot carry a Task identity.");
     return validateRoleOwner(role);
 }
 export function validateTaskRole(role) {
@@ -218,8 +220,7 @@ function createRoleOwner(name, bindings, activeAgentId, workspace, now, profile,
     };
 }
 function validateRoleOwner(role) {
-    const expectedSchemaVersion = "taskId" in role ? 4 : 3;
-    if (role.schemaVersion !== expectedSchemaVersion) {
+    if (role.schemaVersion !== 1) {
         throw new Error("Role schema version is invalid.");
     }
     if (!Number.isSafeInteger(role.launchRevision) || role.launchRevision < 1) {
@@ -256,9 +257,7 @@ function validateRoleOwner(role) {
 function validateRoleAgentBinding(binding) {
     const agentId = requireSafeIdentity(binding.agentId, "Role Agent id");
     const adapterId = requireSupportedAdapterId(binding.adapterId);
-    // Storage 10 backfilled every stored binding, so a missing component here is
-    // a corrupt record rather than an old one. Defaulting it would invent a
-    // product identity for data that never lost one.
+    // The current contract requires an explicit execution component.
     if (binding.component === undefined) {
         throw new Error(`Role Agent binding is missing its execution component: ${agentId}.`);
     }

package/dist/runtime/acpProtocol.js

@@ -126,9 +126,8 @@ export function acpPromptRequest(sessionId, text) {
 /**
  * Read a `configOptions` array from a session setup or set-option result.
  *
- * Returns undefined when the field is absent, which is how an Agent that
- * predates config options answers; that is a different fact from an Agent
- * answering with an empty list, which offers nothing configurable. Callers must
+ * Returns undefined when the field is absent: configuration support is then
+ * unobserved. An explicit empty list instead offers nothing configurable. Callers must
  * be able to tell those apart, so the absence is not flattened to `[]`.
  */
 export function readAcpConfigOptions(value) {

package/dist/runtime/agentDriverObservation.js

@@ -40,7 +40,7 @@ function observation(input, mapped) {
     const eventId = hookEventId(input, mapped, requestOccurrenceId);
     const fence = { ...input.fence, ...mapped.fence };
     return createRuntimeObservation({
-        schemaVersion: 4,
+        schemaVersion: 1,
         eventId,
         semanticKey: requestOccurrenceId === undefined
             ? runtimeObservationSemanticKey({

package/dist/runtime/agentHost.js

@@ -487,7 +487,7 @@ export async function runAgentHost(input) {
             const failures = [];
             try {
                 await persistAndSubmitExit(input.home, validateRuntimeProcessExitObservation({
-                    schemaVersion: 2,
+                    schemaVersion: 1,
                     observationId: `${hostInstanceId}-${hostSequence}`,
                     hostSequence,
                     hostInstanceId,
@@ -1684,7 +1684,7 @@ function isProviderDeliveryFailure(value) {
         && ["accepted", "not-accepted", "unknown"].includes(failure.inputDisposition ?? "");
 }
 function validateSnapshot(snapshot) {
-    if (snapshot.schemaVersion !== 2
+    if (snapshot.schemaVersion !== 1
         || !["idle", "starting", "ready", "settling", "delivery-unknown", "busy", "rejected", "failed", "exited"]
             .includes(snapshot.state)) {
         throw new Error("Agent Host snapshot is invalid.");
@@ -1727,7 +1727,7 @@ function validateSnapshot(snapshot) {
 }
 function hostSnapshot(state, fields = {}) {
     return validateSnapshot({
-        schemaVersion: 2,
+        schemaVersion: 1,
         state,
         ...definedFields(fields),
         updatedAt: new Date().toISOString()

package/dist/runtime/agentHostProtocol.js

@@ -1,7 +1,7 @@
 import { createSessionOwnerIdentity } from "./sessionOwnerIdentity.js";
 /** Current Host event source contract, independent of Home storage access. */
 export const AGENT_HOST_EVENT_PROTOCOL = "yui-agent-host-events/v1";
-export const AGENT_HOST_CONTROL_PROTOCOL = "yui-agent-host/v5";
+export const AGENT_HOST_CONTROL_PROTOCOL = "yui-agent-host-control/v1";
 export function readAgentHostObservationSource(value) {
     if (value === null || typeof value !== "object" || Array.isArray(value)) {
         throw new Error("Agent Host observation source is invalid.");
@@ -15,7 +15,7 @@ export function readAgentHostObservationSource(value) {
         throw new Error("Agent Host connection evidence is invalid.");
     }
     if (source.connection?.processOwner !== undefined
-        && (source.connection.processOwner.schemaVersion !== 2
+        && (source.connection.processOwner.schemaVersion !== 1
             || source.connection.processOwner.kind !== "yui-session-owner")) {
         throw new Error("Agent Host process custody wire contract is invalid.");
     }

package/dist/runtime/codexInteractiveHost.js

@@ -29,7 +29,7 @@ export async function runCodexInteractiveHost(home, payload, openAgentHostContro
     }
     const expectedId = environment.YUI_NATIVE_SESSION_ID;
     let snapshot = {
-        schemaVersion: 2, state: "starting", adapterId: "codex", updatedAt: new Date().toISOString()
+        schemaVersion: 1, state: "starting", adapterId: "codex", updatedAt: new Date().toISOString()
     };
     const control = await openAgentHostControl(home, payload, () => snapshot, async (request) => {
         if (request.type !== "status") {

package/dist/runtime/launchBroker.js

@@ -56,7 +56,7 @@ export function validateAgentHostLaunchPayload(value) {
     return validatePayload(value);
 }
 function validatePayload(payload) {
-    if (payload.schemaVersion !== 2)
+    if (payload.schemaVersion !== 1)
         throw new Error("Agent Host launch payload version is invalid.");
     text(payload.command, "command");
     text(payload.cwd, "cwd");