@zq-silk/yui 0.6.14 → 0.6.16

package/dist/cli/commandCatalog.js

@@ -1137,7 +1137,7 @@ export const ROOT_COMMAND = buildNode({
                         {
                             id: "manage",
                             title: "Commands",
-                            entries: ["add", "update", "retire", "list", "show", "propose", "proposals", "accept", "reject"]
+                            entries: ["add", "retire", "list", "show", "propose", "proposals", "accept", "reject"]
                         }
                     ],
                     children: [
@@ -1147,12 +1147,6 @@ export const ROOT_COMMAND = buildNode({
                             usage: "yui project knowledge add <project> <title> --body <text>",
                             options: ["--body"]
                         },
-                        {
-                            name: "update",
-                            summary: "Update active Project knowledge (Operator authority).",
-                            usage: "yui project knowledge update <project> <knowledge> [--title <text>] [--body <text>]",
-                            options: ["--title", "--body"]
-                        },
                         {
                             name: "retire",
                             summary: "Retire Project knowledge without deleting its record (Operator authority).",

package/dist/cli.js

@@ -1699,13 +1699,16 @@ async function deltaRecheckPreflightForTaskCommand(args, store, actualTaskReview
     if (previous === undefined) {
         throw usageError("Delta-recheck requires a previous completed Task-final Review that accepted a head.");
     }
-    const projectId = actualTaskReviewCandidate.projects[0].projectId;
-    const project = store.getProject(projectId);
-    if (project === null) {
-        throw usageError(`Delta-recheck Project not found: ${projectId}.`);
+    const repositoryPaths = {};
+    for (const candidateProject of actualTaskReviewCandidate.projects) {
+        const project = store.getProject(candidateProject.projectId);
+        if (project === null) {
+            throw usageError(`Delta-recheck Project not found: ${candidateProject.projectId}.`);
+        }
+        repositoryPaths[candidateProject.projectId] = project.path;
     }
     const assessment = await assessDeltaRecheck({
-        repositoryPath: project.path,
+        repositoryPaths,
         previousRound: previous,
         candidate: actualTaskReviewCandidate,
         git: new NodeGitWorkspace(),

package/dist/commands/projectCommands.js

@@ -610,23 +610,10 @@ function projectKnowledge(args, store, options) {
         };
     }
     if (command === "update") {
-        const usage = "Project knowledge update usage: yui project knowledge update <project> <knowledge> [--title <text>] [--body <text>].";
-        const parsed = parseKnowledgeUpdateArguments(rest, usage);
-        assertKnowledgeOperator(options, "update");
-        const updated = store.transaction((tx) => {
-            const project = requireProject(tx, parsed.project);
-            const next = updateProjectKnowledge(project, parsed.id, {
-                ...(parsed.title === undefined ? {} : { title: parsed.title }),
-                ...(parsed.body === undefined ? {} : { body: parsed.body })
-            }, (options.now ?? (() => new Date()))());
-            tx.saveProject(next);
-            return next;
-        });
-        return {
-            output: `Updated project knowledge ${parsed.id} in ${updated.id}\n`,
-            projectId: updated.id,
-            knowledgeId: parsed.id
-        };
+        throw usageError("Direct Project Knowledge update is not supported because it would erase version history. "
+            + "Propose the replacement with `yui project knowledge propose <project> ... --task <task>` "
+            + "and let the Operator apply it with `yui project knowledge accept <project> <proposal> "
+            + "--update <knowledge>`; use --supersedes when replacing Knowledge without proposal history.");
     }
     if (command === "retire") {
         if (rest.length !== 2) {
@@ -1024,6 +1011,17 @@ function acceptKnowledgeProposal(args, store, options) {
             if (target.status !== "active") {
                 throw usageError(`Knowledge is not active: ${target.id}.`);
             }
+            const previousProposal = target.provenance?.proposalId === undefined
+                ? null
+                : findKnowledgeProposal(next, target.provenance.proposalId);
+            if (previousProposal === null
+                || previousProposal.status !== "accepted"
+                || previousProposal.knowledgeId !== target.id
+                || previousProposal.title !== target.title
+                || previousProposal.body !== target.body) {
+                throw usageError(`Knowledge ${target.id} has no complete proposal-backed version history. `
+                    + "Create the replacement proposal with --supersedes instead of --update.");
+            }
             knowledgeId = target.id;
             next = updateProjectKnowledge(next, knowledgeId, {
                 title: proposal.title,
@@ -1255,43 +1253,6 @@ function parseProjectUpdateArguments(args, usage) {
         ...(development === undefined ? {} : { development })
     };
 }
-function parseKnowledgeUpdateArguments(args, usage) {
-    const positionals = [];
-    let title;
-    let body;
-    for (let index = 0; index < args.length; index += 1) {
-        const value = args[index];
-        if (value === "--title" || value === "--body") {
-            const next = args[index + 1];
-            if (next === undefined || next.startsWith("--"))
-                throw usageError(`${value} is required. ${usage}`);
-            if (value === "--title") {
-                if (title !== undefined)
-                    throw usageError(`--title may only be provided once. ${usage}`);
-                title = requireText(next, value);
-            }
-            else {
-                if (body !== undefined)
-                    throw usageError(`--body may only be provided once. ${usage}`);
-                body = requireText(next, value);
-            }
-            index += 1;
-            continue;
-        }
-        if (value.startsWith("--"))
-            throw usageError(`Unknown option: ${value}. ${usage}`);
-        positionals.push(value);
-    }
-    if (positionals.length !== 2 || (title === undefined && body === undefined)) {
-        throw usageError(usage);
-    }
-    return {
-        project: positionals[0],
-        id: positionals[1],
-        ...(title === undefined ? {} : { title }),
-        ...(body === undefined ? {} : { body })
-    };
-}
 function parseCloneArguments(args, usage) {
     const positionals = [];
     const aliases = [];

package/dist/context/sessionContextBudget.js

@@ -60,8 +60,11 @@ function usageTotal(usage) {
     const inputTokens = integer(record.inputTokens);
     if (inputTokens === null)
         return null;
-    const cachedInputTokens = integer(record.cachedInputTokens) ?? 0;
-    return inputTokens + cachedInputTokens;
+    // RuntimeUsageSnapshot.inputTokens is the normalized processed input total.
+    // cachedInputTokens is an informational breakdown of that total, matching
+    // runtimeProjection and the Driver documentation; adding it again would
+    // fabricate context pressure and trigger premature Session rollover.
+    return inputTokens;
 }
 function integer(value) {
     return Number.isSafeInteger(value) && value >= 0 ? value : null;

package/dist/controller/fileSchedulerStoreAdapter.js

@@ -2068,6 +2068,14 @@ export class FileSchedulerStoreAdapter {
         if (input.roleName !== "leader") {
             enqueueWork(store, { kind: "role", taskId: input.taskId, roleName: "leader" }, "provider-policy-blocked", now, [{ type: "run", taskId: input.taskId, id: input.runId }]);
         }
+        else {
+            const message = `Leader Run ${input.runId} is blocked by Provider policy: ${summary}`;
+            store.saveOperatorNotification(createLeaderRecoveryNotification(input.taskId, message, now, store.getOperatorNotification(input.taskId)));
+            enqueueWork(store, { kind: "operator" }, "leader-provider-policy-blocked", now, [
+                { type: "task", id: input.taskId },
+                { type: "run", taskId: input.taskId, id: input.runId }
+            ]);
+        }
         return { disposition: "applied", runId: input.runId };
     }
     recordProviderRetryClassified(store, input, errorClass, extra, now) {

package/dist/lifecycle/exactRunTerminalization.js

@@ -507,7 +507,11 @@ function matchesRecoverySessionFence(store, input) {
         return false;
     if (session.agentId !== input.agentId || session.adapterId !== input.adapterId)
         return false;
-    if (session.status === "stopped" || session.status === "broken")
+    // A dead Session is precisely when replace-session/terminate recovery is
+    // needed. Preserve its exact identity as the CAS fence; only same-Session
+    // retry is invalid once the native process is stopped or broken.
+    if ((session.status === "stopped" || session.status === "broken")
+        && input.action === "retry")
         return false;
     const sessionNativeSessionId = session.nativeSessionId;
     if (sessionNativeSessionId === undefined) {

package/dist/review/deltaRecheck.js

@@ -7,7 +7,7 @@ import { validateDeltaRecheckRecord } from "./reviewRound.js";
  * Reviewer's explicit disposition.
  */
 export async function assessDeltaRecheck(input) {
-    const { repositoryPath, previousRound, candidate, git, config } = input;
+    const { repositoryPaths, previousRound, candidate, git, config } = input;
     if (previousRound.status !== "completed"
         || (previousRound.scope ?? "work-item") !== "task") {
         return {
@@ -28,6 +28,13 @@ export async function assessDeltaRecheck(input) {
     let deletedLines = 0;
     let anyChange = false;
     for (const project of candidate.projects) {
+        const repositoryPath = repositoryPaths[project.projectId];
+        if (repositoryPath === undefined) {
+            return {
+                kind: "ineligible",
+                reason: `Delta recheck repository is unavailable for Project ${project.projectId}.`
+            };
+        }
         const previousHead = previousByProject.get(project.projectId);
         if (previousHead === undefined) {
             return {
@@ -185,14 +192,19 @@ function digestDiff(diffByProject) {
  * the dispatch context; only path-like entries drive the deterministic gate.
  */
 function extractEvidencePaths(round) {
-    return [...new Set(extractEvidenceFromReportJson(round.report ?? ""))]
+    return previousEvidenceReferences(round)
         .filter((entry) => isPathLike(entry));
 }
-/** All evidence references from the previous Round's JSON report. */
+/** All path-like evidence references from Markdown or JSON Review reports. */
 function previousEvidenceReferences(round) {
-    return extractEvidenceFromReportJson(round.report ?? "");
+    const report = round.report ?? "";
+    return [...new Set([
+            ...extractDeclaredEvidence(report),
+            ...extractEvidenceReferences(report)
+        ])];
 }
-function extractEvidenceFromReportJson(report) {
+/** Preserve the free-form evidence array that older JSON reports exposed. */
+function extractDeclaredEvidence(report) {
     let parsed;
     try {
         parsed = JSON.parse(report);
@@ -205,9 +217,18 @@ function extractEvidenceFromReportJson(report) {
     const evidence = parsed.evidence;
     if (!Array.isArray(evidence))
         return [];
-    return evidence
-        .filter((entry) => typeof entry === "string")
-        .map((entry) => entry.trim());
+    return evidence.flatMap((entry) => (typeof entry === "string" && entry.trim().length > 0 ? [entry.trim()] : []));
+}
+/**
+ * Reviewer reports intentionally accept clear Markdown or JSON without a
+ * fixed schema. Extract conservative repo-relative path tokens from the full
+ * preserved report so evidence overlap cannot be bypassed by presentation
+ * format, nested JSON, Markdown links, backticks, or line-qualified paths.
+ */
+function extractEvidenceReferences(report) {
+    const references = report.match(/(?:\.{0,2}\/)?[A-Za-z0-9_.-]+(?:\/[A-Za-z0-9_.-]+)+|[A-Za-z0-9_.-]+\.[A-Za-z0-9]{1,12}/gu) ?? [];
+    return [...new Set(references.map((entry) => entry.replace(/^\.\//u, "")))]
+        .filter((entry) => isPathLike(entry));
 }
 function isPathLike(value) {
     if (value.length === 0 || value.length > 512)
@@ -223,8 +244,8 @@ function isPathLike(value) {
     return value.includes("/") || /\.[A-Za-z0-9]{1,12}$/u.test(value);
 }
 function pathEvidenceMatches(evidencePath, changedFile) {
-    const normalizedEvidence = evidencePath.replace(/^\.\//u, "");
-    const normalizedFile = changedFile.replace(/^\.\//u, "");
+    const normalizedEvidence = evidencePath.replace(/^\.\//u, "").replace(/\/+$/u, "");
+    const normalizedFile = changedFile.replace(/^\.\//u, "").replace(/\/+$/u, "");
     if (normalizedEvidence === normalizedFile)
         return true;
     // A directory-level evidence reference covers every file under it.

package/dist/run/recoveryProjection.js

@@ -57,8 +57,11 @@ export function projectRunRecovery(facts) {
         ? ["accepted", "ambiguous"]
         : ["rejected", "ambiguous"];
     const blocked = recoveryBlocker(facts, session, canonicalProgressAt);
+    const supportedActions = session?.status === "stopped" || session?.status === "broken"
+        ? RUN_RECOVERY_ACTIONS.filter((action) => action !== "retry")
+        : RUN_RECOVERY_ACTIONS;
     const actions = blocked === null
-        ? RUN_RECOVERY_ACTIONS.map((action) => buildActionPlan(facts, action, session, canonicalProgressAt))
+        ? supportedActions.map((action) => buildActionPlan(facts, action, session, canonicalProgressAt))
         : [];
     const judgmentRequired = blocked === null && actions.some((plan) => plan.argv.includes(PROVIDER_ACCEPTANCE_PLACEHOLDER))
         ? "Provider acceptance is not durably determined for every action; pass --provider-acceptance explicitly."
@@ -121,10 +124,6 @@ function recoveryBlocker(facts, session, canonicalProgressAt) {
         return "progress-unavailable";
     if (session === null)
         return "session-missing";
-    if (session.status === "stopped")
-        return "session-stopped";
-    if (session.status === "broken")
-        return "session-broken";
     return null;
 }
 function buildActionPlan(facts, action, session, canonicalProgressAt) {

package/dist/runtime/runtimeObservation.js

@@ -1,3 +1,4 @@
+import { createHash } from "node:crypto";
 import { requireDriverId } from "./agentDriver.js";
 export const RUNTIME_OBSERVATION_TASK_EVENT = "runtime.observation";
 const KINDS = [
@@ -405,7 +406,11 @@ export function runtimeObservationSemanticKey(input) {
         ].join(":");
     }
     if (input.kind === "continuation.reported") {
-        return ["continuation-report", ...continuationIdentity, input.payload?.reportId ?? "missing"]
+        const summary = input.payload?.summary?.trim();
+        const resultIdentity = summary === undefined || summary.length === 0
+            ? input.payload?.reportId ?? "missing"
+            : `sha256:${createHash("sha256").update(summary).digest("hex")}`;
+        return ["continuation-report", ...continuationIdentity, resultIdentity]
             .join(":");
     }
     if (input.kind === "continuation.started") {

package/dist/storage/migration/productionRegistry.js

@@ -984,6 +984,11 @@ const STORED_TASK_V16_FIELDS = [
     "integrationQueue",
     "durableJobs",
     "jobCallerKeyHashes",
+    // The SQLite reverse reader reconstructs every physical family map even
+    // when the older manifest has not introduced that family yet. A v16
+    // aggregate may therefore contain an empty wakes map; preserve that exact
+    // repair shape, but reject records because taskWake has no v16 version.
+    "wakes",
     // May already be present after the publicationReference introduction runs
     // first; the 16->17 normalizer preserves the empty introduced map.
     "publicationReferences",
@@ -1022,6 +1027,12 @@ function requireStoredTaskV16Shape(snapshot) {
         if (unknown !== undefined) {
             throw new Error(`Task aggregate ${taskId} has an unknown v16 field: ${unknown}.`);
         }
+        if (task.wakes !== undefined) {
+            const wakes = asObject(task.wakes, `Task aggregate ${taskId} wakes`);
+            if (Object.keys(wakes).length > 0) {
+                throw new Error(`Task aggregate ${taskId} already has Task wakes before v17.`);
+            }
+        }
         if (task.publicationReferences !== undefined) {
             const references = asObject(task.publicationReferences, `Task aggregate ${taskId} publicationReferences`);
             if (Object.keys(references).length > 0) {
@@ -1049,6 +1060,9 @@ function normalizeStoredTaskV16ToV17(snapshot) {
         const existingReferences = task.publicationReferences === undefined
             ? {}
             : asObject(task.publicationReferences, `Task aggregate ${taskId} publicationReferences`);
+        const existingWakes = task.wakes === undefined
+            ? {}
+            : asObject(task.wakes, `Task aggregate ${taskId} wakes`);
         const marks = asObject(task.idHighWaterMarks, `Task id high-water marks ${taskId}`);
         const existingMark = marks.publicationReference;
         const existingWakeMark = marks.taskWake;
@@ -1061,7 +1075,7 @@ function normalizeStoredTaskV16ToV17(snapshot) {
                 taskWake: typeof existingWakeMark === "number" ? existingWakeMark : TASK_WAKE_FROM_VERSION
             },
             publicationReferences: existingReferences,
-            wakes: {}
+            wakes: existingWakes
         };
     }
     return {

package/dist/task/completionReadiness.js

@@ -33,12 +33,19 @@ export function projectCompletionReadiness(facts, options = {}) {
                 : `wait for Reviewer Run on ${round.id} to finish`
         });
     }
-    // Issue 07: a completed delta-recheck that did not accept the head keeps the
-    // completion gate closed.  `requires-full-review` escalates to a full Review;
-    // `finding` stays a blocker for the Leader to repair.
-    for (const round of facts.reviewRounds) {
-        if (!deltaRecheckBlocksAcceptance(round))
-            continue;
+    // Issue 07: only the latest completed Task-final Review can define whether
+    // the current review lineage is accepted. Historical delta findings and
+    // escalations remain audit evidence, but a later completed full Review (or
+    // accepted delta) supersedes them instead of blocking completion forever.
+    const latestCompletedTaskReview = facts.reviewRounds
+        .filter((round) => ((round.scope ?? "work-item") === "task" && round.status === "completed"))
+        .slice()
+        .sort((left, right) => (left.createdAt.localeCompare(right.createdAt)
+        || left.id.localeCompare(right.id, undefined, { numeric: true })))
+        .at(-1);
+    if (latestCompletedTaskReview !== undefined
+        && deltaRecheckBlocksAcceptance(latestCompletedTaskReview)) {
+        const round = latestCompletedTaskReview;
         const disposition = round.deltaRecheck.disposition;
         blockers.push({
             code: "delta-recheck-not-accepted",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zq-silk/yui",
-  "version": "0.6.14",
+  "version": "0.6.16",
   "description": "Local control plane for long-running native agent CLI sessions backed by tmux.",
   "license": "MIT",
   "private": false,

package/skills/yui-operator/SKILL.md

@@ -142,6 +142,7 @@ yui project knowledge show <project> <knowledge-id>
 yui project knowledge proposals list <project>
 yui project knowledge proposals show <project> <proposal-id>
 yui project knowledge accept <project> <proposal-id>
+yui project knowledge accept <project> <proposal-id> --update <knowledge-id>
 yui project knowledge reject <project> <proposal-id> --reason "<text>"
 yui task create "<title>" \
   --project <project-a> --project <project-b> \
@@ -155,8 +156,11 @@ Task/Decision/Milestone evidence) and the Operator reviews and accepts or
 rejects them. Acceptance writes the Knowledge entry with its provenance; a
 candidate that duplicates an existing entry is deduplicated, and one that
 conflicts with an existing title fails closed so the Operator must choose an
-explicit `--update`, supersede, or reject. Update current Knowledge and retire
-obsolete Knowledge without deleting its history. If discovery finds an
+explicit proposal-backed `accept --update`, supersede, or reject. Direct
+Knowledge mutation is not supported because it would erase version history;
+`--update` is allowed only when the current version is already traceable to an
+accepted proposal. Otherwise submit the replacement with `--supersedes` so the
+old Knowledge entry remains retired and readable. If discovery finds an
 existing stable checkout, bind it with `project add`. If only a remote is
 known, explain the clone destination and impact, obtain confirmation, then run
 `project clone`; do not send the user mechanical clone steps.