@zq-silk/yui 1.1.2 → 2.0.0

package/ARCHITECTURE.md

@@ -179,7 +179,8 @@ directly. There is no requirement to route every operation through a plugin.
 Validated Task-local plugins preserve explicit enabled intent in the Store and
 live instances in InstanceHost. Reading or restarting does not run author code.
 Leader management is limited to its Task; executable code still requires exact
-Operator-issued grants. Plugin validation is not a security certification.
+grants issued by Operator or by the current delivery Leader with original user
+authorization and bounded Task/resource scope. Plugin validation is not a security certification.
 
 CLI contributions and controlled Web panels are projections of the Registry.
 Web is loopback-only and Controller-owned. Its authenticated local-user controls

package/ARCHITECTURE.zh-CN.md

@@ -138,7 +138,8 @@ Registry 暴露 context、消息、artifact、环境、插件以及部分 Task/J
 
 经验证的 Task-local 插件在 Store 中保留显式的 enabled 意图，在 InstanceHost 中保留活
 实例。读取或重启不运行作者代码。Leader 的管理仅限于其 Task；可执行代码仍需要确切的、
-由 Operator 签发的 grant。插件验证不是安全认证。
+由 Operator 签发，或由当前 delivery Leader 依据原始用户授权在本 Task 和资源范围内
+签发的有界 grant。插件验证不是安全认证。
 
 CLI 贡献和受控的 Web 面板是 Registry 的投影。Web 仅本地回环、由 Controller 拥有；浏览器
 凭据认证本地用户控制，这些控制复用 CLI 领域操作；查询面板仍只读，不能借用该用户权限

package/README.md

@@ -383,6 +383,8 @@ The [architecture overview](ARCHITECTURE.md) explains the end-to-end design.
 The [documentation map](docs/architecture/README.md) links the current contracts
 for configuration, execution, delivery, storage and plugins. Use `yui --help`
 when you want to operate the CLI directly.
+The [CLI information contract](docs/cli-information-contract.md) describes
+current context, paginated discovery, full-original reads and mutation receipts.
 
 Yui stores its control-plane data under `~/.yui` by default; `YUI_HOME` selects
 another instance. See [storage and upgrades](docs/sqlite-control-plane-design.md)

package/dist/cli/commandCatalog.js

@@ -191,7 +191,8 @@ const globalSessionChildren = [
     {
         name: "context",
         summary: "Load the exact authorized global Role context.",
-        usage: "yui session context <role>"
+        usage: "yui session context <role> [--cursor <cursor>]",
+        options: ["--cursor"]
     },
     {
         name: "record",
@@ -383,7 +384,7 @@ const taskChildren = [
         usage: "yui task list [--all] [--status <status>] [--project <id>] [--search <text>] [--attention <category>] [--limit <1..100>] [--cursor <cursor>]",
         options: ["--all", "--status", "--project", "--search", "--attention", "--limit", "--cursor"]
     },
-    { name: "show", summary: "Show a Task.", usage: "yui task show <id>" },
+    { name: "show", summary: "Show Task metadata and counts; long details use contentPage.", usage: "yui task show <id> [--cursor <cursor>]", options: ["--cursor"] },
     {
         name: "artifact",
         summary: "Save Task files in local Git and read current or commit-pinned content.",
@@ -397,20 +398,20 @@ const taskChildren = [
     {
         name: "context",
         summary: "Read compact authorized facts, fixed-bound delta, or inspect a Context reference.",
-        usage: "yui task context [read|delta|inspect] <task> [--after <cursor>] [--continuation <cursor>] [--limit <n>] [--store <store> --ref <id>] [--digest <digest>]",
-        options: ["--after", "--continuation", "--limit", "--store", "--ref", "--digest"]
+        usage: "yui task context [read|list|delta|inspect] <task> [--after <cursor>] [--continuation <cursor>] [--cursor <cursor>] [--limit <n>] [--store <store> --ref <id>] [--digest <digest>]",
+        options: ["--after", "--continuation", "--cursor", "--limit", "--store", "--ref", "--digest", "--status", "--work-item"]
     },
     {
         name: "next-action",
         summary: "Read Task facts, mechanical prerequisites and legal alternatives; semantic choices remain with the Leader.",
-        usage: "yui task next-action <task> [--json]",
-        options: ["--json"]
+        usage: "yui task next-action <task> [--cursor <cursor>] [--json]",
+        options: ["--cursor", "--json"]
     },
     {
         name: "remote-delivery",
         summary: "Project exact Task heads and current PR/MR evidence into merge coverage.",
-        usage: "yui task remote-delivery <task> [--json]",
-        options: ["--json"]
+        usage: "yui task remote-delivery <task> [--cursor <cursor>] [--json]",
+        options: ["--cursor", "--json"]
     },
     {
         name: "archive-preflight",
@@ -421,8 +422,8 @@ const taskChildren = [
     {
         name: "archive",
         summary: "Archive a terminal Task; explicit --force commits despite delivery/cleanup warnings, retaining unsafe resources.",
-        usage: "yui task archive <id> (--integrated|--abandon) [--force]",
-        options: ["--integrated", "--abandon", "--force"]
+        usage: "yui task archive <id> (--integrated|--abandon) [--force] [--source-message <id> --purpose <verbatim-authorization> --request-id <id>]",
+        options: ["--integrated", "--abandon", "--force", "--source-message", "--purpose", "--request-id"]
     },
     { name: "reconcile", summary: "Run one immediate Controller reconciliation.", usage: "yui task reconcile <id>" },
     {
@@ -482,13 +483,14 @@ const taskChildren = [
             {
                 name: "list",
                 summary: "List Task messages.",
-                usage: "yui task message list <id> [--after <timestamp>] [--limit <n>]",
-                options: ["--after", "--limit"]
+                usage: "yui task message list <id> [--after <timestamp>] [--limit <1..100>] [--cursor <cursor>]",
+                options: ["--after", "--limit", "--cursor"]
             },
             {
                 name: "show",
                 summary: "Read a scoped Message and expand its single execution result.",
-                usage: "yui task message show <task>/<message>"
+                usage: "yui task message show <task>/<message> [--cursor <cursor>]",
+                options: ["--cursor"]
             },
             {
                 name: "update",
@@ -519,14 +521,14 @@ const taskChildren = [
             {
                 name: "list",
                 summary: "List the global Inbox or one Task's input requests.",
-                usage: "yui task input list [task] [--all]",
-                options: ["--all"]
+                usage: "yui task input list [task] [--all] [--limit <1..100>] [--cursor <cursor>]",
+                options: ["--all", "--limit", "--cursor"]
             },
             {
                 name: "show",
                 summary: "Show one input request.",
-                usage: "yui task input show (<task>/<input> | <input> --task <task>)",
-                options: ["--task"]
+                usage: "yui task input show (<task>/<input> | <input> --task <task>) [--cursor <cursor>]",
+                options: ["--task", "--cursor"]
             },
             {
                 name: "answer",
@@ -544,14 +546,14 @@ const taskChildren = [
     },
     {
         name: "grant",
-        summary: "Manage capability grants for a Task. Issue and revoke require the authenticated global Operator session.",
+        summary: "Manage Task grants as Operator, or bounded source-authorized grants as the current delivery Leader.",
         sections: [{ id: "manage", title: "Commands", entries: ["issue", "show", "list", "revoke"] }],
         children: [
             {
                 name: "issue",
-                summary: "Issue a capability grant to a Task. Requires the authenticated global Operator session; the granter is bound to it.",
+                summary: "Issue as Operator, or as current delivery Leader with --source-message, --purpose, --request-id, exact scope, expiry and finite uses.",
                 usage: "yui task grant issue <task> --action <name> (repeatable) [--scope-project <id>...] [--scope-repo <owner/name>...] [--scope-package <name>...] [--scope-home <path>] [--param <name=v1,v2>...] [--expires-at <iso-8601>] [--max-uses <int>] [--irreversibility-ceiling <none|reversible|irreversible>]",
-                options: ["--action", "--scope-project", "--scope-repo", "--scope-package", "--scope-home", "--param", "--expires-at", "--max-uses", "--irreversibility-ceiling"]
+                options: ["--action", "--scope-project", "--scope-repo", "--scope-package", "--scope-home", "--param", "--expires-at", "--max-uses", "--irreversibility-ceiling", "--source-message", "--purpose", "--request-id"]
             },
             {
                 name: "show",
@@ -565,7 +567,7 @@ const taskChildren = [
             },
             {
                 name: "revoke",
-                summary: "Revoke a capability grant. Requires the authenticated global Operator session; the revoker is bound to it.",
+                summary: "Revoke as Operator, or this Task's current delivery Leader for a Leader-issued grant.",
                 usage: "yui task grant revoke <task> <grant-id>",
                 options: []
             }
@@ -642,7 +644,8 @@ const taskChildren = [
             {
                 name: "list",
                 summary: "List external publication evidence for a Task.",
-                usage: "yui task publication list <task>"
+                usage: "yui task publication list <task> [--limit <1..100>] [--cursor <cursor>]",
+                options: ["--limit", "--cursor"]
             },
             {
                 name: "show",
@@ -666,13 +669,14 @@ const taskChildren = [
                 options: ["--profile", "--agent", ...roleProfileOptions, ...roleAgentOptions],
                 optionValues: roleAgentOptionValues
             },
-            { name: "list", summary: "List Task Roles.", usage: "yui task role list <task>" },
+            { name: "list", summary: "Discover recorded Role health; Host is unchecked until role status.", usage: "yui task role list <task> [--limit <1..100>] [--cursor <cursor>]", options: ["--limit", "--cursor"] },
             {
                 name: "status",
                 summary: "Show persisted and live runtime state for one Task Role.",
-                usage: "yui task role status <task> <role>"
+                usage: "yui task role status <task> <role> [--cursor <cursor>]",
+                options: ["--cursor"]
             },
-            { name: "show", summary: "Show one Task Role.", usage: "yui task role show <task> <role>" },
+            { name: "show", summary: "Show one Task Role.", usage: "yui task role show <task> <role> [--cursor <cursor>]", options: ["--cursor"] },
             { name: "capabilities", summary: "Read native options using this Role's desired or exact failed launch configuration.",
                 usage: "yui task role capabilities <task> <role> [--error <event-id>] [--refresh]",
                 options: ["--error", "--refresh"] },
@@ -701,7 +705,8 @@ const taskChildren = [
                     {
                         name: "inspect",
                         summary: "Read the current Session, Host process, and AgentRun facts.",
-                        usage: "yui task role session inspect <task> <role>"
+                        usage: "yui task role session inspect <task> <role> [--cursor <cursor>]",
+                        options: ["--cursor"]
                     },
                     {
                         name: "stop",
@@ -758,8 +763,8 @@ const taskChildren = [
                 usage: "yui task work create <task> <title> [--project <project> ...] [--base-ref <project>=<ref> ...] [--objective <text>] [--accept <criterion> ...] [--after <work> ...] [--role <name>]",
                 options: ["--project", "--base-ref", "--objective", "--accept", "--after", "--role"]
             },
-            { name: "list", summary: "List work items for a Task.", usage: "yui task work list <task>" },
-            { name: "show", summary: "Show one Work Item.", usage: "yui task work show <work>" },
+            { name: "list", summary: "Discover work items by summary and exact reference.", usage: "yui task work list <task> [--limit <1..100>] [--cursor <cursor>]", options: ["--limit", "--cursor"] },
+            { name: "show", summary: "Show one Work Item.", usage: "yui task work show <work> [--cursor <cursor>]", options: ["--cursor"] },
             {
                 name: "edit",
                 summary: "Edit current requirements without changing frozen Assignments or acceptance.",
@@ -866,11 +871,12 @@ const taskChildren = [
         summary: "Inspect and control Task Role AgentRuns.",
         sections: [{ id: "manage", title: "Commands", entries: ["list", "show", "retry", "settle", "context", "checkpoint", "retire"] }],
         children: [
-            { name: "list", summary: "List all AgentRuns for a Task or one WorkItem.", usage: "yui task run list <task|task/work>" },
+            { name: "list", summary: "Discover AgentRuns for a Task or one WorkItem.", usage: "yui task run list <task|task/work> [--limit <1..100>] [--cursor <cursor>]", options: ["--limit", "--cursor"] },
             {
                 name: "show",
                 summary: "Show one AgentRun and its retained audit evidence.",
-                usage: "yui task run show <task>/<run> [--json]"
+                usage: "yui task run show <task>/<run> [--cursor <cursor>] [--json]",
+                options: ["--cursor", "--json"]
             },
             {
                 name: "retry",
@@ -885,7 +891,8 @@ const taskChildren = [
             {
                 name: "context",
                 summary: "Load the exact authorized AgentRun context.",
-                usage: "yui task run context <task>/<run> [--json]",
+                usage: "yui task run context <task>/<run> [--cursor <cursor>] [--json]",
+                options: ["--cursor", "--json"],
                 executable: true,
                 hidden: true,
                 sections: [{ id: "load", title: "Commands", entries: ["expand", "delta"] }],
@@ -893,14 +900,14 @@ const taskChildren = [
                     {
                         name: "expand",
                         summary: "Expand one authorized AgentRun context reference.",
-                        usage: "yui task run context expand <task>/<run> <ref-id> --store <store> [--mode full]",
-                        options: ["--store", "--mode"]
+                        usage: "yui task run context expand <task>/<run> <ref-id> --store <store> [--mode full] [--cursor <cursor>]",
+                        options: ["--store", "--mode", "--cursor"]
                     },
                     {
                         name: "delta",
                         summary: "Load authorized AgentRun context changes after a cursor.",
-                        usage: "yui task run context delta <task>/<run> --after <cursor>",
-                        options: ["--after"]
+                        usage: "yui task run context delta <task>/<run> --after <digest> [--cursor <cursor>]",
+                        options: ["--after", "--cursor"]
                     }
                 ]
             },
@@ -990,7 +997,7 @@ const taskChildren = [
         summary: "Manage the Task Brief, the authoritative summary of current task state.",
         sections: [{ id: "manage", title: "Commands", entries: ["show", "update"] }],
         children: [
-            { name: "show", summary: "Show the Task Brief.", usage: "yui task brief show <task>" },
+            { name: "show", summary: "Show the Task Brief.", usage: "yui task brief show <task> [--cursor <cursor>]", options: ["--cursor"] },
             {
                 name: "update",
                 summary: "Create or update the Task Brief.",
@@ -1013,11 +1020,11 @@ const taskChildren = [
             {
                 name: "list",
                 summary: "List Decisions for a Task.",
-                usage: "yui task decision list <task> [--status active|superseded]",
-                options: ["--status"],
+                usage: "yui task decision list <task> [--status active|superseded] [--limit <1..100>] [--cursor <cursor>]",
+                options: ["--status", "--limit", "--cursor"],
                 optionValues: { "--status": ["active", "superseded"] }
             },
-            { name: "show", summary: "Show one Decision.", usage: "yui task decision show <task> <decision>" },
+            { name: "show", summary: "Show one Decision.", usage: "yui task decision show <task> <decision> [--cursor <cursor>]", options: ["--cursor"] },
             {
                 name: "supersede",
                 summary: "Mark a Decision as superseded.",
@@ -1037,8 +1044,8 @@ const taskChildren = [
                 usage: "yui task milestone add <task> --title <text> --summary <text>",
                 options: ["--title", "--summary"]
             },
-            { name: "list", summary: "List Milestones for a Task.", usage: "yui task milestone list <task>" },
-            { name: "show", summary: "Show one Milestone.", usage: "yui task milestone show <task> <milestone>" }
+            { name: "list", summary: "List Milestones for a Task.", usage: "yui task milestone list <task> [--limit <1..100>] [--cursor <cursor>]", options: ["--limit", "--cursor"] },
+            { name: "show", summary: "Show one Milestone.", usage: "yui task milestone show <task> <milestone> [--cursor <cursor>]", options: ["--cursor"] }
         ]
     },
     {
@@ -1049,10 +1056,10 @@ const taskChildren = [
             {
                 name: "list",
                 summary: "List Task events.",
-                usage: "yui task event list <task> [--after <timestamp>] [--limit <n>]",
-                options: ["--after", "--limit"]
+                usage: "yui task event list <task> [--after <timestamp>] [--limit <1..100>] [--cursor <cursor>]",
+                options: ["--after", "--limit", "--cursor"]
             },
-            { name: "show", summary: "Show one Task event.", usage: "yui task event show <task> <event>" }
+            { name: "show", summary: "Show one Task event.", usage: "yui task event show <task> <event> [--cursor <cursor>]", options: ["--cursor"] }
         ]
     },
     {
@@ -1073,8 +1080,8 @@ const taskChildren = [
         summary: "Inspect the durable Leader wake ledger and its delta content.",
         sections: [{ id: "manage", title: "Commands", entries: ["list", "show", "retry", "resolve"] }],
         children: [
-            { name: "list", summary: "List recorded Leader wakes.", usage: "yui task wake list <task>" },
-            { name: "show", summary: "Show one wake and its delta content.", usage: "yui task wake show <task> <wake>" },
+            { name: "list", summary: "List recorded Leader wakes.", usage: "yui task wake list <task> [--limit <1..100>] [--cursor <cursor>]", options: ["--limit", "--cursor"] },
+            { name: "show", summary: "Show a fixed wake window and exact detail reads.", usage: "yui task wake show <task> <wake> [--cursor <cursor>]", options: ["--cursor"] },
             { name: "retry", summary: "Retry a rejected notification after correcting its cause; preserve original input.",
                 usage: "yui task wake retry <task> <wake> --reason <correction>", options: ["--reason"] },
             { name: "resolve", summary: "Release an unknown notification claim after explicit quiescence evidence, without replay.",
@@ -1092,7 +1099,7 @@ const taskChildren = [
         summary: "Inspect ChangeSets captured from WorkItem Candidates.",
         sections: [{ id: "inspect", title: "Commands", entries: ["show"] }],
         children: [
-            { name: "show", summary: "Show one ChangeSet.", usage: "yui task change-set show <task>/<change-set>" }
+            { name: "show", summary: "Show one ChangeSet.", usage: "yui task change-set show <task>/<change-set> [--cursor <cursor>]", options: ["--cursor"] }
         ]
     },
 ];
@@ -1119,8 +1126,18 @@ export const ROOT_COMMAND = buildNode({
             children: [
                 {
                     name: "message", summary: "Send durable input to a Global Role.",
-                    sections: [{ id: "input", title: "Input control", entries: ["queue", "steer"] }],
+                    sections: [{ id: "input", title: "Input control", entries: ["queue", "steer", "list", "show"] }],
                     children: [
+                        {
+                            name: "list", summary: "Discover Global Messages without consuming input.",
+                            usage: "yui role message list <role> [--pending] [--limit <1..100>] [--cursor <cursor>]",
+                            options: ["--pending", "--limit", "--cursor"]
+                        },
+                        {
+                            name: "show", summary: "Read one exact Global Message; follow contentPage.nextCursor for long content.",
+                            usage: "yui role message show <role> <message-id> [--cursor <cursor>]",
+                            options: ["--cursor"]
+                        },
                         {
                             name: "queue", summary: "Queue input for the next legal delivery opportunity.",
                             usage: "yui role message queue <role> (<text>|--body-file <path|->) --request-id <id>",
@@ -1595,7 +1612,7 @@ export const ROOT_COMMAND = buildNode({
             sections: [{
                     id: "callbacks",
                     title: "Callbacks",
-                    entries: ["session-notify", "runtime-hook", "agent-host", "session-cli-refresh"]
+                    entries: ["session-notify", "runtime-hook", "agent-host"]
                 }],
             children: [
                 {
@@ -1612,11 +1629,6 @@ export const ROOT_COMMAND = buildNode({
                     name: "runtime-hook",
                     summary: "Record a managed Agent Driver observation from stdin.",
                     usage: "yui internal runtime-hook"
-                },
-                {
-                    name: "session-cli-refresh",
-                    summary: "Refresh existing managed Session CLI wrappers after an update.",
-                    usage: "yui internal session-cli-refresh"
                 }
             ]
         }

package/dist/cli/managedDiagnostics.js

@@ -4,7 +4,7 @@ export function taskDiagnosticTarget(args) {
     if (args[0] !== "task")
         return undefined;
     if (["show", "context", "next-action", "archive-preflight"].includes(args[1] ?? "")) {
-        return args[1] === "context" && ["read", "inspect", "delta"].includes(args[2] ?? "")
+        return args[1] === "context" && ["read", "list", "inspect", "delta"].includes(args[2] ?? "")
             ? args[3] : args[2];
     }
     if (args[1] === "role" && ["list", "status", "show"].includes(args[2] ?? ""))
@@ -23,6 +23,7 @@ export function operatorOfflineCommand(args) {
         || (args[0] === "execution" && args[1] === "audit")
         || (args[0] === "operator" && ["status", "list"].includes(args[1] ?? ""))
         || (args[0] === "session" && ["context", "reconcile"].includes(args[1] ?? ""))
+        || (args[0] === "role" && args[1] === "message" && ["list", "show"].includes(args[2] ?? ""))
         || (args[0] === "task" && args[1] === "list")
         || taskDiagnosticTarget(args) !== undefined;
 }

package/dist/cli/updatePorts.js

@@ -203,11 +203,6 @@ export function createUpdatePorts(environment, spawn = spawnSync, stagingRoot =
                     + `but the staged/verified artifact was ${staged.version}. Refusing to trust a `
                     + "different build than the one that passed preflight.");
             }
-            // Retarget current Manifest-referenced wrappers to the activated
-            // installation before the replacement Controller starts. This relocates
-            // the current shell form; it does not convert historical Session wrappers.
-            const sessionCliRefresh = run(activeBinary, ["--json", "internal", "session-cli-refresh"], { cwd: process.cwd(), env: { ...environment, YUI_HOME: home }, shell: false });
-            assertSpawnOk(sessionCliRefresh, "refresh managed Session CLI wrappers");
             // Retain the exact path used by both doctor and version verification. The
             // replacement start must not resolve UPDATE_CLI_PATH or npm again.
             verifiedActivatedBinary = activeBinary;