agentera 3.0.0-dev.39 → 3.0.0-dev.41

package/README.md

@@ -61,7 +61,7 @@ agentera state plan list --format json
 agentera state plan get --id PLAN_ID --format json
 agentera state plan tasks list --limit 20 --format json
 agentera state experiments list --objective OBJECTIVE_ID --format json
-agentera state experiments get --objective OBJECTIVE_ID --id EXPERIMENT_ID --format json
+agentera state experiments get --id EXPERIMENT_ID --format json
 ```
 
 Pages use opaque snapshot cursors, explicit omission fields, whole-entry output

package/bundle/CHANGELOG.md

@@ -4,6 +4,19 @@
 
 ### Changed
 
+- State record families now use canonical bounded `list` and exact `get` reads,
+  with predictable summary counts, selectors, queue ordering, omission metadata,
+  and exact-detail recovery generated from the retrieval authority.
+- TODO state now reconciles repository-first `TODO.md` edits with operational
+  entity state and publishes requested mutations through one recoverable atomic
+  transaction.
+- State mutation behavior now comes from one code-owned 25-operation registry,
+  with declarative discovery in `references/artifacts/state-storage-authority.yaml`
+  required to match it before commands run. `state <family> explain --all`,
+  per-verb explain, schema, help, and package projections share a contract digest
+  and parity matrix; selector requiredness preserves plan inference and experiment
+  identity defaults, while retired health repair, contradictory content flags,
+  oversized structured input, and authority drift fail before publication.
 - `agentera prime` now selects Build and Audit work from the complete plan task
   graph, prioritizes in-progress work before dependency-ready pending tasks, and
   keeps status recommendations aligned when the public task list is bounded.
@@ -34,6 +47,34 @@
 - Corrected packaged experiment-publication authority to declare validated objective-scoped archive-before-projection ownership and reject contradictory structured scope metadata.
 - Synchronized bounded plan, plan-task, and experiment retrieval across help, schema introspection, capability guidance, operator docs, packaged contracts, output bounds, archive ownership, and structured recovery errors.
 
+### Fixed
+
+- Fixed bare `agentera prime` briefs to compact absolute path diagnostics before
+  routing and history evidence, preserving executable plan selection, next-action
+  recovery, and full or compacted history under the 12,000-byte output bound
+  across checkout path lengths. Omitted path diagnostics remain available through
+  `agentera doctor --format json`.
+- Fixed `agentera state todo` writes to three-way reconcile managed `TODO.md`
+  rows and entity public fields, then publish the Markdown, entity updates, and
+  requested mutation under one recoverable journal. Standard Node link and
+  complete-file rename boundaries preserve complete old-or-new bytes per file;
+  pending journals block reads and dry runs until exact retry recovers them.
+  Detected boundary changes preserve competitors and return structured recovery.
+  The journal does not promise a global multi-file snapshot, and a
+  non-cooperating writer that races after final successful validation remains
+  outside the contract. One bounded activation transaction rejects duplicate
+  ID-less rows before requiring canonical IDs for all newly managed rows.
+- Fixed plan task append and update to require bounded YAML/JSON file-or-stdin
+  records and patches with bare ten-letter selectors and relationships. Complete
+  plan create now resolves positive integer or canonical numeric-string ordinals
+  only inside its atomic document, append retries converge under the writer lock,
+  lifecycle transitions remain flag-only, invalid input fails before effects, and
+  schema, explain, help, skills, and packaged discovery expose the same contract.
+- Fixed progress and decision record mutations to require bounded YAML/JSON
+  input from a file or stdin, converge exact logical-content retries before ID
+  allocation, expose complete structured descriptors, and keep Discuss append,
+  amend, and flag-only satisfaction guidance aligned with execution.
+
 ### Added
 
 - Added `agentera report profile-glossary --input <file|->` for Profile Full
@@ -124,6 +165,14 @@
 
 ### Fixed
 
+- Fixed TODO writes to use typed file-or-stdin create records and
+  omission-preserving patches with explicit clears, mapped `TODO.md` public
+  authority, target-specific release blockers, and flag-only lifecycle
+  transitions that replay exactly and reject divergent retries before effects.
+- Fixed Prime and `agentera report profile-grounding` to share one bounded
+  profile validity result, separate structural validity from freshness,
+  preserve producer-only profile path access, and fail closed without profile
+  bytes for absent, malformed, unsafe, oversized, or invalid UTF-8 sources.
 - Fixed `agentera state query changelog`, Build Prime, and Document closeout to
   use one bounded Keep-a-Changelog reader with matching headings, boundary,
   provenance, and fail-safe recovery for missing, malformed, unsafe, ambiguous,
@@ -152,13 +201,11 @@
   deterministic pagination and reject prior-ordering continuations with an
   actionable omit-`--cursor` recovery.
 - Fixed typed entity updates to retain exact source bytes, reject invalid UTF-8,
-  and revalidate descriptor-pinned displaced bytes before no-clobber canonical
-  publication. Post-displacement failures now restore the exact prior target or
-  surface a retained recovery path without clobbering competing bytes, while
-  post-commit cleanup faults retain an independent exact-byte baseline snapshot
-  and attempt-owned links under the private, Git-ignored, same-filesystem
-  `.agentera/.entity-recovery/` namespace instead of invalidating canonical
-  entity discovery or misreporting durable updates as failed.
+  and revalidate target bytes at declared boundaries before portable
+  complete-file replacement. Interrupted updates recover from bounded prior,
+  staged, and metadata roles under the private, Git-ignored, same-filesystem
+  `.agentera/.entity-recovery/` namespace. Detected concurrent bytes remain
+  canonical or retained instead of being overwritten.
 - Fixed `agentera state plan record-evaluation` to recover the first PASS for an
   unevaluated complete replacement named by a same-plan superseded predecessor
   while the plan remains open, without relaxing other terminal or retry guards.
@@ -170,7 +217,7 @@
   evidence-tier schema versions before reading signals, returning corrupt-state
   recovery without candidates.
 - Fixed `agentera state plan create` and `agentera state todo create` rejecting
-  valid migrated decision and progress summaries during descriptor-pinned
+  valid migrated decision and progress summaries during validated
   publication; logical provenance now validates against the real project root,
   and failed plan replacement restores the exact completed predecessor without
   overwriting competing files.

package/bundle/README.md

@@ -67,8 +67,8 @@ Agentera resolves artifact paths through the CLI and `.agentera/docs.yaml`.
 Normal reads use `agentera state`; supported writes use the typed writer.
 
 ```bash
-agentera state todo
-agentera state plan
+agentera state todo list --format json
+agentera state plan list --status open --format json
 agentera state query --list-artifacts
 agentera state progress explain --verb append --format json
 ```
@@ -82,7 +82,7 @@ agentera state plan list --format json
 agentera state plan get --id PLAN_ID --format json
 agentera state plan tasks list --limit 20 --format json
 agentera state experiments list --objective OBJECTIVE_ID --format json
-agentera state experiments get --objective OBJECTIVE_ID --id EXPERIMENT_ID --format json
+agentera state experiments get --id EXPERIMENT_ID --format json
 ```
 
 Plan list/get spans the active plan and immutable plan archives. Plan task

package/bundle/references/artifacts/glossary-entry-contract.yaml

@@ -842,7 +842,8 @@ consumer_boundary:
       fixed_values:
         event: current
       accepted_writer_flags:
-        [--glossary-caveat-event, --glossary-caveat-reason, --glossary-caveat-ownership-state]
+        [--input]
+      input: one progress cycle YAML/JSON mapping whose glossary_caveat contains the three caller fields
       writer_owned_fields: [caveat_id, capability, transition_id]
       forbidden_fields: [caveat_id, capability, transition_id]
       forbidden_claims: [delivered, stored, persisted, published, durable_envelope]
@@ -854,7 +855,7 @@ consumer_boundary:
         Emit one intent only when autonomous meaning-sensitive work has unresolved
         review or unavailable authority. The emitted-only intent contains exactly
         event=current, reason, and ownership_state, the three caller inputs accepted
-        by the Build writer. It is not delivered, stored, persisted, or published.
+        by the Build writer in one bounded structured record input. It is not delivered, stored, persisted, or published.
         The writer creates caveat_id, capability=build, and transition_id=null to
         complete the authoritative current envelope.
     exact_project_personal_unavailable:
@@ -1146,6 +1147,17 @@ consumer_boundary:
     schema_version: agentera.profileGrounding.v1
     parser: packages/cli/src/analytics/personalGlossaryProfile.ts#personalProfileGrounding
     max_profile_utf8_bytes: 65536
+    validity:
+      statuses: [absent, valid, repair_needed]
+      classes: [absent, valid, malformed, ambiguous, unreadable, unsafe, oversized, invalid_utf8]
+    freshness:
+      states: [current, stale, unknown]
+      rule: Freshness is computed only after one source passes validity and never changes validity.
+    recovery:
+      repair: >-
+        Run agentera profile to repair or regenerate PROFILE.md, then retry agentera report profile-grounding --format json; no profile bytes were changed.
+      absent: >-
+        Run agentera profile to generate PROFILE.md, then retry agentera report profile-grounding --format json.
     raw_profile_read: forbidden
     content_rule: >-
       Return the complete profile with exactly the validated owned personal
@@ -1154,9 +1166,10 @@ consumer_boundary:
       glossary read, precedence, matching, review, collision, or advisory work.
       Profile Full retains access to the complete stored profile for regeneration.
     failure_rule: >-
-      Missing profiles return structured unavailable state. Oversized profiles
-      and malformed, duplicate, unmatched, or unowned ambiguous Glossary
-      sections fail closed with actionable recovery and no profile content.
+      Absent and repair-needed profiles return nonzero with the shared validity
+      object, exact advancing recovery, unknown freshness, and no profile
+      content. Oversized, unsafe, unreadable, invalid UTF-8, and malformed or
+      ambiguous owned Glossary sources fail closed without path or byte leaks.
   exact_collision:
     behavior: project_precedence_at_consumption
     persistence: forbidden