agents-relay 2.0.175 → 2.0.177

package/dist/adapters.js

@@ -389,7 +389,7 @@ export class ChatGptAdapter {
                 const referencePrompt = task.chatgptThreadDelivery && references.length
                     ? `\n\n[Inline immutable local reference snapshots]\nThese complete verified snapshots are included in this message because this thread delivery does not attach local files. Follow their contents according to their declared roles.\n${references.map(reference => `\n--- ${reference.role}: ${reference.path} (sha256:${reference.sha256}) ---\n${reference.content}\n--- end snapshot ---`).join('\n')}`
                     : references.length
-                        ? `\n\n[Attached immutable Agent Contract]\nAfter publishing the required task.started event, read the attached contract file and verify its SHA-256 before following it. If it is unreadable or mismatched, report a concrete failure.\n${references.map(reference => `- ${reference.path} (sha256:${reference.sha256})`).join('\n')}`
+                        ? `\n\n[Attached immutable Agent Contract]\nAfter publishing the required task.started event, read the attached immutable contract snapshot and follow it. Relay owns snapshot integrity; do not hash or compare the original .agent.md. If the attached snapshot is unreadable, report a concrete failure.\n${references.map(reference => `- ${reference.path} (sha256:${reference.sha256})`).join('\n')}`
                         : '';
                 if (task.chatgptThreadDelivery && declaredPromptReferences(task.input).length) {
                     const unresolved = declaredPromptReferences(task.input)

package/dist/agent-prompt-builder.js

@@ -72,7 +72,7 @@ export async function buildReferenceFirstPrompt(input) {
     return buildAgentPrompt({
         role: input.role,
         system: (input.bootstrap ? input.bootstrap.trim() + '\n' : '') +
-            'After the required execution startup action, read the referenced immutable Agent Contract. Verify its SHA-256 before following it. If unreadable or mismatched, report a concrete failure; never guess its instructions.',
+            'After the required execution startup action, read the referenced immutable Agent Contract snapshot and follow it. Relay owns snapshot integrity and version identity; do not compute a hash of the source .agent.md or compare it to the snapshot. If the snapshot is unreadable, report a concrete failure; never guess its instructions.',
         user: input.user,
         references: [reference],
     });

package/dist/cli-artifact.js

@@ -0,0 +1,40 @@
+import { readFile } from 'node:fs/promises';
+import { Ajv } from 'ajv';
+/** Explicit, read-only validation. Projects own schemas and decide when to call it. */
+export async function validateArtifact(artifactPath, schemaPath) {
+    if (!artifactPath || !schemaPath)
+        throw new Error('artifact validate requires --artifact and --schema');
+    const [artifactText, schemaText] = await Promise.all([
+        readFile(artifactPath, 'utf8'),
+        readFile(schemaPath, 'utf8'),
+    ]);
+    const artifact = JSON.parse(artifactText);
+    const schema = JSON.parse(schemaText);
+    if (!schema || typeof schema !== 'object' || Array.isArray(schema))
+        throw new Error('Schema must be a JSON object');
+    if ('$async' in schema)
+        throw new Error('Async schemas are not supported');
+    const validate = new Ajv({ allErrors: true, strict: false }).compile(schema);
+    const valid = validate(artifact);
+    if (typeof valid !== 'boolean')
+        throw new Error('Async validation is not supported');
+    return {
+        valid,
+        errors: (validate.errors ?? []).map(error => ({
+            path: error.instancePath || '/',
+            message: error.message ?? 'invalid value',
+        })),
+    };
+}
+export async function runArtifactCommand(action, args) {
+    if (action !== 'validate')
+        throw new Error('artifact supports only validate');
+    const value = (flag) => {
+        const index = args.indexOf(flag);
+        return index < 0 ? '' : args[index + 1] ?? '';
+    };
+    const result = await validateArtifact(value('--artifact'), value('--schema'));
+    console.log(JSON.stringify(result, null, 2));
+    if (!result.valid)
+        throw new Error('Artifact validation failed');
+}

package/dist/cli-help.js

@@ -1,4 +1,4 @@
-export const usage = 'agents-relay <job|task|review|plan|blocker|projection|escalation|context|init|record|agent-register|agent-discover|status|reconcile|serve> [options]';
+export const usage = 'agents-relay <job|task|review|artifact|plan|blocker|projection|escalation|context|init|record|agent-register|agent-discover|status|reconcile|serve> [options]';
 const help = {
     root: `Agents Relay coordinates durable asynchronous agent jobs through local SQLite and workflow graphs.
 
@@ -11,6 +11,7 @@ Commands:
   job create|update|show|list|merge|unblock|cancel|pause|resume  Manage SQLite-authoritative jobs with optional GitHub PRs
   task create|update|show|list|classify|complete|retry|unblock|cancel  Manage durable tasks
   review request           Request graph-owned review (optional thread override)
+  artifact validate        Check a JSON artifact against a project-owned JSON Schema
   plan                     Invoke the Planner for an existing managed Job
   plan apply               Submit a validated Task Tree within one active Plan
   blocker add|resolve|show  Manage cross-Job blocker dependencies
@@ -60,6 +61,10 @@ Request a new SHA-bound reviewer turn through the existing Relay lifecycle.
 Usage: npx agents-relay review request --repo OWNER/REPO --pr NUMBER --id JOB_ID [--thread-id THREAD_ID]
 
 When provided, --thread-id persists a reviewer destination; otherwise the Job reviewer thread, then creator thread, then legacy review route is used. The command wakes Relay. Review Task creation, idempotency, routing and delivery remain graph/daemon-owned. Rejects in-flight/queued reviews; does not itself mark review delivered.`,
+    artifact: `Check a JSON artifact against a project-owned JSON Schema. Read-only; does not affect Task state or planning.
+
+Usage: agents-relay artifact validate --artifact PATH --schema PATH
+Exit 0 on PASS, 1 on schema mismatch or invalid input. Returns JSON { valid, errors }.`,
     'review run': `Evaluate the calling Agent's requested outcome inside its Worker. A generic Outcome Reviewer runs by default; --agents adds comma-separated professional roles found in the project or shared agent catalog. Does not create Relay Tasks or trigger Final Review.
 
 Usage: agents-relay review run (--prompt TEXT | --prompt-file PATH) [--project-path DIR] [--agents role,role] [--output PATH]

package/dist/cli.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { runArtifactCommand } from './cli-artifact.js';
 import { runWorkflowAction } from './cli-workflow-action.js';
 import { workflowCliResult } from './cli-workflow.js';
 import { configureLocalGitMerge } from './cli-local-merge-config.js';
@@ -743,6 +744,11 @@ async function main() {
         await runJobCommand(action ?? '', jobArgs);
         return;
     }
+    if (command === 'artifact') {
+        const [action, ...artifactArgs] = args;
+        await runArtifactCommand(action ?? '', artifactArgs);
+        return;
+    }
     if (command === 'task') {
         const [action, ...taskArgs] = args;
         await runTaskCommand(action ?? '', taskArgs);

package/dist/execution-context.js

@@ -242,11 +242,10 @@ export async function resolveAgentContract(context, agentName) {
     return { agent, definition, hash: resolved.hash, sources: resolved.sources };
 }
 export async function agentContractPrompt(context, agentName) {
-    const { agent, definition, hash, sources } = await resolveAgentContract(context, agentName);
+    const { agent, definition, sources } = await resolveAgentContract(context, agentName);
     return `[Selected task agent contract]
 Agent: ${agent.name}
 Source: ${agent.path ?? agent.source}
-Effective contract SHA-256: ${hash}
 Contract layers: ${sources.join(' -> ')}
 
 The following Markdown is the authoritative behavioral contract for this Task agent.

package/dist/planner.js

@@ -498,7 +498,7 @@ export class AgentObjectivePlanner {
         const instructions = effectivePlanner?.content ?? await readFile(this.agentFile, 'utf8');
         const contract = await readFile(DEFAULT_TASK_JOB_CONTRACT, 'utf8');
         const resolvedContext = context.executionContext ? executionContextPrompt(context.executionContext) + '\n\n' : '';
-        const prompt = renderAgentPrompt(await buildReferenceFirstPrompt({ role: 'planner', adapter: 'codex', system: (effectivePlanner ? `[Effective planner contract SHA-256: ${effectivePlanner.hash}]\n\n` : '') + instructions.trim() + '\n\n## Shared Task / Job Contract\n\n' + contract.trim(), user: resolvedContext + '## Durable planner input\n\n' + plannerInput(context) }), 'codex');
+        const prompt = renderAgentPrompt(await buildReferenceFirstPrompt({ role: 'planner', adapter: 'codex', system: instructions.trim() + '\n\n## Shared Task / Job Contract\n\n' + contract.trim(), user: resolvedContext + '## Durable planner input\n\n' + plannerInput(context) }), 'codex');
         const runAgent = (input) => new Promise((resolve, reject) => {
             // Plan apply writes unified relay.sqlite beside AGENTS_RELAY_STORE_DIR.
             const child = spawnOwnedProcess(this.command, buildPlannerCodexArgs(relayStoreDirectory(), input), { invocation: 'planner.agent', signal, correlation: { jobId: context.job.id }, spawn: { cwd: context.executionContext?.project.path, stdio: ['ignore', 'pipe', 'pipe'] } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agents-relay",
-  "version": "2.0.175",
+  "version": "2.0.177",
   "description": "Durable async agent jobs coordinated through GitHub pull requests",
   "repository": {
     "type": "git",
@@ -45,5 +45,8 @@
     "workflow",
     "README.md",
     "LICENSE"
-  ]
+  ],
+  "dependencies": {
+    "ajv": "^8.20.0"
+  }
 }