dsh-gate-agent 0.1.2 → 0.1.3

package/lib/index.js

@@ -36,18 +36,36 @@ var Config = {
   }
 };
 
+// src/note-decisions.ts
+var MECHANICAL_DECISION = "mechanical";
+var NOTE_DECISIONS = ["new", "update", "in-place", MECHANICAL_DECISION];
+function isNoteDecision(value) {
+  return typeof value === "string" && NOTE_DECISIONS.includes(value);
+}
+var NOTE_DECISION_LIFECYCLE = {
+  new: "proposed",
+  update: "proposed",
+  "in-place": "implemented",
+  mechanical: null
+};
+function isMechanicalDecision(value) {
+  return value === MECHANICAL_DECISION;
+}
+
 // src/protocol.ts
-var DISCUSS_ORCHESTRATION = `## Discuss
+var DISCUSS_ORCHESTRATION = `## discuss
 
 discuss \u662F\u9ED8\u8BA4\u9636\u6BB5\uFF0C\u4E0D\u9700\u8981\u547D\u4EE4\u8FDB\u5165\u3002
 
-1. \u5148\u8BFB\u76F8\u5173\u4EE3\u7801\u3001\u6587\u6863\u3001\u5386\u53F2 Note \u4E0E\u9879\u76EE\u7EA6\u675F\u3002
-2. \u660E\u786E\u5B9E\u9645\u95EE\u9898\u3001\u7EA6\u675F\u3001\u5DF2\u6709\u51B3\u5B9A\u4E0E\u51B2\u7A81\u3002
-3. \u7ED9\u51FA\u6709\u5B9E\u8D28\u5DEE\u5F02\u7684\u53EF\u884C\u65B9\u6848\u3001\u63A8\u8350\u4E0E\u5173\u952E\u6743\u8861\u3002
-4. \u53EA\u5BF9\u672A\u51B3\u7684\u4EA7\u54C1\u3001\u8303\u56F4\u3001\u517C\u5BB9\u6027\u3001\u6210\u672C\u3001\u98CE\u9669\u7B49\u4EF7\u503C\u5224\u65AD\u63D0\u95EE\u3002
-5. \u4E0D\u521B\u5EFA\u63D0\u6848\u3001Note \u6216\u89C4\u683C\u6587\u4EF6\u3002
-6. \u6C47\u62A5\uFF1A\u5DF2\u89E3\u51B3\u4E8B\u9879\u3001\u5269\u4F59\u672A\u51B3\u4E8B\u9879\u3001\u5EFA\u8BAE\u7684\u4E0B\u4E00\u9636\u6BB5\u3002
-7. \u4E0D\u81EA\u884C\u79BB\u5F00 discuss\uFF1B\u79BB\u5F00\u5FC5\u987B\u7531\u7528\u6237\u660E\u786E\u6388\u6743\u3002\u6388\u6743\u53EF\u4EE5\u5728\u5BF9\u8BDD\u6216 ask_user_question \u4E2D\u7ED9\u51FA\uFF1B\u83B7\u5F97\u6388\u6743\u540E\u8FDB\u5165 plan/implement\uFF0C\u4E0D\u8981\u8981\u6C42\u7528\u6237\u518D\u8F93\u5165 slash command\u3002`;
+\u8BA8\u8BBA\u4E0D\u662F\u88AB\u52A8\u8BBF\u8C08\uFF1B\u4F18\u5148\u81EA\u884C\u5206\u6790\u5DF2\u6709\u9879\u76EE\u4E0A\u4E0B\u6587\uFF0C\u4E0D\u628A\u53EF\u5224\u65AD\u7684\u95EE\u9898\u4EA4\u7ED9\u7528\u6237\u3002\u4E0D\u8981\u8981\u6C42\u7528\u6237\u91CD\u590D\u5DF2\u6709\u4FE1\u606F\uFF0C\u4E5F\u4E0D\u8981\u6C42\u5728 discuss \u4E2D\u786E\u5B9A\u6240\u6709\u5B9E\u73B0\u7EC6\u8282\u3002
+
+- \u5148\u8BFB\u76F8\u5173\u4EE3\u7801\u3001\u6587\u6863\u3001\u5386\u53F2 Note \u4E0E\u9879\u76EE\u7EA6\u675F\u3002
+- \u660E\u786E\u5B9E\u9645\u95EE\u9898\u3001\u7EA6\u675F\u3001\u5DF2\u6709\u51B3\u5B9A\u4E0E\u51B2\u7A81\u3002
+- \u7ED9\u51FA\u6709\u5B9E\u8D28\u5DEE\u5F02\u7684\u53EF\u884C\u65B9\u6848\u3001\u63A8\u8350\u4E0E\u5173\u952E\u6743\u8861\u3002
+- \u53EA\u5BF9\u672A\u51B3\u7684\u4EA7\u54C1\u3001\u8303\u56F4\u3001\u517C\u5BB9\u6027\u3001\u6210\u672C\u3001\u98CE\u9669\u7B49\u4EF7\u503C\u5224\u65AD\u63D0\u95EE\u3002
+- \u4E0D\u521B\u5EFA\u63D0\u6848\u3001Note \u6216\u89C4\u683C\u6587\u4EF6\uFF1B\u6587\u4EF6\u9ED8\u8BA4\u53EA\u8BFB\uFF0C\u4E0D\u5199\u5DE5\u4F5C\u533A\u3002\u63D0\u4EA4\u5DF2\u6709\u6539\u52A8\uFF08git add/commit/push\uFF09\u4E0D\u53D7\u6587\u4EF6\u53EA\u8BFB\u5F71\u54CD\u3002
+- \u6C47\u62A5\uFF1A\u5DF2\u89E3\u51B3\u4E8B\u9879\u3001\u5269\u4F59\u672A\u51B3\u4E8B\u9879\u3001\u5EFA\u8BAE\u7684\u4E0B\u4E00\u9636\u6BB5\u3002
+- \u4E0D\u81EA\u884C\u79BB\u5F00 discuss\uFF1B\u79BB\u5F00\u5FC5\u987B\u7531\u7528\u6237\u660E\u786E\u6388\u6743\u3002\u6388\u6743\u53EF\u4EE5\u5728\u5BF9\u8BDD\u4E2D\u8981\u6C42\u7528\u6237\u518D\u8F93\u5165 slash command\u6216 ask_user_question \u4E2D\u7ED9\u51FA\uFF1B\u83B7\u5F97\u6388\u6743\u540E\u8FDB\u5165 plan/implement\u3002`;
 var PLAN_ORCHESTRATION = `## /gate-enter-plan \u7F16\u6392
 \u4E3B\u4EE3\u7406\u6D3E worker\uFF1Bgate \u4E0D\u6D3E\u3002
 
@@ -57,7 +75,7 @@ var PLAN_ORCHESTRATION = `## /gate-enter-plan \u7F16\u6392
 \u5148\u6309 write-agent-notes \xA73 \u68C0\u7D22\u5386\u53F2\uFF0C\u518D\u6309 \xA74 \u5224\u5B9A\u5F52\u5C5E\u4E0E class\uFF1B\u7528 gate_note_write \u5199 Note\uFF0C\u8DEF\u5F84\u4E0E class \u5FC5\u987B\u4E00\u81F4\u3002\u53D1\u73B0\u65E7 implemented Note \u88AB\u65B0\u51B3\u5B9A\u5B8C\u5168\u53D6\u4EE3\u65F6\uFF0C\u8BB0\u4E0B\u5F52\u6863\u5019\u9009\uFF1B\u65B0 Note \u5C1A\u672A\u843D\u5730\u524D\u4E0D\u8981\u5F52\u6863\u3002
 \u628A\u5DE5\u4F5C\u9879\u3001\u7EA6\u675F\u548C\u63D0\u70BC\u540E\u7684\u89C4\u5212\u65B9\u6CD5\u5199\u8FDB subagent prompt\uFF1Bplanning worker \u4E0D\u52A0\u8F7D gate \u6280\u80FD\u3002
 \u5B8C\u6210\u540E\u8C03 gate_record({node:'plan', task, notePaths, noteDecision, noteSearch, workerSessionIds})\u3002
-notePaths \u662F [{path,class,lifecycle}] \u6570\u7EC4\uFF1Bpath \u63A5\u53D7 .agents/notes/<lifecycle>/<class>/...\u3001<lifecycle>/<class>/... \u6216 <class>/...\uFF0Cgate_record \u5F52\u4E00\u4E3A\u5B8C\u6574\u8DEF\u5F84\uFF1Bmechanical:<\u8BF4\u660E> \u7528 noteDecision:'mechanical' \u4E14 notePaths \u4E3A\u7A7A\u3002
+notePaths \u662F [{path,class,lifecycle}] \u6570\u7EC4\uFF1Bpath \u63A5\u53D7 .agents/notes/<lifecycle>/<class>/...\u3001<lifecycle>/<class>/... \u6216 <class>/...\uFF0Cgate_record \u5F52\u4E00\u4E3A\u5B8C\u6574\u8DEF\u5F84\uFF1Bmechanical \u7528 noteDecision:'mechanical' \u4E14 notePaths \u4E3A\u7A7A\uFF1B\u4E0D\u9700\u8981 task \u524D\u7F00\u3002
 
 ## Step 2 \u2014 Plan Review
 \u4E3B agent \u9996\u6B21\u8FDB\u5165 plan-review \u65F6\u52A0\u8F7D\u6280\u80FD gate-plan-review\uFF1B\u82E5\u672C\u4F1A\u8BDD\u5DF2\u52A0\u8F7D\u4E14\u5185\u5BB9\u4ECD\u5728\u4E0A\u6587\uFF0C\u540E\u7EED\u591A\u8F6E review \u76F4\u63A5\u590D\u7528\uFF0C\u4E0D\u8981\u91CD\u590D\u8C03\u7528 skill\u3002\u8BFB\u53D6\u8BE5\u6280\u80FD\u7684 assets/worker-briefs/plan-review.md \u5199 review \u4EFB\u52A1\uFF0C\u6309\u4EFB\u52A1\u89C4\u6A21\u548C\u98CE\u9669\u81EA\u884C\u51B3\u5B9A\u6D3E\u4E00\u4E2A\u6216\u591A\u4E2A\u53EA\u8BFB review worker\uFF0C\u8986\u76D6 Standards\u3001Spec\u3001Architecture \u4E09\u8F74\u3002
@@ -134,10 +152,10 @@ var NODE_INFO = {
 var NODE_METHODS = Object.fromEntries(Object.entries(NODE_INFO).map(([node, info]) => [node, info.method]));
 var WORKER_NODES = new Set(GATE_RECORD_NODES.filter((node) => node !== "docs" && node !== "note-lifecycle"));
 var DISPATCH_RULE = `## \u6280\u80FD\u52A0\u8F7D\u89C4\u5219
-1. \u672C\u4F1A\u8BDD\u5DF2\u7ECF\u901A\u8FC7 skill \u5DE5\u5177\u52A0\u8F7D\u8FC7\u7684\u6280\u80FD\uFF0C\u5185\u5BB9\u4ECD\u5728\u4E0A\u6587\u65F6\u76F4\u63A5\u590D\u7528\uFF0C\u4E0D\u8981\u91CD\u590D\u8C03\u7528 skill\u3002
-2. \u53EA\u6709\u4EE5\u4E0B\u60C5\u51B5\u624D\u91CD\u65B0\u52A0\u8F7D\uFF1A\u672C\u4F1A\u8BDD\u9996\u6B21\u8FDB\u5165\u8BE5\u6280\u80FD\uFF1Bcompaction \u540E\u5185\u5BB9\u5DF2\u4E0D\u5728\u4E0A\u4E0B\u6587\uFF1B\u6280\u80FD\u6587\u4EF6/\u7248\u672C\u53D1\u751F\u53D8\u5316\uFF1B\u7528\u6237\u660E\u786E\u8981\u6C42\u5237\u65B0\u3002
-3. gate_record / gate_status \u8FD4\u56DE\u65B0\u7684 procedure \u53EA\u4EE3\u8868 node\u3001\u8F6E\u6B21\u6216 findings \u53D8\u5316\uFF0C\u4E0D\u4EE3\u8868\u8981\u91CD\u65B0\u52A0\u8F7D\u6280\u80FD\u3002
-4. \u591A\u8F6E review/revise \u590D\u7528\u540C\u4E00\u4EFD\u6280\u80FD\u5185\u5BB9\uFF1B\u628A\u65B0\u7684 findings\u3001\u6587\u4EF6\u8303\u56F4\u548C\u8981\u6C42\u4F20\u7ED9 worker\uFF0C\u4E0D\u8981\u91CD\u65B0\u52A0\u8F7D\u6280\u80FD\u3002`;
+- \u672C\u4F1A\u8BDD\u5DF2\u7ECF\u901A\u8FC7 skill \u5DE5\u5177\u52A0\u8F7D\u8FC7\u7684\u6280\u80FD\uFF0C\u5185\u5BB9\u4ECD\u5728\u4E0A\u6587\u65F6\u76F4\u63A5\u590D\u7528\uFF0C\u4E0D\u8981\u91CD\u590D\u8C03\u7528 skill\u3002
+- \u53EA\u6709\u4EE5\u4E0B\u60C5\u51B5\u624D\u91CD\u65B0\u52A0\u8F7D\uFF1A\u672C\u4F1A\u8BDD\u9996\u6B21\u8FDB\u5165\u8BE5\u6280\u80FD\uFF1Bcompaction \u540E\u5185\u5BB9\u5DF2\u4E0D\u5728\u4E0A\u4E0B\u6587\uFF1B\u6280\u80FD\u6587\u4EF6/\u7248\u672C\u53D1\u751F\u53D8\u5316\uFF1B\u7528\u6237\u660E\u786E\u8981\u6C42\u5237\u65B0\u3002
+- gate_record / gate_status \u8FD4\u56DE\u65B0\u7684 procedure \u53EA\u4EE3\u8868 node\u3001\u8F6E\u6B21\u6216 findings \u53D8\u5316\uFF0C\u4E0D\u4EE3\u8868\u8981\u91CD\u65B0\u52A0\u8F7D\u6280\u80FD\u3002
+- \u591A\u8F6E review/revise \u590D\u7528\u540C\u4E00\u4EFD\u6280\u80FD\u5185\u5BB9\uFF1B\u628A\u65B0\u7684 findings\u3001\u6587\u4EF6\u8303\u56F4\u548C\u8981\u6C42\u4F20\u7ED9 worker\uFF0C\u4E0D\u8981\u91CD\u65B0\u52A0\u8F7D\u6280\u80FD\u3002`;
 var REVIEWING_CODE_PROCEDURE = `## /gate-implement-review \u7F16\u6392
 \u4E3B agent \u9996\u6B21\u8FDB\u5165\u65F6\u52A0\u8F7D gate-code-review\uFF1B\u5DF2\u52A0\u8F7D\u5219\u590D\u7528\uFF0C\u4E0D\u8981\u91CD\u590D\u8C03\u7528 skill\u3002\u6D3E\u53EA\u8BFB review worker \u8986\u76D6 Standards \u4E0E Spec \u4E24\u8F74\uFF1B\u5B8C\u6210\u540E gate_record({node:'code-review-standalone', findings, reviewAxes, workerSessionIds}) \u56DE discuss\u3002`;
 var REVIEWING_PROPOSAL_PROCEDURE = `## /gate-propose-review \u7F16\u6392
@@ -174,8 +192,7 @@ var NODE_PROCEDURES = {
 var GATE_METHODOLOGY = `## Gate \u65B9\u6CD5\u8BBA
 \u672C\u6BB5\u53EA\u5B9A\u4E49\u5404\u9636\u6BB5\u7684\u5DE5\u4F5C\u65B9\u6CD5\u4E0E\u8D28\u91CF\u6807\u51C6\u3002\u5F53\u524D phase/node\u3001procedure \u548C\u8981\u52A0\u8F7D\u7684\u6280\u80FD\u6765\u81EA\u6700\u8FD1\u4E00\u6B21 gate_status\u3001gate_record \u6216\u547D\u4EE4\u7ED3\u679C\uFF1B\u53EA\u6267\u884C\u5F53\u524D phase \u7684 procedure\uFF0C\u5176\u4ED6\u9636\u6BB5\u7684\u65B9\u6CD5\u8BBA\u4EC5\u4F5C\u80CC\u666F\u53C2\u8003\uFF1Bcompaction \u540E\u5FC5\u987B\u91CD\u65B0\u83B7\u53D6 procedure\uFF0C\u5E76\u786E\u8BA4\u6280\u80FD\u5185\u5BB9\u662F\u5426\u4ECD\u5728\u4E0A\u4E0B\u6587\uFF1A\u9996\u6B21\u9700\u8981\u65F6\u52A0\u8F7D\uFF0C\u5DF2\u5728\u4E0A\u6587\u5219\u590D\u7528\uFF0C\u4E0D\u8981\u56E0 procedure \u66F4\u65B0\u91CD\u590D\u52A0\u8F7D\u3002
 
-## discuss
-discuss \u662F\u9ED8\u8BA4\u9636\u6BB5\u3002\u5148\u8BFB\u76F8\u5173\u4EE3\u7801\u3001\u6587\u6863\u3001\u5386\u53F2 Note \u4E0E\u9879\u76EE\u7EA6\u675F\uFF1B\u660E\u786E\u5B9E\u9645\u95EE\u9898\u3001\u7EA6\u675F\u3001\u5DF2\u6709\u51B3\u5B9A\u4E0E\u51B2\u7A81\uFF1B\u7ED9\u51FA\u6709\u5B9E\u8D28\u5DEE\u5F02\u7684\u53EF\u884C\u65B9\u6848\u3001\u63A8\u8350\u4E0E\u5173\u952E\u6743\u8861\uFF1B\u53EA\u5BF9\u672A\u51B3\u7684\u4EA7\u54C1\u3001\u8303\u56F4\u3001\u517C\u5BB9\u6027\u3001\u6210\u672C\u3001\u98CE\u9669\u7B49\u4EF7\u503C\u5224\u65AD\u63D0\u95EE\uFF1B\u6C47\u62A5\u5DF2\u89E3\u51B3\u3001\u672A\u51B3\u4E8B\u9879\u548C\u5EFA\u8BAE\u4E0B\u4E00\u9636\u6BB5\u3002\u4E0D\u8FDB\u5165\u5B9E\u65BD\uFF0C\u53EA\u6709\u7528\u6237\u660E\u786E\u6388\u6743\u624D\u79BB\u5F00\u3002
+${DISCUSS_ORCHESTRATION}
 
 ## plan
 \u628A\u7528\u6237\u7B80\u8FF0\u6536\u655B\u6210\u53EF\u5B9E\u65BD\u8BA1\u5212\u4E0E proposed Note\uFF1B\u8BA1\u5212\u5FC5\u987B\u5199\u6E05\u8303\u56F4\u3001\u9A8C\u6536\u3001\u5907\u9009\u4E0E\u98CE\u9669\u3002Plan Review \u72EC\u7ACB\u5224\u65AD\uFF1Bfindings \u5148\u8BB0\u5F55\u518D revise\uFF1Breview \u901A\u8FC7\u540E\u56DE discuss\u3002\u4E0D\u8981\u5728\u89C4\u5212\u91CC\u5F00\u59CB\u5B9E\u73B0\u3002
@@ -219,7 +236,7 @@ function procedureFor(state, { reviewLimit = DEFAULT_REVIEW_LIMIT } = {}) {
   const method = NODE_METHODS[state.node ?? ""] ?? "\u65E0";
   let text;
   if (variant === "discuss") {
-    text = "discuss \u4E0D\u6D3E worker\uFF1B\u4E3B\u4EE3\u7406\u53EF\u81EA\u884C\u8BFB/\u5199\uFF1B\u7528\u6237\u6388\u6743\u540E\u8C03\u7528 gate_start_phase \u8FDB\u5165 plan/implement\u3002";
+    text = "discuss \u4E0D\u6D3E worker\uFF1B\u6587\u4EF6\u9ED8\u8BA4\u53EA\u8BFB\uFF0C\u63D0\u4EA4\u5DF2\u6709\u6539\u52A8\u4E0D\u53D7\u5F71\u54CD\uFF1B\u7528\u6237\u6388\u6743\u540E\u8C03\u7528 gate_start_phase \u8FDB\u5165 plan/implement\u3002";
   } else if (variant === "blocked") {
     text = `Gate \u5DF2\u51BB\u7ED3\uFF1A${state.blockReason ?? "unknown"}\uFF1B\u89E3\u51BB\u540E\u56DE ${state.blockedFrom?.phase ?? "discuss"} / ${state.blockedFrom?.node ?? "\u65E0"}\uFF1B\u7528 /gate-resume \u6216 /gate-return-discuss\u3002`;
   } else if (variant === "complete") {
@@ -271,7 +288,7 @@ function statusText(state, reviewLimit = DEFAULT_REVIEW_LIMIT, { includeRounds =
     `planReady\uFF1A${state.planReady ? "\u662F" : "\u5426"}`,
     ...includeRounds ? [`rounds\uFF1A${roundsText(state, reviewLimit)}`] : []
   ];
-  if (state.notePaths?.length > 0 || state.noteDecision === "mechanical") {
+  if (state.notePaths?.length > 0 || isMechanicalDecision(state.noteDecision)) {
     lines.push(`notes\uFF1A${state.noteDecision ?? "\u65E0"} ${state.notePaths?.length ?? 0} \u7BC7\uFF0Cverified=${state.noteVerified === true ? "\u662F" : "\u5426"}`);
   }
   if (state.exhausted?.plan === true || state.exhausted?.code === true) {
@@ -356,7 +373,7 @@ function normalizeState(value) {
     verification: source.verification !== null && typeof source.verification === "object" && !Array.isArray(source.verification) ? clone(source.verification) : null,
     blockedFrom,
     notePaths: Array.isArray(source.notePaths) ? source.notePaths.map((entry) => entry !== null && typeof entry === "object" && !Array.isArray(entry) ? { ...entry } : entry) : [],
-    noteDecision: textOrNull(source.noteDecision),
+    noteDecision: isNoteDecision(source.noteDecision) ? source.noteDecision : null,
     noteSearch: textOrNull(source.noteSearch),
     noteVerified: source.noteVerified === true,
     noteFinalized: source.noteFinalized === true,
@@ -652,10 +669,10 @@ function normalizeNotePaths(value) {
   });
 }
 function notePathsForDecision(value, decision) {
-  return decision === "mechanical" ? value : normalizeNotePaths(value);
+  return isMechanicalDecision(decision) ? value : normalizeNotePaths(value);
 }
 function validateNotePaths(root, value, decision) {
-  if (decision === "mechanical") {
+  if (isMechanicalDecision(decision)) {
     if (!Array.isArray(value) || value.length !== 0) return { code: "note-paths-required", reason: "mechanical \u7684 notePaths \u5FC5\u987B\u4E3A\u7A7A\u3002" };
     return void 0;
   }
@@ -667,9 +684,10 @@ function validateNotePaths(root, value, decision) {
     }
     if (!NOTE_CLASSES.has(entry.class)) return { code: "invalid-note-class", class: entry.class };
     if (!["proposed", "implemented"].includes(entry.lifecycle)) return { code: "invalid-note-lifecycle", lifecycle: entry.lifecycle };
-    if (decision === "new" && entry.lifecycle !== "proposed") return { code: "note-decision-mismatch", reason: "new \u53EA\u80FD proposed\u3002" };
-    if (decision === "update" && entry.lifecycle !== "proposed") return { code: "note-decision-mismatch", reason: "update \u53EA\u80FD proposed\u3002" };
-    if (decision === "in-place" && entry.lifecycle !== "implemented") return { code: "note-decision-mismatch", reason: "in-place \u53EA\u80FD implemented\u3002" };
+    const expectedLifecycle = NOTE_DECISION_LIFECYCLE[decision];
+    if (expectedLifecycle !== null && entry.lifecycle !== expectedLifecycle) {
+      return { code: "note-decision-mismatch", reason: `${decision} \u53EA\u80FD ${expectedLifecycle}\u3002` };
+    }
     const normalized = entry.path.replaceAll("\\", "/");
     if (normalized.startsWith("/") || normalized.includes("..")) return { code: "invalid-note-path", path: entry.path };
     const parts = normalized.split("/");
@@ -881,10 +899,148 @@ function effectiveState(ctx, agent, gate, store) {
   return { root, state: store.read(gate.root, root), worker: root?.id !== agent?.id };
 }
 
-// src/runtime/gate.ts
-function isMechanical(task) {
-  return /^mechanical:/iu.test(String(task ?? "").trim());
+// src/classify.ts
+import path6 from "node:path";
+function classifyPath(root, value, cwd = root) {
+  const absolute = path6.resolve(cwd, String(value ?? ""));
+  const relative = path6.relative(root, absolute).replaceAll("\\", "/");
+  const outside = relative === ".." || relative.startsWith("../") || path6.isAbsolute(relative);
+  return { absolute, relative, outside };
+}
+var GIT_VALUE_OPTIONS = /* @__PURE__ */ new Set(["-C", "-c", "--git-dir", "--work-tree", "--namespace", "--config-env"]);
+var GIT_FILE_WRITE = /* @__PURE__ */ new Set(["checkout", "switch", "reset", "clean", "restore", "stash", "merge", "rebase", "cherry-pick", "apply", "pull"]);
+var GIT_NON_WRITE = /* @__PURE__ */ new Set(["status", "add", "commit", "push"]);
+function gitSubcommands(command) {
+  const subcommands = /* @__PURE__ */ new Set();
+  for (const segment of String(command).split(/&&|\|\||;|\r?\n|\|/u)) {
+    const tokens = [...segment.matchAll(/"([^"]*)"|'([^']*)'|(\S+)/gu)].map((match) => match[1] ?? match[2] ?? match[3] ?? "");
+    const gitIndex = tokens.findIndex((token) => /^git(?:\.exe)?$/iu.test(token));
+    if (gitIndex < 0) continue;
+    let index = gitIndex + 1;
+    while (index < tokens.length) {
+      const token = tokens[index] ?? "";
+      if (token === "--") {
+        index += 1;
+        break;
+      }
+      if (!token.startsWith("-")) break;
+      const option = token.split("=", 1)[0] ?? token;
+      if (GIT_VALUE_OPTIONS.has(option) && !token.includes("=")) index += 2;
+      else index += 1;
+    }
+    const subcommand = tokens[index]?.toLowerCase();
+    if (subcommand !== void 0) subcommands.add(subcommand);
+  }
+  return subcommands;
+}
+var WRITE_VERB = /(?:^|[\s;(])(Set-Content|Add-Content|Out-File|New-Item|Remove-Item|Move-Item|Copy-Item|Rename-Item|Clear-Content|Set-Item|mkdir|md|touch|tee|rm|mv|cp|sed\s+-i)\b/iu;
+function pathArgs(text) {
+  const beforePipe = String(text).split("|")[0] ?? "";
+  return [...beforePipe.matchAll(/(?:'([^']+)'|"([^"]+)"|(\S+))/gu)].map((match) => match[1] ?? match[2] ?? match[3]).filter((value) => value !== void 0 && !value.startsWith("-"));
+}
+function assignments(text) {
+  const map = /* @__PURE__ */ new Map();
+  for (const match of String(text).matchAll(/(?:^|[;\n])\s*\$?([A-Za-z_]\w*)\s*=\s*(?:'([^']*)'|"([^"]*)"|(\S+))/gu)) {
+    const key = match[1];
+    if (key !== void 0) map.set(key, match[2] ?? match[3] ?? match[4] ?? "");
+  }
+  return map;
+}
+function resolveToken(token, map) {
+  const variable = /^\$([A-Za-z_]\w*)$/u.exec(token);
+  if (variable === null) return token;
+  const key = variable[1];
+  return (key === void 0 ? token : map.get(key)) ?? token;
+}
+function redirectionTargets(text) {
+  return [...String(text).matchAll(/(?:^|\s)>{1,2}\s*(?:'([^']+)'|"([^"]+)"|([^\s;&|]+))/gu)].map((match) => match[1] ?? match[2] ?? match[3]).filter((value) => value !== void 0);
+}
+function pipeTargets(text) {
+  const targets = [];
+  for (const part of String(text).split("|").slice(1)) {
+    const body = part.replace(/^\s*(?:tee|Set-Content|Out-File|Add-Content)\b/iu, "");
+    if (body === part) continue;
+    for (const token of pathArgs(body)) targets.push(token);
+  }
+  return targets;
+}
+function addTarget(targets, token, map) {
+  if (token === void 0 || token === "") return;
+  if (token.startsWith("$")) {
+    const resolved = resolveToken(token, map);
+    if (resolved !== token) targets.push(resolved);
+    return;
+  }
+  targets.push(token);
+}
+function segmentAccess(text, root, cwd, map) {
+  const git = gitSubcommands(text);
+  if ([...git].some((command) => GIT_FILE_WRITE.has(command))) return { write: true, outsideTargets: [] };
+  if ([...git].some((command) => GIT_NON_WRITE.has(command))) return { write: false, outsideTargets: [] };
+  const raw = [];
+  const verb = WRITE_VERB.exec(text);
+  if (verb !== null) {
+    const tail = text.slice(verb.index + verb[0].length);
+    for (const token of pathArgs(tail)) addTarget(raw, token, map);
+  }
+  for (const token of redirectionTargets(text)) addTarget(raw, token, map);
+  for (const token of pipeTargets(text)) addTarget(raw, token, map);
+  const outsideTargets = [];
+  for (const value of raw) {
+    const target = classifyPath(root, path6.resolve(cwd, value));
+    if (target.outside) outsideTargets.push(target.absolute);
+  }
+  return { write: raw.length > 0 || WRITE_VERB.test(text), outsideTargets };
+}
+function segments(text) {
+  return String(text).split(/&&|\|\||;|\r?\n/u).map((part) => part.trim()).filter(Boolean);
+}
+function shellAccess(command, root, cwd = root) {
+  const map = assignments(command);
+  const parts = segments(command).map((part) => segmentAccess(part, root, cwd, map)).filter((item) => item.write);
+  return {
+    write: parts.length > 0,
+    outsideTargets: parts.flatMap((item) => item.outsideTargets ?? [])
+  };
+}
+
+// src/access.ts
+function accessFor(state, worker) {
+  if (state.phase === "blocked") {
+    return { read: true, write: "none", noteWrite: false, shell: "read", repoWrite: worker ? "none" : "push" };
+  }
+  if (!worker) {
+    if (state.phase === "discuss") {
+      return { read: true, write: "none", noteWrite: false, shell: "read", repoWrite: "push" };
+    }
+    return {
+      read: true,
+      write: "workspace",
+      noteWrite: state.node === "note-lifecycle",
+      shell: "write",
+      repoWrite: "push"
+    };
+  }
+  if (state.node === "plan" || state.node === "plan-revise") {
+    return { read: true, write: "none", noteWrite: true, shell: "read", repoWrite: "none" };
+  }
+  if (state.node === "implement" || state.node === "implement-revise" || state.node === "fix-bug") {
+    return { read: true, write: "workspace", noteWrite: false, shell: "write", repoWrite: "push" };
+  }
+  return { read: true, write: "none", noteWrite: false, shell: "read", repoWrite: "none" };
+}
+function accessText(access) {
+  return `\u6743\u9650\uFF1Aread=${access.read ? "yes" : "no"} write=${access.write} noteWrite=${access.noteWrite ? "yes" : "no"} shell=${access.shell} repoWrite=${access.repoWrite}`;
+}
+function repoCommands(command) {
+  const commands = /* @__PURE__ */ new Set();
+  for (const subcommand of gitSubcommands(command)) {
+    if (subcommand === "add" || subcommand === "commit" || subcommand === "push") commands.add(subcommand);
+  }
+  return commands;
 }
+
+// src/runtime/gate.ts
 function enterPhase(ctx, agent, node, reviewLimit, store, current) {
   const gate = resolveGate(ctx, agent);
   const state = current ?? store.read(gate.root, agent);
@@ -947,6 +1103,8 @@ function makeWake(reviewLimit) {
     const procedure = procedureFor(state, { reviewLimit });
     wakeGateAgent(invocation, `${procedureBlock(procedure)}
 
+${accessText(accessFor(state, false))}
+
 ${text}`, command);
   };
 }
@@ -957,7 +1115,7 @@ function workerProtocol(node) {
     "## Gate worker",
     "\u4F60\u662F gate \u4E3A\u8BE5\u8282\u70B9\u6D3E\u53D1\u7684 worker\u3002\u53EA\u6267\u884C\u8BE5\u8282\u70B9\uFF1B\u4E0D\u8981\u8C03\u7528 gate_record\uFF0C\u4E0D\u8981\u63A8\u8FDB gate\u3002",
     node === "verify-standalone" ? "\u52A0\u8F7D\u4F7F\u7528 gate-user-verify \u5B8C\u6210\u9A8C\u6536\uFF0C\u5E76\u6309\u8BE5\u6280\u80FD Step 6 \u6C47\u62A5\u3002\u4EFB\u52A1\u4E0E\u6C47\u62A5\u6A21\u677F\u89C1\u8BE5\u6280\u80FD assets/worker-briefs/gate-code-verify.md\u3002\u4E0D\u4FEE\u6539\u4EA7\u54C1\u4EE3\u7801\u3001\u6D4B\u8BD5\u3001\u9700\u6C42\u6216\u8BBE\u8BA1\uFF1B\u53EF\u4EE5\u8FD0\u884C\u6D4B\u8BD5/\u547D\u4EE4\u4F5C\u4E3A\u8BC1\u636E\uFF0C\u4F46\u4E0D\u5F97\u4FEE\u6539\u3001\u653E\u5BBD\u6216\u91CD\u5199\u6D4B\u8BD5\uFF1B\u4E0D\u8981\u81EA\u884C\u63D0\u4EA4\u3002" : node === "fix-bug" ? "\u4E3B\u4EE3\u7406\u5DF2\u8BFB\u53D6 gate-fix-bug\uFF1B\u4F60\u6267\u884C gate-fix-bug \u7684 Process 1-9\uFF08\u590D\u73B0\u3001\u56DE\u5F52\u8986\u76D6\u3001\u6839\u56E0\u3001\u6700\u5C0F\u4FEE\u590D\u3001\u6D4B\u8BD5\uFF09\uFF0C\u8FD4\u56DE\u4FEE\u590D receipt\uFF1B\u4E0D\u8981\u81EA\u884C\u5B8C\u6210 Step 10-12\uFF0C\u4E0D\u8981\u63D0\u4EA4\u3002\u4E0D\u6539\u4EA7\u54C1\u5408\u540C\u3001\u4E0D\u6269\u5927\u8303\u56F4\u3002" : "\u4E3B\u4EE3\u7406\u5DF2\u7ECF\u52A0\u8F7D\u6240\u9700 gate \u6280\u80FD\uFF0C\u5E76\u628A\u5177\u4F53\u4EFB\u52A1\u4E0E\u76F8\u5173\u65B9\u6CD5\u8981\u6C42\u4EA4\u7ED9\u4F60\u3002\u4E0D\u8981\u81EA\u5DF1\u52A0\u8F7D gate \u6280\u80FD\u3002",
-    node === "plan" || node === "plan-revise" ? "\u7528 gate_note_write \u5728 .agents/notes/proposed \u4E0B\u521B\u5EFA\u6216\u66F4\u65B0 proposed Agent Note\uFF1B\u539F\u5730\u540C\u6B65\u65E2\u6709 implemented Note \u65F6\u8DEF\u5F84\u5199 implemented/<class>/...\uFF1Bplanning \u4E2D\u901A\u7528 write/edit/shell \u88AB\u9650\u5236\u3002" : ""
+    node === "plan" || node === "plan-revise" ? "\u7528 gate_note_write \u5728 .agents/notes/proposed \u4E0B\u521B\u5EFA\u6216\u66F4\u65B0 proposed Agent Note\uFF1B\u539F\u5730\u540C\u6B65\u65E2\u6709 implemented Note \u65F6\u8DEF\u5F84\u5199 implemented/<class>/...\uFF1Bplanning \u4E2D write/edit/apply_patch \u548C\u4ED3\u5E93\u5199\u88AB\u62D2\u7EDD\uFF0C\u53EA\u8BFB shell \u53EF\u7528\u3002" : ""
   ].filter(Boolean).join("\n\n");
 }
 var REVIEW_NODES = /* @__PURE__ */ new Set(["plan-review", "proposal-review", "code-review", "code-review-standalone"]);
@@ -1028,104 +1186,21 @@ function installSystemPrompt(ctx, deps) {
       text: (context) => {
         const gate = resolveGate(ctx, context.agent);
         const effective = effectiveState(ctx, context.agent, gate, deps.store);
-        if (effective.worker) return ["## Gate", "Gate worker\uFF1A\u53EA\u6267\u884C\u5F53\u524D node\uFF0C\u4E0D\u63A8\u8FDB phase\u3002", workerProtocol(effective.state.node ?? "")].filter(Boolean).join("\n\n");
+        if (effective.worker) return ["## Gate", "Gate worker\uFF1A\u53EA\u6267\u884C\u5F53\u524D node\uFF0C\u4E0D\u63A8\u8FDB phase\u3002", accessText(accessFor(effective.state, true)), workerProtocol(effective.state.node ?? "")].filter(Boolean).join("\n\n");
         return GATE_METHODOLOGY;
       }
     });
   });
 }
 
-// src/classify.ts
-import path6 from "node:path";
-function classifyPath(root, value, cwd = root) {
-  const absolute = path6.resolve(cwd, String(value ?? ""));
-  const relative = path6.relative(root, absolute).replaceAll("\\", "/");
-  const outside = relative === ".." || relative.startsWith("../") || path6.isAbsolute(relative);
-  return { absolute, relative, outside };
-}
-var WRITE_VERB = /(?:^|[\s;(])(Set-Content|Add-Content|Out-File|New-Item|Remove-Item|Move-Item|Copy-Item|Rename-Item|Clear-Content|Set-Item|mkdir|md|touch|tee|rm|mv|cp|sed\s+-i)\b/iu;
-function pathArgs(text) {
-  const beforePipe = String(text).split("|")[0] ?? "";
-  return [...beforePipe.matchAll(/(?:'([^']+)'|"([^"]+)"|(\S+))/gu)].map((match) => match[1] ?? match[2] ?? match[3]).filter((value) => value !== void 0 && !value.startsWith("-"));
-}
-function assignments(text) {
-  const map = /* @__PURE__ */ new Map();
-  for (const match of String(text).matchAll(/(?:^|[;\n])\s*\$?([A-Za-z_]\w*)\s*=\s*(?:'([^']*)'|"([^"]*)"|(\S+))/gu)) {
-    const key = match[1];
-    if (key !== void 0) map.set(key, match[2] ?? match[3] ?? match[4] ?? "");
-  }
-  return map;
-}
-function resolveToken(token, map) {
-  const variable = /^\$([A-Za-z_]\w*)$/u.exec(token);
-  if (variable === null) return token;
-  const key = variable[1];
-  return (key === void 0 ? token : map.get(key)) ?? token;
-}
-function redirectionTargets(text) {
-  return [...String(text).matchAll(/(?:^|\s)>{1,2}\s*(?:'([^']+)'|"([^"]+)"|([^\s;&|]+))/gu)].map((match) => match[1] ?? match[2] ?? match[3]).filter((value) => value !== void 0);
-}
-function pipeTargets(text) {
-  const targets = [];
-  for (const part of String(text).split("|").slice(1)) {
-    const body = part.replace(/^\s*(?:tee|Set-Content|Out-File|Add-Content)\b/iu, "");
-    if (body === part) continue;
-    for (const token of pathArgs(body)) targets.push(token);
-  }
-  return targets;
-}
-function addTarget(targets, token, map) {
-  if (token === void 0 || token === "") return;
-  if (token.startsWith("$")) {
-    const resolved = resolveToken(token, map);
-    if (resolved !== token) targets.push(resolved);
-    return;
-  }
-  targets.push(token);
-}
-function segmentAccess(text, root, cwd, map) {
-  if (/\bgit\s+(?:status|add|commit|push)\b/iu.test(text)) {
-    return { write: false, outsideTargets: [] };
-  }
-  if (/\bgit\s+(?:checkout|reset|clean)\b/iu.test(text)) {
-    return { write: true, outsideTargets: [] };
-  }
-  const raw = [];
-  const verb = WRITE_VERB.exec(text);
-  if (verb !== null) {
-    const tail = text.slice(verb.index + verb[0].length);
-    for (const token of pathArgs(tail)) addTarget(raw, token, map);
-  }
-  for (const token of redirectionTargets(text)) addTarget(raw, token, map);
-  for (const token of pipeTargets(text)) addTarget(raw, token, map);
-  const outsideTargets = [];
-  for (const value of raw) {
-    const target = classifyPath(root, path6.resolve(cwd, value));
-    if (target.outside) outsideTargets.push(target.absolute);
-  }
-  return { write: raw.length > 0 || WRITE_VERB.test(text), outsideTargets };
-}
-function segments(text) {
-  return String(text).split(/&&|\|\||;|\r?\n/u).map((part) => part.trim()).filter(Boolean);
-}
-function shellAccess(command, root, cwd = root) {
-  const map = assignments(command);
-  const parts = segments(command).map((part) => segmentAccess(part, root, cwd, map)).filter((item) => item.write);
-  return {
-    write: parts.length > 0,
-    outsideTargets: parts.flatMap((item) => item.outsideTargets ?? [])
-  };
-}
-
 // src/runtime/guards.ts
 import path7 from "node:path";
+var DISCUSS_READ_ONLY = "discuss \u6587\u4EF6\u53EA\u8BFB\uFF1B\u8981\u4FEE\u6539\u8BF7\u5148\u53D6\u5F97\u7528\u6237\u6388\u6743\uFF0C\u7136\u540E gate_start_phase({node:'plan'|'implement', brief}) \u6216 /gate-enter-plan / /gate-enter-implement\u3002\u63D0\u4EA4\u5DF2\u6709\u6539\u52A8\u4E0D\u53D7\u5F71\u54CD\u3002";
 function restrictionFilter(state, worker) {
-  const writeTools = ["write", "edit", "apply_patch", "pwsh", "bash"];
-  if (worker) {
-    if (state.node === "implement" || state.node === "implement-revise" || state.node === "fix-bug") return void 0;
-    return { deny: writeTools };
-  }
-  return state.phase === "blocked" ? { deny: ["write", "edit", "apply_patch"] } : void 0;
+  const access = accessFor(state, worker);
+  const deny = [];
+  if (access.write === "none") deny.push("write", "edit", "apply_patch");
+  return deny.length > 0 ? { deny } : void 0;
 }
 var restrictionState = /* @__PURE__ */ new WeakMap();
 function applyRestrictions(ctx, agent, store) {
@@ -1170,21 +1245,28 @@ function applyRestrictions(ctx, agent, store) {
   } catch {
   }
 }
-function workerWriteAllowed(state, target) {
-  if (state.phase !== "orchestrating") return false;
-  if (state.node === "plan" || state.node === "plan-revise") return false;
-  if (state.node === "implement" || state.node === "implement-revise" || state.node === "fix-bug") return true;
-  return false;
-}
-function workerShellAllowed(state, access) {
-  if (state.phase !== "orchestrating") return false;
-  return state.node === "implement" || state.node === "implement-revise" || state.node === "fix-bug";
-}
 function targetList(name, args) {
   if (name !== "apply_patch") return [args?.file_path];
   return [...String(args?.input ?? "").matchAll(/^\*\*\* (?:Add File|Update File|Delete File|Move to):\s*(.+)$/gmu)].map((match) => String(match[1] ?? "").trim());
 }
 var GATE_FROZEN_REASON = "Gate \u5DF2\u51BB\u7ED3\uFF1A\u5148 /gate-resume \u6216 /gate-return-discuss";
+function fileWriteDenied(state, effective) {
+  if (state.phase === "blocked") return GATE_FROZEN_REASON;
+  if (!effective.worker && state.phase === "discuss") return DISCUSS_READ_ONLY;
+  if (effective.worker && (state.node === "plan" || state.node === "plan-revise")) return "planning worker \u53EA\u5141\u8BB8 gate_note_write\uFF1B\u4EA7\u54C1\u6587\u4EF6\u548C\u4ED3\u5E93\u5199\u88AB\u62D2\u7EDD\u3002";
+  if (effective.worker) return `\u5F53\u524D ${state.node ?? "worker"} worker \u4E0D\u5141\u8BB8\u5199\u6587\u4EF6\uFF1Breview/verify worker \u53EA\u8BFB\u3002`;
+  return "\u5F53\u524D\u89D2\u8272\u4E0D\u5141\u8BB8\u5199\u6587\u4EF6";
+}
+function shellWriteDenied(state, effective) {
+  if (state.phase === "blocked") return GATE_FROZEN_REASON;
+  if (!effective.worker && state.phase === "discuss") return DISCUSS_READ_ONLY;
+  if (effective.worker) return `worker ${state.node ?? "unknown"} \u4E0D\u5141\u8BB8\u5199\u578B shell\u3002`;
+  return "\u5F53\u524D\u89D2\u8272\u4E0D\u5141\u8BB8\u5199\u578B shell";
+}
+function repoDenied(state, effective, commands) {
+  if (effective.worker) return `\u5F53\u524D ${state.node ?? "worker"} worker \u4E0D\u5141\u8BB8\u4ED3\u5E93\u5199\uFF08${commands}\uFF09\u3002`;
+  return `\u5F53\u524D root \u4E0D\u5141\u8BB8\u4ED3\u5E93\u5199\uFF08${commands}\uFF09\u3002`;
+}
 function gateDenyReason(ctx, exec, store) {
   if (exec.name === "gate_record") {
     const root = rootAgentOf(ctx, exec.agent);
@@ -1202,17 +1284,14 @@ function gateDenyReason(ctx, exec, store) {
     const gate = resolveGate(ctx, exec.agent);
     const effective = effectiveState(ctx, exec.agent, gate, store);
     const state = effective.state;
+    const access = accessFor(state, effective.worker);
     const cwd = sessionCwd(ctx, exec.agent, gate.workspace);
     const targets = targetList(exec.name, exec.arguments).filter((value) => typeof value === "string" && value !== "");
     if (targets.length === 0) return void 0;
     for (const value of targets) {
       const target = classifyPath(gate.workspace, value, cwd);
       if (target.outside) return "\u5DE5\u4F5C\u533A\u5916\u5199\u5165\u88AB\u62D2\u7EDD";
-      if (effective.worker) {
-        if (!workerWriteAllowed(state, target)) return `worker ${state.node ?? "unknown"} \u4E0D\u5141\u8BB8\u5199\u8BE5\u76EE\u6807`;
-        continue;
-      }
-      if (state.phase === "blocked") return GATE_FROZEN_REASON;
+      if (access.write === "none") return fileWriteDenied(state, effective);
     }
     return void 0;
   }
@@ -1220,16 +1299,18 @@ function gateDenyReason(ctx, exec, store) {
     const gate = resolveGate(ctx, exec.agent);
     const effective = effectiveState(ctx, exec.agent, gate, store);
     const state = effective.state;
+    const access = accessFor(state, effective.worker);
     const base = sessionCwd(ctx, exec.agent, gate.workspace);
     const requested = exec.arguments?.workdir;
     const cwd = typeof requested === "string" && requested !== "" ? path7.resolve(base, requested) : base;
-    const access = shellAccess(exec.arguments?.command ?? "", gate.workspace, cwd);
-    if (/\bgit(?:\.exe)?\b[^\n;&|]*\scommit\b/iu.test(String(exec.arguments?.command ?? "")) && effective.worker && !["implement", "implement-revise", "fix-bug"].includes(state.node ?? "")) {
-      return `worker ${state.node ?? "unknown"} \u4E0D\u5141\u8BB8 git commit`;
-    }
-    if (!access.write) return void 0;
-    if (access.outsideTargets.length > 0) return "\u5DE5\u4F5C\u533A\u5916\u5199\u5165\u88AB\u62D2\u7EDD";
-    if (effective.worker) return workerShellAllowed(state, access) ? void 0 : `worker ${state.node ?? "unknown"} \u4E0D\u5141\u8BB8\u5199\u8BE5\u76EE\u6807`;
+    const command = String(exec.arguments?.command ?? "");
+    const repos = repoCommands(command);
+    if (repos.size > 0 && access.repoWrite === "none") return repoDenied(state, effective, [...repos].join("/"));
+    const shell = shellAccess(command, gate.workspace, cwd);
+    if (!shell.write) return void 0;
+    if (shell.outsideTargets.length > 0) return "\u5DE5\u4F5C\u533A\u5916\u5199\u5165\u88AB\u62D2\u7EDD";
+    if (access.write === "none") return shellWriteDenied(state, effective);
+    if (effective.worker && access.shell !== "write") return shellWriteDenied(state, effective);
     if (state.phase === "blocked") return GATE_FROZEN_REASON;
     return void 0;
   }
@@ -1419,7 +1500,7 @@ ignore\uFF1A${projectGit.ignore}` };
         if (brief === "") return { kind: "error", text: "\u8BF7\u7528\u4E00\u53E5\u8BDD\u8BF4\u660E\u8981\u5B9E\u65BD\u7684\u5185\u5BB9\uFF1B\u4E0D\u8981\u6C42\u5DE5\u4F5C\u9879\u683C\u5F0F\u3002" };
         state.task = brief;
         state.planReady = false;
-        state.noteDecision = null;
+        state.noteDecision = MECHANICAL_DECISION;
         state.notePaths = [];
         state.noteSearch = null;
         state.noteVerified = false;
@@ -1574,7 +1655,9 @@ ignore\uFF1A${projectGit.ignore}` };
     register("gate-status", "\u67E5\u770B\u5F53\u524D gate \u72B6\u6001", async (invocation) => {
       const gate = resolveGate(ctx, invocation.agent);
       const root = rootAgentOf(ctx, invocation.agent);
-      return { kind: "success", text: statusText(store.read(gate.root, root), reviewLimit) };
+      const state = store.read(gate.root, root);
+      const worker = root?.id !== invocation.agent?.id;
+      return { kind: "success", text: [accessText(accessFor(state, worker)), statusText(state, reviewLimit)].join("\n\n") };
     }, null);
     register("gate-note-verify", "\u53EA\u8BFB\u68C0\u67E5 notes tree/format/lifecycle/archived", async (invocation) => {
       const gate = resolveGate(ctx, invocation.agent);
@@ -1633,7 +1716,7 @@ function registerStartPhase(ctx, deps) {
   const { store, reviewLimit, wake } = deps;
   ctx.tools.register({
     name: "gate_start_phase",
-    description: "\u5728\u7528\u6237\u660E\u786E\u6388\u6743\u540E\u4ECE discuss/complete \u8FDB\u5165 plan \u6216 implement\u3002\u4EC5 root agent \u53EF\u8C03\u7528\uFF1B\u6388\u6743\u53EF\u6765\u81EA\u5BF9\u8BDD\u6216 ask_user_question\uFF0C\u4E0D\u8981\u6C42\u7528\u6237\u8F93\u5165 slash command\u3002",
+    description: "\u5728\u7528\u6237\u660E\u786E\u6388\u6743\u540E\u4ECE discuss/complete \u8FDB\u5165 plan \u6216 implement\u3002\u4EC5 root agent \u53EF\u8C03\u7528\uFF1B\u6388\u6743\u53EF\u4EE5\u5728\u5BF9\u8BDD\u4E2D\u8981\u6C42\u7528\u6237\u518D\u8F93\u5165 slash command\u6216 ask_user_question \u4E2D\u7ED9\u51FA\u3002",
     parameters: {
       type: "object",
       additionalProperties: false,
@@ -1661,7 +1744,7 @@ function registerStartPhase(ctx, deps) {
         if (brief === "") return fail({ code: "brief-required", reason: "\u76F4\u63A5 implement \u9700\u8981\u4E00\u53E5\u8BF4\u660E\u3002" });
         state.task = brief;
         state.planReady = false;
-        state.noteDecision = null;
+        state.noteDecision = MECHANICAL_DECISION;
         state.notePaths = [];
         state.noteSearch = null;
         state.noteVerified = false;
@@ -1679,6 +1762,7 @@ function registerStartPhase(ctx, deps) {
         task: result.state.task,
         procedure,
         method: procedure.method,
+        access: accessFor(normalizeState(result.state), false),
         state: normalizeState(result.state)
       };
     }
@@ -1717,7 +1801,7 @@ function registerRecord(ctx, deps) {
             required: ["path", "class", "lifecycle"]
           }
         },
-        noteDecision: { type: "string", enum: ["new", "update", "in-place", "mechanical"] },
+        noteDecision: { type: "string", enum: [...NOTE_DECISIONS] },
         noteSearch: { type: "string" },
         verification: {
           type: "object",
@@ -1753,7 +1837,7 @@ function registerRecord(ctx, deps) {
         state.blockedFrom = null;
         store.write(gate.root, exec.agent, state);
         const procedure2 = procedureFor(state, { reviewLimit });
-        return { ok: true, phase: state.phase, node: state.node, procedure: procedure2, method: procedure2.method, state: normalizeState(state) };
+        return { ok: true, phase: state.phase, node: state.node, procedure: procedure2, method: procedure2.method, access: accessFor(normalizeState(state), false), state: normalizeState(state) };
       }
       if (state.phase !== "orchestrating" && state.phase !== "reviewing") {
         return fail({ code: "not-orchestrating", phase: state.phase, stateSource: store.source, reason: `\u5F53\u524D phase \u662F ${state.phase}\uFF1B\u5148\u8FDB\u5165\u5BF9\u5E94\u9636\u6BB5\u3002` });
@@ -1780,7 +1864,7 @@ function registerRecord(ctx, deps) {
         state.blockReason = "needs-user-decision";
         store.write(gate.root, exec.agent, state);
         const procedure2 = procedureFor(state, { reviewLimit });
-        return { ok: true, phase: state.phase, blockReason: state.blockReason, reason: args.discussionReason ?? null, procedure: procedure2, method: procedure2.method, state: normalizeState(state) };
+        return { ok: true, phase: state.phase, blockReason: state.blockReason, reason: args.discussionReason ?? null, procedure: procedure2, method: procedure2.method, access: accessFor(normalizeState(state), false), state: normalizeState(state) };
       }
       if (args.node === "proposal-review") {
         state.phase = "discuss";
@@ -1795,41 +1879,35 @@ function registerRecord(ctx, deps) {
         state.blockReason = null;
       } else if (args.node === "plan") {
         if (typeof args.task !== "string" || args.task.trim() === "") {
-          return fail({ code: "task-required", reason: "node=plan \u5FC5\u987B\u643A\u5E26 task\uFF08planning \u4EA7\u51FA\u7684\u5DE5\u4F5C\u9879\u6216 mechanical:<\u8BF4\u660E>\uFF09\u3002" });
+          return fail({ code: "task-required", reason: "node=plan \u5FC5\u987B\u643A\u5E26 task\uFF08\u5DE5\u4F5C\u9879\u7B80\u8FF0\uFF1Bmechanical \u7528 noteDecision \u8868\u793A\uFF09\u3002" });
         }
         const decision = args.noteDecision;
-        if (!["new", "update", "in-place", "mechanical"].includes(decision)) {
+        if (!isNoteDecision(decision)) {
           return fail({ code: "note-decision-required", reason: "node=plan \u9700\u8981 noteDecision\uFF08new/update/in-place/mechanical\uFF09\u3002" });
         }
-        if (decision === "mechanical" && !isMechanical(args.task)) {
-          return fail({ code: "mechanical-required", reason: "mechanical \u53EA\u5141\u8BB8 task \u4EE5 mechanical: \u5F00\u5934\u3002" });
-        }
         const optionNotePaths = notePathsForDecision(args.notePaths, decision);
         const noteError = validateNotePaths(gate.root, optionNotePaths, decision);
         if (noteError !== void 0) return fail(noteError);
         state.task = args.task.trim();
-        state.notePaths = decision === "mechanical" ? [] : optionNotePaths;
+        state.notePaths = isMechanicalDecision(decision) ? [] : optionNotePaths;
         state.noteDecision = decision;
         state.noteSearch = typeof args.noteSearch === "string" ? args.noteSearch : null;
-        state.noteVerified = decision === "mechanical";
+        state.noteVerified = isMechanicalDecision(decision);
         state.node = "plan-review";
       } else if (args.node === "plan-revise") {
         if (args.noteDecision !== void 0 || args.notePaths !== void 0) {
           const decision = args.noteDecision ?? state.noteDecision;
-          if (!["new", "update", "in-place", "mechanical"].includes(decision)) {
+          if (!isNoteDecision(decision)) {
             return fail({ code: "note-decision-required", reason: "plan-revise \u9700\u8981\u5408\u6CD5 noteDecision\u3002" });
           }
-          if (decision === "mechanical" && !isMechanical(state.task)) {
-            return fail({ code: "mechanical-required", reason: "mechanical \u53EA\u5141\u8BB8 task \u4EE5 mechanical: \u5F00\u5934\u3002" });
-          }
           const requestedNotePaths = args.notePaths ?? state.notePaths;
           const optionNotePaths = notePathsForDecision(requestedNotePaths, decision);
           const noteError = validateNotePaths(gate.root, optionNotePaths, decision);
           if (noteError !== void 0) return fail(noteError);
-          state.notePaths = decision === "mechanical" ? [] : optionNotePaths;
+          state.notePaths = isMechanicalDecision(decision) ? [] : optionNotePaths;
           state.noteDecision = decision;
           if (typeof args.noteSearch === "string") state.noteSearch = args.noteSearch;
-          state.noteVerified = decision === "mechanical";
+          state.noteVerified = isMechanicalDecision(decision);
         }
         state.node = "plan-review";
       } else if (args.node === "plan-review") {
@@ -1850,18 +1928,29 @@ function registerRecord(ctx, deps) {
           state.blockReason = "plan-review-rounds-exhausted";
         } else state.node = "plan-revise";
       } else if (args.node === "implement") {
-        if (args.noteDecision === "mechanical") {
-          state.noteDecision = "mechanical";
+        if (args.noteDecision !== void 0 && !isNoteDecision(args.noteDecision)) {
+          return fail({ code: "note-decision-required", reason: "implement \u7684 noteDecision \u5FC5\u987B\u662F new/update/in-place/mechanical\u3002" });
+        }
+        const decision = args.noteDecision ?? state.noteDecision;
+        if (decision !== null && !isNoteDecision(decision)) {
+          return fail({ code: "note-decision-required", reason: "implement \u7684 noteDecision \u5FC5\u987B\u662F new/update/in-place/mechanical\u3002" });
+        }
+        if (isMechanicalDecision(args.noteDecision)) {
+          state.noteDecision = MECHANICAL_DECISION;
           state.notePaths = [];
           state.noteVerified = true;
+        } else if (args.noteDecision === void 0 && isMechanicalDecision(state.noteDecision)) {
         } else {
           if (Array.isArray(args.notePaths)) {
+            if (!isNoteDecision(decision)) {
+              return fail({ code: "note-decision-required", reason: "implement \u5199 notePaths \u9700\u8981\u5408\u6CD5 noteDecision\u3002" });
+            }
             const nextNotePaths = normalizeNotePaths(args.notePaths);
-            const noteError = validateNotePaths(gate.root, nextNotePaths, args.noteDecision ?? state.noteDecision);
+            const noteError = validateNotePaths(gate.root, nextNotePaths, decision);
             if (noteError !== void 0) return fail(noteError);
             state.notePaths = nextNotePaths;
           }
-          if (["new", "update", "in-place"].includes(args.noteDecision)) state.noteDecision = args.noteDecision;
+          if (isNoteDecision(args.noteDecision) && !isMechanicalDecision(args.noteDecision)) state.noteDecision = args.noteDecision;
         }
         state.node = "code-review";
       } else if (args.node === "implement-revise") state.node = "code-review";
@@ -1919,7 +2008,7 @@ function registerRecord(ctx, deps) {
         } else if (verification.passed !== true) {
           state.node = "implement-revise";
           state.noteVerified = false;
-        } else if (state.noteDecision === "mechanical") {
+        } else if (isMechanicalDecision(state.noteDecision)) {
           state.noteVerified = true;
           state.noteFinalized = true;
           commitHint = "\u5EFA\u8BAE\u63D0\u4EA4\u5B9E\u73B0";
@@ -1962,7 +2051,7 @@ function registerRecord(ctx, deps) {
       store.write(gate.root, exec.agent, state);
       const next = normalizeState(state);
       const procedure = procedureFor(next, { reviewLimit });
-      return { ok: true, phase: state.phase, node: state.node, rounds: state.rounds, blockReason: state.blockReason, verification: state.verification, procedure, method: procedure.method, state: next, ...commitHint === null ? {} : { commitHint } };
+      return { ok: true, phase: state.phase, node: state.node, rounds: state.rounds, blockReason: state.blockReason, verification: state.verification, procedure, method: procedure.method, access: accessFor(next, false), state: next, ...commitHint === null ? {} : { commitHint } };
     }
   });
 }
@@ -1989,8 +2078,10 @@ function registerStatus(ctx, deps) {
       const gate = resolveGate(ctx, exec.agent);
       if (gate.root === void 0) return { ok: false, code: "state-unavailable", reason: "\u65E0\u6CD5\u786E\u5B9A\u5DE5\u4F5C\u533A\u3002" };
       const state = store.read(gate.root, root);
-      if (root?.id !== exec.agent?.id) {
-        return { ok: true, procedure: null, method: null, text: statusText(state, reviewLimit) };
+      const worker = root?.id !== exec.agent?.id;
+      const access = accessFor(state, worker);
+      if (worker) {
+        return { ok: true, procedure: null, method: null, access, text: [accessText(access), statusText(state, reviewLimit)].join("\n\n") };
       }
       const procedure = procedureFor(state, { reviewLimit });
       const includeRounds = !procedure.hasRounds;
@@ -1998,7 +2089,8 @@ function registerStatus(ctx, deps) {
         ok: true,
         procedure,
         method: procedure.method,
-        text: procedureResultText(procedure, statusText(state, reviewLimit, { includeRounds }))
+        access,
+        text: procedureResultText(procedure, [statusText(state, reviewLimit, { includeRounds }), accessText(access)].join("\n\n"))
       };
     }
   });
@@ -2011,7 +2103,7 @@ function registerNoteTools(ctx, deps) {
   const { store, reviewLimit, wake } = deps;
   ctx.tools.register({
     name: "gate_note_write",
-    description: "\u5199 proposed Agent Note\uFF0C\u6216\u5728 planning \u539F\u5730\u66F4\u65B0\u5DF2\u5B58\u5728\u7684 implemented Note\u3002\u4EC5 planning worker\uFF1B\u901A\u7528 write/edit/shell \u88AB\u9650\u5236\u3002",
+    description: "\u5199 proposed Agent Note\uFF0C\u6216\u5728 planning \u539F\u5730\u66F4\u65B0\u5DF2\u5B58\u5728\u7684 implemented Note\u3002\u4EC5 planning worker\uFF1B\u901A\u7528 write/edit/apply_patch \u548C\u4ED3\u5E93\u5199\u88AB\u62D2\u7EDD\uFF0C\u53EA\u8BFB shell \u53EF\u7528\u3002",
     parameters: {
       type: "object",
       additionalProperties: false,
@@ -2114,7 +2206,7 @@ function registerNoteTools(ctx, deps) {
       const gate = resolveGate(ctx, exec.agent);
       const state = store.read(gate.root, exec.agent);
       if (state.node !== "note-lifecycle") return { ok: false, code: "not-note-lifecycle", reason: "\u53EA\u5728 note-lifecycle \u8282\u70B9\u53EF\u7528\u3002" };
-      if (state.noteDecision === "mechanical") {
+      if (isMechanicalDecision(state.noteDecision)) {
         state.noteVerified = true;
         state.noteFinalized = true;
         store.write(gate.root, exec.agent, state);