easy-coding-harness 0.10.0-beta.8 → 0.10.0-beta.9

package/CHANGELOG.md

@@ -6,6 +6,22 @@
 - `y`：常规功能升级
 - `z`：日常 bug 修复
 
+## 0.10.0-beta.9
+
+- 工作流 owner 改为规范平台身份边界：每份安装后的状态脚本固化宿主身份，新写入只接受
+  `claude-code` / `codex` / `qoder`，脚本身份、`--agent` 与已注入 session 命名空间三方
+  不一致时在落盘前拒绝；`Codex with Easy Coding` 等作者/Canonical 展示归属不再允许进入
+  `last_agent`。
+- Codex 与 Qoder 共用的 `AGENTS.md` 生成区改为安装顺序无关的双平台路径合同，
+  明确当前宿主只能调用自己的状态脚本，防止 Qoder 最后写入后误导 Codex 执行
+  `.qoder/hooks/easy_coding_state.py`。
+- handoff 提示改为显式协调事件驱动：只有未消费的 `handoff` 记录才显示交接，
+  `claim-task` 新增 immutable `claim` 审计记录并关闭交接；单纯 owner 差异不再被伪造成
+  handoff。
+- upgrade 与首次 SessionStart 幂等迁移旧任务/session 中的 `root` 系列和误写展示名，
+  即使版本号已经更新也能继续检测并自愈，但保留 `execution.jsonl` 及 Canonical Spec 的
+  历史审计展示；新增生产形态、跨平台路径冲突、安装顺序和真实 handoff/claim 回归测试。
+
 ## 0.10.0-beta.8
 
 - VERIFICATION 绿色后新增可审计验收检查点。无漂移时 `confirm` / `auto` 继续按原审批模式

package/dist/cli.js

@@ -311,6 +311,7 @@ var PLATFORM_META = {
     stateInjectEvent: ["SessionStart", "UserPromptSubmit"],
     hasSubagentContext: true,
     templateContext: {
+      workflow_agent_id: "claude-code",
       sub_agent_dispatch: "Agent tool",
       platform_spawn_instruction: 'Use the Agent tool with run_in_background when useful; use isolation: "worktree" for parallel file edits.',
       skill_trigger: "/",
@@ -334,6 +335,7 @@ var PLATFORM_META = {
     stateInjectEvent: ["SessionStart", "UserPromptSubmit"],
     hasSubagentContext: false,
     templateContext: {
+      workflow_agent_id: "codex",
       sub_agent_dispatch: "Codex sub-agent dispatch",
       platform_spawn_instruction: "Use Codex sub-agent delegation where available; pass the full task card in the prompt.",
       skill_trigger: "$",
@@ -358,6 +360,7 @@ var PLATFORM_META = {
     hasSubagentContext: true,
     cnVariant: ".qodercn",
     templateContext: {
+      workflow_agent_id: "qoder",
       sub_agent_dispatch: "Agent tool",
       platform_spawn_instruction: "Use the Agent tool with worktree isolation for parallel file edits.",
       skill_trigger: "/",
@@ -776,6 +779,87 @@ function isLegacyStage(value) {
 function migrateStage(value) {
   return isLegacyStage(value) ? LEGACY_STAGE_MAP[value] : value;
 }
+var LEGACY_DISPLAY_AGENT_IDENTITIES = {
+  "claude with easy coding": "claude-code",
+  "claude-code with easy coding": "claude-code",
+  "claude code with easy coding": "claude-code",
+  "codex with easy coding": "codex",
+  "qoder with easy coding": "qoder"
+};
+function migratedAgentIdentity(value) {
+  if (typeof value !== "string") return void 0;
+  const normalized = value.trim().toLowerCase();
+  if (normalized === "claude-code" || normalized === "codex" || normalized === "qoder") {
+    return normalized;
+  }
+  if (/^\/?root(?:\/[a-z0-9._-]+)*$/.test(normalized)) return "codex";
+  return LEGACY_DISPLAY_AGENT_IDENTITIES[normalized];
+}
+function migrateAgentFields(record, fields) {
+  let changed = false;
+  for (const field of fields) {
+    const migrated = migratedAgentIdentity(record[field]);
+    if (migrated && migrated !== record[field]) {
+      record[field] = migrated;
+      changed = true;
+    }
+  }
+  return changed;
+}
+function taskAgentFieldGroups(task) {
+  const groups = [
+    {
+      record: task,
+      fields: ["created_by", "last_agent", "workflow_mode_confirmed_by", "tdd_confirmed_by"]
+    }
+  ];
+  for (const field of ["pending_transition", "workflow_mode_proposal", "verification_checkpoint"]) {
+    const value = task[field];
+    if (!value || typeof value !== "object" || Array.isArray(value)) continue;
+    const identityField = field === "pending_transition" ? "requested_by" : field === "workflow_mode_proposal" ? "proposed_by" : "recorded_by";
+    groups.push({ record: value, fields: [identityField] });
+  }
+  if (Array.isArray(task.workflow_mode_escalations)) {
+    for (const escalation of task.workflow_mode_escalations) {
+      if (!escalation || typeof escalation !== "object" || Array.isArray(escalation)) continue;
+      groups.push({ record: escalation, fields: ["raised_by"] });
+    }
+  }
+  const memoryProgress = task.memory_progress;
+  if (memoryProgress && typeof memoryProgress === "object" && !Array.isArray(memoryProgress)) {
+    const assessment = memoryProgress.architecture_assessment;
+    if (assessment && typeof assessment === "object" && !Array.isArray(assessment)) {
+      groups.push({ record: assessment, fields: ["recorded_by"] });
+    }
+  }
+  if (Array.isArray(task.spec_dependency_evidence)) {
+    for (const evidence of task.spec_dependency_evidence) {
+      if (!evidence || typeof evidence !== "object" || Array.isArray(evidence)) continue;
+      groups.push({ record: evidence, fields: ["satisfied_by"] });
+    }
+  }
+  if (Array.isArray(task.stage_history)) {
+    for (const entry of task.stage_history) {
+      if (!entry || typeof entry !== "object" || Array.isArray(entry)) continue;
+      groups.push({ record: entry, fields: ["agent"] });
+    }
+  }
+  return groups;
+}
+function migrateTaskAgentIdentities(task) {
+  return taskAgentFieldGroups(task).reduce(
+    (changed, group) => migrateAgentFields(group.record, group.fields) || changed,
+    false
+  );
+}
+function hasLegacyTaskAgentIdentities(task) {
+  return taskAgentFieldGroups(task).some(
+    ({ record, fields }) => fields.some((field) => {
+      const migrated = migratedAgentIdentity(record[field]);
+      return migrated !== void 0 && migrated !== record[field];
+    })
+  );
+}
 function migrateStageHistory(task) {
   if (!Array.isArray(task.stage_history)) return false;
   let changed = false;
@@ -806,7 +890,8 @@ function migrateTaskWorkflowState(task) {
   const legacyRequestedAt = Array.isArray(task.stage_history) ? [...task.stage_history].reverse().find(
     (entry) => entry && typeof entry === "object" && !Array.isArray(entry) && entry.stage === "WAITING_CONFIRM"
   ) : null;
-  let changed = migrateStageHistory(task);
+  let changed = migrateTaskAgentIdentities(task);
+  changed = migrateStageHistory(task) || changed;
   if (legacyStatus) {
     task.status = LEGACY_STAGE_MAP[legacyStatus];
     changed = true;
@@ -858,7 +943,7 @@ function migrateTaskWorkflowState(task) {
   return changed;
 }
 function migrateSessionBehavior(session) {
-  let changed = false;
+  let changed = migrateAgentFields(session, ["agent", "last_agent"]);
   const legacyMode = session.confirm_mode;
   const legacyLite = legacyMode === "lite";
   if (!["approve", "guard", "confirm", "auto"].includes(String(session.approval_mode ?? ""))) {
@@ -969,7 +1054,7 @@ async function hasLegacyWorkflowState(cwd) {
     if (!await pathExists(filePath)) continue;
     const task = await readJsonRecord(filePath);
     if (!task) continue;
-    if (isLegacyStage(task.status) || !["PENDING", "COMPLETE", "CLOSED"].includes(String(task.status ?? "")) && String(task.type ?? "") !== "project-init" && !["fast", "standard", "strict"].includes(String(task.workflow_mode ?? "")) || Array.isArray(task.stage_history) && task.stage_history.some(
+    if (hasLegacyTaskAgentIdentities(task) || isLegacyStage(task.status) || !["PENDING", "COMPLETE", "CLOSED"].includes(String(task.status ?? "")) && String(task.type ?? "") !== "project-init" && !["fast", "standard", "strict"].includes(String(task.workflow_mode ?? "")) || Array.isArray(task.stage_history) && task.stage_history.some(
       (entry) => entry && typeof entry === "object" && !Array.isArray(entry) && isLegacyStage(entry.stage)
     )) {
       return true;
@@ -978,7 +1063,12 @@ async function hasLegacyWorkflowState(cwd) {
   for (const filePath of await sessionFiles(cwd)) {
     const session = await readJsonRecord(filePath);
     if (!session) continue;
-    if (isLegacyStage(session.last_seen_stage) || "confirm_mode" in session) return true;
+    if (["agent", "last_agent"].some((field) => {
+      const migrated = migratedAgentIdentity(session[field]);
+      return migrated !== void 0 && migrated !== session[field];
+    }) || isLegacyStage(session.last_seen_stage) || "confirm_mode" in session) {
+      return true;
+    }
   }
   return false;
 }