immune-brain 3.5.0 → 3.6.0

package/plugins/immune-brain/runtime/assurance/coordinator.ts

@@ -456,7 +456,6 @@ export class AssuranceCoordinator {
 			this.rejectedReviewOperations.delete(taskId);
 		}
 		const refreshed = this.active(taskId);
-		if (refreshed?.state === "settlement_unknown") return refreshed;
 		if (refreshed?.state === "running") return { state: "blocked", reason: `assurance operation ${refreshed.operation_id} is already running` };
 		const operationId = randomUUID();
 		const operationGeneration = this.sessionGeneration;
@@ -490,13 +489,28 @@ export class AssuranceCoordinator {
 			progress(phase, `Preparing deterministic QA for ${taskId}`);
 			await this.ports.advanceBeforeProjection?.();
 			ensureOperationLive();
-			let projection = await this.ports.projectTask(ctx.cwd, taskId);
+			let projection: AssuranceProjectionResult;
+			try {
+				projection = await this.ports.projectTask(ctx.cwd, taskId);
+			} catch (error) {
+				// Retry only an explicit transient read failure, before any write.
+				if (!(error instanceof Error) || !("code" in error) || !["EINTR", "EAGAIN"].includes(String(error.code))) throw error;
+				ensureOperationLive();
+				progress("retrying_projection", "Retrying the initial authority read once; no writes replayed", { retry_attempt: 1 });
+				ensureOperationLive();
+				projection = await this.ports.projectTask(ctx.cwd, taskId);
+			}
 			ensureOperationLive();
 			if (projection.error) return { state: "blocked", reason: projection.error };
-			if (projection.projection.lifecycle === "done") return { state: "completed" };
-			if (projection.projection.lifecycle === "stopped") return { state: "stopped" };
+			if (projection.projection.lifecycle === "done" || projection.projection.lifecycle === "stopped") {
+				this.unknownOperations.delete(taskId);
+				return { state: projection.projection.lifecycle === "done" ? "completed" : "stopped" };
+			}
 			if (!projection.claim) return { state: "blocked", reason: "no active backend claim" };
 			if (projection.claim.task_id !== taskId) return { state: "blocked", reason: `backend claim belongs to ${projection.claim.task_id}, not ${taskId}` };
+			// A closed Kernel projection, not the lost host reply, decides what
+			// remains. Committed QA/Review is never replayed from local memory.
+			if (projection.projection.lifecycle === "active") this.unknownOperations.delete(taskId);
 			const parked = await this.ports.readTaskRecord(ctx.cwd, taskId);
 			ensureOperationLive();
 			if (parked.record?.findings.some((finding) => finding.kind === "replan_required" && finding.status === "open")) return { state: "blocked", reason: "review rework limit reached; a durable replan is required" };
@@ -700,7 +714,7 @@ export class AssuranceCoordinator {
 
 	async submitReview(taskId: string, ctx: HostContext, verdictInput: unknown): Promise<AssuranceSubmitReviewResult> {
 		const unknown = this.unknownOperations.get(taskId);
-		if (unknown) { this.unknownOperations.delete(taskId); return { state: "settlement_unknown", operation: unknown.operation, operation_id: unknown.operationId, reason: unknown.reason }; }
+		if (unknown) return { state: "settlement_unknown", operation: unknown.operation, operation_id: unknown.operationId, reason: unknown.reason };
 		const rejected = this.rejectedReviewOperations.get(taskId);
 		if (rejected) return { state: "blocked", reason: rejected.reason };
 		const reservation = this.reviewReservations.get(taskId);

package/plugins/immune-brain/runtime/assurance/qa.ts

@@ -0,0 +1,85 @@
+import { snapshotDigest, type SnapshotDescriptor, type AssuranceVerdict } from "./coordinator";
+import { runFixedVerification, VerificationAbortedError, type FrozenRunner, type VerificationDescriptor } from "./verification";
+import { qaFindingId } from "./qa_findings";
+
+export interface QaVerificationProgressInput {
+	index: number;
+	total: number;
+	acceptance_id: string;
+	phase: "running" | "passed" | "failed";
+	elapsed_ms: number;
+}
+
+export async function runDeterministicQa(
+	snapshot: SnapshotDescriptor,
+	descriptors: Map<string, VerificationDescriptor>,
+	runner: FrozenRunner,
+	options: {
+		signal?: AbortSignal;
+		onProgress?: (progress: QaVerificationProgressInput) => void;
+		runVerification?: typeof runFixedVerification;
+	} = {},
+): Promise<AssuranceVerdict> {
+	if (snapshot.role !== "qa") throw new Error("deterministic QA requires qa role");
+	if (options.signal?.aborted) throw new VerificationAbortedError();
+	const findings: NonNullable<AssuranceVerdict["findings"]> = [];
+	const runVerification = options.runVerification ?? runFixedVerification;
+	for (const [offset, item] of snapshot.acceptance.entries()) {
+		if (options.signal?.aborted) throw new VerificationAbortedError();
+		const descriptor = descriptors.get(item.id);
+		if (!descriptor) throw new Error(`verification descriptor missing for ${item.id}`);
+		const startedAt = Date.now();
+		options.onProgress?.({
+			index: offset + 1,
+			total: snapshot.acceptance.length,
+			acceptance_id: item.id,
+			phase: "running",
+			elapsed_ms: 0,
+		});
+		const result = await runVerification(snapshot.root, descriptor, runner, {
+			signal: options.signal,
+		});
+		if (options.signal?.aborted) throw new VerificationAbortedError();
+		const failed = result.exit_code !== 0 || result.timed_out;
+		options.onProgress?.({
+			index: offset + 1,
+			total: snapshot.acceptance.length,
+			acceptance_id: item.id,
+			phase: failed ? "failed" : "passed",
+			elapsed_ms: Date.now() - startedAt,
+		});
+		if (failed) {
+			// Findings become durable authority records; never include verifier output.
+			findings.push({
+				id: qaFindingId(item.id, snapshotDigest(snapshot)),
+				kind: "blocking",
+				acceptance_id: item.id,
+				summary: `verification failed (exit ${result.exit_code}${result.timed_out ? ", timed out" : ""}) stdout=${Buffer.byteLength(result.stdout)}B stderr=${Buffer.byteLength(result.stderr)}B`,
+				findings_digest: "",
+			});
+		}
+	}
+	if (findings.length > 0) {
+		return {
+			contract: "assurance_kernel/assurance_verdict/v2",
+			role: "qa",
+			task_id: snapshot.task_id,
+			snapshot_digest: snapshotDigest(snapshot),
+			decision: "rework",
+			findings,
+		};
+	}
+	return {
+		contract: "assurance_kernel/assurance_verdict/v2",
+		role: "qa",
+		task_id: snapshot.task_id,
+		snapshot_digest: snapshotDigest(snapshot),
+		decision: "pass",
+		approval: {
+			kind: "qa",
+			authority_role: "qa",
+			summary: `all ${snapshot.acceptance.length} fixed verification descriptor(s) passed`,
+		},
+	};
+}
+

package/plugins/immune-brain/runtime/claude/kernel_ports.ts

@@ -4,7 +4,6 @@ import { execFileSync } from "node:child_process";
 import { join } from "node:path";
 import {
 	AssuranceCoordinator,
-	snapshotDigest,
 	type AssuranceCoordinatorPorts,
 	type AssuranceSubmitReviewResult,
 	type AssuranceVerdict,
@@ -15,8 +14,6 @@ import {
 	assertRunnerCompatible,
 	findingsDigest,
 	resolveBunRunner,
-	runFixedVerification,
-	VerificationAbortedError,
 	type FrozenRunner,
 	type VerificationDescriptor,
 } from "../assurance/verification";
@@ -45,7 +42,7 @@ import {
 import { enrollCanaryTask, runEnrollmentRehearsal } from "../kernel/enrollment";
 import { reconcileKernelAuthority, repairKernelAuthority } from "../kernel/storage";
 import { preparePiCanary, revalidatePiCanary } from "../kernel/pi_canary_prepare";
-import { qaFindingId } from "../assurance/qa_findings";
+import { runDeterministicQa } from "../assurance/qa";
 import { taskDiffIdentity, taskRevisionIdentity } from "../workspace_scope";
 import {
 	confirmationRef,
@@ -129,47 +126,6 @@ function assertProjectionBinding(before: AssuranceProjectionResult, after: Assur
 	}
 }
 
-export async function runDeterministicQa(
-	snapshot: SnapshotDescriptor,
-	descriptors: Map<string, VerificationDescriptor>,
-	runner: FrozenRunner,
-	options: { signal?: AbortSignal; onProgress?: (progress: { index: number; total: number; acceptance_id: string; phase: "running" | "passed" | "failed"; elapsed_ms: number }) => void } = {},
-): Promise<AssuranceVerdict> {
-	if (snapshot.role !== "qa") throw new Error("deterministic QA requires qa role");
-	if (options.signal?.aborted) throw new VerificationAbortedError();
-	const findings: NonNullable<AssuranceVerdict["findings"]> = [];
-	for (const [offset, item] of snapshot.acceptance.entries()) {
-		if (options.signal?.aborted) throw new VerificationAbortedError();
-		const descriptor = descriptors.get(item.id);
-		if (!descriptor) throw new Error(`verification descriptor missing for ${item.id}`);
-		const startedAt = Date.now();
-		options.onProgress?.({ index: offset + 1, total: snapshot.acceptance.length, acceptance_id: item.id, phase: "running", elapsed_ms: 0 });
-		const result = await runFixedVerification(snapshot.root, descriptor, runner, { signal: options.signal });
-		const failed = result.exit_code !== 0 || result.timed_out;
-		options.onProgress?.({ index: offset + 1, total: snapshot.acceptance.length, acceptance_id: item.id, phase: failed ? "failed" : "passed", elapsed_ms: Date.now() - startedAt });
-		if (failed) {
-			findings.push({
-				id: qaFindingId(item.id, snapshotDigest(snapshot)),
-				kind: "blocking",
-				acceptance_id: item.id,
-				summary: `verification failed (exit ${result.exit_code}${result.timed_out ? ", timed out" : ""})`,
-				findings_digest: "",
-			});
-		}
-	}
-	if (findings.length > 0) {
-		return { contract: "assurance_kernel/assurance_verdict/v2", role: "qa", task_id: snapshot.task_id, snapshot_digest: snapshotDigest(snapshot), decision: "rework", findings };
-	}
-	return {
-		contract: "assurance_kernel/assurance_verdict/v2",
-		role: "qa",
-		task_id: snapshot.task_id,
-		snapshot_digest: snapshotDigest(snapshot),
-		decision: "pass",
-		approval: { kind: "qa", authority_role: "qa", summary: `all ${snapshot.acceptance.length} fixed verification descriptor(s) passed` },
-	};
-}
-
 function qaOutcomes(record: { attestations: Array<{ kind: string; acceptance_results: Array<{ acceptance_id: string; status: "passed" | "failed" | "blocked"; summary: string }> }> }) {
 	return Object.fromEntries(
 		record.attestations.filter((item) => item.kind === "qa").flatMap((item) => item.acceptance_results)

package/plugins/immune-brain/runtime/kernel/intent.ts

@@ -43,6 +43,12 @@ export const INTENT_SIDECAR_RELATIVE_PREFIX = "docs/plans/";
 export const RISK_FLOOR_SCOPE_PREFIXES = [
 	"plugins/immune-brain/runtime/kernel",
 	"plugins/immune-brain/runtime/authority_commit_receipts.ts",
+	"plugins/immune-brain/runtime/assurance",
+	"plugins/immune-brain/runtime/claude/interaction.ts",
+	"plugins/immune-brain/runtime/claude/capability.ts",
+	"plugins/immune-brain/runtime/claude/review_host.ts",
+	"plugins/immune-brain/runtime/claude/kernel_ports.ts",
+	"plugins/immune-brain/runtime/claude/mcp_server.ts",
 	"plugins/immune-brain/.pi-extension",
 ] as const;
 
@@ -50,8 +56,7 @@ export const RISK_FLOOR_SCOPE_PREFIXES = [
 // separate from the glob-aware scope_hint policy above: the two inputs have
 // different contracts and docs-only scope remains routine today.
 export const CHANGED_PATH_RISK_FLOOR_PREFIXES = [
-	"plugins/immune-brain/runtime/kernel",
-	"plugins/immune-brain/.pi-extension",
+	...RISK_FLOOR_SCOPE_PREFIXES,
 	"docs/specs",
 	"docs/plans",
 ] as const;

package/plugins/immune-brain/runtime/plugin_version.ts

@@ -1,2 +1,2 @@
 // Generated by scripts/plugin_versioning.ts from the root package.json.
-export const PLUGIN_VERSION = "3.5.0" as const;
+export const PLUGIN_VERSION = "3.6.0" as const;