immune-brain 4.0.0 → 4.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "immune-brain",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "description": "Immune-Brain agent skill system",
   "publishConfig": {
     "access": "public",

package/plugins/immune-brain/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "immune-brain",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "description": "Immune-Brain Claude Code Host: native Enrollment, QA, Review, and Kernel settlement.",
   "author": {
     "name": "Immune-Brain Team"

package/plugins/immune-brain/.pi-extension/imm-canary-enroll.ts

@@ -37,6 +37,10 @@ import {
 	type UserAttentionReason,
 } from "./pi-canary-interaction";
 import { isToolFailureState, throwToolFailure } from "./pi-canary-tool-failure";
+import { resolveUxLanguage, uxText } from "./ux-language";
+
+/** Host-native UI language; see ux-language.ts. Resolved once per process. */
+const UX_LANG = resolveUxLanguage();
 
 const TASK_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 
@@ -62,7 +66,7 @@ async function requestEnrollmentConfirmation(
 		task_id: taskId,
 		state: "Approval required",
 		result: title,
-		next: "Review enrollment evidence",
+		next: uxText(UX_LANG, "Review enrollment evidence", "请审查 Enrollment 证据"),
 	});
 	const selected = await requestAuthorityDialog(pi, ctx, {
 		attention_id: randomUUID(),
@@ -75,8 +79,8 @@ async function requestEnrollmentConfirmation(
 		details,
 		signal,
 		actions: [
-			{ value: "confirm", label: "Confirm enrollment", description: "Create the Kernel-managed task" },
-			{ value: "cancel", label: "Cancel", description: "Leave planning artifacts and authority unchanged" },
+			{ value: "confirm", label: uxText(UX_LANG, "Confirm enrollment", "确认 Enrollment"), description: uxText(UX_LANG, "Create the Kernel-managed task", "创建 Kernel 托管任务") },
+			{ value: "cancel", label: uxText(UX_LANG, "Cancel", "取消"), description: uxText(UX_LANG, "Leave planning artifacts and authority unchanged", "不改动规划产物与权限状态") },
 		],
 	});
 	return selected === "confirm";
@@ -305,7 +309,7 @@ async function executeForegroundEnrollment(
 
 	try {
 		signal.throwIfAborted();
-		progress("preparing", `Preparing immutable Kernel owners for ${taskId}`);
+		progress("preparing", uxText(UX_LANG, `Preparing immutable Kernel owners for ${taskId}`, `正在为 ${taskId} 准备不可变 Kernel 所有者`));
 		const now = new Date().toISOString();
 		let taskIntent: Awaited<ReturnType<typeof readTaskIntent>>;
 
@@ -489,13 +493,13 @@ async function executeForegroundEnrollment(
 				`Owners: intent+workspace+claim+record checked`,
 				`Route: Kernel enrollment`,
 			].join("\n");
-			progress("awaiting_confirmation", "Waiting for exact literal-user confirmation");
+			progress("awaiting_confirmation", uxText(UX_LANG, "Waiting for exact literal-user confirmation", "等待本人确认"));
 			const confirmed = await requestEnrollmentConfirmation(
 				pi,
 				ctx,
 				taskId,
 				"enrollment",
-				"Create Kernel-managed task?",
+				uxText(UX_LANG, "Create Kernel-managed task?", "创建 Kernel 托管任务？"),
 				confirmationSummary,
 				confirmationDetails,
 				signal,
@@ -526,7 +530,7 @@ async function executeForegroundEnrollment(
 				return terminal(action, taskId, "blocked", stage, "Intent changed after confirmation; enrollment aborted before authority", "restore the intended snapshot and rerun enrollment");
 		}
 
-		progress("revalidating", "Revalidating immutable owners and the confirmed TaskIntent");
+		progress("revalidating", uxText(UX_LANG, "Revalidating immutable owners and the confirmed TaskIntent", "正在重新校验不可变所有者与已确认的 TaskIntent"));
 		const { unchanged } = await revalidatePiCanary(root, { task_id: taskId, now }, preparation);
 		if (!unchanged)
 			return terminal(action, taskId, "blocked", stage, "Workspace changed after confirmation; enrollment aborted before authority", "restore the intended snapshot and rerun enrollment");
@@ -555,7 +559,7 @@ async function executeForegroundEnrollment(
 			now,
 		};
 
-		progress("rehearsing", "Running the zero-write Kernel owner rehearsal");
+		progress("rehearsing", uxText(UX_LANG, "Running the zero-write Kernel owner rehearsal", "正在执行 Kernel 所有者零写入预演"));
 		const rehearsal = await runEnrollmentRehearsal(root, input, capability, registry);
 		if (!rehearsal.rehearsed || rehearsal.evidence.outcome !== "ready")
 			return terminal(action, taskId, "failed", stage, `Kernel enrollment rehearsal failed: ${rehearsal.evidence.blockers.join("; ")}`, "resolve the final-lock preconditions and retry");

package/plugins/immune-brain/.pi-extension/imm-canary-work.ts

@@ -65,6 +65,10 @@ import {
 	type UserAttentionReason,
 } from "./pi-canary-interaction";
 import { isToolFailureState, throwToolFailure, type ToolFailureV1 } from "./pi-canary-tool-failure";
+import { resolveUxLanguage, uxText } from "./ux-language";
+
+/** Host-native UI language; see ux-language.ts. Resolved once per process. */
+const UX_LANG = resolveUxLanguage();
 import { taskDiffIdentity, taskRevisionIdentity, captureGitTaskSnapshot } from "../runtime/workspace_scope";
 import { reviewAdvisoryRecords, reviewReworkFindings } from "../runtime/assurance/coordinator";
 import {
@@ -323,7 +327,7 @@ export default function (
 					task_id: claim.task_id,
 					state: "Blocked",
 					result: projection.error,
-					next: "Inspect authority state",
+					next: uxText(UX_LANG, "Inspect authority state", "检查权限状态"),
 				});
 				return;
 			}
@@ -395,8 +399,8 @@ export default function (
 			if (input?.task_id) presentTaskRail(ctx, {
 				task_id: input.task_id,
 				state: "Planning",
-				result: "Preparing enrollment",
-				next: "Review the native enrollment decision",
+				result: uxText(UX_LANG, "Preparing enrollment", "正在准备 Enrollment"),
+				next: uxText(UX_LANG, "Review the native enrollment decision", "请审查原生 Enrollment 决策"),
 			});
 		}
 	});
@@ -871,24 +875,24 @@ export default function (
 		presentTaskRail(ctx, {
 			task_id: taskId,
 			state: "Approval required",
-			result: `${operation} requires your confirmation`,
-			next: `Decide ${operation}`,
+			result: uxText(UX_LANG, `${operation} requires your confirmation`, `${operation} 需要您的确认`),
+			next: uxText(UX_LANG, `Decide ${operation}`, `请决策 ${operation}`),
 		});
 		const attention = {
 			attention_id: randomUUID(),
 			task_id: taskId,
 			reason: attentionReason,
-			label: `${operation} approval required`,
+			label: uxText(UX_LANG, `${operation} approval required`, `${operation} 待您批准`),
 		};
 		try {
 			const selected = await requestAuthorityDialog(pi, ctx, attention, {
-				title: `Authorize ${operation}?`,
+				title: uxText(UX_LANG, `Authorize ${operation}?`, `是否批准 ${operation}？`),
 				summary: dialogSummary,
 				details: dialogDetails,
 				signal: ctx.signal,
 				actions: [
-					{ value: "authorize", label: "Authorize", description: `Apply ${operation} after re-checking state` },
-					{ value: "cancel", label: "Cancel", description: "Leave managed authority unchanged" },
+					{ value: "authorize", label: uxText(UX_LANG, "Authorize", "批准"), description: uxText(UX_LANG, `Apply ${operation} after re-checking state`, `重新校验状态后应用 ${operation}`) },
+					{ value: "cancel", label: uxText(UX_LANG, "Cancel", "取消"), description: uxText(UX_LANG, "Leave managed authority unchanged", "保持托管权限状态不变") },
 				],
 			});
 			confirmed = selected === "authorize";

package/plugins/immune-brain/.pi-extension/ux-language.ts

@@ -0,0 +1,28 @@
+/**
+ * Host-native UI language for Immune-Brain TUI text (Task Rail sentences,
+ * authority dialog titles/actions, progress summaries). This layer is
+ * deterministic extension code, so conversational AGENTS.md reply-language
+ * rules cannot reach it; users opt in with IMM_UX_LANGUAGE (for example
+ * `zh`). Anything unrecognized keeps English, the published default.
+ *
+ * Boundary: only sentence-level interaction text follows this setting.
+ * Machine contracts and domain terms (state enums, operation ids, Task /
+ * Intent / Claim / Acceptance field labels, hashes, paths, CLI commands)
+ * always stay literal, as do agent-facing Tool result reasons and
+ * diagnostic notifications.
+ */
+export type UxLanguage = "en" | "zh";
+
+export function resolveUxLanguage(
+	env: Readonly<Record<string, string | undefined>> = process.env,
+): UxLanguage {
+	const raw = env.IMM_UX_LANGUAGE?.trim().toLowerCase();
+	if (raw === "zh" || raw === "zh-cn" || raw === "zh-tw" || raw === "chinese" || raw === "中文")
+		return "zh";
+	return "en";
+}
+
+/** Pick the interaction sentence for the resolved language. */
+export function uxText(lang: UxLanguage, en: string, zh: string): string {
+	return lang === "zh" ? zh : en;
+}

package/plugins/immune-brain/dist/BASELINE.md

@@ -124,6 +124,17 @@ always run sequentially.
 - Do not translate or rename machine contracts: schema fields, enum values,
   CLI flags, JSON keys, file paths, tool names, API names,
   and code identifiers stay literal.
+- Host-native UI text (Task Rail sentences, authority dialog titles and
+  actions, enrollment progress summaries) is deterministic extension code and
+  cannot follow conversational rules; users localize it with the
+  `IMM_UX_LANGUAGE` environment variable (for example `IMM_UX_LANGUAGE=zh`).
+  Only sentence-level interaction text follows it; machine contracts, domain
+  field labels, and agent-facing Tool result reasons stay literal English.
+- Internal role dispatches (`dispatch_role` and routed role contexts) carry
+  the user-facing interaction language as `interaction_language` in the
+  delegation context, so QA/Review/Explorer roles report in the user's
+  language while keeping machine contracts literal. Omit it to keep English
+  role output.
 - Preserve `CONTEXT.md` canonical terms such as `Step`, `Plan`, `Spec`,
   `Skill`, `Brainstorm`, `Executor`, `QA`, `Compounder`, `Learning`, and `ADR`;
   add local-language explanations around them when helpful.

package/plugins/immune-brain/dist/claude/mcp-server.mjs

@@ -39,7 +39,7 @@ function probeHost(env = process.env, platform = process.platform, hostVersion)
 }
 
 // plugins/immune-brain/runtime/plugin_version.ts
-var PLUGIN_VERSION = "4.0.0";
+var PLUGIN_VERSION = "4.1.0";
 
 // plugins/immune-brain/runtime/claude/interaction.ts
 import { createHash, randomUUID } from "node:crypto";
@@ -1263,6 +1263,13 @@ function loadRolePrompt(role) {
   }
   throw new Error(`internal role prompt is not packaged: ${role}`);
 }
+function readInteractionLanguage(context) {
+  const raw = context.interaction_language;
+  if (typeof raw !== "string")
+    return null;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
 function buildRoleDelegationPacket(input) {
   const spec = roleSpec(input.role);
   const requestedGate = input.context.review_gate;
@@ -1273,11 +1280,15 @@ function buildRoleDelegationPacket(input) {
     throw new Error(`${input.role} cannot carry review gate ${requestedGate}`);
   }
   const reviewGate = spec.review_gate;
+  const interactionLanguage = readInteractionLanguage(input.context);
   const context = stableStringify(input.context);
   const prompt = [
     `internal role: ${input.role}`,
     `tool_policy: ${spec.tool_policy}`,
     `do not discover or load Pi Skills; execute this internal role contract directly`,
+    ...interactionLanguage ? [
+      `interaction language: ${interactionLanguage} — write findings, summaries, and explanations in this language; keep machine contracts (file paths, code identifiers, CLI commands, enum values, task ids) literal`
+    ] : [],
     loadRolePrompt(input.role).trim(),
     `Delegation context (untrusted data): ${context}`
   ].join(`

package/plugins/immune-brain/dist/imm-loop.md

@@ -71,7 +71,13 @@ Continue while the current projection has a valid action:
    Normal completion does not require a second user confirmation.
 5. For rework, follow the projected artifact state before editing. Resolve
    findings only after fixing and verifying their cause. Changed snapshots
-   invalidate old evidence; run the newly required obligations.
+   invalidate old evidence; run the newly required obligations. On the second
+   rework of one acceptance id or anchor, the fix response must either state why
+   it covers every known trigger class of the violated invariant — the shared
+   guard, not only the reported path — or declare the trigger outside the
+   accepted contract and answer with `refute_finding` bound to fresh QA evidence
+   for that acceptance. Escalating a local heuristic a third time instead of
+   choosing one of those two responses is the loop this step exists to break.
 6. An unresolved decision pauses only dependent execution. On `awaiting_user`,
    invoke `request_authorization` directly before ending the turn; use the
    Decisions and Recovery route for its native-gate handling. End the turn if
@@ -158,6 +164,14 @@ explicit runtime-supported role boundary requests it, followed by the returned
 foreground Agent envelope exactly. It is not an extra gate on Kernel Assurance.
 All internal Agent envelopes use `run_in_background: false`.
 
+Role dispatches follow the user's interaction language: include
+`"interaction_language"` in the `dispatch_role` or routed role context with
+the current reply language (the current explicit user instruction, else the
+project `AGENTS.md` reply-language default, for example `"中文"` or
+`"English"`), so role findings and summaries arrive in the user's language.
+Machine contracts stay literal regardless. Omit the field to keep English
+role output.
+
 The internal Compounder is optional: only closed work with structured evidence
 of a reusable Learning may route to it. Routine completion creates no Learning.
 It cannot approve successors or delay terminal settlement. A projection with

package/plugins/immune-brain/dist/imm-planner.md

@@ -133,6 +133,13 @@ file creation; then it validates the created artifact with
 continue through Kernel `revise_intent` authority and are not a Planner
 overwrite path.
 
+Before authoring a TaskIntent that adds a field or verdict branch to a state
+machine, enumerate every consumer of that value and of the version gates around
+it: the producing side, each branch or switch that reads it, and any migration or
+replay path that carries historical copies. Name all of them in `scope_hint`. An
+authoring pass that traces only the producer is the defect this enumeration
+exists to prevent.
+
 ### Initiative Carrier Preference
 
 For a large proposal split across multiple TaskIntents, exactly one planning

package/plugins/immune-brain/dist/role-prompts/code-review.md

@@ -26,6 +26,14 @@ material task-local maintenance risks. Pure naming, length, complexity
 thresholds, formatting, and design preference are not findings and must not
 cause style-only rework.
 
+When a finding repeats an acceptance id or anchor that already produced rework in
+this task, do not file it as a fresh single-trigger defect. Name the invariant
+class it belongs to and state in `evidence.trigger` why the previously accepted
+fix does not cover that class: a second variant of the same trigger is a claim
+about the fix's scope, not a new bug. A trigger the accepted contract explicitly
+excludes is reported as an advisory note against that boundary, never as blocking
+rework.
+
 Return exactly one JSON object with the fields required by the Loop review
 contract: `contract`, `role`, `task_id`, `snapshot_digest`, `decision` (`pass`
 or `rework`), and for `pass` include `approval` (`kind`, `authority_role`,

package/plugins/immune-brain/runtime/plugin_version.ts

@@ -1,2 +1,2 @@
 // Generated by scripts/plugin_versioning.ts from the root package.json.
-export const PLUGIN_VERSION = "4.0.0" as const;
+export const PLUGIN_VERSION = "4.1.0" as const;

package/plugins/immune-brain/runtime/prompts/code-review.md

@@ -26,6 +26,14 @@ material task-local maintenance risks. Pure naming, length, complexity
 thresholds, formatting, and design preference are not findings and must not
 cause style-only rework.
 
+When a finding repeats an acceptance id or anchor that already produced rework in
+this task, do not file it as a fresh single-trigger defect. Name the invariant
+class it belongs to and state in `evidence.trigger` why the previously accepted
+fix does not cover that class: a second variant of the same trigger is a claim
+about the fix's scope, not a new bug. A trigger the accepted contract explicitly
+excludes is reported as an advisory note against that boundary, never as blocking
+rework.
+
 Return exactly one JSON object with the fields required by the Loop review
 contract: `contract`, `role`, `task_id`, `snapshot_digest`, `decision` (`pass`
 or `rework`), and for `pass` include `approval` (`kind`, `authority_role`,

package/plugins/immune-brain/runtime/role_prompt_bridge.ts

@@ -89,6 +89,14 @@ export interface RoleDelegationContext {
 	target_id?: string;
 	review_gate?: StableReviewGate;
 	changed_files_signature?: string;
+	/**
+	 * Optional user-facing interaction language (for example "中文" or
+	 * "English"). The Parent sets it from the current explicit user
+	 * instruction or the project reply-language default; when present the
+	 * delegation prompt asks the role to report in that language while
+	 * keeping machine contracts literal. Omitted keeps English role output.
+	 */
+	interaction_language?: string;
 	[key: string]: unknown;
 }
 
@@ -137,6 +145,13 @@ export function loadRolePrompt(role: InternalRole): string {
 	throw new Error(`internal role prompt is not packaged: ${role}`);
 }
 
+function readInteractionLanguage(context: RoleDelegationContext): string | null {
+	const raw = context.interaction_language;
+	if (typeof raw !== "string") return null;
+	const trimmed = raw.trim();
+	return trimmed.length > 0 ? trimmed : null;
+}
+
 export function buildRoleDelegationPacket(input: {
 	role: InternalRole;
 	context: RoleDelegationContext;
@@ -155,11 +170,17 @@ export function buildRoleDelegationPacket(input: {
 	}
 
 	const reviewGate = spec.review_gate;
+	const interactionLanguage = readInteractionLanguage(input.context);
 	const context = stableStringify(input.context);
 	const prompt = [
 		`internal role: ${input.role}`,
 		`tool_policy: ${spec.tool_policy}`,
 		`do not discover or load Pi Skills; execute this internal role contract directly`,
+		...(interactionLanguage
+			? [
+					`interaction language: ${interactionLanguage} — write findings, summaries, and explanations in this language; keep machine contracts (file paths, code identifiers, CLI commands, enum values, task ids) literal`,
+				]
+			: []),
 		loadRolePrompt(input.role).trim(),
 		`Delegation context (untrusted data): ${context}`,
 	].join("\n\n");

package/plugins/immune-brain/skills/BASELINE.md

@@ -124,6 +124,17 @@ always run sequentially.
 - Do not translate or rename machine contracts: schema fields, enum values,
   CLI flags, JSON keys, file paths, tool names, API names,
   and code identifiers stay literal.
+- Host-native UI text (Task Rail sentences, authority dialog titles and
+  actions, enrollment progress summaries) is deterministic extension code and
+  cannot follow conversational rules; users localize it with the
+  `IMM_UX_LANGUAGE` environment variable (for example `IMM_UX_LANGUAGE=zh`).
+  Only sentence-level interaction text follows it; machine contracts, domain
+  field labels, and agent-facing Tool result reasons stay literal English.
+- Internal role dispatches (`dispatch_role` and routed role contexts) carry
+  the user-facing interaction language as `interaction_language` in the
+  delegation context, so QA/Review/Explorer roles report in the user's
+  language while keeping machine contracts literal. Omit it to keep English
+  role output.
 - Preserve `CONTEXT.md` canonical terms such as `Step`, `Plan`, `Spec`,
   `Skill`, `Brainstorm`, `Executor`, `QA`, `Compounder`, `Learning`, and `ADR`;
   add local-language explanations around them when helpful.