immune-brain 4.6.0 → 5.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "immune-brain",
-  "version": "4.6.0",
+  "version": "5.1.0",
   "description": "Immune-Brain agent skill system",
   "publishConfig": {
     "access": "public",
@@ -78,6 +78,7 @@
     "plugins/immune-brain/runtime/workspace_scope.ts",
     "plugins/immune-brain/runtime/managed_task_routing_policy.ts",
     "plugins/immune-brain/runtime/github_issue_tracker.ts",
+    "plugins/immune-brain/runtime/local_initiative.ts",
     "plugins/immune-brain/runtime/verification_descriptor.ts",
     "plugins/immune-brain/runtime/role_prompt_bridge.ts",
     "plugins/immune-brain/runtime/loop_contract.ts",

package/plugins/immune-brain/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "immune-brain",
-  "version": "4.6.0",
+  "version": "5.1.0",
   "description": "Immune-Brain Claude Code Host: native Enrollment, QA, Review, and Kernel settlement.",
   "author": {
     "name": "Immune-Brain Team"

package/plugins/immune-brain/.pi-extension/imm-canary-enroll.ts

@@ -9,27 +9,24 @@ import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-a
 import { Type } from "typebox";
 import { createHash, randomUUID } from "node:crypto";
 import { resolve } from "node:path";
-// The Kernel runtime graph is never type-checked from this extension: static
-// imports resolve to ./runtime-stub.ts (relative so the Pi extension loader
-// can resolve them at runtime), and the stub forwards to the real Kernel
-// modules via dynamic import.
+// The Pi adapter imports the host-neutral runtime modules statically, exactly
+// as the Claude adapter does. Kernel prepare is reached only through the
+// shared Enrollment boundary (runtime/assurance/enrollment), never directly
+// from the Kernel's own prepare module.
+import { LITERAL_USER_ACTOR_ID } from "../runtime/kernel/actor_identity";
+import { createEnrollmentAuthorityRegistry } from "../runtime/kernel/enrollment_authority";
+import { preparePiCanary, revalidatePiCanary } from "../runtime/assurance/enrollment";
+import { evaluateCanaryEligibility } from "../runtime/kernel/canary_eligibility";
+import { enrollTask, EnrollmentRehearsalError } from "../runtime/kernel/enrollment";
+import { reconcileKernelAuthority, withKernelStoreLock } from "../runtime/kernel/storage";
+import { inspectStorageLayout } from "../runtime/kernel/storage_paths";
+import { migrateLegacyLayout } from "../runtime/kernel/storage_layout_migration";
 import {
-	LITERAL_USER_ACTOR_ID,
-	createEnrollmentAuthorityRegistry,
-	preparePiCanary,
-	revalidatePiCanary,
-	evaluateCanaryEligibility,
-	reconcileKernelAuthority,
-	readTaskIntent,
-	runEnrollmentRehearsal,
-	enrollCanaryTask,
-	withKernelStoreLock,
-	inspectStorageLayout,
-	migrateLegacyLayout,
 	inspectEnrollmentGitBase,
 	enrollmentGitBaseNotice,
 	initializeEnrollmentGitBase,
-} from "./runtime-stub";
+} from "../runtime/assurance/enrollment_git_base";
+import { readTaskIntentForRecord } from "./imm-canary-work";
 import {
 	presentTaskRail,
 	presentTaskRailResult,
@@ -253,7 +250,7 @@ async function classifyCommitFailure(
 				"completed",
 				"committing",
 				`Kernel enrollment committed for ${taskId}; terminal receipt was recovered from authoritative owners`,
-				"continue with imm-loop",
+				"continue with imm-run",
 			);
 		}
 		if (
@@ -315,7 +312,7 @@ async function executeForegroundEnrollment(
 		signal.throwIfAborted();
 		progress("preparing", uxText(UX_LANG, `Preparing immutable Kernel owners for ${taskId}`, `正在为 ${taskId} 准备不可变 Kernel 所有者`));
 		const now = new Date().toISOString();
-		let taskIntent: Awaited<ReturnType<typeof readTaskIntent>>;
+		let taskIntent: Awaited<ReturnType<typeof readTaskIntentForRecord>>;
 
 		// Storage-layout gate (BR-REQ-005/006): enrollment is the stateful
 		// mutation boundary. Kernel transaction markers recover under the
@@ -387,10 +384,10 @@ async function executeForegroundEnrollment(
 		}
 
 		try {
-			taskIntent = await readTaskIntent(root, taskId);
+			taskIntent = await readTaskIntentForRecord(root, taskId);
 		} catch (error) {
 			const message = errorMessage(error);
-			// `readTaskIntent` reports an absent sidecar semantically now, so the
+			// `readTaskIntentForRecord` reports an absent sidecar semantically now, so the
 			// "missing" classification must recognise that wording as well as the raw
 			// filesystem errors; otherwise a missing file is misreported as a schema
 			// defect and the operator is told to repair fields that do not exist.
@@ -406,7 +403,7 @@ async function executeForegroundEnrollment(
 				"route_incumbent",
 				stage,
 				`Kernel task ${authority.owner_task_id} already owns this workspace`,
-				`continue ${authority.owner_task_id} through imm-loop without re-enrollment`,
+				`continue ${authority.owner_task_id} through imm-run without re-enrollment`,
 			);
 		if (authority.state === "repairable_stale_claim")
 			return terminal(
@@ -518,7 +515,7 @@ async function executeForegroundEnrollment(
 		{
 			let liveEarly: string | null = null;
 			try {
-				liveEarly = (await readTaskIntent(resolve(root), taskId)).content_hash;
+				liveEarly = (await readTaskIntentForRecord(resolve(root), taskId)).content_hash;
 			} catch {
 				liveEarly = null;
 			}
@@ -529,7 +526,7 @@ async function executeForegroundEnrollment(
 		{
 			let liveContentHash: string | null = null;
 			try {
-				liveContentHash = (await readTaskIntent(resolve(root), taskId)).content_hash;
+				liveContentHash = (await readTaskIntentForRecord(resolve(root), taskId)).content_hash;
 			} catch {
 				liveContentHash = null;
 			}
@@ -559,37 +556,38 @@ async function executeForegroundEnrollment(
 			confirmation_ref: `pi-confirm-${createHash("sha256").update(`${taskId}\0${now}\0${nonce}`).digest("hex").slice(0, 16)}`,
 			nonce,
 		};
-		const capability = registry.issue(binding);
-		const input = {
-			task_id: taskId,
-			intent_path: binding.intent_path,
-			intent_revision: binding.intent_revision,
-			preparation_digest: binding.preparation_digest,
-			capability,
-			capability_binding: binding,
-			now,
-		};
 
 		progress("rehearsing", uxText(UX_LANG, "Running the zero-write Kernel owner rehearsal", "正在执行 Kernel 所有者零写入预演"));
-		const rehearsal = await runEnrollmentRehearsal(root, input, capability, registry);
-		if (!rehearsal.rehearsed || rehearsal.evidence.outcome !== "ready")
-			return terminal(action, taskId, "failed", stage, `Kernel enrollment rehearsal failed: ${rehearsal.evidence.blockers.join("; ")}${gitBaseNote}`, "resolve the final-lock preconditions and retry");
-		if (signal.aborted) return cancelled();
-		if (!beginCommit()) return cancelled();
-
-		stage = "committing";
-		onUpdate?.(updateResult(action, taskId, stage, "Kernel enrollment commit owns settlement and is no longer cancellable"));
 		try {
-			const result = await enrollCanaryTask(root, input, registry);
+			// The single Enrollment entry owns issue -> rehearse -> checkpoint ->
+			// commit. The checkpoint keeps the Tool's abort/begin-commit gate
+			// between rehearsal and commit: a declined checkpoint cancels with
+			// zero writes, and once it accepts, commit is no longer cancellable.
+			const outcome = await enrollTask(root, registry, {
+				binding,
+				now,
+				checkpoint: () => {
+					if (signal.aborted) return false;
+					if (!beginCommit()) return false;
+					stage = "committing";
+					onUpdate?.(updateResult(action, taskId, stage, "Kernel enrollment commit owns settlement and is no longer cancellable"));
+					return true;
+				},
+			});
+			if (outcome.outcome === "cancelled") return cancelled();
+			const result = outcome.result;
 			return terminal(
 				action,
 				taskId,
 				"completed",
 				stage,
 				`Kernel enrollment completed: task ${result.record.task_id} state=${result.record.lifecycle}:${result.record.artifact_state} backend=${result.backend_claim.backend}`,
-				"continue with imm-loop",
+				"continue with imm-run",
 			);
 		} catch (error) {
+			if (error instanceof EnrollmentRehearsalError)
+				return terminal(action, taskId, "failed", stage, `${error.message}${gitBaseNote}`, "resolve the final-lock preconditions and retry");
+			if (stage !== "committing") throw error;
 			const failure = await classifyCommitFailure(root, action, taskId, now, error);
 			failure.summary += gitBaseNote;
 			return failure;