okstra 0.170.3 → 0.172.0

package/runtime/python/okstra_ctl/report_translation.py

@@ -125,8 +125,10 @@ PROSE_KEYS = frozenset({
     "topic",
     "trigger",
     "triggerSignal",
+    "unblockCondition",
     "userChoice",
     "userInput",
+    "userText",
     "verification",
     "verificationMethod",
     "verificationSignal",
@@ -138,6 +140,8 @@ PROSE_KEYS = frozenset({
 # that must stay verbatim to be evidence at all.
 STRUCTURAL_KEYS = frozenset({
     "action",             # implementation.py: _FILE_ACTIONS lookup key
+    "activityId",
+    "activityIds",
     "adapter",
     "affectedId",
     "affectedTarget",
@@ -152,12 +156,15 @@ STRUCTURAL_KEYS = frozenset({
     "capturedHeadSha",
     "carriedForwardFromSeq",
     "carryJson",
+    "checkRefs",
     "clarificationId",
+    "classification",
     "claudeCode",
     "collectorBranch",
     "command",
     "commandOrObservation",
     "commandOrTest",
+    "commands",
     "commitListQuote",
     "complexity",
     "componentId",
@@ -165,14 +172,18 @@ STRUCTURAL_KEYS = frozenset({
     "conformanceTests",
     "coveredBy",
     "createdAt",
+    "cwd",
     "cycle",
     "dataStore",
     "date",
     "dependsOn",
     "diffSummaryQuote",
     "direction",
+    "disposition",
     "dispatches",
     "executorWorktreePath",
+    "evidenceRefs",
+    "exitCode",
     "existingPrUrl",
     "externalSystem",
     "featureId",
@@ -215,6 +226,7 @@ STRUCTURAL_KEYS = frozenset({
     "ownerComponentId",
     "path",
     "planFile",
+    "planItemIds",
     "planStep",
     "prepItemId",
     "project",
@@ -223,11 +235,13 @@ STRUCTURAL_KEYS = frozenset({
     "rawStat",
     "readBoundary",
     "readOnlyCommandLog",
+    "recommendedDisposition",
     "relatedIds",
     "relation",
     "replacedInTest",
     "replacedWith",
     "reportPath",
+    "resultPath",
     "requestKind",
     "requestPath",
     "requestVerbatim",    # the user's own words, quoted as evidence

package/runtime/python/okstra_ctl/worker_audit_ledger.py

@@ -10,7 +10,9 @@ so the rules live here rather than inside either one — the same split
 """
 from __future__ import annotations
 
+import json
 import re
+from collections.abc import Mapping, Sequence
 from dataclasses import dataclass
 from pathlib import Path
 
@@ -39,6 +41,29 @@ _EVIDENCE_READ_RE = re.compile(
     r"^- Evidence read: `?(?P<path>[^`\n]+?)`?\s*$",
     re.MULTILINE,
 )
+_EVIDENCE_COMMAND_RE = re.compile(
+    r"^- Evidence command:[ \t]*(?P<payload>.*)$", re.MULTILINE
+)
+_EVIDENCE_COMMAND_FIELDS = ("command", "cwd", "exitCode", "outputSummary")
+_EVIDENCE_COMMAND_STRING_FIELDS = ("command", "cwd", "outputSummary")
+_SENSITIVE_KEY_RE = re.compile(
+    r"(?i)(authorization|auth|credential|pass(?:wd|word)?|pwd|token|secret|"
+    r"api[_-]?key|access[_-]?key)"
+)
+_SENSITIVE_TEXT_RE = re.compile(
+    r"(?i)(authorization\s*:\s*\S+|"
+    r"\b(?:[A-Za-z_][A-Za-z0-9_-]*)?(?:auth|credential|pass(?:wd|word)?|pwd|"
+    r"token|secret|api[_-]?key|access[_-]?key)[A-Za-z0-9_-]*\s*=|"
+    r"--[\w-]*(?:auth|credential|pass(?:wd|word)?|pwd|token|secret|"
+    r"api[-_]?key|access[-_]?key)[\w-]*(?:[ =])\S+|"
+    r"\w+://[^\s:/@]+:[^\s@/]+@)"
+)
+_KNOWN_SECRET_RE = re.compile(
+    r"(?:AKIA|ASIA)[0-9A-Z]{16}|gh[pousr]_[A-Za-z0-9_]{8,}|"
+    r"github_pat_[A-Za-z0-9_]{8,}|xox[abprs]-[A-Za-z0-9-]{8,}|"
+    r"\bsk-[A-Za-z0-9_-]{8,}\b|"
+    r"\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b"
+)
 _FILE_LINE_CITATION_RE = re.compile(
     r"`(?P<path>(?!https?://)[^`\n]+?):(?P<line>\d+(?:-\d+)?)`"
 )
@@ -85,6 +110,129 @@ def _audit_evidence_read_paths(content: str) -> set[str]:
     }
 
 
+@dataclass(frozen=True)
+class EvidenceCommand:
+    command: str
+    cwd: str
+    exit_code: int
+    output_summary: str
+
+    def to_record(self) -> dict[str, object]:
+        return {
+            "command": self.command,
+            "cwd": self.cwd,
+            "exitCode": self.exit_code,
+            "outputSummary": self.output_summary,
+        }
+
+
+def _contains_sensitive_material(value: object) -> bool:
+    if isinstance(value, Mapping):
+        return any(
+            (
+                _SENSITIVE_KEY_RE.search(str(key)) is not None
+                and nested not in (None, "", False)
+            )
+            or _contains_sensitive_material(nested)
+            for key, nested in value.items()
+        )
+    if isinstance(value, Sequence) and not isinstance(value, (str, bytes)):
+        return any(_contains_sensitive_material(item) for item in value)
+    if not isinstance(value, str):
+        return False
+    return (
+        _SENSITIVE_TEXT_RE.search(value) is not None
+        or _KNOWN_SECRET_RE.search(value) is not None
+    )
+
+
+def _evidence_command_contract_failures(
+    payload: Mapping[str, object], row_number: int
+) -> list[str]:
+    failures: list[str] = []
+    missing = [key for key in _EVIDENCE_COMMAND_FIELDS if key not in payload]
+    unexpected = sorted(set(payload) - set(_EVIDENCE_COMMAND_FIELDS))
+    if missing:
+        failures.append(
+            f"Evidence command row {row_number} is missing {', '.join(missing)}"
+        )
+    if unexpected:
+        failures.append(
+            f"Evidence command row {row_number} has unexpected "
+            f"{', '.join(unexpected)}"
+        )
+    for field_name in _EVIDENCE_COMMAND_STRING_FIELDS:
+        if field_name in payload and not isinstance(payload[field_name], str):
+            failures.append(
+                f"Evidence command row {row_number} {field_name} must be a string"
+            )
+    if "exitCode" in payload and type(payload["exitCode"]) is not int:
+        failures.append(
+            f"Evidence command row {row_number} exitCode must be an integer"
+        )
+    return failures
+
+
+def _evidence_command_from_payload(
+    payload: Mapping[str, object], sensitive: bool
+) -> EvidenceCommand:
+    if sensitive:
+        return EvidenceCommand(
+            command="[redacted: potential secret]",
+            cwd="[redacted: potential secret]",
+            exit_code=payload["exitCode"],
+            output_summary="omitted because potential secret material was detected",
+        )
+    return EvidenceCommand(
+        command=payload["command"],
+        cwd=payload["cwd"],
+        exit_code=payload["exitCode"],
+        output_summary=payload["outputSummary"],
+    )
+
+
+def parse_evidence_commands(
+    content: str,
+) -> tuple[tuple[EvidenceCommand, ...], tuple[str, ...]]:
+    commands: list[EvidenceCommand] = []
+    failures: list[str] = []
+    for row_number, match in enumerate(
+        _EVIDENCE_COMMAND_RE.finditer(content), start=1
+    ):
+        try:
+            payload = json.loads(match.group("payload"))
+        except json.JSONDecodeError:
+            failures.append(f"Evidence command row {row_number} is not valid JSON")
+            continue
+        if not isinstance(payload, Mapping):
+            failures.append(
+                f"Evidence command row {row_number} must be a JSON object"
+            )
+            continue
+        sensitive = _contains_sensitive_material(payload)
+        if sensitive:
+            failures.append(
+                f"Evidence command row {row_number} contains sensitive material"
+            )
+        contract_failures = _evidence_command_contract_failures(payload, row_number)
+        failures.extend(contract_failures)
+        if contract_failures:
+            continue
+        commands.append(_evidence_command_from_payload(payload, sensitive))
+    return tuple(commands), tuple(failures)
+
+
+def read_evidence_commands(
+    audit_path: Path,
+) -> tuple[tuple[EvidenceCommand, ...], tuple[str, ...]]:
+    try:
+        return parse_evidence_commands(audit_path.read_text(encoding="utf-8"))
+    except OSError as exc:
+        return (), (
+            f"worker audit sidecar unreadable: {audit_path.name} ({exc})",
+        )
+
+
 def _worker_prompt_path(
     run_dir: Path,
     worker_role: str,
@@ -276,6 +424,8 @@ def check_worker_results_audit(
             )
             continue
 
+        _, command_failures = read_evidence_commands(audit_path)
+        failures.extend(command_failures)
         failures.extend(_evidence_read_ledger_failures(
             run_dir=run_dir,
             worker_role=worker_role,

package/runtime/schemas/final-report-v2.0.schema.json

@@ -171,6 +171,12 @@
         }
       }
     },
+    "agentActivity": {
+      "type": "array",
+      "items": {
+        "$ref": "#/$defs/AgentActivityRow"
+      }
+    },
     "verificationScope": {
       "enum": [
         "whole-task",
@@ -2587,6 +2593,103 @@
     }
   ],
   "$defs": {
+    "ActivityCommand": {
+      "type": "object",
+      "required": [
+        "command",
+        "cwd",
+        "exitCode",
+        "outputSummary"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "command": {
+          "type": "string"
+        },
+        "cwd": {
+          "type": "string"
+        },
+        "exitCode": {
+          "type": "integer"
+        },
+        "outputSummary": {
+          "type": "string"
+        }
+      }
+    },
+    "AgentActivityRow": {
+      "type": "object",
+      "required": [
+        "activityId",
+        "kind",
+        "agent",
+        "summary",
+        "planItemIds",
+        "resultPath",
+        "commands",
+        "evidenceRefs",
+        "outcome"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "activityId": {
+          "type": "string",
+          "pattern": "^A-\\d{3,}$"
+        },
+        "kind": {
+          "type": "string",
+          "enum": [
+            "worker-dispatched",
+            "worker-completed",
+            "verification-round-completed",
+            "self-fix-applied",
+            "user-decision-required",
+            "user-decision-evaluated"
+          ]
+        },
+        "agent": {
+          "type": "string",
+          "minLength": 1
+        },
+        "summary": {
+          "type": "string",
+          "minLength": 1
+        },
+        "planItemIds": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "resultPath": {
+          "type": "string"
+        },
+        "commands": {
+          "type": "array",
+          "items": {
+            "$ref": "#/$defs/ActivityCommand"
+          }
+        },
+        "evidenceRefs": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "outcome": {
+          "type": "string",
+          "enum": [
+            "pending",
+            "completed",
+            "failed",
+            "blocked",
+            "resolved"
+          ]
+        }
+      }
+    },
     "TaskType": {
       "enum": [
         "requirements-discovery",
@@ -3553,6 +3656,86 @@
         "deferred-no-interactive-session"
       ]
     },
+    "ApprovalDisposition": {
+      "enum": [
+        "select",
+        "accept-risk",
+        "request-revision",
+        "reject"
+      ]
+    },
+    "ApprovalResolution": {
+      "type": "object",
+      "required": [
+        "disposition",
+        "userText",
+        "checkRefs"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "disposition": {
+          "$ref": "#/$defs/ApprovalDisposition"
+        },
+        "userText": {
+          "type": "string",
+          "minLength": 1
+        },
+        "checkRefs": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "string",
+            "pattern": "^A-\\d{3,}$"
+          }
+        }
+      }
+    },
+    "ApprovalContext": {
+      "type": "object",
+      "required": [
+        "classification",
+        "planItemIds",
+        "activityIds",
+        "unblockCondition",
+        "recommendedDisposition"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "classification": {
+          "enum": [
+            "user-decision",
+            "noncritical-dissent",
+            "correctness-critical"
+          ]
+        },
+        "planItemIds": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "string",
+            "pattern": "^P-[A-Za-z]+-.+"
+          }
+        },
+        "activityIds": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "string",
+            "pattern": "^A-\\d{3,}$"
+          }
+        },
+        "unblockCondition": {
+          "type": "string",
+          "minLength": 1
+        },
+        "recommendedDisposition": {
+          "$ref": "#/$defs/ApprovalDisposition"
+        },
+        "resolution": {
+          "$ref": "#/$defs/ApprovalResolution"
+        }
+      }
+    },
     "ClarificationOption": {
       "type": "object",
       "required": [
@@ -3593,6 +3776,9 @@
         "directionChange": {
           "type": "string",
           "minLength": 1
+        },
+        "disposition": {
+          "$ref": "#/$defs/ApprovalDisposition"
         }
       }
     },
@@ -8421,6 +8607,9 @@
           "items": {
             "$ref": "#/$defs/ClarificationOption"
           }
+        },
+        "approvalContext": {
+          "$ref": "#/$defs/ApprovalContext"
         }
       }
     },

package/runtime/skills/okstra-user-response/SKILL.md

@@ -73,7 +73,7 @@ okstra user-response show --report <reportPath>
 
 Returns `{reportPath, rows: [{id, kind, blocks, status, statement, expectedForm, options, contextRefs, resolvedRefs}]}`.
 
-Each entry of `options[]` is `{role, answer, rationale, scopeImpact, addedWork, directionChange}`. `role` is `recommended` for exactly one entry and `alternative` for the rest; `scopeImpact` is a token list drawn from `in-repo` / `cross-repo` / `new-schema` / `deferrable`; `addedWork` and `directionChange` are one sentence each. A schema-v1 report has nowhere to record impact, so those three arrive empty — the CLI reconstructs only the answers from the report's `Expected form` cell.
+Each entry of `options[]` is `{role, answer, rationale, scopeImpact, addedWork, directionChange, disposition}`. `role` is `recommended` for exactly one entry and `alternative` for the rest; `scopeImpact` is a token list drawn from `in-repo` / `cross-repo` / `new-schema` / `deferrable`; `addedWork` and `directionChange` are one sentence each. Activity-contract v1 approval options also carry the gate action in `disposition`. A legacy schema-v1 report has nowhere to record impact or a gate action, so those fields arrive empty — the CLI reconstructs only the answers from the report's `Expected form` cell.
 
 `resolvedRefs` is `[{ref, definition}]` — the CLI has already looked up what each internal token (`RB-002`, `FU-001`, `§4.7`, …) means in the report body; `definition` is `null` only when the report text alone could not resolve it (e.g. a `path:line` pointer).
 
@@ -127,7 +127,7 @@ Record one entry — `{id, kind, value, rationale?, disposition}`, `kind` copied
 
 | The user picks | `value` | `disposition` |
 |---|---|---|
-| One of the `options[]` entries | that option's `answer` text, not its short label | `answer` |
+| One of the `options[]` entries | that option's `answer` text, not its short label | that option's `disposition` (`answer` only when absent on a legacy option) |
 | `Enter directly` → their own answer | the user's utterance verbatim (rationale into `rationale`) | `answer` |
 | Free text asking for the item to be re-asked | what the user wants re-asked, verbatim (empty → the raw statement) | `reframe` |
 

package/runtime/templates/reports/final-report-v2.template.md

@@ -110,6 +110,14 @@ schema-version: {{ schemaVersion | yaml_scalar }}
 {{ md_rest(aiTaskProperty, 3) }}
 {% endif %}
 
+{% if md_has("agentActivity") %}
+## {{ t("agentActivity.heading") }}
+
+{{ t("agentActivity.intro") }}
+
+{{ md("agentActivity", 3) }}
+{% endif %}
+
 ## Cross Verification Audit
 
 {{ md("crossVerification", 3) }}

package/runtime/templates/reports/html/assets/base.css

@@ -108,6 +108,13 @@ textarea, select { width: 100%; max-width: 60rem; padding: .55rem; font: inherit
 .clarification-expected dt { font-weight: 600; margin-bottom: .3rem; }
 .clarification-expected dd { margin: 0; }
 .clarification-item label { font-weight: 600; margin-bottom: .3rem; }
+.activity-list { display: grid; gap: .8rem; }
+.activity-card { padding: 1rem; border: 1px solid color-mix(in srgb, CanvasText 14%, transparent); border-radius: 12px; }
+.activity-card > :first-child, .approval-context > :first-child { margin-top: 0; }
+.activity-card > :last-child, .approval-context > :last-child { margin-bottom: 0; }
+.activity-card details { margin-top: .8rem; }
+.approval-context { margin: .8rem 0; padding: .8rem 1rem; border-left: 4px solid color-mix(in srgb, Highlight 55%, GrayText); background: color-mix(in srgb, Highlight 7%, Canvas); }
+.clarification-option-disposition { color: GrayText; font-size: .85rem; }
 .user-response-hint { flex-basis: 100%; margin: 0; color: GrayText; font-size: .9rem; }
 button { padding: .5rem 1rem; border-radius: 8px; border: 1px solid color-mix(in srgb, CanvasText 28%, transparent); background: color-mix(in srgb, CanvasText 5%, Canvas); color: CanvasText; font: inherit; cursor: pointer; }
 button:hover { background: color-mix(in srgb, CanvasText 12%, Canvas); }

package/runtime/templates/reports/html/i18n/en.json

@@ -150,6 +150,7 @@
       "questions-waiting-on-you": "Questions waiting on you",
       "count-questions-waiting-on-you": "{count} questions waiting on you",
       "your-answer-to-id": "Your answer to {id}",
+      "choose-one": "Choose one",
       "recommended": "Recommended",
       "scope-impact": "Scope",
       "added-work": "Added work",
@@ -322,7 +323,11 @@
       "open-decisions-before-approval": "Open decisions before approval",
       "no-open-decision-is-holding-approval": "No open decision is holding approval.",
       "uniform-verifier-label": "Uniform verifier",
-      "uniform-verifier-legend": "This verifier answered the same verdict to every item it voted on, so this round's refutation signal came from its peers alone — the gate above reads as a wider cross-check than it was. A unanimous round is a legitimate outcome; confirm from the worker's audit sidecar that it actually opened the cited evidence."
+      "uniform-verifier-legend": "This verifier answered the same verdict to every item it voted on, so this round's refutation signal came from its peers alone — the gate above reads as a wider cross-check than it was. A unanimous round is a legitimate outcome; confirm from the worker's audit sidecar that it actually opened the cited evidence.",
+      "what-each-agent-did": "What each agent did",
+      "commands-and-evidence": "Commands and evidence",
+      "unblock-condition": "Unblock condition:",
+      "agent-evidence": "Agent evidence:"
     },
     "implementation": {
       "what-was-delivered": "What was delivered",

package/runtime/templates/reports/html/i18n/ko.json

@@ -150,6 +150,7 @@
       "questions-waiting-on-you": "답변을 기다리는 질문",
       "count-questions-waiting-on-you": "답변을 기다리는 질문 {count}건",
       "your-answer-to-id": "{id}에 대한 답변",
+      "choose-one": "하나를 선택하세요",
       "recommended": "권장",
       "scope-impact": "범위",
       "added-work": "추가 작업",
@@ -322,7 +323,11 @@
       "open-decisions-before-approval": "승인 전에 남은 결정",
       "no-open-decision-is-holding-approval": "승인을 막는 미결 결정이 없습니다.",
       "uniform-verifier-label": "단일 판정 검증자",
-      "uniform-verifier-legend": "이 검증자는 자기가 투표한 모든 항목에 같은 판정을 냈습니다. 그래서 이번 라운드의 반증 신호는 나머지 검증자에게서만 나왔고, 위의 게이트 값은 실제보다 넓은 교차 검증처럼 읽힙니다. 만장일치도 정당한 결과이므로, 그 워커의 audit 사이드카에서 인용한 근거를 실제로 열어봤는지 확인하십시오."
+      "uniform-verifier-legend": "이 검증자는 자기가 투표한 모든 항목에 같은 판정을 냈습니다. 그래서 이번 라운드의 반증 신호는 나머지 검증자에게서만 나왔고, 위의 게이트 값은 실제보다 넓은 교차 검증처럼 읽힙니다. 만장일치도 정당한 결과이므로, 그 워커의 audit 사이드카에서 인용한 근거를 실제로 열어봤는지 확인하십시오.",
+      "what-each-agent-did": "에이전트별 수행 내용",
+      "commands-and-evidence": "명령과 근거",
+      "unblock-condition": "승인 해제 조건:",
+      "agent-evidence": "에이전트 근거:"
     },
     "implementation": {
       "what-was-delivered": "무엇을 만들었나",

package/runtime/templates/reports/html/macros/forms.html

@@ -42,15 +42,27 @@
   <h2>{{ t('macros.forms.count-questions-waiting-on-you') | replace('{count}', items | length) }}</h2>
   <p class="clarification-lede">{{ t('macros.forms.the-code-alone-could-not-settle-these-fill-i') }} <strong>{{ t('macros.forms.export-my-answers') }}</strong> {{ t('macros.forms.at-the-foot-of-the-page') }}</p>
   {% for row in items %}
-  <article class="clarification-item" id="id-{{ row.id }}" data-response-id="{{ row.id }}" data-kind="{{ row.kind }}">
+  {% set is_closed = row.status in ['resolved', 'obsolete'] %}
+  {% set approval_context = row.approvalContext | default(None) %}
+  <article class="clarification-item" id="id-{{ row.id }}" data-response-id="{{ row.id }}" data-kind="{{ row.kind }}" data-status="{{ row.status }}">
     <p class="eyebrow">{{ row.id }} · {{ row.kind }}</p>
     {{ row.statement | paragraphs }}
     <dl class="clarification-expected"><dt>{{ t('macros.forms.answer-as') }}</dt><dd>{{ row.expectedForm | inline_code }}</dd></dl>
+    {% if approval_context %}
+    <div class="approval-context" data-approval-classification="{{ approval_context.classification }}">
+      <p class="eyebrow">{{ approval_context.classification }}</p>
+      <p><strong>{{ t('tasks.implementation-planning.unblock-condition') }}</strong> {{ approval_context.unblockCondition | inline_code }}</p>
+      <p><strong>{{ t('tasks.implementation-planning.agent-evidence') }}</strong>
+        {% for activity_id in approval_context.activityIds %}<a href="#id-{{ activity_id }}">{{ activity_id }}</a>{% if not loop.last %}, {% endif %}{% endfor %}
+      </p>
+    </div>
+    {% endif %}
     {% if row.options %}
     <ol class="clarification-options">
       {% for option in row.options %}
       <li class="clarification-option{% if option.role == 'recommended' %} is-recommended{% endif %}">
         <p class="clarification-option-answer">{{ option.answer }}{% if option.role == 'recommended' %} <span class="badge">{{ t('macros.forms.recommended') }}</span>{% endif %}</p>
+        {% if option.disposition | default(None) %}<p class="clarification-option-disposition"><code>{{ option.disposition }}</code></p>{% endif %}
         <p class="clarification-option-rationale">{{ option.rationale }}</p>
         <dl class="clarification-option-impact">
           <dt>{{ t('macros.forms.scope-impact') }}</dt><dd>{{ option.scopeImpact | join(', ') }}</dd>
@@ -62,7 +74,14 @@
     </ol>
     {% endif %}
     <label for="response-{{ row.id }}">{{ t('macros.forms.your-answer-to-id') | replace('{id}', row.id) }}</label>
-    <textarea id="response-{{ row.id }}" data-response-id="{{ row.id }}" rows="4">{{ row.userInput | default('') }}</textarea>
+    {% if row.kind == 'decision' and approval_context and row.options %}
+    <select id="response-{{ row.id }}" data-response-id="{{ row.id }}"{% if is_closed %} disabled{% endif %}>
+      <option value="">{{ t('macros.forms.choose-one') }}</option>
+      {% for option in row.options %}<option value="{{ option.answer }}" data-disposition="{{ option.disposition }}"{% if option.role == 'recommended' %} data-recommended="true"{% endif %}{% if row.userInput | default('') == option.answer %} selected{% endif %}>{{ option.answer }}</option>{% endfor %}
+    </select>
+    {% else %}
+    <textarea id="response-{{ row.id }}" data-response-id="{{ row.id }}" rows="4"{% if is_closed %} disabled{% endif %}>{{ row.userInput | default('') }}</textarea>
+    {% endif %}
   </article>
   {% endfor %}
 </section>

package/runtime/templates/reports/html/tasks/implementation-planning.template.html

@@ -97,6 +97,31 @@
   <table data-report-field="implementationPlanning.skippedAdrCandidates"><thead><tr><th>{{ t('tasks.implementation-planning.topic') }}</th><th>{{ t('tasks.implementation-planning.why') }}</th></tr></thead><tbody>{% for row in planning.skippedAdrCandidates %}<tr><td>{{ row.topic | inline_code }}</td><td>{{ row.reason | inline_code }}</td></tr>{% endfor %}</tbody></table>{% endif %}
 </section>
 
+{% if agentActivities %}
+<section data-report-section="agent-activity">
+  <h2>{{ t('tasks.implementation-planning.what-each-agent-did') }}</h2>
+  <div class="activity-list">
+    {% for row in agentActivities %}
+    <article class="activity-card" id="id-{{ row.activityId }}">
+      <p class="eyebrow">{{ row.activityId }} · {{ row.agent }}</p>
+      <h3>{{ row.summary | inline_code }}</h3>
+      <p>{{ t('tasks.implementation-planning.result') }}: {{ row.outcome | inline_code }}</p>
+      <details>
+        <summary>{{ t('tasks.implementation-planning.commands-and-evidence') }}</summary>
+        <p><code>{{ row.kind }}</code></p>
+        {% if row.planItemIds %}<p>{{ row.planItemIds | join(', ') | inline_code }}</p>{% endif %}
+        {% for command in row.commands %}
+        <p><code>{{ command.command }}</code> · exit {{ command.exitCode }} · {{ command.outputSummary | inline_code }}</p>
+        {% endfor %}
+        {% if row.evidenceRefs %}<p>{{ row.evidenceRefs | join(', ') | inline_code }}</p>{% endif %}
+        {% if row.resultPath %}<p><code>{{ row.resultPath }}</code></p>{% endif %}
+      </details>
+    </article>
+    {% endfor %}
+  </div>
+</section>
+{% endif %}
+
 <section data-report-section="open-decisions">
   <h2>{{ t('tasks.implementation-planning.open-decisions-before-approval') }}</h2>
   <div class="summary-grid">{% for row in openDecisions %}{{ summary_card(row.id ~ " · " ~ row.kind, row.statement, "important", anchor=row.id) }}{% else %}<p>{{ t('tasks.implementation-planning.no-open-decision-is-holding-approval') }}</p>{% endfor %}</div>

package/runtime/templates/reports/i18n/en.json

@@ -60,6 +60,10 @@
       "readerSummary": "The shortest reader path: what was decided, what a human must do next, and which audit details can wait until a deeper review.",
       "endStateCoverage": "One row per end-state id the brief pinned, and how this phase accounted for it. A row that is not `addressed` must say why."
     },
+  "agentActivity": {
+    "heading": "Agent Activity Audit",
+    "intro": "Structured lead activity projected from this run's canonical event log."
+  },
   "analysis": {
     "basisIntro": "Immutable run snapshot, bounded scan scope, current-code facts, inferences, unknowns, and review disposition for this analysis.",
     "projectIntro": "Project components, boundaries, entry points, dependencies, stores, external systems, and the shallow feature index.",