specrails-core 5.2.3 → 5.4.0

package/dist/agent-runtime/graph/artifacts.js

@@ -0,0 +1,205 @@
+import { artifactPath, hash, resolveOpenSpecCli, runOpenSpec } from '../openspec.js';
+import { randomUUID } from 'node:crypto';
+import { cpSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import path from 'node:path';
+import { checkArchive, pipelineStateDirectory, transitionPipeline, validateVerificationRequest, } from '../../installer/runtime/pipeline-state.js';
+export const SLUG = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+export function object(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error('Expected a structured JSON object from agent');
+    return value;
+}
+/** Accepts the object wherever the model put it: bare, fenced, or surrounded by commentary. */
+export function parseAgentObject(text) {
+    if (text.length > 2_000_000)
+        throw new Error('Structured agent response is too large');
+    const trimmed = text.trim();
+    const candidates = [trimmed, trimmed.replace(/^```(?:json)?\s*\n([\s\S]*?)\n```$/, '$1')];
+    const fenced = /```(?:json)?\s*\n([\s\S]*?)\n```/.exec(trimmed);
+    if (fenced)
+        candidates.push(fenced[1]);
+    const first = trimmed.indexOf('{'), last = trimmed.lastIndexOf('}');
+    if (first >= 0 && last > first)
+        candidates.push(trimmed.slice(first, last + 1));
+    let failure;
+    for (const candidate of candidates) {
+        try {
+            return object(JSON.parse(candidate));
+        }
+        catch (error) {
+            failure = error;
+        }
+    }
+    throw failure instanceof Error ? failure : new Error('Expected a structured JSON object from agent');
+}
+/** All generated paths are relative and reject symlink ancestors, including
+ * already-existing archive/spec directories. */
+export function child(root, relative) {
+    const target = path.resolve(root, relative);
+    const rel = path.relative(root, target);
+    if (!rel || rel === '..' || rel.startsWith('..' + path.sep) || path.isAbsolute(rel))
+        throw new Error('Artifact path escapes repository');
+    let cursor = root;
+    for (const part of rel.split(path.sep)) {
+        cursor = path.join(cursor, part);
+        if (existsSync(cursor) && lstatSync(cursor).isSymbolicLink())
+            throw new Error('Refusing symlink artifact path: ' + relative);
+    }
+    return target;
+}
+export function write(file, content) {
+    mkdirSync(path.dirname(file), { recursive: true });
+    const temp = file + '.' + randomUUID() + '.tmp';
+    try {
+        writeFileSync(temp, content, { flag: 'wx', mode: 0o600 });
+        renameSync(temp, file);
+    }
+    finally {
+        rmSync(temp, { force: true });
+    }
+}
+export function journal(context) {
+    return JSON.parse(readFileSync(path.join(pipelineStateDirectory(context), 'state.json'), 'utf8'));
+}
+export function parseArchitecture(raw) {
+    if (!['high', 'medium', 'low'].includes(String(raw.confidence)))
+        throw new Error('Invalid design confidence');
+    if (raw.question !== undefined && (typeof raw.question !== 'string' || raw.question.length > 4000))
+        throw new Error('Invalid architect question');
+    if (raw.planningDepth !== undefined && raw.planningDepth !== 'focused' && raw.planningDepth !== 'full')
+        throw new Error('Invalid planning depth');
+    if (raw.planningReason !== undefined && (typeof raw.planningReason !== 'string' || !raw.planningReason.trim() || raw.planningReason.length > 2000))
+        throw new Error('Invalid planning reason');
+    const references = (key) => {
+        const value = raw[key];
+        if (value === undefined)
+            return [];
+        if (!Array.isArray(value) || value.length > 20 || value.some(item => typeof item !== 'string' || !item.trim() || item.length > 1000))
+            throw new Error('Invalid architect ' + key);
+        return value;
+    };
+    const referencePatterns = references('referencePatterns'), riskFlags = references('riskFlags');
+    return { confidence: raw.confidence, ...(typeof raw.question === 'string' && raw.question.trim() ? { question: raw.question.trim() } : {}), verification: raw.verification,
+        planningDepth: raw.planningDepth === 'focused' && referencePatterns.length > 0 && riskFlags.length === 0 ? 'focused' : 'full',
+        ...(typeof raw.planningReason === 'string' ? { planningReason: raw.planningReason } : {}), referencePatterns, riskFlags, };
+}
+export function writeDesignConfidence(context, change, architecture, options = {}) {
+    // A question may precede change creation. Do not fabricate a change directory in that case.
+    if (!existsSync(child(context.artifactRoot, 'openspec/changes/' + change + '/.openspec.yaml')))
+        return;
+    const confidence = options.assumed && architecture.confidence === 'low'
+        ? { confidence: 'medium', assumed: true, reportedConfidence: 'low', question: architecture.question }
+        : { confidence: architecture.confidence, question: architecture.question };
+    write(child(context.artifactRoot, 'openspec/changes/' + change + '/design-confidence.json'), JSON.stringify(confidence, null, 2) + '\n');
+}
+/** Commands the architect proposed for repositories the configuration leaves uncovered. */
+export function proposedVerification(context, configured, verification) {
+    if (verification === undefined || verification === null)
+        return [];
+    if (!Array.isArray(verification) || verification.length > 100)
+        throw new Error('Invalid proposed verification commands');
+    const covered = new Set(configured.map(command => command.repositoryId));
+    const proposed = verification.map(item => {
+        const command = object(item);
+        if (typeof command.repositoryId !== 'string' || typeof command.command !== 'string' || !command.command.trim() || !Array.isArray(command.args) || !command.args.every(arg => typeof arg === 'string'))
+            throw new Error('Invalid proposed verification command');
+        return { repositoryId: command.repositoryId, command: command.command, args: command.args, ...(typeof command.cwd === 'string' && command.cwd ? { cwd: command.cwd } : {}) };
+    }).filter(command => !covered.has(command.repositoryId) && context.repositories.some(repository => repository.id === command.repositoryId));
+    if (proposed.length)
+        validateVerificationRequest(context, { kind: 'scoped', commands: proposed });
+    return proposed;
+}
+/** Publish an archive prepared by the real CLI. The durable write set makes a
+ * crash between main-spec updates recoverable without applying a delta twice. */
+async function archiveWithOpenSpec(context, change, active, signal) {
+    const directory = pipelineStateDirectory(context);
+    const receipt = path.join(directory, 'openspec-archive.json');
+    const files = (root, prefix = '') => {
+        if (!existsSync(root))
+            return [];
+        return readdirSync(root, { withFileTypes: true }).flatMap(entry => {
+            const relative = prefix + entry.name;
+            if (entry.isSymbolicLink())
+                throw new Error('OpenSpec archive refuses symlink trees');
+            return entry.isDirectory() ? files(path.join(root, entry.name), relative + '/') : [relative];
+        });
+    };
+    const activeHash = hash(JSON.stringify(files(active).sort().map(file => [file, readFileSync(artifactPath(active, file), 'utf8')])));
+    let plan;
+    if (existsSync(receipt))
+        plan = JSON.parse(readFileSync(receipt, 'utf8'));
+    else {
+        const staging = mkdtempSync(path.join(directory, '.openspec-archive-'));
+        try {
+            const source = artifactPath(context.artifactRoot, 'openspec');
+            files(source); // Reject symlinks before copying or invoking the external CLI.
+            cpSync(source, path.join(staging, 'openspec'), { recursive: true });
+            await runOpenSpec(resolveOpenSpecCli(), staging, ['archive', change, '--yes'], signal);
+            const archives = readdirSync(path.join(staging, 'openspec/changes/archive')).filter(name => name.endsWith('-' + change));
+            if (archives.length !== 1)
+                throw new Error('OpenSpec archive destination is ambiguous');
+            const destination = 'openspec/changes/archive/' + archives[0];
+            if (existsSync(artifactPath(context.artifactRoot, destination)))
+                throw new Error('OpenSpec archive destination already exists');
+            const beforeRoot = path.join(source, 'specs'), afterRoot = path.join(staging, 'openspec/specs');
+            const names = new Set([...files(beforeRoot), ...files(afterRoot)]);
+            const contents = (root, name) => existsSync(path.join(root, name)) ? readFileSync(path.join(root, name), 'utf8') : null;
+            plan = { activeHash, destination, writes: [...names].map(name => ({ path: 'openspec/specs/' + name, before: contents(beforeRoot, name), after: contents(afterRoot, name) })).filter(item => item.before !== item.after) };
+            write(receipt, JSON.stringify(plan));
+        }
+        finally {
+            rmSync(staging, { recursive: true, force: true });
+        }
+    }
+    if (plan.activeHash !== activeHash)
+        throw new Error('Reviewed artifacts changed since the OpenSpec archive was prepared');
+    if (!new RegExp('^openspec/changes/archive/[0-9]{4}-[0-9]{2}-[0-9]{2}-' + change + '$').test(plan.destination))
+        throw new Error('Invalid OpenSpec archive receipt');
+    const targets = plan.writes.map(item => {
+        if (!item.path.startsWith('openspec/specs/'))
+            throw new Error('Invalid OpenSpec archive write');
+        const target = artifactPath(context.artifactRoot, item.path);
+        const current = existsSync(target) ? readFileSync(target, 'utf8') : null;
+        if (current !== item.before && current !== item.after)
+            throw new Error('Main specification changed during archive; refusing to overwrite: ' + item.path);
+        return { ...item, target };
+    });
+    // The external CLI ran asynchronously; recheck the candidate and artifacts before publishing.
+    signal?.throwIfAborted();
+    checkArchive(context);
+    // Validate every path and preimage before publishing the first output.
+    const destination = artifactPath(context.artifactRoot, plan.destination);
+    if (existsSync(destination))
+        throw new Error('Archive destination already exists');
+    for (const item of targets) {
+        if (item.after === null)
+            rmSync(item.target, { force: true });
+        else
+            write(item.target, item.after);
+    }
+    mkdirSync(path.dirname(destination), { recursive: true });
+    renameSync(active, destination);
+}
+export async function archive(context, change, signal) {
+    const state = journal(context);
+    if (state.phases.archive.status !== 'done') {
+        const active = artifactPath(context.artifactRoot, 'openspec/changes/' + change);
+        if (existsSync(active)) {
+            checkArchive(context);
+            transitionPipeline(context, 'archive', 'running');
+            await archiveWithOpenSpec(context, change, active, signal);
+        }
+        // If the process died after rename, Core rechecks the saved archive approval.
+        transitionPipeline(context, 'archive', 'done');
+    }
+    // A crash can also occur after Core's archive receipt but before these host
+    // ownership markers. Reconcile them when repeating the interrupted step.
+    if (context.ownership.git === 'host') {
+        const current = journal(context);
+        if (current.phases.ship.status !== 'skipped')
+            transitionPipeline(context, 'ship', 'skipped');
+        if (current.phases.ci.status !== 'skipped')
+            transitionPipeline(context, 'ci', 'skipped');
+    }
+}
+//# sourceMappingURL=artifacts.js.map

package/dist/agent-runtime/graph/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../../src/agent-runtime/graph/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AACpF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC7I,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EACL,YAAY,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,2BAA2B,GAEtF,MAAM,2CAA2C,CAAA;AAGlD,MAAM,CAAC,MAAM,IAAI,GAAG,4BAA4B,CAAA;AAEhD,MAAM,UAAU,MAAM,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAChI,OAAO,KAAgC,CAAA;AACzC,CAAC;AACD,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IACtF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,oCAAoC,EAAE,IAAI,CAAC,CAAC,CAAA;IACzF,MAAM,MAAM,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC/D,IAAI,MAAM;QAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACnE,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAA;IAC/E,IAAI,OAAgB,CAAA;IACpB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YAAC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,GAAG,KAAK,CAAA;QAAC,CAAC;IAChF,CAAC;IACD,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;AACtG,CAAC;AACD;gDACgD;AAChD,MAAM,UAAU,KAAK,CAAC,IAAY,EAAE,QAAgB;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACvC,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACxI,IAAI,MAAM,GAAG,IAAI,CAAA;IACjB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAChC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,QAAQ,CAAC,CAAA;IAC9H,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AACD,MAAM,UAAU,KAAK,CAAC,IAAY,EAAE,OAAe;IACjD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,UAAU,EAAE,GAAG,MAAM,CAAA;IAC/C,IAAI,CAAC;QAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAAC,CAAC;YACjF,CAAC;QAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAAC,CAAC;AAC3C,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,OAAwB;IAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAkB,CAAA;AACpH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAA4B;IAC5D,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC7G,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IACjJ,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IACjJ,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC9L,MAAM,UAAU,GAAG,CAAC,GAAW,EAAY,EAAE;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;QACtB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,CAAA;QAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAA;QACjL,OAAO,KAAiB,CAAA;IAC1B,CAAC,CAAA;IACD,MAAM,iBAAiB,GAAG,UAAU,CAAC,mBAAmB,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;IAC9F,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,UAA8B,EAAE,GAAG,CAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY;QAC5L,aAAa,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;QAC7H,GAAG,CAAC,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,SAAS,GACxH,CAAA;AACH,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,OAAwB,EAAE,MAAc,EAAE,YAAkD,EAAE,UAAiC,EAAE;IACrK,4FAA4F;IAC5F,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,mBAAmB,GAAG,MAAM,GAAG,iBAAiB,CAAC,CAAC;QAAE,OAAM;IACtG,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC,UAAU,KAAK,KAAK;QACrE,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE;QACrG,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAA;IAC5E,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,mBAAmB,GAAG,MAAM,GAAG,yBAAyB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;AAC1I,CAAC;AACD,2FAA2F;AAC3F,MAAM,UAAU,oBAAoB,CAAC,OAAwB,EAAE,UAAiC,EAAE,YAAqB;IACrH,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IACxH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC/P,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAgB,EAAE,GAAG,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IAC1L,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC,CAAA;IAC3I,IAAI,QAAQ,CAAC,MAAM;QAAE,2BAA2B,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;IACjG,OAAO,QAAQ,CAAA;AACjB,CAAC;AACD;iFACiF;AACjF,KAAK,UAAU,mBAAmB,CAAC,OAAwB,EAAE,MAAc,EAAE,MAAc,EAAE,MAAoB;IAC/G,MAAM,SAAS,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAA;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAA;IAE7D,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE,EAAY,EAAE;QACpD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QAChC,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YAChE,MAAM,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,CAAA;YACpC,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YACrF,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC9F,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnI,IAAI,IAAU,CAAA;IACd,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAS,CAAA;SAC5E,CAAC;QACJ,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAA;QACvE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;YAC7D,KAAK,CAAC,MAAM,CAAC,CAAA,CAAC,+DAA+D;YAC7E,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACnE,MAAM,WAAW,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;YACtF,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAA;YACxH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;YACvF,MAAM,WAAW,GAAG,2BAA2B,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAA;YAC9D,IAAI,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;YAC/H,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;YAC/F,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;YAClE,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAY,EAAiB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACtJ,IAAI,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,CAAA;YACzN,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;QACtC,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAAC,CAAC;IACjE,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;IACzH,IAAI,CAAC,IAAI,MAAM,CAAC,uDAAuD,GAAG,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACnK,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACrC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QAC/F,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5D,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACxE,IAAI,OAAO,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;QACxJ,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAA;IAC5B,CAAC,CAAC,CAAA;IACF,8FAA8F;IAC9F,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,YAAY,CAAC,OAAO,CAAC,CAAA;IACrB,uEAAuE;IACvE,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IACxE,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAClF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;;YACxD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;AACjC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAwB,EAAE,MAAc,EAAE,MAAoB;IAC1F,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,mBAAmB,GAAG,MAAM,CAAC,CAAA;QAC/E,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;YACjD,MAAM,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QAC5D,CAAC;QACD,8EAA8E;QAC9E,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IAChD,CAAC;IACD,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,OAAO,CAAC,SAAS,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAChC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAA;QAC5F,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,SAAS;YAAE,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;IAC1F,CAAC;AACH,CAAC"}

package/dist/agent-runtime/graph/nodes.d.ts

@@ -0,0 +1,39 @@
+import { type OpenSpecRoleContext } from '../openspec.js';
+import { type AcceptanceReport, type PipelineContext } from '../../installer/runtime/pipeline-state.js';
+import type { AgentResult, AgentRole, RuntimeConfig } from '../executor-types.js';
+import { type FrozenCriterion } from '../prompts.js';
+import type { WorkflowNode, WorkflowState } from '../workflow-types.js';
+import { type ReviewPolicy } from './review-policy.js';
+import type { RoleInvoker } from './roles.js';
+import type { CoreNodeId, CoreStateType, DeveloperRecord, VerificationRecord } from './state.js';
+/** Autonomous investigation passes before a low-confidence design asks or proceeds. */
+export declare const MAX_DEEPEN_PASSES = 1;
+export interface CoreNodeDeps {
+    archiveApproved?: () => boolean;
+    context: PipelineContext;
+    config: RuntimeConfig;
+    openspec: Record<AgentRole, OpenSpecRoleContext>;
+    change: string;
+    /** Development visits allowed per invocation, including correction cycles. */
+    attempts: number;
+    policy: ReviewPolicy;
+    invoke: RoleInvoker;
+    /** Host-facing narration of what the runtime did with a role's reply. */
+    note(role: AgentRole, text: string): void;
+    onVerificationOutput?: (text: string) => void;
+}
+type CoreNode = WorkflowNode<CoreStateType>;
+/** Attempts count from the latest explicit resume: a human continuing a blocked run grants a fresh budget. */
+export declare function developerVisitsSinceResume(checkpoint: WorkflowState): number;
+/** The developer's structured summary, or an honest prose record when the provider returned text. */
+export declare function developerRecord(output: Record<string, unknown> | undefined, text: string, result: AgentResult, provider: string): DeveloperRecord;
+/**
+ * The acceptance report Core records for the reviewer: the frozen criteria the
+ * reviewer certified by coordinates, the verification commands Core actually ran
+ * as required checks, repositories admitted without a check as unavailable ones,
+ * and the reviewer's own inspections as supplementary evidence.
+ */
+export declare function buildAcceptanceReport(criteria: FrozenCriterion[], verification: VerificationRecord | null, raw: unknown): AcceptanceReport;
+/** The five Core phases as LangGraph nodes. Declaration order defines "downstream" for invalidation. */
+export declare function coreNodes(deps: CoreNodeDeps): Record<CoreNodeId, CoreNode>;
+export {};

package/dist/agent-runtime/graph/nodes.js

@@ -0,0 +1,321 @@
+import { addDeveloperChecks, bindPlan, expandedPlanCommands, initializeVerificationPlan, readVerificationPlan, validateProposedChecks } from '../verification-plan.js';
+import path from 'node:path';
+import { OpenSpecTools } from '../openspec.js';
+import { candidateManifest, fingerprintCandidate, frozenAcceptanceCriteria, recordAcceptance, transitionPipeline, validateAcceptanceReport, verifyPipeline, } from '../../installer/runtime/pipeline-state.js';
+import { ARCHITECT_OUTPUT_SCHEMA, DEVELOPER_OUTPUT_SCHEMA, REVIEW_OUTPUT_SCHEMA, correctionInstructions, deepenInstructions, roleInstructions } from '../prompts.js';
+import { archive, child, journal, object, parseArchitecture, proposedVerification, write, writeDesignConfidence } from './artifacts.js';
+import { evaluateReview } from './review-policy.js';
+import { boundedReviewManifest, reviewChanges } from '../review-context.js';
+/** Autonomous investigation passes before a low-confidence design asks or proceeds. */
+export const MAX_DEEPEN_PASSES = 1;
+const DEVELOPER_SUMMARY_LIMIT = 32_000;
+/** Deterministic steps spend nothing; provider spend is reported by the role invoker as it happens. */
+const NO_SPEND = { costUsd: 0, inputTokens: 0, outputTokens: 0 };
+function failed(error) { return { status: 'failed', error }; }
+function plural(count, noun) { return `${count} ${noun}${count === 1 ? '' : 's'}`; }
+function feedbackFor(state) {
+    return { verification: state.verifyResult, review: state.review };
+}
+/** Attempts count from the latest explicit resume: a human continuing a blocked run grants a fresh budget. */
+export function developerVisitsSinceResume(checkpoint) {
+    const resumed = [...checkpoint.events].reverse().find(event => event.type === 'workflow_resumed');
+    return checkpoint.history.filter(attempt => attempt.stepId === 'developer' && (!resumed || attempt.startedAt >= resumed.timestamp)).length;
+}
+function uncoveredRepositories(context, plan) {
+    return context.repositories.filter(repository => !plan.some(command => command.repositoryId === repository.id)).map(repository => repository.id);
+}
+function strings(value, limit) {
+    return Array.isArray(value) ? value.filter((item) => typeof item === 'string' && item.trim().length > 0).map(item => item.trim().slice(0, 1000)).slice(0, limit) : [];
+}
+/** The developer's structured summary, or an honest prose record when the provider returned text. */
+export function developerRecord(output, text, result, provider) {
+    const base = { provider, ...(result.sessionId ? { sessionId: result.sessionId } : {}) };
+    if (!output || typeof output.summary !== 'string' || !output.summary.trim()) {
+        return { ...base, summary: text.slice(-DEVELOPER_SUMMARY_LIMIT), files: [], tests: [], incomplete: [], structured: false };
+    }
+    const incomplete = Array.isArray(output.incomplete) ? output.incomplete.flatMap(item => {
+        const entry = item && typeof item === 'object' && !Array.isArray(item) ? item : undefined;
+        return entry && typeof entry.task === 'string' && entry.task.trim() ? [{ task: entry.task.trim().slice(0, 1000), reason: typeof entry.reason === 'string' ? entry.reason.trim().slice(0, 2000) : '' }] : [];
+    }).slice(0, 200) : [];
+    return {
+        ...base, structured: true,
+        summary: output.summary.trim().slice(-DEVELOPER_SUMMARY_LIMIT),
+        files: strings(output.files, 500), tests: strings(output.tests, 500),
+        ...(typeof output.verification === 'string' && output.verification.trim() ? { verification: output.verification.trim().slice(0, 4000) } : {}),
+        incomplete,
+    };
+}
+function architectNode(deps) {
+    const { context, config, change, invoke, note } = deps;
+    const accept = (output) => {
+        const architecture = parseArchitecture(object(output));
+        if (config.efficiency?.planning === 'full' || context.repositories.length > 1 || /\b(?:migration|security|authentication|authorization|public contract|public api|migraci[oó]n|seguridad)\b/i.test(context.specs.map(spec => spec.title + ' ' + spec.description).join('\n')))
+            architecture.planningDepth = 'full';
+        // Malformed proposals are repaired inside the same session, like any other structural defect.
+        proposedVerification(context, config.verification, architecture.verification);
+        return architecture;
+    };
+    return {
+        effect: 'write', ends: ['developer'],
+        async run(state, step) {
+            transitionPipeline(context, 'architect', 'running');
+            // A resumed node collects the requester's answer first, so the pass that
+            // asked the question is never repeated.
+            const answers = [...state.answers];
+            const fresh = [];
+            if (step.pending?.kind === 'question') {
+                const reply = step.interrupt(step.pending);
+                answers.push(reply.answer);
+                fresh.push(reply.answer);
+                note('architect', 'Continuing the architecture with the answer to the blocking question.');
+            }
+            const prompt = roleInstructions('architect', context, change, { definition: config.rolePrompts?.architect, verification: config.verification, answers, planning: config.efficiency?.planning });
+            const first = await invoke('architect', step, { prompt, structured: true, outputSchema: ARCHITECT_OUTPUT_SCHEMA }, accept);
+            if (!first.ok)
+                return failed(first.error);
+            let architecture = first.value;
+            let passes = state.deepenPasses;
+            if (architecture.confidence === 'low' && passes < MAX_DEEPEN_PASSES) {
+                passes += 1;
+                note('architect', `Design confidence is low${architecture.question ? ` (${architecture.question})` : ''}; asking the architect to investigate the code further before deciding.`);
+                const second = await invoke('architect', step, { kind: 'deepen', prompt: deepenInstructions(architecture.question), fallbackPrompt: prompt + '\nPrevious response (bounded):\n' + first.text.slice(-32_000) + '\n' + deepenInstructions(architecture.question), structured: true, outputSchema: ARCHITECT_OUTPUT_SCHEMA, resumeSessionId: first.result.sessionId }, accept);
+                if (second.ok)
+                    architecture = second.value;
+                else
+                    note('architect', `The investigation pass could not be used (${second.error}); keeping the first design.`);
+            }
+            let assumed = false;
+            if (architecture.confidence === 'low') {
+                const question = architecture.question ?? 'The architect could not choose between several plausible designs; inspect proposal.md and state the intended behavior.';
+                if ((config.architect?.onLowConfidence ?? 'ask') === 'ask') {
+                    // The draft artifacts are written first so the requester can read the
+                    // proposal while answering; the resumed pass replaces them.
+                    writeDesignConfidence(context, change, architecture);
+                    transitionPipeline(context, 'architect', 'blocked', 'Design confidence is low');
+                    note('architect', 'Design confidence is still low; pausing until the blocking question is answered.');
+                    step.interrupt({ kind: 'question', question });
+                }
+                assumed = true;
+                note('architect', 'Design confidence is still low; proceeding on the stated assumptions because architect.onLowConfidence is "proceed".');
+            }
+            const workflow = new OpenSpecTools(deps.openspec.architect, step.signal);
+            workflow.assertParticipation();
+            const applied = await workflow.assertReady();
+            const specs = Object.keys((await workflow.status()).artifactPaths).length ? (applied.contextFiles.specs ?? []) : [];
+            const names = (Array.isArray(specs) ? specs : [specs]).map(file => path.basename(path.dirname(file)));
+            const proposed = proposedVerification(context, config.verification, architecture.verification);
+            writeDesignConfidence(context, change, architecture, { assumed });
+            const effective = initializeVerificationPlan(context, config.verification, proposed, config.efficiency?.verification?.maxConcurrency);
+            bindPlan(context, effective);
+            const plan = expandedPlanCommands(context, effective);
+            const uncovered = uncoveredRepositories(context, plan);
+            transitionPipeline(context, 'architect', 'done');
+            note('architect', `Architecture written: ${plural(applied.progress.total, 'task')}, spec${names.length === 1 ? '' : 's'} ${names.join(', ')}, confidence ${architecture.confidence}.`
+                + (proposed.length ? ` Verification proposed by the architect: ${proposed.map(command => [command.command, ...command.args].join(' ')).join('; ')}.` : '')
+                + (uncovered.length ? ` No verification command for ${uncovered.join(', ')}; the reviewer will inspect that work without automated checks.` : ''));
+            const record = {
+                change, tasks: applied.progress.total, specs: names, confidence: architecture.confidence,
+                planningDepth: architecture.planningDepth, referencePatterns: architecture.referencePatterns, riskFlags: architecture.riskFlags,
+                ...(architecture.planningReason ? { planningReason: architecture.planningReason } : {}),
+                ...(architecture.question ? { question: architecture.question } : {}), ...(assumed ? { assumed: true } : {}),
+            };
+            return {
+                status: 'succeeded', next: 'developer',
+                update: { plan, unverifiedRepositories: uncovered, architecture: record, answers: fresh, deepenPasses: passes },
+                output: { change, verification: plan, unverifiedRepositories: uncovered, confidence: architecture.confidence, assumed, deepenPasses: passes },
+            };
+        },
+    };
+}
+function developerNode(deps) {
+    const { context, config, change, invoke, note } = deps;
+    return {
+        effect: 'write', ends: ['verify'],
+        async run(state, step) {
+            if (developerVisitsSinceResume(step.checkpoint) > deps.attempts) {
+                return { status: 'blocked', error: 'Implementation correction limit reached; inspect the feedback in the log and resume to grant more attempts', usage: NO_SPEND };
+            }
+            transitionPipeline(context, 'developer', 'running');
+            await new OpenSpecTools(deps.openspec.developer, step.signal).assertReady();
+            const feedback = feedbackFor(state);
+            const provider = config.agents.developer.provider;
+            const full = roleInstructions('developer', context, change, { definition: config.rolePrompts?.developer, feedback, verification: state.plan }) + (config.efficiency?.acceptDeveloperChecks !== false ? '\nYou may propose verificationChecks in your JSON summary. These are additive required checks, never replacements for the baseline. Use kind command with structured command/args, or kind harness with entrypoint and 1–8 relative source files (64 KiB each, 256 KiB total). Core persists harnesses outside delivery, appends the absolute entrypoint to argv and supplies SPECRAILS_CHECK_REPO_ROOT. Stable keys revise your own checks; omission retains them. Do not claim a check passed until Core has executed it.' : '');
+            const previous = state.development;
+            const resumable = previous?.sessionId !== undefined && previous.provider === provider && developerVisitsSinceResume(step.checkpoint) > 1;
+            const outcome = await invoke('developer', step, {
+                kind: developerVisitsSinceResume(step.checkpoint) > 1 ? 'correction' : 'initial',
+                ...(resumable
+                    ? { prompt: correctionInstructions('developer', feedback), resumeSessionId: previous.sessionId, fallbackPrompt: full }
+                    : { prompt: full }),
+                structured: true, lenient: true, outputSchema: DEVELOPER_OUTPUT_SCHEMA,
+            }, (output, text, result) => {
+                if (!output && /"verificationChecks"\s*:/.test(text))
+                    throw new Error('Malformed developer verificationChecks response');
+                const checks = validateProposedChecks(context, output?.verificationChecks);
+                if (checks.length && config.efficiency?.acceptDeveloperChecks === false)
+                    throw new Error('Developer verification proposals are disabled by the frozen policy');
+                return { ...developerRecord(output, text, result, provider), ...(checks.length ? { verificationChecks: checks } : {}) };
+            });
+            if (!outcome.ok)
+                return failed(outcome.error);
+            new OpenSpecTools(deps.openspec.developer, step.signal).assertParticipation();
+            const record = outcome.value;
+            const effective = addDeveloperChecks(context, record.verificationChecks ?? []);
+            bindPlan(context, effective);
+            note('developer', record.structured
+                ? `Developer finished: ${plural(record.files.length, 'file')} changed, ${plural(record.tests.length, 'test file')} touched${record.incomplete.length ? `, ${plural(record.incomplete.length, 'task')} left incomplete` : ''}.`
+                : 'Developer finished without the structured summary; the prose summary is recorded instead.');
+            for (const item of record.incomplete)
+                note('developer', `Pending task: ${item.task} — ${item.reason}`);
+            if (record.structured && record.incomplete.length && record.files.length === 0 && record.tests.length === 0) {
+                return { status: 'blocked', error: `Developer could not make progress: ${record.incomplete.map(item => `${item.task}: ${item.reason}`).join('; ')}`, output: record };
+            }
+            return {
+                status: 'succeeded', next: 'verify', update: { development: record, plan: expandedPlanCommands(context, effective) },
+                output: { summary: record.summary, provider, ...(record.sessionId ? { sessionId: record.sessionId } : {}), files: record.files, tests: record.tests, incomplete: record.incomplete, structured: record.structured },
+            };
+        },
+    };
+}
+function verifyNode(deps) {
+    const { context, note } = deps;
+    return {
+        effect: 'write', ends: ['reviewer', 'developer'],
+        async run(_state, step) {
+            // Unchecked tasks are developer feedback, not a workflow failure: the
+            // developer sees exactly which tasks remain and continues its session.
+            const workflow = new OpenSpecTools(deps.openspec.developer, step.signal);
+            const applied = await workflow.assertReady();
+            const open = applied.tasks.filter(task => !task.done).map(task => task.description);
+            if (open.length) {
+                note('developer', `Verification skipped: ${plural(open.length, 'task')} still unchecked in tasks.md; returning to the developer.`);
+                const evidence = { valid: false, reason: 'Required implementation tasks remain unchecked in tasks.md', incompleteTasks: open, unverifiedRepositories: [], commands: [] };
+                return { status: 'succeeded', next: 'developer', update: { verifyResult: evidence }, output: evidence, usage: NO_SPEND };
+            }
+            const effective = readVerificationPlan(context);
+            if (!effective)
+                throw new Error('Verification plan is unavailable');
+            const plan = expandedPlanCommands(context, effective);
+            const uncovered = uncoveredRepositories(context, plan);
+            const receipt = await verifyPipeline(context, { kind: 'full', planHash: effective.planHash, commands: plan, ...(uncovered.length ? { unverified: true } : {}) }, deps.onVerificationOutput, step.signal, { onEvidence: async (kind, payload) => { await step.reportEfficiencyActivity?.(kind, payload); }, maxConcurrency: effective.executionPolicy.maxConcurrency, ...(step.remainingBudget().maxDurationMs === undefined ? {} : { deadline: Date.now() + step.remainingBudget().maxDurationMs }) });
+            const evidence = {
+                valid: receipt.valid, ...(receipt.reason ? { reason: receipt.reason } : {}), receiptId: receipt.id, unverifiedRepositories: uncovered,
+                commands: receipt.commands.map(({ evidenceId, repositoryId, command, args, exitCode, output }) => ({ ...(evidenceId ? { evidenceId } : {}), repositoryId, command, args, exitCode, output: output.slice(-2000) })),
+            };
+            if (!receipt.valid) {
+                note('developer', `Verification failed (${receipt.reason ?? 'a command failed'}); returning to the developer with the exact output.`);
+                return { status: 'succeeded', next: 'developer', update: { verifyResult: evidence }, output: evidence, usage: NO_SPEND };
+            }
+            transitionPipeline(context, 'developer', 'done');
+            note('developer', plan.length ? `Verification passed: ${plural(plan.length, 'command')} exited 0.` : 'No verification commands available; relying on task completion and review.');
+            return { status: 'succeeded', next: 'reviewer', update: { verifyResult: evidence }, output: evidence, usage: NO_SPEND };
+        },
+    };
+}
+/**
+ * The acceptance report Core records for the reviewer: the frozen criteria the
+ * reviewer certified by coordinates, the verification commands Core actually ran
+ * as required checks, repositories admitted without a check as unavailable ones,
+ * and the reviewer's own inspections as supplementary evidence.
+ */
+export function buildAcceptanceReport(criteria, verification, raw) {
+    const input = raw && typeof raw === 'object' && !Array.isArray(raw) ? raw : {};
+    const rows = Array.isArray(input.criteria) ? input.criteria.map(item => object(item)) : [];
+    const certified = criteria.map((item) => {
+        const row = rows.find(candidate => String(candidate.specId) === item.specId && candidate.criterionIndex === item.criterionIndex);
+        if (!row)
+            throw new Error(`Invalid acceptance report: criterion ${item.specId}#${item.criterionIndex} was not certified`);
+        return { ...item, status: row.status, evidence: row.evidence, ...(row.exception !== undefined ? { exception: row.exception } : {}) };
+    });
+    const checks = [];
+    for (const command of verification?.commands ?? []) {
+        checks.push({
+            name: `${command.repositoryId}: ${[command.command, ...command.args].join(' ')}`,
+            status: command.exitCode === 0 ? 'passed' : 'failed', required: true,
+            evidence: [`Verification receipt ${verification?.receiptId ?? 'unknown'}: exit code ${String(command.exitCode)}`],
+            scope: `Core ran the repository's own verification command in ${command.repositoryId} after the developer finished.`,
+            limitations: 'Proves only what this command exercises; behavior outside its tests, other repositories and manual scenarios are not covered.',
+        });
+    }
+    for (const repositoryId of verification?.unverifiedRepositories ?? []) {
+        checks.push({
+            name: `automated verification for ${repositoryId}`, status: 'unavailable', required: false,
+            evidence: ['No verification command was configured by the host or proposed by the architect for this repository.'],
+            scope: 'No automated check ran for this repository.', limitations: 'Acceptance relies on reviewer inspection alone for this repository.',
+        });
+    }
+    // Reviewer inspections are evidence, never gates: only Core's own subprocess receipts are required checks.
+    for (const item of Array.isArray(input.checks) ? input.checks : [])
+        checks.push({ ...object(item), required: false });
+    return { criteria: certified, checks, findings: (Array.isArray(input.findings) ? input.findings : []) };
+}
+function reviewerNode(deps) {
+    const { context, change, invoke, note, policy, config } = deps;
+    const criteria = frozenAcceptanceCriteria(context);
+    return {
+        effect: 'write', ends: ['archive', 'developer'],
+        async run(state, step) {
+            transitionPipeline(context, 'reviewer', 'running');
+            const manifest = boundedReviewManifest(candidateManifest(journal(context)));
+            const delta = reviewChanges(state.review?.manifest, manifest);
+            const prompt = roleInstructions('reviewer', context, change, { definition: config.rolePrompts?.reviewer, feedback: feedbackFor(state), verification: state.plan, policy, criteria, developer: state.development });
+            const incremental = config.efficiency?.reviewMode !== 'full' && delta.mode === 'incremental' && state.review?.sessionId;
+            const followup = correctionInstructions('reviewer', feedbackFor(state)) + '\nChanges since YOUR previous reviewed candidate:\n' + JSON.stringify(delta.changes)
+                + '\nRecertify EVERY current acceptance criterion; previous met results are not current evidence:\n' + JSON.stringify(criteria)
+                + '\nCurrent developer handoff:\n' + JSON.stringify(state.development);
+            const outcome = await invoke('reviewer', step, { kind: state.review ? 'correction' : 'initial', prompt: incremental ? followup : prompt, ...(incremental ? { resumeSessionId: state.review.sessionId, fallbackPrompt: prompt } : {}), structured: true, outputSchema: REVIEW_OUTPUT_SCHEMA }, output => {
+                const raw = object(output);
+                const review = evaluateReview(raw, policy);
+                const report = buildAcceptanceReport(criteria, state.verifyResult, raw.acceptance);
+                try {
+                    validateAcceptanceReport(context, report);
+                }
+                catch (error) {
+                    throw new Error('Invalid acceptance report: ' + (error instanceof Error ? error.message : String(error)));
+                }
+                return { ...review, report };
+            });
+            if (!outcome.ok)
+                return failed(outcome.error);
+            const workflow = new OpenSpecTools(deps.openspec.reviewer, step.signal);
+            workflow.assertParticipation();
+            await workflow.assertReady();
+            const { record, approved, report } = outcome.value;
+            const reviewedRecord = { ...record, manifest, ...(outcome.result.sessionId ? { sessionId: outcome.result.sessionId } : {}) };
+            // Acceptance evidence is bound to the exact candidate before the reviewer verdict is recorded.
+            recordAcceptance(context, report);
+            if (!approved) {
+                transitionPipeline(context, 'reviewer', 'blocked', 'Review requests corrections');
+                note('reviewer', `Review requested corrections (score ${record.score}, ${plural(record.issues.length, 'issue')}); returning to the developer.`);
+                return { status: 'succeeded', next: 'developer', update: { review: reviewedRecord }, output: reviewedRecord };
+            }
+            write(child(context.artifactRoot, 'openspec/changes/' + change + '/confidence-score.json'), JSON.stringify({ change, overall: record.score, aspects: record.aspects, summary: record.summary }, null, 2) + '\n');
+            transitionPipeline(context, 'reviewer', 'done');
+            note('reviewer', `Review approved with score ${record.score}: ${record.summary}`);
+            const reviewed = { ...reviewedRecord, candidateHash: fingerprintCandidate(journal(context)) };
+            return { status: 'succeeded', next: 'archive', update: { review: reviewed }, output: reviewed };
+        },
+    };
+}
+function archiveNode(deps) {
+    const { context, config, change } = deps;
+    return {
+        effect: 'write', ends: [],
+        async run(_state, step) {
+            if (journal(context).phases.archive.status !== 'done' && config.approvalBeforeArchive && !deps.archiveApproved?.()) {
+                // Pauses until the host grants the approval; a resumed node passes straight
+                // through. The pause itself spends nothing, and says so.
+                step.reportUsage(NO_SPEND);
+                step.interrupt({ kind: 'approval', reason: 'Approve archive after inspecting the verified implementation' });
+            }
+            await archive(context, change, step.signal);
+            const record = { archivePath: journal(context).archivePath, deliveryOwner: context.ownership.git };
+            return { status: 'succeeded', next: null, update: { archived: record }, output: record, usage: NO_SPEND };
+        },
+    };
+}
+/** The five Core phases as LangGraph nodes. Declaration order defines "downstream" for invalidation. */
+export function coreNodes(deps) {
+    return { architect: architectNode(deps), developer: developerNode(deps), verify: verifyNode(deps), reviewer: reviewerNode(deps), archive: archiveNode(deps) };
+}
+//# sourceMappingURL=nodes.js.map