taskforce-loop-engineering 0.10.0 → 0.13.0

package/lib/action-reservations.mjs

@@ -0,0 +1,196 @@
+import { mkdir, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+
+const ACTION_KINDS = new Set(['paid_api', 'notification', 'deployment', 'process_control', 'publication', 'external_message', 'gated_mutation']);
+const TERMINAL_STATES = new Set(['settled', 'released']);
+
+function requireText(value, label) {
+  if (typeof value !== 'string' || value.trim() === '') throw new Error(`${label} must be a non-empty string.`);
+  return value;
+}
+
+function canonical(value) {
+  if (Array.isArray(value)) return value.map(canonical);
+  if (value && typeof value === 'object') return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonical(value[key])]));
+  return value;
+}
+
+export function actionRequestFingerprint(request, authorizationScope) {
+  requireText(authorizationScope, 'authorizationScope');
+  return createHash('sha256').update(JSON.stringify(canonical({ request, authorizationScope }))).digest('hex');
+}
+
+function safeKey(key) {
+  requireText(key, 'idempotencyKey');
+  if (!/^[a-zA-Z0-9][a-zA-Z0-9._:-]{0,199}$/.test(key)) throw new Error('idempotencyKey contains unsafe characters or is too long.');
+  return key;
+}
+
+function paths(root, key) {
+  const encoded = createHash('sha256').update(safeKey(key)).digest('hex');
+  const dir = path.join(root, 'runtime', 'loops', 'action-reservations');
+  return { dir, file: path.join(dir, `${encoded}.json`), lock: path.join(dir, `${encoded}.lock`) };
+}
+
+async function readJson(file) {
+  return JSON.parse(await readFile(file, 'utf8'));
+}
+
+async function atomicWrite(file, value) {
+  const temp = `${file}.${process.pid}.${randomUUID()}.tmp`;
+  await writeFile(temp, `${JSON.stringify(value, null, 2)}\n`, { flag: 'wx' });
+  await rename(temp, file);
+}
+
+async function acquireMutex(lock, timeoutMs = 5000) {
+  const deadline = Date.now() + timeoutMs;
+  while (true) {
+    try {
+      await mkdir(lock);
+      await writeFile(path.join(lock, 'owner.json'), JSON.stringify({ pid: process.pid, created_at: new Date().toISOString() }));
+      return;
+    } catch (error) {
+      if (error.code !== 'EEXIST') throw error;
+      const info = await stat(lock).catch(() => null);
+      if (info && Date.now() - info.mtimeMs > 30_000) await rm(lock, { recursive: true, force: true });
+      else if (Date.now() >= deadline) throw new Error('Timed out acquiring action reservation mutex.');
+      else await new Promise((resolve) => setTimeout(resolve, 10));
+    }
+  }
+}
+
+async function mutate(root, key, operation) {
+  const location = paths(root, key);
+  await mkdir(location.dir, { recursive: true });
+  await acquireMutex(location.lock);
+  try {
+    const record = await readJson(location.file).catch((error) => error.code === 'ENOENT' ? null : Promise.reject(error));
+    const result = await operation(record, location.file);
+    if (result.write) await atomicWrite(location.file, result.record);
+    return result.output ?? result.record;
+  } finally {
+    await rm(location.lock, { recursive: true, force: true });
+  }
+}
+
+export async function reserveAction(root, input) {
+  const key = safeKey(input.idempotencyKey);
+  const kind = requireText(input.kind, 'kind');
+  if (!ACTION_KINDS.has(kind)) throw new Error(`Unsupported action kind: ${kind}`);
+  const scope = requireText(input.authorizationScope, 'authorizationScope');
+  const fingerprint = actionRequestFingerprint(input.request, scope);
+  return mutate(root, key, async (record) => {
+    if (record) {
+      if (record.request_fingerprint !== fingerprint || record.kind !== kind || record.authorization.scope !== scope) {
+        throw new Error('Idempotency key is already bound to a different request or authorization scope.');
+      }
+      return { write: false, output: { created: false, duplicate: true, record } };
+    }
+    const now = new Date().toISOString();
+    const created = {
+      version: 1, idempotency_key: key, kind, state: 'reserved', request_fingerprint: fingerprint,
+      request: canonical(input.request), created_at: now, updated_at: now, fencing_counter: 0, claim: null,
+      authorization: { scope, state: 'reserved', reserved_at: now, consumed_at: null, released_at: null },
+      settlement: null, release: null, reconciliation: null, events: [{ type: 'reserved', at: now }]
+    };
+    return { write: true, record: created, output: { created: true, duplicate: false, record: created } };
+  });
+}
+
+export async function inspectAction(root, idempotencyKey) {
+  const location = paths(root, idempotencyKey);
+  return readJson(location.file).catch((error) => error.code === 'ENOENT' ? null : Promise.reject(error));
+}
+
+export async function claimAction(root, input) {
+  const leaseMs = Number(input.leaseMs ?? 60_000);
+  if (!Number.isInteger(leaseMs) || leaseMs <= 0) throw new Error('leaseMs must be a positive integer.');
+  return mutate(root, input.idempotencyKey, async (record) => {
+    if (!record) throw new Error('Action must be reserved before it can be claimed.');
+    if (TERMINAL_STATES.has(record.state)) return { write: false, output: { claimed: false, reason: record.state, record } };
+    const nowMs = Date.now();
+    if (record.state === 'claimed') {
+      if (Date.parse(record.claim.lease_expires_at) > nowMs) return { write: false, output: { claimed: false, reason: 'lease_active', record } };
+      const at = new Date().toISOString();
+      const unknown = { ...record, state: 'unknown', updated_at: at, reconciliation: { required: true, reason: 'stale_lease', marked_at: at }, events: [...record.events, { type: 'outcome_unknown', reason: 'stale_lease', at }] };
+      return { write: true, record: unknown, output: { claimed: false, reason: 'reconcile_required', record: unknown } };
+    }
+    if (record.state === 'unknown') return { write: false, output: { claimed: false, reason: 'reconcile_required', record } };
+    const at = new Date().toISOString();
+    const token = Number(record.fencing_counter) + 1;
+    const claimed = { ...record, state: 'claimed', updated_at: at, fencing_counter: token, claim: { owner: requireText(input.owner, 'owner'), fencing_token: token, claimed_at: at, lease_expires_at: new Date(nowMs + leaseMs).toISOString() }, events: [...record.events, { type: 'claimed', fencing_token: token, at }] };
+    return { write: true, record: claimed, output: { claimed: true, fencingToken: token, record: claimed } };
+  });
+}
+
+function assertFence(record, token) {
+  if (record.state !== 'claimed' || record.claim?.fencing_token !== Number(token)) throw new Error('Stale or invalid fencing token.');
+}
+
+export async function markActionUnknown(root, input) {
+  return mutate(root, input.idempotencyKey, async (record) => {
+    if (!record) throw new Error('Action reservation not found.');
+    assertFence(record, input.fencingToken);
+    const at = new Date().toISOString();
+    const next = { ...record, state: 'unknown', updated_at: at, reconciliation: { required: true, reason: input.reason ?? 'upstream_outcome_unknown', marked_at: at }, events: [...record.events, { type: 'outcome_unknown', reason: input.reason ?? 'upstream_outcome_unknown', at }] };
+    return { write: true, record: next };
+  });
+}
+
+export async function settleAction(root, input) {
+  return mutate(root, input.idempotencyKey, async (record) => {
+    if (!record) throw new Error('Action reservation not found.');
+    if (record.state === 'settled') return { write: false, output: { settled: false, duplicate: true, record } };
+    assertFence(record, input.fencingToken);
+    const at = new Date().toISOString();
+    const next = { ...record, state: 'settled', updated_at: at, authorization: { ...record.authorization, state: 'consumed', consumed_at: at }, settlement: { status: 'succeeded', evidence: input.evidence ?? null, settled_at: at, fencing_token: Number(input.fencingToken) }, reconciliation: null, events: [...record.events, { type: 'settled', fencing_token: Number(input.fencingToken), at }] };
+    return { write: true, record: next, output: { settled: true, duplicate: false, record: next } };
+  });
+}
+
+export async function releaseAction(root, input) {
+  return mutate(root, input.idempotencyKey, async (record) => {
+    if (!record) throw new Error('Action reservation not found.');
+    if (record.state === 'settled') throw new Error('Consumed authorization cannot be released.');
+    if (record.state === 'released') return { write: false, output: { released: false, duplicate: true, record } };
+    if (record.state === 'claimed') assertFence(record, input.fencingToken);
+    if (record.state === 'unknown') throw new Error('Unknown upstream outcome must be reconciled before release.');
+    const at = new Date().toISOString();
+    const next = { ...record, state: 'released', updated_at: at, authorization: { ...record.authorization, state: 'released', released_at: at }, release: { reason: requireText(input.reason, 'reason'), evidence: input.evidence ?? null, released_at: at }, events: [...record.events, { type: 'released', at }] };
+    return { write: true, record: next, output: { released: true, duplicate: false, record: next } };
+  });
+}
+
+export async function reconcileAction(root, input) {
+  return mutate(root, input.idempotencyKey, async (record) => {
+    if (!record) throw new Error('Action reservation not found.');
+    if (record.state !== 'unknown') throw new Error('Only an unknown action outcome can be reconciled.');
+    if (!['accepted', 'not_accepted'].includes(input.outcome)) throw new Error('outcome must be accepted or not_accepted.');
+    const at = new Date().toISOString();
+    if (input.outcome === 'accepted') {
+      const next = { ...record, state: 'settled', updated_at: at, authorization: { ...record.authorization, state: 'consumed', consumed_at: at }, settlement: { status: 'succeeded', evidence: input.evidence ?? null, settled_at: at, reconciled: true }, reconciliation: { required: false, outcome: 'accepted', evidence: input.evidence ?? null, reconciled_at: at }, events: [...record.events, { type: 'reconciled_accepted', at }] };
+      return { write: true, record: next };
+    }
+    const next = { ...record, state: 'reserved', updated_at: at, claim: null, reconciliation: { required: false, outcome: 'not_accepted', evidence: input.evidence ?? null, reconciled_at: at }, events: [...record.events, { type: 'reconciled_not_accepted', at }] };
+    return { write: true, record: next };
+  });
+}
+
+export const actionAdapters = Object.freeze(Object.fromEntries(['paid_api', 'notification', 'deployment'].map((kind) => [kind, Object.freeze({
+  kind,
+  reserve: (root, input) => reserveAction(root, { ...input, kind }),
+  claim: claimAction,
+  markUnknown: markActionUnknown,
+  settle: settleAction,
+  release: releaseAction,
+  reconcile: reconcileAction,
+  inspect: inspectAction
+})])));
+
+export async function migrateLegacyActionArtifact(root, legacy) {
+  const key = legacy.idempotency_key ?? legacy.idempotencyKey;
+  const request = legacy.request ?? { legacy_artifact: legacy.source ?? 'unknown' };
+  const scope = legacy.authorization_scope ?? legacy.authorization?.scope ?? 'legacy:unscoped';
+  return reserveAction(root, { idempotencyKey: key, kind: legacy.kind ?? 'gated_mutation', request, authorizationScope: scope });
+}

package/lib/core.mjs

@@ -947,6 +947,155 @@ export async function ensureQueueDirs(root, queue) {
     .map((subdir) => mkdir(queueSubdirFor(root, queue, subdir), { recursive: true })));
 }
 
+const PARKED_WAIT_KINDS = new Set(['human_input', 'external_condition']);
+
+function normalizeParkPolicy(value = {}) {
+  const positive = (input, fallback) => Number.isFinite(Number(input)) && Number(input) > 0 ? Number(input) : fallback;
+  return {
+    timeoutMs: positive(value.timeoutMs, 24 * 60 * 60 * 1000),
+    reminderIntervalMs: positive(value.reminderIntervalMs, 60 * 60 * 1000),
+    escalationIntervalMs: positive(value.escalationIntervalMs, 24 * 60 * 60 * 1000),
+    maxReminders: Math.max(0, Number.isInteger(Number(value.maxReminders)) ? Number(value.maxReminders) : 3)
+  };
+}
+
+export async function parkQueueTask(root, options = {}) {
+  const queue = normalizeLoopId(options.queue);
+  const taskId = safeTaskId(options.taskId);
+  const kind = String(options.kind ?? 'external_condition');
+  if (!PARKED_WAIT_KINDS.has(kind)) throw new Error(`Unsupported wait kind: ${kind}`);
+  const found = await findTaskFile(root, queue, taskId, ['inbox', 'active', 'waiting', 'failed']);
+  if (!found) throw new Error(`Task not found: ${taskId}`);
+  const task = await readJson(found.file);
+  if (found.subdir === 'waiting' && task.parked?.state) return { outcome: 'already_parked', task, file: path.relative(root, found.file) };
+  const now = options.now ? new Date(options.now) : new Date();
+  if (!Number.isFinite(now.getTime())) throw new Error(`Invalid park time: ${options.now}`);
+  const waitId = options.waitId ? normalizeLoopId(options.waitId) : `${taskId}.${isoStamp(now)}`;
+  const parked = {
+    version: 2,
+    wait_id: waitId,
+    kind,
+    state: kind === 'human_input' ? 'waiting_for_human' : 'external_condition_wait',
+    reason: String(options.reason ?? 'Waiting for an external condition.'),
+    parked_at: now.toISOString(),
+    policy: normalizeParkPolicy(options.policy),
+    reminder_count: 0,
+    escalation_count: 0,
+    last_notification_at: null,
+    recovery: {
+      verification_required: true,
+      signal_sha256: null,
+      verified_at: null
+    },
+    execution_boundary: {
+      key: String(options.executionKey ?? waitId),
+      action_executed: Boolean(options.actionExecuted),
+      resumed_at: null
+    },
+    authorization: options.authorization ?? task.parked?.authorization ?? null
+  };
+  const waitingFile = path.join(queueSubdirFor(root, queue, 'waiting'), path.basename(found.file));
+  await writeJson(waitingFile, { ...task, status: 'parked', parked });
+  if (path.resolve(found.file) !== path.resolve(waitingFile)) await rm(found.file, { force: true });
+  return { outcome: 'parked', task: { ...task, status: 'parked', parked }, file: path.relative(root, waitingFile) };
+}
+
+function parkedDisplayState(parked, now = Date.now()) {
+  if (!parked) return 'waiting';
+  const timedOut = now >= Date.parse(parked.parked_at) + Number(parked.policy?.timeoutMs ?? Infinity);
+  if (timedOut || Number(parked.escalation_count ?? 0) > 0) return 'timed_out_or_escalated';
+  return parked.state ?? (parked.kind === 'human_input' ? 'waiting_for_human' : 'external_condition_wait');
+}
+
+export async function tickParkedTasks(root, options = {}) {
+  const queue = normalizeLoopId(options.queue);
+  const now = options.now ? new Date(options.now) : new Date();
+  if (!Number.isFinite(now.getTime())) throw new Error(`Invalid tick time: ${options.now}`);
+  if (!options.notifyCommand && !options.dryRun) throw new Error('queue-wait-tick requires --notify-command unless --dry-run is used.');
+  const evidenceDir = path.join(queueDirFor(root, queue), 'wait-notifications');
+  await mkdir(evidenceDir, { recursive: true });
+  const results = [];
+  for (const file of await listJson(queueSubdirFor(root, queue, 'waiting'))) {
+    const full = path.join(queueSubdirFor(root, queue, 'waiting'), file);
+    const task = await readJson(full);
+    if (!task.parked?.wait_id) continue;
+    const parked = task.parked;
+    const policy = normalizeParkPolicy(parked.policy);
+    const elapsed = now.getTime() - Date.parse(parked.parked_at);
+    const lastAt = parked.last_notification_at ? Date.parse(parked.last_notification_at) : 0;
+    const notificationElapsed = lastAt ? now.getTime() - lastAt : Infinity;
+    const timedOut = elapsed >= policy.timeoutMs;
+    const type = timedOut && notificationElapsed >= policy.escalationIntervalMs
+      ? 'escalation'
+      : Number(parked.reminder_count ?? 0) < policy.maxReminders && notificationElapsed >= policy.reminderIntervalMs
+        ? 'reminder'
+        : null;
+    if (!type) {
+      results.push({ taskId: task.id, waitId: parked.wait_id, outcome: 'throttled', state: parkedDisplayState(parked, now.getTime()) });
+      continue;
+    }
+    const sequence = type === 'reminder' ? Number(parked.reminder_count ?? 0) + 1 : Number(parked.escalation_count ?? 0) + 1;
+    const evidenceFile = path.join(evidenceDir, `${safeTaskId(task.id)}.${normalizeLoopId(parked.wait_id)}.${type}.${sequence}.json`);
+    if (await exists(evidenceFile)) {
+      results.push({ taskId: task.id, waitId: parked.wait_id, outcome: 'already_notified', type, sequence });
+      continue;
+    }
+    const message = `Loop task parked (${parked.kind}): ${task.title}\nreason: ${parked.reason}\nstate: ${timedOut ? 'timed_out_or_escalated' : parked.state}\nwait: ${parked.wait_id}`;
+    if (options.dryRun) {
+      results.push({ taskId: task.id, waitId: parked.wait_id, outcome: 'dry_run', type, sequence, message });
+      continue;
+    }
+    // Claim the sequence before the external send. After a crash, a later tick
+    // observes this durable boundary and will not duplicate the notification.
+    await writeJson(evidenceFile, { version: 1, queue, task_id: task.id, wait_id: parked.wait_id, type, sequence, status: 'sending', claimed_at: now.toISOString() });
+    const result = await runCommand(`${options.notifyCommand} ${shellQuote(message)}`, { cwd: root, timeoutMs: options.timeoutMs ?? 60_000 });
+    if (result.exitCode !== 0) {
+      await writeJson(evidenceFile, { version: 1, queue, task_id: task.id, wait_id: parked.wait_id, type, sequence, status: 'failed', attempted_at: now.toISOString(), result: compactCommandResult(result) });
+      results.push({ taskId: task.id, waitId: parked.wait_id, outcome: 'failed', type, result: compactCommandResult(result) });
+      continue;
+    }
+    const nextParked = {
+      ...parked,
+      policy,
+      state: timedOut ? 'timed_out_or_escalated' : parked.state,
+      reminder_count: Number(parked.reminder_count ?? 0) + (type === 'reminder' ? 1 : 0),
+      escalation_count: Number(parked.escalation_count ?? 0) + (type === 'escalation' ? 1 : 0),
+      last_notification_at: now.toISOString()
+    };
+    await writeJson(evidenceFile, { version: 1, queue, task_id: task.id, wait_id: parked.wait_id, type, sequence, status: 'sent', notified_at: now.toISOString(), result: compactCommandResult(result) });
+    await writeJson(full, { ...task, parked: nextParked });
+    results.push({ taskId: task.id, waitId: parked.wait_id, outcome: 'sent', type, sequence, evidence: path.relative(root, evidenceFile) });
+  }
+  return { queue, inspected: results.length, sent: results.filter((item) => item.outcome === 'sent').length, failed: results.filter((item) => item.outcome === 'failed').length, results };
+}
+
+export async function resumeParkedTask(root, options = {}) {
+  const queue = normalizeLoopId(options.queue);
+  const taskId = safeTaskId(options.taskId);
+  if (!options.verified || typeof options.recoverySignal !== 'string' || !options.recoverySignal.trim()) {
+    throw new Error('queue-wait-resume requires --verified and --recovery-signal.');
+  }
+  const found = await findTaskFile(root, queue, taskId, ['waiting', 'inbox']);
+  if (!found) throw new Error(`Parked task not found: ${taskId}`);
+  const task = await readJson(found.file);
+  if (found.subdir === 'inbox' && task.parked?.execution_boundary?.resumed_at) {
+    return { outcome: 'already_resumed', task, file: path.relative(root, found.file) };
+  }
+  if (!task.parked?.wait_id) throw new Error(`Task is not parked: ${taskId}`);
+  const signalSha256 = createHash('sha256').update(options.recoverySignal.trim()).digest('hex');
+  const now = options.now ? new Date(options.now) : new Date();
+  const resumed = {
+    ...task.parked,
+    state: 'runnable',
+    recovery: { ...task.parked.recovery, signal_sha256: signalSha256, verified_at: now.toISOString() },
+    execution_boundary: { ...task.parked.execution_boundary, resumed_at: now.toISOString() }
+  };
+  const inboxFile = path.join(queueSubdirFor(root, queue, 'inbox'), path.basename(found.file));
+  await writeJson(inboxFile, { ...task, status: 'queued', parked: resumed, requeuedAt: now.toISOString(), requeuedFrom: 'waiting' });
+  if (path.resolve(found.file) !== path.resolve(inboxFile)) await rm(found.file, { force: true });
+  return { outcome: 'verified_and_requeued', signalSha256, task: { ...task, status: 'queued', parked: resumed }, file: path.relative(root, inboxFile) };
+}
+
 export function taskIdForTitle(title, date = new Date()) {
   const slug = (title || 'task')
     .toLowerCase()
@@ -1520,7 +1669,7 @@ export function classifyLoopMessage(message) {
   const mentionsLoop = /(loop engineering|loop-engineering|task-runner|队列|queue|\bloop\b)/i.test(text);
   const statusIntent = mentionsLoop
     && /(查|看|检查|审计|状态|情况|进度|怎么样|为什么|失败|报错|健康|health|status|progress|audit|summar)/i.test(text);
-  const executeIntent = /(走\s*loop|继续(?:当前|这个)?\s*loop|给(?:当前|这个)?\s*loop\s*(?:补充|增加|加)|用\s*loop.*(?:解决|执行|完成|处理|修复|对齐|补齐|增强|开发|构建|绕过|避开|跳过|bypass|evade)|丢进.*loop|入队|enqueue|run[- ]?queue|立刻执行|立即执行|use\s+(?:loop engineering|the\s+loop)|run\s+(?:this|it|the\s+task).*(?:through|with)\s+(?:loop engineering|the\s+loop)|continue\s+(?:the\s+)?(?:current\s+)?loop|amend\s+(?:the\s+)?(?:current\s+)?loop)/i.test(text);
+  const executeIntent = /(走\s*loop|继续(?:当前|这个)?\s*loop|给(?:当前|这个)?\s*loop\s*(?:补充|增加|加)|用\s*loop.*(?:解决|执行|完成|处理|修复|对齐|补齐|增强|开发|构建|绕过|避开|跳过|bypass|evade)|(?:继续|开始|推进).*(?:开发|建设|完善|增强).*(?:loop engineering|loop-engineering|task-runner)|丢进.*loop|入队|enqueue|run[- ]?queue|立刻执行|立即执行|use\s+(?:loop engineering|the\s+loop)|run\s+(?:this|it|the\s+task).*(?:through|with)\s+(?:loop engineering|the\s+loop)|continue\s+(?:the\s+)?(?:current\s+)?loop|amend\s+(?:the\s+)?(?:current\s+)?loop)/i.test(text);
   const intent = executeIntent ? 'execute' : statusIntent ? 'status' : 'direct';
   return {
     intent,
@@ -1807,6 +1956,56 @@ export async function notifyTerminalTasks(root, options = {}) {
   };
 }
 
+export async function refreshTaskAcceptance(root, options = {}) {
+  const queue = normalizeLoopId(options.queue);
+  if (!options.taskId) throw new Error('queue-acceptance-refresh requires --task-id.');
+  await ensureQueueDirs(root, queue);
+  const located = await findTaskFile(root, queue, options.taskId);
+  if (!located) throw new Error(`Queue task not found: ${options.taskId}`);
+  const task = await readJson(located.file);
+  const dir = taskRuntimeDirFor(root, queue, task.id);
+  const checkpointsDir = path.join(dir, 'checkpoints');
+  const checkpointFiles = await listJson(checkpointsDir);
+  if (checkpointFiles.length === 0) return { queue, taskId: task.id, outcome: 'no_checkpoints' };
+  const judgementFile = path.join(dir, 'final_judgement.json');
+  const newestCheckpointMs = Math.max(...await Promise.all(checkpointFiles.map(async (file) => (await stat(path.join(checkpointsDir, file))).mtimeMs)));
+  if (await exists(judgementFile) && (await stat(judgementFile)).mtimeMs >= newestCheckpointMs) {
+    return { queue, taskId: task.id, outcome: 'already_current', judgement: path.relative(root, judgementFile) };
+  }
+
+  const contractFile = path.join(dir, 'task_contract.json');
+  const acceptanceFile = path.join(dir, 'acceptance_plan.json');
+  const devFile = path.join(dir, 'dev_plan.json');
+  const taskContract = { contract: await readJson(contractFile), file: path.relative(root, contractFile) };
+  const acceptancePlan = { plan: await readJson(acceptanceFile), file: path.relative(root, acceptanceFile) };
+  const devPlan = {
+    plan: await readJson(devFile),
+    file: path.relative(root, devFile),
+    checkpointsDir: path.relative(root, checkpointsDir),
+    reviewsDir: path.relative(root, path.join(dir, 'reviews'))
+  };
+  const checkpoints = await checkpointSummary(root, devPlan);
+  const acceptanceReviews = await writeAcceptanceReviews(root, queue, task, taskContract, acceptancePlan, devPlan);
+  const finalJudgement = await writeFinalJudgement(root, queue, task, taskContract, acceptancePlan, devPlan, checkpoints, acceptanceReviews, {
+    dispatchStatus: 'completed'
+  });
+  const status = queueStatusFromFinalJudgement('completed', finalJudgement);
+  const destinationName = status === 'completed' ? 'done' : status === 'project_in_progress' ? 'inbox' : 'failed';
+  const destination = path.join(queueSubdirFor(root, queue, destinationName), path.basename(located.file));
+  await writeJson(destination, { ...task, status: status === 'project_in_progress' ? 'queued' : status, acceptanceRefreshedAt: new Date().toISOString() });
+  if (destination !== located.file) await rm(located.file, { force: true });
+  return {
+    queue,
+    taskId: task.id,
+    outcome: 'refreshed',
+    status,
+    checkpointCount: checkpoints.count,
+    accepted: acceptanceReviews.accepted,
+    judgement: finalJudgement.file,
+    task: path.relative(root, destination)
+  };
+}
+
 function humanInputMessage(queue, task, checkpoint, gateId, language = 'en') {
   const blockers = Array.isArray(checkpoint.blockers) ? checkpoint.blockers : [];
   const blockerText = blockers.length
@@ -3241,11 +3440,29 @@ export async function queueStatus(root, queue) {
   const activeFiles = await listJson(queueSubdirFor(root, queue, 'active'));
   const lock = await readQueueLock(root, queue);
   const lockOwnerAlive = queueLockOwnerAlive(lock);
+  const waitingTasks = [];
+  for (const file of await listJson(queueSubdirFor(root, queue, 'waiting'))) {
+    const task = await readJson(path.join(queueSubdirFor(root, queue, 'waiting'), file));
+    waitingTasks.push({
+      taskId: task.id,
+      status: task.status,
+      waitId: task.parked?.wait_id ?? task.waitingGateId ?? null,
+      waitKind: task.parked?.kind ?? (task.status === 'waiting_for_human' ? 'human_input' : null),
+      displayState: task.parked ? parkedDisplayState(task.parked) : task.status,
+      parkedAt: task.parked?.parked_at ?? task.waitingSince ?? null,
+      reminderCount: Number(task.parked?.reminder_count ?? 0),
+      escalationCount: Number(task.parked?.escalation_count ?? 0),
+      authorizationState: task.parked?.authorization?.state ?? null,
+      actionExecuted: Boolean(task.parked?.execution_boundary?.action_executed)
+    });
+  }
   return {
     queue,
     queued: (await listJson(queueSubdirFor(root, queue, 'inbox'))).length,
     active: activeFiles.length,
-    waiting: (await listJson(queueSubdirFor(root, queue, 'waiting'))).length,
+    waiting: waitingTasks.length,
+    waitingStates: waitingTasks.reduce((counts, task) => ({ ...counts, [task.displayState]: (counts[task.displayState] ?? 0) + 1 }), {}),
+    waitingTasks,
     done: (await listJson(queueSubdirFor(root, queue, 'done'))).length,
     failed: (await listJson(queueSubdirFor(root, queue, 'failed'))).length,
     canceled: (await listJson(queueSubdirFor(root, queue, 'canceled'))).length,

package/lib/durable-journal.mjs

@@ -0,0 +1,90 @@
+import { appendFile, copyFile, mkdir, open, readFile, rename, writeFile } from 'node:fs/promises';
+import { createHash, randomUUID } from 'node:crypto';
+import path from 'node:path';
+
+const digest = (value) => createHash('sha256').update(value).digest('hex');
+const canonical = (value) => JSON.stringify(sortValue(value));
+function sortValue(value) {
+  if (Array.isArray(value)) return value.map(sortValue);
+  if (value && typeof value === 'object') return Object.fromEntries(Object.keys(value).sort().map((key) => [key, sortValue(value[key])]));
+  return value;
+}
+
+export class DurableJournal {
+  constructor(directory) {
+    this.directory = directory;
+    this.logFile = path.join(directory, 'events.jsonl');
+    this.snapshotFile = path.join(directory, 'snapshot.json');
+  }
+
+  async append(type, payload, transactionId = randomUUID()) {
+    await mkdir(this.directory, { recursive: true });
+    const previous = (await this.replay()).lastChecksum ?? null;
+    const event = { version: 1, transactionId, type, payload, previous };
+    event.checksum = digest(canonical(event));
+    const handle = await open(this.logFile, 'a');
+    try { await handle.write(`${JSON.stringify(event)}\n`); await handle.sync(); } finally { await handle.close(); }
+    return event;
+  }
+
+  async replay(reducer = (state, event) => ({ ...state, [event.type]: event.payload }), initial = {}) {
+    let raw = '';
+    try { raw = await readFile(this.logFile, 'utf8'); } catch (error) { if (error.code !== 'ENOENT') throw error; }
+    let state = initial; let lastChecksum = null; let count = 0;
+    const lines = raw.split('\n');
+    for (let index = 0; index < lines.length; index++) {
+      const line = lines[index];
+      if (!line) continue;
+      let event;
+      try { event = JSON.parse(line); } catch (error) {
+        if (index === lines.length - 1) break;
+        throw new Error(`journal corruption at line ${index + 1}: ${error.message}`);
+      }
+      const checksum = event.checksum; const unsigned = { ...event }; delete unsigned.checksum;
+      if (digest(canonical(unsigned)) !== checksum || event.previous !== lastChecksum) throw new Error(`journal checksum chain invalid at line ${index + 1}`);
+      state = reducer(state, event); lastChecksum = checksum; count++;
+    }
+    return { state, count, lastChecksum };
+  }
+
+  async checkpoint(state) {
+    await mkdir(this.directory, { recursive: true });
+    const replay = await this.replay();
+    const snapshot = { version: 1, eventCount: replay.count, lastChecksum: replay.lastChecksum, state };
+    const temporary = `${this.snapshotFile}.${process.pid}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(snapshot, null, 2)}\n`);
+    const handle = await open(temporary, 'r'); try { await handle.sync(); } finally { await handle.close(); }
+    await rename(temporary, this.snapshotFile);
+    return snapshot;
+  }
+
+  async backup(destination) {
+    await mkdir(destination, { recursive: true });
+    for (const name of ['events.jsonl', 'snapshot.json']) {
+      try { await copyFile(path.join(this.directory, name), path.join(destination, name)); } catch (error) { if (error.code !== 'ENOENT') throw error; }
+    }
+  }
+
+  static async restore(backup, destination) {
+    await mkdir(destination, { recursive: true });
+    for (const name of ['events.jsonl', 'snapshot.json']) {
+      try { await copyFile(path.join(backup, name), path.join(destination, name)); } catch (error) { if (error.code !== 'ENOENT') throw error; }
+    }
+    return new DurableJournal(destination).replay();
+  }
+
+  static async migrateV1(stateFile, directory) {
+    const journal = new DurableJournal(directory);
+    if ((await journal.replay()).count) return journal;
+    const state = JSON.parse(await readFile(stateFile, 'utf8'));
+    await journal.append('legacy_state_imported', { sourceVersion: state.version, state }, 'migration-v1');
+    await journal.checkpoint(state); return journal;
+  }
+}
+
+export function externalEffectBoundary({ status, idempotencyKey, upstreamEvidence }) {
+  if (!idempotencyKey) throw new Error('external side effect requires idempotencyKey');
+  if (status === 'accepted' && !upstreamEvidence) throw new Error('accepted side effect requires upstreamEvidence');
+  if (!['reserved', 'in_flight', 'unknown', 'accepted', 'not_accepted'].includes(status)) throw new Error('invalid side effect status');
+  return { status, idempotencyKey, upstreamEvidence: upstreamEvidence ?? null, replayable: ['reserved', 'not_accepted'].includes(status) };
+}