fix(session): authenticate async task-owner sibling inventories

[snowykr]

Summary

Install the complete authenticated async task-owner sibling inventory after externally merged protocol prerequisite #6323. Do not treat parsed inventories, receipts or matching snapshots as deletion authority.

• Inspect retained owner references profile-wide, including managed/staging/recovery scopes and v4 owner patches.
• Bind transcript descriptors/bytes, native root identity/security, scope/binding, original protocol root and authenticated nested protocol roles.
• Fail closed for malformed/foreign/replaced/symlink/reserved namespaces, unknown protocol aliases, or protocol without a genuine inspector; no initialization/repair/blanket hidden-entry skip.
• Preserve the independently authorized no-protocol direct-owner path. Inspector capability stays ephemeral and outside serialized targets.
• No consumer effect, persistent owner production, post-move admission or wider move authority activation.

Exact source / budget

Base dev 3f509b808a4a040c931a9325c2b2d9079400a5a6, containing external #6323 merge d11d219b38cfc29670b70640daa69fb8fe85f985, external #6325 tools-type repair, and unrelated upstream #6324 Codex connection-refusal changes, preserved unchanged.
Exact head 7e7d932313c073d823ced2f59a25a1bcc43a2388.
Owned AND actual dev production review lines 548: task-artifact-owner-transcript.ts +547/-1. Tests +68 and changelog fragment +2 excluded; 3 files +617/-1 total. This is not a small parent-relative diff masquerading as a dev PR.

Exact clean verification

Qualification 08c-independent-after6325-base3f509b80: 220 pass / 9 existing platform skips / 0 fail / 1,138 assertions, 229 tests across 8 files. Clean checkout before/after; all test paths checked to exist.

bun test packages/coding-agent/test/managed-gc-retirement-journal.test.ts packages/coding-agent/test/managed-gc-retirement-codec.test.ts packages/coding-agent/test/task-artifact-owner-transcript.test.ts packages/coding-agent/test/session-storage.test.ts packages/coding-agent/test/gc-disk-retention.test.ts packages/coding-agent/test/task-artifact-owner-retirement.test.ts packages/coding-agent/test/task-artifact-owner-access.test.ts packages/coding-agent/test/managed-scope-owner-only-self-heal.test.ts
# exit 0
bun --cwd=packages/coding-agent run check
# exit 0: vendor, Biome, TypeScript

Strict genuine current-source native 0.18.6: addon ecca056f0c63eca5139c674999a86ca8f4c32926cb18b4c9804efd0d00c32030, path_identity source 26555fb71debdd40e0cdb70811847765452facd4cbb4107b646df7cc1a25dcaf, crates-tree parity verified, no manual metadata stamping/QA descriptor rewrite. The separate failed native reaper experiment is NOT included or used as this native dependency.

Preservation / limitations

Protected original HEAD 1a12e32f6bbcb5c4a469dd480b4b5dacb37dc95d and its 44 staged files +11023/-1453/no unstaged changes remain untouched. Reference #6240 HEAD 7e5f7ef2a745bc1c3d012362f00be9a441bdeb76 remains clean and unchanged; no close/rewrite/leader merge.

Darwin runtime only; existing warnings/skips remain explicit, including 2 warnings/1 info from package checks. No Linux/Windows/WSL NTFS, arbitrary-FD revocation, LSP readiness, full-stack e2e or repaired published binary claim. All owner deletion consumers and final production/admission activation install separately. Full-cardinality reaper timing and frozen cohort/critic/all-story audit remain outstanding.

Root check:tools upstream #6319 type errors were separately repaired and externally merged in #6325. This refreshed head additionally passed bun test scripts/ci-main-native-recovery.test.ts (5 pass, 27 assertions) and bun run check:tools (exit0, existing 4 warnings/4 infos retained). It is not a full aggregate gate claim. Earlier d240/a198 qualification is historical, not transferred to this rebased head. No #6323/#6325 approval or old-head CI transfer; require fresh exact code-event CI and write-access maintainer approval.

[snowykr]

Fresh verification update for exact head 7e7d932313c073d823ced2f59a25a1bcc43a2388: Dev CI code-event checks, including Virtual integration validation, are now completed with no pending/failed checks observed. Local exact-clean scanner proof remains 220 pass / 9 existing platform skips / 1,138 assertions plus package/vendor/Biome/types and root check:tools. No exact-head reviewer approval or posted verdict is presumed from green CI. Remaining storage/helper/managed/SDK/GC consumers were separately rebuilt on the installed #6323/#6325 foundation, each prefix independently qualified, and the cumulative 9a3d6ccffe098412f12707cada231a0f8b9d5ab0 full root TS/Rust aggregate passed. Those source/base-specific branch-only receipts do not approve this head or claim latest-dev/full-goal completion. New upstream #6309 queue-terminal changes and the unresolved original 20-second reaper boundary remain explicit follow-up verification obligations; owner production/admission is still OFF.

[probepark]

Review (head 7e7d932, gajae-reviewer on behalf of probepark)

Approve held: CI plan did not run cd packages/coding-agent && bun run check (biome + check:types) on 7e7d932; run it at this head (or add it to the plan) and re-request review.

CI: green: all planned checks pass (Affected path validation incl. 4 targeted coding-agent tests, ts-build, Virtual integration validation, gjc-state-gates). check:@gajae-code/coding-agent was not in the head plan. The PR body reports bun --cwd=packages/coding-agent run check exit 0, but nothing ties that run to this exact head as CI evidence. A comment with the command, head SHA and exit code at 7e7d932 will satisfy this.
Scope: +617 / -1, 3 files: packages/coding-agent/src/session/internal/task-artifact-owner-transcript.ts (+547/-1), test/managed-gc-retirement-journal.test.ts (+68), changelog.d/task-owner-sibling-inventory.md (+2)
Conventions: changelog fragment present; no generated files; no labels; no console.*, new Worker, or mock.module.
Notable:

• task-artifact-owner-transcript.ts:163: parseV2ScopeBinding hardcodes ".gjc-managed-session-scope.v2.json" although MANAGED_SCOPE_BINDING (L54) holds the same value; use the constant so the two paths cannot drift. protocolFileIdentity also uses snapshot.stat.nlink! (L232); verifyManagedFile already guarantees nlink === 1n, so the assertion is safe but could be dropped.
• hasSiblingTaskArtifactOwnerTranscript has no production caller in this diff (inert, as the body states). The 3 new tests cover a missing inspector, a cross-cwd v4 header_patch owner, and a reserved protocol alias. They do not cover a replaced/foreign v2- binding or a .gjc-recovery tree; consider one fail-closed case for each.
  Blocking: none found in the diff. The only hold is the CI-plan gap above.

Suggested verdict line once the hold clears: gajae.pr-review-verdict.v1 merge-approved sha256:05049b50420a93f450182f15ec2bc72c77d6519c63cddba931853537e335665f reviewer:human reviewer-id:probepark evidence:ci-green;inert-new-api;fail-closed-paths-read;need-local-check-pending

[snowykr]

Responding to the exact-head approve hold: explicitly ran the requested coding-agent package check at immutable 7e7d932313c073d823ced2f59a25a1bcc43a2388, clean before and after.

# HEAD: 7e7d932313c073d823ced2f59a25a1bcc43a2388
# cwd: packages/coding-agent
bun run check
# equivalent requested invocation: cd packages/coding-agent && bun run check
# EXIT CODE: 0

Actual output:

$ bun run verify:markit-vendor && biome check . && bun run check:types
Markit vendor verification passed (markit-ai@0.5.3, local hashes)
Checked 3344 files in 2s. No fixes applied.
Found 2 warnings.
Found 1 info.
$ tsc -p tsconfig.json --noEmit

Warnings/info were retained, not suppressed. The package test/format/type gate was executed locally on this exact public head; I am not claiming CI plan coverage that the plan did not select, or treating another cumulative head's aggregate as this head's proof. Full local output is retained in the durable goal audit as artifact5346/5347. This responds to the requested local-head run and re-review condition without changing the PR head or source.

[probepark]

Review (head 7e7d932, gajae-reviewer on behalf of probepark; re-request rereq1)

need-local satisfied by #6326 (comment): cd packages/coding-agent && bun run check (verify:markit-vendor + biome + check:types) was run at exact head 7e7d932313c073d823ced2f59a25a1bcc43a2388 with EXIT CODE 0. This was the only hold from review 5406441907.

CI: green, 0 pending, 0 failed (approve gate re-run at this head: the only item was need_local check:@gajae-code/coding-agent, now covered by the comment above).
Scope: +617 / -1, 3 files: packages/coding-agent/src/session/internal/task-artifact-owner-transcript.ts, test/managed-gc-retirement-journal.test.ts, changelog.d/task-owner-sibling-inventory.md
Conventions: changelog fragment present; no generated files; no labels; no console.*, new Worker, or mock.module.
Notable (non-blocking, unchanged from the prior review):

• task-artifact-owner-transcript.ts:163: parseV2ScopeBinding hardcodes ".gjc-managed-session-scope.v2.json" instead of using MANAGED_SCOPE_BINDING (L54).
• The new tests do not cover a replaced/foreign v2- binding or a .gjc-recovery tree. Add one fail-closed case for each.
  Blocking: none.

PR body verdict line count=0, not updated. Suggested verdict line: gajae.pr-review-verdict.v1 merge-approved sha256:05049b50420a93f450182f15ec2bc72c77d6519c63cddba931853537e335665f reviewer:human reviewer-id:probepark evidence:ci-green;inert-new-api;fail-closed-paths-read;need-local-check-exit0-by-author

Verdict: gajae.pr-review-verdict.v1 merge-approved sha256:05049b50420a93f450182f15ec2bc72c77d6519c63cddba931853537e335665f reviewer:human reviewer-id:probepark evidence:ci-green;inert-new-api;fail-closed-paths-read;need-local-check-exit0-by-author

[Yeachan-Heo]

Merged into dev as 5197b1e.

• probepark approved the exact head 7e7d932.
• CI on that head passed 18 checks and none failed. CI didn't run check:@gajae-code/coding-agent on it, though, and the branch was 14 commits behind dev, including the v0.18.7 main sync. So I merged it into current dev locally and checked that tree:
  • tsc --noEmit for coding-agent passed.
  • Biome passed on the changed files.
  • task-artifact-owner-transcript.test.ts and managed-gc-retirement-journal.test.ts passed 23/0, twice.
• No newer dev commit touches this PR's 3 files.

Thanks @snowykr.
—
[repo owner's gaebal-gajae (clawdbot) 🦞]