XY-522: Restrict tracker comments to allowlisted public summaries

apps/decodex/src/agent/tracker_tool_bridge.rs

@@ -598,10 +598,20 @@ struct TransitionArgs {
 }
 
 #[derive(Debug, Deserialize)]
+#[serde(deny_unknown_fields)]
 struct CommentArgs {
 	#[serde(flatten)]
 	scope: ScopeArgs,
-	body: String,
+	kind: String,
+	error_class: Option<String>,
+	next_action: Option<String>,
+	#[serde(default)]
+	blockers: Vec<String>,
+	#[serde(default)]
+	evidence: Vec<String>,
+	failed_command: Option<String>,
+	raw_error: Option<String>,
+	summary: Option<String>,
 }
 
 #[derive(Debug, Deserialize)]

apps/decodex/src/agent/tracker_tool_bridge/tests.rs

@@ -8,6 +8,7 @@ use std::{
 	process::{self, Command},
 };
 
+use serde_json::Value;
 use tempfile::TempDir;
 
 use crate::{
@@ -444,6 +445,18 @@ fn sample_review_context() -> ReviewHandoffContext {
 	}
 }
 
+fn manual_attention_comment_args() -> Value {
+	serde_json::json!({
+		"kind": "manual_attention",
+		"error_class": "operator_decision_required",
+		"next_action": "resolve the blocker manually, clear the needs-attention label, then restart automation if desired",
+		"blockers": ["operator decision is required before automation can continue"],
+		"evidence": ["agent selected the manual-attention path for this run"],
+		"failed_command": "cargo make test",
+		"raw_error": "repo gate failed with public test output"
+	})
+}
+
 fn sample_review_context_in(cwd: &Path) -> ReviewHandoffContext {
 	ReviewHandoffContext {
 		attempt_number: 2,

apps/decodex/src/agent/tracker_tool_bridge/tests/mutation/continuation.rs

@@ -21,11 +21,19 @@ fn completion_disposition_allows_manual_attention_exit_without_review_handoff()
 	let comment_response = DynamicToolHandler::handle_call(
 		&bridge,
 		ISSUE_COMMENT_TOOL_NAME,
-		serde_json::json!({ "body": "Blocked on missing tracker permission; handing off for manual repair." }),
+		manual_attention_comment_args(),
 	);
 
 	assert!(response.success);
 	assert!(comment_response.success);
+
+	let comment = tracker.comments.borrow().first().expect("manual attention comment should write").clone();
+	let record = records::parse_linear_execution_event_record(&comment)
+		.expect("manual attention comment should include a ledger record");
+
+	assert_eq!(record.event_type, "needs_attention");
+	assert_eq!(record.error_class.as_deref(), Some("operator_decision_required"));
+	assert_eq!(record.terminal_path.as_deref(), Some("manual_attention"));
 	assert_eq!(
 		bridge.completion_disposition().expect("manual attention should be accepted"),
 		RunCompletionDisposition::ManualAttention