From e15ee864ba625de1ae73d25324c9168d941a7bf4 Mon Sep 17 00:00:00 2001
From: yilin-succeed <204474593+yilin-succeed@users.noreply.github.com>
Date: Tue, 15 Sep 2026 12:03:59 +0800
Subject: [PATCH 1/3] fix(bootstrap): isolate objective prose from generated
 state grammar

Quote-isolate the Objective body in both state writers so a collapsed or
unclosed fence, comment, or heading/task example inside an objective can
no longer open machine grammar and hide the generated Todo sections
below. The frontmatter objective keeps the raw text, and the chat
context readback strips the quote prefix to recover it verbatim.

References #4401

Signed-off-by: yilin-succeed <204474593+yilin-succeed@users.noreply.github.com>
---
 loopx/bootstrap.py                            |  18 ++-
 loopx/chat_server.py                          |  16 ++-
 loopx/control_plane/projects/registry.py      |   4 +-
 .../control_plane/test_objective_isolation.py | 119 ++++++++++++++++++
 4 files changed, 149 insertions(+), 8 deletions(-)
 create mode 100644 tests/control_plane/test_objective_isolation.py

diff --git a/loopx/bootstrap.py b/loopx/bootstrap.py
index 4138655e83..36ed136faf 100644
--- a/loopx/bootstrap.py
+++ b/loopx/bootstrap.py
@@ -465,6 +465,22 @@ def apply_onboarding_todos_to_state(
     return "\n".join(lines) + "\n"
 
 
+def render_objective_markdown(objective: str) -> str:
+    """Render objective prose as an isolated Markdown blockquote.
+
+    Generated state grammar owns fences, comments, and headings. Raw
+    objective text is quoted line by line so a start-goal-collapsed or
+    unclosed fence, comment, or heading example inside the objective can
+    never open machine grammar and hide the generated Todo sections below.
+    The frontmatter ``objective`` field keeps the raw text; readers of the
+    body section strip the quote prefix to recover it.
+    """
+    lines = str(objective or "").splitlines()
+    if not lines:
+        return ""
+    return "\n".join(f"> {line}" if line.strip() else ">" for line in lines)
+
+
 def render_state_markdown(
     *,
     project: Path,
@@ -516,7 +532,7 @@ def render_state_markdown(
 
 ## Objective
 
-{objective}
+{render_objective_markdown(objective)}
 
 ## Authority Sources
 
diff --git a/loopx/chat_server.py b/loopx/chat_server.py
index 32ec182d90..32c8d648dc 100644
--- a/loopx/chat_server.py
+++ b/loopx/chat_server.py
@@ -132,11 +132,17 @@ def _active_state_section(state_text: str, heading: str) -> str:
     content_start = start + len(marker)
     end = state_text.find("\n## ", content_start)
     section = state_text[content_start : end if end >= 0 else None]
-    lines = [
-        line.strip().removeprefix("- ").strip()
-        for line in section.splitlines()
-        if line.strip() and not line.lstrip().startswith("<!--")
-    ]
+    lines = []
+    for line in section.splitlines():
+        stripped = line.strip()
+        if not stripped or stripped.lstrip().startswith("<!--"):
+            continue
+        if stripped.startswith(">"):
+            # Quote-isolated objective lines round-trip verbatim.
+            stripped = stripped[1:].strip()
+        else:
+            stripped = stripped.removeprefix("- ").strip()
+        lines.append(stripped)
     return _compact_text(" ".join(lines))
 
 
diff --git a/loopx/control_plane/projects/registry.py b/loopx/control_plane/projects/registry.py
index b0dd31bcab..2d26522e48 100644
--- a/loopx/control_plane/projects/registry.py
+++ b/loopx/control_plane/projects/registry.py
@@ -5,7 +5,7 @@
 from pathlib import Path
 from typing import Any
 
-from ...bootstrap import build_goal_entry
+from ...bootstrap import build_goal_entry, render_objective_markdown
 from ...control_plane.runtime.time import now_local_iso
 from ...file_lock import exclusive_cross_runtime_file_lock as exclusive_file_lock
 from ...paths import resolve_runtime_root
@@ -142,7 +142,7 @@ def bullets(items: list[str], *, empty: str) -> str:
 
 ## Objective
 
-{objective}
+{render_objective_markdown(objective)}
 
 ## Acceptance
 
diff --git a/tests/control_plane/test_objective_isolation.py b/tests/control_plane/test_objective_isolation.py
new file mode 100644
index 0000000000..69731eba28
--- /dev/null
+++ b/tests/control_plane/test_objective_isolation.py
@@ -0,0 +1,119 @@
+from __future__ import annotations
+
+from pathlib import Path
+
+import pytest
+
+from loopx.bootstrap import render_objective_markdown, render_state_markdown
+from loopx.chat_server import _active_state_section
+from loopx.control_plane.projects.registry import _state_markdown
+from loopx.control_plane.todos.active_state_todo_parser import parse_todo_source
+
+
+BOUNDARY_OBJECTIVES = [
+    # A start-goal-collapsed closed fence becomes one opening-fence line.
+    "```text Implement and validate the task. ```",
+    "~~~text Implement and validate the task. ~~~",
+    # An unclosed comment example would hide every following section.
+    "<!-- unclosed objective example comment",
+    # An unfenced heading example must not become a Todo source region.
+    "## Agent Todo example",
+    # A task-shaped example must not be adopted as a Todo.
+    "- [ ] fake objective todo",
+]
+
+PLAIN_OBJECTIVE = "Implement and validate the task."
+CLOSED_MULTILINE_FENCE_OBJECTIVE = "```text\nImplement and validate the task.\n```"
+
+
+def _bootstrap_state(tmp_path: Path, objective: str) -> str:
+    return render_state_markdown(
+        project=tmp_path,
+        goal_id="objective-example",
+        adapter_kind="read_only_project_map_v0",
+        objective=objective,
+        updated_at="2026-09-15T00:00:00+00:00",
+        goal_doc=None,
+        execution_profile=None,
+    )
+
+
+def test_render_objective_markdown_quotes_every_line() -> None:
+    assert render_objective_markdown("") == ""
+    assert render_objective_markdown(PLAIN_OBJECTIVE) == f"> {PLAIN_OBJECTIVE}"
+    assert (
+        render_objective_markdown("first\n\nsecond")
+        == "> first\n>\n> second"
+    )
+
+
+@pytest.mark.parametrize("objective", BOUNDARY_OBJECTIVES)
+def test_bootstrap_state_keeps_generated_todos_readable_beyond_objective_examples(
+    tmp_path: Path, objective: str
+) -> None:
+    state = _bootstrap_state(tmp_path, objective)
+    items, _archive, sources = parse_todo_source(state)
+
+    assert sources["user"] == "User Todo / Owner Review Reading Queue"
+    assert sources["agent"] == "Agent Todo"
+    # The generated onboarding connection-validation Todo stays readable.
+    assert len(items["agent"]) == 1
+    assert "fake objective todo" not in str(items["agent"][0].get("text") or "")
+
+
+@pytest.mark.parametrize(
+    "objective",
+    [PLAIN_OBJECTIVE, CLOSED_MULTILINE_FENCE_OBJECTIVE],
+)
+def test_bootstrap_state_keeps_plain_objective_controls_readable(
+    tmp_path: Path, objective: str
+) -> None:
+    state = _bootstrap_state(tmp_path, objective)
+    items, _archive, sources = parse_todo_source(state)
+
+    assert sources["user"] is not None
+    assert sources["agent"] is not None
+    assert len(items["agent"]) == 1
+
+
+def test_bootstrap_state_preserves_objective_text_in_frontmatter_and_body(
+    tmp_path: Path,
+) -> None:
+    objective = BOUNDARY_OBJECTIVES[0]
+    state = _bootstrap_state(tmp_path, objective)
+
+    # The frontmatter keeps the raw objective for exact readback.
+    assert f'objective: "{objective}"' in state
+    # The body is quote-isolated: no unquoted machine-grammar line remains.
+    objective_lines = [f"> {line}" for line in objective.splitlines()]
+    assert "\n".join(objective_lines) in state
+
+
+@pytest.mark.parametrize("objective", BOUNDARY_OBJECTIVES)
+def test_chat_context_readback_strips_objective_quote_isolation(
+    tmp_path: Path, objective: str
+) -> None:
+    state = _bootstrap_state(tmp_path, objective)
+
+    assert _active_state_section(state, "Objective") == objective
+
+
+def test_registry_state_markdown_keeps_todo_sections_readable_beyond_fenced_objective() -> None:
+    state = _state_markdown(
+        project_id="project-example",
+        goal_id="goal-example",
+        objective="```text Implement the pipeline. ```",
+        non_goals=[],
+        acceptance=["Pipeline works."],
+        unknowns=[],
+        next_effect="Register the project.",
+        stop_condition="Pipeline accepted.",
+        updated_at="2026-09-15T00:00:00+00:00",
+    )
+    items, _archive, sources = parse_todo_source(state)
+
+    assert sources["user"] == "User Todo / Owner Review Reading Queue"
+    assert sources["agent"] == "Agent Todo"
+    assert items["user"] == []
+    assert items["agent"] == []
+    assert 'objective: "```text Implement the pipeline. ```"' in state

From 3b0e3ec151879a4d2715ce44f6c2ad3977c49e95 Mon Sep 17 00:00:00 2001
From: yilin-succeed <204474593+yilin-succeed@users.noreply.github.com>
Date: Tue, 15 Sep 2026 23:43:32 +0800
Subject: [PATCH 2/3] refactor(goals): own the objective section readback in
 active_state_sections

Move the chat Objective section readback out of chat_server into
loopx/control_plane/goals/active_state_sections.py, which already owns
active-state section extraction. The quote-prefix round-trip and legacy
bullet flattening move verbatim behind active_state_section_text, and
the chat helper stays as a delegating wrapper, so no behavior changes.

Clears the unreviewed module_metric_budget finding on chat_server.py
(1519 -> 1502 lines against the registered 1513 ceiling) and removes the
duplicated private section scanner.

Signed-off-by: yilin-succeed <204474593+yilin-succeed@users.noreply.github.com>
---
 loopx/chat_server.py                          | 21 ++----------
 .../goals/active_state_sections.py            | 33 +++++++++++++++++++
 2 files changed, 35 insertions(+), 19 deletions(-)

diff --git a/loopx/chat_server.py b/loopx/chat_server.py
index 32c8d648dc..378fc9a3ca 100644
--- a/loopx/chat_server.py
+++ b/loopx/chat_server.py
@@ -37,6 +37,7 @@
 from .chat_ssh_source_api import SshSourceRequestMixin
 from .chat_store import ChatSessionStore
 from .capabilities.manager_runtime import manager_runtime_capability_projection
+from .control_plane.goals.active_state_sections import active_state_section_text
 from .control_plane.status.ssh_host_catalog import (
     SSH_HOST_CATALOG_PATH,
     ssh_host_catalog_payload,
@@ -125,25 +126,7 @@ def _compact_text(value: Any, *, limit: int = 600) -> str:
 
 
 def _active_state_section(state_text: str, heading: str) -> str:
-    marker = f"## {heading}"
-    start = state_text.find(marker)
-    if start < 0:
-        return ""
-    content_start = start + len(marker)
-    end = state_text.find("\n## ", content_start)
-    section = state_text[content_start : end if end >= 0 else None]
-    lines = []
-    for line in section.splitlines():
-        stripped = line.strip()
-        if not stripped or stripped.lstrip().startswith("<!--"):
-            continue
-        if stripped.startswith(">"):
-            # Quote-isolated objective lines round-trip verbatim.
-            stripped = stripped[1:].strip()
-        else:
-            stripped = stripped.removeprefix("- ").strip()
-        lines.append(stripped)
-    return _compact_text(" ".join(lines))
+    return active_state_section_text(state_text, heading, normalize_text=_compact_text)
 
 
 def _goal_public_context(registry: dict[str, Any], goal: dict[str, Any]) -> dict[str, Any]:
diff --git a/loopx/control_plane/goals/active_state_sections.py b/loopx/control_plane/goals/active_state_sections.py
index 40ca960e01..6d7fcc96b0 100644
--- a/loopx/control_plane/goals/active_state_sections.py
+++ b/loopx/control_plane/goals/active_state_sections.py
@@ -27,6 +27,39 @@ def active_state_sections(
     return sections
 
 
+def active_state_section_text(
+    state_text: str,
+    heading: str,
+    *,
+    normalize_text: NormalizeText,
+) -> str:
+    """Read back one ``## <heading>`` section as flattened prose.
+
+    Counterpart of the quote-isolated objective writers: lines starting
+    with ``>`` lose their quote prefix so quote-isolated prose round-trips
+    verbatim, legacy lines keep the bullet-prefix flattening, and comment
+    markers, blank lines, and later ``## `` sections never become content.
+    """
+    marker = f"## {heading}"
+    start = state_text.find(marker)
+    if start < 0:
+        return ""
+    content_start = start + len(marker)
+    end = state_text.find("\n## ", content_start)
+    section = state_text[content_start : end if end >= 0 else None]
+    lines = []
+    for line in section.splitlines():
+        stripped = line.strip()
+        if not stripped or stripped.startswith("<!--"):
+            continue
+        if stripped.startswith(">"):
+            stripped = stripped[1:].strip()
+        else:
+            stripped = stripped.removeprefix("- ").strip()
+        lines.append(stripped)
+    return normalize_text(" ".join(lines))
+
+
 def active_state_section_entries(
     lines: list[str],
     *,

From cd921c260eaff2dc691745b9558a5d554bb7d93e Mon Sep 17 00:00:00 2001
From: yilin-succeed <204474593+yilin-succeed@users.noreply.github.com>
Date: Tue, 15 Sep 2026 23:52:41 +0800
Subject: [PATCH 3/3] chore(ci): re-trigger pull request workflows for head
 3b0e3ec

The pull_request synchronize event for 3b0e3ec did not register any
check suite on the base repository; push an empty commit to re-deliver
the event.

Signed-off-by: yilin-succeed <204474593+yilin-succeed@users.noreply.github.com>