@awak-app/simy-cli 0.5.15 → 0.5.16

package/README.md

@@ -42,6 +42,13 @@ SQM checks apply when you explicitly select `@simy`, invoke the SQM skill, or as
 After installation, restart Codex and find and install **SIMY** in **Plugins**
 before using `@simy` in a new task.
 
+The plugin also includes a non-blocking connection reminder. At task startup,
+resume, and prompt submission it reads the origin-scoped local discovery record
+and checks the loopback CLI health endpoint. It warns once per disconnected
+period in each Codex session, then rearms after the CLI reconnects. The hook does
+not start or install the CLI, read session tokens, enable SQM, or send email.
+Review and enable the plugin hooks through Codex's `/hooks` command.
+
 After that first installation, the daemon checks installed workflows at startup
 and every hour, including after a CLI automatic upgrade. It updates only existing
 platform installations and refreshes an already enabled SIMY Codex plugin through
@@ -376,8 +383,16 @@ The local PR lifecycle is intentionally separate from deployment:
 2. Require explicit acceptance criteria plus an approved design summary for high-risk work.
 3. Run the coding executor and verify its result against local Git evidence.
 4. Run a separate AI audit session without granting it an implementation role.
-5. Mark the result `pr_ready_for_review` while GitHub checks or peer approval are pending.
-6. Mark it `merge_ready` only after the observed PR head/base, CI checks, merge state,
+5. Require eight revision-bound PR-preparation rows: latest base/head, current CI and
+   disclosed skips, exact companion revisions, E2E outcomes and zero residual fixtures,
+   security/privacy, browser/localization when applicable, final diff scope, and honest
+   residual/post-merge status. The CLI refreshes the remote base, requires it to be an
+   ancestor of the final head, and compares it with the PR base SHA.
+   Four additional conditional safeguards cover official-checklist ownership,
+   authoritative deployment-target mapping, live-test data safety, and saved-run/
+   checkpoint compatibility without forcing irrelevant work to execute them.
+6. Mark the result `pr_ready_for_review` while GitHub checks or peer approval are pending.
+7. Mark it `merge_ready` only after the observed PR head/base, CI checks, merge state,
    and human approval all pass.
 
 The Web UI can refresh review and CI evidence with

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.5.15",
+  "version": "0.5.16",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {
@@ -40,7 +40,7 @@
     "check:auto-update": "node --check ./src/auto-update.js && node --check ./scripts/auto-update-e2e.js && npm run check:sqm",
     "check:sqm": "node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/reliability.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./src/sqm/agent-skill.js && node --check ./src/sqm/workflow-onboarding.js && node --check ./src/sqm/workflow-update.js && node --check ./src/sqm/review-worker.js && node --check ./scripts/sqm-complete-loop-e2e.js && node --check ./scripts/sqm-local-review-e2e.js",
     "check:real-provider-syntax": "node --check ./scripts/real-codex-probe.js && node --check ./scripts/real-claude-probe.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js",
-    "check:syntax": "node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/codex-plugins/simy/skills/agentic-delivery-loop/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js",
+    "check:syntax": "node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/codex-plugins/simy/skills/agentic-delivery-loop/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js",
     "check:package": "node ./scripts/check-package-contents.js",
     "build:macos-installer:dev": "bash packaging/build-macos-arm64.sh --unsigned-dev",
     "build:macos-installer": "bash packaging/build-macos-arm64.sh --production",

package/src/agent.js

@@ -126,6 +126,10 @@ import {
   createSqmLocalReviewApi,
   createSqmLocalReviewWorker,
 } from "./sqm/review-worker.js";
+import {
+  publishConnectionDiscovery,
+  removeConnectionDiscovery,
+} from "./connection-discovery.js";
 
 const DEVICE_HEARTBEAT_INTERVAL_MS = 20_000;
 
@@ -510,14 +514,20 @@ export async function startAgent({
         res.once("close", releaseUpdateWork);
       }
       if (req.method === "GET" && url.pathname === "/v1/health") {
+        const sessionValid = isSessionValid(session, Date.now(), apiOrigin);
+        const connection = connectionStatus.snapshot({ authenticated: sessionValid });
         json(res, 200, {
           ok: true,
           cli_version: CLI_VERSION,
           api_contract_version: CLI_API_CONTRACT_VERSION,
           daemon,
           web_origin: apiOrigin,
-          session_valid: isSessionValid(session, Date.now(), apiOrigin),
+          session_valid: sessionValid,
           session_expires_at: session?.expires_at ?? null,
+          connection: {
+            state: connection.state,
+            lastSuccessAt: connection.lastSuccessAt,
+          },
           cli_update: updateManager?.snapshot?.() ?? null,
         });
         return;
@@ -1566,6 +1576,14 @@ export async function startAgent({
   await new Promise((resolve) => server.listen(requestedPort, "127.0.0.1", resolve));
   const address = server.address();
   port = typeof address === "object" && address ? address.port : requestedPort;
+  let connectionDiscovery = null;
+  try {
+    connectionDiscovery = await (
+      dependencies.publishConnectionDiscovery || publishConnectionDiscovery
+    )({ webOrigin: apiOrigin, port, sessionRoot });
+  } catch (error) {
+    reportConnectionDiscoveryError(error, quiet);
+  }
   if (!quiet) {
     console.log(`SIMY local agent listening on http://127.0.0.1:${port}`);
     console.log(`SIMY Web host: ${apiOrigin}`);
@@ -1598,6 +1616,13 @@ export async function startAgent({
       updateManager?.stop?.();
       await sqmLocalReviewWorker?.close?.();
       await durableLocalTaskWorker?.close?.();
+      try {
+        await (dependencies.removeConnectionDiscovery || removeConnectionDiscovery)(
+          connectionDiscovery,
+        );
+      } catch (error) {
+        reportConnectionDiscoveryError(error, quiet);
+      }
       registry.close();
       localTaskRegistry.close();
     })();
@@ -1850,6 +1875,13 @@ function reportHeartbeatError(error, quiet) {
   );
 }
 
+function reportConnectionDiscoveryError(error, quiet) {
+  if (quiet) return;
+  console.error(
+    `SIMY connection reminder metadata could not be updated: ${error instanceof Error ? error.message : String(error)}`,
+  );
+}
+
 function reportDurableLocalTaskError(error, quiet) {
   if (quiet) return;
   console.error(

package/src/cli-contract.js

@@ -13,7 +13,7 @@ import {
 } from "./durable-local-task-steps-contract.js";
 import { buildExecutionCapabilityContract } from "./execution-capability-contract.js";
 
-export const CLI_VERSION = "0.5.15";
+export const CLI_VERSION = "0.5.16";
 export const CLI_API_CONTRACT_VERSION = 10;
 
 export function withCliContract(

package/src/codex-plugins/simy/hooks/README.md

@@ -0,0 +1,17 @@
+# SIMY connection reminder
+
+The SIMY Codex plugin checks the origin-scoped local CLI connection when a task
+starts or resumes and when a prompt is submitted. The hook only reads the local
+daemon discovery record and its `/v1/health` endpoint. It never starts, installs,
+signs in to, or changes SIMY CLI, and it never sends email.
+
+The reminder is non-blocking. It stays silent while the latest cloud heartbeat is
+fresh, warns once for each disconnected period in a Codex session, and rearms
+after a successful probe. State is stored under `PLUGIN_DATA`; the fallback is
+the SIMY home directory. Installing the plugin does not trust its hooks
+automatically: review and enable them through Codex's `/hooks` command.
+
+When `SIMY_WEB_ORIGIN` or `SIMY_API_ORIGIN` is set, only that origin is accepted.
+Otherwise the hook checks at most 16 origin-keyed discovery records and accepts
+the first live, authenticated connection with a fresh cloud heartbeat. It never
+scans ports or reads stored session tokens.

package/src/codex-plugins/simy/hooks/connection-reminder.mjs

@@ -0,0 +1,184 @@
+#!/usr/bin/env node
+
+import { createHash } from "node:crypto";
+import { mkdir, readFile, readdir, rename, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { pathToFileURL } from "node:url";
+
+const HEARTBEAT_FRESHNESS_MS = 90_000;
+const PROBE_TIMEOUT_MS = 750;
+const MAX_INPUT_BYTES = 64 * 1024;
+const MAX_DISCOVERY_RECORDS = 16;
+
+export async function runConnectionReminder({
+  env = process.env,
+  input = {},
+  fetchImpl = globalThis.fetch,
+  now = () => Date.now(),
+} = {}) {
+  const explicitWebOrigin = resolveExplicitWebOrigin(env);
+  const sessionRoot = env.SIMY_HOME?.trim() || join(homedir(), ".simy");
+  const pluginData = env.PLUGIN_DATA?.trim() || join(sessionRoot, "plugin-data", "simy");
+  const sessionId = String(input.session_id || input.sessionId || env.CODEX_THREAD_ID || "unknown");
+  const statePath = reminderStatePath(pluginData, explicitWebOrigin || "any-origin", sessionId);
+  const connected = explicitWebOrigin
+    ? await probeConnection({ webOrigin: explicitWebOrigin, sessionRoot, fetchImpl, now })
+    : await probeAnyConnection({ sessionRoot, fetchImpl, now });
+  const previous = await readState(statePath);
+  if (connected) {
+    if (previous?.disconnected) await writeState(statePath, { disconnected: false }).catch(() => {});
+    return { continue: true };
+  }
+  if (previous?.disconnected) return { continue: true };
+  await writeState(statePath, { disconnected: true }).catch(() => {});
+  return { continue: true, systemMessage: disconnectedMessage(env) };
+}
+
+export async function probeConnection({ webOrigin, sessionRoot, fetchImpl, now }) {
+  let discovery;
+  try {
+    discovery = JSON.parse(await readFile(discoveryPath(webOrigin, sessionRoot), "utf8"));
+  } catch {
+    return false;
+  }
+  if (
+    discovery?.schema_version !== 1 ||
+    discovery?.web_origin !== webOrigin ||
+    !Number.isInteger(discovery?.port) ||
+    discovery.port < 1 ||
+    discovery.port > 65_535
+  ) return false;
+
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), PROBE_TIMEOUT_MS);
+  timeout.unref?.();
+  try {
+    const response = await fetchImpl(`http://127.0.0.1:${discovery.port}/v1/health`, {
+      headers: { Origin: webOrigin },
+      redirect: "error",
+      signal: controller.signal,
+    });
+    if (!response.ok) return false;
+    const health = await response.json();
+    const lastSuccess = Date.parse(health?.connection?.lastSuccessAt || "");
+    const sampledAt = typeof now === "function" ? now() : now;
+    return Boolean(
+      health?.ok === true &&
+        health?.web_origin === webOrigin &&
+        health?.session_valid === true &&
+        health?.connection?.state === "online" &&
+        Number.isFinite(lastSuccess) &&
+        sampledAt - lastSuccess >= 0 &&
+        sampledAt - lastSuccess <= HEARTBEAT_FRESHNESS_MS,
+    );
+  } catch {
+    return false;
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+
+export async function probeAnyConnection({ sessionRoot, fetchImpl, now }) {
+  let entries;
+  try {
+    entries = (await readdir(join(sessionRoot, "connections")))
+      .filter((entry) => entry.endsWith(".json"))
+      .sort()
+      .slice(0, MAX_DISCOVERY_RECORDS);
+  } catch {
+    return false;
+  }
+  if (!entries.length) return false;
+  const probes = entries.map(async (entry) => {
+    try {
+      const record = JSON.parse(await readFile(join(sessionRoot, "connections", entry), "utf8"));
+      const webOrigin = normalizeOrigin(record?.web_origin);
+      if (!webOrigin || entry !== `${sha256(webOrigin)}.json`) return false;
+      return probeConnection({ webOrigin, sessionRoot, fetchImpl, now });
+    } catch {
+      return false;
+    }
+  });
+  return (await Promise.all(probes)).some(Boolean);
+}
+
+function resolveExplicitWebOrigin(env) {
+  const raw = env.SIMY_WEB_ORIGIN || env.SIMY_API_ORIGIN;
+  if (!raw) return null;
+  return normalizeOrigin(raw) || "invalid-origin";
+}
+
+function normalizeOrigin(raw) {
+  try {
+    const url = new URL(raw);
+    if (!["http:", "https:"].includes(url.protocol) || url.username || url.password) {
+      return null;
+    }
+    if ((url.pathname && url.pathname !== "/") || url.search || url.hash) {
+      return null;
+    }
+    return url.origin;
+  } catch {
+    return null;
+  }
+}
+
+function discoveryPath(webOrigin, sessionRoot) {
+  return join(sessionRoot, "connections", `${sha256(webOrigin)}.json`);
+}
+
+function reminderStatePath(pluginData, webOrigin, sessionId) {
+  return join(pluginData, "connection-reminders", `${sha256(`${webOrigin}\0${sessionId}`)}.json`);
+}
+
+async function readState(target) {
+  try {
+    return JSON.parse(await readFile(target, "utf8"));
+  } catch {
+    return null;
+  }
+}
+
+async function writeState(target, state) {
+  await mkdir(dirname(target), { recursive: true, mode: 0o700 });
+  const temporary = `${target}.${process.pid}.tmp`;
+  await writeFile(temporary, `${JSON.stringify(state)}\n`, { encoding: "utf8", mode: 0o600 });
+  await rename(temporary, target);
+}
+
+function disconnectedMessage(env) {
+  const locale = String(env.LC_ALL || env.LC_MESSAGES || env.LANG || "").toLowerCase();
+  return locale.startsWith("ja")
+    ? "SIMY CLI に接続できません。SIMY CLI を起動し、ログイン状態をご確認ください。作業はこのまま続けられます。"
+    : "SIMY CLI is not connected. Start SIMY CLI and check that you are signed in. You can keep working in the meantime.";
+}
+
+function sha256(value) {
+  return createHash("sha256").update(value).digest("hex");
+}
+
+async function readHookInput(stream = process.stdin) {
+  let raw = "";
+  for await (const chunk of stream) {
+    raw += String(chunk);
+    if (Buffer.byteLength(raw) > MAX_INPUT_BYTES) return {};
+  }
+  try {
+    const parsed = JSON.parse(raw || "{}");
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+
+export async function main() {
+  try {
+    const result = await runConnectionReminder({ input: await readHookInput() });
+    process.stdout.write(`${JSON.stringify(result)}\n`);
+  } catch {
+    process.stdout.write(`${JSON.stringify({ continue: true })}\n`);
+  }
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) await main();

package/src/codex-plugins/simy/hooks/hooks.json

@@ -0,0 +1,27 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "startup|resume",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node --input-type=module -e \"import { pathToFileURL } from 'node:url'; import { join } from 'node:path'; const hook = await import(pathToFileURL(join(process.env.PLUGIN_ROOT, 'hooks', 'connection-reminder.mjs')).href); await hook.main();\"",
+            "timeout": 3
+          }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node --input-type=module -e \"import { pathToFileURL } from 'node:url'; import { join } from 'node:path'; const hook = await import(pathToFileURL(join(process.env.PLUGIN_ROOT, 'hooks', 'connection-reminder.mjs')).href); await hook.main();\"",
+            "timeout": 3
+          }
+        ]
+      }
+    ]
+  }
+}

package/src/codex-plugins/simy/skills/agentic-delivery-loop/SKILL.md

@@ -416,6 +416,52 @@ After authority for the required remote changes exists, record reproduction,
 tests, evidence, companion revisions, skipped checks, and remaining gates in the
 Draft PR so the exact remote candidate can be inspected. Before Ready or merge,
 pass the reviews and explicitly opted-in SQM gates required by the frozen plan.
+The CLI's structured PR-preparation contract uses these stable rows for every new
+Delivery Loop run: `current_base_and_head`, `current_ci_and_skips`,
+`exact_revision_integration`, `e2e_outcome_and_cleanup`,
+`security_and_privacy`, `ui_and_i18n`, `final_diff_and_scope`, and
+`residual_status_disclosure`. A required row needs a concrete observation,
+controller-verified evidence references, and the current full head SHA. Mark a
+row not applicable only with a boundary reason, an authoritative source,
+verified evidence, and the current head binding; failed, unavailable, stale,
+skipped, or time-limited checks remain non-green. Exact-revision rows identify
+each companion repository and full SHA, cleanup reports a numeric residual count
+of zero, and security/privacy and UI/i18n rows carry structured boundary and
+browser evidence rather than an unsupported prose claim.
+
+Four additional safeguards are always present and are required only when their
+boundary applies: `official_checklist_ownership`, `deployment_target_mapping`,
+`live_data_safety`, and `resume_compatibility`. Non-applicability uses the same
+current-head-bound verified-evidence rule as the eight stable rows. For checklist
+or chat rendering, normalize heading levels 1 through 6, leading whitespace, and
+trailing hashes; allow exactly one controller/validator-owned official checklist
+and label model-generated lookalikes unverified. For release work, derive the
+verification environment from an authoritative repository/branch deployment
+topology and record how the exact deployed revision will be observed. For shared
+or live tests, freeze a no-persistence, scoped-fixture, or explicitly authorized
+production-write policy and prove residual test data is zero. When loop state,
+derived views, or checklist rendering changes, verify normal and checkpoint
+resume, classify paid resume as supported or not supported from verified
+authoritative evidence, exercise paid resume when supported, and prove
+derived-view recomputation and preservation of artifact content.
+
+Immediately before promotion, fetch the remote base and require it to be an
+ancestor of the final head and identical to the PR's base SHA. After any conflict
+resolution, base/head/companion/manifest change, rerun affected CI, integration,
+E2E, security, privacy, browser, and cleanup checks. Pin all companion SHAs and
+verify the combined path. Inspect scenario outcomes, not only job status, and
+prove cleanup left zero residual fixtures. Document every intentionally skipped
+GitHub check with its reason and impact; never describe a skipped full/live job
+as executed E2E. For changed trust boundaries, check that arbitrary error text,
+email addresses, URLs, identifiers, credentials, and user data cannot leak into
+logs, breadcrumbs, or telemetry. For UI or localization changes, inspect the
+actual locale/browser, overflow, console/network state, and screenshots.
+
+Before asking for review, report the exact head and companion SHAs, current base,
+tests and CI, skipped checks, remaining uncertainty, and post-merge migration,
+deployment, scheduler, smoke, monitoring, or publication work. `DIRTY`, `BEHIND`,
+stale exact-SHA evidence, a cleanup failure, or missing required CI blocks Ready.
+Do not let an earlier message or receipt override freshly observed GitHub state.
 Rerun a review or SQM gate only when its bound head,
 base, diff, specification, policy, evidence, environment or SQM bundle changed,
 or when a PR-only check became applicable. Otherwise retain the verified receipt
@@ -463,10 +509,20 @@ refresh, session return, delayed responses, follow-up lineage, authorization,
 and artifact download/open checks when applicable. Capture screenshots and
 video when visible or timing-dependent behavior matters.
 
+Resolve that environment from the authoritative deployment topology for the
+repository and branch; never assume a conventional environment name. Before the
+journey, freeze its live-data write policy. Prefer non-persisting test input; when
+a scoped fixture or authorized production write is necessary, bind it to the run,
+reconcile ambiguous effects, clean it up, and independently prove the residual
+count is zero.
+
 If this fails, retain `merged` and `deployed_exact_revision`; do not reset
 history or claim `done`. Save the exact revision, environment, input, Run ID,
 timestamps, visible state, network evidence, and logs, then add a boundary
 regression before re-entering implementation.
+After the repair is deployed, repeat the same failing input and journey in the
+same mapped environment against the newly observed exact revision before
+advancing to `live_verified`.
 
 After the frozen observation window, evaluate the production outcome and guardrail
 measures for the same experience IDs. A functioning deployment is not successful

package/src/connection-discovery.js

@@ -0,0 +1,49 @@
+import { createHash, randomBytes } from "node:crypto";
+import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { homedir } from "node:os";
+
+import { normalizeWebOrigin } from "./web-origin.js";
+
+export function connectionDiscoveryPath(webOrigin, sessionRoot) {
+  const origin = normalizeWebOrigin(webOrigin);
+  const originHash = createHash("sha256").update(origin).digest("hex");
+  return join(sessionRoot || defaultSessionRoot(), "connections", `${originHash}.json`);
+}
+
+export async function publishConnectionDiscovery({ webOrigin, port, sessionRoot }) {
+  const origin = normalizeWebOrigin(webOrigin);
+  const target = connectionDiscoveryPath(origin, sessionRoot || defaultSessionRoot());
+  const instanceId = randomBytes(16).toString("hex");
+  const record = {
+    schema_version: 1,
+    web_origin: origin,
+    port,
+    pid: process.pid,
+    instance_id: instanceId,
+    started_at: new Date().toISOString(),
+  };
+  await mkdir(dirname(target), { recursive: true, mode: 0o700 });
+  const temporary = `${target}.${process.pid}.${instanceId}.tmp`;
+  await writeFile(temporary, `${JSON.stringify(record, null, 2)}\n`, {
+    encoding: "utf8",
+    mode: 0o600,
+  });
+  await rename(temporary, target);
+  return { path: target, instanceId };
+}
+
+function defaultSessionRoot() {
+  return process.env.SIMY_HOME?.trim() || join(homedir(), ".simy");
+}
+
+export async function removeConnectionDiscovery(discovery) {
+  if (!discovery?.path || !discovery.instanceId) return;
+  try {
+    const current = JSON.parse(await readFile(discovery.path, "utf8"));
+    if (current?.instance_id !== discovery.instanceId) return;
+    await rm(discovery.path, { force: true });
+  } catch (error) {
+    if (error?.code !== "ENOENT" && !(error instanceof SyntaxError)) throw error;
+  }
+}

package/src/orchestrator/audit.js

@@ -9,6 +9,11 @@ import {
   stringArray,
 } from "./shared.js";
 import { evaluateRetryProblemSolving } from "./problem-solving.js";
+import {
+  evaluatePrPreparation,
+  independentAuditEvidenceIdentity,
+  skippedChecksDisclosure,
+} from "./pr-preparation.js";
 import {
   completionEvidenceChecks,
   normalizeVisualReview,
@@ -132,6 +137,17 @@ export async function auditAttempt(charter, attempt, { previousAttempt = null, s
   }
   attempt.retry_problem_solving = retryProblemSolving;
 
+  const prPreparation = evaluatePrPreparation(charter, attempt);
+  for (const preparationCheck of prPreparation.checks) {
+    addCheck(
+      `pr_preparation_${preparationCheck.id}`,
+      preparationCheck.label,
+      preparationCheck.passed,
+      preparationCheck.detail,
+    );
+  }
+  attempt.pr_preparation_gate = prPreparation;
+
   for (const check of [...completionEvidenceChecks(charter, attempt), minimumCompletionCheck(charter, attempt)]) {
     addCheck(
       check.id,
@@ -146,9 +162,9 @@ export async function auditAttempt(charter, attempt, { previousAttempt = null, s
 
   if (attempt.independent_audit) {
     addCheck("minimum_review_current", "Independent review covers the current evidence",
-      Boolean(attempt.independent_audit.minimum_matrix_sha256 &&
-        attempt.independent_audit.minimum_matrix_sha256 === attempt.observed_evidence?.minimum_completion?.matrix_sha256),
-      "Changed minimum evidence requires a fresh independent review.");
+      Boolean(attempt.independent_audit.evidence_identity_sha256 &&
+        attempt.independent_audit.evidence_identity_sha256 === independentAuditEvidenceIdentity(attempt)),
+      "Changed head, base, CI, skip disclosure, PR preparation, companion revision, or minimum evidence requires a fresh independent review.");
   }
 
   const evidenceRequired = charter.expected_evidence.includes("ui_evidence_path");
@@ -314,12 +330,18 @@ export function evaluatePrReadiness(charter, attempt) {
   const local = attempt.observed_evidence?.local || {};
   const independentAudit = attempt.independent_audit;
   const minimum = minimumCompletionCheck(charter, attempt);
+  const preparation = evaluatePrPreparation(charter, attempt);
+  const skippedDisclosure = skippedChecksDisclosure(
+    github.checks,
+    attempt.skipped_checks,
+  );
   const checks = [
     readinessCheck(minimum.id, minimum.passed, minimum.detail),
     readinessCheck("minimum_independent_binding",
-      Boolean(independentAudit?.minimum_matrix_sha256 && independentAudit.minimum_matrix_sha256 === attempt.observed_evidence?.minimum_completion?.matrix_sha256),
-      "Independent review must cover the current minimum evidence matrix."),
+      Boolean(independentAudit?.evidence_identity_sha256 && independentAudit.evidence_identity_sha256 === independentAuditEvidenceIdentity(attempt)),
+      "Independent review must cover the current head, base, CI, skips, preparation rows, companion revisions, and minimum evidence."),
     readinessCheck("implementation_gate", attempt.audit?.passed === true, "Implementation gate must pass."),
+    readinessCheck("pr_preparation_gate", preparation.passed, preparation.detail),
     readinessCheck(
       "independent_ai_audit",
       independentAudit?.passed === true,
@@ -361,6 +383,21 @@ export function evaluatePrReadiness(charter, attempt) {
       github.base_branch === charter.base_branch,
       `Expected ${charter.base_branch}; GitHub reports ${github.base_branch || "missing"}.`,
     ),
+    readinessCheck(
+      "base_ref_refreshed",
+      local.base_ref_refreshed === true,
+      local.base_ref_error || "The remote base ref was not refreshed before readiness evaluation.",
+    ),
+    readinessCheck(
+      "latest_base_integrated",
+      local.base_is_ancestor === true,
+      `Latest ${charter.base_branch} ${local.base_sha || "unknown"} is not an ancestor of local HEAD ${local.head_sha || "unknown"}.`,
+    ),
+    readinessCheck(
+      "github_base_matches_fetched_base",
+      Boolean(github.base_sha && local.base_sha && github.base_sha === local.base_sha),
+      `GitHub base ${github.base_sha || "unknown"}; fetched base ${local.base_sha || "unknown"}.`,
+    ),
     readinessCheck(
       "pr_mergeable",
       github.mergeable === "MERGEABLE" && github.merge_state_status === "CLEAN",
@@ -368,6 +405,11 @@ export function evaluatePrReadiness(charter, attempt) {
     ),
     readinessCheck("status_checks_present", github.checks_present === true, "No PR status checks found."),
     readinessCheck("status_checks_passing", github.checks_passing === true, "PR checks are pending or failing."),
+    readinessCheck(
+      "skipped_checks_disclosed",
+      skippedDisclosure.passed,
+      skippedDisclosure.detail,
+    ),
     readinessCheck(
       "required_checks_present",
       github.required_checks_present === true,

package/src/orchestrator/contract.js

@@ -10,6 +10,7 @@ import {
 import { budgetState, resolveRunBudgets } from "./budget.js";
 import { classifyRisk } from "./risk.js";
 import { buildCompletionContract } from "./completion-contract.js";
+import { defaultPrPreparationContract } from "./pr-preparation.js";
 import {
   DESKTOP_EXECUTION_TARGET,
   normalizeDesktopExecutionTarget,
@@ -174,6 +175,7 @@ export function createCodingLoopSnapshot({ runId, request, metadata = {} }) {
         nonGoals: finalNonGoals,
         expectedEvidence,
       }),
+      pr_preparation_contract: defaultPrPreparationContract(),
       thread_state: {
         original_request:
           cleanString(charterContext.original_request) || cleanString(request.requirement),