@chllming/wave-orchestration 0.5.1 → 0.5.2

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.5.2 - 2026-03-22
+
+- Hardened structured closure marker parsing so fenced or prose example `[wave-*]` lines no longer satisfy implementation, integration, documentation, or evaluator gates.
+- Hardened `### Deliverables` so declared outputs must remain repo-relative file paths inside the implementation agent's declared file ownership before the exit contract can pass.
+- Added regression coverage for the fenced-marker false-positive path and for deliverables that escape ownership boundaries.
+
 ## 0.5.1 - 2026-03-22
 
 - Fixed the Phase 4 autonomous finalization barrier so completed lanes still block on unresolved human feedback or escalation tickets from earlier waves.

package/README.md

@@ -17,12 +17,12 @@ It includes:
 ## Quick Start
 
 Published package:
-- `@chllming/wave-orchestration@0.5.1`
-- Current release registry: `https://npm.pkg.github.com`
-- Release: [v0.5.1](https://github.com/chllming/wave-orchestration/releases/tag/v0.5.1)
-- npmjs trusted publishing workflow: [publish-npm.yml](./.github/workflows/publish-npm.yml)
+- `@chllming/wave-orchestration@0.5.2`
+- Primary public registry: `https://registry.npmjs.org`
+- Release: [v0.5.2](https://github.com/chllming/wave-orchestration/releases/tag/v0.5.2)
+- npmjs publish workflow: [publish-npm.yml](./.github/workflows/publish-npm.yml)
 
-Install after configuring the current GitHub Packages path from [github-packages-setup.md](./docs/reference/github-packages-setup.md):
+Install from npmjs:
 
 ```bash
 pnpm add -D @chllming/wave-orchestration
@@ -38,18 +38,25 @@ If your repo already has Wave config, docs, or waves you want to keep:
 pnpm exec wave init --adopt-existing
 ```
 
+## New In 0.5.2
+
+- Example `[wave-*]` markers inside fenced snippets or prose no longer satisfy closure; only real standalone structured signals count.
+- `### Deliverables` is now enforced as an ownership-scoped file contract, so declared outputs must stay inside that agent's `File ownership` block.
+- Regression coverage now includes both of those failure paths directly.
+
 ## New In 0.5.1
 
 - Phase 4 finalization now correctly stays blocked on unresolved human feedback and escalation items from completed waves.
 - Hermetic trace fixtures now force local executor coverage for seeded control-plane agents, so replay tests cannot accidentally launch real Codex, Claude Code, or OpenCode sessions.
-- npmjs trusted publishing is now wired in parallel with GitHub Packages, with maintainer docs for the first public npmjs release bootstrap.
+- npmjs is now the primary public install path.
+- npmjs publishing is wired in parallel with GitHub Packages, with repository-secret auth through `NPM_TOKEN`.
 
 ## New In 0.5.0
 
 - Capability-targeted work is now first-class: open capability requests become explicit helper assignments with deterministic assignee resolution, ledger visibility, inbox coverage, and closure barriers.
 - Cross-lane work is now first-class too: `wave dep post|show|resolve|render` manages typed dependency tickets, and required inbound or outbound dependencies now surface directly in lane state and gating.
 - Hermetic replay acceptance is now stronger around the runtime-orchestration layer, with stored outcome snapshots and launcher-generated local trace fixtures covering fallback, clarification, and dependency paths.
-- The package now carries explicit repository metadata so GitHub Packages can link it back to this repo cleanly.
+- The package now carries explicit repository metadata for package and release provenance.
 
 ## Requirements
 
@@ -61,19 +68,15 @@ pnpm exec wave init --adopt-existing
 
 ## Install Into Another Repo
 
-1. Use the current GitHub Packages install path from [github-packages-setup.md](./docs/reference/github-packages-setup.md).
-
-   npmjs trusted publishing is prepared in this repo, but zero-token npmjs installs only become available after the first npmjs release is published.
-
-   GitHub Packages npm installs still require authentication, even for public packages on `npm.pkg.github.com`.
-
-2. Add the package:
+1. Install the package from npmjs:
 
 ```bash
 pnpm add -D @chllming/wave-orchestration
 ```
 
-3. Initialize the repo:
+   If you need GitHub Packages instead, use the authenticated fallback in [github-packages-setup.md](./docs/reference/github-packages-setup.md).
+
+2. Initialize the repo:
 
 Fresh repo:
 
@@ -87,14 +90,14 @@ Existing repo with Wave config/docs/waves you want to preserve:
 pnpm exec wave init --adopt-existing
 ```
 
-4. Run a non-mutating health check:
+3. Run a non-mutating health check:
 
 ```bash
 pnpm exec wave doctor
 pnpm exec wave launch --lane main --dry-run --no-dashboard
 ```
 
-5. Upgrade later without overwriting plans or waves:
+4. Upgrade later without overwriting plans or waves:
 
 ```bash
 pnpm up @chllming/wave-orchestration
@@ -145,8 +148,8 @@ node scripts/wave.mjs launch --lane main --start-wave 0 --end-wave 0 --executor
 - [docs/plans/current-state.md](./docs/plans/current-state.md): shipped runtime and package capabilities
 - [docs/plans/master-plan.md](./docs/plans/master-plan.md): next priorities after the current shipped runtime
 - [docs/plans/migration.md](./docs/plans/migration.md): adopt this package into another repository
-- [docs/reference/github-packages-setup.md](./docs/reference/github-packages-setup.md): `.npmrc` and GitHub Packages auth details
-- [docs/reference/npmjs-trusted-publishing.md](./docs/reference/npmjs-trusted-publishing.md): maintainer setup for zero-token npmjs publishing from GitHub Actions
+- [docs/reference/github-packages-setup.md](./docs/reference/github-packages-setup.md): optional `.npmrc` and GitHub Packages auth details
+- [docs/reference/npmjs-trusted-publishing.md](./docs/reference/npmjs-trusted-publishing.md): maintainer setup for npmjs publishing through the repo workflow and `NPM_TOKEN`
 - [docs/reference/runtime-config/README.md](./docs/reference/runtime-config/README.md): runtime precedence, merge rules, and generated artifact paths
 - [docs/reference/runtime-config/codex.md](./docs/reference/runtime-config/codex.md): full Codex configuration reference
 - [docs/reference/runtime-config/claude.md](./docs/reference/runtime-config/claude.md): full Claude configuration reference
@@ -265,6 +268,7 @@ Each wave is regular markdown. The harness looks for:
 - `### Context7`
 - `### Components`
 - `### Capabilities`
+- `### Deliverables`
 - `### Exit contract`
 - `### Prompt`
 
@@ -341,6 +345,11 @@ File ownership (only touch these paths):
 - proof: integration
 - doc-impact: owned
 
+### Deliverables
+
+- src/example.ts
+- test/example.test.ts
+
 ### Prompt
 ```text
 Read docs/reference/repository-guidance.md.
@@ -356,6 +365,8 @@ File ownership (only touch these paths):
 
 `### Capabilities` is optional. It lets the coordination layer route targeted follow-up work to a capability rather than a single hard-coded agent.
 
+`### Deliverables` is also optional. When present, the launcher validates that each listed repo-relative file both exists and stays within the implementation agent's declared file ownership before the exit contract can pass.
+
 Open capability-targeted requests now become explicit helper assignments. The launcher resolves them deterministically, writes the assignment snapshot under `.tmp/`, mirrors the decision into the coordination log for the board and replay surface, and keeps the wave blocked until the linked follow-up resolves.
 
 The component matrix is also expected to reflect the landed state. Before a promoted wave closes, `docs/plans/component-cutover-matrix.json` should advance each promoted component's `currentLevel` to the proved target.
@@ -533,17 +544,17 @@ pnpm exec wave changelog --since-installed
 
 ## Research Sources
 
-The repository only commits a source index. Hydrated paper or article caches should stay local and ignored under `docs/research/cache/` or `docs/research/agent-context-cache/`.
-
-- [Effective harnesses for long-running agents](./docs/research/agent-context-cache/articles/effective-harnesses-for-long-running-agents.md)
-- [Harness engineering: leveraging Codex in an agent-first world](./docs/research/agent-context-cache/articles/harness-engineering-leveraging-codex-in-an-agent-first-world.md)
-- [Unlocking the Codex harness: how we built the App Server](./docs/research/agent-context-cache/articles/unlocking-the-codex-harness-how-we-built-the-app-server.md)
-- [Building Effective AI Coding Agents for the Terminal: Scaffolding, Harness, Context Engineering, and Lessons Learned](./docs/research/agent-context-cache/papers/building-effective-ai-coding-agents-for-the-terminal-scaffolding-harness-context-engineering-and-lessons-learned.md)
-- [VeRO: An Evaluation Harness for Agents to Optimize Agents](./docs/research/agent-context-cache/papers/vero-an-evaluation-harness-for-agents-to-optimize-agents.md)
-- [EvoClaw: Evaluating AI Agents on Continuous Software Evolution](./docs/research/agent-context-cache/papers/evoclaw-evaluating-ai-agents-on-continuous-software-evolution.md)
-- [LLM-based Multi-Agent Blackboard System for Information Discovery in Data Science](./docs/research/agent-context-cache/papers/llm-based-multi-agent-blackboard-system-for-information-discovery-in-data-science.md)
-- [Exploring Advanced LLM Multi-Agent Systems Based on Blackboard Architecture](./docs/research/agent-context-cache/papers/exploring-advanced-llm-multi-agent-systems-based-on-blackboard-architecture.md)
-- [DOVA: Deliberation-First Multi-Agent Orchestration for Autonomous Research Automation](./docs/research/agent-context-cache/papers/dova-deliberation-first-multi-agent-orchestration-for-autonomous-research-automation.md)
-- [Silo-Bench: A Scalable Environment for Evaluating Distributed Coordination in Multi-Agent LLM Systems](./docs/research/agent-context-cache/papers/silo-bench-a-scalable-environment-for-evaluating-distributed-coordination-in-multi-agent-llm-systems.md)
-- [SYMPHONY: Synergistic Multi-agent Planning with Heterogeneous Language Model Assembly](./docs/research/agent-context-cache/papers/symphony-synergistic-multi-agent-planning-with-heterogeneous-language-model-assembly.md)
-- [An Open Agent Architecture](./docs/research/agent-context-cache/papers/an-open-agent-architecture.md)
+The canonical source index is [docs/research/agent-context-sources.md](./docs/research/agent-context-sources.md). Hydrated paper or article caches should stay local and ignored under `docs/research/cache/` or `docs/research/agent-context-cache/`.
+
+- [Effective harnesses for long-running agents](https://www.anthropic.com/engineering/effective-harnesses-for-long-running-agents)
+- [Harness engineering: leveraging Codex in an agent-first world](https://openai.com/index/harness-engineering/)
+- [Unlocking the Codex harness: how we built the App Server](https://openai.com/index/unlocking-the-codex-harness/)
+- [Building Effective AI Coding Agents for the Terminal: Scaffolding, Harness, Context Engineering, and Lessons Learned](https://arxiv.org/abs/2603.05344)
+- [VeRO: An Evaluation Harness for Agents to Optimize Agents](https://arxiv.org/abs/2602.22480)
+- [EvoClaw: Evaluating AI Agents on Continuous Software Evolution](https://arxiv.org/abs/2603.13428)
+- [LLM-Based Multi-Agent Blackboard System for Information Discovery in Data Science](https://arxiv.org/abs/2510.01285)
+- [Exploring Advanced LLM Multi-Agent Systems Based on Blackboard Architecture](https://arxiv.org/abs/2507.01701)
+- [DOVA: Deliberation-First Multi-Agent Orchestration for Autonomous Research Automation](https://arxiv.org/abs/2603.13327)
+- [Silo-Bench: A Scalable Environment for Evaluating Distributed Coordination in Multi-Agent LLM Systems](https://arxiv.org/abs/2603.01045)
+- [SYMPHONY: Synergistic Multi-agent Planning with Heterogeneous Language Model Assembly](https://arxiv.org/abs/2601.22623)
+- [An Open Agent Architecture](https://cdn.aaai.org/Symposia/Spring/1994/SS-94-03/SS94-03-001.pdf)

package/docs/plans/migration.md

@@ -2,18 +2,17 @@
 
 ## Default Adoption Path
 
-1. Install from the current GitHub Packages path as described in [github-packages-setup.md](../reference/github-packages-setup.md).
-2. Install the package with `pnpm add -D @chllming/wave-orchestration`.
-3. For a fresh repo, run `pnpm exec wave init`.
-4. For a repo that already has Wave config, docs, or waves you want to preserve, run `pnpm exec wave init --adopt-existing`.
-5. Edit `wave.config.json` for the repo's docs, roles, validation rules, executor defaults, and component-cutover matrix paths.
-6. Replace the starter plan docs, sample waves, and component cutover matrix with repository-specific ones.
-7. Configure Context7 bundles for the external libraries that repo actually uses.
-8. Run `pnpm exec wave doctor` and `pnpm exec wave launch --lane main --dry-run --no-dashboard` until validation passes.
-9. Inspect seeded coordination and inbox artifacts with `pnpm exec wave coord show --lane main --wave 0 --dry-run --json` and `pnpm exec wave coord inbox --lane main --wave 0 --agent A1 --dry-run`.
-10. Upgrade later with `pnpm up @chllming/wave-orchestration` and `pnpm exec wave upgrade`.
+1. Install the package from npmjs with `pnpm add -D @chllming/wave-orchestration`.
+2. For a fresh repo, run `pnpm exec wave init`.
+3. For a repo that already has Wave config, docs, or waves you want to preserve, run `pnpm exec wave init --adopt-existing`.
+4. Edit `wave.config.json` for the repo's docs, roles, validation rules, executor defaults, and component-cutover matrix paths.
+5. Replace the starter plan docs, sample waves, and component cutover matrix with repository-specific ones.
+6. Configure Context7 bundles for the external libraries that repo actually uses.
+7. Run `pnpm exec wave doctor` and `pnpm exec wave launch --lane main --dry-run --no-dashboard` until validation passes.
+8. Inspect seeded coordination and inbox artifacts with `pnpm exec wave coord show --lane main --wave 0 --dry-run --json` and `pnpm exec wave coord inbox --lane main --wave 0 --agent A1 --dry-run`.
+9. Upgrade later with `pnpm up @chllming/wave-orchestration` and `pnpm exec wave upgrade`.
 
-`wave-orchestration` also ships an npmjs trusted-publishing workflow for future zero-token installs, but that path is only active after the first npmjs release is published from this repo. Maintainer setup is documented in [npmjs-trusted-publishing.md](../reference/npmjs-trusted-publishing.md).
+GitHub Packages remains available as an authenticated fallback path, and maintainer npm publishing setup is documented in [npmjs-trusted-publishing.md](../reference/npmjs-trusted-publishing.md).
 
 ## Upgrade Contract
 

package/docs/plans/wave-orchestrator.md

@@ -179,6 +179,7 @@ pnpm exec wave changelog --since-installed
 - From the configured thresholds onward, declare `## Component promotions` and keep them aligned with the component cutover matrix.
 - From the configured thresholds onward, every non-A0/A8/A9 agent must declare `### Components` and emit `[wave-component]` markers for those components.
 - `### Capabilities` is optional and lets the scheduler route targeted follow-up work by capability.
+- `### Deliverables` is optional and lets a wave declare exact repo-relative file outputs that must exist, and that stay within the agent's declared file ownership, before an implementation agent can satisfy its exit contract.
 - `### Executor` can declare `profile`, `fallbacks`, `tags`, and runtime budgets in addition to vendor-specific overrides.
 - Lane runtime policy can assign a default executor by role even when the wave omits `### Executor`.
 - Use `### Role prompts` for standing-role imports from `docs/agents/*.md`.

package/docs/reference/github-packages-setup.md

@@ -1,9 +1,9 @@
 # GitHub Packages Setup
 
-Use this package through GitHub Packages under the `@chllming` scope.
+Use this page only if you intentionally want the legacy GitHub Packages install path.
 
 GitHub's npm registry still requires authentication for installs from `npm.pkg.github.com`, even when the package and backing repository are public.
-This remains the current install path for released versions until the npmjs publish workflow is used for a public npmjs release. If you want to prepare zero-token npmjs publishing for future releases, see [npmjs-trusted-publishing.md](./npmjs-trusted-publishing.md).
+This is now the optional authenticated fallback path. The primary public install path is npmjs. Maintainer npm publishing setup is documented in [npmjs-trusted-publishing.md](./npmjs-trusted-publishing.md).
 
 ## `.npmrc`
 

package/docs/reference/npmjs-trusted-publishing.md

@@ -1,54 +1,50 @@
-# npmjs Trusted Publishing
+# npmjs Publishing
 
 This repo now includes a dedicated npmjs publish workflow at [publish-npm.yml](../../.github/workflows/publish-npm.yml).
 
-It is designed for npm trusted publishing from GitHub Actions, so the publish step does not need an `NPM_TOKEN`.
+It currently publishes through a repository Actions secret named `NPM_TOKEN`.
 
 ## What This Repo Already Does
 
 - `package.json` no longer hardcodes GitHub Packages as the publish registry.
 - `publish-npm.yml` publishes tagged releases to `https://registry.npmjs.org`.
 - `publish-package.yml` still publishes to GitHub Packages explicitly, so both registries can coexist.
+- `publish-npm.yml` expects `NPM_TOKEN` in GitHub Actions secrets.
 
 ## One-Time npm Setup
 
-1. Open the package settings for `@chllming/wave-orchestration` on npmjs.com.
-2. Go to `Settings` -> `Trusted publishing`.
-3. Add a GitHub Actions trusted publisher with:
-   - organization or user: `chllming`
-   - repository: `wave-orchestration`
-   - workflow filename: `publish-npm.yml`
-   - environment name: leave empty unless you later add a protected GitHub environment to the workflow
-4. Save the trusted publisher.
-
-If npmjs does not expose package settings for `@chllming/wave-orchestration` yet, complete the first npmjs publish manually once, then return and configure trusted publishing for later releases.
+1. Create an npm granular access token with:
+   - package or scope access for `@chllming/wave-orchestration`
+   - `Read and write` permission
+   - `Bypass 2FA` enabled
+2. In the GitHub repo `chllming/wave-orchestration`, add that token as an Actions secret named `NPM_TOKEN`.
+3. Rotate or revoke the token when no longer needed.
 
 ## GitHub Workflow Behavior
 
 The npmjs workflow:
 
 - runs on GitHub-hosted runners
-- requires `contents: read` and `id-token: write`
+- requires `contents: read`
 - installs dependencies with `pnpm install --frozen-lockfile`
 - runs `pnpm test`
 - publishes with `pnpm publish --access public --no-git-checks`
-
-Trusted publishing depends on npm's OIDC support. The workflow is configured for Node 24 so the runner satisfies npm's current trusted-publishing requirements.
+- authenticates with `NODE_AUTH_TOKEN=${{ secrets.NPM_TOKEN }}`
 
 ## Security Follow-Up
 
-After the first trusted publish succeeds:
+After a successful npm publish:
 
-1. Return to the npm package settings.
-2. Restrict publishing access to trusted publishing / 2FA as appropriate for your account policy.
-3. Remove any old publish-capable npm automation tokens that are no longer needed.
+1. Keep the token scoped only to this package or scope.
+2. Rotate the token periodically.
+3. Revoke emergency or temporary tokens once they are no longer needed.
 
-If this repo later needs private npm dependencies during CI, add a separate read-only install token for `pnpm install`. Trusted publishing only covers `npm publish` / `pnpm publish`.
+If this repo later needs private npm dependencies during CI, consider a separate read-only install token rather than reusing the publish token.
 
 ## First Release Checklist
 
 1. Confirm [publish-npm.yml](../../.github/workflows/publish-npm.yml) is on the default branch.
-2. Confirm the trusted publisher entry on npm matches `publish-npm.yml` exactly.
+2. Confirm `NPM_TOKEN` exists in the GitHub repo secrets.
 3. Confirm the package version has been bumped and committed.
 4. Push the release tag, for example `v0.4.1`.
 5. Verify the GitHub Actions run publishes successfully to npmjs.

package/package.json

@@ -1,9 +1,8 @@
 {
   "name": "@chllming/wave-orchestration",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "license": "MIT",
   "description": "Generic wave-based multi-agent orchestration for repository work.",
-  "packageManager": "pnpm@10.23.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/chllming/wave-orchestration.git"
@@ -31,6 +30,12 @@
     "wave-dashboard": "scripts/wave-dashboard.mjs",
     "wave-local-executor": "scripts/wave-local-executor.mjs"
   },
+  "devDependencies": {
+    "@mozilla/readability": "^0.6.0",
+    "jsdom": "^29.0.1",
+    "pdfjs-dist": "^5.5.207",
+    "vitest": "3.2.4"
+  },
   "scripts": {
     "context7:api-check": "bash scripts/context7-export-env.sh run bash scripts/context7-api-check.sh",
     "research:import-agent-context": "node scripts/research/import-agent-context-archive.mjs scripts/research/manifests/harness-and-blackboard-2026-03-21.mjs",
@@ -43,11 +48,5 @@
     "wave:feedback": "node scripts/wave-human-feedback.mjs",
     "wave:launch": "node scripts/wave-launcher.mjs",
     "wave:local": "node scripts/wave-local-executor.mjs"
-  },
-  "devDependencies": {
-    "@mozilla/readability": "^0.6.0",
-    "jsdom": "^29.0.1",
-    "pdfjs-dist": "^5.5.207",
-    "vitest": "3.2.4"
   }
-}
+}

package/releases/manifest.json

@@ -2,6 +2,21 @@
   "schemaVersion": 1,
   "packageName": "@chllming/wave-orchestration",
   "releases": [
+    {
+      "version": "0.5.2",
+      "date": "2026-03-22",
+      "summary": "Closure-marker and deliverable-ownership hardening for wave exit validation.",
+      "features": [
+        "Structured wave markers now only count when emitted as real standalone signals, not when they appear inside fenced examples or prose snippets.",
+        "`### Deliverables` now requires repo-relative file outputs that stay within the agent's declared file ownership before implementation closure can pass.",
+        "Regression coverage now exercises the fenced-marker false-positive path and deliverable ownership violations directly."
+      ],
+      "manualSteps": [
+        "If a wave uses `### Deliverables`, rerun `pnpm exec wave launch --lane main --dry-run --no-dashboard` after upgrading and keep every deliverable inside that agent's `File ownership` block.",
+        "Do not rely on example `[wave-*]` snippets in agent output; only emitted standalone markers now count toward closure."
+      ],
+      "breaking": false
+    },
     {
       "version": "0.5.1",
       "date": "2026-03-22",

package/scripts/wave-orchestrator/agent-state.mjs

@@ -1,3 +1,4 @@
+import fs from "node:fs";
 import path from "node:path";
 import {
   REPO_ROOT,
@@ -34,6 +35,59 @@ const WAVE_GAP_REGEX =
   /^\[wave-gap\]\s*kind=(architecture|integration|durability|ops|docs)\s*(?:detail=(.*))?$/gim;
 const WAVE_COMPONENT_REGEX =
   /^\[wave-component\]\s*component=([a-z0-9._-]+)\s+level=([a-z0-9._-]+)\s+state=(met|gap)\s*(?:detail=(.*))?$/gim;
+const STRUCTURED_SIGNAL_LINE_REGEX = /^\[wave-[^\]]+\].*$/;
+const WRAPPED_STRUCTURED_SIGNAL_LINE_REGEX = /^`\[wave-[^`]+`$/;
+
+function normalizeStructuredSignalText(text) {
+  if (!text) {
+    return "";
+  }
+  const normalizedLines = [];
+  let fenceLines = null;
+  for (const rawLine of String(text || "").split(/\r?\n/)) {
+    const trimmed = rawLine.trim();
+    if (/^```/.test(trimmed)) {
+      if (fenceLines === null) {
+        fenceLines = [];
+        continue;
+      }
+      const normalizedFenceLines = fenceLines
+        .map((line) => normalizeStructuredSignalLine(line))
+        .filter(Boolean);
+      if (normalizedFenceLines.length > 0 && normalizedFenceLines.length === fenceLines.length) {
+        normalizedLines.push(...normalizedFenceLines);
+      }
+      fenceLines = null;
+      continue;
+    }
+    if (fenceLines !== null) {
+      if (!trimmed) {
+        continue;
+      }
+      fenceLines.push(trimmed);
+      continue;
+    }
+    const normalized = normalizeStructuredSignalLine(trimmed);
+    if (normalized) {
+      normalizedLines.push(normalized);
+    }
+  }
+  return normalizedLines.join("\n");
+}
+
+function normalizeStructuredSignalLine(line) {
+  const trimmed = String(line || "").trim();
+  if (!trimmed) {
+    return null;
+  }
+  if (STRUCTURED_SIGNAL_LINE_REGEX.test(trimmed)) {
+    return trimmed;
+  }
+  if (WRAPPED_STRUCTURED_SIGNAL_LINE_REGEX.test(trimmed)) {
+    return trimmed.slice(1, -1);
+  }
+  return null;
+}
 
 function cleanText(value) {
   return String(value || "").trim();
@@ -88,6 +142,51 @@ function findLatestComponentMatches(text) {
   return Array.from(byComponent.values());
 }
 
+function detectTermination(logText, statusRecord) {
+  const patterns = [
+    { reason: "max-turns", regex: /(Reached max turns \(\d+\))/i },
+    { reason: "timeout", regex: /(timed out(?: after [^\n.]+)?)/i },
+    { reason: "session-missing", regex: /(session [^\n]+ disappeared before [^\n]+ was written)/i },
+  ];
+  for (const pattern of patterns) {
+    const match = String(logText || "").match(pattern.regex);
+    if (match) {
+      return {
+        reason: pattern.reason,
+        hint: cleanText(match[1] || match[0]),
+      };
+    }
+  }
+  const statusHint = cleanText(
+    statusRecord?.detail || statusRecord?.message || statusRecord?.error || statusRecord?.reason,
+  );
+  if (statusHint) {
+    return {
+      reason: "status-detail",
+      hint: statusHint,
+    };
+  }
+  const exitCode = Number.isFinite(Number(statusRecord?.code)) ? Number(statusRecord.code) : null;
+  if (exitCode !== null && exitCode !== 0) {
+    return {
+      reason: "exit-code",
+      hint: `Exit code ${exitCode}.`,
+    };
+  }
+  return {
+    reason: null,
+    hint: "",
+  };
+}
+
+function appendTerminationHint(detail, summary) {
+  const hint = cleanText(summary?.terminationHint || summary?.terminationReason);
+  if (!hint) {
+    return detail;
+  }
+  return `${detail} Termination: ${hint}`;
+}
+
 function meetsOrExceeds(actual, required, orderMap) {
   if (!required) {
     return true;
@@ -153,6 +252,7 @@ export function readAgentExecutionSummary(summaryPathOrStatusPath) {
 
 export function buildAgentExecutionSummary({ agent, statusRecord, logPath, reportPath = null }) {
   const logText = readFileTail(logPath, 60000);
+  const signalText = normalizeStructuredSignalText(logText);
   const reportText =
     reportPath && readJsonOrNull(reportPath) === null
       ? readFileTail(reportPath, 60000)
@@ -160,38 +260,39 @@ export function buildAgentExecutionSummary({ agent, statusRecord, logPath, repor
         ? readFileTail(reportPath, 60000)
         : "";
   const reportVerdict = parseVerdictFromText(reportText, REPORT_VERDICT_REGEX);
-  const logVerdict = parseVerdictFromText(logText, WAVE_VERDICT_REGEX);
+  const logVerdict = parseVerdictFromText(signalText, WAVE_VERDICT_REGEX);
   const verdict = reportVerdict.verdict ? reportVerdict : logVerdict;
+  const termination = detectTermination(logText, statusRecord);
   return {
     agentId: agent?.agentId || null,
     promptHash: statusRecord?.promptHash || null,
     exitCode: Number.isFinite(Number(statusRecord?.code)) ? Number(statusRecord.code) : null,
     completedAt: statusRecord?.completedAt || null,
-    proof: findLastMatch(logText, WAVE_PROOF_REGEX, (match) => ({
+    proof: findLastMatch(signalText, WAVE_PROOF_REGEX, (match) => ({
       completion: match[1],
       durability: match[2],
       proof: match[3],
       state: match[4],
       detail: cleanText(match[5]),
     })),
-    docDelta: findLastMatch(logText, WAVE_DOC_DELTA_REGEX, (match) => ({
+    docDelta: findLastMatch(signalText, WAVE_DOC_DELTA_REGEX, (match) => ({
       state: match[1],
       paths: parsePaths(match[2]),
       detail: cleanText(match[3]),
     })),
-    docClosure: findLastMatch(logText, WAVE_DOC_CLOSURE_REGEX, (match) => ({
+    docClosure: findLastMatch(signalText, WAVE_DOC_CLOSURE_REGEX, (match) => ({
       state: match[1],
       paths: parsePaths(match[2]),
       detail: cleanText(match[3]),
     })),
-    integration: findLastMatch(logText, WAVE_INTEGRATION_REGEX, (match) => ({
+    integration: findLastMatch(signalText, WAVE_INTEGRATION_REGEX, (match) => ({
       state: match[1],
       claims: Number.parseInt(String(match[2] || "0"), 10) || 0,
       conflicts: Number.parseInt(String(match[3] || "0"), 10) || 0,
       blockers: Number.parseInt(String(match[4] || "0"), 10) || 0,
       detail: cleanText(match[5]),
     })),
-    gate: findLastMatch(logText, WAVE_GATE_REGEX, (match) => ({
+    gate: findLastMatch(signalText, WAVE_GATE_REGEX, (match) => ({
       architecture: match[1],
       integration: match[2],
       durability: match[3],
@@ -199,17 +300,25 @@ export function buildAgentExecutionSummary({ agent, statusRecord, logPath, repor
       docs: match[5],
       detail: cleanText(match[6]),
     })),
-    components: findLatestComponentMatches(logText),
-    gaps: findAllMatches(logText, WAVE_GAP_REGEX, (match) => ({
+    components: findLatestComponentMatches(signalText),
+    gaps: findAllMatches(signalText, WAVE_GAP_REGEX, (match) => ({
       kind: match[1],
       detail: cleanText(match[2]),
     })),
+    deliverables: Array.isArray(agent?.deliverables)
+      ? agent.deliverables.map((deliverable) => ({
+          path: deliverable,
+          exists: fs.existsSync(path.resolve(REPO_ROOT, deliverable)),
+        }))
+      : [],
     verdict: verdict.verdict
       ? {
           verdict: verdict.verdict,
           detail: cleanText(verdict.detail),
         }
       : null,
+    terminationReason: termination.reason,
+    terminationHint: termination.hint,
     logPath: path.relative(REPO_ROOT, logPath),
     reportPath: reportPath ? path.relative(REPO_ROOT, reportPath) : null,
   };
@@ -239,7 +348,7 @@ export function validateImplementationSummary(agent, summary) {
     return {
       ok: false,
       statusCode: "missing-wave-proof",
-      detail: `Missing [wave-proof] marker for ${agent.agentId}.`,
+      detail: appendTerminationHint(`Missing [wave-proof] marker for ${agent.agentId}.`, summary),
     };
   }
   if (summary.proof.state !== "met") {
@@ -274,7 +383,7 @@ export function validateImplementationSummary(agent, summary) {
     return {
       ok: false,
       statusCode: "missing-doc-delta",
-      detail: `Missing [wave-doc-delta] marker for ${agent.agentId}.`,
+      detail: appendTerminationHint(`Missing [wave-doc-delta] marker for ${agent.agentId}.`, summary),
     };
   }
   if (!meetsOrExceeds(summary.docDelta.state, contract.docImpact, DOC_IMPACT_ORDER)) {
@@ -319,6 +428,31 @@ export function validateImplementationSummary(agent, summary) {
       }
     }
   }
+  const deliverables = Array.isArray(agent?.deliverables) ? agent.deliverables : [];
+  if (deliverables.length > 0) {
+    const deliverableState = new Map(
+      Array.isArray(summary.deliverables)
+        ? summary.deliverables.map((deliverable) => [deliverable.path, deliverable])
+        : [],
+    );
+    for (const deliverablePath of deliverables) {
+      const deliverable = deliverableState.get(deliverablePath);
+      if (!deliverable) {
+        return {
+          ok: false,
+          statusCode: "missing-deliverable-summary",
+          detail: `Missing deliverable presence record for ${agent.agentId} path ${deliverablePath}.`,
+        };
+      }
+      if (deliverable.exists !== true) {
+        return {
+          ok: false,
+          statusCode: "missing-deliverable",
+          detail: `Agent ${agent.agentId} did not land required deliverable ${deliverablePath}.`,
+        };
+      }
+    }
+  }
   return {
     ok: true,
     statusCode: "pass",
@@ -331,7 +465,10 @@ export function validateDocumentationClosureSummary(agent, summary) {
     return {
       ok: false,
       statusCode: "missing-doc-closure",
-      detail: `Missing [wave-doc-closure] marker for ${agent?.agentId || "A9"}.`,
+      detail: appendTerminationHint(
+        `Missing [wave-doc-closure] marker for ${agent?.agentId || "A9"}.`,
+        summary,
+      ),
     };
   }
   if (summary.docClosure.state === "delta") {
@@ -356,7 +493,10 @@ export function validateIntegrationSummary(agent, summary) {
     return {
       ok: false,
       statusCode: "missing-wave-integration",
-      detail: `Missing [wave-integration] marker for ${agent?.agentId || "A8"}.`,
+      detail: appendTerminationHint(
+        `Missing [wave-integration] marker for ${agent?.agentId || "A8"}.`,
+        summary,
+      ),
     };
   }
   if (summary.integration.state !== "ready-for-doc-closure") {
@@ -380,14 +520,20 @@ export function validateEvaluatorSummary(agent, summary) {
     return {
       ok: false,
       statusCode: "missing-wave-gate",
-      detail: `Missing [wave-gate] marker for ${agent?.agentId || "A0"}.`,
+      detail: appendTerminationHint(
+        `Missing [wave-gate] marker for ${agent?.agentId || "A0"}.`,
+        summary,
+      ),
     };
   }
   if (!summary?.verdict?.verdict) {
     return {
       ok: false,
       statusCode: "missing-evaluator-verdict",
-      detail: `Missing Verdict line or [wave-verdict] marker for ${agent?.agentId || "A0"}.`,
+      detail: appendTerminationHint(
+        `Missing Verdict line or [wave-verdict] marker for ${agent?.agentId || "A0"}.`,
+        summary,
+      ),
     };
   }
   if (summary.verdict.verdict !== "pass") {

package/scripts/wave-orchestrator/coordination.mjs

@@ -341,6 +341,14 @@ export function buildExecutionPrompt({
           "",
         ]
       : [];
+  const deliverableLines =
+    Array.isArray(agent.deliverables) && agent.deliverables.length > 0
+      ? [
+          "Deliverables required for this agent:",
+          ...agent.deliverables.map((deliverablePath) => `- ${deliverablePath}`),
+          "",
+        ]
+      : [];
 
   return [
     `Working directory: ${REPO_ROOT}`,
@@ -404,6 +412,7 @@ export function buildExecutionPrompt({
     ...exitContractLines,
     ...promotedComponentLines,
     ...ownedComponentLines,
+    ...deliverableLines,
     ...context7PromptLines,
     "Assigned implementation prompt:",
     "```",

package/scripts/wave-orchestrator/local-executor.mjs

@@ -63,30 +63,45 @@ function extractOwnedComponents(rawPrompt) {
   return components;
 }
 
-function extractDeliverables(promptText) {
+function extractDeliverablesFromList(text, headingPattern) {
   const out = [];
-  let inFileOwnership = false;
-  for (const line of promptText.split(/\r?\n/)) {
-    if (/^\s*File ownership\b/i.test(line)) {
-      inFileOwnership = true;
+  let inList = false;
+  for (const line of String(text || "").split(/\r?\n/)) {
+    if (headingPattern.test(line)) {
+      inList = true;
       continue;
     }
-    if (inFileOwnership && /^\s*[A-Za-z][A-Za-z0-9 _-]*:\s*$/.test(line)) {
-      inFileOwnership = false;
+    if (inList && /^\s*[A-Za-z][A-Za-z0-9 _-]*:\s*$/.test(line)) {
+      inList = false;
     }
-    if (inFileOwnership) {
-      const bulletMatch = line.match(/^\s*-\s+(.+?)\s*$/);
-      if (bulletMatch) {
-        const cleaned = bulletMatch[1].replace(/[`"']/g, "").trim();
-        if (
-          cleaned.includes("/") ||
-          /\.(md|mdx|js|mjs|ts|go|json|yaml|yml|sh|sql)$/.test(cleaned)
-        ) {
-          out.push(cleaned);
-          continue;
-        }
-      }
+    if (!inList) {
+      continue;
+    }
+    const bulletMatch = line.match(/^\s*-\s+(.+?)\s*$/);
+    if (!bulletMatch) {
+      continue;
+    }
+    const cleaned = bulletMatch[1].replace(/[`"']/g, "").trim();
+    if (
+      cleaned.includes("/") ||
+      /\.(md|mdx|js|mjs|ts|go|json|yaml|yml|sh|sql)$/.test(cleaned)
+    ) {
+      out.push(cleaned);
     }
+  }
+  return out;
+}
+
+function extractDeliverables(rawPrompt, promptText) {
+  const explicit = extractDeliverablesFromList(
+    rawPrompt,
+    /^\s*Deliverables required for this agent:\s*$/i,
+  );
+  if (explicit.length > 0) {
+    return Array.from(new Set(explicit));
+  }
+  const out = extractDeliverablesFromList(promptText, /^\s*File ownership\b/i);
+  for (const line of String(promptText || "").split(/\r?\n/)) {
     const match = line.match(/^\s*\d+[.)]\s*(.+?)\s*$/);
     if (!match) {
       continue;
@@ -203,7 +218,7 @@ export function runLocalExecutorCli(argv) {
   const integrationAgent = agentId === integrationAgentId;
   const ownedComponents = extractOwnedComponents(rawPrompt);
   const assignedPrompt = extractAssignedPrompt(rawPrompt);
-  const deliverables = extractDeliverables(assignedPrompt);
+  const deliverables = extractDeliverables(rawPrompt, assignedPrompt);
   if (deliverables.length === 0) {
     console.log("[local-executor] no deliverables detected; nothing to do.");
     if (evaluatorAgent) {

package/scripts/wave-orchestrator/wave-files.mjs

@@ -173,6 +173,77 @@ function parseComponentList(blockText, filePath, label) {
   return components;
 }
 
+function parsePathList(blockText, filePath, label) {
+  if (!blockText) {
+    return [];
+  }
+  const paths = [];
+  const seen = new Set();
+  for (const line of String(blockText || "").split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (!trimmed) {
+      continue;
+    }
+    const bulletMatch = trimmed.match(/^-\s+(.+?)\s*$/);
+    if (!bulletMatch) {
+      throw new Error(`Malformed path entry "${trimmed}" in ${label} (${filePath})`);
+    }
+    const relPath = bulletMatch[1].replace(/[`"']/g, "").trim();
+    if (!isRepoContainedPath(relPath)) {
+      throw new Error(`Path "${relPath}" in ${label} (${filePath}) must stay within the repo root`);
+    }
+    if (seen.has(relPath)) {
+      throw new Error(`Duplicate path "${relPath}" in ${label} (${filePath})`);
+    }
+    seen.add(relPath);
+    paths.push(relPath);
+  }
+  return paths;
+}
+
+function normalizeRepoRelativePath(relPath) {
+  return String(relPath || "")
+    .replaceAll("\\", "/")
+    .replace(/^\.\/+/, "")
+    .trim();
+}
+
+function isOwnedDirectoryPath(relPath) {
+  return normalizeRepoRelativePath(relPath).endsWith("/");
+}
+
+function deliverableIsOwned(deliverablePath, ownedPath) {
+  const deliverable = normalizeRepoRelativePath(deliverablePath);
+  const owned = normalizeRepoRelativePath(ownedPath);
+  if (!deliverable || !owned) {
+    return false;
+  }
+  if (isOwnedDirectoryPath(owned)) {
+    return deliverable.startsWith(owned);
+  }
+  return deliverable === owned;
+}
+
+function validateAgentDeliverables(deliverables, ownedPaths, filePath, agentId) {
+  if (!Array.isArray(deliverables) || deliverables.length === 0) {
+    return;
+  }
+  const owned = Array.isArray(ownedPaths) ? ownedPaths : [];
+  for (const deliverablePath of deliverables) {
+    const normalized = normalizeRepoRelativePath(deliverablePath);
+    if (normalized.endsWith("/")) {
+      throw new Error(
+        `Deliverable "${deliverablePath}" for agent ${agentId} in ${filePath} must be a file path, not a directory path`,
+      );
+    }
+    if (!owned.some((ownedPath) => deliverableIsOwned(normalized, ownedPath))) {
+      throw new Error(
+        `Deliverable "${deliverablePath}" for agent ${agentId} in ${filePath} must stay within the agent's declared file ownership`,
+      );
+    }
+  }
+}
+
 function extractFencedBlock(blockText, messagePrefix) {
   const fencedBlockMatch = String(blockText || "").match(
     /```(?:[a-zA-Z0-9_-]+)?\r?\n([\s\S]*?)\r?\n```/,
@@ -636,6 +707,13 @@ export function extractAgentCapabilitiesFromSection(sectionText, filePath, agent
   return parseComponentList(block, filePath, `agent ${agentId} capabilities`);
 }
 
+export function extractAgentDeliverablesFromSection(sectionText, filePath, agentId) {
+  const block = extractSectionBody(sectionText, "Deliverables", filePath, agentId, {
+    required: false,
+  });
+  return parsePathList(block, filePath, `agent ${agentId} deliverables`);
+}
+
 export function slugify(value) {
   return value
     .toLowerCase()
@@ -1202,6 +1280,11 @@ export function parseWaveContent(content, filePath, options = {}) {
     const executorConfig = extractExecutorConfigFromSection(sectionText, filePath, current.agentId);
     const components = extractAgentComponentsFromSection(sectionText, filePath, current.agentId);
     const capabilities = extractAgentCapabilitiesFromSection(sectionText, filePath, current.agentId);
+    const deliverables = extractAgentDeliverablesFromSection(
+      sectionText,
+      filePath,
+      current.agentId,
+    );
     const promptOverlay = extractPromptFromSection(sectionText, filePath, current.agentId);
     const prompt = composeResolvedPrompt(
       rolePromptPaths,
@@ -1213,6 +1296,7 @@ export function parseWaveContent(content, filePath, options = {}) {
       },
     );
     const ownedPaths = extractOwnedPaths(promptOverlay);
+    validateAgentDeliverables(deliverables, ownedPaths, filePath, current.agentId);
     agents.push({
       agentId: current.agentId,
       title: current.title,
@@ -1225,6 +1309,7 @@ export function parseWaveContent(content, filePath, options = {}) {
       executorConfig,
       components,
       capabilities,
+      deliverables,
       ownedPaths,
     });
   }