@chllming/wave-orchestration 0.9.3 → 0.9.5

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## Unreleased
 
+## 0.9.5 - 2026-04-05
+
+### Fixed
+- Pass `lanePaths` to `reconcileFailuresAgainstSharedComponentState` to fix `ReferenceError` crash on repos without Integration Steward (A8).
+
+## 0.9.4 - 2026-04-05
+
+- Laddered gate modes: bootstrap/standard/strict per wave number
+- Bootstrap pass: exit 0 + deliverables exist = advance (no QA signals needed)
+- Fix: requireDocumentationStewardFromWave threshold strictly respected
+- New config: gateModeThresholds, bootstrapPassConditions, testCommand
+- evaluateBootstrapGate() and resolveGateMode() functions
+
 ## 0.9.3 - 2026-03-30
 
 ### Fixed And Hardened

package/README.md

@@ -107,18 +107,18 @@ Wave is built to mitigate those failures with a canonical authority set, generat
 
 Current release:
 
-- `@chllming/wave-orchestration@0.9.3`
-- Release tag: [`v0.9.3`](https://github.com/chllming/agent-wave-orchestrator/releases/tag/v0.9.3)
+- `@chllming/wave-orchestration@0.9.5`
+- Release tag: [`v0.9.5`](https://github.com/chllming/agent-wave-orchestrator/releases/tag/v0.9.5)
 - Public install path: npmjs
 - Authenticated fallback: GitHub Packages
 
-Highlights in `0.9.3`:
+Highlights in `0.9.4`:
 
 - Wave-gate markers now accept `gap` alongside `pass`, `concerns`, and `blocked` for all five gate dimensions. Agents that report a documented gap (e.g. `live=gap` for an infrastructure topology constraint) no longer have their marker rejected entirely, and `cont-QA` treats gap values as a conditional pass instead of a hard blocker.
 - First-time `wave launch` now auto-triggers `wave project setup` when no project profile exists, matching existing `wave draft` behavior. The interactive setup flow now shows descriptive help text, explains all template and posture options inline, and adds whitespace between question groups for readability.
 - `PromptSession` gains a `describe(text)` method for writing contextual help to stderr during interactive setup flows.
 - `parseArgs` now passes the loaded config object through to `runLauncherCli`, avoiding a redundant `loadWaveConfig()` call.
-- Release docs, migration guidance, runtime-config and closure references, the manifest, and the tracked install-state fixtures now all point at the `0.9.3` surface.
+- Release docs, migration guidance, runtime-config and closure references, the manifest, and the tracked install-state fixtures now all point at the `0.9.4` surface.
 
 Requirements:
 

package/docs/README.md

@@ -54,7 +54,7 @@ The useful path is journey-first:
 - Publishing the package:
   Read [reference/package-publishing-flow.md](./reference/package-publishing-flow.md) for the end-to-end release path, the GitHub publish workflows, the lifecycle scripts, and the verification or repair flow.
 - Want the practical `0.9.3` operating stance:
-  Read [guides/recommendations-0.9.3.md](./guides/recommendations-0.9.3.md) for the recommended default around relaxed blocker states, advisory turn budgets, and targeted recovery.
+  Read [guides/recommendations-0.9.5.md](./guides/recommendations-0.9.5.md) for the recommended default around relaxed blocker states, advisory turn budgets, and targeted recovery.
 - Want the concrete runtime module map:
   Read [plans/end-state-architecture.md](./plans/end-state-architecture.md) for the engine-by-engine architecture and artifact ownership model.
 - Want the CLI surface map:

package/docs/guides/recommendations-0.9.4.md

@@ -0,0 +1,191 @@
+---
+title: "0.9.4 Recommendations"
+summary: "How to use 0.9.4's softer blocker states, advisory turn budgets, and targeted recovery without weakening proof and closure."
+---
+
+# 0.9.4 Recommendations
+
+Use this guide when you are adopting `0.9.4` and want one practical operating stance for the softer blocker states, advisory turn-budget behavior, and targeted recovery flow that the current package line ships.
+
+## Recommended Default
+
+For most repos, the safest `0.9.4` default is:
+
+- bound work with `budget.minutes`
+- leave generic `budget.turns` as advisory metadata
+- author non-proof follow-up as `soft`, `stale`, or `advisory` instead of silently treating every open record as a hard blocker
+- use `resolve-policy` when the answer already exists in repo policy or shipped docs
+- prefer targeted rerun or resume after timeout, max-turn, rate-limit, or missing-status outcomes instead of relaunching the whole wave
+- in short-lived sandboxes, prefer `wave submit`, `wave supervise`, `wave status`, and `wave wait` instead of binding the full run to one client shell
+- when a wave-gate dimension has a documented gap that is not an actionable blocker, use `gap` instead of `pass` or `blocked` — the runtime treats it as a conditional pass
+
+That recommendation matches the runtime:
+
+- executor launch metadata only emits hard turn-limit flags from `claude.maxTurns` or `opencode.steps`
+- open `stale` and `advisory` coordination records stay visible without reopening the active blocking edge
+- recoverable launcher failures queue targeted retry state instead of immediately escalating to broad terminal wave failure
+
+## 1. Budgets
+
+Treat the two budget knobs differently:
+
+- `budget.minutes` is the primary attempt budget
+- generic `budget.turns` is only a planning hint
+- `claude.maxTurns` or `opencode.steps` are the hard runtime ceilings when you actually want deterministic turn stopping
+
+Recommended pattern for synthesis-heavy implementation or closure work:
+
+```json
+{
+  "executors": {
+    "profiles": {
+      "implementation-default": {
+        "id": "claude",
+        "model": "claude-sonnet-4-6",
+        "budget": {
+          "minutes": 35,
+          "turns": 12
+        }
+      }
+    }
+  }
+}
+```
+
+In that pattern, `35` minutes is real policy. `12` turns is only guidance for planning and preview metadata.
+
+Only set a hard runtime ceiling when you deliberately want the runtime itself to stop:
+
+```json
+{
+  "executors": {
+    "profiles": {
+      "bounded-closure": {
+        "id": "claude",
+        "model": "claude-sonnet-4-6",
+        "budget": {
+          "minutes": 20
+        },
+        "claude": {
+          "maxTurns": 6
+        }
+      }
+    }
+  }
+}
+```
+
+## 2. Softer Coordination States
+
+`0.9.2` keeps “still visible” separate from “still blocking”.
+
+Use these states intentionally:
+
+| State | Use it for | What the runtime does |
+| --- | --- | --- |
+| `soft` | follow-up that still matters but should not be treated like proof failure | remains visible and may still drive repair or retry targeting |
+| `stale` | outdated clarification or blocker context kept for history | visible in control state, but does not reopen blocking by itself |
+| `advisory` | known issue, note, or human context that should stay visible without blocking closure | visible in control state, but does not own the active blocking edge |
+
+Practical command paths:
+
+```bash
+pnpm exec wave control task act defer --lane main --wave 10 --id blocker-doc-follow-up
+pnpm exec wave control task act mark-stale --lane main --wave 10 --id clarify-a7-rollout
+pnpm exec wave control task act mark-advisory --lane main --wave 10 --id request-clarify-a7-rollout
+pnpm exec wave control task act resolve-policy --lane main --wave 10 --id clarify-a7-rollout --detail "Policy already covered in the rollout guide."
+```
+
+Use them when the repo already knows the answer, the remaining item is informational, or the follow-up should stay visible for the next wave without holding the current wave hostage.
+
+## 3. What Should Stay Hard
+
+Do not relax everything.
+
+Keep these hard or closure-critical unless you are intentionally changing wave policy:
+
+- missing proof or required deliverables
+- failed integration, documentation, or cont-QA closure gates
+- real human-feedback or escalation requirements that block safe continuation
+- requests or clarifications that still represent unresolved ownership or policy ambiguity for the current wave
+
+Use `gap` in wave-gate markers when a dimension has a documented gap that is not actionable in the current wave. For example, `live=gap` is appropriate when an infrastructure topology constraint prevents full live validation but the constraint is known, documented, and does not represent a regression. Do not use `gap` to hide actual failures or unreviewed work.
+
+If the current wave cannot truthfully close without the answer, keep it blocking.
+
+## 4. Recovery Recommendation
+
+My recommendation after reviewing the current `0.9.4` code path is:
+
+- let timeout, max-turn, rate-limit, and missing-status failures go through the built-in targeted recovery path first
+- inspect the queued rerun or resume request before manually relaunching the whole wave
+- preserve reusable proof from successful sibling owners whenever the reducer already identified it as reusable
+
+That is the shape the launcher now prefers. It only broadens failure when the remaining blockers are still proof-critical or otherwise non-recoverable.
+
+## 5. Suggested Operator Policy
+
+For most repo-owned runbooks:
+
+- teach authors to use `budget.minutes` first
+- teach operators to downgrade only non-proof follow-up
+- treat `resolve-policy` as the preferred path when the answer already exists in docs or repo policy
+- escalate to a full-wave rerun only after targeted recovery proves insufficient
+
+If you want a single sentence policy:
+
+> Keep proof and closure strict, keep generic turns advisory, and keep non-proof context visible without letting it accidentally own wave closure.
+
+
+## Laddered Gate Modes (new in 0.9.4)
+
+Waves now have three gate strictness tiers based on wave number:
+
+| Mode | Default waves | What's required to advance |
+|------|--------------|---------------------------|
+| **bootstrap** | 0-3 | Implementation agents exit 0 + deliverables exist |
+| **standard** | 4-9 | + A0 verdict required, doc closure recommended |
+| **strict** | 10+ | Full ceremony: all signals, all stewards, all proof |
+
+### Configuration
+
+```json
+{
+  "validation": {
+    "gateModeThresholds": {
+      "bootstrap": 0,
+      "standard": 4,
+      "strict": 10
+    },
+    "bootstrapPassConditions": {
+      "requireTestsPass": true,
+      "requireDeliverablesExist": true,
+      "requireExitCodeZero": true
+    },
+    "testCommand": "pnpm test:repo"
+  }
+}
+```
+
+### Steward threshold fix
+
+`requireDocumentationStewardFromWave` and `requireIntegrationStewardFromWave`
+are now strictly respected. Previously, the documentation steward was required
+whenever component promotions were active, regardless of the threshold setting.
+
+### Migration from 0.9.3
+
+No breaking changes. Existing repos get bootstrap mode for waves 0-3 by default.
+To keep the old strict behavior for all waves, set:
+
+```json
+{
+  "validation": {
+    "gateModeThresholds": {
+      "bootstrap": 0,
+      "standard": 0,
+      "strict": 0
+    }
+  }
+}
+```

package/docs/guides/recommendations-0.9.5.md

@@ -0,0 +1,191 @@
+---
+title: "0.9.4 Recommendations"
+summary: "How to use 0.9.4's softer blocker states, advisory turn budgets, and targeted recovery without weakening proof and closure."
+---
+
+# 0.9.4 Recommendations
+
+Use this guide when you are adopting `0.9.4` and want one practical operating stance for the softer blocker states, advisory turn-budget behavior, and targeted recovery flow that the current package line ships.
+
+## Recommended Default
+
+For most repos, the safest `0.9.4` default is:
+
+- bound work with `budget.minutes`
+- leave generic `budget.turns` as advisory metadata
+- author non-proof follow-up as `soft`, `stale`, or `advisory` instead of silently treating every open record as a hard blocker
+- use `resolve-policy` when the answer already exists in repo policy or shipped docs
+- prefer targeted rerun or resume after timeout, max-turn, rate-limit, or missing-status outcomes instead of relaunching the whole wave
+- in short-lived sandboxes, prefer `wave submit`, `wave supervise`, `wave status`, and `wave wait` instead of binding the full run to one client shell
+- when a wave-gate dimension has a documented gap that is not an actionable blocker, use `gap` instead of `pass` or `blocked` — the runtime treats it as a conditional pass
+
+That recommendation matches the runtime:
+
+- executor launch metadata only emits hard turn-limit flags from `claude.maxTurns` or `opencode.steps`
+- open `stale` and `advisory` coordination records stay visible without reopening the active blocking edge
+- recoverable launcher failures queue targeted retry state instead of immediately escalating to broad terminal wave failure
+
+## 1. Budgets
+
+Treat the two budget knobs differently:
+
+- `budget.minutes` is the primary attempt budget
+- generic `budget.turns` is only a planning hint
+- `claude.maxTurns` or `opencode.steps` are the hard runtime ceilings when you actually want deterministic turn stopping
+
+Recommended pattern for synthesis-heavy implementation or closure work:
+
+```json
+{
+  "executors": {
+    "profiles": {
+      "implementation-default": {
+        "id": "claude",
+        "model": "claude-sonnet-4-6",
+        "budget": {
+          "minutes": 35,
+          "turns": 12
+        }
+      }
+    }
+  }
+}
+```
+
+In that pattern, `35` minutes is real policy. `12` turns is only guidance for planning and preview metadata.
+
+Only set a hard runtime ceiling when you deliberately want the runtime itself to stop:
+
+```json
+{
+  "executors": {
+    "profiles": {
+      "bounded-closure": {
+        "id": "claude",
+        "model": "claude-sonnet-4-6",
+        "budget": {
+          "minutes": 20
+        },
+        "claude": {
+          "maxTurns": 6
+        }
+      }
+    }
+  }
+}
+```
+
+## 2. Softer Coordination States
+
+`0.9.2` keeps “still visible” separate from “still blocking”.
+
+Use these states intentionally:
+
+| State | Use it for | What the runtime does |
+| --- | --- | --- |
+| `soft` | follow-up that still matters but should not be treated like proof failure | remains visible and may still drive repair or retry targeting |
+| `stale` | outdated clarification or blocker context kept for history | visible in control state, but does not reopen blocking by itself |
+| `advisory` | known issue, note, or human context that should stay visible without blocking closure | visible in control state, but does not own the active blocking edge |
+
+Practical command paths:
+
+```bash
+pnpm exec wave control task act defer --lane main --wave 10 --id blocker-doc-follow-up
+pnpm exec wave control task act mark-stale --lane main --wave 10 --id clarify-a7-rollout
+pnpm exec wave control task act mark-advisory --lane main --wave 10 --id request-clarify-a7-rollout
+pnpm exec wave control task act resolve-policy --lane main --wave 10 --id clarify-a7-rollout --detail "Policy already covered in the rollout guide."
+```
+
+Use them when the repo already knows the answer, the remaining item is informational, or the follow-up should stay visible for the next wave without holding the current wave hostage.
+
+## 3. What Should Stay Hard
+
+Do not relax everything.
+
+Keep these hard or closure-critical unless you are intentionally changing wave policy:
+
+- missing proof or required deliverables
+- failed integration, documentation, or cont-QA closure gates
+- real human-feedback or escalation requirements that block safe continuation
+- requests or clarifications that still represent unresolved ownership or policy ambiguity for the current wave
+
+Use `gap` in wave-gate markers when a dimension has a documented gap that is not actionable in the current wave. For example, `live=gap` is appropriate when an infrastructure topology constraint prevents full live validation but the constraint is known, documented, and does not represent a regression. Do not use `gap` to hide actual failures or unreviewed work.
+
+If the current wave cannot truthfully close without the answer, keep it blocking.
+
+## 4. Recovery Recommendation
+
+My recommendation after reviewing the current `0.9.4` code path is:
+
+- let timeout, max-turn, rate-limit, and missing-status failures go through the built-in targeted recovery path first
+- inspect the queued rerun or resume request before manually relaunching the whole wave
+- preserve reusable proof from successful sibling owners whenever the reducer already identified it as reusable
+
+That is the shape the launcher now prefers. It only broadens failure when the remaining blockers are still proof-critical or otherwise non-recoverable.
+
+## 5. Suggested Operator Policy
+
+For most repo-owned runbooks:
+
+- teach authors to use `budget.minutes` first
+- teach operators to downgrade only non-proof follow-up
+- treat `resolve-policy` as the preferred path when the answer already exists in docs or repo policy
+- escalate to a full-wave rerun only after targeted recovery proves insufficient
+
+If you want a single sentence policy:
+
+> Keep proof and closure strict, keep generic turns advisory, and keep non-proof context visible without letting it accidentally own wave closure.
+
+
+## Laddered Gate Modes (new in 0.9.4)
+
+Waves now have three gate strictness tiers based on wave number:
+
+| Mode | Default waves | What's required to advance |
+|------|--------------|---------------------------|
+| **bootstrap** | 0-3 | Implementation agents exit 0 + deliverables exist |
+| **standard** | 4-9 | + A0 verdict required, doc closure recommended |
+| **strict** | 10+ | Full ceremony: all signals, all stewards, all proof |
+
+### Configuration
+
+```json
+{
+  "validation": {
+    "gateModeThresholds": {
+      "bootstrap": 0,
+      "standard": 4,
+      "strict": 10
+    },
+    "bootstrapPassConditions": {
+      "requireTestsPass": true,
+      "requireDeliverablesExist": true,
+      "requireExitCodeZero": true
+    },
+    "testCommand": "pnpm test:repo"
+  }
+}
+```
+
+### Steward threshold fix
+
+`requireDocumentationStewardFromWave` and `requireIntegrationStewardFromWave`
+are now strictly respected. Previously, the documentation steward was required
+whenever component promotions were active, regardless of the threshold setting.
+
+### Migration from 0.9.3
+
+No breaking changes. Existing repos get bootstrap mode for waves 0-3 by default.
+To keep the old strict behavior for all waves, set:
+
+```json
+{
+  "validation": {
+    "gateModeThresholds": {
+      "bootstrap": 0,
+      "standard": 0,
+      "strict": 0
+    }
+  }
+}
+```

package/docs/plans/current-state.md

@@ -1,10 +1,10 @@
 # Current State
 
-- The published package is `0.9.3`; that release keeps the shipped monorepo, design-role, signal-hygiene, detached process-runner, and sandbox supervisor surfaces, and now also accepts `gap` as a valid wave-gate dimension value (alongside `pass`, `concerns`, and `blocked`) so that agents reporting a documented gap no longer trigger missing-wave-gate failures. First-time `wave launch` now auto-triggers `wave project setup` when no project profile exists, and the interactive setup flow shows descriptive help text and inline option explanations. The current authenticated Wave Control plus Corridor-backed security surface continues to ship in this repo.
+- The published package is `0.9.4`; that release keeps the shipped monorepo, design-role, signal-hygiene, detached process-runner, and sandbox supervisor surfaces, and now also accepts `gap` as a valid wave-gate dimension value (alongside `pass`, `concerns`, and `blocked`) so that agents reporting a documented gap no longer trigger missing-wave-gate failures. First-time `wave launch` now auto-triggers `wave project setup` when no project profile exists, and the interactive setup flow shows descriptive help text and inline option explanations. The current authenticated Wave Control plus Corridor-backed security surface continues to ship in this repo.
 - The canonical shipped runtime architecture is documented in `docs/plans/end-state-architecture.md`; the sandbox-runtime companion is `docs/plans/sandbox-end-state-architecture.md`; historical cutover notes remain in `docs/plans/architecture-hardening-migration.md`.
 - The repository contains the published `@chllming/wave-orchestration` package plus the starter scaffold used by `wave init`.
 - The runtime is package-first and non-destructive for adopting repos: `wave init --adopt-existing` records existing repo-owned plans, waves, prompts, and config without overwriting them, and `wave upgrade` writes only `.wave/install-state.json` plus `.wave/upgrade-history/`.
-- The recommended `0.9.3` operating stance is documented in `docs/guides/recommendations-0.9.3.md`: keep proof and closure strict, keep generic `budget.turns` advisory, and use softer coordination states only for non-proof follow-up.
+- The recommended `0.9.4` operating stance is documented in `docs/guides/recommendations-0.9.4.md`: keep proof and closure strict, keep generic `budget.turns` advisory, and use softer coordination states only for non-proof follow-up.
 - Sandbox-safe setup guidance now ships in `docs/guides/sandboxed-environments.md`: use `wave submit/supervise/status/wait/attach` for short-lived clients, keep `tmux` optional and dashboard-only, and preserve `.tmp/` plus `.wave/` when running inside Nemoshell or Docker.
 - Runtime launch entrypoints now perform a best-effort npmjs version check, cache the result under `.wave/package-update-check.json`, and point operators at `pnpm exec wave self-update` when a newer published package exists.
 - The companion control plane now ships in two packages:

package/docs/plans/migration.md

@@ -1,6 +1,6 @@
 # Migration
 
-This page is the practical repo-upgrade guide for the current `0.9.3` surface.
+This page is the practical repo-upgrade guide for the current `0.9.5` surface.
 
 Use it when you are:
 
@@ -12,9 +12,19 @@ For the completed internal architecture cutover record, see [architecture-harden
 
 For the sandbox-specific long-running execution target, including async `submit/status/wait` semantics and daemon ownership goals, see [sandbox-end-state-architecture.md](./sandbox-end-state-architecture.md).
 
-## What `0.9.3` Changes
 
-The current `0.9.3` surface keeps everything from `0.9.2` and adds two focused improvements with no breaking changes.
+## What `0.9.4` Changes
+
+The `0.9.4` surface adds laddered gate modes and fixes the steward threshold enforcement.
+
+- **Laddered gate modes**: bootstrap (waves 0-3), standard (4-9), strict (10+). Bootstrap mode requires only implementation agent exit 0 and deliverables exist — no formal QA signals needed.
+- **Steward threshold fix**: `requireDocumentationStewardFromWave` is now strictly respected. Previously it was OR'd with `componentPromotionRuleActive`.
+- **New config fields**: `gateModeThresholds`, `bootstrapPassConditions`, `testCommand`, `testCommandTimeout`.
+- **No breaking changes**: existing repos get bootstrap mode for waves 0-3 by default.
+
+## What `0.9.4` Changes
+
+The current `0.9.5` surface keeps everything from `0.9.2` and adds two focused improvements with no breaking changes.
 
 The practical changes are:
 
@@ -30,7 +40,7 @@ There are no breaking changes. Just upgrade with `pnpm up @chllming/wave-orchest
 
 If your repo uses wave-gate markers, you can now use `gap` for dimensions where the gap is documented and not an actionable blocker.
 
-For the practical `0.9.3` operating stance after the upgrade, read [../guides/recommendations-0.9.3.md](../guides/recommendations-0.9.3.md).
+For the practical `0.9.4` operating stance after the upgrade, read [../guides/recommendations-0.9.4.md](../guides/recommendations-0.9.4.md).
 
 ## What `0.9.2` Changes
 
@@ -170,11 +180,11 @@ pnpm exec wave coord inbox --lane main --wave 0 --agent A1 --dry-run
 
 Use `pnpm exec wave dashboard --lane <lane> --attach current` or `--attach global` when you need to reattach to a tmux-backed dashboard after the upgrade.
 
-## `0.9.3` Release Model
+## `0.9.4` Release Model
 
-The current `0.9.3` surface combines these strands:
+The current `0.9.5` surface combines these strands:
 
-- the gap-value wave-gate fix and first-time setup UX improvements released in `0.9.3`
+- the gap-value wave-gate fix and first-time setup UX improvements released in `0.9.4`
 - the detached process-runner and sandbox supervisor hardening released in `0.9.2`
 - the shipped `0.9.0` monorepo project support and project-aware runtime isolation
 - the shipped `design` worker role and hybrid design-steward flow introduced in `0.8.5`
@@ -282,7 +292,7 @@ The interactive `wave draft` flow supports `design` as a worker role and scaffol
 
 ## Version-Specific Upgrade Guidance
 
-## Upgrading From `0.8.5` To `0.9.3`
+## Upgrading From `0.8.5` To `0.9.4`
 
 This is the smallest upgrade, but it changes the live wait-loop contract for external automation and intentionally long-running agents.
 
@@ -319,7 +329,7 @@ If the repo copied starter surface, sync:
 - if the repo uses long-running watchers, confirm they can write the ack file where the prompt tells them to
 - reroute one targeted feedback or coordination request and confirm the resident signal version changes even when the signal kind stays the same
 
-## Upgrading From `0.8.4` To `0.9.3`
+## Upgrading From `0.8.4` To `0.9.4`
 
 ### What changed
 
@@ -357,7 +367,7 @@ If your repo copied starter config defaults, also sync the `designRolePromptPath
 - hybrid design stewards rejoin implementation when they explicitly own code
 - long-running prompts receive signal-state and ack paths when the repo uses the new waiting model
 
-## Upgrading From `0.8.3` To `0.9.3`
+## Upgrading From `0.8.3` To `0.9.5`
 
 Treat this as one move to the current `0.9.2` surface.
 
@@ -392,7 +402,7 @@ If your repo copied starter docs or skills, sync:
 - dry-run one design-steward wave if the repo wants the new authored surface
 - if the repo uses long-running watcher agents or shell automation, validate `scripts/wave-status.sh` and `scripts/wave-watch.sh` against a live or staged lane
 
-## Upgrading From `0.6.x` Or `0.7.x` To `0.9.3`
+## Upgrading From `0.6.x` Or `0.7.x` To `0.9.5`
 
 This is the main migration path for older adopted repos.
 
@@ -433,7 +443,7 @@ pnpm exec wave control proof get --lane main --wave 0 --json
 
 If the repo carries proof-first waves, verify that required proof artifacts still exist locally and not only in historical summaries.
 
-## Upgrading From `0.5.x` Or Earlier To `0.9.3`
+## Upgrading From `0.5.x` Or Earlier To `0.9.4`
 
 Do not treat this as a tiny patch bump.
 
@@ -543,4 +553,4 @@ For repos that depend on replay parity, replay at least:
 
 ## Summary
 
-The current `0.9.3` surface keeps the same authority-set and phase-engine architecture, ships both the design-role starter surface and the signal-driven long-running-agent starter surface, keeps the `0.8.7` policy and routing hardening, and now also packages the practical operator recommendations guide inside the release line. For most repos already on `0.8.x`, the upgrade is package bump plus validation. For older adopted repos, the real work is syncing repo-owned prompts, skills, planner corpus, wrapper scripts, and runbooks so they describe the runtime the package now ships.
+The current `0.9.5` surface keeps the same authority-set and phase-engine architecture, ships both the design-role starter surface and the signal-driven long-running-agent starter surface, keeps the `0.8.7` policy and routing hardening, and now also packages the practical operator recommendations guide inside the release line. For most repos already on `0.8.x`, the upgrade is package bump plus validation. For older adopted repos, the real work is syncing repo-owned prompts, skills, planner corpus, wrapper scripts, and runbooks so they describe the runtime the package now ships.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chllming/wave-orchestration",
-  "version": "0.9.3",
+  "version": "0.9.5",
   "license": "MIT",
   "description": "Generic wave-based multi-agent orchestration for repository work.",
   "repository": {

package/releases/manifest.json

@@ -3,7 +3,18 @@
   "packageName": "@chllming/wave-orchestration",
   "releases": [
     {
-      "version": "0.9.3",
+      "version": "0.9.5",
+      "date": "2026-04-05",
+      "summary": "Hotfix: pass lanePaths to reconcileFailuresAgainstSharedComponentState, fixing launcher crash on repos without Integration Steward.",
+      "features": [
+        "Fixed ReferenceError where `lanePaths` was used as a free variable in `reconcileFailuresAgainstSharedComponentState` instead of being passed as a parameter.",
+        "planner-agentic bundle placeholder remains available for adopted repos."
+      ],
+      "manualSteps": [],
+      "breaking": false
+    },
+    {
+      "version": "0.9.4",
       "date": "2026-03-30",
       "summary": "Gap-value wave-gate fix and first-time project setup UX improvements.",
       "features": [
@@ -14,13 +25,13 @@
         "`wave project setup` now shows descriptive help text before each prompt, explains all template and posture options inline, and adds whitespace between question groups for readability. (Contributed by @justanothernate in #54)",
         "`PromptSession` gains a `describe(text)` method for writing contextual help to stderr during interactive setup flows.",
         "`parseArgs` now passes the loaded config object through to `runLauncherCli`, avoiding a redundant `loadWaveConfig()` call.",
-        "Release docs, migration guidance, runtime-config and closure references, the manifest, and the tracked install-state fixtures now all point at the `0.9.3` surface.",
+        "Release docs, migration guidance, runtime-config and closure references, the manifest, and the tracked install-state fixtures now all point at the `0.9.4` surface.",
         "Planner migration guidance and the `planner-agentic` bundle placeholder remain part of the shipped current-surface docs so adopted repos still have one aligned upgrade target."
       ],
       "manualSteps": [
-        "Run `pnpm exec wave doctor` and `pnpm exec wave launch --lane main --dry-run --no-dashboard` after upgrading so the repo validates against the `0.9.3` release surface.",
-        "Push the `v0.9.3` tag after the release commit so the GitHub publish workflow can publish the matching npm package version.",
-        "If your repo copied starter docs or runbooks, sync `README.md`, `docs/README.md`, `docs/plans/current-state.md`, `docs/plans/migration.md`, `docs/reference/coordination-and-closure.md`, `docs/reference/runtime-config/README.md`, and `docs/guides/recommendations-0.9.3.md` so local guidance matches the packaged release."
+        "Run `pnpm exec wave doctor` and `pnpm exec wave launch --lane main --dry-run --no-dashboard` after upgrading so the repo validates against the `0.9.4` release surface.",
+        "Push the `v0.9.4` tag after the release commit so the GitHub publish workflow can publish the matching npm package version.",
+        "If your repo copied starter docs or runbooks, sync `README.md`, `docs/README.md`, `docs/plans/current-state.md`, `docs/plans/migration.md`, `docs/reference/coordination-and-closure.md`, `docs/reference/runtime-config/README.md`, and `docs/guides/recommendations-0.9.4.md` so local guidance matches the packaged release."
       ],
       "breaking": false
     },
@@ -556,4 +567,4 @@
       "breaking": false
     }
   ]
-}
+}

package/scripts/wave-orchestrator/config.mjs

@@ -531,6 +531,20 @@ function normalizeValidation(rawValidation = {}) {
       rawValidation.requireAgentComponentsFromWave,
       0,
     ),
+    gateModeThresholds: {
+      bootstrap: rawValidation.gateModeThresholds?.bootstrap ?? 0,
+      standard: rawValidation.gateModeThresholds?.standard ?? 4,
+      strict: rawValidation.gateModeThresholds?.strict ?? 10,
+    },
+    bootstrapPassConditions: {
+      requireA0Verdict: rawValidation.bootstrapPassConditions?.requireA0Verdict ?? false,
+      requireProofSignals: rawValidation.bootstrapPassConditions?.requireProofSignals ?? false,
+      requireTestsPass: rawValidation.bootstrapPassConditions?.requireTestsPass ?? true,
+      requireDeliverablesExist: rawValidation.bootstrapPassConditions?.requireDeliverablesExist ?? true,
+      requireExitCodeZero: rawValidation.bootstrapPassConditions?.requireExitCodeZero ?? true,
+    },
+    testCommand: typeof rawValidation.testCommand === "string" ? rawValidation.testCommand : null,
+    testCommandTimeout: typeof rawValidation.testCommandTimeout === "number" ? rawValidation.testCommandTimeout : 120,
   };
 }
 

package/scripts/wave-orchestrator/gate-engine.mjs

@@ -138,6 +138,46 @@ function validateEnvelopeForRun(runInfo, envelope, options = {}) {
   };
 }
 
+
+// --- Laddered gate modes (0.9.4) ---
+export function resolveGateMode(waveNumber, thresholds) {
+  if (!thresholds) return "strict";
+  if (waveNumber < (thresholds.standard ?? 4)) return "bootstrap";
+  if (waveNumber < (thresholds.strict ?? 10)) return "standard";
+  return "strict";
+}
+
+export function evaluateBootstrapGate(wave, agentRuns, options = {}) {
+  const conditions = options.bootstrapPassConditions ?? {};
+  const summaries = options.summaries ?? new Map();
+  
+  // Check implementation agents (non-A0, non-A8, non-A9)
+  const implAgents = agentRuns.filter(a => 
+    !["A0", "E0", "A8", "A9"].includes(a.agentId)
+  );
+  
+  for (const agent of implAgents) {
+    const summary = summaries.get(agent.agentId);
+    if (!summary) continue;
+    
+    // Must have exit code 0
+    if (conditions.requireExitCodeZero !== false && summary.exitCode !== 0) {
+      return { ok: false, statusCode: "blocked", detail: `${agent.agentId} exit code ${summary.exitCode}` };
+    }
+    
+    // Check deliverables exist
+    if (conditions.requireDeliverablesExist !== false && summary.deliverables) {
+      const missing = summary.deliverables.filter(d => !d.exists);
+      if (missing.length > 0) {
+        return { ok: false, statusCode: "concerns", detail: `${agent.agentId} missing deliverables: ${missing.map(d=>d.path).join(", ")}` };
+      }
+    }
+  }
+  
+  return { ok: true, statusCode: "pass", detail: "bootstrap-pass: impl agents completed with deliverables" };
+}
+// --- End laddered gate modes ---
+
 export function materializeAgentExecutionSummaryForRun(wave, runInfo, options = {}) {
   const statusRecord = readStatusRecordIfPresent(runInfo.statusPath);
   if (!statusRecord) {

package/scripts/wave-orchestrator/install.mjs

@@ -69,7 +69,7 @@ export const STARTER_TEMPLATE_PATHS = [
   "docs/guides/author-and-run-waves.md",
   "docs/guides/monorepo-projects.md",
   "docs/guides/planner.md",
-  "docs/guides/recommendations-0.9.3.md",
+  "docs/guides/recommendations-0.9.5.md",
   "docs/guides/sandboxed-environments.md",
   "docs/guides/signal-wrappers.md",
   "docs/guides/terminal-surfaces.md",

package/scripts/wave-orchestrator/launcher.mjs

@@ -1787,7 +1787,7 @@ export async function runLauncherCli(argv) {
           syncWaveSignals();
           lastLiveCoordinationRefreshAt = Date.now();
           emitCoordinationAlertEvents(derivedState);
-          failures = reconcileFailuresAgainstSharedComponentState(wave, agentRuns, failures);
+          failures = reconcileFailuresAgainstSharedComponentState(wave, agentRuns, failures, lanePaths);
           for (const failure of failures) {
             if (failure.statusCode === "shared-component-sibling-pending") {
               applySharedComponentWaitStateToDashboard(failure, dashboardState);

package/scripts/wave-orchestrator/retry-engine.mjs

@@ -276,7 +276,7 @@ export function applySharedComponentWaitStateToDashboard(componentGate, dashboar
   }
 }
 
-export function reconcileFailuresAgainstSharedComponentState(wave, agentRuns, failures) {
+export function reconcileFailuresAgainstSharedComponentState(wave, agentRuns, failures, lanePaths) {
   if (!Array.isArray(failures) || failures.length === 0) {
     return failures;
   }

package/scripts/wave-orchestrator/wave-files.mjs

@@ -1786,8 +1786,7 @@ export function validateWaveDefinition(wave, options = {}) {
     }
   }
   const documentationRuleActive =
-    (documentationThreshold !== null && wave.wave >= documentationThreshold) ||
-    componentPromotionRuleActive;
+    documentationThreshold !== null && wave.wave >= documentationThreshold;
   if (documentationRuleActive) {
     const documentationStewards = wave.agents.filter((agent) =>
       agent.rolePromptPaths?.includes(laneProfile.roles.documentationRolePromptPath),

package/wave.config.json

@@ -31,51 +31,69 @@
     "profiles": {
       "implement-fast": {
         "id": "codex",
-        "tags": ["implementation"],
+        "tags": [
+          "implementation"
+        ],
         "budget": {
-          "turns": 12,
           "minutes": 45
         }
       },
       "deep-review": {
         "id": "claude",
-        "tags": ["integration", "review"],
+        "tags": [
+          "integration",
+          "review"
+        ],
         "budget": {
-          "turns": 10,
           "minutes": 30
         }
       },
       "eval-tuning": {
         "id": "codex",
-        "tags": ["eval", "tuning"],
+        "tags": [
+          "eval",
+          "tuning"
+        ],
         "budget": {
-          "turns": 14,
           "minutes": 45
         }
       },
       "docs-pass": {
         "id": "claude",
-        "tags": ["documentation"],
+        "tags": [
+          "documentation"
+        ],
         "budget": {
-          "turns": 8,
           "minutes": 20
         }
       },
       "design-pass": {
         "id": "claude",
-        "tags": ["design", "review"],
+        "tags": [
+          "design",
+          "review"
+        ],
         "budget": {
-          "turns": 10,
           "minutes": 30
         },
         "claude": {
-          "allowedTools": ["Read", "Edit", "Write", "Bash", "Grep", "Glob"]
+          "allowedTools": [
+            "Read",
+            "Edit",
+            "Write",
+            "Bash",
+            "Grep",
+            "Glob"
+          ]
         }
       },
       "planning-readonly": {
         "id": "codex",
         "model": "gpt-5-codex",
-        "tags": ["planning", "review"],
+        "tags": [
+          "planning",
+          "review"
+        ],
         "budget": {
           "minutes": 30
         },
@@ -83,25 +101,38 @@
           "search": true,
           "json": true,
           "sandbox": "read-only",
-          "config": ["model_reasoning_effort=high"]
+          "config": [
+            "model_reasoning_effort=high"
+          ]
         }
       },
       "security-review": {
         "id": "claude",
-        "tags": ["security", "review"],
+        "tags": [
+          "security",
+          "review"
+        ],
         "budget": {
-          "turns": 8,
           "minutes": 20
         },
         "claude": {
-          "allowedTools": ["Read", "Edit", "Write", "Bash", "Grep", "Glob"]
+          "allowedTools": [
+            "Read",
+            "Edit",
+            "Write",
+            "Bash",
+            "Grep",
+            "Glob"
+          ]
         }
       },
       "ops-triage": {
         "id": "opencode",
-        "tags": ["ops", "research"],
+        "tags": [
+          "ops",
+          "research"
+        ],
         "budget": {
-          "turns": 8,
           "minutes": 20
         }
       }
@@ -122,34 +153,81 @@
   },
   "skills": {
     "dir": "skills",
-    "base": ["wave-core", "repo-coding-rules"],
+    "base": [
+      "wave-core",
+      "repo-coding-rules"
+    ],
     "byRole": {
-      "design": ["role-design"],
-      "implementation": ["role-implementation"],
-      "integration": ["role-integration"],
-      "documentation": ["role-documentation"],
-      "cont-qa": ["role-cont-qa"],
-      "cont-eval": ["role-cont-eval"],
-      "security": ["role-security"],
-      "infra": ["role-infra"],
-      "deploy": ["role-deploy"],
-      "research": ["role-research"]
+      "design": [
+        "role-design"
+      ],
+      "implementation": [
+        "role-implementation"
+      ],
+      "integration": [
+        "role-integration"
+      ],
+      "documentation": [
+        "role-documentation"
+      ],
+      "cont-qa": [
+        "role-cont-qa"
+      ],
+      "cont-eval": [
+        "role-cont-eval"
+      ],
+      "security": [
+        "role-security"
+      ],
+      "infra": [
+        "role-infra"
+      ],
+      "deploy": [
+        "role-deploy"
+      ],
+      "research": [
+        "role-research"
+      ]
     },
     "byRuntime": {
-      "codex": ["runtime-codex"],
-      "claude": ["runtime-claude"],
-      "opencode": ["runtime-opencode"],
-      "local": ["runtime-local"]
+      "codex": [
+        "runtime-codex"
+      ],
+      "claude": [
+        "runtime-claude"
+      ],
+      "opencode": [
+        "runtime-opencode"
+      ],
+      "local": [
+        "runtime-local"
+      ]
     },
     "byDeployKind": {
-      "railway-cli": ["provider-railway"],
-      "railway-mcp": ["provider-railway"],
-      "docker-compose": ["provider-docker-compose"],
-      "kubernetes": ["provider-kubernetes"],
-      "aws": ["provider-aws"],
-      "github-release": ["provider-github-release"],
-      "ssh-manual": ["provider-ssh-manual"],
-      "custom": ["provider-custom-deploy"]
+      "railway-cli": [
+        "provider-railway"
+      ],
+      "railway-mcp": [
+        "provider-railway"
+      ],
+      "docker-compose": [
+        "provider-docker-compose"
+      ],
+      "kubernetes": [
+        "provider-kubernetes"
+      ],
+      "aws": [
+        "provider-aws"
+      ],
+      "github-release": [
+        "provider-github-release"
+      ],
+      "ssh-manual": [
+        "provider-ssh-manual"
+      ],
+      "custom": [
+        "provider-custom-deploy"
+      ]
     }
   },
   "planner": {
@@ -223,8 +301,12 @@
           "infra": "opencode",
           "deploy": "opencode"
         },
-        "fallbackExecutorOrder": ["claude", "opencode", "codex"]
+        "fallbackExecutorOrder": [
+          "claude",
+          "opencode",
+          "codex"
+        ]
       }
     }
   }
-}
+}