@codedology/code-forge 0.14.1 → 0.15.1

package/CHANGELOG.md

@@ -6,6 +6,35 @@ waits on a second real consumer (plan §10.4, Q17).
 
 ## [Unreleased]
 
+## [0.15.1] — 2026-10-19
+
+### Changed
+
+- The test leak check ignores a lock held by a live process outside the suite (same pid start time), so gates can run while a review worker runs (B142)
+- The coder brief keeps only the final test log after a sandbox EPERM rerun, and fix rounds list the typecheck command next to the block tests (B140)
+- The first-use and brief-mode walkthrough tests no longer fail when a live code-forge run of the developer writes into ~/.code-forge during the suite (B145)
+- Process tests have wider time bounds, so the suite no longer fails from slowness on a busy machine (B144)
+- The Codex transcript check ignores rule text inside a node/python/ruby/perl script body that spawns nothing, also inside `zsh -lc` wrappers (B141)
+- New human verb `block amend-acceptance` corrects a wrong acceptance clause of an open block; reviews signed before the change no longer count at close (B143b)
+
+## [0.15.0] — 2026-10-19
+
+### Changed
+
+- Worker claim tests back up file-watch barriers with a short poll, so a busy file-event service no longer fails them
+- Support up to four pinned review workers per run, add workers through run start, and verify result identities and dead ticket claims at block close (B107)
+- Light blocks bound small changes to configurable file and line limits, batch their reviews, and run only block tests (B139)
+- Human decision close combines finding waivers, agent acknowledgement and transcript acceptance in one confirmation; immutable `close.require_human` supports delegated `close:routine` grants for approved blocks without waivers or hits (B138)
+
+- Clarify that human pass requires a note and accepts optional proof; verify an omitted proof is recorded as null and closes the block (B137b)
+- UI acceptance can require human device checks: code close waits in `awaiting_human_check`, status and report list waiting blocks, and only a terminal-confirmed human pass or stop permits run completion (B137)
+- Opt-in `gates.repeat_new_tests` repeats added or changed block tests after a passing gate, records signed repeat evidence and reports failures as `flaky-test` with the files and failing output (B136)
+- Block open records the base branch; close warns when it moved, and closed worktree blocks can rebase while preserving reviewed file blobs or restoring the old head on refusal (B134)
+- Rechecks include finding evidence, close unsupported current-line claims as stale, and keep repeated claim/evidence findings from escalating the review ladder on their own (B133)
+- A changed lens budget after `run reload` refreshes cached `split_required` results and recheck stops on the same content, including with `--fresh`, and reports the old and new budgets (B132)
+- Review risk counts added and removed lines; oversized quick Markdown packets step up to full before section packing, and the block join exposes per-file outcomes, reports split recovery steps and queues owned changes without earlier tickets (B131)
+- CLI: missing ledger slugs name known projects; block open catches malformed path lists while allowing new plain paths and commas inside braces; worker startup names competing runs; process probes prefer `/bin/ps`; block close requires green gates when configured; human transcript acceptance can cover all rules on a line and its Codex completion (B135, B135b)
+
 ## [0.14.1] — 2026-10-15
 
 ### Changed

package/README.md

@@ -2,7 +2,7 @@
 
 A CLI and Agent Skill for cross-model, parallel, evidence-gated feature delivery.
 
-Latest: 0.14.1 - see [CHANGELOG.md](CHANGELOG.md)
+Latest: 0.15.1 - see [CHANGELOG.md](CHANGELOG.md)
 
 ## The problem
 

package/docs/reference/blocks.json

@@ -4,7 +4,7 @@
     "plans/code-forge-plan-v1.3.md §10.4",
     "plans/NIGHT-LOG.md"
   ],
-  "block_count": 136,
+  "block_count": 156,
   "baseline_ids": ["B0", "B1", "B2", "B3", "B4", "B5", "B6", "B7", "B8"],
   "baseline_note": "Wave 0-1 blocks, landed before v1.3; depends_on may name them, but they have no entry under blocks.",
   "blocks": {
@@ -2389,6 +2389,500 @@
         "B130"
       ],
       "note": "Install records get an optional version field. Summary: logo, 'code-forge <v>', '<old> -> <new>' / 'already on' / 'first versioned upgrade', kept record lines, first 5 CHANGELOG bullets, 'Full notes: <path>'."
+    },
+    "B131": {
+      "title": "Budget split counts removed lines; Markdown steps up to full; join reports an outcome per file and queues owned files with no ticket",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/review/engine.mjs",
+        "src/cli/review-file.mjs",
+        "skill/references/review.md",
+        "docs/how-it-works.md",
+        "CHANGELOG.md",
+        "test/review/budget-step-up.test.mjs",
+        "test/worker/wait-block.test.mjs",
+        "test/worker/watch.test.mjs",
+        "test/skill/structure.test.mjs"
+      ],
+      "depends_on": [
+        "B130"
+      ],
+      "note": "split_required only above full_in; --wait-block files carry outcome (approved/findings/stopped/split_required/unavailable/null); split_required gives done:false with reason and next."
+    },
+    "B132": {
+      "title": "A lens budget change reruns a split_required stop for the lens that was measured",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/cli/review-file.mjs",
+        "src/worker/ticket.mjs",
+        "src/worker/queue.mjs",
+        "src/review/fixloop.mjs",
+        "skill/references/review.md",
+        "CHANGELOG.md",
+        "test/worker/fresh-split.test.mjs",
+        "test/worker/fresh.test.mjs"
+      ],
+      "depends_on": [
+        "B131"
+      ],
+      "note": "F2: --fresh re-queues a counted split_required stop when its lens budget changed; the stop keeps its real lens (full, recheck or patch_check)."
+    },
+    "B135": {
+      "title": "Small CLI fixes: unknown ledger slugs, comma path lists, competing worker runs, /bin/ps, close needs green gates, accept-hit per line",
+      "wave": 14,
+      "level": "L1",
+      "status": "landed",
+      "owned": [
+        "src/cli/report.mjs",
+        "src/cli/ledger.mjs",
+        "src/cli/block.mjs",
+        "src/worker/loop.mjs",
+        "src/worker/queue.mjs",
+        "src/util/reaper.mjs",
+        "src/state/run.mjs",
+        "src/review/accept-hit.mjs",
+        "skill/references/code.md",
+        "CHANGELOG.md",
+        "test/ledger/report.test.mjs",
+        "test/ledger/cli.test.mjs",
+        "test/ledger/calibration.test.mjs",
+        "test/cli",
+        "test/worker/registry.test.mjs",
+        "test/util/reaper.test.mjs",
+        "test/state/run.test.mjs",
+        "test/review/close-gate.test.mjs",
+        "test/review/close-gate-field.test.mjs",
+        "test/review/gate-check.test.mjs"
+      ],
+      "depends_on": [
+        "B130"
+      ],
+      "note": "Closed after review, then held: the full suite showed regressions. Its changes landed through B135b."
+    },
+    "B135b": {
+      "title": "Finish B135: future test paths and brace globs allowed, first-use runs gates before close",
+      "wave": 14,
+      "level": "L1",
+      "status": "landed",
+      "owned": [
+        "src/cli/report.mjs",
+        "src/cli/ledger.mjs",
+        "src/cli/block.mjs",
+        "src/worker/loop.mjs",
+        "src/util/reaper.mjs",
+        "src/state/run.mjs",
+        "src/review/accept-hit.mjs",
+        "skill/references/code.md",
+        "CHANGELOG.md",
+        "test/ledger/report.test.mjs",
+        "test/ledger/cli.test.mjs",
+        "test/ledger/calibration.test.mjs",
+        "test/cli",
+        "test/worker/registry.test.mjs",
+        "test/util/reaper.test.mjs",
+        "test/state/run.test.mjs",
+        "test/review/close-gate.test.mjs",
+        "test/review/close-gate-field.test.mjs",
+        "test/review/gate-check.test.mjs",
+        "test/docs-marketing.test.mjs",
+        "scripts/first-use.mjs",
+        "test/first-use.test.mjs",
+        "test/gates/placeholders.test.mjs",
+        "test/proof/worktree-flow.test.mjs",
+        "test/review/external.test.mjs"
+      ],
+      "depends_on": [
+        "B135",
+        "B131"
+      ],
+      "note": "Carries the reviewed B135 changes onto the B131 base. A false critical finding was cleared by an answers ticket (B71), not a waiver."
+    },
+    "B133": {
+      "title": "A recheck must not repeat a stale finding: evidence in the recheck packet, current_lines quote, stale and repeated findings",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/review/fixloop.mjs",
+        "src/review/lenses/recheck.md",
+        "src/review/finding.schema.json",
+        "src/review/validate-review.mjs",
+        "skill/references/review.md",
+        "CHANGELOG.md",
+        "test/review/fixloop.test.mjs",
+        "test/review/validate-review.test.mjs",
+        "test/review/recheck-real.test.mjs"
+      ],
+      "depends_on": [
+        "B132"
+      ],
+      "note": "Stopped after review: the acceptance saved at open had a wrong stale rule. Its changes landed through B133b."
+    },
+    "B133b": {
+      "title": "Finish B133: stale only when a quoted current_lines is not in the file; a missing quote keeps the old behaviour",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/review/fixloop.mjs",
+        "src/review/lenses/recheck.md",
+        "src/review/finding.schema.json",
+        "src/review/validate-review.mjs",
+        "skill/references/review.md",
+        "CHANGELOG.md",
+        "test/review/fixloop.test.mjs",
+        "test/review/validate-review.test.mjs",
+        "test/review/recheck-real.test.mjs"
+      ],
+      "depends_on": [
+        "B133",
+        "B135b"
+      ],
+      "note": "Carries the B133 changes onto main with the corrected acceptance. Fixes issue #18."
+    },
+    "B134": {
+      "title": "Block open records the base branch HEAD; close warns when the base has commits the block lacks; block rebase accepts a closed block and keeps reviewed file blobs",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/state/block.mjs",
+        "src/cli/block.mjs",
+        "skill/references/code.md",
+        "CHANGELOG.md",
+        "test/state/block.test.mjs",
+        "test/cli/block-rebase-closed.test.mjs",
+        "test/cli/block-close-base-warning.test.mjs"
+      ],
+      "depends_on": [
+        "B135b"
+      ],
+      "note": "Fixes issue #21. A fix round removed a false warning when the block commits on its own base branch."
+    },
+    "B136": {
+      "title": "gates.repeat_new_tests: repeat the block's added or changed test files N times; a failed repeat is a red flaky-test gate with signed repeat evidence",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/cli/gates.mjs",
+        "src/gates/run.mjs",
+        "src/gates/expand.mjs",
+        "src/config/validate.mjs",
+        "schema/code-forge.schema.json",
+        "src/ledger/report.mjs",
+        "docs/reference/config.md",
+        "skill/references/code.md",
+        "CHANGELOG.md",
+        "test/gates/run.test.mjs",
+        "test/gates/cli.test.mjs",
+        "test/gates/changed.test.mjs",
+        "test/config/cli-validate.test.mjs",
+        "test/ledger/report.test.mjs",
+        "test/docs-config.test.mjs",
+        "test/config/schema-coverage.test.mjs"
+      ],
+      "depends_on": [
+        "B134"
+      ],
+      "note": "Fixes issue #20. A false critical finding (signed row callback) was cleared by making the sign-and-append call explicit."
+    },
+    "B137": {
+      "title": "A human device check gate: acceptance clauses marked human, block human-pass with a required note and optional proof, close refuses until passed",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/gates/acceptance.mjs",
+        "src/state/block.mjs",
+        "src/state/run.mjs",
+        "src/cli/block.mjs",
+        "src/cli/run.mjs",
+        "src/cli/status.mjs",
+        "src/cli/report.mjs",
+        "src/ledger/report.mjs",
+        "src/util/forbidden.mjs",
+        "skill/references/code.md",
+        "skill/SKILL.md",
+        "docs/how-it-works.md",
+        "CHANGELOG.md",
+        "test/gates/acceptance.test.mjs",
+        "test/cli/block-human-pass.test.mjs",
+        "test/util/forbidden.test.mjs",
+        "test/state/block.test.mjs"
+      ],
+      "depends_on": [
+        "B136"
+      ],
+      "note": "Stopped after review: the acceptance saved at open said --proof was required, but issue #19 makes it optional. Its changes landed through B137b."
+    },
+    "B137b": {
+      "title": "A human device check gate: acceptance clauses marked human, block human-pass with a required note and optional proof, close refuses until passed (corrected acceptance: proof optional)",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/gates/acceptance.mjs",
+        "src/state/block.mjs",
+        "src/state/run.mjs",
+        "src/cli/block.mjs",
+        "src/cli/run.mjs",
+        "src/cli/status.mjs",
+        "src/cli/report.mjs",
+        "src/ledger/report.mjs",
+        "src/util/forbidden.mjs",
+        "skill/references/code.md",
+        "skill/SKILL.md",
+        "docs/how-it-works.md",
+        "CHANGELOG.md",
+        "test/gates/acceptance.test.mjs",
+        "test/cli/block-human-pass.test.mjs",
+        "test/util/forbidden.test.mjs",
+        "test/state/block.test.mjs",
+        "test/engines/builders/argv-snapshots.test.mjs",
+        "test/engines/builders/forbidden-rendering.test.mjs",
+        "test/engines/codex-home.test.mjs"
+      ],
+      "depends_on": [
+        "B137",
+        "B136"
+      ],
+      "note": "Fixes issue #19. Fix round 1 appended the human-pass coder rule and updated the pinned coder-only counts. A false transcript hit (flag text inside an edit script) was accepted by the owner."
+    },
+    "B138": {
+      "title": "One human step per block: block close --decide lists every human-clearable refusal and asks one confirm; close.require_human; autopilot close:routine scope for routine closes",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/cli/block.mjs",
+        "src/state/block.mjs",
+        "src/review/gate-check.mjs",
+        "src/review/accept-hit.mjs",
+        "src/autopilot/scopes.mjs",
+        "src/autopilot/grant.mjs",
+        "src/config/validate.mjs",
+        "src/state/run.mjs",
+        "schema/code-forge.schema.json",
+        "docs/reference/config.md",
+        "skill/references/code.md",
+        "skill/references/autopilot.md",
+        "CHANGELOG.md",
+        "test/cli/block-close-decide.test.mjs",
+        "test/cli/block-close-routine.test.mjs",
+        "test/autopilot/grant.test.mjs",
+        "test/config/schema-coverage.test.mjs",
+        "test/autopilot/delegate.test.mjs",
+        "test/cli/autopilot.test.mjs"
+      ],
+      "depends_on": [
+        "B137b"
+      ],
+      "note": "Issue #16 item 8 (owner F4: one confirm + grant). Fix round 1 pinned close:routine in two old scope-message tests and proved the no answer was asked."
+    },
+    "B139": {
+      "title": "Light block kind: block open --kind light, one batched review per block (max 2), block-test-only gates, light-limits refusal at close",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/cli/block.mjs",
+        "src/state/block.mjs",
+        "src/worker/engine.mjs",
+        "src/worker/loop.mjs",
+        "src/worker/queue.mjs",
+        "src/review/engine.mjs",
+        "src/review/packet.mjs",
+        "src/cli/review-file.mjs",
+        "src/cli/gates.mjs",
+        "src/gates/run.mjs",
+        "src/gates/expand.mjs",
+        "src/config/validate.mjs",
+        "schema/code-forge.schema.json",
+        "docs/reference/config.md",
+        "skill/references/code.md",
+        "skill/references/review.md",
+        "CHANGELOG.md",
+        "test/cli/block-light.test.mjs",
+        "test/worker/light-batch.test.mjs",
+        "test/gates/run.test.mjs",
+        "test/config/schema-coverage.test.mjs"
+      ],
+      "depends_on": [
+        "B138"
+      ],
+      "note": "Issue #16 item 9 (owner F5: --kind light). Fix round 1: a cached light result was reused before the ticket hash check (critical). Fix round 2: test types."
+    },
+    "B107": {
+      "title": "Several review workers in one run: review.workers 1..4, run start --add-worker, worker identity on signed results, pin checks per worker",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/worker/loop.mjs",
+        "src/worker/queue.mjs",
+        "src/worker/engine.mjs",
+        "src/cli/run.mjs",
+        "src/util/forbidden.mjs",
+        "src/state/block.mjs",
+        "src/state/run.mjs",
+        "src/config/validate.mjs",
+        "schema/code-forge.schema.json",
+        "docs/reference/config.md",
+        "skill/references/review.md",
+        "CHANGELOG.md",
+        "test/worker/registry.test.mjs",
+        "test/worker/multi.test.mjs",
+        "test/state/block.test.mjs",
+        "test/util/forbidden.test.mjs",
+        "test/config/schema-coverage.test.mjs",
+        "test/engines/codex-home.test.mjs",
+        "test/engines/builders/forbidden-rendering.test.mjs",
+        "test/engines/builders/argv-snapshots.test.mjs",
+        "test/review/answers.test.mjs",
+        "test/review/reopen.test.mjs",
+        "test/review/route.test.mjs",
+        "test/worker/deletion-review.test.mjs",
+        "test/state/run.test.mjs"
+      ],
+      "depends_on": [
+        "B139",
+        "B106"
+      ],
+      "note": "Issue #16 item 7 (rest of Group E). Fix round 1: results without a worker field keep the old pin check (82 old tests). Fix round 2: a recycled live pid must match its own pin (critical); an added worker is stopped when its probe fails."
+    },
+    "B142": {
+      "title": "Test leak check ignores a verified live foreign lock (owner pid alive, same start time, not the suite or its descendant)",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "test/helpers/isolate.mjs",
+        "test/helpers-isolate.test.mjs"
+      ],
+      "depends_on": [],
+      "note": "F-19. Gates passed on the second run (first run: one reaper timing flake at load ~490)."
+    },
+    "B140": {
+      "title": "Coder brief keeps only the final test log after a sandbox EPERM rerun; fix rounds list the typecheck command",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "skill/references/code.md",
+        "skill/templates/coder-brief.md",
+        "test/skill/structure.test.mjs"
+      ],
+      "depends_on": [],
+      "note": "F-20 + F-23. Gates passed on the third run with --timeout-ms 1800000 after B142 landed. Closed on the old base, then rebased (F-27)."
+    },
+    "B145": {
+      "title": "In-test no-leak checks (first-use, brief-mode walkthrough) use the suite leak filter: baseline runs and verified live foreign locks are not leaks",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "test/helpers/isolate.mjs",
+        "test/helpers-isolate.test.mjs",
+        "test/first-use.test.mjs",
+        "test/integration/brief-mode-walkthrough.test.mjs"
+      ],
+      "depends_on": [
+        "B142"
+      ],
+      "note": "F-28, found in the B141 gates during this run. Gates passed on the first run."
+    },
+    "B144": {
+      "title": "Process-spawning tests get per-test bounds of at least 30 s and wider observation deadlines, keeping the timing proofs that matter (SIGKILL at settle)",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "test/util/exec.test.mjs",
+        "test/util/reaper.test.mjs",
+        "test/util/tmp.test.mjs",
+        "test/state/block-end.test.mjs",
+        "test/worker/helpers.mjs",
+        "test/worker/worker.test.mjs",
+        "test/worker/pool.test.mjs",
+        "test/worker/heartbeat.test.mjs",
+        "test/worker/orphan.test.mjs",
+        "test/worker/multi.test.mjs",
+        "test/cli/review.test.mjs"
+      ],
+      "depends_on": [],
+      "note": "F-24. One fix round (2 review warnings). Gates passed on the first run. F-29 (queue enqueue < 1 s) left out: it is a product speed rule."
+    },
+    "B141": {
+      "title": "The Codex transcript check ignores rule text inside a node/python/ruby/perl script body that spawns nothing, also inside zsh -lc wrappers; parent-shell substitutions in double-quoted wrapper segments still count",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/util/forbidden.mjs",
+        "test/util/transcript-codex.test.mjs",
+        "skill/references/security.md"
+      ],
+      "depends_on": [],
+      "note": "F-21. Three fix rounds (zsh -lc wrappers, shell quoting, double-quoted substitutions). The real B137b transcript gives no hit. Gates passed on the third run (runs 1-2: load and live-run flakes, fixed by B144/B145)."
+    },
+    "B143": {
+      "title": "A human verb to correct a block's acceptance clauses (block amend-acceptance)",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/cli/block.mjs",
+        "src/state/block.mjs",
+        "src/review/gate-check.mjs",
+        "src/util/forbidden.mjs",
+        "src/cli/review-file.mjs",
+        "src/worker/engine.mjs",
+        "src/worker/queue.mjs",
+        "docs/how-it-works.md",
+        "skill/references/code.md",
+        "skill/SKILL.md",
+        "test/cli/block-amend-acceptance.test.mjs",
+        "test/engines/codex-home.test.mjs",
+        "test/engines/builders/forbidden-rendering.test.mjs",
+        "test/engines/builders/argv-snapshots.test.mjs"
+      ],
+      "depends_on": [
+        "B141"
+      ],
+      "note": "F-17. Stopped for scope only: two pinned counts in test/util/forbidden.test.mjs were not in the owned list. Its changes landed through B143b."
+    },
+    "B143b": {
+      "title": "A human verb to correct a block's acceptance clauses: block amend-acceptance (terminal confirm, signed row, stale approvals no longer count, new review tickets see the new clauses; coder-forbidden)",
+      "wave": 14,
+      "level": "L2",
+      "status": "landed",
+      "owned": [
+        "src/cli/block.mjs",
+        "src/state/block.mjs",
+        "src/review/gate-check.mjs",
+        "src/util/forbidden.mjs",
+        "src/cli/review-file.mjs",
+        "src/worker/engine.mjs",
+        "src/worker/queue.mjs",
+        "docs/how-it-works.md",
+        "skill/references/code.md",
+        "skill/SKILL.md",
+        "test/cli/block-amend-acceptance.test.mjs",
+        "test/engines/codex-home.test.mjs",
+        "test/engines/builders/forbidden-rendering.test.mjs",
+        "test/engines/builders/argv-snapshots.test.mjs",
+        "test/util/forbidden.test.mjs"
+      ],
+      "depends_on": [
+        "B143",
+        "B141"
+      ],
+      "note": "F-17. Took the B143 commit, updated the pinned coder-only counts. Reviews clean on the first join; gates passed on the first run."
     }
   }
 }

package/docs/reference/config.md

@@ -55,6 +55,11 @@ Every other key defaults as shown, or is entirely absent from a minimal file. `a
 | `levels.L3.fallback[].effort` | string |  | — |  |
 | `levels.coder_floor_docs` | enum: `L0`, `L1`, `L2` |  | `"L1"` |  |
 | `orchestrator` | enum: `L0`, `L1`, `L2`, `L3` |  | — |  |
+| `light` | object |  | — |  |
+| `light.max_files` | integer |  | `5` | min 1; Maximum owned changed files in a light block at close. |
+| `light.max_lines` | integer |  | `300` | min 1; Maximum added plus removed lines in a light block at close. |
+| `close` | object |  | — |  |
+| `close.require_human` | boolean |  | `false` | B138: require a terminal-confirmed human close, unless an active close:routine grant covers a routine block. Read from the run snapshot; cannot change by run reload. |
 | `system1` | object |  | — |  |
 | `system1.provider` | enum: `anthropic`, `openai`, `xai` |  | — |  |
 | `system1.model` | string |  | — |  |
@@ -127,6 +132,7 @@ Every other key defaults as shown, or is entirely absent from a minimal file. `a
 | `review.routes[].second.fallback[].provider` | enum: `anthropic`, `openai`, `xai` | yes | — |  |
 | `review.routes[].second.fallback[].model` | string | yes | — | minLength 1 |
 | `review.routes[].second.fallback[].effort` | string |  | — |  |
+| `review.workers` | integer |  | `1` | min 1; max 4; B107: Maximum live workers serving the queue. The orchestrator adds one with run start --add-worker --run <id>. |
 | `review.max_rounds_per_file` | integer |  | `4` | min 2; max 6 |
 | `review.recheck_scope` | enum: `fix_hunks`, `file` |  | `"fix_hunks"` |  |
 | `review.late_findings` | enum: `sweep`, `block` |  | `"sweep"` |  |
@@ -161,6 +167,7 @@ Every other key defaults as shown, or is entirely absent from a minimal file. `a
 | `gates.extra.secret_scan` | boolean |  | `true` |  |
 | `gates.extra.safe_edit` | boolean |  | `true` |  |
 | `gates.extra.invariants` | string |  | — |  |
+| `gates.repeat_new_tests` | integer |  | — | min 2; max 10; After a passing test gate with --run and --block, run its command this many additional times for only tests added or changed against the block base; absent means off. Requires a whole {test_files} argv item; otherwise prints repeat_new_tests: skipped (gates.test has no {test_files}). A failed repeat makes the gate red with reason flaky-test; output and signed gate rows carry repeats {n, files, failed}, and report shows the count. |
 | `gates.full_suite_threshold_files` | integer |  | `10` | min 1; A block that owns more files than this runs the full suite for a {test_files} gate (reason threshold), not its related tests. Owned files are counted this way. A glob or a directory counts the tracked and new (not ignored) files it covers. A path not created yet counts as 1. Outside git each entry counts 1. A git failure runs the full suite. block open --tests names the test files precisely. With gates run --changed, the threshold counts changed files since the last green gates run --run --block instead. |
 | `proof` | object |  | — |  |
 | `proof.tiers` | object |  | — |  |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codedology/code-forge",
-  "version": "0.14.1",
+  "version": "0.15.1",
   "description": "Plan/harden/code/review orchestration CLI and Agent Skill for cross-model, parallel, evidence-gated feature delivery.",
   "repository": {
     "type": "git",

package/schema/code-forge.schema.json

@@ -41,6 +41,21 @@
       }
     },
     "orchestrator": { "$ref": "#/$defs/levelName" },
+    "light": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "max_files": { "type": "integer", "minimum": 1, "default": 5, "description": "Maximum owned changed files in a light block at close." },
+        "max_lines": { "type": "integer", "minimum": 1, "default": 300, "description": "Maximum added plus removed lines in a light block at close." }
+      }
+    },
+    "close": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "require_human": { "type": "boolean", "default": false, "description": "B138: require a terminal-confirmed human close, unless an active close:routine grant covers a routine block. Read from the run snapshot; cannot change by run reload." }
+      }
+    },
     "system1": {
       "type": "object",
       "additionalProperties": false,
@@ -170,6 +185,7 @@
             }
           }
         },
+        "workers": { "type": "integer", "minimum": 1, "maximum": 4, "default": 1, "description": "B107: Maximum live workers serving the queue. The orchestrator adds one with run start --add-worker --run <id>." },
         "max_rounds_per_file": { "type": "integer", "minimum": 2, "maximum": 6, "default": 4 },
         "recheck_scope": { "type": "string", "enum": ["fix_hunks", "file"], "default": "fix_hunks" },
         "late_findings": { "type": "string", "enum": ["sweep", "block"], "default": "sweep" },
@@ -246,6 +262,12 @@
             "invariants": { "type": "string" }
           }
         },
+        "repeat_new_tests": {
+          "type": "integer",
+          "minimum": 2,
+          "maximum": 10,
+          "description": "After a passing test gate with --run and --block, run its command this many additional times for only tests added or changed against the block base; absent means off. Requires a whole {test_files} argv item; otherwise prints repeat_new_tests: skipped (gates.test has no {test_files}). A failed repeat makes the gate red with reason flaky-test; output and signed gate rows carry repeats {n, files, failed}, and report shows the count."
+        },
         "full_suite_threshold_files": {
           "type": "integer",
           "minimum": 1,