@deksden-com/dd-flow-cli 0.4.0 → 0.4.2

package/dist/schemas/plan-stage-report.schema.json

@@ -1,9 +1,18 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "$id": "dd-flow/plan-stage-report@1",
+  "$id": "dd-flow/plan-stage-report@2",
   "title": "dd-flow plan stage report data",
   "type": "object",
   "additionalProperties": false,
+  "allOf": [
+    {
+      "if": {
+        "properties": { "schema_id": { "const": "dd-flow/plan-stage-report@2" } },
+        "required": ["schema_id"]
+      },
+      "then": { "required": ["flow_flags"] }
+    }
+  ],
   "required": [
     "schema_id",
     "generated_at",
@@ -17,7 +26,7 @@
   ],
   "properties": {
     "schema_id": {
-      "const": "dd-flow/plan-stage-report@1"
+      "enum": ["dd-flow/plan-stage-report@1", "dd-flow/plan-stage-report@2"]
     },
     "generated_at": {
       "type": "string",
@@ -88,6 +97,7 @@
         "reason": {"type": "string"}
       }
     },
+    "flow_flags": { "$ref": "#/definitions/flowFlags" },
     "graph": {
       "type": "object",
       "additionalProperties": false,
@@ -153,6 +163,50 @@
         }
       }
     },
+    "review_gates": {
+      "type": "array",
+      "items": { "$ref": "#/definitions/reviewGate" }
+    },
+    "design_aspect_traceability": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "source": {"type": "string"},
+        "verdict": {"type": "string"},
+        "summary": {"type": "string"},
+        "design_aspects": {
+          "type": "array",
+          "items": {"type": "string"}
+        },
+        "requirements": {
+          "type": "array",
+          "items": {"type": "string"}
+        },
+        "verification_seeds": {
+          "type": "array",
+          "items": {"type": "string"}
+        },
+        "gaps": {
+          "type": "array",
+          "items": {"type": "string"}
+        }
+      }
+    },
+    "testing_system": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "applicability": {"type": "string"},
+        "applicability_reason": {"type": "string"},
+        "stages": {"type": "array"},
+        "test_levels": {"type": "object"},
+        "datasets": {"type": "array"},
+        "scenario_links": {"type": "array"},
+        "design_decision_coverage": {"type": "array"},
+        "gaps": {"type": "array"}
+      }
+    },
+    "aspect_map": { "$ref": "#/definitions/aspectMap" },
     "sdlc_contours": {
       "type": "object",
       "additionalProperties": true,
@@ -183,6 +237,7 @@
         "next_delivery_action": {"type": "string"}
       }
     },
+    "policy_context": { "$ref": "#/definitions/policyContext" },
     "links": {
       "type": "object",
       "additionalProperties": { "$ref": "#/definitions/link" },
@@ -250,6 +305,105 @@
         "degraded_reason": { "type": "string" },
         "source": { "type": "string" }
       }
+    },
+    "reviewGate": {
+      "type": "object",
+      "additionalProperties": true,
+      "required": ["id", "label", "stage", "applicability", "verdict", "summary"],
+      "properties": {
+        "id": { "type": "string", "minLength": 1 },
+        "label": { "type": "string", "minLength": 1 },
+        "stage": { "type": "string", "minLength": 1 },
+        "applicability": { "type": "string", "minLength": 1 },
+        "verdict": { "type": "string", "minLength": 1 },
+        "summary": { "type": "string", "minLength": 1 },
+        "evidence": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 }
+        }
+      }
+    },
+    "aspectMap": {
+      "type": "object",
+      "additionalProperties": true,
+      "required": ["path", "schema_id", "status"],
+      "properties": {
+        "path": { "type": "string", "minLength": 1 },
+        "schema_id": { "type": "string", "minLength": 1 },
+        "status": { "type": "string", "minLength": 1 },
+        "summary": { "type": "string" },
+        "counts": {
+          "type": "object",
+          "additionalProperties": true,
+          "properties": {
+            "applicable": { "type": "integer", "minimum": 0 },
+            "not_applicable": { "type": "integer", "minimum": 0 },
+            "unknown": { "type": "integer", "minimum": 0 }
+          }
+        }
+      }
+    },
+    "policyContext": {
+      "type": "object",
+      "additionalProperties": true,
+      "required": ["sources", "git", "checks", "delivery", "gaps"],
+      "properties": {
+        "sources": { "type": "object", "additionalProperties": true },
+        "git": {
+          "type": "object",
+          "additionalProperties": true,
+          "properties": {
+            "workspace_route": { "type": "string" },
+            "delivery_strategy": {
+              "type": "string",
+              "enum": ["direct_commit", "direct_commit_push", "feature_merge", "pull_request", "merge_queue", "squash_merge", "rebase_ff", "release_branch", "external_handoff", "local_only", "no_git"]
+            },
+            "fixation_required": { "type": "boolean" },
+            "result_evidence_required": { "type": "array", "items": { "type": "string" } }
+          }
+        },
+        "checks": { "type": "object", "additionalProperties": true },
+        "delivery": { "type": "object", "additionalProperties": true },
+        "gaps": { "type": "object", "additionalProperties": true }
+      }
+    },
+    "flowFlags": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["flow_kind", "snapshot_revision", "resolution_status", "values", "snapshot_checksum"],
+      "properties": {
+        "contract": { "type": "object", "additionalProperties": true },
+        "flow_kind": { "type": "string", "minLength": 1 },
+        "preset": { "type": "object", "additionalProperties": true },
+        "snapshot_revision": { "type": "integer", "minimum": 1 },
+        "resolution_status": { "type": "string", "enum": ["valid", "legacy_incomplete", "reconciliation_required"] },
+        "values": { "type": "object", "additionalProperties": { "$ref": "#/definitions/flagValue" } },
+        "snapshot_checksum": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+        "floors_applied": { "type": "array", "items": { "type": "string" } },
+        "resolved_at": { "type": "string", "format": "date-time" }
+      }
+    },
+    "flagValue": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["value", "value_type", "owner", "source", "rationale", "resolved_at"],
+      "properties": {
+        "value": {},
+        "value_type": { "type": "string", "minLength": 1 },
+        "owner": { "type": "string", "minLength": 1 },
+        "source": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["kind", "ref"],
+          "properties": {
+            "kind": { "type": "string", "minLength": 1 },
+            "ref": { "type": "string", "minLength": 1 },
+            "revision": { "type": ["integer", "null"] }
+          }
+        },
+        "rationale": { "type": "string", "minLength": 1 },
+        "resolved_at": { "type": "string", "format": "date-time" }
+      }
     }
   }
 }

package/dist/schemas/release-impact.schema.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "dd-flow/release-impact@1",
+  "title": "Canonical release impact",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_id", "from_version", "to_version", "minimum_upgrade_mode", "domains", "path_migration", "runtime_migration", "required_checks"],
+  "properties": {
+    "schema_id": {"const": "dd-flow/release-impact@1"},
+    "from_version": {"type": "string"}, "to_version": {"type": "string"},
+    "minimum_upgrade_mode": {"enum": ["patch", "targeted_minor", "full_migration"]},
+    "domains": {"type": "array", "items": {"type": "string"}},
+    "path_migration": {"type": "boolean"}, "runtime_migration": {"type": "boolean"},
+    "required_checks": {"type": "array", "items": {"type": "string"}, "minItems": 1}, "notes": {"type": "string"}
+  }
+}

package/dist/services/audit.js

@@ -11,9 +11,9 @@ export function appendAudit(context, input) {
         context.now()
     ]);
 }
-export function getAuditEvents(context, protocolId) {
+export function getAuditEvents(context, projectId, protocolId) {
     return context.db.all(`SELECT id, protocol_id, project_id, event_type, forced, reason, payload_json, created_at
      FROM audit_events
-     WHERE protocol_id = ?
-     ORDER BY id ASC`, [protocolId]);
+     WHERE project_id = ? AND protocol_id = ?
+     ORDER BY id ASC`, [projectId, protocolId]);
 }

package/dist/services/branch-context.js

@@ -79,15 +79,27 @@ export function requireClaimableBranchBundle(context, input) {
 }
 function resolveBranchContextInput(context, input) {
     if (input.protocolId) {
-        const protocol = context.db.get(`SELECT id, project_id, project_root, status, stage, next_action, workspace_json, route_json, active_def_json, updated_at
-       FROM protocols
-       WHERE id = ?`, [input.protocolId]);
+        const scopedProject = input.projectRoot
+            ? requireProjectByRoot(context, resolveProjectRoot(input.projectRoot))
+            : null;
+        const matches = context.db.all(scopedProject
+            ? `SELECT id, project_id, project_root, status, stage, next_action, workspace_json, route_json, active_def_json, updated_at
+           FROM protocols WHERE project_id = ? AND id = ? ORDER BY project_id`
+            : `SELECT id, project_id, project_root, status, stage, next_action, workspace_json, route_json, active_def_json, updated_at
+           FROM protocols WHERE id = ? ORDER BY project_id`, scopedProject ? [scopedProject.id, input.protocolId] : [input.protocolId]);
+        if (matches.length > 1) {
+            throw new AppError("ambiguous_protocol", `Protocol id is ambiguous without project context: ${input.protocolId}`, 1, {
+                protocol_id: input.protocolId,
+                candidates: matches.map((item) => ({ project_id: item.project_id, project_root: item.project_root }))
+            });
+        }
+        const protocol = matches[0];
         if (!protocol) {
             throw new AppError("not_found", `Protocol is not registered: ${input.protocolId}`, 1, { protocol_id: input.protocolId });
         }
-        const project = requireProjectByRoot(context, protocol.project_root);
+        const project = scopedProject ?? requireProjectByRoot(context, protocol.project_root);
         const workspace = parseRecord(protocol.workspace_json);
-        const worktree = context.db.get("SELECT * FROM worktree_records WHERE protocol_id = ?", [protocol.id]);
+        const worktree = context.db.get("SELECT * FROM worktree_records WHERE project_id = ? AND protocol_id = ?", [protocol.project_id, protocol.id]);
         const workspacePath = normalizePath(input.workspacePath ?? stringValue(worktree?.worktree_path) ?? stringValue(workspace.worktree_path));
         const git = gitFacts(workspacePath ?? project.root);
         const featureBranch = stringValue(worktree?.feature_branch) ?? stringValue(workspace.feature_branch) ?? stringValue(git.actual_branch);

package/dist/services/canon.js

@@ -217,7 +217,6 @@ function assessLayout(root, layout, memorybankRoot) {
         "protocol/index.md",
         "dd-flow/mb-init.md",
         "dd-flow/mb-upgrade.md",
-        "dd-flow/mb-upgrade-review.md",
         "dd-flow/mb-distill.md"
     ];
     for (const relativePath of requiredFiles) {

package/dist/services/cleanup.js

@@ -31,7 +31,7 @@ export function cleanupScan(context, input) {
             });
         }
         if (terminal) {
-            const queue = context.db.get("SELECT status FROM merge_queue WHERE protocol_id = ? AND status IN ('ready', 'requeued', 'claimed')", [protocol.id]);
+            const queue = context.db.get("SELECT status FROM merge_queue WHERE project_id = ? AND protocol_id = ? AND status IN ('ready', 'requeued', 'claimed')", [project.id, protocol.id]);
             if (queue) {
                 pushFinding(findings, actions, "active_queue_for_terminal_protocol", "warning", {
                     protocol_id: protocol.id,
@@ -40,7 +40,7 @@ export function cleanupScan(context, input) {
                 });
             }
         }
-        const fullProtocol = requireProtocol(context, protocol.id);
+        const fullProtocol = requireProtocol(context, protocol.id, project.id);
         const state = readProtocolRuntimeState(context, fullProtocol).state;
         const diagnostics = protocolRunDiagnostics(context, fullProtocol, state).diagnostics;
         for (const diagnostic of diagnostics.filter((entry) => entry.code === "protocol_run_stage_mismatch")) {
@@ -55,7 +55,7 @@ export function cleanupScan(context, input) {
         }
     }
     const orphanQueueJobs = context.db.all(`SELECT mq.protocol_id, mq.status FROM merge_queue mq
-     LEFT JOIN protocols p ON p.id = mq.protocol_id
+     LEFT JOIN protocols p ON p.project_id = mq.project_id AND p.id = mq.protocol_id
      WHERE mq.project_id = ?
        AND mq.status IN ('ready', 'requeued')
        AND p.id IS NULL
@@ -72,7 +72,7 @@ export function cleanupScan(context, input) {
      ORDER BY updated_at ASC, session_id ASC`, [project.id]);
     for (const session of staleSessions) {
         const protocol = session.protocol_id
-            ? context.db.get("SELECT status, stage FROM protocols WHERE id = ?", [session.protocol_id])
+            ? context.db.get("SELECT status, stage FROM protocols WHERE project_id = ? AND id = ?", [project.id, session.protocol_id])
             : undefined;
         const missingWorkspace = !fs.existsSync(session.workspace_path);
         const terminalProtocol = Boolean(protocol && (["closed", "cancelled"].includes(protocol.status) || ["closed", "cancelled"].includes(protocol.stage)));
@@ -112,7 +112,7 @@ export function cleanupScan(context, input) {
         });
     }
     const staleWorktrees = context.db.all(`SELECT wr.protocol_id, wr.worktree_path FROM worktree_records wr
-     JOIN protocols p ON p.id = wr.protocol_id
+     JOIN protocols p ON p.project_id = wr.project_id AND p.id = wr.protocol_id
      WHERE wr.project_id = ?
        AND wr.status = 'active'
        AND (p.status IN ('closed', 'cancelled') OR p.stage IN ('closed', 'cancelled') OR wr.worktree_path = '')
@@ -242,7 +242,7 @@ function validateNoDestructiveSurprises(context, plan, force) {
 }
 function applyAction(context, action, reason, force, now) {
     if (action.kind === "repair_protocol_state" && action.protocol_id) {
-        const protocol = requireProtocol(context, action.protocol_id);
+        const protocol = requireProtocol(context, action.protocol_id, action.project_id);
         const beforePath = protocol.state_path;
         const existed = fs.existsSync(beforePath);
         readProtocolRuntimeState(context, protocol);

package/dist/services/cli-operation-classifier.js

@@ -69,7 +69,7 @@ function isReadOnlyDiagnostic(family, command, action) {
     if (family === "project")
         return command === "status" || command === "resolve";
     if (family === "protocol")
-        return ["status", "ready", "blockers", "implement"].includes(command ?? "");
+        return ["status", "branch-status", "ready", "blockers", "implement"].includes(command ?? "");
     if (family === "plan")
         return command === "status";
     if (family === "run")

package/dist/services/compatibility-preflight.js

@@ -1,14 +1,13 @@
 import { AppError } from "../shared/errors.js";
 import { getCliBuildInfo } from "./build-info.js";
 import { classifyCliOperation } from "./cli-operation-classifier.js";
-import { selectEngine } from "./engines.js";
-import { requireProtocol } from "./protocols.js";
-export function preflightCliCompatibility(context, args, env = process.env) {
+import { resolveOperationProjectRoot, selectEngine } from "./engines.js";
+export function preflightCliCompatibility(context, args, env = process.env, resolvedProjectRoot) {
     const classification = classifyCliOperation(args, env);
     if (classification.mode === "router_native") {
         return { ok: true, classification, compatibility: null };
     }
-    const projectRoot = resolveOperationProjectRoot(context, args);
+    const projectRoot = resolvedProjectRoot ?? resolveOperationProjectRoot(context, args);
     if (!projectRoot) {
         return { ok: true, classification, compatibility: null };
     }
@@ -54,74 +53,3 @@ function remediationForSelection(selection) {
         diagnostics: selection.diagnostics
     };
 }
-function resolveOperationProjectRoot(context, args) {
-    const [family, command, ...rest] = args;
-    const parsed = parseLightArgs(rest);
-    const explicitRoot = option(parsed, "project-root") ?? option(parsed, "root");
-    if (explicitRoot)
-        return explicitRoot;
-    if (family === "protocol") {
-        const protocolId = positional(parsed, 0);
-        if (protocolId && command && ["ready-for-merge", "cancel", "status"].includes(command)) {
-            return requireProtocol(context, protocolId).project_root;
-        }
-    }
-    if (family === "transition") {
-        const transitionParsed = parseLightArgs([command ?? "", ...rest]);
-        const protocolId = positional(transitionParsed, 0);
-        return protocolId ? requireProtocol(context, protocolId).project_root : null;
-    }
-    if (family === "plan" && (command === "set" || command === "status")) {
-        const protocolId = positional(parsed, 0);
-        return protocolId ? requireProtocol(context, protocolId).project_root : null;
-    }
-    if (family === "plan" && command === "item") {
-        const protocolId = positional(parsed, 1);
-        return protocolId ? requireProtocol(context, protocolId).project_root : null;
-    }
-    if (family === "merge-queue" && ["complete", "fail", "cancel", "note"].includes(command ?? "")) {
-        const protocolId = positional(parsed, 0);
-        return protocolId ? requireProtocol(context, protocolId).project_root : null;
-    }
-    if (family === "worktree") {
-        const protocolId = option(parsed, "protocol-id");
-        return protocolId ? requireProtocol(context, protocolId).project_root : null;
-    }
-    return null;
-}
-function parseLightArgs(args) {
-    const positional = [];
-    const options = new Map();
-    for (let index = 0; index < args.length; index += 1) {
-        const value = args[index];
-        if (value?.startsWith("--")) {
-            const equal = value.indexOf("=");
-            if (equal > 2) {
-                const key = value.slice(2, equal);
-                options.set(key, [...(options.get(key) ?? []), value.slice(equal + 1)]);
-                continue;
-            }
-            const key = value.slice(2);
-            const next = args[index + 1];
-            if (!next || next.startsWith("--")) {
-                options.set(key, [...(options.get(key) ?? []), ""]);
-            }
-            else {
-                options.set(key, [...(options.get(key) ?? []), next]);
-                index += 1;
-            }
-        }
-        else if (value) {
-            positional.push(value);
-        }
-    }
-    return { positional, options };
-}
-function option(parsed, key) {
-    const values = parsed.options.get(key);
-    const value = values?.[values.length - 1];
-    return value ? value : null;
-}
-function positional(parsed, index) {
-    return parsed.positional[index] ?? null;
-}

package/dist/services/dashboard.js

@@ -10,6 +10,7 @@ import { publishProjectSummary } from "./project-summary.js";
 import { requireProjectByRoot } from "./projects.js";
 import { protocolRunDiagnostics, protocolSetBoardForProtocol, protocolSetBoardsForProject, readProtocolRuntimeState, requireProtocol } from "./protocols.js";
 import { activeFlowSessionsForProject } from "./sessions.js";
+import { usageForRun } from "./usage.js";
 import { normalizeProtocolLifecycle } from "./protocol-lifecycle.js";
 export function getCmuxStatus(context, input) {
     const project = requireProjectByRoot(context, resolveProjectRoot(input.projectRoot));
@@ -617,7 +618,7 @@ function buildProtocolDashboardData(context, project, protocolId, htmlPath) {
     if (!protocol) {
         throw new AppError("not_found", `Protocol is not registered: ${protocolId}`, 1, { protocol_id: protocolId });
     }
-    const runtimeProtocol = requireProtocol(context, protocol.id);
+    const runtimeProtocol = requireProtocol(context, protocol.id, project.id);
     const runtimeState = readProtocolRuntimeState(context, runtimeProtocol).state;
     const lifecycle = normalizeProtocolLifecycle({ state: runtimeState });
     const queueItem = queueForProject(context, project.id).find((item) => item.protocol_id === protocolId) ?? null;
@@ -626,6 +627,9 @@ function buildProtocolDashboardData(context, project, protocolId, htmlPath) {
      FROM flow_runs WHERE project_id = ? AND subject_type = 'protocol' AND subject_id = ?
      ORDER BY updated_at DESC, id DESC`, [project.id, protocolId]);
     const primaryRun = runs.find((run) => run.status === "running") ?? runs[0];
+    const observability = primaryRun
+        ? usageForRun(context, { projectId: project.id, runId: primaryRun.id, groupBy: "role" })
+        : { status: "not_observable", reason: "no_protocol_run" };
     const warnings = [...runDiagnostics.diagnostics];
     const protocolSetBoard = protocolSetBoardForProtocol(context, project.id, project.root, protocolId);
     const reviewRuns = recentReviewRunsForProtocol(context, project.id, protocolId, 8);
@@ -643,6 +647,7 @@ function buildProtocolDashboardData(context, project, protocolId, htmlPath) {
             run_index_path: run.run_index_path,
             updated_at: run.updated_at,
             completed_at: run.completed_at,
+            flow_flags: flowFlagsProjection(index),
             stages: Array.isArray(index?.stage_runs) ? index.stage_runs.map((stage) => stageLink(project.root, run, stage)) : []
         };
     });
@@ -696,6 +701,7 @@ function buildProtocolDashboardData(context, project, protocolId, htmlPath) {
         },
         primary_run_id: primaryRun?.id ?? null,
         primary_run_reason: primaryRun ? (primaryRun.status === "running" ? "latest running run" : "latest updated run") : "no runs registered",
+        observability,
         protocol_set_board: protocolSetBoard,
         review_runs: reviewRuns,
         run_history: runHistory,
@@ -730,7 +736,7 @@ function renderProjectDashboardMarkdown(context, project, output) {
     const config = readProjectConfig(context, project.id);
     const globalOutput = globalDashboardMarkdownPath(context, config);
     const latestProtocol = protocols.find((protocol) => isActiveProtocolStatus(protocol.status)) ?? protocols[0];
-    const latestProtocolSummary = latestProtocol ? planSummaryForProtocol(context, latestProtocol.id) : null;
+    const latestProtocolSummary = latestProtocol ? planSummaryForProtocol(context, project.id, latestProtocol.id) : null;
     const lines = [
         "# 🧭 dd-flow Dashboard",
         "",
@@ -750,14 +756,14 @@ function renderProjectDashboardMarkdown(context, project, output) {
     if (activeProtocols.length || sessions.length) {
         lines.push("| --- | --- | --- | --- |");
         for (const protocol of activeProtocols.slice(0, 5)) {
-            const summary = planSummaryForProtocol(context, protocol.id);
+            const summary = planSummaryForProtocol(context, project.id, protocol.id);
             lines.push(`| ${statusIcon(protocol.status)} ${cell(shortId(protocol.id))} | ${cell(`${protocol.stage}/${protocol.status} · ${summary.done}/${summary.total}`)} | ${cell(protocol.next_action ?? "none")} | ${cell(workspaceForProtocol(worktrees, protocol.id) ?? "-")} |`);
         }
         for (const session of sessions.slice(0, 6)) {
             lines.push(`| ${statusIcon(session.status)} ${cell(session.flow_kind)} | ${cell(session.worker_id ?? shortId(session.session_id))} | ${cell(session.next_action ?? "none")} | ${cell(compactPath(session.workspace_path))} |`);
         }
     }
-    const activeItems = activePlanItems(context, activeProtocols);
+    const activeItems = activePlanItems(context, project.id, activeProtocols);
     lines.push("", "## ✅ Plan", activeItems.length ? "| protocol | item | status | summary |" : "No active plan items.");
     if (activeItems.length) {
         lines.push("| --- | --- | --- | --- |");
@@ -793,7 +799,7 @@ function renderProjectDashboardMarkdown(context, project, output) {
     if (recentProtocols.length) {
         lines.push("| --- | --- | --- | --- |");
         for (const protocol of recentProtocols) {
-            const summary = planSummaryForProtocol(context, protocol.id);
+            const summary = planSummaryForProtocol(context, project.id, protocol.id);
             lines.push(`| ${cell(shortId(protocol.id))} | ${statusIcon(protocol.status)} ${cell(protocol.stage)}/${cell(protocol.status)} | ${cell(`${summary.done}/${summary.total}`)} | ${cell(protocol.updated_at)} |`);
         }
     }
@@ -874,8 +880,8 @@ function protocolsForProject(context, projectId) {
     return context.db.all(`SELECT id, status, stage, next_action, blockers_json, active_def_json, updated_at
      FROM protocols WHERE project_id = ? ORDER BY updated_at DESC`, [projectId]);
 }
-function planSummaryForProtocol(context, protocolId) {
-    const row = context.db.get("SELECT plan_json FROM plans WHERE protocol_id = ?", [protocolId]);
+function planSummaryForProtocol(context, projectId, protocolId) {
+    const row = context.db.get("SELECT plan_json FROM plans WHERE project_id = ? AND protocol_id = ?", [projectId, protocolId]);
     if (!row) {
         return { plan_id: "none", total: 0, done: 0, blocked: 0 };
     }
@@ -888,10 +894,10 @@ function planSummaryForProtocol(context, protocolId) {
         blocked: items.filter((item) => item.status === "blocked").length
     };
 }
-function activePlanItems(context, protocols) {
+function activePlanItems(context, projectId, protocols) {
     const items = [];
     for (const protocol of protocols) {
-        const row = context.db.get("SELECT plan_json FROM plans WHERE protocol_id = ?", [protocol.id]);
+        const row = context.db.get("SELECT plan_json FROM plans WHERE project_id = ? AND protocol_id = ?", [projectId, protocol.id]);
         if (!row) {
             continue;
         }
@@ -1031,7 +1037,7 @@ function link(label, href, status, reason) {
     };
 }
 function buildProtocolCard(context, project, protocol, generatePage) {
-    const summary = planSummaryForProtocol(context, protocol.id);
+    const summary = planSummaryForProtocol(context, project.id, protocol.id);
     const activeDefCount = jsonArray(protocol.active_def_json).length;
     const blockerCount = jsonArray(protocol.blockers_json).length;
     const latestRun = context.db.get(`SELECT id, short_id, flow_kind, subject_type, subject_id, status, verdict, next_action, run_index_path, index_json, created_at, updated_at, completed_at
@@ -1040,7 +1046,7 @@ function buildProtocolCard(context, project, protocol, generatePage) {
     let diagnostics = [];
     let lifecycle = normalizeProtocolLifecycle({ rawStage: protocol.stage, rawStatus: protocol.status });
     try {
-        const runtimeProtocol = requireProtocol(context, protocol.id);
+        const runtimeProtocol = requireProtocol(context, protocol.id, project.id);
         const runtimeState = readProtocolRuntimeState(context, runtimeProtocol).state;
         lifecycle = normalizeProtocolLifecycle({ state: runtimeState });
         diagnostics = [...protocolRunDiagnostics(context, runtimeProtocol, runtimeState).diagnostics, ...lifecycle.diagnostics];
@@ -1116,11 +1122,42 @@ function reviewRunSummary(run) {
         verdict: run.verdict,
         next_action: run.next_action,
         run_index_path: run.run_index_path,
+        flow_flags: flowFlagsProjection(index),
         report: reviewStage ? stageLink("", run, reviewStage).report : link("Run index", run.run_index_path, fs.existsSync(run.run_index_path) ? "available" : "missing"),
         updated_at: run.updated_at,
         completed_at: run.completed_at
     };
 }
+function flowFlagsProjection(index) {
+    const flags = index?.flow_flags;
+    if (!flags || typeof flags !== "object" || Array.isArray(flags))
+        return null;
+    const object = flags;
+    const values = object.values;
+    const projectedValues = {};
+    if (values && typeof values === "object" && !Array.isArray(values)) {
+        for (const [key, raw] of Object.entries(values)) {
+            if (!raw || typeof raw !== "object" || Array.isArray(raw))
+                continue;
+            const value = raw;
+            const source = value.source;
+            projectedValues[key] = {
+                value: value.value ?? null,
+                source: source && typeof source === "object" && !Array.isArray(source)
+                    ? { kind: source.kind ?? null, ref: source.ref ?? null }
+                    : null
+            };
+        }
+    }
+    return {
+        snapshot_revision: object.snapshot_revision ?? null,
+        snapshot_checksum: object.snapshot_checksum ?? null,
+        resolution_status: object.resolution_status ?? "legacy_incomplete",
+        preset: object.preset ?? null,
+        floors_applied: Array.isArray(object.floors_applied) ? object.floors_applied : [],
+        values: projectedValues
+    };
+}
 function safeParseIndex(text) {
     try {
         const parsed = JSON.parse(text);