@jterrats/open-orchestra 1.0.9 → 1.0.11

package/dist/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,WAAW,EACX,KAAK,EACL,YAAY,EACZ,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,kCAAkC,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iCAAiC,EACjC,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,cAAc,EACd,SAAS,EACT,MAAM,EACN,QAAQ,EACR,mBAAmB,EACnB,SAAS,GACV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAY/D,MAAM,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACvC,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,EACpB,KAAK,GAAG,KAAK,EACb,UAAU,GAAG,KAAK,EAClB,QAAQ,GAAG,KAAK,EAChB,mBAAmB,EACnB,cAAc,MAQZ,EAAE;IACJ,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,kBAAkB,GAAG,MAAM,sBAAsB,CAAC;QACtD,IAAI;QACJ,QAAQ;QACR,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO;QACL,IAAI;QACJ,YAAY,EAAE,YAAY;QAC1B,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACvC,KAAK;QACL,UAAU;QACV,cAAc,EAAE,MAAM,MAAM,CAAC,YAAY,CAAC;QAC1C,iBAAiB,EAAE,MAAM,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACxE,kBAAkB;QAClB,uBAAuB,EAAE,cAAc;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,EACpB,KAAK,GAAG,KAAK,EACb,UAAU,GAAG,KAAK,EAClB,QAAQ,GAAG,KAAK,EAChB,cAAc,GAAG,KAAK,EACtB,mBAAmB,EACnB,cAAc,MASZ,EAAE;IACJ,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnE,iBAAiB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,GAAG,YAAY,oLAAoL,CACpM,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC;IAC3D,MAAM,YAAY,GAChB,cAAc,IAAI,UAAU;QAC1B,CAAC,CAAC,MAAM,2BAA2B,CAAC;YAChC,IAAI;YACJ,SAAS,EAAE,oBAAoB;SAChC,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAC7B;QACE,GAAG,aAAa;QAChB,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACvC,uBAAuB,EAAE,cAAc;KACxC,EACD,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAC7B,qBAAqB,EACrB,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAC5B,YAAY,EACZ,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAC5B,EAAE,EACF,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAC5B,EAAE,EACF,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAC7B,EAAE,EACF,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,EACpC,2BAA2B,EAAE,EAC7B,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,EACnC,EAAE,EACF,oBAAoB,CACrB,CAAC;IACF,MAAM,cAAc,GAAG,QAAQ;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,QAAQ;QAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE;QACrC,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GAAG,QAAQ;QAC/B,CAAC,CAAC,MAAM,iCAAiC,CAAC;YACtC,IAAI;YACJ,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;QACJ,CAAC,CAAC,MAAM,yBAAyB,CAC7B,IAAI,EACJ,MAAM,kCAAkC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAClE,EAAE,KAAK,EAAE,CACV,CAAC;IACN,MAAM,iBAAiB,GAAG,QAAQ;QAChC,CAAC,CAAC,MAAM,sBAAsB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACxD,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,WAAW,CAAC,IAAI,EAAE;QACtB,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,QAAQ;YACf,CAAC,CAAC,+CAA+C;YACjD,CAAC,CAAC,sCAAsC;QAC1C,SAAS,EAAE;YACT,YAAY;YACZ,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC1C,GAAG,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC;YACnC,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;YACrC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC;YACpC,GAAG,cAAc;SAClB;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACvC,cAAc;YACd,cAAc;YACd,gBAAgB;YAChB,iBAAiB,EAAE;gBACjB,UAAU;gBACV,SAAS,EAAE,cAAc,IAAI,CAAC,UAAU;gBACxC,OAAO,EAAE,YAAY;aACtB;YACD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,uBAAuB,EAAE,cAAc;SACxC;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAgB,EAChB,KAAc,EACd,eAAwB;IAExB,IAAI,eAAe,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAgB,EAChB,KAAa,EACb,eAAwB;IAExB,IAAI,eAAe,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,cAAuC,EACvC,cAAuB;IAEvB,IAAI,cAAc,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,iCAAiC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,iBAAiB,EAAE,CAC1G,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,WAAW,KAAK,kBAAkB,IAAI,CAAC,cAAc,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,6CAA6C,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,iBAAiB,EAAE,CACtH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;IACtD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,GAAG,YAAY,4CAA4C,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAS,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,qBAAqB,CACjC,MAAM,QAAQ,CAAS,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CACzD,CAAC;IACF,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAc,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B,GAAG,IAAI;QACP,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM;KAChE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,KAAiB;IAEjB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG;QACZ,EAAE,EAAE,GAAG,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACzD,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;QAC5B,QAAQ,EAAE,EAAE;QACZ,GAAG,KAAK;QACR,SAAS;KACV,CAAC;IACF,MAAM,cAAc,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;IACnD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnD,OAAO,OAAO;SACX,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;SACpC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,SAAiB,EACjB,QAAgB,EAChB,OAAe;IAEf,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpE,MAAM,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/C,OAAO,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAG,QAAkB;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,QAAQ,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,WAAW,EACX,KAAK,EACL,YAAY,EACZ,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,kCAAkC,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,iCAAiC,EACjC,yBAAyB,GAC1B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,cAAc,EACd,SAAS,EACT,MAAM,EACN,QAAQ,EACR,mBAAmB,EACnB,SAAS,GACV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAY/D,MAAM,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACvC,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,EACzC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,EACpB,KAAK,GAAG,KAAK,EACb,UAAU,GAAG,KAAK,EAClB,QAAQ,GAAG,KAAK,EAChB,mBAAmB,EACnB,cAAc,MAQZ,EAAE;IACJ,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,kBAAkB,GAAG,MAAM,sBAAsB,CAAC;QACtD,IAAI;QACJ,QAAQ;QACR,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;IACH,OAAO;QACL,IAAI;QACJ,YAAY,EAAE,YAAY;QAC1B,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACvC,KAAK;QACL,UAAU;QACV,cAAc,EAAE,MAAM,MAAM,CAAC,YAAY,CAAC;QAC1C,iBAAiB,EAAE,MAAM,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACxE,kBAAkB;QAClB,uBAAuB,EAAE,cAAc;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,EACpB,KAAK,GAAG,KAAK,EACb,UAAU,GAAG,KAAK,EAClB,QAAQ,GAAG,KAAK,EAChB,cAAc,GAAG,KAAK,EACtB,mBAAmB,EACnB,cAAc,MASZ,EAAE;IACJ,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnE,iBAAiB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,GAAG,YAAY,oLAAoL,CACpM,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC;IAC3D,MAAM,YAAY,GAChB,cAAc,IAAI,UAAU;QAC1B,CAAC,CAAC,MAAM,2BAA2B,CAAC;YAChC,IAAI;YACJ,SAAS,EAAE,oBAAoB;SAChC,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAC7B;QACE,GAAG,aAAa;QAChB,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACvC,uBAAuB,EAAE,cAAc;KACxC,EACD,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAC7B,qBAAqB,EACrB,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAC5B,YAAY,EACZ,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAC5B,EAAE,EACF,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAC5B,EAAE,EACF,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAC7B,EAAE,EACF,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,EACpC,2BAA2B,EAAE,EAC7B,oBAAoB,CACrB,CAAC;IACF,MAAM,kBAAkB,CACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,EACnC,EAAE,EACF,oBAAoB,CACrB,CAAC;IACF,MAAM,cAAc,GAAG,QAAQ;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,QAAQ;QAC7B,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE;QACrC,CAAC,CAAC,MAAM,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GAAG,QAAQ;QAC/B,CAAC,CAAC,MAAM,iCAAiC,CAAC;YACtC,IAAI;YACJ,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;QACJ,CAAC,CAAC,MAAM,yBAAyB,CAC7B,IAAI,EACJ,MAAM,kCAAkC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAClE,EAAE,KAAK,EAAE,CACV,CAAC;IACN,MAAM,iBAAiB,GAAG,QAAQ;QAChC,CAAC,CAAC,MAAM,sBAAsB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACxD,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,WAAW,CAAC,IAAI,EAAE;QACtB,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,QAAQ;YACf,CAAC,CAAC,+CAA+C;YACjD,CAAC,CAAC,sCAAsC;QAC1C,SAAS,EAAE;YACT,YAAY;YACZ,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC1C,GAAG,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC;YACnC,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;YACrC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC;YACpC,GAAG,cAAc;SAClB;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACvC,cAAc;YACd,cAAc;YACd,gBAAgB;YAChB,iBAAiB,EAAE;gBACjB,UAAU;gBACV,SAAS,EAAE,cAAc,IAAI,CAAC,UAAU;gBACxC,OAAO,EAAE,YAAY;aACtB;YACD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,uBAAuB,EAAE,cAAc;SACxC;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAgB,EAChB,KAAc,EACd,eAAwB;IAExB,IAAI,eAAe,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,QAAgB,EAChB,KAAa,EACb,eAAwB;IAExB,IAAI,eAAe,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,cAAuC,EACvC,cAAuB;IAEvB,IAAI,cAAc,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,iCAAiC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,iBAAiB,EAAE,CAC1G,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,WAAW,KAAK,kBAAkB,IAAI,CAAC,cAAc,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,6CAA6C,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,iBAAiB,EAAE,CACtH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;IACtD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,GAAG,YAAY,4CAA4C,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAS,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,qBAAqB,CACjC,MAAM,QAAQ,CAAS,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CACzD,CAAC;IACF,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAc,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1B,GAAG,IAAI;QACP,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM;KAChE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAY,EACZ,KAAiB;IAEjB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG;QACZ,EAAE,EAAE,GAAG,SAAS,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE;QACzC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;QAC5B,QAAQ,EAAE,EAAE;QACZ,GAAG,KAAK;QACR,SAAS;KACV,CAAC;IACF,MAAM,cAAc,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE;IACnD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnD,OAAO,OAAO;SACX,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;SACpC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,SAAiB,EACjB,QAAgB,EAChB,OAAe;IAEf,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpE,MAAM,SAAS,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/C,OAAO,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAG,QAAkB;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,QAAQ,CAAC,CAAC;AACpD,CAAC"}

package/docs/adoption-guide.md

@@ -51,6 +51,15 @@ orchestra review --task STORY-001 --role qa --result approve --findings "Accepta
 orchestra release check --json
 ```
 
+Do not approve workflow gates just because the CLI reached a pause. The
+`po->architect` gate requires user-validated scope, assumptions, non-goals,
+priority, acceptance criteria, and sizing context. The `qa->release` gate
+requires real implementation evidence, exact validation commands, QA findings,
+and BA/PO plus Architect review when business behavior or technical contracts
+changed. If a generated handoff says `Acceptance Criteria: none`, use the
+linked issue or task as the source of truth, record the gap, and block release
+until the missing criteria/evidence are fixed or explicitly risk-accepted.
+
 ## Concepts
 
 Open Orchestra is a local control plane. The parent runtime remains the active
@@ -79,6 +88,9 @@ orchestra workflow gate-approve --run <run-id> --gate "po->architect" --approver
 orchestra workflow run --task TEAM-001 --resume <run-id>
 ```
 
+Quote gate ids in shells so `po->architect` and `qa->release` are passed as
+literal values rather than interpreted as output redirection.
+
 Local-only provider:
 
 ```bash

package/docs/autonomous-workflow.md

@@ -372,8 +372,9 @@ Started autonomous workflow wfrun-... for task FEAT-001 [gates=phase]
 → po (product_owner) task=FEAT-001-po
   ✓ handoff → architect (...)
   ⏸ gate po→architect — review: .agent-workflow/approvals/FEAT-001-gate-po-to-architect-....md
-  Approve: orchestra workflow run --task FEAT-001 --resume wfrun-...
+  Approve: orchestra workflow gate-approve --run wfrun-... --gate "po->architect" --approver <name> --rationale "<text>"
 
+$ orchestra workflow gate-approve --run wfrun-... --gate "po->architect" --approver "product-owner" --rationale "User validated scope, assumptions, non-goals, priority, acceptance criteria, and sizing context"
 $ orchestra workflow run --task FEAT-001 --resume wfrun-...
 Resuming run wfrun-... from phase architect
 → architect (architect) task=FEAT-001-architect
@@ -384,10 +385,17 @@ Resuming run wfrun-... from phase architect
 → qa (qa) task=FEAT-001-qa
   ✓ handoff → release_manager (...)
   ⏸ gate qa→release — review: .agent-workflow/approvals/FEAT-001-gate-qa-to-release-....md
-  Approve: orchestra workflow run --task FEAT-001 --resume wfrun-...
+  Approve: orchestra workflow gate-approve --run wfrun-... --gate "qa->release" --approver <name> --rationale "<text>"
 
+$ orchestra workflow gate-approve --run wfrun-... --gate "qa->release" --approver "release-manager" --rationale "Implementation evidence, QA findings, BA/PO acceptance, and Architect review are recorded"
 $ orchestra workflow run --task FEAT-001 --resume wfrun-...
 Resuming run wfrun-... from phase release
 → release (release_manager) task=FEAT-001-release
 Workflow complete [run=wfrun-...]
 ```
+
+Gate ids should be quoted in shells. If a generated handoff says
+`Acceptance Criteria: none`, do not approve release from that handoff alone.
+Use the linked issue or task as the acceptance source, record the missing
+handoff detail as a review finding, and continue only after the gap is fixed or
+the Product Owner explicitly accepts the risk.

package/docs/claude-adapter-qa-matrix.md

@@ -0,0 +1,68 @@
+# Claude Adapter QA Matrix
+
+This matrix covers the GH-422 child stories for Claude runtime adapter support.
+It records only local contract evidence and documentation evidence. It does not
+claim real Claude Code native execution or Anthropic/provider API execution.
+
+## Evidence Summary
+
+| Story | Scope | Evidence | Status |
+| --- | --- | --- | --- |
+| #432 / `GH-432-CLAUDE-ADAPTER-CONTRACT` | Claude action eligibility, skip reasons, alias policy, non-regression docs | QA handoff, release handoff, `npm run build`, `node --test test/runtime-adapters.test.js` with 51 passing tests, `git diff --check` | Pass |
+| #433 / `GH-433-CLAUDE-DISPATCH-BRIDGE` | Dispatch bridge boundary, spawned/active lifecycle recording, idempotency, fallback guidance | QA handoff, release handoff, `npm run build`, `node --test test/runtime-adapters.test.js` with 54 passing tests, `git diff --check` | Pass |
+| #434 / `GH-434-CLAUDE-COMPLETION-RECONCILIATION` | Strict completion validation by task, phase, role, runtime, session, and expected artifact | `runtime watch` validation tests in `test/runtime-adapters.test.js`; `npm run build`; `node --test test/runtime-adapters.test.js` with 58 passing tests | Pass |
+| #435 / `GH-435-CLAUDE-GATE-PRESERVATION` | Safe workflow resume and human gate preservation regression coverage | `npm run build`; `node --test test/autonomous-workflow-cli.test.js`; `node --test test/runtime-adapters.test.js` with 59 passing tests | Pass |
+| #436 / `GH-436-CLAUDE-DOCS-QA-EVIDENCE` | Documentation, QA matrix, release evidence, support-level framing | This document, `docs/runtime-adapters.md`, GH-436 QA/release handoffs, and follow-up #434/#435 evidence updates | Pass |
+| #439 / `GH-439-CLAUDE-NATIVE-CALLBACK-BRIDGE` | Native callback bridge contract, fallback truthfulness, lifecycle validation | Local contract tests in `test/runtime-adapters.test.js`; `docs/runtime-adapters.md`; this matrix | In progress |
+
+## Acceptance Criteria Matrix
+
+| Story | Acceptance Criterion | Evidence Type | Evidence | Result | Status |
+| --- | --- | --- | --- | --- | --- |
+| #432 | Claude runtime action eligibility is defined for runtime, action kind, tool name, session status, safety state, and runtime filter. | Unit/contract | `.agent-workflow/handoffs/GH-432-CLAUDE-ADAPTER-CONTRACT-wfrun-1779347910261-ecc68e-qa-qa-runtime-handoff.md`; `node --test test/runtime-adapters.test.js` | QA reports dispatchable primary Claude action and checked eligibility fields. | Pass |
+| #432 | Skip reasons are machine-readable and human-readable for queued, suspended, terminal, stale or unsafe, runtime mismatch, tool mismatch, unsupported runtime, unavailable native tool, and manual request. | Unit/CLI contract | GH-432 QA handoff; GH-432 developer evidence | QA reports stable reason codes and readable messages for required skipped conditions. | Pass |
+| #432 | Tool alias policy documents primary `claude-code-agent` and whether `Task` is supported or deferred. | Documentation/unit | `docs/runtime-adapters.md`; GH-432 QA handoff | `claude-code-agent` is primary; `Task` is deferred/manual and skipped as `tool-mismatch`. | Pass |
+| #432 | Tests cover dispatchable and non-dispatchable Claude actions without changing Codex or Cursor behavior. | Regression/unit | GH-432 QA handoff; `node --test test/runtime-adapters.test.js` with 51 passing tests | Focused runtime adapter tests passed; Codex/Cursor behavior reviewed in the same suite. | Pass |
+| #432 | `docs/runtime-adapters.md` reflects only the tested support level. | Documentation review | GH-432 QA handoff; current runtime adapter docs | Docs avoid native Claude/provider API claims for GH-432. | Pass |
+| #433 | Eligible `claude-agent-request` actions can be dispatched through a focused Claude bridge service or equivalent adapter boundary. | Code review/CLI unit | `.agent-workflow/handoffs/GH-433-CLAUDE-DISPATCH-BRIDGE-wfrun-1779349624692-f04dbc-qa-qa-runtime-handoff.md`; `node --test test/runtime-adapters.test.js` | QA reports dispatch result is `dispatched` through the adapter boundary. | Pass |
+| #433 | Dispatch records spawned and active lifecycle states with a stable child identifier or deterministic fallback label. | CLI unit/event review | GH-433 QA handoff | QA reports one spawned event, one active heartbeat, and `claude-code-agent:<session>` fallback label coverage. | Pass |
+| #433 | Repeated dispatch is idempotent and never creates duplicate lifecycle events for the same session. | CLI unit | GH-433 QA handoff | QA reports repeated dispatch keeps one spawned and one active event. | Pass |
+| #433 | Unavailable or unsupported native tool paths return explicit fallback guidance and manual lifecycle commands. | CLI unit/code review | GH-433 QA handoff | QA reports skipped result includes prompt artifact, expected result artifact, and manual spawned command. | Pass |
+| #433 | Tests cover successful dispatch, unavailable tool fallback, repeated dispatch idempotency, runtime mismatch, and guardrail rejection. | Automated tests | GH-433 QA handoff; `node --test test/runtime-adapters.test.js` with 54 passing tests | Required scenarios mapped to deterministic tests. | Pass |
+| #434 | Completion validation checks task id, phase, role, runtime, session id, and expected result artifact path. | Watch/contract tests | `test/runtime-adapters.test.js`; `src/runtime-completion-validation.ts` | `runtime watch` validates completion against structured spawn/session metadata before recording completed. | Pass |
+| #434 | Wrong-task, wrong-role, wrong-runtime, wrong-session, missing, duplicate, and unsafe-path artifacts are rejected or skipped with explicit reasons. | Watch/negative tests | `runtime watch rejects Claude completion metadata mismatches`; existing unsafe/missing/duplicate watch coverage | Mismatches are skipped with explicit reasons; unsafe paths do not create completed lifecycle events. | Pass |
+| #434 | `runtime watch` records completed exactly once for a valid spawned or active Claude session. | Watch test | `runtime watch completes a valid Claude session once` | Two watch passes produce one completed lifecycle event for the Claude session. | Pass |
+| #434 | Native immediate completion results follow the same validation rules when supported. | Watch/contract test | `runtime watch validates Claude native immediate completion results`; `src/runtime-completion-validation.ts` | Immediate `completionResult` payloads resolve through the same expected-artifact and artifact-metadata validator. | Pass |
+| #434 | Tests cover artifact validation, duplicate completion prevention, timeout/stale behavior, and safe path handling. | Automated tests | `node --test test/runtime-adapters.test.js` with 58 passing tests | Focused runtime adapter suite covers artifact metadata validation, duplicate ignored reasons, immediate completion payloads, and existing timeout/stale/unsafe-path behavior. | Pass |
+| #435 | Verified completion resumes the paused run to the next safe phase when no human gate is pending. | Runtime lifecycle tests | `runtime watch completes spawned sessions once and auto-resumes workflow`; `runtime lifecycle completion can opt out of auto-resume` | Runtime completion resumes safe non-gated work and keeps opt-out behavior. | Pass |
+| #435 | `po-to-architect`, `qa-to-release`, and configured human gates remain paused until explicit approval. | Workflow CLI tests | `workflow resume holds human gates until explicit approval` | Resume now holds unapproved gates and advances only after `workflow gate-approve`. | Pass |
+| #435 | Auto-dispatch never records gate approval or skips a gate. | Runtime lifecycle tests | `runtime lifecycle auto-resume does not approve human gates` | Runtime lifecycle auto-resume leaves paused work unapproved and emits no `AUTONOMOUS_GATE_APPROVED` event. | Pass |
+| #435 | Tests cover `gates=none`, `gates=phase`, `gates=all`, multi-phase dispatch until idle, manual fallback recovery, and GH-421 spawn-state messaging. | CLI/runtime regression tests | `test/autonomous-workflow-cli.test.js`; `test/runtime-adapters.test.js` | Existing runtime suite covers multi-pass dispatch, queued/pending messaging, manual recovery guidance, and gate modes; #435 adds stricter unapproved-gate hold coverage. | Pass |
+| #435 | Existing Codex, Cursor, generic, VS Code, Windsurf, and OpenCode behavior is unchanged or covered by regression tests. | Runtime regression tests | `test/runtime-adapters.test.js` | Runtime adapter catalog and cross-runtime parent action tests still pass. | Pass |
+| #436 | Runtime adapter docs document Claude dispatch support, alias policy, fallback behavior, manual recovery commands, guardrails, and gate preservation. | Documentation review | `docs/runtime-adapters.md` | Updated in this slice. | Pass |
+| #436 | QA matrix maps each GH-422 child story acceptance criterion to unit, workflow, CLI, or manual evidence. | Documentation | This file | Matrix records Pass/Pending/Deferred by criterion and evidence type. | Pass |
+| #436 | Release evidence includes exact commands, pass/fail results, unsupported CI/manual verification notes, and unresolved risks. | QA handoff/evidence | GH-436 handoff under `.agent-workflow/handoffs/`; #434/#435 QA evidence and release-readiness checks | Handoffs and evidence record exact commands, pass/fail results, known unsupported Claude callback/provider claims, and residual real-transport risk. | Pass |
+| #436 | Documentation does not claim native Claude execution beyond tested behavior. | Documentation review | `docs/runtime-adapters.md`; this file | Docs frame support as parent-runtime contract plus manual/runtime-owned launch. | Pass |
+| #436 | Product/release review records go/no-go based on evidence and known limitations. | Review artifact | `.agent-workflow/reviews/GH-436-CLAUDE-DOCS-QA-EVIDENCE-release_manager-review.md`; #435 release-readiness gate | Release review records go with known limitations; #435 follow-up gate preservation now passes. | Pass |
+| #439 | Claude parent-runtime adapter can hand off only when a supported Claude parent runtime and native callback capability are explicitly verified. | Unit/contract | `runtime parent-actions dispatches eligible Claude requests with stable lifecycle`; `runtime parent-actions returns truthful Claude native fallback outside Claude parent runtime` | Local tests simulate the verified callback contract and verify unsupported parent runtimes skip without lifecycle writes. | In progress |
+| #439 | Adapter captures a native child identifier or verified callback result and records spawned and active without manual lifecycle commands. | Unit/contract | `test/runtime-adapters.test.js` Claude native dispatch test | Simulated verified bridge records one spawned event and one active heartbeat with the supplied native child id. | In progress |
+| #439 | Completion reconciliation validates task id, phase, role, runtime, session id, and expected artifact before completion. | Watch/contract tests | Existing #434 watch tests in `test/runtime-adapters.test.js` | Completion still flows through the expected handoff metadata and safe path validators. | Pass |
+| #439 | Unsupported environments return fallback guidance without claiming native execution. | Unit/contract/docs | `runtime parent-actions returns truthful Claude native fallback outside Claude parent runtime`; `docs/runtime-adapters.md` | Codex/non-Claude context returns skipped fallback guidance and records no spawned lifecycle event. | In progress |
+| #439 | Documentation separates tested local contract, real Claude runtime proof, and unsupported CI/non-Claude contexts. | Documentation | `docs/runtime-adapters.md`; this matrix | Docs label local simulation and unsupported contexts; real Claude runtime proof remains manual QA. | In progress |
+
+## Unsupported Or Deferred Claims
+
+- No evidence in this slice proves that Orchestra can call Claude Code native
+  Agent/Subagent tools from CI or from a non-Claude parent runtime.
+- No evidence proves direct Anthropic or provider API execution for runtime
+  delegation; runtime-native artifacts keep `directProviderApiAllowed=false`.
+- Native immediate Claude completion is covered when represented as a
+  `completionResult` payload; real callback transport remains future adapter
+  work.
+- #435 workflow resume and human gate preservation regression coverage now
+  passes locally; real Claude Code callback transport remains outside this
+  local contract matrix.
+- #439 adds a truthful native callback bridge contract: non-Claude and
+  callback-unavailable environments skip without lifecycle writes. Real Claude
+  Code Agent/Subagent proof still requires manual QA from a Claude parent
+  runtime that exposes the native callback capability.

package/docs/e2e-test-batteries.md

@@ -29,7 +29,7 @@ entry points a user or CI runner actually executes.
 | Browser console           | Web console task, cost, provider, delegation, recovery, evidence, workflow, accessibility, artifacts | `npm run test:e2e`                                                  | visible state, API persistence, evidence attachment, lifecycle transitions, responsive/keyboard behavior                                               | Playwright report, screenshots/traces on failure                   |
 | Public site               | Documentation/site navigation, docs catalog, architecture viewer, mobile fit                         | `npm run test:e2e`                                                  | navigation order, local docs catalog search, no raw GitHub redirect for docs, mobile content fit                                                       | Playwright report                                                  |
 | Runtime manual queue      | Manual runtime delegation in a `/tmp` workspace                                                      | `npm run test:e2e:runtime`                                          | two active sessions, third manual `spawn-request` materializes `queued`, artifact includes lifecycle commands, `runtime sessions` lists queued session | stdout/stderr, JSON output, artifact content                       |
-| Init refresh environments | Simulated Codex, Claude, Cursor, generic workspaces                                                  | `node --test e2e/init-refresh-environments.test.js`                 | missing runtime guidance files regenerate on `init --force`, user content is preserved, managed blocks are updated only inside managed ranges          | filesystem diff assertions                                         |
+| Init refresh environments | Simulated generic, Codex, Claude, Cursor, VS Code/GitHub Copilot, and Windsurf workspaces             | `npm run test:e2e:init`                                             | missing runtime guidance files regenerate on `init --force`, user content is preserved, managed blocks/frontmatter are updated only inside managed ranges, target-specific metadata excludes wrong-target content, generated-artifact evidence maps back to acceptance criteria | filesystem diff assertions, QA coverage JSON                       |
 | Workflow lifecycle CLI    | CLI workflow run, gate, resume, QA failback, release readiness                                       | `node --test e2e/workflow-lifecycle-cli.test.js`                    | task phases create handoffs, blocked QA routes back, routine gate resumes immediately, release readiness maps acceptance to evidence                   | JSON output, events, handoffs                                      |
 
 ## P1 High-Risk Regression Batteries
@@ -76,8 +76,8 @@ the packaging/install path is wrong.
 
 1. Keep `e2e/runtime-manual-queue.test.js` release-blocking as runtime
    delegation evolves.
-2. Add `e2e/init-refresh-environments.test.js` for Codex, Claude, Cursor, and
-   generic project simulations.
+2. Keep `e2e/init-onboarding.test.js` covering Codex, Claude, Cursor, VS Code,
+   GitHub Copilot, Windsurf, and generic project simulations.
 3. Add `e2e/workflow-lifecycle-cli.test.js` for workflow run, gate, failback,
    resume, and release readiness.
 4. Add `e2e/runtime-multi-squad.test.js` for async background squad behavior.

package/docs/orchestra-mvp.md

@@ -275,6 +275,19 @@ Release go/no-go:
   `macos-latest`, and `windows-latest`.
 - Confirm `Create release tag`, site publish, and npm publish workflows are
   successful for the intended release commit.
+- Confirm the npm publish workflow authenticates with either a maintainer
+  `NPM_TOKEN` that has read-write access plus CI 2FA bypass for
+  `@jterrats/open-orchestra`, or npm Trusted Publishing/OIDC configured with
+  organization/user `jterratsdev`, repository `open-orchestra`, workflow
+  filename `publish-npm.yml`, and no environment. If npm returns `404 Not Found`
+  during publish for an existing scoped package, treat it as a token or scope
+  permission failure until proven otherwise; do not print token values in logs
+  or evidence. If `npm whoami` returns `E401 Unauthorized`, regenerate the
+  GitHub Actions `NPM_TOKEN` secret from the npm maintainer account before
+  rerunning publish. If `npm publish` returns `EOTP`, the token is valid but
+  cannot bypass 2FA; switch to a granular token with bypass 2FA enabled or run
+  `publish-npm.yml` with `auth_mode=trusted` after configuring npm Trusted
+  Publishing for the package.
 
 Support diagnostics:
 

package/docs/release-test-matrix.md

@@ -35,6 +35,28 @@ If the remote tag already exists, do not move it. Use the next patch or
 prerelease version unless an explicit break-glass release decision documents why
 manual intervention is required.
 
+The npm publish workflow supports two authentication modes:
+
+- `auth_mode=token`: requires `NPM_TOKEN` from an npm account with read-write
+  access to `@jterrats/open-orchestra` and CI publish permission that can bypass
+  2FA.
+- `auth_mode=trusted`: uses npm Trusted Publishing/OIDC. Configure the package
+  in npm with organization/user `jterratsdev`, repository `open-orchestra`,
+  workflow filename `publish-npm.yml`, and no environment before running this
+  mode.
+
+A `404 Not Found` response on `PUT
+https://registry.npmjs.org/@jterrats%2fopen-orchestra` for an existing scoped
+package usually means the token is missing, was generated by a user that is not
+a package maintainer, or lacks publish permission for the scope. `EOTP` means
+the token is accepted but cannot bypass 2FA for CI publishing; use a granular
+token with bypass 2FA enabled or switch to Trusted Publishing. The workflow
+validates `npm whoami` and scoped package access before token-based publishing
+so permission failures are visible without exposing the token.
+If the preflight fails at `npm whoami` with `E401 Unauthorized`, regenerate
+`NPM_TOKEN` from the npm maintainer account and store the raw token value as a
+GitHub Actions secret.
+
 ## Required Environments
 
 - `ubuntu-latest` with Node `>=22` and npm.

package/docs/runtime-adapters.md

@@ -28,8 +28,9 @@ packet:
   approvals stay inside Codex; Orchestra renders briefs and packets only.
 - `claude-cli`: use the current Claude Code session. Orchestra renders the
   packet and the Claude parent launches it with the native Agent/Subagent tool
-  when available; `Task` is treated as a legacy alias if that is what the
-  runtime exposes.
+  when available. The tested auto-dispatch eligibility contract recognizes
+  `claude-code-agent` as the primary tool; `Task` is documented as a deferred
+  legacy/manual alias and is skipped as `tool-mismatch` by auto-dispatch.
 - `cursor-cli`: use the current Cursor runtime. Orchestra renders the packet
   and the Cursor parent launches it as a Background Agent so the current chat
   remains usable while the child works.
@@ -164,6 +165,7 @@ orchestra runtime spawn-request --task STORY-001 --role developer --runtime code
 orchestra runtime parent-actions --task STORY-001 --json
 orchestra runtime parent-actions --task STORY-001 --dispatch --until-idle --runtime codex-cli --timeout 5m --idle-timeout 10s --json
 orchestra runtime spawn-lifecycle --session STORY-001:manual:developer:codex-cli --status spawned --agent-id <runtime-agent-id> --json
+orchestra runtime watch --task STORY-001 --once --json
 ```
 
 The matching local APIs are `GET /api/runtime/sessions`,
@@ -183,6 +185,15 @@ points to the prompt artifact, expected result artifact, ownership paths,
 allowed commands, and lifecycle commands. It does not include secrets or direct
 provider credentials.
 
+Pending parent actions also include structured `eligibility` metadata. The
+metadata records the checked runtime, action kind, tool name, session status,
+runtime filter when supplied, and safety state. Dispatchable actions report
+`status=dispatchable`; skipped actions include machine-readable reason codes
+and operator-readable messages. Current skip codes are `already-dispatched`,
+`queued`, `suspended`, `terminal`, `stale-or-unsafe`, `runtime-mismatch`,
+`tool-mismatch`, `unsupported-runtime`, `unavailable-native-tool`, and
+`manual-request`.
+
 When `workflow run` pauses with a pending parent runtime action, parent agents
 have two supported paths:
 
@@ -192,29 +203,108 @@ have two supported paths:
 - Auto-dispatch: run
   `runtime parent-actions --task <id> --dispatch --until-idle --runtime <runtime-id>`.
   The dispatcher repeatedly inspects pending parent actions, dispatches only
-  safe actions for the active runtime, records spawned lifecycle events with
-  dispatcher session ids, applies `runtime watch` completions when expected
-  handoff artifacts appear, resumes paused workflow runs, and continues across
-  later phases until idle or timeout.
+  safe actions for the active runtime, records spawned and active lifecycle
+  events with stable runtime child ids or verified callback correlation ids, applies
+  `runtime watch` completions when expected handoff artifacts appear, resumes
+  paused workflow runs, and continues across later phases until idle or timeout.
 
 The auto-dispatch loop is bounded by `--timeout`, `--idle-timeout`, and
 `--interval`, so it never polls forever. It skips queued actions, suspended
-sessions, runtime mismatches, unavailable runtimes, manual/unsupported action
-kinds, and tool mismatches. This keeps the boundary explicit: Orchestra emits
-auditable actions and lifecycle commands; the active parent runtime executes
-native tools such as Codex `spawn_agent`, and the dispatcher only consumes
-actions that are safe for the runtime declared on the command line.
+sessions, terminal sessions, stale or unsafe actions, runtime mismatches,
+already-dispatched sessions, unsupported runtimes, unavailable native tools,
+manual requests, and tool mismatches. Skipped actions include fallback guidance
+with the prompt artifact, expected result artifact, and manual lifecycle
+commands so a human parent runtime can safely continue without provider API
+access. This keeps the boundary explicit: Orchestra emits auditable actions and
+lifecycle commands; the active parent runtime executes native tools such as
+Codex `spawn_agent`, and the dispatcher only consumes actions that are safe for
+the runtime declared on the command line. For Claude, the tested dispatch
+contract accepts `claude-agent-request` with `tool=claude-code-agent`, but it
+records `spawned` and `active` only when the active parent runtime is Claude and
+the native callback capability is explicitly verified. Unsupported Codex, CI,
+non-Claude, or callback-unavailable contexts return fallback guidance and do not
+claim native execution. Orchestra does not call Claude Code, Anthropic APIs, or
+another provider API.
+
+Runtime lifecycle watching is adapter-driven. Each inspected session reports a
+`watcher` object with adapter id, detection mode, support level, fallback
+behavior, and the reason a native callback is unavailable. `codex-cli`,
+`claude-cli`, and `cursor-cli` currently reconcile completion through explicit
+parent lifecycle events and then fall back to bounded artifact inspection.
+`generic-runtime`, unknown runtime ids, and runtimes without declared callbacks
+use the same artifact fallback directly. Event-driven callbacks should only be
+used when the selected watcher adapter declares native support; otherwise
+`runtime watch` performs bounded inspection of the expected handoff artifact.
+
+## Claude Adapter Support Level
+
+Claude support is currently a parent-runtime dispatch and lifecycle contract,
+not proof that Orchestra can invoke Claude Code or Anthropic APIs by itself.
+The tested local behavior covers:
+
+- Dispatch support: eligible `claude-agent-request` actions for `claude-cli`
+  with `tool=claude-code-agent` can be inspected by
+  `runtime parent-actions --dispatch --runtime claude-cli`. The dispatch path
+  records `spawned` and `active` lifecycle state only when the bridge verifies a
+  Claude parent runtime and callback capability. In local contract tests this is
+  simulated with explicit environment markers; in unsupported environments the
+  action is skipped with manual fallback guidance.
+- Alias policy: `claude-code-agent` is the only auto-dispatchable Claude tool
+  name in the tested contract. `Task` is a legacy/manual alias and is skipped
+  as `tool-mismatch`; accepting it in auto-dispatch requires new tests and
+  documentation.
+- Fallback behavior: skipped, unsupported, unsafe, stale, queued, suspended,
+  terminal, mismatched, or unavailable actions return structured eligibility
+  metadata, fallback guidance, prompt artifact, expected result artifact, and
+  manual lifecycle commands. Fallback never runs the phase in the parent agent
+  silently, never records native Claude lifecycle events, and never switches to
+  direct provider APIs.
+- Guardrails: dispatch is bounded by runtime guardrails, runtime filters,
+  session status, safety state, action kind, tool name, and stale-session
+  checks. It preserves `directProviderApiAllowed=false` for runtime-native
+  delegation artifacts.
+- Completion reconciliation: `runtime watch` validates the expected completion
+  metadata before marking a Claude session complete. The validation checks task
+  id, phase, role, runtime, session id, and the safe expected handoff path, and
+  it also requires the final handoff artifact to repeat those metadata fields.
+  It skips mismatches, missing artifact metadata, unsafe paths, and duplicate
+  completions with explicit reasons instead of treating any handoff file as
+  completion proof. Native immediate `completionResult` payloads use the same
+  validation path when present.
+- Gate preservation: auto-dispatch must not approve or skip human gates.
+  `workflow run --resume` now holds unapproved gates until
+  `workflow gate-approve` records explicit approval, and runtime lifecycle
+  auto-resume records no gate approval events. The regression suite covers safe
+  non-gated resume, unapproved gate hold behavior, opt-out, queued/pending
+  messaging, and multi-pass parent action dispatch.
+
+Manual recovery for a skipped or unavailable Claude action:
+
+```bash
+orchestra runtime parent-actions --task <id> --json
+orchestra runtime spawn-request --task <id> --role <role> --runtime claude-cli --json
+orchestra runtime spawn-lifecycle --session <session-id> --status spawned --agent-id <claude-child-id-or-label> --json
+orchestra runtime spawn-lifecycle --session <session-id> --status active --agent-id <claude-child-id-or-label> --json
+orchestra runtime watch --task <id> --once --json
+orchestra workflow run --task <id> --resume <run-id>
+```
+
+Only run the lifecycle commands after the parent Claude Code session has
+actually launched or taken ownership of the rendered prompt artifact. If no
+child id is returned by the runtime, use a stable operator label and keep the
+expected handoff artifact path from the spawn request.
 
 ## Native Background Agent Notes
 
 Claude Code and Cursor do not need Orchestra to call vendor APIs directly.
 They need a precise packet and lifecycle hooks:
 
-- Claude Code: render `runtime spawn-request`, then launch the packet from the
-  parent Claude session with the native Agent/Subagent tool. If the local
-  Claude runtime exposes `Task` as the tool name, treat it as the compatible
-  legacy alias. Record the returned child id or role label through
-  `runtime spawn-lifecycle`.
+- Claude Code: render `runtime spawn-request`, then manually launch the packet
+  from the parent Claude session with the native Agent/Subagent tool. The
+  primary tested tool name is `claude-code-agent`. `Task` is deferred as a
+  legacy/manual alias and is not auto-dispatchable in GH-432; auto-dispatch
+  reports it as `tool-mismatch`. Record the returned child id or role label
+  through `runtime spawn-lifecycle`.
 - Codex: render `runtime spawn-request`, read `parentRuntimeAction`, and call
   the parent `spawn_agent` tool with the prompt artifact as the role-scoped
   assignment. In workflow auto-consumer mode, use

package/docs/sonar-quality-gates.md

@@ -62,6 +62,35 @@ gate status. If the scanner can upload analysis but the wait step fails with
 `Project not found`, update the `SONAR_TOKEN` permissions or keep
 `SONAR_QUALITY_GATE_WAIT` unset until the token can read the project.
 
+Before scanner execution, CI runs:
+
+```bash
+node bin/orchestra.js sonar preflight \
+  --provider "$SONAR_PROVIDER_RESOLVED" \
+  --project-key jterrats_open-orchestra \
+  --organization jterrats \
+  --host-url "$SONAR_HOST_URL_RESOLVED" \
+  --branch "$BRANCH_NAME"
+```
+
+The preflight validates token authentication, project visibility, quality gate
+API access, issue API access, and security hotspot API access. It redacts the
+token, host URL, and Cloudflare Access service token values from diagnostic
+output. `hotspots` is a warning when unavailable because some Sonar tokens can
+analyze and read issues while hotspot review permissions are managed separately.
+
+Common remediation:
+
+- `auth-invalid`: regenerate `SONAR_TOKEN`; do not paste header names or
+  prefixes into the secret value.
+- `project-not-found`: verify the project key and organization, then grant the
+  token user Browse access on the project.
+- `permission-denied`: grant Execute Analysis for scanner upload and Browse/API
+  access for evidence import. Use a user token when hotspot APIs must be read.
+- `cloudflare-challenge`: use the Cloudflare Access service token proxy, a
+  self-hosted runner with local `SONAR_LOCAL_HOST_URL`, or an Access policy that
+  explicitly allows the CI service token without an interactive challenge.
+
 ## Local SonarQube
 
 Open Orchestra does not own the long-lived local SonarQube containers. The
@@ -179,6 +208,35 @@ For the current laptop setup, use the macOS ARM64 runner package and configure
 the runner with `--labels sonar,local-sonar`. GitHub automatically adds the
 platform labels such as `self-hosted`, `macOS`, and `ARM64`.
 
+Current macOS ARM64 bootstrap:
+
+```bash
+mkdir -p ~/dev/actions-runner-open-orchestra-sonar
+cd ~/dev/actions-runner-open-orchestra-sonar
+curl -L -o actions-runner-osx-arm64.tar.gz <github-runner-osx-arm64-download-url>
+tar xzf actions-runner-osx-arm64.tar.gz
+./config.sh --url https://github.com/jterratsdev/open-orchestra --labels sonar,local-sonar --name open-orchestra-sonar-macos-arm64
+./run.sh
+```
+
+Future Linux runner bootstrap should use the Linux package that matches the host
+architecture, the same `sonar,local-sonar` labels, and a dedicated service
+account. Do not reuse a broad organization runner for Sonar unless the runner
+already has least-privilege filesystem, Docker, and network access.
+
+Service lifecycle:
+
+```bash
+cd ~/dev/actions-runner-open-orchestra-sonar
+./svc.sh install
+./svc.sh start
+./svc.sh status
+./svc.sh stop
+```
+
+Use `./run.sh` for interactive local troubleshooting. Use `svc.sh` only after
+the runner can start, claim a Sonar workflow job, and reach SonarQube locally.
+
 Keep the shared SonarQube stack running locally:
 
 ```bash
@@ -201,6 +259,44 @@ container. In that case either run the runner process on the host, attach the
 runner container to the SonarQube Docker network, or set `SONAR_LOCAL_HOST_URL`
 to the host/network address that reaches SonarQube without Cloudflare.
 
+### Self-Hosted Runner Health Check
+
+Before relying on CI, validate the local runner and SonarQube path from the same
+machine that runs the GitHub Actions runner:
+
+```bash
+gh variable list --repo jterratsdev/open-orchestra
+gh api repos/jterratsdev/open-orchestra/actions/runners --jq '.runners[] | {name, status, busy, labels: [.labels[].name]}'
+npm run sonar:preflight:local
+```
+
+Expected result:
+
+- `SONAR_RUNNER` is `self-hosted`.
+- A runner is `online` with `self-hosted`, `sonar`, and `local-sonar` labels.
+- Sonar authentication returns `{"valid":true}`.
+- `npm run sonar:preflight:local` passes `auth`, `project`, `qualityGate`, and
+  `issues`; `hotspots` may warn when the token lacks hotspot read access.
+
+If the runner is online but jobs stay queued, verify the workflow labels match
+the runner labels exactly. If Sonar preflight fails, fix the token/project
+permissions before rerunning the workflow.
+
+### Current Workflow Warning Triage
+
+- Node 20 action warning: non-blocking today. Track upstream action upgrades and
+  update actions when GitHub publishes Node 24-compatible major versions.
+- GPG keyserver warning from the Sonar scanner action: non-blocking when scanner
+  setup and analysis complete. Prefer self-hosted runner network allowlisting or
+  a pinned scanner cache before treating it as release-blocking.
+- Cache or tar warnings: non-blocking unless scanner dependencies fail to
+  restore and analysis cannot start. Rebuild the runner cache or rerun the job
+  before changing project code.
+
+These warnings should be captured as CI annotations, but they do not override a
+passing Sonar workflow unless the scanner, import, or final quality gate step
+fails.
+
 Sonar reads TypeScript through `tsconfig.sonar.json`, a standalone analyzer
 config that mirrors the build compiler options but lowers only the analyzer
 target to `ES2022`. Keep the main build target unchanged unless runtime support
@@ -239,6 +335,17 @@ Recommended minimum quality gate for new code:
 - Coverage reported from `coverage/lcov.info` for source files on every Sonar
   run.
 
+The Orchestra Sonar import stores unresolved issues and Sonar security hotspots
+in the uploaded `sonar-insights` artifact. When the gate fails only on
+`new_security_hotspots_reviewed`, review the hotspot list in SonarQube, mark
+each hotspot as safe, fixed, or accepted with rationale, then rerun the Sonar
+workflow. Do not bypass this gate from code unless the Product Owner explicitly
+accepts the security risk.
+If the artifact includes `securityHotspotsUnavailableReason`, the configured
+`SONAR_TOKEN` can read the quality gate and issues but cannot read the hotspots
+API. Grant the token Browse plus security hotspot review/read permissions in
+SonarQube before using the artifact as release evidence.
+
 ## Coverage Publishing
 
 The Sonar workflow runs `npm run test:coverage` before analysis. That command

package/docs/traceability-flow.md

@@ -54,10 +54,20 @@ orchestra review --task STORY-1 --role qa --result approve --findings "..." --re
 ```
 
 Developer-to-QA handoff should include touched files, commands, known gaps, and
-recommended Playwright, CLI, shell, or API coverage. `qa coverage` maps each
-acceptance criterion to `covered`, `planned`, `skipped`, or `gap` using task
-paths, project scripts, and existing evidence; release readiness surfaces
-unresolved QA automation gaps before promotion.
+recommended Playwright, CLI, shell, API, integration, workflow, mobile, desktop,
+data, or generated-artifact coverage. `qa coverage` maps each acceptance
+criterion to `covered`, `weak`, `missing`, `deferred`, or `blocked`
+using task paths, project scripts, and existing evidence; release readiness and
+the `qa-release` gate surface unresolved QA automation gaps before promotion.
+
+Generated artifacts are a first-class QA surface. When rules, skills, runtime
+guidance, Markdown files, MDC files, or managed bootstrap blocks change,
+evidence must assert generated paths, managed metadata, target-specific content,
+refresh/drift behavior, user-content preservation, and absence of wrong-target
+content. CLI evidence must assert exit code, stdout, stderr, generated
+files/events, and final state. Integration evidence must include receiver-side
+sandbox/mock/contract/webhook/event/log validation or an explicit deferred owner
+and rationale.
 
 Evidence summaries should name the acceptance criterion they cover or say
 "covers all acceptance criteria" when a single artifact proves the full story.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jterrats/open-orchestra",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "type": "module",
   "workspaces": [
     "extensions/vscode-open-orchestra",
@@ -16,7 +16,7 @@
     "test": "npm run build && node --test test/**/*.js extensions/**/*.test.cjs",
     "test:coverage": "npm run build && c8 --reporter=lcov --reports-dir coverage --exclude \"test/**\" --exclude \"e2e/**\" --exclude \"extensions/**/test/**\" --exclude \"dist/assets/**\" --exclude \"dist/web-console/**\" node --test test/**/*.js extensions/**/*.test.cjs",
     "test:e2e": "npm run build && npm run site:build && playwright test",
-    "test:e2e:init": "node --test e2e/init-onboarding.test.js",
+    "test:e2e:init": "node --test e2e/init-onboarding.test.js e2e/runtime-instruction-flow.test.js",
     "test:e2e:runtime": "node --test e2e/runtime-manual-queue.test.js",
     "test:e2e:runtime:ollama": "npm run build && node --test e2e/runtime-ollama-provider.test.js",
     "lint": "eslint . && prettier --check \"{bin,e2e,scripts,test,src}/**/*.js\" \"{site,web-console}/src/**/*.{css,js,jsx}\" \"{site,web-console}/*.{html,js,json}\" \"extensions/**/*.{cjs,json,md}\" \"src/**/*.ts\" \"*.{js,json}\"",
@@ -30,6 +30,7 @@
     "performance:bench": "npm run build && node scripts/performance-benchmark.js",
     "precommit": "npm run lint && npm run typecheck && npm run secret-scan && npm run security:audit && npm test && npm run validate:workflow",
     "prepack": "npm run build",
+    "sonar:preflight:local": "node bin/orchestra.js sonar preflight --provider sonarqube-local --project-key jterrats_open-orchestra --host-url ${SONAR_HOST_URL:-http://localhost:9001}",
     "sonar:scan:local": "sonar-scanner -Dsonar.host.url=${SONAR_HOST_URL:-http://localhost:9001}",
     "hooks:install": "git config core.hooksPath .githooks",
     "build:web": "npm run build:web:legacy && npm run build:web:react",

package/rules/delivery-quality-gates.mdc

@@ -18,6 +18,8 @@ Development work is not complete when code compiles. Every implementation must m
 ## QA Gate
 
 - QA receives the Developer handoff before release approval.
+- Workflow gate approval is not a status shortcut. `po→architect` can be approved only when the issue/task has user-validated scope, non-goals, assumptions, priority, acceptance criteria, and sizing context. `qa→release` can be approved only after real implementation evidence, QA findings, BA/PO acceptance, and Architect review when technical contracts changed.
+- Generated handoffs with `Acceptance Criteria: none` are incomplete for release purposes. Pull the criteria from the linked GitHub issue or Orchestra task, record a review finding, and block release until the criteria/evidence gap is fixed or explicitly risk-accepted by the Product Owner.
 - QA must produce a test plan covering acceptance criteria, regression areas, edge cases, data setup, and environment assumptions.
 - QA must block test planning when acceptance criteria are fragmented, non-verifiable, or only role/phase headings. Return those findings to PO/BA before release evidence is generated.
 - QA plans must include an AC-to-evidence matrix with expected observable result, actual result, artifact/command, and pass/fail/deferred status for each acceptance criterion.