@khoavu882/doflow 2.0.0-beta.3 → 2.0.0-beta.5

package/core/registry/storage.json

@@ -71,7 +71,7 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/verification/contract-runner.ts"
+        "src/runtime/verification/contract-runner.js"
       ]
     },
     {
@@ -89,7 +89,25 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/task-state.ts"
+        "src/runtime/task-state.js"
+      ]
+    },
+    {
+      "id": "task-delivery",
+      "root": "project-state",
+      "path": "delivery",
+      "entry": "record",
+      "match": "^[A-Za-z0-9][A-Za-z0-9._-]*\\.json$",
+      "rule": "work",
+      "bound": {
+        "finishedDays": 30
+      },
+      "protect": null,
+      "moments": [
+        "verb"
+      ],
+      "writers": [
+        "src/runtime/task-state.js"
       ]
     },
     {
@@ -107,8 +125,8 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/readiness-record.ts",
-        "src/runtime/task-state.ts"
+        "src/runtime/readiness-record.js",
+        "src/runtime/task-state.js"
       ]
     },
     {
@@ -126,7 +144,7 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/task-state.ts"
+        "src/runtime/task-state.js"
       ]
     },
     {
@@ -144,7 +162,7 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/outcome.ts"
+        "src/runtime/outcome.js"
       ]
     },
     {
@@ -162,7 +180,8 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/retrieval-plan.ts"
+        "src/runtime/task-state.js",
+        "src/runtime/retrieval-record.js"
       ]
     },
     {
@@ -180,7 +199,7 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/task-state.ts"
+        "src/runtime/task-state.js"
       ]
     },
     {
@@ -198,8 +217,8 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/task-state.ts",
-        "src/runtime/workflow-orchestrator.ts"
+        "src/runtime/task-state.js",
+        "src/runtime/workflow-orchestrator.js"
       ]
     },
     {
@@ -218,7 +237,7 @@
       ],
       "writers": [
         "core/shared/scripts/doflow/bin/doflow-run",
-        "src/runtime/trace/ledger.ts"
+        "src/runtime/trace/ledger.js"
       ]
     },
     {
@@ -237,7 +256,7 @@
       ],
       "writers": [
         "core/shared/scripts/doflow/bin/doflow-run",
-        "src/runtime/trace/ledger.ts"
+        "src/runtime/trace/ledger.js"
       ]
     },
     {
@@ -255,7 +274,7 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/advice/record.ts"
+        "src/runtime/advice/record.js"
       ]
     },
     {
@@ -273,7 +292,7 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/advice/record.ts"
+        "src/runtime/advice/record.js"
       ]
     },
     {
@@ -291,7 +310,7 @@
         "install"
       ],
       "writers": [
-        "src/state/index.ts"
+        "src/state/index.js"
       ]
     },
     {
@@ -309,7 +328,7 @@
         "install"
       ],
       "writers": [
-        "src/state/index.ts"
+        "src/state/index.js"
       ]
     },
     {
@@ -328,7 +347,7 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/lifecycle/event-store.ts"
+        "src/runtime/lifecycle/event-store.js"
       ]
     },
     {
@@ -347,8 +366,8 @@
         "verb"
       ],
       "writers": [
-        "src/runtime/lifecycle/report-store.ts",
-        "src/runtime/storage/engine.ts"
+        "src/runtime/lifecycle/report-store.js",
+        "src/runtime/storage/engine.js"
       ]
     },
     {
@@ -427,10 +446,10 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/install/backup.ts"
+        "src/install/backup.js"
       ],
       "source": {
-        "file": "src/install/backup.ts",
+        "file": "src/install/backup.js",
         "pattern": "DEFAULT_BACKUP_RETENTION = {value}"
       }
     },
@@ -448,10 +467,10 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/install/backup.ts"
+        "src/install/backup.js"
       ],
       "source": {
-        "file": "src/install/backup.ts",
+        "file": "src/install/backup.js",
         "pattern": "DEFAULT_BACKUP_RETENTION = {value}"
       }
     },
@@ -522,12 +541,12 @@
         "core/harnesses/shared/hooks/policies/capture-failure.sh",
         "core/harnesses/shared/hooks/stream-hook-runner.js",
         "core/shared/scripts/doflow/bin/doflow-run",
-        "src/runtime/failure/capture.ts",
-        "src/runtime/failure/cli.ts",
-        "src/runtime/failure/store.ts"
+        "src/runtime/failure/capture.js",
+        "src/runtime/failure/cli.js",
+        "src/runtime/failure/store.js"
       ],
       "source": {
-        "file": "src/runtime/failure/capture.ts",
+        "file": "src/runtime/failure/capture.js",
         "pattern": "KEEP_ROTATED = {value}"
       }
     },
@@ -544,10 +563,10 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/state/index.ts"
+        "src/state/index.js"
       ],
       "source": {
-        "file": "src/state/index.ts",
+        "file": "src/state/index.js",
         "pattern": "LEDGER_FILE"
       }
     },
@@ -564,10 +583,10 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/state/index.ts"
+        "src/state/index.js"
       ],
       "source": {
-        "file": "src/state/index.ts",
+        "file": "src/state/index.js",
         "pattern": "LEDGER_FILE"
       }
     },
@@ -584,10 +603,10 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/runtime/lifecycle/store-upkeep.ts"
+        "src/runtime/lifecycle/store-upkeep.js"
       ],
       "source": {
-        "file": "src/runtime/lifecycle/store-upkeep.ts",
+        "file": "src/runtime/lifecycle/store-upkeep.js",
         "pattern": "MIGRATING_PREFIX"
       }
     },
@@ -605,11 +624,11 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/runtime/storage/engine.ts",
-        "src/runtime/task-state.ts"
+        "src/runtime/storage/engine.js",
+        "src/runtime/task-state.js"
       ],
       "source": {
-        "file": "src/runtime/task-state.ts",
+        "file": "src/runtime/task-state.js",
         "pattern": "LOCK_STALE_MS = 10_000"
       }
     },
@@ -626,14 +645,14 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/adapters/antigravity/index.ts",
-        "src/adapters/copy-tree.ts",
-        "src/install/manifest.ts",
-        "src/lifecycle/index.ts",
-        "src/state/index.ts"
+        "src/adapters/antigravity/index.js",
+        "src/adapters/copy-tree.js",
+        "src/install/manifest.js",
+        "src/lifecycle/index.js",
+        "src/state/index.js"
       ],
       "source": {
-        "file": "src/lifecycle/index.ts",
+        "file": "src/lifecycle/index.js",
         "pattern": "MCP_INDEX.md"
       }
     },
@@ -650,14 +669,14 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/adapters/antigravity/index.ts",
-        "src/adapters/copy-tree.ts",
-        "src/install/manifest.ts",
-        "src/lifecycle/index.ts",
-        "src/state/index.ts"
+        "src/adapters/antigravity/index.js",
+        "src/adapters/copy-tree.js",
+        "src/install/manifest.js",
+        "src/lifecycle/index.js",
+        "src/state/index.js"
       ],
       "source": {
-        "file": "src/lifecycle/index.ts",
+        "file": "src/lifecycle/index.js",
         "pattern": "MCP_INDEX.md"
       }
     },
@@ -674,10 +693,10 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/runtime/knowledge/index-store.ts"
+        "src/runtime/knowledge/index-store.js"
       ],
       "source": {
-        "file": "src/runtime/knowledge/index-store.ts",
+        "file": "src/runtime/knowledge/index-store.js",
         "pattern": "sha256"
       }
     },
@@ -694,10 +713,10 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/runtime/knowledge/index-store.ts"
+        "src/runtime/knowledge/index-store.js"
       ],
       "source": {
-        "file": "src/runtime/knowledge/index-store.ts",
+        "file": "src/runtime/knowledge/index-store.js",
         "pattern": "sha256"
       }
     },
@@ -714,10 +733,10 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/runtime/worktree.ts"
+        "src/runtime/worktree.js"
       ],
       "source": {
-        "file": "src/runtime/worktree.ts",
+        "file": "src/runtime/worktree.js",
         "pattern": "worktree"
       }
     },
@@ -734,7 +753,7 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/runtime/advice/config.ts"
+        "src/runtime/advice/config.js"
       ],
       "source": {
         "file": "core/harnesses/shared/hooks/policies/lib.sh",
@@ -754,7 +773,7 @@
       "protect": null,
       "moments": [],
       "writers": [
-        "src/runtime/advice/config.ts"
+        "src/runtime/advice/config.js"
       ],
       "source": {
         "file": "core/harnesses/shared/hooks/policies/lib.sh",
@@ -776,7 +795,7 @@
         "uninstall"
       ],
       "writers": [
-        "src/runtime/storage/upkeep.ts"
+        "src/runtime/storage/upkeep.js"
       ]
     },
     {
@@ -794,7 +813,7 @@
         "uninstall"
       ],
       "writers": [
-        "src/runtime/storage/upkeep.ts"
+        "src/runtime/storage/upkeep.js"
       ]
     },
     {
@@ -812,7 +831,7 @@
         "uninstall"
       ],
       "writers": [
-        "src/runtime/storage/upkeep.ts"
+        "src/runtime/storage/upkeep.js"
       ]
     },
     {
@@ -830,7 +849,7 @@
         "uninstall"
       ],
       "writers": [
-        "src/runtime/storage/upkeep.ts"
+        "src/runtime/storage/upkeep.js"
       ]
     },
     {
@@ -848,7 +867,7 @@
         "uninstall"
       ],
       "writers": [
-        "src/runtime/storage/upkeep.ts"
+        "src/runtime/storage/upkeep.js"
       ]
     },
     {
@@ -866,7 +885,7 @@
         "uninstall"
       ],
       "writers": [
-        "src/runtime/storage/upkeep.ts"
+        "src/runtime/storage/upkeep.js"
       ]
     },
     {
@@ -884,7 +903,7 @@
         "uninstall"
       ],
       "writers": [
-        "src/runtime/storage/upkeep.ts"
+        "src/runtime/storage/upkeep.js"
       ]
     },
     {
@@ -902,7 +921,7 @@
         "uninstall"
       ],
       "writers": [
-        "src/runtime/storage/upkeep.ts"
+        "src/runtime/storage/upkeep.js"
       ]
     },
     {
@@ -920,7 +939,7 @@
         "uninstall"
       ],
       "writers": [
-        "src/runtime/storage/upkeep.ts"
+        "src/runtime/storage/upkeep.js"
       ]
     },
     {
@@ -938,7 +957,7 @@
         "uninstall"
       ],
       "writers": [
-        "src/state/run-lock.ts"
+        "src/state/run-lock.js"
       ]
     },
     {
@@ -956,7 +975,7 @@
         "uninstall"
       ],
       "writers": [
-        "src/state/run-lock.ts"
+        "src/state/run-lock.js"
       ]
     }
   ],
@@ -990,67 +1009,75 @@
       "reason": "agent context file (AGENTS.md or CLAUDE.md) managed block, owned by the install ledger"
     },
     {
-      "file": "src/adapters/claude/index.ts",
+      "file": "core/harnesses/shared/hooks/bridge/bridge.sh",
+      "reason": "caller-named trace file, appended only when the caller sets DOFLOW_BRIDGE_TRACE"
+    },
+    {
+      "file": "src/adapters/claude/index.js",
       "reason": "harness configuration/projection owned by the install ledger"
     },
     {
-      "file": "src/adapters/codex/config.ts",
+      "file": "src/adapters/codex/config.js",
       "reason": "harness configuration/projection owned by the install ledger"
     },
     {
-      "file": "src/adapters/codex/hooks.ts",
+      "file": "src/adapters/codex/hooks.js",
       "reason": "harness configuration/projection owned by the install ledger"
     },
     {
-      "file": "src/adapters/copilot/index.ts",
+      "file": "src/adapters/copilot/index.js",
       "reason": "harness configuration/projection owned by the install ledger"
     },
     {
-      "file": "src/adapters/gemini/hooks.ts",
+      "file": "src/adapters/gemini/hooks.js",
       "reason": "harness configuration/projection owned by the install ledger"
     },
     {
-      "file": "src/adapters/gemini/index.ts",
+      "file": "src/adapters/gemini/index.js",
       "reason": "harness configuration/projection owned by the install ledger"
     },
     {
-      "file": "src/adapters/mcp-entries.ts",
+      "file": "src/adapters/mcp-entries.js",
       "reason": "harness configuration/projection owned by the install ledger"
     },
     {
-      "file": "src/adapters/opencode/index.ts",
+      "file": "src/adapters/opencode/index.js",
       "reason": "harness configuration/projection owned by the install ledger"
     },
     {
-      "file": "src/adapters/pi/index.ts",
+      "file": "src/adapters/pi/index.js",
       "reason": "harness configuration/projection owned by the install ledger"
     },
     {
-      "file": "src/adapters/pi/mcp.ts",
+      "file": "src/adapters/pi/mcp.js",
       "reason": "harness configuration/projection owned by the install ledger"
     },
     {
-      "file": "src/helper/marker-merge.ts",
+      "file": "src/helper/marker-merge.js",
       "reason": "harness instruction file managed block (CLAUDE.md, AGENTS.md, GEMINI.md), owned by the install ledger"
     },
     {
-      "file": "src/release/sync-plugin-versions.ts",
+      "file": "src/release/sync-plugin-versions.js",
       "reason": "maintainer release tool: rewrites the repo plugin manifests (no DoFlow root)"
     },
     {
-      "file": "src/runtime/decision-register.ts",
+      "file": "src/release/build-package.js",
+      "reason": "maintainer release tool: writes the staged npm package directory (no DoFlow root)"
+    },
+    {
+      "file": "src/runtime/decision-register.js",
       "reason": "agent-docs deliverable (decisions register of a feature)"
     },
     {
-      "file": "src/runtime/history-compactor.ts",
+      "file": "src/runtime/history-compactor.js",
       "reason": "agent-docs deliverable (decisions/history archive and artifact stub)"
     },
     {
-      "file": "src/runtime/lifecycle/intent-writer.ts",
+      "file": "src/runtime/lifecycle/intent-writer.js",
       "reason": "agent-docs deliverable (agent-docs/intent/*.md)"
     },
     {
-      "file": "src/runtime/scaffold/generate.ts",
+      "file": "src/runtime/scaffold/generate.js",
       "reason": "agent-docs deliverable (scaffold files and manifest)"
     }
   ]

package/core/registry/verification.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "description": "Verification check tiers, their fixed ordering, and which tiers each risk level requires. Plain JSON, matching capabilities.json and routes.json. Consumed by src/runtime/verification/engine.ts.",
+  "description": "Verification check tiers, their fixed ordering, and which tiers each risk level requires. Plain JSON, matching capabilities.json and routes.json. Consumed by src/runtime/verification/engine.js.",
   "policy": {
     "defaultRiskLevel": "MEDIUM",
     "emptyContractStatus": "INCONCLUSIVE",

package/core/shared/scripts/doflow/bash/render-puml.sh

@@ -72,8 +72,8 @@ feature_dir=$(printf '%s' "$resolved_json" | jq -r '.feature_dir // empty')
 # The projector lives in the JS runtime, not beside the helpers: G12 keeps this repo to one runtime
 # implementation, and Python in core/ is how a shadow tree grew the first time, one individually
 # defensible module at a time. render-audit.sh already shells out to node for the same reason.
-PROJECTOR="$repo_root/src/runtime/c4-project.ts"
-[ -f "$PROJECTOR" ] || PROJECTOR="${DOFLOW_CONFIG_DIR:-$HOME/.doflow}/runtime/src/runtime/c4-project.ts"
+PROJECTOR="$repo_root/src/runtime/c4-project.js"
+[ -f "$PROJECTOR" ] || PROJECTOR="${DOFLOW_CONFIG_DIR:-$HOME/.doflow}/runtime/src/runtime/c4-project.js"
 design_rel=$(printf '%s' "$resolved_json" | jq -r '.design // empty')
 [ -n "$feature_slug" ] || note "no-active-feature"
 [ -n "$feature_dir" ] || note "resolver-missing-feature-dir"

package/core/shared/scripts/doflow/bin/doflow-run

@@ -13,8 +13,10 @@
 # PATH pointing at any of them.
 #
 # Usage: doflow-run <verb> [args...]
+#   enforcement --harness <id> --policy <id> [--profile <id>] [--json]
 #   Every verb accepts --json. Exit 0 = success, 1 = an actionable finding, 2 = usage or
-#   resolution error. Arguments, stdin and exit status pass through the dispatcher unmodified —
+#   resolution error, 3 = context-pack overflow. Arguments, stdin and exit status pass through the
+#   dispatcher unmodified —
 #   `sync-context` reads its block body from stdin, so anything that buffered or consumed it here
 #   would break that verb rather than merely inconvenience it.
 
@@ -112,13 +114,14 @@ capture_failure() {
 
 # After a verb ran: a status outside {0, 1, 2} is a crash worth recording (a signal, a runtime that
 # died), minus what is not DoFlow's fault (DEC-031): 127 (command not found), 130, 141 and 143
-# (interrupted, broken pipe, terminated) and the task-not-found status 3 of `task-brief`. A Node
-# crash exits 1 and is recorded by the CLI itself, so it is never counted twice.
+# (interrupted, broken pipe, terminated), task-not-found status 3 of `task-brief`, and overflow
+# status 3 of `context-pack`. A Node crash exits 1 and is recorded by the CLI itself, so it is
+# never counted twice.
 capture_exit_status() {
   local verb="${1:-}" status="${2:-0}"
   case "$status" in
     0|1|2|127|130|141|143) return 0 ;;
-    3) [ "$verb" = "task-brief" ] && return 0 ;;
+    3) case "$verb" in task-brief|context-pack) return 0 ;; esac ;;
   esac
   capture_failure "$verb" "exit-$status" "$status"
   return 0
@@ -358,7 +361,7 @@ Workflow and evidence:
   claim            record or update a claim and its support state
   readiness        evaluate readiness; return state and missing items
   context-pack     emit the compiled context pack for a stage
-  retrieval-plan   declare the needs a stage will resolve, then report every declared item
+  retrieval-plan   declare the needs a stage will resolve, attempt each need, then report every declared item
   outcome          record a task's terminal state with its basis, or show what was recorded
   scaffold         emit the code scaffold the active feature's artifacts imply
   decision         register, list or compact the active feature's decisions
@@ -379,6 +382,7 @@ Observability:
   discover         missed opportunities in recorded runs
   inventory        both scopes at once: shadowed assets, drift, unmanaged contenders
   capabilities     provider resolution
+  enforcement      verified lifecycle policy coverage
   doctor           installation and provider health
   storage          report stored data and its retention bounds
 EOF
@@ -478,7 +482,7 @@ shell_helper_for() {
 is_node_verb() {
   case "$1" in
     classify|workflow|route|evidence|claim|readiness|context-pack|retrieval-plan|outcome|scaffold|decision|followup|lifecycle|goal|failure|verify|recover|leak-scan|\
-trace|stats|indicators|discover|inventory|capabilities|doctor|orchestrate|research-request|task-attempt|retrieve|model-role|storage|brief-tools|advise) return 0 ;;
+trace|stats|indicators|discover|inventory|capabilities|enforcement|doctor|orchestrate|research-request|task-attempt|retrieve|model-role|storage|brief-tools|advise) return 0 ;;
     *) return 1 ;;
   esac
 }

package/core/shared/skills/do-design/SKILL.md

@@ -64,12 +64,12 @@ a `design.md` for it invents an artifact its workflow never reads.
    ```bash
    "$DOFLOW" context-pack --task-id "<task id>" --json
    ```
-   **Exit 1 means the pack came back empty.** This early in the chain that is ordinary rather than a
-   problem — a feature reaching design for the first time has nothing recorded against it yet, and
-   `do-brainstorm` may not have batched evidence at all. Treat it the same way step 3's precondition
-   treats a missing `requirement.md`: note the gap in this stage's report and fall through to
-   reading `requirement.md` directly, which this step always did. When the pack is non-empty, read
-   it alongside `requirement.md` for the user stories, FRs, and NFRs the design must serve.
+   **Exit 1 means the pack came back empty; exit 3 means overflow: the pack is complete, act on
+   `overflowAction.message` and report the gap.** Early in the chain an empty pack is ordinary — a
+   new feature has nothing recorded yet, and `do-brainstorm` may not have batched evidence. Treat
+   it like step 3's precondition treats missing `requirement.md`: note the gap in this stage's report
+   and fall through to reading `requirement.md` directly. When non-empty, read it alongside
+   `requirement.md` for the user stories, FRs, and NFRs the design must serve.
 
 5. **Design** — per `--type` (architecture/api/component/database), produce the system-shape
    decisions: a C4 System Context diagram (actors + external systems this feature touches) and,

package/core/shared/skills/do-execute-plan/SKILL.md

@@ -163,16 +163,17 @@ Branch on the returned `outcome` field, not the exit code.
      ```bash
      "$DOFLOW" context-pack --task-id "<task id>" --json
      ```
-     **Exit 1 means the pack came back empty.** Unlike design and plan, this call sits right at the
-     point a subagent is about to be handed the task and told to act — so proceeding as though
-     nothing happened is exactly the failure this feature exists to remove. An empty pack here can
-     still be legitimate: step 4 lets a task reach `READY` on `callerAsserted` inputs alone, which
-     link no evidence. Do not withhold dispatch on this alone — readiness already governs whether the
-     task may be worked. Instead, carry the empty result into the group's brief itself: state in the
-     dispatch, next to the task-brief output, that no prior evidence or claims were compiled for this
-     task, so the subagent works from the plan/design text `task-brief` already supplies without
-     assuming a grounding evidence base that isn't there. A non-empty pack is included in the brief
-     as the subagent's prior context, same handoff.
+     **Exit 1 means the pack came back empty; exit 3 means overflow: the pack is complete, act on
+     `overflowAction.message` and report the gap.**
+     This call sits right at subagent dispatch — proceeding as though nothing happened is the defect
+     this feature removes. An empty pack here can still be legitimate: step 4 lets a task reach
+     `READY` on `callerAsserted` inputs alone, which link no evidence. Do not withhold dispatch on
+     this alone — readiness already governs whether the task may be worked. Instead, carry the empty
+     result into the group's brief itself: state in the dispatch, next to the task-brief output, that
+     no prior evidence or claims were compiled for this task, so the subagent works from the
+     plan/design text `task-brief` already supplies without assuming a grounding evidence base that
+     isn't there. A non-empty pack is included in the brief as the subagent's prior context, same
+     handoff.
    - Claim each task before dispatch and finish it with evidence: `references/task_attempts.md`.
    - Dispatch tasks to appropriate specialist archetypes:
      - Architecture & Schema $\rightarrow$ `system-architect`