@khoavu882/doflow 2.0.0-beta.5 → 2.0.0

package/core/shared/templates/doflow/plan-template.md

@@ -15,14 +15,15 @@
 
 ## 2. Constitution Check (GATE)
 
-> Verify against both constitution tiers, tier-2 taking precedence — you reconcile them yourself;
-> nothing merges them for you. Any violation = STOP and revise the approach before continuing.
-> (Advisory by default; not the hard hook gate.)
+> One row per principle of both constitution tiers; a tier-2 ID replaces the base one. `Tier` is the
+> constitution's (MUST unless it says SHOULD), `Result` is PASS or FAIL. A MUST marked FAIL, or a MUST
+> principle with no row, refuses the planning stage's exit; a SHOULD FAIL is advisory. Revise the
+> plan, or a person amends the constitution with `/do-constitution`; there is no waiver.
 
-- [ ] Complies with [PRINCIPLE]: [how]
-- [ ] No violation of [PRINCIPLE]: [how]
-
-**Result:** PASS / FAIL — [note]
+| Principle | Tier | Result | How |
+|---|---|---|---|
+| P1 | MUST | PASS | [how the plan complies] |
+| [ID] | [MUST/SHOULD] | [PASS/FAIL] | [how] |
 
 ## 3. Research & Decisions
 
@@ -126,12 +127,12 @@ flowchart LR
 
 ### Phase A — [name]
 
-- [ ] A.1 [P] [US1] [task] — owner: [agent]; files: [paths]; depends-on: [service, optional]; external-contract: [doc path, optional]
-- [ ] A.2 [US1] [task, depends A.1] — owner: [agent]; files: [paths]; depends-on: [service, optional]; external-contract: [doc path, optional]
+- [ ] A.1 [P] [US1] [task] — acceptance: [FR-/NFR-/IC- ids, comma-separated]; owner: [agent]; files: [paths]; depends-on: [service, optional]; external-contract: [doc path, optional]
+- [ ] A.2 [US1] [task, depends A.1] — acceptance: [FR-/NFR-/IC- ids, comma-separated]; owner: [agent]; files: [paths]; depends-on: [service, optional]; external-contract: [doc path, optional]
 
 ### Phase B — [name]
 
-- [ ] B.1 [P] [US2] [task] — owner: [agent]; files: [paths]; depends-on: [service, optional]; external-contract: [doc path, optional]
+- [ ] B.1 [P] [US2] [task] — acceptance: [FR-/NFR-/IC- ids, comma-separated]; owner: [agent]; files: [paths]; depends-on: [service, optional]; external-contract: [doc path, optional]
 
 ### Checkpoints
 

package/core/shared/templates/doflow/question-log-template.md

@@ -4,12 +4,12 @@
 
 > The one recurring shape every `intention/*-question.md`, `design/*-question.md` and
 > `plan/*-question.md` file uses: the Socratic dialogue transcript for a single round of a chain
-> stage's `AskUserQuestion` loop. This is a dialogue transcript, not an ID-bearing normative
+> stage's question-tool loop. This is a dialogue transcript, not an ID-bearing normative
 > artifact — out of `references/ARTIFACT_FORMAT.md`'s index/detail scope, the same way that
 > reference's own intro already carves out `state.md`.
 >
 > Not to be confused with the differently-named `{stage}-questions.md` convention in
-> `rules/RULE_04_QUESTIONS.md`: that file is a *request for input*, written for a
+> RULE_04 of `rules/RULES.md`: that file is a *request for input*, written for a
 > non-interactive harness and awaiting a `[Answer]:` tag before the run can continue. This one is
 > the opposite direction — a completed *record* of a round that already happened, filed after the
 > user answered, never awaiting anything.
@@ -40,6 +40,18 @@
 
 **Answer:** [verbatim]
 
+## Coverage
+
+<!-- One line per requirement area as it stands after this round, each Clear, Partial, Missing or
+     Deferred (spec-kit clarify's coverage map). Missing or Partial areas are the next round's
+     questions, or the stated gaps when the loop stops; Deferred names who deferred it. -->
+- Problem and outcome: [Clear|Partial|Missing|Deferred]
+- Users and stories: [Clear|Partial|Missing|Deferred]
+- Functional scope: [Clear|Partial|Missing|Deferred]
+- Non-functional: [Clear|Partial|Missing|Deferred]
+- Out of scope: [Clear|Partial|Missing|Deferred]
+- Acceptance: [Clear|Partial|Missing|Deferred]
+
 <!-- Repeat one "## Question N" block per question actually asked this round — omit blocks for
      questions that were not asked rather than leaving placeholders behind.
 

package/core/shared/templates/doflow/requirement-template.md

@@ -5,7 +5,7 @@
 **Intent:** [agent-docs/intent/<name>.md, or "none"]
 
 > WHAT and WHY only — no tech or implementation detail. Zero unresolved clarification markers at
-> hand-off — every ambiguity is resolved via `AskUserQuestion` before this file is written;
+> hand-off — every ambiguity is resolved via the question tool before this file is written;
 > deferred answers become assumptions in §8.
 >
 > Structure follows `references/ARTIFACT_FORMAT.md`: indexed sections carry a table above full

package/core/worker-evidence/antigravity/checks.json

@@ -0,0 +1,14 @@
+{
+  "schema": "doflow-worker-checks-v1",
+  "harness": "antigravity",
+  "binary": "agy",
+  "version": { "argv": ["--version"], "expect": "^\\d+\\.\\d+\\.\\d+" },
+  "checks": [
+    {
+      "id": "help-model",
+      "argv": ["--help"],
+      "expect": ["^\\s+--model\\s"],
+      "establishes": ["model"]
+    }
+  ]
+}

package/core/worker-evidence/codex/2026-10-18-cli-check.json

@@ -0,0 +1,107 @@
+{
+  "binary": "codex",
+  "checks": [
+    {
+      "argv": [
+        "exec",
+        "--help"
+      ],
+      "establishes": [
+        "runnableProbe",
+        "oneShot"
+      ],
+      "exit": 0,
+      "expect": [
+        "^Usage: codex exec \\[OPTIONS\\] \\[PROMPT\\]",
+        "instructions are read from stdin"
+      ],
+      "id": "exec-one-shot",
+      "matched": [
+        "Usage: codex exec [OPTIONS] [PROMPT]",
+        "          instructions are read from stdin. If stdin is piped and a prompt is also provided, stdin"
+      ],
+      "result": "pass"
+    },
+    {
+      "argv": [
+        "exec",
+        "--help"
+      ],
+      "establishes": [
+        "structuredOutput"
+      ],
+      "exit": 0,
+      "expect": [
+        "^\\s+--json$",
+        "Print events to stdout as JSONL",
+        "-o, --output-last-message"
+      ],
+      "id": "exec-json",
+      "matched": [
+        "      --json",
+        "          Print events to stdout as JSONL",
+        "  -o, --output-last-message <FILE>"
+      ],
+      "result": "pass"
+    },
+    {
+      "argv": [
+        "exec",
+        "--help"
+      ],
+      "establishes": [
+        "readOnly",
+        "isolatedEdit"
+      ],
+      "exit": 0,
+      "expect": [
+        "-s, --sandbox <SANDBOX_MODE>",
+        "read-only, workspace-write"
+      ],
+      "id": "exec-sandbox",
+      "matched": [
+        "  -s, --sandbox <SANDBOX_MODE>",
+        "          [possible values: read-only, workspace-write, danger-full-access]"
+      ],
+      "result": "pass"
+    },
+    {
+      "argv": [
+        "features",
+        "list",
+        "--disable",
+        "multi_agent",
+        "--disable",
+        "multi_agent_v2"
+      ],
+      "establishes": [
+        "spawnDenial"
+      ],
+      "exit": 0,
+      "expect": [
+        "^multi_agent\\s+\\S+\\s+false$",
+        "^multi_agent_v2\\s+\\S+\\s+false$"
+      ],
+      "id": "spawn-denial",
+      "matched": [
+        "multi_agent                              stable             false",
+        "multi_agent_v2                           stable             false"
+      ],
+      "result": "pass"
+    }
+  ],
+  "cliVersion": "codex-cli 0.163.0",
+  "establishes": [
+    "isolatedEdit",
+    "oneShot",
+    "readOnly",
+    "runnableProbe",
+    "spawnDenial",
+    "structuredOutput"
+  ],
+  "harness": "codex",
+  "kind": "cli-check",
+  "recordedAt": "2026-10-18T01:08:16.330Z",
+  "run": null,
+  "schema": "doflow-worker-evidence-v1"
+}

package/core/worker-evidence/codex/2026-10-18-live-run-edit.json

@@ -0,0 +1,73 @@
+{
+  "binary": "codex",
+  "checks": [],
+  "cliVersion": "codex-cli 0.163.0",
+  "establishes": [
+    "oneShot",
+    "structuredOutput",
+    "spawnDenial",
+    "isolatedEdit"
+  ],
+  "harness": "codex",
+  "kind": "live-run",
+  "recordedAt": "2026-10-18T03:36:27.965Z",
+  "run": {
+    "argvShape": [
+      "exec",
+      "-s",
+      "workspace-write",
+      "--disable",
+      "multi_agent",
+      "--disable",
+      "multi_agent_v2",
+      "--json",
+      "-o",
+      "<last-message-file>",
+      "--ephemeral",
+      "-"
+    ],
+    "edit": true,
+    "exit": 0,
+    "isolation": {
+      "attemptHead": {
+        "after": {
+          "object": "28bffdd57fb3d737fea5e478dfdc6a40b5d7ad6a",
+          "ref": "refs/heads/doflow-attempt/109-d1-edit/d-009378735f3b"
+        },
+        "before": {
+          "object": "28bffdd57fb3d737fea5e478dfdc6a40b5d7ad6a",
+          "ref": "refs/heads/doflow-attempt/109-d1-edit/d-009378735f3b"
+        }
+      },
+      "callerHead": {
+        "after": {
+          "object": "28bffdd57fb3d737fea5e478dfdc6a40b5d7ad6a",
+          "ref": "refs/heads/main"
+        },
+        "before": {
+          "object": "28bffdd57fb3d737fea5e478dfdc6a40b5d7ad6a",
+          "ref": "refs/heads/main"
+        }
+      },
+      "changes": [],
+      "reason": null,
+      "refsChanged": false,
+      "status": "clean"
+    },
+    "parser": "codex-exec-json-v1",
+    "readOnly": null,
+    "report": {
+      "deniedCount": 0,
+      "reason": null,
+      "status": "success",
+      "usage": {
+        "tokens": 181978
+      }
+    },
+    "resultOffered": true,
+    "runId": "w-821933d703be",
+    "stdoutBytes": 5891,
+    "withheld": []
+  },
+  "schema": "doflow-worker-evidence-v1"
+}

package/core/worker-evidence/codex/2026-10-18-live-run-read-only.json

@@ -0,0 +1,62 @@
+{
+  "binary": "codex",
+  "checks": [],
+  "cliVersion": "codex-cli 0.163.0",
+  "establishes": [
+    "oneShot",
+    "structuredOutput",
+    "spawnDenial",
+    "readOnly"
+  ],
+  "harness": "codex",
+  "kind": "live-run",
+  "recordedAt": "2026-10-18T03:35:53.729Z",
+  "run": {
+    "argvShape": [
+      "exec",
+      "-s",
+      "read-only",
+      "--disable",
+      "multi_agent",
+      "--disable",
+      "multi_agent_v2",
+      "--json",
+      "-o",
+      "<last-message-file>",
+      "--ephemeral",
+      "-"
+    ],
+    "edit": false,
+    "exit": 0,
+    "isolation": null,
+    "parser": "codex-exec-json-v1",
+    "readOnly": {
+      "changes": [],
+      "head": {
+        "after": {
+          "object": "28bffdd57fb3d737fea5e478dfdc6a40b5d7ad6a",
+          "ref": "refs/heads/d1-read-only"
+        },
+        "before": {
+          "object": "28bffdd57fb3d737fea5e478dfdc6a40b5d7ad6a",
+          "ref": "refs/heads/d1-read-only"
+        }
+      },
+      "refsChanged": false,
+      "status": "clean"
+    },
+    "report": {
+      "deniedCount": 0,
+      "reason": null,
+      "status": "success",
+      "usage": {
+        "tokens": 63066
+      }
+    },
+    "resultOffered": true,
+    "runId": "w-067a85a5cc2d",
+    "stdoutBytes": 2203,
+    "withheld": []
+  },
+  "schema": "doflow-worker-evidence-v1"
+}

package/core/worker-evidence/codex/2026-10-24-cli-check.json

@@ -0,0 +1,126 @@
+{
+  "binary": "codex",
+  "checks": [
+    {
+      "argv": [
+        "exec",
+        "--help"
+      ],
+      "establishes": [
+        "runnableProbe",
+        "oneShot"
+      ],
+      "exit": 0,
+      "expect": [
+        "^Usage: codex exec \\[OPTIONS\\] \\[PROMPT\\]",
+        "instructions are read from stdin"
+      ],
+      "id": "exec-one-shot",
+      "matched": [
+        "Usage: codex exec [OPTIONS] [PROMPT]",
+        "          instructions are read from stdin. If stdin is piped and a prompt is also provided, stdin"
+      ],
+      "result": "pass"
+    },
+    {
+      "argv": [
+        "exec",
+        "--help"
+      ],
+      "establishes": [
+        "structuredOutput"
+      ],
+      "exit": 0,
+      "expect": [
+        "^\\s+--json$",
+        "Print events to stdout as JSONL",
+        "-o, --output-last-message"
+      ],
+      "id": "exec-json",
+      "matched": [
+        "      --json",
+        "          Print events to stdout as JSONL",
+        "  -o, --output-last-message <FILE>"
+      ],
+      "result": "pass"
+    },
+    {
+      "argv": [
+        "exec",
+        "--help"
+      ],
+      "establishes": [
+        "readOnly",
+        "isolatedEdit"
+      ],
+      "exit": 0,
+      "expect": [
+        "-s, --sandbox <SANDBOX_MODE>",
+        "read-only, workspace-write"
+      ],
+      "id": "exec-sandbox",
+      "matched": [
+        "  -s, --sandbox <SANDBOX_MODE>",
+        "          [possible values: read-only, workspace-write, danger-full-access]"
+      ],
+      "result": "pass"
+    },
+    {
+      "argv": [
+        "features",
+        "list",
+        "--disable",
+        "multi_agent",
+        "--disable",
+        "multi_agent_v2"
+      ],
+      "establishes": [
+        "spawnDenial"
+      ],
+      "exit": 0,
+      "expect": [
+        "^multi_agent\\s+\\S+\\s+false$",
+        "^multi_agent_v2\\s+\\S+\\s+false$"
+      ],
+      "id": "spawn-denial",
+      "matched": [
+        "multi_agent                              stable             false",
+        "multi_agent_v2                           stable             false"
+      ],
+      "result": "pass"
+    },
+    {
+      "argv": [
+        "exec",
+        "--help"
+      ],
+      "establishes": [
+        "model"
+      ],
+      "exit": 0,
+      "expect": [
+        "^\\s+-m, --model <MODEL>$"
+      ],
+      "id": "exec-model",
+      "matched": [
+        "  -m, --model <MODEL>"
+      ],
+      "result": "pass"
+    }
+  ],
+  "cliVersion": "codex-cli 0.164.0",
+  "establishes": [
+    "isolatedEdit",
+    "model",
+    "oneShot",
+    "readOnly",
+    "runnableProbe",
+    "spawnDenial",
+    "structuredOutput"
+  ],
+  "harness": "codex",
+  "kind": "cli-check",
+  "recordedAt": "2026-10-24T10:45:22.229Z",
+  "run": null,
+  "schema": "doflow-worker-evidence-v1"
+}

package/core/worker-evidence/codex/checks.json

@@ -0,0 +1,38 @@
+{
+  "schema": "doflow-worker-checks-v1",
+  "harness": "codex",
+  "binary": "codex",
+  "version": { "argv": ["--version"], "expect": "^codex-cli \\d+\\.\\d+\\.\\d+" },
+  "checks": [
+    {
+      "id": "exec-one-shot",
+      "argv": ["exec", "--help"],
+      "expect": ["^Usage: codex exec \\[OPTIONS\\] \\[PROMPT\\]", "instructions are read from stdin"],
+      "establishes": ["runnableProbe", "oneShot"]
+    },
+    {
+      "id": "exec-json",
+      "argv": ["exec", "--help"],
+      "expect": ["^\\s+--json$", "Print events to stdout as JSONL", "-o, --output-last-message"],
+      "establishes": ["structuredOutput"]
+    },
+    {
+      "id": "exec-sandbox",
+      "argv": ["exec", "--help"],
+      "expect": ["-s, --sandbox <SANDBOX_MODE>", "read-only, workspace-write"],
+      "establishes": ["readOnly", "isolatedEdit"]
+    },
+    {
+      "id": "spawn-denial",
+      "argv": ["features", "list", "--disable", "multi_agent", "--disable", "multi_agent_v2"],
+      "expect": ["^multi_agent\\s+\\S+\\s+false$", "^multi_agent_v2\\s+\\S+\\s+false$"],
+      "establishes": ["spawnDenial"]
+    },
+    {
+      "id": "exec-model",
+      "argv": ["exec", "--help"],
+      "expect": ["^\\s+-m, --model <MODEL>$"],
+      "establishes": ["model"]
+    }
+  ]
+}

package/package.json

@@ -1,11 +1,10 @@
 {
   "name": "@khoavu882/doflow",
-  "version": "2.0.0-beta.5",
+  "version": "2.0.0",
   "description": "DoFlow config installer — npx CLI for the registry-driven multi-harness install/update/remove lifecycle",
   "keywords": [
     "claude-code",
     "codex",
-    "gemini",
     "opencode",
     "ai-coding-agent",
     "skills",
@@ -26,16 +25,21 @@
     "doflow": "bin/doflow.js"
   },
   "engines": {
-    "node": "^22.18.0 || >=24.3.0"
+    "node": ">=24.22.1"
   },
   "scripts": {
-    "test": "node --test \"test/**/*.test.js\"",
+    "test": "node --test \"test/**/*.test.js\" \"test/**/*.test.ts\"",
+    "test:fast": "node test/helper/fast-tier.ts",
     "typecheck": "npx -y -p typescript@5.7.2 tsc -p tsconfig.json",
     "build:package": "node src/release/build-package.js .pack",
-    "bench": "node bench/runner.js",
+    "bench": "node bench/runner.ts",
     "drift": "node scripts/check-format-drift.js",
+    "emission-rules": "node src/runtime/context/emission-rules.js --check",
     "release-notes": "node src/release/changelog-section.js",
-    "version": "node src/release/sync-plugin-versions.js && git add core/.codex-plugin/plugin.json core/.claude-plugin/plugin.json core/.plugin/plugin.json"
+    "docs:blocks": "node src/release/docs-blocks.js --check",
+    "release:preflight": "node src/release/preflight.js",
+    "release:rehearse": "node src/release/rehearse.js",
+    "version": "node src/release/sync-plugin-versions.js && git add core/.codex-plugin/plugin.json core/.claude-plugin/plugin.json core/.plugin/plugin.json core/registry/packages/doflow/doflow-package.json core/registry/contribution-points.json"
   },
   "files": [
     "bin/",