@kontourai/flow-agents 2.3.0 → 2.4.0

package/evals/integration/test_command_log_integrity.sh

@@ -32,11 +32,11 @@ trap cleanup EXIT
 # ── helper: seed a minimal delivered workflow artifact ────────────────────────
 seed_repo() { # $1=dir $2=slug
   local p="$1" slug="$2"
-  mkdir -p "$p/.flow-agents/$slug"
+  mkdir -p "$p/.kontourai/flow-agents/$slug"
   printf '# Repo\n' > "$p/AGENTS.md"
   printf '%s' "{\"schema_version\":\"1.0\",\"task_slug\":\"$slug\",\"status\":\"delivered\",\"phase\":\"done\",\"updated_at\":\"2026-06-23T00:00:00Z\",\"next_action\":{\"status\":\"done\",\"summary\":\"done\"}}" \
-    > "$p/.flow-agents/$slug/state.json"
-  cat > "$p/.flow-agents/$slug/$slug--deliver.md" << MD
+    > "$p/.kontourai/flow-agents/$slug/state.json"
+  cat > "$p/.kontourai/flow-agents/$slug/$slug--deliver.md" << MD
 # $slug
 
 branch: main
@@ -71,12 +71,12 @@ echo "Test 1: altered entry (flip fail→pass without fixing hash) → broken
 T1="$TMP/t1"; seed_repo "$T1" t1
 write_chained_log "$T1" t1
 
-LOG="$T1/.flow-agents/t1/command-log.jsonl"
+LOG="$T1/.kontourai/flow-agents/t1/command-log.jsonl"
 
 if [[ -f "$LOG" ]]; then _pass "T1: command-log.jsonl written"; else _fail "T1: command-log.jsonl missing"; fi
 
 # Verify clean chain (before tamper)
-chain_status=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T1/.flow-agents/t1'); console.log(r.status);")
+chain_status=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T1/.kontourai/flow-agents/t1'); console.log(r.status);")
 if [[ "$chain_status" == "ok" ]]; then
   _pass "T1: untampered chain verifies as ok"
 else
@@ -97,7 +97,7 @@ open(sys.argv[1], 'w').write('\n'.join(lines) + '\n')
 PY
 
 # Verify broken chain
-chain_after=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T1/.flow-agents/t1'); console.log(r.status + ':' + r.brokenAt);")
+chain_after=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T1/.kontourai/flow-agents/t1'); console.log(r.status + ':' + r.brokenAt);")
 if [[ "$chain_after" == "broken:1" ]]; then
   _pass "T1: tampered entry detected → broken at entry 1"
 else
@@ -108,7 +108,7 @@ fi
 # The tampered entry (lint) was a FAIL flipped to PASS — so the log now shows a false pass.
 # Since chain is broken, gate should block with integrity warning and NOT trust log passes.
 printf '%s' '{"schema_version":"1.0","task_slug":"t1","verdict":"pass","checks":[{"id":"npm-test","kind":"command","status":"pass","command":"npm test","summary":"passed"}]}' \
-  > "$T1/.flow-agents/t1/evidence.json"
+  > "$T1/.kontourai/flow-agents/t1/evidence.json"
 
 set +e
 gate_out=$(FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_BACKSTOP=skip \
@@ -141,7 +141,7 @@ echo "Test 2: removed/reordered entry → linkage breaks → broken → gate fla
 T2="$TMP/t2"; seed_repo "$T2" t2
 write_chained_log "$T2" t2
 
-LOG2="$T2/.flow-agents/t2/command-log.jsonl"
+LOG2="$T2/.kontourai/flow-agents/t2/command-log.jsonl"
 lines_before=$(wc -l < "$LOG2" | tr -d ' ')
 
 # Reorder: swap entry 0 and entry 1
@@ -153,7 +153,7 @@ lines[0], lines[1] = lines[1], lines[0]
 open(sys.argv[1], 'w').write('\n'.join(lines) + '\n')
 PY
 
-chain_reorder=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T2/.flow-agents/t2'); console.log(r.status);")
+chain_reorder=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T2/.kontourai/flow-agents/t2'); console.log(r.status);")
 if [[ "$chain_reorder" == "broken" ]]; then
   _pass "T2: reordered entries detected → broken"
 else
@@ -163,7 +163,7 @@ fi
 # Test: delete middle entry (restore then delete entry 0 so entry 1's prevHash is wrong)
 write_chained_log "$T2" t2  # re-append fresh entries (now 4 total — but that's fine for test)
 # Write a fresh log with just 2 entries and then delete the first
-LOG2_FRESH="$T2/.flow-agents/t2/command-log.jsonl"
+LOG2_FRESH="$T2/.kontourai/flow-agents/t2/command-log.jsonl"
 python3 - "$LOG2_FRESH" << 'PY'
 import sys
 lines = [l for l in open(sys.argv[1]).read().strip().split('\n') if l.strip()]
@@ -173,7 +173,7 @@ last2 = lines[-2:]
 open(sys.argv[1], 'w').write(last2[1] + '\n')
 PY
 
-chain_delete=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T2/.flow-agents/t2'); console.log(r.status);")
+chain_delete=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T2/.kontourai/flow-agents/t2'); console.log(r.status);")
 if [[ "$chain_delete" == "broken" ]]; then
   _pass "T2: removed predecessor entry detected → broken (prevHash mismatch)"
 else
@@ -191,7 +191,7 @@ printf '{"hook_event_name":"PostToolUse","tool_name":"Bash","cwd":"%s","tool_inp
 printf '{"hook_event_name":"PostToolUse","tool_name":"Bash","cwd":"%s","tool_input":{"command":"npm run build"},"tool_response":{"exitCode":1}}' "$T3" \
   | node "$CAPTURE" >/dev/null 2>&1
 
-chain_legit=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T3/.flow-agents/t3'); console.log(r.status);")
+chain_legit=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T3/.kontourai/flow-agents/t3'); console.log(r.status);")
 if [[ "$chain_legit" == "ok" ]]; then
   _pass "T3: untampered chained log verifies ok"
 else
@@ -200,7 +200,7 @@ fi
 
 # Evidence claims npm run build passed (it actually failed → capture log shows fail → block)
 printf '%s' '{"schema_version":"1.0","task_slug":"t3","verdict":"pass","checks":[{"id":"build","kind":"command","status":"pass","command":"npm run build","summary":"build passed"}]}' \
-  > "$T3/.flow-agents/t3/evidence.json"
+  > "$T3/.kontourai/flow-agents/t3/evidence.json"
 
 set +e
 gate3_out=$(FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_BACKSTOP=skip \
@@ -234,9 +234,9 @@ T4="$TMP/t4"; seed_repo "$T4" t4
 
 # Write a legacy-style log (no _chain field) — exactly like pre-B2 fixtures
 printf '%s\n' '{"command":"npm test","observedResult":"fail","exitCode":1,"capturedAt":"2026-06-23T00:00:00Z","source":"postToolUse-capture"}' \
-  > "$T4/.flow-agents/t4/command-log.jsonl"
+  > "$T4/.kontourai/flow-agents/t4/command-log.jsonl"
 
-chain_legacy=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T4/.flow-agents/t4'); console.log(r.status);")
+chain_legacy=$(node -e "const g = require('$GATE'); const r = g.verifyCommandLogChain('$T4/.kontourai/flow-agents/t4'); console.log(r.status);")
 if [[ "$chain_legacy" == "legacy" ]]; then
   _pass "T4: unchained (legacy) log returns legacy status"
 else
@@ -245,7 +245,7 @@ fi
 
 # Evidence claims npm test passed, but legacy log shows it failed → still blocks
 printf '%s' '{"schema_version":"1.0","task_slug":"t4","verdict":"pass","checks":[{"id":"unit-tests","kind":"command","status":"pass","command":"npm test","summary":"passed"}]}' \
-  > "$T4/.flow-agents/t4/evidence.json"
+  > "$T4/.kontourai/flow-agents/t4/evidence.json"
 
 set +e
 gate4_out=$(FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_BACKSTOP=skip \

package/evals/integration/test_console_learning_projection.sh

@@ -102,7 +102,7 @@ if jq -e --arg generated "$GENERATED_AT" '
   .derivedFrom.eventHistory == "unavailable" and
   .derivedFrom.directSnapshot.emittedAt == $generated and
   .derivedFrom.directSnapshot.producer == {"id":"flow-agents-learning","product":"flow-agents"} and
-  .derivedFrom.directSnapshot.sourceRef == {"product":"flow-agents","kind":"workflow-learning","id":".flow-agents/*/learning.json","label":"Local workflow learning sidecars"} and
+  .derivedFrom.directSnapshot.sourceRef == {"product":"flow-agents","kind":"workflow-learning","id":".kontourai/flow-agents/*/learning.json","label":"Local workflow learning sidecars"} and
   (.learnings | length) == 2
 ' "$PROJECTION" >/dev/null 2>&1; then
   _pass "projection envelope includes Console schema, scope, producer, and direct snapshot provenance"

package/evals/integration/test_dual_emit_flow_step.sh

@@ -103,6 +103,151 @@ else
   _fail "resolver: CJS require failed"
 fi
 
+# Test 6: composed Builder closeout step resolves through builder.publish-learn
+if node --input-type=module << NODEEOF
+import { resolveFlowStep } from '${_RESOLVER_MOD}';
+const r = resolveFlowStep('builder.build', 'pr-open', '${ROOT}');
+if (!r) throw new Error('expected non-null result for builder.build/pr-open');
+if (r.flowId !== 'builder.build') throw new Error('expected active flowId builder.build, got ' + r.flowId);
+if (r.sourceFlowId !== 'builder.publish-learn') throw new Error('expected sourceFlowId builder.publish-learn, got ' + r.sourceFlowId);
+if (r.gateId !== 'builder.publish-learn:pr-open-gate') throw new Error('expected composed gate id, got ' + r.gateId);
+const claim = r.gateExpects.find(e => e.bundle_claim.claimType === 'builder.pr-open.pull-request');
+if (!claim) throw new Error('expected builder.pr-open.pull-request in composed expects');
+NODEEOF
+then
+  _pass "resolver: builder.build/pr-open resolves composed builder.publish-learn gate"
+else
+  _fail "resolver: builder.build/pr-open composed gate failed"
+fi
+
+# Test 7: composed child gates must export every imported expectation
+COMPOSE_DEFS="$TMP/compose-defs"
+mkdir -p "$COMPOSE_DEFS"
+cat > "$COMPOSE_DEFS/test.parent.flow.json" <<'JSON'
+{
+  "id": "test.parent",
+  "version": "1.0.0",
+  "steps": [{ "id": "compose", "next": null, "uses_flow": "test.child" }],
+  "gates": {}
+}
+JSON
+cat > "$COMPOSE_DEFS/test.child.flow.json" <<'JSON'
+{
+  "id": "test.child",
+  "version": "1.0.0",
+  "steps": [{ "id": "compose", "next": null }],
+  "exports": ["test.child.allowed"],
+  "gates": {
+    "compose-gate": {
+      "step": "compose",
+      "expects": [
+        {
+          "id": "allowed",
+          "kind": "trust.bundle",
+          "required": true,
+          "bundle_claim": {
+            "claimType": "test.child.allowed",
+            "subjectType": "flow-step",
+            "accepted_statuses": ["trusted", "accepted"]
+          }
+        }
+      ]
+    }
+  }
+}
+JSON
+
+if FLOW_AGENTS_FLOW_DEFS_DIR="$COMPOSE_DEFS" node --input-type=module << NODEEOF
+import { resolveFlowStep } from '${_RESOLVER_MOD}';
+const r = resolveFlowStep('test.parent', 'compose', '${ROOT}');
+if (!r) throw new Error('expected exported composition to resolve');
+if (r.sourceFlowId !== 'test.child') throw new Error('expected sourceFlowId test.child, got ' + r.sourceFlowId);
+if (!r.gateExpects.some(e => e.bundle_claim.claimType === 'test.child.allowed')) throw new Error('missing exported claim');
+NODEEOF
+then
+  _pass "resolver: composed child exports allow imported gate expectations"
+else
+  _fail "resolver: exported composed child claim failed"
+fi
+
+cat > "$COMPOSE_DEFS/test.child.flow.json" <<'JSON'
+{
+  "id": "test.child",
+  "version": "1.0.0",
+  "steps": [{ "id": "compose", "next": null }],
+  "exports": ["test.child.other"],
+  "gates": {
+    "compose-gate": {
+      "step": "compose",
+      "expects": [
+        {
+          "id": "allowed",
+          "kind": "trust.bundle",
+          "required": true,
+          "bundle_claim": {
+            "claimType": "test.child.allowed",
+            "subjectType": "flow-step",
+            "accepted_statuses": ["trusted", "accepted"]
+          }
+        }
+      ]
+    }
+  }
+}
+JSON
+
+if FLOW_AGENTS_FLOW_DEFS_DIR="$COMPOSE_DEFS" node --input-type=module << NODEEOF
+import { resolveFlowStep } from '${_RESOLVER_MOD}';
+const r = resolveFlowStep('test.parent', 'compose', '${ROOT}');
+if (r !== null) throw new Error('expected non-exported composition to fail closed');
+NODEEOF
+then
+  _pass "resolver: non-exported composed child claims fail closed"
+else
+  _fail "resolver: non-exported composed child claim was imported"
+fi
+
+cat > "$COMPOSE_DEFS/test.child.flow.json" <<'JSON'
+{
+  "id": "test.child",
+  "version": "1.0.0",
+  "steps": [{ "id": "compose", "next": null, "uses_flow": "test.child" }],
+  "exports": ["test.child.allowed"],
+  "gates": {}
+}
+JSON
+
+if FLOW_AGENTS_FLOW_DEFS_DIR="$COMPOSE_DEFS" node --input-type=module << NODEEOF
+import { resolveFlowStep } from '${_RESOLVER_MOD}';
+const r = resolveFlowStep('test.parent', 'compose', '${ROOT}');
+if (r !== null) throw new Error('expected self-cycle composition to return null');
+NODEEOF
+then
+  _pass "resolver: composed flow self-cycle returns null"
+else
+  _fail "resolver: composed flow self-cycle did not fail closed"
+fi
+
+cat > "$COMPOSE_DEFS/test.parent.flow.json" <<'JSON'
+{
+  "id": "test.parent",
+  "version": "1.0.0",
+  "steps": [{ "id": "compose", "next": null, "uses_flow": "../outside" }],
+  "gates": {}
+}
+JSON
+
+if FLOW_AGENTS_FLOW_DEFS_DIR="$COMPOSE_DEFS" node --input-type=module << NODEEOF
+import { resolveFlowStep } from '${_RESOLVER_MOD}';
+const r = resolveFlowStep('test.parent', 'compose', '${ROOT}');
+if (r !== null) throw new Error('expected invalid uses_flow id to return null');
+NODEEOF
+then
+  _pass "resolver: invalid composed uses_flow id returns null"
+else
+  _fail "resolver: invalid composed uses_flow id did not fail closed"
+fi
+
 echo ""
 echo "── P-d declared-only: session WITH active_flow_id=builder.build / active_step_id=verify ──"
 

package/evals/integration/test_enforcer_expects_driven.sh

@@ -34,11 +34,11 @@ trap cleanup EXIT
 # ─── helper: seed a minimal delivered workflow artifact ───────────────────────
 seed_repo() { # $1=dir $2=slug
   local p="$1" slug="$2"
-  mkdir -p "$p/.flow-agents/$slug"
+  mkdir -p "$p/.kontourai/flow-agents/$slug"
   printf '# Repo\n' > "$p/AGENTS.md"
   printf '%s' "{\"schema_version\":\"1.0\",\"task_slug\":\"$slug\",\"status\":\"delivered\",\"phase\":\"done\",\"updated_at\":\"2026-06-26T00:00:00Z\",\"next_action\":{\"status\":\"done\",\"summary\":\"done\"}}" \
-    > "$p/.flow-agents/$slug/state.json"
-  cat > "$p/.flow-agents/$slug/$slug--deliver.md" << MD
+    > "$p/.kontourai/flow-agents/$slug/state.json"
+  cat > "$p/.kontourai/flow-agents/$slug/$slug--deliver.md" << MD
 # $slug
 
 branch: main
@@ -67,12 +67,12 @@ seed_repo "$T1_DIR" "declares-tampered"
 
 # current.json: active flow
 printf '%s' '{"artifact_dir":"declares-tampered","active_flow_id":"builder.build","active_step_id":"verify"}' \
-  > "$T1_DIR/.flow-agents/current.json"
+  > "$T1_DIR/.kontourai/flow-agents/current.json"
 
-python3 - "$T1_DIR/.flow-agents/declares-tampered/trust.bundle" << 'PY'
+python3 - "$T1_DIR/.kontourai/flow-agents/declares-tampered/trust.bundle" << 'PY'
 import json, sys
 bundle = {
-    "schemaVersion": 3,
+    "schemaVersion": 5,
     "source": "flow-agents/workflow-sidecar",
     "claims": [{
         "id": "c1",
@@ -152,12 +152,12 @@ T2_DIR="$TMP/t2"
 seed_repo "$T2_DIR" "declares-clean"
 
 printf '%s' '{"artifact_dir":"declares-clean","active_flow_id":"builder.build","active_step_id":"verify"}' \
-  > "$T2_DIR/.flow-agents/current.json"
+  > "$T2_DIR/.kontourai/flow-agents/current.json"
 
-python3 - "$T2_DIR/.flow-agents/declares-clean/trust.bundle" << 'PY'
+python3 - "$T2_DIR/.kontourai/flow-agents/declares-clean/trust.bundle" << 'PY'
 import json, sys
 bundle = {
-    "schemaVersion": 3,
+    "schemaVersion": 5,
     "source": "flow-agents/workflow-sidecar",
     "claims": [{
         "id": "c2",
@@ -227,12 +227,12 @@ seed_repo "$T3_DIR" "no-flow"
 
 # No current.json flow keys (empty current.json that is still valid)
 printf '%s' '{"artifact_dir":"no-flow"}' \
-  > "$T3_DIR/.flow-agents/current.json"
+  > "$T3_DIR/.kontourai/flow-agents/current.json"
 
-python3 - "$T3_DIR/.flow-agents/no-flow/trust.bundle" << 'PY'
+python3 - "$T3_DIR/.kontourai/flow-agents/no-flow/trust.bundle" << 'PY'
 import json, sys
 bundle = {
-    "schemaVersion": 3,
+    "schemaVersion": 5,
     "source": "flow-agents/workflow-sidecar",
     "claims": [{
         "id": "c3",

package/evals/integration/test_evidence_capture_hook.sh

@@ -2,7 +2,7 @@
 # test_evidence_capture_hook.sh — Capture-first evidence determinism contracts.
 #
 # Part A: evidence-capture.js deterministically records command executions to
-#         .flow-agents/<slug>/command-log.jsonl (machine-recorded, not model-claimed).
+#         .kontourai/flow-agents/<slug>/command-log.jsonl (machine-recorded, not model-claimed).
 # Part B: stop-goal-fit.js cross-references evidence.json claimed-pass command
 #         checks against the capture log, and re-runs a TRUSTED backstop command
 #         only when the log has no execution for a claimed-pass command.
@@ -23,10 +23,10 @@ _fail() { echo "  ✗ $1"; errors=$((errors + 1)); }
 # ---- helpers -------------------------------------------------------------
 seed_repo() { # $1 dir, $2 slug
   local p="$1" slug="$2"
-  mkdir -p "$p/.flow-agents/$slug"
+  mkdir -p "$p/.kontourai/flow-agents/$slug"
   printf '# Repo\n' > "$p/AGENTS.md"
-  printf '%s' "{\"schema_version\":\"1.0\",\"task_slug\":\"$slug\",\"status\":\"delivered\",\"phase\":\"done\",\"updated_at\":\"2026-06-23T00:00:00Z\",\"next_action\":{\"status\":\"done\",\"summary\":\"done\"}}" > "$p/.flow-agents/$slug/state.json"
-  cat > "$p/.flow-agents/$slug/$slug--deliver.md" <<MD
+  printf '%s' "{\"schema_version\":\"1.0\",\"task_slug\":\"$slug\",\"status\":\"delivered\",\"phase\":\"done\",\"updated_at\":\"2026-06-23T00:00:00Z\",\"next_action\":{\"status\":\"done\",\"summary\":\"done\"}}" > "$p/.kontourai/flow-agents/$slug/state.json"
+  cat > "$p/.kontourai/flow-agents/$slug/$slug--deliver.md" <<MD
 # $slug
 
 branch: main
@@ -59,7 +59,7 @@ printf '{"hook_event_name":"PostToolUse","tool_name":"Bash","cwd":"%s","tool_inp
 # A non-command tool (Write) must NOT be captured.
 printf '{"hook_event_name":"PostToolUse","tool_name":"Write","cwd":"%s","tool_input":{"file_path":"/tmp/x"}}' "$A" | capture
 
-LOG="$A/.flow-agents/t1/command-log.jsonl"
+LOG="$A/.kontourai/flow-agents/t1/command-log.jsonl"
 if [[ -f "$LOG" ]]; then _pass "capture writes command-log.jsonl"; else _fail "capture did not write command-log.jsonl"; fi
 
 lines=$(wc -l < "$LOG" | tr -d ' ')
@@ -90,8 +90,8 @@ else _fail "capture should be non-blocking and echo stdin"; fi
 # ============================================================================
 echo "Part B1: log contradicts claimed pass → block"
 B="$TMP/contradict"; seed_repo "$B" t1
-printf '%s' '{"schema_version":"1.0","task_slug":"t1","verdict":"pass","checks":[{"id":"unit-tests","kind":"command","status":"pass","command":"npm test","summary":"tests passed"}]}' > "$B/.flow-agents/t1/evidence.json"
-printf '%s\n' '{"command":"npm test","observedResult":"fail","exitCode":1,"capturedAt":"2026-06-23T00:00:00Z","source":"postToolUse-capture"}' > "$B/.flow-agents/t1/command-log.jsonl"
+printf '%s' '{"schema_version":"1.0","task_slug":"t1","verdict":"pass","checks":[{"id":"unit-tests","kind":"command","status":"pass","command":"npm test","summary":"tests passed"}]}' > "$B/.kontourai/flow-agents/t1/evidence.json"
+printf '%s\n' '{"command":"npm test","observedResult":"fail","exitCode":1,"capturedAt":"2026-06-23T00:00:00Z","source":"postToolUse-capture"}' > "$B/.kontourai/flow-agents/t1/command-log.jsonl"
 
 if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_BACKSTOP=skip node "$GATE" >/dev/null 2>"$TMP/b1.err" <<JSON
 {"hook_event_name":"Stop","cwd":"$B"}
@@ -109,8 +109,8 @@ fi
 # ============================================================================
 echo "Part B2: log confirms claimed pass → satisfied, no re-run"
 C="$TMP/confirm"; seed_repo "$C" t1
-printf '%s' '{"schema_version":"1.0","task_slug":"t1","verdict":"pass","checks":[{"id":"unit-tests","kind":"command","status":"pass","command":"npm test","summary":"tests passed"}]}' > "$C/.flow-agents/t1/evidence.json"
-printf '%s\n' '{"command":"npm test","observedResult":"pass","exitCode":0,"capturedAt":"2026-06-23T00:00:00Z","source":"postToolUse-capture"}' > "$C/.flow-agents/t1/command-log.jsonl"
+printf '%s' '{"schema_version":"1.0","task_slug":"t1","verdict":"pass","checks":[{"id":"unit-tests","kind":"command","status":"pass","command":"npm test","summary":"tests passed"}]}' > "$C/.kontourai/flow-agents/t1/evidence.json"
+printf '%s\n' '{"command":"npm test","observedResult":"pass","exitCode":0,"capturedAt":"2026-06-23T00:00:00Z","source":"postToolUse-capture"}' > "$C/.kontourai/flow-agents/t1/command-log.jsonl"
 # A poisoned npm on PATH proves the gate does NOT re-run when the log confirms.
 POISON="$TMP/poison"; mkdir -p "$POISON"
 printf '#!/usr/bin/env bash\necho "npm should not run" >&2\nexit 99\n' > "$POISON/npm"; chmod +x "$POISON/npm"
@@ -127,7 +127,7 @@ else _pass "gate trusts the log on a confirmed pass and does not re-run the back
 echo "Part B3: never-captured claim → trusted manifest backstop catches a fail"
 D="$TMP/backstop"; seed_repo "$D" t1
 printf '%s' '{"name":"x","scripts":{"test":"exit 7"}}' > "$D/package.json"
-printf '%s' '{"schema_version":"1.0","task_slug":"t1","verdict":"pass","checks":[{"id":"unit-tests","kind":"command","status":"pass","command":"npm test","summary":"tests passed"}]}' > "$D/.flow-agents/t1/evidence.json"
+printf '%s' '{"schema_version":"1.0","task_slug":"t1","verdict":"pass","checks":[{"id":"unit-tests","kind":"command","status":"pass","command":"npm test","summary":"tests passed"}]}' > "$D/.kontourai/flow-agents/t1/evidence.json"
 # command-log.jsonl intentionally absent — the command was never actually run.
 
 if FLOW_AGENTS_GOAL_FIT_MODE=block node "$GATE" >/dev/null 2>"$TMP/b3.err" <<JSON
@@ -146,9 +146,10 @@ fi
 # ============================================================================
 echo "Part B4: never-captured claim, nothing trusted resolves → NOT_VERIFIED"
 E="$TMP/notverified"; seed_repo "$E" t1
-printf '%s' '{"schema_version":"1.0","task_slug":"t1","verdict":"pass","checks":[{"id":"custom","kind":"command","status":"pass","command":"./my-thing.sh","summary":"ran custom"}]}' > "$E/.flow-agents/t1/evidence.json"
+printf '%s' '{"schema_version":"1.0","task_slug":"t1","status":"in_progress","phase":"verification","updated_at":"2026-06-23T00:00:00Z","next_action":{"status":"continue","summary":"verify command evidence"}}' > "$E/.kontourai/flow-agents/t1/state.json"
+printf '%s' '{"schema_version":"1.0","task_slug":"t1","verdict":"pass","checks":[{"id":"custom","kind":"command","status":"pass","command":"./my-thing.sh","summary":"ran custom"}]}' > "$E/.kontourai/flow-agents/t1/evidence.json"
 
-if FLOW_AGENTS_GOAL_FIT_MODE=block node "$GATE" >/dev/null 2>"$TMP/b4.err" <<JSON
+if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_RECHECK=false node "$GATE" >/dev/null 2>"$TMP/b4.err" <<JSON
 {"hook_event_name":"Stop","cwd":"$E"}
 JSON
 then _fail "gate should not silently pass an un-captured, un-verifiable claimed-pass command"
@@ -164,7 +165,7 @@ fi
 # ============================================================================
 echo "Part B5: free-form model command re-run is opt-in only"
 F="$TMP/recheck"; seed_repo "$F" t1
-printf '%s' '{"schema_version":"1.0","task_slug":"t1","verdict":"pass","checks":[{"id":"custom","kind":"command","status":"pass","command":"exit 5","summary":"ran custom"}]}' > "$F/.flow-agents/t1/evidence.json"
+printf '%s' '{"schema_version":"1.0","task_slug":"t1","verdict":"pass","checks":[{"id":"custom","kind":"command","status":"pass","command":"exit 5","summary":"ran custom"}]}' > "$F/.kontourai/flow-agents/t1/evidence.json"
 # Opt-in ON: the model's free-form "exit 5" is re-run and fails → block.
 if FLOW_AGENTS_GOAL_FIT_MODE=block FLOW_AGENTS_GOAL_FIT_RECHECK=true node "$GATE" >/dev/null 2>"$TMP/b5.err" <<JSON
 {"hook_event_name":"Stop","cwd":"$F"}

package/evals/integration/test_fixture_retirement_audit.sh

@@ -21,9 +21,9 @@ json_query() {
   node -e 'const fs=require("fs"); let cur=JSON.parse(fs.readFileSync(process.argv[1],"utf8")); for (const part of process.argv[2].split(".")) cur=Array.isArray(cur) ? cur[Number(part)] : cur[part]; console.log(cur);' "$1" "$2"
 }
 
-[[ "$(json_query "$TMPDIR_EVAL/audit.json" "totals.scanned")" == "11" ]] && pass "audit scans all fixture groups" || fail "audit scans all fixture groups"
+[[ "$(json_query "$TMPDIR_EVAL/audit.json" "totals.scanned")" == "14" ]] && pass "audit scans all fixture groups" || fail "audit scans all fixture groups"
 [[ "$(json_query "$TMPDIR_EVAL/audit.json" "totals.retire_candidates")" == "0" ]] && pass "audit finds no unowned retire candidates" || fail "audit finds no unowned retire candidates"
-[[ "$(json_query "$TMPDIR_EVAL/audit.json" "totals.kept")" == "11" ]] && pass "audit keeps all owned fixture groups" || fail "audit keeps all owned fixture groups"
+[[ "$(json_query "$TMPDIR_EVAL/audit.json" "totals.kept")" == "14" ]] && pass "audit keeps all owned fixture groups" || fail "audit keeps all owned fixture groups"
 
 node - "$TMPDIR_EVAL/audit.json" <<'NODE'
 const fs = require("node:fs");

package/evals/integration/test_flow_agents_statusline.sh

@@ -18,10 +18,10 @@ echo "=== Layer 2: Flow Agents Statusline ==="
 echo ""
 
 WORKSPACE="$TMPDIR_EVAL/workspace"
-TASK_DIR="$WORKSPACE/.flow-agents/status-demo"
+TASK_DIR="$WORKSPACE/.kontourai/flow-agents/status-demo"
 mkdir -p "$TASK_DIR"
 
-cat >"$WORKSPACE/.flow-agents/current.json" <<'JSON'
+cat >"$WORKSPACE/.kontourai/flow-agents/current.json" <<'JSON'
 {
   "schema_version": "1.0",
   "active_slug": "status-demo",

package/evals/integration/test_flow_kit_install_git.sh

@@ -31,6 +31,58 @@ FILE_URL="file://$FIXTURE_REPO"
 
 echo "  (fixture repo: $FILE_URL)"
 
+# --- Test 0: default destination honors CODEX_HOME and --dest overrides it ---
+DEFAULT_CODEX_HOME="$TMP_DIR/default-codex-home"
+OVERRIDE_DEST="$TMP_DIR/override-dest"
+mkdir -p "$DEFAULT_CODEX_HOME" "$OVERRIDE_DEST"
+
+default_out="$TMP_DIR/default-dest.out"
+if CODEX_HOME="$DEFAULT_CODEX_HOME" flow_agents_node "$CLI" install "$VALID_SRC" >"$default_out" 2>&1 \
+  && [[ -f "$DEFAULT_CODEX_HOME/kits/local/installed-kits.json" ]] \
+  && [[ -d "$DEFAULT_CODEX_HOME/kits/local/repositories/example-kit" ]]; then
+  pass "kit install without --dest defaults to CODEX_HOME"
+else
+  fail "kit install without --dest did not default to CODEX_HOME"
+  sed -n '1,80p' "$default_out"
+fi
+
+list_out="$TMP_DIR/default-list.out"
+if CODEX_HOME="$DEFAULT_CODEX_HOME" flow_agents_node "$CLI" list >"$list_out" 2>&1 \
+  && grep -q "example-kit" "$list_out"; then
+  pass "kit list without --dest reads CODEX_HOME"
+else
+  fail "kit list without --dest did not read CODEX_HOME"
+  sed -n '1,80p' "$list_out"
+fi
+
+status_out="$TMP_DIR/default-status.out"
+if CODEX_HOME="$DEFAULT_CODEX_HOME" flow_agents_node "$CLI" status example-kit >"$status_out" 2>&1 \
+  && grep -q '"id": "example-kit"' "$status_out"; then
+  pass "kit status without --dest reads CODEX_HOME"
+else
+  fail "kit status without --dest did not read CODEX_HOME"
+  sed -n '1,80p' "$status_out"
+fi
+
+activate_out="$TMP_DIR/default-activate.out"
+if CODEX_HOME="$DEFAULT_CODEX_HOME" flow_agents_node "$CLI" activate --source-root "$ROOT" >"$activate_out" 2>&1 \
+  && [[ -f "$DEFAULT_CODEX_HOME/.kontourai/flow-agents/projections/codex/activation.json" ]]; then
+  pass "kit activate without --dest writes CODEX_HOME"
+else
+  fail "kit activate without --dest did not write CODEX_HOME"
+  sed -n '1,80p' "$activate_out"
+fi
+
+override_out="$TMP_DIR/override-dest.out"
+if CODEX_HOME="$DEFAULT_CODEX_HOME" flow_agents_node "$CLI" install "$VALID_SRC" --dest "$OVERRIDE_DEST" >"$override_out" 2>&1 \
+  && [[ -f "$OVERRIDE_DEST/kits/local/installed-kits.json" ]] \
+  && [[ -d "$OVERRIDE_DEST/kits/local/repositories/example-kit" ]]; then
+  pass "kit install --dest overrides CODEX_HOME"
+else
+  fail "kit install --dest did not override CODEX_HOME"
+  sed -n '1,80p' "$override_out"
+fi
+
 # --- Test 1: basic install-git from file:// URL ---
 install_out="$TMP_DIR/install-git.out"
 if flow_agents_node "$CLI" install "$FILE_URL" --dest "$DEST" >"$install_out" 2>&1; then

package/evals/integration/test_flow_kit_repository.sh

@@ -54,6 +54,7 @@ expect_fail() {
 echo "=== Flow Kit Repository Fixture Checks ==="
 expect_pass "valid-local-kit"
 expect_pass "valid-unknown-extension"
+expect_pass "valid-with-dependency"
 expect_fail "invalid-schema-version" '\.schema_version must be "1\.0"'
 expect_fail "invalid-missing-schema-version" '\.schema_version must be "1\.0"'
 expect_fail "invalid-id" '\.id must be a kebab-case string'
@@ -66,6 +67,7 @@ expect_fail "invalid-malformed-json" 'invalid JSON'
 expect_fail "invalid-asset-section" '\.docs must be a list'
 expect_fail "invalid-missing-extension-asset" 'docs\[0\]\.path points at missing asset'
 expect_fail "invalid-duplicate-flow" "flows\\[1\\]\\.path duplicates"
+expect_fail "invalid-bad-dependency" 'dependencies\[0\]\.kit_id must be a kebab-case'
 
 echo ""
 echo "=== Builder Kit Shared Validation Check ==="

package/evals/integration/test_flowdef_session_activation.sh

@@ -135,10 +135,10 @@ TAMPER_DIR="$TMP/tamper-verify"
 TAMPER_SLUG="tamper-verify-test"
 mkdir -p "$TAMPER_DIR"
 printf '# Test repo\n' > "$TAMPER_DIR/AGENTS.md"
-mkdir -p "$TAMPER_DIR/.flow-agents/$TAMPER_SLUG"
+mkdir -p "$TAMPER_DIR/.kontourai/flow-agents/$TAMPER_SLUG"
 
 flow_agents_node "$WRITER" ensure-session \
-  --artifact-root "$TAMPER_DIR/.flow-agents" \
+  --artifact-root "$TAMPER_DIR/.kontourai/flow-agents" \
   --task-slug "$TAMPER_SLUG" \
   --title "Tamper verify test" \
   --summary "Testing tamper detection at verify step." \
@@ -146,21 +146,21 @@ flow_agents_node "$WRITER" ensure-session \
   --step-id verify \
   --timestamp "2026-06-01T02:00:00Z" >/dev/null 2>&1
 
-flow_agents_node "$WRITER" init-plan "$TAMPER_DIR/.flow-agents/$TAMPER_SLUG/$TAMPER_SLUG--deliver.md" \
+flow_agents_node "$WRITER" init-plan "$TAMPER_DIR/.kontourai/flow-agents/$TAMPER_SLUG/$TAMPER_SLUG--deliver.md" \
   --source-request "Test" --summary "Tamper test" \
   --timestamp "2026-06-01T02:00:00Z" >/dev/null 2>&1
 
-flow_agents_node "$WRITER" advance-state "$TAMPER_DIR/.flow-agents/$TAMPER_SLUG" \
+flow_agents_node "$WRITER" advance-state "$TAMPER_DIR/.kontourai/flow-agents/$TAMPER_SLUG" \
   --status in_progress --phase verification \
   --summary "At verify." --next-action "Continue." \
   --flow-definition builder.build \
   --timestamp "2026-06-01T02:00:30Z" >/dev/null 2>&1
 
 # Write TAMPERED trust.bundle: stored verified, evidence passing=false
-python3 - "$TAMPER_DIR/.flow-agents/$TAMPER_SLUG/trust.bundle" << 'PY'
+python3 - "$TAMPER_DIR/.kontourai/flow-agents/$TAMPER_SLUG/trust.bundle" << 'PY'
 import json, sys
 bundle = {
-    "schemaVersion": 3,
+    "schemaVersion": 5,
     "source": "flow-agents/workflow-sidecar",
     "claims": [{
         "id": "c1",