@kontourai/flow-agents 2.3.0 → 3.0.0

package/evals/integration/test_assignment_provider_local_file.sh

@@ -0,0 +1,222 @@
+#!/usr/bin/env bash
+# test_assignment_provider_local_file.sh — AssignmentProvider local-file round-trip (#290).
+#
+# Fully deterministic: exercises `assignment-provider claim|status|supersede|release|list
+# --provider local-file` against a temp artifact root and two fixed test-actor fixtures. No
+# network, no `gh` process, no live provider. Follows test_pull_work_provider.sh's
+# pass/fail/json_query idiom exactly.
+#
+# Supports AC5 (local-file round-trip), AC6 (list --actor), AC7 (concurrent claim never
+# silently overwrites), AC9 (no live gh process — none invoked here at all).
+set -uo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+CLI="$ROOT/build/src/cli.js"
+FIXTURES="$ROOT/evals/fixtures/assignment-provider"
+ACTOR_A="$FIXTURES/actor-a.json"
+ACTOR_B="$FIXTURES/actor-b.json"
+SUBJECT_ID="kontourai/flow-agents#9001"
+BRANCH_A="agent/claude-code-eval-actor-a-session-eval-host/flow-agents-9001"
+ARTIFACT_DIR_A=".kontourai/flow-agents/flow-agents-9001"
+
+TMPDIR_EVAL="$(mktemp -d)"
+trap 'rm -rf "$TMPDIR_EVAL"' EXIT
+ARTIFACT_ROOT="$TMPDIR_EVAL/artifact-root"
+
+errors=0
+pass() { echo "  ✓ $1"; }
+fail() { echo "  ✗ $1"; errors=$((errors + 1)); }
+
+json_query() {
+  node -e 'const fs=require("fs"); let cur=JSON.parse(fs.readFileSync(process.argv[1],"utf8")); for (const part of process.argv[2].split(".")) cur=part==="length" ? cur.length : (Array.isArray(cur) ? cur[Number(part)] : cur[part]); console.log(cur);' "$1" "$2"
+}
+
+if [[ ! -f "$CLI" ]]; then
+  echo "build/src/cli.js not found — run 'npm run build' first" >&2
+  exit 1
+fi
+
+echo "=== AssignmentProvider: local-file round-trip ==="
+
+# 1. claim writes the exact versioned record shape (Design Decision 2) for a fixed test actor.
+node "$CLI" assignment-provider claim \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" \
+  --subject-id "$SUBJECT_ID" \
+  --actor-json "$ACTOR_A" \
+  --branch "$BRANCH_A" \
+  --artifact-dir "$ARTIFACT_DIR_A" \
+  --ttl-seconds 1800 \
+  > "$TMPDIR_EVAL/claim-a.json"
+status=$?
+[[ "$status" -eq 0 ]] && pass "claim exits successfully" || fail "claim exits successfully"
+
+[[ "$(json_query "$TMPDIR_EVAL/claim-a.json" "record.schema_version")" == "1.0" ]] && pass "claim record schema_version is 1.0" || fail "claim record schema_version is 1.0"
+[[ "$(json_query "$TMPDIR_EVAL/claim-a.json" "record.role")" == "AssignmentClaimRecord" ]] && pass "claim record role is AssignmentClaimRecord" || fail "claim record role is AssignmentClaimRecord"
+[[ "$(json_query "$TMPDIR_EVAL/claim-a.json" "record.subject_id")" == "$SUBJECT_ID" ]] && pass "claim record subject_id matches" || fail "claim record subject_id matches"
+[[ "$(json_query "$TMPDIR_EVAL/claim-a.json" "record.actor.session_id")" == "eval-actor-a-session" ]] && pass "claim record actor matches fixed test actor A" || fail "claim record actor matches fixed test actor A"
+[[ "$(json_query "$TMPDIR_EVAL/claim-a.json" "record.ttl_seconds")" == "1800" ]] && pass "claim record ttl_seconds matches" || fail "claim record ttl_seconds matches"
+[[ "$(json_query "$TMPDIR_EVAL/claim-a.json" "record.branch")" == "$BRANCH_A" ]] && pass "claim record branch matches" || fail "claim record branch matches"
+[[ "$(json_query "$TMPDIR_EVAL/claim-a.json" "record.artifact_dir")" == "$ARTIFACT_DIR_A" ]] && pass "claim record artifact_dir matches" || fail "claim record artifact_dir matches"
+[[ "$(json_query "$TMPDIR_EVAL/claim-a.json" "record.status")" == "claimed" ]] && pass "claim record status is claimed" || fail "claim record status is claimed"
+[[ "$(json_query "$TMPDIR_EVAL/claim-a.json" "record.audit_trail.0.transition")" == "claim" ]] && pass "claim record audit_trail records the claim transition" || fail "claim record audit_trail records the claim transition"
+
+CLAIMED_AT="$(json_query "$TMPDIR_EVAL/claim-a.json" "record.claimed_at")"
+
+# 2. status returns actor/claimedAt matching what claim wrote.
+node "$CLI" assignment-provider status \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" --subject-id "$SUBJECT_ID" \
+  > "$TMPDIR_EVAL/status-a.json"
+[[ "$(json_query "$TMPDIR_EVAL/status-a.json" "assignment.assignee")" == "claude-code:eval-actor-a-session:eval-host" ]] && pass "status reports actor A as assignee" || fail "status reports actor A as assignee"
+[[ "$(json_query "$TMPDIR_EVAL/status-a.json" "assignment.record.claimed_at")" == "$CLAIMED_AT" ]] && pass "status claimed_at matches claim's claimed_at" || fail "status claimed_at matches claim's claimed_at"
+
+# 3. supersede A -> B updates the actor and records an audit trail entry.
+node "$CLI" assignment-provider supersede \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" --subject-id "$SUBJECT_ID" \
+  --from-actor-json "$ACTOR_A" --to-actor-json "$ACTOR_B" --reason "handoff-eval" \
+  > "$TMPDIR_EVAL/supersede.json"
+status=$?
+[[ "$status" -eq 0 ]] && pass "supersede exits successfully" || fail "supersede exits successfully"
+[[ "$(json_query "$TMPDIR_EVAL/supersede.json" "record.actor.session_id")" == "eval-actor-b-session" ]] && pass "supersede updates the record's actor to B" || fail "supersede updates the record's actor to B"
+[[ "$(json_query "$TMPDIR_EVAL/supersede.json" "record.audit_trail.length")" == "2" ]] && pass "supersede appends to the audit trail (claim + supersede)" || fail "supersede appends to the audit trail (claim + supersede)"
+[[ "$(json_query "$TMPDIR_EVAL/supersede.json" "record.audit_trail.1.transition")" == "supersede" ]] && pass "audit trail records the supersede transition" || fail "audit trail records the supersede transition"
+[[ "$(json_query "$TMPDIR_EVAL/supersede.json" "record.audit_trail.1.from_actor.session_id")" == "eval-actor-a-session" ]] && pass "audit trail supersede entry records from_actor A" || fail "audit trail supersede entry records from_actor A"
+[[ "$(json_query "$TMPDIR_EVAL/supersede.json" "record.audit_trail.1.to_actor.session_id")" == "eval-actor-b-session" ]] && pass "audit trail supersede entry records to_actor B" || fail "audit trail supersede entry records to_actor B"
+[[ "$(json_query "$TMPDIR_EVAL/supersede.json" "record.audit_trail.1.reason")" == "handoff-eval" ]] && pass "audit trail supersede entry records reason" || fail "audit trail supersede entry records reason"
+
+node "$CLI" assignment-provider status \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" --subject-id "$SUBJECT_ID" \
+  > "$TMPDIR_EVAL/status-b.json"
+[[ "$(json_query "$TMPDIR_EVAL/status-b.json" "assignment.assignee")" == "claude-code:eval-actor-b-session:eval-host" ]] && pass "status reports actor B after supersede" || fail "status reports actor B after supersede"
+
+# 4. release clears the claim; subsequent status reports free.
+node "$CLI" assignment-provider release \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" --subject-id "$SUBJECT_ID" \
+  --actor-json "$ACTOR_B" \
+  > "$TMPDIR_EVAL/release.json"
+status=$?
+[[ "$status" -eq 0 ]] && pass "release exits successfully" || fail "release exits successfully"
+[[ "$(json_query "$TMPDIR_EVAL/release.json" "record.status")" == "released" ]] && pass "release sets record status to released" || fail "release sets record status to released"
+
+node "$CLI" assignment-provider status \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" --subject-id "$SUBJECT_ID" \
+  --liveness-events-json <(echo '[]') \
+  > "$TMPDIR_EVAL/status-free.json"
+[[ "$(json_query "$TMPDIR_EVAL/status-free.json" "assignment.assignee")" == "null" ]] && pass "status reports no assignee after release" || fail "status reports no assignee after release"
+[[ "$(json_query "$TMPDIR_EVAL/status-free.json" "effective.effective_state")" == "free" ]] && pass "status reports effective_state free after release" || fail "status reports effective_state free after release"
+
+# 5. list --actor returns exactly that actor's claimed subject ids (claim a second subject
+#    under actor A, then verify list --actor A returns exactly that one subject).
+SUBJECT_ID_2="kontourai/flow-agents#9002"
+node "$CLI" assignment-provider claim \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" \
+  --subject-id "$SUBJECT_ID_2" \
+  --actor-json "$ACTOR_A" \
+  --branch "agent/claude-code-eval-actor-a-session-eval-host/flow-agents-9002" \
+  --artifact-dir ".kontourai/flow-agents/flow-agents-9002" \
+  > /dev/null
+node "$CLI" assignment-provider list \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" --actor-json "$ACTOR_A" \
+  > "$TMPDIR_EVAL/list-a.json"
+[[ "$(json_query "$TMPDIR_EVAL/list-a.json" "subject_ids.length")" == "1" ]] && pass "list --actor A returns exactly one subject id" || fail "list --actor A returns exactly one subject id"
+[[ "$(json_query "$TMPDIR_EVAL/list-a.json" "subject_ids.0")" == "$SUBJECT_ID_2" ]] && pass "list --actor A returns actor A's currently-claimed subject (released subject excluded)" || fail "list --actor A returns actor A's currently-claimed subject (released subject excluded)"
+
+node "$CLI" assignment-provider list \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" --actor-json "$ACTOR_B" \
+  > "$TMPDIR_EVAL/list-b.json"
+[[ "$(json_query "$TMPDIR_EVAL/list-b.json" "subject_ids.length")" == "0" ]] && pass "list --actor B returns no subject ids (its only claim was released)" || fail "list --actor B returns no subject ids (its only claim was released)"
+
+# 6. Two concurrent claims on the same subject from different actors: the second call must
+#    fail loud (non-zero exit + holder-identifying error), never silently overwrite the first
+#    (AC7; artifact-contract.md's "fail loud, never fail-open" persistence rule).
+node "$CLI" assignment-provider claim \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" \
+  --subject-id "$SUBJECT_ID_2" \
+  --actor-json "$ACTOR_B" \
+  --branch "agent/claude-code-eval-actor-b-session-eval-host/flow-agents-9002" \
+  --artifact-dir ".kontourai/flow-agents/flow-agents-9002" \
+  > "$TMPDIR_EVAL/concurrent-claim.json" 2> "$TMPDIR_EVAL/concurrent-claim.err"
+concurrent_status=$?
+[[ "$concurrent_status" -ne 0 ]] && pass "second claim from a different actor fails loud (non-zero exit)" || fail "second claim from a different actor fails loud (non-zero exit)"
+grep -q "already claimed by a different actor" "$TMPDIR_EVAL/concurrent-claim.err" && pass "second claim's error identifies the existing holder" || fail "second claim's error identifies the existing holder"
+
+node "$CLI" assignment-provider status \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" --subject-id "$SUBJECT_ID_2" \
+  > "$TMPDIR_EVAL/status-after-concurrent.json"
+[[ "$(json_query "$TMPDIR_EVAL/status-after-concurrent.json" "assignment.assignee")" == "claude-code:eval-actor-a-session:eval-host" ]] && pass "record still shows actor A as holder — no silent overwrite" || fail "record still shows actor A as holder — no silent overwrite"
+
+# Same-actor re-claim (refresh before TTL expiry) is allowed and idempotent — must not error.
+node "$CLI" assignment-provider claim \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" \
+  --subject-id "$SUBJECT_ID_2" \
+  --actor-json "$ACTOR_A" \
+  --branch "agent/claude-code-eval-actor-a-session-eval-host/flow-agents-9002" \
+  --artifact-dir ".kontourai/flow-agents/flow-agents-9002" \
+  > /dev/null 2>&1
+[[ $? -eq 0 ]] && pass "same-actor re-claim (refresh) succeeds without error" || fail "same-actor re-claim (refresh) succeeds without error"
+
+echo ""
+
+# 7. F1 fix-plan iteration 1 (CRITICAL): GENUINE OS-process concurrency — two REAL,
+#    concurrently-launched `claim` processes (background `&` + `wait`, not the sequential case in
+#    section 6 above which never actually races) targeting the SAME fresh subject from DIFFERENT
+#    actors. Before the withSubjectLock fix, both processes could read "no existing claim" before
+#    either wrote, and one write would silently clobber the other (reproduced 29/40 races against
+#    the built CLI pre-fix). Assert EXACTLY ONE process exits 0, and the on-disk record shows
+#    exactly one holder with an intact, single-entry audit trail (no lost write).
+SUBJECT_ID_RACE="kontourai/flow-agents#9003"
+BRANCH_RACE_A="agent/claude-code-eval-actor-a-session-eval-host/flow-agents-9003"
+BRANCH_RACE_B="agent/claude-code-eval-actor-b-session-eval-host/flow-agents-9003"
+ARTIFACT_DIR_RACE=".kontourai/flow-agents/flow-agents-9003"
+
+(
+  node "$CLI" assignment-provider claim \
+    --provider local-file --artifact-root "$ARTIFACT_ROOT" \
+    --subject-id "$SUBJECT_ID_RACE" \
+    --actor-json "$ACTOR_A" \
+    --branch "$BRANCH_RACE_A" \
+    --artifact-dir "$ARTIFACT_DIR_RACE" \
+    > "$TMPDIR_EVAL/race-a.out" 2> "$TMPDIR_EVAL/race-a.err"
+  echo $? > "$TMPDIR_EVAL/race-a.rc"
+) &
+PID_A=$!
+(
+  node "$CLI" assignment-provider claim \
+    --provider local-file --artifact-root "$ARTIFACT_ROOT" \
+    --subject-id "$SUBJECT_ID_RACE" \
+    --actor-json "$ACTOR_B" \
+    --branch "$BRANCH_RACE_B" \
+    --artifact-dir "$ARTIFACT_DIR_RACE" \
+    > "$TMPDIR_EVAL/race-b.out" 2> "$TMPDIR_EVAL/race-b.err"
+  echo $? > "$TMPDIR_EVAL/race-b.rc"
+) &
+PID_B=$!
+wait "$PID_A" "$PID_B"
+
+RACE_RC_A="$(cat "$TMPDIR_EVAL/race-a.rc")"
+RACE_RC_B="$(cat "$TMPDIR_EVAL/race-b.rc")"
+
+if { [[ "$RACE_RC_A" -eq 0 && "$RACE_RC_B" -ne 0 ]] || [[ "$RACE_RC_A" -ne 0 && "$RACE_RC_B" -eq 0 ]]; }; then
+  pass "genuine concurrent claim race: exactly one process wins (rc_a=$RACE_RC_A rc_b=$RACE_RC_B)"
+else
+  fail "genuine concurrent claim race: exactly one process wins (rc_a=$RACE_RC_A rc_b=$RACE_RC_B)"
+fi
+
+node "$CLI" assignment-provider status \
+  --provider local-file --artifact-root "$ARTIFACT_ROOT" --subject-id "$SUBJECT_ID_RACE" \
+  > "$TMPDIR_EVAL/status-race.json"
+[[ "$(json_query "$TMPDIR_EVAL/status-race.json" "assignment.record.audit_trail.length")" == "1" ]] && pass "race winner's on-disk record has exactly one audit_trail entry (no lost/merged write)" || fail "race winner's on-disk record has exactly one audit_trail entry (no lost/merged write)"
+
+if [[ "$RACE_RC_A" -eq 0 ]]; then
+  EXPECTED_RACE_HOLDER="claude-code:eval-actor-a-session:eval-host"
+else
+  EXPECTED_RACE_HOLDER="claude-code:eval-actor-b-session:eval-host"
+fi
+[[ "$(json_query "$TMPDIR_EVAL/status-race.json" "assignment.assignee")" == "$EXPECTED_RACE_HOLDER" ]] && pass "on-disk record holder matches the process that actually exited 0 (no silent overwrite by the loser)" || fail "on-disk record holder matches the process that actually exited 0 (no silent overwrite by the loser)"
+
+echo ""
+if [[ "$errors" -eq 0 ]]; then
+  echo "test_assignment_provider_local_file: all checks passed."
+else
+  echo "test_assignment_provider_local_file: $errors check(s) failed."
+fi
+exit "$errors"

package/evals/integration/test_builder_step_producers.sh

@@ -15,8 +15,8 @@
 #   5. builder.learn.decisions               (step: learn,        expectation: decision-evidence)
 #   6. builder.learn.evidence                (step: learn,        expectation: learning-evidence)
 #
-# build.flow.json confirmation:
-#   - All 6 claims above are required:true.
+# Flow Definition confirmation:
+#   - All 6 claims above are required:true across builder.build and builder.publish-learn.
 #   - policy-compliance remains required:false (advisory — no skill producer).
 #
 # Deterministic, no model spend, self-cleaning.
@@ -106,21 +106,21 @@ setup_tamper_session() {
   local t_dir="$1" slug="$2" step="$3"
   mkdir -p "$t_dir"
   printf '# Repo\n' > "$t_dir/AGENTS.md"
-  mkdir -p "$t_dir/.flow-agents/$slug"
+  mkdir -p "$t_dir/.kontourai/flow-agents/$slug"
 
   flow_agents_node "workflow-sidecar" ensure-session \
-    --artifact-root "$t_dir/.flow-agents" \
+    --artifact-root "$t_dir/.kontourai/flow-agents" \
     --task-slug "$slug" \
     --title "Tamper test: $step" \
     --summary "Testing tamper detection." \
     --flow-id builder.build \
     --timestamp "2026-06-26T00:00:00Z" >/dev/null 2>&1
 
-  flow_agents_node "workflow-sidecar" init-plan "$t_dir/.flow-agents/$slug/$slug--deliver.md" \
+  flow_agents_node "workflow-sidecar" init-plan "$t_dir/.kontourai/flow-agents/$slug/$slug--deliver.md" \
     --source-request "Test" --summary "Testing" \
     --timestamp "2026-06-26T00:00:00Z" >/dev/null 2>&1
 
-  set_active_step "$t_dir/.flow-agents" "$slug" "$step"
+  set_active_step "$t_dir/.kontourai/flow-agents" "$slug" "$step"
 }
 
 # ─── Test: produce a gate claim at a given step ───────────────────────────────
@@ -178,12 +178,12 @@ test_tamper_blocks() {
   setup_tamper_session "$t_dir" "$slug" "$step"
 
   # Write a TAMPERED trust.bundle: stored verified, evidence passing=false
-  python3 - "$t_dir/.flow-agents/$slug/trust.bundle" "$claim_type" "$subject_type" << 'PY'
+  python3 - "$t_dir/.kontourai/flow-agents/$slug/trust.bundle" "$claim_type" "$subject_type" << 'PY'
 import json, sys
 claim_type = sys.argv[2]
 subject_type = sys.argv[3]
 bundle = {
-    "schemaVersion": 3,
+    "schemaVersion": 5,
     "source": "flow-agents/workflow-sidecar",
     "claims": [{
         "id": "c1",
@@ -254,13 +254,16 @@ PY
   fi
 }
 
-# ─── Test 0: build.flow.json required:true confirmation ──────────────────────
+# ─── Test 0: Flow Definition required:true confirmation ──────────────────────
 echo ""
-echo "=== 0. build.flow.json: confirm required:true for produced gates ==="
+echo "=== 0. Flow Definitions: confirm required:true for produced gates ==="
 
 node -e "
   const fs = require('fs');
-  const flow = JSON.parse(fs.readFileSync('$ROOT/kits/builder/flows/build.flow.json', 'utf8'));
+  const flows = [
+    JSON.parse(fs.readFileSync('$ROOT/kits/builder/flows/build.flow.json', 'utf8')),
+    JSON.parse(fs.readFileSync('$ROOT/kits/builder/flows/publish-learn.flow.json', 'utf8')),
+  ];
   const requiredTrue = [
     'selected-work',
     'pickup-probe-readiness',
@@ -271,26 +274,31 @@ node -e "
   ];
   const requiredFalse = ['policy-compliance'];
   let ok = true;
-  for (const [gateName, gate] of Object.entries(flow.gates)) {
-    for (const exp of gate.expects || []) {
+  for (const flow of flows) {
+    for (const [gateName, gate] of Object.entries(flow.gates || {})) {
+      for (const exp of gate.expects || []) {
       if (requiredTrue.includes(exp.id) && exp.required !== true) {
-        console.error('FAIL: ' + exp.id + ' in ' + gateName + ' should be required:true, got ' + exp.required);
+        console.error('FAIL: ' + exp.id + ' in ' + flow.id + '/' + gateName + ' should be required:true, got ' + exp.required);
         ok = false;
       }
       if (requiredFalse.includes(exp.id) && exp.required !== false) {
-        console.error('FAIL: ' + exp.id + ' in ' + gateName + ' should remain required:false (advisory), got ' + exp.required);
+        console.error('FAIL: ' + exp.id + ' in ' + flow.id + '/' + gateName + ' should remain required:false (advisory), got ' + exp.required);
         ok = false;
       }
+      }
     }
   }
   if (!ok) process.exit(1);
 " 2>/dev/null \
-  && _pass "build.flow.json: 6 produced gates are required:true, policy-compliance is required:false" \
-  || _fail "build.flow.json: required flag mismatch"
+  && _pass "Flow Definitions: 6 produced gates are required:true, policy-compliance is required:false" \
+  || _fail "Flow Definitions: required flag mismatch"
 
 node -e "
   const fs = require('fs');
-  const flow = JSON.parse(fs.readFileSync('$ROOT/kits/builder/flows/build.flow.json', 'utf8'));
+  const flows = [
+    JSON.parse(fs.readFileSync('$ROOT/kits/builder/flows/build.flow.json', 'utf8')),
+    JSON.parse(fs.readFileSync('$ROOT/kits/builder/flows/publish-learn.flow.json', 'utf8')),
+  ];
   const producedIds = [
     'selected-work',
     'pickup-probe-readiness',
@@ -300,18 +308,20 @@ node -e "
     'learning-evidence',
   ];
   let ok = true;
-  for (const [gateName, gate] of Object.entries(flow.gates)) {
-    for (const exp of gate.expects || []) {
+  for (const flow of flows) {
+    for (const [gateName, gate] of Object.entries(flow.gates || {})) {
+      for (const exp of gate.expects || []) {
       if (producedIds.includes(exp.id) && exp.explore_hint) {
-        console.error('FAIL: ' + exp.id + ' in ' + gateName + ' still has explore_hint (remove when producer exists)');
+        console.error('FAIL: ' + exp.id + ' in ' + flow.id + '/' + gateName + ' still has explore_hint (remove when producer exists)');
         ok = false;
       }
+      }
     }
   }
   if (!ok) process.exit(1);
 " 2>/dev/null \
-  && _pass "build.flow.json: no explore_hint on produced gate entries" \
-  || _fail "build.flow.json: produced gate entries still have explore_hint"
+  && _pass "Flow Definitions: no explore_hint on produced gate entries" \
+  || _fail "Flow Definitions: produced gate entries still have explore_hint"
 
 # ─── Tests 1–6: produce + tamper-block for each of the 6 claims ──────────────
 

package/evals/integration/test_bundle_install.sh

@@ -158,13 +158,17 @@ echo "--- Installed Layout ---"
 for dir in \
   "$KIRO_DEST/agents" \
   "$BASE_DEST/.flow-agents" \
+  "$BASE_DEST/.kontourai/flow-agents" \
   "$CLAUDE_DEST/.claude/agents" \
   "$CLAUDE_DEST/.claude/skills" \
   "$CLAUDE_DEST/.flow-agents" \
+  "$CLAUDE_DEST/.kontourai/flow-agents" \
   "$CODEX_DEST/.codex/agents" \
   "$CODEX_DEST/.codex/skills" \
   "$CODEX_DEST/.flow-agents" \
-  "$CODEX_FULL_DEST/.flow-agents"; do
+  "$CODEX_DEST/.kontourai/flow-agents" \
+  "$CODEX_FULL_DEST/.flow-agents" \
+  "$CODEX_FULL_DEST/.kontourai/flow-agents"; do
   if [[ -d "$dir" ]]; then
     _pass "$dir exists"
   else
@@ -218,7 +222,7 @@ fi
 
 if rg -F -q "console_telemetry_url=$LOCAL_KONTOUR_CONSOLE_URL" "$CODEX_INIT_DEST/scripts/telemetry/telemetry.conf" \
   && rg -q '^console_tenant_id=tenant-a$' "$CODEX_INIT_DEST/scripts/telemetry/telemetry.conf" \
-  && [[ -f "$CODEX_INIT_DEST/.flow-agents/runtime/codex/activation.json" ]]; then
+  && [[ -f "$CODEX_INIT_DEST/.kontourai/flow-agents/projections/codex/activation.json" ]]; then
   _pass "flow-agents init persists Console config and activates Codex kits"
 else
   _fail "flow-agents init did not persist Console config or activate Codex kits"
@@ -226,6 +230,7 @@ fi
 
 if [[ -f "$BASE_INIT_DEST/AGENTS.md" ]] \
   && [[ -d "$BASE_INIT_DEST/.flow-agents" ]] \
+  && [[ -d "$BASE_INIT_DEST/.kontourai/flow-agents" ]] \
   && rg -F -q "console_telemetry_url=$LOCAL_KONTOUR_CONSOLE_URL" "$BASE_INIT_DEST/scripts/telemetry/telemetry.conf"; then
   _pass "flow-agents init default installs base AGENTS.md workspace contract"
 else
@@ -287,7 +292,7 @@ NODE
   else
     _fail "$dir is missing Kit Catalog or Builder Kit manifest"
   fi
-  if [[ -f "$dir/kits/builder/flows/shape.flow.json" && -f "$dir/kits/builder/flows/build.flow.json" ]]; then
+  if [[ -f "$dir/kits/builder/flows/shape.flow.json" && -f "$dir/kits/builder/flows/build.flow.json" && -f "$dir/kits/builder/flows/publish-learn.flow.json" ]]; then
     _pass "$dir includes Builder Kit Flow Definitions"
   else
     _fail "$dir is missing Builder Kit Flow Definitions"
@@ -316,13 +321,13 @@ const dest = process.argv[2];
 const data = JSON.parse(fs.readFileSync(process.argv[3], "utf8"));
 if (data.selected_adapter !== "codex-local") throw new Error("codex-local was not selected");
 const ids = new Set((data.generated_runtime_files || []).map((item) => item.asset_id));
-for (const expected of ["builder.shape", "builder.build", "codex-local.activation"]) {
+for (const expected of ["builder.shape", "builder.build", "builder.publish-learn", "codex-local.activation"]) {
   if (!ids.has(expected)) throw new Error(`missing generated runtime asset: ${expected}`);
 }
 for (const item of data.generated_runtime_files || []) {
   if (!fs.existsSync(path.join(dest, item.path))) throw new Error(`generated runtime file missing: ${item.path}`);
 }
-if (!fs.existsSync(path.join(dest, ".flow-agents/runtime/codex/activation.json"))) throw new Error("runtime activation manifest missing");
+if (!fs.existsSync(path.join(dest, ".kontourai/flow-agents/projections/codex/activation.json"))) throw new Error("runtime activation manifest missing");
 console.log("ok");
 NODE
 then
@@ -335,7 +340,7 @@ if node - "$KIRO_DEST" "$BASE_DEST" "$CLAUDE_DEST" "$CODEX_DEST" <<'NODE'
 const fs = require("node:fs");
 const path = require("node:path");
 for (const root of process.argv.slice(2)) {
-  for (const rel of ["kits/catalog.json", "kits/builder/kit.json", "kits/builder/flows/shape.flow.json", "kits/builder/flows/build.flow.json"]) {
+  for (const rel of ["kits/catalog.json", "kits/builder/kit.json", "kits/builder/flows/shape.flow.json", "kits/builder/flows/build.flow.json", "kits/builder/flows/publish-learn.flow.json"]) {
     JSON.parse(fs.readFileSync(path.join(root, rel), "utf8"));
   }
 }
@@ -367,25 +372,25 @@ else
   _pass "installed bundles are free of machine-local absolute paths"
 fi
 
-if [[ -f "$CLAUDE_DEST/.flow-agents/.gitkeep" ]]; then
+if [[ -f "$CLAUDE_DEST/.kontourai/flow-agents/.gitkeep" ]]; then
   _pass "Claude Code task dir scaffold installed"
 else
   _fail "Claude Code task dir scaffold missing"
 fi
 
-if [[ -f "$CODEX_DEST/.flow-agents/.gitkeep" ]]; then
+if [[ -f "$CODEX_DEST/.kontourai/flow-agents/.gitkeep" ]]; then
   _pass "Codex task dir scaffold installed"
 else
   _fail "Codex task dir scaffold missing"
 fi
 
-if [[ -f "$OPENCODE_DEST/.flow-agents/.gitkeep" ]]; then
+if [[ -f "$OPENCODE_DEST/.kontourai/flow-agents/.gitkeep" ]]; then
   _pass "opencode task dir scaffold installed"
 else
   _fail "opencode task dir scaffold missing"
 fi
 
-if [[ -f "$PI_DEST/.flow-agents/.gitkeep" ]]; then
+if [[ -f "$PI_DEST/.kontourai/flow-agents/.gitkeep" ]]; then
   _pass "pi task dir scaffold installed"
 else
   _fail "pi task dir scaffold missing"
@@ -417,9 +422,10 @@ else
   _fail "installed Claude permissions/statusline or Codex profile-v2 progress config is missing"
 fi
 
-if [[ -f "$CODEX_DEST/.codex/kdev.config.toml" && -f "$CODEX_DEST/.codex/kdev-br.config.toml" ]] \
-  && rg -q 'approvals_reviewer = "auto_review"' "$CODEX_DEST/.codex/kdev.config.toml" \
-  && rg -q 'model_provider = "amazon-bedrock"' "$CODEX_DEST/.codex/kdev-br.config.toml"; then
+if [[ -f "$CODEX_DEST/.codex/builder.config.toml" && -f "$CODEX_DEST/.codex/personal.config.toml" ]] \
+  && [[ "$(find "$CODEX_DEST/.codex" -maxdepth 1 -name '*.config.toml' | wc -l | tr -d ' ')" == "2" ]] \
+  && rg -q 'Flow Agents Builder mode' "$CODEX_DEST/.codex/builder.config.toml" \
+  && rg -q 'knowledge-capture' "$CODEX_DEST/.codex/personal.config.toml"; then
   _pass "Codex install includes profile-v2 config files"
 else
   _fail "Codex install is missing profile-v2 config files"
@@ -517,7 +523,7 @@ const critique = {
   }],
 };
 function writeFixture(root) {
-  const taskDir = path.join(root, ".flow-agents/installed-hook-demo");
+  const taskDir = path.join(root, ".kontourai/flow-agents/installed-hook-demo");
   fs.mkdirSync(taskDir, { recursive: true });
   fs.writeFileSync(path.join(taskDir, "state.json"), JSON.stringify(state), "utf8");
   fs.writeFileSync(path.join(taskDir, "critique.json"), JSON.stringify(critique), "utf8");
@@ -593,7 +599,7 @@ const critique = {
   critiques: [{ id: "oc-review", reviewer: "tool-code-reviewer", reviewed_at: "2026-06-01T00:01:00Z", verdict: "fail", summary: "Blocking.", findings: [{ id: "oc-open", severity: "high", status: "open", description: "Open finding." }] }],
 };
 function writeFixture(root) {
-  const taskDir = path.join(root, ".flow-agents/opencode-hook-demo");
+  const taskDir = path.join(root, ".kontourai/flow-agents/opencode-hook-demo");
   fs.mkdirSync(taskDir, { recursive: true });
   fs.writeFileSync(path.join(taskDir, "state.json"), JSON.stringify(state), "utf8");
   fs.writeFileSync(path.join(taskDir, "critique.json"), JSON.stringify(critique), "utf8");
@@ -652,7 +658,7 @@ const critique = {
   critiques: [{ id: "pi-review", reviewer: "tool-code-reviewer", reviewed_at: "2026-06-01T00:01:00Z", verdict: "fail", summary: "Blocking.", findings: [{ id: "pi-open", severity: "high", status: "open", description: "Open finding." }] }],
 };
 function writeFixture(root) {
-  const taskDir = path.join(root, ".flow-agents/pi-hook-demo");
+  const taskDir = path.join(root, ".kontourai/flow-agents/pi-hook-demo");
   fs.mkdirSync(taskDir, { recursive: true });
   fs.writeFileSync(path.join(taskDir, "state.json"), JSON.stringify(state), "utf8");
   fs.writeFileSync(path.join(taskDir, "critique.json"), JSON.stringify(critique), "utf8");

package/evals/integration/test_bundle_lifecycle.sh

@@ -231,18 +231,18 @@ OPENCODE_USER="$TMPDIR_EVAL/user-opencode"
 # Create user-owned files (unknown to the bundle)
 mkdir -p "$CLAUDE_USER/.claude/custom"
 echo "# user custom agent" > "$CLAUDE_USER/.claude/custom/my-custom-agent.md"
-mkdir -p "$CLAUDE_USER/.flow-agents/my-session"
-echo '{"custom":"data"}' > "$CLAUDE_USER/.flow-agents/my-session/state.json"
+mkdir -p "$CLAUDE_USER/.kontourai/flow-agents/my-session"
+echo '{"custom":"data"}' > "$CLAUDE_USER/.kontourai/flow-agents/my-session/state.json"
 
 mkdir -p "$CODEX_USER/.codex/custom"
 printf 'name = "my-custom-agent"\n' > "$CODEX_USER/.codex/custom/my-custom-agent.toml"
-mkdir -p "$CODEX_USER/.flow-agents/my-session"
-echo '{"custom":"data"}' > "$CODEX_USER/.flow-agents/my-session/state.json"
+mkdir -p "$CODEX_USER/.kontourai/flow-agents/my-session"
+echo '{"custom":"data"}' > "$CODEX_USER/.kontourai/flow-agents/my-session/state.json"
 
 mkdir -p "$OPENCODE_USER/.opencode/custom"
 echo "# user custom agent" > "$OPENCODE_USER/.opencode/custom/my-custom-agent.md"
-mkdir -p "$OPENCODE_USER/.flow-agents/my-session"
-echo '{"custom":"data"}' > "$OPENCODE_USER/.flow-agents/my-session/state.json"
+mkdir -p "$OPENCODE_USER/.kontourai/flow-agents/my-session"
+echo '{"custom":"data"}' > "$OPENCODE_USER/.kontourai/flow-agents/my-session/state.json"
 
 # Modify an installed skill file to simulate user edits
 CLAUDE_INSTALLED_SKILL="$CLAUDE_USER/.claude/skills/plan-work/SKILL.md"
@@ -272,19 +272,19 @@ fi
 (cd "$ROOT_DIR/dist/opencode" && bash install.sh "$OPENCODE_USER" >/dev/null 2>&1) || true
 
 # Assert: user-owned unknown files survive
-if [[ -f "$CLAUDE_USER/.claude/custom/my-custom-agent.md" && -f "$CLAUDE_USER/.flow-agents/my-session/state.json" ]]; then
+if [[ -f "$CLAUDE_USER/.claude/custom/my-custom-agent.md" && -f "$CLAUDE_USER/.kontourai/flow-agents/my-session/state.json" ]]; then
   _pass "claude-code re-install: user-owned files not removed by rsync"
 else
   _fail "claude-code re-install: user-owned files were removed"
 fi
 
-if [[ -f "$CODEX_USER/.codex/custom/my-custom-agent.toml" && -f "$CODEX_USER/.flow-agents/my-session/state.json" ]]; then
+if [[ -f "$CODEX_USER/.codex/custom/my-custom-agent.toml" && -f "$CODEX_USER/.kontourai/flow-agents/my-session/state.json" ]]; then
   _pass "codex re-install: user-owned files not removed by rsync"
 else
   _fail "codex re-install: user-owned files were removed"
 fi
 
-if [[ -f "$OPENCODE_USER/.opencode/custom/my-custom-agent.md" && -f "$OPENCODE_USER/.flow-agents/my-session/state.json" ]]; then
+if [[ -f "$OPENCODE_USER/.opencode/custom/my-custom-agent.md" && -f "$OPENCODE_USER/.kontourai/flow-agents/my-session/state.json" ]]; then
   _pass "opencode re-install: user-owned files not removed by rsync"
 else
   _fail "opencode re-install: user-owned files were removed"
@@ -528,7 +528,7 @@ fi
 # and point CLAUDE_PROJECT_DIR there so the hook can resolve its scripts.
 # This mirrors the real dogfood use case where the repo root has scripts/ from the bundle.
 DOGFOOD_WORKSPACE="$CLAUDE_IDEM"  # reuse the installed workspace from the idempotent section
-mkdir -p "$DOGFOOD_WORKSPACE/.flow-agents"
+mkdir -p "$DOGFOOD_WORKSPACE/.kontourai/flow-agents"
 
 if node - "$DOGFOOD_DEST2/.claude/settings.json" "$DOGFOOD_WORKSPACE" << 'NODE'
 const fs = require("node:fs");
@@ -537,7 +537,7 @@ const { spawnSync } = require("node:child_process");
 const [settingsPath, workspace] = process.argv.slice(2);
 
 // Write minimal fixtures for workflow-steering into the workspace
-const taskDir = path.join(workspace, ".flow-agents", "dogfood-hook-demo");
+const taskDir = path.join(workspace, ".kontourai", "flow-agents", "dogfood-hook-demo");
 fs.mkdirSync(taskDir, { recursive: true });
 const state = {
   schema_version: "1.0",