@kontourai/flow-agents 3.2.0 → 3.4.0

package/evals/acceptance/prove-capture-teeth.sh

@@ -104,8 +104,140 @@ run_bundle(){ # $1 label, $2 install.sh, $3 settings-json-rel, $4 home-env-name
   fi
 }
 
+
+# --- Codex-shaped extraction teeth (#470): the codex PostToolUse payload has
+# NO structured exit code; the only deterministic signal is the host-authored
+# banner "Process exited with code N" inside the session rollout's
+# function_call_output at transcript_path. This runs the INSTALLED codex
+# adapter hook command directly (mirrors run_bundle's own live-capture probe)
+# and proves the injected exit code is never coerced to a false "pass".
+codex_banner_teeth(){
+  echo ""
+  echo "── Codex banner extraction: host-prose exit code teeth ──"
+  local home; home="$(mktemp -d)"
+  bash "$ROOT/dist/codex/install.sh" "$home" >/dev/null 2>&1 || { _f "Codex banner: install.sh failed"; return; }
+  local cfg="$home/.codex/hooks.json"
+  local capcmd; capcmd="$(hook_cmd "$cfg" PostToolUse evidence-capture)"
+  [ -n "$capcmd" ] || { _f "Codex banner: no PostToolUse evidence-capture hook in shipped config"; return; }
+
+  # --- FAIL case: rollout banner "Process exited with code 1" → must NEVER be
+  # recorded as pass; must be fail with exitCode:1 ---
+  local proj_fail; proj_fail="$(mktemp -d)"
+  mkdir -p "$proj_fail/.kontourai/flow-agents/cap-codex-fail"
+  printf '# Repo\n' > "$proj_fail/AGENTS.md"
+  printf '%s' '{"schema_version":"1.0","task_slug":"cap-codex-fail","status":"in_progress","phase":"verification","updated_at":"2026-06-23T00:00:00Z"}' > "$proj_fail/.kontourai/flow-agents/cap-codex-fail/state.json"
+  local rollout_fail="$proj_fail/rollout-fail.jsonl"
+  printf '%s\n' '{"timestamp":"2026-06-23T00:00:00Z","type":"turn_context","payload":{}}' > "$rollout_fail"
+  printf '%s\n' '{"timestamp":"2026-06-23T00:00:05Z","type":"response_item","payload":{"type":"function_call_output","call_id":"call_x","output":"Chunk ID: x\nWall time: 0.05 seconds\nProcess exited with code 1\nOriginal token count: 25\nOutput:\n..."}}' >> "$rollout_fail"
+  printf '{"hook_event_name":"PostToolUse","tool_name":"Bash","cwd":"%s","tool_input":{"command":"npm test"},"transcript_path":"%s"}' "$proj_fail" "$rollout_fail" \
+    | env CODEX_HOME="$home" CLAUDE_PROJECT_DIR="$home" bash -c "$capcmd" >/dev/null 2>&1 || true
+  local log_fail="$proj_fail/.kontourai/flow-agents/cap-codex-fail/command-log.jsonl"
+  if rg -q '"command":"npm test","observedResult":"pass"' "$log_fail" 2>/dev/null; then
+    _f "Codex banner: FAIL case falsely recorded observedResult:pass: $(cat "$log_fail" 2>/dev/null)"
+  elif rg -q '"command":"npm test","observedResult":"fail","exitCode":1' "$log_fail" 2>/dev/null; then
+    _p "Codex banner extraction records host-prose 'Process exited with code 1' as fail, exitCode:1 (never pass)"
+  else
+    _f "Codex banner: FAIL case did not record fail/exitCode:1: $(cat "$log_fail" 2>/dev/null)"
+  fi
+
+  # --- Positive twin: rollout banner "Process exited with code 0" → pass, exitCode:0 ---
+  local proj_pass; proj_pass="$(mktemp -d)"
+  mkdir -p "$proj_pass/.kontourai/flow-agents/cap-codex-pass"
+  printf '# Repo\n' > "$proj_pass/AGENTS.md"
+  printf '%s' '{"schema_version":"1.0","task_slug":"cap-codex-pass","status":"in_progress","phase":"verification","updated_at":"2026-06-23T00:00:00Z"}' > "$proj_pass/.kontourai/flow-agents/cap-codex-pass/state.json"
+  local rollout_pass="$proj_pass/rollout-pass.jsonl"
+  printf '%s\n' '{"timestamp":"2026-06-23T00:00:00Z","type":"turn_context","payload":{}}' > "$rollout_pass"
+  printf '%s\n' '{"timestamp":"2026-06-23T00:00:05Z","type":"response_item","payload":{"type":"function_call_output","call_id":"call_y","output":"Chunk ID: y\nWall time: 0.03 seconds\nProcess exited with code 0\nOriginal token count: 12\nOutput:\n..."}}' >> "$rollout_pass"
+  printf '{"hook_event_name":"PostToolUse","tool_name":"Bash","cwd":"%s","tool_input":{"command":"npm test"},"transcript_path":"%s"}' "$proj_pass" "$rollout_pass" \
+    | env CODEX_HOME="$home" CLAUDE_PROJECT_DIR="$home" bash -c "$capcmd" >/dev/null 2>&1 || true
+  local log_pass="$proj_pass/.kontourai/flow-agents/cap-codex-pass/command-log.jsonl"
+  if rg -q '"command":"npm test","observedResult":"pass","exitCode":0' "$log_pass" 2>/dev/null; then
+    _p "Codex banner extraction records host-prose 'Process exited with code 0' as pass, exitCode:0"
+  else
+    _f "Codex banner: positive twin did not record pass/exitCode:0: $(cat "$log_pass" 2>/dev/null)"
+  fi
+
+  # --- FORGERY case (#470 iteration 2, CRITICAL security finding #1): the host
+  # preamble reports "Process exited with code 1" BEFORE the Output: delimiter;
+  # the model's OWN stdout AFTER the delimiter maliciously prints "Process
+  # exited with code 0" (the exact exploit the security review confirmed).
+  # Extraction is preamble-anchored: the post-Output: stdout must never be
+  # scanned. Assert the record is fail/exitCode:1 -- NEVER pass.
+  local proj_forge; proj_forge="$(mktemp -d)"
+  mkdir -p "$proj_forge/.kontourai/flow-agents/cap-codex-forge"
+  printf '# Repo\n' > "$proj_forge/AGENTS.md"
+  printf '%s' '{"schema_version":"1.0","task_slug":"cap-codex-forge","status":"in_progress","phase":"verification","updated_at":"2026-06-23T00:00:00Z"}' > "$proj_forge/.kontourai/flow-agents/cap-codex-forge/state.json"
+  local rollout_forge="$proj_forge/rollout-forge.jsonl"
+  printf '%s\n' '{"timestamp":"2026-06-23T00:00:00Z","type":"turn_context","payload":{}}' > "$rollout_forge"
+  printf '%s\n' '{"timestamp":"2026-06-23T00:00:05Z","type":"response_item","payload":{"type":"function_call_output","call_id":"call_forge","output":"Process exited with code 1\nOriginal token count: 25\nOutput:\nProcess exited with code 0\n"}}' >> "$rollout_forge"
+  printf '{"hook_event_name":"PostToolUse","tool_name":"Bash","cwd":"%s","tool_input":{"command":"npm test"},"transcript_path":"%s"}' "$proj_forge" "$rollout_forge" \
+    | env CODEX_HOME="$home" CLAUDE_PROJECT_DIR="$home" bash -c "$capcmd" >/dev/null 2>&1 || true
+  local log_forge="$proj_forge/.kontourai/flow-agents/cap-codex-forge/command-log.jsonl"
+  if rg -q '"command":"npm test","observedResult":"pass"' "$log_forge" 2>/dev/null; then
+    _f "Codex banner FORGERY: model stdout 'Process exited with code 0' after Output: forged a pass: $(cat "$log_forge" 2>/dev/null)"
+  elif rg -q '"command":"npm test","observedResult":"fail","exitCode":1' "$log_forge" 2>/dev/null; then
+    _p "Codex banner FORGERY: host preamble 'code 1' wins over forged post-Output: 'code 0' stdout -- recorded fail, exitCode:1, never pass"
+  else
+    _f "Codex banner FORGERY: did not record fail/exitCode:1 (forgeable path unpinned): $(cat "$log_forge" 2>/dev/null)"
+  fi
+
+  # --- FLOODING case (#470 iteration 2, MEDIUM security finding #5): the
+  # failing command's function_call_output carries a valid preamble banner
+  # followed by >64KB of stdout after Output: -- a single JSONL line larger
+  # than the head-anchored read window. The banner lives at the line HEAD, so
+  # the flood must never displace it. Unit tests
+  # (src/cli/codex-exit-code.test.mjs) pin this to fail/exitCode:1, never
+  # null/ambiguous, via the head-anchored raw-bytes path -- assert the same
+  # through the installed adapter.
+  local proj_flood; proj_flood="$(mktemp -d)"
+  mkdir -p "$proj_flood/.kontourai/flow-agents/cap-codex-flood"
+  printf '# Repo\n' > "$proj_flood/AGENTS.md"
+  printf '%s' '{"schema_version":"1.0","task_slug":"cap-codex-flood","status":"in_progress","phase":"verification","updated_at":"2026-06-23T00:00:00Z"}' > "$proj_flood/.kontourai/flow-agents/cap-codex-flood/state.json"
+  local rollout_flood="$proj_flood/rollout-flood.jsonl"
+  printf '%s\n' '{"timestamp":"2026-06-23T00:00:00Z","type":"turn_context","payload":{}}' > "$rollout_flood"
+  local flood; flood="$(python3 -c "print('A' * 70000, end='')")"
+  printf '%s\n' '{"timestamp":"2026-06-23T00:00:05Z","type":"response_item","payload":{"type":"function_call_output","call_id":"call_flood","output":"Process exited with code 1\nOriginal token count: 25\nOutput:\n'"$flood"'"}}' >> "$rollout_flood"
+  printf '{"hook_event_name":"PostToolUse","tool_name":"Bash","cwd":"%s","tool_input":{"command":"npm test"},"transcript_path":"%s"}' "$proj_flood" "$rollout_flood" \
+    | env CODEX_HOME="$home" CLAUDE_PROJECT_DIR="$home" bash -c "$capcmd" >/dev/null 2>&1 || true
+  local log_flood="$proj_flood/.kontourai/flow-agents/cap-codex-flood/command-log.jsonl"
+  if rg -q '"command":"npm test","observedResult":"pass"' "$log_flood" 2>/dev/null; then
+    _f "Codex banner FLOODING: >64KB post-banner stdout falsely forced a pass: $(cat "$log_flood" 2>/dev/null | head -c 300)"
+  elif rg -q '"command":"npm test","observedResult":"fail","exitCode":1' "$log_flood" 2>/dev/null; then
+    _p "Codex banner FLOODING: >64KB stdout after the banner never displaces the head-anchored preamble -- recorded fail, exitCode:1, never pass"
+  else
+    _f "Codex banner FLOODING: did not record fail/exitCode:1 (head-anchored read regressed): $(cat "$log_flood" 2>/dev/null | head -c 300)"
+  fi
+
+  # --- CALL_ID case (#470 iteration 2, HIGH finding #4, Decision B): TWO
+  # function_call_output entries in the rollout -- an OLDER one (code 0,
+  # call_id call_A) and a NEWER one (code 1, call_id call_B). The PostToolUse
+  # payload carries call_id call_A (the call this capture actually
+  # corresponds to). Assert extraction attributes call_A's exitCode:0 -- call_id
+  # correlation wins over "just take the newest banner" -- never mis-attributes
+  # call_B's exitCode:1 to call_A's command.
+  local proj_callid; proj_callid="$(mktemp -d)"
+  mkdir -p "$proj_callid/.kontourai/flow-agents/cap-codex-callid"
+  printf '# Repo\n' > "$proj_callid/AGENTS.md"
+  printf '%s' '{"schema_version":"1.0","task_slug":"cap-codex-callid","status":"in_progress","phase":"verification","updated_at":"2026-06-23T00:00:00Z"}' > "$proj_callid/.kontourai/flow-agents/cap-codex-callid/state.json"
+  local rollout_callid="$proj_callid/rollout-callid.jsonl"
+  printf '%s\n' '{"timestamp":"2026-06-23T00:00:00Z","type":"turn_context","payload":{}}' > "$rollout_callid"
+  printf '%s\n' '{"timestamp":"2026-06-23T00:00:05Z","type":"response_item","payload":{"type":"function_call_output","call_id":"call_A","output":"Process exited with code 0\nOriginal token count: 10\nOutput:\n..."}}' >> "$rollout_callid"
+  printf '%s\n' '{"timestamp":"2026-06-23T00:00:10Z","type":"response_item","payload":{"type":"function_call_output","call_id":"call_B","output":"Process exited with code 1\nOriginal token count: 8\nOutput:\n..."}}' >> "$rollout_callid"
+  printf '{"hook_event_name":"PostToolUse","tool_name":"Bash","cwd":"%s","tool_input":{"command":"npm test"},"transcript_path":"%s","call_id":"call_A"}' "$proj_callid" "$rollout_callid" \
+    | env CODEX_HOME="$home" CLAUDE_PROJECT_DIR="$home" bash -c "$capcmd" >/dev/null 2>&1 || true
+  local log_callid="$proj_callid/.kontourai/flow-agents/cap-codex-callid/command-log.jsonl"
+  if rg -q '"command":"npm test","observedResult":"fail","exitCode":1' "$log_callid" 2>/dev/null; then
+    _f "Codex banner CALL_ID: mis-attributed the NEWER call_B's exitCode:1 to the call_A payload instead of call_A's own exitCode:0: $(cat "$log_callid" 2>/dev/null)"
+  elif rg -q '"command":"npm test","observedResult":"pass","exitCode":0' "$log_callid" 2>/dev/null; then
+    _p "Codex banner CALL_ID: call_id correlation attributes the matching call_A entry's exitCode:0, not the newer call_B's exitCode:1"
+  else
+    _f "Codex banner CALL_ID: did not record pass/exitCode:0 for the call_id-matched entry: $(cat "$log_callid" 2>/dev/null)"
+  fi
+}
+
 run_bundle "Claude Code" "$ROOT/dist/claude-code/install.sh" ".claude/settings.json" "CLAUDE_PROJECT_DIR"
 run_bundle "Codex"       "$ROOT/dist/codex/install.sh"       ".codex/hooks.json"     "CODEX_HOME"
+codex_banner_teeth
 
 echo ""
 echo "──────────────────────────────────"

package/evals/ci/antigaming-suite.sh

@@ -25,6 +25,7 @@ TESTS=(
   "evals/integration/test_enforcer_expects_driven.sh"
   "evals/integration/test_goal_fit_rederive.sh"
   "evals/integration/test_flowdef_session_activation.sh"
+  "evals/integration/test_builder_entry_enforcement.sh"
   "evals/integration/test_flowdef_union_floor_regression.sh"
   "evals/integration/test_trust_reconcile.sh"
   "evals/integration/test_trust_checkpoint.sh"
@@ -35,6 +36,7 @@ TESTS=(
   "evals/integration/test_trust_reconcile_manifest.sh"
   "evals/integration/test_trust_reconcile_mixed_bundle.sh"
   "evals/integration/test_trust_reconcile_negatives.sh"
+  "evals/integration/test_reconcile_preflight.sh"
   "evals/integration/test_goal_fit_ghost_session.sh"
 )
 

package/evals/ci/run-baseline.sh

@@ -21,13 +21,19 @@ CHECKS=(
   "Publish-change helper integration|bash evals/integration/test_publish_change_helper.sh"
   "Workflow sidecar writer integration|bash evals/integration/test_workflow_sidecar_writer.sh"
   "Sidecar field preservation integration|bash evals/integration/test_sidecar_field_preservation.sh"
+  "Record-check integration|bash evals/integration/test_record_check.sh"
   "Actor identity resolver integration|bash evals/integration/test_actor_identity.sh"
+  "CI-runtime actor identity integration|bash evals/integration/test_ci_actor_identity.sh"
   "Assignment provider local-file integration|bash evals/integration/test_assignment_provider_local_file.sh"
   "Assignment provider github integration|bash evals/integration/test_assignment_provider_github.sh"
   "Stop hook release-with-handoff integration|bash evals/integration/test_stop_hook_release.sh"
   "Pull work assignment join integration|bash evals/integration/test_pull_work_assignment_join.sh"
   "Ensure-session ownership guard integration|bash evals/integration/test_ensure_session_ownership_guard.sh"
+  "Verify-hold gate integration|bash evals/integration/test_verify_hold.sh"
+  "Takeover protocol integration|bash evals/integration/test_takeover_protocol.sh"
   "Current.json per-actor integration|bash evals/integration/test_current_json_per_actor.sh"
+  "Liveness console relay integration|bash evals/integration/test_liveness_console_relay.sh"
+  "Console tenant isolation integration|bash evals/integration/test_console_tenant_isolation.sh"
   "Goal Fit hook integration|bash evals/integration/test_goal_fit_hook.sh"
   "Hook category behavior integration|bash evals/integration/test_hook_category_behaviors.sh"
   "Workflow steering hook integration|bash evals/integration/test_workflow_steering_hook.sh"
@@ -51,9 +57,36 @@ CHECKS=(
   "Liveness conflict injection integration|bash evals/integration/test_liveness_conflict_injection.sh"
   "Telemetry doctor integration|bash evals/integration/test_telemetry_doctor.sh"
   "Usage and cost integration|bash evals/integration/test_usage_cost.sh"
+  "Telemetry usage pipeline integration|bash evals/integration/test_telemetry_usage_pipeline.sh"
+  "Economics record integration|bash evals/integration/test_economics_record.sh"
+  "Learning review proposals integration|bash evals/integration/test_learning_review_proposals.sh"
   "Utterance check integration|bash evals/integration/test_utterance_check.sh"
   "Pull work provider integration|bash evals/integration/test_pull_work_provider.sh"
   "Veritas governance kit integration|bash evals/integration/test_veritas_governance_kit.sh"
+  "Builder step producers integration|bash evals/integration/test_builder_step_producers.sh"
+  "Builder canonical Flow run integration|bash evals/integration/test_builder_entry_enforcement.sh"
+  "Codex hook resolution integration|bash evals/integration/test_codex_hook_resolution.sh"
+  "Critique supersession roundtrip integration|bash evals/integration/test_critique_supersession_roundtrip.sh"
+  "Dual emit flow step integration|bash evals/integration/test_dual_emit_flow_step.sh"
+  "Evidence capture hook integration|bash evals/integration/test_evidence_capture_hook.sh"
+  "Exemption usage review integration|bash evals/integration/test_exemption_usage_review.sh"
+  "FlowDefinition session history preservation integration|bash evals/integration/test_flowdef_session_history_preservation.sh"
+  "Gate review inquiry records integration|bash evals/integration/test_gate_review_inquiry_records.sh"
+  "Install merge integration|bash evals/integration/test_install_merge.sh"
+  "Kit identity trust integration|bash evals/integration/test_kit_identity_trust.sh"
+  "Liveness worktree root integration|bash evals/integration/test_liveness_worktree_root.sh"
+  "Migrate local artifacts integration|bash evals/integration/test_migrate_local_artifacts.sh"
+  "Model routing escalation integration|bash evals/integration/test_model_routing_escalation.sh"
+  "Promote gate integration|bash evals/integration/test_promote_gate.sh"
+  "Pull work board integration|bash evals/integration/test_pull_work_board.sh"
+  "Routing efficiency integration|bash evals/integration/test_routing_efficiency.sh"
+  "Session resume roundtrip integration|bash evals/integration/test_session_resume_roundtrip.sh"
+  "Skill drift check integration|bash evals/integration/test_skill_drift_check.sh"
+  "Trust reconcile trailer diagnostic integration|bash evals/integration/test_trust_reconcile_trailer_diagnostic.sh"
+  "Validate artifacts portability integration|bash evals/integration/test_validate_artifacts_portability.sh"
+  "Verify CLI integration|bash evals/integration/test_verify_cli.sh"
+  "Veritas governance adapter integration|bash evals/integration/test_veritas_governance_adapter.sh"
+  "Workspace settings integration|bash evals/integration/test_workspace_settings.sh"
   "Anti-gaming and trust suite|bash evals/ci/antigaming-suite.sh"
   "Usage feedback import integration|bash evals/integration/test_usage_feedback_import.sh"
   "Usage feedback outcomes integration|bash evals/integration/test_usage_feedback_outcomes.sh"
@@ -77,13 +110,19 @@ LANE_WORKFLOW_CONTRACTS=(
   "Publish-change helper integration"
   "Workflow sidecar writer integration"
   "Sidecar field preservation integration"
+  "Record-check integration"
   "Actor identity resolver integration"
+  "CI-runtime actor identity integration"
   "Assignment provider local-file integration"
   "Assignment provider github integration"
   "Stop hook release-with-handoff integration"
   "Pull work assignment join integration"
   "Ensure-session ownership guard integration"
+  "Verify-hold gate integration"
+  "Takeover protocol integration"
   "Current.json per-actor integration"
+  "Liveness console relay integration"
+  "Console tenant isolation integration"
 )
 
 LANE_RUNTIME_AND_KIT=(
@@ -110,12 +149,42 @@ LANE_RUNTIME_AND_KIT=(
   "Liveness conflict injection integration"
   "Telemetry doctor integration"
   "Usage and cost integration"
+  "Telemetry usage pipeline integration"
+  "Economics record integration"
+  "Learning review proposals integration"
   "Utterance check integration"
   "Pull work provider integration"
   "Veritas governance kit integration"
   "Anti-gaming and trust suite"
 )
 
+LANE_INTEGRATION_COVERAGE=(
+  "Builder step producers integration"
+  "Builder canonical Flow run integration"
+  "Codex hook resolution integration"
+  "Critique supersession roundtrip integration"
+  "Dual emit flow step integration"
+  "Evidence capture hook integration"
+  "Exemption usage review integration"
+  "FlowDefinition session history preservation integration"
+  "Gate review inquiry records integration"
+  "Install merge integration"
+  "Kit identity trust integration"
+  "Liveness worktree root integration"
+  "Migrate local artifacts integration"
+  "Model routing escalation integration"
+  "Promote gate integration"
+  "Pull work board integration"
+  "Routing efficiency integration"
+  "Session resume roundtrip integration"
+  "Skill drift check integration"
+  "Trust reconcile trailer diagnostic integration"
+  "Validate artifacts portability integration"
+  "Verify CLI integration"
+  "Veritas governance adapter integration"
+  "Workspace settings integration"
+)
+
 LANE_USAGE_FEEDBACK=(
   "Usage feedback import integration"
   "Usage feedback outcomes integration"
@@ -130,10 +199,11 @@ slugify() {
 
 # WS8 (ADR 0020): the reconcile manifest is THIS registry, not a new file. Every entry
 # EMITTED below is a member of a REQUIRED LANE_* array (source-and-static, workflow-contracts,
-# runtime-and-kit), each of which gates a merge — so a manifest command is, by construction, a
-# required-lane command. The advisory LANE_USAGE_FEEDBACK lane (continue-on-error, non-blocking)
-# is EXCLUDED from the emit so a test_output claim can never reconcile against a non-gating
-# command. scripts/ci/trust-reconcile.js consumes this emit to resolve the manifest.
+# runtime-and-kit, integration-coverage), each of which gates a merge — so a manifest command
+# is, by construction, a required-lane command. The advisory LANE_USAGE_FEEDBACK lane
+# (continue-on-error, non-blocking) is EXCLUDED from the emit so a test_output claim can
+# never reconcile against a non-gating command. scripts/ci/trust-reconcile.js consumes this
+# emit to resolve the manifest.
 _json_str() {
   local s="$1"
   s="${s//\\/\\\\}"
@@ -152,6 +222,7 @@ _lanes_for_label() {
   for x in "${LANE_SOURCE_AND_STATIC[@]}"; do [[ "$x" == "$label" ]] && { out="${out}\"source-and-static\","; break; }; done
   for x in "${LANE_WORKFLOW_CONTRACTS[@]}"; do [[ "$x" == "$label" ]] && { out="${out}\"workflow-contracts\","; break; }; done
   for x in "${LANE_RUNTIME_AND_KIT[@]}"; do [[ "$x" == "$label" ]] && { out="${out}\"runtime-and-kit\","; break; }; done
+  for x in "${LANE_INTEGRATION_COVERAGE[@]}"; do [[ "$x" == "$label" ]] && { out="${out}\"integration-coverage\","; break; }; done
   printf '%s' "${out%,}"
 }
 
@@ -194,6 +265,9 @@ lane_labels() {
     runtime-and-kit)
       printf '%s\n' "${LANE_RUNTIME_AND_KIT[@]}"
       ;;
+    integration-coverage)
+      printf '%s\n' "${LANE_INTEGRATION_COVERAGE[@]}"
+      ;;
     usage-feedback)
       printf '%s\n' "${LANE_USAGE_FEEDBACK[@]}"
       ;;

package/evals/fixtures/economics/acceptance.json

@@ -0,0 +1,12 @@
+{
+  "schema_version": "1.0",
+  "task_slug": "kontourai-flow-agents-349",
+  "repo": "kontourai/flow-agents",
+  "source_request": "per-run kit-economics record",
+  "criteria": [
+    { "id": "AC1", "text": "golden fixture validates against the schema", "status": "pass" },
+    { "id": "AC2", "text": "cost totals equal the session.usage usage block", "status": "pass" },
+    { "id": "AC3", "text": "phase-sum invariant holds", "status": "pass" }
+  ],
+  "goal_fit": { "status": "verified", "summary": "Economics record measures the value proof." }
+}

package/evals/fixtures/economics/agents/tool-worker-1/events.jsonl

@@ -0,0 +1,2 @@
+{"timestamp":"2026-07-05T00:00:01Z","agent_id":"tool-worker-1","kind":"delegation","status":"active","role":"delegate-mechanical","model":"claude-haiku-4-5@anthropic","summary":"mechanical slice: routine config edit"}
+{"timestamp":"2026-07-05T00:00:07Z","agent_id":"tool-worker-1","kind":"evidence","status":"pass","summary":"tests green"}

package/evals/fixtures/economics/agents/tool-worker-2/events.jsonl

@@ -0,0 +1,2 @@
+{"timestamp":"2026-07-05T00:00:02Z","agent_id":"tool-worker-2","kind":"delegation","status":"active","role":"delegate-implementation","model":"claude-sonnet-5@anthropic","summary":"impl slice"}
+{"timestamp":"2026-07-05T00:00:09Z","agent_id":"tool-worker-2","kind":"escalation","status":"active","role":"delegate-design","model":"claude-opus-4-8@anthropic","escalated_from":"delegate-implementation","summary":"escalated: design divergence"}

package/evals/fixtures/economics/agents/tool-worker-3/events.jsonl

@@ -0,0 +1,2 @@
+{"timestamp":"2026-07-05T00:00:03Z","agent_id":"tool-worker-3","kind":"delegation","status":"active","role":"delegate-design","model":"claude-opus-4-8@anthropic","summary":"design slice"}
+{"timestamp":"2026-07-05T00:00:11Z","agent_id":"tool-worker-3","kind":"verdict","status":"fail","summary":"acceptance failed"}

package/evals/fixtures/economics/agents/tool-worker-4/events.jsonl

@@ -0,0 +1 @@
+{"timestamp":"2026-07-05T00:00:04Z","agent_id":"tool-worker-4","kind":"delegation","status":"active","role":"delegate-mechanical","model":"claude-haiku-4-5@anthropic","summary":"mech, no verdict recorded"}

package/evals/fixtures/economics/agents/tool-worker-5/events.jsonl

@@ -0,0 +1,2 @@
+{"timestamp":"2026-07-05T00:00:05Z","agent_id":"tool-worker-5","kind":"delegation","status":"active","role":"delegate-mechanical","model":"claude-haiku-4-5@anthropic","summary":"try 1"}
+{"timestamp":"2026-07-05T00:00:12Z","agent_id":"tool-worker-5","kind":"delegation","status":"active","role":"delegate-mechanical","model":"claude-haiku-4-5@anthropic","summary":"re-prompted: fix it"}

package/evals/fixtures/economics/critique.json

@@ -0,0 +1,22 @@
+{
+  "schema_version": "1.0",
+  "task_slug": "kontourai-flow-agents-349",
+  "required": true,
+  "status": "changes_requested",
+  "critiques": [
+    {
+      "id": "review-1",
+      "reviewer": "tool-code-reviewer",
+      "verdict": "changes_requested",
+      "summary": "Findings across severities plus one caught false-completion.",
+      "findings": [
+        { "id": "f1", "severity": "critical", "description": "Injection: JSON built by string concat." },
+        { "id": "f2", "severity": "high", "description": "Local write skipped when console unset." },
+        { "id": "f3", "severity": "high", "description": "Phase sum drifts from cost total." },
+        { "id": "f4", "severity": "medium", "description": "estimated_cost_usd re-estimated from prompt length." },
+        { "id": "f5", "description": "Missing severity field defaults here to low." },
+        { "id": "f6", "severity": "low", "false_completion": true, "description": "AC3 was claimed pass but a trusted-backstop re-run contradicted it." }
+      ]
+    }
+  ]
+}

package/evals/fixtures/economics/expected-record.json

@@ -0,0 +1,71 @@
+{
+  "at": "1751731200000",
+  "cost": {
+    "by_model": [
+      {
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 500000,
+        "estimated_cost_usd": 0.305,
+        "input_tokens": 1000,
+        "model": "claude-opus-4-8",
+        "output_tokens": 2000
+      },
+      {
+        "cache_creation_input_tokens": 0,
+        "cache_read_input_tokens": 0,
+        "estimated_cost_usd": 0.005,
+        "input_tokens": 0,
+        "model": "claude-fable-5",
+        "output_tokens": 100
+      }
+    ],
+    "cache_creation_input_tokens": 0,
+    "cache_read_input_tokens": 500000,
+    "estimated_cost_usd": 0.31,
+    "input_tokens": 1000,
+    "output_tokens": 2100
+  },
+  "defects": {
+    "caught_false_completions": 1,
+    "findings_by_severity": {
+      "critical": 1,
+      "high": 2,
+      "low": 2,
+      "medium": 1
+    },
+    "gate_fires": 3,
+    "verification_verdict": "PASS"
+  },
+  "iterations": {
+    "count": 2,
+    "route_backs": 1
+  },
+  "model": "claude-opus-4-8",
+  "phases": [
+    {
+      "cache_creation_input_tokens": 0,
+      "cache_read_input_tokens": 500000,
+      "estimated_cost_usd": 0.31,
+      "input_tokens": 1000,
+      "output_tokens": 2100,
+      "phase": "verify",
+      "wall_clock_s": 420
+    }
+  ],
+  "pricing_version": "2026-06-28",
+  "run_id": "kontourai-flow-agents-349-run-01",
+  "schema": "kontour.console.economics",
+  "task_slug": "kontourai-flow-agents-349",
+  "tenant_id": null,
+  "time": {
+    "human_wait_s": 45,
+    "wall_clock_s": 420
+  },
+  "version": "0.1",
+  "delegations": [],
+  "signals": {
+    "runtime": "claude-code",
+    "per_delegation_tokens": false,
+    "per_delegation_outcome": "n/a"
+  }
+}

package/evals/fixtures/economics/session-usage-event.json

@@ -0,0 +1 @@
+{"schema_version":"0.3.0","timestamp":"1751731200000","session_id":"kontourai-flow-agents-349-run-01","event_id":"evt-01-usage","event_type":"session.usage","agent":{"name":"dev","runtime":"claude-code","version":"1"},"context":{"cwd":"/workspace/flow-agents"},"usage":{"model":"claude-opus-4-8","duration_s":420,"tool_invocations":12,"delegations":3,"input_tokens":1000,"output_tokens":2100,"cache_creation_input_tokens":0,"cache_read_input_tokens":500000,"estimated_cost_usd":0.31,"pricing_version":"2026-06-28","by_model":[{"model":"claude-opus-4-8","input_tokens":1000,"output_tokens":2000,"cache_creation_input_tokens":0,"cache_read_input_tokens":500000,"estimated_cost_usd":0.305},{"model":"claude-fable-5","input_tokens":0,"output_tokens":100,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.005}]}}

package/evals/fixtures/economics/state.json

@@ -0,0 +1,11 @@
+{
+  "schema_version": "1.0",
+  "task_slug": "kontourai-flow-agents-349",
+  "repo": "kontourai/flow-agents",
+  "status": "verified",
+  "phase": "verify",
+  "iterations": { "count": 2, "route_backs": 1 },
+  "gate_fires": 3,
+  "human_wait_s": 45,
+  "verification_verdict": "PASS"
+}

package/evals/fixtures/economics/transcript.jsonl

@@ -0,0 +1,3 @@
+{"type":"assistant","message":{"model":"claude-opus-4-8","usage":{"input_tokens":1000,"output_tokens":2000,"cache_creation_input_tokens":0,"cache_read_input_tokens":500000}}}
+{"type":"user","message":{"content":"continue"}}
+{"type":"assistant","message":{"model":"claude-fable-5","usage":{"input_tokens":0,"output_tokens":100,"cache_creation_input_tokens":0,"cache_read_input_tokens":0}}}

package/evals/fixtures/hook-influence/cases.json

@@ -108,7 +108,7 @@
       }
     },
     {
-      "id": "dev-builder-review-before-verify-after-execute",
+      "id": "kit:builder:dev-builder-review-before-verify-after-execute",
       "description": "After execute-plan completes in the Builder Kit build flow, the next gate is review-work critique before verify-work evidence. Review is report-only and cannot be treated as verification evidence. Open critique findings route back through execution before re-review and re-verify.",
       "runtime_scope": ["claude-code", "codex", "kiro-cli"],
       "hook": "workflow-steering",
@@ -141,8 +141,8 @@
       }
     },
     {
-      "id": "dev-builder-route-fresh-coding-prompt",
-      "description": "A fresh coding/build prompt with no active sidecar should still steer into Builder Kit delivery workflow before source edits. Claude Code must receive this as prompt-submit additional context through the hook adapter.",
+      "id": "kit:builder:dev-builder-route-fresh-coding-prompt",
+      "description": "A fresh coding/build prompt with no active sidecar should still steer into the builder kit's builder.build workflow before source edits. Claude Code must receive this as prompt-submit additional context through the hook adapter.",
       "runtime_scope": ["claude-code", "codex", "kiro-cli"],
       "hook": "workflow-steering",
       "event": "UserPromptSubmit",
@@ -154,14 +154,14 @@
         "prompt": "Please implement the new settings API and update its tests."
       },
       "guidance_must_include": [
-        "BUILDER WORKFLOW ROUTE",
+        "KIT WORKFLOW ROUTE",
         "activate `deliver`",
         "--flow-id builder.build",
         "plan-work -> execute-plan -> review-work -> verify-work",
-        "publish/release-readiness and learning-review"
+        "release-readiness and learning-review"
       ],
       "agent_must_do": [
-        "activate Builder Kit delivery workflow before source edits or implementation commands",
+        "use the `builder` kit's `builder.build` workflow before source edits or implementation commands",
         "use deliver by default for coding/build work unless the user explicitly requested TDD",
         "keep the session on builder.build and do not bypass plan-work -> execute-plan -> review-work -> verify-work",
         "continue from local verification into publish, release readiness, and learning feedback"
@@ -261,7 +261,7 @@
       }
     },
     {
-      "id": "dev-builder-build-requires-pickup-probe-before-plan",
+      "id": "kit:builder:dev-builder-build-requires-pickup-probe-before-plan",
       "description": "When Builder Kit build flow reaches planning without recorded pickup Probe decisions or accepted gaps, the hook must steer back to design-probe instead of allowing plan-work to proceed. Direct pull-work and plan-work remain valid when the user invokes those primitives outside Builder Kit build flow.",
       "runtime_scope": ["claude-code", "codex", "kiro-cli"],
       "hook": "workflow-steering",

package/evals/fixtures/learning-review-proposals/balanced/economics.jsonl

@@ -0,0 +1,6 @@
+{"schema":"kontour.console.economics","version":"0.1","run_id":"bal-r1","at":1751600000000,"task_slug":null,"cost":{"input_tokens":1000,"output_tokens":500,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.10,"by_model":[]},"time":{"wall_clock_s":100,"human_wait_s":10},"iterations":{"count":2,"route_backs":1},"defects":{"gate_fires":1,"findings_by_severity":{"critical":0,"high":1,"medium":1,"low":1},"caught_false_completions":0,"verification_verdict":"PASS"}}
+{"schema":"kontour.console.economics","version":"0.1","run_id":"bal-r2","at":1751600001000,"task_slug":null,"cost":{"input_tokens":1000,"output_tokens":500,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.10,"by_model":[]},"time":{"wall_clock_s":100,"human_wait_s":10},"iterations":{"count":2,"route_backs":1},"defects":{"gate_fires":1,"findings_by_severity":{"critical":0,"high":1,"medium":1,"low":1},"caught_false_completions":0,"verification_verdict":"PASS"}}
+{"schema":"kontour.console.economics","version":"0.1","run_id":"bal-r3","at":1751600002000,"task_slug":null,"cost":{"input_tokens":1000,"output_tokens":500,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.10,"by_model":[]},"time":{"wall_clock_s":100,"human_wait_s":10},"iterations":{"count":2,"route_backs":1},"defects":{"gate_fires":1,"findings_by_severity":{"critical":0,"high":1,"medium":1,"low":2},"caught_false_completions":0,"verification_verdict":"PASS"}}
+{"schema":"kontour.console.economics","version":"0.1","run_id":"bal-r4","at":1751600003000,"task_slug":null,"cost":{"input_tokens":1000,"output_tokens":500,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.13,"by_model":[]},"time":{"wall_clock_s":100,"human_wait_s":10},"iterations":{"count":2,"route_backs":1},"defects":{"gate_fires":1,"findings_by_severity":{"critical":0,"high":1,"medium":1,"low":2},"caught_false_completions":0,"verification_verdict":"PASS"}}
+{"schema":"kontour.console.economics","version":"0.1","run_id":"bal-r5","at":1751600004000,"task_slug":null,"cost":{"input_tokens":1000,"output_tokens":500,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.13,"by_model":[]},"time":{"wall_clock_s":100,"human_wait_s":10},"iterations":{"count":2,"route_backs":1},"defects":{"gate_fires":1,"findings_by_severity":{"critical":0,"high":1,"medium":1,"low":2},"caught_false_completions":0,"verification_verdict":"PASS"}}
+{"schema":"kontour.console.economics","version":"0.1","run_id":"bal-r6","at":1751600005000,"task_slug":null,"cost":{"input_tokens":1000,"output_tokens":500,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.13,"by_model":[]},"time":{"wall_clock_s":100,"human_wait_s":10},"iterations":{"count":2,"route_backs":1},"defects":{"gate_fires":1,"findings_by_severity":{"critical":0,"high":2,"medium":1,"low":2},"caught_false_completions":0,"verification_verdict":"PASS"}}

package/evals/fixtures/learning-review-proposals/effect-follow-up/economics.jsonl

@@ -0,0 +1,5 @@
+{"schema":"kontour.console.economics","version":"0.1","run_id":"ef-r1","at":1751600000000,"task_slug":"task-lr-ef-1","cost":{"input_tokens":1000,"output_tokens":500,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.05,"by_model":[]},"time":{"wall_clock_s":100,"human_wait_s":10},"iterations":{"count":2,"route_backs":0},"defects":{"gate_fires":1,"findings_by_severity":{"critical":0,"high":1,"medium":0,"low":1},"caught_false_completions":1,"verification_verdict":"PASS"}}
+{"schema":"kontour.console.economics","version":"0.1","run_id":"ef-r2","at":1751600001000,"task_slug":"task-lr-ef-2","cost":{"input_tokens":1000,"output_tokens":500,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.05,"by_model":[]},"time":{"wall_clock_s":100,"human_wait_s":10},"iterations":{"count":2,"route_backs":0},"defects":{"gate_fires":1,"findings_by_severity":{"critical":0,"high":1,"medium":0,"low":1},"caught_false_completions":1,"verification_verdict":"PASS"}}
+{"schema":"kontour.console.economics","version":"0.1","run_id":"ef-r3","at":1751600002000,"task_slug":"task-lr-ef-3","cost":{"input_tokens":1000,"output_tokens":500,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.05,"by_model":[]},"time":{"wall_clock_s":100,"human_wait_s":10},"iterations":{"count":2,"route_backs":0},"defects":{"gate_fires":1,"findings_by_severity":{"critical":0,"high":1,"medium":0,"low":1},"caught_false_completions":1,"verification_verdict":"PASS"}}
+{"schema":"kontour.console.economics","version":"0.1","run_id":"ef-r4","at":1751600003000,"task_slug":"task-lr-ef-4","cost":{"input_tokens":1000,"output_tokens":500,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.05,"by_model":[]},"time":{"wall_clock_s":100,"human_wait_s":10},"iterations":{"count":2,"route_backs":0},"defects":{"gate_fires":1,"findings_by_severity":{"critical":0,"high":1,"medium":0,"low":1},"caught_false_completions":1,"verification_verdict":"PASS"}}
+{"schema":"kontour.console.economics","version":"0.1","run_id":"ef-r5","at":1751600004000,"task_slug":"task-lr-ef-5","cost":{"input_tokens":1000,"output_tokens":500,"cache_creation_input_tokens":0,"cache_read_input_tokens":0,"estimated_cost_usd":0.05,"by_model":[]},"time":{"wall_clock_s":100,"human_wait_s":10},"iterations":{"count":2,"route_backs":0},"defects":{"gate_fires":1,"findings_by_severity":{"critical":0,"high":1,"medium":0,"low":1},"caught_false_completions":1,"verification_verdict":"PASS"}}

package/evals/fixtures/learning-review-proposals/effect-follow-up/sessions/task-lr-ef-1/trust.bundle

@@ -0,0 +1,21 @@
+{
+  "schemaVersion": 3,
+  "source": "flow-agents/workflow-sidecar;statusFunctionVersion=1",
+  "claims": [
+    {
+      "id": "task-lr-ef-1-gate-claim-unit-tests.flow-agents-workflow.unit-tests-pass",
+      "subjectType": "workflow-check",
+      "subjectId": "task-lr-ef-1/unit-tests",
+      "facet": "flow-agents.workflow",
+      "claimType": "builder.verify.tests",
+      "fieldOrBehavior": "unit tests pass",
+      "value": "pass",
+      "createdAt": "2026-07-04T00:00:00Z",
+      "updatedAt": "2026-07-04T00:00:00Z",
+      "status": "verified"
+    }
+  ],
+  "evidence": [],
+  "events": [],
+  "policies": []
+}

package/evals/fixtures/learning-review-proposals/effect-follow-up/sessions/task-lr-ef-2/trust.bundle

@@ -0,0 +1,21 @@
+{
+  "schemaVersion": 3,
+  "source": "flow-agents/workflow-sidecar;statusFunctionVersion=1",
+  "claims": [
+    {
+      "id": "task-lr-ef-2-gate-claim-unit-tests.flow-agents-workflow.unit-tests-pass",
+      "subjectType": "workflow-check",
+      "subjectId": "task-lr-ef-2/unit-tests",
+      "facet": "flow-agents.workflow",
+      "claimType": "builder.verify.tests",
+      "fieldOrBehavior": "unit tests pass",
+      "value": "pass",
+      "createdAt": "2026-07-04T00:00:00Z",
+      "updatedAt": "2026-07-04T00:00:00Z",
+      "status": "verified"
+    }
+  ],
+  "evidence": [],
+  "events": [],
+  "policies": []
+}

package/evals/fixtures/learning-review-proposals/effect-follow-up/sessions/task-lr-ef-3/trust.bundle

@@ -0,0 +1,21 @@
+{
+  "schemaVersion": 3,
+  "source": "flow-agents/workflow-sidecar;statusFunctionVersion=1",
+  "claims": [
+    {
+      "id": "task-lr-ef-3-gate-claim-unit-tests.flow-agents-workflow.unit-tests-pass",
+      "subjectType": "workflow-check",
+      "subjectId": "task-lr-ef-3/unit-tests",
+      "facet": "flow-agents.workflow",
+      "claimType": "builder.verify.tests",
+      "fieldOrBehavior": "unit tests pass",
+      "value": "pass",
+      "createdAt": "2026-07-04T00:00:00Z",
+      "updatedAt": "2026-07-04T00:00:00Z",
+      "status": "verified"
+    }
+  ],
+  "evidence": [],
+  "events": [],
+  "policies": []
+}