@mstar-harness/dsh 3.8.3 → 3.9.0

package/dist/index.js

@@ -1122,8 +1122,8 @@ var require_lib2 = __commonJS(function(exports, module) {
 });
 
 // src/index.ts
-import { existsSync as existsSync22, readFileSync as readFileSync18, readdirSync as readdirSync14 } from "node:fs";
-import { join as join25 } from "node:path";
+import { existsSync as existsSync24, readFileSync as readFileSync19, readdirSync as readdirSync14 } from "node:fs";
+import { join as join28 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import {
   apply as applySkillLocal,
@@ -1138,24 +1138,28 @@ import { basename, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { readFileSync as readFileSync2, statSync } from "node:fs";
 import { dirname as dirname2, isAbsolute, join as join2, relative, resolve as resolve2 } from "node:path";
-import { existsSync as existsSync6, mkdirSync as mkdirSync5, readdirSync as readdirSync5, readFileSync as readFileSync6, realpathSync as realpathSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync5, readdirSync as readdirSync5, readFileSync as readFileSync7, realpathSync as realpathSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { execFileSync } from "node:child_process";
-import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute4, join as join9, relative as relative2, resolve as resolve7 } from "node:path";
-import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync3 } from "node:fs";
-import { dirname as dirname3, isAbsolute as isAbsolute2, join as join4, resolve as resolve3 } from "node:path";
+import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute5, join as join9, relative as relative2, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync5, readdirSync as readdirSync3, readFileSync as readFileSync5 } from "node:fs";
+import { existsSync as existsSync4, readFileSync as readFileSync4, readdirSync as readdirSync2, realpathSync } from "node:fs";
+import { dirname as dirname4, join as join6, resolve as resolve5, sep } from "node:path";
+import { dirname as dirname3, isAbsolute as isAbsolute2, join as join3, resolve as resolve3 } from "node:path";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { existsSync as existsSync4, readFileSync as readFileSync4, readdirSync as readdirSync3, realpathSync } from "node:fs";
-import { dirname as dirname4, join as join7, resolve as resolve5, sep } from "node:path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3 } from "node:fs";
+import { isAbsolute as isAbsolute4, join as join5 } from "node:path";
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync7, realpathSync as realpathSync3 } from "node:fs";
-import { isAbsolute as isAbsolute5, join as join10, resolve as resolve8 } from "node:path";
+import { existsSync as existsSync8, realpathSync as realpathSync3 } from "node:fs";
+import { isAbsolute as isAbsolute6, join as join10, resolve as resolve8 } from "node:path";
+import { existsSync as existsSync9 } from "node:fs";
+import { join as join11, dirname as dirname7 } from "node:path";
 import { execFileSync as execFileSync3, spawn } from "node:child_process";
-import { mkdirSync as mkdirSync6, readdirSync as readdirSync6, readFileSync as readFileSync7, realpathSync as realpathSync4, statSync as statSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { basename as basename4, dirname as dirname6, isAbsolute as isAbsolute6, join as join11, relative as relative3, resolve as resolve9 } from "node:path";
-import { existsSync as existsSync10, readdirSync as readdirSync9, readFileSync as readFileSync10 } from "node:fs";
-import { basename as basename7, isAbsolute as isAbsolute8, join as join15, relative as relative6, resolve as resolve13, sep as sep4 } from "node:path";
-import { existsSync as existsSync11 } from "node:fs";
-import { join as join16 } from "node:path";
+import { mkdirSync as mkdirSync6, readdirSync as readdirSync6, readFileSync as readFileSync8, realpathSync as realpathSync4, statSync as statSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { basename as basename5, dirname as dirname8, isAbsolute as isAbsolute7, join as join12, relative as relative3, resolve as resolve9 } from "node:path";
+import { existsSync as existsSync12, readdirSync as readdirSync9, readFileSync as readFileSync11 } from "node:fs";
+import { basename as basename8, isAbsolute as isAbsolute9, join as join16, relative as relative6, resolve as resolve13, sep as sep4 } from "node:path";
+import { existsSync as existsSync13 } from "node:fs";
+import { join as join17 } from "node:path";
 var SEVERITY_ORDER = ["critical", "high", "medium", "low", "nit"];
 function applyEnforcement(gate, opts) {
   return { ...gate, hardBlocked: opts.hard && gate.violations.length > 0 };
@@ -1292,445 +1296,168 @@ function isAtOrBelow(dir, root) {
   const rel = relative(root, dir);
   return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
 }
-var COMPASS_STATUSES = ["active", "locked", "completed"];
-var DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
-var PLAN_STATUS_DONE = "Done";
-function typeName(value) {
-  if (value === null)
-    return "null";
-  if (Array.isArray(value))
-    return "array";
-  return typeof value;
-}
-function validateCompassShape(doc) {
-  const issues = [];
-  const expectString = (key, opts = {}) => {
-    const value = doc[key];
-    if (typeof value !== "string") {
-      issues.push({ path: [key], message: `expected string, received ${typeName(value)}` });
-      return;
-    }
-    if (opts.min !== undefined && value.length < opts.min) {
-      issues.push({ path: [key], message: `string must contain at least ${opts.min} character(s)` });
-      return;
-    }
-    if (opts.regex !== undefined && !opts.regex.test(value)) {
-      issues.push({ path: [key], message: `string must match ${opts.regex}` });
-    }
-  };
-  expectString("iteration_id", { min: 1 });
-  expectString("start_date", { regex: DATE_RE });
-  const status = doc.status;
-  if (typeof status !== "string" || !COMPASS_STATUSES.includes(status)) {
-    issues.push({
-      path: ["status"],
-      message: `expected one of ${COMPASS_STATUSES.map((s) => `'${s}'`).join(" | ")}, received ${typeName(status)}`
-    });
-  }
-  expectString("iteration_base_branch", { min: 1 });
-  expectString("target_branch", { min: 1 });
-  const plans = doc.plans;
-  if (plans !== undefined) {
-    if (!Array.isArray(plans)) {
-      issues.push({ path: ["plans"], message: `expected array, received ${typeName(plans)}` });
-    } else {
-      plans.forEach((entry, index) => {
-        if (typeof entry !== "string") {
-          issues.push({ path: ["plans", index], message: `expected string, received ${typeName(entry)}` });
-        } else if (entry.length < 1) {
-          issues.push({ path: ["plans", index], message: "string must contain at least 1 character(s)" });
-        }
-      });
-    }
-  }
-  const end_date = doc.end_date;
-  if (end_date !== undefined) {
-    if (typeof end_date !== "string") {
-      issues.push({ path: ["end_date"], message: `expected string, received ${typeName(end_date)}` });
-    } else if (!DATE_RE.test(end_date)) {
-      issues.push({ path: ["end_date"], message: `string must match ${DATE_RE}` });
-    }
-  }
-  if (issues.length > 0)
-    return { ok: false, issues };
-  return {
-    ok: true,
-    data: {
-      iteration_id: doc.iteration_id,
-      start_date: doc.start_date,
-      status,
-      iteration_base_branch: doc.iteration_base_branch,
-      target_branch: doc.target_branch,
-      ...plans !== undefined ? { plans } : {},
-      ...end_date !== undefined ? { end_date } : {}
-    }
-  };
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function violation(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
-function isPlainObject(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+function validateNonEmptyString(violations, value, field, missingCode, invalidCode) {
+  if (value === undefined) {
+    violations.push(violation("high", missingCode, `missing required field: ${field}`));
+  } else if (typeof value !== "string" || value.trim() === "") {
+    violations.push(violation("medium", invalidCode, `${field} must be a non-empty string`));
+  }
 }
-function validateCompassFrontmatter(doc) {
-  if (!isPlainObject(doc)) {
+var DATE_PART = String.raw`\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])`;
+var RFC3339_Z_RE = new RegExp(String.raw`^${DATE_PART}T\d{2}:\d{2}:\d{2}(\.\d+)?Z$`);
+var DATE_ONLY_RE = new RegExp(String.raw`^${DATE_PART}$`);
+function isValidClaimedAt(value) {
+  return typeof value === "string" && (RFC3339_Z_RE.test(value) || DATE_ONLY_RE.test(value));
+}
+function validateExecutionLease(lease) {
+  const violations = [];
+  if (!isPlainObject(lease)) {
     return {
       ok: false,
       violations: [
-        violation("medium", "COMPASS_INVALID_FIELD", "Compass frontmatter must be a YAML object with iteration_id / start_date / status / iteration_base_branch / target_branch (template: mstar-iteration §1.3)", "Fix the frontmatter of {ITERATION_DIR}/<iteration-id>/delivery-compass.md")
+        violation("high", "lease.execution-lease.invalid", "execution_lease must be an object — null and tombstone objects are invalid; writers delete the key on release")
       ]
     };
   }
-  const parsed = validateCompassShape(doc);
-  if (!parsed.ok) {
+  validateNonEmptyString(violations, lease.holder, "holder", "lease.execution-lease.missing-holder", "lease.execution-lease.invalid-holder");
+  if (lease.claimed_at === undefined) {
+    violations.push(violation("high", "lease.execution-lease.missing-claimed-at", "missing required field: claimed_at"));
+  } else if (!isValidClaimedAt(lease.claimed_at)) {
+    violations.push(violation("medium", "lease.execution-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T02:30:00Z) or a YYYY-MM-DD date"));
+  }
+  if (lease.worktree_path === undefined) {
+    violations.push(violation("high", "lease.execution-lease.missing-worktree-path", "missing required field: worktree_path"));
+  } else if (typeof lease.worktree_path !== "string" || lease.worktree_path.trim() === "") {
+    violations.push(violation("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be a non-empty string"));
+  } else if (!isAbsolute2(lease.worktree_path)) {
+    violations.push(violation("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be an absolute path — it identifies the dedicated feature-worktree root (a Git checkout distinct from the main worktree and the integration worktree)"));
+  }
+  validateNonEmptyString(violations, lease.working_branch, "working_branch", "lease.execution-lease.missing-working-branch", "lease.execution-lease.invalid-working-branch");
+  if (lease.session_label !== undefined && typeof lease.session_label !== "string") {
+    violations.push(violation("medium", "lease.execution-lease.invalid-session-label", "session_label must be a string (display only — never used for ownership comparison)"));
+  }
+  return { ok: violations.length === 0, violations };
+}
+function validateIntegrationMergeLease(lease) {
+  const violations = [];
+  if (!isPlainObject(lease)) {
     return {
       ok: false,
-      violations: parsed.issues.map((issue) => {
-        const field = issue.path.join(".") || "(root)";
-        return violation("medium", "COMPASS_INVALID_FIELD", `Compass frontmatter field '${field}' is invalid: ${issue.message}`, `Fix '${field}' in {ITERATION_DIR}/<iteration-id>/delivery-compass.md frontmatter (template: mstar-iteration §1.3)`);
-      })
+      violations: [
+        violation("high", "lease.merge-lease.invalid", "integration_merge_lease must be an object — absent means unclaimed; null and tombstone objects are invalid; writers delete the key on release")
+      ]
     };
   }
-  const violations = [];
-  const { status, end_date } = parsed.data;
-  if (status === "completed" && end_date === undefined) {
-    violations.push(violation("high", "COMPASS_END_DATE_REQUIRED", "Compass frontmatter status is 'completed' but end_date is missing — end_date is required at iteration-close (mstar-iteration §3.4, template Fields guide)", "Add `end_date: YYYY-MM-DD` to the frontmatter"));
+  validateNonEmptyString(violations, lease.holder, "holder", "lease.merge-lease.missing-holder", "lease.merge-lease.invalid-holder");
+  if (lease.claimed_at === undefined) {
+    violations.push(violation("high", "lease.merge-lease.missing-claimed-at", "missing required field: claimed_at"));
+  } else if (!isValidClaimedAt(lease.claimed_at)) {
+    violations.push(violation("medium", "lease.merge-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T04:00:00Z) or a YYYY-MM-DD date"));
   }
-  if (status !== "completed" && end_date !== undefined) {
-    violations.push(violation("medium", "COMPASS_END_DATE_NOT_ALLOWED", `Compass frontmatter sets end_date while status is '${status}' — end_date is only written at iteration-close (mstar-iteration §3.4)`, "Remove end_date until iteration-close"));
+  validateNonEmptyString(violations, lease.plan_id, "plan_id", "lease.merge-lease.missing-plan-id", "lease.merge-lease.invalid-plan-id");
+  validateNonEmptyString(violations, lease.source_branch, "source_branch", "lease.merge-lease.missing-source-branch", "lease.merge-lease.invalid-source-branch");
+  validateNonEmptyString(violations, lease.target_branch, "target_branch", "lease.merge-lease.missing-target-branch", "lease.merge-lease.invalid-target-branch");
+  if (lease.session_label !== undefined && typeof lease.session_label !== "string") {
+    violations.push(violation("medium", "lease.merge-lease.invalid-session-label", "session_label must be a string (display only — never used for ownership comparison)"));
   }
   return { ok: violations.length === 0, violations };
 }
-function registeredPlanIds(compassDoc) {
-  if (!Array.isArray(compassDoc.plans))
-    return [];
-  return compassDoc.plans.filter((plan) => typeof plan === "string" && plan.length > 0);
+function planExecutionLeaseLocations(row) {
+  return { row: row.execution_lease };
 }
-function findPlanRow(snapshotDoc, planId) {
-  if (!Array.isArray(snapshotDoc.plans))
-    return null;
-  for (const row of snapshotDoc.plans) {
-    if (!isPlainObject(row))
-      continue;
-    const rowId = typeof row.id === "string" ? row.id : typeof row.plan_id === "string" ? row.plan_id : null;
-    if (rowId === planId)
-      return row;
+function verifyPlanExecutionLease(row, planId) {
+  const { row: rowLease } = planExecutionLeaseLocations(row);
+  const lease = rowLease;
+  if (lease === undefined) {
+    if (row.status === "InProgress") {
+      return {
+        ok: false,
+        violations: [
+          violation("high", "lease.verify.orphan", "plan is InProgress without an execution_lease — orphan: STOP, no writable dispatch until recovery (status-and-residuals.md § Orphan recovery)")
+        ]
+      };
+    }
+    return {
+      ok: false,
+      violations: [
+        violation("high", "lease.verify.missing", `plan ${planId} has no execution_lease at the SSOT location plans[].execution_lease`)
+      ]
+    };
   }
-  return null;
-}
-function entryPlansAllDone(snapshotDoc, registered) {
   const violations = [];
-  if (registered.length === 0) {
-    violations.push(violation("medium", "COMPASS_NO_PLANS", "Compass frontmatter registers no plans — the all-plans-Done transition cannot be verified (mstar-iteration §1.3 / Phase transition gates)", "List the iteration's plan ids in the compass frontmatter `plans`"));
-    return violations;
-  }
-  for (const planId of registered) {
-    const row = findPlanRow(snapshotDoc, planId);
-    if (row === null) {
-      violations.push(violation("high", "PLAN_NOT_IN_STATUS", `Plan '${planId}' is registered in the compass frontmatter but has no row in the workflow snapshot plans[] (mstar-iteration §3.1 entry item 1)`, "Add the plan row to {HARNESS_DIR}/workflows/<id>/snapshot.json"));
+  violations.push(...validateExecutionLease(lease).violations);
+  return { ok: violations.length === 0, violations, lease };
+}
+var heldLockDirs = new AsyncLocalStorage;
+var BRANCH_FORMS_HINT = '"Working branch: <existing>" | "Working branch: create <new> from <base>" | "Branch policy: direct on <branch> — <reason>"';
+var REQUIRED_FIELDS = [
+  { key: "executeAs", label: "Execute as", code: "execute-as" },
+  { key: "delegation", label: "Delegation", code: "delegation" },
+  { key: "taskCategory", label: "Task category", code: "task-category" }
+];
+function violation2(severity, code, message, fix) {
+  return { ok: false, severity, code, message, fix };
+}
+function parseAssignmentFields(assignmentText) {
+  const fields = {};
+  for (const line of assignmentText.split(/\r?\n/)) {
+    const match = line.match(/^[ \t]*(?:[-*][ \t]+)?\*\*\s*([^*:]+?)\s*\*\*\s*:\s*(.*)$/) ?? line.match(/^[ \t]*(?:[-*][ \t]+)?([A-Za-z][A-Za-z -]*?)\s*:\s*(.*)$/);
+    if (!match)
+      continue;
+    const label = match[1].trim();
+    const value = match[2].trim();
+    const known = REQUIRED_FIELDS.find((f) => f.label === label);
+    if (known) {
+      fields[known.key] = value;
       continue;
     }
-    if (row.status !== PLAN_STATUS_DONE) {
-      violations.push(violation("high", "PLAN_NOT_DONE", `Plan '${planId}' status is ${JSON.stringify(row.status)} in the workflow snapshot — all compass-registered plans must be 'Done' before iteration-close (mstar-iteration §3.1 entry item 1)`));
-    }
+    if (label === "Working branch")
+      fields.workingBranch = value;
+    else if (label === "Branch policy")
+      fields.branchPolicy = value;
   }
-  return violations;
+  return fields;
 }
-function entryFrontmatterComplete(compassDoc) {
-  return validateCompassFrontmatter(compassDoc).violations;
+var ASSIGNMENT_ENFORCEMENT_BOLD_RE = /^[ \t]*(?:[-*][ \t]+)?\*\*\s*Enforcement\s*\*\*\s*:\s*(.*)$/m;
+var ASSIGNMENT_ENFORCEMENT_PLAIN_RE = /^[ \t]*(?:[-*][ \t]+)?Enforcement\s*:\s*(.*)$/m;
+var COMPASS_ENFORCEMENT_RE = /^enforcement\s*:\s*(.*)$/m;
+function enforcementValue(raw) {
+  const value = raw.trim();
+  const unquoted = value.replace(/^(['"])(.*)\1$/, "$2");
+  return unquoted.trim().toLowerCase();
 }
-function exitFrontmatterClosed(compassDoc) {
-  const violations = [];
-  if (compassDoc.status !== "completed") {
-    violations.push(violation("high", "EXIT_STATUS_NOT_COMPLETED", `Compass frontmatter status must be 'completed' at close exit — current: ${JSON.stringify(compassDoc.status)} (mstar-iteration §3.4 / §3.5 exit item 4)`));
-  }
-  const endDate = compassDoc.end_date;
-  if (typeof endDate !== "string" || !DATE_RE.test(endDate)) {
-    violations.push(violation("high", "EXIT_END_DATE_REQUIRED", "Compass frontmatter end_date (YYYY-MM-DD) is required when closing (mstar-iteration §3.4 / §3.5 exit item 4)"));
-  }
-  return violations;
+var ASSIGNMENT_BODY_START_RE = /^(?:#{1,6}[ \t]+Task\b|-{3,}[ \t]*$|#[ \t])/m;
+function assignmentHeaderRegion(assignmentText) {
+  const marker = assignmentText.match(ASSIGNMENT_BODY_START_RE);
+  return marker !== null ? assignmentText.slice(0, marker.index) : assignmentText;
 }
-function exitBranchCheck(opts) {
-  const violations = [];
-  const { currentBranch, specIntegrationBranch } = opts;
-  if (currentBranch === undefined || specIntegrationBranch === undefined) {
-    violations.push(violation("medium", "EXIT_BRANCH_UNVERIFIABLE", "Cannot verify the current branch is spec_integration_branch — missing currentBranch / specIntegrationBranch probe inputs (mstar-iteration §3.5 exit item 5)"));
-  } else if (currentBranch !== specIntegrationBranch) {
-    violations.push(violation("high", "EXIT_BRANCH_MISMATCH", `Current branch '${currentBranch}' is not the spec_integration_branch '${specIntegrationBranch}' (mstar-iteration §3.5 exit item 5)`));
-  }
-  return violations;
+function parseEnforcementFlag(text) {
+  const bold = text.match(ASSIGNMENT_ENFORCEMENT_BOLD_RE);
+  if (bold !== null)
+    return { hard: enforcementValue(bold[1]) === "hard", source: "assignment" };
+  const plain = text.match(ASSIGNMENT_ENFORCEMENT_PLAIN_RE);
+  if (plain !== null)
+    return { hard: enforcementValue(plain[1]) === "hard", source: "assignment" };
+  const compass = text.match(COMPASS_ENFORCEMENT_RE);
+  if (compass !== null)
+    return { hard: enforcementValue(compass[1]) === "hard", source: "compass" };
+  return { hard: false, source: "none" };
 }
-function exitPrBaseCheck(compassDoc, opts) {
-  const violations = [];
-  const target = compassDoc.target_branch;
-  const { prBaseBranch } = opts;
-  if (prBaseBranch === undefined) {
-    violations.push(violation("medium", "EXIT_PR_BASE_UNVERIFIABLE", "Cannot verify the PR base — missing prBaseBranch probe input (mstar-iteration §3.5 exit item 6)"));
-  } else if (typeof target !== "string" || prBaseBranch !== target) {
-    violations.push(violation("high", "EXIT_PR_BASE_MISMATCH", `PR base '${prBaseBranch}' must equal the compass target_branch '${String(target)}' — not an undocumented branch (mstar-iteration §3.5 exit item 6)`));
-  }
-  return violations;
-}
-function evaluatePhaseGate(snapshotDoc, compassDoc, opts = {}) {
-  const registered = registeredPlanIds(compassDoc);
-  const entryViolations = [
-    ...entryPlansAllDone(snapshotDoc, registered),
-    ...entryFrontmatterComplete(compassDoc)
-  ];
-  const exitViolations = [
-    ...exitFrontmatterClosed(compassDoc),
-    ...exitBranchCheck(opts),
-    ...exitPrBaseCheck(compassDoc, opts)
-  ];
-  const allPlansDone = registered.length > 0 && registered.every((planId) => {
-    const row = findPlanRow(snapshotDoc, planId);
-    return row !== null && row.status === PLAN_STATUS_DONE;
-  });
-  const entry = { ok: entryViolations.length === 0, violations: entryViolations };
-  const exit = { ok: exitViolations.length === 0, violations: exitViolations };
-  let transition;
-  if (!allPlansDone)
-    transition = "phase-2-execute";
-  else if (entry.ok && exit.ok)
-    transition = "phase-4-pr-delivery";
-  else
-    transition = "phase-3-close";
-  const gateBlocking = allPlansDone ? [...entryViolations, ...exitViolations] : [];
-  return {
-    transition,
-    allPlansDone,
-    entry,
-    exit,
-    ok: gateBlocking.length === 0,
-    violations: gateBlocking
-  };
-}
-function parseCompassFrontmatter(filePath) {
-  return parseCompassFrontmatterText(readFileSync3(filePath, "utf8"), filePath);
-}
-function parseCompassFrontmatterText(content, filePath) {
-  const lines = content.split(/\r?\n/);
-  if (lines[0]?.trim() !== "---") {
-    throw new Error(`no YAML frontmatter fence in ${filePath} (expected first line "---")`);
-  }
-  const end = lines.indexOf("---", 1);
-  if (end === -1) {
-    throw new Error(`unterminated YAML frontmatter in ${filePath} (no closing "---")`);
-  }
-  const doc = {};
-  let listKey = null;
-  for (let i = 1;i < end; i += 1) {
-    const line = lines[i] ?? "";
-    if (!line.trim() || line.trim().startsWith("#"))
-      continue;
-    if (listKey !== null && /^\s*-\s+/.test(line)) {
-      const item = line.replace(/^\s*-\s+/, "").trim().replace(/^["']|["']$/g, "");
-      if (!Array.isArray(doc[listKey]))
-        doc[listKey] = [];
-      doc[listKey].push(item);
-      continue;
-    }
-    listKey = null;
-    const kv = line.match(/^([A-Za-z_][A-Za-z0-9_-]*):\s*(.*)$/);
-    if (!kv) {
-      throw new Error(`unsupported frontmatter line in ${filePath}: ${JSON.stringify(line)}`);
-    }
-    const value = kv[2].trim();
-    doc[kv[1]] = value === "" ? null : /^\[.*\]$/.test(value) ? parseFlowArray(value, filePath) : value.replace(/^["']|["']$/g, "");
-    listKey = value === "" ? kv[1] : null;
-  }
-  return doc;
-}
-function parseFlowArray(raw, filePath) {
-  const inner = raw.slice(1, -1);
-  if (/[[\]]/.test(inner)) {
-    throw new Error(`nested flow-style array in ${filePath}: ${JSON.stringify(raw)} — only flat scalar items are supported (e.g. [a, b])`);
-  }
-  let quote = null;
-  for (const ch of inner) {
-    if (ch === '"' || ch === "'") {
-      if (quote === null)
-        quote = ch;
-      else if (quote === ch)
-        quote = null;
-    } else if (ch === "," && quote !== null) {
-      throw new Error(`ambiguous flow-style array in ${filePath}: ${JSON.stringify(raw)} — quoted item containing comma cannot be split unambiguously (flat scalar items only)`);
-    }
-  }
-  if (quote !== null) {
-    throw new Error(`unterminated ${quote} quote in flow-style array in ${filePath}: ${JSON.stringify(raw)}`);
-  }
-  const items = [];
-  for (const part of inner.split(",")) {
-    const item = part.trim().replace(/^["']|["']$/g, "");
-    if (item === "")
-      continue;
-    items.push(item);
-  }
-  return items;
-}
-function isPlainObject2(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function violation2(severity, code, message, fix) {
-  return { ok: false, severity, code, message, fix };
-}
-function validateNonEmptyString(violations, value, field, missingCode, invalidCode) {
-  if (value === undefined) {
-    violations.push(violation2("high", missingCode, `missing required field: ${field}`));
-  } else if (typeof value !== "string" || value.trim() === "") {
-    violations.push(violation2("medium", invalidCode, `${field} must be a non-empty string`));
-  }
-}
-var DATE_PART = String.raw`\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])`;
-var RFC3339_Z_RE = new RegExp(String.raw`^${DATE_PART}T\d{2}:\d{2}:\d{2}(\.\d+)?Z$`);
-var DATE_ONLY_RE = new RegExp(String.raw`^${DATE_PART}$`);
-function isValidClaimedAt(value) {
-  return typeof value === "string" && (RFC3339_Z_RE.test(value) || DATE_ONLY_RE.test(value));
-}
-function validateExecutionLease(lease) {
-  const violations = [];
-  if (!isPlainObject2(lease)) {
-    return {
-      ok: false,
-      violations: [
-        violation2("high", "lease.execution-lease.invalid", "execution_lease must be an object — null and tombstone objects are invalid; writers delete the key on release")
-      ]
-    };
-  }
-  validateNonEmptyString(violations, lease.holder, "holder", "lease.execution-lease.missing-holder", "lease.execution-lease.invalid-holder");
-  if (lease.claimed_at === undefined) {
-    violations.push(violation2("high", "lease.execution-lease.missing-claimed-at", "missing required field: claimed_at"));
-  } else if (!isValidClaimedAt(lease.claimed_at)) {
-    violations.push(violation2("medium", "lease.execution-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T02:30:00Z) or a YYYY-MM-DD date"));
-  }
-  if (lease.worktree_path === undefined) {
-    violations.push(violation2("high", "lease.execution-lease.missing-worktree-path", "missing required field: worktree_path"));
-  } else if (typeof lease.worktree_path !== "string" || lease.worktree_path.trim() === "") {
-    violations.push(violation2("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be a non-empty string"));
-  } else if (!isAbsolute2(lease.worktree_path)) {
-    violations.push(violation2("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be an absolute path — it identifies the dedicated feature-worktree root (and MUST differ from metadata.control_worktree_path)"));
-  }
-  validateNonEmptyString(violations, lease.working_branch, "working_branch", "lease.execution-lease.missing-working-branch", "lease.execution-lease.invalid-working-branch");
-  if (lease.session_label !== undefined && typeof lease.session_label !== "string") {
-    violations.push(violation2("medium", "lease.execution-lease.invalid-session-label", "session_label must be a string (display only — never used for ownership comparison)"));
-  }
-  return { ok: violations.length === 0, violations };
-}
-function validateIntegrationMergeLease(lease) {
-  const violations = [];
-  if (!isPlainObject2(lease)) {
-    return {
-      ok: false,
-      violations: [
-        violation2("high", "lease.merge-lease.invalid", "integration_merge_lease must be an object — absent means unclaimed; null and tombstone objects are invalid; writers delete the key on release")
-      ]
-    };
-  }
-  validateNonEmptyString(violations, lease.holder, "holder", "lease.merge-lease.missing-holder", "lease.merge-lease.invalid-holder");
-  if (lease.claimed_at === undefined) {
-    violations.push(violation2("high", "lease.merge-lease.missing-claimed-at", "missing required field: claimed_at"));
-  } else if (!isValidClaimedAt(lease.claimed_at)) {
-    violations.push(violation2("medium", "lease.merge-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T04:00:00Z) or a YYYY-MM-DD date"));
-  }
-  validateNonEmptyString(violations, lease.plan_id, "plan_id", "lease.merge-lease.missing-plan-id", "lease.merge-lease.invalid-plan-id");
-  validateNonEmptyString(violations, lease.source_branch, "source_branch", "lease.merge-lease.missing-source-branch", "lease.merge-lease.invalid-source-branch");
-  validateNonEmptyString(violations, lease.target_branch, "target_branch", "lease.merge-lease.missing-target-branch", "lease.merge-lease.invalid-target-branch");
-  if (lease.session_label !== undefined && typeof lease.session_label !== "string") {
-    violations.push(violation2("medium", "lease.merge-lease.invalid-session-label", "session_label must be a string (display only — never used for ownership comparison)"));
-  }
-  return { ok: violations.length === 0, violations };
-}
-function planExecutionLeaseLocations(row) {
-  return { row: row.execution_lease };
-}
-function verifyPlanExecutionLease(row, planId) {
-  const { row: rowLease } = planExecutionLeaseLocations(row);
-  const lease = rowLease;
-  if (lease === undefined) {
-    if (row.status === "InProgress") {
-      return {
-        ok: false,
-        violations: [
-          violation2("high", "lease.verify.orphan", "plan is InProgress without an execution_lease — orphan: STOP, no writable dispatch until recovery (status-and-residuals.md § Orphan recovery)")
-        ]
-      };
-    }
-    return {
-      ok: false,
-      violations: [
-        violation2("high", "lease.verify.missing", `plan ${planId} has no execution_lease at the SSOT location plans[].execution_lease`)
-      ]
-    };
-  }
-  const violations = [];
-  violations.push(...validateExecutionLease(lease).violations);
-  return { ok: violations.length === 0, violations, lease };
-}
-var heldLockDirs = new AsyncLocalStorage;
-var BRANCH_FORMS_HINT = '"Working branch: <existing>" | "Working branch: create <new> from <base>" | "Branch policy: direct on <branch> — <reason>"';
-var REQUIRED_FIELDS = [
-  { key: "executeAs", label: "Execute as", code: "execute-as" },
-  { key: "delegation", label: "Delegation", code: "delegation" },
-  { key: "taskCategory", label: "Task category", code: "task-category" }
-];
-function violation3(severity, code, message, fix) {
-  return { ok: false, severity, code, message, fix };
-}
-function parseAssignmentFields(assignmentText) {
-  const fields = {};
-  for (const line of assignmentText.split(/\r?\n/)) {
-    const match = line.match(/^[ \t]*(?:[-*][ \t]+)?\*\*\s*([^*:]+?)\s*\*\*\s*:\s*(.*)$/) ?? line.match(/^[ \t]*(?:[-*][ \t]+)?([A-Za-z][A-Za-z -]*?)\s*:\s*(.*)$/);
-    if (!match)
-      continue;
-    const label = match[1].trim();
-    const value = match[2].trim();
-    const known = REQUIRED_FIELDS.find((f) => f.label === label);
-    if (known) {
-      fields[known.key] = value;
-      continue;
-    }
-    if (label === "Working branch")
-      fields.workingBranch = value;
-    else if (label === "Branch policy")
-      fields.branchPolicy = value;
-  }
-  return fields;
-}
-var ASSIGNMENT_ENFORCEMENT_BOLD_RE = /^[ \t]*(?:[-*][ \t]+)?\*\*\s*Enforcement\s*\*\*\s*:\s*(.*)$/m;
-var ASSIGNMENT_ENFORCEMENT_PLAIN_RE = /^[ \t]*(?:[-*][ \t]+)?Enforcement\s*:\s*(.*)$/m;
-var COMPASS_ENFORCEMENT_RE = /^enforcement\s*:\s*(.*)$/m;
-function enforcementValue(raw) {
-  const value = raw.trim();
-  const unquoted = value.replace(/^(['"])(.*)\1$/, "$2");
-  return unquoted.trim().toLowerCase();
-}
-var ASSIGNMENT_BODY_START_RE = /^(?:#{1,6}[ \t]+Task\b|-{3,}[ \t]*$|#[ \t])/m;
-function assignmentHeaderRegion(assignmentText) {
-  const marker = assignmentText.match(ASSIGNMENT_BODY_START_RE);
-  return marker !== null ? assignmentText.slice(0, marker.index) : assignmentText;
-}
-function parseEnforcementFlag(text) {
-  const bold = text.match(ASSIGNMENT_ENFORCEMENT_BOLD_RE);
-  if (bold !== null)
-    return { hard: enforcementValue(bold[1]) === "hard", source: "assignment" };
-  const plain = text.match(ASSIGNMENT_ENFORCEMENT_PLAIN_RE);
-  if (plain !== null)
-    return { hard: enforcementValue(plain[1]) === "hard", source: "assignment" };
-  const compass = text.match(COMPASS_ENFORCEMENT_RE);
-  if (compass !== null)
-    return { hard: enforcementValue(compass[1]) === "hard", source: "compass" };
-  return { hard: false, source: "none" };
-}
-function requireField(violations, value, label, code) {
-  if (value === undefined) {
-    const v = violation3("high", `assignment.field.missing-${code}`, `missing required Assignment field: ${label}`, `add "**${label}**: <value>" to the Assignment`);
-    v.aliases = [`assignment.presence.missing-${code}`];
-    violations.push(v);
-  } else if (value === "") {
-    const v = violation3("high", `assignment.field.invalid-${code}`, `${label} must be non-empty`, `fill in "**${label}**: <value>"`);
-    v.aliases = [`assignment.presence.missing-${code}`];
-    violations.push(v);
+function requireField(violations, value, label, code) {
+  if (value === undefined) {
+    const v = violation2("high", `assignment.field.missing-${code}`, `missing required Assignment field: ${label}`, `add "**${label}**: <value>" to the Assignment`);
+    v.aliases = [`assignment.presence.missing-${code}`];
+    violations.push(v);
+  } else if (value === "") {
+    const v = violation2("high", `assignment.field.invalid-${code}`, `${label} must be non-empty`, `fill in "**${label}**: <value>"`);
+    v.aliases = [`assignment.presence.missing-${code}`];
+    violations.push(v);
   }
 }
 function parseWorkingBranchValue(value) {
@@ -1787,20 +1514,20 @@ function validateAssignmentFields(assignmentText, opts = {}) {
     const formCount = Number(workingPresent) + Number(policyPresent);
     const forms = parseAssignmentBranchForms(assignmentText);
     if (formCount === 0) {
-      violations.push(violation3("high", "assignment.field.branch-missing", "writable assignment must contain exactly one branch form", `add exactly one of: ${BRANCH_FORMS_HINT}`));
+      violations.push(violation2("high", "assignment.field.branch-missing", "writable assignment must contain exactly one branch form", `add exactly one of: ${BRANCH_FORMS_HINT}`));
     } else if (formCount > 1) {
-      violations.push(violation3("high", "assignment.field.branch-multiple", `writable assignment contains ${formCount} branch forms (Working branch + Branch policy) — exactly one required`, `keep exactly one of: ${BRANCH_FORMS_HINT}`));
+      violations.push(violation2("high", "assignment.field.branch-multiple", `writable assignment contains ${formCount} branch forms (Working branch + Branch policy) — exactly one required`, `keep exactly one of: ${BRANCH_FORMS_HINT}`));
     } else if (workingPresent) {
       const create = forms.createForm;
       if (create !== undefined && (create.base === undefined || create.base.trim() === "" || create.name.trim() === "")) {
-        violations.push(violation3("high", "assignment.field.branch-missing-base", `create-form Working branch is incomplete: "${fields.workingBranch}" (expected "create <new-branch> from <base>")`, "write both the new branch name and the ancestor branch after `from` (main / existing feature branch / remote-tracking branch / `current`)"));
+        violations.push(violation2("high", "assignment.field.branch-missing-base", `create-form Working branch is incomplete: "${fields.workingBranch}" (expected "create <new-branch> from <base>")`, "write both the new branch name and the ancestor branch after `from` (main / existing feature branch / remote-tracking branch / `current`)"));
       }
     } else if (policyPresent) {
       const direct = forms.directOn;
       if (direct === undefined) {
-        violations.push(violation3("high", "assignment.field.branch-policy-missing-branch", `unparseable Branch policy: "${fields.branchPolicy}" (expected "direct on <branch> — <reason>")`, "start the field with `direct on <branch>`"));
+        violations.push(violation2("high", "assignment.field.branch-policy-missing-branch", `unparseable Branch policy: "${fields.branchPolicy}" (expected "direct on <branch> — <reason>")`, "start the field with `direct on <branch>`"));
       } else if (direct.reason === "") {
-        violations.push(violation3("high", "assignment.field.branch-policy-missing-reason", `Branch policy "direct on ${direct.branch}" is missing the reason`, 'append "— <reason>" after the branch name'));
+        violations.push(violation2("high", "assignment.field.branch-policy-missing-reason", `Branch policy "direct on ${direct.branch}" is missing the reason`, 'append "— <reason>" after the branch name'));
       }
     }
   }
@@ -1811,7 +1538,7 @@ function assertDefaultBranchProtected(branch, opts = {}) {
   const violations = [];
   const normalized = branch.trim();
   if (normalized !== "" && defaultBranches.includes(normalized) && opts.directOnException !== true) {
-    violations.push(violation3("high", "dispatch.default-branch.protected", `writable work on default protected branch "${normalized}" requires an explicit direct-on exception`, `add "Branch policy: direct on ${normalized} — <reason>" to the Assignment, or use a feature branch`));
+    violations.push(violation2("high", "dispatch.default-branch.protected", `writable work on default protected branch "${normalized}" requires an explicit direct-on exception`, `add "Branch policy: direct on ${normalized} — <reason>" to the Assignment, or use a feature branch`));
   }
   return { ok: violations.length === 0, violations };
 }
@@ -1820,7 +1547,7 @@ function executionModeToN(executionMode, opts = {}) {
   const mode = executionMode.trim().toLowerCase().split(/\s+/)[0] ?? "";
   let n;
   if (mode === "") {
-    violations.push(violation3("high", "dispatch.execution-mode.missing", "missing required Assignment field: Execution mode", 'add "**Execution mode**: sdd | inline | targeted"'));
+    violations.push(violation2("high", "dispatch.execution-mode.missing", "missing required Assignment field: Execution mode", 'add "**Execution mode**: sdd | inline | targeted"'));
   } else if (mode === "sdd") {
     n = 3;
   } else if (mode === "inline") {
@@ -1828,14 +1555,14 @@ function executionModeToN(executionMode, opts = {}) {
   } else if (mode === "targeted") {
     const seats = [...new Set((opts.seats ?? []).map((s) => s.trim()).filter((s) => s !== ""))];
     if (seats.length === 0) {
-      violations.push(violation3("high", "dispatch.execution-mode.missing-seats", 'execution mode "targeted" requires listed reviewer seats', 'add "QC re-review: targeted — reviewers: <role-id>, …" to the Assignment and pass the seats'));
+      violations.push(violation2("high", "dispatch.execution-mode.missing-seats", 'execution mode "targeted" requires listed reviewer seats', 'add "QC re-review: targeted — reviewers: <role-id>, …" to the Assignment and pass the seats'));
     } else if (seats.length > 3) {
-      violations.push(violation3("high", "dispatch.execution-mode.too-many-seats", `execution mode "targeted" lists ${seats.length} reviewer seats — at most 3 (targeted re-review seats are the tri seats, N = 1–3)`, "list at most three reviewer seats for the targeted re-review"));
+      violations.push(violation2("high", "dispatch.execution-mode.too-many-seats", `execution mode "targeted" lists ${seats.length} reviewer seats — at most 3 (targeted re-review seats are the tri seats, N = 1–3)`, "list at most three reviewer seats for the targeted re-review"));
     } else {
       n = seats.length;
     }
   } else {
-    violations.push(violation3("high", "dispatch.execution-mode.unknown", `unknown execution mode "${executionMode.trim()}" (expected sdd | inline | targeted)`, "fix the Execution mode field"));
+    violations.push(violation2("high", "dispatch.execution-mode.unknown", `unknown execution mode "${executionMode.trim()}" (expected sdd | inline | targeted)`, "fix the Execution mode field"));
   }
   return n === undefined ? { ok: false, violations } : { ok: true, violations, n };
 }
@@ -1883,7 +1610,7 @@ function antiRecursionPrecheck(subagentType, executeAs) {
     return {
       ok: false,
       violations: [
-        violation3("critical", "dispatch.anti-recursion.empty-binding", `empty caller role binding — the host cannot report which agent is calling, so anti-recursion cannot be proven (a dispatch could silently recurse)`, "declare the dispatching agent's own role binding (dsh Config `dispatchBinding`) before dispatching")
+        violation2("critical", "dispatch.anti-recursion.empty-binding", `empty caller role binding — the host cannot report which agent is calling, so anti-recursion cannot be proven (a dispatch could silently recurse)`, "declare the dispatching agent's own role binding (dsh Config `dispatchBinding`) before dispatching")
       ]
     };
   }
@@ -1891,7 +1618,7 @@ function antiRecursionPrecheck(subagentType, executeAs) {
     return {
       ok: false,
       violations: [
-        violation3("critical", "dispatch.anti-recursion.self-type", `recursive dispatch refused: role binding "${subagentType}" equals Execute as "${executeAs}" (leaf executors must not re-invoke their own role)`, "complete the work in this session, or return Blocked to project-manager")
+        violation2("critical", "dispatch.anti-recursion.self-type", `recursive dispatch refused: role binding "${subagentType}" equals Execute as "${executeAs}" (leaf executors must not re-invoke their own role)`, "complete the work in this session, or return Blocked to project-manager")
       ]
     };
   }
@@ -1901,45 +1628,50 @@ var WORKFLOW_SNAPSHOT_FILE = "snapshot.json";
 var WORKFLOW_LIFECYCLE_STATUSES = ["running", "paused", "completed", "failed", "stopped"];
 var WORKFLOW_TERMINAL_STATUSES = ["completed", "failed", "stopped"];
 var WORKFLOW_LIFECYCLE_TYPES = ["plan", "iteration"];
-function isPlainObject3(value) {
+function isPlainObject2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function violation4(severity, code, message, fix) {
+function violation3(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function validateNonEmptyString2(violations, value, field, missingCode, invalidCode) {
   if (value === undefined) {
-    violations.push(violation4("high", missingCode, `missing required field: ${field}`));
+    violations.push(violation3("high", missingCode, `missing required field: ${field}`));
   } else if (typeof value !== "string" || value.trim() === "") {
-    violations.push(violation4("medium", invalidCode, `${field} must be a non-empty string`));
+    violations.push(violation3("medium", invalidCode, `${field} must be a non-empty string`));
+  }
+}
+function validateWorktreePathValue(violations, value, field) {
+  if (typeof value !== "string" || value.trim() === "" || !isAbsolute4(value)) {
+    violations.push(violation3("high", "workflow.snapshot.invalid-integration-worktree-path", `${field} must be a non-empty absolute path — got ${JSON.stringify(value)}`, "record the absolute integration checkout path (integration_worktree_path)"));
   }
 }
 function validateWorkflowSnapshot(doc) {
   const violations = [];
-  if (!isPlainObject3(doc)) {
+  if (!isPlainObject2(doc)) {
     return {
       ok: false,
-      violations: [violation4("high", "workflow.snapshot.invalid", "workflow snapshot must be an object")]
+      violations: [violation3("high", "workflow.snapshot.invalid", "workflow snapshot must be an object")]
     };
   }
   if (doc.schema_version === undefined) {
-    violations.push(violation4("high", "workflow.snapshot.missing-schema-version", "missing required field: schema_version"));
+    violations.push(violation3("high", "workflow.snapshot.missing-schema-version", "missing required field: schema_version"));
   } else if (doc.schema_version !== 1) {
-    violations.push(violation4("high", "workflow.snapshot.invalid-schema-version", `schema_version must be 1 — got ${JSON.stringify(doc.schema_version)} (version is reserved for the root file discriminator)`));
+    violations.push(violation3("high", "workflow.snapshot.invalid-schema-version", `schema_version must be 1 — got ${JSON.stringify(doc.schema_version)} (version is reserved for the root file discriminator)`));
   }
   if (doc.version !== undefined) {
-    violations.push(violation4("medium", "workflow.snapshot.reserved-version", `top-level version is reserved for the root status.json discriminator — snapshots use schema_version; remove the version key (got ${JSON.stringify(doc.version)})`, "remove the version key from the snapshot"));
+    violations.push(violation3("medium", "workflow.snapshot.reserved-version", `top-level version is reserved for the root status.json discriminator — snapshots use schema_version; remove the version key (got ${JSON.stringify(doc.version)})`, "remove the version key from the snapshot"));
   }
   validateNonEmptyString2(violations, doc.id, "id", "workflow.snapshot.missing-id", "workflow.snapshot.invalid-id");
   if (doc.type === undefined) {
-    violations.push(violation4("high", "workflow.snapshot.missing-type", "missing required field: type"));
+    violations.push(violation3("high", "workflow.snapshot.missing-type", "missing required field: type"));
   } else if (typeof doc.type !== "string" || !WORKFLOW_LIFECYCLE_TYPES.includes(doc.type)) {
-    violations.push(violation4("medium", "workflow.snapshot.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES.join(" | ")} — got ${JSON.stringify(doc.type)}`));
+    violations.push(violation3("medium", "workflow.snapshot.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES.join(" | ")} — got ${JSON.stringify(doc.type)}`));
   }
   if (doc.status === undefined) {
-    violations.push(violation4("high", "workflow.snapshot.missing-status", "missing required field: status"));
+    violations.push(violation3("high", "workflow.snapshot.missing-status", "missing required field: status"));
   } else if (typeof doc.status !== "string" || !WORKFLOW_LIFECYCLE_STATUSES.includes(doc.status)) {
-    violations.push(violation4("medium", "workflow.snapshot.invalid-status", `status must be one of ${WORKFLOW_LIFECYCLE_STATUSES.join(" | ")} — got ${JSON.stringify(doc.status)}`));
+    violations.push(violation3("medium", "workflow.snapshot.invalid-status", `status must be one of ${WORKFLOW_LIFECYCLE_STATUSES.join(" | ")} — got ${JSON.stringify(doc.status)}`));
   }
   validateNonEmptyString2(violations, doc.started_at, "started_at", "workflow.snapshot.missing-started-at", "workflow.snapshot.invalid-started-at");
   validateNonEmptyString2(violations, doc.updated_at, "updated_at", "workflow.snapshot.missing-updated-at", "workflow.snapshot.invalid-updated-at");
@@ -1947,44 +1679,54 @@ function validateWorkflowSnapshot(doc) {
     validateNonEmptyString2(violations, doc.ended_at, "ended_at", "workflow.snapshot.missing-ended-at", "workflow.snapshot.invalid-ended-at");
   }
   if (doc.phase !== undefined && typeof doc.phase !== "string") {
-    violations.push(violation4("medium", "workflow.snapshot.invalid-phase", "phase must be a string (free-form phase machine label)"));
+    violations.push(violation3("medium", "workflow.snapshot.invalid-phase", "phase must be a string (free-form phase machine label)"));
   }
   if (doc.plans === undefined) {
-    violations.push(violation4("high", "workflow.snapshot.missing-plans", "missing required field: plans"));
+    violations.push(violation3("high", "workflow.snapshot.missing-plans", "missing required field: plans"));
   } else if (!Array.isArray(doc.plans)) {
-    violations.push(violation4("high", "workflow.snapshot.invalid-plans", "plans must be an array of legacy plan rows"));
+    violations.push(violation3("high", "workflow.snapshot.invalid-plans", "plans must be an array of legacy plan rows"));
   } else {
     for (const row of doc.plans) {
       violations.push(...validatePlanRow(row).violations);
-      if (isPlainObject3(row) && row.execution_lease !== undefined) {
+      if (isPlainObject2(row) && row.execution_lease !== undefined) {
         violations.push(...validateExecutionLease(row.execution_lease).violations);
       }
     }
   }
   if (doc.execution_policy !== undefined) {
-    if (!isPlainObject3(doc.execution_policy)) {
-      violations.push(violation4("medium", "workflow.snapshot.invalid-execution-policy", "execution_policy must be an object"));
+    if (!isPlainObject2(doc.execution_policy)) {
+      violations.push(violation3("medium", "workflow.snapshot.invalid-execution-policy", "execution_policy must be an object"));
     }
   }
   if (doc.integration_merge_lease !== undefined) {
     violations.push(...validateIntegrationMergeLease(doc.integration_merge_lease).violations);
   }
   if (doc.branch !== undefined) {
-    if (!isPlainObject3(doc.branch)) {
-      violations.push(violation4("medium", "workflow.snapshot.invalid-branch", "branch must be an object"));
+    if (!isPlainObject2(doc.branch)) {
+      violations.push(violation3("medium", "workflow.snapshot.invalid-branch", "branch must be an object"));
     } else {
       for (const key of ["base", "integration", "target"]) {
         if (doc.branch[key] !== undefined && (typeof doc.branch[key] !== "string" || doc.branch[key].trim() === "")) {
-          violations.push(violation4("medium", "workflow.snapshot.invalid-branch", `branch.${key} must be a non-empty string`));
+          violations.push(violation3("medium", "workflow.snapshot.invalid-branch", `branch.${key} must be a non-empty string`));
         }
       }
     }
   }
-  if (doc.control_worktree_path !== undefined) {
-    validateNonEmptyString2(violations, doc.control_worktree_path, "control_worktree_path", "workflow.snapshot.missing-control-worktree-path", "workflow.snapshot.invalid-control-worktree-path");
+  const legacyWorktreePath = doc.control_worktree_path;
+  const canonicalWorktreePath = doc.integration_worktree_path;
+  if (legacyWorktreePath !== undefined && canonicalWorktreePath !== undefined) {
+    violations.push(violation3("high", "workflow.snapshot.conflicting-worktree-paths", "both integration_worktree_path and the legacy control_worktree_path key are present — the canonical snapshot carries only integration_worktree_path (refused even when the values are equal)", "remove the legacy control_worktree_path key"));
+  } else {
+    if (canonicalWorktreePath !== undefined) {
+      validateWorktreePathValue(violations, canonicalWorktreePath, "integration_worktree_path");
+    }
+    if (legacyWorktreePath !== undefined) {
+      violations.push(violation3("medium", "workflow.snapshot.legacy-control-worktree-path", "legacy control_worktree_path is present — the canonical reader normalizes it to integration_worktree_path in memory; migrate on the next authorized write (writers emit only the canonical key)", "rename control_worktree_path to integration_worktree_path on the next authorized write"));
+      validateWorktreePathValue(violations, legacyWorktreePath, "control_worktree_path (legacy alias)");
+    }
   }
-  if (doc.legacy_metadata !== undefined && !isPlainObject3(doc.legacy_metadata)) {
-    violations.push(violation4("medium", "workflow.snapshot.invalid-legacy-metadata", "legacy_metadata must be an object"));
+  if (doc.legacy_metadata !== undefined && !isPlainObject2(doc.legacy_metadata)) {
+    violations.push(violation3("medium", "workflow.snapshot.invalid-legacy-metadata", "legacy_metadata must be an object"));
   }
   if (doc.compass_ref !== undefined) {
     validateNonEmptyString2(violations, doc.compass_ref, "compass_ref", "workflow.snapshot.missing-compass-ref", "workflow.snapshot.invalid-compass-ref");
@@ -1992,30 +1734,73 @@ function validateWorkflowSnapshot(doc) {
   const terminal = typeof doc.status === "string" && WORKFLOW_TERMINAL_STATUSES.includes(doc.status);
   if (terminal) {
     if (doc.ended_at === undefined) {
-      violations.push(violation4("high", "workflow.snapshot.missing-ended-at", `terminal status ${JSON.stringify(doc.status)} requires ended_at — a terminal snapshot must record when the lifecycle ended`));
+      violations.push(violation3("high", "workflow.snapshot.missing-ended-at", `terminal status ${JSON.stringify(doc.status)} requires ended_at — a terminal snapshot must record when the lifecycle ended`));
     }
     if (Array.isArray(doc.plans)) {
       for (const row of doc.plans) {
-        if (isPlainObject3(row) && row.execution_lease !== undefined) {
-          violations.push(violation4("high", "workflow.snapshot.terminal-dangling-execution-lease", `terminal snapshot must not carry a row execution_lease (dangling lease) — release every lease before the lifecycle ends`));
+        if (isPlainObject2(row) && row.execution_lease !== undefined) {
+          violations.push(violation3("high", "workflow.snapshot.terminal-dangling-execution-lease", `terminal snapshot must not carry a row execution_lease (dangling lease) — release every lease before the lifecycle ends`));
         }
       }
     }
     if (doc.integration_merge_lease !== undefined) {
-      violations.push(violation4("high", "workflow.snapshot.terminal-dangling-merge-lease", "terminal snapshot must not carry integration_merge_lease (dangling lease) — release the merge lease before the lifecycle ends"));
+      violations.push(violation3("high", "workflow.snapshot.terminal-dangling-merge-lease", "terminal snapshot must not carry integration_merge_lease (dangling lease) — release the merge lease before the lifecycle ends"));
     }
   }
   return { ok: violations.length === 0, violations };
 }
-var DATE_RE2 = /^\d{4}-\d{2}-\d{2}$/;
-var PLAN_STATUSES = ["Todo", "InProgress", "InReview", "Blocked", "Done"];
-var RESIDUAL_DECISIONS = ["defer", "accept", "risk-accepted"];
-var RESIDUAL_LIFECYCLES = ["open", "resolved", "waived", "superseded", "duplicate"];
-function isPlainObject4(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function violation5(severity, code, message, fix) {
-  return { ok: false, severity, code, message, fix };
+var LEGACY_WORKTREE_PATH_CODE = "workflow.snapshot.legacy-control-worktree-path";
+
+class WorkflowSnapshotValidationError extends Error {
+  violations;
+  constructor(message, violations) {
+    super(message);
+    this.violations = violations;
+  }
+}
+function readWorkflowSnapshot(dir) {
+  const snapshotPath = join5(dir, WORKFLOW_SNAPSHOT_FILE);
+  if (!existsSync3(snapshotPath)) {
+    throw new Error(`workflow snapshot not found: ${snapshotPath}`);
+  }
+  let doc;
+  try {
+    doc = JSON.parse(readFileSync3(snapshotPath, "utf8"));
+  } catch (error) {
+    throw new Error(`Invalid JSON in ${snapshotPath}: ${error.message}`);
+  }
+  return normalizeWorkflowSnapshot(doc, snapshotPath);
+}
+function normalizeWorkflowSnapshot(doc, snapshotPath) {
+  const gate = validateWorkflowSnapshot(doc);
+  const migration = gate.violations.filter((v) => v.code === LEGACY_WORKTREE_PATH_CODE);
+  const blocking = gate.violations.filter((v) => v.code !== LEGACY_WORKTREE_PATH_CODE);
+  if (blocking.length > 0) {
+    const detail = blocking.map((v) => `${v.code}: ${v.message}`).join("; ");
+    throw new WorkflowSnapshotValidationError(`refusing to read invalid workflow snapshot ${snapshotPath}: ${detail}`, blocking);
+  }
+  if (migration.length === 0) {
+    return { snapshot: doc, diagnostics: [] };
+  }
+  const raw = doc;
+  const { control_worktree_path: _legacy, ...rest } = raw;
+  const normalized = { ...rest, integration_worktree_path: raw.control_worktree_path };
+  const revalidated = validateWorkflowSnapshot(normalized);
+  if (!revalidated.ok) {
+    const detail = revalidated.violations.map((v) => `${v.code}: ${v.message}`).join("; ");
+    throw new Error(`refusing to read workflow snapshot ${snapshotPath}: legacy normalization produced an invalid document: ${detail}`);
+  }
+  return { snapshot: normalized, diagnostics: migration };
+}
+var DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
+var PLAN_STATUSES = ["Todo", "InProgress", "InReview", "Blocked", "Done"];
+var RESIDUAL_DECISIONS = ["defer", "accept", "risk-accepted"];
+var RESIDUAL_LIFECYCLES = ["open", "resolved", "waived", "superseded", "duplicate"];
+function isPlainObject3(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function violation4(severity, code, message, fix) {
+  return { ok: false, severity, code, message, fix };
 }
 function normalizeSeverity(value) {
   if (value === "warning")
@@ -2031,19 +1816,19 @@ function isOpenResidual(entry) {
 }
 function validateNonEmptyString3(violations, value, field, missingCode, invalidCode) {
   if (value === undefined) {
-    violations.push(violation5("high", missingCode, `missing required field: ${field}`));
+    violations.push(violation4("high", missingCode, `missing required field: ${field}`));
   } else if (typeof value !== "string" || value.trim() === "") {
-    violations.push(violation5("medium", invalidCode, `${field} must be a non-empty string`));
+    violations.push(violation4("medium", invalidCode, `${field} must be a non-empty string`));
   }
 }
 function validatePlanRow(row) {
   const violations = [];
-  if (!isPlainObject4(row)) {
-    return { ok: false, violations: [violation5("high", "status.plan-row.invalid", "plan row must be an object")] };
+  if (!isPlainObject3(row)) {
+    return { ok: false, violations: [violation4("high", "status.plan-row.invalid", "plan row must be an object")] };
   }
   const { id, plan_id: planId, title, file, status, metadata, execution_lease } = row;
   if (id === undefined && planId === undefined) {
-    violations.push(violation5("high", "status.plan-row.missing-id", "missing required field: id (or legacy plan_id)"));
+    violations.push(violation4("high", "status.plan-row.missing-id", "missing required field: id (or legacy plan_id)"));
   } else {
     if (id !== undefined) {
       validateNonEmptyString3(violations, id, "id", "status.plan-row.missing-id", "status.plan-row.invalid-id");
@@ -2052,31 +1837,31 @@ function validatePlanRow(row) {
       validateNonEmptyString3(violations, planId, "plan_id", "status.plan-row.missing-plan-id", "status.plan-row.invalid-plan-id");
     }
     if (id !== undefined && planId !== undefined && id !== planId) {
-      violations.push(violation5("medium", "status.plan-row.dual-id", "row has both id and plan_id with different values — write one canonical key (prefer id)"));
+      violations.push(violation4("medium", "status.plan-row.dual-id", "row has both id and plan_id with different values — write one canonical key (prefer id)"));
     }
   }
   validateNonEmptyString3(violations, title, "title", "status.plan-row.missing-title", "status.plan-row.invalid-title");
   validateNonEmptyString3(violations, file, "file", "status.plan-row.missing-file", "status.plan-row.invalid-file");
   if (status === undefined) {
-    violations.push(violation5("high", "status.plan-row.missing-status", "missing required field: status"));
+    violations.push(violation4("high", "status.plan-row.missing-status", "missing required field: status"));
   } else if (typeof status !== "string" || !PLAN_STATUSES.includes(status)) {
-    violations.push(violation5("medium", "status.plan-row.invalid-status", `status must be one of ${PLAN_STATUSES.join(" | ")} — got ${JSON.stringify(status)}`));
+    violations.push(violation4("medium", "status.plan-row.invalid-status", `status must be one of ${PLAN_STATUSES.join(" | ")} — got ${JSON.stringify(status)}`));
   }
-  if (metadata !== undefined && !isPlainObject4(metadata)) {
-    violations.push(violation5("medium", "status.plan-row.invalid-metadata", "metadata must be an object"));
+  if (metadata !== undefined && !isPlainObject3(metadata)) {
+    violations.push(violation4("medium", "status.plan-row.invalid-metadata", "metadata must be an object"));
   }
-  if (execution_lease !== undefined && !isPlainObject4(execution_lease)) {
-    violations.push(violation5("medium", "status.plan-row.invalid-execution-lease", "execution_lease must be an object"));
+  if (execution_lease !== undefined && !isPlainObject3(execution_lease)) {
+    violations.push(violation4("medium", "status.plan-row.invalid-execution-lease", "execution_lease must be an object"));
   }
   if (status === "Done" && execution_lease !== undefined) {
-    violations.push(violation5("medium", "status.plan-row.done-with-lease", 'plan status Done must not carry an execution_lease — the Done authority deletes the lease in the same complete-file update as status: "Done" (status-and-residuals.md § Hold, release, and override)', 'delete plans[].execution_lease in the same update that sets status: "Done"'));
+    violations.push(violation4("medium", "status.plan-row.done-with-lease", 'plan status Done must not carry an execution_lease — the Done authority deletes the lease in the same complete-file update as status: "Done" (status-and-residuals.md § Hold, release, and override)', 'delete plans[].execution_lease in the same update that sets status: "Done"'));
   }
   return { ok: violations.length === 0, violations };
 }
 function validateResidual(entry) {
   const violations = [];
-  if (!isPlainObject4(entry)) {
-    return { ok: false, violations: [violation5("high", "status.residual.invalid", "residual entry must be an object")] };
+  if (!isPlainObject3(entry)) {
+    return { ok: false, violations: [violation4("high", "status.residual.invalid", "residual entry must be an object")] };
   }
   const { id, title, severity, source, scope, decision, owner, target, tracking, detail_doc, lifecycle, closed_at } = entry;
   validateNonEmptyString3(violations, id, "id", "status.residual.missing-id", "status.residual.invalid-id");
@@ -2085,42 +1870,42 @@ function validateResidual(entry) {
   validateNonEmptyString3(violations, scope, "scope", "status.residual.missing-scope", "status.residual.invalid-scope");
   validateNonEmptyString3(violations, owner, "owner", "status.residual.missing-owner", "status.residual.invalid-owner");
   if (severity === undefined) {
-    violations.push(violation5("high", "status.residual.missing-severity", "missing required field: severity"));
+    violations.push(violation4("high", "status.residual.missing-severity", "missing required field: severity"));
   } else if (typeof severity !== "string" || !SEVERITY_ORDER.includes(severity) && severity !== "warning") {
-    violations.push(violation5("medium", "status.residual.invalid-severity", `severity must be one of ${SEVERITY_ORDER.join(" | ")} — got ${JSON.stringify(severity)}`));
+    violations.push(violation4("medium", "status.residual.invalid-severity", `severity must be one of ${SEVERITY_ORDER.join(" | ")} — got ${JSON.stringify(severity)}`));
   } else if (severity === "warning") {
-    violations.push(violation5("low", "status.residual.legacy-warning", `severity "warning" is legacy — forbidden on new entries; read paths normalize it to "low"`, `use "low" (normalizeSeverity maps 'warning' → 'low')`));
+    violations.push(violation4("low", "status.residual.legacy-warning", `severity "warning" is legacy — forbidden on new entries; read paths normalize it to "low"`, `use "low" (normalizeSeverity maps 'warning' → 'low')`));
   }
   if (decision === undefined) {
-    violations.push(violation5("high", "status.residual.missing-decision", "missing required field: decision"));
+    violations.push(violation4("high", "status.residual.missing-decision", "missing required field: decision"));
   } else if (typeof decision !== "string" || !RESIDUAL_DECISIONS.includes(decision)) {
-    violations.push(violation5("medium", "status.residual.invalid-decision", `decision must be one of ${RESIDUAL_DECISIONS.join(" | ")} — got ${JSON.stringify(decision)}`));
+    violations.push(violation4("medium", "status.residual.invalid-decision", `decision must be one of ${RESIDUAL_DECISIONS.join(" | ")} — got ${JSON.stringify(decision)}`));
   }
   if (target === undefined) {
-    violations.push(violation5("high", "status.residual.missing-target", "missing required field: target"));
+    violations.push(violation4("high", "status.residual.missing-target", "missing required field: target"));
   } else if (typeof target !== "string" && target !== null) {
-    violations.push(violation5("medium", "status.residual.invalid-target", "target must be a string or null"));
+    violations.push(violation4("medium", "status.residual.invalid-target", "target must be a string or null"));
   }
   if (tracking === undefined) {
-    violations.push(violation5("high", "status.residual.missing-tracking", "missing required field: tracking"));
+    violations.push(violation4("high", "status.residual.missing-tracking", "missing required field: tracking"));
   } else if (typeof tracking !== "string" && tracking !== null) {
-    violations.push(violation5("medium", "status.residual.invalid-tracking", "tracking must be a string or null"));
+    violations.push(violation4("medium", "status.residual.invalid-tracking", "tracking must be a string or null"));
   }
   if (detail_doc !== undefined && typeof detail_doc !== "string" && detail_doc !== null) {
-    violations.push(violation5("medium", "status.residual.invalid-detail-doc", "detail_doc must be a string or null"));
+    violations.push(violation4("medium", "status.residual.invalid-detail-doc", "detail_doc must be a string or null"));
   }
-  if (closed_at !== undefined && (typeof closed_at !== "string" || !DATE_RE2.test(closed_at))) {
-    violations.push(violation5("medium", "status.residual.invalid-closed-at", "closed_at must be YYYY-MM-DD"));
+  if (closed_at !== undefined && (typeof closed_at !== "string" || !DATE_RE.test(closed_at))) {
+    violations.push(violation4("medium", "status.residual.invalid-closed-at", "closed_at must be YYYY-MM-DD"));
   }
   if (lifecycle !== undefined) {
     if (typeof lifecycle !== "string" || !RESIDUAL_LIFECYCLES.includes(lifecycle)) {
-      violations.push(violation5("medium", "status.residual.invalid-lifecycle", `lifecycle must be one of ${RESIDUAL_LIFECYCLES.join(" | ")} — got ${JSON.stringify(lifecycle)}`));
+      violations.push(violation4("medium", "status.residual.invalid-lifecycle", `lifecycle must be one of ${RESIDUAL_LIFECYCLES.join(" | ")} — got ${JSON.stringify(lifecycle)}`));
     } else if (lifecycle !== "open") {
       if (closed_at === undefined) {
-        violations.push(violation5("high", "status.residual.closed-missing-closed-at", `lifecycle "${lifecycle}" requires closed_at (YYYY-MM-DD)`, 'set closed_at (e.g. "2026-08-08")'));
+        violations.push(violation4("high", "status.residual.closed-missing-closed-at", `lifecycle "${lifecycle}" requires closed_at (YYYY-MM-DD)`, 'set closed_at (e.g. "2026-08-08")'));
       }
       if (entry.closure_note === undefined) {
-        violations.push(violation5("medium", "status.residual.closed-missing-closure-note", `lifecycle "${lifecycle}" requires closure_note (what changed; how verified)`, "add closure_note explaining the close"));
+        violations.push(violation4("medium", "status.residual.closed-missing-closure-note", `lifecycle "${lifecycle}" requires closure_note (what changed; how verified)`, "add closure_note explaining the close"));
       }
     }
   }
@@ -2135,25 +1920,25 @@ function isHarnessRelativePath(dir) {
 }
 function validateWorkflowEntry(entry) {
   const violations = [];
-  if (!isPlainObject4(entry)) {
+  if (!isPlainObject3(entry)) {
     return {
       ok: false,
-      violations: [violation5("high", "status.workflow.invalid", "workflow entry must be an object")]
+      violations: [violation4("high", "status.workflow.invalid", "workflow entry must be an object")]
     };
   }
   validateNonEmptyString3(violations, entry.id, "id", "status.workflow.missing-id", "status.workflow.invalid-id");
   if (entry.type === undefined) {
-    violations.push(violation5("high", "status.workflow.missing-type", "missing required field: type"));
+    violations.push(violation4("high", "status.workflow.missing-type", "missing required field: type"));
   } else if (typeof entry.type !== "string" || !WORKFLOW_LIFECYCLE_TYPES.includes(entry.type)) {
-    violations.push(violation5("medium", "status.workflow.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES.join(" | ")} — got ${JSON.stringify(entry.type)}`));
+    violations.push(violation4("medium", "status.workflow.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES.join(" | ")} — got ${JSON.stringify(entry.type)}`));
   }
   validateNonEmptyString3(violations, entry.started_at, "started_at", "status.workflow.missing-started-at", "status.workflow.invalid-started-at");
   if (entry.dir === undefined) {
-    violations.push(violation5("high", "status.workflow.missing-dir", "missing required field: dir"));
+    violations.push(violation4("high", "status.workflow.missing-dir", "missing required field: dir"));
   } else if (typeof entry.dir !== "string" || entry.dir.trim() === "") {
-    violations.push(violation5("medium", "status.workflow.invalid-dir", "dir must be a non-empty string"));
+    violations.push(violation4("medium", "status.workflow.invalid-dir", "dir must be a non-empty string"));
   } else if (!isHarnessRelativePath(entry.dir)) {
-    violations.push(violation5("medium", "status.workflow.invalid-dir", `dir must be a harness-relative path (no absolute paths, no ".." segments) — got ${JSON.stringify(entry.dir)}`));
+    violations.push(violation4("medium", "status.workflow.invalid-dir", `dir must be a harness-relative path (no absolute paths, no ".." segments) — got ${JSON.stringify(entry.dir)}`));
   }
   return { ok: violations.length === 0, violations };
 }
@@ -2167,20 +1952,20 @@ function validateStatusV2(docOrPath, opts = {}) {
     } catch (error) {
       return {
         ok: false,
-        violations: [violation5("high", "status.invalid-json", error.message)]
+        violations: [violation4("high", "status.invalid-json", error.message)]
       };
     }
   } else {
     doc = docOrPath;
   }
-  if (!isPlainObject4(doc)) {
-    return { ok: false, violations: [violation5("high", "status.invalid-doc", "status document must be an object")] };
+  if (!isPlainObject3(doc)) {
+    return { ok: false, violations: [violation4("high", "status.invalid-doc", "status document must be an object")] };
   }
   if (doc.version !== 2) {
     return {
       ok: false,
       violations: [
-        violation5("high", "status.migration-required", `status.json schema version 2 required — got ${JSON.stringify(doc.version)} (v1 or unknown version); run \`mstar migrate\` to convert the tree`, "run `mstar migrate`")
+        violation4("high", "status.migration-required", `status.json schema version 2 required — got ${JSON.stringify(doc.version)} (v1 or unknown version); run \`mstar migrate\` to convert the tree`, "run `mstar migrate`")
       ]
     };
   }
@@ -2188,7 +1973,7 @@ function validateStatusV2(docOrPath, opts = {}) {
     return {
       ok: false,
       violations: [
-        violation5("high", "status.migration-required", "v1-shaped status.json (root plans[]) is not a v2 document — run `mstar migrate` to convert the tree", "run `mstar migrate`")
+        violation4("high", "status.migration-required", "v1-shaped status.json (root plans[]) is not a v2 document — run `mstar migrate` to convert the tree", "run `mstar migrate`")
       ]
     };
   }
@@ -2196,122 +1981,399 @@ function validateStatusV2(docOrPath, opts = {}) {
     return {
       ok: false,
       violations: [
-        violation5("high", "status.migration-required", "v1-shaped status.json (root residual_findings) is not a v2 document — run `mstar migrate` to convert the tree", "run `mstar migrate`")
+        violation4("high", "status.migration-required", "v1-shaped status.json (root residual_findings) is not a v2 document — run `mstar migrate` to convert the tree", "run `mstar migrate`")
       ]
     };
   }
   const violations = [];
   if (doc.updated_at === undefined) {
-    violations.push(violation5("high", "status.missing-updated-at", "missing required field: updated_at"));
-  } else if (typeof doc.updated_at !== "string" || !DATE_RE2.test(doc.updated_at)) {
-    violations.push(violation5("medium", "status.invalid-updated-at", "updated_at must be YYYY-MM-DD"));
+    violations.push(violation4("high", "status.missing-updated-at", "missing required field: updated_at"));
+  } else if (typeof doc.updated_at !== "string" || !DATE_RE.test(doc.updated_at)) {
+    violations.push(violation4("medium", "status.invalid-updated-at", "updated_at must be YYYY-MM-DD"));
   }
   if (doc.workflows === undefined) {
-    violations.push(violation5("high", "status.missing-workflows", "missing required field: workflows"));
+    violations.push(violation4("high", "status.missing-workflows", "missing required field: workflows"));
   } else if (!Array.isArray(doc.workflows)) {
-    violations.push(violation5("high", "status.invalid-workflows", "workflows must be an array"));
+    violations.push(violation4("high", "status.invalid-workflows", "workflows must be an array"));
   } else {
     const seen = new Set;
     for (const entry of doc.workflows) {
       violations.push(...validateWorkflowEntry(entry).violations);
-      if (isPlainObject4(entry) && typeof entry.id === "string") {
+      if (isPlainObject3(entry) && typeof entry.id === "string") {
         if (seen.has(entry.id)) {
-          violations.push(violation5("medium", "status.workflow.duplicate-id", `duplicate workflow id in workflows[]: ${JSON.stringify(entry.id)}`));
+          violations.push(violation4("medium", "status.workflow.duplicate-id", `duplicate workflow id in workflows[]: ${JSON.stringify(entry.id)}`));
         }
         seen.add(entry.id);
       }
     }
   }
-  if (harnessDir !== undefined && Array.isArray(doc.workflows)) {
-    let realHarnessDir = null;
-    try {
-      realHarnessDir = realpathSync(harnessDir);
-    } catch {}
-    for (const entry of doc.workflows) {
-      if (!isPlainObject4(entry) || typeof entry.dir !== "string")
-        continue;
-      const relSnapshot = join7(entry.dir, WORKFLOW_SNAPSHOT_FILE);
-      const snapshotPath = join7(harnessDir, relSnapshot);
-      const label = typeof entry.id === "string" ? entry.id : relSnapshot;
-      let physical;
-      try {
-        physical = realpathSync(snapshotPath);
-      } catch {
-        violations.push(violation5("high", "status.workflow.snapshot-missing", `workflows[] lists ${JSON.stringify(label)} but its snapshot does not exist at ${JSON.stringify(relSnapshot)} — the root holds active lifecycles only; unregister the id when its snapshot is removed`));
-        continue;
-      }
-      if (realHarnessDir !== null && physical !== realHarnessDir && !physical.startsWith(`${realHarnessDir}${sep}`)) {
-        violations.push(violation5("high", "status.workflow.snapshot-outside-harness", `workflows[] lists ${JSON.stringify(label)} but its snapshot resolves outside the harness dir (${JSON.stringify(physical)}) — symlinked snapshot paths are rejected; the snapshot must physically live under ${JSON.stringify(harnessDir)}`));
-        continue;
-      }
-      let snapshot;
-      try {
-        snapshot = readJson(snapshotPath);
-      } catch (error) {
-        violations.push(violation5("high", "status.workflow.snapshot-invalid", `snapshot at ${JSON.stringify(relSnapshot)} is not valid JSON: ${error.message}`));
-        continue;
-      }
-      if (typeof snapshot.status === "string" && WORKFLOW_TERMINAL_STATUSES.includes(snapshot.status)) {
-        violations.push(violation5("high", "status.workflow.terminal-listed", `workflows[] lists ${JSON.stringify(label)} whose snapshot status is terminal (${snapshot.status}) — removal-at-terminal: terminal writers unregister AFTER the snapshot write`));
-      }
-      if (typeof entry.type === "string" && typeof snapshot.type === "string" && entry.type !== snapshot.type) {
-        violations.push(violation5("medium", "status.workflow.mismatched-type", `workflows[] entry ${JSON.stringify(label)} type ${JSON.stringify(entry.type)} does not match its snapshot type ${JSON.stringify(snapshot.type)} — the root entry mirrors the snapshot; align them`));
-      }
-      if (typeof entry.started_at === "string" && typeof snapshot.started_at === "string" && entry.started_at !== snapshot.started_at) {
-        violations.push(violation5("medium", "status.workflow.mismatched-started-at", `workflows[] entry ${JSON.stringify(label)} started_at ${JSON.stringify(entry.started_at)} does not match its snapshot started_at ${JSON.stringify(snapshot.started_at)} — workflow ${JSON.stringify(label)} collided with another writer (e.g. a concurrent/re-run \`audit promote\` with the same workflow id rewrote the snapshot); the root entry mirrors the snapshot — align them or remove the colliding workflow`));
-      }
+  if (harnessDir !== undefined && Array.isArray(doc.workflows)) {
+    let realHarnessDir = null;
+    try {
+      realHarnessDir = realpathSync(harnessDir);
+    } catch {}
+    for (const entry of doc.workflows) {
+      if (!isPlainObject3(entry) || typeof entry.dir !== "string")
+        continue;
+      const relSnapshot = join6(entry.dir, WORKFLOW_SNAPSHOT_FILE);
+      const snapshotPath = join6(harnessDir, relSnapshot);
+      const label = typeof entry.id === "string" ? entry.id : relSnapshot;
+      let physical;
+      try {
+        physical = realpathSync(snapshotPath);
+      } catch {
+        violations.push(violation4("high", "status.workflow.snapshot-missing", `workflows[] lists ${JSON.stringify(label)} but its snapshot does not exist at ${JSON.stringify(relSnapshot)} — the root holds active lifecycles only; unregister the id when its snapshot is removed`));
+        continue;
+      }
+      if (realHarnessDir !== null && physical !== realHarnessDir && !physical.startsWith(`${realHarnessDir}${sep}`)) {
+        violations.push(violation4("high", "status.workflow.snapshot-outside-harness", `workflows[] lists ${JSON.stringify(label)} but its snapshot resolves outside the harness dir (${JSON.stringify(physical)}) — symlinked snapshot paths are rejected; the snapshot must physically live under ${JSON.stringify(harnessDir)}`));
+        continue;
+      }
+      let snapshot;
+      try {
+        snapshot = readJson(snapshotPath);
+      } catch (error) {
+        violations.push(violation4("high", "status.workflow.snapshot-invalid", `snapshot at ${JSON.stringify(relSnapshot)} is not valid JSON: ${error.message}`));
+        continue;
+      }
+      if (typeof snapshot.status === "string" && WORKFLOW_TERMINAL_STATUSES.includes(snapshot.status)) {
+        violations.push(violation4("high", "status.workflow.terminal-listed", `workflows[] lists ${JSON.stringify(label)} whose snapshot status is terminal (${snapshot.status}) — removal-at-terminal: terminal writers unregister AFTER the snapshot write`));
+      }
+      if (typeof entry.type === "string" && typeof snapshot.type === "string" && entry.type !== snapshot.type) {
+        violations.push(violation4("medium", "status.workflow.mismatched-type", `workflows[] entry ${JSON.stringify(label)} type ${JSON.stringify(entry.type)} does not match its snapshot type ${JSON.stringify(snapshot.type)} — the root entry mirrors the snapshot; align them`));
+      }
+      if (typeof entry.started_at === "string" && typeof snapshot.started_at === "string" && entry.started_at !== snapshot.started_at) {
+        violations.push(violation4("medium", "status.workflow.mismatched-started-at", `workflows[] entry ${JSON.stringify(label)} started_at ${JSON.stringify(entry.started_at)} does not match its snapshot started_at ${JSON.stringify(snapshot.started_at)} — workflow ${JSON.stringify(label)} collided with another writer (e.g. a concurrent/re-run \`audit promote\` with the same workflow id rewrote the snapshot); the root entry mirrors the snapshot — align them or remove the colliding workflow`));
+      }
+    }
+  }
+  return { ok: violations.length === 0, violations };
+}
+var validateStatus = validateStatusV2;
+function resolveCompassEnforcement(harnessDir) {
+  const iterationsDir = resolveIterationDir(harnessDir);
+  if (!existsSync4(iterationsDir))
+    return { hard: false, source: "none" };
+  let entries;
+  try {
+    entries = readdirSync2(iterationsDir, { withFileTypes: true });
+  } catch {
+    return { hard: false, source: "none" };
+  }
+  for (const entry of entries) {
+    if (!entry.isDirectory())
+      continue;
+    const compassPath = join6(iterationsDir, entry.name, "delivery-compass.md");
+    if (!existsSync4(compassPath))
+      continue;
+    let content;
+    try {
+      content = readFileSync4(compassPath, "utf8");
+    } catch {
+      continue;
+    }
+    const frontmatter = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+    const fm = frontmatter !== null ? frontmatter[1] : "";
+    if (!/^status[ \t]*:[ \t]*(?:active|locked)[ \t]*$/m.test(fm))
+      continue;
+    const flag = parseEnforcementFlag(fm);
+    if (flag.hard)
+      return flag;
+  }
+  return { hard: false, source: "none" };
+}
+function resolveMstarcEnforcement(harnessDir) {
+  const dir = resolve5(harnessDir);
+  const rc = loadMstarc(dir, dirname4(dir));
+  const value = rc?.config.enforcement;
+  if (value === "hard")
+    return { hard: true, source: "mstarc" };
+  if (value === "soft")
+    return { hard: false, source: "mstarc" };
+  return { hard: false, source: "none" };
+}
+function resolveRepoEnforcement(harnessDir) {
+  const rc = resolveMstarcEnforcement(harnessDir);
+  if (rc.source !== "none")
+    return rc;
+  return resolveCompassEnforcement(harnessDir);
+}
+var COMPASS_STATUSES = ["active", "locked", "completed"];
+var DATE_RE2 = /^\d{4}-\d{2}-\d{2}$/;
+var PLAN_STATUS_DONE = "Done";
+function typeName(value) {
+  if (value === null)
+    return "null";
+  if (Array.isArray(value))
+    return "array";
+  return typeof value;
+}
+function validateCompassShape(doc) {
+  const issues = [];
+  const expectString = (key, opts = {}) => {
+    const value = doc[key];
+    if (typeof value !== "string") {
+      issues.push({ path: [key], message: `expected string, received ${typeName(value)}` });
+      return;
+    }
+    if (opts.min !== undefined && value.length < opts.min) {
+      issues.push({ path: [key], message: `string must contain at least ${opts.min} character(s)` });
+      return;
+    }
+    if (opts.regex !== undefined && !opts.regex.test(value)) {
+      issues.push({ path: [key], message: `string must match ${opts.regex}` });
+    }
+  };
+  expectString("iteration_id", { min: 1 });
+  expectString("start_date", { regex: DATE_RE2 });
+  const status = doc.status;
+  if (typeof status !== "string" || !COMPASS_STATUSES.includes(status)) {
+    issues.push({
+      path: ["status"],
+      message: `expected one of ${COMPASS_STATUSES.map((s) => `'${s}'`).join(" | ")}, received ${typeName(status)}`
+    });
+  }
+  expectString("iteration_base_branch", { min: 1 });
+  expectString("target_branch", { min: 1 });
+  const plans = doc.plans;
+  if (plans !== undefined) {
+    if (!Array.isArray(plans)) {
+      issues.push({ path: ["plans"], message: `expected array, received ${typeName(plans)}` });
+    } else {
+      plans.forEach((entry, index) => {
+        if (typeof entry !== "string") {
+          issues.push({ path: ["plans", index], message: `expected string, received ${typeName(entry)}` });
+        } else if (entry.length < 1) {
+          issues.push({ path: ["plans", index], message: "string must contain at least 1 character(s)" });
+        }
+      });
+    }
+  }
+  const end_date = doc.end_date;
+  if (end_date !== undefined) {
+    if (typeof end_date !== "string") {
+      issues.push({ path: ["end_date"], message: `expected string, received ${typeName(end_date)}` });
+    } else if (!DATE_RE2.test(end_date)) {
+      issues.push({ path: ["end_date"], message: `string must match ${DATE_RE2}` });
+    }
+  }
+  if (issues.length > 0)
+    return { ok: false, issues };
+  return {
+    ok: true,
+    data: {
+      iteration_id: doc.iteration_id,
+      start_date: doc.start_date,
+      status,
+      iteration_base_branch: doc.iteration_base_branch,
+      target_branch: doc.target_branch,
+      ...plans !== undefined ? { plans } : {},
+      ...end_date !== undefined ? { end_date } : {}
+    }
+  };
+}
+function violation5(severity, code, message, fix) {
+  return { ok: false, severity, code, message, fix };
+}
+function isPlainObject4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function validateCompassFrontmatter(doc) {
+  if (!isPlainObject4(doc)) {
+    return {
+      ok: false,
+      violations: [
+        violation5("medium", "COMPASS_INVALID_FIELD", "Compass frontmatter must be a YAML object with iteration_id / start_date / status / iteration_base_branch / target_branch (template: mstar-iteration §1.3)", "Fix the frontmatter of {ITERATION_DIR}/<iteration-id>/delivery-compass.md")
+      ]
+    };
+  }
+  const parsed = validateCompassShape(doc);
+  if (!parsed.ok) {
+    return {
+      ok: false,
+      violations: parsed.issues.map((issue) => {
+        const field = issue.path.join(".") || "(root)";
+        return violation5("medium", "COMPASS_INVALID_FIELD", `Compass frontmatter field '${field}' is invalid: ${issue.message}`, `Fix '${field}' in {ITERATION_DIR}/<iteration-id>/delivery-compass.md frontmatter (template: mstar-iteration §1.3)`);
+      })
+    };
+  }
+  const violations = [];
+  const { status, end_date } = parsed.data;
+  if (status === "completed" && end_date === undefined) {
+    violations.push(violation5("high", "COMPASS_END_DATE_REQUIRED", "Compass frontmatter status is 'completed' but end_date is missing — end_date is required at iteration-close (mstar-iteration §3.4, template Fields guide)", "Add `end_date: YYYY-MM-DD` to the frontmatter"));
+  }
+  if (status !== "completed" && end_date !== undefined) {
+    violations.push(violation5("medium", "COMPASS_END_DATE_NOT_ALLOWED", `Compass frontmatter sets end_date while status is '${status}' — end_date is only written at iteration-close (mstar-iteration §3.4)`, "Remove end_date until iteration-close"));
+  }
+  return { ok: violations.length === 0, violations };
+}
+function registeredPlanIds(compassDoc) {
+  if (!Array.isArray(compassDoc.plans))
+    return [];
+  return compassDoc.plans.filter((plan) => typeof plan === "string" && plan.length > 0);
+}
+function findPlanRow(snapshotDoc, planId) {
+  if (!Array.isArray(snapshotDoc.plans))
+    return null;
+  for (const row of snapshotDoc.plans) {
+    if (!isPlainObject4(row))
+      continue;
+    const rowId = typeof row.id === "string" ? row.id : typeof row.plan_id === "string" ? row.plan_id : null;
+    if (rowId === planId)
+      return row;
+  }
+  return null;
+}
+function entryPlansAllDone(snapshotDoc, registered) {
+  const violations = [];
+  if (registered.length === 0) {
+    violations.push(violation5("medium", "COMPASS_NO_PLANS", "Compass frontmatter registers no plans — the all-plans-Done transition cannot be verified (mstar-iteration §1.3 / Phase transition gates)", "List the iteration's plan ids in the compass frontmatter `plans`"));
+    return violations;
+  }
+  for (const planId of registered) {
+    const row = findPlanRow(snapshotDoc, planId);
+    if (row === null) {
+      violations.push(violation5("high", "PLAN_NOT_IN_STATUS", `Plan '${planId}' is registered in the compass frontmatter but has no row in the workflow snapshot plans[] (mstar-iteration §3.1 entry item 1)`, "Add the plan row to {HARNESS_DIR}/workflows/<id>/snapshot.json"));
+      continue;
+    }
+    if (row.status !== PLAN_STATUS_DONE) {
+      violations.push(violation5("high", "PLAN_NOT_DONE", `Plan '${planId}' status is ${JSON.stringify(row.status)} in the workflow snapshot — all compass-registered plans must be 'Done' before iteration-close (mstar-iteration §3.1 entry item 1)`));
+    }
+  }
+  return violations;
+}
+function entryFrontmatterComplete(compassDoc) {
+  return validateCompassFrontmatter(compassDoc).violations;
+}
+function exitFrontmatterClosed(compassDoc) {
+  const violations = [];
+  if (compassDoc.status !== "completed") {
+    violations.push(violation5("high", "EXIT_STATUS_NOT_COMPLETED", `Compass frontmatter status must be 'completed' at close exit — current: ${JSON.stringify(compassDoc.status)} (mstar-iteration §3.4 / §3.5 exit item 4)`));
+  }
+  const endDate = compassDoc.end_date;
+  if (typeof endDate !== "string" || !DATE_RE2.test(endDate)) {
+    violations.push(violation5("high", "EXIT_END_DATE_REQUIRED", "Compass frontmatter end_date (YYYY-MM-DD) is required when closing (mstar-iteration §3.4 / §3.5 exit item 4)"));
+  }
+  return violations;
+}
+function exitBranchCheck(opts) {
+  const violations = [];
+  const { currentBranch, specIntegrationBranch } = opts;
+  if (currentBranch === undefined || specIntegrationBranch === undefined) {
+    violations.push(violation5("medium", "EXIT_BRANCH_UNVERIFIABLE", "Cannot verify the current branch is spec_integration_branch — missing currentBranch / specIntegrationBranch probe inputs (mstar-iteration §3.5 exit item 5)"));
+  } else if (currentBranch !== specIntegrationBranch) {
+    violations.push(violation5("high", "EXIT_BRANCH_MISMATCH", `Current branch '${currentBranch}' is not the spec_integration_branch '${specIntegrationBranch}' (mstar-iteration §3.5 exit item 5)`));
+  }
+  return violations;
+}
+function exitPrBaseCheck(compassDoc, opts) {
+  const violations = [];
+  const target = compassDoc.target_branch;
+  const { prBaseBranch } = opts;
+  if (prBaseBranch === undefined) {
+    violations.push(violation5("medium", "EXIT_PR_BASE_UNVERIFIABLE", "Cannot verify the PR base — missing prBaseBranch probe input (mstar-iteration §3.5 exit item 6)"));
+  } else if (typeof target !== "string" || prBaseBranch !== target) {
+    violations.push(violation5("high", "EXIT_PR_BASE_MISMATCH", `PR base '${prBaseBranch}' must equal the compass target_branch '${String(target)}' — not an undocumented branch (mstar-iteration §3.5 exit item 6)`));
+  }
+  return violations;
+}
+function evaluatePhaseGate(snapshotDoc, compassDoc, opts = {}) {
+  const registered = registeredPlanIds(compassDoc);
+  const entryViolations = [
+    ...entryPlansAllDone(snapshotDoc, registered),
+    ...entryFrontmatterComplete(compassDoc)
+  ];
+  const exitViolations = [
+    ...exitFrontmatterClosed(compassDoc),
+    ...exitBranchCheck(opts),
+    ...exitPrBaseCheck(compassDoc, opts)
+  ];
+  const allPlansDone = registered.length > 0 && registered.every((planId) => {
+    const row = findPlanRow(snapshotDoc, planId);
+    return row !== null && row.status === PLAN_STATUS_DONE;
+  });
+  const entry = { ok: entryViolations.length === 0, violations: entryViolations };
+  const exit = { ok: exitViolations.length === 0, violations: exitViolations };
+  let transition;
+  if (!allPlansDone)
+    transition = "phase-2-execute";
+  else if (entry.ok && exit.ok)
+    transition = "phase-4-pr-delivery";
+  else
+    transition = "phase-3-close";
+  const gateBlocking = allPlansDone ? [...entryViolations, ...exitViolations] : [];
+  return {
+    transition,
+    allPlansDone,
+    entry,
+    exit,
+    ok: gateBlocking.length === 0,
+    violations: gateBlocking
+  };
+}
+function parseCompassFrontmatter(filePath) {
+  return parseCompassFrontmatterText(readFileSync5(filePath, "utf8"), filePath);
+}
+function parseCompassFrontmatterText(content, filePath) {
+  const lines = content.split(/\r?\n/);
+  if (lines[0]?.trim() !== "---") {
+    throw new Error(`no YAML frontmatter fence in ${filePath} (expected first line "---")`);
+  }
+  const end = lines.indexOf("---", 1);
+  if (end === -1) {
+    throw new Error(`unterminated YAML frontmatter in ${filePath} (no closing "---")`);
+  }
+  const doc = {};
+  let listKey = null;
+  for (let i = 1;i < end; i += 1) {
+    const line = lines[i] ?? "";
+    if (!line.trim() || line.trim().startsWith("#"))
+      continue;
+    if (listKey !== null && /^\s*-\s+/.test(line)) {
+      const item = line.replace(/^\s*-\s+/, "").trim().replace(/^["']|["']$/g, "");
+      if (!Array.isArray(doc[listKey]))
+        doc[listKey] = [];
+      doc[listKey].push(item);
+      continue;
+    }
+    listKey = null;
+    const kv = line.match(/^([A-Za-z_][A-Za-z0-9_-]*):\s*(.*)$/);
+    if (!kv) {
+      throw new Error(`unsupported frontmatter line in ${filePath}: ${JSON.stringify(line)}`);
     }
+    const value = kv[2].trim();
+    doc[kv[1]] = value === "" ? null : /^\[.*\]$/.test(value) ? parseFlowArray(value, filePath) : value.replace(/^["']|["']$/g, "");
+    listKey = value === "" ? kv[1] : null;
   }
-  return { ok: violations.length === 0, violations };
+  return doc;
 }
-var validateStatus = validateStatusV2;
-function resolveCompassEnforcement(harnessDir) {
-  const iterationsDir = resolveIterationDir(harnessDir);
-  if (!existsSync4(iterationsDir))
-    return { hard: false, source: "none" };
-  let entries;
-  try {
-    entries = readdirSync3(iterationsDir, { withFileTypes: true });
-  } catch {
-    return { hard: false, source: "none" };
+function parseFlowArray(raw, filePath) {
+  const inner = raw.slice(1, -1);
+  if (/[[\]]/.test(inner)) {
+    throw new Error(`nested flow-style array in ${filePath}: ${JSON.stringify(raw)} — only flat scalar items are supported (e.g. [a, b])`);
   }
-  for (const entry of entries) {
-    if (!entry.isDirectory())
-      continue;
-    const compassPath = join7(iterationsDir, entry.name, "delivery-compass.md");
-    if (!existsSync4(compassPath))
-      continue;
-    let content;
-    try {
-      content = readFileSync4(compassPath, "utf8");
-    } catch {
-      continue;
+  let quote = null;
+  for (const ch of inner) {
+    if (ch === '"' || ch === "'") {
+      if (quote === null)
+        quote = ch;
+      else if (quote === ch)
+        quote = null;
+    } else if (ch === "," && quote !== null) {
+      throw new Error(`ambiguous flow-style array in ${filePath}: ${JSON.stringify(raw)} — quoted item containing comma cannot be split unambiguously (flat scalar items only)`);
     }
-    const frontmatter = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
-    const fm = frontmatter !== null ? frontmatter[1] : "";
-    if (!/^status[ \t]*:[ \t]*(?:active|locked)[ \t]*$/m.test(fm))
+  }
+  if (quote !== null) {
+    throw new Error(`unterminated ${quote} quote in flow-style array in ${filePath}: ${JSON.stringify(raw)}`);
+  }
+  const items = [];
+  for (const part of inner.split(",")) {
+    const item = part.trim().replace(/^["']|["']$/g, "");
+    if (item === "")
       continue;
-    const flag = parseEnforcementFlag(fm);
-    if (flag.hard)
-      return flag;
+    items.push(item);
   }
-  return { hard: false, source: "none" };
-}
-function resolveMstarcEnforcement(harnessDir) {
-  const dir = resolve5(harnessDir);
-  const rc = loadMstarc(dir, dirname4(dir));
-  const value = rc?.config.enforcement;
-  if (value === "hard")
-    return { hard: true, source: "mstarc" };
-  if (value === "soft")
-    return { hard: false, source: "mstarc" };
-  return { hard: false, source: "none" };
-}
-function resolveRepoEnforcement(harnessDir) {
-  const rc = resolveMstarcEnforcement(harnessDir);
-  if (rc.source !== "none")
-    return rc;
-  return resolveCompassEnforcement(harnessDir);
+  return items;
 }
 var PROJECT_ROADMAP_FILE = "roadmap.md";
 var PROJECT_REGISTER_FILE = "residuals.json";
@@ -2454,7 +2516,7 @@ function defaultWorkspaceRoot(startDir) {
 }
 function isAtOrBelow2(dir, root) {
   const rel = relative2(root, dir);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute4(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute5(rel);
 }
 function mstarcDirOverride(harnessDir, key) {
   const dir = resolve7(harnessDir);
@@ -2472,7 +2534,7 @@ function canonicalizeNearestExisting(path) {
   let dir = abs;
   const tail = [];
   for (;; ) {
-    if (existsSync6(dir)) {
+    if (existsSync7(dir)) {
       try {
         return join9(realpathSync2(dir), ...tail);
       } catch {
@@ -2545,15 +2607,74 @@ function isDirectory(dir) {
     return false;
   }
 }
+var INPUT_ENTRIES_CAP = 1e4;
+var MAX_RETAINED_ENTRIES = INPUT_ENTRIES_CAP / 2;
 var DEFAULT_PROBE_TIMEOUT_MS = 1e4;
-function probeTimeoutMs() {
+function gitProbeTimeoutMs() {
   const raw = process.env.MSTAR_GIT_PROBE_TIMEOUT_MS;
   if (raw === undefined || raw.trim() === "")
     return DEFAULT_PROBE_TIMEOUT_MS;
   const parsed = Number(raw);
   return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_PROBE_TIMEOUT_MS;
 }
-function violation7(severity, code, message, fix) {
+function parseMainWorktree(out) {
+  const tokens = out.split("\x00");
+  const first = tokens.findIndex((t) => t.startsWith("worktree "));
+  if (first === -1)
+    return null;
+  const rawPath = tokens[first].slice("worktree ".length);
+  if (rawPath.trim() === "")
+    return null;
+  let branch = null;
+  let detached = false;
+  for (let i = first + 1;i < tokens.length; i++) {
+    const token = tokens[i];
+    if (token.startsWith("worktree "))
+      break;
+    if (token === "bare")
+      return null;
+    if (token === "detached")
+      detached = true;
+    else if (token.startsWith("branch ")) {
+      const ref = token.slice("branch ".length).trim();
+      if (ref === "")
+        return null;
+      branch = ref.startsWith("refs/heads/") ? ref.slice("refs/heads/".length) : ref;
+    }
+  }
+  if (detached)
+    branch = "";
+  if (branch === null)
+    return null;
+  try {
+    return { root: realpathSync3(rawPath), branch };
+  } catch {
+    return null;
+  }
+}
+function readMainWorktree(cwd) {
+  const start = cwd ?? process.cwd();
+  try {
+    const stdout = execFileSync2("git", ["-C", start, "worktree", "list", "--porcelain", "-z"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"],
+      timeout: gitProbeTimeoutMs()
+    });
+    return parseMainWorktree(stdout);
+  } catch {
+    return null;
+  }
+}
+function assertMainWorktreeResidency(main, expectedBranch) {
+  const violations = [];
+  if (main.branch === "") {
+    violations.push(violation8("high", "worktree.main.residency-switched", `main worktree "${main.root}" is detached (no branch checked out) — residency cannot match the recorded expectation ${JSON.stringify(expectedBranch)}`, "check out the recorded main-worktree branch in the main worktree"));
+  } else if (main.branch !== expectedBranch) {
+    violations.push(violation8("high", "worktree.main.residency-switched", `main worktree "${main.root}" is on branch "${main.branch}", expected the recorded branch "${expectedBranch}" — residency is checked against the value recorded at lifecycle start, never re-pointed at the observed branch`, "restore the recorded branch in the main worktree; re-record at lifecycle start only through the owning workflow"));
+  }
+  return gate(violations);
+}
+function violation8(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function gate(violations) {
@@ -2563,7 +2684,7 @@ function probeBranch(worktreePath, opts) {
   const precomputed = opts.branchOf?.(worktreePath);
   if (precomputed !== undefined)
     return { branch: precomputed };
-  const timeout = opts.timeoutMs ?? probeTimeoutMs();
+  const timeout = opts.timeoutMs ?? gitProbeTimeoutMs();
   try {
     const stdout = execFileSync2(opts.gitPath ?? "git", ["-C", worktreePath, "branch", "--show-current"], {
       encoding: "utf8",
@@ -2584,7 +2705,7 @@ function probeBranch(worktreePath, opts) {
   }
 }
 function probeCheckout(worktreePath, opts) {
-  const timeout = opts.timeoutMs ?? probeTimeoutMs();
+  const timeout = opts.timeoutMs ?? gitProbeTimeoutMs();
   try {
     const stdout = execFileSync2(opts.gitPath ?? "git", ["-C", worktreePath, "rev-parse", "--git-dir"], {
       encoding: "utf8",
@@ -2594,7 +2715,7 @@ function probeCheckout(worktreePath, opts) {
     const raw = stdout.trim();
     if (raw === "")
       return { error: `no git dir reported at "${worktreePath}"` };
-    const abs = isAbsolute5(raw) ? raw : join10(worktreePath, raw);
+    const abs = isAbsolute6(raw) ? raw : join10(worktreePath, raw);
     return { gitDir: realpathSync3(abs) };
   } catch (err) {
     const e = err;
@@ -2605,41 +2726,118 @@ function probeCheckout(worktreePath, opts) {
     return { error: detail };
   }
 }
+function probeCheckoutRoot(path, opts = {}) {
+  const timeout = opts.timeoutMs ?? gitProbeTimeoutMs();
+  try {
+    const stdout = execFileSync2(opts.gitPath ?? "git", ["-C", path, "rev-parse", "--show-toplevel"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"],
+      timeout
+    });
+    const raw = stdout.trim();
+    if (raw === "")
+      return null;
+    return realpathSync3(raw);
+  } catch {
+    return null;
+  }
+}
 function l1PreDispatchCheck(input, opts = {}) {
   const violations = [];
-  const { controlWorktreePath, leaseWorktreePath, leaseWorkingBranch, planId } = input;
-  if (controlWorktreePath.trim() === "") {
-    violations.push(violation7("high", "worktree.l1.control-missing", "metadata.control_worktree_path is not recorded — the L1 control worktree (integration-branch checkout) must be recorded in status.json before writable dispatch", "record the control worktree path in status.json metadata.control_worktree_path"));
+  const checkoutCache = new Map;
+  const checkout = (path) => {
+    const key = resolve8(path);
+    if (!checkoutCache.has(key))
+      checkoutCache.set(key, probeCheckout(path, opts));
+    return checkoutCache.get(key);
+  };
+  const {
+    workflowType,
+    integrationWorktreePath,
+    integrationBranch,
+    mainWorktree,
+    expectedMainBranch,
+    lifecycleBranches,
+    leaseWorktreePath,
+    leaseWorkingBranch,
+    planId
+  } = input;
+  if (mainWorktree === null) {
+    violations.push(violation8("high", "worktree.main.unresolved", `main worktree identity cannot be proved for plan "${planId}" (git worktree discovery failed or unavailable) — L1 refuses instead of skipping the residency row`, "run from inside the repository (or pass a resolvable cwd) so the main worktree can be discovered"));
+  } else {
+    if (expectedMainBranch.trim() === "") {
+      violations.push(violation8("high", "worktree.main.expected-branch-missing", `neither a recorded main-worktree branch nor an explicit branch.base is available for plan "${planId}" — the expectation is never the branch observed at check time`, "record the main worktree branch at lifecycle start (plan header / --main-branch) or carry the explicit branch.base"));
+    } else {
+      violations.push(...assertMainWorktreeResidency(mainWorktree, expectedMainBranch).violations);
+    }
+    if (mainWorktree.branch !== "" && lifecycleBranches.includes(mainWorktree.branch)) {
+      violations.push(violation8("high", "worktree.main.residency-switched", `main worktree "${mainWorktree.root}" is on branch "${mainWorktree.branch}", which is owned by an active lifecycle — main must not carry any lifecycle-owned branch, even when the recorded expectation matches it`, "restore the recorded main-worktree branch; never switch main to satisfy a check"));
+    }
+  }
+  const integrationRequired = workflowType === "iteration" || integrationWorktreePath.trim() !== "" || integrationBranch.trim() !== "";
+  if (integrationRequired && (integrationWorktreePath.trim() === "" || integrationBranch.trim() === "")) {
+    violations.push(violation8("high", "worktree.l1.integration-missing", `integration worktree path and branch are both required (workflow type "${workflowType}") for plan "${planId}" — got path ${JSON.stringify(integrationWorktreePath)}, branch ${JSON.stringify(integrationBranch)}`, "record snapshot integration_worktree_path + branch.integration (the dedicated integration checkout), or pass both empty for a standalone plan"));
   }
   if (leaseWorktreePath.trim() === "") {
-    violations.push(violation7("high", "worktree.l1.lease-missing", `execution_lease.worktree_path is empty for plan "${planId}" — no verified execution_lease to dispatch against`, "claim the execution_lease with an absolute feature worktree path before dispatch"));
+    violations.push(violation8("high", "worktree.l1.lease-missing", `execution_lease.worktree_path is empty for plan "${planId}" — no verified execution_lease to dispatch against`, "claim the execution_lease with an absolute feature worktree path before dispatch"));
   }
   if (leaseWorkingBranch.trim() === "") {
-    violations.push(violation7("high", "worktree.l1.lease-branch-missing", `execution_lease.working_branch is empty for plan "${planId}"`, "record the lease working_branch before dispatch"));
-  }
-  if (controlWorktreePath !== "" && leaseWorktreePath !== "") {
-    if (resolve8(controlWorktreePath) === resolve8(leaseWorktreePath)) {
-      violations.push(violation7("critical", "worktree.l1.lease-equals-control", `execution_lease.worktree_path "${leaseWorktreePath}" equals metadata.control_worktree_path — the feature worktree MUST differ from the control worktree (L1 isolation; product edits never land in the control checkout)`, "use a distinct feature worktree for the plan (git worktree add <path> <branch>) and update the lease"));
-    } else if (existsSync7(leaseWorktreePath)) {
-      const controlProbe = probeCheckout(controlWorktreePath, opts);
-      const leaseProbe = probeCheckout(leaseWorktreePath, opts);
-      if ("error" in controlProbe) {
-        violations.push(violation7("high", "worktree.l1.checkout-probe-failed", `cannot establish the lease worktree "${leaseWorktreePath}" is a distinct Git checkout from the control worktree "${controlWorktreePath}" for plan "${planId}": ${controlProbe.error}`, "verify the control worktree path is a git checkout (integration-branch checkout)"));
-      } else if ("error" in leaseProbe) {
-        violations.push(violation7("high", "worktree.l1.checkout-probe-failed", `cannot establish the lease worktree "${leaseWorktreePath}" is a distinct Git checkout from the control worktree "${controlWorktreePath}" for plan "${planId}": ${leaseProbe.error}`, "verify the lease worktree path is a git checkout (git worktree add <path> <branch>)"));
-      } else if (controlProbe.gitDir === leaseProbe.gitDir) {
-        violations.push(violation7("critical", "worktree.l1.lease-equals-control", `execution_lease.worktree_path "${leaseWorktreePath}" is the same Git checkout as metadata.control_worktree_path "${controlWorktreePath}" — a plain subdirectory or symlink alias of the control checkout is not isolation; the feature worktree MUST be a distinct checkout`, "use a distinct feature worktree for the plan (git worktree add <path> <branch>) and update the lease"));
+    violations.push(violation8("high", "worktree.l1.lease-branch-missing", `execution_lease.working_branch is empty for plan "${planId}"`, "record the lease working_branch before dispatch"));
+  }
+  if (integrationRequired && integrationWorktreePath.trim() !== "" && integrationBranch.trim() !== "") {
+    if (!existsSync8(integrationWorktreePath)) {
+      violations.push(violation8("high", "worktree.l1.integration-missing", `integration worktree "${integrationWorktreePath}" does not exist for plan "${planId}" — the integration checkout must exist before dispatch`, `create it before dispatch: git worktree add ${shellQuote(integrationWorktreePath)} ${shellQuote(integrationBranch)}`));
+    } else {
+      const probe = probeBranch(integrationWorktreePath, opts);
+      if ("error" in probe) {
+        violations.push(violation8("high", "worktree.branch-probe-failed", `cannot probe branch at the integration worktree "${integrationWorktreePath}" for plan "${planId}": ${probe.error}`, "verify the path is a git worktree checkout on the integration branch (not detached)"));
+      } else if (probe.branch !== integrationBranch) {
+        violations.push(violation8("high", "worktree.branch-mismatch", `integration worktree "${integrationWorktreePath}" is on branch "${probe.branch}", expected branch.integration "${integrationBranch}" (plan "${planId}")`, `checkout ${shellQuote(integrationBranch)} in the integration worktree`));
       }
     }
   }
-  if (leaseWorktreePath !== "" && !existsSync7(leaseWorktreePath)) {
-    violations.push(violation7("high", "worktree.l1.feature-missing", `feature worktree directory "${leaseWorktreePath}" does not exist for plan "${planId}"`, `create it before dispatch: git worktree add ${leaseWorktreePath} <working-branch>`));
-  } else if (leaseWorktreePath !== "" && leaseWorkingBranch !== "") {
+  const identityViolation = (aPath, bPath, code, describe, fix) => {
+    if (resolve8(aPath) === resolve8(bPath)) {
+      return violation8("critical", code, `${describe} — the same checkout (normalized path equality) is not isolation`, fix);
+    }
+    if (!existsSync8(aPath) || !existsSync8(bPath))
+      return null;
+    const a = checkout(aPath);
+    const b = checkout(bPath);
+    if ("error" in a) {
+      return violation8("high", "worktree.l1.checkout-probe-failed", `cannot establish the Git-checkout identity of "${aPath}" for plan "${planId}": ${a.error}`, "verify the path is a git checkout");
+    }
+    if ("error" in b) {
+      return violation8("high", "worktree.l1.checkout-probe-failed", `cannot establish the Git-checkout identity of "${bPath}" for plan "${planId}": ${b.error}`, "verify the path is a git checkout");
+    }
+    if (a.gitDir === b.gitDir) {
+      return violation8("critical", code, `${describe} — a plain subdirectory or symlink alias of the other checkout is not isolation (canonical per-worktree git dirs match)`, fix);
+    }
+    return null;
+  };
+  if (mainWorktree !== null && leaseWorktreePath.trim() !== "") {
+    const v = identityViolation(mainWorktree.root, leaseWorktreePath, "worktree.l1.lease-equals-main", `execution_lease.worktree_path "${leaseWorktreePath}" is the same Git checkout as the main worktree "${mainWorktree.root}" (plan "${planId}")`, "use a distinct feature worktree for the plan (git worktree add <path> <branch>) and update the lease");
+    if (v !== null)
+      violations.push(v);
+  }
+  if (mainWorktree !== null && integrationRequired && integrationWorktreePath.trim() !== "") {
+    const v = identityViolation(mainWorktree.root, integrationWorktreePath, "worktree.l1.integration-equals-main", `integration worktree "${integrationWorktreePath}" is the same Git checkout as the main worktree "${mainWorktree.root}" (plan "${planId}") — the integration checkout is the sole merge cwd and must be dedicated`, "use a dedicated integration checkout on branch.integration (git worktree add <path> <integration-branch>) and record it as integration_worktree_path");
+    if (v !== null)
+      violations.push(v);
+  }
+  if (integrationRequired && integrationWorktreePath.trim() !== "" && leaseWorktreePath.trim() !== "") {
+    const v = identityViolation(integrationWorktreePath, leaseWorktreePath, "worktree.l1.lease-equals-integration", `execution_lease.worktree_path "${leaseWorktreePath}" is the same Git checkout as the integration worktree "${integrationWorktreePath}" (plan "${planId}") — the feature worktree must be distinct from both main and integration`, "use a distinct feature worktree for the plan (git worktree add <path> <working-branch>) and update the lease");
+    if (v !== null)
+      violations.push(v);
+  }
+  if (leaseWorktreePath.trim() !== "" && !existsSync8(leaseWorktreePath)) {
+    violations.push(violation8("high", "worktree.l1.feature-missing", `feature worktree directory "${leaseWorktreePath}" does not exist for plan "${planId}"`, `create it before dispatch: git worktree add ${shellQuote(leaseWorktreePath)} <working-branch>`));
+  } else if (leaseWorktreePath.trim() !== "" && leaseWorkingBranch.trim() !== "") {
     const probe = probeBranch(leaseWorktreePath, opts);
     if ("error" in probe) {
-      violations.push(violation7("high", "worktree.l1.branch-probe-failed", `cannot probe branch at "${leaseWorktreePath}" for plan "${planId}": ${probe.error}`, "verify the path is a git worktree checkout on the lease working branch (not detached)"));
+      violations.push(violation8("high", "worktree.l1.branch-probe-failed", `cannot probe branch at "${leaseWorktreePath}" for plan "${planId}": ${probe.error}`, "verify the path is a git worktree checkout on the lease working branch (not detached)"));
     } else if (probe.branch !== leaseWorkingBranch) {
-      violations.push(violation7("high", "worktree.l1.branch-mismatch", `feature worktree "${leaseWorktreePath}" is on branch "${probe.branch}", expected execution_lease.working_branch "${leaseWorkingBranch}" (plan "${planId}")`, `checkout ${leaseWorkingBranch} in the feature worktree`));
+      violations.push(violation8("high", "worktree.l1.branch-mismatch", `feature worktree "${leaseWorktreePath}" is on branch "${probe.branch}", expected execution_lease.working_branch "${leaseWorkingBranch}" (plan "${planId}")`, `checkout ${shellQuote(leaseWorkingBranch)} in the feature worktree`));
     }
   }
   return gate(violations);
@@ -2649,32 +2847,32 @@ function l2PreDispatchCheck(input, opts = {}) {
   const tracks = input.tracks ?? [];
   const seenPaths = new Set;
   if (tracks.length < 1) {
-    violations.push(violation7("high", "worktree.l2.no-tracks", "no parallel writable tracks — the L2 pre-dispatch checklist requires at least one track with an absolute worktreePath and Working branch", "pass each track's absolute Worktree path and PM-approved Working branch"));
+    violations.push(violation8("high", "worktree.l2.no-tracks", "no parallel writable tracks — the L2 pre-dispatch checklist requires at least one track with an absolute worktreePath and Working branch", "pass each track's absolute Worktree path and PM-approved Working branch"));
   }
   tracks.forEach((track, index) => {
     if (track.worktreePath.trim() === "" || track.workingBranch.trim() === "") {
-      violations.push(violation7("high", "worktree.l2.track-invalid", `track ${index + 1} is missing worktreePath and/or workingBranch`, "fill both fields for every track"));
+      violations.push(violation8("high", "worktree.l2.track-invalid", `track ${index + 1} is missing worktreePath and/or workingBranch`, "fill both fields for every track"));
       return;
     }
-    if (!isAbsolute5(track.worktreePath)) {
-      violations.push(violation7("high", "worktree.l2.track-path-relative", `track ${index + 1} worktreePath "${track.worktreePath}" is not an absolute path — L2 tracks MUST use absolute worktree checkout paths (consistent with the lease validator's absolute worktree_path enforcement)`, `use an absolute path for track ${index + 1} (e.g. /Users/<you>/worktrees/<branch>)`));
+    if (!isAbsolute6(track.worktreePath)) {
+      violations.push(violation8("high", "worktree.l2.track-path-relative", `track ${index + 1} worktreePath "${track.worktreePath}" is not an absolute path — L2 tracks MUST use absolute worktree checkout paths (consistent with the lease validator's absolute worktree_path enforcement)`, `use an absolute path for track ${index + 1} (e.g. /Users/<you>/worktrees/<branch>)`));
       return;
     }
     const normalized = resolve8(track.worktreePath);
     if (seenPaths.has(normalized)) {
-      violations.push(violation7("high", "worktree.l2.track-path-collision", `duplicate worktreePath "${track.worktreePath}" across parallel tracks — L2 parallel-writable isolation requires a distinct absolute Worktree path per track (N parallel invokes ≠ isolation)`, "give every parallel track its own git worktree checkout"));
+      violations.push(violation8("high", "worktree.l2.track-path-collision", `duplicate worktreePath "${track.worktreePath}" across parallel tracks — L2 parallel-writable isolation requires a distinct absolute Worktree path per track (N parallel invokes ≠ isolation)`, "give every parallel track its own git worktree checkout"));
       return;
     }
     seenPaths.add(normalized);
-    if (!existsSync7(track.worktreePath)) {
-      violations.push(violation7("high", "worktree.l2.track-missing", `track worktree directory "${track.worktreePath}" does not exist`, `create it before dispatch: git worktree add ${track.worktreePath} ${track.workingBranch}`));
+    if (!existsSync8(track.worktreePath)) {
+      violations.push(violation8("high", "worktree.l2.track-missing", `track worktree directory "${track.worktreePath}" does not exist`, `create it before dispatch: git worktree add ${track.worktreePath} ${track.workingBranch}`));
       return;
     }
     const probe = probeBranch(track.worktreePath, opts);
     if ("error" in probe) {
-      violations.push(violation7("high", "worktree.l2.branch-probe-failed", `cannot probe branch at "${track.worktreePath}": ${probe.error}`, "verify the path is a git worktree checkout on its Working branch (not detached)"));
+      violations.push(violation8("high", "worktree.l2.branch-probe-failed", `cannot probe branch at "${track.worktreePath}": ${probe.error}`, "verify the path is a git worktree checkout on its Working branch (not detached)"));
     } else if (probe.branch !== track.workingBranch) {
-      violations.push(violation7("high", "worktree.l2.branch-mismatch", `track worktree "${track.worktreePath}" is on branch "${probe.branch}", expected Working branch "${track.workingBranch}"`, `checkout ${track.workingBranch} in that worktree`));
+      violations.push(violation8("high", "worktree.l2.branch-mismatch", `track worktree "${track.worktreePath}" is on branch "${probe.branch}", expected Working branch "${track.workingBranch}"`, `checkout ${track.workingBranch} in that worktree`));
     }
   });
   return gate(violations);
@@ -2683,12 +2881,108 @@ function assertBranchAlignment(worktreePath, expectedBranch, opts = {}) {
   const violations = [];
   const probe = probeBranch(worktreePath, opts);
   if ("error" in probe) {
-    violations.push(violation7("high", "worktree.branch-probe-failed", `cannot probe branch at "${worktreePath}": ${probe.error}`, "verify the path is a git worktree checkout on the expected branch (not detached)"));
+    violations.push(violation8("high", "worktree.branch-probe-failed", `cannot probe branch at "${worktreePath}": ${probe.error}`, "verify the path is a git worktree checkout on the expected branch (not detached)"));
   } else if (probe.branch !== expectedBranch) {
-    violations.push(violation7("high", "worktree.branch-mismatch", `worktree "${worktreePath}" is on branch "${probe.branch}", expected "${expectedBranch}" (Assignment Working branch)`, `checkout ${expectedBranch} in that worktree`));
+    violations.push(violation8("high", "worktree.branch-mismatch", `worktree "${worktreePath}" is on branch "${probe.branch}", expected "${expectedBranch}" (Assignment Working branch)`, `checkout ${expectedBranch} in that worktree`));
   }
   return gate(violations);
 }
+function shellQuote(value) {
+  return "'" + value.replaceAll("'", `'"'"'`) + "'";
+}
+function isPlainObject8(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function collectActiveLifecycleBranches(snapshots) {
+  const owned = new Set;
+  for (const doc of snapshots) {
+    const branch = doc.branch;
+    if (isPlainObject8(branch) && typeof branch.integration === "string" && branch.integration.trim() !== "") {
+      owned.add(branch.integration);
+    }
+    if (!Array.isArray(doc.plans))
+      continue;
+    for (const row of doc.plans) {
+      if (!isPlainObject8(row))
+        continue;
+      const lease = row.execution_lease;
+      if (isPlainObject8(lease) && typeof lease.working_branch === "string" && lease.working_branch.trim() !== "") {
+        owned.add(lease.working_branch);
+      }
+      const meta = row.metadata;
+      if (isPlainObject8(meta) && Array.isArray(meta.track_branches)) {
+        for (const branch2 of meta.track_branches) {
+          if (typeof branch2 === "string" && branch2.trim() !== "")
+            owned.add(branch2);
+        }
+      }
+      if (isPlainObject8(meta) && typeof meta.working_branch === "string" && meta.working_branch.trim() !== "") {
+        owned.add(meta.working_branch);
+      }
+    }
+  }
+  return [...owned];
+}
+function scanActiveLifecycleBranches(harnessDir, governingWorkflowId) {
+  const registerPath = join11(harnessDir, "status.json");
+  if (!existsSync9(registerPath))
+    return { kind: "ok", branches: [], notes: [] };
+  let register;
+  try {
+    register = readJson(registerPath);
+  } catch (error) {
+    return { kind: "refusal", code: "worktree.l1.lifecycle-register-unreadable", detail: `${registerPath}: ${error.message}` };
+  }
+  if (!isPlainObject8(register) || register.version !== 2 || !Array.isArray(register.workflows)) {
+    return {
+      kind: "refusal",
+      code: "worktree.l1.lifecycle-register-unreadable",
+      detail: `${registerPath}: not a readable v2 root register (version 2 + workflows[]) — the active lifecycle set cannot be enumerated`
+    };
+  }
+  let workflowsDir;
+  try {
+    workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
+  } catch (error) {
+    return { kind: "refusal", code: "worktree.l1.lifecycle-register-unreadable", detail: `${registerPath}: ${error.message}` };
+  }
+  const owned = new Set;
+  const notes = [];
+  for (const entry of register.workflows) {
+    if (typeof entry !== "object" || entry === null || typeof entry.id !== "string") {
+      return {
+        kind: "refusal",
+        code: "worktree.l1.lifecycle-register-unreadable",
+        detail: `${registerPath}: malformed workflows[] entry — a registered active lifecycle cannot be identified`
+      };
+    }
+    const id = entry.id;
+    try {
+      assertSafePathComponent(id, "workflow id");
+    } catch (error) {
+      return { kind: "refusal", code: "worktree.l1.lifecycle-register-unreadable", detail: `${registerPath}: ${error.message}` };
+    }
+    if (id === governingWorkflowId)
+      continue;
+    const snapshotPath = join11(workflowsDir, id, WORKFLOW_SNAPSHOT_FILE);
+    let snapshot;
+    try {
+      const read = readWorkflowSnapshot(dirname7(snapshotPath));
+      snapshot = read.snapshot;
+      notes.push(...read.diagnostics);
+    } catch (error) {
+      return {
+        kind: "refusal",
+        code: "worktree.l1.lifecycle-snapshot-unreadable",
+        detail: `${snapshotPath}: ${error.message}`
+      };
+    }
+    for (const branch of collectActiveLifecycleBranches([snapshot]))
+      owned.add(branch);
+  }
+  return { kind: "ok", branches: [...owned], notes };
+}
+
 class SddScriptError extends Error {
   exitCode;
   constructor(message, exitCode) {
@@ -2718,21 +3012,22 @@ function gitOut(cwd, args) {
       cwd,
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"],
-      maxBuffer: GIT_CAPTURE_MAX_BYTES
+      maxBuffer: GIT_CAPTURE_MAX_BYTES,
+      timeout: gitProbeTimeoutMs()
     }).trim();
   } catch {
     return null;
   }
 }
 function probeHarnessWithStatus(root) {
-  if (isFile2(join11(root, ".mstar", "status.json")))
-    return join11(root, ".mstar");
-  if (isFile2(join11(root, ".agents", "status.json")))
-    return join11(root, ".agents");
-  if (hasWorkflowSnapshot(join11(root, ".mstar")))
-    return join11(root, ".mstar");
-  if (hasWorkflowSnapshot(join11(root, ".agents")))
-    return join11(root, ".agents");
+  if (isFile2(join12(root, ".mstar", "status.json")))
+    return join12(root, ".mstar");
+  if (isFile2(join12(root, ".agents", "status.json")))
+    return join12(root, ".agents");
+  if (hasWorkflowSnapshot(join12(root, ".mstar")))
+    return join12(root, ".mstar");
+  if (hasWorkflowSnapshot(join12(root, ".agents")))
+    return join12(root, ".agents");
   return null;
 }
 function hasWorkflowSnapshot(harnessDir) {
@@ -2740,13 +3035,13 @@ function hasWorkflowSnapshot(harnessDir) {
   try {
     workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
   } catch {
-    workflowsDir = join11(harnessDir, "workflows");
+    workflowsDir = join12(harnessDir, "workflows");
   }
   if (!isDirectory2(workflowsDir))
     return false;
   try {
     for (const entry of readdirSync6(workflowsDir, { withFileTypes: true })) {
-      if (entry.isDirectory() && isFile2(join11(workflowsDir, entry.name, "snapshot.json")))
+      if (entry.isDirectory() && isFile2(join12(workflowsDir, entry.name, "snapshot.json")))
         return true;
     }
   } catch {
@@ -2754,27 +3049,28 @@ function hasWorkflowSnapshot(harnessDir) {
   }
   return false;
 }
-function isLinkedWorktree(root) {
-  const gitDirRaw = gitOut(root, ["rev-parse", "--git-dir"]);
-  const commonRaw = gitOut(root, ["rev-parse", "--git-common-dir"]);
-  if (gitDirRaw === null || commonRaw === null)
-    return false;
-  const gitDir = isAbsolute6(gitDirRaw) ? gitDirRaw : join11(root, gitDirRaw);
-  const common = isAbsolute6(commonRaw) ? commonRaw : join11(root, commonRaw);
-  if (gitDir.includes("/.git/worktrees/") || gitDir.includes("/worktrees/"))
-    return true;
-  try {
-    const gdParent = realpathSync4(dirname6(gitDir));
-    const cmAbs = realpathSync4(common);
-    return join11(gdParent, basename4(gitDir)) !== cmAbs && gitDir !== cmAbs;
-  } catch {
-    return false;
+function checkoutRootNearestExisting(dir, boundary) {
+  const stop = resolve9(boundary);
+  const startInside = isInside(resolve9(dir), stop);
+  let current = resolve9(dir);
+  for (;; ) {
+    const probed = probeCheckoutRoot(current);
+    if (probed !== null)
+      return probed;
+    if (startInside && current === stop)
+      return null;
+    const parent = dirname8(current);
+    if (parent === current)
+      return null;
+    if (startInside && !isInside(parent, stop))
+      return null;
+    current = parent;
   }
 }
 function sddWorkspace(planId, opts = {}) {
   if (!planId) {
     throw new SddScriptError(`usage: mstar sdd workspace PLAN_ID [CONTROL_ROOT]
-  Set MSTAR_CONTROL_ROOT=<control_worktree_path> when running from a feature worktree.`, 2);
+  Set MSTAR_CONTROL_ROOT=<main-repo-root> when running from a feature worktree.`, 2);
   }
   const cwd = opts.cwd ?? process.cwd();
   const controlRoot = opts.controlRoot ?? (process.env.MSTAR_CONTROL_ROOT || undefined);
@@ -2783,16 +3079,29 @@ function sddWorkspace(planId, opts = {}) {
     if (!isDirectory2(controlRoot)) {
       throw new SddScriptError(`mstar sdd workspace: CONTROL_ROOT / MSTAR_CONTROL_ROOT is not a directory: ${controlRoot}`, 1);
     }
-    root = realpathSync4(controlRoot);
+    const supplied = realpathSync4(controlRoot);
+    const main = readMainWorktree(supplied);
+    if (main !== null) {
+      if (main.root !== supplied) {
+        throw new SddScriptError(`mstar sdd workspace: CONTROL_ROOT / MSTAR_CONTROL_ROOT "${supplied}" is a linked (integration/foreign) checkout of the main worktree "${main.root}".
+` + `  The process control root is the main worktree itself — refusing to redirect the process SSOT.
+` + `  Re-run with MSTAR_CONTROL_ROOT=${main.root}`, 1);
+      }
+      root = main.root;
+    } else if (isFile2(join12(supplied, ".git")) || gitOut(supplied, ["rev-parse", "--is-inside-work-tree"]) === "true") {
+      throw new SddScriptError(`mstar sdd workspace: cannot verify the main worktree for CONTROL_ROOT "${supplied}" (git worktree discovery failed).
+  Refusing to resolve or create any SDD tree without a verified main worktree.`, 1);
+    } else {
+      root = supplied;
+    }
   } else {
-    const topLevel = gitOut(cwd, ["rev-parse", "--show-toplevel"]);
-    root = realpathSync4(topLevel ?? cwd);
-  }
-  if (!controlRoot && isLinkedWorktree(root)) {
-    throw new SddScriptError(`mstar sdd workspace: linked worktree at ${root} has no {HARNESS_DIR}/status.json (default gitignore).
-  Refusing to create a second SDD tree under the feature checkout.
-  Re-run with MSTAR_CONTROL_ROOT=<control_worktree_path> or: mstar sdd workspace ${planId} <control_worktree_path>
-` + `  See mstar-branch-worktree «Harness path SSOT under default gitignore».`, 1);
+    const main = readMainWorktree(cwd);
+    if (main === null) {
+      throw new SddScriptError(`mstar sdd workspace: cannot verify the main worktree from cwd ${cwd} (git worktree discovery failed, git is unavailable, or the directory is not a Git worktree).
+` + `  Refusing to resolve or create any SDD tree without a verified main worktree — no second process-SSOT tree is ever created under a linked checkout.
+` + `  Re-run with MSTAR_CONTROL_ROOT=<main-repo-root> or: mstar sdd workspace ${planId} <main-repo-root>`, 1);
+    }
+    root = main.root;
   }
   const harnessOverride = opts.harnessDir ?? (process.env.MSTAR_HARNESS_DIR || undefined);
   let harnessDir;
@@ -2800,25 +3109,30 @@ function sddWorkspace(planId, opts = {}) {
     harnessDir = resolve9(root, harnessOverride);
   } else {
     const rc = findMstarc(root, root);
-    const rcHarnessDir = rc !== null ? parseMstarc(readFileSync7(rc, "utf8")).harnessDir : undefined;
+    const rcHarnessDir = rc !== null ? parseMstarc(readFileSync8(rc, "utf8")).harnessDir : undefined;
     if (rcHarnessDir) {
-      harnessDir = resolve9(rc !== null ? dirname6(rc) : root, rcHarnessDir);
+      harnessDir = resolve9(rc !== null ? dirname8(rc) : root, rcHarnessDir);
     } else {
       const probed = probeHarnessWithStatus(root);
       if (probed) {
         harnessDir = probed;
-      } else if (isDirectory2(join11(root, ".mstar"))) {
-        harnessDir = join11(root, ".mstar");
-      } else if (isDirectory2(join11(root, ".agents"))) {
-        harnessDir = join11(root, ".agents");
+      } else if (isDirectory2(join12(root, ".mstar"))) {
+        harnessDir = join12(root, ".mstar");
+      } else if (isDirectory2(join12(root, ".agents"))) {
+        harnessDir = join12(root, ".agents");
       } else {
-        harnessDir = join11(root, ".mstar");
+        harnessDir = join12(root, ".mstar");
       }
     }
   }
+  const harnessCheckout = checkoutRootNearestExisting(harnessDir, root);
+  if (harnessCheckout !== null && harnessCheckout !== root) {
+    throw new SddScriptError(`mstar sdd workspace: harness root "${harnessDir}" resolves inside Git checkout "${harnessCheckout}", not the verified main worktree "${root}".
+` + `  Refusing to redirect the process SSOT into a linked checkout — resolve MSTAR_HARNESS_DIR / .mstarc harness_dir relative to the main worktree.`, 1);
+  }
   const sddDir = resolveSddDir(harnessDir, planId);
   mkdirSync6(sddDir, { recursive: true });
-  writeFileSync4(join11(sddDir, ".gitignore"), `*
+  writeFileSync4(join12(sddDir, ".gitignore"), `*
 `);
   return realpathSync4(sddDir);
 }
@@ -2838,7 +3152,7 @@ function taskBrief(planFile, taskN, outFile, opts = {}) {
   }
   let content;
   try {
-    content = readFileSync7(planFile, "utf8");
+    content = readFileSync8(planFile, "utf8");
   } catch {
     throw new SddScriptError(`no such plan file: ${planFile}`, 2);
   }
@@ -2847,7 +3161,7 @@ function taskBrief(planFile, taskN, outFile, opts = {}) {
   if (outFile) {
     out = bound ? resolve9(observedCwd, outFile) : outFile;
   } else if (bound) {
-    out = join11(bound.sddDir, `task-${taskN}-brief.md`);
+    out = join12(bound.sddDir, `task-${taskN}-brief.md`);
     mkdirAfterGate = bound.sddDir;
   } else {
     const sddDir = opts.sddDir ?? process.env.SDD_DIR;
@@ -2855,7 +3169,7 @@ function taskBrief(planFile, taskN, outFile, opts = {}) {
       throw new SddScriptError("mstar sdd task-brief: set SDD_DIR or pass OUTFILE (run mstar sdd workspace PLAN_ID first)", 2);
     }
     mkdirSync6(sddDir, { recursive: true });
-    out = join11(sddDir, `task-${taskN}-brief.md`);
+    out = join12(sddDir, `task-${taskN}-brief.md`);
   }
   if (bound) {
     const gate2 = checkSddAction(bound, { kind: "artifact", cwd: observedCwd, target: out });
@@ -2892,7 +3206,7 @@ function taskBrief(planFile, taskN, outFile, opts = {}) {
 }
 function isInside(child, ancestor) {
   const rel = relative3(ancestor, child);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute6(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute7(rel);
 }
 function canonicalDir(path) {
   try {
@@ -2981,7 +3295,7 @@ function checkSddAction(context, action) {
   }
   return { ok: violations.length === 0, violations };
 }
-function violation8(severity, code, message, fix) {
+function violation9(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var RAW_GROUP = "__raw";
@@ -3094,7 +3408,7 @@ function validateDesignTokenFrontmatter(frontmatterText) {
   const violations = [];
   const fm = parseDesignFrontmatter(frontmatterText);
   if (fm === null) {
-    violations.push(violation8("medium", "design-md.tokens.missing-frontmatter", "no `---` YAML frontmatter block found — DESIGN.md must open with a fenced frontmatter holding the token SSOT (design-md-spec §1.5)", "add a `---` fenced frontmatter with version, name, description, and the colors/typography/spacing/rounded groups"));
+    violations.push(violation9("medium", "design-md.tokens.missing-frontmatter", "no `---` YAML frontmatter block found — DESIGN.md must open with a fenced frontmatter holding the token SSOT (design-md-spec §1.5)", "add a `---` fenced frontmatter with version, name, description, and the colors/typography/spacing/rounded groups"));
     return { ok: false, violations };
   }
   const groupEntries = (group) => {
@@ -3109,61 +3423,61 @@ function validateDesignTokenFrontmatter(frontmatterText) {
   };
   for (const group of ["colors", "typography", "spacing", "rounded"]) {
     if (!isMap(fm[group])) {
-      violations.push(violation8("medium", "design-md.tokens.group-not-map", `token group "${group}" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`${group}\` as a nested map`));
+      violations.push(violation9("medium", "design-md.tokens.group-not-map", `token group "${group}" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`${group}\` as a nested map`));
     } else if (!groupIsMap(group)) {
-      violations.push(violation8("medium", "design-md.tokens.group-not-map", `token group "${group}" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`${group}\` as a nested map`));
+      violations.push(violation9("medium", "design-md.tokens.group-not-map", `token group "${group}" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`${group}\` as a nested map`));
     } else if (groupEntries(group).length === 0) {
-      violations.push(violation8("medium", "design-md.tokens.missing-group", `missing required token group "${group}" — colors/typography/spacing/rounded are required by the frontmatter SSOT (design-md-spec §1.5)`, `add an active \`${group}:\` block with concrete token values`));
+      violations.push(violation9("medium", "design-md.tokens.missing-group", `missing required token group "${group}" — colors/typography/spacing/rounded are required by the frontmatter SSOT (design-md-spec §1.5)`, `add an active \`${group}:\` block with concrete token values`));
     }
   }
   if (!isMap(fm.components) || !groupIsMap("components")) {
-    violations.push(violation8("medium", "design-md.tokens.group-not-map", `token group "components" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`components\` as a nested map`));
+    violations.push(violation9("medium", "design-md.tokens.group-not-map", `token group "components" must be a YAML map, not a scalar (design-md-spec §1.5)`, `rewrite \`components\` as a nested map`));
   }
-  const placeholder = (group, name, value) => violations.push(violation8("low", "design-md.tokens.placeholder", `token "${group}.${name}" uses a "[...]" template value — placeholders never count as concrete tokens (completeness-checklist § How to use item 5)`, `replace \`${value}\` with a concrete value`));
+  const placeholder = (group, name, value) => violations.push(violation9("low", "design-md.tokens.placeholder", `token "${group}.${name}" uses a "[...]" template value — placeholders never count as concrete tokens (completeness-checklist § How to use item 5)`, `replace \`${value}\` with a concrete value`));
   for (const [name, value] of groupEntries("colors")) {
     if (typeof value !== "string") {
-      violations.push(violation8("medium", "design-md.tokens.color-format", `color "${name}" must be a string value (design-md-spec §2.2)`, "quote the color value"));
+      violations.push(violation9("medium", "design-md.tokens.color-format", `color "${name}" must be a string value (design-md-spec §2.2)`, "quote the color value"));
       continue;
     }
     if (isPlaceholder(value)) {
       placeholder("colors", name, value);
     } else if (!HEX_RE.test(value) && !OKLCH_RE.test(value)) {
-      violations.push(violation8("medium", "design-md.tokens.color-format", `color "${name}" = "${value}" is not a hex (\`#rrggbb\`/\`#rrggbbaa\`) or oklch() value (design-md-spec §2.2)`, "use an sRGB hex value, optionally with a `-p3` oklch() twin"));
+      violations.push(violation9("medium", "design-md.tokens.color-format", `color "${name}" = "${value}" is not a hex (\`#rrggbb\`/\`#rrggbbaa\`) or oklch() value (design-md-spec §2.2)`, "use an sRGB hex value, optionally with a `-p3` oklch() twin"));
     }
   }
   for (const [name, value] of groupEntries("typography")) {
     if (!isMap(value)) {
-      violations.push(violation8("medium", "design-md.tokens.typography-shape", `typography token "${name}" must be a map of the five properties (design-md-spec §1.5)`, "give it fontFamily/fontSize/fontWeight/lineHeight/letterSpacing"));
+      violations.push(violation9("medium", "design-md.tokens.typography-shape", `typography token "${name}" must be a map of the five properties (design-md-spec §1.5)`, "give it fontFamily/fontSize/fontWeight/lineHeight/letterSpacing"));
       continue;
     }
     const keys = Object.keys(value);
     const missing = TYPOGRAPHY_PROPS.filter((p) => !keys.includes(p));
     const extra = keys.filter((k) => !TYPOGRAPHY_PROPS.includes(k));
     if (missing.length > 0 || extra.length > 0) {
-      violations.push(violation8("medium", "design-md.tokens.typography-shape", `typography token "${name}" must have exactly the five properties fontFamily/fontSize/fontWeight/lineHeight/letterSpacing (design-md-spec §1.5)${missing.length > 0 ? ` — missing: ${missing.join(", ")}` : ""}${extra.length > 0 ? ` — extra: ${extra.join(", ")}` : ""}`, "align the token with the five-property shape"));
+      violations.push(violation9("medium", "design-md.tokens.typography-shape", `typography token "${name}" must have exactly the five properties fontFamily/fontSize/fontWeight/lineHeight/letterSpacing (design-md-spec §1.5)${missing.length > 0 ? ` — missing: ${missing.join(", ")}` : ""}${extra.length > 0 ? ` — extra: ${extra.join(", ")}` : ""}`, "align the token with the five-property shape"));
     }
     for (const prop of ["fontFamily", "fontSize"]) {
       const v = value[prop];
       if (typeof v === "string" && isPlaceholder(v))
         placeholder("typography", name, v);
       else if (typeof v !== "string" || v.trim() === "") {
-        violations.push(violation8("medium", "design-md.tokens.typography-shape", `typography token "${name}" has an empty \`${prop}\` (design-md-spec §1.5)`, `fill \`${prop}\` with a concrete value`));
+        violations.push(violation9("medium", "design-md.tokens.typography-shape", `typography token "${name}" has an empty \`${prop}\` (design-md-spec §1.5)`, `fill \`${prop}\` with a concrete value`));
       }
     }
   }
   if (groupIsMap("spacing")) {
     const spacing = fm.spacing;
     if (!Object.prototype.hasOwnProperty.call(spacing, "base")) {
-      violations.push(violation8("medium", "design-md.tokens.spacing-base", "spacing must declare the base unit as `base` (design-md-spec §2.4)", "add `base: 4px` (or 8px) to the spacing group"));
+      violations.push(violation9("medium", "design-md.tokens.spacing-base", "spacing must declare the base unit as `base` (design-md-spec §2.4)", "add `base: 4px` (or 8px) to the spacing group"));
     }
     for (const [name, value] of Object.entries(spacing)) {
       if (name !== "base" && name !== RAW_GROUP && !/^\d+$/.test(name)) {
-        violations.push(violation8("medium", "design-md.tokens.spacing-key", `spacing key "${name}" must be \`base\` or a numeric multiplier (design-md-spec §1.5)`, "use numeric scale-step keys or `base`"));
+        violations.push(violation9("medium", "design-md.tokens.spacing-key", `spacing key "${name}" must be \`base\` or a numeric multiplier (design-md-spec §1.5)`, "use numeric scale-step keys or `base`"));
       }
       if (typeof value === "string" && isPlaceholder(value)) {
         placeholder("spacing", name, value);
       } else if (typeof value !== "string" || !PX_RE.test(value)) {
-        violations.push(violation8("medium", "design-md.tokens.spacing-format", `spacing value "${name}" = "${String(value)}" is not a px length (design-md-spec §1.5)`, "use a pixel value like `4px`"));
+        violations.push(violation9("medium", "design-md.tokens.spacing-format", `spacing value "${name}" = "${String(value)}" is not a px length (design-md-spec §1.5)`, "use a pixel value like `4px`"));
       }
     }
   }
@@ -3171,12 +3485,12 @@ function validateDesignTokenFrontmatter(frontmatterText) {
     if (typeof value === "string" && isPlaceholder(value)) {
       placeholder("rounded", name, value);
     } else if (typeof value !== "string" || !PX_RE.test(value)) {
-      violations.push(violation8("medium", "design-md.tokens.rounded-format", `rounded value "${name}" = "${String(value)}" is not a px length (design-md-spec §1.5)`, "use a pixel value like `6px`"));
+      violations.push(violation9("medium", "design-md.tokens.rounded-format", `rounded value "${name}" = "${String(value)}" is not a px length (design-md-spec §1.5)`, "use a pixel value like `6px`"));
     }
   }
   for (const [name, value] of groupEntries("components")) {
     if (!isMap(value)) {
-      violations.push(violation8("medium", "design-md.tokens.components-shape", `component token "${name}" must be a map of properties (design-md-spec §2.8)`, "give it backgroundColor/textColor/typography/rounded/padding/height"));
+      violations.push(violation9("medium", "design-md.tokens.components-shape", `component token "${name}" must be a map of properties (design-md-spec §2.8)`, "give it backgroundColor/textColor/typography/rounded/padding/height"));
       continue;
     }
     for (const [prop, v] of Object.entries(value)) {
@@ -3192,7 +3506,7 @@ function validateDesignTokenFrontmatter(frontmatterText) {
       const [, refGroup, refKey] = ref;
       const resolves = REF_GROUPS.includes(refGroup) && groupIsMap(refGroup) && Object.prototype.hasOwnProperty.call(fm[refGroup], refKey);
       if (!resolves) {
-        violations.push(violation8("medium", "design-md.tokens.ref-unresolved", `component "${name}" references "${v}" which does not resolve to an active token in this frontmatter (design-md-spec §6 — {path} refs MUST trace back to a key)`, `add the referenced token or use a literal value`));
+        violations.push(violation9("medium", "design-md.tokens.ref-unresolved", `component "${name}" references "${v}" which does not resolve to an active token in this frontmatter (design-md-spec §6 — {path} refs MUST trace back to a key)`, `add the referenced token or use a literal value`));
       }
     }
   }
@@ -3204,7 +3518,7 @@ function assertLightDarkParity(lightFm, darkFm) {
   const light = parseDesignFrontmatter(lightFm);
   const dark = parseDesignFrontmatter(darkFm);
   if (light === null || dark === null) {
-    violations.push(violation8("medium", "design-md.parity.missing-frontmatter", `light/dark parity needs a YAML frontmatter in both files — ${light === null ? "DESIGN.md" : "DESIGN.dark.md"} has none (design-md-spec §4 rules 1–2)`, "add the fenced frontmatter to both theme files"));
+    violations.push(violation9("medium", "design-md.parity.missing-frontmatter", `light/dark parity needs a YAML frontmatter in both files — ${light === null ? "DESIGN.md" : "DESIGN.dark.md"} has none (design-md-spec §4 rules 1–2)`, "add the fenced frontmatter to both theme files"));
     return { ok: false, violations };
   }
   const activeKeys = (fm) => {
@@ -3222,12 +3536,12 @@ function assertLightDarkParity(lightFm, darkFm) {
   const darkKeys = activeKeys(dark);
   for (const key of lightKeys) {
     if (!darkKeys.has(key)) {
-      violations.push(violation8("medium", "design-md.parity.missing-dark", `token "${key}" is active in DESIGN.md but missing from DESIGN.dark.md — both files must define the same token set (design-md-spec §4 rule 3)`, "add the token to DESIGN.dark.md with a dark-appropriate value"));
+      violations.push(violation9("medium", "design-md.parity.missing-dark", `token "${key}" is active in DESIGN.md but missing from DESIGN.dark.md — both files must define the same token set (design-md-spec §4 rule 3)`, "add the token to DESIGN.dark.md with a dark-appropriate value"));
     }
   }
   for (const key of darkKeys) {
     if (!lightKeys.has(key)) {
-      violations.push(violation8("medium", "design-md.parity.missing-light", `token "${key}" is active in DESIGN.dark.md but missing from DESIGN.md — DESIGN.md is the SSOT for token names (design-md-spec §4 rules 3–4)`, "add the token to DESIGN.md, or remove it from the dark file"));
+      violations.push(violation9("medium", "design-md.parity.missing-light", `token "${key}" is active in DESIGN.dark.md but missing from DESIGN.md — DESIGN.md is the SSOT for token names (design-md-spec §4 rules 3–4)`, "add the token to DESIGN.md, or remove it from the dark file"));
     }
   }
   return { ok: violations.length === 0, violations };
@@ -3380,7 +3694,7 @@ function completenessLevel(frontmatterText, checklist) {
   const upgradeTo = candidate === undefined ? null : candidate;
   return { level, items, missing, placeholders, upgradeTo, bodyUnverified };
 }
-function violation9(severity, code, message, fix) {
+function violation10(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var AUDIT_EFFORTS = ["XS", "S", "M", "L", "XL"];
@@ -3413,14 +3727,14 @@ function validateAuditStatusBlocks(planText) {
   const violations = [];
   const blocks = parseStatusBlocks(planText);
   if (blocks.length === 0) {
-    violations.push(violation9("medium", "audit.status.missing-block", "no `## Status` block found — audit plan files carry the Status block fields (mstar-audit SKILL.md § Plan output)", "add a `## Status` block with Priority, Effort, Risk, Depends on, Category, Planned at"));
+    violations.push(violation10("medium", "audit.status.missing-block", "no `## Status` block found — audit plan files carry the Status block fields (mstar-audit SKILL.md § Plan output)", "add a `## Status` block with Priority, Effort, Risk, Depends on, Category, Planned at"));
     return { ok: false, violations };
   }
   blocks.forEach((block, index) => {
     const label = blocks.length > 1 ? ` #${index + 1}` : "";
     for (const field of AUDIT_STATUS_FIELDS) {
       if (!block.fields.has(field)) {
-        violations.push(violation9("medium", "audit.status.missing-field", `Status block${label} missing required field "${field}" (mstar-audit SKILL.md § Plan output)`, `add \`- **${field}**: <value>\` to the Status block`));
+        violations.push(violation10("medium", "audit.status.missing-field", `Status block${label} missing required field "${field}" (mstar-audit SKILL.md § Plan output)`, `add \`- **${field}**: <value>\` to the Status block`));
       }
     }
     const check = (field, pattern, code, expected) => {
@@ -3428,7 +3742,7 @@ function validateAuditStatusBlocks(planText) {
       if (value === undefined)
         return;
       if (!pattern.test(value)) {
-        violations.push(violation9("medium", code, `Status block${label} "${field}" = "${value}" — expected ${expected} (mstar-audit SKILL.md § Plan output)`, `fix \`- **${field}**:\` to one of: ${expected}`));
+        violations.push(violation10("medium", code, `Status block${label} "${field}" = "${value}" — expected ${expected} (mstar-audit SKILL.md § Plan output)`, `fix \`- **${field}**:\` to one of: ${expected}`));
       }
     };
     check("Priority", /^P[123]$/, "audit.status.invalid-priority", "P1 | P2 | P3");
@@ -3440,7 +3754,7 @@ function validateAuditStatusBlocks(planText) {
   });
   return { ok: violations.length === 0, violations };
 }
-function violation10(severity, code, message, fix) {
+function violation11(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var KNOWLEDGE_REQUIRED_FIELDS = ["module", "date", "problem_type", "category", "severity"];
@@ -3605,36 +3919,36 @@ function validateSchemaYaml(frontmatterText) {
   const violations = [];
   const doc = parseYamlLite(frontmatterText);
   if (doc === null) {
-    violations.push(violation10("medium", "compound.schema.missing-frontmatter", "no `---` YAML frontmatter block found — knowledge docs must open with the schema.yaml contract (mstar-compound/references/schema.yaml)", "add the fenced frontmatter with module, date, problem_type, category, severity"));
+    violations.push(violation11("medium", "compound.schema.missing-frontmatter", "no `---` YAML frontmatter block found — knowledge docs must open with the schema.yaml contract (mstar-compound/references/schema.yaml)", "add the fenced frontmatter with module, date, problem_type, category, severity"));
     return { ok: false, violations };
   }
   const isStr = (v) => typeof v === "string";
-  const missing = (field) => violations.push(violation10("medium", "compound.schema.missing-field", `missing required frontmatter field "${field}" (schema.yaml required_fields)`, `add \`${field}: <value>\` to the frontmatter`));
+  const missing = (field) => violations.push(violation11("medium", "compound.schema.missing-field", `missing required frontmatter field "${field}" (schema.yaml required_fields)`, `add \`${field}: <value>\` to the frontmatter`));
   for (const field of KNOWLEDGE_REQUIRED_FIELDS) {
     if (!(field in doc) || doc[field] === "")
       missing(field);
   }
   if (doc.date !== undefined && (!isStr(doc.date) || !DATE_RE5.test(doc.date))) {
-    violations.push(violation10("medium", "compound.schema.invalid-date", `date "${String(doc.date)}" must be a YYYY-MM-DD string (schema.yaml required_fields.date)`, "use `YYYY-MM-DD`"));
+    violations.push(violation11("medium", "compound.schema.invalid-date", `date "${String(doc.date)}" must be a YYYY-MM-DD string (schema.yaml required_fields.date)`, "use `YYYY-MM-DD`"));
   }
   const problemType = doc.problem_type;
   if (problemType !== undefined && !isStr(problemType)) {
-    violations.push(violation10("medium", "compound.schema.invalid-problem-type", `problem_type "${String(problemType)}" must be a string — one of the schema.yaml enum values (bug: build_error…config_error; knowledge: developer_experience…testing_pattern)`, "pick the narrowest applicable problem_type from schema.yaml"));
+    violations.push(violation11("medium", "compound.schema.invalid-problem-type", `problem_type "${String(problemType)}" must be a string — one of the schema.yaml enum values (bug: build_error…config_error; knowledge: developer_experience…testing_pattern)`, "pick the narrowest applicable problem_type from schema.yaml"));
   }
   const problemTypeValid = isStr(problemType) && KNOWLEDGE_PROBLEM_TYPES.includes(problemType);
   if (isStr(problemType) && !problemTypeValid) {
-    violations.push(violation10("medium", "compound.schema.invalid-problem-type", `problem_type "${problemType}" is not one of the schema.yaml enum values (bug: build_error…config_error; knowledge: developer_experience…testing_pattern)`, "pick the narrowest applicable problem_type from schema.yaml"));
+    violations.push(violation11("medium", "compound.schema.invalid-problem-type", `problem_type "${problemType}" is not one of the schema.yaml enum values (bug: build_error…config_error; knowledge: developer_experience…testing_pattern)`, "pick the narrowest applicable problem_type from schema.yaml"));
   }
   if (doc.severity !== undefined && !isStr(doc.severity)) {
-    violations.push(violation10("medium", "compound.schema.invalid-severity", `severity "${String(doc.severity)}" must be a string — critical | high | medium | low (schema.yaml required_fields.severity)`, "use one of the four severity values"));
+    violations.push(violation11("medium", "compound.schema.invalid-severity", `severity "${String(doc.severity)}" must be a string — critical | high | medium | low (schema.yaml required_fields.severity)`, "use one of the four severity values"));
   }
   if (isStr(doc.severity) && !KNOWLEDGE_SEVERITIES.includes(doc.severity)) {
-    violations.push(violation10("medium", "compound.schema.invalid-severity", `severity "${doc.severity}" must be critical | high | medium | low (schema.yaml required_fields.severity)`, "use one of the four severity values"));
+    violations.push(violation11("medium", "compound.schema.invalid-severity", `severity "${doc.severity}" must be critical | high | medium | low (schema.yaml required_fields.severity)`, "use one of the four severity values"));
   }
   if (problemTypeValid && isStr(doc.category)) {
     const expected = KNOWLEDGE_CATEGORY_MAP[problemType];
     if (doc.category !== expected) {
-      violations.push(violation10("medium", "compound.schema.category-mismatch", `category "${doc.category}" does not match problem_type "${problemType}" — category-mapping.md rule 1 maps it to "${expected}"`, `set \`category: ${expected}\` (the directory name under {KNOWLEDGE_DIR})`));
+      violations.push(violation11("medium", "compound.schema.category-mismatch", `category "${doc.category}" does not match problem_type "${problemType}" — category-mapping.md rule 1 maps it to "${expected}"`, `set \`category: ${expected}\` (the directory name under {KNOWLEDGE_DIR})`));
     }
   }
   if (problemTypeValid) {
@@ -3642,37 +3956,37 @@ function validateSchemaYaml(frontmatterText) {
     if (isBug) {
       for (const field of ["symptoms", "root_cause", "resolution_type"]) {
         if (!(field in doc)) {
-          violations.push(violation10("medium", "compound.schema.missing-track-field", `bug-track doc missing required field "${field}" (schema.yaml track_rules.bug)`, `add \`${field}:\` to the frontmatter`));
+          violations.push(violation11("medium", "compound.schema.missing-track-field", `bug-track doc missing required field "${field}" (schema.yaml track_rules.bug)`, `add \`${field}:\` to the frontmatter`));
         }
       }
       if (doc.symptoms !== undefined && !Array.isArray(doc.symptoms)) {
-        violations.push(violation10("medium", "compound.schema.invalid-symptoms", "bug-track `symptoms` must be a YAML list (schema.yaml track_rules.bug)", "list the observable symptoms under `symptoms:`"));
+        violations.push(violation11("medium", "compound.schema.invalid-symptoms", "bug-track `symptoms` must be a YAML list (schema.yaml track_rules.bug)", "list the observable symptoms under `symptoms:`"));
       }
       if (doc.root_cause !== undefined && !isStr(doc.root_cause)) {
-        violations.push(violation10("medium", "compound.schema.invalid-root-cause", "bug-track `root_cause` must be a string (schema.yaml track_rules.bug)", "write the fundamental technical cause as a string"));
+        violations.push(violation11("medium", "compound.schema.invalid-root-cause", "bug-track `root_cause` must be a string (schema.yaml track_rules.bug)", "write the fundamental technical cause as a string"));
       }
       if (isStr(doc.resolution_type) && !KNOWLEDGE_RESOLUTION_TYPES.includes(doc.resolution_type)) {
-        violations.push(violation10("medium", "compound.schema.invalid-resolution-type", `resolution_type "${doc.resolution_type}" is not one of the schema.yaml track_rules.bug enum values`, "use code_fix | migration | config_change | test_fix | dependency_update | environment_setup | workflow_improvement | documentation_update | tooling_addition"));
+        violations.push(violation11("medium", "compound.schema.invalid-resolution-type", `resolution_type "${doc.resolution_type}" is not one of the schema.yaml track_rules.bug enum values`, "use code_fix | migration | config_change | test_fix | dependency_update | environment_setup | workflow_improvement | documentation_update | tooling_addition"));
       }
     } else if (doc.applies_when !== undefined && !Array.isArray(doc.applies_when)) {
-      violations.push(violation10("low", "compound.schema.invalid-applies-when", "knowledge-track `applies_when` must be a YAML list when present (schema.yaml track_rules.knowledge)", "list the conditions under `applies_when:`"));
+      violations.push(violation11("low", "compound.schema.invalid-applies-when", "knowledge-track `applies_when` must be a YAML list when present (schema.yaml track_rules.knowledge)", "list the conditions under `applies_when:`"));
     }
   }
   if (doc.plan_id !== undefined && !isStr(doc.plan_id)) {
-    violations.push(violation10("low", "compound.schema.invalid-plan-id", "optional `plan_id` must be a string (schema.yaml optional_fields.plan_id)", "reference the status.json plan id as a string"));
+    violations.push(violation11("low", "compound.schema.invalid-plan-id", "optional `plan_id` must be a string (schema.yaml optional_fields.plan_id)", "reference the status.json plan id as a string"));
   }
   if (doc.tags !== undefined) {
     if (!Array.isArray(doc.tags)) {
-      violations.push(violation10("low", "compound.schema.invalid-tags", "optional `tags` must be a YAML list (schema.yaml optional_fields.tags)", "list lowercase, hyphen-separated keywords"));
+      violations.push(violation11("low", "compound.schema.invalid-tags", "optional `tags` must be a YAML list (schema.yaml optional_fields.tags)", "list lowercase, hyphen-separated keywords"));
     } else if (doc.tags.length > 8) {
-      violations.push(violation10("low", "compound.schema.tags-too-many", `tags has ${doc.tags.length} entries — max 8 (schema.yaml optional_fields.tags.max_items)`, "trim the tag list to at most 8 keywords"));
+      violations.push(violation11("low", "compound.schema.tags-too-many", `tags has ${doc.tags.length} entries — max 8 (schema.yaml optional_fields.tags.max_items)`, "trim the tag list to at most 8 keywords"));
     }
   }
   if (doc.last_updated !== undefined && (!isStr(doc.last_updated) || !DATE_RE5.test(doc.last_updated))) {
-    violations.push(violation10("low", "compound.schema.invalid-last-updated", `last_updated "${String(doc.last_updated)}" must be YYYY-MM-DD (schema.yaml optional_fields.last_updated)`, "use `YYYY-MM-DD`"));
+    violations.push(violation11("low", "compound.schema.invalid-last-updated", `last_updated "${String(doc.last_updated)}" must be YYYY-MM-DD (schema.yaml optional_fields.last_updated)`, "use `YYYY-MM-DD`"));
   }
   if (doc.related_components !== undefined && !Array.isArray(doc.related_components)) {
-    violations.push(violation10("low", "compound.schema.invalid-related-components", "optional `related_components` must be a YAML list (schema.yaml optional_fields.related_components)", "list the other components involved"));
+    violations.push(violation11("low", "compound.schema.invalid-related-components", "optional `related_components` must be a YAML list (schema.yaml optional_fields.related_components)", "list the other components involved"));
   }
   return { ok: violations.length === 0, violations };
 }
@@ -3694,7 +4008,7 @@ function referenceExists(repoRoot, docText) {
     if (ref === "" || seen.has(ref))
       continue;
     seen.add(ref);
-    if (SCHEME_RE.test(ref) || ref.startsWith("{") || ref.startsWith("#") || ref.includes("*") || ref.includes("?") || ref.startsWith("~") || isAbsolute8(ref)) {
+    if (SCHEME_RE.test(ref) || ref.startsWith("{") || ref.startsWith("#") || ref.includes("*") || ref.includes("?") || ref.startsWith("~") || isAbsolute9(ref)) {
       continue;
     }
     if (ref.includes("/") || REF_EXT_RE.test(ref)) {
@@ -3722,7 +4036,7 @@ function referenceExists(repoRoot, docText) {
           break;
         if (entry.isDirectory()) {
           if (!WALK_SKIP_DIRS.has(entry.name))
-            stack.push(join15(dir, entry.name));
+            stack.push(join16(dir, entry.name));
         } else if (!entry.isSymbolicLink()) {
           const base = entry.name.replace(/\.(?:ts|tsx|js|jsx|mjs|cjs)$/, "");
           if (moduleNames.has(base))
@@ -3734,15 +4048,15 @@ function referenceExists(repoRoot, docText) {
   for (const { ref, isSymbol, module } of refs) {
     if (!isSymbol || module === undefined) {
       const candidate = ref.replace(LINE_SUFFIX_RE, "").replace(ANCHOR_RE, "");
-      if (existsSync10(resolve13(repoRoot, candidate))) {
+      if (existsSync12(resolve13(repoRoot, candidate))) {
         checked++;
       } else {
-        violations.push(violation10("medium", "compound.reference.missing-file", `referenced path \`${ref}\` does not exist under ${repoRoot} (compound-refresh Phase 2: referenced code still exists?)`, "update the doc to reference an existing path, or delete the stale reference"));
+        violations.push(violation11("medium", "compound.reference.missing-file", `referenced path \`${ref}\` does not exist under ${repoRoot} (compound-refresh Phase 2: referenced code still exists?)`, "update the doc to reference an existing path, or delete the stale reference"));
       }
     } else if (foundModules.has(module)) {
       checked++;
     } else {
-      violations.push(violation10("low", "compound.reference.module-missing", `symbol ref \`${ref}\` — heuristic: no ${module}.ts|tsx|js|jsx|mjs|cjs module file found under ${repoRoot} (compound-refresh Phase 2)`, "verify the module file exists, or update the reference"));
+      violations.push(violation11("low", "compound.reference.module-missing", `symbol ref \`${ref}\` — heuristic: no ${module}.ts|tsx|js|jsx|mjs|cjs module file found under ${repoRoot} (compound-refresh Phase 2)`, "verify the module file exists, or update the reference"));
     }
   }
   return { ok: violations.length === 0, violations, checked };
@@ -3761,7 +4075,7 @@ function collectKnowledgeDocs(dir) {
     for (const entry of entries) {
       if (entry.isSymbolicLink())
         continue;
-      const full = join15(current, entry.name);
+      const full = join16(current, entry.name);
       if (entry.isDirectory()) {
         stack.push(full);
       } else if (entry.name.endsWith(".md") && entry.name !== "README.md" && entry.name !== "index.md") {
@@ -3781,14 +4095,14 @@ function normalizeIndexRef(cell) {
 }
 function assertIndexRows(knowledgeDir) {
   const violations = [];
-  const readmePath = join15(knowledgeDir, "README.md");
-  if (!existsSync10(readmePath)) {
-    violations.push(violation10("medium", "compound.index.missing-readme", `missing ${readmePath} — the knowledge index is required (mstar-compound Phase 6: every doc gets a README.md row)`, "create knowledge/README.md with a Document / Source Plan / Description / Status table"));
+  const readmePath = join16(knowledgeDir, "README.md");
+  if (!existsSync12(readmePath)) {
+    violations.push(violation11("medium", "compound.index.missing-readme", `missing ${readmePath} — the knowledge index is required (mstar-compound Phase 6: every doc gets a README.md row)`, "create knowledge/README.md with a Document / Source Plan / Description / Status table"));
     return { ok: false, violations };
   }
   const docs = collectKnowledgeDocs(knowledgeDir);
   const rows = new Set;
-  for (const line of readFileSync10(readmePath, "utf8").split(/\r?\n/)) {
+  for (const line of readFileSync11(readmePath, "utf8").split(/\r?\n/)) {
     if (!line.trim().startsWith("|"))
       continue;
     const cells = line.split("|").map((c) => c.trim());
@@ -3800,13 +4114,13 @@ function assertIndexRows(knowledgeDir) {
   }
   for (const doc of docs) {
     if (!rows.has(doc)) {
-      violations.push(violation10("medium", "compound.index.missing-row", `knowledge doc "${doc}" has no row in knowledge/README.md index (mstar-compound Phase 6 index obligations)`, `add a row \`| [<title>](${doc}) | <source plan> | <description> | <status> |\` to knowledge/README.md`));
+      violations.push(violation11("medium", "compound.index.missing-row", `knowledge doc "${doc}" has no row in knowledge/README.md index (mstar-compound Phase 6 index obligations)`, `add a row \`| [<title>](${doc}) | <source plan> | <description> | <status> |\` to knowledge/README.md`));
     }
   }
   return { ok: violations.length === 0, violations };
 }
 function isFileLikeRoot(root) {
-  return /^[^.]*\.[A-Za-z0-9]{1,10}$/.test(basename7(root));
+  return /^[^.]*\.[A-Za-z0-9]{1,10}$/.test(basename8(root));
 }
 function scopeGuard(path, allowedRoots) {
   const resolved = resolve13(path);
@@ -3822,11 +4136,11 @@ function scopeGuard(path, allowedRoots) {
   return {
     ok: false,
     violations: [
-      violation10("medium", "compound.scope.outside", `path "${path}" is outside the compound-refresh scope (allowed: ${allowedRoots.join(", ")}) — compound-refresh operates only on {HARNESS_DIR}/knowledge/**, {HARNESS_DIR}/knowledge/README.md, <repo-root>/CONCEPTS.md, {HARNESS_DIR}/status.json (mstar-compound-refresh SKILL.md § 产物与操作路径)`, "point the operation at one of the allowed paths")
+      violation11("medium", "compound.scope.outside", `path "${path}" is outside the compound-refresh scope (allowed: ${allowedRoots.join(", ")}) — compound-refresh operates only on {HARNESS_DIR}/knowledge/**, {HARNESS_DIR}/knowledge/README.md, <repo-root>/CONCEPTS.md, {HARNESS_DIR}/status.json (mstar-compound-refresh SKILL.md § 产物与操作路径)`, "point the operation at one of the allowed paths")
     ]
   };
 }
-function violation11(severity, code, message, fix) {
+function violation12(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var TASK_ARTIFACT_RE = /\btask-\d+(?:-(?:brief|report|fix-report|diff)|\.diff)\b/g;
@@ -3856,18 +4170,18 @@ function lintSkillFrontmatter(frontmatterText) {
   const violations = [];
   const fm = parseFrontmatter(frontmatterText);
   if (fm === null) {
-    violations.push(violation11("medium", "lint.frontmatter.missing", "no YAML frontmatter block found — a skill file must open with a `---` fenced frontmatter (mstar-skill-authoring § Frontmatter Contract)", "add a frontmatter block with `name` and `description` at the top of the file"));
+    violations.push(violation12("medium", "lint.frontmatter.missing", "no YAML frontmatter block found — a skill file must open with a `---` fenced frontmatter (mstar-skill-authoring § Frontmatter Contract)", "add a frontmatter block with `name` and `description` at the top of the file"));
     return { ok: false, violations };
   }
   const name = fm.name ?? "";
   if (name === "") {
-    violations.push(violation11("medium", "lint.frontmatter.name.missing", "frontmatter `name` is missing — required (mstar-skill-authoring § Frontmatter Contract)", "add `name: <lowercase-hyphen-id>` to the frontmatter"));
+    violations.push(violation12("medium", "lint.frontmatter.name.missing", "frontmatter `name` is missing — required (mstar-skill-authoring § Frontmatter Contract)", "add `name: <lowercase-hyphen-id>` to the frontmatter"));
   } else if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(name)) {
-    violations.push(violation11("medium", "lint.frontmatter.name.format", `frontmatter \`name\` must be lowercase-hyphen ("${name}") — e.g. example-skill (mstar-skill-authoring § Frontmatter Contract)`, "rename to a stable lowercase-hyphen id, e.g. `name: example-skill`"));
+    violations.push(violation12("medium", "lint.frontmatter.name.format", `frontmatter \`name\` must be lowercase-hyphen ("${name}") — e.g. example-skill (mstar-skill-authoring § Frontmatter Contract)`, "rename to a stable lowercase-hyphen id, e.g. `name: example-skill`"));
   }
   const description = fm.description ?? "";
   if (description === "") {
-    violations.push(violation11("medium", "lint.frontmatter.description.missing", "frontmatter `description` is missing — the trigger contract is required (mstar-skill-authoring § Frontmatter Contract)", "add a `description:` that states when the skill loads (symptoms, context, roles, exclusions)"));
+    violations.push(violation12("medium", "lint.frontmatter.description.missing", "frontmatter `description` is missing — the trigger contract is required (mstar-skill-authoring § Frontmatter Contract)", "add a `description:` that states when the skill loads (symptoms, context, roles, exclusions)"));
   } else {
     const stripped = description.replace(/`[^`]*`/g, " ").replace(/'[^']*'/g, " ").replace(/"[^"]*"/g, " ");
     let pronoun = null;
@@ -3878,15 +4192,15 @@ function lintSkillFrontmatter(frontmatterText) {
       break;
     }
     if (pronoun !== null) {
-      violations.push(violation11("low", "lint.frontmatter.description.person", `description uses first/second-person pronoun "${pronoun[0]}" — keep the trigger contract third person (mstar-skill-authoring § Frontmatter Contract)`, 'rewrite without I/we/you/my/our/your/us, e.g. "Use when the user asks …"'));
+      violations.push(violation12("low", "lint.frontmatter.description.person", `description uses first/second-person pronoun "${pronoun[0]}" — keep the trigger contract third person (mstar-skill-authoring § Frontmatter Contract)`, 'rewrite without I/we/you/my/our/your/us, e.g. "Use when the user asks …"'));
     }
     const start = description.trim().replace(/^[*_#>]+/, "").replace(/^["'`]+/, "").trim();
     if (WORKFLOW_VERB_START_RE.test(start)) {
-      violations.push(violation11("low", "lint.frontmatter.description.workflow", 'description reads as a workflow summary ("Explains/Describes/Covers …") — the description is the trigger contract, not a summary of steps (mstar-skill-authoring § Frontmatter Contract)', "describe when to load the skill (symptoms, context, roles, exclusions) instead of summarizing its steps"));
+      violations.push(violation12("low", "lint.frontmatter.description.workflow", 'description reads as a workflow summary ("Explains/Describes/Covers …") — the description is the trigger contract, not a summary of steps (mstar-skill-authoring § Frontmatter Contract)', "describe when to load the skill (symptoms, context, roles, exclusions) instead of summarizing its steps"));
     } else {
       const words = description.trim().split(/\s+/).filter(Boolean).length;
       if (words > DESCRIPTION_MAX_WORDS) {
-        violations.push(violation11("low", "lint.frontmatter.description.workflow", `description is ${words} words — paragraph-length summaries bury the trigger contract (threshold ${DESCRIPTION_MAX_WORDS}, above the longest corpus description at 114 words, mstar-design-md; mstar-skill-authoring § Frontmatter Contract)`, "trim the description to a scannable trigger contract and move detail into the body"));
+        violations.push(violation12("low", "lint.frontmatter.description.workflow", `description is ${words} words — paragraph-length summaries bury the trigger contract (threshold ${DESCRIPTION_MAX_WORDS}, above the longest corpus description at 114 words, mstar-design-md; mstar-skill-authoring § Frontmatter Contract)`, "trim the description to a scannable trigger contract and move detail into the body"));
       }
     }
   }
@@ -3914,7 +4228,7 @@ function parseFrontmatter(text) {
     return null;
   return fields;
 }
-function violation12(severity, code, message, fix) {
+function violation13(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var ROLE_MAPPING = [
@@ -3969,19 +4283,19 @@ function validateRoleMapping(rolesDir, options = {}) {
   const violations = [];
   const referenceById = new Map(mapping.map((m) => [m.agentId, m.reference]));
   for (const { agentId, reference } of mapping) {
-    if (!existsSync11(join16(rolesDir, reference))) {
-      violations.push(violation12("medium", "roles.mapping.reference.missing", `role "${agentId}" maps to ${reference} which does not exist under ${rolesDir} (mstar-roles § Role Reference Mapping)`, `create ${join16(rolesDir, reference)} or fix the mapping row`));
+    if (!existsSync13(join17(rolesDir, reference))) {
+      violations.push(violation13("medium", "roles.mapping.reference.missing", `role "${agentId}" maps to ${reference} which does not exist under ${rolesDir} (mstar-roles § Role Reference Mapping)`, `create ${join17(rolesDir, reference)} or fix the mapping row`));
     }
   }
   for (const { family, memberIds } of families) {
     const absent = memberIds.filter((id) => !referenceById.has(id));
     for (const id of absent) {
-      violations.push(violation12("medium", "roles.mapping.family.member.missing", `shared family "${family}" member "${id}" is absent from the role mapping (mstar-roles § Role Reference Mapping)`, `add "${id}" to the mapping`));
+      violations.push(violation13("medium", "roles.mapping.family.member.missing", `shared family "${family}" member "${id}" is absent from the role mapping (mstar-roles § Role Reference Mapping)`, `add "${id}" to the mapping`));
     }
     if (absent.length === 0) {
       const refs = new Set(memberIds.map((id) => referenceById.get(id)));
       if (refs.size !== 1) {
-        violations.push(violation12("medium", "roles.mapping.family.shared", `shared family "${family}" (${memberIds.join(", ")}) must resolve to ONE shared reference file — got ${[...refs].join(", ")} (mstar-roles § Maintenance Rules: "Keep shared-family roles on one shared reference file")`, `point every "${family}" member at the same references/<role>-shared.md`));
+        violations.push(violation13("medium", "roles.mapping.family.shared", `shared family "${family}" (${memberIds.join(", ")}) must resolve to ONE shared reference file — got ${[...refs].join(", ")} (mstar-roles § Maintenance Rules: "Keep shared-family roles on one shared reference file")`, `point every "${family}" member at the same references/<role>-shared.md`));
       }
     }
   }
@@ -3990,12 +4304,12 @@ function validateRoleMapping(rolesDir, options = {}) {
     for (const row of rows) {
       const existing = tableByRole.get(row.roleId);
       if (existing !== undefined) {
-        violations.push(violation12("medium", "roles.param.role.duplicate", `role "${row.roleId}" appears in both the ${existing} and ${table} parameter rows (mstar-roles § Parameter Table (SSOT))`, "remove the duplicate row"));
+        violations.push(violation13("medium", "roles.param.role.duplicate", `role "${row.roleId}" appears in both the ${existing} and ${table} parameter rows (mstar-roles § Parameter Table (SSOT))`, "remove the duplicate row"));
       } else {
         tableByRole.set(row.roleId, table);
       }
       if (!referenceById.has(row.roleId)) {
-        violations.push(violation12("medium", "roles.param.role.missing", `${table} parameter row references unknown role "${row.roleId}" (mstar-roles § Parameter Table (SSOT))`, `add "${row.roleId}" to the role mapping or drop the row`));
+        violations.push(violation13("medium", "roles.param.role.missing", `${table} parameter row references unknown role "${row.roleId}" (mstar-roles § Parameter Table (SSOT))`, `add "${row.roleId}" to the role mapping or drop the row`));
       }
     }
   };
@@ -4003,20 +4317,20 @@ function validateRoleMapping(rolesDir, options = {}) {
   checkParamRoles(qcReviewers, "QC reviewer");
   for (const row of devTrack) {
     if (row.track !== "primary" && row.track !== "parallel_secondary") {
-      violations.push(violation12("medium", "roles.param.track", `dev track for "${row.roleId}" is "${String(row.track)}" — must be primary or parallel_secondary (mstar-roles § Parameter Table (SSOT))`, 'set track to "primary" or "parallel_secondary"'));
+      violations.push(violation13("medium", "roles.param.track", `dev track for "${row.roleId}" is "${String(row.track)}" — must be primary or parallel_secondary (mstar-roles § Parameter Table (SSOT))`, 'set track to "primary" or "parallel_secondary"'));
     }
   }
   const indices = qcReviewers.map((r) => r.reviewerIndex).sort((a, b) => a - b);
   const unique = new Set(indices);
   if (indices.length !== 3 || unique.size !== 3 || indices[0] !== 1 || indices[1] !== 2 || indices[2] !== 3) {
-    violations.push(violation12("high", "roles.param.qc.index.set", `QC reviewer_index must be exactly {1, 2, 3} across the three qc-specialist* seats — got [${indices.join(", ")}] (mstar-roles § Parameter Table (SSOT))`, "assign reviewer_index 1/2/3 to qc-specialist / qc-specialist-2 / qc-specialist-3"));
+    violations.push(violation13("high", "roles.param.qc.index.set", `QC reviewer_index must be exactly {1, 2, 3} across the three qc-specialist* seats — got [${indices.join(", ")}] (mstar-roles § Parameter Table (SSOT))`, "assign reviewer_index 1/2/3 to qc-specialist / qc-specialist-2 / qc-specialist-3"));
   }
   for (const row of qcReviewers) {
     if (row.focus.trim() === "") {
-      violations.push(violation12("medium", "roles.param.qc.focus.missing", `QC seat "${row.roleId}" (reviewer_index ${row.reviewerIndex}) has an empty focus (mstar-roles § Parameter Table (SSOT))`, "add the review focus"));
+      violations.push(violation13("medium", "roles.param.qc.focus.missing", `QC seat "${row.roleId}" (reviewer_index ${row.reviewerIndex}) has an empty focus (mstar-roles § Parameter Table (SSOT))`, "add the review focus"));
     }
     if (row.reportSuffix !== `qc${row.reviewerIndex}`) {
-      violations.push(violation12("medium", "roles.param.qc.suffix", `QC seat "${row.roleId}" report_suffix "${row.reportSuffix}" must equal qc${row.reviewerIndex} — tri reports land at {SDD_DIR}/review/qc1.md…qc3.md (mstar-roles § Parameter Table (SSOT))`, `set report_suffix to qc${row.reviewerIndex}`));
+      violations.push(violation13("medium", "roles.param.qc.suffix", `QC seat "${row.roleId}" report_suffix "${row.reportSuffix}" must equal qc${row.reviewerIndex} — tri reports land at {SDD_DIR}/review/qc1.md…qc3.md (mstar-roles § Parameter Table (SSOT))`, `set report_suffix to qc${row.reviewerIndex}`));
     }
   }
   return { ok: violations.length === 0, violations };
@@ -4063,22 +4377,22 @@ function lintLoadOrder(skillTexts) {
       continue;
     const section = extractLoadOrderSection(text);
     if (section === null) {
-      violations.push(violation12("medium", "roles.loadorder.section.missing", `skill "${name}" has no Load Order / First action section — every mstar-* topic skill must declare its first read (mstar-harness-core § 加载契约; mstar-roles § Load Order = single load-selection authority)`, `add a "## Load Order" section: topics name mstar-harness-core first; mstar-roles declares the Skill presets decision matrix`));
+      violations.push(violation13("medium", "roles.loadorder.section.missing", `skill "${name}" has no Load Order / First action section — every mstar-* topic skill must declare its first read (mstar-harness-core § 加载契约; mstar-roles § Load Order = single load-selection authority)`, `add a "## Load Order" section: topics name mstar-harness-core first; mstar-roles declares the Skill presets decision matrix`));
       continue;
     }
     if (name === "mstar-roles") {
       const lower = section.toLowerCase();
       const missing = HUB_BOOTSTRAP_ASSERTIONS.filter((a) => !lower.includes(a.marker.toLowerCase()));
       if (missing.length > 0) {
-        violations.push(violation12("medium", "roles.loadorder.hub.bootstrap.missing", `skill "${name}" Load Order section is missing the hub bootstrap decision matrix: ${missing.map((m) => `"${m.marker}" (${m.why})`).join("; ")} (mstar-roles § Load Order = single load-selection authority)`, "declare identity-first, the Skill presets none/standard decision, role-owned methods, and the unknown-preset / missing-identity refusal in the Load Order section"));
+        violations.push(violation13("medium", "roles.loadorder.hub.bootstrap.missing", `skill "${name}" Load Order section is missing the hub bootstrap decision matrix: ${missing.map((m) => `"${m.marker}" (${m.why})`).join("; ")} (mstar-roles § Load Order = single load-selection authority)`, "declare identity-first, the Skill presets none/standard decision, role-owned methods, and the unknown-preset / missing-identity refusal in the Load Order section"));
       }
       if (!section.includes("mstar-harness-core")) {
-        violations.push(violation12("medium", "roles.loadorder.core.missing", `skill "${name}" Load Order section does not point at mstar-harness-core — the hub bootstrap is exempt from core-first, but core remains the lifecycle/authorization conflict authority and global entry whenever loaded`, "keep the conditional mstar-harness-core pointer (global entry / conflict authority) in the Load Order section"));
+        violations.push(violation13("medium", "roles.loadorder.core.missing", `skill "${name}" Load Order section does not point at mstar-harness-core — the hub bootstrap is exempt from core-first, but core remains the lifecycle/authorization conflict authority and global entry whenever loaded`, "keep the conditional mstar-harness-core pointer (global entry / conflict authority) in the Load Order section"));
       }
       continue;
     }
     if (!section.includes("mstar-harness-core")) {
-      violations.push(violation12("medium", "roles.loadorder.core.missing", `skill "${name}" Load Order section does not declare mstar-harness-core as its first dependency (mstar-harness-core § 加载契约: directly-invoked topics keep core as first dependency; the mstar-roles hub bootstrap is the only exception)`, "name mstar-harness-core first in the Load Order section"));
+      violations.push(violation13("medium", "roles.loadorder.core.missing", `skill "${name}" Load Order section does not declare mstar-harness-core as its first dependency (mstar-harness-core § 加载契约: directly-invoked topics keep core as first dependency; the mstar-roles hub bootstrap is the only exception)`, "name mstar-harness-core first in the Load Order section"));
     }
   }
   return { ok: violations.length === 0, violations };
@@ -4104,7 +4418,7 @@ function resolveSkillRoot(host, paths) {
       return `deferred: pi has no plugin API in v1 — skill-root resolution lands with its adapter (roadmap §8.4)`;
   }
 }
-function violation13(severity, code, message, fix) {
+function violation14(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 var FIVE_QUESTION_SECTIONS = [
@@ -4175,7 +4489,7 @@ function lintFiveQuestion(bodyText, mode = "authoring") {
     const aliases = mode === "runtime" ? RUNTIME_HEADING_ALIASES[section.key] ?? [] : [];
     const covered = headings.some((heading) => heading.includes(label) || aliases.some((alias) => heading.includes(alias)));
     if (!covered) {
-      violations.push(violation13("low", `skill-authoring.five-question.${section.key}`, `body does not answer "${section.question}" — no "${section.label}" section (mstar-skill-authoring § Body 必须回答的 5 问 / § 默认 Body 结构)`, `add a "## ${section.label}" section covering ${section.question}`));
+      violations.push(violation14("low", `skill-authoring.five-question.${section.key}`, `body does not answer "${section.question}" — no "${section.label}" section (mstar-skill-authoring § Body 必须回答的 5 问 / § 默认 Body 结构)`, `add a "## ${section.label}" section covering ${section.question}`));
     }
   }
   return { ok: violations.length === 0, violations };
@@ -4228,7 +4542,7 @@ class DshMstar extends Service {
 
 // src/gates/_shared.ts
 var import_schemastery = __toESM(require_lib2(), 1);
-import { existsSync as existsSync3 } from "node:fs";
+import { existsSync as existsSync2 } from "node:fs";
 import { resolve as resolve4 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var STATUS_FILE = "status.json";
@@ -4265,8 +4579,8 @@ var Config = import_schemastery.default.object({
   workflowGate: import_schemastery.default.union(["off", "warn", "ask", "hard"]).default("warn"),
   workflowNames: import_schemastery.default.array(import_schemastery.default.string()).default(undefined)
 });
-function formatViolation(violation14) {
-  return `[${violation14.severity}] ${violation14.code}: ${violation14.message}${violation14.fix !== undefined ? ` (fix: ${violation14.fix})` : ""}`;
+function formatViolation(violation7) {
+  return `[${violation7.severity}] ${violation7.code}: ${violation7.message}${violation7.fix !== undefined ? ` (fix: ${violation7.fix})` : ""}`;
 }
 function asRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : undefined;
@@ -4289,7 +4603,7 @@ function resolvePackagedSkillsDir(fileUrl) {
   for (const rel of ["../harness-skills", "../../harness-skills"]) {
     try {
       const dir = fileURLToPath2(new URL(rel, fileUrl));
-      if (existsSync3(dir))
+      if (existsSync2(dir))
         return dir;
     } catch {}
   }
@@ -4308,7 +4622,7 @@ function resolvePackagedAgentsDir(fileUrl) {
   for (const rel of ["../harness-agents", "../../harness-agents"]) {
     try {
       const dir = fileURLToPath2(new URL(rel, fileUrl));
-      if (existsSync3(dir))
+      if (existsSync2(dir))
         return dir;
     } catch {}
   }
@@ -4406,21 +4720,21 @@ function skillLocalConfig(config) {
 }
 
 // src/gates/catalog.ts
-import { existsSync as existsSync14, readFileSync as readFileSync11, readdirSync as readdirSync4, realpathSync as realpathSync7 } from "node:fs";
-import { basename as basename5, isAbsolute as isAbsolute7, join as join12, relative as relative7, sep as sep3 } from "node:path";
+import { existsSync as existsSync16, readFileSync as readFileSync12, readdirSync as readdirSync4, realpathSync as realpathSync7 } from "node:fs";
+import { basename as basename4, isAbsolute as isAbsolute8, join as join18, relative as relative7, sep as sep3 } from "node:path";
 import { createUserMessage } from "@deepseek-ai/dsh-llm";
 
 // src/gates/agent-flow.ts
-import { appendFileSync, closeSync, existsSync as existsSync12, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync5, readSync, renameSync as renameSync2, rmdirSync, statSync as statSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join6 } from "node:path";
+import { appendFileSync, closeSync, existsSync as existsSync14, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync6, readSync, renameSync as renameSync2, rmdirSync, statSync as statSync5, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join13 } from "node:path";
 
 // src/gates/dispatch.ts
-import { existsSync as existsSync8 } from "node:fs";
-import { basename as basename2, join as join5, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync10 } from "node:fs";
+import { basename as basename2, join as join7, resolve as resolve6 } from "node:path";
 
 // src/gates/workflow-selection.ts
-import { existsSync as existsSync5, readdirSync as readdirSync2, realpathSync as realpathSync5, statSync as statSync2 } from "node:fs";
-import { dirname as dirname7, isAbsolute as isAbsolute3, join as join3, normalize, relative as relative4, sep as sep2 } from "node:path";
+import { existsSync as existsSync6, readdirSync, realpathSync as realpathSync5, statSync as statSync2 } from "node:fs";
+import { dirname as dirname6, isAbsolute as isAbsolute3, join as join4, normalize, relative as relative4, sep as sep2 } from "node:path";
 var TERMINAL_STATUS_CACHE_MAX = 64;
 var terminalStatusCache = new Map;
 function terminalStatusOf(snapshotPath) {
@@ -4501,11 +4815,20 @@ function validLeases(snapshot) {
   return leases;
 }
 function readSnapshot(harnessDir, entry) {
-  const snapshotPath = join3(harnessDir, entry.dir, WORKFLOW_SNAPSHOT_FILE);
-  if (!existsSync5(snapshotPath))
+  const snapshotPath = join4(harnessDir, entry.dir, WORKFLOW_SNAPSHOT_FILE);
+  if (!existsSync6(snapshotPath))
     return;
   try {
-    return asRecord(readJson(snapshotPath));
+    const snapshot = asRecord(readJson(snapshotPath));
+    if (snapshot === undefined)
+      return;
+    if ("control_worktree_path" in snapshot && "integration_worktree_path" in snapshot)
+      return;
+    if ("control_worktree_path" in snapshot) {
+      const { control_worktree_path, ...rest } = snapshot;
+      return { ...rest, integration_worktree_path: control_worktree_path };
+    }
+    return snapshot;
   } catch {
     return;
   }
@@ -4537,8 +4860,8 @@ function automaticBinding(harnessDir, entries, hint) {
     if (holder !== undefined && leases.some((lease) => lease.holder === holder) || cwd !== undefined && leases.some((lease) => within(String(lease.worktree_path), cwd))) {
       leaseMatches.set(entry.id, entry);
     }
-    const controlWorktree = snapshot.control_worktree_path;
-    if (cwd !== undefined && typeof controlWorktree === "string" && within(controlWorktree, cwd)) {
+    const integrationWorktree = snapshot.integration_worktree_path;
+    if (cwd !== undefined && typeof integrationWorktree === "string" && within(integrationWorktree, cwd)) {
       cwdMatches.set(entry.id, entry);
     }
   }
@@ -4549,8 +4872,8 @@ function automaticBinding(harnessDir, entries, hint) {
   return byCwd === undefined ? undefined : { kind: "active", workflowId: byCwd.id, dir: byCwd.dir };
 }
 function resolveActiveWorkflow(harnessDir, hint) {
-  const statusPath = join3(harnessDir, STATUS_FILE);
-  if (!existsSync5(statusPath)) {
+  const statusPath = join4(harnessDir, STATUS_FILE);
+  if (!existsSync6(statusPath)) {
     return {
       kind: "error",
       code: "status.missing",
@@ -4597,7 +4920,7 @@ function resolveActiveWorkflow(harnessDir, hint) {
       return {
         kind: "error",
         code: "workflow.selection.invalid-entry",
-        message: `workflows[] entry fails the v2 workflow-entry contract: ${gate2.violations.map((violation14) => violation14.message).join("; ")}`
+        message: `workflows[] entry fails the v2 workflow-entry contract: ${gate2.violations.map((violation7) => violation7.message).join("; ")}`
       };
     }
     const entry = raw;
@@ -4640,7 +4963,7 @@ function resolveReadWorkflow(harnessDir, hint) {
   if (active.kind === "error" && active.code !== "workflow.selection.no-active")
     return active;
   const workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
-  if (!existsSync5(workflowsDir)) {
+  if (!existsSync6(workflowsDir)) {
     return {
       kind: "error",
       code: "workflow.selection.no-snapshot",
@@ -4649,7 +4972,7 @@ function resolveReadWorkflow(harnessDir, hint) {
   }
   let entries;
   try {
-    entries = readdirSync2(workflowsDir, { withFileTypes: true });
+    entries = readdirSync(workflowsDir, { withFileTypes: true });
   } catch {
     return {
       kind: "error",
@@ -4661,8 +4984,8 @@ function resolveReadWorkflow(harnessDir, hint) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const snapshotPath = join3(workflowsDir, entry.name, WORKFLOW_SNAPSHOT_FILE);
-    if (!existsSync5(snapshotPath)) {
+    const snapshotPath = join4(workflowsDir, entry.name, WORKFLOW_SNAPSHOT_FILE);
+    if (!existsSync6(snapshotPath)) {
       terminalStatusCache.delete(snapshotPath);
       continue;
     }
@@ -4670,11 +4993,11 @@ function resolveReadWorkflow(harnessDir, hint) {
     if (verdict === undefined || !verdict.terminal)
       continue;
     if (best === undefined || verdict.mtimeMs > best.mtimeMs) {
-      best = { workflowId: entry.name, dir: join3(relative4(harnessDir, workflowsDir), entry.name), mtimeMs: verdict.mtimeMs };
+      best = { workflowId: entry.name, dir: join4(relative4(harnessDir, workflowsDir), entry.name), mtimeMs: verdict.mtimeMs };
     }
   }
   for (const cachedPath of terminalStatusCache.keys()) {
-    if (!existsSync5(join3(dirname7(cachedPath), WORKFLOW_SNAPSHOT_FILE))) {
+    if (!existsSync6(join4(dirname6(cachedPath), WORKFLOW_SNAPSHOT_FILE))) {
       terminalStatusCache.delete(cachedPath);
     }
   }
@@ -4873,12 +5196,12 @@ function leaseGateViolations(harnessDir, exec, writable, prompt, hint) {
     if (!sdd)
       return [];
     if (selection.kind === "error" && selection.code === "status.unreadable") {
-      return [leaseViolation("lease.dispatch.unreadable", `cannot read ${join5(harnessDir, STATUS_FILE)}: the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "restore a valid status.json (the status gate refuses invalid writes)")];
+      return [leaseViolation("lease.dispatch.unreadable", `cannot read ${join7(harnessDir, STATUS_FILE)}: the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "restore a valid status.json (the status gate refuses invalid writes)")];
     }
-    return [leaseViolation("lease.dispatch.unverifiable", `${join5(harnessDir, STATUS_FILE)}: ${selection.kind === "error" ? selection.message : "no active workflow"} — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid v2 status.json registering an active workflow (first implement dispatch requires a plan row + lease)")];
+    return [leaseViolation("lease.dispatch.unverifiable", `${join7(harnessDir, STATUS_FILE)}: ${selection.kind === "error" ? selection.message : "no active workflow"} — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid v2 status.json registering an active workflow (first implement dispatch requires a plan row + lease)")];
   }
-  const snapshotPath = join5(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
-  if (!existsSync8(snapshotPath)) {
+  const snapshotPath = join7(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+  if (!existsSync10(snapshotPath)) {
     if (!sdd)
       return [];
     return [leaseViolation("lease.dispatch.unverifiable", `${snapshotPath} is missing — the plan's execution_lease state is unverifiable; STOP before writable dispatch`, "create a valid workflow snapshot registering the plan row (first implement dispatch requires a plan row)")];
@@ -4952,30 +5275,29 @@ function worktreeL2Violations(header) {
   return violations;
 }
 function activeSnapshotRows(harnessDir, hint) {
-  if (!existsSync8(join5(harnessDir, STATUS_FILE)))
-    return { rows: null, controlWorktreePath: undefined, unreadable: false };
+  if (!existsSync10(join7(harnessDir, STATUS_FILE)))
+    return { rows: null, snapshot: null, workflowId: null, unreadable: false };
   const selection = resolveActiveWorkflow(harnessDir, hint);
   if (selection.kind !== "active") {
     return {
       rows: null,
-      controlWorktreePath: undefined,
+      snapshot: null,
+      workflowId: null,
       unreadable: selection.kind === "error" && selection.code !== "workflow.selection.no-active"
     };
   }
-  const snapshotPath = join5(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
-  if (!existsSync8(snapshotPath))
-    return { rows: null, controlWorktreePath: undefined, unreadable: true };
-  let doc;
+  const snapshotDir = join7(harnessDir, selection.dir);
+  if (!existsSync10(join7(snapshotDir, WORKFLOW_SNAPSHOT_FILE))) {
+    return { rows: null, snapshot: null, workflowId: selection.workflowId, unreadable: true };
+  }
+  let snapshot;
   try {
-    doc = readJson(snapshotPath);
+    snapshot = readWorkflowSnapshot(snapshotDir).snapshot;
   } catch {
-    return { rows: null, controlWorktreePath: undefined, unreadable: true };
+    return { rows: null, snapshot: null, workflowId: selection.workflowId, unreadable: true };
   }
-  if (!Array.isArray(doc.plans))
-    return { rows: null, controlWorktreePath: undefined, unreadable: true };
-  const controlWorktreePath = typeof doc.control_worktree_path === "string" ? doc.control_worktree_path : undefined;
-  const rows = doc.plans.map((row) => asRecord(row)).filter((row) => row !== undefined);
-  return { rows, controlWorktreePath, unreadable: false };
+  const rows = (Array.isArray(snapshot.plans) ? snapshot.plans : []).map((row) => asRecord(row)).filter((row) => row !== undefined);
+  return { rows, snapshot, workflowId: selection.workflowId, unreadable: false };
 }
 function worktreeL1Violations(harnessDir, header, hint) {
   if (harnessDir === null)
@@ -4984,10 +5306,7 @@ function worktreeL1Violations(harnessDir, header, hint) {
   if (planId === undefined || planId === "")
     return [];
   const read = activeSnapshotRows(harnessDir, hint);
-  if (read.rows === null)
-    return [];
-  const controlWorktreePath = read.controlWorktreePath;
-  if (controlWorktreePath === undefined || controlWorktreePath.trim() === "")
+  if (read.rows === null || read.snapshot === null)
     return [];
   const row = read.rows.find((r) => r?.id === planId || r?.plan_id === planId);
   const lease = asRecord(row?.execution_lease);
@@ -4996,7 +5315,26 @@ function worktreeL1Violations(harnessDir, header, hint) {
   if (leaseWorktreePath === undefined || leaseWorktreePath.trim() === "" || leaseWorkingBranch === undefined || leaseWorkingBranch.trim() === "") {
     return [];
   }
-  return l1PreDispatchCheck({ controlWorktreePath, leaseWorktreePath, leaseWorkingBranch, planId }).violations;
+  const snapshot = read.snapshot;
+  const lifecycleBranches = new Set(collectActiveLifecycleBranches([snapshot]));
+  const siblingScan = scanActiveLifecycleBranches(harnessDir, read.workflowId);
+  if (siblingScan.kind === "refusal") {
+    return [worktreeViolation(siblingScan.code, siblingScan.detail, "repair or unregister the unreadable lifecycle state before dispatch")];
+  }
+  for (const branch of siblingScan.branches)
+    lifecycleBranches.add(branch);
+  const expectedMainBranch = assignmentHeaderValue(header, "Main worktree branch") ?? (typeof snapshot.branch?.base === "string" ? snapshot.branch.base : "");
+  return l1PreDispatchCheck({
+    workflowType: snapshot.type,
+    integrationWorktreePath: typeof snapshot.integration_worktree_path === "string" ? snapshot.integration_worktree_path : "",
+    integrationBranch: typeof snapshot.branch?.integration === "string" ? snapshot.branch.integration : "",
+    mainWorktree: readMainWorktree(harnessDir),
+    expectedMainBranch,
+    lifecycleBranches: [...lifecycleBranches],
+    leaseWorktreePath,
+    leaseWorkingBranch,
+    planId
+  }).violations;
 }
 function writableFanOutUncovered(harnessDir, hint) {
   if (harnessDir === null)
@@ -5053,7 +5391,7 @@ function gateWorkflow(ctx, harnessDir, config, adapter, exec, hintReadOf) {
   }
   const pb = writableFanOutUncovered(harnessDir, hintReadOf().hint);
   if (pb.unreadable) {
-    const statusLabel = harnessDir === null ? STATUS_FILE : join5(harnessDir, STATUS_FILE);
+    const statusLabel = harnessDir === null ? STATUS_FILE : join7(harnessDir, STATUS_FILE);
     ctx.logger(DISPATCH_LOGGER).warn(`workflow gate (${toolName}) (fail-open): cannot read ${statusLabel} — P-b lease attribution degraded; call allowed`);
   }
   const verdict = workflowPolicy(config, adapter.workflowAskCache, {
@@ -5258,7 +5596,7 @@ function callPairingKey(exec) {
 function resolveAgentFlowWriteTarget(harnessDir, hint) {
   const selection = resolveActiveWorkflow(harnessDir, hint);
   if (selection.kind === "active")
-    return { dir: join6(harnessDir, selection.dir), selection };
+    return { dir: join13(harnessDir, selection.dir), selection };
   const message = selection.kind === "error" ? selection.message : "no active lifecycle (unexpected terminal selection — the active-set resolver has no history view)";
   if (!noActiveWarned) {
     noActiveWarned = true;
@@ -5278,7 +5616,7 @@ function sleepSync(ms) {
   Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 }
 function withWorkflowDirLock(workflowDir, fn, opts = {}) {
-  const lockDir = join6(workflowDir, WORKFLOW_LEDGER_LOCKDIR);
+  const lockDir = join13(workflowDir, WORKFLOW_LEDGER_LOCKDIR);
   if (heldWorkflowLocks.has(lockDir)) {
     throw new Error(`${lockDir} is already held by this process — withWorkflowDirLock is not reentrant; a nested acquisition on the same workflow dir is a bug`);
   }
@@ -5304,7 +5642,7 @@ function withWorkflowDirLock(workflowDir, fn, opts = {}) {
   heldWorkflowLocks.add(lockDir);
   try {
     try {
-      writeFileSync2(join6(lockDir, WORKFLOW_LOCKER_HOLDER_PID), String(process.pid), "utf8");
+      writeFileSync2(join13(lockDir, WORKFLOW_LOCKER_HOLDER_PID), String(process.pid), "utf8");
     } catch {}
     return fn();
   } finally {
@@ -5313,7 +5651,7 @@ function withWorkflowDirLock(workflowDir, fn, opts = {}) {
       const current = statSync5(lockDir);
       if (acquired !== null && current.dev === acquired.dev && current.ino === acquired.ino) {
         try {
-          unlinkSync2(join6(lockDir, WORKFLOW_LOCKER_HOLDER_PID));
+          unlinkSync2(join13(lockDir, WORKFLOW_LOCKER_HOLDER_PID));
         } catch {}
         rmdirSync(lockDir);
       }
@@ -5321,13 +5659,13 @@ function withWorkflowDirLock(workflowDir, fn, opts = {}) {
   }
 }
 function appendEvent(workflowDir, event) {
-  const file = join6(workflowDir, AGENT_FLOW_FILE);
+  const file = join13(workflowDir, AGENT_FLOW_FILE);
   withWorkflowDirLock(workflowDir, () => {
     appendFileSync(file, `${JSON.stringify(event)}
 `);
     if (statSync5(file).size <= AGENT_FLOW_SIZE_GATE_BYTES)
       return;
-    const content = readFileSync5(file, "utf8");
+    const content = readFileSync6(file, "utf8");
     const lines = content.replace(/\n$/, "").split(`
 `);
     if (lines.length > AGENT_FLOW_MAX_EVENTS) {
@@ -5731,7 +6069,7 @@ function summaryOf(events) {
 function ledgerContent(file, n) {
   const size = statSync5(file).size;
   if (size <= AGENT_FLOW_TAIL_READ_THRESHOLD_BYTES) {
-    return readFileSync5(file, "utf8");
+    return readFileSync6(file, "utf8");
   }
   let windowBytes = AGENT_FLOW_TAIL_READ_THRESHOLD_BYTES;
   const fd = openSync(file, "r");
@@ -5763,8 +6101,8 @@ function ledgerContent(file, n) {
   }
 }
 function readAgentFlow(workflowDir, limit) {
-  const file = join6(workflowDir, AGENT_FLOW_FILE);
-  if (!existsSync12(file)) {
+  const file = join13(workflowDir, AGENT_FLOW_FILE);
+  if (!existsSync14(file)) {
     return { events: [], summary: [] };
   }
   const n = limit === undefined ? AGENT_FLOW_DEFAULT_LIMIT : Math.max(0, Math.floor(limit));
@@ -6087,8 +6425,8 @@ function registerSubagentCatalogListener(ctx, pairing) {
 }
 
 // src/engine-status-store.ts
-import { mkdirSync as mkdirSync3, readFileSync as readFileSync8, renameSync as renameSync3, rmSync, statSync as statSync7, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname9, join as join8 } from "node:path";
+import { mkdirSync as mkdirSync4, readFileSync as readFileSync9, renameSync as renameSync3, rmSync, statSync as statSync7, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname9, join as join15 } from "node:path";
 var ENGINE_STATUS_SNAPSHOT_VERSION = 1;
 var ENGINE_STATUS_SNAPSHOT_ENTRY_VERSION = 1;
 var ENGINE_STATUS_SNAPSHOT_MAX_PER_SESSION = 50;
@@ -6097,7 +6435,7 @@ var ENGINE_STATUS_SNAPSHOT_MAX_BYTES = 16 * 1024 * 1024;
 var ENGINE_STATUS_SNAPSHOT_LOCK_TIMEOUT_MS = 250;
 var ENGINE_STATUS_SNAPSHOT_RELATIVE_PATH = "snapshots/engine-status.json";
 function engineStatusSnapshotPath(harnessDir) {
-  return join8(harnessDir, ENGINE_STATUS_SNAPSHOT_RELATIVE_PATH);
+  return join15(harnessDir, ENGINE_STATUS_SNAPSHOT_RELATIVE_PATH);
 }
 function engineStatusUnavailable(reason) {
   return { kind: "unavailable", reason };
@@ -6155,7 +6493,7 @@ function readEngineStatusSnapshot(harnessDir, sessionId) {
     return engineStatusUnavailable("no-session-entry");
   let raw;
   try {
-    raw = readFileSync8(engineStatusSnapshotPath(harnessDir), "utf8");
+    raw = readFileSync9(engineStatusSnapshotPath(harnessDir), "utf8");
   } catch (error) {
     const code = error.code;
     return engineStatusUnavailable(code === "ENOENT" ? "absent" : "unreadable");
@@ -6195,7 +6533,7 @@ function serializeEnvelope(entries, bindings) {
 function loadForWrite(harnessDir) {
   let raw;
   try {
-    raw = readFileSync8(engineStatusSnapshotPath(harnessDir), "utf8");
+    raw = readFileSync9(engineStatusSnapshotPath(harnessDir), "utf8");
   } catch (error) {
     if (error.code === "ENOENT") {
       return {
@@ -6294,7 +6632,7 @@ function writeEngineStatusSnapshot(harnessDir, input) {
   const file = engineStatusSnapshotPath(harnessDir);
   const tmp = `${file}.${process.pid}.${Math.random().toString(36).slice(2, 10)}.tmp`;
   try {
-    mkdirSync3(dir, { recursive: true });
+    mkdirSync4(dir, { recursive: true });
     return withWorkflowDirLock(dir, () => {
       const loaded = loadForWrite(harnessDir);
       if (loaded.kind === "refused")
@@ -6353,7 +6691,7 @@ var bindingStoreMemos = new Map;
 function parseBindingStore(file) {
   let raw;
   try {
-    raw = readFileSync8(file, "utf8");
+    raw = readFileSync9(file, "utf8");
   } catch {
     return { kind: "unavailable", reason: "store-unreadable" };
   }
@@ -6430,7 +6768,7 @@ function updateWorkflowSessionBinding(harnessDir, sessionId, cwd, update) {
   const dir = dirname9(file);
   const tmp = `${file}.${process.pid}.${Math.random().toString(36).slice(2, 10)}.tmp`;
   try {
-    mkdirSync3(dir, { recursive: true });
+    mkdirSync4(dir, { recursive: true });
     return withWorkflowDirLock(dir, () => {
       const loaded = loadForWrite(harnessDir);
       if (loaded.kind === "refused")
@@ -6479,7 +6817,7 @@ function residualSeverityIndex(severity) {
 function pluginVersion() {
   for (const rel of ["../package.json", "../../package.json"]) {
     try {
-      const pkg = JSON.parse(readFileSync11(new URL(rel, import.meta.url), "utf8"));
+      const pkg = JSON.parse(readFileSync12(new URL(rel, import.meta.url), "utf8"));
       if (typeof pkg.version === "string" && pkg.version !== "")
         return pkg.version;
     } catch {}
@@ -6606,7 +6944,7 @@ function renderEngineStatusCatalog(source) {
       const policy = [
         state.pushPolicy !== null ? `push ${state.pushPolicy}` : null,
         state.worktreeMode !== null ? `worktree ${state.worktreeMode}` : null,
-        state.controlWorktreePath !== null ? `control ${state.controlWorktreePath}` : null
+        state.integrationWorktreePath !== null ? `integration ${state.integrationWorktreePath}` : null
       ].filter((part) => part !== null).join("; ");
       if (policy !== "")
         lines.push(`policy: ${policy}`);
@@ -6645,8 +6983,8 @@ function hhmm(ts) {
   return `${String(date.getHours()).padStart(2, "0")}:${String(date.getMinutes()).padStart(2, "0")}`;
 }
 function harnessStateSource(harnessDir, selection) {
-  const statusPath = join12(harnessDir, STATUS_FILE);
-  if (!existsSync14(statusPath))
+  const statusPath = join18(harnessDir, STATUS_FILE);
+  if (!existsSync16(statusPath))
     return null;
   try {
     const rollup = residualRollup(harnessDir);
@@ -6655,9 +6993,9 @@ function harnessStateSource(harnessDir, selection) {
     if (selection.kind === "error") {
       return selectionErrorState(selection, rollup, harnessDir);
     }
-    const snapshotPath = join12(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+    const snapshotPath = join18(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
     let snapshot;
-    if (!existsSync14(snapshotPath)) {
+    if (!existsSync16(snapshotPath)) {
       return selectionErrorState({
         kind: "error",
         code: "workflow.selection.snapshot-unreadable",
@@ -6665,7 +7003,7 @@ function harnessStateSource(harnessDir, selection) {
       }, rollup, harnessDir);
     }
     try {
-      snapshot = readJson(snapshotPath);
+      snapshot = readWorkflowSnapshot(join18(harnessDir, selection.dir)).snapshot;
     } catch {
       return selectionErrorState({
         kind: "error",
@@ -6717,11 +7055,11 @@ function harnessStateSource(harnessDir, selection) {
       specIntegrationBranch: str(branch?.integration),
       pushPolicy: str(executionPolicy?.push_policy),
       worktreeMode: str(executionPolicy?.worktree_mode),
-      controlWorktreePath: str(snapshot.control_worktree_path),
+      integrationWorktreePath: str(snapshot.integration_worktree_path),
       leases,
       knowledge: knowledgeDigest(harnessDir),
       direction: compass !== undefined ? compassDirection(compass.compassPath) : null,
-      agentFlow: readAgentFlow(join12(harnessDir, selection.dir), 50)
+      agentFlow: readAgentFlow(join18(harnessDir, selection.dir), 50)
     };
   } catch {
     return null;
@@ -6741,7 +7079,7 @@ function selectionErrorState(selection, rollup, harnessDir) {
     specIntegrationBranch: null,
     pushPolicy: null,
     worktreeMode: null,
-    controlWorktreePath: null,
+    integrationWorktreePath: null,
     leases: [],
     knowledge: knowledgeDigest(harnessDir),
     direction: null,
@@ -6751,7 +7089,7 @@ function selectionErrorState(selection, rollup, harnessDir) {
 function projectRollupSource(harnessDir, residuals) {
   const milestones = [];
   const projectsDir = resolveProjectDir(harnessDir, { harnessDir });
-  if (existsSync14(projectsDir)) {
+  if (existsSync16(projectsDir)) {
     let entries;
     try {
       entries = readdirSync4(projectsDir, { withFileTypes: true });
@@ -6761,11 +7099,11 @@ function projectRollupSource(harnessDir, residuals) {
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
-      const roadmapPath = join12(projectsDir, entry.name, PROJECT_ROADMAP_FILE);
-      if (!existsSync14(roadmapPath))
+      const roadmapPath = join18(projectsDir, entry.name, PROJECT_ROADMAP_FILE);
+      if (!existsSync16(roadmapPath))
         continue;
       try {
-        const doc = parseCompassFrontmatterText(readFileSync11(roadmapPath, "utf8"), roadmapPath);
+        const doc = parseCompassFrontmatterText(readFileSync12(roadmapPath, "utf8"), roadmapPath);
         if (Array.isArray(doc.milestones)) {
           for (const milestone of doc.milestones) {
             if (typeof milestone === "string" && milestone.trim() !== "")
@@ -6827,7 +7165,7 @@ function residualRollup(harnessDir) {
 }
 function projectRegisters(harnessDir) {
   const projectsDir = resolveProjectDir(harnessDir, { harnessDir });
-  if (!existsSync14(projectsDir))
+  if (!existsSync16(projectsDir))
     return [];
   let entries;
   try {
@@ -6839,8 +7177,8 @@ function projectRegisters(harnessDir) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const registerPath = join12(projectsDir, entry.name, PROJECT_REGISTER_FILE);
-    if (!existsSync14(registerPath))
+    const registerPath = join18(projectsDir, entry.name, PROJECT_REGISTER_FILE);
+    if (!existsSync16(registerPath))
       continue;
     try {
       registers.push({ projectId: entry.name, doc: readJson(registerPath) });
@@ -6851,13 +7189,13 @@ function projectRegisters(harnessDir) {
   return registers;
 }
 function knowledgeDigest(harnessDir) {
-  const indexPath = join12(harnessDir, "knowledge", "README.md");
-  if (!existsSync14(indexPath))
+  const indexPath = join18(harnessDir, "knowledge", "README.md");
+  if (!existsSync16(indexPath))
     return null;
   try {
     const categories = new Set;
     let docCount = 0;
-    for (const line of readFileSync11(indexPath, "utf8").split(/\r?\n/)) {
+    for (const line of readFileSync12(indexPath, "utf8").split(/\r?\n/)) {
       const row = line.trim().match(/^\|(.+)\|$/);
       if (row === null)
         continue;
@@ -6880,7 +7218,7 @@ function knowledgeDigest(harnessDir) {
 }
 function compassDirection(compassPath) {
   try {
-    const content = readFileSync11(compassPath, "utf8");
+    const content = readFileSync12(compassPath, "utf8");
     const section = content.match(/^## Direction lock[^\n]*\n+([\s\S]*?)(?=\n## |$)/m);
     if (section === null)
       return null;
@@ -6897,14 +7235,14 @@ function compassDirection(compassPath) {
 }
 function selectedCompass(harnessDir, workflowId, snapshot) {
   const ref = snapshot.compass_ref;
-  if (typeof ref !== "string" || ref.trim() === "" || isAbsolute7(ref))
+  if (typeof ref !== "string" || ref.trim() === "" || isAbsolute8(ref))
     return;
-  const compassPath = join12(harnessDir, ref);
+  const compassPath = join18(harnessDir, ref);
   if (!pathInside(harnessDir, compassPath))
     return;
-  if (basename5(compassPath) !== "delivery-compass.md")
+  if (basename4(compassPath) !== "delivery-compass.md")
     return;
-  if (!existsSync14(compassPath))
+  if (!existsSync16(compassPath))
     return;
   let resolvedHarness;
   let resolvedCompass;
@@ -6930,15 +7268,15 @@ function selectedCompass(harnessDir, workflowId, snapshot) {
 }
 function pathInside(root, candidate) {
   const rel = relative7(root, candidate);
-  return rel !== "" && rel !== ".." && !rel.startsWith(`..${sep3}`) && !isAbsolute7(rel);
+  return rel !== "" && rel !== ".." && !rel.startsWith(`..${sep3}`) && !isAbsolute8(rel);
 }
 function iterationGateSource(harnessDir, selection) {
   if (harnessDir === null || selection === undefined || selection.kind === "error")
     return;
-  const statusPath = join12(harnessDir, STATUS_FILE);
-  if (!existsSync14(statusPath))
+  const statusPath = join18(harnessDir, STATUS_FILE);
+  if (!existsSync16(statusPath))
     return;
-  const snapshotPath = join12(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+  const snapshotPath = join18(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
   try {
     const snapshotDoc = readJson(snapshotPath);
     const compass = selectedCompass(harnessDir, selection.workflowId, snapshotDoc);
@@ -7028,7 +7366,7 @@ function persistEngineStatusSnapshot(ctx, harnessDir, cwd, turn, catalogPayload,
 }
 
 // src/engine-status-endpoint.ts
-import { isAbsolute as isAbsolute9 } from "node:path";
+import { isAbsolute as isAbsolute10 } from "node:path";
 
 // ../../node_modules/.bun/@deepseek-ai+dsh-typert-protocol@0.1.5-rc.2+1e4e7adc57ac8890/node_modules/@deepseek-ai/dsh-typert-protocol/lib/index.js
 import { Service as Service2 } from "@deepseek-ai/cordis";
@@ -7084,7 +7422,7 @@ function liveSeqOf(value) {
 function isRefusedPath(cwd) {
   if (cwd.includes("\x00"))
     return true;
-  if (!isAbsolute9(cwd))
+  if (!isAbsolute10(cwd))
     return true;
   return cwd.split(/[\\/]+/).includes("..");
 }
@@ -7320,12 +7658,12 @@ function installEngineStatusEndpoint(ctx, options) {
 }
 
 // src/gates/status.ts
-import { existsSync as existsSync15, readdirSync as readdirSync7 } from "node:fs";
-import { basename as basename8, join as join14, relative as relative9, resolve as resolve10 } from "node:path";
+import { existsSync as existsSync17, readdirSync as readdirSync7 } from "node:fs";
+import { basename as basename6, join as join20, relative as relative9, resolve as resolve10 } from "node:path";
 var LOGGER_NAME = "mstar/status-gate";
 function harnessDocKindOfTarget(harnessDir, targetPath) {
   const resolved = resolve10(targetPath);
-  const name = basename8(resolved);
+  const name = basename6(resolved);
   if (name !== STATUS_FILE && name !== WORKFLOW_SNAPSHOT_FILE && name !== PROJECT_REGISTER_FILE)
     return null;
   const rel = relative9(harnessDir, resolved);
@@ -7337,8 +7675,8 @@ function harnessDocKindOfTarget(harnessDir, targetPath) {
     workflowDir = resolveWorkflowDir(harnessDir, { harnessDir });
     projectDir = resolveProjectDir(harnessDir, { harnessDir });
   } catch {
-    workflowDir = join14(harnessDir, "workflows");
-    projectDir = join14(harnessDir, "projects");
+    workflowDir = join20(harnessDir, "workflows");
+    projectDir = join20(harnessDir, "projects");
   }
   if (name === WORKFLOW_SNAPSHOT_FILE && /^[^/]+\/snapshot\.json$/.test(relative9(workflowDir, resolved)))
     return "snapshot";
@@ -7402,8 +7740,8 @@ function projectRegisterDocs(harnessDir) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const registerPath = join14(projectsDir, entry.name, PROJECT_REGISTER_FILE);
-    if (!existsSync15(registerPath))
+    const registerPath = join20(projectsDir, entry.name, PROJECT_REGISTER_FILE);
+    if (!existsSync17(registerPath))
       continue;
     try {
       registers.push({ projectId: entry.name, doc: readJson(registerPath) });
@@ -7476,8 +7814,8 @@ async function editIntentListener(ctx, resolver, config, adapter, target, actor,
 }
 
 // src/gates/skill-lint.ts
-import { existsSync as existsSync16, readFileSync as readFileSync13 } from "node:fs";
-import { basename as basename10, dirname as dirname10, resolve as resolve12, sep as sep5 } from "node:path";
+import { existsSync as existsSync18, readFileSync as readFileSync14 } from "node:fs";
+import { basename as basename7, dirname as dirname11, resolve as resolve12, sep as sep5 } from "node:path";
 var SKILL_LINT_LOGGER = "mstar/skill-lint";
 
 class SkillLintVetoError extends Error {
@@ -7518,7 +7856,7 @@ function lintSkillDoc(doc, options = {}) {
   return violations.length === 0 ? { ok: true, violations } : { ok: false, violations };
 }
 function lintSkillWrite(doc, options) {
-  const skillId = basename10(dirname10(resolve12(options.target)));
+  const skillId = basename7(dirname11(resolve12(options.target)));
   const result = lintSkillDoc(doc, { skillId });
   if (options.hard && !result.ok) {
     throw new SkillLintVetoError(options.target, result.violations);
@@ -7531,13 +7869,13 @@ function skillRootsOf(config) {
   return roots.map((root) => root.trim()).filter((root) => root !== "");
 }
 function isSkillTarget(roots, target) {
-  if (basename10(target.displayPath) !== "SKILL.md")
+  if (basename7(target.displayPath) !== "SKILL.md")
     return false;
   const resolvedPath = resolve12(target.displayPath);
   return roots.some((root) => resolvedPath.startsWith(resolve12(root) + sep5));
 }
 function skillNameOf(target) {
-  return basename10(dirname10(target.displayPath));
+  return basename7(dirname11(target.displayPath));
 }
 function skillCanonicalForm(target) {
   return resolveSkillRoot("dsh", { skill: skillNameOf(target), rel: "SKILL.md" });
@@ -7550,11 +7888,11 @@ function gateSkillIntent(ctx, harnessDir, config, target) {
     if (!isSkillTarget(roots, target))
       return;
     const skillPath = resolve12(target.displayPath);
-    if (!existsSync16(skillPath))
+    if (!existsSync18(skillPath))
       return;
     let doc;
     try {
-      doc = readFileSync13(skillPath, "utf8");
+      doc = readFileSync14(skillPath, "utf8");
     } catch (error) {
       ctx.logger(SKILL_LINT_LOGGER).error(`skill lint degraded to allow (cannot read ${skillPath}): ${error.message}`);
       ctx.emit("mstar/skill-lint", {
@@ -7567,7 +7905,7 @@ function gateSkillIntent(ctx, harnessDir, config, target) {
       });
       return;
     }
-    const result = lintSkillDoc(doc, { skillId: basename10(dirname10(skillPath)) });
+    const result = lintSkillDoc(doc, { skillId: basename7(dirname11(skillPath)) });
     if (result.ok)
       return;
     const hard = resolveSeamHard(harnessDir, config);
@@ -7601,8 +7939,8 @@ async function skillWriteIntentListener(ctx, resolver, config, target, actor, ne
 }
 
 // src/gates/seams.ts
-import { existsSync as existsSync17, readFileSync as readFileSync14, readdirSync as readdirSync10 } from "node:fs";
-import { basename as basename11, dirname as dirname11, join as join17, resolve as resolve14, sep as sep7 } from "node:path";
+import { existsSync as existsSync19, readFileSync as readFileSync15, readdirSync as readdirSync10 } from "node:fs";
+import { basename as basename9, dirname as dirname12, join as join21, resolve as resolve14, sep as sep7 } from "node:path";
 
 // ../engine/dist/audit.js
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
@@ -7801,7 +8139,7 @@ var SEAM_LOGGERS = {
   roles: "mstar/roles-lint"
 };
 function isIndexFile(path) {
-  const base = basename11(path);
+  const base = basename9(path);
   return base === "README.md" || base === "index.md";
 }
 function isMarkdownDoc(path) {
@@ -7834,14 +8172,14 @@ function rolesDirOf(path) {
   const segments = resolve14(path).split(sep7);
   const idx = segments.indexOf("mstar-roles");
   if (idx === -1)
-    return dirname11(path);
-  return idx === 0 ? sep7 : join17(sep7, ...segments.slice(1, idx + 1));
+    return dirname12(path);
+  return idx === 0 ? sep7 : join21(sep7, ...segments.slice(1, idx + 1));
 }
 function isSeamTarget(seam, harnessDir, target) {
   const path = resolve14(target.displayPath);
   switch (seam) {
     case "design-md": {
-      const base = basename11(path);
+      const base = basename9(path);
       return base === "DESIGN.md" || base === "DESIGN.dark.md";
     }
     case "audit":
@@ -7849,7 +8187,7 @@ function isSeamTarget(seam, harnessDir, target) {
     case "compound": {
       if (harnessDir === null)
         return false;
-      return path.startsWith(resolve14(join17(harnessDir, "knowledge")) + sep7) && isMarkdownDoc(path);
+      return path.startsWith(resolve14(join21(harnessDir, "knowledge")) + sep7) && isMarkdownDoc(path);
     }
     case "roles":
       return isRolesTarget(path);
@@ -7866,11 +8204,11 @@ function auditSecretsViolations(findings, file) {
 }
 function validateDesignDoc(doc, path) {
   const violations = [...validateDesignTokenFrontmatter(doc).violations];
-  const isDark = basename11(path) === "DESIGN.dark.md";
-  const sibling = join17(dirname11(path), isDark ? "DESIGN.md" : "DESIGN.dark.md");
-  if (existsSync17(sibling)) {
-    const light = isDark ? readFileSync14(sibling, "utf8") : doc;
-    const dark = isDark ? doc : readFileSync14(sibling, "utf8");
+  const isDark = basename9(path) === "DESIGN.dark.md";
+  const sibling = join21(dirname12(path), isDark ? "DESIGN.md" : "DESIGN.dark.md");
+  if (existsSync19(sibling)) {
+    const light = isDark ? readFileSync15(sibling, "utf8") : doc;
+    const dark = isDark ? doc : readFileSync15(sibling, "utf8");
     violations.push(...assertLightDarkParity(light, dark).violations);
   }
   return violations.length === 0 ? { ok: true, violations } : { ok: false, violations };
@@ -7884,21 +8222,21 @@ function validateAuditDoc(doc, path) {
 function validateCompoundDoc(doc, _path, harnessDir) {
   const violations = [...validateSchemaYaml(doc).violations];
   if (harnessDir !== null) {
-    violations.push(...referenceExists(dirname11(harnessDir), doc).violations);
+    violations.push(...referenceExists(dirname12(harnessDir), doc).violations);
   }
   return violations.length === 0 ? { ok: true, violations } : { ok: false, violations };
 }
-function validateRolesState(rolesDir, skillsRoot = dirname11(rolesDir)) {
+function validateRolesState(rolesDir, skillsRoot = dirname12(rolesDir)) {
   const violations = [...validateRoleMapping(rolesDir).violations];
   const skillTexts = {};
   for (const entry of readdirSync10(skillsRoot, { withFileTypes: true })) {
     if (!entry.isDirectory() || !entry.name.startsWith("mstar-"))
       continue;
-    const skillFile = join17(skillsRoot, entry.name, "SKILL.md");
-    if (!existsSync17(skillFile))
+    const skillFile = join21(skillsRoot, entry.name, "SKILL.md");
+    if (!existsSync19(skillFile))
       continue;
     try {
-      skillTexts[entry.name] = readFileSync14(skillFile, "utf8");
+      skillTexts[entry.name] = readFileSync15(skillFile, "utf8");
     } catch {}
   }
   violations.push(...lintLoadOrder(skillTexts).violations);
@@ -7929,11 +8267,11 @@ function gateSeamIntent(ctx, harnessDir, config, seam, target) {
     if (!isSeamTarget(seam, harnessDir, target))
       return;
     const path = resolve14(target.displayPath);
-    if (!existsSync17(path))
+    if (!existsSync19(path))
       return;
     let doc;
     try {
-      doc = readFileSync14(path, "utf8");
+      doc = readFileSync15(path, "utf8");
     } catch (error) {
       logger.error(`seam lint degraded to allow (cannot read ${path}): ${error.message}`);
       emitSeamAdvisory(ctx, seam, target.displayPath, { ok: true, violations: [] }, false, { degraded: true });
@@ -7945,12 +8283,12 @@ function gateSeamIntent(ctx, harnessDir, config, seam, target) {
     const hard = resolveSeamHard(harnessDir, config);
     const verdict = applyEnforcement(result, { hard });
     if (verdict.hardBlocked) {
-      logger.error(`${basename11(path)} write to ${target.displayPath} ALLOWED as repair (Enforcement: hard; the current on-disk document is already invalid — the intent carries no incoming content, so the vetoable signal is only the pre-write state):
+      logger.error(`${basename9(path)} write to ${target.displayPath} ALLOWED as repair (Enforcement: hard; the current on-disk document is already invalid — the intent carries no incoming content, so the vetoable signal is only the pre-write state):
 ${verdict.violations.map(formatViolation).join(`
 `)}`);
       emitSeamAdvisory(ctx, seam, target.displayPath, verdict, hard, { repair: true });
     } else {
-      logger.warn(`${basename11(path)} write to ${target.displayPath} (advisory):
+      logger.warn(`${basename9(path)} write to ${target.displayPath} (advisory):
 ${verdict.violations.map(formatViolation).join(`
 `)}`);
       emitSeamAdvisory(ctx, seam, target.displayPath, verdict, hard);
@@ -7999,8 +8337,8 @@ function lintRolesWrite(doc, options) {
 }
 
 // src/gates/tools.ts
-import { existsSync as existsSync18, readFileSync as readFileSync15 } from "node:fs";
-import { join as join19, resolve as resolve16 } from "node:path";
+import { existsSync as existsSync20, readFileSync as readFileSync16 } from "node:fs";
+import { join as join22, resolve as resolve16 } from "node:path";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 var ITERATION_VIOLATION_SCHEMA = {
   type: "object",
@@ -8165,9 +8503,9 @@ function registerSddIterationTools(ctx, resolver) {
       presentResult: (_args, _result) => ({ card: "generic", title: "Iteration gate evaluation" }),
       isConcurrencySafe: () => false,
       async execute(args) {
-        if (!existsSync18(args.snapshot_path))
+        if (!existsSync20(args.snapshot_path))
           throw new Error(`workflow snapshot not found: ${args.snapshot_path}`);
-        if (!existsSync18(args.compass_path))
+        if (!existsSync20(args.compass_path))
           throw new Error(`compass file not found: ${args.compass_path}`);
         const snapshotDoc = readJson(args.snapshot_path);
         const compassDoc = parseCompassFrontmatter(args.compass_path);
@@ -8221,10 +8559,10 @@ function registerSeamTools(ctx, resolver) {
       isConcurrencySafe: () => false,
       async execute(args) {
         const abs = resolve16(args.dir);
-        const lightPath = join19(abs, "DESIGN.md");
-        if (!existsSync18(lightPath))
+        const lightPath = join22(abs, "DESIGN.md");
+        if (!existsSync20(lightPath))
           throw new Error(`design file not found: ${lightPath}`);
-        const light = readFileSync15(lightPath, "utf8");
+        const light = readFileSync16(lightPath, "utf8");
         const result = validateDesignDoc(light, lightPath);
         const level = completenessLevel(light);
         return {
@@ -8275,9 +8613,9 @@ function registerSeamTools(ctx, resolver) {
       isConcurrencySafe: () => false,
       async execute(args) {
         const abs = resolve16(args.plan_path);
-        if (!existsSync18(abs))
+        if (!existsSync20(abs))
           throw new Error(`plan file not found: ${abs}`);
-        const text = readFileSync15(abs, "utf8");
+        const text = readFileSync16(abs, "utf8");
         const result = validateAuditDoc(text, abs);
         return { ok: result.ok, violations: result.violations.map(iterationViolationView), secrets: result.findings };
       }
@@ -8315,9 +8653,9 @@ function registerSeamTools(ctx, resolver) {
       isConcurrencySafe: () => false,
       async execute(args, exec) {
         const abs = resolve16(args.doc_path);
-        if (!existsSync18(abs))
+        if (!existsSync20(abs))
           throw new Error(`knowledge doc not found: ${abs}`);
-        const text = readFileSync15(abs, "utf8");
+        const text = readFileSync16(abs, "utf8");
         const base = validateCompoundDoc(text, abs, args.repo_root !== undefined ? null : resolver.forAgent(exec.agent));
         const violations = [...base.violations];
         if (args.repo_root !== undefined) {
@@ -8360,7 +8698,7 @@ function registerSeamTools(ctx, resolver) {
       isConcurrencySafe: () => false,
       async execute(args) {
         const rolesDir = resolve16(args.roles_dir);
-        if (!existsSync18(join19(rolesDir, "SKILL.md")))
+        if (!existsSync20(join22(rolesDir, "SKILL.md")))
           throw new Error(`roles dir not found: ${rolesDir}`);
         const result = validateRolesState(rolesDir, args.skills_root !== undefined ? resolve16(args.skills_root) : undefined);
         return { ok: result.ok, violations: result.violations.map(iterationViolationView) };
@@ -8370,8 +8708,8 @@ function registerSeamTools(ctx, resolver) {
 }
 
 // src/gates/adapter.ts
-import { existsSync as existsSync19 } from "node:fs";
-import { join as join20 } from "node:path";
+import { existsSync as existsSync21 } from "node:fs";
+import { join as join23 } from "node:path";
 import { Service as Service3 } from "@deepseek-ai/cordis";
 var HOST_LOGGER = "mstar/host-adapter";
 function mergeLeasesMatch(left, right) {
@@ -8407,7 +8745,7 @@ class DshHostAdapter extends Service3 {
     this.logSink(level, msg);
   }
   statusGate(path, kind, harnessDir) {
-    if (!existsSync19(path))
+    if (!existsSync21(path))
       return { ok: true, violations: [] };
     return validateStatusDoc(path, kind, harnessDir);
   }
@@ -8486,7 +8824,7 @@ class DshHostAdapter extends Service3 {
     if (harnessDir !== null) {
       const selection = resolveActiveWorkflow(harnessDir);
       if (selection.kind === "active") {
-        const snapshotPath = join20(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
+        const snapshotPath = join23(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE);
         try {
           const snapshot = readJson(snapshotPath);
           const stored = snapshot?.integration_merge_lease;
@@ -8512,8 +8850,8 @@ class DshHostAdapter extends Service3 {
 }
 
 // src/gates/agent-personas.ts
-import { readFileSync as readFileSync16, readdirSync as readdirSync12, statSync as statSync8 } from "node:fs";
-import { join as join21, resolve as resolve17, sep as sep8 } from "node:path";
+import { readFileSync as readFileSync17, readdirSync as readdirSync12, statSync as statSync8 } from "node:fs";
+import { join as join24, resolve as resolve17, sep as sep8 } from "node:path";
 var ROLE_ID_PATTERN = /^[a-z0-9-]{1,32}$/;
 var defaultCache = new Map;
 function personaFor(roleId, lookup, warn) {
@@ -8541,7 +8879,7 @@ function subagentRoleIds(agentsDir) {
     const roleId = name.slice(0, -3);
     let content;
     try {
-      content = readFileSync16(join21(agentsDir, name), "utf8");
+      content = readFileSync17(join24(agentsDir, name), "utf8");
     } catch {
       continue;
     }
@@ -8571,7 +8909,7 @@ function defaultFromMirror(agentsDir, roleId, warn) {
     return hit.text;
   let content;
   try {
-    content = readFileSync16(file, "utf8");
+    content = readFileSync17(file, "utf8");
   } catch {
     return;
   }
@@ -8802,8 +9140,8 @@ function log2(level, message) {
 }
 
 // src/gates/workflow-ledger.ts
-import { readFileSync as readFileSync17, renameSync as renameSync4, writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join22 } from "node:path";
+import { readFileSync as readFileSync18, renameSync as renameSync4, writeFileSync as writeFileSync7 } from "node:fs";
+import { join as join25 } from "node:path";
 var WORKFLOW_LEDGER_LOGGER = "mstar/workflow-ledger";
 var TOOL_WORKFLOW_RUN_START = "tool-workflow/run-start";
 var TOOL_WORKFLOW_AGENT_START = "tool-workflow/agent-start";
@@ -8863,7 +9201,7 @@ function loadWatermark(workflowDir, fresh = false) {
     return cached;
   const watermark = new Map;
   try {
-    const raw = readFileSync17(join22(workflowDir, WORKFLOW_LEDGER_WATERMARK_FILE), "utf8");
+    const raw = readFileSync18(join25(workflowDir, WORKFLOW_LEDGER_WATERMARK_FILE), "utf8");
     const record = asRecord(JSON.parse(raw));
     const cursors = asRecord(record?.cursors);
     if (cursors !== undefined) {
@@ -8886,7 +9224,7 @@ function loadWatermark(workflowDir, fresh = false) {
 }
 function saveWatermark(workflowDir, watermark) {
   try {
-    const file = join22(workflowDir, WORKFLOW_LEDGER_WATERMARK_FILE);
+    const file = join25(workflowDir, WORKFLOW_LEDGER_WATERMARK_FILE);
     const tmp = `${file}.tmp`;
     writeFileSync7(tmp, JSON.stringify({ v: 1, cursors: Object.fromEntries(watermark) }));
     renameSync4(tmp, file);
@@ -9205,8 +9543,8 @@ function registerWorkflowLedger(ctx, resolver, workflowAskCache) {
 }
 
 // src/gates/goal-bridge.ts
-import { existsSync as existsSync20, readdirSync as readdirSync13 } from "node:fs";
-import { join as join23 } from "node:path";
+import { existsSync as existsSync22, readdirSync as readdirSync13 } from "node:fs";
+import { join as join26 } from "node:path";
 var GOAL_BRIDGE_LOGGER = "mstar/goal-bridge";
 var GOAL_CHANGE_EVENT_TYPE = "goal/change";
 var GOAL_CHANGE_VERSION = 1;
@@ -9231,12 +9569,12 @@ function projectRegisterPointer(harnessDir) {
     for (const entry of readdirSync13(projectsDir, { withFileTypes: true })) {
       if (!entry.isDirectory())
         continue;
-      const registerPath = join23(projectsDir, entry.name, PROJECT_REGISTER_FILE);
-      if (existsSync20(registerPath))
+      const registerPath = join26(projectsDir, entry.name, PROJECT_REGISTER_FILE);
+      if (existsSync22(registerPath))
         return registerPath;
     }
   } catch {}
-  return join23(projectsDir, _DEFAULT_PROJECT, PROJECT_REGISTER_FILE);
+  return join26(projectsDir, _DEFAULT_PROJECT, PROJECT_REGISTER_FILE);
 }
 function blockedAdvisoryOf(envelope) {
   const record = asRecord(envelope);
@@ -9287,8 +9625,8 @@ function registerGoalBridge(ctx, resolver) {
 }
 
 // src/gates/plan-mode-bridge.ts
-import { existsSync as existsSync21 } from "node:fs";
-import { isAbsolute as isAbsolute10, join as join24, relative as relative10, sep as sep9 } from "node:path";
+import { existsSync as existsSync23 } from "node:fs";
+import { isAbsolute as isAbsolute11, join as join27, relative as relative10, sep as sep9 } from "node:path";
 
 // src/gates/steering.ts
 function isRootLikeAgent(agent) {
@@ -9332,7 +9670,7 @@ function errorMessage5(error) {
   return error instanceof Error ? error.message : String(error);
 }
 function selectedLifecycle(harnessDir, hint) {
-  if (!existsSync21(join24(harnessDir, STATUS_FILE)))
+  if (!existsSync23(join27(harnessDir, STATUS_FILE)))
     return { kind: "none" };
   const selection = resolveReadWorkflow(harnessDir, hint);
   if (selection.kind === "error") {
@@ -9340,7 +9678,7 @@ function selectedLifecycle(harnessDir, hint) {
   }
   let doc;
   try {
-    doc = readJson(join24(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE));
+    doc = readJson(join27(harnessDir, selection.dir, WORKFLOW_SNAPSHOT_FILE));
   } catch {
     return { kind: "none" };
   }
@@ -9350,13 +9688,13 @@ function selectedLifecycle(harnessDir, hint) {
 }
 function selectedCompassSteers(harnessDir, lifecycle) {
   const ref = lifecycle.doc.compass_ref;
-  if (typeof ref !== "string" || ref.trim() === "" || isAbsolute10(ref))
+  if (typeof ref !== "string" || ref.trim() === "" || isAbsolute11(ref))
     return false;
-  const compassPath = join24(harnessDir, ref);
+  const compassPath = join27(harnessDir, ref);
   const inside = relative10(harnessDir, compassPath);
-  if (inside === "" || inside === ".." || inside.startsWith(`..${sep9}`) || isAbsolute10(inside))
+  if (inside === "" || inside === ".." || inside.startsWith(`..${sep9}`) || isAbsolute11(inside))
     return false;
-  if (!existsSync21(compassPath))
+  if (!existsSync23(compassPath))
     return false;
   let fields;
   try {
@@ -9869,7 +10207,7 @@ var inject = ["loader"];
 function packagedCommandsDir() {
   try {
     const dir = fileURLToPath3(new URL("../harness-commands", import.meta.url));
-    return existsSync22(dir) ? dir : undefined;
+    return existsSync24(dir) ? dir : undefined;
   } catch {
     return;
   }
@@ -9925,7 +10263,7 @@ function registerMstarCommands(ctx) {
     for (const file of readdirSync14(dir).sort()) {
       if (!file.endsWith(".md"))
         continue;
-      const parsed = parseCommandMarkdown(readFileSync18(join25(dir, file), "utf8"));
+      const parsed = parseCommandMarkdown(readFileSync19(join28(dir, file), "utf8"));
       if (parsed === undefined)
         continue;
       commandsCtx.commands.register({