@xfey/tutti 0.1.0

package/node_modules/@tutti/shared/dist/utils/redaction/index.js

@@ -0,0 +1,158 @@
+export const REDACTION_LABELS = {
+    providerApiKey: "[REDACTED:provider_api_key]",
+    bearerToken: "[REDACTED:bearer_token]",
+    cookie: "[REDACTED:cookie]",
+    joinToken: "[REDACTED:join_token]",
+    hostSecret: "[REDACTED:host_secret]",
+    localPath: "[REDACTED:local_path]",
+};
+export const REDACTION_FIXTURES = [
+    "sk-proj-example-secret",
+    "Authorization: Bearer example-token",
+    "Cookie: tutti_session=example-session",
+    "http://127.0.0.1:4370/join/example-join-token",
+    "http://127.0.0.1:4370/api/v1/join/example-join-token/accept",
+    "host_connection_token=example-host-token",
+    "host_registration_secret=example-host-secret",
+    "/Users/example/.tutti/auth.json",
+    "/Users/example/project/.git/config",
+    "/Users/example/.tutti/projects/proj_123/runs/act_123",
+    "OPENAI_API_KEY=example",
+];
+const TEXT_REDACTION_RULES = [
+    {
+        pattern: /\bOPENAI_API_KEY\s*=\s*[^\s"'`]+/giu,
+        replacement: `OPENAI_API_KEY=${REDACTION_LABELS.providerApiKey}`,
+    },
+    {
+        pattern: /\bAuthorization:\s*Bearer\s+[^\s,;"'`]+/giu,
+        replacement: `Authorization: Bearer ${REDACTION_LABELS.bearerToken}`,
+    },
+    {
+        pattern: /\bBearer\s+[A-Za-z0-9._~+/-]+=*/gu,
+        replacement: `Bearer ${REDACTION_LABELS.bearerToken}`,
+    },
+    {
+        pattern: /\bCookie:\s*[^\n\r]+/giu,
+        replacement: `Cookie: ${REDACTION_LABELS.cookie}`,
+    },
+    {
+        pattern: /\btutti_session\s*=\s*[^;\s,]+/giu,
+        replacement: `tutti_session=${REDACTION_LABELS.cookie}`,
+    },
+    {
+        pattern: /https?:\/\/[^\s"'`]+\/api\/v1\/join\/[A-Za-z0-9._~+/-]+\/accept/giu,
+        replacement: `https://[REDACTED:host]/api/v1/join/${REDACTION_LABELS.joinToken}/accept`,
+    },
+    {
+        pattern: /https?:\/\/[^\s"'`]+\/join\/[A-Za-z0-9._~+/-]+/giu,
+        replacement: `https://[REDACTED:host]/join/${REDACTION_LABELS.joinToken}`,
+    },
+    {
+        pattern: /(^|[\s"'`])\/api\/v1\/join\/[A-Za-z0-9._~+/-]+\/accept/giu,
+        replacement: `$1/api/v1/join/${REDACTION_LABELS.joinToken}/accept`,
+    },
+    {
+        pattern: /(^|[\s"'`])\/join\/[A-Za-z0-9._~+/-]+/giu,
+        replacement: `$1/join/${REDACTION_LABELS.joinToken}`,
+    },
+    {
+        pattern: /\bhost_connection_token\s*=\s*[^\s"'`&]+/giu,
+        replacement: `host_connection_token=${REDACTION_LABELS.hostSecret}`,
+    },
+    {
+        pattern: /\bhost_registration_secret\s*=\s*[^\s"'`&]+/giu,
+        replacement: `host_registration_secret=${REDACTION_LABELS.hostSecret}`,
+    },
+    {
+        pattern: /\bsk-(?:proj-)?[A-Za-z0-9_-]{8,}\b/gu,
+        replacement: REDACTION_LABELS.providerApiKey,
+    },
+    {
+        pattern: /(^|[\s"'=:(])((?:\/Users\/|\/home\/|\/private\/var\/folders\/|\/var\/folders\/)[^\s"',)]+)/gu,
+        replacement: `$1${REDACTION_LABELS.localPath}`,
+    },
+];
+function replacementForSensitiveKey(key) {
+    const normalized = key.toLowerCase();
+    if (normalized.endsWith("_ref") || normalized.endsWith("_id")) {
+        return undefined;
+    }
+    if (normalized === "authorization" || normalized.includes("bearer")) {
+        return REDACTION_LABELS.bearerToken;
+    }
+    if (normalized === "openai_api_key" || normalized.endsWith("api_key")) {
+        return REDACTION_LABELS.providerApiKey;
+    }
+    if (normalized === "cookie" || normalized.includes("session_cookie")) {
+        return REDACTION_LABELS.cookie;
+    }
+    if (normalized.includes("join_token")) {
+        return REDACTION_LABELS.joinToken;
+    }
+    if (normalized.includes("host_connection_token") ||
+        normalized.includes("host_registration_secret") ||
+        normalized.includes("host_secret")) {
+        return REDACTION_LABELS.hostSecret;
+    }
+    if (normalized.endsWith("_token") || normalized === "token") {
+        return REDACTION_LABELS.bearerToken;
+    }
+    if (normalized.includes("secret")) {
+        return REDACTION_LABELS.hostSecret;
+    }
+    return undefined;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+export function redactText(value) {
+    let redacted = value;
+    for (const rule of TEXT_REDACTION_RULES) {
+        redacted = redacted.replace(rule.pattern, rule.replacement);
+    }
+    return redacted;
+}
+export function redactValue(value) {
+    if (typeof value === "string") {
+        return redactText(value);
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => redactValue(item));
+    }
+    if (isRecord(value)) {
+        const redacted = {};
+        for (const [key, nested] of Object.entries(value)) {
+            redacted[key] = replacementForSensitiveKey(key) ?? redactValue(nested);
+        }
+        return redacted;
+    }
+    return value;
+}
+export function redactError(error) {
+    if (error instanceof Error) {
+        const redacted = {
+            name: error.name,
+            message: redactText(error.message),
+        };
+        if (error.stack !== undefined) {
+            redacted.stack = redactText(error.stack);
+        }
+        return redacted;
+    }
+    return redactValue(error);
+}
+export function redactAndTruncateText(value, maxLength) {
+    if (!Number.isInteger(maxLength) || maxLength < 0) {
+        throw new RangeError("maxLength must be a non-negative integer");
+    }
+    const redacted = redactText(value);
+    if (redacted.length <= maxLength) {
+        return redacted;
+    }
+    if (maxLength <= 3) {
+        return ".".repeat(maxLength);
+    }
+    return `${redacted.slice(0, maxLength - 3)}...`;
+}
+//# sourceMappingURL=index.js.map

package/node_modules/@tutti/shared/package.json

@@ -0,0 +1,63 @@
+{
+  "name": "@tutti/shared",
+  "version": "0.0.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "development": "./dist/index.js",
+      "import": "./dist/index.js"
+    },
+    "./domain": {
+      "types": "./dist/domain/index.d.ts",
+      "development": "./dist/domain/index.js",
+      "import": "./dist/domain/index.js"
+    },
+    "./ids": {
+      "types": "./dist/ids/index.d.ts",
+      "development": "./dist/ids/index.js",
+      "import": "./dist/ids/index.js"
+    },
+    "./schemas/api": {
+      "types": "./dist/schemas/api/index.d.ts",
+      "development": "./dist/schemas/api/index.js",
+      "import": "./dist/schemas/api/index.js"
+    },
+    "./schemas/domain": {
+      "types": "./dist/schemas/domain/index.d.ts",
+      "development": "./dist/schemas/domain/index.js",
+      "import": "./dist/schemas/domain/index.js"
+    },
+    "./schemas/internal": {
+      "types": "./dist/schemas/internal/index.d.ts",
+      "development": "./dist/schemas/internal/index.js",
+      "import": "./dist/schemas/internal/index.js"
+    },
+    "./utils": {
+      "types": "./dist/utils/index.d.ts",
+      "development": "./dist/utils/index.js",
+      "import": "./dist/utils/index.js"
+    },
+    "./utils/command-idempotency": {
+      "types": "./dist/utils/command-idempotency/index.d.ts",
+      "development": "./dist/utils/command-idempotency/index.js",
+      "import": "./dist/utils/command-idempotency/index.js"
+    },
+    "./utils/path-policy": {
+      "types": "./dist/utils/path-policy/index.d.ts",
+      "development": "./dist/utils/path-policy/index.js",
+      "import": "./dist/utils/path-policy/index.js"
+    },
+    "./utils/redaction": {
+      "types": "./dist/utils/redaction/index.d.ts",
+      "development": "./dist/utils/redaction/index.js",
+      "import": "./dist/utils/redaction/index.js"
+    }
+  },
+  "dependencies": {
+    "@sinclair/typebox": "^0.34.49",
+    "ulid": "^3.0.2"
+  }
+}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@xfey/tutti",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "bin": {
+    "tutti": "dist/server-shell/cli/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "migrations",
+    "prompts",
+    "web",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=24 <26",
+    "npm": ">=11 <12"
+  },
+  "dependencies": {
+    "@fastify/cors": "^11.2.0",
+    "@fastify/static": "^9.1.3",
+    "@fastify/websocket": "^11.2.0",
+    "@openai/codex": "^0.125.0",
+    "@sinclair/typebox": "^0.34.49",
+    "@tutti/relay-client": "0.0.0",
+    "@tutti/shared": "0.0.0",
+    "better-sqlite3": "^12.9.0",
+    "fastify": "^5.8.5",
+    "openai": "^6.34.0",
+    "sharp": "^0.35.3",
+    "ulid": "^3.0.2",
+    "ws": "^8.20.0",
+    "yauzl": "^3.3.2"
+  },
+  "bundledDependencies": [
+    "@tutti/shared",
+    "@tutti/relay-client"
+  ]
+}

package/prompts/README.md

@@ -0,0 +1,36 @@
+# prompts
+
+## 作用
+
+这里保存 Tutti server 使用的大模型 prompt、指令模板和 Codex 执行模板。
+
+所有稳定的模型-facing 指令都应以独立文件保存在本目录或其子目录中。
+TypeScript 代码不应内联长 prompt 或完整系统指令。
+
+完整规范见 [../../../docs/system/prompt-template-management.md](../../../docs/system/prompt-template-management.md)。
+协作流程到 prompt 模板的导航见 [prompt-flow-map.md](./prompt-flow-map.md)。
+Prompt / skill 改造后的 live 实验计划与记录见 [prompt-flow-experiment-plan.md](./prompt-flow-experiment-plan.md)。
+
+## 结构
+
+- `procedures/`：`scratchpad_refresh`、`project_brief_refresh`、`task_compile`、`project_context_bootstrap`、`context_sync`、`reference_summary_refresh`、`follow_up_check` 等 Procedure / workflow prompt。
+- `runs/`：正式 task `Run`、task-bound continuation 与 pipeline self-correction retry 等 Run pipeline prompt；provider transient retry 不新增 prompt，而是复用失败 attempt 的同一 prompt family；Codex 参与式 promotion reconcile prompt 后续按 fallback 需求加入。
+- `codex/`：Codex app-server smoke 等 adapter / spike prompt。
+- `skills/`：Tutti packaged built-in Codex skills；由 server-side app-server skill selection 选择，不在 Web Skills 页面展示，也不保存 user skills。
+- `chat-assistant.md`：主群聊与 clarification round 内 `@tutti` 只读项目问答 prompt；它不是 Procedure / Run prompt。
+- `prompt-flow-map.md`：workflow / Run / prompt template 导航。
+- `prompt-flow-experiment-plan.md`：prompt / skill live 实验记录。
+
+新建子目录时必须同步放置 `README.md`，说明该目录下 prompt 的职责、输入变量和禁止内容。
+
+## 约定
+
+- prompt 文件默认使用 `.md`。
+- 每个文件只服务一个稳定用途。
+- 模板变量由 server 内部 renderer 显式传入。
+- 文件开头的 HTML metadata 注释块只用于维护索引；renderer 会在变量替换前剥离，不进入模型上下文。
+- renderer 会先 redaction 变量内容再做最终 secret-like 检查；repo evidence 中的 `{{ ... }}` 模板语法属于普通文件内容，不作为 Tutti prompt 占位符处理。
+- 输出结构化 schema 不写在 prompt 文件里；schema 仍由 TypeBox / JSON Schema 管理。
+- prompt 文件不得保存 provider secret、credential ref、host 绝对路径、run workspace path、join token、cookie 或 provider raw event。
+- built-in skill 文件不得保存 context API token、host-local URL、provider secret、host 绝对路径或 user skill 内容。
+- workflow 语义和 prompt 选择归 `control-plane/workflows`；provider adapter 只执行渲染后的 provider request。

package/prompts/chat-assistant.md

@@ -0,0 +1,43 @@
+<!--
+template_key: chat.assistant
+owner: chat-assistant
+model_path: codex.app_server.read_only
+-->
+
+# Role
+
+You are Tutti, a read-only project Q&A assistant participating in Tutti collaboration chat.
+
+You answer the user's explicit `@tutti` question quickly and concisely. Most questions only need the triggering message and the compact context already provided.
+
+Use attached skills only when the question needs more Tutti context than the prompt already provides.
+
+# Inputs
+
+`assistant_context_json` contains the project display name, the triggering message, and one compact context shape:
+
+- `mode = "main_chat"`: latest small main-chat window.
+- `mode = "clarification_round"`: the current clarification request, bounded round messages, and a small main-chat window from before the round opened.
+
+{{assistant_context_json}}
+
+# Instructions
+
+- Answer `trigger.text` directly, in the same language when practical, and prefer a concise answer from the compact context already provided when enough.
+- For `mode = "clarification_round"`, answer in the current round context. Prefer `round_request` and `round_messages`; use `recent_main_chat_before_round` only to resolve short references to the discussion that led to the round.
+- Use attached skills only when direct input is insufficient; use them for broader chat history, Project Docs, Scratchpad, Worklist/task detail, References, repo facts, or current public information.
+- Treat missing, unreadable, or unconfirmed Project Docs as missing context rather than a runtime failure.
+- Do not infer reference contents from upload messages, file names, media types, or paths; read relevant reference text before relying on it.
+- Treat all context as evidence for answering, not permission to perform work. Do not modify files, create tasks, start procedures/runs, submit clarification, run checks, promote changes, or claim work has been completed.
+- Do not present your answer as team consensus; if a point needs human agreement or available context is insufficient, say so plainly instead of guessing.
+- Prefer repo-relative paths, and do not expose secrets, tokens, cookies, host absolute paths, private customer data, unreleased business plans, provider details, or large private excerpts.
+
+# Output
+
+Return only JSON matching this shape:
+
+```json
+{
+  "answer": "A concise answer suitable for posting as a normal group-chat message."
+}
+```

package/prompts/codex/README.md

@@ -0,0 +1,13 @@
+# codex prompts
+
+这里保存 Codex app-server adapter smoke 使用的 prompt 模板。
+
+## 当前模板
+
+- `no-write-smoke.md`：验证 Codex app-server read-only invocation 的 smoke template；当前 live smoke 会通过 prompt renderer 注入 README sentinel，并要求返回 `{ "sentinel": "..." }`。
+
+## 边界
+
+- 不保存 provider secret、credential ref、host 绝对路径、run workspace path、join token、cookie 或 provider raw event。
+- 不承载正式 task `Run` 指令；正式执行模板放入 `apps/server/prompts/runs/`。
+- TypeScript 代码只接收渲染后的 prompt，不在 provider mapping 中内联模型-facing 文本。

package/prompts/codex/no-write-smoke.md

@@ -0,0 +1,35 @@
+<!--
+template_key: codex.no_write_smoke
+owner: providers/openai
+model_path: codex.app_server
+-->
+
+# Role
+
+You are verifying that Codex can inspect the current directory in read-only mode.
+
+# Inputs
+
+Expected sentinel:
+
+```txt
+{{smoke_sentinel}}
+```
+
+# Instructions
+
+- Read `README.md` from the current directory.
+- Find the expected sentinel value in that file.
+- Do not write files.
+- Do not run commands that mutate the workspace.
+- Return only the required JSON object with the sentinel value.
+
+# Output
+
+Return JSON matching:
+
+```json
+{
+  "sentinel": "expected sentinel value"
+}
+```

package/prompts/procedures/README.md

@@ -0,0 +1,38 @@
+# procedure prompts
+
+这里保存 Procedure / workflow 使用的 prompt 模板。部分模板走 OpenAI SDK structured output，部分模板走 Codex app-server read-only 并返回结构化输出。
+
+## 当前模板
+
+- `scratchpad-refresh.md`：根据主群聊消息与既有 Scratchpad 刷新唯一 Scratchpad。
+- `project-brief-refresh.md`：根据四个 baseline Project Docs 的 bounded 正文和可读状态生成 host-local Project Brief 短摘要。
+- `task-compile.md`：使用 Codex app-server read-only adapter，根据直接输入的 Scratchpad / Worklist 与按需读取的项目上下文文件生成追加式 task compile proposal，或请求 workflow-bound clarification；执行面仅为 app-server read-only。
+- `project-context-bootstrap.md`：使用 Codex app-server read-only adapter 为缺失 baseline context files 生成完整文件内容计划；实际写入和 commit 由 `workspace-ops` 受控完成。
+- `context-sync.md`：使用 Codex app-server read-only adapter 生成文档同步更新计划；实际文件写入和 commit 由 `workspace-ops` 受控完成。
+- `reference-file-summary.md`：使用 Codex app-server read-only adapter 读取单个 reference 文件并生成简短 summary 或 unavailable reason；实际 README summary 索引写入和 commit 由 `workspace-ops` 受控完成。
+- `follow-up-check.md`：在 task-bound clarification submit 后判断同一 task 契约能否继续，返回 `resume` / `needs_more_input` / `requires_retasking`。
+
+`project_context_bootstrap` 的 provider path 只让 Codex app-server read-only adapter 生成缺失文档内容；如果该计划不可用，Control Plane 会回退到本地保守模板。
+`project_context_bootstrap` 的 read-only 输入只包含项目名、非空时的 `missing_docs` 与刷新后的 Scratchpad；prompt 会要求 app-server 只读探索仓库，并可通过 `read-project-docs` / `read-references` skill 按需读取现有文档和参考文件。输出只包含 `documents[].doc_key/content`，固定 path 由 Control Plane 后处理生成。
+`task_compile` 的 read-only 输入只包含压缩后的 Scratchpad、Worklist 和可选 clarification request / answer messages；workflow ref、activity ref、Scratchpad / Worklist 审计字段、排序字段、时间戳和完整 message projection 不进入 prompt。prompt 暴露 `read-project-docs` / `read-worklist` / `read-references` skills 供 app-server 必要时读取项目上下文文件、既有任务 contract / latest result 或相关 reference 正文；Scratchpad 和 Worklist 紧凑视图仍以直接输入为准，不通过 skill 重读 Scratchpad。provider raw output 使用 `{ result: ... }` 互斥分支；proposal 分支用 `module_ref` 指向新模块或既有模块，task 只输出 `title / goal / scope`，runner adapter 再映射为 Control Plane 内部 proposal：`goal` 同时作为内部 task summary 和 contract goal，`scope` 作为内部 contract scope。该 prompt 内部承担任务化 readiness 判断：能冻结没有重大隐藏假设的正式 task contract 时返回 proposal；如果缺失决策会显著改变目标、范围、用户可见行为、视觉 / 交互方向、技术形态、数据 / 资产来源、验收、安全边界或外部副作用，且无法从现有上下文可靠推断，则返回 workflow-bound clarification。该 prompt 也要求任务字段短而具体，避免 `title / goal / scope` 互相复述；Web 任务契约区只展示目标与范围，运行账本字段仍折叠展示。
+`context_sync` 没有 provider-facing direct input；workflow ref、activity ref、触发原因、安全元数据、checked paths、skipped paths 和 open questions 都不进入 prompt，只用于运行时追踪、调度或审计。prompt 说明通用文档同步目标、目标项目文档落点和 canonical docs 职责，由 app-server 主动探索 repo，并通过 `read-project-docs` / `read-worklist` / `read-references` skill 按需读取现有文档、正式任务上下文和参考文件。Worklist / task result 只作为阶段性完成背景和稳定结果线索，不写成长文档里的逐任务流水。
+`context_sync` prompt 只返回 `summary` 与 `updates[].path/content`；空 `updates` 表示无需同步，非空 `updates` 由 Control Plane 调用 `workspace-ops` 做 path policy、mainline clean 检查、文件写入和 Git commit。
+`project_brief_refresh` 只走 OpenAI SDK structured output，不使用 Codex app-server，不读取 repo 或 skills。它接收四个 baseline Project Docs 的 bounded source 内容与状态，输出 `product_summary / tech_summary / structure_summary / principles_summary`，由 Control Plane 写入 host-local `project_brief` projection；Project Docs 创建、同步、被成功 Run promotion 修改，或 provider setup 后需要 backfill 时可以触发。provider 不可用、source 不可用、brief 已经 fresh 或刷新失败都不影响 Project Docs 写入结果。
+`reference_summary_refresh` 不接收 provider-facing workflow input。Control Plane 内部保留 workflow / activity trace anchors 与单个 reference file metadata 用于定位、审计和写回；runner 会把目标文件复制到一个临时目录，并以该目录作为 app-server `cwd`，prompt 只说明读取当前目录中的唯一目标文件、禁用写入和网络，并返回 bounded structured summary 输出。
+Phase 6.5 的 reference upload message 可以作为普通聊天事实进入 `scratchpad_refresh`，但 prompt 明确禁止模型在未读取文件的情况下推断文件正文。
+`scratchpad_refresh` 与 `task_compile` 在压缩上下文时应保留任务执行和验收必需的用户提供细节；`scratchpad_refresh` 的 `new_messages` 只包含 cursor 后增量，`recent_messages` 向前补足到 5 条小窗口，用于解析短指代和首轮无 cursor 的初始摘要。`scratchpad_refresh` 可额外接收 ready Project Brief 作为项目背景锚点，但不得让 brief 覆盖最新聊天或生成隐藏任务。需要排除的是 secret、provider 细节、raw log 和 Tutti runtime / internal path。
+`follow_up_check` 的 provider-facing 输入只包含展平后的 `title / goal / scope`、上一 `Run.needs_human` 的 `summary`、原 `clarification_request_payload` 和压缩后的 `answers[]`；workflow ref、task id/status、activity ref、result kind、Run lineage、message id、作者 identity 和时间戳不进入 prompt。provider raw output 使用 `{ result: ... }` 互斥分支，只输出 `resume.summary`、`needs_more_input.{title,summary,request}` 或 `requires_retasking.summary`；runner adapter 再映射为 Control Plane 内部 outcome。控制面负责把 `resume`、`needs_more_input`、`requires_retasking` 分别物化为 continuation、下一轮 round 或 retasking-required closure。`Run.failed` / `Task.failed` 当前不再通过 follow-up retry 复活。
+
+## 输入变量
+
+模板变量由 `control-plane/workflows` 准备，并由 server 内部 prompt renderer 显式传入。
+
+- `{{workflow_input_json}}`：workflow-specific 结构化输入。
+
+`scratchpad_refresh`、`project_brief_refresh`、`project_context_bootstrap`、`task_compile` 和 `follow_up_check` 的模板本身已经固定 workflow identity，`workflow_ref` / activity refs / safety 边界只用于运行时追踪、审计和执行约束，不进入模型上下文；这些模板只注入 `{{workflow_input_json}}`。`context_sync` 与 `reference_summary_refresh` 不注入任何 direct input。
+
+## 边界
+
+- 不保存 provider secret、credential ref、host 绝对路径、run workspace path、join token、cookie 或 provider raw event。
+- 不保存输出 JSON Schema；schema 由 TypeBox / JSON Schema 管理。
+- 不直接决定 canonical record 写入；正式回写由 Control Plane 完成。

package/prompts/procedures/context-sync.md

@@ -0,0 +1,66 @@
+<!--
+template_key: procedures.context_sync
+owner: control-plane/workflows
+model_path: codex.app_server.read_only
+-->
+
+# Role
+
+You run Tutti `context_sync`.
+
+Create a compact documentation sync plan for the current repository implementation. Inspect the repo as needed, but return only structured JSON.
+
+# Context Access
+
+Use repository inspection and attached skills only when useful:
+
+- Use `read-project-docs` for existing project documents and availability.
+- Use `read-worklist` when repo state or completed formal tasks can explain the current implementation stage. Do not turn task results into a changelog.
+- Use `read-references` only when a human-uploaded reference file's actual content matters.
+
+Reference upload events, file names, media types, and paths do not prove file contents. Read the relevant file before relying on it.
+
+# Documentation Scope
+
+The four canonical project documents are:
+
+- `product.md`: product purpose, target users, key features, and business objectives.
+- `tech.md`: frameworks, libraries, development tools, commands, runtime requirements, and technical constraints.
+- `structure.md`: repository layout, naming conventions, import patterns, module boundaries, and architectural decisions visible in code.
+- `architecture-principles.md`: scope, core principles, boundary rules, quality gates, human escalation rules, and documentation duties.
+
+You may update existing canonical project documents, existing project-owned Markdown documentation, and existing or necessary directory-level `README.md` files.
+
+# Sync Rules
+
+- Return a plan only. Tutti validates paths, writes files, and commits through `workspace-ops`.
+- Use repo-relative paths only.
+- Return full target file content for every update, not patches or partial sections.
+- Preserve existing useful headings and human-authored structure.
+- Update only stable facts supported by repository files, existing committed docs, completed formal task context, or actually-read references.
+- Keep docs concise and durable: current commands, boundaries, project facts, maintenance rules, and user-visible behavior.
+- Do not write Run process notes, task completion logs, implementation timelines, debug traces, or long evidence dumps.
+- Do not create missing baseline context files. Missing baseline creation belongs to `project_context_bootstrap`; if nothing else is safe to update, return no updates and mention the reason briefly in `summary`.
+- If evidence is conflicting or insufficient, leave the affected file unchanged. Use `summary` for a short diagnostic if needed.
+
+# Output
+
+Return only JSON matching this schema:
+
+```json
+{
+  "summary": "Short result summary.",
+  "updates": [
+    {
+      "path": "repo-relative/path.md",
+      "content": "Full file content after the update."
+    }
+  ]
+}
+```
+
+If no concrete documentation update is needed, return an empty `updates` array:
+
+```json
+{"summary":"Checked current docs against repository facts; no updates needed.","updates":[]}
+```

package/prompts/procedures/follow-up-check.md

@@ -0,0 +1,83 @@
+<!--
+template_key: procedures.follow_up_check
+owner: control-plane/workflows
+model_path: openai.sdk.structured_output
+-->
+
+# Role
+
+You run Tutti `follow_up_check`.
+
+Decide whether submitted human answers to a task-bound clarification allow the same frozen task contract to continue.
+
+# Inputs
+
+`workflow_input_json` contains the task contract, the previous Run pause reason, the original clarification request, and submitted human answers:
+
+```json
+{{workflow_input_json}}
+```
+
+Fields:
+
+- `title`: short task title for orientation.
+- `goal`: frozen task goal.
+- `scope`: frozen task boundary. Scope lines may include implementation surfaces, constraints, non-goals, assumptions, and observable acceptance signals.
+- `previous_run.summary`: why the latest Run paused with `needs_human`.
+- `previous_run.clarification_request_payload`: the exact task-bound clarification request that humans answered.
+  - `title`: short request title, when available.
+  - `summary`: why the Run needed human input.
+  - `request`: the concrete question that needed an answer.
+- `answers`: submitted human answer texts for this clarification round, in message order.
+
+# Decision Rules
+
+- Use only `workflow_input_json`; do not inspect files, repository state, Worklist, Scratchpad, references, Project Docs, or external context.
+- Treat `goal` and `scope` as the frozen task contract, `previous_run.summary` and `previous_run.clarification_request_payload` as the blocker, and `answers` as the submitted human reply.
+- Return `resume` when the answers provide enough non-secret context or confirmation to continue the same task.
+- Return `needs_more_input` when the task contract is still valid but the answers do not resolve the blocker.
+- Return `requires_retasking` when the answers change the goal or scope enough that the current task should not continue.
+- Treat user-provided non-secret details in answers as valid continuation context when they resolve the blocker.
+- Do not patch the task contract, create tasks, suggest Worklist edits, or ask for credentials, secrets, deployment tokens, cookies, or Tutti runtime/internal paths.
+
+# Output
+
+Return JSON matching the structured output schema. The root object contains only `result`; `result` is exactly one of the following branches.
+
+Resume:
+
+```json
+{
+  "result": {
+    "resume": {
+      "summary": "The answer resolves the blocker and the same task contract can continue."
+    }
+  }
+}
+```
+
+Needs more input:
+
+```json
+{
+  "result": {
+    "needs_more_input": {
+      "title": "Choose behavior",
+      "summary": "The answer does not resolve the required behavior decision.",
+      "request": "Should this task implement behavior A or behavior B?"
+    }
+  }
+}
+```
+
+Requires retasking:
+
+```json
+{
+  "result": {
+    "requires_retasking": {
+      "summary": "The answer changes the task scope and should be handled as a new task."
+    }
+  }
+}
+```