cclaw-cli 6.14.1 → 6.14.3

package/dist/flow-state.d.ts

@@ -136,6 +136,29 @@ export interface FlowState {
      * sync hasn't visited yet.
      */
     tddCutoverSliceId?: string;
+    /**
+     * v6.14.2 — boundary slice id at which worktree-first protocol began
+     * applying. `cclaw-cli sync` auto-stamps this when
+     * `legacyContinuation: true` AND `worktreeExecutionMode: "worktree-first"`
+     * AND the value is not already set.
+     *
+     * Detection rule (v6.14.2): the highest `S-N` among slices with at
+     * least one completed `slice-implementer` row in the active run that
+     * carries NONE of the worktree-first metadata fields (`claimToken`,
+     * `ownerLaneId`, `leasedUntil`). When no such slice exists, sync
+     * falls back to `tddCutoverSliceId` so legacy v6.12 cutover marks
+     * still confer the exemption.
+     *
+     * Effect: closed slices whose numeric id is `<= tddWorktreeCutoverSliceId`
+     * AND whose `slice-implementer` rows in the active run lack ALL
+     * three worktree fields are exempt from `tdd_slice_lane_metadata_missing`,
+     * `tdd_slice_claim_token_missing`, and `tdd_lease_expired_unreclaimed`.
+     *
+     * One-shot: subsequent sync runs leave the value untouched. Operators
+     * may pin it earlier/later by direct edit + `cclaw-cli internal
+     * flow-state-repair --reason=<slug>`.
+     */
+    tddWorktreeCutoverSliceId?: string;
     /**
      * v6.13.0 — when `worktree-first` (default for newly initialized runs),
      * slice-implementer work happens in isolated git worktrees with explicit
@@ -185,6 +208,20 @@ export interface FlowState {
      * Omitted on legacy state files (treated as `"always"`).
      */
     integrationOverseerMode?: "conditional" | "always";
+    /**
+     * v6.14.2 — minimum elapsed milliseconds between `acknowledged` and
+     * `completed` for a `slice-implementer --phase green` row. The hook
+     * helper rejects fast-greens (`completedTs - ackTs < this`) with
+     * `green_evidence_too_fresh` unless the dispatch carries
+     * `--allow-fast-green --green-mode=observational`.
+     *
+     * Default 4000ms when omitted (see `effectiveTddGreenMinElapsedMs`).
+     * Operators tuning the floor for very fast suites may set it lower
+     * (e.g. `1500`) or set it to `0` to disable the check entirely while
+     * keeping the other Fix 4 contracts (RED test name match, passing
+     * assertion line) active.
+     */
+    tddGreenMinElapsedMs?: number;
 }
 /**
  * Effective worktree mode: legacy state files without the field keep
@@ -202,6 +239,15 @@ export declare function effectiveTddCheckpointMode(state: FlowState): "per-slice
  * the field default to `always` (matches v6.13 behavior).
  */
 export declare function effectiveIntegrationOverseerMode(state: FlowState): "conditional" | "always";
+export declare const DEFAULT_TDD_GREEN_MIN_ELAPSED_MS = 4000;
+/**
+ * v6.14.2 — effective minimum GREEN elapsed window in milliseconds.
+ * Returns the per-project override when present and finite; otherwise
+ * the documented 4000ms default. Negative values or NaN fall through
+ * to the default so a hand-edited `flow-state.json` cannot accidentally
+ * disable the check via `-1` or `"oops"`.
+ */
+export declare function effectiveTddGreenMinElapsedMs(state: FlowState): number;
 export interface StageInteractionHint {
     skipQuestions?: boolean;
     sourceStage?: FlowStage;

package/dist/flow-state.js

@@ -69,6 +69,24 @@ export function effectiveTddCheckpointMode(state) {
 export function effectiveIntegrationOverseerMode(state) {
     return state.integrationOverseerMode === "conditional" ? "conditional" : "always";
 }
+export const DEFAULT_TDD_GREEN_MIN_ELAPSED_MS = 4000;
+/**
+ * v6.14.2 — effective minimum GREEN elapsed window in milliseconds.
+ * Returns the per-project override when present and finite; otherwise
+ * the documented 4000ms default. Negative values or NaN fall through
+ * to the default so a hand-edited `flow-state.json` cannot accidentally
+ * disable the check via `-1` or `"oops"`.
+ */
+export function effectiveTddGreenMinElapsedMs(state) {
+    const raw = state.tddGreenMinElapsedMs;
+    if (typeof raw !== "number")
+        return DEFAULT_TDD_GREEN_MIN_ELAPSED_MS;
+    if (!Number.isFinite(raw))
+        return DEFAULT_TDD_GREEN_MIN_ELAPSED_MS;
+    if (raw < 0)
+        return DEFAULT_TDD_GREEN_MIN_ELAPSED_MS;
+    return Math.floor(raw);
+}
 export function isFlowTrack(value) {
     return typeof value === "string" && FLOW_TRACKS.includes(value);
 }

package/dist/install.js

@@ -939,8 +939,20 @@ async function applyTddCutoverIfNeeded(projectRoot) {
     if (typeof obj.tddCutoverSliceId === "string" && obj.tddCutoverSliceId.length > 0) {
         return;
     }
-    obj.tddCutoverSliceId = cutoverSliceId;
-    await writeFileSafe(flowStatePath, `${JSON.stringify(obj, null, 2)}\n`, { mode: 0o600 });
+    // v6.14.3 — refresh the SHA256 sidecar by writing through
+    // `writeFlowState`. The previous direct `writeFileSafe` invocation
+    // left the sidecar stale, so the very next guarded hook on a synced
+    // legacy project rejected its own `tddCutoverSliceId` stamp.
+    try {
+        const state = await readFlowState(projectRoot);
+        await writeFlowState(projectRoot, { ...state, tddCutoverSliceId: cutoverSliceId }, {
+            allowReset: true,
+            writerSubsystem: "sync-v6.12-tdd-cutover-stamp"
+        });
+    }
+    catch {
+        // Best-effort: corrupt/missing state is handled elsewhere on sync.
+    }
 }
 const V613_LEGACY_PLAN_BANNER = "<!-- legacy-continuation: predates v6.13 parallel metadata. New units MAY add dependsOn/claimedPaths/parallelizable; existing units treated as best-effort serial. -->";
 /**
@@ -1005,12 +1017,25 @@ async function applyPlanLegacyContinuationIfNeeded(projectRoot) {
 }
 /**
  * v6.14.0 — set stream-style defaults on `cclaw-cli sync` and print a
- * one-line hint when defaults change. Strategy:
+ * one-line hint when defaults change.
+ *
+ * v6.14.2 update — flip the legacyContinuation defaults from
+ * `global-red`/`always` to `per-slice`/`conditional`. Rationale: hox-shape
+ * projects ran into S-17 misroutes precisely because the default
+ * preserved the v6.12 wave barrier even after the project itself had
+ * moved to stream-mode. Existing flow-state values are NEVER overwritten
+ * — operators who want to pin `global-red`/`always` may set them
+ * explicitly via `cclaw-cli internal set-checkpoint-mode global-red` and
+ * `set-integration-overseer-mode always`.
+ *
+ * Strategy:
  *
- * - When `legacyContinuation: true` and `tddCheckpointMode` is unset, force
- *   `tddCheckpointMode: "global-red"` (preserves hox wave protocol).
- * - When `legacyContinuation: true` and `integrationOverseerMode` is unset,
- *   force `integrationOverseerMode: "always"` (preserves v6.13 behavior).
+ * - When `legacyContinuation: true` and `tddCheckpointMode` is unset,
+ *   default to `tddCheckpointMode: "per-slice"` (v6.14.2 — was
+ *   `global-red` in v6.14.0/v6.14.1).
+ * - When `legacyContinuation: true` and `integrationOverseerMode` is
+ *   unset, default to `integrationOverseerMode: "conditional"` (v6.14.2
+ *   — was `always` in v6.14.0/v6.14.1).
  * - When `legacyContinuation` is NOT true (new / standard projects) and
  *   neither field is set, default to `tddCheckpointMode: "per-slice"`,
  *   `integrationOverseerMode: "conditional"`. Also default
@@ -1053,12 +1078,12 @@ async function applyV614DefaultsIfNeeded(projectRoot) {
     const legacyContinuation = obj.legacyContinuation === true;
     if (legacyContinuation) {
         if (!tddCheckpointModeSet) {
-            updates.tddCheckpointMode = "global-red";
-            summary.push("tddCheckpointMode=global-red (legacyContinuation)");
+            updates.tddCheckpointMode = "per-slice";
+            summary.push("tddCheckpointMode=per-slice (legacyContinuation, v6.14.2 default flip)");
         }
         if (!integrationOverseerModeSet) {
-            updates.integrationOverseerMode = "always";
-            summary.push("integrationOverseerMode=always (legacyContinuation)");
+            updates.integrationOverseerMode = "conditional";
+            summary.push("integrationOverseerMode=conditional (legacyContinuation, v6.14.2 default flip)");
         }
     }
     else {
@@ -1078,14 +1103,146 @@ async function applyV614DefaultsIfNeeded(projectRoot) {
     if (summary.length === 0) {
         return null;
     }
-    const merged = { ...obj, ...updates };
+    // v6.14.3 — refresh the SHA256 sidecar in lockstep so guarded reads
+    // (verify-current-state, advance-stage, etc.) don't trip a guard
+    // mismatch immediately after `cclaw-cli sync`/`upgrade` writes the
+    // v6.14.2 stream-style defaults.
+    try {
+        const state = await readFlowState(projectRoot);
+        await writeFlowState(projectRoot, { ...state, ...updates }, {
+            allowReset: true,
+            writerSubsystem: "sync-v6.14.2-stream-defaults"
+        });
+    }
+    catch {
+        return null;
+    }
+    return `v6.14.2 stream-style defaults applied: ${summary.join(", ")}. To opt out, run cclaw-cli internal set-checkpoint-mode global-red --reason="..." and/or cclaw-cli internal set-integration-overseer-mode always --reason="...".`;
+}
+/**
+ * v6.14.2 — auto-stamp `tddWorktreeCutoverSliceId` for legacyContinuation
+ * projects in worktree-first mode that haven't yet recorded a boundary.
+ *
+ * Detection ("any-metadata" rule): scan the active run's
+ * `slice-implementer` rows. The boundary is the highest `S-N` whose
+ * rows for the active run lack ALL of `claimToken`, `ownerLaneId`, and
+ * `leasedUntil`. When no such slice exists (every slice carries at
+ * least one worktree field), fall back to `tddCutoverSliceId` so the
+ * v6.12 cutover marker still confers exemption.
+ *
+ * Idempotent: when the field is already set, returns null without
+ * writing. Best-effort: read failures, missing ledger, or unparseable
+ * rows all short-circuit silently — the existing flow-state.json is
+ * never corrupted.
+ *
+ * Returns a one-line hint string (or `null` if nothing changed).
+ */
+async function applyV6142WorktreeCutoverIfNeeded(projectRoot) {
+    const flowStatePath = runtimePath(projectRoot, "state", "flow-state.json");
+    let flowStateRaw;
+    try {
+        flowStateRaw = await fs.readFile(flowStatePath, "utf8");
+    }
+    catch {
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(flowStateRaw);
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return null;
+    }
+    const obj = parsed;
+    if (obj.legacyContinuation !== true)
+        return null;
+    if (obj.worktreeExecutionMode !== "worktree-first")
+        return null;
+    if (typeof obj.tddWorktreeCutoverSliceId === "string" &&
+        obj.tddWorktreeCutoverSliceId.trim().length > 0) {
+        return null;
+    }
+    const ledgerPath = runtimePath(projectRoot, "state", "delegation-log.json");
+    const activeRunId = typeof obj.activeRunId === "string" ? obj.activeRunId : "";
+    let ledgerRaw;
     try {
-        await writeFileSafe(flowStatePath, `${JSON.stringify(merged, null, 2)}\n`, { mode: 0o600 });
+        ledgerRaw = await fs.readFile(ledgerPath, "utf8");
     }
     catch {
+        ledgerRaw = "";
+    }
+    let ledgerParsed = null;
+    if (ledgerRaw.length > 0) {
+        try {
+            ledgerParsed = JSON.parse(ledgerRaw);
+        }
+        catch {
+            ledgerParsed = null;
+        }
+    }
+    const entries = ledgerParsed &&
+        typeof ledgerParsed === "object" &&
+        !Array.isArray(ledgerParsed) &&
+        Array.isArray(ledgerParsed.entries)
+        ? ledgerParsed.entries
+        : [];
+    let boundary = -1;
+    for (const entry of entries) {
+        if (entry.agent !== "slice-implementer")
+            continue;
+        if (entry.status !== "completed")
+            continue;
+        if (typeof entry.sliceId !== "string")
+            continue;
+        if (activeRunId && entry.runId && entry.runId !== activeRunId)
+            continue;
+        const tok = typeof entry.claimToken === "string" ? entry.claimToken.trim() : "";
+        const lane = typeof entry.ownerLaneId === "string" ? entry.ownerLaneId.trim() : "";
+        const lease = typeof entry.leasedUntil === "string" ? entry.leasedUntil.trim() : "";
+        if (tok.length > 0 || lane.length > 0 || lease.length > 0)
+            continue;
+        const m = /^S-(\d+)$/u.exec(entry.sliceId);
+        if (!m)
+            continue;
+        const n = Number.parseInt(m[1], 10);
+        if (!Number.isFinite(n))
+            continue;
+        if (n > boundary)
+            boundary = n;
+    }
+    let stamped = null;
+    if (boundary >= 0) {
+        stamped = `S-${boundary}`;
+    }
+    else if (typeof obj.tddCutoverSliceId === "string" &&
+        /^S-\d+$/u.test(obj.tddCutoverSliceId)) {
+        stamped = obj.tddCutoverSliceId;
+    }
+    if (!stamped)
         return null;
+    // v6.14.3 — go through `writeFlowState` so the SHA256 sidecar
+    // (`.cclaw/.flow-state.guard.json`) is refreshed in lockstep with
+    // the on-disk flow-state.json. The previous v6.14.2 implementation
+    // wrote the field via `writeFileSafe` directly, which left the
+    // sidecar pointing at the pre-stamp digest; the next guarded hook
+    // (e.g. `cclaw internal verify-current-state`) then failed with
+    // `flow-state guard mismatch` and demanded a manual repair.
+    try {
+        const state = await readFlowState(projectRoot);
+        await writeFlowState(projectRoot, { ...state, tddWorktreeCutoverSliceId: stamped }, {
+            allowReset: true,
+            writerSubsystem: "sync-v6.14.2-worktree-cutover-stamp"
+        });
     }
-    return `v6.14.0 stream-style defaults applied: ${summary.join(", ")}. To opt out, edit .cclaw/state/flow-state.json directly or pin the legacy mode (tddCheckpointMode="global-red", integrationOverseerMode="always").`;
+    catch {
+        return null;
+    }
+    return (`v6.14.2 stamped tddWorktreeCutoverSliceId=${stamped}; closed slices ≤ ${stamped} ` +
+        "are exempt from worktree-first findings under legacyContinuation. " +
+        "Edit .cclaw/state/flow-state.json to override (advisory).");
 }
 async function cleanLegacyArtifacts(projectRoot) {
     for (const legacyFolder of DEPRECATED_UTILITY_SKILL_FOLDERS) {
@@ -1266,6 +1423,10 @@ async function materializeRuntime(projectRoot, config, forceStateReset, operatio
             if (v614Hint) {
                 process.stdout.write(`cclaw: ${v614Hint}\n`);
             }
+            const v6142Hint = await applyV6142WorktreeCutoverIfNeeded(projectRoot);
+            if (v6142Hint) {
+                process.stdout.write(`cclaw: ${v6142Hint}\n`);
+            }
         }
         try {
             await ensureRunSystem(projectRoot, { createIfMissing: false });

package/dist/internal/advance-stage.js

@@ -17,6 +17,10 @@ import { FlowStateGuardMismatchError, verifyFlowStateGuard } from "../run-persis
 import { DelegationTimestampError, DispatchCapError, DispatchClaimInvalidError, DispatchDuplicateError, DispatchOverlapError } from "../delegation.js";
 import { parsePlanSplitWavesArgs, runPlanSplitWaves } from "./plan-split-waves.js";
 import { runSetWorktreeMode } from "./set-worktree-mode.js";
+import { runSetCheckpointMode } from "./set-checkpoint-mode.js";
+import { runSetIntegrationOverseerMode } from "./set-integration-overseer-mode.js";
+import { runWaveStatusCommand } from "./wave-status.js";
+import { runCohesionContractCommand } from "./cohesion-contract-stub.js";
 /**
  * Subcommands that mutate or consult flow-state.json via the CLI runtime.
  * They all require the sha256 sidecar to match before continuing so a
@@ -30,12 +34,14 @@ const GUARD_ENFORCED_SUBCOMMANDS = new Set([
     "rewind",
     "verify-flow-state-diff",
     "verify-current-state",
-    "set-worktree-mode"
+    "set-worktree-mode",
+    "set-checkpoint-mode",
+    "set-integration-overseer-mode"
 ]);
 export async function runInternalCommand(projectRoot, argv, io) {
     const [subcommand, ...tokens] = argv;
     if (!subcommand) {
-        io.stderr.write("cclaw internal requires a subcommand: advance-stage | start-flow | cancel-run | rewind | verify-flow-state-diff | verify-current-state | envelope-validate | tdd-red-evidence | tdd-loop-status | early-loop-status | compound-readiness | runtime-integrity | hook | flow-state-repair | waiver-grant | plan-split-waves | set-worktree-mode\n");
+        io.stderr.write("cclaw internal requires a subcommand: advance-stage | start-flow | cancel-run | rewind | verify-flow-state-diff | verify-current-state | envelope-validate | tdd-red-evidence | tdd-loop-status | early-loop-status | compound-readiness | runtime-integrity | hook | flow-state-repair | waiver-grant | plan-split-waves | set-worktree-mode | set-checkpoint-mode | set-integration-overseer-mode | wave-status | cohesion-contract\n");
         return 1;
     }
     try {
@@ -93,7 +99,19 @@ export async function runInternalCommand(projectRoot, argv, io) {
         if (subcommand === "set-worktree-mode") {
             return await runSetWorktreeMode(projectRoot, tokens, io);
         }
-        io.stderr.write(`Unknown internal subcommand: ${subcommand}. Expected advance-stage | start-flow | cancel-run | rewind | verify-flow-state-diff | verify-current-state | envelope-validate | tdd-red-evidence | tdd-loop-status | early-loop-status | compound-readiness | runtime-integrity | hook | flow-state-repair | waiver-grant | plan-split-waves | set-worktree-mode\n`);
+        if (subcommand === "set-checkpoint-mode") {
+            return await runSetCheckpointMode(projectRoot, tokens, io);
+        }
+        if (subcommand === "set-integration-overseer-mode") {
+            return await runSetIntegrationOverseerMode(projectRoot, tokens, io);
+        }
+        if (subcommand === "wave-status") {
+            return await runWaveStatusCommand(projectRoot, tokens, io);
+        }
+        if (subcommand === "cohesion-contract") {
+            return await runCohesionContractCommand(projectRoot, tokens, io);
+        }
+        io.stderr.write(`Unknown internal subcommand: ${subcommand}. Expected advance-stage | start-flow | cancel-run | rewind | verify-flow-state-diff | verify-current-state | envelope-validate | tdd-red-evidence | tdd-loop-status | early-loop-status | compound-readiness | runtime-integrity | hook | flow-state-repair | waiver-grant | plan-split-waves | set-worktree-mode | set-checkpoint-mode | set-integration-overseer-mode | wave-status | cohesion-contract\n`);
         return 1;
     }
     catch (err) {

package/dist/internal/cohesion-contract-stub.d.ts

@@ -0,0 +1,29 @@
+import type { Writable } from "node:stream";
+interface InternalIo {
+    stdout: Writable;
+    stderr: Writable;
+}
+export interface CohesionContractArgs {
+    stub: boolean;
+    force: boolean;
+    reason: string | null;
+}
+export declare function parseCohesionContractArgs(tokens: string[]): CohesionContractArgs | null;
+/**
+ * v6.14.2 — emit a minimal advisory cohesion contract that satisfies
+ * the linter shape check (`cohesion-contract.{md,json}`) so projects
+ * with `legacyContinuation: true` and ≥ 2 completed slice-implementer
+ * rows can clear the soft `tdd.cohesion_contract_missing` finding
+ * without hand-authoring the document.
+ *
+ * The stub is intentionally bare — `sharedTypes`, `touchpoints`, and
+ * `slices` are populated from the active run delegation ledger so
+ * downstream tooling can see which slices the contract acknowledges,
+ * but the contract carries `status.verdict: "advisory_legacy"` so
+ * reviewers know not to treat it as authoritative.
+ *
+ * Refuses to overwrite an existing contract unless `--force` is
+ * passed; the existing file is treated as authored work.
+ */
+export declare function runCohesionContractCommand(projectRoot: string, tokens: string[], io: InternalIo): Promise<number>;
+export {};

package/dist/internal/cohesion-contract-stub.js

@@ -0,0 +1,166 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import { RUNTIME_ROOT } from "../constants.js";
+import { writeFileSafe } from "../fs-utils.js";
+import { readDelegationLedger } from "../delegation.js";
+export function parseCohesionContractArgs(tokens) {
+    const args = { stub: false, force: false, reason: null };
+    for (const token of tokens) {
+        if (token === "--stub") {
+            args.stub = true;
+            continue;
+        }
+        if (token === "--force") {
+            args.force = true;
+            continue;
+        }
+        if (token.startsWith("--reason=")) {
+            const raw = token.slice("--reason=".length).trim();
+            if (raw.length > 0)
+                args.reason = raw;
+            continue;
+        }
+        return null;
+    }
+    if (!args.stub)
+        return null;
+    return args;
+}
+/**
+ * v6.14.2 — emit a minimal advisory cohesion contract that satisfies
+ * the linter shape check (`cohesion-contract.{md,json}`) so projects
+ * with `legacyContinuation: true` and ≥ 2 completed slice-implementer
+ * rows can clear the soft `tdd.cohesion_contract_missing` finding
+ * without hand-authoring the document.
+ *
+ * The stub is intentionally bare — `sharedTypes`, `touchpoints`, and
+ * `slices` are populated from the active run delegation ledger so
+ * downstream tooling can see which slices the contract acknowledges,
+ * but the contract carries `status.verdict: "advisory_legacy"` so
+ * reviewers know not to treat it as authoritative.
+ *
+ * Refuses to overwrite an existing contract unless `--force` is
+ * passed; the existing file is treated as authored work.
+ */
+export async function runCohesionContractCommand(projectRoot, tokens, io) {
+    const parsed = parseCohesionContractArgs(tokens);
+    if (!parsed) {
+        io.stderr.write("cclaw internal cohesion-contract: usage: --stub [--force] [--reason=\"<short>\"]\n");
+        return 1;
+    }
+    const artifactsDir = path.join(projectRoot, RUNTIME_ROOT, "artifacts");
+    const mdPath = path.join(artifactsDir, "cohesion-contract.md");
+    const jsonPath = path.join(artifactsDir, "cohesion-contract.json");
+    if (!parsed.force) {
+        const mdExists = await fileExists(mdPath);
+        const jsonExists = await fileExists(jsonPath);
+        if (mdExists || jsonExists) {
+            io.stderr.write("cclaw internal cohesion-contract: existing cohesion-contract.{md,json} present; pass --force to overwrite.\n");
+            return 1;
+        }
+    }
+    const ledger = await readDelegationLedger(projectRoot).catch(() => null);
+    const sliceIds = collectSliceIds(ledger?.entries ?? []);
+    const reasonNote = parsed.reason
+        ? `Reason: ${parsed.reason}`
+        : "Reason: legacyContinuation auto-stub.";
+    const md = [
+        "# Cohesion Contract",
+        "",
+        "_Advisory stub generated by `cclaw-cli internal cohesion-contract --stub`._",
+        "_Status: `advisory_legacy` — populated for legacyContinuation projects so the_",
+        "_TDD linter does not block stage-complete on `tdd.cohesion_contract_missing`._",
+        "",
+        `${reasonNote}`,
+        "",
+        "## Shared Types & Interfaces",
+        "| Symbol | Path | Signature | Owner slice |",
+        "|---|---|---|---|",
+        "| (none recorded) | (none) | (none) | (n/a) |",
+        "",
+        "## Naming Conventions",
+        "- Stub: per-slice modules continue to follow the existing repo conventions.",
+        "",
+        "## Invariants",
+        "- Stub: no cross-slice invariants asserted; treat each slice as independent until upgraded.",
+        "",
+        "## Integration Touchpoints",
+        "| From slice | To slice | Surface | Integration test name |",
+        "|---|---|---|---|",
+        "| (none recorded) | (n/a) | (n/a) | (n/a) |",
+        "",
+        "## Behavior Specifications per Slice",
+        sliceIds.length === 0
+            ? "- (none recorded)"
+            : sliceIds
+                .map((sid) => `### Slice ${sid}\n- Behavior: see \`tdd-slices/${sid}.md\` (if present).`)
+                .join("\n\n"),
+        "",
+        "## Status",
+        "| Slice | Implemented | Tests pass | Cohesion verified |",
+        "|---|---|---|---|",
+        sliceIds.length === 0
+            ? "| (none) | n/a | n/a | n/a |"
+            : sliceIds.map((sid) => `| ${sid} | yes | yes | advisory |`).join("\n"),
+        ""
+    ].join("\n");
+    const jsonStub = {
+        version: 1,
+        sharedTypes: [],
+        touchpoints: [],
+        slices: sliceIds.map((sid) => ({
+            sliceId: sid,
+            description: `Stub entry for ${sid}; advisory under legacyContinuation.`,
+            implemented: true,
+            testsPass: true,
+            cohesionVerified: false
+        })),
+        status: {
+            verdict: "advisory_legacy",
+            generatedBy: "cclaw-cli internal cohesion-contract --stub",
+            reason: parsed.reason ?? "legacyContinuation auto-stub"
+        }
+    };
+    await writeFileSafe(mdPath, md);
+    await writeFileSafe(jsonPath, `${JSON.stringify(jsonStub, null, 2)}\n`);
+    io.stdout.write(`cclaw: cohesion-contract stub written (${sliceIds.length} slice(s) referenced). ` +
+        "Status: advisory_legacy — review and replace once cross-slice cohesion data is real.\n");
+    return 0;
+}
+async function fileExists(filePath) {
+    try {
+        await fs.access(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function collectSliceIds(entries) {
+    const set = new Set();
+    for (const entry of entries) {
+        if (entry.agent !== "slice-implementer")
+            continue;
+        if (entry.status !== "completed")
+            continue;
+        if (typeof entry.sliceId !== "string")
+            continue;
+        if (entry.sliceId.length === 0)
+            continue;
+        set.add(entry.sliceId);
+    }
+    return [...set].sort((a, b) => {
+        const an = parseSliceNum(a);
+        const bn = parseSliceNum(b);
+        if (an !== null && bn !== null)
+            return an - bn;
+        return a.localeCompare(b);
+    });
+}
+function parseSliceNum(sliceId) {
+    const m = /^S-(\d+)$/u.exec(sliceId);
+    if (!m)
+        return null;
+    const n = Number.parseInt(m[1], 10);
+    return Number.isFinite(n) ? n : null;
+}

package/dist/internal/set-checkpoint-mode.d.ts

@@ -0,0 +1,16 @@
+import type { Writable } from "node:stream";
+export interface SetCheckpointModeArgs {
+    mode: "per-slice" | "global-red";
+    reason: string | null;
+}
+export declare function parseSetCheckpointModeArgs(tokens: string[]): SetCheckpointModeArgs | null;
+/**
+ * v6.14.2 — set `flow-state.json::tddCheckpointMode` without advancing
+ * the stage DAG. Mirrors `set-worktree-mode`. The `--reason` flag is
+ * optional but recommended for the audit trail; it is currently passed
+ * through to the writer subsystem string so operators can grep the
+ * `.flow-state.guard.json` sidecar.
+ */
+export declare function runSetCheckpointMode(projectRoot: string, tokens: string[], io: {
+    stderr: Writable;
+}): Promise<number>;

package/dist/internal/set-checkpoint-mode.js

@@ -0,0 +1,72 @@
+import { readFlowState, writeFlowState } from "../runs.js";
+export function parseSetCheckpointModeArgs(tokens) {
+    let mode = null;
+    let reason = null;
+    let positional = null;
+    for (const token of tokens) {
+        if (token.startsWith("--mode=")) {
+            const raw = token.slice("--mode=".length).trim();
+            if (raw === "per-slice" || raw === "global-red") {
+                mode = raw;
+            }
+            else {
+                return null;
+            }
+            continue;
+        }
+        if (token.startsWith("--reason=")) {
+            const raw = token.slice("--reason=".length).trim();
+            if (raw.length > 0)
+                reason = raw;
+            continue;
+        }
+        if (token.startsWith("--")) {
+            // unknown flag — let the caller surface usage.
+            return null;
+        }
+        if (positional === null) {
+            positional = token.trim();
+            continue;
+        }
+        return null;
+    }
+    if (mode === null && positional !== null) {
+        if (positional === "per-slice" || positional === "global-red") {
+            mode = positional;
+        }
+        else {
+            return null;
+        }
+    }
+    if (mode === null)
+        return null;
+    return { mode, reason };
+}
+/**
+ * v6.14.2 — set `flow-state.json::tddCheckpointMode` without advancing
+ * the stage DAG. Mirrors `set-worktree-mode`. The `--reason` flag is
+ * optional but recommended for the audit trail; it is currently passed
+ * through to the writer subsystem string so operators can grep the
+ * `.flow-state.guard.json` sidecar.
+ */
+export async function runSetCheckpointMode(projectRoot, tokens, io) {
+    const parsed = parseSetCheckpointModeArgs(tokens);
+    if (!parsed) {
+        io.stderr.write("cclaw internal set-checkpoint-mode: usage: <per-slice|global-red> [--reason=\"<short>\"] " +
+            "(or --mode=<per-slice|global-red>)\n");
+        return 1;
+    }
+    const state = await readFlowState(projectRoot);
+    const writerSubsystem = parsed.reason
+        ? `set-checkpoint-mode:${slugifyReason(parsed.reason)}`
+        : "set-checkpoint-mode";
+    await writeFlowState(projectRoot, { ...state, tddCheckpointMode: parsed.mode }, { writerSubsystem });
+    return 0;
+}
+function slugifyReason(reason) {
+    return (reason
+        .toLowerCase()
+        .replace(/[^a-z0-9_-]+/gu, "-")
+        .replace(/^-+|-+$/gu, "")
+        .slice(0, 60) || "unspecified");
+}

package/dist/internal/set-integration-overseer-mode.d.ts

@@ -0,0 +1,14 @@
+import type { Writable } from "node:stream";
+export interface SetIntegrationOverseerModeArgs {
+    mode: "conditional" | "always";
+    reason: string | null;
+}
+export declare function parseSetIntegrationOverseerModeArgs(tokens: string[]): SetIntegrationOverseerModeArgs | null;
+/**
+ * v6.14.2 — set `flow-state.json::integrationOverseerMode` without
+ * advancing the stage DAG. Mirrors `set-worktree-mode` and
+ * `set-checkpoint-mode`.
+ */
+export declare function runSetIntegrationOverseerMode(projectRoot: string, tokens: string[], io: {
+    stderr: Writable;
+}): Promise<number>;