chati-dev 4.5.5 → 4.5.6

package/node_modules/@chati/tracking-clickup/src/index.js

@@ -200,6 +200,28 @@ export class TrackingClickUp {
     return Object.freeze(canonicalize(projection));
   }
 
+  /** Records a receipt produced by an independently authorized MCP boundary. */
+  confirmExternalDelivery({ projection_id, receipt_ref } = {}) {
+    const projection = this.#find(projection_id);
+    string(receipt_ref, 'INVALID_TRANSPORT_RECEIPT', 'receipt_ref');
+    if (this.#verifyReference(receipt_ref, 'receipt') !== true) {
+      fail('UNVERIFIED_RECEIPT', 'external delivery receipt must be an immutable verified reference');
+    }
+    if (projection.delivery_state === 'permanent_failure') fail('PERMANENT_FAILURE', 'permanently failed projection cannot be confirmed');
+    if (projection.delivery_state === 'confirmed') {
+      if (projection.receipt_ref !== receipt_ref) fail('RECEIPT_CONFLICT', 'projection is already confirmed by a different receipt');
+      return Object.freeze(canonicalize(projection));
+    }
+    projection.delivery_state = 'confirmed';
+    projection.receipt_ref = receipt_ref;
+    projection.reconciliation_state = 'pending';
+    projection.last_attempt_at = timestamp(this.#clock);
+    projection.attempts += 1;
+    this.#setEvolution(projection);
+    this.#persist();
+    return Object.freeze(canonicalize(projection));
+  }
+
   reconcile({ projection_id } = {}) {
     const projection = this.#find(projection_id);
     if (!this.#transport || typeof this.#transport.reconcile !== 'function') fail('RECONCILIATION_NOT_CONFIGURED', 'no authorized reconciliation transport is configured');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chati-dev",
-  "version": "4.5.5",
+  "version": "4.5.6",
   "description": "AI-Powered Multi-Agent Orchestration System - Structured vibe coding for Full Stack Development",
   "type": "module",
   "bin": {

package/src/config/gemini-hooks-generator.js

@@ -9,7 +9,7 @@
  * Constitution Article XIX — hooks are generated at install time, zero runtime overhead.
  *
  * Gemini CLI Hook Events (used by chati.dev):
- * - BeforeModel: runs before model inference (PRISM injection, model advisory)
+ * - BeforeModel: runs before model inference (PRISM injection, legacy model advisory)
  * - BeforeTool: runs before tool execution (mode governance, constitution guard, read protection)
  * - PreCompress: runs before context compression (session digest)
  */
@@ -27,7 +27,7 @@ export const HOOK_MAP = {
   // indefinitely from a long-running session.
   'license-guard': { event: 'BeforeModel', description: 'Validate license on every turn (chati.dev governance)' },
   'prism-engine': { event: 'BeforeModel', description: 'Inject PRISM context into model prompt' },
-  'model-governance': { event: 'BeforeModel', description: 'Advisory: recommended model per agent' },
+  'model-governance': { event: 'BeforeModel', description: 'Legacy advisory for pre-v2 installations' },
   'mode-governance': { event: 'BeforeTool', description: 'Block writes outside current mode scope' },
   'constitution-guard': { event: 'BeforeTool', description: 'Block destructive commands and secret writes' },
   'read-protection': { event: 'BeforeTool', description: 'Block reads of sensitive files' },
@@ -121,13 +121,14 @@ main();
 
 /**
  * Generate the model governance hook for Gemini CLI.
- * BeforeModel event — advisory about recommended model per agent.
+ * BeforeModel event — legacy advisory for pre-v2 installations.
  */
 function generateModelGovernance() {
   return `${HOOK_HEADER}
 /**
  * Model Governance — BeforeModel
- * Advisory: logs recommended model for current agent.
+ * V2 routing is automatic and invisible. This wrapper only supports legacy
+ * installations that do not have a v2 installation contract.
  */
 async function main() {
   let input = '';
@@ -139,6 +140,11 @@ async function main() {
     const event = JSON.parse(input);
     const cwd = event.cwd || process.cwd();
 
+    if (existsSync(join(cwd, '.chati', 'v2', 'installation.json'))) {
+      console.log(JSON.stringify({}));
+      return;
+    }
+
     const sessionPath = join(cwd, '.chati', 'session.yaml');
     if (!existsSync(sessionPath)) {
       console.log(JSON.stringify({}));

package/src/dashboard/layout.js

@@ -65,14 +65,16 @@ export function buildProjectInfo(data) {
   const rawMode = session.execution_mode;
   const mode = formatMode(rawMode && typeof rawMode === 'object' ? rawMode.mode : rawMode);
   const lang = session.language || 'en';
-  // Show the provider-specific IDE (last in the list) rather than always claude-code
-  const ides = session.ides || [];
-  const ide = ides[ides.length - 1] || 'unknown';
+  const providers = Array.isArray(session.providers_enabled) && session.providers_enabled.length > 0
+    ? session.providers_enabled.join('/')
+    : 'unknown';
+  const languageVisibleWidth = 12 + lang.length;
+  const providersVisibleWidth = 11 + providers.length;
 
   return [
     brand('│') + `  ${dim('Project:')} ${name}` + ' '.repeat(Math.max(1, 30 - name.length)) + `${dim('Type:')} ${type}` + ' '.repeat(Math.max(1, 18 - type.length)) + brand('│'),
     brand('│') + `  ${dim('Phase:')}   ${state}` + ' '.repeat(Math.max(1, 28)) + `${dim('Mode:')} ${mode}` + ' '.repeat(Math.max(1, 10)) + brand('│'),
-    brand('│') + `  ${dim('Language:')} ${lang}` + ' '.repeat(Math.max(1, 30 - lang.length)) + `${dim('IDE:')}  ${ide}` + ' '.repeat(Math.max(1, 18 - ide.length)) + brand('│'),
+    brand('│') + `  ${dim('Language:')} ${lang}` + ' '.repeat(Math.max(1, 28 - languageVisibleWidth)) + `${dim('Providers:')} ${providers}` + ' '.repeat(Math.max(1, 31 - providersVisibleWidth)) + brand('│'),
   ];
 }
 

package/src/installer/core.js

@@ -1,4 +1,5 @@
 import { mkdirSync, writeFileSync, copyFileSync, existsSync, readFileSync, readdirSync, statSync } from 'fs';
+import { execFileSync } from 'child_process';
 import { join, dirname, basename } from 'path';
 import { fileURLToPath } from 'url';
 import { createRequire } from 'module';
@@ -215,6 +216,21 @@ export async function installFramework(config) {
 
   // 7. Update .gitignore with runtime session lock files
   updateGitignore(targetDir, selectedIDEs);
+
+  // RAIL evidence and release lanes require a Git worktree. For a genuinely
+  // new project, initialize it automatically. Nested projects already covered
+  // by a parent worktree are left untouched.
+  ensureGitRepository(targetDir);
+}
+
+export function ensureGitRepository(targetDir) {
+  try {
+    execFileSync('git', ['-C', targetDir, 'rev-parse', '--show-toplevel'], { stdio: 'ignore' });
+    return { initialized: false };
+  } catch {
+    execFileSync('git', ['-C', targetDir, 'init', '-q'], { stdio: 'ignore' });
+    return { initialized: true };
+  }
 }
 
 /**

package/src/installer/templates.js

@@ -9,7 +9,7 @@ export function generateSessionYaml(config) {
   // Schema MUST match session-manager.js DEFAULT_SESSION fields,
   // otherwise validateSession() rejects installer-generated sessions.
   const session = {
-    schema_version: '1.0',
+    schema_version: '1.2',
     version: '1.0',
     mode: 'discover',
     project: {
@@ -35,6 +35,26 @@ export function generateSessionYaml(config) {
     agents: {},
     backlog: [],
     last_handoff: '',
+    scaffold_candidates: [],
+    scaffold_signals: {},
+    scaffold_applied: [],
+    active_model: null,
+    active_provider: null,
+    context_tokens_used: 0,
+    context_window_tokens: null,
+    context_last_bracket: null,
+    decision_trail: [],
+    teams: [],
+    team_events: [],
+    preview: {
+      status: 'inactive',
+      url: null,
+      port: null,
+      framework: null,
+      logs_captured: 0,
+      adjustment_count: 0,
+    },
+    model_selections: [],
     // Article XXIII — Reasoning Tier Governance.
     // Tier starts at 'standard' and is promoted by reasoning-escalator.js
     // in response to friction signals. See chati.dev/hooks/reasoning-escalator.js.

package/src/installer-v2/clickup-preflight.js

@@ -0,0 +1,32 @@
+import { execFileSync } from 'node:child_process';
+
+const COMMANDS = Object.freeze({ claude: 'claude', codex: 'codex', grok: 'grok' });
+
+export function outputHasConnectedClickUp(output) {
+  if (typeof output !== 'string') return false;
+  return output.split(/\r?\n/).some((line) => {
+    if (!/\bclickup\b/i.test(line)) return false;
+    return !/\b(disabled|failed|error|not configured|unhealthy|unauthorized|disconnected)\b|authentication required/i.test(line);
+  });
+}
+
+/** Read-only preflight. It never writes provider config or reads credentials. */
+export function checkClickUpMcp(selectedProviders, { exec = execFileSync } = {}) {
+  const providers = [...new Set(selectedProviders || [])].filter((provider) => COMMANDS[provider]);
+  const checks = providers.map((provider) => {
+    try {
+      const output = exec(COMMANDS[provider], ['mcp', 'list'], {
+        encoding: 'utf8', timeout: 15_000, stdio: ['ignore', 'pipe', 'pipe'],
+      });
+      return { provider, connected: outputHasConnectedClickUp(output) };
+    } catch {
+      return { provider, connected: false };
+    }
+  });
+  const connectedProviders = checks.filter((check) => check.connected).map((check) => check.provider);
+  return Object.freeze({
+    passed: connectedProviders.length > 0,
+    connected_providers: connectedProviders,
+    checks,
+  });
+}

package/src/installer-v2/model-catalog-envelope.json

@@ -1,7 +1,7 @@
 {
   "catalog": {
-    "snapshot_id": "chati-model-catalog-2026-08-27-v2",
-    "published_at": "2026-08-27T00:00:00.000Z",
+    "snapshot_id": "chati-model-catalog-2026-08-27-v3",
+    "published_at": "2026-08-27T12:00:00.000Z",
     "expires_at": "2026-11-25T00:00:00.000Z",
     "models": [
       {
@@ -17,13 +17,12 @@
         "tier": "frontier",
         "natural_role": "architecture and design",
         "routing_priority": {
-          "discovery": 95,
-          "planning": 100,
+          "discovery": 78,
+          "planning": 94,
           "build": 45,
           "review": 90,
           "adjudication": 95,
           "architect": 100,
-          "detail": 100,
           "ux": 100
         },
         "adjudication_priority": 95,
@@ -42,11 +41,13 @@
         "tier": "frontier",
         "natural_role": "quality rules and judgment-heavy work",
         "routing_priority": {
-          "discovery": 90,
-          "planning": 95,
+          "discovery": 92,
+          "planning": 96,
           "build": 75,
           "review": 95,
           "adjudication": 100,
+          "brownfield-wu": 100,
+          "detail": 100,
           "qa-planning": 97,
           "qa-implementation": 97
         },
@@ -65,13 +66,14 @@
         "tier": "workhorse",
         "natural_role": "daily implementation and planning craft",
         "routing_priority": {
-          "discovery": 85,
-          "planning": 88,
+          "discovery": 90,
+          "planning": 92,
           "build": 98,
           "review": 80,
-          "brief": 95,
-          "phases": 95,
-          "tasks": 95,
+          "greenfield-wu": 100,
+          "brief": 100,
+          "phases": 100,
+          "tasks": 100,
           "dev": 98
         },
         "adjudication_priority": 60
@@ -211,5 +213,5 @@
       }
     ]
   },
-  "signature": "trEytAQJkukerJTwpNvEQ4UO49b+Yth5jtuYNy9WXVSBvKpJCmfuv3tBWyhNgwYG9w3/oKpKDJqJQwIb/oiMAQ=="
+  "signature": "tL1JS1RkPfOBDE6rcctrEPN98oQ6FjLurwZnzYglMvrsvvceRbS19INcxmPYQjT+NJv507Vuo/HIkm+J0nQ1Cw=="
 }

package/src/installer-v2/model-catalog.json

@@ -1,6 +1,6 @@
 {
-  "snapshot_id": "chati-model-catalog-2026-08-27-v2",
-  "published_at": "2026-08-27T00:00:00.000Z",
+  "snapshot_id": "chati-model-catalog-2026-08-27-v3",
+  "published_at": "2026-08-27T12:00:00.000Z",
   "expires_at": "2026-11-25T00:00:00.000Z",
   "models": [
     {
@@ -9,7 +9,7 @@
       "actions": ["discovery", "planning", "build", "review", "adjudication"],
       "tier": "frontier",
       "natural_role": "architecture and design",
-      "routing_priority": { "discovery": 95, "planning": 100, "build": 45, "review": 90, "adjudication": 95, "architect": 100, "detail": 100, "ux": 100 },
+      "routing_priority": { "discovery": 78, "planning": 94, "build": 45, "review": 90, "adjudication": 95, "architect": 100, "ux": 100 },
       "adjudication_priority": 95,
       "highest_reasoning_configuration": "xhigh"
     },
@@ -19,7 +19,7 @@
       "actions": ["discovery", "planning", "build", "review", "adjudication"],
       "tier": "frontier",
       "natural_role": "quality rules and judgment-heavy work",
-      "routing_priority": { "discovery": 90, "planning": 95, "build": 75, "review": 95, "adjudication": 100, "qa-planning": 97, "qa-implementation": 97 },
+      "routing_priority": { "discovery": 92, "planning": 96, "build": 75, "review": 95, "adjudication": 100, "brownfield-wu": 100, "detail": 100, "qa-planning": 97, "qa-implementation": 97 },
       "adjudication_priority": 100,
       "highest_reasoning_configuration": "xhigh"
     },
@@ -29,7 +29,7 @@
       "actions": ["discovery", "planning", "build", "review"],
       "tier": "workhorse",
       "natural_role": "daily implementation and planning craft",
-      "routing_priority": { "discovery": 85, "planning": 88, "build": 98, "review": 80, "brief": 95, "phases": 95, "tasks": 95, "dev": 98 },
+      "routing_priority": { "discovery": 90, "planning": 92, "build": 98, "review": 80, "greenfield-wu": 100, "brief": 100, "phases": 100, "tasks": 100, "dev": 98 },
       "adjudication_priority": 60
     },
     {

package/src/installer-v2/model-catalog.sig

@@ -1 +1 @@
-trEytAQJkukerJTwpNvEQ4UO49b+Yth5jtuYNy9WXVSBvKpJCmfuv3tBWyhNgwYG9w3/oKpKDJqJQwIb/oiMAQ==
+tL1JS1RkPfOBDE6rcctrEPN98oQ6FjLurwZnzYglMvrsvvceRbS19INcxmPYQjT+NJv507Vuo/HIkm+J0nQ1Cw==

package/src/installer-v2/wizard-installation.js

@@ -100,7 +100,7 @@ export function buildWizardV2InstallationInput({
   const projectSlug = projectName.trim().toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/(^-|-$)/g, '') || 'project';
   const installation = {
     installation_id: `wizard-${projectSlug}`,
-    profile: installationMode === 'internal' ? 'focus-ai-internal' : 'other-supported-profile',
+    profile: installationMode === 'internal' ? 'authorized-internal' : 'open',
     enabled_providers,
     capability_snapshot_ref: snapshotId,
     policy_ref: `policy://installation/${snapshotId}`,

package/src/intelligence/registry-manager.js

@@ -36,8 +36,15 @@ export function checkRegistry(targetDir) {
   // Check each registered entity exists on disk
   const entities = flattenEntitiesMap(registry.entities);
   for (const entity of entities) {
-    const filePath = join(targetDir, entity.path);
-    if (existsSync(filePath)) {
+    // Registry entries describe the monorepo source layout. Installed projects
+    // bundle the CLI source under .chati.dev/_cli, so health must resolve both
+    // layouts instead of reporting bundled runtime files as missing.
+    const candidates = [join(targetDir, entity.path)];
+    const bundledSourcePrefix = 'packages/chati-dev/src/';
+    if (entity.path.startsWith(bundledSourcePrefix)) {
+      candidates.push(join(targetDir, resolveFrameworkDir(targetDir), '_cli', entity.path.slice(bundledSourcePrefix.length)));
+    }
+    if (candidates.some((filePath) => existsSync(filePath))) {
       found.push(entity);
     } else {
       missing.push(entity);
@@ -193,4 +200,3 @@ function loadRegistry(registryPath) {
     return null;
   }
 }
-

package/src/orchestrator/cli.js

@@ -583,6 +583,19 @@ export function buildParallelSpawnCommand(agents, projectDir, previousAgent, pro
   return parts.join(' ');
 }
 
+export function buildRoutedParallelSpawnCommands(agents, projectDir, previousAgent, timeout = 900000) {
+  return agents.map((agent) => {
+    const modelInfo = resolveAgentModel(agent, projectDir);
+    return Object.freeze({
+      agent,
+      provider: modelInfo.provider,
+      model: modelInfo.model,
+      reasoning_configuration: modelInfo.reasoning_configuration,
+      command: buildSpawnCommand(agent, projectDir, previousAgent, modelInfo.provider, timeout, modelInfo.model, modelInfo.source === 'installation-v2'),
+    });
+  });
+}
+
 /**
  * Model map — canonical model tier per agent.
  * Matches framework/hooks/model-governance.js AGENT_MODELS.
@@ -748,7 +761,7 @@ async function handleNext(projectDir) {
   // Centralized session lock update: applies to ALL return paths.
   // Activates lock when an agent is returned, deactivates on completion.
   if (result && result.agent && result.action !== 'error' && result.action !== 'setup') {
-    const activating = ['activate_interactive', 'spawn_autonomous', 'spawn_team', 'spawn_parallel'];
+    const activating = ['activate_interactive', 'spawn_routed_interactive', 'spawn_autonomous', 'spawn_team', 'spawn_parallel'];
     if (activating.includes(result.action)) {
       try {
         writeSessionLock(projectDir, result.agent, {
@@ -830,20 +843,18 @@ async function _handleNextInner(projectDir) {
         };
       }
 
+      const modelInfo = resolveAgentModel(agent, projectDir);
       return {
-        action: isInteractive ? 'activate_interactive' : 'spawn_autonomous',
+        action: isInteractive ? 'spawn_routed_interactive' : 'spawn_autonomous',
         agent,
         agent_file: agentFile,
         phase: agentDef?.phase || session.mode,
-        spawn_command: isInteractive ? null : (() => {
-          const modelInfo = resolveAgentModel(agent, projectDir);
-          return buildSpawnCommand(agent, projectDir, session.last_handoff || 'none', modelInfo.provider, 600000, modelInfo.model, modelInfo.source === 'installation-v2');
-        })(),
+        spawn_command: buildSpawnCommand(agent, projectDir, session.last_handoff || 'none', modelInfo.provider, 600000, modelInfo.model, modelInfo.source === 'installation-v2'),
         parallel_spawn_command: null,
         parallel_agents: [],
         handoff_status: { valid: true, missing: [], warnings: ['Resuming in-progress agent'] },
         gate_status: { canAdvance: true, reason: 'Agent already in progress' },
-        model_info: resolveAgentModel(agent, projectDir),
+        model_info: modelInfo,
         context_bracket: estimateContextBracket(completedAgents.length, AGENT_PIPELINE.length),
         pipeline_progress: getPipelineProgress(pipelineState),
         session: { language: session.language, project_type: session.project_type || session.project?.type, execution_mode: session.execution_mode, user_level: session.user_level || 'auto' },
@@ -861,17 +872,18 @@ async function _handleNextInner(projectDir) {
     const firstAgent = projectType === 'brownfield' ? 'brownfield-wu' : 'greenfield-wu';
     const agentFile = getAgentFile(firstAgent, projectDir) || null;
 
+    const modelInfo = resolveAgentModel(firstAgent, projectDir);
     return {
-      action: 'activate_interactive',
+      action: 'spawn_routed_interactive',
       agent: firstAgent,
       agent_file: agentFile,
       phase: 'discover',
-      spawn_command: null,
+      spawn_command: buildSpawnCommand(firstAgent, projectDir, 'none', modelInfo.provider, 600000, modelInfo.model, modelInfo.source === 'installation-v2'),
       parallel_spawn_command: null,
       parallel_agents: [],
       handoff_status: { valid: true, missing: [], warnings: [] },
       gate_status: { canAdvance: true, reason: 'First agent in pipeline' },
-      model_info: resolveAgentModel(firstAgent, projectDir),
+      model_info: modelInfo,
       context_bracket: estimateContextBracket(0, AGENT_PIPELINE.length),
       pipeline_progress: getPipelineProgress(pipelineState),
       session: { language: session.language, project_type: projectType, execution_mode: session.execution_mode, user_level: session.user_level || 'auto' },
@@ -932,7 +944,7 @@ async function _handleNextInner(projectDir) {
   const modelInfo = resolveAgentModel(nextAgent, projectDir);
 
   // Check for parallel group — with Agent Teams override (Article XXI)
-  let action, spawnCommand = null, parallelSpawnCommand = null, parallelAgents = [];
+  let action, spawnCommand = null, parallelSpawnCommand = null, parallelSpawnCommands = [], parallelAgents = [];
   let teamData = null;
   const teamsEnabled = isAgentTeamsEnabled(projectDir);
 
@@ -948,7 +960,11 @@ async function _handleNextInner(projectDir) {
     } else {
       action = 'spawn_parallel';
       parallelAgents = nextInfo.group;
-      parallelSpawnCommand = buildParallelSpawnCommand(nextInfo.group, projectDir, lastAgent, modelInfo.provider, 900000, modelInfo.model, modelInfo.source === 'installation-v2');
+      if (modelInfo.source === 'installation-v2') {
+        parallelSpawnCommands = buildRoutedParallelSpawnCommands(nextInfo.group, projectDir, lastAgent);
+      } else {
+        parallelSpawnCommand = buildParallelSpawnCommand(nextInfo.group, projectDir, lastAgent, modelInfo.provider, 900000, modelInfo.model, false);
+      }
     }
   } else if (nextAgent === 'dev' && teamsEnabled) {
     // Build Team auto-spawn: dev + qa-implementation are NOT parallel in the
@@ -962,7 +978,8 @@ async function _handleNextInner(projectDir) {
     parallelAgents = teamConfig.members;
     teamData = { team_id: teamId, team_type: 'build', members: teamConfig.members };
   } else if (isInteractive) {
-    action = 'activate_interactive';
+    action = 'spawn_routed_interactive';
+    spawnCommand = buildSpawnCommand(nextAgent, projectDir, lastAgent, modelInfo.provider, 600000, modelInfo.model, modelInfo.source === 'installation-v2');
   } else {
     action = 'spawn_autonomous';
     spawnCommand = buildSpawnCommand(nextAgent, projectDir, lastAgent, modelInfo.provider, 600000, modelInfo.model, modelInfo.source === 'installation-v2');
@@ -1000,6 +1017,7 @@ async function _handleNextInner(projectDir) {
     phase: agentDef?.phase || session.mode,
     spawn_command: spawnCommand,
     parallel_spawn_command: parallelSpawnCommand,
+    parallel_spawn_commands: parallelSpawnCommands,
     parallel_agents: parallelAgents,
     handoff_status: handoffStatus,
     gate_status: gateStatus,
@@ -2418,16 +2436,13 @@ async function handleProviders(projectDir) {
     agentModels[agentDef.name] = resolveAgentModel(agentDef.name, projectDir);
   }
 
-  let primaryProvider = 'claude';
-  const configPath = join(projectDir, resolveFrameworkDir(projectDir), 'config.yaml');
-  if (existsSync(configPath)) {
-    const raw = readFileSync(configPath, 'utf-8');
-    const providerMatch = raw.match(/primary_provider:\s*["']?(\w+)/);
-    if (providerMatch) primaryProvider = providerMatch[1].toLowerCase();
-  }
+  const artifact = loadRuntimeInstallationV2(projectDir);
+  const enabledProviders = artifact
+    ? artifact.installation.enabled_providers.map(({ provider_id, harness_id }) => ({ provider_id, harness_id }))
+    : [...new Set(Object.values(agentModels).map(({ provider }) => provider).filter(Boolean))].map((harness_id) => ({ harness_id }));
 
   return {
-    primary_provider: primaryProvider,
+    enabled_providers: enabledProviders,
     agent_models: agentModels,
   };
 }

package/src/orchestrator/clickup-projection.js

@@ -61,14 +61,8 @@ export function enqueueClickUpProjectionFromState({ projectDir, handoff, records
     ...(completion?.reviews || []),
     ...(completion?.acceptance_evidence_refs || []),
   ]);
-  const tracking = new TrackingClickUp({
-    outbox_path: join(projectDir, '.chati/v2/tracking/clickup-outbox.json'),
-    project_evolution_dir: join(projectDir, '.chati/v2/project-evolution'),
-    clock, verify_completion: (candidate) => completionIsCanonical(records, candidate),
-    verify_reference: (ref) => refs.has(ref),
-    resolve_reference: (ref, type) => type === 'handoff'
-      ? { phase: 'rail-execution', handoff_id: handoff.handoff_id }
-      : { task_state: taskState(records, handoff.handoff_id, task_id), blockers: journalBlockers(records, handoff.handoff_id, task_id) },
+  const tracking = createClickUpTrackingFromState({
+    projectDir, handoff, records, task_id, clock, extra_verified_refs: [...refs],
   });
   const projection = tracking.enqueue({
     projection_id: `clickup-${sha256({ handoff_id: handoff.handoff_id, task_id, attempt_id, operation, payload }).slice(0, 24)}`,
@@ -82,3 +76,26 @@ export function enqueueClickUpProjectionFromState({ projectDir, handoff, records
   }
   return projection;
 }
+
+export function createClickUpTrackingFromState({ projectDir, handoff, records, task_id, clock = () => new Date(), extra_verified_refs = [] } = {}) {
+  const task = handoff.tasks.find((item) => item.task_id === task_id);
+  if (!task) throw Object.assign(new Error(`task ${task_id} is absent from handoff`), { code: 'TASK_NOT_FOUND' });
+  const handoff_ref = `rail-handoff://${handoff.handoff_id}/${handoff.seal.manifest_digest}`;
+  const journal_ref = `rail-journal://sha256/${sha256(records)}`;
+  const derivedDecisions = journalDecisions(records, handoff.handoff_id, task_id);
+  const refs = new Set([
+    handoff_ref,
+    journal_ref,
+    ...derivedDecisions.flatMap((item) => [item.decision_ref, item.review_ref]),
+    ...extra_verified_refs,
+  ]);
+  return new TrackingClickUp({
+    outbox_path: join(projectDir, '.chati/v2/tracking/clickup-outbox.json'),
+    project_evolution_dir: join(projectDir, '.chati/v2/project-evolution'),
+    clock, verify_completion: (candidate) => completionIsCanonical(records, candidate),
+    verify_reference: (ref) => refs.has(ref),
+    resolve_reference: (ref, type) => type === 'handoff'
+      ? { phase: 'rail-execution', handoff_id: handoff.handoff_id }
+      : { task_state: taskState(records, handoff.handoff_id, task_id), blockers: journalBlockers(records, handoff.handoff_id, task_id) },
+  });
+}

package/src/orchestrator/clickup-runtime.js

@@ -1,5 +1,8 @@
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { sha256 } from '@chati/core';
 import { createProjectRailEngine, loadRailHandoff } from './rail-runtime.js';
-import { enqueueClickUpProjectionFromState } from './clickup-projection.js';
+import { createClickUpTrackingFromState, enqueueClickUpProjectionFromState } from './clickup-projection.js';
 
 /** Enqueues a durable local ClickUp projection. It never sends to ClickUp. */
 export function enqueueClickUpProjection({ projectDir, handoff_id, task_id, attempt_id, operation = 'update', payload, completion, decisions, clock = () => new Date() } = {}) {
@@ -11,3 +14,88 @@ export function enqueueClickUpProjection({ projectDir, handoff_id, task_id, atte
 }
 
 export { enqueueClickUpProjectionFromState } from './clickup-projection.js';
+
+export function listPendingClickUpProjections({ projectDir } = {}) {
+  const path = join(projectDir, '.chati/v2/tracking/clickup-outbox.json');
+  if (!existsSync(path)) return Object.freeze([]);
+  const outbox = JSON.parse(readFileSync(path, 'utf8'));
+  return Object.freeze((outbox.projections || [])
+    .filter((projection) => ['pending', 'retryable_failure', 'sent_unconfirmed'].includes(projection.delivery_state))
+    .map((projection) => Object.freeze({
+      projection_id: projection.projection_id,
+      clickup_ref: projection.clickup_ref,
+      operation: projection.operation,
+      payload: projection.payload,
+      idempotency_key: projection.idempotency_key,
+    })));
+}
+
+const SENSITIVE_RECEIPT_KEY = /(authorization|cookie|credential|password|secret|token)/i;
+
+export function sanitizeClickUpReceipt(value, depth = 0) {
+  if (depth > 8) return '[truncated]';
+  if (Array.isArray(value)) return value.slice(0, 100).map((item) => sanitizeClickUpReceipt(item, depth + 1));
+  if (!value || typeof value !== 'object') return value;
+  return Object.fromEntries(Object.entries(value)
+    .filter(([key]) => !SENSITIVE_RECEIPT_KEY.test(key))
+    .map(([key, item]) => [key, sanitizeClickUpReceipt(item, depth + 1)]));
+}
+
+function hasRemoteReceiptIdentifier(value, depth = 0) {
+  if (depth > 8 || !value || typeof value !== 'object') return false;
+  if (Array.isArray(value)) return value.some((item) => hasRemoteReceiptIdentifier(item, depth + 1));
+  return Object.entries(value).some(([key, item]) =>
+    (/^(id|task_id|comment_id|task_url|url)$/i.test(key) && typeof item === 'string' && item.trim() !== '')
+    || hasRemoteReceiptIdentifier(item, depth + 1));
+}
+
+export function clickUpReceiptConfirmsSuccess(receipt) {
+  if (!receipt || typeof receipt !== 'object' || Array.isArray(receipt)) return false;
+  if (receipt.isError === true || receipt.success === false) return false;
+  if (typeof receipt.status === 'string' && /^(failed|error|unauthorized)$/i.test(receipt.status)) return false;
+  return receipt.success === true
+    || (typeof receipt.status === 'string' && /^(success|ok|completed)$/i.test(receipt.status))
+    || hasRemoteReceiptIdentifier(receipt);
+}
+
+export function acknowledgeClickUpProjection({ projectDir, handoff_id, projection_id, receipt, clock = () => new Date() } = {}) {
+  if (!receipt || typeof receipt !== 'object' || Array.isArray(receipt)) throw Object.assign(new Error('receipt must be an object'), { code: 'INVALID_CLICKUP_RECEIPT' });
+  const { handoff } = loadRailHandoff({ projectDir, handoff_id });
+  const outboxPath = join(projectDir, '.chati/v2/tracking/clickup-outbox.json');
+  const outbox = JSON.parse(readFileSync(outboxPath, 'utf8'));
+  const projection = outbox.projections?.find((item) => item.projection_id === projection_id);
+  if (!projection) throw Object.assign(new Error(`projection ${projection_id} does not exist`), { code: 'PROJECTION_NOT_FOUND' });
+  const records = createProjectRailEngine({ projectDir, clock }).records;
+  if (projection.delivery_state === 'confirmed' && projection.receipt_ref) {
+    const tracking = createClickUpTrackingFromState({
+      projectDir, handoff, records, task_id: projection.task_id, clock, extra_verified_refs: [projection.receipt_ref],
+    });
+    return tracking.confirmExternalDelivery({ projection_id, receipt_ref: projection.receipt_ref });
+  }
+  if (!clickUpReceiptConfirmsSuccess(receipt)) {
+    throw Object.assign(new Error('receipt does not prove a successful ClickUp operation'), { code: 'CLICKUP_RECEIPT_UNCONFIRMED' });
+  }
+  const observed = clock();
+  const receivedAt = (observed instanceof Date ? observed : new Date(observed)).toISOString();
+  const safeReceipt = sanitizeClickUpReceipt(receipt);
+  const receiptMaterial = { schema_version: 1, projection_id, received_at: receivedAt, response: safeReceipt };
+  if (JSON.stringify(receiptMaterial).length > 64 * 1024) {
+    throw Object.assign(new Error('receipt exceeds 64 KiB after sanitization'), { code: 'CLICKUP_RECEIPT_TOO_LARGE' });
+  }
+  const digest = sha256(receiptMaterial);
+  const receiptPath = join(projectDir, '.chati/v2/tracking/receipts', `${digest}.json`);
+  mkdirSync(dirname(receiptPath), { recursive: true, mode: 0o700 });
+  const serialized = `${JSON.stringify(receiptMaterial, null, 2)}\n`;
+  if (!existsSync(receiptPath)) {
+    const temporary = `${receiptPath}.${process.pid}.tmp`;
+    writeFileSync(temporary, serialized, { encoding: 'utf8', flag: 'wx', mode: 0o600 });
+    renameSync(temporary, receiptPath);
+  } else if (readFileSync(receiptPath, 'utf8') !== serialized) {
+    throw Object.assign(new Error('receipt digest collision'), { code: 'CLICKUP_RECEIPT_CONFLICT' });
+  }
+  const receiptRef = `clickup-receipt://sha256/${digest}`;
+  const tracking = createClickUpTrackingFromState({
+    projectDir, handoff, records, task_id: projection.task_id, clock, extra_verified_refs: [receiptRef],
+  });
+  return tracking.confirmExternalDelivery({ projection_id, receipt_ref: receiptRef });
+}

package/src/orchestrator/planning-runtime.js

@@ -87,8 +87,7 @@ export function compilePlanningHandoff({ projectDir, clock = () => new Date() }
   };
   if (sources.ux_path) source_artifacts.ux_ref = immutableFileRef(projectDir, sources.ux_path, 'PLANNING_SOURCE_ARTIFACTS_REQUIRED');
   const ids = new Set();
-  const clickupRequired = installation.installation.profile === 'focus-ai-internal'
-    && installation.installation.external_integrations?.clickup === 'required';
+  const clickupRequired = installation.installation.external_integrations?.clickup === 'required';
   const tasks = planning.tasks.map((task) => {
     if (!task || typeof task !== 'object' || typeof task.id !== 'string' || !task.id.trim() || ids.has(task.id)) fail('INVALID_PLANNING_TASK', 'each planning task needs a unique id');
     ids.add(task.id);