codex-workflow-v2 2.0.0-alpha.6.1 → 2.0.0-alpha.6.2

package/docs/release.md

@@ -31,3 +31,7 @@ Tag releases as `v<package-version>`. The tag workflow verifies the tag/package
 uses npm trusted publishing with public access. For a public GitHub repository and public
 package, npm trusted publishing generates provenance automatically. Publishing is never
 performed by local validation commands.
+
+The `2.0.0-alpha.6.x` backport line publishes with the dedicated `backport-alpha6`
+dist-tag (or by exact version). It must never move npm's `next` tag, which remains owned by
+the alpha.7 line.

package/docs/updating-existing-project.md

@@ -44,6 +44,24 @@ Recovery не требует и не допускает предваритель
 knowledge rebind, свежую authorization и завершите Task. Только на безопасной lifecycle-границе
 запускайте обычное обновление dependency и gateway.
 
+## Исключение: signal_v4 после двух failed review в alpha.6
+
+Если точный alpha.6 state уже дошёл до Task revision 14/status `ready`, `STEP-001` имеет два
+distinct verified strict-review failure, remediation `attemptCount=2`, а corrective decision
+отсутствует, используйте только внешний runner `2.0.0-alpha.6.2`. Dependency проекта при этом
+остаётся точно `2.0.0-alpha.6`.
+
+Сначала выполните mutation-free `update corrective-rescue-preflight`. Он требует clean checkout
+на exact HEAD `5c63798cc7b8fbb5e1c8b26ebf93876bc642295a`, неизменные Brief/Plan/Milestone bindings,
+claimed C1 и ровно один token-bound lease. Stale lease допустим только при точном совпадении
+claimant/token binding; plaintext token команда не возвращает.
+
+При `eligible=true` команда `update corrective-rescue-apply` принимает исходный actor/token,
+полный corrective Plan, independent `continue-fix` decision audit и отдельный independent Plan
+audit. Она использует канонические переходы, heartbeat'ит существующий lease только после
+проверки actor/token и не удаляет его. Нельзя вручную редактировать state, Brief, Step 2,
+requirements/acceptance или Milestone scope.
+
 ## 1. Подготовьте отдельный чат обновления
 
 Не обновляйте пакет во время выполняющегося Worker Step. Дождитесь завершения текущего ответа

package/docs/validation-report.md

@@ -1,15 +1,15 @@
 # V2 Alpha Validation Report
 
-Release candidate `2.0.0-alpha.6.1` was validated on 2026-08-14 with Node.js 24.17.0 as a
-narrow backport from the published `2.0.0-alpha.6` baseline.
+Release candidate `2.0.0-alpha.6.2` was validated on 2026-08-14 with Node.js 20.12.2 as a
+narrow backport from the `2.0.0-alpha.6.1` backport line, itself based on published
+`2.0.0-alpha.6`.
 
 - `npm run typecheck`, `npm run build`, `npm test`, `npm run validate`, `npm run plugin:check`,
   `npm run smoke:downstream`, `npm run release:check`, and `npm run pack:check` passed in the
   sequential backport validation.
-- The final sequential full suite passed `83/83` on 2026-08-14.
-- The package test script runs test files sequentially and uses Node's `--test-force-exit`
-  after all test cases finish because concurrent isolated runners retain IPC/stdio handles in
-  this environment; the same 83 cases also passed when executed per file.
+- The final sequential full suite passed `89/89` on 2026-08-14.
+- The package test script runs test files sequentially; the unsupported
+  `--test-force-exit` flag was removed.
 - Plan Risk Audit coverage includes the combined `plan-set --risk-audit-file` path, atomic
   rejection before Task/Plan acceptance, distinct planner/auditor identities, exact current
   Step-set equality, concrete failure modes, executable evidence binding, coupled
@@ -24,8 +24,14 @@ narrow backport from the published `2.0.0-alpha.6` baseline.
   exposes no plaintext token, completes review with the exact claimant/token, and fails closed
   for a wrong actor or token. Ordinary `task step-review` remains blocked by stale Knowledge.
 - Guarded remediation coverage includes the per-Step circuit breaker: two ordinary retries
-  allowed, third gated by bounded `continue-fix`, a hard stop after a third failed corrective
-  review, and stop/redirection handling for `split-required` and `stop-escalate`.
+  allowed, the third gated by a separate decision plus full independently audited corrective
+  Plan, an explicit corrective run envelope, a hard stop after a third failed corrective
+  review, and stop/redirection handling for `split-required` and `stop-escalate`. Knowledge
+  rebind and reauthorization preserve this breaker posture.
+- Signal_v4 rescue coverage includes exact alpha.6 dependency/HEAD/Task/review-history
+  matching, mutation-free preflight, active and stale bound leases without token disclosure,
+  wrong actor/token ordering before heartbeat, scope-preserving decision plus full Plan apply,
+  dirty/advanced checkout rejection, malformed/missing review evidence, and unrelated leases.
 - Milestone coverage includes human-only scope-change prepare/apply, journaled recovery of
   `state.json`, `plan.json`, and `scope-change-events.jsonl`, plus membership-integrity
   blocking for stale or contradictory Milestone/Task state, including reverse detection of a
@@ -44,13 +50,16 @@ narrow backport from the published `2.0.0-alpha.6` baseline.
   `plan-risk-audit-sidecar-v1`, `step-strict-review-sidecar-v1`,
   `step-remediation-circuit-breaker-sidecar-v1`, `milestone-scope-change-sidecar-v1`,
   `milestone-membership-integrity-v1`, `task-c1-handoff-sidecar-v1`, and
-  `alpha6-adoption-posture-v1`, plus strengthened contracts advertised as
+  `alpha6-adoption-posture-v1`, `alpha6-c1-strict-review-rescue-v1`, and
+  `alpha6-corrective-rescue-signal-v4`, plus strengthened contracts advertised as
   `semantic-plan-risk-audit-v2`, `guarded-remediation-hard-stop-v1`,
   `milestone-reverse-membership-integrity-v1`, and `task-c1-handoff-bundle-v2`.
-- npm dry-run packaging produced `codex-workflow-v2-2.0.0-alpha.6.1.tgz` with runtime, schemas,
+- npm dry-run packaging produced `codex-workflow-v2-2.0.0-alpha.6.2.tgz` with runtime, schemas,
   references, docs, and plugin source. Downstream installation and the packaged CLI handshake
   passed, and the install created none of `.codex`, `.tasks`, `.increments`, or
   `.memory-bank` in the temporary project.
+- Release checks require the dedicated `backport-alpha6` npm dist-tag, so publishing this
+  version cannot move the alpha.7-owned `next` tag.
 
 Not claimed here:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-workflow-v2",
-  "version": "2.0.0-alpha.6.1",
+  "version": "2.0.0-alpha.6.2",
   "description": "Requirements-first Codex development workflow with local state and explicit Git ownership.",
   "repository": {
     "type": "git",
@@ -40,7 +40,7 @@
     "clean": "node --eval \"import('node:fs').then(({rmSync}) => { rmSync('dist', {recursive:true, force:true}); rmSync('.test-dist', {recursive:true, force:true}); })\"",
     "build": "npm run clean && tsc -p tsconfig.build.json && node scripts/mark-cli-executable.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "npm run build && tsc -p tsconfig.test.json && node --test --test-concurrency=1 --test-force-exit .test-dist/tests/*.test.js",
+    "test": "npm run build && tsc -p tsconfig.test.json && node --test --test-concurrency=1 .test-dist/tests/*.test.js",
     "validate": "npm run typecheck && npm test",
     "pack:check": "npm run build && npm pack --dry-run",
     "smoke:downstream": "npm run build && node scripts/downstream-smoke.mjs",

package/schemas/context-envelope.schema.json

@@ -43,6 +43,16 @@
     "stepId": { "type": "string", "pattern": "^STEP-[0-9]{3}(?:-[A-Z0-9-]+)?$" },
     "expectedRevision": { "type": "integer", "minimum": 1 },
     "writerToken": { "type": ["string", "null"] },
+    "remediation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["attemptOrdinal", "mode", "correctiveDecisionEventId"],
+      "properties": {
+        "attemptOrdinal": { "type": "integer", "minimum": 1, "maximum": 3 },
+        "mode": { "enum": ["ordinary", "corrective"] },
+        "correctiveDecisionEventId": { "type": ["string", "null"] }
+      }
+    },
     "knowledgeMap": {
       "type": "object",
       "additionalProperties": false,

package/schemas/corrective-plan-audit-record.schema.json

@@ -0,0 +1,47 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/corrective-plan-audit-record.schema.json",
+  "title": "Codex Workflow V2 Alpha.6 Corrective Plan Audit Binding",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "recordedAt",
+    "taskId",
+    "taskRevision",
+    "stepId",
+    "triggeringAttemptCount",
+    "decisionEventId",
+    "decisionPlanHash",
+    "previousPlanHash",
+    "correctivePlanHash",
+    "failedReviewAttempts",
+    "auditor",
+    "summary",
+    "decision",
+    "reviewedFindingIds"
+  ],
+  "properties": {
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "taskRevision": { "type": "integer", "minimum": 0 },
+    "stepId": { "type": "string", "pattern": "^STEP-[0-9]{3}(?:-[A-Z0-9-]+)?$" },
+    "triggeringAttemptCount": { "const": 3 },
+    "decisionEventId": { "type": "string", "minLength": 1 },
+    "decisionPlanHash": { "$ref": "#/$defs/hash64" },
+    "previousPlanHash": { "$ref": "#/$defs/hash64" },
+    "correctivePlanHash": { "$ref": "#/$defs/hash64" },
+    "failedReviewAttempts": { "const": 2 },
+    "auditor": { "type": "string", "minLength": 1 },
+    "summary": { "type": "string", "minLength": 1 },
+    "decision": { "const": "continue-fix" },
+    "reviewedFindingIds": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "type": "string", "minLength": 1 }
+    }
+  },
+  "$defs": {
+    "hash64": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+  }
+}