codex-workflow-v2 2.0.0-beta.12.5 → 2.0.0-beta.12.6

package/plugins/codex-workflow-gateway/skills/codex-workflow-gateway/SKILL.md

@@ -123,7 +123,7 @@ command shape or consuming a replacement Discovery. Never rebind, refresh, repla
 resume, cancel, or manually replace the historical Task. Continue only after a later P04-B/P05
 package explicitly advertises a topology-preserving replacement capability.
 
-When beta.12.5 `next` advertises `task stop-override-prepare`, the route is limited to the exact
+When beta.12.6 `next` advertises `task stop-override-prepare`, the route is limited to the exact
 beta.11 attempt-four policy stop: two ordinary failures, one corrective failure, a matching
 attempt-3 `continue-fix`, and a matching attempt-4 `stop-escalate` under the unchanged Plan. Invoke
 prepare with the exact Task/Step/revision, explicit human actor, and user-supplied reason. It is
@@ -149,6 +149,23 @@ Core may account for exactly one Task revision per ordered verified recovery. Ne
 compatibility from revision arithmetic alone: continue only when fresh `next` returns the validated
 `task run` route. An unrelated extra revision remains a hard stop.
 
+For the exact beta.12.6 active-downstream-proof update deadlock, do not apply the ordinary
+clean-boundary update recipe and do not stash/reset/commit product work. This exception is available
+only when a completed transitive predecessor and the active proof Step already own the complete dirty
+set, no writer lease/transaction/Core operation exists, and the active Milestone base can be updated
+in a separate worktree. Commit only exact `package.json`/`package-lock.json` dependency changes on
+that base, then commit only the same dependency files on the current Task branch while leaving all
+product bytes untouched. Install the exact beta.12.6 package and use only a fresh advertised
+`update downstream-proof-dependency-recover`. Run its read-only preflight first and require
+`eligible=true`, empty blockers, exact Task revision and non-null `activeDownstreamProof` binding.
+Require recorded Task history to validate at `HEAD^` and the exact dependency-only candidate to be
+`HEAD`; neither boundary may contain an unrelated or unregistered commit. The mutation registers
+only the dependency HEAD. Immediately run sequential `status` then `next`;
+continue only to the returned `task downstream-proof-recover` (including advertised writer-credential
+recovery when required). Any unrelated dirty path, unknown history, wider candidate commit, stale
+base, version mismatch, lease, transaction, or different route is a hard stop and never authorizes
+manual external-state edits.
+
 When `next` returns `milestone initial-assembly`, execution is unavailable. Follow only the
 advertised `linked-task-assembly.commands` (`discovery start` and `discovery materialize`) until all
 intended linked Tasks exist. The closing `milestone plan-set` option appears only after at least one

package/schemas/task.schema.json

@@ -78,6 +78,28 @@
             "type": "array",
             "uniqueItems": true,
             "items": { "type": "string", "pattern": "^[a-f0-9]{40}$" }
+          },
+          "activeDownstreamProof": {
+            "type": "object",
+            "required": ["activeStepId", "planHash", "dirtyFiles", "dirtyWorktreeHash", "invalidatedStepIds"],
+            "properties": {
+              "activeStepId": { "type": "string", "pattern": "^STEP-[A-Z0-9][A-Z0-9-]{2,63}$" },
+              "planHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "dirtyFiles": {
+                "type": "array",
+                "minItems": 1,
+                "uniqueItems": true,
+                "items": { "type": "string", "minLength": 1 }
+              },
+              "dirtyWorktreeHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "invalidatedStepIds": {
+                "type": "array",
+                "minItems": 1,
+                "uniqueItems": true,
+                "items": { "type": "string", "pattern": "^STEP-[A-Z0-9][A-Z0-9-]{2,63}$" }
+              }
+            },
+            "additionalProperties": false
           }
         },
         "additionalProperties": false

package/scripts/generate-pdf-docs.py

@@ -200,6 +200,14 @@ def styles() -> dict[str, ParagraphStyle]:
             leading=10.3,
             textColor=TEXT,
         ),
+        "table_header": ParagraphStyle(
+            "TableHeader",
+            parent=base["BodyText"],
+            fontName="WorkflowBold",
+            fontSize=7.7,
+            leading=10.3,
+            textColor=colors.white,
+        ),
         "code": ParagraphStyle(
             "Code",
             parent=base["BodyText"],
@@ -316,8 +324,11 @@ def markdown_story(lines: list[str], style: dict[str, ParagraphStyle]) -> list:
             column_count = max(len(row) for row in rows)
             normalized = [row + [""] * (column_count - len(row)) for row in rows]
             rendered = [
-                [Paragraph(inline_markup(cell), style["small"]) for cell in row]
-                for row in normalized
+                [
+                    Paragraph(inline_markup(cell), style["table_header"] if row_index == 0 else style["small"])
+                    for cell in row
+                ]
+                for row_index, row in enumerate(normalized)
             ]
             table = LongTable(rendered, colWidths=table_widths(column_count), repeatRows=1)
             table.setStyle(TableStyle([