codex-workflow-v2 2.0.0-beta.12.8 → 2.0.0-beta.12.9

package/plugins/codex-workflow-gateway/skills/codex-workflow-gateway/SKILL.md

@@ -50,6 +50,31 @@ pending/corrupt transaction. After success run sequential `status` then `next` a
 returned lifecycle action; Knowledge reconciliation or atomic Task context refresh may legitimately
 be next because the dependency files changed.
 
+When beta.12.9 fresh `next` advertises `task historical-step-provenance-recover`, Core has found
+exactly one product commit that a corrective Plan omitted from current Step evidence even though the
+commit still has a complete hash-valid passed strict Step Review chain and a matching prior final
+acceptance. First run the advertised read-only `task historical-step-provenance-preflight --id
+<TASK-ID>` and require `eligible=true`, the exact Task revision/Plan/Brief/HEAD, the advertised
+commit SHA, no lease/transaction/Core operation, and dirty files confined to the one active Step's
+`allowedWrites`. Invoke recovery with that exact commit, actor, and a substantive reason. The
+transition records the commit as invalidated historical Step authority plus an audit record; it does
+not adopt the completed Step into the current Plan and does not create, remove, amend, reset, rebase,
+or merge Git commits. Reject multiple or arbitrary unexpected commits, pending/failed review,
+mismatched final acceptance, unrelated dirty files, or damaged sidecars. After success run
+sequential `status` then `next`; the active corrective Step should resume through its ordinary
+credential and `task step-complete` route.
+
+When beta.12.9 must itself be installed while this exact historical Step blocker is active, preserve
+the Task worktree and create only two dependency transport commits: one on the active Milestone base
+and one at Task-branch HEAD, each changing exactly `package.json` and `package-lock.json` to the exact
+beta.12.9 package. Do not switch the dirty Task checkout to update the base; use a separate temporary
+worktree. Install the repository-local target package, then require fresh `next` to advertise
+`update historical-step-dependency-recover`. Run the matching read-only preflight and require the
+exact dependency HEAD/parent, Task revision, active Step/Plan, retained historical SHA, dirty-file
+set and dirty-worktree hash, with no lease or pending operation. The matching recover registers both
+authorities without modifying product bytes or Git. After recovery run sequential `status` and
+`next`; do not substitute ordinary dependency recovery, manual state edits, rebase, reset, or amend.
+
 Beta.12.1 permits product-owned manifest/lock fields already present in the exact recorded Task
 history to differ from the Milestone base. Core compares candidate parent to candidate HEAD after
 removing only the Workflow dependency entries, so the dependency commit must preserve every such

package/schemas/task.schema.json

@@ -60,6 +60,33 @@
       "uniqueItems": true,
       "items": { "type": "string", "pattern": "^[a-f0-9]{40}$" }
     },
+    "historicalStepProvenanceRecoveries": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "required": [
+          "commitSha",
+          "actor",
+          "reason",
+          "recordedAt",
+          "sourceFinalAcceptanceRecordedAt",
+          "sourcePlanHash",
+          "sourceResultHash",
+          "sourceEvidenceHash"
+        ],
+        "properties": {
+          "commitSha": { "type": "string", "pattern": "^[a-f0-9]{40}$" },
+          "actor": { "type": "string", "minLength": 1 },
+          "reason": { "type": "string", "minLength": 1 },
+          "recordedAt": { "type": "string", "format": "date-time" },
+          "sourceFinalAcceptanceRecordedAt": { "type": "string", "format": "date-time" },
+          "sourcePlanHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+          "sourceResultHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+          "sourceEvidenceHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+        },
+        "additionalProperties": false
+      }
+    },
     "dependencyProvenanceRecoveries": {
       "type": "array",
       "items": {
@@ -134,6 +161,22 @@
               }
             },
             "additionalProperties": false
+          },
+          "historicalStepProvenance": {
+            "type": "object",
+            "required": ["activeStepId", "planHash", "dirtyFiles", "dirtyWorktreeHash", "retainedCommitSha"],
+            "properties": {
+              "activeStepId": { "type": "string", "pattern": "^STEP-[A-Z0-9][A-Z0-9-]{2,63}$" },
+              "planHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "dirtyFiles": {
+                "type": "array",
+                "uniqueItems": true,
+                "items": { "type": "string", "minLength": 1 }
+              },
+              "dirtyWorktreeHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "retainedCommitSha": { "type": "string", "pattern": "^[a-f0-9]{40}$" }
+            },
+            "additionalProperties": false
           }
         },
         "additionalProperties": false