codex-workflow-v2 2.0.0-beta.13.3 → 2.0.0-beta.13.6

package/docs/pdf/sources/codex-workflow-v2-architecture-ru.md

@@ -463,7 +463,7 @@ Restart Docker Desktop требует отдельного разрешения
 # 10. Operational checklist
 
 - exact package version установлен, bundled gateway соответствует release и переустановлен;
-- handshake подтверждает `packageVersion=2.0.0-beta.13.3`, protocol 2, state schema 2 и beta.13
+- handshake подтверждает `packageVersion=2.0.0-beta.13.5`, protocol 2, state schema 2 и beta.13
   capabilities;
 - routine observation начинается с компактного `status`; `status --full` запрашивается только для
   расследования, которому действительно нужна полная historical projection;

package/docs/pdf/sources/codex-workflow-v2-chat-only-guide-ru.md

@@ -57,7 +57,7 @@ AGENTS.md
 -> doctor только как дополнительная диагностика
 ```
 
-Handshake beta.13.1 должен сообщать `packageVersion=2.0.0-beta.13.3`, `protocolVersion=2`,
+Handshake beta.13.5 должен сообщать `packageVersion=2.0.0-beta.13.5`, `protocolVersion=2`,
 `stateSchemaVersion=2`, dependency DAG, initial Plan transaction, mechanical feasibility,
 Milestone autonomy, host-safe credential reference, failed-Step continuation transaction,
 cause-bound rolling refinement, structural production edge, compact status, reviewer runtime preflight,
@@ -482,7 +482,7 @@ Task/project DGR. `dependencyBinding` для standalone handoff равен null.
 # 14. Итоговый checklist пользователя
 
 - beta.13.1 exact package и новый bundled gateway установлены; handshake показывает
-  `packageVersion=2.0.0-beta.13.3`, protocol/state schema `2/2` и beta.13 capabilities;
+  `packageVersion=2.0.0-beta.13.5`, protocol/state schema `2/2` и beta.13 capabilities;
 - новый Coordinator chat не является fork старого Milestone;
 - bootstrap DGR, если нужен, выдан отдельным exact human confirmation;
 - Discovery не materialized при blocking unknowns;

package/docs/pdf/sources/codex-workflow-v2-technical-reference-ru.md

@@ -15,7 +15,7 @@ authority сами: mutating permission определяется runtime state
 
 | Параметр beta.13 | Значение |
 |---|---|
-| npm package | `codex-workflow-v2@2.0.0-beta.13.3` |
+| npm package | `codex-workflow-v2@2.0.0-beta.13.5` |
 | protocolVersion | 2 |
 | stateSchemaVersion | 2 |
 | lifecycle epoch | 2 |
@@ -767,7 +767,7 @@ dirty update.
 observed-route matrix/compact-status/reviewer-runtime tests, legacy compatibility regressions,
 `npm run test:signal-t10-check-support-e2e`, `npm run test:signal-remediation-e2e`,
 `npm run pack:check`, `npm run smoke:downstream`, `npm run plugin:check`, official plugin/skill validators,
-`npm run docs:pdf:check` и `npm run release:check` с exact `v2.0.0-beta.13.3` tag binding и append-only
+`npm run docs:pdf:check` и `npm run release:check` с exact `v2.0.0-beta.13.5` tag binding и append-only
 real-agent lifecycle log. Candidate проверяется из clean source checkout; missing built module не должен
 превращаться в stack trace, а обязан быть детерминированно собран или диагностирован release gate.
 

package/docs/release.md

@@ -4,6 +4,78 @@ The npm package is `codex-workflow-v2` with public visibility. Consumers must pi
 an exact version. Stable compatibility covers the latest minor release of the current
 major only; older minors are unsupported unless a release note explicitly says otherwise.
 
+## beta.13.6 candidate: preserve work across root-cause replan
+
+A repeated mechanical failure can legitimately yield the same Task to a replacement
+Plan while preserving uncommitted implementation. beta.13.5 authorizes that Plan but
+then rejects its planned Step because the checkout is dirty. Reaching planning or
+reauthorization therefore does not prove recovery.
+
+Acceptance for this candidate must exercise the complete repeated mechanical failure,
+automatic C1 yield, semantic replacement Plan, independent PRA, authorization, and
+same-Worker execution sequence with the original dirty bytes. The carryover assessment
+must bind the source remediation cycle, verified historical and current Plans, current
+PRA and authorization, completed evidence, HEAD, file set and content hash. Every carried
+path must already belong to the replacement Step and remain outside forbidden scope;
+carryover never expands scope or forgives unrelated work.
+
+Navigation and execution must use the same assessment. Changed bytes, paths, HEAD,
+Plan artifacts, audit/authorization evidence or ambiguous source history must fail
+closed before execution. Tests must continue beyond successful start through checks,
+Core commit and strict review, and reject each material binding mismatch.
+
+The stranded-source update must additionally prove a read-only compatibility preflight,
+no writer lease or pending Core operation, exact coherent source/target versions,
+dependency-only Task and Milestone-base commits, registration of the Task dependency
+commit after verification of the base transport, and unchanged product bytes. It must preserve the original Task and Worker and must not
+rely on manual product commits, stash/reset, installed-code edits or state-file edits.
+
+All ordinary release gates below apply. The user's one-time beta.13.5 CI-based release
+exception is consumed and is not evidence or an exception for this candidate.
+
+## beta.13.5 preventive Plan correction before execution
+
+A newly discovered implementation Plan defect can require changing unfinished scope
+before its next Step runs. The preventive route withdraws the current execution
+authorization under an independent blocking Plan Risk Audit, then requires a corrected
+Plan, fresh independent audit and ordinary execution authorization. It must preserve
+the same Task, completed Step definitions and evidence, requirements, acceptance,
+review history and grants. It must not manufacture a failed run to unlock planning.
+
+Initial eligibility is deliberately limited to a coherent, clean, idle `ready` Task
+with no C1 ownership or writer lease. Stale bindings, existing ownership, incomplete
+review, unexpected Git history and damaged state must fail closed. Regression gates
+must prove authority withdrawal and actual same-Task continuation, plus rejection of
+attempts to change the objective, discard completed evidence or weaken guarded scope.
+
+Replacement Plan publication commits Task state, the current and immutable Plan artifacts,
+and its independent audit atomically. Pending correction blocks C1 handoff and dependency
+transport until the corrected Plan can be authorized. Proof bindings retain each Step,
+failure mode and evidence association; revised proof prose requires an independent audit
+with an explicit rationale. Core does not determine whether natural-language proof claims
+are semantically stronger.
+
+External sealed-review CLI help specifies the complete envelope, including its nested
+review. Lifecycle validation admits one bounded expired-credential recovery between a
+review-input syntax refusal and retry, with unchanged sealed evidence and fresh sequential
+status/next bindings; unrelated or unbound mutations remain invalid.
+
+## beta.13.4 candidate: continuation after accepted corrective Plan
+
+This correction is included in beta.13.5; beta.13.4 was not published separately.
+
+The beta.13.3 first-conflict recovery stopped too early: after a replacement Plan
+was accepted and authorized, navigation still applied the old Plan's conflict to
+the now-planned Step. Release acceptance for this correction must exercise the
+complete same-Task sequence through fresh Plan Risk Audit, execution authorization,
+the existing Worker claim, actual Step execution, and another failed review.
+Reaching `task plan-set` alone is not sufficient evidence.
+
+An accepted semantic replacement must be distinguished from a Knowledge-only
+rebind using verified Plan artifacts and audit/review bindings. Historical failures
+and their global ordinals remain append-only. A missing or damaged artifact must
+not silently acknowledge a conflict, and a context refresh must not reopen execution.
+
 ## beta.13.3 explicit Plan conflict recovery
 
 A first independently recorded reviewer `route=replan` with a validated Plan conflict

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-workflow-v2",
-  "version": "2.0.0-beta.13.3",
+  "version": "2.0.0-beta.13.6",
   "description": "Requirements-first Codex development workflow with local state and explicit Git ownership.",
   "repository": {
     "type": "git",

package/plugins/codex-workflow-gateway/skills/codex-workflow-gateway/SKILL.md

@@ -92,6 +92,66 @@ active writer token when the C1 contract requires it. The recovery records only
 `task run` merely to manufacture the second failure, and never invoke this recovery for a generic
 test failure, a writable manifest, or unconfined changes.
 
+When fresh `next` includes `preExecutionReplanOption.state=eligible`, an independent Plan auditor
+may stop a `ready` Task before its next Step because the current implementation Plan is obstructed.
+Use only `task preexecution-replan` with the exact advertised Task revision, Brief hash, Plan hash,
+current Plan Risk Audit event hash, and HEAD. The audit file must be a genuine independent
+`stop-escalate` replacement audit: its planner remains the original planner, its auditor is the
+transition actor, and it retains current guarded categories, review requirements, failure modes,
+evidence commands, and proof bindings while recording the obstruction. This transition requires a
+clean checkout with no Step in progress, C1 posture, or writer lease. It appends immutable audit and
+provenance records, supersedes only current execution authorization, preserves completed Step
+authority and existing delegation scope, and does not require a new approval. After success, run
+sequential `status` then `next`; Core must advertise ordinary `task plan-set`, not audited-remediation
+topology. Submit a semantically changed Plan with the exact Task objective, requirements, and
+acceptance, preserve completed Steps and prior safety boundaries, attach a fresh Plan Risk Audit,
+then obtain fresh execution authorization. Never append an approved audit to the unchanged Plan,
+rebind context around the marker, invent a failure/corrective cause, or invoke the command when the
+option is absent or blocked.
+
+For this route, Core treats each `(Step ID, failureMode, evidence)` tuple as the immutable proof
+binding. It does not claim to understand whether revised `counterexample` or `expectedResult` prose
+is semantically stronger. Changing that prose therefore requires an independent
+`approved-with-rationale` audit, a changed substantive summary, and an explicit rationale; the
+earlier audit remains immutable history for human review.
+
+When the exact beta.13.6 package reports validated root-cause corrective-replan dirty
+carryover, the retained work belongs to a previously failed execution of the same Task.
+Use the fresh advertised `task run` only with the current writer credential and exact
+Task/Step bindings. Core must verify the repeated mechanical cause, historical Plan,
+replacement Plan and independent PRA, authorization, completed evidence, HEAD, dirty
+paths and content hash. Every retained path must already be allowed by the new Step
+and remain outside forbidden scope. A changed binding or blocked assessment is a hard
+stop; never clean, stash, reset, manually commit, or edit state to make it eligible.
+
+The beta.13.6 corrective-carryover update compatibility profile permits its exact
+external runner to execute only the read-only
+`update corrective-carryover-preflight --id <TASK-ID>` against a repository coherently
+pinned to beta.13.5. This is an explicit compatibility inspection, not permission to
+run ordinary transitions with an external or unpublished package. An active writer
+lease blocks transport. Wait for natural expiry. The target compatibility preflight
+may then return only an exact source-package stale-lease repair, after validating the
+sole expired Task lease, its original claimant, Task/Plan/PRA/authorization/HEAD and
+dirty-work bindings. This narrowly scoped preflight action is the authority for that
+source-package repair; do not describe it as an action advertised by the old source
+`next`. An active lease, another lease or any other blocker forbids the repair and
+transport. Never force-release a live lease. Preserve the original C1 claimant and
+hash-bound ownership event, log the preflight and exact repair, then run sequential
+source `status` and `next` and repeat the target preflight.
+
+After repair, require a fresh preflight with `eligible=true`, no blockers, and exact
+Task revision, source HEAD, replacement Plan/PRA/authorization, dirty paths/hash and
+original C1 ownership. Transport only the exact target dependency in `package.json`
+and `package-lock.json`: one commit on the Milestone base in a separate worktree and
+one at Task HEAD, leaving every product byte unchanged. Install the repository-local
+target, then follow fresh navigation through the existing
+`update dependency-provenance-recover` only when it advertises the matching carryover
+binding. Use current bounded credential recovery for the original Worker, and obtain
+fresh validated carryover before `task run`. Unknown history, wider commits, version
+misalignment, changed product bytes, different ownership, pending operations or missing
+bindings stop the update. This profile creates no scope or approval authority and does
+not authorize editing the installed package or Workflow state files.
+
 When fresh `next` advertises `task downstream-proof-recover`, the active proof Step has produced
 uncommitted files inside its own `allowedWrites` and has also exposed required changes owned by one
 or more completed transitive predecessor Steps. Do not invoke `task step-complete`: its scope is
@@ -586,7 +646,13 @@ When `next.strictStepReview.recommendedMode` is `external-sealed`, do not launch
 reviewer from inside a Codex App sandbox. Run the advertised read-only `task step-review-packet`,
 create a separate user-visible reviewer chat for that exact packet, and require one closed
 `ReviewInput` JSON result bound to its reviewed commit. The reviewer must not modify repository or
-Workflow state. Then run only the advertised `task step-review-record` with the unchanged packet
+Workflow state. The `--file` passed to `task step-review-record` must be the full
+`ExternalStrictStepReviewInput` envelope: top-level `protocol`, `packetHash`,
+`repositorySealHash`, `reviewerThreadId`, and `reviewMode` (`ordinary` or `security`), plus the
+nested `review` object containing `status`, `reviewer`, `summary`, and `findings`. Copy both hashes
+and the mode from the packet; do not flatten `review`, and do not pass `--review-mode` to the record
+command because it reads the mode from the JSON file. Run `task step-review-record --help` for a
+complete minimal example. Then run only the advertised `task step-review-record` with the unchanged packet
 and repository-seal hashes, the separate reviewer thread ID, the lifecycle actor from `next`, and
 the active writer token when required. Never author the independent review in the Worker or
 Delivery Coordinator chat, never alter the packet, and never treat an unverified local reviewer
@@ -597,7 +663,11 @@ When `next.strictTaskReview.recommendedMode` is `external-sealed`, apply the sam
 the final submitted-Task review. Run the advertised read-only `task review-packet`, send the exact
 packet to a separate user-visible Independent Reviewer chat, and accept only a closed `ReviewInput`
 bound to the unchanged packet and repository-seal hashes. Record it only through the advertised
-`task review-sealed-record`, using the lifecycle actor from `next` and the active writer token when
+`task review-sealed-record`. Its `--file` must be the analogous full
+`ExternalStrictTaskReviewInput` envelope using protocol
+`codex-workflow-external-strict-task-review-v1`, the packet and repository-seal hashes,
+`reviewerThreadId`, top-level `reviewMode`, and nested `review`; its `--help` contains a minimal
+example. Use the lifecycle actor from `next` and the active writer token when
 required. Do not call `task review-launch` from inside a Codex App sandbox, do not use the Worker or
 Delivery Coordinator as reviewer, and discard the result if a fresh packet changes either hash.
 

package/schemas/preexecution-replan-event.schema.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://codex-workflow.local/schemas/preexecution-replan-event.schema.json",
+  "title": "Codex Workflow V2 Pre-execution Replan Event",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "eventId", "taskId", "sourceTaskRevision", "resultTaskRevision", "briefHash",
+    "sourcePlanHash", "knowledgeMapRevision", "knowledgeMapHash",
+    "sourcePlanRiskAuditEventId", "sourcePlanRiskAuditEventHash",
+    "obstructionPlanRiskAuditEventId", "obstructionPlanRiskAuditEventHash",
+    "sourceExecutionAuthorizationHash", "sourceHeadCommit", "completedStepIds",
+    "completedStepsHash", "actor", "reason", "recordedAt", "previousEventHash", "eventHash"
+  ],
+  "properties": {
+    "eventId": { "type": "string", "pattern": "^PER-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "sourceTaskRevision": { "type": "integer", "minimum": 1 },
+    "resultTaskRevision": { "type": "integer", "minimum": 2 },
+    "briefHash": { "$ref": "#/$defs/hash64" },
+    "sourcePlanHash": { "$ref": "#/$defs/hash64" },
+    "knowledgeMapRevision": { "type": "integer", "minimum": 1 },
+    "knowledgeMapHash": { "$ref": "#/$defs/hash64" },
+    "sourcePlanRiskAuditEventId": { "type": "string", "pattern": "^PRA-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "sourcePlanRiskAuditEventHash": { "$ref": "#/$defs/hash64" },
+    "obstructionPlanRiskAuditEventId": { "type": "string", "pattern": "^PRA-[0-9A-HJKMNP-TV-Z]{26}$" },
+    "obstructionPlanRiskAuditEventHash": { "$ref": "#/$defs/hash64" },
+    "sourceExecutionAuthorizationHash": { "$ref": "#/$defs/hash64" },
+    "sourceHeadCommit": { "type": "string", "pattern": "^[a-f0-9]{40}$" },
+    "completedStepIds": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": { "type": "string", "pattern": "^STEP-[0-9]{3}(?:-[A-Z0-9-]+)?$" }
+    },
+    "completedStepsHash": { "$ref": "#/$defs/hash64" },
+    "actor": { "type": "string", "minLength": 1 },
+    "reason": { "type": "string", "minLength": 1, "maxLength": 2048 },
+    "recordedAt": { "type": "string", "format": "date-time" },
+    "previousEventHash": { "anyOf": [{ "$ref": "#/$defs/hash64" }, { "type": "null" }] },
+    "eventHash": { "$ref": "#/$defs/hash64" }
+  },
+  "$defs": {
+    "hash64": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+  }
+}

package/schemas/task.schema.json

@@ -215,6 +215,61 @@
               }
             },
             "additionalProperties": false
+          },
+          "rootCauseReplan": {
+            "type": "object",
+            "required": [
+              "kind", "taskId", "sourceTaskRevision", "stepId", "sourcePlanHash",
+              "sourcePlanSemanticHash", "replacementPlanHash", "replacementPlanSemanticHash",
+              "sourceHeadCommit", "remediationEvents", "terminalRemediationEventId",
+              "terminalRemediationEventHash", "terminalExecutionTaskRevision",
+              "repeatedCauseFingerprint", "correctiveYieldEventId", "correctiveYieldEventHash",
+              "dirtyFiles", "dirtyWorktreeHash", "replacementPlanRiskAuditEventId",
+              "replacementPlanRiskAuditEventHash", "executionAuthorizationHash",
+              "executionAuthorizationHead", "completedStepsHash", "c1ClaimEventId",
+              "c1ClaimEventHash", "claimant", "compatibilityHash"
+            ],
+            "properties": {
+              "kind": { "const": "root-cause-corrective-replan-dirty-carryover" },
+              "taskId": { "type": "string", "pattern": "^TASK-[0-9A-HJKMNP-TV-Z]{26}$" },
+              "sourceTaskRevision": { "type": "integer", "minimum": 1 },
+              "stepId": { "type": "string", "pattern": "^STEP-[A-Z0-9][A-Z0-9-]{2,63}$" },
+              "sourcePlanHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "sourcePlanSemanticHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "replacementPlanHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "replacementPlanSemanticHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "sourceHeadCommit": { "type": "string", "pattern": "^[a-f0-9]{40}$" },
+              "remediationEvents": {
+                "type": "array", "minItems": 1,
+                "items": {
+                  "type": "object", "required": ["eventId", "eventHash", "attemptOrdinal"],
+                  "properties": {
+                    "eventId": { "type": "string", "pattern": "^RME-[0-9A-HJKMNP-TV-Z]{26}$" },
+                    "eventHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+                    "attemptOrdinal": { "type": "integer", "minimum": 1 }
+                  },
+                  "additionalProperties": false
+                }
+              },
+              "terminalRemediationEventId": { "type": "string", "pattern": "^RME-[0-9A-HJKMNP-TV-Z]{26}$" },
+              "terminalRemediationEventHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "terminalExecutionTaskRevision": { "type": "integer", "minimum": 1 },
+              "repeatedCauseFingerprint": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "correctiveYieldEventId": { "type": "string", "pattern": "^HOF-[a-f0-9]{64}$" },
+              "correctiveYieldEventHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "dirtyFiles": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "type": "string", "minLength": 1 } },
+              "dirtyWorktreeHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "replacementPlanRiskAuditEventId": { "type": "string", "pattern": "^PRA-[0-9A-HJKMNP-TV-Z]{26}$" },
+              "replacementPlanRiskAuditEventHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "executionAuthorizationHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "executionAuthorizationHead": { "type": "string", "pattern": "^[a-f0-9]{40}$" },
+              "completedStepsHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "c1ClaimEventId": { "type": "string", "pattern": "^HOF-[0-9A-HJKMNP-TV-Z]{26}$" },
+              "c1ClaimEventHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" },
+              "claimant": { "type": "string", "minLength": 1 },
+              "compatibilityHash": { "type": "string", "pattern": "^[a-f0-9]{64}$" }
+            },
+            "additionalProperties": false
           }
         },
         "additionalProperties": false