codex-workflow-v2 2.0.0-beta.13 → 2.0.0-beta.13.10

package/README.md

@@ -54,6 +54,11 @@ automation do not import anything from the parent V1 project.
 - beta.12.16 check-support authority: migration checksum/catalog modules imported directly by an
   approved check must be owned by the producing Step; an already-running Step receives only the
   exact machine-proved support path without a Human replan or a synthetic second failure;
+- beta.13.7 retains a completed Step's carryover as verified history so later Steps can
+  replan normally, and binds corrective continuation to the original Worker.
+- beta.13.6 binds dirty work retained by a mechanical root-cause replan to its source failure,
+  exact replacement Plan and audit, current authorization, unchanged HEAD and content hash;
+  navigation and execution share that assessment instead of demanding a clean checkout after replan;
 - read-only Milestone progress projection with stable membership ordinals and replacement links;
 - one project-monotonic `#NNN` chat registry with compact titles, exact readback, and deterministic fallback;
 - narrow, read-only alpha.6 strict-review rescue preflight for the lifecycle deadlock fixed in alpha.7;
@@ -77,7 +82,7 @@ cross-machine synchronization are not part of its contract.
 Node.js 22 or newer is required. Consumers pin the exact package version:
 
 ```bash
-npm install --save-dev --save-exact codex-workflow-v2@2.0.0-beta.13
+npm install --save-dev --save-exact codex-workflow-v2@2.0.0-beta.13.10
 npx codex-workflow gateway handshake --repo .
 npx codex-workflow doctor --repo .
 ```

package/dist/reviewer-runtime-build.json

@@ -1,8 +1,8 @@
 {
   "protocol": "codex-workflow-runtime-build-manifest-v1",
   "packageName": "codex-workflow-v2",
-  "packageVersion": "2.0.0-beta.13",
-  "packageManifestSha256": "9415ccde21cb37ebfddf4939c32d164aaebaf1190b1c1c8e47ac4e7e0de0e050",
+  "packageVersion": "2.0.0-beta.13.10",
+  "packageManifestSha256": "0cc966ad73f63b7e73874346b19ca57fb493adb9daabddb5060c02b7e3967de1",
   "requiredEntrypoints": [
     "dist/src/cli.js",
     "dist/src/gateway-handshake.js",
@@ -26,6 +26,10 @@
       "path": "dist/src/alpha6/downstream-proof.js",
       "sha256": "91dda6e6054f75f245d4f6de55a3adae0d5a8dbd4256e26ab55a13638344bb76"
     },
+    {
+      "path": "dist/src/alpha6/failed-step-planning-recovery.js",
+      "sha256": "a9b1b85c02d9f4854b5077513177ff448575585adca651d893a82dccab8c5bef"
+    },
     {
       "path": "dist/src/alpha6/handoff.js",
       "sha256": "21a2e2f267fc7a18ee48bb9fb98cc28f3fdf5b6065042a9289fcbe37e19374b2"
@@ -52,7 +56,11 @@
     },
     {
       "path": "dist/src/alpha6/plan-risk.js",
-      "sha256": "bacc58d04d9c2adf00c6cf11a5e3fbc7cd17d9aec461f2d7dd7e3888c1807eb2"
+      "sha256": "cb43dec551f76cd3effc54bd72f697af39ec0b7fb49ea84227f9b2669c87256f"
+    },
+    {
+      "path": "dist/src/alpha6/preexecution-replan.js",
+      "sha256": "5f4714ca51e7758e158b8fef1a6e81bd143c1dc24aef4ef4ec7ff68ef9940f87"
     },
     {
       "path": "dist/src/alpha6/remediation-cause.js",
@@ -60,19 +68,23 @@
     },
     {
       "path": "dist/src/alpha6/remediation.js",
-      "sha256": "13cedaed1e9181ec85b0f312cf621ded840c57b975337ce211966ad1499409a8"
+      "sha256": "a3e5d308c3395f33c7f0519e7ea13032c465f1ba39e6cee89b5312549e2a6842"
     },
     {
       "path": "dist/src/alpha6/review.js",
       "sha256": "4eb05ae8fda755c70844f4b62e8bdc0d837376adc7f7ddec27e893fa1e9d3496"
     },
+    {
+      "path": "dist/src/alpha6/root-cause-replan-carryover.js",
+      "sha256": "146a9c8802ab4ac590aa25d8c2a8a8bc10c21ed973b2c587fe96d96f00c4c864"
+    },
     {
       "path": "dist/src/alpha6/store-sidecars.js",
       "sha256": "74245dfe73ef7950ee0aff5d86c35c999347f39364efaba623857847372da2eb"
     },
     {
       "path": "dist/src/alpha7/autonomy.js",
-      "sha256": "9c05ea60cb1f77d62200a8a6506f08953473fe13ee56370ca3369ec741210d79"
+      "sha256": "8f8ce97ea1d765f2884daadc0278c3532c37a6deba8b0dcafebb0e0e7719ea31"
     },
     {
       "path": "dist/src/alpha7/corrective-recovery.js",
@@ -86,13 +98,17 @@
       "path": "dist/src/beta1/project-transaction.js",
       "sha256": "aca86d6baf103866ab7a4a54416e0a231bdd77eda322dae3c6fde35e7f969801"
     },
+    {
+      "path": "dist/src/change-explanation.js",
+      "sha256": "78dcf7feeb3a0770efc6df408942dc382e65ad29853c9055505ae4230e8a0810"
+    },
     {
       "path": "dist/src/cli-actions.js",
-      "sha256": "ef8653d58eced33f41d788260207ca5e63dab5b19e95560b86124c4895f1f39a"
+      "sha256": "184d6bc81d09b06c4bb7b36d8e25dffeea3adf9b5f6671830a12a857b58b682a"
     },
     {
       "path": "dist/src/cli.js",
-      "sha256": "6f8462aeae51176efc890d1af36efffa8bd99c6b045c1f1edefe693e93ec9107"
+      "sha256": "beb3c1c4114a9b09ec4b819b58d96a42637ae0830dfcb82e957933158fa353e6"
     },
     {
       "path": "dist/src/contracts.js",
@@ -112,7 +128,7 @@
     },
     {
       "path": "dist/src/dependency-provenance.js",
-      "sha256": "b08717654880332d285dfe3f4984bda9892c913682cd8d4d8f614a8803429df6"
+      "sha256": "3b8d66bb25764600c73341603d584ab81fe197c2051ec28cdbdf6066b3ee2aaf"
     },
     {
       "path": "dist/src/diagnostics.js",
@@ -126,6 +142,10 @@
       "path": "dist/src/domain/discovery.js",
       "sha256": "29aeedd9f1f4b761fc8b20a8fe3629eb6d3b1b87ea4e20f3bd6e580ea780c4fb"
     },
+    {
+      "path": "dist/src/domain/plan-semantics.js",
+      "sha256": "9434557e45e18367f4fabce20bb061dea801eecf96c3e3fc572515f42254033d"
+    },
     {
       "path": "dist/src/domain/validation.js",
       "sha256": "a42b20451a24fd4eca5ae2ed2884df58b41defbf82940ac7a13a0ff0320fbc2a"
@@ -140,7 +160,7 @@
     },
     {
       "path": "dist/src/gateway-handshake.js",
-      "sha256": "c99251ba299c08451728db2df0509a955a341f1abe693b2330b9a9a02c48666a"
+      "sha256": "17eaf24bda26450989ea72d5af0f15e2701f3840a87be6f4d4c528f39713b4f0"
     },
     {
       "path": "dist/src/git.js",
@@ -196,7 +216,7 @@
     },
     {
       "path": "dist/src/lifecycle/corrective-replan.js",
-      "sha256": "d9bd1ddea57a0b7215eeb9c78c54e9125b93d14349e6948a0909fdb1c00824ed"
+      "sha256": "1fd24430d3adb8ce4b74b1c787fb63ab7e84c545326bea268ce0109ce68dca28"
     },
     {
       "path": "dist/src/lifecycle/evaluator.js",
@@ -244,23 +264,27 @@
     },
     {
       "path": "dist/src/observed-routes.js",
-      "sha256": "a89c3cbeaa7a723a4457e09216684f98f513e396d51a40925c42bc9e2535dd3c"
+      "sha256": "a39d8ed6bf0ddb4f5e884a42526dfb83be619950e36b68cfd0bebb7785af10cd"
     },
     {
       "path": "dist/src/operational-contract.js",
       "sha256": "82b9059813aa248492833200c9def5fe0357132bafadef7de3cbe3b6410652b1"
     },
+    {
+      "path": "dist/src/pending-review-update.js",
+      "sha256": "1d0b33a28dc88257363613e99b9f2bce039cad40c6d0fc1c9f27e8ffb53b8216"
+    },
     {
       "path": "dist/src/repository.js",
-      "sha256": "3e37a61a2283f291e15e341804112e4cf040616cd4e369d8df6d4c1a8d12b35e"
+      "sha256": "e222267fc52cbf6c9bcaf1fca9307ce9eafd745bdb7cc4dae3b549d77ec213ca"
     },
     {
       "path": "dist/src/reviewer.js",
-      "sha256": "118555849d6527f247a58c414e628b723fcf10c454c509b929b616bd4e68b61d"
+      "sha256": "a1a85660dbaecf3a5f8bca7c563d9b5dc2b533b901a330a1f8033645de36d30d"
     },
     {
       "path": "dist/src/state/corrective-replan-executor.js",
-      "sha256": "4de85b96b65b30fd8aa8881de54b026e4c9f0fc68a1a2daa2a0965afe85f03cc"
+      "sha256": "554a0239c87b8a84c7d3cf16a646095e34df5150ef362b74818e77a9c9d1ec55"
     },
     {
       "path": "dist/src/state/corrective-replan-public-schema.js",
@@ -268,7 +292,7 @@
     },
     {
       "path": "dist/src/state/corrective-replan-public.js",
-      "sha256": "c833eb22aaade497dbcca73088e3fbfa5fe29c3ccae34ddeafcd156bf6f60a9b"
+      "sha256": "45963349816fa63636aa64f6d2ba07f7dc0432b461493b1c067f1b02f2f1ba6a"
     },
     {
       "path": "dist/src/state/corrective-replan-transaction.js",
@@ -276,7 +300,7 @@
     },
     {
       "path": "dist/src/state/corrective-yield-executor.js",
-      "sha256": "d2e64c1685829ac99aede6784dc05b487b0ae890cfccd17cd73eae9d53dde97e"
+      "sha256": "29e4568f5fa2e35ed98fe8d3bb1e48278224152c7175205c1878bb8835f3efa9"
     },
     {
       "path": "dist/src/state/corrective-yield-transaction.js",
@@ -288,7 +312,7 @@
     },
     {
       "path": "dist/src/state/store.js",
-      "sha256": "5aa930f73607ce38e0e9d76560e8fafa7390cafcdcbc97d29fdff01f7dfecbf0"
+      "sha256": "575f4bdad35c49dceb2fc2318344c057a801d94788010dc9f21c36f62d61d8c8"
     },
     {
       "path": "dist/src/transition-core.js",
@@ -300,11 +324,11 @@
     },
     {
       "path": "dist/src/version.js",
-      "sha256": "532bbbc50b4b0cb61749cc253b2007477b266feefa28ece9c7f5d6c4d88cffec"
+      "sha256": "70af01eb723d930fc8a9ef129c9025924bd68f8d1a94d56c6318a6c251b9e374"
     },
     {
       "path": "dist/src/workflow.js",
-      "sha256": "19ba1123fd91b42198783a7454d2458280f7987bc8fd5d92646cb3e750356b0f"
+      "sha256": "c72cc02fa5137fb332408d895e73a06facae0907bdecd812062abe3a2ad85282"
     }
   ],
   "runtimeDependencies": [
@@ -1088,5 +1112,5 @@
       ]
     }
   ],
-  "fingerprint": "24543f05f0991859ecc64ec32574ed7a925adf0bc424b9c4ce0dddcd5f2abb62"
+  "fingerprint": "8a07276298cb9987ab90bbe533b17fa09537a9b3c48cf28ea9b04c280115efd7"
 }

package/dist/src/alpha6/failed-step-planning-recovery.d.ts

@@ -0,0 +1,10 @@
+import type { TaskState } from '../contracts.js';
+import type { FileStateStore } from '../state/store.js';
+/** A stopped rebound Plan is evidence for repair, never execution authority. */
+export declare function readFailedStepPlanningRecovery(store: FileStateStore, task: TaskState): {
+    current: import("./plan-risk.js").CurrentPlanRiskAudit;
+    baseline: import("../contracts.js").PlanRiskAuditEvent;
+    priorAuthorization: import("../contracts.js").AuthorizationEvent;
+    authority: "planning-only";
+} | null;
+export declare function readCorrectivePlanningAudit(store: FileStateStore, task: TaskState): import("./plan-risk.js").CurrentPlanRiskAudit | null;

package/dist/src/alpha6/failed-step-planning-recovery.js

@@ -0,0 +1,93 @@
+import { readFileSync } from 'node:fs';
+import path from 'node:path';
+import { WorkflowError } from '../errors.js';
+import { hashKnowledgeMap } from '../memory.js';
+import { canonicalJsonStringify, sha256Hex } from './store-sidecars.js';
+import { readCurrentPlanRiskAudit, readCurrentPlanningObstructionAudit, readPlanRiskAuditEvents } from './plan-risk.js';
+import { assertKnowledgeBindingOnlyPlanChange } from '../alpha7/corrective-recovery.js';
+/** A stopped rebound Plan is evidence for repair, never execution authority. */
+export function readFailedStepPlanningRecovery(store, task) {
+    if (task.status !== 'awaiting_execution_authorization' || !task.planHash
+        || task.workspaceOwner === null || !task.steps.some(step => step.status === 'failed')
+        || task.steps.some(step => step.status === 'in_progress'))
+        return null;
+    const current = readCurrentPlanningObstructionAudit(store, task);
+    if (!current || current.audit.decision !== 'stop-escalate')
+        return null;
+    const fail = (message) => { throw new WorkflowError('TRANSITION_BLOCKED', message, { taskId: task.id }); };
+    const map = store.readKnowledgeMap(task.projectId);
+    if (map.status !== 'active' || map.revision !== task.knowledgeMapRevision || hashKnowledgeMap(map) !== task.knowledgeMapHash)
+        fail('Planning recovery requires the current active Knowledge binding.');
+    const audits = readPlanRiskAuditEvents(store, task);
+    const root = store.taskRoot(task.projectId, task.id);
+    let hash = task.planHash;
+    let knowledgeRevision = task.knowledgeMapRevision;
+    let knowledgeHash = task.knowledgeMapHash;
+    const visited = new Set();
+    const plan = (h) => {
+        const text = readFileSync(h === task.planHash ? path.join(root, 'plan.md') : path.join(root, '.versions', `plan.md.${h}`), 'utf8');
+        if (sha256Hex(text) !== h)
+            fail('Planning recovery Plan artifact hash mismatch.');
+        return text;
+    };
+    while (!visited.has(hash)) {
+        visited.add(hash);
+        const links = task.knowledgeRebinds.filter(record => record.reboundPlanHash === hash);
+        if (links.length !== 1)
+            return fail('Planning recovery requires an unambiguous Knowledge rebind chain.');
+        const link = links[0];
+        if (link.toKnowledgeMapRevision !== knowledgeRevision || link.toKnowledgeMapHash !== knowledgeHash
+            || !link.previousPlanHash)
+            fail('Planning recovery Knowledge rebind endpoints are stale.');
+        const before = plan(link.previousPlanHash), after = plan(hash);
+        assertKnowledgeBindingOnlyPlanChange(before, after);
+        if (!before.includes(`- Knowledge map: revision ${link.fromKnowledgeMapRevision}, hash ${link.fromKnowledgeMapHash}\n`)
+            || !after.includes(`- Knowledge map: revision ${link.toKnowledgeMapRevision}, hash ${link.toKnowledgeMapHash}\n`))
+            fail('Planning recovery artifact Knowledge endpoints differ from the recorded rebind.');
+        hash = link.previousPlanHash;
+        knowledgeRevision = link.fromKnowledgeMapRevision;
+        knowledgeHash = link.fromKnowledgeMapHash;
+        const baseline = audits.filter(a => a.planHash === hash && a.briefHash === task.briefHash
+            && a.knowledgeMapRevision === knowledgeRevision && a.knowledgeMapHash === knowledgeHash
+            && ['approved', 'approved-with-rationale'].includes(a.decision)
+            && audits.indexOf(a) < audits.findIndex(event => event.eventHash === current.audit.eventHash)
+            && task.authorizations.some(grant => grant.kind === 'execution' && grant.decision === 'superseded'
+                && grant.planHash === a.planHash && grant.briefHash === a.briefHash
+                && Date.parse(grant.recordedAt) >= Date.parse(a.recordedAt))).at(-1);
+        if (!baseline)
+            continue;
+        // A negative audit may append an observed counterexample without erasing the
+        // historical proof. Prefix preservation is NOT proof of semantic strengthening:
+        // both audits remain planning evidence, and replacement requires its own gates.
+        const obstructionClassifications = structuredClone(current.audit.stepClassifications);
+        for (const [stepIndex, classification] of obstructionClassifications.entries()) {
+            const original = baseline.stepClassifications[stepIndex];
+            if (!original)
+                return fail('Planning recovery must preserve the approved Step classification ordering.');
+            const proofs = classification.proofObligations ?? [], originalProofs = original.proofObligations ?? [];
+            if (proofs.length !== originalProofs.length)
+                fail('Planning recovery must preserve the approved proof tuple count and ordering.');
+            for (const [proofIndex, proof] of proofs.entries()) {
+                const originalProof = originalProofs[proofIndex];
+                for (const field of ['counterexample', 'expectedResult']) {
+                    if (!proof[field].startsWith(originalProof[field]))
+                        fail('Planning recovery cannot truncate or replace historical proof narratives.');
+                    proof[field] = originalProof[field];
+                }
+            }
+        }
+        if (canonicalJsonStringify(baseline.stepClassifications) !== canonicalJsonStringify(obstructionClassifications))
+            fail('Planning recovery must preserve the approved risk classifications and proof tuples.');
+        const grants = task.authorizations.filter(a => a.kind === 'execution' && a.decision === 'superseded'
+            && a.planHash === baseline.planHash && a.briefHash === baseline.briefHash
+            && Date.parse(a.recordedAt) >= Date.parse(baseline.recordedAt));
+        if (grants.length !== 1)
+            fail('Planning recovery requires one historical superseded Plan authorization.');
+        return { current, baseline, priorAuthorization: grants[0], authority: 'planning-only' };
+    }
+    return fail('Planning recovery Knowledge rebind chain contains a cycle.');
+}
+export function readCorrectivePlanningAudit(store, task) {
+    return readFailedStepPlanningRecovery(store, task)?.current ?? readCurrentPlanRiskAudit(store, task);
+}
+//# sourceMappingURL=failed-step-planning-recovery.js.map

package/dist/src/alpha6/failed-step-planning-recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failed-step-planning-recovery.js","sourceRoot":"","sources":["../../../src/alpha6/failed-step-planning-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,mCAAmC,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACxH,OAAO,EAAE,oCAAoC,EAAE,MAAM,kCAAkC,CAAC;AAExF,gFAAgF;AAChF,MAAM,UAAU,8BAA8B,CAAC,KAAqB,EAAE,IAAe;IACnF,IAAI,IAAI,CAAC,MAAM,KAAK,kCAAkC,IAAI,CAAC,IAAI,CAAC,QAAQ;WACnE,IAAI,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC;WAClF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,MAAM,OAAO,GAAG,mCAAmC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACxE,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,MAAM,GAAG,GAAG,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,oBAAoB,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,gBAAgB;QAC1H,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACrD,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;IACzB,IAAI,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,CAAC;IAClD,IAAI,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;QACnI,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC;QACtF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,mEAAmE,CAAC,CAAC;QACzG,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,IAAI,CAAC,sBAAsB,KAAK,iBAAiB,IAAI,IAAI,CAAC,kBAAkB,KAAK,aAAa;eAC7F,CAAC,IAAI,CAAC,gBAAgB;YAAE,IAAI,CAAC,yDAAyD,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,oCAAoC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,6BAA6B,IAAI,CAAC,wBAAwB,UAAU,IAAI,CAAC,oBAAoB,IAAI,CAAC;eAClH,CAAC,KAAK,CAAC,QAAQ,CAAC,6BAA6B,IAAI,CAAC,sBAAsB,UAAU,IAAI,CAAC,kBAAkB,IAAI,CAAC;YACjH,IAAI,CAAC,iFAAiF,CAAC,CAAC;QAC1F,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC;QAC7B,iBAAiB,GAAG,IAAI,CAAC,wBAAwB,CAAC;QAClD,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;eACpF,CAAC,CAAC,oBAAoB,KAAK,iBAAiB,IAAI,CAAC,CAAC,gBAAgB,KAAK,aAAa;eACpF,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;eAC5D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;eAC1F,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAY;mBAC7F,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS;mBAChE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,6EAA6E;QAC7E,gFAAgF;QAChF,gFAAgF;QAChF,MAAM,0BAA0B,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACtF,KAAK,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,IAAI,0BAA0B,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/E,MAAM,QAAQ,GAAG,QAAQ,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC,4EAA4E,CAAC,CAAC;YACzG,MAAM,MAAM,GAAG,cAAc,CAAC,gBAAgB,IAAI,EAAE,EAAE,cAAc,GAAG,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC;YACvG,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;gBACzC,IAAI,CAAC,8EAA8E,CAAC,CAAC;YACvF,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;gBACnD,MAAM,aAAa,GAAG,cAAc,CAAC,UAAU,CAAE,CAAC;gBAClD,KAAK,MAAM,KAAK,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,CAAU,EAAE,CAAC;oBAClE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;wBAChD,IAAI,CAAC,2EAA2E,CAAC,CAAC;oBACpF,KAAK,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,sBAAsB,CAAC,QAAQ,CAAC,mBAAmB,CAAC,KAAK,sBAAsB,CAAC,0BAA0B,CAAC;YAC7G,IAAI,CAAC,qFAAqF,CAAC,CAAC;QAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,KAAK,YAAY;eAC/F,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;eACtE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,0EAA0E,CAAC,CAAC;QAC1G,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,SAAS,EAAE,eAAwB,EAAE,CAAC;IACpG,CAAC;IACD,OAAO,IAAI,CAAC,4DAA4D,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAqB,EAAE,IAAe;IAChF,OAAO,8BAA8B,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,IAAI,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACvG,CAAC"}

package/dist/src/alpha6/plan-risk.d.ts

@@ -1,5 +1,6 @@
 import type { AdoptionPostureEvent, PlanRiskAuditDecision, PlanRiskAuditEvent, PlanRiskAuditStepClassification, TaskState } from '../contracts.js';
 import type { FileStateStore } from '../state/store.js';
+export declare const STRUCTURAL_PRODUCTION_EDGE_AUTHORITY: "required-v1";
 export interface PlanRiskAuditBoundary {
     scope: 'current-task-steps' | 'legacy-remaining-scope';
     postureEventType: AdoptionPostureEvent['eventType'];
@@ -23,11 +24,14 @@ export declare function readPlanRiskAuditBoundary(store: FileStateStore, task: T
 export declare function readCurrentPlanRiskAudit(store: FileStateStore, task: TaskState, options?: {
     requireCurrentTaskRevision?: boolean;
 }): CurrentPlanRiskAudit | null;
+/** Planning evidence only: never use as execution or authorization authority. */
+export declare function readCurrentPlanningObstructionAudit(store: FileStateStore, task: TaskState): CurrentPlanRiskAudit | null;
 export declare function buildPlanRiskAuditEvent(store: FileStateStore, task: TaskState, input: RecordPlanRiskAuditInput, recordedAt: string, now?: number): {
     boundary: PlanRiskAuditBoundary;
     entityRoot: string;
     event: Omit<PlanRiskAuditEvent, 'previousEventHash' | 'eventHash'>;
 };
+export declare function buildCandidatePlanRiskAuditEvent(store: FileStateStore, task: TaskState, input: RecordPlanRiskAuditInput, recordedAt: string, now?: number): ReturnType<typeof buildPlanRiskAuditEvent>;
 export declare function appendCurrentPlanRiskAudit(store: FileStateStore, task: TaskState, input: RecordPlanRiskAuditInput, now: Date): PlanRiskAuditEvent;
 export declare function validateCorrectiveReplanRiskAuditPayload(task: TaskState, event: Pick<PlanRiskAuditEvent, 'taskId' | 'taskRevision' | 'briefHash' | 'planHash' | 'knowledgeMapRevision' | 'knowledgeMapHash' | 'planner' | 'auditor' | 'summary' | 'decision' | 'splitRationale' | 'stepClassifications'>, expectedStepIds: readonly string[]): void;
 export declare function appendReboundPlanRiskAudit(store: FileStateStore, sourceTask: TaskState, reboundTask: TaskState, sourceAudit: CurrentPlanRiskAudit, now: Date): PlanRiskAuditEvent;

package/dist/src/alpha6/plan-risk.js

@@ -48,6 +48,7 @@ const GUARDED_RISK_CATEGORY_ORDER = [
 ];
 const GUARDED_RISK_CATEGORY_SET = new Set(GUARDED_RISK_CATEGORY_ORDER);
 const GUARDED_RISK_CATEGORY_INDEX = new Map(GUARDED_RISK_CATEGORY_ORDER.map((category, index) => [category, index]));
+export const STRUCTURAL_PRODUCTION_EDGE_AUTHORITY = 'required-v1';
 export function validatePlanRiskAuditCandidate(store, task, input) {
     const boundary = readPlanRiskAuditBoundary(store, task);
     if (!boundary) {
@@ -92,6 +93,13 @@ export function readPlanRiskAuditBoundary(store, task) {
     };
 }
 export function readCurrentPlanRiskAudit(store, task, options = {}) {
+    return readCurrentAudit(store, task, options, false);
+}
+/** Planning evidence only: never use as execution or authorization authority. */
+export function readCurrentPlanningObstructionAudit(store, task) {
+    return readCurrentAudit(store, task, {}, true);
+}
+function readCurrentAudit(store, task, options, allowBlocking) {
     const boundary = readPlanRiskAuditBoundary(store, task);
     if (!boundary)
         return null;
@@ -108,7 +116,7 @@ export function readCurrentPlanRiskAudit(store, task, options = {}) {
             sidecar: PLAN_RISK_AUDIT_SIDECAR,
         });
     }
-    const reviewRequiredStepIds = validateCurrentPlanRiskAudit(store, task, audit, boundary.expectedStepIds, options);
+    const reviewRequiredStepIds = validateCurrentPlanRiskAudit(store, task, audit, boundary.expectedStepIds, options, allowBlocking);
     return {
         ...boundary,
         audit,
@@ -116,6 +124,12 @@ export function readCurrentPlanRiskAudit(store, task, options = {}) {
     };
 }
 export function buildPlanRiskAuditEvent(store, task, input, recordedAt, now = Date.now()) {
+    return buildPlanRiskAuditEventWithAuthority(store, task, input, recordedAt, now, true, true);
+}
+export function buildCandidatePlanRiskAuditEvent(store, task, input, recordedAt, now = Date.now()) {
+    return buildPlanRiskAuditEventWithAuthority(store, task, input, recordedAt, now, true, false);
+}
+function buildPlanRiskAuditEventWithAuthority(store, task, input, recordedAt, now, bindStructuralProductionEdgeAuthority, requireStoredPlan) {
     const boundary = readPlanRiskAuditBoundary(store, task);
     if (!boundary) {
         throw new WorkflowError('TRANSITION_BLOCKED', 'Plan Risk Audit recording requires an active adoption posture boundary.', { taskId: task.id, sidecar: ADOPTION_POSTURE_SIDECAR });
@@ -123,14 +137,14 @@ export function buildPlanRiskAuditEvent(store, task, input, recordedAt, now = Da
     assertRecordableTask(task);
     const entityRoot = store.taskRoot(task.projectId, task.id);
     const briefHash = store.hashArtifact(entityRoot, 'brief.md');
-    const planHash = store.hashArtifact(entityRoot, 'plan.md');
-    if (task.briefHash !== briefHash || task.planHash !== planHash) {
+    const planHash = requireStoredPlan ? store.hashArtifact(entityRoot, 'plan.md') : task.planHash;
+    if (!planHash || task.briefHash !== briefHash || (requireStoredPlan && task.planHash !== planHash)) {
         throw new WorkflowError('STATE_CORRUPT', 'Task state does not match the current Brief or Plan artifacts required for Plan Risk Audit recording.', {
             taskId: task.id,
             stateBriefHash: task.briefHash,
             currentBriefHash: briefHash,
             statePlanHash: task.planHash,
-            currentPlanHash: planHash,
+            currentPlanHash: planHash ?? null,
         });
     }
     if (task.knowledgeMapRevision === null || !task.knowledgeMapHash) {
@@ -153,6 +167,9 @@ export function buildPlanRiskAuditEvent(store, task, input, recordedAt, now = Da
             value: input.decision,
         }),
         splitRationale: normalizeOptionalNonEmptyString(input.splitRationale, 'Plan Risk Audit splitRationale'),
+        ...(bindStructuralProductionEdgeAuthority
+            ? { structuralProductionEdgeAuthority: STRUCTURAL_PRODUCTION_EDGE_AUTHORITY }
+            : {}),
         stepClassifications: normalizePlanRiskClassifications(input.stepClassifications, 'INVALID_ARGUMENT', {
             taskId: task.id,
         }),
@@ -160,7 +177,7 @@ export function buildPlanRiskAuditEvent(store, task, input, recordedAt, now = Da
     validatePlanRiskAuditPayload(task, event, boundary.expectedStepIds, 'INVALID_ARGUMENT', {
         taskId: task.id,
         expectedStepIds: boundary.expectedStepIds,
-    });
+    }, true, bindStructuralProductionEdgeAuthority);
     return {
         boundary,
         entityRoot,
@@ -168,7 +185,10 @@ export function buildPlanRiskAuditEvent(store, task, input, recordedAt, now = Da
     };
 }
 export function appendCurrentPlanRiskAudit(store, task, input, now) {
-    const prepared = buildPlanRiskAuditEvent(store, task, input, now.toISOString(), now.getTime());
+    return appendPlanRiskAuditWithAuthority(store, task, input, now, true);
+}
+function appendPlanRiskAuditWithAuthority(store, task, input, now, bindStructuralProductionEdgeAuthority) {
+    const prepared = buildPlanRiskAuditEventWithAuthority(store, task, input, now.toISOString(), now.getTime(), bindStructuralProductionEdgeAuthority, true);
     const existingEvents = readPlanRiskAuditEvents(store, task);
     assertPlanRiskAuditAppendAllowed(task, prepared.boundary, existingEvents);
     return store.appendSidecarEvent(prepared.entityRoot, PLAN_RISK_AUDIT_SIDECAR, prepared.event, {
@@ -183,7 +203,12 @@ export function validateCorrectiveReplanRiskAuditPayload(task, event, expectedSt
 }
 export function appendReboundPlanRiskAudit(store, sourceTask, reboundTask, sourceAudit, now) {
     assertReboundPlanRiskAuditAllowed(store, sourceTask, reboundTask, sourceAudit);
-    return appendCurrentPlanRiskAudit(store, reboundTask, {
+    const sourceHasStructuralProductionEdgeAuthority = sourceAudit.audit.structuralProductionEdgeAuthority !== undefined
+        || Object.hasOwn(sourceTask, 'requiresProductionEdges')
+        || Object.hasOwn(sourceTask, 'productionEdges')
+        || Object.hasOwn(reboundTask, 'requiresProductionEdges')
+        || Object.hasOwn(reboundTask, 'productionEdges');
+    return appendPlanRiskAuditWithAuthority(store, reboundTask, {
         planner: sourceAudit.audit.planner,
         auditor: sourceAudit.audit.auditor,
         summary: `${sourceAudit.audit.summary} Rebound automatically after content-only Task context refresh.`,
@@ -198,7 +223,7 @@ export function appendReboundPlanRiskAudit(store, sourceTask, reboundTask, sourc
                 ? { proofObligations: classification.proofObligations.map((obligation) => ({ ...obligation })) }
                 : {}),
         })),
-    }, now);
+    }, now, sourceHasStructuralProductionEdgeAuthority);
 }
 function readCurrentAdoptionPosture(store, projectId) {
     const sidecarFile = path.join(store.projectRoot(projectId), ADOPTION_POSTURE_SIDECAR);
@@ -468,13 +493,16 @@ function validateAdoptionBaseline(task, baseline, currentTaskStepIds, posture) {
     }
 }
 function validateStoredPlanRiskAuditEvent(event, task, file, line) {
+    const hasStructuralAuthorityBoundary = event.planHash === task.planHash && (event.structuralProductionEdgeAuthority !== undefined
+        || Object.hasOwn(task, 'requiresProductionEdges')
+        || Object.hasOwn(task, 'productionEdges'));
     validatePlanRiskAuditPayload(task, event, null, 'STATE_CORRUPT', {
         file,
         line,
         eventId: event.eventId,
-    }, false);
+    }, false, hasStructuralAuthorityBoundary);
 }
-function validatePlanRiskAuditPayload(task, event, expectedStepIds, errorCode, details, requireCurrentStepChecks = true) {
+function validatePlanRiskAuditPayload(task, event, expectedStepIds, errorCode, details, requireCurrentStepChecks = true, requireStructuralProductionEdgeAuthority = true) {
     if (event.taskId !== task.id) {
         throw new WorkflowError(errorCode, 'Plan Risk Audit task binding does not match its task root.', {
             ...details,
@@ -500,11 +528,20 @@ function validatePlanRiskAuditPayload(task, event, expectedStepIds, errorCode, d
     normalizeNonEmptyString(event.summary, 'Plan Risk Audit summary', { code: errorCode, ...details });
     normalizePlanRiskDecision(event.decision, errorCode, details);
     normalizeOptionalNonEmptyString(event.splitRationale, 'Plan Risk Audit splitRationale', { code: errorCode, ...details });
+    if (event.structuralProductionEdgeAuthority !== undefined
+        && event.structuralProductionEdgeAuthority !== STRUCTURAL_PRODUCTION_EDGE_AUTHORITY) {
+        throw new WorkflowError(errorCode, 'Plan Risk Audit structural production-edge authority marker is invalid.', {
+            ...details,
+            structuralProductionEdgeAuthority: event.structuralProductionEdgeAuthority,
+        });
+    }
     if (!Array.isArray(event.stepClassifications)) {
         throw new WorkflowError(errorCode, 'Plan Risk Audit stepClassifications must be an array.', details);
     }
     validateStepClassificationSet(task, event.stepClassifications, event.decision, event.splitRationale, expectedStepIds, errorCode, details, requireCurrentStepChecks);
-    validateStructuralProductionEdgeAuthority(task, event.stepClassifications);
+    if (requireStructuralProductionEdgeAuthority) {
+        validateStructuralProductionEdgeAuthority(task, event.stepClassifications);
+    }
 }
 function validateStepClassificationSet(task, classifications, decision, splitRationale, expectedStepIds, errorCode, details, requireCurrentStepChecks = true) {
     const currentTaskStepIds = new Set(task.steps.map((step) => step.id));
@@ -572,7 +609,7 @@ function validateStepClassificationSet(task, classifications, decision, splitRat
         });
     }
 }
-function validateCurrentPlanRiskAudit(store, task, audit, expectedStepIds, options) {
+function validateCurrentPlanRiskAudit(store, task, audit, expectedStepIds, options, allowBlocking = false) {
     const taskRoot = store.taskRoot(task.projectId, task.id);
     const briefHash = store.hashArtifact(taskRoot, 'brief.md');
     const planHash = store.hashArtifact(taskRoot, 'plan.md');
@@ -617,7 +654,7 @@ function validateCurrentPlanRiskAudit(store, task, audit, expectedStepIds, optio
         auditEventId: audit.eventId,
         expectedStepIds,
     });
-    if (audit.decision === 'split-required' || audit.decision === 'stop-escalate') {
+    if (!allowBlocking && (audit.decision === 'split-required' || audit.decision === 'stop-escalate')) {
         throw new WorkflowError('TRANSITION_BLOCKED', `Plan Risk Audit decision ${audit.decision} blocks execution authorization.`, {
             taskId: task.id,
             auditEventId: audit.eventId,