cool-workflow 0.1.94 → 0.1.95

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "cool-workflow",
   "description": "A workflow control plane and run-time you are able to check: it sends out jobs in TypeScript, makes certain of work against facts before it goes through, puts state into fixed records, orders jobs by time, runs jobs again and again, gets a group of agents to do their parts together, and talks MCP. It gives the doing of the work to outside agents — it never runs the models itself.",
-  "version": "0.1.94",
+  "version": "0.1.95",
   "author": {
     "name": "COOLWHITE LLC"
   },

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cool-workflow",
-  "version": "0.1.94",
+  "version": "0.1.95",
   "description": "A workflow control plane and run-time you are able to check: it sends out jobs in TypeScript, makes certain of work against facts before it goes through, puts state into fixed records, orders jobs by time, runs jobs again and again, gets a group of agents to do their parts together, and talks MCP. It gives the doing of the work to outside agents — it never runs the models itself.",
   "author": {
     "name": "COOLWHITE LLC"

package/README.md

@@ -14,6 +14,10 @@
 
 ### Get a saved, cited report from your AI agent — not a chat message you lose.
 
+<br>
+
+<img src="https://raw.githubusercontent.com/coo1white/cool-workflow/main/docs/assets/demo.gif" alt="cw demo tamper — builds a signed ledger, forges it three ways, catches all three" width="100%">
+
 </div>
 
 Point an AI coding agent at a repo (or any folder of docs) and Cool Workflow turns the run into a

package/apps/architecture-review/app.json

@@ -3,7 +3,7 @@
   "id": "architecture-review",
   "title": "Architecture Review",
   "summary": "Map a repository architecture, assess risks, verify important findings, and synthesize an evidence-backed verdict.",
-  "version": "0.1.94",
+  "version": "0.1.95",
   "author": "COOLWHITE LLC",
   "inputs": [
     {

package/apps/architecture-review-fast/app.json

@@ -3,7 +3,7 @@
   "id": "architecture-review-fast",
   "title": "Architecture Review Fast",
   "summary": "Run a shorter architecture review with parallel map and assess phases for faster first results.",
-  "version": "0.1.94",
+  "version": "0.1.95",
   "author": "COOLWHITE LLC",
   "inputs": [
     {

package/apps/end-to-end-golden-path/app.json

@@ -3,7 +3,7 @@
   "id": "end-to-end-golden-path",
   "title": "End-to-End Golden Path",
   "summary": "Deterministic one-worker workflow app for proving the CW integration chain.",
-  "version": "0.1.94",
+  "version": "0.1.95",
   "author": "COOLWHITE LLC",
   "inputs": [
     {

package/apps/pdca-blackboard-loop/app.json

@@ -0,0 +1,45 @@
+{
+  "schemaVersion": 1,
+  "id": "pdca-blackboard-loop",
+  "title": "PDCA Blackboard Loop",
+  "summary": "Three agents use one blackboard to plan, build, check, and choose the next step.",
+  "version": "0.1.0",
+  "author": "COOLWHITE LLC",
+  "inputs": [
+    {
+      "name": "goal",
+      "type": "string",
+      "required": true,
+      "description": "Work goal for the PDCA loop."
+    },
+    {
+      "name": "repo",
+      "type": "string",
+      "description": "Optional repo or folder path."
+    },
+    {
+      "name": "acceptance",
+      "type": "string",
+      "description": "Optional checks that say the work is done."
+    }
+  ],
+  "sandboxProfiles": [
+    "readonly",
+    "workspace-write"
+  ],
+  "compatibility": {
+    "minVersion": "0.1.30"
+  },
+  "metadata": {
+    "example": true,
+    "domain": "coordination",
+    "uses": [
+      "blackboard",
+      "mcp",
+      "pdca"
+    ]
+  },
+  "workflow": {
+    "entrypoint": "workflow.js"
+  }
+}

package/apps/pdca-blackboard-loop/workflow.js

@@ -0,0 +1,59 @@
+module.exports = ({ workflow, phase, agent, input }) => {
+  const inputs = [
+    input("goal", {
+      type: "string",
+      required: true,
+      description: "Work goal for the PDCA loop."
+    }),
+    input("repo", {
+      type: "string",
+      description: "Optional repo or folder path."
+    }),
+    input("acceptance", {
+      type: "string",
+      description: "Optional checks that say the work is done."
+    })
+  ];
+
+  return workflow({
+    id: "pdca-blackboard-loop",
+    title: "PDCA Blackboard Loop",
+    summary: "Three agents use one blackboard to plan, build, check, and choose the next step.",
+    limits: {
+      maxAgents: 4,
+      maxConcurrentAgents: 1
+    },
+    inputs,
+    sandboxProfiles: ["readonly", "workspace-write"],
+    phases: [
+      phase("Plan", [
+        agent(
+          "planner:plan",
+          "Plan the smallest work loop for {{goal}} in {{repo}}. Include acceptance notes: {{acceptance}}. Write the plan so the builder can use it.",
+          { sandboxProfileId: "readonly" }
+        )
+      ]),
+      phase("Do", [
+        agent(
+          "builder:build",
+          "Use the planner output and do the smallest useful work for {{goal}} in {{repo}}. If the plan is missing or unsafe, report blocked instead of success.",
+          { requiresEvidence: true, sandboxProfileId: "workspace-write" }
+        )
+      ]),
+      phase("Check", [
+        agent(
+          "auditor:audit",
+          "Check the builder output against {{acceptance}}. Cite the builder evidence. If evidence is missing, report blocked instead of success.",
+          { requiresEvidence: true, sandboxProfileId: "readonly" }
+        )
+      ]),
+      phase("Act", [
+        agent(
+          "planner:next",
+          "Read the auditor verdict and record one next action for {{goal}}: accepted, revise, or blocked. Cite the audit evidence.",
+          { requiresEvidence: true, sandboxProfileId: "readonly" }
+        )
+      ])
+    ]
+  });
+};

package/apps/pr-review-fix-ci/app.json

@@ -3,7 +3,7 @@
   "id": "pr-review-fix-ci",
   "title": "PR Review Fix CI",
   "summary": "Review a pull request or branch, inspect CI failures, diagnose actionable issues, optionally patch, verify, and summarize with evidence.",
-  "version": "0.1.94",
+  "version": "0.1.95",
   "author": "COOLWHITE LLC",
   "inputs": [
     {

package/apps/release-cut/app.json

@@ -3,7 +3,7 @@
   "id": "release-cut",
   "title": "Release Cut",
   "summary": "Prepare a release with checklist discipline: version checks, changelog, tests, packaging, release notes, and final verification.",
-  "version": "0.1.94",
+  "version": "0.1.95",
   "author": "COOLWHITE LLC",
   "inputs": [
     {

package/apps/research-synthesis/app.json

@@ -3,7 +3,7 @@
   "id": "research-synthesis",
   "title": "Research Synthesis",
   "summary": "Split a research question into claims, investigate sources, cross-check evidence, verify claims, and synthesize a concise answer.",
-  "version": "0.1.94",
+  "version": "0.1.95",
   "author": "COOLWHITE LLC",
   "inputs": [
     {

package/dist/cli/command-surface.js

@@ -80,11 +80,13 @@ async function runCli(argv = process.argv.slice(2)) {
             return;
         }
     }
-    // Map vendor shorthand flags (-claude, -codex, -deepseek) to --agent-command.
+    // Map vendor shorthand flags (-claude, -codex, -gemini, -deepseek) to --agent-command.
     if (args.options.claude)
         args.options["agent-command"] = "builtin:claude";
     if (args.options.codex)
         args.options["agent-command"] = "builtin:codex";
+    if (args.options.gemini)
+        args.options["agent-command"] = "builtin:gemini";
     if (args.options.deepseek)
         args.options["agent-command"] = "builtin:deepseek";
     // -dir / --dir / -d : an intuitive alias for --repo — the project folder to review,

package/dist/orchestrator.js

@@ -812,7 +812,7 @@ function formatHelp() {
     return [
         (0, term_1.bold)("Cool Workflow", out),
         "",
-        "  -q \"question\" [-claude|-codex|-deepseek]  Ask a question, get a report",
+        "  -q \"question\" [-claude|-codex|-gemini|-deepseek]  Ask a question, get a report",
         "  -q \"question\" --link <url>                 Review a remote repo by URL",
         "  version                                   Show version",
         "  update                                    Update to latest release",
@@ -825,6 +825,7 @@ function formatHelp() {
         "  -d, --dir PATH         Project folder to review (alias for --repo)",
         "  -claude                Use Claude agent",
         "  -codex                 Use Codex agent",
+        "  -gemini                Use Gemini (via opencode)",
         "  -deepseek              Use DeepSeek (via opencode)",
         "  --verbose              Show full agent narration live (default: compact)",
         "  --full                 Verbose, plus the report printed inline at the end",

package/dist/version.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MIN_SUPPORTED_RUN_STATE_SCHEMA_VERSION = exports.LEGACY_RUN_STATE_SCHEMA_VERSION = exports.CURRENT_RUN_STATE_SCHEMA_VERSION = exports.WORKFLOW_APP_SCHEMA_VERSION = exports.CURRENT_COOL_WORKFLOW_VERSION = void 0;
-exports.CURRENT_COOL_WORKFLOW_VERSION = "0.1.94";
+exports.CURRENT_COOL_WORKFLOW_VERSION = "0.1.95";
 exports.WORKFLOW_APP_SCHEMA_VERSION = 1;
 exports.CURRENT_RUN_STATE_SCHEMA_VERSION = 1;
 exports.LEGACY_RUN_STATE_SCHEMA_VERSION = 0;

package/docs/agent-delegation-drive.7.md

@@ -344,3 +344,5 @@ The one-command `cw -q` headline now routes the question and defaults the repo t
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/cli-mcp-parity.7.md

@@ -547,3 +547,5 @@ CLI golden-path fixes: `cw -q "…"` routes the question (was read as an app id
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/contract-migration-tooling.7.md

@@ -165,3 +165,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/control-plane-scheduling.7.md

@@ -149,3 +149,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/durable-state-and-locking.7.md

@@ -148,3 +148,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/evidence-adoption-reasoning-chain.7.md

@@ -309,3 +309,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/execution-backends.7.md

@@ -339,3 +339,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/multi-agent-cli-mcp-surface.7.md

@@ -129,6 +129,14 @@ The host surface fails closed when:
 - selection is missing a score or verifier readiness
 - a verifier-gated commit is not ready
 
+## PDCA Blackboard Loop
+
+`pdca-blackboard-loop` is a small workflow app for three-role work over one
+blackboard: planner, builder, and auditor. The host can plan the app, post each
+role result to one board topic through MCP, snapshot after the check step, and
+snapshot again after the next action. Builder, auditor, and next-action tasks
+require grounded evidence, so a verdict with no builder evidence is refused.
+
 ## Smoke Coverage
 
 `test/multi-agent-cli-mcp-surface-smoke.js` covers the full host loop over the
@@ -307,3 +315,5 @@ The host-facing surface tracks the CLI golden-path fixes (`cw -q` routing + repo
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/multi-agent-eval-replay-harness.7.md

@@ -341,3 +341,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/multi-agent-operator-ux.7.md

@@ -353,3 +353,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/node-snapshot-diff-replay.7.md

@@ -174,3 +174,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/observability-cost-accounting.7.md

@@ -233,3 +233,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/project-index.md

@@ -1,15 +1,15 @@
 # Cool Workflow Project Index
 
-Generated from the current repository code on 2026-06-26 by `npm run sync:project-index`.
+Generated from the current repository code on 2026-06-27 by `npm run sync:project-index`.
 
 ## Snapshot
 
 - Package: `cool-workflow`
-- Version: `0.1.94`
+- Version: `0.1.95`
 - Source modules: `68`
-- Workflow apps: `7`
+- Workflow apps: `8`
 - Docs: `53`
-- Smoke tests: `152`
+- Smoke tests: `154`
 - Repository: https://github.com/coo1white/cool-workflow
 
 ## Architecture
@@ -128,6 +128,7 @@ multi-agent host -> topology -> blackboard/coordinator
 | `architecture-review` - Map a repository architecture, assess risks, verify important findings, and synthesize an evidence-backed verdict. | canonical | `repo`, `question`, `invariant`, `focus` | `readonly` | [manifest](../apps/architecture-review/app.json) / [workflow](../apps/architecture-review/workflow.js) |
 | `architecture-review-fast` - Run a shorter architecture review with parallel map and assess phases for faster first results. | canonical | `repo`, `question`, `invariant`, `focus`, `sourceContext`, `sourceContextDigest` | `readonly` | [manifest](../apps/architecture-review-fast/app.json) / [workflow](../apps/architecture-review-fast/workflow.js) |
 | `end-to-end-golden-path` - Deterministic one-worker workflow app for proving the CW integration chain. | userland | `question` | `readonly` | [manifest](../apps/end-to-end-golden-path/app.json) / [workflow](../apps/end-to-end-golden-path/workflow.js) |
+| `pdca-blackboard-loop` - Three agents use one blackboard to plan, build, check, and choose the next step. | example | `goal`, `repo`, `acceptance` | `readonly`, `workspace-write` | [manifest](../apps/pdca-blackboard-loop/app.json) / [workflow](../apps/pdca-blackboard-loop/workflow.js) |
 | `pr-review-fix-ci` - Review a pull request or branch, inspect CI failures, diagnose actionable issues, optionally patch, verify, and summarize with evidence. | canonical | `repo`, `pr`, `branch`, `base`, `ci`, `mode` | `readonly`, `workspace-write` | [manifest](../apps/pr-review-fix-ci/app.json) / [workflow](../apps/pr-review-fix-ci/workflow.js) |
 | `release-cut` - Prepare a release with checklist discipline: version checks, changelog, tests, packaging, release notes, and final verification. | canonical | `repo`, `version`, `previousVersion`, `releaseBranch`, `dryRun` | `readonly`, `workspace-write` | [manifest](../apps/release-cut/app.json) / [workflow](../apps/release-cut/workflow.js) |
 | `research-synthesis` - Split a research question into claims, investigate sources, cross-check evidence, verify claims, and synthesize a concise answer. | canonical | `question`, `source`, `scope`, `freshness` | `readonly`, `locked-down` | [manifest](../apps/research-synthesis/app.json) / [workflow](../apps/research-synthesis/workflow.js) |
@@ -277,6 +278,7 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [operator-ux-smoke.js](../test/operator-ux-smoke.js)
 - [parallel-onramp-smoke.js](../test/parallel-onramp-smoke.js)
 - [parity-doc-sync-smoke.js](../test/parity-doc-sync-smoke.js)
+- [pdca-blackboard-loop-smoke.js](../test/pdca-blackboard-loop-smoke.js)
 - [pii-redaction-smoke.js](../test/pii-redaction-smoke.js)
 - [pipeline-auto-advance-smoke.js](../test/pipeline-auto-advance-smoke.js)
 - [pipeline-runner-smoke.js](../test/pipeline-runner-smoke.js)
@@ -291,6 +293,7 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [readme-trust-claim-smoke.js](../test/readme-trust-claim-smoke.js)
 - [real-execution-backends-smoke.js](../test/real-execution-backends-smoke.js)
 - [registry-corrupt-fail-closed-smoke.js](../test/registry-corrupt-fail-closed-smoke.js)
+- [release-check-skip-smoke.js](../test/release-check-skip-smoke.js)
 - [release-flow-smoke.js](../test/release-flow-smoke.js)
 - [release-gate-smoke.js](../test/release-gate-smoke.js)
 - [release-tooling-smoke.js](../test/release-tooling-smoke.js)

package/docs/real-execution-backends.7.md

@@ -181,3 +181,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/release-and-migration.7.md

@@ -321,3 +321,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/release-tooling.7.md

@@ -268,3 +268,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/run-registry-control-plane.7.md

@@ -464,3 +464,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/run-retention-reclamation.7.md

@@ -232,3 +232,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/state-explosion-management.7.md

@@ -310,3 +310,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/team-collaboration.7.md

@@ -246,3 +246,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/docs/web-desktop-workbench.7.md

@@ -254,3 +254,5 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.93
 
 0.1.94
+
+0.1.95

package/manifest/plugin.manifest.json

@@ -2,7 +2,7 @@
   "_comment": "SINGLE SOURCE OF TRUTH for every vendor manifest. Edit THIS file, then run `npm run gen:manifests`. Do NOT hand-edit the generated vendor manifests (.claude-plugin/, .codex-plugin/, .agents/, .mcp.json) — `npm run gen:manifests -- --check` (run by release:check) will fail if they drift from this source.",
   "identity": {
     "name": "cool-workflow",
-    "version": "0.1.94",
+    "version": "0.1.95",
     "license": "BSD-2-Clause",
     "homepage": "https://github.com/coo1white/cool-workflow",
     "author": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cool-workflow",
-  "version": "0.1.94",
+  "version": "0.1.95",
   "bin": {
     "cool-workflow": "scripts/cw.js",
     "cw": "scripts/cw.js"
@@ -14,7 +14,7 @@
   "bugs": {
     "url": "https://github.com/coo1white/cool-workflow/issues"
   },
-  "description": "A workflow control plane and run-time you are able to check: it sends out jobs in TypeScript, makes certain of work against facts before it goes through, puts state into fixed records, orders jobs by time, runs jobs again and again, gets a group of agents to do their parts together, and talks MCP. It gives the doing of the work to outside agents — it never runs the models itself.",
+  "description": "A workflow control plane and run-time you are able to check: it sends out jobs in TypeScript, makes certain of work against facts before it goes through, puts state into fixed records, orders jobs by time, runs jobs again and again, gets a group of agents to do their parts together, and talks MCP. It gives the doing of the work to outside agents \u2014 it never runs the models itself.",
   "type": "commonjs",
   "engines": {
     "node": ">=18"
@@ -85,5 +85,6 @@
     "llm-pipeline",
     "claude",
     "delegation"
-  ]
+  ],
+  "mcpName": "io.github.coo1white/cool-workflow"
 }

package/scripts/bump-version.js

@@ -79,6 +79,16 @@ function main() {
   const lock = path.join(pluginRoot, "package-lock.json");
   if (fs.existsSync(lock) && replaceFirstVersionField(lock, next)) note("package-lock.json");
 
+  // 2b. Official MCP Registry server metadata (top-level server version + npm package version).
+  const serverJson = path.join(pluginRoot, "server.json");
+  if (fs.existsSync(serverJson)) {
+    const json = JSON.parse(fs.readFileSync(serverJson, "utf8"));
+    json.version = next;
+    if (json.packages && json.packages[0]) json.packages[0].version = next;
+    fs.writeFileSync(serverJson, `${JSON.stringify(json, null, 2)}\n`);
+    note("server.json");
+  }
+
   // 3. src/version.ts runtime constant
   const versionTs = path.join(pluginRoot, "src", "version.ts");
   const vtsText = fs.readFileSync(versionTs, "utf8");

package/scripts/canonical-apps.js

@@ -83,7 +83,7 @@ const canonicalApps = [
       "--source",
       "plugins/cool-workflow/docs/workflow-app-framework.7.md",
       "--scope",
-      "Cool Workflow v0.1.94",
+      "Cool Workflow v0.1.95",
       "--freshness",
       "as of release preparation"
     ]
@@ -117,14 +117,14 @@ function main() {
     assert.ok(summary, `${app.id} must appear in app list`);
     assert.equal(summary.sourceKind, "app-directory");
     assert.equal(summary.legacy, false);
-    assert.equal(summary.version, "0.1.94");
+    assert.equal(summary.version, "0.1.95");
 
     const validation = runJson(["app", "validate", manifestPath]);
     assert.equal(validation.valid, true, `${app.id} manifest must validate`);
 
     const shown = runJson(["app", "show", app.id]);
     assert.equal(shown.app.id, app.id);
-    assert.equal(shown.app.version, "0.1.94");
+    assert.equal(shown.app.version, "0.1.95");
     assert.ok(shown.app.metadata.canonical, `${app.id} must be marked canonical`);
     assert.ok(shown.app.sandboxProfiles.length > 0, `${app.id} must declare sandbox profiles`);
     assertTaskIdsUnique(shown);
@@ -135,7 +135,7 @@ function main() {
     const plan = runJson(["plan", app.id, ...app.args(workspace)]);
     const state = JSON.parse(fs.readFileSync(plan.statePath, "utf8"));
     assert.equal(state.workflow.app.id, app.id);
-    assert.equal(state.workflow.app.version, "0.1.94");
+    assert.equal(state.workflow.app.version, "0.1.95");
     assert.equal(state.workflow.app.metadata.canonical, true);
     assert.ok(state.tasks.some((task) => task.requiresEvidence), `${app.id} plan must include evidence gates`);
     assert.ok(state.tasks.every((task) => task.sandboxProfileId), `${app.id} plan must include sandbox hints`);

package/scripts/dogfood-release.js

@@ -6,7 +6,7 @@ const fs = require("node:fs");
 const path = require("node:path");
 const { CoolWorkflowRunner } = require("../dist/orchestrator.js");
 
-const TARGET_VERSION = "0.1.94";
+const TARGET_VERSION = "0.1.95";
 const PREVIOUS_VERSION = "0.1.31";
 const pluginRoot = path.resolve(__dirname, "..");
 const repoRoot = path.resolve(pluginRoot, "..", "..");

package/scripts/golden-path.js

@@ -33,7 +33,7 @@ function main() {
     const appValidation = runJson(["app", "validate", "end-to-end-golden-path"], pluginRoot);
     assert.equal(appValidation.valid, true);
     assert.equal(appValidation.summary.id, "end-to-end-golden-path");
-    assert.equal(appValidation.summary.version, "0.1.94");
+    assert.equal(appValidation.summary.version, "0.1.95");
 
     const plan = runJson(
       [
@@ -42,7 +42,7 @@ function main() {
         "--repo",
         tmp,
         "--question",
-        "Prove the deterministic v0.1.94 end-to-end golden path."
+        "Prove the deterministic v0.1.95 end-to-end golden path."
       ],
       pluginRoot
     );
@@ -52,7 +52,7 @@ function main() {
 
     let state = readJson(plan.statePath);
     assert.equal(state.workflow.app.id, "end-to-end-golden-path");
-    assert.equal(state.workflow.app.version, "0.1.94");
+    assert.equal(state.workflow.app.version, "0.1.95");
     assert.equal(state.loopStage, "interpret");
 
     const dispatch = runJson(["dispatch", plan.runId, "--limit", "1", "--sandbox", "readonly"], tmp);
@@ -195,7 +195,7 @@ function main() {
     assert.equal(reportPath, plan.reportPath);
     assert.ok(fs.existsSync(reportPath));
     const report = fs.readFileSync(reportPath, "utf8");
-    assert.match(report, /Workflow App: end-to-end-golden-path@0\.1\.94/);
+    assert.match(report, /Workflow App: end-to-end-golden-path@0\.1\.95/);
     assert.match(report, /## Candidates/);
     assert.match(report, /## Trust Audit/);
     assert.match(report, /## Acceptance Rationale/);

package/scripts/release-check.js

@@ -7,6 +7,7 @@ const path = require("node:path");
 
 const pluginRoot = path.resolve(__dirname, "..");
 const repoRoot = path.resolve(pluginRoot, "..", "..");
+const skipTests = process.argv.includes("--skip-tests") || process.env.CW_RELEASE_CHECK_SKIP_TESTS === "1";
 const checks = [
   {
     name: "docs presence",
@@ -87,6 +88,11 @@ function main() {
     process.stdout.write(`release:check ${check.name} ... `);
     const started = Date.now();
     try {
+      if (skipTests && check.name === "tests") {
+        results.push({ name: check.name, ok: true, skipped: true, elapsedMs: 0 });
+        process.stdout.write("skipped\n");
+        continue;
+      }
       if (check.run) check.run();
       else runCommand(check.command);
       const elapsedMs = Date.now() - started;
@@ -103,7 +109,7 @@ function main() {
   const failed = results.filter((entry) => !entry.ok);
   process.stdout.write("\nRelease Check Summary\n");
   for (const result of results) {
-    process.stdout.write(`- ${result.ok ? "PASS" : "FAIL"} ${result.name}\n`);
+    process.stdout.write(`- ${result.skipped ? "SKIP" : result.ok ? "PASS" : "FAIL"} ${result.name}\n`);
   }
   process.stdout.write(`\nDry-run only: no tag, push, publish, or fixture mutation was requested.\n`);
   if (failed.length > 0) {

package/scripts/release-flow.js

@@ -185,6 +185,11 @@ function buildReviewerInput(resultPath) {
     "or:",
     "  REJECTED",
     "  <numbered gate failures with file:line references>",
+    "",
+    "If your host wrapper asks for Markdown, JSON, or a fenced result block, still put",
+    "the exact APPROVED/REJECTED verdict line above as a standalone line outside any",
+    "prose or code fence. The release tool extracts only strict standalone verdict",
+    "lines; prose such as 'Verdict: APPROVED' is not trusted.",
     ""
   ].join("\n");
 }
@@ -250,14 +255,28 @@ function delegateReview(resultPath, inputPath) {
   };
 
   if (cfg.command) {
-    const args = (cfg.args || []).map((a) => substitute(a, subMap));
-    say(`[2/3] reviewer — delegating to: ${cfg.command} ${(cfg.args || []).join(" ")} (model: ${cfg.model || "unreported"})`);
+    // cfg.command can arrive as a SINGLE unsplit multi-token string. A
+    // builtin:<vendor> template (CW_AGENT_COMMAND=builtin:claude) expands to
+    // "node /abs/claude-p-agent.js {{input}} {{result}}" with cfg.args undefined,
+    // and a durable agent-config.json command field is read verbatim (no split).
+    // Split it on whitespace into binary + inline args — the SAME way the
+    // orchestrator does (src/execution-backend/agent.ts resolveAgentInvocation) —
+    // so we spawn the real binary, never one literally named
+    // "node /abs/... {{input}}" (an instant ENOENT the old code mislabeled as a
+    // timeout). An explicit cfg.args array still follows the inline args. A plain
+    // CW_AGENT_COMMAND="claude -p {{input}}" is already pre-split by
+    // resolveAgentConfig, so this leaves it unchanged (no inline args).
+    const parts = cfg.command.split(/\s+/).filter(Boolean);
+    const bin = parts[0];
+    const argTemplate = [...parts.slice(1), ...(cfg.args || [])];
+    const args = argTemplate.map((a) => substitute(a, subMap));
+    say(`[2/3] reviewer — delegating to: ${bin} ${argTemplate.join(" ")} (model: ${cfg.model || "unreported"})`);
     // RED LINE: argv-style, shell:false. The agent runs the model in its own
     // process and inherits its own credentials; CW holds none.
     // Capture stdout so agents that print verdicts (rather than writing the
     // result file) are supported. Agents that DO write the file still work:
     // the file takes precedence. stderr goes to the terminal for live output.
-    const r = spawnSync(cfg.command, args, {
+    const r = spawnSync(bin, args, {
       cwd: repoRoot,
       env: { ...process.env },
       encoding: "utf8",
@@ -266,6 +285,10 @@ function delegateReview(resultPath, inputPath) {
       stdio: ["ignore", "pipe", "inherit"],
       maxBuffer: 32 * 1024 * 1024
     });
+    // A spawn that never started (ENOENT for a missing binary, ETIMEDOUT on the
+    // deadline) sets r.error — surface its real message instead of the old
+    // catch-all "(timeout/no-exit)" that hid the builtin: ENOENT for so long.
+    if (r.error) die(`reviewer agent could not be spawned (${bin}): ${r.error.message} — no verdict trusted.`);
     if (r.status !== 0) die(`reviewer agent exited ${r.status === null ? "(timeout/no-exit)" : r.status} — no verdict trusted.`);
     // If the agent already wrote the verdict file (backward compat), use it.
     // Otherwise extract the verdict from stdout (headless agent path).
@@ -316,6 +339,14 @@ function verifyVerdict(resultPath) {
   const lines = text.split(/\r?\n/);
   const firstLine = lines[0] || "";
   if (firstLine !== `APPROVED ${HEAD}`) {
+    if (firstLine.toUpperCase() !== "REJECTED") {
+      const normalized = extractVerdictFromStdout(text, resultPath);
+      if (normalized && normalized.split(/\r?\n/)[0] === `APPROVED ${HEAD}`) {
+        fs.writeFileSync(resultPath, `${normalized}\n`);
+        const normalizedLines = normalized.split(/\r?\n/);
+        return (normalizedLines[1] || "").trim();
+      }
+    }
     die(`verdict first line must be exactly "APPROVED ${HEAD}" — release blocked.`, text.trim());
   }
   const cap = (lines[1] || "").trim();

package/scripts/version-sync-check.js

@@ -60,6 +60,8 @@ function main() {
   // uses `npm install --no-package-lock`), so only validate it when present.
   checkJsonIfPresent("plugins/cool-workflow/package-lock.json", "version", VERSION, checks);
   checkJson("plugins/cool-workflow/.codex-plugin/plugin.json", "version", VERSION, checks);
+  checkJson("plugins/cool-workflow/server.json", "version", VERSION, checks);
+  checkNestedJson("plugins/cool-workflow/server.json", ["packages", 0, "version"], VERSION, checks);
   checkNestedJson("plugins/cool-workflow/manifest/plugin.manifest.json", ["identity", "version"], VERSION, checks);
   checkJson("plugins/cool-workflow/.claude-plugin/plugin.json", "version", VERSION, checks);
   checkJson("plugins/cool-workflow/.gemini-plugin/plugin.json", "version", VERSION, checks);