cool-workflow 0.1.98 → 0.2.1

package/docs/contract-migration-tooling.7.md

@@ -173,3 +173,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/control-plane-scheduling.7.md

@@ -157,3 +157,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/durable-state-and-locking.7.md

@@ -156,3 +156,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/evidence-adoption-reasoning-chain.7.md

@@ -317,3 +317,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/execution-backends.7.md

@@ -347,3 +347,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/multi-agent-cli-mcp-surface.7.md

@@ -323,3 +323,7 @@ The host-facing surface tracks the CLI golden-path fixes (`cw -q` routing + repo
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/multi-agent-eval-replay-harness.7.md

@@ -349,3 +349,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/multi-agent-operator-ux.7.md

@@ -361,3 +361,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/node-snapshot-diff-replay.7.md

@@ -182,3 +182,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/observability-cost-accounting.7.md

@@ -113,7 +113,8 @@ read-only metrics panel from the same payload, showing coverage and
 - `cw metrics summary` — the cross-repo rollup over the v0.1.28 run registry:
   pooled rates, summed attested usage/cost with coverage, and per-app and
   per-backend breakdowns. `--scope repo|home`; runs that cannot be read are counted
-  (`unreadableRuns`), never quietly dropped.
+  (`unreadableRuns`), never quietly dropped. `--limit N` caps how many run
+  states are loaded (default 50, matching `run list`/`run search`'s own floor).
 
 MCP hosts call `cw_metrics_show` and `cw_metrics_summary` with the same
 payloads. Old runs load and report `unreported` cost while still giving correct
@@ -241,3 +242,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/project-index.md

@@ -1,15 +1,15 @@
 # Cool Workflow Project Index
 
-Generated from the current repository code on 2026-07-03 by `npm run sync:project-index`.
+Generated from the current repository code on 2026-07-07 by `npm run sync:project-index`.
 
 ## Snapshot
 
 - Package: `cool-workflow`
-- Version: `0.1.98`
-- Source modules: `69`
+- Version: `0.2.1`
+- Source modules: `129`
 - Workflow apps: `8`
 - Docs: `61`
-- Smoke tests: `172`
+- Smoke tests: `178`
 - Repository: https://github.com/coo1white/cool-workflow
 
 ## Architecture
@@ -29,40 +29,40 @@ multi-agent host -> topology -> blackboard/coordinator
 
 | Module | Responsibility |
 | --- | --- |
-| [orchestrator.ts](../src/orchestrator.ts) | Plans runs, loads workflows, records results, writes reports, and exposes runner commands. |
-| [state.ts](../src/state.ts) | Persists run checkpoints, JSON state, run paths, and state migration entrypoints. |
-| [state-node.ts](../src/state-node.ts) | Defines explicit state nodes, pipeline transitions, evidence checks, and node persistence. |
-| [pipeline-contract.ts](../src/pipeline-contract.ts) | Builds the default pipeline contract used by run state. |
-| [pipeline-runner.ts](../src/pipeline-runner.ts) | Finds runnable stages and advances/fails pipeline nodes with retry-aware errors. |
-| [types.ts](../src/types.ts) | Owns the shared workflow, run, app, evidence, worker, candidate, audit, and topology types. |
+| [shell/orchestrator.ts](../src/shell/orchestrator.ts) | Plans runs, loads workflows, records results, writes reports, and exposes runner commands (a thin facade over the shell functions below). |
+| [shell/run-store.ts](../src/shell/run-store.ts) | Persists run checkpoints, JSON state, run paths, and state migration entrypoints. |
+| [core/state/state-node.ts](../src/core/state/state-node.ts) | Defines explicit state nodes, pipeline transitions, evidence checks, and node persistence. |
+| [core/pipeline/contract.ts](../src/core/pipeline/contract.ts) | Builds the default pipeline contract used by run state. |
+| [core/pipeline/runner.ts](../src/core/pipeline/runner.ts) | Finds runnable stages and advances/fails pipeline nodes with retry-aware errors. |
+| [core/state/types.ts](../src/core/state/types.ts) | Owns the shared run/state types: WorkflowRun and everything it carries, StateNode, and the pipeline contract shape. |
 
 ### Verification and state gates
 
 | Module | Responsibility |
 | --- | --- |
-| [verifier.ts](../src/verifier.ts) | Validates result envelopes, findings, evidence, and run gate completion. |
-| [commit.ts](../src/commit.ts) | Creates verifier-gated commits and explicit manual checkpoints. |
-| [candidate-scoring.ts](../src/candidate-scoring.ts) | Registers, scores, ranks, selects, rejects, and summarizes candidate outputs. |
-| [error-feedback.ts](../src/error-feedback.ts) | Turns failures into persisted feedback records and correction tasks. |
-| [trust-audit.ts](../src/trust-audit.ts) | Records provenance, sandbox decisions, host attestations, and acceptance rationale. |
+| [shell/verifier.ts](../src/shell/verifier.ts) | Validates result envelopes, findings, evidence, and run gate completion. |
+| [shell/commit.ts](../src/shell/commit.ts) | Creates verifier-gated commits and explicit manual checkpoints. |
+| [core/multi-agent/candidate-scoring.ts](../src/core/multi-agent/candidate-scoring.ts) | Registers, scores, ranks, selects, rejects, and summarizes candidate outputs. |
+| [core/pipeline/error-feedback.ts](../src/core/pipeline/error-feedback.ts) | Turns failures into persisted feedback records and correction tasks. |
+| [shell/trust-audit.ts](../src/shell/trust-audit.ts) | Records provenance, sandbox decisions, host attestations, and acceptance rationale. |
 
 ### Workers and policy
 
 | Module | Responsibility |
 | --- | --- |
-| [dispatch.ts](../src/dispatch.ts) | Selects runnable tasks and writes dispatch manifests. |
-| [worker-isolation.ts](../src/worker-isolation.ts) | Allocates worker scopes, writes manifests, records worker outputs, and validates boundaries. |
-| [sandbox-profile.ts](../src/sandbox-profile.ts) | Resolves named sandbox policy contracts and validates read/write/command/network boundaries. |
-| [harness.ts](../src/harness.ts) | Renders task files for dispatched work. |
+| [shell/dispatch.ts](../src/shell/dispatch.ts) | Selects runnable tasks and writes dispatch manifests. |
+| [shell/worker-isolation.ts](../src/shell/worker-isolation.ts) | Allocates worker scopes, writes manifests, records worker outputs, and validates boundaries. |
+| [shell/sandbox-profile.ts](../src/shell/sandbox-profile.ts) | Resolves named sandbox policy contracts and validates read/write/command/network boundaries. |
+| [shell/harness.ts](../src/shell/harness.ts) | Renders task files for dispatched work. |
 
 ### Multi-agent layer
 
 | Module | Responsibility |
 | --- | --- |
-| [multi-agent.ts](../src/multi-agent.ts) | Persists multi-agent runs, roles, groups, memberships, fanouts, and fanins. |
-| [coordinator.ts](../src/coordinator.ts) | Owns blackboard topics, messages, context, artifacts, snapshots, and coordinator decisions. |
-| [topology.ts](../src/topology.ts) | Defines and applies official map-reduce, debate, and judge-panel topologies. |
-| [multi-agent-host.ts](../src/multi-agent-host.ts) | Provides the preferred host loop for run, status, step, blackboard, score, and select. |
+| [core/multi-agent/runtime.ts](../src/core/multi-agent/runtime.ts) | Persists multi-agent runs, roles, groups, memberships, fanouts, and fanins. |
+| [core/multi-agent/coordinator.ts](../src/core/multi-agent/coordinator.ts) | Owns blackboard topics, messages, context, artifacts, snapshots, and coordinator decisions. |
+| [core/multi-agent/topology.ts](../src/core/multi-agent/topology.ts) | Defines and applies official map-reduce, debate, and judge-panel topologies. |
+| [shell/multi-agent-host.ts](../src/shell/multi-agent-host.ts) | Provides the preferred host loop for run, status, step, blackboard, score, and select. |
 
 ### User and host surfaces
 
@@ -70,57 +70,117 @@ multi-agent host -> topology -> blackboard/coordinator
 | --- | --- |
 | [cli.ts](../src/cli.ts) | Routes human CLI commands to runtime, app, topology, multi-agent, and operator flows. |
 | [mcp-server.ts](../src/mcp-server.ts) | Exposes JSON-RPC/MCP tool parity for agent hosts. |
-| [operator-ux.ts](../src/operator-ux.ts) | Formats status, reports, graph, worker, candidate, feedback, commit, and trust summaries. |
-| [workflow-app-framework.ts](../src/workflow-app-framework.ts) | Validates app manifests and loads app entrypoints. |
-| [workflow-api.ts](../src/workflow-api.ts) | Provides the fluent workflow, phase, task, artifact, and input API. |
-| [daemon.ts](../src/daemon.ts) | Runs scheduled tasks through the desktop scheduler daemon. |
-| [scheduler.ts](../src/scheduler.ts) | Creates, stores, computes, and runs schedules. |
-| [triggers.ts](../src/triggers.ts) | Bridges routine triggers to explicit workflow events. |
-| [version.ts](../src/version.ts) | Defines current package and state schema versions. |
+| [shell/operator-ux.ts](../src/shell/operator-ux.ts) | Formats status, reports, graph, worker, candidate, feedback, commit, and trust summaries. |
+| [shell/workflow-app-loader.ts](../src/shell/workflow-app-loader.ts) | Validates app manifests and loads app entrypoints. |
+| [core/workflow-apps/app-schema.ts](../src/core/workflow-apps/app-schema.ts) | Provides the fluent workflow, phase, task, artifact, and input API. |
+| [shell/scheduler-io.ts](../src/shell/scheduler-io.ts) | Runs wall-clock schedules, the desktop scheduler daemon tick, and routine triggers. |
+| [core/version.ts](../src/core/version.ts) | Defines current package and state schema versions. |
 
 ### Other Source Modules
 
-- [agent-config.ts](../src/agent-config.ts)
-- [capability-core.ts](../src/capability-core.ts)
-- [capability-registry.ts](../src/capability-registry.ts)
-- [clones.ts](../src/clones.ts)
-- [collaboration.ts](../src/collaboration.ts)
-- [compare.ts](../src/compare.ts)
-- [contract-migration.ts](../src/contract-migration.ts)
-- [doctor.ts](../src/doctor.ts)
-- [drive.ts](../src/drive.ts)
-- [evidence-grounding.ts](../src/evidence-grounding.ts)
-- [evidence-reasoning.ts](../src/evidence-reasoning.ts)
-- [execution-backend.ts](../src/execution-backend.ts)
-- [gates.ts](../src/gates.ts)
-- [ledger.ts](../src/ledger.ts)
-- [loop-expansion.ts](../src/loop-expansion.ts)
-- [mcp-surface.ts](../src/mcp-surface.ts)
-- [multi-agent-eval.ts](../src/multi-agent-eval.ts)
-- [multi-agent-operator-ux.ts](../src/multi-agent-operator-ux.ts)
-- [multi-agent-trust.ts](../src/multi-agent-trust.ts)
-- [node-projection.ts](../src/node-projection.ts)
-- [node-snapshot.ts](../src/node-snapshot.ts)
-- [observability.ts](../src/observability.ts)
-- [onramp.ts](../src/onramp.ts)
-- [reclamation.ts](../src/reclamation.ts)
-- [remote-source.ts](../src/remote-source.ts)
-- [reporter.ts](../src/reporter.ts)
-- [result-normalize.ts](../src/result-normalize.ts)
-- [run-export.ts](../src/run-export.ts)
-- [run-registry.ts](../src/run-registry.ts)
-- [run-state-schema.ts](../src/run-state-schema.ts)
-- [scheduling.ts](../src/scheduling.ts)
-- [schema-validate.ts](../src/schema-validate.ts)
-- [state-explosion.ts](../src/state-explosion.ts)
-- [state-migrations.ts](../src/state-migrations.ts)
-- [telemetry-attestation.ts](../src/telemetry-attestation.ts)
-- [telemetry-demo.ts](../src/telemetry-demo.ts)
-- [telemetry-ledger.ts](../src/telemetry-ledger.ts)
-- [term.ts](../src/term.ts)
-- [validation.ts](../src/validation.ts)
-- [workbench-host.ts](../src/workbench-host.ts)
-- [workbench.ts](../src/workbench.ts)
+- [cli/dispatch.ts](../src/cli/dispatch.ts)
+- [cli/entry.ts](../src/cli/entry.ts)
+- [cli/io.ts](../src/cli/io.ts)
+- [cli/parseargv.ts](../src/cli/parseargv.ts)
+- [core/capability-table.ts](../src/core/capability-table.ts)
+- [core/format/help.ts](../src/core/format/help.ts)
+- [core/format/state-explosion-text.ts](../src/core/format/state-explosion-text.ts)
+- [core/hash.ts](../src/core/hash.ts)
+- [core/multi-agent/collaboration.ts](../src/core/multi-agent/collaboration.ts)
+- [core/multi-agent/eval-replay.ts](../src/core/multi-agent/eval-replay.ts)
+- [core/multi-agent/trust-policy.ts](../src/core/multi-agent/trust-policy.ts)
+- [core/pipeline/commit-gate.ts](../src/core/pipeline/commit-gate.ts)
+- [core/pipeline/dispatch.ts](../src/core/pipeline/dispatch.ts)
+- [core/pipeline/drive-decide.ts](../src/core/pipeline/drive-decide.ts)
+- [core/pipeline/loop-expansion.ts](../src/core/pipeline/loop-expansion.ts)
+- [core/pipeline/result-normalize.ts](../src/core/pipeline/result-normalize.ts)
+- [core/state/contract-migration.ts](../src/core/state/contract-migration.ts)
+- [core/state/migrations.ts](../src/core/state/migrations.ts)
+- [core/state/node-projection.ts](../src/core/state/node-projection.ts)
+- [core/state/node-snapshot.ts](../src/core/state/node-snapshot.ts)
+- [core/state/run-paths.ts](../src/core/state/run-paths.ts)
+- [core/state/schema-validate.ts](../src/core/state/schema-validate.ts)
+- [core/state/schema.ts](../src/core/state/schema.ts)
+- [core/state/state-explosion/digest.ts](../src/core/state/state-explosion/digest.ts)
+- [core/state/state-explosion/graph.ts](../src/core/state/state-explosion/graph.ts)
+- [core/state/state-explosion/helpers.ts](../src/core/state/state-explosion/helpers.ts)
+- [core/state/state-explosion/report.ts](../src/core/state/state-explosion/report.ts)
+- [core/state/state-explosion/size.ts](../src/core/state/state-explosion/size.ts)
+- [core/state/validation.ts](../src/core/state/validation.ts)
+- [core/trust/evidence-grounding.ts](../src/core/trust/evidence-grounding.ts)
+- [core/trust/ledger.ts](../src/core/trust/ledger.ts)
+- [core/trust/telemetry-attestation.ts](../src/core/trust/telemetry-attestation.ts)
+- [core/trust/telemetry-ledger.ts](../src/core/trust/telemetry-ledger.ts)
+- [core/types.ts](../src/core/types.ts)
+- [core/types/boundary.ts](../src/core/types/boundary.ts)
+- [mcp/dispatch.ts](../src/mcp/dispatch.ts)
+- [mcp/server.ts](../src/mcp/server.ts)
+- [shell/agent-config.ts](../src/shell/agent-config.ts)
+- [shell/app-run-cli.ts](../src/shell/app-run-cli.ts)
+- [shell/audit-cli.ts](../src/shell/audit-cli.ts)
+- [shell/audit-provenance.ts](../src/shell/audit-provenance.ts)
+- [shell/candidate-scoring-io.ts](../src/shell/candidate-scoring-io.ts)
+- [shell/collaboration-io.ts](../src/shell/collaboration-io.ts)
+- [shell/commit-summary.ts](../src/shell/commit-summary.ts)
+- [shell/coordinator-io.ts](../src/shell/coordinator-io.ts)
+- [shell/demo-cli.ts](../src/shell/demo-cli.ts)
+- [shell/doctor.ts](../src/shell/doctor.ts)
+- [shell/drive.ts](../src/shell/drive.ts)
+- [shell/error-feedback-io.ts](../src/shell/error-feedback-io.ts)
+- [shell/eval-io.ts](../src/shell/eval-io.ts)
+- [shell/eval-text.ts](../src/shell/eval-text.ts)
+- [shell/evidence-reasoning.ts](../src/shell/evidence-reasoning.ts)
+- [shell/exec-backend-cli.ts](../src/shell/exec-backend-cli.ts)
+- [shell/execution-backend/agent.ts](../src/shell/execution-backend/agent.ts)
+- [shell/execution-backend/ci.ts](../src/shell/execution-backend/ci.ts)
+- [shell/execution-backend/container.ts](../src/shell/execution-backend/container.ts)
+- [shell/execution-backend/envelopes.ts](../src/shell/execution-backend/envelopes.ts)
+- [shell/execution-backend/local.ts](../src/shell/execution-backend/local.ts)
+- [shell/execution-backend/probes.ts](../src/shell/execution-backend/probes.ts)
+- [shell/execution-backend/registry.ts](../src/shell/execution-backend/registry.ts)
+- [shell/execution-backend/remote.ts](../src/shell/execution-backend/remote.ts)
+- [shell/execution-backend/types.ts](../src/shell/execution-backend/types.ts)
+- [shell/feedback-cli.ts](../src/shell/feedback-cli.ts)
+- [shell/feedback-operations.ts](../src/shell/feedback-operations.ts)
+- [shell/fs-atomic.ts](../src/shell/fs-atomic.ts)
+- [shell/ledger-cli.ts](../src/shell/ledger-cli.ts)
+- [shell/ledger-io.ts](../src/shell/ledger-io.ts)
+- [shell/man-cli.ts](../src/shell/man-cli.ts)
+- [shell/metrics-cli.ts](../src/shell/metrics-cli.ts)
+- [shell/multi-agent-cli.ts](../src/shell/multi-agent-cli.ts)
+- [shell/multi-agent-io.ts](../src/shell/multi-agent-io.ts)
+- [shell/multi-agent-operator-ux.ts](../src/shell/multi-agent-operator-ux.ts)
+- [shell/node-store.ts](../src/shell/node-store.ts)
+- [shell/observability-format.ts](../src/shell/observability-format.ts)
+- [shell/observability-intake.ts](../src/shell/observability-intake.ts)
+- [shell/observability.ts](../src/shell/observability.ts)
+- [shell/onramp.ts](../src/shell/onramp.ts)
+- [shell/operator-ux-text.ts](../src/shell/operator-ux-text.ts)
+- [shell/pipeline-cli.ts](../src/shell/pipeline-cli.ts)
+- [shell/pipeline.ts](../src/shell/pipeline.ts)
+- [shell/reclamation-io.ts](../src/shell/reclamation-io.ts)
+- [shell/registry-cli.ts](../src/shell/registry-cli.ts)
+- [shell/remote-source.ts](../src/shell/remote-source.ts)
+- [shell/report-cli.ts](../src/shell/report-cli.ts)
+- [shell/report-view-cli.ts](../src/shell/report-view-cli.ts)
+- [shell/report.ts](../src/shell/report.ts)
+- [shell/reporter.ts](../src/shell/reporter.ts)
+- [shell/run-export-cli.ts](../src/shell/run-export-cli.ts)
+- [shell/run-export.ts](../src/shell/run-export.ts)
+- [shell/run-registry-io.ts](../src/shell/run-registry-io.ts)
+- [shell/scheduling-io.ts](../src/shell/scheduling-io.ts)
+- [shell/state-cli.ts](../src/shell/state-cli.ts)
+- [shell/state-explosion-cli.ts](../src/shell/state-explosion-cli.ts)
+- [shell/telemetry-cli.ts](../src/shell/telemetry-cli.ts)
+- [shell/telemetry-demo.ts](../src/shell/telemetry-demo.ts)
+- [shell/telemetry-ledger-io.ts](../src/shell/telemetry-ledger-io.ts)
+- [shell/term.ts](../src/shell/term.ts)
+- [shell/topology-io.ts](../src/shell/topology-io.ts)
+- [shell/trust-policy-io.ts](../src/shell/trust-policy-io.ts)
+- [shell/workbench-host.ts](../src/shell/workbench-host.ts)
+- [shell/workbench-text.ts](../src/shell/workbench-text.ts)
+- [shell/workbench.ts](../src/shell/workbench.ts)
+- [shell/worker-cli.ts](../src/shell/worker-cli.ts)
 
 ## Workflow Apps
 
@@ -203,6 +263,8 @@ multi-agent host -> topology -> blackboard/coordinator
 
 Smoke tests mirror the public contracts. The high-signal suites are:
 
+- [agent-backend-concurrent-user-env-smoke.js](../test/agent-backend-concurrent-user-env-smoke.js)
+- [agent-backend-user-env-smoke.js](../test/agent-backend-user-env-smoke.js)
 - [agent-config-atomic-write-smoke.js](../test/agent-config-atomic-write-smoke.js)
 - [agent-delegation-drive-smoke.js](../test/agent-delegation-drive-smoke.js)
 - [agent-stream-gate-smoke.js](../test/agent-stream-gate-smoke.js)
@@ -210,6 +272,7 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [architecture-review-fast-automation-smoke.js](../test/architecture-review-fast-automation-smoke.js)
 - [architecture-review-fast-phase-cache-smoke.js](../test/architecture-review-fast-phase-cache-smoke.js)
 - [architecture-review-fast-smoke.js](../test/architecture-review-fast-smoke.js)
+- [architecture-review-question-aware-smoke.js](../test/architecture-review-question-aware-smoke.js)
 - [artifact-integrity-smoke.js](../test/artifact-integrity-smoke.js)
 - [audit-verify-smoke.js](../test/audit-verify-smoke.js)
 - [backend-registry-smoke.js](../test/backend-registry-smoke.js)
@@ -279,6 +342,7 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [mcp-app-surface-smoke.js](../test/mcp-app-surface-smoke.js)
 - [mcp-surface-registry-smoke.js](../test/mcp-surface-registry-smoke.js)
 - [mcp-tool-call-coverage-smoke.js](../test/mcp-tool-call-coverage-smoke.js)
+- [metrics-summary-limit-smoke.js](../test/metrics-summary-limit-smoke.js)
 - [multi-agent-cli-mcp-surface-smoke.js](../test/multi-agent-cli-mcp-surface-smoke.js)
 - [multi-agent-eval-determinism-regression-smoke.js](../test/multi-agent-eval-determinism-regression-smoke.js)
 - [multi-agent-eval-replay-harness-smoke.js](../test/multi-agent-eval-replay-harness-smoke.js)
@@ -298,6 +362,7 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [onramp-check-smoke.js](../test/onramp-check-smoke.js)
 - [opencode-agent-wrapper-smoke.js](../test/opencode-agent-wrapper-smoke.js)
 - [operator-ux-smoke.js](../test/operator-ux-smoke.js)
+- [orphan-runs-gc-smoke.js](../test/orphan-runs-gc-smoke.js)
 - [parallel-onramp-smoke.js](../test/parallel-onramp-smoke.js)
 - [parity-doc-sync-smoke.js](../test/parity-doc-sync-smoke.js)
 - [parse-guard-smoke.js](../test/parse-guard-smoke.js)
@@ -349,6 +414,7 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [sandbox-profile-smoke.js](../test/sandbox-profile-smoke.js)
 - [sched-policy-validation-smoke.js](../test/sched-policy-validation-smoke.js)
 - [schedule-routine-daemon-smoke.js](../test/schedule-routine-daemon-smoke.js)
+- [scheduling-routine-lock-concurrency-smoke.js](../test/scheduling-routine-lock-concurrency-smoke.js)
 - [schema-validation-smoke.js](../test/schema-validation-smoke.js)
 - [security-trust-hardening-smoke.js](../test/security-trust-hardening-smoke.js)
 - [self-audit-hardening-smoke.js](../test/self-audit-hardening-smoke.js)

package/docs/real-execution-backends.7.md

@@ -189,3 +189,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/release-and-migration.7.md

@@ -329,3 +329,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/release-tooling.7.md

@@ -292,3 +292,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/remote-source-review.7.md

@@ -1,15 +1,15 @@
 # Remote-Source Review (`--link`)
 
 CW v0.1.91 lets you point a review at **any repository on the internet** instead
-of only a local path: `cw -q "what are the risks?" --link <url>`. CW materializes
+of only a local path: `cw -q "how does this work?" --link <url>`. CW materializes
 the remote into a local checkout and runs the **existing** review pipeline against
 it — identical downstream to reviewing a folder. A URL passed to `-dir`/`--repo`
 is auto-detected, so `--link <url>` and `-dir <url>` are equivalent.
 
 ```bash
-cw -q "What are the risks?" --link https://github.com/owner/repo
-cw -q "What are the risks?" --link git@gitlab.com:owner/repo.git --ref v1.2.0
-cw -q "What are the risks?" --link https://github.com/owner/repo/archive/refs/heads/main.tar.gz
+cw -q "How does auth work end-to-end here?" --link https://github.com/owner/repo
+cw -q "What are the security risks?" --link git@gitlab.com:owner/repo.git --ref v1.2.0
+cw -q "Is it safe to swap this queue for Redis?" --link https://github.com/owner/repo/archive/refs/heads/main.tar.gz
 cw -q "..." --link <url> --check     # validate the URL + tooling WITHOUT fetching
 ```
 

package/docs/report-verifiable-bundle.7.md

@@ -127,7 +127,7 @@ npx cool-workflow demo bundle
 #      catching both offline with only the embedded public key.
 
 # Run the review AND get a shippable, client-verifiable bundle from ONE command:
-cw quickstart architecture-review --repo . --question "What are the risks?" \
+cw quickstart architecture-review --repo . --question "How does auth work end-to-end here?" \
   --agent-command "claude -p" --bundle --with-trust-key ./trust-pub.pem
 #   -> after the drive COMPLETES, the run is sealed into a self-verified bundle and
 #      the verdict is folded into the quickstart JSON (result.bundle). Exits non-zero

package/docs/run-registry-control-plane.7.md

@@ -472,3 +472,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/run-retention-reclamation.7.md

@@ -107,6 +107,27 @@ scratch dir) is **re-pointed** to the retained `results/<task-id>.md` copy, and
 result-node snapshot is shown to stay `valid` (not `absent`) — so no surviving
 node points to a freed path. Opt out with `--keep-scratch`.
 
+## Orphan runs — a second pure-scratch case, OUTSIDE this transaction
+
+A run directory can also be pure scratch a different way: a process killed or
+interrupted before it ever wrote a first `state.json` (the window between
+`ensureRunDirs` and the first `saveCheckpoint`). Such a directory never becomes a
+`RunRecord` at all, so `gc plan`/`gc run` can never see it, let alone reclaim it —
+`reclaimEligibility` requires a record to classify in the first place. `cw orphans
+list`/`cw orphans gc` (`src/run-registry/orphans.ts`) reclaim exactly this case,
+age-gated by default. Unlike everything else on this page, an orphan sweep
+produces **no skeleton and no tombstone** — there is no durable state to seal, so
+there is nothing to prove. It is a plain, un-audited delete of a directory the
+registry never knew existed, not a new tier of the `live -> archived -> reclaimed`
+lifecycle above.
+
+**Known gap, not covered by either mechanism:** a run stuck `running`/`queued`/
+`blocked` with a perfectly valid but stale `state.json` (its owning process died
+without ever reaching a terminal state) is reclaimed by NEITHER `gc.ts` (fail-closes
+on `non-terminal`, no age override) NOR `orphans.ts` (it has a `state.json`, so it
+is not an orphan candidate). As of this writing nothing in `cw` reclaims that
+class of run; it is left `retained` indefinitely rather than guessed at.
+
 ## CLI
 
 ```
@@ -240,3 +261,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/security-trust-hardening.7.md

@@ -37,7 +37,9 @@ Event sources are clear:
 - `runtime-derived`: CW got the event from run state.
 
 CW does not keep secrets or raw environment values. Environment audit records
-keep names only.
+keep names only — for example, `worker.agent-env` records which provider-namespace
+env var NAMES (`CW_`, `ANTHROPIC_`, `OPENAI_`, and similar) were forwarded from
+the host process to a delegated agent child, queryable via `cw audit summary`/`cw audit`.
 
 ## Enforcement Boundary
 

package/docs/state-explosion-management.7.md

@@ -318,3 +318,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/team-collaboration.7.md

@@ -254,3 +254,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/docs/web-desktop-workbench.7.md

@@ -96,11 +96,21 @@ The console is read-only. It offers no actions. If a later release adds an actio
 capability core entry that already exists — never a side code path — so it cannot drift from the
 CLI/MCP and is covered by the parity gate.
 
+Authentication is opt-in, not on by default: set `CW_WORKBENCH_TOKEN` and every
+request must carry it as `Authorization: Bearer <token>` or `?token=<token>`
+(timing-safe compare); left unset, the loopback/read-only/GET-only controls
+above are the only defense and any local process can read. Pass
+`--require-token` to `cw workbench serve` to fail closed instead: the server
+refuses to start at all unless `CW_WORKBENCH_TOKEN` is already set. This is a
+strict opt-in — leaving it off keeps today's default behavior unchanged.
+(`--require-token` has no effect on `cw_workbench_serve`'s MCP path, which
+never actually binds a listener.)
+
 ## Surfaces
 
 ```
 cw workbench view <run-id> [--json]         # five-panel WorkbenchRunView for one run
-cw workbench serve [--port N] [--scope repo|home] [--once|--json]
+cw workbench serve [--port N] [--scope repo|home] [--once|--json] [--require-token]
 ```
 
 `cw workbench serve` with `--once`/`--json` prints the serve descriptor (bind
@@ -262,3 +272,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.1.97
 
 0.1.98
+
+0.2.0
+
+0.2.1

package/manifest/plugin.manifest.json

@@ -2,7 +2,7 @@
   "_comment": "SINGLE SOURCE OF TRUTH for every vendor manifest. Edit THIS file, then run `npm run gen:manifests`. Do NOT hand-edit the generated vendor manifests (.claude-plugin/, .codex-plugin/, .agents/, .mcp.json) — `npm run gen:manifests -- --check` (run by release:check) will fail if they drift from this source.",
   "identity": {
     "name": "cool-workflow",
-    "version": "0.1.98",
+    "version": "0.2.1",
     "license": "BSD-2-Clause",
     "homepage": "https://github.com/coo1white/cool-workflow",
     "author": {

package/manifest/source-context-profiles.json

@@ -47,11 +47,11 @@
       "description": "MCP and CLI surface context for capability registry, MCP server, CLI routing, and MCP launcher wrappers.",
       "maxLines": 18000,
       "include": [
-        "plugins/cool-workflow/src/capability-core.ts",
-        "plugins/cool-workflow/src/capability-registry.ts",
+        "plugins/cool-workflow/src/core/capability-table.ts",
         "plugins/cool-workflow/src/cli.ts",
+        "plugins/cool-workflow/src/cli/**",
         "plugins/cool-workflow/src/mcp-server.ts",
-        "plugins/cool-workflow/src/types/**",
+        "plugins/cool-workflow/src/mcp/**",
         "plugins/cool-workflow/scripts/cw.js",
         "plugins/cool-workflow/scripts/mcp-server.js",
         "plugins/cool-workflow/package.json",
@@ -72,11 +72,9 @@
       "maxLines": 18000,
       "include": [
         "plugins/cool-workflow/apps/**",
-        "plugins/cool-workflow/src/workflow-app-framework.ts",
-        "plugins/cool-workflow/src/orchestrator.ts",
-        "plugins/cool-workflow/src/orchestrator/**",
-        "plugins/cool-workflow/src/types/workflow-app.ts",
-        "plugins/cool-workflow/src/types/run.ts",
+        "plugins/cool-workflow/src/shell/workflow-app-loader.ts",
+        "plugins/cool-workflow/src/shell/app-run-cli.ts",
+        "plugins/cool-workflow/src/core/workflow-apps/**",
         "plugins/cool-workflow/scripts/canonical-apps.js",
         "plugins/cool-workflow/package.json",
         "plugins/cool-workflow/tsconfig.json"
@@ -121,11 +119,9 @@
       "include": [
         "plugins/cool-workflow/scripts/agents/**",
         "plugins/cool-workflow/scripts/architecture-review-fast.js",
-        "plugins/cool-workflow/src/agent-config.ts",
-        "plugins/cool-workflow/src/execution-backend.ts",
-        "plugins/cool-workflow/src/drive.ts",
-        "plugins/cool-workflow/src/types/execution-backend.ts",
-        "plugins/cool-workflow/src/types/drive.ts",
+        "plugins/cool-workflow/src/shell/agent-config.ts",
+        "plugins/cool-workflow/src/shell/execution-backend/**",
+        "plugins/cool-workflow/src/shell/drive.ts",
         "plugins/cool-workflow/package.json",
         "plugins/cool-workflow/docs/agent-delegation-drive.7.md"
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cool-workflow",
-  "version": "0.1.98",
+  "version": "0.2.1",
   "bin": {
     "cool-workflow": "scripts/cw.js",
     "cw": "scripts/cw.js"