cool-workflow 0.2.0 → 0.2.1

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "cool-workflow",
   "description": "A workflow control plane and run-time you are able to check: it sends out jobs in TypeScript, makes certain of work against facts before it goes through, puts state into fixed records, orders jobs by time, runs jobs again and again, gets a group of agents to do their parts together, and talks MCP. It gives the doing of the work to outside agents — it never runs the models itself.",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": {
     "name": "COOLWHITE LLC"
   },

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cool-workflow",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "A workflow control plane and run-time you are able to check: it sends out jobs in TypeScript, makes certain of work against facts before it goes through, puts state into fixed records, orders jobs by time, runs jobs again and again, gets a group of agents to do their parts together, and talks MCP. It gives the doing of the work to outside agents — it never runs the models itself.",
   "author": {
     "name": "COOLWHITE LLC"

package/README.md

@@ -64,16 +64,18 @@ cw demo tamper
 ### 2 · Ask a question about your code — one command
 
 ```bash
-cw -q "What are the main risks here?"
+cw -q "How does auth work end-to-end here?"
 ```
 
-CW auto-detects the current repo and the first agent on your `PATH`. Pin a specific one with a flag
-(`-claude`, `-codex`, `-gemini`, `-deepseek`). Point it anywhere — no `cd` required — or review a
-**remote repo by URL** and CW clones, snapshots, and reviews the checkout:
+Any question works, not only a risk audit — architecture questions, "is it safe to change X",
+"what would break if Y rotated" all get a direct, cited answer. CW auto-detects the current repo
+and the first agent on your `PATH`. Pin a specific one with a flag (`-claude`, `-codex`, `-gemini`,
+`-deepseek`). Point it anywhere — no `cd` required — or review a **remote repo by URL** and CW
+clones, snapshots, and reviews the checkout:
 
 ```bash
 cw -q "What are the security risks?" -dir /path/to/project
-cw -q "What are the risks?" --link https://github.com/owner/repo
+cw -q "Is it safe to swap this queue for Redis?" --link https://github.com/owner/repo
 ```
 
 **Not just code.** Aim CW at a folder of docs, notes, or papers and it reads them as sources for the

package/apps/architecture-review/app.json

@@ -3,7 +3,7 @@
   "id": "architecture-review",
   "title": "Architecture Review",
   "summary": "Map a repository architecture, assess risks, verify important findings, and synthesize an evidence-backed verdict.",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": "COOLWHITE LLC",
   "inputs": [
     {
@@ -16,7 +16,7 @@
       "name": "question",
       "type": "string",
       "required": true,
-      "description": "Architecture question or decision to review."
+      "description": "Architecture question or decision to review. Every phase scopes its work to this question - not only a fixed risk list."
     },
     {
       "name": "invariant",

package/apps/architecture-review/workflow.js

@@ -8,7 +8,7 @@ module.exports = ({ workflow, phase, parallel, agent, artifact, input }) => {
     input("question", {
       type: "string",
       required: true,
-      description: "Architecture question or decision to review."
+      description: "Architecture question or decision to review. Every phase scopes its work to this question - not only a fixed risk list."
     }),
     input("invariant", {
       type: "string",
@@ -41,54 +41,54 @@ module.exports = ({ workflow, phase, parallel, agent, artifact, input }) => {
         ),
         agent(
           "map:web-client",
-          "Map web/client/UI boundaries, local state, backend dependencies, build/runtime assumptions, and candidate risks in {{repo}}. Focus: {{focus}}. Return exact files and commands that informed the map.",
+          "Map web/client/UI boundaries, local state, backend dependencies, build/runtime assumptions, and candidate risks in {{repo}} as they relate to {{question}}. Focus: {{focus}}. Invariants: {{invariant}}. Return exact files and commands that informed the map.",
           { sandboxProfileId: "readonly" }
         ),
         agent(
           "map:db-security",
-          "Map database, persistence, migrations, secrets, auth, permissions, and security-sensitive paths in {{repo}}. Return candidate risks with file paths, config names, and uncertainty boundaries.",
+          "Map database, persistence, migrations, secrets, auth, permissions, and security-sensitive paths in {{repo}} as they relate to {{question}}. Focus: {{focus}}. Invariants: {{invariant}}. Return candidate risks with file paths, config names, and uncertainty boundaries.",
           { sandboxProfileId: "readonly" }
         ),
         agent(
           "map:deploy-config",
-          "Map deployment, CI, package scripts, Docker or compose files, reverse proxies, environment config, supervision, and operational assumptions. Return concrete files and release or runtime risks.",
+          "Map deployment, CI, package scripts, Docker or compose files, reverse proxies, environment config, supervision, and operational assumptions in {{repo}} as they relate to {{question}}. Focus: {{focus}}. Invariants: {{invariant}}. Return concrete files and release or runtime risks.",
           { sandboxProfileId: "readonly" }
         ),
         agent(
           "map:jobs-operators",
-          "Map background jobs, admin/operator surfaces, queues, scheduled work, generated files, state transitions, and failure recovery paths. Identify missing or non-applicable areas explicitly.",
+          "Map background jobs, admin/operator surfaces, queues, scheduled work, generated files, state transitions, and failure recovery paths in {{repo}} as they relate to {{question}}. Focus: {{focus}}. Invariants: {{invariant}}. Identify missing or non-applicable areas explicitly.",
           { sandboxProfileId: "readonly" }
         ),
         agent(
           "map:transport-core",
-          "Map protocol, daemon, transport, rendering, networking, worker isolation, or core engine boundaries when present. If absent, explain why with inspected evidence.",
+          "Map protocol, daemon, transport, rendering, networking, worker isolation, or core engine boundaries when present in {{repo}}, as they relate to {{question}}. Focus: {{focus}}. Invariants: {{invariant}}. If absent, explain why with inspected evidence.",
           { sandboxProfileId: "readonly" }
         )
       ]),
       parallel("Assess", [
         agent(
           "assess:security",
-          "Assess mapper findings through a security lens. Separate real, conditional, non-issue, and unknown risks with evidence, falsifiers, and exact files or config keys.",
+          "Assess mapper findings through a security lens as they relate to {{question}}. Focus: {{focus}}. Invariants: {{invariant}}. Separate real, conditional, non-issue, and unknown risks with evidence, falsifiers, and exact files or config keys.",
           { sandboxProfileId: "readonly" }
         ),
         agent(
           "assess:data-correctness",
-          "Assess data correctness, schema drift, persistence invariants, concurrency, transactions, cache behavior, and state corruption risks. Tie every important claim to inspected evidence.",
+          "Assess data correctness, schema drift, persistence invariants, concurrency, transactions, cache behavior, and state corruption risks as they relate to {{question}}. Focus: {{focus}}. Invariants: {{invariant}}. Tie every important claim to inspected evidence.",
           { sandboxProfileId: "readonly" }
         ),
         agent(
           "assess:failure-modes",
-          "Assess startup, shutdown, retries, partial failure, dependency outage, backup/restore, release rollback, and recovery behavior. Identify deterministic commands that could verify the claims.",
+          "Assess startup, shutdown, retries, partial failure, dependency outage, backup/restore, release rollback, and recovery behavior as they relate to {{question}}. Focus: {{focus}}. Invariants: {{invariant}}. Identify deterministic commands that could verify the claims.",
           { sandboxProfileId: "readonly" }
         ),
         agent(
           "assess:scale-ops",
-          "Assess scale, operational complexity, observability, configuration, packaging, deployment, and maintenance risks. Include exact files, scripts, or missing controls.",
+          "Assess scale, operational complexity, observability, configuration, packaging, deployment, and maintenance risks as they relate to {{question}}. Focus: {{focus}}. Invariants: {{invariant}}. Include exact files, scripts, or missing controls.",
           { sandboxProfileId: "readonly" }
         ),
         agent(
           "assess:maintainability",
-          "Assess module boundaries, ownership clarity, coupling, extensibility, testability, and future change risk. Distinguish architectural risks from style preferences.",
+          "Assess module boundaries, ownership clarity, coupling, extensibility, testability, and future change risk as they relate to {{question}}. Focus: {{focus}}. Invariants: {{invariant}}. Distinguish architectural risks from style preferences.",
           { sandboxProfileId: "readonly" }
         ),
         agent(
@@ -100,7 +100,7 @@ module.exports = ({ workflow, phase, parallel, agent, artifact, input }) => {
       phase("Verify", [
         agent(
           "verify:p0-p2-risks",
-          "Re-open evidence for every candidate P0/P1/P2 risk. Confirm real risks, downgrade unsupported concerns, and list exact file paths, commands, logs, or unknowns. The cw:result evidence array must cite durable locators.",
+          "Re-open evidence for every candidate P0/P1/P2 risk found so far, judged against {{question}}. Confirm real risks, downgrade unsupported concerns, and list exact file paths, commands, logs, or unknowns. The cw:result evidence array must cite durable locators.",
           { requiresEvidence: true, sandboxProfileId: "readonly" }
         )
       ]),

package/apps/architecture-review-fast/app.json

@@ -3,7 +3,7 @@
   "id": "architecture-review-fast",
   "title": "Architecture Review Fast",
   "summary": "Run a shorter architecture review with parallel map and assess phases for faster first results.",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": "COOLWHITE LLC",
   "inputs": [
     {

package/apps/end-to-end-golden-path/app.json

@@ -3,7 +3,7 @@
   "id": "end-to-end-golden-path",
   "title": "End-to-End Golden Path",
   "summary": "Deterministic one-worker workflow app for proving the CW integration chain.",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": "COOLWHITE LLC",
   "inputs": [
     {

package/apps/pr-review-fix-ci/app.json

@@ -3,7 +3,7 @@
   "id": "pr-review-fix-ci",
   "title": "PR Review Fix CI",
   "summary": "Review a pull request or branch, inspect CI failures, diagnose actionable issues, optionally patch, verify, and summarize with evidence.",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": "COOLWHITE LLC",
   "inputs": [
     {

package/apps/release-cut/app.json

@@ -3,7 +3,7 @@
   "id": "release-cut",
   "title": "Release Cut",
   "summary": "Prepare a release with checklist discipline: version checks, changelog, tests, packaging, release notes, and final verification.",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": "COOLWHITE LLC",
   "inputs": [
     {

package/apps/research-synthesis/app.json

@@ -3,7 +3,7 @@
   "id": "research-synthesis",
   "title": "Research Synthesis",
   "summary": "Split a research question into claims, investigate sources, cross-check evidence, verify claims, and synthesize a concise answer.",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": "COOLWHITE LLC",
   "inputs": [
     {

package/dist/cli/dispatch.js

@@ -1,7 +1,7 @@
 "use strict";
 // cli/dispatch.ts — the generic CLI executor over core/capability-table.ts.
 //
-// MILESTONE 2 (v2/PLAN.md build order, step 2; see the Revision note there
+// MILESTONE 2 (docs/rebuild/PLAN.md build order, step 2; see the Revision note there
 // for why this lands here, right after CLI parsing, instead of late).
 //
 // `dispatch(args)` first tries the CAPABILITY TABLE: it looks up the row
@@ -16,7 +16,7 @@
 // cli-argv-parsing.case.js and cli-exit-codes.case.js probe but that do
 // not yet have a real subsystem behind them (see each case's own
 // PLACEHOLDER comment for which future milestone owns it). Per the
-// Revision note in v2/PLAN.md, THIS file is never hand-extended again —
+// Revision note in docs/rebuild/PLAN.md, THIS file is never hand-extended again —
 // `dispatchLegacy`'s arms shrink to nothing as later milestones move each
 // one into a real capability-table row; nothing new is ever added here.
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/cli/parseargv.js

@@ -2,7 +2,7 @@
 // cli/parseargv.ts — parseArgv, KNOWN_COMMANDS, suggestCommand.
 //
 // Pure. Byte-exact port of src/orchestrator.ts:789-887 in the old build.
-// See v2/PLAN.md byte-compat item 15 and SPEC/cli-surface.md "Argument
+// See docs/rebuild/PLAN.md byte-compat item 15 and SPEC/cli-surface.md "Argument
 // parsing (parseArgv)" / SPEC/orchestrator.md "Module-level exports".
 //
 // Rules (do not "clean up" — every one of these is pinned by a conformance
@@ -103,7 +103,7 @@ function parseArgv(argv) {
 /** src/orchestrator.ts:842-851 — every top-level command name, used for
  *  "did you mean". NOTE: this deliberately does NOT include "ledger" even
  *  though the dispatcher handles it and formatHelp lists it — a known,
- *  intentionally-preserved wart (see v2/PLAN.md "Kept byte-for-byte"). */
+ *  intentionally-preserved wart (see docs/rebuild/PLAN.md "Kept byte-for-byte"). */
 exports.KNOWN_COMMANDS = new Set([
     "help", "list", "doctor", "info", "search", "man", "init", "quickstart",
     "plan", "status", "next", "dispatch", "result", "state", "commit", "report",

package/dist/core/capability-table.js

@@ -1,7 +1,7 @@
 "use strict";
 // core/capability-table.ts — THE one data table: one row per capability.
 //
-// MILESTONE 2 (v2/PLAN.md build order, step 2). Replaces the old build's
+// MILESTONE 2 (docs/rebuild/PLAN.md build order, step 2). Replaces the old build's
 // `capability-registry.ts` (940 lines) + 40 CLI handler files + the
 // 196-arm MCP switch + the 1000-line tool-definitions array with ONE data
 // table plus two generic front-door readers (`cli/dispatch.ts`,
@@ -12,9 +12,9 @@
 // exactly what conformance/cases/mcp-basic.case.js and the milestone-1
 // carry-over cases need). Every later milestone adds capabilities as table
 // ROWS ONLY; this file's shape (and cli/dispatch.ts + mcp/dispatch.ts) is
-// not touched again — see v2/PLAN.md's Revision note.
+// not touched again — see docs/rebuild/PLAN.md's Revision note.
 //
-// Byte-compat item 5 (v2/PLAN.md): 12 capabilities have CLI and MCP call
+// Byte-compat item 5 (docs/rebuild/PLAN.md): 12 capabilities have CLI and MCP call
 // DIFFERENT functions with DIFFERENT payloads. So a row carries a SEPARATE
 // `cli.handler` and `mcp.handler`, never one shared "handler" — even
 // though every row landed so far happens to share one function, the type
@@ -67,9 +67,6 @@ var __importStar = (this && this.__importStar) || (function () {
         return result;
     };
 })();
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CAPABILITY_REGISTRY = exports.REGISTRY = exports.CapabilityNotImplementedError = void 0;
 exports.listBundledWorkflows = listBundledWorkflows;
@@ -149,7 +146,7 @@ const MCP_TOOL_DATA = [
     { tool: "cw_operator_report", capability: "operator.report", requiredArgs: ["runId"], properties: ["runId", "cwd"], description: "Refresh and read the structured Operator UX report summary." },
     { tool: "cw_worker_summary", capability: "worker.summary", requiredArgs: ["runId"], properties: ["runId", "cwd"], description: "Read the structured worker summary for a run." },
     { tool: "cw_workbench_view", capability: "workbench.view", requiredArgs: ["runId"], properties: ["runId", "cwd"], description: "Read the read-only five-panel Workbench view of one run (graph, blackboard, worker, candidate, audit)." },
-    { tool: "cw_workbench_serve", capability: "workbench.serve", requiredArgs: [], properties: ["cwd", "port", "scope"], description: "Describe/serve the optional localhost-only, read-only Workbench host." },
+    { tool: "cw_workbench_serve", capability: "workbench.serve", requiredArgs: [], properties: ["cwd", "port", "scope", "requireToken"], description: "Describe/serve the optional localhost-only, read-only Workbench host. requireToken is a CLI-only opt-in (the MCP path never actually binds, so it is a no-op here)." },
     { tool: "cw_candidate_summary", capability: "candidate.summary", requiredArgs: ["runId"], properties: ["runId", "cwd"], description: "Read the structured candidate summary for a run." },
     { tool: "cw_feedback_summary", capability: "feedback.summary", requiredArgs: ["runId"], properties: ["runId", "cwd"], description: "Read the structured feedback summary for a run." },
     { tool: "cw_commit_summary", capability: "commit.summary", requiredArgs: ["runId"], properties: ["runId", "cwd"], description: "Read the structured commit summary for a run." },
@@ -285,7 +282,7 @@ const MCP_TOOL_DATA = [
     { tool: "cw_registry_refresh", capability: "registry.refresh", requiredArgs: [], properties: ["cwd", "scope"], description: "Recompute and persist the derived run registry index." },
     { tool: "cw_registry_show", capability: "registry.show", requiredArgs: [], properties: ["cwd", "scope"], description: "Read the run registry index with valid|stale|absent freshness." },
     { tool: "cw_metrics_show", capability: "metrics.show", requiredArgs: ["runId"], properties: ["runId", "cwd", "pricing", "now"], description: "Read the derived per-run observability + attested-cost report (durations, failure/verifier/acceptance rates with sample counts, attested usage, cost, coverage)." },
-    { tool: "cw_metrics_summary", capability: "metrics.summary", requiredArgs: [], properties: ["cwd", "scope", "pricing", "now"], description: "Read the cross-repo observability + cost rollup over the v0.1.28 run registry, with per-app and per-backend breakdowns." },
+    { tool: "cw_metrics_summary", capability: "metrics.summary", requiredArgs: [], properties: ["cwd", "scope", "pricing", "now", "limit"], description: "Read the cross-repo observability + cost rollup over the v0.1.28 run registry, with per-app and per-backend breakdowns." },
     { tool: "cw_run_search", capability: "run.search", requiredArgs: [], properties: ["cwd", "scope", "text", "app", "status", "repo", "since", "until", "includeArchived", "limit", "offset"], description: "Search runs by app/status/time/repo/free-text, deterministic + paginated." },
     { tool: "cw_run_list", capability: "run.list", requiredArgs: [], properties: ["cwd", "scope", "includeArchived", "limit", "offset"], description: "List indexed runs across repos (search with no filters)." },
     { tool: "cw_run_show", capability: "run.show", requiredArgs: ["runId"], properties: ["runId", "cwd", "scope"], description: "Resolve one run by id across the registry; fail closed on missing source." },
@@ -487,7 +484,7 @@ function findCapabilityByMcpTool(tool) {
 // dispatchable command row); `list`/`status`/`sandbox.list` reuse the mcp
 // row's capability id and get a cli binding layered on top. Every handler
 // below returns a `CliHandlerResult`; core/ never touches process.stdout
-// or process.exitCode directly (see v2/PLAN.md's core/shell split) —
+// or process.exitCode directly (see docs/rebuild/PLAN.md's core/shell split) —
 // cli/dispatch.ts's generic executor performs the actual write.
 // ---------------------------------------------------------------------
 const version_1 = require("./version");
@@ -830,7 +827,7 @@ addCliOnlyCapability("fix", "Print consolidated fix commands for CW setup issues
     },
 }, "Environment fix commands are local diagnostics, same reasoning as doctor.");
 // ---------------------------------------------------------------------
-// MILESTONE 6+7 (combined; see v2/PLAN.md Open risk 10) CLI bindings:
+// MILESTONE 6+7 (combined; see docs/rebuild/PLAN.md Open risk 10) CLI bindings:
 // plan, quickstart, run --drive, run drive (preview), dispatch, result,
 // commit. Handler BODIES live in shell/pipeline-cli.ts (impure — they
 // plan/drive/dispatch/commit real run state on disk); this table only
@@ -1843,7 +1840,6 @@ const registry_cli_1 = require("../shell/registry-cli");
 const reclamation_io_1 = require("../shell/reclamation-io");
 const run_registry_io_1 = require("../shell/run-registry-io");
 const scheduling_io_1 = require("../shell/scheduling-io");
-const node_fs_1 = __importDefault(require("node:fs"));
 function firstPositionalArg(args, index = 0) {
     return args.positionals[index];
 }
@@ -1936,13 +1932,7 @@ addCliOnlyCapability("routine", "cw routine create|list|delete|fire|events — A
                 return { json: (0, registry_cli_1.routineDeleteCli)((0, io_1.required)(idOrKind, "trigger id"), args.options) };
             case "fire": {
                 const kind = (0, io_1.required)(idOrKind, "trigger kind");
-                let payload;
-                try {
-                    payload = payloadPath ? JSON.parse(node_fs_1.default.readFileSync(payloadPath, "utf8")) : args.options;
-                }
-                catch (e) {
-                    throw new Error(`Failed to parse payload${payloadPath ? ` file "${payloadPath}"` : ""}: ${String((e && e.message) || e)}`);
-                }
+                const payload = (0, registry_cli_1.resolveRoutineFirePayload)(payloadPath, args.options);
                 return { json: (0, registry_cli_1.routineFireCli)(kind, payload, args.options) };
             }
             case "events":
@@ -1972,13 +1962,7 @@ attachCliBinding("routine.fire", {
     handler: (args) => {
         const kind = (0, io_1.required)(args.positionals[0], "trigger kind");
         const payloadPath = args.positionals[1];
-        let payload;
-        try {
-            payload = payloadPath ? JSON.parse(node_fs_1.default.readFileSync(payloadPath, "utf8")) : args.options;
-        }
-        catch (e) {
-            throw new Error(`Failed to parse payload${payloadPath ? ` file "${payloadPath}"` : ""}: ${String((e && e.message) || e)}`);
-        }
+        const payload = (0, registry_cli_1.resolveRoutineFirePayload)(payloadPath, args.options);
         return { json: (0, registry_cli_1.routineFireCli)(kind, payload, args.options) };
     },
 });
@@ -2950,12 +2934,12 @@ addCliOnlyCapability("feedback.usage", "cw.js feedback list|show|summary|collect
         throw new Error("Usage: cw.js feedback list|show|summary|collect|task|resolve <run-id> [feedback-id]");
     },
 }, "feedback.usage exists only to own the fixed usage-error text for an unrecognized feedback subcommand; every real feedback.* action is its own capability row above.");
-addCliOnlyCapability("metrics.usage", "cw.js metrics show <run-id> | metrics summary [--scope repo|home] [--pricing <path>|default] [--json]", {
+addCliOnlyCapability("metrics.usage", "cw.js metrics show <run-id> | metrics summary [--scope repo|home] [--pricing <path>|default] [--limit N] [--json]", {
     path: ["metrics"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js metrics show <run-id> | metrics summary [--scope repo|home] [--pricing <path>|default] [--json]");
+        throw new Error("Usage: cw.js metrics show <run-id> | metrics summary [--scope repo|home] [--pricing <path>|default] [--limit N] [--json]");
     },
 }, "metrics.usage exists only to own the fixed usage-error text for an unrecognized metrics subcommand; every real metrics.* action is its own capability row above.");
 addCliOnlyCapability("operator.usage", "cw.js operator status|report <run-id> [--json]", {
@@ -2982,12 +2966,12 @@ addCliOnlyCapability("summary.usage", "cw.js summary refresh|show <run-id> [--js
         throw new Error("Usage: cw.js summary refresh|show <run-id> [--json]");
     },
 }, "summary.usage exists only to own the fixed usage-error text for an unrecognized summary subcommand; every real summary.* action is its own capability row above.");
-addCliOnlyCapability("workbench.usage", "cw.js workbench serve [--port N] [--once] | view <run-id> [--json]", {
+addCliOnlyCapability("workbench.usage", "cw.js workbench serve [--port N] [--once] [--require-token] | view <run-id> [--json]", {
     path: ["workbench"],
     jsonMode: "default",
     hiddenFromHelp: true,
     handler: () => {
-        throw new Error("Usage: cw.js workbench serve [--port N] [--once] | view <run-id> [--json]");
+        throw new Error("Usage: cw.js workbench serve [--port N] [--once] [--require-token] | view <run-id> [--json]");
     },
 }, "workbench.usage exists only to own the fixed usage-error text for an unrecognized workbench subcommand; every real workbench.* action is its own capability row above.");
 addCliOnlyCapability("worker.usage", "cw.js worker list|summary|show|manifest|output|fail|validate <run-id> [worker-id] [result-file]", {

package/dist/core/format/help.js

@@ -5,7 +5,7 @@
 // src/orchestrator.ts:899-1007 in the old build (formatHelp,
 // formatCommandHelp) plus the color helpers `bold`/`dim` keyed off stdout.
 //
-// LOAD-BEARING LAYOUT (v2/PLAN.md byte-compat item 14 — do not "clean up"):
+// LOAD-BEARING LAYOUT (docs/rebuild/PLAN.md byte-compat item 14 — do not "clean up"):
 //   - The command-line rows under "Cool Workflow" and the `cw <path...>`
 //     rows in formatCommandHelp use a 2-space indent. The CLI/MCP parity
 //     help-token checker parses ONLY 2-space lines as command tokens.
@@ -21,7 +21,7 @@
 // milestone 5) are dropped from the literal table below and read from the
 // capability table instead, via `cliCommandHelpRows()`; every other verb
 // stays literal here until its own milestone lands. This satisfies
-// v2/PLAN.md milestone 2's own "done when": a CLI `--help` walk and an MCP
+// docs/rebuild/PLAN.md milestone 2's own "done when": a CLI `--help` walk and an MCP
 // `tools/list` round-trip read the SAME table rows for any capability
 // wired into both.
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/core/hash.js

@@ -6,7 +6,7 @@
 // content object, a list of strings) still comes in as a plain function
 // argument here.
 //
-// Per v2/PLAN.md's byte-compat section ("Hash dedup — three shapes, not one
+// Per docs/rebuild/PLAN.md's byte-compat section ("Hash dedup — three shapes, not one
 // edge case"), this file must keep THREE things separate, each with its own
 // name, never collapsed into a single flagged helper:
 //

package/dist/core/multi-agent/candidate-scoring.js

@@ -164,7 +164,7 @@ function stateNodeError(code, message, options = {}, now) {
 /** Byte-exact port of selectCandidate's own gate ordering: not-selectable
  *  -> verifier-missing/no-evidence/empty-capture -> score-below-threshold.
  *  Review-gate errors are NOT included here; the caller appends them
- *  (v2/PLAN.md byte-compat / rebuild risk 8: append-only stacking, never
+ *  (docs/rebuild/PLAN.md byte-compat / rebuild risk 8: append-only stacking, never
  *  replacing a verifier error). */
 function selectionGateFailures(input, now) {
     const failures = [];

package/dist/core/multi-agent/eval-replay.js

@@ -17,7 +17,7 @@
 // `failures`/`evidenceAdoption` from the multi-agent/topology/blackboard/
 // trust state actually built in this milestone (runtime.ts/topology.ts/
 // coordinator.ts/candidate-scoring.ts), NOT from the full operator-ux
-// module (out of this milestone's scope per v2/PLAN.md's build-order
+// module (out of this milestone's scope per docs/rebuild/PLAN.md's build-order
 // list). The 9 optional v0.1.25/v0.1.26 sections (summaryFreshness
 // through reasoningUnexplained) default to `[]`, which SPEC/multi-
 // agent.md's own edge-case list says is valid for snapshots that predate

package/dist/core/multi-agent/runtime.js

@@ -22,7 +22,7 @@
 // core/multi-agent/topology.ts, candidate-scoring.ts, and the host/step
 // layer have their OWN separate `unique` that does NOT sort (insertion-
 // order only) — never merge the two. See uniquedual-role-vs-candidate-
-// order.case.js and v2/PLAN.md byte-compat item 3.
+// order.case.js and docs/rebuild/PLAN.md byte-compat item 3.
 //
 // Evidence: SPEC/multi-agent.md sections A ("Multi-agent kernel"), the
 // "Kernel error strings" and "Fanin blocked-reason strings" Exact-outputs
@@ -106,7 +106,7 @@ function pluralKind(kind) {
 }
 /** Status -> StateNodeStatus, kernel side (default `pending`). Kept
  *  distinct from coordinator/classify.ts's own table (default
- *  `completed`) per v2/PLAN.md byte-compat / rebuild risk 7 — collapsing
+ *  `completed`) per docs/rebuild/PLAN.md byte-compat / rebuild risk 7 — collapsing
  *  the two tables changes graph output and eval dependency_parity. */
 function statusToNodeStatus(status) {
     switch (status) {

package/dist/core/multi-agent/trust-policy.js

@@ -25,7 +25,7 @@ function unique(values) {
 }
 /** Chair detection: lowercased `metadata.topologyRoleId` (or title)
  *  contains "chair", "reducer", or "synthesizer". Judge detection:
- *  contains "judge". Renaming a role changes its authority (v2/PLAN.md
+ *  contains "judge". Renaming a role changes its authority (docs/rebuild/PLAN.md
  *  byte-compat / rebuild risk 4 — substring match, not a flag). */
 function policyForRole(role) {
     const topologyRole = String(role.metadata?.topologyRoleId || role.title || "").toLowerCase();

package/dist/core/pipeline/contract.js

@@ -2,7 +2,7 @@
 // core/pipeline/contract.ts — DEFAULT_PIPELINE_CONTRACT_ID,
 // createDefaultPipelineContract.
 //
-// MILESTONE 6+7 (combined; see v2/PLAN.md Open risk 10). Byte-exact port
+// MILESTONE 6+7 (combined; see docs/rebuild/PLAN.md Open risk 10). Byte-exact port
 // of the old build's src/pipeline-contract.ts. Pure data.
 //
 // Evidence: SPEC/pipeline-run.md "Default contract — src/pipeline-

package/dist/core/pipeline/drive-decide.js

@@ -3,7 +3,7 @@
 // decision core: task selection, terminal/gate logic, token-budget check,
 // retry/park math, cache-key formulas.
 //
-// MILESTONE 6+7 (combined; the big one — see v2/PLAN.md Open risk 9).
+// MILESTONE 6+7 (combined; the big one — see docs/rebuild/PLAN.md Open risk 9).
 // Every branch here is a pure function of already-loaded run state; it
 // does not itself spawn a process or touch disk. shell/drive.ts is the
 // thin imperative loop that calls these functions once per step and

package/dist/core/state/contract-migration.js

@@ -2,7 +2,7 @@
 // core/state/contract-migration.ts — declared migration registry + prover.
 //
 // MILESTONE 3. Byte-exact port of the old build's src/contract-migration.ts
-// (renamed target per v2/PLAN.md's module layout note — listed there as
+// (renamed target per docs/rebuild/PLAN.md's module layout note — listed there as
 // `pipeline/contract-migration.ts`, kept here under state/ since every
 // symbol it needs — RUN_STATE_MIGRATIONS, migrateRunState,
 // findMigrationPath — is this milestone's own state kernel and nothing in

package/dist/core/state/migrations.js

@@ -10,7 +10,7 @@
 //
 // Evidence: SPEC/state-core.md "src/state-migrations.ts — run-state
 // migration", "Migration pipeline (migrateRunState)", "Normalization
-// defaults" (v2/PLAN.md byte-compat item 4).
+// defaults" (docs/rebuild/PLAN.md byte-compat item 4).
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -232,7 +232,7 @@ function reverseRunState(input, targetSchemaVersion, options = {}) {
     return { run: state, report };
 }
 /** Fill in every WorkflowRun default, each recorded as a StateMigrationChange.
- *  Pinned defaults (v2/PLAN.md byte-compat item 4): epoch-0 ISO timestamps,
+ *  Pinned defaults (docs/rebuild/PLAN.md byte-compat item 4): epoch-0 ISO timestamps,
  *  cwd = three dirs above the run dir else process.cwd(), workflow.limits =
  *  { maxAgents: 8, maxConcurrentAgents: 4 }, loopStage = "interpret" (any
  *  unknown value overwritten). */

package/dist/core/state/node-snapshot.js

@@ -9,7 +9,7 @@
 // given `(run, clock)` — no direct fs/Date calls; `now` is always an
 // explicit parameter, `persist` is always a caller-supplied callback.
 //
-// RAW vs NORMALIZED fingerprints [v2/PLAN.md byte-compat item 8 — do not
+// RAW vs NORMALIZED fingerprints [docs/rebuild/PLAN.md byte-compat item 8 — do not
 // merge these two code paths]:
 //   - `sourceFingerprint` is RAW: built from the node's raw id/status/
 //     updatedAt plus raw artifact/evidence id+path strings. ANY transition

package/dist/core/state/state-explosion/graph.js

@@ -26,7 +26,7 @@
 // file's collapse-rule machinery changing at all.
 //
 // Evidence: SPEC/state-core.md "buildCompactGraph(...)", "State-explosion
-// collapse rules"; v2/PLAN.md byte-compat item 9;
+// collapse rules"; docs/rebuild/PLAN.md byte-compat item 9;
 // src/multi-agent-operator-ux.ts:153-227 (buildMultiAgentOperatorGraph).
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.byId = exports.GRAPH_VIEWS = void 0;
@@ -220,7 +220,7 @@ function collapseRuleFor() {
         },
     };
 }
-/** Collapsible kinds ONLY (v2/PLAN.md byte-compat item 9): high-volume,
+/** Collapsible kinds ONLY (docs/rebuild/PLAN.md byte-compat item 9): high-volume,
  *  low-individual-signal. `decisions, artifacts, fanins, candidates,
  *  selections, commits, feedback` are NEVER collapsed so failures,
  *  evidence, policy, and judge rationale stay visible. */
@@ -414,7 +414,7 @@ function buildCompactGraphFromView(runId, full, view = "compact", options = {})
             protectedIds.add(node.id);
     }
     // Reasoning-critical nodes are on the critical path and must never be
-    // collapsed into a synthetic summary node (v2/PLAN.md byte-compat item 9).
+    // collapsed into a synthetic summary node (docs/rebuild/PLAN.md byte-compat item 9).
     for (const id of options.reasoningCriticalIds || [])
         protectedIds.add(id);
     const parents = (0, helpers_1.parentMap)(full.edges);
@@ -467,7 +467,7 @@ function buildCompactGraphFromView(runId, full, view = "compact", options = {})
         buckets.set(bucketKey, [...(buckets.get(bucketKey) || []), node.id]);
     }
     // Buckets smaller than the collapse threshold stay expanded (unless
-    // critical-path — v2/PLAN.md byte-compat item 9).
+    // critical-path — docs/rebuild/PLAN.md byte-compat item 9).
     const synthetic = [];
     const collapsedNodeIds = new Map(); // sourceNodeId -> syntheticId
     for (const [bucketKey, ids] of [...buckets.entries()].sort((a, b) => a[0].localeCompare(b[0]))) {

package/dist/core/state/state-explosion/helpers.js

@@ -4,7 +4,7 @@
 //
 // MILESTONE 4. Byte-exact port of the old build's
 // src/state-explosion/helpers.ts. `fingerprintStrings`/`fingerprintRecords`
-// live in core/hash.ts (the one hash module, per v2/PLAN.md's byte-compat
+// live in core/hash.ts (the one hash module, per docs/rebuild/PLAN.md's byte-compat
 // item 2) and are re-exported here so every importer of this file keeps
 // the same surface the old build had.
 //
@@ -13,7 +13,7 @@
 // a later milestone's topology/candidate/host-decide code has its OWN
 // separate `unique` (dedup-only, unsorted) that must NEVER be merged with
 // this one; collapsing them changes persisted record order and eval
-// parity (v2/PLAN.md byte-compat item 3, Open risk 2). See
+// parity (docs/rebuild/PLAN.md byte-compat item 3, Open risk 2). See
 // core/state/state-node.ts's own local `unique` for the sibling that must
 // stay separate.
 //
@@ -34,7 +34,7 @@ const hash_1 = require("../../hash");
 Object.defineProperty(exports, "fingerprintRecords", { enumerable: true, get: function () { return hash_1.fingerprintRecords; } });
 Object.defineProperty(exports, "fingerprintStrings", { enumerable: true, get: function () { return hash_1.fingerprintStrings; } });
 /** True for `failed`, `blocked`, `rejected`, `conflicting` — the never-
- *  collapse status set (v2/PLAN.md byte-compat item 9). */
+ *  collapse status set (docs/rebuild/PLAN.md byte-compat item 9). */
 function isProtectedStatus(status) {
     return ["failed", "blocked", "rejected", "conflicting"].includes(status);
 }

package/dist/core/state/state-explosion/report.js

@@ -6,7 +6,7 @@
 // Report`/`buildOperatorDigestWithContext` (src/state-explosion.ts) minus
 // the disk I/O — persistence (`refreshStateExplosionSummaries`'s writes,
 // `loadStateExplosionSummaryIndex`'s read) is shell/state-explosion-
-// cli.ts's job per v2/PLAN.md's core/shell split. This file only builds
+// cli.ts's job per docs/rebuild/PLAN.md's core/shell split. This file only builds
 // the report VALUE from an in-memory run + an already-loaded index.
 //
 // See size.ts/graph.ts/digest.ts's own header notes on why `operatorDigest`

package/dist/core/state/state-explosion/size.js

@@ -2,7 +2,7 @@
 // core/state/state-explosion/size.ts — computeStateSizeWithGraph,
 // DEFAULT_STATE_EXPLOSION_THRESHOLDS.
 //
-// MILESTONE 4 (v2/PLAN.md build order, step 4). Byte-exact port of the old
+// MILESTONE 4 (docs/rebuild/PLAN.md build order, step 4). Byte-exact port of the old
 // build's src/state-explosion/size.ts. The counts are the same 12
 // categories the old build reads off `run.multiAgent`/`run.blackboard`
 // (loose `unknown[]`-typed record arrays at this milestone — see core/