cool-workflow 0.2.0 → 0.2.2

package/dist/core/format/help.js

@@ -5,7 +5,7 @@
 // src/orchestrator.ts:899-1007 in the old build (formatHelp,
 // formatCommandHelp) plus the color helpers `bold`/`dim` keyed off stdout.
 //
-// LOAD-BEARING LAYOUT (v2/PLAN.md byte-compat item 14 — do not "clean up"):
+// LOAD-BEARING LAYOUT (docs/rebuild/PLAN.md byte-compat item 14 — do not "clean up"):
 //   - The command-line rows under "Cool Workflow" and the `cw <path...>`
 //     rows in formatCommandHelp use a 2-space indent. The CLI/MCP parity
 //     help-token checker parses ONLY 2-space lines as command tokens.
@@ -21,16 +21,20 @@
 // milestone 5) are dropped from the literal table below and read from the
 // capability table instead, via `cliCommandHelpRows()`; every other verb
 // stays literal here until its own milestone lands. This satisfies
-// v2/PLAN.md milestone 2's own "done when": a CLI `--help` walk and an MCP
+// docs/rebuild/PLAN.md milestone 2's own "done when": a CLI `--help` walk and an MCP
 // `tools/list` round-trip read the SAME table rows for any capability
 // wired into both.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.formatHelp = formatHelp;
 exports.formatCommandHelp = formatCommandHelp;
 exports.formatInfo = formatInfo;
+exports.formatSearchResults = formatSearchResults;
 const capability_table_1 = require("../capability-table");
-/** src/orchestrator.ts:934-951 — the exact "More commands" token set, in
- *  this exact order (space-joined in the source, pipe-joined for display). */
+/** src/orchestrator.ts:934-951 — the "More commands" token set, in the old
+ *  build's order (space-joined in the source, pipe-joined for display).
+ *  One change from the old capture: `update` is gone. The verb had no code
+ *  behind it in this build (`cw update` said "Unknown command"), so the
+ *  help must not offer it. See parseargv.ts KNOWN_COMMANDS. */
 const MORE_COMMANDS_TOKENS = [
     "list", "search", "info", "init", "plan", "status", "next", "dispatch",
     "result", "state", "commit", "report", "app", "sandbox", "backend",
@@ -40,7 +44,7 @@ const MORE_COMMANDS_TOKENS = [
     "summary", "blackboard", "coordinator", "metrics", "operator", "sched",
     "gc", "telemetry", "migration", "demo", "workbench", "approve", "reject",
     "comment", "handoff", "ledger", "graph", "eval", "man", "version",
-    "update", "fix",
+    "fix",
 ];
 const MORE_COMMANDS_WRAP_WIDTH = 76;
 /** src/orchestrator.ts:940-951 — greedily pack pipe-joined tokens into
@@ -205,7 +209,9 @@ const COMMAND_HELP_ROWS = {
 /** src/orchestrator.ts:899-933 — the top-level `cw help` text. Color is
  *  intentionally NOT applied here (this milestone's conformance runs pipe
  *  stdout, so NO_COLOR/non-TTY always wins); byte content matches the
- *  plain-text capture at SPEC/cli-help/_root.txt exactly. */
+ *  plain-text capture at SPEC/cli-help/_root.txt, but for the dead
+ *  `update` lines, which were taken out on purpose (no code was behind
+ *  the verb — see MORE_COMMANDS_TOKENS note above). */
 function formatHelp() {
     const moreCommandsLines = wrapPipeJoined(MORE_COMMANDS_TOKENS, MORE_COMMANDS_WRAP_WIDTH);
     const lines = [
@@ -214,7 +220,6 @@ function formatHelp() {
         '  -q "question" [-claude|-codex|-gemini|-deepseek]  Ask a question, get a report',
         '  -q "question" --link <url>                 Review a remote repo by URL',
         "  version                                   Show version",
-        "  update                                    Update to latest release",
         "  doctor                                    Check setup",
         "  fix                                       Show fix commands for setup issues",
         "",
@@ -312,3 +317,21 @@ function formatInfo(appId, data) {
     lines.push(`  Run: cw quickstart ${appId} --repo . --question "..."`);
     return lines.join("\n");
 }
+/** `cw search <keyword>`'s human text — byte-exact to the milestone-1
+ *  carry-over's own formatSearchResults (moved here from cli/dispatch.ts
+ *  so the search capability-table row, which lives in core/, can render
+ *  its own text without core importing from cli/). */
+function formatSearchResults(keyword, results) {
+    if (results.length === 0) {
+        return `No workflows matched "${keyword}".\n  Tip: cw list for all available workflows.`;
+    }
+    const lines = [`${results.length} workflow${results.length === 1 ? "" : "s"} matching "${keyword}"`];
+    for (const r of results) {
+        lines.push(`  ${r.id} — ${r.title}`);
+        const cut = r.summary.length > 120 ? `${r.summary.slice(0, 119)}…` : r.summary;
+        lines.push(`    ${cut}`);
+    }
+    lines.push("");
+    lines.push("Use cw info <id> for full details.");
+    return lines.join("\n");
+}

package/dist/core/hash.js

@@ -6,7 +6,7 @@
 // content object, a list of strings) still comes in as a plain function
 // argument here.
 //
-// Per v2/PLAN.md's byte-compat section ("Hash dedup — three shapes, not one
+// Per docs/rebuild/PLAN.md's byte-compat section ("Hash dedup — three shapes, not one
 // edge case"), this file must keep THREE things separate, each with its own
 // name, never collapsed into a single flagged helper:
 //

package/dist/core/multi-agent/candidate-scoring.js

@@ -164,7 +164,7 @@ function stateNodeError(code, message, options = {}, now) {
 /** Byte-exact port of selectCandidate's own gate ordering: not-selectable
  *  -> verifier-missing/no-evidence/empty-capture -> score-below-threshold.
  *  Review-gate errors are NOT included here; the caller appends them
- *  (v2/PLAN.md byte-compat / rebuild risk 8: append-only stacking, never
+ *  (docs/rebuild/PLAN.md byte-compat / rebuild risk 8: append-only stacking, never
  *  replacing a verifier error). */
 function selectionGateFailures(input, now) {
     const failures = [];

package/dist/core/multi-agent/collaboration.js

@@ -36,6 +36,7 @@ exports.listComments = listComments;
 exports.distinctTargets = distinctTargets;
 exports.formatReviewStatus = formatReviewStatus;
 exports.formatCommentList = formatCommentList;
+const collate_1 = require("../util/collate");
 exports.COLLABORATION_SCHEMA_VERSION = 1;
 /** The single, honest stand-in for an absent identity. */
 exports.UNATTRIBUTED_ACTOR = {
@@ -213,7 +214,7 @@ function matchesAnyTarget(target, related) {
     return related.some((entry) => sameTarget(target, entry));
 }
 function compareByCreated(left, right) {
-    return left.createdAt.localeCompare(right.createdAt) || left.id.localeCompare(right.id);
+    return (0, collate_1.stableCompare)(left.createdAt, right.createdAt) || (0, collate_1.stableCompare)(left.id, right.id);
 }
 function disqualify(record, policy, selfIds) {
     const actor = record.actor;
@@ -453,7 +454,7 @@ function distinctTargets(state) {
         seen.set(targetKey(record.target), record.target);
     for (const record of state.handoffs)
         seen.set(targetKey(record.target), record.target);
-    return [...seen.values()].sort((left, right) => targetKey(left).localeCompare(targetKey(right)));
+    return [...seen.values()].sort((left, right) => (0, collate_1.stableCompare)(targetKey(left), targetKey(right)));
 }
 function formatReviewStatus(report) {
     const lines = [];

package/dist/core/multi-agent/coordinator.js

@@ -47,6 +47,7 @@ exports.summarizeBlackboard = summarizeBlackboard;
 exports.listBlackboardMessages = listBlackboardMessages;
 exports.listBlackboardArtifacts = listBlackboardArtifacts;
 exports.buildBlackboardGraph = buildBlackboardGraph;
+const collate_1 = require("../util/collate");
 exports.BLACKBOARD_SCHEMA_VERSION = 1;
 /** Dedup, SORTS. Coordinator-side sorting `unique` — byte-identical
  *  behavior to core/multi-agent/runtime.ts's own copy, kept as a
@@ -420,7 +421,7 @@ function summarizeBlackboard(runId, state, blackboardId, defaultIndexPath) {
     ].sort();
     const readyForFanin = Boolean(board && !openQuestions.length && !conflicts.length && artifacts.length > 0 && missingEvidence.length === 0);
     const latestSnapshot = scoped(state.snapshots)
-        .sort((left, right) => left.createdAt.localeCompare(right.createdAt))
+        .sort((left, right) => (0, collate_1.stableCompare)(left.createdAt, right.createdAt))
         .at(-1);
     return {
         runId,
@@ -454,12 +455,12 @@ function nextAction(runId, board, openQuestions, conflicts, artifacts) {
 function listBlackboardMessages(state, options = {}) {
     return state.messages
         .filter((message) => (!options.blackboardId || message.blackboardId === options.blackboardId) && (!options.topicId || message.topicId === options.topicId))
-        .sort((left, right) => left.createdAt.localeCompare(right.createdAt) || left.id.localeCompare(right.id));
+        .sort((left, right) => (0, collate_1.stableCompare)(left.createdAt, right.createdAt) || (0, collate_1.stableCompare)(left.id, right.id));
 }
 function listBlackboardArtifacts(state, options = {}) {
     return state.artifacts
         .filter((artifact) => (!options.blackboardId || artifact.blackboardId === options.blackboardId) && (!options.topicId || artifact.topicId === options.topicId))
-        .sort((left, right) => left.id.localeCompare(right.id));
+        .sort((left, right) => (0, collate_1.stableCompare)(left.id, right.id));
 }
 function buildBlackboardGraph(runId, state, recordPath, messagesPath) {
     const nodes = [];

package/dist/core/multi-agent/eval-replay.js

@@ -17,7 +17,7 @@
 // `failures`/`evidenceAdoption` from the multi-agent/topology/blackboard/
 // trust state actually built in this milestone (runtime.ts/topology.ts/
 // coordinator.ts/candidate-scoring.ts), NOT from the full operator-ux
-// module (out of this milestone's scope per v2/PLAN.md's build-order
+// module (out of this milestone's scope per docs/rebuild/PLAN.md's build-order
 // list). The 9 optional v0.1.25/v0.1.26 sections (summaryFreshness
 // through reasoningUnexplained) default to `[]`, which SPEC/multi-
 // agent.md's own edge-case list says is valid for snapshots that predate

package/dist/core/multi-agent/runtime.js

@@ -22,7 +22,7 @@
 // core/multi-agent/topology.ts, candidate-scoring.ts, and the host/step
 // layer have their OWN separate `unique` that does NOT sort (insertion-
 // order only) — never merge the two. See uniquedual-role-vs-candidate-
-// order.case.js and v2/PLAN.md byte-compat item 3.
+// order.case.js and docs/rebuild/PLAN.md byte-compat item 3.
 //
 // Evidence: SPEC/multi-agent.md sections A ("Multi-agent kernel"), the
 // "Kernel error strings" and "Fanin blocked-reason strings" Exact-outputs
@@ -106,7 +106,7 @@ function pluralKind(kind) {
 }
 /** Status -> StateNodeStatus, kernel side (default `pending`). Kept
  *  distinct from coordinator/classify.ts's own table (default
- *  `completed`) per v2/PLAN.md byte-compat / rebuild risk 7 — collapsing
+ *  `completed`) per docs/rebuild/PLAN.md byte-compat / rebuild risk 7 — collapsing
  *  the two tables changes graph output and eval dependency_parity. */
 function statusToNodeStatus(status) {
     switch (status) {

package/dist/core/multi-agent/trust-policy.js

@@ -25,7 +25,7 @@ function unique(values) {
 }
 /** Chair detection: lowercased `metadata.topologyRoleId` (or title)
  *  contains "chair", "reducer", or "synthesizer". Judge detection:
- *  contains "judge". Renaming a role changes its authority (v2/PLAN.md
+ *  contains "judge". Renaming a role changes its authority (docs/rebuild/PLAN.md
  *  byte-compat / rebuild risk 4 — substring match, not a flag). */
 function policyForRole(role) {
     const topologyRole = String(role.metadata?.topologyRoleId || role.title || "").toLowerCase();

package/dist/core/pipeline/commit-gate.js

@@ -20,6 +20,7 @@ exports.formatCommitId = formatCommitId;
 exports.gateFailureSeq = gateFailureSeq;
 const evidence_grounding_1 = require("../trust/evidence-grounding");
 const result_normalize_1 = require("./result-normalize");
+const collate_1 = require("../util/collate");
 /** The sandbox profile that accepted a candidate's worker output — the
  *  worker's own profile when present, else the backing task's. Pure port of
  *  the old build's src/gates.ts sandboxProfileForCandidate. */
@@ -97,7 +98,7 @@ function findSelectionNode(run, selectionId) {
 function latestSelectionForCandidate(run, candidateId) {
     return [...(run.candidateSelections || [])]
         .filter((s) => s.candidateId === candidateId)
-        .sort((a, b) => (b.selectedAt || "").localeCompare(a.selectedAt || ""))[0];
+        .sort((a, b) => (0, collate_1.stableCompare)(b.selectedAt || "", a.selectedAt || ""))[0];
 }
 function evidenceLocatorString(entry) {
     const ref = entry.locator || entry.path || entry.summary || entry.id;

package/dist/core/pipeline/contract.js

@@ -2,7 +2,7 @@
 // core/pipeline/contract.ts — DEFAULT_PIPELINE_CONTRACT_ID,
 // createDefaultPipelineContract.
 //
-// MILESTONE 6+7 (combined; see v2/PLAN.md Open risk 10). Byte-exact port
+// MILESTONE 6+7 (combined; see docs/rebuild/PLAN.md Open risk 10). Byte-exact port
 // of the old build's src/pipeline-contract.ts. Pure data.
 //
 // Evidence: SPEC/pipeline-run.md "Default contract — src/pipeline-

package/dist/core/pipeline/drive-decide.js

@@ -3,7 +3,7 @@
 // decision core: task selection, terminal/gate logic, token-budget check,
 // retry/park math, cache-key formulas.
 //
-// MILESTONE 6+7 (combined; the big one — see v2/PLAN.md Open risk 9).
+// MILESTONE 6+7 (combined; the big one — see docs/rebuild/PLAN.md Open risk 9).
 // Every branch here is a pure function of already-loaded run state; it
 // does not itself spawn a process or touch disk. shell/drive.ts is the
 // thin imperative loop that calls these functions once per step and

package/dist/core/state/contract-migration.js

@@ -2,7 +2,7 @@
 // core/state/contract-migration.ts — declared migration registry + prover.
 //
 // MILESTONE 3. Byte-exact port of the old build's src/contract-migration.ts
-// (renamed target per v2/PLAN.md's module layout note — listed there as
+// (renamed target per docs/rebuild/PLAN.md's module layout note — listed there as
 // `pipeline/contract-migration.ts`, kept here under state/ since every
 // symbol it needs — RUN_STATE_MIGRATIONS, migrateRunState,
 // findMigrationPath — is this milestone's own state kernel and nothing in

package/dist/core/state/migrations.js

@@ -10,7 +10,7 @@
 //
 // Evidence: SPEC/state-core.md "src/state-migrations.ts — run-state
 // migration", "Migration pipeline (migrateRunState)", "Normalization
-// defaults" (v2/PLAN.md byte-compat item 4).
+// defaults" (docs/rebuild/PLAN.md byte-compat item 4).
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -232,7 +232,7 @@ function reverseRunState(input, targetSchemaVersion, options = {}) {
     return { run: state, report };
 }
 /** Fill in every WorkflowRun default, each recorded as a StateMigrationChange.
- *  Pinned defaults (v2/PLAN.md byte-compat item 4): epoch-0 ISO timestamps,
+ *  Pinned defaults (docs/rebuild/PLAN.md byte-compat item 4): epoch-0 ISO timestamps,
  *  cwd = three dirs above the run dir else process.cwd(), workflow.limits =
  *  { maxAgents: 8, maxConcurrentAgents: 4 }, loopStage = "interpret" (any
  *  unknown value overwritten). */

package/dist/core/state/node-snapshot.js

@@ -9,7 +9,7 @@
 // given `(run, clock)` — no direct fs/Date calls; `now` is always an
 // explicit parameter, `persist` is always a caller-supplied callback.
 //
-// RAW vs NORMALIZED fingerprints [v2/PLAN.md byte-compat item 8 — do not
+// RAW vs NORMALIZED fingerprints [docs/rebuild/PLAN.md byte-compat item 8 — do not
 // merge these two code paths]:
 //   - `sourceFingerprint` is RAW: built from the node's raw id/status/
 //     updatedAt plus raw artifact/evidence id+path strings. ANY transition

package/dist/core/state/state-explosion/digest.js

@@ -29,6 +29,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.summarizeBlackboardDigest = summarizeBlackboardDigest;
 const hash_1 = require("../../hash");
 const helpers_1 = require("./helpers");
+const collate_1 = require("../../util/collate");
 /** Deterministic structural summary of one (or the default) blackboard.
  *  Every list is sorted by id (`byId`); `recentChanges` is the last 10 by
  *  `updatedAt` desc, THEN re-sorted by id for the final list (matching the
@@ -63,7 +64,7 @@ function summarizeBlackboardDigest(run, blackboardId, now) {
         .map((topic) => {
         const topicMessages = messages
             .filter((m) => m.topicId === topic.id)
-            .sort((a, b) => a.createdAt.localeCompare(b.createdAt) || a.id.localeCompare(b.id));
+            .sort((a, b) => (0, collate_1.stableCompare)(a.createdAt, b.createdAt) || (0, collate_1.stableCompare)(a.id, b.id));
         const last = topicMessages[topicMessages.length - 1];
         return {
             id: `thread:${topic.id}`,
@@ -181,7 +182,7 @@ function summarizeBlackboardDigest(run, blackboardId, now) {
         updatedAt: record.updatedAt,
         status: record.status,
     }))
-        .sort((a, b) => b.updatedAt.localeCompare(a.updatedAt) || a.id.localeCompare(b.id))
+        .sort((a, b) => (0, collate_1.stableCompare)(b.updatedAt, a.updatedAt) || (0, collate_1.stableCompare)(a.id, b.id))
         .slice(0, 10)
         .map((record) => ({
         id: `recent:${record.id}`,

package/dist/core/state/state-explosion/graph.js

@@ -26,7 +26,7 @@
 // file's collapse-rule machinery changing at all.
 //
 // Evidence: SPEC/state-core.md "buildCompactGraph(...)", "State-explosion
-// collapse rules"; v2/PLAN.md byte-compat item 9;
+// collapse rules"; docs/rebuild/PLAN.md byte-compat item 9;
 // src/multi-agent-operator-ux.ts:153-227 (buildMultiAgentOperatorGraph).
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.byId = exports.GRAPH_VIEWS = void 0;
@@ -37,6 +37,7 @@ exports.buildCompactGraphFromView = buildCompactGraphFromView;
 const size_1 = require("./size");
 const helpers_1 = require("./helpers");
 Object.defineProperty(exports, "byId", { enumerable: true, get: function () { return helpers_1.byId; } });
+const collate_1 = require("../../util/collate");
 const runtime_1 = require("../../multi-agent/runtime");
 const coordinator_1 = require("../../multi-agent/coordinator");
 const topology_1 = require("../../multi-agent/topology");
@@ -144,8 +145,8 @@ function runToGraphView(run) {
         return true;
     });
     return {
-        nodes: [...nodes.values()].sort((a, b) => a.kind.localeCompare(b.kind) || a.id.localeCompare(b.id)),
-        edges: dedupedEdges.sort((a, b) => a.from.localeCompare(b.from) || a.to.localeCompare(b.to) || (a.label || "").localeCompare(b.label || "")),
+        nodes: [...nodes.values()].sort((a, b) => (0, collate_1.stableCompare)(a.kind, b.kind) || (0, collate_1.stableCompare)(a.id, b.id)),
+        edges: dedupedEdges.sort((a, b) => (0, collate_1.stableCompare)(a.from, b.from) || (0, collate_1.stableCompare)(a.to, b.to) || (0, collate_1.stableCompare)(a.label || "", b.label || "")),
     };
 }
 /** `buildCompactGraph(run, view, options)` — builds the graph view via
@@ -192,8 +193,8 @@ function runToGraphViewFromWorkflowRun(run) {
         edges.push(edge);
     }
     return {
-        nodes: [...nodes.values()].sort((a, b) => a.kind.localeCompare(b.kind) || a.id.localeCompare(b.id)),
-        edges: edges.sort((a, b) => a.from.localeCompare(b.from) || a.to.localeCompare(b.to) || (a.label || "").localeCompare(b.label || "")),
+        nodes: [...nodes.values()].sort((a, b) => (0, collate_1.stableCompare)(a.kind, b.kind) || (0, collate_1.stableCompare)(a.id, b.id)),
+        edges: edges.sort((a, b) => (0, collate_1.stableCompare)(a.from, b.from) || (0, collate_1.stableCompare)(a.to, b.to) || (0, collate_1.stableCompare)(a.label || "", b.label || "")),
     };
 }
 function collapseRuleFor() {
@@ -220,7 +221,7 @@ function collapseRuleFor() {
         },
     };
 }
-/** Collapsible kinds ONLY (v2/PLAN.md byte-compat item 9): high-volume,
+/** Collapsible kinds ONLY (docs/rebuild/PLAN.md byte-compat item 9): high-volume,
  *  low-individual-signal. `decisions, artifacts, fanins, candidates,
  *  selections, commits, feedback` are NEVER collapsed so failures,
  *  evidence, policy, and judge rationale stay visible. */
@@ -414,7 +415,7 @@ function buildCompactGraphFromView(runId, full, view = "compact", options = {})
             protectedIds.add(node.id);
     }
     // Reasoning-critical nodes are on the critical path and must never be
-    // collapsed into a synthetic summary node (v2/PLAN.md byte-compat item 9).
+    // collapsed into a synthetic summary node (docs/rebuild/PLAN.md byte-compat item 9).
     for (const id of options.reasoningCriticalIds || [])
         protectedIds.add(id);
     const parents = (0, helpers_1.parentMap)(full.edges);
@@ -467,10 +468,10 @@ function buildCompactGraphFromView(runId, full, view = "compact", options = {})
         buckets.set(bucketKey, [...(buckets.get(bucketKey) || []), node.id]);
     }
     // Buckets smaller than the collapse threshold stay expanded (unless
-    // critical-path — v2/PLAN.md byte-compat item 9).
+    // critical-path — docs/rebuild/PLAN.md byte-compat item 9).
     const synthetic = [];
     const collapsedNodeIds = new Map(); // sourceNodeId -> syntheticId
-    for (const [bucketKey, ids] of [...buckets.entries()].sort((a, b) => a[0].localeCompare(b[0]))) {
+    for (const [bucketKey, ids] of [...buckets.entries()].sort((a, b) => (0, collate_1.stableCompare)(a[0], b[0]))) {
         if (view !== "critical-path" && ids.length < thresholds.collapseBucket) {
             for (const id of ids)
                 keep.add(id);
@@ -519,9 +520,9 @@ function buildCompactGraphFromView(runId, full, view = "compact", options = {})
         edges.push({ from, to, label: edge.label });
     }
     return finalizeGraphRecord(runId, view, options, full, {
-        nodes: nodes.sort((a, b) => a.kind.localeCompare(b.kind) || a.id.localeCompare(b.id)),
-        edges: edges.sort((a, b) => a.from.localeCompare(b.from) || a.to.localeCompare(b.to) || (a.label || "").localeCompare(b.label || "")),
-        syntheticNodes: synthetic.sort((a, b) => a.id.localeCompare(b.id)),
+        nodes: nodes.sort((a, b) => (0, collate_1.stableCompare)(a.kind, b.kind) || (0, collate_1.stableCompare)(a.id, b.id)),
+        edges: edges.sort((a, b) => (0, collate_1.stableCompare)(a.from, b.from) || (0, collate_1.stableCompare)(a.to, b.to) || (0, collate_1.stableCompare)(a.label || "", b.label || "")),
+        syntheticNodes: synthetic.sort((a, b) => (0, collate_1.stableCompare)(a.id, b.id)),
         critical,
     });
 }

package/dist/core/state/state-explosion/helpers.js

@@ -4,7 +4,7 @@
 //
 // MILESTONE 4. Byte-exact port of the old build's
 // src/state-explosion/helpers.ts. `fingerprintStrings`/`fingerprintRecords`
-// live in core/hash.ts (the one hash module, per v2/PLAN.md's byte-compat
+// live in core/hash.ts (the one hash module, per docs/rebuild/PLAN.md's byte-compat
 // item 2) and are re-exported here so every importer of this file keeps
 // the same surface the old build had.
 //
@@ -13,7 +13,7 @@
 // a later milestone's topology/candidate/host-decide code has its OWN
 // separate `unique` (dedup-only, unsorted) that must NEVER be merged with
 // this one; collapsing them changes persisted record order and eval
-// parity (v2/PLAN.md byte-compat item 3, Open risk 2). See
+// parity (docs/rebuild/PLAN.md byte-compat item 3, Open risk 2). See
 // core/state/state-node.ts's own local `unique` for the sibling that must
 // stay separate.
 //
@@ -33,8 +33,9 @@ exports.slug = slug;
 const hash_1 = require("../../hash");
 Object.defineProperty(exports, "fingerprintRecords", { enumerable: true, get: function () { return hash_1.fingerprintRecords; } });
 Object.defineProperty(exports, "fingerprintStrings", { enumerable: true, get: function () { return hash_1.fingerprintStrings; } });
+const collate_1 = require("../../util/collate");
 /** True for `failed`, `blocked`, `rejected`, `conflicting` — the never-
- *  collapse status set (v2/PLAN.md byte-compat item 9). */
+ *  collapse status set (docs/rebuild/PLAN.md byte-compat item 9). */
 function isProtectedStatus(status) {
     return ["failed", "blocked", "rejected", "conflicting"].includes(status);
 }
@@ -83,7 +84,7 @@ function unique(values) {
     return Array.from(new Set(values.filter(Boolean))).sort();
 }
 function byId(a, b) {
-    return a.id.localeCompare(b.id);
+    return (0, collate_1.stableCompare)(a.id, b.id);
 }
 /** Whitespace-collapsed; over 80 chars becomes the first 77 chars + `...`. */
 function truncate(value) {

package/dist/core/state/state-explosion/report.js

@@ -6,7 +6,7 @@
 // Report`/`buildOperatorDigestWithContext` (src/state-explosion.ts) minus
 // the disk I/O — persistence (`refreshStateExplosionSummaries`'s writes,
 // `loadStateExplosionSummaryIndex`'s read) is shell/state-explosion-
-// cli.ts's job per v2/PLAN.md's core/shell split. This file only builds
+// cli.ts's job per docs/rebuild/PLAN.md's core/shell split. This file only builds
 // the report VALUE from an in-memory run + an already-loaded index.
 //
 // See size.ts/graph.ts/digest.ts's own header notes on why `operatorDigest`

package/dist/core/state/state-explosion/size.js

@@ -2,7 +2,7 @@
 // core/state/state-explosion/size.ts — computeStateSizeWithGraph,
 // DEFAULT_STATE_EXPLOSION_THRESHOLDS.
 //
-// MILESTONE 4 (v2/PLAN.md build order, step 4). Byte-exact port of the old
+// MILESTONE 4 (docs/rebuild/PLAN.md build order, step 4). Byte-exact port of the old
 // build's src/state-explosion/size.ts. The counts are the same 12
 // categories the old build reads off `run.multiAgent`/`run.blackboard`
 // (loose `unknown[]`-typed record arrays at this milestone — see core/

package/dist/core/state/state-node.js

@@ -11,7 +11,7 @@
 //
 // Evidence: SPEC/state-core.md "src/state-node.ts — StateNode lifecycle and
 // contract gates", "StateNode transition matrix", "Deterministic id
-// fallback", "Contract gates" (v2/PLAN.md byte-compat item 7 — the double
+// fallback", "Contract gates" (docs/rebuild/PLAN.md byte-compat item 7 — the double
 // commit gate).
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PipelineContractError = exports.PIPELINE_CONTRACT_SCHEMA_VERSION = exports.STATE_NODE_SCHEMA_VERSION = void 0;
@@ -115,7 +115,7 @@ function validatePipelineContract(contract) {
  *  check against; every real caller (shell/) passes `fs.existsSync` so the
  *  `missing-artifact-path` gate behaves exactly like the old build. Kept as
  *  an explicit parameter (never a top-level `require("node:fs")`) so this
- *  stays a pure core/ module per v2/PLAN.md's core/shell split. */
+ *  stays a pure core/ module per docs/rebuild/PLAN.md's core/shell split. */
 function assertNodeSatisfiesContract(node, contract, stageId, pathExists = () => true) {
     validatePipelineContract(contract);
     const stage = contract.stages.find((candidate) => candidate.id === stageId);

package/dist/core/state/types.js

@@ -1,7 +1,7 @@
 "use strict";
 // core/state/types.ts — the state-kernel's own type set.
 //
-// MILESTONE 3 (v2/PLAN.md build order, step 3). Scoped to exactly what
+// MILESTONE 3 (docs/rebuild/PLAN.md build order, step 3). Scoped to exactly what
 // state-core.md's public surface needs: WorkflowRun and everything it
 // carries, StateNode + its snapshot/replay/diff family, the pipeline
 // contract shape, and the small persisted-record shapes validation.ts

package/dist/core/trust/ledger.js

@@ -1,7 +1,7 @@
 "use strict";
 // core/trust/ledger.ts — the cross-agent handoff ledger kernel.
 //
-// MILESTONE 8 (v2/PLAN.md build order, step 8; SPEC/ledger-trust.md in
+// MILESTONE 8 (docs/rebuild/PLAN.md build order, step 8; SPEC/ledger-trust.md in
 // full). Pure: computeLedgerDigest, buildLedgerProposal/Review,
 // verifyLedgerEntry, applyLedgerProposal. Directory reads
 // (listLedgerEntries/unionLedgerEntries) live in shell/ledger-io.ts, NOT
@@ -22,6 +22,7 @@ exports.verifyLedgerEntry = verifyLedgerEntry;
 exports.applyLedgerProposal = applyLedgerProposal;
 exports.resolveLedgerInbox = resolveLedgerInbox;
 const hash_1 = require("../hash");
+const collate_1 = require("../util/collate");
 /** sha256 over the canonical content (every field except `id` and
  *  `digest`, which are derived FROM it). Returns the full `sha256:<hex>`
  *  form — the same prefixed spelling every other hash chain uses. */
@@ -187,7 +188,7 @@ function resolveLedgerInbox(entries) {
             reviews: answering.map((r) => r.id).sort(),
         };
     })
-        .sort((a, b) => a.id.localeCompare(b.id));
+        .sort((a, b) => (0, collate_1.stableCompare)(a.id, b.id));
     const tally = (s) => proposals.filter((p) => p.resolution === s).length;
     return {
         proposals,

package/dist/core/trust/telemetry-attestation.js

@@ -6,7 +6,7 @@
 // node:crypto's built-in ed25519 sign/verify (no npm dependency).
 //
 // `crypto.verify`/`crypto.createPublicKey` are allowed here per
-// v2/PLAN.md's lint carve-out for this exact file (Target shape,
+// docs/rebuild/PLAN.md's lint carve-out for this exact file (Target shape,
 // core/trust/telemetry-attestation.ts comment) — this remains otherwise
 // pure (no fs, no process.env, no clock; `resolveTrustPublicKey`'s lazy
 // `require("node:fs")` is the one exception, ported byte-identically
@@ -62,7 +62,7 @@ const crypto = __importStar(require("node:crypto"));
  *  recursively, AND maps a top-level `undefined` input to the literal
  *  string `"null"`. Divergent from `core/hash.ts`'s
  *  `ledgerStableStringify` exactly at the top-level-undefined edge (see
- *  v2/PLAN.md byte-compat item 2). Re-exported under this file's own
+ *  docs/rebuild/PLAN.md byte-compat item 2). Re-exported under this file's own
  *  name (rather than importing `telemetryStableStringify` from
  *  core/hash.ts) because SPEC/ledger-trust.md's "Exported functions"
  *  list names `stableStringify` as a real export of THIS module — the
@@ -118,7 +118,7 @@ function normalizeReportedUsage(usage) {
     };
 }
 /** Verify the agent's signed usage against the operator-provisioned
- *  public key. Two-arm check (v2/PLAN.md byte-compat item 11): try the
+ *  public key. Two-arm check (docs/rebuild/PLAN.md byte-compat item 11): try the
  *  5-field payload (with resultDigest) first; on a miss, retry the
  *  4-field payload (old signers still verify). `coversResult` is set
  *  ONLY on a first-arm match — a 4-field fallback match never covers the

package/dist/core/trust/telemetry-ledger.js

@@ -7,7 +7,7 @@
 //
 // MILESTONE 8. Byte-exact port of the old build's src/telemetry-ledger.ts
 // verify-side logic. Uses core/hash.ts's `sha256`/`telemetryStableStringify`
-// (see v2/PLAN.md byte-compat item 2's key-omission-vs-null rule).
+// (see docs/rebuild/PLAN.md byte-compat item 2's key-omission-vs-null rule).
 //
 // Evidence: SPEC/ledger-trust.md "Telemetry ledger record", byte-compat
 // items 2 and 12; plugins/cool-workflow/src/telemetry-ledger.ts:1-224.
@@ -43,7 +43,7 @@ function genesisPrevHash(runId) {
  *  recordHash itself. `reportedUsage`/`resultDigest` are OMITTED (not
  *  `null`) when absent, so a usage-only record's hash is byte-identical
  *  to a pre-result-coverage one (back-compat with old ledgers) — see
- *  v2/PLAN.md byte-compat item 2. */
+ *  docs/rebuild/PLAN.md byte-compat item 2. */
 function recordHashInput(record) {
     return (0, hash_1.telemetryStableStringify)({
         schemaVersion: record.schemaVersion,

package/dist/core/types/execution-backend.js

@@ -0,0 +1,18 @@
+"use strict";
+// core/types/execution-backend.ts — plain data shapes for the driver layer.
+//
+// MILESTONE 5 (docs/rebuild/PLAN.md build order, step 5). Byte-exact port of the shapes
+// in the old build's src/types/execution-backend.ts and the sandbox slice of
+// src/types/sandbox.ts that this subsystem needs. Types only — no logic —
+// so this file lives in core/ (moved here from shell/execution-backend/
+// types.ts, which now re-exports it for its 7 existing importers): the
+// executor-boundary welds in core/types/boundary.ts need ResultEnvelope
+// and ExecutionResultEnvelope, and neither can be cherry-picked out of
+// this file alone without also carrying their whole dependency graph
+// (ExecutionProvenance, SandboxAttestation, BackendLocality/BackendKind,
+// BackendExecutionHandle, ...) — so the file moves as one piece, matching
+// its own original header's claim that it was "safe to import from both
+// shell/ (impure) and any future core/ caller."
+//
+// Evidence: SPEC/execution-backend.md.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/core/types/observability.js

@@ -0,0 +1,7 @@
+"use strict";
+// core/types/observability.ts — the one type shell/observability.ts's
+// executor-boundary weld (core/types/boundary.ts) needs, moved here since
+// it is plain data with no dependency on that (impure) file's logic.
+// shell/observability.ts re-exports it so its own existing exports stay
+// unchanged.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/core/util/collate.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stableCompare = stableCompare;
+// core/util/collate.ts — THE one string-ordering comparator for anything
+// whose order feeds a hash, a cache key, or a byte-pinned output.
+//
+// Pure. No fs, no child_process, no net, no process.env, no Date.now(), no
+// Math.random().
+//
+// A bare `a.localeCompare(b)` reads the HOST's default locale (LANG/LC_ALL),
+// which is not part of CW's replay-determinism story: two machines with
+// different locales sorting the SAME string set can walk it in a different
+// order, so anything that hashes that order (a cache key) drifts silently
+// across hosts, and anything that hashes CONTENT built from that order (an
+// eval snapshot) can misreport a determinism regression that is really just
+// a locale difference. `stableCompare` pins the locale explicitly to "en" —
+// this is the SAME bytes Node's full-ICU build already produces under the
+// ICU root locale (which is what a locale-stripped environment, e.g. this
+// repo's own conformance harness, always runs under), so switching a bare
+// `localeCompare` call to this one changes NO existing output.
+function stableCompare(a, b) {
+    return a.localeCompare(b, "en");
+}

package/dist/core/version.js

@@ -7,7 +7,7 @@ exports.MIN_SUPPORTED_RUN_STATE_SCHEMA_VERSION = exports.LEGACY_RUN_STATE_SCHEMA
 // `cw version` output does not change bytes just because the code under it
 // was rebuilt. See SPEC/cli-surface.md "Exact outputs > Version" and
 // conformance/cases/version-basic.case.js (regex `/^\d+\.\d+\.\d+\n$/`).
-exports.CURRENT_COOL_WORKFLOW_VERSION = "0.2.0";
+exports.CURRENT_COOL_WORKFLOW_VERSION = "0.2.2";
 // State-kernel schema version constants (SPEC/state-core.md "Version
 // constants"). Pinned to the old build's src/version.ts byte-for-byte.
 exports.WORKFLOW_APP_SCHEMA_VERSION = 1;

package/dist/core/workflow-apps/app-schema.js

@@ -4,7 +4,7 @@
 // `agent`, `artifact`, `subWorkflow`, `input`), and full manifest
 // validation (`validateWorkflowApp`).
 //
-// MILESTONE 12 (v2/PLAN.md build order; workflow-apps.md). Milestone 6+7
+// MILESTONE 12 (docs/rebuild/PLAN.md build order; workflow-apps.md). Milestone 6+7
 // built the minimal real subset needed to load ONE app and drive it
 // end to end (see git history / the old header note this replaces).
 // This milestone adds, on top of that, WITHOUT changing any existing