cool-workflow 0.2.1 → 0.2.2

package/dist/core/format/help.js

@@ -28,9 +28,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.formatHelp = formatHelp;
 exports.formatCommandHelp = formatCommandHelp;
 exports.formatInfo = formatInfo;
+exports.formatSearchResults = formatSearchResults;
 const capability_table_1 = require("../capability-table");
-/** src/orchestrator.ts:934-951 — the exact "More commands" token set, in
- *  this exact order (space-joined in the source, pipe-joined for display). */
+/** src/orchestrator.ts:934-951 — the "More commands" token set, in the old
+ *  build's order (space-joined in the source, pipe-joined for display).
+ *  One change from the old capture: `update` is gone. The verb had no code
+ *  behind it in this build (`cw update` said "Unknown command"), so the
+ *  help must not offer it. See parseargv.ts KNOWN_COMMANDS. */
 const MORE_COMMANDS_TOKENS = [
     "list", "search", "info", "init", "plan", "status", "next", "dispatch",
     "result", "state", "commit", "report", "app", "sandbox", "backend",
@@ -40,7 +44,7 @@ const MORE_COMMANDS_TOKENS = [
     "summary", "blackboard", "coordinator", "metrics", "operator", "sched",
     "gc", "telemetry", "migration", "demo", "workbench", "approve", "reject",
     "comment", "handoff", "ledger", "graph", "eval", "man", "version",
-    "update", "fix",
+    "fix",
 ];
 const MORE_COMMANDS_WRAP_WIDTH = 76;
 /** src/orchestrator.ts:940-951 — greedily pack pipe-joined tokens into
@@ -205,7 +209,9 @@ const COMMAND_HELP_ROWS = {
 /** src/orchestrator.ts:899-933 — the top-level `cw help` text. Color is
  *  intentionally NOT applied here (this milestone's conformance runs pipe
  *  stdout, so NO_COLOR/non-TTY always wins); byte content matches the
- *  plain-text capture at SPEC/cli-help/_root.txt exactly. */
+ *  plain-text capture at SPEC/cli-help/_root.txt, but for the dead
+ *  `update` lines, which were taken out on purpose (no code was behind
+ *  the verb — see MORE_COMMANDS_TOKENS note above). */
 function formatHelp() {
     const moreCommandsLines = wrapPipeJoined(MORE_COMMANDS_TOKENS, MORE_COMMANDS_WRAP_WIDTH);
     const lines = [
@@ -214,7 +220,6 @@ function formatHelp() {
         '  -q "question" [-claude|-codex|-gemini|-deepseek]  Ask a question, get a report',
         '  -q "question" --link <url>                 Review a remote repo by URL',
         "  version                                   Show version",
-        "  update                                    Update to latest release",
         "  doctor                                    Check setup",
         "  fix                                       Show fix commands for setup issues",
         "",
@@ -312,3 +317,21 @@ function formatInfo(appId, data) {
     lines.push(`  Run: cw quickstart ${appId} --repo . --question "..."`);
     return lines.join("\n");
 }
+/** `cw search <keyword>`'s human text — byte-exact to the milestone-1
+ *  carry-over's own formatSearchResults (moved here from cli/dispatch.ts
+ *  so the search capability-table row, which lives in core/, can render
+ *  its own text without core importing from cli/). */
+function formatSearchResults(keyword, results) {
+    if (results.length === 0) {
+        return `No workflows matched "${keyword}".\n  Tip: cw list for all available workflows.`;
+    }
+    const lines = [`${results.length} workflow${results.length === 1 ? "" : "s"} matching "${keyword}"`];
+    for (const r of results) {
+        lines.push(`  ${r.id} — ${r.title}`);
+        const cut = r.summary.length > 120 ? `${r.summary.slice(0, 119)}…` : r.summary;
+        lines.push(`    ${cut}`);
+    }
+    lines.push("");
+    lines.push("Use cw info <id> for full details.");
+    return lines.join("\n");
+}

package/dist/core/multi-agent/collaboration.js

@@ -36,6 +36,7 @@ exports.listComments = listComments;
 exports.distinctTargets = distinctTargets;
 exports.formatReviewStatus = formatReviewStatus;
 exports.formatCommentList = formatCommentList;
+const collate_1 = require("../util/collate");
 exports.COLLABORATION_SCHEMA_VERSION = 1;
 /** The single, honest stand-in for an absent identity. */
 exports.UNATTRIBUTED_ACTOR = {
@@ -213,7 +214,7 @@ function matchesAnyTarget(target, related) {
     return related.some((entry) => sameTarget(target, entry));
 }
 function compareByCreated(left, right) {
-    return left.createdAt.localeCompare(right.createdAt) || left.id.localeCompare(right.id);
+    return (0, collate_1.stableCompare)(left.createdAt, right.createdAt) || (0, collate_1.stableCompare)(left.id, right.id);
 }
 function disqualify(record, policy, selfIds) {
     const actor = record.actor;
@@ -453,7 +454,7 @@ function distinctTargets(state) {
         seen.set(targetKey(record.target), record.target);
     for (const record of state.handoffs)
         seen.set(targetKey(record.target), record.target);
-    return [...seen.values()].sort((left, right) => targetKey(left).localeCompare(targetKey(right)));
+    return [...seen.values()].sort((left, right) => (0, collate_1.stableCompare)(targetKey(left), targetKey(right)));
 }
 function formatReviewStatus(report) {
     const lines = [];

package/dist/core/multi-agent/coordinator.js

@@ -47,6 +47,7 @@ exports.summarizeBlackboard = summarizeBlackboard;
 exports.listBlackboardMessages = listBlackboardMessages;
 exports.listBlackboardArtifacts = listBlackboardArtifacts;
 exports.buildBlackboardGraph = buildBlackboardGraph;
+const collate_1 = require("../util/collate");
 exports.BLACKBOARD_SCHEMA_VERSION = 1;
 /** Dedup, SORTS. Coordinator-side sorting `unique` — byte-identical
  *  behavior to core/multi-agent/runtime.ts's own copy, kept as a
@@ -420,7 +421,7 @@ function summarizeBlackboard(runId, state, blackboardId, defaultIndexPath) {
     ].sort();
     const readyForFanin = Boolean(board && !openQuestions.length && !conflicts.length && artifacts.length > 0 && missingEvidence.length === 0);
     const latestSnapshot = scoped(state.snapshots)
-        .sort((left, right) => left.createdAt.localeCompare(right.createdAt))
+        .sort((left, right) => (0, collate_1.stableCompare)(left.createdAt, right.createdAt))
         .at(-1);
     return {
         runId,
@@ -454,12 +455,12 @@ function nextAction(runId, board, openQuestions, conflicts, artifacts) {
 function listBlackboardMessages(state, options = {}) {
     return state.messages
         .filter((message) => (!options.blackboardId || message.blackboardId === options.blackboardId) && (!options.topicId || message.topicId === options.topicId))
-        .sort((left, right) => left.createdAt.localeCompare(right.createdAt) || left.id.localeCompare(right.id));
+        .sort((left, right) => (0, collate_1.stableCompare)(left.createdAt, right.createdAt) || (0, collate_1.stableCompare)(left.id, right.id));
 }
 function listBlackboardArtifacts(state, options = {}) {
     return state.artifacts
         .filter((artifact) => (!options.blackboardId || artifact.blackboardId === options.blackboardId) && (!options.topicId || artifact.topicId === options.topicId))
-        .sort((left, right) => left.id.localeCompare(right.id));
+        .sort((left, right) => (0, collate_1.stableCompare)(left.id, right.id));
 }
 function buildBlackboardGraph(runId, state, recordPath, messagesPath) {
     const nodes = [];

package/dist/core/pipeline/commit-gate.js

@@ -20,6 +20,7 @@ exports.formatCommitId = formatCommitId;
 exports.gateFailureSeq = gateFailureSeq;
 const evidence_grounding_1 = require("../trust/evidence-grounding");
 const result_normalize_1 = require("./result-normalize");
+const collate_1 = require("../util/collate");
 /** The sandbox profile that accepted a candidate's worker output — the
  *  worker's own profile when present, else the backing task's. Pure port of
  *  the old build's src/gates.ts sandboxProfileForCandidate. */
@@ -97,7 +98,7 @@ function findSelectionNode(run, selectionId) {
 function latestSelectionForCandidate(run, candidateId) {
     return [...(run.candidateSelections || [])]
         .filter((s) => s.candidateId === candidateId)
-        .sort((a, b) => (b.selectedAt || "").localeCompare(a.selectedAt || ""))[0];
+        .sort((a, b) => (0, collate_1.stableCompare)(b.selectedAt || "", a.selectedAt || ""))[0];
 }
 function evidenceLocatorString(entry) {
     const ref = entry.locator || entry.path || entry.summary || entry.id;

package/dist/core/state/state-explosion/digest.js

@@ -29,6 +29,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.summarizeBlackboardDigest = summarizeBlackboardDigest;
 const hash_1 = require("../../hash");
 const helpers_1 = require("./helpers");
+const collate_1 = require("../../util/collate");
 /** Deterministic structural summary of one (or the default) blackboard.
  *  Every list is sorted by id (`byId`); `recentChanges` is the last 10 by
  *  `updatedAt` desc, THEN re-sorted by id for the final list (matching the
@@ -63,7 +64,7 @@ function summarizeBlackboardDigest(run, blackboardId, now) {
         .map((topic) => {
         const topicMessages = messages
             .filter((m) => m.topicId === topic.id)
-            .sort((a, b) => a.createdAt.localeCompare(b.createdAt) || a.id.localeCompare(b.id));
+            .sort((a, b) => (0, collate_1.stableCompare)(a.createdAt, b.createdAt) || (0, collate_1.stableCompare)(a.id, b.id));
         const last = topicMessages[topicMessages.length - 1];
         return {
             id: `thread:${topic.id}`,
@@ -181,7 +182,7 @@ function summarizeBlackboardDigest(run, blackboardId, now) {
         updatedAt: record.updatedAt,
         status: record.status,
     }))
-        .sort((a, b) => b.updatedAt.localeCompare(a.updatedAt) || a.id.localeCompare(b.id))
+        .sort((a, b) => (0, collate_1.stableCompare)(b.updatedAt, a.updatedAt) || (0, collate_1.stableCompare)(a.id, b.id))
         .slice(0, 10)
         .map((record) => ({
         id: `recent:${record.id}`,

package/dist/core/state/state-explosion/graph.js

@@ -37,6 +37,7 @@ exports.buildCompactGraphFromView = buildCompactGraphFromView;
 const size_1 = require("./size");
 const helpers_1 = require("./helpers");
 Object.defineProperty(exports, "byId", { enumerable: true, get: function () { return helpers_1.byId; } });
+const collate_1 = require("../../util/collate");
 const runtime_1 = require("../../multi-agent/runtime");
 const coordinator_1 = require("../../multi-agent/coordinator");
 const topology_1 = require("../../multi-agent/topology");
@@ -144,8 +145,8 @@ function runToGraphView(run) {
         return true;
     });
     return {
-        nodes: [...nodes.values()].sort((a, b) => a.kind.localeCompare(b.kind) || a.id.localeCompare(b.id)),
-        edges: dedupedEdges.sort((a, b) => a.from.localeCompare(b.from) || a.to.localeCompare(b.to) || (a.label || "").localeCompare(b.label || "")),
+        nodes: [...nodes.values()].sort((a, b) => (0, collate_1.stableCompare)(a.kind, b.kind) || (0, collate_1.stableCompare)(a.id, b.id)),
+        edges: dedupedEdges.sort((a, b) => (0, collate_1.stableCompare)(a.from, b.from) || (0, collate_1.stableCompare)(a.to, b.to) || (0, collate_1.stableCompare)(a.label || "", b.label || "")),
     };
 }
 /** `buildCompactGraph(run, view, options)` — builds the graph view via
@@ -192,8 +193,8 @@ function runToGraphViewFromWorkflowRun(run) {
         edges.push(edge);
     }
     return {
-        nodes: [...nodes.values()].sort((a, b) => a.kind.localeCompare(b.kind) || a.id.localeCompare(b.id)),
-        edges: edges.sort((a, b) => a.from.localeCompare(b.from) || a.to.localeCompare(b.to) || (a.label || "").localeCompare(b.label || "")),
+        nodes: [...nodes.values()].sort((a, b) => (0, collate_1.stableCompare)(a.kind, b.kind) || (0, collate_1.stableCompare)(a.id, b.id)),
+        edges: edges.sort((a, b) => (0, collate_1.stableCompare)(a.from, b.from) || (0, collate_1.stableCompare)(a.to, b.to) || (0, collate_1.stableCompare)(a.label || "", b.label || "")),
     };
 }
 function collapseRuleFor() {
@@ -470,7 +471,7 @@ function buildCompactGraphFromView(runId, full, view = "compact", options = {})
     // critical-path — docs/rebuild/PLAN.md byte-compat item 9).
     const synthetic = [];
     const collapsedNodeIds = new Map(); // sourceNodeId -> syntheticId
-    for (const [bucketKey, ids] of [...buckets.entries()].sort((a, b) => a[0].localeCompare(b[0]))) {
+    for (const [bucketKey, ids] of [...buckets.entries()].sort((a, b) => (0, collate_1.stableCompare)(a[0], b[0]))) {
         if (view !== "critical-path" && ids.length < thresholds.collapseBucket) {
             for (const id of ids)
                 keep.add(id);
@@ -519,9 +520,9 @@ function buildCompactGraphFromView(runId, full, view = "compact", options = {})
         edges.push({ from, to, label: edge.label });
     }
     return finalizeGraphRecord(runId, view, options, full, {
-        nodes: nodes.sort((a, b) => a.kind.localeCompare(b.kind) || a.id.localeCompare(b.id)),
-        edges: edges.sort((a, b) => a.from.localeCompare(b.from) || a.to.localeCompare(b.to) || (a.label || "").localeCompare(b.label || "")),
-        syntheticNodes: synthetic.sort((a, b) => a.id.localeCompare(b.id)),
+        nodes: nodes.sort((a, b) => (0, collate_1.stableCompare)(a.kind, b.kind) || (0, collate_1.stableCompare)(a.id, b.id)),
+        edges: edges.sort((a, b) => (0, collate_1.stableCompare)(a.from, b.from) || (0, collate_1.stableCompare)(a.to, b.to) || (0, collate_1.stableCompare)(a.label || "", b.label || "")),
+        syntheticNodes: synthetic.sort((a, b) => (0, collate_1.stableCompare)(a.id, b.id)),
         critical,
     });
 }

package/dist/core/state/state-explosion/helpers.js

@@ -33,6 +33,7 @@ exports.slug = slug;
 const hash_1 = require("../../hash");
 Object.defineProperty(exports, "fingerprintRecords", { enumerable: true, get: function () { return hash_1.fingerprintRecords; } });
 Object.defineProperty(exports, "fingerprintStrings", { enumerable: true, get: function () { return hash_1.fingerprintStrings; } });
+const collate_1 = require("../../util/collate");
 /** True for `failed`, `blocked`, `rejected`, `conflicting` — the never-
  *  collapse status set (docs/rebuild/PLAN.md byte-compat item 9). */
 function isProtectedStatus(status) {
@@ -83,7 +84,7 @@ function unique(values) {
     return Array.from(new Set(values.filter(Boolean))).sort();
 }
 function byId(a, b) {
-    return a.id.localeCompare(b.id);
+    return (0, collate_1.stableCompare)(a.id, b.id);
 }
 /** Whitespace-collapsed; over 80 chars becomes the first 77 chars + `...`. */
 function truncate(value) {

package/dist/core/trust/ledger.js

@@ -22,6 +22,7 @@ exports.verifyLedgerEntry = verifyLedgerEntry;
 exports.applyLedgerProposal = applyLedgerProposal;
 exports.resolveLedgerInbox = resolveLedgerInbox;
 const hash_1 = require("../hash");
+const collate_1 = require("../util/collate");
 /** sha256 over the canonical content (every field except `id` and
  *  `digest`, which are derived FROM it). Returns the full `sha256:<hex>`
  *  form — the same prefixed spelling every other hash chain uses. */
@@ -187,7 +188,7 @@ function resolveLedgerInbox(entries) {
             reviews: answering.map((r) => r.id).sort(),
         };
     })
-        .sort((a, b) => a.id.localeCompare(b.id));
+        .sort((a, b) => (0, collate_1.stableCompare)(a.id, b.id));
     const tally = (s) => proposals.filter((p) => p.resolution === s).length;
     return {
         proposals,

package/dist/core/types/execution-backend.js

@@ -0,0 +1,18 @@
+"use strict";
+// core/types/execution-backend.ts — plain data shapes for the driver layer.
+//
+// MILESTONE 5 (docs/rebuild/PLAN.md build order, step 5). Byte-exact port of the shapes
+// in the old build's src/types/execution-backend.ts and the sandbox slice of
+// src/types/sandbox.ts that this subsystem needs. Types only — no logic —
+// so this file lives in core/ (moved here from shell/execution-backend/
+// types.ts, which now re-exports it for its 7 existing importers): the
+// executor-boundary welds in core/types/boundary.ts need ResultEnvelope
+// and ExecutionResultEnvelope, and neither can be cherry-picked out of
+// this file alone without also carrying their whole dependency graph
+// (ExecutionProvenance, SandboxAttestation, BackendLocality/BackendKind,
+// BackendExecutionHandle, ...) — so the file moves as one piece, matching
+// its own original header's claim that it was "safe to import from both
+// shell/ (impure) and any future core/ caller."
+//
+// Evidence: SPEC/execution-backend.md.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/core/types/observability.js

@@ -0,0 +1,7 @@
+"use strict";
+// core/types/observability.ts — the one type shell/observability.ts's
+// executor-boundary weld (core/types/boundary.ts) needs, moved here since
+// it is plain data with no dependency on that (impure) file's logic.
+// shell/observability.ts re-exports it so its own existing exports stay
+// unchanged.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/core/util/collate.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stableCompare = stableCompare;
+// core/util/collate.ts — THE one string-ordering comparator for anything
+// whose order feeds a hash, a cache key, or a byte-pinned output.
+//
+// Pure. No fs, no child_process, no net, no process.env, no Date.now(), no
+// Math.random().
+//
+// A bare `a.localeCompare(b)` reads the HOST's default locale (LANG/LC_ALL),
+// which is not part of CW's replay-determinism story: two machines with
+// different locales sorting the SAME string set can walk it in a different
+// order, so anything that hashes that order (a cache key) drifts silently
+// across hosts, and anything that hashes CONTENT built from that order (an
+// eval snapshot) can misreport a determinism regression that is really just
+// a locale difference. `stableCompare` pins the locale explicitly to "en" —
+// this is the SAME bytes Node's full-ICU build already produces under the
+// ICU root locale (which is what a locale-stripped environment, e.g. this
+// repo's own conformance harness, always runs under), so switching a bare
+// `localeCompare` call to this one changes NO existing output.
+function stableCompare(a, b) {
+    return a.localeCompare(b, "en");
+}

package/dist/core/version.js

@@ -7,7 +7,7 @@ exports.MIN_SUPPORTED_RUN_STATE_SCHEMA_VERSION = exports.LEGACY_RUN_STATE_SCHEMA
 // `cw version` output does not change bytes just because the code under it
 // was rebuilt. See SPEC/cli-surface.md "Exact outputs > Version" and
 // conformance/cases/version-basic.case.js (regex `/^\d+\.\d+\.\d+\n$/`).
-exports.CURRENT_COOL_WORKFLOW_VERSION = "0.2.1";
+exports.CURRENT_COOL_WORKFLOW_VERSION = "0.2.2";
 // State-kernel schema version constants (SPEC/state-core.md "Version
 // constants"). Pinned to the old build's src/version.ts byte-for-byte.
 exports.WORKFLOW_APP_SCHEMA_VERSION = 1;

package/dist/shell/audit-cli.js

@@ -44,6 +44,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.auditVerifyCli = auditVerifyCli;
+exports.auditHeadCli = auditHeadCli;
 exports.auditSummaryCli = auditSummaryCli;
 exports.auditMultiAgentCli = auditMultiAgentCli;
 exports.auditPolicyCli = auditPolicyCli;
@@ -65,12 +66,36 @@ const sandbox_profile_1 = require("./sandbox-profile");
 function invocationCwd(args) {
     return typeof args.cwd === "string" && args.cwd.trim() ? path.resolve(args.cwd) : process.cwd();
 }
+/** Parse the optional truncation anchor off the CLI options / MCP args
+ *  (`--expect-head <hash>` / `--expect-count <n>`; MCP: expectHead /
+ *  expectCount). Fail-closed on a malformed count — a flag given without
+ *  a usable value must never silently weaken the check it asked for. */
+function anchorOption(args) {
+    const headRaw = args["expect-head"] ?? args.expectHead;
+    const countRaw = args["expect-count"] ?? args.expectCount;
+    const expectHead = optionalString(headRaw);
+    if (headRaw !== undefined && headRaw !== null && expectHead === undefined) {
+        throw new Error("audit verify: --expect-head requires a hash value");
+    }
+    let expectCount;
+    if (countRaw !== undefined && countRaw !== null) {
+        const parsed = Number(countRaw);
+        if (countRaw === true || !Number.isInteger(parsed) || parsed < 0) {
+            throw new Error("audit verify: --expect-count requires a non-negative integer");
+        }
+        expectCount = parsed;
+    }
+    if (expectHead === undefined && expectCount === undefined)
+        return undefined;
+    return { expectHead, expectCount };
+}
 function auditVerifyCli(runId, args) {
     if (!runId)
         throw new Error("audit verify requires a run id (cw audit verify <run-id>)");
+    const anchor = anchorOption(args);
     const run = (0, run_store_1.loadRunFromCwd)(runId, invocationCwd(args));
-    const v = (0, trust_audit_1.verifyTrustAudit)(run);
-    return {
+    const v = (0, trust_audit_1.verifyTrustAudit)(run, anchor);
+    const result = {
         schemaVersion: 1,
         runId: run.id,
         present: v.present,
@@ -81,6 +106,25 @@ function auditVerifyCli(runId, args) {
         corruptLines: v.corruptLines,
         failedChecks: v.checks.filter((c) => !c.pass).map((c) => ({ name: c.name, code: c.code })),
     };
+    if (anchor) {
+        result.anchor = {
+            ...(anchor.expectHead !== undefined ? { expectHead: anchor.expectHead } : {}),
+            ...(anchor.expectCount !== undefined ? { expectCount: anchor.expectCount } : {}),
+            satisfied: !v.checks.some((c) => c.code === "trust-audit-truncated"),
+        };
+    }
+    return result;
+}
+/** `cw audit head <run>` — the chain head anchor (read-only projection).
+ *  Capture it after a run (or before publishing/exporting); later,
+ *  `cw audit verify <run> --expect-head <hash> --expect-count <n>`
+ *  re-proves the log was not shortened since the capture. */
+function auditHeadCli(runId, args) {
+    if (!runId)
+        throw new Error("audit head requires a run id (cw audit head <run-id>)");
+    const run = (0, run_store_1.loadRunFromCwd)(runId, invocationCwd(args));
+    const head = (0, trust_audit_1.trustAuditHead)(run);
+    return { schemaVersion: 1, runId: run.id, eventCount: head.eventCount, headHash: head.headHash };
 }
 /** MILESTONE 11 (reporting/observability, workbench audit panels) —
  *  `cw audit summary`/`audit multi-agent`/`audit policy`/`audit judge`.

package/dist/shell/commit-summary.js

@@ -46,6 +46,7 @@ exports.commitSummaryCli = commitSummaryCli;
 exports.formatCommitSummaryText = formatCommitSummaryText;
 const path = __importStar(require("node:path"));
 const run_store_1 = require("./run-store");
+const collate_1 = require("../core/util/collate");
 function formatCommitRow(commit) {
     return {
         id: commit.id,
@@ -63,7 +64,7 @@ function formatCommitRow(commit) {
 /** Byte-exact port of the old build's `summarizeOperatorCommits`
  *  (src/operator-ux.ts:339-349). */
 function summarizeOperatorCommits(run) {
-    const commits = [...(run.commits || [])].sort((left, right) => left.createdAt.localeCompare(right.createdAt) || left.id.localeCompare(right.id));
+    const commits = [...(run.commits || [])].sort((left, right) => (0, collate_1.stableCompare)(left.createdAt, right.createdAt) || (0, collate_1.stableCompare)(left.id, right.id));
     const rows = commits.map(formatCommitRow);
     return {
         total: rows.length,

package/dist/shell/drive.js

@@ -7,15 +7,10 @@
 // milestone). Byte-exact port of the old build's src/drive.ts's
 // imperative shell around the pure decision core now in
 // core/pipeline/drive-decide.ts. Sub-workflow nesting and `--incremental`
-// are ported; the concurrent-round driver (driveConcurrentRound) is
-// scoped down to the serial driver run through a width loop, since no
-// case in this milestone's combined gate exercises true concurrent-batch
-// recording order (that is `--concurrency`/parallel-phase-specific and is
-// authored as its own future conformance case per Open risk 5) — the
-// `mode:"parallel"` architecture-review phases still complete correctly
-// through the serial per-task loop, just without the wall-clock-parallel
-// spawn optimization; this is flagged here rather than silently ported as
-// if fully equivalent.
+// are ported; the concurrent-round driver (driveConcurrentRound, below)
+// dispatches and settles a whole round's tasks in one batch (see
+// `--concurrency`/`roundWidth`), pinned by
+// v2/conformance/cases/pipeline-concurrent-round.case.js.
 //
 // Evidence: SPEC/pipeline-run.md "Drive loop — src/drive.ts".
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
@@ -77,6 +72,7 @@ const agent_config_1 = require("./agent-config");
 const registry_1 = require("./execution-backend/registry");
 const agent_1 = require("./execution-backend/agent");
 const hash_1 = require("../core/hash");
+const collate_1 = require("../core/util/collate");
 const pipeline_1 = require("./pipeline");
 const reporter_1 = require("./reporter");
 const fs_atomic_1 = require("./fs-atomic");
@@ -191,7 +187,10 @@ function previousPhaseResultsDigest(run, task) {
         return undefined;
     const previousTaskIds = new Set(run.phases.slice(0, phaseIndex).flatMap((p) => p.taskIds));
     const records = [];
-    for (const candidate of run.tasks.filter((t) => previousTaskIds.has(t.id)).sort((a, b) => a.id.localeCompare(b.id))) {
+    // stableCompare (not a bare localeCompare): this order feeds the sha256
+    // digest below, which feeds the incremental cache key — a host-locale-
+    // dependent order would silently move the cache key across machines.
+    for (const candidate of run.tasks.filter((t) => previousTaskIds.has(t.id)).sort((a, b) => (0, collate_1.stableCompare)(a.id, b.id))) {
         if (candidate.status !== "completed" || !candidate.resultPath || !fs.existsSync(candidate.resultPath)) {
             records.push(undefined);
             continue;
@@ -303,7 +302,24 @@ function processSelectedTask(ctx, selectedId, preparedOutcome, deferPersist = fa
         emitProgress(`↺ ${selected.label || selected.id} (${selected.phase}) — accepting cached result`);
         try {
             fs.writeFileSync(manifest.resultPath, fs.readFileSync(cachePath, "utf8"), "utf8");
+            // Not gated by requireAttestedTelemetry here: the underlying result was
+            // already gated (attested or explicitly overridden) at its FIRST
+            // acceptance, before it was cached. Re-blocking a cache hit would only
+            // punish the operator for their own earlier, already-audited accept.
+            // Still made visible, not silent: when the operator requires attested
+            // telemetry, record that this particular accept came from the cache
+            // rather than a freshly re-verified hop.
             (0, worker_isolation_1.recordWorkerOutput)(run, workerId, manifest.resultPath);
+            if (ctx.config.requireAttestedTelemetry) {
+                (0, trust_audit_1.recordTrustAuditEvent)(run, {
+                    kind: "telemetry.cache-accept",
+                    decision: "recorded",
+                    source: "cw-validated",
+                    workerId,
+                    taskId: selected.id,
+                    metadata: { reason: "result-cache hit; original attestation gate applied at first acceptance, not re-verified here" },
+                });
+            }
             // Advance the run lifecycle stage on accept, as the old build's
             // recordWorkerOutput wrapper did (run.loopStage = "observe").
             run.loopStage = "observe";

package/dist/shell/evidence-reasoning.js

@@ -29,6 +29,7 @@ const fs_atomic_1 = require("./fs-atomic");
 const multi_agent_operator_ux_1 = require("./multi-agent-operator-ux");
 const trust_audit_1 = require("./trust-audit");
 const trust_policy_1 = require("../core/multi-agent/trust-policy");
+const collate_1 = require("../core/util/collate");
 exports.EVIDENCE_REASONING_SCHEMA_VERSION = 1;
 function candidatesOf(run) {
     return (run.candidates || []);
@@ -56,7 +57,7 @@ function buildEvidenceReasoningReport(run, options = {}) {
     const counterfactuals = deriveCounterfactuals(run, scores);
     const chains = operator.evidence
         .map((evidence) => buildChain(run, evidence, { scores, auditEvents, counterfactuals }))
-        .sort((left, right) => statusRank(left.evidenceStatus) - statusRank(right.evidenceStatus) || left.id.localeCompare(right.id));
+        .sort((left, right) => statusRank(left.evidenceStatus) - statusRank(right.evidenceStatus) || (0, collate_1.stableCompare)(left.id, right.id));
     const totals = summarizeTotals(chains);
     const currentFingerprint = fingerprintChains(chains);
     const persisted = options.index;
@@ -340,7 +341,7 @@ function refreshEvidenceReasoning(run) {
         generatedAt: new Date().toISOString(),
         sourceFingerprint: report.sourceFingerprint,
         totals: report.totals,
-        entries: entries.sort((a, b) => a.id.localeCompare(b.id)),
+        entries: entries.sort((a, b) => (0, collate_1.stableCompare)(a.id, b.id)),
         paths: { reasoningDir: dir, indexPath, reportPath },
         nextAction: `node scripts/cw.js multi-agent reasoning ${run.id}`,
     };
@@ -601,5 +602,5 @@ function unique(values) {
     return Array.from(new Set(values.filter(Boolean))).sort();
 }
 function byRef(a, b) {
-    return a.ref.localeCompare(b.ref);
+    return (0, collate_1.stableCompare)(a.ref, b.ref);
 }

package/dist/shell/execution-backend/registry.js

@@ -33,6 +33,7 @@ const container_1 = require("./container");
 const remote_1 = require("./remote");
 const ci_1 = require("./ci");
 const agent_1 = require("./agent");
+const collate_1 = require("../../core/util/collate");
 exports.EXECUTION_BACKEND_SCHEMA_VERSION = 1;
 exports.DEFAULT_BACKEND_ID = "node";
 exports.SANDBOX_DIMENSIONS = ["read", "write", "command", "network", "env"];
@@ -159,7 +160,7 @@ function registeredDrivers() {
 function listBackendDescriptors() {
     return registeredDrivers()
         .map((driver) => specDescriptor(driver.spec))
-        .sort((left, right) => left.id.localeCompare(right.id));
+        .sort((left, right) => (0, collate_1.stableCompare)(left.id, right.id));
 }
 function backendIds() {
     return registeredDrivers()

package/dist/shell/execution-backend/types.js

@@ -1,11 +1,2 @@
 "use strict";
-// shell/execution-backend/types.ts — plain data shapes for the driver layer.
-//
-// MILESTONE 5 (docs/rebuild/PLAN.md build order, step 5). Byte-exact port of the shapes
-// in the old build's src/types/execution-backend.ts and the sandbox slice of
-// src/types/sandbox.ts that this subsystem needs. Types only — no logic — so
-// this file is safe to import from both shell/ (impure) and any future core/
-// caller without violating the core/shell purity split.
-//
-// Evidence: SPEC/execution-backend.md.
 Object.defineProperty(exports, "__esModule", { value: true });

package/dist/shell/fs-atomic.js

@@ -198,14 +198,25 @@ function durableAppendFileSync(file, data) {
 // only when still owned by this pid.
 // ---------------------------------------------------------------------------
 const FILE_LOCK_STALE_MS = 30_000;
+// Lock paths this process holds right now. A nested withFileLock on the
+// SAME target runs its fn directly (re-entrant) instead of waiting on its
+// own lock file until the 240 tries run out — that lets a whole
+// load -> change -> save cycle hold one lock while the save path inside
+// it keeps its own withFileLock call unchanged.
+const HELD_LOCKS = new Set();
 function sleepSync(ms) {
     Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 }
 /** Run `fn` while holding an advisory lock for `targetPath`; always released
  *  (unless the lock was stolen mid-operation, in which case releasing would
- *  corrupt the thief's critical section, so it is deliberately NOT released). */
+ *  corrupt the thief's critical section, so it is deliberately NOT released).
+ *  Re-entrant inside one process: a nested call on the same target runs
+ *  `fn` under the already-held lock. */
 function withFileLock(targetPath, fn) {
     const lock = `${targetPath}.lock`;
+    const heldKey = path.resolve(lock);
+    if (HELD_LOCKS.has(heldKey))
+        return fn();
     fs.mkdirSync(path.dirname(lock), { recursive: true });
     const pid = String(process.pid);
     let acquired = false;
@@ -234,6 +245,7 @@ function withFileLock(targetPath, fn) {
     }
     if (!acquired)
         throw new Error(`could not acquire file lock for ${targetPath}`);
+    HELD_LOCKS.add(heldKey);
     // Refresh mtime right before the critical section.
     try {
         fs.utimesSync(lock, new Date(), new Date());
@@ -263,6 +275,7 @@ function withFileLock(targetPath, fn) {
         return result;
     }
     finally {
+        HELD_LOCKS.delete(heldKey);
         try {
             // Only release if we still own the lock.
             const current = fs.readFileSync(lock, "utf8");

package/dist/shell/multi-agent-operator-ux.js

@@ -62,6 +62,7 @@ const coordinator_io_1 = require("./coordinator-io");
 const multi_agent_io_1 = require("./multi-agent-io");
 const topology_io_1 = require("./topology-io");
 const trust_audit_1 = require("./trust-audit");
+const collate_1 = require("../core/util/collate");
 function maOf(run) {
     return run.multiAgent || {};
 }
@@ -275,7 +276,7 @@ function deriveDependencies(run) {
     for (const commit of commitsOf(run)) {
         add(commit.selectionId ? `${run.id}:selection:${commit.selectionId}` : undefined, String(commit.stateNodeId || `${run.id}:commit:${commit.id}`), "commits", commit.verifierGated ? "committed" : "checkpoint");
     }
-    return rows.filter(uniqueById).sort((left, right) => left.from.localeCompare(right.from) || left.to.localeCompare(right.to));
+    return rows.filter(uniqueById).sort((left, right) => (0, collate_1.stableCompare)(left.from, right.from) || (0, collate_1.stableCompare)(left.to, right.to));
 }
 function deriveFailures(run, dependencies) {
     const rows = [];
@@ -337,7 +338,7 @@ function deriveFailures(run, dependencies) {
     const readySelection = selectionsOf(run).find((selection) => !commitsOf(run).some((commit) => commit.selectionId === selection.id && commit.verifierGated));
     if (readySelection)
         add(String(readySelection.id), "commit-gate", "not-ready", `selection ${readySelection.id} has no verifier-gated commit`, `node scripts/cw.js commit ${run.id} --selection ${readySelection.id} --reason "<verified rationale>"`, readySelection.candidateId);
-    return rows.filter(uniqueByFailure).sort((left, right) => left.kind.localeCompare(right.kind) || left.id.localeCompare(right.id));
+    return rows.filter(uniqueByFailure).sort((left, right) => (0, collate_1.stableCompare)(left.kind, right.kind) || (0, collate_1.stableCompare)(left.id, right.id));
 }
 function deriveEvidence(run) {
     const rows = new Map();
@@ -442,7 +443,7 @@ function deriveEvidence(run) {
     return [...rows.values()]
         .map(normalizeEvidenceStatus)
         .map(withDisposition)
-        .sort((left, right) => statusRank(left.status) - statusRank(right.status) || left.id.localeCompare(right.id));
+        .sort((left, right) => statusRank(left.status) - statusRank(right.status) || (0, collate_1.stableCompare)(left.id, right.id));
 }
 function formatDependencies(rows) {
     const lines = ["Dependencies"];