cool-workflow 0.2.4 → 0.2.6

package/docs/cross-agent-ledger.7.md

@@ -3,8 +3,15 @@
 CW adds `cw ledger` — a way for two agents scoped to two separate repos to hand
 each other a CHANGE PROPOSAL or a REVIEW VERDICT as verifiable data, not chat.
 One side proposes or reviews; the other side verifies the entry fail-closed and
-turns a proposal into a real pull request. Design notes:
-[handoff-ledger](designs/handoff-ledger.md).
+turns a proposal into a real pull request.
+
+Design note (why not a shared folder): the obvious first design — a shared
+local directory both agents read and append to — only works when both agents
+run on ONE machine with ONE filesystem. Two agents scoped to two repos (or two
+machines) need a transport both can already reach, with saved, inspectable,
+fail-closed state — never a fabricated hand-off. That is why an entry is a
+self-verifying file in a git repo both sides can push and pull, and why the
+kernel holds no git logic at all.
 
 Each entry is a self-contained JSON object that carries its own sha256 content
 digest. The producing side prints one; it reaches the other session by human
@@ -51,13 +58,18 @@ cw ledger review  --from <a> --to <b> --target <proposal-id|pr-ref> \
                   --verdict <approved|rejected> [--findings "a,b"]
 cw ledger verify  [--file <path>]        # else reads the entry from stdin
 cw ledger apply   [--file <path>]        # verify a proposal, then print its diff
-cw ledger list    --dir <ledger-dir> [--dir <mirror-2> ...]   # verify a dir (or union of mirrors)
+cw ledger list    --ledger-dir <ledger-dir> [--ledger-dir <mirror-2> ...]   # verify a dir (or union of mirrors)
 ```
 
 All write JSON to stdout (stdout is data). `propose` and `review` print a sealed
 entry; `verify` prints a check report; `apply` prints a verify-plus-diff report;
 `list` prints a per-entry report over a directory.
 
+`--ledger-dir` is the preferred spelling for `list`: the CLI front door
+treats `--dir` as a global alias of `--repo` on every command, so the old
+`--dir` made one flag mean two things here. `--dir` keeps working
+unchanged as the legacy alias; when both are given, `--ledger-dir` wins.
+
 ## Applying a proposal — fail-closed
 
 A proposal carries a `suggestedDiff`, but a proposal never mutates the target
@@ -131,12 +143,12 @@ on the mirror-union output and on the `cw_ledger_list` MCP tool.
 
 ### Mirrors — union-verifying several directories
 
-`--dir` is repeatable. With two or more, `cw ledger list` **union-verifies** the
+`--ledger-dir` (and the legacy `--dir`) is repeatable. With two or more, `cw ledger list` **union-verifies** the
 directories as mirrors of one ledger (e.g. the same handoff repo cloned from a
 GitHub remote and one or more self-hosted Gitea remotes in different places):
 
 ```
-cw ledger list --dir gh/ledger --dir gitea-eu/ledger --dir gitea-asia/ledger
+cw ledger list --ledger-dir gh/ledger --ledger-dir gitea-eu/ledger --ledger-dir gitea-asia/ledger
 ```
 
 The union is **conflict-free by construction**: entries are immutable and
@@ -146,10 +158,10 @@ across mirrors** — a tampered entry in ANY mirror sets `allOk:false` and exits
 `1`. This is for redundancy and reachability, not load: the ledger's traffic is
 tiny; multiple hosts guard against one being down or unreachable.
 
-A single `--dir` keeps the original single-directory output (a `dir` field, no
+A single directory flag keeps the original single-directory output (a `dir` field, no
 `dirs`); two or more switch to the union shape (`dirs` plus a per-entry `dirs`).
 The transport stays git-host-agnostic — adding a mirror is one more clone + one
-more `--dir`, no code change.
+more `--ledger-dir`, no code change.
 
 ## Entry shape
 
@@ -214,4 +226,4 @@ cw ledger verify --file verdict.json
 Stage 1 shipped the CLI verbs (human relay). Stage 2 adds the MCP surface and
 the git-as-ledger transport (`cw ledger list` over a shared repo). Still open:
 the operator creates the shared handoff repo and scopes both agent environments
-into it. See [handoff-ledger](designs/handoff-ledger.md).
+into it. Setup runbook: [handoff-setup](handoff-setup.md).

package/docs/durable-state-and-locking.7.md

@@ -186,3 +186,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.2.3
 
 0.2.4
+
+0.2.5
+
+0.2.6

package/docs/evidence-adoption-reasoning-chain.7.md

@@ -327,3 +327,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.2.3
 
 0.2.4
+
+0.2.5
+
+0.2.6

package/docs/execution-backends.7.md

@@ -357,3 +357,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.2.3
 
 0.2.4
+
+0.2.5
+
+0.2.6

package/docs/fix.7.md

@@ -8,7 +8,6 @@
 
 ```text
 node dist/cli.js fix
-node dist/cli.js fix --json
 ```
 
 ## DESCRIPTION
@@ -28,9 +27,10 @@ If any check has status `fail`, the command exits with code 1.
 
 ## OPTIONS
 
-`--json`
-: Give back the full doctor report as a stable JSON object, with the same shape
-as `cw doctor --json`. The `checks` array carries every fix string.
+`cw fix` takes no options of its own; its output is always the plain fix-command
+text (a `--json` flag is silently ignored — this byte behavior is pinned by
+`v2/conformance/cases/report-fix.case.js`). For a machine-readable report of the
+same checks, use `cw doctor --json`: its `checks` array carries every fix string.
 
 ## EXIT CODES
 

package/docs/getting-started.md

@@ -1,14 +1,21 @@
 # Getting Started
 
+*This page is for people changing CW itself. To USE `cw`, see the wiki
+[Getting Started](https://github.com/coo1white/cool-workflow/wiki/Getting-Started).*
+
 Start from a new clone:
 
 ```bash
 cd plugins/cool-workflow
 npm install
 npm run build
+npm link         # puts the `cw` command on your PATH
 cw app list
 ```
 
+No `npm link`? Every `cw <args>` line on this page also works as
+`node scripts/cw.js <args>` from this directory.
+
 ## Check your setup first (`cw doctor`)
 
 Like `brew doctor`, this names any setup problem and the fix for it before you
@@ -44,53 +51,54 @@ small:
 Add `--changed-from origin/main` in a source checkout to get the nearest smoke
 tests and guard checks for your current change.
 
-Make a run with a canonical workflow app:
+## One run, end to end
+
+Plan a run with a canonical workflow app. `--dryRun true` keeps it safe;
+put real version numbers in place of `X.Y.Z` / `X.Y.W`:
 
 ```bash
 cw plan release-cut \
   --repo "$PWD" \
-  --version 0.1.25 \
-  --previousVersion 0.1.24 \
+  --version X.Y.Z \
+  --previousVersion X.Y.W \
   --releaseBranch main \
   --dryRun true
 ```
 
-Use the run id you get back:
+The plan prints a run id. See where that run is:
 
 ```bash
 cw status <run-id>
-cw graph <run-id>
+```
+
+Give the next ready task to your agent, one step at a time, in a
+read-only sandbox:
+
+```bash
 cw dispatch <run-id> --limit 1 --sandbox readonly
-cw worker summary <run-id>
-cw topology list
-cw topology apply <run-id> map-reduce --task <task-id>
-cw topology summary <run-id>
-cw multi-agent run <run-id> --topology judge-panel --task <task-id>
-cw multi-agent status <run-id>
-cw multi-agent graph <run-id>
-cw multi-agent dependencies <run-id>
-cw multi-agent failures <run-id>
-cw multi-agent evidence <run-id>
-cw multi-agent step <run-id> --sandbox readonly
-cw multi-agent blackboard <run-id> summary
-cw multi-agent score <run-id> <candidate-id> --criterion correctness=1 --evidence <ref>
-cw multi-agent select <run-id> <candidate-id> --reason "verified winner"
-cw multi-agent summary <run-id>
-cw blackboard summary <run-id>
-cw audit summary <run-id>
-cw audit multi-agent <run-id>
-cw audit policy <run-id>
-cw audit blackboard <run-id>
-cw audit judge <run-id>
-cw eval snapshot <run-id> --id <suite-id>
-cw eval replay .cw/evals/<suite-id>/snapshot.json
-cw eval compare .cw/evals/<suite-id>/snapshot.json .cw/evals/<suite-id>/replay-run.json
-cw eval score .cw/evals/<suite-id>/replay-run.json
-cw eval gate .cw/evals/<suite-id>
-cw eval report .cw/evals/<suite-id>/replay-run.json
+```
+
+When the run is complete, read the report, then prove its record chain
+offline:
+
+```bash
 cw report <run-id> --show
+cw telemetry verify <run-id>
+```
+
+If a run comes to a stop before the end — an agent error, a Ctrl-C, a
+lost session — take it up again from where it stopped:
+
+```bash
+cw run resume <run-id> --drive
 ```
 
+That is the whole loop: plan → status → dispatch → report → verify →
+resume. The common command shapes are on the wiki page
+[Commands or API](https://github.com/coo1white/cool-workflow/wiki/Commands-or-API);
+the complete, generated list of every command — topology, multi-agent,
+audit, eval, and the rest — is in [`cli-mcp-parity.7.md`](cli-mcp-parity.7.md).
+
 Run the smallest check that fits the change:
 
 ```bash

package/docs/index.md

@@ -52,6 +52,23 @@ advanced pages only when you need those parts.
 - [Trust Audit Anchor](trust-audit-anchor.7.md) - head anchor that makes a cut-off audit-log tail visible.
 - [State Explosion Management](state-explosion-management.7.md) - summaries, compact graph views, blackboard digests, and stale-aware compaction.
 - [Evidence Adoption Reasoning Chain](evidence-adoption-reasoning-chain.7.md) - why evidence was adopted or rejected.
+- [Pipeline Runner](pipeline-runner.7.md) - the plan/dispatch/result/commit state machine at the kernel's center.
+- [Pipeline Verbs](pipeline-verbs.7.md) - `cw plan|dispatch|result` and the worker result contract.
+- [Verifier-Gated Commit](verifier-gated-commit.7.md) - evidence checks that let a commit through or refuse it.
+- [Worker Isolation](worker-isolation.7.md) - worker-local state, write acceptance, and the isolation boundary.
+- [Candidate Scoring](candidate-scoring.7.md) - scoring and selection across worker candidates.
+- [Error Feedback](error-feedback.7.md) - structured error records fed back into the next attempt.
+- [State Node](state-node.7.md) - the durable node record every run is made of.
+- [Capability / Topology Registry](capability-topology-registry.7.md) - the one data source behind CLI, MCP, and help.
+- [Cross-Agent Ledger](cross-agent-ledger.7.md) - digest-sealed proposals and reviews between two agents (`cw ledger`).
+- [Routine Triggers](routine.7.md) - `cw routine` local trigger bridge for API/GitHub events.
+- [Remote Source Review](remote-source-review.7.md) - reviewing a repository the agent cannot clone.
+- [Vendor Manifest Loadability](vendor-manifest-loadability.7.md) - proving generated vendor manifests actually load.
+- [Canonical Workflow Apps](canonical-workflow-apps.7.md) - the official app matrix and its checks.
+- [Doctor](doctor.7.md) - environment and onramp diagnosis (`cw doctor`).
+- [Demo](demo.7.md) - the tamper-evidence demo (`cw demo`).
+- [Fix](fix.7.md) - `cw fix` guided recovery for a blocked run.
+- [Init](init.7.md) - `cw init` repository bootstrap.
 
 CW is the base system. Workflow apps are userland. Release and migration rules
 must keep that line clear: stable contracts, clear compatibility checks, and

package/docs/launch/demo.tape

@@ -5,9 +5,10 @@
 #
 #   vhs plugins/cool-workflow/docs/launch/demo.tape
 #
-# Output: docs/launch/demo-tamper.gif. Then in the root README, replace the
-# fenced demo output block under "See it in 30 seconds" with:
-#   ![cw demo tamper](plugins/cool-workflow/docs/launch/demo-tamper.gif)
+# Output: plugins/cool-workflow/docs/launch/demo-tamper.gif. The SHIPPED hero
+# GIF is docs/assets/demo.gif (README.md:18) — after a fresh capture, copy it
+# there so the README picks it up:
+#   cp plugins/cool-workflow/docs/launch/demo-tamper.gif docs/assets/demo.gif
 
 Output plugins/cool-workflow/docs/launch/demo-tamper.gif
 

package/docs/mcp-app-surface.7.md

@@ -14,6 +14,33 @@ The bridge keeps to CW's base-system rules:
   `criteria`
 - errors fail closed through JSON-RPC errors and lasting ErrorFeedback where the
   runtime already keeps feedback
+- a failed `tools/call` (a bad tool name, a missing needed value, or the
+  tool's own code failing) comes back as a normal result shaped
+  `{ content: [...], isError: true }`, with a `Try: <hint>` line when one
+  applies, not a bare JSON-RPC error — so a host that does not show
+  protocol errors to the model still lets it read the message and try
+  again
+
+## Control and Tool Processes
+
+The MCP parent process reads JSON-RPC, writes JSON-RPC, and answers `ping`.
+One child process runs `tools/call` work in order. A file lock wait or a long
+agent call in that child does not stop the parent from answering `ping`.
+
+The child sends back the same JSON text that the old in-process tool call gave
+back. Tool names, input names, output shapes, run files, and CLI parity stay
+the same.
+
+If the child stops during a tool call, CW gives an `isError: true` result for
+that call. CW does not run the call again, because it may have written part of
+a run. Read the saved run state before you try the call again. The next tool
+call starts a new child process.
+
+When stdin ends, CW keeps the ordered tool queue to its end and then stops the
+child. This lets a client send a last batch and close stdin without losing its
+replies. On `SIGINT` or `SIGTERM`, CW stops the child at once and then ends by
+the same signal. A tool waiting on a file lock cannot wake later and write
+state after its parent has ended.
 
 ## App Run Flow
 

package/docs/multi-agent-cli-mcp-surface.7.md

@@ -333,3 +333,7 @@ The host-facing surface tracks the CLI golden-path fixes (`cw -q` routing + repo
 0.2.3
 
 0.2.4
+
+0.2.5
+
+0.2.6

package/docs/multi-agent-eval-replay-harness.7.md

@@ -359,3 +359,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.2.3
 
 0.2.4
+
+0.2.5
+
+0.2.6

package/docs/multi-agent-operator-ux.7.md

@@ -371,3 +371,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.2.3
 
 0.2.4
+
+0.2.5
+
+0.2.6

package/docs/node-snapshot-diff-replay.7.md

@@ -192,3 +192,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.2.3
 
 0.2.4
+
+0.2.5
+
+0.2.6

package/docs/observability-cost-accounting.7.md

@@ -252,3 +252,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.2.3
 
 0.2.4
+
+0.2.5
+
+0.2.6

package/docs/project-index.md

@@ -1,15 +1,15 @@
 # Cool Workflow Project Index
 
-Generated from the current repository code on 2026-07-11 by `npm run sync:project-index`.
+Generated from the current repository code on 2026-07-14 by `npm run sync:project-index`.
 
 ## Snapshot
 
 - Package: `cool-workflow`
-- Version: `0.2.4`
-- Source modules: `149`
+- Version: `0.2.6`
+- Source modules: `153`
 - Workflow apps: `8`
-- Docs: `62`
-- Smoke tests: `204`
+- Docs: `58`
+- Smoke tests: `248`
 - Repository: https://github.com/coo1white/cool-workflow
 
 ## Architecture
@@ -80,12 +80,14 @@ multi-agent host -> topology -> blackboard/coordinator
 
 - [cli/dispatch.ts](../src/cli/dispatch.ts)
 - [cli/entry.ts](../src/cli/entry.ts)
+- [cli/global-flags.ts](../src/cli/global-flags.ts)
 - [cli/io.ts](../src/cli/io.ts)
 - [cli/parseargv.ts](../src/cli/parseargv.ts)
 - [core/capability-data.ts](../src/core/capability-data.ts)
 - [core/capability-table.ts](../src/core/capability-table.ts)
 - [core/format/completion.ts](../src/core/format/completion.ts)
 - [core/format/help.ts](../src/core/format/help.ts)
+- [core/format/recovery-hint.ts](../src/core/format/recovery-hint.ts)
 - [core/format/safe-json.ts](../src/core/format/safe-json.ts)
 - [core/format/state-explosion-text.ts](../src/core/format/state-explosion-text.ts)
 - [core/hash.ts](../src/core/hash.ts)
@@ -123,6 +125,7 @@ multi-agent host -> topology -> blackboard/coordinator
 - [core/util/numeric-flag.ts](../src/core/util/numeric-flag.ts)
 - [mcp/dispatch.ts](../src/mcp/dispatch.ts)
 - [mcp/server.ts](../src/mcp/server.ts)
+- [mcp/tool-process.ts](../src/mcp/tool-process.ts)
 - [shell/agent-config.ts](../src/shell/agent-config.ts)
 - [shell/app-run-cli.ts](../src/shell/app-run-cli.ts)
 - [shell/audit-cli.ts](../src/shell/audit-cli.ts)
@@ -164,6 +167,7 @@ multi-agent host -> topology -> blackboard/coordinator
 - [shell/observability.ts](../src/shell/observability.ts)
 - [shell/onramp.ts](../src/shell/onramp.ts)
 - [shell/operator-ux-text.ts](../src/shell/operator-ux-text.ts)
+- [shell/perf-trace.ts](../src/shell/perf-trace.ts)
 - [shell/pipeline-cli.ts](../src/shell/pipeline-cli.ts)
 - [shell/pipeline.ts](../src/shell/pipeline.ts)
 - [shell/reclamation-io.ts](../src/shell/reclamation-io.ts)
@@ -218,7 +222,6 @@ multi-agent host -> topology -> blackboard/coordinator
 ## Documentation Map
 
 - [Agent Delegation Drive](agent-delegation-drive.7.md)
-- [Workflow App framework](agent-framework.md)
 - [CANDIDATE-SCORING(7)](candidate-scoring.7.md)
 - [Canonical Workflow Apps](canonical-workflow-apps.7.md)
 - [CAPABILITY-TOPOLOGY-REGISTRY(7) — Cool Workflow Agent-Driven Self-Evolution](capability-topology-registry.7.md)
@@ -253,7 +256,6 @@ multi-agent host -> topology -> blackboard/coordinator
 - [PIPELINE-RUNNER(7)](pipeline-runner.7.md)
 - [PIPELINE-VERBS(7)](pipeline-verbs.7.md)
 - [Cool Workflow Project Index](project-index.md)
-- [Cool Workflow](readme-v0.1.87-full.md)
 - [Real Execution Backend Integrations](real-execution-backends.7.md)
 - [Release And Migration Discipline](release-and-migration.7.md)
 - [Cool Workflow Release History](release-history.md)
@@ -261,11 +263,9 @@ multi-agent host -> topology -> blackboard/coordinator
 - [Remote-Source Review (`--link`)](remote-source-review.7.md)
 - [Verifiable Report Bundle](report-verifiable-bundle.7.md)
 - [ROUTINE(7)](routine.7.md)
-- [Routines](routines.md)
 - [Run Registry / Control Plane](run-registry-control-plane.7.md)
 - [Run Retention & Provable Reclamation](run-retention-reclamation.7.md)
 - [SANDBOX-PROFILES(7)](sandbox-profiles.7.md)
-- [Scheduled Tasks](scheduled-tasks.md)
 - [Security / Trust Hardening](security-trust-hardening.7.md)
 - [Source Context Profiles](source-context-profiles.7.md)
 - [State Explosion Management](state-explosion-management.7.md)
@@ -284,6 +284,7 @@ multi-agent host -> topology -> blackboard/coordinator
 
 Smoke tests mirror the public contracts. The high-signal suites are:
 
+- [agent-auto-detect-gemini-native-smoke.js](../test/agent-auto-detect-gemini-native-smoke.js)
 - [agent-backend-concurrent-user-env-smoke.js](../test/agent-backend-concurrent-user-env-smoke.js)
 - [agent-backend-sandbox-deny-smoke.js](../test/agent-backend-sandbox-deny-smoke.js)
 - [agent-backend-user-env-smoke.js](../test/agent-backend-user-env-smoke.js)
@@ -298,7 +299,9 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [artifact-integrity-smoke.js](../test/artifact-integrity-smoke.js)
 - [audit-verify-smoke.js](../test/audit-verify-smoke.js)
 - [backend-registry-smoke.js](../test/backend-registry-smoke.js)
+- [batch-delegate-error-flush-smoke.js](../test/batch-delegate-error-flush-smoke.js)
 - [batch-output-overflow-smoke.js](../test/batch-output-overflow-smoke.js)
+- [bench-run-smoke.js](../test/bench-run-smoke.js)
 - [blackboard-state-explosion-management-smoke.js](../test/blackboard-state-explosion-management-smoke.js)
 - [block-unapproved-tag-smoke.js](../test/block-unapproved-tag-smoke.js)
 - [budget-scaling-loop-smoke.js](../test/budget-scaling-loop-smoke.js)
@@ -323,13 +326,19 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [clones-gc-smoke.js](../test/clones-gc-smoke.js)
 - [codex-agent-wrapper-smoke.js](../test/codex-agent-wrapper-smoke.js)
 - [collaboration-ops-unit-smoke.js](../test/collaboration-ops-unit-smoke.js)
+- [commit-snapshot-slim-smoke.js](../test/commit-snapshot-slim-smoke.js)
 - [concurrency-default-smoke.js](../test/concurrency-default-smoke.js)
 - [concurrent-failure-semantics-smoke.js](../test/concurrent-failure-semantics-smoke.js)
 - [concurrent-subworkflow-cache-nesting-smoke.js](../test/concurrent-subworkflow-cache-nesting-smoke.js)
+- [concurrent-subworkflow-no-wasted-spawn-smoke.js](../test/concurrent-subworkflow-no-wasted-spawn-smoke.js)
+- [concurrent-subworkflow-only-batch-sigkill-smoke.js](../test/concurrent-subworkflow-only-batch-sigkill-smoke.js)
 - [concurrent-workflow-dsl-smoke.js](../test/concurrent-workflow-dsl-smoke.js)
+- [container-backend-sandbox-deny-smoke.js](../test/container-backend-sandbox-deny-smoke.js)
 - [contract-migration-tooling-smoke.js](../test/contract-migration-tooling-smoke.js)
 - [control-plane-scheduling-smoke.js](../test/control-plane-scheduling-smoke.js)
 - [coordinator-blackboard-smoke.js](../test/coordinator-blackboard-smoke.js)
+- [coordinator-messages-jsonl-atomic-smoke.js](../test/coordinator-messages-jsonl-atomic-smoke.js)
+- [coordinator-messages-jsonl-dirty-append-smoke.js](../test/coordinator-messages-jsonl-dirty-append-smoke.js)
 - [coordinator-topology-persist-dirty-tracking-smoke.js](../test/coordinator-topology-persist-dirty-tracking-smoke.js)
 - [cw-help-per-command-smoke.js](../test/cw-help-per-command-smoke.js)
 - [dead-export-removal-guard-smoke.js](../test/dead-export-removal-guard-smoke.js)
@@ -347,13 +356,17 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [drive-concurrent-round-sigkill-smoke.js](../test/drive-concurrent-round-sigkill-smoke.js)
 - [drive-exhaustion-blocked-smoke.js](../test/drive-exhaustion-blocked-smoke.js)
 - [drive-round-cache-serial-smoke.js](../test/drive-round-cache-serial-smoke.js)
+- [drive-run-mutex-smoke.js](../test/drive-run-mutex-smoke.js)
 - [durable-atomic-write-smoke.js](../test/durable-atomic-write-smoke.js)
 - [end-to-end-demo-smoke.js](../test/end-to-end-demo-smoke.js)
 - [end-to-end-golden-path-smoke.js](../test/end-to-end-golden-path-smoke.js)
+- [endpoint-concurrent-round-smoke.js](../test/endpoint-concurrent-round-smoke.js)
 - [error-feedback-resolution-smoke.js](../test/error-feedback-resolution-smoke.js)
 - [error-feedback-smoke.js](../test/error-feedback-smoke.js)
 - [evidence-adoption-reasoning-smoke.js](../test/evidence-adoption-reasoning-smoke.js)
 - [evidence-content-extraction-smoke.js](../test/evidence-content-extraction-smoke.js)
+- [exec-child-termination-smoke.js](../test/exec-child-termination-smoke.js)
+- [exec-vendor-reap-smoke.js](../test/exec-vendor-reap-smoke.js)
 - [execution-backend-agent-smoke.js](../test/execution-backend-agent-smoke.js)
 - [execution-backend-ci-smoke.js](../test/execution-backend-ci-smoke.js)
 - [execution-backends-smoke.js](../test/execution-backends-smoke.js)
@@ -364,17 +377,29 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [gemini-opencode-agent-wrapper-smoke.js](../test/gemini-opencode-agent-wrapper-smoke.js)
 - [h7-custom-profile-persist-smoke.js](../test/h7-custom-profile-persist-smoke.js)
 - [headline-commands-smoke.js](../test/headline-commands-smoke.js)
+- [http-delegate-child-multibyte-stdin-smoke.js](../test/http-delegate-child-multibyte-stdin-smoke.js)
 - [incremental-resume-smoke.js](../test/incremental-resume-smoke.js)
+- [lang-policy-check-smoke.js](../test/lang-policy-check-smoke.js)
 - [ledger-apply-smoke.js](../test/ledger-apply-smoke.js)
 - [ledger-resolution-smoke.js](../test/ledger-resolution-smoke.js)
 - [ledger-verify-smoke.js](../test/ledger-verify-smoke.js)
 - [loop-bounded-expansion-smoke.js](../test/loop-bounded-expansion-smoke.js)
 - [man-run-registry-traversal-smoke.js](../test/man-run-registry-traversal-smoke.js)
+- [manifest-vendor-registry-failclosed-smoke.js](../test/manifest-vendor-registry-failclosed-smoke.js)
 - [mcp-app-surface-smoke.js](../test/mcp-app-surface-smoke.js)
+- [mcp-control-process-responsiveness-smoke.js](../test/mcp-control-process-responsiveness-smoke.js)
+- [mcp-ping-and-arg-coercion-smoke.js](../test/mcp-ping-and-arg-coercion-smoke.js)
+- [mcp-protocol-version-smoke.js](../test/mcp-protocol-version-smoke.js)
+- [mcp-queue-epipe-smoke.js](../test/mcp-queue-epipe-smoke.js)
 - [mcp-surface-registry-smoke.js](../test/mcp-surface-registry-smoke.js)
+- [mcp-tool-authority-policy-smoke.js](../test/mcp-tool-authority-policy-smoke.js)
 - [mcp-tool-call-coverage-smoke.js](../test/mcp-tool-call-coverage-smoke.js)
+- [mcp-tool-call-error-isresult-smoke.js](../test/mcp-tool-call-error-isresult-smoke.js)
+- [mcp-tool-process-lifecycle-smoke.js](../test/mcp-tool-process-lifecycle-smoke.js)
+- [mcp-tool-shutdown-containment-smoke.js](../test/mcp-tool-shutdown-containment-smoke.js)
 - [mcp-untrusted-content-advisory-smoke.js](../test/mcp-untrusted-content-advisory-smoke.js)
 - [metrics-summary-limit-smoke.js](../test/metrics-summary-limit-smoke.js)
+- [missing-artifact-gate-live-smoke.js](../test/missing-artifact-gate-live-smoke.js)
 - [multi-agent-cli-mcp-surface-smoke.js](../test/multi-agent-cli-mcp-surface-smoke.js)
 - [multi-agent-eval-determinism-regression-smoke.js](../test/multi-agent-eval-determinism-regression-smoke.js)
 - [multi-agent-eval-replay-harness-smoke.js](../test/multi-agent-eval-replay-harness-smoke.js)
@@ -393,11 +418,13 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [numeric-flag-parsing-smoke.js](../test/numeric-flag-parsing-smoke.js)
 - [observability-cost-accounting-smoke.js](../test/observability-cost-accounting-smoke.js)
 - [one-way-boundary-smoke.js](../test/one-way-boundary-smoke.js)
+- [onramp-baseref-failclosed-smoke.js](../test/onramp-baseref-failclosed-smoke.js)
 - [onramp-check-smoke.js](../test/onramp-check-smoke.js)
 - [opencode-agent-wrapper-smoke.js](../test/opencode-agent-wrapper-smoke.js)
 - [operator-ux-smoke.js](../test/operator-ux-smoke.js)
 - [orphan-runs-gc-smoke.js](../test/orphan-runs-gc-smoke.js)
 - [parallel-onramp-smoke.js](../test/parallel-onramp-smoke.js)
+- [parity-cli-reachability-smoke.js](../test/parity-cli-reachability-smoke.js)
 - [parity-doc-sync-smoke.js](../test/parity-doc-sync-smoke.js)
 - [parse-guard-smoke.js](../test/parse-guard-smoke.js)
 - [parse-hardening-round2-smoke.js](../test/parse-hardening-round2-smoke.js)
@@ -407,6 +434,7 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [pipeline-auto-advance-smoke.js](../test/pipeline-auto-advance-smoke.js)
 - [pipeline-runner-smoke.js](../test/pipeline-runner-smoke.js)
 - [project-index-sync-smoke.js](../test/project-index-sync-smoke.js)
+- [purity-gate-dynamic-import-smoke.js](../test/purity-gate-dynamic-import-smoke.js)
 - [quickstart-bundle-smoke.js](../test/quickstart-bundle-smoke.js)
 - [quickstart-check-smoke.js](../test/quickstart-check-smoke.js)
 - [quickstart-corpus-smoke.js](../test/quickstart-corpus-smoke.js)
@@ -419,28 +447,35 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [registry-corrupt-fail-closed-smoke.js](../test/registry-corrupt-fail-closed-smoke.js)
 - [registry-corrupt-state-distinct-error-smoke.js](../test/registry-corrupt-state-distinct-error-smoke.js)
 - [release-check-skip-smoke.js](../test/release-check-skip-smoke.js)
+- [release-flow-cut-hardening-smoke.js](../test/release-flow-cut-hardening-smoke.js)
 - [release-flow-smoke.js](../test/release-flow-smoke.js)
+- [release-gate-detached-head-smoke.js](../test/release-gate-detached-head-smoke.js)
 - [release-gate-smoke.js](../test/release-gate-smoke.js)
+- [release-oneclick-resume-repush-smoke.js](../test/release-oneclick-resume-repush-smoke.js)
 - [release-oneclick-smoke.js](../test/release-oneclick-smoke.js)
 - [release-pipeline-hygiene-smoke.js](../test/release-pipeline-hygiene-smoke.js)
 - [release-tooling-smoke.js](../test/release-tooling-smoke.js)
 - [remote-link-archive-smoke.js](../test/remote-link-archive-smoke.js)
 - [remote-link-git-smoke.js](../test/remote-link-git-smoke.js)
 - [report-bundle-smoke.js](../test/report-bundle-smoke.js)
+- [report-pubkey-pin-smoke.js](../test/report-pubkey-pin-smoke.js)
 - [report-verify-bundle-smoke.js](../test/report-verify-bundle-smoke.js)
 - [result-normalize-smoke.js](../test/result-normalize-smoke.js)
 - [robustness-failclosed-smoke.js](../test/robustness-failclosed-smoke.js)
 - [robustness-hardening-smoke.js](../test/robustness-hardening-smoke.js)
 - [run-all-agent-env-hermetic-smoke.js](../test/run-all-agent-env-hermetic-smoke.js)
 - [run-all-json-summary-smoke.js](../test/run-all-json-summary-smoke.js)
+- [run-archive-intake-limits-smoke.js](../test/run-archive-intake-limits-smoke.js)
 - [run-export-cross-machine-smoke.js](../test/run-export-cross-machine-smoke.js)
 - [run-export-import-smoke.js](../test/run-export-import-smoke.js)
 - [run-export-restore-rerun-smoke.js](../test/run-export-restore-rerun-smoke.js)
 - [run-export-restore-resume-smoke.js](../test/run-export-restore-resume-smoke.js)
 - [run-fixture-compat-smoke.js](../test/run-fixture-compat-smoke.js)
+- [run-import-canonical-table-smoke.js](../test/run-import-canonical-table-smoke.js)
 - [run-import-path-traversal-smoke.js](../test/run-import-path-traversal-smoke.js)
 - [run-import-tamper-failclosed-smoke.js](../test/run-import-tamper-failclosed-smoke.js)
 - [run-inspect-archive-smoke.js](../test/run-inspect-archive-smoke.js)
+- [run-paths-shell-boundary-smoke.js](../test/run-paths-shell-boundary-smoke.js)
 - [run-registry-control-plane-smoke.js](../test/run-registry-control-plane-smoke.js)
 - [run-restore-failclosed-smoke.js](../test/run-restore-failclosed-smoke.js)
 - [run-resume-drive-smoke.js](../test/run-resume-drive-smoke.js)
@@ -449,10 +484,12 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [sample-determinism-smoke.js](../test/sample-determinism-smoke.js)
 - [sandbox-env-batch-hardening-smoke.js](../test/sandbox-env-batch-hardening-smoke.js)
 - [sandbox-profile-smoke.js](../test/sandbox-profile-smoke.js)
+- [sched-input-bounds-smoke.js](../test/sched-input-bounds-smoke.js)
 - [sched-policy-validation-smoke.js](../test/sched-policy-validation-smoke.js)
 - [schedule-routine-daemon-smoke.js](../test/schedule-routine-daemon-smoke.js)
 - [scheduling-routine-lock-concurrency-smoke.js](../test/scheduling-routine-lock-concurrency-smoke.js)
 - [schema-validation-smoke.js](../test/schema-validation-smoke.js)
+- [schema-version-definition-guard-smoke.js](../test/schema-version-definition-guard-smoke.js)
 - [security-trust-hardening-smoke.js](../test/security-trust-hardening-smoke.js)
 - [self-audit-hardening-smoke.js](../test/self-audit-hardening-smoke.js)
 - [sigint-sigterm-drive-loop-smoke.js](../test/sigint-sigterm-drive-loop-smoke.js)
@@ -469,6 +506,7 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [telemetry-attest-wrap-smoke.js](../test/telemetry-attest-wrap-smoke.js)
 - [telemetry-attestation-smoke.js](../test/telemetry-attestation-smoke.js)
 - [telemetry-fail-closed-smoke.js](../test/telemetry-fail-closed-smoke.js)
+- [telemetry-ledger-append-lock-concurrency-smoke.js](../test/telemetry-ledger-append-lock-concurrency-smoke.js)
 - [telemetry-ledger-smoke.js](../test/telemetry-ledger-smoke.js)
 - [telemetry-metrics-coverage-smoke.js](../test/telemetry-metrics-coverage-smoke.js)
 - [telemetry-verify-signatures-smoke.js](../test/telemetry-verify-signatures-smoke.js)
@@ -476,14 +514,20 @@ Smoke tests mirror the public contracts. The high-signal suites are:
 - [trust-audit-anchor-smoke.js](../test/trust-audit-anchor-smoke.js)
 - [trust-audit-append-lock-concurrency-smoke.js](../test/trust-audit-append-lock-concurrency-smoke.js)
 - [trust-audit-append-tail-cache-smoke.js](../test/trust-audit-append-tail-cache-smoke.js)
+- [trust-audit-ensure-create-no-truncate-smoke.js](../test/trust-audit-ensure-create-no-truncate-smoke.js)
+- [trust-audit-summary-durable-write-skip-smoke.js](../test/trust-audit-summary-durable-write-skip-smoke.js)
+- [trust-audit-torn-tail-append-smoke.js](../test/trust-audit-torn-tail-append-smoke.js)
 - [vendor-manifest-load-smoke.js](../test/vendor-manifest-load-smoke.js)
 - [vendor-preflight-smoke.js](../test/vendor-preflight-smoke.js)
 - [verdict-signing-workflow-smoke.js](../test/verdict-signing-workflow-smoke.js)
 - [verifier-gated-commit-smoke.js](../test/verifier-gated-commit-smoke.js)
+- [verify-audit-cites-smoke.js](../test/verify-audit-cites-smoke.js)
 - [verify-bump-reproduction-smoke.js](../test/verify-bump-reproduction-smoke.js)
 - [verify-import-audit-chain-smoke.js](../test/verify-import-audit-chain-smoke.js)
 - [web-desktop-workbench-smoke.js](../test/web-desktop-workbench-smoke.js)
 - [wiring-lazy-shell-imports-smoke.js](../test/wiring-lazy-shell-imports-smoke.js)
+- [workbench-load-smoke.js](../test/workbench-load-smoke.js)
+- [workbench-port-range-smoke.js](../test/workbench-port-range-smoke.js)
 - [worker-accept-path-architecture-smoke.js](../test/worker-accept-path-architecture-smoke.js)
 - [worker-isolation-smoke.js](../test/worker-isolation-smoke.js)
 - [worker-retry-count-smoke.js](../test/worker-retry-count-smoke.js)

package/docs/real-execution-backends.7.md

@@ -199,3 +199,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.2.3
 
 0.2.4
+
+0.2.5
+
+0.2.6

package/docs/release-and-migration.7.md

@@ -339,3 +339,7 @@ _No behavioral change in v0.1.89 (CLI-surface golden-path + help-output fixes on
 0.2.3
 
 0.2.4
+
+0.2.5
+
+0.2.6