cowork-flow 1.2.0 → 1.3.0

package/template/.cowork-flow/spec/contracts/spec-checks.md

@@ -21,9 +21,11 @@ checks:
 
 - `files` 只支持两种形式：目录前缀（`src/`，以 `/` 结尾或自动补齐）与
   扩展名（`*.ts`）。完整 glob 形态（`**`、`[]`）解析为错误，声明不执行，
-  doctor 报告——绝不回退为"匹配一切"。
+  doctor 报告——绝不回退为"匹配一切"。多值形态（如 `files: "src/", "lib/"`）
+  每个 token 按同样的引号规则去引号后生效。
 - `when: edit` 的声明在编辑期（PostToolUse）对命中 `files` 的改动文件
-  就地执行，超时被钳制到 3 秒；慢命令请声明 `when: lifecycle`。
+  就地执行，超时被钳制到 2.5 秒（为解释器启动与 cmd 包装留 spawn 预算）；
+  慢命令请声明 `when: lifecycle`。
 - 引号规则：仅值整体为单对引号时去引号；`"python" -c "..."`
   这类含多对引号的命令值原样保留，由执行器按 shell 规则拆分。
 
@@ -42,12 +44,26 @@ spec 为无检查并进 doctor 报告，不炸流程。
 
 - **编辑期**（zcode/claude）：违规输出单行
   `spec-check[<spec>] violation: <首个违规行>`；同一文件 10 秒内只报一次
-  （节流状态在 `.cowork-flow/.runtime/spec-edit-throttle.json`）；执行器
-  缺失或超时静默，绝不阻断编辑流。
+  （节流状态在 `.cowork-flow/.runtime/spec-edit-throttle.json`，检查完整
+  跑过才写节流——执行器崩溃不消费时间窗，重试仍会执行）；执行器
+  缺失或超时静默，绝不阻断编辑流。delegated 子代理会话同样收到 spec
+  违规反馈（子代理是主力写码者）；scope 警告保持 main-only。zcode 主
+  会话的 hook 身份（对话自身 session id）不会被绑定——激活发生在 Bash
+  侧显式身份下——显示与编辑期警告按最新主会话兜底；claude/codex 保持
+  严格会话身份（其 Bash env 携带同一 session id）。zcode 经
+  shim 转发到单源入口（`inject.py`），scope 警告与 spec 警告合并进同一个
+  additionalContext 载荷；claude 走 exit 2 stderr 反馈。
 - **收口期**（task complete）：全量执行，结果进 `meta.specCheckSummary`
   遥测；阻断消息只列未过项摘要。
 - 手动查询：`./.cowork-flow/run spec-check [--file <path>] [--json]
   [--verbose]`。
+- **edit-only 是 best-effort 提示，不是门禁**：Bash 直写绕过 PostToolUse
+  不会触发编辑期反馈；无编辑期快跑能力的宿主（见能力矩阵）同样没有
+  这层提示，且收口期不会对 `when: edit` 声明补跑。需要硬门禁的检查
+  必须声明 `when: lifecycle` 或默认 `both`。
+- **开放决策**：收口期全量执行没有聚合预算——声明多且慢的仓库 complete
+  会线性变慢；是否给收口加并行/预算上限留给后续产品决策，当前保持
+  简单串行。
 
 ## 归属与 sync 策略
 
@@ -60,15 +76,31 @@ spec 为无检查并进 doctor 报告，不炸流程。
 
 | 宿主 | digest 注入 | 编辑期快跑 | 收口强制 |
 | --- | --- | --- | --- |
-| zcode | 有（Specs 行 h2 digest） | 有（PostToolUse 短路径） | 有 |
+| zcode | 有（Specs 行 h2 digest） | 有（PostToolUse 短路径；**仅主会话**） | 有 |
 | claude-code | 有（Python 单源） | 有（PostToolUse，exit 2 反馈） | 有 |
 | opencode | 有 | **降级：无**（插件无 PostToolUse 短路径） | 有 |
 
+**delegated 子代理编辑期缺口（zcode 实测，2026-09-09 两轮）**：ZCode 的插件
+hook 只在主会话工具流上派发（事件模型七事件均挂主会话；子代理是独立内部
+会话流 `sess_subagent_agent_*`），Agent 子代理的 Edit/Write 收不到
+`spec-check[...] violation` 行——runtime 绑定与检查逻辑均正常，缺的是宿主
+派发。补偿机制（subagent-dispatch.md 契约固化）：
+
+1. 子代理完成前自查：`./.cowork-flow/run spec-check` 全量并修复（拉取路径，
+   实测有效）；
+2. 父会话验收前再查：violation 视为验收阻塞（反馈时点从收口提前到返回）；
+3. 实现类任务 Verify 命令默认含 spec-check 自查；
+4. 收口硬门禁兜底不变（violation 阻断 complete）。
+
+治理方向：向宿主提需求扩展子代理工具流的 hook 派发；落地后第 1 条自动
+退化为冗余保险。
+
 ## digest 注入
 
 进入 in_progress 后，stage-contract 的 Specs 行升级为
-`Specs: <spec>(<h2 标题树>); …`：最多 6 个 h2 条目、每条截断 24 字符、
-剔除 `();` 字符；文件缺失不加注解。digest 是条目名索引不是正文，受
+`Specs: <spec>(<h2 标题树>); …`：最多 6 个 h2 条目、每条截断 24 字符、剔除
+`();` 字符；文件缺失不加注解。digest 是条目名索引不是正文，受
 scope-rules.json `stageContract.budget` 硬顶，超预算整行让位
-（Scope/Gates 行永不丢）。格式由三线逐字相等测试锁定
+（Scope/Gates 行永不丢）。python/zcode 输出同源于单一 Python 入口，
+opencode 镜像与它逐字相等由 matrix 用例锁定
 （`test/stage-contract.test.js` matrix）。

package/template/.cowork-flow/spec/contracts/subagent-dispatch.md

@@ -61,12 +61,33 @@ child output. If binding fails, the child must receive fail-closed subagent stat
 and must not run main-session start/resume, task activation, archive, commit,
 or agent coordination.
 
+## Delegated Spec Self-Check
+
+Delegated subagent tool calls receive no edit-phase hook feedback on hosts
+whose plugin hooks cover only the main session stream (verified on zcode:
+plugin PostToolUse fires for main-session tool calls but never for
+Agent-tool children). The reliable pull path is the CLI: before reporting
+completion, `cowork-implement` (and any child that changes files) runs
+
+```text
+./.cowork-flow/run spec-check
+```
+
+fixes every reported violation, and re-runs until the summary is clean or the
+remaining violations are reported as blockers. This is a protocol behavior,
+not a second lifecycle gate — the closeout gate re-runs the same checks and
+blocks completion regardless.
+
 ## Return Acceptance And Closeout
 
 - Wait for the child result with the adapter wait primitive.
 - Confirm no stray running children with the adapter list primitive.
 - Verify the child report by checking files, commands, and results; do not
   trust completed text alone.
+- Before accepting delegated output, run `./.cowork-flow/run spec-check` in
+  the main session and treat every violation as an acceptance blocker: the
+  child receives no edit-phase hook feedback, so acceptance-time checking is
+  the earliest reliable checkpoint for delegated work.
 - After completion or failure, close the child with the adapter cancel/close
   primitive and clean the runtime context sessions.
 - The child remains a leaf executor and must not dispatch, wait for, list, or

package/template/.cowork-flow/spec/runtime/contract-registry.json

@@ -63,6 +63,18 @@
         "when adding new workflow states"
       ]
     },
+    {
+      "id": "FACT_LAYER_ACCESS_V1",
+      "path": ".cowork-flow/spec/contracts/fact-layer-access.md",
+      "digest": [
+        "Task/scope/spec facts are read-only via MCP tools or CLI; writes only flow through CLI lifecycle gates.",
+        "Prefer MCP task_state/task_scope/task_specs for fact queries when available; CLI is the fallback."
+      ],
+      "readWhen": [
+        "when querying task facts or file scope",
+        "when registering the fact layer for a new host or external client"
+      ]
+    },
     {
       "id": "PARTY_MODE_V2_BOARD_V1",
       "path": ".cowork-flow/spec/contracts/party-mode-v2-board.md",

package/template/.opencode/plugins/cowork-flow.js

@@ -14,6 +14,18 @@ const DEFAULT_CONTRACT_REGISTRY = {
       ],
       readWhen: ["before formal subagent dispatch", "when checking subagent health"],
     },
+    {
+      id: "FACT_LAYER_ACCESS_V1",
+      path: ".cowork-flow/spec/contracts/fact-layer-access.md",
+      digest: [
+        "Task/scope/spec facts are read-only via MCP tools or CLI; writes only flow through CLI lifecycle gates.",
+        "Prefer MCP task_state/task_scope/task_specs for fact queries when available; CLI is the fallback.",
+      ],
+      readWhen: [
+        "when querying task facts or file scope",
+        "when registering the fact layer for a new host or external client",
+      ],
+    },
   ],
 }
 

package/template/.zcode/.zcode-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "cowork-flow",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "AI 协作工作流引擎：任务生命周期、子代理调度、门禁与状态注入。将 cowork-flow 的完整工作流带入 ZCode。",
   "author": {
     "name": "fisklikewater"