dev-flow-deepseek 0.5.2 → 0.6.0

package/README.md

@@ -11,25 +11,30 @@ macOS arm64 Core executable。
 
 | 项目 | 当前支持 |
 | --- | --- |
-| Package | `dev-flow-deepseek@0.5.2` |
+| Package | `dev-flow-deepseek@0.6.0` |
 | Bundled Core | `0.5.1` |
 | Platform | macOS arm64 |
 | Node.js | `>=24` |
 | DSH | `>=0.1.0-rc.6` |
-| Release | [deepseek-v0.5.2](https://github.com/Innocent-children/dev-flow/releases/tag/deepseek-v0.5.2) |
+| Release | [deepseek-v0.6.0](https://github.com/Innocent-children/dev-flow/releases/tag/deepseek-v0.6.0) |
 
-`0.5.2` 的 normal release 已通过 registry package 安装、显式触发、Core handshake、
+`0.6.0` 的 normal release 已通过 registry package 安装、显式触发、Core handshake、
 restart/resume、`DONE`、remove、uninstall、retained reopen 和 repository-unchanged 门禁。上表
 记录已验证的精确公开版本；下面的安装命令使用 npm `latest` dist-tag 获取当前最新稳定 package。
 
-## 安装到 DSH profile
+## 安装与验证
 
-在一个可写目录中运行：
+先安装 DSH，再在一个可写目录中把 Dev Flow 安装到真实 profile。下面使用 `web`；需要其他
+profile 时修改 `PROFILE` 的值，不要把 `<profile>` 原样输入 shell。
 
 ```bash
+npm install -g @deepseek-ai/dsh@latest
 dsh --version
+PROFILE=web
 TARBALL="$(npm pack dev-flow-deepseek@latest --silent)"
-dsh plugin --profile <profile> add "$PWD/$TARBALL"
+dsh plugin --profile "$PROFILE" add "$PWD/$TARBALL"
+rm -f "$PWD/$TARBALL"
+dsh --profile "$PROFILE" --dump-config
 ```
 
 `npm pack` 把 `latest` 指向的官方 package 下载为当前目录中的 tarball，并将实际文件名保存到
@@ -46,12 +51,22 @@ process、Skill、guard 和 MCP child 合成到指定 profile。安装后按照
 | --- | --- |
 | `dsh --version` | 输出当前 DSH 版本，用于确认满足 Support Matrix 中的最低兼容版本。 |
 | `TARBALL="$(npm pack dev-flow-deepseek@latest --silent)"` | 从 npm 获取 `latest` package，并把生成的 tarball 文件名保存到 shell 变量。 |
-| `dsh plugin --profile <profile> add "$PWD/$TARBALL"` | 将绝对 tarball 路径安装到指定 DSH profile。最终 registry Journey 使用的就是这一命令形态。 |
-| `dsh --profile <profile> --dump-config` | 输出 profile 的有效配置，用于检查 `dev-flow-deepseek` bundle contribution 是否存在；不会修改 Dev Flow Task。 |
-| `dsh plugin --profile <profile> remove dev-flow-deepseek` | 从指定 profile 移除 package 与 bundle contribution；保留 Task data、目标 Git 仓库和 Codex-owned state。 |
+| `dsh plugin --profile "$PROFILE" add "$PWD/$TARBALL"` | 将绝对 tarball 路径安装到 `PROFILE` 指定的 DSH profile。最终 registry Journey 使用的就是这一命令形态。 |
+| `dsh --profile "$PROFILE" --dump-config` | 输出 profile 的有效配置，用于检查 `dev-flow-deepseek` bundle contribution 是否存在；不会修改 Dev Flow Task。 |
+| `dsh plugin --profile "$PROFILE" remove dev-flow-deepseek` | 从指定 profile 移除 package 与 bundle contribution；保留 Task data、目标 Git 仓库和 Codex-owned state。 |
 
-更新或重新安装时，按照 profile lifecycle 停止使用该 profile，执行 remove，然后重新获取
-`@latest` tarball 并 add。不要复用来源不明或未审查的旧 tarball。
+更新或重新安装时，按照 profile lifecycle 停止使用该 profile，然后执行：
+
+```bash
+PROFILE=web
+dsh plugin --profile "$PROFILE" remove dev-flow-deepseek
+TARBALL="$(npm pack dev-flow-deepseek@latest --silent)"
+dsh plugin --profile "$PROFILE" add "$PWD/$TARBALL"
+rm -f "$PWD/$TARBALL"
+dsh --profile "$PROFILE" --dump-config
+```
+
+随后重启 profile。更新 DSH 本身可执行 `npm install -g @deepseek-ai/dsh@latest`。
 
 完整的 Codex、DeepSeek、Core 和 MCP 命令目录见
 [命令参考](../../docs/COMMANDS.md)。
@@ -74,6 +89,36 @@ Task 可选择 `plain`、`spec-kit` 或 `openspec` profile。Core 管理 current
 destination、Recovery、blocker 和 terminal outcome；Adapter 负责执行当前节点工作、呈现完整 Action
 并转发 closed payload。
 
+## 两仓声明、Workspace Root 与可选索引
+
+启动 DSH 时的 canonical `Workspace Root` 是完整权限边界，可以是两个 Git 仓库的非 Git 共同父
+目录。主仓库、附加仓库和 symlink 解析结果都必须位于该 Root 内。以 `/workspace` 为 Root、
+`/workspace/core` 和 `/workspace/docs` 为两个仓库时，可以发送：
+
+```text
+/dev-flow Use /workspace/core as primary repository key core and add repository key docs at /workspace/docs. Update core::internal/api.go and docs::reference/api.md, then run only the targeted checks.
+```
+
+路径必须替换为真实绝对路径。Scope 总数为一至八，创建后不可变；Adapter 在 task-bearing open 前
+拒绝 Root 外路径和 symlink escape。系统不扫描父目录、相邻目录、依赖或索引结果来发现仓库。
+单仓库请求不需要 key，继续使用普通相对路径；从任一参与仓库恢复仍返回同一 Task。
+DeepSeek 与 Codex 共用同一 Repository Scope、scoped path、Action 和唯一
+`repository_binding_digest` Core 合同；Host 权限检查不创建第二套流程状态。
+
+可选代码索引偏好来自只读配置：
+
+```json
+{
+  "codex": { "codebase_memory": false },
+  "deepseek": { "codebase_memory": true }
+}
+```
+
+文件路径固定为 `$HOME/.dev-flow/config.json`。文件不存在时偏好为 false，Dev Flow 不创建或修改
+它。true 只允许使用当前 DSH 会话中已经可见且可用的 codebase-memory；缺失、不完整或中途不可用
+时，DeepSeek 每个 Dev Flow 会话最多提示一次并立即回退到内置检索，不阻塞 Task，也不安装、配置
+或启动索引能力。索引覆盖不能放宽 Workspace Root，也不能决定 Scope、权限、Recovery 或流程流转。
+
 ## MCP 工具
 
 DeepSeek Adapter 暴露与 Codex 相同的六工具 Core catalog；在 DSH 中会使用限定后的 tool name，
@@ -81,8 +126,8 @@ DeepSeek Adapter 暴露与 Codex 相同的六工具 Core catalog；在 DSH 中
 
 | MCP 工具 | 作用 |
 | --- | --- |
-| `dev_flow_server_info` | 读取 Core identity、能力、process、method profile 和工具目录；有效 admission 后必须首先调用。 |
-| `dev_flow_open_task` | 为当前 canonical repository 创建新 Task，或恢复其现有 Task。 |
+| `dev_flow_server_info` | 读取 Core identity、能力、process、method profile、工具目录和 DeepSeek 有效索引偏好；有效 admission 后必须首先调用。 |
+| `dev_flow_open_task` | 为 Workspace Root 内显式声明的主/附加仓库创建一个 Task，或从任一参与仓库恢复同一 Task。 |
 | `dev_flow_get_task` | 读取持久化 Task；可附带 operation probe 获取 Recovery assessment。 |
 | `dev_flow_get_next_action` | 读取当前节点的权威 Action、验证预算、method steps 和全部合法 transition。 |
 | `dev_flow_apply_action` | 使用当前 revision、Action identity、repository binding 和 closed payload 应用一次 Core 声明的 transition。 |
@@ -99,16 +144,30 @@ Recovery 结论，再决定恢复动作。它不盲目重试，也不自行选
 当前 Core 只接受当前 SQLite Schema。不兼容或 pre-graph data 会返回
 `SCHEMA_UNSUPPORTED` 并保持零写入；用户可以选择新的数据目录，或在 Core 外部手工处理旧目录。
 
-## 移除
+## 卸载与彻底清理
 
 ```bash
-dsh plugin --profile <profile> remove dev-flow-deepseek
-dsh --profile <profile> --dump-config
+PROFILE=web
+dsh plugin --profile "$PROFILE" remove dev-flow-deepseek
+dsh --profile "$PROFILE" --dump-config
 ```
 
 移除后按照 DSH profile lifecycle 重启，再通过有效配置确认 bundle contribution 已消失。重新安装
 时重新执行 npm `@latest` pack 和 DSH add 命令。
 
+对每个安装过 Dev Flow 的 profile 分别执行一次。不再使用 DSH 时，可另行运行
+`npm uninstall -g @deepseek-ai/dsh`；这会保留 `$HOME/.dsh` 中的 profile、会话和其他插件。
+
+确认 Codex Adapter 也已移除，并且不再需要任何 Task 后，可以删除两个 Host 共享的默认数据：
+
+```bash
+rm -rf "$HOME/Library/Application Support/dev-flow"
+```
+
+这是不可恢复操作。使用过 `DEV_FLOW_DATA_DIR` 时，请确认准确绝对路径后单独删除。只有在还要
+删除全部 DSH profile、会话和其他插件时，才在卸载 DSH 后删除 `$HOME/.dsh`；它不是 Dev Flow
+专用目录。
+
 ## Package 内容
 
 Package 只包含一个 `cordis.patch.yml` layer、Adapter libraries、`dev-flow` Skill、references、

package/lib/authorization.mjs

@@ -1,4 +1,8 @@
+import { realpathSync } from "node:fs";
+import { isAbsolute, relative } from "node:path";
+
 import {
+  DEV_FLOW_QUALIFIED_TOOL_NAMES,
   isDevFlowNamespaceTool,
   isExpectedDevFlowTool,
 } from "./tool-names.mjs";
@@ -8,6 +12,8 @@ export const DENIAL_CODES = Object.freeze({
   UNEXPECTED_TOOL: "DEV_FLOW_UNEXPECTED_TOOL",
   NO_AGENT: "DEV_FLOW_NO_AGENT",
   NO_OPEN_TURN: "DEV_FLOW_NO_OPEN_TURN",
+  REPOSITORY_PATH_INVALID: "DEV_FLOW_REPOSITORY_PATH_INVALID",
+  REPOSITORY_OUTSIDE_WORKSPACE: "DEV_FLOW_REPOSITORY_OUTSIDE_WORKSPACE",
 });
 
 const selectorPattern = /(^|\s)\/dev-flow(?=\s|$)/u;
@@ -42,7 +48,10 @@ export function deriveCurrentTurn(execution) {
   }
 }
 
-export function authorizeDevFlowExecution(execution) {
+export function authorizeDevFlowExecution(execution, {
+  workspaceRoot = process.cwd(),
+  realpathImpl = realpathSync,
+} = {}) {
   if (!isDevFlowNamespaceTool(execution?.name)) return undefined;
   if (!isExpectedDevFlowTool(execution.name)) {
     return `${DENIAL_CODES.UNEXPECTED_TOOL}: the Dev Flow namespace permits only the six contracted tools.`;
@@ -58,11 +67,76 @@ export function authorizeDevFlowExecution(execution) {
   if (!turn.selectorPresent) {
     return `${DENIAL_CODES.SELECTOR_REQUIRED}: ${selectorInstruction}.`;
   }
+  if (execution.name === DEV_FLOW_QUALIFIED_TOOL_NAMES[1]) {
+    return authorizeRepositoryScope(execution.arguments, { workspaceRoot, realpathImpl });
+  }
   return undefined;
 }
 
-export function registerDevFlowGuard(ctx) {
-  return ctx.tools.guard(authorizeDevFlowExecution);
+export function registerDevFlowGuard(ctx, {
+  workspaceRoot = process.cwd(),
+  realpathImpl = realpathSync,
+} = {}) {
+  let canonicalWorkspaceRoot;
+  try {
+    canonicalWorkspaceRoot = realpathImpl(workspaceRoot);
+  } catch {
+    canonicalWorkspaceRoot = null;
+  }
+  return ctx.tools.guard((execution) => authorizeDevFlowExecution(execution, {
+    workspaceRoot: canonicalWorkspaceRoot ?? workspaceRoot,
+    realpathImpl,
+  }));
+}
+
+function authorizeRepositoryScope(arguments_, { workspaceRoot, realpathImpl }) {
+  if (!isPlainObject(arguments_)) {
+    return `${DENIAL_CODES.REPOSITORY_PATH_INVALID}: open-task arguments must be an object.`;
+  }
+  let canonicalRoot;
+  try {
+    canonicalRoot = realpathImpl(workspaceRoot);
+  } catch {
+    return `${DENIAL_CODES.REPOSITORY_PATH_INVALID}: Workspace Root is not accessible.`;
+  }
+
+  const declared = [{ key: arguments_.primary_repository_key ?? "primary", path: arguments_.repository_path }];
+  if (arguments_.additional_repositories !== undefined) {
+    if (!Array.isArray(arguments_.additional_repositories)) {
+      return `${DENIAL_CODES.REPOSITORY_PATH_INVALID}: additional_repositories must be an array.`;
+    }
+    for (const entry of arguments_.additional_repositories) {
+      if (!isPlainObject(entry)) {
+        return `${DENIAL_CODES.REPOSITORY_PATH_INVALID}: an additional repository declaration is invalid.`;
+      }
+      declared.push({ key: entry.key, path: entry.repository_path });
+    }
+  }
+
+  for (const repository of declared) {
+    if (typeof repository.key !== "string" || repository.key.length === 0 || typeof repository.path !== "string" || !isAbsolute(repository.path)) {
+      return `${DENIAL_CODES.REPOSITORY_PATH_INVALID}: repository "${safeRepositoryKey(repository.key)}" requires an absolute path.`;
+    }
+    let canonicalPath;
+    try {
+      canonicalPath = realpathImpl(repository.path);
+    } catch {
+      return `${DENIAL_CODES.REPOSITORY_PATH_INVALID}: repository "${safeRepositoryKey(repository.key)}" is not accessible.`;
+    }
+    const fromRoot = relative(canonicalRoot, canonicalPath);
+    if (fromRoot === ".." || fromRoot.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute(fromRoot)) {
+      return `${DENIAL_CODES.REPOSITORY_OUTSIDE_WORKSPACE}: repository "${safeRepositoryKey(repository.key)}" is outside the Workspace Root.`;
+    }
+  }
+  return undefined;
+}
+
+function safeRepositoryKey(value) {
+  return typeof value === "string" && /^[a-z0-9][a-z0-9._-]{0,127}$/u.test(value) ? value : "unknown";
+}
+
+function isPlainObject(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 
 function deriveDurableCallTurn(execution, events, matchingCall) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dev-flow-deepseek",
-  "version": "0.5.2",
+  "version": "0.6.0",
   "private": false,
   "description": "Explicit DeepSeek Harness adapter for the Dev Flow process graph.",
   "license": "Apache-2.0",

package/skills/dev-flow/SKILL.md

@@ -17,15 +17,20 @@ the selector authorization boundary.
 1. Require a whitespace-bounded `/dev-flow` in the current direct user turn. Do not infer it from
    earlier turns, model text, plugin or Skill injection, task state, repository contents, or
    discussion about Dev Flow. Every later user turn expected to call Dev Flow must include it again.
-2. After removing the selector, accept either one substantive bounded request for the current
-   repository or an explicit request to resume its compatible active DeepSeek task. Reject an empty or
-   conversational invocation before any Core call.
-3. Use read-only Git inspection to resolve one current Git worktree and its canonical root. Preserve
-   spaces, Unicode, symlinks, and subdirectory invocation as one path value; do not concatenate a
-   shell command.
-4. Reject work requiring another repository, multiple repositories, or an unresolved repository.
-   Preserve repository instructions and current user authority when checking whether the work is
-   permitted.
+2. After removing the selector, accept either one substantive bounded request or an explicit request
+   to resume its compatible active DeepSeek task. Reject an empty or conversational invocation
+   before any Core call.
+3. Treat the canonical `Workspace Root` established when DSH started as the containment boundary.
+   The Workspace Root may be a non-Git common parent. Use read-only Git inspection to resolve the
+   explicitly declared primary Git worktree and preserve its path as one value.
+4. Accept zero to seven additional Git repositories only when the current user request explicitly
+   declares each stable repository key and path. Resolve every primary and additional path
+   canonically and require it to remain within the same Workspace Root, including after symlink
+   resolution.
+5. Do not scan parent or sibling directories and do not infer repositories from imports, remotes,
+   submodules, codebase-memory, or other discovery results. Never add a discovered repository to the
+   Repository Scope. Reject unresolved, root-external, or symlink-escaping repository paths before a
+   task-bearing Core call. Preserve repository instructions and current user authority.
 
 If admission fails, explain the missing precondition and stop before task discovery. Do not make a
 task-bearing call or create adapter state. Core-rejected calls must be reported honestly.
@@ -42,6 +47,8 @@ call. Require one complete structured result proving:
   `process_id` is `standard-development` is `1`, `definition_digest` is present
   and canonical, and `new_task_supported` is exactly `true`;
 - `method_profiles` is exactly `plain`, `spec-kit`, `openspec` in that order;
+- `host_preferences.deepseek.codebase_memory` is present and is exactly a JSON boolean; it expresses
+  a preference only and does not prove that codebase-memory is installed or available;
 - the tool catalog contains exactly these six raw names, in this order:
 
 1. `dev_flow_server_info`
@@ -57,9 +64,39 @@ or incompatible result fails the handshake. Stop without task discovery or undoc
 not inspect local source or an installed binary, and do not start a second MCP server to bypass a
 failed handshake.
 
+## Optional code discovery
+
+After the successful handshake, consume only `host_preferences.deepseek.codebase_memory` and the
+capabilities actually visible in this DeepSeek session:
+
+- When the preference is `false`, do not call any codebase-memory tool even when one is visible. Use
+  built-in Git inspection, file reads, file search, and text search, and do not prompt for installation.
+- When the preference is `true` and codebase-memory is already visible and usable, it may be
+  preferred for cross-repository symbol discovery, relationships, and impact analysis. Repository
+  Scope still comes only from the user's declarations, Workspace Root remains the permission
+  boundary, and file modification uses ordinary Host file tools.
+- When the preference is `true` but the capability is absent, incomplete, or becomes unavailable,
+  notify the user at most once in the current Dev Flow session and immediately fall back to built-in
+  search without blocking Task creation or progress.
+
+Never install, configure, upgrade, start, repair, or remove codebase-memory; never call plugin
+management to install it; never change MCP configuration; and never start a daemon. Index results
+are not authority for repository permissions, repository bindings, changed paths, Git facts,
+Recovery, blockers, outcomes, or workflow completion. The one-session notification flag is Host
+presentation state and must not be written into the Core Task.
+
 ## Task discovery
 
-After the handshake, call `mcp__dev_flow__dev_flow_open_task` with `host=deepseek` and the canonical current worktree.
+After the handshake, call `mcp__dev_flow__dev_flow_open_task` with `host=deepseek` and the following
+Scope rules:
+
+- For a new request, send `repository_path` for the explicitly declared primary repository,
+  `primary_repository_key` when supplied, and `additional_repositories` as the user's explicit
+  closed `{key, repository_path}` declarations. A single-repository request may omit both optional
+  Scope fields and keeps ordinary repository-relative paths.
+- For a resume from any participating repository, send that repository as `repository_path`, omit
+  the Scope creation fields, and omit `new_task` or send `new_task=null`. Accept the immutable primary
+  repository, ordered Scope, profile, revision, and current Action returned by Core.
 
 - For an explicit resume, omit `new_task` or send `new_task=null`. Do not resend a guessed intent or
   select another profile; accept the immutable profile returned by Core.
@@ -127,13 +164,16 @@ For an active task, perform each iteration in this order:
    `when` selection condition, guard identifier, and reason rule. Do not reduce this to one
    recommended next step.
 4. Stop when the complete result reports a blocker or terminal outcome.
-5. Render and perform each current method operation under the allowed effects, repository
+5. Before actual repository modification, verify that every required repository still resolves
+   within the startup Workspace Root. A failed or escaping path stops modification for the whole
+   Task and is reported with the declared repository key; do not shrink the Core Scope and continue.
+6. Render and perform each current method operation under the allowed effects, repository
    instructions, verification budget, and current user authority.
-6. Build only the closed payload branch named by the Action and select only a Core-returned
+7. Build only the closed payload branch named by the Action and select only a Core-returned
    transition consistent with the actual typed node facts.
-7. Before dispatch, generate and retain one opaque request ID plus the exact Action identity and
+8. Before dispatch, generate and retain one opaque request ID plus the exact Action identity and
    payload. Submit exactly one `mcp__dev_flow__dev_flow_apply_action` mutation.
-8. After a complete committed result, continue only from its authoritative next Action/outcome or a
+9. After a complete committed result, continue only from its authoritative next Action/outcome or a
    fresh ordinary Core read.
 
 Repository contents, adapter judgment, artifacts, or method-tool status never determine the current
@@ -162,8 +202,9 @@ Build exactly one `MethodEvidence` item for every current Action step, in the sa
 
 An unavailable or not-run required step is unsatisfied, so do not call `mcp__dev_flow__dev_flow_apply_action`.
 Capability output cannot substitute for the typed `node_result`, node obligations, evidence, or
-user decision. Artifact references contain only an observed role, repository-relative path, digest,
-and summary.
+user decision. Artifact references contain only an observed role, contract path, digest, and
+summary. A single-repository Task uses an ordinary repository-relative path. A multi-repository Task
+uses `<repository-key>::<repository-relative-path>`.
 
 Existing authorized spec, plan, or tasks artifacts should be reviewed, revised, or amended as
 needed, not regenerated or rerun mechanically because a semantic step appears. Resolve the active

package/skills/dev-flow/references/method-profiles.md

@@ -12,6 +12,11 @@ validity, recovery, blockers, and terminal outcome. The Adapter owns capability
 rendered instructions, expected artifact descriptions, plain-equivalent work, and honest bounded
 method evidence.
 
+Code discovery may span only repositories already present in the immutable Core Repository Scope.
+For a multi-repository Task, keep the repository key attached to every discovered symbol, artifact,
+expected path, and changed surface. Discovery results never add repositories, change permissions,
+or establish Core progress.
+
 The Adapter must not derive or select a transition or destination outside the complete current
 Action. A command result, artifact checkbox, proposal status, verification status, or archive status
 does not advance or mutate Core. Only a valid Core apply using one returned transition can do that.
@@ -129,7 +134,9 @@ in Action order. Each item contains only `step_id`, `status`, `capability`, and
 
 ## Artifact references
 
-Submit artifact evidence only as `role`, repository-relative `path`, `digest`, and `summary`. Refer
+Submit artifact evidence only as `role`, contract `path`, `digest`, and `summary`. A single-repository
+Task uses an ordinary repository-relative path; a multi-repository Task uses
+`<repository-key>::<repository-relative-path>`. Refer
 only to a file actually observed by the Host. Never submit full contents, command output, prompts,
 token data, runtime configuration, or private locations. An artifact digest does not replace the
 repository binding. File existence, checkboxes, validation, sync, or archive status never advances

package/skills/dev-flow/references/node-payloads.md

@@ -15,10 +15,16 @@ Before every ordinary apply:
 3. Select the matching `dev_flow_apply_action` `inputSchema` branch and use exactly the six common
    payload members: `transition_id`, `summary`, `reason`, `artifacts`, `method_evidence`, and
    `node_result`.
+   Set `reason=""` whenever the selected transition has `reason_required=false`; provide a nonempty
+   reason only when the selected transition has `reason_required=true`.
 4. `required_evidence` and `artifacts` are different concepts. `repository_observation` is a Core evidence requirement, not an ArtifactReference role. When no real repository-relative process
    artifact exists, submit `"artifacts": []`.
 5. Allowed ArtifactReference roles are only `requirements`, `design`, `task_plan`,
    `implementation`, `test`, `comprehension`, `refactor`, `delivery`, and `other_process`.
+   For every ArtifactReference path, work-item `expected_paths`, Implementation `changed_paths`, and
+   Refactor `changed_paths`, use an ordinary repository-relative path for a single-repository Task
+   and `<repository-key>::<repository-relative-path>` for a multi-repository Task. The key must
+   already belong to the immutable Core Scope. Do not add a payload field or a second digest.
 6. Preserve the complete `node_result` branch wrapper. Never flatten baseline fields or encode an
    array as prose.
 7. Submit exactly one MethodEvidence item for every current Action method step, in Action order.
@@ -61,6 +67,8 @@ Before every ordinary apply:
 
 Never use `repository_observation` as an artifact role, place goal/scope beside `node_result`, or
 omit `problem_class`, `baseline`, or `unresolved_questions`.
+`unresolved_questions` is a sibling of `baseline` inside `node_result`; it is never a member of the
+closed `baseline` object.
 
 <!-- node-payload-template:design:start -->
 ```json