nccgs 2.1.0 → 2.1.1

package/.claude/nccgs/studio.json

@@ -35,7 +35,7 @@
       "standard": "opus",
       "deep": "opus",
       "leadership": "opus",
-      "review": "opus"
+      "review": "fable"
     }
   },
   "orchestration": {
@@ -51,7 +51,7 @@
       "modelClass": "lightweight",
       "maxTurns": 12,
       "defaultModel": "sonnet",
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-task-scout",
@@ -59,7 +59,7 @@
       "modelClass": "lightweight",
       "maxTurns": 10,
       "defaultModel": "sonnet",
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-creative-director",
@@ -67,7 +67,7 @@
       "modelClass": "leadership",
       "defaultModel": "opus",
       "maxTurns": 24,
-      "defaultEffort": "high"
+      "defaultEffort": "xhigh"
     },
     {
       "name": "nccgs-technical-director",
@@ -75,7 +75,7 @@
       "modelClass": "leadership",
       "defaultModel": "opus",
       "maxTurns": 24,
-      "defaultEffort": "high"
+      "defaultEffort": "xhigh"
     },
     {
       "name": "nccgs-producer",
@@ -83,7 +83,7 @@
       "modelClass": "leadership",
       "defaultModel": "opus",
       "maxTurns": 20,
-      "defaultEffort": "high"
+      "defaultEffort": "xhigh"
     },
     {
       "name": "nccgs-game-design-lead",
@@ -91,7 +91,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 20,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-programming-lead",
@@ -99,7 +99,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 20,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-art-direction-lead",
@@ -107,7 +107,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-audio-direction-lead",
@@ -115,7 +115,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-narrative-lead",
@@ -123,7 +123,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 20,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-qa-lead",
@@ -131,7 +131,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 20,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-release-lead",
@@ -139,7 +139,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 20,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-localization-lead",
@@ -147,7 +147,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-game-designer",
@@ -155,7 +155,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 48,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-systems-designer",
@@ -163,7 +163,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-level-designer",
@@ -171,7 +171,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-economy-designer",
@@ -179,7 +179,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-ux-designer",
@@ -187,7 +187,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-accessibility-specialist",
@@ -195,7 +195,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-prototyper",
@@ -203,7 +203,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-technical-architect",
@@ -211,7 +211,7 @@
       "modelClass": "deep",
       "defaultModel": "opus",
       "maxTurns": 22,
-      "defaultEffort": "high"
+      "defaultEffort": "xhigh"
     },
     {
       "name": "nccgs-gameplay-programmer",
@@ -219,7 +219,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 120,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-engine-programmer",
@@ -227,7 +227,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 22,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-ai-programmer",
@@ -235,7 +235,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 22,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-network-programmer",
@@ -243,7 +243,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 24,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-tools-programmer",
@@ -251,7 +251,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 20,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-ui-programmer",
@@ -259,7 +259,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 22,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-security-engineer",
@@ -267,7 +267,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 20,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-performance-analyst",
@@ -275,7 +275,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 20,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-technical-artist",
@@ -283,7 +283,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 20,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-sound-designer",
@@ -291,7 +291,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-writer",
@@ -299,7 +299,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-world-builder",
@@ -307,7 +307,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-analytics-engineer",
@@ -315,7 +315,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-live-ops-designer",
@@ -323,7 +323,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-qa-engineer",
@@ -331,7 +331,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 22,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-verification-engineer",
@@ -339,13 +339,13 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 22,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-adversarial-reviewer",
       "department": "quality",
       "modelClass": "review",
-      "defaultModel": "opus",
+      "defaultModel": "fable",
       "maxTurns": 200,
       "defaultEffort": "high"
     },
@@ -355,7 +355,7 @@
       "modelClass": "lightweight",
       "defaultModel": "sonnet",
       "maxTurns": 14,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-release-engineer",
@@ -363,7 +363,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 24,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-unity-implementer",
@@ -371,7 +371,7 @@
       "modelClass": "deep",
       "defaultModel": "opus",
       "maxTurns": 120,
-      "defaultEffort": "high"
+      "defaultEffort": "xhigh"
     },
     {
       "name": "nccgs-unity-systems-specialist",
@@ -379,7 +379,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 22,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-unity-ui-specialist",
@@ -387,7 +387,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 22,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-unity-rendering-specialist",
@@ -395,7 +395,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 22,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-unity-content-specialist",
@@ -403,7 +403,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 22,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-unity-build-specialist",
@@ -411,7 +411,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 24,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     },
     {
       "name": "nccgs-production-coordinator",
@@ -419,7 +419,7 @@
       "modelClass": "standard",
       "defaultModel": "opus",
       "maxTurns": 18,
-      "defaultEffort": "medium"
+      "defaultEffort": "high"
     }
   ],
   "effortProfiles": {
@@ -452,10 +452,10 @@
       "review": null
     },
     "claude-standalone": {
-      "lightweight": "medium",
-      "standard": "medium",
-      "deep": "high",
-      "leadership": "high",
+      "lightweight": "high",
+      "standard": "high",
+      "deep": "xhigh",
+      "leadership": "xhigh",
       "review": "high"
     }
   },
@@ -466,7 +466,7 @@
     },
     "claude-standalone": {
       "model": "opus",
-      "effortLevel": "medium"
+      "effortLevel": "high"
     }
   }
 }

package/.claude/nccgs/tools/autonomy.mjs

@@ -10,6 +10,19 @@ export function autonomyPolicy(project) {
   return { schemaVersion: 1, mode: value.mode };
 }
 
+// Fixed framework-owned launch prefix. It has exactly one fixed value and is the
+// only argv permitted before strict MCP isolation (see unity-transport.mjs).
+export function permissionModeArgs(mode) {
+  if (!["full", "guarded"].includes(mode)) throw new Error("Invalid NCCGS autonomy policy");
+  return ["--permission-mode", mode === "full" ? "bypassPermissions" : "default"];
+}
+
+// NCCGS owns session permission, root, settings and hook activation. --bare and
+// --safe-mode skip project hooks; --restricted ignores project settings and hooks
+// (installed CLI 2.1.316 help). The installed CLI documents no short aliases.
+// Retained recovery reuses this policy through unity-transport.mjs.
+export const conflictingLaunchOption = /^(?:--permission-mode|--dangerously-skip-permissions|--allow-dangerously-skip-permissions|--settings|--setting-sources|--worktree|--agent|--bare|--safe-mode|--restricted)(?:=|$)|^-w$/;
+
 // Session markers are workflow context, not a sandbox against arbitrary code.
 // Project configuration alone cannot activate Claude's native permission mode.
 export function fullTaskAutonomy(project, env = process.env) {

package/.claude/nccgs/tools/command-tokens.mjs

@@ -0,0 +1,22 @@
+export function commandTokens(command) {
+  if (typeof command !== "string") return null;
+  // Parse data quotes without interpreting a shell. Punctuation inside report
+  // text is data; composition/redirection/expansion outside quotes stays blocked.
+  const tokens = []; let token = "", quote = null, started = false;
+  for (let i = 0; i < command.length; i++) {
+    const c = command[i];
+    if (quote) {
+      if (c === quote) { quote = null; continue; }
+      if (quote === '"' && /[`$]/.test(c)) return null;
+      if (quote === '"' && c === "\\" && ['"', "\\"].includes(command[i + 1])) { token += command[++i]; continue; }
+      token += c; continue;
+    }
+    if (/[;&|<>`$\r\n]/.test(c)) return null;
+    if (c === '"' || c === "'") { quote = c; started = true; continue; }
+    if (/\s/.test(c)) { if (started) { tokens.push(token); token = ""; started = false; } continue; }
+    token += c; started = true;
+  }
+  if (quote) return null;
+  if (started) tokens.push(token);
+  return tokens;
+}

package/.claude/nccgs/tools/hook-transport.mjs

@@ -0,0 +1,34 @@
+// Exact managed-hook identity across legacy shell and direct-executable forms.
+// Never identify a hook by the executable alone: many custom hooks use node.
+const scriptPattern = /^(?:\$\{CLAUDE_PROJECT_DIR\}\/)?(\.claude\/nccgs\/hooks\/[\w-]+\.mjs)$/;
+const phases = new Set(['pre', 'stop', 'start', 'failure']);
+
+export function managedHookKey(hook) {
+  if (!hook || hook.type !== 'command' || typeof hook.command !== 'string') return null;
+  let script, args;
+  if (Object.hasOwn(hook, 'args')) {
+    if (hook.command !== 'node' || !Array.isArray(hook.args) || !hook.args.every(x => typeof x === 'string')) return null;
+    [script, ...args] = hook.args;
+  } else {
+    const match = hook.command.match(/^node (?:"([^"\r\n]+)"|([^\s"'`$;&|<>]+))(?: (pre|stop|start|failure))?$/);
+    if (!match) return null;
+    script = match[1] ?? match[2];
+    args = match[3] ? [match[3]] : [];
+  }
+  const relative = typeof script === 'string' ? script.match(scriptPattern)?.[1] : null;
+  if (!relative || args.length > 1 || args.some(x => !phases.has(x))) return null;
+  return JSON.stringify([relative, ...args]);
+}
+
+export function requiredHookPresent(actual, expected) {
+  return actual && actual.type === expected.type && actual.command === expected.command
+    && JSON.stringify(actual.args) === JSON.stringify(expected.args)
+    && actual.onFailure === expected.onFailure
+    && actual.if === undefined && actual.once !== true && actual.async !== true
+    && (actual.timeout === undefined || actual.timeout >= expected.timeout);
+}
+
+export function referencesNccgsHook(hook) {
+  return [hook?.command, ...(Array.isArray(hook?.args) ? hook.args : [])]
+    .some(x => typeof x === 'string' && /(?:^|[\\/])\.claude[\\/]nccgs[\\/]/i.test(x));
+}

package/.claude/nccgs/tools/native-completion.mjs

@@ -1,5 +1,13 @@
 import { hash } from "./policy.mjs";
 
+// This provider-designated block is an inventory, not an incomplete-run notice.
+// Match the entire block and a bounded identifier list; unknown mixed text must
+// continue to fail closed. Never recognize this marker in model-authored prose.
+const toolSummary = /^\s*<tools-used-before-summary>[A-Za-z][A-Za-z0-9_.:-]*(?:\s*,\s*[A-Za-z][A-Za-z0-9_.:-]*)*<\/tools-used-before-summary>\s*$/;
+const informationalNote = block => block?.type === "text"
+  && typeof block.text === "string" && block.text.length <= 4096
+  && toolSummary.test(block.text);
+
 // The native harness reports an ended invocation as "completed" even when its
 // worker hit maxTurns. Inspect only harness-designated blocks, never the model's
 // prose. Store a diagnosis/hash, not prompts or arbitrary tool-result content.
@@ -15,7 +23,8 @@ export function nativeCompletion(response) {
   const limit = noteText.match(/\bthis agent stopped at its (\d+)-turn limit before finishing\b/i);
   // A previously unseen harness advisory needs reconciliation; it cannot silently
   // certify completion. Text outside these provider-designated blocks is ignored.
-  const reason = limit ? "turn-limit" : notes.length ? "unrecognized-harness-notice" : null;
+  const reason = limit ? "turn-limit"
+    : notes.length && !notes.every(informationalNote) ? "unrecognized-harness-notice" : null;
   return { reportedStatus, status: reason ? "failed" : reportedStatus, reason,
     turnLimit: limit ? Number(limit[1]) : null, noteHash: notes.length ? hash(noteText) : null };
 }

package/.claude/nccgs/tools/returned-handoff.mjs

@@ -1,6 +1,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import { artifact, contained } from "./policy.mjs";
+import { nativeCompletion } from "./native-completion.mjs";
 
 // Opt-in transport for read-only workers whose native client returns reports as
 // text. Copy the sole model text block verbatim; never synthesize a verdict,
@@ -15,9 +16,17 @@ export function captureReturnedHandoff(project, dispatch, input, completion, cur
       || !dispatch.agentId || dispatch.agentId !== response?.agentId
       || dispatch.agent !== input.tool_input?.subagent_type || dispatch.snapshot !== currentSnapshot)
     return reject("identity-or-snapshot-mismatch");
-  if (completion?.status !== "completed" || completion.reason || response?.harnessNoteCount || response?.harnessTailCount)
+  // Preserve an upstream failure and independently classify the actual response.
+  // A caller-supplied completion cannot certify unknown or incomplete metadata.
+  if (completion?.status !== "completed" || completion.reason)
     return reject("native-incomplete");
-  const blocks = response?.content;
+  const actual = nativeCompletion(response);
+  if (actual.status !== "completed" || actual.reason) return reject("native-incomplete");
+  // Classification validates every designated note and both counts. Strip only
+  // those blocks; model text, including lookalike tags, remains byte-for-byte.
+  const all = response.content;
+  const leading = response.harnessNoteCount ?? 0, tail = response.harnessTailCount ?? 0;
+  const blocks = Array.isArray(all) ? all.slice(leading, all.length - tail) : null;
   if (!Array.isArray(blocks) || blocks.length !== 1 || blocks[0]?.type !== "text"
       || typeof blocks[0].text !== "string" || !blocks[0].text.trim()
       || Buffer.byteLength(blocks[0].text, "utf8") > 262144)

package/.claude/nccgs/tools/shared-context-guard.mjs

@@ -0,0 +1,60 @@
+// Coordinator-only read admission. Trust comes from the external operator's
+// process environment, never an argument, task label, model claim or new graph.
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { commandTokens } from './command-tokens.mjs';
+import { containedPath } from './paths.mjs';
+import { matchesFingerprint } from './integrity.mjs';
+
+const hash = file => crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');
+const same = (a, b) => fs.realpathSync(a) === fs.realpathSync(b);
+
+export function safeSharedContextCommand(command, project, env = process.env) {
+  try {
+    const tokens = commandTokens(command);
+    if (!tokens || tokens[0] !== 'node') return false;
+    const root = env.NCCGS_SHARED_WORKFLOW_ROOT;
+    const expected = env.NCCGS_SHARED_WORKFLOW_MANIFEST_SHA256;
+    if (!root || !path.isAbsolute(root) || !/^[a-f0-9]{64}$/.test(expected ?? '')) return false;
+    const config = containedPath(project, 'docs/workflow/workflow.config.json');
+    if (!fs.statSync(config).isFile()) return false;
+    const bridge = containedPath(project, '.claude/nccgs/tools/shared-context.mjs');
+    const script = path.resolve(project, tokens[1]);
+    const common = containedPath(root, 'tools/workflow.mjs');
+    if (same(script, bridge)) {
+      if (![8, 10].includes(tokens.length)) return false;
+      const options = {};
+      for (let i = 2; i < tokens.length; i += 2) {
+        const key = tokens[i];
+        if (!['--project', '--workflow-root', '--action', '--text'].includes(key) || Object.hasOwn(options, key)) return false;
+        options[key] = tokens[i + 1];
+      }
+      if (!same(options['--project'], project) || !same(options['--workflow-root'], root)) return false;
+      if (options['--action'] === 'status') {
+        if (tokens.length !== 8 || options['--text'] !== undefined) return false;
+      } else if (options['--action'] === 'query') {
+        if (tokens.length !== 10 || !/^[\p{L}\p{N}_.:/ -]{1,200}$/u.test(options['--text'] ?? '')) return false;
+      } else return false;
+      const installed = JSON.parse(fs.readFileSync(containedPath(project, '.claude/nccgs/install-state.json')));
+      const record = installed.files.find(x => x.relative === '.claude/nccgs/tools/shared-context.mjs');
+      if (!record || !matchesFingerprint(bridge, record)) return false;
+    } else if (same(script, common)) {
+      if (tokens.length !== 5 || tokens[2] !== 'status' || tokens[3] !== '--config' || !same(tokens[4], config)) return false;
+    } else return false;
+
+    const file = containedPath(root, 'implementation/ARTIFACT_MANIFEST.json');
+    if (hash(file) !== expected) return false;
+    const manifest = JSON.parse(fs.readFileSync(file));
+    if (!Array.isArray(manifest.files) || manifest.files.length === 0) return false;
+    // Verify the actual reader bytes before admitting any external executable.
+    for (const entry of manifest.files) {
+      const source = containedPath(root, entry.path);
+      if (!fs.statSync(source).isFile() || fs.statSync(source).size !== entry.size || hash(source) !== entry.sha256) return false;
+    }
+    const pkg = JSON.parse(fs.readFileSync(containedPath(root, 'package.json')));
+    return pkg.name === 'agent-project-workflow-candidate' && pkg.version.startsWith('1.7.');
+  } catch {
+    return false;
+  }
+}

package/.claude/nccgs/tools/shared-context.mjs

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+// Optional explicit shared-workflow consumer. No hooks, native task or model changes.
+import fs from 'node:fs';
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+try {
+  const args=process.argv.slice(2), options={};
+  for(let i=0;i<args.length;i+=2) {
+    const key=args[i]?.replace(/^--/,'');
+    if(!['project','workflow-root','action','text','hold','secret','constraints'].includes(key)||!args[i+1]||options[key])throw new Error('Invalid shared context arguments');
+    options[key]=args[i+1];
+  }
+  if(!options.project)throw new Error('Use --project with the actual target root');
+  const config=path.resolve(options.project,'docs/workflow/workflow.config.json');
+  if(!fs.existsSync(config))console.log(JSON.stringify({state:'skipped',reason:'No accepted common project configuration',installedOrBootstrapped:false}));
+  else {
+    if(!options['workflow-root'])throw new Error('Resolve --workflow-root from the accepted external binding');
+    const root=path.resolve(options['workflow-root']), pkg=JSON.parse(fs.readFileSync(path.join(root,'package.json'),'utf8'));
+    if(pkg.name!=='agent-project-workflow-candidate'||!pkg.version.startsWith('1.7.'))throw new Error('Unsupported common workflow identity');
+    const {consume}=await import(pathToFileURL(path.join(root,'tools/adapters/nccgs-context.mjs')));
+    const result=await consume(config,{action:options.action||'status',text:options.text,holdId:options.hold,secret:options.secret,constraints:options.constraints});
+    console.log(JSON.stringify(result,null,2));
+  }
+}catch(error){console.error(JSON.stringify({ok:false,code:error.code||'SHARED_CONTEXT',message:error.message,externalAcceptance:'PENDING'}));process.exitCode=1;}