oh-my-codex 0.20.2 → 0.20.5

package/dist/ralplan/consensus-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consensus-gate.d.ts","sourceRoot":"","sources":["../../src/ralplan/consensus-gate.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,iCAAiC;aAC5C,6BAA6B,EAAE,4CAA4C;aAC3E,kBAAkB,EAAE,wCAAwC;aAC5D,yBAAyB,EAAE,mDAAmD;CACtE,CAAC;AAEX,MAAM,MAAM,6BAA6B,GACvC,OAAO,iCAAiC,CAAC,MAAM,OAAO,iCAAiC,CAAC,CAAC;AAE3F,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,8BAA8B;IAC7C,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,6BAA6B,CAAC;IACzC,MAAM,EAAE,6BAA6B,CAAC;IACtC,mBAAmB,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAChD,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,6BAA6B,GAAG,IAAI,CAAC;IACpD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,8BAA8B,CAAC;CAC7C;AAED,MAAM,WAAW,qCAAqC;IACpD,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA0BD,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,sBAAsB,EAAE,EACjC,OAAO,GAAE,qCAA0C,GAClD,4BAA4B,CAqG9B;AAED,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1G,4BAA4B,CAsB9B;AAED,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1G,OAAO,CAET;AAED,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,MAAM,EACX,SAAS,CAAC,EAAE,MAAM,GACjB,sBAAsB,EAAE,CA0B1B;AAqKD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAoBzG"}
+{"version":3,"file":"consensus-gate.d.ts","sourceRoot":"","sources":["../../src/ralplan/consensus-gate.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,iCAAiC;aAC5C,yCAAyC,EAAE,+CAA+C;aAC1F,6BAA6B,EAAE,4CAA4C;aAC3E,kBAAkB,EAAE,wCAAwC;aAC5D,yBAAyB,EAAE,mDAAmD;CACtE,CAAC;AAEX,MAAM,MAAM,6BAA6B,GACvC,OAAO,iCAAiC,CAAC,MAAM,OAAO,iCAAiC,CAAC,CAAC;AAE3F,MAAM,MAAM,6CAA6C,GAAG,WAAW,GAAG,aAAa,CAAC;AAExF;;;GAGG;AACH,wBAAgB,gDAAgD,IAAI,6CAA6C,CAEhH;AAED,wBAAgB,0CAA0C,CACxD,UAAU,GAAE,6CAAkG,GAC7G,OAAO,CAET;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,8BAA8B;IAC7C,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,6BAA6B,CAAC;IACzC,MAAM,EAAE,6BAA6B,CAAC;IACtC,mBAAmB,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC;IAChD,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,6BAA6B,GAAG,IAAI,CAAC;IACpD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,8BAA8B,CAAC;CAC7C;AAED,MAAM,WAAW,qCAAqC;IACpD,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAcD,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,sBAAsB,EAAE,EACjC,QAAQ,GAAE,qCAA0C,GACnD,4BAA4B,CAsB9B;AAED,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1G,4BAA4B,CAsB9B;AAED,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,MAAM,EACX,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1G,OAAO,CAET;AAED,wBAAgB,wCAAwC,CACtD,GAAG,EAAE,MAAM,EACX,SAAS,CAAC,EAAE,MAAM,GACjB,sBAAsB,EAAE,CA0B1B;AA4KD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAoBzG"}

package/dist/ralplan/consensus-gate.js

@@ -1,96 +1,42 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { NATIVE_SUBAGENT_ROLE_ROUTING_MARKER_FILE, readRoleRoutingMarker, } from '../subagents/role-routing-marker.js';
-import { subagentTrackingPath } from '../subagents/tracker.js';
 import { getBaseStateDir, resolveWorkingDirectoryForState } from '../state/paths.js';
 export const RALPLAN_CONSENSUS_BLOCKED_REASONS = {
+    documentedHostConsensusReceiptUnavailable: 'documented_host_consensus_receipt_unavailable',
     nativeSubagentEvidenceMissing: 'native_subagent_consensus_evidence_missing',
     nonApprovingReview: 'non_approving_ralplan_consensus_review',
     missingSequentialApproval: 'missing_sequential_architect_then_critic_approval',
 };
-export function buildRalplanConsensusGateFromSources(sources, options = {}) {
-    let nativeBlockedEvidence = null;
-    let firstCompleteEvidence = null;
-    const trackerSnapshots = new Map();
+/**
+ * Reports whether this host can verify the official receipt that authorizes a
+ * Ralplan handoff. Local lifecycle artifacts remain diagnostics either way.
+ */
+export function getRalplanHostConsensusReceiptVerifierCapability() {
+    return 'unavailable';
+}
+export function shouldBlockFreshAutopilotForRalplanReceipt(capability = getRalplanHostConsensusReceiptVerifierCapability()) {
+    return capability === 'unavailable';
+}
+export function buildRalplanConsensusGateFromSources(sources, _options = {}) {
+    // Tracker, transcripts, artifact fields, and agent types are lifecycle diagnostics.
+    // They are all writable by the same user that requests this transition, so they
+    // cannot serve as an authorization boundary. An official host receipt verifier is
+    // required before any of this evidence can authorize a release.
+    let lifecycleEvidence = null;
     for (const candidate of sources) {
         const evidence = resolveConsensusEvidence(candidate.value);
-        const candidateOptions = {
-            ...options,
-            sessionId: options.sessionId ?? candidate.sessionId,
-        };
-        if (evidence?.kind === 'invalid') {
-            if (isConsensusEvidenceNewerThanSelected(evidence, firstCompleteEvidence)) {
-                firstCompleteEvidence = { ...evidence, source: candidate.source };
-            }
-            continue;
+        if (evidence && isConsensusEvidenceNewerThanSelected(evidence, lifecycleEvidence)) {
+            lifecycleEvidence = { ...evidence, source: candidate.source };
         }
-        if (evidence?.kind === 'valid') {
-            const requiresTrackerBackedLanes = options.requireNativeSubagents
-                || evidence.ralplan_architect_review.provenance_kind === 'native_subagent'
-                || evidence.ralplan_architect_review.provenance_kind === 'omx_adapted'
-                || evidence.ralplan_critic_review.provenance_kind === 'native_subagent'
-                || evidence.ralplan_critic_review.provenance_kind === 'omx_adapted';
-            if (requiresTrackerBackedLanes) {
-                const trackerEvaluation = evaluateTrackerBackedNativeRalplanLanes(evidence, candidateOptions, trackerSnapshots);
-                if (!trackerEvaluation.valid) {
-                    nativeBlockedEvidence ??= {
-                        ...evidence,
-                        source: candidate.source,
-                        options: candidateOptions,
-                        trackerEvaluation,
-                    };
-                    continue;
-                }
-            }
-            if (isConsensusEvidenceNewerThanSelected(evidence, firstCompleteEvidence)) {
-                firstCompleteEvidence = { ...evidence, source: candidate.source };
-            }
-        }
-    }
-    if (firstCompleteEvidence?.kind === 'invalid') {
-        return {
-            complete: false,
-            sequence: ['architect-review', 'critic-review'],
-            ralplan_architect_review: firstCompleteEvidence.ralplan_architect_review,
-            ralplan_critic_review: firstCompleteEvidence.ralplan_critic_review,
-            source: firstCompleteEvidence.source,
-            blockedReason: RALPLAN_CONSENSUS_BLOCKED_REASONS.nonApprovingReview,
-            blockedDetails: firstCompleteEvidence.blockedDetails,
-        };
-    }
-    if (firstCompleteEvidence?.kind === 'valid') {
-        return {
-            complete: true,
-            sequence: ['architect-review', 'critic-review'],
-            ralplan_architect_review: firstCompleteEvidence.ralplan_architect_review,
-            ralplan_critic_review: firstCompleteEvidence.ralplan_critic_review,
-            source: firstCompleteEvidence.source,
-            blockedReason: null,
-        };
-    }
-    if (nativeBlockedEvidence) {
-        return {
-            complete: false,
-            sequence: ['architect-review', 'critic-review'],
-            ralplan_architect_review: nativeBlockedEvidence.ralplan_architect_review,
-            ralplan_critic_review: nativeBlockedEvidence.ralplan_critic_review,
-            source: nativeBlockedEvidence.source,
-            blockedReason: RALPLAN_CONSENSUS_BLOCKED_REASONS.nativeSubagentEvidenceMissing,
-            blockedDetails: [
-                nativeBlockedEvidence.trackerEvaluation.pairProblem,
-                nativeBlockedEvidence.trackerEvaluation.architectProblem,
-                nativeBlockedEvidence.trackerEvaluation.criticProblem,
-            ].filter((detail) => Boolean(detail)),
-            diagnostic: buildTrackerBackedNativeConsensusDiagnostic(nativeBlockedEvidence, nativeBlockedEvidence.options, nativeBlockedEvidence.trackerEvaluation),
-        };
     }
     return {
         complete: false,
         sequence: ['architect-review', 'critic-review'],
-        ralplan_architect_review: null,
-        ralplan_critic_review: null,
-        source: null,
-        blockedReason: RALPLAN_CONSENSUS_BLOCKED_REASONS.missingSequentialApproval,
+        ralplan_architect_review: lifecycleEvidence?.ralplan_architect_review ?? null,
+        ralplan_critic_review: lifecycleEvidence?.ralplan_critic_review ?? null,
+        source: lifecycleEvidence?.source ?? null,
+        blockedReason: RALPLAN_CONSENSUS_BLOCKED_REASONS.documentedHostConsensusReceiptUnavailable,
+        blockedDetails: ['official host consensus receipt verifier is unavailable'],
     };
 }
 export function buildRalplanConsensusGateForCwd(cwd, options = {}) {
@@ -193,6 +139,7 @@ function resolveConsensusEvidence(value) {
     if (hasArchitectThenCriticSequence(record)
         && isApproveReview(directArchitectReview, 'architect')
         && isApproveReview(directCriticReview, 'critic')
+        && hasDistinctNativeReviewThreads(directArchitectReview, directCriticReview)
         && isCriticNotBeforeArchitect(directArchitectReview, directCriticReview)
         && (!returnToRalplanCycle
             || (advancedReviewCycle !== null && reviewPairCarriesFreshnessCycle(directArchitectReview, directCriticReview, advancedReviewCycle)))) {
@@ -209,6 +156,7 @@ function resolveConsensusEvidence(value) {
         const criticReview = asRecord(latestReviewEntry.ralplan_critic_review ?? latestReviewEntry.critic_review ?? latestReviewEntry.criticReview);
         if (isApproveReview(architectReview, 'architect')
             && isApproveReview(criticReview, 'critic')
+            && hasDistinctNativeReviewThreads(architectReview, criticReview)
             && isCriticNotBeforeArchitect(architectReview, criticReview)
             && (!returnToRalplanCycle
                 || (advancedReviewCycle !== null && reviewPairCarriesFreshnessCycle(architectReview, criticReview, advancedReviewCycle)))) {
@@ -222,6 +170,7 @@ function resolveConsensusEvidence(value) {
         const criticReview = asRecord(criticReviews.at(-1));
         if (isApproveReview(architectReview, 'architect')
             && isApproveReview(criticReview, 'critic')
+            && hasDistinctNativeReviewThreads(architectReview, criticReview)
             && isCriticNotBeforeArchitect(architectReview, criticReview)
             && (!returnToRalplanCycle
                 || (advancedReviewCycle !== null && reviewPairCarriesFreshnessCycle(architectReview, criticReview, advancedReviewCycle)))) {
@@ -240,6 +189,7 @@ function resolveDirectGate(record) {
             && hasArchitectThenCriticSequence(gateRecord)
             && isApproveReview(architectReview, 'architect')
             && isApproveReview(criticReview, 'critic')
+            && hasDistinctNativeReviewThreads(architectReview, criticReview)
             && isCriticNotBeforeArchitect(architectReview, criticReview)) {
             return {
                 kind: 'valid',
@@ -256,7 +206,10 @@ function resolveDirectGate(record) {
                 blockedDetails.push('consensus review sequence is not architect-review then critic-review');
             }
             if (!isCriticNotBeforeArchitect(architectReview, criticReview)) {
-                blockedDetails.push('critic review is ordered before architect review');
+                blockedDetails.push('direct review order is not proven strictly architect-before-critic');
+            }
+            if (!hasDistinctNativeReviewThreads(architectReview, criticReview)) {
+                blockedDetails.push('consensus reviews must use distinct native_subagent thread_id values');
             }
             if (blockedDetails.length > 0) {
                 return {
@@ -321,8 +274,10 @@ function isConsensusEvidenceNewerThanSelected(evidence, selected) {
             return true;
         if (evidenceOrder === null)
             return false;
-        if (evidenceOrder !== selectedOrder)
-            return evidenceOrder > selectedOrder;
+        if (evidenceOrder.domain !== selectedOrder.domain)
+            return false;
+        if (evidenceOrder.value !== selectedOrder.value)
+            return evidenceOrder.value > selectedOrder.value;
     }
     return false;
 }
@@ -330,7 +285,15 @@ function consensusEvidenceReviewCycle(evidence) {
     return maxKnownNumber(numericValue(evidence.ralplan_architect_review?.review_cycle ?? evidence.ralplan_architect_review?.reviewCycle), numericValue(evidence.ralplan_critic_review?.review_cycle ?? evidence.ralplan_critic_review?.reviewCycle));
 }
 function consensusEvidenceOrder(evidence) {
-    return maxKnownNumber(reviewOrderValue(evidence.ralplan_architect_review ?? {}), reviewOrderValue(evidence.ralplan_critic_review ?? {}));
+    const architectOrder = reviewOrderValue(evidence.ralplan_architect_review ?? {});
+    const criticOrder = reviewOrderValue(evidence.ralplan_critic_review ?? {});
+    if (architectOrder === null)
+        return criticOrder;
+    if (criticOrder === null)
+        return architectOrder;
+    if (architectOrder.domain !== criticOrder.domain)
+        return null;
+    return architectOrder.value >= criticOrder.value ? architectOrder : criticOrder;
 }
 function maxKnownNumber(left, right) {
     if (left === null)
@@ -359,7 +322,7 @@ function asRecord(value) {
     return value && typeof value === 'object' ? value : null;
 }
 function isApproveReview(value, agentRole) {
-    if (!value || value.agent_role !== agentRole)
+    if (!value || value.agent_role !== agentRole || value.provenance_kind !== 'native_subagent')
         return false;
     if (value.verdict !== undefined && value.verdict !== 'approve')
         return false;
@@ -373,12 +336,20 @@ function isApproveReview(value, agentRole) {
         return false;
     return hasPositiveReviewApprovalSignal(value);
 }
+function hasDistinctNativeReviewThreads(architectReview, criticReview) {
+    const architectThreadId = typeof architectReview?.thread_id === 'string' ? architectReview.thread_id.trim() : '';
+    const criticThreadId = typeof criticReview?.thread_id === 'string' ? criticReview.thread_id.trim() : '';
+    return Boolean(architectThreadId) && Boolean(criticThreadId) && architectThreadId !== criticThreadId;
+}
 function reviewApprovalProblems(value, agentRole) {
     const issues = [];
     if (!value)
         return [`${agentRole} review is missing`];
     if (value.agent_role !== agentRole)
         issues.push(`${agentRole} review has agent_role=${String(value.agent_role || 'missing')}`);
+    if (value.provenance_kind !== 'native_subagent') {
+        issues.push(`${agentRole} review provenance_kind=${String(value.provenance_kind || 'missing')} is not native_subagent`);
+    }
     if (value.verdict !== undefined && value.verdict !== 'approve') {
         issues.push(`${agentRole} review verdict=${String(value.verdict)} is not approve`);
     }
@@ -413,20 +384,28 @@ function hasArchitectThenCriticSequence(value) {
 function isCriticNotBeforeArchitect(architectReview, criticReview) {
     if (!architectReview || !criticReview)
         return false;
-    const architectOrder = reviewOrderValue(architectReview);
-    const criticOrder = reviewOrderValue(criticReview);
-    return architectOrder === null || criticOrder === null || criticOrder >= architectOrder;
+    const architectSequence = reviewSequenceValue(architectReview);
+    const criticSequence = reviewSequenceValue(criticReview);
+    if (architectSequence !== null || criticSequence !== null) {
+        if (architectSequence === null || criticSequence === null || criticSequence <= architectSequence)
+            return false;
+        const architectTimestamp = reviewTimestampValue(architectReview);
+        const criticTimestamp = reviewTimestampValue(criticReview);
+        return architectTimestamp === null || criticTimestamp === null || criticTimestamp > architectTimestamp;
+    }
+    const architectTimestamp = reviewTimestampValue(architectReview);
+    const criticTimestamp = reviewTimestampValue(criticReview);
+    return architectTimestamp !== null && criticTimestamp !== null && criticTimestamp > architectTimestamp;
 }
 function reviewOrderValue(review) {
-    for (const key of ['completed_at', 'created_at', 'updated_at', 'timestamp', 'ts']) {
-        const raw = review[key];
-        if (typeof raw !== 'string')
-            continue;
-        const parsed = Date.parse(raw);
-        if (Number.isFinite(parsed))
-            return parsed;
-    }
-    for (const key of ['sequence_index', 'order', 'review_order', 'iteration']) {
+    const sequence = reviewSequenceValue(review);
+    if (sequence !== null)
+        return { domain: 'sequence', value: sequence };
+    const timestamp = reviewTimestampValue(review);
+    return timestamp === null ? null : { domain: 'timestamp', value: timestamp };
+}
+function reviewSequenceValue(review) {
+    for (const key of ['sequence_index', 'order', 'review_order']) {
         const raw = review[key];
         const parsed = typeof raw === 'number' ? raw : typeof raw === 'string' ? Number(raw) : Number.NaN;
         if (Number.isFinite(parsed))
@@ -434,252 +413,17 @@ function reviewOrderValue(review) {
     }
     return null;
 }
-function evaluateTrackerBackedNativeRalplanLanes(evidence, options, snapshots) {
-    const cwd = typeof options.cwd === 'string' ? options.cwd.trim() : '';
-    const trackerPaths = cwd
-        ? uniquePaths([
-            subagentTrackingPath(cwd),
-            join(localBaseStateDir(cwd), 'subagent-tracking.json'),
-        ])
-        : [];
-    let firstEvaluation = null;
-    for (const trackerPath of trackerPaths) {
-        const snapshot = snapshots.get(trackerPath) ?? {
-            trackerPath,
-            tracking: readJsonState(trackerPath),
-        };
-        snapshots.set(trackerPath, snapshot);
-        const evaluation = evaluateTrackerBackedNativeRalplanSnapshot(evidence, options, snapshot);
-        if (evaluation.valid)
-            return evaluation;
-        firstEvaluation ??= evaluation;
-    }
-    return firstEvaluation ?? evaluateTrackerBackedNativeRalplanSnapshot(evidence, options, null);
-}
-function evaluateTrackerBackedNativeRalplanSnapshot(evidence, options, snapshot) {
-    const pairProblem = trackerBackedNativeReviewPairProblem(evidence, options, snapshot);
-    const architectProblem = trackerBackedNativeReviewProblem(evidence.ralplan_architect_review, 'architect', options, snapshot);
-    const criticProblem = trackerBackedNativeReviewProblem(evidence.ralplan_critic_review, 'critic', options, snapshot);
-    return {
-        snapshot,
-        pairProblem,
-        architectProblem,
-        criticProblem,
-        valid: !pairProblem && !architectProblem && !criticProblem,
-    };
-}
-function nativeReviewThreadId(review) {
-    return typeof review?.thread_id === 'string' ? review.thread_id.trim() : '';
-}
-function currentTransitionSessionId(evidence, options) {
-    const transitionSessionId = typeof options.sessionId === 'string' ? options.sessionId.trim() : '';
-    return transitionSessionId
-        || nativeReviewSessionId(evidence.ralplan_architect_review)
-        || nativeReviewSessionId(evidence.ralplan_critic_review);
-}
-function buildTrackerBackedNativeConsensusDiagnostic(evidence, options, evaluation) {
-    const cwd = typeof options.cwd === 'string' ? options.cwd.trim() : '';
-    const trackerPath = evaluation.snapshot?.trackerPath ?? (cwd ? subagentTrackingPath(cwd) : '.omx/state/subagent-tracking.json');
-    const currentSessionId = currentTransitionSessionId(evidence, options);
-    const architectThreadId = nativeReviewThreadId(evidence.ralplan_architect_review);
-    const criticThreadId = nativeReviewThreadId(evidence.ralplan_critic_review);
-    const adaptedLane = evidence.ralplan_architect_review?.provenance_kind === 'omx_adapted'
-        || evidence.ralplan_critic_review?.provenance_kind === 'omx_adapted';
-    return {
-        expected_schema: [
-            '.omx/state/subagent-tracking.json contains:',
-            'sessions["<current_session_id>"].threads["<architect_thread_id>"].kind = "subagent"',
-            'sessions["<current_session_id>"].threads["<critic_thread_id>"].kind = "subagent"',
-            'both threads have completed_at; any recorded role identity must exactly match its review agent_role (native uses role or mode)',
-            'architect and critic thread IDs are distinct',
-            'architect completed_at is strictly before critic first_seen_at or started_at in the tracker ledger',
-            ...(adaptedLane ? [
-                `${NATIVE_SUBAGENT_ROLE_ROUTING_MARKER_FILE} contains unexpired evidence scoped to this cwd and session`,
-            ] : []),
-        ],
-        current_session_id: currentSessionId || null,
-        tracker_path: trackerPath,
-        architect: buildNativeReviewDiagnostic(evidence.ralplan_architect_review, 'architect', options, evaluation.snapshot, evaluation.architectProblem),
-        critic: buildNativeReviewDiagnostic(evidence.ralplan_critic_review, 'critic', options, evaluation.snapshot, evaluation.criticProblem),
-        distinct_thread_ids: architectThreadId && criticThreadId ? architectThreadId !== criticThreadId : null,
-        pair_problem: evaluation.pairProblem,
-        remediation: adaptedLane
-            ? [
-                'Re-run native or OMX-adapted ralplan Architect/Critic reviews.',
-                'Repair the review artifact so agent_role, provenance_kind, session_id, thread_id, and tracker_path point to completed tracker threads in the current session.',
-            ]
-            : [
-                'Re-run native ralplan Architect/Critic reviews.',
-                'Or repair the review artifact so agent_role, provenance_kind, session_id, thread_id, and tracker_path point to completed native subagent threads in the current tracker.',
-            ],
-        docs: 'docs/contracts/ralplan-consensus-gate.md',
-    };
-}
-function buildNativeReviewDiagnostic(review, agentRole, options, snapshot, problem) {
-    const cwd = typeof options.cwd === 'string' ? options.cwd.trim() : '';
-    const trackerPath = snapshot?.trackerPath ?? (cwd ? subagentTrackingPath(cwd) : '.omx/state/subagent-tracking.json');
-    const sessionId = review
-        ? (typeof options.sessionId === 'string' && options.sessionId.trim()
-            ? options.sessionId.trim()
-            : nativeReviewSessionId(review))
-        : '';
-    const threadId = nativeReviewThreadId(review);
-    const session = asRecord(asRecord(snapshot?.tracking?.sessions)?.[sessionId]);
-    const thread = asRecord(asRecord(session?.threads)?.[threadId]);
-    const completedAt = typeof thread?.completed_at === 'string' ? thread.completed_at.trim() : '';
-    return {
-        role: agentRole,
-        session_id: sessionId || null,
-        thread_id: threadId || null,
-        tracker_path: trackerPath,
-        session_found: Boolean(session),
-        thread_found: Boolean(thread),
-        kind: typeof thread?.kind === 'string' ? thread.kind : null,
-        completed: Boolean(completedAt),
-        problem,
-    };
-}
-function trackerBackedNativeReviewPairProblem(evidence, options, snapshot) {
-    const architectThreadId = nativeReviewThreadId(evidence.ralplan_architect_review);
-    const criticThreadId = nativeReviewThreadId(evidence.ralplan_critic_review);
-    const adaptedLane = evidence.ralplan_architect_review?.provenance_kind === 'omx_adapted'
-        || evidence.ralplan_critic_review?.provenance_kind === 'omx_adapted';
-    if (architectThreadId && criticThreadId && architectThreadId === criticThreadId) {
-        return adaptedLane
-            ? 'architect and critic reviews must reference distinct tracker threads'
-            : 'architect and critic reviews must reference distinct native subagent tracker threads';
-    }
-    const transitionSessionId = typeof options.sessionId === 'string' ? options.sessionId.trim() : '';
-    const architectSessionId = transitionSessionId || nativeReviewSessionId(evidence.ralplan_architect_review);
-    const criticSessionId = transitionSessionId || nativeReviewSessionId(evidence.ralplan_critic_review);
-    if (!architectSessionId || !criticSessionId)
-        return null;
-    if (architectSessionId !== criticSessionId) {
-        return adaptedLane
-            ? `architect and critic reviews must resolve to the same tracker session; architect session_id=${architectSessionId}, critic session_id=${criticSessionId}`
-            : `architect and critic reviews must resolve to the same native subagent tracker session; architect session_id=${architectSessionId}, critic session_id=${criticSessionId}`;
-    }
-    return trackerBackedReviewOrderProblem(architectSessionId, architectThreadId, criticThreadId, snapshot, adaptedLane ? 'OMX-adapted' : 'native subagent');
-}
-function trackerBackedReviewOrderProblem(sessionId, architectThreadId, criticThreadId, snapshot, laneLabel) {
-    if (!snapshot || !architectThreadId || !criticThreadId) {
-        return `${laneLabel} tracker review order is missing architect or critic tracker evidence`;
-    }
-    const session = asRecord(asRecord(snapshot.tracking?.sessions)?.[sessionId]);
-    const architectThread = asRecord(asRecord(session?.threads)?.[architectThreadId]);
-    const criticThread = asRecord(asRecord(session?.threads)?.[criticThreadId]);
-    const architectCompletedAt = trackerTimestamp(architectThread, ['completed_at']);
-    const criticStartedAt = trackerTimestamp(criticThread, ['first_seen_at', 'started_at']);
-    if (architectCompletedAt === null || criticStartedAt === null) {
-        return `${laneLabel} tracker review order is missing valid architect completed_at or critic first_seen_at/started_at timestamp`;
-    }
-    if (architectCompletedAt >= criticStartedAt) {
-        return `${laneLabel} tracker review order is reversed: architect completed_at must be strictly before critic first_seen_at/started_at`;
-    }
-    return null;
-}
-function trackerTimestamp(thread, keys) {
-    for (const key of keys) {
-        const value = typeof thread?.[key] === 'string' ? thread[key].trim() : '';
-        const timestamp = Date.parse(value);
-        if (Number.isFinite(timestamp))
-            return timestamp;
-    }
-    return null;
-}
-function nativeReviewSessionId(review) {
-    return typeof review?.session_id === 'string' ? review.session_id.trim() : '';
-}
-function trackerBackedNativeReviewProblem(review, agentRole, options, snapshot) {
-    const provenanceKind = review?.provenance_kind;
-    return trackerBackedReviewProblem(review, agentRole, options, provenanceKind === 'omx_adapted' ? 'omx_adapted' : 'native_subagent', snapshot);
-}
-function trackerBackedReviewProblem(review, agentRole, options, provenanceKind, snapshot) {
-    const issues = [];
-    if (!review)
-        return `${agentRole} review is missing`;
-    if (review.agent_role !== agentRole)
-        issues.push(`${agentRole} review has agent_role=${String(review.agent_role || 'missing')}`);
-    if (review.provenance_kind !== provenanceKind)
-        issues.push(`${agentRole} review has provenance_kind=${String(review.provenance_kind || 'missing')}`);
-    const sessionId = typeof options.sessionId === 'string' && options.sessionId.trim()
-        ? options.sessionId.trim()
-        : typeof review.session_id === 'string'
-            ? review.session_id.trim()
-            : '';
-    const reviewSessionId = typeof review.session_id === 'string' ? review.session_id.trim() : '';
-    const threadId = typeof review.thread_id === 'string' ? review.thread_id.trim() : '';
-    const trackerPath = typeof review.tracker_path === 'string' ? review.tracker_path.trim() : '';
-    if (!sessionId)
-        issues.push(`${agentRole} review cannot resolve session_id`);
-    if (reviewSessionId && reviewSessionId !== sessionId)
-        issues.push(`${agentRole} review session_id=${reviewSessionId} does not match ${sessionId || 'missing'}`);
-    if (!threadId)
-        issues.push(`${agentRole} review missing thread_id`);
-    if (trackerPath && !trackerPath.endsWith('subagent-tracking.json'))
-        issues.push(`${agentRole} review tracker_path=${trackerPath} is not subagent-tracking.json`);
-    const cwd = typeof options.cwd === 'string' ? options.cwd.trim() : '';
-    if (!cwd)
-        issues.push(`${agentRole} review cannot resolve cwd for tracker lookup`);
-    if (provenanceKind === 'omx_adapted' && !hasScopedRoleRoutingUnavailableEvidence(cwd, sessionId)) {
-        issues.push(`${agentRole} review lacks scoped role_routing_unavailable evidence for session ${sessionId || 'missing'}`);
-    }
-    if (issues.length > 0)
-        return issues.join('; ');
-    if (!snapshot)
-        return `${agentRole} review cannot resolve tracker snapshot`;
-    return trackerThreadProblem(snapshot.tracking, sessionId, threadId, agentRole, snapshot.trackerPath, options.cwd, provenanceKind);
-}
-function hasScopedRoleRoutingUnavailableEvidence(cwd, sessionId) {
-    if (!cwd || !sessionId)
-        return false;
-    return uniquePaths([
-        getBaseStateDir(cwd),
-        localBaseStateDir(cwd),
-    ]).some((baseStateDir) => readRoleRoutingMarker(baseStateDir, { cwd, sessionId }) !== null);
-}
-function trackerThreadProblem(tracking, sessionId, threadId, agentRole, trackerPath, cwd, provenanceKind) {
-    const laneLabel = provenanceKind === 'native_subagent' ? 'native' : provenanceKind;
-    const session = asRecord(asRecord(tracking?.sessions)?.[sessionId]);
-    const thread = asRecord(asRecord(session?.threads)?.[threadId]);
-    if (!session)
-        return `${agentRole} tracker session ${sessionId} is missing in ${trackerPath}; only reviews recorded in OMX subagent-tracking.json count as ${laneLabel} lanes`;
-    if (!thread)
-        return `${agentRole} tracker thread ${threadId} is missing in ${trackerPath}; external/collab subagent reviews are not tracker-backed ${laneLabel} lanes`;
-    const leaderThreadId = typeof session.leader_thread_id === 'string' ? session.leader_thread_id.trim() : '';
-    const currentLeaderThreadId = currentSessionNativeLeaderThreadId(cwd);
-    if ((currentLeaderThreadId && currentLeaderThreadId === threadId)
-        || (leaderThreadId && leaderThreadId === threadId && thread.kind !== 'subagent'))
-        return `${agentRole} tracker thread ${threadId} is the session leader`;
-    if (thread.kind !== 'subagent')
-        return `${agentRole} tracker thread ${threadId} has kind=${String(thread.kind || 'missing')}`;
-    const completedAt = typeof thread.completed_at === 'string' ? thread.completed_at.trim() : '';
-    if (!completedAt)
-        return `${agentRole} tracker thread ${threadId} is not completed`;
-    const ledgerProvenance = typeof thread.provenance_kind === 'string' ? thread.provenance_kind.trim() : '';
-    if (provenanceKind === 'omx_adapted' && ledgerProvenance !== 'omx_adapted') {
-        return `${agentRole} tracker thread ${threadId} has provenance_kind=${ledgerProvenance || 'missing'}, expected omx_adapted`;
-    }
-    if (provenanceKind === 'native_subagent' && ledgerProvenance && ledgerProvenance !== 'native_subagent') {
-        return `${agentRole} tracker thread ${threadId} has provenance_kind=${ledgerProvenance}, conflicting with native_subagent review provenance`;
-    }
-    const trackerRole = typeof thread.role === 'string' ? thread.role.trim() : '';
-    const trackerMode = typeof thread.mode === 'string' ? thread.mode.trim() : '';
-    const trackerRoleIdentity = trackerRole || (provenanceKind === 'native_subagent' ? trackerMode : '');
-    if (provenanceKind === 'omx_adapted' && !trackerRoleIdentity) {
-        return `${agentRole} tracker thread ${threadId} has role=missing, expected ${agentRole}`;
-    }
-    if (trackerRoleIdentity && trackerRoleIdentity !== agentRole) {
-        return `${agentRole} tracker thread ${threadId} has ${trackerRole ? 'role' : 'mode'}=${trackerRoleIdentity}, expected ${agentRole}`;
+function reviewTimestampValue(review) {
+    for (const key of ['completed_at', 'created_at', 'updated_at', 'timestamp', 'ts']) {
+        const raw = review[key];
+        if (typeof raw !== 'string')
+            continue;
+        const parsed = Date.parse(raw);
+        if (Number.isFinite(parsed))
+            return parsed;
     }
     return null;
 }
-function currentSessionNativeLeaderThreadId(cwd) {
-    if (!cwd)
-        return '';
-    const sessionState = readJsonState(join(getBaseStateDir(cwd), 'session.json'));
-    return typeof sessionState?.native_session_id === 'string' ? sessionState.native_session_id.trim() : '';
-}
 function validateLocalSessionId(sessionId) {
     return /^[A-Za-z0-9_-]{1,64}$/.test(sessionId) ? [sessionId] : [];
 }