okstra 0.209.1 → 0.209.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "okstra",
-  "version": "0.209.1",
+  "version": "0.209.2",
   "description": "Host-aware multi-provider cross-verification orchestrator runtime and agent skills.",
   "license": "MIT",
   "author": "devonshin",

package/runtime/BUILD.json

@@ -1,5 +1,5 @@
 {
-  "package": "0.209.1",
-  "builtAt": "2026-10-05T05:18:06.904Z",
+  "package": "0.209.2",
+  "builtAt": "2026-10-05T05:48:33.643Z",
   "repoRoot": "/home/runner/work/okstra/okstra"
 }

package/runtime/python/okstra_ctl/dispatch_core.py

@@ -115,6 +115,7 @@ from .seeding import installed_version
 from .worker_audit_ledger import (
     check_worker_results_audit,
     parse_worker_result_name,
+    result_file_audit_failures,
 )
 from .worker_artifacts import worker_provider_id
 from .worker_prompt_body import REPORT_WRITER_WORKER_ID
@@ -122,7 +123,7 @@ from .worker_prompt_headers import (
     WorkerPromptHeaderError,
     resolve_errors_log_path,
 )
-from .worker_artifact_paths import audit_sidecar_rel
+from .worker_artifact_paths import WorkerArtifactPathError, audit_sidecar_rel
 from .wrapper_status import (
     log_path_for_prompt,
     mutation_snapshot_path_for_prompt,
@@ -2732,11 +2733,16 @@ def _audit_sidecar_failures(job: WorkerJob) -> tuple[str, ...]:
     """
     parsed = parse_worker_result_name(job.worker_result_path.name)
     if parsed is None:
-        return (
-            f"worker result `{job.worker_result_path.name}` is not a canonical "
-            f"`<role>-worker-<task-type>-<seq>.md` name, so the audit-sidecar "
-            f"contract could not be checked",
-        )
+        # reverify·critic 결과는 `<role>-worker-reverify-r<N>-…` 처럼 run 단위
+        # 스캔이 못 읽는 이름이다. 사이드카 이름은 같은 규칙으로 나오므로 이 파일만 본다.
+        try:
+            audit_path = Path(audit_sidecar_rel(str(job.worker_result_path)))
+        except WorkerArtifactPathError:
+            return (
+                f"worker result `{job.worker_result_path.name}` has no "
+                f"`-worker-` token, so the audit-sidecar contract could not be checked",
+            )
+        return tuple(result_file_audit_failures(job.worker_result_path, audit_path))
     return tuple(
         check_worker_results_audit(
             job.worker_result_path.parent.parent,

package/runtime/python/okstra_ctl/worker_audit_ledger.py

@@ -344,6 +344,36 @@ def worker_result_files(
         yield path, match.worker_role, match.seq
 
 
+def result_file_audit_failures(result_path: Path, audit_path: Path) -> list[str]:
+    """The blocking audit-sidecar findings for one worker result and its sidecar."""
+    rel = result_path.name
+    try:
+        content = result_path.read_text()
+    except OSError as exc:
+        return [f"worker-results file unreadable: {rel} ({exc})"]
+    failures: list[str] = []
+    if READING_CONFIRMATION_HEADING_RE.search(content) is not None:
+        failures.append(
+            f"worker-results file `{rel}` contains a `## 0. Reading "
+            f"Confirmation` heading — that block moved to the audit "
+            f"sidecar (`{audit_path.name}`). "
+            f"Remove the §0 heading + body from the main file and "
+            f"write a fresh sidecar."
+        )
+    if not audit_path.exists():
+        worker_role = rel.partition("-worker-")[0] + "-worker"
+        failures.append(
+            f"worker `{worker_role}` produced `{rel}` but no audit sidecar "
+            f"at `{audit_path.name}` — the sidecar must carry the Reading "
+            f"Confirmation block (one short line per input file). Workers "
+            f"write this in the same step as the main worker-results file."
+        )
+        return failures
+    _, command_failures = read_evidence_commands(audit_path)
+    failures.extend(command_failures)
+    return failures
+
+
 def check_worker_results_audit(
     run_dir: Path,
     task_type: str,
@@ -399,36 +429,17 @@ def worker_results_audit_findings(
 
     for path, worker_role, result_seq in worker_result_files(run_dir, task_type, seq, worker):
         rel = path.name
-        try:
-            content = path.read_text()
-        except OSError as exc:
-            failures.append(f"worker-results file unreadable: {rel} ({exc})")
-            continue
-
-        if READING_CONFIRMATION_HEADING_RE.search(content) is not None:
-            failures.append(
-                f"worker-results file `{rel}` contains a `## 0. Reading "
-                f"Confirmation` heading — that block moved to the audit "
-                f"sidecar (`{worker_role}-audit-{task_type}-{result_seq}.md`). "
-                f"Remove the §0 heading + body from the main file and "
-                f"write a fresh sidecar."
-            )
-
         audit_path = (
             run_dir / "worker-results"
             / f"{worker_role}-audit-{task_type}-{result_seq}.md"
         )
+        failures.extend(result_file_audit_failures(path, audit_path))
+        try:
+            content = path.read_text()
+        except OSError:
+            continue
         if not audit_path.exists():
-            failures.append(
-                f"worker `{worker_role}` produced `{rel}` but no audit sidecar "
-                f"at `{audit_path.name}` — the sidecar must carry the Reading "
-                f"Confirmation block (one short line per input file). Workers "
-                f"write this in the same step as the main worker-results file."
-            )
             continue
-
-        _, command_failures = read_evidence_commands(audit_path)
-        failures.extend(command_failures)
         advisories.extend(_evidence_read_ledger_failures(
             run_dir=run_dir,
             worker_role=worker_role,