okstra 0.209.2 → 0.209.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "okstra",
-  "version": "0.209.2",
+  "version": "0.209.4",
   "description": "Host-aware multi-provider cross-verification orchestrator runtime and agent skills.",
   "license": "MIT",
   "author": "devonshin",

package/runtime/BUILD.json

@@ -1,5 +1,5 @@
 {
-  "package": "0.209.2",
-  "builtAt": "2026-10-05T05:48:33.643Z",
+  "package": "0.209.4",
+  "builtAt": "2026-10-05T06:38:59.441Z",
   "repoRoot": "/home/runner/work/okstra/okstra"
 }

package/runtime/prompts/lead/adapters/cmux.md

@@ -33,7 +33,7 @@ Keep the selected host relay's dispatch permission guidance when calling `okstra
 | `await_workers` | Run `okstra team await --project-root <root> --run-manifest <path>` through the host's asynchronous shell facility. |
 | `redispatch_worker` | Create the core-specified fresh jobs file and dispatch it with a new `dispatchKind`; never reuse a live worker conversation. |
 | `shutdown_workers` | Run `okstra team teardown --project-root <root> --run-manifest <path>` only after the user-approved cleanup gate. |
-| `record_lead_event` | Append progress and activity records to the manifest-provided `leadEventsPath`. Use `okstra lead-progress append --project-root <dir> --run-manifest <path> --phase <phase-id>` for a checkpoint the command performing that step does not record itself (the lead contract "Progress reporting" lists the ones `team dispatch`, `team await`, `team reclaim`, `worker-dispatch` and `report-finalize` record; emit the `PROGRESS:` lines they print instead) and `okstra agent-activity append --project-root <dir> --run-manifest <path> --kind <kind> ...` for an activity record; both resolve the ledger path from the run manifest. Emit the matching `PROGRESS:` line — the command prints it as `progressLine` — and, when an activity record is required, the immediately following `ACTIVITY:` line from the same structured fields. |
+| `record_lead_event` | Append progress and activity records to the manifest-provided `leadEventsPath`. Use `okstra lead-progress append --project-root <dir> --run-manifest <path> --phase <phase-id>` for a checkpoint the command performing that step does not record itself (the lead contract "Progress reporting" lists the ones `team dispatch`, `team await`, `team reclaim`, `worker-dispatch` and `report-finalize` record; emit the `PROGRESS:` lines they print instead) and `okstra agent-activity append --project-root <dir> --run-manifest <path> --kind <kind> ...` for an activity record — never for the `worker-dispatched` / `worker-completed` rows `team dispatch` and `team await` append themselves; both resolve the ledger path from the run manifest. Emit the matching `PROGRESS:` line — the command prints it as `progressLine` — and, when an activity record is required, the immediately following `ACTIVITY:` line from the same structured fields. |
 | `collect_usage` | Collect artifact/CLI-log-backed usage through the existing Okstra token-usage path; never substitute another runtime's session log. |
 
 An `implementation` run calls `dispatch_worker` twice: once for the Executor, then — after `await_workers` settles it — once for the verifiers. That second call's `--workers` list must omit the Executor's worker ID: it is materialized as the Executor on every dispatch, so a batch still carrying it is refused again. A verifier started beside the Executor observes base HEAD instead of the stage diff, so a single batch holding both is refused by `scripts/okstra_ctl/dispatch_core.py` `_validate_implementation_phase_order`, `--dry-run` included.

package/runtime/prompts/lead/okstra-lead-contract.md

@@ -66,7 +66,7 @@ Every `okstra` command the lead documents cite, grouped by phase, each spelled w
 | Command | Use when | Procedure |
 |---|---|---|
 | `okstra lead-progress append --project-root <dir> --run-manifest <path> --phase <phase-id>` | Every `PROGRESS` checkpoint the command performing that step does not record itself; print the `progressLine` it returns. `--phase` accepts only the listed phase ids; use `--worker`, `--field NAME=VALUE`, and `--detail <text>` for the rest | this contract "Progress reporting" |
-| `okstra agent-activity append --project-root <dir> --run-manifest <path> --kind <kind> --agent <agent> --outcome <outcome> --summary <text>` | Before each activity boundary when the run manifest declares `activityContractVersion: 1` | launch prompt "Progress reporting" |
+| `okstra agent-activity append --project-root <dir> --run-manifest <path> --kind <kind> --agent <agent> --outcome <outcome> --summary <text>` | Before each activity boundary when the run manifest declares `activityContractVersion: 1`, except a `worker-dispatched` / `worker-completed` row the dispatching command already appended (see "Progress reporting") | launch prompt "Progress reporting" |
 | `okstra error-log append-observed --out <errors-path> --task-key <key> --phase <phase> --agent <provider-worker> --agent-role <role> --model <model> --error-type <type> --command-kind <kind> --command <command> --message <text>` | Record an observed failure. `--agent` takes the provider worker id (`codex-worker`); an execution label goes in `--execution-label` | this contract "Errors log path wiring"; `team-contract` "Worker error-log command" |
 | `okstra approval-decision open --ledger <path> --task-key <key> --task-type <type> --run-seq <seq> --clarification-id <C-NNN> --ticket-id <id> --statement <text> --expected-form <form> --classification <class> --origin <origin> --user-confirmation <text> --unblock-condition <text> --recommended-disposition <disposition> [--supersedes <C-NNN>]` | Open an approval blocker after the user confirmed it | this contract "User confirmation before an approval blocker" |
 | `okstra approval-decision carry --ledger <path> --clarification-id <C-NNN> --from-responses <path>` | Carry a decision answered in an earlier run | `report-writer` "Role-owned inputs" |

package/runtime/python/okstra_ctl/agent/activity.py

@@ -166,6 +166,9 @@ def _activity_row(event: LeadEvent) -> dict[str, Any]:
     from okstra_ctl.execution_identity import stored_identity
 
     row = {key: details[key] for key in ACTIVITY_FIELDS}
+    if row["resultPath"] is None:
+        # 0.209.1 의 team dispatch/await 가 null 로 기록한 행. 원장은 고치지 않고 읽을 때 맞춘다.
+        row["resultPath"] = ""
     if "clarificationRefs" in details:
         refs = details["clarificationRefs"]
         if not isinstance(refs, list) or any(
@@ -201,6 +204,8 @@ def record_activity(
         raise ActivityProjectionError(
             "run manifest does not declare activityContractVersion 1"
         )
+    if not isinstance(details.get("resultPath"), str):
+        raise ActivityProjectionError("activity resultPath must be a string")
     _validate_activity_ownership(project_root, manifest, details)
     event = LeadEvent(
         event_type="activity",

package/runtime/python/okstra_ctl/design_prep.py

@@ -313,6 +313,23 @@ def _complete_request(
     return "\n".join(lines) + "\n"
 
 
+def canonical_request_path(planning_seq: str, item_id: str) -> str:
+    return f"design-prep-requests/design-prep-request-{planning_seq}-{item_id}.md"
+
+
+def canonicalize_request_paths(data: Mapping[str, Any], data_path: Path) -> None:
+    """Name each open item's request by this report's planning seq.
+
+    The detector snapshot cannot know the report seq and names requests by stage
+    number, so a second planning run of the same task pointed its request at the
+    first run's file and materialization refused to overwrite it.
+    """
+    planning_seq = _planning_seq(Path(data_path))
+    for item in _design_preparation_items(data):
+        if isinstance(item, dict) and "requestPath" in item and isinstance(item.get("id"), str):
+            item["requestPath"] = canonical_request_path(planning_seq, item["id"])
+
+
 def _request_target(
     *,
     data_path: Path,
@@ -322,10 +339,7 @@ def _request_target(
     item_id = item.get("id")
     if not isinstance(item_id, str) or not item_id:
         raise DesignPrepError("design preparation item id must be a non-empty string")
-    expected_relative = (
-        "design-prep-requests/"
-        f"design-prep-request-{planning_seq}-{item_id}.md"
-    )
+    expected_relative = canonical_request_path(planning_seq, item_id)
     request_dir = data_path.parent.parent / "design-prep-requests"
     recorded = item.get("requestPath")
     if recorded == expected_relative:

package/runtime/python/okstra_ctl/dispatch_checkpoints.py

@@ -74,7 +74,8 @@ def record_dispatch_checkpoints(
                     project_root, run_manifest, source=source,
                     kind="worker-dispatched", agent=job.worker_id,
                     summary=f"Dispatched {job.worker_id} as an initial worker",
-                    result_path=None, outcome="pending",
+                    result_path=_project_relative(project_root, str(job.worker_result_path)),
+                    outcome="pending",
                 ))
     dispatches_writer = any(job.worker_id == REPORT_WRITER_WORKER_ID for job in jobs)
     writer_dispatched_before = bool(
@@ -165,9 +166,10 @@ def _declares_activity_contract(
     return manifest.get("activityContractVersion") == 1
 
 
-def _project_relative(project_root: Path, value: Any) -> str | None:
+def _project_relative(project_root: Path, value: Any) -> str:
+    # 보고서 스키마의 resultPath 는 문자열이다. 리드 CLI 도 경로가 없으면 "" 를 쓴다.
     if not isinstance(value, str) or not value:
-        return None
+        return ""
     path = Path(value)
     root = project_root.resolve()
     return str(path.relative_to(root)) if path.is_relative_to(root) else value
@@ -181,7 +183,7 @@ def _record_worker_activity(
     kind: str,
     agent: str,
     summary: str,
-    result_path: str | None,
+    result_path: str,
     outcome: str,
 ) -> str | None:
     """실패 처리는 `record_checkpoint` 와 같다: stderr 에만 남기고, 누락은 검증기가 보고한다."""

package/runtime/python/okstra_ctl/report_assembly.py

@@ -26,7 +26,11 @@ from .report_synthesis_packet import (
 )
 from .conformance import strip_stage_declaration_label
 from .coverage_census import census_warning_rows, read_census_state
-from .design_prep import DesignPrepError, materialize_design_prep_requests
+from .design_prep import (
+    DesignPrepError,
+    canonicalize_request_paths,
+    materialize_design_prep_requests,
+)
 from .phases.implementation_option_selection.validation import validate_blocked_answer_channel
 from .phases.technical_verification.validation import validate_technical_verification_report
 from .report_routing import technical_verification_routing_errors
@@ -830,6 +834,16 @@ def assemble_report(
     if input_issues:
         raise ReportAssemblyError(tuple(input_issues))
     data = _compose(project_root, manifest_path, manifest, inputs, schema)
+    value = manifest.get("expectedReportRecordPath")
+    if not isinstance(value, str) or not value:
+        _fail("orchestrator", manifest_path, "expectedReportRecordPath", "required")
+    target = Path(value)
+    target = target if target.is_absolute() else project_root / target
+    if manifest.get("taskType") == "implementation-planning":
+        try:
+            canonicalize_request_paths(data, target)
+        except DesignPrepError as exc:
+            _fail("orchestrator", target, "designPreparation", str(exc))
     errors = validate(data, schema)
     path_errors = planned_path_declaration_errors(data)
     if path_errors:
@@ -840,11 +854,6 @@ def assemble_report(
     direction_errors = selected_direction_plan_errors(
         data, project_root, manifest
     )
-    value = manifest.get("expectedReportRecordPath")
-    if not isinstance(value, str) or not value:
-        _fail("orchestrator", manifest_path, "expectedReportRecordPath", "required")
-    target = Path(value)
-    target = target if target.is_absolute() else project_root / target
     verification_errors = validate_technical_verification_report(data, target, project_root)
     verification_errors.extend(technical_verification_routing_errors(data))
     if verification_errors: