zob-harness 0.12.0 → 0.14.0

package/.pi/capabilities/zob-public-runtime-capabilities.json

@@ -338,7 +338,7 @@
         ".pi/extensions/zob-harness/src/AGENTS.md",
         "AGENTS.md"
       ],
-      "noShipNotes": "Launches a saved plan TODO sidecar into runtime goal/TODO metadata; does not edit source files and must not recreate TODOs from prose. Blocks on active-goal/relaunch conflicts unless explicitly gated."
+      "noShipNotes": "Launches a saved plan TODO sidecar into runtime goal/TODO metadata; does not edit source files and must not recreate TODOs from prose. Safely auto-attaches to a non-complete active goal by default, remains idempotent for the same launched goal, and blocks true relaunch conflicts unless explicitly gated."
     },
     {
       "name": "create_goal",
@@ -719,7 +719,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Agent-initiated visible ZPeer ask; local_socket only, room-scoped with optional explicit roomId, mode defaults async, rate/loop guarded, raw bodies transient and durable records hash-only."
+      "noShipNotes": "Agent-initiated visible ZPeer ask; local_socket only, room-scoped with optional explicit roomId, mode defaults async, normal/urgent/force are rate/loop guarded, force requires a hashed reason and role/topology guards, raw bodies transient and durable records hash-only."
     },
     {
       "name": "zob_goal_room_send",
@@ -972,6 +972,25 @@
       ],
       "noShipNotes": "Lists metadata-only merge queue; no raw diffs or source writes."
     },
+    {
+      "name": "zob_worklist",
+      "family": "worklist",
+      "modes": [
+        "plan",
+        "implement",
+        "factory",
+        "orchestrator"
+      ],
+      "skillRefs": [
+        ".pi/skills/zob-worklist/SKILL.md",
+        ".pi/skills/zob-coms-safety/SKILL.md"
+      ],
+      "docRefs": [
+        ".pi/extensions/zob-harness/src/domains/worklist/AGENTS.md",
+        ".pi/extensions/zob-harness/src/AGENTS.md"
+      ],
+      "noShipNotes": "Append-only metadata-only/body-free/network-disabled worklist blackboard; claim/satisfy by content hash (lease-gated, idempotent); observe is true only when no directive is open; never stores raw bodies or dispatches live transport."
+    },
     {
       "name": "zob_coms_readiness",
       "family": "mission-control",

package/.pi/extensions/zob-harness/index.ts

@@ -46,7 +46,7 @@ export type { ZobModeIntent, ZobModeIntentConfidence, ZobModeIntentRisk, ZobMode
 export { capturePlanArtifact, extractPlanTitle, listCapturedPlanEntries, shouldCapturePlanResponse, updateCapturedPlanEntry } from "./src/runtime/plan-capture.js";
 export type { PlanCaptureInput, PlanCaptureResult, PlanIndexEntry } from "./src/runtime/plan-capture.js";
 export { launchCapturedPlan, previewCapturedPlanLaunch, resolveCapturedPlanForLaunch } from "./src/runtime/plan-launch.js";
-export type { PlanLaunchInput, PlanLaunchResult, PlanLaunchSelector } from "./src/runtime/plan-launch.js";
+export type { PlanActiveGoalStrategy, PlanLaunchInput, PlanLaunchResult, PlanLaunchSelector } from "./src/runtime/plan-launch.js";
 export { PLAN_TODOS_BLOCK_END, PLAN_TODOS_BLOCK_START, PLAN_TODOS_CANONICAL_SCHEMA, PLAN_TODOS_DISPLAY_CARD_END, PLAN_TODOS_DISPLAY_CARD_START, PLAN_TODOS_INPUT_SCHEMA, PLAN_TODOS_SIDECAR_SCHEMA, buildPlanTodoSidecar, canonicalManifestHash, compileMarkdownPlanTodoManifest, extractAndNormalizePlanTodoManifest, extractPlanTodosJson, formatPlanTodoManifestDisplayCard, formatPlanTodoManifestTree, normalizePlanTodoManifest, planTodoSidecarRelativePath, readPlanTodoSidecar, redactPlanTodosBlockForDisplay, validatePlanTodoSidecar, writePlanTodoSidecar } from "./src/domains/plan/plan-todos.js";
 export type { PlanLaunchStatus, PlanTodoCanonicalItem, PlanTodoCanonicalManifest, PlanTodoDisplayCardOptions, PlanTodoDisplayRedactionResult, PlanTodoManifestQuality, PlanTodoManifestResult, PlanTodoManifestSource, PlanTodoSidecar } from "./src/domains/plan/plan-todos.js";
 export { ZOB_COMPACTION_CONTINUITY_CONTRACT, ZOB_TOOL_ROUTING_CONTRACT } from "./src/core/constants.js";
@@ -129,6 +129,302 @@ export { createWorkerPoolOwnerDecision, createWorkerPoolOwnerRequest, createWork
 export type { WorkerPoolAssignmentInput, WorkerPoolAssignmentRecord, WorkerPoolCommunicationPolicyInput, WorkerPoolCommunicationPolicyMode, WorkerPoolCommunicationPolicyRecord, WorkerPoolConflictRecord, WorkerPoolDecision, WorkerPoolOwnerDecisionInput, WorkerPoolOwnerDecisionRecord, WorkerPoolOwnerRequestInput, WorkerPoolOwnerRequestRecord, WorkerPoolPlanInput, WorkerPoolPlanRecord, WorkerPoolStatusInput } from "./src/domains/governance/worker-pool.js";
 export { decideMergeCandidate, isMergeCandidateRecord, isMergeDecisionRecord, listMergeQueue, mergeQueueBodyFreeViolations, submitMergeCandidate } from "./src/domains/governance/merge-queue.js";
 export type { MergeCandidateInput, MergeCandidatePriority, MergeCandidateRecord, MergeCandidateRisk, MergeDecision, MergeDecisionInput, MergeDecisionRecord, MergeQueueListInput } from "./src/domains/governance/merge-queue.js";
+export {
+  GENERIC_WORKLIST_REDUCER_ID,
+  buildDirective,
+  evaluateEvidenceForDirective,
+  genericWorklistReducer,
+  listWorklistReducerIds,
+  registerWorklistReducer,
+  resolveWorklistReducer,
+} from "./src/domains/worklist/reducer-contract.js";
+export type { BuildDirectiveInput, WorklistReducer } from "./src/domains/worklist/reducer-contract.js";
+// WS-EH1: the typed evidence pillar (canonical-evidence-model PART II). The
+// EvidenceContract + registry + shapes + body-free validator. Backward compatible
+// (WorklistDeps.evidence is now EvidenceInput with optional gates/deps).
+export {
+  emptyEvidenceInput,
+  evidenceBodyFreeViolations,
+  gateVerdictIsValid,
+  listEvidenceContractIds,
+  normalizeEvidenceInput,
+  registerEvidenceContract,
+  resolveEvidenceContract,
+} from "./src/domains/worklist/evidence-contract.js";
+export type {
+  DepEntry,
+  EvidenceContract,
+  EvidenceInput,
+  EvidenceKind,
+  EvidenceVerdict,
+  GateEntry,
+  TaskView,
+} from "./src/domains/worklist/evidence-contract.js";
+export {
+  FORBIDDEN_PLAINTEXT_KEYS,
+  WORKLIST_DIRECTIVE_SCHEMA,
+  WORKLIST_EVENT_SCHEMA,
+  WORKLIST_LEASE_SCHEMA,
+  WORKLIST_PROJECTION_SCHEMA,
+  directiveHash,
+} from "./src/domains/worklist/types.js";
+export type {
+  Directive,
+  ProjectedDirective,
+  WorklistDeps,
+  WorklistEvent,
+  WorklistEventInput,
+  WorklistLease,
+  WorklistLeaseStatus,
+  WorklistProjection,
+  WorklistValidation,
+} from "./src/domains/worklist/types.js";
+export {
+  appendWorklistEvent,
+  claimWorklistDirective,
+  isWorklistEvent,
+  isWorklistLease,
+  listWorklistDirectives,
+  listWorklistEvents,
+  listWorklistLeases,
+  openWorklistStore,
+  projectWorklist,
+  recoverStaleWorklistLeases,
+  satisfyWorklistDirective,
+  validateWorklist,
+  worklistBodyFreeViolations,
+} from "./src/domains/worklist/store.js";
+export type { WorklistClaimOptions, WorklistStore, WorklistStoreOptions } from "./src/domains/worklist/store.js";
+export {
+  DEFAULT_RESEND_INTERVAL_MS,
+  DIRECTIVE_DELIVERY_REASON_DIRECTIVE_SATISFIED,
+  DIRECTIVE_DELIVERY_REASON_IN_FLIGHT,
+  DIRECTIVE_DELIVERY_REASON_NEW,
+  DIRECTIVE_DELIVERY_REASON_NO_HASH,
+  DIRECTIVE_DELIVERY_REASON_REDELIVER,
+  DIRECTIVE_DELIVERY_REASON_SEEN_ACTED,
+  DIRECTIVE_READY_NOTIFICATION_SCHEMA,
+  WORKLIST_DIRECTIVE_DELIVERY_ACTED_SCHEMA,
+  WORKLIST_DIRECTIVE_DELIVERY_LEDGER_SCHEMA,
+  deliverDirectiveNotification,
+  deliverDirectives,
+  listDeliveries,
+  loadDirectiveDeliveryLedger,
+  markDirectiveActed,
+  markDirectiveDeliveredActed,
+  planDirectiveDelivery,
+  reconcileDirectiveLedger,
+  recordDirectiveDelivery,
+} from "./src/domains/worklist/delivery.js";
+export type {
+  DeliverDirectiveNotificationOptions,
+  DirectiveDeliveryLedger,
+  DirectiveDeliveryPlan,
+  DirectiveDeliveryRecord,
+  DirectiveDeliveryResult,
+  DirectiveReadyNotification,
+} from "./src/domains/worklist/delivery.js";
+export {
+  DECISION_TIMEOUT_DEFAULT_MS,
+  ESCALATE_TO_HUMAN_DEFAULT_MS,
+  ESCALATE_TO_LLM_DEFAULT_MS,
+  ESCALATION_LEVEL_ACT_NOW,
+  ESCALATION_LEVEL_AUTO,
+  ESCALATION_LEVEL_HUMAN_BLOCK,
+  ESCALATION_LEVEL_NUDGE_LLM,
+  ESCALATION_LEVEL_WAIT,
+  WATCHDOG_ESCALATION_SCHEMA,
+  WATCHDOG_EVALUATION_SCHEMA,
+  WATCHDOG_TICK_RESULT_SCHEMA,
+  computeWatchdogEscalation,
+  evaluateWorklistWatchdog,
+  listWatchdogEscalations,
+  runWorklistWatchdogTick,
+} from "./src/domains/worklist/watchdog.js";
+export type {
+  WatchdogBudgets,
+  WatchdogEscalation,
+  WatchdogEscalationEntry,
+  WatchdogEscalationEvent,
+  WatchdogEvaluation,
+  WatchdogTickDeps,
+  WatchdogTickResult,
+} from "./src/domains/worklist/watchdog.js";
+export {
+  DAG_STATUSES,
+  WORKLIST_DAG_SCHEMA,
+  WORKLIST_DAG_STATE_SCHEMA,
+  buildDag,
+  buildDagOrThrow,
+  butterflySeedNext,
+  computeDownstreamImpact,
+  dagBodyFreeViolations,
+  dagFingerprint,
+  dependencySatisfied,
+  detectCycle,
+  isCrossScopeRef,
+  nodeDepsSatisfied,
+  parseCrossScopeRef,
+  readyNodes,
+  readDagState,
+  resolveCrossScopeDependency,
+  writeDagState,
+} from "./src/domains/worklist/dag.js";
+export type {
+  CrossScopeResolver,
+  DagBuildResult,
+  DagGraph,
+  DagNode,
+  DagNodeInput,
+  DagNodeStatus,
+  DagState,
+  DownstreamImpact,
+} from "./src/domains/worklist/dag.js";
+export { registerWorklistTools } from "./src/runtime/tools-worklist.js";
+// WS-PH1 (environment-precondition PART II keystone): the typed EnvironmentContract
+// pillar (the 4th pillar alongside computeWorklist/EvidenceContract). The contract
+// shape + registry + PURE primitives (no node:fs/node:child_process); the body +
+// snapshotEnvironment IO are project-registered (WS-PH4). Metadata-only / body-free
+// / network-disabled: Precondition/PreconditionVerdict/EnvironmentSnapshot carry
+// paths, counts, channel names, command strings only; FORBIDDEN_PLAINTEXT_KEYS
+// applies (reused from the worklist domain).
+export {
+  commandPresent,
+  dirEmpty,
+  pathWritable,
+  toolchainInstalled,
+} from "./src/domains/environment/primitives.js";
+export type {
+  CommandPresentResult,
+  DirEmptyResult,
+  PathWritableResult,
+  ToolchainInstalledResult,
+} from "./src/domains/environment/primitives.js";
+export {
+  environmentBodyFreeViolations,
+  listEnvironmentContractIds,
+  registerEnvironmentContract,
+  resolveEnvironmentContract,
+} from "./src/domains/environment/environment-contract.js";
+export type {
+  EnvironmentContract,
+  PreconditionScope,
+} from "./src/domains/environment/environment-contract.js";
+export type {
+  CheckPhase,
+  EnvironmentSnapshot,
+  Precondition,
+  PreconditionKind,
+  PreconditionVerdict,
+} from "./src/domains/environment/types.js";
+// WS-PH2 (environment-precondition PART II): the launch-time gate primitive.
+// runLaunchGate snapshots once, evaluates all check_phase:"launch" preconditions,
+// returns { ok, verdicts, fix_packet, shouldStart } with shouldStart === ok BY
+// CONSTRUCTION (fail-closed, no opt-out). Pure over (contract, snapshot); never
+// starts anything itself (mechanism in harness, action in app). Idempotent +
+// re-runnable (re-snapshots on re-call). Metadata-only / body-free / network-
+// disabled. No node:fs/node:child_process (the purity grep returns nothing).
+export { runLaunchGate } from "./src/domains/environment/launch-gate.js";
+export type {
+  FixPacketEntry,
+  LaunchGateOptions,
+  LaunchGateResult,
+} from "./src/domains/environment/launch-gate.js";
+// WS-PH3 (environment-precondition PART II — SAFETY-CRITICAL slice): the auto-resolve
+// framework. applyAutoResolve applies ONLY allowlisted + REVERSIBLE strategies;
+// REFUSES reversible:false ALWAYS (structurally unresolvable); SKIPS requires_network
+// unless options.network===true; dispatches via PROJECT-REGISTERED
+// ResolutionStrategyFn (the harness NEVER hardcodes a shell command); REFUSES
+// missing-strategy + no-allowlist-match (fail-safe); DRY-RUN-FIRST (after_state:null,
+// io.exec guarded). Incapable-by-construction of irreversible ops: the allowlist
+// filter rejects reversible:false BEFORE dispatch. node:fs is used ONLY for the
+// audit-log writer (appendFileSync); no node:child_process / direct spawn.
+// Metadata-only / body-free / network-disabled (environmentBodyFreeViolations per entry).
+export { AUTO_RESOLVE_AUDIT_SCHEMA, applyAutoResolve, registerResolutionStrategy } from "./src/domains/environment/auto-resolve.js";
+export type {
+  AutoResolveAllowlist,
+  AutoResolveAuditEntry,
+  AutoResolveEntry,
+  AutoResolveIO,
+  AutoResolveOptions,
+  AutoResolveOutcome,
+  AutoResolveResult,
+  AutoResolveVerdict,
+  ResolutionStrategyFn,
+} from "./src/domains/environment/auto-resolve.js";
+// WS-CH1 (capability-validation PART II keystone): the typed CapabilityContract
+// pillar (the 5th pillar alongside computeWorklist/EvidenceContract/EnvironmentContract).
+// The contract shape + registry + PURE primitives (no node:fs/node:child_process); the
+// body + readManifest IO + the role->required-tools map are project-registered (WS-CH3).
+// Metadata-only / body-free / network-disabled: AgentManifest/RoleRequirement/
+// CapabilityVerdict carry agent ids, tool names, mode names, manifest paths, fixCommand
+// strings only; FORBIDDEN_PLAINTEXT_KEYS applies (reused from the worklist domain).
+// CRITICAL SAFETY: NO auto-resolve on the contract (manifest edit = security-sensitive =
+// operator-gated, unlike Round 4 env auto-resolve).
+export {
+  buildFixPacket,
+  compareCapability,
+  manifestHasTool,
+  modePermitsWrite,
+  requiredToolsForRole,
+} from "./src/domains/capability/primitives.js";
+export type { CapabilityFixPacketEntry } from "./src/domains/capability/primitives.js";
+export {
+  capabilityBodyFreeViolations,
+  listCapabilityContractIds,
+  registerCapabilityContract,
+  resolveCapabilityContract,
+} from "./src/domains/capability/capability-contract.js";
+export type { CapabilityContract } from "./src/domains/capability/capability-contract.js";
+export type {
+  AgentManifest,
+  CapabilityVerdict,
+  RoleName,
+  RoleRequirement,
+} from "./src/domains/capability/types.js";
+// WS-CH2 (capability-validation PART II): the launch-time gate primitive + the
+// runtime nudge-backoff/gap primitives. runCapabilityGate reads each manifest once
+// (via the contract's readManifest), evaluates every agent against its role's
+// requirement, returns { ok, verdicts, fix_packet, shouldStart } with
+// shouldStart === ok BY CONSTRUCTION (fail-closed, no opt-out). Pure over
+// (contract, agentIds); never starts anything itself (mechanism in harness, action
+// in app). Idempotent + re-runnable (re-reads manifests on re-call). The nudge-
+// policy primitives compose the supervisor anti-spam policy: planBackoffNudge
+// (60s→2m→5m→15m cap + the structural capability_gap_stop), detectCapabilityGap
+// (gates escalation — slow-but-capable stays gap===false), capabilityGapFixPacket
+// (the metadata-only alert_no_ship fix packet), transitionOnCapabilityGap (forces
+// the terminal capability_gap:true stop once gap===true). Metadata-only /
+// body-free / network-disabled. No node:fs/node:child_process (the purity grep
+// returns nothing). CRITICAL SAFETY: NO auto-resolve (manifest edit = security-
+// sensitive = operator-gated, intentional divergence from Round 4 env auto-resolve).
+export { runCapabilityGate } from "./src/domains/capability/launch-gate.js";
+// NOTE: aliased as CapabilityLaunchGateOptions / CapabilityLaunchGateResult to
+// avoid a name collision with the WS-PH2 environment pillar's identically-named
+// LaunchGateOptions / LaunchGateResult exports above (index.ts ~L330). Both
+// shapes exist; consumers pick the capability gate via the `Capability*` prefix.
+export type {
+  LaunchGateOptions as CapabilityLaunchGateOptions,
+  LaunchGateResult as CapabilityLaunchGateResult,
+} from "./src/domains/capability/launch-gate.js";
+export {
+  DEFAULT_NUDGE_SCHEDULE,
+  NUDGE_BACKOFF_CAP_MS,
+  capabilityGapFixPacket,
+  detectCapabilityGap,
+  planBackoffNudge,
+  transitionOnCapabilityGap,
+} from "./src/domains/capability/nudge-policy.js";
+export type {
+  CapabilityGapAction,
+  CapabilityGapFixPacket,
+  CapabilityGapTransition,
+  DetectCapabilityGapInput,
+  DriverRecord,
+  GapResult,
+  NudgePlan,
+  NudgeSchedule,
+  PlanBackoffNudgeInput,
+} from "./src/domains/capability/nudge-policy.js";
 export { DEFAULT_PROMOTION_GATES, advancePromotionCandidate, appendPromotionLedger, createPromotionCandidate, promotionCandidateDir, promotionCandidateRef, promotionReportsDir, summarizePromotionCandidates, transitionAllowed, validatePromotionCandidate, writePromotionCandidate } from "./src/domains/promotion/candidate.js";
 export { addPromotionComsMessageRef, buildPromotionComsMessageRef, buildPromotionComsThread, validatePromotionComsMessageRef, validatePromotionComsReadiness, validatePromotionComsThread, writePromotionComsThread } from "./src/domains/promotion/coms.js";
 export { applyDocumentationPromotionInQuarantine, prepareDocumentationPromotion, validateDocumentationPromotion, validateDocumentationPromotionCandidate } from "./src/domains/promotion/documentation.js";

package/.pi/extensions/zob-harness/src/core/artifact-roots.ts

@@ -0,0 +1,55 @@
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+
+export const PRIMARY_PLANS_ROOT = ".pi/plans";
+export const LEGACY_PLANS_ROOT = "plans";
+export const PRIMARY_REPORTS_ROOT = ".pi/reports";
+export const LEGACY_REPORTS_ROOT = "reports";
+
+export type ArtifactRootKind = "plans" | "reports";
+
+function normalizeSegments(segments: string[]): string[] {
+  return segments.flatMap((segment) => segment.split("/")).filter(Boolean);
+}
+
+export function artifactRootRef(kind: ArtifactRootKind, legacy = false): string {
+  if (kind === "plans") return legacy ? LEGACY_PLANS_ROOT : PRIMARY_PLANS_ROOT;
+  return legacy ? LEGACY_REPORTS_ROOT : PRIMARY_REPORTS_ROOT;
+}
+
+export function artifactRootPath(repoRoot: string, kind: ArtifactRootKind, legacy = false): string {
+  return join(repoRoot, ...artifactRootRef(kind, legacy).split("/"));
+}
+
+export function artifactRef(kind: ArtifactRootKind, ...segments: string[]): string {
+  return [artifactRootRef(kind), ...normalizeSegments(segments)].join("/");
+}
+
+export function legacyArtifactRef(kind: ArtifactRootKind, ...segments: string[]): string {
+  return [artifactRootRef(kind, true), ...normalizeSegments(segments)].join("/");
+}
+
+export function artifactPath(repoRoot: string, kind: ArtifactRootKind, ...segments: string[]): string {
+  return join(artifactRootPath(repoRoot, kind), ...normalizeSegments(segments));
+}
+
+export function legacyArtifactPath(repoRoot: string, kind: ArtifactRootKind, ...segments: string[]): string {
+  return join(artifactRootPath(repoRoot, kind, true), ...normalizeSegments(segments));
+}
+
+export function isArtifactRef(value: string, kind: ArtifactRootKind, options: { legacy?: boolean } = {}): boolean {
+  const normalized = value.replace(/^\.\//, "");
+  const primary = artifactRootRef(kind);
+  const legacy = artifactRootRef(kind, true);
+  return normalized === primary || normalized.startsWith(`${primary}/`) || options.legacy === true && (normalized === legacy || normalized.startsWith(`${legacy}/`));
+}
+
+export function existingArtifactRoots(repoRoot: string, kind: ArtifactRootKind, ...segments: string[]): string[] {
+  const primary = artifactPath(repoRoot, kind, ...segments);
+  const legacy = legacyArtifactPath(repoRoot, kind, ...segments);
+  return [primary, legacy].filter((path, index, paths) => paths.indexOf(path) === index && existsSync(path));
+}
+
+export function firstExistingArtifactPath(repoRoot: string, kind: ArtifactRootKind, ...segments: string[]): string {
+  return existingArtifactRoots(repoRoot, kind, ...segments)[0] ?? artifactPath(repoRoot, kind, ...segments);
+}

package/.pi/extensions/zob-harness/src/core/constants.ts

@@ -18,7 +18,7 @@ export { DEFAULT_RULES };
 export const ZOB_TOOL_ROUTING_CONTRACT = [
   "ZOB TOOL ROUTING CONTRACT",
   "- For non-trivial or tool-ambiguous work, run a lightweight routing loop before acting.",
-  "- Classify applicable families: goal/TODO, delegation, orchestration, compute, context/ProjectDNA, factory, coms/goal-room, workspace/merge, autonomous-runtime, oracle.",
+  "- Classify applicable families: goal/TODO, delegation, orchestration, compute, context/ProjectDNA, factory, coms/goal-room, worklist/liveness, workspace/merge, autonomous-runtime, oracle.",
   "- Load .pi/skills/zob-tool-router/SKILL.md when routing is uncertain or work spans multiple families; then load the domain skill(s) named by the registry.",
   "- Use the smallest sufficient tool set: use, delegate, or explicitly skip applicable families with a reason.",
   "- Do not bypass mode/tool safety, approval, sandbox, budget, evidence, or oracle gates.",
@@ -51,6 +51,7 @@ export const ZOB_GOAL_ROOM_TOOLS = ["zob_goal_room_send", "zob_goal_room_list"]
 export const ZOB_GOVERNED_REQUEST_TOOLS = ["zob_governed_request_extract"] as const;
 export const ZOB_WORKSPACE_CLAIM_TOOLS = ["zob_workspace_claim", "zob_workspace_release", "zob_workspace_claims_list"] as const;
 export const ZOB_WORKER_POOL_TOOLS = ["zob_worker_pool_plan", "zob_worker_pool_status", "zob_worker_pool_owner_request", "zob_worker_pool_owner_decision"] as const;
+export const ZOB_WORKLIST_TOOLS = ["zob_worklist"] as const;
 export const ZOB_MERGE_QUEUE_TOOLS = ["zob_merge_candidate_submit", "zob_merge_queue_decide", "zob_merge_queue_list"] as const;
 export const ZOB_ZCOMMIT_TOOLS = ["zob_zcommit_run"] as const;
 export const ZOB_ZAGENT_TOOLS = ["zob_zteam_hot_add", "zob_zteam_remove"] as const;
@@ -70,11 +71,11 @@ export const ZOB_AUTONOMOUS_FACTORY_TOOLS = ["zob_autonomous_dry_run", "zob_auto
 
 export const MODE_TOOLS: Record<ModeName, string[]> = {
   explore: ["read", "grep", "find", "ls", "bash", "delegate_agent", "delegate_task", "zob_coms_list", "zob_coms_get", "zob_coms_await", "zpeer_ask", "zob_goal_room_list", "zob_workspace_claims_list", "zob_worker_pool_status", "zob_merge_queue_list", ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_AUTONOMOUS_READ_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS],
-  plan: ["read", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
-  implement: ["read", "bash", "edit", "write", "grep", "find", "ls", "delegate_agent", "delegate_task", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
+  plan: ["read", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
+  implement: ["read", "bash", "edit", "write", "grep", "find", "ls", "delegate_agent", "delegate_task", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
   oracle: ["read", "grep", "find", "ls", "bash", "delegate_agent", "delegate_task", "zob_coms_list", "zob_coms_get", "zob_coms_await", "zpeer_ask", "zob_goal_room_list", "zob_workspace_claims_list", "zob_worker_pool_status", "zob_merge_queue_list", ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_AUTONOMOUS_READ_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS],
-  orchestrator: ["read", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS],
-  factory: ["read", "bash", "edit", "write", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "factory_run", "factory_quarantine_review", "factory_quarantine_activate", "factory_quarantine_verify_activation", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_AUTONOMOUS_READ_TOOLS, ...ZOB_AUTONOMOUS_FACTORY_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
+  orchestrator: ["read", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS],
+  factory: ["read", "bash", "edit", "write", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "factory_run", "factory_quarantine_review", "factory_quarantine_activate", "factory_quarantine_verify_activation", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_AUTONOMOUS_READ_TOOLS, ...ZOB_AUTONOMOUS_FACTORY_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
   // Vanilla is handled specially by applyMode: all currently available Pi tools are enabled.
   vanilla: [],
 };

package/.pi/extensions/zob-harness/src/domains/autonomy/autonomous-runtime/report-writers.ts

@@ -1,5 +1,6 @@
 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+import { artifactPath, artifactRef, firstExistingArtifactPath } from "../../../core/artifact-roots.js";
 import { runFactoryRun } from "../../factory/run.js";
 import { sha256 } from "../../../core/utils/hashing.js";
 import { safeFileStem } from "../../../core/utils/paths.js";
@@ -12,7 +13,7 @@ export function writeAutonomousRuntimeDryRunReport(repoRoot: string, input: Auto
   const report = buildAutonomousRuntimeDryRun(repoRoot, input);
   const runId = String(report.runId);
   const safeRunId = safeFileStem(runId);
-  const runDir = join(repoRoot, "reports", "autonomous-runs", safeRunId);
+  const runDir = artifactPath(repoRoot, "reports", "autonomous-runs", safeRunId);
   mkdirSync(runDir, { recursive: true });
   const specGatePath = join(runDir, "spec-gate.json");
   const contextScopePath = join(runDir, "context-scope.json");
@@ -44,25 +45,25 @@ export function writeAutonomousRuntimeDryRunReport(repoRoot: string, input: Auto
   if (report.status === "dry_run_plan_ready") writeFileSync(join(runDir, "DRY_RUN_READY.sentinel"), "dry-run-ready\n");
   return {
     ...report,
-    specGatePath: `reports/autonomous-runs/${safeRunId}/spec-gate.json`,
-    contextScopePath: `reports/autonomous-runs/${safeRunId}/context-scope.json`,
-    contextLookupPath: `reports/autonomous-runs/${safeRunId}/context-lookup.json`,
-    contextPackPath: `reports/autonomous-runs/${safeRunId}/context-pack.json`,
-    runtimeGatesPath: `reports/autonomous-runs/${safeRunId}/runtime-gates.json`,
-    modelRoutingPlanPath: `reports/autonomous-runs/${safeRunId}/model-routing-plan.json`,
-    runGraphPath: `reports/autonomous-runs/${safeRunId}/run-graph.json`,
-    factorySelectionPath: `reports/autonomous-runs/${safeRunId}/factory-selection.json`,
-    proofPlanPath: `reports/autonomous-runs/${safeRunId}/proof-plan.json`,
-    reportPath: `reports/autonomous-runs/${safeRunId}/dry-run-report.json`,
-    validationPath: `reports/autonomous-runs/${safeRunId}/validation.json`,
-    finalReportPath: `reports/autonomous-runs/${safeRunId}/final-report.md`,
-    sentinelPath: report.status === "dry_run_plan_ready" ? `reports/autonomous-runs/${safeRunId}/DRY_RUN_READY.sentinel` : undefined,
+    specGatePath: artifactRef("reports", "autonomous-runs", safeRunId, "spec-gate.json"),
+    contextScopePath: artifactRef("reports", "autonomous-runs", safeRunId, "context-scope.json"),
+    contextLookupPath: artifactRef("reports", "autonomous-runs", safeRunId, "context-lookup.json"),
+    contextPackPath: artifactRef("reports", "autonomous-runs", safeRunId, "context-pack.json"),
+    runtimeGatesPath: artifactRef("reports", "autonomous-runs", safeRunId, "runtime-gates.json"),
+    modelRoutingPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "model-routing-plan.json"),
+    runGraphPath: artifactRef("reports", "autonomous-runs", safeRunId, "run-graph.json"),
+    factorySelectionPath: artifactRef("reports", "autonomous-runs", safeRunId, "factory-selection.json"),
+    proofPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "proof-plan.json"),
+    reportPath: artifactRef("reports", "autonomous-runs", safeRunId, "dry-run-report.json"),
+    validationPath: artifactRef("reports", "autonomous-runs", safeRunId, "validation.json"),
+    finalReportPath: artifactRef("reports", "autonomous-runs", safeRunId, "final-report.md"),
+    sentinelPath: report.status === "dry_run_plan_ready" ? artifactRef("reports", "autonomous-runs", safeRunId, "DRY_RUN_READY.sentinel") : undefined,
   };
 }
 export function writeAutonomousReadOnlySmokeRunReport(repoRoot: string, input: AutonomousReadOnlySmokeRunInput): Record<string, unknown> {
   const runId = safeFileStem(input.runId ?? `autonomous-readonly-smoke-${sha256(input.userNeed || "missing-spec").slice(0, 12)}`);
   const safeRunId = safeFileStem(runId);
-  const runDir = join(repoRoot, "reports", "autonomous-runs", safeRunId);
+  const runDir = artifactPath(repoRoot, "reports", "autonomous-runs", safeRunId);
   const smokeAutonomySentinelPath = join(runDir, "SMOKE_AUTONOMY_PASSED.sentinel");
   if (existsSync(smokeAutonomySentinelPath)) throw new Error(`Autonomous smoke run already passed; choose a fresh run_id to avoid stale sentinel reuse: ${runId}`);
   const dryRun = writeAutonomousRuntimeDryRunReport(repoRoot, {
@@ -75,7 +76,7 @@ export function writeAutonomousReadOnlySmokeRunReport(repoRoot: string, input: A
   const selectedFactory = typeof factorySelection.selectedFactory === "string" ? factorySelection.selectedFactory : undefined;
   const manifestPath = selectedFactory ? `.pi/factories/${selectedFactory}/smoke-manifest.json` : undefined;
   const factoryRunId = safeFileStem(input.factoryRunId ?? `autonomous-smoke-${safeRunId}`);
-  const factoryRunAlreadyExists = existsSync(join(repoRoot, "reports", "factory-runs", factoryRunId));
+  const factoryRunAlreadyExists = existsSync(firstExistingArtifactPath(repoRoot, "reports", "factory-runs", factoryRunId));
   const blockers = [
     ...(dryRun.status === "dry_run_plan_ready" ? [] : ["dry_run_not_ready"]),
     ...(isRecord(dryRun.validation) && Array.isArray(dryRun.validation.blockers) ? dryRun.validation.blockers.filter((blocker): blocker is string => typeof blocker === "string") : []),
@@ -99,7 +100,7 @@ export function writeAutonomousReadOnlySmokeRunReport(repoRoot: string, input: A
     budget: { strictRequested: true, strictEnabled: false, maxRuns: 1, estimatedRuns: 1, maxParallelChildren: 1, estimatedParallelChildren: 1 },
     model_routing: { enabled: false, risk: input.risk ?? "medium", contextTokens: input.maxContextTokens },
   }) : undefined;
-  const factoryRunDir = join(repoRoot, "reports", "factory-runs", factoryRunId);
+  const factoryRunDir = firstExistingArtifactPath(repoRoot, "reports", "factory-runs", factoryRunId);
   const factoryValidationPath = join(factoryRunDir, "validation.json");
   const factoryValidationRead = readJsonArtifact(factoryValidationPath);
   const factoryValidation = isRecord(factoryValidationRead.parsed) ? factoryValidationRead.parsed : {};
@@ -164,12 +165,12 @@ export function writeAutonomousReadOnlySmokeRunReport(repoRoot: string, input: A
     checks: oracleChecks,
     failedChecks: oracleChecks.filter((check) => check.passed !== true).map((check) => check.name),
     evidenceRefs: [
-      `reports/autonomous-runs/${safeRunId}/spec-gate.json`,
-      `reports/autonomous-runs/${safeRunId}/context-pack.json`,
-      `reports/autonomous-runs/${safeRunId}/runtime-gates.json`,
-      `reports/autonomous-runs/${safeRunId}/model-routing-plan.json`,
-      `reports/autonomous-runs/${safeRunId}/factory-selection.json`,
-      `reports/autonomous-runs/${safeRunId}/factory-run-ref.json`,
+      artifactRef("reports", "autonomous-runs", safeRunId, "spec-gate.json"),
+      artifactRef("reports", "autonomous-runs", safeRunId, "context-pack.json"),
+      artifactRef("reports", "autonomous-runs", safeRunId, "runtime-gates.json"),
+      artifactRef("reports", "autonomous-runs", safeRunId, "model-routing-plan.json"),
+      artifactRef("reports", "autonomous-runs", safeRunId, "factory-selection.json"),
+      artifactRef("reports", "autonomous-runs", safeRunId, "factory-run-ref.json"),
       relativeFactoryRunPath(factoryRunId, "validation.json"),
       relativeFactoryRunPath(factoryRunId, "SMOKE_PASSED.sentinel"),
       relativeFactoryRunPath(factoryRunId, "DONE.sentinel"),
@@ -303,23 +304,23 @@ export function writeAutonomousReadOnlySmokeRunReport(repoRoot: string, input: A
     finalNoShipOracle,
     completionGate,
     validation,
-    factoryRunRefPath: `reports/autonomous-runs/${safeRunId}/factory-run-ref.json`,
-    oracleReviewPath: `reports/autonomous-runs/${safeRunId}/oracle-review.json`,
-    promotionPlanPath: `reports/autonomous-runs/${safeRunId}/promotion-plan.json`,
-    promotionProofPlanPath: `reports/autonomous-runs/${safeRunId}/promotion-proof-plan.json`,
-    schedulerPlanPath: `reports/autonomous-runs/${safeRunId}/scheduler-plan.json`,
-    schedulerProofPlanPath: `reports/autonomous-runs/${safeRunId}/scheduler-proof-plan.json`,
-    missionControlPlanPath: `reports/autonomous-runs/${safeRunId}/mission-control-plan.json`,
-    missionControlProofPlanPath: `reports/autonomous-runs/${safeRunId}/mission-control-proof-plan.json`,
-    sandboxApplyPlanPath: `reports/autonomous-runs/${safeRunId}/sandbox-apply-plan.json`,
-    strictBudgetProofPlanPath: `reports/autonomous-runs/${safeRunId}/strict-budget-proof-plan.json`,
-    modelRoutingProofPlanPath: `reports/autonomous-runs/${safeRunId}/model-routing-proof-plan.json`,
-    currentSourceFingerprintPath: `reports/autonomous-runs/${safeRunId}/current-source-fingerprint.json`,
-    finalE2EProofPlanPath: `reports/autonomous-runs/${safeRunId}/final-e2e-proof-plan.json`,
-    finalNoShipOraclePath: `reports/autonomous-runs/${safeRunId}/final-no-ship-oracle.json`,
-    completionGatePath: `reports/autonomous-runs/${safeRunId}/completion-gate.json`,
-    validationPath: `reports/autonomous-runs/${safeRunId}/validation.json`,
-    finalReportPath: `reports/autonomous-runs/${safeRunId}/final-report.md`,
-    smokeSentinelPath: structuralOraclePassed ? `reports/autonomous-runs/${safeRunId}/SMOKE_AUTONOMY_PASSED.sentinel` : undefined,
+    factoryRunRefPath: artifactRef("reports", "autonomous-runs", safeRunId, "factory-run-ref.json"),
+    oracleReviewPath: artifactRef("reports", "autonomous-runs", safeRunId, "oracle-review.json"),
+    promotionPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "promotion-plan.json"),
+    promotionProofPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "promotion-proof-plan.json"),
+    schedulerPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "scheduler-plan.json"),
+    schedulerProofPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "scheduler-proof-plan.json"),
+    missionControlPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "mission-control-plan.json"),
+    missionControlProofPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "mission-control-proof-plan.json"),
+    sandboxApplyPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "sandbox-apply-plan.json"),
+    strictBudgetProofPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "strict-budget-proof-plan.json"),
+    modelRoutingProofPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "model-routing-proof-plan.json"),
+    currentSourceFingerprintPath: artifactRef("reports", "autonomous-runs", safeRunId, "current-source-fingerprint.json"),
+    finalE2EProofPlanPath: artifactRef("reports", "autonomous-runs", safeRunId, "final-e2e-proof-plan.json"),
+    finalNoShipOraclePath: artifactRef("reports", "autonomous-runs", safeRunId, "final-no-ship-oracle.json"),
+    completionGatePath: artifactRef("reports", "autonomous-runs", safeRunId, "completion-gate.json"),
+    validationPath: artifactRef("reports", "autonomous-runs", safeRunId, "validation.json"),
+    finalReportPath: artifactRef("reports", "autonomous-runs", safeRunId, "final-report.md"),
+    smokeSentinelPath: structuralOraclePassed ? artifactRef("reports", "autonomous-runs", safeRunId, "SMOKE_AUTONOMY_PASSED.sentinel") : undefined,
   };
 }