refactor(hosted-web): establish runtime feature boundaries

.codex-handoff/document-navigation-h6.json

@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 1,
+  "workKey": "phase-0/document-navigation/1587615c/none/producer/r1",
+  "exactBase": "1587615c751c3cb12b5078ab4b7264b6e9fd42ad",
+  "status": "ready_for_review",
+  "changedPaths": [
+    ".codex-handoff/document-navigation-h6.json",
+    "AGENTS.md",
+    "docs/hosted-web-phases/EXECUTION_INDEX.json",
+    "docs/hosted-web-phases/README.md",
+    "docs/hosted-web-phases/START_HERE.md",
+    "docs/hosted-web-phases/worker-start-contract.schema.json",
+    "scripts/hosted-web/orchestration/validate-worker-start.mjs",
+    "test/architecture/hosted-web/orchestration/fixtures/valid-worker-start.template.json",
+    "test/architecture/hosted-web/orchestration/worker-start-contract.test.mjs"
+  ],
+  "focusedChecks": [
+    {
+      "command": "/usr/local/bin/node --test test/architecture/hosted-web/orchestration/worker-start-contract.test.mjs",
+      "exitCode": 0,
+      "result": "pass"
+    },
+    {
+      "command": "/usr/bin/git diff --check",
+      "exitCode": 0,
+      "result": "pass"
+    }
+  ],
+  "risks": [
+    "Each mandatory read list is capped at 64 exact files; a future larger lane must be split or deliberately revise the contract.",
+    "Controllers must run the bounded worker-start validator before the registry admission gate, as documented in START_HERE.md."
+  ]
+}

.codex-handoff/estimate-semantics-h6.json

@@ -0,0 +1,127 @@
+{
+  "schemaVersion": 1,
+  "workKey": "phase-0/estimate-semantics/1587615c/11f9cb48/producer/r2",
+  "taskId": "agent-teams-hosted-web-refactor-estimate-semantics-h6",
+  "phaseId": "phase-00",
+  "laneId": "estimate-reconciliation",
+  "revision": 2,
+  "retryLimit": 2,
+  "status": "ready_for_controller_review",
+  "authorityStatus": "current_candidate_not_canonical",
+  "exactBaseSha": "1587615c751c3cb12b5078ab4b7264b6e9fd42ad",
+  "sourceSnapshotSha": "42ec333848e29e97c41699b9fed73ed199740e3f",
+  "targetCandidateSha": "1587615c751c3cb12b5078ab4b7264b6e9fd42ad",
+  "supersedesChain": [
+    {
+      "artifactId": "estimate-candidate-reconcile-h4",
+      "disposition": "rejected",
+      "relationship": "directly_superseded_by_this_current_candidate",
+      "preservedPatchReused": true,
+      "reason": "Its interval wording incorrectly treated 38,300 as outside the inclusive 28,000-45,000 interval and did not state current-candidate authority clearly enough."
+    },
+    {
+      "artifactId": "estimate-adoption-h3",
+      "disposition": "rejected",
+      "relationship": "previously_superseded_by_estimate-candidate-reconcile-h4",
+      "preservedPatchReused": false,
+      "reason": "The preserved h4 handoff records that h3 coupled asOfCommit to HEAD and retained stale target-candidate hashes."
+    }
+  ],
+  "authority": {
+    "canonicalEntrypoint": "docs/hosted-web-phases/START_HERE.md",
+    "evidenceLifecycle": "docs/hosted-web-phases/EVIDENCE_LIFECYCLE.md",
+    "candidateReviewDisposition": "pending",
+    "rejectedH4RemainsCanonical": false,
+    "statement": "Source and target snapshot classifications identify reproducible bytes, not evidence authority. This artifact remains a current candidate unless separately reviewed and adopted under the evidence lifecycle."
+  },
+  "result": {
+    "targetReleaseScope": "non_terminal_v1",
+    "unit": "gross_integrated_changed_lines",
+    "baselineInterval": {
+      "low": 28000,
+      "high": 45000
+    },
+    "reconciledInterval": {
+      "low": 38300,
+      "high": 62100
+    },
+    "intervalRelationship": {
+      "lowEndpointInsideBaselineInclusive": true,
+      "highEndpointAboveBaseline": true,
+      "fullyOutsideBaseline": false,
+      "partiallyOutsideBaseline": true
+    },
+    "countedComponents": [
+      "implementationAdditions",
+      "testsAndEvidenceAdditions",
+      "deletedLegacyLines",
+      "unallocatedMixedScope"
+    ],
+    "generatedAndExcludedLinesContribution": 0,
+    "deferredTerminalV1Contribution": {
+      "low": 0,
+      "high": 0
+    },
+    "requiresScopeDesignReview": true
+  },
+  "changedPaths": [
+    ".codex-handoff/estimate-semantics-h6.json",
+    "docs/research/hosted-web/phase-0/estimate-reconciliation/README.md",
+    "docs/research/hosted-web/phase-0/estimate-reconciliation/estimate-ledger.json",
+    "docs/research/hosted-web/phase-0/estimate-reconciliation/estimate-ledger.schema.json",
+    "docs/research/hosted-web/phase-0/estimate-reconciliation/verify-ledger.mjs"
+  ],
+  "artifactHashes": {
+    "docs/research/hosted-web/phase-0/estimate-reconciliation/README.md": "119ce9f76e6c10bcff7d6ceab0eba3dbc0b5bca4f574b7987657dc7ffb8b7b0e",
+    "docs/research/hosted-web/phase-0/estimate-reconciliation/estimate-ledger.json": "4a499adb3dceab512f9011aef355ded611045b25b72fc0e0c2142a54bb6563f5",
+    "docs/research/hosted-web/phase-0/estimate-reconciliation/estimate-ledger.schema.json": "06e5b5658cac598f793b0da736c3e287ba3e631d9e579932fa7929f77b4a1543",
+    "docs/research/hosted-web/phase-0/estimate-reconciliation/verify-ledger.mjs": "1320a3e53b99cce5e634662d3c6902b682a26a33ab34f1071deadbcb4bb7f9ac"
+  },
+  "checks": [
+    {
+      "id": "ledger-verifier",
+      "command": "node docs/research/hosted-web/phase-0/estimate-reconciliation/verify-ledger.mjs",
+      "result": "PASS",
+      "evidence": "Verified 9 buckets, 34 bucket allocations, 11 W3/W4/W5 allocations, 23 classified hashes, 38,300-62,100 arithmetic, confidence, terminal deferral, current-candidate authority, and partial interval semantics."
+    },
+    {
+      "id": "schema-validation",
+      "command": "python3 -m jsonschema -i docs/research/hosted-web/phase-0/estimate-reconciliation/estimate-ledger.json docs/research/hosted-web/phase-0/estimate-reconciliation/estimate-ledger.schema.json",
+      "result": "PASS",
+      "evidence": "The ledger validates against the strict Draft 2020-12 schema."
+    },
+    {
+      "id": "format",
+      "command": "pnpm exec prettier --check docs/research/hosted-web/phase-0/estimate-reconciliation/README.md docs/research/hosted-web/phase-0/estimate-reconciliation/estimate-ledger.json docs/research/hosted-web/phase-0/estimate-reconciliation/estimate-ledger.schema.json docs/research/hosted-web/phase-0/estimate-reconciliation/verify-ledger.mjs .codex-handoff/estimate-semantics-h6.json",
+      "result": "PASS",
+      "evidence": "All five changed paths use Prettier code style."
+    },
+    {
+      "id": "git-diff-check",
+      "command": "git diff --check",
+      "result": "PASS",
+      "evidence": "No whitespace errors were reported."
+    },
+    {
+      "id": "targeted-fast-lint",
+      "command": "pnpm lint:fast:files -- docs/research/hosted-web/phase-0/estimate-reconciliation/verify-ledger.mjs",
+      "result": "PASS",
+      "evidence": "The modified verifier passes the repository fast ESLint configuration."
+    }
+  ],
+  "mandatoryInputNotes": [
+    "docs/hosted-web-phases/phase-00/README.md does not exist at exact base 1587615c751c3cb12b5078ab4b7264b6e9fd42ad; its absence was confirmed in the worktree and with git show.",
+    "No substitute phase packet was inferred. Canonical authority was reconciled directly from START_HERE.md and EVIDENCE_LIFECYCLE.md."
+  ],
+  "remainingUncertainty": [
+    "W4 executable allocations remain controller estimates over characterized scope.",
+    "The W3/W5 shared storage and transaction fixture bound remains a controller estimate.",
+    "Migration and rollout lines remain identified but not numerically separable from production and release-E2E mixed scope.",
+    "Identity/workspace and release-E2E retain explicit unallocated mixed scope.",
+    "The separately estimated hosted terminal slice remains deferred post-v1 at 6,500-11,500 lines and contributes zero to non-terminal v1."
+  ],
+  "commit": {
+    "created": false,
+    "reason": "The linked-worktree worker policy reserves add, commit, and push for Project Integration."
+  }
+}

.codex-handoff/final-gate-candidate-reconcile-h4.json

@@ -0,0 +1,106 @@
+{
+  "schemaVersion": 1,
+  "phaseId": "phase-00",
+  "taskId": "agent-teams-hosted-web-refactor-final-gate-candidate-reconcile-h4",
+  "workKey": "phase0/final-gate/3bc0dfa7/6be51a/candidate-reconcile/r3",
+  "supersedes": "agent-teams-hosted-web-refactor-final-gate-remediation-h3",
+  "baseSha": "3bc0dfa7c00261785c0c752270cb302a9294e751",
+  "status": "passed",
+  "result": {
+    "diagnosticBaselineClassification": "inherited_source_observed",
+    "diagnosticBaselineCount": 7,
+    "diagnosticDistribution": {
+      "test/architecture/hosted-web/phase-0/auth-artifacts/auth-artifacts-spike.test.ts": 5,
+      "test/architecture/hosted-web/phase-0/host-primitives/evidence-scanner.test.ts": 1,
+      "test/architecture/hosted-web/phase-0/provider-runtime/scan-runtime-surfaces.test.ts": 1
+    },
+    "targetedGatePassed": true,
+    "workspaceMilestonePassed": true,
+    "workspaceTypecheckMilestoneInvocationCount": 1,
+    "workspaceTypecheckMilestoneRetryCount": 0,
+    "workspaceStagesExecuted": ["root", "mcp-source", "mcp-tests"],
+    "newDiagnostics": 0,
+    "effectiveDiagnostics": 0
+  },
+  "milestoneEvidence": {
+    "command": "PHASE0_TYPECHECK_TIMEOUT_MS=300000 bash scripts/hosted-web/phase-0/final-gate/run-normalized-typecheck.sh milestone",
+    "attemptCount": 1,
+    "durationMs": 218250,
+    "wallSeconds": 219,
+    "timeoutMsPerStage": 300000,
+    "normalizedReportSha256": "53769bbc62166f27840a74b5495ea14d20fad588dcd456638b952530ad1a97d5",
+    "normalizedReportPath": "docs/research/hosted-web/phase-0/final-gate/milestone-typecheck-report.json",
+    "stages": [
+      {
+        "id": "root",
+        "durationMs": 207899,
+        "rawExitCode": 2,
+        "processDisposition": "exited",
+        "signal": null,
+        "compilerOutputBytes": 1815,
+        "compilerOutputSha256": "46821e45d10298369490fd11ddc4046f16e38a15b0cf4e1c0532e36de26c43aa",
+        "rawCapturePath": "docs/research/hosted-web/phase-0/final-gate/milestone-typecheck.raw.txt"
+      },
+      {
+        "id": "mcp-source",
+        "durationMs": 4362,
+        "rawExitCode": 0,
+        "processDisposition": "exited",
+        "signal": null,
+        "compilerOutputBytes": 0,
+        "compilerOutputSha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "rawCapturePath": "docs/research/hosted-web/phase-0/final-gate/milestone-typecheck-mcp-source.raw.txt"
+      },
+      {
+        "id": "mcp-tests",
+        "durationMs": 5989,
+        "rawExitCode": 0,
+        "processDisposition": "exited",
+        "signal": null,
+        "compilerOutputBytes": 0,
+        "compilerOutputSha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "rawCapturePath": "docs/research/hosted-web/phase-0/final-gate/milestone-typecheck-mcp-tests.raw.txt"
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "candidate-source-reconciliation",
+      "status": "passed",
+      "result": "fresh candidate reproduction preserved the exact seven-diagnostic normalization"
+    },
+    {
+      "id": "production-runner-dispositions",
+      "status": "passed",
+      "result": "shell-level timeout, signal, and runner-error fixtures all failed closed"
+    },
+    {
+      "id": "workspace-normalized-typecheck",
+      "status": "passed",
+      "result": "the single authorized milestone completed root and both MCP stages with precise exited dispositions"
+    },
+    {
+      "id": "lint-format-shell-json-scope-secret-path-patch",
+      "status": "passed",
+      "result": "all final hygiene and ownership checks passed"
+    }
+  ],
+  "normalizationSafety": {
+    "exactFields": ["file", "line", "column", "code", "complete message"],
+    "repositoryRootCanonicalized": true,
+    "knownDiagnosticConsumedAtMostOnce": true,
+    "removedKnownDiagnosticAcceptedAndReported": true,
+    "newMovedChangedOrDuplicatedDiagnosticFails": true,
+    "compilerCrashSignalTimeoutRunnerErrorUnparsedOutputOrUnsupportedExitFails": true,
+    "abnormalTerminationDispositions": ["timeout", "signal", "runner-error"]
+  },
+  "scopeAttestation": {
+    "phase1Implementation": false,
+    "onlyAuthorizedPathsUsed": true,
+    "realUserProjectsUsed": false,
+    "hostSpecificPathsCommitted": false
+  },
+  "requestedCommitMessage": "fix(hosted-web): regenerate final gate for candidate",
+  "integrationAction": "project controller must apply and commit this worktree diff",
+  "blockers": []
+}