@groeponline/pi-wishcraft 1.6.0 → 1.9.0

package/AGENTS.md

@@ -1,102 +1,320 @@
-# AGENTS.md
-
-Guidance for AI agents (and humans) working on this repository.
-
-## What this project is
-
-pi-wishcraft is a powerline-style status bar and wishcraft interaction layer for the `pi`
-coding agent: status segments, welcome overlay/header, working "vibes" loading
-messages, a queue + idea inbox, bash mode, prompt/stash history, and full
-user customization.
-
-## Repository layout
-
-- `index.ts` — package entry: the public barrel. It re-exports the default
-  activation function and the documented public API (`resolveShortcutConfig`,
-  `parseBashModeSettings`, `PowerlineShortcuts`). Keep it a barrel; no
-  implementation lives here.
-- `src/` — the proxy-free extension runtime, organized by domain:
-  - `src/extension/` — the extension runtime, organized into domain subfolders:
-    `core/` (constants, types, `state.ts` hub, segment-context), `commands/`
-    (slash commands, queue commands, bash-mode actions, vibe command),
-    `session/` (activation, session lifecycle, git invalidation, stale-context),
-    `ui/` (custom editor, layout, menu views, powerline widgets, status-line
-    renderers), `history/` (prompt + stash history), `queue/` (queue context +
-    integration), `settings/` (settings IO), `shortcuts/` (shortcut config +
-    router), `welcome/` (welcome control + integration), `skills/` (inline
-    invocation). Leaf modules keep the dependency graph acyclic: shared types
-    and constants live in `core/`, queue/welcome callbacks are wired through
-    leaves or `RuntimeState`, and `core/state.ts` is the hub that only has
-    inbound edges. Verify with `npx madge --circular src index.ts bash-mode
-    queue`.
-  - `src/config/` — powerline config parsing, presets, types, segment ids/options.
-  - `src/segments/` — segment registry and the segment renderers.
-  - `src/theme/` — colors, icons, separators, theme loading.
-  - `src/usage/` — token stats, context usage, currency rates.
-  - `src/welcome/` — welcome header/overlay rendering and discovery.
-  - `src/working-vibes/` — vibe theme storage, generation, manager.
-  - `src/git/`, `src/shell/`, `src/editor/`, `src/render/`, `src/paths/`,
-    `src/shortcuts/`, `src/lifecycle/` — small single-purpose domains.
-- `bash-mode/` — managed shell session, transcript store, completion engine.
-- `queue/` — file-backed queue/inbox store and types.
-- `tests/` — flat `node:test` suite (`tests/*.test.ts`); structural tests read
-  the module under test from `src/`, never from `index.ts` source text.
-- `scripts/release.mjs` — zero-dep release helper (bump, CHANGELOG, tag).
-
-## Rules
-
-- **No root-level monofiles.** Implementation lives under `src/` organized by
-  domain; `index.ts` is only a barrel. Import implementation via
-  `src/**` paths (or `bash-mode/`, `queue/`).
-- **Module size:** when a file exceeds ~450 lines, split it along domain
-  boundaries (e.g. command handlers out of `commands.ts`, git invalidation
-  out of `session-lifecycle.ts`). Prefer many cohesive small modules.
-- **No circular imports.** Domain modules must not import back into
-  `src/extension/core/state.ts` for callbacks; move the callback into a leaf module
-  (e.g. `welcome-control.ts`) or wire it through `RuntimeState`.
-- **Bun/Node-native TS:** `import` paths carry `.ts` extensions
-  (`allowImportingTsExtensions`), `node:`-prefixed builtins, `node --test`
-  with type stripping. No build step.
-- **English UI:** operator overlays, notify strings, and `/wishcraft` copy are
-  English. Do not add Dutch UI strings.
-- **Tests:** behavior changes in `src/` need a focused regression test near
-  the existing tests for that subsystem; structural tests assert on module
-  files in `src/` (never `index.ts`).
-
-## Commands
+# Repository Guidelines
+
+## Project Overview
+
+`pi-wishcraft` is an operator cockpit extension for the **Pi** coding agent (`@earendil-works/pi-coding-agent`). It provides a powerline-style status bar, welcome overlay/header, working "vibes" loading messages, a file-backed idea queue, sticky Bash mode with PTY sessions, inline skill invocation, command-level hooks/policy controls, and a fullscreen Skill Studio. The package ships as a Pi extension rooted at `./index.ts` and is published to npm as `@groeponline/pi-wishcraft`.
+
+## Architecture & Data Flow
+
+### Bootstrap & Runtime Hub
+
+The extension bootstraps from `index.ts`, which re-exports `powerlineFooter` from `src/extension/session/activate.ts`. Activation reads Pi settings, parses powerline config, creates a mutable `RuntimeState` (via `createRuntimeState` in `src/extension/core/state.ts`), and registers Pi lifecycle hooks, commands, segments, presets, shortcuts, skills, and bash-mode sessions.
+
+`src/extension/core/state.ts` is the **central mutable hub** — it holds `config`, schedulers, and derived caches. All runtime mutations flow through `RuntimeState` and callback hooks (`requestStatusRender`, `requestImmediateStatusRender`, `resetLayoutCache`, `dispatchSignalEvent`). Leaf modules consume and extend this hub but never import sibling leaves directly.
+
+### Rendering Pipeline
+
+The render pipeline is a pure, acyclic chain:
+
+1. **SegmentContext** is built read-only by `src/extension/core/segment-context.ts` from `RuntimeState`, config, theme, git state, and usage data.
+2. **Segment renderers** are dispatched through `src/segments/registry.ts` — a fault-isolated `renderSegment` that maps segment IDs to pure render functions.
+3. **Status line composition** happens in `src/render/v2-entry.ts`, which orders segments, inserts the motion rail from `src/render/motion-rail.ts`, then delegates painting to `src/render/paint.ts` and `src/render/v2-adapter.ts`.
+
+### Motion & Signal
+
+The motion engine (`src/motion/*`) defines a catalog of animations (`src/motion/catalog.ts`), a centralized scheduler (`src/motion/scheduler.ts`), and an accessibility policy (`src/motion/policy.ts`). The Signal controller (`src/signal/controller.ts`) leases one motion consumer per runtime event and manages the lifecycle of rendered signals on the status-line rail.
+
+### Leaf Domains
+
+Each domain operates through `RuntimeState` callbacks:
+
+- **bash-mode/** — PTY-managed shell sessions, transcripts, ghost suggestions, completion engine
+- **queue/** — file-backed JSONL queue/inbox store with aliases and retention
+- **working-vibes/** — themed loading message generation and persistence
+- **welcome/** — fullscreen TUI overlay with branded layout and countdown
+- **usage/** — token/cost/context ledger, TPS ring, daily budget
+- **theme/** — color resolution, icons, separators, token mapping
+- **studio/** — Skill Studio UI component, Deck renderer, advice engine
+- **skills/** — skill registry, manager, inline invocation, doctor, status
+- **hooks/** — session/context/tool hooks, policy engine, repairs
+- **settings/** — settings IO, config commands, appearance write-back
+
+### Acyclic Dependency Rule
+
+Domain modules must not import back into the hub for callbacks. Shared types and constants live in `src/extension/core/`. Verify no circular imports:
+
+```bash
+npm run circular
+# → madge --circular src index.ts bash-mode queue
+```
+
+## Key Directories
+
+| Directory | Purpose |
+|---|---|
+| `src/` | Extension runtime, organized by domain (core, config, segments, render, signal, motion, theme, welcome, working-vibes, usage, studio, skills, hooks, settings, shortcuts, history, queue, contrib) |
+| `src/extension/` | Pi extension runtime: `core/` (hub, types, constants), `session/` (activation, lifecycle), `ui/` (deck, layout), `commands/`, `shortcuts/`, `queue/`, `welcome/`, `skills/`, `hooks/`, `settings/`, `history/`, `contrib/` |
+| `src/config/` | Powerline config parsing, presets, settings registry, tokens |
+| `src/segments/` | Segment registry and builtin renderers (core, system, usage, custom) |
+| `src/theme/` | Colors, icons, separators, token mapping |
+| `src/render/` | Paint primitives, v2 adapter, layout, motion-rail |
+| `src/motion/` | Motion catalog, scheduler, policy, types, gallery, composer |
+| `src/signal/` | Signal controller and event dispatching |
+| `src/welcome/` | Welcome overlay, renderer, art, layout |
+| `src/studio/` | Studio UI component, deck, advice engine |
+| `bash-mode/` | Standalone PTY shell session management (editor, transcript, completion, forward mode) |
+| `queue/` | Standalone file-backed queue store and types |
+| `tests/` | Flat `node:test` suite (`tests/*.test.ts`), helpers in `tests/helpers/`, fixtures in `tests/fixtures/` |
+| `docs/` | Operator guides (configuration, commands, bash-mode, segments, skills, etc.) |
+| `docs/design/` | vNext design specs (not operator how-to docs) |
+| `.compound-engineering/` | CE overlay: tracked `config.yaml`, artifacts, plans |
+
+## Development Commands
 
 ```bash
+# Install dependencies
 npm ci
-npm run typecheck      # tsc --noEmit (strict)
-npm test               # node --experimental-strip-types --test tests/**/*.test.ts
+
+# Type check (strict, no emit)
+npm run typecheck
+
+# Run all tests
+npm test
+
+# Check for circular imports
+npm run circular
+
+# Full package contract verification (for publish preparation)
+npm run verify:package
+
+# Local preview server (Deck/Signal/motion surfaces)
+npm run preview
+
+# Dockerized parallel testing (typecheck + test + circular)
+scripts/docker-test.sh [-n N]
+
+# Cloud agent bootstrap (Node 24, pi CLI install)
+scripts/cloud-agent-install.sh
+scripts/cloud-agent-start.sh
+```
+
+### Release Flow
+
+Releases are CI-driven via GitHub Actions:
+
+```bash
+# Locally: bump version, rewrite CHANGELOG, tag, optional push
+node scripts/release.mjs          # or: npm run release
+
+# Publish to npm (CI handles auth)
+scripts/npm-publish.sh
+
+# Create GitHub Release
+scripts/github-release.sh
+```
+
+CI workflows (`.github/workflows/`):
+- `test.yml` — Node 24, typecheck, test, circular, verify:package, npm audit
+- `release.yml` — reuses test.yml, prepares release-candidate branch
+- `promote-release-candidate.yml` — promotes verified SHA to main, tags, dispatches publish
+
+Release behavior:
+- **Every main merge with `[Unreleased]` CHANGELOG notes cuts a release automatically** (verify → candidate → promote → tag → npm). Notes-less merges skip candidate creation entirely — no more empty versions.
+- Notes live under `## [Unreleased]` in CHANGELOG.md; the release commit rolls them into the new version heading.
+- `[skip release]` skips the release when it appears in the **commit subject** — squash-merge builds that subject from the commit subject lines, so a `[skip release]` in a PR title is NOT preserved. Careful: the guard substring-matches the whole commit message, so don't write the literal tag in prose either.
+- Manual escape hatch: `node scripts/release.mjs <version> --force` cuts a release with empty notes (deliberate, local only).
+
+## Code Conventions & Common Patterns
+
+### Module Structure
+
+- **No root-level monofiles**: implementation lives under `src/` by domain; `index.ts` is a barrel only
+- **Module size**: split files exceeding ~450 lines along domain boundaries
+- **TypeScript**: `.ts` extensions on all imports (`allowImportingTsExtensions`), `node:`-prefixed builtins, strict mode, no build step
+- **Entry point**: `index.ts` re-exports `powerlineFooter` and shortcut helpers — keep it a barrel, no implementation
+
+### Import Paths & Dependency Direction
+
+```typescript
+// Correct: import via domain paths
+import { SEGMENTS } from "src/segments/registry.ts";
+import { createRuntimeState } from "src/extension/core/state.ts";
+
+// Incorrect: avoid importing implementation from index.ts barrel
+import { powerlineFooter } from "./index.ts"; // tests must not do this
+```
+
+- Tests import from `src/<domain>/*` module files directly, **never** from `index.ts`
+- Domain modules must not import back into the hub for callbacks — use `RuntimeState` + callback hooks
+
+### State Management
+
+`RuntimeState` (from `src/extension/core/state.ts`) is the singleton mutable hub. It owns:
+- `config` — parsed powerline configuration
+- Motion/signal/render schedulers
+- Derived caches (segment context, layout)
+
+Leaf consumers receive `RuntimeState` plus callback hooks rather than importing sibling leaves directly.
+
+### Callback Wiring Pattern
+
+```typescript
+// Leaf modules receive hooks, do not import siblings
+function createRuntimeState(hooks: {
+  requestStatusRender: () => void;
+  requestImmediateStatusRender: () => void;
+  resetLayoutCache: () => void;
+}): RuntimeState
+```
+
+### Error Handling
+
+- Segment rendering is fault-isolated — a failing segment does not crash the status line
+- Policy engine evaluates pre/post tool hooks with deny/inject results
+- Hooks runner uses stdin JSON + timeout + process-group kill
+
+### Naming Conventions
+
+- Domain barrels: `src/<domain>/index.ts`
+- Segment files: `src/segments/{core,system,usage,custom}.ts`
+- Motion modules: `src/motion/{catalog,scheduler,policy,types}.ts`
+- Test files: `tests/<subsystem>.test.ts` (flat suite, descriptive names)
+
+## Important Files
+
+### Entry Points
+- `index.ts` — package barrel (re-exports `powerlineFooter`, `resolveShortcutConfig`, `parseBashModeSettings`, `PowerlineShortcuts`)
+- `src/extension/session/activate.ts` — activation bootstrap
+- `src/extension/core/state.ts` — `RuntimeState` hub, `createRuntimeState`
+- `src/extension/core/types.ts` — `RuntimeState` type definitions
+
+### Configuration
+- `src/config/parse.ts` — `parsePowerlineConfig`, `PowerlineConfig` interface
+- `src/config/settings-registry.ts` — operator settings definitions, defaults, validation
+- `src/config/structural-presets.ts` — structural preset definitions
+- `src/config/tokens.ts` — semantic token mapping
+
+### Rendering
+- `src/render/v2-entry.ts` — `renderStatusLineV2` (composed render entry)
+- `src/render/v2-adapter.ts` — layout adaptation for painting
+- `src/render/paint.ts` — painting primitives
+- `src/render/motion-rail.ts` — motion rail surface rendering
+
+### Segments
+- `src/segments/registry.ts` — `SEGMENTS` registry, `renderSegment` dispatcher
+- `src/segments/core.ts` — model, shell_mode, path, git, time, session, hostname
+- `src/segments/system.ts` — thinking, subagents, queue, extension_statuses, open ports/TPS
+- `src/segments/usage.ts` — token_in/out/total, cost, context_pct, cache_read/write
+- `src/segments/custom.ts` — custom registered/static segments
+
+### Signal & Motion
+- `src/signal/controller.ts` — `SignalRuntime` lifecycle
+- `src/signal/integration.ts` — event dispatcher
+- `src/motion/catalog.ts` — motion definitions, channel matrix
+- `src/motion/scheduler.ts` — shared `MotionScheduler`
+- `src/motion/policy.ts` — accessibility/policy filter
+
+### Bash Mode
+- `bash-mode/pty-session.ts` — PTY session abstraction
+- `bash-mode/session-factory.ts` — shell session creation
+- `bash-mode/transcript.ts` — `BashTranscriptStore`
+- `bash-mode/completion.ts` — completion engine
+
+### Queue
+- `queue/store.ts` — `PowerlineQueueStore` (filesystem-backed JSONL)
+- `queue/types.ts` — queue item/target/status types
+
+### Studio & Skills
+- `src/studio/component.ts` — fullscreen Skill Studio component
+- `src/studio/deck/render.ts` — Deck renderer
+- `src/studio/advise/engine.ts` — advice pane engine
+- `src/extension/skills/skill-registry.ts` — skill catalog
+- `src/extension/skills/skill-manager.ts` — skill management commands
+
+### Release & Verification
+- `scripts/release.mjs` — version bump, CHANGELOG rewrite, tag
+- `scripts/verify-package.mjs` — package contract checks (name, description, keywords, pi manifest, resources, peers)
+- `scripts/verify-pi-package-contract.mjs` — Pi package contract validation
+- `scripts/npm-publish.sh` — idempotent npm publish with marker-tag promotion
+- `scripts/github-release.sh` — GitHub Release creation
+- `scripts/gen-lantern.mjs` — generates lantern art pixel-grid module
+
+## Runtime/Tooling Preferences
+
+| Requirement | Detail |
+|---|---|
+| **Node** | v22.14 system default; Node 24 via nvm for CI and pi CLI (pi requires ≥22.19) |
+| **Package manager** | npm (lockfile v3) |
+| **TypeScript** | 5.9.3, strict mode, `NodeNext` module/resolution, `allowImportingTsExtensions`, no build step |
+| **Test runner** | Node built-in `node:test` with `--experimental-strip-types` type stripping |
+| **Circular import check** | `madge --circular src index.ts bash-mode queue` (via `npm run circular`) |
+| **Import style** | `.ts` extensions on all imports, `node:`-prefixed builtins |
+| **Pi CLI** | Installed at `^0.84.0`; wrapped to run under Node 24 via nvm |
+| **Docker** | `fuse-overlayfs` storage driver for nested VM testing |
+| **Compound Engineering** | `.compound-engineering/` overlay; portable skills via `~/.agents/skills/ce-*`; native Cursor plugin disabled |
+
+## Testing & QA
+
+### Test Framework
+
+- **Runner**: Node's built-in `node:test` (flat per-file suites)
+- **Assertions**: `node:assert/strict`
+- **Type stripping**: `--experimental-strip-types` (no `tsc` compilation in tests)
+- **Invocation**: `npm test` runs `node --experimental-strip-types --test tests/**/*.test.ts`
+
+### Test Organization
+
+Tests are flat in `tests/` with supporting helpers and fixtures:
+
+- `tests/helpers/strip-ansi.ts` — shared ANSI stripping utility
+- `tests/fixtures/skill-template-golden.ts` — golden fixture for skill templates
+
+### Test Types
+
+| Type | Convention | Examples |
+|---|---|---|
+| **Structural tests** | Assert on module contracts: layout rules, config precedence, catalog/scheduler invariants, registry behavior | `effective-config.test.ts`, `render-v2.test.ts`, `tokens.test.ts`, `hooks.test.ts` |
+| **Behavior tests** | Assert runtime output: rendered strings, command execution, state changes, temp FS flows | `signal.test.ts`, `system-segments.test.ts`, `queue-store.test.ts`, `deck.test.ts` |
+| **Golden tests** | Pin exact rendered output or template text | `signal-golden.test.ts`, `skill-templates.test.ts` |
+
+### Import Conventions
+
+Tests import from `src/<domain>/*` module files directly — **never** from `index.ts`. For example:
+
+```typescript
+// Correct
+import { SEGMENTS } from "src/segments/registry.ts";
+
+// Incorrect — do not import from index.ts
+import { powerlineFooter } from "./index.ts";
+```
+
+### CI Verification Gates
+
+The `.github/workflows/test.yml` workflow enforces the full verification chain:
+
+```bash
+npm run typecheck     # tsc --noEmit
+npm test              # node --test
+npm run circular      # madge --circular
+npm run verify:package # verify-package.mjs + verify-pi-package-contract.mjs
+npm audit             # security audit
+```
+
+### Release Verification
+
+Before any publish, `prepublishOnly` runs the full chain:
+
+```bash
+tsc --noEmit && verify-package.mjs && verify-pi-package-contract.mjs
+```
+
+### Dockerized Parallel Testing
+
+For isolated, parallel CI runs:
+
+```bash
+scripts/docker-test.sh -n 4   # 4 parallel containers
 ```
 
-Run both before proposing any non-trivial change.
-
-Compound Engineering overlay: `.compound-engineering/` (tracked `config.yaml`, gitignored `config.local.yaml`). Artifact root `.compound-engineering/artifacts/`. Portable skills `~/.agents/skills/ce-*`; native Cursor plugin is fallback only when this overlay is absent.
-
-## Cursor Cloud specific instructions
-
-The Cloud Agent environment is provisioned so the extension can be tested both as
-a library and inside real `pi`, with Docker for containerized/parallel runs.
-
-- **Node:** the platform `node` on `PATH` is v22.14 (fine for `npm ci`,
-  `typecheck`, and the test suite, which use `--experimental-strip-types`).
-  Node 24 is available via `nvm` and is what CI uses.
-- **pi CLI:** installed and pinned to the wishcraft peer range
-  (`@earendil-works/pi-coding-agent` `>=0.81.0 <0.85.0`). pi requires Node
-  `>=22.19`, so the `pi` launcher is wrapped to run under the `nvm` Node 24.
-  `~/.pi/agent/settings.json` loads this checkout (`packages: ["/workspace"]`,
-  `preset: chef`) so `pi` renders the wishcraft welcome/powerline on startup.
-  Running a model needs a provider key (`/login`); the extension loads without
-  one.
-- **Docker:** `dockerd` runs with the `fuse-overlayfs` storage driver (required
-  in the nested VM). `scripts/cloud-agent-start.sh` starts it per boot;
-  `scripts/cloud-agent-install.sh` is the idempotent bootstrap (`npm ci` plus
-  self-healing pi setup).
-- **Containerized / parallel testing:** `scripts/docker-test.sh [-n N]` runs the
-  full check suite (`typecheck` + `test` + `circular`) in `node:24` containers,
-  each with an isolated copy of the tree, so `N` runs are safe in parallel.
-- **Publishing / pi.dev:** merges to `main` auto-publish to npm via the org
-  `NPM_TOKEN` (`.github/workflows/release.yml`), and pi.dev mirrors npm. Gate
-  the catalog contract with `npm run verify:package`.
+Each container runs `typecheck + test + circular` with a shared read-only `node_modules` bind mount.

package/CHANGELOG.md

@@ -2,13 +2,110 @@
 
 ## [Unreleased]
 
-## [1.6.0] - 2026-08-28
+## [1.9.0] - 2026-09-12
+
+### Added
+- Per-package preview container (`preview/Dockerfile` + `preview/smoke.sh` + `preview.yml` workflow): builds the npm artifact and smoke-tests the exact files pi loads; images push to GHCR on main.
+
+## [1.8.0] - 2026-09-12
+
+### Fixed
+- Deck dashboard focus model: the focused pane is now marked with ◉/○ so ↓ on the skills workbench no longer looks like it "goes right" — ↑↓ moves the focused pane, ←/tab focuses NAVIGATION, → returns to the list, and the footer advertises both. List cursors clamp from the current position, so a stale cursor after filtering/refresh moves one row instead of sticking.
+
+## [1.4.17] - 2026-09-07
+
+### Added
+- Bash forward-mode privacy notice (issue #71): the first keystroke forwarded to a running command raises an info notice that typed input may echo into the transcript; documented in `docs/bash-mode.md`.
+- Managed PTY suite is now script-gated (issue #73): PTY-core tests skip when `script(1)` is missing instead of silently passing in degraded pipe mode, the basic run asserts a real PTY transport, and the explicit pipe-mode tests still cover the fallback.
+
+### Changed
+- Signal rail is now a compact single-line state surface. `ready` is stable and costs no animation frames; thinking, streaming, tools, and compaction use a bounded directional trail without expanding the footer to three rows.
+- Chef preset now includes session age, generated-token throughput, and cache-read information when present. The port counter names its protocol (`tcp` or `tcp+udp`) instead of displaying an ambiguous bare count.
+
+### Fixed
+- Bash paste-while-running (issue #72): a bracketed paste performed while a command runs is stripped of its markers and forwarded to the child stdin — including split delivery across input chunks — instead of silently queuing in the editor buffer behind the command.
+- PTY/transcript memory bounds (from jan `fix/runtime-pty-bounds`): a single unterminated output line is capped at a 64 KiB UTF-8 tail with a one-time notice, the partial-escape tail is bounded, and the active transcript command trims head lines/bytes within limits instead of growing unbounded.
+- Segment-options spread hygiene (CodeFactor #86–89): `normalizeSegmentOptions` assigns fields imperatively instead of spreading conditional empty objects.
+- Motion frames that contain multiple terminal columns no longer expand a rail cell and shift the footer layout while they animate.
+- Idle rail no longer samples `Date.now()` without a corresponding repaint clock, eliminating stale or apparently random idle frames.
+- TPS now reports `--` until a live two-sample rate exists, rather than falsely presenting idle telemetry as `0`; the existing `both`/`out`/`in` setting is validated and honored.
+
+## [1.4.16] - 2026-09-05
+
+### Fixed
+- Release pipeline no longer cuts empty releases: candidate preparation (and the local `release` script, behind `--force`) now requires actual `[Unreleased]` notes in the CHANGELOG before bumping, so notes-only and docs-only merges to main no longer publish versions with empty release sections.
+
+## [1.4.15] - 2026-09-05
+
+### Added
+- Codebase dependency graph (dot + mermaid + navigation guide) and four wishcraft agent skills (`wishcraft-codebase`, `wishcraft-ui-components`, `wishcraft-hot-path-rules`, `wishcraft-testing`) shipped as operator-facing SKILL.md docs.
+
+## [1.4.14] - 2026-09-05
+
+### Changed
+- Release-notes housekeeping only: this release's main-merge carried the backfilled CHANGELOG sections for 1.4.12 and 1.4.13 (below) and no other code changes; GitHub Release notes for v1.4.12–v1.4.14 updated to match.
+
+## [1.4.13] - 2026-09-05
+
+### Added
+- Skill Studio panes wired end-to-end (`/studio`): the fullscreen workbench now connects the registry-backed list, a detail pane (health, category override, usage count, frontmatter keys, model-invocation flag, and resolved local references with ✓/✗), actions (create from template, edit in-app with cache invalidation, doctor), and AI advice with explain/integrate/examples/improve modes — streamed through the advise engine with DeepWiki wiki context and insert-into-editor. The fail-closed placeholder gate is lifted; the entrypoint keeps its guards (closed without UI, warning + closed in RPC mode).
+- DeepWiki disk cache gains bounded LRU eviction (`maxEntries`, default 64) on top of the existing TTL + stale-fallback behavior.
+- Tests: studio pane render, key routing + refresh, entrypoint guards, and LRU eviction covered; 723 passing.
+
+## [1.4.12] - 2026-09-05
+
+### Added
+- Skill Studio: browse the ChefGroep global skill registry alongside local skills (`loadSkillStudioCatalog`): registry-only skills surface with routing metadata and a "registry source not readable" warning when the file is unavailable on this host.
+- Motion rail: impressive adaptive rail with motion-driven routing (#83).
+
+### Changed
+- AGENTS.md rewritten to the current architecture (#80).
+- Compound Engineering overlay example clarified: explainer archival and sweep state paths now reference `<docs_root>` (#68); devDependency `@earendil-works/pi-coding-agent` bumped to 0.84.3.
+
+### Removed
+- Dead agent-tools (patch, ripgrep) with no runtime consumers (#81).
+
+### Fixed
+- Rail/render fixes shipped with the studio registry work (#79).
+- Tests: `session_compact_failed` regression coverage — clearing compacting state, settling the signal, and blocking post-compact queue items with the error (#68).
+
+## [1.4.11] - 2026-08-30
+
+## [1.4.10] - 2026-08-30
+
+## [1.4.9] - 2026-08-29
+
+## [1.4.8] - 2026-08-29
+
+## [1.4.7] - 2026-08-28
+
+## [1.4.6] - 2026-08-28
+
+## [1.4.5] - 2026-08-28
+
+## [1.4.4] - 2026-08-28
+
+## [1.4.3] - 2026-08-28
 
 ### Added (v2 Platform — wishcraft-v2-platform plan)
 - Powerline v2: the status line now renders through a single path (`renderStatusLineV2` -> `computeLaneLayout` -> `paintLayout`) with the motion rail as a first-class layout segment (reading order left -> rail -> right preserved; under width pressure the right lane yields first, the rail later). The legacy v1 three-lane renderer (`src/signal/render.ts`) is deleted; rail semantics live in `src/render/motion-rail.ts`. Deliberate visible delta: the configured separator now joins every primary segment. Golden pinned post-cutover in `tests/signal-golden.test.ts` (pre-cutover baseline preserved in git history at 84b2e2a).
+- Multi-row layout: segments declare a visual row count (`LayoutSegment.height?` + auto-derive from embedded `\n`); `computeLaneLayout` returns `primaryRowCount`/`secondaryRowCount`; `paintLayout`/`paintSecondary` render one string per row with the separator on row 0 only.
+- Motion rail: lantern sigil as 3-row active rail for the streaming state — a portable `#`-block lantern (sway + breath) that replaces the braille version that rendered as shade-block blobs on terminals without braille fonts. ASCII fallback stays a directional comet; `ready` = calm flat `─` track; `compacting` = inward heads.
 - Bash v2: PTY session core (`bash-mode/pty-session.ts`, SGR-safe ANSI filter, sentinel-based command boundary) plus the long-lived `PtyManagedShellSession` cutover: `session-factory.ts` routes `auto`/`v2` through the PTY-backed session and the editor forwards printable input to the running command's stdin while it runs (interactive programs work; Ctrl-C stays an interrupt). When `script(1)` is missing, commands degrade per-run to plain pipes with a one-time warning. The legacy pipe-based `ManagedShellSession` is deleted.
 - Skill Studio modules: shell + state machine + `/studio` command, list/inspect/actions (create from template, overwrite confirm, doctor), DeepWiki client with 7-day disk cache (`src/studio/deepwiki/`), AI advice engine with pi-ai streaming and char-capped context (`src/studio/advise/`), and an advice pane that streams + inserts into the session. Operator exposure remains deferred and fail-closed until the Studio panes are connected.
-- Tests: 704 passing across new and existing suites; full `typecheck`, `madge --circular`, and `npm test` green.
+- Versioned autoresearch harness (`.auto/measure.sh`, `checks.sh`, `config.json`, `prompt.md`): one-run `METRIC` output for test/typecheck/circular plus signal-render and registry micro-benchmarks.
+- Tests: 706 passing across new and existing suites; full `typecheck`, `madge --circular`, and `npm test` green.
+
+### Fixed
+- `segmentHeight` counted trailing empty lines as extra rows, forcing an empty full-width row below a segment — the "big block under every line" render bug.
+- `paintLayout` row-1+ separator padding used `separator.length` (ANSI bytes) instead of `visibleWidth(separator)` — a dead column between lanes on multi-row content.
+- Multi-row rail color: `renderActivity` now wraps each sigil row with its own ANSI color+reset, so rows 1+ render in the lane accent instead of falling back to the terminal default.
+- `activityForEvent` and `defaultMotionFor` had no `default` case — unknown events leaked the literal text `undefined` into the powerline.
+- `MotionScheduler.subscribe` now calls `onDone` on an existing consumer with the same id before replacing it (a silent leak on re-subscribe).
+- `setSignalEvent` wraps `scheduler.subscribe` in try/catch so a throw leaves the runtime in a clean idle state instead of `active=true` with `release=null`.
+
+### Changed
+- Version numbering: the ladder had raced up to 1.7.x while the shipped feature depth was a handful of patches. This release restores the honest number (1.4.3) and `chooseBump` now defaults to `patch` for normal `feat:` commits — only an explicit breaking marker (`feat!:`, `BREAKING CHANGE`) auto-promotes (to `major`); `minor` is an explicit manual choice.
 
 ### Deferred
 - Editor live-tail and v1 session cleanup.
@@ -18,13 +115,6 @@
 - Studio operator exposure until its panes are connected.
 - Deck left-rail navigation bug (arrow-down skipping straight to the skills list).
 
-## [1.5.1] - 2026-08-27
-
-### Added
-- Versioned autoresearch harness (`.auto/measure.sh`, `checks.sh`, `config.json`, `prompt.md`): one-run `METRIC` output for test/typecheck/circular plus signal-render and registry micro-benchmarks. Future autoresearch sessions run against this contract.
-
-## [1.5.0] - 2026-08-27
-
 ## [1.4.1] - 2026-08-27
 
 ## [1.4.0] - 2026-08-27