@ikon85/agent-workflow-kit 0.37.0 → 0.39.0

package/.claude/skills/wrapup/SKILL.md

@@ -105,6 +105,52 @@ One call covers: push → PR create/reuse (+ drift markers merged into the body)
 
 STOP → diagnose in the main conversation, fix, re-run `land` (an already-merged PR resumes at teardown).
 
+Before merge, the committed worktree policy only nominates exact landing
+evidence. After merge, cleanup reloads `docs/agents/workflow-capabilities.json`
+from canonical `origin/main`; only the identical merged, attempt-bound scratch
+and generator policy authorizes each evidence path and deletion. A mismatch is
+a hard STOP that preserves every file—never bypass it with the unmerged branch
+profile.
+
+Landing provenance has one explicit relinquish route. If the STOP names an
+unfinished or drifted landing attempt and the ambiguous files cannot be restored
+to their frozen identities, run:
+
+```bash
+python3 scripts/wrapup-land.py land --branch "<branch>" --abandon-unfinished-attempt
+```
+
+This archives the started or frozen attempt receipt only. It deletes and claims
+no files, works even when the older creation baseline is missing, and returns
+before push, PR, or merge. The next `land` conservatively protects every current
+matching path; classify or move those blockers first. Do not use relinquish for
+an exact unchanged frozen attempt: a normal retry validates that evidence and
+resumes deterministically.
+
+An attempt journaled under the superseded v1 contract is **legacy, not
+corruption**. The STOP says so explicitly and names the same
+`--abandon-unfinished-attempt` archive route; archival stays valid for a v1 and
+a v2 receipt even without a creation baseline or a local main profile, and no
+generated or consumer file is deleted or claimed on that route.
+
+If canonical `origin/main` changed its scratch or generator policy *after* the
+attempt started, the PR can merge and cleanup then STOPs with `worktree cleanup
+policy differs from merged canonical origin/main`. That STOP stays fail-closed
+and names its one supported route out:
+
+```bash
+python3 scripts/wrapup-land.py land --branch "<branch>" --recover-canonical-cleanup
+```
+
+This resumes the teardown of an **already-merged** worktree only. It never reads
+the stale worktree candidate policy: it re-reads the merged canonical policy,
+requires the branch to already be an ancestor of canonical `origin/main`, and
+revalidates each frozen landing identity against that canonical policy before
+the ordinary shared assessment and removal run. Evidence the canonical policy no
+longer names, a changed identity, and any pre-existing or foreign file are hard
+STOPs that delete nothing. Re-running after a successful teardown is a no-op.
+The flag is mutually exclusive with `--abandon-unfinished-attempt`.
+
 ### 6 · Post-merge (agent)
 - **Sibling propagation:** for each `drift_markers` entry in the land report, append the note to the target issue's `vor_bau` section + re-stamp its `plan_revision`. Log-based markers → **write directly, then show what was written where** (mandatory report — visibility moved from a pre-gate into the report, decision 2026-07-06); fallback candidates the user hasn't confirmed yet → confirm first. Program context widens the target set to unbuilt wave-stubs/leaves and the Program-PRD itself — same append-only mechanism. **Exception:** appends to the Program-PRD or unbuilt wave-stubs do **not** re-stamp `plan_revision` — that stays reserved for structural wave-plan edits via the `to-waves` escalation path; a mere drift note must not stale-block published stubs.
 - **Anchor close:** report says `anchor_complete: true` → `gh issue close <anchor> -c "Wave complete — all slices merged via PR #<pr>."` and verify board status Done. The guard keeps anchors away from every auto-close — this verified close is the only close path; without it the anchor stays silently open after the last slice. **Then re-run the upward propagation**: the land-time `program-sync` ran BEFORE this close, so on a wave-completing slice the Wellenplan still shows 🔄 and the Phasen-Gate stays unchecked — after the board shows Done, run `python3 scripts/board-sync.py program-sync <program-prd#>` once more (the report's `program_sync.program` names it; skip when the report says the parent is not a program). Board auto-rules can lag the close (Close→Done race) — verify Done first, that's what the token reads.

package/README.md

@@ -425,6 +425,21 @@ Explicit fork with its own identity and update line instead.
 
 ## Upgrade notes
 
+### 0.38.0 — explicit landing-artifact policy
+
+Existing consumers must run `setup-workflow` once after `kit-update`, review
+the generated `wrapup.landingGeneratedArtifactPatterns` decision in
+`docs/agents/workflow-capabilities.json`, and commit that profile change.
+Until the explicit policy is committed, `wrapup-land` fails closed before
+landing instead of assuming that no generated artifact is eligible for
+session-owned cleanup.
+
+You do not have to remember this note. `kit-update` carries a versioned
+registry of required consumer migrations and names any outstanding one in its
+preview and in its terminal report — interactively, under `--yes`, as JSON via
+`update --json`, and in the automated update pull request. It reports the
+decision you still owe; it never writes a cleanup policy for you.
+
 ### 0.33.0 — capability-gated orchestration
 
 `kit-update` reconciles this release for you. These notes matter only if you
@@ -454,6 +469,64 @@ the old way. Decision record:
 
 ## Release notes
 
+### 0.39.0 — self-explaining guards, one glob dialect, a board you can create
+
+Nothing in this release requires a consumer action. `kit-update` reconciles it.
+
+- **`kit-update` tells you what you still owe.** A versioned registry of
+  required consumer migrations is evaluated against your repository and named in
+  the preview and in the terminal report — interactively, under `--yes`, as JSON
+  via `update --json`, and in the automated update pull request. It reports a
+  decision you owe; it never writes a cleanup policy for you.
+- **`setup-workflow` can create the GitHub-Projects board.** When your tracker
+  is GitHub and no board exists, setup now *offers* to provision one — Status
+  with its stage options plus the workflow fields — and writes the board profile
+  from a read-back of what was actually created. It asks first, and a decline
+  leaves the previous stub path byte-unchanged.
+- **One repository-relative glob dialect.** Worktree Lifecycle and Workflow
+  Advisories now match consumer profile globs through the same matcher, so an
+  advisory and a deletion decision can never disagree about which paths a
+  pattern selects. A review command classifies your installed patterns and
+  reports, with a concrete witness path, any whose match set narrows or widens.
+- **A merged worktree is never stranded.** A landing attempt that started before
+  canonical cleanup policy changed now has a supported recovery route, and a
+  landing journal written by the previous contract version is classified as
+  legacy rather than as corruption — with the exact safe command named in the
+  stop. Both routes revalidate frozen evidence against canonical policy and
+  delete strictly less than the ordinary path.
+- **Guards say what happened and where.** A drift-blocked handoff now names the
+  checkout it evaluated (and says so explicitly when your working directory is a
+  sibling worktree of the same repository), a census status reports *what*
+  drifted rather than only *that* something did, and a handoff anchored on an
+  issue link no longer adopts an issue from a foreign repository.
+
+### 0.38.0
+
+- added: `docs/adr/0007-session-teardown-requires-provenance-bound-ownership.md`
+- added: `scripts/worktree-lifecycle/session.py`
+- changed: `.agents/skills/orchestrate-wave/SKILL.md`
+- changed: `.agents/skills/setup-workflow/SKILL.md`
+- changed: `.agents/skills/setup-workflow/worktree-lifecycle.md`
+- changed: `.agents/skills/wrapup/SKILL.md`
+- changed: `.claude/skills/orchestrate-wave/SKILL.md`
+- changed: `.claude/skills/setup-workflow/SKILL.md`
+- changed: `.claude/skills/setup-workflow/worktree-lifecycle.md`
+- changed: `.claude/skills/wrapup/SKILL.md`
+- changed: `README.md`
+- changed: `agent-workflow-kit.package.json`
+- changed: `docs/agents/workflow-capabilities.json`
+- changed: `package.json`
+- changed: `scripts/test_orchestrate_wave_contract.py`
+- changed: `scripts/test_worktree_wrapup_contract.py`
+- changed: `scripts/worktree-lifecycle/README.md`
+- changed: `scripts/worktree-lifecycle/capabilities.json`
+- changed: `scripts/worktree-lifecycle/cleanup.py`
+- changed: `scripts/worktree-lifecycle/core.py`
+- changed: `scripts/worktree-lifecycle/profile.py`
+- changed: `scripts/worktree-lifecycle/setup.py`
+- changed: `scripts/wrapup-land.py`
+- changed: `src/lib/bundle.mjs`
+
 ### 0.37.0
 
 - added: `scripts/test_anchor_table.py`

package/agent-workflow-kit.package.json

@@ -1,5 +1,5 @@
 {
-  "kitVersion": "0.37.0",
+  "kitVersion": "0.39.0",
   "files": [
     {
       "path": ".agents/skills/ask-matt/SKILL.md",
@@ -377,7 +377,7 @@
       "ownerSkill": "kit-update",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "ea34bd16072783325c263b4afc4eefc39f0aabdbb53731b84500b46db69ef2c1",
+      "sha256": "15d265be0c2b3b73c32f786644d271fffb4b269cf8e3c624c61296fe838dda9e",
       "mode": 420,
       "origin": "kit"
     },
@@ -447,7 +447,7 @@
       "ownerSkill": "orchestrate-wave",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "b64529b6449a99a013a97be21826a3ced210ec03458dfd980d3a5e0c257e5238",
+      "sha256": "02862cd5e7e07a5f06dad89792fcebd0a6c17cf2216a27c7e0f724026fdda53a",
       "mode": 420,
       "origin": "kit"
     },
@@ -587,7 +587,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "928a771ecadd4b199169f20deb79647894fe3c0675973b0b97050cad0b675cc4",
+      "sha256": "c6855a479c030f93be30f6fb65b36b8ca317251f9627fd3f6f0f994d9a8b64fb",
       "mode": 420,
       "origin": "kit"
     },
@@ -687,7 +687,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "6021b95b7ef2f070b7968d3d5c87f72749b0418f22441f0c7b6e2a339c859664",
+      "sha256": "4ef2a06e17e08f0fc0c5cc09e4414af67a186a73ca7634e8c378aab5b5638274",
       "mode": 420,
       "origin": "kit"
     },
@@ -737,7 +737,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "81ce0f5573d5f062adbc87149172e74ab322315bf348025c0ff2c27f8d8ec67b",
+      "sha256": "6ff4ad3980f0802b3b041e051d86fb4df7a65884c7ded98ff878e2cd584d80f1",
       "mode": 420,
       "origin": "kit"
     },
@@ -757,7 +757,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "a124d7a9f96471ac93202c8fa78b76f98f8396a12a786b921ed704320eb63c4e",
+      "sha256": "bf68e0a80b212159f6838bc2bcd3e85714a70cceeff55ed019f87246175182e7",
       "mode": 420,
       "origin": "kit"
     },
@@ -997,7 +997,7 @@
       "ownerSkill": "wrapup",
       "surface": "codex",
       "installRole": "consumer",
-      "sha256": "7e50b98441747d370b1feefae6ee5e63b859d2243b64f72024534a71b1d64482",
+      "sha256": "de5d451d23b019498104bd8e0ebcbf3385f37aad822496bdb0c47d7021de8761",
       "mode": 420,
       "origin": "kit"
     },
@@ -1087,7 +1087,7 @@
       "path": ".claude/hooks/drift-guard.py",
       "kind": "hook",
       "installRole": "consumer",
-      "sha256": "a248eb3697522b8804fd7d68d1fe3e95613a71829464501c8c7fa4c09d229a64",
+      "sha256": "1480bd322d988a546ed589a2420796b38bbf0f52300598a1dd9aa9ddbeb3ea1d",
       "mode": 493,
       "origin": "kit"
     },
@@ -1699,7 +1699,7 @@
       "ownerSkill": "kit-update",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "ea34bd16072783325c263b4afc4eefc39f0aabdbb53731b84500b46db69ef2c1",
+      "sha256": "15d265be0c2b3b73c32f786644d271fffb4b269cf8e3c624c61296fe838dda9e",
       "mode": 420,
       "origin": "kit"
     },
@@ -1769,7 +1769,7 @@
       "ownerSkill": "orchestrate-wave",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "b64529b6449a99a013a97be21826a3ced210ec03458dfd980d3a5e0c257e5238",
+      "sha256": "02862cd5e7e07a5f06dad89792fcebd0a6c17cf2216a27c7e0f724026fdda53a",
       "mode": 420,
       "origin": "kit"
     },
@@ -1929,7 +1929,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "928a771ecadd4b199169f20deb79647894fe3c0675973b0b97050cad0b675cc4",
+      "sha256": "c6855a479c030f93be30f6fb65b36b8ca317251f9627fd3f6f0f994d9a8b64fb",
       "mode": 420,
       "origin": "kit"
     },
@@ -2029,7 +2029,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "6021b95b7ef2f070b7968d3d5c87f72749b0418f22441f0c7b6e2a339c859664",
+      "sha256": "4ef2a06e17e08f0fc0c5cc09e4414af67a186a73ca7634e8c378aab5b5638274",
       "mode": 420,
       "origin": "kit"
     },
@@ -2079,7 +2079,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "81ce0f5573d5f062adbc87149172e74ab322315bf348025c0ff2c27f8d8ec67b",
+      "sha256": "6ff4ad3980f0802b3b041e051d86fb4df7a65884c7ded98ff878e2cd584d80f1",
       "mode": 420,
       "origin": "kit"
     },
@@ -2099,7 +2099,7 @@
       "ownerSkill": "setup-workflow",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "a124d7a9f96471ac93202c8fa78b76f98f8396a12a786b921ed704320eb63c4e",
+      "sha256": "bf68e0a80b212159f6838bc2bcd3e85714a70cceeff55ed019f87246175182e7",
       "mode": 420,
       "origin": "kit"
     },
@@ -2347,7 +2347,7 @@
       "ownerSkill": "wrapup",
       "surface": "claude",
       "installRole": "consumer",
-      "sha256": "7e50b98441747d370b1feefae6ee5e63b859d2243b64f72024534a71b1d64482",
+      "sha256": "de5d451d23b019498104bd8e0ebcbf3385f37aad822496bdb0c47d7021de8761",
       "mode": 420,
       "origin": "kit"
     },
@@ -2431,6 +2431,14 @@
       "mode": 420,
       "origin": "kit"
     },
+    {
+      "path": "scripts/board_bootstrap.py",
+      "kind": "script",
+      "installRole": "consumer",
+      "sha256": "52f4bc89fb078bb9a8735481488bc60d2be438c5c8175555195ac84775e40bfb",
+      "mode": 493,
+      "origin": "kit"
+    },
     {
       "path": "scripts/board_config.py",
       "kind": "script",
@@ -2555,7 +2563,7 @@
       "path": "scripts/kit-update-pr.mjs",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "c28bbd5a45583a92eca12758c1d626e04bce820300178b54933340759d1690fd",
+      "sha256": "17084eede8601d7cf7dd9da85f7738d618111797933a362c93627058fbd335d4",
       "mode": 493,
       "origin": "kit"
     },
@@ -2623,6 +2631,14 @@
       "mode": 493,
       "origin": "kit"
     },
+    {
+      "path": "scripts/profile_globs.py",
+      "kind": "script",
+      "installRole": "consumer",
+      "sha256": "dd11f6e2513eb43813242ace8f4ea00e10b0fa33f4e13fd125afa4a654d61eff",
+      "mode": 493,
+      "origin": "kit"
+    },
     {
       "path": "scripts/program_graph_parse.py",
       "kind": "script",
@@ -2771,7 +2787,7 @@
       "path": "scripts/workflow-advisories/core.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "75b8d8b781344c54edf9f83c6976a999c10ceea6904af765c7179161e82d3bd6",
+      "sha256": "fcc13d24944a9b1534529e62cc1437617e394f6fe3402647c17cee4ea96aade5",
       "mode": 420,
       "origin": "kit"
     },
@@ -2779,7 +2795,7 @@
       "path": "scripts/worktree-lifecycle/capabilities.json",
       "kind": "doc",
       "installRole": "consumer",
-      "sha256": "e80501bd86bbdb0ba296fc6b172442d8ad128f43e571777698657491279e4305",
+      "sha256": "689910f11b51a5f2938989a82378332375e614f2684fe4cc48db7a4ce5c12f4b",
       "mode": 420,
       "origin": "kit"
     },
@@ -2787,7 +2803,7 @@
       "path": "scripts/worktree-lifecycle/cleanup.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "3c1c1113298c7c81b26850df95db8571574a49610cea25b57e208e2fa0a40af9",
+      "sha256": "4671aa6d40590abe103509916abda34e1717b43f7f0f521fc7fe90e1e29be50d",
       "mode": 493,
       "origin": "kit"
     },
@@ -2795,7 +2811,7 @@
       "path": "scripts/worktree-lifecycle/core.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "d4846481f0e7eaeb8e87324a705f94ca323163e3d368b2d809bb572dfea6cd9b",
+      "sha256": "50c60de1e0238fa1f5cd627f67e57ca4f378275136691411487f36d7fda580dd",
       "mode": 420,
       "origin": "kit"
     },
@@ -2803,7 +2819,7 @@
       "path": "scripts/worktree-lifecycle/profile.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "ad98f18aa6a24a08fdcbf271c0a7f14543ebb1a085ff3343966ce18f115781a5",
+      "sha256": "4a76462e4a9f7c4c3fd1b199217f8c68b9946c49bc934eef7bc888244bdbd16f",
       "mode": 420,
       "origin": "kit"
     },
@@ -2811,15 +2827,23 @@
       "path": "scripts/worktree-lifecycle/README.md",
       "kind": "doc",
       "installRole": "consumer",
-      "sha256": "567a59845db059fc6385ea200a8f361e1250f857babaef01d9fa15054be0f753",
+      "sha256": "91cfa8ebb74872ccec1160c0a7b28edcfacea3217900805034dca0f0c8f39c05",
       "mode": 420,
       "origin": "kit"
     },
+    {
+      "path": "scripts/worktree-lifecycle/session.py",
+      "kind": "script",
+      "installRole": "consumer",
+      "sha256": "18c2794aaf9fef96a15000c515b600345d3bf1715e23b07d0646156e601ea35a",
+      "mode": 493,
+      "origin": "kit"
+    },
     {
       "path": "scripts/worktree-lifecycle/setup.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "0021c50809373335e9dafe97196f42ad039152418baa49e2004b25ba33d137e2",
+      "sha256": "fa84d0056b24263389e0d17746abc8dc0afbd0152c323a62a6d7590ca9c62cac",
       "mode": 493,
       "origin": "kit"
     },
@@ -2827,7 +2851,7 @@
       "path": "scripts/wrapup-land.py",
       "kind": "script",
       "installRole": "consumer",
-      "sha256": "0f365204c5fd1b707a19fda0c4b4c4c9395f371adeaa8aa808f47e8d94a54bf6",
+      "sha256": "476012558bb786070ce47458c6f0734ff110d5d957af72e13b20d49a37a03592",
       "mode": 493,
       "origin": "kit"
     },

package/docs/adr/0007-session-teardown-requires-provenance-bound-ownership.md

@@ -0,0 +1,88 @@
+# Session teardown requires provenance-bound ownership
+
+Status: accepted (2026-07-26, Wave #271)
+
+Long agent sessions create branches, linked worktrees, setup outputs, and
+landing-time build artifacts. The desired end state is that every
+provenance-captured target created by that session can be removed, including
+branches whose changes reached
+canonical `main` through patch-equivalent commits rather than ancestry.
+
+Repository state alone cannot identify that ownership safely. A foreign branch
+can have the same name or patch, a user file can match a generated-artifact
+pattern, and a path can be replaced between assessment and deletion. Retrying
+after a crash adds a time dimension: a fresh snapshot cannot distinguish an
+earlier generator output from a file created by the user between attempts.
+
+We decided that teardown authority must come from **Teardown provenance**, not
+from present-day similarity:
+
+1. A session records intent before creation, but receives cleanup authority only
+   through an atomic **Ownership proof**. Branch and proof ref are acquired in
+   one Git transaction bound to the active wave claim.
+2. Setup, session work, and landing are separate provenance boundaries. Setup
+   and session cleanup use the worktree-creation baseline; landing cleanup uses
+   a persisted landing-attempt boundary and freezes the exact outputs of its
+   generator-capable step.
+3. Paths and patterns select candidates but never prove identity. Cleanup binds
+   regular files and worktree roots to no-follow object evidence and revalidates
+   that evidence immediately before mutation.
+4. The **Lifecycle receipt** is a durably replaced state-transition journal.
+   Prepared Git ref transactions close the worktree-removal race, and committed
+   intermediate states make known outcomes resumable. An external SIGKILL may
+   still leave Git's own lock files requiring operator recovery.
+5. Lost evidence is not reconstructed from coincidence. An interrupted landing
+   attempt without frozen outputs can be archived without claiming or deleting
+   its files, after which the ambiguous files must be classified before a new
+   attempt proceeds.
+
+## Considered options
+
+- **Delete branches merged by ancestry:** rejected because squash,
+  cherry-pick, and patch-equivalent integration leave session-owned branch refs
+  outside ancestry.
+- **Treat a receipt row as ownership:** rejected because another process can
+  create the named branch or worktree after the absence check but before the
+  attempted creation.
+- **Authorize files by ignored path or generator pattern:** rejected because a
+  consumer file can occupy the same path before landing or replace an assessed
+  output afterward.
+- **Take a fresh landing snapshot on every retry:** rejected because it protects
+  prior generator outputs as if they predated landing, while a persistent start
+  snapshot alone incorrectly claims every later matching user file.
+- **Force-remove apparently clean targets:** rejected because force bypasses the
+  repository and filesystem evidence that distinguishes owned work from foreign
+  work.
+- **Guess ownership after an unjournaled crash window:** rejected because safe
+  cleanup and guaranteed automatic liveness cannot both be recovered after the
+  distinguishing evidence is lost.
+
+## Consequences
+
+- A completed session can remove its exact worktrees, branches, proof refs, and
+  provenance-captured generated artifacts without hiding history or sweeping
+  unrelated repository state.
+- Foreign branches, worktrees, replacement symlinks, replacements, late writes,
+  and pre-landing consumer files are hard stops or remain outside cleanup
+  authority. Setup recovery may remove only a symlink whose exact no-follow
+  identity it captured as setup-created.
+- Exact unchanged frozen evidence is deterministically resumable. Started or
+  drifted frozen attempts can be explicitly relinquished by archiving only the
+  receipt; every current file then remains protected and must be classified
+  before another attempt.
+- Provenance-less legacy worktrees receive only a conservative baseline after
+  exact registration, no-follow root, attached branch, and clean tracked/index
+  checks. Setup reuse defers backfill while tracked work or current
+  landing-generated blockers remain. Landing classifies those blockers before
+  writing evidence; after they are moved, all remaining current ignored and
+  untracked files become protected. Corrupt evidence and active attempts are
+  never backfilled.
+- Before merge, a committed worktree policy may nominate only exact,
+  identity-bound cleanup candidates; it authorizes no deletion. After merge,
+  the profile is reloaded directly from canonical `origin/main` and must match
+  both the candidate and attempt-bound policy digest before any mutation.
+  Generator evidence is also reauthorized path-by-path against that canonical
+  policy. Missing policy, an unmerged widening, or branch/canonical drift
+  preserves every file.
+- The lifecycle implementation is necessarily a small transaction protocol,
+  with more states and race tests than a path-based cleanup script.

package/docs/agents/workflow-capabilities.json

@@ -7,12 +7,22 @@
     "branchRegex": "^(?:feat|fix|chore|docs)/(?P<issue>\\d+)-",
     "mainBranches": ["main"],
     "protectedBranches": ["main"],
-    "scratchPatterns": ["PLAN.md", "PLAN-REVIEW-LOG.md"],
+    "scratchPatterns": [
+      "PLAN.md",
+      "PLAN-REVIEW-LOG.md",
+      ".claude/logs/**"
+    ],
     "setupEntry": "python3 scripts/worktree-lifecycle/setup.py",
     "setupSteps": [],
     "riskyCommandPatterns": [
       "\\b(?:npm|pnpm|yarn)\\s+(?:run\\s+)?(?:test|typecheck|build)\\b",
       "\\bgit\\s+(?:commit|push)\\b"
     ]
+  },
+  "wrapup": {
+    "landingGeneratedArtifactPatterns": [
+      "dist-kit/**",
+      "**/__pycache__/**"
+    ]
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ikon85/agent-workflow-kit",
-  "version": "0.37.0",
+  "version": "0.39.0",
   "description": "Portable AI-agent workflow skills (plan → execute → land → learn) for Claude Code & Codex — grilling, TDD, diagnosis, two-axis code review, cross-model Codex review, design & domain-modeling, plus a skill router (ask-matt). npx init/update/diff/uninstall.",
   "type": "module",
   "bin": {