@jstn-sdk/ma 0.1.12 → 0.1.13

package/README.md

@@ -18,9 +18,30 @@
 </div>
 
 > [!IMPORTANT]
-> Meta-Architect `v0.1.12` is a production-grade skills line.
+> Meta-Architect `v0.1.13` is a production-grade skills line.
 > It is not a lightweight demo branch.
-> From `v0.1.12` onward, the package is expected to ship with stable skill contracts, deterministic packaging, explicit release gates, and honest install and publish surfaces.
+> From `v0.1.13` onward, the package is expected to ship with stable skill contracts, deterministic packaging, explicit release gates, and honest install and publish surfaces.
+
+## Navigate
+
+<table>
+  <tr>
+    <td><strong>Start</strong></td>
+    <td><a href="#cli-install">CLI Install</a> · <a href="#quick-start">Quick Start</a> · <a href="#setup">Setup</a></td>
+  </tr>
+  <tr>
+    <td><strong>Operate</strong></td>
+    <td><a href="#skill-surface">Skill Surface</a> · <a href="#gated-lanes">Gated Lanes</a> · <a href="#gate-model">Gate Model</a> · <a href="#learning-loop-core">Learning Loop Core</a></td>
+  </tr>
+  <tr>
+    <td><strong>Ship</strong></td>
+    <td><a href="#release-and-packaging">Release and Packaging</a> · <a href="#package-surface">Package Surface</a> · <a href="#release-hygiene">Release Hygiene</a></td>
+  </tr>
+  <tr>
+    <td><strong>Reference</strong></td>
+    <td><a href="#repository-structure">Repository Structure</a> · <a href="#documentation">Documentation</a> · <a href="#core-maintainers">Core Maintainers</a></td>
+  </tr>
+</table>
 
 ## Overview
 
@@ -38,6 +59,11 @@ It adds:
 > Meta-Architect does not replace your coding runtime.
 > It wraps that runtime with architecture, evidence, gate enforcement, and release-sensitive workflow control.
 
+## Acknowledgement
+
+Meta-Architect was shaped in part by ideas surfaced through the `oh-my-codex` ecosystem.
+Acknowledgement is due for the inspiration around Codex-native workflow packaging, skill distribution, and practical delivery surfaces that helped inform this project.
+
 ## Support
 
 - [GitHub Sponsors](https://github.com/sponsors/JustineDevs)
@@ -62,7 +88,7 @@ It adds:
   </tr>
   <tr>
     <td><strong>Release line</strong></td>
-    <td><code>v0.1.12</code></td>
+    <td><code>v0.1.13</code></td>
   </tr>
   <tr>
     <td><strong>License</strong></td>
@@ -102,9 +128,35 @@ It adds:
 > [!TIP]
 > The most reliable default environment is a Unix-like shell with Git, Node.js, and an MCP-capable runtime already configured.
 
+## CLI Install
+
+macOS, Linux, WSL, and Git-Bash:
+
+```bash
+# One-line install (POSIX shells only; see Windows note below)
+curl -fsSL https://cdn.jsdelivr.net/gh/JustineDevs/meta-architect@main/scripts/install.sh | sh
+```
+
+This jsDelivr-backed installer runs the canonical package install:
+
+```bash
+npm i -g @openai/codex@latest @jstn-sdk/ma@latest
+```
+
+Then it seeds the local MA runtime with `ma setup`. Start with:
+
+```bash
+ma --madmax --high
+```
+
+Windows note: use WSL or Git-Bash for the one-line POSIX installer. In PowerShell, use the npm fallback command directly.
+
 ## Default Install Surfaces
 
-Meta-Architect is a Codex-native session workflow. On Linux, the primary install surface is now distro-style package installation, not a standalone binary shell.
+Meta-Architect is a Codex-native session workflow. The jsDelivr CLI installer is the recommended quick-start path for POSIX shells; Linux distro packages remain available for distro-managed installs.
+
+<details>
+<summary><strong>Platform package commands</strong></summary>
 
 ### Debian, Ubuntu, Linux Mint, Pop!_OS
 
@@ -134,6 +186,11 @@ sudo zypper install ./meta-architect-<version>-1.noarch.rpm
 
 These packages install the Meta-Architect payload and expose `ma` / `meta-architect`, but the product still runs inside a Codex-native session. They do not create a separate desktop or terminal product.
 
+</details>
+
+<details open>
+<summary><strong>npm fallback and runtime assumptions</strong></summary>
+
 ### npm fallback
 
 ```bash
@@ -158,8 +215,9 @@ What this assumes:
 - the product experience happens through the skill workflow inside Codex
 
 > [!IMPORTANT]
-> On Linux, distro-native package install is the default surface.
-> npm remains available as a fallback path.
+> The jsDelivr installer is a POSIX-shell convenience wrapper around the canonical npm install. Use the distro packages when you specifically need distro-managed install assets.
+
+</details>
 
 ## Repository Branch Strategy
 
@@ -281,7 +339,7 @@ Required output:
 5. Data model and storage choices
 6. Auth/security considerations
 7. DX/UX considerations
-8. Delivery plan for v0.1.12
+8. Delivery plan for v0.1.13
 9. Risks and trade-offs
 10. Decision log
 11. Exact next trigger to run after this
@@ -407,7 +465,7 @@ Canonical `$sage` order:
 If you need scripted repo-local validation rather than the interactive runtime workflow:
 
 ```bash
-ma idea "Build a real-time collaborative whiteboard for product teams"
+ma idea "Prepare Meta-Architect v0.1.13 for a production package release with real install docs, Obsidian brain-context support, learning-loop reliability, and package proof artifacts."
 ma run '$arch'
 ma run '$sage'
 ma run '$flow'
@@ -461,7 +519,10 @@ ma setup
 ma init
 ma idea "Build a product"
 ma status
+ma status --maestro-view
+ma verify --architect
 ma run '$arch'
+ma run '$maestro' --auto-heal --parallel
 ```
 
 In-session skills are prompts you use inside the Codex conversation after launch:
@@ -518,6 +579,10 @@ What to use when:
 
 ## Skill Surface
 
+> [!TIP]
+> Remember the surface as **manager -> gated lanes -> helpers**.
+> `$maestro` coordinates, gated lanes move release state, and helper skills support without unlocking build.
+
 Meta-Architect’s in-session surface has three layers:
 
 - umbrella autonomous manager: `$maestro`
@@ -526,6 +591,14 @@ Meta-Architect’s in-session surface has three layers:
 
 Helper skills are publishable surfaces, but they do not own release-state transitions.
 
+> [!NOTE]
+> MA also discovers existing repo-local skills, MCP configs, and plugin manifests through the Environment Awareness Core.
+> Discovered capabilities are `available_capability` context only: MA may select them when task-relevant, but it does not auto-run, mutate, or treat them as build evidence.
+
+> [!NOTE]
+> Universal Plugin Broker Core uses a hybrid model for cross-agent plugins: MCP stdio tooling for hosts that support MCP config injection, and `.agents/skills` context payloads for the broader supported-agent surface.
+> Plugin broker receipts are compatibility configuration, not build evidence or lane approval.
+
 ## Core Maintainers
 
 <table>
@@ -543,17 +616,29 @@ Helper skills are publishable surfaces, but they do not own release-state transi
 
 ## Gated Lanes
 
+> [!IMPORTANT]
+> Read this as a release runway: **design -> evidence -> logic -> security -> experience -> build**.
+> Do not skip lanes when the release gate is still locked.
+
+<details open>
+<summary><strong>Release-gated lane map</strong></summary>
+
 | Trigger | Purpose | Main output | Gate effect |
 | --- | --- | --- | --- |
 | `$arch` | Produce the first-pass architecture blueprint | decision entry | `architecture_status = APPROVED` |
 | `$sage` | Ground major choices in configured GitMCP evidence | evidence records | `evidence_status = VERIFIED | PARTIAL | MISSING` |
-| `$flow` | Review baseline logic and state transitions | logic review entry | `logic_status = GREEN | RED` |
-| `$vet` | Run baseline security and dependency review | audit and CVE records | `security_status = GREEN | RED` |
-| `$vibe` | Review developer and user experience implications | DX/UX outcome record | `experience_status = GREEN | RED | WAIVED` |
-| `$build` | Unlock bounded build planning | build-ready decision + `.ma/plans/build.md` | `build_status = READY` |
+| `$flow` | Review baseline logic and state transitions | logic review entry | `logic_status = PENDING | GREEN | RED` |
+| `$vet` | Run baseline security and dependency review | audit and CVE records | `security_status = PENDING | GREEN | RED` |
+| `$vibe` | Review developer and user experience implications | DX/UX outcome record | `experience_status = PENDING | GREEN | RED | WAIVED` |
+| `$build` | Run a bounded build-readiness loop | build-ready decision + `.ma/plans/build.md` | `build_status = READY | RUNNING | DONE` |
+
+</details>
 
 ## Helper Skills
 
+<details>
+<summary><strong>Non-gating helper skill map</strong></summary>
+
 | Trigger | Purpose | Gate effect |
 | --- | --- | --- |
 | `$align` | Normalize terminology, tighten scope, and improve prompt or docs clarity | none |
@@ -561,37 +646,86 @@ Helper skills are publishable surfaces, but they do not own release-state transi
 | `$tdd` | Lock behavior with regression-first or test-first scaffolding | none |
 | `$cleanup` | Simplify noisy output and run a final-pass anti-slop cleanup | none |
 
+> [!NOTE]
+> Helper skills are backed by `helper_orchestration_core`.
+> They write helper receipts, return authority to `$maestro` or the owning lane, and never record as gate approval.
+
+</details>
+
 ## Gate Model
 
 Meta-Architect is intentionally fail-closed.
 
+> [!NOTE]
+> Green states allow the next safe move.
+> Red or locked states preserve the blocker instead of pretending the workflow is ready.
+
+<details open>
+<summary><strong>Status vocabulary</strong></summary>
+
 | Status | Meaning |
 | --- | --- |
 | `CLEAR` | enough input exists to proceed |
 | `APPROVED` | the architecture lane produced an acceptable first-pass blueprint |
 | `VERIFIED` | live evidence was grounded through approved GitMCP sources |
 | `PARTIAL` | evidence is configured but live proof is incomplete or unavailable |
+| `PENDING` | the lane has recorded interim review state but not final approval or rejection yet |
 | `GREEN` | the current baseline review passed |
 | `RED` | the lane is blocked or failed |
 | `WAIVED` | the lane was intentionally waived with a recorded reason |
 | `LOCKED` | downstream work is not allowed yet |
-| `READY` | the next gated step is allowed |
+| `READY` | the next bounded gated step is prepared |
+| `RUNNING` | the bounded build substep is active |
+| `DONE` | the current bounded build substep completed with recorded evidence |
+
+</details>
 
 > [!CAUTION]
 > `$build` must stay locked until the upstream release state in `.ma/release.json` satisfies the gate contract.
 > Meta-Architect is designed to stop on blockers rather than silently continue.
 > Rich runtime artifacts live in `.ma/context/`, `.ma/specs/`, `.ma/plans/`, and `.ma/runbook.md`.
 
+## Learning Loop Core
+
+> [!NOTE]
+> Meta-Architect records learnings as candidates first.
+> A learning can influence future context only after it has source, evidence, authority, and a next verification path.
+
+<details open>
+<summary><strong>Reliability domains</strong></summary>
+
+| Domain | What improves over time |
+| --- | --- |
+| Core & Orchestration | manager runs, lane handoffs, and autonomous routing |
+| Memory & Knowledge | project notes, Obsidian vault context, and semantic receipts |
+| Intelligence & Learning | prompt strategy, context budgeting, and rehearsal outcomes |
+| Code Quality & Testing | test failures, build results, and execution learnings |
+| Security & Compliance | trust-boundary findings, exposure scans, and redaction receipts |
+| Architecture & Methodology | decisions, tradeoffs, and reusable patterns |
+| DevOps & Observability | release checks, package smokes, runtime traces, and hook audits |
+| Extensibility | skills, plugins, MCP policy, and host compatibility |
+| Domain-Specific | stack facts, project domain notes, and trusted source context |
+
+</details>
+
 ## Release and Packaging
 
 Meta-Architect has three related but different distribution surfaces.
 
+> [!TIP]
+> Use **npm** for the public package, **Linux packages** for distro-managed installs, and **skills bundle** when only the skill payload is needed.
+
+<details open>
+<summary><strong>Distribution surfaces</strong></summary>
+
 | Surface | Purpose | Produced by |
 | --- | --- | --- |
 | Linux native packages | distro-managed install assets for Debian-family and Arch-family environments | `npm run linux:packages:build` and GitHub release assets |
 | npm package | public package containing the installable Meta-Architect skills/plugin system, docs, scripts, and canonical skills | `npm publish` or `npm pack` |
 | skills bundle | narrower tarball containing `skills/` only | `npm run skills:pack` |
 
+</details>
+
 Required packaging commands:
 
 ```bash
@@ -654,7 +788,7 @@ Release automation:
 <table>
   <tr>
     <td><strong>Included</strong></td>
-    <td><code>bin/</code>, <code>skills/</code>, <code>docs/</code>, <code>scripts/</code>, <code>index.js</code>, <code>README.md</code>, <code>LICENSE</code></td>
+    <td><code>bin/</code>, <code>skills/</code>, <code>docs/</code>, <code>data/</code>, <code>scripts/</code>, <code>index.js</code>, <code>README.md</code>, <code>DEMO.md</code>, <code>COVERAGE.md</code>, <code>LICENSE</code></td>
   </tr>
   <tr>
     <td><strong>Excluded</strong></td>
@@ -664,6 +798,9 @@ Release automation:
 
 ## Repository Structure
 
+> [!NOTE]
+> The repository is split by responsibility: runtime prompts, public skills, plugin distribution, docs, MCP evidence config, and release tooling stay in separate folders.
+
 <table>
   <tr>
     <td><strong>Path</strong></td>
@@ -705,6 +842,9 @@ Release automation:
 
 ## Documentation
 
+<details open>
+<summary><strong>Primary docs and evidence surfaces</strong></summary>
+
 | Surface | Purpose |
 | --- | --- |
 | [Getting Started](./docs/getting-started.md) | end-to-end local onboarding |
@@ -713,9 +853,12 @@ Release automation:
 | [Skills Publishing](./docs/skills-publishing.md) | source-to-package pipeline |
 | [MCP Setup](./docs/mcp-setup.md) | evidence endpoint policy |
 | [Plugin README](./plugins/meta-architect/README.md) | plugin distribution surface |
-| [Collaborative Whiteboard Mission](./missions/collaborative-whiteboard/mission.md) | concrete scenario walkthrough |
+| [Production Demo Guide](./DEMO.md) | real MA release-hardening walkthrough |
+| [Coverage Matrix](./COVERAGE.md) | current verified capability and package proof map |
 | [Release Spec](./docs/release-spec.md) | release and gate policy |
-| [Release Readiness](./docs/qa/release-readiness-0.1.12.md) | QA evidence for the `v0.1.12` line |
+| [Release Readiness](./docs/qa/release-readiness-0.1.13.md) | QA evidence for the `v0.1.13` line |
+
+</details>
 
 ## Release Hygiene
 

package/bin/ma.js

@@ -10,7 +10,19 @@ import {
   validateReleaseOrigin,
 } from "../src/policy.js";
 import { loadReleaseState } from "../src/release-state.js";
+import { runExternalArchitectReview } from "../src/runtime/architect-review.js";
 import { evaluateRuntimeBuildReadiness } from "../src/runtime/build-readiness.js";
+import { ingestCoreSources } from "../src/runtime/core-source-ingest.js";
+import {
+  appendObsidianOperationReceipt,
+  createObsidianNote,
+  deleteObsidianNote,
+  listObsidianNotes,
+  readObsidianNote,
+  updateObsidianNote,
+  writeObsidianVaultIndex,
+} from "../src/runtime/obsidian-integration-core.js";
+import { installObsidianPlugin } from "../src/runtime/obsidian-plugin-bridge.js";
 import { createRuntimeSummary, loadRuntimeSnapshot } from "../src/runtime/runtime-state.js";
 import {
   ensureSkillsInstalled,
@@ -40,9 +52,15 @@ function printUsage() {
   console.error("  ma init");
   console.error('  ma idea "..."');
   console.error("  ma skills");
+  console.error("  ma core-ingest [--refresh]");
+  console.error("  ma obsidian-index [vault-path]");
+  console.error(
+    "  ma obsidian list|read|create|update|delete|plugin-install <vault-path> [note-path] [content]",
+  );
   console.error("  ma sdk-path");
-  console.error("  ma status");
-  console.error("  ma run $maestro|$arch|$sage|$flow|$vet|$vibe|$build");
+  console.error("  ma status [--maestro-view]");
+  console.error("  ma verify --architect");
+  console.error("  ma run $maestro|$arch|$sage|$flow|$vet|$vibe|$build [--auto-heal] [--parallel]");
   console.error("  ma merge <source-branch> <target-branch>");
   console.error("  ma release <origin-branch> <target-branch>");
 }
@@ -59,6 +77,19 @@ async function printStatus(releaseState) {
   console.log(`Build: ${releaseState.build_status}`);
 
   const runtimeSummary = createRuntimeSummary(await loadRuntimeSnapshot());
+  console.log(
+    `Core source snapshots: ${runtimeSummary.coreSourceIngestCount} (${runtimeSummary.coreSourceIngestStatus})`,
+  );
+  console.log(`Obsidian vault notes: ${runtimeSummary.obsidianVaultNoteCount}`);
+  console.log(`Obsidian CRUD receipts: ${runtimeSummary.obsidianVaultOperationCount}`);
+  if (
+    releaseState.build_status === "DONE" &&
+    releaseState.merge_status !== "MERGED_TO_DEVELOPMENT"
+  ) {
+    console.log("Next allowed triggers:");
+    console.log("ma merge <feature/*> development");
+    return;
+  }
   const evaluation = evaluateRuntimeBuildReadiness(releaseState, runtimeSummary);
   console.log("Next allowed triggers:");
   const triggers = evaluation.nextTriggers;
@@ -72,9 +103,46 @@ async function printStatus(releaseState) {
   }
 }
 
+async function printMaestroView() {
+  const snapshot = await loadRuntimeSnapshot();
+  const trackEntries = Object.entries(snapshot.maestroState.runtime_tracks);
+  console.log("Maestro View");
+  console.log("============");
+  console.log(`Global status: ${snapshot.maestroState.global_status}`);
+  console.log(`Orchestration id: ${snapshot.maestroState.orchestration_id ?? "not started"}`);
+  console.log("Runtime tracks:");
+  if (trackEntries.length === 0) {
+    console.log("- none");
+  } else {
+    for (const [trackId, track] of trackEntries) {
+      console.log(`- ${trackId}: ${track.active_gate} [${track.status}]`);
+      if (Array.isArray(track.blockers) && track.blockers.length > 0) {
+        console.log(`  blockers: ${track.blockers.join("; ")}`);
+      }
+    }
+  }
+
+  const lockEntries = Object.entries(snapshot.maestroState.downstream_lock_table);
+  console.log("Downstream locks:");
+  if (lockEntries.length === 0) {
+    console.log("- none");
+    return;
+  }
+
+  for (const [gate, lock] of lockEntries) {
+    console.log(`- ${gate}: ${lock.is_locked ? "locked" : "unlocked"}`);
+    if (Array.isArray(lock.locked_by) && lock.locked_by.length > 0) {
+      console.log(`  locked by: ${lock.locked_by.join(", ")}`);
+    }
+    if (lock.unlock_criteria) {
+      console.log(`  unlock criteria: ${lock.unlock_criteria}`);
+    }
+  }
+}
+
 async function runBuild() {
   const result = await runBuildLane();
-  if (result.status !== "READY") {
+  if (result.status === "BLOCKED") {
     console.error("Build is locked.");
     for (const blocker of result.blockers) {
       console.error(`- ${blocker}`);
@@ -83,15 +151,30 @@ async function runBuild() {
     return;
   }
 
-  const suggestedBranches = result.suggestedBranches ?? [];
-  console.log("Build gate is green.");
-  console.log("Suggested branches:");
-  for (const branch of suggestedBranches) {
-    console.log(`- ${branch}`);
+  if (result.status === "READY") {
+    const suggestedBranches = result.suggestedBranches ?? [];
+    console.log("Build gate is ready.");
+    console.log("Suggested branches:");
+    for (const branch of suggestedBranches) {
+      console.log(`- ${branch}`);
+    }
+    console.log("Optional worktree commands:");
+    console.log("git worktree add ../implementation feature/implementation");
+    console.log("git worktree add ../verification feature/verification");
+    console.log("Run `ma run '$build'` again to start the bounded build execution substep.");
+    return;
   }
-  console.log("Optional worktree commands:");
-  console.log("git worktree add ../implementation feature/implementation");
-  console.log("git worktree add ../verification feature/verification");
+
+  if (result.status === "RUNNING") {
+    console.log("Build gate is running the bounded execution substep.");
+    console.log(
+      "Run `ma run '$build'` again to finalize the substep and persist completion evidence.",
+    );
+    return;
+  }
+
+  console.log("Build gate completed the bounded execution substep.");
+  console.log("Next step: ma merge <feature/*> development");
 }
 
 async function runMerge(sourceBranch, targetBranch) {
@@ -102,7 +185,7 @@ async function runMerge(sourceBranch, targetBranch) {
   }
 
   if (!canMarkBuildDone(releaseState)) {
-    throw new Error("Merge is blocked until build status is READY or RUNNING");
+    throw new Error("Merge is blocked until build status is DONE");
   }
 
   await appendDecision({
@@ -115,7 +198,6 @@ async function runMerge(sourceBranch, targetBranch) {
   });
 
   await syncStatusUpdates({
-    build_status: "DONE",
     merge_status: "MERGED_TO_DEVELOPMENT",
   });
 
@@ -212,6 +294,111 @@ async function main() {
     return;
   }
 
+  if (command === "core-ingest") {
+    await runInit();
+    const manifest = await ingestCoreSources({ refresh: rest.includes("--refresh") });
+    console.log("Core sources ingested");
+    console.log(`Status: ${manifest.status}`);
+    console.log(`Runtime fetch required: ${manifest.runtime_fetch_required}`);
+    for (const source of manifest.sources) {
+      console.log(`${source.id}: ${source.status} ${source.local_path ?? source.repo}`);
+    }
+    if (manifest.errors?.length > 0) {
+      process.exitCode = 1;
+    }
+    return;
+  }
+
+  if (command === "obsidian-index") {
+    const vaultPath = arg ?? process.env.MA_OBSIDIAN_VAULT;
+    if (!vaultPath) {
+      throw new Error("Obsidian vault path required: ma obsidian-index <vault-path>");
+    }
+    await runInit();
+    const index = await writeObsidianVaultIndex({ vaultPath });
+    console.log("Obsidian vault indexed");
+    console.log(`Vault: ${index.vault_path}`);
+    console.log(`Notes: ${index.note_count}`);
+    console.log(`Tags: ${index.tags.length}`);
+    console.log(`Unresolved links: ${index.unresolved_links.length}`);
+    return;
+  }
+
+  if (command === "obsidian") {
+    const [action, vaultPath, notePath, ...contentParts] = rest;
+    if (!action || !vaultPath) {
+      throw new Error(
+        "Usage: ma obsidian list|read|create|update|delete|plugin-install <vault-path> [note-path] [content]",
+      );
+    }
+    await runInit();
+    if (action === "plugin-install") {
+      const receipt = await installObsidianPlugin({ vaultPath });
+      await appendObsidianOperationReceipt({
+        record_type: "obsidian_vault_operation",
+        operation: "plugin_install",
+        records_as: "vault_context",
+        build_evidence: false,
+        authority_boundary: "$maestro_or_owning_lane",
+        vault_path: receipt.vault_path,
+        relative_path: ".obsidian/plugins/meta-architect",
+        content_sha256: "0".repeat(64),
+        char_count: receipt.installed_files.join("\n").length,
+        performed_at: new Date().toISOString(),
+      });
+      console.log("Obsidian plugin installed");
+      console.log(`Vault: ${receipt.vault_path}`);
+      console.log(`Plugin: ${receipt.plugin_path}`);
+      console.log(`Enabled: ${receipt.enabled}`);
+      console.log(`Files: ${receipt.installed_files.join(", ")}`);
+      return;
+    }
+    if (action === "list") {
+      const list = await listObsidianNotes({ vaultPath });
+      console.log(`Obsidian notes: ${list.notes.length}`);
+      for (const note of list.notes) {
+        console.log(note);
+      }
+      return;
+    }
+    if (action === "read") {
+      const note = await readObsidianNote({ vaultPath, notePath });
+      console.log(`Obsidian note: ${note.relative_path}`);
+      console.log(note.content);
+      return;
+    }
+    if (action === "create") {
+      const receipt = await createObsidianNote({
+        vaultPath,
+        notePath,
+        content: contentParts.join(" "),
+      });
+      await appendObsidianOperationReceipt(receipt);
+      await writeObsidianVaultIndex({ vaultPath });
+      console.log(`Obsidian note created: ${receipt.relative_path}`);
+      return;
+    }
+    if (action === "update") {
+      const receipt = await updateObsidianNote({
+        vaultPath,
+        notePath,
+        content: contentParts.join(" "),
+      });
+      await appendObsidianOperationReceipt(receipt);
+      await writeObsidianVaultIndex({ vaultPath });
+      console.log(`Obsidian note updated: ${receipt.relative_path}`);
+      return;
+    }
+    if (action === "delete") {
+      const receipt = await deleteObsidianNote({ vaultPath, notePath });
+      await appendObsidianOperationReceipt(receipt);
+      await writeObsidianVaultIndex({ vaultPath });
+      console.log(`Obsidian note deleted: ${receipt.relative_path}`);
+      return;
+    }
+    throw new Error(`Unknown Obsidian action: ${action}`);
+  }
+
   if (command === "sdk-path") {
     process.stdout.write(`${getSupportBundleRoot()}\n`);
     return;
@@ -220,6 +407,21 @@ async function main() {
   if (command === "status") {
     const releaseState = await loadReleaseState();
     await printStatus(releaseState);
+    if (rest.includes("--maestro-view")) {
+      await printMaestroView();
+    }
+    return;
+  }
+
+  if (command === "verify" && rest.includes("--architect")) {
+    const review = await runExternalArchitectReview({
+      prompt:
+        "Review the current Meta-Architect runtime and release-state outputs for architectural soundness.",
+    });
+    console.log(`Architect verdict: ${review.verdict}`);
+    if (review.summary) {
+      console.log(review.summary);
+    }
     return;
   }
 
@@ -236,7 +438,10 @@ async function main() {
   }
 
   if (command === "run" && arg === "$maestro") {
-    await runMaestro();
+    await runMaestro({
+      autoHeal: rest.includes("--auto-heal"),
+      parallel: rest.includes("--parallel"),
+    });
     console.log("$maestro complete");
     return;
   }

package/data/clone-data.ledger.json

@@ -0,0 +1,41 @@
+{
+  "schemaVersion": "1.0.0",
+  "record_type": "clone_data_ledger",
+  "product": "Meta-Architect",
+  "package": "@jstn-sdk/ma",
+  "release_version": "0.1.13",
+  "records_as": "production_evidence",
+  "build_evidence": true,
+  "entries": [
+    {
+      "id": "clone-data-proof",
+      "path": "data/clone-data.proof.json",
+      "type": "proof",
+      "purpose": "Records the clone-data proof claims and verification commands.",
+      "required": true
+    },
+    {
+      "id": "clone-data-ledger",
+      "path": "data/clone-data.ledger.json",
+      "type": "ledger",
+      "purpose": "Tracks clone-data artifact inventory and package visibility.",
+      "required": true
+    },
+    {
+      "id": "clone-data-rvf",
+      "path": "data/clone-data.rvf",
+      "type": "runtime_verification_file",
+      "purpose": "Defines pass/fail verification criteria for clone-data artifacts.",
+      "required": true
+    }
+  ],
+  "package_visibility": {
+    "package_json_files_entry": "data/",
+    "pack_dry_run_required": true
+  },
+  "integrity_policy": {
+    "empty_files_allowed": false,
+    "placeholder_claims_allowed": false,
+    "must_reference_real_paths": true
+  }
+}