@mindrian_os/cli 2.0.0-beta.3 → 2.0.0-beta.33

package/scripts/self-update

@@ -0,0 +1,105 @@
+#!/usr/bin/env bash
+#
+# self-update: DEPRECATED 2026-04-26 (v1.10.19)
+#
+# This script is intentionally a no-op stub. The previous implementation
+# (preserved at scripts/self-update.deprecated-2026-04-26.bak, 427 lines,
+# Plan 84-09 rewrite) copied plugin files to the cache directory but did
+# NOT update Claude Code's plugin registry:
+#
+#   ~/.claude/plugins/installed_plugins.json     (gitCommitSha drift)
+#   ~/.claude/settings.json :: enabledPlugins    (plugin not enabled)
+#   ~/.claude/plugins/known_marketplaces.json    (marketplace state)
+#
+# Result: cache had the new version, registry didn't know about it,
+# Claude Code's plugin loader silently ignored the install. Slash commands
+# disappeared. Confirmed in field by Aryeh Holtzberg (PWS IRIS 2025) on
+# 2026-04-26. Matches Anthropic-tracked issues #11357, #12457, #14815, #17832.
+#
+# REPLACEMENT: use Claude Code's native plugin loader, which keeps all
+# four registry files in sync atomically.
+#
+#   From inside a Claude Code session (recommended):
+#       /plugin marketplace update
+#       /plugin update mos@mindrian-marketplace
+#
+#   From the CLI (equivalent):
+#       claude plugin marketplace update
+#       claude plugin update mos@mindrian-marketplace
+#
+#   Or, the wrapper that handles this end-to-end with version check + Larry voice:
+#       /mos:update
+#
+# This shim is preserved (not deleted) so that existing automation
+# (cron jobs, CI scripts, hook chains) that invoke `self-update` get a
+# clear migration message instead of silent breakage. It will be removed
+# in a future major release once the migration window is closed.
+#
+# Reference:
+#   - Plugin repo: https://github.com/jsagir/mindrian-os-plugin
+#   - Hotfix doc:  .planning/phases/90-brain-derivation-layer/90-HOTFIX-2026-04-26.md
+#   - Constitutional rationale: Canon Part 7 (Reuse Before Build)
+#   - Backup of previous implementation: scripts/self-update.deprecated-2026-04-26.bak
+
+set -euo pipefail
+
+MODE="${1:-help}"
+
+# Phase 339 Plan 06 (FLIP-04, D-08): the plugin-update command line below is
+# sourced from lib/core/update-path.cjs, the single source of the two-command
+# update path, so this deprecated stub cannot drift from it (three retyped
+# copies is exactly the drift D-08 exists to prevent).
+# tests/test-339-update-path-single-source.cjs Arm 5 polices the OTHER
+# direction: the literal must appear nowhere in lib/ or scripts/ except
+# inside update-path.cjs itself, so it is fetched here, never retyped.
+SELF_UPDATE_REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+PLUGIN_UPDATE_CMD="$(node -e "process.stdout.write(require(process.argv[1]).PLUGIN_UPDATE_COMMAND)" "${SELF_UPDATE_REPO_ROOT}/lib/core/update-path.cjs" 2>/dev/null || true)"
+if [ -z "${PLUGIN_UPDATE_CMD}" ]; then
+  PLUGIN_UPDATE_CMD="the plugin-update command from .claude/includes/release-process.md"
+fi
+
+cat >&2 <<EOF
+══════════════════════════════════════════════════════════════════════════
+DEPRECATED -- scripts/self-update is a no-op as of 2026-04-26
+══════════════════════════════════════════════════════════════════════════
+
+The self-update script bypassed Claude Code's plugin registry and caused
+the plugin to silently fail to load after "successful" updates. It has
+been replaced with native delegation.
+
+USE INSTEAD (in this order):
+
+  1. From a Claude Code session:
+        /plugin marketplace update
+        /plugin update mos@mindrian-marketplace
+
+  2. Or the friendly wrapper (recommended -- includes version check + changelog):
+        /mos:update
+
+  3. From the bash CLI (equivalent to the slash commands):
+        claude plugin marketplace update
+        ${PLUGIN_UPDATE_CMD}
+
+After update, restart Claude Code and verify with /mos:help.
+
+WHY THE CHANGE:
+  - self-update only updated ~/.claude/plugins/cache/...
+  - It never updated ~/.claude/plugins/installed_plugins.json
+  - It never updated ~/.claude/settings.json :: enabledPlugins
+  - Claude Code's plugin loader requires ALL three to agree
+  - Result: cache had v1.10.18, registry thought v1.10.13 was installed,
+    plugin loader saw mismatch and ignored the new version
+
+The native commands above keep all registry files in sync atomically.
+
+Reference:
+  https://github.com/jsagir/mindrian-os-plugin/blob/main/CHANGELOG.md
+  (search for "Hotfix 2026-04-26" under [1.10.18])
+
+══════════════════════════════════════════════════════════════════════════
+EOF
+
+# Exit code: non-zero so callers (cron, CI, automation) detect this as
+# a failure they need to migrate from. NOT zero -- silently succeeding
+# would mask the migration need.
+exit 1

package/scripts/sentinel-deadline-monitor

@@ -0,0 +1,241 @@
+#!/usr/bin/env bash
+# sentinel-deadline-monitor: Scan funding/ and opportunity-bank/ for approaching deadlines
+# Alerts on deadlines within 7 days (configurable via --days flag)
+# Outputs alerts to room/.intelligence/deadlines-YYYY-MM-DD.md
+# Part of Sentinel Intelligence (SENT-02)
+
+set -euo pipefail
+
+ROOM_DIR="${1:-./room}"
+ALERT_DAYS="${2:-7}"
+
+if [ ! -d "$ROOM_DIR" ]; then
+  echo "ERROR: Room directory not found: $ROOM_DIR" >&2
+  exit 1
+fi
+
+# Portable date -d replacement (macOS lacks GNU date -d)
+portable_date_to_epoch() {
+  local datestr="$1"
+  date -d "$datestr" +%s 2>/dev/null \
+    || date -j -f "%Y-%m-%d" "$datestr" +%s 2>/dev/null \
+    || python3 -c "from datetime import datetime; print(int(datetime.strptime('$datestr','%Y-%m-%d').timestamp()))" 2>/dev/null \
+    || echo "0"
+}
+
+# Ensure .intelligence/ directory exists
+INTEL_DIR="$ROOM_DIR/.intelligence"
+mkdir -p "$INTEL_DIR"
+
+TODAY=$(date -u +"%Y-%m-%d")
+TODAY_EPOCH=$(portable_date_to_epoch "$TODAY")
+CUTOFF_EPOCH=$((TODAY_EPOCH + ALERT_DAYS * 86400))
+
+urgent_count=0
+upcoming_count=0
+overdue_count=0
+
+# Collect all deadline alerts
+declare -a alerts=()
+
+# ── Scan funding/ for STATUS.md files with deadline fields ──
+if [ -d "$ROOM_DIR/funding" ]; then
+  for fund_dir in "$ROOM_DIR"/funding/*/; do
+    [ -d "$fund_dir" ] || continue
+    status_file="${fund_dir}STATUS.md"
+    [ -f "$status_file" ] || continue
+
+    slug=$(basename "$fund_dir")
+
+    # Extract deadline from frontmatter
+    deadline=$(grep -m1 '^deadline:' "$status_file" 2>/dev/null | sed 's/deadline:[[:space:]]*//' | tr -d '"' | xargs)
+    [ -z "$deadline" ] && continue
+
+    # Extract funder name
+    funder=$(grep -m1 '^funder:' "$status_file" 2>/dev/null | sed 's/funder:[[:space:]]*//' | tr -d '"' | xargs)
+    funder=${funder:-$slug}
+
+    # Extract stage
+    stage=$(grep -m1 '^stage:' "$status_file" 2>/dev/null | sed 's/stage:[[:space:]]*//' | tr -d '"' | xargs)
+    stage=${stage:-unknown}
+
+    # Calculate days until deadline
+    deadline_epoch=$(portable_date_to_epoch "$deadline")
+    if [ "$deadline_epoch" -eq 0 ]; then
+      continue
+    fi
+
+    days_until=$(( (deadline_epoch - TODAY_EPOCH) / 86400 ))
+
+    if [ "$days_until" -lt 0 ]; then
+      overdue_count=$((overdue_count + 1))
+      alerts+=("OVERDUE|funding|${funder}|${deadline}|${days_until}|${stage}")
+    elif [ "$days_until" -le "$ALERT_DAYS" ]; then
+      urgent_count=$((urgent_count + 1))
+      alerts+=("URGENT|funding|${funder}|${deadline}|${days_until}|${stage}")
+    elif [ "$days_until" -le $((ALERT_DAYS * 2)) ]; then
+      upcoming_count=$((upcoming_count + 1))
+      alerts+=("UPCOMING|funding|${funder}|${deadline}|${days_until}|${stage}")
+    fi
+  done
+fi
+
+# ── Scan opportunity-bank/ for deadline frontmatter ──
+if [ -d "$ROOM_DIR/opportunity-bank" ]; then
+  for f in "$ROOM_DIR"/opportunity-bank/*.md; do
+    [ -f "$f" ] || continue
+    fname=$(basename "$f")
+    [ "$fname" = "STATE.md" ] || [ "$fname" = "ROOM.md" ] && continue
+
+    # Extract deadline from frontmatter
+    deadline=$(grep -m1 '^deadline:' "$f" 2>/dev/null | sed 's/deadline:[[:space:]]*//' | tr -d '"' | xargs)
+    [ -z "$deadline" ] && continue
+
+    # Extract funder name
+    funder=$(grep -m1 '^funder:' "$f" 2>/dev/null | sed 's/funder:[[:space:]]*//' | tr -d '"' | xargs)
+    funder=${funder:-$fname}
+
+    # Extract status
+    status=$(grep -m1 '^status:' "$f" 2>/dev/null | sed 's/status:[[:space:]]*//' | tr -d '"' | xargs)
+    status=${status:-unknown}
+
+    # Calculate days until deadline
+    deadline_epoch=$(portable_date_to_epoch "$deadline")
+    if [ "$deadline_epoch" -eq 0 ]; then
+      continue
+    fi
+
+    days_until=$(( (deadline_epoch - TODAY_EPOCH) / 86400 ))
+
+    if [ "$days_until" -lt 0 ]; then
+      overdue_count=$((overdue_count + 1))
+      alerts+=("OVERDUE|opportunity|${funder}|${deadline}|${days_until}|${status}")
+    elif [ "$days_until" -le "$ALERT_DAYS" ]; then
+      urgent_count=$((urgent_count + 1))
+      alerts+=("URGENT|opportunity|${funder}|${deadline}|${days_until}|${status}")
+    elif [ "$days_until" -le $((ALERT_DAYS * 2)) ]; then
+      upcoming_count=$((upcoming_count + 1))
+      alerts+=("UPCOMING|opportunity|${funder}|${deadline}|${days_until}|${status}")
+    fi
+  done
+fi
+
+# ── Scan .planning/STATE.md for phase deadlines (HARD-05, Phase 140-03) ──
+# Phase deadlines live in the plugin-dev .planning/STATE.md (Canon Part 6
+# Product-as-Venture), NOT in a user room's STATE.md (Pitfall 5: two different
+# STATE.md files). Resolve from $PLANNING_STATE_FILE when set (test seam), else
+# from the repo root relative to this script (scripts/.. = repo root). The
+# field is the prose line `Hard deadline: <date> (context)` (and a sibling
+# `Soft deadline:` line that may carry the `--` placeholder).
+SCRIPT_DIR_DM="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PLANNING_STATE="${PLANNING_STATE_FILE:-$SCRIPT_DIR_DM/../.planning/STATE.md}"
+
+if [ -f "$PLANNING_STATE" ]; then
+  # Reuse the script's extraction idiom adapted to the prose form: grep the
+  # line, strip the label, strip the trailing parenthetical context, trim.
+  for label in "Hard deadline" "Soft deadline"; do
+    raw=$(grep -m1 "^${label}:" "$PLANNING_STATE" 2>/dev/null \
+      | sed "s/^${label}:[[:space:]]*//" \
+      | sed 's/[[:space:]]*(.*$//' \
+      | tr -d '"' | xargs || true)
+    # Skip empty and the `--` placeholder (V5 input validation; not fatal).
+    [ -z "$raw" ] && continue
+    [ "$raw" = "--" ] && continue
+
+    phase_epoch=$(portable_date_to_epoch "$raw")
+    # Reuse the epoch==0 skip guard for malformed/placeholder dates.
+    if [ "$phase_epoch" -eq 0 ]; then
+      continue
+    fi
+
+    days_until=$(( (phase_epoch - TODAY_EPOCH) / 86400 ))
+    name="${label}"
+
+    if [ "$days_until" -lt 0 ]; then
+      overdue_count=$((overdue_count + 1))
+      alerts+=("OVERDUE|phase|${name}|${raw}|${days_until}|phase-deadline")
+    elif [ "$days_until" -le "$ALERT_DAYS" ]; then
+      urgent_count=$((urgent_count + 1))
+      alerts+=("URGENT|phase|${name}|${raw}|${days_until}|phase-deadline")
+    elif [ "$days_until" -le $((ALERT_DAYS * 2)) ]; then
+      upcoming_count=$((upcoming_count + 1))
+      alerts+=("UPCOMING|phase|${name}|${raw}|${days_until}|phase-deadline")
+    fi
+  done
+fi
+
+# ── Generate report ──
+total_alerts=$((urgent_count + overdue_count + upcoming_count))
+
+if [ "$total_alerts" -eq 0 ]; then
+  echo "DEADLINES:CLEAR:No approaching deadlines within ${ALERT_DAYS} days"
+  exit 0
+fi
+
+REPORT_FILE="$INTEL_DIR/deadlines-${TODAY}.md"
+
+{
+  echo "---"
+  echo "type: deadline-monitor"
+  echo "date: ${TODAY}"
+  echo "alert_window: ${ALERT_DAYS} days"
+  echo "overdue: ${overdue_count}"
+  echo "urgent: ${urgent_count}"
+  echo "upcoming: ${upcoming_count}"
+  echo "---"
+  echo ""
+  echo "# Deadline Monitor - ${TODAY}"
+  echo ""
+
+  if [ "$overdue_count" -gt 0 ]; then
+    echo "## OVERDUE"
+    echo ""
+    echo "| Source | Name | Deadline | Days Past | Stage/Status |"
+    echo "|--------|------|----------|-----------|--------------|"
+    for alert in "${alerts[@]}"; do
+      IFS='|' read -r severity source name dl days st <<< "$alert"
+      if [ "$severity" = "OVERDUE" ]; then
+        echo "| ${source} | ${name} | ${dl} | ${days#-} days ago | ${st} |"
+      fi
+    done
+    echo ""
+  fi
+
+  if [ "$urgent_count" -gt 0 ]; then
+    echo "## URGENT (within ${ALERT_DAYS} days)"
+    echo ""
+    echo "| Source | Name | Deadline | Days Left | Stage/Status |"
+    echo "|--------|------|----------|-----------|--------------|"
+    for alert in "${alerts[@]}"; do
+      IFS='|' read -r severity source name dl days st <<< "$alert"
+      if [ "$severity" = "URGENT" ]; then
+        echo "| ${source} | ${name} | ${dl} | ${days} days | ${st} |"
+      fi
+    done
+    echo ""
+  fi
+
+  if [ "$upcoming_count" -gt 0 ]; then
+    echo "## UPCOMING (${ALERT_DAYS}-$((ALERT_DAYS * 2)) days)"
+    echo ""
+    echo "| Source | Name | Deadline | Days Left | Stage/Status |"
+    echo "|--------|------|----------|-----------|--------------|"
+    for alert in "${alerts[@]}"; do
+      IFS='|' read -r severity source name dl days st <<< "$alert"
+      if [ "$severity" = "UPCOMING" ]; then
+        echo "| ${source} | ${name} | ${dl} | ${days} days | ${st} |"
+      fi
+    done
+    echo ""
+  fi
+} > "$REPORT_FILE"
+
+# Output summary to stdout
+echo "DEADLINES:ALERT:${overdue_count} overdue, ${urgent_count} urgent, ${upcoming_count} upcoming"
+if [ "$overdue_count" -gt 0 ]; then
+  echo "DEADLINE_CRITICAL:${overdue_count} deadlines have passed!"
+fi
+if [ "$urgent_count" -gt 0 ]; then
+  echo "DEADLINE_URGENT:${urgent_count} deadlines within ${ALERT_DAYS} days"
+fi
+echo "REPORT:${REPORT_FILE}"

package/scripts/sentinel-health-check

@@ -0,0 +1,198 @@
+#!/usr/bin/env bash
+# sentinel-health-check: Compare current STATE.md against latest snapshot
+# Detects drift in venture stage, section counts, entry counts, and edge counts
+# Outputs drift report to room/.intelligence/health-YYYY-MM-DD.md
+# Part of Sentinel Intelligence (SENT-01)
+
+set -euo pipefail
+
+# Cross-platform file modification time (epoch seconds)
+portable_stat_mtime() {
+  local file="$1"
+  if [ "$(uname -s)" = "Darwin" ]; then
+    stat -f %m "$file" 2>/dev/null || echo 0
+  else
+    stat -c %Y "$file" 2>/dev/null || echo 0
+  fi
+}
+
+ROOM_DIR="${1:-./room}"
+
+if [ ! -d "$ROOM_DIR" ]; then
+  echo "ERROR: Room directory not found: $ROOM_DIR" >&2
+  exit 1
+fi
+
+if [ ! -f "$ROOM_DIR/STATE.md" ]; then
+  echo "ERROR: No STATE.md found in $ROOM_DIR" >&2
+  exit 1
+fi
+
+# Ensure .intelligence/ directory exists
+INTEL_DIR="$ROOM_DIR/.intelligence"
+mkdir -p "$INTEL_DIR"
+
+# Find latest snapshot
+SNAPSHOTS_DIR="$ROOM_DIR/.snapshots"
+if [ ! -d "$SNAPSHOTS_DIR" ]; then
+  echo "NO_SNAPSHOTS: No previous snapshots found. Run sentinel-snapshot first."
+  echo "Creating initial snapshot now..."
+  SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+  bash "$SCRIPT_DIR/sentinel-snapshot" "$ROOM_DIR"
+  echo "HEALTH_CHECK:BASELINE:First snapshot created. Run health check again next week for drift detection."
+  exit 0
+fi
+
+LATEST_SNAPSHOT=$(find "$SNAPSHOTS_DIR" -name "STATE-*.md" 2>/dev/null | sort -r | head -1)
+
+if [ -z "$LATEST_SNAPSHOT" ]; then
+  echo "NO_SNAPSHOTS: No snapshot files found. Run sentinel-snapshot first."
+  exit 0
+fi
+
+SNAPSHOT_DATE=$(basename "$LATEST_SNAPSHOT" | sed 's/STATE-//' | sed 's/\.md//')
+TODAY=$(date -u +"%Y-%m-%d")
+
+# ── Extract key metrics from current STATE.md ──
+extract_metric() {
+  local file="$1"
+  local pattern="$2"
+  grep -i "$pattern" "$file" 2>/dev/null | head -1 | sed "s/.*${pattern}[[:space:]]*//" | tr -d '"' | xargs || echo ""
+}
+
+extract_count() {
+  local file="$1"
+  local pattern="$2"
+  grep -c "$pattern" "$file" 2>/dev/null || echo "0"
+}
+
+CURRENT="$ROOM_DIR/STATE.md"
+PREVIOUS="$LATEST_SNAPSHOT"
+
+# Extract venture stage
+current_stage=$(extract_metric "$CURRENT" "venture_stage:")
+previous_stage=$(extract_metric "$PREVIOUS" "venture_stage:")
+
+# Count sections with entries (lines matching "entries:" or entry count patterns)
+current_entry_lines=$(grep -E '^\|.*\|.*[0-9]+.*\|' "$CURRENT" 2>/dev/null | wc -l | tr -d ' ')
+previous_entry_lines=$(grep -E '^\|.*\|.*[0-9]+.*\|' "$PREVIOUS" 2>/dev/null | wc -l | tr -d ' ')
+
+# Sanitize a numeric capture to a single-line non-negative integer.
+# grep -c prints "0" AND exits 1 on zero matches, so a "|| echo 0" form would
+# append a SECOND line ("0\n0") and break the $(( )) deltas under set -euo
+# pipefail. Coerce every numeric capture here: strip non-digits, take the first
+# line, default empty to 0. Always exits cleanly so set -e never aborts.
+sanitize_int() {
+  local raw="${1:-}"
+  local n
+  n=$(printf '%s' "$raw" | head -1 | tr -dc '0-9')
+  printf '%s' "${n:-0}"
+}
+
+# Count total entries (sum numbers from entry count patterns)
+current_total_raw=$(grep -oE '[0-9]+ entries' "$CURRENT" 2>/dev/null | grep -oE '[0-9]+' | paste -sd+ | bc 2>/dev/null; true)
+previous_total_raw=$(grep -oE '[0-9]+ entries' "$PREVIOUS" 2>/dev/null | grep -oE '[0-9]+' | paste -sd+ | bc 2>/dev/null; true)
+current_total=$(sanitize_int "$current_total_raw")
+previous_total=$(sanitize_int "$previous_total_raw")
+
+# Count edges/relationships mentioned
+current_edges_raw=$(grep -ciE 'INFORMS|CONTRADICTS|CONVERGES|ENABLES|INVALIDATES' "$CURRENT" 2>/dev/null; true)
+previous_edges_raw=$(grep -ciE 'INFORMS|CONTRADICTS|CONVERGES|ENABLES|INVALIDATES' "$PREVIOUS" 2>/dev/null; true)
+current_edges=$(sanitize_int "$current_edges_raw")
+previous_edges=$(sanitize_int "$previous_edges_raw")
+
+# ── Build drift report ──
+REPORT_FILE="$INTEL_DIR/health-${TODAY}.md"
+
+drift_detected=false
+
+{
+  echo "---"
+  echo "type: health-check"
+  echo "date: ${TODAY}"
+  echo "snapshot_compared: ${SNAPSHOT_DATE}"
+  echo "---"
+  echo ""
+  echo "# Room Health Check - ${TODAY}"
+  echo ""
+  echo "Comparing current STATE.md against snapshot from ${SNAPSHOT_DATE}."
+  echo ""
+  echo "## Venture Stage"
+  echo ""
+
+  if [ "$current_stage" != "$previous_stage" ] && [ -n "$previous_stage" ]; then
+    drift_detected=true
+    echo "DRIFT: Stage changed from **${previous_stage}** to **${current_stage}**"
+  else
+    echo "Stable: ${current_stage:-Unknown}"
+  fi
+
+  echo ""
+  echo "## Entry Counts"
+  echo ""
+
+  entry_delta=$((current_total - previous_total))
+  if [ "$entry_delta" -gt 0 ]; then
+    echo "Growth: +${entry_delta} entries since last snapshot (${previous_total} -> ${current_total})"
+  elif [ "$entry_delta" -lt 0 ]; then
+    drift_detected=true
+    echo "DRIFT: Entry count decreased by ${entry_delta#-} (${previous_total} -> ${current_total})"
+  else
+    echo "No change: ${current_total} entries"
+  fi
+
+  echo ""
+  echo "## Edge Counts"
+  echo ""
+
+  edge_delta=$((current_edges - previous_edges))
+  if [ "$edge_delta" -gt 0 ]; then
+    echo "Growth: +${edge_delta} edges since last snapshot"
+  elif [ "$edge_delta" -lt 0 ]; then
+    drift_detected=true
+    echo "DRIFT: Edge count decreased by ${edge_delta#-}"
+  else
+    echo "No change: ${current_edges} edges"
+  fi
+
+  echo ""
+  echo "## Staleness Check"
+  echo ""
+
+  # Check if STATE.md was modified recently
+  state_mod=$(portable_stat_mtime "$CURRENT")
+  now_epoch=$(date +%s)
+  days_since_mod=$(( (now_epoch - state_mod) / 86400 ))
+
+  if [ "$days_since_mod" -gt 14 ]; then
+    drift_detected=true
+    echo "WARNING: STATE.md not updated in ${days_since_mod} days -- room may be stale"
+  elif [ "$days_since_mod" -gt 7 ]; then
+    echo "NOTE: STATE.md last updated ${days_since_mod} days ago"
+  else
+    echo "Fresh: STATE.md updated within the last week"
+  fi
+
+  echo ""
+  echo "## Summary"
+  echo ""
+
+  if $drift_detected; then
+    echo "HEALTH_STATUS: DRIFT_DETECTED"
+    echo ""
+    echo "Action recommended: Review the changes above and determine if they are intentional."
+  else
+    echo "HEALTH_STATUS: HEALTHY"
+    echo ""
+    echo "Room is stable since last snapshot on ${SNAPSHOT_DATE}."
+  fi
+} > "$REPORT_FILE"
+
+# Output summary to stdout
+if $drift_detected; then
+  echo "HEALTH_CHECK:DRIFT:${TODAY}:Changes detected since ${SNAPSHOT_DATE}"
+else
+  echo "HEALTH_CHECK:HEALTHY:${TODAY}:No significant drift since ${SNAPSHOT_DATE}"
+fi
+
+echo "REPORT:${REPORT_FILE}"

package/scripts/sentinel-snapshot

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+# sentinel-snapshot: Copy room/STATE.md to room/.snapshots/STATE-YYYY-MM-DD.md
+# Creates a point-in-time snapshot for drift detection by sentinel-health-check
+# Part of Sentinel Intelligence (SENT-07)
+
+set -euo pipefail
+
+ROOM_DIR="${1:-./room}"
+
+if [ ! -d "$ROOM_DIR" ]; then
+  echo "ERROR: Room directory not found: $ROOM_DIR" >&2
+  exit 1
+fi
+
+if [ ! -f "$ROOM_DIR/STATE.md" ]; then
+  echo "ERROR: No STATE.md found in $ROOM_DIR" >&2
+  exit 1
+fi
+
+# Ensure .snapshots/ directory exists
+SNAPSHOTS_DIR="$ROOM_DIR/.snapshots"
+mkdir -p "$SNAPSHOTS_DIR"
+
+# Generate snapshot filename with today's date
+TODAY=$(date -u +"%Y-%m-%d")
+SNAPSHOT_FILE="$SNAPSHOTS_DIR/STATE-${TODAY}.md"
+
+# Copy STATE.md to snapshot
+cp "$ROOM_DIR/STATE.md" "$SNAPSHOT_FILE"
+
+echo "SNAPSHOT_CREATED:${SNAPSHOT_FILE}"
+echo "SNAPSHOT_DATE:${TODAY}"
+
+# Clean up old snapshots (keep last 12 weeks)
+SNAPSHOT_COUNT=$(find "$SNAPSHOTS_DIR" -name "STATE-*.md" 2>/dev/null | wc -l | tr -d ' ')
+if [ "$SNAPSHOT_COUNT" -gt 12 ]; then
+  # Remove oldest snapshots beyond the 12-week window
+  find "$SNAPSHOTS_DIR" -name "STATE-*.md" 2>/dev/null | sort | head -n $(( SNAPSHOT_COUNT - 12 )) | while read -r old_snap; do
+    rm "$old_snap"
+    echo "SNAPSHOT_PRUNED:$(basename "$old_snap")"
+  done
+fi

package/scripts/serve-dashboard

@@ -0,0 +1,103 @@
+#!/usr/bin/env bash
+# serve-dashboard: Launch localhost De Stijl dashboard
+# Runs build-graph to generate fresh data, starts Python http.server,
+# opens browser (WSL-aware), and stays alive until Ctrl+C
+
+set -euo pipefail
+
+ROOM_DIR="${ROOM_DIR:-./room}"
+PREFERRED_PORT="${1:-8420}"
+MAX_PORT=8430
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+DASHBOARD_DIR="$(cd "${SCRIPT_DIR}/../dashboard" && pwd)"
+
+# ── Step 1: Resolve room directory (absolute path) ──
+if [ ! -d "$ROOM_DIR" ]; then
+  echo "ERROR: Room directory not found: $ROOM_DIR"
+  echo "Set ROOM_DIR or ensure ./room/ exists in your workspace"
+  exit 1
+fi
+ROOM_DIR="$(cd "$ROOM_DIR" && pwd)"
+
+# ── Step 2: Generate fresh graph data into the dashboard directory ──
+# Phase 162-02 (R4): the dashboard graph.json feed is now SPINE-SOURCED via
+# build-graph-from-sqlite.cjs (navigation.getGraphExport), not the bash
+# scripts/build-graph wikilink/filesystem scanner. One id space, no orphans.
+echo "Building graph data from ${ROOM_DIR}..."
+node "${SCRIPT_DIR}/build-graph-from-sqlite.cjs" "$ROOM_DIR" "${DASHBOARD_DIR}/graph.json"
+
+# ── Step 3: Find available port ──
+# Also generates standalone export alongside the dashboard
+bash "${SCRIPT_DIR}/generate-standalone" "$ROOM_DIR" "${DASHBOARD_DIR}" 2>/dev/null || true
+
+find_port() {
+  local port="$1"
+  local max="$2"
+  while [ "$port" -le "$max" ]; do
+    if python3 -c "import socket; s=socket.socket(); s.bind(('',${port})); s.close()" 2>/dev/null; then
+      echo "$port"
+      return 0
+    fi
+    port=$((port + 1))
+  done
+  return 1
+}
+
+PORT=$(find_port "$PREFERRED_PORT" "$MAX_PORT")
+if [ -z "$PORT" ]; then
+  echo "ERROR: No available port in range ${PREFERRED_PORT}-${MAX_PORT}"
+  exit 1
+fi
+
+# ── Step 4: Start Python http.server in background ──
+SERVER_PID=""
+cleanup() {
+  if [ -n "$SERVER_PID" ] && kill -0 "$SERVER_PID" 2>/dev/null; then
+    kill "$SERVER_PID" 2>/dev/null || true
+    wait "$SERVER_PID" 2>/dev/null || true
+  fi
+  echo ""
+  echo "Dashboard stopped."
+}
+trap cleanup EXIT INT TERM
+
+python3 -m http.server "$PORT" --directory "$DASHBOARD_DIR" &>/dev/null &
+SERVER_PID=$!
+
+# Brief pause to let server start
+sleep 0.5
+
+# Verify server started
+if ! kill -0 "$SERVER_PID" 2>/dev/null; then
+  echo "ERROR: Failed to start server on port ${PORT}"
+  exit 1
+fi
+
+# ── Step 5: Open browser (cross-platform) ──
+URL="http://localhost:${PORT}"
+
+open_browser() {
+  local url="$1"
+  if grep -qi microsoft /proc/version 2>/dev/null; then
+    # WSL: use Windows browser
+    cmd.exe /c start "" "$url" 2>/dev/null || true
+  elif [ "$(uname)" = "Darwin" ]; then
+    open "$url" 2>/dev/null || true
+  elif command -v xdg-open >/dev/null 2>&1; then
+    xdg-open "$url" >/dev/null 2>&1 &
+  else
+    echo "Open ${url} in your browser"
+  fi
+}
+
+open_browser "$URL"
+
+# ── Step 6: Print status ──
+echo ""
+echo "Dashboard running at ${URL} (PID: ${SERVER_PID})"
+echo "Press Ctrl+C to stop"
+echo ""
+
+# ── Step 7: Wait for server process ──
+wait "$SERVER_PID"