@onlooker-community/ecosystem 0.34.0 → 0.43.0

package/plugins/cartographer/scripts/run-audit.sh

@@ -8,7 +8,7 @@
 #   1. discover   — collect all auditable files
 #   2. extract    — per-file content hash (incremental cache key)
 #   3. relate     — contradiction + dead_rule analysis (LLM)
-#   4. synthesize — stale_ref + scope_collision + finding hash computation
+#   4. synthesize — stale_ref + scope_collision + undocumented_entity + hash
 #   5. emit       — persist findings atomically, emit events for new findings
 #
 # Environment:
@@ -28,13 +28,18 @@ source "$PLUGIN_ROOT/scripts/lib/cartographer-config.sh"
 source "$PLUGIN_ROOT/scripts/lib/cartographer-ulid.sh"
 source "$PLUGIN_ROOT/scripts/lib/cartographer-project-key.sh"
 source "$PLUGIN_ROOT/scripts/lib/cartographer-events.sh"
+source "$PLUGIN_ROOT/scripts/lib/cartographer-resolve.sh"
+source "$PLUGIN_ROOT/scripts/lib/cartographer-filter.sh"
 source "$PLUGIN_ROOT/scripts/lib/cartographer-collect.sh"
 source "$PLUGIN_ROOT/scripts/lib/cartographer-analyze.sh"
+source "$PLUGIN_ROOT/scripts/lib/cartographer-omission.sh"
 
 CARTOGRAPHER_DIR="${CARTOGRAPHER_DIR:?CARTOGRAPHER_DIR must be set}"
 TRIGGER="${CARTOGRAPHER_TRIGGER:-manual}"
 TARGET_FILE="${CARTOGRAPHER_TARGET_FILE:-}"
 REPO_ROOT="${CARTOGRAPHER_REPO_ROOT:-$(pwd)}"
+TYPE_FILTER="${CARTOGRAPHER_TYPE_FILTER:-}"
+SCOPE_PATH="${CARTOGRAPHER_SCOPE_PATH:-}"
 AUDIT_ID=$(cartographer_ulid)
 START_TS=$(date +%s)
 
@@ -49,6 +54,16 @@ PHASES_COMPLETED=()
 PHASES_FAILED=()
 ALL_FINDINGS="[]"
 
+# Load config before any accessor runs. Without this every accessor below falls
+# through to its hardcoded default, so exclude_paths, the timeouts, the models,
+# and the token caps were all silently unconfigurable — the orchestrator was the
+# one place that never loaded (ecosystem-88v).
+#
+# This is the single load for the whole audit. The analysis sub-shells take
+# their settings as positional parameters and read no config of their own, so
+# the values resolved here are the ones that take effect everywhere.
+cartographer_config_load "$REPO_ROOT"
+
 _phase_timeout=$(cartographer_config_phase_timeout)
 _total_timeout=$(cartographer_config_total_timeout)
 log() { printf '[cartographer] %s\n' "$*" >>"$CARTOGRAPHER_DIR/audit.log" 2>&1; }
@@ -59,11 +74,36 @@ _model_synthesis=$(cartographer_config_model_synthesis)
 _max_tokens_extraction=$(cartographer_config_max_output_tokens_extraction)
 _max_tokens_synthesis=$(cartographer_config_max_output_tokens_synthesis)
 _exclude_json=$(cartographer_config_exclude_paths)
+_undocumented_enabled=$(cartographer_config_undocumented_enabled)
+_undocumented_globs=$(cartographer_config_undocumented_globs)
+_undocumented_exclude=$(cartographer_config_undocumented_exclude)
+_undocumented_max=$(cartographer_config_undocumented_max_findings)
 
 emit_safe() {
 	cartographer_emit_event "$1" "$2" 2>>"$CARTOGRAPHER_DIR/audit.log" || true
 }
 
+# Announce one finding the resolution sweep retired.
+#
+# Passed to cartographer_resolve_absent_findings by name rather than called
+# after it, so the announcement happens inside the sweep's own guards — a run
+# that must not resolve cannot announce either. Handing over a function name
+# also keeps cartographer-resolve.sh free of any dependency on the event bus.
+_emit_resolved() {
+	emit_safe "cartographer.issue.resolved" \
+		"$(cartographer_issue_resolved_payload "$AUDIT_ID" "$1")"
+}
+
+# Reject an unrecognized type rather than filtering everything away. An empty
+# audit is indistinguishable from a clean repo, so a typo would read as good
+# news — the same class of silent-nothing this flag was filed for.
+if [[ -n "$TYPE_FILTER" ]] && ! cartographer_filter_valid_type "$TYPE_FILTER"; then
+	log "error: unknown type filter '${TYPE_FILTER}' (expected one of: ${CARTOGRAPHER_FINDING_TYPES})"
+	exit 1
+fi
+[[ -n "$TYPE_FILTER" ]] && log "filter type=${TYPE_FILTER}"
+[[ -n "$SCOPE_PATH" ]] && log "filter scope=${SCOPE_PATH}"
+
 # ── Phase 1: Discover ──────────────────────────────────────────────────────────
 run_discover() {
 	log "phase=discover starting"
@@ -82,6 +122,14 @@ run_discover() {
 		GLOBAL_FILES=$(printf '%s\n' "$raw_global" | grep -v '^$' | jq -R . | jq -s .)
 	fi
 
+	# Scope narrows what gets analyzed, not what the repo root is: stale_ref
+	# resolves path tokens against the real root, and re-rooting would make
+	# every reference outside the scope look broken.
+	if [[ -n "$SCOPE_PATH" ]]; then
+		DISCOVERED_FILES=$(cartographer_filter_scope \
+			"$DISCOVERED_FILES" "$REPO_ROOT" "$SCOPE_PATH")
+	fi
+
 	local file_count
 	file_count=$(printf '%s' "$DISCOVERED_FILES" | jq 'length')
 	log "phase=discover files=${file_count}"
@@ -119,11 +167,19 @@ run_extract() {
 # ── Phase 3: Relate (contradiction + dead_rule) ────────────────────────────────
 run_relate() {
 	log "phase=relate starting"
+
+	# One LLM pass emits both contradiction and dead_rule, so asking for either
+	# runs it and the unwanted type is filtered out of the result below.
+	if ! cartographer_filter_wants "contradiction" "$TYPE_FILTER"; then
+		log "phase=relate skipped by type filter"
+		RELATE_FINDINGS="[]"
+		PHASES_COMPLETED+=("relate")
+		return 0
+	fi
+
 	local findings
 	findings=$($_TIMEOUT_CMD "$_phase_timeout" bash -c \
-		"source '$PLUGIN_ROOT/scripts/lib/cartographer-config.sh'
-		 source '$PLUGIN_ROOT/scripts/lib/cartographer-analyze.sh'
-		 cartographer_config_load '$REPO_ROOT'
+		"source '$PLUGIN_ROOT/scripts/lib/cartographer-analyze.sh'
 		 cartographer_analyze_contradiction '$DISCOVERED_FILES' \
 		   '$_model_extraction' '$_max_tokens_extraction' '$_phase_timeout'" \
 		2>>"$CARTOGRAPHER_DIR/audit.log") || {
@@ -131,7 +187,7 @@ run_relate() {
 		PHASES_FAILED+=("relate")
 		return 1
 	}
-	RELATE_FINDINGS="${findings:-[]}"
+	RELATE_FINDINGS=$(cartographer_filter_findings "${findings:-[]}" "$TYPE_FILTER")
 	local count
 	count=$(printf '%s' "$RELATE_FINDINGS" | jq 'length' 2>/dev/null || printf '0')
 	log "phase=relate findings=${count}"
@@ -142,22 +198,39 @@ run_relate() {
 run_synthesize() {
 	log "phase=synthesize starting"
 
-	local stale_findings scope_findings
-	stale_findings=$($_TIMEOUT_CMD "$_phase_timeout" bash -c \
-		"source '$PLUGIN_ROOT/scripts/lib/cartographer-config.sh'
-		 source '$PLUGIN_ROOT/scripts/lib/cartographer-analyze.sh'
-		 cartographer_config_load '$REPO_ROOT'
-		 cartographer_analyze_stale_ref '$DISCOVERED_FILES' '$REPO_ROOT' \
-		   '$_model_synthesis' '$_max_tokens_synthesis' '$_phase_timeout'" \
-		2>>"$CARTOGRAPHER_DIR/audit.log") || stale_findings="[]"
-
-	scope_findings=$($_TIMEOUT_CMD "$_phase_timeout" bash -c \
-		"source '$PLUGIN_ROOT/scripts/lib/cartographer-config.sh'
-		 source '$PLUGIN_ROOT/scripts/lib/cartographer-analyze.sh'
-		 cartographer_config_load '$REPO_ROOT'
-		 cartographer_analyze_scope_collision '$GLOBAL_FILES' '$DISCOVERED_FILES' \
-		   '$_model_synthesis' '$_max_tokens_synthesis' '$_phase_timeout'" \
-		2>>"$CARTOGRAPHER_DIR/audit.log") || scope_findings="[]"
+	# Each analyzer skipped under a type filter is an LLM call not made, which
+	# is where the flag earns its keep.
+	local stale_findings="[]" scope_findings="[]"
+	if cartographer_filter_wants "stale_ref" "$TYPE_FILTER"; then
+		stale_findings=$($_TIMEOUT_CMD "$_phase_timeout" bash -c \
+			"source '$PLUGIN_ROOT/scripts/lib/cartographer-analyze.sh'
+			 cartographer_analyze_stale_ref '$DISCOVERED_FILES' '$REPO_ROOT' \
+			   '$_model_synthesis' '$_max_tokens_synthesis' '$_phase_timeout'" \
+			2>>"$CARTOGRAPHER_DIR/audit.log") || stale_findings="[]"
+	fi
+
+	if cartographer_filter_wants "scope_collision" "$TYPE_FILTER"; then
+		scope_findings=$($_TIMEOUT_CMD "$_phase_timeout" bash -c \
+			"source '$PLUGIN_ROOT/scripts/lib/cartographer-analyze.sh'
+			 cartographer_analyze_scope_collision '$GLOBAL_FILES' '$DISCOVERED_FILES' \
+			   '$_model_synthesis' '$_max_tokens_synthesis' '$_phase_timeout'" \
+			2>>"$CARTOGRAPHER_DIR/audit.log") || scope_findings="[]"
+	fi
+
+	# Disk → doc. Skipped on targeted post-write audits: DISCOVERED_FILES is a
+	# single file there, so grepping it for every entity name would report
+	# nearly the whole enumeration as undocumented, and the emit phase would
+	# dedup-sentinel those false findings permanently. scope_collision already
+	# no-ops on targeted runs for the same reason.
+	local omission_findings="[]"
+	if [[ -z "$TARGET_FILE" && "$_undocumented_enabled" == "true" ]] \
+		&& cartographer_filter_wants "undocumented_entity" "$TYPE_FILTER"; then
+		omission_findings=$($_TIMEOUT_CMD "$_phase_timeout" bash -c \
+			"source '$PLUGIN_ROOT/scripts/lib/cartographer-omission.sh'
+			 cartographer_analyze_undocumented_entity '$DISCOVERED_FILES' '$REPO_ROOT' \
+			   '$_undocumented_globs' '$_undocumented_exclude' '$_undocumented_max'" \
+			2>>"$CARTOGRAPHER_DIR/audit.log") || omission_findings="[]"
+	fi
 
 	# Merge all raw findings
 	local raw_all
@@ -165,7 +238,8 @@ run_synthesize() {
 		--argjson relate "${RELATE_FINDINGS:-[]}" \
 		--argjson stale "${stale_findings:-[]}" \
 		--argjson scope "${scope_findings:-[]}" \
-		'$relate + $stale + $scope')
+		--argjson omission "${omission_findings:-[]}" \
+		'$relate + $stale + $scope + $omission')
 
 	# Add finding_hash to each finding
 	ALL_FINDINGS="[]"
@@ -213,14 +287,11 @@ run_emit() {
 		now=$(date +%s)
 
 		if [[ -f "$dedup_sentinel" ]]; then
-			# Known finding — update last_seen_at atomically, no bus event
+			# Known finding — refresh it atomically, no bus event. Refreshing
+			# also reopens it; see cartographer_refresh_finding for why that is
+			# load-bearing rather than tidiness.
 			(( known_count++ )) || true
-			if [[ -f "$finding_file" ]]; then
-				local updated
-				updated=$(jq --argjson ts "$now" '.last_seen_at=$ts' "$finding_file" 2>/dev/null) || true
-				[[ -n "$updated" ]] && printf '%s\n' "$updated" >"${finding_file}.tmp" \
-					&& mv -f "${finding_file}.tmp" "$finding_file"
-			fi
+			cartographer_refresh_finding "$finding_file" "$now" || true
 		else
 			# New finding — write file atomically, emit bus event, then mark dedup
 			local with_ts
@@ -229,22 +300,20 @@ run_emit() {
 			printf '%s\n' "$with_ts" >"${finding_file}.tmp"
 			mv -f "${finding_file}.tmp" "$finding_file"
 
-			local ftype fseverity ffile_a ffile_b fdesc
-			ftype=$(printf '%s' "$finding" | jq -r '.type // "unknown"')
-			fseverity=$(printf '%s' "$finding" | jq -r '.severity // "warning"')
-			ffile_a=$(printf '%s' "$finding" | jq -r '.file_a // ""')
-			ffile_b=$(printf '%s' "$finding" | jq -r '.file_b // null')
-			fdesc=$(printf '%s' "$finding" | jq -r '.description // ""')
-
-			emit_safe "cartographer.issue.found" "$(jq -n \
-				--arg audit_id "$AUDIT_ID" \
-				--arg finding_hash "$fhash" \
-				--arg finding_type "$ftype" \
-				--arg severity "$fseverity" \
-				--argjson affected_files "$(jq -n --arg a "$ffile_a" --arg b "$ffile_b" \
-					'if $b == "null" or $b == "" then [$a] else [$a,$b] end')" \
-				--arg summary "$fdesc" \
-				'{"audit_id":$audit_id,"finding_hash":$finding_hash,"finding_type":$finding_type,"severity":$severity,"affected_files":$affected_files,"summary":$summary}')"
+			# Branch on the builder rather than passing its output straight
+			# to emit_safe. A typeless finding makes it return non-zero, and
+			# an unchecked substitution would hand emit_safe an empty payload
+			# that cartographer_emit_event rejects silently — relocating the
+			# silence this fix exists to end (ecosystem-ci0). Its stderr is
+			# appended to the same audit.log emit_safe writes to, because the
+			# substitution runs before emit_safe and escapes that redirect.
+			local found_payload
+			if found_payload=$(cartographer_issue_found_payload \
+				"$AUDIT_ID" "$fhash" "$finding" 2>>"$CARTOGRAPHER_DIR/audit.log"); then
+				emit_safe "cartographer.issue.found" "$found_payload"
+			else
+				log "emit: no issue.found for ${fhash} — finding carries no type"
+			fi
 
 			touch "$dedup_sentinel"
 			(( new_count++ )) || true
@@ -253,6 +322,23 @@ run_emit() {
 
 	log "phase=emit new=${new_count} known=${known_count}"
 
+	# Retire findings this run did not observe. Guarded inside against targeted
+	# audits and partial runs, both of which see too little to treat absence as
+	# evidence the drift is gone.
+	local resolved_count
+	resolved_count=$(cartographer_resolve_absent_findings \
+		"$FINDINGS_DIR" "$START_TS" "$TARGET_FILE" "${#PHASES_FAILED[@]}" "" _emit_resolved)
+	log "phase=emit resolved=${resolved_count}"
+
+	# Only a run that actually swept may report a count. A targeted or partial
+	# run leaves the field off entirely rather than reporting 0, which would
+	# read as "swept, found nothing to retire". This asks the same predicate the
+	# sweep guards on, so the two cannot drift apart on what the run proved.
+	local resolved_arg=""
+	if cartographer_resolution_is_sound "$TARGET_FILE" "${#PHASES_FAILED[@]}"; then
+		resolved_arg="$resolved_count"
+	fi
+
 	local end_ts duration_ms total_count
 	end_ts=$(date +%s)
 	duration_ms=$(( (end_ts - START_TS) * 1000 ))
@@ -265,20 +351,17 @@ run_emit() {
 		--arg trigger "$TRIGGER" \
 		--argjson new_finding_count "$new_count" \
 		--argjson known_finding_count "$known_count" \
+		--argjson resolved_finding_count "$resolved_count" \
 		--argjson total_finding_count "$total_count" \
 		--argjson duration_ms "$duration_ms" \
 		--argjson phases_completed "$(printf '%s\n' "${PHASES_COMPLETED[@]}" | jq -R . | jq -s .)" \
 		--argjson phases_failed "$(printf '%s\n' "${PHASES_FAILED[@]:-}" | jq -R . | jq -s .)" \
-		'{"audit_id":$audit_id,"trigger":$trigger,"new_finding_count":$new_finding_count,"known_finding_count":$known_finding_count,"total_finding_count":$total_finding_count,"duration_ms":$duration_ms,"phases_completed":$phases_completed,"phases_failed":$phases_failed}' \
+		'{"audit_id":$audit_id,"trigger":$trigger,"new_finding_count":$new_finding_count,"known_finding_count":$known_finding_count,"resolved_finding_count":$resolved_finding_count,"total_finding_count":$total_finding_count,"duration_ms":$duration_ms,"phases_completed":$phases_completed,"phases_failed":$phases_failed}' \
 		>"${run_file}.tmp" && mv -f "${run_file}.tmp" "$run_file"
 
-	emit_safe "cartographer.audit.complete" "$(jq -n \
-		--arg audit_id "$AUDIT_ID" \
-		--arg trigger "$TRIGGER" \
-		--argjson new_finding_count "$new_count" \
-		--argjson total_finding_count "$total_count" \
-		--argjson duration_ms "$duration_ms" \
-		'{"audit_id":$audit_id,"trigger":$trigger,"new_finding_count":$new_finding_count,"total_finding_count":$total_finding_count,"duration_ms":$duration_ms}')"
+	emit_safe "cartographer.audit.complete" \
+		"$(cartographer_audit_complete_payload \
+			"$AUDIT_ID" "$TRIGGER" "$new_count" "$total_count" "$duration_ms" "$resolved_arg")"
 
 	PHASES_COMPLETED+=("emit")
 }

package/plugins/cartographer/skills/cartographer/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: cartographer
-description: Audit CLAUDE.md, AGENTS.md, and .claude/rules/ instruction files for contradictions, stale references, dead rules, and scope collisions. Runs a full audit in the foreground (with lock). Use when the user explicitly invokes /cartographer, or when they want immediate feedback after editing an instruction file. Supports --scope, --phase, --verbose, --status, and --force flags.
+description: Audit CLAUDE.md, AGENTS.md, and .claude/rules/ instruction files for contradictions, stale references, dead rules, scope collisions, and entities no instruction file mentions. Runs a full audit in the foreground (with lock). Use when the user explicitly invokes /cartographer, or when they want immediate feedback after editing an instruction file. Supports --scope, --type, --verbose, --status, and --force flags.
 ---
 
 # Cartographer Skill
@@ -55,14 +55,15 @@ After the audit completes, read findings and render them to the conversation gro
 
 ### `/cartographer --verbose` — all findings
 
-Shows ALL known findings (new + previously seen) from `$CARTOGRAPHER_DIR/findings/`. Does NOT re-emit bus events — renders to in-conversation output only.
+Shows ALL known findings (new + previously seen) from `$CARTOGRAPHER_DIR/findings/`, including ones already resolved — that is what makes this the verbose view. Resolved findings are tagged so "did my fix take?" is answerable here. Does NOT re-emit bus events — renders to in-conversation output only.
 
 ```bash
 echo "## Known Cartographer Findings"
 echo ""
 for f in "$CARTOGRAPHER_DIR/findings/"*.json; do
   [[ -f "$f" ]] || continue
-  jq -r '"**[\(.severity | ascii_upcase)]** \(.type) — \(.description)\n  Files: \(.file_a // "n/a") / \(.file_b // "n/a")\n  Fix: \(.suggested_fix // "n/a")\n"' "$f" 2>/dev/null
+  jq -r '(if .resolved == true then "[RESOLVED] " else "" end) as $r |
+    "\($r)**[\(.severity | ascii_upcase)]** \(.type) — \(.description)\n  Files: \(.file_a // "n/a") / \(.file_b // "n/a")\n  Fix: \(.suggested_fix // "n/a")\n"' "$f" 2>/dev/null
 done
 ```
 
@@ -86,7 +87,10 @@ fi
 
 runs=$(ls "$CARTOGRAPHER_DIR/runs/" 2>/dev/null | wc -l | tr -d ' ')
 total=$(ls "$CARTOGRAPHER_DIR/findings/" 2>/dev/null | wc -l | tr -d ' ')
-echo "Total findings on disk: $total"
+open=$(cat "$CARTOGRAPHER_DIR/findings/"*.json 2>/dev/null \
+  | jq -s '[.[] | select(.resolved != true)] | length' 2>/dev/null || echo 0)
+echo "Open findings: $open"
+echo "Total findings on disk: $total (includes resolved)"
 echo "Audit runs recorded: $runs"
 ```
 
@@ -107,18 +111,37 @@ fi
 # Then proceed as a normal full audit
 ```
 
-### `/cartographer --phase=<phase>` — single phase
+### `/cartographer --type=<type>` — single finding type
 
-Runs only one analysis phase: `contradiction`, `stale_ref`, `dead_rule`, or `scope_collision`.
-Pass `CARTOGRAPHER_PHASE_FILTER` to run-audit.sh (the script checks this env var and skips other phases).
+Narrows the audit to one finding type: `contradiction`, `dead_rule`, `stale_ref`, `scope_collision`, or `undocumented_entity`. Export `CARTOGRAPHER_TYPE_FILTER` before running.
+
+```bash
+export CARTOGRAPHER_TYPE_FILTER="stale_ref"
+```
+
+Analyzers that cannot produce the requested type are skipped entirely, so this is cheaper than a full audit — each skipped analyzer is an LLM call not made. Useful for re-checking one class of drift after fixing it without paying for the rest.
+
+One caveat, because the saving is not uniform: `contradiction` and `dead_rule` come out of a single LLM pass, so asking for either runs that pass and discards the other type from the results. Requesting one of those two costs the same as running both; the other three types are genuinely skippable.
+
+An unrecognized type is an error rather than a filter that matches nothing — an empty audit looks exactly like a clean repo, so a typo would read as good news.
 
 ### `/cartographer --scope=<path>` — scoped audit
 
-Limits discovery to files under `<path>`. Set `CARTOGRAPHER_SCOPE_PATH` before running.
+Limits analysis to instruction files under `<path>`, relative to the repo root or absolute. Export `CARTOGRAPHER_SCOPE_PATH` before running.
+
+```bash
+export CARTOGRAPHER_SCOPE_PATH="plugins/tribunal"
+```
+
+The scope narrows which files are analyzed; it does not become the repo root. `stale_ref` resolves path-like tokens against the real root, and re-rooting would report every reference outside the scope as broken.
+
+Both flags compose, and both apply to manual runs only — the SessionStart and PostToolUse hooks always run unfiltered.
 
 ## Rendering Findings
 
-After a manual audit completes, render findings grouped by severity:
+After a manual audit completes, render findings grouped by severity. Resolved
+findings are skipped — a finding whose drift the user already fixed must stop
+appearing here, or the advice to fix it never stops being given:
 
 ```bash
 echo "## Cartographer Findings"
@@ -129,6 +152,7 @@ for severity in error warning informational; do
   output=""
   for f in "$CARTOGRAPHER_DIR/findings/"*.json; do
     [[ -f "$f" ]] || continue
+    jq -e '.resolved != true' "$f" >/dev/null 2>&1 || continue
     fsev=$(jq -r '.severity // "warning"' "$f" 2>/dev/null)
     [[ "$fsev" != "$severity" ]] && continue
     (( count++ )) || true

package/plugins/curator/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "curator",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Maintenance layer for the user's typed auto-memory store. At every SessionStart, runs four cheap heuristic checks (date_decayed, path_broken, broken_index, orphaned_memory) against the memories at ~/.claude/projects/<encoded>/memory/ inside a wall-clock budget. Surfaces findings as a one-line pointer to /curator review; never edits the memory store directly. Builds on the Onlooker ecosystem plugin.",
   "author": {
     "name": "Onlooker Community",

package/plugins/curator/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.2.3](https://github.com/onlooker-community/ecosystem/compare/curator-v0.2.2...curator-v0.2.3) (2026-08-10)
+
+
+### Bug Fixes
+
+* make the local bats suite tell the truth :mag: ([#135](https://github.com/onlooker-community/ecosystem/issues/135)) ([f0763e0](https://github.com/onlooker-community/ecosystem/commit/f0763e09f3caf2d39c89f28befd12567af0af845))
+
 ## [0.2.2](https://github.com/onlooker-community/ecosystem/compare/curator-v0.2.1...curator-v0.2.2) (2026-08-02)
 
 

package/plugins/curator/scripts/lib/curator-emit.sh

@@ -39,7 +39,8 @@ _CURATOR_EVENT_JS="${_CURATOR_EVENT_JS:-$(_curator_resolve_event_js)}"
 curator_emit() {
 	local event_type="${1:-}"
 	local session_id="${2:-}"
-	local payload="${3:-{\}}"
+	local payload="${3:-}"
+	[ -z "$payload" ] && payload='{}'
 
 	[[ -z "$event_type" || -z "$session_id" ]] && return 0
 	[[ -z "$_CURATOR_EVENT_JS" || ! -f "$_CURATOR_EVENT_JS" ]] && return 0

package/plugins/historian/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "historian",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Episodic memory layer. At SessionEnd, chunks and sanitizes the session transcript and stores chunks under $ONLOOKER_DIR/historian/<project-key>/sessions/ (default $HOME/.onlooker). On UserPromptSubmit, embeds the prompt and performs similarity retrieval over stored chunks to surface relevant past context. Builds on the Onlooker ecosystem plugin.",
   "author": {
     "name": "Onlooker Community",

package/plugins/historian/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.3.3](https://github.com/onlooker-community/ecosystem/compare/historian-v0.3.2...historian-v0.3.3) (2026-08-10)
+
+
+### Bug Fixes
+
+* make the local bats suite tell the truth :mag: ([#135](https://github.com/onlooker-community/ecosystem/issues/135)) ([f0763e0](https://github.com/onlooker-community/ecosystem/commit/f0763e09f3caf2d39c89f28befd12567af0af845))
+
 ## [0.3.2](https://github.com/onlooker-community/ecosystem/compare/historian-v0.3.1...historian-v0.3.2) (2026-08-01)
 
 

package/plugins/historian/scripts/lib/historian-emit.sh

@@ -39,7 +39,8 @@ _HISTORIAN_EVENT_JS="${_HISTORIAN_EVENT_JS:-$(_historian_resolve_event_js)}"
 historian_emit() {
 	local event_type="${1:-}"
 	local session_id="${2:-}"
-	local payload="${3:-{\}}"
+	local payload="${3:-}"
+	[ -z "$payload" ] && payload='{}'
 
 	[[ -z "$event_type" || -z "$session_id" ]] && return 0
 	[[ -z "$_HISTORIAN_EVENT_JS" || ! -f "$_HISTORIAN_EVENT_JS" ]] && return 0

package/plugins/librarian/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "librarian",
-  "version": "0.7.0",
+  "version": "0.13.2",
   "description": "Consolidation layer between archivist's per-session artifacts and the user's durable typed memory store. Detects which session decisions, dead-ends, and open questions deserve to live across sessions, classifies them into the user/feedback/project/reference types, and queues them as proposals for explicit confirmation. Auto-promotion is opt-in. Builds on the Onlooker ecosystem plugin.",
   "author": {
     "name": "Onlooker Community",

package/plugins/librarian/CHANGELOG.md

@@ -1,5 +1,76 @@
 # Changelog
 
+## [0.13.2](https://github.com/onlooker-community/ecosystem/compare/librarian-v0.13.1...librarian-v0.13.2) (2026-08-18)
+
+
+### Bug Fixes
+
+* **librarian:** put budget skips on the bus at last :satellite: ([#180](https://github.com/onlooker-community/ecosystem/issues/180)) ([bc91749](https://github.com/onlooker-community/ecosystem/commit/bc917495dab053cba825ea28ccdd1993fdacb3e9))
+* **librarian:** stop stage 5 from holding a session open :hourglass: ([#178](https://github.com/onlooker-community/ecosystem/issues/178)) ([4f12a1e](https://github.com/onlooker-community/ecosystem/commit/4f12a1ee25300e0dc372542814e0922df5dbd335))
+
+## [0.13.1](https://github.com/onlooker-community/ecosystem/compare/librarian-v0.13.0...librarian-v0.13.1) (2026-08-15)
+
+
+### Bug Fixes
+
+* **librarian:** make proposals the sole dedup source, and say so :broom: ([#156](https://github.com/onlooker-community/ecosystem/issues/156)) ([729d9ea](https://github.com/onlooker-community/ecosystem/commit/729d9ea3e328c2734712cfc5adf556c6798334aa))
+
+## [0.13.0](https://github.com/onlooker-community/ecosystem/compare/librarian-v0.12.1...librarian-v0.13.0) (2026-08-15)
+
+
+### Features
+
+* **tribunal,librarian:** make rubric weights and min_pass floors real :straight_ruler: ([#150](https://github.com/onlooker-community/ecosystem/issues/150)) ([f8f8e28](https://github.com/onlooker-community/ecosystem/commit/f8f8e28b60f6d13d5a2a54e26ca284137b77f99a))
+
+## [0.12.1](https://github.com/onlooker-community/ecosystem/compare/librarian-v0.12.0...librarian-v0.12.1) (2026-08-14)
+
+
+### Bug Fixes
+
+* **librarian:** close four follow-up defects from the promotion epic :broom: ([#148](https://github.com/onlooker-community/ecosystem/issues/148)) ([895df74](https://github.com/onlooker-community/ecosystem/commit/895df7430fa8ba75976d38964d061c21bff785d3))
+
+## [0.12.0](https://github.com/onlooker-community/ecosystem/compare/librarian-v0.11.0...librarian-v0.12.0) (2026-08-13)
+
+
+### Features
+
+* **librarian:** land judged lessons in the approved pool :package: ([#146](https://github.com/onlooker-community/ecosystem/issues/146)) ([f7adc72](https://github.com/onlooker-community/ecosystem/commit/f7adc7263a985d4cb7695b46d6f9dbab77dce587))
+
+## [0.11.0](https://github.com/onlooker-community/ecosystem/compare/librarian-v0.10.0...librarian-v0.11.0) (2026-08-13)
+
+
+### Features
+
+* **librarian:** derive an author identity that cannot be linked across scopes :closed_lock_with_key: ([#144](https://github.com/onlooker-community/ecosystem/issues/144)) ([29b3042](https://github.com/onlooker-community/ecosystem/commit/29b3042ef6cd6e7582206cfea6fcf37ebe661021))
+
+## [0.10.0](https://github.com/onlooker-community/ecosystem/compare/librarian-v0.9.0...librarian-v0.10.0) (2026-08-12)
+
+
+### Features
+
+* **librarian:** judge lessons before they leave the machine :balance_scale: ([#142](https://github.com/onlooker-community/ecosystem/issues/142)) ([a877527](https://github.com/onlooker-community/ecosystem/commit/a87752714961613b6b2bb768239c666f78d950f8))
+
+## [0.9.0](https://github.com/onlooker-community/ecosystem/compare/librarian-v0.8.0...librarian-v0.9.0) (2026-08-11)
+
+
+### Features
+
+* **librarian:** let a human take back a lesson confirmation :leftwards_arrow_with_hook: ([#139](https://github.com/onlooker-community/ecosystem/issues/139)) ([a4c4ac8](https://github.com/onlooker-community/ecosystem/commit/a4c4ac8ed5b79f5596f4e22abd1d23a8b0d3e834))
+
+## [0.8.0](https://github.com/onlooker-community/ecosystem/compare/librarian-v0.7.1...librarian-v0.8.0) (2026-08-11)
+
+
+### Features
+
+* **librarian:** let a human decide what leaves the machine :raised_hand: ([#137](https://github.com/onlooker-community/ecosystem/issues/137)) ([16d7673](https://github.com/onlooker-community/ecosystem/commit/16d76734833aee9c8818f84c1c1f704be4cdfc33))
+
+## [0.7.1](https://github.com/onlooker-community/ecosystem/compare/librarian-v0.7.0...librarian-v0.7.1) (2026-08-10)
+
+
+### Bug Fixes
+
+* make the local bats suite tell the truth :mag: ([#135](https://github.com/onlooker-community/ecosystem/issues/135)) ([f0763e0](https://github.com/onlooker-community/ecosystem/commit/f0763e09f3caf2d39c89f28befd12567af0af845))
+
 ## [0.7.0](https://github.com/onlooker-community/ecosystem/compare/librarian-v0.6.1...librarian-v0.7.0) (2026-08-09)
 
 

package/plugins/librarian/config.json

@@ -18,7 +18,36 @@
     },
     "lesson_transform": {
       "model": "claude-haiku-4-5-20251001",
-      "timeout_seconds": 20
+      "timeout_seconds": 20,
+      "total_budget_ms": 8000
+    },
+    "lesson_judging": {
+      "min_criterion_coverage": 0.6,
+      "rubrics": [
+        {
+          "id": "lesson-promotion",
+          "criteria": [
+            { "name": "grounding", "weight": 0.45, "min_pass": 0.7 },
+            { "name": "scope_accuracy", "weight": 0.35, "min_pass": 0.7 },
+            { "name": "generality", "weight": 0.2, "min_pass": 0.6 }
+          ],
+          "score_threshold": 0.75,
+          "judge_types": ["standard", "adversarial"],
+          "gate_policy": "majority"
+        },
+        {
+          "id": "lesson-promotion-public",
+          "criteria": [
+            { "name": "grounding", "weight": 0.32, "min_pass": 0.7 },
+            { "name": "scope_accuracy", "weight": 0.24, "min_pass": 0.7 },
+            { "name": "generality", "weight": 0.14, "min_pass": 0.6 },
+            { "name": "disclosure", "weight": 0.3, "min_pass": 0.9 }
+          ],
+          "score_threshold": 0.75,
+          "judge_types": ["standard", "adversarial"],
+          "gate_policy": "majority"
+        }
+      ]
     },
     "durability_filter": {
       "marker_phrases": [