@r1z4x/tezgah 1.0.0 → 1.2.0

package/CHANGELOG.md

@@ -6,6 +6,95 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [1.2.0] - 2026-10-07
+
+### Added
+
+- **Taste learns and applies, not only records.** Arm it with `taste-on`.
+  `tezgah-taste learn` then turns each correction after a writing turn into one
+  typed decision, and only TypeSafe may give it. The decision names a
+  preference, a defect or neither. It picks one of eleven fixed categories and
+  a scope, and relates the correction to each learning already held. A ledger
+  computes each learning's confidence from its evidence and forgets it over
+  time. A contradiction flags a learning and never overwrites it. A learning
+  goes active in its second session. Session start injects active learnings as
+  rules or hints. Every host notes the in-scope ones on a write, each once per
+  session. A rule needs a measured calibration bound. A defect never enters the
+  ledger. A before/after gate stops injection when corrections do not fall.
+  `list`, `accept`, `reject`, `edit` and `export` give the user control, and
+  `learn --from-transcripts` bootstraps from history. The judge seam gains
+  `only=` and a `text` question. Two commands never rewrite the ledger at once:
+  a second `learn`, `accept`, `reject` or `edit` exits 2 while one runs.
+
+## [1.1.0] - 2026-10-07
+
+### Added
+
+- **Parallel by default.** A prompt with two or more independent items arms a
+  fan-out rule. One batch of subagents runs, one worktree per writing slice,
+  and the main thread integrates. Five specialist agents join the roster:
+  `tezgah-tester`, `tezgah-docs`, `tezgah-security`, `tezgah-ui` and
+  `tezgah-researcher`. `tezgah-agents --list` prints each with its tier,
+  skills and tools.
+- **tezgah detects an Orca session** (`hooks/tezgah_orca.py`). Inside Orca a slice
+  checkout goes through `orca worktree create`, and `tezgah-status --orca`
+  lists the checkouts Orca tracks and the git worktrees it does not.
+  `docs/orca.md` maps what Orca owns and what tezgah owns.
+- **`tezgah-doctor --stack`** prints each host's effective stack: context
+  files in load order, skill dirs and which copy wins, hooks per event, MCP
+  servers. It flags duplicate or stale skills, doubled hooks and rules, and
+  backups inside a scanned dir. `docs/hosts.md` holds the precedence table.
+- **`tezgah-skill <words>`** searches every installed skill by section and
+  returns `skill://<name>:<start>-<end>` plus the file path. Every session is
+  told to use it. A local, model-free hint is on by default: when a prompt's
+  terms match one section well enough, the turn names that section once. The
+  armed judge hint names the section too, not only the skill.
+- **`tezgah-status --judge`** shows what the judgement seam used last, and why
+  it was not the session's own model when it was not.
+
+### Fixed
+
+- **The judgement seam asks the session's own CLI first.** It used a third
+  party (TypeSafe, then OpenRouter) even when the session's frontier
+  credential was there. A third party now answers only as the `fallback`
+  setting in `config.json` allows. The default is `vendor`: no cross-vendor
+  stand-in while a session CLI exists. Every stand-in or refusal is said on
+  stderr and recorded. omp subagent chains stay inside the session vendor by
+  default too.
+- **Research stays on the question asked.** A line records its scope (`--in`,
+  `--out`) and its method (`--method qualitative|measured`). A qualitative
+  line owes no metric. Every claim must trace to a scope item. An analysis no
+  longer owes three variants. A plain factual question gets an answer from
+  primary sources, with no experiment line.
+- **Ponytail and adhd are in force from the first turn.** Their operative rules
+  ride the always-on contract instead of a "read the skill later" pointer.
+- **The graph engages.** A stale index stamp now starts a background re-index.
+  It no longer tells the session to fall back to text search. omp's `find`,
+  `search` and `ast_grep` reach the gate. The graph nudge fires on
+  symbol-shaped searches only, not on plain words, and honours `.no-graph`.
+  The session line names the host's own graph tool.
+- **A prose edit owes no check.** The Stop rule no longer counts a `.md`,
+  `.rst` or `.adoc` edit outside the instruction files as work. Such an edit
+  neither demands a check nor makes an earlier pass stale. Refusals ask for
+  the smallest check that proves the change.
+- **`tests/impacted.py` maps a host file to the modules that name it**, not to
+  nearly the whole suite.
+- **Host-file backups leave the dirs a host scans.** They go to
+  `~/.config/tezgah/backups/`, and `--install` sweeps the old ones. Cursor gets
+  each tezgah skill from one dir, not two. `--sync` refreshes only the plugin
+  copy Claude loads.
+
+### Changed
+
+- **A release run skips the serial suite.** `release.yml` calls CI with
+  `release: true`. One 3.10 `test` leg then runs compile, lint and the citation
+  audit, and `test-sharded` runs the suite.
+- **CI runs less.** It runs on pushes to `main`, on pull requests and by hand.
+  A newer run cancels an older one on the same ref, and every job has a
+  timeout. A docs-only change runs only the citations audit and its impacted
+  tests. The `test` matrix is 3.10 and 3.14. A pull request runs the impacted
+  set. `main` and a release run the whole suite.
+
 ## [1.0.0] - 2026-10-07
 
 ### Upgrade note
@@ -734,5 +823,7 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
   the copy could not find `hooks/` and died on import. It now links into the
   installed tree, and also installs the command as `tezgah`.
 
-[Unreleased]: https://github.com/r1z4x/tezgah/compare/v1.0.0...HEAD
+[Unreleased]: https://github.com/r1z4x/tezgah/compare/v1.2.0...HEAD
+[1.2.0]: https://github.com/r1z4x/tezgah/releases/tag/v1.2.0
+[1.1.0]: https://github.com/r1z4x/tezgah/releases/tag/v1.1.0
 [1.0.0]: https://github.com/r1z4x/tezgah/releases/tag/v1.0.0

package/MANIFEST

@@ -74,6 +74,8 @@ bin/tezgah-route
 bin/tezgah-route.py
 bin/tezgah-setup
 bin/tezgah-setup.py
+bin/tezgah-skill
+bin/tezgah-skill.py
 bin/tezgah-status
 bin/tezgah-status.py
 bin/tezgah-task
@@ -101,6 +103,7 @@ docs/judge.md
 docs/layers.md
 docs/models.md
 docs/operations.md
+docs/orca.md
 docs/research.md
 docs/results/paired-outcome-2026-10.jsonl
 docs/results/paired-outcome-2026-10.md
@@ -128,6 +131,7 @@ hooks/tezgah_judge.py
 hooks/tezgah_lang.py
 hooks/tezgah_lessons.py
 hooks/tezgah_models.py
+hooks/tezgah_orca.py
 hooks/tezgah_paths.py
 hooks/tezgah_policy.py
 hooks/tezgah_rank.py
@@ -136,9 +140,11 @@ hooks/tezgah_research.py
 hooks/tezgah_shapes.py
 hooks/tezgah_skill_pick.py
 hooks/tezgah_snapshot.py
+hooks/tezgah_stack.py
 hooks/tezgah_stopspec.py
 hooks/tezgah_task.py
 hooks/tezgah_taste.py
+hooks/tezgah_taste_ledger.py
 hooks/tezgah_untrusted.py
 hooks/tezgah_update.py
 hosts/codex/hook.py
@@ -719,6 +725,7 @@ tests/test_neuter_matrix.py
 tests/test_omp_extension.py
 tests/test_omp_hook.py
 tests/test_opencode_plugin.py
+tests/test_orca.py
 tests/test_packaging.py
 tests/test_packaging_scripts.py
 tests/test_paths.py
@@ -735,8 +742,10 @@ tests/test_research_seal.py
 tests/test_setup.py
 tests/test_shapes.py
 tests/test_skill_pick.py
+tests/test_skill_search.py
 tests/test_skills.py
 tests/test_snapshot.py
+tests/test_stack.py
 tests/test_statusline.py
 tests/test_stop_after_block.py
 tests/test_stopspec.py
@@ -744,6 +753,7 @@ tests/test_switch_latching.py
 tests/test_task.py
 tests/test_taste.py
 tests/test_taste_cli.py
+tests/test_taste_ledger.py
 tests/test_tezgah_mcp_wiring.py
 tests/test_triage.py
 tests/test_untrusted.py

package/bin/tezgah-agents

@@ -1,6 +1,8 @@
 #!/usr/bin/env python3
 """tezgah-agents [PATH]      generate/refresh this repo's tezgah subagent set.
 tezgah-agents --json [PATH] print the opencode `config.agent` entries as JSON.
+tezgah-agents --list       print every role: name, tier, read-only or writing,
+                           and its description (skills and tools included).
 
 The hook hosts run the plain form from SessionStart via the shared context
 (tezgah_context calls tezgah_agents.sync_root). opencode has no such hook, so
@@ -14,7 +16,8 @@ import sys
 
 HERE = os.path.dirname(os.path.dirname(os.path.realpath(__file__)))
 sys.path.insert(0, os.path.join(HERE, "hooks"))
-from tezgah_agents import opencode_agents_json, sync_root  # noqa: E402
+from tezgah_agents import ROLES, opencode_agents_json, sync_root  # noqa: E402
+from tezgah_models import AGENT_SLOT  # noqa: E402
 from tezgah_context import repo_root, under  # noqa: E402
 
 
@@ -25,6 +28,12 @@ def main():
     if "-h" in args or "--help" in args:
         print(__doc__.strip())
         return 0
+    if "--list" in args:
+        for name, desc, _cap, _body, readonly in ROLES:
+            print("%s  tier=%s  %s\n  %s" % (
+                name, AGENT_SLOT.get(name, "-"),
+                "read-only" if readonly else "writes", desc))
+        return 0
     as_json = "--json" in args
     args = [a for a in args if a != "--json"]
     cwd = os.path.realpath(args[0] if args else os.getcwd())

package/bin/tezgah-docs

@@ -106,7 +106,7 @@ RUN = re.compile(r"((?:`[A-Za-z_][A-Za-z0-9_]*(?:\(\))?`\s*[/,]?\s*){1,5})$")
 CITE = re.compile(r"`([\w.-]+(?:/[\w.-]+)+|[\w-]+\.\w+):(\d+)(?:-(\d+))?`"
                   r"|`(:(\d+)(?:-(\d+))?)`")
 # The symbol written after the citation instead of before it, the way a table
-# cell reads: `hooks/tezgah_policy.py:634-853` (`CORE`).
+# cell reads: `hooks/tezgah_policy.py:667-928` (`CORE`).
 AFTER = re.compile(r"\s*\(`([A-Za-z_][A-Za-z0-9_]*)(?:\(\))?`\)")
 # Any `path:line`, backticked or not: what CITE does not match of these (a
 # bare token, a comma list `x.py:12,40`) is counted as unjudged, so a citation

package/bin/tezgah-doctor

@@ -410,6 +410,10 @@ def main():
     ap.add_argument("--json", action="store_true", help="machine-readable report")
     ap.add_argument("--coverage", action="store_true",
                     help="the tracked files the graph index does not hold (exits 0)")
+    ap.add_argument("--stack", action="store_true",
+                    help="per host: context files, skills and which copy wins, "
+                         "hooks per event, MCP servers, and the conflicts "
+                         "(exits 1 when any conflict is found)")
     ap.add_argument("--repo", action="append", metavar="PATH",
                     help="a repository to account for instead of the configured "
                          "roots (repeatable; --coverage reports the first)")
@@ -435,6 +439,13 @@ def main():
         repo = os.path.realpath(os.path.expanduser(args.repo[0]) if args.repo
                                 else os.getcwd())
         return coverage_report(repo, args.dump)
+    if args.stack:
+        import tezgah_stack
+        repo = os.path.realpath(os.path.expanduser(args.repo[0]) if args.repo
+                                else os.getcwd())
+        data = tezgah_stack.report(repo)
+        print(json.dumps(data, indent=2) if args.json else tezgah_stack.render(data))
+        return 1 if any(s["conflicts"] for s in data.values()) else 0
 
     pairs = targets(args.repo)
     rep = collect(pairs)

package/bin/tezgah-research

@@ -1,8 +1,9 @@
 #!/usr/bin/env python3
 """tezgah-research - the research workspace CLI.
 
-  tezgah-research init <slug> [--question "..."] [--allow-open "<why>"]
-                       [--supersedes <slug>]              scaffold a line
+  tezgah-research init <slug> --ask "<the user's words>" [--question "..."]
+                       [--method qualitative|measured] [--in "<covered>"]... [--out "<left alone>"]...
+                       [--allow-open "<why>"] [--supersedes <slug>]   scaffold a line
   tezgah-research commit <slug> "<message>"       commit the line in .tezgah's own repo
   tezgah-research check [<slug>] [--json] [--strict] [--orx] [--all-lines] [-- <slug>]
                                                    the discipline checks
@@ -136,7 +137,7 @@ def cmd_init(args):
         return misuse("init <slug>: %r is not a slug - lowercase letters, digits "
                       "and dashes" % args[0])
     question, allow, supersedes = "", None, None
-    ask, tier = "", str(tr.DEFAULT_TIER)
+    ask, tier, method, scope_in, scope_out = "", str(tr.DEFAULT_TIER), "", [], []
     rest = args[1:]
     while rest:
         flag = rest.pop(0)
@@ -146,13 +147,21 @@ def cmd_init(args):
             ask = rest.pop(0)
         elif flag == "--tier" and rest:
             tier = rest.pop(0)
+        elif flag == "--method" and rest and rest[0] in tr.METHODS:
+            method = rest.pop(0)
+        elif flag == "--in" and rest:
+            scope_in.append(rest.pop(0))
+        elif flag == "--out" and rest:
+            scope_out.append(rest.pop(0))
         elif flag == "--allow-open" and rest:
             allow = rest.pop(0)
         elif flag == "--supersedes" and rest:
             supersedes = rest.pop(0)
         else:
             return misuse('init <slug> --ask "<the user\'s words>" [--tier quick|study|program]'
-                          ' [--question "..."] [--allow-open "<reason>"] [--supersedes <slug>]')
+                          ' [--method qualitative|measured] [--in "<covered>"]...'
+                          ' [--out "<left alone>"]... [--question "..."]'
+                          ' [--allow-open "<reason>"] [--supersedes <slug>]')
     problems = tr.ask_problems(ask, tier)
     if problems:
         for problem in problems:
@@ -196,7 +205,8 @@ def cmd_init(args):
         return 1
     created = time.strftime("%Y-%m-%d")
     made = tr.init(repo, slug, question=question, created=created,
-                   supersedes=supersedes, ask=ask, tier=tier)
+                   supersedes=supersedes, ask=ask, tier=tier, method=method,
+                   scope_in=scope_in, scope_out=scope_out)
     if allow is not None:
         problem = tr.note_open(repo, slug, allow, created)
         if problem:
@@ -205,15 +215,22 @@ def cmd_init(args):
     print("research line: %s" % tr.line_dir(repo, slug))
     for path in made:
         print("  wrote %s" % path)
-    print("\nnext: write experiments/<hypothesis>/protocol.md - what the change is, "
-          "what it predicts, what result would falsify it, why - and COMMIT it "
-          "before the run: `tezgah-research commit %s \"protocol <hypothesis>\"`. "
-          "Then record the run in results.jsonl and commit it the same way, in a "
-          "later commit. The commits land in `.tezgah`'s own git repository (the "
-          "project ignores `.tezgah/`); `git -C .tezgah add ... && git -C .tezgah "
-          "commit` is the same step by hand. Then analyse it in analysis.md, and "
-          "put the claim in claims.jsonl with its kind, falsification criterion and "
-          "evidence." % slug)
+    for problem in tr.scope_problems(tr.line_state(repo, slug)):
+        print("  owed: %s" % problem)
+    if method == "qualitative":
+        print("\nnext: read the primary sources for each state.json scope.in item "
+              "(`orx discover`, `orx paper`), save each to literature/ as you read "
+              "it, and record every claim with a `trace` naming the S<n> it answers "
+              "and the source it rests on. No experiment, no metric.")
+    else:
+        print("\nnext: write experiments/<hypothesis>/protocol.md - what the change "
+              "is, what it predicts, what result would falsify it, why - and COMMIT "
+              "it before the run: `tezgah-research commit %s \"protocol "
+              "<hypothesis>\"`. Then record the run in results.jsonl and commit it "
+              "the same way, in a later commit. The commits land in `.tezgah`'s own "
+              "git repository (the project ignores `.tezgah/`). Then analyse it in "
+              "analysis.md, and put the claim in claims.jsonl with its kind, "
+              "falsification criterion, evidence and the S<n> it traces to." % slug)
     print("kill switch: research-off")
     return 0
 

package/bin/tezgah-setup

@@ -54,6 +54,7 @@ _TREE = os.path.dirname(os.path.dirname(os.path.realpath(__file__)))
 sys.path.insert(0, os.path.join(_TREE, "hooks"))
 import tezgah_apps  # noqa: E402
 import tezgah_context  # noqa: E402
+import tezgah_orca  # noqa: E402
 import tezgah_paths as tp  # noqa: E402
 import tezgah_policy as policy  # noqa: E402
 import tezgah_agents  # noqa: E402
@@ -465,8 +466,9 @@ def hook_entries(hosts):
 
 def link(src, dst):
     """Idempotent symlink - or, where this platform refuses one, an entry
-    materialised in place. A real file in the way is kept as <dst>.tezgah-bak
-    and replaced, so an old shim (codex/bin/consult) does not block the build."""
+    materialised in place. A real file in the way is kept as
+    `<backup_base(dst)>.tezgah-bak` and replaced, so an old shim
+    (codex/bin/consult) does not block the build."""
     if is_tezgah_copy(dst):
         # tezgah's own materialised entry from an earlier symlink-less run: it
         # is replaced, not reported as a user's file and not left pointing at a
@@ -480,8 +482,10 @@ def link(src, dst):
         os.unlink(dst)
     elif os.path.exists(dst):
         try:
-            os.replace(dst, dst + ".tezgah-bak")
-        except OSError as exc:
+            bak = backup_base(dst) + ".tezgah-bak"
+            mkdirp(os.path.dirname(bak))
+            shutil.move(dst, bak)
+        except (OSError, shutil.Error) as exc:
             return "%s %s (%s)" % (NO, dst, exc)
     try:
         mkdirp(os.path.dirname(dst))
@@ -681,32 +685,94 @@ def write_json(path, data):
 # ponytail: a fixed cap, no setting.
 BACKUP_CAP = 5
 BACKUP_RE = re.compile(r"(.+)\.\d{8}T\d{12}(?:-\d+)?\.tezgah-bak")
+# Where a host file's backups live. A host enumerates its own config dirs - omp
+# 18.6's hooks capability lists every non-dot file in hooks/pre, so a
+# `tezgah-hook.ts.<stamp>.tezgah-bak` beside the bridge was one more hook entry -
+# so a copy laid beside a host file is one more thing that host discovers.
+# tezgah's own state dir is scanned by no host and keeps its copies beside the
+# file, where the uninstall that owns them finds them.
+BACKUP_DIR = os.path.join(tp.CONFIG_DIR, "backups")
+
+
+def backup_base(path):
+    """The path a backup of `path` is named after: `path` itself inside
+    tezgah's config dir, otherwise its mirror under BACKUP_DIR (relative to
+    HOME).
+
+    ponytail: a file outside HOME keeps its backup beside it - every host dir
+    lives under HOME on a real machine, and a mirror of an arbitrary absolute
+    path would let an in-process caller write into the real home."""
+    real = os.path.abspath(path)
+    if real.startswith(tp.CONFIG_DIR + os.sep) or not real.startswith(tp.HOME + os.sep):
+        return real
+    return os.path.join(BACKUP_DIR, os.path.relpath(real, tp.HOME))
 
 
 def backup(path):
-    """Copy `path` to `<path>.<timestamp>.tezgah-bak` before a write changes it.
+    """Copy `path` to `<backup_base>.<timestamp>.tezgah-bak` before a write
+    changes it.
 
     The suffix stays `.tezgah-bak`, so managed() and the uninstall cleanup still
     know it; past BACKUP_CAP the middle copies go, never the oldest."""
     if not os.path.exists(path):
         return
+    base = backup_base(path)
     stamp = datetime.datetime.now().strftime("%Y%m%dT%H%M%S%f")
-    dst = "%s.%s.tezgah-bak" % (path, stamp)
+    dst = "%s.%s.tezgah-bak" % (base, stamp)
     n = 0
     while os.path.exists(dst):
         n += 1
-        dst = "%s.%s-%d.tezgah-bak" % (path, stamp, n)
+        dst = "%s.%s-%d.tezgah-bak" % (base, stamp, n)
     try:
+        mkdirp(os.path.dirname(dst))
         shutil.copy2(path, dst)
-        d, base = os.path.split(path)
-        old = sorted(name for name in os.listdir(d or ".")
-                     if (m := BACKUP_RE.fullmatch(name)) and m.group(1) == base)
-        for name in old[1:max(1, len(old) - BACKUP_CAP + 1)]:
-            os.remove(os.path.join(d, name))
+        d, name = os.path.split(base)
+        old = sorted(entry for entry in os.listdir(d or ".")
+                     if (m := BACKUP_RE.fullmatch(entry)) and m.group(1) == name)
+        for entry in old[1:max(1, len(old) - BACKUP_CAP + 1)]:
+            os.remove(os.path.join(d, entry))
     except OSError:
         pass
 
 
+# Dirs a backup sweep never enters: a host's transcripts, caches and plugin
+# marketplaces hold no file tezgah ever backed up, and they are where the bytes are.
+SWEEP_SKIP = frozenset((
+    ".git", ".tmp", "blobs", "browser-profiles", "cache", "file-history",
+    "history", "log", "logs", "marketplaces", "memories", "node_modules", "packages",
+    "projects", "sessions", "shell-snapshots", "shell_snapshots", "tmp",
+    "vendor", "vendor_imports"))
+SWEEP_DEPTH = 3
+
+
+def sweep_backups():
+    """Move every `.tezgah-bak` an older release laid beside a host file under
+    BACKUP_DIR. Returns the moved destinations. A destination that already
+    exists is left alone rather than overwritten: it may be the only copy of the
+    user's original."""
+    roots = set(tp.HOST_DIRS.values()) | {os.path.join(tp.HOME, ".codex")}
+    moved = []
+    for root in sorted(roots):
+        depth0 = root.rstrip(os.sep).count(os.sep)
+        for dirpath, dirnames, filenames in os.walk(root):
+            deep = dirpath.count(os.sep) - depth0 >= SWEEP_DEPTH
+            dirnames[:] = [] if deep else sorted(d for d in dirnames if d not in SWEEP_SKIP)
+            for name in filenames:
+                if not name.endswith(".tezgah-bak"):
+                    continue
+                src = os.path.join(dirpath, name)
+                dst = backup_base(src)
+                if dst == os.path.abspath(src) or os.path.lexists(dst):
+                    continue
+                try:
+                    mkdirp(os.path.dirname(dst))
+                    shutil.move(src, dst)
+                    moved.append(dst)
+                except (OSError, shutil.Error):
+                    pass
+    return moved
+
+
 def set_managed_block(path, block, start="# tezgah:start", end="# tezgah:end"):
     """Replace the tezgah block in a text file, or append it. A YAML file that
     is an empty sequence (`[]`, the dsh patch-layer default) loses that token
@@ -995,6 +1061,7 @@ def install_common(new_roots, hosts):
             ("tezgah-decisions", os.path.join(HERE, "bin", "tezgah-decisions")),
             ("tezgah-route", os.path.join(HERE, "bin", "tezgah-route")),
             ("tezgah-lessons", os.path.join(HERE, "bin", "tezgah-lessons")),
+            ("tezgah-skill", os.path.join(HERE, "bin", "tezgah-skill")),
             # `tezgah` is this installer under the name `tezgah update` is typed
             # with (npm ships the same name). Not here on purpose: tezgah-dsh
             # (wired as ~/.local/bin/dsh, see dsh_launcher) and
@@ -1821,6 +1888,37 @@ def cursor_hook_entries():
             for ev, extra in CURSOR_HOOK_EVENTS.items()}
 
 
+# Cursor also reads ~/.codex/skills, ~/.claude/skills and ~/.agents/skills
+# (cursor.com/docs/context/skills) and documents no winner for a name found in
+# two of them. A tezgah skill Codex's install already linked into
+# ~/.codex/skills therefore reached Cursor twice once ~/.cursor/skills linked it
+# too: ~/.cursor/skills holds only the names no other dir Cursor reads resolves
+# to this tree. Cursor installs last (install_all), so it sees Codex's links.
+CURSOR_SHARED_SKILLS = tuple(os.path.join(HOME, d, "skills")
+                             for d in (".codex", ".claude", ".agents"))
+
+
+def cursor_shared_copy(s):
+    """The other dir Cursor reads that already links skill `s` to this tree."""
+    want = os.path.realpath(os.path.join(HERE, "skills", s))
+    return next((d for d in CURSOR_SHARED_SKILLS
+                 if os.path.realpath(os.path.join(d, s)) == want), None)
+
+
+def link_cursor_skills():
+    shared = []
+    for s in SKILLS:
+        dst = os.path.join(CURSOR, "skills", s)
+        if cursor_shared_copy(s):
+            unlink_tezgah(dst)
+            shared.append(s)
+        else:
+            print(link(os.path.join(HERE, "skills", s), dst))
+    if shared:
+        print("%s %d skills reach Cursor through %s, not linked twice"
+              % (OK, len(shared), ", ".join(sorted({cursor_shared_copy(s) for s in shared}))))
+
+
 def install_cursor():
     print("\ncursor:")
     path = os.path.join(CURSOR, "hooks.json")
@@ -1836,8 +1934,7 @@ def install_cursor():
             arr.append(entry)
         write_json(path, data)
         print("%s %s" % (OK, path))
-    for s in SKILLS:
-        print(link(os.path.join(HERE, "skills", s), os.path.join(CURSOR, "skills", s)))
+    link_cursor_skills()
     cc = os.path.join(CURSOR, "cli-config.json")
     cfg = read_config(cc, {})
     if cfg is not None:
@@ -3038,8 +3135,9 @@ def remove_generated_state(full):
     kept = []
     for name in names:
         path = os.path.join(tp.CONFIG_DIR, name)
-        if name == "adopted":
-            kept.append((path, "predecessor originals --adopt moved here"))
+        if name in ("adopted", "backups"):
+            kept.append((path, "predecessor originals --adopt moved here"
+                         if name == "adopted" else "host-file backups, for a manual restore"))
             continue
         if name in GENERATED_STATE or name.endswith((".off", "-off")) \
                 or (name.endswith(".tezgah-bak")
@@ -3253,7 +3351,7 @@ def unwire_claude_settings():
         changed = True
     if changed:
         write_json(sp, s)
-        print("%s removed tezgah statusLine/attribution/enabledPlugins from %s (restore from its .tezgah-bak copies if wanted)" % (OK, sp))
+        print("%s removed tezgah statusLine/attribution/enabledPlugins from %s (restore from its .tezgah-bak copies under %s if wanted)" % (OK, sp, BACKUP_DIR))
 
 
 def unwire_opencode_config():
@@ -3484,8 +3582,8 @@ def uninstall(hosts, dry_run=False):
     tezgah wrote outlives the command, and the verify pass at the end re-derives
     that from the disk.
 
-    What never goes, in any run: the user's own files, `.tezgah-bak` backups
-    outside the config dir, the `adopted/` predecessor snapshots, and every
+    What never goes, in any run: the user's own files, the host-file backups
+    under `BACKUP_DIR`, the `adopted/` predecessor snapshots, and every
     repository's `.tezgah/` research state. A partial run (some armed hosts
     stay) also keeps config.json and the install tree, because the hosts still
     armed read both at runtime."""
@@ -3523,6 +3621,9 @@ def uninstall(hosts, dry_run=False):
     uninstall_common()
     for h in hosts:
         UNINSTALLERS[h]()
+    if "codex" in hosts and "cursor" in (armed or []) and "cursor" not in hosts:
+        print("\ncursor (its skills came through ~/.codex/skills):")
+        link_cursor_skills()
     if "claude" in hosts:
         print("\nclaude plugin copy:")
         remove_plugin_copies()
@@ -4304,7 +4405,7 @@ def dsh_servers(path):
 
 
 def host_checks_claude():
-    copies = plugin_copies()
+    copies = live_plugin_copies()
     return [
         ("statusline wired (link or copy)",
          is_tezgah_entry(os.path.join(CLAUDE, "statusline.py"))),
@@ -4560,7 +4661,9 @@ def host_checks_cursor():
         ("hooks.json wired", _hooks_has(os.path.join(CURSOR, "hooks.json"),
                                         "tezgah-cursor-hook",
                                         list(CURSOR_HOOK_EVENTS))),
-        ("skills linked", skills_linked(os.path.join(CURSOR, "skills"))),
+        ("skills linked", all(
+            os.path.isfile(os.path.join(CURSOR, "skills", s, "SKILL.md"))
+            or cursor_shared_copy(s) for s in SKILLS)),
         ("MCP in mcp.json", "codegraph" in (mcp.get("mcpServers") or {})),
     ] + mcp_rows(set(mcp.get("mcpServers") or {}), "mcp.json") + [
         mcp_row(TEZGAH_MCP_NAME, (mcp.get("mcpServers") or {}).get(TEZGAH_MCP_NAME),
@@ -4870,6 +4973,19 @@ def plugin_copies():
     return sorted(out)
 
 
+def live_plugin_copies():
+    """The plugin copies a refresh keeps current: the one installed_plugins.json
+    names, or every copy when it names none. An older version dir is Claude's
+    cache to collect; refreshing it rewrote a tree no session loads, and its
+    staleness turned the report red for nothing."""
+    copies = plugin_copies()
+    rows = read_json(INSTALLED_PLUGINS, {}).get("plugins") or {}
+    named = {os.path.realpath(r.get("installPath") or "")
+             for k, v in rows.items() if k.split("@")[0] == "tezgah"
+             for r in (v or [])[-1:] if isinstance(r, dict)}
+    return [t for t in copies if os.path.realpath(t) in named] or copies
+
+
 def copy_files(target):
     """Every managed relpath the copy holds.
 
@@ -5100,7 +5216,7 @@ def sync():
     cache = os.path.join(HOME, ".claude", "plugins", "cache")
     plugins = os.path.dirname(cache)
     _recover_sync(plugins)
-    targets = plugin_copies()
+    targets = live_plugin_copies()
     if not targets:
         print("no installed tezgah found under %s (nothing to sync)" % cache)
         return 1
@@ -5176,12 +5292,12 @@ def refresh_plugin_copy(hosts):
     `.mcp.json` is excluded from `plugin_copy_current` in both directions on
     purpose - rendering into the copy must not make a current copy read stale -
     which also means a copy carrying no tezgah row at all is still judged
-    current. So a claude install always renders the file into every copy with
-    that copy as the root, the same half `sync()` performs."""
+    current. So a claude install always renders the file into every live copy
+    (`live_plugin_copies`) with that copy as the root, the same half `sync()` performs."""
     if "claude" in hosts:
-        for t in plugin_copies():
+        for t in live_plugin_copies():
             write_mcp_json(path=os.path.join(t, MCP_JSON), selected=selection(), root=t)
-        if any(not plugin_copy_current(t) for t in plugin_copies()):
+        if any(not plugin_copy_current(t) for t in live_plugin_copies()):
             print()
             sync()
 
@@ -5322,7 +5438,8 @@ def wizard_plan(hosts, roots, deps_off, features, adopt_now):
     if adopt_now:
         print("  %s retire the predecessor wiring (moved aside, not deleted)" % OK)
     print("  files tezgah rewrites are backed up as <file>.<timestamp>.tezgah-bak "
-          "(oldest and newest four kept); an unparseable host config is refused")
+          "under %s (oldest and newest four kept); an unparseable host config "
+          "is refused" % BACKUP_DIR)
 
 
 def wizard(default_hosts, default_roots, deps_off_default, default_features,
@@ -5374,7 +5491,7 @@ def upgrade(version, dry_run):
     so its farm links would point back into it. The hosts and roots come from
     config.json, so an upgrade does not re-ask the install questions. Nothing
     else calls this: a flag never upgrades tezgah as a side effect of another
-    (hooks/tezgah_policy.py:786). Prints every step before running it, and
+    (hooks/tezgah_policy.py:792). Prints every step before running it, and
     `--dry-run` stops after the printing."""
     cfg = tp.config()
     hosts = cfg.get("hosts") or detected_hosts()
@@ -5472,8 +5589,11 @@ def install_all(hosts, new_roots, deps_off, dry_run, redetect):
         install_openresearch(hosts)
     else:
         print("\nopenresearch (orx):\n%s skipped: orx is not selected" % NO)
-    for h in hosts:
+    # cursor last: link_cursor_skills reads the skill links the other hosts made
+    for h in sorted(hosts, key=lambda h: h == "cursor"):
         INSTALLERS[h]()
+    for dst in sweep_backups():
+        print("%s moved a backup out of a host dir: %s" % (OK, dst))
     refresh_plugin_copy(hosts)
     record_hooks(hosts)
     print()
@@ -5643,6 +5763,11 @@ def main(argv):
         label, ok = hosts_row()
         if not ok:
             print("%s%s" % (NO, label))
+        # Orca's presence, and whose codex home CODEX_HOME names: printed only
+        # where Orca is installed or this shell runs inside it.
+        orca = tezgah_orca.summary(CODEX)
+        if orca:
+            print(orca)
         return 0
     if args.deps and not args.install:
         return 1 if install_deps(dry_run=args.dry_run) else 0