@storybloq/storybloq 1.4.3 → 1.4.4

package/README.md

@@ -355,6 +355,8 @@ Full type definitions ship with the package (`exports.types`).
 
 Each record is its own file. IDs are sequential within type (`T-001`, `T-002`, ...). Relationships are single-canonical-owner: a ticket's `blockedBy` field points at blocker tickets, and the reverse (who-blocks-me) is derived by scanning.
 
+Create operations are safe to run in parallel. ID assignment and the create write happen together under a project lock, so concurrent creators are serialized and each receives a distinct sequential ID. A create can never silently overwrite an existing record; under heavy simultaneous contention a creator fails loudly with an error rather than colliding.
+
 Ticket and issue records preserve unknown JSON fields. Use `storybloq ticket meta` and `storybloq issue meta` to read or mutate those custom passthrough fields without touching core Storybloq fields. Values are JSON, and dot paths address nested objects, for example `storybloq ticket meta set T-001 integration.linear '"ABC-123"'`.
 
 ## Example workflow

package/dist/cli.js

@@ -991,7 +991,7 @@ import {
   mkdir
 } from "fs/promises";
 import { existsSync as existsSync4 } from "fs";
-import { join as join5, resolve as resolve3, relative as relative2, extname as extname2, dirname as dirname2, basename } from "path";
+import { join as join5, resolve as resolve3, relative as relative2, extname as extname2, dirname as dirname2, basename, sep, isAbsolute as isAbsolute2 } from "path";
 import lockfile from "proper-lockfile";
 async function loadProject(root, options) {
   const absRoot = resolve3(root);
@@ -1625,7 +1625,8 @@ async function guardPath(target, root) {
   } catch {
     resolvedDir = targetDir;
   }
-  if (resolvedDir !== resolvedRoot && !resolvedDir.startsWith(resolvedRoot + "/")) {
+  const rel = relative2(resolvedRoot, resolvedDir);
+  if (rel === ".." || rel.startsWith(".." + sep) || isAbsolute2(rel)) {
     throw new ProjectLoaderError(
       "invalid_input",
       `Path ${target} resolves outside project root`
@@ -1996,6 +1997,7 @@ __export(output_formatter_exports, {
   EMPTY_SCAFFOLD_HEADING: () => EMPTY_SCAFFOLD_HEADING,
   ExitCode: () => ExitCode,
   errorEnvelope: () => errorEnvelope,
+  escapeMarkdownDocument: () => escapeMarkdownDocument,
   escapeMarkdownInline: () => escapeMarkdownInline,
   fencedBlock: () => fencedBlock,
   formatBlockedTickets: () => formatBlockedTickets,
@@ -2056,6 +2058,9 @@ function partialEnvelope(data, warnings) {
   };
 }
 function escapeMarkdownInline(text) {
+  return text.replace(/(^|\n)([#\-+*])/g, "$1\\$2").replace(/(^|\n)(\d+)\./g, "$1$2\\.");
+}
+function escapeMarkdownDocument(text) {
   return text.replace(/\\/g, "\\\\").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/([`*_~\[\]()|])/g, "\\$1").replace(/(^|\n)([#\-+*])/g, "$1\\$2").replace(/(^|\n)(\d+)\./g, "$1$2\\.");
 }
 function fencedBlock(content, lang) {
@@ -2812,11 +2817,11 @@ function formatPhaseExport(state, phaseId, format) {
     );
   }
   const lines = [];
-  lines.push(`# ${escapeMarkdownInline(phase.name)} (${phase.id})`);
+  lines.push(`# ${escapeMarkdownDocument(phase.name)} (${phase.id})`);
   lines.push("");
   lines.push(`Status: ${phaseStatus}`);
   if (phase.description) {
-    lines.push(`Description: ${escapeMarkdownInline(phase.description)}`);
+    lines.push(`Description: ${escapeMarkdownDocument(phase.description)}`);
   }
   if (leaves.length > 0) {
     lines.push("");
@@ -2824,28 +2829,28 @@ function formatPhaseExport(state, phaseId, format) {
     for (const t of leaves) {
       const indicator = t.status === "complete" ? "[x]" : t.status === "inprogress" ? "[~]" : "[ ]";
       const parentNote = t.parentTicket && umbrellaAncestors.has(t.parentTicket) ? ` (under ${t.parentTicket})` : "";
-      lines.push(`${indicator} ${t.id}: ${escapeMarkdownInline(t.title)}${parentNote}`);
+      lines.push(`${indicator} ${t.id}: ${escapeMarkdownDocument(t.title)}${parentNote}`);
     }
   }
   if (crossPhaseDeps.size > 0) {
     lines.push("");
     lines.push("## Cross-Phase Dependencies");
     for (const [, dep] of crossPhaseDeps) {
-      lines.push(`- ${dep.id}: ${escapeMarkdownInline(dep.title)} [${dep.status}] (${dep.phase ?? "unphased"})`);
+      lines.push(`- ${dep.id}: ${escapeMarkdownDocument(dep.title)} [${dep.status}] (${dep.phase ?? "unphased"})`);
     }
   }
   if (relatedIssues.length > 0) {
     lines.push("");
     lines.push("## Open Issues");
     for (const i of relatedIssues) {
-      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownInline(i.title)}`);
+      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownDocument(i.title)}`);
     }
   }
   if (activeBlockers.length > 0) {
     lines.push("");
     lines.push("## Active Blockers");
     for (const b of activeBlockers) {
-      lines.push(`- ${escapeMarkdownInline(b.name)}${b.note ? ` \u2014 ${escapeMarkdownInline(b.note)}` : ""}`);
+      lines.push(`- ${escapeMarkdownDocument(b.name)}${b.note ? ` \u2014 ${escapeMarkdownDocument(b.note)}` : ""}`);
     }
   }
   return lines.join("\n");
@@ -2898,7 +2903,7 @@ function formatFullExport(state, format) {
     );
   }
   const lines = [];
-  lines.push(`# ${escapeMarkdownInline(state.config.project)} \u2014 Full Export`);
+  lines.push(`# ${escapeMarkdownDocument(state.config.project)} \u2014 Full Export`);
   lines.push("");
   lines.push(`Tickets: ${state.completeLeafTicketCount}/${state.leafTicketCount} complete`);
   lines.push(`Issues: ${state.activeIssueCount} open`);
@@ -2909,16 +2914,16 @@ function formatFullExport(state, format) {
   for (const p of phases) {
     const indicator = p.status === "complete" ? "[x]" : p.status === "inprogress" ? "[~]" : "[ ]";
     lines.push("");
-    lines.push(`### ${indicator} ${escapeMarkdownInline(p.phase.name)} (${p.phase.id})`);
+    lines.push(`### ${indicator} ${escapeMarkdownDocument(p.phase.name)} (${p.phase.id})`);
     if (p.phase.description) {
-      lines.push(escapeMarkdownInline(p.phase.description));
+      lines.push(escapeMarkdownDocument(p.phase.description));
     }
     const tickets = state.phaseTickets(p.phase.id);
     if (tickets.length > 0) {
       lines.push("");
       for (const t of tickets) {
         const ti = t.status === "complete" ? "[x]" : t.status === "inprogress" ? "[~]" : "[ ]";
-        lines.push(`${ti} ${t.id}: ${escapeMarkdownInline(t.title)}`);
+        lines.push(`${ti} ${t.id}: ${escapeMarkdownDocument(t.title)}`);
       }
     }
   }
@@ -2927,7 +2932,7 @@ function formatFullExport(state, format) {
     lines.push("## Issues");
     for (const i of state.issues) {
       const resolved = i.status === "resolved" ? " \u2713" : "";
-      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownInline(i.title)}${resolved}`);
+      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownDocument(i.title)}${resolved}`);
     }
   }
   const activeNotes = state.notes.filter((n) => n.status === "active");
@@ -2936,8 +2941,8 @@ function formatFullExport(state, format) {
     lines.push("## Notes");
     for (const n of activeNotes) {
       const title = n.title ?? n.id;
-      const tagInfo = n.tags.length > 0 ? ` (${n.tags.join(", ")})` : "";
-      lines.push(`- ${n.id}: ${escapeMarkdownInline(title)}${tagInfo}`);
+      const tagInfo = n.tags.length > 0 ? ` (${n.tags.map(escapeMarkdownDocument).join(", ")})` : "";
+      lines.push(`- ${n.id}: ${escapeMarkdownDocument(title)}${tagInfo}`);
     }
   }
   const activeLessons = state.lessons.filter((l) => l.status === "active");
@@ -2946,8 +2951,8 @@ function formatFullExport(state, format) {
     lines.push("## Lessons");
     for (const l of activeLessons) {
       const reinforced = l.reinforcements > 0 ? ` (\xD7${l.reinforcements})` : "";
-      const tagInfo = l.tags.length > 0 ? ` [${l.tags.join(", ")}]` : "";
-      lines.push(`- ${l.id}: ${escapeMarkdownInline(l.title)}${reinforced}${tagInfo}`);
+      const tagInfo = l.tags.length > 0 ? ` [${l.tags.map(escapeMarkdownDocument).join(", ")}]` : "";
+      lines.push(`- ${l.id}: ${escapeMarkdownDocument(l.title)}${reinforced}${tagInfo}`);
     }
   }
   const blockers = state.roadmap.blockers;
@@ -2956,7 +2961,7 @@ function formatFullExport(state, format) {
     lines.push("## Blockers");
     for (const b of blockers) {
       const cleared = isBlockerCleared(b) ? "[x]" : "[ ]";
-      lines.push(`${cleared} ${escapeMarkdownInline(b.name)}${b.note ? ` \u2014 ${escapeMarkdownInline(b.note)}` : ""}`);
+      lines.push(`${cleared} ${escapeMarkdownDocument(b.name)}${b.note ? ` \u2014 ${escapeMarkdownDocument(b.note)}` : ""}`);
     }
   }
   return lines.join("\n");
@@ -3521,8 +3526,8 @@ function handleNodeList(ctx) {
   }
   const lines = ["# Nodes", ""];
   const header = "| Name | Path | Stack | Role | Health | Depends On |";
-  const sep5 = "|------|------|-------|------|--------|------------|";
-  lines.push(header, sep5);
+  const sep6 = "|------|------|-------|------|--------|------------|";
+  lines.push(header, sep6);
   for (const [name, node] of entries) {
     const path2 = node.path ?? "";
     const stack = node.stack ?? "";
@@ -3881,7 +3886,7 @@ var init_session_types = __esm({
 
 // src/autonomous/session-selector.ts
 import { readdirSync, realpathSync as realpathSync4 } from "fs";
-import { basename as basename2, join as join8, sep } from "path";
+import { basename as basename2, join as join8, sep as sep2 } from "path";
 function canonicalSessionsRoot(root) {
   try {
     return realpathSync4.native(sessionsRoot(root));
@@ -3892,7 +3897,7 @@ function canonicalSessionsRoot(root) {
 function isContainedSessionDir(root, dir) {
   const canonRoot = canonicalSessionsRoot(root);
   if (canonRoot === null) return false;
-  const rootPrefix = canonRoot.endsWith(sep) ? canonRoot : canonRoot + sep;
+  const rootPrefix = canonRoot.endsWith(sep2) ? canonRoot : canonRoot + sep2;
   let canonDir;
   try {
     canonDir = realpathSync4.native(dir);
@@ -5478,9 +5483,9 @@ var init_activation = __esm({
 
 // src/autonomous/review-lenses/path-safety.ts
 import { realpathSync as realpathSync5 } from "fs";
-import { join as join12, resolve as resolve6, sep as sep2 } from "path";
+import { join as join12, resolve as resolve6, sep as sep3 } from "path";
 function resolveAndValidate(projectRoot, file) {
-  const resolvedRoot = resolve6(projectRoot) + sep2;
+  const resolvedRoot = resolve6(projectRoot) + sep3;
   const fullPath = resolve6(join12(projectRoot, file));
   if (!fullPath.startsWith(resolvedRoot)) return null;
   let realPath;
@@ -7997,7 +8002,7 @@ import {
   existsSync as existsSync9,
   statSync as statSync3
 } from "fs";
-import { join as join16, dirname as dirname4, resolve as resolve7, sep as sep3, posix, win32 } from "path";
+import { join as join16, dirname as dirname4, resolve as resolve7, sep as sep4, posix, win32 } from "path";
 import { createHash as createHash3, randomBytes as randomBytes2 } from "crypto";
 import { spawnSync } from "child_process";
 function assertValidSessionId(sessionId) {
@@ -8067,13 +8072,13 @@ function assertValidManifestPath(entryPath, label) {
 function assertNoSymlinkAncestors(targetPath, stopAt) {
   const stopReal = resolve7(stopAt);
   const target = resolve7(targetPath);
-  if (!target.startsWith(stopReal + sep3) && target !== stopReal) {
+  if (!target.startsWith(stopReal + sep4) && target !== stopReal) {
     throw new Error(
       `review-snapshot: assertNoSymlinkAncestors: target ${target} is not under stopAt ${stopReal}`
     );
   }
   const suffix = target === stopReal ? "" : target.slice(stopReal.length + 1);
-  const segments = suffix.length > 0 ? suffix.split(sep3) : [];
+  const segments = suffix.length > 0 ? suffix.split(sep4) : [];
   let current = stopReal;
   for (const segment of segments) {
     current = join16(current, segment);
@@ -8114,14 +8119,14 @@ function deriveCanonicalPaths(projectRoot, sessionId, reviewId) {
   }
   const canonicalSessionsRoot2 = realpathSync6(sessionsDir);
   const sessionDir2 = join16(canonicalSessionsRoot2, sessionId);
-  if (!sessionDir2.startsWith(canonicalSessionsRoot2 + sep3)) {
+  if (!sessionDir2.startsWith(canonicalSessionsRoot2 + sep4)) {
     throw new Error(
       `review-snapshot: sessionDir escapes sessions root: ${sessionDir2}`
     );
   }
   const snapshotParent = join16(sessionDir2, "review-snapshot");
   const finalDir = join16(snapshotParent, reviewId);
-  if (!finalDir.startsWith(snapshotParent + sep3)) {
+  if (!finalDir.startsWith(snapshotParent + sep4)) {
     throw new Error(
       `review-snapshot: finalDir escapes snapshot parent: ${finalDir}`
     );
@@ -8146,7 +8151,7 @@ function readReviewSnapshotManifestWithBytes(projectRoot, sessionId, reviewId) {
     );
   }
   const realFinalDir = realpathSync6(paths.finalDir);
-  if (!realFinalDir.startsWith(paths.canonicalSessionsRoot + sep3) && realFinalDir !== paths.canonicalSessionsRoot) {
+  if (!realFinalDir.startsWith(paths.canonicalSessionsRoot + sep4) && realFinalDir !== paths.canonicalSessionsRoot) {
     throw new Error(
       `review-snapshot: finalDir escapes sessions root: ${paths.finalDir}`
     );
@@ -8159,7 +8164,7 @@ function readReviewSnapshotManifestWithBytes(projectRoot, sessionId, reviewId) {
     );
   }
   const realManifestPath = realpathSync6(manifestPath);
-  if (!realManifestPath.startsWith(realFinalDir + sep3)) {
+  if (!realManifestPath.startsWith(realFinalDir + sep4)) {
     throw new Error(
       `review-snapshot: manifest.json escapes finalDir: ${manifestPath}`
     );
@@ -8204,7 +8209,7 @@ function readReviewSnapshotManifestWithBytes(projectRoot, sessionId, reviewId) {
   for (const entry of manifest.files) {
     assertValidManifestPath(entry.path, `manifest entry`);
     const stored = join16(paths.finalDir, entry.path);
-    if (!stored.startsWith(paths.finalDir + sep3)) {
+    if (!stored.startsWith(paths.finalDir + sep4)) {
       throw new Error(
         `review-snapshot: manifest entry escapes finalDir: ${entry.path}`
       );
@@ -8290,7 +8295,7 @@ import {
   readFileSync as readFileSync8,
   realpathSync as realpathSync7
 } from "fs";
-import { resolve as resolve8, sep as sep4 } from "path";
+import { resolve as resolve8, sep as sep5 } from "path";
 import { createHash as createHash4 } from "crypto";
 function loadSnapshot(ctx) {
   let manifest;
@@ -8413,7 +8418,7 @@ function verifyPathAndLookup(evidence, snapshotDir, byPath) {
     });
   }
   const resolved = resolve8(snapshotDir, evidence.file);
-  const snapshotDirWithSep = snapshotDir.endsWith(sep4) ? snapshotDir : snapshotDir + sep4;
+  const snapshotDirWithSep = snapshotDir.endsWith(sep5) ? snapshotDir : snapshotDir + sep5;
   if (!resolved.startsWith(snapshotDirWithSep) && resolved !== snapshotDir) {
     return failOutcome("invalid_path", {
       file: evidence.file,
@@ -8468,7 +8473,7 @@ function verifyPayloadIntegrity(file, resolved, entry, snapshotDir, snapshotDirR
       );
     }
   }
-  const snapshotDirRealWithSep = dirReal.endsWith(sep4) ? dirReal : dirReal + sep4;
+  const snapshotDirRealWithSep = dirReal.endsWith(sep5) ? dirReal : dirReal + sep5;
   let realResolved;
   try {
     realResolved = realpathSync7(resolved);
@@ -17571,7 +17576,7 @@ function getInstalledVersion() {
   }
 }
 function getRunningVersion() {
-  return "1.4.3";
+  return "1.4.4";
 }
 var init_version_check = __esm({
   "src/autonomous/version-check.ts"() {
@@ -19863,7 +19868,7 @@ function registerAllTools(server, pinnedRoot) {
     const result = await runMcpReadTool(pinnedRoot, handleStatus);
     try {
       const { readUpdateCacheSync: readUpdateCacheSync2, refreshUpdateCacheInBackground: refreshUpdateCacheInBackground2 } = await Promise.resolve().then(() => (init_update_check(), update_check_exports));
-      const running = "1.4.3";
+      const running = "1.4.4";
       const info = readUpdateCacheSync2(running);
       refreshUpdateCacheInBackground2();
       if (info?.updateAvailable && result.content[0]?.type === "text") {
@@ -20075,7 +20080,7 @@ function registerAllTools(server, pinnedRoot) {
     );
   });
   server.registerTool("storybloq_ticket_create", {
-    description: "Create a new ticket",
+    description: "Create a new ticket. ID assignment is serialized under the project lock, so concurrent creates that acquire the lock receive distinct sequential IDs.",
     inputSchema: {
       title: z12.string().describe("Ticket title"),
       type: z12.enum(TICKET_TYPES).describe("Ticket type: task, feature, chore"),
@@ -20162,7 +20167,7 @@ function registerAllTools(server, pinnedRoot) {
     (root, format) => handleTicketMetaUnset(args.id, args.path, format, root)
   ));
   server.registerTool("storybloq_issue_create", {
-    description: "Create a new issue",
+    description: "Create a new issue. ID assignment is serialized under the project lock, so concurrent creates that acquire the lock receive distinct sequential IDs.",
     inputSchema: {
       title: z12.string().describe("Issue title"),
       severity: z12.enum(ISSUE_SEVERITIES).describe("Issue severity: critical, high, medium, low"),
@@ -20273,7 +20278,7 @@ function registerAllTools(server, pinnedRoot) {
     }
   }, (args) => runMcpReadTool(pinnedRoot, (ctx) => handleNoteGet(args.id, ctx)));
   server.registerTool("storybloq_note_create", {
-    description: "Create a new note",
+    description: "Create a new note. ID assignment is serialized under the project lock, so concurrent creates that acquire the lock receive distinct sequential IDs.",
     inputSchema: {
       content: z12.string().describe("Note content"),
       title: z12.string().optional().describe("Note title"),
@@ -20337,7 +20342,7 @@ function registerAllTools(server, pinnedRoot) {
     inputSchema: {}
   }, () => runMcpReadTool(pinnedRoot, (ctx) => handleLessonDigest(ctx)));
   server.registerTool("storybloq_lesson_create", {
-    description: "Create a new lesson",
+    description: "Create a new lesson. ID assignment is serialized under the project lock, so concurrent creates that acquire the lock receive distinct sequential IDs.",
     inputSchema: {
       title: z12.string().describe("Lesson title \u2014 concise lesson name"),
       content: z12.string().describe("The actionable rule (1-3 sentences)"),
@@ -21281,7 +21286,7 @@ var init_inbox_watcher = __esm({
 // src/mcp/index.ts
 var mcp_exports = {};
 import { realpathSync as realpathSync8, existsSync as existsSync19 } from "fs";
-import { resolve as resolve13, join as join44, isAbsolute as isAbsolute2 } from "path";
+import { resolve as resolve13, join as join44, isAbsolute as isAbsolute3 } from "path";
 import { z as z14 } from "zod";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
@@ -21289,7 +21294,7 @@ function tryDiscoverRoot() {
   const envRoot = process.env[ENV_VAR2] ?? process.env[LEGACY_ENV_VAR2];
   const envName = process.env[ENV_VAR2] ? ENV_VAR2 : LEGACY_ENV_VAR2;
   if (envRoot) {
-    if (!isAbsolute2(envRoot)) {
+    if (!isAbsolute3(envRoot)) {
       process.stderr.write(`Warning: ${envName} must be an absolute path, got: ${envRoot}
 `);
       return null;
@@ -21506,7 +21511,7 @@ var init_mcp = __esm({
     ENV_VAR2 = "STORYBLOQ_PROJECT_ROOT";
     LEGACY_ENV_VAR2 = "CLAUDESTORY_PROJECT_ROOT";
     CONFIG_PATH2 = ".story/config.json";
-    version = "1.4.3";
+    version = "1.4.4";
     main().catch((err) => {
       process.stderr.write(`Fatal: ${err instanceof Error ? err.message : String(err)}
 `);
@@ -23112,7 +23117,7 @@ var init_codex_review = __esm({
 
 // src/core/symlink-write.ts
 import { lstat as lstat3, mkdir as mkdir7, readlink, realpath as realpath2, rename as rename3, unlink as unlink4, writeFile as writeFile4 } from "fs/promises";
-import { dirname as dirname8, isAbsolute as isAbsolute3, resolve as resolve15 } from "path";
+import { dirname as dirname8, isAbsolute as isAbsolute4, resolve as resolve15 } from "path";
 async function resolveSymlinkTarget(path2) {
   try {
     return await realpath2(path2);
@@ -23121,7 +23126,7 @@ async function resolveSymlinkTarget(path2) {
     let cur = path2;
     for (let depth = 0; depth < MAX_SYMLINK_DEPTH; depth++) {
       const link = await readlink(cur);
-      const next = isAbsolute3(link) ? link : resolve15(dirname8(cur), link);
+      const next = isAbsolute4(link) ? link : resolve15(dirname8(cur), link);
       let st;
       try {
         st = await lstat3(next);
@@ -28943,7 +28948,7 @@ async function runCli() {
     registerNodeCommand: registerNodeCommand2,
     registerFeedbackCommand: registerFeedbackCommand2
   } = await Promise.resolve().then(() => (init_register(), register_exports));
-  const version2 = "1.4.3";
+  const version2 = "1.4.4";
   const { preCommandHousekeeping: preCommandHousekeeping2 } = await Promise.resolve().then(() => (init_housekeeping(), housekeeping_exports));
   await preCommandHousekeeping2(version2);
   class HandledError extends Error {

package/dist/index.d.ts

@@ -1503,49 +1503,16 @@ declare const SnapshotV1Schema: z.ZodObject<{
         file: z.ZodString;
         message: z.ZodString;
     }, "strip", z.ZodTypeAny, {
-        type: string;
         message: string;
+        type: string;
         file: string;
     }, {
-        type: string;
         message: string;
+        type: string;
         file: string;
     }>, "many">>;
     gitHead: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    version: 1;
-    config: {
-        version: number;
-        type: string;
-        language: string;
-        project: string;
-        features: {
-            issues: boolean;
-            tickets: boolean;
-            handovers: boolean;
-            roadmap: boolean;
-            reviews: boolean;
-        } & {
-            [k: string]: unknown;
-        };
-        orchestrator?: string | undefined;
-        nodes?: Record<string, unknown> | undefined;
-        federation?: Record<string, unknown> | undefined;
-        schemaVersion?: number | undefined;
-        recipe?: string | undefined;
-        recipeOverrides?: {
-            maxTicketsPerSession?: number | undefined;
-            compactThreshold?: string | undefined;
-            reviewBackends?: string[] | undefined;
-            codexReviewBackends?: string[] | undefined;
-            handoverInterval?: number | undefined;
-            stages?: Record<string, Record<string, unknown>> | undefined;
-            branchStrategy?: "none" | "per-ticket" | undefined;
-            maxParallelAgents?: number | undefined;
-        } | undefined;
-    } & {
-        [k: string]: unknown;
-    };
     issues: z.objectOutputType<{
         id: z.ZodString;
         title: z.ZodString;
@@ -1583,8 +1550,8 @@ declare const SnapshotV1Schema: z.ZodObject<{
         crossNodeBlockedBy: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     }, z.ZodTypeAny, "passthrough">[];
     roadmap: {
-        date: string;
         title: string;
+        date: string;
         phases: z.objectOutputType<{
             id: z.ZodString;
             label: z.ZodString;
@@ -1602,6 +1569,7 @@ declare const SnapshotV1Schema: z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
+    version: 1;
     project: string;
     notes: z.objectOutputType<{
         id: z.ZodString;
@@ -1626,21 +1594,11 @@ declare const SnapshotV1Schema: z.ZodObject<{
         supersedes: z.ZodNullable<z.ZodString>;
         status: z.ZodEnum<["active", "deprecated", "superseded"]>;
     }, z.ZodTypeAny, "passthrough">[];
-    createdAt: string;
-    handoverFilenames: string[];
-    warnings?: {
-        type: string;
-        message: string;
-        file: string;
-    }[] | undefined;
-    gitHead?: string | undefined;
-}, {
-    version: 1;
     config: {
-        version: number;
         type: string;
-        language: string;
+        version: number;
         project: string;
+        language: string;
         features: {
             issues: boolean;
             tickets: boolean;
@@ -1668,6 +1626,15 @@ declare const SnapshotV1Schema: z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
+    createdAt: string;
+    handoverFilenames: string[];
+    warnings?: {
+        message: string;
+        type: string;
+        file: string;
+    }[] | undefined;
+    gitHead?: string | undefined;
+}, {
     issues: z.objectInputType<{
         id: z.ZodString;
         title: z.ZodString;
@@ -1705,8 +1672,8 @@ declare const SnapshotV1Schema: z.ZodObject<{
         crossNodeBlockedBy: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     }, z.ZodTypeAny, "passthrough">[];
     roadmap: {
-        date: string;
         title: string;
+        date: string;
         phases: z.objectInputType<{
             id: z.ZodString;
             label: z.ZodString;
@@ -1724,7 +1691,40 @@ declare const SnapshotV1Schema: z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
+    version: 1;
     project: string;
+    config: {
+        type: string;
+        version: number;
+        project: string;
+        language: string;
+        features: {
+            issues: boolean;
+            tickets: boolean;
+            handovers: boolean;
+            roadmap: boolean;
+            reviews: boolean;
+        } & {
+            [k: string]: unknown;
+        };
+        orchestrator?: string | undefined;
+        nodes?: Record<string, unknown> | undefined;
+        federation?: Record<string, unknown> | undefined;
+        schemaVersion?: number | undefined;
+        recipe?: string | undefined;
+        recipeOverrides?: {
+            maxTicketsPerSession?: number | undefined;
+            compactThreshold?: string | undefined;
+            reviewBackends?: string[] | undefined;
+            codexReviewBackends?: string[] | undefined;
+            handoverInterval?: number | undefined;
+            stages?: Record<string, Record<string, unknown>> | undefined;
+            branchStrategy?: "none" | "per-ticket" | undefined;
+            maxParallelAgents?: number | undefined;
+        } | undefined;
+    } & {
+        [k: string]: unknown;
+    };
     createdAt: string;
     notes?: z.objectInputType<{
         id: z.ZodString;
@@ -1750,8 +1750,8 @@ declare const SnapshotV1Schema: z.ZodObject<{
         status: z.ZodEnum<["active", "deprecated", "superseded"]>;
     }, z.ZodTypeAny, "passthrough">[] | undefined;
     warnings?: {
-        type: string;
         message: string;
+        type: string;
         file: string;
     }[] | undefined;
     handoverFilenames?: string[] | undefined;
@@ -1964,9 +1964,18 @@ declare function successEnvelope<T>(data: T): SuccessEnvelope<T>;
 declare function errorEnvelope(code: ErrorCode, message: string): ErrorEnvelope;
 declare function partialEnvelope<T>(data: T, warnings: readonly LoadWarning[]): PartialEnvelope<T>;
 /**
- * Escapes characters that would create Markdown structure in inline text.
- * Handles heading, list, blockquote, ordered list at line start.
- * Handles inline structural characters.
+ * Escapes only heading and list markers at the start of a line (unordered and
+ * ordered) so an embedded field cannot start a new Markdown block inside the
+ * formatter's own `md` output.
+ *
+ * This is NOT a Markdown or HTML sanitizer. Inline-structural, HTML-entity, and
+ * backslash escaping were intentionally removed: the only consumers of formatter
+ * output are plain-text sinks (CLI stdout and MCP `text` results to the model),
+ * neither of which decodes entities or renders Markdown, so that escaping never
+ * got decoded and instead leaked as visible noise like `&amp;`, `\(`, `\[`.
+ * Blockquotes (`>`) and inline characters are passed through for plain-text
+ * readability. Do not reintroduce inline/HTML escaping unless a real
+ * Markdown/HTML renderer is added downstream.
  */
 declare function escapeMarkdownInline(text: string): string;
 /**

package/dist/index.js

@@ -423,7 +423,7 @@ import {
   mkdir
 } from "fs/promises";
 import { existsSync as existsSync2 } from "fs";
-import { join as join2, resolve, relative as relative2, extname as extname2, dirname, basename } from "path";
+import { join as join2, resolve, relative as relative2, extname as extname2, dirname, basename, sep, isAbsolute } from "path";
 import lockfile from "proper-lockfile";
 
 // src/models/lesson.ts
@@ -1256,7 +1256,8 @@ async function guardPath(target, root) {
   } catch {
     resolvedDir = targetDir;
   }
-  if (resolvedDir !== resolvedRoot && !resolvedDir.startsWith(resolvedRoot + "/")) {
+  const rel = relative2(resolvedRoot, resolvedDir);
+  if (rel === ".." || rel.startsWith(".." + sep) || isAbsolute(rel)) {
     throw new ProjectLoaderError(
       "invalid_input",
       `Path ${target} resolves outside project root`
@@ -2912,6 +2913,9 @@ function partialEnvelope(data, warnings) {
   };
 }
 function escapeMarkdownInline(text) {
+  return text.replace(/(^|\n)([#\-+*])/g, "$1\\$2").replace(/(^|\n)(\d+)\./g, "$1$2\\.");
+}
+function escapeMarkdownDocument(text) {
   return text.replace(/\\/g, "\\\\").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/([`*_~\[\]()|])/g, "\\$1").replace(/(^|\n)([#\-+*])/g, "$1\\$2").replace(/(^|\n)(\d+)\./g, "$1$2\\.");
 }
 function fencedBlock(content, lang) {
@@ -3445,11 +3449,11 @@ function formatPhaseExport(state, phaseId, format) {
     );
   }
   const lines = [];
-  lines.push(`# ${escapeMarkdownInline(phase.name)} (${phase.id})`);
+  lines.push(`# ${escapeMarkdownDocument(phase.name)} (${phase.id})`);
   lines.push("");
   lines.push(`Status: ${phaseStatus}`);
   if (phase.description) {
-    lines.push(`Description: ${escapeMarkdownInline(phase.description)}`);
+    lines.push(`Description: ${escapeMarkdownDocument(phase.description)}`);
   }
   if (leaves.length > 0) {
     lines.push("");
@@ -3457,28 +3461,28 @@ function formatPhaseExport(state, phaseId, format) {
     for (const t of leaves) {
       const indicator = t.status === "complete" ? "[x]" : t.status === "inprogress" ? "[~]" : "[ ]";
       const parentNote = t.parentTicket && umbrellaAncestors.has(t.parentTicket) ? ` (under ${t.parentTicket})` : "";
-      lines.push(`${indicator} ${t.id}: ${escapeMarkdownInline(t.title)}${parentNote}`);
+      lines.push(`${indicator} ${t.id}: ${escapeMarkdownDocument(t.title)}${parentNote}`);
     }
   }
   if (crossPhaseDeps.size > 0) {
     lines.push("");
     lines.push("## Cross-Phase Dependencies");
     for (const [, dep] of crossPhaseDeps) {
-      lines.push(`- ${dep.id}: ${escapeMarkdownInline(dep.title)} [${dep.status}] (${dep.phase ?? "unphased"})`);
+      lines.push(`- ${dep.id}: ${escapeMarkdownDocument(dep.title)} [${dep.status}] (${dep.phase ?? "unphased"})`);
     }
   }
   if (relatedIssues.length > 0) {
     lines.push("");
     lines.push("## Open Issues");
     for (const i of relatedIssues) {
-      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownInline(i.title)}`);
+      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownDocument(i.title)}`);
     }
   }
   if (activeBlockers.length > 0) {
     lines.push("");
     lines.push("## Active Blockers");
     for (const b of activeBlockers) {
-      lines.push(`- ${escapeMarkdownInline(b.name)}${b.note ? ` \u2014 ${escapeMarkdownInline(b.note)}` : ""}`);
+      lines.push(`- ${escapeMarkdownDocument(b.name)}${b.note ? ` \u2014 ${escapeMarkdownDocument(b.note)}` : ""}`);
     }
   }
   return lines.join("\n");
@@ -3531,7 +3535,7 @@ function formatFullExport(state, format) {
     );
   }
   const lines = [];
-  lines.push(`# ${escapeMarkdownInline(state.config.project)} \u2014 Full Export`);
+  lines.push(`# ${escapeMarkdownDocument(state.config.project)} \u2014 Full Export`);
   lines.push("");
   lines.push(`Tickets: ${state.completeLeafTicketCount}/${state.leafTicketCount} complete`);
   lines.push(`Issues: ${state.activeIssueCount} open`);
@@ -3542,16 +3546,16 @@ function formatFullExport(state, format) {
   for (const p of phases) {
     const indicator = p.status === "complete" ? "[x]" : p.status === "inprogress" ? "[~]" : "[ ]";
     lines.push("");
-    lines.push(`### ${indicator} ${escapeMarkdownInline(p.phase.name)} (${p.phase.id})`);
+    lines.push(`### ${indicator} ${escapeMarkdownDocument(p.phase.name)} (${p.phase.id})`);
     if (p.phase.description) {
-      lines.push(escapeMarkdownInline(p.phase.description));
+      lines.push(escapeMarkdownDocument(p.phase.description));
     }
     const tickets = state.phaseTickets(p.phase.id);
     if (tickets.length > 0) {
       lines.push("");
       for (const t of tickets) {
         const ti = t.status === "complete" ? "[x]" : t.status === "inprogress" ? "[~]" : "[ ]";
-        lines.push(`${ti} ${t.id}: ${escapeMarkdownInline(t.title)}`);
+        lines.push(`${ti} ${t.id}: ${escapeMarkdownDocument(t.title)}`);
       }
     }
   }
@@ -3560,7 +3564,7 @@ function formatFullExport(state, format) {
     lines.push("## Issues");
     for (const i of state.issues) {
       const resolved = i.status === "resolved" ? " \u2713" : "";
-      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownInline(i.title)}${resolved}`);
+      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownDocument(i.title)}${resolved}`);
     }
   }
   const activeNotes = state.notes.filter((n) => n.status === "active");
@@ -3569,8 +3573,8 @@ function formatFullExport(state, format) {
     lines.push("## Notes");
     for (const n of activeNotes) {
       const title = n.title ?? n.id;
-      const tagInfo = n.tags.length > 0 ? ` (${n.tags.join(", ")})` : "";
-      lines.push(`- ${n.id}: ${escapeMarkdownInline(title)}${tagInfo}`);
+      const tagInfo = n.tags.length > 0 ? ` (${n.tags.map(escapeMarkdownDocument).join(", ")})` : "";
+      lines.push(`- ${n.id}: ${escapeMarkdownDocument(title)}${tagInfo}`);
     }
   }
   const activeLessons = state.lessons.filter((l) => l.status === "active");
@@ -3579,8 +3583,8 @@ function formatFullExport(state, format) {
     lines.push("## Lessons");
     for (const l of activeLessons) {
       const reinforced = l.reinforcements > 0 ? ` (\xD7${l.reinforcements})` : "";
-      const tagInfo = l.tags.length > 0 ? ` [${l.tags.join(", ")}]` : "";
-      lines.push(`- ${l.id}: ${escapeMarkdownInline(l.title)}${reinforced}${tagInfo}`);
+      const tagInfo = l.tags.length > 0 ? ` [${l.tags.map(escapeMarkdownDocument).join(", ")}]` : "";
+      lines.push(`- ${l.id}: ${escapeMarkdownDocument(l.title)}${reinforced}${tagInfo}`);
     }
   }
   const blockers = state.roadmap.blockers;
@@ -3589,7 +3593,7 @@ function formatFullExport(state, format) {
     lines.push("## Blockers");
     for (const b of blockers) {
       const cleared = isBlockerCleared(b) ? "[x]" : "[ ]";
-      lines.push(`${cleared} ${escapeMarkdownInline(b.name)}${b.note ? ` \u2014 ${escapeMarkdownInline(b.note)}` : ""}`);
+      lines.push(`${cleared} ${escapeMarkdownDocument(b.name)}${b.note ? ` \u2014 ${escapeMarkdownDocument(b.note)}` : ""}`);
     }
   }
   return lines.join("\n");

package/dist/mcp.js

@@ -933,7 +933,7 @@ import {
   mkdir
 } from "fs/promises";
 import { existsSync as existsSync4 } from "fs";
-import { join as join5, resolve as resolve3, relative as relative2, extname as extname2, dirname as dirname2, basename } from "path";
+import { join as join5, resolve as resolve3, relative as relative2, extname as extname2, dirname as dirname2, basename, sep, isAbsolute as isAbsolute2 } from "path";
 import lockfile from "proper-lockfile";
 async function loadProject(root, options) {
   const absRoot = resolve3(root);
@@ -1567,7 +1567,8 @@ async function guardPath(target, root) {
   } catch {
     resolvedDir = targetDir;
   }
-  if (resolvedDir !== resolvedRoot && !resolvedDir.startsWith(resolvedRoot + "/")) {
+  const rel = relative2(resolvedRoot, resolvedDir);
+  if (rel === ".." || rel.startsWith(".." + sep) || isAbsolute2(rel)) {
     throw new ProjectLoaderError(
       "invalid_input",
       `Path ${target} resolves outside project root`
@@ -1817,6 +1818,9 @@ function errorEnvelope(code, message) {
   return { version: 1, error: { code, message } };
 }
 function escapeMarkdownInline(text) {
+  return text.replace(/(^|\n)([#\-+*])/g, "$1\\$2").replace(/(^|\n)(\d+)\./g, "$1$2\\.");
+}
+function escapeMarkdownDocument(text) {
   return text.replace(/\\/g, "\\\\").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/([`*_~\[\]()|])/g, "\\$1").replace(/(^|\n)([#\-+*])/g, "$1\\$2").replace(/(^|\n)(\d+)\./g, "$1$2\\.");
 }
 function fencedBlock(content, lang) {
@@ -2550,11 +2554,11 @@ function formatPhaseExport(state, phaseId, format) {
     );
   }
   const lines = [];
-  lines.push(`# ${escapeMarkdownInline(phase.name)} (${phase.id})`);
+  lines.push(`# ${escapeMarkdownDocument(phase.name)} (${phase.id})`);
   lines.push("");
   lines.push(`Status: ${phaseStatus}`);
   if (phase.description) {
-    lines.push(`Description: ${escapeMarkdownInline(phase.description)}`);
+    lines.push(`Description: ${escapeMarkdownDocument(phase.description)}`);
   }
   if (leaves.length > 0) {
     lines.push("");
@@ -2562,28 +2566,28 @@ function formatPhaseExport(state, phaseId, format) {
     for (const t of leaves) {
       const indicator = t.status === "complete" ? "[x]" : t.status === "inprogress" ? "[~]" : "[ ]";
       const parentNote = t.parentTicket && umbrellaAncestors.has(t.parentTicket) ? ` (under ${t.parentTicket})` : "";
-      lines.push(`${indicator} ${t.id}: ${escapeMarkdownInline(t.title)}${parentNote}`);
+      lines.push(`${indicator} ${t.id}: ${escapeMarkdownDocument(t.title)}${parentNote}`);
     }
   }
   if (crossPhaseDeps.size > 0) {
     lines.push("");
     lines.push("## Cross-Phase Dependencies");
     for (const [, dep] of crossPhaseDeps) {
-      lines.push(`- ${dep.id}: ${escapeMarkdownInline(dep.title)} [${dep.status}] (${dep.phase ?? "unphased"})`);
+      lines.push(`- ${dep.id}: ${escapeMarkdownDocument(dep.title)} [${dep.status}] (${dep.phase ?? "unphased"})`);
     }
   }
   if (relatedIssues.length > 0) {
     lines.push("");
     lines.push("## Open Issues");
     for (const i of relatedIssues) {
-      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownInline(i.title)}`);
+      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownDocument(i.title)}`);
     }
   }
   if (activeBlockers.length > 0) {
     lines.push("");
     lines.push("## Active Blockers");
     for (const b of activeBlockers) {
-      lines.push(`- ${escapeMarkdownInline(b.name)}${b.note ? ` \u2014 ${escapeMarkdownInline(b.note)}` : ""}`);
+      lines.push(`- ${escapeMarkdownDocument(b.name)}${b.note ? ` \u2014 ${escapeMarkdownDocument(b.note)}` : ""}`);
     }
   }
   return lines.join("\n");
@@ -2636,7 +2640,7 @@ function formatFullExport(state, format) {
     );
   }
   const lines = [];
-  lines.push(`# ${escapeMarkdownInline(state.config.project)} \u2014 Full Export`);
+  lines.push(`# ${escapeMarkdownDocument(state.config.project)} \u2014 Full Export`);
   lines.push("");
   lines.push(`Tickets: ${state.completeLeafTicketCount}/${state.leafTicketCount} complete`);
   lines.push(`Issues: ${state.activeIssueCount} open`);
@@ -2647,16 +2651,16 @@ function formatFullExport(state, format) {
   for (const p of phases) {
     const indicator = p.status === "complete" ? "[x]" : p.status === "inprogress" ? "[~]" : "[ ]";
     lines.push("");
-    lines.push(`### ${indicator} ${escapeMarkdownInline(p.phase.name)} (${p.phase.id})`);
+    lines.push(`### ${indicator} ${escapeMarkdownDocument(p.phase.name)} (${p.phase.id})`);
     if (p.phase.description) {
-      lines.push(escapeMarkdownInline(p.phase.description));
+      lines.push(escapeMarkdownDocument(p.phase.description));
     }
     const tickets = state.phaseTickets(p.phase.id);
     if (tickets.length > 0) {
       lines.push("");
       for (const t of tickets) {
         const ti = t.status === "complete" ? "[x]" : t.status === "inprogress" ? "[~]" : "[ ]";
-        lines.push(`${ti} ${t.id}: ${escapeMarkdownInline(t.title)}`);
+        lines.push(`${ti} ${t.id}: ${escapeMarkdownDocument(t.title)}`);
       }
     }
   }
@@ -2665,7 +2669,7 @@ function formatFullExport(state, format) {
     lines.push("## Issues");
     for (const i of state.issues) {
       const resolved = i.status === "resolved" ? " \u2713" : "";
-      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownInline(i.title)}${resolved}`);
+      lines.push(`- ${i.id} [${i.severity}]: ${escapeMarkdownDocument(i.title)}${resolved}`);
     }
   }
   const activeNotes = state.notes.filter((n) => n.status === "active");
@@ -2674,8 +2678,8 @@ function formatFullExport(state, format) {
     lines.push("## Notes");
     for (const n of activeNotes) {
       const title = n.title ?? n.id;
-      const tagInfo = n.tags.length > 0 ? ` (${n.tags.join(", ")})` : "";
-      lines.push(`- ${n.id}: ${escapeMarkdownInline(title)}${tagInfo}`);
+      const tagInfo = n.tags.length > 0 ? ` (${n.tags.map(escapeMarkdownDocument).join(", ")})` : "";
+      lines.push(`- ${n.id}: ${escapeMarkdownDocument(title)}${tagInfo}`);
     }
   }
   const activeLessons = state.lessons.filter((l) => l.status === "active");
@@ -2684,8 +2688,8 @@ function formatFullExport(state, format) {
     lines.push("## Lessons");
     for (const l of activeLessons) {
       const reinforced = l.reinforcements > 0 ? ` (\xD7${l.reinforcements})` : "";
-      const tagInfo = l.tags.length > 0 ? ` [${l.tags.join(", ")}]` : "";
-      lines.push(`- ${l.id}: ${escapeMarkdownInline(l.title)}${reinforced}${tagInfo}`);
+      const tagInfo = l.tags.length > 0 ? ` [${l.tags.map(escapeMarkdownDocument).join(", ")}]` : "";
+      lines.push(`- ${l.id}: ${escapeMarkdownDocument(l.title)}${reinforced}${tagInfo}`);
     }
   }
   const blockers = state.roadmap.blockers;
@@ -2694,7 +2698,7 @@ function formatFullExport(state, format) {
     lines.push("## Blockers");
     for (const b of blockers) {
       const cleared = isBlockerCleared(b) ? "[x]" : "[ ]";
-      lines.push(`${cleared} ${escapeMarkdownInline(b.name)}${b.note ? ` \u2014 ${escapeMarkdownInline(b.note)}` : ""}`);
+      lines.push(`${cleared} ${escapeMarkdownDocument(b.name)}${b.note ? ` \u2014 ${escapeMarkdownDocument(b.note)}` : ""}`);
     }
   }
   return lines.join("\n");
@@ -3195,8 +3199,8 @@ function handleNodeList(ctx) {
   }
   const lines = ["# Nodes", ""];
   const header = "| Name | Path | Stack | Role | Health | Depends On |";
-  const sep5 = "|------|------|-------|------|--------|------------|";
-  lines.push(header, sep5);
+  const sep6 = "|------|------|-------|------|--------|------------|";
+  lines.push(header, sep6);
   for (const [name, node] of entries) {
     const path2 = node.path ?? "";
     const stack = node.stack ?? "";
@@ -3555,7 +3559,7 @@ var init_session_types = __esm({
 
 // src/autonomous/session-selector.ts
 import { readdirSync, realpathSync as realpathSync4 } from "fs";
-import { basename as basename2, join as join8, sep } from "path";
+import { basename as basename2, join as join8, sep as sep2 } from "path";
 function canonicalSessionsRoot(root) {
   try {
     return realpathSync4.native(sessionsRoot(root));
@@ -3566,7 +3570,7 @@ function canonicalSessionsRoot(root) {
 function isContainedSessionDir(root, dir) {
   const canonRoot = canonicalSessionsRoot(root);
   if (canonRoot === null) return false;
-  const rootPrefix = canonRoot.endsWith(sep) ? canonRoot : canonRoot + sep;
+  const rootPrefix = canonRoot.endsWith(sep2) ? canonRoot : canonRoot + sep2;
   let canonDir;
   try {
     canonDir = realpathSync4.native(dir);
@@ -5907,7 +5911,7 @@ var init_update_check = __esm({
 // src/mcp/index.ts
 init_esm_shims();
 import { realpathSync as realpathSync8, existsSync as existsSync19 } from "fs";
-import { resolve as resolve13, join as join44, isAbsolute as isAbsolute2 } from "path";
+import { resolve as resolve13, join as join44, isAbsolute as isAbsolute3 } from "path";
 import { z as z14 } from "zod";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
@@ -7080,9 +7084,9 @@ import { join as join13 } from "path";
 // src/autonomous/review-lenses/path-safety.ts
 init_esm_shims();
 import { realpathSync as realpathSync5 } from "fs";
-import { join as join12, resolve as resolve6, sep as sep2 } from "path";
+import { join as join12, resolve as resolve6, sep as sep3 } from "path";
 function resolveAndValidate(projectRoot, file) {
-  const resolvedRoot = resolve6(projectRoot) + sep2;
+  const resolvedRoot = resolve6(projectRoot) + sep3;
   const fullPath = resolve6(join12(projectRoot, file));
   if (!fullPath.startsWith(resolvedRoot)) return null;
   let realPath;
@@ -9434,7 +9438,7 @@ import {
   readFileSync as readFileSync8,
   realpathSync as realpathSync7
 } from "fs";
-import { resolve as resolve8, sep as sep4 } from "path";
+import { resolve as resolve8, sep as sep5 } from "path";
 import { createHash as createHash4 } from "crypto";
 
 // src/autonomous/review-lenses/review-snapshot.ts
@@ -9452,7 +9456,7 @@ import {
   existsSync as existsSync9,
   statSync as statSync3
 } from "fs";
-import { join as join16, dirname as dirname4, resolve as resolve7, sep as sep3, posix, win32 } from "path";
+import { join as join16, dirname as dirname4, resolve as resolve7, sep as sep4, posix, win32 } from "path";
 import { createHash as createHash3, randomBytes as randomBytes2 } from "crypto";
 import { spawnSync } from "child_process";
 var SESSION_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -9524,13 +9528,13 @@ function assertValidManifestPath(entryPath, label) {
 function assertNoSymlinkAncestors(targetPath, stopAt) {
   const stopReal = resolve7(stopAt);
   const target = resolve7(targetPath);
-  if (!target.startsWith(stopReal + sep3) && target !== stopReal) {
+  if (!target.startsWith(stopReal + sep4) && target !== stopReal) {
     throw new Error(
       `review-snapshot: assertNoSymlinkAncestors: target ${target} is not under stopAt ${stopReal}`
     );
   }
   const suffix = target === stopReal ? "" : target.slice(stopReal.length + 1);
-  const segments = suffix.length > 0 ? suffix.split(sep3) : [];
+  const segments = suffix.length > 0 ? suffix.split(sep4) : [];
   let current = stopReal;
   for (const segment of segments) {
     current = join16(current, segment);
@@ -9571,14 +9575,14 @@ function deriveCanonicalPaths(projectRoot, sessionId, reviewId) {
   }
   const canonicalSessionsRoot2 = realpathSync6(sessionsDir);
   const sessionDir2 = join16(canonicalSessionsRoot2, sessionId);
-  if (!sessionDir2.startsWith(canonicalSessionsRoot2 + sep3)) {
+  if (!sessionDir2.startsWith(canonicalSessionsRoot2 + sep4)) {
     throw new Error(
       `review-snapshot: sessionDir escapes sessions root: ${sessionDir2}`
     );
   }
   const snapshotParent = join16(sessionDir2, "review-snapshot");
   const finalDir = join16(snapshotParent, reviewId);
-  if (!finalDir.startsWith(snapshotParent + sep3)) {
+  if (!finalDir.startsWith(snapshotParent + sep4)) {
     throw new Error(
       `review-snapshot: finalDir escapes snapshot parent: ${finalDir}`
     );
@@ -9603,7 +9607,7 @@ function readReviewSnapshotManifestWithBytes(projectRoot, sessionId, reviewId) {
     );
   }
   const realFinalDir = realpathSync6(paths.finalDir);
-  if (!realFinalDir.startsWith(paths.canonicalSessionsRoot + sep3) && realFinalDir !== paths.canonicalSessionsRoot) {
+  if (!realFinalDir.startsWith(paths.canonicalSessionsRoot + sep4) && realFinalDir !== paths.canonicalSessionsRoot) {
     throw new Error(
       `review-snapshot: finalDir escapes sessions root: ${paths.finalDir}`
     );
@@ -9616,7 +9620,7 @@ function readReviewSnapshotManifestWithBytes(projectRoot, sessionId, reviewId) {
     );
   }
   const realManifestPath = realpathSync6(manifestPath);
-  if (!realManifestPath.startsWith(realFinalDir + sep3)) {
+  if (!realManifestPath.startsWith(realFinalDir + sep4)) {
     throw new Error(
       `review-snapshot: manifest.json escapes finalDir: ${manifestPath}`
     );
@@ -9661,7 +9665,7 @@ function readReviewSnapshotManifestWithBytes(projectRoot, sessionId, reviewId) {
   for (const entry of manifest.files) {
     assertValidManifestPath(entry.path, `manifest entry`);
     const stored = join16(paths.finalDir, entry.path);
-    if (!stored.startsWith(paths.finalDir + sep3)) {
+    if (!stored.startsWith(paths.finalDir + sep4)) {
       throw new Error(
         `review-snapshot: manifest entry escapes finalDir: ${entry.path}`
       );
@@ -9866,7 +9870,7 @@ function verifyPathAndLookup(evidence, snapshotDir, byPath) {
     });
   }
   const resolved = resolve8(snapshotDir, evidence.file);
-  const snapshotDirWithSep = snapshotDir.endsWith(sep4) ? snapshotDir : snapshotDir + sep4;
+  const snapshotDirWithSep = snapshotDir.endsWith(sep5) ? snapshotDir : snapshotDir + sep5;
   if (!resolved.startsWith(snapshotDirWithSep) && resolved !== snapshotDir) {
     return failOutcome("invalid_path", {
       file: evidence.file,
@@ -9921,7 +9925,7 @@ function verifyPayloadIntegrity(file, resolved, entry, snapshotDir, snapshotDirR
       );
     }
   }
-  const snapshotDirRealWithSep = dirReal.endsWith(sep4) ? dirReal : dirReal + sep4;
+  const snapshotDirRealWithSep = dirReal.endsWith(sep5) ? dirReal : dirReal + sep5;
   let realResolved;
   try {
     realResolved = realpathSync7(resolved);
@@ -16743,7 +16747,7 @@ function getInstalledVersion() {
   }
 }
 function getRunningVersion() {
-  return "1.4.3";
+  return "1.4.4";
 }
 
 // src/autonomous/guide.ts
@@ -18753,7 +18757,7 @@ function registerAllTools(server, pinnedRoot) {
     const result = await runMcpReadTool(pinnedRoot, handleStatus);
     try {
       const { readUpdateCacheSync: readUpdateCacheSync2, refreshUpdateCacheInBackground: refreshUpdateCacheInBackground2 } = await Promise.resolve().then(() => (init_update_check(), update_check_exports));
-      const running = "1.4.3";
+      const running = "1.4.4";
       const info = readUpdateCacheSync2(running);
       refreshUpdateCacheInBackground2();
       if (info?.updateAvailable && result.content[0]?.type === "text") {
@@ -18965,7 +18969,7 @@ function registerAllTools(server, pinnedRoot) {
     );
   });
   server.registerTool("storybloq_ticket_create", {
-    description: "Create a new ticket",
+    description: "Create a new ticket. ID assignment is serialized under the project lock, so concurrent creates that acquire the lock receive distinct sequential IDs.",
     inputSchema: {
       title: z12.string().describe("Ticket title"),
       type: z12.enum(TICKET_TYPES).describe("Ticket type: task, feature, chore"),
@@ -19052,7 +19056,7 @@ function registerAllTools(server, pinnedRoot) {
     (root, format) => handleTicketMetaUnset(args.id, args.path, format, root)
   ));
   server.registerTool("storybloq_issue_create", {
-    description: "Create a new issue",
+    description: "Create a new issue. ID assignment is serialized under the project lock, so concurrent creates that acquire the lock receive distinct sequential IDs.",
     inputSchema: {
       title: z12.string().describe("Issue title"),
       severity: z12.enum(ISSUE_SEVERITIES).describe("Issue severity: critical, high, medium, low"),
@@ -19163,7 +19167,7 @@ function registerAllTools(server, pinnedRoot) {
     }
   }, (args) => runMcpReadTool(pinnedRoot, (ctx) => handleNoteGet(args.id, ctx)));
   server.registerTool("storybloq_note_create", {
-    description: "Create a new note",
+    description: "Create a new note. ID assignment is serialized under the project lock, so concurrent creates that acquire the lock receive distinct sequential IDs.",
     inputSchema: {
       content: z12.string().describe("Note content"),
       title: z12.string().optional().describe("Note title"),
@@ -19227,7 +19231,7 @@ function registerAllTools(server, pinnedRoot) {
     inputSchema: {}
   }, () => runMcpReadTool(pinnedRoot, (ctx) => handleLessonDigest(ctx)));
   server.registerTool("storybloq_lesson_create", {
-    description: "Create a new lesson",
+    description: "Create a new lesson. ID assignment is serialized under the project lock, so concurrent creates that acquire the lock receive distinct sequential IDs.",
     inputSchema: {
       title: z12.string().describe("Lesson title \u2014 concise lesson name"),
       content: z12.string().describe("The actionable rule (1-3 sentences)"),
@@ -20112,12 +20116,12 @@ async function trimFailedDirectory(inboxPath) {
 var ENV_VAR2 = "STORYBLOQ_PROJECT_ROOT";
 var LEGACY_ENV_VAR2 = "CLAUDESTORY_PROJECT_ROOT";
 var CONFIG_PATH2 = ".story/config.json";
-var version = "1.4.3";
+var version = "1.4.4";
 function tryDiscoverRoot() {
   const envRoot = process.env[ENV_VAR2] ?? process.env[LEGACY_ENV_VAR2];
   const envName = process.env[ENV_VAR2] ? ENV_VAR2 : LEGACY_ENV_VAR2;
   if (envRoot) {
-    if (!isAbsolute2(envRoot)) {
+    if (!isAbsolute3(envRoot)) {
       process.stderr.write(`Warning: ${envName} must be an absolute path, got: ${envRoot}
 `);
       return null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@storybloq/storybloq",
-  "version": "1.4.3",
+  "version": "1.4.4",
   "license": "PolyForm-Noncommercial-1.0.0",
   "description": "Project memory for Claude Code. Storybloq stores tickets, issues, handovers, and lessons in a .story/ folder inside your repo so every session starts where the last one left off. Pairs with the Storybloq Mac app on the App Store.",
   "homepage": "https://storybloq.com",

package/src/skill/SKILL.md

@@ -13,7 +13,7 @@ Invocation differs by client: use `/story` in Claude Code, `$story` in Codex, or
 
 This guard runs on EVERY `/story` invocation regardless of subcommand (`/story`, `/story auto`, `/story review`, `/story plan`, `/story guided`, `/story handover`, `/story snapshot`, `/story export`, `/story design`, `/story review-lenses`, `/story settings`, `/story help`, `/story status`, etc.). It MUST complete before ANY other action in this invocation.
 
-**Guard prelude: force-surface deferred MCP tools.** Before running step 1 of this guard, make a single `ToolSearch` call with `query: "storybloq"` (max_results: 20). On Claude Code desktop/web, `storybloq_*` tool schemas are deferred — without this prelude the subsequent `storybloq_status` call in step 1 is not dispatchable. The prelude is explicitly part of the guard, not a separate pre-guard step; it satisfies the whitelist below.
+**Guard prelude: force-surface deferred MCP tools.** Before running step 1 of this guard, make a `ToolSearch` call with `query: "storybloq"` and `max_results: 80` (high enough to surface the full `storybloq_*` tool set, currently ~53 tools, in one call; a smaller cap truncates alphabetically and can drop `storybloq_status`). On Claude Code desktop/web, `storybloq_*` tool schemas are deferred, so without this prelude the subsequent `storybloq_status` call in step 1 is not dispatchable. If `storybloq_status` is still not available after that call (some clients clamp or ignore `max_results`), make a second targeted `ToolSearch` with `query: "storybloq_status"` and `max_results: 5`, which ranks that exact tool to the top, before concluding anything about MCP availability. The prelude is explicitly part of the guard, not a separate pre-guard step; it satisfies the whitelist below.
 
 - If `ToolSearch` itself is not available or returns an error on this harness, SKIP the prelude and continue to step 1. Do NOT treat a missing `ToolSearch` tool as evidence that MCP is unavailable — step 1's `storybloq_status` call will either succeed (MCP already surfaced) or its failure will route the skill to the Step 0 setup/CLI-fallback path below.
 - The prelude is idempotent: on terminal CLI sessions where `storybloq_*` tools are already in the base list, it simply returns the same tool set.
@@ -62,7 +62,7 @@ Check if the storybloq MCP tools are available.
 **Deferred tools note (Claude Code app).** Claude Code desktop/web may register MCP tools at session start but defer exposing their full schemas to your tool list until you explicitly request them. A naive "look for `storybloq_status` in available tools" check fails on a cold session even when the MCP server is healthy and connected, routing the skill to the CLI fallback unnecessarily. The Step 0.5 guard prelude above (the `ToolSearch` call) has already force-surfaced any deferred tools by this point, so this step only needs to check the current tool list:
 
 1. **Check for storybloq MCP tools in your tool list.** If any `storybloq_*` tools (for example `storybloq_status`) are present, MCP is available -- proceed to Step 1.
-2. **If no `storybloq_*` tools are present**, try a second `ToolSearch` call with `query: "storybloq"` (max_results: 20) as a safety net in case the guard prelude was skipped or failed silently. If the response lists any `storybloq_*` tools, proceed to Step 1.
+2. **If no `storybloq_*` tools are present**, try a `ToolSearch` call with `query: "storybloq"` and `max_results: 80` (and, if `storybloq_status` is still not listed, a targeted `query: "storybloq_status"`, `max_results: 5`) as a safety net in case the guard prelude was skipped or failed silently. If the response lists any `storybloq_*` tools, proceed to Step 1.
 3. **If `ToolSearch` is unavailable on this harness OR returned no matches**, MCP is genuinely unavailable -- continue with the setup/fallback path below. Missing `ToolSearch` is never by itself evidence that MCP is broken; it just means the harness exposes tools differently.
 
 **If MCP tools are NOT available:**
@@ -138,18 +138,17 @@ Open with the project name and progress. Mention what the last session accomplis
 
 You MUST show the following tables after the prose intro. Do not summarize them in paragraph form.
 
-**Ready to Work table** -- call `storybloq_recommend` for context-aware suggestions. Always render as a markdown table:
+**Ready to Work table** -- call `storybloq_recommend` for context-aware suggestions. `storybloq_recommend` MIXES tickets and issues, so render as a neutral markdown table:
 
 ```
 ## Ready to Work
-| Ticket | Title                              | Phase      |
-|--------|-----------------------------------|------------|
-| T-001  | Project setup                     | foundation |
-| T-011  | Rate agreement conditions schema  | foundation |
-| T-012  | Audit trail infrastructure        | foundation |
+| Item    | Type   | Title                            | Context        |
+|---------|--------|----------------------------------|----------------|
+| T-011   | ticket | Rate agreement conditions schema | foundation     |
+| ISS-042 | issue  | Auth token expiry bug            | severity: high |
 ```
 
-Show up to 5 unblocked tickets. If more exist, note "(+N more unblocked)".
+Ticket rows show their phase in Context; issue rows show severity. Show up to 5 recommendations. If more exist, note "(+N more)". Note: tickets are filtered to unblocked ones, but issues are ranked by severity and have no blocker model, so a listed issue may be externally blocked -- verify it is actionable before starting.
 
 **Decisions Pending** (show only if there are TBD items in CLAUDE.md or undecided tech choices):