axstack 0.20.15 → 0.20.16

package/README.md

@@ -114,10 +114,10 @@ For recurring peer review, Axstack defines one optional native Orca review manag
 Own-PR observation and authorized repair remain user-driven through `axstack-watch`. Its chat-run mode can use one optional same-host native Orca observer per Run, about every ten minutes, to report new PR events internally to the original chat. The chat alone directs repairs and publication. Activation needs a live host canary; source and install checks do not prove it is running.
 
 The review manager uses a 15-minute schedule. Each pass uses a fresh finite
-session in an isolated workspace and admits eligible actionable PR events within
+session in one dedicated existing workspace and admits eligible actionable PR events within
 measured host capacity. Waiting PRs remain tracked without consuming
 execution slots, so a large open-PR backlog does not require an idle agent per PR.
-Completed passes save continuity and retire their own verified resources.
+Completed passes save compact continuity and close only their own exact terminal.
 Held jobs preserve evidence, use private worktree-local temporary paths, and
 release capacity only after native descendant settlement. Uncertain execution
 teardown pauses the lane; settled evidence cleanup does not occupy a slot.

package/docs/workflows.md

@@ -209,36 +209,27 @@ The watch lasts until all member PRs merge or close, or you cancel it. Stop requ
 ## Optional native peer-review automation
 
 The optional native review manager runs at minutes `0,15,30,45`. Each
-scheduled pass uses a fresh finite session in a new isolated workspace, scans complete
+scheduled pass uses a fresh finite session in one dedicated existing workspace, scans complete
 discovery pages, and admits eligible actionable PR events within measured host
 capacity. Waiting PRs stay covered and consume no slot after
 owned descendants settle. Each job uses one repository-parented worktree; the
 manager never checks out PR branches in its own workspace.
 
-Every pass reconciles saved, GitHub, and native Orca state across all same-lane
-workspaces before admission. A
-confirmed same-lane manager makes the new duplicate do no work or shared-record
-write and close only itself. Normal teardown settles descendants, saves durable
-continuity and decisions outside disposable workspaces, then retires its own
-verified isolated pass workspace as the final action. It never bulk-closes a
-shared manager workspace or a PR-job worktree, or cleans preserved
-evidence, user sessions, unknown liveness, `user_takeover`, or ambiguous
-publication state. Manual review and user-driven `axstack-watch` remain outside
-this scheduled lifecycle.
-
-One natively ordered successor may recover an exact positively completed
-predecessor whose terminal survived, but only after matching its automation,
-run, workspace, and terminal incarnation and proving zero unsettled descendants.
-It saves and reads back the cleanup claim before exact native close, then proves
-the full process tree exited before ownership release or guarded worktree removal.
-Age, status, or idle state alone never authorizes cleanup. Conflicting successors,
-identity mismatch, unknown or protected state, `user_takeover`, unexpected
-terminals, dirty or unpushed work, and unarchived evidence hold cleanup; an
-unchanged failure is deduplicated. Native ordering is not an atomic lock, so the
-overlap canary remains an activation requirement.
-
-Each bounded job uses a private `0700` temporary directory inside its own
-worktree. Cleanup targets only the validated owned path: no `TMPDIR` globs,
+Every pass reconciles saved, GitHub, and native Orca state across the lane before
+admission. A confirmed same-lane manager makes the new duplicate do no work or
+shared-record write; it closes only its own exact terminal. The pass settles
+descendants,
+releases worker terminals, archives private evidence and reads it back, then
+uses `axstack-cleanup` guards to remove reviewer and PR-job worktrees. A merged
+or closed PR does not keep a clean job worktree waiting for a user decision.
+Dirty source, unpushed commits, `user_takeover`, unknown liveness, and ambiguous
+publication remain cleanup holds. The manager saves compact continuity, then
+closes its own exact terminal as the final action. Manual review and user-driven
+`axstack-watch` remain outside this scheduled lifecycle.
+
+Manager and job commands set `TMPDIR` to a private directory inside their owning
+workspace. Each bounded job uses a private `0700` directory. Cleanup targets
+only the validated owned path: no `TMPDIR` globs,
 shared-root sweeps, or general cache wipes, and uncertain files remain for
 reconciliation. Permission prompts and provider safety refusals are incomplete
 holds, never bypass or cross-model retry signals. The coordinator preserves the
@@ -259,7 +250,7 @@ relative contract and invokes `axstack-review`. Bounded jobs publish ordinary
 exact-head review verdicts; the human merges. Manual adopted-PR maintenance
 uses `axstack-watch` with local-SHA review before authorized publication.
 Exceptional security, permanent-on-chain, or architectural decisions remain actionable in GitHub or a durable user-owned conversation
-after manager self-close, with an authorized deduplicated Telegram notification.
+after the manager session ends, with an authorized deduplicated Telegram notification.
 The current operational contract is
 `skills/axstack/references/automations.md`.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "axstack",
-  "version": "0.20.15",
+  "version": "0.20.16",
   "description": "Axstack installer and setup CLI: installs owned chat skills and role data, configures supported harness settings, and checks Orca capabilities.",
   "keywords": [
     "claude-code",

package/skills/axstack/references/automations.md

@@ -8,21 +8,18 @@ automation specs and plans describe retired designs and are not instructions.
 The review manager runs at minutes `0,15,30,45` and invokes
 [axstack-review](../../axstack-review/SKILL.md) for eligible peer reviews.
 
-Use a new isolated workspace for every scheduled pass, with one fresh finite
-manager session. Configure native repo-created worktree mode against the
-designated manager repository; never target an existing shared workspace.
-Do not use `--reuse-session`. The scheduler creates the pass workspace before
-launch; the manager must not move itself from a shared launch workspace.
-Keep lane continuity and evidence outside disposable manager workspaces at
-the configured durable absolute paths. A manager never checks out a PR branch
-in its pass workspace. Missed slots do not replay a backlog; the next ordinary pass
+Use one dedicated existing Orca workspace owned by this automation. Configure
+native existing-workspace mode with `--fresh-session`, never `--reuse-session`;
+each pass gets a fresh finite manager session. Keep lane continuity and evidence
+at configured durable absolute paths. A manager never checks out a PR branch
+in its workspace. Missed slots do not replay a backlog; the next ordinary pass
 discovers current state. The short packaged review prompt sits beside this file
 and discovers these rules by relative link instead of copying them.
 
 Provision one explicit absolute continuity path per automation ID in the
-scheduled prompt. Follow [Run record](run-record.md) for its contents; the
-repository's absolute Git common directory is a valid durable root, but a pass
-worktree is not. Missing or non-durable continuity configuration holds admission.
+scheduled prompt. The repository's absolute Git common directory is a valid
+durable root; missing or non-durable configuration holds admission. Keep
+continuity bounded and archive old pass history per [Run record](run-record.md).
 
 This is prompt policy, not proof that Orca starts a fresh session or prevents
 overlapping passes. Before activation a native canary must prove fresh-session
@@ -33,14 +30,14 @@ effects. A firing timestamp proves neither delivery nor useful completion.
 ## Session admission
 
 Reconcile saved state, current GitHub state, and native Orca Tasks, Dispatches,
-sessions, and liveness across all workspaces belonging to the same automation
-before discovery or admission; never infer lane ownership from an empty local
-workspace. Bind the lane to the automation ID and pass to its native run ID,
-workspace ID, and terminal identity, not a title or directory-name guess.
+sessions, and liveness across all workspaces belonging to the lane before
+discovery or admission; never infer lane ownership from an empty local workspace.
+Bind the lane to the automation ID and pass to its native run ID, workspace ID,
+and terminal identity, not a title or directory-name guess.
 A confirmed live manager for the same lane remains authoritative.
 The new duplicate does no PR work, makes no shared-record write, touches
-nothing owned by the live manager, and closes only itself as its final action
-by the same guarded isolated-workspace retirement below, not a tab-only close.
+nothing owned by the live manager, and closes only its own exact terminal as
+its final action under the guard below.
 Unknown liveness blocks admission and shared-record writes; it does not
 authorize takeover, cleanup, or a duplicate manager. Preserve `user_takeover`
 and other user-owned sessions.
@@ -54,66 +51,14 @@ Read every page of native runs, workers, and workspace inventory; truncated or
 failed inventory holds admission and cleanup rather than implying absence.
 
 A prior manager does not retain the lane merely because its automation run
-status says failed or dispatched. Require confirmed native process exit for its
-exact terminal incarnation, saved continuity, and settlement of all owned jobs
-and descendants before releasing its lane ownership. Absence or saved retirement
-intent alone is insufficient. Conversely a completed run row does not prove exit.
+status says failed or dispatched. Reconcile a surviving prior terminal using
+exact identity and proven completion from native state before treating it as
+live or releasing ownership. Require confirmed process exit for its exact
+terminal incarnation, saved continuity, and settlement of all owned jobs and
+descendants before ownership release. A completed run row alone does not prove exit.
 If these facts remain unknown, report the hold at the durable decision location;
 do not silently stand down forever or replace a potentially live owner.
 
-### Guarded completed-predecessor recovery
-
-A successor may retire a positively completed predecessor whose manager terminal
-survived only through this narrow recovery path. Eligibility requires an exact
-automation ID, run ID, workspace ID, and terminal incarnation match, a positive
-completion receipt bound to that incarnation, zero active or unsettled descendants,
-and every owned Task and Dispatch settled. A completed row or saved retirement
-intent alone is not positive completion. Age, status, and idle state are never
-cleanup authority. Active, unknown, protected, identity-mismatched,
-`user_takeover`, unexpected-terminal, permission-held, or otherwise unverifiable
-state preserves the predecessor and pauses admission; this path never takes over
-its PR work.
-
-Exactly one successor, selected by native run ordering, may write the cleanup
-claim. Immediately before writing, re-read the complete lane inventory and
-ordering; then save and read back claimant identity, predecessor identity,
-completion, and zero-descendant continuity before the exact native workspace
-close. A later successor reconciles that claim and performs no cleanup mutation.
-Missing ordering or a conflicting claim holds both cleanup and admission. This
-ordering is not an atomic lock; activation still depends on the overlap canary
-proving that two successors cannot both mutate one predecessor.
-
-Use the version-matched native workspace close against the receipt's complete
-workspace ID, never an individually guessed terminal or broad selector. After
-close, re-list native runs, workspaces, terminals, Tasks, and Dispatches and prove
-the full predecessor process tree exited before ownership release. Save and read
-back the exit and release receipts, then use native worktree cleanup only when the
-workspace has no children, dirty or unknown files, unpushed commits, unarchived
-evidence, or user-owned work. Preserve every failed or uncertain close, exit,
-release, or removal with its exact resume condition and pause the lane. An
-unchanged cleanup failure gets no destructive retry or duplicate notification.
-
-Before PR admission, reconcile old pass resources and reclaim every safely
-removable earlier pass workspace under the retirement guards below. This is
-routine cleanup on every admitted pass; do not wait for the three-workspace
-threshold to start cleanup. Save confirmed exit and ownership-release receipts
-before removing each workspace. Preserve dirty, unpushed, evidence-bearing,
-user-owned, active, or uncertain resources; the threshold never relaxes these guards.
-Explicitly classified evidence may cease to block cleanup only after the
-[private evidence archive](evidence-archive.md) is verified and its receipt is
-read back from durable continuity. This never makes other dirt disposable.
-After cleanup, re-list and count only the earlier pass workspaces still remaining.
-If three or more unreclaimed
-earlier pass workspaces remain, disable only this automation through the native
-CLI, verify the disabled setting, save/report the cleanup hold, and admit no new
-PR jobs. Also pause on a confirmed earlier-manager retirement failure or
-unresolved lane ownership. A settled PR-job worktree retained for evidence is a
-cleanup hold, not unsettled execution or lane ownership.
-Already-dispatched passes still reconcile and retire only their own safe resources;
-this threshold is a stop condition, not an atomic hard cap on in-flight creations.
-An uncertain disable is a reported failure, not proof scheduling stopped. Resume
-only after ownership/cleanup is verified and explicit activation authority exists.
-
 ## Discovery and coverage
 
 Resolve self on every tick with `gh api user --jq .login`; never hardcode the
@@ -176,12 +121,13 @@ coordinator. Reviewers retain the isolation required by `axstack-review`:
 each runs in a separate Orca child worktree, keeps its probes and evidence
 inside that worktree, and preserves required evidence before removal.
 
-Give each job a private job-local temporary directory under its per-PR
-worktree, following the ownership, containment, and cleanup checks in the
-[runtime boundary](orca-runtime.md#reviewer-workspaces-and-evidence). Never
-delete through a broad `TMPDIR` glob, sweep a shared temporary root, or wipe a
-general cache. Preserve evidence and any temporary path whose ownership or
-containment is uncertain.
+Set `TMPDIR` for manager and job commands to a private directory inside each
+command's owning workspace. Follow ownership, containment, and cleanup checks
+in the [runtime boundary](orca-runtime.md#reviewer-workspaces-and-evidence).
+Never write temporary files under `/` or another shared root. Never delete
+through a broad `TMPDIR` glob, sweep a shared temporary root, or wipe a general
+cache. Preserve evidence and any temporary path with uncertain ownership or
+containment.
 
 An unchanged exact head and unchanged event identity creates no job; an
 unchanged exact head with a new event identity remains actionable. Event
@@ -222,12 +168,12 @@ hold, preserve the workspace, and let unrelated eligible PRs continue.
 
 An active, unknown, protected, or unverifiable coordinator or descendant is
 different: preserve its evidence and keep its slot occupied. Unresolved
-execution teardown, or failure to retire the manager pass itself, pauses the
-lane before another pass can admit work rather than accumulating active passes
-or claiming capacity from an uncertain process tree.
+execution teardown pauses the lane before another pass can admit work rather
+than claiming capacity from an uncertain process tree.
 
-When the current event is handled, settle and release owned native resources.
-Preserve dirty worktrees, unarchived review evidence, pending
+When the current event is handled, settle the PR job and descendants, then use
+native `worker-release` for their worker terminals. Preserve dirty source,
+unpushed commits, unarchived review evidence, pending
 external results, and user-owned work until durability and ownership are
 proven. Unknown liveness, `user_takeover`, and ambiguous publication likewise
 forbid cleanup. Here a pending external result means an unconfirmed review submission
@@ -235,12 +181,13 @@ or send outcome, not pending CI. Waiting state belongs in GitHub and the compact
 record, never in an idle model, per-PR timer, or polling loop.
 Follow the [private evidence archive](evidence-archive.md) when evidence is the
 only local state to preserve; archive success does not relax any other guard.
-For a completed PR-job, including one whose PR remains open, archive classified
-reviewer scratch through the [private evidence archive](evidence-archive.md),
-read back the archive and compact receipt, then follow
-[axstack-cleanup](../../axstack-cleanup/SKILL.md)'s exact-path guards to retire
-the reviewer checkout before merge. This does not release active jobs or manager
-pass workspaces.
+For a settled PR job, archive classified scratch through the
+[private evidence archive](evidence-archive.md), read back its archive and
+compact receipt, then use [axstack-cleanup](../../axstack-cleanup/SKILL.md)'s
+exact-path guards to retire reviewer and PR-job worktrees in the same pass.
+A merged or closed PR must never keep a job worktree waiting for a user decision;
+resolve that hold by archive and cleanup. Preserve genuine protections: dirty
+source, unpushed commits, `user_takeover`, unknown liveness, and ambiguous publication.
 
 ## Review authority
 
@@ -285,50 +232,23 @@ or separate model gate.
 ## Finite-session teardown
 
 After admission closes, settle every owned PR job and all descendants before the
-manager session ends; active or unknown descendants keep their PR slot occupied
-and must be reconciled rather than trusted from saved status. Then save durable
-continuity, evidence locations, pending receipts, and user decisions before
-self-close. Waiting PRs still occupy zero slots once their owned trees settle.
-
-Cleanup of PR-job setup shells stays scoped to positively identified owned unused
-setup shells: use the native exact-terminal close operation for each only.
-Preserve dirty worktrees, unarchived review evidence, user-owned
-terminals, unknown liveness, `user_takeover`, and ambiguous publication state.
-Never classify all dirt as evidence. If explicitly classified evidence is the
-last retention reason, apply and verify the [private evidence archive](evidence-archive.md),
-update durable continuity, and read it back before native retirement.
-Completed PR-job reviewer scratch uses axstack-cleanup after archive and readback;
-it never changes manager pass preservation or retirement guards.
-
-For the manager pass only, verify native run/workspace identity, exclusive
-automation ownership, no unsettled descendants, and a fresh terminal inventory
-containing only this manager and its proven unused setup shells. No other pass
-may target this workspace. If an unexpected terminal or user takeover is present,
-do not bulk-close; preserve the workspace and report the hold at its durable
-decision location. Never bulk-close a shared manager workspace or a PR-job worktree.
-
-After saving continuity, use the version-matched native workspace retirement:
-`terminal close --worktree id:<exact-native-workspace-id> --all --json`.
-Copy the complete ID from the run/workspace receipt; never use a name, branch,
-path-only selector, or `active` for this destructive operation.
-Self-close is the final action; perform no record write or cleanup afterward.
-A failed or uncertain close is not proof of retirement. The next admitted pass
-reconciles prior retirement from native state before trusting saved intent.
-Retire only positively identified completed pass resources; do not kill another
-live or unknown manager. Remove an old pass worktree only with native cleanup
-after terminal retirement is confirmed and it has no unpushed commits,
-unarchived evidence, children, user-owned work, unknown files, or unexplained
-dirty source. A verified evidence archive does not require otherwise clean Git
-state, but every remaining change must still be positively classified and safe;
-unknown dirt blocks removal. Never use recursive shell deletion. Failed cleanup
-remains recorded, not silently forgotten. Failed PR-job workspace cleanup stays
-a cleanup hold after execution settles; failed or unverifiable manager-pass
-retirement pauses the lane instead of allowing active passes to accumulate.
-
-The activation canary must additionally prove distinct workspace IDs per pass,
-cross-workspace lane admission, self-retirement and absence after client reconnect,
-and bounded retained worktrees over repeated passes. A shell-only close test does
-not prove agent resume-record retirement. Do not activate on source checks alone.
+manager session closes; active or unknown descendants keep their PR slot occupied
+and must be reconciled from native state. Release settled worker terminals and
+complete guarded evidence archival and worktree cleanup in this pass. Save
+continuity, open decisions, and the last pass summary and read back the save.
+Use the exact native terminal close for this pass's own terminal from its run
+receipt: `orca terminal close --terminal <exact-handle> --json`. Terminal close
+is the final action. Never use `--all`, a broad or name selector, or another
+terminal in the dedicated workspace; uncertain identity or close outcome holds
+the lane for native reconciliation, never a guessed retry.
+Waiting PRs still occupy zero slots once their owned trees settle. A failed
+cleanup remains a recorded hold with its exact resume condition, but does not
+keep settled execution active.
+
+The activation canary must prove fresh sessions in the dedicated workspace,
+same-lane overlap admission, recovery after session loss, nested dispatch depth,
+process and memory effects, and terminals in the dedicated workspace bounded
+over repeated passes. Do not activate on source checks alone.
 
 ## Recovery and limits
 

package/skills/axstack/references/lifecycle.md

@@ -113,13 +113,12 @@ differs from merged; human merges.
 
 ## Review automation health
 
-The native review manager uses fresh finite sessions in isolated per-pass
-workspaces on a 15-minute schedule. It admits eligible actionable PR
-events within measured host capacity; waiting PRs remain covered without
-reserving slots. Bounded PR jobs own their
-events, use per-PR worktrees, and settle after descendants settle. Build no
-custom scheduler, state engine, or legacy fallback. Details live in
-[Watch runtime](../../axstack-watch/references/watch-runtime.md).
+The native review manager uses fresh finite sessions in one dedicated existing
+Orca workspace on a 15-minute schedule. It admits actionable PR events within
+measured host capacity; waiting PRs remain covered without reserving slots.
+Bounded PR jobs use per-PR worktrees and settle after descendants. Build no
+custom scheduler, state engine, or legacy fallback. See
+[Review manager](automations.md).
 
 ## Audit hook (close-out and meaningful checkpoints)
 

package/skills/axstack/references/review-manager-prompt.md

@@ -1,13 +1,12 @@
 # Review manager prompt
 
-You are a fresh finite review-manager session in its isolated per-pass Orca workspace. Enter
-through the installed `axstack-review` skill; that skill loads its packaged
+You are a fresh finite review-manager session in the automation's dedicated
+existing Orca workspace. Enter through the installed `axstack-review` skill; that skill loads its packaged
 `../axstack/references/automations.md` contract by relative reference. Discover
 every eligible peer-review event and invoke the skill through Orca for each
 admitted bounded PR job. Keep complete coverage and admit actionable events
 within measured host capacity, preserve exact ownership and receipts, settle
-completed trees,
-and stay quiet when nothing changed. Reconcile before admission, save durable
-continuity outside this workspace, then retire only this pass workspace as the
-final action under the contract's ownership guards. Reconcile the whole lane,
-not just this workspace. Never check out a PR branch here.
+completed trees, and stay quiet when nothing changed. Reconcile before admission,
+save durable continuity and the last pass summary, then exact close of your own terminal as
+the final action under the contract. Reconcile the whole lane, not just this
+workspace. Never check out a PR branch here.

package/skills/axstack/references/run-record.md

@@ -49,6 +49,11 @@ forge/PR state, and the approved spec remain sources of truth. The driver
 verifies exact SHAs and receipts before recording a transition; a worker claim
 alone is not verification.
 
+For the scheduled review manager, keep only current lane state, open holds,
+watermarks, and the last pass summary in its durable continuity record (a few
+dozen lines). Append older pass history to an archive file beside that record;
+never re-read it by default. Read it only for a specific recovery question.
+
 Before changing `Driver` or a task `Owner`, verify that the prior driver is
 inactive against actual Orca session and Dispatch state, or that an explicit accepted transfer
 permits reassignment. Idle alone never reassigns ownership.