axstack 0.20.19 → 0.20.20

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "axstack",
-  "version": "0.20.19",
+  "version": "0.20.20",
   "description": "Axstack installer and setup CLI: installs owned chat skills and role data, configures supported harness settings, and checks Orca capabilities.",
   "keywords": [
     "claude-code",

package/skills/axstack/references/automations.md

@@ -45,9 +45,10 @@ discovery or admission; never infer lane ownership from an empty local workspace
 Bind the lane to the automation ID and pass to its native run ID, workspace ID,
 and terminal identity, not a title or directory-name guess.
 A confirmed live manager for the same lane remains authoritative.
-The new duplicate does no PR work, makes no shared-record write, touches
-nothing owned by the live manager, and closes only its own exact terminal as
-its final action under the guard below.
+Once identified as a duplicate, the new pass does no PR work, makes no further
+shared-record write, touches no live or unsettled resource owned by the live
+manager, and closes only its own exact terminal as its final action under the
+guard below.
 Unknown liveness blocks admission and shared-record writes; it does not
 authorize takeover, cleanup, or a duplicate manager. Preserve `user_takeover`
 and other user-owned sessions.
@@ -119,6 +120,7 @@ PRs cannot starve older unserved work.
 ## Per-PR jobs
 
 At PR-job and reviewer dispatch, apply [Readable sidebar](workspace-hygiene.md#readable-sidebar).
+Include [Safe deletion](workspace-hygiene.md#safe-deletion) in PR-job briefs.
 
 The logical manager lane owns ongoing discovery and continuity across finite
 sessions; the bounded PR coordinator owns only its admitted event. Do not create a second live owner or
@@ -250,7 +252,8 @@ At pass start, clear finished predecessor terminals of the same automation in
 the dedicated workspace only after proving completion, by the exact-handle
 fallback in [Workspace hygiene](workspace-hygiene.md).
 Then run the driver-start orphan sweep for repositories listed in this lane's
-run record, under the same guards. The sweep is silent when nothing was removed;
+run record plus registered repositories on this host containing eligible settled resources
+of any Axstack run on this host, under the same guards. The sweep is silent when nothing was removed;
 record sweep results and holds in the continuity record's Open holds table.
 
 After admission closes, settle every owned PR job and all descendants before the

package/skills/axstack/references/orca-runtime.md

@@ -72,6 +72,8 @@ small-change intent, brief, authority, role snapshot, worktree, base, and
 candidate to the Task; preserve the returned
 Task, Dispatch, terminal, agent, and worktree identities. Exactly one Dispatch
 may write a candidate at a time.
+Put the [Safe deletion](workspace-hygiene.md#safe-deletion) rule in every
+worker brief.
 
 Create a worker worktree with `--parent-worktree` naming the candidate's
 worktree when both are in the same repository; see

package/skills/axstack/references/workspace-hygiene.md

@@ -8,6 +8,15 @@ only report leftovers. Record each decision and native readback in the private
 run record; uncertain ownership, liveness, or evidence
 holds only the affected resource.
 
+## Safe deletion
+
+Every shell deletion targets a literal absolute path or a `${VAR:?}`-guarded
+expansion (for example, `rm -rf -- "${EV:?}/mut"`), only inside the worker's
+own evidence folder, `TMPDIR`, or worktree. Never use a bare `$VAR`, a glob on a
+variable, `/`, `HOME`, or a shared root as a deletion target. Prefer
+`git clean -- <exact prefix>` or tool-native cleanup. A safety prompt that
+still appears is a hold; agents do not answer it.
+
 ## Settlement
 
 At intermediate completion, once a worker or reviewer Dispatch is accepted,
@@ -21,7 +30,8 @@ At final settlement, no eligible non-driver session or worktree remains,
 including the run's worktrees in other repositories. Report each remaining
 resource as a hold with its reason. Recorded native ownership by Run, Task,
 and Dispatch decides; parent/child display lineage does not. The creator closes
-what it created. A finite scheduled pass closes only its own exact terminal as
+what it created at ordinary settlement; the cross-run sweep below may retire
+its settled leftovers. A finite scheduled pass closes only its own exact terminal as
 its final action. Manual chats, automation dedicated workspaces, and genuine
 `user_takeover` sessions are never removed. Deleting a session means closing
 its terminal; agent chat history is not deleted.
@@ -59,14 +69,28 @@ removal, and use exact native worktree removal without force.
 
 Drivers sweep on phase-skill entry. A scheduled pass that owns its lane with
 recorded cleanup authority runs the driver-start orphan sweep after predecessor
-terminal cleanup, scoped to repositories listed in its run record. On
-phase-skill entry, scope the sweep to the current repository and the
-per-run worktrees in other
-repositories recorded in the driver's run records. If Orca is unreachable,
+terminal cleanup, scoped to repositories listed in its run record plus
+registered repositories on this host containing eligible settled resources of
+another Axstack run. On phase-skill entry, scope the sweep to the current repository
+and the per-run worktrees in other repositories recorded in the driver's
+run records, and registered repositories on this host containing eligible settled
+resources of another Axstack run. Inspect other Axstack run records on this host
+too; a live owning run does not protect its settled
+reviewer worktree or merged author after preservation checks. If Orca is unreachable,
 report one line and continue the phase; an unreachable host holds only its
-items. This is standing authority to remove an orphan after salvage when every
-owning Dispatch and descendant is settled, ownership and liveness are rechecked
+items. A sweep may remove resources of ANY Axstack run on this host after salvage
+when every owning Dispatch and descendant is settled (completed or failed), its
+release is confirmed or `release_unknown`, no agent is working, the exact terminal
+has had no output for at least 60 minutes, ownership and liveness are rechecked
 from a fresh native list, and evidence is durable. Remove descendants first.
+For a settled worker dispatched into a shared or driver worktree, close its
+exact terminal individually under the same 60-minute quiet rule: native close,
+else the guarded `/quit` + `exit` fallback above. Never close the live coordinator
+session's terminal for any run (the driver's own terminal) or a user chat.
+Align/Spec adviser sessions reused between rounds remain until
+their owning phase approves or stops; the quiet rule still applies then.
+For a merged or closed PR author with an unreleased settled Dispatch, request
+native worker release first, record its result, then apply the sweep guards.
 An author worktree of a merged or closed PR is sweep-eligible when its head
 commit is retrievable from the forge (for example, the PR's recorded head or a
 remote branch contains it); unverifiable state is a hold. For an eligible
@@ -78,6 +102,9 @@ them in its own continuity Open holds table. Both are silent when nothing was re
 Branches with a remote counterpart are never deleted. List live or unsettled
 work, genuine `user_takeover`, and items without provable Axstack provenance in
 one table with their reason; do not remove them.
+Dirty or unpublished work follows the salvage and publication guards above;
+open-PR authors remain protected until merge or close. Record each removed and
+held resource in the pass continuity (scheduled) or run record (driver start).
 
 ## Native bookkeeping exceptions
 
@@ -87,7 +114,9 @@ the run record contains the exact repair Dispatch ID for that terminal;
 otherwise hold. Report the mislabel to Orca upstream through the driver.
 For `release_unknown`, reconcile with native worker inspection. If a fresh
 native terminal list confirms the terminal is gone, record the readback and
-proceed; otherwise hold.
+proceed; otherwise hold unless inspection proves a settled, quiet worker. Then
+close only that worker's exact terminal under the sweep rule and confirm its
+absence. Unknown liveness holds.
 
 ## Known Orca issues
 

package/skills/axstack-cleanup/SKILL.md

@@ -25,7 +25,7 @@ and worktree removal. Do not embed or improvise a competing command protocol.
 ## Authority and scope
 
 Inline cleanup may consider only resources owned by the accepted completion it
-is processing. Driver-start orphan sweeps use the standing authority in
+is processing. Driver-start orphan sweeps follow the guarded cross-run sweep in
 [Workspace hygiene](../axstack/references/workspace-hygiene.md). Backlog
 cleanup requires an explicit bounded selector such as a
 Run, Task set, workspace set, repository, or named age window; age narrows an

package/skills/axstack-implement/SKILL.md

@@ -7,6 +7,7 @@ description: When an approved task is ready to build or repair, use axstack-impl
 
 On driver entry, sweep under [Workspace hygiene](../axstack/references/workspace-hygiene.md); dispatched workers do not sweep.
 For every dispatch brief, name its private `<run dir>/evidence/<dispatch>/` folder.
+Include [Safe deletion](../axstack/references/workspace-hygiene.md#safe-deletion) in author briefs.
 At author dispatch, apply [Readable sidebar](../axstack/references/workspace-hygiene.md#readable-sidebar).
 
 From an accepted scope identity, drive its task/PR map through author -> review

package/skills/axstack-review/SKILL.md

@@ -7,6 +7,7 @@ description: When a candidate PR or bounded codebase needs review, use axstack-r
 
 On driver entry, sweep under [Workspace hygiene](../axstack/references/workspace-hygiene.md); dispatched workers do not sweep.
 For every dispatch brief, name its private `<run dir>/evidence/<dispatch>/` folder.
+Include [Safe deletion](../axstack/references/workspace-hygiene.md#safe-deletion) in reviewer briefs.
 At reviewer dispatch, apply [Readable sidebar](../axstack/references/workspace-hygiene.md#readable-sidebar).
 
 Manual review keeps the user’s chat and workspace open.

package/skills/axstack-watch/references/watch-runtime.md

@@ -52,8 +52,10 @@ recorded cleanup authority acts as its lane's driver: clear only proven
 finished predecessor terminals of the same automation in its dedicated
 workspace, using the exact-handle fallback in
 [Workspace hygiene](../../axstack/references/workspace-hygiene.md), then run
-the driver-start orphan sweep for repositories listed in its run record under
-the same guards. Recorded cleanup authority is separate from and does not imply
+the driver-start orphan sweep for repositories listed in its run record plus
+registered repositories on this host containing eligible settled resources of
+any Axstack run on this host, under the same guards.
+Recorded cleanup authority is separate from and does not imply
 repair or maintenance authority. That cleanup-authorized watch pass is silent
 when nothing was removed and records sweep results and holds in its continuity
 Open holds table.