baldart 4.98.2 → 4.99.0

package/CHANGELOG.md

@@ -5,6 +5,25 @@ All notable changes to BALDART will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.99.0] - 2026-07-03
+
+**Consumer-lessons wave: four recurring failure patterns surfaced by mayo's nightly/weekly routine reports (20260628-skill-improve + 20260701-doc-graph-align) upstreamed into the base framework.** The consumer had fixed each locally via overlays, but three of the four root causes live in the base payload — every future consumer would have re-discovered them. The overarching meta-defect (#2) is that the lesson pipeline itself had no upstream channel: overlay fixes died in the consumer.
+
+1. **Epic-closure gate in `/new` (skill `new` 1.4.0 → 1.5.0).** `commit.md` step 28c said only "add/update the entry for this card's feature area" — nothing about the card being the LAST open child of a parent epic, so epics stayed `IN_PROGRESS` after closure (3 confirmed occurrences across two audit windows, caught only by the nightly). New deterministic sub-step **28.c-bis**: when the card YAML declares `parent:`, count non-DONE siblings; zero → flip the parent's ssot-registry entry (and its own YAML if present) to DONE in the SAME commit. Idempotent, non-triggers enumerated. Mirrored in `new2.js`'s mechanical commit prompt (step 4b + ROLE BOUNDARY widened to the parent-epic YAML status).
+2. **`skill-improve` routine + `skill-improver` agent modernized (pre-overlay-era → current model).** The routine prompt (since_version 2.1.0) instructed editing `.claude/skills/**` / `.claude/agents/**` directly — symlinked framework files that the `framework-edit-gate` (v3.3.0+) DENIES in consumers — and read only `*-code-review/doc-review/qa` reports (absent in real consumers; the agent had to improvise onto the nightly reports). Now: write surface = **`.baldart/overlays/`** (skills / agents / root primitives, with section markers); sources = **ALL routine report types** (`doc-graph-align`, `wiki-review`, `i18n-align`, `design-sync`, `ds-drift`, `full-sweep`, + prior skill-improve for context); graceful degradation on missing metrics/report types; and a new mandatory **`## Upstream Candidates`** report section — when a pattern's root cause is in the BASE skill/agent, the overlay fix is applied locally AND the base defect is flagged for the maintainer to carry via `baldart push` (closing the loop this very release exercises).
+3. **`API_BODY_CONSTRAINT_DRIFT` — contract-value body check in `doc-reviewer`.** A review/security fix that changes a validation constraint (`.max()`/`.min()`/length/regex/enum/default on a route handler, server action, or API schema) landed with the API reference *body* still stating the old value (real case: DoS cap 500 → 100); frontmatter-freshness checks don't catch body-level factual drift. New invariant-table row: verify the documented value EQUALS the code value; the doc-reviewer is the canonical writer and fixes the body directly. Covered per-card (Phase 3) and at the batch-Final doc pass (fixes applied after the per-card doc pass are caught there).
+4. **`update_triggers:` — declarative synthesis freshness (opt-in).** Coverage-map syntheses (query catalogs, schema coverage maps, endpoint inventories) silently rot when new code lands (3 missing entries across 3 cards in one week, all caught only by the nightly; the consumer hand-wrote a per-project reviewer rule). New OPTIONAL frontmatter field on wiki synthesis pages — path globs + `content:` added-line patterns that OBLIGATE updating the page when a diff matches, else `WIKI_SYNTH_STALE`. SSOT in `agents/llm-wiki-methodology.md § Update triggers`; consumed by three layers: `doc-reviewer` invariant table (per-task, fixes directly), `wiki-curator` (nightly, updates or flags), `doc-graph-align` routine (nightly commit-range cross-check, propose-don't-author). No retroactive obligation — pages without the field are exempt.
+
+**MINOR** — adds capability to existing skills/agents/routines (no new agent/skill/command/routine, so README counts unchanged; no install-layout change). **Codex parity: portable** — all changes are markdown skill/agent/protocol/routine bodies shared by both runtimes (`skill-improver`, `doc-reviewer`, `wiki-curator` auto-transpile to `.codex/agents/*.toml` on install/update; `new2.js` is the Claude-only accelerator whose inline `/new` path carries the same gate). **Not a `baldart.config.yml` key** (`update_triggers` is wiki-page frontmatter, not config) → the schema-change propagation rule does NOT apply.
+
+## [4.98.3] - 2026-07-02
+
+**Bugfix: `baldart update` re-flags `multi_tenant_theming` as a "new config key" on every run.** A user reported the schema-drift detector nagging `⚠ New config keys in this version: multi_tenant_theming` at every `baldart update`, even after configuring it. Root cause: `multi_tenant_theming` was the **only** `features.*` key whose autodetected default was hardcoded `null` (`configure.js`), because there is no on-disk signal for per-tenant theming. `mergePreserving` fills it to `false` from the template, but the **non-interactive** configure branch strips every feature whose *detected* value is `null` (the "always-ask, never-assume" contract) — so a `--non-interactive` / `update --auto` / CI / auto-flow configure wrote a config **without** the key, and `update`'s drift detector (`update.js`) then re-flagged it as new on every subsequent run. The interactive path persisted it, so it appeared to "stick sometimes then forget" — a single auto flow in between re-dropped it.
+
+- `src/commands/configure.js`: `detected.features.multi_tenant_theming` default `null → false`. Safe because **every** consumer (`ui-design`, `prd`, `bug`, `code-reviewer`, `/design-review`, …) gates on `features.multi_tenant_theming === true` — so `false` and absent are semantically identical (no skill prompts at use-time when it is absent), and the always-ask contract does not practically apply to this key. Now non-interactive configure WRITES `false` (matching the template), keeping it out of the null-strip, so the detector never re-flags it.
+
+**PATCH** — one-line detection-default fix, no behavior change for skills (they check `=== true`), no new surface, no install-layout change. **Codex parity: portable** — `configure.js` is the shared CLI installer that writes `baldart.config.yml` for both runtimes; nothing runtime-specific. **Not a NEW `baldart.config.yml` key** (the key already exists end-to-end) → the schema-change propagation rule does NOT apply.
+
 ## [4.98.2] - 2026-07-02
 
 **Negative guard: the codebase-understanding step is `codebase-architect`, not the generic built-in search agent.** A third live session — a data-wiring task (replace a hardcoded `"unità"` label with the real unit-of-measure in an order-wizard `ProductRow`) — delegated the code-path trace to the built-in `Explore` agent instead of `codebase-architect`, bypassing the profile engine, Reuse Analysis, Canonical Evidence, and the Return Contract. Diagnosed carefully (and deliberately *not* over-fitted): this was **not** a `PROFILE=ui` miss — the task's substance is data/logic wiring (product → UoM → loader → label), whose fitting profile is `feature`, not `ui`; the profile axis was left untouched. The real deviation was on the **agent-selection** axis, and it matches the recurring v4.97.1 shape: a positive mandate ("invoke `codebase-architect`") with no explicit "and NOT the generic explorer" guard (the existing `AGENTS.md` "never auto-route to a generic agent" rule is scoped to the *failure-fallback* case, not the initial choice).

package/VERSION

@@ -1 +1 @@
-4.98.2
+4.99.0

package/framework/.claude/agents/doc-reviewer.md

@@ -241,6 +241,8 @@ Run this before any general audit:
    - new/removed `process.env.VAR` → `env-vars.md`
    - card DONE → `ssot-registry.md`
    - architecture/provider/auth/schema/contract decision → ADR
+   - **changed validation constraint on a public contract** (a `.max()` / `.min()` / length / regex / enum / default changed in a route handler, server action, or API schema) → the API reference **BODY** for that endpoint: verify the documented value EQUALS the code value — frontmatter freshness alone does not catch this. Mismatch = `API_BODY_CONSTRAINT_DRIFT`; you are the canonical writer, fix the body directly. Classic source: a code-review/security fix applied AFTER the doc was written (e.g. a DoS cap tightened from 500 → 100 with the reference still saying 500).
+   - **(when `features.has_wiki_overlay: true`) diff matches a synthesis page's `update_triggers`** → that synthesis page must be updated in the same change (or flagged `WIKI_SYNTH_STALE`). Match each changed path / added line against the `update_triggers:` frontmatter of pages under `${paths.wiki_dir}/syntheses/` — see `agents/llm-wiki-methodology.md § Update triggers`. Pages without the field are exempt (no retroactive obligation).
    Only read the specific doc that a triggered row points to.
 6. Check completeness of: data model docs, collection docs, API docs, UI docs, `product-scope.md` only for business-scope changes, `project-status.md`, ADRs when architecture changed, backlog notes, macro-feature SSOT cross-links.
 7. Write missing docs directly. Prefer extending existing reference docs over creating new files unless the feature is large enough to justify a standalone document. For type-specific checklists, read `.claude/skills/doc-reviewer-support/references/doc-checklists.md` **if it exists**; otherwise apply the doc-type rules and invariant table above and the `doc-writing-for-rag` skill's templates.
@@ -292,7 +294,7 @@ If `.claude/skills/doc-reviewer-support/references/deliverables-format.md` exist
 - **C. Invariant check** — table of triggered invariants and their resolution (or "all clear").
 - **D. Docs written/fixed** — concrete file list with one-line description per file.
 - **E. Doc debt** — `[DOC-DEBT]` tasks opened (or "none").
-- **F. Drift flags** — any `DS_*`, `SCHEMA_DRIFT`, `REGISTRY_GAP`, `ENDPOINT_COUNT_MISMATCH`, etc., with disposition.
+- **F. Drift flags** — any `DS_*`, `SCHEMA_DRIFT`, `REGISTRY_GAP`, `ENDPOINT_COUNT_MISMATCH`, `API_BODY_CONSTRAINT_DRIFT`, `WIKI_SYNTH_STALE`, etc., with disposition.
 - **G. Deferred** — anything not done this pass, factually (no rationalization).
 - **H. Obsidian Corpus Impact** — whether vault sync / corpus follow-up is needed (assess only; OPTIONAL — see Obsidian note in the Feature Documentation Process).
 

package/framework/.claude/agents/skill-improver.md

@@ -1,61 +1,91 @@
 ---
 name: skill-improver
-description: "Weekly skill improvement agent. Analyzes accumulated review findings and QA results from the past week to identify recurring patterns, then proposes and applies targeted improvements to skill files (.claude/skills/), coding standards (agents/coding-standards.md), and AGENTS.md. Run via weekly cron every Sunday 02:00 UTC. Only modifies .claude/, agents/, AGENTS.md, and docs/ — never application code."
+description: "Weekly skill improvement agent. Analyzes the past week's routine reports (code-review, doc-review, qa, doc-graph-align, wiki-review, i18n-align, design-sync, ds-drift, full-sweep) to identify recurring patterns, then applies targeted improvements to the consumer's overlay layer (.baldart/overlays/) and flags base-framework defects as Upstream Candidates. Run via weekly cron every Sunday 02:00 UTC. Only modifies .baldart/overlays/ and docs/ — never application code, never the framework payload."
 model: sonnet
 color: purple
 ---
 > **YOLO MODE**: All agents spawned via the Task tool MUST use `mode: "bypassPermissions"`. No exceptions.
 
-You are the **Skill Improvement Agent**. Your job is to analyze the past week's review
-findings and automatically improve the skill/agent instructions to prevent recurring issues.
+You are the **Skill Improvement Agent**. Your job is to analyze the past week's
+routine findings and improve the skill/agent instructions so recurring issues stop
+recurring — via the consumer's **overlay layer**, never by touching the framework
+payload directly.
 
 ## Scope (STRICT)
 
 **MAY MODIFY:**
-- `.claude/skills/**/*.md` — add anti-patterns, tighten checks, improve instructions
-- `agents/coding-standards.md` — add new conventions
-- `AGENTS.md` — add new must-rules for critical patterns
-- `docs/reports/skill-improvement-YYYY-MM-DD.md` — output report
+- `.baldart/overlays/<skill>.md` — per-skill extensions (anti-patterns, tightened checks, project rules)
+- `.baldart/overlays/agents/<name>.md` — per-agent extensions (`## [OVERRIDE]` / `## [APPEND]` / `## [PREPEND]` section markers)
+- `.baldart/overlays/AGENTS.md` / `.baldart/overlays/CLAUDE.md` — project-wide rule extensions (root primitives are generated files)
+- `docs/reports/{{YYYYMMDD}}-skill-improve.md` — output report
 
 **MUST NOT MODIFY:**
+- `.claude/skills/**`, `.claude/agents/**`, `.claude/commands/**` — symlinked/generated framework files; the `framework-edit-gate` hook denies these writes. The overlay IS the write surface.
+- Root `AGENTS.md` / `CLAUDE.md` — generated from versioned skeletons; edit the overlay instead.
+- Anything under `.framework/` — the framework subtree is read-only in consumers.
 - Any file under `src/` — no application code
 - `${paths.backlog_dir}/`, `${paths.prd_dir}/`, `${paths.adrs_dir}/` — no product docs
 - `.claude/settings.json` — no infra config changes
 
 ## Weekly Analysis Process
 
-### Step 1 — Read metrics registry
+### Step 1 — Read metrics registry (graceful degradation)
 Read `docs/metrics/skill-runs.jsonl` and filter to the past 7 days.
-Compute per-skill aggregates: mean fix_cycles, actionability_rate, qa_pass_first_attempt_rate.
+Compute per-skill aggregates: mean fix_cycles, actionability_rate,
+qa_pass_first_attempt_rate. **If the file is absent, skip this step with a
+one-line note** — do not fail the run.
 
 ### Step 2 — Collect findings from reports
-Read all files matching:
-- `docs/reports/code-review-YYYY-MM-DD.md` from the past 7 days
-- `docs/reports/doc-review-YYYY-MM-DD.md` from the past 7 days
-- `/qa/*.md` files modified in the past 7 days
+Read ALL routine reports from the past 7 days under `docs/reports/`
+(filename pattern `YYYYMMDD-<type>.md`): `*-code-review.md`, `*-doc-review.md`,
+`*-qa.md`, `*-doc-graph-align.md`, `*-wiki-review.md`, `*-i18n-align.md`,
+`*-design-sync.md`, `*-ds-drift.md`, `*-full-sweep.md` — plus the previous
+`*-skill-improve.md` for context (what was already fixed; don't re-fix).
+Types absent this week are simply skipped — analyze what exists.
 
 ### Step 3 — Cluster recurring findings
-Group findings by category (lint, TypeScript, Security, Performance, Doc, Pattern).
-Identify patterns with ≥2 occurrences in the week.
+Group findings by category (lint, TypeScript, Security, Performance, Doc,
+Pattern, Drift). Identify patterns with ≥2 occurrences in the week. A pattern
+already addressed by a prior skill-improve overlay change that KEEPS recurring is
+a signal the overlay fix didn't work — escalate it in the report instead of
+re-applying the same fix.
 
-### Step 4 — Apply targeted improvements
+### Step 4 — Apply targeted improvements (overlay layer)
 For each recurring pattern:
-1. Determine which skill/agent file should mention it
-2. Write a concise addition (1-3 lines) — anti-pattern warning, must-rule, or example
-3. Apply the edit
-4. Commit: `[SKILL-IMPROVE] <category>: <one-line description>`
+1. Determine which skill/agent owns the gap, and whether the root cause is
+   **project-specific** (an opinion, a local convention, a local file) or a
+   **base-framework defect** (a vague step, a missing generic rule that would
+   recur in any consumer).
+2. Write a concise addition (1-5 lines) — anti-pattern warning, must-rule, or
+   example — into the matching overlay: `.baldart/overlays/<skill>.md` for
+   skills, `.baldart/overlays/agents/<name>.md` for agents (use
+   `## [APPEND] <topic>` sections; `## [OVERRIDE]` only when replacing a base
+   section wholesale). Scaffold missing overlays via
+   `npx baldart overlay scaffold` when available.
+3. Apply the edit.
+4. Commit: `[SKILL-IMPROVE] <category>: <one-line description>`.
+5. **If the root cause is a base-framework defect**: STILL apply the overlay fix
+   locally (the consumer must not wait for a framework release), AND record the
+   defect in the report's `## Upstream Candidates` section — base file path
+   (e.g. `framework/.claude/skills/new/references/commit.md`), the defect, the
+   proposed base change. The maintainer carries these upstream via `baldart push`.
 
 ### Step 5 — Write improvement report
-Write `docs/reports/skill-improvement-YYYY-MM-DD.md` with:
-- Metrics summary (week vs. previous week)
-- Patterns found (≥2 occurrences)
-- Changes applied (file, what was added)
+Write `docs/reports/{{YYYYMMDD}}-skill-improve.md` with:
+- Source reports analyzed (table: report, date, type)
+- Metrics summary (week vs. previous week, or "skipped — no metrics file")
+- Patterns found (≥2 occurrences, with evidence + confidence)
+- Changes applied (overlay file, what was added, which findings drove it)
 - Changes considered but skipped (with reason)
+- `## Upstream Candidates` (base-framework defects flagged this week, or "none")
+- Carry-over open drift not addressable via skill changes (environment gaps,
+  blocked-on-implementation items)
 
 ## Safety Rules
 
-1. **Only add, never remove** — do not delete existing rules
+1. **Only add, never remove** — do not delete existing rules (base or overlay)
 2. **Minimum 2 occurrences** in the week — no single-occurrence rules
 3. **One commit per pattern** — small and traceable
 4. **No speculative rules** — only patterns with concrete evidence from the week's findings
-5. **Max 5 skill edits per week** — avoid bloating skill files
+5. **Max 5 overlay edits per week** — avoid bloating overlays
+6. **Never bypass the edit gate** — if a write is denied by the framework-edit-gate, the target was wrong: move the change to the corresponding overlay

package/framework/.claude/agents/wiki-curator.md

@@ -61,6 +61,28 @@ The graph is **never canonical** — proposed pages must still cite repo SSOT an
 carry `canonicality: derived`. If Graphify is absent, skip this section silently.
 Provenance: cite the graph node/community id in the candidate payload.
 
+## Update Triggers (declarative synthesis freshness)
+
+Synthesis pages MAY declare `update_triggers:` in frontmatter — path globs (plain
+strings) and added-line patterns (`content:` prefix) that OBLIGATE an update when
+a diff matches. Semantics SSOT: `agents/llm-wiki-methodology.md § Update triggers`.
+
+During a nightly wiki-review, for every page under `${paths.wiki_dir}/syntheses/`
+that declares the field:
+
+1. Compute the commit range since the page's `last_verified_from_code`.
+2. Match the range's changed file paths against the glob triggers, and its added
+   lines against the `content:` triggers.
+3. On a match where the page itself was NOT updated in that range: **update the
+   page yourself** (you are the writer for the wiki layer) — add the missing
+   entries, bump `last_verified_from_code`, log to `${paths.wiki_dir}/log.md`.
+   If the update needs domain knowledge you lack, flag `WIKI_SYNTH_STALE` with
+   the matching commits as a drift finding instead.
+
+Pages without the field carry no obligation. When you CREATE a coverage-map
+synthesis (query catalog, schema coverage, endpoint inventory), declare its
+`update_triggers` at creation time — that is what keeps it alive.
+
 ## Frontmatter Discipline
 
 All wiki pages MUST have:

package/framework/.claude/skills/new/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 Formato: [Keep a Changelog](https://keepachangelog.com/) · [SemVer](https://semver.org/).
 
+## 1.5.0 — 2026-07-03
+
+- **Epic-closure gate (framework v4.99.0)**: `commit.md` step 28 gains sub-step **c-bis** — when the card being marked DONE declares a `parent:` epic, a deterministic count of non-DONE siblings decides whether the PARENT epic's ssot-registry entry (and its own YAML, if present) is flipped to DONE in the same commit. Closes the recurring consumer gap where epics stayed `IN_PROGRESS` after their last child closed (3 occurrences across two audit windows, caught only by the nightly). Mirrored in `new2.js`'s mechanical commit prompt (step 4b).
+
 ## 1.4.0 — 2026-07-02
 
 - **Analysis-profile contract (framework v4.94.0)**: `implement.md` Phase 1 step 3 now passes a deterministic `PROFILE=` token to the `codebase-architect` spawn — `ui` when the card has a non-empty `links.design`/`links.design_src` (the same mockup bit as step 6a), else `feature`. Contract SSOT: `framework/agents/analysis-profiles.md`; guarded by the `check-new-parity.mjs` tripwire.

package/framework/.claude/skills/new/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: new
 effort: medium
-version: 1.4.0
+version: 1.5.0
 description: >
   Orchestrate a team of specialized agents to implement one or more backlog cards
   end-to-end inside a dedicated worktree, with code review, doc review, QA, and

package/framework/.claude/skills/new/references/commit.md

@@ -33,6 +33,14 @@
     a. Edit the backlog YAML (`${paths.backlog_dir}/<CARD-ID>.yml`): set `status: DONE`, add `completed_date: <today>`, and add `provenance.implementation_session: <SESSION-ID>` (this run's session UUID — get it with `Bash(echo "${CLAUDE_CODE_SESSION_ID:-}")`; if empty, omit the field). Merge into any existing `provenance:` block written by `/prd` — do NOT overwrite `planning_session`. This makes an implementation bug traceable back to the session that produced it (`~/.claude/projects/*/<id>.jsonl`).
     b. Add implementation notes summarizing what was built.
     c. **Update `${paths.references_dir}/ssot-registry.md`** — add/update the entry for this card's feature area. The pre-commit doc-freshness hook BLOCKS commits that touch `${paths.backlog_dir}/` without a corresponding ssot-registry update. Always include ssot-registry.md in the same commit as the backlog YAML.
+    c-bis. **Epic-closure gate (deterministic — since v4.99.0)**: if the card YAML declares a parent epic (`parent:` field), check — AFTER step a set this card DONE — whether it was the LAST open child. Deterministic count, no judgement:
+       ```bash
+       PARENT=$(awk '/^parent:/ {print $2; exit}' ${paths.backlog_dir}/<CARD-ID>.yml)
+       if [ -n "$PARENT" ]; then
+         PENDING=$(grep -l "^parent: ${PARENT}" ${paths.backlog_dir}/*.yml | xargs grep -L "^status: DONE" | wc -l)
+       fi
+       ```
+       When `PENDING` is `0`: flip the PARENT epic's status in its ssot-registry.md entry to DONE **in the SAME commit**, and if the parent epic has its own backlog YAML, set its `status: DONE` + `completed_date` too. Non-triggers (do nothing, idempotent): the card has no `parent:`; siblings still pending (`PENDING > 0`); the parent entry is already DONE. This closes a recurring consumer gap: step 28c alone updates the CARD's feature-area entry, so epics stayed `IN_PROGRESS` after their last child closed and were only caught by the nightly doc routine (3 confirmed occurrences across two audit windows).
     d. **Verify the write**: re-read the YAML file and confirm `status: DONE` is present. If not, retry the edit.
     e. Stage BOTH the updated YAML AND ssot-registry.md, then commit (or as an immediate follow-up commit if the Phase 4 implementation commit already happened). When this produces a SECOND commit for the card, record BOTH hashes in the tracker (`commit: <impl-hash> + <done-hash>`) so traceability/bisect is unambiguous.
 29. **Update tracker**: move card to `## Completed Cards` with commit hash(es), summary, flags, **and `card_status: DONE (verified)`** — the tracker is the only state surface (§ "State surface — the tracker only"); do not also emit a TaskUpdate or Progress-Bar turn for the transition. If you surface the card completion to the user at all, do it as a short prose line folded into the commit turn, never a dedicated turn.

package/framework/.claude/workflows/new2.js

@@ -876,11 +876,11 @@ async function runCard(cardId, cardPath) {
   // main repo (so a card is never DONE with a silently-dropped requirement — F-029).
   const doneStep = deferredOpen
     ? `(4) DO NOT mark the card DONE: it has an OPEN owner-gated/policy-deferred AC. Keep status IN_PROGRESS and add an implementation_note "deferred — DONE pending follow-up (new2 skill reconciles post-run)". STILL add the ssot-registry row for the committed code.`
-    : `(4) mark the card DONE in its YAML + add the ssot-registry row.${provLine}`
+    : `(4) mark the card DONE in its YAML + add the ssot-registry row.${provLine} (4b) epic-closure gate (deterministic): if the card YAML has a \`parent:\` field, count sibling YAMLs in the backlog dir with that same parent whose status is NOT DONE; when the count is zero, flip the parent epic's ssot-registry entry to DONE (and the parent's own YAML status + completed_date, if one exists) in the SAME commit — these bookkeeping edits are in-scope for staging even if outside MAY-EDIT. Idempotent — skip when no parent, siblings still pending, or the parent entry is already DONE.`
   let commitRes
   try {
     commitRes = await agentSafe(
-      `Commit card ${cardId} in worktree ${sharedCtx.worktreePath}. MECHANICAL — do NOT re-read reference modules. ROLE BOUNDARY: you NEVER modify file contents except the card YAML status/note fields and the ssot-registry row — source/doc changes are not yours.\n` +
+      `Commit card ${cardId} in worktree ${sharedCtx.worktreePath}. MECHANICAL — do NOT re-read reference modules. ROLE BOUNDARY: you NEVER modify file contents except the card YAML status/note fields, the parent-epic YAML status (epic-closure gate only), and the ssot-registry entries — source/doc changes are not yours.\n` +
         `Steps: (1) \`git status --porcelain\`; (2) stage = MAY-EDIT (${JSON.stringify(mayEdit)}) ∩ dirty — NEVER \`git add -A\`, NEVER \`git stash\`; if dirty has files OUTSIDE MAY-EDIT, do NOT stage them and set reconcileNote; (3) commit message \`[${cardId}] <concise>\`; ${doneStep} (5) 'nothing to commit' = already committed (record HEAD).\n` +
         `On COMMIT_LOCK: clear stale lock + retry once. Still locked → committed:false.\n\n` +
         `Return: { committed, commit, filesChanged, reconcileNote }`,

package/framework/agents/llm-wiki-methodology.md

@@ -65,12 +65,47 @@ last_verified_from_code: YYYY-MM-DD
 canonical_refs:                # broader canonicals this page is consistent with
   - ${paths.references_dir}/ssot-registry.md
   - ${paths.references_dir}/project-status.md
+update_triggers:               # OPTIONAL — diff patterns that OBLIGATE an update (see § Update triggers)
+  - "src/lib/server/data/**"           # plain string = path glob on changed files
+  - "content:'use server'"             # content: prefix = pattern on ADDED lines
 ---
 ```
 
 Run a frontmatter validator (typically `npm run validate:frontmatter` or
 equivalent) before committing wiki edits.
 
+## Update triggers (declarative synthesis freshness)
+
+A synthesis page MAY declare `update_triggers:` in its frontmatter — a list of
+diff patterns that **obligate** updating the page whenever a change matches:
+
+- a **plain string** is a path glob matched against the changed file paths of a
+  diff (e.g. `src/lib/server/data/**` — "any new/changed data-layer function");
+- a **`content:` prefixed entry** is a pattern matched against the ADDED lines
+  of the diff (e.g. `content:'use server'` — "any new server action").
+
+**Semantics.** When a diff matches at least one trigger of a synthesis page and
+the page itself was not updated in the same change, the page is stale — flag
+`WIKI_SYNTH_STALE`. Three layers consume the field:
+
+1. **Per-task** — the `doc-reviewer` invariant table checks the card diff
+   against the declared triggers and updates the matching synthesis in the same
+   change (it is the canonical writer).
+2. **Nightly (curator)** — `wiki-curator` matches the commit range since each
+   page's `last_verified_from_code` and updates or flags.
+3. **Nightly (graph align)** — the `doc-graph-align` routine cross-checks its
+   analyzed commit range against declared triggers and emits `WIKI_SYNTH_STALE`
+   drift findings (propose, don't author).
+
+Pages without the field carry **no obligation** — the mechanism is opt-in and
+additive (no retroactive staleness). Declare triggers when a synthesis is a
+**coverage map** over a code surface (a query catalog, a schema coverage map, an
+endpoint inventory): those are exactly the pages that silently rot when new code
+lands, and a declared trigger turns a hand-written per-project reviewer rule
+into a portable, deterministic check. Keep the trigger list SHORT and precise —
+an over-broad glob (`src/**`) makes every change flag the page and trains
+readers to ignore the signal.
+
 ## Anchor & Cross-Reference Discipline
 
 - Markdown slugification: lowercase, spaces → dashes, strip punctuation except

package/framework/routines/doc-graph-align.routine.yml

@@ -29,6 +29,12 @@ prompt: |
      - Registry drift: large graph communities with no
        `${paths.references_dir}/ssot-registry.md` entry, or registry features whose
        code cluster is unrecognizable in the graph.
+     - Declared-trigger drift: synthesis pages under `${paths.wiki_dir}/syntheses/`
+       whose frontmatter `update_triggers` (path globs / `content:` added-line
+       patterns — semantics in `agents/llm-wiki-methodology.md § Update triggers`)
+       match changes in the analyzed commit range, where the page itself was NOT
+       updated in that range → `WIKI_SYNTH_STALE` drift finding for wiki-curator /
+       doc-reviewer follow-up. Pages without the field are exempt.
   4. Emit a consolidated report under
      `docs/reports/{{YYYYMMDD}}-doc-graph-align.md`.
 

package/framework/routines/skill-improve.routine.yml

@@ -13,25 +13,41 @@ agent: skill-improver
 prompt: |
   Run the weekly skill / agent improvement pass:
 
-  1. Read the last 7 days of `docs/reports/*-code-review.md` and
-     `docs/reports/*-doc-review.md` (plus any `docs/reports/*-qa.md` if
-     present). Identify recurring patterns in findings.
-  2. For each recurring pattern, propose a targeted improvement to:
-     - the relevant `.claude/skills/<name>/SKILL.md` (rule clarification,
-       new MUST/SHOULD, anti-pattern entry)
-     - the relevant `.claude/agents/<name>.md` (prompt tightening,
-       checklist update)
-     - `AGENTS.md` (new project-wide rule) or
-       `agents/coding-standards.md` (terminology, naming)
-  3. Apply changes inline and commit with prefix `[SKILL-IMPROVE]`. NEVER
-     modify application code in this routine — only `.claude/`, `agents/`,
-     `AGENTS.md`, `docs/`.
-  4. Emit a consolidated report under
+  1. Read the last 7 days of routine reports under `docs/reports/` — ALL
+     types present (`*-code-review.md`, `*-doc-review.md`, `*-qa.md`,
+     `*-doc-graph-align.md`, `*-wiki-review.md`, `*-i18n-align.md`,
+     `*-design-sync.md`, `*-ds-drift.md`, `*-full-sweep.md`), plus the
+     previous `*-skill-improve.md` for context. Identify recurring patterns
+     in findings (≥2 occurrences in the window).
+  2. For each recurring pattern, propose a targeted improvement. WRITE
+     SURFACE (MANDATORY): consumer overlays, never the framework payload —
+     - skill rules → `.baldart/overlays/<skill>.md`
+     - agent rules → `.baldart/overlays/agents/<name>.md`
+     - project-wide rules → `.baldart/overlays/AGENTS.md`
+     NEVER edit `.claude/skills/**`, `.claude/agents/**`, root `AGENTS.md`,
+     or anything under `.framework/` directly — those are symlinked or
+     generated framework files and the framework-edit-gate hook denies the
+     write.
+  3. Apply changes and commit with prefix `[SKILL-IMPROVE]`. NEVER modify
+     application code in this routine — only `.baldart/overlays/` and
+     `docs/`.
+  4. UPSTREAM CANDIDATES: when a pattern's root cause lies in the BASE
+     framework skill/agent (a vague step, a missing generic rule that would
+     recur in ANY consumer — not a project-specific opinion), still fix it
+     locally via the overlay, AND record it in a dedicated
+     `## Upstream Candidates` section of the report: base file path, the
+     defect, the proposed base change. The maintainer carries these
+     upstream via `baldart push`.
+  5. Emit a consolidated report under
      `docs/reports/{{YYYYMMDD}}-skill-improve.md` listing every change with
-     evidence (which findings drove it) and a confidence score.
+     evidence (which findings drove it) and a confidence score, changes
+     considered but skipped (with reason), and the Upstream Candidates
+     section (or "none").
 
-  If no recurring pattern is found, write a short "no changes needed" report
-  and exit cleanly.
+  Graceful degradation: if `docs/metrics/skill-runs.jsonl` is absent, skip
+  the metrics summary; if a report type is absent this week, analyze what
+  exists. If no recurring pattern is found, write a short "no changes
+  needed" report and exit cleanly.
 
 output:
   path: docs/reports/{{YYYYMMDD}}-skill-improve.md

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baldart",
-  "version": "4.98.2",
+  "version": "4.99.0",
   "description": "Claude Agent Framework - Reusable framework for coordinating AI agents and humans in software projects",
   "bin": {
     "baldart": "./bin/baldart.js"

package/src/commands/configure.js

@@ -532,7 +532,15 @@ function detect(cwd = process.cwd()) {
     },
     features: {
       has_design_system: hasDesignSystem,
-      multi_tenant_theming: null,
+      // Not autodetectable (no on-disk signal for per-tenant theming), but every
+      // consumer gates on `=== true`, so `false` and absent are semantically
+      // identical — no skill prompts at use-time when it is absent. Defaulting to
+      // `false` (matching the template) instead of `null` keeps it OUT of the
+      // non-interactive strip below (which drops null-detected keys), so a
+      // `--non-interactive`/`--auto`/CI configure actually WRITES the key. With
+      // null it was stripped every time, and `baldart update`'s schema-drift
+      // detector then re-flagged it as a "new config key" on every run.
+      multi_tenant_theming: false,
       has_api_docs: !!(apiSchemas || openapiSpec || graphqlSchema || apiIndex || apiDocsDirPopulated),
       has_backlog: countMatches('backlog', /\.ya?ml$/) > 0,
       has_adrs: countMatches('docs/decisions', /^ADR-.*\.md$/) > 0,