karajan-code 4.70.3 → 5.0.0

package/src/checks/config-files.js

@@ -18,6 +18,7 @@ import { getConfigPath } from "../config.js";
 import { resolveRoleMdPath, loadFirstExisting } from "../roles/base-role.js";
 import { withDocLink } from "../utils/doc-links.js";
 import { STRATEGY } from "./types.js";
+import { codexHome } from "../utils/agent-home.js";
 
 /**
  * kj.config.yml presence check.
@@ -218,16 +219,16 @@ function createStaleMcpPathCheck() {
 }
 
 /**
- * Codex config (~/.codex/config.toml) validity.
+ * Codex config ($CODEX_HOME/config.toml, ~/.codex by default) validity.
+ * KJC-TSK-1344: the account CODEX_HOME selects is the one whose config counts.
  */
-function createCodexConfigCheck() {
+export function createCodexConfigCheck({ env = process.env, home = os.homedir() } = {}) {
+  const codexTomlPath = path.join(codexHome({ home, env }), "config.toml");
   return {
     name: "agent-config:codex",
-    label: "Agent config: codex (~/.codex/config.toml)",
+    label: `Agent config: codex (${codexTomlPath})`,
     strategy: STRATEGY.MANUAL,
     async detect() {
-      const home = os.homedir();
-      const codexTomlPath = path.join(home, ".codex", "config.toml");
       try {
         const raw = await fs.readFile(codexTomlPath, "utf8");
         const duplicates = findDuplicateTomlKeys(raw);
@@ -236,7 +237,7 @@ function createCodexConfigCheck() {
             ok: false,
             severity: "warn",
             detail: `Duplicate TOML keys: ${duplicates.join(", ")}`,
-            fix: `Remove duplicate entries in ~/.codex/config.toml: ${duplicates.join(", ")}`,
+            fix: `Remove duplicate entries in ${codexTomlPath}: ${duplicates.join(", ")}`,
           };
         }
         return { ok: true, severity: "info", detail: "Valid TOML (no duplicate keys)" };
@@ -248,7 +249,7 @@ function createCodexConfigCheck() {
           ok: false,
           severity: "warn",
           detail: `Cannot read: ${err.message.split("\n")[0]}`,
-          fix: "Check file permissions on ~/.codex/config.toml",
+          fix: `Check file permissions on ${codexTomlPath}`,
         };
       }
     },

package/src/checks/dir-setup.js

@@ -98,6 +98,39 @@ export function createLegacyKjHomeCheck() {
   };
 }
 
+/**
+ * KJC-TSK-0662: the kj run pipeline kept its user stories in ~/.karajan/hu-stories/.
+ * 5.0 retired it and nothing reads that folder any more (MIGRATION-v5.md). Said, never
+ * touched: kj clean removes it when the user asks.
+ * @internal Exported for tests.
+ */
+export function createLegacyHuStoriesCheck() {
+  return {
+    name: "legacy-hu-stories",
+    label: "retired pipeline data (~/.karajan/hu-stories)",
+    strategy: STRATEGY.MANUAL,
+    describe: "Detect the user stories of the retired kj run pipeline",
+    async detect() {
+      const dir = path.join(getKarajanHome(), "hu-stories");
+      let entries;
+      try {
+        entries = await fs.readdir(dir);
+      } catch (err) {
+        if (err.code === "ENOENT") return { ok: true, severity: "info", detail: "No retired pipeline data" };
+        return { ok: false, severity: "warn", detail: `could not read ${dir}: ${err.message}` };
+      }
+      if (entries.length === 0) return { ok: true, severity: "info", detail: "No retired pipeline data" };
+      return {
+        ok: false,
+        severity: "warn",
+        detail: `${dir} still has ${entries.length} entries from the kj run pipeline, retired in 5.0: nothing reads them`,
+        // kj clean also applies its usual retention to plans and sessions: show first, then delete.
+        fix: "kj clean --hu-days 0 lists what would go (old plans and sessions too); add --yes to delete it",
+      };
+    },
+  };
+}
+
 export function getDirSetupChecks() {
-  return [createKarajanDirsCheck(), createLegacyKjHomeCheck()];
+  return [createKarajanDirsCheck(), createLegacyKjHomeCheck(), createLegacyHuStoriesCheck()];
 }

package/src/checks/native-build.js

@@ -1,12 +1,11 @@
 /**
- * Native build availability check (KJC-BUG-0092).
+ * Native module check (KJC-BUG-0092, KJC-TSK-1353).
  *
- * better-sqlite3 ships a native addon compiled in a postinstall step. pnpm
- * blocks dependency build scripts by default (ERR_PNPM_IGNORED_BUILDS), so a
- * `pnpm add -g karajan-code` leaves the addon uncompiled: `kj --version` still
- * works (it never opens a DB) but any DB-backed command (board, rag, cost
- * tracking) crashes with "Cannot find module 'better-sqlite3'". This surfaces a
- * WARN in `kj doctor` with the exact remedy instead of a cryptic runtime crash.
+ * node-pty is kj's only native module since better-sqlite3 left (KJC-TSK-1353:
+ * every SQLite store runs on node:sqlite, built into Node). It is optional: it
+ * powers the HU Board's terminal. Where it needs its install script, pnpm
+ * (ERR_PNPM_IGNORED_BUILDS) and npm 12 (allowScripts) block it by default, so
+ * `kj doctor` warns with the exact remedy instead of a broken terminal.
  */
 
 import { execFileSync } from "node:child_process";
@@ -32,19 +31,7 @@ function defaultNpmMajor() {
  * allowScripts covers it; reinstalling blocks it again. Approve, then rebuild, in kj's dir.
  */
 export const npmAllowScriptsRemedy = (pkgDir = OWN_PKG_DIR) =>
-  `cd "${pkgDir}" && npm install-scripts approve better-sqlite3 && npm install-scripts approve node-pty && npm rebuild better-sqlite3 node-pty`;
-
-// The addon is installed but its native build is missing (a missing package needs a reinstall, not this).
-const UNBUILT_ADDON = /bindings file|better_sqlite3\.node/;
-
-/** A missing better-sqlite3 addon becomes an error that says how to build it; any other error passes as it is. */
-export function explainNativeLoadError(err, { npmMajor = defaultNpmMajor, pkgDir = OWN_PKG_DIR } = {}) {
-  if (!UNBUILT_ADDON.test(String(err?.message ?? err))) return err;
-  const remedy = (npmMajor() ?? 0) >= 12
-    ? `npm 12 skipped its install script (allowScripts); build it with: ${npmAllowScriptsRemedy(pkgDir)}`
-    : "run kj doctor for the exact fix on this install";
-  return new Error(`better-sqlite3 native addon is not built, so the RAG cannot open its index — ${remedy}`, { cause: err });
-}
+  `cd "${pkgDir}" && npm install-scripts approve node-pty && npm rebuild node-pty`;
 
 /** pnpm lays packages out under a `.pnpm` virtual store and symlinks them in. */
 function isPnpmInstall() {
@@ -54,50 +41,45 @@ function isPnpmInstall() {
   );
 }
 
-/** Force the native binding to load by opening an in-memory database. */
-async function defaultLoadDb() {
-  const Database = (await import("better-sqlite3")).default;
-  new Database(":memory:").close();
+/** Load node-pty's native binding. */
+async function defaultLoadPty() {
+  await import("node-pty");
 }
 
-export function createNativeBuildCheck({ loadDb = defaultLoadDb, isPnpm = isPnpmInstall, npmMajor = defaultNpmMajor, pkgDir = OWN_PKG_DIR } = {}) {
+const NO_TERMINAL = "the HU Board terminal is unavailable (everything else works)";
+
+export function createNativeBuildCheck({ loadPty = defaultLoadPty, isPnpm = isPnpmInstall, npmMajor = defaultNpmMajor, pkgDir = OWN_PKG_DIR } = {}) {
   return {
     name: "native-build",
-    label: "native modules (better-sqlite3)",
+    label: "native modules (node-pty)",
     strategy: STRATEGY.MANUAL,
     async detect() {
       try {
-        await loadDb();
-        return {
-          ok: true,
-          severity: "info",
-          detail: "better-sqlite3 native addon loads — DB-backed commands available",
-        };
+        await loadPty();
+        return { ok: true, severity: "info", detail: "node-pty loads — the HU Board terminal is available" };
       } catch (err) {
         const firstLine = String(err?.message || err).split("\n")[0];
         if (isPnpm()) {
           return {
             ok: false,
             severity: "warn",
-            detail: "better-sqlite3 native build was skipped — pnpm blocks dependency build scripts by default",
-            fix: "Approve the build then reinstall: `pnpm approve-builds better-sqlite3` — or install with npm: `npm i -g @karajan-family/code`",
+            detail: `node-pty native build was skipped — pnpm blocks dependency build scripts by default; ${NO_TERMINAL}`,
+            fix: "Approve the build then reinstall: `pnpm approve-builds node-pty` — or install with npm: `npm i -g @karajan-family/code`",
           };
         }
         if ((npmMajor() ?? 0) >= 12) {
           return {
             ok: false,
             severity: "warn",
-            detail: `better-sqlite3 failed to load: ${firstLine} — npm 12 skips dependency install scripts that allowScripts does not cover, so the native build never ran`,
+            detail: `node-pty failed to load: ${firstLine} — npm 12 skips dependency install scripts that allowScripts does not cover; ${NO_TERMINAL}`,
             fix: npmAllowScriptsRemedy(pkgDir),
           };
         }
         return {
           ok: false,
           severity: "warn",
-          // KJC-BUG-0118: the standalone (curl) binary ships without native
-          // modules by design — name the consequence (RAG/board/MCP need the
-          // npm install) instead of implying the install is broken.
-          detail: `better-sqlite3 failed to load: ${firstLine} — DB-backed features (RAG, board, MCP) unavailable; the standalone binary does not bundle native modules`,
+          // KJC-BUG-0118: the standalone (curl) binary ships without native modules by design.
+          detail: `node-pty failed to load: ${firstLine} — ${NO_TERMINAL}; the standalone binary does not bundle native modules`,
           fix: "Reinstall to rebuild native modules: `npm i -g @karajan-family/code`",
         };
       }

package/src/checks/runner.js

@@ -51,162 +51,25 @@ export async function runChecks(checks, ctx, options = {}) {
 
   const { config } = ctx;
   const startTotal = Date.now();
-  const entries = [];
+  const entries = checks.map((check) => entryFor(check, config));
   const overrides = {};
 
-  // Build applicable entries (skipped checks noted up front).
-  // A check.applies(config) may return:
-  //   - true / false — boolean form (back-compat).
-  //   - an object { applies: boolean, reason?: string } — when false, `reason`
-  //     is shown verbatim so users see WHY (e.g. "sonarqube.enabled is false
-  //     in kj.config.yml") instead of the opaque "Not applicable" message
-  //     that confused users debugging their config.
-  for (const check of checks) {
-    if (typeof check.applies !== "function") {
-      entries.push({ check, status: null, detail: null, runMs: 0, detectResult: null, remediated: false });
-      continue;
-    }
-    const verdict = check.applies(config);
-    const isObj = verdict && typeof verdict === "object" && "applies" in verdict;
-    const applies = isObj ? Boolean(verdict.applies) : Boolean(verdict);
-    if (applies) {
-      entries.push({ check, status: null, detail: null, runMs: 0, detectResult: null, remediated: false });
-      continue;
-    }
-    const reason = (isObj && typeof verdict.reason === "string" && verdict.reason.trim())
-      ? verdict.reason.trim()
-      : "Not applicable for current configuration";
-    entries.push({
-      check,
-      status: STATUS.SKIPPED,
-      detail: reason,
-      runMs: 0,
-      detectResult: null,
-      remediated: false,
-    });
-  }
-
   // Phase 1: detect in parallel with timeout.
   const detectBase = Date.now();
-  await Promise.all(
-    entries.map(async (entry) => {
-      if (entry.status === STATUS.SKIPPED) return;
-      const start = Date.now();
-      // Per-check override: checks that spawn slow tools (e.g. `npx <pkg>` cold
-      // start) declare detectTimeoutMs so the blanket pipeline timeout doesn't
-      // kill them. Falls back to the pipeline-wide timeoutMs.
-      const detectTimeoutMs = Number.isFinite(entry.check.detectTimeoutMs)
-        ? entry.check.detectTimeoutMs
-        : timeoutMs;
-      try {
-        const result = await withTimeout(entry.check.detect({ config, signal }), detectTimeoutMs, entry.check.name);
-        entry.detectResult = result;
-        entry.runMs = Date.now() - start;
-        entry.status = resolveStatusFromDetect(entry.check, result);
-        entry.detail = result.detail;
-        // KJC-BUG-0049: si el check es degradable y falló (status FAIL/WARN tras
-        // resolveStatusFromDetect), aplicar disables al overrides y degradar a WARN.
-        // Así el preflight no aborta — la feature opcional se desactiva con aviso.
-        if (!result.ok && entry.check.degradable && (entry.status === STATUS.FAIL || entry.status === STATUS.WARN)) {
-          for (const dotPath of entry.check.degradable.disables || []) {
-            setDotPath(overrides, dotPath, false);
-          }
-          entry.status = STATUS.WARN;
-          entry.detail = `${result.detail} → ${entry.check.degradable.warn}`;
-          entry.degraded = true;
-        }
-      } catch (err) {
-        entry.runMs = Date.now() - start;
-        if (err instanceof TimeoutError) {
-          entry.detectResult = { ok: false, severity: "warn", detail: `Timeout after ${detectTimeoutMs}ms` };
-          // A timeout on a degradable (optional) check must not block the
-          // pipeline: degrade to WARN and disable its feature flags, same as
-          // a regular failure (KJC-BUG-0049 semantics).
-          if (entry.check.degradable) {
-            for (const dotPath of entry.check.degradable.disables || []) {
-              setDotPath(overrides, dotPath, false);
-            }
-            entry.status = STATUS.WARN;
-            entry.detail = `${entry.detectResult.detail} → ${entry.check.degradable.warn}`;
-            entry.degraded = true;
-          } else {
-            entry.status = STATUS.TIMEOUT;
-            entry.detail = entry.detectResult.detail;
-          }
-        } else {
-          entry.detectResult = { ok: false, severity: "fail", detail: `Detection error: ${err.message}` };
-          entry.status = STATUS.FAIL;
-          entry.detail = entry.detectResult.detail;
-        }
-      }
-    })
-  );
+  await Promise.all(entries.map((entry) => detectEntry(entry, { config, signal, timeoutMs, overrides })));
   logger.info?.(`Detect phase done in ${Date.now() - detectBase}ms`);
 
-  // Phase 2: remediate sequentially (only in "fix" mode, only failing checks).
   if (mode !== "check-only") {
+    // Phase 2: remediate sequentially (only in "fix" mode, only failing checks).
     for (const entry of entries) {
-      if (!shouldAttemptRemediation(entry)) continue;
-      const { check, detectResult } = entry;
-      if (check.strategy === STRATEGY.PROMPT && !yes) {
-        const approved = await onConfirm(check.describe || `Fix: ${check.name}`);
-        if (!approved) {
-          logger.info?.(`User declined remediation for ${check.name}`);
-          continue;
-        }
-      }
-      const start = Date.now();
-      try {
-        const rem = await withTimeout(
-          check.remediate({ config, extra: detectResult.extra, signal, logger }),
-          remediateTimeoutMs,
-          `${check.name}:remediate`
-        );
-        entry.remediated = rem.fixed === true;
-        entry.runMs += Date.now() - start;
-        if (rem.fixed) {
-          if (rem.changes) mergeOverrides(overrides, rem.changes);
-          entry.detail = rem.detail;
-          entry.status = STATUS.FIXED;
-        } else {
-          entry.detail = rem.detail || entry.detail;
-          entry.status = STATUS.FAIL;
-        }
-      } catch (err) {
-        entry.runMs += Date.now() - start;
-        const msg = err instanceof TimeoutError ? `Remediation timeout after ${remediateTimeoutMs}ms` : `Remediation error: ${err.message}`;
-        entry.detail = msg;
-        entry.status = STATUS.FAIL;
-        logger.warn?.(`Remediation failed for ${check.name}: ${msg}`);
-      }
+      if (shouldAttemptRemediation(entry)) await remediateEntry(entry, { config, signal, logger, yes, onConfirm, remediateTimeoutMs, overrides });
     }
-
     // Phase 3: re-verify fixed checks using the config merged with any
     // runtime overrides applied by remediations. Without this merge, a check
     // that rebinds to a new port (override) would re-verify against the old
     // config and wrongly report failure.
     const verifyConfig = mergeConfigAndOverrides(config, overrides);
-    await Promise.all(
-      entries.filter((e) => e.remediated).map(async (entry) => {
-        const start = Date.now();
-        try {
-          const result = await withTimeout(
-            entry.check.detect({ config: verifyConfig, signal }),
-            Number.isFinite(entry.check.detectTimeoutMs) ? entry.check.detectTimeoutMs : timeoutMs,
-            `${entry.check.name}:reverify`
-          );
-          entry.runMs += Date.now() - start;
-          if (!result.ok) {
-            entry.status = STATUS.FAIL;
-            entry.detail = `${entry.detail} (but re-verify failed: ${result.detail})`;
-          }
-        } catch (err) {
-          entry.runMs += Date.now() - start;
-          entry.status = STATUS.FAIL;
-          entry.detail = `${entry.detail} (re-verify error: ${err.message})`;
-        }
-      })
-    );
+    await Promise.all(entries.filter((e) => e.remediated).map((entry) => reverifyEntry(entry, { verifyConfig, signal, timeoutMs })));
   }
 
   // Flatten into reports.
@@ -234,6 +97,129 @@ export async function runChecks(checks, ctx, options = {}) {
   };
 }
 
+// Build an applicable entry (skipped checks noted up front).
+// A check.applies(config) may return:
+//   - true / false — boolean form (back-compat).
+//   - an object { applies: boolean, reason?: string } — when false, `reason`
+//     is shown verbatim so users see WHY (e.g. "sonarqube.enabled is false
+//     in kj.config.yml") instead of the opaque "Not applicable" message
+//     that confused users debugging their config.
+function entryFor(check, config) {
+  const entry = { check, status: null, detail: null, runMs: 0, detectResult: null, remediated: false };
+  if (typeof check.applies !== "function") return entry;
+  const verdict = check.applies(config);
+  const isObj = verdict && typeof verdict === "object" && "applies" in verdict;
+  const applies = isObj ? Boolean(verdict.applies) : Boolean(verdict);
+  if (applies) return entry;
+  const reason = (isObj && typeof verdict.reason === "string" && verdict.reason.trim())
+    ? verdict.reason.trim()
+    : "Not applicable for current configuration";
+  return { ...entry, status: STATUS.SKIPPED, detail: reason };
+}
+
+// Per-check override: checks that spawn slow tools (e.g. `npx <pkg>` cold
+// start) declare detectTimeoutMs so the blanket pipeline timeout doesn't
+// kill them. Falls back to the pipeline-wide timeoutMs.
+const detectTimeoutOf = (check, timeoutMs) => (Number.isFinite(check.detectTimeoutMs) ? check.detectTimeoutMs : timeoutMs);
+
+// KJC-BUG-0049: an optional (degradable) check that fails or times out does not
+// block the pipeline: its feature flags are disabled and it degrades to WARN.
+function degrade(entry, overrides, detail) {
+  for (const dotPath of entry.check.degradable.disables || []) {
+    setDotPath(overrides, dotPath, false);
+  }
+  entry.status = STATUS.WARN;
+  entry.detail = `${detail} → ${entry.check.degradable.warn}`;
+  entry.degraded = true;
+}
+
+async function detectEntry(entry, { config, signal, timeoutMs, overrides }) {
+  if (entry.status === STATUS.SKIPPED) return;
+  const start = Date.now();
+  const detectTimeoutMs = detectTimeoutOf(entry.check, timeoutMs);
+  try {
+    const result = await withTimeout(entry.check.detect({ config, signal }), detectTimeoutMs, entry.check.name);
+    entry.detectResult = result;
+    entry.runMs = Date.now() - start;
+    entry.status = resolveStatusFromDetect(entry.check, result);
+    entry.detail = result.detail;
+    // Así el preflight no aborta — la feature opcional se desactiva con aviso.
+    if (!result.ok && entry.check.degradable && (entry.status === STATUS.FAIL || entry.status === STATUS.WARN)) {
+      degrade(entry, overrides, result.detail);
+    }
+  } catch (err) {
+    entry.runMs = Date.now() - start;
+    if (!(err instanceof TimeoutError)) {
+      entry.detectResult = { ok: false, severity: "fail", detail: `Detection error: ${err.message}` };
+      entry.status = STATUS.FAIL;
+      entry.detail = entry.detectResult.detail;
+      return;
+    }
+    entry.detectResult = { ok: false, severity: "warn", detail: `Timeout after ${detectTimeoutMs}ms` };
+    if (entry.check.degradable) {
+      degrade(entry, overrides, entry.detectResult.detail);
+    } else {
+      entry.status = STATUS.TIMEOUT;
+      entry.detail = entry.detectResult.detail;
+    }
+  }
+}
+
+async function remediateEntry(entry, { config, signal, logger, yes, onConfirm, remediateTimeoutMs, overrides }) {
+  const { check, detectResult } = entry;
+  if (check.strategy === STRATEGY.PROMPT && !yes) {
+    const approved = await onConfirm(check.describe || `Fix: ${check.name}`);
+    if (!approved) {
+      logger.info?.(`User declined remediation for ${check.name}`);
+      return;
+    }
+  }
+  const start = Date.now();
+  try {
+    const rem = await withTimeout(
+      check.remediate({ config, extra: detectResult.extra, signal, logger }),
+      remediateTimeoutMs,
+      `${check.name}:remediate`
+    );
+    entry.remediated = rem.fixed === true;
+    entry.runMs += Date.now() - start;
+    if (rem.fixed) {
+      if (rem.changes) mergeOverrides(overrides, rem.changes);
+      entry.detail = rem.detail;
+      entry.status = STATUS.FIXED;
+    } else {
+      entry.detail = rem.detail || entry.detail;
+      entry.status = STATUS.FAIL;
+    }
+  } catch (err) {
+    entry.runMs += Date.now() - start;
+    const msg = err instanceof TimeoutError ? `Remediation timeout after ${remediateTimeoutMs}ms` : `Remediation error: ${err.message}`;
+    entry.detail = msg;
+    entry.status = STATUS.FAIL;
+    logger.warn?.(`Remediation failed for ${check.name}: ${msg}`);
+  }
+}
+
+async function reverifyEntry(entry, { verifyConfig, signal, timeoutMs }) {
+  const start = Date.now();
+  try {
+    const result = await withTimeout(
+      entry.check.detect({ config: verifyConfig, signal }),
+      detectTimeoutOf(entry.check, timeoutMs),
+      `${entry.check.name}:reverify`
+    );
+    entry.runMs += Date.now() - start;
+    if (!result.ok) {
+      entry.status = STATUS.FAIL;
+      entry.detail = `${entry.detail} (but re-verify failed: ${result.detail})`;
+    }
+  } catch (err) {
+    entry.runMs += Date.now() - start;
+    entry.status = STATUS.FAIL;
+    entry.detail = `${entry.detail} (re-verify error: ${err.message})`;
+  }
+}
+
 function shouldAttemptRemediation(entry) {
   if (entry.status === STATUS.SKIPPED) return false;
   if (entry.status === STATUS.OK) return false;

package/src/cli/advanced-commands.js

@@ -13,9 +13,9 @@ export const CORE_COMMANDS = [
   // gets — it is the first command a new project ever runs.
   "bootstrap",
   "init",
-  "run",
+  "hu",
+  "review",
   "plan",
-  "status",
   "doctor",
   "harden",
   "config",
@@ -31,11 +31,11 @@ export const META_COMMANDS = ["advanced", "help"];
  * so a newly-registered command can never silently vanish from `kj advanced`.
  */
 export const ADVANCED_GROUPS = [
-  { title: "Pipeline (piezas sueltas)", commands: ["autorun", "code", "review", "solomon", "agent", "scan", "tournament"] },
-  { title: "Análisis pre-run", commands: ["discover", "spec", "triage", "researcher", "architect", "onboard", "brief"] },
+  { title: "Agentes y revisión", commands: ["code", "solomon", "agent", "scan", "tournament"] },
+  { title: "Análisis previo", commands: ["discover", "spec", "onboard", "brief"] },
   { title: "Búsqueda / RAG", commands: ["rag", "qmd", "watch", "doc"] },
-  { title: "Calidad / auditoría", commands: ["audit", "check", "mutate", "webperf", "sonar", "privacy", "release", "policy", "rules", "rulesync", "claims", "steward", "pr-size"] },
-  { title: "Sesión / board", commands: ["resume", "report", "board", "hu", "adr", "worktree", "undo", "standby", "sentinel", "identity", "security", "handoff"] },
+  { title: "Calidad / auditoría", commands: ["audit", "check", "mutate", "webperf", "sonar", "privacy", "release", "policy", "rules", "rulesync", "claims", "steward", "pr-size", "main-guard"] },
+  { title: "Sesión / board", commands: ["report", "board", "adr", "worktree", "sentinel", "identity", "security", "handoff"] },
   { title: "Infra / setup", commands: ["install-tools", "ollama", "skills", "roles", "agents", "env"] },
   { title: "Mantenimiento", commands: ["clean", "sync", "telemetry", "report-issue"] },
 ];