ostacky 0.8.5 → 0.8.7

package/README.md

@@ -246,37 +246,37 @@ Tras instalar (`--scope local`), el proyecto queda así:
 
 ```json
 {
-    "version": "0.8.5",
+    "version": "0.8.7",
     "lockedAt": "2025-01-01T00:00:00.000Z",
     "repo": "JaimeHoracio/Ostacky",
-    "tag": "v0.8.5",
+    "tag": "v0.8.7",
     "agents": {
         "ostacky": {
-            "version": "0.8.5",
+            "version": "0.8.7",
             "installedAt": "2025-01-01T00:00:00.000Z",
             "sha256": "abc123..."
         }
     },
     "commands": {
         "install-stack": {
-            "version": "0.8.5",
+            "version": "0.8.7",
             "installedAt": "2025-01-01T00:00:00.000Z",
             "sha256": "def456..."
         },
         "opsx-sync": {
-            "version": "0.8.5",
+            "version": "0.8.7",
             "installedAt": "2025-01-01T00:00:00.000Z",
             "sha256": "ghi789..."
         }
     },
     "skills": {
-        "brainstorming": { "version": "0.8.5", ... },
-        "execution-mode-evaluation": { "version": "0.8.5", ... },
-        "openspec-propose": { "version": "0.8.5", ... }
+        "brainstorming": { "version": "0.8.7", ... },
+        "execution-mode-evaluation": { "version": "0.8.7", ... },
+        "openspec-propose": { "version": "0.8.7", ... }
     },
     "mcpServers": {
-        "ostacky-controller": { "version": "0.8.5", ... },
-        "openspec": { "version": "0.8.5", ... }
+        "ostacky-controller": { "version": "0.8.7", ... },
+        "openspec": { "version": "0.8.7", ... }
     }
 }
 ```
@@ -308,7 +308,7 @@ Es opcional y solo necesario si algo falló durante la instalación o si querés
 ## Seguridad
 
 - `opencode.jsonc` se versiona en el repo para compartir permisos y MCP de forma reproducible.
-- Las URLs de descarga usan **tags de GitHub** (ej. `v0.8.5`), nunca `main` — instalaciones reproducibles
+- Las URLs de descarga usan **tags de GitHub** (ej. `v0.8.7`), nunca `main` — instalaciones reproducibles
 - Cada path de archivo descargado es validado para prevenir **path traversal**
 - Los archivos incluyen **checksum SHA-256** opcional; si el manifest lo define, el contenido se verifica antes de escribir
 - El cache local (`.opencode/cache/`) también valida integridad al servir archivos cacheados
@@ -365,7 +365,7 @@ CodeGraph está instalado en `.opencode/tools/codegraph/bin/codegraph` y se conf
 | `.opencode/tools/codegraph/bin/codegraph status`                                           | Muestra estado del index y archivos pendientes              |
 | `.opencode/tools/codegraph/bin/codegraph install --target opencode --location local --yes` | Configura CodeGraph para OpenCode y genera AGENTS.md        |
 
-> **Windows:** si ves `Command failed: cmd.exe /d /c call ... codegraph.cmd init -i` durante `npx ostacky install`, es un _warning_ no fatal — el binario se instaló pero el índice no se pudo crear. Reintentá con `npx ostacky install-stack --scope local` o ejecutá manualmente `.opencode\tools\codegraph\bin\codegraph.exe init -i` (o `codegraph.cmd` si no hay `.exe`) dentro del proyecto. Desde v0.8.5 el instalador usa el patrón resiliente de Engram (strip 0 + búsqueda recursiva) y loguea `projectRoot|toolsDir` para diagnosticar scope.
+> **Windows:** si ves `Command failed: cmd.exe /d /c call ... codegraph.cmd init -i` durante `npx ostacky install`, es un _warning_ no fatal — el binario se instaló pero el índice no se pudo crear. Reintentá con `npx ostacky install-stack --scope local` o ejecutá manualmente `.opencode\tools\codegraph\bin\codegraph.exe init -i` (o `codegraph.cmd` si no hay `.exe`) dentro del proyecto. Desde v0.8.7 el instalador usa el patrón resiliente de Engram (strip 0 + búsqueda recursiva) y loguea `projectRoot|toolsDir` para diagnosticar scope.
 
 ## Licencia
 

package/assets/agents/ostacky.md

@@ -1,12 +1,12 @@
 ---
 description: Orquestador principal — rutea por nivel, orquesta CodeGraph + OpenSpec + Superpowers.
 mode: primary
-version: 0.8.5
+version: 0.8.7
 ---
 
-Sos **Ostacky v0.8.5**, orquestás, no implementás. Interpretás, clasificás (0/0+1/1+), ruteás y coordinás.
+Sos **Ostacky v0.8.7**, orquestás, no implementás. Interpretás, clasificás (0/0+1/1+), ruteás y coordinás.
 
-> **Versión:** `0.8.5` (sincronizada desde `package.json` vía `scripts/sync-version.ts`). Cuando te pregunten qué versión tenés, qué versión sos, o `¿qué versión tenés?` / `version` / `¿en qué versión estás?`, respondé exactamente: **"Ostacky v0.8.5"** (o `v0.8.5` si te piden solo el número). No inventes otra versión.
+> **Versión:** `0.8.7` (sincronizada desde `package.json` vía `scripts/sync-version.ts`). Cuando te pregunten qué versión tenés, qué versión sos, o `¿qué versión tenés?` / `version` / `¿en qué versión estás?`, respondé exactamente: **"Ostacky v0.8.7"** (o `v0.8.7` si te piden solo el número). No inventes otra versión.
 
 ## Reglas innegociables
 
@@ -18,16 +18,20 @@ Sos **Ostacky v0.8.5**, orquestás, no implementás. Interpretás, clasificás (
 
 > Ver `assets/docs/ostacky-reference.md` para TRANSITIONS, TTL y métricas. Tiered LITE/TIER1/FULL vía suffix hint.
 
-## Principios de honestidad (SHALL)
+## Principios de honestidad (SHALL) — concretos, no genéricos
 
-1. **Engram contradiction check SHALL.** Antes de proponer o discutir cambios (Nivel 0+1/1+, eximido si `isTrivial && DONE`), SHALL `mem_search` por keywords del pedido (max 5 keywords = sustantivos del pedido + `topic_key` del change activo si lo hay); si hit `type:decision|architecture` con contradicción semántica (ej: pide Zustand y hay #571 “usar Redux por X”), SHALL mostrar diff `“Antes decidimos X el <fecha> por Z (topic_key), ahora pedís ¬X”`, llamar `request_clarification` y esperar. Si Engram `degraded`/timeout → SHALL advertir “sin memoria” y continuar (no block). Si usuario confirma override → SHALL `mem_save` mismo `topic_key` + `mem_compare supersedes` + `record_user_confirmation`.
+> **Regla de oro:** Nunca escribas instrucciones genéricas tipo `“sé cuidadoso / no introduzcas errores / no inventes”`. Son no-verificables y el LLM las ignora (instruction fatigue). Cada SHALL abajo es **verificable** (comando, evidencia o artefacto). `tasks.md` también SHALL ser verificable — no behavioral.
+
+1. **Engram contradiction check SHALL.** Antes de proponer o discutir cambios (Nivel 0+1/1+, **eximido si `isTrivial && DONE`** — ej: "cambiar título" no paga `mem_search`), SHALL `mem_search` por keywords del pedido (max 5 keywords = sustantivos del pedido + `topic_key` del change activo si lo hay); si hit `type:decision|architecture` con contradicción semántica (ej: pide Zustand y hay #571 “usar Redux por X”), SHALL mostrar diff `“Antes decidimos X el <fecha> por Z (topic_key), ahora pedís ¬X”`, llamar `request_clarification` y esperar. Si Engram `degraded`/timeout → SHALL advertir “sin memoria” y continuar (no block). Si usuario confirma override → SHALL `mem_save` mismo `topic_key` + `mem_compare supersedes` + `record_user_confirmation`.
 2. **Solo propuestas que ayudan SHALL.** Toda propuesta SHALL incluir `por qué ayuda + tradeoff + evidencia` (CodeGraph symbol, Engram hit) o literal `“no verificado”` + best practice 2026. No sugerir por sugerir.
 3. **Pocas honestas > muchas de relleno SHALL.** Si solo hay una opción honesta, dar una. Si hay 2-3, tabla `coste|riesgo|complejidad`. No inventar para llenar.
 4. **Si no hay propuesta honesta SHALL decirlo.** Literal: `“No hay propuesta honesta que aporte vs no hacer nada en este contexto.”`
 5. **Si dudás SHALL preguntar.** Ante ambigüedad aunque el pedido parezca claro, SHALL una pregunta clarificadora (una por turno, natural, sin tool, STOP) y esperar. No asumir.
-6. **Verificar antes de afirmar SHALL.** No acordar sin chequear código/docs. Citar evidencia o admitir `“no pude verificar en disco”`.
+6. **Verificar antes de afirmar SHALL.** No acordar sin chequear código/docs. Citar evidencia o admitir `“no pude verificar en disco”`. Equivale a `Read` fresco o `codegraph_explore` antes de `edit`.
 7. **YAGNI scope SHALL.** No proponer refactor oportunista fuera del pedido; si lo ves, mencionar `“fuera de scope: …”` sin implementarlo.
 
+**Anti-genérico:** En vez de `“no introduzcas errores”` → SHALL `Read fresco → validate_edit → edit → read verificación → complete_task → verifyIntegrity → bun test` (ver §4 Execution). En vez de `“advierte riesgos”` → SHALL `Riesgo concreto → Mitigación` en `design.md` solo si `level 1+` y riesgo es verificable; si `isTrivial` no inventes riesgos.
+
 ## Stack
 
 - **Controller** (plugin `ostacky-plugin.ts`): state machine in-process, hard gates.
@@ -95,3 +99,4 @@ Router `brainstorming`↔`OpenSpec` por `level`/`estLines`/`fileCount`/`hasAPI`
 - Una pregunta por turno, sin deadlock
 - Fase gate: en EXECUTING/SYNC no volver a DISCOVERY
 - Audit: log antes de gate + `mem_save` solo en gates
+- **Tasks son verificables, no instruccionales:** `tasks.md` SHALL describir `qué` + `cómo verificar` (`bun test`, `grep`, archivo entregado). Nunca SHALL contener instrucciones de comportamiento genéricas (`“sé cuidadoso”, “no inventes”`) — eso vive acá en § Principios y se inyecta automáticamente por tier (ver § Core tiered). Para `Level 0` trivial, tasks SHALL ser de 1 línea sin overhead de honestidad.

package/assets/commands/install-stack.md

@@ -5,13 +5,13 @@ agent: build
 
 Instala el stack tecnológico de desarrollo para OpenCode. **IMPORTANTE:** las herramientas se instalan por separado (cada una con su propio CLI/comando). `npx ostacky install` solo instala el agente y commands de Ostacky en `.opencode/`. Este comando (`/install-stack`) es la guía de referencia para la instalación manual completa paso a paso.
 
-**Nota:** A partir de v0.8.5, `npx ostacky install` ya instala automáticamente el stack completo (CodeGraph, OpenSpec, Engram, MCPs bundleados) además del agente y skills. Este comando es útil para instalación manual, verificación, o cuando algo falló y necesita reinstalarse.
+**Nota:** A partir de v0.8.7, `npx ostacky install` ya instala automáticamente el stack completo (CodeGraph, OpenSpec, Engram, MCPs bundleados) además del agente y skills. Este comando es útil para instalación manual, verificación, o cuando algo falló y necesita reinstalarse.
 
 **RESTRICCIÓN ABSOLUTA:** instalar ÚNICAMENTE para OpenCode. Está terminantemente prohibido crear o modificar archivos en `.claude/`, `.kiro/`, `.cursor/`, `.gemini/`, `.codex/`, `.antigravity/`, `.windsurf/` o cualquier otro directorio de plataformas externas.
 
 **Origen del set curado:** el set de 15 skills referenciado en `assets/agents/ostacky.md` está bundleado en `assets/skills/` dentro del paquete npm. La definición del set y su trazabilidad viven en `manifest.json` y `.opencode/ostacky-lock.json`.
 
-## Scope de instalación — local vs global (desde v0.8.5)
+## Scope de instalación — local vs global (desde v0.8.7)
 
 `npx ostacky install` soporta `--scope local|global|auto` (también `--scope=...`):
 

package/assets/mcp/ostacky-controller/index.js

@@ -137,6 +137,45 @@ function isPathInsideProject(filePath, statePath) {
     }
 }
 
+export function parseTasksMd(changeId, statePath) {
+    if (!changeId || typeof changeId !== 'string') return [];
+    try {
+        const projectRoot = getProjectRoot(statePath);
+        const tasksPath = join(projectRoot, 'openspec', 'changes', changeId, 'tasks.md');
+        let content = null;
+        if (existsSync(tasksPath)) {
+            content = readFileSync(tasksPath, 'utf-8');
+        } else {
+            // fallback to archive: YYYY-MM-DD-<changeId>
+            try {
+                const archiveDir = join(projectRoot, 'openspec', 'changes', 'archive');
+                if (existsSync(archiveDir)) {
+                    for (const entry of readdirSync(archiveDir)) {
+                        if (entry.endsWith(`-${changeId}`) || entry === changeId) {
+                            const alt = join(archiveDir, entry, 'tasks.md');
+                            if (existsSync(alt)) {
+                                content = readFileSync(alt, 'utf-8');
+                                break;
+                            }
+                        }
+                    }
+                }
+            } catch {}
+            if (content === null) return [];
+        }
+        const re = /^- \[[ x]\]\s+([A-Za-z0-9][A-Za-z0-9\-_.\/:]*)/gm;
+        const ids = [];
+        let m;
+        while ((m = re.exec(content)) !== null) {
+            const id = m[1];
+            if (isValidTaskId(id)) ids.push(id);
+        }
+        return ids;
+    } catch {
+        return [];
+    }
+}
+
 function isValidTaskId(taskId) {
     return typeof taskId === 'string' && /^[a-zA-Z0-9-_.\/:]+$/.test(taskId);
 }
@@ -1309,32 +1348,115 @@ class OstackyController {
                 'record_execution_analysis'
             );
         }
-        // C2: strict contract — recommendation + reasons required
+        // C2: strict contract — recommendation + reasons required (tiered recovery: fix-execution-analysis-validation)
+        // Normalizar aliases para no bloquear snapshot válido enviado con nombre distinto
+        if (snapshot && typeof snapshot === 'string') {
+            try {
+                snapshot = JSON.parse(snapshot);
+            } catch {}
+        }
+        if (snapshot && !snapshot.recommendation && (snapshot.mode || snapshot.executionMode)) {
+            snapshot.recommendation = snapshot.mode || snapshot.executionMode;
+        }
+        if (snapshot && !snapshot.reasons && snapshot.reason) {
+            snapshot.reasons = Array.isArray(snapshot.reason) ? snapshot.reason : [String(snapshot.reason)];
+        }
+        if (snapshot && Array.isArray(snapshot.reasons) && snapshot.reasons.length === 0) {
+            // vacío se considera missing para no dejar pasar snapshot inválido
+            snapshot.reasons = undefined;
+        }
+        let _snapshotDefaulted = false;
         if (snapshot && (!snapshot.recommendation || !snapshot.reasons)) {
-            return this.#makeError('Snapshot missing recommendation/reasons', 'record_execution_analysis');
+            const isDegradedOrEarlyExit =
+                this.#degraded || (typeof snapshot.taskCount === 'number' && snapshot.taskCount <= 2);
+            if (isDegradedOrEarlyExit) {
+                snapshot.recommendation = snapshot.recommendation || 'INLINE';
+                snapshot.reasons = snapshot.reasons || ['defaulted: snapshot incompleto en degraded/early-exit'];
+                _snapshotDefaulted = true;
+            } else {
+                const available = (TRANSITIONS[this.#state.state] || []).map((t) => {
+                    let desc = t.via;
+                    if (t.choice) desc += ` (choice=${t.choice})`;
+                    if (t.mode) desc += ` (mode=${t.mode})`;
+                    return desc;
+                });
+                return {
+                    error: 'Snapshot missing recommendation/reasons',
+                    current_state: this.#state.state,
+                    attempted_transition: 'record_execution_analysis',
+                    available_transitions: available,
+                    retryAllowed: true,
+                    suggestion:
+                        'Reintentá con {recommendation:"INLINE"|"SUBAGENT_DRIVEN", reasons:[...]} — ver skill execution-mode-evaluation',
+                    timestamp: new Date().toISOString(),
+                };
+            }
         }
-        // 1.7: exigir expectedTaskIds/taskIds/taskCount cuando taskCount>0
+        // 1.7: exigir expectedTaskIds/taskIds/taskCount cuando taskCount>0 — con retryAllowed para no dejar en BLOCKED
         if (snapshot && typeof snapshot.taskCount === 'number' && snapshot.taskCount > 0) {
             const hasExpectedIds = Array.isArray(snapshot.expectedTaskIds) && snapshot.expectedTaskIds.length > 0;
             const hasTaskIds = Array.isArray(snapshot.taskIds) && snapshot.taskIds.length > 0;
             const hasCount = typeof snapshot.taskCount === 'number' && snapshot.taskCount > 0;
             if (!hasExpectedIds && !hasTaskIds && !hasCount) {
-                return this.#makeError(
-                    'Snapshot missing expectedTaskIds/taskIds/taskCount when taskCount>0',
-                    'record_execution_analysis'
-                );
+                const available = (TRANSITIONS[this.#state.state] || []).map((t) => {
+                    let desc = t.via;
+                    if (t.choice) desc += ` (choice=${t.choice})`;
+                    if (t.mode) desc += ` (mode=${t.mode})`;
+                    return desc;
+                });
+                return {
+                    error: 'Snapshot missing expectedTaskIds/taskIds/taskCount when taskCount>0',
+                    current_state: this.#state.state,
+                    attempted_transition: 'record_execution_analysis',
+                    available_transitions: available,
+                    retryAllowed: true,
+                    suggestion:
+                        'Reintentá con {taskCount, expectedTaskIds:[...]} que matchee tasks.md — ver skill execution-mode-evaluation',
+                    timestamp: new Date().toISOString(),
+                };
             }
             if (!hasExpectedIds && !hasTaskIds) {
-                return this.#makeError(
-                    'Snapshot missing expectedTaskIds or taskIds when taskCount>0',
-                    'record_execution_analysis'
-                );
+                const available = (TRANSITIONS[this.#state.state] || []).map((t) => {
+                    let desc = t.via;
+                    if (t.choice) desc += ` (choice=${t.choice})`;
+                    if (t.mode) desc += ` (mode=${t.mode})`;
+                    return desc;
+                });
+                return {
+                    error: 'Snapshot missing expectedTaskIds or taskIds when taskCount>0',
+                    current_state: this.#state.state,
+                    attempted_transition: 'record_execution_analysis',
+                    available_transitions: available,
+                    retryAllowed: true,
+                    suggestion:
+                        'Reintentá con expectedTaskIds/taskIds que matchee tasks.md — ver skill execution-mode-evaluation',
+                    timestamp: new Date().toISOString(),
+                };
             }
         }
-        // C2: capture expected tasks for gate
-        const expectedTasks = snapshot?.expectedTaskIds || snapshot?.taskIds || null;
-        const expectedTaskCount = snapshot?.taskCount ?? (Array.isArray(expectedTasks) ? expectedTasks.length : null);
+        // C2: capture expected tasks for gate — harden-task-integrity: tasks.md canonical
+        let expectedTasks = snapshot?.expectedTaskIds || snapshot?.taskIds || null;
+        let expectedTaskCount = snapshot?.taskCount ?? (Array.isArray(expectedTasks) ? expectedTasks.length : null);
         const isEarlyExitExec = snapshot?.globalRuleTriggered === 'early-exit' && (snapshot?.taskCount ?? 0) <= 2;
+        // harden-task-integrity 1.1/1.2: tasks.md is source of truth
+        let tasksMdIds = [];
+        let taskCountMismatch = false;
+        try {
+            tasksMdIds = parseTasksMd(this.#state.changeId, this.#statePath);
+        } catch {}
+        if (tasksMdIds.length > 0) {
+            const snapshotIds = Array.isArray(expectedTasks) ? expectedTasks : null;
+            const snapshotSet = snapshotIds ? new Set(snapshotIds) : new Set();
+            const tasksMdSet = new Set(tasksMdIds);
+            const mismatch =
+                !snapshotIds ||
+                snapshotIds.length !== tasksMdIds.length ||
+                [...snapshotSet].some((id) => !tasksMdSet.has(id)) ||
+                [...tasksMdSet].some((id) => !snapshotSet.has(id));
+            if (mismatch) taskCountMismatch = true;
+            expectedTasks = [...tasksMdIds];
+            expectedTaskCount = tasksMdIds.length;
+        }
         // 8.1/8.2: lastProposal for execution — reasoning con plan
         let execShown = false;
         let execFiles = [];
@@ -1377,6 +1499,38 @@ class OstackyController {
             lastProposal: execLastProposal,
         });
         await this.#audit('EXECUTION_DECISION_PENDING', 'record_execution_analysis');
+        // fix-execution-analysis-validation: degraded/early-exit defaulted snapshot → WARN
+        if (_snapshotDefaulted) {
+            const auditId = `aud-${Date.now()}-${this.#state.auditSeq}`;
+            log('warn:snapshot_defaulted', { auditId });
+            await this.#audit(
+                'WARN',
+                'snapshot_defaulted',
+                'snapshot missing recommendation/reasons, defaulted to INLINE'
+            );
+            const lastAudit = this.#state.audit?.[this.#state.audit.length - 1];
+            return {
+                state: this.#state.state,
+                revision: this.#state.revision,
+                executionDecisionId: this.#state.executionDecisionId,
+                warning: 'snapshot missing recommendation/reasons, defaulted to INLINE',
+                auditId: lastAudit?.id || auditId,
+            };
+        }
+        // harden-task-integrity: emit WARN if tasks.md mismatch
+        if (taskCountMismatch) {
+            const auditId = `aud-${Date.now()}-${this.#state.auditSeq}`;
+            log('warn:task_count_mismatch', {
+                auditId,
+                snapshotCount: snapshot?.expectedTaskIds?.length ?? 0,
+                tasksMdCount: tasksMdIds.length,
+            });
+            await this.#audit(
+                'WARN',
+                'task_count_mismatch',
+                `expectedTasks from snapshot (${snapshot?.expectedTaskIds?.length ?? 0}) differs from tasks.md (${tasksMdIds.length}) - using tasks.md`
+            );
+        }
         // 8.2: reasoning sin plan → WARN (but allow early-exit style)
         if (!execShown && snapshot && !isEarlyExitExec) {
             // Only warn if snapshot was expected to have reasoning (taskCount>2 or not early-exit)
@@ -1612,9 +1766,59 @@ class OstackyController {
         return { state: this.#state.state, revision: this.#state.revision };
     }
 
-    // --- C2: Expected tasks gate (controller as source of truth) ---
+    // --- C2: Expected tasks gate (controller as source of truth) — harden-task-integrity: tasks.md canonical ---
     async setExpectedTasks({ taskIds, taskCount } = {}) {
         this.#load();
+        let tasksMdIds = [];
+        try {
+            tasksMdIds = parseTasksMd(this.#state.changeId, this.#statePath);
+        } catch {}
+        if (tasksMdIds.length > 0) {
+            const providedIds = Array.isArray(taskIds) ? taskIds : null;
+            if (providedIds) {
+                const setA = new Set(providedIds);
+                const setB = new Set(tasksMdIds);
+                const mismatch =
+                    providedIds.length !== tasksMdIds.length ||
+                    [...setA].some((id) => !setB.has(id)) ||
+                    [...setB].some((id) => !setA.has(id));
+                if (mismatch) {
+                    const auditId = `aud-${Date.now()}-${this.#state.auditSeq}`;
+                    log('warn:task_count_mismatch', {
+                        auditId,
+                        provided: providedIds.length,
+                        tasksMd: tasksMdIds.length,
+                    });
+                    await this.#audit(
+                        'WARN',
+                        'task_count_mismatch',
+                        `expectedTasks from caller (${providedIds.length}) differs from tasks.md (${tasksMdIds.length}) - using tasks.md`
+                    );
+                }
+            } else if (typeof taskCount === 'number' && taskCount !== tasksMdIds.length) {
+                const auditId = `aud-${Date.now()}-${this.#state.auditSeq}`;
+                log('warn:task_count_mismatch', { auditId, provided: taskCount, tasksMd: tasksMdIds.length });
+                await this.#audit(
+                    'WARN',
+                    'task_count_mismatch',
+                    `expectedTaskCount from caller (${taskCount}) differs from tasks.md (${tasksMdIds.length}) - using tasks.md`
+                );
+            }
+            this.#state.expectedTasks = [...tasksMdIds];
+            this.#state.expectedTaskCount = tasksMdIds.length;
+            await this.#persist();
+            await this.#audit(
+                'EXECUTING',
+                'set_expected_tasks',
+                `expected=${this.#state.expectedTaskCount} (from tasks.md)`
+            );
+            return {
+                ok: true,
+                expectedTasks: this.#state.expectedTasks,
+                expectedTaskCount: this.#state.expectedTaskCount,
+                source: 'tasks.md',
+            };
+        }
         if (Array.isArray(taskIds) && taskIds.length > 0) {
             this.#state.expectedTasks = [...taskIds];
             this.#state.expectedTaskCount = taskIds.length;
@@ -2129,19 +2333,18 @@ class OstackyController {
                 return { error: 'fingerprint required: file exists but fileHash is null' };
             }
         }
-        // 7.1: hard gate INLINE (new files eximidos) vs WARN SUBAGENTS
-        const isInline = this.#state.executionMode === 'INLINE' || this.#state.state === 'EXECUTING_INLINE';
+        // harden-task-integrity 2.2: hard gate unificado (new files eximidos) — antes INLINE hard vs SUBAGENTS WARN
         const isNewFile = !!(
             filePath &&
             !this.#state.fileFingerprints?.[filePath] &&
             !Object.values(this.#state.tasks || {}).some((t) => t.filePath === filePath)
         );
         if (!this.#state.lastValidated || (filePath && this.#state.lastValidated.filePath !== filePath)) {
-            if (isInline && !isNewFile) {
+            if (!isNewFile) {
                 return {
                     error: 'validate required',
                     outcome: 'CONFLICT',
-                    reason: `complete_task without prior validate_edit for ${filePath || taskId} — hard gate INLINE (new files eximidos)`,
+                    reason: `complete_task without prior validate_edit for ${filePath || taskId} — hard gate (new files eximidos)`,
                 };
             }
             this.#state.completeWithoutValidateCount = (this.#state.completeWithoutValidateCount || 0) + 1;
@@ -2373,7 +2576,7 @@ function safeHandler(fn, options = {}) {
 
 const server = new McpServer({
     name: 'ostacky-controller',
-    version: '0.8.5',
+    version: '0.8.7',
 });
 
 server.registerTool(
@@ -2973,7 +3176,7 @@ function setupGracefulShutdown(ctrl) {
 }
 
 async function main() {
-    log('Starting ostacky-controller MCP v0.8.5...');
+    log('Starting ostacky-controller MCP v0.8.7...');
     log('State path:', { path: statePath });
     // Clean up stale tmp/lock files from previous runs
     cleanupTmpFiles(statePath);

package/assets/mcp/ostacky-controller/package.json

@@ -1,6 +1,6 @@
 {
     "name": "ostacky-controller",
-    "version": "0.8.5",
+    "version": "0.8.7",
     "private": true,
     "type": "module",
     "dependencies": {

package/assets/plugins/engram.ts

@@ -437,6 +437,37 @@ export const Engram: Plugin = async (ctx) => {
       }
       // No inyectar MEMORY_INSTRUCTIONS completo nunca — se lee on-demand via Read
 
+      // harden-compaction-resume: auto-inject recovery hint when pending (no depende del modelo)
+      if (!shouldBeTrivial) {
+        try {
+          const statePath = process.env.OSTACKY_STATE_PATH || join(ctx.directory, ".opencode", "ostacky-state.json")
+          const raw = readFileSync(statePath, "utf-8")
+          const st = JSON.parse(raw)
+          const curState = st?.state ?? "DONE"
+          if (!["DONE", "INTERPRETATION_PENDING"].includes(curState)) {
+            let pending: string[] = Array.isArray(st?.lastHandoff?.pendingTasks)
+              ? st.lastHandoff.pendingTasks.filter((id: string) => !st.tasks?.[id] || st.tasks[id].status !== "COMPLETED")
+              : []
+            if (pending.length === 0) {
+              try {
+                const fbPath = join(dirname(statePath), ".ostacky-handoff-compaction.json")
+                const fbRaw = readFileSync(fbPath, "utf-8")
+                const fb = JSON.parse(fbRaw)
+                if (fb && Array.isArray(fb.pendingTasks) && typeof fb.ts === "number" && Date.now() - fb.ts < 24 * 60 * 60 * 1000) {
+                  const fbPend = fb.pendingTasks.filter((id: string) => !st.tasks?.[id] || st.tasks[id].status !== "COMPLETED")
+                  if (fbPend.length > 0) pending = fbPend
+                }
+              } catch {}
+            }
+            if (pending.length > 0) {
+              const hint = `\n\n[RECOVERY: te quedan ${pending.slice(0, 3).join(",")}${pending.length > 3 ? `, +${pending.length - 3} más` : ""} - usa get_handoff / mem_context para retomar]`
+              if (output.system.length > 0) output.system[output.system.length - 1] += hint
+              else output.system.push(hint.trim())
+            }
+          }
+        } catch {}
+      }
+
       // ── Save nudge ──────────────────────────────────────────────────────────
       // Skip nudge for trivial greeting (cache-friendly, no extra injection)
       if (shouldBeTrivial) return

package/assets/plugins/ostacky-plugin.ts

@@ -204,6 +204,37 @@ export const OstackyController: Plugin = async (ctx) => {
         // Also handle TIER1 hint for small tasks without replacing system
         // Intent detection for downgradeable 0/0+1 is done in record_discovery router, not here
       }
+      // harden-compaction-resume: auto-inject recovery hint when pending (determinístico, no depende del modelo)
+      if (!trivial && state && !["DONE", "INTERPRETATION_PENDING"].includes(state.state)) {
+        try {
+          let pending: string[] = Array.isArray(state.lastHandoff?.pendingTasks)
+            ? state.lastHandoff.pendingTasks.filter((id: string) => !state.tasks?.[id] || state.tasks[id].status !== "COMPLETED")
+            : []
+          if (pending.length === 0) {
+            try {
+              const fallbackPath = join(dirname(getStatePath(ctx.directory)), ".ostacky-handoff-compaction.json")
+              if (existsSync(fallbackPath)) {
+                const raw = readFileSync(fallbackPath, "utf-8")
+                const data = JSON.parse(raw)
+                if (data && Array.isArray(data.pendingTasks) && typeof data.ts === "number" && Date.now() - data.ts < 24 * 60 * 60 * 1000) {
+                  const fbPending = data.pendingTasks.filter((id: string) => !state.tasks?.[id] || state.tasks[id].status !== "COMPLETED")
+                  if (fbPending.length > 0) pending = fbPending
+                }
+              }
+            } catch {}
+          }
+          if (pending.length > 0) {
+            const hint = `\n\n[RECOVERY: te quedan ${pending.slice(0, 3).join(",")}${pending.length > 3 ? `, +${pending.length - 3} más` : ""} - usa get_handoff / mem_context para retomar]`
+            if (output.parts && output.parts.length > 0) {
+              const last = output.parts[output.parts.length - 1]
+              if (last.type === "text") last.text = (last.text ?? "") + hint
+              else output.parts.push({ type: "text", text: hint })
+            } else {
+              output.parts = [{ type: "text", text: text + hint }]
+            }
+          }
+        } catch {}
+      }
     },
 
     // ── Hard gates before any tool ──
@@ -292,9 +323,11 @@ export const OstackyController: Plugin = async (ctx) => {
           if (u.startsWith("file://")) targetPath = u.slice(7)
         }
         const isCodeFile = /\.(ts|js|tsx|jsx|mts|cts)$/i.test(targetPath) || targetPath.includes("src/") || targetPath.includes("assets/") || args?.pattern?.includes("*.ts")
+        // harden-task-integrity 1.3: eximir reads de tasks.md del gate (no requiere CodeGraph)
+        const isSpecTasksPath = targetPath.includes("openspec/changes") || targetPath.includes("openspec/specs")
         // Grep on *.md should not be blocked
         const isLiteralGrep = tool === "grep" && (args?.include?.endsWith(".md") || args?.include?.endsWith(".json"))
-        if (isCodeFile && !isLiteralGrep) {
+        if (isCodeFile && !isLiteralGrep && !isSpecTasksPath) {
           const hasDiscoveryHit = discoveryHitByRequest.get(sessionId) ?? getDiscoveryCacheHit(ctx.directory)
           const codegraphOk = isCodegraphAvailable(ctx.directory)
           if (codegraphOk && !hasDiscoveryHit) {
@@ -335,6 +368,29 @@ export const OstackyController: Plugin = async (ctx) => {
         }
       }
 
+      // ── 3.5) Bash file-mutation gate (harden-task-integrity: bash mutante requiere validate_edit) ──
+      if (tool === "bash" && freshState && ["EXECUTING_INLINE", "EXECUTING_SUBAGENTS"].includes(freshState.state)) {
+        const cmdForMutation: string = args?.command || args?.cmd || ""
+        const isMutating = /[>]{1,2}\s*\S+|\bsed\b[^|;]*-i|\btruncate\b|\btee\b|\bcp\s+|\bmv\s+|python.*open.*w/.test(cmdForMutation)
+        if (isMutating) {
+          const mPaths = extractPathsFromBash(cmdForMutation)
+          for (const p of mPaths) {
+            if (!p) continue
+            const isProjectCode = p.includes("src/") || p.includes("assets/") || /\.(ts|js|tsx|jsx|mts|cts)$/i.test(p)
+            if (!isProjectCode) continue
+            if (!isPathInsideProject(p, ctx.directory)) continue
+            const abs = resolve(ctx.directory, p)
+            const exists = existsSync(abs)
+            const isNewFile = !exists && !freshState.fileFingerprints?.[p] && !Object.values(freshState.tasks || {}).some((t: any) => t.filePath === p)
+            if (isNewFile) continue
+            const lv = freshState.lastValidated
+            if (!lv || lv.filePath !== p) {
+              throw new Error(`BLOCKED: file mutation requires validate_edit/expectedTask for ${p} — usa validate_edit antes de bash mutante`)
+            }
+          }
+        }
+      }
+
       let filePath: string | undefined
       if (tool === "read" || tool === "read_mcp_resource" || tool === "grep" || tool === "glob" || tool === "write" || tool === "edit") {
         filePath = args?.filePath || args?.path || args?.pattern || args?.uri || ""

package/assets/skills/execution-mode-evaluation/SKILL.md

@@ -176,6 +176,8 @@ Para cada fase de `tasks.md`, evaluar intra-fase:
 
 **⚠️ Este skill provee ANÁLISIS, no autorización. Gate ANTES de persistir:** SHALL correr **en memoria primero**, derivar snapshot y **mostrar al usuario** `"Recomendación: INLINE/SUBAGENT por [razón], ~X líneas, clusters [...] ¿Procedo con este plan?"` y esperar. Solo si responde sí → `record_execution_analysis({snapshot, reuseDiscovery:true})` → `EXECUTION_DECISION_PENDING` → `consume_execution_decision`. Si responde no → `block({reason:"usuario rechazó plan"})` sin persistir. Si re-llamó `codegraph_explore` pudiendo reusar → `WARN:redundant_codegraph_call`.
 
+**Recovery de snapshot incompleto (fix-execution-analysis-validation + bugfix 2026-09-18):** Si `record_execution_analysis` retorna `{error:"Snapshot missing ...", retryAllowed:true, suggestion}` (ya sea por `recommendation/reasons` **o** por `expectedTaskIds/taskIds` cuando `taskCount>0`), NO hacer `block` ni `abandon`. Corregir snapshot añadiendo el campo faltante y **reintentar el mismo `executionDecisionId`** — permanece en `EXECUTION_ANALYSIS` y el retry avanza. El controller también normaliza aliases (`mode`→`recommendation`, `reason`→`reasons`, JSON string) y considera `reasons:[]` como missing. Si `state.degraded==true` o `taskCount<=2` el controller defaultea a `INLINE` con `WARN:snapshot_defaulted` y ya transiciona; no reintentar. Verificar con `grep "retryAllowed" assets/mcp/ostacky-controller/index.js`. Snapshot válido (con `recommendation`, `reasons` y `expectedTaskIds`) **nunca** debe disparar `BLOCKED` ni requerir degraded.
+
 ## Ejemplo compacto
 
 5 tasks, 3 clusters independientes (A: task1+task2 en `workflow.ts`, B: task3+task4 en `structured.ts`, C: task5 en archivo nuevo), sin deps entre clusters:

package/assets/skills/graceful-degradation/SKILL.md

@@ -197,6 +197,21 @@ If unsure → ask the user.
 - The task is high-risk without structural analysis (CodeGraph)
 - The user requests to stop
 
+### Without execution analysis (fix-execution-analysis-validation)
+
+**Cuando `record_execution_analysis` falla por snapshot incompleto:**
+
+1. **Si `retryAllowed:true` (modo normal, taskCount>2):** NO hacer `block`. Corregir snapshot (añadir `recommendation`/`reasons`) y reintentar `record_execution_analysis` con mismo `executionDecisionId` — permanece en `EXECUTION_ANALYSIS` y el retry avanza a `EXECUTION_DECISION_PENDING`.
+2. **Si `warning: snapshot_defaulted` (degraded o taskCount<=2):** Ya avanzó a `EXECUTION_DECISION_PENDING` con `INLINE` defaulteado. Continuar a `consume_execution_decision`.
+3. **Si snapshot irrecuperable (truncado 50KB, datos perdidos):** Usar `block({reason}) → BLOCKED → replan → INTERPRETATION_PENDING`. `lastHandoff` preserva checkpoint (cada 3 `complete_task`), no se pierden archivos.
+
+**Workflow:**
+```
+1. Leer error: ¿tiene retryAllowed? → corregir y reintentar
+2. ¿Es warning defaulted? → continuar
+3. Solo si irrecuperable → block/replan degradado
+```
+
 ## Integration
 
 This skill is loaded automatically when the agent detects tool failures during the health check pre-vuelo.

package/dist/cli.js

@@ -621,31 +621,31 @@ var init_fs = __esm(() => {
 var manifest_default;
 var init_manifest = __esm(() => {
   manifest_default = {
-    version: "0.8.5",
+    version: "0.8.7",
     repo: "JaimeHoracio/Ostacky",
-    tag: "v0.8.5",
+    tag: "v0.8.7",
     agents: [
       {
         name: "ostacky",
         file: "assets/agents/ostacky.md",
-        description: "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.8.5: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
-        version: "0.8.5",
-        sha256: "2726b633b020b02d984c1d446cad18c50d2f715643d882bc0b9edd97759a964e"
+        description: "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.8.7: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
+        version: "0.8.7",
+        sha256: "191a317be68bde517f6d3877ec3a016720617d7382944fff0d08d31b985a6644"
       }
     ],
     commands: [
       {
         name: "install-stack",
         file: "assets/commands/install-stack.md",
-        description: "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, controller plugin). v0.8.5: controller plugin como alma hard-gate, Context7 removido del stack.",
-        version: "0.8.5",
-        sha256: "a5f8e6ebcfdf8143cd2950d10bb031543b239b31760a7ade178b09485bf89a1f"
+        description: "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, controller plugin). v0.8.7: controller plugin como alma hard-gate, Context7 removido del stack.",
+        version: "0.8.7",
+        sha256: "315d8fcdf2a945cef863bb4576838f95d7eb4a0acca38c12575dc80ecc4724dc"
       },
       {
         name: "opsx-sync",
         file: "assets/commands/opsx-sync.md",
         description: "Sincroniza delta specs del change activo sin inicializar CodeGraph si ya existe índice",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "fe0158478f2ca63b315037a85fc1632b77868532e319af6c7384285441767d64"
       }
     ],
@@ -653,15 +653,15 @@ var init_manifest = __esm(() => {
       {
         name: "ostacky-controller",
         file: "assets/mcp/ostacky-controller/",
-        description: "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.8.5: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
-        version: "0.8.5",
-        sha256: "6a9e4e9eaf9cb73cf7a39e4d914cd0cd74551e7a1669de95bae950969f559ba3"
+        description: "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.8.7: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
+        version: "0.8.7",
+        sha256: "9de463763ea6538c03b9307e7e36dcd2ae854dcc460bd25981e75f4f70df0e66"
       },
       {
         name: "openspec",
         file: "assets/mcp/openspec/",
         description: "MCP server local para OpenSpec - proposal, apply, archive, sync de cambios",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "fa4be28bfc1e75db8f1a037e2580f04a60066c80e8e5934e90e1041020d04609"
       }
     ],
@@ -670,106 +670,106 @@ var init_manifest = __esm(() => {
         name: "brainstorming",
         file: "assets/skills/brainstorming/SKILL.md",
         description: "Skill unificado de pensamiento con dos modos: creative-design (producción de diseño → transición a implementación directa o openspec-propose) y open-exploration (exploración libre)",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "f1013a86a8f27914d85a716e23c7fd32db1786d93615e8b0834b13d184308549"
       },
       {
         name: "execution-mode-evaluation",
         file: "assets/skills/execution-mode-evaluation/SKILL.md",
         description: "Skill de análisis de modo de ejecución — output reconciliado con controller snapshot contract (recommendation field)",
-        version: "0.8.5",
-        sha256: "7b89dda29927c88f1eb13ffcea541a12423384c172f66c4f3d9b61efe0c7a163"
+        version: "0.8.7",
+        sha256: "2158a6864c0912e868a9d720db7fd79441e6cc298e3320833d2527c9727c852e"
       },
       {
         name: "tdd",
         file: "assets/skills/tdd/SKILL.md",
         description: "Skill de test-driven development (Superpowers)",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "aa412298980b7826165c211145c1b8e9135f68f36247bb3cb96d0a0eae274486"
       },
       {
         name: "subagent-driven-development",
         file: "assets/skills/subagent-driven-development/SKILL.md",
         description: "Skill de ejecución con subagentes (Superpowers) — ejecuta solo después de confirmación del coordinador Ostacky",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "1a42d714a9a13faf05f0bf7b580e8d837c2e77a5633839542ccce603023419e8"
       },
       {
         name: "dispatching-parallel-agents",
         file: "assets/skills/dispatching-parallel-agents/SKILL.md",
         description: "Skill de dispatch paralelo de agentes (Superpowers)",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "3c8a66d51ae2e719e877d02c3dac32bd804722c3bb9227c258ecae78252a20ab"
       },
       {
         name: "review",
         file: "assets/skills/review/SKILL.md",
         description: "Skill de revisión de código (Superpowers)",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "b19650ed4d1d4d9857a4dd5b7e08e91328a1a1fc9c45bcc2fb600fa9d0213279"
       },
       {
         name: "receiving-code-review",
         file: "assets/skills/receiving-code-review/SKILL.md",
         description: "Skill de recibir y procesar feedback de code review",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "d761e884e71d8d3476ac734d287cae403a4024506a7d12e7361a448217c0a831"
       },
       {
         name: "openspec-propose",
         file: "assets/skills/openspec-propose/SKILL.md",
         description: "Skill de generación de proposal (OpenSpec)",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "bb59100b9fd3c9f9a1ec6509fa975ec55bf7fc737df4fe73bb3e9bbc217b83f7"
       },
       {
         name: "openspec-apply-change",
         file: "assets/skills/openspec-apply-change/SKILL.md",
         description: "Skill de aplicación de change (OpenSpec)",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "dfc823bf89fc7505e91ab6dee9c1f004be38a410bd3d88fb67b211b1b6cbb1d0"
       },
       {
         name: "openspec-archive-change",
         file: "assets/skills/openspec-archive-change/SKILL.md",
         description: "Skill de archivo de change (OpenSpec)",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "16e4b561de7747283663fed602e506abf502452c49a8d4b86d7a5539c40f0195"
       },
       {
         name: "openspec-explore",
         file: "assets/skills/openspec-explore/SKILL.md",
         description: "Modo explore para OpenSpec — thinking partner para explorar ideas, investigar problemas y clarificar requisitos antes/durante un cambio",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "37ae4aaf17ea71a395bab6dc4d9d61b9a49d7910f6692535ae8553244c46880b"
       },
       {
         name: "using-git-worktrees",
         file: "assets/skills/using-git-worktrees/SKILL.md",
         description: "Skill de uso de git worktrees para aislamiento de trabajo",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "93341bc1b7c053618a8b6dc07e3615b77990d7b549a0201f5835d95fef67ce13"
       },
       {
         name: "using-superpowers",
         file: "assets/skills/using-superpowers/SKILL.md",
         description: "Skill de orquestación de Superpowers skills",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "7e54536f96d2a379185a10bfc1e970850caa2561b6d8aca7080f0defea0381a4"
       },
       {
         name: "writing-skills",
         file: "assets/skills/writing-skills/SKILL.md",
         description: "Skill de creación y edición de skills",
-        version: "0.8.5",
+        version: "0.8.7",
         sha256: "3d76b906cee518a2b809febb70db95697a35b9f368986bb504b4120c3bfb437a"
       },
       {
         name: "graceful-degradation",
         file: "assets/skills/graceful-degradation/SKILL.md",
         description: "Skill de degradación graceful cuando múltiples tools están indisponibles",
-        version: "0.8.5",
-        sha256: "79d0eeb2116382cb5db5b753277a333b7ca5682f4a541170b4a6158125c2cb50"
+        version: "0.8.7",
+        sha256: "363449bd9e6f800a0a3168667cf78f767fb105d86e4a4adadcc649d418139303"
       }
     ]
   };
@@ -1492,7 +1492,7 @@ var init_stack = __esm(() => {
 // package.json
 var package_default = {
   name: "ostacky",
-  version: "0.8.5",
+  version: "0.8.7",
   description: "Instalador interactivo de agentes y comandos para OpenCode",
   type: "module",
   bin: {
@@ -2669,7 +2669,7 @@ async function probeMcpServer(nodeExecutable, serverPath, cwd, statePath, option
         params: {
           protocolVersion: "2025-03-26",
           capabilities: {},
-          clientInfo: { name: "ostacky-installer", version: "0.8.5" }
+          clientInfo: { name: "ostacky-installer", version: "0.8.7" }
         }
       });
     });

package/manifest.json

@@ -1,29 +1,29 @@
 {
-  "version": "0.8.5",
+  "version": "0.8.7",
   "repo": "JaimeHoracio/Ostacky",
-  "tag": "v0.8.5",
+  "tag": "v0.8.7",
   "agents": [
     {
       "name": "ostacky",
       "file": "assets/agents/ostacky.md",
-      "description": "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.8.5: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
-      "version": "0.8.5",
-      "sha256": "2726b633b020b02d984c1d446cad18c50d2f715643d882bc0b9edd97759a964e"
+      "description": "Orquestador con recuperación automática (nunca se congela), ruteo por nivel de impacto, controller MCP con SDK oficial, edición segura con fallback inline, y delegación en OpenSpec + Superpowers. v0.8.7: prune de skills obsoletas, lastHandoff, getAvailableTransitions, consecutiveFailures real, mem_session_summary automático al cierre.",
+      "version": "0.8.7",
+      "sha256": "191a317be68bde517f6d3877ec3a016720617d7382944fff0d08d31b985a6644"
     }
   ],
   "commands": [
     {
       "name": "install-stack",
       "file": "assets/commands/install-stack.md",
-      "description": "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, controller plugin). v0.8.5: controller plugin como alma hard-gate, Context7 removido del stack.",
-      "version": "0.8.5",
-      "sha256": "a5f8e6ebcfdf8143cd2950d10bb031543b239b31760a7ade178b09485bf89a1f"
+      "description": "Instala el stack tecnológico del proyecto (CodeGraph, skills, OpenSpec, Engram, controller plugin). v0.8.7: controller plugin como alma hard-gate, Context7 removido del stack.",
+      "version": "0.8.7",
+      "sha256": "315d8fcdf2a945cef863bb4576838f95d7eb4a0acca38c12575dc80ecc4724dc"
     },
     {
       "name": "opsx-sync",
       "file": "assets/commands/opsx-sync.md",
       "description": "Sincroniza delta specs del change activo sin inicializar CodeGraph si ya existe índice",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "fe0158478f2ca63b315037a85fc1632b77868532e319af6c7384285441767d64"
     }
   ],
@@ -31,15 +31,15 @@
     {
       "name": "ostacky-controller",
       "file": "assets/mcp/ostacky-controller/",
-      "description": "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.8.5: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
-      "version": "0.8.5",
-      "sha256": "6a9e4e9eaf9cb73cf7a39e4d914cd0cd74551e7a1669de95bae950969f559ba3"
+      "description": "Máquina de estados persistida con @modelcontextprotocol/server SDK. v0.8.7: 22 tools (incluye set_handoff, get_handoff, clear_handoff, get_available_transitions funcional). Bugfixes: consecutiveFailures real, lastHandoff state, defaultChoice persistido. Robustez: degraded mode automático tras 3 fallos, persistence condicional para Nivel 0, prune de skills obsoletas.",
+      "version": "0.8.7",
+      "sha256": "9de463763ea6538c03b9307e7e36dcd2ae854dcc460bd25981e75f4f70df0e66"
     },
     {
       "name": "openspec",
       "file": "assets/mcp/openspec/",
       "description": "MCP server local para OpenSpec - proposal, apply, archive, sync de cambios",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "fa4be28bfc1e75db8f1a037e2580f04a60066c80e8e5934e90e1041020d04609"
     }
   ],
@@ -48,106 +48,106 @@
       "name": "brainstorming",
       "file": "assets/skills/brainstorming/SKILL.md",
       "description": "Skill unificado de pensamiento con dos modos: creative-design (producción de diseño → transición a implementación directa o openspec-propose) y open-exploration (exploración libre)",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "f1013a86a8f27914d85a716e23c7fd32db1786d93615e8b0834b13d184308549"
     },
     {
       "name": "execution-mode-evaluation",
       "file": "assets/skills/execution-mode-evaluation/SKILL.md",
       "description": "Skill de análisis de modo de ejecución — output reconciliado con controller snapshot contract (recommendation field)",
-      "version": "0.8.5",
-      "sha256": "7b89dda29927c88f1eb13ffcea541a12423384c172f66c4f3d9b61efe0c7a163"
+      "version": "0.8.7",
+      "sha256": "2158a6864c0912e868a9d720db7fd79441e6cc298e3320833d2527c9727c852e"
     },
     {
       "name": "tdd",
       "file": "assets/skills/tdd/SKILL.md",
       "description": "Skill de test-driven development (Superpowers)",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "aa412298980b7826165c211145c1b8e9135f68f36247bb3cb96d0a0eae274486"
     },
     {
       "name": "subagent-driven-development",
       "file": "assets/skills/subagent-driven-development/SKILL.md",
       "description": "Skill de ejecución con subagentes (Superpowers) — ejecuta solo después de confirmación del coordinador Ostacky",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "1a42d714a9a13faf05f0bf7b580e8d837c2e77a5633839542ccce603023419e8"
     },
     {
       "name": "dispatching-parallel-agents",
       "file": "assets/skills/dispatching-parallel-agents/SKILL.md",
       "description": "Skill de dispatch paralelo de agentes (Superpowers)",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "3c8a66d51ae2e719e877d02c3dac32bd804722c3bb9227c258ecae78252a20ab"
     },
     {
       "name": "review",
       "file": "assets/skills/review/SKILL.md",
       "description": "Skill de revisión de código (Superpowers)",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "b19650ed4d1d4d9857a4dd5b7e08e91328a1a1fc9c45bcc2fb600fa9d0213279"
     },
     {
       "name": "receiving-code-review",
       "file": "assets/skills/receiving-code-review/SKILL.md",
       "description": "Skill de recibir y procesar feedback de code review",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "d761e884e71d8d3476ac734d287cae403a4024506a7d12e7361a448217c0a831"
     },
     {
       "name": "openspec-propose",
       "file": "assets/skills/openspec-propose/SKILL.md",
       "description": "Skill de generación de proposal (OpenSpec)",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "bb59100b9fd3c9f9a1ec6509fa975ec55bf7fc737df4fe73bb3e9bbc217b83f7"
     },
     {
       "name": "openspec-apply-change",
       "file": "assets/skills/openspec-apply-change/SKILL.md",
       "description": "Skill de aplicación de change (OpenSpec)",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "dfc823bf89fc7505e91ab6dee9c1f004be38a410bd3d88fb67b211b1b6cbb1d0"
     },
     {
       "name": "openspec-archive-change",
       "file": "assets/skills/openspec-archive-change/SKILL.md",
       "description": "Skill de archivo de change (OpenSpec)",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "16e4b561de7747283663fed602e506abf502452c49a8d4b86d7a5539c40f0195"
     },
     {
       "name": "openspec-explore",
       "file": "assets/skills/openspec-explore/SKILL.md",
       "description": "Modo explore para OpenSpec — thinking partner para explorar ideas, investigar problemas y clarificar requisitos antes/durante un cambio",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "37ae4aaf17ea71a395bab6dc4d9d61b9a49d7910f6692535ae8553244c46880b"
     },
     {
       "name": "using-git-worktrees",
       "file": "assets/skills/using-git-worktrees/SKILL.md",
       "description": "Skill de uso de git worktrees para aislamiento de trabajo",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "93341bc1b7c053618a8b6dc07e3615b77990d7b549a0201f5835d95fef67ce13"
     },
     {
       "name": "using-superpowers",
       "file": "assets/skills/using-superpowers/SKILL.md",
       "description": "Skill de orquestación de Superpowers skills",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "7e54536f96d2a379185a10bfc1e970850caa2561b6d8aca7080f0defea0381a4"
     },
     {
       "name": "writing-skills",
       "file": "assets/skills/writing-skills/SKILL.md",
       "description": "Skill de creación y edición de skills",
-      "version": "0.8.5",
+      "version": "0.8.7",
       "sha256": "3d76b906cee518a2b809febb70db95697a35b9f368986bb504b4120c3bfb437a"
     },
     {
       "name": "graceful-degradation",
       "file": "assets/skills/graceful-degradation/SKILL.md",
       "description": "Skill de degradación graceful cuando múltiples tools están indisponibles",
-      "version": "0.8.5",
-      "sha256": "79d0eeb2116382cb5db5b753277a333b7ca5682f4a541170b4a6158125c2cb50"
+      "version": "0.8.7",
+      "sha256": "363449bd9e6f800a0a3168667cf78f767fb105d86e4a4adadcc649d418139303"
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "ostacky",
-    "version": "0.8.5",
+    "version": "0.8.7",
     "description": "Instalador interactivo de agentes y comandos para OpenCode",
     "type": "module",
     "bin": {