session-orchestrator 3.17.0 → 3.20.0

package/docs/session-config-template.md

@@ -75,6 +75,16 @@ stale-issue-days: 30                   # issue-age threshold for triage flag
 
 Read by: `skills/session-start/SKILL.md`, `skills/ecosystem-health/SKILL.md`, `skills/gitlab-ops/SKILL.md`.
 
+## Auto-Skill Dispatch
+
+```yaml
+auto-skill-dispatch: false             # opt-in; phrase-match meta-skill — see skills/using-orchestrator/SKILL.md
+```
+
+Top-level scalar (not nested). When `true`, entry-point skills invoke `skills/using-orchestrator/SKILL.md` once before their own Phase 1 to detect implicit slash-command intent in the user's first message (bilingual EN/DE phrase map, confidence-scored, AUQ-disambiguated on close ties). Default `false` — zero behavior change until opted in.
+
+Read by: `skills/using-orchestrator/SKILL.md`, `skills/_shared/bootstrap-gate.md`.
+
 ## Quality Gates
 
 ```yaml
@@ -91,7 +101,7 @@ Read by: `skills/quality-gates/SKILL.md`, `skills/session-end/SKILL.md`. The thr
 ## Discovery
 
 ```yaml
-discovery-on-close: auto               # session-type aware: housekeeping=false, feature/deep=true (#264)
+discovery-on-close: auto               # auto = true for every session type (was housekeeping=false until 2026-07-29)
 discovery-probes: [all]                # all | code | infra | ui | arch | session | audit | vault | feature
 discovery-exclude-paths: []            # globs (e.g. "vendor/**", "dist/**")
 discovery-severity-threshold: low      # critical | high | medium | low
@@ -101,6 +111,17 @@ discovery-parallelism: 5               # 1..16 probe agents in parallel
 
 Read by: `skills/discovery/SKILL.md` and the probe modules under `skills/discovery/probes-*.md`.
 
+## Issue Budget
+
+```yaml
+issue-budget:
+  max-per-session: 12                  # non-exempt issues one session may create (0 = block all)
+  mode: strict                         # strict | warn | off
+  overflow: collect-issue              # collect-issue | vault-note
+```
+
+Quantity cap, not a quality filter — `discovery-*-threshold` above cannot bound creation volume. `priority::critical`, the carryover class and `broken-window` issues are exempt. Read by: `hooks/pre-bash-issue-budget.mjs`, `scripts/lib/spiral-carryover.mjs`, `skills/session-end/SKILL.md` Phase 5 Step 3b.
+
 ## Persistence & Safety
 
 ```yaml
@@ -115,6 +136,12 @@ enforcement-gates:
   path-guard: true
   command-guard: true
   post-edit-validate: true
+  bash-write-verify: true              # PostToolUse/Bash working-tree diff, warn-only (#915)
+  # bash-write-guard: true             # ⚠ INVERTED DEFAULT — this is the ONE gate that is
+                                       #   OFF when the key is absent. Every other key above
+                                       #   means "enabled unless set to false"; this one runs
+                                       #   only on a literal `true`. Leaving it out does NOT
+                                       #   leave Bash writes guarded (#800/#915).
 allow-destructive-ops: false           # disables destructive-command guard when true
 reasoning-output: false                # opt-in STATE:/PLAN: agent transparency markers
 grounding-check: true                  # session-end Phase 1.1a planned-vs-touched diff
@@ -124,7 +151,9 @@ max-turns: auto                        # housekeeping=8, feature=15, deep=25
 auto-commit-per-wave: false            # opt-in: commit after each wave's Quality-Lite PASS (default false; V3.6 plumbing)
 ```
 
-Read by: `skills/session-start/SKILL.md`, `skills/session-end/SKILL.md`, `hooks/pre-edit-scope.mjs`, `hooks/pre-bash-destructive-guard.mjs`, `hooks/pre-bash-enforce-commands.mjs`, `hooks/post-edit-validate.mjs`.
+Read by: `skills/session-start/SKILL.md`, `skills/session-end/SKILL.md`, `hooks/pre-edit-scope.mjs`, `hooks/pre-bash-destructive-guard.mjs`, `hooks/pre-bash-enforce-commands.mjs`, `hooks/post-edit-validate.mjs`, `hooks/post-bash-write-verify.mjs`.
+
+> **The `bash-write-guard` gate is the single inverted default in this block.** `hooks/enforce-commands.mjs` runs it only when `gates['bash-write-guard'] === true` is set literally; a missing key means the gate is OFF, unlike `path-guard`/`command-guard`/`post-edit-validate`/`bash-write-verify`, where a missing key means ON. Assuming otherwise is exactly the gap #915 was filed for — `hooks/enforce-scope.mjs` gates only `Edit`/`Write`/`MultiEdit`, so with `bash-write-guard` off nothing pre-checks the path of a `echo x > out-of-scope.mjs`. Full rationale (including the measured false-positive rate that justifies keeping it opt-in) in `docs/session-config-reference.md` § enforcement-gates.
 
 ## Resource Awareness (env-aware)
 
@@ -284,7 +313,7 @@ Read by: `scripts/lib/config/handover-gate.mjs`, `skills/session-end/SKILL.md` P
 
 ## Broken-Window Budget
 
-Opt-in gate in `/close` (session-end Phase 2.6). When enabled, it aggregates THIS session's "knowingly-broken shipments" (echo-stubs shipped under `enforcement: warn`, Phase 2.3/2.5 "Override and close" choices, MED/LOW findings routed to "Unresolved Review Findings", wave-level overridden findings) and files ONE hard-terminated closure issue per item (labels `broken-window` + `priority:high`, hard due-date). Non-blocking and idempotent (issue #730, Epic H / H5).
+Opt-in gate in `/close` (session-end Phase 2.6). When enabled, it aggregates THIS session's "knowingly-broken shipments" (echo-stubs shipped under `enforcement: warn`, Phase 2.3/2.5 "Override and close" choices, MED/LOW findings routed to "Unresolved Review Findings", wave-level overridden findings) and files ONE hard-terminated closure issue per item (labels `broken-window` + `priority::high`, hard due-date). Non-blocking and idempotent (issue #730, Epic H / H5).
 
 ```yaml
 broken-window-budget:
@@ -680,6 +709,8 @@ enforcement-gates:
   path-guard: true
   command-guard: true
   post-edit-validate: true
+  bash-write-verify: true              # PostToolUse/Bash working-tree diff, warn-only (#915)
+  # bash-write-guard: true             # ⚠ INVERTED DEFAULT: absent = OFF (opposite of the keys above)
 allow-destructive-ops: false
 reasoning-output: false
 grounding-check: true
@@ -894,6 +925,11 @@ loop-guard:
 instruction-budget:
   enabled: true            # always-on directive-budget banner; off-by-config silences it
   ceiling: 480             # structural-directive ceiling (baseline ~457; ratchet guards growth)
+  byte-ceiling: 114000     # byte ceiling for the SAME corpus (baseline ~108589, +5% headroom —
+                           # deliberately the same relative slack the directive ceiling carries,
+                           # so neither axis is accidentally the stricter one). Either axis alone
+                           # puts the banner over budget: a 9 KB prose rule with three bullets is
+                           # invisible to the directive count but costs real payload (#931a).
   mode: warn               # warn (surface banner) | off (silent no-op)
 
 # Config-protection guard (ecc-analysis / #622)
@@ -902,29 +938,6 @@ config-protection:
   mode: warn               # warn | strict (strict blocks loosening, exit 2)
 allow-config-weakening: false   # per-session bypass (mirrors allow-destructive-ops)
 
-# Strategic compact-nudge (ecc-analysis / #620)
-compact-nudge:
-  enabled: false           # opt-in advisory /compact nudge at inter-wave checkpoints
-  after: [discovery, impl] # subset of {discovery, impl, failed-wave}
-  # NOTE: `discovery` / `impl` are wave ROLES — the §3c gate matches them against
-  # the wave's role string. `failed-wave` is NOT a role; it keys off the wave's
-  # failure OUTCOME (any wave that did not pass its quality gate), so it can fire
-  # after a wave of any role.
-  mode: warn               # warn | off
-
-# /goal continuation anchor at named seams (Lever 5 / #636)
-goal-integration:
-  enabled: false                          # opt-in advisory; default off — zero behaviour change when absent
-  seams: [session-end-backlog, inter-wave-fixloop]   # subset of {session-end-backlog, inter-wave-fixloop}
-  # ADVISORY ONLY. Surfaces ONE suggested /goal command at the named seam(s);
-  # never auto-invokes /goal, never blocks. /goal = Adapter (ADR-0010): the
-  # evaluator reads the transcript and runs NO tools — it anchors CONTINUATION,
-  # never JUDGMENT. Deterministic exit-code gates (npm test/typecheck/lint) stay
-  # the completion authority. ONE goal per session — the two seams cannot both
-  # hold an active goal; the operator picks one. See `.claude/rules/loop-and-monitor.md`
-  # § LM-008, `skills/session-end/SKILL.md § 1.3a`, and
-  # `skills/wave-executor/wave-loop.md § /goal Continuation Anchor`.
-
 # Webhooks (URLs are required when used — no defaults)
 # webhooks:
 #   slack: