session-orchestrator 3.22.0 → 3.23.0

package/.cursor/skills/npm-publish/SKILL.md

@@ -0,0 +1,12 @@
+---
+name: npm-publish
+description: "Use when publishing this package to npm — a version release (npm publish), verifying the registry/pi.dev listing, or diagnosing npm auth failures (E403 2FA/token errors). Token-based flow via NPM_TOKEN in .env.local with a temp userconfig, the leakage gate before every publish, post-publish verification and marker/badge upkeep. Trigger on \"publish to npm\", \"npm release\", \"E403 publish error\"."
+---
+
+# npm-publish
+
+Canonical skill: `skills/npm-publish/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/npm-publish/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the npm-publish skill" as: Read `skills/npm-publish/SKILL.md`.

package/.cursor/skills/peekaboo-driver/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: peekaboo-driver
+description: "Use this skill when driving native-UI AX-tree snapshots and screenshots via steipete/peekaboo (MIT, macOS-only). Dispatched by `skills/test-runner/` to capture native-UI AX-tree snapshots + screenshots on macOS 15+ targets, and exits with deterministic JSON output the orchestrator can parse."
+disable-model-invocation: true
+---
+
+# peekaboo-driver
+
+Canonical skill: `skills/peekaboo-driver/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/peekaboo-driver/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the peekaboo-driver skill" as: Read `skills/peekaboo-driver/SKILL.md`.

package/.cursor/skills/persona-panel/SKILL.md

@@ -0,0 +1,12 @@
+---
+name: persona-panel
+description: "Use this skill when you need multi-persona parallel content review — domain experts, buyer personas, compliance reviewers, or custom catalog entries reviewing a target file or output. Dispatches N persona agents in parallel, consolidates verdicts via a configurable mode (voting-quorum, hard-gate-threshold, or coordinator-summary), and writes a timestamped sidecar to .orchestrator/persona-panel/. Invoked via /persona-panel <target-path>."
+---
+
+# persona-panel
+
+Canonical skill: `skills/persona-panel/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/persona-panel/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the persona-panel skill" as: Read `skills/persona-panel/SKILL.md`.

package/.cursor/skills/plan/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: plan
+description: "Use this skill when performing structured project planning and PRD generation with three modes: new (project kickoff with repo scaffolding), feature (compact feature PRD), retro (data-driven retrospective). All modes share a researched Q&A engine that dispatches parallel Explore agents before each question wave, presents options via AskUserQuestion with recommendations, and produces documents with prioritized issue creation."
+disable-model-invocation: true
+---
+
+# plan
+
+Canonical skill: `skills/plan/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/plan/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the plan skill" as: Read `skills/plan/SKILL.md`.

package/.cursor/skills/playwright-driver/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: playwright-driver
+description: "Use this skill when executing web tests via the canonical `playwright` npm package (Microsoft, Apache-2.0). Dispatched by `skills/test-runner/` to execute web tests against a target, captures token-frugal AX-tree snapshots + screenshots + console output under `.orchestrator/metrics/test-runs/<run-id>/`, and exits with deterministic JSON output the orchestrator can parse."
+disable-model-invocation: true
+---
+
+# playwright-driver
+
+Canonical skill: `skills/playwright-driver/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/playwright-driver/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the playwright-driver skill" as: Read `skills/playwright-driver/SKILL.md`.

package/.cursor/skills/quality-gates/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: quality-gates
+description: Use this skill when referencing canonical quality check commands for typecheck, test, and lint. Defines 4 variants (Baseline, Incremental, Full Gate, Per-File) used by session-start, wave-executor, session-end, and session-reviewer. Reference skill — not invoked directly.
+disable-model-invocation: true
+---
+
+# quality-gates
+
+Canonical skill: `skills/quality-gates/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/quality-gates/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the quality-gates skill" as: Read `skills/quality-gates/SKILL.md`.

package/.cursor/skills/reconcile/SKILL.md

@@ -0,0 +1,12 @@
+---
+name: reconcile
+description: Use this skill when the user wants to reconcile learnings into rules, run /reconcile, propose rules from learnings, turn learnings into .claude/rules/ entries, or review what rules would be generated from current session learnings. On-demand version of session-end Phase 3.6.8.
+---
+
+# reconcile
+
+Canonical skill: `skills/reconcile/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/reconcile/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the reconcile skill" as: Read `skills/reconcile/SKILL.md`.

package/.cursor/skills/repo-audit/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: repo-audit
+description: "Use this skill when the user wants to audit a repository for baseline compliance, check code quality, security posture, CI/CD setup, testing, documentation, and ecosystem configuration. Runs 9 checklist categories and emits a Markdown report plus JSON sidecar at .orchestrator/metrics/repo-audit-<timestamp>.json. <example>Context: User is in a project repo and wants a baseline compliance check. user: \"/repo-audit\" assistant: \"Running repo-audit across 9 categories — Configuration, Code Quality, Git Hygiene, CI/CD, Testing, Security, Documentation, Clank Integration (optional), and MCP Configuration. Will produce a Markdown checklist report and JSON sidecar.\" <commentary>The user wants a compliance check; this skill is appropriate because it runs all 9 categories with pass/fail/warn/skipped statuses and writes structured output.</commentary></example>"
+disable-model-invocation: true
+---
+
+# repo-audit
+
+Canonical skill: `skills/repo-audit/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/repo-audit/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the repo-audit skill" as: Read `skills/repo-audit/SKILL.md`.

package/.cursor/skills/session-end/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: session-end
+description: "Use this skill when performing a full session close-out: verifies all planned work against the agreed plan, creates issues for gaps, runs quality gates, commits cleanly, mirrors to GitHub, and produces a session summary. Triggered by /close command."
+disable-model-invocation: true
+---
+
+# session-end
+
+Canonical skill: `skills/session-end/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/session-end/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the session-end skill" as: Read `skills/session-end/SKILL.md`.

package/.cursor/skills/session-plan/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: session-plan
+description: "Creates a structured wave execution plan with role-based assignment after user alignment. Decomposes agreed tasks into configurable waves (default 5) with optimal agent assignment, dependency ordering, and inter-wave checkpoints. Activated by session-start after Q&A phase completes."
+disable-model-invocation: true
+---
+
+# session-plan
+
+Canonical skill: `skills/session-plan/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/session-plan/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the session-plan skill" as: Read `skills/session-plan/SKILL.md`.

package/.cursor/skills/session-start/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: session-start
+description: "Use this skill when initializing a session for any project repo. Autonomously analyzes git state, VCS issues, SSOT files, branches, environment, and cross-repo status. Then presents structured findings with recommendations for user alignment before creating a wave plan. Triggered by /session [housekeeping|feature|deep] command."
+disable-model-invocation: true
+---
+
+# session-start
+
+Canonical skill: `skills/session-start/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/session-start/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the session-start skill" as: Read `skills/session-start/SKILL.md`.

package/.cursor/skills/skill-creator/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: skill-creator
+description: "Use when creating a new skill from scratch, modifying an existing skill, or optimizing a skill's triggering description. Guides intent capture, structure, writing patterns, and progressive-disclosure organization so skills reliably trigger and stay maintainable. Trigger on phrases like \"turn this into a skill\", \"write a skill for X\", \"improve this skill\", \"my skill isn't triggering\"."
+disable-model-invocation: true
+---
+
+# skill-creator
+
+Canonical skill: `skills/skill-creator/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/skill-creator/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the skill-creator skill" as: Read `skills/skill-creator/SKILL.md`.

package/.cursor/skills/spinout/SKILL.md

@@ -0,0 +1,12 @@
+---
+name: spinout
+description: "Use when extracting a project into its own repo — a venture spinout (e.g. a product leaving its incubator repo) or a sanitized content-snapshot fork. Guided 5-step runbook: target sphere + path, confidentiality/sanitize check, copy + fresh git init, SNAPSHOT-FREEZE marker in the source repo, remotes + registration. Trigger on 'spin out X', 'extract this into its own repo', 'fork X sanitized'."
+---
+
+# spinout
+
+Canonical skill: `skills/spinout/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/spinout/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the spinout skill" as: Read `skills/spinout/SKILL.md`.

package/.cursor/skills/sunset-review/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: sunset-review
+description: "Use this skill when the user wants to identify unused, near-zero-use, or stale skills/agents/commands in the plugin surface so they can be demoted or retired. Combines agent-dispatch telemetry (start-events only) with static reference scanning, classifies every surface item into Active / Investigate / Demote / Retire, and emits a Markdown report plus JSON sidecar. NEVER auto-deletes — surfaces candidates for human decision. Quarterly cadence. <example>Context: The plugin surface has grown and the maintainer wants to prune dead weight. user: \"/sunset-review\" assistant: \"Running the sunset walk — classifying skills, agents, and commands by usage telemetry + static refs, grouped by Retire / Demote / Investigate / Active. No item is deleted automatically; I'll surface Retire/Demote candidates for your decision.\" <commentary>The user wants a usage-driven prune candidate list; this skill runs the read-only walker, presents grouped verdicts, and writes a sidecar — it never deletes.</commentary></example>"
+disable-model-invocation: true
+---
+
+# sunset-review
+
+Canonical skill: `skills/sunset-review/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/sunset-review/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the sunset-review skill" as: Read `skills/sunset-review/SKILL.md`.

package/.cursor/skills/test-runner/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: test-runner
+description: "Use this skill when orchestrating agentic end-to-end tests. Resolves target + profile, dispatches the right driver(s) (playwright for web today, peekaboo for macOS (issue #381)), invokes the ux-evaluator agent (opus, read-only) against driver artifacts, reconciles findings with the open issue tracker via scripts/lib/test-runner/issue-reconcile.mjs, and writes report.md + JSONL roll-up. Wraps upstream tools (no forks). Hard-gates Playwright MCP for browser drive (4× token cost vs CLI per Microsoft's own benchmark)."
+disable-model-invocation: true
+---
+
+# test-runner
+
+Canonical skill: `skills/test-runner/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/test-runner/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the test-runner skill" as: Read `skills/test-runner/SKILL.md`.

package/.cursor/skills/tmux-layout/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: tmux-layout
+description: "Use this skill when the operator wants a prepared tmux visualization layout for the session's side-channels (STATE.md tail, CI-watch, events.jsonl tail). Renders a 4-pane default layout or debug layout. Read-only side-channel observability — the coordinator chat stays in the operator's original terminal. Trigger phrases: \"tmux layout\", \"split panes for ci watch\", \"visualize session side-channels\", \"show me state-md tail and ci\"."
+disable-model-invocation: true
+---
+
+# tmux-layout
+
+Canonical skill: `skills/tmux-layout/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/tmux-layout/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the tmux-layout skill" as: Read `skills/tmux-layout/SKILL.md`.

package/.cursor/skills/ubiquitous-language/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: ubiquitous-language
+description: "Use when the user wants to define domain terms, build a glossary, harden terminology, create a ubiquitous language, or mentions \"domain model\" or \"DDD\". Extracts a DDD-style glossary from the current conversation into UBIQUITOUS_LANGUAGE.md, flags ambiguities and synonyms, and proposes opinionated canonical terms."
+disable-model-invocation: true
+---
+
+# ubiquitous-language
+
+Canonical skill: `skills/ubiquitous-language/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/ubiquitous-language/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the ubiquitous-language skill" as: Read `skills/ubiquitous-language/SKILL.md`.

package/.cursor/skills/using-orchestrator/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: using-orchestrator
+description: "Use this skill when dispatching implicit slash-command intent from the user's first message. Inspects the user's first message for implicit slash-command intent and dispatches to the highest-confidence matching entry-point skill via the Skill tool. Only active when `auto-skill-dispatch: true` in Session Config. Silent no-op otherwise."
+disable-model-invocation: true
+---
+
+# using-orchestrator
+
+Canonical skill: `skills/using-orchestrator/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/using-orchestrator/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the using-orchestrator skill" as: Read `skills/using-orchestrator/SKILL.md`.

package/.cursor/skills/vault-mirror/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: vault-mirror
+description: "Use when you need to populate the Meta-Vault with machine-generated notes derived from session-orchestrator JSONL records. Converts entries from `.orchestrator/metrics/sessions.jsonl` and `.orchestrator/metrics/learnings.jsonl` into vault-conformant Markdown under `50-sessions/` and `40-learnings/`. Called automatically at session-end Phase 3.7 and after evolve Phase 3.5 — only when `vault-integration.enabled=true` and `vault-integration.mode != \"off\"`. Idempotent: re-runs safely; skips hand-authored notes. Triggers: \"mirror to vault\", \"sync session notes to vault\", \"write learning notes to vault\", \"vault-mirror failed at session close\". <example>Context: session-end is finalizing, vault-integration.mode is \"warn\". user: \"/close\" assistant: \"Running vault-mirror to write 50-sessions/session-2026-05-17.md from the closing session record — 1 created, 0 skipped.\"</example>"
+disable-model-invocation: true
+---
+
+# vault-mirror
+
+Canonical skill: `skills/vault-mirror/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/vault-mirror/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the vault-mirror skill" as: Read `skills/vault-mirror/SKILL.md`.

package/.cursor/skills/vault-sync/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: vault-sync
+description: "Use when you need to validate the Meta-Vault's Markdown frontmatter and wiki-link integrity before closing a session or after vault edits. Runs as a hard gate at session-end Phase 1 — blocks close if any `.md` file fails the Zod frontmatter schema or has dangling `[[wiki-links]]`. Supports three modes: `hard` (blocks on errors), `warn` (reports without blocking), `off` (skip). Reads `vault-sync.*` from Session Config; respects per-vault exclude globs from `CLAUDE.md`. Triggers: \"vault validation failed at session close\", \"fix vault frontmatter errors\", \"check vault wiki-links\", \"why is session-end blocked by vault-sync\". <example>Context: session-end Phase 1 quality gate, vault-sync.enabled=true, vault-sync.mode=\"hard\". user: \"/close\" assistant: \"vault-sync found 2 frontmatter errors in vault/40-learnings/ml-notes.md — missing required `id` field. Fixing before close.\"</example>"
+disable-model-invocation: true
+---
+
+# vault-sync
+
+Canonical skill: `skills/vault-sync/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/vault-sync/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the vault-sync skill" as: Read `skills/vault-sync/SKILL.md`.

package/.cursor/skills/wave-executor/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: wave-executor
+description: Use this skill when executing the agreed session plan in waves with role-based execution and parallel subagents. Handles inter-wave quality checks, plan adaptation, and progress tracking. Core orchestration engine for feature and deep sessions. Triggered by /go command.
+disable-model-invocation: true
+---
+
+# wave-executor
+
+Canonical skill: `skills/wave-executor/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/wave-executor/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the wave-executor skill" as: Read `skills/wave-executor/SKILL.md`.

package/.cursor/skills/write-executable-plan/SKILL.md

@@ -0,0 +1,13 @@
+---
+name: write-executable-plan
+description: "Use when you have a PRD or design spec and need a bite-sized, executable implementation plan that any agent can follow without re-deriving structure. Produces `docs/plans/YYYY-MM-DD-<feature>.md` with per-task Files block, complete code per step (no placeholders), and exact verification commands. Rejects \"TBD\", \"TODO\", \"add error handling\", \"similar to Task N\"."
+disable-model-invocation: true
+---
+
+# write-executable-plan
+
+Canonical skill: `skills/write-executable-plan/SKILL.md`
+
+Read that file and follow it exactly. Resolve relative links against `skills/write-executable-plan/`, not this wrapper.
+
+Cursor has no Skill tool. Treat "invoke the write-executable-plan skill" as: Read `skills/write-executable-plan/SKILL.md`.

package/.mcp.json

@@ -2,7 +2,10 @@
   "mcpServers": {
     "session-orchestrator": {
       "command": "bash",
-      "args": ["-c", "exec bash \"${CLAUDE_PLUGIN_ROOT:-${CODEX_PLUGIN_ROOT:-$(git rev-parse --show-toplevel)}}/scripts/mcp-server.sh\""]
+      "args": [
+        "-c",
+        "# Tier order MIRRORS resolvePluginRoot() — see scripts/lib/plugin-root.mjs § TIER ORDER (the single source of truth). That list is the original, this is the mirror: change both together. The env list, the CODEX_HOME trim, the package.json{name} test and the newest-wins-by-mtime tiebreak are all mirrored EXACTLY; only tier 6 (walk up from import.meta.url) has no shell analogue.\nr=\"\"; ch=\"$CODEX_HOME\"; ch=\"${ch#\"${ch%%[![:space:]]*}\"}\"; ch=\"${ch%\"${ch##*[![:space:]]}\"}\"; [ -n \"$ch\" ] || ch=\"$HOME/.codex\"; for c in \"$PLUGIN_ROOT\" \"$CLAUDE_PLUGIN_ROOT\" \"$CODEX_PLUGIN_ROOT\" \"$CURSOR_RULES_DIR\" \"$PI_PLUGIN_ROOT\" \"$(git rev-parse --show-toplevel 2>/dev/null)\"; do if [ -n \"$c\" ] && [ -f \"$c/scripts/mcp-server.sh\" ]; then r=\"$c\"; break; fi; done; if [ -z \"$r\" ]; then r=\"$(NODE_PATH=\"$(npm root -g 2>/dev/null)\" node -e 'import(require(`node:url`).pathToFileURL(require.resolve(`session-orchestrator/scripts/lib/plugin-root.mjs`))).then(m=>process.stdout.write(m.resolvePluginRoot()))' 2>/dev/null)\"; fi; if [ -z \"$r\" ]; then for b in \"$ch\" \"$HOME/.claude\"; do for c in \"$b\"/plugins/cache/*/session-orchestrator/*; do if [ -f \"$c/scripts/mcp-server.sh\" ] && node -e 'process.exit(JSON.parse(require(\"fs\").readFileSync(process.argv[1],\"utf8\")).name===\"session-orchestrator\"?0:1)' \"$c/package.json\" 2>/dev/null && { [ -z \"$r\" ] || [ \"$c\" -nt \"$r\" ]; }; then r=\"$c\"; fi; done; done; fi; if [ -n \"$r\" ] && [ -f \"$r/scripts/mcp-server.sh\" ]; then exec bash \"$r/scripts/mcp-server.sh\"; fi; { echo \"session-orchestrator: cannot locate the plugin root — the MCP server did not start.\"; echo \"  Tried: PLUGIN_ROOT=${PLUGIN_ROOT:-(unset)}, CLAUDE_PLUGIN_ROOT=${CLAUDE_PLUGIN_ROOT:-(unset)}, CODEX_PLUGIN_ROOT=${CODEX_PLUGIN_ROOT:-(unset)}, CURSOR_RULES_DIR=${CURSOR_RULES_DIR:-(unset)}, PI_PLUGIN_ROOT=${PI_PLUGIN_ROOT:-(unset)}, git rev-parse --show-toplevel (cwd=$PWD), node resolve of session-orchestrator/scripts/lib/plugin-root.mjs, plugin caches $ch/plugins/cache/*/session-orchestrator/* and $HOME/.claude/plugins/cache/*/session-orchestrator/*.\"; echo \"  Fix: reinstall the plugin so its cached copy is refreshed (codex plugin marketplace add Kanevry/session-orchestrator), or set CLAUDE_PLUGIN_ROOT / CODEX_PLUGIN_ROOT to the plugin directory in this server's env block.\"; echo \"  Note: CODEX_PLUGIN_ROOT is session-orchestrator's own compatibility export, not a variable Codex provides. See docs/codex-setup.md § Troubleshooting.\"; } >&2; exit 1"
+      ]
     }
   }
 }

package/CHANGELOG.md

@@ -7,6 +7,174 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.23.0] - 2026-08-28
+
+Two commits today (1 `feat`, 1 `fix`; 64 files, +4,971/−184) close Waves 3 and 4 of the
+resumed session, plus eight items carried forward from Wave 2 (`36aa605`, 2026-08-26,
+never previously changelogged). No `BREAKING CHANGE:` footer and no `!` subject. The
+pattern repeats across both waves: a guard, sanitizer, or census that already existed but
+checked the wrong population or stopped short of the surface it needed to reach — a parity
+guard sampling five rule files by name instead of reading the directory, a sanitizer whose
+findings never reached stderr, a byte-count drifting 338 lines from the line it cited, a
+tracked directory hiding an untracked hook beside it.
+
+One `feat` commit (session-2, `30940cb`, 2026-08-28; 39 files, +2,475/−405) closes Wave 2
+with three GitHub-mirror fixes and a session-identity cluster at the process boundary. No
+`BREAKING CHANGE:` footer and no `!` subject. The through-line: identifiers the platforms
+mint (UUIDv7, semantic session ids) were rejected or dropped by readers built for UUIDv4
+only — every resume looked foreign — and call sites that needed a repo root passed
+`undefined` instead, so fail-open paths ran on every invocation.
+
+### Added
+
+- **Eight core rules ship as sanitized copies, with a report-only leak scanner (#1098).**
+  `rules/always-on/` holds sanitized copies of `ask-via-tool`, `build-value`,
+  `loop-and-monitor` and five more; `scanVendoringLeaks()` now reaches stderr as one line
+  per finding in both CLIs, folded into `validate-vendored-rules` with a rule-ID census.
+- **Session Config fails loud on an unparsable line (#1097).** `collectUnparsableLines`
+  gates warn/strict via one `htmlCommentSkipper` shared by extractor and classifier — a
+  commented-out `enforcement: strict` had been reading as live config.
+- **A read-only protection-audit CLI, with a runbook naming the order (#1079).** States
+  the required sequence; never flips a setting itself.
+- **The scope guard now emits `orchestrator.wave_dispatch.scope_checked` (#1092).** Closes
+  the ledger half that never recorded a signal-free ALLOW.
+- **`/journey-audit` — a user-facing product audit as a repeatable skill (#1161).** Skill,
+  command and manifest template; skill/command counts measured at 48/28.
+- **A Cursor `.mdc` parity guard that reads the directory, not a fixed list (#1093).**
+  Catches bare `PID=`/`${VAR}` IDs a name-sampling guard had missed; `priority::` swept
+  across all 5 files.
+- **The old root now formally leaves before the new one claims it, wired at all four
+  promotion sites (#1069).** `scripts/lib/session-transition.mjs` → `leaveSourceRoot()`:
+  `deregisterSelf()` → lock-release (reusing `on-session-end`'s ownership rules) →
+  `orchestrator.session.root_left` (carries `source_root_hash`/`source_root_basename`,
+  never an absolute path — the payload also travels over the optional webhook). Review
+  found the Phase-1.2.1 promotion site had been missing the call; it is now wired at
+  session-start Phase 0.5, Phase 1.2.1, and both `parallel-aware-*` docs. A real
+  `git worktree` two-root integration test goes phantom-peer red → green.
+
+### Fixed
+
+- **Six onboarding contradictions + a `cursor-install` TARGET guard (#1078).** First
+  production diff authored by a foreign model (composer-2.5) under mandatory Claude review.
+- **Amber is now a documented normal state (#1062).** `docs/ci-setup.md` names it instead
+  of leaving it an unexplained CI color.
+- **A tracked directory no longer hides an untracked hook beside it (#1158).**
+  `hooksPathIsTracked` now requires a GIT-tracked file directly under `core.hooksPath`.
+- **`probe-stale` collapses to one vocabulary term (#1159).** A record older than 7 days
+  is `probe-stale`, severity `warn`, never a live finding; the registry remap is gone.
+- **The scope-cap saw operators, not shell keywords (#1145).** `splitSegments` now splits
+  on keywords too, so `for t in a b c; do glab issue create; done` no longer slips a
+  compound-statement head past the cap.
+- **A missing `.claude/rules/` was misdiagnosed as a loop (#1132).** `err.code` now
+  separates silent `ENOENT`/`ENOTDIR` from loud `EACCES`; the repeat was caller fan-out.
+- **Two probes measured the wrong population (#1143/#1148).** One counted a whole file and
+  cited a line that had already drifted 338 lines from the finding; both scanners read the
+  filesystem instead of the git index, censoring 5 gitignored files as documentation.
+- **Generated rules now self-verify offline (#1101).** Each carries a sha256 seal over its
+  own Evidence block instead of a learning-key into a gitignored file; 23 rules sealed,
+  fresh-clone warnings 23 → 0.
+- **`reconcile.targets` had zero consumers (#1099).** Now wired through with a closed enum,
+  visible rejection of unknowns, and per-target path confinement.
+- **Orphaned wave-scope files survived re-materialization (#1103).** Reconciled by
+  ownership proof now, never a blind directory wipe — two parallel sessions can share one
+  wave-N directory (PSA-003).
+- **Two rival vendoring paths wrote the same rule file (#1060).** `rules/` is now sole SSOT
+  for PSA-001..007; `templates/_shared/rules/` is deleted.
+- **`parseSessionId` accepted only UUIDv4; Codex mints v7 (#66/#1091).**
+  `scripts/lib/session-id.mjs` now accepts RFC-9562 v1–8 (`UUID_RE`, additive `version`
+  field — see `### Removed` below for the alias this superseded). Every SessionStart had
+  minted a fresh v4; a
+  resumed/compacted thread read its own lock as a foreign session. `hooks/on-stop.mjs` and
+  `hooks/on-session-end.mjs` now apply the writer's acceptance rule, closing a lock-leak via
+  non-UUID stdin ids.
+- **phase-3-7a called `updateFrontmatterFieldsOnDisk(undefined, …)` (#65/#1036).**
+  `skills/session-end/phase-3-7a-recommendations.md` requires a repo root; every `/close`
+  took the fail-open path — 0 of 5 recommendation fields were ever written. The snippet now
+  binds `repoRoot` via `git rev-parse --show-toplevel`; the catch logs the cause.
+- **Codex MCP launch resolved to `/scripts/mcp-server.sh` from non-git cwd (#64).** Codex
+  copies a marketplace plugin to
+  `~/.codex/plugins/cache/<marketplace>/session-orchestrator/<version>/` and starts the MCP
+  child with no plugin-root env var. `.mcp.json` and `scripts/lib/plugin-root.mjs` gained a
+  plugin-cache scan tier (name-matched `package.json`, newest by mtime). Codex snapshots
+  `.mcp.json` at install time — existing installs need a reinstall.
+- **`scoring.mjs` read a flat `completion_rate` 0 of 281 records carry (#1071).** The value
+  lives under `effectiveness`, so the high-completion bonus was unreachable.
+  `resolveMemoryDir`/`buildLiveSignals` now take an explicit `repoRoot` instead of
+  `process.cwd()`.
+- **mission-status recovery aborted on the first non-canonical body line (#1104).**
+  `scripts/lib/state-md/mission-status.mjs` now skips per line, reports skipped lines
+  (`recoverFrontmatterMissionStatusDetailed`). `setMissionStatus` refuses ids outside the
+  grammar with a stderr WARN from the on-disk wrapper.
+- **`enterWorktree` failed with `already used by worktree` when the source branch was
+  checked out (#1067).** `scripts/lib/autopilot/worktree-pipeline.mjs` now creates
+  `so/<sessionId>` from that branch and returns `branch`/`promotedFrom`.
+- **Phase 4a auto-promoted-worktree cleanup was dead under the #1069 process boundary.**
+  Since the promoted worktree runs as a brand-new session with its own id,
+  `detectAutoPromotedWorktree()`'s basename match against the CURRENT session id could
+  never fire post-#1069. `enterWorktree()` now writes `.orchestrator/promoted-from.json`
+  (source-root hash + basename, source session id, branch) at creation time;
+  `detectAutoPromotedWorktree()` tries this marker FIRST (`source: 'marker'`), falling back
+  to the legacy basename match (`source: 'basename'`) for pre-marker worktrees.
+  `isWorktreeClean()` discounts exactly the marker's own untracked line so the marker never
+  reads as dirty by itself. Re-promoting onto an existing `so/<sessionId>` branch now reuses
+  it (`reusedBranch: true`) or reports a typed refusal, instead of failing outright. See
+  ADR-0013.
+- **`.mcp.json`'s bash bootstrap had silently drifted from `resolvePluginRoot()`'s tier
+  order.** The shell mirror now matches the same five env tiers in the same order, tests
+  `package.json`'s `name` field via `node -e JSON.parse(...)` instead of a substring `grep`
+  (which had matched `session-orchestrator-fork`), and ties the newest-by-mtime cache scan
+  to the same strict `-nt` comparison as the JS side. Two drift tests pin JS and shell
+  staying in sync.
+- **`ci-status-banner.mjs` escaped control bytes in the JSON preview but not in the
+  parse-error message.** `JSON.stringify()` alone is not enough — V8 quotes the raw
+  offending input inside `SyntaxError.message`, carrying control bytes straight to the
+  terminal. `escapeControlBytes()` now covers both the preview AND `err.message`;
+  `parseCliJson()` also gained a shape-gate against `null`/`[]`/a bare `"ok"` string, all of
+  which parse as valid JSON but are not the object/array shape callers expect.
+- **A refused mission-status write warned on only 1 of 5 call paths.**
+  `setMissionStatusDetailed()` now reports the refusal reason (e.g. `id-grammar`) to every
+  caller, and the on-disk wrapper emits the stderr WARN on all 5 paths instead of the one it
+  happened to cover before.
+- **`check-unwired-features` exempted itself from its own edge census via its allowlist
+  string, hiding a real orphan behind it.** The `SELF_REL` self-reference correctly
+  contributes zero edges by design, but the same code path was masking that
+  `scripts/lib/webhook-url.mjs` has zero callers repo-wide — genuinely unreachable, not a
+  false positive. Follow-up issue pending to wire it in or remove it.
+- **Three load-sensitive tests hardened with margin instead of being disabled.**
+  `tests/scripts/validate-plugin.test.mjs`'s child-process timeout moved from 30s to 120s (a
+  killed child returns `status: null`, which had read as a different failure than a real
+  one) plus a matching `hookTimeout` bump, and two further spawn-timeout assertions gained
+  the same discriminating margin between contention and a genuine failure.
+
+### Changed
+
+- **Host-registry census counts `semantic_session_id` (#1066).** `hooks/on-session-start.mjs`
+  falls back to `session_id` only when it is itself semantic. Before, only UUIDs were
+  projected — the n-increment discards them — so the registry contributed nothing to
+  numbering.
+- **Session end events carry `semantic_session_id`; backfill event + supersede (#1068).**
+  `orchestrator.session.ended` / `.stopped` carry `semantic_session_id` (omitted when
+  unknown). A new `orchestrator.session.backfill_completed` event records each backfill outcome. A
+  completed record may now supersede an `abandoned` stub (append-only, `supersedes` marker).
+  Readers preferring the newest record are a follow-up.
+- **`.semgrep.yml` regains two taint-mode rules (#1129).** `json-parse-untrusted-input` and
+  `prototype-pollution-object-assign` aimed at this repo's real trust boundary (hook stdin,
+  child-process stdout); 27 rules total. `unsafe-llm-output-rendering` stays excluded with a
+  measured reason (no DOM code).
+
+### Removed
+
+- **`UUID_V4_RE` removed** from `scripts/lib/session-id.mjs` — deprecated alias of
+  `UUID_RE` with zero importers repo-wide (measured @ 7daa3d2; hits in
+  `tests/telemetry/anon-id.test.mjs` and `server/ingest/validate.mjs` are unrelated local
+  constants of the same name). Use `UUID_RE`, any RFC 9562 version 1–8.
+
+### Notes
+
+Two of this session's diffs were authored by foreign models under the #1150 adapter —
+#1078 by composer-2.5, #1093 by grok-4.6 — each passing mandatory Claude review before
+landing. First production use of the foreign-dispatch path.
+
 ## [3.22.0] - 2026-08-22
 
 Twenty commits (12 `fix`, 5 `docs`, 2 `feat`, 1 `chore`; 150 files, +17,312/−2,575), no