session-orchestrator 3.22.0 → 3.23.0

package/templates/_shared/journey-manifest.md

@@ -0,0 +1,110 @@
+<!-- source: session-orchestrator plugin (canonical: templates/_shared/journey-manifest.md) -->
+<!--
+  Copy to `.orchestrator/journey-manifest.md` in the target repo and fill in every
+  section. `/journey-audit` REFUSES to run without this file.
+
+  The `## SAFETY` block is what gates R5 (the real end-to-end run against
+  production with a real account). Absent or empty → R5 is not dispatched and the
+  audit runs as a dry-run (R1–R4 + R7). Nothing else in this file can substitute
+  for it: the skill reads THIS heading, not your intent.
+
+  Credentials: env-var NAMES only, never values. A value pasted here is a secret
+  in a tracked file.
+-->
+
+# Journey Manifest — <REPO NAME>
+
+> Per-repo input for `/journey-audit`. Product truth, not code structure.
+> Last verified: <YYYY-MM-DD> by <operator>
+
+## Personas & Einstiegspunkte
+
+| Persona | Ziel | Einstiegspunkt (URL/Route) | Erfolg heißt |
+|---------|------|---------------------------|--------------|
+| <anonymer Besucher> | <was er will> | `<https://…/>` | <messbarer Endzustand> |
+| <zahlender Kunde> | | | |
+| <Owner/Admin> | | | |
+
+List every entry point a real user can reach — including the ones marketing links
+to but the app never surfaces. A feature with no entry point is exactly the defect
+class this audit exists to find.
+
+## Wahrheits-SSOTs
+
+Where the truth about the product lives in code. R3 compares every claim against
+THESE files, not against other prose.
+
+| Gegenstand | SSOT-Datei/Konstante |
+|-----------|----------------------|
+| Preise / Pläne / Limits | `<src/config/plans.ts>` |
+| Feature-Flags | `<…>` |
+| Währung / Steuer / Region | `<…>` |
+| Quota / Kontingente | `<…>` |
+| i18n-Namespaces (Marketing, FAQ, Mail) | `<…>` |
+| Chat-/Bot-Faktenquelle | `<…>` |
+
+## Outbound-Touchpoints (Input für R1/R2)
+
+- Template-Verzeichnis: `<…>`
+- Send-Pfad / Provider-Adapter: `<…>`
+- Cron-/Scheduler-Quellen: `<…>`
+- Render-Idiom + Beispiel-Props für R2: `<z. B. react-email, props aus …>`
+
+## Chat-Interview (Frage → Soll-Antwort)
+
+R4 asks these verbatim and scores the answer against the expected one. The expected
+answer must be derivable from a Wahrheits-SSOT above — otherwise it is a second
+claim, not a truth key.
+
+| # | Frage (wörtlich) | Soll-Antwort (Kern-Fakt) | SSOT |
+|---|------------------|--------------------------|------|
+| 1 | <"Was kostet …?"> | <"…"> | `<datei>` |
+| 2 | | | |
+| 3 | | | |
+
+## SAFETY
+
+**MANDATORY for R5. Without this block filled in, R5 is not dispatched.**
+
+- **Erlaubte Konten:** `<test-account@…>` — and no other. Never a real customer account.
+- **Erlaubte Events/Objekte:** `<z. B. nur Events mit Präfix AUDIT-…>`
+- **No-Go-Aktionen:** <Löschen fremder Daten · Mailversand an echte Empfänger · Plan-Downgrade · Refunds · Webhook-Replays gegen Prod>
+- **Checkout-Grenze:** `<max. EUR X, Testkarte …, Live-Zahlungen verboten>`
+- **Cleanup-Regel:** <was nach dem Durchstich wieder entfernt wird, von wem, woran man erkennt dass es weg ist>
+- **Abbruchbedingung:** <woran R5 sofort stoppt und meldet statt weiterzumachen>
+
+## Credential-Quellen (env-Namen, NIE Werte)
+
+| Zweck | Env-Variable | Bezugsquelle |
+|-------|--------------|--------------|
+| Prod-Login R5 | `<AUDIT_TEST_ACCOUNT_EMAIL>` | `<1Password-Item / .env.local>` |
+| DB read-only R6 | `<AUDIT_DB_READONLY_URL>` | `<…>` |
+| Mail-Provider-API R6 | `<…>` | `<…>` |
+| Plattform-CLI R7 | `<…>` | `<…>` |
+
+## Realdaten-Queries (R6, read-only)
+
+Only `SELECT`. A query that writes does not belong in this file.
+
+```sql
+-- Funnel: Registrierung → Aktivierung → Zahlung
+SELECT …;
+```
+
+- Identitäts-Regeln: <wie ein Nutzer über Tabellen hinweg identifiziert wird>
+- Nicht messbar (bewusst benennen): <was die Daten NICHT hergeben>
+
+## Plattform-Erwartung (R7)
+
+- CLI-Logins: `<vercel · supabase · cloudflare · …>`
+- Erwarteter Plan/Tier je Dienst: `<…>`
+- Offene Perf-/Kosten-Issues: `<#…>`
+
+## Bekannte Ausnahmen
+
+Findings that are known and deliberately accepted — with the reason and a revisit
+trigger. R1–R7 report them as `known-exception`, never as new findings.
+
+| Befund | Warum akzeptiert | Revisit-Trigger |
+|--------|------------------|-----------------|
+| <…> | <…> | <…> |

package/templates/_shared/rules/parallel-sessions.md

@@ -1,77 +0,0 @@
-# Parallel Session Awareness (Always-on)
-
-Multiple Claude Code sessions may be active in the same working directory simultaneously. Another agent may be editing files, creating commits, or running builds right now. Treat the repo as a shared workspace, not a private sandbox.
-
-## PSA Scope Axes — Operator-Session vs In-Run
-
-PSA rules span two distinct axes. Naming them keeps the durable moat clear when
-native multi-agent primitives (the experimental `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS`)
-overlap parts of this surface.
-
-- **Operator-session axis (the durable moat):** independent parallel operator /
-  Claude sessions in the **same working copy**. PSA-001..004, plus the per-repo
-  session lock (`scripts/lib/session-lock.mjs` `acquire()` / `session.lock`,
-  heartbeat-liveness schema v2), guard this domain. **Agent Teams structurally
-  cannot enter it** — Teams is per-process / in-run only ("one team per
-  session"), NOT per-repo. Its graduation to native affects **only the in-run
-  multi-agent coordination slice**, never the operator-session slice.
-- **In-run axis:** multiple agents coordinated inside a single session/run. Even
-  here our own machinery remains necessary because Agent Teams provides **no
-  automatic isolation**: file-scope deconfliction (`skills/session-plan/SKILL.md` —
-  "verify that NO two agents in the same wave modify the same file") plus
-  `withStateMdLock` STATE.md serialization still do the work Teams does not.
-
-PSA-005 spans **both** axes; only its session-lock half is purely
-operator-scoped. PSA-006 is **orthogonal** to both (Discovery grep-discipline).
-See ADR-0010 § Native-Overlap Refresh (Agent Teams = Adapter; PSA re-scoped).
-
-## Recognizing Parallel Work (PSA-001: Detect Before Acting)
-
-*Axis: operator-session safety — the durable moat Agent Teams structurally cannot enter (per-process / in-run only).*
-
-- **Unexpected git status changes:** Files modified or staged that are not part of your current task likely belong to another session.
-- **Unfamiliar commits:** New entries in `git log` that you did not create mean another agent (or the user manually) committed work.
-- **Spontaneous errors:** Build failures, type errors, or test failures in code you did not touch may be in-progress work from another session — not pre-existing bugs.
-- **Files changed between reads:** If a file's content differs from what you read moments ago, another session likely edited it.
-- **New untracked files:** Files appearing in `git status` that you did not create belong to someone else's work.
-
-## Behavioral Guidance (PSA-002: Ask, Don't Assume)
-
-*Axis: operator-session safety — the durable moat Agent Teams structurally cannot enter (per-process / in-run only).*
-
-- **When you detect signs of parallel work, stop and ask the user:** "I notice changes I didn't make (e.g., modified files in git status, new commits). Is another session active?"
-- **Never "fix" code outside your task scope.** Errors in files you are not working on may be intentional intermediate states from another session.
-- **Stay in your lane.** Only read, create, modify, and delete files directly relevant to your assigned task.
-- **If blocked by external changes, ask the user** rather than reverting, resetting, or working around them.
-- **Track your own footprint.** Be aware of which files you have created or modified. Your commits should contain only your changes.
-
-## Destructive Action Safeguards (PSA-003: Never Destroy What You Didn't Create)
-
-*Axis: operator-session safety — the durable moat Agent Teams structurally cannot enter (per-process / in-run only).*
-
-These commands require explicit user confirmation even in normal operation. When parallel work is suspected, they are **forbidden** without user approval:
-- **`git reset` (any form)** — destroys staged or committed work that may belong to another session.
-- **`git checkout -- <file>`** — discards uncommitted changes another session is actively building.
-- **`git clean -f`** — deletes untracked files another session created.
-- **`git stash`** — captures another session's changes into a stash they cannot find.
-- **`rm` / delete of files you did not create** — may remove work-in-progress from another session.
-- **`git revert` of commits you did not make** — undoes another session's completed work.
-- **`git push --force`** — rewrites shared history (dangerous even without parallel sessions).
-
-Before running any of the above, ask: "Did I create this file/commit/change? If not, it is not mine to touch."
-
-## Commit Discipline (PSA-004: Isolate Your Changes)
-
-*Axis: operator-session safety — the durable moat Agent Teams structurally cannot enter (per-process / in-run only).*
-
-- **Stage files individually** (`git add <file>`) rather than `git add .` or `git add -A`, which may sweep in another session's work.
-- **Review `git diff --cached` before committing** to verify every staged change is yours.
-- **If you see unfamiliar changes in the diff, unstage them** and ask the user.
-- **Never amend a commit you did not create.**
-
-## Anti-Patterns
-- Seeing unfamiliar changes and assuming they are "leftover mess" to clean up — they are likely active work.
-- Running `git reset --hard` to "start fresh" — this destroys all uncommitted work across all sessions.
-- Fixing type errors or lint issues in files outside your scope — the other session will handle their own files.
-- Using `git add .` in a shared workspace — you will commit another session's partial work.
-- Reverting "broken" commits without asking — another session may have intentionally pushed incremental progress.