ultra-builder-pro-cli 0.11.0 → 0.12.1

package/mcp-server/server.cjs

@@ -28,6 +28,7 @@ const parser = require('./lib/prd-parser.cjs');
 const expander = require('./lib/task-expander.cjs');
 const planStore = require('./lib/plan-store.cjs');
 const { initProject } = require('./lib/init-project.cjs');
+const baselines = require('./lib/baseline-workflow.cjs');
 const changes = require('./lib/change-workflow.cjs');
 const runtimeState = require('./lib/runtime-state.cjs');
 const doctor = require('./lib/doctor.cjs');
@@ -67,6 +68,13 @@ const PLAN_TOOLS = Object.freeze([
   'plan.get',
 ]);
 
+const BASELINE_TOOLS = Object.freeze([
+  'baseline.start',
+  'baseline.record',
+  'baseline.get',
+  'baseline.converge',
+]);
+
 const CHANGE_TOOLS = Object.freeze([
   'change.create',
   'change.update',
@@ -85,18 +93,20 @@ const SYSTEM_TOOLS = Object.freeze([
 ]);
 
 const REGISTERED_TOOLS = Object.freeze([
-  ...TASK_TOOLS, ...SESSION_TOOLS, ...PLAN_TOOLS, ...CHANGE_TOOLS, ...SYSTEM_TOOLS,
+  ...TASK_TOOLS, ...SESSION_TOOLS, ...PLAN_TOOLS, ...BASELINE_TOOLS, ...CHANGE_TOOLS,
+  ...SYSTEM_TOOLS,
 ]);
 
 const STATELESS_TOOLS = new Set(['task.init_project']);
 
-// init_project mutates the filesystem of an unrelated project, not state.db —
-// do NOT run the projector (it would overwrite the freshly-copied template).
+// init_project owns its target project's schema, baseline seed, and first
+// projection internally. Do not enqueue a second projection on the caller DB.
 const MUTATING_TOOLS = new Set([
   'task.create', 'task.update', 'task.delete', 'task.append_event', 'task.switch_tag',
   'task.parse_prd', 'task.expand',
   'session.spawn', 'session.close', 'session.heartbeat',
   'plan.export',
+  'baseline.start', 'baseline.record', 'baseline.converge',
   'change.create', 'change.update', 'change.context', 'change.converge', 'change.archive',
   'change.learning_propose', 'change.learning_resolve',
 ]);
@@ -352,6 +362,39 @@ async function dispatchTool(name, input, db, ctx = {}) {
       }
       return { plan: planStore.selectSection(loaded, input.section) };
     }
+    case 'baseline.start': {
+      return {
+        baseline: baselines.startBaseline(
+          db, input, { rootDir: ctx.rootDir || process.cwd() },
+        ),
+      };
+    }
+    case 'baseline.record': {
+      return {
+        baseline: baselines.recordBaseline(
+          db, input, { rootDir: ctx.rootDir || process.cwd() },
+        ),
+      };
+    }
+    case 'baseline.get': {
+      const baseline = baselines.readBaseline(db, input.id);
+      if (!baseline) {
+        const err = new Error(input.id ? `baseline ${input.id} not found` : 'current baseline not found');
+        err.code = 'BASELINE_NOT_FOUND';
+        throw err;
+      }
+      return {
+        baseline,
+        health: baselines.inspectBaseline(db, {
+          rootDir: ctx.rootDir || process.cwd(), id: input.id,
+        }),
+      };
+    }
+    case 'baseline.converge': {
+      return baselines.convergeBaseline(
+        db, input, { rootDir: ctx.rootDir || process.cwd() },
+      );
+    }
     case 'change.create': {
       const { randomUUID } = require('node:crypto');
       const id = input.id || `chg-${randomUUID().slice(0, 12)}`;
@@ -598,6 +641,8 @@ module.exports = {
   dispatchTool,
   TASK_TOOLS,
   SESSION_TOOLS,
+  PLAN_TOOLS,
+  BASELINE_TOOLS,
   CHANGE_TOOLS,
   SYSTEM_TOOLS,
   REGISTERED_TOOLS,

package/mcp-server/tests/init-project.test.cjs

@@ -5,9 +5,11 @@ const assert = require('node:assert/strict');
 const fs = require('node:fs');
 const os = require('node:os');
 const path = require('node:path');
+const { execFileSync } = require('node:child_process');
 const Database = require('better-sqlite3');
 
 const { initProject, InitProjectError, DEFAULT_TEMPLATE } = require('../lib/init-project.cjs');
+const { EXPECTED_VERSION } = require('../lib/state-db.cjs');
 
 function mkTempDir(prefix = 'ubp-init-test-') {
   return fs.mkdtempSync(path.join(os.tmpdir(), prefix));
@@ -27,6 +29,7 @@ test('initProject copies bundled template into .ultra/', () => {
       stack: 'node',
     });
     assert.equal(r.status, 'created');
+    assert.equal(r.mode, 'greenfield');
     assert.equal(r.created_path, path.join(target, '.ultra'));
     assert.ok(r.copied_files.includes('tasks/tasks.json'));
     assert.ok(r.copied_files.includes('specs/product.md'));
@@ -36,9 +39,11 @@ test('initProject copies bundled template into .ultra/', () => {
     assert.ok(fs.existsSync(r.state_db_path));
     const db = new Database(r.state_db_path, { readonly: true });
     try {
-      const version = db.prepare("SELECT version FROM schema_version WHERE version = '9.1'").get();
-      assert.equal(version.version, '9.1');
+      const version = db.prepare('SELECT version FROM schema_version WHERE version = ?').get(EXPECTED_VERSION);
+      assert.equal(version.version, EXPECTED_VERSION);
       assert.ok(db.prepare("SELECT name FROM sqlite_master WHERE name = 'changes'").get());
+      const baseline = db.prepare('SELECT mode, status, project_name FROM baselines').get();
+      assert.deepEqual(baseline, { mode: 'greenfield', status: 'draft', project_name: 'demo' });
     } finally {
       db.close();
     }
@@ -46,7 +51,42 @@ test('initProject copies bundled template into .ultra/', () => {
   } finally { cleanup(target); }
 });
 
-test('initProject injects project metadata into tasks.json', () => {
+test('initProject auto-detects existing source as brownfield and starts adoption', () => {
+  const target = mkTempDir();
+  try {
+    fs.mkdirSync(path.join(target, 'src'));
+    fs.writeFileSync(path.join(target, 'package.json'), '{"name":"legacy-app"}\n');
+    fs.writeFileSync(path.join(target, 'src', 'index.js'), 'module.exports = true;\n');
+    const result = initProject({ target_dir: target, project_name: 'legacy-app' });
+    assert.equal(result.mode, 'brownfield');
+    const db = new Database(result.state_db_path, { readonly: true });
+    try {
+      const baseline = db.prepare('SELECT mode, status, scope_json FROM baselines').get();
+      assert.equal(baseline.mode, 'brownfield');
+      assert.equal(baseline.status, 'adopting');
+      assert.deepEqual(JSON.parse(baseline.scope_json), ['.']);
+    } finally {
+      db.close();
+    }
+  } finally { cleanup(target); }
+});
+
+test('maintenance CLI forwards an explicit initialization mode', () => {
+  const target = mkTempDir();
+  try {
+    fs.writeFileSync(path.join(target, 'README.md'), '# Intentional greenfield notes\n');
+    const output = execFileSync(process.execPath, [
+      path.resolve(__dirname, '..', '..', 'ultra-tools', 'cli.cjs'),
+      'task', 'init-project', '--target-dir', target, '--project-name', 'explicit-mode',
+      '--mode', 'greenfield',
+    ], { encoding: 'utf8' });
+    const envelope = JSON.parse(output);
+    assert.equal(envelope.ok, true);
+    assert.equal(envelope.data.mode, 'greenfield');
+  } finally { cleanup(target); }
+});
+
+test('initProject keeps project metadata in authoritative baseline state and tasks.json as a projection', () => {
   const target = mkTempDir();
   try {
     initProject({
@@ -56,11 +96,17 @@ test('initProject injects project metadata into tasks.json', () => {
       stack: 'next',
     });
     const tasksJson = JSON.parse(fs.readFileSync(path.join(target, '.ultra', 'tasks', 'tasks.json'), 'utf8'));
-    assert.equal(tasksJson.project.name, 'meta-demo');
-    assert.equal(tasksJson.project.type, 'web');
-    assert.equal(tasksJson.project.stack, 'next');
-    assert.ok(tasksJson.created.length > 0);
-    assert.ok(tasksJson.updated.length > 0);
+    assert.equal(tasksJson.schema_version, '4.5');
+    assert.equal(tasksJson.source, '.ultra/state.db');
+    assert.deepEqual(tasksJson.tasks, []);
+    assert.equal('project' in tasksJson, false);
+    const db = new Database(path.join(target, '.ultra', 'state.db'), { readonly: true });
+    try {
+      const baseline = db.prepare('SELECT project_name, project_type, stack FROM baselines').get();
+      assert.deepEqual(baseline, { project_name: 'meta-demo', project_type: 'web', stack: 'next' });
+    } finally {
+      db.close();
+    }
   } finally { cleanup(target); }
 });
 

package/mcp-server/tests/server-contract.test.cjs

@@ -14,12 +14,23 @@ const { StdioClientTransport } = require('@modelcontextprotocol/sdk/client/stdio
 const REPO_ROOT = path.resolve(__dirname, '..', '..');
 const SERVER = path.join(REPO_ROOT, 'mcp-server', 'server.cjs');
 const PACKAGE_VERSION = require(path.join(REPO_ROOT, 'package.json')).version;
+const { initStateDb, closeStateDb } = require('../lib/state-db.cjs');
 
 function tmpProject() {
   const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'ubp-mcp-'));
   return { dir, dbPath: path.join(dir, '.ultra', 'state.db') };
 }
 
+function seedMigratedBaseline(project) {
+  const { db } = initStateDb(project.dbPath);
+  db.prepare(
+    `INSERT OR IGNORE INTO baselines
+     (id, project_name, mode, status, approved_by, approval_note, converged_at)
+     VALUES ('test-baseline', 'fixture', 'migrated', 'ready', 'test', 'legacy fixture', ?)`,
+  ).run(new Date().toISOString());
+  closeStateDb(db);
+}
+
 async function withClient({ dir, dbPath }, fn, extraEnv = {}) {
   const transport = new StdioClientTransport({
     command: process.execPath,
@@ -74,6 +85,10 @@ test('listTools returns workflow tools and exposes no Ultra memory API', async (
       const list = await client.listTools();
       const names = list.tools.map((t) => t.name).sort();
       assert.deepEqual(names, [
+        'baseline.converge',
+        'baseline.get',
+        'baseline.record',
+        'baseline.start',
         'change.archive',
         'change.breadcrumb',
         'change.context',
@@ -118,9 +133,78 @@ test('listTools returns workflow tools and exposes no Ultra memory API', async (
   }
 });
 
+test('baseline MCP tools adopt and converge an existing checkout without storing provider payloads', async () => {
+  const proj = tmpProject();
+  try {
+    fs.mkdirSync(path.join(proj.dir, '.ultra', 'specs'), { recursive: true });
+    fs.mkdirSync(path.join(proj.dir, 'src'), { recursive: true });
+    fs.writeFileSync(path.join(proj.dir, '.ultra', 'specs', 'product.md'), '# Product\n\nObserved behavior.\n');
+    fs.writeFileSync(path.join(proj.dir, '.ultra', 'specs', 'architecture.md'), '# Architecture\n\nCurrent boundary.\n');
+    fs.writeFileSync(path.join(proj.dir, 'src', 'index.js'), 'module.exports = true;\n');
+    require('node:child_process').execFileSync('git', ['init', '-q'], { cwd: proj.dir });
+    require('node:child_process').execFileSync('git', ['config', 'user.email', 'test@ubp.dev'], { cwd: proj.dir });
+    require('node:child_process').execFileSync('git', ['config', 'user.name', 'ubp-test'], { cwd: proj.dir });
+    require('node:child_process').execFileSync('git', ['add', '.'], { cwd: proj.dir });
+    require('node:child_process').execFileSync('git', ['commit', '-q', '-m', 'seed'], { cwd: proj.dir });
+    const revision = require('node:child_process').execFileSync(
+      'git', ['rev-parse', 'HEAD'], { cwd: proj.dir, encoding: 'utf8' },
+    ).trim();
+
+    await withClient(proj, async (client) => {
+      const started = readToolPayload(await client.callTool({
+        name: 'baseline.start',
+        arguments: {
+          id: 'mcp-baseline', project_name: 'fixture', mode: 'brownfield',
+          repository_revision: revision, scope: ['.'],
+        },
+      }));
+      assert.equal(started.baseline.status, 'adopting');
+
+      const recorded = readToolPayload(await client.callTool({
+        name: 'baseline.record',
+        arguments: {
+          id: 'mcp-baseline', repository_revision: revision,
+          spec_refs: [
+            { kind: 'product', path: '.ultra/specs/product.md' },
+            { kind: 'architecture', path: '.ultra/specs/architecture.md' },
+          ],
+          evidence: [{ kind: 'source', ref: 'src/index.js', summary: 'Current entry point.' }],
+          verification: [{
+            name: 'smoke', command: 'node -e "require(\'./src\')"', status: 'pass', evidence: 'exit 0',
+          }],
+          unknowns: [],
+          provider_refs: {
+            code_graph: { provider: 'codebase-memory-mcp', project: 'fixture', status: 'fresh' },
+          },
+        },
+      }));
+      assert.match(recorded.baseline.spec_refs[0].digest, /^[0-9a-f]{64}$/);
+
+      const converged = readToolPayload(await client.callTool({
+        name: 'baseline.converge',
+        arguments: {
+          id: 'mcp-baseline', expected_revision: revision, approved_by: 'owner',
+          approval_note: 'The baseline matches the current checkout.', accept_known_red: false,
+        },
+      }));
+      assert.equal(converged.ready, true);
+      assert.equal(converged.baseline.status, 'ready');
+
+      const got = readToolPayload(await client.callTool({
+        name: 'baseline.get', arguments: {},
+      }));
+      assert.equal(got.baseline.id, 'mcp-baseline');
+      assert.equal(JSON.stringify(got.baseline).includes('captured prompt'), false);
+    });
+  } finally {
+    fs.rmSync(proj.dir, { recursive: true, force: true });
+  }
+});
+
 test('change.create + change.context expose a continuous change unit with external provider references', async () => {
   const proj = tmpProject();
   try {
+    seedMigratedBaseline(proj);
     fs.writeFileSync(path.join(proj.dir, 'README.md'), '# project\n');
     await withClient(proj, async (client) => {
       const created = await client.callTool({
@@ -172,6 +256,7 @@ test('change.create + change.context expose a continuous change unit with extern
 test('spec-learning MCP tools persist an approval-gated candidate and projection', async () => {
   const proj = tmpProject();
   try {
+    seedMigratedBaseline(proj);
     await withClient(proj, async (client) => {
       await client.callTool({
         name: 'change.create',
@@ -233,6 +318,7 @@ test('spec-learning MCP tools persist an approval-gated candidate and projection
 test('system.doctor returns structured provider ownership and projection health', async () => {
   const proj = tmpProject();
   try {
+    seedMigratedBaseline(proj);
     await withClient(proj, async (client) => {
       await client.callTool({
         name: 'task.create',
@@ -515,11 +601,22 @@ test('task.init_project creates .ultra/ skeleton in a fresh target directory', a
       assert.equal(payload.status, 'created');
       assert.equal(payload.created_path, path.join(freshTarget, '.ultra'));
       assert.equal(payload.state_db_path, path.join(freshTarget, '.ultra', 'state.db'));
+      assert.equal(payload.mode, 'greenfield');
+      assert.equal(payload.baseline.status, 'draft');
       assert.ok(fs.existsSync(payload.state_db_path));
       assert.ok(payload.copied_files.includes('tasks/tasks.json'));
       const tasksJson = JSON.parse(fs.readFileSync(path.join(payload.created_path, 'tasks', 'tasks.json'), 'utf8'));
-      assert.equal(tasksJson.project.name, 'mcp-init');
-      assert.equal(tasksJson.project.type, 'cli');
+      assert.equal(tasksJson.source, '.ultra/state.db');
+      assert.deepEqual(tasksJson.tasks, []);
+      const state = new Database(payload.state_db_path, { readonly: true });
+      try {
+        assert.deepEqual(
+          state.prepare('SELECT project_name, project_type, mode FROM baselines').get(),
+          { project_name: 'mcp-init', project_type: 'cli', mode: 'greenfield' },
+        );
+      } finally {
+        state.close();
+      }
     });
   } finally {
     fs.rmSync(proj.dir, { recursive: true, force: true });

package/mcp-server/tests/state-db.test.cjs

@@ -8,7 +8,7 @@ const path = require('node:path');
 
 const stateDb = require('../lib/state-db.cjs');
 
-test('initStateDb upgrades a pre-10.0 database in place with Context Spine state', () => {
+test('initStateDb upgrades a pre-10.0 database through Context Spine into baseline authority', () => {
   const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'ubp-db-upgrade-'));
   const file = path.join(dir, 'state.db');
   try {
@@ -59,7 +59,7 @@ test('initStateDb upgrades a pre-10.0 database in place with Context Spine state
     assert.ok(columns.includes('change_id'));
     const eventColumns = upgraded.db.prepare('PRAGMA table_info(events)').all().map((row) => row.name);
     assert.ok(eventColumns.includes('change_id'));
-    assert.equal(upgraded.schema_version, '10.0');
+    assert.equal(upgraded.schema_version, '11.0');
     assert.ok(upgraded.db.prepare("SELECT 1 FROM schema_version WHERE version = '10.0'").get());
     const contextColumns = upgraded.db.prepare('PRAGMA table_info(context_snapshots)').all()
       .map((row) => row.name);
@@ -69,12 +69,21 @@ test('initStateDb upgrades a pre-10.0 database in place with Context Spine state
     assert.ok(upgraded.db.prepare(
       "SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'spec_learning_candidates'",
     ).get());
+    const baseline = upgraded.db.prepare(
+      "SELECT mode, status FROM baselines WHERE id = 'migrated-baseline'",
+    ).get();
+    assert.deepEqual(baseline, { mode: 'migrated', status: 'ready' });
     const contextMigration = upgraded.db.prepare(
       "SELECT from_version, to_version, notes FROM migration_history WHERE to_version = '10.0' ORDER BY id DESC LIMIT 1",
     ).get();
     assert.equal(contextMigration.from_version, '9.1');
     assert.equal(contextMigration.to_version, '10.0');
     assert.match(contextMigration.notes, /Context Spine/);
+    const baselineMigration = upgraded.db.prepare(
+      "SELECT from_version, to_version, notes FROM migration_history WHERE to_version = '11.0' ORDER BY id DESC LIMIT 1",
+    ).get();
+    assert.equal(baselineMigration.from_version, '10.0');
+    assert.match(baselineMigration.notes, /baseline adoption/i);
     assert.ok(upgraded.db.prepare(
       "SELECT 1 FROM migration_history WHERE from_version = '8A.1' AND to_version = '9.1' AND notes LIKE '%Kimi%'",
     ).get());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultra-builder-pro-cli",
-  "version": "0.11.0",
+  "version": "0.12.1",
   "description": "Multi-runtime installer for the Ultra Builder Pro agent engineering system — deploys commands, agents, skills, hooks, and MCP server to Claude Code, OpenCode, Codex CLI, and Kimi Code.",
   "bin": {
     "ultra-builder-pro-cli": "bin/install.js",

package/skills/ultra-change/SKILL.md

@@ -16,16 +16,21 @@ own their payloads; Ultra stores only provider references supplied by the user o
 
 ## Workflow
 
-1. Call `change.list` and `change.breadcrumb`.
+1. Call `baseline.get`. State integrity failure routes to `ultra-doctor`. When no
+   change is active, a missing, incomplete, or stale baseline routes to `ultra-init`.
+   An urgent or already active bounded change may proceed with that condition recorded
+   as a warning. `change.converge` requires an approved `ready` baseline; repository
+   revision and tracked-spec drift created by the change are reconciled at archive.
+2. Call `change.list` and `change.breadcrumb`.
    - Resume the single change that matches the requested outcome.
    - Require an explicit id when several changes could match.
    - Create a new change only when no existing packet represents the same outcome.
-2. Capture the observable outcome, acceptance, non-goals, affected public seam,
+3. Capture the observable outcome, acceptance, non-goals, affected public seam,
    documentation impact, and unresolved decisions.
-3. Classify the change as `quick`, `standard`, `major`, or `incident`. Ask only for a
+4. Classify the change as `quick`, `standard`, `major`, or `incident`. Ask only for a
    material product, risk, or recovery decision that repository evidence cannot answer.
-4. Call `change.create` with a stable kebab-case id, or `change.update` when resuming.
-5. Write the minimum artifact set required by the classification:
+5. Call `change.create` with a stable kebab-case id, or `change.update` when resuming.
+6. Write the minimum artifact set required by the classification:
 
    ```text
    .ultra/changes/active/<change-id>/
@@ -41,14 +46,17 @@ own their payloads; Ultra stores only provider references supplied by the user o
    Delta files describe differences from the baseline, not a second copy of it.
    Incident diagnosis records the symptom, earliest bad state, falsifiable
    hypotheses, evidence, root cause, and recovery boundary.
-6. Create the smallest executable vertical slice with `task.create`. Each task needs
+7. Create the smallest executable vertical slice with `task.create`. Each task needs
    one outcome, bounded ownership, dependencies, a live public seam, an exact
    verification command, and documentation impact.
-7. Compile `change.context` for the next role and gate. Include only required
-   references and the task execution contract. Treat missing references, digest or
-   HEAD drift, an exceeded context budget, and unknown documentation impact as
-   blockers.
-8. Call `change.breadcrumb` and return its single next action.
+8. Compile `change.context` for the next role and gate. Include only required
+   references and the task execution contract. Missing required references, digest or
+   HEAD drift, an absent public seam or verification command, and unknown
+   documentation impact are blockers. File count, token estimate, and context-share
+   thresholds are advisory warnings: narrow reads or split the slice when useful, but
+   never raise a threshold merely to make the warning disappear or refuse necessary
+   incident context.
+9. Call `change.breadcrumb` and return its single next action.
 
 ## Specification learning
 
@@ -61,5 +69,8 @@ verified.
 ## Completion gate
 
 Do not claim alignment while a material decision is unresolved, documentation impact
-is unknown, context is stale, or the next task is not executable from a bounded fresh
-context.
+is unknown, context is stale, or the next task is not executable. `change.converge`
+also requires a `ready` baseline, so incomplete adoption must be resolved before
+convergence. Normal HEAD or tracked-spec drift caused by the active change is not a
+convergence blocker. Declare every baseline update at archive; archive fails and rolls
+back when revision or digest health remains stale after reconciliation.

package/skills/ultra-deliver/SKILL.md

@@ -10,10 +10,12 @@ review, and delivery reports are evidence artifacts.
 
 ## Bind current evidence
 
-1. Call `change.list` and bind exactly one relevant change, or a null change id for an
-   initial baseline.
-2. Call `change.breadcrumb`. Block on stale context, incomplete linked tasks, or
-   unresolved readiness.
+1. Call `baseline.get`, then `change.list`. Bind exactly one relevant change, or the
+   current draft/adopting baseline when this is the initial delivery.
+2. Call `change.breadcrumb`. Context-size warnings are advisory, but delivery blocks
+   on incomplete baseline adoption, stale execution context, incomplete linked tasks,
+   or unresolved readiness. HEAD and tracked-spec drift caused by the current change
+   remain visible warnings until archive reconciliation.
 3. Require a passing test report for the current full HEAD and at least one declared
    public seam.
 4. Require current independent `spec_fidelity` and `engineering_standards` review
@@ -33,6 +35,10 @@ Reconcile accepted delta content and documentation impact into baseline document
 Record updated paths or a specific no-change reason. Unknown documentation impact,
 unresolved placeholders, and behavior that exists only in the delta block convergence.
 
+For an initial baseline without a change, call `baseline.record`, obtain explicit owner
+approval, and call `baseline.converge`. Do not simulate initial delivery through a null
+change record.
+
 ## Verify the release candidate
 
 Use a clean, reviewed release commit. Show any remaining diff and obtain explicit
@@ -53,7 +59,11 @@ delta, documentation, both independent review axes, and incident diagnosis when
 applicable. Do not collapse review axes or replace exact signal fields with prose.
 
 Resolve named blockers, rerun invalidated gates, then call `change.archive` with the
-summary and baseline updates.
+summary and baseline updates. Archive reconciliation refreshes the authoritative
+baseline revision and digests. The archive transaction rechecks baseline health and
+rolls back the state row, artifacts, and reconciliation events if any tracked digest
+or repository revision remains stale. Verify the result with `baseline.get` before
+release.
 
 ## Optional release
 

package/skills/ultra-dev/SKILL.md

@@ -15,6 +15,10 @@ projected status fields. If task MCP access fails, stop and route state health t
 
 Read `change.breadcrumb` when a change is active. Stale context, blocked readiness,
 unknown documentation impact, or a HEAD mismatch blocks implementation.
+Baseline-adoption and context-size warnings do not block an active slice. Address
+them when practical without dropping required evidence or arbitrarily changing a
+threshold. Approved baseline availability is enforced at convergence; revision and
+tracked-spec health are reconciled and verified at archive.
 
 ## Workflow
 

package/skills/ultra-doctor/SKILL.md

@@ -17,6 +17,7 @@ Call `system.doctor` with `{ "repair": false }` and inspect:
 - failed or interrupted projection jobs;
 - orphan sessions;
 - missing active-change artifact roots;
+- missing, incomplete, or stale project baseline readiness and specification digests;
 - the boundary to separately installed memory and code-graph providers.
 
 Do not infer health from generated task JSON. Do not mutate external provider state,
@@ -31,6 +32,10 @@ delete artifacts, or collect memory during diagnosis.
 - An orphan session may be reconciled; never kill unrelated processes blindly.
 - A missing change artifact requires version-control, backup, or deliberate recreation
   evidence rather than silent regeneration.
+- Missing or incomplete baseline evidence routes to `ultra-init`. Doctor repair does
+  not approve a baseline, accept known-red verification, or invent adoption evidence.
+  Baseline readiness is an advisory workflow check, not state-database corruption and
+  not a reason for doctor repair.
 
 ## Explicit repair
 
@@ -58,8 +63,9 @@ host wiring. Neither substitutes for the other.
 
 ## Output
 
-Lead with `healthy` or `degraded`. List failing checks, incident identifiers, cursor
-lag, whether repair ran, the backup path, and each unresolved action with its owner.
+Lead with `healthy` or `degraded`. List failing authority checks separately from
+baseline warnings, incident identifiers, cursor lag, whether repair ran, the backup
+path, and each unresolved action with its owner.
 
 Do not fix application code, delete state, reset Git, close healthy sessions, or
 install and repair external providers through this workflow.