ultra-builder-pro-cli 0.13.0 → 0.15.0

package/skills/ultra-verify/references/{confidence-system.md → evidence-status.md}

@@ -1,7 +1,7 @@
-# Evidence-Based Confidence
+# Evidence Status
 
-Cross-model agreement is a signal, not an authority. Assign confidence only after checking claims
-against source code, tests, runtime output, or primary documentation.
+Cross-model agreement is a signal, not an authority. Classify the synthesis only after checking
+consequential claims against source code, tests, runtime output, or primary documentation.
 
 ## Levels
 

package/skills/ultra-verify/scripts/verify_wait.py

@@ -1,19 +1,16 @@
 #!/usr/bin/env python3
-"""File-based completion waiter for the Ultra Verify advisor.
-
-Poll the session directory until the expected output is non-empty and stable, or until timeout.
-The JSON result carries the operational status; timeout is not a process error.
-"""
+"""Wait for one named advisor output file to become non-empty and stable."""
 
+import argparse
 import json
+import re
 import sys
 import time
 from pathlib import Path
 
 POLL_INTERVAL = 3
 DEFAULT_TIMEOUT = 1200
-ADVISOR = "codex"
-OUTPUT_FILE = "codex-output.md"
+SAFE_ADVISOR = re.compile(r"^[a-zA-Z0-9_-]+$")
 
 
 def _file_size(path: Path) -> int:
@@ -23,71 +20,74 @@ def _file_size(path: Path) -> int:
         return -1
 
 
-def _check_output(session_path: Path) -> dict:
-    output = session_path / OUTPUT_FILE
+def _safe_output(value: str) -> Path:
+    result = Path(value)
+    if result.is_absolute() or len(result.parts) != 1 or result.name in {"", ".", ".."}:
+        raise argparse.ArgumentTypeError("--output must be one file name inside the session directory")
+    return result
+
+
+def _arguments():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("session_path", type=Path)
+    parser.add_argument("--advisor", default="advisor")
+    parser.add_argument("--output", type=_safe_output, default=Path("advisor-output.md"))
+    parser.add_argument("--timeout", type=int, default=DEFAULT_TIMEOUT)
+    args = parser.parse_args()
+    if not SAFE_ADVISOR.fullmatch(args.advisor):
+        parser.error("--advisor must use letters, numbers, underscore, or hyphen")
+    if args.timeout < 0:
+        parser.error("--timeout must be non-negative")
+    if not args.session_path.is_dir():
+        parser.error(f"session directory not found: {args.session_path}")
+    return args
+
+
+def _status(session_path: Path, advisor: str, output_name: Path) -> dict:
+    output = session_path / output_name
     if _file_size(output) > 0:
-        return {"name": ADVISOR, "status": "complete", "file": str(output)}
-    return {"name": ADVISOR, "status": "pending", "file": None}
+        return {"name": advisor, "status": "complete", "file": str(output)}
+    return {"name": advisor, "status": "pending", "file": None}
 
 
-def _timeout_status(session_path: Path) -> dict:
-    output = session_path / OUTPUT_FILE
-    error = session_path / f"{ADVISOR}-error.log"
+def _timeout_status(session_path: Path, advisor: str, output_name: Path) -> dict:
+    output = session_path / output_name
+    error = session_path / f"{advisor}-error.log"
     output_size = _file_size(output)
     if output_size > 0:
-        return {"name": ADVISOR, "status": "complete", "file": str(output)}
+        return {"name": advisor, "status": "complete", "file": str(output)}
     if _file_size(error) > 0:
-        return {"name": ADVISOR, "status": "failed", "file": str(error)}
+        return {"name": advisor, "status": "failed", "file": str(error)}
     if output_size == 0:
-        return {"name": ADVISOR, "status": "empty", "file": str(output)}
-    return {"name": ADVISOR, "status": "pending", "file": None}
+        return {"name": advisor, "status": "empty", "file": str(output)}
+    return {"name": advisor, "status": "pending", "file": None}
 
 
 def main() -> None:
-    if len(sys.argv) < 2:
-        print(__doc__, file=sys.stderr)
-        sys.exit(2)
-
-    session_path = Path(sys.argv[1])
-    timeout = DEFAULT_TIMEOUT
-    if "--timeout" in sys.argv:
-        idx = sys.argv.index("--timeout")
-        if idx + 1 >= len(sys.argv):
-            print("Error: --timeout requires an integer", file=sys.stderr)
-            sys.exit(2)
-        try:
-            timeout = int(sys.argv[idx + 1])
-        except ValueError:
-            print(f"Error: --timeout must be integer: {sys.argv[idx + 1]}", file=sys.stderr)
-            sys.exit(2)
-        if timeout < 0:
-            print("Error: --timeout must be non-negative", file=sys.stderr)
-            sys.exit(2)
-
-    if not session_path.is_dir():
-        print(f"Error: session directory not found: {session_path}", file=sys.stderr)
-        sys.exit(2)
-
-    deadline = time.monotonic() + timeout
-    previous_size = _file_size(session_path / OUTPUT_FILE)
+    args = _arguments()
+    output = args.session_path / args.output
+    deadline = time.monotonic() + args.timeout
+    previous_size = _file_size(output)
     while time.monotonic() < deadline:
-        current_size = _file_size(session_path / OUTPUT_FILE)
-        advisor = _check_output(session_path)
-        stable = advisor["status"] == "complete" and current_size == previous_size
-        if stable:
-            elapsed = int(timeout - (deadline - time.monotonic()))
-            print(json.dumps({"status": "complete", ADVISOR: advisor, "elapsed_seconds": elapsed}))
+        current_size = _file_size(output)
+        advisor = _status(args.session_path, args.advisor, args.output)
+        if advisor["status"] == "complete" and current_size == previous_size:
+            elapsed = int(args.timeout - (deadline - time.monotonic()))
+            print(json.dumps({
+                "status": "complete", "advisor": advisor, "elapsed_seconds": elapsed,
+            }))
             return
-
         state = "stabilizing" if advisor["status"] == "complete" else "waiting"
         remaining = max(0, int(deadline - time.monotonic()))
-        sys.stderr.write(f"\r  [0/1] {ADVISOR}:{state} ({remaining}s remaining)  ")
+        sys.stderr.write(f"\r  [0/1] {args.advisor}:{state} ({remaining}s remaining)  ")
         sys.stderr.flush()
         previous_size = current_size
         time.sleep(POLL_INTERVAL)
 
-    advisor = _timeout_status(session_path)
-    print(json.dumps({"status": "timeout", ADVISOR: advisor, "elapsed_seconds": timeout}))
+    advisor = _timeout_status(args.session_path, args.advisor, args.output)
+    print(json.dumps({
+        "status": "timeout", "advisor": advisor, "elapsed_seconds": args.timeout,
+    }))
 
 
 if __name__ == "__main__":

package/spec/cli-protocol.md

@@ -91,7 +91,7 @@ as a fallback unless `ultra-tools <family> --help` lists it.
 | `task.expand`             | `task expand`               | 8a    | mcp     |
 | `task.parse_prd`          | `task parse-prd`            | 8a    | mcp     |
 | `task.dependency_topo`    | `task topo`                 | 8a    | mcp     |
-| `task.append_event`       | `task append-event`         | 2     | any     |
+| `task.append_event`       | `task append-event`         | 2     | any (allowlisted observations only) |
 | `task.subscribe_events`   | `task subscribe`            | 2     | any     |
 | `session.spawn`           | `session spawn`             | 4.5   | mcp     |
 | `session.close`           | `session close`             | 4.5   | mcp     |
@@ -114,6 +114,11 @@ as a fallback unless `ultra-tools <family> --help` lists it.
 | `change.learning_resolve` | `change learning-resolve`   | 10    | mcp     |
 | `change.converge`         | `change converge`           | 9     | mcp     |
 | `change.archive`          | `change archive`            | 9     | mcp     |
+| `workflow.start`          | `workflow start`            | 13    | mcp     |
+| `workflow.get`            | `workflow get`              | 13    | any     |
+| `workflow.list`           | `workflow list`             | 13    | any     |
+| `workflow.step`           | `workflow step`             | 13    | mcp     |
+| `workflow.complete`       | `workflow complete`         | 13    | mcp     |
 | `system.doctor`           | `system doctor`             | 9     | mcp     |
 | `plan.export`             | `plan export`               | 8a    | mcp     |
 | `plan.get`                | `plan get`                  | 8a    | any     |
@@ -126,7 +131,7 @@ the live MCP server; `system doctor` may additionally be exposed by the
 maintenance CLI because it is the recovery path when MCP startup is degraded.
 `task init-project --resume` preserves existing `.ultra` files and installs only
 missing current scaffold assets. Projection-only state uses the supported
-`migrate --from=4.4 --to=4.5` or `--from=4.5 --to=12.0` transition before resume.
+`migrate --from=4.4 --to=4.5` or `--from=4.5 --to=15.0` transition before resume.
 `system doctor --repair` applies supported schema upgrades with a pre-migration
 backup before mechanical recovery.
 `system restore` requires the exact `REPLACE_CORRUPT_ULTRA_STATE` confirmation and a