ultra-builder-pro-cli 0.22.0 → 0.24.0

package/docs/RUNTIME-COMPAT-MATRIX.md

@@ -1,177 +1,142 @@
-# Runtime Compatibility Matrix
-
-Current presentation contract for Ultra Builder Pro. Claude Code, OpenCode,
-Codex, and Kimi Code 0.26+ are supported native plugin hosts. The canonical
-asset boundary lives in `adapters/_shared/runtime-assets.cjs`.
-
-Legend: **FULL** = native host surface, **FUNCTIONAL** = the complete outcome is
-available through a different native host primitive, **DEGRADED** = supported
-but missing an equivalent lifecycle/control surface, **N/A** = intentionally
-not installed.
-
-## 1. Plugin and workflow surface
-
-| Capability | Claude Code | OpenCode | Codex | Kimi Code 0.26+ |
-|---|---|---|---|---|
-| Package form | `.claude-plugin` native plugin | native config bundle + JS plugin | personal `.codex-plugin` | managed `kimi.plugin.json` plugin |
-| Public entry | `/ultra-builder-pro:ultra-*` | `/ultra-*` | `$ultra-builder-pro:ultra-*` | `/ultra-builder-pro:ultra-*` |
-| Public Ultra capabilities | 11, model invocation disabled | 11 commands backed by private workflow assets | 11, implicit invocation disabled | 11, model invocation disabled |
-| Internal agent-rule skills | 4, non-user-facing | 4, non-user-facing | 4 with implicit invocation disabled | 4, consumed by review workers |
-| Collaboration companions | `codex-collab`, `ultra-verify` | `cc-collab`, `codex-collab`, `ultra-verify` | `cc-collab`, `ultra-verify` | `cc-collab`, `codex-collab`, `ultra-verify` |
-| Automatic workflow bootstrap | N/A | N/A | N/A | N/A |
-| External browser/deploy/framework skills | N/A | N/A | N/A | N/A |
-
-Codex converts workflows into namespaced skills and records ten compatibility
-command mappings in `command-map.json`; `ultra-review` remains directly
-invocable as a skill. Kimi registers all eleven commands through its native
-plugin command directory and exposes the allowlisted skills independently.
-
-## 2. Agents and collaboration
-
-| Capability | Claude Code | OpenCode | Codex | Kimi Code 0.26+ |
-|---|---|---|---|---|
-| Bundled review/debug workers | FULL, native Markdown agents | FULL, native agent frontmatter | FULL, 10 managed TOML agents | FUNCTIONAL, 10 prompt templates consumed by `Agent` / `AgentSwarm` |
-| Plugin custom-agent registration | FULL | FULL | FULL | N/A; the 0.26 manifest has no custom-agent field |
-| Native bounded delegation | native agent surface | native agent surface | native Codex subagents | native `Agent` / `AgentSwarm` |
-| Cross-host advisor | explicit and read-only | explicit and read-only | explicit and read-only | explicit and read-only |
-| Primary-agent ownership | FULL | FULL | FULL | FULL |
-
-No bundled worker owns private conversational memory. It receives current-checkout
-evidence and bounded context from the primary host, then returns a result for
-primary verification. On Kimi, the review workflow reads the bundled worker
-template before creating the corresponding `AgentSwarm` item; the templates are
-not presented as nonexistent custom agents.
-
-## 3. Workflow hooks
-
-| Lifecycle | Claude Code | OpenCode | Codex | Kimi Code 0.26+ |
-|---|---|---|---|---|
-| Session context/health | FULL, active-workflow breadcrumb on native `SessionStart` | FULL, native JS plugin injects only an active-workflow breadcrumb; health via `system.doctor` | FULL, active-workflow breadcrumb on native `SessionStart` | FULL, active-workflow breadcrumb via native hooks |
-| Active edit boundary | FULL, `PreToolUse Edit|Write` | FULL, `tool.execute.before` rejects managed checkpoint/projection writes | FULL, `PreToolUse Edit|Write|apply_patch` | FULL, native `PreToolUse Edit|Write` deny contract |
-| Pre-compact checkpoint | FULL | FULL | FULL | FULL, native `PreCompact` |
-| Post-compact context injection | FULL | FULL, native compacting context | FULL, native `PostCompact` restore | DEGRADED; checkpoint restoration runs, but Kimi 0.26/0.27 does not reinject fire-and-forget hook text |
-| Stop lifecycle advisory | FULL, native non-blocking `Stop` | N/A, no equivalent stop event needed | FULL, native non-blocking `Stop` | FULL, native non-blocking `Stop` |
-| Subagent lifecycle evidence | FULL | DEGRADED, no equivalent packaged event | FULL | FULL, native `SubagentStart` / `SubagentStop` |
-
-Health/context, compact, stop, and subagent hooks remain silent unless
-`.ultra/.runtime/state.db` proves an active, blocked, or ready workflow. Managed-file
-protection applies to every initialized project because neither a hand-edited team
-checkpoint nor generated local projection may become a second authority. No host
-receives prompt capture, transcript capture,
-observation journaling, session-summary memory, generic command blocking, or
-generic post-edit policy.
-Baseline-adoption and context-budget warnings are injected as advisory context;
-they do not deny edits or stop active incident work.
-
-## 4. MCP and state
-
-| Capability | Claude Code | OpenCode | Codex | Kimi Code 0.26+ |
-|---|---|---|---|---|
-| stdio MCP registration | plugin `.mcp.json` | `opencode.json` local MCP entry | plugin `.mcp.json` | plugin `mcpServers` entry |
-| Live/declared contracts | 60 | 60 | 60 | 60 |
-| Structured user alignment | `AskUserQuestion` in interactive sessions | `question` when permission is not denied | `request_user_input` when the current mode exposes it | `AskUserQuestion` outside auto mode |
-| Greenfield/brownfield baseline adoption | FULL | FULL | FULL | FULL |
-| Context Manifest v3 / breadcrumb | FULL | FULL, same bundled read-only DB reader as every hook | FULL | FULL |
-| Approval-gated spec learning | FULL | FULL | FULL | FULL |
-| Host-native review/discovery/ask | native | native | documented in `codex-capability-map.json` | native Kimi tools and workers |
-| Workflow-memory envelope | project `.ultra/` | project `.ultra/` | project `.ultra/` | project `.ultra/` |
-| Lifecycle/index authority | project `.ultra/.runtime/state.db` | project `.ultra/.runtime/state.db` | project `.ultra/.runtime/state.db` | project `.ultra/.runtime/state.db` |
-| Git team checkpoint | `.ultra/tasks/tasks.json` | `.ultra/tasks/tasks.json` | `.ultra/tasks/tasks.json` | `.ultra/tasks/tasks.json` |
-| General memory-provider API | N/A | N/A | N/A | N/A |
-
-All 60 `task.*`, `session.*`, `baseline.*`, `change.*`, `decision.*`,
-`workflow.*`, `artifact.*`, `system.*`, and `plan.*` operations
-registered by `mcp-server/server.cjs` are live. Review, impact discovery, skill
-loading, and user interaction remain host-native surfaces.
-
-When a native structured question surface is unavailable, the shared interaction
-contract permits one concise direct question only if ordinary conversation is still
-available. A host mode that forbids interaction leaves the choice unanswered; Ultra
-does not infer consent or silently delegate the semantic route.
-
-Kimi starts plugin MCP processes with the managed plugin root as `cwd`. The
-generated launcher recovers the project from the inherited `PWD`, sets
-`UBP_ROOT_DIR` and `UBP_DB_PATH`, and refuses to start if that project boundary
-cannot be established. On POSIX it intentionally uses `env node` because Kimi
-0.26/0.27's embedded Node ABI differs from the ABI used to install `better-sqlite3`.
-
-Archive finalization and archive-journal recovery use an adjacent, explicitly
-packaged Python 3 worker. The worker accepts only bounded, basename-only
-operations and performs mutations relative to inherited, identity-checked
-directory descriptors. This boundary requires a POSIX Python runtime with
-`dir_fd`, no-follow `stat`, and `O_NOFOLLOW` support. If that prerequisite is
-missing, archive operations fail closed with `ARCHIVE_RUNTIME_UNAVAILABLE`;
-Ultra never falls back to ancestor-sensitive pathname mutation. Other MCP
-operations remain available.
-
-## 5. User instruction isolation
-
-| Capability | Claude Code | OpenCode | Codex | Kimi Code 0.26+ |
-|---|---|---|---|---|
-| Durable user file | `~/.claude/CLAUDE.md` | `~/.config/opencode/AGENTS.md` | `~/.codex/AGENTS.md` | `~/.kimi-code/AGENTS.md` |
-| Automatic overwrite by plugin install | no | no | no | no |
-| Writer shipped by Ultra | N/A | N/A | N/A | N/A |
-| Uninstall removes user instructions | no | no | no | no |
-
-The Kimi plugin installer also does not edit `~/.kimi-code/config.toml`. Durable
-user preferences belong to each host and remain outside Ultra's ownership.
-Legacy Ultra handbook text is not proof of plugin ownership and is never
-silently rewritten or removed.
-
-## 6. Install, update, and uninstall
-
-| Capability | Claude Code | OpenCode | Codex | Kimi Code 0.26+ |
-|---|---|---|---|---|
-| Adapter install | FULL | FULL | FULL | FULL |
-| Global install command | `ubp --claude --global` | `ubp --opencode --global` | `ubp --codex --global` | `ubp --kimi --global` |
-| Native update visibility | next host session | host restart | cachebuster + new task | `/reload` or new session |
-| Removes stale managed assets | FULL | FULL | FULL | FULL |
-| Preserves unrelated config | FULL | FULL | FULL | FULL, including `config.toml` and unrelated registry records |
-| Uninstall ownership guard | managed plugin root | sentinels + owned MCP entry | managed root/manifest/agent headers | managed root + exact registry record |
-| Normalized install provenance | FULL | FULL | FULL | FULL |
-| Local-source dirty state and worktree digest | FULL | FULL | FULL | FULL |
-| Read-only `ubp --all --global --doctor` | FULL | FULL | FULL | FULL |
-| Asset-content and host-contract drift detection | FULL | FULL | FULL | FULL |
-
-Package-local Git provenance never falls through to an enclosing consumer
-repository. Source installs record commit, dirty state, and a deterministic
-worktree digest; registry installs record unavailable checkout fields as
-`null`.
-
-Kimi's global managed root is
-`~/.kimi-code/plugins/managed/ultra-builder-pro`; its only registry mutation is
-the owned `ultra-builder-pro` entry in `~/.kimi-code/plugins/installed.json`.
-Reinstall preserves the user's enabled/capability choices and unrelated plugin
-records. Uninstall refuses an unmanaged or conflicting root.
-
-## 7. Durable schema compatibility
+# Runtime compatibility matrix
+
+Claude Code, OpenCode, Codex, Kimi Code, and Grok Build are supported plugin
+hosts. The canonical asset boundary lives in
+`adapters/_shared/runtime-assets.cjs`.
+
+Legend: **FULL** means a native equivalent exists; **FUNCTIONAL** means the same
+outcome uses a different native primitive; **DEGRADED** means the missing host
+surface is stated and the Skill-entry Context read remains authoritative; **N/A**
+means intentionally absent.
+
+## Plugin and workflow surface
+
+| Capability | Claude Code | OpenCode | Codex | Kimi Code | Grok Build |
+|---|---|---|---|---|---|
+| Package form | `.claude-plugin` | config bundle + JS plugin | personal `.codex-plugin` | managed `kimi.plugin.json` | native Grok plugin |
+| Public entry | `/ultra-builder-pro:ultra-*` | `/ultra-*` | `$ultra-builder-pro:ultra-*` | `/ultra-builder-pro:ultra-*` | native Ultra commands/Skills |
+| Public workflow Skills | 11 explicit-only | 11 command-backed private assets | 11 implicit-disabled | 11 model-disabled | 11 explicit-only |
+| Internal rule Skills | 4 worker-only | 4 worker-only | 4 implicit-disabled | 4 worker templates | 4 worker templates |
+| MCP tools | exactly 7 | exactly 7 | exactly 7 | exactly 7 | exactly 7 |
+| Automatic semantic chaining | N/A | N/A | N/A | N/A | N/A |
+
+Commands are thin launchers. The Skill contains adaptable semantic workflow prose;
+the adapter contains only host metadata, translation, and wiring.
+
+## Agents and collaboration
+
+| Capability | Claude Code | OpenCode | Codex | Kimi Code | Grok Build |
+|---|---|---|---|---|---|
+| Bundled review/debug workers | FULL, 10 native Markdown agents | FULL, 10 native agents | FULL, 10 managed TOML agents | FUNCTIONAL, 10 prompt templates | FUNCTIONAL, 10 prompt templates |
+| Immutable Worker Packet | FULL | FULL | FULL | FULL | FULL |
+| Native bounded delegation | native agent surface | native agent surface | native subagents | Agent/AgentSwarm | plugin agent surface |
+| Cross-host advisor | explicit read-only | explicit read-only | explicit read-only | explicit read-only | explicit read-only |
+| Final acceptance owner | primary host | primary host | primary host | primary host | primary host |
+
+Every Worker Packet binds Context, decisions, Git, Task, acceptance, evidence,
+output schema, and digest. A worker cannot write SQLite or accept its own result.
+
+## Hooks and Context
+
+| Lifecycle | Claude Code | OpenCode | Codex | Kimi Code | Grok Build |
+|---|---|---|---|---|---|
+| Session Context | FULL, SessionStart compact | FULL, system transform | FULL, session/prompt compact | FULL where native event consumes output | DEGRADED, ignored stdout is not claimed as injection |
+| Skill-entry Context | FULL | FULL | FULL | FULL | FULL and authoritative |
+| Managed-file protection | PreToolUse | tool.before | PreToolUse | PreToolUse | camelCase PreToolUse |
+| Compact recovery | PreCompact + SessionStart | compacting transform | pre/post compact | native pre/post where available | records lifecycle; Skill rereads Context |
+| Stop | non-blocking advisory | session.idle annotation | non-blocking advisory | non-blocking advisory | advisory only for `reason=end_turn` |
+| Subagent event | minimal ids | DEGRADED when host lacks event | minimal ids | native start/stop | minimal ids where exposed |
+
+All Hook context comes from the canonical Context Envelope generator. Hooks never
+capture prompts, transcripts, general memory, observations, or code-graph payloads.
+They do not create semantic records or block ordinary work for incomplete evidence.
+
+## MCP and native runtime
+
+| Capability | Claude Code | OpenCode | Codex | Kimi Code | Grok Build |
+|---|---|---|---|---|---|
+| stdio registration | `.mcp.json` | local MCP entry | `.mcp.json` | `mcpServers` | native plugin MCP entry |
+| Public discovered tools | 7 | 7 | 7 | 7 | 7 |
+| Public write/read smoke | FULL | FULL | FULL | FULL | FULL |
+| Doctor backup/reopen | FULL | FULL | FULL | FULL | FULL |
+| Bundled `better-sqlite3` native | FULL | FULL | FULL | FULL | FULL |
+| ABI/provenance validation | FULL | FULL | FULL | FULL | FULL |
+| Git team checkpoint | `.ultra/tasks/tasks.json` | same | same | same | same |
+| Local authority | `.ultra/.runtime/state.db` | same | same | same | same |
+
+The installed runtime includes the externalized `better-sqlite3` package and its
+native `.node`. Provenance records native digest, platform, architecture, Node ABI,
+and runtime command. A mismatched ABI fails before authority is opened; Doctor
+repairs through staging and atomic swap.
+
+Archive finalization uses a packaged Python 3 worker with identity-checked
+descriptor-relative filesystem operations on POSIX. If this prerequisite is absent,
+archive fails closed with `ARCHIVE_RUNTIME_UNAVAILABLE`; other MCP tools remain usable.
+
+## Structured user interaction
+
+| Host | Native question surface | Fallback |
+|---|---|---|
+| Claude Code | `AskUserQuestion` | one concise direct question |
+| OpenCode | `question` | one concise direct question |
+| Codex | `request_user_input` when exposed by current mode | one concise direct question |
+| Kimi Code | `AskUserQuestion` outside auto mode | one concise direct question |
+| Grok Build | native structured question when exposed | one concise direct question |
+
+An interaction-disabled mode leaves the choice unresolved. The adapter never infers
+consent or stores an interaction receipt.
+
+## User instruction isolation
+
+| Host | Durable user instruction | Installer writes it? |
+|---|---|---|
+| Claude Code | `~/.claude/CLAUDE.md` | no |
+| OpenCode | `~/.config/opencode/AGENTS.md` | no |
+| Codex | `~/.codex/AGENTS.md` | no |
+| Kimi Code | `~/.kimi-code/AGENTS.md` | no |
+| Grok Build | host-owned instruction file | no |
+
+Install, update, Doctor, and uninstall preserve user instructions, repository
+instructions, project `.ultra`, unrelated plugins, and unrelated host configuration.
+
+## Install lifecycle
+
+| Capability | Claude Code | OpenCode | Codex | Kimi Code | Grok Build |
+|---|---|---|---|---|---|
+| Global flag | `--claude` | `--opencode` | `--codex` | `--kimi` | `--grok` |
+| Staging + atomic swap | FULL | FULL | FULL | FULL | FULL |
+| Exact-host preflight | FULL | FULL | FULL | FULL | FULL |
+| Managed uninstall guard | FULL | FULL | FULL | FULL | FULL |
+| Preserve unrelated config | FULL | FULL | FULL | FULL | FULL |
+| Read-only Doctor | FULL | FULL | FULL | FULL | FULL |
+
+Preflight uses the final manifest command and verifies initialize, `tools/list == 7`,
+public write/read, Doctor backup, close/reopen consistency, native provenance, and
+lazy project initialization.
+
+## Durable compatibility
 
 | Capability | Contract |
 |---|---|
-| Current state schema | `20.0` |
-| Runtime values | `claude`, `opencode`, `codex`, `kimi` |
-| Upgrade from earlier schema | preserves runtime rows, adds Context Spine state through 10.0, authoritative baseline adoption in 11.0, repository evidence in 12.0, durable workflows in 13.0, continuous baseline revalidation in 14.0, typed research semantics and verified reconciliation in 15.0, resumable owner-agent decision threads and workflow alignment gates in 16.0, explicit unborn-Git authority in 17.0, adaptive transitions and legacy workflow normalization in 18.0, non-ceremonial decision completion in 19.0, then typed artifact ownership and normalized dependency edges in 20.0 |
-| Preservation gate | rows, IDs, indexes, foreign keys, telemetry, incidents, and migration history remain intact |
-| Failure behavior | rollback; no partially upgraded authority database |
-
-## 8. Verification sources
-
-- `adapters/tests/*.test.cjs` verifies each installer and native manifest.
-- `tests/conformance/<runtime>/*.test.cjs` verifies command/skill, hook, MCP,
-  idempotency, and smoke presentation for all four hosts.
-- `tests/conformance/kimi/smoke.test.cjs` reproduces Kimi's plugin-root MCP
-  `cwd` and proves that the first state write lands in the active project.
-- `adapters/_shared/tests/runtime-assets.test.cjs` prevents retired or external
-  skills and generic/memory hooks from re-entering a package.
-- `tests/retired-runtime.test.cjs` prevents retired runtime code or prompt text
-  from re-entering active product surfaces.
-- `adapters/_shared/tests/plugin-isolation.test.cjs` and `tests/install.test.cjs`
-  verify the absence of a handbook writer and byte-preservation of all user instruction files.
-- `adapters/_shared/tests/provenance.test.cjs` verifies normalized manifests,
-  content hashes, source attribution, corruption handling, and contract drift.
-- `tests/install.test.cjs` verifies healthy four-host doctor output and
-  host-specific hook/MCP degradation after controlled tampering.
-- `tests/package-smoke.test.cjs` installs the packed tarball into a clean
-  consumer and executes a live MCP round trip through every generated launcher.
-
-Any capability claim elsewhere must match current adapter code and these tests.
+| Current authority schema | `22.0` |
+| Runtime values | `claude`, `opencode`, `codex`, `kimi`, `grok` |
+| Legacy inputs | v4.4/v4.5 task projections, the legacy root-level state database, Task Contexts, v0.22/v0.23 DB and team ledger |
+| Preservation | exact-byte backup, row/ID/event/migration-history preservation, verified semantic promotion |
+| Failure | transactional rollback; no partial DB, ledger, native runtime, or host installation |
+
+Old workflow/dialogue rows are retained as non-authoritative history. Current
+Decisions, Stage Checkpoints, Context Envelopes, Worker Packets, and team checkpoint
+are reconstructed only from verified authority.
+
+## Verification sources
+
+- `adapters/tests/*.test.cjs` validates every native builder and manifest.
+- `tests/conformance/<runtime>/*.test.cjs` validates all five hosts.
+- `adapters/_shared/tests/runtime-assets.test.cjs` keeps docs and asset allowlists
+  synchronized.
+- `tests/install.test.cjs` verifies atomic install, rollback, Doctor, and instruction
+  preservation.
+- `tests/package-smoke.test.cjs` installs the npm tarball and performs five real
+  launcher write/read/backup/reopen round trips.
+- Grok acceptance also runs the available native plugin validate/inspect command and
+  camelCase Hook fixtures.

package/docs/SKILL-AUTHORING.md

@@ -37,8 +37,8 @@ only from the main workflow or one directly relevant reference.
 ## Language
 
 The standards do not prohibit Chinese. Ultra source prompts use English as a project
-policy because one source is transformed for Claude Code, Codex, OpenCode, and Kimi
-Code. The host or user instruction controls the response language; a workflow must not
+policy because one source is transformed for Claude Code, Codex, OpenCode, Kimi Code,
+and Grok Build. The host or user instruction controls the response language; a workflow must not
 hard-code the user's output language unless language is itself part of the task.
 
 Maintainer documentation may use the language appropriate for its audience. English
@@ -72,4 +72,4 @@ against delivered behavior, or independent analyses against authoritative eviden
 5. Are judgments evidence-based rather than threshold-based?
 6. Are commands thin and agents bounded?
 7. Do positive and negative trigger evals cover accidental activation?
-8. Do source, four generated runtimes, and package contents pass validation?
+8. Do source, five generated runtimes, and package contents pass validation?

package/docs/STATE-DB-ACCESS-POLICY.md

@@ -3,10 +3,10 @@
 > Multi-process access contract. Current authority is defined by
 > [`DECISIONS.md`](./DECISIONS.md) and the live database schema.
 
-`.ultra/.runtime/state.db` is the checkout-local lifecycle, index, transition,
-freshness, and coordination authority for baselines, changes, decision threads/items, tasks,
-workflow runs/steps, events, sessions, incidents, projections, telemetry, and spec
-references (D18, D52, D54). Registered digest-bound files carry semantic and evidence
+`.ultra/.runtime/state.db` is the checkout-local persistence and safety authority for
+baselines, Changes, normalized Decision Records, Stage Checkpoints, Context Envelopes,
+Worker Packets, Tasks, events, Sessions, incidents, projections, telemetry, and spec
+references. Registered digest-bound files carry semantic and evidence
 bodies; the DB owns their references and current digests. The tracked
 `.ultra/tasks/tasks.json` is an MCP-published handoff checkpoint, not a parallel live
 writer. Every process that touches the DB must follow the rules below; deviations are
@@ -26,7 +26,7 @@ bugs.
   but never `UPDATE` / `DELETE`.
 
 The CLI may indirectly mutate ordinary workflow tables by spawning the MCP server over
-stdio and calling `task.update`, `session.spawn`, etc. — but the actual
+stdio and calling the public `ultra.*` kernel — but the actual
 SQLite write is performed by the MCP server's writer connection. The documented
 exceptions are initial schema/baseline creation, migration, and explicitly
 authorized backup-first doctor recovery. The CLI never provides a parallel raw
@@ -36,8 +36,8 @@ The append-only carve-out for `events` exists because `events.id INTEGER
 PRIMARY KEY AUTOINCREMENT` makes concurrent inserts collision-free under
 WAL + `busy_timeout`. This lets hooks and short-lived CLI invocations
 record audit observations without paying the cost of a full MCP round trip.
-It does not grant lifecycle authority: external writers and public
-`task.append_event` use the published observation allowlist, while lifecycle event
+It does not grant lifecycle authority: external writers use the published observation
+allowlist, while lifecycle event
 names are emitted only inside the mutation that owns the corresponding state change.
 Consumers must verify mutable rows rather than infer success from an event name.
 
@@ -74,16 +74,18 @@ resolve the mount/runtime constraint before retrying.
 
 | Table              | Writer of record                                      |
 |--------------------|--------------------------------------------------------|
-| `baselines`        | MCP server (`baseline.start` / `baseline.record` / `baseline.converge`); initialization and legacy-projection migration may create only the first draft or compatibility row |
-| `tasks`            | MCP server (`task.create` / `task.update` / `task.delete`) |
-| `changes`          | MCP server (`change.create` / `change.update` / `change.converge` / `change.archive`) |
-| `decision_threads`, `decision_items` | MCP server (`decision.thread_start` / `decision.open` / `decision.resolve` / `decision.delegate` / `decision.defer` / `decision.supersede` / `decision.complete` / `decision.checkpoint`); pending recovery state, normalized accepted intent, durable effects, typed applied references, lifecycle completion, and optional artifact checkpoints are stored, never UI receipts, prompts, or transcripts |
-| `workflow_runs`, `workflow_steps` | MCP server (`workflow.start` / `workflow.step` / `workflow.complete`); skills provide evidence inputs but never write rows directly |
-| `artifacts`, `artifact_edges` | MCP server (`artifact.record`); workflow-owned registration may use the same internal registry transaction |
-| `context_snapshots`, `spec_learning_candidates`, `trace_links` | MCP server through change lifecycle tools |
+| `baselines`        | MCP server through `ultra.record`, `ultra.checkpoint`, and `ultra.archive`; initialization and legacy migration may create only the first draft or compatibility row |
+| `tasks`            | MCP server through `ultra.record`, `ultra.checkpoint`, and `ultra.sync` |
+| `changes`          | MCP server through `ultra.record`, `ultra.checkpoint`, and `ultra.archive` |
+| `decision_records` | MCP server through `ultra.record`; normalized accepted intent and applied references are stored, never UI receipts, prompts, or transcripts |
+| `stage_checkpoints` | MCP server through `ultra.checkpoint`; mutable drafts and immutable accepted/superseded revisions, never fixed reasoning steps |
+| `context_envelopes`, `worker_packets` | MCP server through `ultra.context`, `ultra.checkpoint`, and `ultra.session`; exact digest-bound handoff authority |
+| `decision_threads`, `decision_items`, `workflow_runs`, `workflow_steps` | legacy history retained for migration and audit; no current public writer or authorization role |
+| `artifacts`, `artifact_edges` | MCP server through `ultra.record` and checkpoint-owned registration |
+| `context_snapshots`, `spec_learning_candidates`, `trace_links` | MCP server through `ultra.record` and `ultra.checkpoint` |
 | `incidents`, `projection_jobs`, `event_consumers`, `circuit_breaker` | MCP server; backup-first doctor recovery may perform only documented mechanical transitions |
-| `events`           | MCP server for lifecycle events; approved processes and `task.append_event` for allowlisted append-only observations |
-| `sessions`         | MCP server (`session.spawn` / `session.close` / `session.heartbeat`); orchestrator may write status transitions |
+| `events`           | MCP server for lifecycle events; approved processes and `ultra.record` for allowlisted append-only observations |
+| `sessions`         | MCP server through `ultra.session`; orchestrator may write status transitions |
 | `telemetry`        | MCP server (collected from tool-call wrappers); orchestrator may dump bulk samples |
 | `specs_refs`       | MCP server (rebuilt on `spec_changed` event); orchestrator may rebuild |
 | `migration_history`| schema initializer and `ultra-tools migrate` or doctor repair |
@@ -91,8 +93,8 @@ resolve the mount/runtime constraint before retrying.
 
 ## 5. Git team checkpoint
 
-Only `task.ledger_publish` may derive `.ultra/tasks/tasks.json` from SQLite, and only
-`task.ledger_import` may merge it into SQLite. Server startup performs one import after
+Only `ultra.sync { action: publish }` may derive `.ultra/tasks/tasks.json` from SQLite,
+and only `ultra.sync { action: import }` may merge it into SQLite. Server startup performs one import after
 opening project authority; later pulls in a long-running process require an explicit
 import. The same checkpoint is idempotent and must not append an event again.
 
@@ -142,8 +144,11 @@ The contract on this page is enforced by:
   no duplicates.
 - `mcp-server/tests/state-ops.test.cjs` — immediate transactions, rollback,
   status transitions, task contracts, and event coupling.
-- `mcp-server/lib/workflow-state.test.cjs` — ordered workflow transitions,
-  evidence/output requirements, blocking/resume, and cross-stage gates.
+- `mcp-server/lib/stage-checkpoints.test.cjs` — mutable drafts, immutable accepted
+  revisions, supersession, and report-first diagnostics.
+- `mcp-server/lib/context-envelope.test.cjs` and
+  `mcp-server/lib/worker-packet.test.cjs` — content-addressed Context and immutable
+  delegated handoff.
 - `mcp-server/lib/task-ledger.test.cjs` — portable-field filtering, digest ancestry,
   idempotent import, baseline/Change/task fast-forward and conflict behavior, legacy
   backup, and active-session protection.