ultra-builder-pro-cli 0.23.0 → 0.24.1

package/adapters/opencode.js

@@ -3,6 +3,7 @@
 /** Build a native OpenCode Ultra Builder Pro plugin. */
 
 const fs = require('node:fs');
+const crypto = require('node:crypto');
 const os = require('node:os');
 const path = require('node:path');
 
@@ -14,7 +15,11 @@ const {
   removeTree,
   writeAtomic,
 } = require('./_shared/file-ops.cjs');
-const { buildMcpRuntime } = require('./_shared/codex-assets.cjs');
+const {
+  applyNativeDoctor,
+  buildMcpRuntime,
+  mcpCommand,
+} = require('./_shared/codex-assets.cjs');
 const { adaptInteractionGuidance } = require('./_shared/interaction-contract.cjs');
 const provenance = require('./_shared/provenance.cjs');
 const {
@@ -233,7 +238,7 @@ function removeEmptyDir(dir) {
   if (fs.readdirSync(dir).length === 0) fs.rmdirSync(dir);
 }
 
-function copyCommands(repoRoot, target) {
+function copyCommands(repoRoot, target, publishedTarget = target) {
   const output = path.join(target, 'commands');
   ensureDir(output);
   removeStaleManagedFiles(output, COMMAND_NAMES.map((name) => `${name}.md`));
@@ -242,7 +247,7 @@ function copyCommands(repoRoot, target) {
     const file = `${name}.md`;
     const source = path.join(repoRoot, 'commands', file);
     if (!fs.existsSync(source)) throw new Error(`missing allowlisted OpenCode command: ${file}`);
-    const workflowFile = path.join(target, BUNDLE_DIR, 'workflows', name, 'SKILL.md');
+    const workflowFile = path.join(publishedTarget, BUNDLE_DIR, 'workflows', name, 'SKILL.md');
     const transformed = withManagedMarker(
       openCodeCommandTransform(fs.readFileSync(source), file, name, workflowFile),
     );
@@ -341,13 +346,13 @@ const TEAM_TASK_LEDGER = ".ultra/tasks/tasks.json";
 const LIVE_TASK_PROJECTION = ".ultra/.runtime/projections/tasks.json";
 const NODE_BINARY = ${JSON.stringify(process.execPath)};
 const PLUGIN_DIR = path.dirname(fileURLToPath(import.meta.url));
-const BREADCRUMB_CLI = path.resolve(
-  PLUGIN_DIR, "..", ${JSON.stringify(BUNDLE_DIR)}, "runtime", "breadcrumb.cjs",
+const CONTEXT_CLI = path.resolve(
+  PLUGIN_DIR, "..", ${JSON.stringify(BUNDLE_DIR)}, "runtime", "hook-context.cjs",
 );
 
 function readUltraContext(directory) {
   try {
-    const raw = execFileSync(NODE_BINARY, [BREADCRUMB_CLI, "--discover", directory], {
+    const raw = execFileSync(NODE_BINARY, [CONTEXT_CLI, "--discover", directory], {
       cwd: directory,
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"],
@@ -356,12 +361,10 @@ function readUltraContext(directory) {
     const value = JSON.parse(raw);
     const root = value?.root;
     if (typeof root !== "string" || !root) return null;
-    // A canonical breadcrumb is injectable only while DB authority proves an active workflow.
-    if (!value?.breadcrumb || !value.breadcrumb.workflow
-        || typeof value.text !== "string" || !value.text) {
-      return { root, breadcrumb: null, text: null };
+    if (!value?.context || typeof value.text !== "string" || !value.text) {
+      return { root, context: null, text: null };
     }
-    return { root, breadcrumb: value.breadcrumb, text: value.text };
+    return { root, context: value.context, text: value.text };
   } catch (error) {
     const detail = String(error?.stderr || error?.message || error);
     if (/RUNTIME_(?:STATE_CONFLICT|PATH_UNSAFE|ORPHAN_SIDECAR|ROOT_INVALID|AUTHORITY_MISMATCH)|both legacy .*runtime.*state\\.db/i.test(detail)) {
@@ -446,37 +449,116 @@ export const UltraBuilderProPlugin = async ({ directory, worktree }) => {
 `;
 }
 
-function install(ctx = {}) {
-  const target = resolveTarget(ctx);
-  const repoRoot = resolveRepoRoot(ctx);
-  ensureDir(target);
-  const report = { target, copied: {}, config: { updated: false } };
-  preflightAssets(repoRoot, target);
-  report.copied.commands = copyCommands(repoRoot, target);
-  report.copied.skills = copySkills(repoRoot, target);
-  report.copied.agents = copyAgents(repoRoot, target);
+function createInstallTransaction() {
+  const changes = [];
+  const backups = [];
+  const backupPath = (target) => path.join(
+    path.dirname(target),
+    `.${path.basename(target)}.ubp-backup-${crypto.randomUUID()}`,
+  );
+  return {
+    replaceFile(source, target) {
+      let previous = null;
+      try {
+        const stat = fs.statSync(target);
+        previous = { contents: fs.readFileSync(target), mode: stat.mode & 0o7777 };
+      } catch (error) {
+        if (error.code !== 'ENOENT') throw error;
+      }
+      writeAtomic(target, fs.readFileSync(source));
+      changes.push({ type: 'file', target, previous });
+    },
+    replaceTree(source, target) {
+      ensureDir(path.dirname(target));
+      let backup = null;
+      if (fs.existsSync(target)) {
+        backup = backupPath(target);
+        fs.renameSync(target, backup);
+        backups.push(backup);
+      }
+      try {
+        fs.renameSync(source, target);
+      } catch (error) {
+        if (backup && fs.existsSync(backup)) fs.renameSync(backup, target);
+        throw error;
+      }
+      changes.push({ type: 'tree', target, backup });
+    },
+    removeFile(target) {
+      if (!fs.existsSync(target)) return;
+      const stat = fs.statSync(target);
+      const previous = { contents: fs.readFileSync(target), mode: stat.mode & 0o7777 };
+      fs.unlinkSync(target);
+      changes.push({ type: 'file', target, previous });
+    },
+    removeTree(target) {
+      if (!fs.existsSync(target)) return;
+      const backup = backupPath(target);
+      fs.renameSync(target, backup);
+      backups.push(backup);
+      changes.push({ type: 'tree', target, backup, removed: true });
+    },
+    commit() {
+      for (const backup of backups) {
+        if (fs.existsSync(backup)) removeTree(backup);
+      }
+      changes.length = 0;
+      backups.length = 0;
+    },
+    rollback() {
+      const errors = [];
+      for (const change of changes.reverse()) {
+        try {
+          if (change.type === 'file') {
+            if (change.previous) {
+              writeAtomic(change.target, change.previous.contents);
+              fs.chmodSync(change.target, change.previous.mode);
+            } else if (fs.existsSync(change.target)) {
+              fs.unlinkSync(change.target);
+            }
+          } else {
+            if (!change.removed && fs.existsSync(change.target)) removeTree(change.target);
+            if (change.backup && fs.existsSync(change.backup)) {
+              fs.renameSync(change.backup, change.target);
+            }
+          }
+        } catch (error) {
+          errors.push(error);
+        }
+      }
+      if (errors.length > 0) {
+        throw new AggregateError(errors, 'OpenCode install rollback failed');
+      }
+    },
+  };
+}
 
-  ensureDir(path.join(target, 'plugins'));
-  writeAtomic(path.join(target, 'plugins', 'ultra-builder-pro.js'), pluginSource());
+function buildStaging(repoRoot, staging, target) {
+  const report = { target, copied: {}, config: { updated: false } };
+  report.copied.commands = copyCommands(repoRoot, staging, target);
+  report.copied.skills = copySkills(repoRoot, staging);
+  report.copied.agents = copyAgents(repoRoot, staging);
+  ensureDir(path.join(staging, 'plugins'));
+  writeAtomic(path.join(staging, 'plugins', 'ultra-builder-pro.js'), pluginSource());
   report.copied.plugins = ['ultra-builder-pro.js'];
 
-  const bundleRoot = path.join(target, BUNDLE_DIR);
-  if (fs.existsSync(bundleRoot)) removeTree(bundleRoot);
+  const bundleRoot = path.join(staging, BUNDLE_DIR);
   ensureDir(bundleRoot);
   report.copied.workflows = copyPrivateWorkflows(repoRoot, bundleRoot);
-  const runtime = buildMcpRuntime(repoRoot, bundleRoot, { runtime: 'opencode' });
+  buildMcpRuntime(repoRoot, bundleRoot, { runtime: 'opencode' });
   markManaged(bundleRoot, { adapter: 'opencode', asset: 'runtime-bundle' });
   const configFile = path.join(target, 'opencode.json');
   const existing = readJsonSafe(configFile, { rescue: true });
   const mcp = { ...(existing.mcp || {}) };
+  const command = mcpCommand(path.join(target, BUNDLE_DIR, 'runtime', 'launch.cjs'));
   mcp[MCP_SERVER_NAME] = {
     type: 'local',
     enabled: true,
-    command: [process.execPath, runtime.launcher],
+    command: [command.command, ...command.args],
   };
   const next = { ...existing, mcp };
   delete next[LEGACY_SENTINEL_KEY];
-  writeAtomic(configFile, JSON.stringify(next, null, 2) + '\n');
+  writeAtomic(path.join(staging, 'opencode.json'), JSON.stringify(next, null, 2) + '\n');
   report.config.updated = true;
   const source = provenance.packageSource(repoRoot);
   const bundleAssets = provenance.assetRefsForTree('config', bundleRoot, {
@@ -491,6 +573,7 @@ function install(ctx = {}) {
     adapter: 'opencode',
     ...source,
     roots: { config: target },
+    assetRoots: { config: staging },
     assets: [
       ...report.copied.commands.map((file) => ({ root: 'config', path: path.join('commands', file) })),
       ...report.copied.skills.map((file) => ({ root: 'config', path: path.join('skills', file) })),
@@ -503,13 +586,106 @@ function install(ctx = {}) {
       host_plugin: { root: 'config', path: path.join('plugins', 'ultra-builder-pro.js') },
       mcp_config: { root: 'config', path: 'opencode.json' },
       mcp_launcher: { root: 'config', path: path.join(BUNDLE_DIR, 'runtime', 'launch.cjs') },
+      native_runtime: { root: 'config', path: path.join(BUNDLE_DIR, 'runtime', 'native-runtime.json') },
+      context_envelope_helper: { root: 'config', path: path.join(BUNDLE_DIR, 'runtime', 'hook-context.cjs') },
       hook_event_helper: { root: 'config', path: path.join(BUNDLE_DIR, 'runtime', 'hook-event.cjs') },
     },
   });
-  report.provenance.file = provenanceFile;
+  report.provenance.file = path.join(target, BUNDLE_DIR, PROVENANCE_FILE);
   return report;
 }
 
+function managedTextFiles(dir) {
+  if (!fs.existsSync(dir)) return [];
+  return fs.readdirSync(dir, { withFileTypes: true })
+    .filter((entry) => entry.isFile() && isManagedTextFile(path.join(dir, entry.name)))
+    .map((entry) => entry.name);
+}
+
+function managedSkillDirs(root) {
+  if (!fs.existsSync(root)) return [];
+  return fs.readdirSync(root, { withFileTypes: true })
+    .filter((entry) => entry.isDirectory() && isManaged(path.join(root, entry.name)))
+    .map((entry) => entry.name);
+}
+
+function publishStaging(staging, target, report) {
+  const transaction = createInstallTransaction();
+  const commandNames = report.copied.commands;
+  const agentNames = report.copied.agents;
+  const skillNames = discoverableSkillNames();
+  try {
+    for (const file of commandNames) {
+      transaction.replaceFile(
+        path.join(staging, 'commands', file),
+        path.join(target, 'commands', file),
+      );
+    }
+    for (const stale of managedTextFiles(path.join(target, 'commands'))) {
+      if (!commandNames.includes(stale)) {
+        transaction.removeFile(path.join(target, 'commands', stale));
+      }
+    }
+    for (const name of skillNames) {
+      transaction.replaceTree(
+        path.join(staging, 'skills', name),
+        path.join(target, 'skills', name),
+      );
+    }
+    for (const stale of managedSkillDirs(path.join(target, 'skills'))) {
+      if (!skillNames.includes(stale)) {
+        transaction.removeTree(path.join(target, 'skills', stale));
+      }
+    }
+    for (const file of agentNames) {
+      transaction.replaceFile(
+        path.join(staging, 'agents', file),
+        path.join(target, 'agents', file),
+      );
+    }
+    for (const stale of managedTextFiles(path.join(target, 'agents'))) {
+      if (!agentNames.includes(stale)) {
+        transaction.removeFile(path.join(target, 'agents', stale));
+      }
+    }
+    transaction.replaceFile(
+      path.join(staging, 'plugins', 'ultra-builder-pro.js'),
+      path.join(target, 'plugins', 'ultra-builder-pro.js'),
+    );
+    transaction.replaceTree(
+      path.join(staging, BUNDLE_DIR),
+      path.join(target, BUNDLE_DIR),
+    );
+    transaction.replaceFile(
+      path.join(staging, 'opencode.json'),
+      path.join(target, 'opencode.json'),
+    );
+    transaction.commit();
+  } catch (error) {
+    try {
+      transaction.rollback();
+    } catch (rollbackError) {
+      throw new AggregateError([error, rollbackError], 'OpenCode install and rollback both failed');
+    }
+    throw error;
+  }
+}
+
+function install(ctx = {}) {
+  const target = resolveTarget(ctx);
+  const repoRoot = resolveRepoRoot(ctx);
+  ensureDir(target);
+  preflightAssets(repoRoot, target);
+  const staging = fs.mkdtempSync(path.join(path.dirname(target), '.ubp-opencode-staging-'));
+  try {
+    const report = buildStaging(repoRoot, staging, target);
+    publishStaging(staging, target, report);
+    return report;
+  } finally {
+    if (fs.existsSync(staging)) removeTree(staging);
+  }
+}
+
 function doctor(ctx = {}) {
   const target = resolveTarget(ctx);
   const repoRoot = resolveRepoRoot(ctx);
@@ -525,11 +701,14 @@ function doctor(ctx = {}) {
   try {
     const config = readJsonSafe(configFile);
     const entry = config.mcp && config.mcp[MCP_SERVER_NAME];
+    const command = mcpCommand(expectedLauncher);
     registrationOk = entry?.type === 'local'
       && entry.enabled === true
       && Array.isArray(entry.command)
-      && entry.command[0] === process.execPath
-      && entry.command[1] === expectedLauncher;
+      && JSON.stringify(entry.command) === JSON.stringify([
+        command.command,
+        ...command.args,
+      ]);
   } catch (error) {
     report.issues.push({ code: 'MCP_REGISTRATION_INVALID', message: error.message });
   }
@@ -541,8 +720,7 @@ function doctor(ctx = {}) {
     });
   }
   report.checks.registration = { status: registrationOk ? 'pass' : 'fail' };
-  if (report.status !== 'missing') report.status = report.issues.length === 0 ? 'healthy' : 'degraded';
-  return report;
+  return applyNativeDoctor(report, path.join(target, BUNDLE_DIR, 'runtime'));
 }
 
 function uninstall(ctx = {}) {

package/agents/code-reviewer.md

@@ -19,6 +19,8 @@ evidence. Default to read-only analysis.
 
 1. Resolve the exact diff, file set, HEAD, intended outcome, and repository guidance.
    Report an empty or ambiguous scope instead of expanding it silently.
+   For an Ultra delegation, first validate the immutable Worker Packet and echo its
+   exact `packet_digest` in the assigned output.
 2. Trace changed behavior from its entry point to state, side effects, errors, and a
    real consumer.
 3. Follow `code-review-expert`. Load its security, integration, design, or removal
@@ -37,5 +39,5 @@ fix, modify only findings within the accepted scope, preserve unrelated changes,
 rerun the checks invalidated by each edit. Judgment-heavy or scope-expanding fixes
 return to the primary agent for a decision.
 
-Use the current checkout and parent-supplied context only. Return a concise review,
-not raw tool output.
+Use the current checkout and parent-supplied packet only. Do not call Ultra MCP write
+tools. Return a concise review, not raw tool output.

package/agents/debugger.md

@@ -15,6 +15,8 @@ that violates the intended contract.
 
 1. Read the complete error and reproduce the smallest observable symptom with the exact
    command or action.
+   For an Ultra delegation, validate the immutable Worker Packet before investigation
+   and echo its exact `packet_digest` in the assigned output.
 2. Inspect the relevant recent diff, configuration, dependency, and runtime boundaries.
 3. Trace the bad value or state backward through callers and side effects. Compare a
    nearby working path only when it exercises the same contract.
@@ -34,4 +36,5 @@ from another checkout as evidence.
 If three distinct fix attempts expose different underlying failures, stop patching and
 return the evidence as an architectural boundary problem. For an Ultra incident, also
 provide the reproduction, tested hypotheses, earliest bad state, regression signal,
-and recovery path needed by the durable diagnosis artifact.
+and recovery path needed by the durable diagnosis artifact. Do not call Ultra MCP
+write tools; the parent model owns registration.

package/agents/review-code.md

@@ -17,7 +17,7 @@ transcript into the parent conversation.
 
 ## Required input
 
-- `SESSION_PATH` and `OUTPUT_FILE`;
+- immutable `WORKER_PACKET`, its `PACKET_DIGEST`, `SESSION_PATH`, and `OUTPUT_FILE`;
 - `SCHEMA_PATH` resolved by the parent from the active review Skill;
 - exact `DIFF_RANGE` and `DIFF_FILES`;
 - reviewed full HEAD;
@@ -27,6 +27,8 @@ transcript into the parent conversation.
 
 1. Validate the input scope and inspect only the diff plus callers, contracts, tests,
    and configuration needed to establish a finding.
+   Stop with an incomplete acknowledgement when the packet digest, output path, HEAD,
+   scope, or schema differs from the packet.
 2. Trace changed behavior to a production entry point and consumer.
 3. Apply `code-review-expert`, `security-rules`, and `integration-rules` only where their
    risk is present.
@@ -34,7 +36,8 @@ transcript into the parent conversation.
    observability, compatibility, and reachability.
 5. Report only evidence-backed defects with plausible triggers and concrete impact.
    Deduplicate by root cause and keep line ranges tight.
-6. Write `ultra-review-findings-v2` following `SCHEMA_PATH`.
+6. Write `ultra-review-findings-v2` following `SCHEMA_PATH`, including the exact
+   `packet_digest`.
 
 Use `axis: engineering_standards`. After the file is valid, return exactly:
 
@@ -42,4 +45,5 @@ Use `axis: engineering_standards`. After the file is valid, return exactly:
 Wrote N findings (P0:X P1:X P2:X P3:X) to <filepath>
 ```
 
-Do not modify source, task state, or projections.
+Do not modify source, call Ultra MCP write tools, change task state, or edit another
+worker's artifact.

package/agents/review-comments.md

@@ -12,8 +12,9 @@ Write findings to the assigned JSON file and return only a file acknowledgement.
 
 ## Workflow
 
-1. Validate `SESSION_PATH`, `OUTPUT_FILE`, `SCHEMA_PATH`, `DIFF_RANGE`, `DIFF_FILES`,
-   HEAD, and the supplied public-contract context.
+1. Validate the immutable `WORKER_PACKET`, exact `PACKET_DIGEST`, `SESSION_PATH`,
+   `OUTPUT_FILE`, `SCHEMA_PATH`, `DIFF_RANGE`, `DIFF_FILES`, HEAD, and the supplied
+   public-contract context. Stop incomplete when any value differs from the packet.
 2. Inspect comments, docstrings, examples, annotations, and API documentation changed
    by the diff. Read the associated implementation and contract before judging them.
 3. Report factual contradictions, stale names or behavior, unsafe operational advice,
@@ -23,7 +24,8 @@ Write findings to the assigned JSON file and return only a file acknowledgement.
    to investigate, not automatic defects. Calibrate severity to the reachable impact.
 5. Ignore wording preferences and harmless redundancy. Keep line ranges tight and
    propose the smallest correction that restores an accurate contract.
-6. Write `ultra-review-findings-v2` following `SCHEMA_PATH`.
+6. Write `ultra-review-findings-v2` following `SCHEMA_PATH`, including the exact
+   `packet_digest`.
 
 Use `axis: engineering_standards` and category `comments`. After valid output, return
 exactly:
@@ -32,4 +34,5 @@ exactly:
 Wrote N findings (P0:X P1:X P2:X P3:X) to <filepath>
 ```
 
-Do not modify source, task state, or projections.
+Do not modify source, call Ultra MCP write tools, change task state, or edit another
+worker's artifact.

package/agents/review-coordinator.md

@@ -13,15 +13,17 @@ rewrite a specialist's severity.
 
 ## Required input
 
-- `SESSION_PATH`, review mode, reviewed HEAD, diff range, and expected worker list with
-  selection or skip rationale;
+- immutable coordinator `WORKER_PACKET`, exact `PACKET_DIGEST`, `SESSION_PATH`, review
+  mode, reviewed HEAD, diff range, and expected worker list with selection or skip
+  rationale;
 - `SCHEMA_PATH` resolved by the parent from the active review Skill;
 - one complete `spec_fidelity` artifact;
 - every selected `engineering_standards` artifact.
 
 ## Workflow
 
-1. Read the artifact contract at `SCHEMA_PATH`.
+1. Validate the packet digest, scope, HEAD, output paths, and schema, then read the
+   artifact contract at `SCHEMA_PATH`. Stop incomplete when any value differs.
 2. Parse every expected artifact. Reject stale HEAD or range, malformed JSON, wrong
    axis, duplicate finding ids, and missing required fields. Record missing or invalid
    workers as limitations instead of silently continuing as complete.
@@ -39,9 +41,10 @@ rewrite a specialist's severity.
 7. Record the review mode and every selected or skipped worker with its supplied
    scope-specific rationale. The selection must match completed, failed, and skipped
    worker state exactly.
-8. Write `SUMMARY.json` as `ultra-review-summary-v2` and a concise `SUMMARY.md` with
-   the two axis verdicts, blocking findings, limitations, positive observations, and
-   artifact paths. Validate both files before acknowledging completion.
+8. Write `SUMMARY.json` as `ultra-review-summary-v2`, including the exact
+   `packet_digest`, and a concise `SUMMARY.md` with the two axis verdicts, blocking
+   findings, limitations, positive observations, and artifact paths. Validate both
+   files before acknowledging completion.
 
 Return exactly:
 
@@ -49,4 +52,5 @@ Return exactly:
 Coordination complete: <VERDICT> — P0:X P1:X P2:X P3:X — <SUMMARY.json path>
 ```
 
-Do not modify source, task state, projections, or specialist artifacts.
+Do not modify source, call Ultra MCP write tools, change task state or projections, or
+edit specialist artifacts.

package/agents/review-design.md

@@ -12,8 +12,10 @@ Write findings to the assigned JSON file and return only a file acknowledgement.
 
 ## Workflow
 
-1. Validate `SESSION_PATH`, `OUTPUT_FILE`, `SCHEMA_PATH`, `DIFF_RANGE`, `DIFF_FILES`,
-   HEAD, and the supplied architecture and acceptance context.
+1. Validate the immutable `WORKER_PACKET`, exact `PACKET_DIGEST`, `SESSION_PATH`,
+   `OUTPUT_FILE`, `SCHEMA_PATH`, `DIFF_RANGE`, `DIFF_FILES`, HEAD, and the supplied
+   architecture and acceptance context. Stop incomplete when any value differs from
+   the packet.
 2. Trace changed types and modules through their real constructors, callers, state,
    side effects, and consumers.
 3. Check whether important invariants can be bypassed, ownership is ambiguous, an
@@ -24,7 +26,8 @@ Write findings to the assigned JSON file and return only a file acknowledgement.
 5. Prefer a focused before/after remediation when simplification is supported by the
    current use cases. Do not propose speculative frameworks or abstractions.
 6. Calibrate severity to the reachable impact and write
-   `ultra-review-findings-v2` following `SCHEMA_PATH`.
+   `ultra-review-findings-v2` following `SCHEMA_PATH`, including the exact
+   `packet_digest`.
 
 Use `axis: engineering_standards` and the narrowest applicable category, such as
 `architecture`, `type-design`, or `complexity`. After valid output, return exactly:
@@ -33,4 +36,5 @@ Use `axis: engineering_standards` and the narrowest applicable category, such as
 Wrote N findings (P0:X P1:X P2:X P3:X) to <filepath>
 ```
 
-Do not modify source, task state, or projections.
+Do not modify source, call Ultra MCP write tools, change task state, or edit another
+worker's artifact.

package/agents/review-errors.md

@@ -14,8 +14,10 @@ Write findings to the assigned JSON file and return only a file acknowledgement.
 
 ## Workflow
 
-1. Validate `SESSION_PATH`, `OUTPUT_FILE`, `SCHEMA_PATH`, `DIFF_RANGE`, `DIFF_FILES`,
-   HEAD, and the supplied runtime and acceptance context.
+1. Validate the immutable `WORKER_PACKET`, exact `PACKET_DIGEST`, `SESSION_PATH`,
+   `OUTPUT_FILE`, `SCHEMA_PATH`, `DIFF_RANGE`, `DIFF_FILES`, HEAD, and the supplied
+   runtime and acceptance context. Stop incomplete when any value differs from the
+   packet.
 2. Trace changed exceptions, error results, retries, fallbacks, optional values,
    cancellation, timeouts, and asynchronous work from trigger to caller-visible state.
 3. Identify handlers that swallow a required failure, report false success, lose
@@ -27,7 +29,8 @@ Write findings to the assigned JSON file and return only a file acknowledgement.
    generic messages as investigation signals. Severity follows reachable impact, not
    the surface pattern.
 6. Check the corresponding recovery and observability path, then write
-   `ultra-review-findings-v2` following `SCHEMA_PATH`.
+   `ultra-review-findings-v2` following `SCHEMA_PATH`, including the exact
+   `packet_digest`.
 
 Use `axis: engineering_standards` and category `error-handling` or `security`. After
 valid output, return exactly:
@@ -36,4 +39,5 @@ valid output, return exactly:
 Wrote N findings (P0:X P1:X P2:X P3:X) to <filepath>
 ```
 
-Do not modify source, task state, or projections.
+Do not modify source, call Ultra MCP write tools, change task state, or edit another
+worker's artifact.

package/agents/review-spec.md

@@ -13,9 +13,10 @@ this axis independent from general engineering quality.
 
 ## Workflow
 
-1. Validate `SESSION_PATH`, `OUTPUT_FILE`, `SCHEMA_PATH`, `DIFF_RANGE`, `DIFF_FILES`,
-   HEAD, and the supplied intent, accepted delta, acceptance criteria, and public-seam
-   context.
+1. Validate the immutable `WORKER_PACKET`, exact `PACKET_DIGEST`, `SESSION_PATH`,
+   `OUTPUT_FILE`, `SCHEMA_PATH`, `DIFF_RANGE`, `DIFF_FILES`, HEAD, and the supplied
+   intent, accepted delta, acceptance criteria, and public-seam context. Stop
+   incomplete when any value differs from the packet.
 2. Read the changed behavior and only the callers, tests, docs, and contracts needed to
    determine whether each accepted requirement is actually delivered.
 3. Map every acceptance criterion to current executable or source evidence. Check for
@@ -24,7 +25,8 @@ this axis independent from general engineering quality.
 4. Do not report style, generic maintainability, or preferred architecture on this
    axis. Report only a concrete mismatch between accepted intent and delivered behavior.
 5. Calibrate severity to the user-visible or delivery impact and write
-   `ultra-review-findings-v2` following `SCHEMA_PATH`.
+   `ultra-review-findings-v2` following `SCHEMA_PATH`, including the exact
+   `packet_digest`.
 
 Use `axis: spec_fidelity` and the narrowest category, such as `acceptance-gap`,
 `scope-drift`, `spec-drift`, or `public-contract`. After valid output, return exactly:
@@ -33,4 +35,5 @@ Use `axis: spec_fidelity` and the narrowest category, such as `acceptance-gap`,
 Wrote N findings (P0:X P1:X P2:X P3:X) to <filepath>
 ```
 
-Do not modify source, task state, specifications, or projections.
+Do not modify source, call Ultra MCP write tools, change task state, specifications,
+or another worker's artifact.

package/agents/review-tests.md

@@ -14,8 +14,9 @@ Write findings to the assigned JSON file and return only a file acknowledgement.
 
 ## Workflow
 
-1. Validate `SESSION_PATH`, `OUTPUT_FILE`, `SCHEMA_PATH`, `DIFF_RANGE`, `DIFF_FILES`,
-   HEAD, and the supplied acceptance context.
+1. Validate the immutable `WORKER_PACKET`, exact `PACKET_DIGEST`, `SESSION_PATH`,
+   `OUTPUT_FILE`, `SCHEMA_PATH`, `DIFF_RANGE`, `DIFF_FILES`, HEAD, and the supplied
+   acceptance context. Stop incomplete when any value differs from the packet.
 2. Map each changed behavior and acceptance claim to an executable test or check.
 3. Follow `testing-rules` to determine what the evidence proves across functional,
    persistence, protocol, UI, and failure boundaries that matter to this diff.
@@ -25,7 +26,8 @@ Write findings to the assigned JSON file and return only a file acknowledgement.
 5. Detect missing error or state-transition coverage, ineffective assertions, hidden
    skips, flaky assumptions, and tests that never reach the changed code.
 6. Calibrate severity to the escaped product risk and write
-   `ultra-review-findings-v2` following `SCHEMA_PATH`.
+   `ultra-review-findings-v2` following `SCHEMA_PATH`, including the exact
+   `packet_digest`.
 
 Use `axis: engineering_standards` and category `test-quality`. After valid output,
 return exactly:
@@ -34,4 +36,5 @@ return exactly:
 Wrote N findings (P0:X P1:X P2:X P3:X) to <filepath>
 ```
 
-Do not modify tests, production code, task state, or projections.
+Do not modify tests or production code, call Ultra MCP write tools, change task state,
+or edit another worker's artifact.

package/agents/tdd-runner.md

@@ -17,6 +17,8 @@ Run tests and analyze their evidence. This assignment is read-only.
 1. Resolve the requested scope, checkout, repository guidance, and canonical command
    from package scripts, CI configuration, or framework files. Ask the parent to
    resolve ambiguity when different commands prove different contracts.
+   For an Ultra delegation, validate the immutable Worker Packet and echo its exact
+   `packet_digest` in the assigned output.
 2. Run the exact command without weakening flags, skipping failures, or changing test
    configuration. Capture exit code, duration, pass/fail/skip counts, and coverage only
    when the runner reports it.
@@ -31,5 +33,6 @@ Run tests and analyze their evidence. This assignment is read-only.
    failures, environment limitations, and residual coverage gaps. Do not paste the full
    runner transcript unless the parent requests it.
 
-Do not edit tests, production code, task state, or projections. Do not claim a green
-suite when the command did not complete successfully.
+Do not edit tests or production code, call Ultra MCP write tools, change task state, or
+edit projections. Do not claim a green suite when the command did not complete
+successfully.