ultra-builder-pro-cli 0.6.0 → 0.7.0

package/.ultra-template/changes/active/.gitkeep

@@ -0,0 +1 @@
+

package/.ultra-template/changes/archive/.gitkeep

@@ -0,0 +1 @@
+

package/CHANGELOG.md

@@ -7,6 +7,58 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.7.0] — 2026-07-17
+
+### Added
+
+- Added `ultra-change` and `ultra-doctor` as native workflows on Claude Code,
+  OpenCode, and Codex. Daily fixes, features, redesigns, and incidents now stay
+  attached to an explicit change packet after the initial baseline delivery.
+- Added seven `change.*` MCP tools and `system.doctor`, advancing the live MCP
+  contract to 29 tools and `.ultra/state.db` to schema `9.0` with 15 tables for
+  changes, artifacts, context snapshots, trace links, incidents, projection
+  jobs, and durable event-consumer cursors.
+- Added deterministic convergence and archive gates for task completion, spec
+  deltas, tests, documentation impact, review evidence, context freshness, and
+  baseline reconciliation.
+
+### Changed
+
+- `task.init_project` now initializes `state.db` immediately and creates active
+  and archived change roots. `tasks.json` remains a generated projection.
+- MCP mutations now commit authority first, enqueue a durable projection job,
+  process it, and expose projection status in MCP metadata instead of silently
+  swallowing projection failures.
+- Session-start and edit hooks now understand initialized baselines and active
+  changes. Health checks surface incidents, projection lag, orphan sessions,
+  and missing change artifacts; direct writes to the task projection remain
+  blocked even outside a command-scoped workflow.
+- Memory and code-graph content are exclusively owned by separately installed
+  providers. Ultra accepts only provider metadata references in compiled change
+  contexts and never stores recalled content, graph payloads, or embeddings.
+
+### Fixed
+
+- Wired spec-staleness consumption, crash recovery, projection processing, and
+  durable cursors into the real orchestrator loop instead of leaving production
+  helpers unconsumed.
+- Kept `intent.md` synchronized with authoritative change updates, linked task
+  status events to their newly assigned change, and included `plan.export`
+  events in projection accounting.
+- Added atomic projection claims and backup-first recovery for failed or stale
+  interrupted jobs so a crashed projector cannot remain invisibly `running`.
+- Kept all three native plugin bundles, MCP launchers, agents, hooks, commands,
+  and user-handbook renderings on one explicit Ultra-owned asset allowlist.
+
+### Removed
+
+- Removed the internal filesystem graph watcher and its dependency; external
+  graph providers own indexing and refresh.
+- Removed the retired command-proxy detector, installer option, managed handbook
+  block, cache artifacts, prompts, configuration, and documentation surface.
+- Stopped publishing the archived pre-CLI manual in the npm package; it remains
+  repository history and cannot be mistaken for an active plugin contract.
+
 ## [0.6.0] — 2026-07-17
 
 ### Changed
@@ -21,9 +73,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Removed
 
-- Removed the Gemini CLI adapter, `--gemini` installer surface, extension and
-  conformance packaging, pricing entries, `gemini-collab`, and all active Ultra
-  prompts and documentation that offered Gemini as an advisor or runtime.
+- Removed the retired fourth-runtime adapter, installer surface, extension and
+  conformance packaging, pricing entries, collaboration companion, and all
+  active Ultra prompts and documentation that offered it as an advisor.
 
 ### Fixed
 
@@ -189,8 +241,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - D49 tech-debt sweep: stale Phase comments (`"scheduled for Phase 1"`,
   `"not implemented in Phase 3.1"`) replaced with accurate `unknown verb`
-  messages; `docs/ROADMAP.md` status table synchronized; `.gitignore`
-  excludes `.rtk/` local filter cache.
+  messages; `docs/ROADMAP.md` status table synchronized.
 
 ### Tests
 
@@ -201,13 +252,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
-- **Phase 6 — monitoring + live code graph** (D44): RTK soft-dependency hook
-  (`adapters/_shared/rtk-detect.cjs`) with `--skip-rtk` flag and install hint;
-  token / cost telemetry with per-runtime pricing table, `telemetry` table +
+- **Phase 6 — monitoring + live code graph** (D44): token / cost telemetry
+  with per-runtime pricing table, `telemetry` table +
   daily `.ultra/telemetry/YYYY-MM-DD.jsonl`; `ultra-tools status --cost`
   panel with by-runtime / by-task / by-session aggregation; chokidar-based
-  code-graph watcher with debounce / awaitWriteFinish / batch thresholds,
-  opt-in via `--with-graph-watcher`.
+  then-experimental incremental graph watcher with debounce and batch thresholds.
 - **Phase 5 — execution resilience** (D43): `recovery.cjs` boot-time orphan
   scan using live PID probe; `circuit_breaker` table with `recordTaskFailure`
   counter and `resetCircuitBreaker` escape hatch; spec-change staleness
@@ -257,7 +306,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   skill manifest, CLI protocol + mapping table; 5 spec validators.
 - **Phase 0 — skeleton**: multi-runtime installer scaffolding.
 
-[Unreleased]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.5.3...HEAD
+[Unreleased]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.7.0...HEAD
+[0.7.0]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.6.0...v0.7.0
+[0.6.0]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.5.3...v0.6.0
 [0.5.3]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.5.2...v0.5.3
 [0.5.2]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.5.1...v0.5.2
 [0.5.1]: https://github.com/rocky2431/ultra-builder-pro-cli/compare/v0.5.0...v0.5.1

package/README.md

@@ -8,7 +8,7 @@ authoritative `.ultra/state.db`.
 
 <div align="center">
 
-[![Version](https://img.shields.io/badge/version-0.6.0-blue)](./CHANGELOG.md)
+[![Version](https://img.shields.io/badge/version-0.7.0-blue)](./CHANGELOG.md)
 [![Tests](https://img.shields.io/badge/tests-passing-brightgreen)](#verification)
 [![License: MIT](https://img.shields.io/badge/license-MIT-green)](./LICENSE)
 [![Node](https://img.shields.io/badge/node-%E2%89%A522-informational)](./package.json)
@@ -25,16 +25,21 @@ authoritative `.ultra/state.db`.
   Codex receive their own command/skill, agent, hook, and MCP representation.
   Install and uninstall are symmetric on every supported host.
 - **Shares state across runtimes.** `.ultra/state.db` (SQLite + WAL) is the
-  authoritative source for tasks, sessions, events, and telemetry. `tasks.json`
-  and context markdown are generated projections, not handwritten.
+  authoritative source for changes, tasks, sessions, events, incidents,
+  projection jobs, and telemetry. `tasks.json` and context markdown are
+  generated projections, not handwritten.
 - **Keeps memory ownership explicit.** Ultra Builder Pro does not collect
   prompts, transcripts, observations, summaries, or cross-session memory.
   Install cloud-mem/claude-mem separately if persistent memory is wanted.
 - **Runs real PRDs end-to-end.** `task.parse_prd` → `lib/topo.cjs` waves →
   `.ultra/execution-plan.json` → parallel worktree sessions → auto-merge back.
-- **Observes without overhead.** Per-task / per-session / per-runtime token
-  and cost telemetry; live code-review-graph watcher on file save;
-  subscribe-events cursor for real-time dashboards.
+- **Keeps daily work convergent.** `/ultra-change` creates a bounded delta and
+  context manifest; `/ultra-deliver` requires docs/test/review evidence and
+  baseline reconciliation before archive. `/ultra-doctor` reports incidents,
+  projection lag, orphan sessions, and backup-first mechanical recovery.
+- **Keeps external context external.** Memory and code-graph providers retain
+  their own content; Ultra stores only provider/project/revision/status metadata
+  references in a compiled change context.
 
 ## Quickstart
 
@@ -57,7 +62,7 @@ npx ultra-builder-pro-cli --all --local --uninstall
 After install, start a new host session/task and point it at the project.
 Claude Code and OpenCode expose native command forms. Codex exposes the same workflows as namespaced plugin
 skills such as `$ultra-builder-pro:ultra-init`, `$ultra-builder-pro:ultra-plan`,
-and `$ultra-builder-pro:ultra-dev`; `command-map.json` records the nine legacy
+and `$ultra-builder-pro:ultra-dev`; `command-map.json` records the eleven legacy
 command mappings (`ultra-review` remains a directly invocable skill).
 See [`docs/RUNTIME-COMPAT-MATRIX.md`](./docs/RUNTIME-COMPAT-MATRIX.md)
 for per-runtime capabilities.
@@ -68,16 +73,17 @@ for per-runtime capabilities.
 |-------|---------|----------------|
 | **skill** (`skills/ultra-*/`) | Knowledge — prompts, workflows, prose | Runtime's native skill/prompt loader picks them up after install |
 | **MCP** (`mcp-server/`) | Authoritative state — reads/writes `.ultra/state.db` via stdio JSON-RPC | Primary path for task / session / event / plan operations |
-| **CLI** (`ultra-tools`, `bin/*`) | Shell fallback for CI and non-MCP contexts | `ultra-tools task init-project`, `ubp-orchestrator run`, `ultra-tools status --cost` |
+| **CLI** (`ultra-tools`, `bin/*`) | Selected initialization, recovery, diagnostics, and orchestration surfaces | `ultra-tools task init-project`, `ultra-tools system doctor`, `ubp-orchestrator run` |
 
-The three layers share one `.ultra/state.db`. See
+The layers share one `.ultra/state.db`, but the CLI is not a mirror of every MCP
+tool: continuous change mutations are MCP-only and fail closed. See
 [`docs/ARCHITECTURE.md`](./docs/ARCHITECTURE.md) for the full contract and
-[`spec/cli-protocol.md`](./spec/cli-protocol.md) for the 21 live contracts.
+[`spec/cli-protocol.md`](./spec/cli-protocol.md) for the 29 live contracts.
 Review, impact discovery, skill resolution, and user interaction stay on each
 Host's native surfaces; the generated Codex capability map documents those
 replacements without advertising non-existent MCP tools.
 
-The package boundary is deliberate: ten public Ultra workflow skills, four
+The package boundary is deliberate: twelve public Ultra workflow skills, four
 internal review-rule skills, and host-specific collaboration companions. Browser,
 deployment, skill-discovery, and framework guidance belong to their original plugins.
 
@@ -99,30 +105,33 @@ Full details in [`docs/RUNTIME-COMPAT-MATRIX.md`](./docs/RUNTIME-COMPAT-MATRIX.m
 ## Typical workflow
 
 ```bash
-# 1. Initialize a project (writes .ultra/ skeleton; state.db stays lazy)
+# 1. Initialize a project (writes .ultra/ skeleton and initializes state.db)
 ultra-tools task init-project --name myapp
 
 # 2. Turn a PRD into a task graph + execution plan (human-gate via dry-run)
 #    (invoked by /ultra-plan skill or via MCP task.parse_prd + plan.export)
 
 # 3. Run the plan — parallel sessions, auto-merge back to main on success
-ubp-orchestrator run --with-graph-watcher
+ubp-orchestrator run
 
-# 4. Monitor cost and progress
+# 4. Monitor cost, progress, and runtime health
 ultra-tools status
 ultra-tools status --cost --since 24h
 ultra-tools session list --json
+ultra-tools system doctor
 ```
 
 Or let the skills drive it. In Codex, invoke
 `$ultra-builder-pro:ultra-plan` → `$ultra-builder-pro:ultra-dev` →
-`$ultra-builder-pro:ultra-status`; other runtimes retain their native command form.
+`$ultra-builder-pro:ultra-status`; after the baseline is delivered, daily work
+starts with `$ultra-builder-pro:ultra-change`. Other runtimes retain their
+native command form.
 
 ## CLI surface
 
 | Binary | Purpose |
 |--------|---------|
-| `ultra-builder-pro-cli` / `ubp` | Installer — `--claude / --opencode / --codex / --all`, `--local / --global`, `--uninstall`, `--skip-rtk` |
+| `ultra-builder-pro-cli` / `ubp` | Installer — `--claude / --opencode / --codex / --all`, `--local / --global`, `--uninstall` |
 | `ubp-orchestrator` | Session dispatch daemon — `run`, `start`, `stop`, `status` |
 | `ultra-tools` | State-layer CLI — `task`, `session`, `status`, `db`, `migrate`; explicit `legacy-memory` archive/prune migration |
 | `ubp-handbook` | Preview/apply the managed Ultra contract in `CLAUDE.md` / `AGENTS.md`, with backup |
@@ -169,7 +178,7 @@ Individual suites: `test:state`, `test:orch`, `test:spec`, `test:rest`.
 
 | Doc | What's in it |
 |-----|--------------|
-| [`docs/PLAN.zh-CN.md`](./docs/PLAN.zh-CN.md) | Authoritative 12-phase execution plan (zh-CN) — decisions, risks, timeline |
+| [`docs/PLAN.zh-CN.md`](./docs/PLAN.zh-CN.md) | Historical 12-phase plan and decision log with a current-boundary overlay |
 | [`docs/ROADMAP.md`](./docs/ROADMAP.md) | One-page English roadmap + phase status |
 | [`docs/ARCHITECTURE.md`](./docs/ARCHITECTURE.md) | Single-page system architecture |
 | [`docs/AGENT-CONTEXT.md`](./docs/AGENT-CONTEXT.md) | Canonical runtime context contract |
@@ -177,7 +186,6 @@ Individual suites: `test:state`, `test:orch`, `test:spec`, `test:rest`.
 | [`docs/RUNTIME-COMPAT-MATRIX.md`](./docs/RUNTIME-COMPAT-MATRIX.md) | Per-runtime capability matrix |
 | [`docs/STATE-DB-ACCESS-POLICY.md`](./docs/STATE-DB-ACCESS-POLICY.md) | Multi-process write contract |
 | [`docs/COMMIT-HASH-BACKFILL.md`](./docs/COMMIT-HASH-BACKFILL.md) | Two-commit task-completion flow |
-| [`docs/LEGACY-HERMES.md`](./docs/LEGACY-HERMES.md) | Archived pre-CLI "Hermes 6.6" documentation |
 | [`CHANGELOG.md`](./CHANGELOG.md) | v0.1 → current release notes |
 
 ## License

package/adapters/_shared/handbook.cjs

@@ -14,21 +14,21 @@ const HOSTS = Object.freeze({
   claude: Object.freeze({
     name: 'Claude Code',
     handbook: ['.claude', 'CLAUDE.md'],
-    invocation: '`/ultra-init`, `/ultra-research`, `/ultra-plan`, `/ultra-dev`, `/ultra-test`, `/ultra-review`, and `/ultra-deliver`; diagnostics use `/ultra-status` and `/ultra-think`',
+    invocation: '`/ultra-init`, `/ultra-research`, `/ultra-plan`, `/ultra-change`, `/ultra-dev`, `/ultra-test`, `/ultra-review`, and `/ultra-deliver`; diagnostics use `/ultra-status`, `/ultra-think`, and `/ultra-doctor`',
     collaboration: '`/codex-collab` is an explicitly requested read-only advisor',
     coordination: 'Claude Code task UI is host coordination; it does not replace Ultra task state',
   }),
   codex: Object.freeze({
     name: 'Codex',
     handbook: ['.codex', 'AGENTS.md'],
-    invocation: '`$ultra-builder-pro:ultra-init`, `$ultra-builder-pro:ultra-research`, `$ultra-builder-pro:ultra-plan`, `$ultra-builder-pro:ultra-dev`, `$ultra-builder-pro:ultra-test`, `$ultra-builder-pro:ultra-review`, and `$ultra-builder-pro:ultra-deliver`; diagnostics use `$ultra-builder-pro:ultra-status` and `$ultra-builder-pro:ultra-think`',
+    invocation: '`$ultra-builder-pro:ultra-init`, `$ultra-builder-pro:ultra-research`, `$ultra-builder-pro:ultra-plan`, `$ultra-builder-pro:ultra-change`, `$ultra-builder-pro:ultra-dev`, `$ultra-builder-pro:ultra-test`, `$ultra-builder-pro:ultra-review`, and `$ultra-builder-pro:ultra-deliver`; diagnostics use `$ultra-builder-pro:ultra-status`, `$ultra-builder-pro:ultra-think`, and `$ultra-builder-pro:ultra-doctor`',
     collaboration: '`$ultra-builder-pro:cc-collab` is an explicitly requested read-only advisor',
     coordination: 'The Codex plan is turn-facing coordination; it does not replace Ultra task state',
   }),
   opencode: Object.freeze({
     name: 'OpenCode',
     handbook: ['.config', 'opencode', 'AGENTS.md'],
-    invocation: '`/ultra-init`, `/ultra-research`, `/ultra-plan`, `/ultra-dev`, `/ultra-test`, `/ultra-review`, and `/ultra-deliver`; diagnostics use `/ultra-status` and `/ultra-think`',
+    invocation: '`/ultra-init`, `/ultra-research`, `/ultra-plan`, `/ultra-change`, `/ultra-dev`, `/ultra-test`, `/ultra-review`, and `/ultra-deliver`; diagnostics use `/ultra-status`, `/ultra-think`, and `/ultra-doctor`',
     collaboration: '`/cc-collab` and `/codex-collab` are explicitly requested read-only advisors',
     coordination: 'OpenCode session coordination does not replace Ultra task state',
   }),
@@ -52,11 +52,11 @@ function renderHandbook(runtime) {
     `- Workflow entry points: ${value.invocation}.`,
     `- Collaboration boundary: ${value.collaboration}. The current host remains primary and owns final verification.`,
     `- Coordination boundary: ${value.coordination}.`,
-    '- Authority: `.ultra/state.db` is the only durable Ultra authority for tasks, sessions, events, telemetry, and review evidence. Generated JSON and Markdown are projections or workflow artifacts.',
-    '- Memory boundary: Ultra Builder Pro does not capture prompts, transcripts, observations, summaries, or cross-session memory. Persistent memory belongs to a separately installed provider such as cloud-mem or claude-mem.',
-    '- Hook boundary: Ultra hooks are workflow-only lifecycle adapters and are no-ops unless `.ultra/workflow-state.json` describes an active non-terminal workflow. Generic command blocking and post-edit policy stay in user or repository governance.',
+    '- Authority: `.ultra/state.db` is the only durable Ultra authority for changes, tasks, sessions, events, incidents, projection state, telemetry, and review evidence. Generated JSON and Markdown are projections or workflow artifacts.',
+    '- Memory and graph boundary: Ultra Builder Pro does not capture prompts, transcripts, observations, summaries, cross-session memory, or code-graph content. Separately installed providers own that data; Ultra may store only their metadata references in a change context manifest.',
+    '- Hook boundary: Ultra hooks observe workflow/change lifecycle only. Health/context may run when `.ultra/state.db` exists; projection protection is always authoritative, while edit/compact/stop/subagent enforcement remains active-workflow scoped. Generic command blocking and post-edit policy stay in user or repository governance.',
     '- Agent boundary: the bundled review and debugging agents are bounded workers. They use the current checkout and parent-supplied context, do not own private persistent state, and never replace the primary agent.',
-    '- Package boundary: only the ten Ultra workflows, four internal review-rule skills, and host-specific collaboration companions belong to this plugin. General browser, deployment, discovery, and framework skills must be installed from their owners.',
+    '- Package boundary: only the twelve Ultra workflows, four internal review-rule skills, and host-specific collaboration companions belong to this plugin. General browser, deployment, discovery, and framework skills must be installed from their owners.',
     END_MARKER,
   ].join('\n');
 }

package/adapters/_shared/runtime-assets.cjs

@@ -18,6 +18,8 @@ const CORE_PUBLIC_SKILLS = Object.freeze([
   'ultra-deliver',
   'ultra-status',
   'ultra-think',
+  'ultra-change',
+  'ultra-doctor',
 ]);
 
 const INTERNAL_AGENT_SKILLS = Object.freeze([

package/adapters/_shared/tests/handbook.test.cjs

@@ -25,7 +25,10 @@ test('renders one common contract with host-native invocation syntax', () => {
   assert.match(opencode, /\/ultra-plan/);
   for (const rendered of [claude, codex, opencode]) {
     assert.match(rendered, /\.ultra\/state\.db/);
-    assert.match(rendered, /claude-mem|cloud-mem/);
+    assert.match(rendered, /Separately installed providers/);
+    assert.match(rendered, /ultra-change/);
+    assert.match(rendered, /ultra-doctor/);
+    assert.match(rendered, /metadata references/);
     assert.doesNotMatch(rendered, /\.ultra\/memory|memory\.retain|memory\.recall/);
     assert.match(rendered, new RegExp(BEGIN_MARKER.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')));
     assert.match(rendered, new RegExp(END_MARKER.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')));

package/adapters/_shared/tests/runtime-assets.test.cjs

@@ -27,6 +27,8 @@ const CORE = [
   'ultra-deliver',
   'ultra-status',
   'ultra-think',
+  'ultra-change',
+  'ultra-doctor',
 ];
 
 const INTERNAL = [

package/adapters/opencode.js

@@ -337,20 +337,55 @@ import path from "node:path";
 
 const TERMINAL = new Set(["committed", "completed", "done", "cancelled"]);
 const TASKS_PROJECTION = ".ultra/tasks/tasks.json";
+const PROVIDER_FIELDS = new Set(["provider", "project", "reference", "revision", "indexed_head", "status"]);
+
+function providerMetadata(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return {};
+  const clean = {};
+  for (const [kind, ref] of Object.entries(value)) {
+    if (!["memory", "code_graph"].includes(kind) || !ref || typeof ref !== "object" || Array.isArray(ref)) continue;
+    clean[kind] = Object.fromEntries(Object.entries(ref).filter(([key]) => PROVIDER_FIELDS.has(key)));
+  }
+  return clean;
+}
 
-function findActiveWorkflow(directory) {
+function findUltraContext(directory) {
   let current = path.resolve(directory);
   while (true) {
-    const file = path.join(current, ".ultra", "workflow-state.json");
-    if (fs.existsSync(file)) {
+    const ultra = path.join(current, ".ultra");
+    const workflowFile = path.join(ultra, "workflow-state.json");
+    const statePresent = fs.existsSync(path.join(ultra, "state.db"));
+    let workflow = null;
+    if (fs.existsSync(workflowFile)) {
       try {
-        const state = JSON.parse(fs.readFileSync(file, "utf8"));
-        return state && !TERMINAL.has(state.status) ? { root: current, state } : null;
+        const state = JSON.parse(fs.readFileSync(workflowFile, "utf8"));
+        workflow = state && !TERMINAL.has(state.status) ? state : null;
       } catch (error) {
-        process.stderr.write(\`[ultra-builder-pro] cannot read \${file}: \${error.message}\\n\`);
-        return null;
+        process.stderr.write(\`[ultra-builder-pro] cannot read \${workflowFile}: \${error.message}\\n\`);
+      }
+    }
+    const changes = [];
+    const changeRoot = path.join(ultra, "changes", "active");
+    if (fs.existsSync(changeRoot)) {
+      for (const entry of fs.readdirSync(changeRoot, { withFileTypes: true })) {
+        if (!entry.isDirectory()) continue;
+        const manifestPath = path.join(changeRoot, entry.name, "context-manifest.json");
+        if (!fs.existsSync(manifestPath)) continue;
+        try {
+          const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+          if (manifest?.change) changes.push({
+            ...manifest.change,
+            providers: providerMetadata(manifest.providers),
+            manifestPath: path.relative(current, manifestPath),
+          });
+        } catch (error) {
+          process.stderr.write(\`[ultra-builder-pro] cannot read \${manifestPath}: \${error.message}\\n\`);
+        }
       }
     }
+    if (statePresent || workflow || changes.length > 0) {
+      return { root: current, workflow, changes, statePresent };
+    }
     const parent = path.dirname(current);
     if (parent === current) return null;
     current = parent;
@@ -358,16 +393,42 @@ function findActiveWorkflow(directory) {
 }
 
 function contextText(active) {
-  const state = active.state;
-  return [
-    "[Ultra active workflow]",
-    \`Project: \${active.root}\`,
-    \`Command: \${state.command ?? "unknown"}\`,
-    \`Task: \${state.task_id ?? state.task ?? "unknown"}\`,
-    \`Step: \${state.step ?? "unknown"}\`,
-    \`Status: \${state.status ?? "active"}\`,
-    "Authority: .ultra/state.db; recovery: .ultra/workflow-state.json.",
-  ].join("\\n");
+  const lines = [];
+  if (active.workflow) {
+    const state = active.workflow;
+    lines.push(
+      "[Ultra active workflow]",
+      \`Project: \${active.root}\`,
+      \`Command: \${state.command ?? "unknown"}\`,
+      \`Task: \${state.task_id ?? state.task ?? "unknown"}\`,
+      \`Step: \${state.step ?? "unknown"}\`,
+      \`Status: \${state.status ?? "active"}\`,
+    );
+  }
+  if (active.changes.length > 0) {
+    const change = active.changes[0];
+    lines.push(
+      "[Ultra continuous change]",
+      \`Project: \${active.root}\`,
+      \`Change: \${change.id} (\${change.kind ?? "unknown"}, \${change.status ?? "active"})\`,
+      \`Title: \${change.title ?? "unknown"}\`,
+      \`Intent: \${change.intent ?? "unknown"}\`,
+      \`Context manifest: \${change.manifestPath}\`,
+      \`External providers (metadata references only): \${JSON.stringify(change.providers)}\`,
+    );
+    if (active.changes.length > 1) lines.push(
+      \`Active change count: \${active.changes.length}; resolve scope with change.list before mutation.\`,
+    );
+  }
+  if (!active.workflow && active.changes.length === 0) {
+    lines.push(
+      "[Ultra baseline]",
+      \`Project: \${active.root}\`,
+      "No active continuous change. Start daily work with the ultra-change workflow.",
+    );
+  }
+  lines.push("Authority: .ultra/state.db; generated JSON/Markdown are projections or artifacts.");
+  return lines.join("\\n");
 }
 
 function targetPaths(tool, args) {
@@ -391,8 +452,8 @@ function isTasksProjection(active, candidate) {
 
 export const UltraBuilderProPlugin = async ({ directory, worktree }) => {
   const root = worktree || directory;
-  let active = findActiveWorkflow(root);
-  const refresh = () => { active = findActiveWorkflow(root); };
+  let active = findUltraContext(root);
+  const refresh = () => { active = findUltraContext(root); };
   return {
     event: async ({ event }) => {
       if (["session.created", "session.compacted", "session.idle"].includes(event?.type)) refresh();
@@ -413,7 +474,7 @@ export const UltraBuilderProPlugin = async ({ directory, worktree }) => {
       if (targetPaths(tool, output?.args).some((candidate) => isTasksProjection(active, candidate))) {
         throw new Error(
           "Ultra Builder Pro refused a direct write to .ultra/tasks/tasks.json. " +
-          ".ultra/state.db is authoritative; use MCP task tools or run the required v4.4 to v4.5 migration."
+          ".ultra/state.db is authoritative; use MCP task tools and run ultra-doctor when state or projection health is degraded."
         );
       }
     },

package/adapters/tests/codex.test.cjs

@@ -21,8 +21,10 @@ const {
 const REPO_ROOT = path.resolve(__dirname, '..', '..');
 const COMMANDS = [
   'learn',
+  'ultra-change',
   'ultra-deliver',
   'ultra-dev',
+  'ultra-doctor',
   'ultra-init',
   'ultra-plan',
   'ultra-research',
@@ -89,7 +91,7 @@ test('install builds one Codex-native plugin with complete skill and command cov
 
     const expectedSkills = skillsForRuntime('codex').sort();
     assert.deepEqual(skillNames(layout.pluginRoot), expectedSkills);
-    assert.equal(expectedSkills.length, 16);
+    assert.equal(expectedSkills.length, 18);
     assert.ok(!fs.existsSync(path.join(layout.pluginRoot, 'skills', 'codex-collab')));
     assert.ok(!fs.existsSync(path.join(layout.pluginRoot, 'skills', 'learned')));
 
@@ -229,8 +231,8 @@ test('plugin declares current Codex hooks and a project-local Ultra MCP server',
     const liveSpec = yaml.load(fs.readFileSync(path.join(layout.pluginRoot, 'spec', 'mcp-tools.yaml'), 'utf8'));
     const upstreamSpec = yaml.load(fs.readFileSync(path.join(layout.pluginRoot, 'spec', 'upstream-mcp-tools.yaml'), 'utf8'));
     const capabilityMap = JSON.parse(fs.readFileSync(path.join(layout.pluginRoot, 'spec', 'codex-capability-map.json'), 'utf8'));
-    assert.equal(liveSpec.tools.length, 21);
-    assert.equal(upstreamSpec.tools.length, 21);
+    assert.equal(liveSpec.tools.length, 29);
+    assert.equal(upstreamSpec.tools.length, 29);
     assert.deepEqual(upstreamSpec.tools.map((tool) => tool.name).sort(), liveSpec.tools.map((tool) => tool.name).sort());
     assert.deepEqual(capabilityMap.live_mcp_tools.sort(), liveSpec.tools.map((tool) => tool.name).sort());
     assert.equal(Object.keys(capabilityMap.codex_native_replacements).length, 9);

package/adapters/tests/opencode.test.cjs

@@ -171,13 +171,14 @@ test('install writes a schema-safe opencode.json and keeps ownership outside hos
     assert.match(plugin, /\.ultra[\\/]tasks[\\/]tasks\.json/);
     assert.match(plugin, /throw new Error/);
     assert.match(plugin, /session\.compacted/);
-    assert.doesNotMatch(plugin, /memory|recall|journal|observation/);
+    assert.doesNotMatch(plugin, /memory\.(?:retain|recall|reflect)|journal|observation|prompt[_ -]?capture/);
+    assert.match(plugin, /metadata references only/);
   } finally {
     fs.rmSync(target, { recursive: true, force: true });
   }
 });
 
-test('OpenCode before-tool hook blocks tasks.json writes only during an active workflow', async () => {
+test('OpenCode context covers active changes and projection writes are blocked for Ultra projects', async () => {
   const target = mkTarget();
   const project = mkTarget();
   try {
@@ -186,15 +187,21 @@ test('OpenCode before-tool hook blocks tasks.json writes only during an active w
     const module = await import(pathToFileURL(pluginFile).href);
     const plugin = await module.UltraBuilderProPlugin({ directory: project });
 
-    await plugin['tool.execute.before'](
-      { tool: 'edit' },
-      { args: { filePath: '.ultra/tasks/tasks.json' } },
-    );
-
     fs.mkdirSync(path.join(project, '.ultra'), { recursive: true });
-    fs.writeFileSync(path.join(project, '.ultra', 'workflow-state.json'), JSON.stringify({
-      command: 'ultra-plan', task_id: 'plan', step: 'persist', status: 'active',
+    fs.writeFileSync(path.join(project, '.ultra', 'state.db'), 'owned-by-ultra');
+    const changeRoot = path.join(project, '.ultra', 'changes', 'active', 'daily-fix');
+    fs.mkdirSync(changeRoot, { recursive: true });
+    fs.writeFileSync(path.join(changeRoot, 'context-manifest.json'), JSON.stringify({
+      change: { id: 'daily-fix', title: 'Daily fix', kind: 'quick', status: 'active', intent: 'Fix drift' },
+      providers: { memory: { provider: 'cloud-mem', status: 'available' } },
     }));
+
+    const output = { system: [] };
+    await plugin['experimental.chat.system.transform']({}, output);
+    assert.match(output.system.join('\n'), /Ultra continuous change/);
+    assert.match(output.system.join('\n'), /daily-fix/);
+    assert.match(output.system.join('\n'), /metadata references only/);
+
     await assert.rejects(
       plugin['tool.execute.before'](
         { tool: 'apply_patch' },

package/bin/install.js

@@ -17,7 +17,6 @@
  *   -l, --local                                   install into current working directory
  *   -u, --uninstall                               remove installed assets
  *   -c, --config-dir <path>                       override config directory
- *       --skip-rtk                                do not detect / install RTK hook
  *   -h, --help                                    show help
  */
 
@@ -79,7 +78,6 @@ function printHelp() {
   ${paint('yellow', 'Other:')}
     ${paint('cyan', '-u, --uninstall')}    remove installed assets
     ${paint('cyan', '-c, --config-dir')}   override runtime's config directory (string path)
-    ${paint('cyan', '--skip-rtk')}        skip RTK hook registration (RTK is a soft dependency)
     ${paint('cyan', '-h, --help')}         show this help
     ${paint('cyan', '-v, --version')}      show CLI version
 
@@ -105,7 +103,6 @@ function parseArgs(argv) {
     help: false,
     version: false,
     configDir: null,
-    skipRtk: false,
   };
 
   for (let i = 0; i < args.length; i++) {
@@ -122,7 +119,6 @@ function parseArgs(argv) {
       case '-u': case '--uninstall': flags.uninstall = true; break;
       case '-h': case '--help': flags.help = true; break;
       case '-v': case '--version': flags.version = true; break;
-      case '--skip-rtk': flags.skipRtk = true; break;
       case '-c': case '--config-dir':
         flags.configDir = args[++i];
         if (!flags.configDir || flags.configDir.startsWith('-')) {
@@ -226,21 +222,6 @@ async function main() {
     process.exit(1);
   }
 
-  // Phase 6.1 — RTK hook (soft dependency; install continues on absence).
-  if (mode === 'install') {
-    const rtk = require('../adapters/_shared/rtk-detect.cjs');
-    const result = rtk.installHook({ skip: flags.skipRtk, scope });
-    if (result.skipped) {
-      console.log(`  ${paint('dim', '⤼ rtk skipped (--skip-rtk)')}`);
-    } else if (result.available && result.initialized) {
-      console.log(`  ${paint('green', '✓')} rtk hook registered (${result.version})`);
-    } else if (result.available && !result.initialized) {
-      console.log(`  ${paint('yellow', '!')} rtk present but init failed: ${result.init_error}`);
-    } else {
-      console.log(`  ${paint('dim', '⤼ ' + result.hint.replace(/\n/g, '\n    '))}`);
-    }
-  }
-
   console.log(`  ${paint('green', 'Done.')}`);
 }
 

package/bin/orchestrator.js

@@ -77,33 +77,9 @@ function cmdRun(opts = {}) {
     onError: (err) => process.stderr.write(`orchestrator error: ${err.message}\n`),
   });
 
-  // Phase 6.4 — optional code-graph watcher (opt-in via settings or CLI).
-  const watcherEnabled =
-    opts.withGraphWatcher === true ||
-    !!(settings && settings.orchestrator && settings.orchestrator.graph_watcher === true);
-  let watcherHandle = null;
-  if (watcherEnabled) {
-    try {
-      const { startWatcher } = require('../orchestrator/code-graph-watcher.cjs');
-      const jsonlPath = path.join(REPO_ROOT, '.ultra', 'code-graph-events.jsonl');
-      fs.mkdirSync(path.dirname(jsonlPath), { recursive: true });
-      watcherHandle = startWatcher({
-        repoRoot: REPO_ROOT,
-        onBatch: (batch) => {
-          try { fs.appendFileSync(jsonlPath, JSON.stringify(batch) + '\n'); }
-          catch (err) { process.stderr.write(`graph-watcher write error: ${err.message}\n`); }
-        },
-      });
-      process.stderr.write(`orchestrator: graph-watcher enabled → ${jsonlPath}\n`);
-    } catch (err) {
-      process.stderr.write(`orchestrator: graph-watcher disabled (${err.message})\n`);
-    }
-  }
-
   const shutdown = (signal) => {
     process.stderr.write(`orchestrator received ${signal}, stopping\n`);
     handle.stop();
-    if (watcherHandle) watcherHandle.stop();
     try { db.close(); } catch (_) { /* ignore */ }
     process.exit(0);
   };
@@ -205,9 +181,8 @@ function usage() {
 
 const argv = process.argv.slice(2);
 const subcommand = argv[0];
-const runOpts = { withGraphWatcher: argv.includes('--with-graph-watcher') };
 switch (subcommand) {
-  case 'run':    cmdRun(runOpts); break;
+  case 'run':    cmdRun();        break;
   case 'start':  cmdStart();      break;
   case 'stop':   cmdStop();       break;
   case 'status': cmdStatus();     break;