ultra-builder-pro-cli 5.0.1 → 6.0.0

package/skills/ultra-delegate/scripts/delegate_wait.py

@@ -1,86 +0,0 @@
-#!/usr/bin/env python3
-"""Wait for one delegated result to become non-empty and stable."""
-
-from __future__ import annotations
-
-import argparse
-import json
-import re
-import time
-from pathlib import Path
-
-
-RESULT_SCHEMA = "ultra-delegation-result-v1"
-STATUSES = {"finished", "blocked", "failed"}
-CHECK_STATUSES = {"passed", "failed", "not_run"}
-
-
-def nonempty(value) -> bool:
-    return isinstance(value, str) and bool(value.strip())
-
-
-def validate_result(payload: dict) -> None:
-    if not isinstance(payload, dict):
-        raise ValueError("result must be a JSON object")
-    if payload.get("$schema") != RESULT_SCHEMA:
-        raise ValueError(f"result $schema must be {RESULT_SCHEMA}")
-    if payload.get("status") not in STATUSES:
-        raise ValueError("result status must be finished, blocked, or failed")
-    if not nonempty(payload.get("summary")):
-        raise ValueError("result summary must be non-empty")
-    for field in ("changed_files", "checks", "evidence", "questions", "residual_risks"):
-        if not isinstance(payload.get(field), list):
-            raise ValueError(f"result {field} must be an array")
-    for field in ("changed_files", "evidence", "questions", "residual_risks"):
-        if not all(nonempty(item) for item in payload[field]):
-            raise ValueError(f"result {field} must contain non-empty strings")
-    for check in payload["checks"]:
-        if not isinstance(check, dict) or not nonempty(check.get("command")):
-            raise ValueError("result checks require a command")
-        if check.get("status") not in CHECK_STATUSES:
-            raise ValueError("result check status is invalid")
-    if payload["status"] == "blocked" and not payload["questions"]:
-        raise ValueError("blocked result requires a question")
-    for field in ("delegation_id", "host", "base_head", "final_head", "started_at", "finished_at"):
-        if not nonempty(payload.get(field)):
-            raise ValueError(f"result {field} must be non-empty")
-    for field in ("instruction_digest", "permission_digest", "output_schema_digest"):
-        if not isinstance(payload.get(field), str) or not re.fullmatch(r"[0-9a-f]{64}", payload[field]):
-            raise ValueError(f"result {field} must be a SHA-256 digest")
-    if not isinstance(payload.get("read_only"), bool):
-        raise ValueError("result read_only must be a boolean")
-    if payload.get("exit_code") is not None and not isinstance(payload["exit_code"], int):
-        raise ValueError("result exit_code must be an integer or null")
-
-
-def wait_for_result(path: Path, interval: float, timeout: float) -> dict:
-    deadline = time.monotonic() + timeout
-    previous_size = -1
-    stable_reads = 0
-    while time.monotonic() < deadline:
-        size = path.stat().st_size if path.exists() else 0
-        if size > 0 and size == previous_size:
-            stable_reads += 1
-            if stable_reads >= 1:
-                payload = json.loads(path.read_text(encoding="utf-8"))
-                validate_result(payload)
-                return payload
-        else:
-            stable_reads = 0
-        previous_size = size
-        time.sleep(interval)
-    raise TimeoutError(f"result did not stabilize within {timeout:g}s: {path}")
-
-
-def main() -> int:
-    parser = argparse.ArgumentParser()
-    parser.add_argument("result", type=Path)
-    parser.add_argument("--interval", type=float, default=1.0)
-    parser.add_argument("--timeout", type=float, default=1800.0)
-    args = parser.parse_args()
-    print(json.dumps(wait_for_result(args.result, args.interval, args.timeout)))
-    return 0
-
-
-if __name__ == "__main__":
-    raise SystemExit(main())

package/skills/ultra-delegate/scripts/host-profile.cjs

@@ -1,267 +0,0 @@
-'use strict';
-
-const fs = require('node:fs');
-const path = require('node:path');
-
-const KIMI_PROFILE_ROOT = path.join(__dirname, 'delegate-profiles');
-const ZCODE_BUNDLED_CLI = '/Applications/ZCode.app/Contents/Resources/glm/zcode.cjs';
-const CLAUDE_ACP_PACKAGE = '@agentclientprotocol/claude-agent-acp@0.70.0';
-const CODEX_ACP_PACKAGE = '@agentclientprotocol/codex-acp@1.6.2';
-const ZCODE_ACP_SOURCE = Object.freeze({
-  repository: 'https://github.com/jpalmae/zcode-acp',
-  version: '0.1.0',
-  commit: '42fe149d4b501469343c01f23ba3801832306d53',
-  buildMarker: 'zcode-acp 0.1.0+ultra.zcode.0.16.5',
-  runtimeVersion: '0.16.5',
-  patch: Object.freeze({
-    path: 'skills/ultra-delegate/patches/zcode-acp-0.1.0-zcode-0.16.5.patch',
-    sha256: '174dfd0feafe84320556a84b5ae08b10e44c5515fea4992fd1d58af54cee4e3d',
-    compatibility: 'ZCode CLI 0.16.5 runtime-preferences handshake',
-  }),
-});
-
-// The ZCode app-bundled CLI is a verified-local surface, not a provider
-// stability promise: official documentation plus a full recovery drill must
-// both hold before any transport may claim 'supported'.
-const TRANSPORT_MATURITY = Object.freeze({
-  claude: 'documented+verified',
-  codex: 'documented+verified',
-  opencode: 'documented+verified',
-  kimi: 'documented+verified',
-  grok: 'documented+verified',
-  zcode: 'experimental',
-});
-
-const ACP_CONFORMANCE = Object.freeze({
-  claude: Object.freeze({
-    status: 'passed',
-    evidence: 'docs/evals/ultra-5-0-live-acp-conformance.md#claude-code',
-    receiptSha256: '9b1d88cbd5e5b66a56e0cf19f34e7f2107f9e4b8fde9d80b9eadcdfc8f4a25e3',
-  }),
-  codex: Object.freeze({
-    status: 'passed',
-    evidence: 'docs/evals/ultra-5-0-live-acp-conformance.md#codex',
-    receiptSha256: 'e82287609397807fb6968dff104d7f6569499b53c77be6a186aa33939a4c629e',
-  }),
-  opencode: Object.freeze({
-    status: 'passed',
-    evidence: 'docs/evals/ultra-5-0-live-acp-conformance.md#opencode',
-    receiptSha256: '3575b148f6feb8c9f1472add705390e6d47b87be080403ec7006b66a29f7873b',
-  }),
-  kimi: Object.freeze({
-    status: 'passed',
-    evidence: 'docs/evals/ultra-5-0-live-acp-conformance.md#kimi-code',
-    receiptSha256: '30d8adec2877f80fadf0b20c3cb7fa6b732dea3598d7484c143f9835770301fe',
-  }),
-  grok: Object.freeze({
-    status: 'passed',
-    evidence: 'docs/evals/ultra-5-0-live-acp-conformance.md#grok-build',
-    receiptSha256: '370eeae12d63443188d519825ed8040fd8bba9b27fddb82e499d9cb590f4a33d',
-  }),
-  zcode: Object.freeze({
-    status: 'passed',
-    evidence: 'docs/evals/ultra-5-0-live-acp-conformance.md#zcode',
-    receiptSha256: '156080f88ed84a013fb26d93e5138230732d2ef0e2b5b10a7c3deb501d3548e9',
-  }),
-});
-
-function zcodeBinary({ platform = process.platform, exists = fs.existsSync } = {}) {
-  return platform === 'darwin' && exists(ZCODE_BUNDLED_CLI)
-    ? ZCODE_BUNDLED_CLI
-    : 'zcode';
-}
-
-function opencodePermission(writableRoots) {
-  const edit = { '*': 'deny' };
-  for (const root of writableRoots) {
-    if (root === '.') edit['*'] = 'allow';
-    else edit[`${root}/**`] = 'allow';
-  }
-  return JSON.stringify({
-    share: 'disabled',
-    permission: {
-      '*': 'deny',
-      read: 'allow',
-      glob: 'allow',
-      grep: 'allow',
-      list: 'allow',
-      lsp: 'allow',
-      edit,
-      external_directory: 'deny',
-      bash: 'deny',
-      task: 'deny',
-      webfetch: 'deny',
-      websearch: 'deny',
-      question: 'deny',
-      skill: 'deny',
-    },
-  });
-}
-
-const PROFILES = Object.freeze({
-  claude: Object.freeze({
-    binary: 'claude',
-    acp: Object.freeze({
-      surface: `official ${CLAUDE_ACP_PACKAGE} stdio adapter`,
-      transport: 'stdio',
-      protocolVersions: [1],
-      conformance: ACP_CONFORMANCE.claude,
-      command: () => 'npx',
-      argv: () => ['--yes', CLAUDE_ACP_PACKAGE],
-    }),
-    delegateArgv: (prompt, _cwd, options) => [
-      '-p', prompt,
-      '--permission-mode', options.readOnly ? 'plan' : 'acceptEdits',
-      '--no-session-persistence',
-      '--output-format', 'json',
-      '--tools', options.readOnly ? 'Read,Grep,Glob' : 'Read,Write,Edit,Grep,Glob',
-    ],
-  }),
-  codex: Object.freeze({
-    binary: 'codex',
-    acp: Object.freeze({
-      surface: `official ${CODEX_ACP_PACKAGE} stdio adapter`,
-      transport: 'stdio',
-      protocolVersions: [1],
-      conformance: ACP_CONFORMANCE.codex,
-      command: () => 'npx',
-      argv: () => ['--yes', CODEX_ACP_PACKAGE],
-    }),
-    delegateArgv: (prompt, cwd, options) => [
-      'exec', '--ephemeral', '--ignore-user-config',
-      '--sandbox', options.readOnly ? 'read-only' : 'workspace-write',
-      '--cd', cwd,
-      '--config', 'sandbox_workspace_write.network_access=false',
-      '--output-schema', options.schemaFile,
-      '--output-last-message', options.hostOutput,
-      '--json', prompt,
-    ],
-  }),
-  opencode: Object.freeze({
-    binary: 'opencode',
-    acp: Object.freeze({
-      surface: 'native OpenCode ACP stdio server',
-      transport: 'stdio',
-      protocolVersions: [1],
-      conformance: ACP_CONFORMANCE.opencode,
-      command: ({ cliCommand }) => cliCommand,
-      argv: () => ['acp'],
-    }),
-    delegateArgv: (prompt, cwd) => [
-      'run', '--dir', cwd, '--format', 'json', '--auto', prompt,
-    ],
-    delegateEnv: (options) => ({
-      OPENCODE_CONFIG_CONTENT: opencodePermission(options.writableRoots),
-    }),
-  }),
-  kimi: Object.freeze({
-    binary: 'kimi',
-    supportsModelSelection: true,
-    acp: Object.freeze({
-      surface: 'Kimi Code ACP stdio server',
-      transport: 'stdio',
-      protocolVersions: [1],
-      conformance: ACP_CONFORMANCE.kimi,
-      command: ({ cliCommand }) => cliCommand,
-      argv: () => ['acp'],
-    }),
-    delegateArgv: (prompt, _cwd, options) => {
-      const args = ['-p', prompt, '--output-format', 'stream-json'];
-      if (options.model) args.push('--model', options.model);
-      args.push(
-        '--agent-file',
-        path.join(
-          KIMI_PROFILE_ROOT,
-          options.readOnly ? 'kimi-read-only.md' : 'kimi-write.md',
-        ),
-      );
-      return args;
-    },
-  }),
-  grok: Object.freeze({
-    binary: 'grok',
-    acp: Object.freeze({
-      surface: 'Grok agent stdio candidate',
-      transport: 'stdio',
-      protocolVersions: [1],
-      conformance: ACP_CONFORMANCE.grok,
-      command: ({ cliCommand }) => cliCommand,
-      argv: () => ['agent', 'stdio'],
-    }),
-    delegateArgv: (prompt, cwd, options) => [
-      '--cwd', cwd, '--single', prompt,
-      '--permission-mode', options.readOnly ? 'plan' : 'acceptEdits',
-      '--sandbox', options.readOnly ? 'read-only' : 'workspace',
-      '--no-memory', '--no-subagents', '--disable-web-search',
-      '--verbatim',
-      '--max-turns', '12',
-      '--output-format', 'json',
-    ],
-  }),
-  zcode: Object.freeze({
-    binary: zcodeBinary(),
-    installedRuntimeOnly: true,
-    acp: Object.freeze({
-      surface: `installed ZCode Desktop runtime through zcode-acp ${ZCODE_ACP_SOURCE.version}`,
-      transport: 'stdio',
-      protocolVersions: [1],
-      conformance: ACP_CONFORMANCE.zcode,
-      command: ({ env }) => env.ULTRA_ZCODE_ACP_COMMAND || 'zcode-acp',
-      argv: ({ cliCommand }) => ['--zcode-path', cliCommand, '--no-browser'],
-      identityProbes: ({ command, cliCommand }) => [
-        {
-          label: 'zcode_bridge',
-          command,
-          args: ['--version'],
-          expectedStdout: ZCODE_ACP_SOURCE.buildMarker,
-        },
-        {
-          label: 'zcode_runtime',
-          command: cliCommand.endsWith('.cjs') ? process.execPath : cliCommand,
-          args: cliCommand.endsWith('.cjs') ? [cliCommand, '--version'] : ['--version'],
-          expectedStdout: ZCODE_ACP_SOURCE.runtimeVersion,
-        },
-      ],
-    }),
-    delegateArgv: (prompt, cwd, options) => [
-      '--cwd', cwd,
-      '--mode', options.readOnly ? 'plan' : 'edit',
-      '--json', '--no-color',
-      '--disallowedTools', options.readOnly
-        ? 'Bash Write Edit ApplyPatch Agent WebFetch WebSearch'
-        : 'Bash Agent WebFetch WebSearch',
-      '--prompt', prompt,
-    ],
-  }),
-});
-
-function hostProfile(runtime) {
-  const profile = PROFILES[runtime];
-  if (!profile) throw new Error(`unsupported delegate host: ${runtime}`);
-  return { ...profile, transportMaturity: TRANSPORT_MATURITY[runtime] };
-}
-
-// The live delegate surface names honestly what a run actually used. The ZCode
-// headless transports are app-internal surfaces, never the documented ZCode
-// Desktop interactive primary path, so every receipt that records one says so.
-function transportSurface(runtime, binary = PROFILES[runtime] ? PROFILES[runtime].binary : undefined) {
-  if (runtime === 'zcode') {
-    const source = binary === ZCODE_BUNDLED_CLI ? 'the App-bundled headless CLI' : 'the zcode headless CLI on PATH';
-    return `${source} (experimental; not the documented ZCode Desktop interactive surface)`;
-  }
-  return 'documented non-interactive CLI';
-}
-
-module.exports = {
-  ACP_CONFORMANCE,
-  CLAUDE_ACP_PACKAGE,
-  CODEX_ACP_PACKAGE,
-  PROFILES,
-  TRANSPORT_MATURITY,
-  ZCODE_BUNDLED_CLI,
-  ZCODE_ACP_SOURCE,
-  hostProfile,
-  opencodePermission,
-  transportSurface,
-  zcodeBinary,
-};

package/skills/ultra-deliver/SKILL.md

@@ -1,194 +0,0 @@
----
-name: ultra-deliver
-description: Reconcile one Change whose matching tasks are complete, run aggregate review and refactoring, and report the delivery handoff. Use when the owner wants delivery reconciliation and reporting, or — by current explicit owner invocation only — the separately gated finalization that writes delivery.md, fixes version and package posture, and archives the local workflow record.
----
-
-# Turn current evidence into a recoverable delivery handoff
-
-Delivery closes the local Change; readiness grants no commit, push, tag, publish, or deploy authority.
-
-## Route modes
-
-| Mode | Entry | Observable exit | Next |
-|---|---|---|---|
-| `reconcile` | Explicit invocation or a valid Execution Grant for a tested active Change | Intent, implementation, specifications, documentation, evidence, and report agree, or changed files make the exact stale evidence visible | Recommend `ultra-test/reaudit` after changes, otherwise recommend explicit `ultra-deliver/finalize` |
-| `finalize` | Current explicit owner invocation only | Fresh transport/evidence checks pass, version and package posture are owner-set, `delivery.md` is written, and the Change is locally archived | Report `idle` plus every separately authorized or unfinished release effect |
-
-Follow `../ultra-status/references/route-contract.md`. Show a Route Card at entry, after
-reconciliation, before the finalization checkpoint, and after archive or any stop.
-Grant-aware continuation ends with `reconcile`; no Host metadata bit, report, or grant
-turns `finalize` into an implicit mode.
-
-## Before you start
-
-1. If model-selected, verify the live execution grant in `../ultra-change/references/execution-grant.md` — a current session-local activation or a stably verified durable work-package grant; without either, stop. A model-selected Deliver run under that grant may reconcile, review, and report, and then MUST stop before finalization: its inputs, writes, and effects end at the report. Only a current explicit owner invocation of `ultra-deliver` may finalize — writing `delivery.md`, deciding the version decision and package posture, and archiving the stable Change id with `git mv` are owner-invocation-only in every grant mode, and a grant never covers them.
-2. Read `../ultra-change/references/change-contract.md` and apply its **Active Change
-   authority resolution** before reading any active `intent.md` or resolving a current
-   `change_id`. This workflow requires its one valid active authority; any zero result
-   or typed diagnostic stops before finalization input is read until the stated repair
-   or retry succeeds. Read `.ultra/tasks.json`; every matching task must be `completed`
-   in that sole task-status authority. Read each `context_file`'s Completion, Task
-   Review, and closing Resume Note. For every current Change task,
-   require current `ultra-task-evidence-v2` and task-review provenance under
-   `../ultra-plan/references/task-evidence-v2.md`, already consumed by the current Test
-   report. A legacy context Status or Complexity header and v1 evidence are migration
-   diagnostics only and cannot support current delivery.
-3. Read `CONTEXT.md`, relevant `.ultra/decisions/`, active Change intent and evidence.
-   Validate `.ultra/north-star.md`; resolve every recorded `FP-*`, `NS-*`, and `HC-*`
-   for the delivered Change, tasks, findings, and dispositions against that accepted
-   authority. Compare the active Change's recorded **North Star revision** and
-   **North Star digest** with the accepted file's revision and current Git blob digest. Any
-   missing ID or mismatch stops finalization and recommends explicit owner invocation of
-   `ultra-change` for reconciliation; delivery never silently rewrites the trace.
-4. Read `.ultra/test-report.json`, then run the Test Skill's `worktree_digest.cjs` with
-   project root and `--change-id`. Require report `task_ids` for the current Change plus
-   matching `change_id`, `git_commit`, worktree digest, intent digest, and review
-   `admission_digest`, `subject_digest`, and `summary_digest`; otherwise stop. Recheck
-   each projected task's declared review branch as recorded: strict-v4 items keep their
-   strict receipt and transport bindings, while `external-manual` items reverify their
-   receipt bytes and digest through the task-evidence sensor's
-   `--verify-external-receipt` mode and take the sensor's `--projection` output
-   verbatim — a strict SUMMARY never substitutes for an external receipt and neither
-   branch is rewritten into the other.
-   The product-worktree digest has one fixed boundary: it excludes `.ultra/evidence/**`,
-   whose command and external-observation entries bind raw bytes as
-   `raw_evidence_sha256` before stable exact record bytes are bound as `evidence_digest`
-   through the report's ordered `task_evidence` projection. For each projected record,
-   take every `raw_evidence_ref` to bounded stable repository-contained bytes from an
-   ordinary regular non-symlink file opened nonblocking and no-follow, with an 8 MiB
-   ceiling and path/descriptor identity checks around the read. Recompute
-   `raw_evidence_sha256` and require an exact match, then recompute the stable exact
-   `evidence.json` bytes as `evidence_digest` before comparing the projection. Recheck
-   the exact review receipts separately; never treat the product exclusion as permission
-   to ignore evidence drift or add another exclusion.
-   An intent digest changed by North Star reconciliation or any other intent edit always
-   requires a fresh `ultra-test` before Deliver can finalize, even if product bytes did
-   not change.
-5. Preserve every typed acceptance authority. The owner alone supplies the semantic
-   result for `owner-judgment`; Deliver may verify its cited source and freshness but no
-   model, command, digest, schema, or validator may replace it.
-
-## Definition of done
-
-- Outcome, specs, tests, aggregate review, and every document match the actual diff.
-- Every changed export has a non-test consumer or a recorded owner disposition.
-- Every omitted stage is explicitly recorded with its evidence-based rationale.
-- Delivery explains whether evidence realizes the traced first principles and outcome,
-  and preserves contradictions or stale trace as findings instead of mirroring or
-  silently revising North Star prose.
-- Build and release checks have exact commands and real results.
-- The Change is archived with `git mv`, and rollback remains a normal Git operation.
-
-## Review and refactor
-
-Follow `../ultra-review/SKILL.md` across the aggregate Change; refactor only observed
-duplication, coupling, or boundary defects. Rerun affected checks and refresh the report.
-After the aggregate review and the current Test report are consumed, Deliver does not
-refactor product source: it reconciles delivery artifacts and documentation only. A
-post-approval implementation issue routes as at most one new owner-approved Dev task
-for a P0/P1, or as recorded backlog and residual risk for P2/P3; an unbounded
-Test ↔ Deliver bounce is not a valid recovery path, and any re-entry through Test
-requires an explicit owner disposition.
-
-## Reconcile the handoff
-
-1. Compare accepted intent and task traces with delivered behavior.
-2. Apply justified specification corrections; route any REDUCTION to the owner.
-3. List documentation, compare every file with the full Change diff, and repair stale
-   behavior, examples, flags, or fields. Record bounded debt only in active
-   `delivery.md` under `## Technical Debt`.
-4. Defer build, non-publishing package inspection, version selection, and the canonical
-   `delivery.md` until the fresh-snapshot finalization pass below. Reconciliation that
-   changed files must return through Test first.
-
-Entry reconciliation prevents inherited drift; this exit reconciliation prevents the
-Change from leaving new document drift.
-
-## Reconcile, then finalize on a fresh snapshot
-
-Delivery has two observable passes, not a hidden state machine:
-
-1. Reconcile and review. If this pass changes source, tests, task/context/evidence,
-   specifications, maintained documentation, or `intent.md`, stop after writing the
-   reconciled files. The existing report is stale; recommend `ultra-test` and make no
-   delivery or release claim.
-2. After an unchanged pass or fresh Test, resolve the report's canonical
-   `review.summary_ref` as `<validated-summary-path>` and run the current strict transport
-   consumer against the current report:
-
-   `node <ultra-test-skill-dir>/scripts/validate_review_transport.cjs --summary <validated-summary-path> --report .ultra/test-report.json`
-
-   Require exit 0 and a JSON `"valid": true` field. This one existing consumer verifies
-   the exact
-   retained `ADMISSION.json` and `SUMMARY.json`, then binds the report's
-   `admission_digest`, `subject_digest`, and `summary_digest` to those bytes. A missing or
-   invalid receipt, summary, or binding makes the current Test claim `INCOMPLETE`: start
-   a fresh Review and Test. Do not write `delivery.md`, archive the Change, create a
-   release package, or make a delivery claim while that receipt evidence is missing or
-   invalid. Never use `--legacy-v4` for this current-session check; v3 and pre-admission
-   v4 are read-only historical evidence, not current Test or Deliver evidence.
-
-   After the transport succeeds, recheck Change/task/HEAD/product/intent identities.
-   Apply the gate, run build and non-publishing package inspection, determine version
-   impact, and use `references/baseline-reconciliation.md` for canonical `delivery.md`.
-   Archive the Change. Excluded delivery metadata and the directory move cannot
-   self-invalidate the product digest; intent stays independently bound. Retain the
-   review session through this successful Deliver consumption; only then may its derived
-   artifacts be garbage-collected.
-
-   Transport and task-evidence validators establish exact structural, identity,
-   provenance, and freshness facts only. Their success never means that the Change is
-   semantically accepted or that its outcome is ready to describe as delivered.
-
-Do not draft a success narrative around stale evidence. A current `passed: false`
-report may still reach finalization only after every finding has an explicit owner
-disposition and the one hard gate below is clear; `passed` is evidence summary, not a
-second mechanical release gate.
-
-## The one delivery gate
-
-This gate applies only after the owner explicitly invokes `ultra-deliver`; it does not
-attach itself to ordinary repository packaging outside this workflow.
-
-Everything else in this workflow reports and hands over. This is the exception, and it
-is deliberately narrow:
-
-**Do not produce a release package while an export this Change added or changed has no
-non-test consumer and no recorded owner disposition.**
-
-| | |
-|---|---|
-| Invariant | Every changed export is either reachable from a non-test caller or explicitly declared internal |
-| Fact source | The Wiring Verification finding and its owner disposition in `.ultra/test-report.json`, bound to the current Change id, task ids, intent, HEAD, and product-worktree digest — the audit already found these; this is not a fresh opinion |
-| Blocked effect | Release-package creation and the separately authorized release effects after it. A non-publishing package inspection is diagnostic; local commit and archival are untouched |
-| Repair | Wire the export to its caller, or record the owner's disposition on the finding in `.ultra/test-report.json`, then carry it into `delivery.md`. Either one clears the gate |
-
-"Written but never connected" can leave tests and review green while the feature is
-absent. Keep this gate at finalization, after the audit can distinguish unfinished work.
-
-## Archive locally
-
-After the fresh check, `git mv` active `<id>` to archive. The id stays stable in task
-rows; never store a movable intent path or create a second delivery summary. Archived
-delivery, test report, evidence, and Git history are the handoff.
-
-For separately authorized effects, perform and verify each independently. Ask for
-authority at the point of effect: commit, then push, then tag, package publication and
-deployment as applicable. A failure in one does not imply permission to attempt another.
-
-## When the owner decides
-
-The owner accepts residual risk, reductions, the version, and every external effect.
-Without release authority, stop after the recoverable local archive and report it.
-
-## References
-
-- `../ultra-change/references/change-contract.md` — canonical Active Change authority resolution.
-- `../ultra-review/SKILL.md` — read before aggregate review and refactoring.
-- `../ultra-plan/references/task-evidence-v2.md` — canonical current task evidence and task-review contract.
-- `../ultra-think/SKILL.md` — read when version or release posture is a consequential
-  trade-off rather than an established repository rule.
-- `../ultra-think/references/autonomy-boundary.md` — read before scope or evidence shrinks.
-- `../ultra-change/references/execution-grant.md` — read only for grant-activated continuation.
-- `../ultra-status/references/route-contract.md` — owner-visible route, checkpoint, and recovery output.
-- `references/baseline-reconciliation.md` — exact `delivery.md` reconciliation contract.

package/skills/ultra-deliver/references/baseline-reconciliation.md

@@ -1,41 +0,0 @@
-# Delivery reconciliation contract
-
-Write exactly one `.ultra/changes/active/<change-id>/delivery.md`. It is editable while
-the Change is active and moves with the directory when archived.
-
-```markdown
-# Delivery: <change-id>
-
-## Outcome Reconciliation
-<accepted outcome versus observed result, with path#anchor evidence>
-
-## Specification and Documentation Updates
-<changed files and why, or an evidence-backed no-change statement>
-
-## Verification
-| Command | Exit | Evidence | Freshness |
-|---|---:|---|---|
-
-## Review
-<SUMMARY.json path, packet digest, verdict, and unresolved findings>
-
-## Technical Debt
-<bounded debt, consequence, owner, and upgrade path; or None>
-
-## Residual Risks and Omissions
-<owner disposition for every material item>
-
-## Recovery
-<rollback or recovery procedure and verification>
-
-## External Effects
-<commit, push, tag, publish, deploy: authorized and observed status separately>
-```
-
-Every semantic update cites a repository-relative `path#anchor`. A reduction requires
-the owner decision before the affected specification changes. Exact command evidence
-must match the stable Change id, exact current task ids, intent digest, HEAD, and
-product-worktree digest identified by `.ultra/test-report.json`; stale results stay
-visible and never become a pass. Reconcile before finalizing. If reconciliation changes
-semantic or product files, obtain a fresh Test snapshot before writing final delivery
-metadata or archiving. Do not create a second JSON or Markdown delivery summary.