chore: sync public mirror from internal

[haasonsaas]

Summary

• sync the sanitized public tree from evalops/maestro-internal
• keep evalops/maestro as a generated public mirror of the private source of truth
• preserve public-owned CI and trusted-publishing workflows from the public checkout
• internal source SHA: d292596914a5659ba91e9599ff8ddfd1dca621d2
• last generated public sync base: 799acd923fb8a0ddf37d6dd714678632a84a7226
• previewed public-tree drift: 15 file(s) to copy/update and 0 stale file(s) to delete
• public-only commits since last generated sync: 0

Source-of-truth status

Public Mirror Drift Audit

• package: @evalops/maestro
• private source: https://github.com/evalops/maestro-internal@main (d292596914a5)
• public projection: https://github.com/evalops/maestro@main (799acd923fb8)
• files to copy or update: 18
• stale files to delete: 0
• result: drift detected
• invariant: public_projection_has_drift

Sample Changed Paths

• copy/update docs/superpowers/plans/2026-07-13-automatic-oracle-policy.md
• copy/update src/agent/oracle-consultation-policy.ts
• copy/update src/server/handlers/chat-ws.ts
• copy/update src/server/handlers/chat.ts
• copy/update src/services/intelligent-router/normalize.ts
• copy/update src/services/intelligent-router/recorder.ts
• copy/update src/services/intelligent-router/service.ts
• copy/update src/services/intelligent-router/types.ts
• copy/update src/services/workspace-config/middleware.ts
• copy/update src/session/agent-lineage-projection.ts
• copy/update src/web-server.ts
• copy/update test/agent/oracle-consultation-policy.test.ts
• copy/update test/services/intelligent-router.test.ts
• copy/update test/session/agent-lineage-projection.test.ts
• copy/update test/web/chat-handler-profile.test.ts

Guidance

Let internal main generate and merge the public sync PR before relying on public main.

Drift sample

• copy/update docs/superpowers/plans/2026-07-13-automatic-oracle-policy.md
• copy/update src/agent/oracle-consultation-policy.ts
• copy/update src/server/handlers/chat-ws.ts
• copy/update src/server/handlers/chat.ts
• copy/update src/services/intelligent-router/normalize.ts
• copy/update src/services/intelligent-router/recorder.ts
• copy/update src/services/intelligent-router/service.ts
• copy/update src/services/intelligent-router/types.ts
• copy/update src/services/workspace-config/middleware.ts
• copy/update src/session/agent-lineage-projection.ts
• copy/update src/web-server.ts
• copy/update test/agent/oracle-consultation-policy.test.ts
• copy/update test/services/intelligent-router.test.ts
• copy/update test/session/agent-lineage-projection.test.ts
• copy/update test/web/chat-handler-profile.test.ts

Public-only commits since last generated sync

• none detected since last generated sync

Validation

• generated by the sync-public-release-mirror workflow in public-tree mode

Test Plan

• generated by the sync-public-release-mirror workflow in public-tree mode
• public-source-provenance require-internal-pr check confirms internal source PR lineage
• CI, integration, rust-hosted-conformance, coverage, Socket, and Cursor checks must pass before merge
• Do not merge until Cursor Bugbot review completes — Bugbot catches bugs that CI guardrails may not cover yet. If Bugbot finds issues, address them on this branch before merging.

Staged Rollout

• Staging is unnecessary for this generated mirror PR: it does not independently promote user-visible behavior. It mirrors already-reviewed internal source from evalops/maestro-internal@d292596914a5659ba91e9599ff8ddfd1dca621d2, including existing hidden/evaluation surfaces, and keeps public package parity behind the established public-source-provenance gate.

Supersedes

• updates existing generated public sync PR chore: sync public mirror from internal #821 to internal source d292596914a5659ba91e9599ff8ddfd1dca621d2

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 58df4eaff8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 7dc44196ae

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 45553c9ead

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".