chore: sync public mirror from internal

[haasonsaas]

Summary

• sync the sanitized public tree from evalops/maestro-internal
• keep evalops/maestro as a generated public mirror of the private source of truth
• internal source SHA: c040c5351d7d84a9e73d15c605cdd4abca2b2229
• source PRs: evalops/maestro-internal#2866, #2867, #2868, #2869, #2870, #2871, #2872, #2873, #2874, #2875, #2876, #2877, #2878

Source-of-truth status

Public Mirror Drift Audit: prepared from the exact internal main SHA above using the sync-public-release-mirror public-tree workflow scripts.

Public-only commits since last generated sync: 0 incorporated; public-owned CI and publishing files remain preserved by the mirror exclusions.

Validation

• generated prepared-tree smoke passed
• generated prepared public mirror CI guardrails passed for the feature mirror
• focused SSE resume suite passed after the integration-found mock fix: 28/28
• public PR CI, integration, conformance, coverage, and Socket checks must pass before merge

Test Plan

• public-source-provenance confirms generated branch and source lineage
• Cursor Bugbot responded but is unavailable because team on-demand usage is disabled

Staged Rollout

Staging is unnecessary for this generated mirror PR; it mirrors already-reviewed internal source and does not independently promote runtime behavior.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[haasonsaas]

@cursor review

[cursor]

Bugbot needs on-demand usage enabled

Bugbot uses usage-based billing for this team and requires on-demand usage to be enabled.

A team admin can enable on-demand usage in the Cursor dashboard.

[haasonsaas]

Follow-up fixes from this PRs full gates are now in the internal source of truth and regenerated here:

• evalops/maestro-internal#2875 completes the resumed SSE session-manager mock; focused chat handler suite passes 28/28 and public integration subsequently passed.
• evalops/maestro-internal#2876 regenerates the app-server payload schema for packaged agent resources; check:app-server-schema passes.
• evalops/maestro-internal#2877 makes painter image/mask persistence atomic; painter suite passes 26/26 and atomic-write hygiene passes.

Final internal source SHA: 3993faf3f91e5f039c2e5feb832e1563c4a2d02c.