# Worktree Triage and Consolidation — request

Status: ACTIVE
Started: 2026-08-10
Baseline: `origin/master` @ `dbabfb3fa50158ce222a3928587b2f65eaff0360` (fetched from canonical GitHub 2026-08-11)
Evidence ledger and recovery manifest: [2026-08-10-worktree-triage-ledger.md](2026-08-10-worktree-triage-ledger.md)

## Source request

Owner has 53 worktrees with unknown WIP. Wants triage of what each is, which plan/spec it
serves, when it started and when it went quiet, which to continue, which are dead, which can
be merged — ending with all relevant WIP preserved and a baseline that avoids a later
merge/rebase nightmare.

2026-08-11 owner correction: WIP triage remains the primary mission. The completed
`/gpt-orchestrator` skill is supporting infrastructure, not mission completion. Refresh every
surviving carrier against current GitHub `origin/master`; do not execute the stale landing order
or stop after infrastructure work. Continue until all relevant WIP is preserved, executable lanes
are landed sequentially, and only deletion-gate-qualified carriers are retired.

## Outcome

1. Every current valuable dirty carrier preserved under verified `refs/wip-snapshot/` refs without mutating shared or recovery worktrees. — DONE (62 refs)
2. Deletion-gate-qualified redundant worktrees/branches retired; active or uncertain carriers retained.
3. Live streams re-derived onto current `origin/master` and landed lowest-conflict first.

## Findings

### Baseline reality
- `origin/master` is the truth. Local `master` is stale at `1b338c6d` (2026-08-05).
- Admin-snappy already landed in master as squashes: "Make admin data routes instantly
  responsive", "Eliminate admin loading shifts", "Record admin snappy deployment status",
  releases 0.9.32–0.9.36. Every `admin-snappy-*` dev branch is therefore history, not WIP.

### Class A — dead: fully merged into `origin/master`, clean
`cap-12-licensing`, `wt/admin-test-repair`, `wt/deploy-runtime-ignores`,
`wt/overview-quick-actions`, `wt/task30-phpcs`, `wt/security-guard-codex-only`,
`worktree-agent-*` (13 harness worktrees). Removable.

### Class B — dead: superseded by the squashed master landings

Verified with the discriminating check — files the branch changed that master never touched
since the merge base, which is where unlanded work would hide:

```
MB=$(git merge-base origin/master "$b")
comm -23 <(git diff --name-only "$MB" "$b" | sort) <(git diff --name-only "$MB" origin/master | sort)
```

Result: `0` unlanded files for every snappy branch, `d7b2778f`, and the `wf_bf409304` trio.
`wt/admin-snappy-factory` shows exactly one — `.factory-input/admin-snappy-candidate.patch`,
a build input, not product code. Retiring these destroys nothing.

`admin-snappy-integration` (89 ahead, 50 dirty), `wt/admin-snappy-factory` (91 ahead,
95 dirty), `admin-snappy-final`, `admin-snappy-14-final`, `admin-snappy-10-descriptors`,
`admin-snappy-9-beachhead-gate`, detached `d7b2778f` (scratchpad),
`worktree-wf_bf409304-6f1-{1,2,3}` (admin loading baseline, 2026-08-04/05).
Snapshotted, then removable.

### Class C — long-gone: pre-08-05, superseded by later architecture
| Branch | Started | Last | Unlanded files | State |
|---|---|---|---|---|
| `recover/cloudpanel-runtime-health` | 2026-07-29 | 2026-07-30 | 8, all `admin-panel/dist` build output | CloudPanel legacy restoration, superseded by the CF platform direction. Nothing unlanded in source — retire |
| `worktree-license-only-api-configuration` | 2026-07-31 | 2026-07-31 | 27 real | Presentation translation journey; includes `Migration007RemoveConfigurableApiUrl.php`, E2E fixtures, `CLIENT-PRESENTATION-JOURNEY-SPEC.md`. Decide keep-or-drop deliberately |
| `cap02-active-client` | 2026-08-04 | 2026-08-04 | 5 real | `LicenseValidator.php`, `UpdateChecker.php` + 3 standalone contract tests never landed |
| `fix/cap02-stale-reconciliation` | — | 2026-08-03 | — | Merged, but 14 uncommitted source edits stranded in the worktree |
| `worktree-fix-cpt-dashboard-ui` | 2026-08-04 | 2026-08-04 | 1 real | `tests/integration/run-acf-field-transaction-race.sh` — stops the ACF race harness leaking anonymous DB volumes. Cherry-pick candidate |

### Class D — live: keep and land
| Stream | Branch | Started | State |
|---|---|---|---|
| Dual-layer admin cache | `wt/admin-snappy-contract-fix` | 2026-08-10 | 6 ahead, 0 behind, 6 dirty — land first |
| Emergency rollback record | `wt/emergency-ipz-rollback` | 2026-08-10 | 1 ahead, 0 behind, clean |
| Localhost-only testing | `wt/localhost-only-testing` | 2026-08-10 | 5 ahead, 0 behind, 20 dirty; plan self-marked quota-blocked |
| Partition removal | `wt/task-29-partition-removal` | 2026-08-10 | 1 ahead, 4 behind |
| Multilingual site entry/layout | `wt/multilingual-site-entry-and-layout` | 2026-08-10 | 1 ahead (spec only), 249 dirty |
| ACF never-translate | `feature/acf-never-translate` | 2026-08-09 | 2 ahead, 27 dirty; canonical of 3 identical branches |
| Manual translation locks | `wt/manual-translation-locks` | 2026-08-09 | 3 ahead (spec + plan + factory gate), 12 dirty |
| Language route 404 | `wt/fix-language-route-404` | 2026-08-09 | 2 ahead, 2 dirty |
| Plugin/worker parity (OAuth PKCE) | `fix/plugin-worker-parity` | 2026-08-06 | 8 ahead; plugin + backend GOLIVE |
| Dev mock translation provider | `feat/dev-mock-translation-provider` | 2026-08-01 | 4 ahead, backend-only — no plugin conflict risk |

### Duplicates to collapse
- ACF: `fix/acf-coordinator-retry`, `wt/acf-coordinator-retry`, `feature/acf-never-translate`
  share tip `6d366cff`. Keep `feature/acf-never-translate`.
- Snappy: six branches over one lineage already landed in master.
- `worktree-agent-*`: throwaway harness worktrees, no unique content.

### Broken states found
- `.worktrees/release1-tokenizer` — unresolved merge conflict (`UU`) in
  `admin/src/pages/content-translate.js`; its branch is already merged to master.
- `.worktrees/release1-dev1` — mixed staged/unstaged edits; branch already merged to master.
- Main shared checkout — 97 dirty files including the untracked journey-E2E suite
  (`tests/e2e/journeys/UJ-001..`), `docs/ui_matrix/`, `docs/user_journeys/`, and backend
  `tokenCalculation` edits. No branch covers this work.

### Conflict hot spots (drive the landing order)
`admin/src/pages/content-translate.js`, `admin/src/styles/pages/_translations.scss`,
`includes/API/TranslationsController.php`, `includes/Core/LanguageManager.php` — touched by
the release1 pair, ACF, multilingual-layout, and the main checkout simultaneously.

## Snapshot index

39 immutable refs under `refs/wip-snapshot/`, each a commit whose parent is that worktree's
HEAD and whose tree is the full dirty state including untracked files. Regenerate this table
from the refs themselves — the subjects carry `branch=`, `dirty=`, `path=`:

```
git for-each-ref --format='%(refname:short) %(contents:subject)' refs/wip-snapshot
```

| Ref (`wip-snapshot/…`) | Branch | Dirty | Class |
|---|---|---|---|
| `wt01-MAIN-checkout` | `fix/content-generate-all` | 97 | RESCUED → `wt/journey-e2e` + `wip/main-checkout-2026-08-10` |
| `wt03-wt-plugin` | `fix/plugin-worker-parity` | 1 | D |
| `wt04-admin-snappy-integration` | `admin-snappy-integration` | 50 | B |
| `wt05-acf-coordinator-retry` | `fix/acf-coordinator-retry` | 1 | D (duplicate) |
| `wt06`–`wt18` `agent-*` (13 refs) | `worktree-agent-*` | 1 each, `wt08`=29 | A |
| `wt21-cap02-stale-reconciliation` | `fix/cap02-stale-reconciliation` | 14 | C |
| `wt22-cloudpanel-restoration-recovery` | `recover/cloudpanel-runtime-health` | 92 | C |
| `wt24-fix-language-subdirectory-urls` | `worktree-fix-language-subdirectory-urls` | 6 | A |
| `wt25-license-only-api-configuration` | `worktree-license-only-api-configuration` | 129 | C |
| `wt29-acf-coordinator-retry` | `wt/acf-coordinator-retry` | 1 | D (duplicate) |
| `wt30-acf-never-translate` | `feature/acf-never-translate` | 27 | D (canonical) |
| `wt31-admin-snappy-contract-fix` | `wt/admin-snappy-contract-fix` | 6 | D |
| `wt32-admin-snappy-factory` | `wt/admin-snappy-factory` | 95 | B |
| `wt34-admin-snappy-land` | `wt/admin-snappy-land` | 31 | A |
| `wt38-estimate-word-token-counts` | `wt/estimate-word-token-counts` | 1 | A |
| `wt39-feat-dev-mock-translation-provider` | `feat/dev-mock-translation-provider` | 6 | D |
| `wt40-fix-language-route-404` | `wt/fix-language-route-404` | 2 | D |
| `wt41-fix-language-subdirectory-urls-ship` | `wt/fix-language-subdirectory-urls-ship` | 2 | A |
| `wt42-localhost-only-testing` | `wt/localhost-only-testing` | 20 | D |
| `wt43-manual-translation-locks` | `wt/manual-translation-locks` | 12 | D |
| `wt44-multilingual-site-entry-and-layout` | `wt/multilingual-site-entry-and-layout` | 249 | D |
| `wt46-release1-dev1` | `wt/release1-dev1` | 46 | broken (mixed staged/unstaged) |
| `wt47-release1-tokenizer` | `wt/release1-tokenizer` | 22 | broken (`UU` conflict — record only, not a patch source) |
| `wt48-security-guard-codex-only` | `wt/security-guard-codex-only` | 1 | A |
| `wt49-task-10-descriptors` | `admin-snappy-10-descriptors` | 1 | B |
| `wt50-task-14-final` | `admin-snappy-14-final` | 2 | B |
| `wt51-task-29-partition-removal` | `wt/task-29-partition-removal` | 1 | D |
| `wt52-task-9-beachhead-gate` | `admin-snappy-9-beachhead-gate` | 2 | B |

## Execution steps

1. Snapshot every dirty worktree to `refs/wip-snapshot/`. — DONE (39 refs)
2. Verify Class B is genuinely landed with the discriminating check. — DONE (0 unlanded)
3. Rescue the main checkout's unique work. — DONE: `wt/journey-e2e` @ `90b5a691`
   (71 files: `UJ-001`..`UJ-007` specs + manifests, `docs/user_journeys/`, `docs/ui_matrix/`,
   the coverage plan and design spec) off `origin/master`; full 97-file state also preserved
   as branch `wip/main-checkout-2026-08-10`. The owner's working tree was not touched.
4. Deliver triage to owner. — DONE
5. Remove Class A/B worktrees. Decouple this from branch deletion: `git worktree remove`
   reclaims the clutter and destroys nothing. Tag `retired/<name>` before any `branch -D`.
6. Land Class D on owner's cadence, smallest-first, rebasing each onto `origin/master`
   before the next: `admin-snappy-contract-fix` → `emergency-ipz-rollback` →
   `localhost-only-testing` (all three at 0 behind) → `task-29-partition-removal` →
   `fix-language-route-404` → ACF → `manual-translation-locks` → `plugin-worker-parity` →
   `dev-mock-translation-provider` → `multilingual-site-entry-and-layout`.

## Conflict measurement (2026-08-10)

Measured with `git merge-tree --write-tree origin/master <branch>` — a dry 3-way merge that
touches no worktree. Drives the landing order: clean ones first, so each conflicted branch
rebases against a master that already absorbed its neighbours.

| Branch | Rebase | Code | Tests | Docs | Read |
|---|---|---|---|---|---|
| `wt/admin-snappy-contract-fix` | CLEAN | 27 | 6 | 1 | Built + tested, 0 behind — land now |
| `wt/emergency-ipz-rollback` | CLEAN | 0 | 0 | 2 | Record only — land now |
| `wt/localhost-only-testing` | CLEAN | 0 | 0 | 3 | Spec+plan only, self-marked quota-blocked |
| `wt/task-29-partition-removal` | CLEAN | 6 | 1 | 0 | Deletion of speculative partitioning; −1667 lines |
| `wt/manual-translation-locks` | CLEAN | 0 | 0 | 2 | Spec+plan only, no implementation started |
| `wt/multilingual-site-entry-and-layout` | CLEAN | 0 | 0 | 2 | Spec+plan only; 249 dirty files are build output |
| `worktree-fix-cpt-dashboard-ui` | CLEAN | 1 | 1 | 0 | One-file harness fix — cherry-pick |
| `feat/dev-mock-translation-provider` | 1 file | 18 | 9 | 0 | Backend-only; conflict is `geminiClient.ts` |
| `wt/fix-language-route-404` | 3 files | 4 | 1 | 0 | `Plugin.php`, plugin bootstrap, `readme.txt` |
| `feature/acf-never-translate` | 4 files | 10 | 3 | 2 | `ACFIntegration.php`, `Plugin.php` + build output |
| `cap02-active-client` | 49 files | — | — | — | Stale since 08-04; re-derive, do not rebase |
| `fix/plugin-worker-parity` | 58 files | 26 | 5 | 1 | OAuth PKCE; large but valuable — re-derive onto master |
| `worktree-license-only-api-configuration` | 83 files | — | — | — | Stale since 07-31; harvest `Migration007` only |

## Current receipt

Cleanup executed 2026-08-10 on owner's go:

- **Worktrees 53 → 17.** 38 removed. Every removed worktree's uncommitted state lives in its
  `refs/wip-snapshot/` ref first.
- **Branches ~104 → 20.** 84 deleted, each tagged `retired/<name>` immediately before
  deletion, and each verified at 0 unlanded files by the discriminating check. Recover any
  with `git branch <name> retired/<name>`.
- **Nothing unmerged was deleted.** Class C and D branches all survive.
- Preserved: 46 `refs/wip-snapshot/*`, 84 `refs/tags/retired/*`, `wt/journey-e2e`,
  `wip/main-checkout-2026-08-10`.

2026-08-11 refresh receipt:

- Canonical remote reverified as `git@github.com:avi-ezra/Press.Zone-Works.git`; remote default is
  `master`; fetch/prune succeeded; baseline is `dbabfb3fa50158ce222a3928587b2f65eaff0360`.
- Earlier divergence, conflict, progress, and landing-order measurements are stale. In particular,
  `wt/admin-snappy-contract-fix` is now 70 behind / 3 ahead and dirty, not 0 behind.
- Refreshed inventory is complete: 26 registered worktrees (including shared checkout), five
  branch-only local refs, five stashes, 62 verified snapshot refs, and 96 verified retirement tags.
  Nine worktrees were added after the 53→17 cleanup for artifact/recovery work; this is why the
  pre-retirement count returned to 26. Every current bounded valuable dirty lane now has an exact
  stable-tree snapshot; all five stashes have exact durable mirrors. See the linked evidence ledger.
- Shared checkout current state was re-preserved without mutating its worktree/index as
  `refs/wip-snapshot/main-current-20260811-triage-refresh` → `8fda4bba4b5a7d56df2dba6d30d5ceae934ab4b0`.
  Stable-state SHA-256 matched before/after; snapshot includes 14 tracked changes and 94 bounded
  source/docs/test/migration untracked files, including UJ-020 and backend webhook migration;
  4,646 generated, nested-worktree, cache, runtime, backup, or local-settings paths were excluded.
- Release-integrity and ask-gpt plan history already landed through `dbabfb3fa`; the refreshed
  inventory must prove each remaining lane against that baseline.
- Local ask-gpt task `by6hy6mis` for localhost verifier conversation
  `6a7aaa2e-8cbc-83ec-a67b-c1dee210e64d` remains running; no completion or artifact bytes are
  claimed. External generation does not block other triage lanes.
- Cross-session ownership probes are in flight for ACF, manual-lock, and general IPZ sessions.
  Overdeck WIP-triage and ask-gpt-download sessions confirmed their owned worktrees are in the
  Overdeck repository only; neither authorizes nor blocks Press.Zone carrier retirement.

Owner's premise "all work is landed and merged" held for Class A and B only. Class C carries
33 files master never received (`Migration007RemoveConfigurableApiUrl.php`, `LicenseValidator.php`,
`UpdateChecker.php`, 3 contract tests, the ACF race-harness fix, E2E fixtures); Class D is
10 unmerged streams. Deleting on that premise would have destroyed all of it.

- Cross-session ownership probe found live Claude PID `1939314` rooted in
  `wt/fix-language-route-404`; deletion gate condition 11 failed. Its landed commit and retirement tag
  remain intact, but the worktree/branch were retained without mutation.
- Safe retirement executed for the other nine reviewed worktrees and two branch-only refs. Worktrees
  are now **26 → 17** and local branches **31 → 20**. `wt/task-29-partition-removal/%h` was removed
  only after re-proving all 756 entries were regular `.cache/python-bytecode/*.pyc` files; no force was
  used for worktree removal. Local branch deletion used `-D` only after exact tag verification and
  direct ancestry to current `origin/master`, because `git branch -d` compares against the triage
  branch rather than the canonical baseline.
- Post-removal verification passed: all 62 snapshot refs and 96 retirement tags resolve to commits;
  no retired path/branch remains; canonical baseline is unchanged at `dbabfb3fa`.
- Current conflict/divergence recalculation is recorded in the evidence ledger. Triage evidence is the
  only zero-behind lane; active product/recovery lanes range from 33 to 227 commits behind.

- Triage evidence commits landed by fast-forward to canonical GitHub `master` through `843757012`;
  `origin/master` was refreshed immediately before push and the branch was 0 behind / 3 ahead with
  only the three authoritative plan/ledger files changed.
- Admin dual-layer cache is now the first active landing lane. Dedicated worker `admin-cache-lane`
  owns `/home/user/Projects/Press.zone/wordpress/wp-content/.worktrees/admin-snappy-contract-fix`;
  it must preserve current WIP, reconcile against `843757012`, run TDD and all expert gates, and
  return a local commit for parent-controlled landing.
- Backend Jest repair is independently executing in parallel under worker `backend-jest-lane` in
  `.worktrees/ask-gpt-backend-jest`; `.worktrees/backend-test-repair` is read-only comparison input.
  Landing remains sequential: admin cache first, then backend Jest after a fresh baseline check.
- Read-only triage workers are resolving the ACF backup contradiction, decomposing the historical
  shared-checkout snapshot, adversarially reducing CAP-02 carriers, separating current behavior
  from stale CloudPanel/license-only architecture, auditing multilingual WIP, and mapping OAuth
  parity. The first OAuth security-guard attempt produced no findings because Codex containment
  failed on debian1 (exit 12); a direct read-only replacement worker is active and MUST NOT invoke
  Codex. Audit workers own no mutation authority; results update this ledger before any new
  retirement or implementation decision.
- Canonical GitHub `master` advanced docs-only to `77687984d`; all active workers were notified to
  use it for final landing readiness. Post-landing committed-state conflicts remain 18 for OAuth,
  16 for CAP-02, 27 for license-only, and 16 for CloudPanel; other committed trees remain clean.

### Restart pause and resume receipt (2026-08-11)

Owner restarted Claude Code. All eight workers and the external ask-gpt correction were stopped
gracefully; no worker was mid-write and no repository file was reverted.

- Pause snapshots created and verified: `refs/wip-snapshot/pause-20260811/admin-cache`
  (`1e8852b64`) and `refs/wip-snapshot/pause-20260811/backend-jest` (`a052d0d24`). Snapshot refs
  total 66; retirement tags remain 96; worktrees 17; local branches 20.
- Admin-cache filesystem archive of all 19 changed paths:
  `/home/user/Projects/0 DOCS/wip-snapshots/2026-08-11-admin-cache-worktree.tar.gz`.
- Repository integrity repair: the admin-cache index referenced blob `718d45d9` for
  `docs/plans/INDEX.md`, which had been pruned. The worktree file rehashed to the identical SHA-1,
  proving no content loss; the object was rewritten with `git hash-object -w` and re-registered with
  `git update-index --cacheinfo`. NEVER resolve this class of error by discarding WIP.
- Local triage commit `a26226454` did not survive the restart, but its edits remained in the
  worktree and were recommitted. Nothing was lost.
- All workers were relaunched with instructions to re-derive current state rather than trust prior
  conclusions. The localhost verifier correction was re-sent into the same conversation only after
  read-only checks proved zero artifacts and no new server turn — no duplicate conversation.

- ACF backup contradiction resolved and retired. The branch differed from `origin/master` by exactly
  two documentation paths whose blobs are byte-identical (`74f525ac`, `0cafc2aa`), so it owned no
  unique plan, spec, acceptance criterion, or Task 11 instruction. Retired as
  `refs/tags/retired/backup/acf-never-translate-pre-rebase` (`7eef04c01`) after tag verification;
  `.worktrees/acf-never-translate` and `feature/acf-never-translate` were not touched. Snapshot refs
  are 67, retirement tags 97, local branches 19.

- Historical shared-checkout snapshot decomposed and retired. Branch tip `0b1d6ee7c` is the *same
  commit* as durable ref `refs/wip-snapshot/wt01-MAIN-checkout`, so deleting the branch removed no
  object. After excluding generated/dependency/cache/runtime noise, the only residual paths versus
  the current bounded snapshot were `CLAUDE.md.original.md` (byte-identical to
  `origin/master:CLAUDE.md`) and one harness temp script. Its 137 deletions are absences relative to
  baseline and MUST NEVER be applied. Retired as
  `refs/tags/retired/wip/main-checkout-2026-08-10`. Snapshot refs 67, retirement tags 98,
  local branches 18, worktrees 17.

- Three read-only audits returned and are recorded in full in the evidence ledger: multilingual,
  CAP-02, and the CloudPanel/license-only legacy pair. All three carriers are `RECOVER`, none is
  retirable, and each now has a bounded accept/reject/reimplement path map so it is never re-audited.
- The CAP-02 audit surfaced two exploitable defects on current `origin/master` itself, independently
  reverified here: a hardcoded encryption-key fallback in `ActivationManager.php:396`, and update
  verification that cannot execute because `UpdateChecker.php:286` calls a `private`
  `LicenseClient::request()`. Worker `licensing-hardening` is fixing both first, then harvesting the
  six approved CAP-02 licensing files. This preempts the admin-cache lane in landing order because
  the defects are live in shipped code.

- OAuth parity audit returned: the carrier's zero committed conflicts mean *mergeable and broken*.
  The in-repo Cloudflare backend hard-requires an `account_id` the plugin no longer sends, so token
  exchange 400s at connect. Recorded in the ledger with the server-side fix and its RED test.
- Repository secret exposure found and partly remediated on owner's decision: `press-zone-backend/Docs/`
  had tracked a Cloudflare private key and PayPal credentials in plaintext since 2026-03-08. Removed
  from HEAD and ignored in `c80b95ce8`; originals preserved outside the repo for rotation. Credentials
  remain valid and remain in history — rotation then purge is still outstanding and is owner-owned.

## 2026-08-12 preservation refresh

Audience: AI coding agents first.

Status: DONE
Task: `#1 Preserve all WIP carriers`

### Source request

Owner invoked `/wip-triage --preserve`. Preserve every current committed tip, staged change,
dirty tracked change, valuable untracked source, and stash under durable verified refs. Create a
recovery manifest. NEVER remove worktrees or branches.

### Acceptance criteria

1. Fetch/prune canonical `origin`; record default branch, baseline SHA, timestamp, and result.
2. Create durable descriptive refs for every current worktree tip and branch-only tip.
3. Snapshot each current staged, dirty, and valuable untracked state without mutating source worktrees.
4. Exclude credentials, dependencies, caches, generated output, logs, runtime files, and nested worktrees.
5. Mirror every stash under a durable non-reflog ref.
6. Verify every ref resolves and every snapshot tree contains its expected bounded path set.
7. Write recovery manifest mapping original path, branch, HEAD, WIP types, refs, verification, and recovery method.
8. Remove nothing.

### Preserved WIP and constraints

- Shared checkout remains active and MUST NOT be mutated.
- Existing `refs/rescued/*`, `refs/wip-snapshot/*`, and `refs/tags/retired/*` remain intact.
- Priority rescue `refs/rescued/claude-20260811T141919Z-294111` remains a recovery carrier.
- Temporary `tools/tmp/.ctx-mode-yE4PFU/script.sh` is untracked and security-unsafe; preserve provenance/evidence only, NEVER preserve it as executable source.
- Preservation executes from isolated `wt/wip-preserve-20260812` at refreshed `origin/master`.

### Execution steps

1. Inventory current worktrees, branches, stashes, ignored paths, and active owners.
2. Create committed-tip refs.
3. Create bounded full-state snapshot commits via isolated temporary indexes.
4. Create durable stash refs.
5. Verify refs and exact expected path coverage.
6. Record manifest and receipt; commit plan/evidence locally.

### Current receipt

- Canonical fetch/prune succeeded at `2026-08-11T17:56:42Z`.
- Canonical remote is `git@github.com:avi-ezra/Press.Zone-Works.git`; remote default is `master`; baseline is `b3c0fbcf1b0e99edfb470e0679a7af44e75da078`.
- Isolated preservation worktree: `.worktrees/wip-preserve-20260812`.
- Complete machine-readable recovery manifest: [2026-08-12-wip-preservation-manifest.json](2026-08-12-wip-preservation-manifest.json).
- Created and verified 54 durable refs under `refs/wip-preserve/20260812/`: 30 current worktree tips, five branch-only tips, 14 bounded full-state snapshots, and five stash mirrors.
- Snapshot verification passed: each snapshot resolves to a commit and its parent-to-snapshot diff path list exactly equals `expected_snapshot_paths` in the manifest.
- All 30 source worktree porcelain-v2 status SHA-256 fingerprints matched before/after. No source worktree or index was mutated.
- Excluded 2,090 paths classified as credentials/auth/env, dependencies, generated output, caches, logs, runtime, backups, nested worktrees, or non-source untracked files. Exact path/reason mappings are in the manifest.
- Unsafe generated `plugins/international-press-zone/tools/tmp/.ctx-mode-yE4PFU/script.sh` content was not preserved. Manifest records provenance, 1,183-byte size, and SHA-256 `7e84b504715596bdd1aeab81080175f1f377e5b741e4312fabdad0385d47083b` only.
- Existing `refs/rescued/*`, `refs/wip-snapshot/*`, and retirement tags were not changed.
- No worktree, branch, stash, or existing ref was removed.
- Refresh verification found three post-inventory worktrees: `wt/acf-page-cache`, `wt/review-current-diff`, and `wt/ui-component-redesign`.
- Created and verified six additional refs under `refs/wip-preserve/20260812/refresh-02/`: three tip refs and three bounded snapshots covering 17 paths. Two generated paths were excluded from the UI redesign snapshot.
- Manifest now covers 33 worktrees, five branch-only tips, 20 current snapshots, and five stash mirrors: 66 durable refs total.
- Three carriers changed after their earlier snapshot and were re-preserved under `refresh-03`: `wt/acf-table-implementation` (6 paths), `wt/remaining-release-orchestration` (694 bounded paths, 32 exclusions), and `wt/acf-page-cache` (12 paths).
- Every refresh snapshot preserved the exact pre-snapshot status fingerprint; no source index or worktree was mutated by preservation.
- Preservation evidence landed on canonical `master` through `33c67c67d`.
- Localhost-only testing was reconciled onto the refreshed baseline, focused guard tests passed (6/6), canonical local-fixture runtime verification passed, and implementation landed as `14bcb187a`.
- Backend defect lane landed on canonical `master` through `cef69cc16`: camelCase credit transaction mapping uses generated Prisma row types; API-key revocation performs one ownership-scoped write and returns 404 on no match. Focused tests passed (83/83); TypeScript build passed; changed-file ESLint passed. Repository-wide ESLint still reports 114 pre-existing warnings outside this lane.
- ACF page-cache lane landed on canonical `master` through `a9cc745ce`: ACF field graph caching, persisted browser snapshot validation, and focused invalidation coverage. PHP tests passed separately (81 tests, 476 assertions total); focused admin tests passed (85/85); production admin build passed; post-build localization tests passed (19 tests, 264 assertions). Repository-wide PHPCS remains noisy on pre-existing files and test fixtures, so it is not clean evidence for this lane.
- Plugin/worker parity OAuth subset landed on canonical `master` through `8aa87684b`: OAuth PKCE connect/callback, state validation, encrypted site API credential storage, account-ID removal, stored-key Bearer authentication at selected call sites, and focused auth tests. Focused PHP tests passed (5 tests, 17 assertions); pre-commit PHPCS/PHPStan passed for each landed commit.
- Rejected stale parity replay: preserved `licensing.js` and `onboarding.js` whole-file versions regressed current DataRegion/loading behavior (11 admin failures before rejection). Current frontend was restored; current production build passed. The admin suite's bundle-budget test remains blocked by `local-gate` mirror not carrying generated `dist/asset-manifest.json`, while the local manifest exists and all other 556 tests passed.
- Rejected preserved DELETE-as-cancel transplant after reading the current backend: `DELETE /v1/jobs/:jobId` only accepts terminal jobs and explicitly does not implement deletion; it cannot cancel pending jobs. Current webhook headers remain `X-Webhook-Signature` and `X-TPZ-Timestamp`, so the preserved `X-IPZ-*` verifier would also break callbacks. The original parity carrier remains preserved for provenance; stale whole-tree replay is not a landing strategy.

- Licensing Slices B/C landed on canonical `master` through `3eaef1bdb`. Slice C now verifies downloaded package bytes before extraction, validates strict backend booleans/hash/version, rejects downgrade/non-stable releases, and verifies paths supplied by earlier pre-download filters. Slice B adds validated `POST /v1/international/license/status` and moves plugin status credentials from URL query parameters into JSON. Focused plugin regression passed; PHPCS/PHPStan pre-commit gates passed; backend route/update tests passed (22/22). Independent security review findings were fixed before landing.

- Mock translation provider carrier is semantically landed despite non-ancestral history: current `origin/master` contains the execution-mode migration/schema, secure issuance/auth wiring, provider boundary, Gemini adapter, deterministic mock provider/store, and tests. Focused current-master verification passed 40/40 tests across nine suites. Remaining byte differences are later current-master evolution, not missing carrier behavior; no stale replay is warranted.

- Manual-translation-lock carrier is fully landed/redundant: all three branch commits (`037d11e33`, `989e90bf3`, `f044c88e2`) are ancestors of current `origin/master`; every file in preserved dirty snapshot `cd44016f0` is byte-different only by whitespace (`git diff --ignore-all-space --quiet` passed for all six). No semantic implementation remains to recover.

## Next executable action

Reimplement missing ACF runtime-matrix Task #11 against current `origin/master`; NEVER replay the unfinished preserved tree wholesale.

Acceptance delta:

1. Extract one shared content-translation dispatcher from the current REST generation path without changing its public response or authorization behavior.
2. Persist and coalesce ACF source-change intent before remote dispatch; make retries idempotent and represent uncertain remote acceptance without duplicate dispatch.
3. Serialize ACF translated-value mutation and rollback by normalized storage root using connection-owned locks; preserve ownership after partial release failure and surface committed-success cleanup failures without converting them into retryable mutations.
4. Wire services through the current plugin composition root and cover duplicate dispatch, uncertain delivery, duplicate roots, release failures, durable retries, hook ordering, and mutation races.
5. Pass focused PHP tests, PHPCS, PHPStan, applicable integration/race gates, and independent security/correctness review; rebase and push to `origin/master`.
6. Continue semantic classification and selective recovery of every remaining preserved carrier. Keep uncertain carriers and immutable recovery refs; delete nothing in consolidation mode.

Current receipt: isolated lane `wt/licensing-slices-bc` refreshed and its receipt landed on canonical `master` as `e8022b723`. Current REST, ACF, migration, and composition seams are mapped. A dedicated isolated worker is implementing Task #11 from current code; no preserved tree is being replayed.

Remaining-carrier semantic pass proved these lanes landed and recoverable only for provenance: CAP-02 licensing (`ec3c95a0b`), backend test repair (`92973ea5c`), localhost guard (`14bcb187a`), language-route repair (`b51da8dfa` ancestor), and partition removal (`b5826ae3` ancestor plus `3fb0f1bd7`). Stash `6505c124` contains only stale `admin.test.ts` fixture repairs superseded by authoritative backend Jest repair commit `92973ea5c`, so it is `RETIRE — LANDED`. CloudPanel stash `17e63a75`, generated ACF bundle stash `052e003a`, and old master stashes `1701b040`/`535cd398` are redundant. All immutable preservation refs remain.

Potentially unique multilingual site entry/layout, license-only presentation/demo, host-independent CloudPanel durability, and bounded shared-checkout groups are `UNKNOWN`, not `RECOVER`: no current authoritative plan/spec was found for those scopes, and uniqueness does not authorize stale feature work. Keep them preserved. UJ-020 is the only shared-snapshot item tied to a current journey requirement, but its cancel contract conflicts with current terminal-job deletion semantics and requires separate reconciliation before implementation; it does not authorize replaying the shared snapshot.

Next action: complete, independently review, verify, rebase, and land the active ACF runtime-matrix implementation. Then reconcile UJ-020 against the current backend job contract and close the consolidation receipt without deleting uncertain carriers.
