chore: sync pstack 0.15.21 and preserve portable invocation gates

.cursor-plugin/marketplace.json

@@ -278,11 +278,6 @@
       "source": "third_party/brex",
       "description": "Query expenses, receipts, bills, cards, and travel."
     },
-    {
-      "name": "mercury",
-      "source": "third_party/mercury",
-      "description": "Read balances, transactions, statements, and cards."
-    },
     {
       "name": "todoist",
       "source": "third_party/todoist",
@@ -522,6 +517,21 @@
       "name": "workday",
       "source": "third_party/workday",
       "description": "Look up workers, organizations, time off, payroll, and recruiting data in Workday."
+    },
+    {
+      "name": "square",
+      "source": "third_party/square",
+      "description": "Work with payments, orders, catalog, customers, and invoices."
+    },
+    {
+      "name": "tailscale",
+      "source": "third_party/tailscale",
+      "description": "Let Grok Bot reach MCP servers on your private Tailscale network. Sign in to Tailscale to connect your tailnet; Grok Bot joins it as one tagged device and only reaches the hosts you grant to tag:grokbot.",
+      "minClientVersions": {
+        "cursor": "never",
+        "grokbot": "0.49.0",
+        "sand": "0.49.0"
+      }
     }
   ]
 }

README.md

@@ -59,7 +59,6 @@ Official Cursor plugins for popular developer tools, frameworks, and SaaS produc
 | `upwork` | [Upwork](third_party/upwork/) | Cursor | Integrations | Search talent, post jobs, and manage contracts. |
 | `workable` | [Workable](third_party/workable/) | Cursor | Integrations | Search candidates, move pipelines, and manage HR records. |
 | `brex` | [Brex](third_party/brex/) | Cursor | Integrations | Query expenses, receipts, bills, cards, and travel. |
-| `mercury` | [Mercury](third_party/mercury/) | Cursor | Integrations | Read balances, transactions, statements, and cards. |
 | `todoist` | [Todoist](third_party/todoist/) | Cursor | Integrations | Create, find, and complete tasks and projects. |
 | `calendly` | [Calendly](third_party/calendly/) | Cursor | Integrations | Check availability and book, cancel, or reschedule. |
 | `smartsheet` | [Smartsheet](third_party/smartsheet/) | Cursor | Integrations | Query and update sheets, rows, and workspaces. |
@@ -96,6 +95,8 @@ Official Cursor plugins for popular developer tools, frameworks, and SaaS produc
 | `shopify-store` | [Shopify](third_party/shopify-store/) | Cursor | Integrations | Connect your Shopify store so Grok can answer questions about products, orders, customers, inventory, and sales. |
 | `quickbooks-online` | [QuickBooks Online](third_party/quickbooks-online/) | Cursor | Integrations | Read invoices, bills, expenses, customers, accounts, and financial reports. |
 | `workday` | [Workday](third_party/workday/) | Cursor | Integrations | Look up workers, organizations, time off, payroll, and recruiting data in Workday. |
+| `square` | [Square](third_party/square/) | Cursor | Integrations | Work with payments, orders, catalog, customers, and invoices. |
+| `tailscale` | [Tailscale](third_party/tailscale/) | Cursor | Integrations | Let Grok Bot reach MCP servers on your private Tailscale network. Sign in to Tailscale to connect your tailnet; Grok Bot joins it as one tagged device and only reaches the hosts you grant to tag:grokbot. |
 Author values match each plugin’s `plugin.json` `author.name` (Cursor lists `plugins@cursor.com` in the manifest).
 
 ## Repository structure

README_PORTABLE.md

@@ -56,7 +56,7 @@ Read [runtime adaptation](tools/portable/assets/skills/poteto-mode/references/ru
 
 ## Runtime parity and limits
 
-The adapter preserves upstream review roles, participant counts, fresh-agent policy, and completion gates. The shared bundle intentionally removes `disable-model-invocation` from workflow skills so poteto-mode can route to them. The new poteto-help entry point retains upstream's explicit-only invocation, including the matching Codex policy. This changes discovery and invocation availability; it does not grant permission for side effects. Capacity limits queue participants in waves. If the host cannot provide an independent reviewer or isolated context, that gate remains unverified. A self-review or a missing transcript does not count as passing evidence.
+The adapter preserves upstream review roles, participant counts, fresh-agent policy, and completion gates. The shared bundle intentionally removes `disable-model-invocation` from workflow skills so poteto-mode can route to them. The poteto-help and ketchup entry points retain upstream's explicit-only invocation, including matching Codex policies. This changes discovery and invocation availability; it does not grant permission for side effects. Capacity limits queue participants in waves. If the host cannot provide an independent reviewer or isolated context, that gate remains unverified. A self-review or a missing transcript does not count as passing evidence.
 
 Portable Comment Sicko is read-only. Its parent applies accepted, scoped comment deletions and checks the resulting diff before completing no-comments. A findings-only report does not complete the edit workflow.
 

docs/maintenance-2026-10-13.md

@@ -0,0 +1,30 @@
+# Upstream maintenance, 2026-10-13
+
+## Scope
+
+Integrate cursor/plugins `1dcc2bacde73ddd284803b7af28164d0436198fc` (pstack 0.15.21) from the previous pin `ccb5507cec1546dc88135c1139c811e6c59115ba`, based on fork main `f755e1ff74b990083cf336a882c1a7206960193c`. The upstream range contains 51 commits. The full repository merge retains other upstream plugin changes; those are distinct from the portable pstack adaptation.
+
+The raw pstack, Thermos, README, and deslop dependency sources remain pristine at the new pin. Thermos and Claude-only Mods source and adapter content are unchanged. Their generated manifest versions advance only the upstream pin; their content digests remain unchanged.
+
+## Adaptation changes
+
+- Keep the new ketchup entry point explicitly invoked on both hosts. The previous generator dropped its `disable-model-invocation` flag. Add the matching Codex invocation policy and rejection tests for either policy being weakened.
+- Review the upstream plan checker's fenced-code parser update and update the portable companion's source digest. Its diagnostics and output protocol are unchanged. Add portable regressions for nested, tilde, indented, and properly closed code examples; substantive structural failures remain failures.
+- Keep the parent chat as the playbook runner, with native poteto-agent wrappers handling delegated steps. Recognize both the new `comment-sicko` name and the previous display name in runtime mappings.
+- Regenerate all portable packages. Keep upstream's new root plugin manifest as source content; Claude and Codex portable manifests continue to carry their host registrations and adapter version.
+
+## Executed checks
+
+- Portable generation drift and pristine-source validation passed.
+- All 133 portable Python regression tests passed, including Mods evidence/generator tests, Thermos, install verification, local worktree auditing, and sync fail-closed tests.
+- All 63 upstream Bun tests passed in an isolated scripts copy (orchestrator, watch-pr, and plan checker); strict watch-pr TypeScript checking passed.
+- Skills CLI 1.7.2 installed all 54 pstack skills and all 3 Thermos skills into isolated projects for both Claude Code and Codex. The installation verifier checked every bundled resource.
+- Repository-wide marketplace/plugin schema validation passed.
+- Shell syntax and staged/unstaged whitespace checks passed.
+- Both compatibility failures were reproduced against the previous fork code before checking the fixes: ketchup lost explicit-only metadata; the plan companion rejected the updated upstream checker as source drift.
+
+These checks establish source, packaging, executable helper, and installation behavior. They do not establish that a model follows every workflow. Native Claude Code plugin validation, native Mods execution, real model-turn behavior, and end-to-end watch-pr against GitHub were not run in this cloud environment. No user installation was changed.
+
+## Sync queue
+
+The open-sync-PR gate remains unchanged. It deliberately fails rather than overwriting a pending branch. The earlier draft PR #8 covers an older upstream revision and is still separate from this maintenance branch. Publishing, resolving that draft, triggering workflows, and merging require the corresponding authorized repository action; none is performed by generating this update.