chore: tickets opt-in by default, registry prune, CI + perf cleanup

Tickets integrations (skill install/check, doc upsert) now apply only
when the tickets extension is enabled for the scope; hack setup
tickets notes optional/legacy status. hack projects prune removes
registry entries with missing repo roots and works with docker down;
--json emits the standard envelope. findExecutableInPath honors
runtime PATH. Deterministic test runner deleted (plain bun test is
order-independent now). Planet animation data lazily imported out of
the startup module graph. Stale github/linear extension entries
disabled in this repo's config.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: roodboi

.hack/hack.config.json

@@ -5,13 +5,13 @@
   "controlPlane": {
     "extensions": {
       "dance.hack.github": {
-        "enabled": true
+        "enabled": false
       },
       "dance.hack.tickets": {
         "enabled": false
       },
       "dance.hack.linear": {
-        "enabled": true
+        "enabled": false
       }
     },
     "gateway": {

packages/cli/package.json

@@ -24,7 +24,7 @@
     "macos:ghostty:setup": "cd ../.. && bun run scripts/macos-ghostty-setup.ts",
     "macos:ghostty:bundle": "cd ../.. && bun run scripts/macos-ghostty-bundle.ts",
     "typecheck": "bunx tsc -p tsconfig.json --noEmit",
-    "test": "cd ../.. && bun run scripts/run-tests-deterministic.ts",
+    "test": "cd ../.. && bun test",
     "check": "cd ../.. && bunx ultracite check src packages/cli/index.ts index.ts scripts/build-release.ts scripts/build-node-runtime-image.ts scripts/install-cli.ts scripts/install-status.ts scripts/uninstall-cli.ts scripts/macos-ghostty-bundle.ts scripts/macos-ghostty-setup.ts",
     "lint": "bun run check"
   }

scripts/run-tests-deterministic.ts

@@ -1,9 +1,11 @@
 import { checkClaudeHooks, installClaudeHooks } from "../agents/claude.ts";
 import { checkCodexSkill, installCodexSkill } from "../agents/codex-skill.ts";
 import { checkCursorRules, installCursorRules } from "../agents/cursor.ts";
+import { resolveTicketsIntegrationEnablement } from "../control-plane/extensions/tickets/enablement.ts";
 import {
   checkTicketsSkill,
   installTicketsSkill,
+  type TicketsSkillResult,
 } from "../control-plane/extensions/tickets/tickets-skill.ts";
 import { findProjectContext } from "../lib/project.ts";
 import {
@@ -112,6 +114,10 @@ function resolveIntegrationSyncMode(): IntegrationSyncMode {
 async function detectIntegrationDrift(opts: {
   readonly projectRoot: string;
 }): Promise<{ readonly hasDrift: boolean }> {
+  const ticketsEnablement = await resolveTicketsIntegrationEnablement({
+    projectRoot: opts.projectRoot,
+  });
+
   const [
     cursorProject,
     cursorUser,
@@ -131,8 +137,12 @@ async function detectIntegrationDrift(opts: {
     checkClaudeHooks({ scope: "user" }),
     checkCodexSkill({ scope: "project", projectRoot: opts.projectRoot }),
     checkCodexSkill({ scope: "user" }),
-    checkTicketsSkill({ scope: "project", projectRoot: opts.projectRoot }),
-    checkTicketsSkill({ scope: "user" }),
+    ticketsEnablement.project
+      ? checkTicketsSkill({ scope: "project", projectRoot: opts.projectRoot })
+      : skippedTicketsResult({ scope: "project" }),
+    ticketsEnablement.global
+      ? checkTicketsSkill({ scope: "user" })
+      : skippedTicketsResult({ scope: "user" }),
     checkMcpConfig({
       scope: "project",
       projectRoot: opts.projectRoot,
@@ -172,6 +182,21 @@ function hasSingleCheckDrift(status: string): boolean {
   return status !== "noop";
 }
 
+/**
+ * Placeholder result for tickets integrations when the tickets extension is
+ * disabled for the checked scope. Tickets is optional/legacy: its skill must
+ * never count as drift (or get auto-installed) unless explicitly enabled.
+ */
+function skippedTicketsResult(opts: {
+  readonly scope: "project" | "user";
+}): TicketsSkillResult {
+  return {
+    scope: opts.scope,
+    status: "noop",
+    path: "(tickets extension disabled)",
+  };
+}
+
 function hasMcpDrift(opts: {
   readonly checks: readonly McpCheckResult[];
 }): boolean {
@@ -187,6 +212,10 @@ function hasDocDrift(opts: {
 async function autoSyncIntegrations(opts: {
   readonly projectRoot: string;
 }): Promise<{ readonly ok: boolean }> {
+  const ticketsEnablement = await resolveTicketsIntegrationEnablement({
+    projectRoot: opts.projectRoot,
+  });
+
   const [
     cursorProject,
     cursorUser,
@@ -206,8 +235,12 @@ async function autoSyncIntegrations(opts: {
     installClaudeHooks({ scope: "user" }),
     installCodexSkill({ scope: "project", projectRoot: opts.projectRoot }),
     installCodexSkill({ scope: "user" }),
-    installTicketsSkill({ scope: "project", projectRoot: opts.projectRoot }),
-    installTicketsSkill({ scope: "user" }),
+    ticketsEnablement.project
+      ? installTicketsSkill({ scope: "project", projectRoot: opts.projectRoot })
+      : skippedTicketsResult({ scope: "project" }),
+    ticketsEnablement.global
+      ? installTicketsSkill({ scope: "user" })
+      : skippedTicketsResult({ scope: "user" }),
     installMcpConfig({
       scope: "project",
       projectRoot: opts.projectRoot,

src/cli/integration-sync.ts

@@ -770,6 +770,16 @@ function rewriteUrlLikeValueForHostExecution(input: {
   return `${prefix}${rewrittenHost}${suffix}`;
 }
 
+/**
+ * @deprecated v2→v3 legacy `.env`→`hack.env` migration shim. Only fires for
+ * projects that still carry a v2 env contract without the v3 config files.
+ * The underlying migrator is `migrateLegacyProjectEnv` in
+ * `src/lib/project-env-config.ts`.
+ *
+ * TODO(remove: v3.2): drop this migration path (and its callers in
+ * project/doctor/session command flows) once v2 projects are no longer
+ * supported.
+ */
 async function maybeMigrateLegacyProjectEnv(input: {
   readonly project: ProjectContext;
   readonly projectName: string;