Sync Cursor pstack 0.14.5 make-bot-ui skill

[yerzhansa]

Context

Open Pstack 1.2.0 is synchronized to Cursor pstack 0.14.3 at bdf7aa355337897f167153e05069aca505dae17c. Cursor pstack then landed two commits:

1. 799151d91b feat(pstack): add make-bot-ui skill (#271) — version 0.14.4, originally nested under pstack/skills/grokbot/make-bot-ui/
2. 6fecddba65 fix(pstack): register make-bot-ui at skills root (#275) — version 0.14.5, skill lives at pstack/skills/make-bot-ui/SKILL.md

git log bdf7aa355337897f167153e05069aca505dae17c..cursor/main -- pstack and GitHub compare confirm those two commits are the entire pstack delta. Other cursor/plugins commits in that range are third-party MCP plugins, not pstack.

Integration direction

Follow UPSTREAM.md: bring the commits over in order, then apply only the Claude Code and Codex substitutions documented in CHANGES.md.

• Port the skill to plugins/pstack/skills/make-bot-ui/SKILL.md (skills root, matching 0.14.5). Do not nest it under grokbot/.
• Keep Grok Bot APIs (update_state webhook routines, SendToUser secret-request) as Grok Bot instructions. Do not invent Codex-only tool names that do not exist, and do not drop the skill because it is Grok-Bot-oriented.
• Keep one shared plugins/pstack/skills/ tree. No extra harness fork or compatibility layer.
• Update UPSTREAM.md (commit 6fecddba65801f9b9c08b8b328d998ee5b09d290, upstream 0.14.5, open-pstack 1.3.0), NOTICE.md, CHANGES.md, README.md, README-UPSTREAM.md, docs/reference.md, and the three versioned manifests.

Acceptance criteria

• plugins/pstack/skills/make-bot-ui/SKILL.md exists at the skills root and is registered as a native skill.
• Grok Bot webhook and secret-request instructions remain; no invented Codex tool names.
• UPSTREAM.md records Cursor pstack 0.14.5 at 6fecddba65801f9b9c08b8b328d998ee5b09d290 and open-pstack 1.3.0.
• Version 1.3.0 matches across UPSTREAM.md and the three manifests.
• Bun tests, strict typecheck, static invariants, and plugin/manifest validation pass.
• No command trampoline layer, weaker-model fallback, implicit runtime timeout, or enduragent-specific content.

Source refs

• Cursor pstack PR #271: feat(pstack): add make-bot-ui skill cursor/plugins#271
• Cursor pstack PR #275: fix(pstack): register make-bot-ui at the skills root cursor/plugins#275
• Cursor merge commit: cursor/plugins@6fecddb
• Current sync contract: UPSTREAM.md

Scope boundary

This issue tracks Lauren Tan's canonical Cursor pstack 0.14.4/0.14.5 change only. Do not vendor the skill into another product repository.