@autopilot-harness/cli 0.2.3 → 0.2.4

package/assets/autopilot-harness-hook.mjs

@@ -1,446 +0,0 @@
-/**
- * Autopilot hook entry — marker: autopilot-harness
- * Installed at .autopilot/bin/autopilot-harness-hook.mjs (copy, not symlink).
- *
- * Prefers bundled vendor/runtime.mjs (shipped by init/upgrade) so empty
- * consumer projects work without @autopilot-harness/* in node_modules.
- * Falls back to project-local packages, then fail-open.
- *
- * Events:
- *   Cursor: beforeSubmitPrompt | afterFileEdit | stop
- *   Claude Code: UserPromptSubmit | PostToolUse | Stop | StopFailure
- */
-import fs from "node:fs";
-import path from "node:path";
-import { createRequire } from "node:module";
-import { fileURLToPath, pathToFileURL } from "node:url";
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const projectRoot = (() => {
-  const resolved = path.resolve(__dirname, "..", "..");
-  try {
-    return fs.realpathSync(resolved);
-  } catch {
-    return resolved;
-  }
-})();
-
-const CURSOR_EVENTS = new Set([
-  "beforeSubmitPrompt",
-  "afterFileEdit",
-  "stop",
-]);
-const CLAUDE_EVENTS = new Set([
-  "UserPromptSubmit",
-  "PostToolUse",
-  "Stop",
-  "StopFailure",
-]);
-const KNOWN_PLATFORMS = new Set(["cursor", "claude-code"]);
-
-function parseArgs(argv) {
-  const allowed = new Set([...CURSOR_EVENTS, ...CLAUDE_EVENTS]);
-  const out = { event: "beforeSubmitPrompt", platform: null };
-  for (let i = 0; i < argv.length; i++) {
-    if (argv[i] === "--event" && argv[i + 1]) {
-      const ev = String(argv[i + 1]);
-      // Do not consume the next flag as a value (`--event --platform …`).
-      if (ev.startsWith("--")) continue;
-      i += 1;
-      out.event = allowed.has(ev) ? ev : "beforeSubmitPrompt";
-    } else if (argv[i] === "--platform" && argv[i + 1]) {
-      const raw = String(argv[i + 1]);
-      if (raw.startsWith("--")) continue;
-      i += 1;
-      const p = raw.trim().toLowerCase();
-      out.platform = KNOWN_PLATFORMS.has(p) ? p : null;
-    }
-  }
-  return out;
-}
-
-function isClaudeEvent(event) {
-  return CLAUDE_EVENTS.has(event);
-}
-
-/** Strong Claude Stop markers (override a lying `--platform cursor`). */
-function isClaudeShapedStopPayload(payload) {
-  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
-    return false;
-  }
-  const hookName = String(
-    payload.hook_event_name ?? payload.hookEventName ?? "",
-  ).trim();
-  if (hookName === "Stop" || /^stopfailure$/i.test(hookName)) return true;
-  if (
-    typeof payload.stop_hook_active === "boolean" ||
-    typeof payload.stopHookActive === "boolean"
-  ) {
-    return true;
-  }
-  return false;
-}
-
-async function readStdin() {
-  const chunks = [];
-  for await (const chunk of process.stdin) chunks.push(chunk);
-  const raw = Buffer.concat(chunks).toString("utf8").trim();
-  if (!raw) return {};
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return {};
-  }
-}
-
-async function tryImport(specifier) {
-  try {
-    return await import(specifier);
-  } catch {
-    return null;
-  }
-}
-
-function isSymlinkOrUnreadable(filePath) {
-  try {
-    return fs.lstatSync(filePath).isSymbolicLink();
-  } catch {
-    // Cannot verify — refuse vendor load (fail-closed, match CLI policy).
-    return true;
-  }
-}
-
-/** Refuse vendor paths whose realpath escapes the project root. */
-function realpathEscapesProject(filePath) {
-  try {
-    const realRoot = fs.realpathSync(projectRoot);
-    const real = fs.realpathSync(filePath);
-    return real !== realRoot && !real.startsWith(realRoot + path.sep);
-  } catch {
-    return true;
-  }
-}
-
-async function loadVendorRuntime() {
-  const vendorDir = path.join(__dirname, "vendor");
-  const vendor = path.join(vendorDir, "runtime.mjs");
-  const migDir = path.join(vendorDir, "migrations");
-  const mig = path.join(migDir, "001_initial.sql");
-  if (!fs.existsSync(vendor) || !fs.existsSync(mig)) return null;
-  // Refuse symlink escape / unreadable lstat (same policy as CLI).
-  if (
-    isSymlinkOrUnreadable(vendorDir) ||
-    isSymlinkOrUnreadable(vendor) ||
-    isSymlinkOrUnreadable(migDir) ||
-    isSymlinkOrUnreadable(mig)
-  ) {
-    return null;
-  }
-  if (realpathEscapesProject(vendor) || realpathEscapesProject(mig)) {
-    return null;
-  }
-  return tryImport(pathToFileURL(vendor).href);
-}
-
-async function loadPortPackage(pkgName) {
-  try {
-    const require = createRequire(path.join(projectRoot, "package.json"));
-    const resolved = require.resolve(pkgName);
-    return tryImport(pathToFileURL(resolved).href);
-  } catch {
-    return null;
-  }
-}
-
-async function loadCoreFromNodeModules() {
-  return loadPortPackage("@autopilot-harness/core");
-}
-
-/**
- * Fail-open shapes must match the host:
- * - Cursor submit → { continue: true }
- * - Claude UserPromptSubmit → {} (allow; no decision:block)
- * - other events → {}
- */
-function failOpen(event) {
-  if (event === "beforeSubmitPrompt") {
-    writeReply(JSON.stringify({ continue: true }));
-  } else {
-    writeReply("{}");
-  }
-}
-
-/** At-most-once stdout so fail-open cannot append a second JSON blob. */
-let replied = false;
-function writeReply(text) {
-  if (replied) return;
-  process.stdout.write(text);
-  // Set only after a successful write so failOpen can still retry on throw.
-  replied = true;
-}
-
-function createEngine(coreMod, store) {
-  return typeof coreMod.createConfiguredReviewEngine === "function"
-    ? coreMod.createConfiguredReviewEngine(store, projectRoot)
-    : new coreMod.ReviewEngine(store, {
-        confirmRounds: 5,
-        reviewScope: "executing_only",
-        verifyEnabled: false,
-        verifyCommands: [],
-        maxIdleStops: 5,
-        maxErrorsBeforePause: 0,
-        projectRoot,
-      });
-}
-
-function cursorStopHandler(port) {
-  if (typeof port.handleCursorStop === "function") {
-    return port.handleCursorStop;
-  }
-  // Dual/legacy vendor: deprecated handleStop === Cursor only when Cursor
-  // submit exists. Never fall through to Claude-only package handleStop.
-  if (
-    typeof port.handleStop === "function" &&
-    typeof port.handleBeforeSubmitPrompt === "function"
-  ) {
-    return port.handleStop;
-  }
-  return undefined;
-}
-
-/**
- * Resolve Claude Stop handler without falling through to Cursor's handleStop
- * on the dual-port vendor (where deprecated `handleStop` === handleCursorStop).
- * node_modules `@autopilot-harness/port-claude-code` exports Claude as handleStop
- * and has no Cursor submit handler.
- */
-function claudeStopHandler(port) {
-  if (typeof port.handleClaudeStop === "function") {
-    return port.handleClaudeStop;
-  }
-  if (
-    typeof port.handleStop === "function" &&
-    typeof port.handleBeforeSubmitPrompt !== "function"
-  ) {
-    return port.handleStop;
-  }
-  return undefined;
-}
-
-/**
- * Cursor IDE may also execute `.claude/settings.json` Stop hooks ("claude-project
- * config") on the same user Stop. Those payloads are Cursor-shaped (`status`,
- * lowercase `hook_event_name: "stop"`). Route them to the Cursor port so abort
- * halts instead of Claude recover (decision:block), which Cursor merges back
- * into followup and fights the real abort path.
- *
- * Heuristic (order matters):
- * 1) Explicit Claude hook names (`Stop` / `StopFailure`) → not Cursor
- * 2) Lowercase `stop` → Cursor
- * 3) `stop_hook_active` present (Claude continuum) → not Cursor
- * 4) Cursor status vocab + `conversation_id` → Cursor; bare `session_id` → Claude
- */
-function isCursorShapedStopPayload(payload) {
-  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
-    return false;
-  }
-  const hookName = String(
-    payload.hook_event_name ?? payload.hookEventName ?? "",
-  ).trim();
-  if (hookName === "Stop" || /^stopfailure$/i.test(hookName)) return false;
-  if (hookName === "stop") return true;
-
-  // Claude Stop threads stop_hook_active (bool); Cursor uses loop_count.
-  if (
-    typeof payload.stop_hook_active === "boolean" ||
-    typeof payload.stopHookActive === "boolean"
-  ) {
-    return false;
-  }
-
-  const statusRaw = String(payload.status ?? "")
-    .toLowerCase()
-    .trim();
-  const cursorStatus =
-    statusRaw === "aborted" ||
-    statusRaw === "cancelled" ||
-    statusRaw === "canceled" ||
-    statusRaw === "completed" ||
-    statusRaw === "error" ||
-    statusRaw === "failed";
-  if (!cursorStatus) return false;
-
-  const conversationId = String(
-    payload.conversation_id ?? payload.conversationId ?? "",
-  ).trim();
-  if (conversationId) return true;
-
-  const sessionId = String(
-    payload.session_id ?? payload.sessionId ?? "",
-  ).trim();
-  // Claude-shaped id without conversation_id → keep Claude path
-  if (sessionId) return false;
-
-  // Abort/cancel with no ids: prefer Cursor halt (no-op {}) over Claude recover
-  return (
-    statusRaw === "aborted" ||
-    statusRaw === "cancelled" ||
-    statusRaw === "canceled"
-  );
-}
-
-let bootEvent = "beforeSubmitPrompt";
-
-async function main() {
-  const { event, platform: declaredPlatform } = parseArgs(
-    process.argv.slice(2),
-  );
-  bootEvent = event;
-  try {
-    const payload = await readStdin();
-    // Layer A: --platform; fall back to event-name heuristics for legacy installs.
-    const preferClaudePort =
-      declaredPlatform === "claude-code"
-        ? true
-        : declaredPlatform === "cursor"
-          ? false
-          : isClaudeEvent(event);
-    const claude = preferClaudePort;
-
-    const vendor = await loadVendorRuntime();
-    const port = vendor
-      ? vendor
-      : claude
-        ? await loadPortPackage("@autopilot-harness/port-claude-code")
-        : await loadPortPackage("@autopilot-harness/port-cursor");
-    const coreMod = vendor ?? (await loadCoreFromNodeModules());
-
-    const portReady = claude
-      ? typeof port?.handleUserPromptSubmit === "function"
-      : typeof port?.handleBeforeSubmitPrompt === "function";
-    if (!portReady || !coreMod?.StateStore) {
-      failOpen(event);
-      return;
-    }
-
-    const store = new coreMod.StateStore(projectRoot);
-    try {
-      if (event === "beforeSubmitPrompt") {
-        const result = port.handleBeforeSubmitPrompt(
-          store,
-          payload,
-          projectRoot,
-        );
-        writeReply(JSON.stringify(result ?? {}));
-        return;
-      }
-      if (event === "afterFileEdit") {
-        port.handleAfterFileEdit?.(store, payload, projectRoot);
-        writeReply("{}");
-        return;
-      }
-      if (event === "stop") {
-        const stopFn = cursorStopHandler(port);
-        if (typeof stopFn !== "function") {
-          failOpen(event);
-          return;
-        }
-        const result = stopFn(createEngine(coreMod, store), payload);
-        writeReply(JSON.stringify(result ?? {}));
-        return;
-      }
-      if (event === "UserPromptSubmit") {
-        const result = port.handleUserPromptSubmit(
-          store,
-          payload,
-          projectRoot,
-        );
-        writeReply(JSON.stringify(result ?? {}));
-        return;
-      }
-      if (event === "PostToolUse") {
-        port.handlePostToolUse?.(store, payload, projectRoot);
-        writeReply("{}");
-        return;
-      }
-      if (event === "Stop") {
-        // Layer C: payload shape vs declared --platform (cross-fire / lying argv).
-        let useCursorStop = false;
-        if (isCursorShapedStopPayload(payload)) {
-          useCursorStop = true;
-        } else if (isClaudeShapedStopPayload(payload)) {
-          useCursorStop = false;
-        } else if (declaredPlatform === "cursor") {
-          useCursorStop = true;
-        } else {
-          useCursorStop = false;
-        }
-        if (useCursorStop) {
-          let stopFn = cursorStopHandler(port);
-          // Non-vendor Claude-only load + Cursor-shaped cross-fire needs Cursor port.
-          if (typeof stopFn !== "function") {
-            const cursorPort = await loadPortPackage(
-              "@autopilot-harness/port-cursor",
-            );
-            if (cursorPort) stopFn = cursorStopHandler(cursorPort);
-          }
-          if (typeof stopFn !== "function") {
-            failOpen(event);
-            return;
-          }
-          const result = stopFn(createEngine(coreMod, store), payload);
-          writeReply(JSON.stringify(result ?? {}));
-          return;
-        }
-        let stopFn = claudeStopHandler(port);
-        // Non-vendor Cursor-only load + Claude-shaped Stop needs Claude port.
-        if (typeof stopFn !== "function") {
-          const claudePort = await loadPortPackage(
-            "@autopilot-harness/port-claude-code",
-          );
-          if (claudePort) stopFn = claudeStopHandler(claudePort);
-        }
-        if (typeof stopFn !== "function") {
-          failOpen(event);
-          return;
-        }
-        const result = stopFn(createEngine(coreMod, store), payload);
-        writeReply(JSON.stringify(result ?? {}));
-        return;
-      }
-      if (event === "StopFailure") {
-        let failFn = port.handleStopFailure;
-        if (typeof failFn !== "function") {
-          const stopFn = claudeStopHandler(port);
-          if (typeof stopFn === "function") {
-            failFn = (engine, p) => stopFn(engine, p, { status: "error" });
-          }
-        }
-        if (typeof failFn !== "function") {
-          failOpen(event);
-          return;
-        }
-        const result = failFn(createEngine(coreMod, store), payload);
-        writeReply(JSON.stringify(result ?? {}));
-        return;
-      }
-      writeReply("{}");
-    } finally {
-      try {
-        store.close();
-      } catch {
-        /* ignore */
-      }
-    }
-  } catch (err) {
-    console.error("[autopilot-harness] hook error:", err?.message ?? err);
-    failOpen(event);
-  }
-}
-
-main().catch((err) => {
-  console.error("[autopilot-harness] hook error:", err?.message ?? err);
-  // Prefer the parsed event when main() assigned it; else Cursor-safe default.
-  failOpen(bootEvent);
-  process.exitCode = 0;
-});

package/assets/templates/.autopilotignore

@@ -1,92 +0,0 @@
-# Autopilot — paths that do NOT trigger self-review (gitignore syntax).
-#
-# What this file is:
-#   - Controls whether an afterFileEdit counts as "product code" (opens fix/confirm).
-#   - Does NOT change `git diff` / `git status` output (that is `.gitignore`).
-#   - Review followups ask the agent to skip these paths when reading diffs (soft).
-#
-# Semantics:
-#   - Same glob rules as gitignore; last matching pattern wins.
-#   - Use `!` to force-include an exception (e.g. `!docs/feed/**/*.yml`).
-#   - Markdown (*.md / *.mdx) is NOT ignored by default — design docs can be reviewed.
-#   - `docs/**` is NOT ignored by default.
-#   - Also skip untracked paths ignored by `.gitignore` (tracked files still count).
-#
-# Later (not implemented): hard-filtered review-diff / path ledger — see
-# docs/autopilot/workflows/autopilot-executing.md (B2 strong).
-
-# Runtime / editor (prefer also listing these in .gitignore)
-.autopilot/**
-.cursor/**
-.claude/**
-
-# Planning artifacts
-plans/**
-
-# Common build / vendor trees
-node_modules/**
-dist/**
-build/**
-out/**
-target/**
-.target/**
-coverage/**
-.venv/**
-venv/**
-__pycache__/**
-
-# Lockfiles / package manager noise
-package-lock.json
-pnpm-lock.yaml
-yarn.lock
-bun.lock
-bun.lockb
-Cargo.lock
-poetry.lock
-composer.lock
-
-# Media / binary (do not trigger self-review)
-*.png
-*.jpg
-*.jpeg
-*.gif
-*.webp
-*.ico
-*.svg
-*.bmp
-*.mp3
-*.mp4
-*.wav
-*.webm
-*.mov
-*.woff
-*.woff2
-*.ttf
-*.otf
-*.eot
-*.pdf
-*.zip
-*.gz
-*.tgz
-*.7z
-*.rar
-*.jar
-*.class
-*.o
-*.a
-*.so
-*.dylib
-*.dll
-*.exe
-*.wasm
-
-# Prose / data noise
-*.txt
-*.html
-*.htm
-*.csv
-*.tsv
-*.log
-*.map
-*.min.js
-*.min.css

package/assets/templates/skills/autopilot-off/SKILL.md.tpl

@@ -1,8 +0,0 @@
----
-name: autopilot-off
-description: "{{description}}"
----
-
-The submit hook has already disarmed Autopilot for this conversation (paused; phase unchanged unless done→idle).
-
-Acknowledge pause. Do not auto-advance. Suggest Autopilot RESUME or Autopilot RUN · <slug> when ready.

package/assets/templates/skills/autopilot-on/SKILL.md.tpl

@@ -1,14 +0,0 @@
----
-name: autopilot-on
-description: "{{description}}"
----
-
-The submit hook has already set phase=planning for this conversation.
-
-Follow **autopilot-planning** workflow (docs/autopilot/workflows/autopilot-planning.md).
-
-- initial_brief from text after /autopilot-on → seed Round 1
-- Optional slug: alone after the command, or after `·`, matching `[a-z0-9]+([.-][a-z0-9]+)*` and ≤128 chars (same as RUN); other text is initial_brief. Unsafe explicit slugs (e.g. from API) are rejected by the hook.
-- Look up repo facts with platform tools; do not ask the user for what you can inspect
-- Write plans/<slug>/ artifacts (slug rule above); no product code until /autopilot-run
-- User-visible replies must match the user's language

package/assets/templates/skills/autopilot-replan/SKILL.md.tpl

@@ -1,9 +0,0 @@
----
-name: autopilot-replan
-description: "{{description}}"
----
-
-The submit hook has set phase=planning and reset the review chain for this track.
-
-Revise plan.md and unchecked checklist items only. Do not silently delete completed `[x]` items.
-When ready, prompt `/autopilot-run`.

package/assets/templates/skills/autopilot-resume/SKILL.md.tpl

@@ -1,10 +0,0 @@
----
-name: autopilot-resume
-description: "{{description}}"
----
-
-The submit hook has resumed Autopilot for **this** conversation (cleared pause if any; review chain preserved).
-
-If this chat had no session, the hook may have **claimed** an executing track from another conversation (same project) onto this one — including when the old Cursor chat is dead/unreadable. Optional: `/autopilot-resume <slug>` to pick the track when several are executing.
-
-Continue from checklist progress and current phase. Do not reset review confirm rounds unless asked.

package/assets/templates/skills/autopilot-run/SKILL.md.tpl

@@ -1,12 +0,0 @@
----
-name: autopilot-run
-description: "{{description}}"
----
-
-The submit hook has already set phase=executing (or will after track pick) for this conversation.
-
-Follow **autopilot-executing** workflow (docs/autopilot/workflows/autopilot-executing.md).
-
-- Read plans/<slug>/checklist.md; implement the first unchecked item
-- Obey fix/confirm/advance followups from the stop hook
-- User-visible replies must match the user's language

package/assets/templates/workflows/autopilot-executing.md

@@ -1,57 +0,0 @@
-# Autopilot Executing
-
-Implement the current unchecked checklist item, then obey stop-hook followups.
-
-## Per-item flow
-
-1. Read `plans/<slug>/checklist.md` — work only on `firstUnchecked()` (`- [ ] <id> — <title>`).
-2. Implement within that item's scope (align with `plan.md`).
-3. Machine verify / completion evidence: write `.autopilot/verify-last.json` with matching `itemId` (and `ok: true` when using a hand-written report). Run configured verify commands when present.
-4. Stop hook injects **fix** / **confirm** / **advance** / **done** — follow the injected message; do **not** invent your own review lens.
-
-### Product code vs no-code items
-
-| Situation | Stop behavior |
-|-----------|----------------|
-| You edited product code this item | **fix → confirm →** then verify / advance |
-| No product-code diff (env, ops, paths listed in `.autopilotignore`, or untracked + `.gitignore`) | Skip fix/confirm when `verify-last.json` `itemId` matches the current item (or required verify **pass**); then **advance** / **done** |
-| Required verify **fail** | `verify_fix` — fix env/report or code; if you edit product code next, fix chain runs first |
-
-**What counts as product code (trigger):** any edited path that is **not** matched by `.autopilotignore`, and is **not** an untracked path ignored by `.gitignore`. There is no hardcoded extension allowlist — configure exclusions in `.autopilotignore` (comments in that file explain defaults). Markdown is reviewable by default; `docs/**` is not blocked by default.
-
-**Agent review scope (B2 weak):** fix/confirm followups ask the agent to skip `.autopilotignore` hits and untracked `.gitignore` paths when reading `git diff` / `git status`. This is prompt guidance only (soft).
-
-**B2 strong (not implemented — future):** harness could emit a filtered diff command or a per-chain product-path ledger so review scope is hard-enforced without relying on the agent. Revisit if soft guidance is insufficient.
-
-## Fix vs confirm
-
-| Mode | Behavior |
-|------|----------|
-| Fix round | Defect-first on the in-scope diff; fix CRITICAL/HIGH; run relevant tests; **no commit** |
-| Confirm rounds | Only the **injected lens**; CRITICAL/HIGH may fix (returns to fix); final lens is **read-only** |
-| Confirm 1–N | **Never commit** |
-
-## Advance / done turn (mandatory order)
-
-When followup is advance or done:
-
-1. Mark **only** the completed current item named in the followup `[x]` in `checklist.md`. Do **not** mark the next item.
-2. Scoped conventional commit if the working tree has this item's changes — **include `checklist.md`** when `plans/` is committed (no `git add -A`, no secrets / `.autopilot/state.db`).
-3. **Then** start the next unchecked item named in the followup (next turn is OK for large code).
-
-### Checklist `[x]` timing (hard)
-
-- **Do not** mark the item you are still implementing `[x]` mid-work or mid-review.
-- Only Advance/Done followups check off the **completed** current item.
-- Premature `[x]` used to make the stop-hook name the wrong "next" item; the harness now sticks `reviewing_item_id`, but agents must still obey this rule.
-
-If you write next-item code before checking off, `itemId` / verify binding will be wrong.
-
-Advance leaves `chain_pending=0` so a docs-only / ignore-only next item does not open a phantom confirm chain; product edits still arm review via `afterFileEdit`.
-
-## Hard rules
-
-- Do not advance while verify required commands FAIL (hook blocks; rewrite `verify-last.json` after fixing).
-- Configure verify under `.autopilot/config.yml` → `review.verify.commands` (`id` / `run` / `required`).
-- User-visible replies match the user's language.
-- No push / `--no-verify` / amend unless the user explicitly asks in this conversation.

package/assets/templates/workflows/autopilot-planning.md

@@ -1,42 +0,0 @@
-# Autopilot Planning
-
-Built-in grill / design-tree workflow. Do **not** write product code until `/autopilot-run`.
-
-## Frontier format (every round)
-
-List every decision you can ask **now** (premises already settled):
-
-```markdown
-❓ **Q1** - **<title>**: <body; options if useful>
-
-➡️ <recommended answer>
-```
-
-Wait for the user to answer the round, then open the next frontier. Round 1 usually covers goal / scope / acceptance. Later rounds go block → detail.
-
-## Brownfield (existing repo)
-
-1. Read README and manifests (`package.json`, `Cargo.toml`, `go.mod`, `pyproject.toml`, …).
-2. Search / skim modules related to the request.
-3. Put constraints under **Existing context** in `brief.md`.
-4. Cite **real repo paths** in questions — do not ask the user for facts you can inspect.
-
-## Greenfield
-
-Skip repo survey; start from goals and constraints.
-
-## Artifact timing
-
-| When | Write |
-|------|--------|
-| Title is clear | Create `plans/<slug>/` (`brief.md`, `plan.md`, `checklist.md`); update `plans/README.md`. **Slug** = `[a-z0-9]+([.-][a-z0-9]+)*`, length 1–128 (kebab; single dots OK, e.g. `v0.1-npm-release`; no `..`, `/`, `\`, `_`) — same rule as `/autopilot-on|run <slug>` |
-| Frontier nearly empty | Checklist **draft** (`- [ ]`) |
-| User confirms the plan | Finalize checklist: `- [ ] <id> — <title>` (**item id** kebab-case letters/digits/hyphens only — **no dots**) |
-| Ready to build | Prompt **`/autopilot-run`** (or `/autopilot-run <slug>`) |
-
-## Hard rules
-
-- Planning may only edit `plans/**` and docs — **no product code**.
-- Directory `<slug>` must match `[a-z0-9]+([.-][a-z0-9]+)*` and ≤128 chars (same gate as `/autopilot-on|run <slug>`); checklist **item** ids stay `[a-z0-9]+(-[a-z0-9]+)*` (no dots).
-- User shortcuts: “直接定稿 / skip grill / use your recommendations” may shorten rounds; still produce the three artifacts.
-- User-visible replies match the user's language. Workflow procedure stays English.