@c4a/context-cli 0.6.0-beta.4 → 0.6.0-beta.6

package/plugins/codex/skills/init/references/internal-procedures/skill-prose-compile.md

@@ -60,7 +60,7 @@ Use semantic labels, not SDK function names:
 
 ## Runtime Discipline
 
-- Follow `context status`, `routing.next_commands`, compile view
+- Follow `context status`, `routing.command_plan`, compile view
   `next_action`, and validation diagnostics. Treat CLI commands as the source
   of truth.
 - Use only the returned `next_action.command` for the next required write.
@@ -75,6 +75,9 @@ Use semantic labels, not SDK function names:
   views.
 - Run one write at a time. Do not parallelize compile stage, review apply,
   close, or build writes.
+- One write still means one View, not one human Review. Stage every View in the
+  same confirmed structure sequentially, follow `continue_compile_batch`, and
+  open Review only after the CLI reports that the whole batch is prepared.
 - Compile does not get a second, looser rule set. If a rule conflicts with the
   current CLI schema or diagnostics, follow the CLI and repair the payload.
 - Write digest/hash flags are stale guards. Use values returned by the CLI; do
@@ -226,13 +229,21 @@ Stage only after validation has no errors:
 context run compile:<type>:<source>:<collection> --stage --input <compile-actions.yaml> --format json
 ```
 
-After staging, return to `context status`. If status reaches
-`compile-ready-for-review`, delegate review to
-`skill-review-gate.md`.
+After staging, follow `next_action` exactly:
+
+- `continue_compile_batch` with `human_gate=false`: move to the returned next
+  View and repeat **Step 2–4**. Do not open Review yet.
+- `review_candidates` with `human_gate=true`: every planned View in this
+  confirmed structure is prepared; return to `context status`, then delegate
+  one collection-level Review to
+  `skill-review-gate.md`.
+
+The CLI blocks Review and close while confirmed Views remain unprepared. Do not
+turn sequential View writes into sequential user approvals.
 
 ### Step 5 — Close Handoff
 
-After review apply, return to `context status`. If status says
+After the single batch review apply, return to `context status`. If status says
 `compile-close-needed`, run deterministic close:
 
 ```bash
@@ -257,6 +268,7 @@ Then route to package output when status reaches `ready-to-build`.
   verbatim text.
 - [ ] No direct edits were made to `sources/`, `.tmp`, `unapproved/`,
   `knowledge/`, review HTML, or `dist/`.
+- [ ] Every planned View was staged before opening the one batch Review.
 
 ### Final Report
 

package/plugins/codex/skills/init/references/internal-procedures/skill-review-gate.md

@@ -2,7 +2,7 @@
 name: skill-review-gate
 description: >
   Internal procedure invoked by the public Context continuation entry; not a user slash command.
-  Opens the review UI, waits for user decisions, applies copied JSONL payloads,
+  Opens the review UI, waits for user decisions, applies copied review decision Payloads,
   and prevents agent-authored approval/rejection decisions unless the user
   explicitly requests the scoped quick-decision path.
 tools:
@@ -16,19 +16,32 @@ Run the human review gate. The user decides approval or rejection.
 ## TL;DR
 
 - The agent never approves or rejects candidates on the user's behalf.
-- Use `context review html <collection> --open` for visual review.
+- Enter this skill only when the preceding command returns
+  `next_action.human_gate=true`. A no-delta codegraph run returns false and does
+  not need Review.
+- For prose, enter only after every View in the confirmed compile batch is
+  prepared. For codegraph, enter only after all pending extract phases in the
+  confirmed module round are complete. The CLI blocks partial-batch Review.
+- Use `context review html <collection> --open --format json` for visual review.
 - `<collection>` is an internal production collection such as `architecture`,
   `sop`, `decision`, or `standards`; it is not an OKF package root such as
   `wikis`, `guides`, or `rules`.
 - Always surface the CLI-printed `file_url`. If browser opening fails or the
   host cannot make a path clickable, also provide `absolute_path`.
-- Apply only the JSONL payload copied by the user from the review UI.
+- Apply only the review decision Payload copied by the user from the review UI.
 - Do not parse `unapproved/entities.jsonl`, `.tmp`, or HTML internals with
   scripts to synthesize decisions.
 - If the user explicitly asks for quick or automated approval/rejection, use
   `context review approve <candidate-id> --collection <collection>` /
   `context review reject <candidate-id> --collection <collection>` or `--all`;
   these commands still enforce the current scoped candidate-id gate.
+- `context run <extract-phase-id> --auto-promote` is a separate, explicit
+  codegraph-only CI/CD policy. It may apply code add/update/remove deltas and
+  refresh deterministic close, and verify them without this gate; it never
+  applies to semantic knowledge. Package build remains an explicit later step.
+- `approved-source-ref-ambiguous` on beta.5 approved codegraph pages is an
+  evidence migration, not a new review decision. Rerun the declared codegraph
+  extraction, then run `context review migrate-codegraph-refs` and verify.
 
 <procedures>
 
@@ -37,12 +50,14 @@ Run the human review gate. The user decides approval or rejection.
 For the internal collection reported by status, run:
 
 ```bash
-context review html <collection> --open
+context review html <collection> --open --format json
 ```
 
-Tell the user where the page opened and include the CLI-printed `file_url` as a
-clickable link plus `absolute_path` as a copyable fallback. Do not assume a
-fixed review filename; review scope is collection or `--all`.
+Inspect the returned `opened` field. When it is `true`, tell the user the page
+was opened. When it is `false`, do not claim it opened; report `open_error` and
+provide `file_url` as the primary clickable link plus `absolute_path` as a
+copyable fallback. Do not drop `--open`, and do not assume a fixed review
+filename; review scope is collection or `--all`.
 Do not substitute OKF package roots (`wikis`, `guides`, `rules`) for this
 argument; review scope is the internal collection namespace.
 
@@ -54,7 +69,8 @@ must not choose these states.
 ### Step 2 — Wait For Payload
 
 Ask the user to review candidates in the HTML page, open Payload, copy the
-compact JSONL payload, and paste it into the agent chat. The payload records the
+compact review decision Payload, and paste it into the agent chat. Uniform
+decisions produce one JSON line; exceptions add JSONL lines. The Payload records the
 user's decisions, usually as a default decision plus exceptions, so it should
 not be expanded into pretty JSON unless the user asks.
 
@@ -62,7 +78,7 @@ The user should not need to create a payload file manually. Do not continue
 until the user supplies that payload.
 
 If the user instead explicitly asks the agent to use the quick approval or
-rejection path, do not synthesize JSONL. Run the scoped quick command with the
+  rejection path, do not synthesize a decision Payload. Run the scoped quick command with the
 candidate id shown by review/list/status and either `--collection <collection>`
 or `--all`.
 
@@ -85,6 +101,19 @@ commands to store this payload.
 Run `context status` after apply. If it reports package output choice, return to
 `skill-continue-workflow.md`.
 
+If status instead reports `approved-source-ref-ambiguous` for a pre-file-aware
+codegraph ref, explain that the user's decisions remain approved. Rerun its
+declared extraction phase to refresh the symbol index, then run:
+
+```bash
+context review migrate-codegraph-refs
+context verify
+```
+
+Do not reopen Review, synthesize another payload, delete approved pages, or
+filter conflicting symbols. If the ref is already file-aware, report a
+duplicate extract-index defect rather than running the metadata migration.
+
 ### Step 5 — Self-verify Checklist
 
 - [ ] Every decision came from the user's copied payload. If not, stop and

package/plugins/codex/skills/init/references/internal-procedures/skill-source-scope/references/capture-source.md

@@ -13,14 +13,27 @@ tools:
 Current capture discipline for document sources. The executable path is source
 registration plus the declared capture phase flow:
 
-- local Markdown/MDX file source: `context source add file --local <path>`
-  followed by `context run capture:file:<source-name> --format json`;
-- Lark/Feishu source: `context source add lark ...` followed by
-  `context run capture:lark:<source-name> --format json`;
+- local Markdown/MDX file source: `context source add file [YYYYMMDD] --module <module> --local <path>`
+  followed by `context run capture:file:YYYYMMDD/<module> --format json`;
+- Lark/Feishu source: `context source add lark [YYYYMMDD] --module <module> ...`
+  followed by `context run capture:lark:YYYYMMDD/<module> --format json`;
 - refresh: rerun the same declared capture phase after status or the user asks
   for recapture.
 
 Use only commands surfaced by the current status output or capture phase.
+For a user-confirmed multi-document batch, `context status --format json`
+returns every uncaptured module in `routing.command_plan`. Run the complete
+list in order; a successful module is omitted from the next status result.
+When the user explicitly asks to capture, ingest, fetch, read, or include exact
+file/Lark paths or URLs, that request is the read permission for those sources;
+do not repeat the question after registration. A mere mention, possible-source
+discussion, or register-only request is not permission, and an explicit refusal
+always wins.
+Register several file/Lark/repo sources with `context source add batch [date]
+--input <yaml|json|->`; do not launch multiple `source add` processes in
+parallel. Repo batch items require `module`; file/Lark items may omit it and use
+the module returned by the CLI. A write-lock error means another Context mutation is active: wait for
+it to finish and retry rather than editing registry files.
 
 ---
 
@@ -53,8 +66,9 @@ Before choosing a local Markdown capture route, honor the surrounding task conte
 
 - One or more local `.md` / `.mdx` files or a local documentation folder to ingest →
   register one file source with the user-confirmed boundary:
-  `context source add file --local <file-or-folder>`. The CLI returns the date
-  source name (`YYYYMMDD`) to use in project phases. For an explicit
+  `context source add file [YYYYMMDD] --module <module> --local <file-or-folder>`.
+  The CLI returns the `YYYYMMDD/module` identity to use in project phases. More
+  than one file module may share the date. For an explicit
   batch inside a broader folder, preserve the user's include list on source
   registration. Default file capture handles `.md`. If the CLI reports
   document-site files such as `.mdx`, `_meta.json`, sidebars, or docs config,
@@ -66,15 +80,17 @@ Before choosing a local Markdown capture route, honor the surrounding task conte
   `__context_route_metadata.md` as mechanical route evidence; it also extracts
   static MDX component props/children into `__context_mdx_component_text.md`
   when components carry user-facing text. Declare
-  `captureFile({ source: source("<source-name>"), processor: mdxJsonDocs() })`, then
-  run `context run capture:file:<source-name> --format json`. If the selected MDX page
+  `captureFile({ source: source("<date>", "<module>", { type: "file" }), processor: mdxJsonDocs() })`, then
+  run `context run capture:file:<date>/<module> --format json`. If the selected MDX page
   is empty or only mounts runtime-rendered content, tell the user that capture
   found a document-site shell and ask for the rendered-site or data-source
   boundary instead of inventing body text.
 - A Lark/Feishu URL, doc token, or wiki token → register one Lark source:
-  `context source add lark --url <url>` or the matching token flag.
-  Declare `captureLark({ source: source("<source-name>") })`, then run
-  `context run capture:lark:<source-name> --format json`.
+  `context source add lark [YYYYMMDD] --module <module> --url <url>` or the
+  matching token flag. Register every requested document under the same date;
+  do not ask for `YYYYMMDD-2`. Declare
+  `captureLark({ source: source("<date>", "<module>", { type: "lark" }) })`,
+  then run `context run capture:lark:<date>/<module> --format json`.
 - Mixed local document and Lark document batches are separate sources unless
   the current CLI explicitly offers a combined source contract. Do not write an
   Agent-side URL/file loop.
@@ -99,7 +115,11 @@ registration; do not read file bodies before capture permission is clear.
 Report the CLI output verbatim. If the CLI reports `N sources changed`, suggest the right next step:
 
 - Run `context status --format json` and use its `state`, `routing`, and
-  `next_commands`.
+  `command_plan`; if status returns `needs-capture-phase`, first perform the
+  exact `routing.configuration` edit and rerun status.
+- While status remains `needs-capture`, execute every returned capture command
+  for the already confirmed batch before asking another naming, collection, or
+  read-permission question.
 - If status reports `captured-ready-to-investigate`, suggest the returned
   `context run align:<type>:<source>:<collection> --view read-plan --format json`
   command and hand off to `skill-prose-align`.