@deftai/directive-content 0.92.0 → 0.94.0

package/commands.md

@@ -77,12 +77,55 @@ The legacy product forms below remain accepted but SHOULD emit a deprecation war
 
 Skills retain the `deft-directive-*` prefix — only the slash-command surface is namespaced.
 
+### Native multi-host registration (#55 / #3052–#3055)
+
+Prose routing above remains the fallback for every agent (L9). For hosts that load project command/prompt files, `directive init` and `deft update` also deposit **thin native wrappers** for the locked product set (exactly **13** commands — L2) across every **enabled** emitter host in one pass (L6):
+
+| Host | Managed directory |
+|------|-------------------|
+| Claude Code | `.claude/commands/` |
+| Cursor | `.cursor/commands/` |
+| Grok | `.grok/commands/` |
+| Codex | `.codex/prompts/` |
+
+- **Thin wrappers only (L5):** frontmatter description + short dispatch pointer to strategy/skill/`commands.md` / resilience paths. ⊗ Inline full strategy or skill bodies. ⊗ Emit native files for legacy deprecation aliases (L3 — prose aliases only).
+- **Opt-out:** `plan.policy.hostSlashCommands.<host>` = `false` (hosts: `claude`, `cursor`, `grok`, `codex`). Inspect with `deft policy:show --field=hostSlashCommands`. Opt-out removes managed thin wrappers only; consumer customizations at the same path are preserved. Parallel mental model to `plan.policy.hostHooks`, but hooks and slash deposit are separate.
+- **Git (L8):** Prefer **committing** managed product command/prompt paths so multi-host clones share the same surface. Idempotent rewrite on init/update. Personal gitignore of host command dirs is an escape, not the team default. Managed allowlist is exact product filenames — not whole host command directories.
+- **Not skill discovery:** Native slash files (#55) ≠ skill path auto-discovery ([#75](https://github.com/deftai/directive/issues/75)). Skills deposit remains independent (L7).
+
+Full operator guide, L2 table, and multi-host dogfood checklist: [docs/slash-multi-host.md](./docs/slash-multi-host.md).
+
 ---
 
 <!-- xbrief-backcompat-2111 -->
 
 > **xBRIEF rename (#2034 / #2110):** Projects still on the legacy `vbrief/` layout and `x-vbrief/` reference tokens remain read-accepted until you run `deft migrate:xbrief` (or `task migrate:xbrief`). `deft doctor` and `deft update` signpost unmigrated layouts.
 
+## xBRIEF create / verify (artifact write — not lifecycle) (#3057)
+
+On-demand **write + check** dense xBRIEF SoT artifacts at an explicit path. These verbs do **not** promote, activate, or complete scopes.
+
+| Verb | Meaning |
+|------|---------|
+| `deft xbrief:create` / `task xbrief:create` | Write json, md, or both at `--out` |
+| `deft xbrief:verify` / `task xbrief:verify` | Fail-closed check at `--out` |
+| `scope:*` / intake | Lifecycle birth and folder/status transitions |
+| `xbrief:preflight` | Implementation-intent gate (unchanged) |
+
+```bash
+deft xbrief:create -- --format <json|md|both> --out <path> [--style scope|playbook|mission|project] [--title T] [--id ID] [--force]
+deft xbrief:verify -- --format <json|md|both> --out <path> [--style scope|playbook|mission|project]
+```
+
+- ! `--format` and `--out` are **required**
+- ! `both` uses one stem → `*.xbrief.json` + `*.xbrief.md`
+- ! P0 styles: `scope` | `playbook` | `mission` | `project`
+- ! Paths expand portably (`~`, `%USERPROFILE%`); project-root containment fails closed
+- ~ Skill postcard: `deft-directive-xbrief` (pack grammar loads on use)
+- ⊗ Overload `scope:promote` (or invent `xbrief:promote`) for “compress text”
+
+---
+
 ## Scope xBRIEF Lifecycle
 
 Scope xBRIEFs live under `xbrief/{proposed,pending,active,completed,cancelled}/`. The folder and `plan.status` must agree.
@@ -228,15 +271,27 @@ task pr:finish-loop -- <N>          # after a PR is open
 - **Exit codes:** `0` clean/empty queue · `1` agent address / AGENT_STEP / human-merge · `2` BLOCKED (no grant / error)
 - Full contract: `content/contracts/finish-loop.md`. Typed escalation UX is sibling **#518**.
 
-When the workflow needs an Approach 1 monitor, scope the Cursor leaf `stop-at: pr-open`. The orchestrator that owns the Task primitive must spawn the sibling review-monitor and claim the PR-anchored lease with `task review-monitor:register -- --pr <N> --monitor-agent-id <id> --platform-primitive cursor-task`; `task verify:review-monitor -- --pr <N>` remains the fail-closed proof of active GitHub ownership (sticky `<!-- deft:review-owner -->` comment — not local JSON). Release with `task review-monitor:release -- --pr <N>` when done. See `skills/deft-directive-review-cycle/SKILL.md` Review Monitoring and `skills/deft-directive-swarm/SKILL.md` Phase 3.
+When the workflow needs an Approach 1 monitor, scope the Cursor leaf `stop-at: pr-open`. The orchestrator that owns the Task primitive must spawn the sibling review-monitor and claim the PR-anchored lease with `task review-monitor:register -- --pr <N> --monitor-agent-id <id> --platform-primitive cursor-task`; `task verify:review-monitor -- --pr <N>` remains the fail-closed proof of active GitHub ownership (sticky `<!-- deft:review-owner -->` comment — not local JSON). Release with `task review-monitor:release -- --pr <N>` when done. Owner Continuity / L4 handoff gate (#3090): `task verify:l4-owner -- --pr <N>` (or `deft verify:l4-owner --pr <N>`) exits 0 only when a sticky lease is fresh or `--review-cycle done` after Step 6; freeform `started`/`pending` is rejected. See `skills/deft-directive-review-cycle/SKILL.md` Owner Continuity Gate + Review Monitoring and `skills/deft-directive-swarm/SKILL.md` Phase 3.
 
 **Worker liveness (#2824):** For in-flight `drive-to: merge*` Cursor leaves, monitors run `task verify:subagent-alive -- --require-agent <agent-id> [--scratch-dir <worktree>/.deft-scratch/subagent-status]` each poll iteration. Exit `1` prints `REDISPATCH_OK` — authorize takeover when the host still reports running but heartbeats are missing/STALE. Raw heartbeat sweep: `task agent:monitor`. See `docs/subagent-heartbeat.md` § Cursor false-alive.
 
 ### Agent-host direct-write hooks (#2438, #2596)
 
-`directive init` and `deft update` idempotently merge Directive-owned entries into `.claude/settings.json`, `.grok/hooks/deft.json`, `.cursor/hooks.json`, and `.codex/hooks.json` while preserving unrelated settings. `SessionStart` refreshes resume bookkeeping on a non-blocking path. `PreToolUse` uses the lightweight `deft-hook` entrypoint rather than booting the full CLI router, reducing cold hook latency while retaining the same fail-closed ritual, scope, and runtime-authority decisions. Cursor `ApplyPatch` shares the direct-write registration, so each matched edit invokes one hook process. Cursor `preToolUse` deposits set `failClosed: true`, so allow decisions emit `{"permission":"allow"}` — empty stdout is treated as hook failure and would block Write tools. A second `PreToolUse` matcher covers spawn/Task tools (`Task`, `SubagentStart`, `spawn_subagent`, `start_agent`, `CreateAgent`) with the same pre-`start_agent` gate stack; explore spawns (`subagent_type: explore`) pass without implementation gates.
+`directive init` and `deft update` idempotently merge Directive-owned entries into `.claude/settings.json`, `.grok/hooks/deft.json`, `.cursor/hooks.json`, and `.codex/hooks.json` while preserving unrelated settings. `SessionStart` refreshes resume bookkeeping on a non-blocking path. `PreToolUse` uses the lightweight `deft-hook` entrypoint rather than booting the full CLI router, reducing cold hook latency while retaining the same fail-closed ritual, scope, and runtime-authority decisions. Cursor `ApplyPatch` shares the direct-write registration, so each matched edit invokes one hook process. Cursor `preToolUse` deposits set `failClosed: true`, so allow decisions emit `{"permission":"allow"}` — empty stdout is treated as hook failure and would block Write tools. A second `PreToolUse` matcher covers spawn/Task tools (`Task`, `SubagentStart`, `spawn_subagent`, `start_agent`, `CreateAgent`) with the pre-`start_agent` gate stack for **implementation** spawns; explore and ephemeral postures skip active-xBRIEF (see three postures below).
+
+- **Spawn postures (#1185 / #3080):** PreToolUse classifies Task/spawn by **structural markers** (not free-text prompt NLP). Unmarked / default Multitask (`generalPurpose`) is treated as **implement** (fail closed). Session-level **assist** posture for direct scratch writes is the #1802 twin — see § Assist / research posture (#1802).
+
+  | Posture | Markers | Active xBRIEF | Typical work |
+  |---|---|---|---|
+  | **Implement** | default / `generalPurpose` / implement leaf / `drive-to: merge-ready` | **Required** | Features, bugs, PRs, scope lifecycle |
+  | **Explore** | `subagent_type` or `worker_role` = `explore` (#1185) | Not required | Read-only research, orientation |
+  | **Ephemeral** | `worker_role` (or `subagent_type`) ∈ {`ephemeral`, `docs`, `assist`} (#3080) | Not required | Brochure, pitch, disposable analysis notes |
+
+  Gate order: explore allow (`spawn-explore-ready`) → ephemeral allow (`spawn-ephemeral-ready`) → else implementation stack (`inspectMutationGates`). If an ephemeral marker conflicts with implement envelope signals (`drive-to: merge-ready`, `worker_role: leaf-implementation`, swarm implement dispatch), **implement wins**. Ephemeral allowance does **not** authorize push/merge/deploy or skip `runtimeAuthority` / human-merge gates. **Anti-pattern:** invent a fake `scope:activate` only to dispatch brochure/docs work — use `worker_role: ephemeral` (or continue in the parent) instead. Deny text for missing active scope on implement spawns lists activate \| explore \| ephemeral recoveries.
 
-- **Read-only explore (#1185):** Prefer Grok role deposit `default_capability_mode = "read-only"` (see [issue #1185](https://github.com/deftai/directive/issues/1185)). Hooks also deny direct writes when `DEFT_HOOK_READ_ONLY=1` or the host payload signals read-only capability. Implementation spawns remain blocked in read-only posture unless explicitly marked explore.
+- **Assist scratch direct writes (#1802):** PreToolUse allows Write/Edit under allowlisted gitignored roots (`.deft-scratch/**`, `temp/**`) when assist/ephemeral classification applies (`DEFT_SESSION_POSTURE=assist`, payload posture, or #3080 role markers) — decision code `write-assist-scratch-ready`. Skips ritual + active-scope; does **not** unlock tracked product paths. Fail closed outside the allowlist or without structural markers. Deny recovery for in-repo scope-not-ready mentions the assist scratch path (do not invent fake `scope:activate` for notes). Full rules: § Assist / research posture (#1802).
+
+- **Read-only explore (#1185):** Prefer Grok role deposit `default_capability_mode = "read-only"` (see [issue #1185](https://github.com/deftai/directive/issues/1185)). Hooks also deny direct writes when `DEFT_HOOK_READ_ONLY=1` or the host payload signals read-only capability. Implementation and ephemeral spawns remain blocked in read-only posture unless explicitly marked explore.
 
 - Verify registration: `deft verify:hooks-installed --scope=agent` (or `--scope=all` for git + agent hooks).
 - Repair missing/drifted entries: `deft update`.
@@ -263,6 +318,29 @@ Full always-on contract for the interactive session-start ritual and its gated v
 - ? Explicit read-only alignment only: `deft session:start -- --read-only` (no ritual-state write).
 - ~ Operators MAY still explicitly request full `deft session:start`, `deft triage:welcome`, sync, or doctor in read-only sessions.
 
+### Assist / research posture (#1802)
+
+Low-ceremony path for research and disposable local notes. Shared taxonomy with spawn postures (#3080 / #1185): session posture name is **`assist`**; spawn `worker_role` primary is **`ephemeral`** (aliases `docs`, `assist`).
+
+| Posture | Session ceremony | Direct write | Spawn (`Task`) |
+|---|---|---|---|
+| **Read-only research** | No mutation ritual | None / deny writes | `explore` only (#1185) |
+| **Assist / ephemeral** | No story-start; no active xBRIEF for scratch writes | Allowlisted scratch roots only (#1802) | `worker_role: ephemeral` (#3080) |
+| **Mutation / implement** | Full `session:start` + gated ritual + story/xBRIEF | Product paths + gates | Active xBRIEF required |
+
+- ! **Named assist intent:** declare non-implementation research/assist via structural markers — `DEFT_SESSION_POSTURE=assist` (or `research` / `research-notes` / `scratch` / `ephemeral` / `docs`), `DEFT_HOOK_ASSIST=1`, payload `posture` / `session_posture`, or spawn `worker_role` / `subagent_type` ∈ {`ephemeral`, `docs`, `assist`}. Prefer answering in chat; write scratch only when the operator asks for a file.
+- ! **Read-only research needs no mutation ceremony:** with no file writes (or only read tools), do **not** run gated session ritual / story-start / `git status` story gates as if starting implementation. Alignment load (AGENTS / USER / PROJECT-DEFINITION) still applies where session routing requires it.
+- ! **Operator language → assist:** phrases such as "Obsidian notes", "scratch only", "do not commit", "not a story/PR" map to assist posture. Default disposable notes to gitignored allowlisted roots so "do not commit" is structural.
+- ! **Allowlisted scratch roots (v1):** `.deft-scratch/**` (canonical) and `temp/**` (gitignored alias). PreToolUse allows direct Write/Edit under these roots when assist/ephemeral classification applies (`write-assist-scratch-ready`) — no active xBRIEF, no story-start, no full pre-`start_agent` gate stack. Compose with #3080 ephemeral spawn markers.
+- ! **Tracked / source still hard:** writes to product paths (`src/`, `packages/`, `content/`, app source, tracked `docs/` / `overview/`, …) under **any** posture still require mutation ceremony + existing write/scope gates. Labeling a change "research" does **not** bypass them. If the operator insists on a tracked path for notes, reclassify as mutation or obtain explicit override + normal gates; prefer redirect to `.deft-scratch/overview/` instead.
+- ⊗ Invent a fake `scope:activate` solely to capture disposable notes — use allowlisted scratch + assist posture (or continue in chat).
+- ⊗ Use assist posture for feature/bug/PR work; ⊗ write product code under scratch roots then smuggle into the tree; ⊗ treat assist as license to skip push/merge/human-merge gates.
+- ⊗ Rely on free-text prompt NLP alone as the gate classifier — path fence + structural markers only (fail closed on ambiguity).
+- ~ Offer to move finalized notes into committed docs via a **separate** mutation story if the operator wants them in-repo.
+- **Not this path:** `/deft:run:research` proposes a research vBRIEF (higher ceremony). Ceremony latency (#2990) is a separate track.
+
+Cross-link: spawn three postures and deny recoveries live under § Agent-host direct-write hooks (#2438, #2596) / Spawn postures (#1185 / #3080).
+
 ### Mutable ritual (mutation posture)
 
 - ! On **mutation** session start, run `deft session:start` (or `task session:start` in framework source) after loading AGENTS.md. Records quick-tier ritual in `.deft/ritual-state.json`: alignment confirmation, branch-policy disclosure, `deft verify:tools` guidance, default-branch sync warnings, and `deft triage:welcome` one-liner. State is worktree- and HEAD-bound; stale after `plan.policy.sessionRitualStalenessHours` hours (default 4).

package/conventions/content-manifest.json

@@ -49,7 +49,7 @@
     {
       "path": "content/coding",
       "bucket": "content",
-      "note": "Coding standards docs (coding.md, hygiene.md, testing.md, build-output.md, toolchain.md)."
+      "note": "Coding standards docs (coding.md, testing.md, security.md, review.md, hygiene.md, debugging.md, build-output.md, toolchain.md, holzmann.md)."
     },
     {
       "path": "content/commands.md",
@@ -72,6 +72,11 @@
       "note": "Conventions prose docs ship as content; co-located structured data files (rule-ownership.json, content-manifest.json) are engine-consumed gate inputs that travel with the same directory.",
       "straddle": true
     },
+    {
+      "path": "content/ci-cd",
+      "bucket": "content",
+      "note": "Optional CI/CD provider guidance (Blacksmith runner tiers, migration prompts, examples). Parallel to deployments/; lazy-load only (#448)."
+    },
     {
       "path": "content/deployments",
       "bucket": "content",

package/deployments/README.md

@@ -8,6 +8,14 @@ Platform-specific guidance for deployment environments (cloud.gov, Cloudflare, A
 - ~ Keep platform guidance separate from core Deft rules
 - ~ Enable export of platform instructions for external tools (e.g., Copilot)
 
+## Relation to CI/CD
+
+This layer covers **where and how you deploy** runtime apps. For **CI runner
+migration** (Blacksmith tiered vCPU sizing, agent migration prompts), use the
+optional [`ci-cd/`](../ci-cd/README.md) layer instead. Platform modules may still
+include a `cicd.md` for deploy-pipeline steps; that is not a substitute for
+runner-tier guidance under `ci-cd/`.
+
 ## Module Structure
 
 Create a directory per platform:

package/docs/openclaw-agent-host.md

@@ -18,6 +18,52 @@ Epic spine: [#2874](https://github.com/deftai/directive/issues/2874). This doc i
 
 If you are installing Directive for the first time, start at [QUICK-START.md](../QUICK-START.md) or [getting-started.md](./getting-started.md), then return here for host-specific expectations.
 
+Native **file-host** slash/prompt command registration (thin wrappers under `.claude/commands/`, `.cursor/commands/`, and peers) is documented in [slash-multi-host.md](./slash-multi-host.md) (epic #55). **OpenClaw L2 product commands** are a separate skills adapter ([#3064](https://github.com/deftai/directive/issues/3064)) — see § L2 product commands below. That surface is separate from always-pin skills (#3001/#3008), spawn/review mapping, and skill-discovery residual [#75](https://github.com/deftai/directive/issues/75).
+
+---
+
+## L2 product commands (OpenClaw adapter — #3064)
+
+OpenClaw does **not** load repo-local command files the way Claude/Cursor do. L2 parity for the **exactly 13** product commands is delivered as **thin user-invocable skills** deposited into the OpenClaw **main workspace skills** root (real copies — not symlink-escape into npm; same spirit as always-pins).
+
+### Hybrid layout (LockedDecisions D1–D3)
+
+| Artifact | OpenClaw slug | Role |
+|----------|---------------|------|
+| **Router** | `deft` | Preferred **native/menu-facing** entry (Telegram `BOT_COMMANDS` budget) |
+| **13 product skills** | e.g. `deft_run_interview`, `deft_continue` | Invocable as `/<slug>` text skills for discoverability |
+
+Stable map (logical slash → OpenClaw slug, `a-z0-9_`, max 32). Colons never appear in OC slugs. Example: `/deft:directive:run:interview` → `deft_run_interview`. Full table lives in `packages/core/src/slash/openclaw-slugs.ts` and is unit-tested for bijectivity against `listProductCommands()`.
+
+Bodies stay **thin** (L5): frontmatter + short dispatch pointer to the same content-relative targets as file hosts (`generateThinWrappers()` IR). ⊗ Inline full strategy/skill bodies. ⊗ Add `openclaw` to `HOST_COMMAND_LAYOUTS` / invent `.openclaw/commands/`.
+
+### Native menu / `commands.nativeSkills` (D3)
+
+| Setting | Expected behavior |
+|---------|-------------------|
+| Prefer menu safety | Use the **`deft` router** as the primary bot menu entry; invoke product work via router args or typed `/deft_run_*` skill text |
+| `commands.nativeSkills` **on** / aggressive native registration | All `user-invocable: true` skills (router + 13 + always-pins) **may** flood Telegram → `BOT_COMMANDS_TOO_MUCH` risk |
+| `auto` / selective | Prefer **router-first** for menu slots; keep the 13 invocable as skill/text without requiring 13 menu slots |
+| **off** | Skills remain loadable; operators type skill names / prose — no native menu flood |
+
+! Do not require 13 Telegram bot menu slots for L2 parity.
+
+### Wire path (D4–D5)
+
+1. **Primary recovery:** `deft doctor --fix` when OpenClaw is detected — deposits managed L2 skills next to always-pins.
+2. **init/update:** deposits when OpenClaw signals are present and `plan.policy.openClawProductCommands` is not false. **Fail-closed** when OpenClaw is not detected (no writes on non-OC machines).
+3. Multi-seat: `deft doctor --fix --openclaw-all-agents` (same flag as always-pins).
+4. Opt-out: `plan.policy.openClawProductCommands: false` — removes **managed** L2 thin skills only; preserves consumer custom skills at the same slug.
+5. After deposit: **restart the OpenClaw gateway or start a new session** so `available_skills` refreshes.
+
+Always-pin skills (`deft-directive-build`, `pre-pr`, `review-cycle`, `swarm`) remain a **different** surface from L2 product commands (`/deft:directive:run:interview`, `/deft:continue`, …).
+
+Inspect policy:
+
+```bash
+deft policy:show --field=openClawProductCommands
+```
+
 ---
 
 ## Mental model (host class)

package/docs/skill-discovery-hosts.md

@@ -0,0 +1,84 @@
+# Multi-host skill discovery (#75)
+
+Directive deposits **thin skill discovery pointers** so agent hosts that do not
+scan `.agents/skills/` still auto-load the same consumer skill inventory.
+
+## Canonical vs additional paths
+
+| Path | Role |
+|------|------|
+| `.agents/skills/` | **Canonical** consumer discovery (landed with #94 / install `writeAgentsSkills`) |
+| `.claude/skills/` | Claude Code |
+| `.codex/skills/` | OpenAI Codex |
+| `.github/skills/` | GitHub Copilot |
+| `.cursor/skills/` | Cursor (when not fully covered by optional OpenPackage install) |
+
+Additional host paths **mirror** the same thin `SKILL.md` inventory as
+`.agents/skills/`. They do not fork independent skill bodies. Full skill text
+lives under `.deft/core/skills/…` (or `.deft/core/SKILL.md` for the root
+`deft` skill).
+
+## Thin pointers only
+
+Each deposited `SKILL.md` is a short frontmatter + `Read and follow: .deft/core/…`
+line. Init/update **must not** copy full skill process docs into host skill dirs
+(those rot on framework upgrade).
+
+Windows: deposit uses ordinary file writes (contained projection). Elevated
+symlinks are **not** required.
+
+## When deposit runs
+
+- `directive init` / greenfield scaffold — after `.agents/skills/`
+- `directive update` / refresh — every refresh (idempotent rewrite of managed
+  pointers when content drifts)
+
+## Per-host opt-out
+
+Typed policy: `plan.policy.hostSkillDiscovery`
+
+```json
+{
+  "plan": {
+    "policy": {
+      "hostSkillDiscovery": {
+        "claude": true,
+        "cursor": true,
+        "codex": true,
+        "github": false
+      }
+    }
+  }
+}
+```
+
+- Default: all four residual hosts **enabled**
+- Inspect: `deft policy:show --field=hostSkillDiscovery`
+- Opt-out skips deposit for that host only (does not remove unrelated user files)
+
+Distinct from `plan.policy.hostHooks` (hook JSON deposit, #2752).
+
+## Relationship to #55 slash registration
+
+| | **#75 skill discovery** | **#55 slash / commands** |
+|--|-------------------------|---------------------------|
+| Artifact | Host **skill** dirs (`…/skills/`) | Host **command/prompt** files (`…/commands/`, `…/prompts/`) |
+| Product set | Existing consumer skill inventory | Locked product slash set (L2) |
+| Content | Thin skill pointer `SKILL.md` | Thin command wrapper (~40–100 tok) |
+| Deposit | This doc / `skill-discovery-deposit` | Epic children #3052–#3055 |
+
+Do **not** treat slash completion as closing skill-path residual, or skill
+deposit as registering slash commands.
+
+## Relationship to OpenPackage
+
+OpenPackage (#2462 / #2370) is an optional tiered pack install for some hosts.
+It does **not** replace init/update multi-host skill discovery for the residual
+matrix above. Close #75 only when residual host paths are deposited (or
+explicitly opted out), not solely because OpenPackage exists.
+
+## Implementation pointers
+
+- Layouts + policy: `packages/core/src/init-deposit/skill-discovery-hosts.ts`
+- Deposit: `packages/core/src/init-deposit/skill-discovery-deposit.ts`
+- Shared inventory with `.agents/skills/`: `CONSUMER_SKILL_DISCOVERY_INVENTORY`

package/docs/slash-multi-host.md

@@ -0,0 +1,241 @@
+# Multi-host native slash-command registration
+
+Operator guide for **host-native** Directive slash and prompt files after epic [#55](https://github.com/deftai/directive/issues/55).
+
+This surface is **not** skill auto-discovery ([#75](https://github.com/deftai/directive/issues/75)). Skills stay under skill deposit paths. Slash registration writes thin command/prompt wrappers so hosts can show `/deft…` (or the host equivalent) in autocomplete.
+
+Legend (RFC2119): `!`=MUST, `~`=SHOULD, `≉`=SHOULD NOT, `⊗`=MUST NOT, `?`=MAY.
+
+Product locks: **LockedDecisions L1–L10** on [#55](https://github.com/deftai/directive/issues/55). Code waves: [#3052](https://github.com/deftai/directive/issues/3052) generator, [#3053](https://github.com/deftai/directive/issues/3053) emitters, [#3054](https://github.com/deftai/directive/issues/3054) deposit. This page is the docs/dogfood child [#3055](https://github.com/deftai/directive/issues/3055).
+
+Prose SoT for routing and deprecation aliases: [commands.md § Slash Command Namespaces](../commands.md#slash-command-namespaces-418--1670).
+
+---
+
+## What you get
+
+On `directive init` and `deft update`, Directive deposits **exactly 13** thin wrappers (L2) for every **enabled** host that has a real emitter (L6).
+
+| Host id | Directory | Surface |
+|---------|-----------|---------|
+| `claude` | `.claude/commands/` | commands |
+| `cursor` | `.cursor/commands/` | commands |
+| `grok` | `.grok/commands/` | commands |
+| `codex` | `.codex/prompts/` | prompts |
+| **OpenClaw** (adapter, not file emitter) | OpenClaw **workspace skills** (`~/.openclaw/workspace/skills` or `$OPENCLAW_STATE_DIR/...`) | user-invocable skills + router |
+
+File hosts use portable hyphen filenames (L4), for example `deft-directive-run-interview.md` and `deft-continue.md`. Logical slash ids keep the namespace form (`/deft:directive:run:interview`).
+
+**OpenClaw** is **not** a fifth row in `SLASH_EMITTER_HOSTS` / `HOST_COMMAND_LAYOUTS`. There is no project-tree `.openclaw/commands/` deposit (that would be stub theater — Gateway does not load that path). OpenClaw L2 parity ships as a **skills/plugin adapter** ([#3064](https://github.com/deftai/directive/issues/3064)): thin **user-invocable** skills under the main workspace skills root, with a stable `logicalId → openClawSlug` map (`a-z0-9_`, max 32). See [openclaw-agent-host.md](./openclaw-agent-host.md) § L2 product commands.
+
+⊗ Treat last-writer-wins single-host install as the product default. One repo may use many hosts; deposit targets the **configured set** in one pass.
+
+---
+
+## Product set (L2 — exactly 13)
+
+| # | Logical slash id | Filename stem |
+|---|------------------|---------------|
+| 1 | `/deft:directive:change` | `deft-directive-change` |
+| 2 | `/deft:directive:change:apply` | `deft-directive-change-apply` |
+| 3 | `/deft:directive:change:verify` | `deft-directive-change-verify` |
+| 4 | `/deft:directive:change:archive` | `deft-directive-change-archive` |
+| 5 | `/deft:directive:run:interview` | `deft-directive-run-interview` |
+| 6 | `/deft:directive:run:yolo` | `deft-directive-run-yolo` |
+| 7 | `/deft:directive:run:map` | `deft-directive-run-map` |
+| 8 | `/deft:directive:run:discuss` | `deft-directive-run-discuss` |
+| 9 | `/deft:directive:run:research` | `deft-directive-run-research` |
+| 10 | `/deft:directive:run:speckit` | `deft-directive-run-speckit` |
+| 11 | `/deft:directive:run:probe` | `deft-directive-run-probe` |
+| 12 | `/deft:continue` | `deft-continue` |
+| 13 | `/deft:checkpoint` | `deft-checkpoint` |
+
+⊗ Auto-register every `deft-directive-*` skill as a slash entry.  
+⊗ Expand N without an amendment to L2 on #55.
+
+Legacy prose aliases (`/deft:change`, `/deft:run:…`) remain accepted in agent text with deprecation guidance. Native host files emit **canonical names only** (L3) — no second set of alias files.
+
+---
+
+## Thin wrappers (L5)
+
+Each managed file is a short pointer, not a copy of a strategy or skill:
+
+- YAML frontmatter: `description` (and `argument-hint` when needed)
+- Body: load the content-relative target under `.deft/core/` when installed; honor `$ARGUMENTS`; do not inline the target body
+
+Token intent (catalog ≤ ~1k tok for the set; invoke body ~40–100 tok). Real cost is the strategy/skill after invoke.
+
+Contributors: keep wrappers thin. Emitters consume `generateThinWrappers()` / `listProductCommands()` — do not maintain a second name table.
+
+---
+
+## Policy opt-out (`plan.policy.hostSlashCommands`)
+
+Default: all emitter hosts enabled (`claude`, `cursor`, `grok`, `codex`).
+
+Set a host to `false` in `xbrief/PROJECT-DEFINITION.xbrief.json` (or consumer deposit layout) to skip that host:
+
+```json
+{
+  "plan": {
+    "policy": {
+      "hostSlashCommands": {
+        "claude": true,
+        "cursor": true,
+        "grok": false,
+        "codex": true
+      }
+    }
+  }
+}
+```
+
+Inspect:
+
+```bash
+deft policy:show --field=hostSlashCommands
+```
+
+On opt-out, init/update **removes only** Directive-managed thin wrappers for that host. Consumer-customized files at the same path are left alone. Unknown host keys fail validation.
+
+This policy is parallel to `plan.policy.hostHooks` (enforcement hooks). Hooks and slash deposit are separate surfaces.
+
+### OpenClaw adapter opt-out (`plan.policy.openClawProductCommands`)
+
+OpenClaw L2 deposit is **separate** from the four file emitters. Default **on** when the adapter is real and OpenClaw is detected.
+
+```json
+{
+  "plan": {
+    "policy": {
+      "openClawProductCommands": false
+    }
+  }
+}
+```
+
+```bash
+deft policy:show --field=openClawProductCommands
+```
+
+When false, init/update/doctor **removes only** Directive-managed OpenClaw L2 thin skills (router + 13 product slugs). Consumer-customized skills at the same slug are left alone. Deposit **does not write** OpenClaw artifacts when OpenClaw is not detected (fail-closed).
+
+Primary recovery: `deft doctor --fix` (optional `--openclaw-all-agents` for multi-seat).
+
+---
+
+## Git policy (L8 — prefer commit)
+
+! **Prefer committing** managed product command/prompt files so every clone and every host share the same `/deft…` surface.
+
+- Managed paths are exact product filenames (installer allowlist), not “claim the whole `.claude/commands/` tree.”
+- Custom files you add next to managed ones stay app-owned.
+- Idempotent rewrite on init/update keeps managed thin wrappers current either way.
+
+? Personal gitignore of host command dirs remains an escape for machine-local only setups. That is **not** the default team recommendation. Multi-host shared repos benefit most from a committed deposit.
+
+⊗ Do not use single-host last-writer-wins as the team sharing model.
+
+---
+
+## Prose fallback (L9)
+
+File hosts without native registration (or with all file hosts opted out) still use the agent text convention in [commands.md](../commands.md). AGENTS.md and skills routing continue to work without native autocomplete files.
+
+**OpenClaw** after [#3064](https://github.com/deftai/directive/issues/3064): when the adapter has deposited L2 skills, operators should prefer the invocable skills / router — not prose-only discovery. Prose `/deft:directive:…` remains accepted in agent text when skills are not yet wired (doctor not run, policy off, or host without OpenClaw signals).
+
+---
+
+## Slash registration vs skill discovery (#55 vs #75 vs #3064)
+
+| Concern | Tracker | What lands |
+|---------|---------|------------|
+| Native slash / prompt **command files** | #55 | Thin wrappers under host command/prompt dirs; multi-host deposit |
+| Skill auto-discovery paths | #75 | `SKILL.md` discovery under `.agents/skills/`, `.claude/skills/`, etc. |
+| OpenClaw L2 product commands | #3064 | Thin **user-invocable** skills + router in OpenClaw workspace skills (not a file emitter) |
+
+! Do not treat skill discovery alone as “slash registration done.”  
+! Do not dual-maintain full skill bodies as command file contents (L7).  
+! Do not invent project `.openclaw/commands/` for L2 parity.
+
+Agent-host runtime notes (OpenClaw spawn/review + L2 skills) live under [openclaw-agent-host.md](./openclaw-agent-host.md).
+
+---
+
+## Dogfood checklist (multi-host clone)
+
+Use this after install or upgrade when two or more hosts share one repo.
+
+1. **Upgrade / deposit**
+
+   ```bash
+   npm i -g @deftai/directive@latest   # when using the npm channel
+   directive update                    # or directive init on a new project
+   ```
+
+2. **Confirm policy**
+
+   ```bash
+   deft policy:show --field=hostSlashCommands
+   ```
+
+   Expect enabled hosts = emitters you want (default: all four true).
+
+3. **Smoke paths on disk** (enabled hosts only)
+
+   ```text
+   .claude/commands/deft-continue.md
+   .cursor/commands/deft-continue.md
+   .grok/commands/deft-continue.md
+   .codex/prompts/deft-continue.md
+   ```
+
+   Spot-check count: **13** managed files per enabled host. Bodies stay short (description + dispatch pointer).
+
+4. **Two-host UI check**
+
+   - Open the same clone in host A (for example Claude Code) and host B (for example Cursor).
+   - Type `/` (or the host prompt picker) and confirm Directive entries such as `deft-directive-run-interview` / `/deft:continue` appear on **both** hosts when both are enabled.
+   - Invoke one strategy command and one session command; agent should load the pointed strategy/resilience doc, not a fat inlined body.
+
+5. **Opt-out smoke (optional)**
+
+   - Set one host to `false`, run `directive update`, confirm that host’s **managed** product files were removed and other hosts remain.
+   - Restore `true` and update again to redeposit.
+
+6. **Git**
+
+   - Stage managed product paths (or let the installer staging path include them) and commit so teammates inherit the surface.
+   - ~ Avoid gitignoring the whole host command directory on team repos.
+
+7. **Hooks still separate**
+
+   - `deft verify:hooks-installed --scope=agent` checks hooks, not slash files.
+   - Missing autocomplete after a clean deposit is a host UI/cache issue or policy opt-out — re-run update and re-check policy before filing a deposit bug.
+
+---
+
+## Related surfaces
+
+| Surface | Role |
+|---------|------|
+| [commands.md § Slash Command Namespaces](../commands.md#slash-command-namespaces-418--1670) | Prose namespaces, routing, deprecation aliases, deposit pointer |
+| `packages/core/src/slash/` | Generator IR + emitters + OpenClaw adapter (maintainers) |
+| `writeSlashCommandDeposit` | init/update file-host deposit |
+| `depositOpenClawL2ProductCommands` / doctor OpenClaw L2 check | OpenClaw skills adapter (#3064) |
+| `plan.policy.openClawProductCommands` | OpenClaw L2 adapter opt-out |
+| `plan.policy.hostHooks` | Host enforcement hooks (#2438) — not slash files |
+| [#75](https://github.com/deftai/directive/issues/75) | Skill discovery residual |
+| [#3064](https://github.com/deftai/directive/issues/3064) | OpenClaw L2 product-command adapter |
+
+---
+
+## Design reading order (#55)
+
+1. LockedDecisions L1–L10 on #55  
+2. Multi-host deposit amendment on #55  
+3. Token / context design rules on #55  
+4. This page + `commands.md`  
+
+Issue body (2026-03) on #55 is historical intent only.

package/main.md

@@ -32,6 +32,7 @@ Legend (from RFC2119): !=MUST, ~=SHOULD, ≉=SHOULD NOT, ⊗=MUST NOT, ?=MAY.
 - Interfaces: [interfaces/cli.md](./content/interfaces/cli.md), [interfaces/tui.md](./content/interfaces/tui.md), [interfaces/web.md](./content/interfaces/web.md), [interfaces/rest.md](./content/interfaces/rest.md)
 - Tools: [tools/taskfile.md](./content/tools/taskfile.md), [scm/git.md](./content/scm/git.md), [scm/github.md](./content/scm/github.md), [tools/telemetry.md](./content/tools/telemetry.md)
 - Testing: [coding/testing.md](./content/coding/testing.md)
+- Review process: [coding/review.md](./content/coding/review.md) (tool-agnostic; Greptile adapter via review-cycle skill)
 
 **Advanced:**
 - Contracts: [contracts/hierarchy.md](./content/contracts/hierarchy.md), [contracts/boundary-maps.md](./content/contracts/boundary-maps.md)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive-content",
-  "version": "0.92.0",
+  "version": "0.94.0",
   "description": "Shippable Directive framework content in the consumer .deft/core/ layout (C1 flatten), plus the engine surfaces (.githooks/, Taskfile.yml, tasks/) the deposit wires. Python-free per #2022 Phase 3. Refs #11, #1669, #1967.",
   "license": "MIT",
   "type": "module",