@enterpriseai/cli 3.19.0 → 3.19.2

package/resources/gofer/templates/ciso-security-summary-template.md

@@ -1,7 +1,7 @@
 ---
-feature: "{{feature-name}}"
-created: "{{ISO-timestamp}}"
-updated: "{{ISO-timestamp}}"
+feature: '{{feature-name}}'
+created: '{{ISO-timestamp}}'
+updated: '{{ISO-timestamp}}'
 audience: ciso-risk
 source_inputs:
   - validation-report.md

package/resources/gofer/templates/context-bundle-template.md

@@ -1,6 +1,6 @@
 ---
-feature: "{{feature-name}}"
-created: "{{ISO-timestamp}}"
+feature: '{{feature-name}}'
+created: '{{ISO-timestamp}}'
 audience: downstream-agents
 workflowProfile: enterpriseai
 ---
@@ -46,8 +46,9 @@ rationale.
 | -------------------------- | -------------------------------- | ----------- |
 | `discovery.md`             | {{business-context}}             | Keep        |
 | `journeys/base-journey.md` | {{ai-augmented-process-context}} | Keep / N/A  |
+| `build-map.md`             | {{plain-language-build-picture}} | Keep / N/A  |
 | `ui-preview-brief.md`      | {{preview-scope-and-branding}}   | Keep / N/A  |
-| `ui-approval.md`           | {{approved-ui-gate}}             | Keep / N/A  |
+| `ui-show-and-tell.md`      | {{latest-preview-and-feedback}}  | Keep / N/A  |
 | `service-fit-matrix.md`    | {{capability-selection}}         | Keep / N/A  |
 | `research.md`              | {{implementation-context}}       | Keep        |
 | `reuse-scan.md`            | {{reuse-evidence}}               | Keep        |

package/resources/gofer/templates/contract-pack-template.md

@@ -25,17 +25,17 @@ workflowProfile: enterpriseai
 | User journey           | {{journey}} | {{trigger}} | {{outcome}} |
 | Internal orchestration | {{flow}}    | {{trigger}} | {{outcome}} |
 
-## UI Preview And Approval
+## UI Preview And Show-and-Tell
 
-For app delivery, capture the preview-first gate here. For non-app work, mark
-this section "Not applicable" and link to the classification rationale in
-`discovery.md`.
+For app delivery, capture the preview-first show-and-tell evidence here. For
+non-app work, mark this section "Not applicable" and link to the classification
+rationale in `discovery.md`.
 
 | Artifact              | Purpose                        | Required For Completion |
 | --------------------- | ------------------------------ | ----------------------- |
 | `ui-preview-brief.md` | {{preview-brief-purpose}}      | {{yes-or-na}}           |
 | `ui-review-log.md`    | {{preview-iteration-evidence}} | {{yes-or-na}}           |
-| `ui-approval.md`      | {{explicit-approval-gate}}     | {{yes-or-na}}           |
+| `ui-show-and-tell.md` | {{show-and-tell-feedback}}     | {{yes-or-na}}           |
 
 ## AI-Readable Blocks Bridge Contract
 
@@ -46,7 +46,7 @@ this section "Not applicable" and link to the classification rationale in
 | Coupling status                            | {{source-platform-coupled-source-platform-decoupled-hybrid-adapter}} | {{source}} |
 | Storybook story IDs                        | {{story-ids-or-exceptions}}                                          | {{source}} |
 | Theme override points                      | {{tokens-slots-css-vars}}                                            | {{source}} |
-| Custom-block exceptions                    | {{none-or-approval-path}}                                            | {{source}} |
+| Custom-block exceptions                    | {{none-or-review-path}}                                              | {{source}} |
 | Public-readiness target                    | {{required-deferred-not-applicable}}                                 | {{source}} |
 | Block porting / source-platform decoupling | {{reuse-port-adapter-exception}}                                     | {{source}} |
 
@@ -65,8 +65,8 @@ classification rationale in `discovery.md`.
 
 ## EnterpriseAI Service Fit
 
-For app delivery, record how the approved UI maps to platform capabilities. For
-non-app work, mark this section "Not applicable".
+For app delivery, record how the visible UI direction maps to platform
+capabilities. For non-app work, mark this section "Not applicable".
 
 | Stack Layer        | Decision                                                          | Evidence            |
 | ------------------ | ----------------------------------------------------------------- | ------------------- |

package/resources/gofer/templates/cto-architecture-summary-template.md

@@ -1,7 +1,7 @@
 ---
-feature: "{{feature-name}}"
-created: "{{ISO-timestamp}}"
-updated: "{{ISO-timestamp}}"
+feature: '{{feature-name}}'
+created: '{{ISO-timestamp}}'
+updated: '{{ISO-timestamp}}'
 audience: cto-architecture
 source_inputs:
   - plan.md

package/resources/gofer/templates/delivery-lineage-template.json

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": "eai.delivery_lineage.v1",
+  "plane": "customer",
+  "featureId": "replace-with-feature-id",
+  "generatedAt": "1970-01-01T00:00:00.000Z",
+  "nodes": [],
+  "edges": []
+}

package/resources/gofer/templates/eai-preflight-template.md

@@ -8,26 +8,42 @@ updated: '{{iso_timestamp}}'
 
 # EAI App Delivery Preflight
 
+Use this artifact only when the active feature requires EAI Platform services,
+an EAI app integration, authentication, a workspace, or deployment. For an early
+local MVP, record EAI capability as `planned` or `not_applicable` in `spec.md`.
+
+## Capability Scope
+
+| Capability               | State            | Required now | Evidence or trigger |
+| ------------------------ | ---------------- | ------------ | ------------------- | -------- | --------- | ----- | ---- | ---------- |
+| EAI Platform integration | {{not_applicable | planned      | implemented         | verified | blocked}} | {{yes | no}} | {{reason}} |
+| Authentication           | {{not_applicable | planned      | implemented         | verified | blocked}} | {{yes | no}} | {{reason}} |
+| Deployment               | {{not_applicable | planned      | implemented         | verified | blocked}} | {{yes | no}} | {{reason}} |
+
+Only run checks that are required now. A blocked EAI capability must not block
+an unrelated local MVP journey.
+
 ## Summary
 
 | Field                       | Status        | Evidence              |
-| --------------------------- | ------------- | --------------------- | ---------------------------- | ---------------------------------------------------------------------------------- | ------------------------------------------------------------------ | ------------------------------------------------------------------- |
+| --------------------------- | ------------- | --------------------- | ---------------------------- | ----------------------------------------------------------------------------------------------- | ------------------------------------------------------------------ | ------------------------------------------------------------------- |
 | EAI app delivery applies    | {{yes         | no}}                  | {{classification evidence}}  |
-| CLI installed               | {{ready       | missing               | failed}}                     | {{command -v eai, eai --version}}                                                  |
-| CLI release status          | {{current     | upgrade_required      | blocked}}                    | {{eai update --check}}                                                             |
+| CLI installed               | {{ready       | missing               | failed}}                     | {{command -v eai, eai --version}}                                                               |
+| CLI release status          | {{current     | upgrade_required      | blocked}}                    | {{eai update --check}}                                                                          |
 | CLI capabilities discovered | {{ready       | blocked}}             | {{eai --describe timestamp}} |
-| Logged in                   | {{ready       | login_required        | account_required}}           | {{eai whoami summary, no tokens}}                                                  |
-| Workspace ready                | {{ready       | tenant_required       | operator_required}}          | {{workspace role category, no private payloads}}                                      |
-| Template ready              | {{ready       | template_required     | deferred}}                   | {{template markers or eai verify result}}                                          |
-| Drift readiness             | {{ready       | drift_detected        | not_applicable}}             | {{eai template check / eai gofer refresh --check}}                                 |
-| App enrollment ready        | {{ready       | confirmation_required | blocked                      | deferred}}                                                                         | {{app list/create/select summary}}                                 |
-| Entra redirect readiness    | {{ready       | not_required          | blocked                      | deferred}}                                                                         | {{callback URI, client ID label, and AADSTS50011 recovery status}} |
-| Resource provisioning       | {{not_started | in_progress           | ready                        | blocked                                                                            | deferred}}                                                         | {{eai app provision, entra, and storage-health evidence}}           |
-| Object-type publish         | {{not_started | in_progress           | ready                        | blocked                                                                            | deferred}}                                                         | {{eai types validate/seed/diff evidence}}                           |
-| Schema and storage health   | {{not_started | in_progress           | ready                        | blocked                                                                            | deferred}}                                                         | {{resource schema, storage status/doctor, verify storage evidence}} |
-| Workflow readiness          | {{ready       | blocked               | deferred}}                   | {{eai workflow readiness evidence}}                                                |
-| Block catalog ready         | {{ready       | blocked               | deferred}}                   | {{blocks list/readiness/describe summary}}                                         |
-| App stack policy            | {{ready       | exception_required    | blocked}}                    | {{EAI Platform including app template first, Azure second, or approved exception}} |
+| Object Type seed adapter    | {{ready       | upgrade_required      | blocked}}                    | {{agent guide capability; dry-run preferred shape and exact pairs only; mutating result shape}} |
+| Logged in                   | {{ready       | login_required        | account_required}}           | {{eai whoami summary, no tokens}}                                                               |
+| Workspace ready             | {{ready       | workspace_required    | operator_required}}          | {{workspace role category, no private payloads}}                                                |
+| Template ready              | {{ready       | template_required     | blocked}}                    | {{eai-app-template-readiness status; no manifest values}}                                       |
+| Drift readiness             | {{ready       | drift_detected        | not_applicable}}             | {{eai template check / eai gofer refresh --check}}                                              |
+| App enrollment ready        | {{ready       | confirmation_required | blocked                      | deferred}}                                                                                      | {{app list/create/select summary}}                                 |
+| Entra redirect readiness    | {{ready       | not_required          | blocked                      | deferred}}                                                                                      | {{callback URI, client ID label, and AADSTS50011 recovery status}} |
+| Resource provisioning       | {{not_started | in_progress           | ready                        | blocked                                                                                         | deferred}}                                                         | {{eai app provision, entra, and storage-health evidence}}           |
+| Object-type publish         | {{not_started | in_progress           | ready                        | blocked                                                                                         | deferred}}                                                         | {{workspace validation, seed, and diff evidence}}                   |
+| Schema and storage health   | {{not_started | in_progress           | ready                        | blocked                                                                                         | deferred}}                                                         | {{resource schema, storage status/doctor, verify storage evidence}} |
+| Workflow readiness          | {{ready       | blocked               | deferred}}                   | {{eai workflow readiness evidence}}                                                             |
+| Block catalog ready         | {{ready       | blocked               | deferred}}                   | {{blocks list/readiness/describe summary}}                                                      |
+| App stack policy            | {{ready       | exception_required    | blocked}}                    | {{EAI Platform including app template first, Azure second, or approved exception}}              |
 
 ## Safe Public Sources Used
 
@@ -39,39 +55,63 @@ updated: '{{iso_timestamp}}'
 
 ## Commands Run
 
-| Purpose                   | Command                                                                                                           | Result                |
-| ------------------------- | ----------------------------------------------------------------------------------------------------------------- | --------------------- |
-| Install check             | `command -v eai`                                                                                                  | {{result}}            |
-| Version check             | `eai --version`                                                                                                   | {{result}}            |
-| Release check             | `eai update --check`                                                                                              | {{result}}            |
-| Capability discovery      | `eai --describe`                                                                                                  | {{result}}            |
-| Login check               | `eai whoami`                                                                                                      | {{result}}            |
-| Workspace check              | `eai workspace list --format json`                                                                                   | {{result}}            |
-| Project check             | `eai verify`                                                                                                      | {{result_or_not_run}} |
-| Template drift check      | `eai template check --format json`                                                                                | {{result_or_not_run}} |
-| Gofer drift check         | `eai gofer refresh --check --format json`                                                                         | {{result_or_not_run}} |
-| App enrollment check      | `eai app list --format json`                                                                                      | {{result_or_not_run}} |
-| App selection             | `eai app select <key> --format json`                                                                              | {{result_or_not_run}} |
-| App resource provisioning | `eai app provision <key> --tenant-id <workspace-id> --select --format json`                                          | {{result_or_not_run}} |
-| Entra provisioning        | `eai provision entra`                                                                                             | {{result_or_not_run}} |
-| Entra redirect recovery   | `eai provision entra --force --redirect-uri <confirmed-callback-uri>`; artifact uses redacted callback route only | {{result_or_not_run}} |
-| Environment pull          | `eai env pull`                                                                                                    | {{result_or_not_run}} |
-| Object-type validation    | `eai types validate`                                                                                              | {{result_or_not_run}} |
-| Object-type publish       | `eai types seed --tenant-key <key> --tenant-id <workspace-id> --format json`                                         | {{result_or_not_run}} |
-| Object-type convergence   | `eai types diff --tenant-key <key> --tenant-id <workspace-id>`                                                       | {{result_or_not_run}} |
-| Resource schema           | `eai resources schema --tenant-id <workspace-id> --format json`                                                      | {{result_or_not_run}} |
-| Storage status            | `eai resources storage status --tenant-id <workspace-id> --format json`                                              | {{result_or_not_run}} |
-| Storage doctor            | `eai resources storage doctor --tenant-id <workspace-id> --format json`                                              | {{result_or_not_run}} |
-| Storage verify            | `eai verify storage --tenant-id <workspace-id>`                                                                      | {{result_or_not_run}} |
-| Resource call verify      | `eai verify calls --tenant-id <workspace-id> --resource-type <resource-type>`                                        | {{result_or_not_run}} |
-| Workflow readiness check  | `eai workflow readiness --format json`                                                                            | {{result_or_not_run}} |
-| Block catalog check       | `eai blocks list --format json`                                                                                   | {{result_or_not_run}} |
-| Block readiness check     | `eai blocks readiness --package-profile {{profile}} --format json`                                                | {{result_or_not_run}} |
+| Purpose                 | Command                                                                              | Result     |
+| ----------------------- | ------------------------------------------------------------------------------------ | ---------- |
+| Install check           | `command -v eai`                                                                     | {{result}} |
+| Version check           | `eai --version`                                                                      | {{result}} |
+| Release check           | `eai update --check`                                                                 | {{result}} |
+| Capability discovery    | `eai --describe`                                                                     | {{result}} |
+| Seed adapter capability | `eai agent guide --format json` must include `app-manifest-name-slug-negotiation-v1` | {{result}} |
+
+The CLI keeps the technical option names `--tenant-id` for the workspace ID and
+`--tenant-key` for the Object Type scope key.
+
+| Login check | `eai whoami` | {{result}} | | Workspace check |
+`eai workspace list --format json` | {{result}} | | App-template readiness |
+`node .specify/scripts/node/eai-app-template-readiness.mjs --root . --json` |
+{{result_or_not_run}} | | Project check | `eai verify` | {{result_or_not_run}} |
+| Template drift check | `eai template check --format json` |
+{{result_or_not_run}} | | Gofer drift check |
+`eai gofer refresh --check --format json` | {{result_or_not_run}} | | App
+enrollment check | `eai app list --format json` | {{result_or_not_run}} | | App
+selection | `eai app select <key> --format json` | {{result_or_not_run}} | | App
+resource provisioning |
+`eai app provision <key> --tenant-id <tenant-id> --select --format json` |
+{{result_or_not_run}} | | Entra provisioning | `eai provision entra` |
+{{result_or_not_run}} | | Entra redirect recovery |
+`eai provision entra --force --redirect-uri <confirmed-callback-uri>`; artifact
+uses redacted callback route only | {{result_or_not_run}} | | Environment pull |
+`eai env pull` | {{result_or_not_run}} | | Object-type validation |
+`eai types validate --tenant-key <scope-key> --tenant-id <tenant-id>` |
+{{result_or_not_run}} | | Object-type dry-run gate |
+`eai types seed --tenant-key <scope-key> --tenant-id <tenant-id> --dry-run --format json`
+| {{preferred_shape_and_exact_pairs_only}} | | Object-type publish |
+`eai types seed --tenant-key <scope-key> --tenant-id <tenant-id> --format json`
+| {{result_or_not_run}} | | Object-type convergence |
+`eai types diff --tenant-key <scope-key> --tenant-id <tenant-id>` |
+{{result_or_not_run}} | | Resource schema |
+`eai resources schema --tenant-id <tenant-id> --format json` |
+{{result_or_not_run}} | | Storage status |
+`eai resources storage status --tenant-id <tenant-id> --format json` |
+{{result_or_not_run}} | | Storage doctor |
+`eai resources storage doctor --tenant-id <tenant-id> --format json` |
+{{result_or_not_run}} | | Storage verify |
+`eai verify storage --tenant-id <tenant-id>` | {{result_or_not_run}} | |
+Resource call verify |
+`eai verify calls --tenant-id <tenant-id> --resource-type <resource-type>` |
+{{result_or_not_run}} | | Workflow readiness check |
+`eai workflow readiness --format json` | {{result_or_not_run}} | | Block catalog
+check | `eai blocks list --format json` | {{result_or_not_run}} | | Block
+readiness check |
+`eai blocks readiness --package-profile {{profile}} --format json` |
+{{result_or_not_run}} |
 
 ## Template Markers
 
 | Marker                           | Present |
 | -------------------------------- | ------- | ---- |
+| `.eai-manifest.json`             | {{yes   | no}} |
+| `eai.runtime.json`               | {{yes   | no}} |
 | `src/eai.config/object-types.ts` | {{yes   | no}} |
 | `src/eai.config/register.ts`     | {{yes   | no}} |
 | `.env.example`                   | {{yes   | no}} |
@@ -80,28 +120,28 @@ updated: '{{iso_timestamp}}'
 
 ## Decisions
 
-| Decision              | Value                | Rationale          |
-| --------------------- | -------------------- | ------------------ | --------------------- | ------------------- | ------------------------------------- | ---------- |
-| Initialize template   | {{yes                | no                 | deferred}}            | {{reason}}          |
-| App directory         | {{current_repo       | new_sibling        | existing_eai_app}}    | {{reason}}          |
+| Decision                 | Value                | Rationale          |
+| ------------------------ | -------------------- | ------------------ | --------------------- | ------------------- | ------------------------------------- | ---------- |
+| Initialize template      | {{yes                | no                 | deferred}}            | {{reason}}          |
+| App directory            | {{current_repo       | new_sibling        | existing_eai_app}}    | {{reason}}          |
 | Company workspace        | {{selected           | blocked            | deferred}}            | {{safe label only}} |
 | Child workspace boundary | {{none               | required           | deferred}}            | {{reason}}          |
-| Package profile       | {{external           | internal           | hybrid                | deferred}}          | {{reason}}                            |
-| App enrollment        | {{existing           | create_confirmed   | confirmation_required | blocked             | deferred}}                            | {{reason}} |
-| Entra callback URI    | {{not_required       | confirmed          | blocked               | deferred}}          | {{exact callback URI or safe reason}} |
-| App stack             | {{eai_platform_azure | approved_exception | blocked}}             | {{reason}}          |
+| Package profile          | {{external           | internal           | hybrid                | deferred}}          | {{reason}}                            |
+| App enrollment           | {{existing           | create_confirmed   | confirmation_required | blocked             | deferred}}                            | {{reason}} |
+| Entra callback URI       | {{not_required       | confirmed          | blocked               | deferred}}          | {{exact callback URI or safe reason}} |
+| App stack                | {{eai_platform_azure | approved_exception | blocked}}             | {{reason}}          |
 
 ## Execution Order And Gate Tracking
 
-| Field                          | Value                                                                                                                                                                                                                                                                                               |
-| ------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------- | --------------------- |
-| Planned execution order        | {{template_init -> dependency_install -> login -> tenant_select -> app_list_or_create -> app_select -> app_provision -> entra_provision -> env_pull_if_needed -> types_validate -> types_seed -> types_diff -> resources_schema -> storage_status_doctor_verify -> verify_calls -> preview_or_dev}} |
-| Last completed gate            | {{safe_status_label}}                                                                                                                                                                                                                                                                               |
-| Blocked gate                   | {{safe_status_label_or_none}}                                                                                                                                                                                                                                                                       |
-| Next recovery command          | {{command_or_none}}                                                                                                                                                                                                                                                                                 |
-| Known error matched            | {{none                                                                                                                                                                                                                                                                                              | EAI_ENTRA_REDIRECT_URI_MISMATCH | other_catalog_error}} |
-| Preview/doc URL readiness      | {{not_ready                                                                                                                                                                                                                                                                                         | ready                           | deferred}}            |
-| Repo-owned fallback references | {{.specify/references/platform/eai-repo-contract.md + eai-error-catalog.yaml}}                                                                                                                                                                                                                      |
+| Field                          | Value                                                                                                                                                                                                                                                                                                  |
+| ------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------- | --------------------- |
+| Planned execution order        | {{template_init -> dependency_install -> login -> workspace_select -> app_list_or_create -> app_select -> app_provision -> entra_provision -> env_pull_if_needed -> types_validate -> types_seed -> types_diff -> resources_schema -> storage_status_doctor_verify -> verify_calls -> preview_or_dev}} |
+| Last completed gate            | {{safe_status_label}}                                                                                                                                                                                                                                                                                  |
+| Blocked gate                   | {{safe_status_label_or_none}}                                                                                                                                                                                                                                                                          |
+| Next recovery command          | {{command_or_none}}                                                                                                                                                                                                                                                                                    |
+| Known error matched            | {{none                                                                                                                                                                                                                                                                                                 | EAI_ENTRA_REDIRECT_URI_MISMATCH | other_catalog_error}} |
+| Preview/doc URL readiness      | {{not_ready                                                                                                                                                                                                                                                                                            | ready                           | deferred}}            |
+| Repo-owned fallback references | {{.specify/references/platform/eai-repo-contract.md + eai-error-catalog.yaml}}                                                                                                                                                                                                                         |
 
 ## App Stack Policy
 
@@ -116,25 +156,26 @@ rationale, owner, expiry, and validation evidence.
 
 ## Next Action
 
-{{continue_discovery|install_eai|login_required|tenant_access_required|initialize_template|confirm_app_enrollment|entra_redirect_recovery|stop_non_eai}}
+{{continue_discovery|install_eai|login_required|workspace_access_required|initialize_template|confirm_app_enrollment|entra_redirect_recovery|stop_non_eai}}
 
 ## Recovery Rules
 
 - If `eai types seed` fails with an app-resources/provisioning error, return to
-  `eai app provision <key> --tenant-id <workspace-id> --select --format json` and
+  `eai app provision <key> --tenant-id <tenant-id> --select --format json` and
+  `eai types validate --tenant-key <scope-key> --tenant-id <tenant-id>`, then
   keep `Object-type publish` blocked.
 - If `eai resources schema`, storage endpoints, app endpoints, or preview URLs
   return `503` or equivalent readiness failures, run
-  `eai resources storage status --tenant-id <workspace-id> --format json`,
-  `eai resources storage doctor --tenant-id <workspace-id> --format json`, and
-  `eai verify storage --tenant-id <workspace-id>` before claiming schema or preview
+  `eai resources storage status --tenant-id <tenant-id> --format json`,
+  `eai resources storage doctor --tenant-id <tenant-id> --format json`, and
+  `eai verify storage --tenant-id <tenant-id>` before claiming schema or preview
   readiness.
 - If v4 passive ResourceAPI search reports `resource_search_embedding_required`,
   `search_embedding_required`, or missing vector embedding readiness, inspect
   `capabilities.search` from storage doctor. Use full-text search when
-  `fulltext` is ready and reserve hybrid/vector search for workspaces where storage
-  doctor reports those modes ready. Do not apply this fallback to legacy v1/v3
-  or active ResourceAPI behavior.
+  `fulltext` is ready and reserve hybrid/vector search for workspaces with
+  storage doctor reports those modes ready. Apply this fallback only to the
+  published passive ResourceAPI search contract.
 - Do not claim provisioning, seeding, schema readiness, or preview readiness as
   equivalent states. Record each gate separately.
 

package/resources/gofer/templates/goal-ledger-template.json

@@ -61,7 +61,7 @@
     {
       "id": "R3",
       "label": "UX or implementation changed after validation",
-      "watch": ["ui-preview-brief.md", "ui-approval.md", "src", "tests"],
+      "watch": ["ui-preview-brief.md", "ui-show-and-tell.md", "src", "tests"],
       "baselineArtifact": "validation-report.md",
       "reopenStage": "6_validate"
     }

package/resources/gofer/templates/gofer-model-policy.yaml

@@ -1,13 +1,13 @@
 # Gofer model policy
 #
 # This file is copied to .specify/memory/gofer-model-policy.yaml on bootstrap.
-# Edit the memory copy in each repo to tune cost, quality, and account-specific
-# model availability. Generated Gofer commands reference the memory copy; do not
-# hand-edit generated command files for model routing.
+# Edit the memory copy in each repo to set advisory cost, quality, and capability
+# constraints. A fresh signed host capability receipt and independent benchmark
+# evidence select a model. This file never authorizes a static model name.
 #
 # Last verified against public provider docs: 2026-05-30.
 version: 1
-lastVerified: "2026-05-30"
+lastVerified: '2026-05-30'
 profile: balanced
 
 principles:
@@ -67,7 +67,7 @@ surfaces:
       reasoningEffort: high
       contextWindowTokens: 1050000
       useFor: broad frontier reasoning, complex architecture, final arbitration
-  gemini:
+  antigravity:
     simple:
       model: gemini-3.1-flash-lite
       contextWindowTokens: 1000000
@@ -92,6 +92,28 @@ surfaces:
       model: Auto
       useFor: normal Gofer stage prompts and workspace questions
     hard:
-      model: "Best available in picker: GPT-5.3-Codex, GPT-5.5, Claude Opus, or Gemini Pro"
+      model: 'Best available in picker: GPT-5.3-Codex, GPT-5.5, Claude Opus, or Gemini Pro'
       useFor: explicit hard review, security, architecture, or release gates
     note: Copilot model availability depends on plan, organization policy, client, and feature surface.
+  grok:
+    simple:
+      model: Provider default
+      useFor: quick Grok Build questions, summaries, and low-risk edits
+    medium:
+      model: Provider default
+      useFor: normal Gofer stage prompts and implementation work
+    hard:
+      model: Best available in picker
+      useFor: explicit hard review, architecture, security, and release validation
+    note: Grok model availability depends on account, client, and provider policy.
+  vscode:
+    simple:
+      model: Auto
+      useFor: quick editor questions, completion, and low-risk fixes
+    medium:
+      model: Auto
+      useFor: normal Gofer stage prompts in the VS Code host
+    hard:
+      model: Best available in picker
+      useFor: explicit hard review, architecture, security, and release validation
+    note: VS Code model availability depends on installed extensions and organization policy.

package/resources/gofer/templates/loop-contract-template.json

@@ -1,5 +1,7 @@
 {
   "schemaVersion": 1,
+  "requireDeliveryCheckpoint": true,
+  "requirePriorityPlan": true,
   "loopId": "{{featureId}}",
   "profile": "standard",
   "objective": "Keep feature delivery aligned with current goals, approved scope, implementation evidence, and validation gates.",
@@ -27,7 +29,7 @@
     {
       "id": "closed-loop-audit",
       "stage": "6_validate",
-      "command": "node .specify/scripts/node/gofer-closed-loop-audit.mjs --feature-dir {FEATURE_DIR} --json --strict",
+      "command": "node .specify/scripts/node/gofer-closed-loop-audit.mjs --feature-dir {FEATURE_DIR} --json --strict --completion",
       "purpose": "Verify goal, traceability, drift, and validation freshness before final scoring.",
       "runWhen": "before validation scoring"
     }

package/resources/gofer/templates/plan-template.md

@@ -56,9 +56,10 @@ _GATE: Must pass before Phase 0 research. Re-check after Phase 1 design._
 ├── research.md          # Codebase research (/1_gofer_research)
 ├── journeys/
 │   └── base-journey.md  # AI-augmented app journey when app delivery applies
+├── build-map.md         # Plain-language picture of the build and current status
 ├── ui-preview-brief.md  # App-delivery preview brief when app delivery applies
 ├── ui-review-log.md     # App-delivery preview evidence and iteration log
-├── ui-approval.md       # App-delivery approval gate record
+├── ui-show-and-tell.md  # App-delivery show-and-tell and user feedback record
 ├── service-fit-matrix.md # App-delivery capability selection evidence
 ├── plan.md              # This file (/3_gofer_plan)
 ├── data-model.md        # Data model design (/3_gofer_plan)
@@ -155,18 +156,18 @@ architecture needs model-as-code consistency.
 
 ## UI Preview And Service-Fit Gate
 
-For application delivery, the plan must lock the approved preview and service
-selection before downstream implementation is treated as complete. For non-app
-work, state why this gate is not applicable.
+For application delivery, the plan must lock the preview/show-and-tell loop and
+service selection before downstream implementation is treated as complete. For
+non-app work, state why this review is not applicable.
 
-| Gate              | Required Artifact                              | Validation                                                                                               |
+| Review Area       | Required Artifact                              | Validation                                                                                               |
 | ----------------- | ---------------------------------------------- | -------------------------------------------------------------------------------------------------------- |
 | Preview scope     | `ui-preview-brief.md`                          | [how the MVP preview scope is defined]                                                                   |
-| Platform describe | `eai --describe`                               | [CLI version, workspace/platform capability notes, package lane]                                            |
+| Platform describe | `eai --describe`                               | [CLI version, workspace/platform capability notes, package lane]                                         |
 | Block catalog     | `eai blocks list` / `eai blocks describe <id>` | [selected IDs, Storybook story IDs, theme override points, coupling status, and custom-block exceptions] |
 | Resource bindings | `eai resources schema`                         | [object fields/actions/events feeding selected blocks]                                                   |
 | Preview evidence  | `ui-review-log.md`                             | [screenshot, local render, or Playwright-style proof]                                                    |
-| UI approval       | `ui-approval.md`                               | [who approves and when]                                                                                  |
+| UI show-and-tell  | `ui-show-and-tell.md`                          | [what was shown, where it opened, user feedback, accepted revisions, and open UX issues]                 |
 | Service fit       | `service-fit-matrix.md`                        | [how accessible vs purchasable vs unavailable is proved]                                                 |
 
 ## AI-Readable Blocks Bridge

package/resources/gofer/templates/priority-plan-template.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 2,
+  "revision": "replace-with-approved-direction-revision",
+  "objective": "Replace with the current business outcome",
+  "lastInstruction": {
+    "id": "D001",
+    "text": "Replace with the material approved direction recorded in decisions.md"
+  },
+  "decisionPolicy": {
+    "mode": "goal-led",
+    "askOnlyFor": [
+      "goal-change",
+      "irreversible-action",
+      "missing-authority"
+    ]
+  },
+  "criticalPath": ["T001", "T002"],
+  "tasks": {
+    "T001": { "dependsOn": [], "allowedEditScope": ["src/"] },
+    "T002": { "dependsOn": ["T001"], "allowedEditScope": ["tests/"] }
+  },
+  "outcome": {
+    "id": "OUTCOME-001",
+    "statement": "Replace with the observable result required now",
+    "requirements": ["FR-001"],
+    "target": { "environment": "local-mvp", "revision": "replace-with-exact-tested-revision" },
+    "receipt": "evidence/outcome.json"
+  }
+}

package/resources/gofer/templates/proposal-review-template.md

@@ -36,7 +36,8 @@ approvedAt: ''
 
 - **Classification**: [application delivery | non-app work]
 - **Shared numbered stages preserved**: yes
-- **App-delivery-only gates**: [preview, approval, service fit | not applicable]
+- **App-delivery-only gates**: [preview/show-and-tell, service fit | not
+  applicable]
 
 ## Technology Architecture Recommendation
 
@@ -55,8 +56,10 @@ approvedAt: ''
 
 - [Decision]: [Rationale]
 - [Decision]: [Rationale]
-- [Preview strategy]: [Why this is the right first MVP or why it is not applicable]
-- [Service-fit approach]: [Why this capability-selection approach is right or not applicable]
+- [Preview strategy]: [Why this is the right first MVP or why it is not
+  applicable]
+- [Service-fit approach]: [Why this capability-selection approach is right or
+  not applicable]
 
 ## What Can Change Before Specification
 

package/resources/gofer/templates/release-capability-ledger-template.md

@@ -0,0 +1,24 @@
+---
+artifact: release-capability-ledger
+feature: '{{feature_id}}'
+release_branch: '{{branch_or_release_candidate}}'
+status: '{{draft|blocked|verified}}'
+updated: '{{iso_timestamp}}'
+---
+
+# Release Capability Ledger
+
+Use this ledger when the feature claims a release or deployed outcome. Do not
+claim complete status until every required row is verified.
+
+| Requirement | Business outcome | Acceptance evidence      | Responsible PR and commit | Required release branch | Release-branch evidence        | Deployed evidence                       | Status    |
+| ----------- | ---------------- | ------------------------ | ------------------------- | ----------------------- | ------------------------------ | --------------------------------------- | --------- | ------- | ---------- |
+| {{FR-ID}}   | {{outcome}}      | {{test_or_manual_check}} | {{PR_and_commit}}         | {{branch}}              | {{merge-base_or_commit_check}} | {{browser_API_or_operational_evidence}} | {{planned | blocked | verified}} |
+
+## Final Check
+
+- [ ] Every accepted capability has a specification and traceability record.
+- [ ] Every required PR is merged.
+- [ ] Every required commit is present on the release branch.
+- [ ] Browser evidence proves every requested user-facing behaviour.
+- [ ] The validation report identifies any deferred capability as deferred.

package/resources/gofer/templates/research-template.md

@@ -118,14 +118,14 @@ Why relevant: [Explanation]
 - **Coupling status**: [source-platform-coupled / source-platform-decoupled /
   hybrid-adapter]
 - **Public-readiness target**: [required / deferred / not applicable]
-- **EAI App Template constraints**: [approved blocks/patterns to reuse first]
+- **EAI App Template constraints**: [selected blocks/patterns to reuse first]
 - **Block catalog discovery**: [`eai --describe`, `eai blocks list`, candidate
   `eai blocks describe <id>` results, and `eai resources schema` evidence]
 - **Selected block IDs**: [stable IDs, required resources, bindings, override
   points, Storybook story IDs, theme override points, package lane, coupling
   status, and custom-block exceptions]
 - **Block porting plan**: [reuse as-is, port to package, or custom-block
-  exception with owner and approval path]
+  exception with owner and review path]
 - **source-platform decoupling plan**: [adapter/resource-schema boundary or
   approved restricted-source exception]
 - **Branding inputs**: [logos, colors, voice, or "not in scope"]
@@ -134,10 +134,11 @@ Why relevant: [Explanation]
 
 ### Service-Fit Discovery Inputs
 
-- **Capability discovery sources**: [`eai --describe`, `eai whoami`, `eai workspace
-  select`, `eai resources schema`, `eai verify calls --format json`, or
-  equivalent]
-- **What must be decided after UI approval**: [service selection questions]
+- **Capability discovery sources**: [`eai --describe`, `eai whoami`, `eai
+  workspace select`, `eai resources schema`, `eai verify calls --format json`,
+  or equivalent]
+- **What must be decided after the first visible UI direction**: [service
+  selection questions]
 - **Non-app note**: [write "Not applicable" when this feature is non-app work]
 
 ## Recommended Architecture Direction

package/resources/gofer/templates/spec-summary-template.md

@@ -98,7 +98,7 @@ information each needs before the feature can move forward.
 | Business owner          | User journey, adoption, success metrics          | Problem brief, journey, value targets        |
 | Internal delivery       | Delivery plan, dependencies, red/green readiness | Tasks, validation plan, audit history        |
 | Enterprise architecture | Platform fit, reuse, contract boundaries         | Context bundle, contract pack, reuse scan    |
-| CISO                    | Identity, workspace boundary, residual risk         | Controls, validation report, exceptions      |
+| CISO                    | Identity, workspace boundary, residual risk      | Controls, validation report, exceptions      |
 | Data architecture       | Object model, lineage, quality controls          | Data model, lineage, quality tests           |
 | CIO                     | Platform strategy and operating model            | Roadmap fit, run model, support ownership    |
 | CFO                     | Investment case and benefit tracking             | Cost estimate, benefit baseline, value owner |