@fernado03/zoo-flow 0.5.3 → 0.7.0

package/templates/full/.roo/skills/engineering/review/SKILL.md

@@ -0,0 +1,111 @@
+---
+name: review
+description: Review a diff, branch, PR, or work-in-progress change against the requested spec, repo standards, architecture, and likely regressions. Use before committing non-trivial work.
+---
+
+# Review
+
+Purpose: answer whether the diff matches the spec, standards, architecture, and project intent.
+
+Review only. Do not patch application source. As `system-architect`, edits are limited to Markdown, `.scratch/`, and `docs/`.
+
+## 1. Identify target
+
+Use the narrowest target that fits the request:
+
+- User-provided base ref, PR, issue, files, or review focus.
+- Staged diff when staged changes exist.
+- Unstaged diff when unstaged changes exist.
+- Branch diff against the likely base (`main`, `master`, or merge-base) when asked to review a branch.
+- Specific files/specs/PRDs when provided.
+
+If the target is unclear, ask one short question and stop.
+
+## 2. Read needed context only
+
+Start with:
+
+- `git status --short`
+- `git diff --stat`
+- `git diff --cached --stat` when staged changes exist
+
+Then read targeted diffs only:
+
+- `git diff -- <file>`
+- `git diff --cached -- <file>`
+- `git diff <base>...HEAD -- <file>`
+
+Read relevant specs, issues, PRDs, standards, docs, ADRs, security notes, or project conventions only when they affect the changed area or the user requested that axis.
+
+## 3. Review axes
+
+Standards axis:
+
+- style
+- architecture
+- test quality
+- maintainability
+- security
+- project conventions
+
+Spec axis:
+
+- did it solve the requested problem?
+- did it change public behavior unexpectedly?
+- did it miss edge cases?
+- did it violate PRD, issue, or user intent?
+
+Security/Risk axis:
+
+- does the change touch auth, payments, PII, session data, or external API contracts?
+- does it introduce new dependencies or entitlements?
+- are there error paths that could leak information?
+- is there a regression path that would be hard to detect?
+- does the change affect audit logs or compliance obligations?
+
+For every Security/Risk finding, include the severity and a concrete
+mitigation suggestion. Omitting this axis is allowed when the change
+clearly cannot affect security (copy changes, comment fixes, test-only
+additions, docs-only updates).
+
+## 4. Findings
+
+Order findings by severity:
+
+- Blocker
+- High
+- Medium
+- Low
+- Nit
+
+For every finding include:
+
+- file/path
+- line or symbol when possible
+- problem
+- why it matters
+- suggested fix
+
+Prefer concrete findings over commentary. If no findings exist for a severity, omit that severity.
+
+## 5. Result
+
+End with exactly one result line:
+
+- `Review result: approve`
+- `Review result: approve with nits`
+- `Review result: changes requested`
+- `Review result: blocked`
+
+## Recommended next command
+
+If fixes are needed, recommend one next command only:
+
+- small fix -> `/tweak`
+- behavior fix -> `/tdd`
+- unknown cause -> `/fix`
+- design issue -> `/refactor`
+- ready for evidence -> `/verify`
+- ready to commit -> `/commit-and-document`
+
+Do not auto-launch any follow-up command.

package/templates/full/.roo/skills/engineering/scaffold-context/SKILL.md

@@ -96,10 +96,76 @@ Do NOT propose ADRs for:
 
 Cap at 0-2 ADRs per scaffold. Zero is fine. Better to ship no ADR than a wrong one.
 
+## Context-pack selector
+
+After detecting project shape and proposing CONTEXT.md terms + ADRs, recommend the smallest useful set of optional context docs.
+
+Rules:
+
+- Templates live under `.roo/skills/engineering/scaffold-context/templates/` (candidates only, never installed by default).
+- Missing optional docs are **not an error**.
+- Recommend a doc only when code evidence shows it would change future agent behavior.
+- Prefer one compact doc over many thin docs.
+- Better to create zero optional docs than wrong docs.
+- Ask for confirmation before writing any optional doc.
+
+Consider optional docs only with code evidence:
+
+| Doc | When to recommend |
+|---|---|
+| `TESTING.md` | unusual verification setup, multiple test layers, important seams |
+| `DATA_MODEL.md` | schemas, lifecycle states, ownership, migrations visible in code |
+| `API_CONTRACTS.md` | public routes, SDK exports, webhooks, event payloads |
+| `RUNBOOK.md` | deploys, jobs, queues, cron, recovery procedures |
+| `SECURITY_NOTES.md` | auth, permissions, tenant isolation, secrets, payments |
+| `INTEGRATIONS.md` | third-party APIs, OAuth, Stripe, email, queues, LLM providers |
+| `MONOREPO_MAP.md` | multiple apps/packages/services with different responsibilities |
+
+### Output shape
+
+```
+## Suggested context pack
+
+Detected shape: <shape>
+
+Recommended:
+1. `.zoo-flow/CONTEXT.md`
+   Reason: repeated domain terms found.
+2. `.zoo-flow/DATA_MODEL.md`
+   Reason: schema migration logic found in 4 files.
+
+Maybe:
+1. `.zoo-flow/SECURITY_NOTES.md`
+   Reason: auth middleware exists, but permission model appears simple.
+
+Skipped:
+- `RUNBOOK.md` — no deployment or operational recovery surface found.
+- `DATA_MODEL.md` — schema is simple; terms fit in CONTEXT.md.
+
+Choose:
+1. Create recommended only
+2. Choose manually
+3. Cancel
+```
+
+### Selection matrix by shape
+
+| Shape | Likely recommended | Likely maybe | Likely skipped |
+|---|---|---|---|
+| web app | CONTEXT.md | SECURITY_NOTES.md, INTEGRATIONS.md | RUNBOOK.md, MONOREPO_MAP.md |
+| library | CONTEXT.md, API_CONTRACTS.md | TESTING.md | RUNBOOK.md, MONOREPO_MAP.md |
+| CLI tool | CONTEXT.md | RUNBOOK.md | DATA_MODEL.md, MONOREPO_MAP.md |
+| data pipeline | CONTEXT.md, DATA_MODEL.md | RUNBOOK.md | API_CONTRACTS.md |
+| serverless | CONTEXT.md, INTEGRATIONS.md | SECURITY_NOTES.md | MONOREPO_MAP.md |
+| monorepo | CONTEXT.md, MONOREPO_MAP.md | INTEGRATIONS.md, API_CONTRACTS.md | RUNBOOK.md |
+
+Do not let this selector delay the core CONTEXT.md + ADR proposal. Present the pack selection after the main confirm flow.
+
 ## MUST
 
 - Ask confirm before writing `CONTEXT.md` (show full proposed list + diff against existing)
 - Ask confirm per ADR before writing
+- Ask confirm per optional doc before writing
 - Never overwrite non-empty `CONTEXT.md` without explicit "replace"
 - Never invent cross-cutting decisions; only propose ADRs you can point at code
 - Keep `CONTEXT.md` glossary-only; no impl/spec notes

package/templates/full/.roo/skills/engineering/scaffold-context/templates/writing-patterns.md

@@ -0,0 +1,17 @@
+---
+name: writing-patterns
+description: "Optional context pack for writing/editorial projects. Adds shapes, beats, and fragments skills for structured content creation."
+selector: project-shape
+match-keywords: ["writing", "content", "editorial", "blog", "documentation", "docs-site"]
+---
+
+# Writing Patterns Context Pack
+
+This pack adds structured writing workflows:
+
+- **Shapes** — reusable content architecture templates
+- **Beats** — narrative/argument sequencing patterns
+- **Fragments** — reusable content components
+
+None of these are activated by default. Run `/scaffold-context` and
+select "writing-patterns" to install.

package/templates/full/.roo/skills/engineering/setup-matt-pocock-skills/SKILL.md

@@ -14,8 +14,8 @@ Read/check:
 1. `git remote -v` + `.git/config`.
 2. Root `AGENTS.md`, `CLAUDE.md`.
 3. Existing `## Agent skills` blocks.
-4. Root `CONTEXT.md`, `CONTEXT-MAP.md`.
-5. `docs/adr/`, `src/*/docs/adr/`.
+4. `.zoo-flow/CONTEXT.md`.
+5. `.zoo-flow/docs/adr/`.
 6. `docs/agents/`.
 7. `.scratch/`.
 
@@ -33,7 +33,7 @@ B. Triage labels:
 
 C. Domain docs:
 - Explain: skills read `CONTEXT.md` + ADRs.
-- Choices: single-context root `CONTEXT.md` + `docs/adr/`; multi-context `CONTEXT-MAP.md` → per-context docs.
+- Choices: single-context `.zoo-flow/CONTEXT.md` + `.zoo-flow/docs/adr/`; multi-context index → per-context docs.
 
 ## Confirm before write
 

package/templates/full/.roo/skills/engineering/setup-matt-pocock-skills/domain.md

@@ -3,9 +3,8 @@
 ## Read before work
 
 If present:
-1. Root `CONTEXT.md`, or root `CONTEXT-MAP.md` then relevant context docs.
-2. Relevant root `docs/adr/` ADRs.
-3. If multi-context, relevant `src/{context}/docs/adr/`.
+1. `.zoo-flow/CONTEXT.md`.
+2. `.zoo-flow/docs/adr/` ADRs.
 
 If missing, proceed silently.
 

package/templates/full/.roo/skills/engineering/tdd/SKILL.md

@@ -50,6 +50,8 @@ Checklist per cycle:
 - [ ] Code minimal.
 - [ ] No speculation.
 
+After green, suggest `/verify`, then `/review`, then `/commit-and-document` for non-trivial work. Do not auto-launch follow-up commands.
+
 ## Context economy
 
 Before broad reads, locate relevant files/symbols with `list_files`, `search_files`, or `codebase_search`.

package/templates/full/.roo/skills/engineering/tweak/SKILL.md

@@ -14,7 +14,8 @@ Use for small known fixes.
 5. If existing test covers touched area, run it.
 6. DO NOT write new tests unless asked.
 7. Confirm change.
-8. Offer `/commit-and-document` only after user satisfied.
+8. For R3+ risk, suggest `/verify` or `/review` before commit. Otherwise offer `/commit-and-document` only after user satisfied.
+9. Do not auto-launch follow-up commands.
 
 ## Context economy
 

package/templates/full/.roo/skills/engineering/verify/SKILL.md

@@ -0,0 +1,80 @@
+---
+name: verify
+description: Run the smallest useful checks for the current change and report exactly what passed, failed, was partial, or was blocked.
+---
+
+# Verify
+
+Purpose: answer what checks actually passed. Never claim verified unless commands ran and passed.
+
+## 1. Inspect project type
+
+Look for obvious build/test config before choosing commands:
+
+- `package.json`
+- `pyproject.toml`
+- `Cargo.toml`
+- `go.mod`
+- other build, lint, or test config in the changed area
+
+## 2. Inspect changed files
+
+Run:
+
+- `git status --short`
+- `git diff --stat`
+- `git diff --cached --stat` when staged changes exist
+
+## 3. Pick smallest useful checks first
+
+Prefer, in order:
+
+- targeted test for the changed area
+- related test file
+- typecheck
+- lint
+- build
+- full test suite only when appropriate
+
+Use package scripts and project conventions when available. If the user provides a command, prefer it unless unsafe.
+
+## 4. Run checks
+
+Run the chosen commands. Capture enough output to prove pass/fail without dumping noise.
+
+If no verification command is available, report blocked.
+
+## 5. Output format
+
+```md
+## Verification result
+
+Status: pass | fail | partial | blocked
+
+## Commands run
+
+- `<command>` — pass/fail
+
+## Evidence
+
+<short summary of relevant output>
+
+## Remaining risk
+
+<what was not checked>
+
+## Recommended next step
+
+<none | /review | /tweak | /tdd | /fix | /commit-and-document>
+```
+
+Hard rule: never say `verified`, `all good`, or `tests pass` unless commands actually ran and passed.
+
+If no checks are available, use:
+
+```text
+Status: blocked
+Reason: no verification command found
+```
+
+Do not auto-launch any follow-up command.

package/templates/full/.roo/skills/in-progress/README.md

@@ -2,7 +2,6 @@
 
 Draft skills. Excluded from plugin/top README until stable.
 
-- **[review](./review/SKILL.md)** — Review diff on Standards + Spec axes.
 - **[teach](./teach/SKILL.md)** — Stateful teaching workspace (mission, glossary, resources, learning records).
 - **[writing-beats](./writing-beats/SKILL.md)** — Assemble article beat-by-beat.
 - **[writing-fragments](./writing-fragments/SKILL.md)** — Capture raw writing fragments.

package/templates/full/.roomodes

@@ -6,7 +6,7 @@
       "roleDefinition": "You are an Execution Specialist. You implement, test, update docs, prototype, and commit when explicitly approved.",
       "whenToUse": "Use for small or well-understood implementation, CSS/UI changes, TDD loops, documentation updates, runnable prototypes, known fixes, and approved commits. Do not make broad architecture decisions.",
       "description": "Fast execution for tweaks, TDD, docs, prototypes, and approved commits.",
-      "customInstructions": "Use `.roo/rules-code-tweaker/` for mode-specific behavior.\n\nPermitted commands: /tweak, /tdd, /update-docs, /commit-and-document, /prototype, /scaffold-context.\n\nFollow `.roo/rules/01-command-protocol.md` to load and execute commands. Follow `.roo/rules/00-paths.md` for path safety. Follow `.roo/rules/03-manual-reply-protocol.md` when asking the user to choose, approve, or continue.\n\nIf assigned any other command, stop and report the routing error.",
+      "customInstructions": "Use `.roo/rules-code-tweaker/` for mode-specific behavior.\n\nPermitted routed commands: /tweak, /tdd, /update-docs, /commit-and-document, /prototype, /scaffold-context, /verify.\n\nPermitted direct helper commands: /write-a-skill, /setup-matt-pocock-skills.\n\nFollow `.roo/rules/01-command-protocol.md` to load and execute commands. Follow `.roo/rules/00-paths.md` for path safety. Follow `.roo/rules/03-manual-reply-protocol.md` when asking the user to choose, approve, or continue.\n\nIf assigned a command outside both lists, stop and report the routing error.",
       "groups": [
         "read",
         "edit",
@@ -20,7 +20,7 @@
       "roleDefinition": "You are a System Architect. You plan, diagnose, explore, triage, and design. You do NOT write implementation code.",
       "whenToUse": "Use for unknown bugs, feature planning, architecture/refactor design, codebase exploration, and issue triage. Do not edit application source code; hand implementation to code-tweaker.",
       "description": "Planning, diagnosis, refactor design, exploration, and triage.",
-      "customInstructions": "Use `.roo/rules-system-architect/` for mode-specific behavior.\n\nPermitted commands: /feature, /fix, /refactor, /explore, /triage.\n\nFollow `.roo/rules/01-command-protocol.md` to load and execute commands. Follow `.roo/rules/00-paths.md` for path safety. Follow `.roo/rules/03-manual-reply-protocol.md` when asking the user to choose, approve, or continue.\n\nIf assigned any other command, stop and report the routing error.",
+      "customInstructions": "Use `.roo/rules-system-architect/` for mode-specific behavior.\n\nPermitted routed commands: /feature, /fix, /refactor, /explore, /triage, /review.\n\nPermitted direct helper commands: /diagnose, /grill-with-docs, /improve-codebase-architecture, /to-prd, /to-issues, /zoom-out, /handoff, /grill-me.\n\nFollow `.roo/rules/01-command-protocol.md` to load and execute commands. Follow `.roo/rules/00-paths.md` for path safety. Follow `.roo/rules/03-manual-reply-protocol.md` when asking the user to choose, approve, or continue.\n\nIf assigned a command outside both lists, stop and report the routing error.",
       "groups": [
         "command",
         "mcp",
@@ -40,7 +40,7 @@
       "roleDefinition": "You are a PM and router. You choose workflows and delegate subtasks. You NEVER inspect implementation files, write code, or use switch_mode.",
       "whenToUse": "Use as the default entry mode for normal user requests. Choose the right workflow from plain language, propose the route, wait for approval, then delegate with new_task. Use slash commands only when the user explicitly invokes them.",
       "description": "Router that consults, delegates, and waits for user direction.",
-      "customInstructions": "Use `.roo/rules-custom-orchestrator/` for mode-specific behavior.\n\nRoute only these commands. The exact mode slug to pass to `new_task` is shown after the arrow:\n\n- /tweak, /tdd, /update-docs, /commit-and-document, /prototype -> slug: code-tweaker\n- /fix, /feature, /refactor, /explore, /triage -> slug: system-architect\n\nThe planning/architecture mode slug is ALWAYS `system-architect`. Never use `architect`.\n\nPropose, then wait for approval before delegating. A free-form request is never self-approving: present the workflow and stop. Delegate only after the user types an explicit slash command or picks a workflow you proposed. See `.roo/rules-custom-orchestrator/00-routing.md` (Approval gate).\n\nUse `new_task` only. If `new_task` is unavailable, stop and report that orchestrator lacks delegation access.\n\nFollow `.roo/rules/03-manual-reply-protocol.md` when offering workflow choices: use plain-language numbered options, not slash commands or mode names.\n\nNever use built-in/default modes for new_task. Do not delegate to Ask, Code, Debug, Architect, Orchestrator, or any mode outside Zoo Flow.\n\nFor analysis/review/inspection tasks, use slug: system-architect.\nFor implementation/test/docs/prototype/commit tasks, use slug: code-tweaker.",
+      "customInstructions": "Use `.roo/rules-custom-orchestrator/` for mode-specific behavior.\n\nRoute only these commands. The exact mode slug to pass to `new_task` is shown after the arrow:\n\n- /tweak, /tdd, /update-docs, /commit-and-document, /prototype, /verify -> slug: code-tweaker\n- /fix, /feature, /refactor, /explore, /triage, /review -> slug: system-architect\n\nThe planning/architecture mode slug is ALWAYS `system-architect`. Never use `architect`.\n\nPropose, then wait for approval before delegating. A free-form request is never self-approving: present the workflow and stop. Delegate only after the user types an explicit slash command or picks a workflow you proposed. See `.roo/rules-custom-orchestrator/00-routing.md` (Approval gate).\n\nUse `new_task` only. If `new_task` is unavailable, stop and report that orchestrator lacks delegation access.\n\nFollow `.roo/rules/03-manual-reply-protocol.md` when offering workflow choices: use plain-language numbered options, not slash commands or mode names.\n\nNever use built-in/default modes for new_task. Do not delegate to Ask, Code, Debug, Architect, Orchestrator, or any mode outside Zoo Flow.\n\nFor analysis/review/inspection tasks, use slug: system-architect.\nFor implementation/test/docs/prototype/commit/verification tasks, use slug: code-tweaker.",
       "groups": []
     }
   ]

package/templates/full/.zoo-flow/evals/no-regression-checklist.md

@@ -22,5 +22,7 @@ Before accepting workflow changes, verify:
 - [ ] `.zoo-flow/START_HERE.md` remains the source of truth for first-run initialization.
 - [ ] First-run guidance explains `/scaffold-context` and `/setup-matt-pocock-skills`.
 - [ ] Custom Orchestrator never delegates to built-in/default Ask mode.
-- [ ] Analysis, review, inspection, and safety-check subtasks route to `system-architect`.
-- [ ] Implementation, tests, docs, prototype, and commit subtasks route to `code-tweaker`.
+- [ ] Analysis, review, inspection, and safety-check subtasks route to `system-architect`.
+- [ ] Implementation, tests, docs, prototype, and commit subtasks route to `code-tweaker`.
+- [ ] Verification requests route to `code-tweaker`.
+- [ ] Non-trivial work suggests `/verify` and `/review` before `/commit-and-document` but does not auto-launch them.

package/templates/full/.zoo-flow/evals/routing-cases.jsonl

@@ -0,0 +1,20 @@
+{"name":"small implementation","user":"Fix typo in README heading","expected_workflow":"small implementation","expected_command":"/tweak","expected_mode":"code-tweaker","must_require_approval":true,"must_not_include":["/tweak","code-tweaker","Ask mode"],"risk":"R1","context_required":false}
+{"name":"test-first","user":"Add a slugify helper for article URLs. I want it test-first.","expected_workflow":"test-first","expected_command":"/tdd","expected_mode":"code-tweaker","must_require_approval":true,"must_not_include":["/tdd","code-tweaker","Ask mode"],"risk":"R2","context_required":false}
+{"name":"documentation update","user":"The architecture docs describe an old checkout flow. Bring them in line with code.","expected_workflow":"documentation update","expected_command":"/update-docs","expected_mode":"code-tweaker","must_require_approval":true,"must_not_include":["/update-docs","code-tweaker","Ask mode"],"risk":"R2","context_required":true}
+{"name":"commit and journal","user":"Commit the finished change and add a journal entry.","expected_workflow":"commit and journal","expected_command":"/commit-and-document","expected_mode":"code-tweaker","must_require_approval":true,"must_not_include":["/commit-and-document","code-tweaker","Ask mode"],"risk":"R1","context_required":false}
+{"name":"prototype","user":"I am not sure if search ranking should run inline or in a queue. Try both.","expected_workflow":"prototype","expected_command":"/prototype","expected_mode":"code-tweaker","must_require_approval":true,"must_not_include":["/prototype","code-tweaker","Ask mode"],"risk":"R2","context_required":false}
+{"name":"diagnosis","user":"Checkout randomly crashes after payment. It used to work.","expected_workflow":"diagnosis","expected_command":"/fix","expected_mode":"system-architect","must_require_approval":true,"must_not_include":["/fix","system-architect","Ask mode"],"risk":"R3","context_required":true}
+{"name":"feature planning","user":"Add team invitations with email invites and pending invite states.","expected_workflow":"feature planning","expected_command":"/feature","expected_mode":"system-architect","must_require_approval":true,"must_not_include":["/feature","system-architect","Ask mode"],"risk":"R4","context_required":true}
+{"name":"refactor planning","user":"The auth module is hard to change. Decouple provider-specific logic.","expected_workflow":"refactor planning","expected_command":"/refactor","expected_mode":"system-architect","must_require_approval":true,"must_not_include":["/refactor","system-architect","Ask mode"],"risk":"R4","context_required":true}
+{"name":"exploration","user":"I need to change billing but I do not know where that logic lives.","expected_workflow":"exploration","expected_command":"/explore","expected_mode":"system-architect","must_require_approval":true,"must_not_include":["/explore","system-architect","Ask mode"],"risk":"R2","context_required":false}
+{"name":"issue triage","user":"Triage these incoming support bugs into tracker issues.","expected_workflow":"issue triage","expected_command":"/triage","expected_mode":"system-architect","must_require_approval":true,"must_not_include":["/triage","system-architect","Ask mode"],"risk":"R2","context_required":false}
+{"name":"review","user":"Review this branch before I commit it.","expected_workflow":"review","expected_command":"/review","expected_mode":"system-architect","must_require_approval":true,"must_not_include":["/review","system-architect","Ask mode"],"risk":"R2","context_required":true}
+{"name":"verification","user":"Run tests for this change and make sure nothing broke.","expected_workflow":"verification","expected_command":"/verify","expected_mode":"code-tweaker","must_require_approval":true,"must_not_include":["/verify","code-tweaker","Ask mode"],"risk":"R2","context_required":false}
+{"name":"R5 auth security migration","user":"Migrate auth session storage and preserve existing user sessions.","expected_workflow":"feature planning","expected_command":"/feature","expected_mode":"system-architect","must_require_approval":true,"must_not_include":["/feature","system-architect","Ask mode","Code mode"],"risk":"R5","context_required":true}
+{"name":"deep inspection no Ask","user":"Do you think these changes are beneficial? Inspect deeply if it affects the system.","expected_workflow":"review","expected_command":"/review","expected_mode":"system-architect","must_require_approval":true,"must_not_include":["Ask mode","Architect mode","ask"],"risk":"R3","context_required":true}
+{"name":"explicit slash command approval","user":"/tweak rename the cancel button to close.","expected_workflow":"small implementation","expected_command":"/tweak","expected_mode":"code-tweaker","must_require_approval":false,"must_not_include":["approval pending","Ask mode"],"risk":"R1","context_required":false}
+{"name":"free-form approval required","user":"Rename the cancel button to close.","expected_workflow":"small implementation","expected_command":"/tweak","expected_mode":"code-tweaker","must_require_approval":true,"must_not_include":["/tweak","code-tweaker","Ask mode"],"risk":"R1","context_required":false}
+{"name":"R4 cross-module design","user":"Split the monolith billing module into three services.","expected_workflow":"refactor planning","expected_command":"/refactor","expected_mode":"system-architect","must_require_approval":true,"must_not_include":["/refactor","system-architect","Ask mode"],"risk":"R4","context_required":true,"forbidden_followups":["/tweak","/tdd"]}
+{"name":"R3 behavior change with clear interface","user":"Add a rate limiter to the public API. 100 req/min per key.","expected_workflow":"test-first","expected_command":"/tdd","expected_mode":"code-tweaker","must_require_approval":true,"must_not_include":["/tdd","code-tweaker","Ask mode"],"risk":"R3","context_required":true,"recommended_followup":"/verify"}
+{"name":"no doc bloat for small tweak","user":"Change the Save button text to Submit.","expected_workflow":"small implementation","expected_command":"/tweak","expected_mode":"code-tweaker","must_require_approval":true,"must_not_include":["architecture docs","domain docs","CONTEXT.md"],"risk":"R1","context_required":false,"no_doc_bloat":true}
+{"name":"diagnosis with cause unknown","user":"The payment webhook stopped firing after the last deploy.","expected_workflow":"diagnosis","expected_command":"/fix","expected_mode":"system-architect","must_require_approval":true,"must_not_include":["/fix","system-architect","Ask mode"],"risk":"R4","context_required":true}

package/templates/full/.zoo-flow/evals/routing-cases.md

@@ -198,6 +198,30 @@ Delegation target after approval:
 `system-architect`
 
 Must not:
-- Delegate to Ask mode.
-- Delegate to default Architect mode.
-- Use any mode other than `system-architect` or `code-tweaker`.
+- Delegate to Ask mode.
+- Delegate to default Architect mode.
+- Use any mode other than `system-architect` or `code-tweaker`.
+
+## Case — Review
+
+User:
+"Review this branch before I commit it."
+
+Expected:
+Recommend the review workflow.
+
+Must:
+- Route to `system-architect` after approval.
+- Report findings by severity.
+
+## Case — Verification
+
+User:
+"Run tests for this change and make sure nothing broke."
+
+Expected:
+Recommend the verification workflow.
+
+Must:
+- Route to `code-tweaker` after approval.
+- Report exact commands run and results.

package/templates/full/.zoo-flow/project-profile.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": 1,
+  "projectShape": null,
+  "packageManager": null,
+  "issueTracker": {
+    "kind": null,
+    "project": null
+  },
+  "verification": {
+    "targetedTest": null,
+    "typecheck": null,
+    "lint": null,
+    "build": null,
+    "fullTest": null
+  },
+  "docsPolicy": {
+    "localContext": ".zoo-flow/",
+    "sharedDocs": ["AGENTS.md", "docs/adr/", "docs/architecture/"]
+  },
+  "commitPolicy": {
+    "conventionalCommits": true,
+    "journal": "docs/journal/"
+  }
+}

package/tests/fixtures/bad-routing-cases/bad-json.jsonl

@@ -0,0 +1 @@
+{"name":"bad json","user":"oops",

package/tests/fixtures/bad-routing-cases/bad-mode.jsonl

@@ -0,0 +1 @@
+{"name":"bad mode","user":"Review this","expected_workflow":"review","expected_command":"/review","expected_mode":"architect","must_require_approval":true,"must_not_include":[]}

package/tests/fixtures/bad-routing-cases/missing-command.jsonl

@@ -0,0 +1 @@
+{"name":"missing command","user":"Do nonexistent thing","expected_workflow":"small implementation","expected_command":"/does-not-exist","expected_mode":"code-tweaker","must_require_approval":true,"must_not_include":[]}

package/tests/fixtures/doctor/bad-built-in-delegation/fixture.json

@@ -0,0 +1 @@
+{"expect":"fail","mutation":"bad-built-in-delegation","message":"Built-in/default delegation target"}

package/tests/fixtures/doctor/bad-mode-slug/fixture.json

@@ -0,0 +1 @@
+{"expect":"fail","mutation":"bad-mode-slug","message":"uses invalid mode: architect"}

package/tests/fixtures/doctor/bad-skill-wrapper/fixture.json

@@ -0,0 +1 @@
+{"expect":"fail","mutation":"bad-skill-wrapper","message":"non-canonical skill wrapper"}

package/tests/fixtures/doctor/bad-zoo-path/fixture.json

@@ -0,0 +1 @@
+{"expect":"fail","mutation":"bad-zoo-path","message":"Bad pattern \".zoo/\""}

package/tests/fixtures/doctor/helper-missing-mode/fixture.json

@@ -0,0 +1 @@
+{"expect":"fail","mutation":"helper-missing-mode","message":"must declare mode: system-architect"}

package/tests/fixtures/doctor/helper-not-permitted/fixture.json

@@ -0,0 +1 @@
+{"expect":"fail","mutation":"helper-not-permitted","message":"does not permit documented command /diagnose"}

package/tests/fixtures/doctor/manual-good-template/fixture.json

@@ -0,0 +1 @@
+{"expect":"pass","mutation":"none","message":"doctor passed"}

package/tests/fixtures/doctor/missing-command/fixture.json

@@ -0,0 +1 @@
+{"expect":"fail","mutation":"missing-command","message":"missing command file"}

package/tests/fixtures/doctor/missing-roomodes/fixture.json

@@ -0,0 +1 @@
+{"expect":"fail","mutation":"missing-roomodes","message":"Missing .roomodes"}

package/tests/fixtures/doctor/missing-skill/fixture.json

@@ -0,0 +1 @@
+{"expect":"fail","mutation":"missing-skill","message":"references missing skill"}

package/tests/fixtures/project-shapes/cli-tool/cmd/root.go

@@ -0,0 +1 @@
+package main; func main() { println("hello") }

package/tests/fixtures/project-shapes/cli-tool/fixture.json

@@ -0,0 +1 @@
+{"expected_shape": "cli-tool", "keywords": ["cli"]}

package/tests/fixtures/project-shapes/cli-tool/package.json

@@ -0,0 +1 @@
+{"name": "test-cli", "keywords": ["cli"]}

package/tests/fixtures/project-shapes/data-pipeline/fixture.json

@@ -0,0 +1 @@
+{"expected_shape": "data-pipeline", "keywords": ["data-pipeline"]}

package/tests/fixtures/project-shapes/data-pipeline/pipelines/invoices.py

@@ -0,0 +1 @@
+def run_invoice_pipeline(): pass

package/tests/fixtures/project-shapes/data-pipeline/pyproject.toml

@@ -0,0 +1,2 @@
+[project]
+name = "test-pipeline"

package/tests/fixtures/project-shapes/library/fixture.json

@@ -0,0 +1 @@
+{"expected_shape": "library", "keywords": ["library"]}

package/tests/fixtures/project-shapes/library/package.json

@@ -0,0 +1 @@
+{"name": "test-lib", "keywords": ["library"]}

package/tests/fixtures/project-shapes/library/src/index.ts

@@ -0,0 +1 @@
+export const greet = (name: string) => `Hello, ${name}`;

package/tests/fixtures/project-shapes/monorepo/fixture.json

@@ -0,0 +1 @@
+{"expected_shape": "monorepo", "keywords": ["monorepo"]}

package/tests/fixtures/project-shapes/monorepo/package.json

@@ -0,0 +1 @@
+{"name": "test-monorepo", "keywords": ["monorepo"]}

package/tests/fixtures/project-shapes/monorepo/packages/core/index.ts

@@ -0,0 +1 @@
+export const core = "core";

package/tests/fixtures/project-shapes/monorepo/packages/web/index.ts

@@ -0,0 +1 @@
+export const web = "web";

package/tests/fixtures/project-shapes/serverless/fixture.json

@@ -0,0 +1 @@
+{"expected_shape": "serverless", "keywords": ["serverless"]}

package/tests/fixtures/project-shapes/serverless/functions/webhook.ts

@@ -0,0 +1 @@
+export const handler = async () => ({ statusCode: 200 });

package/tests/fixtures/project-shapes/serverless/package.json

@@ -0,0 +1 @@
+{"name": "test-serverless", "keywords": ["serverless"]}

package/tests/fixtures/project-shapes/web-app/app/routes/index.tsx

@@ -0,0 +1 @@
+export default function Home() { return <div>Home</div>; }

package/tests/fixtures/project-shapes/web-app/fixture.json

@@ -0,0 +1 @@
+{"expected_shape": "web-app", "keywords": ["web-app"]}

package/tests/fixtures/project-shapes/web-app/package.json

@@ -0,0 +1 @@
+{"name": "test-webapp", "keywords": ["web-app"]}

package/tests/golden-transcripts/01-small-tweak-golden.md

@@ -0,0 +1,21 @@
+# Golden: Small Tweak
+
+## User
+Change the Save button text to Submit.
+
+## Workflow
+small implementation -> /tweak -> code-tweaker
+
+## Expected structure
+1. Orchestrator proposes "small implementation" in plain language.
+2. User approves.
+3. Orchestrator delegates /tweak to code-tweaker.
+4. Code Tweaker reads the command, applies the change.
+5. Code Tweaker reports: files changed, what changed, status.
+6. Code Tweaker uses attempt_completion with evidence.
+
+## Must not include
+- /tweak in user-facing options
+- code-tweaker as a clickable choice
+- Architecture doc reads
+- Domain doc reads