@gtrabanco/pi-agentic-workflow 0.15.2 → 0.16.0

package/dist/settings/console.js

@@ -7,6 +7,11 @@
 // a scope whose file does not parse cannot be overwritten (that file is evidence
 // the operator must fix, not noise to clobber), and the project scope is refused
 // while the project is untrusted — the same gate the loader applies (AC13).
+//
+// P5 (feature 63): the flow is scope → profile → routes. Every command operates
+// on the active profile's route (for "default" this is top-level; for a named
+// profile it is `profiles.<name>`). The profile defaults to "default", so
+// existing tests that never answer a profile prompt keep working unchanged.
 import { loadConfig, configFilePaths } from "../config/load.js";
 import { effectiveRoute } from "../config/merge.js";
 import { parseConfigFile, parseModelReference } from "../config/schema.js";
@@ -32,6 +37,13 @@ export const prompts = {
     clearOverride: "Clear a command override",
     bulkApply: "Apply one route to several commands",
     bulkClear: "Clear several overrides",
+    switchProfile: "Switch the profile being edited",
+    rotateProfile: "Rotate the active profile",
+    toggleRecommended: "Toggle recommended models",
+    profile: "Which profile?",
+    newProfile: "Name the new profile",
+    profileBuiltIn: (name) => `The "${name}" profile is built into the package and cannot be edited — create a profile to override it.`,
+    profileNamed: (name) => `Editing profile "${name}"`,
     addAnother: "Add another?",
     policy: "Set the unavailable-route policy",
     settle: "Set the post-command model keep/restore policy",
@@ -57,23 +69,27 @@ const INHERIT = "inherit";
 export async function runSettingsConsole(deps) {
     const paths = configFilePaths(deps.agentDir, deps.cwd);
     const merged = loadConfig({ agentDir: deps.agentDir, cwd: deps.cwd, projectTrusted: deps.projectTrusted, readFile: deps.readFile });
-    deps.ui.notify(renderMergedConfig(merged, deps.commands).join("\n"), "info");
-    /** The value in force for a target (the merged route, or the default when the target is "the default route"). */
-    const currentFor = (target) => effectiveRoute(merged.config, target);
+    deps.ui.notify(renderMergedConfig(merged, deps.commands, merged.config.profiles?.nan !== undefined || (deps.models ?? []).some((m) => m.startsWith("nan/"))
+        ? { providerAvailable: (provider) => (deps.models ?? []).some((m) => m.startsWith(`${provider}/`)) }
+        : undefined).join("\n"), "info");
     const opened = await openAScope(deps, paths.global, paths.project);
     if (!opened)
         return { status: "cancelled", edited: false };
     const { scope, path, original } = opened;
     let draft = original;
+    let active = "default";
     for (;;) {
         // Only offered while a turn actually holds the latch: an option that does
         // nothing is how a console becomes noise.
         const choice = await deps.ui.select(prompts.menu, [
+            prompts.switchProfile,
             prompts.setDefaultRoute,
             prompts.setOverride,
             prompts.clearOverride,
             prompts.bulkApply,
             prompts.bulkClear,
+            prompts.rotateProfile,
+            prompts.toggleRecommended,
             prompts.policy,
             prompts.settle,
             ...(deps.routing?.inFlight() ? [prompts.undoInFlight] : []),
@@ -88,57 +104,172 @@ export async function runSettingsConsole(deps) {
         if (choice === undefined || choice === prompts.cancel) {
             return { status: "cancelled", edited: dirty(draft, original) ? await discard(deps.ui) : false };
         }
+        // Profile: switch to another profile (scope → profile → routes)
+        if (choice === prompts.switchProfile) {
+            const picked = await pickProfile(deps, draft, { allowNew: true });
+            if (picked === undefined)
+                continue;
+            // P5: the built-in "nan" profile cannot be edited — create a profile
+            // to override it.
+            if (picked === "nan" && draft.profiles?.nan === undefined) {
+                deps.ui.notify(prompts.profileBuiltIn("nan"), "warning");
+                continue;
+            }
+            if (picked !== "default" && !Object.prototype.hasOwnProperty.call(draft.profiles ?? {}, picked)) {
+                draft = { ...draft, profiles: { ...(draft.profiles ?? {}), [picked]: {} } };
+            }
+            active = picked;
+            deps.ui.notify(prompts.profileNamed(active), "info");
+            continue;
+        }
+        // Rotate: move a profile to the front of profileOrder, clear demotion
+        if (choice === prompts.rotateProfile) {
+            const picked = await pickProfile(deps, draft, { allowNew: false });
+            if (picked === undefined)
+                continue;
+            const base = draft.profileOrder && draft.profileOrder.length > 0 ? draft.profileOrder : ["default"];
+            draft = { ...draft, profileOrder: [picked, ...base.filter((n) => n !== picked)] };
+            deps.routing?.clearProfileDemotion?.();
+            continue;
+        }
+        // Toggle recommended models
+        if (choice === prompts.toggleRecommended) {
+            const current = draft.recommendedModels ?? merged.config.recommendedModels;
+            draft = { ...draft, recommendedModels: !current };
+            continue;
+        }
+        // Set default route on the active profile
         if (choice === prompts.setDefaultRoute) {
-            const edited = await editRoute(deps, DEFAULT_ROUTE, currentFor(DEFAULT_ROUTE));
-            if (edited)
-                draft = { ...draft, default: edited };
+            const target = active === "default" ? DEFAULT_ROUTE : `profile ${active} default`;
+            const routeFile = active === "default"
+                ? (draft.default ?? {})
+                : (draft.profiles?.[active]?.default ?? {});
+            const currentRoute = {
+                model: routeFile.model ?? "inherit",
+                thinking: routeFile.thinking ?? "inherit",
+            };
+            const edited = await editRoute(deps, target, currentRoute);
+            if (edited) {
+                if (active === "default") {
+                    draft = { ...draft, default: edited };
+                }
+                else {
+                    draft = {
+                        ...draft,
+                        profiles: { ...(draft.profiles ?? {}), [active]: { ...(draft.profiles?.[active] ?? {}), default: edited } },
+                    };
+                }
+            }
             continue;
         }
+        // Set override on active profile's commands
         if (choice === prompts.setOverride) {
-            const name = await pickCommand(deps, commandChoices(deps, draft));
+            // Use the full command registry so operators can add new overrides (AC4/OB-3).
+            const cmdNames = [...new Set([...deps.commands, ...Object.keys(draft.commands ?? {})])];
+            const name = await pickCommand(deps, cmdNames);
             if (name === undefined)
                 continue;
-            const route = await editRoute(deps, name, currentFor(name));
-            if (route)
-                draft = { ...draft, commands: { ...draft.commands, [name]: route } };
+            // The initial value comes from the merged config so the picker shows the
+            // value in force, matching the original `currentFor(name)` behavior.
+            const effective = effectiveRoute(merged.config, name);
+            const routeFile = active === "default"
+                ? (draft.commands?.[name] ?? {})
+                : (draft.profiles?.[active]?.commands?.[name] ?? {});
+            const currentRoute = {
+                model: typeof routeFile?.model !== "undefined" ? routeFile.model : effective.model,
+                thinking: typeof routeFile?.thinking !== "undefined" ? routeFile.thinking : effective.thinking,
+            };
+            const route = await editRoute(deps, name, currentRoute);
+            if (route) {
+                if (active === "default") {
+                    draft = { ...draft, commands: { ...draft.commands, [name]: route } };
+                }
+                else {
+                    draft = {
+                        ...draft,
+                        profiles: {
+                            ...(draft.profiles ?? {}),
+                            [active]: { ...(draft.profiles?.[active] ?? {}), commands: { ...(draft.profiles?.[active]?.commands ?? {}), [name]: route } },
+                        },
+                    };
+                }
+            }
             continue;
         }
+        // Clear override on active profile's commands
         if (choice === prompts.clearOverride) {
-            const name = await pickCommand(deps, Object.keys(draft.commands ?? {}));
+            const cmdNames = Object.keys(profileOf(draft, active).commands ?? {});
+            const name = await pickCommand(deps, cmdNames);
             if (name === undefined)
                 continue;
-            const rest = { ...draft.commands };
-            delete rest[name];
-            draft = { ...draft, commands: rest };
+            if (active === "default") {
+                const rest = { ...draft.commands };
+                delete rest[name];
+                draft = { ...draft, commands: rest };
+            }
+            else {
+                const profile = draft.profiles?.[active] ?? {};
+                const rest = { ...(profile.commands ?? {}) };
+                delete rest[name];
+                draft = { ...draft, profiles: { ...(draft.profiles ?? {}), [active]: { ...profile, commands: rest } } };
+            }
             continue;
         }
+        // Bulk apply on active profile's commands
         if (choice === prompts.bulkApply) {
-            // One field pass (model via the chain builder + thinking), applied to every
-            // selected command. A reference missing from the live registry warns per
-            // command but never blocks the write (OB-4 — dispatch's probe stays the
-            // authoritative availability gate).
-            const selected = await pickCommandsMulti(deps, commandChoices(deps, draft));
+            // Use the full command registry so operators can apply to new commands (AC4/OB-3).
+            const cmdNames = [...new Set([...deps.commands, ...Object.keys(draft.commands ?? {})])];
+            const selected = await pickCommandsMulti(deps, cmdNames);
             if (selected === undefined || selected.length === 0)
                 continue;
-            const route = await editRoute(deps, selected[0], currentFor(selected[0]));
+            const routeFile = active === "default"
+                ? (draft.commands?.[selected[0]] ?? {})
+                : (draft.profiles?.[active]?.commands?.[selected[0]] ?? {});
+            const currentRoute = {
+                model: routeFile.model ?? "inherit",
+                thinking: routeFile.thinking ?? "inherit",
+            };
+            const route = await editRoute(deps, selected[0], currentRoute);
             if (route === undefined)
                 continue;
-            const nextCommands = { ...draft.commands };
-            for (const name of selected) {
-                nextCommands[name] = route;
-                warnMissingModel(deps, name, route.model ?? INHERIT);
+            if (active === "default") {
+                const nextCommands = { ...draft.commands };
+                for (const name of selected) {
+                    nextCommands[name] = route;
+                    warnMissingModel(deps, name, route.model ?? INHERIT);
+                }
+                draft = { ...draft, commands: nextCommands };
+            }
+            else {
+                const profile = draft.profiles?.[active] ?? {};
+                const nextCommands = { ...profile.commands };
+                for (const name of selected) {
+                    nextCommands[name] = route;
+                    warnMissingModel(deps, name, route.model ?? INHERIT);
+                }
+                draft = { ...draft, profiles: { ...(draft.profiles ?? {}), [active]: { ...profile, commands: nextCommands } } };
             }
-            draft = { ...draft, commands: nextCommands };
             continue;
         }
+        // Bulk clear on active profile's commands
         if (choice === prompts.bulkClear) {
-            const names = await pickCommandsMulti(deps, Object.keys(draft.commands ?? {}));
+            const cmdNames = Object.keys(profileOf(draft, active).commands ?? {});
+            const names = await pickCommandsMulti(deps, cmdNames);
             if (names === undefined || names.length === 0)
                 continue;
-            const rest = { ...draft.commands };
-            for (const name of names)
-                delete rest[name];
-            draft = { ...draft, commands: rest };
+            if (active === "default") {
+                const rest = { ...draft.commands };
+                for (const name of names)
+                    delete rest[name];
+                draft = { ...draft, commands: rest };
+            }
+            else {
+                const profile = draft.profiles?.[active] ?? {};
+                const rest = { ...(profile.commands ?? {}) };
+                for (const name of names)
+                    delete rest[name];
+                draft = { ...draft, profiles: { ...(draft.profiles ?? {}), [active]: { ...profile, commands: rest } } };
+            }
             continue;
         }
         if (choice === prompts.policy) {
@@ -154,7 +285,7 @@ export async function runSettingsConsole(deps) {
             continue;
         }
         if (choice === prompts.save) {
-            const saved = await saveScope(deps, scope, path, draft);
+            const saved = await saveScope(deps, scope, path, draft, merged);
             if (saved)
                 return { status: "saved", scope, path, file: clean(draft) };
             continue;
@@ -167,6 +298,38 @@ export async function runSettingsConsole(deps) {
  * without being read, and a scope whose file does not parse is refused so the
  * operator's own file survives (AC10, AC13).
  */
+// ---------------------------------------------------------------------------
+// Profile helpers (P5, feature 63)
+// ---------------------------------------------------------------------------
+/** The profile file for a named profile or the default. */
+function profileOf(draft, name) {
+    if (name === "default")
+        return { ...(draft.default ? { default: draft.default } : {}), ...(draft.commands ? { commands: draft.commands } : {}) };
+    return draft.profiles?.[name] ?? {};
+}
+/**
+ * Pick a profile from the list. `allowNew` adds "Name the new profile" to the
+ * options; the input must match a lowercase slug pattern.
+ */
+async function pickProfile(deps, draft, { allowNew }) {
+    const names = ["default", ...Object.keys(draft.profiles ?? {}).filter((n) => n !== "default")];
+    // "nan" is always listed (built-in unless user-defined)
+    if (!names.includes("nan"))
+        names.push("nan");
+    const options = allowNew ? [...names, prompts.newProfile] : names;
+    const picked = await pagedSelect((title, list) => deps.ui.select(title, list), prompts.profile, options);
+    if (picked === undefined)
+        return undefined;
+    if (picked === prompts.newProfile) {
+        const name = await deps.ui.input(prompts.newProfile, "lowercase slug");
+        if (name === undefined || !/^[a-z0-9][a-z0-9._-]*$/u.test(name.trim())) {
+            deps.ui.notify("Rejected: a profile name must be a lowercase slug.", "error");
+            return undefined;
+        }
+        return name.trim();
+    }
+    return picked;
+}
 async function openAScope(deps, globalPath, projectPath) {
     for (;;) {
         const label = await deps.ui.select(prompts.scope, [GLOBAL_LABEL, PROJECT_LABEL]);
@@ -439,11 +602,14 @@ function warnMissingModel(deps, target, model) {
         }
     }
 }
-function commandChoices(deps, draft) {
-    return [...new Set([...deps.commands, ...Object.keys(draft.commands ?? {})])];
-}
-async function saveScope(deps, scope, path, draft) {
+async function saveScope(deps, scope, path, draft, merged) {
     const file = clean(draft);
+    // P5: materialize recommendedModels when the nan provider is available but
+    // the key is absent — the save writes the effective value (AC11).
+    const nanAvailable = (deps.models ?? []).some((m) => m.startsWith("nan/"));
+    if (file.recommendedModels === undefined && nanAvailable) {
+        file.recommendedModels = merged.config.recommendedModels;
+    }
     const text = `${JSON.stringify(file, null, 2)}\n`;
     const problems = problemsFor(file, scope);
     if (problems.length > 0) {
@@ -477,6 +643,8 @@ function describeRouting(file) {
     const routes = [
         file.default ? `default: ${file.default.model ?? "inherit"} / ${file.default.thinking ?? "inherit"}` : "default: inherit / inherit",
         ...Object.entries(file.commands ?? {}).map(([name, route]) => `${name}: ${route.model ?? "inherit"} / ${route.thinking ?? "inherit"}`),
+        ...(file.profileOrder && file.profileOrder.length > 0 ? [`profiles: ${file.profileOrder.join(" → ")}`] : []),
+        ...(file.recommendedModels !== undefined ? [`recommended models: ${file.recommendedModels}`] : []),
         `unavailable: ${file.onUnavailableRoute ?? "stop"}`,
         `settle: ${file.onSettle ?? "keep"}`,
     ];
@@ -504,6 +672,17 @@ function clean(draft) {
         file.onUnavailableRoute = draft.onUnavailableRoute;
     if (draft.onSettle)
         file.onSettle = draft.onSettle;
+    if (draft.recommendedModels !== undefined)
+        file.recommendedModels = draft.recommendedModels;
+    if (draft.profiles && Object.keys(draft.profiles).length > 0) {
+        file.profiles = structuredClone(draft.profiles);
+    }
+    if (draft.profileOrder && draft.profileOrder.length > 0) {
+        file.profileOrder = [...draft.profileOrder];
+    }
+    if (draft.profileFallback && Object.keys(draft.profileFallback).length > 0) {
+        file.profileFallback = { ...draft.profileFallback };
+    }
     return file;
 }
 function parseFile(text, scope) {

package/dist/settings/view.d.ts

@@ -8,4 +8,6 @@ export declare const DEFAULT_ROUTE = "the default route";
  */
 export declare function routePath(target: string): string;
 /** What the operator reads when the console opens. */
-export declare function renderMergedConfig(loaded: LoadedConfig, commands: readonly string[]): string[];
+export declare function renderMergedConfig(loaded: LoadedConfig, commands: readonly string[], opts?: {
+    providerAvailable?: (provider: string) => boolean;
+}): string[];

package/dist/settings/view.js

@@ -1,6 +1,7 @@
 // src/settings/view.ts
 // The settings console's display half (AC10, SPEC S4): what is in effect right
 // now, and which files the values came from.
+import { effectiveProfileOrder } from "../config/profiles.js";
 /** The label for the unqualified route, so `default` is never mistaken for a command name. */
 export const DEFAULT_ROUTE = "the default route";
 /**
@@ -12,9 +13,15 @@ export function routePath(target) {
     return target === DEFAULT_ROUTE ? "$.default" : `$.commands.${target}`;
 }
 /** What the operator reads when the console opens. */
-export function renderMergedConfig(loaded, commands) {
+export function renderMergedConfig(loaded, commands, opts) {
+    const order = effectiveProfileOrder(loaded.config, {
+        providerAvailable: opts?.providerAvailable ?? (() => false),
+    });
     return [
         "agentic-workflow routing — what each command runs on right now",
+        `  profiles: ${order.join(" → ")}`,
+        `  active profile: ${order[0] ?? "default"}`,
+        `  recommended models: ${loaded.config.recommendedModels ? "on" : "off"}${loaded.config.recommendedModels && opts?.providerAvailable?.("nan") ? " (built-in nan profile in the chain)" : ""}`,
         ...configLines(loaded.config, commands),
         ...problems(loaded.problems),
     ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gtrabanco/pi-agentic-workflow",
-  "version": "0.15.2",
+  "version": "0.16.0",
   "description": "Pi package: canonical agentic-workflow skills, friendly slash commands, and per-command model routing.",
   "keywords": [
     "pi-package",

package/skills/audit-docs/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: audit-docs
 user-invocable: true
-version: 2.1.1
+version: 2.2.0
 argument-hint: "[--fix]"
 author: "Gabriel Trabanco <1969593+gtrabanco@users.noreply.github.com>"
 license: MIT
@@ -156,7 +156,7 @@ enables:
 
 ## Relationship to other skills
 
-- Complements `plan-feature` (which *creates* the docs this audits) and
+- Complements `unit-lane` (which *creates* the docs this audits) and
   `triage-issue` (which keeps the fix index honest).
 - Run standalone anytime; no required predecessor.
 
@@ -168,6 +168,6 @@ enables:
 
   ```
   → Next: apply the approved low-risk fixes, then re-run /audit-docs to confirm clean
-    · real drift (not cosmetic) → /triage-issue   · a concrete defect → /plan-fix
+    · real drift (not cosmetic) → /triage-issue   · a concrete defect → /unit-lane --fix <n>
     · already clean → nothing to do
   ```

package/skills/audit-pr/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: audit-pr
 user-invocable: true
-version: 5.3.1
+version: 5.4.0
 argument-hint: <pr-number> (optional — defaults to the current branch's PR)
 author: "Gabriel Trabanco <1969593+gtrabanco@users.noreply.github.com>"
 license: MIT
@@ -19,7 +19,7 @@ The manager's **"can this ship?"** gate. A read-first audit over the *entire* PR
 its SPEC, all phases, docs, CI status, and review receipt — that returns a single
 verdict: **merge-ready** or a ranked list of **blockers**. **Never edits,
 refactors, or merges.** The human merges, or an active
-`ship-roadmap --fullauto` invocation consumes the SHA-bound verdict and performs
+`advance --fullauto` invocation consumes the SHA-bound verdict and performs
 its separate fail-closed merge step.
 
 `audit-pr` does **not** re-review the diff. It consumes the current SHA-bound
@@ -159,7 +159,7 @@ the user previously approved a merge, or a tool retained an earlier permission.
 Those signals cannot change this skill's read-first boundary.
 
 The **sole automated merge authority** is the AUDIT stage of an actively invoked
-`ship-roadmap --continue --fullauto` run. Its MERGE-READY comment is evidence,
+`advance --continue --fullauto` run. Its MERGE-READY comment is evidence,
 not permission; the repository wrapper independently verifies that comment,
 the forge's current head/default base, green checks, and the `merge: fullauto`
 decision fetched at that head. The wrapper owns fresh sync checks, transient
@@ -179,13 +179,13 @@ execute-phase (all phases done) ─▶ review-change (REVIEW-PASS receipt posted
                                                                                 │
                      blockers ─┬─ receipt absent/stale ──▶ /review-change ──────┘ (re-review, re-audit)
                                ├─ in-scope            ──▶ execute-phase ────────┘ (fold, re-audit)
-                               ├─ out-of-scope        ──▶ plan-fix
+                               ├─ out-of-scope        ──▶ unit-lane --fix
                                └─ deferral            ──▶ triage-issue
 ```
 
 - Consumes the `review-change` `REVIEW-PASS` receipt (its scope/axes, acceptance
-  coverage, invariant result, manual checks) plus the artifacts of `plan-feature` /
-  `plan-fix` / `execute-phase` (SPEC, phases, docs, `Closes #N`).
+  coverage, invariant result, manual checks) plus the artifacts of `unit-lane` /
+  `execute-phase` (SPEC, phases, docs, `Closes #N`).
 - `audit-docs` is the cross-document coherence check; `audit-pr` is per-PR merge
   readiness; `product-audit` is the periodic, product-wide full sweep.
 
@@ -199,8 +199,8 @@ execute-phase (all phases done) ─▶ review-change (REVIEW-PASS receipt posted
   reported **with the PR's full URL in the header**, each blocker routed, with the
   human's manual-verification list explicit.
 - On MERGE-READY the merge owner is explicit: a standalone audit hands the URL
-  to the human; an active `ship-roadmap --fullauto` AUDIT stage receives the
+  to the human; an active `advance --fullauto` AUDIT stage receives the
   SHA-bound verdict and owns every later merge check.
 - The **closing `→ Next:` block is printed** (merge link → then the next unit via
-  `/plan-feature --next` or `/triage-issue`; BLOCKED → the routed fix, then re-audit).
+  `/unit-lane <unit>` or `/triage-issue`; BLOCKED → the routed fix, then re-audit).
 - Nothing was edited, refactored, or merged.

package/skills/audit-pr/references/01_MERGE_GATES.md

@@ -6,14 +6,14 @@ A gate that can't be confirmed is a **blocker**, not a pass — never assume gre
 | Gate | What it means | Blocker when |
 |---|---|---|
 | **Acceptance coverage** | The receipt's acceptance-coverage field accounts for every SPEC acceptance criterion (review-change verified the mapping). This gate confirms the receipt *names* the criteria — it never remaps diff hunks to criteria itself. | The receipt omits a criterion the SPEC lists, or its coverage field is absent/generic. |
-| **All phases complete** | Feature: every phase in `PLAN.md`/`TASKS.md` is done and logged in `progress.md`. Fix: the SPEC is fully implemented. | Any unchecked task or unimplemented phase without an explicit, tracked deferral. |
+| **All phases complete** | Feature: every task in the unit doc's `Tasks` section is done and logged in its `Progress log`. Fix: the SPEC is fully implemented. | Any unchecked task or unimplemented phase without an explicit, tracked deferral. |
 | **Scope integrity (creep)** | The PR implements the SPEC and no more; out-of-scope work was split out. | Undocumented scope creep, or in-scope work missing. |
 | **Docs updated** | Every "Affected docs" criterion is satisfied; per-phase docs (`progress`/`testing`/`known-issues`/`decisions`) reflect reality; the doc map still resolves. **Never merge with documentation still pending.** | A doc the map or SPEC requires is stale, missing, pending, or contradicts the code. |
-| **Traceability** | `Closes #N` is in the PR body when the work is issue-born (from `plan-feature-from-issue` or `plan-fix`); the roadmap/fix-index entry matches, is **still present** (removed only *after* merge, never before), and carries the linked PR reference (`done · [#<pr>](<pr-url>)`). | Issue-born work without `Closes #N`; a roadmap/index entry out of sync; the entry dropped before merge; or a `done` row without its PR link. |
+| **Traceability** | `Closes #N` is in the PR body when the work is issue-born (from `/unit-lane --from-issue <n>` or `/unit-lane --fix <n>`); the roadmap/fix-index entry matches, is **still present** (removed only *after* merge, never before), and carries the linked PR reference (`done · [#<pr>](<pr-url>)`). | Issue-born work without `Closes #N`; a roadmap/index entry out of sync; the entry dropped before merge; or a `done` row without its PR link. |
 | **Verification gate / CI** | The project's gate passes — type-check, tests, build — and `statusCheckRollup` is green at the current head. | Any required check failing, pending, or absent where the project requires one. |
 | **Mergeability** | Branch is off the default base, independently mergeable (no conflicts), not stacked on another PR, not draft. | Wrong base, conflicts, stacked dependency, or still draft. |
 | **Review receipt** | A current `REVIEW-PASS` receipt is posted on the PR: the newest comment carrying `<!-- review-change:pass sha=<40-hex> contract=v1 -->` whose `sha` equals the PR's current head SHA. Its scope/axes, acceptance coverage, invariant result, and manual checks are the review evidence this audit consumes. | Receipt absent, or its marker `sha` predates the current head (any later commit voids it). The blocker routes to `/review-change`; never re-review the diff from here (AC 13). |
-| **Closure integrity** | The governing **feature** SPEC's capability closure was taken and recorded — `design-feature` was actually run, not bypassed. Fix-governed PRs: `n/a` (no closure block by design). | A present `Capability closure` block has a blank row, or a resolved non-`n/a` row with no matching acceptance criterion. |
+| **Closure integrity** | The governing **feature** SPEC's capability closure was taken and recorded — the lane's `design` step was actually run, not bypassed. Fix-governed PRs: `n/a` (no closure block by design). | A present `Capability closure` block has a blank row, or a resolved non-`n/a` row with no matching acceptance criterion. |
 | **Scope integrity (descope)** | An issue born during this unit that maps to an unmet SPEC acceptance criterion or phase task has a matching, user-approved, dated `## Amendments` entry — descoped scope was recorded, not silently exported. Detection is two-path: a slug/issue-number text match, **or** an issue linked from an `## Amendments` row (`#89`) — either is sufficient to enumerate the issue, so a descoped issue with a generic title/body is not invisible to the gate. | An issue born since branch divergence that references this unit (by either detection path) maps to an unmet criterion/task with no matching `## Amendments` entry, or an `## Amendments` row that is undated, unapproved, or unlinked to an issue. |
 | **Architectural invariants** | The **receipt** records the invariant result review-change took against the optional project invariant document; this gate confirms that result is explicit (`pass | blocker | n-a`) and does not reclassify it (AC 13). No document → `n/a: no project invariants declared`, not a blocker. | The receipt's invariant result is absent/ambiguous, or a recorded `blocker`/`violates`/`introduces`/`changes` lacks the cited decision the review surfaced. |
 | **Hygiene — tree clean** | `git status --porcelain` is empty at the audited head: every artifact is committed, so nothing rides along to the next conversation (the field failure of issue #182). | Any modified or untracked path — the blocker names each one. |

package/skills/audit-pr/references/02_CLOSURE_AND_SCOPE_GATES.md

@@ -17,15 +17,15 @@
 >   decision was *taken and recorded*, never that UI/API surface exists. Never
 >   push a blank row into inventing surface to pass this gate.
 > - **Feature SPEC, block absent** → the SPEC predates or bypassed
->   `design-feature`. Never a blocker — emit a dated **warning**, PR still
+>   `unit-lane`. Never a blocker — emit a dated **warning**, PR still
 >   merges:
 >   ```
 >   design-debt: closure absent, SPEC predates the rule (dated <YYYY-MM-DD>)
 >   ```
 >   This warning is itself the **retrofit trigger**: the next unit of work that
->   touches this feature must fill the closure via `/design-feature <slug>`
+>   touches this feature must fill the closure via `/unit-lane <slug>`
 >   (upsert — fills only the missing rows, destroys nothing recorded) *before*
->   that new work is planned. See `design-feature`'s upsert semantics for the
+>   that new work is planned. See `unit-lane`'s design-step upsert semantics for the
 >   other half of this contract.
 
 > **`done` ≠ merge-ready.** A unit flips to `done` when its PR opens (built, not
@@ -96,8 +96,7 @@ verdict:
    feature unit — its named `— spec` parent re-derives the same way. Bound artifacts
    are frozen: new implementation-phase files are allowed, edits to a bound artifact
    are not. Stale, missing, wrong-stage **or impossible-timeline** lineage → **BLOCKED**,
-   `→ Next: /review-plan <unit>` (or `/review-spec <unit>` when the parent is the
-   broken link). A `SPEC-REVIEW-PASS` never satisfies the plan hop, and vice versa.
+   `→ Next: /unit-lane <unit>` (the lane's `review` step re-derives the artifact). A `SPEC-REVIEW-PASS` never satisfies the plan hop, and vice versa.
 2. **Obligations are closed.** Every row of the unit's obligation ledger is
    `verified` — with the validator that ran on this candidate — or an explicit
    `n/a: <reason>`. Any `planned`, `in-progress`, blank, or `deferred` row is

package/skills/audit-pr/references/03_AUDIT_PROCESS.md

@@ -53,5 +53,5 @@
    SHA re-posts (newest wins) — and it **refuses to post for a BLOCKED verdict**,
    so the page never shows a stale green flag.
 8. **Report** — the verdict block below, always headed by the PR's full URL.
-   In an active `ship-roadmap --fullauto` AUDIT stage, return the verdict to the
+   In an active `advance --fullauto` AUDIT stage, return the verdict to the
    conductor; never run its merge wrapper from this skill.

package/skills/audit-pr/references/04_VERDICT.md

@@ -27,14 +27,14 @@ Before merge, a human should still verify:
   also print the closure bullet (a warning never blocks, so it co-occurs with a
   MERGE-READY verdict; the two lines print together, never one instead of the other):
   · MERGE-READY, standalone/manual audit → you merge: <full PR URL>, then
-    /plan-feature --next (the next roadmap unit) or pick an issue with /triage-issue
-  · MERGE-READY inside active ship-roadmap --fullauto → return this SHA-bound
+    /unit-lane <next-roadmap-unit> (the next roadmap unit) or pick an issue with /triage-issue
+  · MERGE-READY inside active advance --fullauto → return this SHA-bound
     verdict to the conductor; it runs the transient merge wrapper
   · BLOCKED → clear the top blocker (routed above), then re-run /audit-pr
   · Receipt absent/stale blocker → /review-change (re-review at the head), then
     re-run /audit-pr — never re-review from this audit
   · Closure warning (in addition to the verdict above) or a closure blocker →
-    /design-feature <slug> — fills the missing closure rows (upsert, destroys
+    /unit-lane <slug> — re-runs the design step to fill the missing closure rows (upsert, destroys
     nothing) before further work on this feature is planned; re-run /audit-pr after
   · Scope-bleed blocker → record the missing `## Amendments` entry (user-approved,
     dated, linking the issue) in the governing SPEC, or re-classify the issue as

package/skills/audit-pr/references/05_ROUTING_AND_GUARDRAILS.md

@@ -4,7 +4,7 @@
   re-run `audit-pr`) — never re-review from here.
 - **Incomplete in-scope work** → fold into this branch via `execute-phase`
   (the relevant phase or `--fix`); re-run `audit-pr` after.
-- **Out-of-scope defect surfaced** → `plan-fix` (new fix entry), not this PR.
+- **Out-of-scope defect surfaced** → `/unit-lane --fix <n>` (new fix entry), not this PR.
 - **Deferred finding lacking a home** → `triage-issue` to file + classify it.
 - **Stale/missing docs** → update per the doc map (often a quick `execute-phase`
   doc commit), then re-audit.
@@ -15,7 +15,7 @@
 - **Read-first verdict. Never push, edit, refactor, or merge.** Its only forge
   write is the **MERGE-READY comment** (Process step 7 — idempotent,
   comment-only, never a commit tag). Fullauto merge execution belongs only to
-  the active `ship-roadmap --fullauto` conductor.
+  the active `advance --fullauto` conductor.
 - **Never re-review the diff.** The `REVIEW-PASS` receipt is the review evidence;
   a missing/stale receipt is a blocker routed to `/review-change`. The audit does
   not compose `review-change`, rescan axes, judge test quality, remap diff hunks

package/skills/discover-repository-state/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: discover-repository-state
 user-invocable: true
-version: 1.2.1
+version: 1.2.2
 description: >
   Discover repository evidence and write a frozen Normalized Repository State.
   Produces verified repository evidence and keeps facts, decisions, planned
@@ -79,6 +79,5 @@ If a contradiction was recorded:
 
 Otherwise:
 
-→ Next: /plan-feature <slug> — plan from frozen facts
-  · implementation-ready feature → /execute-phase <NN>
-    (planned is not executable: no current `PLAN-REVIEW-PASS` → /review-plan <NN>)
+→ Next: /unit-lane <slug> — triage and run the lane from frozen facts
+  · already-triaged unit → /execute-phase <NN>

package/skills/execute-phase/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: execute-phase
 user-invocable: true
-version: 5.0.0
+version: 5.0.1
 argument-hint: <NN-slug> [P<k>|step] [--max-attempts N] [--force]
 allowed-tools: [Bash, Read, Edit, Write, MultiEdit]
 author: "Gabriel Trabanco <1969593+gtrabanco@users.noreply.github.com>"

package/skills/execute-phase/references/DESCOPE.md

@@ -42,4 +42,4 @@ from the triage catalog, not step descopes):
 `audit-pr`'s obligation-closure check all key off this same `## References` log
 — it is the single authoritative record of every descope, defined once here.
 Nothing else in the pre-execution route creates an issue: a missing or failed
-`PLAN-REVIEW-PASS` is closed by `/review-plan`, never by a tracker item.
+the lane's `review` step closes it, never a tracker item.