@haposoft/cafekit 0.16.0-rc.6 → 0.16.0-rc.8

package/bin/__tests__/validator-grounding.test.js

@@ -525,9 +525,8 @@ The transition records success, failure, and recovery states.
 test('Codex installer transform preserves all owned spec assets with idempotent runtime parity', () => {
   for (const relative of [
     'src/claude/skills/specs/SKILL.md',
-    'src/claude/skills/specs/rules/tasks-generation.md',
-    'src/claude/skills/specs/rules/design-principles.md',
     'src/claude/skills/specs/references/review.md',
+    'src/claude/skills/specs/references/templates.md',
     'src/claude/skills/specs/templates/design.md',
     'src/claude/skills/specs/templates/task.md',
     'src/claude/scripts/spec-scaffold.cjs',
@@ -548,14 +547,15 @@ test('Codex installer transform preserves all owned spec assets with idempotent
 
   const skill = fs.readFileSync(path.join(ROOT, 'src/claude/skills/specs/SKILL.md'), 'utf8');
   const review = fs.readFileSync(path.join(ROOT, 'src/claude/skills/specs/references/review.md'), 'utf8');
-  const designRules = fs.readFileSync(path.join(ROOT, 'src/claude/skills/specs/rules/design-principles.md'), 'utf8');
-  const taskRules = fs.readFileSync(path.join(ROOT, 'src/claude/skills/specs/rules/tasks-generation.md'), 'utf8');
-  assert.match(skill, /\| `Compact` \| `spec\.json`, `requirements\.md`, `design\.md` \| only on a research trigger \| only on a typed topology trigger \|/);
-  assert.match(skill, /\| `Full` \| `spec\.json`, `requirements\.md`, `design\.md` \| only on a research trigger \| only on a typed topology trigger \|/);
-  assert.doesNotMatch(review, /Standard[^\n]{0,100}(?:must not|forbidden|never)[^\n]{0,60}tasks?/i);
-  assert.match(designRules, /## Conditional detail[\s\S]*Migration:[\s\S]*only when existing state or public contracts change/);
-  assert.match(taskRules, /distinct ownership, a durable[\s\S]{0,180}parallel coordination/);
-  assert.match(taskRules, /receipts\/<task-basename>\.md|execution closeout/);
+  const templates = fs.readFileSync(path.join(ROOT, 'src/claude/skills/specs/references/templates.md'), 'utf8');
+  assert.match(skill, /specs\/<feature>\/[\s\S]{0,160}plan\.md[\s\S]{0,160}task-01-<slug>\.md/);
+  assert.match(skill, /C1 — Scope[\s\S]*C2 — Findings[\s\S]*C3 — Done/);
+  assert.doesNotMatch(skill, /--(?:status|validate|archive)\b/);
+  assert.match(review, /path:line/);
+  assert.match(review, /Cap the presented[\s\S]{0,40}list at 15/);
+  assert.match(review, /Round three requires runtime evidence/);
+  assert.match(templates, /\| ID \| EARS criterion \| Proof \|/);
+  assert.match(templates, /## Canonical inline Receipt[\s\S]*Verification: PASS[\s\S]*Exit: 0[\s\S]*Base:[\s\S]*Head:/);
 
   const parityRoot = fs.mkdtempSync(path.join(os.tmpdir(), 'cafekit-codex-validator-parity-'));
   try {
@@ -3201,7 +3201,7 @@ test('D11/R1.14: the legacy-bridge precondition artifact is reachable and change
   // resolves its own production root the same way, via git from its own file
   // location) -- ROOT here is packages/spec, one level below that root.
   const MONOREPO_ROOT = path.resolve(ROOT, '..', '..');
-  const bridgePath = path.join(MONOREPO_ROOT, 'specs/cafekit-semantic-eval-firewall/reports/bootstrap-legacy-bridge-review.json');
+  const bridgePath = path.join(MONOREPO_ROOT, 'specs/archive/cafekit-semantic-eval-firewall/reports/bootstrap-legacy-bridge-review.json');
   assert.ok(fs.existsSync(bridgePath), 'the legacy-bridge artifact must exist before any R0-01 change-firewall assertion runs');
   const parsed = CHANGE_FIREWALL.assertLegacyBridgeArtifact();
   assert.equal(parsed.schema_version, '1');

package/bin/install.js

@@ -33,7 +33,6 @@ const {
   removeObsoleteAgents
 } = require('./phases/claude-runtime');
 const { mergeClaudeSettings } = require('./phases/claude-settings');
-const { installOpenCodeRuntime } = require('./phases/opencode-runtime');
 const { installCodexRuntime } = require('./phases/codex-runtime');
 const { writePlatformVersionMetadata } = require('./phases/write-metadata');
 const { checkVersions } = require('./lib/version-check');
@@ -70,10 +69,6 @@ function installPlatform(ctx, platformKey) {
     copyRulesDirectory(ctx, platformKey);
   }
 
-  if (platformKey === 'opencode') {
-    installOpenCodeRuntime(ctx, platformKey);
-  }
-
   if (platformKey === 'codex') {
     installCodexRuntime(ctx, platformKey);
   }
@@ -95,11 +90,11 @@ function printHelp() {
 Usage: npx @haposoft/cafekit [options]
 
 Installs CafeKit skills, agents, rules and runtime into the current project
-for Claude Code, OpenCode, and/or Codex CLI. Re-runs are selective: managed files are updated,
+for Claude Code and/or Codex CLI. Re-runs are selective: managed files are updated,
 your edits are preserved.
 
 Options:
-  --platform <id[,id]> Select claude, opencode, or codex explicitly
+  --platform <id[,id]> Select claude or codex explicitly
   --dry-run            Preview changes; write nothing
   --force-overwrite    Overwrite user-modified managed files (backup kept)
   -u, --upgrade, -f, --force   Alias of --force-overwrite

package/bin/lib/context.js

@@ -13,7 +13,6 @@
 const fs = require('fs');
 const path = require('path');
 const packageJson = require('../../package.json');
-const { getOpenCodeCopyOptions } = require('./opencode-install');
 const { isInteractive, createUI } = require('./ui');
 const { resolveLang, createTranslator } = require('./i18n');
 const { normalizeSourcePaths } = require('./copy-utils');
@@ -57,12 +56,10 @@ function loadClaudeMigrationManifest() {
 const DEPENDENCY_TEMPLATES = {
   commands: {
     claude: {},
-    opencode: {},
     codex: {}
   },
   agents: {
     claude: {},
-    opencode: {},
     codex: {}
   }
 };
@@ -93,29 +90,6 @@ const PLATFORMS = {
       commands: true
     }
   },
-  opencode: {
-    id: 'opencode',
-    name: 'OpenCode',
-    description: 'OpenCode terminal AI coding agent',
-    folder: '.opencode',
-    detectFiles: ['.opencode', 'opencode.json', 'opencode.jsonc'],
-    commandsDir: '.opencode/commands',
-    skillsDir: '.opencode/skills',
-    agentsDir: '.opencode/agents',
-    skillsRef: '.opencode/skills',
-    commandPrefix: '/',
-    sourceDir: 'claude',
-    sourceSubdir: 'commands',  // Dead config (manifest commands.core is []); kept for shape parity
-    backupTargets: ['.opencode', 'AGENTS.md', 'opencode.json', 'opencode.jsonc'],
-    capabilities: {
-      skills: true,
-      agents: true,
-      references: true,
-      scripts: true,
-      rules: true,
-      commands: false
-    }
-  },
   codex: {
     id: 'codex',
     name: 'Codex CLI',
@@ -192,26 +166,8 @@ function getRuntimeSupportTargetDir(platformKey, subdir) {
   return path.join(PLATFORMS[platformKey].folder, subdir);
 }
 
-// Warn opencode-only installs when a legacy .claude/ folder remains from
-// pre-0.9.0 installs (when OpenCode shared the .claude/ runtime). We do not
-// delete anything; user must remove it explicitly to opt in.
-function warnLegacyClaudeFolder(platforms) {
-  if (!platforms.includes('opencode')) return;
-  if (platforms.includes('claude')) return;
-  if (!fs.existsSync('.claude')) return;
-
-  console.log('');
-  console.log('⚠ Legacy .claude/ folder detected.');
-  console.log('  As of CafeKit 0.9.0, OpenCode installs are self-contained under .opencode/.');
-  console.log('  The .claude/ folder from older installs is no longer used by OpenCode.');
-  console.log('  After this install finishes you can remove it: rm -rf .claude');
-  console.log('');
-}
 
 function getCopyOptions(platformKey, baseOptions = {}) {
-  if (platformKey === 'opencode') {
-    return getOpenCodeCopyOptions(baseOptions);
-  }
   if (platformKey === 'codex') {
     // Lazy require avoids coupling the shared registry to a runtime adapter
     // during module initialization.
@@ -358,7 +314,6 @@ module.exports = {
   getPlatformKeys,
   hasPlatformCapability,
   getRuntimeSupportTargetDir,
-  warnLegacyClaudeFolder,
   getCopyOptions,
   parseInstallerArgs,
   createResults,

package/bin/lib/copy-utils.js

@@ -13,7 +13,7 @@ function isTextAsset(filePath) {
 
 // Generated artifacts never ship as runtime payload: the coverage db, the
 // Python bytecode cache directory, and bytecode files. Skipping them here keeps
-// both copyRecursive and copyManagedTree (and the OpenCode plugin copy path
+// both copyRecursive and copyManagedTree
 // built on copyRecursive) from ever copying build residue.
 function isGeneratedArtifact(name) {
   const base = String(name || '');

package/bin/lib/i18n.js

@@ -107,7 +107,6 @@ const MESSAGES = {
     // Next steps
     nextStepsTitle:  'Next steps',
     nsClaude:        'Start coding: /hapo:specs <feature>',
-    nsOpencode:      'Start coding: ask the agent to begin a new feature or brainstorm',
     nsCodex:         'Start with `$hapo-specs <feature>`; review and trust project hooks with `/hooks`',
     nsKeys:          'Some skills need API keys: {skills}\n  Copy <skill>/.env.example → .env and fill in the values',
     nsForce:         'To force-refresh managed files: npx @haposoft/cafekit --force-overwrite',
@@ -228,7 +227,6 @@ const MESSAGES = {
 
     nextStepsTitle:  '次のステップ',
     nsClaude:        'コーディング開始: /hapo:specs <機能名>',
-    nsOpencode:      'コーディング開始: エージェントに新機能の開始またはブレストを依頼',
     nsCodex:         '`$hapo-specs <機能名>` で開始し、`/hooks` でプロジェクトフックを確認・信頼',
     nsKeys:          '一部のスキルに API キーが必要です: {skills}\n  <skill>/.env.example を .env にコピーし、値を入力してください',
     nsForce:         '管理ファイルを強制更新: npx @haposoft/cafekit --force-overwrite',
@@ -348,7 +346,6 @@ const MESSAGES = {
 
     nextStepsTitle:  'Bước tiếp theo',
     nsClaude:        'Bắt đầu code: /hapo:specs <mô-tả-tính-năng>',
-    nsOpencode:      'Bắt đầu code: yêu cầu agent khởi động tính năng mới hoặc brainstorm',
     nsCodex:         'Bắt đầu bằng `$hapo-specs <tính-năng>`; kiểm tra và trust project hooks bằng `/hooks`',
     nsKeys:          'Một số skill cần API key: {skills}\n  Sao chép <skill>/.env.example → .env rồi điền giá trị',
     nsForce:         'Làm mới file được quản lý: npx @haposoft/cafekit --force-overwrite',

package/bin/lib/manifest.js

@@ -169,7 +169,7 @@ function createTracker(platformFolder, version, options = {}) {
  * Classify a managed file against the recorded baseline + the incoming payload.
  *
  * @param {string} absPath      destination path on disk
- * @param {string} platformFolder root of the platform install (.claude/.opencode)
+ * @param {string} platformFolder root of the platform install (e.g. .claude)
  * @param {object} manifest     result of read(platformFolder)
  * @param {string} payloadHash  sha256 of the content about to be written
  * @returns {{state: string, diskHash: string|null, recordedHash: string|null, changed: boolean}}

package/bin/phases/claude-runtime.js

@@ -18,7 +18,6 @@ const {
 const { sha256 } = require('../lib/manifest');
 const { writeManagedFile, copyManagedTree } = require('../lib/managed-writer');
 const { report, treeAction } = require('./report');
-const { normalizeOpenCodeBody } = require('../lib/opencode-install');
 const {
   upsertManagedCoreBlock,
   managedRange,
@@ -120,7 +119,7 @@ function copyClaudeAgentsMdFile(ctx, platformKey) {
   ensureSharedAgentsMdCore(ctx);
 }
 
-/** Copy ROUTING.md (SKILLS_DIR substituted; OpenCode body normalized). */
+/** Copy ROUTING.md (SKILLS_DIR substituted). */
 function copyRoutingFile(ctx, platformKey) {
   const platform = PLATFORMS[platformKey];
   const src = path.join(SRC, platform.sourceDir, 'ROUTING.md');
@@ -129,7 +128,6 @@ function copyRoutingFile(ctx, platformKey) {
 
   const transform = (content) => {
     let c = content.replace(/\{\{SKILLS_DIR\}\}/g, platform.skillsRef);
-    if (platformKey === 'opencode') c = normalizeOpenCodeBody(c);
     return c;
   };
   const { action } = writeManagedFile({

package/bin/phases/codex-runtime.js

@@ -7,7 +7,6 @@ const { writeManagedFile, copyManagedTree } = require('../lib/managed-writer');
 const { report, treeAction } = require('./report');
 const { copyRulesDirectory } = require('./claude-runtime');
 const {
-  normalizeCodexBody,
   managedRange,
   upsertManagedCodexBlock
 } = require('../lib/codex-install');
@@ -138,7 +137,10 @@ function installManagedAgentsMd(ctx) {
     ctx.results.errors++;
     return;
   }
-  const block = normalizeCodexBody(fs.readFileSync(runtimeSource, 'utf8'));
+  // This template is already Codex-native. Running it through the generic
+  // Claude-to-Codex converter corrupts intentional cross-runtime wording such
+  // as the fail-safe instruction for Claude Code to ignore this block.
+  const block = fs.readFileSync(runtimeSource, 'utf8');
   const next = upsertManagedCodexBlock(existing, block);
   const action = !exists ? 'created' : next === existing ? 'unchanged' : 'updated';
 

package/bin/phases/copy-payload.js

@@ -17,10 +17,6 @@ const {
 } = require('../lib/context');
 const { writeManagedFile, copyManagedTree } = require('../lib/managed-writer');
 const { report, treeAction } = require('./report');
-const {
-  convertOpenCodeAgentContent,
-  convertOpenCodeCommandContent
-} = require('../lib/opencode-install');
 const {
   codexAgentName,
   convertCodexAgentContent
@@ -29,8 +25,7 @@ const {
 const SRC = path.join(__dirname, '../../src');
 
 /**
- * Spec command files installed for a platform. Claude ships spec-* commands;
- * OpenCode generates its own command wrappers elsewhere.
+ * Spec command files installed for a platform. Claude ships spec-* commands.
  */
 function getPlatformSpecFiles(platformKey, ctx) {
   if (platformKey === 'claude') {
@@ -76,7 +71,6 @@ function copyPlatformFiles(ctx, platformKey) {
   const tracker = ctx.trackers[platformKey];
   const platformFolder = platform.folder;
 
-  // For OpenCode, text bodies are path-normalized (.claude → .opencode, etc.).
   const bodyTransform = getCopyOptions(platformKey, {}).transform;
 
   const skillsSourceDir = path.join(SRC, 'claude/skills');
@@ -162,9 +156,7 @@ function copyPlatformFiles(ctx, platformKey) {
         'tester.md', 'code-reviewer.md', 'fullstack-developer.md', 'debugger.md'
       ];
       let agentTransform;
-      if (platformKey === 'opencode') {
-        agentTransform = (content, src) => convertOpenCodeAgentContent(content, path.basename(src));
-      } else if (platformKey === 'codex') {
+      if (platformKey === 'codex') {
         agentTransform = (content, src) => convertCodexAgentContent(content, path.basename(src));
       }
 
@@ -222,11 +214,7 @@ function copyPlatformFiles(ctx, platformKey) {
       return;
     }
     const cmdTransform = (content, s) => {
-      let c = content.replace(/\{\{SKILLS_DIR\}\}/g, platform.skillsRef);
-      if (platformKey === 'opencode') {
-        c = convertOpenCodeCommandContent(c, path.basename(s));
-      }
-      return c;
+      return content.replace(/\{\{SKILLS_DIR\}\}/g, platform.skillsRef);
     };
     const { action } = writeManagedFile({
       src, dest, platformFolder, ctx, tracker, transform: cmdTransform

package/bin/phases/post-install.js

@@ -1,7 +1,7 @@
 /**
  * Phase: post-install runtime configuration.
  *
- * OpenCode model + addressing config. Interactive prompts use ctx.ui (clack);
+ * Addressing config. Interactive prompts use ctx.ui (clack);
  * in non-interactive/dry-run they are skipped via fallbacks so spawned/CI runs
  * never hang.
  *
@@ -15,14 +15,12 @@ const fs = require('fs');
 const path = require('path');
 const { PLATFORMS } = require('../lib/context');
 const { LANGUAGE_LABELS } = require('../lib/i18n');
-const { setupOpenCodeModel, transformManagedOpenCodeContent } = require('../lib/opencode-install');
 const { transformManagedCodexContent } = require('../lib/codex-install');
 const { transformManagedClaudeContent } = require('./claude-runtime');
 const { transformManagedCoreContent } = require('../lib/instruction-blocks');
 const ASSISTANT_NAMES = {
   claude: 'Claude Code',
-  codex: 'Codex CLI',
-  opencode: 'OpenCode'
+  codex: 'Codex CLI'
 };
 const LANGUAGE_LABEL_BY_CODE = {
   vi: 'Vietnamese',
@@ -50,10 +48,6 @@ function instructionTargets(ctx) {
       file: path.join(process.cwd(), 'AGENTS.md'),
       transform: transformManagedCodexContent
     },
-    opencode: {
-      file: path.join(process.cwd(), 'AGENTS.md'),
-      transform: transformManagedOpenCodeContent
-    }
   };
   return Object.keys(targets)
     .filter((key) => ctx.platforms.includes(key))
@@ -161,7 +155,7 @@ function patchRuntimeLocale(ctx) {
 
 /** Human assistant name for the active platform(s). */
 function assistantName(platformKey) {
-  return ASSISTANT_NAMES[platformKey] || ASSISTANT_NAMES.opencode;
+  return ASSISTANT_NAMES[platformKey] || platformKey;
 }
 
 function configureAddressing(ctx, userAddress) {
@@ -188,7 +182,7 @@ ${name} always addresses the user as "${userAddress}" throughout the conversatio
 }
 
 async function setupAddressing(ctx) {
-  if (!ctx.platforms.some((key) => key === 'claude' || key === 'codex' || key === 'opencode')) return;
+  if (!ctx.platforms.some((key) => key === 'claude' || key === 'codex')) return;
 
   let existingName = null;
   for (const target of instructionTargets(ctx)) {
@@ -237,16 +231,10 @@ async function setupAddressing(ctx) {
 /** Run the post-install configuration sequence. */
 async function runPostInstall(ctx) {
   if (ctx.dryRun) {
-    ctx.ui.info('[dry-run] Skipping OpenCode model / addressing setup');
+    ctx.ui.info('[dry-run] Skipping addressing setup');
     return ctx;
   }
 
-  // OpenCode model uses its own readline; only run it when it won't block:
-  // interactive, or an env override is present (which it reads without prompting).
-  const hasModelEnv = Boolean(process.env.OPENCODE_MODEL || process.env.OPENCODE_DEFAULT_MODEL);
-  if (ctx.platforms.includes('opencode') && (ctx.interactive || hasModelEnv)) {
-    await setupOpenCodeModel(ctx.platforms, ctx.results);
-  }
 
   await setupAddressing(ctx);
 

package/bin/phases/root-config.js

@@ -4,11 +4,11 @@
  * Ensures the root .gitignore carries CafeKit-managed patterns:
  *  - workflow dirs (plans, shared research)
  *  - install safety artifacts (backup, lock)
- *  - runtime folders (.claude/, .opencode/, .codex/, .agents/) — reinstall via
+ *  - runtime folders (.claude/, .codex/, .agents/) — reinstall via
  *    `npx @haposoft/cafekit`; do not commit the local payload
  *
  * Layered with the in-folder `.claude/.gitignore` /
- * `.opencode/.gitignore` templates (secrets, skill deps, session
+ * runtime `.gitignore` templates (secrets, skill deps, session
  * state) so force-adds and partial un-ignores stay safe.
  *
  * Honors dry-run.
@@ -109,7 +109,6 @@ function ensureGitignore(ctx) {
     '.cafekit.lock',
     // Local runtime payload — reinstall with npx; keep out of git
     '.claude/',
-    '.opencode/',
     '.codex/',
     '.agents/'
   ];

package/bin/phases/select-platform.js

@@ -11,8 +11,7 @@ const path = require('path');
 const {
   PLATFORMS,
   detectPlatforms,
-  getPlatformKeys,
-  warnLegacyClaudeFolder
+  getPlatformKeys
 } = require('../lib/context');
 const { SUPPORTED, LANGUAGE_LABELS, OTHER_LABEL } = require('../lib/i18n');
 
@@ -162,7 +161,6 @@ async function resolvePlatforms(ctx) {
     ctx.ui.info(ctx.t('installingFor', {
       names: platformNames(requested)
     }));
-    warnLegacyClaudeFolder(requested);
     reportInstallMode(ctx);
     return ctx;
   }
@@ -216,7 +214,6 @@ async function resolvePlatforms(ctx) {
   ctx.platforms = platforms;
 
   ctx.ui.info(ctx.t('installingFor', { names: platformNames(platforms) }));
-  warnLegacyClaudeFolder(platforms);
 
   reportInstallMode(ctx);
 
@@ -225,7 +222,7 @@ async function resolvePlatforms(ctx) {
 
 /**
  * Get the installed platform from cafekit.json files.
- * Returns the platform key (e.g. 'claude', 'opencode') or null.
+ * Returns the platform key (e.g. 'claude', 'codex') or null.
  */
 function getInstalledPlatforms() {
   const installed = [];

package/bin/phases/summary.js

@@ -55,7 +55,6 @@ function printSummary(ctx) {
   for (const key of platforms) {
     const messageKey = {
       claude: 'nsClaude',
-      opencode: 'nsOpencode',
       codex: 'nsCodex'
     }[key];
     if (messageKey) lines.push(t(messageKey));

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@haposoft/cafekit",
-  "version": "0.16.0-rc.6",
-  "description": "Native spec-driven workflows for Claude Code, Codex CLI, and OpenCode. Bundles CafeKit skills, runtime hooks, agents, and installer scaffolding.",
+  "version": "0.16.0-rc.8",
+  "description": "Native spec-driven workflows for Claude Code and Codex CLI. Bundles CafeKit skills, runtime hooks, agents, and installer scaffolding.",
   "author": "Haposoft <nghialt@haposoft.com>",
   "license": "MIT",
   "private": false,
@@ -56,9 +56,6 @@
   "engines": {
     "node": ">=18.0.0"
   },
-  "devDependencies": {
-    "@opencode-ai/plugin": "1.15.11"
-  },
   "dependencies": {
     "@clack/prompts": "0.11.0",
     "picocolors": "^1.1.1"

package/src/claude/CLAUDE.md

@@ -12,9 +12,22 @@
   - macOS/Linux: `.claude/skills/.venv/bin/python3 scripts/<script>.py`
   - Windows: `.claude\skills\.venv\Scripts\python.exe scripts\<script>.py`
 - Consult `.claude/rules/state-sync.md`, `.claude/rules/hook-protocols.md`, and `.claude/rules/skill-workflow-routing.md` when their topics apply.
-- Specs v2 keeps `planning_depth` (`None`/`Compact`/`Full`) independent from `assurance_level` (`Routine`/`Elevated`/`Strict`). Any risk has an Elevated automatic floor; Strict is opt-in only for an explicit user/project independent-audit requirement or a user-confirmed scope-specific audit decision, never a keyword or severity label. Run the artifact router before discovery: None has no durable spec; Compact/Full share the bounded `spec.json` + `requirements.md` + `design.md` core. Research requires material unresolved uncertainty, an external-current fact, or an explicit request; tasks require typed coordination topology. Full/Strict never create either automatically.
-- In v2.1, `spec.json` is machine authority and Markdown is a human projection. Task plans have exactly seven sections: `Outcome`, `Scope`, `Anchors and Ownership`, `Changes`, `Acceptance`, `Dependencies`, `Verification Plan`; the only ownership table is `ID | Type | Target | Role | Access | Action`.
-- Promote canonical `semantic_model` only through the explicit installed machine semantic-sync step. A semantic Markdown edit requires resynchronization and round-trip validation; never hand-author the machine shape.
-- `coordination.boundaries` typed as ownership/dependency/transition/proof/parallel is topology authority. Legacy trigger fields, priority markers, related-file lists, approval fields, and prose are inert compatibility inputs, never canonical authoring.
-- Canonical lifecycle is exactly `in_progress`, `paused`, `blocked`, or `done`. Technical readiness differs from closeout; authors cannot self-declare readiness, review authority, execution proof, or final `done`.
-- Validator exit 0 proves implemented structural checks only, not semantic quality or execution PASS.
+- New Specs work uses the process-first flow. `/hapo:specs` opens C1, writes
+  `specs/<feature>/plan.md` with flat `task-NN-*.md` files beside it, then opens
+  C2 after adversarial review. It never starts implementation.
+- Start implementation only through a new explicit `/hapo:develop` invocation.
+  Execute one unblocked task at a time; each task has exactly one `Status:`
+  field and the controller is its sole state-and-proof writer.
+- Use `/hapo:sync` for surgical updates to observed file state. A done task
+  requires a canonical final inline `## Receipt` with the exact command,
+  `Exit: 0`, `Verification: PASS`, runtime-derived Base and Head values, and
+  non-empty fenced current output.
+- At C3, show current receipts and unresolved limitations. The user decides
+  completion; no command, review, or host state may invent approval or proof.
+
+### Legacy Specs compatibility
+
+Existing packets containing `spec.json`, nested tasks, or legacy kernel
+artifacts keep their installed adapter, `task_registry`, `semantic_model`,
+`planning_depth`, lane, `execution_tier`, machine authority, separate receipts,
+and closeout contract. Do not migrate them during unrelated process-first work.

package/src/claude/agents/project-manager.md

@@ -7,33 +7,65 @@ tools: Glob, Grep, Read, Edit, Write, NotebookEdit, Bash, WebFetch, TaskCreate,
 
 # Project Manager — Ecosystem Orchestrator
 
-You are the authoritative **Project Manager** within the ecosystem. Your mandate is to track verifiable engineering progress by strictly parsing metric data across the `specs/` and `docs/` directory matrix, eliminating guesswork, and unblocking development flows.
+You are the **Project Manager** for evidence-backed aggregation. Track progress
+from each feature's `plan.md`, flat `task-NN-*.md` files, current command
+output, and affected docs. Conversational summaries are leads, never proof.
 
 ## Operational Mandate
 
-Unlike typical managers who report on "feelings" or conversational summaries, you operate solely on hard data extracted from technical specifications:
-1. **Spec Syncing:** You validate if the output produced by sub-agents matches the `spec.json` requirements and the `design.md` architectural constraints.
-2. **Blocker Assassination:** You identify task stagnation (e.g., a spec stuck in 'in-progress' across multiple sessions) and force the immediate assignment of next-step actions.
-3. **Agile Aggregation:** When parallel sub-agents (like `implementer` and `test-runner`) report completion, you sweep their logs, consolidate the facts, and generate a single authoritative **Feature Release Report**.
+Operate only on current, reproducible data:
+
+1. **Packet reconciliation:** Compare the plan task table with every flat task
+   filename, acceptance mapping, ownership boundary, dependency, and Status.
+2. **Proof validation:** Require exactly one Status per task. Treat `done` as
+   valid only when the task's final inline `## Receipt` contains the exact
+   command, `Exit: 0`, `Verification: PASS`, runtime-derived Base and Head, and
+   non-empty fenced current output.
+3. **Process-first aggregation:** Consolidate worker reports, test output,
+   review findings, receipts, docs impact, and unresolved limitations without
+   borrowing one owner's evidence for another boundary.
+4. **Blocker routing:** Identify stalled or contradictory tasks and assign the
+   smallest concrete next action. Never force a state transition without proof.
 
 
 ## Execution Constraints
 
 Before you declare any phase complete or issue a final status report, you must internally trace:
-- **Scope Viability:** Are we building exactly what is listed in `requirements.md`? Flag any undocumented "scope expansions" immediately.
-- **Dependency Graph:** Ensure no task starts if its prerequisites (tracked via `cross-spec-dependency`) are still red.
-- **Actionable Exits:** Never end a report with vague conclusions. Assign discrete, actionable tasks to a specific sub-agent (or prompt the user for a definitive GO/NO-GO decision).
+- **C1 scope:** Compare implemented bytes with the chosen scope, exclusions, and
+  acceptance criteria in the plan. New scope evidence returns to C1.
+- **C2 findings:** Confirm every accepted or revised finding appears once in
+  the plan or its task; rejected findings do not silently return.
+- **Dependencies:** A task starts only when each named dependency is done with a
+  valid current Receipt. Serialize overlapping write ownership.
+- **Execution authority:** Specs completion never starts implementation. Wait
+  for an explicit Develop invocation and aggregate only its requested boundary.
+- **C3 decision:** Show current proof and limitations. The user, not the
+  manager, decides whether the feature is complete.
+- **Actionable exits:** Assign a discrete next task or request a definitive user
+  decision; never end with a vague conclusion.
 
 ## Format & Output Constraints
 - **Sacrifice Grammar for Concision:** Do not write flowery prose. Your reports must be highly mechanical, bulleted, and brutally concise.
 - **Naming Hooks:** Always use the precise naming pattern and file path locations defined by project hooks for your reports.
+- **Minimum report:** Include C1 scope drift, accepted C2 finding coverage,
+  task/receipt status, executed command results, blockers, docs impact, and the
+  pending or recorded C3 decision.
 - **Unresolved Inquiries:** If any architectural ambiguity remains unresolved, list it prominently at the exact bottom of the report.
 
 ## Collaborative Interlocking (Swarm Protocol)
 
-- You govern the final phase of `/specs`. If a spec is prematurely abandoned by `brainstormer`, you drag it back to alignment.
+- You aggregate after C2 and during explicitly invoked execution. An incomplete
+  packet returns to the planning owner; do not expand it yourself.
 - When triggered as an active teammate within multi-agent swarms:
   1. **Init:** Execute `TaskList` immediately, then claim idle aggregation blocks via `TaskUpdate`.
   2. **Context Intake:** Pull strict operational boundaries using `TaskGet`.
   3. **Routing Coordination:** Communicate with other agents or the lead via `SendMessage` and enforce strict completion parameters via `TaskUpdate(status: "completed")`.
   4. **Shutdown Mandate:** If you intercept a `shutdown_request` payload, you MUST yield gracefully by broadcasting `SendMessage(type: "shutdown_response")` unless interrupted mid-critical analysis.
+
+## Legacy compatibility
+
+For an existing packet containing `spec.json`, nested task files, or legacy
+kernel artifacts, use its installed adapter and preserve `task_registry`,
+`semantic_model`, `planning_depth`, lane, `execution_tier`, machine authority,
+separate receipts, and feature closeout contract. Keep that aggregation path
+separate from process-first files.