@ionivetech/mugiwara 0.6.0 → 0.6.2

package/content/skills/mugiwara-workflow/SKILL.md

@@ -46,7 +46,7 @@ Waves are phases, not files. The plan doc defines them. The harness runs inline.
 
 **One role at a time.** The main thread embodies ONE crew role per response — completes that role's report, then moves to the next. Never role-bleeds two personas into one response; never starts the next role before the current one returns its output.
 
-**Banners.** Waves open with `==================== WAVE N - CREW (SKILL) ====================` and close with `→ Wave N+1 — Crew`.
+**Banners.** Every wave opens with a visible main-thread heading `## Wave N — <crew> (<skill>)` and closes with the handoff line `→ Wave N+1 — <crew>`. No wave starts without its banner.
 
 **Subagents only for parallelism.** `[PARALLEL]` task batches, parallel review, parallel heal workers. Crew members never dispatch crew members.
 
@@ -76,6 +76,7 @@ Luffy classifies every request 8 ways:
 Precedence: class decides whether there is work; lane decides how much process — class first, lane second.
 
 Lane: 0=Direct (<20 LOC), 1=Lean (1-2 files), 2=Standard (3-8 files), 3=Full (9+ or sensitive), 4=Spike. Record route in `.mugiwara/logs/`.
+Read-only investigation (no file change) → Answer/Explore — no crew, no Luffy subagent.
 
 ## Session handoff
 
@@ -91,7 +92,7 @@ Brook reads this at Wave 8. Never silently work around a blocker.
 
 ## Cleanup (Wave 9)
 
-Delete consumed: `results/<mission>/01-execution.md`…`05-healing.md` + `todos.md`, `logs/` (except `logs/lessons.md`), `spec/`, `review/`, `issues/`. Keep: `results/<mission>/06-closure.md`, `results/<mission>/07-pr-verdict.md`, `plans/`, `reports/`, `config`, `state.json`, `logs/lessons.md`. Full layout: `references/workspace-layout.md`.
+Archive, never delete: run `mugiwara archive <mission>` — folds `logs/`, `spec/`, `review/`, `issues/` into the mission report and removes the loose files. Step results `results/<mission>/01..05` + `todos.md` are EVIDENCE — KEEP them in place; they feed `reports/` and closure links. Keep: everything under `results/<mission>/`, `plans/`, `reports/`, `config`, `state.json`, `logs/lessons.md`. Full layout: `references/workspace-layout.md`.
 
 ## Rules
 
@@ -106,6 +107,7 @@ Delete consumed: `results/<mission>/01-execution.md`…`05-healing.md` + `todos.
 ## Iron Law
 
 EVIDENCE OVER CLAIMS. "Done" = command re-run, output captured, evidence fresh.
+Every evidence pointer is a CLICKABLE markdown link — `[path](relative/path)` — so reports link straight to the artifact. Step results in results/<mission>/01..05 are EVIDENCE: never deleted at cleanup, they feed the mission report.
 
 ## Red flags
 

package/content/skills/mugiwara-workflow/references/workspace-layout.md

@@ -42,9 +42,10 @@ artifacts go outside `.mugiwara/`.
 
 ## Cleanup (Wave 9)
 
-Delete consumed: `results/<mission>/01-execution.md` through
-`05-healing.md` and `todos.md` (wave artifacts), `logs/`, `spec/`, `review/`,
-`issues/`. Keep: `results/<mission>/06-closure.md`,
-`results/<mission>/07-pr-verdict.md`, `plans/`, `reports/`, `config`,
-`state.json`, `lessons.md` (cross-mission state: `logs/lessons.md`, `backup/`,
-`manifest.json`). List candidates before deleting.
+Step results are evidence — KEEP every file in `results/<mission>/`
+(`01-execution.md` through `05-healing.md`, `todos.md`, `06-closure.md`,
+`07-pr-verdict.md`); they feed the mission report and closure links. Delete
+only consumed cross-artifacts: `logs/`, `spec/`, `review/`, `issues/`. Keep
+`plans/`, `reports/`, `config`, `state.json`, `logs/lessons.md` (canonical
+lessons ledger; cross-mission state: `backup/`, `manifest.json`). List
+candidates before deleting.

package/content/skills/using-mugiwara/SKILL.md

@@ -8,7 +8,7 @@ description: How Mugiwara works — crew overview, pipeline summary. Documentati
 
 - `mugiwara-orchestration` is the gatekeeper — it auto-loads for task routing and classification. This skill is a documentation reference only.
 
-Mugiwara is a governed engineering team in your coding agent. 11 specialists — triage, brainstorm, plan, execute, audit, quality, gates, review, security, heal — with evidence at every step and cost tracking. Runs inline in the main conversation.
+Mugiwara is a governed engineering team in your coding agent. 12 specialists — triage, brainstorm, plan, execute, audit, quality, gates, review, security, heal — with evidence at every step and cost tracking. Runs inline in the main conversation.
 
 ## How it works
 
@@ -18,6 +18,10 @@ Mugiwara is a governed engineering team in your coding agent. 11 specialists —
 4. Evidence over claims — no wave passes on assertion. Checks must be re-run.
 5. Autonomy modes: `/mugiwara guided|semi|auto`. Flip applies next wave.
 6. Workspace: `.mugiwara/` at repo root — plans, results, issues, logs, state.
+7. The main thread embodies the active role — it is never "plain Claude"
+   mid-mission. Shortcuts skip waves, never roles. Write-scope in each agent's
+   frontmatter: artifacts agents delegate source edits to Zoro, never attempt
+   them.
 
 ## Crew
 
@@ -39,3 +43,9 @@ For task routing and classification, `mugiwara-orchestration` auto-loads as gate
 This skill is documentation — load manually with `/using-mugiwara` or similar trigger phrases.
 Full pipeline: see skills/mugiwara-workflow.
 First time? Run `/mugiwara onboard` for guided setup. See `content/agents/onboarding-guide.md`.
+
+## Red flags
+
+- Stating an agent or skill count that drifts from content/.
+- Claiming feature parity that contradicts the harness matrix.
+- Answering routing questions instead of deferring to mugiwara-orchestration.

package/dist/mugiwara.js

@@ -112,8 +112,13 @@ ${body}`;
 
 // src/targets/claude.ts
 var here = dirname(fileURLToPath(import.meta.url));
-var HOOK_SRC = join(here, "..", "..", "hooks", "session-start.ts");
+var HOOKS_SRC = join(here, "..", "..", "hooks");
 var COMMANDS_SRC = join(here, "..", "..", ".claude", "commands");
+function toolsFromScope(scope) {
+  if (scope === "artifacts")
+    return "Read, Grep, Glob, Write, Bash, WebFetch, WebSearch";
+  return;
+}
 var target = {
   id: "claude",
   label: "Claude Code",
@@ -133,6 +138,11 @@ var target = {
     const fm = { name: data.name, description: data.description };
     if (data.tools)
       fm.tools = data.tools;
+    else if (data["internal-agent"] === "true") {
+      const generated = toolsFromScope(data["write-scope"]);
+      if (generated)
+        fm.tools = generated;
+    }
     return { relPath: `${data.name}.md`, text: stringifyFrontmatter(fm, body) };
   },
   refsDir({ scope, projectDir, home }, skillName) {
@@ -141,16 +151,22 @@ var target = {
   },
   postInstall({ scope, projectDir, home, dryRun }) {
     const root = scope === "global" ? join(home, ".claude") : join(projectDir, ".claude");
-    const hookFile = join(root, "hooks", "session-start.ts");
     const written = [];
     const notes = [];
     if (dryRun)
       return { written: [], notes: [] };
-    if (existsSync(HOOK_SRC) && !existsSync(hookFile)) {
-      mkdirSync(dirname(hookFile), { recursive: true });
-      copyFileSync(HOOK_SRC, hookFile);
-      chmodSync(hookFile, 493);
-      written.push(hookFile);
+    if (existsSync(HOOKS_SRC)) {
+      for (const f of readdirSync(HOOKS_SRC)) {
+        if (!f.endsWith(".ts"))
+          continue;
+        const dst = join(root, "hooks", f);
+        if (!existsSync(dst)) {
+          mkdirSync(dirname(dst), { recursive: true });
+          copyFileSync(join(HOOKS_SRC, f), dst);
+          chmodSync(dst, 493);
+          written.push(dst);
+        }
+      }
     }
     if (existsSync(COMMANDS_SRC)) {
       const dstDir = join(root, "commands");
@@ -200,12 +216,12 @@ function permissionFromScope(scope) {
     return { edit: { "*": "deny", ".mugiwara/**": "allow" } };
   return;
 }
-function agentFrontmatter(name, description, writeScope) {
+function agentFrontmatter(name, description, internal, writeScope) {
   const crew = CREW[name];
   const lines = [`description: ${description}`, `mode: all`];
   if (crew) {
     lines.push(`color: '${crew.color}'`, `temperature: ${crew.temperature}`, `steps: ${crew.steps}`);
-    const perm = permissionFromScope(writeScope);
+    const perm = internal ? permissionFromScope(writeScope) : undefined;
     if (perm) {
       lines.push("permission:");
       for (const [k, v] of Object.entries(perm)) {
@@ -239,7 +255,7 @@ var target2 = {
   },
   transformAgent(data, body) {
     const desc = data["internal-agent"] === "true" ? `[INTERNAL] ${data.description}` : data.description;
-    const fm = agentFrontmatter(data.name, desc, data["write-scope"]);
+    const fm = agentFrontmatter(data.name, desc, data["internal-agent"] === "true", data["write-scope"]);
     return { relPath: `${data.name}.md`, text: `---
 ${fm}
 ---
@@ -461,7 +477,7 @@ var targets = { claude: target, opencode: target2, copilot: target3, gemini: tar
 var TARGET_IDS = Object.keys(targets);
 
 // src/installer.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync2, readdirSync as readdirSync3, writeFileSync as writeFileSync2, copyFileSync as copyFileSync3, rmSync } from "node:fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync2, readdirSync as readdirSync3, writeFileSync as writeFileSync2, copyFileSync as copyFileSync3, rmSync, lstatSync } from "node:fs";
 import { dirname as dirname3, join as join5 } from "node:path";
 import { homedir } from "node:os";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
@@ -598,6 +614,44 @@ function removeInstalled(manifest, { dryRun = false } = {}) {
   }
   return removed;
 }
+function assertNotSymlink(file) {
+  if (!existsSync4(file))
+    return;
+  try {
+    if (lstatSync(file).isSymbolicLink())
+      throw new Error(`refusing to follow symlink: ${file}`);
+  } catch (e) {
+    if (e.code === "ENOENT")
+      return;
+    throw e;
+  }
+}
+var GITIGNORE_MARKER = "# mugiwara";
+var GITIGNORE_BLOCK = `# mugiwara — audit trail is the product: commit reports/, results/, logs/, spec/, plans/.
+# Ignore session state and regenerated files.
+.mugiwara/state.json
+.mugiwara/state-*.json
+.mugiwara/config
+.mugiwara/continue.md
+.mugiwara/refs/
+`;
+function ensureProjectGitignore(projectDir, opts = {}) {
+  const { dryRun = false } = opts;
+  const path = join5(projectDir, ".gitignore");
+  assertNotSymlink(path);
+  if (existsSync4(path) && readFileSync2(path, "utf8").includes(GITIGNORE_MARKER)) {
+    return { appended: false, notes: [] };
+  }
+  const existing = existsSync4(path) ? readFileSync2(path, "utf8") : "";
+  const separator = existing.length && !existing.endsWith(`
+`) ? `
+` : "";
+  if (!dryRun) {
+    mkdirSync3(dirname3(path), { recursive: true });
+    writeFileSync2(path, existing + separator + GITIGNORE_BLOCK);
+  }
+  return { appended: true, notes: [`.gitignore ${dryRun ? "would append" : "appended"} mugiwara audit-trail block`] };
+}
 
 // src/manifest.ts
 import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
@@ -615,7 +669,7 @@ function writeManifest(file, data) {
 }
 
 // src/mission.ts
-import { existsSync as existsSync6, rmSync as rmSync2, readFileSync as readFileSync4, readdirSync as readdirSync4 } from "node:fs";
+import { existsSync as existsSync6, rmSync as rmSync2, readFileSync as readFileSync4, readdirSync as readdirSync4, mkdirSync as mkdirSync5, appendFileSync } from "node:fs";
 import { join as join7 } from "node:path";
 function activeActor(projectDir) {
   const stateFile = join7(projectDir, ".mugiwara", "state.json");
@@ -671,12 +725,107 @@ function resetMission(projectDir, keepLogs, force) {
   }
   return { removed, kept };
 }
+function archiveMission(projectDir, mission, opts = {}) {
+  const { dryRun = false } = opts;
+  const root = join7(projectDir, ".mugiwara");
+  if (!mission || /[^a-zA-Z0-9._-]/.test(mission) || /^\.+$/.test(mission))
+    throw new Error(`invalid mission name "${mission}" (allowlist: [a-zA-Z0-9._-], not a dot-path)`);
+  const removed = [];
+  const kept = [];
+  const belongs = (f) => {
+    const base = f.replace(/^\d{4}-\d{2}-\d{2}-/, "");
+    return base === `${mission}.md` || base.startsWith(`${mission}-`);
+  };
+  let report = null;
+  const reportsDir = join7(root, "reports");
+  if (existsSync6(reportsDir)) {
+    const f = readdirSync4(reportsDir).find((n) => {
+      const m = n.match(/^(\d{4}-\d{2}-\d{2})-(.+)\.md$/);
+      return !!m && m[2] === mission;
+    });
+    if (f)
+      report = join7("reports", f);
+  }
+  const resultsDir = join7(root, "results", mission);
+  if (existsSync6(resultsDir)) {
+    for (const f of readdirSync4(resultsDir)) {
+      kept.push(join7("results", mission, f));
+    }
+  }
+  const specDir = join7(root, "spec");
+  if (existsSync6(specDir)) {
+    for (const f of readdirSync4(specDir)) {
+      if (!belongs(f))
+        continue;
+      const p = join7(specDir, f);
+      if (!dryRun)
+        rmSync2(p);
+      removed.push(join7("spec", f));
+    }
+  }
+  for (const dir of ["review", "issues"]) {
+    const d = join7(root, dir);
+    if (!existsSync6(d))
+      continue;
+    for (const f of readdirSync4(d)) {
+      if (!belongs(f))
+        continue;
+      const p = join7(d, f);
+      if (!dryRun)
+        rmSync2(p, { force: true });
+      removed.push(join7(dir, f));
+    }
+  }
+  const logsDir = join7(root, "logs");
+  if (existsSync6(logsDir)) {
+    for (const f of readdirSync4(logsDir)) {
+      if (!belongs(f))
+        continue;
+      const p = join7(logsDir, f);
+      if (!dryRun)
+        rmSync2(p);
+      removed.push(join7("logs", f));
+    }
+  }
+  const cont = join7(root, "continue.md");
+  if (existsSync6(cont)) {
+    try {
+      if (readFileSync4(cont, "utf8").includes(mission)) {
+        if (!dryRun)
+          rmSync2(cont);
+        removed.push("continue.md");
+      }
+    } catch {}
+  }
+  if (report)
+    kept.push(report);
+  for (const k of ["plans", "config", "state.json", join7("logs", "lessons.md")]) {
+    if (existsSync6(join7(root, k)))
+      kept.push(k);
+  }
+  let index;
+  const indexFile = join7(root, "reports", "index.md");
+  const line = `- ${mission} — ${new Date().toISOString().slice(0, 10)}${report ? ` → ${report}` : ""}
+`;
+  if (!dryRun) {
+    mkdirSync5(join7(root, "reports"), { recursive: true });
+    const existing = existsSync6(indexFile) ? readFileSync4(indexFile, "utf8") : "";
+    if (!existing.split(/\r?\n/).some((l) => l.startsWith(`- ${mission} —`))) {
+      const header = existing ? "" : `# Mission index
+
+`;
+      appendFileSync(indexFile, header + line);
+    }
+    index = join7("reports", "index.md");
+  }
+  return { report, removed, kept, index };
+}
 
 // src/cli.ts
 var str = (v) => typeof v === "string" ? v : undefined;
 var flag = (v) => v === true;
 async function run(argv) {
-  const { command, flags } = parseArgs(argv);
+  const { command, flags, _ } = parseArgs(argv);
   if (flag(flags.help) || command === "help")
     return help();
   if (flag(flags.version)) {
@@ -694,6 +843,8 @@ async function run(argv) {
       return list(flags);
     case "reset":
       return resetCmd(flags);
+    case "archive":
+      return archive(flags, _);
     default:
       throw new Error(`Unknown command: ${command}`);
   }
@@ -713,6 +864,23 @@ function resetCmd(flags) {
   if (result.kept.length)
     console.log(`kept: ${result.kept.join(", ")}`);
 }
+function archive(flags, positionals) {
+  const projectDir = resolve(str(flags.project) ?? process.cwd());
+  const mission = positionals[1];
+  if (!mission) {
+    console.error("usage: mugiwara archive <mission> [--project <dir>] [--dry-run]");
+    process.exit(1);
+  }
+  const result = archiveMission(projectDir, mission, { dryRun: flag(flags.dryRun) });
+  if (result.report)
+    console.log(`archive target: ${result.report}`);
+  if (result.removed.length)
+    console.log(`${flag(flags.dryRun) ? "would remove" : "removed"}: ${result.removed.join(", ")}`);
+  if (result.kept.length)
+    console.log(`kept: ${result.kept.join(", ")}`);
+  if (result.index)
+    console.log(`index updated: ${result.index}`);
+}
 async function resolveOptions(flags) {
   const interactive = !flag(flags.yes);
   if (interactive && !process.stdin.isTTY) {
@@ -773,6 +941,10 @@ async function install(flags) {
     allFiles.push(...r.written);
     allNotes.push(...r.notes);
   }
+  if (scope === "project") {
+    const gi = ensureProjectGitignore(projectDir, { dryRun: flag(flags.dryRun) });
+    allNotes.push(...gi.notes);
+  }
   if (flag(flags.dryRun)) {
     console.log(`
 Dry run — nothing written.`);
@@ -869,6 +1041,7 @@ Usage:
   mugiwara list          show installations
   mugiwara list --check  health check: show installations + missing files
   mugiwara reset         wipe mission state (spec/plans/results/review/issues[/logs])
+  mugiwara archive <m>    fold a closed mission's evidence into its report, then remove loose files
   mugiwara --help        this help
   mugiwara --version     print version
 

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "mugiwara",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "The Straw Hat crew of AI agents and skills: brainstorm, plan, execute, checkpoint, quality, gates, review, security, healing.",
   "contextFileName": "GEMINI.md"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ionivetech/mugiwara",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "The Straw Hat crew of AI agents and skills: brainstorm, plan, execute, checkpoint, quality, gates, review, security, self-healing. Installs into Claude Code, opencode, Copilot, Gemini, Codex, Cursor, Kimi, pi, Windsurf, Cline, Kilo, Antigravity.",
   "homepage": "https://github.com/ionivetech/mugiwara#readme",
   "repository": {

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "mugiwara",
   "description": "The Straw Hat crew of AI agents and skills: brainstorm, plan, execute, checkpoint, quality, gates, review, security, healing.",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "author": {
     "name": "ionivetech"
   },

package/scripts/evidence.sh

@@ -8,7 +8,11 @@ die() { echo "evidence: $*" >&2; exit 1; }
 
 MISSION="${1:-}"
 LABEL="${2:-}"
-shift 2>/dev/null || true
+shift 2 2>/dev/null || true
+
+# strip an optional "--" separator between <label> and the command
+[ "${1:-}" = "--" ] && shift
+
 [ -z "$MISSION" ] && die "usage: evidence.sh <mission> <label> [-- command args...]"
 [ -z "$LABEL" ] && die "usage: evidence.sh <mission> <label> [-- command args...]"
 
@@ -17,6 +21,17 @@ case "$MISSION" in
   *[!a-zA-Z0-9._-]*) die "invalid mission name \"$MISSION\" (allowlist: [a-zA-Z0-9._-])" ;;
 esac
 
+# label allowlist — LABEL feeds the output filename; traversal or shell
+# metacharacters must not reach the filesystem (same rule as MISSION)
+case "$LABEL" in
+  *[!a-zA-Z0-9._-]*) die "invalid label \"$LABEL\" (allowlist: [a-zA-Z0-9._-])" ;;
+esac
+# dot-only labels (".", "..", "...") pass the char allowlist but escape the
+# results dir — reject them before any filename is built from LABEL.
+if [[ "$LABEL" =~ ^\.+$ ]]; then
+  die "invalid label \"$LABEL\" (allowlist: [a-zA-Z0-9._-], not a dot-path)"
+fi
+
 MUGIWARA_DIR="${MUGIWARA_DIR:-.mugiwara}"
 RESULTS_DIR="$MUGIWARA_DIR/results/$MISSION"
 mkdir -p "$RESULTS_DIR"

package/scripts/gate-selftest.ts

@@ -54,7 +54,7 @@ if (!existsSync(join(root, 'scripts', 'validate-content.ts'))) {
     const makeBody = (sectionLines: number) => {
       let body = '---\nname: test-skill\ndescription: Test skill for section-length gate, twenty chars\n---\n\n# Test\n\n## Skip when\n\n- Test\n\n## Long Section\n\n';
       for (let i = 0; i < sectionLines; i++) body += `Line ${i + 1} of content for section length test.\n`;
-      body += '\n';
+      body += '\n## Red flags\n\n- Test flag\n';
       return body;
     };
 
@@ -262,5 +262,56 @@ if (!existsSync(brainstormSkill)) {
   }
 }
 
+// --- F2: red-flags gate — strip the heading from one skill, prove red ---
+console.log('\nF2 — red-flags gate');
+const redSkill = join(root, 'content', 'skills', 'mugiwara-workflow', 'SKILL.md');
+if (!existsSync(redSkill)) {
+  console.log('  ⚠  mugiwara-workflow/SKILL.md not found, skipping');
+} else {
+  const original = readFileSync(redSkill, 'utf8');
+  try {
+    const broken = original.replace('## Red flags', '## Disabled');
+    writeFileSync(redSkill, broken);
+    assert('missing Red flags → exit 1', false, () => run('F2-redflags', 'bun scripts/validate-content.ts'));
+  } finally {
+    writeFileSync(redSkill, original);
+    assert('restored → exit 0', true, () => run('F2-redflags', 'bun scripts/validate-content.ts --check-manifest --check-docs'));
+  }
+}
+
+// --- W1: write-boundary gate — strip the section, prove red ---
+console.log('\nW1 — write-boundary gate');
+const wbSkill = join(root, 'content', 'skills', 'mugiwara-orchestration', 'SKILL.md');
+if (!existsSync(wbSkill)) {
+  console.log('  ⚠  mugiwara-orchestration/SKILL.md not found, skipping');
+} else {
+  const original = readFileSync(wbSkill, 'utf8');
+  try {
+    const broken = original.replace('## Write boundary', '## Boundary');
+    writeFileSync(wbSkill, broken);
+    assert('missing write boundary → exit 1', false, () => run('W1-wb', 'bun scripts/validate-content.ts'));
+  } finally {
+    writeFileSync(wbSkill, original);
+    assert('restored → exit 0', true, () => run('W1-wb', 'bun scripts/validate-content.ts --check-manifest --check-docs'));
+  }
+}
+
+// --- F14: agent-count gate — flip an internal agent to user-facing, prove red ---
+console.log('\nF14 — agent-count gate');
+const countAgent = join(root, 'content', 'agents', 'eval-runner.md');
+if (!existsSync(countAgent)) {
+  console.log('  ⚠  eval-runner.md not found, skipping');
+} else {
+  const original = readFileSync(countAgent, 'utf8');
+  try {
+    const broken = original.replace('internal: true', 'internal: false');
+    writeFileSync(countAgent, broken);
+    assert('count drift → exit 1', false, () => run('F14-count', 'bun scripts/validate-content.ts'));
+  } finally {
+    writeFileSync(countAgent, original);
+    assert('restored → exit 0', true, () => run('F14-count', 'bun scripts/validate-content.ts --check-manifest --check-docs'));
+  }
+}
+
 console.log(`\n${passed} passed, ${failed} failed`);
 process.exit(failed > 0 ? 1 : 0);

package/scripts/initiative.ts

@@ -46,6 +46,15 @@ function resolvePlan(planFile: string): string {
   throw new Error(err);
 }
 
+// A plan is a markdown document. Garbage (no markdown structure) is not a
+// "solo mission" — it is a malformed plan. Heading check keeps the
+// no-sub-missions-but-valid-markdown case working as solo mission.
+function assertPlanContent(content: string, planFile: string): void {
+  if (!/^#{1,6}\s/m.test(content)) {
+    throw new Error(`Not a valid plan file: "${planFile}" — expected markdown (no heading found)`);
+  }
+}
+
 function parseSubMissions(content: string): SubMission[] {
   const lines = content.split('\n');
   let inTable = false;
@@ -93,6 +102,7 @@ function parseSubMissions(content: string): SubMission[] {
 
 function cmdStatus(planFile: string): void {
   const content = readFileSync(planFile, 'utf8');
+  assertPlanContent(content, planFile);
   const subs = parseSubMissions(content);
 
   if (subs.length === 0) {
@@ -122,6 +132,7 @@ function cmdStatus(planFile: string): void {
 
 function cmdConflictCheck(planFile: string): void {
   const content = readFileSync(planFile, 'utf8');
+  assertPlanContent(content, planFile);
   const subs = parseSubMissions(content);
 
   if (subs.length === 0) {
@@ -161,15 +172,13 @@ function cmdConflictCheck(planFile: string): void {
 }
 
 function cmdSetStatus(planFile: string, id: string, status: string): void {
-  if (!STATUS_MARKERS[id]) {
-    // `status` here is the status string from args — check it
-  }
   if (!STATUS_MARKERS[status]) {
     console.error(`Invalid status: "${status}". Use: pending, in-progress, done, blocked`);
     process.exit(1);
   }
 
   const content = readFileSync(planFile, 'utf8');
+  assertPlanContent(content, planFile);
   const lines = content.split('\n');
   const newMarker = STATUS_MARKERS[status];
   let inTable = false;
@@ -225,24 +234,29 @@ if (args.length === 0 || args.includes('--help') || args.includes('-h')) {
 
 const cmd = args[0];
 
-if (cmd === 'status') {
-  if (args.length < 2) { console.error('Missing plan-file argument.'); process.exit(1); }
-  cmdStatus(resolvePlan(args[1]));
-} else if (cmd === 'conflict-check') {
-  if (args.length < 2) { console.error('Missing plan-file argument.'); process.exit(1); }
-  cmdConflictCheck(resolvePlan(args[1]));
-} else if (cmd === 'set-status') {
-  const idIdx = args.indexOf('--id');
-  const statusIdx = args.indexOf('--status');
-  if (idIdx === -1 || statusIdx === -1 || args.length < 6) {
-    console.error('set-status requires --id <id> --status <status>');
+try {
+  if (cmd === 'status') {
+    if (args.length < 2) { console.error('Missing plan-file argument.'); process.exit(1); }
+    cmdStatus(resolvePlan(args[1]));
+  } else if (cmd === 'conflict-check') {
+    if (args.length < 2) { console.error('Missing plan-file argument.'); process.exit(1); }
+    cmdConflictCheck(resolvePlan(args[1]));
+  } else if (cmd === 'set-status') {
+    const idIdx = args.indexOf('--id');
+    const statusIdx = args.indexOf('--status');
+    if (idIdx === -1 || statusIdx === -1 || args.length < 6) {
+      console.error('set-status requires --id <id> --status <status>');
+      process.exit(1);
+    }
+    const id = args[idIdx + 1];
+    const statusVal = args[statusIdx + 1];
+    cmdSetStatus(resolvePlan(args[1]), id, statusVal);
+  } else {
+    console.error(`Unknown command: "${cmd}"`);
+    console.log(USAGE);
     process.exit(1);
   }
-  const id = args[idIdx + 1];
-  const statusVal = args[statusIdx + 1];
-  cmdSetStatus(resolvePlan(args[1]), id, statusVal);
-} else {
-  console.error(`Unknown command: "${cmd}"`);
-  console.log(USAGE);
+} catch (err) {
+  console.error(err instanceof Error ? err.message : String(err));
   process.exit(1);
 }

package/scripts/lane.sh

@@ -51,7 +51,9 @@ else
   REASON="$FILE_COUNT files"
 fi
 
-if [ "$HAS_SENSITIVE" -eq 1 ] && [ "$LANE" != "full" ]; then
+# Sensitive-path escalation is unconditional — it wins over any count-based
+# lane AND over the docs-only downgrade below (bug C9).
+if [ "$HAS_SENSITIVE" -eq 1 ]; then
   PREV="$LANE"
   LANE="full"
   REASON="sensitive paths ($SENSITIVE) — escalated from $PREV"
@@ -63,7 +65,7 @@ fi
 # Product surface for mugiwara: content/, src/, scripts/, test/, hooks/,
 # .opencode/, .claude/, evals/ — everything else is docs/config/asset.
 PRODUCT_PAT="^content/|^src/|^scripts/|^test/|^hooks/|^\.opencode/|^\.claude/|^evals/"
-if [ "$LANE" = "full" ] && [ -n "$CHANGED" ]; then
+if [ "$LANE" = "full" ] && [ "$HAS_SENSITIVE" -eq 0 ] && [ -n "$CHANGED" ]; then
   CODE_COUNT=$(echo "$CHANGED" | grep -E "$PRODUCT_PAT" 2>/dev/null | grep -c . || true)
   if [ -z "$CODE_COUNT" ] || [ "$CODE_COUNT" -eq 0 ] 2>/dev/null; then
     PREV="$LANE"