@ionivetech/mugiwara 0.6.3 → 0.6.4

package/.claude-plugin/marketplace.json

@@ -5,13 +5,13 @@
   },
   "metadata": {
     "description": "The Straw Hat crew for AI agents",
-    "version": "0.6.3"
+    "version": "0.6.4"
   },
   "plugins": [
     {
       "name": "mugiwara",
       "description": "The Straw Hat crew of AI agents and skills: brainstorm, plan, execute, checkpoint, quality, gates, review, security, healing.",
-      "version": "0.6.3",
+      "version": "0.6.4",
       "source": "./"
     }
   ]

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "mugiwara",
   "displayName": "Mugiwara",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "The Straw Hat crew of AI agents and skills: brainstorm, plan, execute, checkpoint, quality, gates, review, security, healing.",
   "author": {
     "name": "ionivetech"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mugiwara",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "The Straw Hat crew of AI agents and skills: brainstorm, plan, execute, checkpoint, quality, gates, review, security, healing.",
   "author": {
     "name": "ionivetech"

package/.cursor-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "mugiwara",
   "displayName": "Mugiwara",
   "description": "The Straw Hat crew of AI agents and skills: brainstorm, plan, execute, checkpoint, quality, gates, review, security, healing.",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "author": {
     "name": "ionivetech"
   },

package/.kimi-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mugiwara",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "The Straw Hat crew of AI agents and skills: brainstorm, plan, execute, checkpoint, quality, gates, review, security, healing.",
   "author": {
     "name": "ionivetech"

package/.opencode/mugiwara-helpers.mjs

@@ -93,6 +93,7 @@ export const DEFAULT_CONFIG_LINES = [
   'mode=guided',
   'branch=feature/{type}-{issue}-{slug}',
   'commit=conventional',
+  'auto_commit=on',
   'coverage_new=90',
   'coverage_modified=80',
   'review_depth=full',

package/.opencode/plugins/mugiwara.mjs

@@ -6,6 +6,11 @@
 // single export because OpenCode's legacy loader calls every exported function
 // as a plugin (same constraint ponytail documents).
 //
+// Crew COLORS come from references/wave-banners.md (single source, shared
+// references dir); the CREW map below is the cold-path
+// fallback only. Temperature/steps stay here (runtime tuning, not banner
+// material).
+//
 // Install: add to opencode.json
 //   { "plugin": ["@ionivetech/mugiwara"] }
 // or from the git repo:
@@ -22,26 +27,47 @@ const contentDir = join(__dirname, '..', '..', 'content');
 const skillsDir = join(contentDir, 'skills');
 const agentsDir = join(contentDir, 'agents');
 
-const ANNOUNCE =
-  "Mugiwara crew available. The workflow auto-activates for non-trivial requests — no need to call `/using-mugiwara` at session start (it is an optional router). Run the crew pipeline inline in the main conversation: embody ONE crew role at a time using its skill, wait for its report, then move to the next. Never Task-dispatch a crew member — the crew runs in the main thread; subagents only for [PARALLEL] task batches, concurrent review/security, and independent re-run checks. Progress shows as checkpoint reports at wave/stage boundaries, pausing on failure or risk. Switch mode with `/mugiwara` (guided|semi|auto). See skills/mugiwara-workflow.";
-
+// Colors are fallbacks — the wave-banners table is the source of truth.
 const CREW = {
   'luffy-orchestrator': { color: '#ef4444', temperature: 0.2, steps: 30 },
-  'usopp-brainstorm': { color: '#f59e0b', temperature: 0.6, steps: 30 },
+  'usopp-brainstorm': { color: '#b45309', temperature: 0.6, steps: 30 },
   'nami-planner': { color: '#f97316', temperature: 0.2, steps: 30 },
   'zoro-execution': { color: '#22c55e', temperature: 0.1, steps: 50 },
-  'chopper-checkpoint': { color: '#3b82f6', temperature: 0.1, steps: 30 },
-  'sanji-quality': { color: '#a855f7', temperature: 0.1, steps: 40 },
+  'chopper-checkpoint': { color: '#60a5fa', temperature: 0.1, steps: 30 },
+  'sanji-quality': { color: '#facc15', temperature: 0.1, steps: 40 },
   'franky-gates': { color: '#06b6d4', temperature: 0.1, steps: 40 },
   'robin-reviewer': { color: '#8b5cf6', temperature: 0.2, steps: 30 },
   'jinbe-security': { color: '#6366f1', temperature: 0.2, steps: 30 },
-  'brook-healing': { color: '#ec4899', temperature: 0.1, steps: 30 },
+  'brook-healing': { color: '#2dd4bf', temperature: 0.1, steps: 30 },
   'skeptic-verifier': { color: '#64748b', temperature: 0.1, steps: 30 },
   'eval-runner': { color: '#14b8a6', temperature: 0.2, steps: 30 },
   'resume-coordinator': { color: '#d97706', temperature: 0.2, steps: 30 },
   'memory-keeper': { color: '#d946ef', temperature: 0.2, steps: 30 },
 };
 
+// Read the crew color table (single source of truth, shared references/).
+// Returns {} on any failure — callers fall back to the CREW map. The regex
+// anchors the exact table shape: | agent-id | role | hex | ansi-256 | emoji |
+function readBannerColors() {
+  try {
+    const path = join(__dirname, '..', '..', 'references', 'wave-banners.md');
+    if (!existsSync(path)) return {};
+    const text = readFileSync(path, 'utf8');
+    // null-prototype: agent ids are trusted repo content, but a future
+    // `__proto__` id must never write the object's prototype
+    const colors = Object.create(null);
+    for (const m of text.matchAll(/^\| ([\w-]+) \| [^|]+ \| (#[0-9a-f]{6}) \| (\d+) \| (\S+) \|\r?$/gm)) {
+      colors[m[1]] = m[2];
+    }
+    return colors;
+  } catch {
+    return {};
+  }
+}
+
+const ANNOUNCE =
+  "Mugiwara crew available. The workflow auto-activates for non-trivial requests — no need to call `/using-mugiwara` at session start (it is an optional router). Run the crew pipeline inline in the main conversation: embody ONE crew role at a time using its skill, wait for its report, then move to the next. Never Task-dispatch a crew member — the crew runs in the main thread; subagents only for [PARALLEL] task batches, concurrent review/security, and independent re-run checks. Progress shows as checkpoint reports at wave/stage boundaries, pausing on failure or risk. Switch mode with `/mugiwara` (guided|semi|auto). See skills/mugiwara-workflow.";
+
 function parseFrontmatter(text) {
   const m = text.match(/^---\r?\n([\s\S]*?)\r?\n---\r?\n?/);
   if (!m) throw new Error('Missing frontmatter fence (---)');
@@ -68,6 +94,7 @@ function permissionFromScope(scope) {
 
 function readAgents(stepsEnabled = true) {
   const agents = {};
+  const bannerColors = readBannerColors();
   let files;
   try {
     files = readdirSync(agentsDir).filter((f) => f.endsWith('.md'));
@@ -99,6 +126,11 @@ function readAgents(stepsEnabled = true) {
       agents[name] = { ...agents[name], ...rest };
       if (stepsEnabled) agents[name] = { ...agents[name], steps };
     }
+    // color comes from the wave-banners table (single source); CREW fallback
+    // covers agents the table does not list (and vice versa)
+    if (bannerColors[name] || CREW[name]) {
+      agents[name] = { ...agents[name], color: bannerColors[name] ?? CREW[name].color };
+    }
     const perm = permissionFromScope(parsed.data['write-scope']);
     if (perm && agents[name].mode === 'subagent') agents[name].permission = perm;
   }

package/README.md

@@ -245,6 +245,7 @@ Switch mode any time: `/mugiwara guided | semi | auto`. Or edit `.mugiwara/confi
 | `mode`              | guided                          | guided / semi / auto                           |
 | `branch`            | `feature/{type}-{issue}-{slug}` | Branch naming                                  |
 | `commit`            | conventional                    | conventional / gitmoji / plain                 |
+| `auto_commit`       | on                              | on / off — off disables commit+push in guided/semi |
 | `coverage_new`      | 90                              | Coverage threshold for new files (%)           |
 | `coverage_modified` | 80                              | Coverage threshold for modified files (%)      |
 | `review_depth`      | full                            | full / standard / quick — Robin's review depth |

package/content/agents/zoro-execution.md

@@ -31,7 +31,7 @@ Wave 3 of `mugiwara-workflow`, with the plan doc path.
 ## Rules
 
 1. Follow `mugiwara-execution` exactly (ingestion, dispatch rules, per-task discipline).
-2. Before touching code, follow the mode's branch/commit rule (per mode config): `guided` ASKS THE USER (auto branch for the mission or current branch; auto commit per task or user-controlled checkpoints); `semi`/`auto` auto-create the mission branch per the config `branch` key and auto-commit per task in the config `commit` style — no ask. Record the mode + branch + commit style in the decision log (`.mugiwara/logs/`) and todos. State-mutating consent still applies in every mode.
+2. Before touching code, follow the mode's branch/commit rule (per mode config): `guided` ASKS THE USER (auto branch for the mission or current branch; auto commit per task or user-controlled checkpoints); `semi` auto-creates the mission branch per the config `branch` key and auto-commits per task in the config `commit` style — no ask; `auto` same but commits ALWAYS. `auto_commit=off` (config, default on): guided and semi leave all changes uncommitted for the user — no commits, no push; auto mode ignores it. Record the mode + branch + commit style + auto_commit in the decision log (`.mugiwara/logs/`) and todos. State-mutating consent still applies in every mode.
 3. Sequential tasks and chains run INLINE in the main thread — no subagent round-trips for ordered work. Only `[PARALLEL]` task batches dispatch WORKER subagents (one task per worker); never another crew member; return your execution report inline to the conversation, which routes to Chopper.
 4. Every task done = evidence attached (command output / file inspection); run acceptance criteria, do not assert them.
 5. Apply `mugiwara-git` as you go: atomic commits per LOGICAL task (when auto-commit is on) — a task is a meaningful unit of work, not a micro-step; adjacent trivial changes fold into the neighboring task's commit. Save-points before risky work, commit style matched to the repo history.

package/content/skills/mugiwara-execution/SKILL.md

@@ -14,8 +14,10 @@ Execute the plan exactly. No silent reordering, no skipping steps, no "close eno
 
 ## Ask before working
 
-- `guided`: before touching any code, ASK THE USER — auto branch (dedicated mission branch, recommended, keeps `main` clean) or work on the current branch; auto commit per task or commit at user-controlled checkpoints.
-- `semi`/`auto`: auto-create the mission branch per the config `branch` key (default `feature/{type}-{issue}-{slug}`) and auto-commit per task using the config `commit` style (default conventional). No branch/commit ask. Record mode + branch + commit style in the decision log (`.mugiwara/logs/YYYY-MM-DD-<mission>.md`) and in `.mugiwara/results/<mission>/todos.md`.
+- `guided`: before touching any code, ASK THE USER — auto branch (dedicated mission branch, recommended, keeps `main` clean) or work on the current branch; auto commit per task or commit at user-controlled checkpoints. With `auto_commit=off`: the branch ask stays, the commit question is skipped — changes stay uncommitted.
+- `semi`: auto-create the mission branch per the config `branch` key; auto-commit per task in the config `commit` style ONLY when `auto_commit=on` (default). Off → leave every task's changes uncommitted; the user commits manually.
+- `auto`: auto-create the branch and auto-commit per task ALWAYS — `auto_commit=off` has no effect in auto mode.
+Record mode + branch + commit style + `auto_commit` in the decision log (`.mugiwara/logs/YYYY-MM-DD-<mission>.md`) and in `.mugiwara/results/<mission>/todos.md` — every mode.
 
 Code to the installed version's docs, not memory: `_shared/references/source-grounding.md`.
 
@@ -28,9 +30,10 @@ Before touching code:
 1. Create `.mugiwara/results/<mission>/todos.md` — one checkbox per task, derived from the plan.
 2. Check each box off only when the task completes, WITH its evidence link (`[path](relative/path)`, clickable).
 3. Re-check the whole list after each task and after each batch; unmarked boxes mean the mission is not done.
-4. Mirror every change into the host's native todo tool (`todowrite` on
-   opencode; `TaskUpdate` on Claude Code; none on tier 2/3 — plan doc only).
-   Per-host table: `docs/reference/harness-matrix.md`.
+4. Mirror EVERY transition into the host's native todo tool (`todowrite` on
+   opencode; `TaskUpdate` on Claude Code; none on tier 2/3 — plan doc only) in
+   the SAME response the task's evidence lands — one transition per call,
+   never batched at wave end. Per-host table: `docs/reference/harness-matrix.md`.
 
 ## Wave execution
 
@@ -63,12 +66,10 @@ Real worker dispatch exists only where the harness has subagents — tier 1
 (Claude Code, opencode) plus Copilot. Gate the context-pressure trigger on
 that capability: if the harness cannot dispatch, do not promise fresh workers.
 
-Where workers are unavailable and context pressure crosses the threshold, fall
-back to the mechanism that already exists: write a savepoint, run the
-checkpoint, and suggest a fresh session via `resume`. Announce the fallback:
-
-`⚠ context 62% — no worker dispatch on this harness; savepoint written,
-resume in a fresh session (plan order unchanged).`
+Where workers are unavailable and context pressure crosses the threshold:
+write a savepoint, run the checkpoint, and suggest a fresh session via
+`resume`. Announce: `⚠ context 62% — no worker dispatch on this harness;
+savepoint written, resume in a fresh session (plan order unchanged).`
 
 ## Batch resume
 

package/content/skills/mugiwara-orchestration/SKILL.md

@@ -35,7 +35,7 @@ In `auto` mode the AI decides everything; any requirement that stays unclear aft
 
 ## Mode read (Wave 0)
 
-Read the runtime mode via mode config at Wave 0: `.mugiwara/config` (project) then `~/.mugiwara/config` (global); a key missing from both = `guided`. Record the active mode in the decision log. Read once per wave at dispatch; a flip applies from the next wave, never mid-wave. Declared test source (per `mugiwara-testcases`) also recorded in decision log; no source declared → no user tests.
+Read the runtime mode via mode config at Wave 0: `.mugiwara/config` (project) then `~/.mugiwara/config` (global); a key missing from both = `guided`. Record the active mode AND `auto_commit` (default on) in the decision log. Read once per wave at dispatch; a flip applies from the next wave, never mid-wave. Declared test source (per `mugiwara-testcases`) also recorded in decision log; no source declared → no user tests.
 
 ## Request classifier (Wave 0) — 8 classes
 
@@ -80,7 +80,10 @@ Shortcuts ("skip X", "just do it") reroute work inside the pipeline — never ou
 
 ## Wave transitions (visibility)
 
-Banner `## Wave N — <crew>` opens every wave; a skip is recorded, never silent. See `references/check-ins.md`.
+Banner in the owning agent's color opens every wave — terminal equals line
+`===== WAVE 3 — ZORO (EXECUTION) =====`, markdown UI emoji heading
+`## ⚔️ WAVE 3 — ZORO (EXECUTION)`. Spec + colors: `_shared/references/wave-banners.md`.
+A skip is recorded, never silent.
 
 ## Work splitting
 
@@ -96,7 +99,7 @@ Recognize the in-session phrase `mugiwara mode <guided|semi|auto>`: write the pr
 
 ## Closure (Wave 9)
 
-Gate — every task's acceptance criteria verified, every gate passed, findings resolved or deferred with an owner, blocker ledger reviewed. Step results `results/<mission>/01..05` are evidence — kept, never deleted; only consumed cross-artifacts (`logs/`, `spec/`, `review/`, `issues/`) are removed. Run `scripts/savepoint.sh <mission>` to write final state, then `scripts/mission-report.sh <mission>` to generate the aggregate mission report at `.mugiwara/reports/YYYY-MM-DD-<mission>.md`. Write the closure summary to `.mugiwara/results/<mission>/06-closure.md`. The plan doc stays untouched. Full detail: `references/closure.md`.
+Gate — every task's acceptance criteria verified, every gate passed, findings resolved or deferred with an owner, blocker ledger reviewed. Step results `results/<mission>/01..05` are evidence — kept, never deleted; only consumed cross-artifacts (`logs/`, `spec/`, `review/`, `issues/`) are removed. Run `scripts/savepoint.sh <mission>` to write final state, then `scripts/mission-report.sh <mission>` to generate the aggregate mission report at `.mugiwara/reports/YYYY-MM-DD-<mission>.md`. Write the closure summary to `.mugiwara/results/<mission>/06-closure.md`. The plan doc stays untouched. Full detail: `references/closure.md`. With `auto_commit=off` (guided/semi): skip the save-point commit and push — hand the uncommitted tree + verdict to the user; auto always pushes.
 
 ## Spirit vs letter
 

package/content/skills/mugiwara-orchestration/references/check-ins.md

@@ -27,15 +27,26 @@ After every wave AND at the end of each execution batch, verify:
    never verbatim instructions.
 7. **Host todo synced** — the main thread mirrors the plan doc's task list into the host's native todo mechanism
    (opencode `todowrite`; Claude Code `TaskCreate`/`TaskUpdate`/`TaskList` — `TodoWrite` is deprecated since
-   v2.1.142; tier 2/3 hosts have no native tool — plan doc only) and updates it at every task AND wave boundary
-   (seed it at Wave 2, mark done/in_progress as tasks land). The host todo is a mirror; the plan doc stays the
-   source of truth. Per-host table: `docs/reference/harness-matrix.md`.
+   v2.1.142; tier 2/3 hosts have no native tool — plan doc only). Seed it at Wave 2 (tasks + wave list 4-9);
+   update it in the SAME response each task's evidence lands — one transition per call, never deferred to
+   batch or wave end; flip each wave to in_progress when its banner opens. The host todo is a mirror; the plan
+   doc stays the source of truth. A task done in the plan doc but not yet in the host tool is incomplete.
+   Per-host table: `docs/reference/harness-matrix.md`.
 
 By mode (per mode config): `guided` checks in with the user as today; `semi`/`auto` write the check-in verdicts to the decision log without pausing the pipeline.
 
 ## Wave transitions (visibility)
 
-Every wave opens with a visible main-thread banner `## Wave N — <crew> (<skill>)` and closes with the handoff line `→ Wave N+1 — <crew>` (Wave 9: `→ closure`). No wave starts without its banner. A wave intentionally omitted is never silent — record wave, owner, and reason in the decision log before moving on. The user must always see which crew runs now and who takes over next.
+Every wave opens with a colored banner in the owning agent's color and closes
+with the handoff line `→ Wave N+1 — <crew>` (Wave 9: `→ closure`). Terminal:
+equals line `===== WAVE 3 — ZORO (EXECUTION) =====` wrapped in ANSI truecolor
+`\x1b[38;2;R;G;Bm...\x1b[0m` (256 fallback `38;5;N`); markdown UIs: emoji
+heading `## ⚔️ WAVE 3 — ZORO (EXECUTION)`, no ANSI. The literal `WAVE N —`
+text must stay exact (savepoint's heal counter greps `wave 8`). Colors, emoji,
+and the full spec: `_shared/references/wave-banners.md`. No wave starts without its banner. A wave intentionally
+omitted is never silent — record wave, owner, and reason in the decision log
+before moving on. The user must always see which crew runs now and who takes
+over next.
 
 ## On drift
 

package/content/skills/mugiwara-orchestration/references/closure.md

@@ -22,6 +22,15 @@ Save-point commit → push branch with plain `git push -u origin <branch>` → w
 verdict to user. Crew never creates PR, never merges, never deploys. On push
 failure, fall back to local closure report.
 
+**`auto_commit=off` (guided/semi only).** No save-point commit, no push — the
+working tree stays uncommitted. Write the verdict file exactly as usual, then
+hand the user: the branch name, the exact commands to commit and push
+(`git status` first, then `git add` of the mission's files only — never bare
+`git add -A`, which would stage unrelated or secret files — then
+`git commit -m "<suggested message>" && git push -u origin <branch>`), and the
+verdict pointer. In `auto` mode `auto_commit` is ignored — the terminal step
+runs unchanged.
+
 When this mission is a sub-mission of a team initiative, after closure run
 `bun scripts/initiative.ts set-status <initiative-plan> --id <sub-id> --status done`.
 When all sub-missions show `[x]`, present initiative-level closure summary.

package/content/skills/mugiwara-pr/SKILL.md

@@ -14,32 +14,25 @@ Mugiwara's evidence lands where the team reviews. At terminal, push the mission
 
 ## Verdict file
 
-Write `.mugiwara/results/<mission>/07-pr-verdict.md`:
-
-- **PR Title first** — `{type}: {Title Case summary}` — mandatory Title case (significant words capitalized), e.g. `Feat: Add Evidence Links To Mugiwara Reports`.
-- **PR Body** — everything below lives in the body, in this exact order:
-  1. Summary — goal, mode, waves, task count.
-  2. Per-wave evidence table — wave, task, status, evidence link (`[path](relative/path)`).
-  3. Gates — quality, gates, review + security dispositions, each verdict with evidence.
-  4. Review & security — findings with dispositions.
-  5. User tests — when declared, the ATDD oracle result (per `mugiwara-testcases`), from real runs, never asserted.
-  6. Closure report link — `[06-closure.md](.mugiwara/results/<mission>/06-closure.md)`.
-  7. Verdict — PASS / FAIL with the single blocking reason, if any.
+Write `.mugiwara/results/<mission>/07-pr-verdict.md` — ONE document that IS
+the ready PR material (no separate report + PR-body copy). Exact order —
+Title → Summary (key-point bullets) → What changed (compact file inventory
+paragraph) → Per-wave evidence → Tests → Checks → Verdict. Full spec:
+`references/verdict-format.md`.
 
 ## PR summary
 
-Prepare the PR description so the user can paste and submit without writing it:
-
-- Title — `{type}: {Title Case summary}` (mandatory Title case), FIRST in the paste block.
-- Body — the verdict-file PR summary block (what changed, evidence, checks).
-- Body order — Summary → Per-wave evidence → Gates → Review & security → User tests → Closure report link → Verdict (mirrors the verdict file).
-- Validate every interpolated value against the safe charset and quote it.
+The verdict file IS the PR summary. No second block: the user pastes the file
+— title line into the PR title, the rest into the body. Order mirrors the
+verdict file (title → summary → what changed → per-wave evidence → tests →
+checks → verdict). Validate every interpolated value against the safe charset
+and quote it.
 
 The summary is material, never posted — the crew stops at push.
 
 ## Handoff rule
 
-Push the branch + write the verdict file at terminal, after every wave passes (never a draft state — the user opens the PR when they choose). The verdict is delivered as a file, not posted; the user pastes it into their PR. Never per-wave (reviewer noise).
+Push the branch + write the verdict file at terminal, after every wave passes (never a draft state — the user opens the PR when they choose). The verdict is delivered as a file, not posted; the user pastes it into their PR. Never per-wave (reviewer noise). With `auto_commit=off` (guided/semi only): nothing to push — write the verdict file, hand the UNCOMMITTED working tree to the user with the exact commit + push commands; `auto` mode always pushes.
 
 ## Push adapter (plain git, no gh)
 

package/content/skills/mugiwara-pr/references/verdict-format.md

@@ -0,0 +1,31 @@
+# Verdict file format
+
+`.mugiwara/results/<mission>/07-pr-verdict.md` — ONE document that IS the
+ready PR material (the user copies the title line and the body as-is). No
+separate report section plus a PR-body copy: one flow, in this exact order:
+
+1. **Title** — `# {type}: {Title Case summary}` — mandatory Title case, e.g.
+   `# Feat: Add Evidence Links To Mugiwara Reports`.
+2. **Summary** — goal, mode, waves, task count, branch/stacking note,
+   closure report link (`[06-closure.md](.mugiwara/results/<mission>/06-closure.md)`);
+   then the mission's key points as compact bullets (what each defect/feature
+   does — never a file list).
+3. **What changed** — ONE compact paragraph, file inventory only: `<N> files:
+   <comma-separated paths>, <grouped counts>, docs (dir or file list), README.`
+   Feature detail lives in Summary, not here.
+4. **Per-wave evidence** — wave, task, status, evidence link
+   (`[path](relative/path)`). Gates, review, security, and heal rows live here
+   with their dispositions.
+5. **Tests** — captured test counts (never asserted); the ATDD oracle result
+   when user tests were declared (per `mugiwara-testcases`).
+6. **Checks** — one `- [x]` checkbox bullet per gate: typecheck, tests
+   (`N/N`), build, content/manifest/doc-integrity, lane-base, npm pack,
+   evals + retrieval, verify-install (`N/N` pointers), gate-selftest
+   (`N/N` mutations prove red).
+7. **Verdict** — PASS / FAIL with the single blocking reason, if any.
+
+The file IS the PR summary. No second block: the user pastes the file — title
+line into the PR title, the rest into the body. Order mirrors the verdict file
+(title → summary → what changed → per-wave evidence → tests → checks →
+verdict). Validate every interpolated value against the safe charset and quote
+it.

package/content/skills/mugiwara-workflow/SKILL.md

@@ -46,7 +46,10 @@ Waves are phases, not files. The plan doc defines them. The harness runs inline.
 
 **One role at a time.** The main thread embodies ONE crew role per response — completes that role's report, then moves to the next. Never role-bleeds two personas into one response; never starts the next role before the current one returns its output.
 
-**Banners.** Every wave opens with a visible main-thread heading `## Wave N — <crew> (<skill>)` and closes with the handoff line `→ Wave N+1 — <crew>`. No wave starts without its banner.
+**Banners.** Every wave opens with a banner in the owning agent's color and
+closes with a handoff line — terminal ANSI equals line, markdown-UIs emoji
+heading; handoff `→ Wave 4 — Chopper (Checkpoint)`. Keep literal `WAVE N —`
+(savepoint's heal counter greps it). Spec + colors: `_shared/references/wave-banners.md`.
 
 **Subagents only for parallelism.** `[PARALLEL]` task batches, parallel review, parallel heal workers. Crew members never dispatch crew members.
 
@@ -103,6 +106,7 @@ Archive, never delete: run `mugiwara archive <mission>` — folds `logs/`, `spec
 5. Plan doc is source of truth from Wave 2.
 6. Resume via `resume-coordinator` before any wave — never restart.
 7. Push branch + hand verdict to user; crew never merges or deploys.
+8. Host todo mirrors the plan doc every task + wave — same response as evidence.
 
 ## Iron Law
 

package/dist/mugiwara.js

@@ -188,27 +188,43 @@ var target = {
 };
 
 // src/targets/opencode.ts
-import { existsSync as existsSync2, readdirSync as readdirSync2, copyFileSync as copyFileSync2, mkdirSync as mkdirSync2 } from "node:fs";
+import { existsSync as existsSync2, readdirSync as readdirSync2, copyFileSync as copyFileSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2 } from "node:fs";
 import { dirname as dirname2, join as join2 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var here2 = dirname2(fileURLToPath2(import.meta.url));
 var COMMANDS_SRC2 = join2(here2, "..", "..", ".opencode", "commands");
+var BANNER_TABLE = join2(here2, "..", "..", "references", "wave-banners.md");
 var CREW = {
   "luffy-orchestrator": { color: "#ef4444", temperature: 0.2, steps: 15 },
-  "usopp-brainstorm": { color: "#f59e0b", temperature: 0.6, steps: 15 },
+  "usopp-brainstorm": { color: "#b45309", temperature: 0.6, steps: 15 },
   "nami-planner": { color: "#f97316", temperature: 0.2, steps: 15 },
   "zoro-execution": { color: "#22c55e", temperature: 0.1, steps: 30 },
-  "chopper-checkpoint": { color: "#3b82f6", temperature: 0.1, steps: 15 },
-  "sanji-quality": { color: "#a855f7", temperature: 0.1, steps: 10 },
+  "chopper-checkpoint": { color: "#60a5fa", temperature: 0.1, steps: 15 },
+  "sanji-quality": { color: "#facc15", temperature: 0.1, steps: 10 },
   "franky-gates": { color: "#06b6d4", temperature: 0.1, steps: 10 },
   "robin-reviewer": { color: "#8b5cf6", temperature: 0.2, steps: 15 },
   "jinbe-security": { color: "#6366f1", temperature: 0.2, steps: 15 },
-  "brook-healing": { color: "#ec4899", temperature: 0.1, steps: 20 },
+  "brook-healing": { color: "#2dd4bf", temperature: 0.1, steps: 20 },
   "skeptic-verifier": { color: "#64748b", temperature: 0.1, steps: 12 },
   "eval-runner": { color: "#14b8a6", temperature: 0.2, steps: 15 },
   "resume-coordinator": { color: "#d97706", temperature: 0.2, steps: 10 },
   "memory-keeper": { color: "#d946ef", temperature: 0.2, steps: 8 }
 };
+function readBannerColors() {
+  try {
+    if (!existsSync2(BANNER_TABLE))
+      return {};
+    const text = readFileSync2(BANNER_TABLE, "utf8");
+    const colors = Object.create(null);
+    for (const m of text.matchAll(/^\| ([\w-]+) \| [^|]+ \| (#[0-9a-f]{6}) \| (\d+) \| (\S+) \|\r?$/gm)) {
+      colors[m[1]] = m[2];
+    }
+    return colors;
+  } catch {
+    return {};
+  }
+}
+var BANNER_COLORS = readBannerColors();
 function permissionFromScope(scope) {
   if (scope === "source")
     return { edit: "allow" };
@@ -219,8 +235,11 @@ function permissionFromScope(scope) {
 function agentFrontmatter(name, description, internal, writeScope) {
   const crew = CREW[name];
   const lines = [`description: ${description}`, `mode: all`];
+  const color = BANNER_COLORS[name] ?? crew?.color;
+  if (color)
+    lines.push(`color: '${color}'`);
   if (crew) {
-    lines.push(`color: '${crew.color}'`, `temperature: ${crew.temperature}`, `steps: ${crew.steps}`);
+    lines.push(`temperature: ${crew.temperature}`, `steps: ${crew.steps}`);
     const perm = internal ? permissionFromScope(writeScope) : undefined;
     if (perm) {
       lines.push("permission:");
@@ -477,21 +496,21 @@ var targets = { claude: target, opencode: target2, copilot: target3, gemini: tar
 var TARGET_IDS = Object.keys(targets);
 
 // src/installer.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync2, readdirSync as readdirSync3, writeFileSync as writeFileSync2, copyFileSync as copyFileSync3, rmSync, lstatSync } from "node:fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync3, readdirSync as readdirSync3, writeFileSync as writeFileSync2, copyFileSync as copyFileSync3, rmSync, lstatSync } from "node:fs";
 import { dirname as dirname3, join as join5 } from "node:path";
 import { homedir } from "node:os";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 var CONTENT_DIR = join5(dirname3(fileURLToPath3(import.meta.url)), "..", "content");
-var pkg = JSON.parse(readFileSync2(join5(dirname3(fileURLToPath3(import.meta.url)), "..", "package.json"), "utf8"));
+var pkg = JSON.parse(readFileSync3(join5(dirname3(fileURLToPath3(import.meta.url)), "..", "package.json"), "utf8"));
 var VERSION = pkg.version;
 function collectContent() {
   const skillNames = readdirSync3(join5(CONTENT_DIR, "skills"), { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
   const skills = skillNames.map((name) => {
-    const { data, body } = parseFrontmatter(readFileSync2(join5(CONTENT_DIR, "skills", name, "SKILL.md"), "utf8"));
+    const { data, body } = parseFrontmatter(readFileSync3(join5(CONTENT_DIR, "skills", name, "SKILL.md"), "utf8"));
     return { name, data, body, refs: collectRefs(join5(CONTENT_DIR, "skills", name)) };
   });
   const agents = readdirSync3(join5(CONTENT_DIR, "agents")).filter((f) => f.endsWith(".md")).map((f) => {
-    const { data, body } = parseFrontmatter(readFileSync2(join5(CONTENT_DIR, "agents", f), "utf8"));
+    const { data, body } = parseFrontmatter(readFileSync3(join5(CONTENT_DIR, "agents", f), "utf8"));
     return { name: f.replace(/\.md$/, ""), data, body, refs: [], internal: data.internal === "true" };
   });
   const sharedRefsDir = join5(dirname3(CONTENT_DIR), "references");
@@ -500,7 +519,7 @@ function collectContent() {
     for (const f of readdirSync3(sharedRefsDir)) {
       if (!f.endsWith(".md"))
         continue;
-      sharedRefs.push({ relPath: f, text: readFileSync2(join5(sharedRefsDir, f), "utf8") });
+      sharedRefs.push({ relPath: f, text: readFileSync3(join5(sharedRefsDir, f), "utf8") });
     }
   }
   return { skills, agents, sharedRefs };
@@ -509,7 +528,7 @@ function collectRefs(skillDir) {
   const refsDir = join5(skillDir, "references");
   if (!existsSync4(refsDir))
     return [];
-  return readdirSync3(refsDir, { recursive: true }).map((f) => String(f)).filter((f) => f.endsWith(".md")).map((rel) => ({ relPath: rel, text: readFileSync2(join5(refsDir, rel), "utf8") }));
+  return readdirSync3(refsDir, { recursive: true }).map((f) => String(f)).filter((f) => f.endsWith(".md")).map((rel) => ({ relPath: rel, text: readFileSync3(join5(refsDir, rel), "utf8") }));
 }
 function installTo(target10, opts) {
   const { scope, projectDir, dryRun = false, force = false } = opts;
@@ -520,7 +539,7 @@ function installTo(target10, opts) {
   const result = { written: [], skipped: [], backedUp: [], notes: [] };
   const writeOne = (absPath, text) => {
     if (existsSync4(absPath)) {
-      if (readFileSync2(absPath, "utf8") === text) {
+      if (readFileSync3(absPath, "utf8") === text) {
         result.skipped.push(absPath);
         return;
       }
@@ -641,7 +660,7 @@ function ensureProjectGitignore(projectDir, opts = {}) {
   const { dryRun = false } = opts;
   const path = join5(projectDir, ".gitignore");
   assertNotSymlink(path);
-  let existing = existsSync4(path) ? readFileSync2(path, "utf8") : "";
+  let existing = existsSync4(path) ? readFileSync3(path, "utf8") : "";
   if (existing) {
     if (existing.includes(GITIGNORE_BLOCK_START) && existing.includes(".mugiwara/state/")) {
       return { appended: false, notes: [] };
@@ -649,7 +668,7 @@ function ensureProjectGitignore(projectDir, opts = {}) {
     const hadOld = existing.includes(GITIGNORE_MARKER) || existing.includes(GITIGNORE_BLOCK_START);
     if (hadOld) {
       const clean = removeProjectGitignore(projectDir, { dryRun });
-      existing = clean.removed ? existsSync4(path) ? readFileSync2(path, "utf8") : "" : existing;
+      existing = clean.removed ? existsSync4(path) ? readFileSync3(path, "utf8") : "" : existing;
     }
   }
   const separator = existing.length && !existing.endsWith(`
@@ -666,7 +685,7 @@ function removeProjectGitignore(projectDir, { dryRun = false } = {}) {
   assertNotSymlink(path);
   if (!existsSync4(path))
     return { removed: false, notes: [] };
-  const current = readFileSync2(path, "utf8");
+  const current = readFileSync3(path, "utf8");
   const delimited = current.includes(GITIGNORE_BLOCK_START);
   let cleaned;
   if (delimited) {
@@ -709,13 +728,13 @@ function removeProjectGitignore(projectDir, { dryRun = false } = {}) {
 }
 
 // src/manifest.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "node:fs";
 import { dirname as dirname4, join as join6 } from "node:path";
 function manifestPath({ scope, projectDir, home }) {
   return scope === "global" ? join6(home, ".mugiwara", "manifest.json") : join6(projectDir, ".mugiwara", "manifest.json");
 }
 function readManifest(file) {
-  return existsSync5(file) ? JSON.parse(readFileSync3(file, "utf8")) : null;
+  return existsSync5(file) ? JSON.parse(readFileSync4(file, "utf8")) : null;
 }
 function writeManifest(file, data) {
   mkdirSync4(dirname4(file), { recursive: true });
@@ -724,7 +743,7 @@ function writeManifest(file, data) {
 }
 
 // src/mission.ts
-import { existsSync as existsSync6, rmSync as rmSync2, readFileSync as readFileSync4, readdirSync as readdirSync4, mkdirSync as mkdirSync5, appendFileSync } from "node:fs";
+import { existsSync as existsSync6, rmSync as rmSync2, readFileSync as readFileSync5, readdirSync as readdirSync4, mkdirSync as mkdirSync5, appendFileSync } from "node:fs";
 import { join as join7 } from "node:path";
 function activeActor(projectDir) {
   const stateDir = join7(projectDir, ".mugiwara", "state");
@@ -736,7 +755,7 @@ function activeActor(projectDir) {
     const d = join7(stateDir, mission);
     for (const f of readdirSync4(d).filter((f2) => f2.endsWith(".json"))) {
       try {
-        const s = JSON.parse(readFileSync4(join7(d, f), "utf8"));
+        const s = JSON.parse(readFileSync5(join7(d, f), "utf8"));
         const t = Date.parse(s.updated_at || "") || 0;
         if (!latest || t > latest.updated)
           latest = { actor: s.actor || null, updated: t };
@@ -881,7 +900,7 @@ function archiveMission(projectDir, mission, opts = {}) {
 `;
   if (!dryRun) {
     mkdirSync5(join7(root, "reports"), { recursive: true });
-    const existing = existsSync6(indexFile) ? readFileSync4(indexFile, "utf8") : "";
+    const existing = existsSync6(indexFile) ? readFileSync5(indexFile, "utf8") : "";
     if (!existing.split(/\r?\n/).some((l) => l.startsWith(`- ${mission} —`))) {
       const header = existing ? "" : `# Mission index
 

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "mugiwara",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "The Straw Hat crew of AI agents and skills: brainstorm, plan, execute, checkpoint, quality, gates, review, security, healing.",
   "contextFileName": "GEMINI.md"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ionivetech/mugiwara",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "description": "The Straw Hat crew of AI agents and skills: brainstorm, plan, execute, checkpoint, quality, gates, review, security, self-healing. Installs into Claude Code, opencode, Copilot, Gemini, Codex, Cursor, Kimi, pi, Windsurf, Cline, Kilo, Antigravity.",
   "homepage": "https://github.com/ionivetech/mugiwara#readme",
   "repository": {

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "mugiwara",
   "description": "The Straw Hat crew of AI agents and skills: brainstorm, plan, execute, checkpoint, quality, gates, review, security, healing.",
-  "version": "0.6.3",
+  "version": "0.6.4",
   "author": {
     "name": "ionivetech"
   },

package/references/wave-banners.md

@@ -0,0 +1,75 @@
+# Wave Banners — formats + crew colors
+
+The single source for wave-banner rendering and crew colors. The opencode
+plugin and the opencode-target generator derive agent UI colors from the table
+below — change a color HERE, never in code. This file is machine-parsed:
+keep the table format exact (one row per agent, pipes, no extra columns).
+
+## Terminal format (ANSI truecolor)
+
+Every wave opens with the banner line in the owning agent's color, and closes
+with a handoff line. Wrap the whole line in the ANSI truecolor of the agent:
+
+```
+\x1b[38;2;R;G;Bm==================== WAVE 3 — ZORO (EXECUTION) ====================\x1b[0m
+→ Wave 4 — Chopper (Checkpoint)
+```
+
+- RGB values come from the `hex` column below; R/G/B are the hex channels in
+  decimal (truecolor `38;2;R;G;B`). If the terminal lacks truecolor, use the
+  `ansi-256` index: `\x1b[38;5;Nm`.
+- Wave 9's handoff: `→ closure`.
+- The literal `WAVE N —` text must stay exact: `scripts/savepoint.sh` counts
+  heal cycles by grepping `wave 8` (case-insensitive) in the trace. A banner
+  that drops the literal silently resets the heal loop.
+- Never convey the wave by color alone — the crew name and emoji always
+  accompany the color.
+
+## UI format (markdown UIs)
+
+Rich UIs (Claude Code UI, VSCode, Codex) strip or garble ANSI escapes. Emit
+the emoji-heading form instead — no ANSI, no equals line:
+
+```
+## ⚔️ WAVE 3 — ZORO (EXECUTION)
+→ Wave 4 — Chopper (Checkpoint)
+```
+
+Same literal `WAVE N —` rule applies.
+
+## Crew colors
+
+| agent-id | role | hex | ansi-256 | emoji |
+|----------|------|-----|----------|-------|
+| luffy-orchestrator | Luffy | #ef4444 | 196 | 🏴‍☠️ |
+| usopp-brainstorm | Usopp | #b45309 | 130 | 🎯 |
+| nami-planner | Nami | #f97316 | 208 | 🧭 |
+| zoro-execution | Zoro | #22c55e | 34 | ⚔️ |
+| chopper-checkpoint | Chopper | #60a5fa | 75 | 🩺 |
+| sanji-quality | Sanji | #facc15 | 220 | 🍳 |
+| franky-gates | Franky | #06b6d4 | 45 | 🔧 |
+| robin-reviewer | Robin | #8b5cf6 | 99 | 📚 |
+| jinbe-security | Jinbe | #6366f1 | 63 | 🌊 |
+| brook-healing | Brook | #2dd4bf | 43 | 🎻 |
+| skeptic-verifier | Skeptic | #64748b | 245 | 🔍 |
+| eval-runner | EvalRunner | #14b8a6 | 37 | 🧪 |
+| resume-coordinator | Resume | #d97706 | 172 | 🔄 |
+| memory-keeper | MemoryKeeper | #d946ef | 200 | 🧠 |
+| onboarding-guide | Guide | #0ea5e9 | 75 | 🚀 |
+
+Skeptic, EvalRunner, Resume, MemoryKeeper and Guide are internal/dispatch or
+wizard agents — their banners appear only when a wave or worker names them.
+
+## Rules
+
+1. Banner before EVERY wave; handoff after it. No wave starts without its
+   banner (orchestration red flag).
+2. The color comes from this table only — never invent a hex mid-mission.
+3. Terminal variant when the session looks like a terminal; UI variant for
+   markdown-rendering UIs. When unsure, the UI variant is safe everywhere.
+4. Only the crew table's colors and the two SGR forms above (truecolor,
+   256-index) may appear in a banner — never other escape families (OSC,
+   title, cursor, other SGR codes). The banner is a fixed template, not a
+   formatting playground.
+5. Adding a crew member? Add the row here first; the plugin and target
+   generator pick it up automatically.

package/scripts/gate-selftest.ts

@@ -163,6 +163,37 @@ if (!existsSync(patternsFile)) {
   }
 }
 
+// --- D3b mutation: strip the NEW pattern categories → lane-integrity red ---
+console.log('\nD3b — new category strip mutation');
+if (!existsSync(patternsFile)) {
+  console.log('  ⚠  patterns.sh not found, skipping');
+} else {
+  const original = readFileSync(patternsFile, 'utf8');
+  try {
+    // derive the broken list from the LIVE source, stripping the exact tokens
+    // of the v0.6.4 D3 families — a hard-coded baseline rots the moment a
+    // category is added (G3). New family tokens must be added here too.
+    const D3B_FAMILY_TOKENS = new Set([
+      // raw regex tokens as they appear in live SENSITIVE_PATS (backslashes included)
+      'oauth2?/', 'credential', 'sessions?/', 'tokens?/', 'rbac', 'permissions?/', 'acls?/', 'iam/',
+      '\\.p12$', '\\.key$', '\\.pem$', 'migrate/', 'Dockerfile', 'docker-compose', '\\.github/workflows/',
+      'webhooks?/', 'secret/', 'secrets?\\.ya?ml$', '\\.tfvars$', '\\.env$', '\\.env\\.',
+    ]);
+    const live = original.match(/SENSITIVE_PATS="([^"]+)"/)?.[1] ?? '';
+    const broken = live.split('|').filter(t => !D3B_FAMILY_TOKENS.has(t)).join('|');
+    const brokenLine = `SENSITIVE_PATS="${broken}"`;
+    if (broken === live || !live) {
+      console.log('  ⚠  D3b: no D3 family tokens found in live SENSITIVE_PATS — skipping');
+    } else {
+      writeFileSync(patternsFile, original.replace(/SENSITIVE_PATS="[^"]*"/, brokenLine));
+      assert('missing new categories → lane-integrity fails', false, () => run('D3b', 'bun run test -- lane-integrity -t "sensitive-paths"'));
+    }
+  } finally {
+    writeFileSync(patternsFile, original);
+    assert('restored → lane-integrity passes', true, () => run('D3b', 'bun run test -- lane-integrity -t "sensitive-paths"'));
+  }
+}
+
 // --- D4 mutation: zero LOC_TOKENS → lane-integrity red ---
 console.log('\nD4 — churn token mutation');
 if (!existsSync(savepointFile)) {

package/scripts/lane.sh

@@ -23,7 +23,7 @@ CHANGED=$(git diff --name-only "$BASE"..HEAD 2>/dev/null || git diff --name-only
 FILE_COUNT=0
 [ -n "$CHANGED" ] && FILE_COUNT=$(echo "$CHANGED" | wc -l | tr -d ' ')
 
-SENSITIVE=$(echo "$CHANGED" | grep -E "$SENSITIVE_PATS" 2>/dev/null | head -5 | tr '\n' ',' | sed 's/,$//' || true)
+SENSITIVE=$(echo "$CHANGED" | grep -E "$SENSITIVE_PATS" 2>/dev/null | tr '\n' ',' | sed 's/,$//' || true)
 HAS_SENSITIVE=0
 [ -n "$SENSITIVE" ] && HAS_SENSITIVE=1
 

package/scripts/lib/patterns.sh

@@ -4,10 +4,16 @@
 
 # Sensitive-path escalation patterns. A changed file matching any of these
 # always escalates to Lane 3 (Full), regardless of file count. Plural forms
-# included (payments/, migrations/) — the singular-only list missed them (D3).
+# included (payments/, migrations/) and, since v0.6.4, the D3 categories:
+# oauth, credential(s), session(s)/, token(s)/, rbac, permission(s), acl(s)/,
+# iam/, cert keys (.pem/.key/.p12), migrate/, Dockerfile, docker-compose,
+# .github/workflows/, webhooks?/, secret yaml, .tfvars, and .env variants
+# (.env.local, .env.production — .env$ alone missed them, D3 follow-up).
+# Dir-anchored (not bare): oauth2?/, permissions?/, tokens?/, sessions?/,
+# acls?/ — bare forms over-matched docs (oauth-guide.md, permissionless.ts).
 # Deliberately NOT matched: package.json (dependency churn is policy-as-code,
 # not a sensitive lane trigger), authors/ (contains "auth" but never auth/).
-SENSITIVE_PATS="auth/|payment/|payments/|billing/|crypto/|secrets/|\.env$|config/.*key|migration/|migrations/|\.sql$|schema\.|\.prisma$|\.terraform|\.tf$"
+SENSITIVE_PATS="auth/|oauth2?/|payment/|payments/|billing/|crypto/|secrets/|credential|sessions?/|tokens?/|rbac|permissions?/|acls?/|iam/|\.env$|\.env\.|config/.*key|\.p12$|\.key$|\.pem$|migration/|migrations/|migrate/|\.sql$|schema\.|\.prisma$|\.terraform|\.tf$|Dockerfile|docker-compose|\.github/workflows/|webhooks?/|secret/|secrets?\.ya?ml$|\.tfvars$"
 
 # Product surface: paths that count toward file-based lane sizing. Changes
 # outside this surface are docs/config/asset and never escalate to full on

package/src/targets/opencode.ts

@@ -1,5 +1,5 @@
 // src/targets/opencode.ts
-import { existsSync, readdirSync, copyFileSync, mkdirSync } from 'node:fs';
+import { existsSync, readdirSync, copyFileSync, mkdirSync, readFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { stringifyFrontmatter, type FrontmatterData } from '../frontmatter.ts';
@@ -7,6 +7,7 @@ import type { Target } from '../installer.ts';
 
 const here = dirname(fileURLToPath(import.meta.url));
 const COMMANDS_SRC = join(here, '..', '..', '.opencode', 'commands');
+const BANNER_TABLE = join(here, '..', '..', 'references', 'wave-banners.md');
 
 type CrewConfig = {
   color: string;
@@ -15,23 +16,46 @@ type CrewConfig = {
   permission?: Record<string, string>;
 };
 
+// Colors are fallbacks — the wave-banners table is the source of truth.
+// Temperature/steps stay here (runtime tuning, not banner material).
 const CREW: Record<string, CrewConfig> = {
   'luffy-orchestrator': { color: '#ef4444', temperature: 0.2, steps: 15 },
-  'usopp-brainstorm': { color: '#f59e0b', temperature: 0.6, steps: 15 },
+  'usopp-brainstorm': { color: '#b45309', temperature: 0.6, steps: 15 },
   'nami-planner': { color: '#f97316', temperature: 0.2, steps: 15 },
   'zoro-execution': { color: '#22c55e', temperature: 0.1, steps: 30 },
-  'chopper-checkpoint': { color: '#3b82f6', temperature: 0.1, steps: 15 },
-  'sanji-quality': { color: '#a855f7', temperature: 0.1, steps: 10 },
+  'chopper-checkpoint': { color: '#60a5fa', temperature: 0.1, steps: 15 },
+  'sanji-quality': { color: '#facc15', temperature: 0.1, steps: 10 },
   'franky-gates': { color: '#06b6d4', temperature: 0.1, steps: 10 },
   'robin-reviewer': { color: '#8b5cf6', temperature: 0.2, steps: 15 },
   'jinbe-security': { color: '#6366f1', temperature: 0.2, steps: 15 },
-  'brook-healing': { color: '#ec4899', temperature: 0.1, steps: 20 },
+  'brook-healing': { color: '#2dd4bf', temperature: 0.1, steps: 20 },
   'skeptic-verifier': { color: '#64748b', temperature: 0.1, steps: 12 },
   'eval-runner': { color: '#14b8a6', temperature: 0.2, steps: 15 },
   'resume-coordinator': { color: '#d97706', temperature: 0.2, steps: 10 },
   'memory-keeper': { color: '#d946ef', temperature: 0.2, steps: 8 },
 };
 
+// Crew colors from the wave-banners table (single source of truth). Returns
+// {} on any failure — callers fall back to the CREW map. Same table shape as
+// the opencode plugin parses: | agent-id | role | hex | ansi-256 | emoji |
+function readBannerColors(): Record<string, string> {
+  try {
+    if (!existsSync(BANNER_TABLE)) return {};
+    const text = readFileSync(BANNER_TABLE, 'utf8');
+    // null-prototype + CRLF-tolerant: agent ids are trusted repo content, but
+    // a future `__proto__` id must never write the object's prototype
+    const colors: Record<string, string> = Object.create(null);
+    for (const m of text.matchAll(/^\| ([\w-]+) \| [^|]+ \| (#[0-9a-f]{6}) \| (\d+) \| (\S+) \|\r?$/gm)) {
+      colors[m[1]] = m[2];
+    }
+    return colors;
+  } catch {
+    return {};
+  }
+}
+
+const BANNER_COLORS = readBannerColors();
+
 // write-scope is the single source of truth (content/agents/*.md frontmatter),
 // but it is a RULE for user-facing crew agents: they run inline in the main
 // thread, so a runtime permission bound to the active-agent identity would
@@ -50,8 +74,12 @@ function permissionFromScope(scope: string | undefined): Record<string, string |
 function agentFrontmatter(name: string, description: string, internal: boolean, writeScope?: string) {
   const crew = CREW[name];
   const lines = [`description: ${description}`, `mode: all`];
+  // color: wave-banners table wins; CREW fallback for agents the table lacks.
+  // temperature/steps only exist for CREW members (runtime tuning).
+  const color = BANNER_COLORS[name] ?? crew?.color;
+  if (color) lines.push(`color: '${color}'`);
   if (crew) {
-    lines.push(`color: '${crew.color}'`, `temperature: ${crew.temperature}`, `steps: ${crew.steps}`);
+    lines.push(`temperature: ${crew.temperature}`, `steps: ${crew.steps}`);
     const perm = internal ? permissionFromScope(writeScope) : undefined;
     if (perm) {
       lines.push('permission:');