@ionivetech/mugiwara 0.8.1 → 0.9.0

package/scripts/savepoint.sh

@@ -8,6 +8,18 @@ set -u
 
 die() { echo "savepoint: $*" >&2; exit 1; }
 
+# count_boxes <file> <char-class> — count markdown checkboxes.
+# Anchored so prose mentioning "- [x]" is not counted; skips fenced code blocks
+# so documentation examples are not counted; matches [x] and [X] alike. (B3)
+count_boxes() {
+  [ -f "$1" ] || { echo 0; return; }
+  awk -v pat="$2" '
+    /^[[:space:]]*```/ { inblock = !inblock; next }
+    !inblock && $0 ~ ("^[[:space:]]*-[[:space:]]*\\[" pat "\\]") { n++ }
+    END { print n+0 }
+  ' "$1"
+}
+
 MUGIWARA_DIR="${MUGIWARA_DIR:-.mugiwara}"
 
 # optional provider-reported tokens file (T4): --tokens-file <path> JSON {input_tokens, output_tokens}
@@ -51,9 +63,27 @@ if [ -n "$GIT_NAME" ] && [ -n "$GIT_EMAIL" ]; then GIT_ID="$GIT_NAME <$GIT_EMAIL
 
 # --- parse mission args: <mission> [member] [wave] [mode] ---
 MISSION="${1:-${STATE_MISSION:-}}"
+# member: positional > env > config team_member > empty (solo). Never derive
+# silently from git identity — solo vs team is a recorded Flow 0 decision, not
+# an inference. (W3)
 MEMBER="${2:-${STATE_MEMBER:-}}"
+if [ -z "$MEMBER" ] && [ -f "$MUGIWARA_DIR/config" ]; then
+  MEMBER=$(grep -E '^team_member=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
+fi
 WAVE="${3:-${STATE_WAVE:-1}}"
-MODE="${4:-${STATE_MODE:-guided}}"
+# mode: positional > env > project config > global config > guided. The hook
+# passes it positionally; direct script and CLI calls must fall back to config
+# or 11 of 12 harnesses record the wrong mode. (W1)
+MODE="${4:-${STATE_MODE:-}}"
+if [ -z "$MODE" ]; then
+  for _cfg in "$MUGIWARA_DIR/config" "$HOME/.mugiwara/config"; do
+    [ -f "$_cfg" ] || continue
+    _m=$(grep -E '^mode=' "$_cfg" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
+    [ -n "$_m" ] && { MODE="$_m"; break; }
+  done
+fi
+MODE="${MODE:-guided}"
+case "$MODE" in guided|semi|auto) ;; *) MODE="guided" ;; esac
 # Triage lane (M7): the lane Luffy assigned at Flow 0. Without it savepoint
 # recomputed the lane from file counts alone and silently discarded the
 # triage decision — a Lane 3 mission recorded itself as "direct". Explicit
@@ -79,7 +109,7 @@ esac
 # verbosity from config (project .mugiwara/config), default normal; env override
 VERBOSITY="${STATE_VERBOSITY:-normal}"
 if [ -f "$MUGIWARA_DIR/config" ]; then
-  CFG_VERBOSITY=$(grep -E '^verbosity=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '[:space:]')
+  CFG_VERBOSITY=$(grep -E '^verbosity=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
   [ -n "$CFG_VERBOSITY" ] && VERBOSITY="$CFG_VERBOSITY"
 fi
 case "$VERBOSITY" in
@@ -90,7 +120,7 @@ esac
 # heal_max_cycles from config (project .mugiwara/config), default 3; env override
 HEAL_MAX_CYCLES="${STATE_HEAL_MAX_CYCLES:-3}"
 if [ -f "$MUGIWARA_DIR/config" ]; then
-  CFG_HEAL_MAX=$(grep -E '^heal_max_cycles=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '[:space:]')
+  CFG_HEAL_MAX=$(grep -E '^heal_max_cycles=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
   [ -n "$CFG_HEAL_MAX" ] && HEAL_MAX_CYCLES="$CFG_HEAL_MAX"
 fi
 case "$HEAL_MAX_CYCLES" in
@@ -101,7 +131,7 @@ esac
 # delegate_threshold from config (project .mugiwara/config), default 60; env override
 DELEGATE_THRESHOLD="${STATE_DELEGATE_THRESHOLD:-60}"
 if [ -f "$MUGIWARA_DIR/config" ]; then
-  CFG_DELEGATE=$(grep -E '^delegate_threshold=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '[:space:]')
+  CFG_DELEGATE=$(grep -E '^delegate_threshold=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
   [ -n "$CFG_DELEGATE" ] && DELEGATE_THRESHOLD="$CFG_DELEGATE"
 fi
 case "$DELEGATE_THRESHOLD" in
@@ -154,6 +184,11 @@ esac
 # (BSD/macOS-safe: no \+ BRE).
 BRANCH_SLUG=$(echo "$BRANCH" | tr '/' '-' | tr -cd 'A-Za-z0-9._-' | sed 's/^\.\{1,\}$//' )
 
+# Resolve the repo root: handles subdirectories and git worktrees, where .git
+# is a file rather than a directory. (B4)
+REPO_ROOT=$(git rev-parse --show-toplevel 2>/dev/null) || die "not a git repository"
+cd "$REPO_ROOT" || die "cannot enter repo root"
+
 # state + continue live in the mission dir. Solo (member empty) → state.json
 # + continue.json; team writes <member>.json + continue-<member>.json so
 # parallel members never clobber each other.
@@ -166,8 +201,18 @@ else
   CONTINUE_FILE="$MISSION_DIR/continue.json"
 fi
 
+# A mission is solo or team, never both. Two layouts side by side orphan one of
+# them: hidden from `status`, still read by the integrity gate. (W4)
+if [ -n "$MEMBER" ] && [ -f "$MISSION_DIR/state.json" ] && [ "${MUGIWARA_ALLOW_LAYOUT_SWITCH:-0}" != "1" ]; then
+  die "mission '$MISSION' is solo (state.json exists) — refusing to add member '$MEMBER'. Run: mugiwara migrate --to-team $MEMBER"
+fi
+if [ -z "$MEMBER" ] && ls "$MISSION_DIR"/*.json >/dev/null 2>&1; then
+  if ls "$MISSION_DIR"/*.json | grep -qv -e 'state.json' -e 'continue'; then
+    die "mission '$MISSION' is team — pass a member: savepoint.sh $MISSION <member> ..."
+  fi
+fi
+
 [ -z "$MISSION" ] && die "usage: savepoint.sh <mission> [member] [wave] [mode] [lane]"
-[ -d .git ] || die "not a git repository"
 
 # --- computed fields ---
 BASE_SHA=$(git merge-base HEAD main 2>/dev/null || git merge-base HEAD master 2>/dev/null || git merge-base HEAD "$(git symbolic-ref refs/remotes/origin/HEAD 2>/dev/null | sed 's|refs/remotes/origin/||')" 2>/dev/null || git rev-parse HEAD~1 2>/dev/null || echo "unknown")
@@ -176,7 +221,7 @@ HEAD_SHA=$(git rev-parse HEAD 2>/dev/null || echo "unknown")
 # lane_scope_glob (T5): monorepo scoping — count only files matching the glob
 LANE_SCOPE_GLOB=""
 if [ -f "$MUGIWARA_DIR/config" ]; then
-  _cfg_scope=$(grep -E '^lane_scope_glob=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | sed 's/^[[:space:]]*//;s/[[:space:]]*$//' | tr -d '"' | tr -d "'")
+  _cfg_scope=$(grep -E '^lane_scope_glob=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | sed 's/^[[:space:]]*//;s/[[:space:]]*$//' | tr -d '"' | tr -d "'")
   [ -n "$_cfg_scope" ] && LANE_SCOPE_GLOB="$_cfg_scope"
 fi
 # union of committed + staged + unstaged + untracked (F) — see patterns.sh
@@ -328,16 +373,23 @@ if [ -n "$PLAN_FILE" ] && [ -f "$PLAN_FILE" ]; then
   # total counts ALL task lines (checked + unchecked); done counts checked only.
   # A fully-completed plan must read total=N done=N, never total=0 (the old
   # unchecked-only grep degenerated a done plan to tasks.total=0).
-  TASKS_TOTAL=$(grep -cE '^\s*-\s*\[[ xX]\]' "$PLAN_FILE" 2>/dev/null || true)
-  TASKS_DONE=$(grep -c '\[x\]' "$PLAN_FILE" 2>/dev/null || true)
+  TASKS_TOTAL=$(count_boxes "$PLAN_FILE" '[ xX]')
+  TASKS_DONE=$(count_boxes "$PLAN_FILE" '[xX]')
 fi
 # Fallback for large campaigns (>3 phases, >1500 lines) where master plan.md is an index
 # and tasks live in sub-plan/*.md — only when plan.md has zero checkbox tasks to
 # keep simple missions unchanged.
 if [ "${TASKS_TOTAL:-0}" -eq 0 ] 2>/dev/null && [ -d "$MISSION_DIR/sub-plan" ]; then
-  TASKS_TOTAL=$(grep -rcE '^\s*-\s*\[[ xX]\]' "$MISSION_DIR/sub-plan" 2>/dev/null | awk -F: '{s+=$2} END {print s+0}' || true)
-  TASKS_DONE=$(grep -rc '\[x\]' "$MISSION_DIR/sub-plan" 2>/dev/null | awk -F: '{s+=$2} END {print s+0}' || true)
+  TASKS_TOTAL=0; TASKS_DONE=0
+  for _sp in "$MISSION_DIR"/sub-plan/*.md; do
+    [ -f "$_sp" ] || continue
+    TASKS_TOTAL=$(( TASKS_TOTAL + $(count_boxes "$_sp" '[ xX]') ))
+    TASKS_DONE=$(( TASKS_DONE + $(count_boxes "$_sp" '[xX]') ))
+  done
 fi
+# done ≤ total is an invariant of the audit trail — never let a report show
+# progress above 100%, whatever the plan file contains. (B3)
+[ "${TASKS_DONE:-0}" -gt "${TASKS_TOTAL:-0}" ] 2>/dev/null && TASKS_DONE="$TASKS_TOTAL"
 
 # blocker count
 BLOCKERS_FILE="$MISSION_DIR/blockers.md"
@@ -372,6 +424,16 @@ if [ "$HEAL_CYCLE" -ge "$HEAL_MAX_CYCLES" ] 2>/dev/null; then
   HEAL_HALT=true
 fi
 
+# W10: register plan.md read so repeated_reads is not structurally zero (evidence.registerRead)
+if [ -f "$MISSION_DIR/plan.md" ] && [ ! -s "$MISSION_DIR/context-registry.jsonl" ]; then
+  mkdir -p "$MISSION_DIR"
+  _plan_fp=$(node -e "const crypto=require('crypto');const fs=require('fs');try{const d=fs.readFileSync(process.argv[1],'utf8');process.stdout.write(crypto.createHash('sha256').update(d).digest('hex'))}catch(e){process.stdout.write('')}" "$MISSION_DIR/plan.md" 2>/dev/null || true)
+  if [ -n "$_plan_fp" ]; then
+    _plan_chars=$(wc -c < "$MISSION_DIR/plan.md" 2>/dev/null | tr -d ' ' || echo 0)
+    printf '{"fingerprint":"%s","kind":"file","file":"plan.md","id":"E001","reads":1,"chars":%s,"ref":"E001 plan.md"}\n' "$_plan_fp" "$_plan_chars" >> "$MISSION_DIR/context-registry.jsonl" 2>/dev/null || true
+  fi
+fi
+
 # slop — context (repeated reads) per cost-governor §§21-24,31-32 — T5 wire all crews Luffy/Nami/Zoro/Brook
 REPEATED_READS=0
 REPEATED_THRESHOLD=3
@@ -387,11 +449,11 @@ fi
 # gates flow stage can read, not prose.
 DEPTH_REVIEW="full"; DEPTH_QUALITY="full"; DEPTH_VERIFY="off"
 if [ -f "$MUGIWARA_DIR/config" ]; then
-  _cfg_r=$(grep -E '^review_depth=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '[:space:]')
+  _cfg_r=$(grep -E '^review_depth=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
   [ -n "$_cfg_r" ] && DEPTH_REVIEW="$_cfg_r"
-  _cfg_q=$(grep -E '^quality_depth=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '[:space:]')
+  _cfg_q=$(grep -E '^quality_depth=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
   [ -n "$_cfg_q" ] && DEPTH_QUALITY="$_cfg_q"
-  _cfg_v=$(grep -E '^verify_merged=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '[:space:]')
+  _cfg_v=$(grep -E '^verify_merged=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
   [ -n "$_cfg_v" ] && DEPTH_VERIFY="$_cfg_v"
 fi
 case "$DEPTH_REVIEW" in full|standard|lean) ;; *) DEPTH_REVIEW="full" ;; esac
@@ -499,6 +561,75 @@ if [ "$BUDGET" -gt 0 ] 2>/dev/null; then
   fi
 fi
 
+# team_members for posture (W5) — config key team_members, default 1
+TEAM_MEMBERS=1
+if [ -f "$MUGIWARA_DIR/config" ]; then
+  _tm=$(grep -E '^team_members=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
+  [ -n "$_tm" ] && TEAM_MEMBERS="$_tm"
+fi
+case "$TEAM_MEMBERS" in ''|*[!0-9]*) TEAM_MEMBERS=1 ;; esac
+# plan metrics for posture decision (phase-isolated / parallel)
+PLAN_LINES=0
+PHASES=1
+INDEPENDENT_TASKS=0
+if [ -f "$MISSION_DIR/plan.md" ]; then
+  PLAN_LINES=$(wc -l < "$MISSION_DIR/plan.md" 2>/dev/null | tr -d ' ' || echo 0)
+  PH=$(grep -c "^## Wave" "$MISSION_DIR/plan.md" 2>/dev/null || true)
+  [ "$PH" -gt 0 ] 2>/dev/null && PHASES="$PH"
+  INDEPENDENT_TASKS=$(grep -c "\[PARALLEL\]" "$MISSION_DIR/plan.md" 2>/dev/null || true)
+fi
+# governor for posture
+GOVERNOR="normal"
+case "$STATUS" in
+  stop) GOVERNOR="stop" ;;
+  warn) GOVERNOR="avoid" ;;
+  *) GOVERNOR="normal" ;;
+esac
+CONTEXT_PRESSURE=false
+if [ "$BUDGET" -gt 0 ] 2>/dev/null && [ "$TOKENS_EST" -gt $(( BUDGET * 6 / 10 )) ] 2>/dev/null; then
+  CONTEXT_PRESSURE=true
+fi
+POSTURE="inline-sequential"
+POSTURE_REASON="no parallel/phase/team/relief trigger — default inline in plan order"
+POSTURE_PAUSE=false
+if [ "$GOVERNOR" = "stop" ]; then
+  POSTURE="inline-sequential"
+  POSTURE_REASON="governor stop — pause safely, keep inline; state + continue emitted"
+  POSTURE_PAUSE=true
+elif [ "$TEAM_MEMBERS" -gt 1 ] 2>/dev/null; then
+  POSTURE="team-scoped"
+  POSTURE_REASON="$TEAM_MEMBERS team members with non-overlapping scope"
+elif [ "$PHASES" -gt 3 ] 2>/dev/null || [ "$PLAN_LINES" -gt 1500 ] 2>/dev/null; then
+  POSTURE="phase-isolated"
+  POSTURE_REASON="large campaign — $PHASES phases / $PLAN_LINES lines"
+elif [ "$CONTEXT_PRESSURE" = true ]; then
+  POSTURE="context-relief"
+  POSTURE_REASON="context pressure with ordered dependent tasks — one worker at a time, order preserved"
+elif [ "$INDEPENDENT_TASKS" -ge 2 ] 2>/dev/null; then
+  POSTURE="parallel-workers"
+  POSTURE_REASON="$INDEPENDENT_TASKS independent tasks, no shared files/interfaces"
+fi
+# investigation config (W8) — three keys, defaults 2/5/2
+INV_MAX_PASSES=2
+INV_MAX_UNRELATED=5
+INV_REPEATED_THRESH=2
+if [ -f "$MUGIWARA_DIR/config" ]; then
+  _v=$(grep -E '^investigation_max_passes=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
+  [ -n "$_v" ] && INV_MAX_PASSES="$_v"
+  _v=$(grep -E '^investigation_max_unrelated_files=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
+  [ -n "$_v" ] && INV_MAX_UNRELATED="$_v"
+  _v=$(grep -E '^investigation_repeated_read_threshold=' "$MUGIWARA_DIR/config" 2>/dev/null | head -1 | cut -d= -f2- | cut -d'#' -f1 | tr -d '[:space:]')
+  [ -n "$_v" ] && INV_REPEATED_THRESH="$_v"
+fi
+case "$INV_MAX_PASSES" in ''|*[!0-9]*) INV_MAX_PASSES=2 ;; esac
+case "$INV_MAX_UNRELATED" in ''|*[!0-9]*) INV_MAX_UNRELATED=5 ;; esac
+case "$INV_REPEATED_THRESH" in ''|*[!0-9]*) INV_REPEATED_THRESH=2 ;; esac
+# investigation_status: simple threshold check on repeated_reads (W8/W10)
+INVESTIGATION_STATUS="continue"
+if [ "$REPEATED_READS" -ge "$INV_REPEATED_THRESH" ] 2>/dev/null; then
+  INVESTIGATION_STATUS="stop"
+fi
+
 mkdir -p "$MISSION_DIR"
 
 node -e "
@@ -542,7 +673,12 @@ const data = {
   evidence: process.argv[21] ? process.argv[21].split(',').filter(Boolean) : [],
   updated_at: process.argv[22],
   schema_version: 2,
-  repeated_reads: parseInt(process.argv[41], 10) || 0
+  repeated_reads: parseInt(process.argv[41], 10) || 0,
+  team_members: parseInt(process.argv[42], 10) || 1,
+  posture: process.argv[43] || 'inline-sequential',
+  posture_reason: process.argv[44] || '',
+  posture_pause: process.argv[45] === 'true',
+  investigation_status: process.argv[46] || 'continue'
 };
 require('fs').writeFileSync(process.argv[23], JSON.stringify(data, null, 2) + '\n');
 " \
@@ -556,7 +692,7 @@ require('fs').writeFileSync(process.argv[23], JSON.stringify(data, null, 2) + '\
   "$LOC_INS" "$LOC_DEL" "$LOC_CHURN" "$MEMBER" "$VERBOSITY" \
   "$HEAL_MAX_CYCLES" "$HEAL_HALT" "$DELEGATE_THRESHOLD" "$DELEGATE_DUE" \
   "$MODEL" "$DEPTH_REVIEW" "$DEPTH_QUALITY" "$DEPTH_VERIFY" \
-  "$REPEATED_READS"
+  "$REPEATED_READS" "$TEAM_MEMBERS" "$POSTURE" "$POSTURE_REASON" "$POSTURE_PAUSE" "$INVESTIGATION_STATUS"
 
 if [ "$LANE_ROSE" = true ]; then
   echo "⚠ LANE ROSE: $LANE_PREV → $LANE ($LANE_REASON) — escalate per check-in protocol"

package/scripts/validate-content.ts

@@ -414,7 +414,175 @@ if (integrityArg !== -1) {
     }
   if (!constants.includes('LANE_BASE_lean=8421')) errors.push('doc-integrity: source lane-base.sh lean base drifted (expected 8421)');
   if (!constants.includes('BUDGET_full=50000')) errors.push('doc-integrity: source lane-base.sh full budget drifted (expected 50000)');
+  // W12 stale path check: obsolete layout must not appear
+  const staleChecks: [string, string[]][] = [
+    ['state/<mission>', ['docs/concepts/comparison.md', 'docs/concepts/features.md', 'references/multi-actor.md', 'README.md']],
+    ['continue/<mission>', ['docs/concepts/comparison.md', 'docs/concepts/features.md', 'references/multi-actor.md', 'README.md']],
+    ['plans/<mission>', ['docs/concepts/comparison.md', 'docs/concepts/features.md', 'references/multi-actor.md', 'README.md']],
+    ['logs/lessons', ['docs/concepts/comparison.md', 'docs/concepts/features.md', 'references/multi-actor.md', 'README.md']],
+  ];
+  for (const [pat, docs] of staleChecks) {
+    for (const doc of docs) {
+      const p = join(import.meta.dirname, '..', doc);
+      if (existsSync(p) && readFileSync(p, 'utf8').includes(pat)) {
+        errors.push(`doc-integrity: ${doc} contains obsolete path "${pat}" — use missions/<mission>/ layout`);
+      }
+    }
+  }
+  // W17 metrics must come from .metrics/latest.json — check for hardcoded stale numbers not in metrics
+  const metricsPath2 = join(import.meta.dirname, '..', '.metrics/latest.json');
+  if (existsSync(metricsPath2)) {
+    const m2 = JSON.parse(readFileSync(metricsPath2, 'utf8'));
+    const readme2 = readFileSync(join(import.meta.dirname, '..', 'README.md'), 'utf8');
+    // ensure README rank-1 and pointers match metrics (also checked in --check-readme-metrics, but this is integrity)
+    const rankMatch2 = readme2.match(/Retrieval routing rank-1[^\n]*?(\d+\.\d+)%/);
+    if (rankMatch2 && parseFloat(rankMatch2[1]) !== Number(m2.retrieval_rank1)) {
+      errors.push(`doc-integrity: README rank-1 ${rankMatch2[1]}% != metrics ${m2.retrieval_rank1}%`);
+    }
+  }
+  // stale CLI commands: any `mugiwara <word>` where word is not a valid CLI case, appearing as code, is stale
+  const validCmds = new Set(['install','update','uninstall','list','reset','archive','clean','continue','status','cost','run','savepoint','blame','handoff','sign','migrate','lesson','help','version','mode','off']);
+  const docsToScan = ['docs/concepts/workflow.md','docs/concepts/config.md','README.md','references/multi-actor.md'];
+  for (const doc of docsToScan) {
+    const p = join(import.meta.dirname, '..', doc);
+    if (!existsSync(p)) continue;
+    const txt = readFileSync(p, 'utf8');
+    for (const m of txt.matchAll(/`mugiwara ([a-z-]+)/g)) {
+      const cmd = m[1];
+      if (!validCmds.has(cmd) && cmd !== '--help' && cmd !== '--version') {
+        errors.push(`doc-integrity: ${doc} contains stale command "mugiwara ${cmd}" not in src/cli.ts`);
+      }
+    }
+  }
+}
+}
+
+// --- config drift gate (W11): every key code reads must appear in DEFAULT_CONFIG and docs, and vice versa ---
+if (process.argv.includes('--check-config')) {
+  const cfgSrc = readFileSync(join(import.meta.dirname, '..', 'src/config.ts'), 'utf8');
+  const m = cfgSrc.match(/DEFAULT_CONFIG\s*=\s*\[([\s\S]*?)\]\.join/);
+  let defaultKeys: string[] = [];
+  if (m) {
+    const block = m[1];
+    for (const line of block.split(/\r?\n/)) {
+      const t = line.trim();
+      if (!t) continue;
+      // extract string content between quotes
+      const q = t.match(/['"`]([^'"`]*?)['"`]/);
+      if (!q) continue;
+      let s = q[1].trim();
+      if (!s) continue;
+      if (s.startsWith('#')) s = s.slice(1).trim();
+      if (!s) continue;
+      const eq = s.indexOf('=');
+      if (eq === -1) continue;
+      const key = s.slice(0, eq).trim();
+      if (key) defaultKeys.push(key);
+    }
+  }
+  // docs keys from config.md table (only the ## Keys section, not template examples)
+  const docPath = join(import.meta.dirname, '..', 'docs/concepts/config.md');
+  let docKeys: string[] = [];
+  if (existsSync(docPath)) {
+    const docText = readFileSync(docPath, 'utf8');
+    const keysSectionMatch = docText.match(/## Keys([\s\S]*?)(?:\n## |\n#|$)/);
+    const keysSection = keysSectionMatch ? keysSectionMatch[1] : docText;
+    for (const line of keysSection.split(/\r?\n/)) {
+      const cm = line.match(/\|\s*`([^`]+)`\s*\|/);
+      if (cm) {
+        const k = cm[1].trim();
+        if (k && !docKeys.includes(k)) docKeys.push(k);
+      }
+    }
+  } else {
+    errors.push('config-drift: docs/concepts/config.md not found');
+  }
+  // code keys: scan src/*.ts, scripts/*.sh, hooks/*.ts for key patterns
+  const codeRoots = [
+    join(import.meta.dirname, '..', 'src'),
+    join(import.meta.dirname, '..', 'scripts'),
+    join(import.meta.dirname, '..', 'hooks'),
+  ];
+  const codeTextAll = codeRoots.map(r => {
+    if (!existsSync(r)) return '';
+    const files = readdirSync(r, { withFileTypes: true }).filter(e => e.isFile() && (e.name.endsWith('.ts') || e.name.endsWith('.sh'))).map(e => readFileSync(join(r, e.name), 'utf8')).join('\n');
+    // also need subdirectories
+    let sub = '';
+    try {
+      for (const e of readdirSync(r, { withFileTypes: true })) {
+        if (e.isDirectory()) {
+          const subdir = join(r, e.name);
+          for (const f of readdirSync(subdir, { withFileTypes: true }).filter(x => x.isFile() && (x.name.endsWith('.ts') || x.name.endsWith('.sh')))) {
+            sub += readFileSync(join(subdir, f.name), 'utf8') + '\n';
+          }
+        }
+      }
+    } catch {}
+    return files + sub;
+  }).join('\n');
+  // check each default key appears in code
+  for (const k of defaultKeys) {
+    if (!codeTextAll.includes(k)) {
+      errors.push(`config-drift: DEFAULT_CONFIG key "${k}" not found in code (src/*.ts, scripts/*.sh, hooks/*.ts)`);
+    }
+    if (!docKeys.includes(k)) {
+      errors.push(`config-drift: DEFAULT_CONFIG key "${k}" missing from docs/concepts/config.md`);
+    }
+  }
+  for (const k of docKeys) {
+    if (!defaultKeys.includes(k)) {
+      errors.push(`config-drift: docs/concepts/config.md key "${k}" not in DEFAULT_CONFIG`);
+    }
+    if (!codeTextAll.includes(k)) {
+      errors.push(`config-drift: docs key "${k}" not found in code`);
+    }
+  }
+  if (!errors.some(e => e.startsWith('config-drift'))) {
+    console.log(`✓ config in sync: ${defaultKeys.length} keys (${defaultKeys.join(', ')})`);
+  }
 }
+
+// --- wiring gate (W7): every src module must be imported somewhere ---
+if (process.argv.includes('--check-wiring')) {
+  const srcDir = join(import.meta.dirname, '..', 'src');
+  const ENTRY = new Set(['cli.ts', 'index.ts', 'installer.ts']);
+  const srcFiles = readdirSync(srcDir).filter(n => n.endsWith('.ts'));
+  const searchDirs = [srcDir, join(import.meta.dirname, '..', 'hooks'), join(import.meta.dirname, '..', 'scripts')];
+  const allFiles: string[] = [];
+  for (const d of searchDirs) {
+    if (!existsSync(d)) continue;
+    const walk = (dir: string) => {
+      for (const e of readdirSync(dir, { withFileTypes: true })) {
+        const full = join(dir, e.name);
+        if (e.isDirectory()) walk(full);
+        else if (e.isFile() && (e.name.endsWith('.ts') || e.name.endsWith('.js') || e.name.endsWith('.sh') || e.name.endsWith('.mjs'))) {
+          allFiles.push(full);
+        }
+      }
+    };
+    walk(d);
+  }
+  for (const f of srcFiles) {
+    if (ENTRY.has(f)) continue;
+    const stem = f.slice(0, -3);
+    let found = false;
+    for (const full of allFiles) {
+      if (full.endsWith(`/src/${f}`) || full === join(srcDir, f)) continue;
+      try {
+        const txt = readFileSync(full, 'utf8');
+        if (txt.includes(`'./${stem}`) || txt.includes(`"./${stem}`) || txt.includes(`'./${stem}.ts'`) || txt.includes(`"./${stem}.ts"`)) {
+          found = true;
+          break;
+        }
+      } catch {}
+    }
+    if (!found) {
+      errors.push(`src/${f}: imported by nothing — wire it, or delete it with its tests and its features.md claim`);
+    }
+  }
+  if (!errors.some(e => e.includes('imported by nothing'))) {
+    console.log(`✓ wiring: all src modules imported`);
+  }
 }
 
 // --- README metrics gate (D3): README table must match .metrics/latest.json ---

package/src/args.ts

@@ -6,7 +6,7 @@ export type Args = {
   flags: Record<string, FlagValue>;
 };
 
-const VALUE_FLAGS: Record<string, string> = { '--project': 'project', '--target': 'target', '--before': 'before', '--backend': 'backend', '--mission': 'mission' };
+const VALUE_FLAGS: Record<string, string> = { '--project': 'project', '--target': 'target', '--before': 'before', '--backend': 'backend', '--mission': 'mission', '--to-team': 'toTeam', '--to-solo': 'toSolo' };
 const BOOL_FLAGS: Record<string, string> = {
   '--global': 'global', '--yes': 'yes', '-y': 'yes', '--force': 'force',
   '--dry-run': 'dryRun', '--keep-logs': 'keepLogs', '--check': 'check', '--all': 'all', '--verify': 'verify',