@manhquy/flow-skill 0.7.2 → 0.7.3

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to `@manhquy/flow-skill`. Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning: [SemVer](https://semver.org/).
 
+
+## [0.7.3] — 2026-09-17 — ships skill v0.33.0 (stable / latest)
+
+Skill-content release. Ships skill product **v0.33.0** (`status --json` /
+`resume --json`, Stage 05 heading map — see root `CHANGELOG.md`
+`## 0.33.0`). Installer CLI contract unchanged. Publishes to dist-tag
+**`latest`**.
+
+### Changed
+- Bundled skill tree re-synced from monorepo `skills/flow/`.
+- Install: **`npx @manhquy/flow-skill@latest`**.
+
 ## [0.7.2] — 2026-09-11 — ships skill v0.32.0 (stable / latest)
 
 Skill-content release. Ships skill product **v0.32.0** (mid-tier dispatcher,

package/README.md

@@ -5,7 +5,7 @@ Install the **flow** skill into coding agents with one command.
 | | |
 |---|---|
 | **Package** | [`@manhquy/flow-skill`](https://www.npmjs.com/package/@manhquy/flow-skill) (installer CLI) |
-| **Current GA** | **0.7.2** — ships skill product **v0.32.0** |
+| **Current GA** | **0.7.3** — ships skill product **v0.33.0** |
 | **Platforms** | macOS · Linux · Windows (same Node path) |
 | **Requirement** | Node.js **≥ 22.14** |
 | **Source** | [github.com/manhquydev/flow-skill](https://github.com/manhquydev/flow-skill) |
@@ -35,7 +35,7 @@ npx @manhquy/flow-skill@latest
 
 ```bash
 npx @manhquy/flow-skill@latest --help
-# expect: flow-skill v0.7.x (ships skill v0.32.x)
+# expect: flow-skill v0.7.x (ships skill v0.33.x)
 ```
 
 ### Common commands
@@ -90,7 +90,7 @@ npx @manhquy/flow-skill@latest --yes --all --dry-run --json
 |----|--------|
 | `npx @manhquy/flow-skill@latest` | Bare `npx @manhquy/flow-skill` (stale npx cache) |
 | **Run** the CLI to copy the skill | `npm i` alone (package only; no skill files in agent homes) |
-| Pin installer `@0.7.2` if needed | Pin npm `@0.32.0` (skill version ≠ package version) |
+| Pin installer `@0.7.3` if needed | Pin npm `@0.33.0` (skill version ≠ package version) |
 | Prefer `@latest` | `@rc` (retired / behind) |
 
 **Two version axes:** `package.json` version = installer; `SKILL.md` metadata = skill product. Both appear in `--help` and in the `plan` JSONL event (`version` + `skillVersion`).
@@ -138,7 +138,7 @@ rm -rf <project>/.claude/skills/flow
 |---------|-----|
 | Agent has no `/flow` after `npm i` | Run `npx @manhquy/flow-skill@latest` (install must **execute**) |
 | Old skill after reinstall | Always use `@latest`; avoid bare package name |
-| `No matching version found` for `@0.32.0` | That is the **skill** version. Use `@latest` or `@0.7.x` |
+| `No matching version found` for `@0.33.0` | That is the **skill** version. Use `@latest` or `@0.7.x` |
 | Node too old | Install Node ≥ 22.14 (`nvm install 22`, etc.) |
 | Windows `EBUSY` / `EPERM` | Close the agent holding files under the skill dir; re-run |
 | Stale install lock | Delete `<parent>/.flow-skill.installing.lock` if reclaim fails |
@@ -148,7 +148,7 @@ rm -rf <project>/.claude/skills/flow
 ## JSONL (`--json`)
 
 ```jsonl
-{"event":"plan","version":"0.7.2","skillVersion":"0.32.0","dryRun":false,"scope":"global","targets":["claude"]}
+{"event":"plan","version":"0.7.3","skillVersion":"0.33.0","dryRun":false,"scope":"global","targets":["claude"]}
 {"event":"install:start","target":"claude","dests":["~/.claude/skills/flow"]}
 {"event":"install:done","target":"claude","dests":["~/.claude/skills/flow"],"result":"success","error":null,"warnings":[]}
 {"event":"summary","success":true,"total":1,"attempted":1,"installed":1,"failed":0,"skipped":0,"aborted":false}

package/README_VN.md

@@ -5,7 +5,7 @@ Cài skill **flow** vào coding agent bằng một lệnh.
 | | |
 |---|---|
 | **Package** | [`@manhquy/flow-skill`](https://www.npmjs.com/package/@manhquy/flow-skill) (installer CLI) |
-| **GA hiện tại** | **0.7.2** — ships skill product **v0.32.0** |
+| **GA hiện tại** | **0.7.3** — ships skill product **v0.33.0** |
 | **Nền tảng** | macOS · Linux · Windows (cùng code path Node) |
 | **Yêu cầu** | Node.js **≥ 22.14** |
 | **Source** | [github.com/manhquydev/flow-skill](https://github.com/manhquydev/flow-skill) |
@@ -35,7 +35,7 @@ npx @manhquy/flow-skill@latest
 
 ```bash
 npx @manhquy/flow-skill@latest --help
-# expect: flow-skill v0.7.x (ships skill v0.32.x)
+# expect: flow-skill v0.7.x (ships skill v0.33.x)
 ```
 
 ### Lệnh hay dùng
@@ -90,7 +90,7 @@ npx @manhquy/flow-skill@latest --yes --all --dry-run --json
 |-----|--------|
 | `npx @manhquy/flow-skill@latest` | Bare `npx @manhquy/flow-skill` (cache npx có thể cũ) |
 | **Chạy** CLI để copy skill | Chỉ `npm i` (chỉ thêm package; không cài skill vào agent home) |
-| Pin installer `@0.7.2` nếu cần cố định | Pin npm `@0.32.0` (version **skill** ≠ version package) |
+| Pin installer `@0.7.3` nếu cần cố định | Pin npm `@0.33.0` (version **skill** ≠ version package) |
 | Ưu tiên `@latest` / `@0.7.x` | `@rc` (đã retire / tụt hậu) |
 
 **Hai trục version:** `package.json` = installer CLI; `SKILL.md` metadata = skill product. Cả hai hiện trong `--help` và event JSONL `plan` (`version` + `skillVersion`).
@@ -138,7 +138,7 @@ rm -rf <project>/.claude/skills/flow
 |------------|------------|
 | Agent không có `/flow` sau `npm i` | Chạy `npx @manhquy/flow-skill@latest` (phải **execute** installer) |
 | Skill cũ sau khi “cài lại” | Luôn dùng `@latest`; tránh bare package name |
-| `No matching version found` với `@0.32.0` | Đó là version **skill**. Dùng `@latest` hoặc `@0.7.x` |
+| `No matching version found` với `@0.33.0` | Đó là version **skill**. Dùng `@latest` hoặc `@0.7.x` |
 | Node quá cũ | Cài Node ≥ 22.14 (`nvm install 22`, v.v.) |
 | Windows `EBUSY` / `EPERM` | Đóng agent đang giữ file trong skill dir; chạy lại |
 | Stale install lock | Xóa `<parent>/.flow-skill.installing.lock` nếu reclaim thất bại |
@@ -148,7 +148,7 @@ rm -rf <project>/.claude/skills/flow
 ## JSONL (`--json`)
 
 ```jsonl
-{"event":"plan","version":"0.7.2","skillVersion":"0.32.0","dryRun":false,"scope":"global","targets":["claude"]}
+{"event":"plan","version":"0.7.3","skillVersion":"0.33.0","dryRun":false,"scope":"global","targets":["claude"]}
 {"event":"install:start","target":"claude","dests":["~/.claude/skills/flow"]}
 {"event":"install:done","target":"claude","dests":["~/.claude/skills/flow"],"result":"success","error":null,"warnings":[]}
 {"event":"summary","success":true,"total":1,"attempted":1,"installed":1,"failed":0,"skipped":0,"aborted":false}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@manhquy/flow-skill",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "description": "Install the flow skill (buildflow gated build process) into your coding agent(s) via one npx command",
   "type": "module",
   "bin": {

package/skills/flow/SKILL.md

@@ -8,7 +8,7 @@ keywords: [flow, buildflow, gate, build, ship, scope, prd, contract, card, deplo
 license: MIT
 metadata:
   author: flow-skill
-  version: "0.32.0"
+  version: "0.33.0"
   attribution: "Methodology from ai20k-build-phase/buildflow (Tony, arealisticdreamer.com); durable-layer ancestry and improve-ritual spirit from repository-harness (protocol v1 EOL — flow-owned fork); agent patterns from claudekit-engineer, BMAD-METHOD. v0.22 concierge from BMAD bmad-help; forge-idea from bmad-forge-idea (MIT, BMad Code LLC)."
 ---
 
@@ -51,7 +51,8 @@ needed. Typed verbs always win over chat.
 - Security-class skip/debt → **HALT** until the operator accepts the exposure in `DEBT.md`.
 - Never mark a card `done` without pasted world-state evidence.
 - Never edit `_templates/` or `runner/flow.sh` during a project run.
-- `NEXT_VERB=` is advisory; never auto-exec `auto`/`skip`.
+- `NEXT_VERB=` / JSON `next_verb` is advisory; never auto-exec `next`, `card`,
+  `card-start`, `check`, `fix-gate`, `auto`, or `skip`.
 
 ## Run `flow.sh` first
 

package/skills/flow/references/command-dispatch.md

@@ -9,8 +9,8 @@ is no fragment loader (ADR-0001).
 
 | User input | Runner call | Host duties after |
 |---|---|---|
-| `/flow` | `bash <skill>/runner/flow.sh status` | Relay `NEXT ->`, dwell, and (past 10 cards) the compact summary; nothing to author. |
-| `/flow resume` | `bash <skill>/runner/flow.sh resume` | Read-only session-story; no lock. FAIL/PASS/Never: SKILL.md STOP + Dispatch. |
+| `/flow` | `bash <skill>/runner/flow.sh status` | Relay prose `NEXT ->`, dwell, and (past 10 cards) the compact summary; nothing to author. Optional `status --json` prints one `flow_context/v1` object (`v,stage,gate,next_verb,card,dwell,load`) — **display-only**. Hosts MUST NOT dispatch `next_verb` (`next`/`card`/`card-start`/`check`/`fix-gate`/`auto`/`skip`). Default `/flow` stays prose status. |
+| `/flow resume` | `bash <skill>/runner/flow.sh resume` | Read-only session-story; no lock. Optional `resume --json` same closed schema as status; display-only, never exec `next_verb`. FAIL/PASS/Never: SKILL.md STOP + Dispatch. |
 | `/flow next` | `bash <skill>/runner/flow.sh next` | After PASS, compare to `gate-examples.md` (not a second always-on load). FAIL/Never: SKILL.md STOP + Dispatch. |
 | `/flow assess` | `bash <skill>/runner/flow.sh assess` | Fill `flow/00-inspect.md` from EVIDENCE; Brownfield challenge in `gate-rules.md`. |
 | `/flow card` | `bash <skill>/runner/flow.sh card` | Fill per `law/CLAUDE.md`; before coding, `law/CODING.md`. |
@@ -25,7 +25,7 @@ is no fragment loader (ADR-0001).
 | `/flow constitution` | `bash <skill>/runner/flow.sh constitution` | Advisory constitution form + markers; then `gate-rules.md`. Not a `next` gate. |
 | `/flow clarify` | `bash <skill>/runner/flow.sh clarify` | List leftover Open-decision boxes; write-back `references/clarify.md`. Not a `next` gate. |
 | `/flow converge` | `bash <skill>/runner/flow.sh converge [--file <payload>]` | Assess vs plan per `references/converge.md`; present the findings table first. |
-| `/flow eval [--stage 01\|02\|card] [--fixture <id>] [--n 3] [--timeout <s>]` | `bash <skill>/runner/flow.sh eval [...]` | Billable; live mode skips if `claude` absent. `--replay` does not inherit that SKIP. See `references/gate-eval.md`. |
+| `/flow eval [--stage 01\|02\|05\|card] [--fixture <id>] [--n 3] [--timeout <s>]` | `bash <skill>/runner/flow.sh eval [...]` | Billable; live mode skips if `claude` absent. `--replay` does not inherit that SKIP. See `references/gate-eval.md`. |
 | `/flow eval --report` | `bash <skill>/runner/flow.sh eval --report` | Offline; relay last complete batch + drift. See `references/gate-eval.md`. |
 | `/flow eval --replay` | `bash <skill>/runner/flow.sh eval --replay` | Keyless replay; missing/stale fixtures exit 1. Verdicts never count toward the eval floor. |
 | `/flow project-type <web\|cli\|library\|skill>` | `bash <skill>/runner/flow.sh project-type [t]` | Set/read type per `references/project-types.md`. Confirm before planning. |

package/skills/flow/references/concierge.md

@@ -10,9 +10,11 @@ ask routes through this loop before you consider typing a verb for the operator.
 
 1. On any natural-language ask, run `flow.sh status` first (or `resume` when entering a
    project cold mid-cycle — see SKILL.md dispatch rule 1). **Never guess state.**
-   `status`/`resume` output is human-readable prose, not a machine token contract — you
-   (the model) parse it. Reliable on Claude; treat routing on other engines (Codex,
-   Antigravity/Gemini) as best-effort, not guaranteed.
+   Default `status`/`resume` is human-readable prose. Optional `--json` is **display-only**:
+   `next_verb` is not executable. Hosts MUST NOT dispatch `next`, `card`, `card-start`,
+   `check`, `fix-gate`, `auto`, or `skip` from it. Concierge stays on prose (May-run);
+   do not switch the chat entry to `status --json`. Reliable on Claude; treat routing on
+   other engines (Codex, Antigravity/Gemini) as best-effort, not guaranteed.
 2. Look up the closest `intent-class` row in `flow-catalog.tsv` for the parsed state.
 3. Propose exactly **ONE** next action in plain language. Explain any gate concept in
    one short sentence the first time it comes up (zero-jargon default — assume the user

package/skills/flow/references/gate-eval.md

@@ -27,8 +27,8 @@ rule text is enforceable by *a* judge," not "this build's self-review caught eve
 
 Eleven shipped fixtures (`skills/flow/eval/fixtures/`, manifest `skills/flow/eval/manifest.tsv`):
 sound/hollow pairs for Stage 01 (Research — fabricated quotes, vague "users"), Stage 02 (Scope —
-grade laundering, a real C quietly graded B), Stage 05 (listed; heading map does not yet judge
-them), and the card gate:
+grade laundering, a real C quietly graded B), Stage 05 (heading-mapped from `gate-05.md`; live
+floor unmeasured until operator `--record`; do not cat `gate-shared.md` onto 05), and the card gate:
 - **fcda** — sound multi-signal Evidence (mechanical PASS, semantic PASS)
 - **fcdb** — process-only hollow (mechanical **FAIL** after hollow-done floor; still listed for
   historical FLAG text / offline inspection)
@@ -69,9 +69,9 @@ pass**: `eval`, `eval --stage routing`, and `eval --stage converge` each print
 (scorecard table above). Replay never counts toward the eval floor. When present, exactly one
 minimal probe call is made to confirm the CLI runs headless before any real judging starts; a
 probe failure means one billable call was made, then a clean skip. The artifact manifest is 11 rows; a full
-default batch judges the 9 heading-mapped fixtures (01 / 02 / card) × N=3 = 27 judge calls
-+ the 1 probe = 28 calls. The two Stage 05 rows fail closed before a call. Plan accounting
-for a complete re-record is 11 × 3 = 33 + probe.
+default batch judges all 11 heading-mapped fixtures (01 / 02 / 05 / card) × N=3 = 33 judge calls
++ the 1 probe = 34 calls. Unfiltered batches are `--report`-complete (`n_written` == `n_expected`
+== 11). Old 9-eval jsonl (05 FAIL-empty before increment) is not comparable.
 
 **Measured real cost** (this machine, 2026-07-10, default/unforced model, no `--bare` available
 under an OAuth/subscription session — see the build's spike notes): roughly **$0.30–0.37 per
@@ -158,11 +158,11 @@ What it can do: hard-fail when `_eval_gate_rules_sha` ≠ the recorded hash (`fi
 re-record live per ADR re-baseline rule`). Replay verdicts **never count toward the eval floor**.
 
 **Refresh protocol:** edit both sides of a rules change, run a live `--record` batch (11 × `--n 3`
-= 33 judge calls + 1 probe; 9 heading-mapped fixtures bill 27 + probe today) on a host with
+= 33 judge calls + 1 probe; 11 heading-mapped) on a host with
 real `timeout`/`gtimeout`, commit the stripped `eval/replay/` tree (verdict lines only — no
 `session_id` / `cwd` envelopes) **in the same change** as the `gate-rules.md` edit. No
 operator-recorded batch exists yet — the `eval-replay` CI job skip-with-notice until then;
-the recorded-sha staleness check is unchanged.
+the recorded-sha staleness check is unchanged. Do not invent replay `meta`.
 
 **B1 escalation:** if hollow-done decoys that name no artifact/command recur in dogfood or
 live eval after the B1-S addendum lands, escalate to full structured lineage evidence. Replay
@@ -238,7 +238,7 @@ yet (the same "measure, don't assume" discipline that gated this build in the fi
   platform: a signal arriving while the runner is blocked on a foreground judge call was not
   observed to preempt that call promptly. Cleanup between fixtures/calls fires reliably; a
   normal (uninterrupted) run always cleans up its temp files immediately.
-- **Small fixture corpus (eleven manifest rows, nine heading-mapped)**: enough to prove the
+- **Small fixture corpus (eleven manifest rows, eleven heading-mapped)**: enough to prove the
   mechanism and give a real number, not enough for statistical confidence across every
   stage/failure-mode combination. Widening the corpus is a natural v1.x follow-up, not a
   v1 blocker.
@@ -267,8 +267,8 @@ window; the mechanism was never confirmed at the time (rate-limit vs hook conten
 4. **Circuit breaker.** The FIRST evaluated fixture coming back UNRELIABLE (`invalid_count*3 > n`)
    aborts the batch with a distinct nonzero exit code (2) and NO `done` trailer written — the
    junk batch is invisible to `--report`/drift, so it cannot poison the baseline. `--keep-going`
-   forces the full batch; document worst case (≤ N_fixtures × n × 2 + 1 probe ≈ 55 calls at
-   default 9 heading-mapped × 3).
+   forces the full batch; document worst case (≤ N_fixtures × n × 2 + 1 probe ≈ 67 calls at
+   default 11 heading-mapped × 3).
 
 ### Rate-limit visibility (advisory, best-effort)
 

package/skills/flow/runner/flow.sh

@@ -886,6 +886,14 @@ _stage_dwell() { # $1 = current stage name -> "Xm/Xh/Xd" from genuine entry, or
 }
 
 cmd_status() {
+  if [ "${1:-}" = "--json" ]; then
+    if [ -n "${2:-}" ]; then usage; exit 2; fi
+    _emit_context_json
+    return 0
+  elif [ -n "${1:-}" ]; then
+    usage
+    exit 2
+  fi
   local idx; idx="$(current_stage_idx)"
   echo "flow status"
   echo "  project: $ROOT"
@@ -990,6 +998,14 @@ _resume_valid_lines() {
 }
 
 cmd_resume() {
+  if [ "${1:-}" = "--json" ]; then
+    if [ -n "${2:-}" ]; then usage; exit 2; fi
+    _emit_context_json
+    return 0
+  elif [ -n "${1:-}" ]; then
+    usage
+    exit 2
+  fi
   local idx; idx="$(current_stage_idx)"
   if [ "$idx" -lt 0 ]; then
     _na="$(_next_action)"
@@ -1317,7 +1333,8 @@ _next_action() {
   echo "run '/flow check' then ship per stage 09"
 }
 
-# Closed advisory enum from _next_action prose only. Hosts must not auto-exec auto/skip.
+# Closed advisory enum from _next_action prose only. Hosts must not auto-exec
+# next/card/card-start/check/fix-gate/auto/skip.
 _next_verb_from() { # $1 = _next_action text
   local a="$1"
   case "$a" in
@@ -1338,6 +1355,54 @@ _emit_next() {
   echo "NEXT_VERB=$(_next_verb_from "$a")"
 }
 
+# PTC-aligned load hint for JSON status/resume. Display-only — never a capability token.
+# Matches SKILL.md load table: card/build -> law/CLAUDE.md; fix-gate/next/none stay empty
+# (mechanical FAIL is the blocked stage file; next PASS few-shots are after unlock).
+_json_load_for_verb() { # $1 = next_verb
+  case "${1:-}" in
+    card|card-start|check) echo "law/CLAUDE.md" ;;
+    *) echo "" ;;
+  esac
+}
+
+# Closed flow_context/v1 printer. Scalars through _json_str. scan_gate never piped.
+# Hosts MUST NOT dispatch next_verb (next/card/card-start/check/fix-gate/auto/skip).
+_emit_context_json() {
+  local idx cur f stage="" gate="none" next_verb card="" dwell="" load na infl id ts
+  idx="$(current_stage_idx)"
+  if [ "$idx" -ge 0 ]; then
+    cur="$(stage_name_at "$idx")"
+    stage="$cur"
+    f="$FLOW_DIR/$cur.md"
+    if [ -f "$f" ]; then
+      if scan_gate "$f" >/dev/null 2>&1; then
+        gate="PASS"
+      else
+        gate="BLOCKED"
+      fi
+    fi
+    dwell="$(_stage_dwell "$cur")"
+  fi
+  na="$(_next_action)"
+  next_verb="$(_next_verb_from "$na")"
+  load="$(_json_load_for_verb "$next_verb")"
+  infl="$(_inflight_file)"
+  if [ -f "$infl" ]; then
+    while read -r id ts; do
+      [ -n "$id" ] || continue
+      f="$(resolve_card_file "$id" 2>/dev/null)"
+      [ -n "$f" ] && [ -f "$f" ] || continue
+      [ "$(card_status "$f")" = "todo" ] || continue
+      card="$id"
+      break
+    done < "$infl"
+  fi
+  printf '{"v":"%s","stage":"%s","gate":"%s","next_verb":"%s","card":"%s","dwell":"%s","load":"%s"}\n' \
+    "$(_json_str "flow_context/v1")" "$(_json_str "$stage")" "$(_json_str "$gate")" \
+    "$(_json_str "$next_verb")" "$(_json_str "$card")" "$(_json_str "$dwell")" "$(_json_str "$load")"
+}
+
+
 _set_card_status() { # $1=file $2=value -> rewrite the ^status: line (portable substitute; temp+mv)
   local f="$1" v="$2"
   sed "s/^status:.*/status: $v/" "$f" > "$f.tmp" 2>/dev/null || { rm -f "$f.tmp"; return 1; }
@@ -3317,22 +3382,24 @@ _eval_heading_pattern() {
   case "$1" in
     01)   echo '^## Stage 01' ;;
     02)   echo '^## Stage 02' ;;
+    05)   echo '^## Stage 05' ;;
     card) echo '^## Card gate' ;;
     *)    return 1 ;;
   esac
 }
 
 # Extract one stage's ritual text from the mapped file (01→gate-01.md, 02→gate-02.md,
-# card→gate-card.md): from its heading line up to (not including) the next '## '
-# heading, or EOF. Prints nothing on a bad stage/missing file - caller MUST assert
+# 05→gate-05.md, card→gate-card.md): from its heading line up to (not including) the next
+# '## ' heading, or EOF. Prints nothing on a bad stage/missing file - caller MUST assert
 # non-empty before any billable call (a silent empty extraction would judge against
 # no rule at all).
-_eval_extract_section() { # $1 = stage (01|02|card)
+_eval_extract_section() { # $1 = stage (01|02|05|card)
   local pat src
   pat="$(_eval_heading_pattern "$1")" || return 1
   case "$1" in
     01)   src="$SCRIPT_DIR/../references/gate-01.md" ;;
     02)   src="$SCRIPT_DIR/../references/gate-02.md" ;;
+    05)   src="$SCRIPT_DIR/../references/gate-05.md" ;;
     card) src="$SCRIPT_DIR/../references/gate-card.md" ;;
     *)    return 1 ;;
   esac
@@ -3402,8 +3469,9 @@ _eval_build_prompt() { # $1=outfile $2=stage $3=artifact-file $4=nonce
   local outfile="$1" stage="$2" artifact="$3" nonce="$4" section shared
   section="$(_eval_extract_section "$stage")" || return 1
   [ -n "$section" ] || return 1
-  # Shared OD/authority lives in 02/03/05 challenges. Extract maps 01/02/card only;
-  # appending shared onto 01/card lets OD rules false-FLAG research/evidence.
+  # Shared OD/authority lives in 02/03/05 challenges. Extract maps 01/02/05/card;
+  # append shared onto 02 only. 05 extract may mention gate-shared.md; do not cat it
+  # (shared OD on 05 false-FLAGs f05a — PASS fixture states bearer auth without an ADR).
   if [ "$stage" = "02" ]; then
     shared="$SCRIPT_DIR/../references/gate-shared.md"
     [ -f "$shared" ] && section="$section
@@ -4641,7 +4709,7 @@ function cmd_eval {
     [ -z "$fid" ] && continue
     # manifest's stage column uses flow.sh's own full STAGES names ("01-research", "02-scope",
     # "card") for consistency with the rest of the codebase; --stage/heading-map use the terse
-    # 01|02|card form the plan's CLI spec documents - normalize by stripping to the leading
+    # 01|02|05|card form the plan's CLI spec documents - normalize by stripping to the leading
     # token before the first '-' (a bare "card" has none, so it passes through unchanged).
     local fstage_short="${fstage%%-*}"
     [ -n "$stage_filter" ] && [ "$fstage_short" != "$stage_filter" ] && continue
@@ -4667,7 +4735,7 @@ function cmd_eval {
     local promptfile="$rundir/prompt.txt"
     if ! _eval_build_prompt "$promptfile" "$fstage_short" "$artifact_path" "$nonce"; then
       if [ "$replay_mode" -eq 1 ]; then
-        echo "  $fid: SKIP - no heading-mapped section (artifact-replay scope is 01|02|card)"
+        echo "  $fid: SKIP - no heading-mapped section (artifact-replay scope is 01|02|05|card)"
         rm -rf "$rundir" 2>/dev/null
         continue
       fi
@@ -4898,10 +4966,12 @@ flow.sh - buildflow gate runner (mechanical layer)
 
 usage: bash flow.sh <command> [args]
 
-  status            Where am I? What's blocking? (also: no command)
-  resume            Session-story brief for a fresh agent entering mid-cycle: last session
+  status [--json]   Where am I? What's blocking? (also: no command). --json prints
+                     one flow_context/v1 object (display-only; do not auto-exec next_verb).
+  resume [--json]   Session-story brief for a fresh agent entering mid-cycle: last session
                      (command names only, never raw args), in-flight card + dwell, gate state,
                      one NEXT-> line. Read-only, no lock. Run this FIRST when resuming a project.
+                     --json: same closed object as status --json.
   next              Check current gate; unlock next stage (or start at 00)
   assess            Brownfield: scaffold + gate a current-state assessment (flow/00-inspect.md) before planning
   card              Create the next build card (after planning complete)
@@ -5110,8 +5180,8 @@ fi
 FLOW_LOG_START="$(_now)"
 trap '_log_on_exit' EXIT
 case "$cmd" in
-  status|"")      cmd_status ;;
-  resume)         cmd_resume ;;
+  status|"")      cmd_status "$@" ;;
+  resume)         cmd_resume "$@" ;;
   next)           cmd_next ;;
   assess)         cmd_assess ;;
   card)           cmd_card "$@" ;;

package/skills-manifest.json

@@ -2,7 +2,7 @@
   "source": "../skills/flow",
   "destRelative": "skills/flow",
   "fileCount": 117,
-  "syncedAt": "2026-09-11T03:27:04.868Z",
+  "syncedAt": "2026-09-17T15:38:14.807Z",
   "fileList": [
     "SKILL.md",
     "_templates/00-idea.md",