@pmelab/gtd 30.1.0 → 32.0.0

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gtd",
-  "version": "30.1.0",
+  "version": "32.0.0",
   "description": "Drive the gtd loop inside Claude Code: agent turns run as subagents, gtd decides every beat",
   "author": {
     "name": "Philipp Melab"

package/README.md

@@ -339,28 +339,29 @@ asks, and moves the process on only when you say so; a review you leave
 untouched signs off. While a step runs you can keep asking; requests for changes
 wait for the next rest. When the process finishes, Claude offers to squash it
 and open its pull request(s) (or run `/gtd ship`; `GTD_SHIP_MODE` picks one
-stacked pull request per slice or one commit per slice, see the
-[driver doc](docs/driver.md)); a process started for an issue ships with
-`Closes #N` on its top pull request; a later process on an already-stacked
-branch, such as review fixes, lands one commit per slice on the top pull request
-and keeps the stack; a closed pull request whose branch was deleted from origin
-is left behind and a new one opens; re-running `/gtd ship` after a lower stacked
-pull request merged restacks the rest (it refuses, with nothing changed, when
-that pull request merged anywhere but the default branch (unless into a lower
-slice branch before that one merged into it), a slice branch is checked out in
-another worktree, an unrelated local branch sits inside the rebased commits, or
-a slice's change is already upstream; a failed rebase is rolled back; to tear a
-stack down from its worktree, delete the top branch with
-`git push origin --delete`, since `gh pr close --delete-branch` cannot). A
-process can change hands at any gate: ask Claude to hand it off (or run
-`/gtd throw @dev`) and it opens a draft pull request assigned to them, and
-`/gtd catch <pr>` picks it up exactly where it waits, so whoever wrote the
-requirements can hand the build to someone else. Ship, hand-off and throw answer
-at once and run in the background, with progress on the status line; they report
-by waking Claude, a toast, a transcript line and a push notification, and a
-failed push or `gh` call reports as a failure. While a ship or hand-off runs or
-is queued, `/gtd catch`, the doors, `/gtd <requirements>` and bare `/gtd` wait
-for its report. See
+commit per slice under one pull request (the default) or, set to `stack`, one
+stacked pull request per slice, see the [driver doc](docs/driver.md)); a process
+started for an issue ships with `Closes #N` on its top pull request; a closed
+pull request whose branch was deleted from origin is left behind and a new one
+opens; on a branch an earlier ship in this clone stacked (unless
+`GTD_SHIP_MODE=commits`), a later process, such as review fixes, lands one
+commit per slice on the top pull request and keeps the stack, and re-running
+`/gtd ship` after a lower stacked pull request merged restacks the rest (it
+refuses, with nothing changed, when that pull request merged anywhere but the
+default branch (unless into a lower slice branch before that one merged into
+it), a slice branch is checked out in another worktree, an unrelated local
+branch sits inside the rebased commits, or a slice's change is already upstream;
+a failed rebase is rolled back; to tear a stack down from its worktree, delete
+the top branch with `git push origin --delete`, since
+`gh pr close --delete-branch` cannot). A process can change hands at any gate:
+ask Claude to hand it off (or run `/gtd throw @dev`) and it opens a draft pull
+request assigned to them, and `/gtd catch <pr>` picks it up exactly where it
+waits, so whoever wrote the requirements can hand the build to someone else.
+Ship, hand-off and throw answer at once and run in the background, with progress
+on the status line; they report by waking Claude, a toast, a transcript line and
+a push notification, and a failed push or `gh` call reports as a failure. While
+a ship or hand-off runs or is queued, `/gtd catch`, the doors,
+`/gtd <requirements>` and bare `/gtd` wait for its report. See
 [Inside Claude Code](https://github.com/pmelab/gtd/blob/main/docs/driver.md#inside-claude-code-the-gtd-mod).
 
 ### Then let an agent build your own
@@ -418,7 +419,12 @@ noted in steps 3 and 4 below.
    with `- A: <reply>` and the process stops at the same gate again. Close a
    thread by replying with a conclusion or deleting it. While a thread's last
    entry is the agent's, moving on is refused. Leave the file untouched and
-   start the loop to accept the plan as-is, unanswered questions and all.
+   start the loop to accept the plan as-is, unanswered questions and all. The
+   file lists numbered acceptance criteria (`AC-1`, `AC-2`, …) that bind the
+   build. Sketch your own under an `Acceptance criteria` heading and, when a
+   judge finds every one clear and checkable, they are recorded as they are and
+   this moment is skipped; one vague criterion brings it back. See
+   [Acceptance criteria](docs/configuration.md#acceptance-criteria).
 
 3. **You wait.** The agent first implements the requirements the quickest way
    that works — the naive pass — and a judge reads where it changed code (see

package/claude/hooks/ship.ts

@@ -49,7 +49,7 @@ export function costTrailers(log: string) {
 export type ShipMode = "stack" | "commits"
 
 export function shipMode(raw: string | undefined): ShipMode | { refusal: string } {
-  if (!raw) return "stack"
+  if (!raw) return "commits"
   if (raw === "stack" || raw === "commits") return raw
   return { refusal: `GTD_SHIP_MODE must be 'stack' or 'commits', not '${raw}'.` }
 }
@@ -209,8 +209,8 @@ async function preflight(git: Git, ok: Ok) {
 }
 
 export async function ship(io: ShipIo, isDry: boolean, rawMode?: string): Promise<Shipped> {
-  const mode = shipMode(rawMode)
-  if (typeof mode === "object") return fail(mode.refusal)
+  const valid = shipMode(rawMode)
+  if (typeof valid === "object") return fail(valid.refusal)
   const git = async (...args: string[]) => (await io.run(["git", ...args])).out.trim()
   const ok = async (...args: string[]) => (await io.run(["git", ...args])).code === 0
 
@@ -223,6 +223,10 @@ export async function ship(io: ShipIo, isDry: boolean, rawMode?: string): Promis
   const live = names(await git("config", "--local", "--get", STACK_KEY(branch)))
   const retired = names(await git("config", "--local", "--get", RETIRED_KEY(branch)))
   const recorded = [...live, ...retired]
+  // Unset keeps a live stack stacking: commits mode would retarget its top PR
+  // and strand the lower ones. A dead record ships as commits.
+  const stacked = !rawMode && live.length > 0 && (await chainsToHead(git, ok, branch, live))
+  const mode: ShipMode = stacked ? "stack" : valid
   const squashed = await squash(io, git, ok, branch, baseBranch, isDry, mode)
   if (!squashed.ok) return squashed
   // Until the PR step succeeds the record only moves aside: a retry must not

package/dist/chunks/{reserved-DDiiAZ8U.mjs → reserved-CHTJTzpA.mjs}

@@ -439,6 +439,21 @@ const codeThreadReplies = () => {
   concluded thread in and delete its lines:
 ${waiting.map((t) => `  - ${t.path}:${t.line}: ${t.first}`).join("\n")}`;
 };
+const acceptanceCriteriaBlock = `
+## Acceptance criteria
+
+Whichever lap this is, \`.gtd/REQUIREMENTS.md\` carries a
+\`## Acceptance Criteria\` section: one \`- AC-<n>: <criterion>\` line
+per criterion, numbered from \`AC-1\`. They bind every later step —
+the build is done when each one holds — so each must be checkable: a
+test or a command shows it holds or not. A later lap keeps every ID:
+reword a criterion in place, append a new one with the next unused
+number, delete a dropped one — never renumber, never reuse an ID. When
+the file holds no list (a review loop-back rewrites it), recover the
+last settled one from history (\`git log -p -- .gtd/REQUIREMENTS.md\`)
+and carry its IDs over. Landing is refused while a criterion has no ID or
+two share one.
+`;
 const riskTierBlock = `
 ## Risk tier and production signals
 
@@ -482,7 +497,7 @@ ${footnoteFoldIn}${codeThreadReplies()}
   or both
 - Whichever lap this is, leave \`.gtd/REQUIREMENTS.md\`
   uncommitted and finish once it reflects this lap's own work
-
+${acceptanceCriteriaBlock}
 ## First lap
 
 \`.gtd/REQUIREMENTS.md\` does not exist yet (or holds whatever the
@@ -537,6 +552,34 @@ ${questionBarReturn}
   made). If red, make that breakage the first concern, ahead of
   everything else — the build assumes the suite started green
 ${riskTier ? riskTierBlock : ""}`;
+const clearCriteriaQuestion = {
+	id: "clear",
+	primitive: "noul",
+	instructions: "state.criteria lists the acceptance criteria the human's sketch (state.sketch) stated, as gtd numbered them. Decide whether they can stand as the binding definition of done, with no design conversation.",
+	criteria: "yes: every criterion is clear and checkable — a test or a command can show it holds or not — and together they say what to build. no: any one criterion is vague, subjective or untestable, or the sketch leaves an open product question. Unsure means no."
+};
+const clearCriteriaMessage = () => `The sketch stated its own acceptance criteria. Run \`gtd judge answer\` and
+pipe \`yes\` when every one is clear and checkable, so design is skipped and
+they are recorded as they are — or land without a verdict to run the
+ordinary design conversation.
+`;
+const criterionLine = (c) => `- ${c.id}: ${c.text.replace(/\s+/g, " ")}`;
+/** Writes \`.gtd/REQUIREMENTS.md\` from criteria the sketch stated, wrapped the way oxfmt writes it. */
+const normaliseCriteriaScript = (stated) => {
+	return `mkdir -p .gtd
+printf '%s\\n' ${[
+		"# Requirements",
+		"",
+		`Stated in \`${stated.path}\` by the sketch:`,
+		"",
+		`\`git show ${stated.commit}:${stated.path}\``,
+		"",
+		"## Acceptance Criteria",
+		"",
+		...stated.criteria.flatMap((c) => wrapItem(criterionLine(c)))
+	].map(quote).join(" ")} > ${quote(".gtd/REQUIREMENTS.md")}
+`;
+};
 const designSystem = () => `${designPersona}
 
 ${agentConduct}`;
@@ -861,7 +904,8 @@ What each change does next (then run \`gtd land\`):
 const wrapItem = (item) => {
 	const out = [];
 	let line = "";
-	for (const word of item.split(" ")) if (line !== "" && line.length + 1 + word.length > 80) {
+	const words = item.split(" ").reduce((acc, word) => acc.length > 0 && /^([-+*>#]|\d+[.)])$/.test(word) ? [...acc.slice(0, -1), `${acc.at(-1)} ${word}`] : [...acc, word], []);
+	for (const word of words) if (line !== "" && line.length + 1 + word.length > 80) {
 		out.push(line);
 		line = `  ${word}`;
 	} else line = line === "" ? word : `${line} ${word}`;
@@ -1159,8 +1203,12 @@ Print the closing message and stop — this writes nothing itself.
 `;
 };
 const listed = (paths, unreadable = []) => paths.map((path) => `  - \`${displayPath(path)}\`${unreadable.includes(path) ? " (unreadable)" : ""}`).join("\n");
+const criteriaBinding = (refused) => `- Its \`## Acceptance Criteria\` (\`AC-<n>\`) bind this turn: re-read them from
+  the file, never from memory, and stop only when each one holds. They are
+  settled — ${refused ? "a turn that changes them is refused" : "leave them as they are"}`;
 const naivePassPrompt = (rejection) => `${stateFileRules}
 - Read \`.gtd/REQUIREMENTS.md\`: the settled requirements for this change
+${criteriaBinding(false)}
 - Implement them the quickest way that works — the naive version. Do not
   restructure, abstract or refactor around the change; a later step judges
   the shape of your diff and a reviewer makes it fit
@@ -1175,6 +1223,7 @@ Start over and choose a different approach; do not rebuild the same diff.
 `}`;
 const implementBuildingPrompt = (reference, tier, amend, afterRefactor, flagMode = true) => `${stateFileRules}
 - Read \`.gtd/REQUIREMENTS.md\`: the settled requirements for this change
+${criteriaBinding(true)}
 ${afterRefactor === true ? `- A reviewed refactor has just landed and may already carry part of the change,
   though never a release flag. Build only what is still missing, held to every
   rule below; if nothing is, change nothing and finish your turn
@@ -1519,4 +1568,4 @@ const steering = {
 	[REVIEW]: "review"
 };
 //#endregion
-export { reviewerSystem as $, buildReviewCollectingPrompt as A, handOffAwaitReviewMessage as B, planner as C, agentWithSkills as D, reviewing as E, designGateAnswerMessage as F, refactorBuildingPrompt as G, implementBuildingPrompt as H, designSystem as I, refactorRules as J, refactorDroppedRefusal as K, designTriagePrompt as L, buildReviewTriageMessage as M, builderSystem as N, buildReviewAnswerQuestionsPrompt as O, deferNotesScript as P, reviewNotesCapture as Q, finisherSystem as R, fixRisks as S, reviewQuality as T, implementFixPrompt as U, idleMessage as V, naivePassPrompt as W, reviewEditsCapture as X, reviewEditNotesCapture as Y, reviewGateBlockedMessage as Z, REVIEW as _, flagModeOn as a, defaults as at, fixCheck as b, baseline as c, flagMentions as ct, guarded as d, registryEntry as dt, seamByHandMessage as et, healthy as f, requireFlag as ft, REQUIREMENTS as g, REFACTOR as h, skills as i, unwindFailure as it, buildReviewFixNitsPrompt as j, buildReviewAwaitAfterDeferMessage as k, escalation as l, flagReferences as lt, QUALITY as m, summary as n, startGateBlockedMessage as nt, flagShipped as o, envDefaults as ot, FEEDBACK as p, refactorFixPrompt as q, access as r, unwindFailedMessage as rt, shipped as s, testFileGlobs as st, steering as t, seamSteerMessage as tt, gate as u, flipProblems as ut, awaitReview as v, reviewMissing as w, fixQuality as x, coder as y, fixReviewNotesPrompt as z };
+export { reviewEditNotesCapture as $, buildReviewCollectingPrompt as A, designTriagePrompt as B, planner as C, agentWithSkills as D, reviewing as E, clearCriteriaQuestion as F, implementBuildingPrompt as G, fixReviewNotesPrompt as H, criterionLine as I, normaliseCriteriaScript as J, implementFixPrompt as K, deferNotesScript as L, buildReviewTriageMessage as M, builderSystem as N, buildReviewAnswerQuestionsPrompt as O, clearCriteriaMessage as P, refactorRules as Q, designGateAnswerMessage as R, fixRisks as S, reviewQuality as T, handOffAwaitReviewMessage as U, finisherSystem as V, idleMessage as W, refactorDroppedRefusal as X, refactorBuildingPrompt as Y, refactorFixPrompt as Z, REVIEW as _, flagModeOn as a, seamSteerMessage as at, fixCheck as b, baseline as c, unwindFailure as ct, guarded as d, testFileGlobs as dt, reviewEditsCapture as et, healthy as f, flagMentions as ft, REQUIREMENTS as g, requireFlag as gt, REFACTOR as h, registryEntry as ht, skills as i, seamByHandMessage as it, buildReviewFixNitsPrompt as j, buildReviewAwaitAfterDeferMessage as k, escalation as l, defaults as lt, QUALITY as m, flipProblems as mt, summary as n, reviewNotesCapture as nt, flagShipped as o, startGateBlockedMessage as ot, FEEDBACK as p, flagReferences as pt, naivePassPrompt as q, access as r, reviewerSystem as rt, shipped as s, unwindFailedMessage as st, steering as t, reviewGateBlockedMessage as tt, gate as u, envDefaults as ut, awaitReview as v, reviewMissing as w, fixQuality as x, coder as y, designSystem as z };

package/dist/chunks/{tail-ILPlELuy.mjs → tail-CCsDBbZe.mjs}

@@ -1,6 +1,6 @@
 import { read, refuse, removeScript, run, scope, showScript, vars } from "../flows.mjs";
 import { fixFindings, lensesOf, qualityLap as qualityLap$1, reviewToHandOff } from "../workflow-kit.mjs";
-import { B as handOffAwaitReviewMessage, E as reviewing, S as fixRisks, T as reviewQuality, _ as REVIEW, b as fixCheck, d as guarded, f as healthy, l as escalation, m as QUALITY, v as awaitReview, w as reviewMissing, x as fixQuality } from "./reserved-DDiiAZ8U.mjs";
+import { E as reviewing, S as fixRisks, T as reviewQuality, U as handOffAwaitReviewMessage, _ as REVIEW, b as fixCheck, d as guarded, f as healthy, l as escalation, m as QUALITY, v as awaitReview, w as reviewMissing, x as fixQuality } from "./reserved-CHTJTzpA.mjs";
 //#region src/workflows/shared/tail.ts
 /** The reviewer's own `.gtd/REVIEW.md`, kept beside the human's notes so `fix` can tell them apart. */
 const REVIEW_ORIG = ".gtd/REVIEW.orig.md";

package/dist/workflows/cleanup.mjs

@@ -1,6 +1,6 @@
 import { agent, changes, glob, read, refuse, scope, start, vars } from "../flows.mjs";
-import { at as defaults, dt as registryEntry, ft as requireFlag, i as skills, lt as flagReferences, n as summary, o as flagShipped, ot as envDefaults, r as access, t as steering, y as coder } from "../chunks/reserved-DDiiAZ8U.mjs";
-import { a as refusePendingHandOff, r as handOffTail } from "../chunks/tail-ILPlELuy.mjs";
+import { gt as requireFlag, ht as registryEntry, i as skills, lt as defaults, n as summary, o as flagShipped, pt as flagReferences, r as access, t as steering, ut as envDefaults, y as coder } from "../chunks/reserved-CHTJTzpA.mjs";
+import { a as refusePendingHandOff, r as handOffTail } from "../chunks/tail-CCsDBbZe.mjs";
 //#region src/workflows/cleanup/cleanup.ts
 const removingPrompt = (name, registry) => `Clean up the release flag "${name}", which is default-on: delete its entry in ${registry}, and remove every \`GTD_FLAG_${name.toUpperCase()}\` check from the shipped sources. Keep the flag-on path; delete code only the off path reached, including tests that pin the off path.`;
 const cleanupFlow = async () => {

package/dist/workflows/feature.mjs

@@ -1,7 +1,7 @@
 import { answered, changes, changesSince, hasThreadFor, head, human, judge, judgeDiffShape, kept, mark, matches, numeric, quote, read, refuse, removeScript, requireAnswers, requireProgress, requireReplies, requireRevert, requireThreadsClosed, restoreScript, revertScript, run, scope, slice, start, vars } from "../flows.mjs";
 import { lensesOf, review as review$1 } from "../workflow-kit.mjs";
-import { $ as reviewerSystem, A as buildReviewCollectingPrompt, C as planner, D as agentWithSkills, E as reviewing, F as designGateAnswerMessage, G as refactorBuildingPrompt, H as implementBuildingPrompt, I as designSystem, J as refactorRules, K as refactorDroppedRefusal, L as designTriagePrompt, M as buildReviewTriageMessage, N as builderSystem, O as buildReviewAnswerQuestionsPrompt, P as deferNotesScript, Q as reviewNotesCapture, S as fixRisks, U as implementFixPrompt, V as idleMessage, W as naivePassPrompt, X as reviewEditsCapture, Y as reviewEditNotesCapture, _ as REVIEW, a as flagModeOn, at as defaults, b as fixCheck, d as guarded, et as seamByHandMessage, f as healthy, g as REQUIREMENTS, h as REFACTOR, i as skills, it as unwindFailure, j as buildReviewFixNitsPrompt, k as buildReviewAwaitAfterDeferMessage, n as summary, nt as startGateBlockedMessage, ot as envDefaults, p as FEEDBACK, q as refactorFixPrompt, r as access, rt as unwindFailedMessage, s as shipped, st as testFileGlobs, t as steering, tt as seamSteerMessage, u as gate, v as awaitReview, w as reviewMissing, y as coder } from "../chunks/reserved-DDiiAZ8U.mjs";
-import { a as refusePendingHandOff, i as isOptionalObject, n as closeReview, o as tail } from "../chunks/tail-ILPlELuy.mjs";
+import { $ as reviewEditNotesCapture, A as buildReviewCollectingPrompt, B as designTriagePrompt, C as planner, D as agentWithSkills, E as reviewing, F as clearCriteriaQuestion, G as implementBuildingPrompt, I as criterionLine, J as normaliseCriteriaScript, K as implementFixPrompt, L as deferNotesScript, M as buildReviewTriageMessage, N as builderSystem, O as buildReviewAnswerQuestionsPrompt, P as clearCriteriaMessage, Q as refactorRules, R as designGateAnswerMessage, S as fixRisks, W as idleMessage, X as refactorDroppedRefusal, Y as refactorBuildingPrompt, Z as refactorFixPrompt, _ as REVIEW, a as flagModeOn, at as seamSteerMessage, b as fixCheck, ct as unwindFailure, d as guarded, dt as testFileGlobs, et as reviewEditsCapture, f as healthy, g as REQUIREMENTS, h as REFACTOR, i as skills, it as seamByHandMessage, j as buildReviewFixNitsPrompt, k as buildReviewAwaitAfterDeferMessage, lt as defaults, n as summary, nt as reviewNotesCapture, ot as startGateBlockedMessage, p as FEEDBACK, q as naivePassPrompt, r as access, rt as reviewerSystem, s as shipped, st as unwindFailedMessage, t as steering, u as gate, ut as envDefaults, v as awaitReview, w as reviewMissing, y as coder, z as designSystem } from "../chunks/reserved-CHTJTzpA.mjs";
+import { a as refusePendingHandOff, i as isOptionalObject, n as closeReview, o as tail } from "../chunks/tail-CCsDBbZe.mjs";
 //#region src/workflows/shared/fences.ts
 const markFenced = (text) => {
 	let fence;
@@ -17,6 +17,128 @@ const markFenced = (text) => {
 	});
 };
 //#endregion
+//#region src/workflows/feature/criteria.ts
+/** Below this the judge's `yes` is not trusted: a wrong skip builds against criteria nobody can check. */
+const CLEAR_MIN_P = .8;
+const HEADING = /^ {0,3}(#{1,6})\s+(.*?)\s*#*\s*$/;
+const ITEM = /^ ?(?:[-*+]|\d+[.)])\s+(?:\[[ xX]\]\s+)?(.*)$/;
+const ID = /^(AC-\d+):\s*(.*)$/;
+/** The list items under the first heading `title` matches (at `level` when given), up to the next heading; wrapped lines joined, fenced lines ignored. */
+const listUnder = (text, title, level) => {
+	const lines = markFenced(text);
+	const at = lines.findIndex((l) => {
+		const heading = l.fenced ? null : HEADING.exec(l.line);
+		return heading !== null && (level === void 0 || heading[1].length === level) && title.test(heading[2]);
+	});
+	if (at === -1) return void 0;
+	const items = [];
+	let open = false;
+	for (const { line, fenced } of lines.slice(at + 1)) {
+		if (fenced) {
+			open = false;
+			continue;
+		}
+		if (HEADING.test(line)) break;
+		const item = ITEM.exec(line);
+		if (item !== null) {
+			items.push(item[1].trim());
+			open = true;
+		} else if (open && line.trim() !== "") items[items.length - 1] = `${items.at(-1)} ${line.trim()}`.trim();
+		else open = false;
+	}
+	return items;
+};
+/** The `- AC-<n>: …` list of `## Acceptance Criteria`, or `undefined` when the section is missing. */
+const criteriaOf = (text) => listUnder(text, /^acceptance criteria$/i, 2)?.map((item) => {
+	const id = ID.exec(item);
+	return id === null ? {
+		id: "",
+		text: item
+	} : {
+		id: id[1],
+		text: id[2]
+	};
+});
+/** Items numbered `AC-1`…, unless every one already carries its own distinct ID. */
+const numbered = (items) => {
+	const ids = items.map((item) => ID.exec(item));
+	const own = ids.every((id) => id !== null) && new Set(ids.map((id) => id[1])).size === ids.length;
+	return items.map((item, i) => own ? {
+		id: ids[i][1],
+		text: ids[i][2]
+	} : {
+		id: `AC-${i + 1}`,
+		text: item.replace(ID, "$2")
+	});
+};
+const STATED = /^acceptance criteria:?$/i;
+const statedItems = (text) => text === void 0 ? [] : (listUnder(text, STATED) ?? []).filter((item) => item !== "");
+/**
+* The criteria a `TODO.md` in the sketch `sketch` (the idle turn's changes)
+* added or changed under an `Acceptance criteria` heading. More than one such
+* file is ambiguous, and any other change in the sketch is input only triage
+* folds in, so none.
+*/
+const statedCriteria = (sketch, commit) => {
+	const found = sketch.flatMap((change) => {
+		if (!/(^|\/)TODO\.md$/.test(change.path) || change.after === void 0) return [];
+		const items = statedItems(change.after);
+		if (items.length === 0 || items.join("\n") === statedItems(change.before).join("\n")) return [];
+		return [{
+			path: change.path,
+			commit,
+			text: change.after,
+			criteria: numbered(items)
+		}];
+	});
+	return found.length === 1 && sketch.length === 1 ? found[0] : void 0;
+};
+const listing = (criteria) => criteria.map(criterionLine).join("\n");
+/** Refuse a turn that leaves `file` without ID'd acceptance criteria. A deleted file is `requireProgress`'s call. */
+const requireCriteria = (file) => {
+	const text = read(file);
+	if (text === void 0) return;
+	const criteria = criteriaOf(text) ?? [];
+	const unnamed = criteria.filter((c) => c.id === "");
+	const ids = criteria.map((c) => c.id).filter((id) => id !== "");
+	const twice = ids.filter((id, i) => ids.indexOf(id) !== i);
+	if (criteria.length > 0 && unnamed.length === 0 && twice.length === 0) return;
+	refuse(`gtd land: acceptance-criteria: ${file} has ${criteria.length === 0 ? `no "## Acceptance Criteria" list` : unnamed.length > 0 ? `${unnamed.length} criterion without an ID:\n${unnamed.map((c) => `  - ${c.text}`).join("\n")}` : `duplicate IDs: ${[...new Set(twice)].join(", ")}`} — list every criterion under "## Acceptance Criteria" as "- AC-<n>: <checkable criterion>", each ID unique and never reused`);
+};
+/** Refuse a turn that changed the acceptance criteria in `file`: after the design gate only another design lap may. */
+const requireCriteriaFrozen = (file) => {
+	const change = changes().get(file);
+	if (change === void 0) return;
+	if (listing(criteriaOf(change.before ?? "") ?? []) === listing(criteriaOf(change.after ?? "") ?? [])) return;
+	refuse(`gtd land: criteria-frozen: the acceptance criteria in ${file} are settled — restore them; only a design lap changes them`);
+};
+/** Whether the judge trusts `stated` as clear and checkable, every criterion of it. Truncated evidence never is. */
+const clear = async (stated) => {
+	const { answers, truncated } = await judge("clear", {
+		questions: [clearCriteriaQuestion],
+		evidence: {
+			criteria: listing(stated.criteria),
+			sketch: stated.text
+		},
+		message: clearCriteriaMessage(),
+		label: "Judging the stated acceptance criteria"
+	});
+	return truncated.length === 0 && answered(answers.clear, "yes", CLEAR_MIN_P);
+};
+/**
+* The skip path: when the sketch stated clear, checkable criteria, write them
+* to `.gtd/REQUIREMENTS.md` as they are and resolve `true` — no triage, no
+* design gate. `false` when design must run.
+*/
+const skipDesign = (stated) => stated === void 0 ? Promise.resolve(false) : scope("design", async () => {
+	if (!await clear(stated)) return false;
+	await run("normalise", normaliseCriteriaScript(stated), {
+		label: "Recording the stated acceptance criteria",
+		file: REQUIREMENTS
+	});
+	return true;
+});
+//#endregion
 //#region src/workflows/feature/tier.ts
 /** GTD_FLAG_RISK_TIER: pinned at process start, so a mid-process flip never moves a process. */
 const riskTierOn = () => vars.flag_risk_tier === "1";
@@ -137,6 +259,7 @@ const design = (base) => scope("design", async () => {
 		await triage(base);
 		requireProgress(REQUIREMENTS);
 		requireReplies(REQUIREMENTS);
+		requireCriteria(REQUIREMENTS);
 	} while (await noteGate(REQUIREMENTS, answerProductQuestions));
 });
 //#endregion
@@ -631,12 +754,16 @@ function implement(first, tier, amend) {
 			system: builderSystem(),
 			...options.afterRefactor === true ? { allowEmpty: true } : {}
 		});
+		requireCriteriaFrozen(REQUIREMENTS);
 		await healthy(() => agentWithSkills("fix.suite.fixing", implementFixPrompt(), {
 			label: "Fixing the check",
 			file: FEEDBACK,
 			model: coder(),
 			system: builderSystem()
-		}));
+		}), {
+			guard: () => requireCriteriaFrozen(REQUIREMENTS),
+			guardRests: false
+		});
 		await run("closing", removeScript([REQUIREMENTS]), { label: "Closing out the implementation" });
 	});
 }
@@ -667,6 +794,7 @@ const decide = () => scope("seam", async () => {
 			acceptClean: true
 		});
 		if (changes().length === 0) return { reference: tip.hash };
+		requireCriteria(REQUIREMENTS);
 		rejection = void 0;
 		retries = 0;
 	}
@@ -723,9 +851,9 @@ const buildFeature = async (firstBase) => {
 		}), base);
 	});
 };
-/** Design, then `buildFeature`. */
-const planAndBuild = async (firstBase) => {
-	await design(firstBase);
+/** Design — skipped when the sketch's own criteria are judged clear — then `buildFeature`. */
+const planAndBuild = async (firstBase, stated) => {
+	if (!await skipDesign(riskTierOn() ? void 0 : stated)) await design(firstBase);
 	await buildFeature(firstBase);
 };
 const featureFeedback = async (first, lensBase) => {
@@ -755,6 +883,7 @@ const ordinaryStart = async () => {
 	});
 	refusePendingHandOff();
 	flagModeOn();
+	const stated = statedCriteria(changes(), head());
 	await unwind();
 	if (changes(".gtd/FEEDBACK.md").some((c) => c.status !== "deleted")) await human("unwind-failed", {
 		message: unwindFailedMessage(),
@@ -762,11 +891,11 @@ const ordinaryStart = async () => {
 		file: FEEDBACK
 	});
 	await gate("start-gate", startGateBlockedMessage());
-	await planAndBuild(start());
+	await planAndBuild(start(), stated);
 };
 const feature = shipped(ordinaryStart);
 //#endregion
 //#region src/workflows/feature/index.ts
 var feature_default = feature;
 //#endregion
-export { REFACTOR_PACKAGE, access, afterTail, answerProductQuestions, answerReviewQuestions, buildFeature, buildTail, collecting, feature_default as default, defaults, deferNotes, design, envDefaults, feature, fixNits, implement, judgeSeam, naivePass, ordinaryStart, planAndBuild, reUnwind, refactorCollecting, refactorFirst, refactorStrays, requireNoNewFlags, requireNoTestFiles, requireTestCallSitesOnly, requireWithin, reviewedRefactor, seamBuild, skills, steering, summary, triage, unwind };
+export { REFACTOR_PACKAGE, access, afterTail, answerProductQuestions, answerReviewQuestions, buildFeature, buildTail, collecting, criteriaOf, feature_default as default, defaults, deferNotes, design, envDefaults, feature, fixNits, implement, judgeSeam, naivePass, ordinaryStart, planAndBuild, reUnwind, refactorCollecting, refactorFirst, refactorStrays, requireCriteria, requireCriteriaFrozen, requireNoNewFlags, requireNoTestFiles, requireTestCallSitesOnly, requireWithin, reviewedRefactor, seamBuild, skills, skipDesign, statedCriteria, steering, summary, triage, unwind };

package/dist/workflows/fix.mjs

@@ -1,7 +1,7 @@
 import { read, refuse, removeScript, run, scope, start } from "../flows.mjs";
 import { d as reviewNotes, f as reviewRisks } from "../chunks/steering-DVILanVf.mjs";
-import { D as agentWithSkills, R as finisherSystem, _ as REVIEW, at as defaults, c as baseline, i as skills, n as summary, ot as envDefaults, r as access, s as shipped, t as steering, y as coder, z as fixReviewNotesPrompt } from "../chunks/reserved-DDiiAZ8U.mjs";
-import { r as handOffTail, t as REVIEW_ORIG } from "../chunks/tail-ILPlELuy.mjs";
+import { D as agentWithSkills, H as fixReviewNotesPrompt, V as finisherSystem, _ as REVIEW, c as baseline, i as skills, lt as defaults, n as summary, r as access, s as shipped, t as steering, ut as envDefaults, y as coder } from "../chunks/reserved-CHTJTzpA.mjs";
+import { r as handOffTail, t as REVIEW_ORIG } from "../chunks/tail-CCsDBbZe.mjs";
 //#region src/workflows/fix/fix.ts
 /**
 * Fix every note a human left in a handed-off `.gtd/REVIEW.md` and every

package/dist/workflows/review.mjs

@@ -1,6 +1,6 @@
 import { start } from "../flows.mjs";
-import { Z as reviewGateBlockedMessage, at as defaults, i as skills, n as summary, ot as envDefaults, r as access, s as shipped, t as steering, u as gate } from "../chunks/reserved-DDiiAZ8U.mjs";
-import { a as refusePendingHandOff, r as handOffTail } from "../chunks/tail-ILPlELuy.mjs";
+import { i as skills, lt as defaults, n as summary, r as access, s as shipped, t as steering, tt as reviewGateBlockedMessage, u as gate, ut as envDefaults } from "../chunks/reserved-CHTJTzpA.mjs";
+import { a as refusePendingHandOff, r as handOffTail } from "../chunks/tail-CCsDBbZe.mjs";
 //#region src/workflows/review/review.ts
 /**
 * Pure review of everything since `reviewBase`: a green gate, the quality

package/dist/workflows/rollout.mjs

@@ -1,5 +1,5 @@
 import { agent, changesSince, glob, head, mark, read, refuse, removeScript, run, scope, vars } from "../flows.mjs";
-import { at as defaults, ct as flagMentions, ft as requireFlag, i as skills, n as summary, o as flagShipped, ot as envDefaults, p as FEEDBACK, r as access, t as steering, u as gate, ut as flipProblems, y as coder } from "../chunks/reserved-DDiiAZ8U.mjs";
+import { ft as flagMentions, gt as requireFlag, i as skills, lt as defaults, mt as flipProblems, n as summary, o as flagShipped, p as FEEDBACK, r as access, t as steering, u as gate, ut as envDefaults, y as coder } from "../chunks/reserved-CHTJTzpA.mjs";
 //#region src/workflows/rollout/rollout.ts
 const flippingPrompt = (name, registry) => `Roll out the release flag "${name}": in ${registry}, set \`defaultOn: true\` on its entry. Change nothing else — no other entry, no other field, no other file, no comments.`;
 const suiteBlockedMessage = () => "The suite is red after the rollout. Fix it by hand — a rollout may only touch the flag's registry entry — then land.";