@pmelab/gtd 57.0.0 → 58.0.0

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gtd",
-  "version": "57.0.0",
+  "version": "58.0.0",
   "description": "Drive the gtd loop inside Claude Code: agent turns run as subagents, gtd decides every beat",
   "author": {
     "name": "Philipp Melab"

package/README.md

@@ -692,14 +692,15 @@ build, one quality lap, one review — however many criteria it has. Sizing the
 work is yours: split a change too big for one process into several before the
 sketch.
 
-**Flag mode (`flagMode`, on by default).** On, the naive pass's judge runs as
-above and a rebuilt implementation is asked for a new release flag (none at a
-`low` risk tier); a pass the judge lets land is not asked for one. A project
-that is not publicly released turns it off explicitly —
-`feature({ flagMode: false })` in `gtd.config.ts`, it is never detected: then no
-flag is asked for, no seam judge or refactor runs, and the naive pass lands as
-the implementation, straight through the health loop and the quality lap. See
-[`flagMode`](docs/configuration.md#the-bundled-workflows-settings).
+**Release flags (only when asked for).** A change ships unflagged unless its
+requirements ask for a flag: a `## Release Flag` section in
+`.gtd/REQUIREMENTS.md` reading `new` (a new release flag) or `existing: <NAME>`
+(behind a flag that already exists). Triage writes it only when the sketch asks
+for a flag; you can add, change or delete it at the design gate. With it, the
+naive pass's judge runs as above and the build adds the new flag, or uses the
+named one; without it, no seam judge or refactor runs and the naive pass lands
+as the implementation, straight through the health loop and the quality lap. See
+[Release flags](docs/configuration.md#release-flags).
 
 **Risk tier (flag `GTD_FLAG_RISK_TIER=1`, off by default).** Triage proposes a
 risk tier, `low` or `high`, and the production signals to watch after merge.

package/dist/chunks/{reserved-X2RkNHin.mjs → reserved-BzAFXuz_.mjs}

@@ -237,7 +237,6 @@ const defaults = {
 	standardMinP: "0.8",
 	refactorFlagPattern: "\\bGTD_FLAG_\\w+",
 	seamAllow: [...testFileGlobs, ".gtd/**"].join(", "),
-	flagMode: "true",
 	naiveTest: "false",
 	flag_risk_tier: "0",
 	qualityReviews: "correctness, owasp-security, ponytail-review, test-audit, conventions, spec-challenge, criteria-coverage",
@@ -671,6 +670,18 @@ in its docs or agent instructions (\`AGENTS.md\`, \`CLAUDE.md\`). When
 none is declared, fall back to directories and packages. Landing is
 refused while the section is missing.
 `;
+const releaseFlagBlock = `
+## Release flag
+
+Only when the sketch asks outright for the change to ship behind a
+feature or release flag, \`.gtd/REQUIREMENTS.md\` carries a
+\`## Release Flag\` section whose first line is \`new\` (a new
+flag) or \`existing: <NAME>\` (behind a flag that already exists,
+named as the sketch names it). Never add one on your own judgement:
+without the section the change ships unflagged. A later lap keeps the
+section exactly as the last settled file had it, unless the human
+changed it. Landing is refused while its first line is anything else.
+`;
 const riskTierBlock = `
 ## Risk tier and production signals
 
@@ -710,7 +721,7 @@ ${footnoteFoldIn}${codeThreadReplies()}
   or both
 - Whichever lap this is, leave \`.gtd/REQUIREMENTS.md\`
   uncommitted and finish once it reflects this lap's own work
-${acceptanceCriteriaBlock}${impactBlock}
+${acceptanceCriteriaBlock}${impactBlock}${releaseFlagBlock}
 Every lap re-explores and leaves \`## Impact\` present. On a return
 lap or review loop-back the human may have edited \`## Impact\` (or
 footnoted it): read that edit from history (\`git log -1 -p --
@@ -780,11 +791,12 @@ ${stateFileRules}
 - The only state file this turn touches is \`.gtd/REQUIREMENTS.md\`
   — no other files for notes or output
 - \`.gtd/REQUIREMENTS.md\` already holds the settled acceptance
-  criteria. Add a \`## Impact\` section and change nothing else — a
-  turn that touches anything outside it is refused
+  criteria. Add a \`## Impact\` section — and a \`## Release Flag\`
+  section when the sketch asks for one — and change nothing else: a
+  turn that touches anything outside them is refused
 - No human reviews this before the build: put any surprise in the
   Impact prose, never as a question
-${impactBlock}
+${impactBlock}${releaseFlagBlock}
 - Leave \`.gtd/REQUIREMENTS.md\` uncommitted and finish once it holds \`## Impact\`
 `;
 const clearCriteriaQuestion = {
@@ -843,6 +855,7 @@ What each change does next (then run \`gtd land\`):
 - **Accept as-is** — change nothing and re-run; the plan stands as written. Refused while a thread is open.
 - **Revise answers** — tick exactly one option per open question (replace \`_your answer_\` for your own) to send it back for the agent to fold your answers in, or delete a question to skip it.
 - **Discuss** — start or continue a thread (\`- H:\`); the agent replies and this gate stops again.
+- **Ask for a release flag** — add \`## Release Flag\` with \`new\` or \`existing: <NAME>\` as its first line, or delete the section to ship unflagged.
 ${riskTier ? RISK_TIER_GATE_LINE : ""}`;
 const builderSystem = () => `${builderPersona}
 
@@ -1522,21 +1535,22 @@ const afterRefactorLine = (rebuild) => `- A reviewed refactor has just landed an
   though never a release flag. Build only what is still missing, held to every
   rule below; if nothing is, ${carries(rebuild) ? "carry over the acceptance tests below and change nothing else" : "change nothing and finish your turn"}
 `;
-const flagLine = (flagMode, tier, amend) => !flagMode ? "- Add no release flag — this project ships without release flags" : tier === "low" ? "- Add no release flag — this change is low risk tier" : amend === true ? "- Keep the release flag the earlier lap added, if it added one; otherwise put\n  the behaviour behind a new release flag" : `- Put the new behaviour behind a new release flag, following the
-  repository's flag conventions`;
-const implementBuildingPrompt = (reference, tier, amend, afterRefactor, flagMode = true, rebuild = {}) => `${stateFileRules}
+const flagLine = (flag, amend) => flag.kind === "none" ? "- Add no release flag — the requirements ask for none" : flag.kind === "existing" ? `- Put the new behaviour behind the existing flag \`${flag.name}\`, as the
+  requirements ask — add no new flag` : amend === true ? "- Keep the release flag the earlier lap added, if it added one; otherwise put\n  the behaviour behind a new release flag" : `- Put the new behaviour behind a new release flag, as the requirements ask,
+  following the repository's flag conventions`;
+const implementBuildingPrompt = (reference, amend, afterRefactor, flag = { kind: "none" }, rebuild = {}) => `${stateFileRules}
 - Read \`.gtd/REQUIREMENTS.md\`: the settled requirements for this change
 ${impactHints}
 ${criteriaBinding(true)}
 ${afterRefactor === true ? afterRefactorLine(rebuild) : ""}${amend === true ? `- The change already exists in the tree from an earlier lap; amend it to meet
   the re-derived requirements instead of rewriting it
-` : flagMode ? `- Implement them properly, fitting the codebase's seams and conventions
+` : flag.kind !== "none" ? `- Implement them properly, fitting the codebase's seams and conventions
 ` : `- Implement them the quickest way that works — the naive version. Do not
   restructure, abstract or refactor around the change
 `}${reference === void 0 || amend === true ? "" : `- Reference only: \`git show ${reference}\` shows an earlier naive attempt.
   Read it for ideas; never apply, cherry-pick or check it out — write
   the change fresh${carries(rebuild) ? ", its acceptance tests excepted (below)" : ""}
-`}${rebuildLines(rebuild)}${flagLine(flagMode, tier, amend)}
+`}${rebuildLines(rebuild)}${flagLine(flag, amend)}
 - Write the tests first, then the code that makes them pass
 ${behaviourTests}
 - Leave \`.gtd/REQUIREMENTS.md\` in place and everything uncommitted, then
@@ -1555,7 +1569,7 @@ An edit together with an approval counts as steer. Only
 \`.gtd/REQUIREMENTS.md\` is meant to change here: any other edit lands on the
 branch unjudged.
 `;
-/** `judged`: whether an overruled pass still meets the seam judge (`flagMode` on). */
+/** `judged`: whether an overruled pass still meets the seam judge (a release flag asked for). */
 const seamSteerMessage = (retry, judged = true) => isFault(retry) ? `The naive pass failed three times and the retries are spent. The last
 attempt's tests (\`git show ${retry.hash}\`) fall short:
 ${retry.fault}
@@ -1879,19 +1893,12 @@ const ShippedOptions = Struct({
 	testCommand: setting,
 	plannerModel: setting,
 	coderModel: setting,
-	flagMode: optionalWith(Boolean$, { exact: true }),
 	naiveTest: optionalWith(Boolean$, { exact: true })
 });
 const over = (base, options) => ({
 	...base,
 	...Object.fromEntries(Object.entries(options).filter(([name]) => Object.hasOwn(base, name)).map(([name, value]) => [name, String(value)]))
 });
-/** The `flagMode` setting, pinned at process start. Anything but true/false fails rather than guess a side. */
-const flagModeOn = () => {
-	const value = vars.flagMode ?? defaults.flagMode;
-	if (value !== "true" && value !== "false") refuse(`gtd: flagMode must be "true" or "false", got ${JSON.stringify(value)}`);
-	return value === "true";
-};
 /** The `naiveTest` setting, pinned at process start. Anything but true/false fails rather than guess. */
 const naiveTestOn = () => {
 	const value = vars.naiveTest ?? defaults.naiveTest;
@@ -1980,4 +1987,4 @@ const steering = {
 	[REVIEW]: "review"
 };
 //#endregion
-export { naiveTryMessage as $, reviewQuality as A, oneLine as At, designImpactPrompt as B, collecting as C, envDefaults as Ct, fixRisks as D, conflictFor as Dt, fixQuality as E, conflictBody as Et, builderSystem as F, flagReferences as Ft, finisherSystem as G, designTriagePrompt as H, clearCriteriaMessage as I, flipProblems as It, idleMessage as J, fixReviewNotesPrompt as K, clearCriteriaQuestion as L, registryEntry as Lt, agentWithSkills as M, renderStandards as Mt, buildReviewCollectingPrompt as N, standardKey as Nt, planner as O, conflictTitle as Ot, buildReviewTriageMessage as P, flagMentions as Pt, naivePassPrompt as Q, criterionLine as R, requireFlag as Rt, coder as S, defaults as St, fixNits as T, STANDARDS as Tt, findingGateFile as U, designSystem as V, findingGateMessage as W, implementFixPrompt as X, implementBuildingPrompt as Y, naiveApplyFailure as Z, REFACTOR_NOTE as _, startGateBlockedMessage as _t, flagModeOn as a, refactorDroppedRefusal as at, answerReviewQuestions as b, withGuidance as bt, shipped as c, refactorRules as ct, guarded as d, reviewFeedbackFixPrompt as dt, nitFixBlock as et, healthy as f, reviewGateBlockedMessage as ft, REFACTOR as g, seamSteerMessage as gt, QUALITY as h, seamByHandMessage as ht, skills as i, refactorBuildingPrompt as it, reviewing as j, parseStandards as jt, reviewMissing as k, isConflictTitle as kt, baseline as l, reviewEditNotesCapture as lt, NAIVE_TEST as m, reviewerSystem as mt, summary as n, qualityFindingsFile as nt, flagShipped as o, refactorFixPrompt as ot, FEEDBACK as p, reviewNotesCapture as pt, handOffAwaitReviewMessage as q, access as r, qualityTriageMessage as rt, naiveTestOn as s, refactorNotePrompt as st, steering as t, normaliseCriteriaScript as tt, gate as u, reviewEditsCapture as ut, REQUIREMENTS as v, unwindFailedMessage as vt, fixCheck as w, testFileGlobs as wt, awaitReview as x, withSummary as xt, REVIEW as y, unwindFailure as yt, designGateAnswerMessage as z };
+export { nitFixBlock as $, reviewing as A, parseStandards as At, designSystem as B, fixCheck as C, testFileGlobs as Ct, planner as D, conflictTitle as Dt, fixRisks as E, conflictFor as Et, clearCriteriaMessage as F, flipProblems as Ft, fixReviewNotesPrompt as G, findingGateFile as H, clearCriteriaQuestion as I, registryEntry as It, implementBuildingPrompt as J, handOffAwaitReviewMessage as K, criterionLine as L, requireFlag as Lt, buildReviewCollectingPrompt as M, standardKey as Mt, buildReviewTriageMessage as N, flagMentions as Nt, reviewMissing as O, isConflictTitle as Ot, builderSystem as P, flagReferences as Pt, naiveTryMessage as Q, designGateAnswerMessage as R, collecting as S, envDefaults as St, fixQuality as T, conflictBody as Tt, findingGateMessage as U, designTriagePrompt as V, finisherSystem as W, naiveApplyFailure as X, implementFixPrompt as Y, naivePassPrompt as Z, REQUIREMENTS as _, unwindFailedMessage as _t, flagShipped as a, refactorFixPrompt as at, awaitReview as b, withSummary as bt, baseline as c, reviewEditNotesCapture as ct, healthy as d, reviewGateBlockedMessage as dt, normaliseCriteriaScript as et, FEEDBACK as f, reviewNotesCapture as ft, REFACTOR_NOTE as g, startGateBlockedMessage as gt, REFACTOR as h, seamSteerMessage as ht, skills as i, refactorDroppedRefusal as it, agentWithSkills as j, renderStandards as jt, reviewQuality as k, oneLine as kt, gate as l, reviewEditsCapture as lt, QUALITY as m, seamByHandMessage as mt, summary as n, qualityTriageMessage as nt, naiveTestOn as o, refactorNotePrompt as ot, NAIVE_TEST as p, reviewerSystem as pt, idleMessage as q, access as r, refactorBuildingPrompt as rt, shipped as s, refactorRules as st, steering as t, qualityFindingsFile as tt, guarded as u, reviewFeedbackFixPrompt as ut, REVIEW as v, unwindFailure as vt, fixNits as w, STANDARDS as wt, coder as x, defaults as xt, answerReviewQuestions as y, withGuidance as yt, designImpactPrompt as z };

package/dist/chunks/{review-v7sh5GF4.mjs → review-CVqRS0mc.mjs}

@@ -1,8 +1,8 @@
 import { answered, changesSince, head, judge, numeric, read, refuse, requireRevert, restoreScript, run, vars, writeScript } from "../flows.mjs";
 import { S as reviewSections, _ as REVIEW_SECTIONS, v as reviewChunks, x as reviewRisks } from "./steering-CCNvngSH.mjs";
 import { review } from "../workflow-kit.mjs";
-import { At as oneLine, C as collecting, D as fixRisks, Dt as conflictFor, Et as conflictBody, Mt as renderStandards, Nt as standardKey, Ot as conflictTitle, P as buildReviewTriageMessage, T as fixNits, Tt as STANDARDS, b as answerReviewQuestions, d as guarded, et as nitFixBlock, f as healthy, j as reviewing, jt as parseStandards, k as reviewMissing, kt as isConflictTitle, lt as reviewEditNotesCapture, pt as reviewNotesCapture, ut as reviewEditsCapture, w as fixCheck, x as awaitReview, xt as withSummary, y as REVIEW } from "./reserved-X2RkNHin.mjs";
-import { i as isOptionalObject, n as closeReview, o as tail, s as NO_FINDINGS } from "./tail-S04KEewi.mjs";
+import { $ as nitFixBlock, A as reviewing, At as parseStandards, C as fixCheck, Dt as conflictTitle, E as fixRisks, Et as conflictFor, Mt as standardKey, N as buildReviewTriageMessage, O as reviewMissing, Ot as isConflictTitle, S as collecting, Tt as conflictBody, b as awaitReview, bt as withSummary, ct as reviewEditNotesCapture, d as healthy, ft as reviewNotesCapture, jt as renderStandards, kt as oneLine, lt as reviewEditsCapture, u as guarded, v as REVIEW, w as fixNits, wt as STANDARDS, y as answerReviewQuestions } from "./reserved-BzAFXuz_.mjs";
+import { i as isOptionalObject, n as closeReview, o as tail, s as NO_FINDINGS } from "./tail-JQzB21Q3.mjs";
 //#region src/workflows/shared/learn.ts
 const SUMMARY_MAX = 200;
 const summary = (body) => {

package/dist/chunks/{tail-S04KEewi.mjs → tail-JQzB21Q3.mjs}

@@ -1,7 +1,7 @@
 import { answered, head, human, judge, mark, numeric, read, refuse, removeScript, run, scope, sectionBodies, showScript, vars, writeScript } from "../flows.mjs";
 import { F as formatFinding, p as findingEntries, r as steeringFormatFor, x as reviewRisks } from "./steering-CCNvngSH.mjs";
 import { lensEntriesOf, lensOf, qualityLap, reviewToHandOff } from "../workflow-kit.mjs";
-import { A as reviewQuality, D as fixRisks, E as fixQuality, U as findingGateFile, W as findingGateMessage, bt as withGuidance, d as guarded, f as healthy, h as QUALITY, j as reviewing, k as reviewMissing, nt as qualityFindingsFile, q as handOffAwaitReviewMessage, rt as qualityTriageMessage, w as fixCheck, x as awaitReview, xt as withSummary, y as REVIEW } from "./reserved-X2RkNHin.mjs";
+import { A as reviewing, C as fixCheck, E as fixRisks, H as findingGateFile, K as handOffAwaitReviewMessage, O as reviewMissing, T as fixQuality, U as findingGateMessage, b as awaitReview, bt as withSummary, d as healthy, k as reviewQuality, m as QUALITY, nt as qualityTriageMessage, tt as qualityFindingsFile, u as guarded, v as REVIEW, yt as withGuidance } from "./reserved-BzAFXuz_.mjs";
 //#region src/workflows/shared/lenses.ts
 const NO_FINDINGS = {
 	fixed: [],

package/dist/workflows/cleanup.mjs

@@ -1,6 +1,6 @@
 import { agent, changes, glob, read, refuse, scope, start, vars } from "../flows.mjs";
-import { Ct as envDefaults, Ft as flagReferences, Lt as registryEntry, Rt as requireFlag, S as coder, St as defaults, i as skills, n as summary, o as flagShipped, r as access, t as steering } from "../chunks/reserved-X2RkNHin.mjs";
-import { a as refusePendingHandOff, r as handOffTail } from "../chunks/tail-S04KEewi.mjs";
+import { It as registryEntry, Lt as requireFlag, Pt as flagReferences, St as envDefaults, a as flagShipped, i as skills, n as summary, r as access, t as steering, x as coder, xt as defaults } from "../chunks/reserved-BzAFXuz_.mjs";
+import { a as refusePendingHandOff, r as handOffTail } from "../chunks/tail-JQzB21Q3.mjs";
 //#region src/workflows/cleanup/cleanup.ts
 const removingPrompt = (name, registry) => `Clean up the release flag "${name}", which is default-on: delete its entry in ${registry}, and remove every \`GTD_FLAG_${name.toUpperCase()}\` check from the shipped sources. Keep the flag-on path; delete code only the off path reached, including tests that pin the off path.`;
 const cleanupFlow = async () => {

package/dist/workflows/feature.mjs

@@ -1,8 +1,8 @@
 import { agent, answered, applyScript, changes, changesSince, check, codeChanges, env, hasThreadFor, head, human, judge, judgeDiffShape, kept, mark, matches, quote, read, refuse, removeScript, requireAnswers, requireProgress, requireReplies, requireThreadsClosed, restoreScript, revertScript, run, scope, start, vars, wrote } from "../flows.mjs";
 import { lensEntriesOf } from "../workflow-kit.mjs";
-import { $ as naiveTryMessage, B as designImpactPrompt, C as collecting, Ct as envDefaults, F as builderSystem, H as designTriagePrompt, I as clearCriteriaMessage, J as idleMessage, L as clearCriteriaQuestion, M as agentWithSkills, N as buildReviewCollectingPrompt, O as planner, Q as naivePassPrompt, R as criterionLine, S as coder, St as defaults, T as fixNits, V as designSystem, X as implementFixPrompt, Y as implementBuildingPrompt, Z as naiveApplyFailure, _ as REFACTOR_NOTE, _t as startGateBlockedMessage, a as flagModeOn, at as refactorDroppedRefusal, b as answerReviewQuestions, c as shipped, ct as refactorRules, f as healthy, g as REFACTOR, gt as seamSteerMessage, ht as seamByHandMessage, i as skills, it as refactorBuildingPrompt, m as NAIVE_TEST, mt as reviewerSystem, n as summary, ot as refactorFixPrompt, p as FEEDBACK, r as access, s as naiveTestOn, st as refactorNotePrompt, t as steering, tt as normaliseCriteriaScript, u as gate, v as REQUIREMENTS, vt as unwindFailedMessage, wt as testFileGlobs, yt as unwindFailure, z as designGateAnswerMessage } from "../chunks/reserved-X2RkNHin.mjs";
-import { a as refusePendingHandOff } from "../chunks/tail-S04KEewi.mjs";
-import { n as isCode$1, r as reUnwind, t as buildTail } from "../chunks/review-v7sh5GF4.mjs";
+import { B as designSystem, Ct as testFileGlobs, D as planner, F as clearCriteriaMessage, I as clearCriteriaQuestion, J as implementBuildingPrompt, L as criterionLine, M as buildReviewCollectingPrompt, P as builderSystem, Q as naiveTryMessage, R as designGateAnswerMessage, S as collecting, St as envDefaults, V as designTriagePrompt, X as naiveApplyFailure, Y as implementFixPrompt, Z as naivePassPrompt, _ as REQUIREMENTS, _t as unwindFailedMessage, at as refactorFixPrompt, d as healthy, et as normaliseCriteriaScript, f as FEEDBACK, g as REFACTOR_NOTE, gt as startGateBlockedMessage, h as REFACTOR, ht as seamSteerMessage, i as skills, it as refactorDroppedRefusal, j as agentWithSkills, l as gate, mt as seamByHandMessage, n as summary, o as naiveTestOn, ot as refactorNotePrompt, p as NAIVE_TEST, pt as reviewerSystem, q as idleMessage, r as access, rt as refactorBuildingPrompt, s as shipped, st as refactorRules, t as steering, vt as unwindFailure, w as fixNits, x as coder, xt as defaults, y as answerReviewQuestions, z as designImpactPrompt } from "../chunks/reserved-BzAFXuz_.mjs";
+import { a as refusePendingHandOff } from "../chunks/tail-JQzB21Q3.mjs";
+import { n as isCode$1, r as reUnwind, t as buildTail } from "../chunks/review-CVqRS0mc.mjs";
 import { posix } from "node:path";
 //#region src/workflows/shared/fences.ts
 const markFenced = (text) => {
@@ -23,6 +23,43 @@ const HEADING = /^ {0,3}(#{1,6})\s+(.*?)\s*#*\s*$/;
 /** A list item, its checkbox dropped: its text. */
 const ITEM = /^ ?(?:[-*+]|\d+[.)])\s+(?:\[[ xX]\]\s+)?(.*)$/;
 //#endregion
+//#region src/workflows/feature/release-flag.ts
+const NAME = /^existing:\s*`?([A-Za-z_][\w.-]*)`?$/i;
+const isFlagHeading = (h) => h !== null && h[1].length === 2 && /^release flag$/i.test(h[2].trim());
+/** The first line under `## Release Flag`, `undefined` without the section. */
+const requestLine = (text) => {
+	const lines = markFenced(text);
+	const at = lines.findIndex((l) => !l.fenced && isFlagHeading(HEADING.exec(l.line)));
+	if (at === -1) return void 0;
+	const body = lines.slice(at + 1);
+	const end = body.findIndex((l) => !l.fenced && HEADING.test(l.line));
+	return (end === -1 ? body : body.slice(0, end)).find((l) => l.line.trim() !== "")?.line.trim();
+};
+/** What `text` asks for, or why it cannot be read. No section asks for no flag. */
+const releaseFlagOf = (text) => {
+	const line = requestLine(text);
+	if (line === void 0 || /^none$/i.test(line)) return { kind: "none" };
+	if (/^new$/i.test(line)) return { kind: "new" };
+	const name = NAME.exec(line)?.[1];
+	return name === void 0 ? { unreadable: line } : {
+		kind: "existing",
+		name
+	};
+};
+/** Refuse `file` when its `## Release Flag` section is neither `none`, `new` nor `existing: <NAME>`. */
+const requireReleaseFlag = (file) => {
+	const request = releaseFlagOf(read(file) ?? "");
+	if (!("unreadable" in request)) return;
+	refuse(`gtd land: release-flag: ${file}'s "## Release Flag" reads ${JSON.stringify(request.unreadable)} — its first line must be \`new\`, \`existing: <NAME>\` or \`none\`, or leave the section out for no flag`);
+};
+/** What `.gtd/REQUIREMENTS.md` asks for now; a person's unreadable edit is refused. */
+const requestedFlag = () => {
+	requireReleaseFlag(REQUIREMENTS);
+	return releaseFlagOf(read(".gtd/REQUIREMENTS.md") ?? "");
+};
+/** Whether the change goes behind a release flag: only then does the seam judge rule. */
+const flagged = () => requestedFlag().kind !== "none";
+//#endregion
 //#region src/workflows/feature/criteria.ts
 /** Below this the judge's `yes` is not trusted: a wrong skip builds against criteria nobody can check. */
 const CLEAR_MIN_P = .8;
@@ -114,14 +151,15 @@ const requireCriteria = (file) => {
 	refuse(`gtd land: acceptance-criteria: ${file} has ${criteria.length === 0 ? `no "## Acceptance Criteria" list` : unnamed.length > 0 ? `${unnamed.length} criterion without an ID:\n${unnamed.map((c) => `  - ${c.text}`).join("\n")}` : `duplicate IDs: ${[...new Set(twice)].join(", ")}`} — list every criterion under "## Acceptance Criteria" as "- AC-<n>: <checkable criterion>", each ID unique and never reused`);
 };
 const isImpactHeading = (h) => h !== null && h[1].length === 2 && /^impact$/i.test(h[2].trim());
+const isImpactTurnHeading = (h) => h !== null && h[1].length === 2 && /^(impact|release flag)$/i.test(h[2].trim());
 /** Whether `text` has an unfenced, level-2 `## Impact` heading. */
 const hasImpact = (text) => markFenced(text).some((l) => !l.fenced && isImpactHeading(HEADING.exec(l.line)));
-/** `text` without its `## Impact` section, whitespace collapsed. */
+/** `text` without its `## Impact` and `## Release Flag` sections, whitespace collapsed. */
 const withoutImpact = (text) => {
 	let inImpact = false;
 	return markFenced(text).filter((l) => {
 		const h = l.fenced ? null : HEADING.exec(l.line);
-		if (h !== null && h[1].length <= 2) inImpact = isImpactHeading(h);
+		if (h !== null && h[1].length <= 2) inImpact = isImpactTurnHeading(h);
 		return !inImpact;
 	}).map((l) => l.line).join(" ").replace(/\s+/g, " ").trim();
 };
@@ -138,12 +176,12 @@ const requireImpact = (file) => {
 	if (hasImpact(text)) return;
 	refuse(`gtd land: impact: ${file} has no "## Impact" section — explore the codebase and add "## Impact" naming the units, public surfaces and surprises this change touches`);
 };
-/** Refuse a turn that changed `file` beyond its `## Impact` section. */
+/** Refuse a turn that changed `file` beyond its `## Impact` and `## Release Flag` sections. */
 const requireImpactOnly = (file) => {
 	const change = changes().get(file);
 	if (change === void 0) return;
 	if (withoutImpact(change.before ?? "") === withoutImpact(change.after ?? "")) return;
-	refuse(`gtd land: impact-only: this turn may only add "## Impact" to ${file} — restore everything else`);
+	refuse(`gtd land: impact-only: this turn may only add "## Impact" (and "## Release Flag") to ${file} — restore everything else`);
 };
 const idNumber = (id) => Number(id.slice(3));
 /** Why `listed` renumbers or reuses an earlier ID; `undefined` when it does neither. */
@@ -190,6 +228,7 @@ const impact = async () => {
 	requireCriteriaFrozen(REQUIREMENTS);
 	requireImpact(REQUIREMENTS);
 	requireImpactOnly(REQUIREMENTS);
+	requireReleaseFlag(REQUIREMENTS);
 };
 /**
 * The skip path: when the sketch stated clear, checkable criteria, write them
@@ -293,6 +332,7 @@ const design = (base, guard) => scope("design", async () => {
 		requireReplies(REQUIREMENTS);
 		requireCriteria(REQUIREMENTS);
 		requireImpact(REQUIREMENTS);
+		requireReleaseFlag(REQUIREMENTS);
 		guard?.();
 	} while (await noteGate(REQUIREMENTS, answerProductQuestions));
 });
@@ -658,7 +698,7 @@ const applied = async (tip) => {
 	return !wrote(".gtd/FEEDBACK.md") && codeChanges().length > 0;
 };
 const build = async (options) => {
-	await agentWithSkills("building", implementBuildingPrompt(options.reference, options.tier, options.amend, options.afterRefactor, flagModeOn(), options.rebuild), {
+	await agentWithSkills("building", implementBuildingPrompt(options.reference, options.amend, options.afterRefactor, requestedFlag(), options.rebuild), {
 		label: "Implementing",
 		model: coder(),
 		system: builderSystem(),
@@ -685,7 +725,7 @@ const implementing = (options) => scope("implement", async () => {
 /** Resolves `true` when the human steered (edited), `false` on a clean overrule. */
 const steer = async (retry) => {
 	await human("steer", {
-		message: seamSteerMessage(retry, flagModeOn()),
+		message: seamSteerMessage(retry, flagged()),
 		label: "Steer or overrule the naive pass",
 		file: REQUIREMENTS,
 		acceptClean: true
@@ -764,7 +804,7 @@ const tried = async (tip) => {
 	const before = head();
 	await run("applying", applyScript(tip.hash, FEEDBACK, naiveApplyFailure(tip.hash), [".gtd"]), { label: "Applying the naive pass to try it" });
 	await human("try", {
-		message: naiveTryMessage(flagModeOn()),
+		message: naiveTryMessage(flagged()),
 		label: "Try the naive pass",
 		file: NAIVE_TEST,
 		acceptClean: true
@@ -798,7 +838,7 @@ const decide = () => scope("seam", async () => {
 				continue;
 			}
 		}
-		const outcome = verdict ?? (flagModeOn() ? await ruled(tip, vetting.again) : {
+		const outcome = verdict ?? (flagged() ? await ruled(tip, vetting.again) : {
 			reference: tip.hash,
 			tip
 		});
@@ -867,7 +907,7 @@ const unwind = () => {
 	return run("unwind", revertScript(commit, FEEDBACK, unwindFailure(commit)), { label: "Unwinding your input" });
 };
 /**
-* A naive pass (judged only with `flagMode` on), then implement and the
+* A naive pass (judged only when a release flag is asked for), then implement and the
 * quality lap, then the review; design must have run since `firstBase`.
 */
 const buildFeature = async (firstBase) => {
@@ -959,7 +999,6 @@ const ordinaryStart = async () => {
 		file: ".gtd/TODO.md"
 	});
 	refusePendingHandOff();
-	flagModeOn();
 	naiveTestOn();
 	const stated = statedCriteria(changes(), head());
 	await unwind();

package/dist/workflows/fix.mjs

@@ -1,7 +1,7 @@
 import { read, refuse, removeScript, run, scope, start } from "../flows.mjs";
 import { b as reviewNotes, x as reviewRisks } from "../chunks/steering-CCNvngSH.mjs";
-import { Ct as envDefaults, G as finisherSystem, K as fixReviewNotesPrompt, M as agentWithSkills, S as coder, St as defaults, c as shipped, i as skills, l as baseline, n as summary, r as access, t as steering, y as REVIEW } from "../chunks/reserved-X2RkNHin.mjs";
-import { r as handOffTail, t as REVIEW_ORIG } from "../chunks/tail-S04KEewi.mjs";
+import { G as fixReviewNotesPrompt, St as envDefaults, W as finisherSystem, c as baseline, i as skills, j as agentWithSkills, n as summary, r as access, s as shipped, t as steering, v as REVIEW, x as coder, xt as defaults } from "../chunks/reserved-BzAFXuz_.mjs";
+import { r as handOffTail, t as REVIEW_ORIG } from "../chunks/tail-JQzB21Q3.mjs";
 //#region src/workflows/fix/fix.ts
 /**
 * Fix every note a human left in a handed-off `.gtd/REVIEW.md` and every

package/dist/workflows/review.mjs

@@ -1,7 +1,7 @@
 import { read, refuse, removeScript, run, start } from "../flows.mjs";
-import { Ct as envDefaults, G as finisherSystem, M as agentWithSkills, S as coder, St as defaults, c as shipped, dt as reviewFeedbackFixPrompt, ft as reviewGateBlockedMessage, i as skills, n as summary, r as access, t as steering, u as gate, v as REQUIREMENTS } from "../chunks/reserved-X2RkNHin.mjs";
-import { a as refusePendingHandOff } from "../chunks/tail-S04KEewi.mjs";
-import { r as reUnwind, t as buildTail } from "../chunks/review-v7sh5GF4.mjs";
+import { St as envDefaults, W as finisherSystem, _ as REQUIREMENTS, dt as reviewGateBlockedMessage, i as skills, j as agentWithSkills, l as gate, n as summary, r as access, s as shipped, t as steering, ut as reviewFeedbackFixPrompt, x as coder, xt as defaults } from "../chunks/reserved-BzAFXuz_.mjs";
+import { a as refusePendingHandOff } from "../chunks/tail-JQzB21Q3.mjs";
+import { r as reUnwind, t as buildTail } from "../chunks/review-CVqRS0mc.mjs";
 //#region src/workflows/review/review.ts
 const fixFeedback = async () => {
 	await agentWithSkills("feedback.fixing", reviewFeedbackFixPrompt(), {

package/dist/workflows/rollout.mjs

@@ -1,5 +1,5 @@
 import { agent, changesSince, glob, head, mark, read, refuse, removeScript, run, scope, vars } from "../flows.mjs";
-import { Ct as envDefaults, It as flipProblems, Pt as flagMentions, Rt as requireFlag, S as coder, St as defaults, i as skills, n as summary, o as flagShipped, p as FEEDBACK, r as access, t as steering, u as gate } from "../chunks/reserved-X2RkNHin.mjs";
+import { Ft as flipProblems, Lt as requireFlag, Nt as flagMentions, St as envDefaults, a as flagShipped, f as FEEDBACK, i as skills, l as gate, n as summary, r as access, t as steering, x as coder, xt as defaults } from "../chunks/reserved-BzAFXuz_.mjs";
 //#region src/workflows/rollout/rollout.ts
 const flippingPrompt = (name, registry) => `Roll out the release flag "${name}": in ${registry}, set \`defaultOn: true\` on its entry. Change nothing else — no other entry, no other field, no other file, no comments.`;
 const suiteBlockedMessage = () => "The suite is red after the rollout. Fix it by hand — a rollout may only touch the flag's registry entry — then land.";