@sangyaahub/pi-marg 1.0.0

package/adapters/pi/extensions/model-router.ts

@@ -0,0 +1,61 @@
+import { Type } from "typebox";
+
+import {
+  MODEL_STATE_TYPE,
+  emptyModelRouteState,
+  executeModelRoute,
+  restoreModelRouteState,
+  type ModelLike,
+  type ModelRouteParams,
+} from "../../../core/model-routing";
+
+function toolNames(pi: any): string[] {
+  return (pi.getAllTools?.() ?? [])
+    .map((tool: any) => typeof tool === "string" ? tool : String(tool?.name ?? ""))
+    .filter(Boolean);
+}
+
+function hasExternalDevin(pi: any): boolean {
+  return toolNames(pi).some((name) => /(?:^|[_-])devin(?:[_-]|$)/i.test(name));
+}
+
+function availableModels(ctx: any): ModelLike[] {
+  const scoped = (ctx.scopedModels ?? []).map((entry: any) => entry.model).filter(Boolean);
+  return (scoped.length > 0 ? scoped : ctx.modelRegistry.getAvailable()) as ModelLike[];
+}
+
+export default function modelRouter(pi: any) {
+  let state = emptyModelRouteState();
+  pi.on("session_start", (_event: unknown, ctx: any) => {
+    state = restoreModelRouteState(ctx.sessionManager.getBranch());
+  });
+
+  pi.registerTool({
+    name: "auto_model_route",
+    label: "PiMarg Model Router",
+    description: "Discover, select, and activate live A/B/C/D model choices while enforcing A different from C and B different from D.",
+    parameters: Type.Object({
+      action: Type.Union([
+        Type.Literal("catalog"),
+        Type.Literal("select"),
+        Type.Literal("activate"),
+        Type.Literal("status"),
+      ]),
+      stage: Type.Optional(Type.Union([Type.Literal("A"), Type.Literal("B"), Type.Literal("C"), Type.Literal("D")])),
+      target: Type.Optional(Type.String()),
+      workType: Type.Optional(Type.Number()),
+    }),
+    async execute(_toolCallId: string, params: ModelRouteParams, _signal: unknown, _onUpdate: unknown, ctx: any) {
+      const models = availableModels(ctx);
+      const execution = await executeModelRoute(state, params, {
+        runtimeName: "Pi",
+        models,
+        hasExternalDevin: hasExternalDevin(pi),
+        activate: (model) => pi.setModel(model),
+        persist: (nextState) => pi.appendEntry(MODEL_STATE_TYPE, nextState),
+      });
+      state = execution.state;
+      return execution.response;
+    },
+  });
+}

package/adapters/pi/extensions/runtime-capabilities.ts

@@ -0,0 +1,25 @@
+import { Type } from "typebox";
+
+import {
+  buildRuntimeCapabilityReport,
+  normalizeCapabilityNames,
+} from "../../../core/runtime-capabilities";
+
+function response(report: unknown) {
+  return { content: [{ type: "text" as const, text: JSON.stringify(report, null, 2) }], details: report };
+}
+
+export default function runtimeCapabilities(pi: any) {
+  pi.registerTool({
+    name: "auto_runtime_status",
+    label: "PiMarg Runtime Status",
+    description: "Detect Pi tools, commands, and memory hooks before routing optional workflow stages.",
+    parameters: Type.Object({}),
+    async execute() {
+      const tools = normalizeCapabilityNames(pi.getAllTools?.() ?? []);
+      const commands = normalizeCapabilityNames(pi.getCommands?.() ?? []);
+      const memoryConfigured = tools.some((name) => ["recall", "retain", "reflect", "learn"].includes(name));
+      return response(buildRuntimeCapabilityReport("Pi", tools, commands, memoryConfigured));
+    },
+  });
+}

package/adapters/pi/extensions/workflow-bootstrap.ts

@@ -0,0 +1,7 @@
+import { UNIVERSAL_WORKFLOW_POLICY } from "../../../core/workflow-policy";
+
+export default function workflowBootstrap(pi: any) {
+  pi.on("before_agent_start", (event: any) => ({
+    systemPrompt: `${String(event.systemPrompt ?? "")}\n\n${UNIVERSAL_WORKFLOW_POLICY}`,
+  }));
+}

package/adapters/pi/prompts/auto-close.md

@@ -0,0 +1,11 @@
+---
+description: Verify and close the active Auto Mode session.
+---
+
+For the active Auto Mode session:
+
+1. Check the acceptance evidence, conditional verification gates, D verdict, and any required security verification. List anything not verified and its consequence.
+2. Load and run `session-lessons` unless its `run_count` is already `1`. Use native learn/retain only when available and approved.
+3. Offer `/auto-commit` only when the review verdict is `ship`; do not create a commit automatically during close.
+4. Update the session ledger to `completed` only if the requested outcome is actually complete; otherwise leave it `active` or mark it `blocked` with the reason.
+5. Do not perform any protected action as part of closing the session.

package/adapters/pi/prompts/auto-commit.md

@@ -0,0 +1,7 @@
+---
+description: Create local atomic commits after Auto Mode verification and review pass.
+---
+
+Read the active ledger. Continue only when acceptance evidence is complete, the D verdict is `ship`, any required security verification passed, and the user invoked this command for the exact repository.
+
+Use the repository's normal local Git workflow to prepare focused atomic commits and clear messages. Inspect the staged diff before each commit and record the resulting commit IDs or the failure. Do not push, open a PR, publish, merge, delete, or bypass any approval gate.

package/adapters/pi/prompts/auto-models.md

@@ -0,0 +1,12 @@
+---
+description: List or change the active Auto Mode A/B/C/D model selections from Pi's live authenticated catalog.
+argument-hint: [status | choose]
+---
+
+Load `auto-mode-router` and read its model-routing reference.
+
+- With no argument or `status`, call `auto_model_route` with `action: status`, then show the saved A/B/C/D selectors and separation checks.
+- With `choose`, call `auto_model_route` with `action: catalog` and the active work type. Present only required stages and exact available selectors. Save each answer with `action: select`.
+- Do not type or persist a model ID that the live catalog did not return.
+- Treat any model returned by Pi's registry as a normal in-session route. Treat Devin or another external coding-agent session as a capability-gated external route; creating one requires `post-web` approval.
+- C/D are the authoritative independent review selectors. Any detected advisor or watcher is supplemental and must not weaken the A≠C or B≠D checks.

package/adapters/pi/prompts/auto-reset.md

@@ -0,0 +1,8 @@
+---
+description: Close the current Auto Mode context and begin intake for a different task.
+argument-hint: <new work request>
+---
+
+If an Auto Mode session is active, preserve its files and mark its status `superseded`; do not delete it. Clear its conversational routing state, load `auto-mode-router`, and begin fresh intake for:
+
+$ARGUMENTS

package/adapters/pi/prompts/auto-review.md

@@ -0,0 +1,11 @@
+---
+description: Run the required Auto Mode plan or implementation review with the saved independent model.
+argument-hint: [plan | code]
+---
+
+Load `auto-mode-router` and the native Pi runtime reference.
+
+- `plan`: activate Stage C, review the authoritative plan and highest-cost risks, then record the verdict.
+- `code` or no argument: require verification evidence, activate Stage D, and apply the P0–P3/confidence/verdict review contract. Use read-only task fan-out only when a compatible extension is detected; otherwise review sequentially with the saved independent model.
+
+Never fix findings in the review pass. A block verdict returns to planning or B with a recorded countermeasure.

package/adapters/pi/prompts/auto-runtime.md

@@ -0,0 +1,13 @@
+---
+description: Show Pi capabilities available to the active Auto Mode workflow.
+argument-hint: [status | advisor | memory | context]
+---
+
+Load `auto-mode-router`, read its native Pi runtime reference, and call `auto_runtime_status`.
+
+- With no argument or `status`, report available tools/commands, active memory, and exact fallbacks without changing configuration.
+- With `advisor`, report whether a compatible advisor or watcher extension is detected. Keep C/D as the authoritative reviewers.
+- With `memory`, show the approved context-specific local/Hindsight route. Never expose or write a token.
+- With `context`, report whether checkpoint/rewind is detected and use it only around one disposable exploration branch.
+
+Update the runtime fields in the ledger only after observing the actual state.

package/adapters/pi/prompts/auto-status.md

@@ -0,0 +1,17 @@
+---
+description: Show the current Auto Mode classification and evidence state.
+---
+
+Read the active Auto Mode session ledger and report only:
+
+- work context and branding policy;
+- work type and primary skill spine;
+- current phase and authoritative plan path;
+- exact A/B/C/D model selectors, separation checks, and agents used;
+- CodeGraph, native runtime detection, orchestration/advisor, and optional add-on state;
+- tests, DAP, UI, security, and review-verdict state;
+- collaboration and local commit state;
+- pending approvals;
+- whether session lessons have run.
+
+Do not change files or advance the workflow.

package/adapters/pi/prompts/auto.md

@@ -0,0 +1,12 @@
+---
+description: Start or resume the Auto Mode intake and workflow.
+argument-hint: <work request>
+---
+
+Load `auto-mode-router` and start a new Auto Mode task for this request:
+
+$ARGUMENTS
+
+If an active Auto Mode task already covers this request, resume it instead of repeating intake.
+
+If the user requests multiple agents, use parallel work only when a compatible task or subagent extension is detected and the work units are genuinely independent. Otherwise execute the same stages sequentially. Model, evidence, and approval gates apply in either mode.

package/agents/auto-builder.md

@@ -0,0 +1,10 @@
+---
+name: auto-builder
+description: Implement a verified plan through the selected Auto Mode skill spine.
+tools: [read, write, edit, bash, ls, lsp, ast_grep, ast_edit, task, recall, codegraph_explore]
+spawns: [auto-qa, auto-reviewer, auto-security-reviewer]
+blocking: true
+autoloadSkills: [auto-mode-router, codegraph-first]
+---
+
+Read the active ledger and authoritative plan before editing. Confirm Stage B is activated and inherited. Use only the recorded primary spine. Pass the CodeGraph gate: use CodeGraph for architecture/dependency/impact questions, LSP for definitions/references/renames/diagnostics, `ast_grep` for structural queries, and exact reads plus hash-aware edit or `ast_edit` for changes. Implement the smallest reliable slice, follow repository conventions, discover existing tests, and verify behavior continuously. Use Ponytail or language skills only when recorded and available. Use `task` batch fan-out only for proven-independent work with explicit ownership; isolate parallel writes and integrate each result into the canonical tree before review. Record actual evidence and never perform a protected action without the runtime approval gate.

package/agents/auto-business-analyst.md

@@ -0,0 +1,9 @@
+---
+name: auto-business-analyst
+description: Produce business, sales, or non-technical analysis through the selected Auto Mode route.
+tools: [read, grep, glob, ls, web_search, checkpoint, rewind]
+blocking: true
+autoloadSkills: [auto-mode-router]
+---
+
+Read the active ledger, confirm Stage A or C is activated and inherited, and use the selected analysis skill when available. Separate current sourced facts, inference, and recommendation. For a broad disposable research branch, checkpoint before exploration and rewind once with a concise sourced report when that capability is detected. Track material assumptions and decisions. Do not publish, send messages, update a CRM, share the session, or post to any web platform without one-use `post-web` approval.

package/agents/auto-debugger.md

@@ -0,0 +1,10 @@
+---
+name: auto-debugger
+description: Reproduce, diagnose, and fix a defect through the selected Auto Mode skill spine.
+tools: [read, write, edit, bash, ls, lsp, ast_grep, debug, task, checkpoint, rewind, recall, codegraph_explore]
+spawns: [scout, auto-qa, auto-reviewer]
+blocking: true
+autoloadSkills: [auto-mode-router, codegraph-first]
+---
+
+Read the ledger and confirm Stage B is activated and inherited. Pass the CodeGraph gate, then reproduce the failure when feasible and preserve the failing evidence. Use CodeGraph for flow and impact, LSP for exact symbols, and the native DAP `debug` tool when a supported live process gives stronger evidence than logging. A bounded debugging investigation may use one checkpoint and one rewind report to discard noisy exploration while preserving the causal chain. Add or strengthen a regression check, apply the root-cause fix, and rerun relevant checks. Label diagnosis provisional when reproduction is impossible. Keep one primary spine and record protected-action checkpoints.

package/agents/auto-intake.md

@@ -0,0 +1,10 @@
+---
+name: auto-intake
+description: Classify an Auto Mode request without modifying the project.
+model: ["@smol", "@default"]
+tools: [read, grep, glob, ls, auto_model_route, auto_runtime_status]
+blocking: true
+autoloadSkills: [auto-mode-router]
+---
+
+Complete only the intake and availability checks from `auto-mode-router`. Ask in the required order: work context, work type, skill mode, live A/B/C/D selections, then add-ons. Call `auto_runtime_status` before recommending runtime capabilities. Return the proposed `[AUTO-MODE]` state. Do not plan, implement, or change project files.

package/agents/auto-lessons-writer.md

@@ -0,0 +1,10 @@
+---
+name: auto-lessons-writer
+description: Run the once-per-session Auto Mode lessons closeout.
+model: ["@smol", "@default"]
+tools: [read, write, edit, grep, glob, ls, learn, retain]
+blocking: true
+autoloadSkills: [session-lessons]
+---
+
+Load and follow `session-lessons`. Use only verified artifacts, write the lessons file once, and update the active session ledger. If approved native memory tools are available, `learn` the reusable guardrail and `retain` only the verified decision/lesson summary; never retain secrets or raw client material. Do not alter product code or perform protected actions.

package/agents/auto-qa.md

@@ -0,0 +1,9 @@
+---
+name: auto-qa
+description: Verify user-visible Auto Mode changes through conditional browser, desktop, and repository checks.
+tools: [read, bash, ls, lsp, eval, codegraph_explore]
+blocking: true
+autoloadSkills: [auto-mode-router, codegraph-first]
+---
+
+Read the active ledger and acceptance criteria. Run after Stage B while its implementation model is still active and before Stage D. Pass the CodeGraph gate for repository source questions. Choose only verification surfaces that match the change: repository tests/builds for code contracts, browser helpers through `eval` for web flows, computer helpers through `eval` for native desktop flows, and direct artifact inspection for generated output. Exercise the happy path plus the highest-cost invalid, empty, dependency-failure, or recovery path that applies. Do not modify product code; return reproducible evidence and mark unavailable surfaces as not verified rather than claiming success.

package/agents/auto-reviewer.md

@@ -0,0 +1,9 @@
+---
+name: auto-reviewer
+description: Review an Auto Mode change for correctness, regressions, tests, and maintainability without modifying it.
+tools: [read, bash, ls, lsp, ast_grep, task, codegraph_explore]
+blocking: true
+autoloadSkills: [auto-mode-router, codegraph-first]
+---
+
+Confirm Stage C for plan review or Stage D for implementation/code review is activated and inherited. Review the requested plan, diff, commit, or branch read-only. Pass the CodeGraph gate; use CodeGraph for impact, LSP for exact contracts, and structural tools when detected. Compare the result with the active plan, decisions, acceptance criteria, and test evidence. When scope or risk justifies it, use task fan-out only when detected and reconcile all lenses into the shared review shape: P0–P3 priority, confidence, location, consequence, countermeasure, and a ship/block verdict. Run `ponytail-review` separately when recorded; it does not replace correctness review. Distinguish findings from questions. Do not fix code or perform external mutations.

package/agents/auto-security-reviewer.md

@@ -0,0 +1,9 @@
+---
+name: auto-security-reviewer
+description: Perform a read-only security review of an Auto Mode repository scope or change.
+tools: [read, bash, ls, lsp, ast_grep, task, security_scan, codegraph_explore]
+blocking: true
+autoloadSkills: [auto-mode-router, codegraph-first]
+---
+
+Confirm the recorded review stage is activated and inherited. Review the exact scope read-only. Pass the CodeGraph gate; use graph paths for attack flow and impact, LSP for exact symbols, and `ast_grep` for structural checks. Use native `security_scan` when the runtime detector reports it available; otherwise run non-mutating repository-native scanners and record the fallback. Validate candidates before assigning severity. Ponytail must never remove a security control. Report only evidence-backed findings with location, exploit consequence, confidence, and countermeasure. Fixes require a separate plan and must not be applied in this review task.

package/agents/auto-strategist.md

@@ -0,0 +1,10 @@
+---
+name: auto-strategist
+description: Brainstorm, analyze, or plan through the selected Auto Mode skill spine.
+tools: [read, bash, ls, web_search, lsp, ast_grep, task, checkpoint, rewind, recall, reflect, codegraph_explore]
+spawns: [scout]
+blocking: true
+autoloadSkills: [auto-mode-router, codegraph-first]
+---
+
+Read the active Auto Mode ledger, confirm Stage A (or C for a plan second-eye) is activated and inherited, and use only its selected primary spine. For existing repositories, pass the CodeGraph gate: use CodeGraph for architecture and impact, LSP for exact symbols/types, and `ast_grep` for structural patterns. Load the mapped strategy or planning skill explicitly and verify it is available. Keep implementation writes off. For long disposable exploration only, create one checkpoint before investigating and rewind once with a concise evidence report; do not treat checkpoint as a stage-completion marker. When approved memory is available, recall only task-relevant context and verify it against current evidence. Update the authoritative plan and neutral decision ledger, then return acceptance criteria, open risks, and the next gate.

package/assets/pi-marg-banner-source.html

@@ -0,0 +1,106 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>PiMarg banner</title>
+  <style>
+    * { box-sizing: border-box; }
+    html, body { margin: 0; width: 1280px; height: 640px; overflow: hidden; }
+    body {
+      color: #161614;
+      background: #FAFAF7;
+      font-family: Inter, ui-sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+    }
+    .canvas {
+      position: relative;
+      display: grid;
+      grid-template-columns: 1.25fr .75fr;
+      width: 100%;
+      height: 100%;
+      padding: 70px 76px 60px;
+      isolation: isolate;
+    }
+    .canvas::before {
+      position: absolute;
+      inset: 0;
+      z-index: -2;
+      background:
+        radial-gradient(circle at 91% 14%, rgba(107, 155, 250, .27), transparent 28%),
+        linear-gradient(125deg, #FAFAF7 0 58%, #E8EFFE 58% 100%);
+      content: "";
+    }
+    .copy { display: flex; flex-direction: column; align-items: flex-start; }
+    .eyebrow { color: #0338A8; font-size: 18px; font-weight: 750; letter-spacing: .16em; text-transform: uppercase; }
+    h1 { margin: 34px 0 0; color: #021E5C; font-size: 112px; line-height: .9; letter-spacing: -.075em; }
+    .meaning { margin: 18px 0 0; color: #C27B1A; font-family: Georgia, serif; font-size: 25px; font-style: italic; }
+    .tagline { max-width: 650px; margin: 26px 0 0; color: #3A3A37; font-size: 29px; line-height: 1.25; letter-spacing: -.025em; }
+    .chips { display: flex; gap: 10px; margin-top: auto; }
+    .chip { padding: 8px 13px; border: 1px solid #C8D5F3; border-radius: 999px; color: #0338A8; background: #fff; font-size: 14px; font-weight: 700; }
+    .route { position: relative; display: grid; place-items: center; }
+    .path {
+      position: absolute;
+      width: 236px;
+      height: 440px;
+      border: 22px solid #0451F7;
+      border-top: 0;
+      border-bottom: 0;
+      border-radius: 118px;
+      opacity: .98;
+    }
+    .path::before, .path::after {
+      position: absolute;
+      left: -22px;
+      width: 236px;
+      height: 118px;
+      border: 22px solid #0451F7;
+      content: "";
+    }
+    .path::before { top: -18px; border-bottom: 0; border-radius: 118px 118px 0 0; }
+    .path::after { bottom: -18px; border-top: 0; border-radius: 0 0 118px 118px; }
+    .nodes { position: relative; z-index: 2; display: grid; gap: 23px; }
+    .node {
+      display: grid;
+      grid-template-columns: 48px 1fr;
+      align-items: center;
+      width: 250px;
+      min-height: 64px;
+      overflow: hidden;
+      border: 1px solid rgba(3, 56, 168, .18);
+      border-radius: 16px;
+      background: rgba(255, 255, 255, .95);
+      box-shadow: 0 12px 30px rgba(2, 30, 92, .12);
+    }
+    .node b { display: grid; height: 100%; place-items: center; color: #fff; background: #0338A8; font-size: 21px; }
+    .node span { padding: 0 14px; color: #021E5C; font-size: 17px; font-weight: 730; }
+    .node.review b { background: #C27B1A; }
+    .byline { position: absolute; right: 64px; bottom: 32px; display: flex; align-items: center; gap: 10px; color: #0338A8; font-size: 14px; font-weight: 720; }
+    .byline img { width: 15px; height: 27px; object-fit: contain; }
+  </style>
+</head>
+<body>
+  <main class="canvas" aria-label="PiMarg by Sangyaa">
+    <section class="copy">
+      <div class="eyebrow">Pi + OMP agent workflow</div>
+      <h1>PiMarg</h1>
+      <p class="meaning">मार्ग · a clear path</p>
+      <p class="tagline">A governed development path from first thought to verified code.</p>
+      <div class="chips">
+        <span class="chip">Live model routing</span>
+        <span class="chip">Independent review</span>
+        <span class="chip">Approval gates</span>
+      </div>
+    </section>
+    <section class="route" aria-label="Discover, review, build, review">
+      <div class="path" aria-hidden="true"></div>
+      <div class="nodes">
+        <div class="node"><b>A</b><span>Discover</span></div>
+        <div class="node review"><b>C</b><span>Review the plan</span></div>
+        <div class="node"><b>B</b><span>Build + verify</span></div>
+        <div class="node review"><b>D</b><span>Review the code</span></div>
+      </div>
+    </section>
+    <div class="byline"><img src="brand/sangyaa-mark.png" alt=""> An open-source project by Sangyaa</div>
+  </main>
+</body>
+</html>

package/commands/auto-close.md

@@ -0,0 +1,11 @@
+---
+description: Verify and close the active Auto Mode session.
+---
+
+For the active Auto Mode session:
+
+1. Check the acceptance evidence, conditional verification gates, D verdict, and any required security verification. List anything not verified and its consequence.
+2. Load and run `session-lessons` unless its `run_count` is already `1`. Use native learn/retain only when available and approved.
+3. Offer `/auto-commit` only when the review verdict is `ship`; do not create a commit automatically during close.
+4. Update the session ledger to `completed` only if the requested outcome is actually complete; otherwise leave it `active` or mark it `blocked` with the reason.
+5. Do not perform any protected action as part of closing the session.

package/commands/auto-commit.md

@@ -0,0 +1,7 @@
+---
+description: Create local atomic commits after Auto Mode verification and review pass.
+---
+
+Read the active ledger. Continue only when acceptance evidence is complete, the D verdict is `ship`, any required security verification passed, and the user invoked this command for the exact repository.
+
+Run OMP's native `omp commit` workflow to prepare local atomic commits and validated messages. Record the resulting commit IDs or the failure. Do not push, open a PR, publish, merge, delete, or bypass any approval gate.

package/commands/auto-models.md

@@ -0,0 +1,12 @@
+---
+description: List or change the active Auto Mode A/B/C/D model selections from OMP's live authenticated catalog.
+argument-hint: [status | choose]
+---
+
+Load `auto-mode-router` and read its model-routing reference.
+
+- With no argument or `status`, call `auto_model_route` with `action: status`, then show the saved A/B/C/D selectors and separation checks.
+- With `choose`, call `auto_model_route` with `action: catalog` and the active work type. Present only required stages and exact available selectors. Save each answer with `action: select`.
+- Do not type or persist a model ID that the live catalog did not return.
+- Distinguish native `devin/swe-*` OMP models from the optional external `devin/mcp-session` route. Only creating the external session requires `post-web` approval.
+- C/D are the authoritative independent review selectors. A configured OMP advisor is supplemental and must not weaken the A≠C or B≠D checks.

package/commands/auto-reset.md

@@ -0,0 +1,8 @@
+---
+description: Close the current Auto Mode context and begin intake for a different task.
+argument-hint: <new work request>
+---
+
+If an Auto Mode session is active, preserve its files and mark its status `superseded`; do not delete it. Clear its conversational routing state, load `auto-mode-router`, and begin fresh intake for:
+
+$ARGUMENTS

package/commands/auto-review.md

@@ -0,0 +1,11 @@
+---
+description: Run the required Auto Mode plan or implementation review with the saved independent model.
+argument-hint: [plan | code]
+---
+
+Load `auto-mode-router` and the native OMP runtime reference.
+
+- `plan`: activate Stage C, review the authoritative plan and highest-cost risks, then record the verdict.
+- `code` or no argument: require verification evidence, activate Stage D, and run `auto-reviewer`. If native `/review` is available, its P0–P3/confidence/verdict contract is preferred; otherwise reproduce that contract with read-only `task` fan-out.
+
+Never fix findings in the review pass. A block verdict returns to planning or B with a recorded countermeasure.

package/commands/auto-runtime.md

@@ -0,0 +1,13 @@
+---
+description: Show native OMP capabilities available to the active Auto Mode workflow.
+argument-hint: [status | advisor | memory | context]
+---
+
+Load `auto-mode-router`, read its native OMP runtime reference, and call `auto_runtime_status`.
+
+- With no argument or `status`, report available tools/commands, active memory, and exact fallbacks without changing configuration.
+- With `advisor`, explain `/advisor configure`, `/advisor on`, and `/advisor status` using the saved C/D model policy. Do not rewrite global roles or WATCHDOG files automatically.
+- With `memory`, show the approved context-specific local/Hindsight route and `/memory diagnose`. Never expose or write a token.
+- With `context`, explain that checkpoint/rewind must be enabled and used only around one disposable exploration branch.
+
+Update the runtime fields in the ledger only after observing the actual state.

package/commands/auto-status.md

@@ -0,0 +1,17 @@
+---
+description: Show the current Auto Mode classification and evidence state.
+---
+
+Read the active Auto Mode session ledger and report only:
+
+- work context and branding policy;
+- work type and primary skill spine;
+- current phase and authoritative plan path;
+- exact A/B/C/D model selectors, separation checks, and agents used;
+- CodeGraph, native runtime detection, orchestration/advisor, and optional add-on state;
+- tests, DAP, UI, security, and review-verdict state;
+- collaboration and local commit state;
+- pending approvals;
+- whether session lessons have run.
+
+Do not change files or advance the workflow.

package/commands/auto.md

@@ -0,0 +1,12 @@
+---
+description: Start or resume the Auto Mode intake and workflow.
+argument-hint: <work request>
+---
+
+Load `auto-mode-router` and start a new Auto Mode task for this request:
+
+$ARGUMENTS
+
+If an active Auto Mode task already covers this request, resume it instead of repeating intake.
+
+When the user's prompt contains the standalone `workflowz` control, preserve it as an explicit request for deterministic native OMP multi-agent orchestration; all Auto Mode model, evidence, and approval gates still apply.

package/core/approval-policy.ts

@@ -0,0 +1,109 @@
+const APPROVAL_PREFIX = "APPROVE ACTION:";
+
+export const PROTECTED_ACTIONS = ["delete-remove", "push-main", "merge-pr", "post-web"] as const;
+export type ProtectedAction = (typeof PROTECTED_ACTIONS)[number];
+
+const MERGE_PR_COMMAND = /\b(?:gh\s+pr\s+merge|glab\s+mr\s+merge)\b/i;
+const PUSH_MAIN_COMMAND = /\bgit\s+push\b[^\n;&|]*(?:\b(?:main|master)\b|HEAD:(?:refs\/heads\/)?(?:main|master)\b)/i;
+const ANY_PUSH_COMMAND = /\bgit\s+push\b/i;
+const DELETE_REMOVE_COMMAND =
+  /(?:^|[;&|]|\n)\s*(?:sudo\s+)?(?:rm|rmdir|unlink|trash|git\s+(?:clean|rm|branch\s+(?:-d|-D|--delete)|tag\s+(?:-d|--delete)|remote\s+remove)|find\b[^\n;&|]*\s-delete\b|gh\s+(?:repo|release)\s+delete|npm\s+(?:remove|uninstall)|pnpm\s+(?:remove|uninstall)|yarn\s+remove|bun\s+remove|pipx?\s+uninstall|brew\s+uninstall|apt(?:-get)?\s+(?:remove|purge))\b/i;
+const WEB_POST_COMMAND =
+  /\b(?:(?:omp|pi)\s+(?:share|collab)\b|gh\s+(?:pr\s+(?:create|comment|review)|issue\s+(?:create|comment)|release\s+create)|glab\s+(?:mr\s+create|issue\s+create)|npm\s+publish|twine\s+upload|curl\b[^\n]*(?:-X|--request)\s*(?:POST|PUT|PATCH|DELETE)|curl\b[^\n]*(?:-d|--data|--data-raw|--data-binary|-F|--form|-T|--upload-file)\b|wget\b[^\n]*(?:--post-(?:data|file)\b|--method(?:=|\s+)(?:POST|PUT|PATCH|DELETE)\b))\b/i;
+const WEB_PLATFORM_MUTATION_COMMAND =
+  /\b(?:gh\s+(?:repo|gist|project)\s+(?:create|edit)|gh\s+api\b[^\n]*(?:(?:-X|--method)\s*(?:POST|PUT|PATCH|DELETE)|(?:-f|-F|--field|--raw-field)\s)|(?:vercel|netlify|firebase|wrangler)\s+(?:deploy|publish))\b/i;
+
+const MERGE_PR_TOOL = /(?:^|[_-])(?:merge[_-]?(?:pr|pull[_-]?request|mr)|(?:pr|pull[_-]?request|mr)[_-]?merge)(?:$|[_-])/i;
+const DELETE_REMOVE_TOOL = /(?:^|[_-])(?:delete|remove|uninstall)(?:$|[_-])/i;
+const WEB_POST_TOOL =
+  /(?:^|[_-])(?:send|post|publish|reply|comment|message|upload|deploy|create[_-]?(?:issue|pr|pull[_-]?request|release|session)|session[_-]?create|update[_-]?(?:comment|post|status))(?:$|[_-])/i;
+
+export function parseApproval(text: string): ProtectedAction | undefined {
+  const normalized = text.trim();
+  return PROTECTED_ACTIONS.find((action) => normalized === `${APPROVAL_PREFIX} ${action}`);
+}
+
+export function approvalInstruction(action: ProtectedAction): string {
+  return `${APPROVAL_PREFIX} ${action}`;
+}
+
+export function approvalPolicyFromEnvironment(
+  environment: Record<string, string | undefined> = process.env,
+): "ask" | "allow" {
+  const value = environment.PIMARG_APPROVAL_POLICY
+    ?? environment.UNIVERSAL_AUTO_MODE_APPROVAL_POLICY
+    ?? environment.OMP_AUTO_MODE_APPROVAL_POLICY
+    ?? "ask";
+  return value.trim().toLowerCase() === "allow" ? "allow" : "ask";
+}
+
+export function classifyInput(text: string): ProtectedAction | undefined {
+  const command = text.trim().split(/\s+/, 1)[0]?.toLowerCase();
+  return command === "/collab" || command === "/share" ? "post-web" : undefined;
+}
+
+export function classifyToolCall(
+  toolName: string,
+  input: Record<string, unknown> | undefined,
+): ProtectedAction | undefined {
+  const normalizedName = toolName.toLowerCase();
+
+  if (normalizedName === "bash") {
+    const command = commandFrom(input);
+    if (MERGE_PR_COMMAND.test(command)) return "merge-pr";
+    if (PUSH_MAIN_COMMAND.test(command)) return "push-main";
+    if (DELETE_REMOVE_COMMAND.test(command)) return "delete-remove";
+    if (ANY_PUSH_COMMAND.test(command) || WEB_POST_COMMAND.test(command) || WEB_PLATFORM_MUTATION_COMMAND.test(command)) return "post-web";
+    return undefined;
+  }
+
+  if (MERGE_PR_TOOL.test(normalizedName)) return "merge-pr";
+  if (DELETE_REMOVE_TOOL.test(normalizedName)) return "delete-remove";
+  if (WEB_POST_TOOL.test(normalizedName)) return "post-web";
+
+  if (/(?:browser|web|github|gitlab|slack|teams|notion|linear|jira|email|social|crm|devin)/i.test(normalizedName)) {
+    const payload = stringifyInput(input);
+    if (!/\b(?:post|publish|send|submit|reply|comment|message|upload|merge)\b/i.test(payload)) {
+      return undefined;
+    }
+    if (/\bmerge\b/i.test(payload) && /\b(?:pr|pull request|merge request|mr)\b/i.test(payload)) {
+      return "merge-pr";
+    }
+    return "post-web";
+  }
+
+  return undefined;
+}
+
+export class OneUseApprovals {
+  private readonly actions = new Set<ProtectedAction>();
+
+  grant(action: ProtectedAction): void {
+    this.actions.add(action);
+  }
+
+  consume(action: ProtectedAction): boolean {
+    if (!this.actions.has(action)) return false;
+    this.actions.delete(action);
+    return true;
+  }
+
+  clear(): void {
+    this.actions.clear();
+  }
+}
+
+function stringifyInput(input: Record<string, unknown> | undefined): string {
+  if (!input) return "";
+  try {
+    return JSON.stringify(input);
+  } catch {
+    return "";
+  }
+}
+
+function commandFrom(input: Record<string, unknown> | undefined): string {
+  if (!input) return "";
+  const candidate = input.command ?? input.cmd;
+  return typeof candidate === "string" ? candidate : "";
+}