axstack 0.35.0 → 0.36.0

package/README.md

@@ -66,7 +66,7 @@ You make decisions at holds and substantial-spec approval.
 Follow [getting started](docs/getting-started.md) for the full first-task journey
 and [guides](docs/guides.md) for features, reviews, watches, debugging and releases.
 
-## What you can do
+## What you can do (19 skills)
 
 | Layer | Skill | What it does |
 | --- | --- | --- |
@@ -86,6 +86,7 @@ and [guides](docs/guides.md) for features, reviews, watches, debugging and relea
 | Operate | [axstack-cleanup](skills/axstack-cleanup/SKILL.md) | Retire eligible completed agent resources. |
 | Operate | [axstack-relay](skills/axstack-relay/SKILL.md) | Send an explicit message or authorized notification. |
 | Understand | [axstack-research](skills/axstack-research/SKILL.md) | Answer one bounded question with sources. |
+| Understand | [axstack-scout](skills/axstack-scout/SKILL.md) | Gather codebase evidence for an agent across several areas. |
 | Understand | [axstack-explain](skills/axstack-explain/SKILL.md) | Explain a system and separate known behavior from gaps. |
 | Understand | [axstack-diagram](skills/axstack-diagram/SKILL.md) | Draw SVG/CSS in inline pages, Mermaid for chat/GitHub/docs, or requested archify viewers. |
 

package/docs/installation.md

@@ -307,6 +307,11 @@ The `mixed` and `claude-only` presets assign `axstack-auditor`,
 Activation requires that exact ID and high effort in saved T3 capabilities;
 missing either holds these roles without substitution, including Haiku 4.5.
 The `codex-only` assignments for these roles are unchanged.
+Scout adds `axstack-explore-codebase-luna` at Codex Luna xhigh in `mixed` and
+`codex-only`. The optional `axstack-explore-codebase-flash` seat uses
+Antigravity `gemini-3.8-flash-medium` at medium effort in `mixed`.
+The missing Scout seats have explicit null models: Luna and Flash in
+`claude-only`, and Flash in `codex-only`.
 The three `-sol` pair seats for auditor, research-code, and explore-execution
 use Sol high in `mixed` and `codex-only`; `claude-only` records intentional
 absences. The paired seats run independently on one brief and the driver

package/docs/workflows.md

@@ -29,6 +29,8 @@ Direct routes need no spec ceremony:
 - [axstack-perf](../skills/axstack-perf/SKILL.md) routes performance work to
   Debug, Improve, or Implement through the shared performance loop.
 - `axstack-research` answers one bounded source-backed question.
+- `axstack-scout` gathers cited codebase evidence for broad or unfamiliar
+  questions using independent, read-only seats.
 - `axstack-correct` reports repeated mistakes and proposes stronger checks.
   Only the user invokes it.
 - `axstack-explain` separates implemented, intended, tested, live, and unknown
@@ -129,8 +131,11 @@ use the Claude Sonnet class at high effort. `axstack-explore-codebase` and
 `axstack-monitor` adopt Haiku 5.5 high, with class `haiku` and exact pin
 `claude-haiku-5-5`. Missing that ID or high effort in saved T3 capabilities
 holds those roles without substitution. `codex-only` keeps its Codex
-assignments for those roles. Mixed web-google and X retain their source-specific
-Antigravity and Grok routes.
+assignments for those roles. Scout adds a Luna xhigh codebase seat in `mixed`
+and `codex-only`, and an optional Antigravity Flash medium seat in `mixed`.
+In `claude-only`, Luna and Flash are intentionally absent; Flash is also
+intentionally absent in `codex-only`. Mixed web-google and X retain their
+source-specific Antigravity and Grok routes.
 The mixed `axstack-auditor` uses Haiku 5.5 xhigh, pinned to `claude-haiku-5-5`;
 missing that ID or xhigh effort holds without substitution. The mixed
 `axstack-explainer-review` uses Sol medium; `axstack-explainer` stays Sonnet high.
@@ -418,6 +423,9 @@ Proven verification is required for every own PR. Use the authored receipt:
   Earlier-head red-to-green evidence in the PR's patch lineage counts only when
   the reviewer records that it still applies to the final change.
   An applicable `verify-<app>` passing result is required for the changed behavior.
+  The passing result must come from the reviewer's or `axstack-ui-verifier`'s local drive at that head.
+  The author's log alone never satisfies this requirement.
+  A preview URL never satisfies this requirement.
 - Verification requires no limitation tagged `changed-behavior: unproven`.
   The reviewer tags every limitation leaving changed behavior unexercised or
   unverified, in whatever words, `changed-behavior: unproven`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "axstack",
-  "version": "0.35.0",
+  "version": "0.36.0",
   "description": "Axstack installer and setup CLI: installs owned chat skills and role data, configures supported harness settings, and checks T3 Code capabilities.",
   "keywords": [
     "claude-code",

package/profiles/presets/claude-only.json

@@ -173,6 +173,24 @@
       "modelClass": "haiku",
       "model": "claude-haiku-5-5"
     },
+    {
+      "id": "axstack-explore-codebase-luna",
+      "name": "Axstack codebase explorer Luna (unavailable)",
+      "provider": "claude",
+      "model": null,
+      "modeId": "bypassPermissions",
+      "thinkingOptionId": "xhigh",
+      "notes": "Intentional single-provider absence: Luna Scout seat is unavailable in claude-only."
+    },
+    {
+      "id": "axstack-explore-codebase-flash",
+      "name": "Axstack codebase explorer Flash (unavailable)",
+      "provider": "claude",
+      "model": null,
+      "modeId": "bypassPermissions",
+      "thinkingOptionId": "medium",
+      "notes": "Intentional single-provider absence: Flash Scout seat is unavailable in claude-only."
+    },
     {
       "id": "axstack-explore-execution",
       "name": "Axstack execution explorer",

package/profiles/presets/codex-only.json

@@ -172,6 +172,24 @@
       "notes": "Codebase mapper: explores repository structure and interfaces for research and handoff context. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution.",
       "modelClass": "sol"
     },
+    {
+      "id": "axstack-explore-codebase-luna",
+      "name": "Axstack codebase explorer Luna",
+      "provider": "codex",
+      "modeId": "full-access",
+      "thinkingOptionId": "xhigh",
+      "notes": "Independent read-only Luna Scout facet explorer. Searches the whole repository on the same brief without cross-reading; reports evidence for driver reconciliation. Unavailable model or effort holds without substitution.",
+      "modelClass": "luna"
+    },
+    {
+      "id": "axstack-explore-codebase-flash",
+      "name": "Axstack codebase explorer Flash (unavailable)",
+      "provider": "codex",
+      "model": null,
+      "modeId": "full-access",
+      "thinkingOptionId": "medium",
+      "notes": "Intentional single-provider absence: Flash Scout seat is unavailable in codex-only."
+    },
     {
       "id": "axstack-explore-execution",
       "name": "Axstack execution explorer",

package/profiles/presets/mixed.json

@@ -173,6 +173,24 @@
       "modelClass": "haiku",
       "model": "claude-haiku-5-5"
     },
+    {
+      "id": "axstack-explore-codebase-luna",
+      "name": "Axstack codebase explorer Luna",
+      "provider": "codex",
+      "modeId": "full-access",
+      "thinkingOptionId": "xhigh",
+      "notes": "Independent read-only Luna Scout facet explorer. Searches the whole repository on the same brief without cross-reading; reports evidence for driver reconciliation. Unavailable model or effort holds without substitution.",
+      "modelClass": "luna"
+    },
+    {
+      "id": "axstack-explore-codebase-flash",
+      "name": "Axstack codebase explorer Flash",
+      "provider": "antigravity",
+      "model": "gemini-3.8-flash-medium",
+      "modeId": "full-access",
+      "thinkingOptionId": "medium",
+      "notes": "Optional read-only Scout breadth seat: searches the whole repository for missed boundaries and counterexamples. Reports evidence for driver reconciliation without cross-reading."
+    },
     {
       "id": "axstack-explore-execution",
       "name": "Axstack execution explorer",

package/skills/axstack/references/role-roster.md

@@ -41,6 +41,10 @@
   or high effort holds these roles without substitution.
   `axstack-monitor`: standalone watch never sends; chat-run watch: bounded
   internal reports to its Run and original driver.
+- Scout requires `axstack-explore-codebase` and
+  `axstack-explore-codebase-luna` per facet in mixed (Haiku high + Luna
+  xhigh) and codex-only (Sol high + Luna xhigh). Claude-only requires
+  the Haiku high base seat per facet.
 - Sol pairs `axstack-auditor-sol`/`axstack-research-code-sol`/
   `axstack-explore-execution-sol`: `codex/sol` high in
   mixed/codex-only; intentionally absent in claude-only. Dispatch each
@@ -50,7 +54,8 @@
 - Optional seats: `axstack-arena-candidate-grok`,
   `axstack-arena-candidate-antigravity`, `axstack-research-web-google`,
   `axstack-research-x`, `axstack-checker`, `axstack-research-code-sol`,
-  `axstack-explore-execution-sol`, `axstack-auditor-sol`.
+  `axstack-explore-execution-sol`, `axstack-auditor-sol`,
+  `axstack-explore-codebase-flash`.
   Always dispatch optional seats when configured and available. Only a
   launch failure, trust/login prompt, or prompt block makes one absent:
   fence the attempt, record `absent (<reason>)`, name it once in the next

package/skills/axstack/references/ui-verification.md

@@ -47,6 +47,7 @@ If a PR changes a mapped feature, its author updates the feature file in the sam
 For a missing skill, add "suggest `axstack-verify create`" to the receipt's `Unverified:` line.
 Never generate a verification skill automatically.
 For a broken or stale recipe, report the gap.
+Report a broken or stale recipe as a `low` finding naming `axstack-verify maintain`.
 Never let a broken or stale recipe waive existing acceptance obligations.
 Keep browser recipes tool-neutral for the verifier.
 

package/skills/axstack-align/SKILL.md

@@ -149,6 +149,11 @@ approval; record chosen document names and paths once per run.
    gaps. For substantial work, this summary becomes part of the draft spec in
    `axstack-spec`; spec approval is the one human checkpoint. Included and
    excluded work must be distinguishable, and no open item may appear settled.
+   When scope changes runnable behavior, the read-back records a Verification decision.
+   For an applicable `verify-<app>` skill, record the features that cover the change.
+   For a missing skill, the plan always includes `axstack-verify create` as the first PR.
+   Skipping this first PR requires plain AGREE from both `axstack-advisor-astra` and `axstack-advisor-opus` that a verification skill is unnecessary.
+   Record both advisers' reason in the Verification decision.
 2. Classify the result with the shared
    [proportional scope identity](../axstack/references/routing.md#proportional-scope-identity):
    - For work clarified as small, return a **small-change intent** handoff with

package/skills/axstack-implement/SKILL.md

@@ -175,6 +175,7 @@ If a PR changes a mapped feature, its author updates the feature file in the sam
 For a missing skill, add "suggest `axstack-verify create`" to the receipt's `Unverified:` line.
 Never generate a verification skill automatically.
 For a broken or stale recipe, report the gap.
+Report a broken or stale recipe as a `low` finding naming `axstack-verify maintain`.
 Never let a broken or stale recipe waive existing acceptance obligations.
 Keep browser recipes tool-neutral for the verifier.
 

package/skills/axstack-improve/SKILL.md

@@ -16,9 +16,9 @@ improvement is a valid result.
 Before acting, load [Standing contracts](../axstack/references/contracts.md),
 then follow its lifecycle and audit pointers. Immediately before any useful
 role dispatch, load the [T3 runtime
-sequence](../axstack/references/t3-runtime.md). Use existing
-`axstack-explore-codebase` or `axstack-research-code` roles only when their
-specialization materially helps; create no new profile.
+sequence](../axstack/references/t3-runtime.md). For broad codebase mapping,
+use `axstack-scout`. Use `axstack-research-code` only when its specialization
+materially helps. Do not create a new profile.
 When dispatching `axstack-research-code`, dispatch `axstack-research-code-sol`
 independently on the same bounded brief without cross-reading. The driver
 reconciles findings per claim and never averages them. Record an intentionally

package/skills/axstack-research/SKILL.md

@@ -50,7 +50,8 @@ is part of research.
    - `axstack-research-web`: web and external sources.
    - `axstack-research-web-google`: Google-Search-grounded web sources via Gemini/Antigravity.
    - `axstack-research-x`: X (Twitter) posts and threads via Grok; cite post URLs and dates.
-   - `axstack-explore-codebase`: broad codebase mapping.
+   - For broad codebase mapping, use `axstack-scout`.
+     Never dispatch `axstack-explore-codebase` directly for broad mapping.
    - `axstack-explore-execution`: execution and runtime traces.
    - `axstack-explore-execution-sol`: independent Sol execution investigation.
 

package/skills/axstack-review/SKILL.md

@@ -330,6 +330,14 @@ This section applies to peer and authored PR modes.
    mode-required receipt records concrete evidence and consequences, coverage,
    limitations, and findings without a finding quota.
 
+   If a `verify-<app>` skill covers affected behavior, the authored reviewer runs its base-revision Launch and Doctor against the pinned final head in its detached checkout.
+   For an `axstack-verify create` PR, the reviewer drives the candidate's recipe because the base has none.
+   The author never performs this review drive.
+   The reviewer drives each affected feature and records that drive as the `Final-head check`.
+   Delegate browser drives to `axstack-ui-verifier` with the feature file path.
+   Running the applicable surface counts as spin-up; a CLI run qualifies.
+   Use loopback and isolated instances under [axstack-verify](../axstack-verify/SKILL.md#isolate-every-attempt).
+
    For each finding, name its defect class and list every instance of that
    class in the pinned diff and dependent surfaces: callers, sibling docs,
    README, and tests. A later instance of an already-named class is a coverage
@@ -393,6 +401,7 @@ Authored receipt requirements:
   Report Coverage: COMPLETE | INCOMPLETE with covered angles, acceptance and executable evidence.
   Tag each limitation leaving changed behavior unexercised or unverified, in whatever words, changed-behavior: unproven.
   Record Final-head check: <command> -> <log path> for a check the reviewer ran at the final head; keep the log in the run's evidence folder.
+  Applicable verify-<app>: Final-head check records the reviewer's local drive of each affected feature at the pinned final head. Use n/a — <reason> when no skill covers the affected behavior.
   Record a Safety fact: about the change itself rather than the review process.
   Rate each non-agent comment at the current head above low | low | addressed | uncertain.
   Re-rate each non-agent comment at every new head.
@@ -420,6 +429,7 @@ Verdict: <APPROVE | REQUEST_CHANGES | INCOMPLETE>
 Coverage: COMPLETE | INCOMPLETE — <angles + acceptance + executable evidence checked>
 Limitations: <unverified boundaries + why; tag each limitation leaving changed behavior unexercised or unverified, in whatever words, changed-behavior: unproven>
 Final-head check: <command> -> <log path> — <check the reviewer ran at the final head; log kept in the run's evidence folder>
+Applicable verify-<app>: <Final-head check records the reviewer's local drive of each affected feature at the pinned final head>. Use n/a — <reason> when no skill covers the affected behavior.
 Findings: <severity + evidence + consequence each>
 Revert: <declared line + diff-based assessment in authored mode>
 Agent-authored comment and thread IDs: <receipt-recorded IDs or none>

package/skills/axstack-scout/SKILL.md

@@ -0,0 +1,84 @@
+---
+name: axstack-scout
+description: When an agent needs codebase evidence across several areas or unfamiliar code, use axstack-scout to gather cited findings.
+---
+
+# Scout
+
+On driver entry, sweep under [Workspace hygiene](../axstack/references/workspace-hygiene.md); dispatched workers do not sweep.
+For every dispatch brief, name its private `<run dir>/evidence/<dispatch>/` folder.
+
+Before acting, load [Standing contracts](../axstack/references/contracts.md)
+and follow its lifecycle and audit pointers. Immediately before dispatch,
+read the [T3 runtime boundary](../axstack/references/t3-runtime.md) and
+[Role roster](../axstack/references/role-roster.md). A Scout call from an
+ordinary chat creates a run with `run-init`.
+
+## 1. Bound the exploration
+
+Use Scout for questions spanning several codebase areas, unfamiliar code, or
+claims that something does not exist. A single factual lookup stays in the
+current chat. Ordinary file reading also stays in the current chat.
+Only a driver or PR owner dispatches Scout. Workers, authors and reviewers
+request exploration from their driver; they do not launch a fan-out.
+
+Split the question into 1–3 facets, with each facet searching the whole
+repository for its concern, such as definitions, callers, tests or config.
+Facet briefs must never restrict the search to one directory. Scale by facet
+count; keep every required seat within each facet.
+
+## 2. Dispatch independent seats
+
+Use the run's selected preset and role snapshot. Give seats for one facet the
+same brief without cross-reading; the optional Flash seat searches the whole
+question for missed boundaries and counterexamples.
+
+- In mixed, each facet requires an independent Haiku and Luna pair: one
+  `axstack-explore-codebase` (Haiku 5.5 high) and one
+  `axstack-explore-codebase-luna` (Luna xhigh).
+- In codex-only, each facet requires an independent Sol and Luna pair:
+  `axstack-explore-codebase` (Sol high) and
+  `axstack-explore-codebase-luna` (Luna xhigh).
+- In claude-only, each facet requires one Haiku seat:
+  `axstack-explore-codebase` (Haiku 5.5 high).
+
+In mixed, dispatch one optional `axstack-explore-codebase-flash` for the Scout
+call, for at most seven seats across three facets.
+
+Sol and Luna agreement is not cross-family corroboration. An unavailable or
+rejected required seat holds Scout without substitution. The first dispatch
+for each provider/model/effort must reach a running or completed run before
+siblings launch, and its rejection stops siblings of that configuration.
+
+A Flash launch failure, trust/login prompt, or prompt block records
+`absent (<reason>)` and Scout continues with the required seats. Fence the
+failed attempt and name its absence once in the next read-back. A Flash model
+missing from saved capabilities holds that seat under the existing unavailable
+model rule, without substitution. A Flash hold covers only the Flash seat,
+and Scout returns the other seats' summary while naming that hold. An
+uncertain dispatch is reconciled, not recorded absent.
+
+## 3. Pin evidence and report
+
+Pin each brief to the working tree's content identity. Content identity pins
+HEAD SHA, SHA-256 of `git diff --binary HEAD` when dirty, and a path and
+SHA-256 for each untracked, non-ignored file from
+`git ls-files -o --exclude-standard`. Ignored files are outside the search
+scope. Seats search the pinned working tree. Each seat is read-only and
+writes only to its private evidence folder.
+
+Each seat report has at most about 15 claims, each labeled `verified`,
+`inference`, or `unverified` using Research labels. Every present claim
+cites `file:line` evidence. A not-found claim says `not found in <scope>`
+and includes the exact search command, scope, and content identity; it never
+claims absence beyond that scope.
+
+The driver reconciles per claim without averaging and names disagreements.
+Cross-family agreement corroborates but does not prove a claim. Before
+relying on an answer-changing not-found claim, the driver rechecks its search.
+Reuse findings only while content identity, including untracked file contents,
+is unchanged; any identity change requires re-scouting all facets still needed.
+
+Return a compact summary to the driver and store seat reports in the run's
+evidence folder. Scout adds no mandatory gate to other phases; they may use
+its evidence when useful.

package/skills/axstack-verify/SKILL.md

@@ -69,7 +69,8 @@ Keep that folder outside scratch selected for deletion.
 Clean up owned resources by literal absolute paths.
 Follow [Safe deletion](../axstack/references/workspace-hygiene.md#safe-deletion).
 
-For a peer PR, read the Launch recipe and helpers from the base revision and execute against the pinned candidate.
+For a peer PR or a review run, read the Launch recipe and helpers from the base revision and execute against the pinned candidate.
+For an `axstack-verify create` PR, the reviewer drives the candidate's recipe because the base has none.
 Keep trusted base helpers separate from the candidate's recipe files.
 Bind evidence to the served SHA.
 Report an unavailable candidate run as unverified.

package/skills/axstack-watch/SKILL.md

@@ -278,6 +278,9 @@ Proven verification is required for every own PR. Use the authored receipt:
   Earlier-head red-to-green evidence in the PR's patch lineage counts only when
   the reviewer records that it still applies to the final change.
   An applicable `verify-<app>` passing result is required for the changed behavior.
+  The passing result must come from the reviewer's or `axstack-ui-verifier`'s local drive at that head.
+  The author's log alone never satisfies this requirement.
+  A preview URL never satisfies this requirement.
 - Verification requires no limitation tagged `changed-behavior: unproven`.
   The reviewer tags every limitation leaving changed behavior unexercised or
   unverified, in whatever words, `changed-behavior: unproven`.

package/src/roles.js

@@ -92,8 +92,8 @@ export function assessRoleReadiness(roles, preset) {
     (preset === 'mixed' && role.id === 'axstack-research-x' && role.provider === 'grok') ||
     (preset === 'mixed' && role.id === 'axstack-arena-candidate-grok' && role.provider === 'grok') ||
     (preset === 'mixed' && role.id === 'axstack-arena-candidate-antigravity' && role.provider === 'antigravity') ||
-    (preset === 'codex-only' && ['axstack-advisor-opus', 'axstack-escalation-fable', 'axstack-arena-judge-opus', 'axstack-research-web-google', 'axstack-research-x', 'axstack-arena-candidate-grok', 'axstack-arena-candidate-antigravity'].includes(role.id)) ||
-    (preset === 'claude-only' && ['axstack-advisor-astra', 'axstack-arena-judge-astra', 'axstack-research-web-google', 'axstack-research-x', 'axstack-arena-candidate-grok', 'axstack-arena-candidate-antigravity', 'axstack-auditor-sol', 'axstack-research-code-sol', 'axstack-explore-execution-sol'].includes(role.id))
+    (preset === 'codex-only' && ['axstack-advisor-opus', 'axstack-escalation-fable', 'axstack-arena-judge-opus', 'axstack-research-web-google', 'axstack-research-x', 'axstack-arena-candidate-grok', 'axstack-arena-candidate-antigravity', 'axstack-explore-codebase-flash'].includes(role.id)) ||
+    (preset === 'claude-only' && ['axstack-advisor-astra', 'axstack-arena-judge-astra', 'axstack-research-web-google', 'axstack-research-x', 'axstack-arena-candidate-grok', 'axstack-arena-candidate-antigravity', 'axstack-auditor-sol', 'axstack-research-code-sol', 'axstack-explore-execution-sol', 'axstack-explore-codebase-luna', 'axstack-explore-codebase-flash'].includes(role.id))
   );
   for (const role of roles) {
     if (!bounds.has(role.provider)) {