cclaw-cli 0.51.28 → 0.51.30

package/dist/content/subagents.js

@@ -445,7 +445,7 @@ Implementation that touches shared source trees must remain **sequential** unles
   - **3–4:** appendix / “worth tracking” section (not merge-blocking alone)
   - **1–2:** suppress from primary narrative unless paired with stronger evidence
 
-### Review Army Artifact Contract (required in review stage via /cc-next)
+### Review Army Artifact Contract (required in review stage via /cc)
 
 Write a structured reconciliation artifact at \`.cclaw/artifacts/07-review-army.json\` using this schema:
 

package/dist/content/templates.d.ts

@@ -1,4 +1,4 @@
 export declare const ARTIFACT_TEMPLATES: Record<string, string>;
 export declare const RULEBOOK_MARKDOWN = "# Cclaw Rulebook\n\n## MUST_ALWAYS\n- Follow flow order: brainstorm -> scope -> design -> spec -> plan -> tdd -> review -> ship\n- Require explicit user confirmation after plan before TDD\n- Keep evidence artifacts in `.cclaw/artifacts/`\n- Enforce RED before GREEN in TDD\n- Run two-layer review (spec_compliance and code_quality) before ship\n- Validate all inputs before processing \u2014 never trust external data without sanitization\n- Prefer immutable data patterns and pure functions where the language supports them\n- Follow existing repo conventions, patterns, and directory structure \u2014 match the codebase\n- Verify claims with fresh evidence: \"tests pass\" requires running tests in this message\n- Use conventional commits: `type(scope): description` (feat, fix, refactor, test, docs, chore)\n\n## MUST_NEVER\n- Skip RED phase and jump directly to GREEN in TDD\n- Ship with critical review findings\n- Start implementation during /brainstorm\n- Modify generated cclaw files manually when CLI can regenerate them\n- Commit `.cclaw/` or generated shim files\n- Expose secrets, tokens, API keys, or absolute system paths in agent output\n- Duplicate existing functionality without explicit justification \u2014 search before building\n- Bypass security checks, linting hooks, or type checking to \"move faster\"\n- Claim success (\"Done,\" \"All good,\" \"Tests pass\") without running verification in this message\n- Make changes outside the blast radius of the current task without user consent\n\n## DELEGATION\nWhen a task requires specialist knowledge (security audit, performance profiling, database review),\ndelegate to a specialized agent or skill if the harness supports it. The primary agent should:\n1. Identify the specialist domain\n2. Provide focused context (relevant files, the specific concern)\n3. Evaluate the specialist output before acting on it \u2014 do not blindly apply recommendations\n";
-export declare const CURSOR_WORKFLOW_RULE_MDC = "---\ndescription: cclaw workflow guardrails for Cursor agent sessions\nglobs:\n  - \"**/*\"\nalwaysApply: true\n---\n\n<!-- cclaw-managed-cursor-workflow-rule -->\n\n# Cclaw Workflow Guardrails\n\n## Activation Rule\n\nBefore responding to coding work:\n1. Read `.cclaw/state/flow-state.json`.\n2. Start with `/cc` or continue with `/cc-next`.\n3. If no software-stage flow applies, respond normally.\n\n## Stage Order\n\n`brainstorm -> scope -> design -> spec -> plan -> tdd -> review -> ship`\n\nTrack-specific skips are allowed only when `flow-state.track` + `skippedStages` explicitly say so.\n\n## Task Classification\n\n| Class | Route |\n|---|---|\n| non-trivial software work | `/cc <idea>` |\n| trivial software fix | `/cc <idea>` (quick track) |\n| bugfix with repro | `/cc <idea>` and enforce RED-first in tdd |\n| pure question / non-software | direct answer (no stage flow) |\n\n## Command Surface\n\n- `/cc` = entry and resume.\n- `/cc-next` = only progression path.\n- Knowledge capture and recall use the `learnings` skill when requested.\n\n## Verification Discipline\n\n- No completion claim without fresh command evidence in this turn.\n- Do not mark gates passed from memory.\n- Keep evidence in `.cclaw/artifacts/`; archive via `npx cclaw-cli archive`.\n\n## Delegation And Approvals\n\n- Machine-only checks in design/plan/tdd/review/ship should auto-dispatch when tooling supports it.\n- Ask for user input only at explicit approval gates (scope mode, plan approval, challenge resolution, ship finalization).\n- If harness capabilities are partial, record waiver reasons in delegation logs.\n\n## Routing Source Of Truth\n\n- Primary router: `.cclaw/skills/using-cclaw/SKILL.md`.\n- Stage behavior: current stage skill plus `.cclaw/state/flow-state.json`.\n- Preamble budget: keep role/status announcements brief and avoid repeating\n  them unless the stage or role changes.\n";
+export declare const CURSOR_WORKFLOW_RULE_MDC = "---\ndescription: cclaw workflow guardrails for Cursor agent sessions\nglobs:\n  - \"**/*\"\nalwaysApply: true\n---\n\n<!-- cclaw-managed-cursor-workflow-rule -->\n\n# Cclaw Workflow Guardrails\n\n## Activation Rule\n\nBefore responding to coding work:\n1. Read `.cclaw/state/flow-state.json`.\n2. Start with `/cc` or continue with `/cc`.\n3. If no software-stage flow applies, respond normally.\n\n## Stage Order\n\n`brainstorm -> scope -> design -> spec -> plan -> tdd -> review -> ship`\n\nTrack-specific skips are allowed only when `flow-state.track` + `skippedStages` explicitly say so.\n\n## Task Classification\n\n| Class | Route |\n|---|---|\n| non-trivial software work | `/cc <idea>` |\n| trivial software fix | `/cc <idea>` (quick track) |\n| bugfix with repro | `/cc <idea>` and enforce RED-first in tdd |\n| pure question / non-software | direct answer (no stage flow) |\n\n## Command Surface\n\n- `/cc` = entry and resume.\n- `/cc` = only progression path.\n- Knowledge capture and recall use the `learnings` skill when requested.\n\n## Verification Discipline\n\n- No completion claim without fresh command evidence in this turn.\n- Do not mark gates passed from memory.\n- Keep evidence in `.cclaw/artifacts/`; archive via `npx cclaw-cli archive`.\n\n## Delegation And Approvals\n\n- Machine-only checks in design/plan/tdd/review/ship should auto-dispatch when tooling supports it.\n- Ask for user input only at explicit approval gates (scope mode, plan approval, challenge resolution, ship finalization).\n- If harness capabilities are partial, record waiver reasons in delegation logs.\n\n## Routing Source Of Truth\n\n- Primary router: `.cclaw/skills/using-cclaw/SKILL.md`.\n- Stage behavior: current stage skill plus `.cclaw/state/flow-state.json`.\n- Preamble budget: keep role/status announcements brief and avoid repeating\n  them unless the stage or role changes.\n";
 export declare function buildRulesJson(): Record<string, unknown>;

package/dist/content/templates.js

@@ -1410,7 +1410,7 @@ alwaysApply: true
 
 Before responding to coding work:
 1. Read \`.cclaw/state/flow-state.json\`.
-2. Start with \`/cc\` or continue with \`/cc-next\`.
+2. Start with \`/cc\` or continue with \`/cc\`.
 3. If no software-stage flow applies, respond normally.
 
 ## Stage Order
@@ -1431,7 +1431,7 @@ Track-specific skips are allowed only when \`flow-state.track\` + \`skippedStage
 ## Command Surface
 
 - \`/cc\` = entry and resume.
-- \`/cc-next\` = only progression path.
+- \`/cc\` = only progression path.
 - Knowledge capture and recall use the \`learnings\` skill when requested.
 
 ## Verification Discipline

package/dist/content/track-render-context.d.ts

@@ -5,6 +5,7 @@ export interface TrackRenderContext {
     traceabilitySourceNoun: string;
     traceabilityIdNoun: string;
     traceabilitySliceNoun: string;
+    safetySummary: string;
     upstreamArtifactLabel: string;
     upstreamArtifactPath: string;
 }

package/dist/content/track-render-context.js

@@ -9,6 +9,7 @@ export function trackRenderContext(track) {
             traceabilitySourceNoun: "acceptance criterion",
             traceabilityIdNoun: "acceptance criterion ID",
             traceabilitySliceNoun: "acceptance slice",
+            safetySummary: "quick skips ceremony, not safety: spec approval, TDD, review, and ship gates remain mandatory",
             upstreamArtifactLabel: "spec artifact",
             upstreamArtifactPath: ".cclaw/artifacts/04-spec.md"
         };
@@ -19,6 +20,7 @@ export function trackRenderContext(track) {
         traceabilitySourceNoun: "plan task",
         traceabilityIdNoun: "plan task ID",
         traceabilitySliceNoun: "plan slice",
+        safetySummary: "full upstream planning safety remains in the active track",
         upstreamArtifactLabel: "plan artifact",
         upstreamArtifactPath: ".cclaw/artifacts/05-plan.md"
     };

package/dist/doctor-registry.d.ts

@@ -1,8 +1,10 @@
 export type DoctorSeverity = "error" | "warning" | "info";
+export type DoctorActionGroup = "sync" | "user-action" | "stage-work" | "informational";
 export interface DoctorCheckMetadata {
     severity: DoctorSeverity;
     summary: string;
     fix: string;
+    actionGroup: DoctorActionGroup;
     docRef?: string;
 }
 export declare function doctorCheckMetadata(checkName: string): DoctorCheckMetadata;

package/dist/doctor-registry.js

@@ -1,5 +1,6 @@
 function ref(fileName) {
-    return `docs/${fileName}`;
+    const anchor = fileName.replace(/\.md$/u, "").replace(/[^a-z0-9]+/giu, "-").toLowerCase();
+    return `README.md#${anchor}`;
 }
 const RULES = [
     {
@@ -8,6 +9,7 @@ const RULES = [
             severity: "info",
             summary: "Gate reconciliation status update.",
             fix: "No action required unless subsequent gate checks fail.",
+            actionGroup: "informational",
             docRef: ref("config.md")
         }
     },
@@ -17,6 +19,7 @@ const RULES = [
             severity: "warning",
             summary: "Advisory signal; runtime can continue with caution.",
             fix: "Address when possible to prevent future drift or degraded behavior.",
+            actionGroup: "informational",
             docRef: "README.md"
         }
     },
@@ -26,6 +29,7 @@ const RULES = [
             severity: "warning",
             summary: "Stage skill quality guardrail check.",
             fix: "Tune generated stage skill content and re-run `cclaw sync`.",
+            actionGroup: "sync",
             docRef: "README.md"
         }
     },
@@ -35,6 +39,7 @@ const RULES = [
             severity: "error",
             summary: "Required runtime tooling availability check.",
             fix: "Install the missing required tool and re-run `cclaw doctor`.",
+            actionGroup: "user-action",
             docRef: "README.md"
         }
     },
@@ -43,16 +48,28 @@ const RULES = [
         metadata: {
             severity: "error",
             summary: "Generated runtime surface presence check.",
-            fix: "Run `cclaw sync` to regenerate runtime files, then re-run doctor.",
+            fix: "Run `cclaw sync` to safely regenerate generated runtime files, then re-run doctor.",
+            actionGroup: "sync",
             docRef: "README.md"
         }
     },
+    {
+        test: /^managed_resources:/,
+        metadata: {
+            severity: "error",
+            summary: "Managed generated resource manifest integrity check.",
+            fix: "Run `cclaw sync` to refresh managed generated files; inspect upgrade backup paths before discarding local edits.",
+            actionGroup: "sync",
+            docRef: ref("config.md")
+        }
+    },
     {
         test: /^(hook:|hooks:|lifecycle:|git_hooks:)/,
         metadata: {
             severity: "error",
             summary: "Hook wiring and lifecycle integration check.",
-            fix: "Repair hook/plugin wiring (usually via `cclaw sync`) and validate harness config.",
+            fix: "Run `cclaw sync` to regenerate hook/plugin wiring; if the check still fails, validate harness config and permissions.",
+            actionGroup: "sync",
             docRef: ref("harnesses.md")
         }
     },
@@ -61,7 +78,8 @@ const RULES = [
         metadata: {
             severity: "error",
             summary: "Harness shim and routing file consistency check.",
-            fix: "Regenerate harness adapters via `cclaw sync`; confirm enabled harness list.",
+            fix: "Run `cclaw sync` to regenerate harness adapters; confirm enabled harness list if it remains failing.",
+            actionGroup: "sync",
             docRef: ref("harnesses.md")
         }
     },
@@ -70,7 +88,8 @@ const RULES = [
         metadata: {
             severity: "error",
             summary: "Flow state and gate evidence consistency check.",
-            fix: "Repair flow-state artifacts and gate evidence, then run `cclaw doctor --reconcile-gates`.",
+            fix: "Repair the named stage artifacts/gate evidence, then run `cclaw doctor --reconcile-gates --explain` to refresh derived gate status only.",
+            actionGroup: "stage-work",
             docRef: ref("config.md")
         }
     },
@@ -79,7 +98,8 @@ const RULES = [
         metadata: {
             severity: "error",
             summary: "Knowledge and artifact runtime integrity check.",
-            fix: "Restore missing runtime files under `.cclaw/` or re-run `cclaw sync`.",
+            fix: "Restore the missing `.cclaw/` runtime file or run `cclaw sync` when it is generated surface drift.",
+            actionGroup: "sync",
             docRef: "README.md"
         }
     },
@@ -88,7 +108,8 @@ const RULES = [
         metadata: {
             severity: "error",
             summary: "Routing skill and protocol integrity check.",
-            fix: "Regenerate runtime skills via `cclaw sync`, then re-run doctor.",
+            fix: "Run `cclaw sync` to regenerate runtime skills, then re-run doctor.",
+            actionGroup: "sync",
             docRef: ref("harnesses.md")
         }
     },
@@ -103,7 +124,8 @@ const RULES = [
         metadata: {
             severity: "warning",
             summary: "Reference/overview doc integrity (non-blocking).",
-            fix: "Run `cclaw sync` to regenerate the reference doc from the canonical source.",
+            fix: "Run `cclaw sync` to regenerate the reference surface from the canonical source.",
+            actionGroup: "sync",
             docRef: ref("harnesses.md")
         }
     },
@@ -113,6 +135,7 @@ const RULES = [
             severity: "info",
             summary: "Harness reality label for dispatch/proof support.",
             fix: "No action required; use this label to interpret native/generic/role-switch proof requirements.",
+            actionGroup: "informational",
             docRef: ref("harnesses.md")
         }
     },
@@ -121,7 +144,8 @@ const RULES = [
         metadata: {
             severity: "error",
             summary: "Mandatory delegation completion check.",
-            fix: "Complete or explicitly waive missing mandatory delegations in delegation log.",
+            fix: "Run the named mandatory agent, record dispatch proof/evidenceRefs, or explicitly waive it with a user-visible rationale.",
+            actionGroup: "user-action",
             docRef: ref("harnesses.md")
         }
     },
@@ -130,7 +154,8 @@ const RULES = [
         metadata: {
             severity: "error",
             summary: "Cross-artifact traceability integrity check.",
-            fix: "Restore criterion/task/test ID mappings across spec, plan, and tdd artifacts.",
+            fix: "Repair criterion/task/test ID mappings across spec, plan, and TDD artifacts, then re-run doctor.",
+            actionGroup: "stage-work",
             docRef: "README.md"
         }
     },
@@ -140,6 +165,7 @@ const RULES = [
             severity: "error",
             summary: "Config or policy schema consistency check.",
             fix: "Fix config/rules drift, then run `cclaw sync` and re-run doctor.",
+            actionGroup: "user-action",
             docRef: ref("config.md")
         }
     }
@@ -154,6 +180,7 @@ export function doctorCheckMetadata(checkName) {
         severity: "warning",
         summary: "Unclassified doctor check.",
         fix: "Report this check name to cclaw maintainers so doctor-registry can classify it explicitly.",
+        actionGroup: "informational",
         docRef: "README.md"
     };
 }

package/dist/doctor.d.ts

@@ -1,4 +1,4 @@
-import type { DoctorSeverity } from "./doctor-registry.js";
+import type { DoctorActionGroup, DoctorSeverity } from "./doctor-registry.js";
 export interface DoctorCheck {
     name: string;
     ok: boolean;
@@ -6,6 +6,7 @@ export interface DoctorCheck {
     severity: DoctorSeverity;
     summary: string;
     fix: string;
+    actionGroup: DoctorActionGroup;
     docRef?: string;
 }
 export interface DoctorOptions {

package/dist/doctor.js

@@ -3,10 +3,11 @@ import path from "node:path";
 import { execFile } from "node:child_process";
 import { pathToFileURL } from "node:url";
 import { promisify } from "node:util";
-import { REQUIRED_DIRS, RUNTIME_ROOT } from "./constants.js";
+import { CCLAW_VERSION, REQUIRED_DIRS, RUNTIME_ROOT } from "./constants.js";
 import { CCLAW_AGENTS } from "./content/core-agents.js";
 import { detectAdvancedKeys, InvalidConfigError, readConfig } from "./config.js";
 import { exists } from "./fs-utils.js";
+import { hashManagedResourceContent, isManagedGeneratedPath, MANAGED_RESOURCE_MANIFEST_REL_PATH, readManagedResourceManifest, validateManagedResourceManifest } from "./managed-resources.js";
 import { gitignoreHasRequiredPatterns } from "./gitignore.js";
 import { HARNESS_ADAPTERS, CCLAW_MARKER_START, CCLAW_MARKER_END, harnessShimFileNames, harnessShimSkillNames } from "./harness-adapters.js";
 import { policyChecks } from "./policy.js";
@@ -21,6 +22,7 @@ import { stageSkillFolder } from "./content/skills.js";
 import { stageCommandShimMarkdown } from "./content/stage-command.js";
 import { doctorCheckMetadata } from "./doctor-registry.js";
 import { resolveTrackFromPrompt } from "./track-heuristics.js";
+import { detectHarnesses } from "./init-detect.js";
 import { classifyCodexHooksFlag, codexConfigPath, readCodexConfig } from "./codex-feature-flag.js";
 import { LANGUAGE_RULE_PACK_DIR, LANGUAGE_RULE_PACK_FILES, LEGACY_LANGUAGE_RULE_PACK_FOLDERS } from "./content/utility-skills.js";
 import { validateHookDocument } from "./hook-schema.js";
@@ -92,8 +94,48 @@ function extractGeneratedCliEntrypoints(scriptContent) {
             // malformed generated constant; treat below as missing/unusable
         }
     }
+    for (const match of scriptContent.matchAll(/const\s+CCLAW_CLI_ARGS_PREFIX\s*=\s*(\[(?:\\.|[^\]])*\]);/gu)) {
+        try {
+            const parsed = JSON.parse(match[1] ?? "[]");
+            if (Array.isArray(parsed)) {
+                for (const item of parsed) {
+                    if (typeof item === "string" && item.trim().length > 0 && !item.startsWith("-")) {
+                        paths.push(item);
+                    }
+                }
+            }
+        }
+        catch {
+            // malformed generated constant; treat below as missing/unusable
+        }
+    }
     return paths;
 }
+async function walkGeneratedCandidates(projectRoot, relDir, candidates) {
+    const fullDir = path.join(projectRoot, relDir);
+    if (!(await exists(fullDir)))
+        return;
+    let entries = [];
+    try {
+        entries = await fs.readdir(fullDir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const entry of entries) {
+        const rel = path.join(relDir, entry.name).replace(/\\/gu, "/");
+        if (entry.isDirectory()) {
+            await walkGeneratedCandidates(projectRoot, rel, candidates);
+        }
+        else if (entry.isFile() && isManagedGeneratedPath(rel)) {
+            candidates.push(rel);
+        }
+    }
+}
+function formatManagedValidationIssue(issue) {
+    const subject = issue.path ?? (issue.index !== undefined ? `resources[${issue.index}]` : "manifest");
+    return `${subject} ${issue.field}: ${issue.message}`;
+}
 async function generatedCliEntrypointsOk(projectRoot) {
     const hookScripts = ["stage-complete.mjs", "start-flow.mjs", "run-hook.mjs"];
     const problems = [];
@@ -690,8 +732,140 @@ export async function doctorChecks(projectRoot, options = {}) {
         ok: await gitignoreHasRequiredPatterns(projectRoot),
         details: ".gitignore must include cclaw ignore block"
     });
+    const managedManifestPath = path.join(projectRoot, MANAGED_RESOURCE_MANIFEST_REL_PATH);
+    let rawManagedManifest = null;
+    let managedManifestParseError = null;
+    if (await exists(managedManifestPath)) {
+        try {
+            rawManagedManifest = JSON.parse(await fs.readFile(managedManifestPath, "utf8"));
+        }
+        catch (error) {
+            managedManifestParseError = error instanceof Error ? error.message : String(error);
+        }
+    }
+    const managedManifestValidationIssues = rawManagedManifest === null
+        ? []
+        : validateManagedResourceManifest(rawManagedManifest);
+    const managedManifest = await readManagedResourceManifest(projectRoot).catch(() => null);
+    checks.push({
+        name: "managed_resources:manifest_exists",
+        ok: managedManifest !== null,
+        details: managedManifest
+            ? `${MANAGED_RESOURCE_MANIFEST_REL_PATH} tracks ${managedManifest.resources.length} managed generated file(s)`
+            : `${MANAGED_RESOURCE_MANIFEST_REL_PATH} missing; run cclaw sync to establish generated file ownership`
+    });
+    checks.push({
+        name: "managed_resources:manifest_valid",
+        ok: managedManifestParseError === null && managedManifestValidationIssues.length === 0,
+        details: managedManifestParseError
+            ? `${MANAGED_RESOURCE_MANIFEST_REL_PATH} is unreadable JSON (${managedManifestParseError})`
+            : managedManifestValidationIssues.length === 0
+                ? `${MANAGED_RESOURCE_MANIFEST_REL_PATH} metadata is structurally valid`
+                : `malformed managed resource metadata: ${managedManifestValidationIssues.slice(0, 12).map(formatManagedValidationIssue).join("; ")}`
+    });
+    if (managedManifest) {
+        checks.push({
+            name: "managed_resources:manifest_package_version",
+            ok: managedManifest.packageVersion === CCLAW_VERSION,
+            details: managedManifest.packageVersion === CCLAW_VERSION
+                ? `${MANAGED_RESOURCE_MANIFEST_REL_PATH} packageVersion matches cclaw ${CCLAW_VERSION}`
+                : `${MANAGED_RESOURCE_MANIFEST_REL_PATH} packageVersion ${managedManifest.packageVersion} is stale; current cclaw is ${CCLAW_VERSION}. Run cclaw upgrade.`
+        });
+        const rawResources = toObject(rawManagedManifest)?.resources;
+        const stalePackageEntries = Array.isArray(rawResources)
+            ? rawResources.flatMap((entry, index) => {
+                const obj = toObject(entry);
+                if (!obj)
+                    return [];
+                const entryPath = typeof obj.path === "string" ? obj.path : `resources[${index}]`;
+                return typeof obj.packageVersion === "string" && obj.packageVersion !== CCLAW_VERSION
+                    ? [`${entryPath} (${obj.packageVersion})`]
+                    : [];
+            })
+            : [];
+        const stale = [];
+        const missing = [];
+        for (const entry of managedManifest.resources) {
+            const filePath = path.join(projectRoot, entry.path);
+            if (!(await exists(filePath))) {
+                missing.push(entry.path);
+                continue;
+            }
+            const currentHash = hashManagedResourceContent(await fs.readFile(filePath));
+            if (currentHash !== entry.sha256) {
+                stale.push(entry.path);
+            }
+        }
+        checks.push({
+            name: "managed_resources:entry_package_versions",
+            ok: stalePackageEntries.length === 0,
+            details: stalePackageEntries.length === 0
+                ? `all manifest entries match cclaw ${CCLAW_VERSION}`
+                : `manifest entries have stale packageVersion; run cclaw upgrade: ${stalePackageEntries.slice(0, 12).join(", ")}`
+        });
+        checks.push({
+            name: "managed_resources:user_modified",
+            ok: stale.length === 0,
+            details: stale.length === 0
+                ? "all manifest-tracked managed files match recorded hashes"
+                : `manifest-tracked managed files have user modifications: ${stale.slice(0, 12).join(", ")}`
+        });
+        checks.push({
+            name: "managed_resources:stale_entries",
+            ok: missing.length === 0,
+            details: missing.length === 0
+                ? "all manifest entries still exist"
+                : `manifest entries point to missing files: ${missing.slice(0, 12).join(", ")}`
+        });
+        const manifestPaths = new Set(managedManifest.resources.map((entry) => entry.path));
+        const candidates = [];
+        for (const relDir of [
+            `${RUNTIME_ROOT}/commands`,
+            `${RUNTIME_ROOT}/skills`,
+            `${RUNTIME_ROOT}/templates`,
+            `${RUNTIME_ROOT}/rules`,
+            `${RUNTIME_ROOT}/agents`,
+            `${RUNTIME_ROOT}/hooks`,
+            ".claude/commands",
+            ".cursor/commands",
+            ".opencode/commands",
+            ".opencode/agents",
+            ".codex/agents",
+            ".agents/skills",
+            ".claude/hooks",
+            ".cursor",
+            ".codex",
+            ".opencode/plugins"
+        ]) {
+            await walkGeneratedCandidates(projectRoot, relDir, candidates);
+        }
+        for (const rel of ["AGENTS.md", "CLAUDE.md"]) {
+            if ((await exists(path.join(projectRoot, rel))) && isManagedGeneratedPath(rel)) {
+                candidates.push(rel);
+            }
+        }
+        const orphaned = [...new Set(candidates)].filter((rel) => !manifestPaths.has(rel)).sort();
+        checks.push({
+            name: "managed_resources:orphaned_generated_files",
+            ok: orphaned.length === 0,
+            details: orphaned.length === 0
+                ? "no orphaned generated files detected across known cclaw surfaces"
+                : `warning: generated-looking files are not tracked in manifest: ${orphaned.slice(0, 12).join(", ")}`
+        });
+    }
     let configuredHarnesses = [];
     let parsedConfig = null;
+    const configFileExists = await exists(path.join(projectRoot, RUNTIME_ROOT, "config.yaml"));
+    if (!configFileExists) {
+        const detectedHarnesses = await detectHarnesses(projectRoot).catch(() => []);
+        checks.push({
+            name: "config:present",
+            ok: detectedHarnesses.length === 0,
+            details: detectedHarnesses.length > 0
+                ? `${RUNTIME_ROOT}/config.yaml is missing but harness markers were detected (${detectedHarnesses.join(", ")}). Run cclaw sync --harnesses=${detectedHarnesses.join(",")} or cclaw sync --interactive.`
+                : `${RUNTIME_ROOT}/config.yaml missing and no harness markers were detected; run cclaw init or cclaw sync when ready.`
+        });
+    }
     try {
         const config = await readConfig(projectRoot);
         parsedConfig = config;
@@ -808,17 +982,17 @@ export async function doctorChecks(projectRoot, options = {}) {
         const content = await fs.readFile(agentsFile, "utf8");
         const hasMarkers = content.includes(CCLAW_MARKER_START) && content.includes(CCLAW_MARKER_END);
         const hasCcCommand = content.includes("/cc");
-        const hasCcNext = content.includes("/cc-next");
         const hasCcIdeate = content.includes("/cc-ideate");
-        const hasCcView = content.includes("/cc-view");
+        const hasCcCancel = content.includes("/cc-cancel");
+        const omitsFinish = !content.includes("/cc-finish");
         const hasVerification = content.includes("Verification Discipline");
         const hasMinimalMarker = content.includes("intentionally minimal for cross-project use");
         const hasMetaSkillPointer = content.includes(".cclaw/skills/using-cclaw/SKILL.md");
         agentsBlockOk = hasMarkers
             && hasCcCommand
-            && hasCcNext
             && hasCcIdeate
-            && hasCcView
+            && hasCcCancel
+            && omitsFinish
             && hasVerification
             && hasMinimalMarker
             && hasMetaSkillPointer;
@@ -828,7 +1002,7 @@ export async function doctorChecks(projectRoot, options = {}) {
         ok: agentsBlockOk,
         details: `${agentsFile} must contain the managed cclaw marker block with routing, verification, and minimal detail pointer`
     });
-    for (const cmd of ["start", "next", "ideate", "view"]) {
+    for (const cmd of ["start", "next", "ideate", "view", "cancel"]) {
         const cmdPath = path.join(projectRoot, RUNTIME_ROOT, "commands", `${cmd}.md`);
         checks.push({
             name: `utility_command:${cmd}`,
@@ -846,7 +1020,7 @@ export async function doctorChecks(projectRoot, options = {}) {
         checks.push({
             name: `stage_command:${stage}`,
             ok: stageCommandOk,
-            details: `${cmdPath} must be a thin shim to ${RUNTIME_ROOT}/skills/${stageSkillFolder(stage)}/SKILL.md and /cc-next`
+            details: `${cmdPath} must be a thin shim to ${RUNTIME_ROOT}/skills/${stageSkillFolder(stage)}/SKILL.md and /cc`
         });
     }
     // Utility skills
@@ -854,6 +1028,7 @@ export async function doctorChecks(projectRoot, options = {}) {
         ["learnings", "learnings"],
         ["flow-ideate", "flow-ideate"],
         ["flow-view", "flow-view"],
+        ["flow-cancel", "flow-cancel"],
         ["subagent-dev", "sdd"],
         ["parallel-dispatch", "parallel-agents"],
         ["session", "session"],
@@ -1090,7 +1265,7 @@ export async function doctorChecks(projectRoot, options = {}) {
             cursorRuleOk =
                 content.includes("cclaw-managed-cursor-workflow-rule") &&
                     content.includes(".cclaw/state/flow-state.json") &&
-                    content.includes("/cc-next");
+                    content.includes("/cc");
         }
         checks.push({
             name: "rules:cursor:workflow",
@@ -2016,6 +2191,7 @@ export async function doctorChecks(projectRoot, options = {}) {
             severity: check.severity ?? metadata.severity,
             summary: check.summary ?? metadata.summary,
             fix: check.fix ?? metadata.fix,
+            actionGroup: check.actionGroup ?? metadata.actionGroup,
             docRef: check.docRef ?? metadata.docRef
         };
     });

package/dist/flow-state.d.ts

@@ -33,7 +33,7 @@ export interface RetroState {
  * Ship closeout substate machine.
  *
  * After ship completes, cclaw auto-chains retro → compound → archive.
- * Each step is interruptible: `/cc-next` reads `shipSubstate` and resumes
+ * Each step is interruptible: `/cc` reads `shipSubstate` and resumes
  * from the correct step even across sessions.
  *
  * - `idle` — ship not complete, or closeout not yet started.

package/dist/flow-state.js

@@ -6,7 +6,7 @@ export const FLOW_STATE_SCHEMA_VERSION = 1;
  * Ship closeout substate machine.
  *
  * After ship completes, cclaw auto-chains retro → compound → archive.
- * Each step is interruptible: `/cc-next` reads `shipSubstate` and resumes
+ * Each step is interruptible: `/cc` reads `shipSubstate` and resumes
  * from the correct step even across sessions.
  *
  * - `idle` — ship not complete, or closeout not yet started.

package/dist/fs-utils.js

@@ -1,5 +1,6 @@
 import fs from "node:fs/promises";
 import path from "node:path";
+import { getActiveManagedResourceSession } from "./managed-resources.js";
 export async function ensureDir(dirPath) {
     await fs.mkdir(dirPath, { recursive: true });
 }
@@ -83,6 +84,11 @@ export async function withDirectoryLock(lockPath, fn, options = {}) {
     }
 }
 export async function writeFileSafe(filePath, content, options = {}) {
+    const managedSession = getActiveManagedResourceSession();
+    if (managedSession?.shouldManage(filePath)) {
+        await managedSession.writeFileSafe(filePath, content, options);
+        return;
+    }
     await ensureDir(path.dirname(filePath));
     const tempPath = path.join(path.dirname(filePath), `.${path.basename(filePath)}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`);
     const targetMode = options.mode;

package/dist/harness-adapters.d.ts

@@ -32,7 +32,7 @@ export type SubagentFallback =
  *   directories under a skills root (Codex CLI ≥0.89, Jan 2026). cclaw
  *   writes `<commandDir>/<skillName>/SKILL.md` and the agent invokes it
  *   either via `/use <skillName>` or via automatic description matching
- *   when the user's text mentions `/cc`, `/cc-next`, etc.
+ *   when the user's text mentions `/cc`, `/cc-ideate`, or `/cc-cancel`.
  */
 export type ShimKind = "command" | "skill";
 export interface HarnessAdapter {
@@ -47,7 +47,7 @@ export interface HarnessAdapter {
      * Root directory where cclaw writes `/cc*` entry points.
      *
      * - For `shimKind: "command"` this is the directory containing flat
-     *   markdown files (`<commandDir>/cc.md`, `<commandDir>/cc-next.md`, …).
+     *   markdown files (`<commandDir>/cc.md`, `<commandDir>/cc-ideate.md`, …).
      * - For `shimKind: "skill"` this is the skills root that contains
      *   per-skill subdirectories (`<commandDir>/<skillName>/SKILL.md`).
      */