create-quiver 0.10.0 → 0.12.0

package/specs/quiver-v22-guided-ai-workflow/slices/slice-08-pr-create-gh-ssh/CLOSURE_BRIEF.md

@@ -0,0 +1,32 @@
+# CLOSURE BRIEF - slice-08: PR creation with gh and SSH guidance
+
+## Resumen de lo realizado
+
+Se extendio `ai pr` para validar setup, leer `pr.md`, mostrar el plan de `gh pr create` en dry-run y crear el PR solo cuando el usuario pasa `--create`.
+
+## Validacion contra criterios de aceptacion
+
+- [x] Dry-run no crea PR.
+- [x] PR se crea con `gh` en setup valido.
+- [x] Faltantes bloquean.
+- [x] Tests ejecutados.
+
+## Cambios relevantes
+
+- `ai pr --dry-run` imprime comando planificado y no ejecuta `gh pr create`.
+- `ai pr --create --input specs/<spec-slug>/pr.md` ejecuta `gh pr create` con argumentos seguros.
+- El cuerpo del PR se toma de `pr.md`; si hay multiples `pr.md`, se exige `--input`.
+- Se mantiene la validacion de gh, auth, remote, branch, worktree limpio, guia GitFlow, alias SSH e identity file.
+- Tests mockean `gh` y cubren dry-run, create, faltantes y fallos de `gh pr create`.
+
+## Pendientes
+
+Sin pendientes criticos para esta slice.
+
+## Riesgos remanentes
+
+La deteccion automatica de `pr.md` requiere que haya uno solo; si hay varios specs en el repo, el usuario debe pasar `--input`.
+
+## Recomendaciones futuras
+
+Mantener el merge fuera de `ai pr`; el merge queda como decision humana.

package/specs/quiver-v22-guided-ai-workflow/slices/slice-08-pr-create-gh-ssh/EXECUTION_BRIEF.md

@@ -0,0 +1,58 @@
+# EXECUTION BRIEF - slice-08: PR creation with gh and SSH guidance
+
+**Spec:** quiver-v22-guided-ai-workflow
+**Slice:** slice-08-pr-create-gh-ssh
+**Tipo:** feature
+
+## Contexto
+
+`ai pr` hoy valida preflight, pero el flujo final necesita crear el PR con `gh` usando `pr.md`.
+
+## Objetivo
+
+Agregar creacion de PR segura, con dry-run y guia clara para gh/SSH.
+
+## Alcance
+
+- Leer `pr.md`.
+- Validar setup.
+- Construir y ejecutar `gh pr create`.
+- Mantener dry-run.
+- No mergear PRs.
+
+## Criterios de aceptacion
+
+- Dry-run no crea PR.
+- Faltantes bloquean con mensaje claro.
+- Setup valido crea PR usando `pr.md`.
+- Tests mockean `gh`.
+
+## Plan tecnico resumido
+
+Extender preflight existente y agregar una capa de creacion que use argumentos seguros, cuerpo desde archivo y confirmacion explicita.
+
+## Pasos sugeridos de ejecucion
+
+1. Revisar `ai/github.js` y `ai-pr.test.js`.
+2. Definir flags de create.
+3. Leer y validar `pr.md`.
+4. Construir llamada segura a `gh`.
+5. Agregar tests de dry-run y success mockeado.
+
+## Restricciones
+
+- No instalar `gh`.
+- No modificar SSH config.
+- No mergear.
+
+## Riesgos
+
+- Crear PR contra base incorrecta.
+- Confundir alias SSH con identity file.
+
+## Checklist de finalizacion
+
+- [ ] Dry-run listo.
+- [ ] Create listo con mocks.
+- [ ] Faltantes bloquean.
+- [ ] Tests pasan.

package/specs/quiver-v22-guided-ai-workflow/slices/slice-08-pr-create-gh-ssh/slice.json

@@ -0,0 +1,53 @@
+{
+  "slice_id": "slice-08-pr-create-gh-ssh",
+  "ticket": "QUIVER-22-08",
+  "type": "feature",
+  "title": "PR creation with gh and SSH guidance",
+  "objective": "Create GitHub PRs from generated pr.md after validating gh, auth, branch, worktree, remote, and SSH inputs.",
+  "description": "Upgrade GitHub PR preflight into PR creation while keeping dry-run, explicit confirmation, and cross-platform setup guidance.",
+  "git": {
+    "branch_type": "feature",
+    "base_branch": "main",
+    "branch_slug": "pr-create-gh-ssh",
+    "branch_name": "feature/QUIVER-22-08-pr-create-gh-ssh"
+  },
+  "files": [
+    "src/create-quiver/commands/ai.js",
+    "src/create-quiver/lib/ai/github.js",
+    "src/create-quiver/lib/pr-create.js",
+    "tests/commands/ai-pr.test.js",
+    "tests/lib/ai-github.test.js"
+  ],
+  "depends_on": [
+    "slice-05-spec-worktree-lifecycle"
+  ],
+  "parallel_safe": "conditional",
+  "parallel_safe_reason": "Conceptually independent after spec worktree lifecycle, but it currently overlaps command-router files with executor and execution-wave slices. Run sequentially unless file ownership is split first.",
+  "must": [
+    "Read the generated pr.md body.",
+    "Validate gh is installed and authenticated.",
+    "Validate remote, branch, worktree, clean state, SSH alias, and identity file.",
+    "Support dry-run without creating a PR.",
+    "Create a PR with gh only after checks pass and user intent is explicit.",
+    "Keep PR merge out of scope."
+  ],
+  "not_included": [
+    "Merging PRs.",
+    "Post-merge cleanup.",
+    "Installing gh automatically."
+  ],
+  "acceptance": [
+    "Dry-run prints the gh command plan and creates no PR.",
+    "Missing gh/auth/identity/GitFlow guide/remote/dirty worktree blocks creation with clear guidance.",
+    "Valid setup creates a PR using pr.md.",
+    "The command never merges the PR.",
+    "Tests mock gh and do not require real GitHub auth."
+  ],
+  "tests": [
+    "node --test tests/commands/ai-pr.test.js tests/lib/ai-github.test.js",
+    "git diff --check"
+  ],
+  "estimated_hours": 7,
+  "status": "completed",
+  "blocked_reason": null
+}

package/specs/quiver-v22-guided-ai-workflow/slices/slice-09-post-merge-cleanup-release-safety/CLOSURE_BRIEF.md

@@ -0,0 +1,33 @@
+# CLOSURE BRIEF - slice-09: Post-merge cleanup and release safety
+
+## Resumen de lo realizado
+
+Se agrego cierre seguro de worktrees por spec con `spec close` y un gate de package safety para bloquear archivos locales sensibles antes del release.
+
+## Validacion contra criterios de aceptacion
+
+- [x] Cleanup bloquea PR no mergeado.
+- [x] Cleanup bloquea worktree sucio.
+- [x] Main local se actualiza.
+- [x] Package safety cubierto.
+
+## Cambios relevantes
+
+- Nuevo comando `npx create-quiver spec close <spec-dir>`.
+- `spec close` bloquea worktrees sucios y ramas de spec no mergeadas, salvo descarte explicito.
+- `spec close --dry-run` muestra la limpieza planeada sin remover worktrees.
+- `spec close` remueve el worktree mergeado y hace `git pull --ff-only` cuando hay remote base.
+- Nuevo modulo `package-safety` para validar paths del tarball.
+- `scripts/package-quiver.sh` ejecuta package safety sobre el contenido real de `npm pack`.
+
+## Pendientes
+
+Sin pendientes criticos para esta slice.
+
+## Riesgos remanentes
+
+Package safety valida nombres/rutas dentro del tarball; no inspecciona secretos embebidos dentro de archivos aparentemente seguros.
+
+## Recomendaciones futuras
+
+Mantener cleanup destructivo separado de PR merge. Si se agrega borrado de ramas remotas, debe quedar detras de un flag explicito distinto.

package/specs/quiver-v22-guided-ai-workflow/slices/slice-09-post-merge-cleanup-release-safety/EXECUTION_BRIEF.md

@@ -0,0 +1,59 @@
+# EXECUTION BRIEF - slice-09: Post-merge cleanup and release safety
+
+**Spec:** quiver-v22-guided-ai-workflow
+**Slice:** slice-09-post-merge-cleanup-release-safety
+**Tipo:** feature
+
+## Contexto
+
+Despues del merge, el usuario quiere cerrar el worktree y actualizar el checkout principal. Ademas, la publicacion npm debe bloquear archivos locales sensibles.
+
+## Objetivo
+
+Agregar cierre seguro de spec y guardas de packaging/release.
+
+## Alcance
+
+- Cleanup post-merge.
+- Validacion de PR mergeado.
+- Proteccion ante worktree sucio.
+- Pull del checkout principal.
+- Guardas para `npm pack`/release.
+
+## Criterios de aceptacion
+
+- No se limpia si el PR no esta mergeado.
+- No se limpia worktree sucio por default.
+- El cierre exitoso elimina worktree y actualiza main.
+- Packaging falla si entran archivos sensibles.
+
+## Plan tecnico resumido
+
+Extender lifecycle a nivel spec y agregar un chequeo de paquete que inspeccione el resultado de `npm pack --dry-run` o equivalente antes de publicar.
+
+## Pasos sugeridos de ejecucion
+
+1. Revisar cleanup actual y supuestos de base branch.
+2. Definir cierre de spec.
+3. Agregar validaciones de merge/dirty.
+4. Agregar package safety.
+5. Cubrir tests y smoke.
+
+## Restricciones
+
+- No mergear PR.
+- No publicar npm.
+- No descartar cambios sin flag explicito.
+
+## Riesgos
+
+- Borrar trabajo local no mergeado.
+- Fallar en repos con base branch distinta.
+- Falsos positivos en package safety.
+
+## Checklist de finalizacion
+
+- [ ] Cleanup seguro listo.
+- [ ] Main/develop sin hardcode incorrecto.
+- [ ] Package safety listo.
+- [ ] Tests pasan.

package/specs/quiver-v22-guided-ai-workflow/slices/slice-09-post-merge-cleanup-release-safety/slice.json

@@ -0,0 +1,59 @@
+{
+  "slice_id": "slice-09-post-merge-cleanup-release-safety",
+  "ticket": "QUIVER-22-09",
+  "type": "feature",
+  "title": "Post-merge cleanup and release safety",
+  "objective": "Safely close merged spec worktrees and prevent local AI/tool state from entering npm packages.",
+  "description": "Add post-merge lifecycle checks and release/package safety guards for secrets, env files, npm credentials, and local AI tool directories.",
+  "git": {
+    "branch_type": "feature",
+    "base_branch": "main",
+    "branch_slug": "post-merge-cleanup-release-safety",
+    "branch_name": "feature/QUIVER-22-09-post-merge-cleanup-release-safety"
+  },
+  "files": [
+    "src/create-quiver/index.js",
+    "src/create-quiver/lib/lifecycle.js",
+    "src/create-quiver/lib/git.js",
+    "src/create-quiver/lib/spec-worktrees.js",
+    "src/create-quiver/lib/package-safety.js",
+    "scripts/release-quiver.sh",
+    ".npmignore",
+    "tests/commands/spec-close.test.js",
+    "tests/lib/package-safety.test.js"
+  ],
+  "depends_on": [
+    "slice-07-execution-waves-delegation",
+    "slice-08-pr-create-gh-ssh"
+  ],
+  "parallel_safe": "no",
+  "parallel_safe_reason": "Cleanup and release safety must integrate final workflow state and PR behavior.",
+  "must": [
+    "Refuse normal cleanup before PR merge is confirmed.",
+    "Refuse cleanup when the worktree is dirty unless explicit discard behavior is used.",
+    "Remove the spec worktree after safe confirmation.",
+    "Pull merged changes into the main local checkout.",
+    "Fail package/release safety if local settings, env files, npm credentials, or AI tool local state would enter the tarball.",
+    "Keep destructive operations explicit and recoverable."
+  ],
+  "not_included": [
+    "Merging PRs.",
+    "Deleting remote branches without explicit existing workflow support.",
+    "Publishing a new npm version."
+  ],
+  "acceptance": [
+    "Unmerged PR blocks normal spec cleanup.",
+    "Dirty worktree blocks normal spec cleanup.",
+    "Merged clean spec can be closed and main checkout can be pulled.",
+    "Release/package safety fails when unsafe local files would be packaged.",
+    "Release/package safety passes when unsafe paths are ignored or absent."
+  ],
+  "tests": [
+    "node --test tests/commands/spec-close.test.js tests/lib/package-safety.test.js",
+    "npm pack --dry-run",
+    "git diff --check"
+  ],
+  "estimated_hours": 8,
+  "status": "completed",
+  "blocked_reason": null
+}

package/specs/quiver-v22-guided-ai-workflow/slices/slice-10-docs-smokes-release-readiness/CLOSURE_BRIEF.md

@@ -0,0 +1,34 @@
+# CLOSURE BRIEF - slice-10: Final docs, smokes, and release readiness
+
+## Resumen de lo realizado
+
+- Se actualizaron README, README_FOR_AI, CHANGELOG, ROADMAP, BACKLOG y templates generados para presentar el guided AI workflow como disponible.
+- Se alinearon los snippets de onboarding con aprobaciones persistidas, `spec start`, ejecución por olas, PR con `pr.md` y cierre de worktree.
+- Se agregó `smoke:guided-workflow` y se reforzaron los smokes existentes para el contrato real post-`analyze`, scripts nuevos y `slice-00` obligatorio.
+- `docs/AI_CONTEXT.md` refrescado por `analyze` conserva front matter para mantener el contrato token-efficient.
+- Se actualizaron STATUS, EVIDENCE_REPORT y el estado del slice.
+
+## Validacion contra criterios de aceptacion
+
+- [x] Docs finales listas.
+- [x] Smokes listas.
+- [x] STATUS/EVIDENCE actualizados.
+- [x] No se publico npm.
+
+## Cambios relevantes
+
+- Root docs y templates muestran `prepare`, `ai approve`, `ai execute-plan`, `ai pr --input`, `spec start/status/close` y commit opt-in.
+- Scripts de smoke cubren flujo guiado, creación/migración, package safety y fixtures con `slice-00`.
+- El package dry-run pasó usando cache temporal por permisos rotos en la cache global de npm.
+
+## Pendientes
+
+- Publicar una nueva version npm queda fuera de este slice y debe hacerse con el flujo de release.
+
+## Riesgos remanentes
+
+- La cache global `~/.npm` tiene archivos root-owned; `npm pack --dry-run` requiere cache temporal o corregir permisos localmente.
+
+## Recomendaciones futuras
+
+- Ejecutar `npm run release:quiver` o `bash scripts/release-quiver.sh ...` solo despues de revisar este PR y decidir el bump.

package/specs/quiver-v22-guided-ai-workflow/slices/slice-10-docs-smokes-release-readiness/EXECUTION_BRIEF.md

@@ -0,0 +1,58 @@
+# EXECUTION BRIEF - slice-10: Final docs, smokes, and release readiness
+
+**Spec:** quiver-v22-guided-ai-workflow
+**Slice:** slice-10-docs-smokes-release-readiness
+**Tipo:** docs-test
+
+## Contexto
+
+Cuando todas las piezas existen, hay que actualizar la documentacion publica, templates generados, smokes y evidencia.
+
+## Objetivo
+
+Cerrar la feature con docs completas, pruebas y readiness de release sin publicar.
+
+## Alcance
+
+- README y guia IA.
+- Templates/docs generados.
+- Smoke tests.
+- STATUS/EVIDENCE_REPORT.
+- Checklist de release.
+
+## Criterios de aceptacion
+
+- Docs muestran el flujo como disponible.
+- Smokes cubren happy path y fallas principales.
+- Evidencia actualizada.
+- No se publica npm.
+
+## Plan tecnico resumido
+
+Actualizar docs y templates despues de terminar comportamiento, luego ejecutar suite amplia y registrar evidencia.
+
+## Pasos sugeridos de ejecucion
+
+1. Revisar todos los comandos implementados.
+2. Actualizar README y README_FOR_AI.
+3. Actualizar generated docs/templates.
+4. Agregar smokes.
+5. Ejecutar tests.
+6. Actualizar STATUS/EVIDENCE_REPORT.
+
+## Restricciones
+
+- No publicar npm.
+- No abrir PR si no se pidio.
+
+## Riesgos
+
+- Documentar comandos con nombres distintos a los implementados.
+- Smokes demasiado dependientes de herramientas reales.
+
+## Checklist de finalizacion
+
+- [ ] Docs finales actualizadas.
+- [ ] Templates actualizados.
+- [ ] Smokes agregados.
+- [ ] Evidencia final registrada.

package/specs/quiver-v22-guided-ai-workflow/slices/slice-10-docs-smokes-release-readiness/slice.json

@@ -0,0 +1,60 @@
+{
+  "slice_id": "slice-10-docs-smokes-release-readiness",
+  "ticket": "QUIVER-22-10",
+  "type": "docs-test",
+  "title": "Final docs, smokes, and release readiness",
+  "objective": "Finish the guided workflow with updated user docs, generated templates, smoke coverage, and release readiness evidence.",
+  "description": "Update public docs and generated project templates, add end-to-end smoke coverage, and confirm the feature is ready for release without publishing.",
+  "git": {
+    "branch_type": "feature",
+    "base_branch": "main",
+    "branch_slug": "guided-workflow-release-readiness",
+    "branch_name": "feature/QUIVER-22-10-guided-workflow-release-readiness"
+  },
+  "files": [
+    "README.md",
+    "README_FOR_AI.md",
+    "CHANGELOG.md",
+    "src/create-quiver/lib/init-docs.js",
+    "src/create-quiver/lib/init-layout.js",
+    "tests/commands/*.test.js",
+    "scripts/ci/*.sh",
+    "specs/quiver-v22-guided-ai-workflow/STATUS.md",
+    "specs/quiver-v22-guided-ai-workflow/EVIDENCE_REPORT.md"
+  ],
+  "depends_on": [
+    "slice-09-post-merge-cleanup-release-safety"
+  ],
+  "parallel_safe": "no",
+  "parallel_safe_reason": "Final docs and smokes must run after all behavior slices are complete.",
+  "must": [
+    "Document the finished guided workflow in root docs.",
+    "Update generated project docs/templates where users see commands.",
+    "Add smoke coverage for the happy path and major failure paths.",
+    "Update STATUS and EVIDENCE_REPORT.",
+    "Run full relevant test suite.",
+    "Do not publish npm in this slice."
+  ],
+  "not_included": [
+    "Changing feature behavior after acceptance unless a blocking bug is found.",
+    "Publishing a release.",
+    "Merging PR."
+  ],
+  "acceptance": [
+    "README shows the guided AI workflow as available behavior.",
+    "Generated docs mention prepare, approvals, executor commits, PR creation, and cleanup.",
+    "Smoke tests cover dry-run preparation, approvals, execution waves, PR dry-run, cleanup dry-run, and package safety.",
+    "STATUS and EVIDENCE_REPORT reflect completed slices.",
+    "Release checklist is ready but no npm publish is performed."
+  ],
+  "tests": [
+    "node --test tests/**/*.test.js",
+    "npm run smoke:create-quiver",
+    "npm run smoke:tiered-pack",
+    "npm pack --dry-run",
+    "git diff --check"
+  ],
+  "estimated_hours": 6,
+  "status": "completed",
+  "blocked_reason": null
+}

package/specs/quiver-v23-guided-flow-productization/EVIDENCE_REPORT.md

@@ -0,0 +1,80 @@
+# Evidence Report - Quiver v23 Guided Flow Productization
+
+## Status
+
+Spec foundation is created. `slice-00` through `slice-10` are completed.
+
+## Slice Evidence
+
+| Slice | Evidence |
+|-------|----------|
+| slice-00 | Spec foundation files created. All `slice.json` files parse successfully and `git diff --check` passed. |
+| slice-01 | Added `quiver` as a package binary alias, added read-only `flow` command, generated `quiver:flow` script, docs, and command tests. |
+| slice-02 | Expanded `flow` into a status wizard that reports uninitialized, context-needed, criteria approval, technical-plan approval, spec generation, slice execution, blocked slice graph, and PR-ready states. |
+| slice-03 | Added `.quiver/agents/profiles.json`, `ai agent set/list/show`, provider validation, free-form model labels, profile-backed provider defaults, docs, and tests. |
+| slice-04 | Added a packaged planner onboarding template, shared context plan, prepare report selected docs/debt/omissions, index-first generated prompt, and tests. |
+| slice-05 | Added versioned drafts under `.quiver/approvals/<phase>/drafts/`, `ai approve --version`, status history output, and approval blocking against stale versions. |
+| slice-06 | Added `ai review-plan`, review prompt metadata, persisted `.quiver/approvals/plan-review/` artifacts, flow guidance before technical-plan approval, and a spec-generation gate that requires the reviewed technical-plan version to be approved. |
+| slice-07 | Added `npx create-quiver spec create`, generated `quiver:spec:create` scripts, dry-run preview, collision checks, next safe commands, and docs/tests for creating specs from reviewed approved technical plans. |
+| slice-08 | Added `npx create-quiver ai prompt-slice`, generated `quiver:ai:prompt-slice` scripts, minimal SPEC excerpts, required closure brief handling, final report format, docs/templates, and tests for manual executor prompts. |
+| slice-09 | Added `--mode manual` and `--mode delegated` for `ai execute-plan`, dry-run prompt/execute commands, delegated temporary worktrees for parallel-ready waves, sequential fallback for unsafe scopes, one-commit integration, recovery guidance, docs, and tests. |
+| slice-10 | Updated README, README_FOR_AI, CHANGELOG, ROADMAP, BACKLOG, generated docs/templates, smoke coverage, release readiness checklist, final status/evidence, and confirmed no npm publish was performed. |
+
+## Validation Log
+
+- 2026-05-21: `find specs/quiver-v23-guided-flow-productization -name "slice.json" -print -exec node -e "JSON.parse(require('fs').readFileSync(process.argv[1], 'utf8'))" {} \;`
+- 2026-05-21: `git diff --check`
+- 2026-05-21: `node --test tests/commands/flow.test.js tests/commands/init-profiles.test.js tests/commands/prepare.test.js`
+- 2026-05-21: `node bin/create-quiver.js flow --json`
+- 2026-05-21: `node --test tests/commands/flow.test.js tests/lib/doctor.test.js`
+- 2026-05-21: `git diff --check`
+- 2026-05-21: `node --test tests/lib/agent-profiles.test.js tests/commands/ai-agent.test.js tests/commands/flow.test.js tests/commands/ai-onboard.test.js tests/commands/ai-plan.test.js tests/commands/ai-execute-slice.test.js tests/commands/ai-execute-plan.test.js`
+- 2026-05-21: `git diff --check`
+- 2026-05-21: `node --test tests/commands/prepare.test.js tests/commands/ai-onboard.test.js tests/lib/ai-safety.test.js`
+- 2026-05-21: `git diff --check`
+- 2026-05-21: `node --test tests/lib/approvals.test.js tests/commands/ai-plan.test.js tests/commands/ai-plan-spec-phase.test.js`
+- 2026-05-21: `git diff --check`
+- 2026-05-21: `node --test tests/commands/ai-review-plan.test.js`
+- 2026-05-21: `node --test tests/commands/doctor.test.js tests/lib/init-docs.test.js tests/lib/init-layout.test.js tests/lib/package-safety.test.js tests/commands/flow.test.js tests/commands/ai-review-plan.test.js tests/commands/ai-plan-spec-phase.test.js tests/commands/ai-plan.test.js`
+- 2026-05-21: `node --test tests/**/*.test.js`
+- 2026-05-21: `git diff --check`
+- 2026-05-21: `find specs/quiver-v23-guided-flow-productization -name slice.json -print -exec node -e "JSON.parse(require('fs').readFileSync(process.argv[1], 'utf8'))" {} \;`
+- 2026-05-21: `npm run smoke:create-quiver`
+- 2026-05-21: `npm run smoke:tiered-pack`
+- 2026-05-21: `npm run smoke:guided-workflow`
+- 2026-05-21: `npm run smoke:create-quiver`
+- 2026-05-21: `npm pack --dry-run` failed because the user npm cache under `~/.npm` contains root-owned files.
+- 2026-05-21: `npm --cache /private/tmp/quiver-npm-cache pack --dry-run`
+- 2026-05-21: `npm run smoke:tiered-pack`
+
+## Release Readiness Checklist
+
+- [x] Root README documents the guided flow as available behavior.
+- [x] Generated docs mention flow status, profiles, onboarding, review-plan, spec create, executor prompts, delegated execution, PR creation, and cleanup.
+- [x] Guided workflow smoke covers flow status, profiles, onboarding, planner iterations, review-plan, spec create, executor prompt dry-run, delegated execution dry-run, PR dry-run, cleanup dry-run, and package safety.
+- [x] Package dry-run succeeded with an isolated npm cache.
+- [x] No npm publish was performed in this slice.
+- 2026-05-21: `node --test tests/lib/ai-execution-plan.test.js tests/commands/ai-execute-plan.test.js tests/commands/ai-execute-slice.test.js`
+- 2026-05-21: `node --test tests/lib/ai-execution-plan.test.js tests/commands/ai-execute-plan.test.js tests/commands/ai-execute-slice.test.js tests/lib/init-docs.test.js tests/lib/init-layout.test.js`
+- 2026-05-21: `node --test tests/**/*.test.js`
+- 2026-05-21: `git diff --check`
+- 2026-05-21: `find specs/quiver-v23-guided-flow-productization -name slice.json -print -exec node -e "JSON.parse(require('fs').readFileSync(process.argv[1], 'utf8'))" {} \;`
+- 2026-05-21: `npm run smoke:create-quiver`
+- 2026-05-21: `npm run smoke:tiered-pack`
+- 2026-05-21: `node --test tests/commands/ai-execute-slice.test.js tests/lib/ai-executor.test.js tests/lib/init-docs.test.js tests/lib/init-layout.test.js`
+- 2026-05-21: `node --test tests/**/*.test.js`
+- 2026-05-21: `git diff --check`
+- 2026-05-21: `find specs/quiver-v23-guided-flow-productization -name slice.json -print -exec node -e "JSON.parse(require('fs').readFileSync(process.argv[1], 'utf8'))" {} \;`
+- 2026-05-21: `npm run smoke:create-quiver`
+- 2026-05-21: `npm run smoke:tiered-pack`
+- 2026-05-21: `node --test tests/commands/spec-create.test.js tests/commands/flow.test.js tests/commands/ai-plan-spec-phase.test.js tests/lib/ai-spec-generator.test.js tests/lib/init-layout.test.js`
+- 2026-05-21: `node --test tests/commands/spec-create.test.js tests/commands/flow.test.js tests/lib/ai-spec-generator.test.js tests/commands/ai-plan-spec-phase.test.js tests/lib/init-docs.test.js tests/lib/init-layout.test.js`
+- 2026-05-21: `node --test tests/**/*.test.js`
+- 2026-05-21: `git diff --check`
+- 2026-05-21: `find specs/quiver-v23-guided-flow-productization -name slice.json -print -exec node -e "JSON.parse(require('fs').readFileSync(process.argv[1], 'utf8'))" {} \;`
+- 2026-05-21: `npm run smoke:create-quiver`
+- 2026-05-21: `npm run smoke:tiered-pack`
+
+## Notes
+
+This report must be updated by each slice executor with commands run, results, risks, and follow-up work.

package/specs/quiver-v23-guided-flow-productization/EXECUTION_PLAN.md

@@ -0,0 +1,80 @@
+# Execution Plan - Quiver v23 Guided Flow Productization
+
+## Rule
+
+`slice-00` is mandatory and must be committed first. It establishes the spec foundation in the repo.
+
+## Recommended Wave Plan
+
+This is the safe default plan. It favors reliable integration over speed because several slices will touch command routing, docs, and shared AI workflow state.
+
+| Wave | Mode | Slices | Why |
+|------|------|--------|-----|
+| 0 | Sequential | `slice-00-spec-foundation` | Publishes the spec foundation, handoffs, execution plan, and PR body. |
+| 1 | Sequential | `slice-01-short-command-and-flow-entrypoint` | Establishes the command surface before adding higher-level flow behavior. |
+| 2 | Sequential | `slice-02-flow-status-wizard` | Adds the next-step guide that later slices can extend. |
+| 3 | Sequential | `slice-03-agent-profiles` | Adds planner/executor/reviewer profile state before using those profiles in prompts. |
+| 4 | Sequential | `slice-04-context-preparation-onboarding` | Productizes onboarding prompts after profiles and flow status exist. |
+| 5 | Sequential | `slice-05-planner-iteration-history` | Adds versioned drafts and approvals before plan review and spec creation. |
+| 6 | Sequential | `slice-06-production-plan-review` | Adds the production-readiness review gate before spec generation. |
+| 7 | Sequential | `slice-07-spec-create-experience` | Builds on approved and reviewed plans to create specs predictably. |
+| 8 | Sequential | `slice-08-executor-prompt-generation` | Generates minimal manual executor prompts after spec/slice shape is stable. |
+| 9 | Sequential | `slice-09-delegated-slice-execution` | Adds the highest-risk delegated execution behavior after all prerequisites exist. |
+| 10 | Sequential | `slice-10-docs-smokes-release-readiness` | Final docs and smokes must run last. |
+
+## Parallelization Assessment
+
+Default recommendation: execute sequentially.
+
+Optional parallel work is possible only after `slice-03` if file ownership is split:
+
+| Optional Wave | Mode | Slices | Condition |
+|---------------|------|--------|-----------|
+| 4A | Parallel | `slice-04-context-preparation-onboarding` + `slice-05-planner-iteration-history` | Only if command routing changes are isolated and shared state files are not edited by both slices. |
+| 8A | Parallel | `slice-08-executor-prompt-generation` + docs draft work for `slice-10` | Only if docs work does not depend on final delegated behavior. |
+
+If file scopes overlap or are unknown, fall back to sequential execution.
+
+## Dependency Graph
+
+```mermaid
+flowchart TD
+    S00[slice-00 spec foundation] --> S01[slice-01 short command and flow entrypoint]
+    S01 --> S02[slice-02 flow status wizard]
+    S02 --> S03[slice-03 agent profiles]
+    S03 --> S04[slice-04 context preparation onboarding]
+    S04 --> S05[slice-05 planner iteration history]
+    S05 --> S06[slice-06 production plan review]
+    S06 --> S07[slice-07 spec create experience]
+    S07 --> S08[slice-08 executor prompt generation]
+    S08 --> S09[slice-09 delegated slice execution]
+    S09 --> S10[slice-10 docs smokes release readiness]
+```
+
+## Suggested Commit Order
+
+1. `docs(spec): add guided flow productization spec`
+2. `feat(cli): add quiver flow entrypoint`
+3. `feat(flow): show next safe workflow step`
+4. `feat(ai): persist agent profiles`
+5. `feat(ai): productize context onboarding`
+6. `feat(ai): version planner drafts and approvals`
+7. `feat(ai): review technical plans for production readiness`
+8. `feat(spec): create specs from reviewed approved plans`
+9. `feat(ai): generate minimal executor prompts`
+10. `feat(ai): delegate slice execution safely`
+11. `docs(ai): document guided flow and add smokes`
+
+## Executor Assignment
+
+- Keep `slice-00`, `slice-01`, `slice-02`, `slice-06`, `slice-09`, and `slice-10` with a stronger planner/reviewer because they affect user flow, safety, or integration.
+- `slice-03`, `slice-04`, `slice-05`, `slice-07`, and `slice-08` can be executed by cheaper code-focused agents if their file scopes are clear.
+- Do not delegate parallel slices unless write sets are disjoint.
+
+## Integration Notes
+
+- Do not start implementation slices before `slice-00` is committed.
+- Keep provider calls mocked in automated tests.
+- Keep real provider CLI checks manual or dry-run only.
+- Preserve existing `npx create-quiver` commands.
+- Treat `quiver` as an alias unless a deliberate package decision changes that.