devflow-kit 3.4.0 → 3.6.0

package/dist/cli/commands/init.js

@@ -39,7 +39,9 @@ import { removeManagedDenyList, describeManagedDenyRemoval } from './security.js
 import { resolveInitSeed, applyCliToggles, resolveResetGatedInputs, resolvePluginsToInstall } from './init-seed.js';
 import { parseFrameworkList, normalizeFrameworks } from '../../core/compliance.js';
 import { formatComplianceSummary, shouldRunComplianceStep, runComplianceStep, buildClackCompliancePrompts, } from './compliance-prompts.js';
-import { applyTrackerSentinel, parseTrackerId, rearmTrackerInference, DEFAULT_TRACKER_PROVIDER, } from '../../core/tracker.js';
+import { shouldRunBehaviorStep, runBehaviorStep, buildClackBehaviorPrompts } from './behavior-prompts.js';
+import { convergeBehaviorFromManifest } from '../../targets/claude-code/behavior-install.js';
+import { applyTrackerSentinel, effectiveTrackerServers, parseTrackerId, rearmTrackerInference, DEFAULT_TRACKER_PROVIDER, } from '../../core/tracker.js';
 import { formatTrackerSummary, shouldRunTrackerStep, runTrackerStep, buildClackTrackerPrompts, } from './tracker-prompts.js';
 import { shouldRunAttributionStep, runAttributionStep, buildClackAttributionPrompts, applyAttributionAnswer, attributionSeedFrom, } from './attribution-prompts.js';
 import { convergeFromManifest } from '../../targets/claude-code/compliance-install.js';
@@ -343,7 +345,7 @@ export function claudeMdAuditStep(outcome) {
 export function buildTrackerLifecycleIO() {
     return {
         writeManifest,
-        convergeArtifacts: (claudeDir, warn) => convergeTrackerArtifacts({ claudeDir, warn }),
+        convergeArtifacts: (claudeDir, servers, warn) => convergeTrackerArtifacts({ claudeDir, servers, warn }),
         rearmInference: rearmTrackerInference,
         applySentinel: applyTrackerSentinel,
     };
@@ -396,7 +398,7 @@ export async function persistManifestThenConvergeTracker(opts) {
     // The Tracker agent file — installed on every machine (D-INSTALL-ALL-PROVIDERS),
     // because a repository can select a provider the machine never did.
     const agentWarnings = [];
-    const artifacts = await io.convergeArtifacts(claudeDir, (msg) => agentWarnings.push(msg));
+    const artifacts = await io.convergeArtifacts(claudeDir, effectiveTrackerServers(manifestData.features.tracker), (msg) => agentWarnings.push(msg));
     for (const text of agentWarnings)
         messages.push({ level: 'warn', text });
     // D-TRACKER-PARALLEL: the two owners touch disjoint files — the attempt
@@ -495,6 +497,7 @@ export function buildHudOnlyManifest(existing, version, now) {
         features: {
             ambient: false, memory: false, hud: true, knowledge: false,
             learning: false, rules: false, flags: {}, proxy: false,
+            behavior: false,
             compliance: { enabled: false, frameworks: [] },
             // The exported default, not a literal — the one constant every other
             // module reads, so a moved default moves here too.
@@ -598,6 +601,8 @@ export const initCommand = new Command('init')
     .option('--no-rules', 'Disable rules')
     .option('--proxy', 'Enable external model routing (GPT models via your OpenAI/Codex subscription)')
     .option('--no-proxy', 'Disable external model routing')
+    .option('--behavior', 'Enable the behavior rule (agents reply in ASD-STE100 Simplified Technical English; off by default)')
+    .option('--no-behavior', 'Disable the behavior rule')
     .option('--compliance <list>', 'Enable compliance with comma-separated framework IDs (e.g., gdpr,hipaa)')
     .option('--no-compliance', 'Disable compliance (removes the rule; the skill and framework references stay installed; frameworks remembered for re-enable)')
     .option('--tracker <id>', 'The machine\'s default issue tracker provider: github, jira, or linear')
@@ -689,7 +694,7 @@ export const initCommand = new Command('init')
     // ── Hoisted reads: the prior state that seeds the prompts (InitSeed, Phase 4) ──
     let existingManifest = null;
     try {
-        existingManifest = await readManifest(devflowDir);
+        existingManifest = await readManifest(devflowDir, { onWarning: (message) => p.log.warn(message) });
     }
     catch { /* unreadable manifest — seeded as a fresh install */ }
     // D-INIT-NOT-HOME (same-location.ts): a repository rooted at HOME is no
@@ -779,7 +784,7 @@ export const initCommand = new Command('init')
             'devflow-explore': 'codebase exploration + knowledge bases',
             'devflow-research': 'multi-type research with synthesis',
             'devflow-release': 'adaptive release with learned config',
-            'devflow-self-review': 'Simplify agent + Scrutinize agent',
+            'devflow-self-review': 'Polish agent + Harden agent',
             'devflow-bug-analysis': 'proactive bug finding, post-pipeline',
             'devflow-typescript': 'TypeScript patterns',
             'devflow-react': 'React patterns',
@@ -915,6 +920,10 @@ export const initCommand = new Command('init')
     // Fresh installs → false (FEATURE_DEFAULTS.proxy). Re-inits → prior manifest value.
     // --reset → false (resolveResetGatedInputs null-seeds the manifest).
     let proxyEnabled = seed.features.proxy;
+    // behavior (D-BEHAVIOR-OPT-IN): opt-in, manifest-group like proxy. Fresh installs and --reset
+    // → false (FEATURE_DEFAULTS.behavior); re-inits and the Recommended path keep the prior
+    // manifest value; only --behavior/--no-behavior and the Advanced wizard change it.
+    let behaviorEnabled = seed.features.behavior;
     // compliance: manifest-group (like proxy); seed from prior manifest value.
     // CLI override applied below in both Recommended and Advanced paths.
     let complianceEnabled = seed.features.compliance.enabled;
@@ -922,6 +931,10 @@ export const initCommand = new Command('init')
     // tracker: manifest-group (like proxy and compliance); seed from prior manifest.
     // CLI override applied below in both Recommended and Advanced paths.
     let trackerProvider = seed.features.tracker.provider;
+    // The tracker tool servers (D-TRACKER-SERVER-ALLOWLIST) are set by `devflow tracker --servers`
+    // alone, so init carries the prior value through untouched: it stamps the installed agents
+    // with it and writes it back to the manifest. Absent stays absent (the default list).
+    const trackerServers = seed.features.tracker.servers;
     let enabledFlags = { ...seed.flags };
     // viewModeExplicit: true when --reset is passed; signals resolveFinalViewMode to let the
     // seed-time view-mode win over an externally-set value in settings.json.
@@ -1032,6 +1045,7 @@ export const initCommand = new Command('init')
             learning: options.learning,
             rules: options.rules,
             proxy: options.proxy,
+            behavior: options.behavior,
             compliance: cliComplianceOverride ?? wizardCompliance,
             // Precedence: cliOverride ?? wizardResult ?? seed (applyCliToggles supplies the seed arm).
             tracker: cliTrackerOverride ?? wizardTracker,
@@ -1043,6 +1057,7 @@ export const initCommand = new Command('init')
         learningEnabled = effectiveFeatures.learning;
         rulesEnabled = effectiveFeatures.rules;
         proxyEnabled = effectiveFeatures.proxy;
+        behaviorEnabled = effectiveFeatures.behavior;
         complianceEnabled = effectiveFeatures.compliance.enabled;
         complianceFrameworks = effectiveFeatures.compliance.frameworks;
         trackerProvider = effectiveFeatures.tracker.provider;
@@ -1083,6 +1098,7 @@ export const initCommand = new Command('init')
             `HUD:             ${hudEnabled ? 'enabled' : 'disabled'}`,
             `Knowledge bases: ${knowledgeEnabled ? 'enabled' : 'disabled'}`,
             `Ext model routing: ${proxyEnabled ? 'enabled' : 'disabled'}`,
+            `Behavior rule:   ${behaviorEnabled ? 'enabled' : 'disabled'}`,
             `Compliance:      ${complianceSummary}`,
             // Recommended emits no per-step outcome lines, so this summary row is the
             // tracker step's ONLY surface on this path — both surfaces or it is
@@ -1214,6 +1230,33 @@ export const initCommand = new Command('init')
             }
             rulesEnabled = rulesChoice;
         }
+        // Behavior rule (Advanced-only; opt-in, default OFF; D-BEHAVIOR-OPT-IN). Runs after the
+        // rules step because the rule installs only while rules are on, and the gate knows it.
+        // A skipped gate leaves the seeded value, which --behavior/--no-behavior replace.
+        if (shouldRunBehaviorStep({
+            isTTY: process.stdin.isTTY,
+            hasCliOverride: options.behavior !== undefined,
+            rulesEnabled,
+        })) {
+            const behaviorStep = await runBehaviorStep({
+                seed: behaviorEnabled,
+                prompts: buildClackBehaviorPrompts(),
+            });
+            if (behaviorStep.kind === 'cancelled') {
+                p.cancel('Installation cancelled.');
+                process.exit(0);
+            }
+            behaviorEnabled = behaviorStep.enabled;
+            for (const msg of behaviorStep.messages) {
+                if (msg.level === 'success')
+                    p.log.success(msg.text);
+                else
+                    p.log.info(msg.text);
+            }
+        }
+        else if (options.behavior !== undefined) {
+            behaviorEnabled = options.behavior;
+        }
         // External model routing (Advanced-only; default OFF; never part of Recommended)
         if (options.proxy !== undefined) {
             proxyEnabled = options.proxy;
@@ -1582,6 +1625,7 @@ export const initCommand = new Command('init')
             // their say (D-LEARNING-VARIANT-INSTALL): the files installed here and the
             // manifest written at the end of init cannot disagree about it.
             learning: learningEnabled,
+            trackerServers,
             // Non-fatal install notices with no other channel (skipped symlinks in the
             // generated reference tree, mode-normalisation failures) reach the user rather
             // than the void. Collected now, emitted after the spinner stops.
@@ -1643,6 +1687,25 @@ export const initCommand = new Command('init')
         p.log.warn(`Compliance artifact convergence failed — install succeeded but compliance artifacts may be stale: ` +
             `${err instanceof Error ? err.message : String(err)}`);
     }
+    // D-BEHAVIOR-OPT-IN: converge the behavior rule. The plugin installer never copies it (no
+    // plugin declares it) and a full install wiped rules/devflow/ above, so this is the one
+    // writer: it installs the file when the switch is on and rules are on, and removes it
+    // otherwise. Warn-not-abort, like the compliance convergence.
+    try {
+        await convergeBehaviorFromManifest({
+            claudeDir,
+            devflowDir,
+            manifest: { features: { behavior: behaviorEnabled, rules: rulesEnabled } },
+            warn: (msg) => p.log.warn(msg),
+        });
+    }
+    catch (err) {
+        p.log.warn(`Behavior rule convergence failed — install succeeded but the behavior rule may be stale: ` +
+            `${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (behaviorEnabled && !rulesEnabled) {
+        p.log.info('Behavior rule is on but rules are disabled, so it is not installed — run `devflow rules --enable`.');
+    }
     // Clean up stale skills from previous installations
     s.message('Cleaning up');
     const skillsDir = path.join(claudeDir, 'skills');
@@ -1904,7 +1967,7 @@ export const initCommand = new Command('init')
         content = addCaptureHooks(cleanedForCapture, devflowDir);
         // Memory hooks — Stop (memory-worker), SessionStart (session-start-memory),
         // PreCompact — through the same transform `devflow memory --enable/--disable`
-        // uses (D-FEATURES-NARROW-ONLY). Learning agent (spawned via
+        // uses (D-FEATURES-NARROW-ONLY). Curate agent (spawned via
         // session-start-context directive) handles decision/pitfall detection.
         // Knowledge is handled in-command via write-through (knowledge_writeback MDS partial).
         content = convergeMemoryHooks(content, memoryEnabled, devflowDir);
@@ -1917,7 +1980,7 @@ export const initCommand = new Command('init')
         content = addContextHook(cleanedForContext, devflowDir);
         // Legacy dream-worker hook cleanup — strip any stale spawn-dream-worker entry
         // left in settings.json by a prior install (session-start-context now spawns
-        // the Learning agent via directive).
+        // the Curate agent via directive).
         content = removeDreamHook(content);
         // Strip Devflow-managed teammateMode ("auto"). User-set values (e.g. "tmux") are preserved.
         content = stripDevflowTeammateModeFromJson(content);
@@ -2249,6 +2312,10 @@ export const initCommand = new Command('init')
             security: securityMode,
             // Final resolved value — may be forced off by preflight failure.
             proxy: proxyEnabled,
+            // Resolved behavior switch (D-BEHAVIOR-OPT-IN) — seeded from the prior manifest,
+            // overridden by --behavior/--no-behavior and the Advanced wizard. The rule file was
+            // converged above to match it.
+            behavior: behaviorEnabled,
             // Resolved compliance state — seeded from prior manifest, overridden by CLI flags
             // and Advanced wizard selection. convergeComplianceArtifacts was called above.
             // normalizeFrameworks: dedup + filter unknowns before persisting.
@@ -2256,7 +2323,7 @@ export const initCommand = new Command('init')
             // Resolved tracker selection. Already a validated TrackerProvider — it came
             // through parseTrackerId (CLI), the typed wizard select, or the seed, which
             // itself came through normalizeTrackerFeature on read.
-            tracker: { provider: trackerProvider },
+            tracker: { provider: trackerProvider, ...(trackerServers !== undefined ? { servers: trackerServers } : {}) },
         },
         installedAt: existingManifest?.installedAt ?? now,
         updatedAt: now,

package/dist/cli/commands/learning.js

@@ -3,7 +3,7 @@ import { promises as fs } from 'fs';
 import * as path from 'path';
 import * as p from '@clack/prompts';
 import color from 'picocolors';
-import { getLearningDir, getLearningTuningConfigPath, } from '../../core/project-paths.js';
+import { getLearningDir, getCurateTuningConfigPath, } from '../../core/project-paths.js';
 import { loadShippedAgentDefaults } from '../../core/agent-models.js';
 import { readMachineFeature, writeMachineFeature } from '../../core/feature-switch.js';
 import { loadSettingsModule, narrowedSwitchLabel, personalConfigTrackedWarning } from '../../core/evidence-policy.js';
@@ -263,7 +263,7 @@ async function handleRestore(anchor) {
  * The scope choices of `devflow learning --configure`.
  *
  * D-LEARNING-MODEL-PRECEDENCE: the session-start hook takes the first layer that
- * supplies a model — the project file, then a `devflow agents` Learning mapping,
+ * supplies a model — the project file, then a `devflow agents` Curate mapping,
  * then the global file. A global file therefore has no effect for a user who has
  * such a mapping, and its hint says so.
  */
@@ -272,24 +272,24 @@ export const CONFIGURE_SCOPE_OPTIONS = [
     {
         value: 'global',
         label: 'Global',
-        hint: 'All projects (~/.devflow/learning.json); a devflow agents Learning mapping takes precedence over it',
+        hint: 'All projects (~/.devflow/learning.json); a devflow agents Curate mapping takes precedence over it',
     },
 ];
 /** The models `devflow learning --configure` offers, each with what it is good for. */
-const LEARNING_MODEL_CHOICES = [
+const CURATE_MODEL_CHOICES = [
     { value: 'opus', label: 'Opus', note: 'highest quality for detection + curation judgment' },
     { value: 'sonnet', label: 'Sonnet', note: 'good balance of quality and speed' },
     { value: 'haiku', label: 'Haiku', note: 'fastest, lowest cost' },
 ];
 /**
- * D-LEARNING-SHIPPED-ROW: the model offered as "Recommended" is the one the Learning
+ * D-LEARNING-SHIPPED-ROW: the model offered as "Recommended" is the one the Curate
  * agent ships with, the `model:` line of its frontmatter. It is read from there and
  * written nowhere else, so a change of the shipped tier moves the recommendation with
  * it and this list never has to be edited. A shipped model outside the three offered
  * (or none) recommends nothing.
  */
-export function learningModelOptions(shippedModel) {
-    return LEARNING_MODEL_CHOICES.map(choice => ({
+export function curateModelOptions(shippedModel) {
+    return CURATE_MODEL_CHOICES.map(choice => ({
         value: choice.value,
         label: choice.label,
         hint: choice.value === shippedModel
@@ -299,10 +299,10 @@ export function learningModelOptions(shippedModel) {
 }
 async function handleConfigure() {
     p.intro(color.bgCyan(color.black(' Learning Configuration ')));
-    const shippedModel = (await loadShippedAgentDefaults()).learning?.model;
+    const shippedModel = (await loadShippedAgentDefaults()).curate?.model;
     const model = await p.select({
         message: 'Model for decision detection',
-        options: learningModelOptions(shippedModel),
+        options: curateModelOptions(shippedModel),
     });
     if (p.isCancel(model)) {
         p.cancel('Configuration cancelled.');
@@ -341,7 +341,7 @@ async function handleConfigure() {
         // main checkout in a linked worktree; the current directory outside git.
         const projectRoot = (await getLedgerRoot()) ?? process.cwd();
         const learningDir = getLearningDir(projectRoot);
-        const projectConfigPath = getLearningTuningConfigPath(projectRoot);
+        const projectConfigPath = getCurateTuningConfigPath(projectRoot);
         // D-CLI-NO-SYMLINK (core/linked-path.ts): nothing is written through a .devflow,
         // a learning folder or a learning.json that is a symbolic link.
         const linked = await firstSymbolicLink([path.dirname(learningDir), learningDir, projectConfigPath]);
@@ -419,7 +419,7 @@ async function handleClear() {
         process.exitCode = 1;
         return;
     }
-    // A mid-run Learning agent whose claimed batch vanishes stops without further
+    // A mid-run Curate agent whose claimed batch vanishes stops without further
     // writes — the desired outcome of clearing.
     const drain = await drainLearningQueue(ledgerRoot);
     p.log.success(`Cleared ${counted(cleared.value.cleared, 'observation')} no entry uses and kept ${cleared.value.kept} ` +
@@ -480,7 +480,7 @@ async function handleToggle(enabled) {
         return;
     }
     // Drain the current project's learning (decisions-detection) queue so stale
-    // turns don't process on re-enable. A mid-run Learning agent whose claimed
+    // turns don't process on re-enable. A mid-run Curate agent whose claimed
     // batch vanishes aborts without changes — the desired outcome of disabling.
     const ledgerRoot = await getLedgerRoot();
     if (ledgerRoot) {

package/dist/cli/commands/legacy-hooks.js

@@ -2,7 +2,7 @@ import { devflowHookOwner, hasHook, removeHooks, } from '../../targets/claude-co
 // ─── Dream worker hook cleanup ──────────────────────────────────────────────
 //
 // The spawn-dream-worker SessionStart hook belonged to the retired detached
-// dream worker. Decisions processing runs as the directive-spawned Learning agent
+// dream worker. Decisions processing runs as the directive-spawned Curate agent
 // (session-start-context Section 2), which needs no hook registration of its
 // own. remove/has exist for upgrade cleanup: init and uninstall strip any
 // stale entry left in settings.json by a prior install.

package/dist/cli/commands/rules.js

@@ -9,6 +9,7 @@ import { readManifest, writeManifest } from '../../core/manifest.js';
 import { rulesDir } from '../../core/assets.js';
 import { installAllRules, validateRuleShadow } from '../../targets/claude-code/installer.js';
 import { convergeFromManifest } from '../../targets/claude-code/compliance-install.js';
+import { convergeBehaviorFromManifest } from '../../targets/claude-code/behavior-install.js';
 /**
  * Check whether a rule has a user shadow file at ~/.devflow/rules/{name}.md.
  */
@@ -256,6 +257,21 @@ export async function runRulesEnable(claudeDir, devflowDir) {
         // Warn-not-abort — compliance convergence failure does not undo rules install
         p.log.warn(`Compliance rule convergence failed — rules installed but compliance rule may be stale: ${err instanceof Error ? err.message : String(err)}`);
     }
+    // D-BEHAVIOR-OPT-IN: the wipe above removed the opt-in behavior rule with the rest of
+    // the directory, so bring it back when its switch is on. Same rulesEnabledOverride
+    // reasoning as compliance: a failed install leaves no rules to add this one to.
+    try {
+        await convergeBehaviorFromManifest({
+            claudeDir,
+            devflowDir,
+            manifest,
+            warn: (msg) => p.log.warn(msg),
+            rulesEnabledOverride: !installFailed,
+        });
+    }
+    catch (err) {
+        p.log.warn(`Behavior rule convergence failed — rules installed but the behavior rule may be stale: ${err instanceof Error ? err.message : String(err)}`);
+    }
 }
 export const rulesCommand = new Command('rules')
     .description('Manage Devflow rules')

package/dist/cli/commands/tracker.js

@@ -16,18 +16,22 @@
  * --set converges the sentinel in BOTH directions, so flipping
  *   back to github removes what flipping away wrote.
  * A failed re-arm or sentinel step warns, it never aborts.
+ * --servers sets the machine's tracker tool servers (D-TRACKER-SERVER-ALLOWLIST) and
+ *   re-stamps the installed Git and Tracker agents at once; it is orthogonal to --set and
+ *   neither flag touches the other's manifest field.
  */
 import { Command } from 'commander';
 import { promises as fs } from 'fs';
 import * as path from 'path';
 import * as p from '@clack/prompts';
 import color from 'picocolors';
-import { DEFAULT_TRACKER_PROVIDER, TRACKER_ATTEMPTS_MAX, TRACKER_CONVENTIONS_READ_BYTES, TRACKER_PROVIDERS, applyTrackerSentinel, describeTrackerValue, parseTrackerFrontmatter, parseTrackerId, readBoundedHead, rearmTrackerInference, trackerConventionsPath, } from '../../core/tracker.js';
+import { DEFAULT_TRACKER_PROVIDER, TRACKER_ATTEMPTS_MAX, TRACKER_CONVENTIONS_READ_BYTES, TRACKER_PROVIDERS, applyTrackerSentinel, describeTrackerValue, effectiveTrackerServers, parseTrackerFrontmatter, parseTrackerId, parseTrackerServers, readBoundedHead, rearmTrackerInference, trackerConventionsPath, } from '../../core/tracker.js';
 import { readManifest, syncManifestFeature } from '../../core/manifest.js';
 import { loadSettingsModule, personalConfigTrackedWarning, repoTrackerSelection } from '../../core/evidence-policy.js';
 import { getClaudeDirectory, getDevFlowDirectory } from '../../targets/claude-code/claude-paths.js';
 import { SKILL_REFS_SKILL_NAME, installedReferenceManifest } from '../../core/mds-variants.js';
 import { prefixSkillName } from '../../core/plugins.js';
+import { TRACKER_STAMPED_AGENTS, restampTrackerAgents, } from '../../targets/claude-code/tracker-servers.js';
 /**
  * Read the provenance header of `~/.devflow/tracker/{provider}.md`.
  *
@@ -112,6 +116,10 @@ export async function readTrackerStatusConventions(devflowDir, provider) {
         provenance: await readTrackerProvenance(devflowDir, provider),
     };
 }
+/** Render the tracker servers for the `--status` note. Pure; every name was validated at its boundary. */
+export function formatTrackerServers(list, isDefault) {
+    return `${list.join(', ')}${isDefault ? ` ${color.dim('(default)')}` : ''}`;
+}
 /**
  * The `--status` note's lines. Pure.
  *
@@ -131,7 +139,7 @@ export function formatTrackerStatus(input) {
     }
     lines.push(...(input.conventions.kind === 'none'
         ? ['Conventions: none (GitHub needs no learned conventions)', 'File:        none']
-        : [`Conventions: ${formatTrackerProvenance(input.conventions.provenance)}`, `File:        ${input.conventions.file}`]), `Mechanics:   ${formatTrackerMechanics(input.mechanics)}`, `Inference:   ${input.inference}`);
+        : [`Conventions: ${formatTrackerProvenance(input.conventions.provenance)}`, `File:        ${input.conventions.file}`]), `Mechanics:   ${formatTrackerMechanics(input.mechanics)}`, `Servers:     ${formatTrackerServers(input.servers.list, input.servers.isDefault)}`, `Inference:   ${input.inference}`);
     return lines.join('\n');
 }
 /** The real adapter — the ONE binding of each operation into the `--set` path. */
@@ -164,7 +172,8 @@ export function buildTrackerSetIO() {
 export async function runTrackerSet(opts) {
     const { devflowDir, current, requested, io } = opts;
     const messages = [];
-    await io.syncManifest(devflowDir, { provider: requested });
+    // The provider changes; the tracker servers are a different setting and ride along.
+    await io.syncManifest(devflowDir, { ...current, provider: requested });
     // [DR-22] a selection change re-arms the attempt counters; [DR-10] the
     // sentinel converges in both directions.
     const rearm = await io.rearmInference(devflowDir);
@@ -180,18 +189,72 @@ export async function runTrackerSet(opts) {
     });
     return { provider: requested, messages };
 }
+/** The real adapter — the ONE binding of each operation into the `--servers` path. */
+export function buildTrackerServersIO() {
+    return {
+        syncManifest: (devflowDir, state) => syncManifestFeature(devflowDir, 'tracker', state),
+        restamp: (claudeDir, servers, warn) => restampTrackerAgents({ claudeDir, servers, warn }),
+    };
+}
+/**
+ * Set the machine's tracker tool servers.
+ *
+ * Follows `--set`'s convergence order (D-TRACKER-CONVERGE-SET): the manifest first, then
+ * the installed agents, which are re-stamped ONLY when the manifest write landed, so an
+ * installed agent never names a list the manifest does not record. Unlike `--set`, a failed
+ * manifest write is the whole command failing (there is nothing else for it to do), so it is
+ * returned as `ok: false` for the caller to exit on; a failed re-stamp warns, it never aborts.
+ *
+ * `default` removes the key, so an absent `servers` stays the one spelling of the default.
+ * Never throws.
+ */
+export async function runTrackerServers(opts) {
+    const { devflowDir, claudeDir, current, requested, io } = opts;
+    const messages = [];
+    const next = requested.kind === 'default'
+        ? { provider: current.provider }
+        : { provider: current.provider, servers: requested.servers };
+    try {
+        await io.syncManifest(devflowDir, next);
+    }
+    catch (err) {
+        messages.push({
+            level: 'error',
+            text: `Could not write the manifest — the tracker servers were not changed (${err instanceof Error ? err.message : String(err)})`,
+        });
+        return { ok: false, state: current, messages };
+    }
+    const servers = effectiveTrackerServers(next);
+    const unchanged = servers.join('\n') === effectiveTrackerServers(current).join('\n');
+    const label = `${servers.join(', ')}${requested.kind === 'default' ? ' (default)' : ''}`;
+    messages.push({ level: unchanged ? 'info' : 'success', text: `Tracker servers: ${label}${unchanged ? ' (unchanged)' : ''}` });
+    const restamp = await io.restamp(claudeDir, servers, (message) => messages.push({ level: 'warn', text: message }));
+    const done = restamp.rewritten.length + restamp.unchanged.length;
+    if (restamp.absent.length === TRACKER_STAMPED_AGENTS.length && restamp.failed.length === 0) {
+        messages.push({ level: 'info', text: 'No installed Git or Tracker agent to update — run devflow init' });
+    }
+    else if (restamp.rewritten.length > 0) {
+        messages.push({ level: 'info', text: `Updated the installed ${restamp.rewritten.join(' and ')} agent${restamp.rewritten.length > 1 ? 's' : ''}` });
+    }
+    else if (done > 0 && restamp.failed.length === 0) {
+        messages.push({ level: 'info', text: 'The installed agents already carry this list' });
+    }
+    return { ok: true, state: next, messages };
+}
 export const trackerCommand = new Command('tracker')
-    .description('Show or set the machine\'s issue tracker provider')
+    .description('Show or set the machine\'s issue tracker provider and tracker servers')
     .option('--status', 'Show the provider in effect and its learned conventions file, and re-arm background inference')
     .option('--set <id>', 'Set the machine\'s default issue tracker provider: github, jira, or linear')
+    .option('--servers <names>', 'Set the tracker servers the Git and Tracker agents may call: comma-separated names, or "default"')
     .action(async (options) => {
     const devflowDir = getDevFlowDirectory();
-    const hasFlag = options.status || options.set !== undefined;
+    const hasFlag = options.status || options.set !== undefined || options.servers !== undefined;
     if (!hasFlag) {
         p.intro(color.bgCyan(color.white(' Tracker ')));
         const validIds = TRACKER_PROVIDERS.map(t => `${t.id} — ${t.hint}`).join('\n  ');
         p.note(`${color.cyan('devflow tracker --status')}      Show the provider and learned conventions\n` +
-            `${color.cyan('devflow tracker --set <id>')}    Set the machine's default provider\n\n` +
+            `${color.cyan('devflow tracker --set <id>')}    Set the machine's default provider\n` +
+            `${color.cyan('devflow tracker --servers <names>')}  Set the tracker servers the agents may call\n\n` +
             `Valid provider IDs:\n  ${validIds}`, 'Usage');
         p.outro(color.dim('github is the default — devflow tracker --set github returns to it'));
         return;
@@ -206,7 +269,17 @@ export const trackerCommand = new Command('tracker')
         }
         setProvider = parsed.value;
     }
-    const manifest = await readManifest(devflowDir);
+    // Validate --servers the same way: a bad name exits before any I/O, never repaired.
+    let setServers;
+    if (options.servers !== undefined) {
+        const parsed = parseTrackerServers(options.servers);
+        if (!parsed.ok) {
+            p.log.error(parsed.error);
+            process.exit(1);
+        }
+        setServers = parsed.value;
+    }
+    const manifest = await readManifest(devflowDir, { onWarning: (message) => p.log.warn(message) });
     if (!manifest) {
         p.log.error('No manifest found. Run devflow init first.');
         process.exit(1);
@@ -238,6 +311,7 @@ export const trackerCommand = new Command('tracker')
             selection,
             conventions,
             mechanics,
+            servers: { list: effectiveTrackerServers(current), isDefault: current.servers === undefined },
             inference,
         }), 'Tracker Status');
         if (!statusRearm.ok)
@@ -248,13 +322,34 @@ export const trackerCommand = new Command('tracker')
         return;
     }
     // ── Set ────────────────────────────────────────────────────────────────────
-    const outcome = await runTrackerSet({
-        devflowDir,
-        current,
-        requested: setProvider ?? current.provider,
-        io: buildTrackerSetIO(),
-    });
-    for (const msg of outcome.messages) {
+    // `--set` and `--servers` are independent settings and may be given together: the provider
+    // first, then the servers against the state it left.
+    const messages = [];
+    let state = current;
+    if (setProvider !== undefined) {
+        const outcome = await runTrackerSet({
+            devflowDir,
+            current,
+            requested: setProvider,
+            io: buildTrackerSetIO(),
+        });
+        messages.push(...outcome.messages);
+        state = { ...current, provider: outcome.provider };
+    }
+    let failed = false;
+    if (setServers !== undefined) {
+        const outcome = await runTrackerServers({
+            devflowDir,
+            claudeDir: getClaudeDirectory(),
+            current: state,
+            requested: setServers,
+            io: buildTrackerServersIO(),
+        });
+        messages.push(...outcome.messages);
+        state = outcome.state;
+        failed = !outcome.ok;
+    }
+    for (const msg of messages) {
         switch (msg.level) {
             case 'success':
                 p.log.success(msg.text);
@@ -270,7 +365,9 @@ export const trackerCommand = new Command('tracker')
                 break;
         }
     }
-    if (outcome.provider !== DEFAULT_TRACKER_PROVIDER) {
+    if (failed)
+        process.exit(1);
+    if (setProvider !== undefined && state.provider !== DEFAULT_TRACKER_PROVIDER) {
         p.log.info(color.dim('Your issue conventions are learned in the background at the next session start'));
     }
 });