devrites 2.6.0 → 3.0.0

package/CHANGELOG.md

@@ -2,6 +2,83 @@
 
 All notable changes to DevRites are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and DevRites adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). Releases are generated automatically by [semantic-release](https://semantic-release.gitbook.io/) from Conventional Commits on `main`.
 
+## [3.0.0](https://github.com/ViktorsBaikers/DevRites/compare/v2.6.1...v3.0.0) (2026-07-17)
+
+### ⚠ BREAKING CHANGES
+
+* **release:** DevRites v3 removes legacy shell helper runtime paths.
+
+Constraint: Release version must become v3.0.0.
+Rejected: Commit local agent instruction files | user excluded them.
+Rejected: Reintroduce shell helper wrappers | engine subcommands are canonical.
+Confidence: high
+Scope-risk: broad
+Directive: Keep runtime entry points routed through devrites-engine.
+Tested: bash tests/cli-smoke.sh; bash tests/npx-pack-smoke.sh
+Tested: bash tests/mcp-test.sh; bash tests/hooks-parity-test.sh
+Tested: bash scripts/validate.sh; go test ./...
+Not-tested: live model-backed Codex exec and custom-subagent smoke are opt-in.
+
+### Added
+
+* **devrites:** add adoption workflow support ([cfb3f9e](https://github.com/ViktorsBaikers/DevRites/commit/cfb3f9e6fcbb9dd7834c3a125e192708ba9cb409))
+* **devrites:** add engine parity golden fixtures ([f120773](https://github.com/ViktorsBaikers/DevRites/commit/f120773ff8287348b42b2be05fd27bd4e6ea3aaf))
+* **devrites:** add profile and dogfood skills ([1f04ab7](https://github.com/ViktorsBaikers/DevRites/commit/1f04ab747c9d4c48c15d6f11b07032b7afd5c46b))
+* **devrites:** add reconcile and integrity checks ([b37b69a](https://github.com/ViktorsBaikers/DevRites/commit/b37b69a47025e5f7ace79bc18bc9a07ca8702e2b))
+* **devrites:** add reviewer surface validation ([14fd7db](https://github.com/ViktorsBaikers/DevRites/commit/14fd7dbc2edc9146e8daf8603f4414a7f229d6ee))
+* **devrites:** harden validation and migration tests ([d44b0c0](https://github.com/ViktorsBaikers/DevRites/commit/d44b0c0c1a55c6fd7ff767ce9aa6e112712f32aa))
+* **devrites:** improve hooks and doctor tooling ([77cf0fa](https://github.com/ViktorsBaikers/DevRites/commit/77cf0faf9bdbb56d1860a2056e66517d72063aa4))
+* **devrites:** persist workflow evidence signals ([cc269a1](https://github.com/ViktorsBaikers/DevRites/commit/cc269a102e534f275b870cf77f5d3b6d596c17b8))
+* **devrites:** port reviewer-readonly + subagent-orient hooks ([b388790](https://github.com/ViktorsBaikers/DevRites/commit/b388790e4f76cd96561dbcfbd0ced5946a7e9b18))
+* **devrites:** port spec-validate/check-acceptance to Go engine ([a1d2791](https://github.com/ViktorsBaikers/DevRites/commit/a1d2791b832d9dd42a47e3092a3d1e34fdb1c56c))
+* **devrites:** refine install and runtime helpers ([dba1e99](https://github.com/ViktorsBaikers/DevRites/commit/dba1e9988dbde6eaa5101026944e1c137c93a1d7))
+* **devrites:** refresh agents and skill references ([ba33d0b](https://github.com/ViktorsBaikers/DevRites/commit/ba33d0bf89384454530fe0f79a0ab21964379094))
+* **devrites:** refresh code review and plan guidance ([f4fb255](https://github.com/ViktorsBaikers/DevRites/commit/f4fb2553b8bfae8f6fbf629f14b70e3a439af282))
+* **devrites:** refresh evals and skill outputs ([ab9dc94](https://github.com/ViktorsBaikers/DevRites/commit/ab9dc9447b858bc9492ceffe4c4657ff79661b8e))
+* **devrites:** refresh explain and customize docs ([d57bdff](https://github.com/ViktorsBaikers/DevRites/commit/d57bdffd832eab3c76b83f031a853ac520e4de95))
+* **devrites:** refresh frontend guidance and proof docs ([d26bb09](https://github.com/ViktorsBaikers/DevRites/commit/d26bb09ed8ebd6a8f779738e32b3daff0da19bd7))
+* **devrites:** refresh plan and source-driven guidance ([63fce26](https://github.com/ViktorsBaikers/DevRites/commit/63fce26d1776010006c176ac9fe57bd359f3bacf))
+* **devrites:** refresh prose craft and detection ([e95b757](https://github.com/ViktorsBaikers/DevRites/commit/e95b757acbaa66db1ee7fc968d07eae779e7ada0))
+* **devrites:** refresh skill docs and validation tooling ([2ad1317](https://github.com/ViktorsBaikers/DevRites/commit/2ad1317a11f94bcae0a5911d48c8cd7f80911c41))
+* **devrites:** refresh ux shape and spec intake ([f547fe6](https://github.com/ViktorsBaikers/DevRites/commit/f547fe6b0a676d27b56022771ece324593e256a4))
+* **devrites:** refresh workflow and skill surfaces ([8b8d065](https://github.com/ViktorsBaikers/DevRites/commit/8b8d065a1f052ddf209fbaa1ddf375bc95932ffc))
+* **devrites:** refresh workflow docs and checks ([c6e481d](https://github.com/ViktorsBaikers/DevRites/commit/c6e481d9b24eda43039d66b908551e37eb15d9a4))
+* **devrites:** tighten engine reply contracts ([19ec4b0](https://github.com/ViktorsBaikers/DevRites/commit/19ec4b00411bf72428ce7b84f2f178fe9ff8f89d))
+* **devrites:** update CI workflow ([2e7214a](https://github.com/ViktorsBaikers/DevRites/commit/2e7214acd6f7a13e16352b0948608b3a0323c147))
+* **devrites:** update docs and engine behavior ([8a2dd35](https://github.com/ViktorsBaikers/DevRites/commit/8a2dd3573af3afe9c7bbc76aae8fa17aebed031e))
+* **devrites:** update docs and eval tooling ([e51f3b3](https://github.com/ViktorsBaikers/DevRites/commit/e51f3b34cad8efc9c2e0eda0dc57717eccea4d42))
+* **devrites:** update docs and release checks ([1d09f35](https://github.com/ViktorsBaikers/DevRites/commit/1d09f359faec7b65fdfa5ed9bed94311cf26e698))
+* **devrites:** update engine gating and commands ([878ed2c](https://github.com/ViktorsBaikers/DevRites/commit/878ed2c3666fcc7d87af4de4c1a7db03a4c78d07))
+* **devrites:** update engine internals and validation ([b4d6d92](https://github.com/ViktorsBaikers/DevRites/commit/b4d6d92bc0b29085fa123f433c57230b0610497f))
+* **devrites:** update engine state and skills ([732c97e](https://github.com/ViktorsBaikers/DevRites/commit/732c97e3b7b9e37443f3168e824a6d108b9085c4))
+* **devrites:** update hooks and guidance surfaces ([6e79143](https://github.com/ViktorsBaikers/DevRites/commit/6e7914339283ad557849e568eeffb213c0bfb342))
+* **devrites:** update rite workflow docs and engine ([c8ff41e](https://github.com/ViktorsBaikers/DevRites/commit/c8ff41eb67b0b94af0b7cea728092e534b1e812b))
+* **devrites:** update spec and workspace docs ([1f2888a](https://github.com/ViktorsBaikers/DevRites/commit/1f2888ace17e854c212cf58b4f62a1cc42bf741f))
+* **installer:** make host installs engine-owned ([c70491c](https://github.com/ViktorsBaikers/DevRites/commit/c70491cb8d856d3c3ef6b9d017766e6b710bb6fc))
+* **release:** ship v3.0.0 engine control plane ([da6ca62](https://github.com/ViktorsBaikers/DevRites/commit/da6ca6239d0321d0ab9bf3e36a7ffe46a80b6db3))
+
+### Changed
+
+* **repo:** reduce duplicate maintenance surfaces ([0e645d4](https://github.com/ViktorsBaikers/DevRites/commit/0e645d45fdf4f75cbb367016ace88ae79c40870c))
+
+### Fixed
+
+* **ci:** generate artifacts before validation ([0d3afa3](https://github.com/ViktorsBaikers/DevRites/commit/0d3afa3d4dd72e2b31b31467e759e42becfb0c8a))
+* **ci:** make engine tests cross-platform ([1631450](https://github.com/ViktorsBaikers/DevRites/commit/163145057575d9833b1c28d0d1f00516e025f363))
+* **ci:** normalize remaining Windows output ([8da9a61](https://github.com/ViktorsBaikers/DevRites/commit/8da9a6106188655f612cd3be7f32374a4a25435f))
+* **installer:** keep Claude hooks complete in existing settings ([d9f57af](https://github.com/ViktorsBaikers/DevRites/commit/d9f57afd2d7fc60a44e6141887b0b7c6a9a23a1d))
+* **tests:** normalize Windows golden files ([7d0a07c](https://github.com/ViktorsBaikers/DevRites/commit/7d0a07c5c4838237572d4807b17a475f1fd1ed71))
+
+### Documentation
+
+* **skills:** keep skill guidance compact ([6afebfe](https://github.com/ViktorsBaikers/DevRites/commit/6afebfeccf152669c44e96a99cd6610200945dc6))
+
+## [2.6.1](https://github.com/ViktorsBaikers/DevRites/compare/v2.6.0...v2.6.1) (2026-07-05)
+
+### Fixed
+
+* **installer:** emit valid Codex hooks config ([5a23d0a](https://github.com/ViktorsBaikers/DevRites/commit/5a23d0a0d4f1d990cf206f258a0b6866b46cf341))
+
 ## [2.6.0](https://github.com/ViktorsBaikers/DevRites/compare/v2.5.2...v2.6.0) (2026-07-05)
 
 ### Added

package/README.md

@@ -2,12 +2,17 @@
   <img src="images/logo.png" alt="DevRites">
 </p>
 
+
+**If you only remember one thing:** `SPEC -> DEFINE -> VET -> BUILD -> PROVE -> POLISH -> REVIEW -> SEAL -> SHIP`. Seal decides; Ship mutates git. Build one slice at a time; Autocomplete is opt-in and starts from a clean baseline. DevRites installs via `npx devrites ...`; Claude/Codex support is generated project-local surface, not plugin distribution.
+
 **Per-feature workspace on disk.** Every feature gets its own `.devrites/work/<slug>/`
-directory: `spec.md` → (`strategy.md`) → `plan.md` + `tasks.md` → (`eng-review.md` +
+directory: a compact workspace map → `brief.md` + `spec.md` → (`strategy.md`) →
+`architecture.md` + `plan.md` + `tasks.md` + `traceability.md` → (`eng-review.md` +
 `test-plan.md`) → `state.md` → `evidence.md` (plus `decisions.md`, `assumptions.md`,
-`drift.md`, `questions.md`, `touched-files.md`, `design-brief.md`, `review.md`, `seal.md`,
-`ship.md`, `handoff.md`, and `references/`; `strategy.md` is from the optional `/rite-temper`,
-`eng-review.md` + `test-plan.md` from `/rite-vet`). When the task ships it is archived intact to
+`drift.md`, `questions.md`, `touched-files.md`, `design-brief.md`,
+`browser-evidence.md`, `review.md`, `seal.md`, `ship.md`, `handoff.md`, and
+`references/`; `strategy.md` is from the optional `/rite-temper`, `eng-review.md` +
+`test-plan.md` from `/rite-vet`). When the task ships it is archived intact to
 `.devrites/archive/<slug>/`. When you `/clear`, the next agent picks up from those
 files — no chat-context summary required. **Spec Drift Guard** catches the wrong turn
 before it costs you a day. **AFK mode** runs unattended without silently accepting
@@ -25,9 +30,9 @@ recorded-exception escape hatch instead of silent work-arounds.
   conventions.md            # learned project idioms — descriptive, an untrusted prior
   learnings.md              # dismissed-finding classes + dead ends — suppresses recurring false positives
   work/<slug>/
-    brief.md  spec.md  references.md  references/        # spec
+    README.md  brief.md  spec.md  references.md  references/  # workspace map + spec
     strategy.md                                          # temper (optional)
-    plan.md  tasks.md                                    # define
+    architecture.md  flows.md  plan.md  tasks.md  traceability.md  # define
     eng-review.md  test-plan.md                          # vet
     forge-report.md                                      # build (only a Forge: yes slice — competed candidates → winner)
     state.md  questions.md  decisions.md  assumptions.md  drift.md
@@ -66,6 +71,7 @@ memory). Both hit the same skill — `/rite spec foo` ≡ `/rite-spec foo`.
 | 2 | PLAN | `/rite define` | [`/rite-define`](pack/.claude/skills/rite-define/SKILL.md) | spec → plan + slices (each tagged AFK \| HITL + gate) |
 | — | VET | `/rite vet` | [`/rite-vet`](pack/.claude/skills/rite-vet/SKILL.md) | _recommended, every feature_ — engineering plan review: scope · architecture · tests · perf, hardens the plan + writes `test-plan.md`; depth scales to stakes, never skipped (always in autocomplete) |
 | 3 | BUILD ×N | `/rite build` | [`/rite-build`](pack/.claude/skills/rite-build/SKILL.md) | one slice, then stop (HITL slices pause pre-code) |
+| — | CONVERGE | `/rite converge` | [`/rite-converge`](pack/.claude/skills/rite-converge/SKILL.md) | _recovery_ — assess live code vs intent, append the remaining work as new slices (resumed / adopted / stalled feature) |
 | 4 | PROVE | `/rite prove` | [`/rite-prove`](pack/.claude/skills/rite-prove/SKILL.md) | tests + browser proof |
 | 5 | POLISH | `/rite polish` | [`/rite-polish`](pack/.claude/skills/rite-polish/SKILL.md) | code + UI polish |
 | 6 | REVIEW | `/rite review` | [`/rite-review`](pack/.claude/skills/rite-review/SKILL.md) | multi-axis, parallel |
@@ -74,6 +80,14 @@ memory). Both hit the same skill — `/rite spec foo` ≡ `/rite-spec foo`.
 | — | RESUME | `/rite resolve` | [`/rite-resolve`](pack/.claude/skills/rite-resolve/SKILL.md) | answer a HITL gate, clears `Awaiting human`, resumes |
 | — | AUTO | `/rite autocomplete` | [`/rite-autocomplete`](pack/.claude/skills/rite-autocomplete/SKILL.md) | run the whole lifecycle unattended (`--ship` to push) |
 
+Common utilities that sit outside the main lifecycle:
+
+| Utility | Menu form | Direct shortcut | Does |
+|---|---|---|---|
+| POV | `/rite pov` | [`/rite-pov`](pack/.claude/skills/rite-pov/SKILL.md) | project-grounded adopt / switch / reject verdict for an external option |
+| DOGFOOD | `/rite dogfood` | [`/rite-dogfood`](pack/.claude/skills/rite-dogfood/SKILL.md) | exploratory browser QA for real user journeys |
+| PR FEEDBACK | `/rite pr-feedback` | [`/rite-pr-feedback`](pack/.claude/skills/rite-pr-feedback/SKILL.md) | resolve GitHub PR review threads with evidence |
+
 If implementation reveals the plan is wrong, the **Spec Drift Guard** stops
 the build, records the drift, asks you when product behavior changes, and
 routes through [`/rite-plan repair`](pack/.claude/skills/rite-plan/SKILL.md)
@@ -101,7 +115,7 @@ Full diagram set (lifecycle, polish orchestrator, review fan-out, debug loop,
 rules carrier, workspace state, namespace map) →
 [`docs/flow.md`](docs/flow.md).
 
-**Status:** [`v2.6.0`](https://github.com/ViktorsBaikers/DevRites/releases/tag/v2.6.0) — see [`CHANGELOG.md`](CHANGELOG.md) for release notes.
+**Status:** [`v3.0.0`](https://github.com/ViktorsBaikers/DevRites/releases/tag/v3.0.0) — see [`CHANGELOG.md`](CHANGELOG.md) for release notes.
 
 ## Contents
 
@@ -109,7 +123,7 @@ rules carrier, workspace state, namespace map) →
 - [Modes — HITL & AFK](#modes--hitl--afk)
 - [Install](#install) — [npx / bash](#installing) · [upgrade](#upgrading-an-existing-install)
 - [Recommended setup](#recommended-setup-optional-but-devrites-is-much-sharper-with-it) — codegraph · graphify · Playwright MCP
-- [Skills](#skills) — 36 total · full catalogue in [`docs/skills.md`](docs/skills.md)
+- [Skills](#skills) — 42 total · full catalogue in [`docs/skills.md`](docs/skills.md)
 - [Typical workflow](#typical-workflow) · [Worked examples](docs/usage.md)
 - [Engineering rules](#engineering-rules) · [Browser proof ladder](#browser-proof-ladder) · [Frontend & fullstack](#frontend--fullstack)
 - [Safety & scope](#safety--scope) · [Security model](#security-model)
@@ -123,7 +137,7 @@ rules carrier, workspace state, namespace map) →
 [orchestration](docs/orchestration.md) ·
 [usage examples](docs/usage.md) ·
 [release pipeline](docs/release.md) ·
-[engineering rules](pack/.claude/rules/README.md)
+[engineering rules](pack/.claude/skills/devrites-lib/reference/standards/README.md) · [quick reference](docs/quick-reference.md)
 
 ## Why distributed skills, not one `/engine`
 
@@ -190,7 +204,12 @@ curl -fsSL https://raw.githubusercontent.com/ViktorsBaikers/DevRites/main/instal
 
 The script is self-bootstrapping: when piped through `bash` it auto-downloads the latest
 release tarball (or the `main` source archive as fallback) into `/tmp` and re-execs from
-there. Requires `curl` and `tar`. No global writes, ever — global agent homes are refused.
+there. Requires `curl` and `tar`. After bootstrap, install/update/uninstall semantics
+run through `devrites-engine`; the shell scripts only acquire a bundle/binary and pass
+arguments through. Agent files stay project-local and global agent homes are refused. By
+default the engine downloads or builds a verified `devrites-engine` control-plane binary
+and writes it to `/usr/local/bin` or `~/.local/bin`; use `--no-binary` or
+`DEVRITES_NO_BINARY=1` to skip that global bin install.
 
 **From a local checkout** (same script, no network needed):
 
@@ -207,16 +226,19 @@ Common flags:
 | `--target DIR` | Install into DIR (default: current directory) |
 | `--dry-run` | Show planned file operations and exit |
 | `--force` | Overwrite existing non-DevRites files |
-| `--no-rules` | Skip the engineering rules |
 | `--no-agents` | Skip the review subagents |
 | `--no-codex` | Skip Codex support files (`.agents/skills`, `.codex/agents`, `AGENTS.md`) |
-| `--rules-only` | Install only the engineering rules |
+| `--no-skills` | Skip skills and bundled engineering standards |
+| `--no-binary` | Skip the global `devrites-engine` control-plane binary |
+| `--no-rules` | Deprecated no-op; standards ship inside `devrites-lib` |
+| `--rules-only` | Deprecated no-op; installs normally for compatibility |
 | `--short-aliases=all` | Add `/define`, `/build`, `/prove`, `/seal` short aliases (off by default) |
 
-Every installed file is recorded in `.claude/devrites.manifest` (with the installed
-version and the original install flags in the header). `./uninstall.sh` removes
-exactly those files (and prunes empty dirs) — your feature data in
-`.devrites/work/` and `.devrites/ACTIVE` is preserved.
+Every installed project file is recorded in `.claude/devrites.manifest` (with the
+installed version and the original install flags in the header). `./uninstall.sh`
+removes exactly those files (and prunes empty dirs) plus the shared `devrites-engine`
+binary unless `--keep-binary` is passed — your feature data in `.devrites/work/` and
+`.devrites/ACTIVE` is preserved.
 
 ### Upgrading an existing install
 
@@ -285,15 +307,22 @@ investigation, cheaper context, and real browser proof. None are required.
 
 ## Skills
 
-The pack ships **36 skills total** — 24 user-invocable `rite-*` workflow + utility skills, 11 model-invoked `devrites-*` specialists, plus the internal `devrites-lib` library (scripts the workflow skills run, not a command). **Prefix convention:** `rite-*` is the user-facing command surface; `devrites-*` is internal (model-invoked, hidden from the menu). Each skill is a structured workflow with its own operating rules, anti-rationalization tables, and red flags. Engineering rules live at `.claude/rules/`; each `rite-*` skill Reads `.claude/rules/core.md` as its first step, and the other 22 rule files load on demand.
-
-**Claude Code invocation.** Every user-invocable skill responds to **both** `/rite <verb>` (menu form — type `/rite` to discover) and `/rite-<verb>` (direct shortcut — muscle memory). The forms are equivalent: `/rite build slice-2` ≡ `/rite-build slice-2`. Use whichever reads more naturally.
+The pack ships **42 skills total** — the `rite` menu, 29 user-invocable `rite-*`
+workflow + utility skills, 11 model-invoked `devrites-*` specialists, plus the internal
+`devrites-lib` reference library. The installed `devrites-engine` owns workflow control;
+the npm `devrites` shim owns install/update/uninstall and proxies engine subcommands.
+`rite-*` and `devrites-*` are namespaces, not visibility rules: frontmatter is
+authoritative. Workspace-operating lifecycle skills read `core.md` in step 0 and disclose
+phase rules on demand; compact utilities keep their narrower contract local.
 
-**Codex invocation.** The installer mirrors the same skills to `.agents/skills/`, mirrors DevRites rules to `.agents/devrites/rules/`, injects a Codex compatibility block after each skill's front matter, generates project custom agents in `.codex/agents/`, installs Codex hooks in `.codex/hooks.json` + `.codex/hooks/`, installs the DevRites MCP server at `.codex/mcp/devrites-mcp.mjs`, and creates or merges the needed Codex guidance into `AGENTS.md`. If `AGENTS.md` already exists, DevRites adds a marked block instead of replacing your guidance. In Codex, invoke DevRites via `$rite`, `$rite-spec`, or `/skills`; if you prefer a Claude-only footprint, install with `--no-codex`. Codex must trust the project `.codex/` layer and review the hooks via `/hooks` before non-managed hooks run.
+**Claude Code invocation.** Every user-invocable skill responds to **both** `/rite <verb>` (menu form — type `/rite` to discover) and `/rite-<verb>` (direct shortcut — muscle memory). The forms are equivalent: `/rite build slice-2` ≡ `/rite-build slice-2`. Use whichever reads more naturally. Installation merges DevRites event hooks into an existing `.claude/settings.json` without replacing user entries; an existing non-DevRites `statusLine` is preserved with a warning because Claude exposes one status-line slot.
 
-**Rules in Codex.** DevRites engineering rules are mirrored as Markdown under `.agents/devrites/rules/` because they are workflow/craft instructions, not Codex command-approval `.rules` files. The generated `AGENTS.md` block and every mirrored `.agents/skills/*/SKILL.md` tell Codex to read `.agents/devrites/rules/core.md` before workflow work and load the other `.agents/devrites/rules/*.md` files on demand.
+**Codex invocation.** The installer mirrors the same skills to `.agents/skills/`, mirrors DevRites rules to `.agents/skills/devrites-lib/reference/standards/`, injects a Codex compatibility block after each skill's front matter, generates project custom agents in `.codex/agents/`, installs Codex hooks in `.codex/hooks.json`, and creates or merges the needed Codex guidance into `AGENTS.md`. If `AGENTS.md` already exists, DevRites adds a marked block instead of replacing your guidance. In Codex, invoke DevRites via `$rite`, `$rite-spec`, or `/skills`; if you prefer a Claude-only footprint, install with `--no-codex`. Codex must trust the project `.codex/` layer and review the hooks via `/hooks` before non-managed hooks run.
 
-**DevRites MCP in Codex.** The installer adds a marked `[mcp_servers.devrites]` block to `.codex/config.toml` and copies the MCP server into `.codex/mcp/`. That gives Codex deterministic tools for DevRites state and gates (`devrites_status`, `devrites_ready`, `devrites_evidence_fresh`, `devrites_acceptance`, and related workspace helpers) without relying on prose or ad-hoc shell commands.
+**Rules in Codex.** DevRites engineering rules are mirrored as Markdown under
+`.agents/skills/devrites-lib/reference/standards/` because they are workflow/craft
+instructions, not Codex command-approval `.rules` files. Generated guidance points at the
+mirror; each skill's own contract decides whether `core.md` or a conditional standard loads.
 
 **Custom pinned aliases** (optional). Add your own one-word shortcuts to any `rite-*` skill at runtime with `scripts/pin.sh` — useful for muscle-memory commands like `/b` → `/rite-build` or `/ship` → `/rite-ship`. The wrapper is a thin delegate (same shape the installer uses for `--short-aliases=all`); pinned aliases are manifest-tracked so `./uninstall.sh` cleans them up.
 
@@ -308,7 +337,7 @@ Pinned aliases live at `.claude/skills/<alias>/SKILL.md` and mirror to `.agents/
 
 ### Full skill + agent inventory
 
-**Public `rite-*` skills (22)** — slash-command surface:
+**Public `rite-*` skills (29)** — slash-command surface:
 
 | Group | Skills |
 |---|---|
@@ -317,16 +346,17 @@ Pinned aliases live at `.claude/skills/<alias>/SKILL.md` and mirror to `.agents/
 | Strategic (optional) | `rite-temper` — strategic spec review between spec and define; mandatory in `rite-autocomplete` |
 | Engineering (every feature) | `rite-vet` — engineering plan review between define and build; depth scales to stakes, never skipped; always in `rite-autocomplete` |
 | Resume / replan | `rite-resolve` · `rite-plan` |
-| Utility | `rite-status` · `rite-doctor` · `rite-zoom-out` · `rite-prototype` · `rite-handoff` · `rite-pressure-test` · `rite-autocomplete` |
+| Utility | `rite-status` · `rite-doctor` · `rite-customize` · `rite-pov` · `rite-dogfood` · `rite-pr-feedback` · `rite-zoom-out` · `rite-prototype` · `rite-handoff` · `rite-pressure-test` · `rite-autocomplete` |
 | Learning (optional) | `rite-learn` — cross-feature learning loop: mine shipped features for recurring mistakes + dismissed-finding classes, propose project-local lessons into `.devrites/learnings.md`, and promote recurring invariants to `.devrites/principles.md` |
 | Menu | `rite` |
 
-**Internal `devrites-*` specialists (9)** — model-invoked, hidden from menu:
+**Internal `devrites-*` specialists** — model-invoked, hidden from menu:
 
 `devrites-interview` · `devrites-source-driven` · `devrites-doubt` ·
 `devrites-ux-shape` · `devrites-frontend-craft` · `devrites-browser-proof` ·
 `devrites-debug-recovery` · `devrites-api-interface` ·
-`devrites-audit` (axes: `security` · `perf` · `simplify`).
+`devrites-audit` (axes: `security` · `perf` · `simplify`) ·
+`devrites-prose-craft` · `devrites-refresh-indexes`.
 
 **Review agents (12)** — fresh-context reviewers under `.claude/agents/`:
 
@@ -407,7 +437,7 @@ rm .devrites/AFK
 
 Recommended progression: start HITL, refine the prompt and plan over a few slices, then
 drop the sentinel for the bulk stretch. Always cap iterations. Full contract:
-[`pack/.claude/rules/afk-hitl.md`](pack/.claude/rules/afk-hitl.md).
+[`pack/.claude/skills/devrites-lib/reference/standards/afk-hitl.md`](pack/.claude/skills/devrites-lib/reference/standards/afk-hitl.md).
 
 ## Typical workflow
 
@@ -446,17 +476,19 @@ Playwright MCP, backend-only, polish modes, zoom-out, mid-flight handoff):
 ## Engineering rules
 
 DevRites ships its own stack-agnostic engineering rules and installs them to
-`.claude/rules/` — 23 rule files plus a README index. They're **common** by design
+`.claude/skills/devrites-lib/reference/standards/` — common rule files plus a README index. They're **common** by design
 (no language assumptions); a project's own conventions always win where they exist, and a
-project's own **principles** (`.devrites/principles.md`) outrank both. Skip them with
-`--no-rules`. Loading model: each `rite-*` skill Reads `.claude/rules/core.md` as its first
-step; the other 22 rule files load on demand via `Read` from the skill body that needs them.
+project's own **principles** (`.devrites/principles.md`) outrank both. Standards ship inside
+the `devrites-lib` skill; the retired `--no-rules` and `--rules-only` flags are compatibility
+no-ops. Use `--no-skills` only when you intentionally want to skip skills and the bundled
+standards together. Loading model: each `rite-*` skill Reads `.claude/skills/devrites-lib/reference/standards/core.md` as its first
+step; the remaining rule files load on demand via `Read` from the skill body that needs them.
 
 | Always-on | On-demand |
 |---|---|
-| `core.md` | `coding-style.md` · `prose-style.md` · `error-handling.md` · `testing.md` · `spec-grammar.md` · `code-review.md` · `principles.md` · `security.md` · `performance.md` · `observability.md` · `developer-experience.md` · `patterns.md` · `git-workflow.md` · `hooks.md` · `documentation.md` · `development-workflow.md` · `deprecation.md` · `agents.md` · `context-hygiene.md` · `afk-hitl.md` · `anti-patterns.md` · `tooling.md` |
+| `core.md` | `coding-style.md` · `prose-style.md` · `error-handling.md` · `testing.md` · `spec-grammar.md` · `code-review.md` · `principles.md` · `security.md` · `performance.md` · `observability.md` · `developer-experience.md` · `patterns.md` · `git-workflow.md` · `hooks.md` · `ci-cd.md` · `documentation.md` · `development-workflow.md` · `deprecation.md` · `elicitation.md` · `agents.md` · `context-hygiene.md` · `afk-hitl.md` · `anti-patterns.md` · `tooling.md` · `skill-authoring.md` |
 
-Full index with phase mapping: [`pack/.claude/rules/README.md`](pack/.claude/rules/README.md);
+Full index with phase mapping: [`pack/.claude/skills/devrites-lib/reference/standards/README.md`](pack/.claude/skills/devrites-lib/reference/standards/README.md);
 diagram: [`docs/flow.md` § Engineering-rules loading](docs/flow.md#6-engineering-rules-carrier).
 
 ## Browser proof ladder
@@ -500,22 +532,22 @@ real UI state, and **prove both layers** (contract tests + browser proof).
 
 ```
 devrites/
-  bin/                 # devrites.mjs — npx CLI entry point (wraps install.sh)
+  bin/                 # devrites.mjs — npx CLI entry point (acquires/proxies devrites-engine)
   .github/             # workflows/ (ci, release, dependabot-auto-merge) + dependabot.yml
   .husky/              # commit-msg hook (Conventional Commits via commitlint)
   .releaserc.json      # semantic-release config (CHANGELOG, version sync, tarball, GitHub Release)
-  install.sh  uninstall.sh  update.sh
-  scripts/             # install-lib · validate · validate-frontmatter · run-evals · eval-runner.py
+  install.sh  uninstall.sh  update.sh  # self-contained bundle/binary bootstrap shims
+  scripts/             # install-lib (shim + pin helpers) · validate · validate-frontmatter · run-evals
                        # grade-feature · run-outcome-evals · devrites-detect · check-no-global-writes
                        # sync-version · build-release-tarball
-  mcp/                 # devrites-mcp.mjs — MCP stdio server over the devrites CLI
-  pack/.claude/        # skills/  36 skills — 24 public + 12 internal          ─┐
+  pack/.claude/        # skills/  42 skills — 30 public + 12 internal          ─┐
                        # agents/  13 read-only + 1 writer (slice-wright)         ├─ the pack
-                       # rules/   23 rule files + README index                   ┘
+                       # settings.json  (canonical Claude engine hook wiring)   ┘
+                       # (standards live inside skills/devrites-lib/reference/standards/)
   installed projects   # .claude/ runtime assets; .agents/skills + .codex/agents
-                       # + .codex/hooks/config/mcp + AGENTS.md for Codex
+                       # + .codex/hooks.json + AGENTS.md for Codex
   evals/               # trigger evals (20/skill) + golden/ outcome-eval fixtures
-  docs/                # architecture · skills · command-map · usage · flow · release · cli-mcp
+  docs/                # architecture · skills · command-map · usage · flow · release · cli
     internal/          # research, development notes (gitignored)
   tests/               # install/uninstall smoke · install fixture · pack validation
   dist/                # release tarballs built by semantic-release (gitignored)
@@ -529,19 +561,21 @@ Cross-links: [architecture](docs/architecture.md) ·
 [flow diagrams](docs/flow.md) ·
 [usage](docs/usage.md) ·
 [release pipeline](docs/release.md) ·
-[CLI & MCP](docs/cli-mcp.md) ·
-[engineering rules](pack/.claude/rules/README.md).
+[CLI](docs/cli.md) ·
+[engineering rules](pack/.claude/skills/devrites-lib/reference/standards/README.md).
 
 ## Security model
 
-DevRites is auditable Markdown + a small set of shell scripts. The complete security
+DevRites is auditable Markdown + a small engine binary. The complete security
 policy, including private vulnerability reporting and recommended managed-deployment
 settings, lives in [`SECURITY.md`](SECURITY.md). Highlights: **project-local only**
-(installer refuses global Claude/Codex agent homes); **no network access** in installer or
-skills (no remote code execution); **`!` shell injection removed** from `/rite` and
-`/rite-status` (state loaded via a `Bash`-invoked script that reads only DevRites' own
-state under `.devrites/`); **auto-trigger** is a deliberate design choice mitigated by
-body discipline + readiness gates + the interactive `type-GO` confirmation in `/rite-ship`
+(installer refuses global Claude/Codex agent homes); **bounded installer network access**
+for the release tarball and verified `devrites-engine` asset, with `--no-binary` /
+`DEVRITES_NO_BINARY=1` available for fully project-file-only installs; **no network
+access in skills**; **`!` shell injection removed** from `/rite` and `/rite-status`
+(state loaded via read-only engine subcommands over DevRites' own state under
+`.devrites/`); **auto-trigger** is a deliberate design choice mitigated by body
+discipline + readiness gates + the interactive `type-GO` confirmation in `/rite-ship`
 before irreversible git actions; **no `defaultMode: bypassPermissions`** is shipped or
 written by the installer (cf. CVE-2026-33068).
 
@@ -558,7 +592,8 @@ written by the installer (cf. CVE-2026-33068).
 ## License
 
 **Free to use, with approval gating redistribution.** Personal use and *listing this
-repository in package registries or plugin marketplaces* are permitted without approval. Any other use —
+repository in package registries* are permitted without approval. DevRites is installed via
+`npx devrites ...`, not Claude/Codex plugin marketplaces. Any other use —
 distributing it, distributing modified versions, mirroring as a fork, or commercial /
 organizational use — requires **approval on request** (ask via
 [the repo](https://github.com/ViktorsBaikers/DevRites)). Source-available. See

package/SECURITY.md

@@ -37,14 +37,11 @@ Once a `1.0` release ships, the latest two minor lines will be supported.
 
 ### Scope
 
-DevRites is a Claude Code **skills pack**: Markdown skill files, a few helper
-shell scripts, a bash installer, and a thin `npx` CLI wrapper (`bin/devrites.mjs`)
-that shells out to that installer. It ships **no binary and no network service**. The only server is an
-**optional, opt-in MCP stdio server** (`mcp/devrites-mcp.mjs`) that speaks
-JSON-RPC over stdin/stdout (no port, no socket), is not installed or registered
-by default, and only shells out to the local `devrites` CLI — read/gate ops over
-`.devrites/` plus a single `ACTIVE`-pointer write. The attack surface is the
-content of the skill files plus the installer.
+DevRites is a skills pack plus the local `devrites-engine` control-plane binary:
+Markdown skill files, helper scripts, a bash installer, and a thin `npx` CLI
+wrapper (`bin/devrites.mjs`) that bootstraps or proxies the engine. It ships no
+network service. The attack surface is the content of the skill files, the
+installer, generated host artifacts, hooks, and the local engine binary.
 
 ### Supply-chain self-scan (shipped pack)
 
@@ -66,23 +63,23 @@ file out of one class with `<!-- pack-scan-ignore-file: injection -->`.
 Suppressions live in the file, so every exception is visible in the diff and
 reviewable; never suppress a hidden-unicode finding you can't explain.
 
-### State loading (project-local script, no `!` injection)
+### State loading (engine subcommands, no `!` injection)
 
 `/rite`, `/rite-status`, and every workspace-operating skill load state by running
-a **read-only shell script via the `Bash` tool** — *not* Claude Code's
+a **read-only `devrites-engine` subcommand via the `Bash` tool** — *not* Claude Code's
 preprocessing-only `` !`<command>` `` dynamic-context injection, which DevRites
 **removed** for cross-harness portability:
 
 ```bash
-P=.claude/skills/devrites-lib/scripts/preamble.sh
-[ -f "$P" ] && bash "$P" || echo "(unavailable — read state.md directly)"
+command -v devrites-engine >/dev/null 2>&1 && devrites-engine preamble || echo "(unavailable — read state.md directly)"
 ```
 
-`preamble.sh` is a project-local read of DevRites' own `.devrites/` state: no user
-input is concatenated into a command, no network access, no write side effects.
-The gate scripts (`readiness.sh`, `evidence-fresh.sh`, `check-acceptance.sh`) are
-likewise read-only; only the explicit mutators (`resolve.sh`, `tick-afk.sh`,
-`close-out.sh`, and the CLI's `use`) write, and only under `.devrites/`.
+`devrites-engine preamble` is a project-local read of DevRites' own `.devrites/`
+state: no user input is concatenated into a command, no network access, no write
+side effects. The gate subcommands (`build-readiness`, `evidence-fresh`,
+`check-acceptance`) are likewise read-only; only explicit mutators (`resolve`,
+`tick-afk`, `close-out`, and the MCP `use` helper) write, and only under
+`.devrites/`.
 
 If your environment disallows skill-initiated shell execution, the scripts simply
 don't run — each skill degrades gracefully to reading `state.md` directly (the
@@ -148,28 +145,32 @@ The first three lines surface a confirmation prompt before any irreversible
 git action; the last disables the `/rite` and `/rite-status` dynamic-state
 read described above (DevRites still works).
 
-### Hooks (auto-approve scope + orientation)
-
-DevRites ships two `Bash`-matched hooks (`pack/.claude/hooks/`, wired via the
-plugin's `hooks.json` or a seeded `.claude/settings.json`):
-
-- **`devrites-allow.sh` (PreToolUse)** — auto-approves *only* the five **read-only**
-  helper scripts (`preamble.sh`, `progress.sh`, `readiness.sh`, `evidence-fresh.sh`,
-  `check-acceptance.sh`) so they stop prompting on every skill run. It is **fail-open**:
-  it never denies, parses the command, and emits an `allow` *only* when the command runs
-  one of those five scripts **and** contains no dangerous/exfiltration tokens
-  (`rm`, `>`/redirects, `curl`/`wget`, `sudo`, `chmod`, `$(...)`/backticks, `eval`,
-  package managers, `git push/commit/reset`, …). Mutating scripts (`resolve.sh`,
-  `tick-afk.sh`, `close-out.sh`) are **deliberately excluded** and still prompt. On any
-  parse failure or non-match it emits nothing — Claude Code's normal permission flow is
-  untouched. It widens approval for read-only orientation; it never widens it for anything
-  that writes, deletes, or reaches the network.
-- **`devrites-orient.sh` (SessionStart)** — read-only; injects the active feature's
-  `preamble.sh` digest as session context, and stays silent when no `.devrites/` workspace
-  is active. No tool approval, no writes.
-
-Delete `.claude/settings.json` (or disable the plugin) to remove both. The seeded
-settings file is never overwritten on update, so your own permission rules are safe.
+### Hooks (approval, orientation, and local guards)
+
+DevRites ships JSON-configured hooks installed by the npm flow into the
+project-local host artifacts (`.claude/settings.json` for Claude Code and
+`.codex/hooks.json` for Codex). They call `devrites-engine` behind an inline
+fail-open guard:
+
+- **`allow` (PreToolUse/Bash)** — auto-approves *only* the read-only engine
+  orientation/gate subcommands (`preamble`, `progress`, `readiness`,
+  `evidence-fresh`, `check-acceptance`) so they stop prompting on every skill run.
+  It never denies, and it emits `allow` only when the parsed command is one of those
+  subcommands and contains no dangerous/exfiltration tokens (`rm`, redirects,
+  `curl`/`wget`, `sudo`, `chmod`, command substitution, `eval`, package managers,
+  `git push/commit/reset`, etc.). Mutating subcommands (`resolve`, `tick-afk`,
+  `close-out`) are deliberately excluded and still prompt.
+- **Read-only context hooks** — `orient`, `cursor`, and `subagent-orient` inject
+  active-workspace context and stay silent when no `.devrites/` workspace is active.
+- **Local guard hooks** — `a1-guard`, `redwatch`, `stop-gate`, `source-cache-*`,
+  and `refresh-indexes` run through the engine and are fail-open by default. New
+  blocking guards are observe-first unless explicitly enforced with the documented
+  `DEVRITES_*` environment switches.
+
+Delete the project-local hook file (`.claude/settings.json` for Claude Code, or
+the DevRites-managed entries in `.codex/hooks.json` for Codex) to remove hooks.
+The seeded settings file is never overwritten on update, so your own permission
+rules are safe.
 
 ### Third-party trust
 
@@ -178,6 +179,31 @@ Code itself and, optionally and at the user's choice, on codegraph /
 graphify / Playwright MCP — each of which is invoked through its own
 documented interface, not bundled.
 
+### Agentic trust boundaries
+
+Treat every instruction-bearing file as supply chain:
+
+1. **Shipped pack** — `pack/.claude/**`, generated host artifacts, hooks, and the
+   engine are release-managed and scanned before publish.
+2. **Project-local state** — `.devrites/work/**`, learnings, principles, and
+   review artifacts are evidence, not authority. Live source and engine gates win
+   over stale state.
+3. **User extensions/overrides** — `.devrites/extensions/**` and
+   `.devrites/overrides/**` are untrusted until `devrites-engine extensions
+   validate` / `overrides validate` pass. Extensions may add checks or reviewers;
+   they must not weaken type-GO, seal/ship, AFK/HITL, security, or evidence
+   gates.
+4. **External capability configs** — MCP/tool configs are optional and
+   project-local. `/rite-doctor`/`devrites-engine doctor` reports readiness, but
+   missing tools degrade to file-system/engine gates instead of silently changing
+   workflow semantics.
+
+Never copy untrusted issue text, web content, or model output into a skill,
+agent, hook, MCP config, or generated artifact without reviewing it as executable
+instructions. Hidden unicode, prompt-injection phrasing, personal absolute paths,
+and secret-like strings are release-blocking findings unless explicitly and
+visibly justified.
+
 ### Known non-issues
 
 - **`!` injection in `/rite`** — local read of own state; safe. See above.