devrites 5.10.1 → 5.11.0

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 All notable changes to DevRites are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and DevRites adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). Releases are generated automatically by [semantic-release](https://semantic-release.gitbook.io/) from Conventional Commits on `main`.
 
+## [5.11.0](https://github.com/ViktorsBaikers/DevRites/compare/v5.10.2...v5.11.0) (2026-09-16)
+
+### Added
+
+* **installer:** add Devin CLI host generation and install support ([#79](https://github.com/ViktorsBaikers/DevRites/issues/79)) ([a94056b](https://github.com/ViktorsBaikers/DevRites/commit/a94056bc20f520537395cf5c7c075e700d5a0b26))
+
+## [5.10.2](https://github.com/ViktorsBaikers/DevRites/compare/v5.10.1...v5.10.2) (2026-09-15)
+
+### Fixed
+
+* **ci:** stop gosec false positive on secret-scan help ([ac8ef15](https://github.com/ViktorsBaikers/DevRites/commit/ac8ef1530f5121cf192fb9e60acef781b0e3fbb8))
+* **rite:** honor --parallel over leftover AFK cap ([#78](https://github.com/ViktorsBaikers/DevRites/issues/78)) ([db6c299](https://github.com/ViktorsBaikers/DevRites/commit/db6c299e24be5e1b8c5739e45542f2ef8b572e3b))
+
 ## [5.10.1](https://github.com/ViktorsBaikers/DevRites/compare/v5.10.0...v5.10.1) (2026-09-15)
 
 ### Fixed

package/README.md

@@ -4,9 +4,10 @@
 
 # DevRites
 
-DevRites is a repository-local workflow for building software with Claude Code
-or Codex. It turns a feature request into a spec, a sliced plan, working code,
-recorded proof, a release decision, and an explicit ship step.
+DevRites is a repository-local workflow for building software with Claude Code,
+Codex, omp, pi, or Devin CLI. It turns a feature request into a spec, a sliced
+plan, working code, recorded proof, a release decision, and an explicit ship
+step.
 
 The work lives under `.devrites/`, not in chat history. A later session or a
 different agent can read the same plan, decisions, state, and evidence before it
@@ -33,7 +34,7 @@ project-conventional push, tag, or PR action, and archive the workspace.
 Unattended runs may create local WIP checkpoint commits along the way, but they
 remain local unless Ship's disclosed plan includes an approved remote action.
 
-**Status:** [`v5.10.1`](https://github.com/ViktorsBaikers/DevRites/releases/tag/v5.10.1): see [`CHANGELOG.md`](CHANGELOG.md) for release notes.
+**Status:** [`v5.11.0`](https://github.com/ViktorsBaikers/DevRites/releases/tag/v5.11.0): see [`CHANGELOG.md`](CHANGELOG.md) for release notes.
 
 This is the latest published release; `main` may contain unreleased work.
 
@@ -47,8 +48,9 @@ Run this from the root of your project. Node.js 18 or later is required.
 npx devrites@latest
 ```
 
-The installer adds project-local support for Claude Code, Codex, omp, and pi.
-It does not write skills, agents, or hooks to `~/.claude`, `~/.codex`, or `~/.pi`.
+The installer adds project-local support for Claude Code, Codex, omp, pi, and
+Devin CLI. It does not write skills, agents, or hooks to `~/.claude`, `~/.codex`,
+`~/.pi`, or `~/.config/devin`.
 
 ### 2. Choose the smallest route
 
@@ -78,8 +80,8 @@ proof and next action.
 ## How the lifecycle works
 
 Claude Code supports both `/rite <verb>` and `/rite-<verb>`. Codex uses the same
-forms with `$`: `$rite <verb>` and `$rite-<verb>`. omp and pi use the Claude
-slash forms (on pi they run as prompt templates under `.pi/prompts`, with
+forms with `$`: `$rite <verb>` and `$rite-<verb>`. omp, pi, and Devin CLI use the
+Claude slash forms (on pi they run as prompt templates under `.pi/prompts`, with
 `/skill:rite-<verb>` equivalent). The menu and direct forms run the same skill.
 
 | # | Stage | Direct command | What happens |
@@ -299,7 +301,9 @@ Useful install flags:
 | `--dry-run` | Show planned file operations without changing anything. |
 | `--force` | Replace or remove foreign or customized managed files. The installer still rejects symlinks and path escapes. |
 | `--no-codex` | Skip `.agents`, `.codex`, and the Codex `AGENTS.md` block. |
+| `--no-omp` | Skip `.omp` skills and agents. |
 | `--no-pi` | Skip `.pi` skills, agents, prompt commands, and the pi `AGENTS.md` block. |
+| `--no-devin` | Skip `.devin` skills, agents, and the Devin `AGENTS.md` block. |
 | `--no-agents` | Skip hook-free native specialist profiles. |
 | `--no-skills` | Skip skills and their bundled standards. |
 | `--no-binary` | Do not keep the shared `devrites-engine` binary in a user or system bin directory. |
@@ -391,7 +395,7 @@ paths pass bounded streaming preflight before extraction. There is no unchecked
 raw, source-archive, tag, or default-branch fallback. See
 [`SECURITY.md`](SECURITY.md) for the representative bounds.
 
-## Claude Code and Codex integration
+## Host integration
 
 Claude Code receives skills under `.claude/skills/`, agents under
 `.claude/agents/`, and native root permissions merged into
@@ -405,6 +409,15 @@ only `devrites-slice-wright` is writable; every other specialist is read-only.
 Existing user content remains in place. Codex users invoke skills with `$rite`,
 `$rite-spec`, or `/skills`.
 
+Devin CLI receives the same skills under `.devin/skills/`, custom subagent
+profiles under `.devin/agents/`, and a marked guidance block in `AGENTS.md`.
+Profiles use `allowed-tools` with Devin tool names: only
+`devrites-slice-wright` keeps `edit`, `write`, and `exec`; every other
+specialist is read-only. Dispatch goes through `run_subagent` with the exact
+`devrites-<role>` profile; a missing profile stops for HITL instead of
+substituting `subagent_general`. Profiles load when a session starts, so reopen
+the project after installing.
+
 DevRites is installed through npm or the Bash bootstrap. It is not distributed
 through Claude Code or Codex plugin stores.
 
@@ -417,7 +430,8 @@ shared contracts and engineering standards.
 
 Seventeen fresh-context agent profiles ship with the pack. Claude has sixteen
 read-only roles plus the sole source/test writer role,
-`devrites-slice-wright`; Codex generates the same one-writer/sixteen-reader split.
+`devrites-slice-wright`; Codex, omp, pi, and Devin generate the same
+one-writer/sixteen-reader split.
 
 The authoritative [skills catalogue](docs/skills.md) lists every skill and
 agent. The [flow diagrams](docs/flow.md) show routing, reviewer fan-out, and

package/bin/devrites.mjs

@@ -63,6 +63,8 @@ Common flags:
   --force               Overwrite existing non-DevRites files
   --no-codex            Skip Codex support files (.agents, .codex, AGENTS.md)
   --no-omp              Skip OMP support files (.omp/skills, .omp/agents)
+  --no-pi               Skip pi support files (.pi/skills, .pi/agents, .pi/prompts)
+  --no-devin            Skip Devin CLI support files (.devin/skills, .devin/agents)
   --short-aliases=all   Also install /define /build /prove /seal
   --no-agents           Skip hook-free native specialist profiles
   --no-skills           Skip skills and bundled engineering standards

package/docs/cli.md

@@ -8,7 +8,10 @@ cross-host primitives; it never dispatches an agent or grades reviewer prose.
 ## Command surface
 
 `devrites-engine help` lists the exhaustive operational surface. Standard
-`help`, `-h`, `--help`, `version`, and `--version` forms also remain supported:
+`help`, `-h`, `--help`, `version`, and `--version` forms also remain supported.
+Each operational command and subcommand accepts `-h` / `--help` and prints that
+command's usage to stdout (exit 0) without requiring a workspace. Missing
+required arguments still print usage to stderr and exit 2.
 
 ```text
 devrites-engine install [flags]

package/docs/command-map.md

@@ -3,9 +3,9 @@
 This page lists every shipped skill and agent, including its triggers, inputs,
 outputs, and interactions.
 
-DevRites ships through npm (`npx devrites ...`). Claude Code and Codex support
-comes from generated host artifacts copied by the npm installer; DevRites is not
-distributed as a Claude or Codex plugin.
+DevRites ships through npm (`npx devrites ...`). Claude Code, Codex, omp, pi,
+and Devin CLI support comes from generated host artifacts copied by the npm
+installer; DevRites is not distributed as a Claude or Codex plugin.
 
 - **Workflow diagram** (top-level flow) → [`flow.md`](flow.md).
 - **Architecture rationale** → [`architecture.md`](architecture.md).
@@ -49,14 +49,16 @@ The Go surface is intentionally closed and deterministic:
 
 `devrites-engine help` exhaustively lists the operational engine commands.
 Standard `help`, `-h`, `--help`, `version`, and `--version` forms remain
-available; there are no legacy operational aliases. `check candidate <slug>`
+available; each operational command and subcommand also accepts `-h` / `--help`.
+There are no legacy operational aliases. `check candidate <slug>`
 prints exactly
 `candidate-sha256: <64 lowercase hex>` and `candidate-files: <row count>` on a
 pass; usage/root errors exit `2` and candidate blocks exit `3`. There are no
 semantic readiness commands, reviewer-prose parsers, capability-ledger engine,
 or compatibility telemetry.
 
-Claude Code and Codex own native dispatch. Installed skills and exact agents
+Claude Code, Codex, omp, pi, and Devin own native dispatch. Installed skills
+and exact agents
 own semantic readiness, traceability, acceptance/evidence quality, doubt,
 review reconciliation, test-quality assessment, capability interpretation,
 workspace compatibility, and

package/docs/engine/commands.md

@@ -27,11 +27,13 @@ workflow strategy.
 | `open-visual <path-or-name> [--slug <slug>] [--no-open]` | Resolve a local visual HTML file, optionally open it in the OS browser, warn if the sibling outline is missing or inventory ids are absent from HTML, and print agent path tips. No network. |
 | `version` | Print the engine version. |
 
-`help`, `-h`, and `--help` print this operational inventory. `version` and
-`--version` print the binary version. Other unlisted command forms are rejected
-as unknown; the engine has no compatibility aliases or tombstones. The
-`add`/`upgrade`/`remove` conveniences belong only to the `npx devrites` adapter,
-not to the engine command namespace.
+`help`, `-h`, and `--help` print this operational inventory. Each operational
+command and subcommand also accepts `-h` / `--help` and prints that command's
+usage to stdout without requiring a workspace. `version` and `--version` print
+the binary version. Other unlisted command forms are rejected as unknown; the
+engine has no compatibility aliases or tombstones. The `add`/`upgrade`/`remove`
+conveniences belong only to the `npx devrites` adapter, not to the engine
+command namespace.
 
 ## Check boundary
 

package/docs/orchestration.md

@@ -128,8 +128,11 @@ preserved. No ad hoc copy/cherry-pick/merge occurs from the read-only root.
 
 Isolation does not authorize same-worktree throughput. Parallel writers are allowed
 **only** under the `/rite-build` batch path when path-disjoint eligibility, abort-batch,
-and a control `parallel-lease.md` apply. `--parallel N` (or the AFK sentinel
-`max_parallel`, default cap 10 under `/rite-autocomplete`) is a **cap**: each round runs
+and a control `parallel-lease.md` apply. `--parallel N` on `/rite-autocomplete`
+or `/rite-build` is the batch cap for that run and wins over leftover sentinel
+`max_parallel`; `/rite-autocomplete --parallel N` also writes or replaces only
+that field. Absent the flag, the sentinel (default cap 10 under
+`/rite-autocomplete`) is a **cap**: each round runs
 the largest eligible set, recomputes after every completed round, and repeats until no
 pending slice remains; a one-slice round is serial for that round only (see
 [`parallel-batch.md`](../pack/.claude/skills/rite-build/reference/parallel-batch.md)).

package/docs/skills.md

@@ -12,11 +12,16 @@ regenerate missing payload components before installation; the engine validates
 and copies them but never generates them. The installer copies Codex skill
 mirrors to `.agents/skills`, mirrors the rules under
 `.agents/skills/devrites-lib/reference/standards`, installs `.codex/agents`, and
-merges native Codex configuration and guidance.
+merges native Codex configuration and guidance. Devin CLI receives skills under
+`.devin/skills`, custom subagent profiles under `.devin/agents`, and a marked
+guidance block in `AGENTS.md`.
 
 The root and reviewers never write source. Claude enforces the root boundary in
 plan mode. Codex uses a workspace-capable root so its sole write-capable
-slice-wright can execute, while all other specialists remain read-only. The
+slice-wright can execute, while all other specialists remain read-only. On
+Devin, `allowed-tools` gives only `devrites-slice-wright` `edit`, `write`, and
+`exec`; a missing required profile stops for HITL instead of substituting a
+generic profile. The
 installed `devrites-engine` owns strict candidate identity, deterministic checks,
 exact proof/review/seal bindings,
 atomic state, secret scanning, and installation diagnostics. Native/root policy
@@ -28,8 +33,9 @@ bootstraps or proxies the engine directly (see [`cli.md`](cli.md)).
 
 Each phase skill names the specialist the host should run when one is needed.
 Codex loads those project agents from `.codex/agents`, then waits for and
-reconciles their normal results. The engine has no dispatch protocol; native
-hosts follow the shared, host-neutral
+reconciles their normal results. Devin loads the same profiles from
+`.devin/agents` as `run_subagent` profiles. The engine has no dispatch protocol;
+native hosts follow the shared, host-neutral
 [`parallel-dispatch.md`](../pack/.claude/skills/devrites-lib/reference/parallel-dispatch.md)
 contract when a rite names parallel reviewers.
 

package/docs/usage.md

@@ -413,7 +413,9 @@ remaining from the pending-slice count and ignores leftover remaining and
 - **`.devrites/AFK` is per-developer, not per-repo**: gitignore it (or commit
   it deliberately if the team agrees on AFK defaults). The sentinel is
   read-only config: it toggles your local session mode and sets the initial
-  `max_slices` budget; nothing else. The mutable remaining-slice count lives
+  `max_slices` budget. `/rite-autocomplete --parallel N` is the one exception:
+  it writes or replaces only `max_parallel: N` so a leftover `1` cannot keep
+  later ticks serial. The mutable remaining-slice count lives
   in `state.md` (`AFK slices remaining`), never in the sentinel. The root
   charges it once with each green pending → built transition and stops before
   another dispatch at zero; malformed values fail closed.

package/engine/commands.go

@@ -25,6 +25,9 @@ const (
 // workspace or Git state, which must never fall back after an unsafe root
 // selection.
 func rootModeFor(command string, args []string) rootMode {
+	if hasHelpFlag(args) || (len(args) > 0 && isHelpToken(args[0])) {
+		return rootUnused
+	}
 	subcommand := firstRootOperand(args)
 	switch command {
 	case "secret-scan", "open-visual":

package/engine/help.go

@@ -0,0 +1,190 @@
+package main
+
+import (
+	"fmt"
+	"io"
+	"strings"
+
+	"github.com/devrites/devrites/internal/parallel"
+)
+
+const (
+	checkUsage = `usage: devrites-engine check <candidate|readiness|seal|path-disjoint|task-graph|skill-trust|indexes> ...
+
+  check candidate <slug>
+  check readiness <slug>
+  check readiness --emit-binding <slug>
+  check seal <slug>
+  check path-disjoint [--root <dir>] [<json-file>|-]
+  check task-graph <slug>
+  check skill-trust <path>
+  check indexes [--root <dir>]
+`
+
+	stateUsage = `usage: devrites-engine state <resolve|merge-manifest|close> ...
+
+  state resolve <qid> "<answer>"
+  state resolve --drop <qid> ["<reason>"]
+  state resolve --batch <file>
+  state merge-manifest <slug> [<predecessor>...]
+  state close <slug>
+`
+
+	observeUsage = `usage: devrites-engine observe summary <slug> | observe slice <slug> <SLICE-ID>
+
+  observe summary [slug]
+  observe slice <slug> <SLICE-ID>
+`
+
+	orientUsage  = "usage: devrites-engine orient [slug]"
+	migrateUsage = "usage: devrites-engine migrate <slug> [--dry-run] [--answer id=choice]"
+	// scanCmdUsage is help text for `secret-scan`. The identifier must not
+	// contain "secret": gosec G101 treats secret* string consts as credentials.
+	scanCmdUsage        = "usage: devrites-engine secret-scan [--staged] [--stdin] [slug]"
+	openVisualUsage     = "usage: devrites-engine open-visual <path-or-name> [--slug <slug>] [--no-open]"
+	versionUsage        = "usage: devrites-engine version"
+	candidateUsage      = "usage: devrites-engine check candidate <slug>"
+	readinessUsage      = "usage: devrites-engine check readiness <slug>\n       devrites-engine check readiness --emit-binding <slug>"
+	sealUsage           = "usage: devrites-engine check seal <slug>"
+	taskGraphUsage      = "usage: devrites-engine check task-graph <slug>"
+	skillTrustUsage     = "usage: devrites-engine check skill-trust <path>"
+	indexesUsage        = "usage: devrites-engine check indexes [--root <dir>]"
+	resolveUsage        = `usage: devrites-engine state resolve <qid> "<answer>"  |  state resolve --drop <qid> ["<reason>"]  |  state resolve --batch <file>`
+	mergeManifestUsage  = "usage: devrites-engine state merge-manifest <slug> [<predecessor>...]"
+	closeUsage          = "usage: devrites-engine state close <slug>"
+	observeSliceUsage   = "usage: devrites-engine observe slice <slug> <SLICE-ID>"
+	observeSummaryUsage = "usage: devrites-engine observe summary [slug]"
+)
+
+func isHelpFlag(arg string) bool {
+	switch arg {
+	case "-h", "-help", "--help":
+		return true
+	default:
+		return false
+	}
+}
+
+func isHelpToken(arg string) bool {
+	return isHelpFlag(arg) || arg == "help"
+}
+
+func hasHelpFlag(args []string) bool {
+	for _, arg := range args {
+		if isHelpFlag(arg) {
+			return true
+		}
+	}
+	return false
+}
+
+func shouldPrintHelp(args []string) bool {
+	if len(args) == 0 {
+		return false
+	}
+	if isHelpToken(args[0]) {
+		return true
+	}
+	if hasHelpFlag(args) {
+		return true
+	}
+	switch args[0] {
+	case "check", "state", "observe", "parallel":
+		return len(args) >= 2 && args[1] == "help"
+	default:
+		return false
+	}
+}
+
+func firstNonHelp(args []string) string {
+	for _, arg := range args {
+		if isHelpToken(arg) || strings.HasPrefix(arg, "-") {
+			continue
+		}
+		return arg
+	}
+	return ""
+}
+
+func writeHelp(stdout io.Writer, text string) int {
+	fmt.Fprintln(stdout, strings.TrimRight(text, "\n"))
+	return exitOK
+}
+
+// commandHelp returns the usage text for a help request on a known command.
+// ok is false when args are not a help request, or the command is unknown so
+// the existing unknown-command path should run.
+func commandHelp(args []string) (string, bool) {
+	if !shouldPrintHelp(args) {
+		return "", false
+	}
+	switch args[0] {
+	case "-h", "-help", "--help", "help":
+		return usage, true
+	case "check":
+		return helpCheck(args[1:]), true
+	case "state":
+		return helpState(args[1:]), true
+	case "observe":
+		return helpObserve(args[1:]), true
+	case "orient":
+		return orientUsage, true
+	case "parallel":
+		return parallel.CommandUsage(firstNonHelp(args[1:])), true
+	case "migrate":
+		return migrateUsage, true
+	case "secret-scan":
+		return scanCmdUsage, true
+	case "open-visual":
+		return openVisualUsage, true
+	case "version", "--version":
+		return versionUsage, true
+	default:
+		return "", false
+	}
+}
+
+func helpCheck(rest []string) string {
+	switch firstNonHelp(rest) {
+	case "candidate":
+		return candidateUsage
+	case "readiness":
+		return readinessUsage
+	case "seal":
+		return sealUsage
+	case "path-disjoint":
+		return parallel.CommandUsage("path-disjoint")
+	case "task-graph":
+		return taskGraphUsage
+	case "skill-trust":
+		return skillTrustUsage
+	case "indexes":
+		return indexesUsage
+	default:
+		return checkUsage
+	}
+}
+
+func helpState(rest []string) string {
+	switch firstNonHelp(rest) {
+	case "resolve":
+		return resolveUsage
+	case "merge-manifest":
+		return mergeManifestUsage
+	case "close":
+		return closeUsage
+	default:
+		return stateUsage
+	}
+}
+
+func helpObserve(rest []string) string {
+	switch firstNonHelp(rest) {
+	case "summary":
+		return observeSummaryUsage
+	case "slice":
+		return observeSliceUsage
+	default:
+		return observeUsage
+	}
+}

package/engine/help_test.go

@@ -0,0 +1,98 @@
+package main
+
+import (
+	"bytes"
+	"strings"
+	"testing"
+)
+
+func TestCommandHelp(t *testing.T) {
+	t.Setenv("DEVRITES_ROOT", "")
+	tests := []struct {
+		args []string
+		want string
+	}{
+		{args: []string{"--help"}, want: "Usage:"},
+		{args: []string{"-h"}, want: "Usage:"},
+		{args: []string{"help"}, want: "Usage:"},
+		{args: []string{"check", "--help"}, want: "check candidate <slug>"},
+		{args: []string{"check", "help"}, want: "check <candidate|readiness|seal|path-disjoint|task-graph|skill-trust|indexes>"},
+		{args: []string{"check", "candidate", "--help"}, want: "check candidate <slug>"},
+		{args: []string{"check", "readiness", "-h"}, want: "check readiness --emit-binding <slug>"},
+		{args: []string{"check", "seal", "--help"}, want: "check seal <slug>"},
+		{args: []string{"check", "path-disjoint", "--help"}, want: "check path-disjoint"},
+		{args: []string{"check", "task-graph", "--help"}, want: "check task-graph <slug>"},
+		{args: []string{"check", "skill-trust", "--help"}, want: "check skill-trust <path>"},
+		{args: []string{"check", "indexes", "--help"}, want: "check indexes [--root <dir>]"},
+		{args: []string{"state", "--help"}, want: "state <resolve|merge-manifest|close>"},
+		{args: []string{"state", "-h"}, want: "state resolve"},
+		{args: []string{"state", "help"}, want: "state close <slug>"},
+		{args: []string{"state", "resolve", "--help"}, want: `state resolve <qid> "<answer>"`},
+		{args: []string{"state", "merge-manifest", "--help"}, want: "state merge-manifest <slug>"},
+		{args: []string{"state", "close", "--help"}, want: "state close <slug>"},
+		{args: []string{"parallel", "--help"}, want: "usage: parallel <subcommand>"},
+		{args: []string{"parallel", "create", "--help"}, want: "usage: parallel create --root --slug --batch --base --json"},
+		{args: []string{"parallel", "create", "-h"}, want: "parallel create"},
+		{args: []string{"parallel", "select", "--help"}, want: "parallel select --cap"},
+		{args: []string{"observe", "--help"}, want: "observe summary"},
+		{args: []string{"observe", "summary", "--help"}, want: "observe summary"},
+		{args: []string{"observe", "slice", "--help"}, want: "observe slice <slug> <SLICE-ID>"},
+		{args: []string{"orient", "--help"}, want: "orient [slug]"},
+		{args: []string{"migrate", "--help"}, want: "migrate <slug>"},
+		{args: []string{"secret-scan", "--help"}, want: "secret-scan [--staged] [--stdin]"},
+		{args: []string{"open-visual", "--help"}, want: "open-visual <path-or-name>"},
+		{args: []string{"version", "--help"}, want: "devrites-engine version"},
+		{args: []string{"install", "--help"}, want: "usage: devrites-engine install"},
+		{args: []string{"update", "--help"}, want: "usage: devrites-engine update"},
+		{args: []string{"uninstall", "--help"}, want: "usage: devrites-engine uninstall"},
+	}
+	for _, test := range tests {
+		t.Run(strings.Join(test.args, " "), func(t *testing.T) {
+			var stdout, stderr bytes.Buffer
+			code := run(test.args, strings.NewReader(""), &stdout, &stderr)
+			if code != exitOK {
+				t.Fatalf("run(%q) = %d, want %d; stdout=%q stderr=%q", test.args, code, exitOK, stdout.String(), stderr.String())
+			}
+			if stderr.Len() != 0 {
+				t.Fatalf("run(%q) wrote stderr %q", test.args, stderr.String())
+			}
+			if !strings.Contains(stdout.String(), test.want) {
+				t.Fatalf("run(%q) stdout=%q, want %q", test.args, stdout.String(), test.want)
+			}
+			if strings.Contains(stdout.String(), "unknown") {
+				t.Fatalf("run(%q) treated help as unknown: %q", test.args, stdout.String())
+			}
+		})
+	}
+}
+
+func TestCommandHelpDoesNotRequireWorkspace(t *testing.T) {
+	t.Setenv("DEVRITES_ROOT", "")
+	for _, args := range [][]string{
+		{"state", "--help"},
+		{"check", "candidate", "--help"},
+		{"orient", "--help"},
+		{"migrate", "--help"},
+		{"parallel", "create", "--help"},
+	} {
+		var stdout, stderr bytes.Buffer
+		code := run(args, strings.NewReader(""), &stdout, &stderr)
+		if code != exitOK || stderr.Len() != 0 || !strings.Contains(stdout.String(), "usage:") {
+			t.Fatalf("run(%q) code=%d stdout=%q stderr=%q", args, code, stdout.String(), stderr.String())
+		}
+		if strings.Contains(stdout.String()+stderr.String(), "root selection") {
+			t.Fatalf("run(%q) required a workspace for help", args)
+		}
+	}
+}
+
+func TestUnknownCommandHelpStillUnknown(t *testing.T) {
+	var stdout, stderr bytes.Buffer
+	args := []string{"frobnicate", "--help"}
+	if code := run(args, strings.NewReader(""), &stdout, &stderr); code != exitUsage {
+		t.Fatalf("run(%q) = %d, want %d", args, code, exitUsage)
+	}
+	if !strings.Contains(stderr.String(), `unknown command "frobnicate"`) {
+		t.Fatalf("stderr = %q, want unknown-command diagnostic", stderr.String())
+	}
+}

package/engine/internal/devritespaths/paths.go

@@ -17,10 +17,12 @@ const (
 	CodexSkillsTarget     = ".agents/skills"
 	OmpSkillsTarget       = ".omp/skills"
 	PiSkillsTarget        = ".pi/skills"
+	DevinSkillsTarget     = ".devin/skills"
 	ClaudeAgentsTarget    = ".claude/agents"
 	CodexAgentsTarget     = ".codex/agents"
 	OmpAgentsTarget       = ".omp/agents"
 	PiAgentsTarget        = ".pi/agents"
+	DevinAgentsTarget     = ".devin/agents"
 	PiPromptsTarget       = ".pi/prompts"
 	ClaudeWorkflowsTarget = ".claude/workflows"