devrites 6.0.4 → 6.1.1

package/pack/generated/pi/skills/rite-ship/reference/close-out.md

@@ -51,8 +51,9 @@ records move intact.
 Before restoring an archive, verify its identity, released cursor form and declared
 workspace schema, that the live destination is absent, and that ACTIVE is empty or
 already names this slug. A collision or another active feature stops restoration;
-do not replace its workspace or cursor. Supported released cursor forms remain valid:
-age or encoding alone never requires normalization (see
+do not replace its workspace or cursor. A cursor with no `schema` row predates the
+engine schema and needs a human-approved `devrites-engine migrate <slug>` before the
+engine accepts it; beyond that, age or encoding alone never requires normalization (see
 [workspace-artifact-schema.md](../../devrites-lib/reference/workspace-artifact-schema.md)).
 An unsupported declared schema stops restoration: record the observed version,
 installed engine's recovery diagnostic and pending normalization owner. Do not guess

package/pack/generated/pi/skills/rite-spec/SKILL.md

@@ -6,7 +6,7 @@ user-invocable: true
 ---
 
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/elicitation.md","devrites-lib/reference/standards/agents.md","rite-spec/reference/investigation.md","rite-spec/reference/question-protocol.md","rite-spec/reference/spec-template.md","rite-spec/reference/spec-checklists.md","rite-spec/reference/state-workspace.md","rite-spec/reference/acceptance-criteria.md","rite-spec/reference/interview-patterns.md","rite-spec/reference/ai-spec-template.md","rite-spec/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"edge-cases":["devrites-lib/reference/standards/edge-case-trace.md"],"frontend":["rite-build/reference/frontend-trigger.md"],"grammar":["devrites-lib/reference/standards/spec-grammar.md"],"principles":["devrites-lib/reference/standards/principles.md"],"references":["rite-spec/reference/references-intake.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md"],"workspaceByRole":{"evidence-scout":["brief.md","spec.md","state.md","questions.md"]}} -->
-> Read-set manifest: `devrites-engine context <slug> --phase spec` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --phase spec` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
 # /rite-spec: investigate and write the spec
@@ -58,7 +58,10 @@ load a routed standard to discover required behavior, not to prescribe implement
    **Completion:** it includes both, and every ask is listed. **Failing case:** "CSV export
    and an email digest" yields a CSV-only spec; the digest is neither Non-goal nor question.
 1a. **Dedupe.** Search local issues/PRDs, work, and archive. On a close match ask
-   extend/adopt/new, then record the choice; otherwise continue silently.
+   extend/adopt/new, then record the choice; otherwise continue silently. A slug handed
+   off by `/rite-adopt` extends that adopted workspace without asking. Adopting a
+   pressure-test provisional slug turns each `Hold:` in its `investigation-map.md` into an
+   open `gate: blocking` question in `questions.md`.
    A recorded [feature-sequence continuation](../rite-plan/reference/slicing.md#continuation-workspaces)
    is a **new** workspace (`<parent>-2`): carry the parent slug and position into
    `brief.md`, read the parent artifacts as design input, and do not route to

package/pack/generated/pi/skills/rite-spec/reference/state-workspace.md

@@ -131,7 +131,7 @@ None.
 | slice_mode | none |
 | risk | none |
 | spec_gate | <passed <iso>; marker sweep: <n> files, <k> hits, <d> discarded — absent until /rite-spec passes> |
-| next_action | <single command + reason, or terminal: none — technical recovery exhausted for an unchanged causal fingerprint> |
+| next_action | <single command + reason; parked recovery names the invoking command> |
 | return_phase | <originating later phase; clarification or agent-owned technical backtracking only> |
 | return_next_action | <saved originating command> |
 | schema | 4 |
@@ -154,7 +154,7 @@ Before an active caller moves backward, it copies its current phase and
 non-empty action into the two return rows. Nested Plan, Vet, Build, and proof
 work preserves that valid cursor. Once the prerequisite chain is green, the
 controlling caller restores the saved phase/action and removes both rows in one
-rewrite. A real HITL or exhausted-recovery stop retains the cursor for cold
+rewrite. A real HITL or parked-recovery stop retains the cursor for cold
 resume. Never overwrite an existing valid return cursor, and preserve every
 unrelated Markdown byte. `/rite-clarify` applies its stricter native cursor protocol in `/rite-clarify`.
 

package/pack/generated/pi/skills/rite-status/SKILL.md

@@ -6,7 +6,7 @@ user-invocable: true
 disable-model-invocation: true
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"workspace":["state.md","tasks.md","questions.md"]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-status` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --skill rite-status` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-status: active feature status
 

package/pack/generated/pi/skills/rite-temper/SKILL.md

@@ -6,7 +6,7 @@ user-invocable: true
 ---
 
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/agents.md","rite-temper/reference/significance.md","rite-temper/reference/scope-modes.md","rite-temper/reference/review-dimensions.md","rite-temper/reference/strategy-template.md","rite-temper/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"yagni":["devrites-lib/reference/standards/patterns.md","devrites-lib/reference/standards/coding-style.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","strategy.md","design-brief.md"],"workspaceByRole":{"strategy-reviewer":["brief.md","spec.md","decision-coverage.md","decisions.md","strategy.md","state.md"]}} -->
-> Read-set manifest: `devrites-engine context <slug> --phase temper` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --phase temper` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
 # /rite-temper: review scope and risk before planning
@@ -120,7 +120,7 @@ the spec applicability map triggers that risk family.
    Unapproved irreversible choices and unresolved growth qids set `Awaiting human`.
    Objective below-bar findings continue correction.
 7. **Adversarial verification loop:** ask the exact
-   [`devrites-strategy-reviewer`](.pi/agents/devrites-strategy-reviewer.md)
+   [`devrites-strategy-reviewer`](../../agents/devrites-strategy-reviewer.md)
    through the native fresh-context contract in
    [`agents.md`](../devrites-lib/reference/standards/agents.md), with **only** its `--role strategy-reviewer` read-set
    (hardened spec, `strategy.md`, claim-check artifacts) + rubric, no authoring reasoning. Fold technical findings into one correction;

package/pack/generated/pi/skills/rite-temper/reference/significance.md

@@ -15,6 +15,8 @@ so they agree on when it fires.
   module/service boundaries or has many dependents.
 - **Greenfield / ambiguous scope:** a new surface with no existing seam to follow, or a spec
   whose "right size" is genuinely open (multiple defensible scopes).
+- **Low detectability:** no existing test, gate, or monitor would show a wrong result
+  in the affected area (no suite there, silent data change), so a mistake ships unseen.
 - **Multi-slice / multi-day:** the work decomposes into several slices (large enough that a
   wrong scope call is expensive to unwind).
 - **The user asked:** "think bigger", "is this ambitious enough", "scope check", "pre-mortem",

package/pack/generated/pi/skills/rite-upgrade/SKILL.md

@@ -6,7 +6,7 @@ user-invocable: true
 disable-model-invocation: true
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/agents.md"],"triggers":{"reslice":["rite-plan/reference/slicing.md"]},"workspace":["state.md","spec.md","plan.md","tasks.md","decisions.md","questions.md","evidence.md","touched-files.md","review.md","seal.md","polish-report.md","browser-evidence.md"],"workspaceByRole":{"upgrade-planner":["state.md","spec.md","plan.md","tasks.md","decisions.md","questions.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-upgrade` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --skill rite-upgrade` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-upgrade: reconcile a released workspace safely
 
@@ -25,7 +25,9 @@ references, and only current phase contracts needed for the observed gap.
   or Git. It observes, admits, invokes current owners, and re-audits only.
 - Recognize only released workspace forms: `.devrites/work/<slug>/state.md` with v1/v2
   bullet fields (`- Phase:`, `- Next step:`, optional `- qid:`) or the v3 cursor table.
-  Preserve its encoding; only its owning rite may change fields. Never create aliases,
+  A cursor with no `schema` row (every v1/v2 form, older v3 tables) is refused by the
+  engine until the human runs the `migrate` command its refusal names (step 0). Otherwise
+  preserve its encoding; only its owning rite may change fields. Never create aliases,
   journals, telemetry, version markers, or an engine migrator.
 - Older provenance, cursor form, or pack version alone is never a defect. A repair requires
   a current rule, exact workspace evidence, affected gate, owning rite, exact paths, and

package/pack/generated/pi/skills/rite-vet/SKILL.md

@@ -5,8 +5,8 @@ argument-hint: "[slug] [--cross-model] [--full]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/gates.md","rite-vet/reference/review-axes.md","rite-vet/reference/artifacts.md","rite-vet/reference/depth.md","rite-vet/reference/eng-lenses.md","rite-vet/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"assumption-delta":["devrites-lib/reference/standards/assumption-checkpoints.md"],"cross-model":["rite-vet/reference/cross-model.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"grammar":["devrites-lib/reference/standards/spec-grammar.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"performance":["devrites-lib/reference/standards/performance.md"],"principles":["devrites-lib/reference/standards/principles.md"],"reslice":["devrites-lib/reference/standards/acceptance-preserving-reslice.md"],"testing":["devrites-lib/reference/standards/testing.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"],"yagni":["devrites-lib/reference/standards/patterns.md","devrites-lib/reference/standards/coding-style.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md"],"workspaceByRole":{"devex-reviewer":["spec.md","plan.md","tasks.md","state.md"],"plan-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","decision-coverage.md","architecture.md","decisions.md","state.md"],"strategy-reviewer":["brief.md","spec.md","plan.md","decisions.md","decision-coverage.md","strategy.md","state.md"]}} -->
-> Read-set manifest: `devrites-engine context <slug> --phase vet` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/gates.md","rite-vet/reference/review-axes.md","rite-vet/reference/artifacts.md","rite-vet/reference/depth.md","rite-vet/reference/eng-lenses.md","rite-vet/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"assumption-delta":["devrites-lib/reference/standards/assumption-checkpoints.md"],"cross-model":["rite-vet/reference/cross-model.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"grammar":["devrites-lib/reference/standards/spec-grammar.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"performance":["devrites-lib/reference/standards/performance.md"],"principles":["devrites-lib/reference/standards/principles.md"],"reslice":["devrites-lib/reference/standards/acceptance-preserving-reslice.md"],"testing":["devrites-lib/reference/standards/testing.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"],"yagni":["devrites-lib/reference/standards/patterns.md","devrites-lib/reference/standards/coding-style.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","strategy.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md"],"workspaceByRole":{"devex-reviewer":["spec.md","plan.md","tasks.md","decisions.md","state.md"],"plan-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","decision-coverage.md","architecture.md","decisions.md","state.md"],"strategy-reviewer":["brief.md","spec.md","plan.md","decisions.md","decision-coverage.md","strategy.md","state.md"]}} -->
+> Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --phase vet` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
 # /rite-vet: review the plan before build
@@ -160,7 +160,8 @@ plan declares a root-authored executable workflow file, read
    editing intent/decision/assumption/question owners, re-scan affected coverage,
    assumptions, uncertainty, and gates. Keep state non-READY. Every scenario and
    criterion needs positive, discriminating proof; every slice must be one-pass
-   implementable; developer plans need a predicted scorecard. Durable commands
+   implementable; developer plans (trigger `devex`) write the devex reviewer's
+   predicted scorecard to `devex.md`. Durable commands
    are portable repository commands, not host wrappers — resolve them with
    `devrites-engine detect commands` (Makefile/package.json/manifests, no
    execution) and cite the resolved text verbatim; an `unresolved` slot means

package/pack/generated/pi/skills/rite-vet/reference/artifacts.md

@@ -68,7 +68,7 @@ Suppressed (confidence ≤4, unverified): <count — one line each>
 ## 6. Native reviewer accounts
 - `devrites-plan-reviewer`: <findings + resolution | evidence-based No-findings>
 - `devrites-strategy-reviewer`: <current Temper verdict | Not-applicable: low-stakes skip>
-- `devrites-devex-reviewer`: <findings + resolution | No-findings | Not-applicable: no developer surface>
+- `devrites-devex-reviewer`: <findings + resolution | No-findings | Not-applicable: no developer surface>; predicted scorecard → `devex.md`
 - Recheck: <not-needed | one narrow recheck and result>
 - Cross-model (if --cross-model): <overlap / unique findings — informational until approved>
 - Final: floor = <band>; unresolved → <none | blocking qid>

package/pack/generated/pi/skills/rite-watch-pr/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[PR number|PR URL|blank for current branch]"
 user-invocable: true
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/loop-operations.md"],"triggers":{"security":["devrites-lib/reference/standards/security.md"]},"workspace":[]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-watch-pr` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --skill rite-watch-pr` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-watch-pr: read-only PR and CI observation
 

package/pack/generated/pi/skills/rite-zoom-out/SKILL.md

@@ -6,7 +6,7 @@ user-invocable: true
 disable-model-invocation: true
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/tooling.md"],"workspace":["spec.md","plan.md","decisions.md","state.md"]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-zoom-out` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --skill rite-zoom-out` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-zoom-out: step up one abstraction layer
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devrites",
-  "version": "6.0.4",
+  "version": "6.1.1",
   "description": "DevRites: a disciplined senior-engineer workflow pack for Claude Code, Codex, omp, pi, and Devin CLI",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://github.com/ViktorsBaikers/DevRites#readme",
@@ -32,7 +32,8 @@
     "bin/",
     "engine/",
     "!engine/tests/",
-    "!engine/testdata/",
+    "!engine/**/testdata/",
+    "!engine/**/*_test.go",
     "pack/",
     "scripts/build-host-artifacts.sh",
     "scripts/codex-generate.sh",

package/scripts/build-host-artifacts.sh

@@ -64,6 +64,13 @@ copy_tree() {
   cp -R "$_src" "$_dest"
 }
 
+# devrites-engine context defaults to .claude/skills; each host's bundles must
+# come from its own installed tree, so every call (even one wrapped across
+# lines) in that host's Markdown names it. $1 rendered tree, $2 skills root.
+pin_context_skills_root() {
+  find "$1" -type f -name '*.md' -exec perl -0pi -e 's#devrites-engine(\s+)context(?!\s+--skills-root)(?=\s+[<\[-])#devrites-engine${1}context --skills-root '"$2"'#g' {} +
+}
+
 render_codex_skill_tree() {
   _sd="$1"
   _dest="$2"
@@ -92,6 +99,7 @@ render_codex_skill_tree() {
       ;;
     esac
   done < <(find "$_sd" -type f)
+  pin_context_skills_root "$_dest" .agents/skills
 }
 
 render_omp_skill_tree() {
@@ -105,15 +113,18 @@ render_omp_skill_tree() {
     case "$_r" in
     SKILL.md)
       gen_omp_skill_file "$f" "$_out"
+      omp_rewrite_skill_refs "$_out" "$(basename "$_dest")/$_r"
       ;;
     *.md)
       gen_omp_markdown_file "$f" "$_out"
+      omp_rewrite_skill_refs "$_out" "$(basename "$_dest")/$_r"
       ;;
     *)
       cp "$f" "$_out"
       ;;
     esac
   done < <(find "$_sd" -type f)
+  pin_context_skills_root "$_dest" .omp/skills
 }
 
 render_pi_skill_tree() {
@@ -136,6 +147,7 @@ render_pi_skill_tree() {
       ;;
     esac
   done < <(find "$_sd" -type f)
+  pin_context_skills_root "$_dest" .pi/skills
 }
 
 render_devin_skill_tree() {
@@ -158,6 +170,7 @@ render_devin_skill_tree() {
       ;;
     esac
   done < <(find "$_sd" -type f)
+  pin_context_skills_root "$_dest" .devin/skills
 }
 
 mkdir -p "$OUT_ROOT/claude" "$OUT_ROOT/codex" "$OUT_ROOT/omp" "$OUT_ROOT/pi" "$OUT_ROOT/devin"

package/scripts/codex-generate.sh

@@ -20,10 +20,12 @@ gen_codex_markdown_file() {
     -e 's#\.claude/skills/#.agents/skills/#g' \
     -e 's#\.claude/agents/([A-Za-z0-9_-]+)\.md#.codex/agents/\1.toml#g' \
     -e 's#\.claude/agents/#.codex/agents/#g' \
+    -e 's#\]\(((\.\./)+)agents/([A-Za-z0-9_-]+)\.md#](\1../.codex/agents/\3.toml#g' \
     -e 's#(\.\./)+agents/([A-Za-z0-9_-]+)\.md#.codex/agents/\2.toml#g' \
     -e 's#\.codex/agents/([A-Za-z0-9_-]+)\.md#.codex/agents/\1.toml#g' \
     -e 's#Host mapping: Claude Code uses `Agent` \(`Task` is its legacy alias\); Codex uses#Host mapping: Codex fresh-context dispatch uses#g' \
     -e 's#`Agent` call#`spawn_agent` call#g' \
+    -e 's#^Claude: N concurrent Task wrights \(`acceptEdits`, cwd=worktree\)\. Codex: require#Codex: require#' \
     -e 's#Task breakdown#Work-item breakdown#g' \
     -e 's#(^|[^A-Za-z0-9_])Task([^A-Za-z0-9_]|$)#\1spawn_agent\2#g' \
     -e 's#dispatch `devrites-source-driven`#invoke `devrites-source-driven`#g' \
@@ -77,7 +79,9 @@ gen_codex_agent() {
       echo "gen_codex_agent: $(basename "$_src") body contains ''' (unrepresentable in a TOML literal string)" >&2
       return 1
     fi
-    cat "$_body_codex"
+    # Agent instructions have no file base and Codex has no .codex/skills;
+    # address skill files by their installed project path.
+    sed -E 's#\]\((\.\./)+skills/#](.agents/skills/#g' "$_body_codex"
     printf "\n%s\n" "'''"
   } > "$_out"
 }

package/scripts/devin-generate.sh

@@ -24,7 +24,7 @@ gen_devin_markdown_file() {
     -e 's#\.claude/skills/#.devin/skills/#g' \
     -e 's#\.claude/agents/([A-Za-z0-9_-]+)\.md#.devin/agents/\1.md#g' \
     -e 's#\.claude/agents/#.devin/agents/#g' \
-    -e 's#(\.\./)+agents/([A-Za-z0-9_-]+)\.md#.devin/agents/\2.md#g' \
+    -e 's#(^|[^(./])(\.\./)+agents/([A-Za-z0-9_-]+)\.md#\1.devin/agents/\3.md#g' \
     -e 's#\.agents/skills/devrites-lib/scripts/#.devin/skills/devrites-lib/scripts/#g' \
     -e 's#\.agents/skills/#.devin/skills/#g' \
     -e 's#\.codex/skills/devrites-lib/scripts/#.devin/skills/devrites-lib/scripts/#g' \
@@ -50,7 +50,8 @@ gen_devin_markdown_file() {
     -e 's#Host mapping: Claude Code uses `Agent` \(`Task` is its legacy alias\); Codex uses#Host mapping: Devin fresh-context dispatch uses `run_subagent` with `profile`; hosts use#g' \
     -e 's#`Agent` call#`run_subagent` call#g' \
     -e 's#`spawn_agent` call#`run_subagent` call#g' \
-    -e 's#Claude: N concurrent Task wrights#Devin: N concurrent `run_subagent` wrights#g' \
+    -e 's#Claude: N concurrent Task wrights \(`acceptEdits`, cwd=worktree\)\.#Devin: `run_subagent` takes no worktree cwd, so force serial.#g' \
+    -e 's#`AskUserQuestion`#`ask_user_question`#g' \
     -e 's#Task breakdown#Work-item breakdown#g' \
     -e 's#dispatch `devrites-source-driven`#invoke `devrites-source-driven`#g' \
     -e 's#Dispatch `devrites-source-driven`#Invoke `devrites-source-driven`#g' \
@@ -202,7 +203,7 @@ This project has DevRites installed for Devin CLI.
 
 ## Devin usage
 
-- DevRites workflow skills live in `.devin/skills`. Run them as `/rite`, `/rite-spec`, and the other `/rite-*` slash commands.
+- DevRites workflow skills live in `.devin/skills`. Run them as `/rite`, `/rite-spec`, and the other `/rite-*` slash commands. Devin also imports the Claude Code copies of these skills as `claude:*`; when a name is ambiguous, use the `devin:` form (`/devin:rite-build`) and never load a `claude:` DevRites skill.
 - Before using any DevRites workflow skill, read `.devin/skills/devrites-lib/reference/standards/core.md`. Load other `.devin/skills/devrites-lib/reference/standards/*.md` files when the skill or rule index asks for them.
 - DevRites specialist agents live in `.devin/agents` as custom subagent profiles offered to `run_subagent`. If a required `devrites-<role>` profile is not among the offered profiles, stop for HITL - never skip the role, never substitute `subagent_general`, `subagent_explore`, or another generic profile, never inline the specialist prompt, and never execute the specialist role in the root context.
 - In DevRites guidance, **invoke** means run a skill inline in the current context; **dispatch** means start a fresh agent with `run_subagent` using the exact `profile` name, wait for it with `read_subagent`, and reconcile its result.

package/scripts/install-lib.sh

@@ -190,6 +190,11 @@ dr_acquire_engine() {
     return 1
   }
   umask "$_dr_old_umask"
+  # A git checkout's payload can be ahead of the published engine of the same
+  # version, so a checkout builds its own engine before downloading one.
+  if [ -e "$_dr_source_dir/.git" ] && dr_build_engine "$_dr_source_dir" "$DR_ENGINE_TMP/devrites-engine"; then
+    dr_engine_compatible "$DR_ENGINE_TMP/devrites-engine" "$_dr_source_dir" "$_dr_subcommand" && { DR_ENGINE_PATH="$DR_ENGINE_TMP/devrites-engine"; return 0; }
+  fi
   if command -v curl >/dev/null 2>&1; then
     if dr_download_engine "$_dr_source_dir" "$_dr_repo" "$DR_ENGINE_TMP/devrites-engine"; then
       dr_engine_compatible "$DR_ENGINE_TMP/devrites-engine" "$_dr_source_dir" "$_dr_subcommand" && { DR_ENGINE_PATH="$DR_ENGINE_TMP/devrites-engine"; return 0; }

package/scripts/omp-generate.sh

@@ -62,6 +62,27 @@ gen_omp_markdown_file() {
     "$_src" > "$_out"
 }
 
+# Rewrite one installed omp skill file in place. $2 is its path under the skills
+# root (<skill>/<path>).
+# - omp loads skill files as skill://<skill>/<path> and cannot climb above a
+#   skill root, so each `../` link target or backtick path becomes an absolute
+#   skill:// URL.
+omp_rewrite_skill_refs() {
+  python3 - "$1" "$2" <<'PY'
+import posixpath, re, sys
+path, rel = sys.argv[1], sys.argv[2]
+here = posixpath.dirname(rel)
+def fix(m):
+    target = posixpath.normpath(posixpath.join(here, m.group(2)))
+    return m.group(0) if target.startswith("..") else m.group(1) + "skill://" + target
+with open(path, encoding="utf-8") as fh:
+    text = fh.read()
+text = re.sub(r"(\]\(|`)((?:\.\./)+[A-Za-z0-9._/-]+)", fix, text)
+with open(path, "w", encoding="utf-8") as fh:
+    fh.write(text)
+PY
+}
+
 gen_omp_skill_file() {
   gen_omp_markdown_file "$1" "$2"
 }
@@ -205,7 +226,8 @@ gen_omp_agent() {
     _body_omp="$TMP_GEN_DIR/omp-agent-body-$(basename "$_src").omp.md"
     awk 'NR==1 && $0=="---"{fm=1; next} fm && $0=="---"{fm=0; body=1; next} body{print}' "$_src" > "$_body_tmp"
     gen_omp_markdown_file "$_body_tmp" "$_body_omp"
-    cat "$_body_omp"
+    # Agent prompts have no file context; address skill files as skill:// URLs.
+    sed -E 's#\]\(\.\./skills/#](skill://#g' "$_body_omp"
   } > "$_out"
 }
 

package/scripts/pi-generate.sh

@@ -25,7 +25,7 @@ gen_pi_markdown_file() {
     -e 's#\.claude/skills/#.pi/skills/#g' \
     -e 's#\.claude/agents/([A-Za-z0-9_-]+)\.md#.pi/agents/\1.md#g' \
     -e 's#\.claude/agents/#.pi/agents/#g' \
-    -e 's#(\.\./)+agents/([A-Za-z0-9_-]+)\.md#.pi/agents/\2.md#g' \
+    -e 's#(^|[^(./])(\.\./)+agents/([A-Za-z0-9_-]+)\.md#\1.pi/agents/\3.md#g' \
     -e 's#\.agents/skills/devrites-lib/scripts/#.pi/skills/devrites-lib/scripts/#g' \
     -e 's#\.agents/skills/#.pi/skills/#g' \
     -e 's#\.codex/skills/devrites-lib/scripts/#.pi/skills/devrites-lib/scripts/#g' \
@@ -48,7 +48,7 @@ gen_pi_markdown_file() {
     -e 's#Host mapping: Claude Code uses `Agent` \(`Task` is its legacy alias\); Codex uses#Host mapping: pi fresh-context dispatch uses the `subagent` tool (`{agent, task}`); hosts use#g' \
     -e 's#`Agent` call#`subagent` call#g' \
     -e 's#`spawn_agent` call#`subagent` call#g' \
-    -e 's#Claude: N concurrent Task wrights#pi: N concurrent `subagent` wrights#g' \
+    -e 's#Claude: N concurrent Task wrights \(`acceptEdits`, cwd=worktree\)#pi: N concurrent `subagent` wrights (cwd=worktree)#g' \
     -e 's#Task breakdown#Work-item breakdown#g' \
     -e 's#dispatch `devrites-source-driven`#invoke `devrites-source-driven`#g' \
     -e 's#Dispatch `devrites-source-driven`#Invoke `devrites-source-driven`#g' \

package/engine/cmd/releasepack/main_test.go

@@ -1,239 +0,0 @@
-package main
-
-import (
-	"archive/tar"
-	"bytes"
-	"compress/gzip"
-	"io"
-	"os"
-	"path/filepath"
-	"reflect"
-	"strings"
-	"testing"
-	"time"
-)
-
-func TestWriteArchiveIsDeterministic(t *testing.T) {
-	t.Parallel()
-	epoch := time.Unix(1_700_000_000, 0).UTC()
-	firstRoot := makeTree(t, time.Unix(100, 0))
-	secondRoot := makeTree(t, time.Unix(2_000_000_000, 0))
-	firstArchive := filepath.Join(t.TempDir(), "release.tar.gz")
-	secondArchive := filepath.Join(t.TempDir(), "release.tar.gz")
-
-	if err := writeArchive(firstRoot, firstArchive, "devrites-v1.2.3", epoch); err != nil {
-		t.Fatal(err)
-	}
-	if err := writeArchive(secondRoot, secondArchive, "devrites-v1.2.3", epoch); err != nil {
-		t.Fatal(err)
-	}
-	firstBytes, err := os.ReadFile(firstArchive)
-	if err != nil {
-		t.Fatal(err)
-	}
-	secondBytes, err := os.ReadFile(secondArchive)
-	if err != nil {
-		t.Fatal(err)
-	}
-	if !bytes.Equal(firstBytes, secondBytes) {
-		t.Fatal("archives differ across source roots and mtimes")
-	}
-
-	got := readArchive(t, firstArchive, epoch)
-	wantNames := []string{
-		"devrites-v1.2.3/",
-		"devrites-v1.2.3/README.md",
-		"devrites-v1.2.3/install.sh",
-		"devrites-v1.2.3/nested/",
-		"devrites-v1.2.3/nested/data.txt",
-	}
-	if !reflect.DeepEqual(got.names, wantNames) {
-		t.Fatalf("archive names = %#v, want %#v", got.names, wantNames)
-	}
-	if got.modes["devrites-v1.2.3/"] != 0o755 ||
-		got.modes["devrites-v1.2.3/install.sh"] != 0o755 ||
-		got.modes["devrites-v1.2.3/README.md"] != 0o644 {
-		t.Fatalf("archive modes = %#v", got.modes)
-	}
-	if got.contents["devrites-v1.2.3/install.sh"] != "#!/bin/sh\nexit 0\n" ||
-		got.contents["devrites-v1.2.3/nested/data.txt"] != "payload\n" {
-		t.Fatalf("archive contents = %#v", got.contents)
-	}
-}
-
-func TestWriteArchiveRejectsUnsafePaths(t *testing.T) {
-	t.Parallel()
-	root := t.TempDir()
-	if err := os.WriteFile(filepath.Join(root, "file"), []byte("safe"), 0o644); err != nil {
-		t.Fatal(err)
-	}
-	output := filepath.Join(t.TempDir(), "release.tar.gz")
-
-	if err := writeArchive(root, filepath.Join(root, "release.tar.gz"), "devrites-v1", time.Unix(0, 0)); err == nil {
-		t.Fatal("output inside the staged tree was accepted")
-	}
-	if err := writeArchive(root, output, "../escape", time.Unix(0, 0)); err == nil {
-		t.Fatal("escaping archive prefix was accepted")
-	}
-	if err := writeArchive(root, output, `devrites-v1\escape`, time.Unix(0, 0)); err == nil {
-		t.Fatal("non-portable archive prefix was accepted")
-	}
-
-	link := filepath.Join(root, "unsafe-link")
-	if err := os.Symlink(filepath.Join(t.TempDir(), "outside"), link); err != nil {
-		t.Skipf("symlinks unavailable: %v", err)
-	}
-	err := writeArchive(root, output, "devrites-v1", time.Unix(0, 0))
-	if err == nil || !strings.Contains(err.Error(), "symlink is not allowed") {
-		t.Fatalf("symlink error = %v", err)
-	}
-	if _, statErr := os.Stat(output); !os.IsNotExist(statErr) {
-		t.Fatalf("unsafe archive output exists: %v", statErr)
-	}
-}
-
-func TestWriteEntriesRejectsChangedSource(t *testing.T) {
-	t.Parallel()
-	root := t.TempDir()
-	source := filepath.Join(root, "payload.txt")
-	if err := os.WriteFile(source, []byte("first\n"), 0o644); err != nil {
-		t.Fatal(err)
-	}
-	sourceRoot, err := os.OpenRoot(root)
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer func() { _ = sourceRoot.Close() }()
-	entries, err := collectEntries(sourceRoot, "devrites-v1")
-	if err != nil {
-		t.Fatal(err)
-	}
-	replacement := filepath.Join(root, "replacement")
-	if err := os.WriteFile(replacement, []byte("other\n"), 0o644); err != nil {
-		t.Fatal(err)
-	}
-	if err := os.Remove(source); err != nil {
-		t.Fatal(err)
-	}
-	if err := os.Rename(replacement, source); err != nil {
-		t.Fatal(err)
-	}
-
-	var archive bytes.Buffer
-	tw := tar.NewWriter(&archive)
-	err = writeEntries(sourceRoot, tw, entries, time.Unix(0, 0))
-	if err == nil || !strings.Contains(err.Error(), "changed after collection") {
-		t.Fatalf("changed source error = %v", err)
-	}
-}
-
-func TestWriteEntriesRejectsEscapingSymlinkSwap(t *testing.T) {
-	t.Parallel()
-	root := t.TempDir()
-	source := filepath.Join(root, "payload.txt")
-	if err := os.WriteFile(source, []byte("first\n"), 0o644); err != nil {
-		t.Fatal(err)
-	}
-	sourceRoot, err := os.OpenRoot(root)
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer func() { _ = sourceRoot.Close() }()
-	entries, err := collectEntries(sourceRoot, "devrites-v1")
-	if err != nil {
-		t.Fatal(err)
-	}
-	outside := filepath.Join(t.TempDir(), "outside.txt")
-	if err := os.WriteFile(outside, []byte("other\n"), 0o644); err != nil {
-		t.Fatal(err)
-	}
-	if err := os.Remove(source); err != nil {
-		t.Fatal(err)
-	}
-	if err := os.Symlink(outside, source); err != nil {
-		t.Skipf("symlinks unavailable: %v", err)
-	}
-
-	var archive bytes.Buffer
-	tw := tar.NewWriter(&archive)
-	if err := writeEntries(sourceRoot, tw, entries, time.Unix(0, 0)); err == nil {
-		t.Fatal("escaping symlink swap was accepted")
-	}
-}
-
-func makeTree(t *testing.T, mtime time.Time) string {
-	t.Helper()
-	root := t.TempDir()
-	files := map[string]struct {
-		content string
-		mode    os.FileMode
-	}{
-		"README.md":       {"read me\n", 0o644},
-		"install.sh":      {"#!/bin/sh\nexit 0\n", 0o644},
-		"nested/data.txt": {"payload\n", 0o644},
-	}
-	for name, file := range files {
-		fullPath := filepath.Join(root, name)
-		if err := os.MkdirAll(filepath.Dir(fullPath), 0o755); err != nil {
-			t.Fatal(err)
-		}
-		if err := os.WriteFile(fullPath, []byte(file.content), file.mode); err != nil {
-			t.Fatal(err)
-		}
-		if err := os.Chtimes(fullPath, mtime, mtime); err != nil {
-			t.Fatal(err)
-		}
-	}
-	return root
-}
-
-type archiveContents struct {
-	names    []string
-	modes    map[string]int64
-	contents map[string]string
-}
-
-func readArchive(t *testing.T, archivePath string, epoch time.Time) archiveContents {
-	t.Helper()
-	file, err := os.Open(archivePath)
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer func() { _ = file.Close() }()
-	gz, err := gzip.NewReader(file)
-	if err != nil {
-		t.Fatal(err)
-	}
-	defer func() { _ = gz.Close() }()
-	if !gz.ModTime.Equal(epoch) || gz.OS != 255 || gz.Name != "" || gz.Comment != "" || len(gz.Extra) != 0 {
-		t.Fatalf("gzip header is not normalized: %#v", gz.Header)
-	}
-
-	got := archiveContents{modes: map[string]int64{}, contents: map[string]string{}}
-	tr := tar.NewReader(gz)
-	for {
-		header, err := tr.Next()
-		if err == io.EOF {
-			break
-		}
-		if err != nil {
-			t.Fatal(err)
-		}
-		got.names = append(got.names, header.Name)
-		got.modes[header.Name] = header.Mode
-		if header.Uid != 0 || header.Gid != 0 || header.Uname != "" || header.Gname != "" {
-			t.Fatalf("%s ownership is not normalized: %#v", header.Name, header)
-		}
-		if !header.ModTime.Equal(epoch) || !header.AccessTime.Equal(epoch) || !header.ChangeTime.Equal(epoch) {
-			t.Fatalf("%s timestamps are not normalized: %#v", header.Name, header)
-		}
-		if header.Typeflag == tar.TypeReg {
-			content, err := io.ReadAll(tr)
-			if err != nil {
-				t.Fatal(err)
-			}
-			got.contents[header.Name] = string(content)
-		}
-	}
-	return got
-}