devrites 6.10.0 → 7.0.1

package/pack/generated/pi/skills/rite-review/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[scope: slice N | feature] [--full]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/candidate-integrity.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/agents.md","devrites-lib/reference/standards/tooling.md","rite-review/reference/feature-scoped-review.md","rite-review/reference/five-axis-review.md","rite-review/reference/anti-patterns.md"],"triggers":{"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"code-review":["devrites-lib/reference/standards/code-review.md","devrites-lib/reference/standards/review-checklist.md","devrites-lib/reference/standards/review/README.md","devrites-lib/reference/standards/duplicate-code.md"],"performance":["devrites-lib/reference/standards/performance.md","rite-review/reference/performance-review.md","rite-review/reference/performance-checklist.md"],"principles":["devrites-lib/reference/standards/principles.md"],"security":["devrites-lib/reference/standards/security.md","devrites-lib/reference/standards/security-checklist.md","rite-review/reference/security-review.md"],"testing":["devrites-lib/reference/standards/testing.md"],"ui":["rite-review/reference/nielsen-heuristics.md","rite-review/reference/cognitive-load.md","rite-review/reference/performance-checklist.md"],"workflow-artifacts":["devrites-lib/reference/workspace-artifact-schema.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","design-brief.md","browser-evidence.md"],"workspaceByRole":{"code-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","architecture.md","decisions.md","state.md","evidence.md","touched-files.md"],"devex-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md"],"frontend-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","design-brief.md"],"performance-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"plan-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","decision-coverage.md","architecture.md","state.md"],"security-auditor":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"simplifier-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md"],"spec-reviewer":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","state.md"],"test-analyst":["spec.md","tasks.md","test-plan.md","state.md","evidence.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/candidate-integrity.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/agents.md","devrites-lib/reference/standards/tooling.md","rite-review/reference/feature-scoped-review.md","rite-review/reference/five-axis-review.md","rite-review/reference/anti-patterns.md"],"triggers":{"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"code-review":["devrites-lib/reference/standards/code-review.md","devrites-lib/reference/standards/review-checklist.md","devrites-lib/reference/standards/review/README.md","devrites-lib/reference/standards/duplicate-code.md"],"performance":["devrites-lib/reference/standards/performance.md","rite-review/reference/performance-review.md","rite-review/reference/performance-checklist.md"],"principles":["devrites-lib/reference/standards/principles.md"],"security":["devrites-lib/reference/standards/security.md","devrites-lib/reference/standards/security-checklist.md","rite-review/reference/security-review.md"],"testing":["devrites-lib/reference/standards/testing.md"],"ui":["rite-review/reference/nielsen-heuristics.md","rite-review/reference/cognitive-load.md","rite-review/reference/performance-checklist.md"],"workflow-artifacts":["devrites-lib/reference/workspace-artifact-schema.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","design-brief.md","browser-evidence.md"],"workspaceByRole":{"code-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","architecture.md","decisions.md","state.md","evidence.md","touched-files.md"],"devex-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md"],"frontend-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","design-brief.md"],"performance-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"plan-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","decision-coverage.md","architecture.md","state.md"],"security-auditor":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"simplifier-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md"],"spec-reviewer":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","state.md"],"test-analyst":["spec.md","tasks.md","test-plan.md","state.md","evidence.md"]},"rootOnly":["devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/tooling.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --phase review` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -64,9 +64,9 @@ Pull these via `Read` when the diff demands them:
 1. Read `spec.md`, `tasks.md`, `state.md`, `decisions.md`,
    `touched-files.md`, `.devrites/principles.md` (if present: the binding invariants to score
    the diff against), and the `git diff`. For "what would this change break"
-   questions, apply `.pi/skills/devrites-lib/reference/standards/tooling.md`: use
-   the primary available index and cross-check only one named unresolved predicate before
-   falling back to LSP/file search. When a finding hinges on an external library's
+   questions, apply `.pi/skills/devrites-lib/reference/standards/code-navigation.md`:
+   `detect_changes` (explicit `base_branch`, `scope: "impact"`), then `trace_path` on the
+   symbols that matter, before falling back to LSP/file search. When a finding hinges on an external library's
    current API, context7 if available can confirm the signature. Run
    `devrites-engine check candidate <slug>` and require its digest to match the
    single `evidence.md` binding and the `browser-evidence.md` binding when that

package/pack/generated/pi/skills/rite-seal/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug] [--full]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/candidate-integrity.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/verification-methods.md","rite-seal/reference/phase-contract.md","rite-seal/reference/final-evidence.md","rite-seal/reference/go-no-go.md","rite-seal/reference/risk-and-rollback.md","rite-seal/reference/seal-template.md","rite-seal/reference/output.md","rite-seal/reference/anti-patterns.md"],"triggers":{"agents":["devrites-lib/reference/standards/agents.md"],"browser":["devrites-lib/reference/standards/browser-proof-checklist.md"],"code-review":["devrites-lib/reference/standards/code-review.md"],"deprecation":["devrites-lib/reference/standards/deprecation.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"observability":["devrites-lib/reference/standards/observability.md"],"principles":["devrites-lib/reference/standards/principles.md"],"security":["devrites-lib/reference/standards/security.md"],"testing":["devrites-lib/reference/standards/testing.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","review.md","seal.md"],"workspaceByRole":{"code-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","architecture.md","decisions.md","state.md","evidence.md","touched-files.md","review.md"],"devex-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","devex.md","review.md"],"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md","review.md"],"frontend-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"performance-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"proof-runner":["spec.md","test-plan.md","tasks.md","gates.md","evidence.md","state.md"],"security-auditor":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"simplifier-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","review.md"],"spec-reviewer":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","state.md","review.md"],"test-analyst":["spec.md","tasks.md","test-plan.md","state.md","evidence.md","review.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/candidate-integrity.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/verification-methods.md","rite-seal/reference/phase-contract.md","rite-seal/reference/final-evidence.md","rite-seal/reference/go-no-go.md","rite-seal/reference/risk-and-rollback.md","rite-seal/reference/seal-template.md","rite-seal/reference/output.md","rite-seal/reference/anti-patterns.md"],"triggers":{"agents":["devrites-lib/reference/standards/agents.md"],"browser":["devrites-lib/reference/standards/browser-proof-checklist.md"],"code-review":["devrites-lib/reference/standards/code-review.md"],"deprecation":["devrites-lib/reference/standards/deprecation.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"observability":["devrites-lib/reference/standards/observability.md"],"principles":["devrites-lib/reference/standards/principles.md"],"security":["devrites-lib/reference/standards/security.md"],"testing":["devrites-lib/reference/standards/testing.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","review.md","seal.md"],"workspaceByRole":{"code-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","architecture.md","decisions.md","state.md","evidence.md","touched-files.md","review.md"],"devex-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","devex.md","review.md"],"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md","review.md"],"frontend-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"performance-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"proof-runner":["spec.md","test-plan.md","tasks.md","gates.md","evidence.md","state.md"],"security-auditor":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"simplifier-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","review.md"],"spec-reviewer":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","state.md","review.md"],"test-analyst":["spec.md","tasks.md","test-plan.md","state.md","evidence.md","review.md"]},"rootOnly":["devrites-lib/reference/standards/code-index.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --phase seal` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -87,7 +87,7 @@ Follow [`reference/phase-contract.md`](reference/phase-contract.md)
    this digest for the proof runner. It likewise refuses a malformed `notes.md` or any anchor
    graded other than `exact`: `devrites-engine note check <slug> --repair`
    re-anchors `moved` notes; `stale`/`ambiguous`/`lost` ones are corrected or
-   removed before GO.
+   removed before GO. Repeat each `note: unexecuted driver` line `check seal` prints in the GO/NO-GO reply.
 
 Corrections return through affected Prove/Review before restarting Seal under
 [evidence validity](../devrites-lib/reference/candidate-integrity.md#evidence-validity).

package/pack/generated/pi/skills/rite-ship/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/candidate-integrity.md","devrites-lib/reference/standards/git-workflow.md","devrites-lib/reference/standards/definition-of-done.md","devrites-lib/reference/standards/release/ship-checklist.md","rite-ship/reference/git-ship.md","rite-ship/reference/rollout.md","rite-ship/reference/close-out.md","rite-ship/reference/ship-template.md","rite-ship/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","review.md","seal.md"]} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/candidate-integrity.md","devrites-lib/reference/standards/git-workflow.md","devrites-lib/reference/standards/definition-of-done.md","devrites-lib/reference/standards/release/ship-checklist.md","rite-ship/reference/git-ship.md","rite-ship/reference/rollout.md","rite-ship/reference/close-out.md","rite-ship/reference/ship-template.md","rite-ship/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","review.md","seal.md"],"rootOnly":["devrites-lib/reference/standards/afk-hitl.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --phase ship` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 

package/pack/generated/pi/skills/rite-spec/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "<feature or idea>"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/elicitation.md","devrites-lib/reference/standards/agents.md","rite-spec/reference/investigation.md","rite-spec/reference/question-protocol.md","rite-spec/reference/spec-template.md","rite-spec/reference/spec-checklists.md","rite-spec/reference/state-workspace.md","rite-spec/reference/acceptance-criteria.md","rite-spec/reference/interview-patterns.md","rite-spec/reference/ai-spec-template.md","rite-spec/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"edge-cases":["devrites-lib/reference/standards/edge-case-trace.md"],"frontend":["rite-build/reference/frontend-trigger.md"],"grammar":["devrites-lib/reference/standards/spec-grammar.md"],"principles":["devrites-lib/reference/standards/principles.md"],"references":["rite-spec/reference/references-intake.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md"],"workspaceByRole":{"evidence-scout":["brief.md","spec.md","state.md","questions.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/elicitation.md","devrites-lib/reference/standards/agents.md","rite-spec/reference/investigation.md","rite-spec/reference/question-protocol.md","rite-spec/reference/spec-template.md","rite-spec/reference/spec-checklists.md","rite-spec/reference/state-workspace.md","rite-spec/reference/acceptance-criteria.md","rite-spec/reference/interview-patterns.md","rite-spec/reference/ai-spec-template.md","rite-spec/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"edge-cases":["devrites-lib/reference/standards/edge-case-trace.md"],"frontend":["rite-build/reference/frontend-trigger.md"],"grammar":["devrites-lib/reference/standards/spec-grammar.md"],"principles":["devrites-lib/reference/standards/principles.md"],"references":["rite-spec/reference/references-intake.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md"],"workspaceByRole":{"evidence-scout":["brief.md","spec.md","state.md","questions.md"]},"rootOnly":["devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/afk-hitl.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --phase spec` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -124,7 +124,8 @@ load a routed standard to discover required behavior, not to prescribe implement
    owned prerequisites. Keep a build checkpoint only for unavailable pre-code evidence or a
    mandatory action-time approval. **Completion:** no foreseeable human choice is deferred.
 5. **Create or update the workspace** + set `.devrites/ACTIVE` from
-   [state-workspace](reference/state-workspace.md). If the slug already exists,
+   [state-workspace](reference/state-workspace.md); a `--lookahead` run
+   leaves `.devrites/ACTIVE` unchanged. If the slug already exists,
    update the existing workspace rather than overwrite it; preserve history and
    unrelated settled content. Write every required artifact and conditional
    annex exactly from [spec-template](reference/spec-template.md)

package/pack/generated/pi/skills/rite-spec/reference/investigation.md

@@ -4,10 +4,10 @@ Understand the requirement, decide where it belongs, define the outcome, and ide
 every issue and gap. Resolve material gaps with the user before the spec is ready. A
 gap first found during `/rite-build` is a drift event.
 
-Use a code-intelligence index if available (see
-`../../devrites-lib/reference/standards/tooling.md`) for structural questions such as
-where code lives, what calls it, and what it could break. With none present, use
-Read/Grep/Glob. When a gap depends on an external fact, such as a standard, UX pattern,
+Use codebase-memory-mcp if available (routes, preflight, and coverage in
+`../../devrites-lib/reference/standards/code-navigation.md`) for structural questions:
+`get_architecture` for where code lives, `search_graph` for reuse, `trace_path` for
+what calls it and what it could break. With none present, use Read/Grep/Glob. When a gap depends on an external fact, such as a standard, UX pattern,
 or comparable product, **search the web if available** (brave MCP preferred;
 `../../devrites-lib/reference/standards/tooling.md`). Cite the finding in the option
 presented to the human.
@@ -41,7 +41,7 @@ Use native file search over `.devrites/archive/*/{spec,decisions}.md`.
    anything that makes the obvious approach wrong. Each issue gets a disposition.
 6. **Gaps:** unknowns, ambiguities, undecided behavior, missing inputs. **Every gap
    becomes a question** (next section).
-7. **Blast radius:** what this change could break (use the code graph's impact/callers).
+7. **Blast radius:** what this change could break (`trace_path` with `direction: "inbound"` on the symbols to change).
    Informs risks, test strategy, and rollback.
 8. **Human prerequisites:** credentials, accounts, approval windows, or irreversible
    action-time decisions the acceptance path requires. Separate these from agent-owned

package/pack/generated/pi/skills/rite-spec/reference/spec-template.md

@@ -6,7 +6,7 @@ topology in `architecture.md`/`flows.md`, coverage in `traceability.md`.
 Use `[NEEDS CLARIFICATION: <question>]` (blocking stops `/rite-clarify`); before readiness
 every surviving marker converts to a gated `q-YYYY-MM-DD-NNN` open question (released `Q-###` kept) ([`spec-grammar.md`](../../devrites-lib/reference/standards/spec-grammar.md) §
 Unresolved-question markers — fail closed). Stable `REQ-001`/`AC-001` IDs; link, never
-duplicate, source artifacts; over-budget requires `Budget override: <reason>`. `spec.md`
+duplicate, source artifacts; over-budget requires `Budget override: <=N lines; <reason>` (N at most 2x the budget). `spec.md`
 is the product contract only: the phase verdict goes in the `state.md` `spec_gate` row,
 never in this file (every reviewer read-set includes `spec.md`).
 

package/pack/generated/pi/skills/rite-spec/reference/state-workspace.md

@@ -154,7 +154,8 @@ Before an active caller moves backward, it copies its current phase and
 non-empty action into the two return rows. Nested Plan, Vet, Build, and proof
 work preserves that valid cursor. Once the prerequisite chain is green, the
 controlling caller restores the saved phase/action and removes both rows in one
-rewrite. A real HITL or parked-recovery stop retains the cursor for cold
+rewrite (`devrites-engine state set <slug> phase=<p> next_action=<a> --unset
+return_phase --unset return_next_action`). A real HITL or parked-recovery stop retains the cursor for cold
 resume. Never overwrite an existing valid return cursor, and preserve every
 unrelated Markdown byte. `/rite-clarify` applies its stricter native cursor protocol in `/rite-clarify`.
 
@@ -192,8 +193,9 @@ question: <one crisp sentence>
 options:
   1. <recommended> (Recommended) - <trade-off>
   2. <alternative> - <trade-off>
-proposed: <best current answer>
-raised_at: <iso>
+  3. Something else - describe it
+proposed: <option 1 restated; omit with no (Recommended)>
+raised_at: <RFC 3339, e.g. 2026-10-19T08:17:08Z>
 answered_at:
 answer:
 answered_by:        # human, only when resolved with `state resolve --human`
@@ -235,4 +237,4 @@ Why: <one line — the significance signals that picked the profile>
 
 High-traffic files should stay within the budgets in
 [`workspace-artifact-schema.md`](../../devrites-lib/reference/workspace-artifact-schema.md). If a file truly must exceed its budget, add
-`Budget override: <reason>` near the top.
+`Budget override: <=N lines; <reason>` (N at most 2x the budget) near the top.

package/pack/generated/pi/skills/rite-status/SKILL.md

@@ -48,7 +48,7 @@ status, and evidence for its claims. If chat contains missing durable context,
 recommend `/rite-handoff` before the lifecycle command.
 `devrites-engine handoff [slug]` emits the deterministic resume record (cursor,
 `awaiting_human`, blocking question gates, ledger reduction, dead ends,
-read-next order) — cite it for items 3–6 and the handoff-readiness verdict
+in-flight waves, read-next order) — cite it for items 3–6 and the handoff-readiness verdict
 rather than re-deriving them. If that command is not found or exits nonzero,
 report items 3–6 and `Handoff:` as `unavailable: <command> <not found | exit N>` —
 never re-derive them from other files, never leave them blank — and set `Next:`

package/pack/generated/pi/skills/rite-temper/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug] [--mode expand|selective|hold-rigor|reduce-to-MVP
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/agents.md","rite-temper/reference/significance.md","rite-temper/reference/scope-modes.md","rite-temper/reference/review-dimensions.md","rite-temper/reference/strategy-template.md","rite-temper/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"yagni":["devrites-lib/reference/standards/patterns.md","devrites-lib/reference/standards/coding-style.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","strategy.md","design-brief.md"],"workspaceByRole":{"strategy-reviewer":["brief.md","spec.md","decision-coverage.md","decisions.md","strategy.md","state.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/agents.md","rite-temper/reference/significance.md","rite-temper/reference/scope-modes.md","rite-temper/reference/review-dimensions.md","rite-temper/reference/strategy-template.md","rite-temper/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"yagni":["devrites-lib/reference/standards/patterns.md","devrites-lib/reference/standards/coding-style.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","strategy.md","design-brief.md"],"workspaceByRole":{"strategy-reviewer":["brief.md","spec.md","decision-coverage.md","decisions.md","strategy.md","state.md"]},"rootOnly":["devrites-lib/reference/standards/code-index.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/afk-hitl.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --phase temper` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 

package/pack/generated/pi/skills/rite-temper/reference/review-dimensions.md

@@ -24,8 +24,8 @@ the gate uses the **lowest band**, not an average.
    up to an unbounded ideal. Vague adjectives ("fast/robust/intuitive") and "handles X
    gracefully" are flagged.
 7. **Irreversibility & blast radius:** are auth / migration / public-API / data-model touches
-   treated with conservatism + rollback, and is the blast radius understood (from a
-   code-intelligence index if available)?
+   treated with conservatism + rollback, and is the blast radius understood (from
+   codebase-memory `trace_path` if available)?
 8. **Cross-cutting coverage:** security/trust-boundary, data & migration, observability, and
    modifiability each explicitly addressed **or explicitly N/A**: no silent omission.
 9. **Convention fit & placement realism:** does the ambition fit the codebase's existing seams

package/pack/generated/pi/skills/rite-temper/reference/scope-modes.md

@@ -14,8 +14,8 @@ Diverge on the *real problem*, not the obvious path. Ask:
 
 Ambition aims at the **outcome** (problem definition, success bar, user value) and at
 complexity-**neutral** future-proofing. It never aims at the **solution surface** (that's Pass 2's
-job to prune). Ground every ambitious idea in the codebase's real seams and blast radius. Use a
-code-intelligence index if available (see `../../devrites-lib/reference/standards/tooling.md`). Don't invent greenfield scope a
+job to prune). Ground every ambitious idea in the codebase's real seams and blast radius. Use
+codebase-memory `get_architecture` and `trace_path` if available (see `../../devrites-lib/reference/standards/code-navigation.md`). Don't invent greenfield scope a
 constrained codebase can't absorb.
 
 ## Pass 2: INVERSION (quench: pre-mortem + prune)

package/pack/generated/pi/skills/rite-temper/reference/significance.md

@@ -10,8 +10,8 @@ so they agree on when it fires.
   irreversible-risk list: destructive data migration, auth/authz boundary, public-API break,
   external-service contract, filesystem destruction outside the workspace.
 - **Data model:** new/changed entities, relationships, or persistence shape.
-- **Cross-module blast radius:** the impact (from a code-intelligence index if available (see
-  `../../devrites-lib/reference/standards/tooling.md`) or an honest estimate) crosses
+- **Cross-module blast radius:** the impact (from codebase-memory `trace_path` per
+  `../../devrites-lib/reference/standards/code-navigation.md`, or an honest estimate) crosses
   module/service boundaries or has many dependents.
 - **Greenfield / ambiguous scope:** a new surface with no existing seam to follow, or a spec
   whose "right size" is genuinely open (multiple defensible scopes).

package/pack/generated/pi/skills/rite-vet/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[slug] [--cross-model] [--full]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/gates.md","rite-vet/reference/review-axes.md","rite-vet/reference/artifacts.md","rite-vet/reference/depth.md","rite-vet/reference/eng-lenses.md","rite-vet/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"assumption-delta":["devrites-lib/reference/standards/assumption-checkpoints.md"],"cross-model":["rite-vet/reference/cross-model.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"grammar":["devrites-lib/reference/standards/spec-grammar.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"performance":["devrites-lib/reference/standards/performance.md"],"principles":["devrites-lib/reference/standards/principles.md"],"reslice":["devrites-lib/reference/standards/acceptance-preserving-reslice.md"],"testing":["devrites-lib/reference/standards/testing.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"],"yagni":["devrites-lib/reference/standards/patterns.md","devrites-lib/reference/standards/coding-style.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","strategy.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md"],"rootOnly":["devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/elicitation.md"],"workspaceByRole":{"doubt-reviewer":["spec.md","architecture.md","plan.md","tasks.md","test-plan.md","decisions.md","state.md"],"devex-reviewer":["spec.md","plan.md","tasks.md","decisions.md","state.md"],"plan-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","decision-coverage.md","architecture.md","decisions.md","state.md"],"strategy-reviewer":["brief.md","spec.md","plan.md","decisions.md","decision-coverage.md","strategy.md","state.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/gates.md","rite-vet/reference/review-axes.md","rite-vet/reference/artifacts.md","rite-vet/reference/depth.md","rite-vet/reference/eng-lenses.md","rite-vet/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"assumption-delta":["devrites-lib/reference/standards/assumption-checkpoints.md"],"cross-model":["rite-vet/reference/cross-model.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"grammar":["devrites-lib/reference/standards/spec-grammar.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"performance":["devrites-lib/reference/standards/performance.md"],"principles":["devrites-lib/reference/standards/principles.md"],"reslice":["devrites-lib/reference/standards/acceptance-preserving-reslice.md"],"testing":["devrites-lib/reference/standards/testing.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"],"yagni":["devrites-lib/reference/standards/patterns.md","devrites-lib/reference/standards/coding-style.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","strategy.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md"],"rootOnly":["devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/elicitation.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/workflow-artifacts.md"],"workspaceByRole":{"doubt-reviewer":["spec.md","architecture.md","plan.md","tasks.md","test-plan.md","decisions.md","state.md"],"devex-reviewer":["spec.md","plan.md","tasks.md","decisions.md","state.md"],"plan-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","decision-coverage.md","architecture.md","decisions.md","state.md"],"strategy-reviewer":["brief.md","spec.md","plan.md","decisions.md","decision-coverage.md","strategy.md","state.md"]}} -->
 > Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --phase vet` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -74,8 +74,8 @@ plan declares a root-authored executable workflow file, read
 0. **Orient.** Read core. Resolve active slug, require state, and read plan,
    tasks, spec, decision coverage, optional strategy/design brief, decisions,
    assumptions, and state. Require approved Plan and `Decision coverage: CLEAR`;
-   otherwise stop for Define or Clarify. Use code intelligence for placement,
-   blast radius, and reuse.
+   otherwise stop for Define or Clarify. Check placement (`get_architecture`),
+   blast radius (`trace_path`), and reuse (`search_graph`) per [`code-navigation.md`](../devrites-lib/reference/standards/code-navigation.md).
 1. **Select depth.** Apply `reference/depth.md` exactly; never skip. Every initial
    pass records an engineering verdict and test-plan coverage. A valid Recovery
    recheck retains prior depth and enters 1b.
@@ -136,7 +136,11 @@ plan declares a root-authored executable workflow file, read
 
    For each consumptive action, bind every `reference/artifacts.md` Consumptive
    action gates column; every fingerprint identifies one actionable seam; aliasing multiple
-   emit sites is a gap. Preflight observes but need not make future behavior pass.
+   emit sites is a gap. Preflight observes but need not make future behavior pass,
+   except that a manifest/lockfile edit is dry-run now: before READY run
+   `devrites-engine check preconditions <slug>` (rows with `Run at` `vet`, including each
+   `dependency-dry-run` and preserve-baseline row). A failure folds into Plan repair; only an
+   owner-owned decision becomes a question, batched under the afk-hitl decision-chain rule.
 4. **Audit readiness.** Goal-backward map every requirement, criterion, NFR,
    interaction, edge/prohibition, and decision row to one slice and executable
    proof. Verify UX/spec/architecture alignment, contracts, dependency order,
@@ -207,7 +211,9 @@ plan declares a root-authored executable workflow file, read
    `marker sweep:` line is recorded in `eng-review.md`; a kept hit blocks READY. Write phase/next step and emit one
    `Readiness inputs SHA-256` with
    `devrites-engine check readiness --emit-binding <slug>`; normal readiness check
-   must pass. Record the per-input drift baseline alongside it:
+   must pass. A `sequence_lookahead: yes` workspace also records one
+   `Predecessor readiness: <predecessor> <digest>` line from the predecessor's
+   `--emit-binding` hex; readiness re-checks it. Record the per-input drift baseline alongside it:
    `devrites-engine check drift <slug> --record` — a later stale binding then
    names the exact artifact that moved instead of "something changed". An `ADVISORY
    proportion:` line names a slice whose proof outgrew its ACs: move its rows without a

package/pack/generated/pi/skills/rite-vet/reference/artifacts.md

@@ -96,10 +96,15 @@ writes tests from it; `/rite-prove` walks it against `evidence.md`. Specify
 From /rite-vet on <iso>. Runner + conventions: <detected framework + command>.
 
 ## Build-entry preflight
-| Gate | Command | Cwd | Expected | Prerequisites | Provenance to recapture |
-|---|---|---|---|---|---|
-| <test/browser/package> | <exact command> | <path> | <exit/output> | <service/browser/credential owner> | <tool version + full SHA-256s> |
+| Gate | Command | Cwd | Expected | Prerequisites | Provenance to recapture | Run at |
+|---|---|---|---|---|---|---|
+| <test/browser/package> | <exact command> | <path> | <exit/output> | <service/browser/credential owner> | <tool version + full SHA-256s> | vet / pre-dispatch SLICE-### / action |
 
+`check preconditions` runs `vet` rows (`--slice` runs `pre-dispatch` rows; `action` rows
+never run there) and passes on exit 0. A slice editing a manifest or lockfile needs a
+`dependency-dry-run SLICE-###` row at `vet`: apply the planned pin in an isolated copy, run
+the tidy/lock step, then the project's admission checks. Resource rows only read
+eligibility (swap, cpuset, env var present); they never measure or change the host.
 Link any disposable parser fixture. Preflight values are planning evidence, not post-build proof;
 Prove recaptures the observed command, candidate identity, and result.
 
@@ -184,6 +189,8 @@ enforces them, so author to the contract, not around it:
   tautological commands and weak expectations before build.
 - Manual gates (`EVIDENCE` only) are for judgment-bound outcomes; Prove
   attests them, Seal still requires them checked.
+- Carry a `Tests/proof` row marked `RUN: writer` at define into its gate as
+  `RUN: writer`; never on a CHECK that needs an empty `git diff` or a driver.
 
 ## Parallelization table (in `eng-review.md` §5 when there's an opportunity)
 

package/pack/generated/pi/skills/rite-vet/reference/depth.md

@@ -21,8 +21,8 @@ Authority: `.pi/skills/devrites-lib/reference/standards/acceptance-preserving-re
   list: destructive data migration, auth/authz boundary, public-API break, external-service
   contract, filesystem destruction outside the workspace.
 - **Data model:** new/changed entities, relationships, or persistence shape.
-- **Cross-module blast radius:** the impact (from a code-intelligence index if available (see
-  `../../devrites-lib/reference/standards/tooling.md`) or an honest estimate) crosses
+- **Cross-module blast radius:** the impact (from codebase-memory `trace_path` per
+  `../../devrites-lib/reference/standards/code-navigation.md`, or an honest estimate) crosses
   module/service boundaries or has many dependents.
 - **Complexity:** `plan.md` touches **>8 files** or adds **>2 new services/modules/classes**.
 - **Multi-slice / multi-day work**, new dependency/pattern/design system. Slice count alone never creates a human pause.

package/pack/generated/pi/skills/rite-vet/reference/review-axes.md

@@ -17,8 +17,8 @@ Authority: `.pi/skills/devrites-lib/reference/standards/acceptance-preserving-re
 
 Before implementation review, check for work beyond the settled spec.
 
-1. **What exists?** Find reusable code/flows via
-   [`tooling.md`](../../devrites-lib/reference/standards/tooling.md). Reuse → extend →
+1. **What exists?** Find reusable code/flows with `search_graph` (`semantic_query`) per
+   [`code-navigation.md`](../../devrites-lib/reference/standards/code-navigation.md). Reuse → extend →
    build new; list missed reuse instead of planning parallel work.
 2. **Minimum diff.** Find the smallest contract-complete change. Flag non-blocking work;
    use the marked action for topology cuts.

package/pack/generated/pi/skills/rite-zoom-out/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[symbol | file | area to map]"
 user-invocable: true
 disable-model-invocation: true
 ---
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/tooling.md"],"workspace":["spec.md","plan.md","decisions.md","state.md"]} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/tooling.md"],"workspace":["spec.md","plan.md","decisions.md","state.md"],"rootOnly":["devrites-lib/reference/standards/code-index.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .pi/skills <slug> --skill rite-zoom-out` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-zoom-out: step up one abstraction layer
@@ -34,12 +34,12 @@ A **structural map**: terse. One pass should answer:
 - **Smallest sensible change-scope:** where a fix would naturally land, so the next
   step doesn't drift into a project-wide refactor.
 
-## Prefer a code-intelligence index (if available)
+## Prefer codebase-memory-mcp (if available)
 
-Apply `.pi/skills/devrites-lib/reference/standards/tooling.md`: use the primary
-available architecture/code index, add at most one cross-check for a named incomplete,
-stale, or conflicting predicate, then fall back to LSP and file search. Do not query
-multiple indexes merely to confirm the same map.
+Apply `.pi/skills/devrites-lib/reference/standards/code-navigation.md`:
+`get_architecture` (`aspects: ["overview"]`, `path` = the area) for modules,
+`trace_path` (`direction: "inbound"` / `"outbound"`) for callers and calls, then fall
+back to LSP and file search. Do not repeat a query merely to confirm the same map.
 
 ## Vocabulary discipline
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devrites",
-  "version": "6.10.0",
+  "version": "7.0.1",
   "description": "DevRites: a disciplined senior-engineer workflow pack for Claude Code, Codex, omp, pi, and Devin CLI",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://github.com/ViktorsBaikers/DevRites#readme",

package/scripts/build-host-artifacts.sh

@@ -64,11 +64,12 @@ copy_tree() {
   cp -R "$_src" "$_dest"
 }
 
-# devrites-engine context defaults to .claude/skills; each host's bundles must
-# come from its own installed tree, so every call (even one wrapped across
-# lines) in that host's Markdown names it. $1 rendered tree, $2 skills root.
+# devrites-engine context and check anchors default to .claude/skills; each
+# host's bundles and standards must come from its own installed tree, so every
+# call (even one wrapped across lines) in that host's Markdown names it. $1
+# rendered tree, $2 skills root.
 pin_context_skills_root() {
-  find "$1" -type f -name '*.md' -exec perl -0pi -e 's#devrites-engine(\s+)context(?!\s+--skills-root)(?=\s+[<\[-])#devrites-engine${1}context --skills-root '"$2"'#g' {} +
+  find "$1" -type f -name '*.md' -exec perl -0pi -e 's#devrites-engine(\s+)context(?!\s+--skills-root)(?=\s+[<\[-])#devrites-engine${1}context --skills-root '"$2"'#g; s#devrites-engine(\s+)check(\s+)anchors(?!\s+--skills-root)(?=\s+[<\[-])#devrites-engine${1}check${2}anchors --skills-root '"$2"'#g' {} +
 }
 
 render_codex_skill_tree() {

package/scripts/omp-generate.sh

@@ -142,12 +142,10 @@ _omp_map_tools() {
 }
 
 # omp treats frontmatter tools: as a hard allowlist for extension/MCP tools,
-# so ambient lean-ctx / lens tools are dropped unless named. Append those
+# so ambient lens tools are dropped unless named. Append those read-only
 # names after the mapped builtins (preserve base order). Unknown names are
-# dropped non-fatally. Read-only agents stay read-only: ctx_edit / ctx_patch
-# only when the base already has edit or write; ctx_shell only when the
-# base already has bash.
-_OMP_EXTENSION_NAV_TOOLS="ctx_read, ctx_ls, ctx_find, ctx_grep, ctx_glob, ctx_search, ctx_compose, ctx_callgraph, ctx_tree, symbol_search, project_report, module_report, read_symbol, read_enclosing, lens_diagnostics"
+# dropped non-fatally.
+_OMP_EXTENSION_NAV_TOOLS="symbol_search, project_report, module_report, read_symbol, read_enclosing, lens_diagnostics"
 
 _omp_csv_has() {
   case ", ${1}, " in
@@ -182,13 +180,6 @@ _omp_append_extension_tools() {
     [ -z "$_tok" ] && continue
     _out="$(_omp_csv_append "$_out" "$_tok")"
   done < <(printf '%s\n' "$_OMP_EXTENSION_NAV_TOOLS" | tr ',' '\n')
-  if _omp_csv_has "$_base" "edit" || _omp_csv_has "$_base" "write"; then
-    _out="$(_omp_csv_append "$_out" "ctx_edit")"
-    _out="$(_omp_csv_append "$_out" "ctx_patch")"
-  fi
-  if _omp_csv_has "$_base" "bash"; then
-    _out="$(_omp_csv_append "$_out" "ctx_shell")"
-  fi
   printf '%s' "$_out"
 }
 

package/scripts/pi-generate.sh

@@ -120,56 +120,10 @@ _pi_map_tools() {
   printf '%s' "$_out"
 }
 
-# pi-subagents treats frontmatter tools: as a strict allowlist, so ambient
-# pi-lean-ctx / pi-lens tools are dropped unless named. Append those names
-# after the mapped builtins (preserve base order). Unknown names are pruned
-# non-fatally by pi-subagents. Read-only agents stay read-only: ctx_edit /
-# ctx_patch only when the base already has edit or write; ctx_shell only
-# when the base already has bash.
-_PI_EXTENSION_NAV_TOOLS="ctx_read, ctx_ls, ctx_find, ctx_grep, ctx_glob, ctx_search, ctx_compose, ctx_callgraph, ctx_tree, symbol_search, project_report, module_report, read_symbol, read_enclosing, lens_diagnostics"
-
-_pi_csv_has() {
-  case ", ${1}, " in
-  *", ${2}, "*) return 0 ;;
-  *) return 1 ;;
-  esac
-}
-
-_pi_csv_append() {
-  local _list="$1" _name="$2"
-  if [ -z "$_name" ]; then
-    printf '%s' "$_list"
-    return
-  fi
-  if [ -z "$_list" ]; then
-    printf '%s' "$_name"
-    return
-  fi
-  if _pi_csv_has "$_list" "$_name"; then
-    printf '%s' "$_list"
-    return
-  fi
-  printf '%s, %s' "$_list" "$_name"
-}
-
-_pi_append_extension_tools() {
-  local _base="$1"
-  local _out="$_base" _tok
-  while IFS= read -r _tok; do
-    _tok="${_tok#"${_tok%%[![:space:]]*}"}"
-    _tok="${_tok%"${_tok##*[![:space:]]}"}"
-    [ -z "$_tok" ] && continue
-    _out="$(_pi_csv_append "$_out" "$_tok")"
-  done < <(printf '%s\n' "$_PI_EXTENSION_NAV_TOOLS" | tr ',' '\n')
-  if _pi_csv_has "$_base" "edit" || _pi_csv_has "$_base" "write"; then
-    _out="$(_pi_csv_append "$_out" "ctx_edit")"
-    _out="$(_pi_csv_append "$_out" "ctx_patch")"
-  fi
-  if _pi_csv_has "$_base" "bash"; then
-    _out="$(_pi_csv_append "$_out" "ctx_shell")"
-  fi
-  printf '%s' "$_out"
-}
+# pi-subagents fails a child whose tools: names a tool it cannot load, and
+# foreground children never load ambient extensions, so agents list only Pi
+# builtins. Extension tools are opted in per machine via
+# subagents.agentOverrides.<agent>.tools.
 
 # Generate a pi-subagents Markdown agent from a Claude Code markdown agent.
 # pi-subagents loads project agents from .pi/agents/**/*.md (YAML frontmatter +
@@ -187,7 +141,7 @@ gen_pi_agent() {
   _skills="$(awk 'NR==1 && $0=="---"{fm=1; next} fm && $0=="---"{exit} fm && /^skills:[[:space:]]*$/{list=1; next} list && /^[[:space:]]*-[[:space:]]*/{sub(/^[[:space:]]*-[[:space:]]*/, ""); print; next} list{exit}' "$_src" | tr '\n' ' ' | sed 's/ $//; s/ /, /g')"
   [ -n "$_name" ] || _name="$(basename "$_src" .md)"
   [ -n "$_desc" ] || _desc="DevRites custom agent."
-  _tools="$(_pi_append_extension_tools "$(_pi_map_tools "$_tools_raw" "$_name")")"
+  _tools="$(_pi_map_tools "$_tools_raw" "$_name")"
   _desc_tmp="$TMP_GEN_DIR/pi-agent-desc-$(basename "$_src").txt"
   _desc_pi="$TMP_GEN_DIR/pi-agent-desc-$(basename "$_src").pi.txt"
   printf '%s' "$_desc" >"$_desc_tmp"