devrites 7.3.0 → 7.3.2

package/pack/generated/pi/skills/rite-clarify/SKILL.md

@@ -59,34 +59,34 @@ dispatch uses
    remains.
 5. **Write the verdict.** Write `Decision coverage: CLEAR` only after re-reading all inputs and confirming
    every material row has current evidence and an owner. Normal flow sets `phase=clarify` and
-   `next_action=/rite-temper`. A low-stakes spec — the significance trigger temper itself
-   skips (rite-temper step 1) — sets `next_action=/rite-define` instead. A contract-neutral later-phase return uses
-   the native restore below; changed behavior or acceptance routes to
-   `/rite-plan repair` instead. Stop without starting the next phase.
+   `next_action=/rite-temper`, or `/rite-define` for low-stakes specs temper skips.
+   Later-phase entries follow the ownership protocol below. Return inline verdicts
+   to the controlling caller; otherwise stop before starting the next phase.
 
 ## Native clarify cursor protocol
 
-The controlling root edits only cursor rows in `state.md`; it must preserve unrelated Markdown and the file's existing table/bullet presentation.
-
-- **Normal entry from Spec:** set `phase=clarify`, `status=running`, and
-  `next_action=/rite-clarify <slug>`; omit both return fields.
-- **Already in Clarify:** no-op. Do not overwrite an existing valid return
-  cursor.
-- **Later-phase entry:** only `temper`, `define`, `plan`, `vet`, `build`,
-  `converge`, `prove`, `polish`, `review`, `seal`, or `ship` may return. First
-  copy the current `phase` and non-empty `next_action` to `return_phase` and
-  `return_next_action`; then set `phase=clarify`, `status=running`, and
-  `next_action=/rite-clarify <slug>`. Missing/unknown cursor values fail closed
-  before any write.
-- **Contract-neutral restore:** after a fresh `Decision coverage: CLEAR`, require
-  `phase=clarify`, both return fields, a recognized later `return_phase`, and a
-  non-empty `return_next_action`. Restore those values to `phase` and
-  `next_action`, set `status=running`, and remove both return fields in the same
-  rewrite. Re-read the cursor and confirm the return rows are absent.
-- **Contract changed:** do not restore the saved cursor. Record drift and route
-  through `/rite-plan repair`, which owns the changed plan and next action.
-
-Never normalize or rewrite the rest of `state.md` while applying this protocol.
+Edit only cursor rows; preserve unrelated Markdown and table/bullet presentation.
+
+- **Validate before writes:** require no return fields or a complete pair:
+  recognized later `return_phase`, non-empty `return_next_action`. Invalid/half
+  pairs fail closed. Later phases: `temper`, `define`, `plan`, `vet`, `build`,
+  `converge`, `prove`, `polish`, `review`, `seal`, `ship`.
+- **Spec entry:** set `phase=clarify`, `status=running`,
+  `next_action=/rite-clarify <slug>`; omit return fields.
+- **Caller-owned pair:** pair with `phase!=clarify` requires a native
+  controlling caller; otherwise stop for ownership recovery. Run bounded Clarify
+  inline, preserve all cursor rows, and return its verdict to caller.
+  Contract changes require Plan repair and Vet before outer resume.
+- **Clarify-owned pair:** standalone later-phase entry without a pair saves current
+  phase/non-empty next action as the pair, then sets `phase=clarify`,
+  `status=running`, `next_action=/rite-clarify <slug>`. Missing/unknown values
+  fail closed. `phase=clarify` resumes without writes; its pair belongs to
+  standalone Clarify, not a nested caller.
+- **Restore:** after fresh `CLEAR`, only the owner restores its pair.
+  Contract-neutral standalone Clarify restores phase/next action, sets
+  `status=running`, atomically unsets both return fields, and re-reads to verify.
+  Contract changes retain the pair through Plan repair and Vet; only its owner
+  consumes it after readiness. Preserve caller pairs.
 
 ## Output
 

package/pack/generated/pi/skills/rite-prove/SKILL.md

@@ -35,8 +35,9 @@ TTHW, and exact signal-bearing errors; never assert DX (trigger `devex`).
   grammar/hashing. Spec Drift Guard owns revealed contract drift.
 - Root runs vetted gates/browser and records immutable evidence; proof runner
   validates it. Only the bounded wright fixes product source/tests.
-- **Prove remains the controlling caller** during technical backtracking. Save
-  its cursor; run Plan repair, Recovery Vet, remediation, and re-proof inline;
+- **Prove remains the source-local controlling caller** during technical backtracking;
+  under Autocomplete, repository scheduling stays with Autocomplete. Save
+  Prove's cursor; run Plan repair, Recovery Vet, remediation, and re-proof inline;
   consume nested boundaries; resume the failed rung. A strategy is spent after
   three no-progress attempts on the exact same fingerprint; escalate it per the
   [retry contract](../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve)
@@ -60,12 +61,15 @@ test changes.
 ## Workflow
 
 1. **Orient.** Read core, resolve source per [phase target binding](../devrites-lib/reference/parallel-workspaces.md#phase-target-binding), require `state.md`, and read its
-   cursor. On blocked Prove cold resume, reconcile retained consumptive evidence
-   and no-progress corrections before accepting terminal none; a distinct
-   fingerprint below cap resumes offline triage without another real action.
+   cursor. Under Autocomplete, return scheduling for its
+   [global frontier pass](../devrites-lib/reference/parallel-workspaces.md#continuous-global-frontier)
+   before cold/local recovery; preserve Prove's source-local return cursor.
+   On blocked Prove cold resume, reconcile retained consumptive evidence and
+   no-progress corrections before accepting terminal none; a distinct fingerprint
+   below cap resumes offline triage without another real action.
 2. **Freeze scope.** Read spec, tasks, state, test plan, and full diff. Require
-   every slice built except a [deferred slice](../rite-plan/reference/slicing.md#deferred-slice). Missing `test-plan.md` returns to Vet inline (Prove stays the controlling
-   caller) and resumes here; it never authorizes ad hoc proof.
+   every slice built except a [deferred slice](../rite-plan/reference/slicing.md#deferred-slice). Missing `test-plan.md` returns to Vet inline (Prove stays the source-local
+   controlling caller) and resumes here; it never authorizes ad hoc proof.
 3. **Approve commands.** If absent, use
    [test-command-discovery](reference/test-command-discovery.md) over repository
    manifests/CI. Discovery is evidence only: `test-plan.md` is the sole approved runtime
@@ -119,6 +123,10 @@ test changes.
 7. **Independent validation.** Fresh read-only `devrites-proof-runner` and
    `devrites-spec-reviewer`, in one parallel wave, judge the same candidate/commands/evidence/acceptance map.
    Neither runs commands; reject missing/stale, invented-ID, label-only or self-attested reports.
+   Under Autocomplete, before native wait return scheduling to its global frontier
+   pass, retaining both validator handles. Standalone Prove stays source-local.
+   Apply the shared protected validation window and recheck identities before
+   admitting accounts.
 8. **Map proof.** Reconcile verdicts under [acceptance-proof.md](reference/acceptance-proof.md).
    Every criterion/scenario/interaction/key link needs discriminating evidence or a
    blocker, including critical-path, observability, developer and wiring branches.

package/pack/generated/pi/skills/rite-review/SKILL.md

@@ -62,6 +62,9 @@ Pull these via `Read` when the diff demands them:
 0. Read `.pi/skills/devrites-lib/reference/standards/core.md` first (the always-on operating rules); pull the
    on-demand rules above as the diff demands them.
    Resolve source per [phase target binding](../devrites-lib/reference/parallel-workspaces.md#phase-target-binding) before loading workspace artifacts.
+   Under Autocomplete, return scheduling for its
+   [global frontier pass](../devrites-lib/reference/parallel-workspaces.md#continuous-global-frontier)
+   before cold/local recovery, preserving Review's source-local return cursor.
 1. Read `spec.md`, `tasks.md`, `state.md`, `decisions.md`,
    `touched-files.md`, `.devrites/principles.md` (if present: the binding invariants to score
    the diff against), and the `git diff`. For "what would this change break"
@@ -127,6 +130,10 @@ Pull these via `Read` when the diff demands them:
      [[`agents.md`](../devrites-lib/reference/standards/agents.md) § Result admission](../devrites-lib/reference/standards/agents.md#result-admission).
      Either `Outcome: gap` stops Review; silence, failure, or malformed output never
      becomes an empty findings list.
+   Under Autocomplete, before native wait return scheduling to its global frontier
+   pass with cohort handles retained; standalone Review stays source-local. Apply
+   the shared protected validation window and identity recheck before account
+   admission.
 4. **Reconcile, don't re-review.** With the two parallel reports in hand, the inline
    lead reconciles. It does **not** re-run the code-review axes over correctness /
    readability / architecture / maintainability that `devrites-code-reviewer` already

package/pack/generated/pi/skills/rite-vet/SKILL.md

@@ -78,6 +78,9 @@ plan declares a root-authored executable workflow file, read
    assumptions, and state. Require approved Plan and `Decision coverage: CLEAR`;
    otherwise stop for Define or Clarify. Check placement (`get_architecture`),
    blast radius (`trace_path`), and reuse (`search_graph`) per [`code-navigation.md`](../devrites-lib/reference/standards/code-navigation.md).
+   Under Autocomplete, return scheduling for its
+   [global frontier pass](../devrites-lib/reference/parallel-workspaces.md#continuous-global-frontier)
+   before cold/local recovery; preserve Vet's source-local return cursor.
 1. **Select depth.** Apply `reference/depth.md` exactly; never skip. Initial passes
    record engineering verdict and test-plan coverage. Valid Recovery rechecks
    retain prior depth; enter 1b.
@@ -87,12 +90,18 @@ plan declares a root-authored executable workflow file, read
    parallel under `../devrites-lib/reference/parallel-dispatch.md`: independent
    read-only passes on one frozen candidate. Missing required account blocks.
    Meanwhile run root steps 2–4, including step 3 preflight commands, on that
-   candidate; reconcile returned accounts.
+   candidate. Under Autocomplete, before native wait return scheduling to its
+   global frontier pass with reviewer handles retained; standalone Vet stays
+   source-local. Apply the shared protected validation window and identity
+   recheck before reconciling returned accounts.
 1b. **Recovery recheck.** Require valid return cursor, accepted prior finding,
    exact fingerprint/reproduction, repaired candidate identity, changed
    paths/criteria, affected drift/evidence, and the recorded delta self-check.
    Freeze that packet and dispatch each exact owning reviewer once,
    fresh/read-only, limited to it — all its open fingerprints in that dispatch.
+   Under Autocomplete, before native wait use the same controller pass and retained
+   handles as step 1a; standalone Vet stays source-local. Apply the same
+   protected-window account admission.
    Do not rerun broad inventory or unaffected reviewers. Close the prior
    fingerprint only with discriminating evidence plus an explicit
    correction-created regression verdict on the touched invariants (acyclic

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devrites",
-  "version": "7.3.0",
+  "version": "7.3.2",
   "description": "DevRites: a disciplined senior-engineer workflow pack for Claude Code, Codex, omp, pi, and Devin CLI",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://github.com/ViktorsBaikers/DevRites#readme",

package/scripts/dsh-generate.py

@@ -127,7 +127,7 @@ def generate(source, target):
         text = rewrite(path.read_text())
         fields, body = frontmatter(text)
         role = fields["name"]
-        permission = "workspace-write" if fields.get("permissionMode") == "acceptEdits" else "read-only"
+        permission = "workspace-write" if fields.get("permissionMode") == "acceptEdits" or role.startswith("overhaul-") else "read-only"
         raw = fields.get("tools", "Read, Grep, Glob, Bash, Skill" + (", Edit, Write" if permission == "workspace-write" else ""))
         tools = mapped_tools(raw)
         if permission == "read-only":

package/scripts/install-lib.sh

@@ -215,6 +215,35 @@ dr_acquire_engine() {
   return 1
 }
 
+# Stage only external Windows uninstall engines; the launcher removes the copy
+# after exit, leaving the configured global image unloaded and removable.
+dr_stage_uninstall_engine() {
+  case "$(uname -s 2>/dev/null)" in
+    MINGW*|MSYS*|CYGWIN*) : ;;
+    *) return 0 ;;
+  esac
+  if [ -n "${DR_ENGINE_TMP:-}" ] && [ "$DR_ENGINE_PATH" = "$DR_ENGINE_TMP/devrites-engine" ]; then
+    return 0
+  fi
+  if [ -z "${DR_ENGINE_TMP:-}" ]; then
+    _dr_old_umask="$(umask)"
+    umask 077
+    DR_ENGINE_TMP="$(mktemp -d "${TMPDIR:-/tmp}/devrites-engine-bootstrap.XXXXXX" 2>/dev/null)" || {
+      umask "$_dr_old_umask"
+      DR_ENGINE_TMP=""
+      DR_ACQUIRE_FAILURE="could not stage devrites-engine for Windows uninstall: temporary directory creation failed"
+      return 1
+    }
+    umask "$_dr_old_umask"
+  fi
+  _dr_uninstall_engine="$DR_ENGINE_TMP/devrites-engine-uninstall.exe"
+  if ! cp -- "$DR_ENGINE_PATH" "$_dr_uninstall_engine" || ! chmod +x "$_dr_uninstall_engine"; then
+    DR_ACQUIRE_FAILURE="could not stage devrites-engine for Windows uninstall: executable copy failed"
+    return 1
+  fi
+  DR_ENGINE_PATH="$_dr_uninstall_engine"
+}
+
 # True when $1 holds every file the engine requires from a host payload: the
 # union of hostpack.RequiredPayload for all hosts plus each host's standards.
 dr_payload_complete() {

package/uninstall.sh

@@ -31,6 +31,7 @@ DR_ENGINE_PATH=""; DR_ENGINE_TMP=""
 trap dr_cleanup_engine EXIT
 trap 'exit 1' HUP INT TERM
 dr_acquire_engine "$SELF_DIR" uninstall "$DEVRITES_REPO" || { echo "error: could not acquire devrites-engine${DR_ACQUIRE_FAILURE:+ ($DR_ACQUIRE_FAILURE)}." >&2; exit 1; }
+dr_stage_uninstall_engine || { echo "error: ${DR_ACQUIRE_FAILURE:-could not stage devrites-engine for Windows uninstall}." >&2; exit 1; }
 ENGINE="$DR_ENGINE_PATH"
 export DEVRITES_ENGINE_CLI="$ENGINE"
 "$ENGINE" uninstall --source-dir "$SELF_DIR" "$@"