mandrel 2.36.0 → 2.38.0

package/.agents/scripts/deliver-light.js

@@ -5,7 +5,7 @@
  *
  * A **thin entry point, not a second delivery engine.** It runs the
  * suitability gate, authors a minimal receipt `type::story`, and then hands off
- * to the SAME engine scripts `/deliver` uses:
+ * to the SAME engine scripts `/mandrel-deliver` uses:
  *
  *   suitability gate  →  inline receipt Story  →  single-story-init.js
  *     →  (agent implements + self-evals)  →  diff backstop
@@ -38,9 +38,9 @@
  * envelope with status `escalated` and **ends the session**. Before that it was
  * an ordinary gate envelope plus exit 2 — a warning a caller could walk past,
  * and one mandrel-bench 2.13.0 light-arm run did exactly that: it read the
- * escalation, invoked `/plan` in the same session, and delivered. In-session
+ * escalation, invoked `/mandrel-plan` in the same session, and delivered. In-session
  * planning under-decomposed (ONE Story against the scenario's 3-5 contract,
- * where a fresh `/plan` session on the identical seed authored four), so
+ * where a fresh `/mandrel-plan` session on the identical seed authored four), so
  * escalation silently produced the outcome the guard exists to prevent.
  * {@link module:lib/orchestration/story-deliver-terminal.buildEscalationTerminal}
  * carries the guarantees the schema then enforces.
@@ -88,7 +88,7 @@ Usage:
   deliver-light.js --backstop --story <id>
 
 The thin /deliver-light entry point: suitability gate → inline receipt Story →
-the same single-story-init.js / single-story-close.js engine /deliver uses.
+the same single-story-init.js / single-story-close.js engine /mandrel-deliver uses.
 
 The gate judges EFFORT and RISK, not artifact counts: N instances of one
 mechanical edit is one kind at N sites. It rejects only clearly-epic work; the
@@ -102,9 +102,9 @@ Gate options:
   --kinds <csv>      Distinct KINDS of change (default: one per assumption, so
                      N same-shaped edits count once).
   --magnitude <m>    Coarse effort bucket: trivial | moderate | substantial
-                     (default moderate; substantial routes to /plan).
+                     (default moderate; substantial routes to /mandrel-plan).
   --uncertainty <u>  determined (the request fixes the shape) | needs-design
-                     (default determined; needs-design routes to /plan).
+                     (default determined; needs-design routes to /mandrel-plan).
   --route <r>        Ledgered model verdict route: lite | full.
   --reason <text>    Recorded reason for a lite verdict (required for lite).
   --amends <#id>     Mark this as an amendment of an existing issue.
@@ -125,7 +125,7 @@ Backstop options:
                      change's IMPLEMENTATION half by magnitude (changed lines +
                      file sprawl); test/doc/baseline companions are exempt from
                      the counts but still matched for sensitive paths. A block
-                     emits a nextCommand recycling the receipt through /plan.
+                     emits a nextCommand recycling the receipt through /mandrel-plan.
   --story <id>       Story issue number whose story-<id> branch to diff.
 
   --pretty           Pretty-print the JSON envelope.
@@ -280,7 +280,7 @@ export async function createLightReceipt({
 }
 
 /**
- * The engine hand-off — the SAME scripts `/deliver` uses. Named here as
+ * The engine hand-off — the SAME scripts `/mandrel-deliver` uses. Named here as
  * commands, never reimplemented: this is the whole of deliver-light's
  * relationship to worktree/branch/lease/PR/merge mechanics.
  *
@@ -397,7 +397,7 @@ export async function runGateMode(values, deps = {}) {
   if (values.yes === true && hasOperatorOverride(values)) {
     process.stderr.write(HELP);
     throw new Error(
-      '[deliver-light] --operator-proceed-light is attended-only and cannot be combined with --yes: an unattended run has no operator whose answer this is, and over-scope must fail closed to /plan',
+      '[deliver-light] --operator-proceed-light is attended-only and cannot be combined with --yes: an unattended run has no operator whose answer this is, and over-scope must fail closed to /mandrel-plan',
     );
   }
 
@@ -423,7 +423,7 @@ export async function runGateMode(values, deps = {}) {
     });
     emitTerminalFn(envelope);
     Logger.warn(
-      `[deliver-light] ESCALATED to /plan — this session ENDS here; run ${envelope.nextCommand} in a FRESH session: ${gate.outcome.reasons.join('; ')}`,
+      `[deliver-light] ESCALATED to /mandrel-plan — this session ENDS here; run ${envelope.nextCommand} in a FRESH session: ${gate.outcome.reasons.join('; ')}`,
     );
     return exitCodeForTerminal(envelope);
   }

package/.agents/scripts/deliver-recover.js

@@ -12,7 +12,7 @@
  * is the thing they cannot act on.
  *
  * The strand this exists for above all others is the **merged-but-label-stale**
- * Story: a `/deliver` re-run refuses it outright, because
+ * Story: a `/mandrel-deliver` re-run refuses it outright, because
  * `single-story-init.js` hard-errors on an already-closed Story. Before this
  * surface, that Story had no automated way back.
  *

package/.agents/scripts/drain-pending-cleanup.js

@@ -8,7 +8,7 @@
  * any still-stuck entries by enumerating the processes holding handles
  * inside the worktree path and terminating them.
  *
- * Invoked by `/deliver` and `/plan`
+ * Invoked by `/mandrel-deliver` and `/mandrel-plan`
  * (via `drainPendingCleanupAtBoot` → `worktree-sweep.js`), and
  * `story-close` so the pending-cleanup ledger drains automatically
  * across the sprint lifecycle. Operators can also run it standalone:
@@ -39,6 +39,18 @@ const progress = Logger.createProgress('drain-pending-cleanup', {
   stderr: false,
 });
 
+/**
+ * The escalation posture, as a real boolean. `allowNegative` resolves
+ * `--no-escalate` to boolean `false`, but under `strict: false` the other
+ * documented spelling `--escalate=false` arrives as the *string* `'false'`,
+ * which is truthy while `forceDrainPendingCleanup` gates on `!escalate`.
+ * Both must reach the engine as a boolean or the flag is advertised and inert.
+ *
+ * @param {boolean|string|undefined} value
+ * @returns {boolean}
+ */
+const escalateFrom = (value) => value !== false && value !== 'false';
+
 /**
  * The drain core, extracted from the CLI shell so the whole decision table —
  * empty manifest, dry-run report, drain + escalate reporting — is reachable
@@ -83,6 +95,11 @@ export async function runDrainPendingCleanup(
       'worktree-root': { type: 'string' },
     },
     strict: false,
+    // `node:util.parseArgs` honours a `--no-<flag>` spelling ONLY when this is
+    // set. Without it `--no-escalate` landed in `values['no-escalate']` and
+    // left `values.escalate` at its `true` default, so the documented passive
+    // drain performed the forced removal it promises to suppress.
+    allowNegative: true,
   });
 
   const config = resolveConfigImpl();
@@ -126,7 +143,7 @@ export async function runDrainPendingCleanup(
     repoRoot: projectRoot,
     worktreeRoot,
     git: gitImpl,
-    escalate: values.escalate,
+    escalate: escalateFrom(values.escalate),
     logger: {
       info: (m) => progressImpl('DRAIN', m),
       warn: (m) => progressImpl('DRAIN', `⚠️ ${m}`),

package/.agents/scripts/evidence-gate.js

@@ -3,7 +3,7 @@
 /**
  * evidence-gate.js — evidence-aware wrapper around a single shell gate.
  *
- * Tech Spec #819 §"Evidence record (Story 7)" — `/deliver` Phase 3
+ * Tech Spec #819 §"Evidence record (Story 7)" — `/mandrel-deliver` Phase 3
  * (close-validation) runs `npm run lint` and `npm test` against the Epic
  * branch before opening the PR.
  * If the same gate has already passed against the current `git rev-parse

package/.agents/scripts/generate-workflows-doc.js

@@ -93,7 +93,7 @@ export function renderWorkflowsDoc(catalog, loopCatalog = []) {
     'Every command file lives at `.agents/workflows/<name>.md` and is projected',
     'into a flat `.claude/commands/` tree by `npm run sync:commands` (kept',
     'current at install time and on every `mandrel sync`/`update`) so it shows',
-    'up as a bare `/<name>` slash command (e.g. `/deliver`). The projection',
+    'up as a bare `/<name>` slash command (e.g. `/mandrel-deliver`). The projection',
     'writes only `.claude/commands/<name>.md` — there is no plugin manifest and no',
     'marketplace listing. The commands load in every Claude Code environment.',
     '',

package/.agents/scripts/lib/audit-suite/selector.js

@@ -701,7 +701,7 @@ export function changeSetLacksSiblingTest(changedFiles) {
  *   callers MUST pass the requested Epic's own branch ref (e.g.
  *   `refs/heads/epic/<id>`) so the change set is pinned to that Epic's branch
  *   rather than whatever HEAD the shared checkout happens to sit on. Under two
- *   concurrent `/deliver` runs sharing one checkout, diffing against
+ *   concurrent `/mandrel-deliver` runs sharing one checkout, diffing against
  *   `HEAD` silently resolves the *other* Epic's change set (Story #3362). When
  *   `headRef` cannot be resolved in the repo, the selector returns a
  *   `degraded: true` envelope (or hard-fails in gate-mode) instead of diffing

package/.agents/scripts/lib/audit-to-stories/audit-label-taxonomy.js

@@ -140,7 +140,7 @@ const AUDIT_STORY_AXIS_LABELS = Object.freeze([
     name: AGENT_LABELS.READY,
     color: hex(LABEL_COLORS.AGENT),
     description:
-      'Parking state — frozen dispatch manifest exists; awaiting local /deliver',
+      'Parking state — frozen dispatch manifest exists; awaiting local /mandrel-deliver',
   },
   {
     name: RISK_LABELS.HIGH,

package/.agents/scripts/lib/audit-to-stories/build-story-body.js

@@ -292,7 +292,7 @@ export function buildStoryBody({ group, edges = [], issueByGroupKey = null }) {
   };
 
   // The `---` / `blocked by #N` footer is the canonical serializer's own, so
-  // the body round-trips through `parse()` and `/deliver`'s resolver reads the
+  // the body round-trips through `parse()` and `/mandrel-deliver`'s resolver reads the
   // ordering from the same place it reads every other Story's.
   const canonicalSections = serialize(storyBody, {
     includeFooter: storyBody.depends_on.length > 0,

package/.agents/scripts/lib/audit-to-stories/seed-from-findings.js

@@ -1,8 +1,8 @@
 /**
  * lib/audit-to-stories/seed-from-findings.js
  *
- * Build the `/plan --seed`-shaped one-pager markdown that the audit-to-
- * stories Single-plan grouping path emits for `/plan` to consume.
+ * Build the `/mandrel-plan --seed`-shaped one-pager markdown that the audit-to-
+ * stories Single-plan grouping path emits for `/mandrel-plan` to consume.
  *
  * The seed renders the canonical one-pager sections so the authoring
  * pass can sharpen it without having to invent context:
@@ -10,7 +10,7 @@
  *   - Recommended Direction (rollup of recommendations by dimension)
  *   - Key Assumptions (carries the source-report links forward)
  *   - MVP Scope (the proposed Stories, one bullet per group)
- *   - Key Files (explicit file paths so `/plan` authoring has concrete
+ *   - Key Files (explicit file paths so `/mandrel-plan` authoring has concrete
  *     anchors)
  *   - Not Doing (out-of-scope items by convention)
  *
@@ -97,8 +97,8 @@ function formatMVPScope(groups) {
       const dims = g.dimensions.join(' / ');
       const file = g.files[0] ? ` (\`${g.files[0]}\`)` : '';
       // Carry each group's fingerprint (and location-based semantic-key)
-      // footer into the seed so a Story authored from it via `/plan` inherits
-      // the dedup identity — without this the recommended `/plan --seed-file`
+      // footer into the seed so a Story authored from it via `/mandrel-plan` inherits
+      // the dedup identity — without this the recommended `/mandrel-plan --seed-file`
       // path is invisible to the next sweep's dedup (Story #4626). The footers
       // are HTML comments, so they never render in the visible one-pager but
       // stay machine-readable for the dedup probe.

package/.agents/scripts/lib/audit-to-stories/wire-dependencies.js

@@ -17,7 +17,7 @@
  * edges**. Both halves are written:
  *
  *   1. The **body footer** (`---` / `blocked by #N`) — canonical, parsed by
- *      `/deliver`'s resolver, and the fallback when the dependencies API is
+ *      `/mandrel-deliver`'s resolver, and the fallback when the dependencies API is
  *      unavailable.
  *   2. The **native `blocked_by` relation** — visible in the GitHub UI,
  *      readable without parsing markdown, and settable by an operator later.

package/.agents/scripts/lib/baselines/components.js

@@ -19,11 +19,41 @@
 // the literal `*` are treated as the whole-repo rollup and always match
 // every row regardless of declared globs.
 
-import { minimatch } from 'minimatch';
+import { Minimatch } from 'minimatch';
 
 /** The default components map, used when a gate omits `components`. */
 const DEFAULT_COMPONENTS = Object.freeze({ '*': Object.freeze(['**']) });
 
+/**
+ * Compiled-matcher cache for `groupRows`, keyed on the glob string.
+ *
+ * `groupRows` is called once per gate over the whole baseline row set — tens
+ * of thousands of rows for `crap.json` — and the functional `minimatch()` it
+ * used re-parsed each component glob for every single row. The component
+ * globs come from config, so the distinct set is small and immutable; caching
+ * the compiled matcher turns an O(rows × globs) parse into an O(globs) one
+ * (Story #5109). Matching semantics are unchanged: same patterns, same
+ * `{ dot: true }`.
+ *
+ * @type {Map<string, import('minimatch').Minimatch>}
+ */
+const GLOB_MATCHER_CACHE = new Map();
+
+/**
+ * Compile (once) the `Minimatch` for one glob.
+ *
+ * @param {string} glob
+ * @returns {import('minimatch').Minimatch}
+ */
+function matcherFor(glob) {
+  let matcher = GLOB_MATCHER_CACHE.get(glob);
+  if (!matcher) {
+    matcher = new Minimatch(glob, { dot: true });
+    GLOB_MATCHER_CACHE.set(glob, matcher);
+  }
+  return matcher;
+}
+
 /**
  * Resolve the components map for a single gate config.
  *
@@ -112,7 +142,7 @@ export function groupRows(rows, components, keyField = 'path') {
       const list = Array.isArray(globs) ? globs : [];
       for (const glob of list) {
         if (typeof glob !== 'string' || glob.length === 0) continue;
-        if (minimatch(normalized, glob, { dot: true })) {
+        if (matcherFor(glob).match(normalized)) {
           buckets[name].push(row);
           break;
         }

package/.agents/scripts/lib/baselines/env-overrides.js

@@ -16,7 +16,7 @@ import { Logger } from '../Logger.js';
 // rounding) routinely drifts +/- 0.05 to 0.3 on otherwise-unchanged files —
 // well below the threshold of "actually less maintainable." A 0.5 floor
 // stops the pre-push hook from auto-ratcheting the baseline on noise.
-export const MI_DEFAULT_TOLERANCE = 0.5;
+const MI_DEFAULT_TOLERANCE = 0.5;
 
 /**
  * Pure helper: resolve the effective CRAP config by layering env-var

package/.agents/scripts/lib/bdd-runner-detect.js

@@ -13,7 +13,7 @@
  * The verification is **static**: we inspect `package.json` for a known BDD
  * runner dependency, and consult a small lookup table of which runners
  * support which pending/skip tag. We do not boot the runner. This keeps
- * `/plan` Phase 7 hermetic and offline.
+ * `/mandrel-plan` Phase 7 hermetic and offline.
  *
  * **Workspace awareness (Story #2956).** In a pnpm / npm / yarn monorepo the
  * BDD runner is rarely a root devDependency — it lives in the workspace

package/.agents/scripts/lib/bdd-scenario-budget.js

@@ -1,6 +1,6 @@
 /**
  * bdd-scenario-budget.js — envelope byte budget for the `bddScenarios`
- * `/plan` context-envelope field (Story #4977).
+ * `/mandrel-plan` context-envelope field (Story #4977).
  *
  * `bdd-scenario-scanner.js`'s `scanBddScenarios` stays a faithful, uncapped
  * index of the project's `.feature` corpus — that scan is also used

package/.agents/scripts/lib/bdd-scenario-scanner.js

@@ -1,5 +1,5 @@
 /**
- * bdd-scenario-scanner.js — Gherkin scenario index for /plan Phase 7.
+ * bdd-scenario-scanner.js — Gherkin scenario index for /mandrel-plan Phase 7.
  *
  * Story #2637 (sibling to #2636's file-assumption gate; the #2634 and #2635
  * planner-grounding siblings were retired in Story #4811). The Acceptance
@@ -8,7 +8,7 @@
  * alone — it never inspects the consumer project's existing `.feature`
  * files. Planned ACs frequently duplicate scenarios that already exist or
  * re-specify behaviour the codebase already proves; the duplication is
- * only discovered (at best) during `/deliver` or (at worst) after
+ * only discovered (at best) during `/mandrel-deliver` or (at worst) after
  * a redundant PR ships.
  *
  * `scanBddScenarios` walks every configured feature root, parses each
@@ -21,7 +21,7 @@
  * have a matching scenario.
  *
  * Determinism is load-bearing: the matcher is keyword-based, not
- * embedding-based, so re-running `/plan` against the same
+ * embedding-based, so re-running `/mandrel-plan` against the same
  * acceptance spec produces the same disposition annotations.
  */
 

package/.agents/scripts/lib/bdd-step-index.js

@@ -9,7 +9,7 @@
  *   1. **Discovery** — which files under a scope's `stepRoots` hold step
  *      definitions, and which `.feature` files sit under its `featureRoots`.
  *      Feature discovery is delegated to `listFeatureFiles` in
- *      `bdd-scenario-scanner.js` rather than copied: /plan's scenario index and
+ *      `bdd-scenario-scanner.js` rather than copied: /mandrel-plan's scenario index and
  *      this gate must agree on what counts as a feature file, and two walkers
  *      would eventually disagree.
  *   2. **Matching** — turn each definition's Cucumber expression or regular

package/.agents/scripts/lib/bootstrap/branch-protection.js

@@ -7,7 +7,7 @@
  *   - `enforce_admins: true` — admins do not bypass the prGate suite.
  *   - `required_pull_request_reviews.required_approving_review_count: 0` —
  *     CI is the gate; the operator monitors and iterates the open PR
- *     to green via `/deliver`'s Phase 7 watch loop.
+ *     to green via `/mandrel-deliver`'s Phase 7 watch loop.
  *
  * Behaviour rules
  * ---------------
@@ -43,7 +43,7 @@ const TARGET_APPROVAL_COUNT = 0;
  * return value is a structured diff suitable for `hitlConfirm` so the
  * operator sees exactly what would flip.
  */
-export function diffProtection(current, targetContexts) {
+function diffProtection(current, targetContexts) {
   if (!current) return null; // create-from-scratch path; no diff needed.
 
   const diff = {};

package/.agents/scripts/lib/bootstrap/commit-push.js

@@ -112,8 +112,8 @@ export function buildManualInstructions({ stagePaths, baseBranch }) {
     `  git push -u origin ${baseBranch}`,
     '',
     'Story delivery runs in git worktrees that check out tracked files only,',
-    'so the .agents/ wiring MUST be committed before any /deliver or',
-    '/deliver run — otherwise the worktree has no scripts and breaks.',
+    'so the .agents/ wiring MUST be committed before any /mandrel-deliver or',
+    '/mandrel-deliver run — otherwise the worktree has no scripts and breaks.',
   ].join('\n');
 }
 

package/.agents/scripts/lib/bootstrap/install-ledger.js

@@ -80,7 +80,7 @@ const TARGET_TO_PHASE = Object.freeze({
  * @param {Record<string, { action?: string }>} [report]
  * @returns {string|undefined}
  */
-export function resolveExecutedAction(entry, report) {
+function resolveExecutedAction(entry, report) {
   if (!report) return undefined;
   const phaseName = TARGET_TO_PHASE[entry.target];
   if (!phaseName) return undefined;

package/.agents/scripts/lib/bootstrap/issue-forms-template.js

@@ -325,7 +325,7 @@ function renderConformanceWorkflow() {
 # Generated by agents-bootstrap-github. Runs the canonical story-body parser
 # against human-opened type::story issues and comments when the
 # body does not round-trip, instead of letting the supported human entry
-# points (e.g. /plan from an existing Epic ID) fail silently later. The lint
+# points (e.g. /mandrel-plan from an existing Epic ID) fail silently later. The lint
 # informs; it never fails the issue. Re-run /agents-bootstrap-github to refresh.
 name: Issue Body Conformance
 

package/.agents/scripts/lib/bootstrap/prompt.js

@@ -28,7 +28,7 @@ import readline from 'node:readline/promises';
  * Flags the bootstrap CLI accepts. Keep this list in sync with the
  * `--help` text in bootstrap.js.
  */
-export const KNOWN_FLAGS = Object.freeze({
+const KNOWN_FLAGS = Object.freeze({
   string: [
     'owner',
     'repo',

package/.agents/scripts/lib/bootstrap/quality-bootstrap.js

@@ -41,7 +41,7 @@ import { deepEqual } from '../json-utils.js';
  * the hook-installer can detect a verbatim framework hook (overwrite-safe)
  * vs a custom hook (preserve and warn).
  */
-export const FRAMEWORK_PRE_COMMIT = `node scripts/check-version-sync.js
+const FRAMEWORK_PRE_COMMIT = `node scripts/check-version-sync.js
 npx lint-staged
 # Story #1395 / Epic #1386: catch MI/CRAP drift at git-commit time so the
 # agent refactors before the diff is closed. quality:preview wraps both gates
@@ -78,7 +78,7 @@ export const PRE_COMMIT_MARKER =
  * when the keys are absent. Mirrors `.agents/docs/agentrc-reference.json` — keep in
  * sync when those numbers move.
  */
-export const QUALITY_CONFIG_DEFAULTS = Object.freeze({
+const QUALITY_CONFIG_DEFAULTS = Object.freeze({
   codingGuardrails: Object.freeze({
     cyclomaticFlag: 8,
     cyclomaticMustFix: 12,

package/.agents/scripts/lib/checks/core-bare-clean.js

@@ -26,7 +26,7 @@ export default {
   severity: 'blocker',
   // 'npm-test' keeps the test-wrapper preflight's refusal claim true: a
   // poisoned shared config is caught before a suite (or N concurrent
-  // /deliver workers) inherits it, not only at close/retro time (#4580).
+  // /mandrel-deliver workers) inherits it, not only at close/retro time (#4580).
   scope: ['story-close', 'retro', 'npm-test'],
   autoCorrect: 'refuse-and-print',
   detect(state) {

package/.agents/scripts/lib/checks/loop-health.js

@@ -42,7 +42,7 @@ import { validateSignal } from '../observability/signal-validator.js';
  * a health probe, not an exhaustive audit — the most recent window is a
  * representative sample that keeps the read bounded on long streams.
  */
-export const MAX_SAMPLE_LINES = 200;
+const MAX_SAMPLE_LINES = 200;
 
 /**
  * Locate the most-recently-touched `run-<id>` temp tree under

package/.agents/scripts/lib/checks/story-init-not-backgrounded.js

@@ -11,7 +11,7 @@
  *
  * Scope: 'story-close', 'retro'. The check runs at every
  * preflight surface that has the opportunity to invoke Story init —
- * primarily `/deliver`'s init step — and surfaces as a retro audit
+ * primarily `/mandrel-deliver`'s init step — and surfaces as a retro audit
  * signal if the failure mode resurfaces during a sprint.
  *
  * The check is `refuse-and-print`. Auto-rewriting an orchestration call

package/.agents/scripts/lib/cli-args.js

@@ -210,7 +210,6 @@ export function parseSprintArgs(
       'recut-of': { type: 'string' },
       resume: { type: 'boolean', default: false },
       restart: { type: 'boolean', default: false },
-      'no-evidence': { type: 'boolean', default: false },
     },
     allowPositionals: true,
     strict: false,
@@ -254,13 +253,12 @@ export function parseSprintArgs(
       process.env.AGENT_WORKTREE_ROOT ||
       null,
     recutOf: parseTicketId(values['recut-of']),
-    // Story #4253: pre-resolved Epic linkage threaded by the /deliver
+    // Story #4253: pre-resolved Epic linkage threaded by the /mandrel-deliver
     // fan-out so `single-story-init.js` can skip redundant Epic lookups when
     // the parent already threaded Epic context (pre-v2; field retained for
     // CLI compatibility).
     resume: values.resume ?? false,
     restart: values.restart ?? false,
-    noEvidence: values['no-evidence'] ?? false,
   };
 
   parsed.ticketId =

package/.agents/scripts/lib/close-validation/gates.js

@@ -392,7 +392,7 @@ export const DEFAULT_GATES = buildDefaultGates();
  * state, no overlapping ports/sockets). Safe to run concurrently — see
  * `runCloseValidation` for the Promise.all + AbortController plumbing.
  */
-export const INDEPENDENT_GATE_NAMES = new Set(['lint', 'format', 'typecheck']);
+const INDEPENDENT_GATE_NAMES = new Set(['lint', 'format', 'typecheck']);
 
 /**
  * Partition a gate list into the parallel-safe set and the order-sensitive

package/.agents/scripts/lib/close-validation/process.js

@@ -113,7 +113,7 @@ const MARKER_PROBE_TAIL_LINES = 32;
  * @param {string} output - Combined stdout/stderr captured from the gate child.
  * @returns {boolean}
  */
-export function isBiomeNoFilesProcessed(output) {
+function isBiomeNoFilesProcessed(output) {
   return (
     typeof output === 'string' && output.includes(BIOME_NO_FILES_PROCESSED)
   );

package/.agents/scripts/lib/command-header.js

@@ -36,7 +36,7 @@ export function applyHeader(content, header) {
  * True when a workflow opts out of slash-command projection via a
  * `command: false` key in its YAML frontmatter (#4482). Used for dual-use
  * lens files (e.g. `audit-security.md`) that stay in
- * the payload as `/deliver` audit-suite prompts but must NOT surface as
+ * the payload as `/mandrel-deliver` audit-suite prompts but must NOT surface as
  * standalone slash commands because the host ships a native equivalent.
  *
  * Both `sync-claude-commands.js` (projection + orphan-reap) and the

package/.agents/scripts/lib/config/delivery-routing.js

@@ -36,7 +36,7 @@ export const DELIVERY_ROUTING_DEFAULTS = Object.freeze({
   /** @type {'minimal'|'standard'|'strict'} */
   ceremonyProfile: 'standard',
   /**
-   * When true (default), attended `/deliver` lands through merge in one
+   * When true (default), attended `/mandrel-deliver` lands through merge in one
    * close (`--wait-merge` semantics) instead of stopping at `agent::closing`.
    * Operators opt out per-run with `--no-wait-merge`.
    */

package/.agents/scripts/lib/config/explain.js

@@ -266,7 +266,7 @@ const PREFIX_MEANINGS = Object.freeze([
 const BLOCK_MEANINGS = Object.freeze({
   project: 'Project identity, paths, and command configuration.',
   github: 'GitHub provider identity and merge/notification policy.',
-  planning: 'Inputs and guardrails for /plan.',
+  planning: 'Inputs and guardrails for /mandrel-plan.',
   delivery: 'Execution, isolation, quality, and CI settings for delivery.',
   qa: 'Agent-driven QA harness contract.',
 });

package/.agents/scripts/lib/config/runners.js

@@ -23,7 +23,7 @@ export const DEFAULT_DECOMPOSER = Object.freeze({
  * the GitHub API with concurrent label writes, while still allowing a
  * small ready-set fan-out. Operators who want strictly sequential delivery
  * should set `delivery.deliverRunner.concurrencyCap: 1`. Raising the cap
- * reduces wall-clock time where dependencies allow. See `deliver.md` and
+ * reduces wall-clock time where dependencies allow. See `mandrel-deliver.md` and
  * `agentrc-reference.json` `delivery.deliverRunner.concurrencyCap`.
  *
  * Story #4545 removed the sibling `verifyConcurrencyCap`: the
@@ -46,7 +46,7 @@ const DEFAULT_DELIVER_RUNNER = Object.freeze({
 });
 
 /**
- * Default auto-fix loop ceilings for /deliver code-review. Operators
+ * Default auto-fix loop ceilings for /mandrel-deliver code-review. Operators
  * override via `delivery.codeReview.*` in `.agentrc.json` (Story #2611,
  * Epic #2586; `autoFixSeverity` default `'medium'` per Story #4399).
  */

package/.agents/scripts/lib/config/runtime.js

@@ -77,7 +77,7 @@ export function resolveWorkingPath({
 
 /**
  * One-shot environment-aware runtime resolution. Returns the trio of runtime
- * signals consumed across `/deliver`: whether worktree isolation is on
+ * signals consumed across `/mandrel-deliver`: whether worktree isolation is on
  * for this process, the session id for claim labels, and whether we're in a
  * Claude Code web session. Each signal also records its **source** so the
  * `story-init` startup log can name why the value is what it is.

package/.agents/scripts/lib/config/sync-agentrc.js

@@ -173,7 +173,7 @@ export function collectRedundantAdvisories(
  * @param {string} dottedPath
  * @returns {boolean}
  */
-export function isLeafSchemaRemovable(rootSchema, dottedPath) {
+function isLeafSchemaRemovable(rootSchema, dottedPath) {
   if (!rootSchema || typeof rootSchema !== 'object') return true;
   const parts = dottedPath.split('.');
   let cursor = rootSchema;

package/.agents/scripts/lib/config/temp-paths.js

@@ -41,7 +41,7 @@
  * parent of `git rev-parse --git-common-dir`) rather than `process.cwd()`.
  * Without this, a story child that `cd`s into `.worktrees/story-<id>/` before
  * emitting a lifecycle record would append it to
- * `<worktree>/temp/run-N/lifecycle.ndjson`, while the `/deliver` host
+ * `<worktree>/temp/run-N/lifecycle.ndjson`, while the `/mandrel-deliver` host
  * (running from the main checkout) reads the main-checkout copy — so the
  * host never sees the child's records (the audit-#3513 bug class; its
  * original `story.heartbeat` instance is gone with that emitter, but the
@@ -372,7 +372,7 @@ function storyTerminalEnvelopeName(sid) {
  * `close-gates-<sid>.log`, and `deliver-recover.js` reads the pair together to
  * tell a finished close from a live one. Sharing `orchestrationLogDir` also
  * means it inherits main-checkout anchoring for free — the close runs inside
- * `.worktrees/story-<sid>/` while the `/deliver` host reads from the main
+ * `.worktrees/story-<sid>/` while the `/mandrel-deliver` host reads from the main
  * checkout, and an un-anchored path would put the envelope somewhere the
  * router never looks.
  *

package/.agents/scripts/lib/config-settings-schema-delivery.js

@@ -66,13 +66,13 @@ const DOCS_FRESHNESS_SCHEMA = {
  */
 const DELIVER_RUNNER_SCHEMA = {
   type: 'object',
-  description: 'Bounded-concurrency knob for the /deliver fan-out.',
+  description: 'Bounded-concurrency knob for the /mandrel-deliver fan-out.',
   properties: {
     concurrencyCap: {
       type: 'integer',
       minimum: 1,
       description:
-        'Maximum ready Stories dispatched by /deliver at once. Default 3. Moderate by design — keeps host-quota consumption predictable while allowing a small ready-set fan-out. Set 1 for strictly sequential delivery; raise further on hosts with adequate parallel-agent quota. See deliver.md for the sequencing model and throughput tradeoff.',
+        'Maximum ready Stories dispatched by /mandrel-deliver at once. Default 3. Moderate by design — keeps host-quota consumption predictable while allowing a small ready-set fan-out. Set 1 for strictly sequential delivery; raise further on hosts with adequate parallel-agent quota. See deliver.md for the sequencing model and throughput tradeoff.',
       // getRunners() resolves this from its own DEFAULT_DELIVER_RUNNER
       // constant, not from this annotation; the parity suite asserts the two
       // agree.
@@ -637,7 +637,7 @@ const TEMP_RETENTION_SCHEMA = {
 export const DELIVERY_SCHEMA = {
   type: 'object',
   description:
-    'Everything `/deliver` and `single-story-close` consume: execution timeouts, worktree isolation, runner concurrency, docs freshness, signals, quality gates, merge/CI watch, review ceremony, and the feedback loop.',
+    'Everything `/mandrel-deliver` and `single-story-close` consume: execution timeouts, worktree isolation, runner concurrency, docs freshness, signals, quality gates, merge/CI watch, review ceremony, and the feedback loop.',
   properties: {
     execution: EXECUTION_SCHEMA,
     docsFreshness: DOCS_FRESHNESS_SCHEMA,