mandrel 2.37.0 → 2.38.0

package/.agents/rules/git-conventions-reference.md

@@ -95,7 +95,7 @@ signature is worth naming:
 **Invariant (stated in the core): the delivering flow owns tidying the local
 checkout — reaping its own merged refs and fast-forwarding the base branch.
 `/git-cleanup` is a recovery tool, not a routine chore.** The outcome every
-delivering flow (`/deliver`, `/git-deliver`) guarantees, with the mechanics
+delivering flow (`/mandrel-deliver`, `/git-deliver`) guarantees, with the mechanics
 owned by `boot-sweep.js` / `git-cleanup.js`:
 
 - **`main` is fast-forwarded** by the flow itself in its cleanup phase, so the
@@ -104,7 +104,7 @@ owned by `boot-sweep.js` / `git-cleanup.js`:
 - **Merged local refs are reaped** at the next workflow boot's protected sweep
   (`boot-sweep.js`) — every local branch whose PR is already merged, skipping
   any candidate with unpushed work, a dirty worktree, or a still-open parent
-  ticket. `/plan` and `/git-deliver` widen the sweep's `--include` scope beyond
+  ticket. `/mandrel-plan` and `/git-deliver` widen the sweep's `--include` scope beyond
   the default `story-*` to their own branch namespaces at their boot call site.
 - **Content-merged branches are report-only.** A branch detected only via the
   weaker content-equivalence signal (`detectedBy: 'content-merged'` — content
@@ -149,13 +149,13 @@ different hazards:
 - **Recognition signature**: close aborts naming stray files in the main
   checkout that intersect the Story's diff. **Resolution**: relocate those
   edits under the worktree, restore the main checkout
-  (`git -C <main-repo> checkout -- <files>`), then re-run `/deliver <storyId>`.
+  (`git -C <main-repo> checkout -- <files>`), then re-run `/mandrel-deliver <storyId>`.
   Never `git reset --hard` or `git checkout --force` to clear the way.
 
 ## Meta Labels (Retrospective Signal Routing)
 
 Two `meta::*` labels route retrospective signals into durable substrates so
-the `/plan` Phase 0 fetcher (see
+the `/mandrel-plan` Phase 0 fetcher (see
 [`prior-feedback-fetcher.js`](../scripts/lib/feedback-loop/prior-feedback-fetcher.js))
 can surface open feedback issues to the planner. Both labels live in
 [`label-constants.js`](../scripts/lib/label-constants.js) under the

package/.agents/schemas/agentrc.schema.json

@@ -298,7 +298,7 @@
     },
     "planning": {
       "type": "object",
-      "description": "Inputs to `/plan`: risk escalation heuristics, ceremony-lite routing, and the cross-Story conflict-finding severity gates.",
+      "description": "Inputs to `/mandrel-plan`: risk escalation heuristics, ceremony-lite routing, and the cross-Story conflict-finding severity gates.",
       "properties": {
         "riskHeuristics": {
           "oneOf": [
@@ -440,7 +440,7 @@
     },
     "delivery": {
       "type": "object",
-      "description": "Everything `/deliver` and `single-story-close` consume: execution timeouts, worktree isolation, runner concurrency, docs freshness, signals, quality gates, merge/CI watch, review ceremony, and the feedback loop.",
+      "description": "Everything `/mandrel-deliver` and `single-story-close` consume: execution timeouts, worktree isolation, runner concurrency, docs freshness, signals, quality gates, merge/CI watch, review ceremony, and the feedback loop.",
       "properties": {
         "execution": {
           "type": "object",
@@ -521,12 +521,12 @@
         },
         "deliverRunner": {
           "type": "object",
-          "description": "Bounded-concurrency knob for the /deliver fan-out.",
+          "description": "Bounded-concurrency knob for the /mandrel-deliver fan-out.",
           "properties": {
             "concurrencyCap": {
               "type": "integer",
               "minimum": 1,
-              "description": "Maximum ready Stories dispatched by /deliver at once. Default 3. Moderate by design — keeps host-quota consumption predictable while allowing a small ready-set fan-out. Set 1 for strictly sequential delivery; raise further on hosts with adequate parallel-agent quota. See deliver.md for the sequencing model and throughput tradeoff.",
+              "description": "Maximum ready Stories dispatched by /mandrel-deliver at once. Default 3. Moderate by design — keeps host-quota consumption predictable while allowing a small ready-set fan-out. Set 1 for strictly sequential delivery; raise further on hosts with adequate parallel-agent quota. See deliver.md for the sequencing model and throughput tradeoff.",
               "default": 3
             },
             "footprintGuard": {
@@ -1628,7 +1628,7 @@
             },
             "navigability": {
               "type": "object",
-              "description": "Navigability lens + journey-suite config (Epic #4131, F2/F3/F1/F4). Read by audit-suite/selector.js (route globs) and /deliver's per-Story ceremony (journey suite). Opt-in: absent or empty routeGlobs degrades to a silent no-op.",
+              "description": "Navigability lens + journey-suite config (Epic #4131, F2/F3/F1/F4). Read by audit-suite/selector.js (route globs) and /mandrel-deliver's per-Story ceremony (journey suite). Opt-in: absent or empty routeGlobs degrades to a silent no-op.",
               "properties": {
                 "routeGlobs": {
                   "type": "array",
@@ -1648,7 +1648,7 @@
                 },
                 "journeySuite": {
                   "type": "string",
-                  "description": "Path or command for the per-persona journey suite /deliver's per-Story ceremony runs."
+                  "description": "Path or command for the per-persona journey suite /mandrel-deliver's per-Story ceremony runs."
                 }
               },
               "additionalProperties": false
@@ -1692,7 +1692,7 @@
         },
         "codeReview": {
           "type": "object",
-          "description": "Review-provider chain plus bounded-retry knobs for the /deliver code-review ceremony.",
+          "description": "Review-provider chain plus bounded-retry knobs for the /mandrel-deliver code-review ceremony.",
           "properties": {
             "providers": {
               "type": "array",
@@ -1780,7 +1780,7 @@
             "maxFixAttempts": {
               "type": "integer",
               "minimum": 0,
-              "description": "Maximum auto-fix retry attempts per finding in /deliver Phase 5 (code-review). 0 disables auto-fix. Default 3.",
+              "description": "Maximum auto-fix retry attempts per finding in /mandrel-deliver Phase 5 (code-review). 0 disables auto-fix. Default 3.",
               "default": 3
             },
             "maxFixScopeFiles": {
@@ -1792,7 +1792,7 @@
             "autoFixSeverity": {
               "type": "string",
               "enum": ["high", "medium"],
-              "description": "Severity threshold for on-branch remediation in /deliver Phase 5 (code-review). `medium` (default) routes 🔴/🟠/🟡 findings into the host-LLM focused-fix routing (Mediums batched per lens: one commit per lens, a single validation + rescan at the end) while 🟢 suggestions still graduate to follow-up issues; `high` reproduces the pre-4399 Critical/High-only routing. Hard cutover — no back-compat flag.",
+              "description": "Severity threshold for on-branch remediation in /mandrel-deliver Phase 5 (code-review). `medium` (default) routes 🔴/🟠/🟡 findings into the host-LLM focused-fix routing (Mediums batched per lens: one commit per lens, a single validation + rescan at the end) while 🟢 suggestions still graduate to follow-up issues; `high` reproduces the pre-4399 Critical/High-only routing. Hard cutover — no back-compat flag.",
               "default": "medium"
             }
           },

package/.agents/schemas/story-deliver-terminal.schema.json

@@ -21,7 +21,7 @@
     },
     "status": {
       "type": "string",
-      "description": "landed — the PR merged, the Story is agent::done, and the post-land tail was attempted. pending — a bounded wait expired with the PR still in flight; NO label was mutated and no merge.unlanded event was emitted, so the run is resumable via nextCommand. blocked — a classified hard block; the Story carries agent::blocked and blocked.blockClass names the class. failed — a phase crashed; phase names which one. escalated — the /deliver-light suitability gate refused an over-scope prompt under --yes; nothing was created and the session ENDS here, nextCommand naming the /plan invocation that owns the work instead.",
+      "description": "landed — the PR merged, the Story is agent::done, and the post-land tail was attempted. pending — a bounded wait expired with the PR still in flight; NO label was mutated and no merge.unlanded event was emitted, so the run is resumable via nextCommand. blocked — a classified hard block; the Story carries agent::blocked and blocked.blockClass names the class. failed — a phase crashed; phase names which one. escalated — the /deliver-light suitability gate refused an over-scope prompt under --yes; nothing was created and the session ENDS here, nextCommand naming the /mandrel-plan invocation that owns the work instead.",
       "enum": ["landed", "pending", "blocked", "failed", "escalated"]
     },
     "phase": {
@@ -173,7 +173,7 @@
     },
     "nextCommand": {
       "type": ["string", "null"],
-      "description": "The single command that advances this work from where it stopped, or null when status === \"landed\" and nothing remains. Shares its vocabulary with deliver-recover.js so recovery and normal resumption speak one language. For status escalated it is the /plan invocation the operator runs in a FRESH session — the one case where the command is a slash command rather than a script, because the work needs planning, not resumption.",
+      "description": "The single command that advances this work from where it stopped, or null when status === \"landed\" and nothing remains. Shares its vocabulary with deliver-recover.js so recovery and normal resumption speak one language. For status escalated it is the /mandrel-plan invocation the operator runs in a FRESH session — the one case where the command is a slash command rather than a script, because the work needs planning, not resumption.",
       "minLength": 1
     },
     "elapsedSeconds": { "type": "number", "minimum": 0 },

package/.agents/schemas/validation-evidence.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "validation-evidence",
   "title": "Validation Evidence",
-  "description": "Per-scope record of which validation gates have passed against which commit SHA. Written by lib/validation-evidence.js under the per-Epic temp tree at temp/run-<id>/validation-evidence.json (Epic-scoped) or temp/run-<id>/stories/story-<storyId>/validation-evidence.json (Story-scoped). Standalone Stories (no parent Epic) use a storyId-anchored keyspace at temp/standalone/stories/story-<storyId>/validation-evidence.json. All paths are gitignored via temp/. Consumed by close-validation, epic-code-review, the acceptance self-eval critic, and /deliver Phase 3 (close-validation) to skip identical re-runs against an already-validated tree. The `storyId` field carries the scope id and equals the epic id for Epic-scoped records.",
+  "description": "Per-scope record of which validation gates have passed against which commit SHA. Written by lib/validation-evidence.js under the per-Epic temp tree at temp/run-<id>/validation-evidence.json (Epic-scoped) or temp/run-<id>/stories/story-<storyId>/validation-evidence.json (Story-scoped). Standalone Stories (no parent Epic) use a storyId-anchored keyspace at temp/standalone/stories/story-<storyId>/validation-evidence.json. All paths are gitignored via temp/. Consumed by close-validation, epic-code-review, the acceptance self-eval critic, and /mandrel-deliver Phase 3 (close-validation) to skip identical re-runs against an already-validated tree. The `storyId` field carries the scope id and equals the epic id for Epic-scoped records.",
   "type": "object",
   "required": ["storyId", "schemaVersion", "records"],
   "properties": {

package/.agents/scripts/acceptance-eval.js

@@ -20,7 +20,7 @@
  *      and the resolved, undisableable round cap
  *      (`delivery.acceptanceEval.maxRounds`, clamped to `[1, ceiling]`).
  *   3. Emit one per-criterion `acceptance-eval` signal into the retro /
- *      feedback substrate so the retro and `/plan` Phase 0 feedback
+ *      feedback substrate so the retro and `/mandrel-plan` Phase 0 feedback
  *      fetch can see which acceptance items needed rework and the round
  *      count.
  *   4. Print a single JSON envelope and exit:

package/.agents/scripts/apply-quality-bootstrap.js

@@ -20,7 +20,7 @@
  *
  * Story #5007 retired the second step. `migrateBaselinesLayout` relocated
  * per-Epic ratchet snapshots into `temp/epic/<id>/baselines/` on the contract
- * that `/deliver` reaps that namespace on merge — a mechanism the Story-only
+ * that `/mandrel-deliver` reaps that namespace on merge — a mechanism the Story-only
  * v2 model deleted, so the migration moved dead data into a namespace no code
  * path writes, reads, or reaps. Its one residual hygiene value (getting the
  * committed `baselines/epic/` tree out of version control) survives as

package/.agents/scripts/audit-to-stories.js

@@ -13,7 +13,7 @@
  *     stdout when --json is set).
  *
  *   --emit-plan-seed --plan <plan.json> --out <path>
- *     Read the plan envelope from disk, render the `/plan --seed`
+ *     Read the plan envelope from disk, render the `/mandrel-plan --seed`
  *     seed markdown, persist to --out.
  *
  *   --emit-stories --plan <plan.json>
@@ -844,7 +844,7 @@ runAsCli(import.meta.url, main, {
     flags: [
       ['--scan', 'Print the grouped, deduplicated plan as JSON.'],
       ['--auto', 'Run the full scan → file pipeline and print the summary.'],
-      ['--emit-plan-seed', 'Emit a /plan --seed-file document.'],
+      ['--emit-plan-seed', 'Emit a /mandrel-plan --seed-file document.'],
       ['--emit-stories', 'Emit the Story drafts as JSON.'],
       [
         '--wire-edges',

package/.agents/scripts/check-doc-links.js

@@ -19,7 +19,7 @@
 //
 //   3. No active doc mentions any retired slash command. The retired-command
 //      blocklist is seeded with `agents-bootstrap-github`,
-//      `single-story-plan` (renamed to `/plan`), and `mandrel`
+//      `single-story-plan` (renamed to `/mandrel-plan`), and `mandrel`
 //      (retired in favor of the generated `.agents/docs/workflows.md`
 //      catalog) and takes precedence over the workflow-resolution check —
 //      a retired token is always a non-zero exit even if a stale workflow
@@ -61,6 +61,18 @@ export const RETIRED_COMMANDS = new Set([
   'git-merge-pr',
 ]);
 
+// Command spellings a *historical* record may still name, keyed by the file
+// allowed to name them. A decisions log that cannot quote the name a command
+// had is a broken record: an ADR describes the world as it was, so freezing
+// its prose is the point. Scoped per-file and per-token rather than
+// allowlisted globally — everywhere else these are simply wrong, and a typo
+// like `/mandrl-plan` must still fail here. Story #5126 renamed `/plan` →
+// `/mandrel-plan` and `/deliver` → `/mandrel-deliver`; the ADRs that decided
+// the Story-only model still name them as they were called then.
+export const SUPERSEDED_COMMAND_SPELLINGS = new Map([
+  ['docs/decisions.md', new Set(['plan', 'deliver'])],
+]);
+
 // Tokens that look like `/foo` in prose but are not slash commands. Tokens
 // are stored WITHOUT the leading slash. The list focuses on common URL path
 // fragments and on-disk path roots that appear in tutorial prose. The
@@ -379,6 +391,20 @@ export function extractSlashTokens(masked) {
 
 // --- Per-file check --------------------------------------------------------
 
+/**
+ * The slash tokens `relFile` may name without resolving to a workflow: the
+ * global allowlist, plus any superseded spelling this particular file is
+ * allowed to quote.
+ *
+ * @param {string} relFile Repo-relative path of the file being checked.
+ * @returns {Set<string>} Tokens to skip, stored without the leading slash.
+ */
+function slashAllowlistFor(relFile) {
+  const superseded = SUPERSEDED_COMMAND_SPELLINGS.get(relFile);
+  if (!superseded) return SLASH_ALLOWLIST;
+  return new Set([...SLASH_ALLOWLIST, ...superseded]);
+}
+
 export function checkFile(absPath, repoRoot) {
   const violations = [];
   const source = fs.readFileSync(absPath, 'utf8');
@@ -454,14 +480,16 @@ export function checkFile(absPath, repoRoot) {
     }
   }
 
-  // 3. Slash-command resolution. Skip retired hits (already reported) and
-  //    allowlisted tokens. A command is valid if it resolves to a top-level
+  // 3. Slash-command resolution. Skip retired hits (already reported),
+  //    allowlisted tokens, and a superseded spelling in the one file allowed
+  //    to quote it (SUPERSEDED_COMMAND_SPELLINGS). A command is valid if it resolves to a top-level
   //    workflow file OR to a helpers/ module (helpers are not projected into
   //    the `.claude/commands/` tree but are still legitimate named workflows
   //    that parent workflows invoke by prose reference).
+  const slashAllowlist = slashAllowlistFor(relFile);
   for (const { token, line } of slashTokens) {
     if (RETIRED_COMMANDS.has(token)) continue;
-    if (SLASH_ALLOWLIST.has(token)) continue;
+    if (slashAllowlist.has(token)) continue;
     // Namespaced loop commands (`/loops:<name>`, Story #4289) resolve to a
     // loop unit under `.agents/workflows/loops/<name>.md`. Split on the `:`
     // and resolve the namespaced path rather than a flat `loops:<name>.md`.

package/.agents/scripts/check-test-temp-hygiene.js

@@ -422,7 +422,7 @@ export function findReservedIdStreamFiles(tempDir) {
  * the **repository-root** temp tree (Story #4892).
  *
  * Resolution matters more than it looks: every writer anchors a relative
- * `tempRoot` to the *main checkout* (so a Story worktree and its `/deliver`
+ * `tempRoot` to the *main checkout* (so a Story worktree and its `/mandrel-deliver`
  * host converge on one ledger), so a guard that scanned `cwd` would scan an
  * empty worktree tree and pass vacuously on the very tree it is meant to
  * protect. `resolveRoot` is the injection seam for tests.

package/.agents/scripts/check-workflow-cli-lint.js

@@ -136,7 +136,7 @@ export function toParagraphs(lines) {
  *      heading (inclusive) — i.e. the section is *about* that script, so the
  *      table is restating its surface.
  *
- * A slash command's own argument table (`/plan`, `/deliver`) has no script
+ * A slash command's own argument table (`/mandrel-plan`, `/mandrel-deliver`) has no script
  * behind it — nothing owns those flags but the workflow prose itself — so
  * condition 2 leaves it alone by design.
  *

package/.agents/scripts/deliver-light.js

@@ -5,7 +5,7 @@
  *
  * A **thin entry point, not a second delivery engine.** It runs the
  * suitability gate, authors a minimal receipt `type::story`, and then hands off
- * to the SAME engine scripts `/deliver` uses:
+ * to the SAME engine scripts `/mandrel-deliver` uses:
  *
  *   suitability gate  →  inline receipt Story  →  single-story-init.js
  *     →  (agent implements + self-evals)  →  diff backstop
@@ -38,9 +38,9 @@
  * envelope with status `escalated` and **ends the session**. Before that it was
  * an ordinary gate envelope plus exit 2 — a warning a caller could walk past,
  * and one mandrel-bench 2.13.0 light-arm run did exactly that: it read the
- * escalation, invoked `/plan` in the same session, and delivered. In-session
+ * escalation, invoked `/mandrel-plan` in the same session, and delivered. In-session
  * planning under-decomposed (ONE Story against the scenario's 3-5 contract,
- * where a fresh `/plan` session on the identical seed authored four), so
+ * where a fresh `/mandrel-plan` session on the identical seed authored four), so
  * escalation silently produced the outcome the guard exists to prevent.
  * {@link module:lib/orchestration/story-deliver-terminal.buildEscalationTerminal}
  * carries the guarantees the schema then enforces.
@@ -88,7 +88,7 @@ Usage:
   deliver-light.js --backstop --story <id>
 
 The thin /deliver-light entry point: suitability gate → inline receipt Story →
-the same single-story-init.js / single-story-close.js engine /deliver uses.
+the same single-story-init.js / single-story-close.js engine /mandrel-deliver uses.
 
 The gate judges EFFORT and RISK, not artifact counts: N instances of one
 mechanical edit is one kind at N sites. It rejects only clearly-epic work; the
@@ -102,9 +102,9 @@ Gate options:
   --kinds <csv>      Distinct KINDS of change (default: one per assumption, so
                      N same-shaped edits count once).
   --magnitude <m>    Coarse effort bucket: trivial | moderate | substantial
-                     (default moderate; substantial routes to /plan).
+                     (default moderate; substantial routes to /mandrel-plan).
   --uncertainty <u>  determined (the request fixes the shape) | needs-design
-                     (default determined; needs-design routes to /plan).
+                     (default determined; needs-design routes to /mandrel-plan).
   --route <r>        Ledgered model verdict route: lite | full.
   --reason <text>    Recorded reason for a lite verdict (required for lite).
   --amends <#id>     Mark this as an amendment of an existing issue.
@@ -125,7 +125,7 @@ Backstop options:
                      change's IMPLEMENTATION half by magnitude (changed lines +
                      file sprawl); test/doc/baseline companions are exempt from
                      the counts but still matched for sensitive paths. A block
-                     emits a nextCommand recycling the receipt through /plan.
+                     emits a nextCommand recycling the receipt through /mandrel-plan.
   --story <id>       Story issue number whose story-<id> branch to diff.
 
   --pretty           Pretty-print the JSON envelope.
@@ -280,7 +280,7 @@ export async function createLightReceipt({
 }
 
 /**
- * The engine hand-off — the SAME scripts `/deliver` uses. Named here as
+ * The engine hand-off — the SAME scripts `/mandrel-deliver` uses. Named here as
  * commands, never reimplemented: this is the whole of deliver-light's
  * relationship to worktree/branch/lease/PR/merge mechanics.
  *
@@ -397,7 +397,7 @@ export async function runGateMode(values, deps = {}) {
   if (values.yes === true && hasOperatorOverride(values)) {
     process.stderr.write(HELP);
     throw new Error(
-      '[deliver-light] --operator-proceed-light is attended-only and cannot be combined with --yes: an unattended run has no operator whose answer this is, and over-scope must fail closed to /plan',
+      '[deliver-light] --operator-proceed-light is attended-only and cannot be combined with --yes: an unattended run has no operator whose answer this is, and over-scope must fail closed to /mandrel-plan',
     );
   }
 
@@ -423,7 +423,7 @@ export async function runGateMode(values, deps = {}) {
     });
     emitTerminalFn(envelope);
     Logger.warn(
-      `[deliver-light] ESCALATED to /plan — this session ENDS here; run ${envelope.nextCommand} in a FRESH session: ${gate.outcome.reasons.join('; ')}`,
+      `[deliver-light] ESCALATED to /mandrel-plan — this session ENDS here; run ${envelope.nextCommand} in a FRESH session: ${gate.outcome.reasons.join('; ')}`,
     );
     return exitCodeForTerminal(envelope);
   }

package/.agents/scripts/deliver-recover.js

@@ -12,7 +12,7 @@
  * is the thing they cannot act on.
  *
  * The strand this exists for above all others is the **merged-but-label-stale**
- * Story: a `/deliver` re-run refuses it outright, because
+ * Story: a `/mandrel-deliver` re-run refuses it outright, because
  * `single-story-init.js` hard-errors on an already-closed Story. Before this
  * surface, that Story had no automated way back.
  *

package/.agents/scripts/drain-pending-cleanup.js

@@ -8,7 +8,7 @@
  * any still-stuck entries by enumerating the processes holding handles
  * inside the worktree path and terminating them.
  *
- * Invoked by `/deliver` and `/plan`
+ * Invoked by `/mandrel-deliver` and `/mandrel-plan`
  * (via `drainPendingCleanupAtBoot` → `worktree-sweep.js`), and
  * `story-close` so the pending-cleanup ledger drains automatically
  * across the sprint lifecycle. Operators can also run it standalone:

package/.agents/scripts/evidence-gate.js

@@ -3,7 +3,7 @@
 /**
  * evidence-gate.js — evidence-aware wrapper around a single shell gate.
  *
- * Tech Spec #819 §"Evidence record (Story 7)" — `/deliver` Phase 3
+ * Tech Spec #819 §"Evidence record (Story 7)" — `/mandrel-deliver` Phase 3
  * (close-validation) runs `npm run lint` and `npm test` against the Epic
  * branch before opening the PR.
  * If the same gate has already passed against the current `git rev-parse

package/.agents/scripts/generate-workflows-doc.js

@@ -93,7 +93,7 @@ export function renderWorkflowsDoc(catalog, loopCatalog = []) {
     'Every command file lives at `.agents/workflows/<name>.md` and is projected',
     'into a flat `.claude/commands/` tree by `npm run sync:commands` (kept',
     'current at install time and on every `mandrel sync`/`update`) so it shows',
-    'up as a bare `/<name>` slash command (e.g. `/deliver`). The projection',
+    'up as a bare `/<name>` slash command (e.g. `/mandrel-deliver`). The projection',
     'writes only `.claude/commands/<name>.md` — there is no plugin manifest and no',
     'marketplace listing. The commands load in every Claude Code environment.',
     '',

package/.agents/scripts/lib/audit-suite/selector.js

@@ -701,7 +701,7 @@ export function changeSetLacksSiblingTest(changedFiles) {
  *   callers MUST pass the requested Epic's own branch ref (e.g.
  *   `refs/heads/epic/<id>`) so the change set is pinned to that Epic's branch
  *   rather than whatever HEAD the shared checkout happens to sit on. Under two
- *   concurrent `/deliver` runs sharing one checkout, diffing against
+ *   concurrent `/mandrel-deliver` runs sharing one checkout, diffing against
  *   `HEAD` silently resolves the *other* Epic's change set (Story #3362). When
  *   `headRef` cannot be resolved in the repo, the selector returns a
  *   `degraded: true` envelope (or hard-fails in gate-mode) instead of diffing

package/.agents/scripts/lib/audit-to-stories/audit-label-taxonomy.js

@@ -140,7 +140,7 @@ const AUDIT_STORY_AXIS_LABELS = Object.freeze([
     name: AGENT_LABELS.READY,
     color: hex(LABEL_COLORS.AGENT),
     description:
-      'Parking state — frozen dispatch manifest exists; awaiting local /deliver',
+      'Parking state — frozen dispatch manifest exists; awaiting local /mandrel-deliver',
   },
   {
     name: RISK_LABELS.HIGH,

package/.agents/scripts/lib/audit-to-stories/build-story-body.js

@@ -292,7 +292,7 @@ export function buildStoryBody({ group, edges = [], issueByGroupKey = null }) {
   };
 
   // The `---` / `blocked by #N` footer is the canonical serializer's own, so
-  // the body round-trips through `parse()` and `/deliver`'s resolver reads the
+  // the body round-trips through `parse()` and `/mandrel-deliver`'s resolver reads the
   // ordering from the same place it reads every other Story's.
   const canonicalSections = serialize(storyBody, {
     includeFooter: storyBody.depends_on.length > 0,

package/.agents/scripts/lib/audit-to-stories/seed-from-findings.js

@@ -1,8 +1,8 @@
 /**
  * lib/audit-to-stories/seed-from-findings.js
  *
- * Build the `/plan --seed`-shaped one-pager markdown that the audit-to-
- * stories Single-plan grouping path emits for `/plan` to consume.
+ * Build the `/mandrel-plan --seed`-shaped one-pager markdown that the audit-to-
+ * stories Single-plan grouping path emits for `/mandrel-plan` to consume.
  *
  * The seed renders the canonical one-pager sections so the authoring
  * pass can sharpen it without having to invent context:
@@ -10,7 +10,7 @@
  *   - Recommended Direction (rollup of recommendations by dimension)
  *   - Key Assumptions (carries the source-report links forward)
  *   - MVP Scope (the proposed Stories, one bullet per group)
- *   - Key Files (explicit file paths so `/plan` authoring has concrete
+ *   - Key Files (explicit file paths so `/mandrel-plan` authoring has concrete
  *     anchors)
  *   - Not Doing (out-of-scope items by convention)
  *
@@ -97,8 +97,8 @@ function formatMVPScope(groups) {
       const dims = g.dimensions.join(' / ');
       const file = g.files[0] ? ` (\`${g.files[0]}\`)` : '';
       // Carry each group's fingerprint (and location-based semantic-key)
-      // footer into the seed so a Story authored from it via `/plan` inherits
-      // the dedup identity — without this the recommended `/plan --seed-file`
+      // footer into the seed so a Story authored from it via `/mandrel-plan` inherits
+      // the dedup identity — without this the recommended `/mandrel-plan --seed-file`
       // path is invisible to the next sweep's dedup (Story #4626). The footers
       // are HTML comments, so they never render in the visible one-pager but
       // stay machine-readable for the dedup probe.

package/.agents/scripts/lib/audit-to-stories/wire-dependencies.js

@@ -17,7 +17,7 @@
  * edges**. Both halves are written:
  *
  *   1. The **body footer** (`---` / `blocked by #N`) — canonical, parsed by
- *      `/deliver`'s resolver, and the fallback when the dependencies API is
+ *      `/mandrel-deliver`'s resolver, and the fallback when the dependencies API is
  *      unavailable.
  *   2. The **native `blocked_by` relation** — visible in the GitHub UI,
  *      readable without parsing markdown, and settable by an operator later.

package/.agents/scripts/lib/bdd-runner-detect.js

@@ -13,7 +13,7 @@
  * The verification is **static**: we inspect `package.json` for a known BDD
  * runner dependency, and consult a small lookup table of which runners
  * support which pending/skip tag. We do not boot the runner. This keeps
- * `/plan` Phase 7 hermetic and offline.
+ * `/mandrel-plan` Phase 7 hermetic and offline.
  *
  * **Workspace awareness (Story #2956).** In a pnpm / npm / yarn monorepo the
  * BDD runner is rarely a root devDependency — it lives in the workspace

package/.agents/scripts/lib/bdd-scenario-budget.js

@@ -1,6 +1,6 @@
 /**
  * bdd-scenario-budget.js — envelope byte budget for the `bddScenarios`
- * `/plan` context-envelope field (Story #4977).
+ * `/mandrel-plan` context-envelope field (Story #4977).
  *
  * `bdd-scenario-scanner.js`'s `scanBddScenarios` stays a faithful, uncapped
  * index of the project's `.feature` corpus — that scan is also used

package/.agents/scripts/lib/bdd-scenario-scanner.js

@@ -1,5 +1,5 @@
 /**
- * bdd-scenario-scanner.js — Gherkin scenario index for /plan Phase 7.
+ * bdd-scenario-scanner.js — Gherkin scenario index for /mandrel-plan Phase 7.
  *
  * Story #2637 (sibling to #2636's file-assumption gate; the #2634 and #2635
  * planner-grounding siblings were retired in Story #4811). The Acceptance
@@ -8,7 +8,7 @@
  * alone — it never inspects the consumer project's existing `.feature`
  * files. Planned ACs frequently duplicate scenarios that already exist or
  * re-specify behaviour the codebase already proves; the duplication is
- * only discovered (at best) during `/deliver` or (at worst) after
+ * only discovered (at best) during `/mandrel-deliver` or (at worst) after
  * a redundant PR ships.
  *
  * `scanBddScenarios` walks every configured feature root, parses each
@@ -21,7 +21,7 @@
  * have a matching scenario.
  *
  * Determinism is load-bearing: the matcher is keyword-based, not
- * embedding-based, so re-running `/plan` against the same
+ * embedding-based, so re-running `/mandrel-plan` against the same
  * acceptance spec produces the same disposition annotations.
  */
 

package/.agents/scripts/lib/bdd-step-index.js

@@ -9,7 +9,7 @@
  *   1. **Discovery** — which files under a scope's `stepRoots` hold step
  *      definitions, and which `.feature` files sit under its `featureRoots`.
  *      Feature discovery is delegated to `listFeatureFiles` in
- *      `bdd-scenario-scanner.js` rather than copied: /plan's scenario index and
+ *      `bdd-scenario-scanner.js` rather than copied: /mandrel-plan's scenario index and
  *      this gate must agree on what counts as a feature file, and two walkers
  *      would eventually disagree.
  *   2. **Matching** — turn each definition's Cucumber expression or regular

package/.agents/scripts/lib/bootstrap/branch-protection.js

@@ -7,7 +7,7 @@
  *   - `enforce_admins: true` — admins do not bypass the prGate suite.
  *   - `required_pull_request_reviews.required_approving_review_count: 0` —
  *     CI is the gate; the operator monitors and iterates the open PR
- *     to green via `/deliver`'s Phase 7 watch loop.
+ *     to green via `/mandrel-deliver`'s Phase 7 watch loop.
  *
  * Behaviour rules
  * ---------------

package/.agents/scripts/lib/bootstrap/commit-push.js

@@ -112,8 +112,8 @@ export function buildManualInstructions({ stagePaths, baseBranch }) {
     `  git push -u origin ${baseBranch}`,
     '',
     'Story delivery runs in git worktrees that check out tracked files only,',
-    'so the .agents/ wiring MUST be committed before any /deliver or',
-    '/deliver run — otherwise the worktree has no scripts and breaks.',
+    'so the .agents/ wiring MUST be committed before any /mandrel-deliver or',
+    '/mandrel-deliver run — otherwise the worktree has no scripts and breaks.',
   ].join('\n');
 }
 

package/.agents/scripts/lib/bootstrap/issue-forms-template.js

@@ -325,7 +325,7 @@ function renderConformanceWorkflow() {
 # Generated by agents-bootstrap-github. Runs the canonical story-body parser
 # against human-opened type::story issues and comments when the
 # body does not round-trip, instead of letting the supported human entry
-# points (e.g. /plan from an existing Epic ID) fail silently later. The lint
+# points (e.g. /mandrel-plan from an existing Epic ID) fail silently later. The lint
 # informs; it never fails the issue. Re-run /agents-bootstrap-github to refresh.
 name: Issue Body Conformance
 

package/.agents/scripts/lib/checks/core-bare-clean.js

@@ -26,7 +26,7 @@ export default {
   severity: 'blocker',
   // 'npm-test' keeps the test-wrapper preflight's refusal claim true: a
   // poisoned shared config is caught before a suite (or N concurrent
-  // /deliver workers) inherits it, not only at close/retro time (#4580).
+  // /mandrel-deliver workers) inherits it, not only at close/retro time (#4580).
   scope: ['story-close', 'retro', 'npm-test'],
   autoCorrect: 'refuse-and-print',
   detect(state) {

package/.agents/scripts/lib/checks/story-init-not-backgrounded.js

@@ -11,7 +11,7 @@
  *
  * Scope: 'story-close', 'retro'. The check runs at every
  * preflight surface that has the opportunity to invoke Story init —
- * primarily `/deliver`'s init step — and surfaces as a retro audit
+ * primarily `/mandrel-deliver`'s init step — and surfaces as a retro audit
  * signal if the failure mode resurfaces during a sprint.
  *
  * The check is `refuse-and-print`. Auto-rewriting an orchestration call

package/.agents/scripts/lib/cli-args.js

@@ -253,7 +253,7 @@ export function parseSprintArgs(
       process.env.AGENT_WORKTREE_ROOT ||
       null,
     recutOf: parseTicketId(values['recut-of']),
-    // Story #4253: pre-resolved Epic linkage threaded by the /deliver
+    // Story #4253: pre-resolved Epic linkage threaded by the /mandrel-deliver
     // fan-out so `single-story-init.js` can skip redundant Epic lookups when
     // the parent already threaded Epic context (pre-v2; field retained for
     // CLI compatibility).

package/.agents/scripts/lib/command-header.js

@@ -36,7 +36,7 @@ export function applyHeader(content, header) {
  * True when a workflow opts out of slash-command projection via a
  * `command: false` key in its YAML frontmatter (#4482). Used for dual-use
  * lens files (e.g. `audit-security.md`) that stay in
- * the payload as `/deliver` audit-suite prompts but must NOT surface as
+ * the payload as `/mandrel-deliver` audit-suite prompts but must NOT surface as
  * standalone slash commands because the host ships a native equivalent.
  *
  * Both `sync-claude-commands.js` (projection + orphan-reap) and the

package/.agents/scripts/lib/config/delivery-routing.js

@@ -36,7 +36,7 @@ export const DELIVERY_ROUTING_DEFAULTS = Object.freeze({
   /** @type {'minimal'|'standard'|'strict'} */
   ceremonyProfile: 'standard',
   /**
-   * When true (default), attended `/deliver` lands through merge in one
+   * When true (default), attended `/mandrel-deliver` lands through merge in one
    * close (`--wait-merge` semantics) instead of stopping at `agent::closing`.
    * Operators opt out per-run with `--no-wait-merge`.
    */

package/.agents/scripts/lib/config/explain.js

@@ -266,7 +266,7 @@ const PREFIX_MEANINGS = Object.freeze([
 const BLOCK_MEANINGS = Object.freeze({
   project: 'Project identity, paths, and command configuration.',
   github: 'GitHub provider identity and merge/notification policy.',
-  planning: 'Inputs and guardrails for /plan.',
+  planning: 'Inputs and guardrails for /mandrel-plan.',
   delivery: 'Execution, isolation, quality, and CI settings for delivery.',
   qa: 'Agent-driven QA harness contract.',
 });