mandrel 2.37.0 → 2.38.0

package/.agents/scripts/lib/git-branch-lifecycle.js

@@ -89,7 +89,7 @@ export function branchExistsViaTrackingRef(branch, cwd) {
 /**
  * Pure: classify how a `story-<id>` branch should be seeded from the (local,
  * remote) ref-presence matrix. This is the single source of truth for
- * `single-story-init.js#decideStoryBranchSeed` (v2 `/deliver` path).
+ * `single-story-init.js#decideStoryBranchSeed` (v2 `/mandrel-deliver` path).
  *
  * The init path previously re-implemented the same `local → no-op, remote →
  * fetch, else create` decision tree; it now delegates here so the branching
@@ -122,7 +122,7 @@ export function classifyBranchSeed({ localHas, remoteHas }) {
  * The two callers differ in exactly two behavioural axes, both of which are
  * parameters here — no other conditional branching is introduced:
  *   - **`baseRef`** — the ref to branch from on `create` (`main` for v2
- *     `/deliver`; pre-v2 Epic close used the Epic branch).
+ *     `/mandrel-deliver`; pre-v2 Epic close used the Epic branch).
  *   - **`swallowCreateRace`** — when `true`, a `git branch` that exits
  *     non-zero with an "already exists" stderr is treated as reuse rather
  *     than a fatal error (pre-v2 concurrent wave dispatch). When `false`, any create failure

package/.agents/scripts/lib/label-constants.js

@@ -15,7 +15,7 @@ export const AGENT_LABELS = {
   // the Story PR is opened against `main`. It flips to
   // `agent::done` only after the close pipeline confirms the PR merge
   // landed; if the close is killed mid-flight, the Story remains at
-  // `agent::closing` so `/deliver` can pick up at the
+  // `agent::closing` so `/mandrel-deliver` can pick up at the
   // post-merge phase rather than re-running preflight. The label is the
   // distinguishing signal between "hung close" and "finished work".
   CLOSING: 'agent::closing',
@@ -101,7 +101,7 @@ export const ACCEPTANCE_NA = ACCEPTANCE_LABELS.N_A;
  * loop). `meta::framework-gap` is applied to issues that surface a defect or
  * missing capability in the framework itself; `meta::consumer-improvement`
  * is applied to issues that surface improvements to a consumer project
- * (workflow tweaks, ergonomic asks, doc polish). The `/plan` Phase 0
+ * (workflow tweaks, ergonomic asks, doc polish). The `/mandrel-plan` Phase 0
  * fetcher (see `lib/feedback-loop/prior-feedback-fetcher.js`) reads open
  * issues carrying either label and surfaces them to the planner so retro
  * signals are routed into durable substrates rather than lost in chat.

package/.agents/scripts/lib/label-taxonomy.js

@@ -40,7 +40,7 @@ export const LABEL_TAXONOMY = [
     name: AGENT_LABELS.READY,
     color: LABEL_COLORS.AGENT,
     description:
-      'Parking state — frozen dispatch manifest exists; awaiting local /deliver',
+      'Parking state — frozen dispatch manifest exists; awaiting local /mandrel-deliver',
   },
   {
     name: AGENT_LABELS.EXECUTING,

package/.agents/scripts/lib/onboard/init-tail.js

@@ -7,7 +7,7 @@
  *
  *   Phase 1 — Offer to scaffold missing docsContextFiles (scaffold-docs.js).
  *   Phase 2 — Run `mandrel doctor` as a readiness gate.
- *   Phase 3 — Print the /plan handoff next-step text.
+ *   Phase 3 — Print the /mandrel-plan handoff next-step text.
  *
  * The whole tail is idempotent: re-running after an already-onboarded project
  * re-checks and re-offers scaffolding without duplicating stubs (the scaffolder
@@ -31,13 +31,13 @@ import { STUB_MARKER, scaffoldDocs } from './scaffold-docs.js';
 // ---------------------------------------------------------------------------
 
 /**
- * Text printed at the end of the init tail to hand the operator off to /plan.
+ * Text printed at the end of the init tail to hand the operator off to /mandrel-plan.
  *
  * @type {string}
  */
 export const PLAN_HANDOFF_TEXT =
   '\n✅  Mandrel is ready. Start your first project:\n\n' +
-  '    /plan --seed "<one-line description of what you want to build>"\n';
+  '    /mandrel-plan --seed "<one-line description of what you want to build>"\n';
 
 // ---------------------------------------------------------------------------
 // Internal helpers
@@ -200,7 +200,7 @@ export async function runInitTail({
     return { scaffoldResult, doctorStatus, ok: false };
   }
 
-  // --- Phase 3: Handoff to /plan -------------------------------------------
+  // --- Phase 3: Handoff to /mandrel-plan -------------------------------------------
   stdout(PLAN_HANDOFF_TEXT);
   return { scaffoldResult, doctorStatus, ok: true };
 }

package/.agents/scripts/lib/onboard/scaffold-docs.js

@@ -25,7 +25,7 @@ const AGENT_ROOT = path.resolve(__dirname, '../../..');
 const DOCS_TEMPLATE_DIR = path.join(AGENT_ROOT, 'templates', 'docs');
 
 /**
- * Deterministic marker written into every scaffolded stub. The `/plan`
+ * Deterministic marker written into every scaffolded stub. The `/mandrel-plan`
  * first-run preflight (and any tooling that wants to detect unedited stubs)
  * keys off this exact string — do not change it without a hard cutover.
  *
@@ -59,7 +59,7 @@ function genericStub(fileName) {
 /**
  * Read the dedicated template body for a docsContextFile, or fall back to the
  * generic stub when no template ships for that name. Either path prepends the
- * {@link STUB_MARKER} so the `/plan` first-run preflight can detect un-edited
+ * {@link STUB_MARKER} so the `/mandrel-plan` first-run preflight can detect un-edited
  * stubs regardless of whether a dedicated template was used.
  *
  * @param {string} fileName

package/.agents/scripts/lib/orchestration/acceptance-eval-decision.js

@@ -170,7 +170,7 @@ export function decideAcceptanceEval({ verdict, maxRounds, round: roundIn }) {
 /**
  * Build the per-criterion acceptance-eval signal payload for the retro /
  * feedback substrate. Carries which acceptance items needed rework and the
- * round count so `/plan` Phase 0 feedback fetch and the retro can
+ * round count so `/mandrel-plan` Phase 0 feedback fetch and the retro can
  * surface acceptance churn. PII-free by construction — it carries only
  * acceptance-item indices, verdicts, and the terminal decision.
  *

package/.agents/scripts/lib/orchestration/code-review.js

@@ -3,7 +3,7 @@
  *
  * Story #1155 (Epic #1142, 5.40.0) — extracted the helper-driven
  * `epic-code-review` invocation into a callable module so the
- * `/deliver` runner can run Phase D without spawning a child
+ * `/mandrel-deliver` runner can run Phase D without spawning a child
  * process or routing through an LLM-driven helper.
  *
  * Story #2831 (Epic #2815, Pluggable Code Review) — refactored to load
@@ -32,11 +32,11 @@
  *     `code-review` and `audit-results` findings contracts into this one
  *     `verification-results` marker.
  *   - Treats severity.critical > 0 as a halting blocker — the merged
- *     `/deliver` runner consults `halted` and refuses to advance
+ *     `/mandrel-deliver` runner consults `halted` and refuses to advance
  *     to Phase E (retro) when set.
  *
  * Halting on critical findings is the in-process replacement for the
- * helper's "operator must remediate before /deliver" gate.
+ * helper's "operator must remediate before /mandrel-deliver" gate.
  */
 
 import { hasSurvivingCritical } from '../audit-suite/findings.js';
@@ -129,7 +129,7 @@ function resolveScopeEnvelope(opts, config) {
 }
 
 /**
- * In-process wrapper that the `/deliver` runner and the
+ * In-process wrapper that the `/mandrel-deliver` runner and the
  * `/single-story-deliver` close path consume.
  *
  * Story #2252 — emits `code-review.start` immediately on entry and

package/.agents/scripts/lib/orchestration/complexity-gate.js

@@ -132,7 +132,7 @@ export const LITE_ROUTE_LABEL = 'route::lite';
  *                        footprint: `trivial` < `moderate` < `substantial`.
  *   - `maxUncertainty` — is the shape determined by the request
  *                        (`determined`), or does it still need the design
- *                        decisions `/plan` exists to resolve
+ *                        decisions `/mandrel-plan` exists to resolve
  *                        (`needs-design`)?
  *   - `maxDeployables` — named deployable roots (`apps/<x>`, `packages/<x>`, …)
  *                        the footprint spans; more than one is epic by
@@ -325,7 +325,7 @@ const EFFORT_RULES = Object.freeze([
       UNCERTAINTY_SCALE.indexOf(s.uncertainty) >
       UNCERTAINTY_SCALE.indexOf(c.maxUncertainty),
     reason: (s) =>
-      `the shape is not determined by the request (uncertainty "${s.uncertainty}") — the design decisions /plan exists to resolve are still open; full route`,
+      `the shape is not determined by the request (uncertainty "${s.uncertainty}") — the design decisions /mandrel-plan exists to resolve are still open; full route`,
   },
   {
     code: SHAPE_CODES.DEPLOYABLE_SPAN,
@@ -657,7 +657,7 @@ function buildEffortShape({
 /**
  * Derive the complexity route from an authored Story's **effort and risk**
  * (Story #4722 AC-3/AC-4; re-anchored off artifact cardinality by Story #4764)
- * — the single shape function persist's backstop and `/deliver`'s dispatch
+ * — the single shape function persist's backstop and `/mandrel-deliver`'s dispatch
  * derivation both read, so the two can never disagree about the same body.
  *
  * `lite` requires **every** signal to agree, against
@@ -804,7 +804,7 @@ export function deriveStoryShape({
 }
 
 /**
- * Decide how `/deliver` executes a Story: **run topology, and nothing else.**
+ * Decide how `/mandrel-deliver` executes a Story: **run topology, and nothing else.**
  *
  * **`inline` names one indivisible resource: the router's own session.** Two
  * Stories cannot both own it, so exactly one premise can grant it —
@@ -839,7 +839,7 @@ export function deriveStoryShape({
  * module header's non-negotiables.
  *
  * @param {{ storyCount?: unknown }} [args] `storyCount` is the number of
- *   Stories the invoking `/deliver` run resolved. Omitted (or not exactly 1)
+ *   Stories the invoking `/mandrel-deliver` run resolved. Omitted (or not exactly 1)
  *   means the run cannot be shown sibling-free and therefore dispatches as a
  *   sub-agent — never an assumed 1.
  * @returns {{ mode: 'inline'|'subagent', reasons: string[] }}

package/.agents/scripts/lib/orchestration/deliver-recover.js

@@ -21,7 +21,7 @@
  *   - `closing` with a red PR → enter the fix loop. Waiting is pointless; no
  *     budget turns a failed check green.
  *   - `closing` with a MERGED PR → run confirm. **This is the strand a
- *     `/deliver` re-run refuses outright**, because `single-story-init.js`
+ *     `/mandrel-deliver` re-run refuses outright**, because `single-story-init.js`
  *     hard-errors on an already-closed Story — so before this surface, the
  *     merged-but-label-stale Story had no automated way back.
  *   - `done` with a drifted board → run resync. The GitHub Projects bot won
@@ -367,7 +367,7 @@ export function decideRecovery({
       nextCommand: NEXT_COMMANDS.confirmMerge(storyId),
       detail:
         `PR #${pr.number} is MERGED but the Story is at \`${label ?? 'no state label'}\`. ` +
-        `A /deliver re-run cannot fix this — single-story-init.js hard-errors on an ` +
+        `A /mandrel-deliver re-run cannot fix this — single-story-init.js hard-errors on an ` +
         `already-closed Story. The confirm CLI is idempotent and flips the label from ` +
         `the already-merged PR, then runs the land tail.`,
       evidence,
@@ -482,7 +482,7 @@ export function decideRecovery({
     nextCommand: NEXT_COMMANDS.close(storyId),
     detail:
       `Story is at \`${label ?? 'no agent:: state label'}\` — not mid-delivery, so there ` +
-      `is no strand to recover. Deliver it normally via /deliver ${storyId}.`,
+      `is no strand to recover. Deliver it normally via /mandrel-deliver ${storyId}.`,
     evidence,
   };
 }

package/.agents/scripts/lib/orchestration/docs-digest.js

@@ -1,7 +1,7 @@
 /**
  * docs-digest.js — per-run docs digest builder (Story #4338).
  *
- * `/deliver` story sub-agents previously re-read every file in
+ * `/mandrel-deliver` story sub-agents previously re-read every file in
  * `project.docsContextFiles` on every Story, re-paying the full docs payload
  * per child. This module produces a single **digest** — one compact markdown
  * outline per configured doc — that the parent threads into every child prompt
@@ -17,7 +17,7 @@
  * generate-and-write export so the planner-context surface
  * (`plan-context.js` / `authoring-context.js`) can produce a session docs
  * digest without duplicating the mkdir+writeFile plumbing shared by
- * `plan-context.js` / `authoring-context.js` and the `/deliver` workflow.
+ * `plan-context.js` / `authoring-context.js` and the `/mandrel-deliver` workflow.
  */
 
 import fs from 'node:fs';
@@ -145,7 +145,7 @@ export async function buildDocsDigest({ docsContextFiles, docsRoot } = {}) {
  * Build the docs digest and write it to `outputPath`, returning `null` (no
  * write) when there is nothing to digest. This is the single shared
  * generate-and-persist export both digest producers call: the per-run
- * `/deliver` docs digest (`helpers/deliver-story.md`) and the planner-
+ * `/mandrel-deliver` docs digest (`helpers/deliver-story.md`) and the planner-
  * context digest (`plan-context.js` → `authoring-context.js`, Story
  * #4433). Callers own path construction (temp-root layout, run id, etc.)
  * so both surfaces can keep — or deliberately share — their own convention;

package/.agents/scripts/lib/orchestration/lease-guard-shared.js

@@ -3,7 +3,7 @@
  * kernel shared by the three per-surface lease guards.
  *
  * The per-surface lease guards — today `single-story-lease-guard.js`;
- * historically also the retired Epic-tier deliver/plan guards —
+ * historically also the retired Epic-tier deliver/mandrel-plan guards —
  * each carried their own copy of
  * the operator-handle resolution and the fail-closed acquire wrapper around
  * `ticket-lease.acquireLease` (refuse any foreign assignee, throwing an
@@ -20,7 +20,7 @@
  *
  *   - **Operator candidates** — each surface supplies its own ordered
  *     candidate list (e.g. `--as` flag → `github.operatorHandle` →
- *     `git user.email` for `/deliver`; bare `operatorHandle` for the
+ *     `git user.email` for `/mandrel-deliver`; bare `operatorHandle` for the
  *     plan/standalone paths).
  *   - **Missing-handle behaviour** — `'null'` (return null; the caller fails
  *     closed at acquire time) vs `'throw'` (refuse immediately with surface

package/.agents/scripts/lib/orchestration/light-backstop.js

@@ -71,7 +71,7 @@ function runDiffBackstop({
  *
  * A refusal also **preserves** the work before it reports (Story #4875): the
  * implementation is finished and the recycle command hands the receipt to
- * `/plan`, so leaving it on an untracked local branch that routine cleanup may
+ * `/mandrel-plan`, so leaving it on an untracked local branch that routine cleanup may
  * reap is not an acceptable end state. Preservation is best-effort and its
  * outcome is reported either way — a failed push degrades the message, never
  * the verdict or the exit code.

package/.agents/scripts/lib/orchestration/light-escalation.js

@@ -7,9 +7,9 @@
  * {@link module:lib/orchestration/light-suitability}:
  *
  *   1. **Recycling the receipt.** A blocked diff backstop used to tell the
- *      operator to "escalate to `/plan`", which authored a brand-new Story and
+ *      operator to "escalate to `/mandrel-plan`", which authored a brand-new Story and
  *      left the receipt open with no successor — orphaning its branch, its
- *      worktree, and a finished implementation. Naming the receipt as `/plan`'s
+ *      worktree, and a finished implementation. Naming the receipt as `/mandrel-plan`'s
  *      *input* recycles it instead: tickets mode already fetches a ticket,
  *      rewrites it into properly-planned Stories, and closes the source as
  *      superseded.
@@ -45,13 +45,13 @@ import {
 } from '../observability/runtime-friction.js';
 
 /**
- * The `/plan` invocation that owns a Story the light path could not land.
+ * The `/mandrel-plan` invocation that owns a Story the light path could not land.
  *
  * @param {number} storyId
  * @returns {string}
  */
 function buildRecycleCommand(storyId) {
-  return `/plan ${storyId}`;
+  return `/mandrel-plan ${storyId}`;
 }
 
 /**
@@ -106,7 +106,7 @@ export async function recordGateRefusal({
 
 /**
  * Handle a blocked diff backstop: record the refusal as friction and return the
- * `/plan` invocation that recycles the receipt.
+ * `/mandrel-plan` invocation that recycles the receipt.
  *
  * Lives here rather than in the CLI so the shell stays a shell — the backstop
  * mode's job is to branch and print, not to decide what a refusal means.
@@ -152,7 +152,7 @@ export async function handleBlockedBackstop({
  * recoverable (Story #4875).
  *
  * A blocked backstop refuses the *land*, not the *work*: the implementation is
- * complete and the recycle command hands the receipt to `/plan`, which will
+ * complete and the recycle command hands the receipt to `/mandrel-plan`, which will
  * want it. Before this, that work existed only as a local `story-<id>` branch
  * with no remote ref — an untracked branch is exactly what the routine merged-
  * branch sweeps and worktree reaping treat as disposable, so the only copy of a

package/.agents/scripts/lib/orchestration/light-suitability.js

@@ -29,11 +29,11 @@
  *      3 below does the real enforcement against ground truth.
  *   2. **Over-scope stops, never silently proceeds ({@link
  *      resolveLightGateOutcome}).** An over-ceiling prompt does **not**
- *      hard-fail — it STOPS and asks the operator to escalate to `/plan` or
+ *      hard-fail — it STOPS and asks the operator to escalate to `/mandrel-plan` or
  *      proceed light. Both answers are executable: `proceed-light` is recorded
  *      through {@link resolveOperatorOverride}, which waives a *size
  *      prediction* only, never a risk rule, and only with a human present.
- *      Under `--yes` (unattended) it fails closed to recommending `/plan`.
+ *      Under `--yes` (unattended) it fails closed to recommending `/mandrel-plan`.
  *   3. **Diff-derived backstop ({@link checkLightDiffBackstop}).** After
  *      implementation the **actual** change set is re-checked with
  *      {@link module:lib/orchestration/review-depth.deriveChangeLevel} plus the
@@ -41,7 +41,7 @@
  *      the diff is the real scope signal — and an over-ceiling diff is blocked
  *      rather than landed silently. Story #4856 moved this from a `maxFiles: 4`
  *      cardinality ceiling to changed lines over implementation files, and made
- *      a block **recycle** its receipt Story through `/plan` tickets mode
+ *      a block **recycle** its receipt Story through `/mandrel-plan` tickets mode
  *      instead of orphaning it.
  *   4. **Minimal receipt Story ({@link buildReceiptStoryTicket}).** A
  *      `type::story` ticket is authored inline so `refs #`, history, telemetry,
@@ -131,7 +131,7 @@ function deriveUnwaivableRisk(decision) {
         `class(es) ${classes.join(', ')} — this is risk, not size, so no ` +
         `re-slicing, shrinking, or operator override satisfies it and the ` +
         `diff backstop would refuse the same footprint after the work is ` +
-        `finished; take this to /plan now`,
+        `finished; take this to /mandrel-plan now`,
     };
   }
   if (shape?.migrationSpan === true) {
@@ -142,7 +142,7 @@ function deriveUnwaivableRisk(decision) {
       reason:
         `un-waivable: the predicted footprint pairs a migration with its ` +
         `consumers — this is risk, not size, so no re-slicing or operator ` +
-        `override satisfies it; take this to /plan now`,
+        `override satisfies it; take this to /mandrel-plan now`,
     };
   }
   return { present: false, code: null, classes: [], reason: null };
@@ -237,7 +237,7 @@ export function resolveLedgeredVerdict({ route, reason } = {}) {
       route: 'full',
       reason: recordedReason || null,
       recorded: recordedReason !== '',
-      note: 'model verdict is not lite — standard /plan route',
+      note: 'model verdict is not lite — standard /mandrel-plan route',
     };
   }
   if (recordedReason === '') {
@@ -261,7 +261,7 @@ export function resolveLedgeredVerdict({ route, reason } = {}) {
  * light path. The deterministic effort/risk derivation and the ledgered model
  * verdict must **both** agree on `lite`; anything else — clearly-epic work, a
  * sensitive-path footprint, an unledgered verdict — resolves to `full` (the
- * conservative default that routes the operator to `/plan`).
+ * conservative default that routes the operator to `/mandrel-plan`).
  *
  * The predicted axes are declared by the caller: `predictedKinds` (the distinct
  * kinds of change; absent, each entry's `assumption` is its kind, so N
@@ -394,7 +394,7 @@ export function resolveOperatorOverride({
   }
   if (yes === true) {
     return refuse(
-      'operator override refused — it is attended-only, and --yes means nobody is at the keyboard; over-scope still fails closed to /plan',
+      'operator override refused — it is attended-only, and --yes means nobody is at the keyboard; over-scope still fails closed to /mandrel-plan',
     );
   }
 
@@ -412,7 +412,7 @@ export function resolveOperatorOverride({
             ? ` (${unwaivable.classes.join(', ')})`
             : ''
         }; waiving the size prediction cannot make this land light, and the ` +
-        `diff backstop would refuse the finished work. Escalate to /plan.`,
+        `diff backstop would refuse the finished work. Escalate to /mandrel-plan.`,
     );
   }
   if (!OVERRIDABLE_SHAPE_CODES.includes(code)) {
@@ -441,7 +441,7 @@ export function resolveOperatorOverride({
  * Resolve what the light gate does with a suitability decision (Story #4740
  * AC-3). Over-scope never hard-fails: it STOPS and asks the operator to choose,
  * unless the run is unattended (`--yes`), where it fails closed to recommending
- * `/plan` rather than silently proceeding light.
+ * `/mandrel-plan` rather than silently proceeding light.
  *
  *   - suitable          → `proceed-light`
  *   - over-scope + attended (`yes:false`)  → `ask-operator` (escalate | proceed)
@@ -498,7 +498,7 @@ export function resolveLightGateOutcome({
       action: 'escalate-plan',
       reasons: [
         ...reasons,
-        '--yes on over-scope fails closed to /plan (never silently proceeds light)',
+        '--yes on over-scope fails closed to /mandrel-plan (never silently proceeds light)',
       ],
     };
   }
@@ -519,7 +519,7 @@ export function resolveLightGateOutcome({
     options: ['escalate-plan', 'proceed-light'],
     reasons: [
       ...reasons,
-      'predicted scope exceeds the light ceilings — STOP and ask the operator to escalate to /plan or proceed light',
+      'predicted scope exceeds the light ceilings — STOP and ask the operator to escalate to /mandrel-plan or proceed light',
     ],
   };
 }
@@ -587,7 +587,7 @@ export function checkLightDiffBackstop({
       magnitude: null,
       ceilings: resolved,
       reasons: [
-        'actual change set is unknown or empty — cannot verify the diff is light; escalate to /plan',
+        'actual change set is unknown or empty — cannot verify the diff is light; escalate to /mandrel-plan',
       ],
     };
   }
@@ -646,12 +646,12 @@ function normalizeMagnitude(magnitude) {
 function describeSensitivity({ level, classes }) {
   if (classes.length > 0) {
     return [
-      `diff intersects sensitive-path class(es) ${classes.join(', ')} — escalate to /plan (do not land light)`,
+      `diff intersects sensitive-path class(es) ${classes.join(', ')} — escalate to /mandrel-plan (do not land light)`,
     ];
   }
   if (level !== 'low') {
     return [
-      'sensitive-path classification unavailable — cannot verify the diff is non-sensitive; escalate to /plan',
+      'sensitive-path classification unavailable — cannot verify the diff is non-sensitive; escalate to /mandrel-plan',
     ];
   }
   return [];
@@ -667,18 +667,18 @@ function describeSensitivity({ level, classes }) {
 function describeMagnitude(measured, ceilings) {
   if (measured === null) {
     return [
-      'change magnitude could not be measured (unreadable or unparseable numstat) — cannot verify the diff is light; escalate to /plan',
+      'change magnitude could not be measured (unreadable or unparseable numstat) — cannot verify the diff is light; escalate to /mandrel-plan',
     ];
   }
   const reasons = [];
   if (measured.implLines > ceilings.maxImplLines) {
     reasons.push(
-      `diff changes ${measured.implLines} implementation line(s) (> maxImplLines ${ceilings.maxImplLines}) — escalate to /plan (do not land light)`,
+      `diff changes ${measured.implLines} implementation line(s) (> maxImplLines ${ceilings.maxImplLines}) — escalate to /mandrel-plan (do not land light)`,
     );
   }
   if (measured.implFiles > ceilings.maxImplFiles) {
     reasons.push(
-      `diff spans ${measured.implFiles} implementation file(s) (> maxImplFiles ${ceilings.maxImplFiles}) — escalate to /plan (do not land light)`,
+      `diff spans ${measured.implFiles} implementation file(s) (> maxImplFiles ${ceilings.maxImplFiles}) — escalate to /mandrel-plan (do not land light)`,
     );
   }
   return reasons;
@@ -832,7 +832,7 @@ export function buildReceiptStoryTicket({
       goal: `${text}${amendNote}`,
       spec:
         `Delivered via /deliver-light as a validated single-session change — ` +
-        `the /plan session is removed for genuinely small work while every ` +
+        `the /mandrel-plan session is removed for genuinely small work while every ` +
         `single-story-close gate runs byte-identical.${amendNote}` +
         `${overrideNote} ` +
         `Operator prompt: ${text}`,

package/.agents/scripts/lib/orchestration/plan-context.js

@@ -1,5 +1,5 @@
 /**
- * plan-context.js — single planner-context envelope build for `/plan`.
+ * plan-context.js — single planner-context envelope build for `/mandrel-plan`.
  *
  * Folds the authoring-context builders plus the cross-Story dup search into
  * ONE JSON envelope, so the authoring middle reads a single file instead of
@@ -481,7 +481,7 @@ export function buildDeliverLightSuggestion(complexitySignals) {
     reasons: suggested
       ? [
           'seed carries no risk signal (no risk-heuristic hits, no ' +
-            'sensitive-path classes) — the operator may prefer /deliver for ' +
+            'sensitive-path classes) — the operator may prefer /mandrel-deliver for ' +
             "this scope; the light path's own gate and diff backstop decide size",
         ]
       : reasons,
@@ -597,7 +597,7 @@ function uiSurfaceReason({
  * derived from the consumer's own checkout, so a frontend-less project — this
  * repository included — resolves falsey and the offer never fires.
  *
- * The signal carries **no routing authority** (`automatic: false`): `/plan`
+ * The signal carries **no routing authority** (`automatic: false`): `/mandrel-plan`
  * may say that a plan touches UI and that `/prototype` exists, and must never
  * invoke it. Pure over its inputs and total — a malformed signal bag or an
  * unreadable manifest degrades, never throws.
@@ -911,7 +911,7 @@ async function gatherEnvelopeInputs({
     (gather) => gather(),
     // The per-mode envelope gathers (Story #4952): the duplicate search, the
     // authoring-context fold and the docs digest have no data dependency on
-    // one another, so their serialization was incidental and `/plan` paid it
+    // one another, so their serialization was incidental and `/mandrel-plan` paid it
     // with the operator waiting at Gate #1.
     { concurrency: FANOUT_CONCURRENCY },
   );

package/.agents/scripts/lib/orchestration/plan-critic-conditions.js

@@ -1,6 +1,6 @@
 /**
  * plan-critic-conditions.js — size/heuristic-conditional dispatch decisions for
- * the /plan author-step critics (Epic #4474 PR6, design §4).
+ * the /mandrel-plan author-step critics (Epic #4474 PR6, design §4).
  *
  * The collapsed plan flow keeps the consolidation and pre-mortem critics as
  * fresh-context sub-agent dispatches, but makes each dispatch
@@ -44,7 +44,7 @@
  * (`appendCriticSkip`) by the caller so under-firing is auditable.
  *
  * Pure, synchronous, no I/O. The single caller is `plan-critics-evaluate.js`,
- * driven by the `plan-critics.js` CLI that `/plan` runs between Author and
+ * driven by the `plan-critics.js` CLI that `/mandrel-plan` runs between Author and
  * Persist (Story #4592); the CLI owns reading the authored artifacts and the
  * resolved config.
  */

package/.agents/scripts/lib/orchestration/plan-critics-evaluate.js

@@ -1,8 +1,8 @@
 /**
  * plan-critics-evaluate.js — shared critic-dispatch evaluation for the
- * collapsed /plan flow (#4496 fix 6).
+ * collapsed /mandrel-plan flow (#4496 fix 6).
  *
- * One consumer: the `plan-critics.js` CLI, which `/plan` runs between its
+ * One consumer: the `plan-critics.js` CLI, which `/mandrel-plan` runs between its
  * Author and Persist steps. The CLI loads the draft artifacts, calls this
  * module, prints the verdict as JSON, and records every skip on the
  * plan-metrics ledger; the workflow dispatches a fresh-context critic

package/.agents/scripts/lib/orchestration/plan-metrics.js

@@ -1,7 +1,7 @@
 /**
  * plan-metrics.js — append-only plan-invocation ledger (Epic #4474, PR1).
  *
- * The `/plan` collapse (#4474) is measured, not asserted: before any pipeline
+ * The `/mandrel-plan` collapse (#4474) is measured, not asserted: before any pipeline
  * phase is removed, every plan CLI invocation stamps an entry/exit record so
  * the current 12-phase baseline is captured on disk. Each record is one
  * newline-terminated JSON line appended to

package/.agents/scripts/lib/orchestration/plan-persist/persist-helpers.js

@@ -1,5 +1,5 @@
 /**
- * persist-helpers.js — pure helper surface for the flat Story `/plan` persist.
+ * persist-helpers.js — pure helper surface for the flat Story `/mandrel-plan` persist.
  *
  * Exports:
  *   - `resolveBaseBranchRef(config)` — the one place the persist gates learn

package/.agents/scripts/lib/orchestration/plan-persist/plan-context-source.js

@@ -1,6 +1,6 @@
 /**
  * plan-context-source.js — locate and read the `plan-context.js` envelope so
- * persist can derive the `/plan --tickets` source ids from the run that
+ * persist can derive the `/mandrel-plan --tickets` source ids from the run that
  * actually fetched them (Story #4554).
  *
  * This lives beside the persist ops rather than inside `plan-persist.js` so
@@ -17,7 +17,7 @@ import path from 'node:path';
 import { Logger } from '../../Logger.js';
 
 /**
- * Filename the `/plan` interrogate step writes its envelope to inside
+ * Filename the `/mandrel-plan` interrogate step writes its envelope to inside
  * `--plan-dir` (`plan-context.js --out <plan-dir>/plan-context.json`).
  */
 export const PLAN_CONTEXT_FILENAME = 'plan-context.json';
@@ -81,7 +81,7 @@ export async function loadPlanContextEnvelope(planContext) {
   if (!planContext) {
     Logger.warn(
       '[plan-persist] no --plan-dir or --plan-context given, so no ' +
-        'plan-context envelope was read. If this was a `/plan --tickets` ' +
+        'plan-context envelope was read. If this was a `/mandrel-plan --tickets` ' +
         'run, its source tickets can only come from --source-tickets and ' +
         `will NOT be closed otherwise. ${CAPTURE_HINT}`,
     );

package/.agents/scripts/lib/orchestration/plan-persist/run-plan-persist.js

@@ -1,5 +1,5 @@
 /**
- * run-plan-persist.js — flat Story persist for the v2 `/plan` collapse
+ * run-plan-persist.js — flat Story persist for the v2 `/mandrel-plan` collapse
  * (Stage 3 — `docs/roadmap.md`).
  *
  * Ordered, fail-closed pipeline:
@@ -293,7 +293,7 @@ async function renderRunScopedPlanMetricsLine({
  *      from the seed.
  *
  * The resolved route decides whether the created Stories carry the
- * {@link LITE_ROUTE_LABEL} **hint** (never the control signal — `/deliver`
+ * {@link LITE_ROUTE_LABEL} **hint** (never the control signal — `/mandrel-deliver`
  * re-derives the route from the Story body's shape) and the `route` block
  * ledgered on their `story-plan-state` checkpoint, including the authored
  * verdict, its recorded reason, and the per-Story shape evidence. A refused
@@ -531,7 +531,7 @@ async function enforceReachability(reachability, config) {
  * concurrency, but the `await` on that whole fan-out is what keeps the
  * Story #4541 invariant intact: *every* checkpoint is on its ticket before the
  * first `agent::ready` flip is issued, so `ready` still means "fully
- * persisted" and a `/deliver` that picks a Story up cannot read a null
+ * persisted" and a `/mandrel-deliver` that picks a Story up cannot read a null
  * checkpoint. Concurrency inside the phase is safe; overlapping the phases is
  * the race this ordering exists to close.
  *
@@ -611,7 +611,7 @@ function logEffectiveRoute(route, isLiteRoute) {
     Logger.info(
       `[plan-persist] ceremony-lite route upheld by the shape backstop: ` +
         `created Stories carry the ${LITE_ROUTE_LABEL} hint ` +
-        `(recorded reason: ${route.authored.reason}). /deliver re-derives ` +
+        `(recorded reason: ${route.authored.reason}). /mandrel-deliver re-derives ` +
         'the route from each Story body — the label is never the control signal.',
     );
     return;
@@ -644,10 +644,10 @@ function logPersistEpilogue({ created, primary, planRunLabel }) {
       `; primary #${primary.id} is agent::ready.`,
   );
   Logger.info(
-    `[plan-persist] Deliver with: /deliver ${created.map((s2) => s2.id).join(' ')}`,
+    `[plan-persist] Deliver with: /mandrel-deliver ${created.map((s2) => s2.id).join(' ')}`,
   );
   // Metadata only — a GitHub filter for the cohort this run authored, never
-  // a delivery-resolution input (/deliver stays ids-only, Story #4540).
+  // a delivery-resolution input (/mandrel-deliver stays ids-only, Story #4540).
   Logger.info(
     `[plan-persist] Cohort grouping label: ${planRunLabel} — filter with ` +
       `label:${planRunLabel}`,