skillwiki 0.10.35 → 0.10.37

package/dist/{chunk-MIQOBEOW.js → chunk-BS556WUE.js}

@@ -484,7 +484,7 @@ var MATCHERS = [
   },
   {
     kind: "password",
-    re: /\b(?:pass(?:word|wd)?)["']?\s*[:=]\s*["']?([^\s`"']{8,})["']?/gi,
+    re: /\b(?:password|passwd)["']?\s*[:=]\s*["']?([^\s`"']{8,})["']?/gi,
     valueGroup: 1
   },
   {
@@ -512,7 +512,7 @@ function isSyntheticPlaceholder(value) {
 }
 function isNonSecretTokenCapture(value) {
   if (value.startsWith("//")) return true;
-  if (/^[a-z]{2,}(?:-[a-z]{2,})+$/.test(value)) return true;
+  if (/^[a-z0-9.]+(?:-[a-z0-9.]+)+$/.test(value) && !/^[0-9a-f]+(?:-[0-9a-f]+)+$/.test(value)) return true;
   return false;
 }
 function collectMatches(text) {

package/dist/{chunk-K4OGG5KJ.js → chunk-E3JBAURS.js}

@@ -6,7 +6,7 @@ import {
   readPage,
   scanSensitiveContent,
   splitFrontmatter
-} from "./chunk-MIQOBEOW.js";
+} from "./chunk-BS556WUE.js";
 
 // src/utils/log-events.ts
 import { mkdir, open, readFile, readdir } from "fs/promises";

package/dist/{chunk-XYGGDGHR.js → chunk-IFMHQETQ.js}

@@ -8,7 +8,7 @@ import {
   ok,
   scanSensitiveContent,
   scanVault
-} from "./chunk-MIQOBEOW.js";
+} from "./chunk-BS556WUE.js";
 
 // src/utils/atomic-write.ts
 import { randomBytes } from "crypto";

package/dist/{chunk-GXT5WTSE.js → chunk-JUUZJJIF.js}

@@ -8,7 +8,7 @@ import {
   readLogEvents,
   resolveExistingRegularFileInsideVault,
   writeLogEvent
-} from "./chunk-K4OGG5KJ.js";
+} from "./chunk-E3JBAURS.js";
 import {
   ExitCode,
   RawSourceSchema,
@@ -19,7 +19,7 @@ import {
   scanSensitiveContent,
   scanVault,
   splitFrontmatter
-} from "./chunk-MIQOBEOW.js";
+} from "./chunk-BS556WUE.js";
 
 // src/utils/source-lifecycle.ts
 import { basename } from "path";

package/dist/{chunk-BY7V7QPU.js → chunk-LACQJ6RD.js}

@@ -22,12 +22,12 @@ import {
   runSyncLintDelta,
   runVaultSyncPullHelper,
   supersedeStaleReviewRequiredJournals
-} from "./chunk-JJ654NVJ.js";
+} from "./chunk-XRBUABGE.js";
 import {
   ExitCode,
   err,
   ok
-} from "./chunk-MIQOBEOW.js";
+} from "./chunk-BS556WUE.js";
 
 // src/utils/managed-write-preflight.ts
 import { existsSync as existsSync3 } from "fs";

package/dist/{chunk-SNCFIJ5E.js → chunk-QVO332CT.js}

@@ -3,11 +3,11 @@ import {
   ROOT_INDEX_SECTION_ORDER,
   atomicWriteText,
   buildRootIndexUniverse
-} from "./chunk-XYGGDGHR.js";
+} from "./chunk-IFMHQETQ.js";
 import {
   err,
   ok
-} from "./chunk-MIQOBEOW.js";
+} from "./chunk-BS556WUE.js";
 
 // src/utils/index-projection.ts
 import { readFile } from "fs/promises";

package/dist/{chunk-2X2TCLHR.js → chunk-WJVG3DD5.js}

@@ -6,7 +6,7 @@ import {
 import {
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-SNCFIJ5E.js";
+} from "./chunk-QVO332CT.js";
 import {
   CONFIG_KEYS,
   acquireOwnedSyncLock,
@@ -34,15 +34,15 @@ import {
   snapshotterAliasForLocalHost,
   toUndirectedWeighted,
   writeDotenv
-} from "./chunk-JJ654NVJ.js";
+} from "./chunk-XRBUABGE.js";
 import {
   atomicWriteText,
   prepareTypedPage
-} from "./chunk-XYGGDGHR.js";
+} from "./chunk-IFMHQETQ.js";
 import {
   eventPathFor,
   writeLogEvent
-} from "./chunk-K4OGG5KJ.js";
+} from "./chunk-E3JBAURS.js";
 import {
   CompoundSchema,
   ExitCode,
@@ -63,7 +63,7 @@ import {
   scanVault,
   splitFrontmatter,
   systemdPropertyFor
-} from "./chunk-MIQOBEOW.js";
+} from "./chunk-BS556WUE.js";
 
 // src/commands/log-append.ts
 import { readFile, stat } from "fs/promises";
@@ -4849,7 +4849,7 @@ async function runQuery(input) {
   }).filter((r) => r.score > 0).sort((a, b) => b.score - a.score || a.path.localeCompare(b.path)).slice(0, limit);
   let pendingSources;
   if (input.includePending) {
-    const { runSourcesPending } = await import("./sources-FCZCPOYB.js");
+    const { runSourcesPending } = await import("./sources-LIJAUXFU.js");
     const pending = await runSourcesPending({
       vault: input.vault,
       match: input.text,

package/dist/{chunk-JJ654NVJ.js → chunk-XRBUABGE.js}

@@ -2,7 +2,7 @@
 import {
   atomicWriteText,
   buildRootIndexUniverse
-} from "./chunk-XYGGDGHR.js";
+} from "./chunk-IFMHQETQ.js";
 import {
   authorizeRawOperation,
   buildSourceReferenceIndex,
@@ -22,7 +22,7 @@ import {
   resolveExistingRegularFileInsideVault,
   stripFencedBlocks,
   writeLogEvent
-} from "./chunk-K4OGG5KJ.js";
+} from "./chunk-E3JBAURS.js";
 import {
   ExitCode,
   FleetManifestSchema,
@@ -40,7 +40,7 @@ import {
   scanVault,
   splitFrontmatter,
   vaultIoConcurrency
-} from "./chunk-MIQOBEOW.js";
+} from "./chunk-BS556WUE.js";
 
 // src/utils/sync-lock.ts
 import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "fs";

package/dist/cli.js

@@ -38,7 +38,7 @@ import {
   scanConflictMarkerBlocksInText,
   snapshotterHealthChecks,
   upsertIndexEntry
-} from "./chunk-2X2TCLHR.js";
+} from "./chunk-WJVG3DD5.js";
 import {
   normalizeDistTag,
   readCache,
@@ -51,7 +51,7 @@ import {
   UNMANAGED_START,
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-SNCFIJ5E.js";
+} from "./chunk-QVO332CT.js";
 import {
   VAULT_COMMIT_PATHSPEC,
   runManagedWritePreflight,
@@ -63,7 +63,7 @@ import {
   runSyncStatus,
   runSyncUnlock,
   stageVaultContentChanges
-} from "./chunk-BY7V7QPU.js";
+} from "./chunk-LACQJ6RD.js";
 import {
   FLEET_REL_PATH,
   acquireOwnedSyncLock,
@@ -126,12 +126,12 @@ import {
   supersedeStaleReviewRequiredJournals,
   taxonomyCommentForPage,
   writeDotenv
-} from "./chunk-JJ654NVJ.js";
+} from "./chunk-XRBUABGE.js";
 import {
   assertTargetInsideVault,
   atomicWriteText,
   prepareTypedPage
-} from "./chunk-XYGGDGHR.js";
+} from "./chunk-IFMHQETQ.js";
 import {
   applySourceDisposition,
   decodeSourceActionApproval,
@@ -139,7 +139,7 @@ import {
   inventorySources,
   planSourceDisposition,
   runSourcesPending
-} from "./chunk-GXT5WTSE.js";
+} from "./chunk-JUUZJJIF.js";
 import {
   authorizeRawOperation,
   buildSourceReferenceIndex,
@@ -155,7 +155,7 @@ import {
   resolveExistingRegularFileInsideVault,
   validateLogEvent,
   writeLogEvent
-} from "./chunk-K4OGG5KJ.js";
+} from "./chunk-E3JBAURS.js";
 import {
   ExitCode,
   MetaSchema,
@@ -171,7 +171,7 @@ import {
   scanSensitiveContent,
   scanVault,
   splitFrontmatter
-} from "./chunk-MIQOBEOW.js";
+} from "./chunk-BS556WUE.js";
 
 // src/cli.ts
 import { join as join38 } from "path";
@@ -181,11 +181,19 @@ import { Command } from "commander";
 function printJson(r) {
   process.stdout.write(JSON.stringify(r) + "\n");
 }
-function printHuman(r) {
+function printHuman(r, opts = {}) {
   if (r.ok) {
     if (typeof r.data === "object" && r.data !== null && "humanHint" in r.data) {
-      process.stdout.write(`${r.data.humanHint}
+      const humanHint = r.data.humanHint;
+      if (!opts.detailHints?.length) {
+        process.stdout.write(`${humanHint}
 `);
+      } else {
+        const existingLines = new Set(humanHint.split("\n"));
+        const detailLines2 = opts.detailHints.filter((line) => !existingLines.has(line));
+        process.stdout.write(`${[humanHint, ...detailLines2].join("\n")}
+`);
+      }
     } else {
       process.stdout.write(`OK
 ${formatData(r.data)}
@@ -202,6 +210,45 @@ function formatData(d) {
   return JSON.stringify(d, null, 2);
 }
 
+// src/utils/lint-detail-hints.ts
+function lintDetailHints(data) {
+  const record = asRecord(data);
+  if (!record) return [];
+  const bySeverity = asRecord(record.by_severity);
+  if (bySeverity && Array.isArray(bySeverity.error)) {
+    return detailLines(bySeverity.error, false);
+  }
+  return Array.isArray(record.buckets) ? detailLines(record.buckets, true) : [];
+}
+function healthLintDetailHints(data) {
+  const record = asRecord(data);
+  const components = asRecord(record?.components);
+  const lint = asRecord(components?.lint);
+  return Array.isArray(lint?.buckets) ? detailLines(lint.buckets, true) : [];
+}
+function detailLines(buckets, requireErrorSeverity) {
+  const seen = /* @__PURE__ */ new Set();
+  const lines = [];
+  for (const bucket of buckets) {
+    const record = asRecord(bucket);
+    if (!record || requireErrorSeverity && record.severity !== "error") continue;
+    const name = nonEmptyBucketName(record);
+    if (!name || seen.has(name)) continue;
+    seen.add(name);
+    lines.push(`detail: skillwiki lint --only ${name} --examples 3`);
+  }
+  return lines;
+}
+function nonEmptyBucketName(bucket) {
+  if (typeof bucket.kind !== "string" || !/^[a-z0-9_]+$/.test(bucket.kind)) return null;
+  if (typeof bucket.count === "number") return bucket.count > 0 ? bucket.kind : null;
+  if (Array.isArray(bucket.items)) return bucket.items.length > 0 ? bucket.kind : null;
+  return null;
+}
+function asRecord(value) {
+  return typeof value === "object" && value !== null ? value : null;
+}
+
 // src/utils/deprecation.ts
 import { readFileSync } from "fs";
 import { join } from "path";
@@ -2081,8 +2128,9 @@ import { existsSync as existsSync4, mkdirSync, readFileSync as readFileSync9, re
 import { join as join15 } from "path";
 
 // src/commands/work-validate.ts
-import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync8 } from "fs";
+import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync8, statSync as statSync2 } from "fs";
 import { join as join14 } from "path";
+var GOAL_PLAN_MODE_FILES = /* @__PURE__ */ new Set(["spec.md", "plan.md", "build-report.md"]);
 function normalizeWorkItemRel(workItem) {
   return workItem.replace(/\\/g, "/").replace(/^\.?\//, "");
 }
@@ -2092,6 +2140,22 @@ function scanFileConflicts(relPath, text) {
 function countUnchecked(text) {
   return [...text.matchAll(/^- \[ \]/gm)].length;
 }
+function isGoalPlanMode(value) {
+  return typeof value === "string" && ["goal-plan", "goal"].includes(value.trim().toLowerCase());
+}
+function isDirectory(path) {
+  try {
+    return statSync2(path).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function isCompletedStatus(status) {
+  return status === "completed" || status === "complete" || status === "done";
+}
+function planClaimsCompletion(status, goalPlanMode) {
+  return goalPlanMode ? isCompletedStatus(status) : status === "completed" || status === "complete";
+}
 function extractPrMetadata(fm) {
   const keys = [
     "pr_url",
@@ -2148,21 +2212,31 @@ async function runWorkValidate(input) {
   }
   const findings = [];
   const status = {};
-  let evidencePresent = false;
   let unchecked = 0;
   let conflicts = 0;
   let decisionsPresent = false;
   let prMetadata = null;
   const files = readdirSync(workDir).filter((f) => f.endsWith(".md"));
-  if (!files.includes("spec.md")) {
-    findings.push({ code: "missing_spec", path: `${rel}/spec.md`, message: "spec.md is required" });
-  }
-  for (const file of files) {
-    const abs = join14(workDir, file);
-    let text;
+  const markdownFiles = files.map((file) => {
     try {
-      text = readFileSync8(abs, "utf8");
+      const text = readFileSync8(join14(workDir, file), "utf8");
+      return { file, text, frontmatter: extractFrontmatter(text) };
     } catch {
+      return { file, text: null, frontmatter: null };
+    }
+  });
+  const goalPlanMode = markdownFiles.some(
+    ({ file, frontmatter }) => GOAL_PLAN_MODE_FILES.has(file) && frontmatter?.ok && isGoalPlanMode(frontmatter.data.mode)
+  );
+  let evidencePresent = goalPlanMode && (files.includes("build-report.md") || isDirectory(join14(workDir, "evidence")));
+  if (!files.includes("spec.md") && !goalPlanMode) {
+    findings.push({ code: "missing_spec", path: `${rel}/spec.md`, message: "spec.md is required" });
+  }
+  if (goalPlanMode && !files.includes("plan.md")) {
+    findings.push({ code: "missing_plan", path: `${rel}/plan.md`, message: "goal-plan mode requires plan.md" });
+  }
+  for (const { file, text, frontmatter } of markdownFiles) {
+    if (text === null || frontmatter === null) {
       findings.push({ code: "unreadable", path: `${rel}/${file}`, message: "cannot read file" });
       continue;
     }
@@ -2176,14 +2250,17 @@ async function runWorkValidate(input) {
       });
     }
     unchecked += countUnchecked(text);
-    const fm = extractFrontmatter(text);
-    if (file === "spec.md" && fm.ok) {
-      status.spec = typeof fm.data.status === "string" ? fm.data.status : void 0;
-      prMetadata = extractPrMetadata(fm.data);
-      validatePrMetadata(prMetadata, findings);
-    }
-    if (file === "plan.md" && fm.ok) {
-      status.plan = typeof fm.data.status === "string" ? fm.data.status : void 0;
+    if (frontmatter.ok) {
+      if (file === "spec.md") {
+        status.spec = typeof frontmatter.data.status === "string" ? frontmatter.data.status : void 0;
+      }
+      if (file === "plan.md") {
+        status.plan = typeof frontmatter.data.status === "string" ? frontmatter.data.status : void 0;
+      }
+      if (file === (goalPlanMode ? "plan.md" : "spec.md")) {
+        prMetadata = extractPrMetadata(frontmatter.data);
+        validatePrMetadata(prMetadata, findings);
+      }
     }
     if (file === "evidence.md" || file === "retro.md") {
       evidencePresent = true;
@@ -2196,25 +2273,27 @@ async function runWorkValidate(input) {
     }
   }
   if (input.requireComplete) {
-    if (status.spec && status.spec !== "completed" && status.spec !== "complete" && status.spec !== "done") {
+    const specSource = goalPlanMode ? "plan" : "spec";
+    const specSourceStatus = goalPlanMode ? status.plan : status.spec;
+    if (specSourceStatus && !isCompletedStatus(specSourceStatus)) {
       findings.push({
         code: "spec_not_completed",
-        path: `${rel}/spec.md`,
-        message: `spec status is ${status.spec}, expected completed`
+        path: `${rel}/${specSource}.md`,
+        message: `${specSource} status is ${specSourceStatus}, expected completed`
       });
     }
-    if (!status.spec) {
+    if (!specSourceStatus) {
       findings.push({
         code: "spec_status_missing",
-        path: `${rel}/spec.md`,
-        message: "spec frontmatter status missing for completion"
+        path: `${rel}/${specSource}.md`,
+        message: `${specSource} frontmatter status missing for completion`
       });
     }
     if (!evidencePresent) {
       findings.push({
         code: "missing_evidence",
         path: rel,
-        message: "completion requires evidence.md or retro.md"
+        message: goalPlanMode ? "completion requires build-report.md, evidence/, evidence.md, or retro.md" : "completion requires evidence.md or retro.md"
       });
     }
     if (unchecked > 0) {
@@ -2225,12 +2304,12 @@ async function runWorkValidate(input) {
       });
     }
   }
-  if (status.plan === "completed" || status.plan === "complete") {
-    if (!evidencePresent) {
+  if (planClaimsCompletion(status.plan, goalPlanMode)) {
+    if (!evidencePresent && !(goalPlanMode && input.requireComplete)) {
       findings.push({
         code: "missing_evidence",
         path: rel,
-        message: "plan is completed but evidence/retro is missing"
+        message: goalPlanMode ? "plan is completed but build-report.md, evidence/, evidence.md, or retro.md is missing" : "plan is completed but evidence/retro is missing"
       });
     }
   }
@@ -3348,7 +3427,7 @@ ${fmRewritten}
   }
   let indexUpdated = false;
   if (!isRaw) {
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-WUAKRTAE.js");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-ZXFN5DT4.js");
     const before = await readFile7(join18(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
@@ -3468,7 +3547,7 @@ async function runRemove(input) {
   if (relPath.endsWith(".md") && !relPath.startsWith("raw/")) {
     const { readFile: readFile20 } = await import("fs/promises");
     const { join: pathJoin } = await import("path");
-    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-WUAKRTAE.js");
+    const { renderRootIndex: renderRootIndex2, writeRootIndexProjection: writeRootIndexProjection2 } = await import("./index-projection-ZXFN5DT4.js");
     const before = await readFile20(pathJoin(input.vault, "index.md"), "utf8").catch(() => "");
     const fullTarget = relPath.replace(/\.md$/, "");
     const bare = fullTarget.split("/").pop() ?? fullTarget;
@@ -8152,7 +8231,7 @@ function releaseSnapshotFlock(handle) {
 }
 
 // src/commands/backup.ts
-import { statSync as statSync2, readdirSync as readdirSync2, readFileSync as readFileSync15, mkdirSync as mkdirSync5, writeFileSync as writeFileSync6 } from "fs";
+import { statSync as statSync3, readdirSync as readdirSync2, readFileSync as readFileSync15, mkdirSync as mkdirSync5, writeFileSync as writeFileSync6 } from "fs";
 import { join as join31, relative as relative3, dirname as dirname10 } from "path";
 import { PutObjectCommand, HeadObjectCommand, ListObjectsV2Command, GetObjectCommand, DeleteObjectsCommand } from "@aws-sdk/client-s3";
 
@@ -8201,7 +8280,7 @@ async function runBackupSync(input) {
   const files = [...walkMarkdown(input.vault, input.vault)];
   for (const relPath of files) {
     const absPath = join31(input.vault, relPath);
-    const localStat = statSync2(absPath);
+    const localStat = statSync3(absPath);
     let needsUpload = true;
     try {
       const head = await client.send(new HeadObjectCommand({ Bucket: input.bucket, Key: relPath }));
@@ -8278,7 +8357,7 @@ async function runBackupRestore(input) {
       if (!obj.Key) continue;
       const localPath = join31(target, obj.Key);
       try {
-        const localStat = statSync2(localPath);
+        const localStat = statSync3(localPath);
         if (obj.LastModified && localStat.mtime > obj.LastModified) {
           conflicts++;
           continue;
@@ -8322,7 +8401,7 @@ async function runBackupRestore(input) {
 }
 
 // src/commands/status.ts
-import { existsSync as existsSync10, statSync as statSync3 } from "fs";
+import { existsSync as existsSync10, statSync as statSync4 } from "fs";
 import { readFile as readFile16 } from "fs/promises";
 import { join as join32 } from "path";
 async function runStatus(input) {
@@ -8367,7 +8446,7 @@ async function runStatus(input) {
   let maxTime = 0;
   for (const page of allPages) {
     try {
-      const st = statSync3(page.absPath);
+      const st = statSync4(page.absPath);
       if (st.mtimeMs > maxTime) {
         maxTime = st.mtimeMs;
         lastModified = st.mtime.toISOString();
@@ -9256,9 +9335,9 @@ async function postCommit(vault, exitCode) {
 }
 
 // src/commands/write-preflight.ts
-import { existsSync as existsSync14, readFileSync as readFileSync17, statSync as statSync4 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync17, statSync as statSync5 } from "fs";
 async function runWritePreflightCommand(input) {
-  if (!existsSync14(input.vault) || !statSync4(input.vault).isDirectory()) {
+  if (!existsSync14(input.vault) || !statSync5(input.vault).isDirectory()) {
     return {
       exitCode: ExitCode.VAULT_PATH_INVALID,
       result: err(GateError.VAULT_PATH_INVALID, { path: input.vault })
@@ -9322,9 +9401,16 @@ var program = new Command();
 program.name("skillwiki").description("Deterministic helpers for CodeWiki skills").version(pkg.version);
 program.option("--human", "render terminal-readable output instead of JSON");
 async function emit(r, vault, opts) {
-  if (program.opts().human) printHuman(r.result);
-  else printJson(r.result);
+  if (program.opts().human) {
+    const detailHints = r.result.ok ? opts?.humanDetailHints?.(r.result.data) : void 0;
+    printHuman(r.result, { detailHints });
+  } else {
+    printJson(r.result);
+  }
   if (vault && opts?.postCommit !== false) await postCommit(vault, r.exitCode);
+  await new Promise((resolve6, reject) => {
+    process.stdout.write("", (error) => error ? reject(error) : resolve6());
+  });
   process.exit(r.exitCode);
 }
 function dirtyVolumeBlock(vault, command) {
@@ -9386,7 +9472,7 @@ async function emitManagedVaultWrite(vault, command, mutate, opts) {
   if (dirty) {
     return emit(dirty, void 0, { postCommit: false });
   }
-  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-4YCJVF64.js");
+  const { runManagedWriteTransaction: runManagedWriteTransaction2 } = await import("./managed-write-preflight-ANQPMOF4.js");
   const run = await runManagedWriteTransaction2({
     vault,
     command,
@@ -9803,6 +9889,7 @@ projectionsCmd.command("repair-legacy [vault]").description("repair one supporte
 });
 program.command("lint [vault]").description("run all vault health checks").option("--days <n>", "stale threshold", (s) => parseInt(s, 10), 90).option("--lines <n>", "pagesize threshold", (s) => parseInt(s, 10), 200).option("--log-threshold <n>", "log rotation threshold", (s) => parseInt(s, 10), 500).option("--fix", "auto-fix supported lint violations").option("--only <bucket>", "run only the specified lint bucket").option("--summary", "emit bounded bucket counts instead of full item arrays", false).option("--examples <n>", "example count per bucket in summary mode", (s) => parseInt(s, 10), 3).option("--wiki <name>", "wiki profile name").action(async (vault, opts) => {
   const v = await resolveVaultArg(vault, opts.wiki);
+  const humanDetailHints = opts.only ? void 0 : lintDetailHints;
   if (!v.ok) emit({ exitCode: v.exitCode, result: v.payload });
   else if (opts.fix && opts.summary) return emitGuardedVaultWrite(
     v.vault,
@@ -9817,7 +9904,8 @@ program.command("lint [vault]").description("run all vault health checks").optio
       only: opts.only,
       summary: true,
       examplesLimit: opts.examples
-    })
+    }),
+    { humanDetailHints }
   );
   else if (opts.fix) return emitGuardedVaultWrite(
     v.vault,
@@ -9831,7 +9919,8 @@ program.command("lint [vault]").description("run all vault health checks").optio
       fix: true,
       only: opts.only,
       summary: false
-    })
+    }),
+    { humanDetailHints }
   );
   else if (opts.summary) emit(await runLint({
     vault: v.vault,
@@ -9843,7 +9932,7 @@ program.command("lint [vault]").description("run all vault health checks").optio
     only: opts.only,
     summary: true,
     examplesLimit: opts.examples
-  }), v.vault);
+  }), v.vault, { humanDetailHints });
   else emit(await runLint({
     vault: v.vault,
     source: vault ? "flag" : void 0,
@@ -9852,7 +9941,7 @@ program.command("lint [vault]").description("run all vault health checks").optio
     logThreshold: opts.logThreshold,
     fix: false,
     only: opts.only
-  }), v.vault);
+  }), v.vault, { humanDetailHints });
 });
 program.command("health [vault]").description("bounded whole-system wiki health report").option("--wiki <name>", "wiki profile name").option("--sync <mode>", "vault-sync policy: optional|required|off", "optional").option("--no-fail", "always exit 0 while reporting status in JSON").option("--out <path>", "write JSON result envelope to this path").option("--examples <n>", "example count per lint bucket", (s) => parseInt(s, 10), 3).action(async (vault, opts) => {
   const sync = String(opts.sync ?? "optional");
@@ -9873,7 +9962,7 @@ program.command("health [vault]").description("bounded whole-system wiki health
     noFail: opts.fail === false,
     out: opts.out,
     examplesLimit: opts.examples
-  }), void 0, { postCommit: false });
+  }), void 0, { postCommit: false, humanDetailHints: healthLintDetailHints });
 });
 var configCmd = program.command("config").description("manage skillwiki configuration");
 configCmd.command("get <key>").description("print the value of a config key").action(async (key) => emit(await runConfigGet({ key, home: process.env.HOME ?? "" })));

package/dist/{index-projection-WUAKRTAE.js → index-projection-ZXFN5DT4.js}

@@ -4,9 +4,9 @@ import {
   UNMANAGED_START,
   renderRootIndex,
   writeRootIndexProjection
-} from "./chunk-SNCFIJ5E.js";
-import "./chunk-XYGGDGHR.js";
-import "./chunk-MIQOBEOW.js";
+} from "./chunk-QVO332CT.js";
+import "./chunk-IFMHQETQ.js";
+import "./chunk-BS556WUE.js";
 export {
   UNMANAGED_END,
   UNMANAGED_START,

package/dist/{managed-write-preflight-4YCJVF64.js → managed-write-preflight-ANQPMOF4.js}

@@ -2,11 +2,11 @@
 import {
   runManagedWritePreflight,
   runManagedWriteTransaction
-} from "./chunk-BY7V7QPU.js";
-import "./chunk-JJ654NVJ.js";
-import "./chunk-XYGGDGHR.js";
-import "./chunk-K4OGG5KJ.js";
-import "./chunk-MIQOBEOW.js";
+} from "./chunk-LACQJ6RD.js";
+import "./chunk-XRBUABGE.js";
+import "./chunk-IFMHQETQ.js";
+import "./chunk-E3JBAURS.js";
+import "./chunk-BS556WUE.js";
 export {
   runManagedWritePreflight,
   runManagedWriteTransaction

package/dist/skillwiki-mcp.js

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import {
   runSkillwikiMcpStdio
-} from "./chunk-2X2TCLHR.js";
+} from "./chunk-WJVG3DD5.js";
 import "./chunk-7I2TPIV5.js";
-import "./chunk-SNCFIJ5E.js";
-import "./chunk-JJ654NVJ.js";
-import "./chunk-XYGGDGHR.js";
-import "./chunk-K4OGG5KJ.js";
-import "./chunk-MIQOBEOW.js";
+import "./chunk-QVO332CT.js";
+import "./chunk-XRBUABGE.js";
+import "./chunk-IFMHQETQ.js";
+import "./chunk-E3JBAURS.js";
+import "./chunk-BS556WUE.js";
 
 // src/mcp-entry.ts
 runSkillwikiMcpStdio().catch((error) => {

package/dist/sources-LIJAUXFU.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import {
+  runSourcesPending
+} from "./chunk-JUUZJJIF.js";
+import "./chunk-E3JBAURS.js";
+import "./chunk-BS556WUE.js";
+export {
+  runSourcesPending
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.35",
+  "version": "0.10.37",
   "type": "module",
   "bin": {
     "skillwiki": "dist/cli.js",

package/skills/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.35",
+  "version": "0.10.37",
   "skills": "./",
   "description": "Project-aware Karpathy-style knowledge base for Claude Code: 19 prompt-only skills (wiki-*, proj-*, using-skillwiki) backed by the deterministic `skillwiki` CLI.",
   "author": {

package/skills/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "skillwiki",
-  "version": "0.10.35",
+  "version": "0.10.37",
   "description": "Project-aware Karpathy-style knowledge base for Codex with 19 prompt-only skills backed by the deterministic skillwiki CLI.",
   "author": {
     "name": "karlorz",

package/skills/hooks/session-context

@@ -1,16 +1,45 @@
 #!/usr/bin/env bash
 # Shared SessionStart context helpers for skillwiki hook entrypoints.
 
-read_config_value() {
+read_workflow_config() {
     local file="$1"
-    local key="$2"
-    local line
 
-    line=$(grep -E "^[[:space:]]*${key}:" "$file" 2>/dev/null | head -n 1 || true)
-    [[ -n "$line" ]] || return 0
-
-    printf '%s' "$line" \
-        | sed -E "s/^[[:space:]]*${key}:[[:space:]]*//; s/[[:space:]]+#.*$//; s/[[:space:]]+$//; s/^['\"]//; s/['\"]$//"
+    awk '
+        BEGIN {
+            count = 6
+            keys[1] = "workflow_selection"
+            keys[2] = "workflow_profile"
+            keys[3] = "workflow_capability"
+            keys[4] = "workflow_risk"
+            keys[5] = "prd_layer"
+            keys[6] = "prd_pipeline"
+            for (i = 1; i <= count; i += 1) allowed[keys[i]] = 1
+        }
+        /^[[:space:]]*```(yaml|yml)[[:space:]]*$/ { in_yaml = 1; next }
+        in_yaml && /^[[:space:]]*```[[:space:]]*$/ { in_yaml = 0; next }
+        in_yaml && /^[A-Za-z_][A-Za-z0-9_]*[[:space:]]*:/ {
+            line = $0
+            key = line
+            sub(/[[:space:]]*:.*/, "", key)
+            if (!(key in allowed)) next
+            value = line
+            sub(/^[^:]*:[[:space:]]*/, "", value)
+            sub(/[[:space:]]+#.*$/, "", value)
+            sub(/^[[:space:]]+/, "", value)
+            sub(/[[:space:]]+$/, "", value)
+            if ((substr(value, 1, 1) == "\"" && substr(value, length(value), 1) == "\"") ||
+                (substr(value, 1, 1) == "\047" && substr(value, length(value), 1) == "\047")) {
+                value = substr(value, 2, length(value) - 2)
+            }
+            values[key] = value
+        }
+        END {
+            for (i = 1; i <= count; i += 1) {
+                key = keys[i]
+                if (key in values) printf "%s\t%s\n", key, values[key]
+            }
+        }
+    ' "$file" 2>/dev/null
 }
 
 find_dev_loop_config() {
@@ -27,29 +56,199 @@ find_dev_loop_config() {
     return 0
 }
 
-build_project_prd_context() {
-    local config_path
+build_project_workflow_context() {
+    local config_path=""
     config_path=$(find_dev_loop_config)
-    [[ -n "$config_path" ]] || return 0
+    local workflow_selection=""
+    local configured_profile=""
+    local workflow_capability=""
+    local workflow_risk=""
+    local prd_layer=""
+    local prd_pipeline=""
+    if [[ -n "$config_path" ]]; then
+        while IFS=$'\t' read -r key value; do
+            case "$key" in
+                workflow_selection) workflow_selection="$value" ;;
+                workflow_profile) configured_profile="$value" ;;
+                workflow_capability) workflow_capability="$value" ;;
+                workflow_risk) workflow_risk="$value" ;;
+                prd_layer) prd_layer="$value" ;;
+                prd_pipeline) prd_pipeline="$value" ;;
+            esac
+        done < <(read_workflow_config "$config_path")
+    fi
 
-    local prd_layer
-    local prd_pipeline
-    prd_layer=$(read_config_value "$config_path" "prd_layer")
-    prd_pipeline=$(read_config_value "$config_path" "prd_pipeline")
+    local authority="builtin_adaptive"
+    local resolved_profile=""
+    local resolved_pipeline=""
+    local workflow_status="resolved"
+    local reason=""
+    local has_policy="false"
+    local legacy_profile=""
+
+    prd_layer="${prd_layer:-manual}"
+    workflow_capability="${workflow_capability:-unknown}"
+    workflow_risk="${workflow_risk:-routine}"
+
+    if [[ -n "$prd_pipeline" ]]; then
+        case "$prd_pipeline" in
+            full) legacy_profile="full" ;;
+            tdd-first) legacy_profile="guided" ;;
+            single-pass|debug-only|manual) legacy_profile="native" ;;
+            *)
+                workflow_status="unresolved"
+                reason="prd_pipeline must be one of: full, tdd-first, single-pass, debug-only, manual"
+                ;;
+        esac
+    fi
 
-    [[ -n "$prd_layer" || -n "$prd_pipeline" ]] || return 0
+    if [[ -n "$workflow_selection" || -n "$configured_profile" || \
+          "$workflow_capability" != "unknown" || "$workflow_risk" != "routine" ]]; then
+        has_policy="true"
+        authority="project"
+        if [[ -z "$workflow_selection" ]]; then
+            if [[ -n "$configured_profile" ]]; then
+                workflow_selection="fixed"
+            else
+                workflow_selection="adaptive"
+            fi
+        fi
+    elif [[ -n "$prd_pipeline" ]]; then
+        workflow_selection="fixed"
+        authority="project_legacy"
+        resolved_profile="$legacy_profile"
+        if [[ "$workflow_status" == "resolved" ]]; then
+            reason="legacy explicit prd_pipeline ${prd_pipeline} maps to the ${resolved_profile} workflow profile"
+        fi
+    elif [[ -n "${DEV_LOOP_WORKFLOW_SELECTION:-}" || -n "${DEV_LOOP_WORKFLOW_PROFILE:-}" || \
+            -n "${DEV_LOOP_WORKFLOW_CAPABILITY:-}" || -n "${DEV_LOOP_WORKFLOW_RISK:-}" ]]; then
+        has_policy="true"
+        authority="user_default"
+        workflow_selection="${DEV_LOOP_WORKFLOW_SELECTION:-}"
+        configured_profile="${DEV_LOOP_WORKFLOW_PROFILE:-}"
+        workflow_capability="${DEV_LOOP_WORKFLOW_CAPABILITY:-unknown}"
+        workflow_risk="${DEV_LOOP_WORKFLOW_RISK:-routine}"
+        if [[ -z "$workflow_selection" ]]; then
+            if [[ -n "$configured_profile" ]]; then
+                workflow_selection="fixed"
+            else
+                workflow_selection="adaptive"
+            fi
+        fi
+    else
+        workflow_selection="adaptive"
+    fi
 
-    prd_layer="${prd_layer:-unspecified}"
-    prd_pipeline="${prd_pipeline:-unspecified}"
+    if [[ "$has_policy" == "true" ]]; then
+        case "$workflow_selection" in
+            fixed|adaptive) ;;
+            *)
+                workflow_status="unresolved"
+                reason="workflow_selection must be one of: fixed, adaptive"
+                ;;
+        esac
+        case "$configured_profile" in
+            ""|native|guided|full) ;;
+            *)
+                workflow_status="unresolved"
+                reason="workflow_profile must be one of: native, guided, full"
+                ;;
+        esac
+        case "$workflow_capability" in
+            self-directed|needs-guidance|unknown) ;;
+            *)
+                workflow_status="unresolved"
+                reason="workflow_capability must be one of: self-directed, needs-guidance, unknown"
+                ;;
+        esac
+        case "$workflow_risk" in
+            routine|elevated) ;;
+            *)
+                workflow_status="unresolved"
+                reason="workflow_risk must be one of: routine, elevated"
+                ;;
+        esac
+
+        if [[ "$workflow_status" == "resolved" && "$workflow_selection" == "fixed" && -z "$configured_profile" ]]; then
+            workflow_status="unresolved"
+            reason="fixed selection requires \`workflow_profile\`"
+        elif [[ "$workflow_status" == "resolved" && "$workflow_selection" == "adaptive" && -n "$configured_profile" ]]; then
+            workflow_status="unresolved"
+            reason="adaptive selection must not set \`workflow_profile\`; use fixed for an explicit profile"
+        elif [[ "$workflow_status" == "resolved" && "$workflow_selection" == "fixed" ]]; then
+            resolved_profile="$configured_profile"
+            reason="${authority} explicitly selected the ${resolved_profile} workflow profile"
+        elif [[ "$workflow_status" == "resolved" ]]; then
+            if [[ "$workflow_capability" == "needs-guidance" || "$workflow_risk" == "elevated" ]]; then
+                resolved_profile="guided"
+            else
+                resolved_profile="native"
+            fi
+            reason="adaptive selection chose ${resolved_profile} from capability=${workflow_capability}, risk=${workflow_risk}"
+        fi
+    elif [[ "$authority" == "builtin_adaptive" ]]; then
+        resolved_profile="native"
+        reason="built-in adaptive default chose native from capability=unknown, risk=routine"
+    fi
 
-    cat <<EOF
-## Project PRD Mode
+    if [[ "$workflow_status" == "resolved" ]]; then
+        if [[ -n "$prd_pipeline" ]]; then
+            resolved_pipeline="$prd_pipeline"
+        else
+            case "$resolved_profile" in
+                native) resolved_pipeline="single-pass" ;;
+                guided) resolved_pipeline="tdd-first" ;;
+                full) resolved_pipeline="full" ;;
+            esac
+        fi
+    else
+        resolved_profile="unresolved"
+        resolved_pipeline="unresolved"
+    fi
 
-Detected \`.claude/dev-loop.config.md\` for this workspace:
+    local config_detection
+    if [[ -n "$config_path" ]]; then
+        config_detection="Detected \`.claude/dev-loop.config.md\` for this workspace."
+    else
+        config_detection="No \`.claude/dev-loop.config.md\` was found; using the built-in adaptive default."
+    fi
+
+    cat <<EOF
+## Project Workflow Profile
+
+${config_detection}
+- workflow status: \`${workflow_status}\`
+- \`workflow_selection\`: \`${workflow_selection}\`
+- \`workflow_profile\`: \`${resolved_profile}\`
+- \`workflow_capability\`: \`${workflow_capability}\`
+- \`workflow_risk\`: \`${workflow_risk}\`
+- authority: \`${authority}\`
+- reason: ${reason}
 - \`prd_layer\`: \`${prd_layer}\`
-- \`prd_pipeline\`: \`${prd_pipeline}\`
+- \`prd_pipeline\`: \`${resolved_pipeline}\`
+
+EOF
 
-Use this detected PRD mode as the source of truth. Route generated spec/plan artifacts through \`proj-work\`, and do not write them under \`docs/superpowers/\`. If \`prd_layer\` is \`superpowers\` or \`tdd\`, ensure \`EnterPlanMode\` is gated with \`wiki-gate-plan-mode\`. Do not assume \`superpowers/full\` unless the config says so.
+    if [[ "$workflow_status" == "unresolved" ]]; then
+        cat <<EOF
+Fail closed for workflow execution until the policy is corrected. Do not infer \`full\`, do not force Superpowers, and do not enable \`EnterPlanMode\` gating from availability evidence.
+EOF
+    elif [[ "$resolved_profile" == "full" ]]; then
+        cat <<EOF
+Explicit full compatibility workflow is active. If the configured provider uses Superpowers or TDD planning, ensure \`EnterPlanMode\` is gated with \`wiki-gate-plan-mode\`. Run the complete configured provider/pipeline flow.
+EOF
+    elif [[ "$resolved_profile" == "guided" ]]; then
+        cat <<EOF
+Use only targeted guidance for enabled stages; do not run the complete Superpowers sequence or force \`EnterPlanMode\` gating. Installed providers are optional capability sources.
+EOF
+    else
+        cat <<EOF
+Use host-native planning, implementation, tools, and subagents. Do not force Superpowers or \`EnterPlanMode\` gating. Installation proves availability, never activation.
+EOF
+    fi
+
+    cat <<EOF
+Route every generated spec/plan artifact through \`proj-work\`, and never write it under \`docs/superpowers/\`. SkillWiki remains the knowledge and provenance layer; workflow selection does not change managed-write authority.
 EOF
 }
 
@@ -254,12 +453,12 @@ resolve_skill_path() {
 
 build_skillwiki_session_context() {
     local skill_content="$1"
-    local project_prd_context
+    local project_workflow_context
     local dynamic_session_memory
     local runtime_host_context
     local session_context
 
-    project_prd_context=$(build_project_prd_context)
+    project_workflow_context=$(build_project_workflow_context)
     dynamic_session_memory=$(build_dynamic_session_memory)
     runtime_host_context=$(build_runtime_host_context)
 
@@ -272,9 +471,9 @@ build_skillwiki_session_context() {
         session_context+=$'\n\n'
         session_context+="$dynamic_session_memory"
     fi
-    if [[ -n "$project_prd_context" ]]; then
+    if [[ -n "$project_workflow_context" ]]; then
         session_context+=$'\n\n'
-        session_context+="$project_prd_context"
+        session_context+="$project_workflow_context"
     fi
     session_context+=$'\n\n'
     session_context+="$skill_content"

package/skills/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillwiki/skills",
-  "version": "0.10.35",
+  "version": "0.10.37",
   "private": true,
   "files": [
     "wiki-*",

package/skills/skills/using-skillwiki/SKILL.md

@@ -1,21 +1,30 @@
 ---
 name: using-skillwiki
-description: Invoke at session start or when knowledge-base tasks arise — maps skillwiki skills, dev-loop alignment, and PRD/TDD routing with plan-mode gate checks
+description: Invoke at session start or when knowledge-base tasks arise — maps skillwiki skills, dev-loop alignment, adaptive workflow profiles, and vault routing
 ---
 *Note: If executing as a background subagent, skip this skill section.*
 
 # using-skillwiki
-You have skillwiki — a project-aware Karpathy-style knowledge base for Claude Code.
+You have skillwiki — a project-aware Karpathy-style knowledge base for agent harnesses.
 
 ## Last Hook Gate (SessionStart)
 
-This skill is activated by the plugin during `startup|clear|compact` lifecycle events.
+This skill is activated by the plugin during startup and clear lifecycle
+events, plus the harness-specific resume/compact event where supported.
 Use this section as procedural planning guidelines:
 
-1. If the task requires spec/plan work, route through PRD skills (not built-in plan mode).
-2. If `prd_layer` is `superpowers` or `tdd`, ensure `EnterPlanMode` is gated (`wiki-gate-plan-mode on` or `status` if uncertain).
-3. If `prd_layer` is `manual` or `none`, do not force the gate; follow project policy.
-4. Always apply the PRD bridge: spec/plan outputs go to vault work-item paths, never `docs/superpowers/`.
+1. Read the injected Project Workflow Profile before choosing orchestration or
+   provider skills. Installation proves availability, never activation.
+2. For `native`, use the host agent's built-in planning and execution. For
+   `guided`, add only targeted structure. Neither profile forces Superpowers
+   or `EnterPlanMode` gating.
+3. For explicit `full`, run the complete configured provider/pipeline. Gate
+   `EnterPlanMode` with `wiki-gate-plan-mode` only when that explicit workflow
+   uses Superpowers or TDD planning.
+4. If workflow status is unresolved, fail closed for workflow execution; do
+   not infer `full` from installed skills or provider names.
+5. Always apply the PRD bridge: spec/plan outputs go to vault work-item paths,
+   never `docs/superpowers/`.
 
 ## Activation File (Cross-Harness Alternative to SessionStart)
 
@@ -177,8 +186,9 @@ The vault is shared across hosts, so host-local absolute paths are not durable s
 
 ## dev-loop Alignment
 
-Use these skills as the knowledge layer in dev-loop. The loop remains capability-based:
-branch on capabilities (`BACKEND_CAPS`, `PRD_CAPS`), not backend names.
+Use these skills as the knowledge layer in dev-loop. The loop remains
+capability-based: resolve `WORKFLOW_PROFILE` first, then branch on capabilities
+(`BACKEND_CAPS`, `PRD_CAPS`), not backend names.
 
 Typical sequence with PRD enabled:
 `REFRESH → QUERY → WORK → SPEC → PLAN → EXECUTE → SIMPLIFY → MERGE → SAVE → RETRO`.
@@ -187,17 +197,33 @@ Typical sequence with PRD enabled:
 - `SIMPLIFY` is a quality gate before merge; keep it in the loop even for small changes.
 - For no-work cycles, run maintenance (`wiki-lint`, `wiki-audit`, `proj-distill`, `dev-loop:research`).
 
-## PRD/TDD Compatibility
-
-Use `prd_layer` + `prd_pipeline` from `.claude/dev-loop.config.md` as source of truth:
-
-- `superpowers` + `full`: brainstorming/spec/plan/execute/review; route spec+plan through `proj-work`.
-- `tdd` + `tdd-first`: plan-first then test-driven execute; still route artifacts through `proj-work`.
-- `single-pass` or `debug-only`: may skip formal spec/plan, but if generated they still belong in vault work items.
-- `manual` / `none`: no forced PRD skills; preserve skillwiki logging and provenance discipline.
+## Workflow Profile Compatibility
+
+Use the resolved workflow policy from `.claude/dev-loop.config.md` and the
+SessionStart context as the source of truth:
+
+- `native` defaults to `single-pass` and uses host-native planning,
+  implementation, tools, and subagents. Installed providers stay inactive
+  unless explicitly selected for a stage.
+- `guided` defaults to `tdd-first` and adds only targeted planning, TDD, or
+  provider capabilities. It does not imply the complete Superpowers sequence.
+- `full` defaults to `full` and runs the complete compatibility workflow. It
+  is explicit-only, including the legacy compatibility signal
+  `prd_pipeline: full` when no newer workflow policy overrides it.
+- `workflow_selection: adaptive` may choose `native` or `guided`, never
+  `full`. `workflow_selection: fixed` requires `workflow_profile`.
+- Invalid policy is unresolved and fail-closed. Goal, headless, CI, and
+  satellite sessions do not prompt for a replacement policy.
+
+`prd_layer` remains an independent provider-capability registry and
+`prd_pipeline` remains an independent stage-template override. Provider or
+cache discovery cannot select a workflow profile. Regardless of profile,
+route generated spec and plan artifacts through `proj-work`, preserve
+SkillWiki provenance, and keep the independent `simplify:simplify` review gate
+for code changes.
 
 ## CLI Backbone
-All skills are backed by the `skillwiki` CLI — a deterministic tool with no LLM calls. It handles path resolution, config management, validation, health reporting, and linting. Skills invoke it via Bash for the mechanical parts and use Claude for the creative parts.
+All skills are backed by the `skillwiki` CLI — a deterministic tool with no LLM calls. It handles path resolution, config management, validation, health reporting, and linting. Skills invoke it via Bash for the mechanical parts and use the active agent for the creative parts.
 Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `path`, `lang`, `install`, `fleet context`, `fleet validate`, `graph build`, `query`, `sources pending`, `sources disposition`, `sources dispose`, `archive`, `remove`, `drift`, `dedup`, `compound`, `tag-sync`, `tag reconcile`, `page publish`, `sync status`, `seed`, `stale`, `observe`, `canvas generate`.
 Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes the nonblocking source-lifecycle backlog. Pending captures are informational and do not make health fail. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only. Run `skillwiki config list` to see current configuration.
 

package/skills/skills/using-skillwiki/activation.md

@@ -39,6 +39,19 @@ Invoke a SkillWiki skill when the user: wants vault/wiki/knowledge-base operatio
 
 Route PRD/spec/plan work to `wiki-adapter-prd` and `proj-work`, not `docs/superpowers/`. Spec and plan outputs must land in vault work-item paths. Never create `docs/superpowers/` in any repo.
 
+## Workflow Profiles
+
+Resolve workflow policy before loading provider skills. Profiles are `native`,
+`guided`, and explicit-only `full`; selection is `adaptive` or `fixed`.
+Adaptive chooses only native or guided. Installation and cache discovery prove
+availability, never activation. Native and guided do not force Superpowers or
+plan-mode gating. Explicit full may use the complete configured provider flow;
+gate plan mode only when that flow actually uses Superpowers/TDD planning.
+Invalid fixed policy is unresolved and fail-closed. Noninteractive sessions do
+not prompt. Keep workflow profile, `prd_layer` provider, `prd_pipeline` stage
+template, SkillWiki provenance, and the independent simplify review gate as
+separate concerns.
+
 ## Fail-Closed Boundary
 
 Never write typed pages, `index.md`, or `log.md` directly. Never bare `rm` or `git rm` as a fleet delete (snapshot resurrects from S3). Never auto `npm install -g skillwiki` in headless/goal/satellite sessions. If `skillwiki page publish --help` is unavailable, fail closed.

package/skills/using-skillwiki/SKILL.md

@@ -1,21 +1,30 @@
 ---
 name: using-skillwiki
-description: Invoke at session start or when knowledge-base tasks arise — maps skillwiki skills, dev-loop alignment, and PRD/TDD routing with plan-mode gate checks
+description: Invoke at session start or when knowledge-base tasks arise — maps skillwiki skills, dev-loop alignment, adaptive workflow profiles, and vault routing
 ---
 *Note: If executing as a background subagent, skip this skill section.*
 
 # using-skillwiki
-You have skillwiki — a project-aware Karpathy-style knowledge base for Claude Code.
+You have skillwiki — a project-aware Karpathy-style knowledge base for agent harnesses.
 
 ## Last Hook Gate (SessionStart)
 
-This skill is activated by the plugin during `startup|clear|compact` lifecycle events.
+This skill is activated by the plugin during startup and clear lifecycle
+events, plus the harness-specific resume/compact event where supported.
 Use this section as procedural planning guidelines:
 
-1. If the task requires spec/plan work, route through PRD skills (not built-in plan mode).
-2. If `prd_layer` is `superpowers` or `tdd`, ensure `EnterPlanMode` is gated (`wiki-gate-plan-mode on` or `status` if uncertain).
-3. If `prd_layer` is `manual` or `none`, do not force the gate; follow project policy.
-4. Always apply the PRD bridge: spec/plan outputs go to vault work-item paths, never `docs/superpowers/`.
+1. Read the injected Project Workflow Profile before choosing orchestration or
+   provider skills. Installation proves availability, never activation.
+2. For `native`, use the host agent's built-in planning and execution. For
+   `guided`, add only targeted structure. Neither profile forces Superpowers
+   or `EnterPlanMode` gating.
+3. For explicit `full`, run the complete configured provider/pipeline. Gate
+   `EnterPlanMode` with `wiki-gate-plan-mode` only when that explicit workflow
+   uses Superpowers or TDD planning.
+4. If workflow status is unresolved, fail closed for workflow execution; do
+   not infer `full` from installed skills or provider names.
+5. Always apply the PRD bridge: spec/plan outputs go to vault work-item paths,
+   never `docs/superpowers/`.
 
 ## Activation File (Cross-Harness Alternative to SessionStart)
 
@@ -177,8 +186,9 @@ The vault is shared across hosts, so host-local absolute paths are not durable s
 
 ## dev-loop Alignment
 
-Use these skills as the knowledge layer in dev-loop. The loop remains capability-based:
-branch on capabilities (`BACKEND_CAPS`, `PRD_CAPS`), not backend names.
+Use these skills as the knowledge layer in dev-loop. The loop remains
+capability-based: resolve `WORKFLOW_PROFILE` first, then branch on capabilities
+(`BACKEND_CAPS`, `PRD_CAPS`), not backend names.
 
 Typical sequence with PRD enabled:
 `REFRESH → QUERY → WORK → SPEC → PLAN → EXECUTE → SIMPLIFY → MERGE → SAVE → RETRO`.
@@ -187,17 +197,33 @@ Typical sequence with PRD enabled:
 - `SIMPLIFY` is a quality gate before merge; keep it in the loop even for small changes.
 - For no-work cycles, run maintenance (`wiki-lint`, `wiki-audit`, `proj-distill`, `dev-loop:research`).
 
-## PRD/TDD Compatibility
-
-Use `prd_layer` + `prd_pipeline` from `.claude/dev-loop.config.md` as source of truth:
-
-- `superpowers` + `full`: brainstorming/spec/plan/execute/review; route spec+plan through `proj-work`.
-- `tdd` + `tdd-first`: plan-first then test-driven execute; still route artifacts through `proj-work`.
-- `single-pass` or `debug-only`: may skip formal spec/plan, but if generated they still belong in vault work items.
-- `manual` / `none`: no forced PRD skills; preserve skillwiki logging and provenance discipline.
+## Workflow Profile Compatibility
+
+Use the resolved workflow policy from `.claude/dev-loop.config.md` and the
+SessionStart context as the source of truth:
+
+- `native` defaults to `single-pass` and uses host-native planning,
+  implementation, tools, and subagents. Installed providers stay inactive
+  unless explicitly selected for a stage.
+- `guided` defaults to `tdd-first` and adds only targeted planning, TDD, or
+  provider capabilities. It does not imply the complete Superpowers sequence.
+- `full` defaults to `full` and runs the complete compatibility workflow. It
+  is explicit-only, including the legacy compatibility signal
+  `prd_pipeline: full` when no newer workflow policy overrides it.
+- `workflow_selection: adaptive` may choose `native` or `guided`, never
+  `full`. `workflow_selection: fixed` requires `workflow_profile`.
+- Invalid policy is unresolved and fail-closed. Goal, headless, CI, and
+  satellite sessions do not prompt for a replacement policy.
+
+`prd_layer` remains an independent provider-capability registry and
+`prd_pipeline` remains an independent stage-template override. Provider or
+cache discovery cannot select a workflow profile. Regardless of profile,
+route generated spec and plan artifacts through `proj-work`, preserve
+SkillWiki provenance, and keep the independent `simplify:simplify` review gate
+for code changes.
 
 ## CLI Backbone
-All skills are backed by the `skillwiki` CLI — a deterministic tool with no LLM calls. It handles path resolution, config management, validation, health reporting, and linting. Skills invoke it via Bash for the mechanical parts and use Claude for the creative parts.
+All skills are backed by the `skillwiki` CLI — a deterministic tool with no LLM calls. It handles path resolution, config management, validation, health reporting, and linting. Skills invoke it via Bash for the mechanical parts and use the active agent for the creative parts.
 Key CLI subcommands: `init`, `health`, `lint`, `config`, `doctor`, `path`, `lang`, `install`, `fleet context`, `fleet validate`, `graph build`, `query`, `sources pending`, `sources disposition`, `sources dispose`, `archive`, `remove`, `drift`, `dedup`, `compound`, `tag-sync`, `tag reconcile`, `page publish`, `sync status`, `seed`, `stale`, `observe`, `canvas generate`.
 Run `skillwiki health <vault> --out /tmp/skillwiki-health.json --no-fail` for a bounded whole-system report that includes the nonblocking source-lifecycle backlog. Pending captures are informational and do not make health fail. Run `skillwiki lint <vault> --summary` for lint-only bucket counts with capped examples and details commands. Run `skillwiki doctor` to diagnose setup/runtime issues only. Run `skillwiki config list` to see current configuration.
 

package/skills/using-skillwiki/activation.md

@@ -39,6 +39,19 @@ Invoke a SkillWiki skill when the user: wants vault/wiki/knowledge-base operatio
 
 Route PRD/spec/plan work to `wiki-adapter-prd` and `proj-work`, not `docs/superpowers/`. Spec and plan outputs must land in vault work-item paths. Never create `docs/superpowers/` in any repo.
 
+## Workflow Profiles
+
+Resolve workflow policy before loading provider skills. Profiles are `native`,
+`guided`, and explicit-only `full`; selection is `adaptive` or `fixed`.
+Adaptive chooses only native or guided. Installation and cache discovery prove
+availability, never activation. Native and guided do not force Superpowers or
+plan-mode gating. Explicit full may use the complete configured provider flow;
+gate plan mode only when that flow actually uses Superpowers/TDD planning.
+Invalid fixed policy is unresolved and fail-closed. Noninteractive sessions do
+not prompt. Keep workflow profile, `prd_layer` provider, `prd_pipeline` stage
+template, SkillWiki provenance, and the independent simplify review gate as
+separate concerns.
+
 ## Fail-Closed Boundary
 
 Never write typed pages, `index.md`, or `log.md` directly. Never bare `rm` or `git rm` as a fleet delete (snapshot resurrects from S3). Never auto `npm install -g skillwiki` in headless/goal/satellite sessions. If `skillwiki page publish --help` is unavailable, fail closed.

package/templates/SCHEMA.md

@@ -26,6 +26,13 @@ Four shapes: typed-knowledge, raw, work-item, compound. See spec for full Zod sc
 Work-item statuses are `planned`, `in-progress`, `completed`, and `abandoned`.
 `status: proposed` is not supported by the current SkillWiki schema. Non-executing queued findings use raw `task` or `bug` captures under `raw/transcripts/` with a `project` wikilink; humans promote them into `planned` work items.
 
+### Work Item Validation Shapes
+
+- **Standard:** `spec.md` is the specification source. A completed item provides `evidence.md` or `retro.md`.
+- **Goal-plan:** frontmatter `mode: goal-plan` (or the compatibility alias `mode: goal`) makes `plan.md` the specification source. Completion evidence may be `build-report.md`, an `evidence/` directory, `evidence.md`, or `retro.md`; `spec.md` is optional for this shape.
+
+`skillwiki work-validate --require-complete` accepts `completed`, `complete`, or `done` on the active specification source. Goal-plan handling does not relax the standard shape: without a goal mode, `spec.md` and the standard completion evidence remain required.
+
 ## Tag Taxonomy
 
 ```yaml

package/dist/sources-FCZCPOYB.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-import {
-  runSourcesPending
-} from "./chunk-GXT5WTSE.js";
-import "./chunk-K4OGG5KJ.js";
-import "./chunk-MIQOBEOW.js";
-export {
-  runSourcesPending
-};