wei-wuwei 0.3.0 → 0.5.0

package/CHANGELOG.md

@@ -4,6 +4,14 @@ One section per published version, newest first. `wuwei update` prints the
 sections between the installed version and the new one before it asks;
 `wuwei check` fails when package.json's version has no section here.
 
+## 0.5.0
+
+- feat(plan-check): a script is an e2e harness too (#69)
+
+## 0.4.0
+
+- feat: review turns — claims-scan, batched lens checks, review-collect breakdown (#68)
+
 ## 0.3.0
 
 - wuwei verify on mobile: Maestro on a simulator + wuwei's mock server (#62)

package/README.md

@@ -72,7 +72,8 @@ node bin/wuwei.js digest-check <f>   # a review digest's arithmetic before it is
 node bin/wuwei.js plan-check [stream] # plan-phases step 11's checkable half, before sign-off
 node bin/wuwei.js worktree <lens> <sha> # a throwaway worktree no other lens shares (--prune)
 node bin/wuwei.js mutate <f>:<n> --from … --to … --run … --in <wt>  # one mutation: landed, baseline, red count, restored
-node bin/wuwei.js sites <pattern> [--symbol <name>]  # a set derived from the tree, graph and grep both
+node bin/wuwei.js sites <pattern>… [--symbol <name>]  # a set derived from the tree, graph and grep both; several names in one call
+node bin/wuwei.js claims-scan <doc>… # a document's paths, names, file:lines and commands checked against the tree in one call
 node bin/wuwei.js verify [page] [--phase NN]  # every data-bearing page × 500/403/404/empty/pending/failed refetch; --phase: ACCEPTANCE's ## Verify; mobile: Maestro + mock server
 node bin/wuwei.js uninstall          # removes exactly what install wrote, nothing else
 ```
@@ -198,7 +199,7 @@ wuwei/
 ├── agents/            # canonical subagent definitions
 │   └── _template/
 ├── templates/         # PR / review templates, installed per-repo
-├── bin/wuwei.js       # CLI: build · check · list · init · install · update · status · review-prep · review-collect · claim · digest-check · plan-check · worktree · mutate · sites · verify · uninstall
+├── bin/wuwei.js       # CLI: build · check · list · init · install · update · status · review-prep · review-collect · claim · digest-check · plan-check · worktree · mutate · sites · claims-scan · verify · uninstall
 │                      #   the per-tool emitters live here too, not in adapters/
 ├── adapters/          # notes only — see bin/wuwei.js for the actual emitters
 ├── docs/

package/agents/wuwei-audit-composition/agent.md

@@ -56,6 +56,10 @@ Per-phase tidiness already has two owners — `wuwei-execute-phase`'s simplify
 step and `review:defects` — and a smell list is the long tail wuwei declines to
 chase. If one phase's diff shows it, it is not yours.
 
+**Turns are the cost**: every tool call re-reads your whole context. Put
+independent checks in one Bash call (`a; b; c`), and several names in one
+`wuwei sites a b c`.
+
 ## Out of scope
 
 - **Changing anything.** No Edit or Write; `Bash` reads (`git diff` of the

package/agents/wuwei-audit-contract/agent.md

@@ -67,6 +67,10 @@ agent's judgment can act on or block on. This section is input to the *next*
 plan, not a gate on this one — `## Sign-off`'s decision stands until someone
 with sign-off authority revisits it.
 
+**Turns are the cost**: every tool call re-reads your whole context. Put
+independent checks in one Bash call (`a; b; c`), and several names in one
+`wuwei sites a b c`.
+
 ## Out of scope
 
 - **Changing anything.** No Edit or Write; `Bash` reads (`git diff`, `git

package/agents/wuwei-audit-coverage/agent.md

@@ -65,6 +65,10 @@ fully covered.**
 **No recorded run is a broken link**, not a pass — the same rule the phase
 pipeline gates on, and **you do not close the gap by running it yourself**.
 
+**Turns are the cost**: every tool call re-reads your whole context. Put
+independent checks in one Bash call (`a; b; c`), and several names in one
+`wuwei sites a b c`.
+
 ## Out of scope
 
 - **Changing anything, and that includes running the suite.** No Edit or

package/agents/wuwei-pre-implementation-doubt/agent.md

@@ -22,6 +22,10 @@ targets: [claude-code]
 coverage。你沒有派工工具：一個視角寫完它的發現，才開下一個，不混著看。審查對象是 stream 的 `SPEC.md` 與 `phases/*.md`，時點在驗收
 契約簽收**之前**：你放行的東西，user 才簽字承擔。
 
+**Turns are the cost**: every tool call re-reads your whole context. Put
+independent checks in one Bash call (`a; b; c`), and several names in one
+`wuwei sites a b c`.
+
 ## Out of scope
 
 - **改檔。** 你只有 Read / Grep / Glob，`Bash` 只能查（`git fetch`、

package/agents/wuwei-review-claims/agent.md

@@ -28,6 +28,10 @@ Not "is it well written" and not "is it complete" — those belong to
 assertion about: the code, the config, the runbook, the ticket, the number's
 source. **A number with no source is a finding.**
 
+**Start with `wuwei claims-scan <doc>… --sha <sha>`**: every path, name,
+`file:line` and command in the document, checked in one call. By hand: what
+it lists for judgment, and every assertion no code span carries.
+
 **A count carries its derivation** — the set you started from and how you
 narrowed it; a bare count is `unsupported` even when right.
 
@@ -136,6 +140,10 @@ with its derivation), **not from the names the document
 handed you** — those are the claim, not the evidence — and report the
 difference.
 
+**Turns are the cost**: every tool call re-reads your whole context. Put
+independent checks in one Bash call (`a; b; c`), and several names in one
+`wuwei sites a b c`.
+
 ## Out of scope
 
 - **Changing the dispatched tree.** No Edit or Write; `Bash` reads it

package/agents/wuwei-review-code/agent.md

@@ -126,6 +126,10 @@ agent exists to avoid:
 The last one is the hardest to self-check: a downgrade leaves no trace, and
 the downgraded finding ships.
 
+**Turns are the cost**: every tool call re-reads your whole context. Put
+independent checks in one Bash call (`a; b; c`), and several names in one
+`wuwei sites a b c`.
+
 ## Out of scope
 
 - **Changing the dispatched tree.** No Edit or Write; `Bash` reads and runs

package/agents/wuwei-review-defects/agent.md

@@ -133,6 +133,10 @@ searched or report `PLAUSIBLE`.
 change produces, not the base** — the change itself can add the first hit (a
 spec, a fixture, a guard test). The sentence names the ref it holds for.
 
+**Turns are the cost**: every tool call re-reads your whole context. Put
+independent checks in one Bash call (`a; b; c`), and several names in one
+`wuwei sites a b c`.
+
 ## Out of scope
 
 - **Changing the dispatched tree.** No Edit or Write; `Bash` reads it. A

package/agents/wuwei-review-design/agent.md

@@ -122,6 +122,10 @@ A phase that changes schema and says nothing about lock duration has not been
 reviewed for this; "the constraint is a strict superset so existing rows all
 pass" answers compatibility, not cost.
 
+**Turns are the cost**: every tool call re-reads your whole context. Put
+independent checks in one Bash call (`a; b; c`), and several names in one
+`wuwei sites a b c`.
+
 ## Out of scope
 
 - **Changing the dispatched tree.** No Edit or Write; `Bash` reads it

package/agents/wuwei-review-drift/agent.md

@@ -129,6 +129,10 @@ is not one. Quote the clause.
 **A zero-hit claim is checked against the tree the change produces, not the
 base** — the change itself can add the first hit. Name the ref it holds for.
 
+**Turns are the cost**: every tool call re-reads your whole context. Put
+independent checks in one Bash call (`a; b; c`), and several names in one
+`wuwei sites a b c`.
+
 ## Out of scope
 
 - **Changing anything.** No Edit or Write; `Bash` reads (`grep`, `git log`,

package/agents/wuwei-review-structure/agent.md

@@ -61,6 +61,9 @@ So: **for every claim a document makes about what is or is not required, find
 the procedure section that would have to change with it.** A new section
 asserting a new fact, with the old procedure untouched, is the pattern.
 
+**Turns are the cost**: every tool call re-reads your whole context. Put
+alternatives in one pattern (`a|b|c`) rather than one search each.
+
 ## Out of scope
 
 - **Changing anything.** No Edit or Write, and no Bash — everything here is

package/agents/wuwei-security-auditor/agent.md

@@ -34,6 +34,10 @@ targets: [claude-code]
 只取本席轄區的條目，bundle 答不了就直接讀樹——它是 reviewed sha 的快取，
 不是權威，引用的座標一律是 repo 的座標。
 
+**Turns are the cost**: every tool call re-reads your whole context. Put
+independent checks in one Bash call (`a; b; c`), and several names in one
+`wuwei sites a b c`.
+
 ## Out of scope
 
 - **改派工給你的那棵樹。** 沒有 Edit / Write。發現以報告回傳，補洞是實作的事。

package/bin/wuwei.js

@@ -29,8 +29,10 @@
  *   wuwei worktree <lens> [<sha>]  a throwaway worktree no other lens shares; --prune
  *   wuwei mutate <f>:<n> --from --to --run   one mutation in a wuwei worktree: landed?
  *                              baseline vs mutated, failing tests, restored, recorded
- *   wuwei sites <pattern> [--symbol <name>]   a set from the tree, with its derivation;
+ *   wuwei sites <pattern>… [--symbol <name>]   a set from the tree, with its derivation;
  *                              graph and grep both for a symbol
+ *   wuwei claims-scan <doc>… [--sha <rev>]  a document's paths, names, file:lines and
+ *                              commands checked against the tree in one pass
  *   wuwei verify [<page>…] [--phase NN] [--endpoint <text>] [--states 500,404]  every data-bearing page through its states
  *                              (Playwright on web, Maestro + a mock server on mobile;
  *                              fixtures from .wuwei/verify.json): a matrix of shots;
@@ -1419,8 +1421,14 @@ function cmdPlanCheck(argv) {
     // mobile: Maestro flows, Flutter's patrol/integration_test, an XCUITest target, Espresso
     || existsSync(join(dest, '.maestro')) || /^\s*(patrol|integration_test):/m.test(read(join(dest, 'pubspec.yaml')) ?? '')
     || readdirSync(dest).some(f => /UITests$/.test(f)) || existsSync(join(dest, 'app', 'src', 'androidTest'))
-  if (acceptance && /\be2e\b/i.test(acceptance) && !harness)
-    warns.push('ACCEPTANCE.md binds e2e, and no harness was found (playwright/cypress/wdio config, one in package.json, .maestro/, patrol, *UITests, androidTest) — the first phase with a bound item adds it as its first task')
+  // a script harness — a CLI, a library, a backend — is named, since nothing on
+  // disk tells an e2e script from a unit test: `e2e harness: sh test/e2e.sh`
+  const declared = acceptance?.match(/^\s*[-*]?\s*e2e harness:\s*`?([^`\n]+?)`?\s*$/im)?.[1]
+  const script = declared?.split(/\s+/).find(t => /[\\/]|\.(sh|bats|[cm]?js|ts|py|rb)$/.test(t))
+  if (declared && script && !existsSync(join(dest, script)))
+    warns.push(`e2e harness \`${declared}\`: ${script} does not exist yet — the first phase with a bound item adds it as its first task`)
+  else if (acceptance && /\be2e\b/i.test(acceptance) && !harness && !declared)
+    warns.push('ACCEPTANCE.md binds e2e, and no harness was found (playwright/cypress/wdio config, one in package.json, .maestro/, patrol, *UITests, androidTest) — name a script one as `e2e harness: <command>`, or the first phase with a bound item adds one as its first task')
 
   // STATE.md agrees with phases/
   const row = (readStateRows(join(dest, '.wuwei', 'STATE.md')) ?? []).find(r => r.stream === stream)
@@ -1557,10 +1565,15 @@ function cmdSites(argv) {
   const dd = argv.indexOf('--')
   const pathspec = dd === -1 ? [] : argv.slice(dd + 1)
   const args = dd === -1 ? argv : argv.slice(0, dd)
-  const pattern = args.find((a, i) => !a.startsWith('--') && !['--sha', '--symbol'].includes(args[i - 1]))
+  const patterns = args.filter((a, i) => !a.startsWith('--') && !['--sha', '--symbol'].includes(args[i - 1]))
   const sha = flag('--sha') ?? 'HEAD', symbol = flag('--symbol'), regex = args.includes('--regex')
-  if (!pattern && !symbol) { console.error("usage: wuwei sites <pattern> [--regex] [--sha <rev>] [--symbol <name>] [-- <pathspec>…]"); process.exit(1) }
-  const term = pattern ?? symbol
+  if (!patterns.length && !symbol) { console.error("usage: wuwei sites <pattern>… [--regex] [--sha <rev>] [--symbol <name>] [-- <pathspec>…]"); process.exit(1) }
+  // several names in one call: every call re-reads the lens's whole context, so one beats many
+  if (patterns.length > 1 && !symbol) {
+    for (const p of patterns) { console.log(`── ${p}`); cmdSites([p, ...(regex ? ['--regex'] : []), '--sha', sha, ...(pathspec.length ? ['--', ...pathspec] : [])]); console.log() }
+    return
+  }
+  const term = patterns[0] ?? symbol
   const grepArgs = ['grep', '-n', regex ? '-E' : '-F', '-e', term, sha, '--', ...pathspec]
   const g = quiet('git', grepArgs)
   if (g.status > 1) { console.error(`✗ git grep failed: ${firstLine(g.stderr)}`); process.exit(1) }
@@ -1605,6 +1618,116 @@ function cmdSites(argv) {
   }
 }
 
+// ── claims-scan: a document's checkable assertions, all in one call ─────
+// review:claims checked each path, name and line with its own grep: 74–117
+// turns a document, every one re-reading the lens's whole context — 59M of a
+// 196M-token review (reward-system, `wuwei review-collect`). This pulls them
+// out and checks them against the tree in one pass; the lens judges only what
+// it lists as needing judgment
+function cmdClaimsScan(argv) {
+  const flag = name => { const i = argv.indexOf(name); return i === -1 ? null : argv[i + 1] }
+  const sha = flag('--sha') ?? 'HEAD', all = argv.includes('--all')
+  const docs = argv.filter((a, i) => !a.startsWith('--') && argv[i - 1] !== '--sha')
+  if (!docs.length) { console.error('usage: wuwei claims-scan <doc>… [--sha <rev>] [--all]'); process.exit(1) }
+  const at = quiet('git', ['rev-parse', '--short', sha]).stdout?.trim()
+  if (!at) { console.error(`✗ ${sha} is not a commit here`); process.exit(1) }
+  const tree = quiet('git', ['ls-tree', '-r', '--name-only', sha]).stdout.split('\n').filter(Boolean)
+  const files = new Set(tree), dirs = new Set()
+  for (const f of tree) { const p = f.split('/'); for (let i = 1; i < p.length; i++) dirs.add(p.slice(0, i).join('/')) }
+  const lengths = new Map()
+  const lineCount = f => { if (!lengths.has(f)) lengths.set(f, (quiet('git', ['show', `${sha}:${f}`]).stdout ?? '').split('\n').length - 1); return lengths.get(f) }
+  let scripts = {}
+  try { scripts = JSON.parse(quiet('git', ['show', `${sha}:package.json`]).stdout).scripts ?? {} } catch {}
+
+  const norm = p => p.replace(/^\.\//, '').replace(/\/$/, '').split('/').reduce((a, s) => s === '..' ? a.slice(0, -1) : s === '.' ? a : [...a, s], []).join('/')
+  // a path as written, relative to the repo or the document; else wherever a file of that name is
+  const resolvePath = (p, docDir) => {
+    for (const c of [norm(p), norm(join(docDir, p))]) if (files.has(c) || dirs.has(c)) return { ok: c }
+    const tail = '/' + norm(p), hits = tree.filter(f => f.endsWith(tail))
+    return hits.length === 1 ? { moved: hits[0] } : hits.length ? { ambiguous: hits.slice(0, 3) } : { missing: true }
+  }
+  const SKIP = new Set(['null', 'true', 'false', 'undefined', 'none', 'yes', 'no', 'and', 'or', 'not', 'the', 'todo', 'fixme'])
+  const COUNT = /\b(\d[\d,]*)\s+(files?|tests?|rows?|items?|endpoints?|keys?|lines?|columns?|tables?|routes?|pages?|steps?|commits?|calls?|call sites?|sites?|places?|locations?|entries|icons?|images?|states?|cases?|checks?|findings?|members?|fields?|migrations?|phases?)\b/gi
+
+  for (const doc of docs) {
+    const text = existsSync(doc) ? readFileSync(doc, 'utf8') : quiet('git', ['show', `${sha}:${doc}`]).stdout
+    if (text == null || text === '') { console.log(`✗ ${doc}: not found here or at ${at}`); continue }
+    const docDir = dirname(norm(doc)), rows = [], ids = new Map(), counts = []
+    let fenced = false
+    text.split('\n').forEach((ln, i) => {
+      if (/^\s*(```|~~~)/.test(ln)) { fenced = !fenced; return }
+      if (fenced) return
+      const where = `${doc}:${i + 1}`
+      for (const m of ln.matchAll(/`([^`\n]+)`/g)) rows.push({ where, raw: m[1].trim() })
+      for (const m of ln.matchAll(/\]\(([^)\s]+)\)/g)) if (!/^(https?:|mailto:|#)/.test(m[1])) rows.push({ where, raw: m[1].split('#')[0], link: true })
+      for (const m of ln.replace(/`[^`]*`/g, '').matchAll(COUNT)) counts.push({ where, raw: m[0] })
+    })
+    const out = []
+    for (const r of rows) {
+      const s = r.raw
+      const fl = s.match(/^([\w./@-]+\.[A-Za-z0-9]+):(\d+)(?:[-–](\d+))?$/)
+      if (fl) {
+        const p = resolvePath(fl[1], docDir), f = p.ok ?? p.moved
+        if (!f) { out.push({ ...r, kind: 'file:line', result: p.ambiguous ? `ambiguous: ${p.ambiguous.join(', ')}` : 'file missing' }); continue }
+        const last = Number(fl[3] ?? fl[2]), n = lineCount(f)
+        out.push({ ...r, kind: 'file:line', result: last > n ? `past the end — ${f} has ${n} lines` : p.moved ? `moved: ${f}:${fl[2]}${fl[3] ? `-${fl[3]}` : ''}` : 'ok' })
+        continue
+      }
+      if (/^(npm|pnpm|yarn|bun) (run )?[\w:.-]+/.test(s)) {
+        const name = s.match(/^(?:npm|pnpm|yarn|bun) (?:run )?([\w:.-]+)/)[1]
+        const builtin = ['install', 'ci', 'test', 'i', 'exec', 'add', 'publish', 'pack', 'view', 'link'].includes(name) && !/ run /.test(s)
+        out.push({ ...r, kind: 'command', result: builtin || scripts[name] ? (builtin ? 'command — not run' : 'script exists — not run') : `no package.json script "${name}"` })
+        continue
+      }
+      if (/^(npx|node|wuwei|ww|git|make|python3?|bash|sh|curl|gh|docker|kubectl|gcloud|bunx|deno|cargo|go)\s/.test(s)) {
+        const path = s.match(/^(?:node|python3?|bash|sh)\s+(\S+\.\w+)/)?.[1]
+        const p = path && resolvePath(path, docDir)
+        out.push({ ...r, kind: 'command', result: p && !p.ok ? (p.moved ? `script moved: ${p.moved}` : 'script missing') : 'command — not run' })
+        continue
+      }
+      // not this repo's to answer: a placeholder, a machine path, a version, a slash command
+      if (/[<>{}]|\bNN\b|^[~$]|^\/[^/]*$|^\/(Users|home|tmp|etc|opt|var)\/|^v?\d+(\.[\dx*]+)+$|^\.\w+$/.test(s)) continue
+      if (!/\s/.test(s) && !/^[a-z]+:\/\//.test(s) && (r.link || s.includes('/') || /\.[A-Za-z][A-Za-z0-9]{0,5}$/.test(s)) && !/^[\d.]+$/.test(s)) {
+        // a path is this repo's when its first directory is; a bare name may be anyone's file
+        const first = norm(s).split('/')[0], ours = s.includes('/') && (dirs.has(first) || dirs.has(norm(join(docDir, first))))
+        if (s.includes('*')) {
+          const re = globRe(norm(s)), n = tree.filter(f => re.test(f)).length
+          out.push({ ...r, kind: 'glob', result: n ? `ok (${n} file${n === 1 ? '' : 's'})` : ours ? 'matches nothing' : 'not in this repo' })
+        } else {
+          const p = resolvePath(s, docDir)
+          out.push({ ...r, kind: 'path', result: p.ok ? 'ok' : !s.includes('/') && (p.moved || p.ambiguous) ? `ok (${p.moved ?? p.ambiguous.join(', ')})`
+            : p.moved ? `moved: ${p.moved}` : p.ambiguous ? `ambiguous: ${p.ambiguous.join(', ')}` : !ours ? 'not in this repo' : 'missing' })
+        }
+        continue
+      }
+      const id = s.replace(/\(\)$/, '')
+      if (/^[A-Za-z_$][\w$]*(\.[A-Za-z_$][\w$]*)*$/.test(id) && id.length >= 3 && !SKIP.has(id.toLowerCase())) {
+        if (!ids.has(id)) ids.set(id, [])
+        ids.get(id).push(r)
+      }
+    }
+    // every identifier in one git grep, the document itself excluded
+    if (ids.size) {
+      const g = quiet('git', ['grep', '-o', '-h', '-w', '-F', ...[...ids.keys()].flatMap(id => ['-e', id]), sha, '--', '.', `:(exclude)${norm(doc)}`])
+      const seen = new Map()
+      for (const m of (g.stdout ?? '').split('\n')) if (m) seen.set(m.replace(`${sha}:`, ''), (seen.get(m.replace(`${sha}:`, '')) ?? 0) + 1)
+      for (const [id, rs] of ids) for (const r of rs) out.push({ ...r, kind: 'name', result: seen.get(id) ? `ok (${seen.get(id)} in the tree)` : 'not in this repo' })
+    }
+    const elsewhere = out.filter(o => o.result === 'not in this repo')
+    const bad = out.filter(o => !o.result.startsWith('ok') && !/not run/.test(o.result) && o.result !== 'not in this repo')
+    const judge = [...out.filter(o => /not run/.test(o.result)), ...counts.map(c => ({ ...c, kind: 'count', result: 're-derive' }))]
+    console.log(`claims-scan ${doc} @ ${at}: ${out.length} checked · ${bad.length} wrong · ${elsewhere.length} not in this repo · ${judge.length} for judgment`)
+    if (bad.length) { console.log('\nwrong at the sha:\n| where | claim | kind | at the sha |\n|---|---|---|---|'); for (const o of bad) console.log(`| ${o.where} | \`${o.raw}\` | ${o.kind} | ${o.result} |`) }
+    const byClaim = new Map()
+    for (const o of elsewhere) byClaim.set(o.raw, [...(byClaim.get(o.raw) ?? []), o.where.split(':').pop()])
+    if (byClaim.size) console.log(`\nnot in this repo at the sha — another repo's, a tool's config, removed, or wrong: ${[...byClaim].map(([c, ls]) => `\`${c}\` (${ls.join(',')})`).join(' · ')}`)
+    if (judge.length) { console.log('\nfor judgment — counts to re-derive, commands not run:'); for (const o of judge) console.log(`  ${o.where}  ${o.kind === 'count' ? o.raw : `\`${o.raw}\``}  — ${o.result}`) }
+    if (all) { console.log('\nchecked ok:'); for (const o of out.filter(o => o.result.startsWith('ok'))) console.log(`  ${o.where}  \`${o.raw}\`  ${o.result}`) }
+    console.log('')
+  }
+  console.log('what it cannot see: a claim in prose with no code span, a behaviour, a number with no unit — those stay the lens\'s')
+}
+
 // ── verify: hands and eyes — every data-bearing page through its states ──
 // The record: UI state bugs found one round at a time (#268 R1 → R2 → R3:
 // a refetch failure that replaces loaded rows, a 403 shown as a generic
@@ -2126,8 +2249,20 @@ async function verifyMobile(cfg, dest, outDir) {
 function transcriptStats(file) {
   const usage = new Map(), uses = new Map(), reads = new Map()
   const t = { turns: 0, built: 0, reread: 0, input: 0, output: 0, first: null, last: null, report: '' }
+  // what a Bash call was for, by its first command: the 'other' that dominated a real review needed names
+  const bashKind = cmd => {
+    const c = cmd.replace(/^\s*(cd [^;&]+(&&|;)\s*)+/, '').trim()
+    return /\bcodegraph\b/.test(c) ? 'Bash:codegraph'
+      : /^(wuwei|ww|node \S*wuwei\.js)\b/.test(c) ? 'Bash:wuwei'
+      : /^(git (-C \S+ )?grep|grep|rg|ag)\b/.test(c) ? 'Bash:grep'
+      : /^git (-C \S+ )?(show|diff|log|blame|cat-file|ls-tree|rev-parse|merge-base)\b/.test(c) ? 'Bash:git'
+      : /^(sed|cat|head|tail|awk|nl|wc|less|jq)\b/.test(c) ? 'Bash:read'
+      : /^(ls|find|fd|tree|stat|git (-C \S+ )?ls-files)\b/.test(c) ? 'Bash:find'
+      : /^(npm|npx|pnpm|yarn|bun|node|vitest|jest|pytest|tsc|biome|make|cargo|go|python3?)\b/.test(c) ? 'Bash:run'
+      : 'Bash:other'
+  }
   const kind = (name, inp = {}) => name === 'Read' ? (/\.wuwei-cache/.test(inp.file_path ?? '') ? 'Read:bundle' : 'Read:tree')
-    : name === 'Bash' ? (/codegraph/.test(inp.command ?? '') ? 'Bash:codegraph' : /\b(git )?grep\b|\brg\b/.test(inp.command ?? '') ? 'Bash:grep' : 'Bash:other') : name
+    : name === 'Bash' ? bashKind(inp.command ?? '') : name
   for (const line of readFileSync(file, 'utf8').split('\n')) {
     let d; try { d = JSON.parse(line) } catch { continue }
     if (d.timestamp) { t.first ??= d.timestamp; t.last = d.timestamp }
@@ -2184,21 +2319,21 @@ function cmdReviewCollect(argv) {
     const name = n === 1 ? base : `${base}-${n}`
     writeFileSync(join(out, `${name}.jsonl`), readFileSync(a.jsonl))
     if (a.s.report) writeFileSync(join(out, `${name}.md`), a.s.report.trimEnd() + '\n')
-    rows.push({ name, ...a.s })
+    rows.push({ name, what: (a.meta.description ?? '').slice(0, 40), ...a.s })
   }
   const k = x => x >= 1e6 ? `${(x / 1e6).toFixed(1)}M` : x >= 1e3 ? `${Math.round(x / 1e3)}k` : String(x)
   const total = rows.reduce((t, r) => ({ built: t.built + r.built, reread: t.reread + r.reread }), { built: 0, reread: 0 })
   console.log(`session ${session.id} · ${rows.length} subagent(s) → ${out}\n`)
   // output tokens are left out: the transcript records a streaming chunk's count, not the message's
-  console.log('| agent | turns | context built | re-read (cached) | where the reading went |\n|---|---|---|---|---|')
+  console.log('| agent | dispatched as | turns | context built | re-read (cached) | where the reading went |\n|---|---|---|---|---|---|')
   for (const r of [...rows].sort((a, b) => (b.built + b.reread / 10) - (a.built + a.reread / 10)))
-    console.log(`| ${r.name} | ${r.turns} | ${k(r.built)} | ${k(r.reread)} | ${r.reads.slice(0, 4).map(([kk, v]) => `${kk} ${v.n}× ≈${k(v.tokens)}`).join(' · ') || '—'} |`)
-  console.log(`| **total** | | ${k(total.built)} | ${k(total.reread)} | |`)
+    console.log(`| ${r.name} | ${r.what.replace(/\|/g, '/') || '—'} | ${r.turns} | ${k(r.built)} | ${k(r.reread)} | ${r.reads.slice(0, 4).map(([kk, v]) => `${kk} ${v.n}× ≈${k(v.tokens)}`).join(' · ') || '—'} |`)
+  console.log(`| **total** | | ${rows.reduce((t, r) => t + r.turns, 0)} | ${k(total.built)} | ${k(total.reread)} | |`)
   const byKind = new Map()
   for (const r of rows) for (const [kk, v] of r.reads) byKind.set(kk, (byKind.get(kk) ?? 0) + v.tokens)
   const top = [...byKind].sort((a, b) => b[1] - a[1]).slice(0, 3)
   if (top.length) console.log(`\nmost read, across the lenses: ${top.map(([kk, v]) => `${kk} ≈${k(v)}`).join(' · ')}`)
-  console.log('re-read is billed at about a tenth of context built; a lens with many turns pays its context again on each')
+  console.log('re-read is billed at about a tenth of context built, but every turn pays the whole context again: turns are the cost')
 }
 
 // ── digest-check: wuwei-review §7's arithmetic, before publishing ─────
@@ -3184,9 +3319,10 @@ switch (cmd) {
   case 'worktree': cmdWorktree(rest); break
   case 'mutate': cmdMutate(rest); break
   case 'sites': cmdSites(rest); break
+  case 'claims-scan': cmdClaimsScan(rest); break
   case 'plan-check': cmdPlanCheck(rest); break
   case 'uninstall': await cmdUninstall(arg); break
   default:
-    console.error(`unknown command '${cmd}'\nusage: wuwei [build|check|list|init [path]|install [path]|update|status [path]|review-prep [base] [--pr n] [--path p]|review-collect|verify [page] [--phase NN]|claim [stream] [phase]|digest-check <digest.md>|worktree <lens> [sha]|mutate <file>:<line>|sites <pattern>|plan-check [stream]|uninstall [path]|--version] [--dry]`)
+    console.error(`unknown command '${cmd}'\nusage: wuwei [build|check|list|init [path]|install [path]|update|status [path]|review-prep [base] [--pr n] [--path p]|review-collect|verify [page] [--phase NN]|claim [stream] [phase]|digest-check <digest.md>|worktree <lens> [sha]|mutate <file>:<line>|sites <pattern>…|claims-scan <doc>…|plan-check [stream]|uninstall [path]|--version] [--dry]`)
     process.exit(1)
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wei-wuwei",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "為無為，則無不治 — a source-of-truth skills & agents framework that compiles to Claude Code and Codex (Cursor and Gemini CLI planned). Write once, run in every agent, govern without forcing.",
   "type": "module",
   "bin": {

package/skills/wuwei-plan-phases/skill.md

@@ -172,9 +172,10 @@ tags: [planning, workflow]
    route each to automatable e2e (bound to a phase per step 1's strategy —
    red blocks that phase)
    or manual UAT (steps + expected result). **A repo with no e2e harness is
-   not a reason for UAT**: the first phase with a bound item adds one
-   (Playwright on web, Maestro on mobile — what `wuwei verify` runs on) as
-   its first task.
+   not a reason for UAT**: the first phase with a bound item adds one as its
+   first task — Playwright on web, Maestro on mobile (what `wuwei verify`
+   runs on), a script for a CLI, library or backend, running the real
+   program on a temp fixture and named `e2e harness: <command>`.
    **`## Verify`** lists each page that shows fetched data — `- <page>:
    <route> · phase: NN`, the phase that builds it; its error, 403, empty,
    loading and failed-refetch states are `wuwei verify`'s, not UAT's. No
@@ -305,10 +306,7 @@ tags: [planning, workflow]
 - The contract is what makes auto mode safe: the executor never defines its
   own finish line.
 - In auto mode execute's steps 2–6 run without the user, and its steps 4–6
-  loop at least three times inside that; execute's step 7 always stops. Step 1's
-  strategy question is not an exception to that: auto is only ever entered at
-  a sign-off, which recorded the answer, so a resumed auto stream reads it
-  instead of asking.
+  loop at least three times inside that; execute's step 7 always stops.
 - Sign-off is why step 8 sits where it does: the stream stops being paper
   there, and it is the only moment a human is present to confirm what the
   branch is based on. Cutting earlier leaves a branch behind for a stream

package/skills/wuwei-review/references/lens-rules.md

@@ -30,6 +30,7 @@ changed in one is changed in the other.
 
 | Lens | Rule |
 |---|---|
+| claims | **start with `wuwei claims-scan <doc>… --sha <sha>`**: every path, name, `file:line` and command checked in one call; by hand only what it lists for judgment, and assertions no code span carries |
 | claims | **a document that instructs is reviewed for what it invites**: enumerate the positions a safety claim covers, subtract the ones its mechanism protects, report the rest. Confirming it for the cases that exist proves nothing about the ones the document teaches someone to write. **A position the syntax permits is reachable — the reader is the path**, so "no such case exists yet" does not make it PLAUSIBLE. This governs *claims in documents*, not sinks in code: `audit:security`'s reachability rule is unchanged, and the two lenses reaching opposite severities on one subject is a real disagreement for a human, not a contradiction to resolve by collation |
 | claims | **a checkable gate (an acceptance item, a `grep -c … >= 1`, a `test -f`) is a claim about what will satisfy it** — ask what *else* in the tree satisfies it, not only whether the intended thing does; **a gate reading a measurement is checked for its emitter in the tree the change produces** (a deleted emitter reads as a fake zero); **a gate names its enforcer** or is a registered gap, and **N copies of a claim by one author are one claim**; **every gate is re-run after the fixes land**, since a refactor the panel asked for is how a gate stops matching. Three ways it is false and **the dangerous ones pass**: satisfied by the wrong thing (a grep meant to prove a method exists, whose one hit is a comment about another class — green, certifying work nobody did), never satisfiable (greps a since-renamed name), or its emitter deleted by the change (a fake zero). Run it against the tree as it is now and say which it currently is — **and running its syntax is not running it**, since a fragment that parses can still be case-blind or satisfied by a superstring; a fix that would satisfy the gate on arrival is itself a finding, not a reason to stay quiet |
 | claims | **a claim about history ("never", "since it landed", "every version") is answered by `git log -S` / `git log -- <path>`, not by the tree**; and **a claim to be complete is verified by re-deriving the set, never by checking off the set it lists** — "all four call sites", "every place this is mapped", "the only consumer". Ticking each listed item passes while a fifth one exists, so derive the set from the tree instead: grep the type, the decorator, the shape — **not the names the document handed you**, which are the claim under test — then subtract. This is `defects`' exclusivity rule aimed at prose, and it bites hardest on a plan, where the executor works the list rather than the tree |

package/wuwei.config.json

@@ -39,7 +39,7 @@
     "agents/wuwei-audit-contract/agent.md": 700,
     "agents/wuwei-audit-coverage/agent.md": 800,
     "agents/wuwei-pre-implementation-doubt/agent.md": 600,
-    "agents/wuwei-review-claims/agent.md": 1600,
+    "agents/wuwei-review-claims/agent.md": 1700,
     "agents/wuwei-review-code/agent.md": 2000,
     "agents/wuwei-review-defects/agent.md": 1500,
     "agents/wuwei-review-design/agent.md": 1600,