Sync write-guard.js: a protected file git already tracks no longer asks before a write, since the write is diffable and revertible; untracked, new and gitignored protected files still ask, and .claude/settings*.json and .pre-commit-config.yaml always ask.
Sync the adversarial-loop rule: reviewer briefs that run adversarial shell cases require case files written with a file-editing tool and fake gh/git binaries.
Keep review coverage and confidence gaps as factual limitations; require a specific user decision for additional review and omit declined requests from findings and final actions.
Sync the cross-validation protocol, and state in the review consolidator prompt that aggregate readiness: complete requires every assessment complete and no open concerns, and that a missing required role or a null candidate makes the aggregate incomplete, overriding blocked, also under a null aggregate outcome.
Sync the quality-gates rule: after each validated adversarial-loop round, print the progress table exactly, with all rows kept and each cell as old + new.
Sync the cross-validation protocol: assessment evidence and limits are string arrays, open concerns cover only UNVERIFIED or pending candidates, and an open candidate forbids complete readiness.
Render reviewer attribution with readable role names and square-bracketed ratings, omit execution-origin labels, and display null judgments as “no source judgment.”
Gate existing compaction boundaries with persisted metadata and optional Foundry compact_gate.py; append the fix checkpoint before writing its contract. Follow-up questions carry the report path and key outcome, while the final reply preserves the full report header.
Route skill questions through saved-content and plain-summary delivery without previews, using persisted session/digest ownership metadata and atomic contract writes.
Validate each review candidate against allowed source evidence before publishing findings; retain revision, checks, counterevidence, disposition and durable open concerns through remediation.
Define source ratings as 1 approve, 2 minor edits, 3 major revision, 4 insufficient-but-promising, and 5 reject only for an evidenced conflict with binding constraints. A completed undecidable assessment (null) differs from a missing reviewer; neither implies rejection or approval, and ratings never replace the aggregate verdict.
Breaking report-intake change: add versioned review-validation.json with source-5-v1 ratings and REVIEW_V1_PASS / REVIEW_V1_BLOCK / REVIEW_V1_REJECT_<GROUND> gate headers. These prefixes deliberately block legacy resolver intake: upgrade the resolver and rerun its report gate rather than stripping the prefix.
Remove shipped repository-API, GraphQL, branch and tag allow grants; new installs use normal permission handling, including routine-read prompts when no other grant matches. Remove shipped GitHub-write and local branch/tag-deletion denies while retaining force-push and mirror-push denies.
Develop setup preserves existing repository-API, GraphQL, branch and tag allow entries because Foundry may also have installed them; standalone users remove them manually. Foundry setup owns stale GitHub-deny cleanup.
Add an optional gh-read decision lane after blueprint and shape; a missing optional module falls through.
Require the report header in the first follow-up question text or in every eligible option preview before develop:review proceeds; record delivery only after the question is shown. When the full header exceeds preview limits, use a compact summary and saved-report path.
Warn about stale session state and offer a choice; debug/fix hypothesis teammates are read-only, while team edits share the orchestrator worktree and need no separate teammate merges.
Add --force-if-includes and mirror pushes to Develop’s explicit force-push deny list. The agent router resolves the newest Haiku model dynamically from environment/cache/API and falls back with diagnostics.
Require evidence-backed findings and completion claims in review and fix; retain representative real-case acceptance, use mocks only as supplementary checks, and do not weaken assertions or requested behavior.
Retry transcript reads for up to two seconds before denying review-header delivery; report the visible-reply character count and distinguish thinking/reasoning and tool output from user-visible delivery.
Keep the report-print exception available and enforce Stop when develop:review follow-up is skipped; return a short terminal summary while retaining full findings in the report.
Account for confidence with two-decimal gap deductions summing to 1 - score; use (-0.00) for nonreducing limits and one residual entry for unexplained shortfall.
Add a native Windows Python launcher and runtime probes, preserving workload arguments and exit status; use portable launcher commands in the existing adversarial-log instructions.
Require strict score descent for unchanged scope; plateau, increased score, stale evidence or a stricter caller budget stops the loop. Completion questions are conditional on missing decisions or authority, and authorized next actions continue without an unconditional skill menu.
Remove the arbitrary three-review cap: strict integer score descent bounds reviews while stricter caller budgets still apply.
Record append-only adversarial round logs with a split header and staged-append protocol while retaining historical-reader compatibility.
Make debug’s hypothesis ledger append-only and select review depth from the Codemap code path rather than diff size. Run the challenger at every diff size; --challenge becomes a compatibility no-op and --no-challenge disables it.
List Codex-eligible mechanical findings under Recommended Next Steps; review names candidates for the fix workflow or user and never invokes bridge:implement or edits code itself.
Add dev_test_targets.py to select focused tests from fresh, complete Codemap impact data or fall back to name/import heuristics; record selections in test-targets.jsonl. Feature, fix and refactor loops run targeted tests, then require a fresh full-suite gate after any later fix. Agent-watch notifications/deadlines have an explicit timeout fallback.
Batch non-overlapping edits and tests into fewer test runs in develop:feature and develop:refactor; failures bisect the batch, and --no-batch opts out. Probe parallel runners, merge doctest collection, retry focused failing nodes and classify isolation failures.
Breaking report change: use the Final Report Doctests values pass / fail / not-merged, replacing the earlier pass/fail contract; failed merged collection uses a separate doctest pass and reports not-merged.
Repair zsh multi-token runner expansion and pipeline-exit capture across workflows.
Reject CLI-option-shaped Codemap module names before subprocess calls, contain Git-artifact cleanup within the selected repository, atomically replace propagated rules, and handle oversized audit lines without crashing the verifier.
Make develop:review fail closed when its run directory is missing, correct challenger-severity and checklist handling, and surface breaking changes explicitly for background callers without a foreground question path.
Record challenge progress cumulatively and require a later independent review after fixes; keep completion bound to validated rounds and the caller’s source, role and evidence gates.
Add scoped reviewer ratings and a finding-author column to develop:review, preserving the aggregate verdict without averaging ratings. Ratings distinguish approval, minor changes, changes required, insufficient evidence and block/reject; missing reviewers remain unrated, and the legend, summary and findings overview travel with the header.
Preserve Codemap package-initializer queries across mixed diffs and Windows/source-layout paths; keep incomplete preflight data partial and legitimate source reads available.
Add an isolated blind-solve reviewer to develop:review for feature or mixed changes only when an active plan names an affected module; compare its blueprint with the implementation and report explainable divergences as questions.
Refresh the review compaction contract and hint before follow-up.
Read Codemap’s shared context live from its active install, remove --semble, and retain the standalone path fallback. Add bounded shutdown timeouts to Develop session hooks.
Compress prose and nonfunctional code comments across Develop skills, templates, shared files and rules while preserving frontmatter, headings, code, load paths and functional comments.
Include unchanged consumers and the next ordinary user action in workflow reviews; require outcome probes for identity, destination, lifetime, retry and resume assumptions.
Adopt the bounded adversarial convergence procedure for review-and-fix cycles, with validated independent evidence, fresh source snapshots and explicit stop or recovery decisions.
Restore four quality-gate obligations in the Develop rule copy: route files by copy intent, avoid option questions whose actions cannot be executed, merge instruction blocks without losing rules, and record deferred work in the delivered artifact.
Add a weighted loop capped at three independent review/fix iterations; stop on plateau or non-convergence, and leave structural findings unapplied until explicit approval for separately scoped work.
Dispatch reviewers in the background, end the turn and resume on completion notifications; bound inactivity handling to about 15 minutes and retain partial/error outputs instead of silently omitting failed reviewers.
Extract argument-target parsing, review-target resolution and skill-compaction contract writing into tested Python helpers; persist the tried-candidate ledger so resumed debugging uses state that was actually written.
Ship Develop-local Codemap context and gate contracts so standalone installs do not depend on another plugin’s private shared directory; prefer the active install and fall back to file reads when Codemap is unavailable.
Register the shared Bash allow-audit hook in Develop, preserving the existing command decisions while adding an audit trail.
Record ranked allow-hook decisions and completion/session events, storing command digests rather than raw commands; audit can be disabled, and verification/pruning does not make the log tamper-evident.
Replace routine self-review and score-triggered adversarial passes with named-gap triggers; retain findings before presentation filtering and raise feature/refactor effort to xhigh.
Replace the legacy Codex integration with explicit bridge calls for implementation, advice and review; preserve unavailable behavior and local review fallbacks.
Anchor Codemap index and logs at the Git root, and resolve module names from the index so Develop queries work from subdirectories and do not guess from paths.
Choose a task-fit Codemap route before fix retrieval; use no query for a fully localized edit unless a structural fact or explicit tool request remains unresolved.
Rank only review dimensions selected by scope and evidence, cap default fan-out at four, and let --full run every eligible dimension without widening the scope.
Extract Codemap gating, issue fetching and worktree setup into tested Python helpers, and split team-mode prompts into loadable files. Add a language preflight before pytest runs in projects without Python markers.
Check review-header delivery in the transcript as a nudge before follow-up; the hard delivery gate arrives later.
Add a fail-open, expiring hook that blocks an active review follow-up until its report file exists; printing and delivering the header remains a skill obligation.
Add --worktree to feature, fix, debug, refactor and review; edits run in a HEAD-based worktree and report its branch/path for manual integration. Plan remains read-only and does not accept the flag.
Worktrees start from committed HEAD; debug diagnoses and review reports return to the main tree for manual integration.
Use cat for shared-document loads so documented shell permissions survive plugin updates, remove a superseded team-prompt copy and ship a Develop permission-allow manifest.
Prioritize Codemap results in reviewer prompts; recognize direction-scoped query_complete with the legacy exhaustive alias and invoke the Semble companion when available for incomplete context or a missing index.
Add per-skill compaction contracts to Develop review, feature, fix, refactor and debug so the workflow can resume from persisted state after context compaction.
Add --keep context preservation and harden argument parsing for tokenized and quoted values.
Fix cross-platform runner handling, test ordering and flag spelling across feature, fix, refactor and debug.
Gate characterization tests on unmodified source before refactoring, then rerun the same tests afterward. Failed or no-test prechecks require recovery, explicit acceptance of proceeding without a safety net, or abort.
Synchronize Develop’s agent router with the canonical implementation, enforce source-drift checks and add SessionStart agent indexing with optional OpenAI-embedding/Anthropic matching and fallback.
Consume Codemap test-impact to select affected tests in feature, fix and refactor, falling back to the full suite; record query counts, completeness, coverage caveats and gaps.
Add premise verification before Develop workflows form a diagnosis or design; review findings must cite file and line evidence and meet the source threshold.
Migrate debug, feature, fix and refactor to the shared skill-driven argument parser; persist parsed flags in per-skill and compatible legacy temp files instead of caller-side eval blocks.
Add --repo to feature, fix and debug issue fetching and parse it in refactor for consistency; add two-wave feature teams and per-agent debug health sentinels. Persist plan flags across calls, bound plan/debug dispatch depth and distinguish public breaking changes from internal signature-change risks.
Restrict Codemap scans to the project tree and cap them at 2,000 Python files; sanitize project and sentinel names, validate issue IDs and pytest commands, parse diagnosis paths without shell evaluation, and reject missing diagnosis files.
Add a non-Python preflight to feature; feature's lead or software engineer owns primary red-green tests, while QA adds edge-case and regression tests after implementation. In fix, retain the challenger on diagnosis handoff, stop for a decision without a reproduction path, and preserve pre-existing regression tests.
Gate mixed feature/refactor goals and broad refactors spanning 3+ modules, 5+ files or any public-API rename; require a scope decision before proceeding.
Add plugin-owned helpers for issue fetching, shared-path resolution, run directories and Codemap flags; reduce repeated shell parsing in Develop skills.
When review receives a PR-like argument, detect whether OSS is installed before routing and ask explicitly when its PR workflow is unavailable. Treat pytest exit 5 as a no-tests/collection condition, cap refactor cycles, and author new QA reproduction tests only when no relevant existing test is found; strengthen weak existing tests instead.
Accept full GitHub Actions URLs in --ci-run, extract CI log handling and inline plan generation into shared helpers, and repair feature team-mode dispatch and fix-plan initialization.
Keep issue-ID normalization and fetching in one shell call, repair Foundry fallback paths, recognize team flags, and distinguish workflow routing metadata.
Extract task-hygiene instructions for reuse across Develop workflows and bound agent-router matching with a five-second timeout.
Parse --plan and --diagnosis handoffs in fix/refactor and fail fast when the referenced file is missing. Offer Codemap’s optional Semble companion query only when structural coverage is incomplete, then combine reverse-dependency results.
Add a three-tier agent-router fallback: exact installed agent, optional LLM-selected local role, then general-purpose. Require a selected follow-up skill to run in the same turn.
Require analysis agents to self-check claims and coverage, and route low-confidence work for adversarial review when available. Debug issue mode fetches the issue first and runs a referenced test before falling back to the full suite when the path is absent or invalid.
Centralize Codemap context and task hygiene in shared Develop files; add challenger coverage and reliable --plan/--diagnosis parsing across applicable modes.
Protect existing plans with a counter suffix instead of silently overwriting them.
Extract agent fallback and test-runner detection into shared sidecars, add a bounded refactor cycle cap, and reuse Codemap blast-radius context for multi-file work. Missing Codemap indexes now return a failing status so callers can gate correctly.
Separate PYTEST_CMD from the project test runner and detect the repository’s runner before testing. Add --plan and --diagnosis handoffs, early exit-code gates, and persisted checkpoints to feature, fix and debug flows. Review loops now stop when findings stabilize.
Persist structured plans with feasibility review/resolution and Codex validation before implementation.