菜单
Use when restructuring code for better organization or reducing tech debt with zero behavior change. 3-phase loop (Plan → Apply → Verify); never ships — the diff is the deliverable. For behavioral changes use /geniro:implement; for performance use /geniro:review (optimizations dimension).
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when auditing the Geniro plugin repo as a whole — skills, agents, hooks, lib helpers, rules, and docs — for cross-file consistency, stale references, authoring-rule compliance, logic and shell correctness, over-complication, magic numbers, and safety/coverage gaps. Runs a deterministic pre-pass, then parallel dimension reviewers, re-verifies every finding against the cited lines, and writes a tiered report to the local-only design/scratch/. Skip for fixing one known issue (/improve-template) or reviewing a pending code diff (/code-review).
Use when modifying the Geniro plugin itself — fix a Geniro skill, agent, hook, or ARCHITECTURE.md. Researches via parallel agents (codebase + ARCHITECTURE.md + internet), presents evidence, implements after approval. Skip for general codebase Q&A (/geniro:investigate) or app-code bugs (/geniro:debug).
Use when scaffolding a reusable workflow-helper (Slack/PR/release automations) or invoking a previously-created action. Stored at .geniro/actions/. Run-mode executes the action directly — invoking it is the authorization, so no confirmation is asked. Skip for editing core Geniro skills — edit the plugin repo directly.
Use when a bug needs systematic investigation. 3-phase loop (Investigate → Propose → Ship) mirroring /geniro:implement: observe → hypothesize → test → isolate → propose fix → author reproduction test, then escalate to /geniro:implement with a handoff file at .geniro/state/handoff/from-debug-<branch>.md. Adversarial mode authors F→P tests against a diff (verify-changes). Skip for bugs with obvious root cause — go straight to /geniro:implement.
Use when shipping a new feature, endpoint, page, or significant change against a spec.md / plan.md (from /geniro:plan) OR a raw inline task description. 3-phase autonomous loop: Analyze → Implement → Self-review-and-Ship. Optional --deep deepens two phases — a multi-angle self-review with verification escalated only where the call is contested, and a 3× fact-check of the spec's cited claims before editing (higher quality, higher cost).
Use when adding skill-behavior rules at Geniro skill phase boundaries OR cross-cutting code-style rules loaded at every code-writing/review step; also for declaring read-only fact-verification sources (## Data Sources) or routing the agent's memory/learnings through a custom backend like an MCP (## Memory Backend). Operations: list, create, edit, validate, delete. Skip for per-file-pattern rules — .claude/rules/.
| name | refactor |
| description | Use when restructuring code for better organization or reducing tech debt with zero behavior change. 3-phase loop (Plan → Apply → Verify); never ships — the diff is the deliverable. For behavioral changes use /geniro:implement; for performance use /geniro:review (optimizations dimension). |
| context | main |
| model | inherit |
| allowed-tools | ["Read","Write","Edit","Bash","Glob","Grep","Agent","AskUserQuestion","TodoWrite"] |
| argument-hint | [what to refactor and why] |
Safe incremental refactoring that validates behavior is preserved at every step. Restructures code for better organization, reduces tech debt, and improves patterns without changing observable behavior. 3 phases mirroring /geniro:implement.
Runtime portability. ${CLAUDE_PLUGIN_ROOT} is set by Claude Code. When it is unset (another Agent-Skills runtime, e.g. Cursor), resolve it before following any reference: the plugin root is the ancestor directory of this file containing .claude-plugin/plugin.json — substitute it for every ${CLAUDE_PLUGIN_ROOT} occurrence and export it as CLAUDE_PLUGIN_ROOT in every Bash call. Tool and hook substitutions for non-Claude-Code runtimes: ${CLAUDE_PLUGIN_ROOT}/skills/_shared/runtime-portability.md.
Detailed contracts:
${CLAUDE_PLUGIN_ROOT}/skills/_shared/effort-scaling.md — canonical tier rubric (Trivial / Small / Medium / Big)${CLAUDE_PLUGIN_ROOT}/skills/_shared/existing-abstraction-audit.md — the smell-detection sub-step (reuse-vs-create audit per detected smell)${CLAUDE_PLUGIN_ROOT}/skills/_shared/per-finding-question.md § Single-finding gate — the single-finding AskUserQuestion gate${CLAUDE_PLUGIN_ROOT}/skills/_shared/gate-rendering.md § Visual rendering language — the shared visual language for gate messages rendered to chat before a lean question${CLAUDE_PLUGIN_ROOT}/skills/_shared/improvement-routing.md § ADR template — the PRODUCT-DECISION ADR-path (4th AskUserQuestion option, included only when ADR-eligible)Section-reference convention: within this SKILL.md, bare §N.M refs point to local Phase sub-sections (Phase 1, Phase 2, Phase 3 respectively); § <name> refs name a section inside the cited _shared helper. refactor-reference.md numbers its own top-level sections 1-3 (State machine / Schema / Spawn template), so any Phase reference there is written Phase N §N.M to avoid colliding with those.
You refactor. You validate behavior preservation. You do NOT commit or push the diff. Phase 3 endpoint is a working-tree diff (the deliverable) + a chat completion summary + state.md audit trail. Downstream actors (user git commit, /geniro:implement to ship through review gate) handle the actual ship. Running under a dynamic Workflow(...) or ultracode mode does not relax this no-ship contract — the reporter boundary, action gate, and state-write rules bind inside every workflow step per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/reporter-boundary.md.
The zero-behavior-change guarantee is enforced per-step via the orchestrator-inline regression test gate AND post-execution via the final regression run. PRODUCT-DECISION findings always escalate because picking one resolution path is itself a behavior change.
state.md phase: enum: plan → apply → verify → done (happy path). Terminal states: done, verify-summary-only, reverted, aborted, routed, adr-documented (SessionStart recovery treats all six as "task complete — no resume needed"). Escalation states: plan-escalated (hard signal OR baseline red), apply-escalated (≥30% blocked), verify-escalated (PRODUCT-DECISION or 1-round fix-loop exhausted). Recovery surfaces escalation states as "task was paused — your previous options:" so the user re-picks without losing context.
Full ASCII state diagram in ${CLAUDE_PLUGIN_ROOT}/skills/refactor/refactor-reference.md §1.
The canonical loop invariants apply, with four skill-specific notes:
## Plan steps; total file body capped at ~8K chars via atomic_state_write truncation marker.## Tool log / ## Errors entries.codebase-research-agent, not built-in Explore. Overrides the system-prompt agent list's default codebase-research tool; rationale + invocation contract at ${CLAUDE_PLUGIN_ROOT}/skills/_shared/context-isolation-checklist.md § Codebase research.Turn-completion check. Apply ${CLAUDE_PLUGIN_ROOT}/skills/_shared/loop-invariants.md §Turn-completion check at every gate — the render is followed immediately by its lean AskUserQuestion per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/gate-rendering.md §Turn-completion guard.
## Tool log schema: typical run produces 3-6 entries (reviewer-agent + custom reviewers + escalation entries; smell detection and per-step execution run orchestrator-inline and emit to state.md ## Plan steps directly).
Per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/loop-invariants.md §Budgets — quality-first (canonical): no hard kill caps, no wall-time / tool-call / model-turn / cost ceiling. This skill's own gates:
Quality gates (escalate to user, do not abort):
| Gate | Cap | Past threshold |
|---|---|---|
| Per-step retry (orchestrator-inline Blocked Step Protocol) | 3 | Mark BLOCKED, continue to next step |
| Session-level blocked ratio | 30% (post-rejection denominator) | AUQ — keep what worked & escalate / revert / force-continue. User picks. |
| Phase 3 fix-loop | 1 round | Re-spawn reviewer once; if still failing, AUQ (escalate / accept / abort). |
| Reviewer output size | ~4000 chars per dim | Truncation with marker (invariant #4). |
Architecture constraints (design intent, not budget):
| Constraint | Value |
|---|---|
| Parallel reviewer spawns | 1 independent + N custom reviewers |
| Smell-detection rounds | 1 (orchestrator-inline) |
| Smell-evidence filter rounds | 1 (Medium+ only) |
OMIT model= at every plugin-agent spawn site, per the canonical rule in ${CLAUDE_PLUGIN_ROOT}/skills/_shared/model-tiering.md. Spawn plugin-defined subagents (reviewer-agent, custom reviewers) through the registration ladder in ${CLAUDE_PLUGIN_ROOT}/skills/_shared/spawn-agent.md (geniro:<agent> → bare <agent> → general-purpose with body inlined); cache the resolved rung for the rest of the session.
Co-cite ${CLAUDE_PLUGIN_ROOT}/skills/_shared/context-isolation-checklist.md at every spawn site — every Agent prompt satisfies the six pre-inlined fields, because a spawn missing a field makes the subagent re-discover scope from scratch and drift.
| Spawn | Tier | When |
|---|---|---|
| Orchestrator-inline execution (any risk) | Orchestrator's model | Smell detection + per-step execution run on orchestrator's main thread (no subagent — no tiering decision) |
| Independent reviewer-agent + custom reviewers | inherit (OMIT model=) | Phase 3 diff review (Medium+ tier only); inheritance lets the user's session-level /model choice propagate |
| Focused ADR-drafting agent | inherit (OMIT model=) | ADR path (only fires if ADR-eligible PRODUCT-DECISION) |
If any delegated agent fails (timeout, error, empty/garbage result): retry once with the same prompt. If the retry also fails:
Cite the canonical rule at ${CLAUDE_PLUGIN_ROOT}/skills/_shared/evidence-standard.md. /geniro:refactor applies it at baseline validation, the per-step regression gate (orchestrator-inline pre/post-check), and the final regression run.
Route every user-facing choice in this skill through the AskUserQuestion tool per the canonical rule at ${CLAUDE_PLUGIN_ROOT}/skills/_shared/per-finding-question.md § Single-finding gate — a plain-text choice bypasses the approvals persistence the structured tool records. The enumerated gates are examples, not an exhaustive list.
| Phase | Helper | Direction | MODE |
|---|---|---|---|
| Phase 1 entry | load-custom-instructions | read L4 | refresh |
| Phase 1 entry | load-semantic | read L3 | refresh |
| Phase 1 entry | query-learnings | read L2 | n/a |
| Phase 1 entry | resolve-conflicts | read L2/L3/L4 | n/a |
| Phase 1 entry (conditional) | spec.md frontmatter workflow_refs[] | read external | fires only when $ARGUMENTS points to spec.md or task-dir; cached tracker status primes scope decisions |
| Phase 2 entry | load-custom-instructions | read L4 | refresh (single re-fire) |
| Phase 3 exit | emit-learning | write L2 | n/a (emit types: discovery with ext.{area, insight} OR pitfall with ext.{trap, mitigation}) |
update-semantic writes to _CODEBASE_MAP.md for move/rename refactors (bounded auto-incremental write). Not applicable when refactor adds modules (would be a behavioral change → escalate to /geniro:implement).
state.md phase: plan. Light by cost vs Phase 2 — a scope-discovery batch (Read + Grep) + 1 baseline validation run + orchestrator-inline smell detection (Medium+) + orchestrator-inline smell evidence (Medium+) + orchestrator plan-build.
Exits to Phase 2 only when: (a) baseline validation green, (b) tier classified, (c) hard signals checked, (d) smells identified (Medium+) + smell-evidence filtered (Medium+), (e) plan built and approved (HIGH-risk steps gated).
On Phase 1 entry, in order:
load-custom-instructions(MODE: refresh, scope: refactor + global + code-style — pipeline tier, 3 files) per Echo contract.load-semantic(MODE: refresh, top-2 default) — _project.md + _CODEBASE_MAP.md. Fingerprint drift check fires if applicable.query-learnings(tags=<inferred from $ARGUMENTS>, scope=task path) to find prior discoveries about coupling, pitfalls, and conventions relevant to the refactor scope — route per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/query-learnings.md §"Memory backend override" (under a declared ## Memory Backend block routing learnings, /geniro:refactor's own tools can't call the backend read tool, so it delegates that read to a scoped knowledge-retrieval-agent spawn — SCOPE: learnings-backend — per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/memory-backend.md §3 and uses the returned learnings; the local file is empty under mode: replace; no block → the inline file query runs unchanged).resolve-conflicts with all three layers loaded; precedence: custom instructions > project snapshot > past learnings when layers disagree; halt with AUQ on hard conflict. Echo lines from each loader are mandatory per its §Echo contract.$ARGUMENTS points to a spec.md path OR a planning task-dir, parse spec.md frontmatter workflow_refs[]. Accept geniro_schema_version: m5-v1 (treat field as absent), m5-v2, m5-v3, and m5-v4 (read the field if present; an m5-v4 spec carries workflow_refs[] identically and may also carry a launch_config block, which /geniro:refactor ignores). Use the cached status field as scope-priming context — refactor scope decisions favor "still In Progress" specs (active editing area) over "Done" specs (stable code, smaller perturbation surface). On m5-v3 the cached parent-epic status and sibling sub-task statuses also prime scope decisions (e.g. an in-flight sibling touching the same module argues for a smaller perturbation surface), still read-only. Read-only — /geniro:refactor never mutates tracker state via MCP. Skipped silently when no spec.md is in scope.${CLAUDE_PLUGIN_ROOT}/skills/_shared/branch-freshness.md — /geniro:refactor applies changes in place on the current branch, so if that branch is behind the default branch, offer to update it before scope discovery and baseline validation run against stale code. Skipped silently when the branch is already current.$ARGUMENTS to understand what is being refactored and why.global.md — reach for its code index when one is configured). Read all files in scope to understand current organization, dependencies, imports, and test coverage.${CLAUDE_PLUGIN_ROOT}/skills/_shared/scope-anchor.md. Check: .geniro/planning/*/ (task-local), workflow files (cwd-first, then <PRIMARY_ROOT>/.geniro/workflow/*.md per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/primary-worktree.md Mode A), <PRIMARY_ROOT>/.geniro/knowledge/learnings.jsonl (search for scope-file keywords — or, under a ## Memory Backend block routing learnings, delegate that read to a scoped knowledge-retrieval-agent spawn (SCOPE: learnings-backend) per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/memory-backend.md §3, since /geniro:refactor's own tools can't reach the backend and the file is empty under replace), git state (git rev-parse --show-toplevel, git branch --show-current, git log --oneline -5, git status --short).${CLAUDE_PLUGIN_ROOT}/skills/_shared/evidence-standard.md. Outcomes:AskUserQuestion header "Baseline" — "Fix the broken tests first (stop refactoring)" / "Proceed anyway — existing failures are out of scope (risky)". Default: stop. state.md → phase: plan-escalated./geniro:implement to add coverage first." state.md → phase: routed (terminal).## Baseline body section; proceed.${CLAUDE_PLUGIN_ROOT}/skills/_shared/test-first-gate.md — author RED before refactor edit. If every scope-symbol already has coverage, skip silently.Apply the canonical effort-scaling rubric from ${CLAUDE_PLUGIN_ROOT}/skills/_shared/effort-scaling.md: Step 1 (hard signals) → Step 2 (5-dim score) → Step 3 (tier behavior). Refactor-specific hard signals apply orthogonally — they escalate OUT of /geniro:refactor entirely.
${CLAUDE_PLUGIN_ROOT}/skills/_shared/effort-scaling.md. Any hard signal forces Big; otherwise the score band sets the tier (Trivial / Small / Medium / Big). effort-scaling.md is the single source — do not restate the signals or bands here.| Tier | Refactor behavior |
|---|---|
| Trivial | 1-2 files, mechanical (rename, single extract). Skip smell detection. Skip the smell-evidence filter. Skip independent reviewer + custom reviewers. Orchestrator authors the plan directly from $ARGUMENTS + scope-files Read; goes straight to Phase 2 execution. |
| Small | Full smell detection in Phase 1 BUT skip smell evidence (scope too narrow to matter). Skip independent reviewer + custom reviewers. |
| Medium | Full pipeline as specified — orchestrator-inline smell detection + orchestrator-inline smell evidence + reviewer-agent + custom reviewers. |
| Big | Recommend running /geniro:plan first to split the refactor into independently shippable milestones; refactor then runs one milestone at a time against an approved spec.md. If user wants to proceed without planning, require explicit confirmation via AskUserQuestion header "Scope": "Run /geniro:plan first" / "Proceed without a plan (risky)". On "Proceed without a plan", Big runs the Medium pipeline. The only difference is user has accepted the added risk of proceeding without architectural review. |
These 4 refactor-specific signals are orthogonal to the canonical effort-scaling tier. Any present → escalation AUQ "Scope" — "Escalate to suggested skill" / "Proceed anyway (treat as Big)" / "Reduce scope". Default: Escalate. On "Escalate" pick → state.md phase: routed (terminal).
| Signal | Routing target |
|---|---|
| Behavioral change required | /geniro:implement |
| New tests required to cover untested code | /geniro:implement |
| Test assertions touched (not just imports) | Not refactoring — /geniro:implement |
| Auth, crypto, or payment code touched | Escalate (owner review required) — surface to user, not auto-route |
Skipped for Trivial and Small per Step 3.
The orchestrator runs the 6 smell detection categories + Deepening Opportunities lens inline — no subagent spawn, for the state-continuity reason spelled out at Phase 2 §2.2. For wide cross-file locator queries that would otherwise require many inline Reads (e.g., "find all definitions of the duplicated helper across the repo"), spawn codebase-research-agent per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/context-isolation-checklist.md § Codebase research. The smell-evidence pass itself stays orchestrator-inline so state continuity and the per-step regression-skip predicate are preserved.
Reference: ${CLAUDE_PLUGIN_ROOT}/skills/_shared/refactor-patterns.md Phase 1 — full smell taxonomy + change-impact scoring + escalation rules. The orchestrator reads this file once at entry and applies the rubric inline.
Per-smell procedure:
${CLAUDE_PLUGIN_ROOT}/skills/_shared/architecture-vocabulary.md first for vocabulary grounding, then scan for wide-interface shallow modules / pass-through wrappers / repeated cross-call orchestration / high-leverage shallow code.${CLAUDE_PLUGIN_ROOT}/skills/_shared/existing-abstraction-audit.md — apply its Procedure (search designated helper directories, categorize REUSE-AS-IS / EXTEND / NO-ANALOGUE, force-fit guard, Rule of Three). Emit candidates inline alongside each smell using the audit's Output format.*.ts / *.py / etc).Output (write directly to state.md ## Smells Detected):
smells:
- id: s-001
category: duplication
file_lines: <file:line references>
proposed_transformation: <mechanical description>
consumer_count: <int>
files_affected: <bounded list>
public_surface: <true|false>
abstraction_audit: <REUSE-AS-IS|EXTEND|NO-ANALOGUE — per audit output>
Risk classification (LOW / MEDIUM / HIGH) and ordering happen in §1.6 (orchestrator decisions, not the smell-detector's job).
Anchor: stay within WORKTREE on BRANCH — orchestrator verifies with pwd && git branch --show-current once at entry; abort if either differs.
Skipped for Trivial and Small. The orchestrator gathers evidence on detected smells against repo conventions inline — no subagent spawn (folded under subagent rationalization; light reasoning that fits orchestrator's main context cleanly should not be spawned).
For each smell detected in §1.4, the orchestrator weighs three signals inline:
docs/adr/, architecture docs (when present) and CLAUDE.md.${CLAUDE_PLUGIN_ROOT}/skills/_shared/existing-abstraction-audit.md mental check.Synthesis matrix per smell:
| Convention | Complexity | Frequency | Decision |
|---|---|---|---|
| ALIGNS | * | * | FILTER (repo's chosen pattern) |
| CONTRADICTS | OVER-ENGINEERED | * | FILTER (cure worse than disease) |
| CONTRADICTS | APPROPRIATE | WIDESPREAD | FILTER OR consult user (intentional rather than smell) |
| CONTRADICTS | APPROPRIATE | ISOLATED | KEEP (genuine smell) |
| NEUTRAL | APPROPRIATE | ISOLATED | KEEP (default) |
KEEP smells enter plan-build. FILTERED smells are noted in state.md ## Filtered smells section with the synthesis reason. No fail-open caveat needed — dedup and judgment run in orchestrator's main context.
Orchestrator builds the plan from the smell-evidence inline output (Medium+) or directly from scope-files (Trivial/Small):
${CLAUDE_PLUGIN_ROOT}/skills/_shared/refactor-patterns.md Phase 1 § "Step 2: Change Impact Scoring" (public API / module export / shared-type change is HIGH regardless of consumer count).max_risk (max across all step risks).Approval gate (Always-WAIT): If any steps are HIGH risk, gate them in two steps — render first, then ask — per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/per-finding-question.md § Message-first rendering (separate-message rule, render-exists check), with the pre-fire scrub per the same contract's § Single-finding gate, "Scrub before the AUQ fires", using the elements from ${CLAUDE_PLUGIN_ROOT}/skills/_shared/gate-rendering.md § Visual rendering language:
**In one sentence:** stating what is being approved (the higher-risk transformations in this refactor plan, before any edit runs). Then, with a light icon on each heading:
step 1 ▸ step 2 ▸ step 3 …), HIGH-risk steps marked (e.g. ⚠ step 3), so the user sees where the gated steps sit in the run.**Why it matters:** with the consumer count and evidence cite (path:lines); and the expected behavior-preservation check — which test run proves the step changed nothing observable.AskUserQuestion (header "Approve HIGH-risk steps", conventions per gate-rendering.md § Lean-question conventions) and wait for confirmation: approve all HIGH-risk steps, or reject specific steps (rejected steps are skipped in Phase 2; on that pick, run a follow-up multi-select picker over the HIGH-risk steps per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/per-finding-question.md § Multi-select pick loop). One question covers the whole HIGH-risk set; per-step grain lives in approvals[], not in extra questions.Approvals-persistence: before firing, check state.md frontmatter approvals[] for prior entries with category: refactor_high_step matching the current step. Use prior picked if found. On user pick, append one entry per HIGH-risk step the pick covers via atomic_state_write — per-step grain unchanged even though one question covers the set. The persisted-approvals render surfaces these on resume.
If all steps are LOW/MEDIUM: present the plan summary in chat and proceed (no AUQ).
state.md transitions: plan → apply once approval complete. ## Plan body section with full plan; ## Persisted approvals rendered from approvals[].
state.md phase: apply. The orchestrator executes the approved plan, one step at a time, with per-step validation. The zero-behavior-change guarantee is enforced via the per-step regression test pass.
On Phase 2 entry, single load-custom-instructions(MODE: refresh, scope: refactor + global + code-style — pipeline tier, 3 files) call. Phase 3 inherits the Phase 2 refresh (no code-writing in Phase 3).
The orchestrator executes the approved plan inline, one step at a time — no subagent spawn. Sequential per-step refactoring needs continuous state across steps, which a spawned subagent loses; running inline preserves state continuity and halves test runs via the per-step regression-skip predicate.
Reference: ${CLAUDE_PLUGIN_ROOT}/skills/_shared/refactor-patterns.md Phase 3 — full Step Execution Protocol + Blocked Step Protocol + skip-predicate rules. The orchestrator applies this verbatim inline.
Pre-loop setup:
## Plan steps (skipping any HIGH steps the user rejected in the Phase 1 §1.6 approval gate).${CLAUDE_PLUGIN_ROOT}/skills/_shared/load-custom-instructions.md). Use it inline when applying transformations. Skip when loader echoed No code-style.md found — skipping.<test_cmd_affected> from CLAUDE.md's Essential Commands (per-step gate; falls back to <test_cmd> if undefined); <test_cmd> for final regression.pwd && git branch --show-current once at entry; abort if either differs from baseline.Per-step loop (orchestrator runs sequentially for each pending step):
For each step N in ## Plan steps where status: pending:
refactor-patterns.md Phase 3 Step 2):last_post_check == unset|REVERTED, OR external edits intervenedlast_post_check == PASS (no edits intervene between sequential transformations — the previous step's post-check already validated the same baseline)source "${CLAUDE_PLUGIN_ROOT}/hooks/backpressure.sh" && run_silent "Pre-check step <N>" "<test_cmd_affected>". On fail: stop and report (broken baseline).files_affected).source "${CLAUDE_PLUGIN_ROOT}/hooks/backpressure.sh" && run_silent "Post-check step <N>" "<test_cmd_affected>". Persist result to state.md ## Plan steps row as last_post_check: PASS|FAIL (atomic_state_write).status: complete, attempts: <N>, last_post_check: PASS. Continue to next step.Blocked Step Protocol (orchestrator-inline per refactor-patterns.md):
<test_cmd_affected>.old_string/new_string reversal or re-reads file and rewrites to pre-step content), mark status: blocked, attempts: 3, last_post_check: REVERTED, append blocked-rationale row to state.md. Continue to next step (NOT stop session).State.md ## Plan steps body schema captures per-step status (per refactor-patterns.md Phase 2 schema): step / smell / impact / risk / consumers / transformation / before / after / test_strategy / files_affected / rollback / status / attempts / last_post_check. Orchestrator updates the row after each step via atomic_state_write.
Model tier note: the orchestrator's session tier runs the loop. HIGH-risk plan steps don't need separate model tiering — orchestrator is already on the highest tier; per-step reasoning runs at orchestrator-grade quality throughout.
After execution returns, count BLOCKED-to-executed ratio (post-user-rejection denominator: approved plan steps minus user-rejected HIGH-risk steps). If ≥30% BLOCKED: stop and escalate in two steps per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/per-finding-question.md § Message-first rendering — render the run outcome to a chat message first (**In one sentence:** opener + a blocked-steps mini-table: step · what blocked it · retries used), then fire the lean AskUserQuestion header "Stuck":
/geniro:implement separately for blocked items. state.md → phase: verify with ## Accepted Blocks body section.git restore --source=HEAD -- <each path from git diff --name-only> (per §Git Constraint; with user confirmation). state.md → phase: reverted (terminal).phase: verify.Do NOT proceed to Phase 3 automatically when this cap triggers. state.md marks phase: apply-escalated with timestamp + blocked-ratio + blocked-steps list before AUQ; transitions per user pick. The open-question render surfaces this on resume.
After execution returns (or after user pick if fired), run the full test suite once (regression gate) and attach the captured run as an Evidence Block per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/evidence-standard.md. Reasoning-from-the-diff is forbidden — the captured run is the only proof the zero-behavior-change guarantee held.
If regression failed: render the regression outcome to a chat message first (which tests broke, baseline→after delta) per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/per-finding-question.md § Message-first rendering, then fire the lean AUQ "Regression" — "Revert all changes" / "Show me the diff first" / "Keep changes for debugging". Default: Revert. On "Revert", git restore --source=HEAD -- <each path from git diff --name-only> (per §Git Constraint) after explicit user confirmation. state.md → phase: reverted (terminal).
If green: state.md transitions to phase: verify. ## Apply Summary body section captures executed / blocked / final-suite status.
L2 emit on retry exit. When Phase 2 exits AND blocked_count ≥ 2 (≥2 plan steps reported BLOCKED per orchestrator-inline Blocked Step Protocol, regardless of whether overall ratio triggered escalation), call emit-learning with type=retry_failure_sequence, trust=verified, required ext.{phase: "refactor-apply", attempts: [{round: <step-index>, failure: "<blocked-rationale from state.md ## Plan steps row>"}], resolution}. resolution ∈ {passed, escalated, aborted} — passed when regression green AND <30% blocked; escalated when fired AND user picked "Keep what worked" or "Force-continue"; aborted on reverted/aborted state. Sliding-window cap = 3 latest per (producer, scope, phase). Single-blocked-step exits (blocked_count == 1) do NOT emit. Scope = the worktree-relative path of the largest-affected file.
state.md phase: verify. Diff sanity + independent review + completion summary + L2 emit + cleanup. No git push / gh pr create — refactor never ships code, only produces a working-tree diff (deliverable) and a state-file audit trail.
Run git diff --name-only and git diff --stat. Cross-check state.md ## Plan steps rows' files_affected aggregated list against the actual diff — flag mismatches.
If final regression failed AND user picked "Revert all changes", state.md is already phase: reverted — skip to cleanup (no review needed).
Skipped for Trivial and Small per Step 3.
Resolve PRIMARY_ROOT first. Run the Mode A snippet from ${CLAUDE_PLUGIN_ROOT}/skills/_shared/primary-worktree.md via Bash before invoking the custom-reviewer helper — the helper requires the slot in scope to dual-glob local + main-worktree review-extra/ files, and a linked worktree's .geniro/instructions/ is gitignored and may be empty.
For Medium and Big: spawn a fresh reviewer-agent (focus areas — accidental public-API changes / test assertion mutations / invariant drift / new coupling / dead-code removal that had references) PLUS any custom reviewers discovered via ${CLAUDE_PLUGIN_ROOT}/skills/_shared/load-custom-reviewers.md (matched by paths: filter against changed files). All spawns go in ONE parallel batch — same assistant response. The reviewer-agent reads bugs-criteria.md, architecture-criteria.md, tests-criteria.md itself; do NOT pre-read into orchestrator context.
Full spawn template (acceptance criteria, pre-inlined code-style.md, focus areas, criteria-file list, output schema) in ${CLAUDE_PLUGIN_ROOT}/skills/refactor/refactor-reference.md §3.
PRODUCT-DECISION findings → escalate (always wait for the user, every tier):
A PRODUCT-DECISION finding implies multiple valid resolution paths, and refactor guarantees zero behavior change. Picking one is a behavior change, contradicting the zero-behavior-change guarantee. Phase 3 ESCALATES PRODUCT-DECISION to /geniro:implement; does NOT gate-and-fix in-skill.
Gate every PRODUCT-DECISION finding per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/per-finding-question.md § Single-finding gate (header: "Escalate"): render the finding to a chat message first per its § Message-first rendering — the opener, conversational lead, why-it-matters with evidence cite, and visual per § Finding-type visual map — then fire the lean AskUserQuestion. 4 fixed options (ADR-eligibility determines whether 4th option included):
phase: routed (terminal — recovery treats as complete; the decision was handed to /geniro:implement). Without a terminal write here the run would resume re-surfacing an already-resolved escalation.git restore --source=HEAD -- <each path from git diff --name-only> (per §Git Constraint) with user confirmation. state.md → reverted (terminal).verify-summary-only (terminal). The user takes the responsibility of resolving the decision later.model= — inherits the orchestrator's session tier per the canonical model-tiering rule and the table row in the Subagent Model Tiering section) to draft the ADR per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/improvement-routing.md § ADR template; write to docs/adr/NNNN-<slug>.md (next sequential N; create directory if missing, after AskUserQuestion confirmation). state.md → adr-documented (terminal).ADR-eligibility check (before adding 4th option): include the "Document as ADR" option ONLY when the rejected refactor candidate meets all three criteria from improvement-routing.md § ADR target: (1) hard to reverse, (2) surprising without context, (3) result of genuine trade-offs. Examples that qualify: rejecting "split this god-class into 3 modules because the team prefers single-file feature ownership" (the rejection is the durable decision); rejecting "switch from inheritance to composition here because the existing inheritance is load-bearing for the plugin system." Examples that do NOT qualify: rejecting a duplicate-extraction smell because the duplication is intentional (Rule of Three not yet met) — that's a learning, not an ADR. If unsure, omit the ADR option; routing to Knowledge is always safe.
Approvals-persistence: before firing the PRODUCT-DECISION AUQ, check state.md frontmatter approvals[] for a prior entry with category: refactor_product_decision matching the finding (use finding path:lines + decision-type as disambiguator). If found, use prior picked value. If not found, fire AUQ → on user pick, append to approvals[] via atomic_state_write BEFORE executing the chosen action.
Fire one AskUserQuestion per PRODUCT-DECISION finding; chain across findings — never batch multiple findings into a single question.
CRITICAL or HIGH (non-PRODUCT-DECISION) findings → fix loop (max 1 round):
Orchestrator-inline addresses specific findings (Edit per finding); then re-spawn reviewer-agent fresh on the updated diff. After 1 round, if still failing — surface to user via AUQ header "Findings remain" with options: "Escalate to /geniro:implement" / "Document remaining findings and keep the diff as-is" / "Revert all changes". state.md → verify-escalated with timestamp + 1-round fix attempt summary.
MEDIUM findings only → note in completion summary; proceed.
No findings → proceed.
Output the markdown block directly in chat. No persistence to a handoff file — diff IS the deliverable.
## Refactor Complete
### Transformations Applied (N)
- [file:line] — [what changed] — risk: [LOW/MEDIUM/HIGH] — consumers: N
### Blocked Steps (N)
- [file:line] — [what was attempted] — reason: [failure summary]
### Filtered smells (intentional patterns) (N — omit for Trivial/Small; smell-evidence filter not run)
- [smell] — [reason filtered]
### Review Findings (Medium and Big only — omit for Trivial/Small)
- CRITICAL: N, HIGH: M, MEDIUM: K
- Disposition: [proceeded / 1-round fix loop / escalated / ADR documented]
### Validation
- Tests: PASS/FAIL
- Baseline delta: [before→after test count]
### Files Modified: N
- [file path]: [one-line summary]
### Deferred
- [low-priority item deferred, or a HIGH-risk step you declined]
### Next steps
[The diff is in your working tree. Commit it yourself, or run `/geniro:implement` to ship with a review gate.]
At Phase 3 exit:
emit-learning — called by /geniro:refactor for two emit types per canonical contract:discovery — emit when a pattern was extracted to a shared utility/component (typical /geniro:refactor outcome). Required ext.{area, insight} per typed-extension table. Default trust verified.pitfall — emit when the refactor revealed a footgun (a seemingly-safe pattern that actually breaks under specific conditions). Required ext.{trap, mitigation}. Default trust verified.Recorded learning: <summary> to the user, and fire the emit before declaring Phase 3 done — per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/emit-learning.md §"Caller contract". A silent emit trailing the phase's done declaration is the documented drop vector.Offer to capture a recurring pattern as a project rule per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/recurrence-rule-capture.md with LEARNING_NOUN: pattern, the refactor scope routing (discovery pattern extracted → code-style.md; discovery architectural insight → global.md; pitfall refactor-specific footgun → refactor.md; otherwise the user picks), and rejection args "/geniro:refactor" "refactor/<scope>" "promote_pattern_to_rule". The helper reads the just-emitted entry's recurrence_count back (routed to the memory backend under a ## Memory Backend block per its §0) and gates the offer on >= 3.
After Phase 3 completes:
rm -rf .geniro/state/refactor/<slug>/ (cwd-relative — within-skill resume-from-compaction state per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/primary-worktree.md § "Artifacts NOT in scope") for the current branch's slug only, per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/within-skill-state-handoff.md § Cleanup contract — the whole slug dir, so any scratch written under it goes with state.md (nothing there is read after the run, and the migration sweep does not scan .geniro/state/). Useful content already saved (transformations, discoveries) via L2 emit + chat summary. Do NOT delete sibling slugs from concurrent refactor sessions on other branches.Cleanup is best-effort — failed commands silently OK.
T1.5 state.md at .geniro/state/refactor/<slug>/state.md; approvals[] categories refactor_high_step, refactor_product_decision; effort_tier ∈ {Trivial, Small, Medium, Big}. ## Plan steps holds the per-step execution rows (schema at Phase 2 §2.2), distinct from ## Plan which holds the ordered plan summary. No T2 handoff — diff IS the deliverable. Full frontmatter + body-section schema in ${CLAUDE_PLUGIN_ROOT}/skills/refactor/refactor-reference.md §2.
Phase 1 (Plan):
git status, git log, git diff, git branch --show-current, test suite invocation for baseline).codebase-research-agent for wide cross-file locator queries during smell detection (§1.4). smell detection + smell evidence otherwise run orchestrator-inline.git commit, git push, gh pr create.Phase 2 (Apply):
git add, git commit, git push, gh pr create, branch switching.Phase 3 (Verify):
git diff --name-only, git diff --stat, test cmd for re-runs) / Edit (fix-loop-scoped — the §3.3 1-round CRITICAL/HIGH non-PRODUCT-DECISION fix applies findings inline).git restore --source=HEAD -- <each changed path> — an orchestration-level revert exception to the git-write constraint; list the specific changed paths, never a bare ./* (see § Git Constraint).git commit, git push, gh pr create.All reviewer / custom reviewer spawns are pure read-only: tool whitelist via agents/reviewer-agent.md frontmatter (Read / Grep / Glob / Bash for read-only checks).
Existing safety layer applies across ALL phases: file-protection hook, git-guardrail hook, .geniro/ deletion guard. Runtime denies stay enforced.
Do NOT run git add, git commit, or git push. The orchestrating workflow handles version control. Exception: revert a failed transformation in Phase 2 / Phase 3 with a targeted git restore --source=HEAD -- <each changed path>, listing only the specific paths the step touched — this is an orchestration-level revert, not a version-control operation. NEVER use a bare . or * pathspec (git checkout -- . / git restore .): the git-guardrail hook blocks the mass-discard form because it would wipe every uncommitted change, including work outside the current step.
| Your reasoning | Why it's wrong |
|---|---|
| "This smell is too small to fix" | If the plan says fix it, fix it. Small smells compound. |
| "I'll batch multiple transformations" | One atomic transformation at a time. Always. The per-step regression gate exists to catch behavior drift on the smallest possible unit. |
| "Tests are passing so I'll skip the blocked step protocol" | The protocol exists for the NEXT failure. Follow it — Phase 2 §2.2 Blocked Step Protocol applies to ALL transformations regardless of prior-step success. |
| "This refactoring needs a behavior change" | Then it's not a refactoring. Use /geniro:implement instead. The zero-behavior-change guarantee is non-negotiable. |
| "This duplication needs a new shared helper" | Run the Existing Abstraction Audit first per ${CLAUDE_PLUGIN_ROOT}/skills/_shared/existing-abstraction-audit.md. If a utility / service / hook already exists nearby that could absorb this duplication via a small extension, prefer extending it. Only create a new shared helper when no analogue exists OR when extending the existing one would require adding a parameter or conditional that complicates it (Rule of Three). |
| "All detected smells are real issues" | Generic smell categories flag intentional repo patterns. Without filtering against THIS repo's conventions via Phase 1 §1.5 smell evidence + KEEP/FILTER synthesis matrix, you'll refactor code that was designed that way on purpose. |
| "I'll spawn agents one at a time" | All parallel agents MUST be spawned in ONE response — multiple Agent calls in the same assistant turn. Separate turns = no concurrency, full wall-clock latency per agent. |
| "I noticed a bug mid-refactor, I'll fix it" | That's feature work. Note it for /geniro:implement and stay in refactor scope. The zero-behavior-change guarantee applies even when the in-scope behavior is buggy. |
"I'll hardcode model='sonnet' at the reviewer-agent spawn site to cap cost — the user might not realize Opus is expensive" | Forbidden. Plugin subagents inherit the orchestrator tier per the canonical rule in ${CLAUDE_PLUGIN_ROOT}/skills/_shared/model-tiering.md. The user chose Opus at session start with full knowledge of cost; overriding back to sonnet is paternalistic and produces tier-mismatch UX. If the user wants cheaper review, they switch orchestrator tier — that is the canonical knob. |
"Reviewer flagged a [PRODUCT-DECISION] finding — I'll route it through the fix loop like any other CRITICAL/HIGH" | A [PRODUCT-DECISION] finding has multiple valid resolution paths by definition — picking one is a behavior change, which contradicts refactor's zero-behavior-change guarantee. Phase 3 §3.3 disposition logic ESCALATES PRODUCT-DECISION to /geniro:implement (always-WAIT) — never gates-and-fixes them in-skill. If you find yourself orchestrator-inline editing for a PRODUCT-DECISION finding, that's the rationalization. Stop and route the escalation. |
| "Add a wall-time kill cap so long-running refactor sessions abort cleanly." | Hard kill caps abort legitimate complex refactors mid-stride. The skill is quality-first — no hard kill caps. ≥30% blocked gate + PRODUCT-DECISION + 1-round fix-loop gate all escalate to user via AUQ. User has agency. |
| "Auto-promote a recorded discovery into a project rule when refactor completes." | Phase 3 §3.5 offers to capture it via /geniro:instructions create and only when the same pattern has recurred (recurrence_count >= 3) — do NOT auto-write the rule. The user authors and curates project rules; auto-promotion creates noise + drift. |
"The revert step needs git checkout -- . / git restore ., but the guard blocks it — I'll bypass the hook or run git stash." | Use the targeted form § Git Constraint allows — git restore --source=HEAD -- <each changed path>, listing only the paths the step touched — never the bare ./* pathspec the guard blocks, and never a bypass or git stash. If some other guardrail blocks legitimate refactor work, the path is .geniro/safety.json allow_patterns, not --no-verify. |
| "PRODUCT-DECISION 4-option AUQ is paternalistic — collapse to 2 options (run /geniro:implement / accept-as-is)." | Phase 3 §3.3 is explicit: 4 fixed options when ADR-eligible (3 otherwise). The ADR path captures rejection rationale durably; the Revert path is a user-controlled safety net. Collapsing removes meaningful agency. |
| "Trivial tier should still run a quick reviewer-pass — what if a smell slipped through?" | Trivial is by definition 1-2 files, mechanical, single module, unambiguous. The diff-sanity check in Phase 3 §3.1 + the baseline regression in Phase 2 §2.4 catch behavioral drift. Running a full reviewer-agent batch for a 5-line rename wastes tokens. Tier behavior is intentional. |
Use TodoWrite to expose per-phase progress. At skill start, create phase-level todos: Plan, Apply, Verify. During Phase 2, add dynamic per-step todos derived from the approved plan. Mark in_progress → completed as phases run. At most ONE todo is in_progress at a time.
These are the load-bearing exit gates and safety invariants — the checks that, if skipped, break the zero-behavior-change guarantee or the no-ship boundary. Per-phase mechanics (tier classification, smell detection, plan building) live in their phase sections; this is the final correctness/contract check, not a re-listing of every step.
discovery or pitfall type + required ext.* fields; rule-capture offer fired when recurrence_count >= 3 (after dedupe check), decline logged via emit-rejection.shgit commit / git push / gh pr create — diff stays uncommitted (user or /geniro:implement ships)