Plan and Execute a Dineway Website Clone
Convert every clone request into a durable, validated agent protocol before implementation. The
planning turn resolves scope and writes the agent. The goal follows that agent until every hard
gate is proven.
First generate a clone-specific agent file from
references/clone-agent-template.md, replace every placeholder with request- and source-specific
evidence, validate it with scripts/validate_clone_agent.py, and only then hand execution to a
goal. A regular chat plan, task list, update_plan call, or OUTPUT_PLAN.md is not a substitute for
the durable clone agent.
Default Workflow
Use this workflow silently; do not ask the user to choose a template:
- Explore: understand the explicit URLs, requested customizations, repository, and target root.
- Plan: perform read-only URL discovery and resolve the route, artifact, content, and change-budget scope.
- Agent: generate and validate
clone-agents/<slug>/agent-<slug>.md from the bundled template.
- Refine: apply requested changes only to the generated agent before execution.
- Execute: after explicit post-plan confirmation, create a goal that follows the generated
agent and implements until all gates pass.
Append exactly one of these progress lines at the end of every user-facing Agent or Refine phase
message, translated when useful. Keep it as the final line; do not omit it while awaiting execution
confirmation:
✓ Explore ● Plan ○ Agent ○ Refine ○ Execute
✓ Explore ✓ Plan ● Agent ○ Refine ○ Execute
✓ Explore ✓ Plan ✓ Agent ● Refine ○ Execute
✓ Explore ✓ Plan ✓ Agent ✓ Refine ● Execute
Step 1: Load Required Guidance
Read these before generating the agent:
references/clone-agent-template.md in full. It is the normative execution contract and retains
the original clone workflow plus Dineway adaptations and failure gates.
$dineway-brainstorming for request, scope, and change-budget decisions. Use the
source-fidelity-preserving recommendation when it is safe; ask only when the choice truly needs
user authority or would materially change scope.
$dineway-building-site for current Dineway boundaries that affect the agent.
The generated agent must itself retain the template's required use of:
$dineway-brainstorming
$dineway-frontend-design in source-fidelity mode
$dineway-planning-with-files
$dineway-building-site
## Commit and PR Discipline
Do not apply $dineway-frontend-design creatively during planning. The source site, not an
invented theme, is the visual authority.
Step 2: Resolve the Clone Brief
Extract a dual-layer clone brief from the request and project evidence.
User and source layer
Record:
- Original request and explicit HTTP(S) URLs
- Target identity/origin and approved Dineway Site root
- Requested customizations or exclusions
- Expected fidelity and user-visible done criteria
- Explicitly out-of-scope backend/private behavior
Engineering and verification layer
Record:
- Astro SSR and Dineway content/runtime boundaries
- Existing routes, user-owned files, schema, seed, assets, and collision risks
- Public source data surfaces: document/hydration payloads, JSON-LD, REST or GraphQL read requests,
response entities, field shapes, identifiers, relationships, filtering, ordering, and pagination
- A browser-produced, complete per-page visible-content snapshot covering text, media, links,
navigation, and repeated items before any audit/model artifact is derived
- A source-to-Dineway field map that preserves source semantics and uses camelCase canonical Dineway
CMS field names/labels plus explicit lower_snake_case
storageSlug values required internally by
the current schema runtime and the exact public runtimeReadPath
- Browser, build, seed, type, admin, route, interaction, and visual-diff verification
- Exact failure thresholds and evidence artifacts
- System impact and protected existing behavior
Change budget
Create an explicit allowlist of approved differences. Everything else remains source-locked.
- A renamed brand does not permit a new palette, layout, information architecture, content section,
type scale, interaction, or responsive behavior unless separately approved.
- An excluded banner removes that banner and its occupied space only; it does not justify redesigning
the header or surrounding sections.
- Rewritten editorial content may change only the approved text/media while preserving measured
geometry unless the user explicitly approved a structural change.
Do not invent high-risk requirements. Keep unresolved material questions visible and ask only when
the source evidence plus a safe recommendation cannot resolve them.
Step 3: Perform Read-Only Scope Discovery
Browser automation is mandatory. Before writing the agent:
- Normalize and open every explicit URL.
- Preserve meaningful explicit query/fragment states.
- Collect rendered same-origin anchors from each explicit page only.
- Normalize discovered targets by pathname and remove query/fragment.
- Exclude search, pagination, authentication, admin, non-HTML, downloads,
mailto:, tel:,
javascript:, and cross-origin targets unless explicitly supplied.
- Do not discover links from discovered pages.
- Inspect each planned page's public, browser-visible data layer: HTML and script hydration payloads,
JSON-LD, XHR/fetch requests, and public REST or GraphQL reads. Record endpoint, method, parameters,
pagination/filter/sort behavior, response entity, field name, observed type/nullability, identifiers,
relationships/cardinality, media shape, locale/status behavior, and the UI region consuming it.
First capture every visible text/media/link/repeated item directly from the fully rendered browser
into
SOURCE_DOCUMENT_SNAPSHOT.json; never synthesize that snapshot from the later audit.
- Sample anonymous public read operations only. Do not reuse an existing browser login. Never bypass
authentication, replay mutations, submit forms, expose tokens/cookies, probe private endpoints,
or retain secrets, personal/account data, or private PII. If a required source is not anonymous,
record an evidence gap and request separate explicit authorization rather than sampling it.
- Record each URL's origin, explicit/discovered status, explicit parent, destination route or route
family, collection/entry mapping, keys, artifact paths, and collisions.
This pass establishes executable scope. Full screenshots, interaction sweeps, computed styles,
content extraction, and asset downloads remain part of goal execution. During execution, capture
every source master screenshot with scripts/capture-source-screenshots.mjs; it must scroll through
the rendered page, wait for image decode and stable document height, capture viewport tiles, and
invoke scripts/stitch-browser-screenshots.py before the screenshot becomes evidence.
Step 4: Resolve the Agent Path
Create a concise 2-5 word kebab-case slug using lowercase letters, numbers, and hyphens only, with
no leading/trailing hyphen and at most 50 characters.
Write the agent under the approved site root:
clone-agents/<slug>/agent-<slug>.md
If that path exists, append -2, -3, and so on. Do not overwrite an existing agent.
Step 5: Generate the Durable Clone Agent
Copy references/clone-agent-template.md into the new agent file and replace every double-brace
placeholder with concrete evidence. Preserve the template's order and every normative section.
Requirements:
- Do not replace the execution contract with “follow
$dineway-building-clone” or links to docs.
- Do not summarize, omit, rename, or reorder its reconnaissance, Dineway foundation,
extract/spec/dispatch/merge, assembly, QA, checklist, anti-pattern, or completion sections.
- Keep the route/artifact plan concrete and exhaustive; one generic route-family bullet is not a
substitute for per-URL rows.
- Fill
## Source Data Layer Audit and ## Dineway CMS Content Model with concrete source evidence.
Every visible source-backed entity and field must have a source/API location, Dineway owner,
canonical camelCase CMS field name/label, runtime storageSlug when it becomes a collection field,
exact runtimeReadPath, Dineway type,
required/nullability rule, relationship/cardinality, media ownership, and seed/render consumer.
- Preserve source field semantics rather than copying an endpoint response wholesale or inventing a
frontend-only content shape. Record unknown or inaccessible fields as evidence gaps.
- Inventory every public record with a stable record ID and ordered field tuple. Generate exact
source-record-to-seed JSON Pointer bindings; distinct-value membership is not record closure.
- Fill both
### Source Record Inventory and ### Source Record Binding Plan with deterministic,
duplicate-preserving rows that match the later JSON artifacts byte-for-value.
- Use only strict anonymous read operations, resolve every response entity and evidence path, reject
signed URLs/private account data, and keep the agent tables aligned with the execution JSON artifacts.
- Follow the real Dineway runtime contract: custom storage slugs are lower_snake_case, settings media
uses an imported live
{ mediaId, alt } reference, collection media uses $media, and observed
many-valued relationships use a link collection rather than an unsupported multi-reference field.
- Require bidirectional closure: every source field/record maps into Dineway and every clone-owned
custom seed field, data key, and mapped-owner entry maps back to source evidence.
- Require
SETTINGS_MEDIA_PROOF.json with normalized read-only media/settings GET results for every
settings media mapping, followed by fresh live GET verification; never accept a ULID or prose
attestation alone and never persist authentication material.
- Require
SOURCE_DOCUMENT_SNAPSHOT.json to be a fresh browser-produced visible DOM inventory and
require RUNTIME_CONTENT_PROOF.json to prove every mapped editable field drives its declared SSR
selector through a reversible local Dineway edit/read/render/restore check.
- Require source and comparison master screenshots to use
capture-source-screenshots.mjs at exact
viewports. Reject a capture unless its adjacent .capture.json reports decoded rendered images,
zero failedImages, stable final document height, DPR 1 tile dimensions, and a stitched output
matching that final height.
- Run the artifact closure gate in
--phase foundation before component dispatch, then require a
caller-trusted local clone URL and occurrence-level RUNTIME_CONTENT_PROOF.json in
--phase completion after the reversible sentinel checks.
- Require query helpers to be imported from Dineway, content reads to apply the returned
cacheHint,
localized mappings to match bound seed locales, and every routable entry to resolve to a planned
destination plus an executable exact or dynamic Astro route.
- Keep approved customizations in the change budget rather than silently changing the execution
contract.
- Preserve
## Required Skills, ## Commit and PR Discipline, and every hard failure gate verbatim
except for resolved placeholders. Put repository-specific commands inside the
{{ENGINEERING_CONSTRAINTS}} placeholder rather than altering the normative contract.
- Use the user's language for request-specific prose. Keep commands, paths, field names, thresholds,
and normative identifiers exact.
- Do not write implementation code during this phase.
The agent file is a durable execution protocol, not the live checklist. Goal execution stores
mutable state under .plan/<slug>/ through $dineway-planning-with-files.
Step 6: Validate Before Goal Handoff
Run:
python3 <skill-root>/scripts/validate_clone_agent.py clone-agents/<slug>/agent-<slug>.md
The validator must prove:
- No unresolved template placeholder remains
- Required skills and commit discipline remain present
- Every original clone phase and Dineway requirement remains present
- Public data-layer evidence, CMS entity mapping, and camelCase/storage-slug naming contracts remain
present
- Structured
SOURCE_DOCUMENT_SNAPSHOT.json, FIELD_MAPPING.json, and SETTINGS_MEDIA_PROOF.json
contracts plus their bidirectional source/seed/runtime validator remain present
- Foundation and completion validation remain separate so runtime proof is mandatory at completion
without blocking the foundation build that produces the runnable clone
- Record-level source tuples, exact seed bindings, reference/media validity, and agent/artifact
alignment remain mandatory
- Every hard gate and visual threshold remains present
- Image-complete tiled source capture and its stitch/readiness metadata remain mandatory
- At least one explicit HTTP(S) URL and a concrete route/artifact plan are present
If validation fails, modify only the agent file and run the validator again. Never create a goal
for an invalid agent.
Step 7: Refine or Execute
If the user requested only a plan, report that the agent is ready and allow free-form refinement.
During refinement, modify only the generated agent file and revalidate after every change.
After every new or refined agent validates, report that it is ready and wait for explicit
post-plan confirmation to execute. The initial clone/build request authorizes planning and agent
generation, but is not a substitute for this confirmation. A clear response such as “execute”,
“start”, or “implement this agent” authorizes goal creation.
After that confirmation, create a goal with this objective:
Follow clone-agents/<slug>/agent-<slug>.md and implement. Preserve source fidelity, choose the
source-faithful recommended decision whenever safe, do not ask unless permissions, destructive or
external side effects, or a genuinely high-risk unresolved choice require it, and continue until
every hard failure gate is proven green.
After goal creation, stop the planning flow and let the goal execute the agent. Do not also begin
implementation in the same planning turn. If the user has not confirmed execution, do not create a
goal and do not start implementation.
If the goal tool is unavailable, return the exact fallback prompt above for the user to run. Do
not silently fall back to an untracked implementation.
Plan-Phase Completion Report
Before handoff, report:
- Outcome first: the validated agent is ready for review/refinement or explicit Execute confirmation
- Explicit and one-hop discovered URL counts
- Target root and route families
- Audited public source data surfaces and mapped Dineway content types/fields
- Approved change budget and protected invariants
- Required skills preserved
- Commit/PR discipline preserved
- Agent path and validation result as supporting detail, not the primary next step
- Awaiting explicit Execute confirmation, goal handoff, or fallback prompt
Never describe the website clone itself as complete during the plan phase.
1---2name: dineway-building-clone3description: Plan and execute pixel-faithful, CMS-backed Dineway website clones from one or more explicit URLs. First generates and validates a durable clone-specific agent plan containing the full reconnaissance, one-hop discovery, public source data-layer/API audit, field-aligned Dineway content modeling, component specification, focused builder, route assembly, visual QA, and hard-gate workflow; then hands execution to a Codex goal. Use whenever the user asks to clone, replicate, rebuild, reverse-engineer, copy, or migrate a website into Dineway or Astro.4---56# Plan and Execute a Dineway Website Clone78Convert every clone request into a durable, validated agent protocol before implementation. The9planning turn resolves scope and writes the agent. The goal follows that agent until every hard10gate is proven.1112<HARD-GATE>13Do not write site implementation code, scaffold a Dineway Site, download implementation assets,14edit seed/schema, dispatch builders, or begin visual construction from this skill directly.1516First generate a clone-specific agent file from17`references/clone-agent-template.md`, replace every placeholder with request- and source-specific18evidence, validate it with `scripts/validate_clone_agent.py`, and only then hand execution to a19goal. A regular chat plan, task list, `update_plan` call, or `OUTPUT_PLAN.md` is not a substitute for20the durable clone agent.21</HARD-GATE>2223## Default Workflow2425Use this workflow silently; do not ask the user to choose a template:26271. **Explore:** understand the explicit URLs, requested customizations, repository, and target root.282. **Plan:** perform read-only URL discovery and resolve the route, artifact, content, and change-budget scope.293. **Agent:** generate and validate `clone-agents/<slug>/agent-<slug>.md` from the bundled template.304. **Refine:** apply requested changes only to the generated agent before execution.315. **Execute:** after explicit post-plan confirmation, create a goal that follows the generated32 agent and implements until all gates pass.3334Append exactly one of these progress lines at the end of every user-facing Agent or Refine phase35message, translated when useful. Keep it as the final line; do not omit it while awaiting execution36confirmation:3738```text39✓ Explore ● Plan ○ Agent ○ Refine ○ Execute40✓ Explore ✓ Plan ● Agent ○ Refine ○ Execute41✓ Explore ✓ Plan ✓ Agent ● Refine ○ Execute42✓ Explore ✓ Plan ✓ Agent ✓ Refine ● Execute43```4445## Step 1: Load Required Guidance4647Read these before generating the agent:48491. `references/clone-agent-template.md` in full. It is the normative execution contract and retains50 the original clone workflow plus Dineway adaptations and failure gates.512. `$dineway-brainstorming` for request, scope, and change-budget decisions. Use the52 source-fidelity-preserving recommendation when it is safe; ask only when the choice truly needs53 user authority or would materially change scope.543. `$dineway-building-site` for current Dineway boundaries that affect the agent.5556The generated agent must itself retain the template's required use of:5758- `$dineway-brainstorming`59- `$dineway-frontend-design` in source-fidelity mode60- `$dineway-planning-with-files`61- `$dineway-building-site`62- `## Commit and PR Discipline`6364Do not apply `$dineway-frontend-design` creatively during planning. The source site, not an65invented theme, is the visual authority.6667## Step 2: Resolve the Clone Brief6869Extract a dual-layer clone brief from the request and project evidence.7071### User and source layer7273Record:7475- Original request and explicit HTTP(S) URLs76- Target identity/origin and approved Dineway Site root77- Requested customizations or exclusions78- Expected fidelity and user-visible done criteria79- Explicitly out-of-scope backend/private behavior8081### Engineering and verification layer8283Record:8485- Astro SSR and Dineway content/runtime boundaries86- Existing routes, user-owned files, schema, seed, assets, and collision risks87- Public source data surfaces: document/hydration payloads, JSON-LD, REST or GraphQL read requests,88 response entities, field shapes, identifiers, relationships, filtering, ordering, and pagination89- A browser-produced, complete per-page visible-content snapshot covering text, media, links,90 navigation, and repeated items before any audit/model artifact is derived91- A source-to-Dineway field map that preserves source semantics and uses camelCase canonical Dineway92 CMS field names/labels plus explicit lower_snake_case `storageSlug` values required internally by93 the current schema runtime and the exact public `runtimeReadPath`94- Browser, build, seed, type, admin, route, interaction, and visual-diff verification95- Exact failure thresholds and evidence artifacts96- System impact and protected existing behavior9798### Change budget99100Create an explicit allowlist of approved differences. Everything else remains source-locked.101102- A renamed brand does not permit a new palette, layout, information architecture, content section,103 type scale, interaction, or responsive behavior unless separately approved.104- An excluded banner removes that banner and its occupied space only; it does not justify redesigning105 the header or surrounding sections.106- Rewritten editorial content may change only the approved text/media while preserving measured107 geometry unless the user explicitly approved a structural change.108109Do not invent high-risk requirements. Keep unresolved material questions visible and ask only when110the source evidence plus a safe recommendation cannot resolve them.111112## Step 3: Perform Read-Only Scope Discovery113114Browser automation is mandatory. Before writing the agent:1151161. Normalize and open every explicit URL.1172. Preserve meaningful explicit query/fragment states.1183. Collect rendered same-origin anchors from each explicit page only.1194. Normalize discovered targets by pathname and remove query/fragment.1205. Exclude search, pagination, authentication, admin, non-HTML, downloads, `mailto:`, `tel:`,121 `javascript:`, and cross-origin targets unless explicitly supplied.1226. Do not discover links from discovered pages.1237. Inspect each planned page's public, browser-visible data layer: HTML and script hydration payloads,124 JSON-LD, XHR/fetch requests, and public REST or GraphQL reads. Record endpoint, method, parameters,125 pagination/filter/sort behavior, response entity, field name, observed type/nullability, identifiers,126 relationships/cardinality, media shape, locale/status behavior, and the UI region consuming it.127 First capture every visible text/media/link/repeated item directly from the fully rendered browser128 into `SOURCE_DOCUMENT_SNAPSHOT.json`; never synthesize that snapshot from the later audit.1298. Sample anonymous public read operations only. Do not reuse an existing browser login. Never bypass130 authentication, replay mutations, submit forms, expose tokens/cookies, probe private endpoints,131 or retain secrets, personal/account data, or private PII. If a required source is not anonymous,132 record an evidence gap and request separate explicit authorization rather than sampling it.1339. Record each URL's origin, explicit/discovered status, explicit parent, destination route or route134 family, collection/entry mapping, keys, artifact paths, and collisions.135136This pass establishes executable scope. Full screenshots, interaction sweeps, computed styles,137content extraction, and asset downloads remain part of goal execution. During execution, capture138every source master screenshot with `scripts/capture-source-screenshots.mjs`; it must scroll through139the rendered page, wait for image decode and stable document height, capture viewport tiles, and140invoke `scripts/stitch-browser-screenshots.py` before the screenshot becomes evidence.141142## Step 4: Resolve the Agent Path143144Create a concise 2-5 word kebab-case slug using lowercase letters, numbers, and hyphens only, with145no leading/trailing hyphen and at most 50 characters.146147Write the agent under the approved site root:148149```text150clone-agents/<slug>/agent-<slug>.md151```152153If that path exists, append `-2`, `-3`, and so on. Do not overwrite an existing agent.154155## Step 5: Generate the Durable Clone Agent156157Copy `references/clone-agent-template.md` into the new agent file and replace every double-brace158placeholder with concrete evidence. Preserve the template's order and every normative section.159160Requirements:161162- Do not replace the execution contract with “follow `$dineway-building-clone`” or links to docs.163- Do not summarize, omit, rename, or reorder its reconnaissance, Dineway foundation,164 extract/spec/dispatch/merge, assembly, QA, checklist, anti-pattern, or completion sections.165- Keep the route/artifact plan concrete and exhaustive; one generic route-family bullet is not a166 substitute for per-URL rows.167- Fill `## Source Data Layer Audit` and `## Dineway CMS Content Model` with concrete source evidence.168 Every visible source-backed entity and field must have a source/API location, Dineway owner,169 canonical camelCase CMS field name/label, runtime `storageSlug` when it becomes a collection field,170 exact `runtimeReadPath`, Dineway type,171 required/nullability rule, relationship/cardinality, media ownership, and seed/render consumer.172- Preserve source field semantics rather than copying an endpoint response wholesale or inventing a173 frontend-only content shape. Record unknown or inaccessible fields as evidence gaps.174- Inventory every public record with a stable record ID and ordered field tuple. Generate exact175 source-record-to-seed JSON Pointer bindings; distinct-value membership is not record closure.176- Fill both `### Source Record Inventory` and `### Source Record Binding Plan` with deterministic,177 duplicate-preserving rows that match the later JSON artifacts byte-for-value.178- Use only strict anonymous read operations, resolve every response entity and evidence path, reject179 signed URLs/private account data, and keep the agent tables aligned with the execution JSON artifacts.180- Follow the real Dineway runtime contract: custom storage slugs are lower_snake_case, settings media181 uses an imported live `{ mediaId, alt }` reference, collection media uses `$media`, and observed182 many-valued relationships use a link collection rather than an unsupported multi-reference field.183- Require bidirectional closure: every source field/record maps into Dineway and every clone-owned184 custom seed field, data key, and mapped-owner entry maps back to source evidence.185- Require `SETTINGS_MEDIA_PROOF.json` with normalized read-only media/settings GET results for every186 settings media mapping, followed by fresh live GET verification; never accept a ULID or prose187 attestation alone and never persist authentication material.188- Require `SOURCE_DOCUMENT_SNAPSHOT.json` to be a fresh browser-produced visible DOM inventory and189 require `RUNTIME_CONTENT_PROOF.json` to prove every mapped editable field drives its declared SSR190 selector through a reversible local Dineway edit/read/render/restore check.191- Require source and comparison master screenshots to use `capture-source-screenshots.mjs` at exact192 viewports. Reject a capture unless its adjacent `.capture.json` reports decoded rendered images,193 zero `failedImages`, stable final document height, DPR 1 tile dimensions, and a stitched output194 matching that final height.195- Run the artifact closure gate in `--phase foundation` before component dispatch, then require a196 caller-trusted local clone URL and occurrence-level `RUNTIME_CONTENT_PROOF.json` in197 `--phase completion` after the reversible sentinel checks.198- Require query helpers to be imported from Dineway, content reads to apply the returned `cacheHint`,199 localized mappings to match bound seed locales, and every routable entry to resolve to a planned200 destination plus an executable exact or dynamic Astro route.201- Keep approved customizations in the change budget rather than silently changing the execution202 contract.203- Preserve `## Required Skills`, `## Commit and PR Discipline`, and every hard failure gate verbatim204 except for resolved placeholders. Put repository-specific commands inside the205 `{{ENGINEERING_CONSTRAINTS}}` placeholder rather than altering the normative contract.206- Use the user's language for request-specific prose. Keep commands, paths, field names, thresholds,207 and normative identifiers exact.208- Do not write implementation code during this phase.209210The agent file is a durable execution protocol, not the live checklist. Goal execution stores211mutable state under `.plan/<slug>/` through `$dineway-planning-with-files`.212213## Step 6: Validate Before Goal Handoff214215Run:216217```bash218python3 <skill-root>/scripts/validate_clone_agent.py clone-agents/<slug>/agent-<slug>.md219```220221The validator must prove:222223- No unresolved template placeholder remains224- Required skills and commit discipline remain present225- Every original clone phase and Dineway requirement remains present226- Public data-layer evidence, CMS entity mapping, and camelCase/storage-slug naming contracts remain227 present228- Structured `SOURCE_DOCUMENT_SNAPSHOT.json`, `FIELD_MAPPING.json`, and `SETTINGS_MEDIA_PROOF.json`229 contracts plus their bidirectional source/seed/runtime validator remain present230- Foundation and completion validation remain separate so runtime proof is mandatory at completion231 without blocking the foundation build that produces the runnable clone232- Record-level source tuples, exact seed bindings, reference/media validity, and agent/artifact233 alignment remain mandatory234- Every hard gate and visual threshold remains present235- Image-complete tiled source capture and its stitch/readiness metadata remain mandatory236- At least one explicit HTTP(S) URL and a concrete route/artifact plan are present237238If validation fails, modify only the agent file and run the validator again. Never create a goal239for an invalid agent.240241## Step 7: Refine or Execute242243If the user requested only a plan, report that the agent is ready and allow free-form refinement.244During refinement, modify only the generated agent file and revalidate after every change.245246After every new or refined agent validates, report that it is ready and wait for explicit247post-plan confirmation to execute. The initial clone/build request authorizes planning and agent248generation, but is not a substitute for this confirmation. A clear response such as “execute”,249“start”, or “implement this agent” authorizes goal creation.250251After that confirmation, create a goal with this objective:252253```text254Follow clone-agents/<slug>/agent-<slug>.md and implement. Preserve source fidelity, choose the255source-faithful recommended decision whenever safe, do not ask unless permissions, destructive or256external side effects, or a genuinely high-risk unresolved choice require it, and continue until257every hard failure gate is proven green.258```259260After goal creation, stop the planning flow and let the goal execute the agent. Do not also begin261implementation in the same planning turn. If the user has not confirmed execution, do not create a262goal and do not start implementation.263264If the goal tool is unavailable, return the exact fallback prompt above for the user to run. Do265not silently fall back to an untracked implementation.266267## Plan-Phase Completion Report268269Before handoff, report:270271- Outcome first: the validated agent is ready for review/refinement or explicit Execute confirmation272- Explicit and one-hop discovered URL counts273- Target root and route families274- Audited public source data surfaces and mapped Dineway content types/fields275- Approved change budget and protected invariants276- Required skills preserved277- Commit/PR discipline preserved278- Agent path and validation result as supporting detail, not the primary next step279- Awaiting explicit Execute confirmation, goal handoff, or fallback prompt280281Never describe the website clone itself as complete during the plan phase.