Autopilot

Autopilot: autonomous feature flow

Deprecated. Superseded by workbench:pilot, which replaces both autopilot and copilot with one orchestrator and composable human gates. This copy is archived and no longer maintained. The project profile is now .workbench/pilot.md (rename your .workbench/autopilot.md).

You are running the workbench autopilot workflow. The user has opted into autonomous mode: make your own recommendations, do not pause for confirmation on routine choices, only stop if the topic is too large for a single spec (then decompose and ask which sub-topic to tackle first).

Bootstrap

First action: find .workbench/autopilot.md in the current repo root.

If the file is missing: stop. Tell the user that autopilot requires a project profile at .workbench/autopilot.md, and surface the example file at references/example-project-profile.md as a starting point. The full profile format is documented in references/profile-schema.md. Do not attempt to detect a missing profile.

If the file exists:

1. Read ## PR behavior and apply: Mode (default stop_at_green), Base branch (default = repo default branch), Squash (default yes), Hooks (each optional).
2. Read ## Required skills if present; merge replaces and additional rows into the universal table from references/required-skills.md.
3. For other project information (default branch, task runner, doc paths, project rules), resolve in this order, per field:
   • Profile heading.
   • Session context (CLAUDE.md, AGENTS.md, both already loaded into the agent).
   • Git or filesystem detection (git symbolic-ref refs/remotes/origin/HEAD, presence of mise.toml / Makefile / package.json, existence of docs/superpowers/specs etc.).
   • Ask the user. Never guess.

A field that no source provides and the active step needs stops the workflow with a question.

Task List Discipline

Autopilot maintains a visible task list for the whole run and keeps it current. This is part of the workflow contract, not optional reporting.

• Create the task list immediately after bootstrap and before step 0. Use one top-level item per autopilot step, plus one item for the skill audit.
• Use the runtime's task-list primitive. Claude Code: TodoWrite. Codex: update_plan.
• Keep exactly one item in_progress while work is active. Mark an item completed as soon as its step finishes.
• Expand the task list dynamically when new work becomes known. After step 4 writes the implementation plan, add each implementation checkbox as a task-list item nested by naming convention, for example Step 5: <plan task>.
• Add discovered follow-up tasks when hooks, audits, CI failures, or docs updates create real work. Do not add speculative items.
• Before dispatching a subagent, mark the owned task in progress or add a concrete task-list item for that agent's assignment. When the subagent returns, update that item based on its result.
• Keep the task list aligned with the committed or scratch plan. If the plan changes, update the task list in the same turn before executing the changed work.
• In the end-of-turn summary, mention any task-list item that remains incomplete and why.

Deviation Log

Autonomy means deciding without pausing, not deciding without a trace. Keep a per-run deviation log so the user can see afterward where the run departed from the spec, plan, or profile.

• Start the log fresh at the beginning of every run: mkdir -p /tmp/<project-name>-autopilot && rm -f /tmp/<project-name>-autopilot/deviations.md.
• When you hit a decision point the plan, spec, or profile did not specify, or where reality contradicts them (an API that does not behave as the spec assumed, a missing file, a wrong test command), decide per the fork rule in Tone and reporting, then append one entry before continuing: the step you were in, what was unspecified or wrong, what you decided, and one line of reasoning.
• Log every departure from the committed plan: a task executed differently than written, a task skipped, or a task added. Also log any deviation a subagent reports in its return (a DONE_WITH_CONCERNS status or a deviations block).
• Do not log routine choices the plan anticipated (variable names, commit wording). The log records forks, not noise.
• The log lives in scratch and is never committed.

Non-negotiables

See references/invariants.md for the full list. Summary:

1. PR behavior respects Mode. Default never auto-merges.
2. Never skip hooks (--no-verify, --no-gpg-sign, LEFTHOOK=0).
3. No AI attribution in commits, PRs, or code.
4. Conventional Commits compliance.
5. No em-dashes or en-dashes in prose.
6. Never synthesize a skill's output freehand.

Required skill invocations

Read references/required-skills.md for the full table and replaces / additional semantics. The pre-PR audit (after step 6, before step 7) walks the merged table.

If a listed skill is unavailable in the current runtime, say so explicitly in the end-of-turn summary and skip only that entry. Never silently drop a row.

Runtime adapters

This skill uses Claude Code tool names by default. If running on Codex, see references/codex-adapter.md for the tool-name mapping and the sequential fallback note for subagent-driven-development. For Claude Code specifics (subagent dispatch patterns, CI polling shape, error recovery), see references/claude-code-adapter.md.

Steps

Step 0: Establish skill discipline

First action: invoke workbench:using-workbench via the Skill tool. Nothing else happens until the skill returns.

If the profile's ## Required skills table replaces this row with a different skill, invoke that one instead.

Step 1: Prepare the workspace

• git checkout <default branch> && git pull origin <default branch> to get the latest.
• If the local branch diverges from origin (for example after a squash merge), git reset --hard origin/<default branch>. Check with the user first if there are unpushed local commits.
• Create a new branch: git checkout -b <type>/<short-topic-slug>. Use a Conventional-Commits type prefix (feat/..., fix/..., docs/..., etc.).

<default branch> resolves through the bootstrap precedence chain.

Step 2: Brainstorm (sequential, self-answered)

First action: wipe the scratch dir from any prior run, then invoke workbench:brainstorming via the Skill tool. Keep the skill's "one question at a time" rhythm, but self-answer each question instead of waiting for the user; autonomous mode removes the pause, not the sequencing.

rm -rf /tmp/<project-name>-brainstorm && mkdir -p /tmp/<project-name>-brainstorm

<project-name> resolves through the bootstrap precedence chain (profile ## Project name heading; otherwise repo dir basename).

Work the Q&A incrementally:

• Start /tmp/<project-name>-brainstorm/brainstorm.md with a short preamble (topic, autonomous-mode note) before the first question.
• For each question, in order:
  1. Formulate the question you would have asked the user. Make it multiple-choice when possible.
  2. Answer it yourself: list the options you considered, the decision, and the reasoning.
  3. Append the Q&A as ## Q<n>. <question> with the answer below.
  4. Let the answer shape the next question.
• Continue until scope, approach, file layout, commit split, risks, and success criteria are settled.
• End with a ## Decision block summarizing the PR shape.

If the topic is too big for one spec, stop and surface the decomposition for the user to pick a sub-topic.

Format verify gate. Before leaving step 2:

grep -c '^## Q' /tmp/<project-name>-brainstorm/brainstorm.md
grep -c '^## Decision' /tmp/<project-name>-brainstorm/brainstorm.md

The first count must be greater than zero and match the number of questions answered. The second must be exactly 1. If either check fails, the Q&A was written with inline Q1: style instead of top-level ## Q<n> headings; fix the file now. (If the profile defines a post_pr hook that parses brainstorm headings, mis-formatting surfaces only after PR open and forces a mid-PR reformat.)

Step 3: Write the spec

First action: invoke workbench:writing-spec via the Skill tool. (If the profile replaces this row, invoke the replacement.)

Then, following that skill's guidance:

• Use the spec template that workbench:brainstorming surfaced in step 2.
• Path: <paths.specs>/YYYY-MM-DD-<topic>-design.md. <paths.specs> resolves through the bootstrap precedence chain.
• If <paths.specs> is don't commit, write the spec under /tmp/<project-name>-autopilot/ instead and do not commit it.
• The skill runs the self-review subagent and the user approval gate; in autonomous mode self-answer the gate.
• Commit: docs: add <topic> design spec, unless <paths.specs> is don't commit.

If Hooks.post_spec is defined in the profile, run it now with {{spec_path}} substituted to the spec path.

Step 4: Write the implementation plan

First action: invoke workbench:writing-plans via the Skill tool. (If the profile replaces this row, invoke the replacement.)

Then:

• Path: <paths.plans>/YYYY-MM-DD-<topic>.md.
• If <paths.plans> is don't commit, write the plan under /tmp/<project-name>-autopilot/ instead and do not commit it.
• Use checkbox syntax (- [ ]) per task step so progress is trackable.
• Commit: docs: add <topic> implementation plan, unless <paths.plans> is don't commit.

If Hooks.post_plan is defined, run it now with {{plan_path}} substituted.

Step 5: Execute the plan

First actions, in order: invoke workbench:test-driven-development, then deprecated:dispatching-parallel-agents, then workbench:subagent-driven-development. All three via the Skill tool. (Replace any of them if the profile says so.) TDD governs every implementation chunk, dispatching-parallel-agents governs safe fanout, and subagent-driven-development governs how chunks run.

Subagent dispatch (Claude Code): see references/claude-code-adapter.md for the full pattern. Summary:

• Independent tasks (no shared files, no ordering dependency): multiple Agent calls in one message.
• Shared-state tasks: one agent at a time, sequential.
• Trivial polish (rename one symbol, one-line lint fix): main session if files are already loaded; otherwise a subagent.

Subagent dispatch (Codex): see references/codex-adapter.md. Use Codex's task or subagent equivalent if installed; else execute tasks sequentially in the main session with explicit context-reset discipline.

Each subagent prompt must include: the plan task it owns (paste the checkbox block), which files to touch, the relevant commits that preceded it, the acceptance criteria.

Project-specific rebuild discipline. When the profile's ## Project-specific rules requires a rebuild or regen step before tests (for example "rebuild PyO3 binding before pytest"), include that step in the subagent's prompt as an explicit acceptance criterion. Otherwise the subagent observes phantom errors from stale artifacts.

Then:

• Commit in logical chunks with Conventional Commits scopes matching the module.
• Run <task runner> <lint command> and the relevant <task runner> <test command> before each commit.

If Hooks.post_implementation is defined, run it now after the last implementation commit.

Step 6: Finalize docs and improvement pass

First actions, in order:

1. Invoke agent-system-management:capturing-session-learnings via the Skill tool in the main session. This skill reads the conversation transcript, so it must run inline in the orchestrator. Pass inline-prompt A below. Wait for it to return and verify its commits exist on the feature branch via git log before proceeding.
2. After session-capture has returned and its commits have landed, dispatch agent-system-management:improving-instructions to a general-purpose subagent (Claude Code: Agent tool, general-purpose subagent_type, no model override. Codex: equivalent general-purpose subagent.) Pass inline-prompt B below. The improver does a cold audit and does not need session context; running it in a subagent keeps the orchestrator's context lean.

Either skill can be replaced via the profile.

Inline-prompt A (orchestrator pastes into the session-capture Skill invocation):

"You are running inside workbench autopilot in the main orchestrator session, on the feature branch in the current working directory. Skip the approval prompt at the end of your skill. After deciding what to change, apply the edits directly. Commit each logical change on the feature branch with a Conventional Commits message. Report back: every file you edited and a one-line summary per file."

Inline-prompt B (orchestrator pastes into the improver subagent dispatch):

"You are running inside workbench autopilot as a subagent, on the feature branch in the current working directory. Invoke agent-system-management:improving-instructions via the Skill tool. Skip the approval prompt at the end of the skill. After deciding what to change, apply the edits directly. Commit each logical change on the feature branch with a Conventional Commits message (docs(agents-md): ...). Report back: every file you edited, a one-line summary per file, and the commit hashes you created."

All edits land on the feature branch in this run. AGENTS.md, CLAUDE.md, *.local.md, user-global agent-instruction files, ADRs, OPEN_THINGS updates: each one a commit on the current branch with a matching Conventional Commits type. No follow-up chore PRs.

After the subagent returns, the orchestrator:

1. Reads the subagent's summary.
2. Verifies the commits exist via git log <feature-branch> --oneline.
3. Includes both skills' summaries in the end-of-turn report.

Then, the orchestrator updates the following inline (it does not delegate to a subagent), committing each as a separate Conventional Commits entry on the feature branch:

• Update <paths.adr>/NNNN-<short-title>.md for load-bearing decisions if the path exists in the project. Index in <paths.adr>/README.md.
• Update <paths.open_things> if it exists: remove resolved items, add follow-ups ordered by importance.

Skill audit (between step 6 and step 7, blocking)

First action: invoke workbench:verification-before-completion via the Skill tool. This governs the audit, push, and PR readiness claim.

Re-read references/required-skills.md and the profile's ## Required skills section. Walk every row in the merged table:

1. For each universal row, confirm the corresponding skill was invoked via the Skill tool this session. If the profile replaces a row, audit the replacement instead.
2. For each additional row from the profile, confirm that skill was also invoked.
3. Re-read the profile's ## Project-specific rules section. If any rule names a skill or command that should have been invoked, confirm it was.
4. Re-read the project's CLAUDE.md and AGENTS.md. If either documents skill discipline naming a specific skill at a specific point, confirm that was invoked.

If any required invocation is missing: invoke the skill now, let it reshape the artifact it governs, commit the correction, and only then proceed.

The audit is blocking; do not push until it passes.

Step 7: Open the PR

After the audit passes:

• Push: git push -u <git remote, default origin> <branch>. If the project documents a wrapper (for example mise exec -- for pinned hooks), use it.
• Create the PR: gh pr create --base <base branch> --title "<Conventional-Commits title>" --body "<body>".
• PR body structure: ## Summary (1-3 bullets), then scope or non-goals if relevant, ## Test plan checklist, links to spec + plan + ADR if present.

If Hooks.post_pr is defined, run it now with {{pr}} substituted to the PR number.

Step 8: CI loop

Poll until every check resolves. Use the runtime adapter's polling primitive (Claude Code: Monitor; Codex: run_in_background plus sleep, or Codex's equivalent).

Programmatic poll:

gh pr view <pr> --json statusCheckRollup -q '.statusCheckRollup[] | "\(.status):\(.conclusion // "")"'

Loop until no row's status differs from COMPLETED and no conclusion is FAILURE, CANCELLED, or TIMED_OUT. (gh pr checks <pr> is human-readable; do not pass --json to it, the flag does not exist on gh pr checks.)

If a check fails: gh run view <run-id> --log-failed | tail -200, diagnose, commit the fix, push. Repeat until green.

If Hooks.post_ci_green is defined, run it now once everything is green.

Step 9: Apply PR-behavior policy

Branch on Mode from the profile.

stop_at_green (default):

• Report the PR URL in the end-of-turn summary.
• Stop. Do not merge.

automerge:

1. Set automerge:

   gh pr merge <pr> --auto --squash
   

   Use --squash if Squash: yes (default), --merge if Squash: no.

2. Poll for merge:

   gh pr view <pr> --json state -q .state
   

   Until it returns MERGED. If it returns CLOSED without merging, branch protection blocked the merge; surface the reason to the user instead of retrying.

3. Refresh local default branch:

   git checkout <default branch>
   git pull origin <default branch>
   git branch -d <feature-branch>
   

   The lowercase -d refuses to delete an unmerged branch; if it fails, inspect before forcing.

4. Report the merged commit hash and PR URL in the end-of-turn summary.

request_review:

• gh pr ready <pr>.
• Post a one-line reviewer note as a PR comment.
• Stop. Report the PR URL.

If the user explicitly says "don't merge" before or during the run, override automerge to request_review for this run only; do not modify the profile.

Tone and reporting

• Terse between tool calls. The user sees the PR diff; they don't need narration.
• End-of-turn summary: PR URL, one sentence on what changed, next step (usually "review when ready" or, for automerge, "merged at "). Also list any required skill that was unavailable in the runtime and therefore skipped. Also list every deviation-log entry, one line each, or state that there were no deviations; a deviation that changed user-visible behavior also belongs in the PR body's ## Summary.
• If you hit an unexpected fork in the road that truly needs the user (not a routine choice), stop and ask. But bias strongly toward deciding yourself; that is the point of autopilot.