How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

opsx-meta-import-command - Prompt

Name: opsx-meta-import-command
Author: revoluxe-ai

Prompt file imported from revoluxe-ai/adv-bot (.cursor/commands/opsx-meta-import-command.md). Fill in {{arguments}} before use. Copyright stays with the author.

TARGET OVERRIDE — HIGHEST PRIORITY

Contract: OPSX-WB-META-IMPORT-01
Runtime class: ACTIVE
Precedence: This override wins for target paths, write boundary, and bans.

Target authority paths (local)

Commands / rules / pipeline: .cursor/commands/**, .cursor/rules/**, .cursor/pipeline/**
OpenSpec process: openspec/policies/**, openspec/schemas/**
OPSX shared / registry / adapters docs: .opsx/shared/**, .opsx/registry/**, .opsx/adapters/**
Staging only: .opsx/runs/inbound/**
Frozen upstream (read): .opsx/upstream/** — do not overwrite by default

Hard target bans

Do not install dependencies / modify package.json or lockfile.
Do not access production / Kubernetes / secrets.
Do not push, open PR, rebase, force, or deploy.
Do not import foreign product dumps: openspec/changes/**, openspec/archive/**, product openspec/decisions/** content, src/**, public/**, .env*.
Do not activate WB/product domain assumptions from a donor without Owner KEEP and target remapping (default disposition SKIP_DOMAIN).
Do not blind-replace .opsx/upstream/** (central_update_policy: NEVER_OVERWRITE in .opsx/manifest.yaml) unless Owner explicit KEEP=upstream-refresh + flag.
Never PASS-by-absence; missing donor path → FAIL_CLOSED.

Projectization / bootstrap gate

If .opsx/ is absent (empty / foreign repo with no OPSX tree):

STATUS: FAIL_CLOSED
REASON: OPSX_BOOTSTRAP_REQUIRED
NEXT_COMMAND: /opsx-meta-bootstrap

Else read .opsx/projectization.yaml before any write. If status != COMPLETE or normal_commands_enabled is false:

STATUS: FAIL_CLOSED
REASON: OPSX_PROJECTIZATION_REQUIRED
NEXT_COMMAND: /opsx-projectize

/opsx-meta-import-command

Sole active command import owner. Default source is the central catalog index; explicit raw repo/archive donors remain supported as fallback.

IMPLEMENTATION_STATUS: IMPLEMENTED
RUNTIME_STATUS: ACTIVE
CONTRACT_ID: OPSX-WB-META-IMPORT-01
PRODUCT_WRITER: NO
UPSTREAM_OVERWRITE_DEFAULT: NO
DEFAULT_SCOPE: one primary command (+ demonstrated companions only)

Shared: .opsx/shared/command-discovery.md

Purpose

Find / compare / Owner-select / materialize one coherent command packet into this project while preserving TARGET OVERRIDE, adapter gates, lock, activation, and provenance.

Source modes

INDEX_DEFAULT   query=<id|alias|purpose> | OCCURRENCE=<id> | ADOPTION_PACKET=<path>
RAW_DONOR       source=<repo-path|archive> [surfaces=...]

When to use

Direct “find and import this command” from central index.
Handoff from /opsx-meta-discover, design, or fix (ADOPTION_PACKET).
Raw donor path/archive not yet indexed (source=).

When not to use

No .opsx/ / empty-repo first contact → /opsx-meta-bootstrap
Surfaces staged but lock not COMPLETE → /opsx-projectize
Adapter/capability refresh only → /opsx-adapt-project
Change delta specs → main specs → /opsx-sync
Local command-contract wording defect → /opsx-meta-fix-command-defects
Cheap command-plane “where next?” → /opsx-meta
Unsure which meta command → /opsx-meta-consult
Product / game feature work → /opsx-explore and product lifecycle
Blind refresh of frozen .opsx/upstream/** (default forbidden)

Authority boundary

Default mode is READ_ONLY (compare + advise). Writes only on exact GO with a usable DIFF_PACKET and non-empty approved KEEP.
Does not own product OpenSpec changes/decisions/archive.
Does not re-open projectization lock or replace /opsx-projectize:GO.
Does not own adapter capability invention (handoff to adapt-project after merge).
Does not commit (handoff /opsx-meta-commit).
Decision owner for KEEP / SKIP / CONFLICT resolution: Owner.

User input

{{arguments}}

Parameters

Token	Required	Meaning
`query=` / `OCCURRENCE=` / `ADOPTION_PACKET=`	INDEX_DEFAULT	Resolve candidate from fresh catalog index (preferred)
`source=<path>`	RAW_DONOR	Absolute or repo-relative donor checkout or extracted archive root
`surfaces=`	no	Comma list; default `commands,rules,pipeline,openspec-process,opsx-shared`
`packet=<path>`	GO	Path to prior `DIFF_PACKET.md` under `.opsx/runs/inbound/` (or chat-attached equivalent)
`KEEP=<ids>`	GO	Comma list of row ids / command ids / relative paths from the packet to merge
`GO`	APPLY	Exact apply token

Empty invoke without index selector and without source= / clear donor → BLOCKED_NEEDS_EVIDENCE (ask once for query= / OCCURRENCE= / source=).

Modes

Input	Mode	Writes
no `GO`	`READ_ONLY`	staging under `.opsx/runs/inbound/<UTC>/` allowed for DIFF_PACKET / ADOPTION_PACKET only
exact `GO` + packet + KEEP	`APPLY`	approved process files + MERGE_RECEIPT + lock/activation/provenance as needed
`GO` without packet or KEEP	`FAIL_CLOSED`	none

Surfaces compared (default)

Donor vs local, when present:

Surface key	Paths (relative to donor / local root)
`commands`	`.cursor/commands/opsx-*.md`
`rules`	`.cursor/rules/**` (opsx / architecture / documentation / process)
`pipeline`	`.cursor/pipeline/**`
`openspec-process`	`openspec/policies/`, `openspec/schemas/`
`opsx-shared`	`.opsx/shared/**`

Never compared for merge (hard reject on GO): donor openspec/changes/**, openspec/archive/**, product decision dumps, src/**, public/**, secrets.

Classification (every delta row)

Kind	Meaning
`NEW_COMMAND`	Donor has `opsx-*` command id local lacks
`UPDATED_COMMAND`	Same command id; body/version/hash differs
`STRUCTURE_DELTA`	Schema/policy/pipeline layout differs
`LOCAL_ONLY`	Local has; donor lacks (informational)
`SKIP_DOMAIN`	WB / Poetry / kubectl / foreign product assumptions without target adapter
`CONFLICT`	Both evolved; default keep local until Owner picks

Advice dispositions (mandatory on each actionable row)

Disposition	Meaning
`USEFUL_CANDIDATE`	Likely helps this WB Sky / Poetry target after remapping
`SKIP_DOMAIN`	Harmful or wrong domain; do not merge
`SKIP_DUPLICATE`	Already covered locally
`CONFLICT_LOCAL_WINS_DEFAULT`	Diverged; keep local unless Owner KEEP
`CONFLICT_NEEDS_OWNER`	Owner must choose before GO
`STRUCTURE_DELTA`	Layout/policy change; evaluate separately

Steps — READ_ONLY (INDEX_DEFAULT)

Projectization gate (read). If not COMPLETE → FAIL_CLOSED.
Read .opsx/shared/command-discovery.md freshness rules. Resolve index via .opsx/sources.yaml / .opsx/lock.yaml. If index STALE/MISSING and no Owner LOCAL_ONLY_CONFIRMED → BLOCKED_NEEDS_FRESH_INDEX → NEXT_ACTION: /opsx-meta-update-index.
Resolve candidate from ADOPTION_PACKET= (preferred handoff), else OCCURRENCE=, else query= against by-command / by-hash / by-repo views.
Materialize a bounded compare of the selected occurrence (and listed companions) vs local — do not merge. Write staging .opsx/runs/inbound/<UTC>/ with SOURCE.txt, ADOPTION_PACKET.md (echo), and DIFF_PACKET.md.
Emit output contract. Owner must approve KEEP before GO.

Steps — READ_ONLY (RAW_DONOR fallback)

Projectization gate (read). If not COMPLETE → FAIL_CLOSED.
Resolve source=. If missing → BLOCKED_NEEDS_EVIDENCE.
Confirm donor root looks like OPSX (at least one of: .cursor/commands, openspec/policies, .opsx). Else FAIL_CLOSED REASON: NOT_OPSX_SURFACE.
Create staging dir .opsx/runs/inbound/<UTC>/ and write SOURCE.txt (resolved path + optional git short SHA if .git present — best effort).
Inventory donor vs local for selected surfaces= (filename / id inventory first; content hash or bounded section compare for UPDATED rows). Follow .cursor/commands/opsx-execution-preflight.md I/O budgets: Grep-first; parallel Read max 2; no full dump of every command body unless needed for a CONFLICT/UPDATED row.
Classify each row; fill USEFUL / SKIP / CONFLICT advice with one-line why.
Write DIFF_PACKET.md into the staging dir (required durable artifact).
Emit output contract. Do not merge. Do not touch live process files beyond the staging packet.

Steps — APPLY (`GO`)

Projectization gate again.
Require exact token GO.
Load packet= (or newest .opsx/runs/inbound/*/DIFF_PACKET.md only if unambiguous in this chat). Missing → FAIL_CLOSED.
Require non-empty KEEP= (ids from packet). Empty KEEP → FAIL_CLOSED.
Validate every KEEP target is inside the write boundary. Any forbidden path → FAIL_CLOSED, no writes.
For each KEEP item:
- NEW_COMMAND: create .cursor/commands/<name>.md as target-native: TARGET OVERRIDE header + remapped body (strip WB/Poetry/kubectl execution into UNAVAILABLE / FAIL_CLOSED; do not invent adapters).
- UPDATED_COMMAND: merge donor improvements into local file preserving existing TARGET OVERRIDE / local_modification_note / contract_id unless Owner KEEP explicitly replaces them.
- STRUCTURE / shared / policy: copy or merge only listed relative paths; never wipe local product specs.
Update .opsx/registry/command_activation.ndjson and provenance row for newly installed commands. Update .opsx/lock.yaml stub entries when the adopted command is lock-tracked.
Write MERGE_RECEIPT.md under the same staging dir.
Emit output contract with STATUS: MERGE_APPLIED.
Suggest next: /opsx-adapt-project if activation/gates may need refresh; then /opsx-meta-commit for process commits. Do not commit here. Do not run snapshot/index update (separate owners).

Merge safety rules

Preserve local TARGET OVERRIDE — HIGHEST PRIORITY blocks.
Default disposition for domain foreign content: SKIP_DOMAIN.
Never overwrite .opsx/upstream/** unless Owner KEEP includes explicit upstream-refresh flag documented in the packet.
Never write openspec/changes/**, openspec/archive/**, or product openspec/decisions/** from donor.
Do not run /opsx-projectize:GO as part of this command.
Partial failure mid-KEEP → stop; report applied vs skipped; do not pretend full success.

Output contract (every run)

STATUS:
MODE: READ_ONLY | APPLY
WHAT_HAPPENED:
WHY:
SOURCE:
STAGING_DIR:
DIFF_SUMMARY:
USEFUL_CANDIDATES:
SKIP:
CONFLICTS:
KEEP_APPLIED: none | <list>
OWNER_DECISION_REQUIRED:
NEXT_ACTION:
DO_NOT_DO_YET:
ORIENTATION_HINT:
  LANE: COMMAND
  STATUS: <same as STATUS>
  NEXT_META: /opsx-meta
  NEXT_ACTION: <same as NEXT_ACTION>

Meta: /opsx / /opsx-meta. See .opsx/shared/meta-orientation.md.

STATUS values

DIFF_PACKET_READY
MERGE_APPLIED
BLOCKED_NEEDS_EVIDENCE
BLOCKED_NEEDS_FRESH_INDEX
FAIL_CLOSED

Field meaning

DIFF_SUMMARY — counts by kind (NEW / UPDATED / STRUCTURE / LOCAL_ONLY / …)
USEFUL_CANDIDATES — short table: id → why useful on this target
SKIP — id → why not
CONFLICTS — id → what Owner must choose
KEEP_APPLIED — only in APPLY; list of merged ids
NEXT_ACTION — one pasteable line (e.g. GO with KEEP, or adapt-project, or commit)

DIFF_PACKET.md minimum sections

# DIFF_PACKET
UTC:
SOURCE:
LOCAL_HEAD: (best effort)
SURFACES:

## Rows
| id | kind | disposition | donor_path | local_path | why |

## Recommended KEEP (suggestion only)
- …

## Forbidden (hard)
- …

Human workflow tokens

WHAT_HAPPENED: …
WHY: …
CURRENT_STATE: DIFF_PACKET_READY | MERGE_APPLIED | …
OWNER_DECISION_REQUIRED: approve KEEP set | none
NEXT_ACTION: …
DO_NOT_DO_YET: …

Failure / recovery

Condition	STATUS	Recovery
`.opsx/` absent	FAIL_CLOSED	`/opsx-meta-bootstrap`
projectization not COMPLETE	FAIL_CLOSED	`/opsx-projectize`
missing query/occurrence/source	BLOCKED_NEEDS_EVIDENCE	provide `query=` / `OCCURRENCE=` / `source=`
stale/missing index	BLOCKED_NEEDS_FRESH_INDEX	`/opsx-meta-update-index`
not an OPSX tree	FAIL_CLOSED	fix path / extract archive
GO without packet/KEEP	FAIL_CLOSED	re-run compare; pass KEEP
KEEP hits forbidden path	FAIL_CLOSED	narrow KEEP
post-merge contract awkward	MERGE_APPLIED + note	`/opsx-meta-fix-command-defects`

Regression checks (implementer / operator)

READ_ONLY never writes outside .opsx/runs/inbound/**
GO without KEEP fails closed
Cannot write product changes/decisions/src
TARGET OVERRIDE preserved on UPDATED merges
Default does not touch .opsx/upstream/**
consult routes foreign-OPSX / central-reuse questions here
INDEX_DEFAULT preferred; RAW_DONOR only as fallback
APPLY updates activation + lock stub; never snapshot/index

Install opsx-meta-import-command and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

# TARGET OVERRIDE — HIGHEST PRIORITY **Contract:** `OPSX-WB-META-IMPORT-01` **Runtime class:** `ACTIVE` **Precedence:** This override wins for target paths, write boundary, and bans. ### Target authority paths (local) - Commands / rules / pipeline: `.cursor/commands/**`, `.cursor/rules/**`, `.cursor/pipeline/**` - OpenSpec process: `openspec/policies/**`, `openspec/schemas/**` - OPSX shared / registry / adapters docs: `.opsx/shared/**`, `.opsx/registry/**`, `.opsx/adapters/**` - Staging only: `.opsx/runs/inbound/**` - Frozen upstream (read): `.opsx/upstream/**` — **do not overwrite by default** ### Hard target bans - Do not install dependencies / modify `package.json` or lockfile. - Do not access production / Kubernetes / secrets. - Do not push, open PR, rebase, force, or deploy. - Do not import foreign **product** dumps: `openspec/changes/**`, `openspec/archive/**`, product `openspec/decisions/**` content, `src/**`, `public/**`, `.env*`. - Do not activate WB/product domain assumptions from a donor without Owner KEEP **and** target remapping (default disposition `SKIP_DOMAIN`). - Do not blind-replace `.opsx/upstream/**` (`central_update_policy: NEVER_OVERWRITE` in `.opsx/manifest.yaml`) unless Owner explicit `KEEP=upstream-refresh` + flag. - Never PASS-by-absence; missing donor path → `FAIL_CLOSED`. ### Projectization / bootstrap gate 1. If `.opsx/` is absent (empty / foreign repo with no OPSX tree): ```text STATUS: FAIL_CLOSED REASON: OPSX_BOOTSTRAP_REQUIRED NEXT_COMMAND: /opsx-meta-bootstrap ``` 2. Else read `.opsx/projectization.yaml` before any write. If `status` != `COMPLETE` or `normal_commands_enabled` is false: ```text STATUS: FAIL_CLOSED REASON: OPSX_PROJECTIZATION_REQUIRED NEXT_COMMAND: /opsx-projectize ``` --- # /opsx-meta-import-command Sole active **command import** owner. Default source is the central catalog index; explicit raw repo/archive donors remain supported as fallback. ```text IMPLEMENTATION_STATUS: IMPLEMENTED RUNTIME_STATUS: ACTIVE CONTRACT_ID: OPSX-WB-META-IMPORT-01 PRODUCT_WRITER: NO UPSTREAM_OVERWRITE_DEFAULT: NO DEFAULT_SCOPE: one primary command (+ demonstrated companions only) ``` Shared: `.opsx/shared/command-discovery.md` ## Purpose Find / compare / Owner-select / materialize one coherent command packet into this project while preserving TARGET OVERRIDE, adapter gates, lock, activation, and provenance. ## Source modes ```text INDEX_DEFAULT query=<id|alias|purpose> | OCCURRENCE=<id> | ADOPTION_PACKET=<path> RAW_DONOR source=<repo-path|archive> [surfaces=...] ``` ## When to use - Direct “find and import this command” from central index. - Handoff from `/opsx-meta-discover`, design, or fix (`ADOPTION_PACKET`). - Raw donor path/archive not yet indexed (`source=`). ## When not to use - No `.opsx/` / empty-repo first contact → `/opsx-meta-bootstrap` - Surfaces staged but lock not COMPLETE → `/opsx-projectize` - Adapter/capability refresh only → `/opsx-adapt-project` - Change delta specs → main specs → `/opsx-sync` - Local command-contract wording defect → `/opsx-meta-fix-command-defects` - Cheap command-plane “where next?” → `/opsx-meta` - Unsure which meta command → `/opsx-meta-consult` - Product / game feature work → `/opsx-explore` and product lifecycle - Blind refresh of frozen `.opsx/upstream/**` (default forbidden) ## Authority boundary - Default mode is **READ_ONLY** (compare + advise). Writes only on exact `GO` with a usable `DIFF_PACKET` and non-empty approved `KEEP`. - Does **not** own product OpenSpec changes/decisions/archive. - Does **not** re-open projectization lock or replace `/opsx-projectize:GO`. - Does **not** own adapter capability invention (handoff to adapt-project after merge). - Does **not** commit (handoff `/opsx-meta-commit`). - Decision owner for KEEP / SKIP / CONFLICT resolution: **Owner**. ## User input ```text {{arguments}} ``` ### Parameters | Token | Required | Meaning | |---|---|---| | `query=` / `OCCURRENCE=` / `ADOPTION_PACKET=` | INDEX_DEFAULT | Resolve candidate from fresh catalog index (preferred) | | `source=<path>` | RAW_DONOR | Absolute or repo-relative donor checkout **or** extracted archive root | | `surfaces=` | no | Comma list; default `commands,rules,pipeline,openspec-process,opsx-shared` | | `packet=<path>` | GO | Path to prior `DIFF_PACKET.md` under `.opsx/runs/inbound/` (or chat-attached equivalent) | | `KEEP=<ids>` | GO | Comma list of row ids / command ids / relative paths from the packet to merge | | `GO` | APPLY | Exact apply token | Empty invoke without index selector and without `source=` / clear donor → `BLOCKED_NEEDS_EVIDENCE` (ask once for `query=` / `OCCURRENCE=` / `source=`). ## Modes | Input | Mode | Writes | |---|---|---| | no `GO` | `READ_ONLY` | staging under `.opsx/runs/inbound/<UTC>/` allowed for DIFF_PACKET / ADOPTION_PACKET only | | exact `GO` + packet + KEEP | `APPLY` | approved process files + MERGE_RECEIPT + lock/activation/provenance as needed | | `GO` without packet or KEEP | `FAIL_CLOSED` | none | ## Surfaces compared (default) Donor vs local, when present: | Surface key | Paths (relative to donor / local root) | |---|---| | `commands` | `.cursor/commands/opsx-*.md` | | `rules` | `.cursor/rules/**` (opsx / architecture / documentation / process) | | `pipeline` | `.cursor/pipeline/**` | | `openspec-process` | `openspec/policies/**`, `openspec/schemas/**` | | `opsx-shared` | `.opsx/shared/**` | **Never compared for merge (hard reject on GO):** donor `openspec/changes/**`, `openspec/archive/**`, product decision dumps, `src/**`, `public/**`, secrets. ## Classification (every delta row) | Kind | Meaning | |---|---| | `NEW_COMMAND` | Donor has `opsx-*` command id local lacks | | `UPDATED_COMMAND` | Same command id; body/version/hash differs | | `STRUCTURE_DELTA` | Schema/policy/pipeline layout differs | | `LOCAL_ONLY` | Local has; donor lacks (informational) | | `SKIP_DOMAIN` | WB / Poetry / kubectl / foreign product assumptions without target adapter | | `CONFLICT` | Both evolved; default keep local until Owner picks | ### Advice dispositions (mandatory on each actionable row) | Disposition | Meaning | |---|---| | `USEFUL_CANDIDATE` | Likely helps this WB Sky / Poetry target after remapping | | `SKIP_DOMAIN` | Harmful or wrong domain; do not merge | | `SKIP_DUPLICATE` | Already covered locally | | `CONFLICT_LOCAL_WINS_DEFAULT` | Diverged; keep local unless Owner KEEP | | `CONFLICT_NEEDS_OWNER` | Owner must choose before GO | | `STRUCTURE_DELTA` | Layout/policy change; evaluate separately | ## Steps — READ_ONLY (INDEX_DEFAULT) 1. Projectization gate (read). If not COMPLETE → `FAIL_CLOSED`. 2. Read `.opsx/shared/command-discovery.md` freshness rules. Resolve index via `.opsx/sources.yaml` / `.opsx/lock.yaml`. If index STALE/MISSING and no Owner `LOCAL_ONLY_CONFIRMED` → `BLOCKED_NEEDS_FRESH_INDEX` → `NEXT_ACTION: /opsx-meta-update-index`. 3. Resolve candidate from `ADOPTION_PACKET=` (preferred handoff), else `OCCURRENCE=`, else `query=` against by-command / by-hash / by-repo views. 4. Materialize a bounded compare of the selected occurrence (and listed companions) vs local — do **not** merge. Write staging `.opsx/runs/inbound/<UTC>/` with `SOURCE.txt`, `ADOPTION_PACKET.md` (echo), and `DIFF_PACKET.md`. 5. Emit output contract. Owner must approve KEEP before GO. ## Steps — READ_ONLY (RAW_DONOR fallback) 1. Projectization gate (read). If not COMPLETE → `FAIL_CLOSED`. 2. Resolve `source=`. If missing → `BLOCKED_NEEDS_EVIDENCE`. 3. Confirm donor root looks like OPSX (at least one of: `.cursor/commands`, `openspec/policies`, `.opsx`). Else `FAIL_CLOSED` `REASON: NOT_OPSX_SURFACE`. 4. Create staging dir `.opsx/runs/inbound/<UTC>/` and write `SOURCE.txt` (resolved path + optional git short SHA if `.git` present — best effort). 5. Inventory donor vs local for selected `surfaces=` (filename / id inventory first; content hash or bounded section compare for UPDATED rows). Follow `.cursor/commands/opsx-execution-preflight.md` I/O budgets: Grep-first; parallel Read max 2; no full dump of every command body unless needed for a CONFLICT/UPDATED row. 6. Classify each row; fill USEFUL / SKIP / CONFLICT advice with one-line why. 7. Write `DIFF_PACKET.md` into the staging dir (required durable artifact). 8. Emit output contract. Do **not** merge. Do **not** touch live process files beyond the staging packet. ## Steps — APPLY (`GO`) 1. Projectization gate again. 2. Require exact token `GO`. 3. Load `packet=` (or newest `.opsx/runs/inbound/*/DIFF_PACKET.md` only if unambiguous in this chat). Missing → `FAIL_CLOSED`. 4. Require non-empty `KEEP=` (ids from packet). Empty KEEP → `FAIL_CLOSED`. 5. Validate every KEEP target is inside the write boundary. Any forbidden path → `FAIL_CLOSED`, no writes. 6. For each KEEP item: - **NEW_COMMAND:** create `.cursor/commands/<name>.md` as target-native: TARGET OVERRIDE header + remapped body (strip WB/Poetry/kubectl execution into UNAVAILABLE / FAIL_CLOSED; do not invent adapters). - **UPDATED_COMMAND:** merge donor improvements into local file **preserving** existing TARGET OVERRIDE / `local_modification_note` / contract_id unless Owner KEEP explicitly replaces them. - **STRUCTURE / shared / policy:** copy or merge only listed relative paths; never wipe local product specs. 7. Update `.opsx/registry/command_activation.ndjson` and provenance row for newly installed commands. Update `.opsx/lock.yaml` stub entries when the adopted command is lock-tracked. 8. Write `MERGE_RECEIPT.md` under the same staging dir. 9. Emit output contract with `STATUS: MERGE_APPLIED`. 10. Suggest next: `/opsx-adapt-project` if activation/gates may need refresh; then `/opsx-meta-commit` for process commits. Do **not** commit here. Do **not** run snapshot/index update (separate owners). ## Merge safety rules 1. Preserve local `TARGET OVERRIDE — HIGHEST PRIORITY` blocks. 2. Default disposition for domain foreign content: `SKIP_DOMAIN`. 3. Never overwrite `.opsx/upstream/**` unless Owner `KEEP` includes explicit upstream-refresh flag documented in the packet. 4. Never write `openspec/changes/**`, `openspec/archive/**`, or product `openspec/decisions/**` from donor. 5. Do not run `/opsx-projectize:GO` as part of this command. 6. Partial failure mid-KEEP → stop; report applied vs skipped; do not pretend full success. ## Output contract (every run) ```text STATUS: MODE: READ_ONLY | APPLY WHAT_HAPPENED: WHY: SOURCE: STAGING_DIR: DIFF_SUMMARY: USEFUL_CANDIDATES: SKIP: CONFLICTS: KEEP_APPLIED: none | <list> OWNER_DECISION_REQUIRED: NEXT_ACTION: DO_NOT_DO_YET: ORIENTATION_HINT: LANE: COMMAND STATUS: <same as STATUS> NEXT_META: /opsx-meta NEXT_ACTION: <same as NEXT_ACTION> ``` Meta: `/opsx` / `/opsx-meta`. See `.opsx/shared/meta-orientation.md`. ### STATUS values ```text DIFF_PACKET_READY MERGE_APPLIED BLOCKED_NEEDS_EVIDENCE BLOCKED_NEEDS_FRESH_INDEX FAIL_CLOSED ``` ### Field meaning - `DIFF_SUMMARY` — counts by kind (NEW / UPDATED / STRUCTURE / LOCAL_ONLY / …) - `USEFUL_CANDIDATES` — short table: id → why useful on this target - `SKIP` — id → why not - `CONFLICTS` — id → what Owner must choose - `KEEP_APPLIED` — only in APPLY; list of merged ids - `NEXT_ACTION` — one pasteable line (e.g. GO with KEEP, or adapt-project, or commit) ## DIFF_PACKET.md minimum sections ```markdown # DIFF_PACKET UTC: SOURCE: LOCAL_HEAD: (best effort) SURFACES: ## Rows | id | kind | disposition | donor_path | local_path | why | ## Recommended KEEP (suggestion only) - … ## Forbidden (hard) - … ``` ## Human workflow tokens ```text WHAT_HAPPENED: … WHY: … CURRENT_STATE: DIFF_PACKET_READY | MERGE_APPLIED | … OWNER_DECISION_REQUIRED: approve KEEP set | none NEXT_ACTION: … DO_NOT_DO_YET: … ``` ## Failure / recovery | Condition | STATUS | Recovery | |---|---|---| | `.opsx/` absent | FAIL_CLOSED | `/opsx-meta-bootstrap` | | projectization not COMPLETE | FAIL_CLOSED | `/opsx-projectize` | | missing query/occurrence/source | BLOCKED_NEEDS_EVIDENCE | provide `query=` / `OCCURRENCE=` / `source=` | | stale/missing index | BLOCKED_NEEDS_FRESH_INDEX | `/opsx-meta-update-index` | | not an OPSX tree | FAIL_CLOSED | fix path / extract archive | | GO without packet/KEEP | FAIL_CLOSED | re-run compare; pass KEEP | | KEEP hits forbidden path | FAIL_CLOSED | narrow KEEP | | post-merge contract awkward | MERGE_APPLIED + note | `/opsx-meta-fix-command-defects` | ## Regression checks (implementer / operator) - [ ] READ_ONLY never writes outside `.opsx/runs/inbound/**` - [ ] GO without KEEP fails closed - [ ] Cannot write product changes/decisions/src - [ ] TARGET OVERRIDE preserved on UPDATED merges - [ ] Default does not touch `.opsx/upstream/**` - [ ] consult routes foreign-OPSX / central-reuse questions here - [ ] INDEX_DEFAULT preferred; RAW_DONOR only as fallback - [ ] APPLY updates activation + lock stub; never snapshot/index

{ "prompt": "# TARGET OVERRIDE — HIGHEST PRIORITY\n\n**Contract:** `OPSX-WB-META-IMPORT-01` \n**Runtime class:** `ACTIVE` \n**Precedence:** This override wins for target paths, write boundary, and bans.\n\n### Target authority paths (local)\n\n- Commands / rules / pipeline: `.cursor/commands/**`, `.cursor/rules/**`, `.cursor/pipeline/**`\n- OpenSpec process: `openspec/policies/**`, `openspec/schemas/**`\n- OPSX shared / registry / adapters docs: `.opsx/shared/**`, `.opsx/registry/**`, `.opsx/adapters/**`\n- Staging only: `.opsx/runs/inbound/**`\n- Frozen upstream (read): `.opsx/upstream/**` — **do not overwrite by default**\n\n### Hard target bans\n\n- Do not install dependencies / modify `package.json` or lockfile.\n- Do not access production / Kubernetes / secrets.\n- Do not push, open PR, rebase, force, or deploy.\n- Do not import foreign **product** dumps: `openspec/changes/**`, `openspec/archive/**`,\n product `openspec/decisions/**` content, `src/**`, `public/**`, `.env*`.\n- Do not activate WB/product domain assumptions from a donor without Owner KEEP\n **and** target remapping (default disposition `SKIP_DOMAIN`).\n- Do not blind-replace `.opsx/upstream/**` (`central_update_policy: NEVER_OVERWRITE`\n in `.opsx/manifest.yaml`) unless Owner explicit `KEEP=upstream-refresh` + flag.\n- Never PASS-by-absence; missing donor path → `FAIL_CLOSED`.\n\n### Projectization / bootstrap gate\n\n1. If `.opsx/` is absent (empty / foreign repo with no OPSX tree):\n\n```text\nSTATUS: FAIL_CLOSED\nREASON: OPSX_BOOTSTRAP_REQUIRED\nNEXT_COMMAND: /opsx-meta-bootstrap\n```\n\n2. Else read `.opsx/projectization.yaml` before any write.\n If `status` != `COMPLETE` or `normal_commands_enabled` is false:\n\n```text\nSTATUS: FAIL_CLOSED\nREASON: OPSX_PROJECTIZATION_REQUIRED\nNEXT_COMMAND: /opsx-projectize\n```\n\n---\n\n# /opsx-meta-import-command\n\nSole active **command import** owner. Default source is the central catalog\nindex; explicit raw repo/archive donors remain supported as fallback.\n\n```text\nIMPLEMENTATION_STATUS: IMPLEMENTED\nRUNTIME_STATUS: ACTIVE\nCONTRACT_ID: OPSX-WB-META-IMPORT-01\nPRODUCT_WRITER: NO\nUPSTREAM_OVERWRITE_DEFAULT: NO\nDEFAULT_SCOPE: one primary command (+ demonstrated companions only)\n```\n\nShared: `.opsx/shared/command-discovery.md`\n\n## Purpose\n\nFind / compare / Owner-select / materialize one coherent command packet into\nthis project while preserving TARGET OVERRIDE, adapter gates, lock, activation,\nand provenance.\n\n## Source modes\n\n```text\nINDEX_DEFAULT query=<id|alias|purpose> | OCCURRENCE=<id> | ADOPTION_PACKET=<path>\nRAW_DONOR source=<repo-path|archive> [surfaces=...]\n```\n\n## When to use\n\n- Direct “find and import this command” from central index.\n- Handoff from `/opsx-meta-discover`, design, or fix (`ADOPTION_PACKET`).\n- Raw donor path/archive not yet indexed (`source=`).\n\n## When not to use\n\n- No `.opsx/` / empty-repo first contact → `/opsx-meta-bootstrap`\n- Surfaces staged but lock not COMPLETE → `/opsx-projectize`\n- Adapter/capability refresh only → `/opsx-adapt-project`\n- Change delta specs → main specs → `/opsx-sync`\n- Local command-contract wording defect → `/opsx-meta-fix-command-defects`\n- Cheap command-plane “where next?” → `/opsx-meta`\n- Unsure which meta command → `/opsx-meta-consult`\n- Product / game feature work → `/opsx-explore` and product lifecycle\n- Blind refresh of frozen `.opsx/upstream/**` (default forbidden)\n\n## Authority boundary\n\n- Default mode is **READ_ONLY** (compare + advise). Writes only on exact `GO`\n with a usable `DIFF_PACKET` and non-empty approved `KEEP`.\n- Does **not** own product OpenSpec changes/decisions/archive.\n- Does **not** re-open projectization lock or replace `/opsx-projectize:GO`.\n- Does **not** own adapter capability invention (handoff to adapt-project after merge).\n- Does **not** commit (handoff `/opsx-meta-commit`).\n- Decision owner for KEEP / SKIP / CONFLICT resolution: **Owner**.\n\n## User input\n\n```text\n{{arguments}}\n```\n\n### Parameters\n\n| Token | Required | Meaning |\n|---|---|---|\n| `query=` / `OCCURRENCE=` / `ADOPTION_PACKET=` | INDEX_DEFAULT | Resolve candidate from fresh catalog index (preferred) |\n| `source=<path>` | RAW_DONOR | Absolute or repo-relative donor checkout **or** extracted archive root |\n| `surfaces=` | no | Comma list; default `commands,rules,pipeline,openspec-process,opsx-shared` |\n| `packet=<path>` | GO | Path to prior `DIFF_PACKET.md` under `.opsx/runs/inbound/` (or chat-attached equivalent) |\n| `KEEP=<ids>` | GO | Comma list of row ids / command ids / relative paths from the packet to merge |\n| `GO` | APPLY | Exact apply token |\n\nEmpty invoke without index selector and without `source=` / clear donor →\n`BLOCKED_NEEDS_EVIDENCE` (ask once for `query=` / `OCCURRENCE=` / `source=`).\n\n## Modes\n\n| Input | Mode | Writes |\n|---|---|---|\n| no `GO` | `READ_ONLY` | staging under `.opsx/runs/inbound/<UTC>/` allowed for DIFF_PACKET / ADOPTION_PACKET only |\n| exact `GO` + packet + KEEP | `APPLY` | approved process files + MERGE_RECEIPT + lock/activation/provenance as needed |\n| `GO` without packet or KEEP | `FAIL_CLOSED` | none |\n\n## Surfaces compared (default)\n\nDonor vs local, when present:\n\n| Surface key | Paths (relative to donor / local root) |\n|---|---|\n| `commands` | `.cursor/commands/opsx-*.md` |\n| `rules` | `.cursor/rules/**` (opsx / architecture / documentation / process) |\n| `pipeline` | `.cursor/pipeline/**` |\n| `openspec-process` | `openspec/policies/**`, `openspec/schemas/**` |\n| `opsx-shared` | `.opsx/shared/**` |\n\n**Never compared for merge (hard reject on GO):** donor `openspec/changes/**`,\n`openspec/archive/**`, product decision dumps, `src/**`, `public/**`, secrets.\n\n## Classification (every delta row)\n\n| Kind | Meaning |\n|---|---|\n| `NEW_COMMAND` | Donor has `opsx-*` command id local lacks |\n| `UPDATED_COMMAND` | Same command id; body/version/hash differs |\n| `STRUCTURE_DELTA` | Schema/policy/pipeline layout differs |\n| `LOCAL_ONLY` | Local has; donor lacks (informational) |\n| `SKIP_DOMAIN` | WB / Poetry / kubectl / foreign product assumptions without target adapter |\n| `CONFLICT` | Both evolved; default keep local until Owner picks |\n\n### Advice dispositions (mandatory on each actionable row)\n\n| Disposition | Meaning |\n|---|---|\n| `USEFUL_CANDIDATE` | Likely helps this WB Sky / Poetry target after remapping |\n| `SKIP_DOMAIN` | Harmful or wrong domain; do not merge |\n| `SKIP_DUPLICATE` | Already covered locally |\n| `CONFLICT_LOCAL_WINS_DEFAULT` | Diverged; keep local unless Owner KEEP |\n| `CONFLICT_NEEDS_OWNER` | Owner must choose before GO |\n| `STRUCTURE_DELTA` | Layout/policy change; evaluate separately |\n\n## Steps — READ_ONLY (INDEX_DEFAULT)\n\n1. Projectization gate (read). If not COMPLETE → `FAIL_CLOSED`.\n2. Read `.opsx/shared/command-discovery.md` freshness rules. Resolve index via\n `.opsx/sources.yaml` / `.opsx/lock.yaml`. If index STALE/MISSING and no\n Owner `LOCAL_ONLY_CONFIRMED` → `BLOCKED_NEEDS_FRESH_INDEX` →\n `NEXT_ACTION: /opsx-meta-update-index`.\n3. Resolve candidate from `ADOPTION_PACKET=` (preferred handoff), else\n `OCCURRENCE=`, else `query=` against by-command / by-hash / by-repo views.\n4. Materialize a bounded compare of the selected occurrence (and listed\n companions) vs local — do **not** merge. Write staging\n `.opsx/runs/inbound/<UTC>/` with `SOURCE.txt`, `ADOPTION_PACKET.md` (echo),\n and `DIFF_PACKET.md`.\n5. Emit output contract. Owner must approve KEEP before GO.\n\n## Steps — READ_ONLY (RAW_DONOR fallback)\n\n1. Projectization gate (read). If not COMPLETE → `FAIL_CLOSED`.\n2. Resolve `source=`. If missing → `BLOCKED_NEEDS_EVIDENCE`.\n3. Confirm donor root looks like OPSX (at least one of: `.cursor/commands`,\n `openspec/policies`, `.opsx`). Else `FAIL_CLOSED` `REASON: NOT_OPSX_SURFACE`.\n4. Create staging dir `.opsx/runs/inbound/<UTC>/` and write `SOURCE.txt`\n (resolved path + optional git short SHA if `.git` present — best effort).\n5. Inventory donor vs local for selected `surfaces=` (filename / id inventory\n first; content hash or bounded section compare for UPDATED rows).\n Follow `.cursor/commands/opsx-execution-preflight.md` I/O budgets:\n Grep-first; parallel Read max 2; no full dump of every command body unless\n needed for a CONFLICT/UPDATED row.\n6. Classify each row; fill USEFUL / SKIP / CONFLICT advice with one-line why.\n7. Write `DIFF_PACKET.md` into the staging dir (required durable artifact).\n8. Emit output contract. Do **not** merge. Do **not** touch live process files\n beyond the staging packet.\n\n## Steps — APPLY (`GO`)\n\n1. Projectization gate again.\n2. Require exact token `GO`.\n3. Load `packet=` (or newest `.opsx/runs/inbound/*/DIFF_PACKET.md` only if\n unambiguous in this chat). Missing → `FAIL_CLOSED`.\n4. Require non-empty `KEEP=` (ids from packet). Empty KEEP → `FAIL_CLOSED`.\n5. Validate every KEEP target is inside the write boundary. Any forbidden path\n → `FAIL_CLOSED`, no writes.\n6. For each KEEP item:\n - **NEW_COMMAND:** create `.cursor/commands/<name>.md` as target-native:\n TARGET OVERRIDE header + remapped body (strip WB/Poetry/kubectl execution\n into UNAVAILABLE / FAIL_CLOSED; do not invent adapters).\n - **UPDATED_COMMAND:** merge donor improvements into local file **preserving**\n existing TARGET OVERRIDE / `local_modification_note` / contract_id unless\n Owner KEEP explicitly replaces them.\n - **STRUCTURE / shared / policy:** copy or merge only listed relative paths;\n never wipe local product specs.\n7. Update `.opsx/registry/command_activation.ndjson` and provenance row for\n newly installed commands. Update `.opsx/lock.yaml` stub entries when the\n adopted command is lock-tracked.\n8. Write `MERGE_RECEIPT.md` under the same staging dir.\n9. Emit output contract with `STATUS: MERGE_APPLIED`.\n10. Suggest next: `/opsx-adapt-project` if activation/gates may need refresh;\n then `/opsx-meta-commit` for process commits. Do **not** commit here.\n Do **not** run snapshot/index update (separate owners).\n\n## Merge safety rules\n\n1. Preserve local `TARGET OVERRIDE — HIGHEST PRIORITY` blocks.\n2. Default disposition for domain foreign content: `SKIP_DOMAIN`.\n3. Never overwrite `.opsx/upstream/**` unless Owner `KEEP` includes explicit\n upstream-refresh flag documented in the packet.\n4. Never write `openspec/changes/**`, `openspec/archive/**`, or product\n `openspec/decisions/**` from donor.\n5. Do not run `/opsx-projectize:GO` as part of this command.\n6. Partial failure mid-KEEP → stop; report applied vs skipped; do not pretend\n full success.\n\n## Output contract (every run)\n\n```text\nSTATUS:\nMODE: READ_ONLY | APPLY\nWHAT_HAPPENED:\nWHY:\nSOURCE:\nSTAGING_DIR:\nDIFF_SUMMARY:\nUSEFUL_CANDIDATES:\nSKIP:\nCONFLICTS:\nKEEP_APPLIED: none | <list>\nOWNER_DECISION_REQUIRED:\nNEXT_ACTION:\nDO_NOT_DO_YET:\nORIENTATION_HINT:\n LANE: COMMAND\n STATUS: <same as STATUS>\n NEXT_META: /opsx-meta\n NEXT_ACTION: <same as NEXT_ACTION>\n```\n\nMeta: `/opsx` / `/opsx-meta`. See `.opsx/shared/meta-orientation.md`.\n\n### STATUS values\n\n```text\nDIFF_PACKET_READY\nMERGE_APPLIED\nBLOCKED_NEEDS_EVIDENCE\nBLOCKED_NEEDS_FRESH_INDEX\nFAIL_CLOSED\n```\n\n### Field meaning\n\n- `DIFF_SUMMARY` — counts by kind (NEW / UPDATED / STRUCTURE / LOCAL_ONLY / …)\n- `USEFUL_CANDIDATES` — short table: id → why useful on this target\n- `SKIP` — id → why not\n- `CONFLICTS` — id → what Owner must choose\n- `KEEP_APPLIED` — only in APPLY; list of merged ids\n- `NEXT_ACTION` — one pasteable line (e.g. GO with KEEP, or adapt-project, or commit)\n\n## DIFF_PACKET.md minimum sections\n\n```markdown\n# DIFF_PACKET\nUTC:\nSOURCE:\nLOCAL_HEAD: (best effort)\nSURFACES:\n\n## Rows\n| id | kind | disposition | donor_path | local_path | why |\n\n## Recommended KEEP (suggestion only)\n- …\n\n## Forbidden (hard)\n- …\n```\n\n## Human workflow tokens\n\n```text\nWHAT_HAPPENED: …\nWHY: …\nCURRENT_STATE: DIFF_PACKET_READY | MERGE_APPLIED | …\nOWNER_DECISION_REQUIRED: approve KEEP set | none\nNEXT_ACTION: …\nDO_NOT_DO_YET: …\n```\n\n## Failure / recovery\n\n| Condition | STATUS | Recovery |\n|---|---|---|\n| `.opsx/` absent | FAIL_CLOSED | `/opsx-meta-bootstrap` |\n| projectization not COMPLETE | FAIL_CLOSED | `/opsx-projectize` |\n| missing query/occurrence/source | BLOCKED_NEEDS_EVIDENCE | provide `query=` / `OCCURRENCE=` / `source=` |\n| stale/missing index | BLOCKED_NEEDS_FRESH_INDEX | `/opsx-meta-update-index` |\n| not an OPSX tree | FAIL_CLOSED | fix path / extract archive |\n| GO without packet/KEEP | FAIL_CLOSED | re-run compare; pass KEEP |\n| KEEP hits forbidden path | FAIL_CLOSED | narrow KEEP |\n| post-merge contract awkward | MERGE_APPLIED + note | `/opsx-meta-fix-command-defects` |\n\n## Regression checks (implementer / operator)\n\n- [ ] READ_ONLY never writes outside `.opsx/runs/inbound/**`\n- [ ] GO without KEEP fails closed\n- [ ] Cannot write product changes/decisions/src\n- [ ] TARGET OVERRIDE preserved on UPDATED merges\n- [ ] Default does not touch `.opsx/upstream/**`\n- [ ] consult routes foreign-OPSX / central-reuse questions here\n- [ ] INDEX_DEFAULT preferred; RAW_DONOR only as fallback\n- [ ] APPLY updates activation + lock stub; never snapshot/index", "variables": [ "arguments" ], "notes": "1. If `.opsx/` is absent (empty / foreign repo with no OPSX tree):", "metadata": { "source": { "provider": "github-cursor-commands", "repository": "https://github.com/revoluxe-ai/adv-bot", "path": ".cursor/commands/opsx-meta-import-command.md", "ref": "a3415e97d3efd474784b1bfd5e44bbd92672ddf5", "url": "https://github.com/revoluxe-ai/adv-bot/blob/a3415e97d3efd474784b1bfd5e44bbd92672ddf5/.cursor/commands/opsx-meta-import-command.md", "key": "revoluxe-ai/adv-bot/.cursor/commands/opsx-meta-import-command.md" } } }

opsx-meta-import-command

About

TARGET OVERRIDE — HIGHEST PRIORITY

Target authority paths (local)

Hard target bans

Projectization / bootstrap gate

/opsx-meta-import-command

Purpose

Source modes

When to use

When not to use

Authority boundary

User input

Parameters

Modes

Surfaces compared (default)

Classification (every delta row)

Advice dispositions (mandatory on each actionable row)

Steps — READ_ONLY (INDEX_DEFAULT)

Steps — READ_ONLY (RAW_DONOR fallback)

Steps — APPLY (`GO`)

Merge safety rules

Output contract (every run)

STATUS values

Field meaning

DIFF_PACKET.md minimum sections

Human workflow tokens

Failure / recovery

Regression checks (implementer / operator)

Install opsx-meta-import-command and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Use it

Manifest

Reviews

About

TARGET OVERRIDE — HIGHEST PRIORITY

Target authority paths (local)

Hard target bans

Projectization / bootstrap gate

/opsx-meta-import-command

Purpose

Source modes

When to use

When not to use

Authority boundary

User input

Parameters

Modes

Surfaces compared (default)

Classification (every delta row)

Advice dispositions (mandatory on each actionable row)

Steps — READ_ONLY (INDEX_DEFAULT)

Steps — READ_ONLY (RAW_DONOR fallback)

Steps — APPLY (GO)

Merge safety rules

Output contract (every run)

STATUS values

Field meaning

DIFF_PACKET.md minimum sections

Human workflow tokens

Failure / recovery

Regression checks (implementer / operator)

Install opsx-meta-import-command and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Use it

Manifest

Reviews

Steps — APPLY (`GO`)