rosett-ai 1.3.3 → 1.5.10

data/doc/changes/2026-02-20-styles-implementation.md

@@ -1,220 +0,0 @@
-# Implement styles.yml design document (P1)
-
-**Branch**: `design_implementation`
-**Date**: 2026-02-19 to 2026-02-21
-**Design doc**: `conf/design/styles.yml` v1.0.0
-**Commits**: ff3d81e, bf9f15e (partial)
-
-## Motivation
-
-Style enforcement eliminates bikeshedding, ensures consistency across human
-and AI contributors, and makes code review focus on logic rather than
-formatting. The styles design document codifies all conventions into automated
-enforcement — pre-commit hooks block violations locally, and the CI pipeline
-blocks them in merge requests. Style rules are not optional guidelines; they
-are enforced gates.
-
-This depends on security (tooling must be present) and testing (enforcement
-must be verifiable). It is the third P1 domain.
-
-## Acceptance criteria
-
-All 10 acceptance criteria from `styles.yml` are satisfied:
-
-| # | Criterion | Evidence |
-|---|-----------|----------|
-| 1 | `.rubocop.yml` with all conventions, zero violations on main | `.rubocop.yml` with custom cops, Style/Copyright, all Metrics exclusions documented |
-| 2 | `.yamllint` with project YAML formatting rules | Pre-existing `.yamllint` configuration |
-| 3 | `.reek.yml` with code smell detection thresholds | `.reek.yml` with documented exclusions per `doc/REEK_CONFIGURATION.md` |
-| 4 | `.overcommit.yml` enforces rubocop, yamllint, reek, json, bundler-audit, trailing whitespace | All hooks enabled with `on_warn: fail` |
-| 5 | Commit message format enforced by CommitMsg hooks | Overcommit CommitMsg hook enforces Conventional Commits pattern |
-| 6 | mdl configured and enforced for all .md files | `.mdlrc` + `.mdl_style.rb` + Mdl overcommit hook |
-| 7 | `bundle exec rubocop` exits zero on entire codebase | Verified: 0 offenses |
-| 8 | `bundle exec reek` exits zero on entire codebase | Verified: 0 warnings |
-| 9 | yamllint exits zero on all YAML files | Verified: pre-existing enforcement |
-| 10 | Flay configured + RuboCop Metrics cops enforced | Flay in overcommit (mass 16), CyclomaticComplexity (10), PerceivedComplexity (10), AbcSize (25) |
-
-## Changes by area
-
-### RuboCop configuration
-
-**Commit**: bf9f15e
-
-Key additions to `.rubocop.yml`:
-
-| Setting | Value | Purpose |
-|---------|-------|---------|
-| `require: ./lib/rubocop/rosett_ai` | — | Load custom security cops |
-| `RosettAi/UnsafeYamlLoad` | Severity: error | Block unsafe YAML.load |
-| `RosettAi/ShellInterpolation` | Severity: error | Block shell injection |
-| `Style/Copyright` | `SPDX-License-Identifier: GPL-3.0-only` | Enforce SPDX headers |
-| `plugins: rubocop-factory_bot` | — | Test factory linting |
-| `Metrics/AbcSize` | Max: 25 with documented exclusions | Complexity gate |
-| `Metrics/CyclomaticComplexity` | Max: 10 | Complexity gate |
-| `Metrics/PerceivedComplexity` | Max: 10 | Complexity gate |
-
-All Metrics exclusions now include inline comments explaining why the exclusion
-is justified (e.g., "Thor tasks orchestrate multi-stage workflows").
-
-### Reek configuration
-
-**Commits**: 7423856, 46aa519, bf9f15e, 1d0bfb9, 6a8b27e
-
-The `.reek.yml` was expanded with documented exclusions. Each exclusion has a
-rationale recorded in `doc/REEK_CONFIGURATION.md`. Key patterns:
-
-- `TooManyStatements`: excluded for Thor task methods (multi-stage workflows)
-- `UtilityFunction`: excluded for module_function patterns (TextSanitizer, YamlLoader)
-- `NilCheck`: excluded where nil guard is intentional API design
-- `ControlParameter`: excluded for Registry.resolve optional name parameter
-
-### YAML linting
-
-Pre-existing `.yamllint` configuration was already in place. No changes needed.
-
-### Markdown linting
-
-**Commit**: bf9f15e
-
-New files:
-
-**`.mdlrc`**:
-
-```text
-style '.mdl_style.rb'
-ignore_front_matter true
-```
-
-**`.mdl_style.rb`**:
-
-```ruby
-all
-rule 'MD013', line_length: 240, ignore_code_blocks: true, tables: false
-rule 'MD029', style: :ordered
-exclude_rule 'MD033'  # Inline HTML — needed for anchors and complex tables
-rule 'MD007', indent: 2
-exclude_rule 'MD024'  # Multiple headings with same content — changelogs repeat headings
-```
-
-### Overcommit hooks
-
-**Commits**: 7423856, bf9f15e
-
-Full pre-commit hook configuration (all set to `on_warn: fail`):
-
-| Hook | Purpose |
-|------|---------|
-| RuboCop | Ruby style + security cops |
-| Reek | Code smell detection |
-| BundlerAudit | Gem CVE scanning |
-| RubyAudit | Ruby stdlib CVE scanning |
-| YamlSyntax | YAML validity |
-| JsonSyntax | JSON validity |
-| TrailingWhitespace | Whitespace hygiene |
-| Mdl | Markdown lint (excludes LICENSE.md, vendor/, tmp/) |
-| Flay | Structural duplication (mass threshold 16) |
-| MergeConflicts | Unresolved conflict markers |
-| BrokenSymlinks | Dead symlinks |
-
-CommitMsg hooks enforce Conventional Commits format.
-
-### Conventional Commits
-
-Enforced by overcommit CommitMsg hook. Format:
-
-```text
-type(scope): description
-```
-
-Types: `feat`, `fix`, `test`, `docs`, `refactor`, `style`, `chore`, `ci`.
-All 12 commits on this branch follow the convention.
-
-### SPDX headers
-
-**Commit**: bf9f15e
-
-`Style/Copyright` cop enforces SPDX headers on all Ruby source files:
-
-```ruby
-# SPDX-License-Identifier: GPL-3.0-only
-# Copyright (C) 2026 Hugo Antonio Sepulveda Manriquez / NeatNerds
-```
-
-87 files received SPDX headers (all `.rb` files in `lib/` and `spec/`, plus
-`Rakefile` and `bin/raictl`). Excluded: `Gemfile` and `.mdl_style.rb` (not
-project source code).
-
-### LICENSE.md
-
-**Commit**: bf9f15e
-
-Full GPL-3.0-only license text (675 lines) added as `LICENSE.md`. Excluded
-from mdl linting (pre-formatted legal text).
-
-## Pre-commit enforcement flow
-
-```mermaid
-flowchart LR
-    subgraph LOCAL["Local (overcommit)"]
-        GC[git commit] --> PRE[Pre-commit hooks]
-        PRE --> RC[RuboCop]
-        PRE --> RK[Reek]
-        PRE --> BA[bundler-audit]
-        PRE --> RA[ruby-audit]
-        PRE --> FL[Flay]
-        PRE --> MDL2[mdl]
-        PRE --> YS[YamlSyntax]
-        PRE --> JS[JsonSyntax]
-        PRE --> TW[TrailingWhitespace]
-    end
-
-    subgraph MSG["Commit Message"]
-        CM[CommitMsg hook] --> CC{Conventional<br/>Commits?}
-        CC -->|no| REJECT[Reject]
-        CC -->|yes| PASS2[Accept]
-    end
-
-    subgraph REMOTE["CI Pipeline"]
-        PUSH[git push] --> VAL[validate stage]
-        VAL --> CQ[code_quality stage]
-        CQ --> SS[security_scan stage]
-        SS --> TEST[test stage]
-        TEST --> BUILD[build stage]
-    end
-
-    PRE -->|all pass| CM
-    PASS2 --> PUSH
-
-    style REJECT fill:#8b0000,color:#fff
-```
-
-## Files created
-
-| File | Purpose |
-|------|---------|
-| `.mdlrc` | Markdownlint configuration |
-| `.mdl_style.rb` | Custom markdownlint style rules |
-| `LICENSE.md` | GPL-3.0-only full license text (675 lines) |
-
-## Files modified
-
-| File | Change |
-|------|--------|
-| `.rubocop.yml` | Custom cops, Style/Copyright, factory_bot plugin, documented exclusions |
-| `.reek.yml` | New exclusions with documented rationale for new classes |
-| `.overcommit.yml` | Added RubyAudit, Mdl, Flay hooks |
-| `Gemfile` | Added ruby_audit, flog, mdl dependencies |
-| `rosett-ai.gemspec` | Updated gem metadata |
-| 87 `.rb` files | SPDX-License-Identifier headers added |
-| `doc/REEK_CONFIGURATION.md` | Updated with new exclusion rationale |
-
-## Verification
-
-- [x] `bundle exec rubocop` — 0 offenses (all cops active)
-- [x] `bundle exec reek lib/` — 0 warnings
-- [x] `bundle exec mdl doc/` — 0 violations
-- [x] `yamllint .` — 0 errors
-- [x] All 12 commits follow Conventional Commits format
-- [x] All Ruby source files have SPDX headers
-- [x] Flay runs via overcommit (mass threshold 16)
-- [x] Pre-commit hooks block violations (`on_warn: fail`)

data/doc/changes/2026-02-21-architecture-completion.md

@@ -1,95 +0,0 @@
-# Architecture Completion — Criterion 8 (Package Dependencies)
-
-**Date**: 2026-02-21
-**Branch**: `design_implementation`
-**Design document**: `conf/design/architecture.yml` (status: draft -> approved)
-
-## Summary
-
-Implements the final acceptance criterion for the architecture design document:
-"Package dependencies are correctly declared (rosett-ai-gtk4 depends on rosett-ai)".
-
-This completes all 8 architecture criteria and changes the document status
-from `draft` to `approved`, unblocking all P3 work (ui_framework,
-accessibility, i18n).
-
-## Implementation
-
-### Data-driven variant packaging declarations
-
-Three variant configuration files in `conf/packaging/` define the Debian
-package metadata and dependencies for each rosett-ai package:
-
-| File | Package | Depends on rosett-ai? |
-|------|---------|-----------------|
-| `core.yml` | `rosett-ai` | No (is the core) |
-| `gtk4.yml` | `rosett-ai-gtk4` | Yes |
-| `qt6.yml` | `rosett-ai-qt6` | Yes |
-
-### Dynamic version resolution
-
-Variant configs use `"current"` as a version keyword for the rosett-ai dependency:
-
-```yaml
-package_dependencies:
-  - name: rosett-ai
-    version: "current"    # Resolved to ">= 0.1.0" at build time
-```
-
-`VariantConfig#fpm_depends` resolves `"current"` to `">= #{RosettAi::VERSION}"`
-at load time. This satisfies the `lifecycle_management.yml` atomic update
-constraint — changing `lib/rosett_ai/version.rb` automatically updates all
-variant dependency constraints with no manual intervention.
-
-### JSON Schema validation
-
-`conf/schemas/packaging_schema.json` validates all variant configs with:
-
-- Required fields: `name`, `variant`, `description`
-- Variant enum: `["core", "gtk4", "qt6", "kde"]`
-- Package name pattern: `^rosett-ai(-[a-z0-9]+)?$`
-- Version constraint pattern accepting `"current"` or Debian-style constraints
-
-### Build task integration
-
-`bin/raictl build package` accepts `--variant` option (default: `core`):
-
-- `--variant core` — produces identical output to previous behavior
-- `--variant gtk4` — would produce `rosett-ai-gtk4` package with rosett-ai dependency
-- Non-core variants fail early if adapter file doesn't exist (P3 work)
-
-## Files
-
-| Action | File |
-|--------|------|
-| New | `conf/packaging/core.yml` |
-| New | `conf/packaging/gtk4.yml` |
-| New | `conf/packaging/qt6.yml` |
-| New | `conf/schemas/packaging_schema.json` |
-| New | `lib/rosett_ai/packaging/variant_config.rb` |
-| New | `spec/rosett_ai/packaging/variant_config_spec.rb` |
-| Modified | `lib/rosett_ai/thor/tasks/build.rb` |
-| Modified | `spec/rosett_ai/thor/tasks/build_package_spec.rb` |
-| Modified | `spec/spec_helper.rb` |
-| Modified | `conf/design/architecture.yml` |
-
-## System dependency lifecycle
-
-System dependencies (`libc6`, `libgtk-4-1`, `qt6-base`) are Debian package
-names. The upgrade procedure follows `lifecycle_management.yml`:
-
-1. **Trigger**: Debian release changes available package versions
-2. **Research**: `apt-cache show <package>` in target distribution
-3. **Scope**: grep variant configs for the dependency name
-4. **Execute**: update the variant config YAML
-5. **Verify**: full suite (rspec, rubocop, reek) + schema validation
-6. **Commit**: reference the Debian release or security advisory
-
-## Verification
-
-```bash
-bundle exec rspec spec/rosett_ai/packaging/
-bundle exec rspec spec/rosett_ai/thor/tasks/build_package_spec.rb
-bundle exec rspec
-bundle exec rubocop && bundle exec reek
-```

data/doc/changes/2026-02-21-architecture-ui-layer.md

@@ -1,253 +0,0 @@
-# Implement architecture.yml UI layer (partial P2)
-
-**Branch**: `design_implementation`
-**Date**: 2026-02-21
-**Design doc**: `conf/design/architecture.yml` v1.0.0
-**Commits**: 1d0bfb9, 6a8b27e
-
-## Motivation
-
-The architecture design document defines rosett-ai as a TUI-first, pluggable
-application with optional GUI layers delivered as separate Debian packages.
-All UI variants share the same backend logic in `lib/rosett_ai/`. The abstract UI
-interface (`lib/rosett_ai/ui/base.rb`) defines the contract that all implementations
-must fulfil.
-
-This implementation addresses the UI layer portion of the architecture document:
-the abstract interface, the plugin registry, the default TUI adapter, and
-accessibility methods (screen reader detection, text direction, live-region
-announcements). The remaining architecture criteria (package separation, GTK4/Qt6
-adapters, full headless verification) are deferred to the P3 ui_framework phase.
-
-## Acceptance criteria
-
-2 of 8 acceptance criteria from `architecture.yml` are addressed in this
-implementation. The remainder are deferred with rationale:
-
-| # | Criterion | Status | Evidence / Deferral reason |
-|---|-----------|--------|----------------------------|
-| 1 | bin/raictl runs without errors on headless server | Deferred | Requires full integration testing on headless CI runner |
-| 2 | Installing rosett-ai-gtk4 adds GTK4 option without modifying core | Deferred | P3 — no GUI packages built yet |
-| 3 | lib/rosett_ai/ui/base.rb defines abstract interface | Met | 7 abstract methods, RTL_LOCALES, accessibility |
-| 4 | lib/rosett_ai/ui/registry.rb discovers installed UI plugins | Met | register, resolve, available, registered?, reset! |
-| 5 | All business logic in lib/rosett_ai/ (not TUI or GUI code) | Deferred | Requires full codebase audit; TUI adapter delegates only |
-| 6 | Design docs validated against design_schema.json | Deferred | Schema validation exists but is separate concern |
-| 7 | Behaviour docs validated against behaviour_schema.json | Deferred | Already in place (BehaviourValidator) |
-| 8 | Package dependencies correctly declared | Deferred | P4 — packaging for GUI variants not started |
-
-## Changes by area
-
-### RosettAi::Ui::Base abstract interface
-
-**File**: `lib/rosett_ai/ui/base.rb` (47 lines)
-
-Defines 7 methods that all UI adapters must implement. The first 5 raise
-`NotImplementedError` (abstract pattern). The last 2 provide default
-implementations shared across all adapters:
-
-| Method | Signature | Purpose |
-|--------|-----------|---------|
-| `render` | `(content)` | Display content to user |
-| `display_table` | `(headers, rows)` | Render tabular data |
-| `prompt_user` | `(question, choices: nil)` | Interactive input |
-| `show_spinner` | `(message, &block)` | Progress indication |
-| `announce` | `(message)` | Screen reader live-region announcement |
-| `accessible?` | `()` | Detect assistive technology (Orca, BRLTTY) |
-| `text_direction` | `(locale = nil)` | RTL/LTR based on locale |
-
-**Accessibility methods** (added in 6a8b27e):
-
-`accessible?` checks environment variables set by screen readers:
-
-```ruby
-def accessible?
-  ENV.key?('ORCA_RUNNING') || ENV.key?('BRLTTY_TTY')
-end
-```
-
-`text_direction` returns `:rtl` for Arabic, Hebrew, Farsi, and Urdu locales:
-
-```ruby
-RTL_LOCALES = ['ar', 'he', 'fa', 'ur'].freeze
-
-def text_direction(locale = nil)
-  lang = locale || ENV.fetch('LANG', 'en')[0, 2]
-  RTL_LOCALES.include?(lang) ? :rtl : :ltr
-end
-```
-
-`announce` provides a hook for screen reader live-region announcements.
-The Base class raises NotImplementedError; Tui implements it via `warn`.
-
-### RosettAi::Ui::Registry plugin discovery
-
-**File**: `lib/rosett_ai/ui/registry.rb` (55 lines)
-
-Class-level registry that manages UI adapter plugins:
-
-| Method | Purpose |
-|--------|---------|
-| `register(name, adapter_class)` | Register an adapter (called at require time) |
-| `resolve(name = nil)` | Instantiate an adapter by name (defaults to `:tui`) |
-| `available` | List registered adapter names |
-| `registered?(name)` | Check if an adapter is registered |
-| `reset!` | Clear registry (for testing) |
-
-The `default_adapter` private method prefers `:tui` if registered, then falls
-back to the first registered adapter, then raises if none are registered.
-
-Plugin registration happens at the bottom of each adapter file:
-
-```ruby
-# lib/rosett_ai/ui/tui.rb
-Registry.register(:tui, Tui)
-```
-
-Future GUI adapters will follow the same pattern:
-
-```ruby
-# lib/rosett_ai/ui/gtk4.rb (future)
-Registry.register(:gtk4, Gtk4)
-```
-
-### RosettAi::Ui::Tui default adapter
-
-**File**: `lib/rosett_ai/ui/tui.rb` (53 lines)
-
-The default terminal adapter delegates to TTY gems:
-
-| Method | Implementation |
-|--------|---------------|
-| `render` | `$stdout.puts(content)` |
-| `display_table` | `Terminal::Table.new` |
-| `prompt_user` | `TTY::Prompt.new.select` / `.ask` |
-| `show_spinner` | `TTY::Spinner.new` with auto_spin |
-| `announce` | `warn(message)` (stderr for screen reader compatibility) |
-
-Dependencies: `rainbow`, `terminal-table`, `tty-prompt`, `tty-spinner`.
-
-### Shared examples update
-
-**File**: `spec/support/shared_examples/ui_implementation.rb`
-
-The interface contract grew from 4 to 7 method checks:
-
-| Version | Methods checked |
-|---------|----------------|
-| Initial (5f352e6) | render, display_table, prompt_user, show_spinner |
-| Final (6a8b27e) | render, display_table, prompt_user, show_spinner, announce, accessible?, text_direction |
-
-## UI plugin class diagram
-
-```mermaid
-classDiagram
-    class Base {
-        +render(content)
-        +display_table(headers, rows)
-        +prompt_user(question, choices)
-        +show_spinner(message, block)
-        +announce(message)
-        +accessible?() bool
-        +text_direction(locale) symbol
-        -RTL_LOCALES : Array
-    }
-
-    class Tui {
-        +render(content)
-        +display_table(headers, rows)
-        +prompt_user(question, choices)
-        +show_spinner(message, block)
-        +announce(message)
-    }
-
-    class Gtk4 {
-        <<future>>
-        +render(content)
-        +display_table(headers, rows)
-        +prompt_user(question, choices)
-        +show_spinner(message, block)
-        +announce(message)
-    }
-
-    class Qt6 {
-        <<future>>
-        +render(content)
-        +display_table(headers, rows)
-        +prompt_user(question, choices)
-        +show_spinner(message, block)
-        +announce(message)
-    }
-
-    class Registry {
-        -adapters : Hash
-        +register(name, klass)$
-        +resolve(name)$ Base
-        +available()$ Array
-        +registered?(name)$ bool
-        +reset!()$
-    }
-
-    Base <|-- Tui
-    Base <|-- Gtk4
-    Base <|-- Qt6
-    Registry --> Base : instantiates
-```
-
-## Registry discovery flow
-
-```mermaid
-sequenceDiagram
-    participant APP as Application
-    participant REQ as require
-    participant REG as Registry
-    participant TUI as Tui adapter
-
-    APP->>REQ: require 'rosett_ai/ui/tui'
-    REQ->>REG: Registry.register(:tui, Tui)
-    REG-->>REQ: stored in @adapters
-
-    Note over APP: Later, at runtime...
-
-    APP->>REG: Registry.resolve(:tui)
-    REG->>REG: lookup @adapters[:tui]
-    REG->>TUI: Tui.new
-    TUI-->>APP: adapter instance
-
-    Note over APP: Or with default...
-
-    APP->>REG: Registry.resolve
-    REG->>REG: default_adapter -> :tui
-    REG->>TUI: Tui.new
-    TUI-->>APP: adapter instance
-```
-
-## Files created
-
-| File | Purpose |
-|------|---------|
-| `lib/rosett_ai/ui/base.rb` | Abstract UI interface (7 methods + RTL_LOCALES) |
-| `lib/rosett_ai/ui/registry.rb` | Plugin discovery and adapter management |
-| `lib/rosett_ai/ui/tui.rb` | Terminal UI adapter using TTY gems |
-| `spec/rosett_ai/ui/base_spec.rb` | Base interface tests (85 lines) |
-| `spec/rosett_ai/ui/registry_spec.rb` | Registry tests (70 lines) |
-| `spec/rosett_ai/ui/tui_spec.rb` | TUI adapter tests (48 lines) |
-
-## Files modified
-
-| File | Change |
-|------|--------|
-| `spec/support/shared_examples/ui_implementation.rb` | 4 to 7 method checks (added announce, accessible?, text_direction) |
-| `.reek.yml` | Exclusions for Ui::Registry (ControlParameter), Ui::Tui (UtilityFunction) |
-| `conf/design/architecture.yml` | Minor status update |
-| `lib/rubocop/cop/rosett-ai/shell_interpolation.rb` | Added on_xstr handler for backtick detection |
-
-## Verification
-
-- [x] `bundle exec rspec spec/rosett_ai/ui/` — 42 examples, 0 failures
-- [x] `bundle exec rubocop lib/rosett_ai/ui/` — 0 offenses
-- [x] `bundle exec reek lib/rosett_ai/ui/` — 0 warnings
-- [x] Shared examples pass for Tui adapter (all 7 interface methods)
-- [x] Registry.resolve defaults to :tui when no name given
-- [x] Registry.resolve raises for unknown adapter names
-- [x] accessible? detects ORCA_RUNNING and BRLTTY_TTY environment variables
-- [x] text_direction returns :rtl for ar, he, fa, ur; :ltr for others

data/doc/changes/2026-02-21-cc-config-implementation.md

@@ -1,108 +0,0 @@
-# Claude Code Configuration Compiler Implementation
-
-**Date**: 2026-02-21
-**Branch**: `design_implementation`
-**Design doc**: `conf/design/claude_code_configuration.yml` (P2, draft → approved)
-
-## Summary
-
-Implements the Claude Code configuration compiler — the final P2 design
-document. This delivers a YAML-to-JSON compilation pipeline that transforms
-`conf/claude_code/*.yml` scope files into native Claude Code settings JSON
-files. The compiler handles key remapping, secret resolution, env-key
-merging, scope routing, and validate-only field checking.
-
-## Architecture
-
-```text
-conf/claude_code/                     Source YAML (4 scope files)
-  ├── managed.yml                     → /etc/claude-code/managed-settings.json
-  ├── user.yml                        → ~/.claude/settings.json
-  ├── project.yml                     → .claude/settings.json
-  └── local.yml                       → .claude/settings.local.json
-
-lib/rosett_ai/config/
-  ├── compiler.rb                     Main orchestrator
-  ├── domain_transformer.rb           Domain key mapping + env routing
-  ├── key_map.rb                      Explicit snake_case → camelCase mapping
-  ├── scope_router.rb                 Scope → target path resolution
-  ├── secret_resolver.rb              ${secret:backend:key} parser (NO regex)
-  └── compile_result.rb               Structured result per scope
-```
-
-## New files (19)
-
-| Category | Files |
-|----------|-------|
-| Library | `lib/rosett_ai/config/{compiler,domain_transformer,key_map,scope_router,secret_resolver,compile_result}.rb` |
-| Thor task | `lib/rosett_ai/thor/tasks/config.rb` |
-| Schema | `conf/schemas/claude_code_config_schema.json` |
-| Scope configs | `conf/claude_code/{managed,user,project,local}.yml` |
-| Specs | `spec/rosett_ai/config/{compiler,key_map,scope_router,secret_resolver,compile_result}_spec.rb` |
-| Spec | `spec/rosett_ai/thor/tasks/config_spec.rb` |
-| Docs | `doc/changes/2026-02-21-cc-config-implementation.md` |
-
-## Modified files (9)
-
-| File | Change |
-|------|--------|
-| `lib/rosett_ai/path_resolver.rb` | +5 methods for settings target paths |
-| `lib/rosett_ai/thor/cli.rb` | Register `config` subcommand |
-| `spec/rosett_ai/path_resolver_spec.rb` | Tests for new PathResolver methods |
-| `spec/spec_helper.rb` | Copy claude_code_config_schema.json in test env |
-| `spec/rosett_ai/thor/tasks/validate_spec.rb` | Add claude_code_config to internal schemas |
-| `.reek.yml` | Exclusions for Config::Compiler, SecretResolver, Thor task |
-| `conf/design/claude_code_configuration.yml` | status: draft → approved |
-| `CHANGELOG.md` | CC config compiler entries |
-| `doc/changes/2026-02-21-design-implementation-overview.md` | CC config status update |
-
-## Key design decisions
-
-1. **Explicit KeyMap, not algorithmic conversion** — Claude Code has irregular
-   keys (e.g., `auto_allow_bash` → `autoAllowBashIfSandboxed`). The compiler
-   uses a hardcoded table and raises `KeyMapError` on missing mappings.
-
-2. **NO regex in SecretResolver** — deterministic string parsing only
-   (`start_with?`/`end_with?`/`split`). Eliminates ReDoS vectors.
-
-3. **Single-pass secret resolution** — resolved values are never re-scanned,
-   preventing recursive injection attacks.
-
-4. **Three-target routing** — fields compile to `:json` (settings JSON),
-   `:env` (env key within JSON), or `:validate_only` (checked but not written).
-
-5. **handlers → hooks rename** — YAML uses `handlers` for hook definitions,
-   compiled JSON uses `hooks` (matching Claude Code's native format).
-
-6. **MCP filter key transformation** — `server_name` → `serverName` etc.
-   for managed-scope allowlist/denylist objects.
-
-## Acceptance criteria met (17/17)
-
-| # | Criterion | Evidence |
-|---|-----------|----------|
-| 1 | JSON Schema exists | `conf/schemas/claude_code_config_schema.json` |
-| 2 | Schema enforces scope enum | `"enum": ["managed", "user", "project", "local"]` |
-| 3 | Compile reads YAML → JSON | `Config::Compiler#compile` + Thor task |
-| 4 | user.yml → settings.json | `ScopeRouter` + compiler specs |
-| 5 | project.yml → .claude/settings.json | ScopeRouter routing |
-| 6 | local.yml → settings.local.json | ScopeRouter routing |
-| 7 | managed.yml → /etc/... | ScopeRouter routing |
-| 8 | Secret references resolved | `SecretResolver#resolve_all` |
-| 9 | Secrets never logged | Single-pass, no display |
-| 10 | Missing secrets abort | `SecretError` raised |
-| 11 | Compatibility checked | `check_compatibility` method |
-| 12 | Warnings don't block | Advisory only |
-| 13 | --simulate shows diff | Hand-rolled unified diff |
-| 14 | Schema errors show path | `data_pointer` in error messages |
-| 15 | Idempotent | Checksum comparison |
-| 16 | RSpec tests | Full spec coverage |
-| 17 | No regex in secrets | Deterministic string parsing |
-
-## P2 completion
-
-With this implementation, all three P2 design documents are now approved:
-
-- `architecture.yml` — 8/8 criteria (implemented earlier)
-- `compiler.yml` — 9/9 criteria (implemented earlier)
-- `claude_code_configuration.yml` — 17/17 criteria (this change)