@arbiterforge/ca-pi 0.6.0

package/plugins/ca-pi/generated/command-catalog.json

@@ -0,0 +1,197 @@
+[
+  {
+    "name": "add-dep",
+    "description": "Vet a new or changed third-party dependency for license, provenance, and supply-chain risk before any install runs.",
+    "skillPath": "skills/ca-add-dep/SKILL.md"
+  },
+  {
+    "name": "adr",
+    "description": "Author a numbered, dated, user-attributed Architecture Decision Record under .codearbiter/decisions/.",
+    "skillPath": "skills/ca-adr/SKILL.md"
+  },
+  {
+    "name": "adr-status",
+    "description": "Report the health of Architecture Decision Records — aged, unchallenged, supersession candidates, unresolved CONFIRM-NN. Read-only.",
+    "skillPath": "skills/ca-adr-status/SKILL.md"
+  },
+  {
+    "name": "arbiter",
+    "description": "Exit maintainer dev mode — restore orchestration, remove the dev marker, log the exit.",
+    "skillPath": "skills/ca-arbiter/SKILL.md"
+  },
+  {
+    "name": "audit",
+    "description": "Assemble the governance record for a range — commits, overrides, ADRs, sprint auto-decisions, open questions, checkpoint findings — into one dated audit packet. Read-only.",
+    "skillPath": "skills/ca-audit/SKILL.md"
+  },
+  {
+    "name": "btw",
+    "description": "Lightweight Q&A about the project — answer from context and return, no routing, no state change.",
+    "skillPath": "skills/ca-btw/SKILL.md"
+  },
+  {
+    "name": "checkpoint",
+    "description": "Periodic multi-reviewer sweep of the whole codebase — surfaces a triaged checkpoint report.",
+    "skillPath": "skills/ca-checkpoint/SKILL.md"
+  },
+  {
+    "name": "chore",
+    "description": "Sanctioned lane for non-behavioral work — docs-only edits, dependency bumps, reverts. Type-scaled gates; no TDD demanded of prose.",
+    "skillPath": "skills/ca-chore/SKILL.md"
+  },
+  {
+    "name": "cleanup",
+    "description": "Finish an already-merged branch — classify the leftover artifacts, return to a fast-forwarded default checkout, and delete the merged local branch. Every discard confirmed per item; containment proven, never assumed.",
+    "skillPath": "skills/ca-cleanup/SKILL.md"
+  },
+  {
+    "name": "commands",
+    "description": "Show the codeArbiter command catalog — the public command list and what each routes to.",
+    "skillPath": "skills/ca-commands/SKILL.md"
+  },
+  {
+    "name": "commit",
+    "description": "Run the full commit gate — the only sanctioned path to a git commit.",
+    "skillPath": "skills/ca-commit/SKILL.md"
+  },
+  {
+    "name": "conflict",
+    "description": "Stop everything and surface a rule conflict — persona vs. docs vs. code. Present both sides and the conflict-hierarchy level; the user resolves. No silent reconciliation.",
+    "skillPath": "skills/ca-conflict/SKILL.md"
+  },
+  {
+    "name": "context-check",
+    "description": "Optional manual drift audit — report stale provenance-tracked docs, then per stale doc offer re-scout, re-baseline, or defer. Not the daily loop; commit-gate auto-heal owns routine maintenance.",
+    "skillPath": "skills/ca-context-check/SKILL.md"
+  },
+  {
+    "name": "create-context",
+    "description": "Brownfield back-fill — scout an existing codebase and populate .codearbiter/, then lock it initialized.",
+    "skillPath": "skills/ca-create-context/SKILL.md"
+  },
+  {
+    "name": "debug",
+    "description": "Investigate-then-decide root-cause analysis for a defect whose cause is unknown. No code changes — exits to /ca-fix, /ca-adr, or a no-action close.",
+    "skillPath": "skills/ca-debug/SKILL.md"
+  },
+  {
+    "name": "decompose",
+    "description": "Greenfield decomposition interview — a layered interview that populates .codearbiter/ and locks it initialized.",
+    "skillPath": "skills/ca-decompose/SKILL.md"
+  },
+  {
+    "name": "dev",
+    "description": "Maintainer override — suspend orchestration to edit codeArbiter itself. Env-gated (CODEARBITER_DEV=1), entry/exit logged to overrides.log.",
+    "skillPath": "skills/ca-dev/SKILL.md"
+  },
+  {
+    "name": "doctor",
+    "description": "Verify the active host install, package, command ownership, enforcement, wrapper self-test, and active-dispatch coverage gap. Read-only.",
+    "skillPath": "skills/ca-doctor/SKILL.md"
+  },
+  {
+    "name": "feature",
+    "description": "Start a feature: brainstorm a spec, get it approved, then drive it test-first through the pipeline. The one entry to implementation.",
+    "skillPath": "skills/ca-feature/SKILL.md"
+  },
+  {
+    "name": "fix",
+    "description": "Fix a confirmed bug: a failing regression test first, then a minimal fix, then the rest of the tdd gates.",
+    "skillPath": "skills/ca-fix/SKILL.md"
+  },
+  {
+    "name": "init",
+    "description": "Opt this repo into codeArbiter — scaffold the root-level .codearbiter/ state store.",
+    "skillPath": "skills/ca-init/SKILL.md"
+  },
+  {
+    "name": "metrics",
+    "description": "Read-only 3-metric governance glance — override rate, small-lane rate, sprint low-confidence ratio — each with a trend arrow vs. the prior 20-commit window.",
+    "skillPath": "skills/ca-metrics/SKILL.md"
+  },
+  {
+    "name": "new-skill",
+    "description": "Author a new codeArbiter skill: prove the gap is real, get the spec approved, then write it.",
+    "skillPath": "skills/ca-new-skill/SKILL.md"
+  },
+  {
+    "name": "override",
+    "description": "Sanctioned, logged bypass of a gate or hard rule — one audit line, then proceed.",
+    "skillPath": "skills/ca-override/SKILL.md"
+  },
+  {
+    "name": "pr",
+    "description": "Open a pull request the only sanctioned way — clear every BLOCK-level review finding, then stage the PR. Never a direct write to the default branch.",
+    "skillPath": "skills/ca-pr/SKILL.md"
+  },
+  {
+    "name": "preview",
+    "description": "Zero-onboarding, read-only dry-run of the reviewer fleet against the current uncommitted diff. Predicts reviewers, runs the state-free secret scan, writes nothing.",
+    "skillPath": "skills/ca-preview/SKILL.md"
+  },
+  {
+    "name": "prune",
+    "description": "Trim transcript clutter to extend session lifetime — analyze, prune a copy, or toggle the after-each-turn service. Dry-run by default; gains land at resume/compaction, not the current turn.",
+    "skillPath": "skills/ca-prune/SKILL.md"
+  },
+  {
+    "name": "reconcile",
+    "description": "SMARTS arbitration — reconcile architectural artifacts against the scaffold and prior decisions; every variance resolved by an explicit, user-attributed choice.",
+    "skillPath": "skills/ca-reconcile/SKILL.md"
+  },
+  {
+    "name": "refactor",
+    "description": "Restructure code with behavioral parity proven through unmodified pre-existing tests, then refactor. No behavior change.",
+    "skillPath": "skills/ca-refactor/SKILL.md"
+  },
+  {
+    "name": "release",
+    "description": "Cut a release the only sanctioned way — SemVer bump from the commit log, a CHANGELOG section, an annotated tag. Takes the declared target's name as its only argument, or --dry-run to preview one with no write. The only path to a version tag.",
+    "skillPath": "skills/ca-release/SKILL.md"
+  },
+  {
+    "name": "review",
+    "description": "Review a diff with the reviewer fleet, funneled to one triaged verdict. Targets the current working diff, a path, or an inbound GitHub PR.",
+    "skillPath": "skills/ca-review/SKILL.md"
+  },
+  {
+    "name": "spike",
+    "description": "Exploratory spike on a throwaway branch — answer a named question with disposable code. Never merges; exits to a findings note or /ca-feature.",
+    "skillPath": "skills/ca-spike/SKILL.md"
+  },
+  {
+    "name": "sprint",
+    "description": "Autonomous sprint — one interactive spec gate, then plan-to-PR execution with every auto-decision SMARTS-scored and logged. Hard gates remain true stops.",
+    "skillPath": "skills/ca-sprint/SKILL.md"
+  },
+  {
+    "name": "standup",
+    "description": "Daily repo hygiene — review the day's repo state, then perform the cleanups under per-action confirmation. Fast-forward only, never destructive without a yes.",
+    "skillPath": "skills/ca-standup/SKILL.md"
+  },
+  {
+    "name": "status",
+    "description": "Show the project's current state at a glance — stage, open tasks, open questions, overrides since the last checkpoint, current branch. Read-only.",
+    "skillPath": "skills/ca-status/SKILL.md"
+  },
+  {
+    "name": "task",
+    "description": "The sanctioned task-board mutator — add a queued task, start one (flips to in-progress and stamps the date, minting a dotted ID on pick-up), or mark an in-progress task done. The only blessed write to open-tasks.md.",
+    "skillPath": "skills/ca-task/SKILL.md"
+  },
+  {
+    "name": "threat-model",
+    "description": "Opt-in lightweight STRIDE pass for a sensitive feature before implementation. Not a routine gate — invoke it when a change warrants security thought.",
+    "skillPath": "skills/ca-threat-model/SKILL.md"
+  },
+  {
+    "name": "tribunal",
+    "description": "Deep, rarely-convened whole-codebase audit — eleven specialist lenses, a resumable on-disk audit log, findings filed as GitHub issues on approval. Expensive; estimates cost and STOPs before running. Never a required gate.",
+    "skillPath": "skills/ca-tribunal/SKILL.md"
+  },
+  {
+    "name": "watch",
+    "description": "Watch a PR's CI to completion — diagnose on red, notify and offer the merge on green. Never auto-merges.",
+    "skillPath": "skills/ca-watch/SKILL.md"
+  }
+]

package/plugins/ca-pi/generated/roles.json

@@ -0,0 +1,213 @@
+[
+  {
+    "name": "architecture-drift-reviewer",
+    "classification": "reviewer",
+    "charterPath": "agents/architecture-drift-reviewer.md",
+    "skillPaths": [
+      "routines/decision-variance/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash"
+    ]
+  },
+  {
+    "name": "auth-crypto-reviewer",
+    "classification": "reviewer",
+    "charterPath": "agents/auth-crypto-reviewer.md",
+    "skillPaths": [
+      "routines/secret-handling/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash"
+    ]
+  },
+  {
+    "name": "backend-author",
+    "classification": "author",
+    "charterPath": "agents/backend-author.md",
+    "skillPaths": [
+      "routines/tdd/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash",
+      "edit",
+      "write"
+    ]
+  },
+  {
+    "name": "checkpoint-aggregator",
+    "classification": "reviewer",
+    "charterPath": "agents/checkpoint-aggregator.md",
+    "skillPaths": [],
+    "tools": [
+      "read",
+      "bash",
+      "write"
+    ]
+  },
+  {
+    "name": "coverage-auditor",
+    "classification": "reviewer",
+    "charterPath": "agents/coverage-auditor.md",
+    "skillPaths": [
+      "routines/tdd/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash"
+    ]
+  },
+  {
+    "name": "decision-challenger",
+    "classification": "reviewer",
+    "charterPath": "agents/decision-challenger.md",
+    "skillPaths": [
+      "routines/decision-variance/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash"
+    ]
+  },
+  {
+    "name": "dependency-reviewer",
+    "classification": "reviewer",
+    "charterPath": "agents/dependency-reviewer.md",
+    "skillPaths": [],
+    "tools": [
+      "read",
+      "bash"
+    ]
+  },
+  {
+    "name": "design-quality-reviewer",
+    "classification": "reviewer",
+    "charterPath": "agents/design-quality-reviewer.md",
+    "skillPaths": [],
+    "tools": [
+      "read"
+    ]
+  },
+  {
+    "name": "finding-triage",
+    "classification": "reviewer",
+    "charterPath": "agents/finding-triage.md",
+    "skillPaths": [],
+    "tools": [
+      "read"
+    ]
+  },
+  {
+    "name": "frontend-author",
+    "classification": "author",
+    "charterPath": "agents/frontend-author.md",
+    "skillPaths": [
+      "routines/tdd/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash",
+      "edit",
+      "write"
+    ]
+  },
+  {
+    "name": "grader",
+    "classification": "reviewer",
+    "charterPath": "agents/grader.md",
+    "skillPaths": [
+      "routines/decision-variance/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash"
+    ]
+  },
+  {
+    "name": "infra-author",
+    "classification": "author",
+    "charterPath": "agents/infra-author.md",
+    "skillPaths": [
+      "routines/tdd/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash",
+      "edit",
+      "write"
+    ]
+  },
+  {
+    "name": "map-deps",
+    "classification": "reviewer",
+    "charterPath": "agents/map-deps.md",
+    "skillPaths": [
+      "routines/tribunal/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash"
+    ]
+  },
+  {
+    "name": "map-structure",
+    "classification": "reviewer",
+    "charterPath": "agents/map-structure.md",
+    "skillPaths": [
+      "routines/tribunal/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash"
+    ]
+  },
+  {
+    "name": "migration-reviewer",
+    "classification": "reviewer",
+    "charterPath": "agents/migration-reviewer.md",
+    "skillPaths": [],
+    "tools": [
+      "read",
+      "bash"
+    ]
+  },
+  {
+    "name": "scout",
+    "classification": "reviewer",
+    "charterPath": "agents/scout.md",
+    "skillPaths": [
+      "routines/decision-variance/SKILL.md",
+      "routines/context-creation/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash"
+    ]
+  },
+  {
+    "name": "security-reviewer",
+    "classification": "reviewer",
+    "charterPath": "agents/security-reviewer.md",
+    "skillPaths": [],
+    "tools": [
+      "read",
+      "bash"
+    ]
+  },
+  {
+    "name": "tribunal-lens-reviewer",
+    "classification": "reviewer",
+    "charterPath": "agents/tribunal-lens-reviewer.md",
+    "skillPaths": [
+      "routines/tribunal/SKILL.md"
+    ],
+    "tools": [
+      "read",
+      "bash",
+      "write"
+    ]
+  }
+]

package/plugins/ca-pi/helpers/windows-supervisor.js

@@ -0,0 +1,205 @@
+// src/windows-supervisor.ts
+import { spawn } from "node:child_process";
+import { isAbsolute } from "node:path";
+import { createReadStream, createWriteStream } from "node:fs";
+import { Socket } from "node:net";
+var MAX_LAUNCH_BYTES = 3145728;
+var MAX_CONTROL_BYTES = 16;
+var MAX_ENV_ENTRIES = 256;
+var MAX_ENV_BYTES = 262144;
+var PROXY_DRAIN_MS = 500;
+var START = "START\n";
+var launchInput = createReadStream("", { fd: 4, autoClose: false });
+var controlInput = createReadStream("", { fd: 5, autoClose: false });
+var statusOutput = createWriteStream("", { fd: 6, autoClose: false });
+var parentLeash = new Socket({ fd: 7, readable: true, writable: false });
+function exactObject(value, keys) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+  const actual = Object.keys(value).sort();
+  return actual.length === keys.length && actual.every((key, index) => key === [...keys].sort()[index]);
+}
+function parseLaunch(value) {
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    throw new Error("invalid launch record");
+  }
+  if (!exactObject(parsed, ["args", "command", "cwd", "env"])) throw new Error("invalid launch record");
+  const { args, command, cwd, env } = parsed;
+  if (typeof command !== "string" || !isAbsolute(command) || typeof cwd !== "string" || !isAbsolute(cwd) || !Array.isArray(args) || args.length > 256 || args.some((item) => typeof item !== "string" || Buffer.byteLength(item, "utf8") > 262144) || !Array.isArray(env) || env.length > MAX_ENV_ENTRIES) {
+    throw new Error("invalid launch record");
+  }
+  let environmentBytes = 0;
+  const environment = /* @__PURE__ */ Object.create(null);
+  for (const entry of env) {
+    if (!Array.isArray(entry) || entry.length !== 2) throw new Error("invalid launch record");
+    const [key, value2] = entry;
+    if (typeof key !== "string" || key.length === 0 || key.length > 256 || key.includes("\0") || Buffer.byteLength(key, "utf8") > 512 || typeof value2 !== "string" || value2.length > 32768 || value2.includes("\0") || Buffer.byteLength(value2, "utf8") > 65536 || Object.hasOwn(environment, key)) throw new Error("invalid launch record");
+    environmentBytes += Buffer.byteLength(key, "utf8") + Buffer.byteLength(value2, "utf8");
+    if (environmentBytes > MAX_ENV_BYTES) throw new Error("invalid launch record");
+    environment[key] = value2;
+  }
+  return Object.freeze({
+    args: Object.freeze([...args]),
+    command,
+    cwd,
+    env: Object.freeze(environment)
+  });
+}
+function boundedRead(stream, maximum) {
+  return new Promise((resolve, reject) => {
+    let bytes = 0;
+    let value = "";
+    stream.setEncoding?.("utf8");
+    stream.on("data", (chunk) => {
+      const text = typeof chunk === "string" ? chunk : chunk.toString("utf8");
+      bytes += Buffer.byteLength(text, "utf8");
+      if (bytes > maximum) reject(new Error("bounded supervisor protocol overflow"));
+      else value += text;
+    });
+    stream.once("end", () => resolve(value));
+    stream.once("error", reject);
+  });
+}
+var started = false;
+var child;
+var failureReason;
+var failClosed = () => {
+  process.exitCode = 70;
+  try {
+    parentLeash.destroy();
+  } catch {
+  }
+  try {
+    launchInput.destroy();
+  } catch {
+  }
+  try {
+    controlInput.destroy();
+  } catch {
+  }
+  try {
+    statusOutput.destroy();
+  } catch {
+  }
+  setImmediate(() => process.exit(70));
+};
+function waitForReadableDrain(stream) {
+  if (stream.readableEnded === true) return Promise.resolve();
+  return new Promise((resolveDrain) => {
+    let settled = false;
+    const finish = () => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      resolveDrain();
+    };
+    const timer = setTimeout(finish, PROXY_DRAIN_MS);
+    stream.once("end", finish);
+    stream.once("close", finish);
+    stream.once("error", finish);
+  });
+}
+function waitForWritableDrain(stream) {
+  if (stream.writableNeedDrain !== true) return Promise.resolve();
+  return new Promise((resolveDrain) => {
+    let settled = false;
+    const finish = () => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      resolveDrain();
+    };
+    const timer = setTimeout(finish, PROXY_DRAIN_MS);
+    stream.once("drain", finish);
+    stream.once("close", finish);
+    stream.once("error", finish);
+  });
+}
+parentLeash.once("end", failClosed);
+parentLeash.once("error", failClosed);
+parentLeash.resume();
+process.once("disconnect", failClosed);
+try {
+  failureReason = "proto-overflow";
+  const [launchText, control] = await Promise.all([
+    boundedRead(launchInput, MAX_LAUNCH_BYTES),
+    boundedRead(controlInput, MAX_CONTROL_BYTES)
+  ]);
+  failureReason = "launch-malformed";
+  if (control !== START || started) throw new Error("invalid supervisor control state");
+  started = true;
+  const launch = parseLaunch(launchText);
+  failureReason = "spawn-error";
+  child = spawn(launch.command, [...launch.args], {
+    cwd: launch.cwd,
+    env: launch.env,
+    detached: false,
+    shell: false,
+    stdio: ["pipe", "pipe", "pipe", "pipe"],
+    windowsHide: true
+  });
+  const capability = child.stdio[3];
+  if (child.stdin === null || child.stdout === null || child.stderr === null || capability === null || capability === void 0 || typeof capability.write !== "function") {
+    failureReason = "pipe-unavailable";
+    throw new Error("Pi proxy pipes unavailable");
+  }
+  let proxyReady = false;
+  let exitFinalized = false;
+  let observedExit;
+  let capabilityInput;
+  const finalizeExit = (code) => {
+    observedExit = Object.freeze({ code });
+    if (!proxyReady || exitFinalized) return;
+    exitFinalized = true;
+    process.stdin.unpipe(child.stdin);
+    capabilityInput.unpipe(capability);
+    capabilityInput.destroy();
+    child.stdin.destroy();
+    capability.destroy?.();
+    void Promise.all([
+      waitForReadableDrain(child.stdout),
+      waitForReadableDrain(child.stderr)
+    ]).then(async () => await Promise.all([
+      waitForWritableDrain(process.stdout),
+      waitForWritableDrain(process.stderr)
+    ])).finally(() => process.exit(typeof code === "number" ? code : 71));
+  };
+  child.once("exit", finalizeExit);
+  failureReason = "spawn-error";
+  await new Promise((resolve, reject) => {
+    child.once("spawn", resolve);
+    child.once("error", reject);
+  });
+  failureReason = "pid-invalid";
+  if (child.pid === void 0 || !Number.isSafeInteger(child.pid) || child.pid <= 0) {
+    throw new Error("Pi pid unavailable");
+  }
+  if ((child.exitCode !== null || child.signalCode !== null) && observedExit === void 0) {
+    observedExit = Object.freeze({ code: child.exitCode });
+  }
+  process.stdin.pipe(child.stdin);
+  child.stdout.pipe(process.stdout);
+  child.stderr.pipe(process.stderr);
+  capabilityInput = createReadStream("", { fd: 3, autoClose: false });
+  capabilityInput.pipe(capability);
+  proxyReady = true;
+  statusOutput.end(`STARTED ${child.pid}
+`);
+  if (observedExit !== void 0) queueMicrotask(() => finalizeExit(observedExit.code));
+} catch {
+  try {
+    await Promise.race([
+      new Promise((resolveFlush) => {
+        statusOutput.end(`REFUSED${failureReason === void 0 ? "" : ` ${failureReason}`}
+`, () => resolveFlush());
+      }),
+      new Promise((resolveTimeout) => {
+        setTimeout(resolveTimeout, PROXY_DRAIN_MS).unref?.();
+      })
+    ]);
+  } catch {
+  }
+  failClosed();
+}