@dzhechkov/p-replicator 1.13.1 → 1.13.2

package/.dz-manifest.json

@@ -21,7 +21,7 @@
       },
       {
         "path": "README.md",
-        "sha256": "103d3f0520f79080445d07623b70195d7b34cae6d875eb60978aec254aca5c88"
+        "sha256": "a70fc43d33972f0472a3fdb6628f79b22c5a4cdd459b5d89bce06e240ca93bf1"
       },
       {
         "path": "README/eng/01_quickstart.md",
@@ -109,11 +109,11 @@
       },
       {
         "path": "package.json",
-        "sha256": "2bacb5f426c3873d186bf142e95cb72d81a098c35f091a54b80d3d86e97fc1fb"
+        "sha256": "c9186f299be209dd8aecd28229225dece4fdb76e6750a0d43c31ae19cbeda387"
       },
       {
         "path": "scripts/check-pipeline-gaps.sh",
-        "sha256": "349dbc45876cd5765ae48ff2224ab7f96d5df01a0d86361866b7740ed3cf4de0"
+        "sha256": "06e3dae22c533a81732b9870ae42d6b80b6e8419b3c90e11e1910e2a46888be8"
       },
       {
         "path": "src/cli.js",
@@ -149,7 +149,7 @@
       },
       {
         "path": "src/utils.js",
-        "sha256": "2ab6ff0a3e15f9a9d5787077628e19936c3c9735b1549b1233ec4a331c2fd3f7"
+        "sha256": "86ed569a58e07f5aa2d31f6b932019345bc33abc00f5185601eb1f6ef9ce3815"
       },
       {
         "path": "templates/.claude/agents/doc-validator.md",
@@ -177,7 +177,7 @@
       },
       {
         "path": "templates/.claude/commands/feature.md",
-        "sha256": "b2bb83fce09f823a36c943f397d63ff9d9406da1dadc055c4f187f8ff964d1ce"
+        "sha256": "6908fa6c8ba770f829378a021d5f7e9a9bc79a15bdd67b278d8c6a765968b291"
       },
       {
         "path": "templates/.claude/commands/go.md",
@@ -279,6 +279,10 @@
         "path": "templates/.claude/hooks/check-ports.cjs",
         "sha256": "2b458cf78367ec7752174f08aa40109b3b6217e405f99a46e18e75e4b69bc87e"
       },
+      {
+        "path": "templates/.claude/hooks/check-review-contract.cjs",
+        "sha256": "44e32ea31a4a71ceb6eccb0956006519de270eab787a79ab4884978bc04385ab"
+      },
       {
         "path": "templates/.claude/hooks/check-source-version.cjs",
         "sha256": "b9dc2eee7403119481ea2c49a94581613f2c134685448736c2734948a638a010"
@@ -301,7 +305,7 @@
       },
       {
         "path": "templates/.claude/hooks/statusline.cjs",
-        "sha256": "6e30ccdcdbe3c36896b85821f8986077a0e4065fdff3b103d669fac7ad44670e"
+        "sha256": "50c08decec3e80ed325f50d7b062fbe0add47e8594002fcc165248492242ab56"
       },
       {
         "path": "templates/.claude/hooks/write-insight.cjs",
@@ -349,7 +353,7 @@
       },
       {
         "path": "templates/.claude/rules/replicate-pipeline.md",
-        "sha256": "879ca7b6ca9039c7b94f6b9df2eadca9ec5fd0f97da5f468d5ee723f3d47f438"
+        "sha256": "13bf073273820addeb87167402495b2f683cefac70a9f6cb07b6e054b1851e0f"
       },
       {
         "path": "templates/.claude/rules/skill-interface-protocol.md",
@@ -717,7 +721,7 @@
       },
       {
         "path": "templates/.claude/skills/requirements-validator/SKILL.md",
-        "sha256": "d2b8e71f4053c642f455a0f245ae18471ab25b7a21e0658f0fe410912a47bf8b"
+        "sha256": "b4b394adf08feee552f39c83331398f119e0d4abf21e683fe4706da438b4a426"
       },
       {
         "path": "templates/.claude/skills/requirements-validator/assets/templates/bdd-feature-template.feature",
@@ -727,13 +731,17 @@
         "path": "templates/.claude/skills/requirements-validator/references/bdd-patterns.md",
         "sha256": "04611a8c52c81f3a6d4fc2f9661ebc56159a125b6fb44a4d18b432e2b82de6e3"
       },
+      {
+        "path": "templates/.claude/skills/requirements-validator/references/feature-report-contracts.md",
+        "sha256": "df263cbce17fb5d9dec6514561c66f6283b3f19e2fc85056f0531bac615be0f1"
+      },
       {
         "path": "templates/.claude/skills/requirements-validator/references/invest-criteria.md",
         "sha256": "ac6976adf776b9b60c784e1a0f6a0d96dd3332b16f4c12b72d3e59f9325bb626"
       },
       {
         "path": "templates/.claude/skills/requirements-validator/references/scoring-system.md",
-        "sha256": "49afe072f31f5b4f9a33f6b59487244f494b0f5587b6cc10c797c4de59510114"
+        "sha256": "72104b74f07e0610f67f00b246b5225a530203bff225bacf7bf384bc6fd21cdf"
       },
       {
         "path": "templates/.claude/skills/requirements-validator/references/smart-criteria.md",
@@ -807,6 +815,10 @@
         "path": "templates/.claude/skills/sparc-prd-mini/templates/prd.md",
         "sha256": "7b4497bc76bb421fae7a07ecb46af01e021412180a394a5487a3c3c42dc004b6"
       },
+      {
+        "path": "tests/e2e/feature-contour.test.js",
+        "sha256": "a6e7c00e86fae150b834234efe34c2837da63b6794117a1bffd5c0de13505fe1"
+      },
       {
         "path": "tests/e2e/lifecycle.test.js",
         "sha256": "4c51f9c38396b115a875f397168b82c50312c2b93436b32ae501ac3bd0978fc9"
@@ -815,6 +827,38 @@
         "path": "tests/e2e/packed-insights-writer.test.js",
         "sha256": "3477f63db3f531e3c2970b85d784f22d268695030764319457a543b2e9d49758"
       },
+      {
+        "path": "tests/fixtures/feature-contour/docs/features/demo-gate/01_specification.md",
+        "sha256": "264708a769ad0d07d715420d82278461c5f1b831dd365eaaf6be051db18d47e8"
+      },
+      {
+        "path": "tests/fixtures/feature-contour/docs/features/demo-gate/02_pseudocode.md",
+        "sha256": "c8e58b32bdc9df32ad95f4eca2fb8625fe8e39194ad01fbd2a1b4abee6e6d7d4"
+      },
+      {
+        "path": "tests/fixtures/feature-contour/docs/features/demo-gate/03_architecture.md",
+        "sha256": "7bebb1ac66f026a0c95afd986b17af60155be99e17d874f260106515b229bd14"
+      },
+      {
+        "path": "tests/fixtures/feature-contour/docs/features/demo-gate/04_refinement.md",
+        "sha256": "b7f285a4070bfb8dd47c14be11149412c3df4663b99762a2fc05be24f2fa1b1e"
+      },
+      {
+        "path": "tests/fixtures/feature-contour/docs/features/demo-gate/05_completion.md",
+        "sha256": "62eeec7cd3101fa0159c03bd17d5100a86d8ba29a1189cdc06f8b190c01c1dd8"
+      },
+      {
+        "path": "tests/fixtures/feature-contour/docs/features/demo-gate/review-report.md",
+        "sha256": "12f8fa21aedeb2f73bdd8ff16f0c28e053693ec11815616181c085a31058436c"
+      },
+      {
+        "path": "tests/fixtures/feature-contour/docs/features/demo-gate/validation-report.md",
+        "sha256": "4e1244a874996b522d07b9f23478bbe2416ed34f7b8cedbae460ada07dfd448f"
+      },
+      {
+        "path": "tests/fixtures/feature-contour/tests/demo.test.js",
+        "sha256": "812a837075839d3b86367149a60f6e859d7623775788e10adaef53e5b249b20d"
+      },
       {
         "path": "tests/fixtures/prep-traceability-fixture/docs/features/order-refund/01_specification.md",
         "sha256": "86e366e17ff16f7dbe161bdd1bf3351212e6bb2bac7a5d2c20616fb9c6fd454a"
@@ -825,7 +869,7 @@
       },
       {
         "path": "tests/snapshot/baseline.json",
-        "sha256": "5eac599ea36b23f93b4f12de64da7ff1daff2df148032cc6fbf146ef8c0f7429"
+        "sha256": "2e442fcb5f39de9f94c2284d385368f2e984bb17998556c41ac9f4f676a6134e"
       },
       {
         "path": "tests/snapshot/templates.test.js",
@@ -915,6 +959,10 @@
         "path": "tests/unit/check-ports.test.js",
         "sha256": "fbaf222bdde5fc30835d454de9cd1532a85a371c35108f23798902d20a7e152d"
       },
+      {
+        "path": "tests/unit/check-review-contract.test.js",
+        "sha256": "75d59bc1b45abc2e1b5723560d79533e0a767e75fc50024c8a13f34540a55e59"
+      },
       {
         "path": "tests/unit/check-source-version.test.js",
         "sha256": "c5b457c22585c78fdc081ebe383ea5c24c2e2ef7a9bf04a6531005d791a9521e"
@@ -985,7 +1033,7 @@
       },
       {
         "path": "tests/unit/honest-failure-rules.test.js",
-        "sha256": "b8674f0ce01c888b9a0fa5da0ad707c171412c9ac8fc4dcd55d2d5a5ea989438"
+        "sha256": "176115fafdca146eff0ebf87361fe6d0f26c7c3621cda03da0140ab72ba9f1ac"
       },
       {
         "path": "tests/unit/hooks-project-anchored.test.js",
@@ -1057,7 +1105,11 @@
       },
       {
         "path": "tests/unit/sync-templates-guard.test.js",
-        "sha256": "e4fc7687dcf37d17bf2a059d3248c8c00526c104f6a0f6e104fa9ca6e00039ae"
+        "sha256": "a601c25a1b1e697140d76216bcdabb80c86528f7bc81654581dd0c4dc43188d8"
+      },
+      {
+        "path": "tests/unit/traceability-completion-gate.test.js",
+        "sha256": "082c141de9995c1d8bc51857b598d33e4a3f4947c325671283d3c6c70d224397"
       },
       {
         "path": "tests/unit/traceability-machine-ids.test.js",
@@ -1077,5 +1129,5 @@
       }
     ]
   },
-  "signature": "TssEwAMj9F/eOsspomZ1REWHcGRYm7uFGTXFm3zJCJKm42duzyzK/KAOdG0XjEqEESRo51vveq8jklxEu0wmAQ=="
+  "signature": "3K1btPFoe+6u7Nk2opxXnAGF/NbPIv3vow6HbjRyiaCvDUVAUf/KLukvcH9uxbz9eZlTilznynFrRLZmEpj5Dw=="
 }

package/README.md

@@ -256,6 +256,24 @@ EOF
 
 Full recipe: see [User Guide](./README/eng/02_user_guide.md#feature-workflow-in-an-existing-project-mode-2) ([RU](./README/ru/02_user_guide.md#feature-workflow-в-существующем-проекте-mode-2)).
 
+### Three traceability gates
+
+Byte-level formats of the three reports (`validation-report.md`, `05_completion.md`, `review-report.md`) live in `templates/.claude/skills/requirements-validator/references/feature-report-contracts.md`; `/feature` names them per phase, the gates below enforce them. The shared `brutal-honesty-review` skill stays byte-identical to its canonical copy — the specification contract is a `/feature` obligation, not a change to the generic reviewer.
+
+`/feature` refuses silent traceability loss at validation, implementation, and review. The
+requirements score also has a `Traceability = 0` blocking floor: without a `## Criterion scenarios`
+table mapping every AC id to a named scenario, a high average cannot advance the story.
+
+| Check | Command | Expected pass | Example named gap |
+|---|---|---|---|
+| Machine-key traceability and the scoring floor's input | `bash "$CHECK_PIPELINE_GAPS" "${CLAUDE_PROJECT_DIR:-.}" --traceability` | `PASS traceability: 3 AC ids mapped to 3 scenarios` | `GAP AC-checkout-2: no named scenario in 02_pseudocode.md` |
+| Validation report is bound to the current specification bytes | `bash "$CHECK_PIPELINE_GAPS" "${CLAUDE_PROJECT_DIR:-.}" --report-revision` | `PASS report-revision: validation-report.md matches 01_specification.md` | `GAP report-revision: validation=4f27c19c9b20 specification=8ab35d68e021` |
+| Every criterion names a real test file and title | `bash "$CHECK_PIPELINE_GAPS" "${CLAUDE_PROJECT_DIR:-.}" --completion` | `PASS completion: 3 AC ids covered by tests` | `GAP AC-checkout-2: test title not found in tests/checkout.test.js` |
+| Review discloses its family and answers the exact specification revision | `node "${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/check-review-contract.cjs" "${CLAUDE_PROJECT_DIR:-.}" "checkout"` | `PASS review-contract feature=checkout AC-ids=3 rows=3` | `GAP AC-checkout-2 has no Spec conformance row` |
+
+All four commands use the same fail-closed convention: exit `0` passes, exit `1` prints every named
+gap, and exit `2` means the inputs could not be established. Neither non-zero result is a warning.
+
 ---
 
 ## 📦 Installation
@@ -592,7 +610,7 @@ npx @dzhechkov/p-replicator verify
 
 The command checks:
 
-- **Pre-shipped contract** (must-have): 10 skills + 11 commands + 4 agents + 13 rules + settings.json + 24 hooks
+- **Pre-shipped contract** (must-have): 10 skills + 11 commands + 4 agents + 13 rules + settings.json + 25 hooks
 - **Post-/replicate hints** (advisory): CLAUDE.md, project-specific agents, feature-roadmap.json, security rules, etc.
 
 **Exit codes:**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/p-replicator",
-  "version": "1.13.1",
+  "version": "1.13.2",
   "description": "P-Replicator — Claude Code toolkit for AI-assisted product development (Vibe Coding). Full /replicate pipeline, 10 modular skills (880K+ chars), /harvest knowledge extraction, swarm agents, quality gates, security patterns, cross-project learning.",
   "main": "src/cli.js",
   "bin": {
@@ -73,8 +73,8 @@
     "access": "public"
   },
   "scripts": {
-    "test": "node --test tests/unit/honest-failure-rules.test.js tests/unit/generator-swarm-contract.test.js tests/unit/check-swarm-receipts.test.js tests/unit/check-embed-contract.test.js tests/unit/check-model-cost.test.js tests/unit/check-canon.test.js tests/unit/check-file-ownership.test.js tests/unit/check-source-version.test.js tests/unit/check-handoff-manifest.test.js tests/unit/check-external-deps.test.js tests/unit/check-metric-source.test.js tests/unit/negative-conclusion-gate.test.js tests/unit/check-webhook-contract.test.js tests/unit/check-job-contract.test.js tests/unit/detection-ladder-contract.test.js tests/unit/detection-ladder-registry.test.js tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/insights-dz-delegation.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/doctor-insight-flow.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/check-look-trace.test.js tests/unit/check-look-origin.test.js tests/unit/quote-provenance.test.js tests/unit/guard-honest-input-meta.test.js tests/unit/look-phase-contract.test.js tests/unit/capture-source-path.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js tests/unit/insights-writer.test.js tests/unit/check-pipeline-gaps.test.js tests/unit/traceability-machine-ids.test.js tests/unit/traceability-negative-fixture.test.js tests/e2e/lifecycle.test.js tests/e2e/packed-insights-writer.test.js tests/snapshot/templates.test.js",
-    "test:unit": "node --test tests/unit/honest-failure-rules.test.js tests/unit/generator-swarm-contract.test.js tests/unit/check-swarm-receipts.test.js tests/unit/check-embed-contract.test.js tests/unit/check-model-cost.test.js tests/unit/check-canon.test.js tests/unit/check-file-ownership.test.js tests/unit/check-source-version.test.js tests/unit/check-handoff-manifest.test.js tests/unit/check-external-deps.test.js tests/unit/check-metric-source.test.js tests/unit/negative-conclusion-gate.test.js tests/unit/check-webhook-contract.test.js tests/unit/check-job-contract.test.js tests/unit/detection-ladder-contract.test.js tests/unit/detection-ladder-registry.test.js tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/insights-dz-delegation.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/doctor-insight-flow.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/check-look-trace.test.js tests/unit/check-look-origin.test.js tests/unit/quote-provenance.test.js tests/unit/guard-honest-input-meta.test.js tests/unit/look-phase-contract.test.js tests/unit/capture-source-path.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js tests/unit/insights-writer.test.js tests/unit/check-pipeline-gaps.test.js tests/unit/traceability-machine-ids.test.js tests/unit/traceability-negative-fixture.test.js",
+    "test": "node --test tests/unit/honest-failure-rules.test.js tests/unit/generator-swarm-contract.test.js tests/unit/check-swarm-receipts.test.js tests/unit/check-embed-contract.test.js tests/unit/check-model-cost.test.js tests/unit/check-canon.test.js tests/unit/check-file-ownership.test.js tests/unit/check-source-version.test.js tests/unit/check-handoff-manifest.test.js tests/unit/check-external-deps.test.js tests/unit/check-metric-source.test.js tests/unit/negative-conclusion-gate.test.js tests/unit/check-webhook-contract.test.js tests/unit/check-job-contract.test.js tests/unit/detection-ladder-contract.test.js tests/unit/detection-ladder-registry.test.js tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/insights-dz-delegation.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/doctor-insight-flow.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/check-look-trace.test.js tests/unit/check-look-origin.test.js tests/unit/quote-provenance.test.js tests/unit/guard-honest-input-meta.test.js tests/unit/look-phase-contract.test.js tests/unit/capture-source-path.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/check-review-contract.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js tests/unit/insights-writer.test.js tests/unit/check-pipeline-gaps.test.js tests/unit/traceability-machine-ids.test.js tests/unit/traceability-completion-gate.test.js tests/unit/traceability-negative-fixture.test.js tests/e2e/lifecycle.test.js tests/e2e/feature-contour.test.js tests/e2e/packed-insights-writer.test.js tests/snapshot/templates.test.js",
+    "test:unit": "node --test tests/unit/honest-failure-rules.test.js tests/unit/generator-swarm-contract.test.js tests/unit/check-swarm-receipts.test.js tests/unit/check-embed-contract.test.js tests/unit/check-model-cost.test.js tests/unit/check-canon.test.js tests/unit/check-file-ownership.test.js tests/unit/check-source-version.test.js tests/unit/check-handoff-manifest.test.js tests/unit/check-external-deps.test.js tests/unit/check-metric-source.test.js tests/unit/negative-conclusion-gate.test.js tests/unit/check-webhook-contract.test.js tests/unit/check-job-contract.test.js tests/unit/detection-ladder-contract.test.js tests/unit/detection-ladder-registry.test.js tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/insights-dz-delegation.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/doctor-insight-flow.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/check-look-trace.test.js tests/unit/check-look-origin.test.js tests/unit/quote-provenance.test.js tests/unit/guard-honest-input-meta.test.js tests/unit/look-phase-contract.test.js tests/unit/capture-source-path.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/check-review-contract.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js tests/unit/insights-writer.test.js tests/unit/check-pipeline-gaps.test.js tests/unit/traceability-machine-ids.test.js tests/unit/traceability-completion-gate.test.js tests/unit/traceability-negative-fixture.test.js",
     "test:e2e": "node --test tests/e2e/lifecycle.test.js tests/e2e/packed-insights-writer.test.js",
     "test:snapshot": "node --test tests/snapshot/templates.test.js",
     "test:doctor": "node bin/cli.js doctor",

package/sbom.json

@@ -55,7 +55,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "103d3f0520f79080445d07623b70195d7b34cae6d875eb60978aec254aca5c88"
+          "content": "a70fc43d33972f0472a3fdb6628f79b22c5a4cdd459b5d89bce06e240ca93bf1"
         }
       ]
     },
@@ -279,7 +279,7 @@
         },
         {
           "name": "dz:canonical-json-sha256-v2",
-          "value": "2bacb5f426c3873d186bf142e95cb72d81a098c35f091a54b80d3d86e97fc1fb"
+          "value": "c9186f299be209dd8aecd28229225dece4fdb76e6750a0d43c31ae19cbeda387"
         }
       ]
     },
@@ -289,7 +289,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "349dbc45876cd5765ae48ff2224ab7f96d5df01a0d86361866b7740ed3cf4de0"
+          "content": "06e3dae22c533a81732b9870ae42d6b80b6e8419b3c90e11e1910e2a46888be8"
         }
       ]
     },
@@ -379,7 +379,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2ab6ff0a3e15f9a9d5787077628e19936c3c9735b1549b1233ec4a331c2fd3f7"
+          "content": "86ed569a58e07f5aa2d31f6b932019345bc33abc00f5185601eb1f6ef9ce3815"
         }
       ]
     },
@@ -449,7 +449,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b2bb83fce09f823a36c943f397d63ff9d9406da1dadc055c4f187f8ff964d1ce"
+          "content": "6908fa6c8ba770f829378a021d5f7e9a9bc79a15bdd67b278d8c6a765968b291"
         }
       ]
     },
@@ -703,6 +703,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "templates/.claude/hooks/check-review-contract.cjs",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "44e32ea31a4a71ceb6eccb0956006519de270eab787a79ab4884978bc04385ab"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "templates/.claude/hooks/check-source-version.cjs",
@@ -759,7 +769,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6e30ccdcdbe3c36896b85821f8986077a0e4065fdff3b103d669fac7ad44670e"
+          "content": "50c08decec3e80ed325f50d7b062fbe0add47e8594002fcc165248492242ab56"
         }
       ]
     },
@@ -879,7 +889,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "879ca7b6ca9039c7b94f6b9df2eadca9ec5fd0f97da5f468d5ee723f3d47f438"
+          "content": "13bf073273820addeb87167402495b2f683cefac70a9f6cb07b6e054b1851e0f"
         }
       ]
     },
@@ -1799,7 +1809,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d2b8e71f4053c642f455a0f245ae18471ab25b7a21e0658f0fe410912a47bf8b"
+          "content": "b4b394adf08feee552f39c83331398f119e0d4abf21e683fe4706da438b4a426"
         }
       ]
     },
@@ -1823,6 +1833,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "templates/.claude/skills/requirements-validator/references/feature-report-contracts.md",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "df263cbce17fb5d9dec6514561c66f6283b3f19e2fc85056f0531bac615be0f1"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "templates/.claude/skills/requirements-validator/references/invest-criteria.md",
@@ -1839,7 +1859,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "49afe072f31f5b4f9a33f6b59487244f494b0f5587b6cc10c797c4de59510114"
+          "content": "72104b74f07e0610f67f00b246b5225a530203bff225bacf7bf384bc6fd21cdf"
         }
       ]
     },
@@ -2023,6 +2043,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/e2e/feature-contour.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "a6e7c00e86fae150b834234efe34c2837da63b6794117a1bffd5c0de13505fe1"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/e2e/lifecycle.test.js",
@@ -2043,6 +2073,86 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/fixtures/feature-contour/docs/features/demo-gate/01_specification.md",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "264708a769ad0d07d715420d82278461c5f1b831dd365eaaf6be051db18d47e8"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/fixtures/feature-contour/docs/features/demo-gate/02_pseudocode.md",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "c8e58b32bdc9df32ad95f4eca2fb8625fe8e39194ad01fbd2a1b4abee6e6d7d4"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/fixtures/feature-contour/docs/features/demo-gate/03_architecture.md",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "7bebb1ac66f026a0c95afd986b17af60155be99e17d874f260106515b229bd14"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/fixtures/feature-contour/docs/features/demo-gate/04_refinement.md",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "b7f285a4070bfb8dd47c14be11149412c3df4663b99762a2fc05be24f2fa1b1e"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/fixtures/feature-contour/docs/features/demo-gate/05_completion.md",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "62eeec7cd3101fa0159c03bd17d5100a86d8ba29a1189cdc06f8b190c01c1dd8"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/fixtures/feature-contour/docs/features/demo-gate/review-report.md",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "12f8fa21aedeb2f73bdd8ff16f0c28e053693ec11815616181c085a31058436c"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/fixtures/feature-contour/docs/features/demo-gate/validation-report.md",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "4e1244a874996b522d07b9f23478bbe2416ed34f7b8cedbae460ada07dfd448f"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/fixtures/feature-contour/tests/demo.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "812a837075839d3b86367149a60f6e859d7623775788e10adaef53e5b249b20d"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/fixtures/prep-traceability-fixture/docs/features/order-refund/01_specification.md",
@@ -2069,7 +2179,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5eac599ea36b23f93b4f12de64da7ff1daff2df148032cc6fbf146ef8c0f7429"
+          "content": "2e442fcb5f39de9f94c2284d385368f2e984bb17998556c41ac9f4f676a6134e"
         }
       ]
     },
@@ -2293,6 +2403,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/check-review-contract.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "75d59bc1b45abc2e1b5723560d79533e0a767e75fc50024c8a13f34540a55e59"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/check-source-version.test.js",
@@ -2469,7 +2589,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b8674f0ce01c888b9a0fa5da0ad707c171412c9ac8fc4dcd55d2d5a5ea989438"
+          "content": "176115fafdca146eff0ebf87361fe6d0f26c7c3621cda03da0140ab72ba9f1ac"
         }
       ]
     },
@@ -2649,7 +2769,17 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e4fc7687dcf37d17bf2a059d3248c8c00526c104f6a0f6e104fa9ca6e00039ae"
+          "content": "a601c25a1b1e697140d76216bcdabb80c86528f7bc81654581dd0c4dc43188d8"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/unit/traceability-completion-gate.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "082c141de9995c1d8bc51857b598d33e4a3f4947c325671283d3c6c70d224397"
         }
       ]
     },