@gcunharodrigues/wrxn 0.1.0

package/manifest.json

@@ -0,0 +1,451 @@
+{
+  "$schema": "internal://wrxn-manifest/v1",
+  "version": "1",
+  "description": "The file-class manifest: the single source of truth for what `wrxn init` lays and how each file is governed on update. Every payload file MUST be classified. Three classes: managed (kernel-owned, overwritten on update), seeded (created once at init, never overwritten), state (project-owned, kernel never touches contents). The installer refuses any payload file absent from this manifest and any class not in {managed,seeded,state}.",
+  "classes": [
+    "managed",
+    "seeded",
+    "state"
+  ],
+  "files": [
+    {
+      "path": ".claude/constitution.local.md",
+      "class": "seeded",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/constitution.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/code-intel-push.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/enforce-managed-guard.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/enforce-managed-precommit.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/enforce-push-authority.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/enforce-review-marker.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/enforce-tests-on-push.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/recall-surface.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/reference-detect.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/session-end.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/session-history.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/session-start.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/synapse-engine.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/hooks/wiki-lint.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/settings.json",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/diagnose/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/diagnose/scripts/hitl-loop.template.sh",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/grill-me/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/grill-with-docs/ADR-FORMAT.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/grill-with-docs/CONTEXT-FORMAT.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/grill-with-docs/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/handoff/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/improve-codebase-architecture/DEEPENING.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/improve-codebase-architecture/HTML-REPORT.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/improve-codebase-architecture/INTERFACE-DESIGN.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/improve-codebase-architecture/LANGUAGE.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/improve-codebase-architecture/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/memory/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/prototype/LOGIC.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/prototype/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/prototype/UI.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/qa-walk/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/qa-walk/references/cli-mode.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/qa-walk/references/finding-issue-template.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/qa-walk/references/walk-report-template.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/qa-walk/references/web-mode.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/setup-matt-pocock-skills/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/setup-matt-pocock-skills/domain.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/setup-matt-pocock-skills/issue-tracker-github.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/setup-matt-pocock-skills/issue-tracker-gitlab.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/setup-matt-pocock-skills/issue-tracker-local.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/setup-matt-pocock-skills/triage-labels.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/skill-creator/LICENSE.txt",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/skill-creator/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/skill-creator/scripts/init_skill.py",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/skill-creator/scripts/package_skill.py",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/skill-creator/scripts/quick_validate.py",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/synapse/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/synapse/assets/README.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/synapse/references/brackets.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/synapse/references/commands.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/synapse/references/domains.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/synapse/references/layers.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/synapse/references/manifest.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/tdd/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/tech-search/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/tech-search/prompts/page-extract.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/to-issues/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/to-prd/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/triage/AGENT-BRIEF.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/triage/OUT-OF-SCOPE.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/triage/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/write-a-skill/SKILL.md",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".claude/skills/audit/SKILL.md",
+      "class": "managed",
+      "profile": "workspace"
+    },
+    {
+      "path": ".claude/skills/level-up/SKILL.md",
+      "class": "managed",
+      "profile": "workspace"
+    },
+    {
+      "path": ".claude/skills/onboard/SKILL.md",
+      "class": "managed",
+      "profile": "workspace"
+    },
+    {
+      "path": "aios-intake.md",
+      "class": "seeded",
+      "profile": "workspace"
+    },
+    {
+      "path": "connections.md",
+      "class": "seeded",
+      "profile": "workspace"
+    },
+    {
+      "path": "decisions/log.md",
+      "class": "seeded",
+      "profile": "workspace"
+    },
+    {
+      "path": ".recon.json",
+      "class": "seeded",
+      "profile": "project"
+    },
+    {
+      "path": ".synapse/global",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".synapse/manifest",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".synapse/pipeline",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".synapse/routing",
+      "class": "seeded",
+      "profile": "project"
+    },
+    {
+      "path": ".wrxn/continuity/.gitkeep",
+      "class": "state",
+      "profile": "project"
+    },
+    {
+      "path": ".wrxn/history/.gitkeep",
+      "class": "state",
+      "profile": "project"
+    },
+    {
+      "path": ".wrxn/wiki.cjs",
+      "class": "managed",
+      "profile": "project"
+    },
+    {
+      "path": ".wrxn/wiki/.gitkeep",
+      "class": "state",
+      "profile": "project"
+    },
+    {
+      "path": ".wrxn/wiki/concepts/.gitkeep",
+      "class": "state",
+      "profile": "project"
+    },
+    {
+      "path": ".wrxn/wiki/decisions/.gitkeep",
+      "class": "state",
+      "profile": "project"
+    },
+    {
+      "path": ".wrxn/wiki/gotchas/.gitkeep",
+      "class": "state",
+      "profile": "project"
+    },
+    {
+      "path": ".wrxn/wiki/sessions/.gitkeep",
+      "class": "state",
+      "profile": "project"
+    },
+    {
+      "path": "docs/agents/domain.md",
+      "class": "seeded",
+      "profile": "project"
+    },
+    {
+      "path": "docs/agents/issue-tracker.md",
+      "class": "seeded",
+      "profile": "project"
+    },
+    {
+      "path": "docs/agents/triage-labels.md",
+      "class": "seeded",
+      "profile": "project"
+    },
+    {
+      "path": "docs/workspace/operator-layer.md",
+      "class": "seeded",
+      "profile": "workspace"
+    }
+  ],
+  "profiles": [
+    "project",
+    "workspace"
+  ]
+}

package/migrations/README.md

@@ -0,0 +1,21 @@
+# Migrations
+
+Breaking kernel changes ship as ordered, run-once migration scripts (PRD US8). `wrxn update` runs
+any pending migration whose `version` the install has reached, in `id` order, recording each in the
+install receipt's `migrationsApplied`. A throwing migration halts the update and is left pending, so
+the next `wrxn update` resumes from it (already-applied migrations never re-run).
+
+A migration is a `.cjs` file in this directory:
+
+```js
+// migrations/001-rename-wiki-tier.cjs
+module.exports = {
+  id: '001',           // orderable; migrations run in id order (default: filename without .cjs)
+  version: '0.2.0',    // the release this ships with — runs once the install reaches it
+  up(ctx) {            // ctx = { target, fromVersion, toVersion }; throw to fail (resumable)
+    // transform the install at ctx.target to be compatible with the new kernel
+  },
+};
+```
+
+No migrations ship yet — this directory documents the contract. Add one only with a breaking change.

package/package.json

@@ -0,0 +1,23 @@
+{
+  "name": "@gcunharodrigues/wrxn",
+  "version": "0.1.0",
+  "description": "WRXN Kernel — installable AI operating system. Two profiles (project | workspace), pull-based updates, managed/seeded/state file classes.",
+  "bin": {
+    "wrxn": "bin/wrxn.cjs"
+  },
+  "files": [
+    "bin",
+    "lib",
+    "payload",
+    "migrations",
+    "manifest.json"
+  ],
+  "scripts": {
+    "test": "node --test"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "license": "MIT",
+  "private": false
+}

package/payload/.claude/constitution.local.md

@@ -0,0 +1,13 @@
+# Project Constitution Addendum (seeded)
+
+Created once at `wrxn init`. **The kernel never overwrites this file** — it is yours.
+Record project-local conventions and the demoted universal preferences here.
+
+## Seeded defaults
+
+- **CLI-First** — new capability works via CLI before any UI; dashboards observe, never control.
+- **Import style** — prefer absolute imports; same-module relative imports are fine.
+
+## Project-local additions
+
+<!-- Add your project's own conventions below. -->

package/payload/.claude/constitution.md

@@ -0,0 +1,28 @@
+# WRXN Constitution
+
+The four universal articles. Managed law: kernel-owned, overwritten on `wrxn update`.
+Project-local preferences live in the seeded `constitution.local.md` addendum, never here.
+
+## Article I — Agent Authority (NON-NEGOTIABLE)
+
+- `git push`, PR creation, and release tags are EXCLUSIVE to the devops role.
+- An agent acts only within its scope; it delegates when out of scope and never assumes
+  another agent's authority.
+
+## Article II — Issue-Driven (supersedes Story-Driven)
+
+- The unit of work is an **issue with acceptance criteria**. No code is written without one.
+- Acceptance criteria are explicit before implementation; progress is tracked against them.
+- Issues are cut as vertical tracer-bullet slices — each independently buildable and walkable.
+
+## Article III — Quality-First
+
+- Tests and typecheck pass on every commit; the full suite green is the push gate.
+- Code review and security review gate integration; functional QA walks the real artifact.
+- Coverage does not decrease.
+
+## Article IV — No-Invention
+
+- Every claim in a spec traces to a stated requirement or a researched source.
+- Do not add features absent from the requirements, assume unresearched implementation
+  details, or specify unvalidated technologies.

package/payload/.claude/hooks/code-intel-push.cjs

@@ -0,0 +1,108 @@
+#!/usr/bin/env node
+'use strict';
+
+// WRXN code-intel-push hook — first-touch code-intel / recon-freshness nudge (wrxn-kernel-11).
+// PostToolUse (Edit|Write). On the FIRST touch of a code file this session it injects a <code-intel>
+// nudge: where a recon graph exists it notes freshness (commit lag) and points at recon; absent a
+// graph it nudges to build one. First-touch-GATED per session+file (a touched-list under
+// .wrxn/history/<sid>.touched) so a repeat edit of the same file is silent — no per-edit spam.
+//
+// Self-contained: ships into installs, MUST NOT import the kernel lib (node stdlib only).
+// Fail-open + recursion-safe: it only READS + appends to its own state file; any fault emits {}.
+//
+// Contract: PostToolUse event JSON on stdin → envelope JSON on stdout (exit 0).
+
+const fs = require('fs');
+const path = require('path');
+
+const CODE_EXT = ['.cjs', '.js', '.mjs', '.ts', '.tsx', '.py', '.go', '.rs', '.java', '.rb'];
+
+function emit(envelope) {
+  process.stdout.write(JSON.stringify(envelope));
+  process.exit(0);
+}
+
+function findInstallRoot(startDir) {
+  let dir = startDir || process.env.CLAUDE_PROJECT_DIR || process.cwd();
+  for (let i = 0; i < 12; i++) {
+    if (fs.existsSync(path.join(dir, 'wrxn.install.json'))) return dir;
+    const up = path.dirname(dir);
+    if (up === dir) break;
+    dir = up;
+  }
+  return null;
+}
+
+function safeId(sid) {
+  return String(sid || 'session')
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '')
+    .slice(0, 48) || 'session';
+}
+
+// First-touch gate: append relPath to .wrxn/history/<sid>.touched; return true only the FIRST time
+// this session sees this file. Hooks fire serially within a session, so a plain read-then-append is
+// race-free. Fail-open: on any state error, treat as first touch (nudge once is safer than silence).
+function isFirstTouch(root, sid, relPath) {
+  const dir = path.join(root, '.wrxn', 'history');
+  const marker = path.join(dir, `${safeId(sid)}.touched`);
+  try {
+    const seen = fs.existsSync(marker)
+      ? fs.readFileSync(marker, 'utf8').split('\n').map((l) => l.trim()).filter(Boolean)
+      : [];
+    if (seen.includes(relPath)) return false;
+    fs.mkdirSync(dir, { recursive: true });
+    fs.appendFileSync(marker, `${relPath}\n`);
+    return true;
+  } catch {
+    return true;
+  }
+}
+
+// A short freshness note: stale (or unknown) when the recon graph's commit doesn't prefix-match HEAD.
+function freshnessNote(root) {
+  const graph = path.join(root, '.recon', 'graph.json');
+  if (!fs.existsSync(graph)) {
+    return 'No recon graph (.recon/graph.json absent) — build it for code-connection enrichment, then reindex.';
+  }
+  return 'recon graph present — reindex if it lags your edits (the graph is rebuilt at session close).';
+}
+
+function main() {
+  let event = {};
+  try {
+    const stdin = fs.readFileSync(0, 'utf8');
+    if (stdin.trim()) event = JSON.parse(stdin);
+  } catch {
+    emit({});
+  }
+
+  const root = findInstallRoot();
+  if (!root) emit({});
+
+  const filePath = event.tool_input && event.tool_input.file_path;
+  if (!filePath || typeof filePath !== 'string') emit({}); // not a file-touching tool
+  if (!CODE_EXT.some((ext) => filePath.endsWith(ext))) emit({}); // non-code → silent
+
+  const relPath = (path.isAbsolute(filePath) ? path.relative(root, filePath) : filePath)
+    .split(path.sep)
+    .join('/');
+
+  if (!isFirstTouch(root, event.session_id, relPath)) emit({}); // gated repeat → silent
+
+  const ctx = [
+    '<code-intel>',
+    `Touched ${relPath} (first this session).`,
+    freshnessNote(root),
+    '</code-intel>',
+  ].join('\n');
+
+  emit({ hookSpecificOutput: { hookEventName: 'PostToolUse', additionalContext: ctx } });
+}
+
+try {
+  main();
+} catch {
+  emit({});
+}