@geraldmaron/construct 1.0.0 → 1.0.2

package/lib/workflow-state.mjs

@@ -1,8 +1,11 @@
 #!/usr/bin/env node
 /**
- * lib/workflow-state.mjs — <one-line purpose>
+ * lib/workflow-state.mjs — Read, write, and validate Construct workflow state.
  *
- * <2–6 line summary.>
+ * Manages the canonical workflow.json lifecycle: loading, phase transitions,
+ * task status updates, validation, and executive-gate enforcement. Also builds
+ * task packets for agent dispatch and derives plan.md summaries. Backs the
+ * MCP workflow tools, CLI commands, and the concierge routing layer.
  */
 import fs from "node:fs";
 import path from "node:path";
@@ -10,16 +13,6 @@ import { execSync } from "node:child_process";
 import { routeRequest } from "./orchestration-policy.mjs";
 
 const PHASES = ["research", "plan", "implement", "validate", "operate"];
-// Back-compat stub: pre-overhaul workflow.json files used Matrix-themed phase
-// names. Kept solely to migrate existing state on load. Do not use these names
-// in new code — write only the canonical PHASES values above.
-const LEGACY_PHASE_ALIASES = {
-  oracle: "research",
-  morpheus: "plan",
-  neo: "implement",
-  trinity: "validate",
-  operator: "operate"
-};
 const VALID_STATUS = new Set(["todo", "in-progress", "blocked", "blocked_needs_user", "blocked_needs_executive", "done", "skipped"]);
 
 /**
@@ -32,8 +25,7 @@ export const EXECUTIVE_GATES = {
 };
 
 function normalizePhase(value, fallback = null) {
-  const normalized = LEGACY_PHASE_ALIASES[value] || value;
-  return PHASES.includes(normalized) ? normalized : fallback;
+  return PHASES.includes(value) ? value : fallback;
 }
 
 function normalizeWorkflow(workflow) {
@@ -78,9 +70,7 @@ function projectName(root) {
       .trim();
     const match = remote.match(/[:/]([^/]+\/[^/.]+)(?:\.git)?$/);
     if (match) return match[1];
-  } catch {
-    // best effort
-  }
+  } catch { /* remote origin read is non-critical */ }
   return path.basename(root);
 }
 
@@ -217,7 +207,13 @@ export function addTask(root, options) {
 }
 
 export function buildTaskPacketFromIntent(request, options = {}) {
-  const route = routeRequest({ request: String(request || "") });
+  const route = routeRequest({
+    request: String(request || ""),
+    fileCount: options.fileCount ?? 0,
+    moduleCount: options.moduleCount ?? 0,
+    introducesContract: options.introducesContract ?? false,
+    explicitDrive: options.explicitDrive ?? false,
+  });
   if (!route) return null;
   if (route.track === "immediate") return null;
 

package/package.json

@@ -1,31 +1,33 @@
 {
   "name": "@geraldmaron/construct",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "type": "module",
-  "description": "Construct — AI orchestration CLI with package-manager-first setup",
+  "description": "Construct — agent orchestration layer for OpenCode, Claude Code, and other coding surfaces",
   "bin": {
     "construct": "bin/construct"
   },
   "files": [
     "bin/construct",
+    "bin/construct-postinstall.mjs",
     "lib/**",
     "agents/**",
+    "examples/**",
     "personas/**",
     "commands/**",
     "skills/**",
     "rules/**",
     "platforms/**",
     "templates/**",
-    "langfuse/**",
+    "templates/distribution/**",
     "db/**",
-    "sync-agents.mjs",
+    "scripts/sync-agents.mjs",
     "README.md",
     ".env.example"
   ],
   "engines": {
-    "node": ">=18"
+    "node": ">=20"
   },
-  "license": "MIT",
+  "license": "Apache-2.0",
   "publishConfig": {
     "access": "public"
   },
@@ -39,15 +41,26 @@
   },
   "scripts": {
     "mcp": "node lib/mcp/server.mjs",
-    "test": "node --test tests/*.test.mjs",
+    "test": "node scripts/run-tests.mjs",
     "docs:init": "node lib/init-docs.mjs --yes",
     "docs:update": "node ./bin/construct docs:update",
     "docs:site": "node ./bin/construct docs:site",
+    "docs:dev": "npm --prefix apps/docs run dev",
+    "docs:build": "npm --prefix apps/docs run build",
     "lint:comments": "node ./bin/construct lint:comments",
-    "release:check": "node ./bin/construct doctor && npm test && node ./bin/construct docs:update --check && node ./bin/construct lint:comments"
+    "lint:templates": "node scripts/lint-commits-pr.mjs",
+    "eval:routing": "node scripts/eval/score-intent-classifier.mjs",
+    "release:check": "node ./bin/construct doctor && npm test && node ./bin/construct docs:update --check && node ./bin/construct dashboard:sync --check && node ./bin/construct lint:comments && node scripts/lint-commits-pr.mjs",
+    "npm:publish": "npm run release:check && npm publish --access public",
+    "postinstall": "node ./bin/construct-postinstall.mjs"
   },
   "dependencies": {
+    "@huggingface/transformers": "^4.2.0",
     "@modelcontextprotocol/sdk": "^1.12.0",
+    "@xenova/transformers": "^2.0.1",
     "postgres": "^3.4.9"
+  },
+  "overrides": {
+    "express-rate-limit": "8.5.1"
   }
 }

package/personas/construct.md

@@ -1,94 +1,96 @@
 <!--
-personas/construct.md — primary persona; first-contact routing and action discipline.
+personas/construct.md — Construct persona prompt.
 
-Construct is the only persona the user talks to. This file defines how a request becomes
-action: session bootstrap, complexity classification, dispatch rules, deliberation caps,
-and quality gates. Changes here propagate to every platform via sync-agents.mjs.
+Defines the single user-facing AI interface and its session-start behavior,
+routing rules, approval boundaries, and output contract. Loaded by sync-agents
+and emitted to every supported platform.
 -->
-You are Construct — a single, unified AI that handles everything from a quick question to a full software lifecycle. The user interacts only with you. Internal routing and specialist dispatch are your implementation detail, never theirs.
-
-Dispatching a specialist is not delegation — it is forcing the same problem through a different cognitive lens. An architect's suspicion of unwritten contracts and a reviewer's attention to edge cases are structurally different views, not redundant passes.
+You are Construct — the single AI interface for everything from a quick question to a full software lifecycle. The user talks only to you; internal routing and specialist dispatch are implementation detail.
 
 ## Start of every session
 
 Before responding, run in parallel — do not narrate:
-1. `workflow_status` — active work and blockers from `.cx/workflow.json`
-2. `project_context` — state from `.cx/context.md`
-3. `memory_search` with the basename of CWD — prior session context and user preferences
+1. `project_context` — state from `.cx/context.md`
+2. `memory_search` with the basename of CWD — prior session context and user preferences
+3. Read `AGENTS.md`, `plan.md`, and the relevant docs for the current task when present
+4. Check `.cx/handoffs/` for the most recent handoff — if another session was active, read it to understand what was in progress and what NOT to touch
 
 Apply results silently. If memory returns preferences or past decisions, honor them without asking the user to repeat.
 
+Honor the project operating hierarchy:
+- Beads (`bd`) is the durable source of truth for tasks; hygiene contract — claim, close, supersede, prune — lives in `rules/common/beads-hygiene.md`. `bd ready` for unblocked work, `bd show <id>` for the active issue.
+- `plan.md` is the human-readable implementation plan
+- cass-memory via MCP `memory` is for cross-tool/session recall, not task tracking
+
+Use the single-writer rule whenever multiple sessions are active: if two sessions would touch the same file, one session owns the edit and the other reviews, researches, or waits for handoff.
+
 ## Classify before acting
 
-Use the code-backed orchestration policy as the source of truth for:
-- intent classification
-- execution track (`immediate`, `focused`, `orchestrated`)
-- specialist selection
-- escalation and approval boundaries
+Use the code-backed orchestration policy for intent, execution track, specialist selection, escalation, and approval boundaries. Visual deliverables (wireframes, diagrams, decks) are first-class — use real visual tools, not bullet prose.
 
-Prompt text should explain the public contract, not recreate the routing control plane.
+Execution model:
+- **Immediate** — answer or act directly when no hidden worker is needed.
+- **Focused** — dispatch one bounded specialist path; return in Construct's voice.
+- **Orchestrated** — plan → challenge → build → validate, with tracker-backed slices and explicit file ownership.
 
-Default execution model:
-- **Immediate** — answer or act directly when the policy says no hidden worker is needed.
-- **Focused** — dispatch one bounded specialist path and return in Construct's voice.
-- **Orchestrated** — run plan → challenge → build → validate using workflow-backed task packets.
+Devil's advocate is mandatory for new architectural directions, AI/agent workflow changes, security or data-integrity changes, and promoting a temporary capability to persistent.
 
-State the dispatch plan in one sentence before starting: *"Plan: [phases and specialists]."*
+## Gates and contracts (org-in-a-box)
 
-Devil's advocate is mandatory for: new architectural directions, AI/agent workflow changes, security or data-integrity changes, and any promotion of a temporary capability to persistent.
+`routeRequest` returns three artifacts; honor all three:
 
-## Action discipline (hard rules)
+1. **Gates** — `framingChallenge`, `externalResearch`, `docAuthoring`
+2. **Contract chain** — typed handoffs from `agents/contracts.json`. Call `agent_contract` MCP tool at handoff.
+3. **Specialist sequence** — dispatch plan with ordering/parallel markers.
 
-The failure mode of this system is **ruminating in-persona instead of dispatching**. Break any of these and you are burning context for no output.
+Before DONE: postconditions met · sources cited · framing logged · ADRs have Rejected alternatives.
 
-- **Dispatch, don't solo-plan.** Work touching 3+ files, 2+ modules, or introducing a new contract/dependency/SDK → cx-architect owns the plan. You don't.
-- **Ask or look up — don't speculate.** Choosing between named options (SDK A vs B, pattern X vs Y) that aren't already in your context: call `context7_query-docs` / `WebFetch`, ask the user one question, or commit to a default and note the assumption. Never a fourth round of internal debate.
-- **Deliberation cap: two passes.** Reasoning about the same decision twice consecutively without a new read, tool call, or user input means you skipped a dispatch or a lookup. Hand off, query, or ask — never think a third time.
-- **Probe before bulk read.** Before `Read` with `limit > 200` or unset, check size via `Glob`, `Bash wc -l`, or a `limit: 50` probe. Reading 220 lines of a 74-line file is the tell.
-- **Start-of-task contract is binding.** First action on any non-trivial request is the parallel bootstrap above, plus `cx_trace` once the goal is clear. A first-action `Read` or thinking turn means you skipped it.
+## Branch + commit approval
 
-Signs you are burning context: >3 thinking turns before any tool call · context >40% with no edits or plan saved · re-reading a file at different offsets · internal debate over a library choice a 10-second docs lookup would resolve.
+- **Working branch is surfaced every session** at the top of session-start. Restate it before any mutating operation.
+- **Never commit, push, or merge without asking first.** Before `git commit`, `git push`, or `gh pr merge`: state branch, show the proposed message / refspec / PR number verbatim, wait for explicit yes. A batch go-ahead covers a defined sequence; new commits later are their own gate. See `rules/common/commit-approval.md`.
 
-## How to communicate
+## R&D intake surface
 
-- First person as Construct, never as a named specialist
-- Lead with the answer or action, not the reasoning
-- One clear question when blocked — not a list
-- Confirm what changed and what's next when done — nothing more
+Session-start surfaces pending intake at `.cx/intake/pending/<id>.json`. Read with `construct intake show <id>`; the triage block names the primary owner, recommended chain, and next action. For non-trivial signals, plan with `construct graph from-intake <id>` and update node status with evidence (`construct graph status … done --evidence=…`). A node cannot reach `done` without an evidence record. Team / enterprise mode wraps tool calls in the MCP broker — when it returns `ApprovalRequired`, surface the question; never bypass.
 
-## Workflow state
+## Action discipline
 
-For non-trivial work: create/update `.cx/workflow.json` with task, phase, owner, acceptance criteria. Mark complete as you go. If a specialist returns NEEDS_MAIN_INPUT, surface it in your voice and resume after the answer. End significant sessions by asking cx-docs-keeper to update `.cx/context.md`.
+- Dispatch, don't solo-plan: 3+ files, 2+ modules, or a new contract → cx-architect owns the plan.
+- Ask or look up, don't speculate: call `context7_query-docs` / `WebFetch`, ask, or commit to a default. Never a fourth round of internal debate.
+- Deliberation cap: two passes. Same decision twice without a new read, tool call, or user input = hand off, query, or ask.
+- Probe before bulk read: check size via `Glob` / `wc -l` or a `limit: 50` probe before `Read` with `limit > 200`.
+- Start-of-task: parallel bootstrap (above) + `cx_trace` before anything mutating.
 
-## Core documents are project state
+## Communication + state
 
-Treat these as required, load-bearing project state for every repo Construct initializes or operates in:
+Lead with the answer. One question when blocked. Confirm what changed when done.
 
-- `.cx/context.md`
-- `.cx/context.json`
-- `.cx/workflow.json`
-- `docs/README.md`
-- `docs/architecture.md`
+Non-trivial work: update Beads (`bd note <id>`), `plan.md`, docs with owner / acceptance / verification. Preserve tracker ids in handoffs. Surface NEEDS_MAIN_INPUT in your voice; resume after the answer. End every session with a handoff at `.cx/handoffs/{date}-{slug}.md` and updates to `.cx/context.md`.
 
-All LLMs working in the repo, including Construct, must read them at session start and keep them current when work changes project reality. If decisions, workflow state, architecture assumptions, boundaries, or core documentation expectations change, update the affected document before marking work done.
+Load-bearing state: `AGENTS.md`, `.cx/context.md`/`.json`, `docs/README.md`, `docs/architecture.md` (read at session start, update before DONE, prune stale sections). `plan.md` is local-only.
 
 ## Quality gates
 
-After any implementation, dispatch validation before marking done — the user should never have to ask:
+After any implementation, dispatch validation before marking done:
 1. cx-reviewer — correctness, regression, coverage
 2. cx-qa — tests pass, coverage meets threshold
 3. cx-security if auth/secrets/user data touched
 
-Do not mark `done` in `.cx/workflow.json` until cx-reviewer and cx-qa return verdicts. If cx-reviewer returns BLOCKED, surface CRITICAL findings and stop. Any CRITICAL issue blocks shipping.
+Do not mark `done` until cx-reviewer and cx-qa return verdicts. BLOCKED or any CRITICAL finding stops shipping.
+
+## Hard release gates
+
+Run `npm run release:check` before any commit or push — never wait for CI. Commits follow `.gitmessage`; PRs follow `.github/pull_request_template.md`. Full policy: `rules/common/release-gates.md`.
 
 ## Loop guard
 
 Same action 3+ times with no state change → stop. Report what was tried, what blocked progress, what decision is needed.
 
-## Drive mode
+Before stopping: surface incomplete tracker-linked plan slices and unmet acceptance criteria. Do not stop silently with work in-flight.
 
-Activates only on explicit word-boundary triggers: **`/work:drive`**, a standalone word **`drive`** (not "driver", "hard drive", "overdrive"), or **`full send`**. Match with `\b(drive|full send)\b` — substring matches do not activate drive mode.
+## Drive mode
 
-When the trigger fires, execute under the orchestrated track with the code-backed policy, skip planning confirmation, and continue until verification is complete or a real blocker requires executive input.
+Activates on word-boundary triggers — `/work:drive`, standalone `drive`, or `full send`. Substring matches do not count.
 
-State the dispatch plan upfront, then brief status at phase transitions. The user sees the plan and outcomes, not the deliberation.
+On trigger: orchestrated track, skip planning confirmation, continue until verification or a real blocker. State the dispatch plan upfront; brief status at phase transitions. User sees plan and outcomes, not deliberation.

package/platforms/claude/CLAUDE.md

@@ -27,4 +27,4 @@ When using Bash, always provide both `command` and `description` string fields.
 
 ## Cross-Tool Memory
 
-Cass MCP provides session memory across tools. Use `memory_search` to find prior context.
+Construct uses cass-memory for cross-tool memory. Start the local HTTP server with `cm serve`, then use `memory_search` to find prior context.

package/platforms/claude/settings.template.json

@@ -31,28 +31,28 @@
     ],
     "PreToolUse": [
       {
-        "matcher": "*",
+        "matcher": "Write|Edit|MultiEdit|NotebookEdit|TodoWrite|Read|Grep|Glob|LS|NotebookRead",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"$HOME/.construct/lib/hooks/bootstrap-guard.mjs\"",
-            "timeout": 5
+            "command": "node \"$HOME/.construct/lib/hooks/policy-engine.mjs\" PreToolUse",
+            "timeout": 10
           }
         ],
-        "id": "pre:bootstrap-guard",
-        "description": "Block mutations until session bootstrap (workflow_status + project_context + memory_search) has run"
+        "id": "pre:policy-engine",
+        "description": "Consolidated policy gating (bootstrap rule): block mutations until session is grounded via project_context+memory_search or 3+ exploratory reads"
       },
       {
         "matcher": "Bash",
         "hooks": [
           {
             "type": "command",
-            "command": "npx block-no-verify@1.1.2",
+            "command": "node \"$HOME/.construct/lib/hooks/block-no-verify.mjs\"",
             "timeout": 5
           }
         ],
         "id": "pre:bash:block-no-verify",
-        "description": "Block git --no-verify to prevent pre-commit hook bypass"
+        "description": "Block git --no-verify / -n to prevent pre-commit/pre-push hook bypass (vendored)"
       },
       {
         "matcher": "Bash",
@@ -91,7 +91,7 @@
         "description": "Prevent weakening eslint/tsconfig/prettier/biome configs"
       },
       {
-        "matcher": "*",
+        "matcher": "mcp__.*",
         "hooks": [
           {
             "type": "command",
@@ -113,18 +113,6 @@
         ],
         "id": "pre:edit-guard",
         "description": "Hash-anchored edit verification — blocks Edit when old_string not found verbatim"
-      },
-      {
-        "matcher": "mcp__.*",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node \"$HOME/.construct/lib/hooks/mcp-task-scope.mjs\"",
-            "timeout": 3
-          }
-        ],
-        "id": "pre:mcp-task-scope",
-        "description": "Warn when calling an MCP not declared in the active task mcpScope"
       }
     ],
     "PostToolUse": [
@@ -166,29 +154,28 @@
         "description": "Auto-run project linter/formatter after every file edit"
       },
       {
-        "matcher": "Write|Edit",
+        "matcher": "Write|Edit|MultiEdit",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"$HOME/.construct/lib/hooks/console-warn.mjs\"",
-            "timeout": 5
+            "command": "node \"$HOME/.construct/lib/hooks/comment-lint.mjs\"",
+            "timeout": 15
           }
         ],
-        "id": "post:edit:console-warn",
-        "description": "Flag console.log/debugger left in edited source files"
+        "id": "post:edit:comment-lint",
+        "description": "Block edits that violate comment policy (banned patterns, missing required header). Bypass: CONSTRUCT_SKIP_COMMENT_LINT=1"
       },
       {
-        "matcher": "Write|Edit",
+        "matcher": "Write|Edit|MultiEdit",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"$HOME/.construct/lib/hooks/comment-lint.mjs\"",
-            "timeout": 10,
-            "async": true
+            "command": "node \"$HOME/.construct/lib/hooks/doc-coupling-check.mjs\"",
+            "timeout": 5
           }
         ],
-        "id": "post:edit:comment-lint",
-        "description": "Warn on missing file headers or banned comment patterns after edits"
+        "id": "post:edit:doc-coupling",
+        "description": "Advisory: nudge when code edits accumulate without CHANGELOG/docs updates (pre-commit gate will block at commit time)"
       },
       {
         "matcher": "Write|Edit|MultiEdit",
@@ -229,29 +216,30 @@
         "description": "Audit dependencies for vulnerabilities after manifest changes"
       },
       {
-        "matcher": "TodoWrite",
+        "matcher": "Read",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"$HOME/.construct/lib/hooks/continuation-enforcer.mjs\"",
-            "timeout": 5
+            "command": "node \"$HOME/.construct/lib/hooks/read-tracker.mjs\"",
+            "timeout": 3,
+            "async": true
           }
         ],
-        "id": "post:continuation-enforcer",
-        "description": "After TodoWrite, remind agent of remaining tasks to prevent premature stopping"
+        "id": "post:read-tracker",
+        "description": "Record file content hash after Read for staleness detection in edit-guard"
       },
       {
         "matcher": "Read",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"$HOME/.construct/lib/hooks/read-tracker.mjs\"",
+            "command": "node \"$HOME/.construct/lib/hooks/audit-reads.mjs\"",
             "timeout": 3,
             "async": true
           }
         ],
-        "id": "post:read-tracker",
-        "description": "Record file content hash after Read for staleness detection in edit-guard"
+        "id": "post:audit-reads",
+        "description": "Tamper-evident chain log of every Read tool call. Off by default — enable with CONSTRUCT_AUDIT_READS=1."
       },
       {
         "matcher": "mcp__.*",
@@ -278,6 +266,56 @@
         ],
         "id": "post:agent-tracker",
         "description": "Record dispatched cx-* agent name for per-agent cost attribution"
+      },
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.construct/lib/hooks/bash-output-logger.mjs\"",
+            "timeout": 5
+          }
+        ],
+        "id": "post:bash:output-logger",
+        "description": "Persist long Bash outputs to ~/.cx/bash-logs/ and nudge toward referencing the log"
+      },
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.construct/lib/hooks/test-watch.mjs\"",
+            "timeout": 5,
+            "async": true
+          }
+        ],
+        "id": "post:bash:test-watch",
+        "description": "Emit role events when a test command exits non-zero or repeats a flake"
+      },
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.construct/lib/hooks/post-merge-docs-check.mjs\"",
+            "timeout": 5,
+            "async": true
+          }
+        ],
+        "id": "post:bash:post-merge-docs-check",
+        "description": "Emit doc-drift events when a merge lands without matching docs/CHANGELOG updates"
+      },
+      {
+        "matcher": "Edit|Write|MultiEdit|NotebookEdit|Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.construct/lib/hooks/audit-trail.mjs\"",
+            "timeout": 5
+          }
+        ],
+        "id": "post:audit-trail",
+        "description": "Append-only audit log of every mutation — attribution (agent/task) and tamper-evidence chain"
       }
     ],
     "PostToolUseFailure": [
@@ -353,12 +391,12 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"$HOME/.construct/lib/hooks/workflow-guard.mjs\"",
-            "timeout": 10
+            "command": "node \"$HOME/.construct/lib/hooks/policy-engine.mjs\" Stop",
+            "timeout": 15
           }
         ],
-        "id": "stop:workflow-guard",
-        "description": "Prevent accidental session stop while Construct workflow tasks or alignment blockers remain"
+        "id": "stop:policy-engine",
+        "description": "Consolidated stop policy: block on red CI (CONSTRUCT_STOP_OK_RED_CI=1 to ack), block on in_progress beads (CONSTRUCT_STOP_OK_OPEN_BD=1 to ack), enforce drive-mode criteria, advise on open drive-session"
       },
       {
         "matcher": "*",
@@ -377,25 +415,26 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"$HOME/.construct/lib/hooks/stop-notify.mjs\"",
-            "timeout": 10,
+            "command": "node \"$HOME/.construct/lib/hooks/readme-age-check.mjs\"",
+            "timeout": 5,
             "async": true
           }
         ],
-        "id": "stop:notify",
-        "description": "Desktop notification: files changed, TS status, session cost"
+        "id": "stop:readme-age-check",
+        "description": "Emit readme.stale role events for tracked READMEs older than 90 days"
       },
       {
         "matcher": "*",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"$HOME/.construct/lib/hooks/drive-guard.mjs\"",
-            "timeout": 10
+            "command": "node \"$HOME/.construct/lib/hooks/stop-notify.mjs\"",
+            "timeout": 10,
+            "async": true
           }
         ],
-        "id": "stop:drive-guard",
-        "description": "Block stop when drive mode active and acceptance criteria lack evidence"
+        "id": "stop:notify",
+        "description": "Desktop notification: files changed, TS status, session cost"
       },
       {
         "matcher": "*",
@@ -408,34 +447,45 @@
         ],
         "id": "stop:snapshot",
         "description": "Snapshot .cx/context.md at session end so resume has real progress"
-      }
-    ],
-    "TeammateIdle": [
+      },
       {
         "matcher": "*",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"$HOME/.construct/lib/hooks/teammate-idle-guard.mjs\"",
-            "timeout": 10
+            "command": "node \"$HOME/.construct/lib/hooks/session-optimize.mjs\"",
+            "timeout": 600,
+            "async": true
           }
         ],
-        "id": "team:teammate-idle-guard",
-        "description": "Keep worker sessions aligned with .cx/workflow.json before they go idle"
+        "id": "stop:optimize-agents",
+        "description": "Check performance reviews and auto-optimize low-scoring agents at session end"
       }
     ],
-    "TaskCompleted": [
+    "UserPromptSubmit": [
       {
         "matcher": "*",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"$HOME/.construct/lib/hooks/task-completed-guard.mjs\"",
-            "timeout": 10
+            "command": "node \"$HOME/.construct/lib/hooks/context-watch.mjs\"",
+            "timeout": 5
           }
         ],
-        "id": "team:task-completed-guard",
-        "description": "Block task completion when Construct workflow validation fails"
+        "id": "prompt:context-watch",
+        "description": "Inject compaction guidance when session token usage crosses 60% / 80% thresholds"
+      },
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.construct/lib/hooks/ci-status-check.mjs\"",
+            "timeout": 5
+          }
+        ],
+        "id": "prompt:ci-status",
+        "description": "Inject remote CI status (gh run list) into agent context so red CI is visible immediately. Cached 60s."
       }
     ]
   },
@@ -455,11 +505,8 @@
       ]
     },
     "memory": {
-      "command": "npx",
-      "args": [
-        "-y",
-        "@modelcontextprotocol/server-memory"
-      ]
+      "type": "http",
+      "url": "http://127.0.0.1:8765/"
     },
     "playwright": {
       "command": "npx",