@geraldmaron/construct 1.0.12 → 1.0.14

package/specialists/registry.json

@@ -98,7 +98,10 @@
         "openingQuestion": "What are we trying to learn, and how will we know when we've learned it?",
         "failureMode": "If you can't write a falsifiable hypothesis, this is a planning task, not R&D."
       },
-      "canEdit": false
+      "canEdit": false,
+      "subscriptions": [
+        "research.gate.required"
+      ]
     },
     {
       "internal": true,
@@ -147,6 +150,26 @@
       "canEdit": false,
       "collaborators": [
         "ux-researcher"
+      ],
+      "subscriptions": [
+        "backlog.stale",
+        "prd.requested"
+      ],
+      "docArtifacts": [
+        "backlog-proposal",
+        "customer-profile",
+        "meta-prd",
+        "one-pager",
+        "prd",
+        "prd-business",
+        "prd-platform",
+        "prfaq"
+      ],
+      "watchConditions": [
+        {
+          "watcher": "high-ambiguity-deep-work",
+          "reason": "clarify acceptance criteria (high ambiguity)"
+        }
       ]
     },
     {
@@ -234,7 +257,10 @@
         "openingQuestion": "What must be done first, what blocks what, and who owns each deliverable?",
         "failureMode": "If every task can run in parallel, the dependency graph wasn't drawn."
       },
-      "canEdit": false
+      "canEdit": false,
+      "subscriptions": [
+        "plan.requested"
+      ]
     },
     {
       "internal": true,
@@ -273,7 +299,17 @@
         "openingQuestion": "What is the version, the publication date, and the primary source?",
         "failureMode": "If all sources are secondhand or undated, the research isn't done."
       },
-      "canEdit": false
+      "canEdit": false,
+      "subscriptions": [
+        "evidence.requested",
+        "research.requested"
+      ],
+      "docArtifacts": [
+        "evidence-brief",
+        "product-intelligence-report",
+        "research-brief",
+        "signal-brief"
+      ]
     },
     {
       "internal": true,
@@ -319,6 +355,9 @@
         "data-analyst",
         "product-manager",
         "researcher"
+      ],
+      "subscriptions": [
+        "strategy.required"
       ]
     },
     {
@@ -409,6 +448,9 @@
         "product-manager",
         "qa",
         "rd-lead"
+      ],
+      "subscriptions": [
+        "eval.regression"
       ]
     },
     {
@@ -506,6 +548,17 @@
         "ai-engineer",
         "designer",
         "engineer"
+      ],
+      "subscriptions": [
+        "adr.requested",
+        "arch.boundary.violated"
+      ],
+      "docArtifacts": [
+        "adr",
+        "architecture-overview",
+        "rfc",
+        "rfc-platform",
+        "system-design"
       ]
     },
     {
@@ -600,7 +653,13 @@
         "openingQuestion": "What's the simplest reason this fails?",
         "failureMode": "If you find no CRITICAL challenges, you looked at the happy path. Dig into the error paths."
       },
-      "canEdit": false
+      "canEdit": false,
+      "watchConditions": [
+        {
+          "watcher": "architecture-without-metric",
+          "reason": "architecture change without stated success metric"
+        }
+      ]
     },
     {
       "internal": true,
@@ -639,7 +698,11 @@
         "openingQuestion": "Does this do what it's supposed to do under the conditions it wasn't designed for?",
         "failureMode": "If your review only covered the happy path, you haven't reviewed."
       },
-      "canEdit": true
+      "canEdit": true,
+      "subscriptions": [
+        "pr.opened",
+        "pr.ready-for-review"
+      ]
     },
     {
       "internal": true,
@@ -684,7 +747,22 @@
         "openingQuestion": "What does an attacker see when they look at this?",
         "failureMode": "If the only finding is 'no hardcoded secrets,' you checked one category out of eight."
       },
-      "canEdit": true
+      "canEdit": true,
+      "subscriptions": [
+        "config.protection.violation",
+        "dep.cve",
+        "secrets.detected"
+      ],
+      "docArtifacts": [
+        "security-review",
+        "threat-model"
+      ],
+      "watchConditions": [
+        {
+          "watcher": "auth-payments-non-narrow",
+          "reason": "pre-dispatch threat model (auth/payments/PII + non-narrow blast radius)"
+        }
+      ]
     },
     {
       "internal": true,
@@ -723,7 +801,16 @@
         "openingQuestion": "For each acceptance criterion — how does the test fail when the criterion is violated?",
         "failureMode": "If every test passes on the first run with no debugging, the tests weren't hard enough."
       },
-      "canEdit": true
+      "canEdit": true,
+      "subscriptions": [
+        "coverage.drop",
+        "test.fail",
+        "test.flake"
+      ],
+      "docArtifacts": [
+        "qa-strategy",
+        "test-plan"
+      ]
     },
     {
       "internal": true,
@@ -762,7 +849,11 @@
         "openingQuestion": "Can I reproduce this deterministically, and what is the exact state at the point of failure?",
         "failureMode": "If you can't state the invariant that was violated, you haven't found root cause."
       },
-      "canEdit": true
+      "canEdit": true,
+      "subscriptions": [
+        "hang.detected",
+        "regression.detected"
+      ]
     },
     {
       "internal": true,
@@ -811,6 +902,23 @@
         "engineer",
         "qa",
         "security"
+      ],
+      "subscriptions": [
+        "edit_loop.stuck",
+        "mcp.unhealthy.persistent",
+        "push_gate.fail",
+        "service.down"
+      ],
+      "docArtifacts": [
+        "incident-report",
+        "postmortem",
+        "runbook"
+      ],
+      "watchConditions": [
+        {
+          "watcher": "wide-blast-radius",
+          "reason": "wide blast radius — operational readiness review"
+        }
       ]
     },
     {
@@ -861,6 +969,10 @@
         "qa",
         "security",
         "sre"
+      ],
+      "subscriptions": [
+        "infra.change.requested",
+        "service.scale.event"
       ]
     },
     {
@@ -902,7 +1014,11 @@
         "openingQuestion": "What data is being collected, stored, or processed, and do we have documented legal basis for each?",
         "failureMode": "If the risk list is empty, you didn't check AI processing obligations or dependency licenses past layer one."
       },
-      "canEdit": false
+      "canEdit": false,
+      "subscriptions": [
+        "dep.license",
+        "privacy-policy.review"
+      ]
     },
     {
       "internal": true,
@@ -941,7 +1057,11 @@
         "openingQuestion": "If this goes wrong 30 minutes after full rollout, what exactly do we do?",
         "failureMode": "If the rollback procedure isn't tested, it doesn't exist. You'll find out during an incident."
       },
-      "canEdit": true
+      "canEdit": true,
+      "subscriptions": [
+        "release.candidate",
+        "version.bump.needed"
+      ]
     },
     {
       "internal": true,
@@ -982,7 +1102,17 @@
         "openingQuestion": "What did we decide, why did we decide it, and where will the next person find it?",
         "failureMode": "If the project context file hasn't been updated since the work started, something important wasn't captured."
       },
-      "canEdit": true
+      "canEdit": true,
+      "subscriptions": [
+        "changelog.missing",
+        "document.stale",
+        "pr.merged.no-docs",
+        "readme.stale"
+      ],
+      "docArtifacts": [
+        "changelog",
+        "memo"
+      ]
     },
     {
       "internal": true,
@@ -1025,7 +1155,16 @@
         "openingQuestion": "What is the user doing, what are they feeling, and what should the interface show them?",
         "failureMode": "If you don't have designed error and empty states, you have an incomplete design."
       },
-      "canEdit": true
+      "canEdit": true,
+      "subscriptions": [
+        "design.requested"
+      ],
+      "watchConditions": [
+        {
+          "watcher": "visual-or-ui-risk",
+          "reason": "visual deliverable / UI risk surface"
+        }
+      ]
     },
     {
       "internal": true,
@@ -1069,6 +1208,9 @@
         "legal-compliance",
         "qa",
         "ux-researcher"
+      ],
+      "subscriptions": [
+        "a11y.violation"
       ]
     },
     {
@@ -1146,7 +1288,10 @@
         "openingQuestion": "Which agents have degraded since the last cycle, and what does the trace evidence say about why?",
         "failureMode": "If all agents look stable, you haven't checked variance and trend. Median hides deterioration."
       },
-      "canEdit": true
+      "canEdit": true,
+      "subscriptions": [
+        "trace.anomaly"
+      ]
     },
     {
       "internal": true,

package/lib/hooks/env-check.mjs

@@ -1,83 +0,0 @@
-#!/usr/bin/env node
-/**
- * env-check.mjs — SessionStart
- *
- * Reads .env.example from the project root, compares against .env and
- * process.env, and writes missing required vars to stdout so Claude sees
- * them at session open. Silent when everything is in order.
- *
- * @p95ms 20
- * @maxBlockingScope SessionStart
- */
-import { readFileSync, existsSync, realpathSync } from 'fs';
-import { fileURLToPath } from 'url';
-
-// Resolve symlinks immediately to avoid CJS/ESM loader edge cases during
-// rapid concurrent session-start hook invocations.
-try { realpathSync(fileURLToPath(import.meta.url)); } catch { /* non-critical */ }
-import { join } from 'path';
-
-let input = {};
-try { input = JSON.parse(readFileSync(0, 'utf8')); } catch { /* no stdin */ }
-
-const cwd = input?.cwd || process.cwd();
-
-// Find .env.example — project root only (don't walk up, avoid false positives)
-const examplePath = join(cwd, '.env.example');
-if (!existsSync(examplePath)) process.exit(0);
-
-// Parse both files into key sets
-function parseEnvFile(path) {
-  if (!existsSync(path)) return new Map();
-  const map = new Map();
-  const lines = readFileSync(path, 'utf8').split('\n');
-  for (const line of lines) {
-    const stripped = line.trim();
-    if (!stripped || stripped.startsWith('#')) continue;
-    const eq = stripped.indexOf('=');
-    if (eq === -1) continue;
-    const key = stripped.slice(0, eq).trim();
-    const val = stripped.slice(eq + 1).trim();
-    if (key) map.set(key, val);
-  }
-  return map;
-}
-
-const example = parseEnvFile(examplePath);
-if (example.size === 0) process.exit(0);
-
-const envFile = parseEnvFile(join(cwd, '.env'));
-
-// A key is "required" if its example value is a non-empty placeholder
-// (not already set to a real value — we don't block on keys with defaults)
-const PLACEHOLDER = /^(YOUR_|<|__|\$\{|REPLACE|ADD_|INSERT_|xxx|TODO)/i;
-const OPTIONAL_COMMENT = /#.*optional/i;
-
-function isRequired(key, exampleVal) {
-  // If value looks like a real default (not a placeholder), it's optional
-  if (!exampleVal) return true; // empty = required
-  if (PLACEHOLDER.test(exampleVal)) return true;
-  // If it has a real value in example, treat as optional with default
-  return false;
-}
-
-const missing = [];
-for (const [key, exampleVal] of example) {
-  if (!isRequired(key, exampleVal)) continue;
-  // Check .env file first, then process.env
-  const inEnvFile = envFile.has(key) && envFile.get(key) !== '' && !PLACEHOLDER.test(envFile.get(key));
-  const inProcessEnv = process.env[key] && !PLACEHOLDER.test(process.env[key]);
-  if (!inEnvFile && !inProcessEnv) {
-    missing.push(key);
-  }
-}
-
-if (missing.length === 0) process.exit(0);
-
-const noun = missing.length === 1 ? 'variable' : 'variables';
-const list = missing.map(k => `  - ${k}`).join('\n');
-process.stdout.write(
-  `## Environment check — ${missing.length} required ${noun} not set\n${list}\nAdd these to .env before running the app.\n`
-);
-
-process.exit(0);

package/lib/hooks/read-tracker.mjs

@@ -1,61 +0,0 @@
-#!/usr/bin/env node
-/**
- * lib/hooks/read-tracker.mjs — Read tracker hook — tracks file reads for efficiency analysis.
- *
- * Runs as PostToolUse after Read tool calls. Logs each read to ~/.cx/read-log.json including file path, line count, and session timestamp for efficiency reporting.
- *
- * @p95ms 10
- * @maxBlockingScope none (PostToolUse, non-blocking)
- */
-import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'fs';
-import { createHash } from 'crypto';
-import { join, resolve } from 'path';
-import { homedir } from 'os';
-import { flushReadTrackerDeltas, recordReadDelta } from '../read-tracker-store.mjs';
-
-const CX_DIR = join(homedir(), '.cx');
-const HASH_STORE = join(CX_DIR, 'file-hashes.json');
-let input = {};
-try { input = JSON.parse(readFileSync(0, 'utf8')); } catch { process.exit(0); }
-
-if ((input?.tool_name || '') !== 'Read') process.exit(0);
-
-const rawPath = input?.tool_input?.file_path || '';
-if (!rawPath) process.exit(0);
-
-const absPath = rawPath.startsWith('/') ? rawPath : resolve(input?.cwd || process.cwd(), rawPath);
-if (!existsSync(absPath)) process.exit(0);
-
-try {
-  const content = readFileSync(absPath, 'utf8');
-  const hash = createHash('sha256').update(content).digest('hex').slice(0, 16);
-  const nowIso = new Date().toISOString();
-  const requestedLimit = Number(input?.tool_input?.limit || 0);
-  const effectiveLimit = requestedLimit > 0 ? requestedLimit : 2000;
-
-  mkdirSync(CX_DIR, { recursive: true });
-  let store = {};
-  try { store = JSON.parse(readFileSync(HASH_STORE, 'utf8')); } catch { /* fresh */ }
-
-  store[absPath] = { hash, ts: nowIso, size: content.length };
-
-  // Prune entries older than 2 hours
-  const cutoff = Date.now() - 2 * 60 * 60 * 1000;
-  for (const [k, v] of Object.entries(store)) {
-    if (new Date(v.ts).getTime() < cutoff) delete store[k];
-  }
-
-  writeFileSync(HASH_STORE, JSON.stringify(store, null, 2));
-  recordReadDelta({
-    path: absPath,
-    size: content.length,
-    limit: effectiveLimit,
-    ts: nowIso,
-  }, process.env);
-
-  if (process.env.CONSTRUCT_READ_TRACKER_FLUSH === '1') {
-    flushReadTrackerDeltas({ nowIso, env: process.env });
-  }
-} catch { /* best effort */ }
-
-process.exit(0);

package/lib/policy/unified-gates.mjs

@@ -1,96 +0,0 @@
-// lib/policy/unified-gates.mjs
-// Single policy declaration for all enforcement layers
-
-export const POLICIES = {
-  commentStyle: {
-    id: 'comment-style',
-    description: 'Comments must follow project standards',
-    layers: ['write', 'commit', 'ci'],
-    bypass: 'CONSTRUCT_SKIP_COMMENT_STYLE',
-    critical: false,
-  },
-  docCoupling: {
-    id: 'doc-coupling',
-    description: 'Code changes require documentation updates',
-    layers: ['commit', 'push'],
-    bypass: 'CONSTRUCT_SKIP_DOCS',
-    critical: false,
-  },
-  secretScan: {
-    id: 'secret-scan',
-    description: 'No secrets in committed code',
-    layers: ['commit', 'push', 'ci'],
-    bypass: 'CONSTRUCT_SKIP_SECRET_SCAN',
-    critical: true,
-  },
-  ciStatus: {
-    id: 'ci-status',
-    description: 'CI must be green before push',
-    layers: ['push', 'session-end'],
-    bypass: 'CONSTRUCT_SKIP_CI_CHECK',
-    critical: true,
-  },
-};
-
-export class UnifiedGateEngine {
-  constructor(options = {}) {
-    this.env = options.env || process.env;
-  }
-  
-  isBypassed(policyId) {
-    const policy = POLICIES[policyId];
-    if (!policy) return { bypassed: false };
-    
-    if (policy.bypass && this.env[policy.bypass] === '1') {
-      return { bypassed: true, envVar: policy.bypass };
-    }
-    
-    if (this.env.CONSTRUCT_SKIP_ALL_GATES === '1') {
-      return { bypassed: true, envVar: 'CONSTRUCT_SKIP_ALL_GATES' };
-    }
-    
-    return { bypassed: false };
-  }
-  
-  async evaluateLayer(layer, context = {}) {
-    const results = [];
-    
-    for (const [id, policy] of Object.entries(POLICIES)) {
-      if (policy.layers.includes(layer)) {
-        const bypass = this.isBypassed(id);
-        results.push({
-          policy: id,
-          passed: bypass.bypassed || true,
-          bypassed: bypass.bypassed,
-          bypassEnvVar: bypass.envVar,
-          critical: policy.critical,
-        });
-      }
-    }
-    
-    const failed = results.filter(r => !r.passed && r.critical);
-    
-    return {
-      layer,
-      passed: failed.length === 0,
-      canProceed: failed.length === 0,
-      results,
-      summary: `${results.filter(r => r.passed).length}/${results.length} passed`,
-    };
-  }
-}
-
-export async function checkGates(layer, context = {}, options = {}) {
-  const engine = new UnifiedGateEngine(options);
-  return await engine.evaluateLayer(layer, context);
-}
-
-export function listPolicies() {
-  return Object.entries(POLICIES).map(([id, policy]) => ({
-    id,
-    description: policy.description,
-    layers: policy.layers,
-    bypass: policy.bypass,
-    critical: policy.critical,
-  }));
-}