@geraldmaron/construct 1.1.0 → 1.2.0

package/lib/worker/trace.mjs

@@ -33,6 +33,7 @@ import path from 'node:path';
 import { createTelemetryClient } from '../telemetry/client.mjs';
 import { ensureCxDir } from '../project-init-shared.mjs';
 import { appendWithRotationSync } from '../logging/rotate.mjs';
+import { ensureDiskWrite, warnBudgetOnce } from '../resources/budget.mjs';
 
 const TRACE_SUBDIR = '.cx/traces';
 
@@ -183,9 +184,16 @@ export function emitTraceEvent({
     createdAt: new Date().toISOString(),
   };
   const shardPath = path.join(dir, `${todayShard()}.jsonl`);
-  appendWithRotationSync(shardPath, `${JSON.stringify(event)}\n`, {
-    maxBytes: traceMaxBytes(env),
-  });
+  const line = `${JSON.stringify(event)}\n`;
+  const gate = ensureDiskWrite(rootDir, 'traces', Buffer.byteLength(line), env);
+  if (gate.ok) {
+    appendWithRotationSync(shardPath, line, {
+      maxBytes: traceMaxBytes(env),
+    });
+  } else {
+    warnBudgetOnce(gate.message || 'trace write blocked by .cx/ disk budget', env);
+    return { ...event, budgetSkipped: true, budgetReason: gate.reason || 'budget-exceeded' };
+  }
 
   // Fire-and-forget export to the configured remote adapter. Silent no-op when not configured.
   exportToRemote(event, env, rootDir);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geraldmaron/construct",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "type": "module",
   "packageManager": "npm@11.5.1",
   "description": "Construct — agent orchestration layer for OpenCode, Claude Code, and other coding surfaces",
@@ -26,7 +26,6 @@
     "platforms/**",
     "templates/**",
     "templates/distribution/**",
-    "db/**",
     "scripts/sync-specialists.mjs",
     "README.md",
     ".env.example"
@@ -57,20 +56,28 @@
     "test:unit": "node scripts/run-tests.mjs --exclude=tests/functional",
     "lint:js": "eslint bin/construct \"lib/**/*.mjs\" \"scripts/**/*.mjs\" \"tests/**/*.mjs\"",
     "coverage": "c8 --reporter=text-summary --reporter=lcov --src=lib --src=bin node scripts/run-tests.mjs --exclude=tests/functional",
-    "docs:init": "node lib/init-docs.mjs --yes",
+    "docs:init": "node -e \"console.error('docs:init is deprecated — use: construct init --docs-preset=lean|product|full'); process.exit(1)\"",
     "docs:update": "node ./bin/construct docs:update",
     "docs:site": "node ./bin/construct docs:site",
-    "docs:dev": "npm --prefix apps/docs run dev",
-    "docs:build": "npm --prefix apps/docs run build",
+    "docs:dev": "node scripts/npm-run.mjs npm --prefix apps/docs run dev",
+    "docs:build": "node scripts/npm-run.mjs npm --prefix apps/docs run build",
     "lint:comments": "node ./bin/construct lint:comments",
     "lint:contracts": "node ./bin/construct lint:contracts",
     "lint:agents": "node ./bin/construct lint:agents",
     "build:sea": "esbuild bin/construct --bundle --platform=node --target=node20 --packages=external --outfile=dist/construct-bundle.cjs 2>&1 || (echo 'esbuild not found — install with: npm install -g esbuild' && exit 1)",
+    "build:chat": "esbuild apps/chat/tui/index.jsx --bundle --platform=node --format=esm --packages=external --jsx=automatic --jsx-import-source=react --outfile=apps/chat/dist/tui.mjs",
+    "build:chat-desktop": "node scripts/build-chat-desktop.mjs",
+    "build:chat-desktop:bundle": "node scripts/npm-run.mjs npm install --prefix apps/chat/desktop --include=dev && node scripts/npm-run.mjs npm --prefix apps/chat/desktop run build",
+    "build:dashboard": "node scripts/npm-run.mjs npm install --prefix apps/dashboard && node scripts/npm-run.mjs npm --prefix apps/dashboard run build",
+    "examples:deck": "node scripts/generate-deck-examples.mjs",
+    "examples:distribution": "node scripts/generate-distribution-examples.mjs",
+    "clean:artifacts": "node scripts/clean-artifacts.mjs",
     "lint:profiles": "node scripts/lint-profiles.mjs",
     "learning:status": "node scripts/learning-status.mjs",
     "lint:templates": "node scripts/lint-commits-pr.mjs",
     "eval:routing": "node scripts/eval/score-intent-classifier.mjs",
-    "release:check": "node ./bin/construct doctor && npm test && node ./bin/construct docs:update --check && node ./bin/construct dashboard:sync --check && node ./bin/construct lint:comments && node scripts/lint-commits-pr.mjs",
+    "adapters": "node lib/adapters-sync.mjs",
+    "release:check": "node ./bin/construct doctor && npm test && node ./bin/construct docs:update --check && node ./bin/construct docs:site --check && node ./bin/construct registry:generate-docs --check && node ./bin/construct docs:verify --strict && node scripts/alignment/census.mjs --ratchet && node ./bin/construct dashboard:sync --check && node ./bin/construct lint:comments && node ./bin/construct certify gate && node scripts/lint-commits-pr.mjs",
     "release:gate": "node --test tests/functional/release-gate.functional.test.mjs",
     "audit:published": "node scripts/audit-published-artifact.mjs",
     "version": "node scripts/sync-construct-version.mjs && git add .construct/version",
@@ -86,21 +93,30 @@
     "js-yaml": "^4.2.0"
   },
   "optionalDependencies": {
+    "@ai-sdk/anthropic": "^3.0.85",
+    "@ai-sdk/openai": "^3.0.73",
+    "@ai-sdk/openai-compatible": "^2.0.51",
     "@huggingface/transformers": "^4.2.0",
     "@opentelemetry/api": "^1.9.0",
-    "@opentelemetry/core": "^2.7.1",
-    "@opentelemetry/exporter-trace-otlp-http": "^0.218.0",
-    "@opentelemetry/resources": "^2.7.1",
-    "@opentelemetry/sdk-trace-node": "^1.25.0",
-    "@opentelemetry/semantic-conventions": "^1.25.0"
+    "ai": "^6.0.208",
+    "ink": "^7.1.0",
+    "mammoth": "^1.12.0",
+    "pptx-embed-fonts": "^0.0.6",
+    "pptxgenjs": "^4.0.1",
+    "react": "^19.2.7",
+    "unpdf": "^1.6.2",
+    "zod": "^4.4.3"
   },
   "overrides": {
-    "express-rate-limit": "8.5.1"
+    "express-rate-limit": "8.5.1",
+    "undici": "6.27.0"
   },
   "devDependencies": {
     "@eslint/js": "^9.39.4",
     "c8": "^11.0.0",
+    "esbuild": "^0.28.1",
     "eslint": "^10.4.1",
-    "globals": "^17.6.0"
+    "globals": "^17.6.0",
+    "ink-testing-library": "^4.0.0"
   }
 }

package/personas/construct.md

@@ -6,7 +6,7 @@ You are Construct. The user talks only to you; internal routing and specialist d
 
 **Anti-fabrication contract**: every load-bearing claim cites a verifiable source. Missing source becomes `unknown` or `[unverified]`. Specialists tailor; the persona never weakens. See `rules/common/no-fabrication.md`.
 
-## Start of every session
+## Start of every session <!-- cx:prio=3 -->
 
 Before responding, run in parallel. do not narrate:
 1. `project_context`. state from `.cx/context.md`
@@ -23,34 +23,34 @@ Honor the project operating hierarchy:
 
 Use the single-writer rule whenever multiple sessions are active: if two sessions would touch the same file, one session owns the edit and the other reviews, researches, or waits for handoff.
 
-## Classify before acting
+## Classify before acting <!-- cx:prio=1 -->
 
-Before any non-trivial request, CALL the code-backed orchestration policy via the `orchestration_policy` MCP tool with the request text and your `fileCount` / `moduleCount` / `introducesContract` estimate. Do not classify from memory. Honor the returned `track` and `specialists`. When `track` is `orchestrated` you may not author the deliverable yourself: emit the task-packet, dispatch the chain, return in Construct's voice after verdicts. Visual deliverables (wireframes, diagrams, decks) use real visual tools, not bullet prose.
+Before any non-trivial request, CALL the code-backed orchestration policy via the `orchestration_policy` MCP tool with the request text and your `fileCount` / `moduleCount` / `introducesContract` estimate. Do not classify from memory. Honor the returned `track` and `specialists`. When `track` is orchestrated, dispatch the chain — do not author the deliverable yourself.
 
 Tracks: immediate (act directly), focused (one bounded specialist), orchestrated (plan → challenge → build → validate, tracker-backed). cx-devil-advocate is mandatory whenever `riskFlags` include architecture, security, dataIntegrity, or ai.
 
 Orchestrated dispatches emit a task-packet with `goal`, `intent`, `workCategory`, `riskFlags`, `acceptanceCriteria` before naming specialists (`specialists/contracts.json:construct-to-orchestrator`).
 
-## Gates and contracts (org-in-a-box)
+## Gates and contracts (org-in-a-box) <!-- cx:prio=2 -->
 
 `orchestration_policy` returns three artifacts; honor all three:
 
 1. **Gates**. `framingChallenge`, `externalResearch`, `docAuthoring`
-2. **Contract chain**. typed handoffs from `specialists/contracts.json`. Call `agent_contract` MCP tool at handoff.
+2. **Contract chain**. typed handoffs from `specialists/contracts.json`. Call `agent_contract` with `handoffPacket` from `orchestration_policy`.
 3. **Specialist sequence**. dispatch plan with ordering/parallel markers.
 
 Before DONE: postconditions met · sources cited · framing logged · ADRs have Rejected alternatives.
 
-## Branch + commit approval
+## Branch + commit approval <!-- cx:prio=1 -->
 
 - **Working branch is surfaced every session** at the top of session-start. Restate it before any mutating operation.
 - **Never commit, push, or merge without asking first.** Before `git commit`, `git push`, or `gh pr merge`: state branch, show the proposed message / refspec / PR number verbatim, wait for explicit yes. A batch go-ahead covers a defined sequence; new commits later are their own gate. See `rules/common/commit-approval.md`.
 
-## Intake surface
+## Intake surface <!-- cx:prio=3 -->
 
 The active profile (`construct profile show`) sets the intake taxonomy. Session-start surfaces pending intake at `.cx/intake/pending/<id>.json`. Read with `construct intake show <id>`; the triage block names the primary owner, recommended chain, and next action. For non-trivial signals, plan with `construct graph from-intake <id>` and update node status with evidence (`construct graph status … done --evidence=…`). A node cannot reach `done` without an evidence record. Team / enterprise mode wraps tool calls in the MCP broker; when it returns `ApprovalRequired`, surface the question and never bypass.
 
-## Action discipline
+## Action discipline <!-- cx:prio=1 -->
 
 - Dispatch, don't solo-plan: 3+ files, 2+ modules, or a new contract → cx-architect owns the plan.
 - Ask or look up, don't speculate: call `context7_query-docs` / `WebFetch`, ask, or commit to a default. Never a fourth round of internal debate.
@@ -58,7 +58,7 @@ The active profile (`construct profile show`) sets the intake taxonomy. Session-
 - Probe before bulk read: check size via `Glob` / `wc -l` or a `limit: 50` probe before `Read` with `limit > 200`.
 - Start-of-task: parallel bootstrap (above) + `cx_trace` before anything mutating.
 
-## Communication + state
+## Communication + state <!-- cx:prio=2 -->
 
 Lead with the answer. One question when blocked. Confirm what changed when done.
 
@@ -70,7 +70,7 @@ Non-trivial work: update Beads (`bd note <id>`), `plan.md`, docs with owner / ac
 
 Load-bearing state: `AGENTS.md`, `.cx/context.md`/`.json`, `docs/README.md`, `docs/architecture.md` (read at session start, update before DONE, prune stale sections). `plan.md` is local-only.
 
-## Quality gates
+## Quality gates <!-- cx:prio=2 -->
 
 After any implementation, dispatch validation before marking done:
 1. cx-reviewer. correctness, regression, coverage
@@ -79,17 +79,17 @@ After any implementation, dispatch validation before marking done:
 
 Do not mark `done` until cx-reviewer and cx-qa return verdicts. BLOCKED or any CRITICAL finding stops shipping.
 
-## Hard release gates
+## Hard release gates <!-- cx:prio=3 -->
 
 Run `npm run release:check` before any commit or push. never wait for CI. Commits follow `.gitmessage`; PRs follow `.github/pull_request_template.md`. Full policy: `rules/common/release-gates.md`.
 
-## Loop guard
+## Loop guard <!-- cx:prio=1 -->
 
 Same action 3+ times with no state change → stop. Report what was tried, what blocked progress, what decision is needed.
 
 Before stopping: surface incomplete tracker-linked plan slices and unmet acceptance criteria. Do not stop silently with work in-flight.
 
-## Drive mode
+## Drive mode <!-- cx:prio=3 -->
 
 Activates on word-boundary triggers. `/work:drive`, standalone `drive`, or `full send`. Substring matches do not count.
 

package/platforms/claude/settings.template.json

@@ -165,6 +165,30 @@
         "id": "post:edit:comment-lint",
         "description": "Block edits that violate comment policy (banned patterns, missing required header). No bypass — repair the policy if it fires wrong."
       },
+      {
+        "matcher": "Write|Edit|MultiEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.construct/lib/hooks/brand-prose-lint.mjs\"",
+            "timeout": 15
+          }
+        ],
+        "id": "post:edit:brand-prose-lint",
+        "description": "Block marketing voice, retired fonts, and Construct/cli naming drift in governed docs and templates."
+      },
+      {
+        "matcher": "Write|Edit|MultiEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.construct/lib/hooks/artifact-release-gate.mjs\"",
+            "timeout": 15
+          }
+        ],
+        "id": "post:edit:artifact-release-gate",
+        "description": "Advisory: surface manifest structure/visual gaps on typed docs under docs/** and .cx/research/**"
+      },
       {
         "matcher": "Write|Edit|MultiEdit",
         "hooks": [
@@ -177,6 +201,18 @@
         "id": "post:edit:doc-coupling",
         "description": "Advisory: nudge when code edits accumulate without CHANGELOG/docs updates (pre-commit gate will block at commit time)"
       },
+      {
+        "matcher": "Write|Edit|MultiEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$HOME/.construct/lib/hooks/graph-impact-advisory.mjs\"",
+            "timeout": 10
+          }
+        ],
+        "id": "post:edit:graph-impact",
+        "description": "Advisory: surface affected tests from the dependency graph after code edits"
+      },
       {
         "matcher": "Write|Edit|MultiEdit",
         "hooks": [

package/rules/common/patterns.md

@@ -6,7 +6,7 @@ description: reusable design patterns and skeleton project strategy.
 ## Skeleton Projects
 
 When implementing new functionality:
-1. Search for battle-tested skeleton projects
+1. Search for proven skeleton projects
 2. Evaluate options for security, extensibility, and relevance
 3. Clone best match as foundation
 4. Iterate within proven structure

package/rules/common/release-gates.md

@@ -7,7 +7,7 @@ These are blocking gates. Every agent, persona, and harness session working in o
 
 The goal is simple: if a gate would fail in CI, it fails locally first. We never push and pray.
 
-## The five local gates
+## The six local gates
 
 Run these before declaring work done. Pasting the output into the PR body or `bd note` is the standard evidence.
 
@@ -18,8 +18,9 @@ Run these before declaring work done. Pasting the output into the PR body or `bd
 | Doc verification | `node bin/construct docs:verify` | "All documentation checks passed": no warnings either |
 | AUTO doc drift | `node bin/construct docs:update --check` | "Docs are up to date" |
 | Template policy | `npm run lint:templates` | "Template policy: clean." |
+| Certification RC gate | `node bin/construct certify gate` | Release-critical capabilities are not stale; hermetic certification scenarios pass; skipped live runs do not satisfy evidence |
 
-The shortcut for all five (plus dashboard sync) is:
+The shortcut for all six (plus dashboard sync) is:
 
 ```bash
 npm run release:check
@@ -33,7 +34,7 @@ Commit subjects must match `type(scope): subject`: type from {feat, fix, refacto
 
 PR descriptions must keep all six headings (Summary, Beads issue, Doc updates included, Local gates, Test plan, Risks / rollback) with at least one checked box in both the "Doc updates" and "Local gates" sections. Empty templates fail.
 
-Forbidden in commit messages: `Co-Authored-By: Claude*` trailers (unless the user explicitly asks), `--no-verify`, `--no-gpg-sign`. Forbidden in PR bodies: deleting the required headings, leaving every gate box unchecked.
+Forbidden in commit messages: any `Co-Authored-By:` trailer (including Cursor agent attribution) unless the user explicitly asks, `--no-verify`, `--no-gpg-sign`. Forbidden in PR bodies: deleting the required headings, leaving every gate box unchecked.
 
 ## The tracker contract