@geraldmaron/construct 1.2.2 → 1.3.0

package/specialists/org/contracts/reviewer-to-security.json

@@ -0,0 +1,41 @@
+{
+  "id": "reviewer-to-security",
+  "producer": "cx-reviewer",
+  "consumer": "cx-security",
+  "trigger": {
+    "riskFlags": [
+      "security"
+    ]
+  },
+  "input": {
+    "schema": "lib/contract-schemas/review-report.json",
+    "mustContain": [
+      "target",
+      "findings"
+    ]
+  },
+  "output": {
+    "schema": "lib/contract-schemas/review-report.json",
+    "type": "review-report",
+    "specialization": "security",
+    "mustContain": [
+      "threatModelUpdatedAt",
+      "contractStart"
+    ]
+  },
+  "preconditions": [
+    "Scope tagged as auth/secrets/payments/user-data"
+  ],
+  "postconditions": [
+    "Attacker-perspective findings logged",
+    "Threat model updated if architecture surface changed",
+    "threatModelUpdatedAt >= contractStart — prevents post-hoc threat models written after the architecture has shipped"
+  ],
+  "description": "",
+  "teamBoundary": {
+    "crosses": true,
+    "producerTeam": "quality-group",
+    "consumerTeam": "governance-group",
+    "requiresApprovalFrom": []
+  }
+}

package/specialists/org/contracts/sre-to-release-manager.json

@@ -0,0 +1,36 @@
+{
+  "id": "sre-to-release-manager",
+  "producer": "cx-sre",
+  "consumer": "cx-release-manager",
+  "trigger": {
+    "riskFlags": [
+      "dataIntegrity"
+    ],
+    "intent": [
+      "implementation"
+    ]
+  },
+  "input": {
+    "shape": "sre-readiness",
+    "mustContain": [
+      "slos",
+      "runbooks",
+      "alerts",
+      "dashboards"
+    ]
+  },
+  "output": {
+    "shape": "release-decision",
+    "mustContain": [
+      "decision",
+      "rollbackPlan"
+    ]
+  },
+  "preconditions": [
+    "Runbook exists for the new code path; rollback procedure verified"
+  ],
+  "postconditions": [
+    "On-call briefed; alert thresholds set"
+  ],
+  "description": ""
+}

package/specialists/org/contracts/test-automation-to-engineer.json

@@ -0,0 +1,34 @@
+{
+  "id": "test-automation-to-engineer",
+  "producer": "cx-test-automation",
+  "consumer": "cx-engineer",
+  "trigger": {
+    "automation.required": true
+  },
+  "input": {
+    "shape": "automation-plan",
+    "mustContain": [
+      "framework",
+      "coverageTargets",
+      "flakeBudget"
+    ]
+  },
+  "output": {
+    "schema": "lib/contract-schemas/implementation.json",
+    "type": "implementation"
+  },
+  "preconditions": [
+    "Test scaffolding lands before behavioral edits so the test fails for the right reason first"
+  ],
+  "postconditions": [
+    "Engineer adds at least one failing test that demonstrates the bug or missing behavior before implementing the fix",
+    "Quarantined flaky tests carry an owner and a remediation date"
+  ],
+  "description": "",
+  "teamBoundary": {
+    "crosses": true,
+    "producerTeam": "quality-group",
+    "consumerTeam": "engineering-group",
+    "requiresApprovalFrom": []
+  }
+}

package/specialists/org/contracts/trace-reviewer-to-sre.json

@@ -0,0 +1,41 @@
+{
+  "id": "trace-reviewer-to-sre",
+  "producer": "cx-trace-reviewer",
+  "consumer": "cx-sre",
+  "trigger": {
+    "trace.anomaly": true,
+    "riskFlags": [
+      "performance",
+      "reliability"
+    ]
+  },
+  "input": {
+    "shape": "trace-analysis",
+    "mustContain": [
+      "flaggedAgents",
+      "evidence"
+    ]
+  },
+  "output": {
+    "shape": "sre-readiness",
+    "mustContain": [
+      "slos",
+      "runbooks",
+      "alerts"
+    ]
+  },
+  "preconditions": [
+    "Flagged agents meet the minimum trace threshold (20+); insufficient-trace agents deferred"
+  ],
+  "postconditions": [
+    "SRE adjusts alert thresholds or SLOs based on the cited trace evidence",
+    "Runbook updated for the failure pattern identified at fleet level"
+  ],
+  "description": "",
+  "teamBoundary": {
+    "crosses": true,
+    "producerTeam": "quality-group",
+    "consumerTeam": "operations-group",
+    "requiresApprovalFrom": []
+  }
+}

package/specialists/org/contracts/user-to-construct.json

@@ -0,0 +1,30 @@
+{
+  "id": "user-to-construct",
+  "producer": "user",
+  "consumer": "construct",
+  "trigger": {
+    "always": true
+  },
+  "input": {
+    "shape": "natural-language-request",
+    "mustContain": [
+      "goal"
+    ]
+  },
+  "output": {
+    "shape": "routed-plan",
+    "mustContain": [
+      "track",
+      "specialists",
+      "dispatchPlan"
+    ]
+  },
+  "preconditions": [
+    "Session bootstrap completed: project_context and memory_search called, plus relevant repo docs read as needed"
+  ],
+  "postconditions": [
+    "Intent classified; work category tagged",
+    "Route decision surfaced as a single-sentence plan"
+  ],
+  "description": ""
+}

package/specialists/org/groups/engineering-group.json

@@ -0,0 +1,43 @@
+{
+  "id": "engineering-group",
+  "name": "Engineering Group",
+  "owner": "architect",
+  "roles": [
+    "architect",
+    "engineer",
+    "debugger",
+    "ai-engineer",
+    "data-engineer",
+    "platform-engineer"
+  ],
+  "decisionRights": [
+    "architecture",
+    "technology-selection",
+    "implementation-approach",
+    "performance-optimization"
+  ],
+  "forbiddenDecisions": [
+    "product-scope",
+    "user-research",
+    "deployment-timing"
+  ],
+  "escalationPath": [
+    "architect",
+    "rd-lead",
+    "orchestrator"
+  ],
+  "charter": "Design, build, and harden the system. Owns architecture decisions, technology choices, code quality, debugging, AI integration, and the platform underneath. Does not own product framing, user research direction, or release timing. Escalates tech-debt conflicts to R&D leadership.",
+  "contact": {
+    "slack": "#engineering",
+    "email": "engineering@example.com",
+    "owner": "architect"
+  },
+  "evidence": [
+    "AGENTS.md (rnd profile departments section)",
+    "docs/guides/concepts/architecture.mdx"
+  ],
+  "kind": "group",
+  "squads": [
+    "engineering-team"
+  ]
+}

package/specialists/org/groups/governance-group.json

@@ -0,0 +1,38 @@
+{
+  "id": "governance-group",
+  "name": "Governance Group",
+  "owner": "security",
+  "roles": [
+    "security",
+    "legal-compliance"
+  ],
+  "decisionRights": [
+    "security-approval",
+    "compliance-review",
+    "risk-assessment",
+    "policy-definition"
+  ],
+  "forbiddenDecisions": [
+    "product-scope",
+    "implementation-approach",
+    "deployment-readiness"
+  ],
+  "escalationPath": [
+    "security",
+    "architect",
+    "orchestrator"
+  ],
+  "charter": "Keep the system safe to operate and inside its legal envelope. Owns security review, compliance verification, risk assessment, and the audit trail. Does not own implementation or product decisions but can block deployments that violate policy. Escalates policy conflicts to orchestrator.",
+  "contact": {
+    "slack": "#governance",
+    "email": "governance@example.com",
+    "owner": "security"
+  },
+  "evidence": [
+    "AGENTS.md (rnd profile departments section)"
+  ],
+  "kind": "group",
+  "squads": [
+    "governance-team"
+  ]
+}

package/specialists/org/groups/operations-group.json

@@ -0,0 +1,41 @@
+{
+  "id": "operations-group",
+  "name": "Operations Group",
+  "owner": "sre",
+  "roles": [
+    "release-manager",
+    "sre",
+    "operations",
+    "docs-keeper"
+  ],
+  "decisionRights": [
+    "deployment",
+    "rollback",
+    "incident-response",
+    "runbook-approval",
+    "ops-procedure"
+  ],
+  "forbiddenDecisions": [
+    "architecture",
+    "product-scope",
+    "security-policy"
+  ],
+  "escalationPath": [
+    "sre",
+    "architect",
+    "orchestrator"
+  ],
+  "charter": "Keep the system running and shipping. Owns release management, SRE response, ops runbooks, documentation upkeep, and deployment execution. Does not own architecture or product decisions. Escalates reliability vs. change-rate conflicts to architecture/leadership.",
+  "contact": {
+    "slack": "#operations",
+    "email": "operations@example.com",
+    "owner": "sre"
+  },
+  "evidence": [
+    "AGENTS.md (rnd profile departments section)"
+  ],
+  "kind": "group",
+  "squads": [
+    "operations-team"
+  ]
+}

package/specialists/org/groups/product-group.json

@@ -0,0 +1,46 @@
+{
+  "id": "product-group",
+  "name": "Product Group",
+  "owner": "product-manager",
+  "roles": [
+    "product-manager",
+    "ux-researcher",
+    "designer",
+    "researcher",
+    "accessibility"
+  ],
+  "decisionRights": [
+    "intake-triage",
+    "design-approval",
+    "scope-change",
+    "evidence-requirement"
+  ],
+  "forbiddenDecisions": [
+    "deployment",
+    "security-override",
+    "infra-change"
+  ],
+  "escalationPath": [
+    "product-manager",
+    "rd-lead",
+    "orchestrator"
+  ],
+  "charter": "Translate user reality into shippable change. Owns problem framing, requirements, evidence gathering, design decisions, and acceptance criteria. Does not own implementation choices, deployment decisions, or security policy. Escalates scope conflicts to R&D leadership.",
+  "contact": {
+    "slack": "#product",
+    "email": "product@example.com",
+    "owner": "product-manager"
+  },
+  "evidence": [
+    "AGENTS.md (rnd profile departments section)",
+    "construct-u0ik (decision research on group charter pattern)"
+  ],
+  "kind": "group",
+  "squads": [
+    "product-management-team",
+    "ux-research-team",
+    "design-team",
+    "research-team",
+    "accessibility-team"
+  ]
+}

package/specialists/org/groups/quality-group.json

@@ -0,0 +1,42 @@
+{
+  "id": "quality-group",
+  "name": "Quality Group",
+  "owner": "reviewer",
+  "roles": [
+    "reviewer",
+    "qa",
+    "test-automation",
+    "evaluator",
+    "trace-reviewer",
+    "devil-advocate"
+  ],
+  "decisionRights": [
+    "quality-gate-approval",
+    "test-strategy",
+    "evaluation-design",
+    "release-readiness"
+  ],
+  "forbiddenDecisions": [
+    "scope-change",
+    "deployment-timing",
+    "architecture"
+  ],
+  "escalationPath": [
+    "reviewer",
+    "architect",
+    "rd-lead"
+  ],
+  "charter": "Verify the system does what it claims and surface what is broken. Owns review, testing, evaluation, trace analysis, and devil's-advocate framing. Does not own implementation or product decisions. Escalates quality vs. schedule conflicts to architecture/R&D.",
+  "contact": {
+    "slack": "#quality",
+    "email": "quality@example.com",
+    "owner": "reviewer"
+  },
+  "evidence": [
+    "AGENTS.md (rnd profile departments section)"
+  ],
+  "kind": "group",
+  "squads": [
+    "quality-team"
+  ]
+}

package/specialists/org/groups/strategy-group.json

@@ -0,0 +1,41 @@
+{
+  "id": "strategy-group",
+  "name": "Strategy Group",
+  "owner": "rd-lead",
+  "roles": [
+    "rd-lead",
+    "business-strategist",
+    "data-analyst",
+    "explorer",
+    "orchestrator"
+  ],
+  "decisionRights": [
+    "direction-setting",
+    "strategic-prioritization",
+    "measurement-design",
+    "research-scope",
+    "cross-team-orchestration"
+  ],
+  "forbiddenDecisions": [
+    "implementation-details",
+    "user-research-methods",
+    "ops-procedures"
+  ],
+  "escalationPath": [
+    "rd-lead",
+    "orchestrator"
+  ],
+  "charter": "Hold the long view: what to build next, what to measure, what to retire. Owns R&D direction, strategic prioritization, measurement design, cross-team orchestration, and exploration. Does not own implementation or day-to-day operations. Arbitrates escalations from other groups.",
+  "contact": {
+    "slack": "#strategy",
+    "email": "strategy@example.com",
+    "owner": "rd-lead"
+  },
+  "evidence": [
+    "AGENTS.md (rnd profile departments section)"
+  ],
+  "kind": "group",
+  "squads": [
+    "strategy-team"
+  ]
+}

package/specialists/org/policies/action-approval.json

@@ -0,0 +1,13 @@
+{
+  "id": "action-approval",
+  "owner": "orchestrator",
+  "description": "Blocks specialists from taking actions not listed in their approved action set.",
+  "enforcement": "lib/roles/fence.mjs#checkAction",
+  "mode": "deterministic",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [],
+  "escalatesTo": [],
+  "decisionRights": [],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/agents-routing.json

@@ -0,0 +1,13 @@
+{
+  "id": "agents-routing",
+  "owner": "orchestrator",
+  "description": "Routing discipline: construct routes to specialists, specialists do not self-route except to adjacent roles.",
+  "enforcement": "(persona prompt)",
+  "mode": "honor-system",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [],
+  "escalatesTo": [],
+  "decisionRights": [],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/architecture.json

@@ -0,0 +1,20 @@
+{
+  "id": "architecture",
+  "owner": "engineering-group",
+  "description": "Engineering group owns architecture decisions. Security group can veto on compliance grounds.",
+  "enforcement": "hard",
+  "mode": "approval",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [
+    "governance-group",
+    "quality-group"
+  ],
+  "escalatesTo": [
+    "strategy-group"
+  ],
+  "decisionRights": [
+    "architecture"
+  ],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/bash-safety.json

@@ -0,0 +1,13 @@
+{
+  "id": "bash-safety",
+  "owner": "orchestrator",
+  "description": "Blocks destructive bash commands (rm -rf /, git reset --hard HEAD, etc.) from running.",
+  "enforcement": "lib/hooks/guard-bash.mjs",
+  "mode": "deterministic",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [],
+  "escalatesTo": [],
+  "decisionRights": [],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/beads-hygiene.json

@@ -0,0 +1,13 @@
+{
+  "id": "beads-hygiene",
+  "owner": "orchestrator",
+  "description": "Validates beads close-reason quality: requires PR reference or file:line evidence.",
+  "enforcement": "lib/contracts/validate.mjs#validateBeadsCloseReason",
+  "mode": "deterministic",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [],
+  "escalatesTo": [],
+  "decisionRights": [],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/bootstrap-state.json

@@ -0,0 +1,13 @@
+{
+  "id": "bootstrap-state",
+  "owner": "orchestrator",
+  "description": "State machine enforces valid session bootstrap sequence before any agent work begins.",
+  "enforcement": "lib/hooks/policy-engine.mjs",
+  "mode": "deterministic",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [],
+  "escalatesTo": [],
+  "decisionRights": [],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/code-review.json

@@ -0,0 +1,13 @@
+{
+  "id": "code-review",
+  "owner": "orchestrator",
+  "description": "Review standards applied by cx-reviewer and cx-qa before any change is marked done.",
+  "enforcement": "(persona prompt)",
+  "mode": "honor-system",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [],
+  "escalatesTo": [],
+  "decisionRights": [],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/coding-style.json

@@ -0,0 +1,13 @@
+{
+  "id": "coding-style",
+  "owner": "orchestrator",
+  "description": "Style standards applied at authoring time; not mechanically enforced beyond lint:comments.",
+  "enforcement": "(persona prompt)",
+  "mode": "honor-system",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [],
+  "escalatesTo": [],
+  "decisionRights": [],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/comments.json

@@ -0,0 +1,13 @@
+{
+  "id": "comments",
+  "owner": "orchestrator",
+  "description": "Enforces the two-form comment policy (file header + section context block). Blocks inline narration.",
+  "enforcement": "lib/comment-lint.mjs",
+  "mode": "deterministic",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [],
+  "escalatesTo": [],
+  "decisionRights": [],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/commit-approval.json

@@ -0,0 +1,13 @@
+{
+  "id": "commit-approval",
+  "owner": "orchestrator",
+  "description": "Requires explicit user confirmation before any git commit or push. Enforced at the conversation level.",
+  "enforcement": "(persona prompt)",
+  "mode": "honor-system",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [],
+  "escalatesTo": [],
+  "decisionRights": [],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/contract-preconditions.json

@@ -0,0 +1,13 @@
+{
+  "id": "contract-preconditions",
+  "owner": "orchestrator",
+  "description": "Validates that specialist handoffs conform to declared pre/postconditions in contracts.json.",
+  "enforcement": "lib/contracts/validate.mjs#validateHandoff",
+  "mode": "deterministic",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [],
+  "escalatesTo": [],
+  "decisionRights": [],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/deployment.json

@@ -0,0 +1,20 @@
+{
+  "id": "deployment",
+  "owner": "operations-group",
+  "description": "Operations group executes deployments. Requires security and quality approval.",
+  "enforcement": "hard",
+  "mode": "approval",
+  "requiresApprovalFrom": [
+    "quality-gate-approval",
+    "security-approval"
+  ],
+  "mayVetoFrom": [],
+  "escalatesTo": [
+    "strategy-group"
+  ],
+  "decisionRights": [
+    "deployment"
+  ],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/description.json

@@ -0,0 +1,14 @@
+{
+  "id": "description",
+  "description": "Decision: description",
+  "enforcement": "hard",
+  "mode": "approval",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [],
+  "escalatesTo": [],
+  "decisionRights": [
+    "description"
+  ],
+  "conditions": [],
+  "evidence": []
+}

package/specialists/org/policies/design-approval.json

@@ -0,0 +1,19 @@
+{
+  "id": "design-approval",
+  "owner": "product-group",
+  "description": "Product group approves design before implementation begins.",
+  "enforcement": "hard",
+  "mode": "approval",
+  "requiresApprovalFrom": [],
+  "mayVetoFrom": [
+    "engineering-group"
+  ],
+  "escalatesTo": [
+    "strategy-group"
+  ],
+  "decisionRights": [
+    "design-approval"
+  ],
+  "conditions": [],
+  "evidence": []
+}