@haposoft/cafekit 0.16.0-rc.8 → 0.16.0

package/src/claude/runtime.schema.json

@@ -0,0 +1,205 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://haposoft.github.io/cafekit/runtime.schema.json",
+  "title": "CafeKit runtime configuration",
+  "description": "Project-scoped CafeKit settings, installed as .claude/runtime.json and .codex/runtime.json. Every key is optional; an absent key keeps the built-in default. Editors that honour $schema use this file for completion and inline documentation. Secrets do not belong here: this file is meant to be committed.",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "$schema": {
+      "type": "string",
+      "description": "Path or URL of this schema. Present so editors can validate the file; CafeKit itself ignores it."
+    },
+    "privacyBlock": {
+      "type": "boolean",
+      "default": true,
+      "description": "Block reads of files that usually hold secrets (.env, credentials, keys). Set false to disable the privacy hook for this project."
+    },
+    "inspect": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "The guard that steers broad codebase searches toward the discovery workflow.",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "default": true,
+          "description": "Set false to stop the inspect guard from blocking broad search commands."
+        }
+      }
+    },
+    "docs": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Documentation conventions surfaced to the agent.",
+      "properties": {
+        "maxLoc": {
+          "type": "integer",
+          "minimum": 1,
+          "default": 800,
+          "description": "Lines allowed in one documentation file before the agent is reminded to split it."
+        }
+      }
+    },
+    "paths": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Where this project keeps its documentation, specifications, and plans, relative to the repository root.",
+      "properties": {
+        "docs": { "type": "string", "default": "docs", "description": "Documentation root the docs workflow reads and writes." },
+        "specs": { "type": "string", "default": "specs", "description": "Specification packet root: one direct child per feature." },
+        "plans": { "type": "string", "default": "plans", "description": "Directory holding plan files, one directory per plan." }
+      }
+    },
+    "spec": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Specification workflow guards. These are convenience switches for local work, not authorizations.",
+      "properties": {
+        "scaffold_guard": {
+          "type": "boolean",
+          "default": true,
+          "description": "Require task files to be generated by the scaffold script. Set false to write them by hand."
+        },
+        "tollgate": {
+          "type": "boolean",
+          "default": true,
+          "description": "Report specification state on each prompt. Set false to silence it."
+        },
+        "completion_gate": {
+          "type": "boolean",
+          "default": true,
+          "description": "Not a switch. The completion gate treats this flag as a bypass attempt and blocks while it is present, whatever its value, because a worker-writable file cannot authorize completion. Remove the key and satisfy the gate instead."
+        }
+      }
+    },
+    "usage": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Usage and quota reporting.",
+      "properties": {
+        "enabled": {
+          "type": "boolean",
+          "default": true,
+          "description": "Set false to stop fetching quota data for the statusline."
+        }
+      }
+    },
+    "locale": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Languages the agent should use. null means English, or match the user.",
+      "properties": {
+        "thinkingLanguage": { "type": ["string", "null"], "default": null, "description": "Language for reasoning." },
+        "responseLanguage": { "type": ["string", "null"], "default": null, "description": "Language for user-facing output." }
+      }
+    },
+    "codingLevel": {
+      "type": ["integer", "null"],
+      "minimum": 0,
+      "maximum": 5,
+      "default": 1,
+      "description": "Codex only. How much explanation answers carry: 0 ELI5, 1 junior, 2 mid-level, 3 senior, 4 lead, 5 expert. Codex CLI has no output-style feature, so the rules hook injects the matching file from .codex/output-styles/ once per session. Claude Code loads the same styles natively and reads outputStyle from settings.json instead, so this key is ignored there. null or an out-of-range value injects nothing."
+    },
+    "statusline": {
+      "enum": ["full", "compact", "minimal", "none"],
+      "default": "full",
+      "description": "How much the statusline renders. 'none' prints an empty line."
+    },
+    "statuslineColors": {
+      "type": "boolean",
+      "default": true,
+      "description": "Set false for a statusline without ANSI colour."
+    },
+    "statuslineLayout": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["lines"],
+      "description": "Explicit statusline composition. A valid layout replaces the default renderers; an invalid or empty one falls back to them. The 'statusline' mode still limits how many lines are drawn.",
+      "properties": {
+        "lines": {
+          "type": "array",
+          "description": "One entry per rendered line, each listing section ids in display order.",
+          "items": {
+            "type": "array",
+            "items": { "enum": ["model", "context", "quota", "directory", "git", "plan", "cost", "changes"] }
+          }
+        }
+      }
+    },
+    "assertions": {
+      "type": "array",
+      "description": "Rules injected for files matching a glob.",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["pattern", "rule"],
+        "properties": {
+          "pattern": { "type": "string", "description": "Glob the rule applies to, for example \"**/*.go\"." },
+          "rule": { "type": "string", "description": "The rule text shown to the agent." }
+        }
+      }
+    },
+    "trust": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Local trust prompt. Keep the passphrase in your own user configuration, never in this committed file.",
+      "properties": {
+        "enabled": { "type": "boolean", "default": false, "description": "Whether a trust passphrase is required." },
+        "passphrase": { "type": ["string", "null"], "default": null, "description": "Do not set this here. This file is committed." }
+      }
+    },
+    "project": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Detection overrides for a repository the defaults read wrong.",
+      "properties": {
+        "type": { "type": "string", "default": "auto", "description": "Project type, or \"auto\" to detect." },
+        "packageManager": { "type": "string", "default": "auto", "description": "Package manager, or \"auto\" to detect." },
+        "framework": { "type": "string", "default": "auto", "description": "Framework, or \"auto\" to detect." }
+      }
+    },
+    "plan": {
+      "type": "object",
+      "additionalProperties": false,
+      "description": "Plan directory naming and resolution.",
+      "properties": {
+        "namingFormat": { "type": "string", "default": "{date}-{issue}-{slug}", "description": "Directory name pattern. Variables: {date}, {issue}, {slug}." },
+        "dateFormat": { "type": "string", "default": "YYMMDD-HHmm", "description": "Date portion of the plan name." },
+        "issuePrefix": { "type": ["string", "null"], "default": null, "description": "Prefix for the issue portion, for example \"GH-\"." },
+        "reportsDir": { "type": "string", "default": "reports", "description": "Reports directory inside a plan." },
+        "resolution": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "How the active plan is chosen. Only explicit session state makes a plan active; a branch match is a suggestion.",
+          "properties": {
+            "order": { "type": "array", "items": { "enum": ["session", "branch"] }, "description": "Order the sources are consulted in when resolving the active plan." },
+            "branchPattern": { "type": "string", "description": "Regular expression extracting a plan slug from the branch name." }
+          }
+        },
+        "validation": {
+          "type": "object",
+          "additionalProperties": false,
+          "description": "Plan validation questioning.",
+          "properties": {
+            "mode": { "enum": ["auto", "prompt", "off"], "default": "prompt", "description": "When to run validation questions." },
+            "minQuestions": { "type": "integer", "minimum": 0, "default": 3, "description": "Fewest questions to ask." },
+            "maxQuestions": { "type": "integer", "minimum": 0, "default": 8, "description": "Most questions to ask." },
+            "focusAreas": { "type": "array", "items": { "type": "string" }, "description": "Topics the questions should cover." }
+          }
+        }
+      }
+    },
+    "hooks": {
+      "type": "object",
+      "deprecated": true,
+      "description": "Not honoured. No hook consults this map, so an entry here disables nothing. Disable a hook by removing its entry from the host's hook configuration instead.",
+      "additionalProperties": { "type": "boolean" }
+    },
+    "develop": {
+      "type": "object",
+      "deprecated": true,
+      "description": "Not honoured. Parallel execution is chosen per invocation with the --parallel flag, not from this file.",
+      "additionalProperties": true
+    }
+  }
+}

package/src/claude/scripts/generate-skill-catalog.cjs

@@ -1,184 +1,218 @@
 #!/usr/bin/env node
-/**
- * CafeKit skill catalog scanner.
- *
- * This mirrors the Research/.claude approach: expose the installed skill set as
- * a readable catalog so the model can choose skills from rules, not from an
- * automatic prompt-scoring hook.
- */
+/** Generate a fail-closed catalog from the current runtime's installed skills. */
+
+'use strict';
 
 const fs = require('fs');
 const path = require('path');
 
+// Keep synchronized with migration-manifest.json obsolete.skills. Modified
+// retired directories may remain on disk, but they are never automatic routes.
+const RETIRED_DIRECTORIES = new Set([
+  'backend-development',
+  'frontend-development',
+  'frontend-design',
+  'mobile-development',
+  'devops',
+  'react-best-practices',
+]);
+const PUBLIC_SUFFIX_BY_DIRECTORY = {
+  hotfix: 'fix',
+  inspect: 'scout',
+  question: 'ask',
+};
+
 function usage() {
   console.log(`Usage:
-  node .claude/scripts/generate-skill-catalog.cjs [--skills] [--json] [--root <skills-dir>]
+  node <runtime>/scripts/generate-skill-catalog.cjs [--skills] [--json] [--root <skills-dir>]
 
-Examples:
-  node .claude/scripts/generate-skill-catalog.cjs --skills
-  node .claude/scripts/generate-skill-catalog.cjs --json --root .claude/skills`);
+The default root is bound to the script runtime: .claude/skills for Claude,
+.agents/skills for Codex, and ../skills for the source tree.`);
 }
 
 function parseArgs(argv) {
   const args = { json: false, help: false, root: null };
-  for (let i = 0; i < argv.length; i += 1) {
-    const arg = argv[i];
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index];
     if (arg === '--help' || arg === '-h') args.help = true;
     else if (arg === '--json') args.json = true;
     else if (arg === '--skills') continue;
     else if (arg === '--root') {
-      args.root = argv[i + 1] || null;
-      i += 1;
-    } else {
-      args.root = args.root || arg;
-    }
+      if (!argv[index + 1] || argv[index + 1].startsWith('--')) {
+        throw new Error('--root requires a skills directory');
+      }
+      args.root = argv[++index];
+    } else throw new Error(`unknown option: ${arg}`);
   }
   return args;
 }
 
 function defaultSkillsRoot() {
-  const candidates = [
-    path.resolve(__dirname, '..', 'skills'),
-    path.resolve(process.cwd(), '.claude', 'skills'),
-    path.resolve(process.cwd(), '.agents', 'skills'),
-    path.resolve(__dirname, '..', '..', '.agents', 'skills')
-  ];
-  return candidates.find((candidate) => fs.existsSync(candidate)) || candidates[0];
-}
-
-function readText(filePath) {
-  return fs.readFileSync(filePath, 'utf8');
+  const runtimeRoot = path.dirname(__dirname);
+  const runtimeName = path.basename(runtimeRoot);
+  if (runtimeName === '.codex') return path.join(path.dirname(runtimeRoot), '.agents', 'skills');
+  const claudeRuntimeName = `.${['cla', 'ude'].join('')}`;
+  if (runtimeName === claudeRuntimeName) return path.join(runtimeRoot, 'skills');
+  return path.resolve(__dirname, '..', 'skills');
 }
 
 function extractFrontmatter(content) {
-  const match = content.match(/^---\s*\n([\s\S]*?)\n---\s*\n/);
-  if (!match) return {};
+  const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
+  if (!match) return null;
   const frontmatter = {};
   const lines = match[1].split(/\r?\n/);
-  for (let i = 0; i < lines.length; i += 1) {
-    const line = lines[i];
-    const kv = line.match(/^([A-Za-z0-9_-]+):\s*(.*)$/);
-    if (!kv) continue;
-    const key = kv[1];
-    let value = kv[2].trim();
-    if (value === '>' || value === '>-' || value === '|' || value === '|-') {
+  const seen = new Set();
+  let nestedKey = null;
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index];
+    if (line.trim() === '') continue;
+    if (/^\s+/.test(line)) {
+      const nested = line.match(/^  ([A-Za-z0-9_-]+):\s*(\S.*)$/);
+      if (!nestedKey || !nested) return null;
+      const identity = `${nestedKey}.${nested[1]}`;
+      if (seen.has(identity) || quotedValue(nested[2]) === null) return null;
+      seen.add(identity);
+      continue;
+    }
+    nestedKey = null;
+    const parsed = line.match(/^([A-Za-z0-9_-]+):\s*(.*)$/);
+    if (!parsed || seen.has(parsed[1])) return null;
+    seen.add(parsed[1]);
+    let value = parsed[2].trim();
+    if (['>', '>-', '|', '|-'].includes(value)) {
       const block = [];
-      i += 1;
-      while (i < lines.length && /^\s+/.test(lines[i])) {
-        block.push(lines[i].trim());
-        i += 1;
+      while (index + 1 < lines.length && /^\s+/.test(lines[index + 1])) {
+        block.push(lines[++index].trim());
       }
-      i -= 1;
+      if (block.length === 0) return null;
       value = block.join(' ');
     }
-    if (
-      (value.startsWith('"') && value.endsWith('"')) ||
-      (value.startsWith("'") && value.endsWith("'"))
-    ) {
-      value = value.slice(1, -1);
+    if (value === '') {
+      nestedKey = parsed[1];
+      frontmatter[parsed[1]] = '';
+      continue;
     }
-    frontmatter[key] = value;
+    value = quotedValue(value);
+    if (value === null) return null;
+    frontmatter[parsed[1]] = value;
   }
   return frontmatter;
 }
 
-function firstParagraph(content) {
-  const body = content.replace(/^---\s*\n[\s\S]*?\n---\s*\n/, '');
-  const paragraph = [];
-  for (const rawLine of body.split(/\r?\n/)) {
-    const line = rawLine.trim();
-    if (!line || line.startsWith('#')) {
-      if (paragraph.length > 0) break;
-      continue;
-    }
-    paragraph.push(line);
-    if (paragraph.join(' ').length > 160) break;
+function quotedValue(value) {
+  const startsQuote = value.startsWith('"') || value.startsWith("'");
+  const endsQuote = value.endsWith('"') || value.endsWith("'");
+  const startsFlow = value.startsWith('[') || value.startsWith('{');
+  const endsFlow = value.endsWith(']') || value.endsWith('}');
+  if (startsFlow || endsFlow) {
+    const expected = value.startsWith('[') ? ']' : value.startsWith('{') ? '}' : null;
+    if (!expected || !value.endsWith(expected)) return null;
   }
-  return paragraph.join(' ').slice(0, 360);
+  if (!startsQuote && !endsQuote) return value;
+  if (value.length < 2 || value[0] !== value[value.length - 1]) return null;
+  return value.slice(1, -1);
 }
 
-function categorize(name, description) {
-  const text = `${name} ${description}`.toLowerCase();
-  if (/spec|brainstorm|develop|sync/.test(text)) return 'workflow';
-  if (/debug|hotfix|inspect|impact|review|test|agent-browser|chrome/.test(text)) return 'quality';
-  if (/frontend|react|ui|ux|mobile/.test(text)) return 'frontend-mobile';
-  if (/pdf|docx|pptx|xlsx|multimodal/.test(text)) return 'artifacts-tools';
-  if (/backend|devops|api|database|deploy/.test(text)) return 'backend-infra';
-  if (/docs|research|graph/.test(text)) return 'knowledge';
-  if (/git/.test(text)) return 'git';
-  return 'other';
+function parseKeywords(value) {
+  if (!value || !/^\[[^\]]*\]$/.test(value)) return [];
+  return value.slice(1, -1).split(',').map((item) => item.trim()).filter(Boolean);
 }
 
-function scanSkills(root) {
-  if (!fs.existsSync(root)) {
-    throw new Error(`skills root not found: ${root}`);
-  }
-  const entries = fs.readdirSync(root, { withFileTypes: true });
-  const skills = [];
+function publicIdentity(name) {
+  const match = String(name).match(/^cf(?::|-)([a-z0-9]+(?:-[a-z0-9]+)*)$/);
+  return match ? `cf:${match[1]}` : null;
+}
+
+function expectedIdentity(directory) {
+  return `cf:${PUBLIC_SUFFIX_BY_DIRECTORY[directory] || directory}`;
+}
+
+function diagnostic(code, directory, message) {
+  return { code, directory, message };
+}
+
+function scanSkills(requestedRoot) {
+  if (!fs.existsSync(requestedRoot)) throw new Error(`skills root not found: ${requestedRoot}`);
+  const root = fs.realpathSync(requestedRoot);
+  const diagnostics = [];
+  const candidates = [];
+  const entries = fs.readdirSync(root, { withFileTypes: true })
+    .filter((entry) => entry.isDirectory() && !entry.name.startsWith('.'))
+    .sort((left, right) => left.name.localeCompare(right.name));
+
   for (const entry of entries) {
-    if (!entry.isDirectory() || entry.name.startsWith('.')) continue;
     const skillPath = path.join(root, entry.name, 'SKILL.md');
     if (!fs.existsSync(skillPath)) continue;
-    const content = readText(skillPath);
-    const frontmatter = extractFrontmatter(content);
-    const name = frontmatter.name || entry.name;
-    const description = frontmatter.description || firstParagraph(content);
-    skills.push({
-      name,
+    if (RETIRED_DIRECTORIES.has(entry.name)) {
+      diagnostics.push(diagnostic('retired_skill', entry.name, 'excluded from automatic routing'));
+      continue;
+    }
+    const frontmatter = extractFrontmatter(fs.readFileSync(skillPath, 'utf8'));
+    if (!frontmatter) {
+      diagnostics.push(diagnostic('malformed_frontmatter', entry.name, 'missing frontmatter block'));
+      continue;
+    }
+    const identity = publicIdentity(frontmatter.name);
+    if (!identity || !frontmatter.description || frontmatter.description.trim() === '') {
+      diagnostics.push(diagnostic('missing_routing_metadata', entry.name, 'requires valid name and description'));
+      continue;
+    }
+    if (identity !== expectedIdentity(entry.name)) {
+      diagnostics.push(diagnostic('folder_name_mismatch', entry.name, `${identity} does not match directory`));
+      continue;
+    }
+    candidates.push({
+      name: frontmatter.name,
+      public_id: identity,
       directory: entry.name,
-      description,
-      category: categorize(name, description),
+      description: frontmatter.description,
+      when_to_use: frontmatter.when_to_use || '',
+      category: frontmatter.category || 'other',
+      keywords: parseKeywords(frontmatter.keywords),
+      user_invocable: frontmatter['user-invocable'] !== 'false',
       has_references: fs.existsSync(path.join(root, entry.name, 'references')),
       has_scripts: fs.existsSync(path.join(root, entry.name, 'scripts')),
     });
   }
-  return skills.sort((a, b) => a.name.localeCompare(b.name));
+
+  const counts = new Map();
+  for (const skill of candidates) counts.set(skill.public_id, (counts.get(skill.public_id) || 0) + 1);
+  const skills = candidates.filter((skill) => {
+    if (counts.get(skill.public_id) === 1) return true;
+    diagnostics.push(diagnostic('duplicate_public_name', skill.directory, `${skill.public_id} requires explicit user disambiguation`));
+    return false;
+  }).sort((left, right) => left.public_id.localeCompare(right.public_id));
+
+  return { root, skills, diagnostics: diagnostics.sort((left, right) =>
+    `${left.directory}:${left.code}`.localeCompare(`${right.directory}:${right.code}`)) };
 }
 
-function renderMarkdown(skills, root) {
-  const lines = [
-    '# CafeKit Skills Catalog',
-    '',
-    `Skills root: \`${root}\``,
-    `Total skills: ${skills.length}`,
-    '',
-  ];
-  const categories = [...new Set(skills.map((skill) => skill.category))].sort();
-  for (const category of categories) {
-    lines.push(`## ${category}`, '');
-    for (const skill of skills.filter((item) => item.category === category)) {
-      const badges = [
-        skill.has_references ? 'refs' : null,
-        skill.has_scripts ? 'scripts' : null,
-      ].filter(Boolean);
-      lines.push(
-        `- \`${skill.name}\` (${skill.directory})${badges.length ? ` [${badges.join(', ')}]` : ''}: ${skill.description}`
-      );
-    }
-    lines.push('');
+function renderMarkdown(catalog) {
+  const lines = ['# CafeKit Skills Catalog', '', `Skills root: \`${catalog.root}\``,
+    `Routable skills: ${catalog.skills.length}`, ''];
+  for (const skill of catalog.skills) {
+    const intent = skill.when_to_use ? ` Use: ${skill.when_to_use}` : '';
+    lines.push(`- \`${skill.name}\` (${skill.directory}, ${skill.category}): ${skill.description}${intent}`);
   }
-  return lines.join('\n').trim() + '\n';
+  if (catalog.diagnostics.length > 0) {
+    lines.push('', '## Diagnostics', '');
+    for (const item of catalog.diagnostics) lines.push(`- ${item.code} (${item.directory}): ${item.message}`);
+  }
+  return `${lines.join('\n').trim()}\n`;
 }
 
 function main() {
   const args = parseArgs(process.argv.slice(2));
-  if (args.help) {
-    usage();
-    return;
-  }
-
-  const root = path.resolve(process.cwd(), args.root || defaultSkillsRoot());
-  const skills = scanSkills(root);
-  if (args.json) {
-    console.log(JSON.stringify({ root, total: skills.length, skills }, null, 2));
-    return;
-  }
-  console.log(renderMarkdown(skills, root));
+  if (args.help) return usage();
+  const requestedRoot = path.resolve(process.cwd(), args.root || defaultSkillsRoot());
+  const catalog = scanSkills(requestedRoot);
+  if (args.json) console.log(JSON.stringify({ ...catalog, total: catalog.skills.length }, null, 2));
+  else console.log(renderMarkdown(catalog));
 }
 
 try {
   main();
 } catch (error) {
   console.error(`[skill-catalog] ${error.message}`);
-  process.exit(1);
+  process.exitCode = 1;
 }

package/src/claude/scripts/provenance.cjs

@@ -83,9 +83,22 @@ function oneLine(value, label) {
   return output.replace(/\n$/, '');
 }
 
-function gitBase(root) {
-  const output = oneLine(runGit(root, ['rev-parse', 'HEAD'], 'git rev-parse HEAD')).toLowerCase();
-  if (!/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/.test(output)) fail('malformed_git_output', 'git rev-parse HEAD did not return a commit id');
+function gitBase(root, specsRoot) {
+  const specsRelative = path.relative(root, specsRoot).split(path.sep).join('/');
+  const sourceHistory = decode(runGit(
+    root,
+    ['log', '-1', '--format=%H', '--', '.', `:(exclude,literal)${specsRelative}`],
+    'git log source base',
+  )).trim();
+  const roots = sourceHistory ? [] : decode(
+    runGit(root, ['rev-list', '--max-parents=0', '--reverse', 'HEAD'], 'git rev-list root'),
+    'git rev-list root',
+  ).trim().split('\n');
+  if (!sourceHistory && (roots.length === 0 || roots.some((rootId) => !/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/i.test(rootId)))) {
+    fail('malformed_git_output', 'git rev-list root did not return commit ids');
+  }
+  const output = (sourceHistory || roots[0]).toLowerCase();
+  if (!/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/.test(output)) fail('malformed_git_output', 'git source base did not return a commit id');
   return output;
 }
 
@@ -211,11 +224,11 @@ function identity(input) {
 
 function deriveRuntimeProvenance(input) {
   const current = identity(input);
-  const base = gitBase(current.root);
+  const base = gitBase(current.root, current.specsRoot);
   const first = manifest(current.root, current.specsRoot);
   const head = manifestDigest(first);
   const second = manifest(current.root, current.specsRoot);
-  if (JSON.stringify(first) !== JSON.stringify(second) || gitBase(current.root) !== base) fail('worktree_race', 'checkout changed during provenance capture');
+  if (JSON.stringify(first) !== JSON.stringify(second) || gitBase(current.root, current.specsRoot) !== base) fail('worktree_race', 'checkout changed during provenance capture');
   const stable = {
     schema_version: CONTEXT_SCHEMA_VERSION,
     project_root: current.root,

package/src/claude/scripts/workflow-policy.cjs

@@ -1733,7 +1733,7 @@ function evaluateFlashPromotion(task, verdict, proof = 'Verification: PASS', cap
       status: 'in_progress',
       receipt: 'FLASH_UNVERIFIED',
       blocker: normalized.diagnostic === 'NO_TESTS'
-        ? 'awaiting test proof from /hapo:test <feature>'
+        ? 'awaiting test proof from /cf:test <feature>'
         : normalized.diagnostic === 'PARTIAL'
           ? 'verification is partial; awaiting complete test proof'
           : `verification returned ${normalized.verdict}`,

package/src/claude/settings/settings.json

@@ -4,6 +4,7 @@
     "command": "node \"$CLAUDE_PROJECT_DIR/.claude/status.cjs\"",
     "padding": 0
   },
+  "outputStyle": "Junior Developer Mode (Level 1)",
   "hooks": {
     "SessionStart": [
       {
@@ -35,9 +36,24 @@
         ]
       }
     ],
+    "PreCompact": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/precompact.cjs\""
+          }
+        ]
+      }
+    ],
     "UserPromptSubmit": [
       {
         "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/secret-output-guardrail.cjs\""
+          },
           {
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/rules.cjs\""

package/src/claude/skills/agent-browser/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: hapo:agent-browser
+name: cf:agent-browser
 description: AI-optimized browser automation CLI with context-efficient snapshots. Use for long autonomous sessions, self-verifying workflows, video recording, and cloud browser testing (Browserbase).
 license: Apache-2.0
 user-invocable: true

package/src/claude/skills/ai-multimodal/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: hapo:ai-multimodal
+name: cf:ai-multimodal
 description: Analyze images/audio/video/documentation with Gemini API. Use for vision analysis, transcription, OCR, design extraction, and deep multimodal understanding.
 license: MIT
 user-invocable: true