@jaimevalasek/aioson 1.30.2 → 1.33.1

package/CHANGELOG.md

@@ -2,6 +2,33 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.33.1] - 2026-06-24
+
+### Fixed
+- **Hardened adversarial verification gates.** `prototype:check` now rejects prototype and manifest references that resolve outside the project root before reading them, strict evidence bundles run prototype checks with `--strict`, partial prototype acceptance-criterion coverage can fail strict audits, Sheldon-owned scope findings route back to `@sheldon`, and failed external auditor stderr is kept in a separate artifact instead of being copied into the consolidated verification report.
+
+## [1.33.0] - 2026-06-24
+
+### Changed
+- **Scope-aware solution fan-out in `@briefing`.** Horizontal exploration no longer forces 3–5 options when the user has already committed to one specific solution and its operational surface is complete; it records any weighed alternative as a short "Alternatives considered" note instead. Operational completeness is never waived — only the breadth of options when the direction is already fixed.
+- **Non-blocking prototype recommendation in `@briefing-refiner`.** For a rich-surface briefing with no prototype yet, the handoff now recommends running prototype mode before `@product` (it surfaces missing management screens and broken interactions early). Recommendation only — it never blocks the route to `@product`.
+
+## [1.32.0] - 2026-06-24
+
+### Added
+- **External DESIGN.md sources in `@design-hybrid-forge`.** A hybrid's primary parent or modifier can now be an external DESIGN.md source (a refero.design md-example or a similar portable design spec extracted from a real site), not only a local AIOSON design skill. The agent normalizes the source into the same parent DNA the crossover protocol expects, records `sources[]` provenance in `.skill-meta.json`, and enforces an anti-clone rule — the hybrid stays a new identity (no brand/logo/trademark or 1:1 palette reproduction, never named after the source). The "exactly 2 primary parents" model is unchanged.
+
+## [1.31.0] - 2026-06-24
+
+### Added
+- **Clickable prototype stage.** New `prototype-forge` process skill and an optional `@briefing-refiner` "Generate prototype" mode produce a self-contained, clickable HTML app-shell (`prototype.html` + manifest) that materializes a rich-surface feature's screens, navigation, and CRUD interactions before the PRD — delegating visuals to the selected design skill while owning structure, behavior, and state. No native dialogs; authenticated app chrome is seeded.
+- **Horizontal solution exploration in `@briefing`.** For goals with more than one viable shape, `@briefing` explores 3–5 solution shapes, maps each one's operational surface, and writes an optional `solution-options.md` so `@product` chooses with the trade-offs in hand.
+- **Prototype propagated as a contract.** New `prototype-contract.md` defines how the prototype flows through the chain: `@product` writes a `## Prototype reference` in the PRD, `@dev` reproduces its screens/interactions, `@ux-ui` treats it as the authoritative realization, and `@analyst` derives acceptance criteria so `@validator` honors it via the binary contract (respecting its context sandbox).
+- **Operational-surface classification floor.** `aioson classify` now floors rich operational surfaces (workspaces, boards/cards, Kanban/CRM pipelines, CRUD/admin management) to at least SMALL, so a Trello-like feature can't take the MICRO shortcut that skips `@analyst`/`@architect`/the prototype.
+
+### Changed
+- **Operational Surface Map across planning agents.** `feature-expansion-taxonomy.md` and the briefing/product/sheldon expansion skills now require every Core object to have create/list/edit/archive/restore behavior and a management surface, so rich-surface features (Trello/Kanban/CRM/workspace-like) can't pass with bare nouns.
+
 ## [1.30.2] - 2026-06-24
 
 ### Changed

package/README.md

@@ -716,7 +716,7 @@ aioson scan:project [path] [--folder=src] [--with-llm] [--provider=<name>] [--dr
 aioson agents
 aioson agent:prompt <agent> [--tool=codex|claude|gemini|opencode]
 aioson workflow:plan [path] [--classification=MICRO|SMALL|MEDIUM] [--json]
-aioson workflow:next [path] [--complete] [--auto-heal] [--force]
+aioson workflow:next [path] [--complete] [--auto-heal] [--force] [--scope-mode=post-dev|post-fix|final] [--verification-policy=advisory|standard|strict]
 aioson workflow:heal [path] --stage=<agent>
 aioson workflow:harden [path] [--dry-run]
 aioson workflow:execute [path] [--dry-run] [--start-from=<agent>]
@@ -729,8 +729,13 @@ aioson intake:ask [path] --agent=<agent> --schema=<questions.json> [--out=<answe
 <summary><strong>SDD automation & gates</strong></summary>
 
 ```bash
-aioson preflight [path] [--json]
+aioson preflight [path] [--json]
 aioson classify [path] [--json]
+aioson prototype:check [path] --feature=<slug> [--json]
+aioson verify:implementation [path] --feature=<slug> --prepare-ledger|--check-ledger|--build-prompt|--check-report=<path> [--policy=advisory|standard|strict] [--json]
+aioson verify:implementation [path] --feature=<slug> --tool=codex|claude|opencode [--model=<model>|configured-default] [--timeout-ms=<ms>] [--max-output-bytes=<bytes>] [--policy=advisory|standard|strict] [--json]
+aioson harness:retro [path] --feature=<slug>|--last=<N> [--json]
+aioson harness:retro-promote [path] --feature=<slug> [--to=learnings|rules] [--apply --select=<candidate-key|all>] [--json]
 aioson gate:check [path] --gate=A|B|C|D [--json]
 aioson artifact:validate [path] --feature=<slug> [--json]
 aioson ac:test-audit [path] --feature=<slug> [--json]
@@ -738,10 +743,18 @@ aioson sdd:benchmark [path] --feature=<slug> [--json]
 aioson detect:test-runner [path] [--json]
 aioson agent:audit [path] [--json]
 aioson brief:gen [path] --feature=<slug> [--json]
-aioson verify:gate [path] --feature=<slug> [--json]
-```
-
-</details>
+aioson verify:gate [path] --feature=<slug> [--json]
+```
+
+`verify:implementation` prepares/checks `.aioson/context/features/{slug}/implementation-ledger.md`, builds clean-auditor prompt packages, validates `Machine Report` JSON with reusable schema helpers in `src/verification/schema.js`, and can optionally run a constrained auditor through `codex`, `claude`, or `opencode`. Runner execution is opt-in, uses explicit timeout/output limits, writes raw output under `verification-runs/`, and promotes only a valid or system-generated `INCONCLUSIVE` report to `verification-report.md`.
+
+`workflow:next --agent=scope-check --scope-mode=post-dev --verification-policy=strict` consumes an existing local `verification-report.md` as structured evidence in the scope-check prompt. It validates and routes the report result, but never runs an external `--tool` auditor automatically.
+
+`harness:retro` mines schema-valid implementation verification reports as a retrospective source. It uses only non-confirming `Machine Report` findings (`DOES_NOT_CONFIRM`, `PARTIAL`, `NOT_VERIFIED`) and never includes raw auditor output, stderr, prompt packages, or finding evidence text in the generated dossier.
+
+`harness:retro-promote` is the human-approved promotion path from a generated retro dossier to `.aioson/learnings/` or `.aioson/rules/`. It is dry-run by default; writing requires `--apply --select=<candidate-key|all>`. Promotion records bounded metadata and source paths only, and never edits prompts, skills, PRDs, plans, raw reports, or agent files automatically.
+
+</details>
 
 <details>
 <summary><strong>Parallel orchestration</strong></summary>

package/docs/en/5-reference/cli-reference.md

@@ -820,7 +820,7 @@ aioson harness:retro . --feature=checkout --json
 
 **Exit codes:** 0 = success (including empty dossier); 1 = unexpected I/O error; 12 = input error (invalid slug, conflicting flags, feature not found).
 
-**Sources mined:** QA reports, correction plans, dossier FAIL→PASS cycles, execution events, attempt artifacts, failure signatures, devlogs.
+**Sources mined:** QA reports, implementation verification reports (non-confirming `Machine Report` findings only), correction plans, dossier FAIL→PASS cycles, execution events, attempt artifacts, failure signatures, devlogs. Raw auditor output, stderr, prompt packages, and finding evidence text are not mined.
 
 ---
 

package/docs/pt/5-referencia/comandos-cli.md

@@ -1877,7 +1877,7 @@ aioson harness:retro . --last=5
 aioson harness:retro . --feature=checkout --json
 ```
 
-Saída em `.aioson/context/retro/checkout.md`. Fontes mineradas: QA reports, planos de correção, trilha FAIL→PASS do dossier, eventos de execução, tentativas, assinaturas de falha e devlogs. Operação de leitura — arquivos-fonte nunca são alterados.
+Saída em `.aioson/context/retro/checkout.md`. Fontes mineradas: QA reports, reports de verificação de implementação (apenas findings não confirmatórios do `Machine Report`), planos de correção, trilha FAIL→PASS do dossier, eventos de execução, tentativas, assinaturas de falha e devlogs. Raw auditor output, stderr, prompts e texto de evidence não são minerados. Operação de leitura — arquivos-fonte nunca são alterados.
 
 ```bash
 # Exibir prévia de um artefato com truncação segura

package/docs/pt/5-referencia/harness-retro.md

@@ -55,11 +55,12 @@ Usado principalmente na interface de feedback do `self:loop` quando um critério
 
 ## Fontes mineradas
 
-O `harness:retro` lê sete fontes por feature:
+O `harness:retro` lê oito fontes por feature:
 
 | Fonte | O que captura |
 |---|---|
 | Relatórios QA | Falhas e severidades de `@qa` |
+| Reports de verificação de implementação | Findings não confirmatórios do `Machine Report` (`DOES_NOT_CONFIRM`, `PARTIAL`, `NOT_VERIFIED`); não minera raw output, stderr, prompts nem texto de evidence |
 | Planos de correção | Correções aplicadas por ciclo |
 | Trilha do dossier | Ciclos FAIL→PASS do Agent Trail |
 | `execution_events` | Eventos de telemetria do loop |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jaimevalasek/aioson",
-  "version": "1.30.2",
+  "version": "1.33.1",
   "description": "AI operating framework for hyper-personalized software.",
   "keywords": [
     "ai",

package/src/cli.js

@@ -183,9 +183,11 @@ const { runRunnerRun } = require('./commands/runner-run');
 const { runRunnerQueue } = require('./commands/runner-queue');
 const { runRunnerPlan } = require('./commands/runner-plan');
 const { runRunnerDaemon } = require('./commands/runner-daemon');
-const { runPreflight } = require('./commands/preflight');
-const { runClassify } = require('./commands/classify');
-const { runSizing } = require('./commands/sizing');
+const { runPreflight } = require('./commands/preflight');
+const { runClassify } = require('./commands/classify');
+const { runPrototypeCheck } = require('./commands/prototype-check');
+const { runVerifyImplementation } = require('./commands/verify-implementation');
+const { runSizing } = require('./commands/sizing');
 const { runDetectTestRunner } = require('./commands/detect-test-runner');
 const { runPulseUpdate } = require('./commands/pulse-update');
 const { runAgentEpilogue } = require('./commands/agent-epilogue');
@@ -290,10 +292,12 @@ const JSON_SUPPORTED_COMMANDS = new Set([
   'workflow-status',
   'feature:current',
   'feature-current',
-  'harness:retro',
-  'harness-retro',
-  'harness:preview',
-  'harness-preview',
+  'harness:retro',
+  'harness-retro',
+  'harness:retro-promote',
+  'harness-retro-promote',
+  'harness:preview',
+  'harness-preview',
   'agent:next',
   'agent-next',
   'parallel:init',
@@ -433,10 +437,12 @@ const JSON_SUPPORTED_COMMANDS = new Set([
   'harness-status',
   'harness:check',
   'harness-check',
-  'harness:retro',
-  'harness-retro',
-  'harness:preview',
-  'harness-preview',
+  'harness:retro',
+  'harness-retro',
+  'harness:retro-promote',
+  'harness-retro-promote',
+  'harness:preview',
+  'harness-preview',
   'brief-gen',
   'verify:gate',
   'verify-gate',
@@ -649,8 +655,12 @@ const JSON_SUPPORTED_COMMANDS = new Set([
   '--version',
   '-v',
   'preflight',
-  'classify',
-  'sizing',
+  'classify',
+  'prototype:check',
+  'prototype-check',
+  'verify:implementation',
+  'verify-implementation',
+  'sizing',
   'detect:test-runner',
   'detect-test-runner',
   'pulse:update',
@@ -1346,12 +1356,15 @@ async function main() {
     } else if (command === 'harness:check' || command === 'harness-check') {
       const { runHarnessCheck } = require('./commands/harness-check');
       result = await runHarnessCheck({ args, options, logger: commandLogger, t });
-    } else if (command === 'harness:retro' || command === 'harness-retro') {
-      const { runHarnessRetro } = require('./commands/harness-retro');
-      result = await runHarnessRetro({ args, options, logger: commandLogger, t });
-    } else if (command === 'harness:preview' || command === 'harness-preview') {
-      const { runHarnessPreview } = require('./commands/harness-preview');
-      result = await runHarnessPreview({ args, options, logger: commandLogger, t });
+    } else if (command === 'harness:retro' || command === 'harness-retro') {
+      const { runHarnessRetro } = require('./commands/harness-retro');
+      result = await runHarnessRetro({ args, options, logger: commandLogger, t });
+    } else if (command === 'harness:retro-promote' || command === 'harness-retro-promote') {
+      const { runHarnessRetroPromote } = require('./commands/harness-retro-promote');
+      result = await runHarnessRetroPromote({ args, options, logger: commandLogger, t });
+    } else if (command === 'harness:preview' || command === 'harness-preview') {
+      const { runHarnessPreview } = require('./commands/harness-preview');
+      result = await runHarnessPreview({ args, options, logger: commandLogger, t });
     } else if (command === 'verify:gate' || command === 'verify-gate') {
       result = await runVerifyGate({ args, options, logger: commandLogger, t });
 
@@ -1588,8 +1601,12 @@ async function main() {
       result = await runPreflight({ args, options, logger: commandLogger });
     } else if (command === 'classify') {
       result = await runClassify({ args, options, logger: commandLogger });
-    } else if (command === 'sizing') {
-      result = await runSizing({ args, options, logger: commandLogger });
+    } else if (command === 'prototype:check' || command === 'prototype-check') {
+      result = await runPrototypeCheck({ args, options, logger: commandLogger });
+    } else if (command === 'verify:implementation' || command === 'verify-implementation') {
+      result = await runVerifyImplementation({ args, options, logger: commandLogger });
+    } else if (command === 'sizing') {
+      result = await runSizing({ args, options, logger: commandLogger });
     } else if (command === 'detect:test-runner' || command === 'detect-test-runner') {
       result = await runDetectTestRunner({ args, options, logger: commandLogger });
     } else if (command === 'pulse:update' || command === 'pulse-update') {