@jigyasudham/veto 1.4.4 → 2.0.0

package/dist/agents/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GACvB,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GACzD,UAAU,GAAG,KAAK,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,GACtD,aAAa,GAAG,WAAW,GAC3B,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GACnD,kBAAkB,GAAG,aAAa,GAClC,iBAAiB,GAAG,iBAAiB,GAAG,gBAAgB,GACxD,iBAAiB,GAAG,gBAAgB,GACpC,YAAY,GAAG,cAAc,GAAG,eAAe,GAC/C,qBAAqB,GAAG,eAAe,GAAG,WAAW,GACrD,aAAa,GACb,cAAc,GAAG,eAAe,GAAG,eAAe,GAAG,eAAe,GAAG,gBAAgB,GACvF,cAAc,GAAG,kBAAkB,GAAG,cAAc,GAAG,WAAW,GAClE,cAAc,GAAG,UAAU,GAAG,YAAY,CAAC;AAE/C,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE9E,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,eAAe,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,UAAU,GAAG,wBAAwB,GAAG,gBAAgB,GAAG,UAAU,CAAC;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,OAAO,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agents/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GACvB,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GACzD,UAAU,GAAG,KAAK,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,GACtD,aAAa,GAAG,WAAW,GAC3B,kBAAkB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GACnD,kBAAkB,GAAG,aAAa,GAClC,iBAAiB,GAAG,iBAAiB,GAAG,gBAAgB,GACxD,iBAAiB,GAAG,gBAAgB,GACpC,YAAY,GAAG,cAAc,GAAG,eAAe,GAC/C,qBAAqB,GAAG,eAAe,GAAG,WAAW,GACrD,aAAa,GACb,cAAc,GAAG,eAAe,GAAG,eAAe,GAAG,eAAe,GAAG,gBAAgB,GACvF,cAAc,GAAG,kBAAkB,GAAG,cAAc,GAAG,WAAW,GAClE,cAAc,GAAG,UAAU,GAAG,YAAY,CAAC;AAE/C,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAE9E,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,eAAe,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,UAAU,GAAG,wBAAwB,GAAG,gBAAgB,GAAG,UAAU,CAAC;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,eAAe,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,OAAO,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE;QACZ,SAAS,EAAE,IAAI,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,kBAAkB,CAAC;KAC5B,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/agents/validate.d.ts

@@ -0,0 +1,11 @@
+import type { AgentPlan, AgentAnalysis, WorkerAgentType } from './types.js';
+/**
+ * Validates and sanitizes an AgentPlan. Returns null if the value is not
+ * recoverable. Otherwise returns a clean plan using Zod.
+ */
+export declare function validateAgentPlan(raw: unknown, agentType: WorkerAgentType): AgentPlan | null;
+/**
+ * Validates and sanitizes an AgentAnalysis. Returns null if not recoverable.
+ */
+export declare function validateAgentAnalysis(raw: unknown, agentType: WorkerAgentType): AgentAnalysis | null;
+//# sourceMappingURL=validate.d.ts.map

package/dist/agents/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/agents/validate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAiC,eAAe,EAAE,MAAM,YAAY,CAAC;AAmC3G;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAI5F;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,GAAG,aAAa,GAAG,IAAI,CAOpG"}

package/dist/agents/validate.js

@@ -0,0 +1,54 @@
+import { z } from 'zod';
+const findingSchema = z.object({
+    severity: z.enum(['critical', 'high', 'medium', 'low', 'info']).default('info').catch('info'),
+    category: z.string().default('general').catch('general'),
+    description: z.string().default('No description').catch('No description'),
+    fix: z.string().default('No fix provided').catch('No fix provided'),
+    location: z.string().optional().catch(undefined),
+    cwe: z.string().optional().catch(undefined),
+    owasp: z.string().optional().catch(undefined)
+});
+const planSchema = z.object({
+    agent: z.string().catch(''),
+    task: z.string().catch(''),
+    tier: z.union([z.literal(1), z.literal(2), z.literal(3)]).default(2).catch(2),
+    approach: z.string().default('').catch(''),
+    steps: z.array(z.string()).default([]).catch([]),
+    checklist: z.array(z.string()).default([]).catch([]),
+    pitfalls: z.array(z.string()).default([]).catch([]),
+    patterns: z.array(z.string()).default([]).catch([]),
+    duration_estimate: z.string().default('unknown').catch('unknown')
+});
+const analysisSchema = z.object({
+    agent: z.string().catch(''),
+    subject: z.string().default('').catch(''),
+    findings: z.array(findingSchema).default([]).catch([]),
+    score: z.number().min(0).max(100).default(70).catch(70),
+    verdict: z.enum(['approved', 'approved_with_warnings', 'needs_revision', 'rejected']).default('approved_with_warnings').catch('approved_with_warnings'),
+    summary: z.string().default('').catch(''),
+    critical_count: z.number().optional().catch(undefined),
+    high_count: z.number().optional().catch(undefined)
+});
+/**
+ * Validates and sanitizes an AgentPlan. Returns null if the value is not
+ * recoverable. Otherwise returns a clean plan using Zod.
+ */
+export function validateAgentPlan(raw, agentType) {
+    const parsed = planSchema.safeParse(raw);
+    if (!parsed.success)
+        return null;
+    return { ...parsed.data, agent: agentType };
+}
+/**
+ * Validates and sanitizes an AgentAnalysis. Returns null if not recoverable.
+ */
+export function validateAgentAnalysis(raw, agentType) {
+    const parsed = analysisSchema.safeParse(raw);
+    if (!parsed.success)
+        return null;
+    const data = parsed.data;
+    const critical_count = data.critical_count ?? data.findings.filter(f => f.severity === 'critical').length;
+    const high_count = data.high_count ?? data.findings.filter(f => f.severity === 'high').length;
+    return { ...data, agent: agentType, critical_count, high_count };
+}
+//# sourceMappingURL=validate.js.map

package/dist/agents/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/agents/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;IAC7F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACzE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACnD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACnD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;CAClE,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACtD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IACvJ,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACzC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IACtD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CACnD,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAY,EAAE,SAA0B;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAe,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAY,EAAE,SAA0B;IAC5E,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC1G,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAC9F,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAmB,CAAC;AACpF,CAAC"}

package/dist/cli.js

@@ -162,8 +162,21 @@ async function initCommand() {
         console.error(c.red(`  Error initializing database: ${msg}`));
         process.exit(1);
     }
-    // 3. Auto-scan current project and store project map
+    // 3. Auto-import VETO_MEMORY.md if present in cwd
     const cwd = resolve(process.cwd());
+    const vetoMemoryPath = join(cwd, 'VETO_MEMORY.md');
+    if (existsSync(vetoMemoryPath)) {
+        process.stdout.write('  · Importing VETO_MEMORY.md...');
+        try {
+            const { importMemoryMarkdown } = await import('./memory/sync.js');
+            const importResult = importMemoryMarkdown(vetoMemoryPath);
+            console.log(c.green(' ✓') + ` ${importResult.imported} knowledge entries imported`);
+        }
+        catch {
+            console.log(c.dim(' skipped'));
+        }
+    }
+    // 4. Auto-scan current project and store project map
     const { updateProjectMap } = await import('./memory/local.js');
     const { discoverProject } = await import('./discover.js');
     try {
@@ -282,6 +295,171 @@ async function initCommand() {
         }
     }
     console.log('');
+    // 5. Write platform-specific context guidance files
+    // These are read at session start by each AI client — zero tool calls needed.
+    console.log('  Writing context guidance files...');
+    console.log('');
+    const VETO_GUIDE = `# Veto MCP Server
+
+Veto is active. 49 tools across 5 categories:
+
+**Session & Context** — veto_status · veto_session_save · veto_continue · veto_handoff
+Save work at 60–70% context capacity. veto_status triggers auto-save above 70%.
+
+**Code Intelligence** — veto_diff_review · veto_code_review · veto_security_scan · veto_secrets_scan · veto_ci_gate
+Run veto_diff_review before any merge — it runs all three scans in parallel.
+
+**Council & Routing** — veto_council_debate · veto_route_task · veto_execute_parallel
+Council = 7 specialist agents (Lead Dev, PM, Architect, UX, Devil's Advocate, Legal, Security).
+Verdicts: GREEN (proceed) · YELLOW (warnings) · RED (blocked) · DEADLOCK (human decision needed).
+Two-phase LLM-backed flow: call with { task } → get debate_prompt → reason as all 7 agents → call again with { task, agent_responses }.
+
+**Memory & Discovery** — veto_discover · veto_summarize · veto_memory_store · veto_memory_search
+Run veto_discover on any unfamiliar repo before touching files.
+
+**Observability** — veto_usage_status · veto_health · veto_audit_log · veto_learning_stats
+
+Recommended start sequence:
+1. veto_status — confirm running
+2. veto_discover — map the project
+3. veto_route_task — pick the right agent
+4. veto_diff_review — validate before shipping
+5. veto_session_save — checkpoint before context fills
+`;
+    let ctxWritten = 0;
+    // Gemini CLI: ~/.gemini/GEMINI.md
+    const geminiDir = join(HOME, '.gemini');
+    if (existsSync(geminiDir)) {
+        try {
+            writeFileSync(join(geminiDir, 'GEMINI.md'), VETO_GUIDE, 'utf8');
+            console.log(c.green('  ✓ ') + 'Gemini CLI — wrote ~/.gemini/GEMINI.md');
+            ctxWritten++;
+        }
+        catch {
+            console.log(c.yellow('  ⚠ ') + 'Gemini CLI — could not write GEMINI.md (permission denied?)');
+        }
+    }
+    // Codex CLI: project AGENTS.md + global ~/.codex/AGENTS.override.md
+    const codexDir2 = join(HOME, '.codex');
+    if (existsSync(codexDir2)) {
+        // Project-level: only write if not already present (user may have customized it)
+        const projectAgents = join(cwd, 'AGENTS.md');
+        if (!existsSync(projectAgents)) {
+            try {
+                writeFileSync(projectAgents, VETO_GUIDE, 'utf8');
+                console.log(c.green('  ✓ ') + `Codex CLI — wrote AGENTS.md in ${cwd}`);
+                ctxWritten++;
+            }
+            catch {
+                console.log(c.yellow('  ⚠ ') + 'Codex CLI — could not write AGENTS.md');
+            }
+        }
+        else {
+            console.log(c.dim('  · ') + c.dim('Codex CLI — AGENTS.md already exists, skipping'));
+        }
+        // Global override
+        try {
+            writeFileSync(join(codexDir2, 'AGENTS.override.md'), VETO_GUIDE, 'utf8');
+            console.log(c.green('  ✓ ') + 'Codex CLI — wrote ~/.codex/AGENTS.override.md');
+            ctxWritten++;
+        }
+        catch {
+            console.log(c.yellow('  ⚠ ') + 'Codex CLI — could not write AGENTS.override.md');
+        }
+    }
+    // Windsurf: ~/.codeium/windsurf/rules/veto.md
+    const windsurfRulesDir = join(HOME, '.codeium', 'windsurf', 'rules');
+    if (existsSync(join(HOME, '.codeium', 'windsurf'))) {
+        try {
+            mkdirSync(windsurfRulesDir, { recursive: true });
+            writeFileSync(join(windsurfRulesDir, 'veto.md'), VETO_GUIDE, 'utf8');
+            console.log(c.green('  ✓ ') + 'Windsurf — wrote ~/.codeium/windsurf/rules/veto.md');
+            ctxWritten++;
+        }
+        catch {
+            console.log(c.yellow('  ⚠ ') + 'Windsurf — could not write rules/veto.md');
+        }
+    }
+    if (ctxWritten > 0)
+        console.log('');
+    // 6. Write Claude Code hook templates to .claude/hooks/ in current project
+    // Hooks enforce secrets scanning on every file write and auto-save before compaction.
+    if (existsSync(claudeDir)) {
+        const hooksDir = join(cwd, '.claude', 'hooks');
+        const settingsPath = join(cwd, '.claude', 'settings.json');
+        try {
+            mkdirSync(hooksDir, { recursive: true });
+            // Secrets scan — bash (Mac/Linux)
+            const shLines = [
+                '#!/usr/bin/env bash',
+                '# Veto hook: scan written files for exposed secrets (no API key needed).',
+                '# Triggered by Claude Code PostToolUse after Write/Edit tool calls.',
+                'FILE="$1"',
+                '[ -z "$FILE" ] && exit 0',
+                '[ ! -f "$FILE" ] && exit 0',
+                "PATTERNS='(api[_-]?key|secret[_-]?key|password|passwd|token|access[_-]?key|private[_-]?key)\\s*[=:]\\s*[A-Za-z0-9+/]{20,}'",
+                'if grep -qiE "$PATTERNS" "$FILE" 2>/dev/null; then',
+                '  echo "Veto: possible secret detected in $FILE — run veto_secrets_scan to confirm"',
+                '  exit 1',
+                'fi',
+                'exit 0',
+                '',
+            ];
+            writeFileSync(join(hooksDir, 'veto-secrets-scan.sh'), shLines.join('\n'), 'utf8');
+            // Secrets scan — PowerShell (Windows)
+            const ps1Lines = [
+                '# Veto hook: scan written files for exposed secrets (no API key needed).',
+                'param([string]$File)',
+                'if (-not $File -or -not (Test-Path $File)) { exit 0 }',
+                "$pattern = '(api[_-]?key|secret[_-]?key|password|passwd|token|access[_-]?key|private[_-]?key)\\s*[=:]\\s*[A-Za-z0-9+/]{20,}'",
+                'if (Select-String -Path $File -Pattern $pattern -Quiet -CaseSensitive:$false) {',
+                '  Write-Host "Veto: possible secret detected in $File — run veto_secrets_scan to confirm"',
+                '  exit 1',
+                '}',
+                'exit 0',
+                '',
+            ];
+            writeFileSync(join(hooksDir, 'veto-secrets-scan.ps1'), ps1Lines.join('\n'), 'utf8');
+            // Phase 1.4: Write standard hook files that Claude Code looks for
+            const postFileWrite = process.platform === 'win32'
+                ? `@powershell -NoProfile -ExecutionPolicy Bypass -File ".claude\\hooks\\veto-secrets-scan.ps1" "%1"`
+                : `#!/bin/sh\n./.claude/hooks/veto-secrets-scan.sh "$1"`;
+            const preCompact = process.platform === 'win32'
+                ? `@npx -y @jigyasudham/veto veto_session_save --auto_summarize=true`
+                : `#!/bin/sh\nnpx -y @jigyasudham/veto veto_session_save --auto_summarize=true`;
+            writeFileSync(join(hooksDir, 'post-file-write'), postFileWrite, { mode: 0o755 });
+            writeFileSync(join(hooksDir, 'pre-compact'), preCompact, { mode: 0o755 });
+            // Wire hooks into .claude/settings.json if it exists or create it
+            let projectSettings = {};
+            if (existsSync(settingsPath)) {
+                try {
+                    projectSettings = JSON.parse(readFileSync(settingsPath, 'utf8'));
+                }
+                catch { /* leave empty */ }
+            }
+            else {
+                mkdirSync(dirname(settingsPath), { recursive: true });
+            }
+            const hooks = projectSettings.hooks ?? {};
+            // Only add if not already configured
+            if (!hooks['PostToolUse']) {
+                const scanCmd = process.platform === 'win32'
+                    ? 'powershell -ExecutionPolicy Bypass -File .claude/hooks/veto-secrets-scan.ps1 "$CLAUDE_TOOL_INPUT_FILE_PATH"'
+                    : 'bash .claude/hooks/veto-secrets-scan.sh "$CLAUDE_TOOL_INPUT_FILE_PATH"';
+                hooks['PostToolUse'] = [{ matcher: 'Write|Edit', hooks: [{ type: 'command', command: scanCmd }] }];
+                projectSettings.hooks = hooks;
+                writeFileSync(settingsPath, JSON.stringify(projectSettings, null, 2) + '\n', 'utf8');
+                console.log(c.green('  ✓ ') + 'Claude Code — wrote .claude/hooks/veto-secrets-scan + PostToolUse hook entry');
+            }
+            else {
+                console.log(c.dim('  · ') + c.dim('Claude Code — PostToolUse hook already configured, skipping'));
+            }
+        }
+        catch {
+            console.log(c.yellow('  ⚠ ') + 'Claude Code — could not write hook templates (permission denied?)');
+        }
+        console.log('');
+    }
     if (configured === 0 && skipped === 0) {
         console.log(c.yellow('  ⚠  No AI tools detected.'));
         console.log('  Install Claude Code, Gemini CLI, or Codex CLI and run veto init again.');
@@ -513,6 +691,57 @@ async function sessionsCommand() {
 }
 async function memoryCommand() {
     const args = process.argv.slice(3);
+    const subcommand = args[0];
+    // veto memory export [--format=markdown] [--output=path]
+    if (subcommand === 'export') {
+        const formatArg = args.find(a => a.startsWith('--format='));
+        const outputArg = args.find(a => a.startsWith('--output='));
+        const format = formatArg?.split('=')[1] ?? 'json';
+        const outputPath = outputArg?.split('=')[1];
+        const { exportMemory, exportMemoryMarkdown } = await import('./memory/sync.js');
+        if (format === 'markdown') {
+            const cwd = resolve(process.cwd());
+            const result = exportMemoryMarkdown(cwd, outputPath);
+            if (result.success) {
+                console.log(c.green('  ✓') + ` VETO_MEMORY.md written to ${result.output_path}`);
+                console.log(c.dim(`  Sections: ${JSON.stringify(result.sections)}`));
+            }
+            else {
+                console.error(c.red(`  ✗ Export failed: ${result.error}`));
+            }
+        }
+        else {
+            const result = exportMemory(outputPath);
+            if (result.success) {
+                console.log(c.green('  ✓') + ` Exported to ${result.export_path}`);
+            }
+            else {
+                console.error(c.red(`  ✗ Export failed: ${result.error}`));
+            }
+        }
+        return;
+    }
+    // veto memory import [--format=markdown] <path>
+    if (subcommand === 'import') {
+        const formatArg = args.find(a => a.startsWith('--format='));
+        const format = formatArg?.split('=')[1] ?? 'json';
+        const inputPath = args.find(a => !a.startsWith('--')) ?? '';
+        const { importMemory, importMemoryMarkdown } = await import('./memory/sync.js');
+        if (format === 'markdown') {
+            if (!inputPath) {
+                console.error(c.red('  ✗ Provide a file path: veto memory import --format=markdown <path>'));
+                return;
+            }
+            const result = importMemoryMarkdown(inputPath);
+            console.log(result.success ? c.green('  ✓') + ` ${result.message}` : c.red(`  ✗ ${result.message}`));
+        }
+        else {
+            const result = importMemory(inputPath || undefined);
+            console.log(result.success ? c.green('  ✓') + ` Import complete` : c.red(`  ✗ Import failed: ${result.error}`));
+        }
+        return;
+    }
+    // veto memory [query]
     const query = args.join(' ') || undefined;
     const { searchKnowledge } = await import('./memory/local.js');
     const results = searchKnowledge({ query, limit: 20 });
@@ -554,7 +783,7 @@ async function patternsCommand() {
 }
 function shortHelpCommand() {
     console.log('');
-    console.log(c.bold(c.cyan('  veto')) + c.dim(` v${VERSION}`) + c.dim(` — ${TAGLINE}`));
+    console.log(c.bold(c.cyan('  veto')) + c.dim(` v${VERSION}`) + c.dim(` — 62 agentic tools. 50+ specialists. Zero cost.`));
     console.log('');
     console.log(c.bold('  CLI Commands'));
     console.log(c.dim('  ─────────────────────────────────────────────────────'));
@@ -564,6 +793,8 @@ function shortHelpCommand() {
     console.log(`  ${c.cyan('veto sessions')}                List last 20 saved sessions`);
     console.log(`  ${c.cyan('veto memory')} ${c.dim('[query]')}         Search knowledge base`);
     console.log(`  ${c.cyan('veto patterns')} ${c.dim('[prefix]')}      List learned agent/routing patterns`);
+    console.log(`  ${c.cyan('veto routing')} ${c.dim('[status|enable|disable|reset|log]')}`);
+    console.log(`                         Routing feedback loop (opt-in signal storage)`);
     console.log(`  ${c.cyan('veto version')}                 Show version (alias for status)`);
     console.log(`  ${c.cyan('veto hook install')}            Install pre-commit secrets scan hook`);
     console.log(`  ${c.cyan('veto hook remove')}             Remove the veto pre-commit hook`);
@@ -571,26 +802,20 @@ function shortHelpCommand() {
     console.log(`  ${c.cyan('veto help')}                    Show this help`);
     console.log(`  ${c.cyan('veto help --troubleshoot')}     Show troubleshooting guide`);
     console.log('');
-    console.log(c.bold('  MCP Tools (49)'));
+    console.log(c.bold('  MCP Tools (62 Agentic Tools)'));
     console.log(c.dim('  ─────────────────────────────────────────────────────'));
-    console.log(`  ${c.dim('Session')}       veto_status · veto_autosave_status · veto_session_save · veto_session_restore · veto_sessions_list`);
-    console.log(`  ${c.dim('Router')}        veto_route_task · veto_rate_status`);
-    console.log(`  ${c.dim('Council')}       veto_council_debate · veto_benchmark`);
-    console.log(`  ${c.dim('Agents')}        veto_agent_plan · veto_execute_parallel · veto_explain`);
-    console.log(`  ${c.dim('Review')}        veto_code_review · veto_security_scan · veto_secrets_scan · veto_diff_review`);
-    console.log(`  ${c.dim('Pipeline')}      veto_workflow`);
-    console.log(`  ${c.dim('Watch')}         veto_watch · veto_watch_poll · veto_watch_stop`);
-    console.log(`  ${c.dim('Memory')}        veto_memory_store · veto_memory_search · veto_memory_delete`);
-    console.log(`                veto_project_map_update · veto_project_map_get`);
-    console.log(`                veto_pattern_store · veto_patterns_list`);
-    console.log(`                veto_memory_export · veto_memory_import`);
-    console.log(`  ${c.dim('Learning')}      veto_record_outcome · veto_learning_stats · veto_learning_apply`);
-    console.log(`  ${c.dim('Handoff')}       veto_handoff · veto_continue · veto_platform_setup`);
-    console.log(`  ${c.dim('Intelligence')}  veto_docs_fetch · veto_context_status · veto_task_parse`);
-    console.log(`  ${c.dim('Observability')} veto_usage_status · veto_audit_log · veto_health · veto_metrics`);
-    console.log(`  ${c.dim('CI/CD')}         veto_ci_gate · veto_pr_review`);
-    console.log(`  ${c.dim('Discover')}      veto_discover · veto_summarize · veto_git_blame · veto_changelog`);
-    console.log(`  ${c.dim('Plugins')}       veto_plugins`);
+    console.log(`  ${c.dim('Session')}       veto_status · veto_session_save · veto_session_restore · veto_sessions_list · veto_session_replay · veto_autosave_status`);
+    console.log(`  ${c.dim('Council')}       veto_council_debate · veto_benchmark · veto_adr`);
+    console.log(`  ${c.dim('Intelligence')}  veto_agent_plan · veto_execute_parallel · veto_explain · veto_delegate · veto_compose_agents`);
+    console.log(`  ${c.dim('Scanning')}      veto_code_review · veto_security_scan · veto_secrets_scan · veto_diff_review · veto_full_review · veto_pr_review`);
+    console.log(`  ${c.dim('Pipelines')}     veto_workflow · veto_task_parse · veto_new_feature · veto_pre_commit · veto_ci_gate`);
+    console.log(`  ${c.dim('Watching')}      veto_watch · veto_watch_poll · veto_watch_stop`);
+    console.log(`  ${c.dim('Advanced')}      veto_local_llm · veto_semantic_search · veto_sdd_agent · veto_playwright · veto_notify_ide · veto_translate · veto_a11y_advisor`);
+    console.log(`  ${c.dim('Quality')}       veto_type_coverage · veto_test_gaps · veto_clone_detector · veto_lint_rules · veto_api_contract`);
+    console.log(`  ${c.dim('Discovery')}     veto_discover · veto_summarize · veto_git_blame · veto_changelog · veto_onboard · veto_debt_register`);
+    console.log(`  ${c.dim('DevTools')}      veto_docs_fetch · veto_context_status · veto_openapi_gen · veto_flag_auditor · veto_env_setup · veto_diagram · veto_rca`);
+    console.log(`                veto_commit_message · veto_pr_description · veto_pr_post · veto_prompt_optimizer · veto_sre_advisor · veto_merge_conflict`);
+    console.log(`  ${c.dim('System')}        veto_route_task · veto_rate_status · veto_audit_log · veto_health · veto_metrics · veto_learning_stats · veto_learning_apply · veto_handoff · veto_continue · veto_platform_setup · veto_plugins`);
     console.log('');
     console.log(c.bold('  MCP Resources'));
     console.log(c.dim('  ─────────────────────────────────────────────────────'));
@@ -602,6 +827,7 @@ function shortHelpCommand() {
     console.log(c.bold('  MCP Prompts'));
     console.log(c.dim('  ─────────────────────────────────────────────────────'));
     console.log(`  ${c.cyan('code-review')} · ${c.cyan('security-audit')} · ${c.cyan('deploy-checklist')} · ${c.cyan('explain-file')}`);
+    console.log(`  ${c.cyan('full-review')} · ${c.cyan('new-feature')} · ${c.cyan('debug-incident')} · ${c.cyan('onboard')}`);
     console.log('');
     console.log(c.bold('  Docs & Support'));
     console.log(c.dim('  ─────────────────────────────────────────────────────'));
@@ -679,6 +905,84 @@ function troubleshootCommand() {
     console.log(`  ${c.dim('→')} Then restart the AI client on that machine`);
     console.log('');
 }
+// ─── Routing Command ────────────────────────────────────────────────────────────
+async function routingCommand() {
+    const { getRoutingFeedbackStats, resetRoutingFeedback, listRoutingFeedback, isFeedbackEnabled, setFeedbackEnabled } = await import('./router/learning-updater.js');
+    const sub = process.argv[3];
+    if (sub === 'enable') {
+        setFeedbackEnabled(true);
+        console.log('');
+        console.log(c.green('  ✓ Routing feedback enabled.'));
+        console.log(c.dim('  Every veto_route_task call now records a routing signal (30-day TTL).'));
+        console.log(c.dim('  Disable with: veto routing disable  |  Clear with: veto routing reset'));
+        console.log('');
+        return;
+    }
+    if (sub === 'disable') {
+        setFeedbackEnabled(false);
+        console.log('');
+        console.log(c.yellow('  ✓ Routing feedback disabled.'));
+        console.log(c.dim('  No new signals will be recorded. Existing data is retained.'));
+        console.log(c.dim('  Re-enable with: veto routing enable'));
+        console.log('');
+        return;
+    }
+    if (sub === 'reset') {
+        const result = resetRoutingFeedback();
+        console.log('');
+        console.log(c.green('  ✓ Routing feedback reset.'));
+        console.log(`  ${c.dim('Deleted:')} ${c.cyan(String(result.deleted_feedback))} feedback signal${result.deleted_feedback !== 1 ? 's' : ''}`);
+        if (result.reset_thresholds) {
+            console.log(`  ${c.dim('Thresholds:')} reset to defaults (30/70)`);
+        }
+        console.log('');
+        return;
+    }
+    if (sub === 'log') {
+        const limit = parseInt(process.argv[4] ?? '20', 10);
+        const entries = listRoutingFeedback(isNaN(limit) ? 20 : limit);
+        console.log('');
+        console.log(c.bold('  Routing Feedback Log') + c.dim(` (${entries.length})`));
+        console.log(c.dim('  ─────────────────────────────────────────────────────────────'));
+        if (entries.length === 0) {
+            console.log(c.dim('  No feedback signals yet. Enable feedback: veto routing enable'));
+        }
+        else {
+            for (const e of entries) {
+                const outcomeColor = e.outcome === 'accepted' ? c.green : e.outcome === 'overridden' ? c.yellow : c.dim;
+                const exp = new Date(e.expires_at).toLocaleDateString();
+                console.log(`  ${c.dim(e.recorded_at.slice(0, 10))}  T${e.model_tier}  ${outcomeColor(e.outcome.padEnd(10))}  ${c.dim(`q:${e.quality ?? '-'}`)}  ${e.task_snippet.slice(0, 55)}`);
+                console.log(`  ${c.dim(`  expires: ${exp}  agent: ${e.agent ?? 'dynamic'}`)}`);
+                console.log('');
+            }
+        }
+        return;
+    }
+    // Default: status
+    const stats = getRoutingFeedbackStats();
+    const enabled = isFeedbackEnabled();
+    const statusStr = enabled ? c.green('enabled') : c.dim('disabled');
+    console.log('');
+    console.log(c.bold('  Routing Feedback') + c.dim(' — loop status'));
+    console.log(c.dim('  ─────────────────────────────────────────────────────'));
+    console.log(`  Status      ${statusStr}`);
+    console.log(`  TTL         ${c.cyan(String(stats.ttl_days))} days`);
+    console.log(`  Signals     ${c.cyan(String(stats.active))} active · ${c.dim(String(stats.expired))} expired · ${String(stats.total)} total`);
+    if (Object.keys(stats.by_outcome).length > 0) {
+        const parts = Object.entries(stats.by_outcome).map(([k, v]) => `${k}: ${v}`).join(' · ');
+        console.log(`  Outcomes    ${c.dim(parts)}`);
+    }
+    if (Object.keys(stats.by_tier).length > 0) {
+        const parts = Object.entries(stats.by_tier).map(([tier, s]) => `T${tier}: ${s.count} (q${s.avg_quality ?? '-'})`).join(' · ');
+        console.log(`  By tier     ${c.dim(parts)}`);
+    }
+    if (stats.next_expiry) {
+        console.log(`  Next expiry ${c.dim(new Date(stats.next_expiry).toLocaleDateString())}`);
+    }
+    console.log('');
+    console.log(c.dim(`  Commands: veto routing enable · veto routing disable · veto routing reset · veto routing log`));
+    console.log('');
+}
 // ─── Hook installer ────────────────────────────────────────────────────────────
 async function hookCommand() {
     const sub = process.argv[3];
@@ -831,6 +1135,12 @@ switch (command) {
             process.exit(1);
         });
         break;
+    case 'routing':
+        routingCommand().catch((err) => {
+            console.error(c.red(`Error: ${err.message}`));
+            process.exit(1);
+        });
+        break;
     case 'hook':
         hookCommand().catch((err) => {
             console.error(c.red(`Error: ${err.message}`));