@miller-tech/uap 1.0.0 → 1.2.0

package/templates/hooks/session-start.sh

@@ -248,7 +248,8 @@ output+="│ ${GIT_LINE}$(printf ' %.0s' $(seq 1 $((W - 1 - ${#GIT_LINE}))))│"
 output+="├$(printf '─%.0s' $(seq 1 $W))┤"$'\n'
 
 # Active policies
-output+="│ Policies: [ON] IaC Parity  [ON] File Backup$(printf ' %.0s' $(seq 1 $((W - 47))))│"$'\n'
+POLICY_LINE="Policies: [ON] IaC Pipeline  [ON] kubectl Backport  [ON] File Backup"
+output+="│ ${POLICY_LINE}$(printf ' %.0s' $(seq 1 $((W - 1 - ${#POLICY_LINE}))))│"$'\n'
 
 # Memory layers
 L3_STATUS="?"
@@ -282,6 +283,12 @@ output+="### DURING WORK:"$'\n'
 output+="6. ALL file changes MUST use worktree: uap worktree create <slug>"$'\n'
 output+="7. Work in .worktrees/NNN-<slug>/ directory"$'\n'
 output+=""$'\n'
+output+="### IaC PIPELINE ENFORCEMENT (MANDATORY):"$'\n'
+output+="- NEVER run terraform plan/apply/destroy locally. ALL Terraform ops go through CI/CD pipeline."$'\n'
+output+="- kubectl MAY be used to diagnose, test, and verify fixes on clusters."$'\n'
+output+="- ANY kubectl-created resource MUST be backported to Terraform .tf files (import or delete/recreate)."$'\n'
+output+="- 100% IaC parity required. Infrastructure work is NOT DONE until pipeline apply succeeds + kubectl verifies."$'\n'
+output+=""$'\n'
 output+="### BEFORE COMMIT:"$'\n'
 output+="8. Self-review: git diff"$'\n'
 output+="9. Run tests if applicable"$'\n'