@nforma.ai/nforma 0.2.1 → 0.29.0

package/hooks/dist/unified-mcp-server.mjs

@@ -104,7 +104,7 @@ function buildSlotTools(provider) {
   // Universal: identity
   tools.push({
     name: 'identity',
-    description: 'Get server identity: name, version, active LLM model, and MCP server name. Used by QGSD to fingerprint the active quorum team.',
+    description: 'Get server identity: name, version, active LLM model, and MCP server name. Used by nForma to fingerprint the active quorum team.',
     inputSchema: NO_ARGS_SCHEMA,
   });
 
@@ -501,7 +501,7 @@ function buildIdentityResult(provider) {
     model,
     display_provider: provider.display_provider ?? null,
     provider: provider.description,
-    install_method: 'qgsd-monorepo',
+    install_method: 'nf-monorepo',
   });
 }
 

package/package.json

@@ -1,10 +1,9 @@
 {
   "name": "@nforma.ai/nforma",
-  "version": "0.2.1",
+  "version": "0.29.0",
   "description": "nForma — Quorum Gets Shit Done. Multi-model quorum enforcement for GSD planning commands via Claude Code hooks.",
   "bin": {
     "nforma": "bin/install.js",
-    "qgsd": "bin/install.js",
     "get-shit-done-cc": "bin/install.js"
   },
   "files": [
@@ -14,6 +13,7 @@
     "get-shit-done",
     "agents",
     "hooks/dist",
+    "!hooks/dist/*.test.*",
     "scripts",
     "!scripts/generate-logo-svg.js",
     "!scripts/generate-terminal-svg.js",
@@ -70,7 +70,7 @@
   "scripts": {
     "postinstall": "node scripts/postinstall.js",
     "build:hooks": "node scripts/build-hooks.js",
-    "build:machines": "npx tsup src/machines/qgsd-workflow.machine.ts --format cjs --out-dir dist/machines --no-splitting --tsconfig tsconfig.formal.json",
+    "build:machines": "npx tsup src/machines/nf-workflow.machine.ts --format cjs --out-dir dist/machines --no-splitting --tsconfig tsconfig.formal.json",
     "generate-terminal": "node scripts/generate-terminal-svg.js",
     "generate-logo": "node scripts/generate-logo-svg.js",
     "generate-assets": "npm run generate-terminal && npm run generate-logo",
@@ -88,7 +88,9 @@
     "secrets:audit": "detect-secrets audit .secrets.baseline",
     "secrets:history": "bash scripts/secret-audit.sh",
     "test": "npm run test:ci && npm run test:formal",
-    "test:ci": "node scripts/lint-isolation.js && node --test hooks/qgsd-precompact.test.js hooks/gsd-context-monitor.test.js hooks/qgsd-session-start.test.js bin/conformance-schema.test.cjs bin/resolve-cli.test.cjs bin/secrets.test.cjs bin/verify-quorum-health.test.cjs hooks/qgsd-stop.test.js hooks/config-loader.test.js qgsd-core/bin/gsd-tools.test.cjs hooks/qgsd-circuit-breaker.test.js hooks/qgsd-prompt.test.js bin/update-scoreboard.test.cjs hooks/qgsd-statusline.test.js bin/review-mcp-logs.test.cjs bin/migrate-to-slots.test.cjs bin/validate-traces.test.cjs bin/write-check-result.test.cjs bin/check-results-exit.test.cjs bin/check-trace-redaction.test.cjs bin/check-trace-schema-drift.test.cjs bin/qgsd.test.cjs bin/set-secret.test.cjs bin/issue-classifier.test.cjs bin/generate-tla-cfg.test.cjs bin/ccr-secure-config.test.cjs bin/gsd-quorum-slot-worker-improvements.test.cjs bin/quorum-improvements-signal.test.cjs bin/claude-md-references.test.cjs hooks/qgsd-spec-regen.test.js bin/propose-debug-invariants.test.cjs bin/aggregate-requirements.test.cjs bin/validate-requirements-haiku.test.cjs bin/call-quorum-slot-retry.test.cjs bin/provider-mapping.test.cjs",
+    "test:changed": "node bin/test-changed.cjs",
+    "test:ci": "node scripts/lint-isolation.js && node scripts/verify-hooks-sync.cjs && node --test hooks/nf-precompact.test.js hooks/gsd-context-monitor.test.js hooks/nf-session-start.test.js bin/conformance-schema.test.cjs bin/resolve-cli.test.cjs bin/secrets.test.cjs bin/verify-quorum-health.test.cjs hooks/nf-stop.test.js hooks/config-loader.test.js core/bin/gsd-tools.test.cjs hooks/nf-circuit-breaker.test.js hooks/nf-prompt.test.js bin/update-scoreboard.test.cjs hooks/nf-statusline.test.js bin/review-mcp-logs.test.cjs bin/migrate-to-slots.test.cjs bin/validate-traces.test.cjs bin/write-check-result.test.cjs bin/check-results-exit.test.cjs bin/check-trace-redaction.test.cjs bin/check-trace-schema-drift.test.cjs bin/nForma.test.cjs bin/set-secret.test.cjs bin/issue-classifier.test.cjs bin/generate-tla-cfg.test.cjs bin/ccr-secure-config.test.cjs bin/gsd-quorum-slot-worker-improvements.test.cjs bin/quorum-improvements-signal.test.cjs bin/claude-md-references.test.cjs hooks/nf-spec-regen.test.js bin/propose-debug-invariants.test.cjs bin/aggregate-requirements.test.cjs bin/validate-requirements-haiku.test.cjs bin/call-quorum-slot-retry.test.cjs bin/provider-mapping.test.cjs",
+    "test:install": "node --test test/install-virgin.test.cjs",
     "test:formal": "node --test bin/run-tlc.test.cjs bin/run-alloy.test.cjs bin/export-prism-constants.test.cjs bin/generate-petri-net.test.cjs bin/run-breaker-tlc.test.cjs bin/run-oscillation-tlc.test.cjs bin/run-protocol-tlc.test.cjs bin/run-audit-alloy.test.cjs bin/run-transcript-alloy.test.cjs bin/run-installer-alloy.test.cjs bin/run-formal-verify.test.cjs bin/xstate-to-tla.test.cjs bin/run-account-manager-tlc.test.cjs bin/run-account-pool-alloy.test.cjs bin/run-oauth-rotation-prism.test.cjs bin/run-prism.test.cjs bin/check-spec-sync.test.cjs bin/sensitivity-sweep-feedback.test.cjs bin/roadmapper-formal-integration.test.cjs bin/test-formal-integration.test.cjs test/alloy-headless.test.cjs",
     "prepare": "husky"
   }

package/scripts/build-hooks.js

@@ -11,12 +11,19 @@ const DIST_DIR = path.join(HOOKS_DIR, 'dist');
 
 // Hooks to copy (pure Node.js, no bundling needed)
 const HOOKS_TO_COPY = [
-  'qgsd-check-update.js',
-  'qgsd-statusline.js',
-  'qgsd-prompt.js',      // QGSD: UserPromptSubmit quorum injection hook
-  'qgsd-stop.js',        // QGSD: Stop quorum verification gate
-  'config-loader.js',    // QGSD: shared config loader (required by qgsd-prompt.js and qgsd-stop.js)
-  'qgsd-circuit-breaker.js', // QGSD: PreToolUse oscillation detection and state persistence
+  'nf-check-update.js',
+  'nf-statusline.js',
+  'nf-prompt.js',      // nForma: UserPromptSubmit quorum injection hook
+  'nf-stop.js',        // nForma: Stop quorum verification gate
+  'nf-circuit-breaker.js', // nForma: PreToolUse oscillation detection and state persistence
+  'nf-session-start.js',   // nForma: SessionStart hook
+  'nf-precompact.js',      // nForma: PreCompact hook
+  'nf-spec-regen.js',      // nForma: PostToolUse spec regeneration
+  'nf-token-collector.js', // nForma: SubagentStop token collection
+  'nf-slot-correlator.js', // nForma: SubagentStart slot correlation
+  'gsd-context-monitor.js', // nForma: PostToolUse context monitoring
+  'config-loader.js',       // shared config loader (required by multiple hooks)
+  'conformance-schema.cjs', // shared conformance schema (required by nf-prompt, nf-stop, nf-circuit-breaker)
 ];
 
 function build() {

package/scripts/secret-audit.sh

@@ -5,7 +5,7 @@
 
 set -euo pipefail
 
-echo "=== QGSD Full-History Secret Audit ==="
+echo "=== nForma Full-History Secret Audit ==="
 echo ""
 
 # --- Gitleaks full-history scan ---

package/scripts/verify-hooks-sync.cjs

@@ -0,0 +1,90 @@
+#!/usr/bin/env node
+/**
+ * CI guard: verifies that every hook registered by the installer has a
+ * corresponding entry in the build-hooks HOOKS_TO_COPY list, and that
+ * every require('./...') dependency inside those hooks is also included.
+ *
+ * Exits non-zero on drift so the test suite catches it early.
+ */
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+const ROOT = path.resolve(__dirname, '..');
+const INSTALL_JS = path.join(ROOT, 'bin', 'install.js');
+const BUILD_HOOKS_JS = path.join(ROOT, 'scripts', 'build-hooks.js');
+const HOOKS_DIR = path.join(ROOT, 'hooks');
+
+// --- Extract HOOKS_TO_COPY from build-hooks.js ---
+function getHooksToCopy() {
+  const src = fs.readFileSync(BUILD_HOOKS_JS, 'utf8');
+  const match = src.match(/HOOKS_TO_COPY\s*=\s*\[([\s\S]*?)\]/);
+  if (!match) throw new Error('Could not parse HOOKS_TO_COPY from build-hooks.js');
+  const entries = [];
+  for (const m of match[1].matchAll(/'([^']+)'/g)) {
+    entries.push(m[1]);
+  }
+  return new Set(entries);
+}
+
+// --- Extract hook filenames registered by the installer via buildHookCommand() ---
+function getInstallerHooks() {
+  const src = fs.readFileSync(INSTALL_JS, 'utf8');
+  const hooks = new Set();
+  for (const m of src.matchAll(/buildHookCommand\(\s*\w+\s*,\s*'([^']+)'\s*\)/g)) {
+    hooks.add(m[1]);
+  }
+  return hooks;
+}
+
+// --- Extract local require('./...') dependencies from a hook source file ---
+function getLocalRequires(filePath) {
+  const src = fs.readFileSync(filePath, 'utf8');
+  const deps = new Set();
+  for (const m of src.matchAll(/require\(\s*'\.\/([^']+)'\s*\)/g)) {
+    let dep = m[1];
+    // Node resolves require('./config-loader') to './config-loader.js'
+    // Normalize to match HOOKS_TO_COPY entries which include extensions
+    if (!path.extname(dep)) dep += '.js';
+    deps.add(dep);
+  }
+  return deps;
+}
+
+// --- Main ---
+const hooksToCopy = getHooksToCopy();
+const installerHooks = getInstallerHooks();
+const errors = [];
+
+// 1. Every hook registered by the installer must be in HOOKS_TO_COPY
+for (const hook of installerHooks) {
+  if (!hooksToCopy.has(hook)) {
+    errors.push(`MISSING from HOOKS_TO_COPY: '${hook}' (registered in installer via buildHookCommand)`);
+  }
+}
+
+// 2. Every local require() dependency of copied hooks must also be in HOOKS_TO_COPY
+for (const hook of hooksToCopy) {
+  const hookPath = path.join(HOOKS_DIR, hook);
+  if (!fs.existsSync(hookPath)) {
+    errors.push(`HOOKS_TO_COPY entry '${hook}' does not exist at ${hookPath}`);
+    continue;
+  }
+  const deps = getLocalRequires(hookPath);
+  for (const dep of deps) {
+    if (!hooksToCopy.has(dep)) {
+      errors.push(`MISSING from HOOKS_TO_COPY: '${dep}' (required by ${hook})`);
+    }
+  }
+}
+
+if (errors.length > 0) {
+  console.error('hooks-sync verification FAILED:\n');
+  for (const e of errors) console.error(`  - ${e}`);
+  console.error('\nFix: update HOOKS_TO_COPY in scripts/build-hooks.js');
+  process.exit(1);
+} else {
+  console.log(`hooks-sync OK: ${hooksToCopy.size} hooks in build list, ${installerHooks.size} registered by installer`);
+}

package/templates/{qgsd.json → nf.json}

@@ -1,6 +1,6 @@
 {
   "_comment": [
-    "QGSD Quorum Config — generated by QGSD installer. Safe to edit.",
+    "nForma Quorum Config — generated by nForma installer. Safe to edit.",
     "",
     "quorum_commands: GSD planning commands that require quorum before Claude delivers output.",
     "  Add or remove command names to control which /gsd: commands are gated.",
@@ -14,11 +14,11 @@
     "fail_mode: 'open' (default) — unavailable models are skipped, quorum passes with available models.",
     "  'closed' is reserved for future use.",
     "",
-    "Config layering: ~/.claude/qgsd.json (global) is loaded first.",
-    "  .claude/qgsd.json in the project directory overrides global values (project takes precedence).",
+    "Config layering: ~/.claude/nf.json (global) is loaded first.",
+    "  .claude/nf.json in the project directory overrides global values (project takes precedence).",
     "  Merge is SHALLOW: if a project config sets required_models, it entirely replaces global required_models.",
     "  To add a model to the global list, copy the full required_models from global and add your entry.",
-    "  Create .claude/qgsd.json in a project to restrict quorum to fewer models or different commands.",
+    "  Create .claude/nf.json in a project to restrict quorum to fewer models or different commands.",
     "",
     "circuit_breaker config uses the SAME shallow merge: a project config with only oscillation_depth set",
     "  entirely replaces the global circuit_breaker object. commit_window falls back to DEFAULT (6), NOT the global value.",

package/commands/qgsd/join-discord.md

@@ -1,18 +0,0 @@
----
-name: qgsd:join-discord
-description: Join the QGSD Discord community
----
-
-<objective>
-Display the Discord invite link for the QGSD community server.
-</objective>
-
-<output>
-# Join the QGSD Discord
-
-Connect with other QGSD users, get help, share what you're building, and stay updated.
-
-**Server link:** https://discord.com/servers/1474810068636663886
-
-Click the link or paste it into your browser to join.
-</output>

package/hooks/dist/qgsd-session-start.js

@@ -1,122 +0,0 @@
-#!/usr/bin/env node
-// hooks/qgsd-session-start.js
-// SessionStart hook — syncs QGSD keychain secrets into ~/.claude.json
-// on every session start so mcpServers env blocks always reflect current keychain state.
-//
-// Runs synchronously (hook expects process to exit) — uses async IIFE with catch.
-
-'use strict';
-
-const path = require('path');
-const os   = require('os');
-const fs   = require('fs');
-
-// ─── Stdin accumulation (for hook input JSON containing cwd) ─────────────────
-let _stdinRaw = '';
-process.stdin.setEncoding('utf8');
-process.stdin.on('data', c => _stdinRaw += c);
-
-let _stdinReady;
-const _stdinPromise = new Promise(resolve => { _stdinReady = resolve; });
-process.stdin.on('end', () => _stdinReady());
-
-// Locate secrets.cjs — try installed global path first, then local dev path.
-//
-// IMPORTANT: install.js copies bin/*.cjs to ~/.claude/qgsd-bin/ (not ~/.claude/qgsd/bin/).
-// See bin/install.js line ~1679: binDest = path.join(targetDir, 'qgsd-bin')
-// where targetDir = os.homedir() + '/.claude'.
-function findSecrets() {
-  const candidates = [
-    path.join(os.homedir(), '.claude', 'qgsd-bin', 'secrets.cjs'),  // installed path
-    path.join(__dirname, '..', 'bin', 'secrets.cjs'),                 // local dev path
-  ];
-  for (const p of candidates) {
-    try {
-      return require(p);
-    } catch (_) {}
-  }
-  return null;
-}
-
-(async () => {
-  // Resolve project cwd from hook input JSON
-  await _stdinPromise;
-  let _hookCwd = process.cwd();
-  try { _hookCwd = JSON.parse(_stdinRaw).cwd || process.cwd(); } catch (_) {}
-
-  const secrets = findSecrets();
-  if (!secrets) {
-    // silently skip — QGSD may not be installed yet or keytar absent
-    process.exit(0);
-  }
-  try {
-    await secrets.syncToClaudeJson(secrets.SERVICE);
-  } catch (e) {
-    // Non-fatal — write to stderr for debug logs, but never block session start
-    process.stderr.write('[qgsd-session-start] sync error: ' + e.message + '\n');
-  }
-
-  // Populate CCR config from keytar (fail-silent — CCR may not be installed)
-  try {
-    const { execFileSync } = require('child_process');
-    const nodeFsRef = require('fs');
-    const ccrCandidates = [
-      path.join(os.homedir(), '.claude', 'qgsd-bin', 'ccr-secure-config.cjs'),
-      path.join(__dirname, '..', 'bin', 'ccr-secure-config.cjs'),
-    ];
-    let ccrConfigPath = null;
-    for (const p of ccrCandidates) {
-      if (nodeFsRef.existsSync(p)) { ccrConfigPath = p; break; }
-    }
-    if (ccrConfigPath) {
-      execFileSync(process.execPath, [ccrConfigPath], { stdio: 'pipe', timeout: 10000 });
-    }
-  } catch (e) {
-    process.stderr.write('[qgsd-session-start] CCR config error: ' + e.message + '\n');
-  }
-
-  // Telemetry surfacing — inject top unsurfaced issue as additionalContext
-  // Guard: only active when running inside the QGSD dev repo itself
-  try {
-    const pkgPath = path.join(_hookCwd, 'package.json');
-    const isQgsdRepo = fs.existsSync(pkgPath) &&
-      JSON.parse(fs.readFileSync(pkgPath, 'utf8')).name === 'qgsd';
-    const fixesPath = path.join(_hookCwd, '.planning', 'telemetry', 'pending-fixes.json');
-    if (isQgsdRepo && fs.existsSync(fixesPath)) {
-      const fixes = JSON.parse(fs.readFileSync(fixesPath, 'utf8'));
-      const issue = (fixes.issues || []).find(i => !i.surfaced && i.priority >= 50);
-      if (issue) {
-        issue.surfaced = true;
-        issue.surfacedAt = new Date().toISOString();
-        fs.writeFileSync(fixesPath, JSON.stringify(fixes, null, 2), 'utf8');
-        const ctx = 'Telemetry alert [priority=' + issue.priority + ']: ' + issue.description + '\nSuggested fix: ' + issue.action;
-        process.stdout.write(JSON.stringify({
-          hookSpecificOutput: { hookEventName: 'SessionStart', additionalContext: ctx }
-        }));
-      }
-    }
-  } catch (_) {}
-
-  // Memory staleness check — warn about outdated MEMORY.md entries
-  try {
-    const validateMemoryCandidates = [
-      path.join(os.homedir(), '.claude', 'qgsd-bin', 'validate-memory.cjs'),
-      path.join(__dirname, '..', 'bin', 'validate-memory.cjs'),
-    ];
-    let validateMemoryMod = null;
-    for (const p of validateMemoryCandidates) {
-      try { validateMemoryMod = require(p); break; } catch (_) {}
-    }
-    if (validateMemoryMod) {
-      const { findings } = validateMemoryMod.validateMemory({ cwd: _hookCwd, quiet: true });
-      if (findings.length > 0) {
-        const summary = findings
-          .map(f => '[memory-check] ' + f.message)
-          .join('\n');
-        process.stderr.write(summary + '\n');
-      }
-    }
-  } catch (_) {}
-
-  process.exit(0);
-})();