@r1z4x/tezgah 1.6.0 → 1.8.2

package/docs/skills.md

@@ -32,7 +32,7 @@ skill is simply not read.
 
 opencode's plugin does inject prompt-time text - the builder's per-turn block,
 the conditional rules included
-(`hosts/opencode/plugins/tezgah.js:2629-2658`) - but that text names at most one
+(`hosts/opencode/plugins/tezgah.js:2652-2681`) - but that text names at most one
 skill (the hint), never the roster, so the installer writes one:
 `~/.config/tezgah/opencode-skills.md` always-on and
 `opencode-skills.full.md` on demand (`bin/tezgah-setup::SKILL_ROUTER`, `bin/tezgah-setup::SKILL_ROUTER_FULL`), the first

package/docs/status-line.md

@@ -96,7 +96,7 @@ measure the surface cannot see, then armed-and-used or armed-not-used.
 | `graph` | a code-graph tool call (an `mcp__…codegraph…` tool) | `.no-graph` — a missing binary is `idx`'s report, not this mark's |
 | `orch` | a delegate call (`Task`/`Agent`/`spawn_agent`) or a subagent start | `orchestrate-off` |
 | `judge` | a shell command really ran `tezgah-triage` or `tezgah-docs` | `judge-off`, or no credential: no `TYPESAFE_API_KEY` and no non-empty `~/.config/typesafe/key`, and neither the fallback's `OPENROUTER_API_KEY` nor its `~/.config/openrouter/key` |
-| `gate` | never `on`: shown only as `gate✗`, right after the version, in two cases. One: the prompt hook found at least 3 gated calls in this session's transcript since its first turn: write and shell calls, every one of which the gate answers with a `began` or a `deny` row (Bash/PowerShell/Edit/Write/MultiEdit/NotebookEdit on Claude, `exec_command`/`shell`/`apply_patch` on Codex). Over the same span the ledger holds no row from the gate. A PostToolUse row is no proof: that hook keeps writing while a broken PreToolUse lets every call through. The same prompt carries the line "tezgah gate inactive on this host: ...". Two: a kill switch appeared after the session's first prompt; the prompt hook writes one `disarm` row naming it (`disarmed`, baseline a `switches` row of `<cache>/tezgah.db`). The mark is a `gate_inactive` row of the same database (`gate_inactive`, audit Phase 1.3) | a row from the gate appears and no switch armed mid-session is still armed |
+| `gate` | never `on`: shown only as `gate✗`, right after the version, in two cases. One: the prompt hook found at least 3 gated calls in this session's transcript since its first turn: write and shell calls, every one of which the gate answers with a `began` or a `deny` row (Bash/PowerShell/Edit/Write/MultiEdit/NotebookEdit on Claude, `bash`/`edit`/`write` `toolCall` blocks on omp, `exec_command`/`shell`/`apply_patch` on Codex). Over the same span the ledger holds no row from the gate. A PostToolUse row is no proof: that hook keeps writing while a broken PreToolUse lets every call through. The same prompt carries the line "tezgah gate inactive on this host: ...". Two: a kill switch appeared after the session's first prompt; the prompt hook writes one `disarm` row naming it (`disarmed`, baseline a `switches` row of `<cache>/tezgah.db`). The mark is a `gate_inactive` row of the same database (`gate_inactive`, audit Phase 1.3) | a row from the gate appears and no switch armed mid-session is still armed |
 | `drift` | never `on`: shown as `drift✗` when a session start found tezgah's own hook entries changed since install (`hooks/tezgah_attest.py::run`). One mark per session and host, a `harness_drift` row of `<cache>/tezgah.db` keyed `<session hash>.<host>`; the session's `attest` row names what drifted | the next clean start of that host in that session |
 | `crash` | never `on`: shown as `crash✗` when a hook of this session could not import its core and ran without tezgah (`hooks/tezgah_guard.py::import_failed`, mark an `import_crash` row of `~/.cache/tezgah/tezgah.db` keyed `<session hash>`). When `tezgah_context` itself is the module that failed, `statusline.py` prints `tezgah ✗ core import failed` instead of the line | never by itself: the mark stays for the session |
 
@@ -160,11 +160,11 @@ the command really ran it (34-38,84) and is the one writer that can earn `judge`
 (a run of `bin/tezgah-triage` or `bin/tezgah-docs`, `shell_kind`, `hooks/tezgah_context.py::shell_kind`)
 — plus `hooks/projects-auto-init.py::main`
 (`orch` on subagent start), `hosts/codex/hook.py::main`,
-`hosts/cursor/hook.py::dispatch`, hosts/opencode/plugins/tezgah.js:2144-2151,
-hosts/opencode/plugins/tezgah.js:2702, `hosts/omp/hook.py::handle`. Both Claude (hooks/hooks.json) and dsh
+`hosts/cursor/hook.py::dispatch`, hosts/opencode/plugins/tezgah.js:2167-2174,
+hosts/opencode/plugins/tezgah.js:2725, `hosts/omp/hook.py::handle`. Both Claude (hooks/hooks.json) and dsh
 (hosts/dsh/hooks.json) wire PostToolUse to that one shared hook, which is how dsh
 gets any used mark at all: with no local transcript, the store is the only channel
-its line has (hooks/projects-posttooluse.py:33-37).
+its line has (hooks/projects-posttooluse.py:45-49).
 
 Claude's line never reads the store: it parses `tool_use` blocks out of
 `payload["transcript_path"]` plus the subagent transcripts under it, which is how
@@ -185,7 +185,7 @@ Every other surface reads the store.
   `setWidget`, and it is plain because omp strips ANSI (12-29). `status_line()`
   builds the line and carries `idx_override`, so a per-tool redraw forks no git
   (`hosts/omp/hook.py::status_line`); it redraws on session start, session switch, turn end
-  and each watched tool result (hosts/omp/tezgah-hook.ts.in:541-569,607-612,653-678).
+  and each watched tool result (hosts/omp/tezgah-hook.ts.in:596-636,674-679,720-745).
   **Motion:** while the agent runs (`agent_start` until an `agent_end` whose
   `isTerminal` is not `false`) the widget leads with a braille spinner, the tool
   in flight (`tool_execution_start`/`_end`, "thinking" between tools) and the

package/docs/testing.md

@@ -69,22 +69,21 @@ No matrix cancels its other legs when one fails (`fail-fast: false`).
   pull request's base. A change only under `docs/`, `assets/`, a root `*.md`
   page or the GitHub templates is prose: it runs `docs` and nothing else. An
   empty diff, a base it cannot read, a release or a manual run runs everything.
-- `docs`, prose only: the citations audit and
+- `docs`, prose only: the citations audit, the clarity audit and
   `tests/impacted.py --ref <base>`, which maps a docs page to the docs modules.
 - `test` (`ci.yml:100`) on Python 3.10 and 3.14, the floor and the ceiling.
   It byte-compiles, lints with ruff from `requirements-dev.txt` (pip cached),
-  audits the docs citations and runs `TEZGAH_E2E_STRICT=1 python3
-  tests/e2e_plan_flow.py`. On `main` it also runs the serial suite with `-v`.
-  A pull request skips that step, and so does a release, which passes the
-  `release` input and runs one 3.10 leg.
-- `test-sharded` (`ci.yml:145`) on Python 3.10 and 3.14 with node 22 (the
+  audits the docs citations and clarity and runs `TEZGAH_E2E_STRICT=1 python3
+  tests/e2e_plan_flow.py`. A release passes the `release` input and runs one
+  3.10 leg.
+- `test-sharded` (`ci.yml:142`) on Python 3.10 and 3.14 with node 22 (the
   first line that loads the omp `.ts` hook without a flag). On `main` and a
   release it runs `python3 tests/impacted.py --all`. On a pull request it runs
   `--ref <base>`: the modules the change maps to, and the whole suite when the
-  map does not know a path. It is a shadow that started 2026-10-05. After four
-  weeks it replaces the serial `test` step only if it missed no failure that
-  step caught.
-- `apps-e2e` (`ci.yml:178`) on Python 3.12 and node 20: one step,
+  map does not know a path. It replaced the serial `unittest discover` step on
+  2026-10-13: both caught the same failures, and the serial step took about 30
+  minutes.
+- `apps-e2e` (`ci.yml:175`) on Python 3.12 and node 20: one step,
   `TEZGAH_E2E_STRICT=1 python3 tests/e2e_analyze_wiring.py`. It completes the
   app-MCP handshake only - no browser, no device - so it stays deterministic;
   strict mode makes a server that cannot start a failure rather than a skip, so
@@ -99,9 +98,10 @@ No matrix cancels its other legs when one fails (`fail-fast: false`).
   opencode live probe and `--uninstall` from the installed tree. Any residue
   under the prefix fails it.
 
-`.github/workflows/neuter.yml` runs two jobs weekly (and on demand). The first,
-`neuter`, asks the question the suite cannot ask of itself - would a test fail
-if a guard went?
+`.github/workflows/neuter.yml` runs two jobs weekly, on demand, and on a push to
+`main` that changes a guard, the matrix or a test module it runs. The matrix is
+CI's, not the local loop's. The first job, `neuter`, asks the question the suite
+cannot ask of itself - would a test fail if a guard went?
 `tests/neuter_matrix.py` clones HEAD once per anti-shortcut guard, reverts that
 guard, and runs the gate's test modules; a mutant that still passes is a guard no
 test notices, and an unmutated control that fails voids the run. The script
@@ -114,6 +114,13 @@ rows cover the guards around those classes: the pass predicate, the empty-run
 read and the "doğrulanmadı" clear. The lost call, the bookkeeping and idle-turn
 fallbacks and the refusal row have rows too. The shortcut half is still
 hand-written (`MUTANTS`), so a new guard there needs a row.
+Each mutant first runs alone the test that killed it last time, read from
+`tests/neuter_killers.json`. When that test passes or is gone, the mutant runs
+every module in its own HOME and TMPDIR. The module that reads the mutated file
+goes first. The first failing test becomes its new entry. The
+control runs every module, then every cached killer alone, so a killer that
+fails without a mutant voids the run. A session that adds a deny rule checks its
+one mutant with `python3 tests/neuter_matrix.py --only <name>`.
 
 The second, `fuzz-shell`, runs the bash-oracle fuzzer (`tests/fuzz_shell.py`)
 under the ubuntu runner's bash 5.x. Locally, macOS ships bash 3.2. A first step

package/docs/vision.md

@@ -25,8 +25,10 @@ the workspace's own records; every number below names where it came from.
 3. **One review per plan, two rounds, fanned out.** Reviewers read the plan's
    whole diff once, in its verification phase. Round one spawns them together,
    one per dimension. Only a confirmed critical or major finding opens round two,
-   and round two reads the fix's delta. After round two the user gets what is
-   left, or the plan lists it as fix-later. `tezgah-task review` refuses a third
+   and round two reads the fix's delta. The session fixes a minor or suggestion
+   finding without a new round. The plan lists one fix-later only when it waits
+   on a user decision (KARAR). After round two the session fixes what is left,
+   or the plan lists it fix-later only with KARAR. `tezgah-task review` refuses a third
    round (`hooks/tezgah_agents.py::_reviewer_body`, `bin/tezgah-task::cmd_review`).
    (Measured: the old loop opened a round on any finding and ended only on a
    clean round. It reviewed one finished plan round after round. In another plan,
@@ -46,10 +48,16 @@ the workspace's own records; every number below names where it came from.
 | Tier | Command | Wall time |
 |---|---|---|
 | edit loop | `tests/impacted.py --run <changed paths>` | 0.1-95 s (integrity+gate: 18 modules, 93.8 s) |
-| pre-commit | that set + compileall + ruff (+ `--citations` when hooks/ or bin/ moved) | +~5 s |
-| pre-merge, once | `tests/impacted.py --all` + the two e2e scripts | 103.5 s (8 shards; 566.9 s serial) |
+| pre-commit | that set + compileall + ruff | +~5 s |
+| merge step, once | `tests/impacted.py --all` + neuter + `tezgah-docs --citations` and `--clarity` + `render_table.py --acceptance --strict` + the two e2e scripts | 103.5 s for the suite (8 shards; 566.9 s serial), the rest not timed here |
 | CI | the same, on the matrix in `.github/workflows/ci.yml` | unchanged |
 
+Nothing in the merge-step row runs inside a turn (`AGENTS.md`, "Checks, by
+tier", and `hooks/tezgah_policy.py::CORE`). The cut came from a replay of 522 turns
+(the check-loop-cost research line, variant D). It kept 0.5958 of the in-turn
+checks and lost no failure the status quo caught. A third of those failures
+surface at the merge step or in CI instead of in the turn.
+
 A path the map does not know runs everything (`tests/impacted.py::modules_for`): `tests/support.py`,
 `hooks/tezgah_paths.py` and anything new. `tests/test_impacted.py` refuses a
 change that would silently run nothing.

package/hooks/hooks.json

@@ -13,12 +13,12 @@
       { "hooks": [ { "type": "command", "command": "\"${TEZGAH_PYTHON:-python3}\" \"${CLAUDE_PLUGIN_ROOT}/hooks/projects-auto-init.py\"", "timeout": 10 } ] }
     ],
     "PreToolUse": [
-      { "matcher": "Agent|agent|Task|task|Grep|grep|Bash|bash|PowerShell|pwsh|Shell|shell|subagent|Edit|Write|MultiEdit|NotebookEdit", "hooks": [ { "type": "command", "command": "\"${TEZGAH_PYTHON:-python3}\" \"${CLAUDE_PLUGIN_ROOT}/hooks/projects-pretooluse.py\"", "timeout": 5 } ] },
+      { "matcher": "Agent|agent|Task|task|Grep|grep|Bash|bash|PowerShell|pwsh|Shell|shell|subagent|Edit|Write|MultiEdit|NotebookEdit|AskUserQuestion", "hooks": [ { "type": "command", "command": "\"${TEZGAH_PYTHON:-python3}\" \"${CLAUDE_PLUGIN_ROOT}/hooks/projects-pretooluse.py\"", "timeout": 5 } ] },
       { "matcher": "^mcp__(?:.*[^A-Za-z0-9])?(?:append|cancel|clear|click|close|comment|commit|copy|create|delete|deploy|drag|edit|email|evaluate|exec|execute|fill|insert|install|kill|launch|merge|message|mkdir|move|navigate|notify|patch|pause|post|press|print|publish|push|put|release|remove|rename|replace|reply|resume|review|run|save|send|set|share|skip|start|stop|submit|swipe|tag|tap|terminate|type|uninstall|update|upload|write)(?:[^A-Za-z0-9].*)?$", "hooks": [ { "type": "command", "command": "\"${TEZGAH_PYTHON:-python3}\" \"${CLAUDE_PLUGIN_ROOT}/hooks/projects-pretooluse.py\"", "timeout": 5 } ] }
     ],
     "PostToolUse": [
       { "matcher": "Edit|edit|Write|write|MultiEdit|NotebookEdit|Bash|bash|PowerShell|pwsh|str_replace_editor|WebFetch|WebSearch|web_fetch|web_search|fetch|mcp__.*", "hooks": [ { "type": "command", "command": "\"${TEZGAH_PYTHON:-python3}\" \"${CLAUDE_PLUGIN_ROOT}/hooks/projects-posttooluse.py\"", "timeout": 5 } ] },
-      { "matcher": "Agent|Task|Skill", "hooks": [ { "type": "command", "command": "\"${TEZGAH_PYTHON:-python3}\" \"${CLAUDE_PLUGIN_ROOT}/hooks/projects-posttooluse.py\"", "timeout": 5 } ] }
+      { "matcher": "Agent|Task|Skill|TodoWrite", "hooks": [ { "type": "command", "command": "\"${TEZGAH_PYTHON:-python3}\" \"${CLAUDE_PLUGIN_ROOT}/hooks/projects-posttooluse.py\"", "timeout": 5 } ] }
     ],
     "PostToolUseFailure": [
       { "matcher": "Edit|edit|Write|write|MultiEdit|NotebookEdit|Bash|bash|PowerShell|pwsh|str_replace_editor|WebFetch|WebSearch|web_fetch|web_search|fetch|mcp__.*", "hooks": [ { "type": "command", "command": "\"${TEZGAH_PYTHON:-python3}\" \"${CLAUDE_PLUGIN_ROOT}/hooks/projects-posttooluse.py\"", "timeout": 5 } ] }

package/hooks/lang/en.json

@@ -0,0 +1,323 @@
+{
+ "name": "English",
+ "done": [
+  "done|complete[d]?|finished|implemented|fixed|shipped|landed|merged|wired up|wired into|all tests? pass|all checks? pass|(?:tests?|checks?|suite) (?:is |are )?(?:green|passing)|build (?:passes|is green)"
+ ],
+ "verified": [
+  "tested|verified|i ran|ran the (?:tests?|suite|build|lint|checks?)"
+ ],
+ "negated": [
+  "unverified|not verified|could ?n[o']t verify|verification (?:was )?skipped"
+ ],
+ "admitted": [
+  "contradict|unsatisfiable|(?:can ?not|can't|can ?never|never) pass|impossible"
+ ],
+ "sycophant": {
+  "interjection": [
+   "yes|ah|oh|hmm"
+  ],
+  "opener": [
+   "you'?re (?:absolutely )?right|you are right|absolutely right|good catch|great catch|i didn'?t look closely|i should have checked|my mistake|my bad|sorry, i|great question|let me\\b|i['’]ll\\b|sure[!,.]|looking at your\\b"
+  ]
+ },
+ "closer": [
+  "let me know if you need anything else|hope (?:this|that) helps|happy to clarify"
+ ],
+ "next_action": [
+  "next (?:step|action|up)|next:"
+ ],
+ "preamble": [
+  "here(?:'s| is| are)\\b|below\\b|the following\\b"
+ ],
+ "markers": {
+  "letters": [],
+  "words": []
+ },
+ "negation_before": [
+  "\\bnot|n't|\\bnever"
+ ],
+ "question_particle": [],
+ "question_end": [],
+ "clause_join": [
+  "so|and|but"
+ ],
+ "external_state": [
+  "missing|absent|unpublished|exists?|not (?:published|released|found|there|listed|present)|published|released|deprecated|outdated|stale"
+ ],
+ "external_ci_state": [
+  "green|red|passing|passes|passed|failing|fails|failed|behind|flaky"
+ ],
+ "publish_state": [
+  "missing|absent|unpublished|exists?|published|released"
+ ],
+ "residual_label": [
+  "open (?:items?|issues?|questions?|points?|work)|remaining\\b|what(?:'s| is) left|left to do|pending\\b|outstanding\\b|not (?:done|verified|tested|run|checked|covered|looked at)|unverified|untested|unresolved|still open|could(?:n't| not) (?:verify|check|run)|unable to|unchecked|to[ -]?do(?=\\s*(?:\\(|$))|next\\s+(?:steps?|up|actions?)\\b|next(?=\\s*(?:\\(|$))|out of scope|follow[- ]?ups?\\b|deferred|skipped|known (?:issues?|limitations?|bugs?|gaps?)|future (?:work|improvements?)|tech(?:nical)? debt|suggested improvements?|manual (?:verification|checks?|testing)|blockers?\\b|partially"
+ ],
+ "residual_first": [],
+ "label_done": [
+  "resolved|addressed|closed"
+ ],
+ "partial": [
+  "partially"
+ ],
+ "nothing_left": [
+  "\\bnone|\\bnothing"
+ ],
+ "nothing_lead": [
+  "no|none|nothing"
+ ],
+ "empty_item": [
+  "none|nothing|n/a"
+ ],
+ "blockers": {
+  "decision": {
+   "pattern": "DECISION"
+  },
+  "irreversible": {
+   "pattern": "IRREVERSIBLE"
+  },
+  "access": {
+   "pattern": "ACCESS"
+  },
+  "env": {
+   "pattern": "ENV(?:IRONMENTS?)?"
+  },
+  "said_not": [
+   "not\\b|none\\b|isn"
+  ],
+  "tried_not": [],
+  "absent": []
+ },
+ "blocker_labels": [
+  "blocker"
+ ],
+ "blockers_only": [
+  "blockers?"
+ ],
+ "env_error": [
+  "not found|no such|cannot find|can'?t find|could not find|does(?:n'?t| not) exist|no module named|ModuleNotFound|not installed|not available|unavailable|missing|not set|ENOENT|\\b12[67]\\b|quota|limit exceeded|rate.?limit|\\b429\\b"
+ ],
+ "access_error": [
+  "permission denied|access denied|not permitted|EACCES|\\b40[13]\\b|quota|limit exceeded|rate.?limit|\\b429\\b"
+ ],
+ "spawn_words": [
+  "sub-?agent|\\bagent|provider|\\bmodel|spawn"
+ ],
+ "was_exclude": [],
+ "was": [],
+ "now": [],
+ "future": [],
+ "word_order": "verb_first",
+ "ui_objects": [
+  "components?|ui|ux|css|layout|styles?|tokens?|themes?|buttons?|cards?|icons?|labels?|elements?|widgets?|containers?|headers?|footers?|sidebars?|toolbars?|navbars?|nav|menu|modals?|dialogs?|dropdowns?|popovers?|tooltips?|badges?|avatars?|spinners?|skeletons?|inputs?|fields?|forms?|headings?|images?|logos?|grids?|panels?|columns?|screens?|pages?|views?|dashboards?|viewport|tables?|app"
+ ],
+ "ui_quality": [
+  "look\\w*|feels?\\w*|seems?\\w*|renders?\\w*"
+ ],
+ "hints": {
+  "spec": [
+   "normal (user )?behaviou?r|clean ui|nicer|more intuitive|un?professional|polish(ed)?|improve the (ui|ux)|make it (better|usable|look)|look(s)? better",
+   "refactor\\w* (the |this |our )?(\\w+ ){0,2}(components?|ui|ux|css|layout|screens?|pages?|styles?|theme|forms?|fields?|inputs?|views?|widgets?|buttons?|modals?|dialogs?)|ui|ux|css|tailwind|layout|responsive|hover|focus[- ](?:state|ring|outline|visible|indicator|style)|spacing|typography|component\\w*|dark mode|dark theme|light theme",
+   {
+    "ui_ask": "theme\\w*"
+   },
+   "animations?|accessib\\w*|wireframe|mockup|align[- ]?(?:items|self|content)|text-align|alignment\\w*|misalign\\w*|padding",
+   {
+    "ui_ask": "cent(er|re)\\w*"
+   },
+   {
+    "ui_ask": "margins?"
+   },
+   "gutter\\w*|line-?height|letter-?spacing|drop-?shadow|box-?shadow|border-?radius|corner radius|fonts?[- ](?:size|family|weight|face|stack|scale)\\w*|type ?scale|colou?r[- ](?:role|scheme|palette|token|contrast)|palette|cards?[- ](?:component\\w*|layout|grid|list|view|title|body|footer|header)|sidebars?|toolbars?|modals?|dialogs?|dropdowns?|popovers?|accordions?|tooltips?|toasts?|avatars?",
+   {
+    "ui_ask": "badges?"
+   },
+   "breadcrumbs?",
+   {
+    "ui_ask": "pagination"
+   },
+   "tab ?bar|steppers?|spinners?",
+   {
+    "ui_ask": "skeletons?"
+   },
+   "disabled\\w*|pressed|active state|selected state|empty state|breakpoints?\\w*|viewport|media quer\\w*|design (system|token|guide|library|language)\\w*|style guides?|wcag\\w*|a11y|aria-?\\w*|screen readers?|tab order|keyboard naviga\\w*|contrast (ratio|level|check|issue)|screenshots?|visual (review|regression|diff|check)|redesign\\w*|revamp\\w*|restyle\\w*|makeover",
+   {
+    "ui_ask": "cluttered"
+   },
+   "outdated|cohesive"
+  ],
+  "consult": [
+   "architect(ure|ural)|root cause|migrat(e|ion)|deploy|security|trade-?off|which approach|design decision|irreversible|rollback|schema change|re-?architect\\w*|restructur\\w*|rewrite\\w*|(refactor\\w*|rewrite\\w*) (the |this |our )?(\\w+ ){0,2}(module|subsystem|service|system|layer|engine|architecture|data ?model|code ?base|ingest\\w*)|breaking change\\w*|backwards?[- ]incompatib\\w*|api version\\w*|version(ing)? the api|backfill\\w*|revert\\w*|rollback|performance budget|perf budget|latency budget|hot ?path|threat model\\w*|security review\\w*|cve\\b|concurren\\w*|race condition\\w*|deadlock\\w*|capacit\\w* (plan|budget|test|limit)\\w*|scal(e|ing) (plan|strategy|limit|test)\\w*|load test\\w*|adrs?\\b|architecture decision record\\w*|design doc\\w*|rollout"
+  ],
+  "research": [
+   "research|literature|hypothes(is|es)|experiment(al)?|ablation|hyperparameter|benchmark|survey|paper|dataset|compar\\w*|(a/?b|ab) tests?|user interview\\w*|root[ -]?cause (analys|investigat)\\w*|reference review|lit(erature)?[ -]review|evaluat(e|ing) (whether|the (librar|technique|approach|tool|option|alternative))|measure(?! how (?:long|fast|much time)| the (?:time|duration|latency|speed|runtime))\\w*|post[ -]?mortem|error budget|incident (review|report)|is (this|that|it) (actually )?(true|right)|does (this|that) (claim )?hold"
+  ],
+  "product": [
+   "product(?!ion|ivity|ive)\\w*|feature(?!s?[ -](?:flags?|toggles?|gates?|branch\\w*))\\w*|roadmap|backlog|prd|north star|jtbd|retention|churn|onboarding|cohort|funnel|conversion rate|pricing|prioriti[sz]\\w*|user research|user interview\\w*|ab test|a/b test|activations?\\b|churn(ed|ing|s)?|funnels?|cohorts?|drop-?off|roadmaps?|priorit(y|ies)|adoption|conversion (rate|funnel|drop\\w*)|packaging|monetiz\\w*|price\\w*|tier(?!s?[ -]lists?)\\w*|positioning|value proposition|\\bicp\\b|ideal customer profile|persona\\w*|segment(?!(?:ation)?[ -]faults?)\\w*|(customer|user|product|problem) discovery|opportunity (tree|solution|space|score)|\\bnps\\b|net promoter|\\bcsat\\b|satisfaction|(customer|user)[ -]?feedback\\w*|support ticket\\w*|competitor\\w*|competitive (analysis|landscape|teardown|benchmark)\\w*|wizard|crud|form (validation|field|error|label)|data table|step flow|search (dropdown|box)|form validation|user management|(admin|users?) (panel|screen|page|list)",
+   {
+    "ui_ask": "(?:admin|users?) table"
+   }
+  ],
+  "graph": [
+   "who calls|callers?|call sites?|who uses|what breaks|blast radius|where is|where's|definition of|who invokes|impact (analysis|assessment|of (changing|renaming|removing|deleting|editing))|change impact|ripple effect|(who|what|anything)( else)? (depends on|uses)|dependents? of|dependenc(y|ies) (graph|direction|inversion|cycle)|layer (violation|boundar\\w*|direction)|layering|who imports|which (files|modules) import|call (graph|chain|path|tree|hierarchy)|transitive callers?|callers? of|usages? of|find usages|references? to|is \\w+ (still )?(used|referenced|called)|never called|dead code|unused (code|function|method|module|export|class|variable|import|param\\w*)|unreachable code|orphan(ed)? (module|file|code)|circular (import|dependenc\\w*)|(import|dependenc\\w*) cycle|cycle (between|detection)|(code|app|program|service|main|server|cli|boot) entry ?points?|boot (path|sequence|order)|startup (path|sequence|order)|how is (this|it|\\w+) wired|wired up|rename\\w*"
+  ]
+ },
+ "fan_verbs": [
+  "fix|add|update|write|remove|delete|rename|move|refactor|document|bump|create|implement|migrate|replace"
+ ],
+ "fan_join": [
+  "and"
+ ],
+ "fan_ordinals": [
+  "first(?:ly)?",
+  "second(?:ly)?"
+ ],
+ "fan_directives": [
+  "in parallel|sub-?agent\\w*|worktrees?|fan[- ]?out|orchestrat\\w*"
+ ],
+ "data_ask": [
+  "(?:design|create|make|build|sketch|propose|need|want)\\w* (?:\\w+ ){0,4}(?:dashboard|charts?|visuali[sz]ation)|(?:metri[ck]s?|kpis?|data|sales|revenue) (?:\\w+ ){0,2}dashboard|(?:what|which) (?:\\w+ ){0,3}(?:metri[ck]s|kpis|charts?) (?:\\w+ ){0,3}(?:should|to|do|matter|would)|what should (?:\\w+ ){0,3}dashboard show|(?:choose|pick|define|track|design)(?:s|ing)? (?:\\w+ ){0,3}(?:metri[ck]s|kpis)|(?:metri[ck]s|kpis) (?:should|to|do|would) (?:\\w+ ){0,2}(?:track|measure|use|watch)|success metrics?|(?:suggest|recommend)\\w* (?:\\w+ ){0,3}charts?|visuali[sz]\\w* (?:\\w+ ){0,3}(?:data|numbers)|data visuali[sz]ation"
+ ],
+ "code_sense": [
+  "\\w\\.(?:py|tsx?|jsx?|json|go|rs|ya?ml|sql|java|rb|css|html)\\b|\\b\\w+_\\w+\\b|/metrics\\b|\\bselect\\b.{0,200}?\\bfrom\\b",
+  "\\b(?:tables?|columns?|schema|sql|queries|query|bundle|webpack|vite|tests?|ci|counters?|registry|pipeline|backend|handlers?|structs?|endpoints?|exporters?|export\\w*|servers?|librar\\w*|packages?|modules?|database|index\\w*|middleware|debugger|data (?:structure|flow)s?|clipboard|spinner|threads?|commit|git|functions?|class|component|prop|hooks?|prometheus|grafana|kibana|statsd|opentelemetry|config\\w*|provision\\w*|api|routes?|snake_case)\\b"
+ ],
+ "constraint": {
+  "dont": [
+   "(?:do not|don'?t|never)\\s+(?:touch|modify|edit|change|delete|remove|rename|push|commit|merge|deploy|publish|release)\\s+(?:(?:the|any|my|this|that|to|a|an)\\s+)?[`\\\"“]?(?P<obj>[\\w~@/-](?:[\\w./@~-]*[\\w@~/-])?)"
+  ],
+  "ask": [
+   "ask\\s+(?:me\\s+)?(?:first\\s+)?before\\s+(?P<ask>\\w+)"
+  ],
+  "grant": [
+   "without asking(?: me)?|no need to ask|(?:you have|you've got) my (?:approval|permission|go-ahead)|\\bi approve\\b|(?:you are|you're) (?:approved|cleared|authori[sz]ed) to|go ahead and (?:push|release|publish|tag|open)\\w*|don'?t ask (?:me )?(?:again|for (?:approval|permission))"
+  ],
+  "lift": [
+   "ask (?:me )?(?:again|first from now on)|from now on,? ask (?:me )?(?:first|before)|(?:revoke|withdraw)\\w* (?:my |the )?(?:approval|permission|grant)"
+  ],
+  "lift_outward": [
+   "(?:don'?t|do not|stop|hold off(?: on)?|never)\\s+(?:\\w+\\s+){0,2}?(?:push|release|publish|tag|deploy|open (?:a |the )?pr)\\w*"
+  ],
+  "grant_not": [
+   "\\b(?:don'?t|do not|never|stop|didn'?t|did not|why did you)\\b"
+  ],
+  "grant_not_verb": [],
+  "grant_not_soft": []
+ },
+ "ask": {
+  "process": [
+   "\\b(?:shall|should|can|may) i (?:now |just |also )?(?:proceed|continue|go on|go ahead|start|begin|keep going|move on|carry on|open (?:a|the) plan|commit|merge|run (?:the )?(?:tests?|checks?|suite))\\b|\\b(?:do you want|would you like|want) me to (?:now |also |just )?(?:proceed|continue|go on|go ahead|start|begin|keep going|move on|carry on|commit|merge|open (?:a|the) plan|run (?:the )?(?:tests?|checks?|suite))\\b|\\bwhich (?:one |step |item |part |task )?(?:first|next)\\b|\\bwhere (?:should i|do i|to) start\\b|\\b(?:ok|okay|ready) to (?:proceed|continue|go ahead|start)\\b"
+  ],
+  "never_default": [
+   "force[- ]?push\\w*|--force\\b|rewrit\\w* (?:the )?history|reset --hard|\\bdelet\\w*|\\bdrop (?:the )?(?:table|database|volume)s?|unpublish\\w*|deprecat\\w*|production|\\bprod\\b|migrat\\w*|credential\\w*|password\\w*|secret\\w*|api key|\\baccount\\w*|e-?mail|send (?:it |this |them )?to\\b"
+  ],
+  "spend": [
+   "spend\\w*|\\bpaid\\b|billing|\\bcost\\w*|\\bbudget\\w*|\\busd\\b|\\$\\s?\\d"
+  ],
+  "default_mark": [
+   "recommend\\w*|\\bdefault\\b|i(?:'d| would) (?:pick|go with|choose)|\\bmy pick\\b"
+  ],
+  "options": [
+   "\\bor\\b|\\boptions?\\b|\\balternatives?\\b|\\bvs\\.?(?=\\s)|\\s/\\s|\\b(?:a|1)\\)?\\s.+?,\\s*(?:b|2)\\)?\\s"
+  ],
+  "cheap_answer": [
+   "yes|yep|yeah|ok(?:ay)?|sure|go(?: on| ahead)?|continue|proceed|do it|carry on|keep going|approved"
+  ],
+  "outward": {
+   "push": "\\bpush\\w*",
+   "release": "\\brelease\\w*|\\btag(?:s|ged|ging)?\\b|version bump|bump the version",
+   "publish": "\\bpublish\\w*|\\bnpm\\b|homebrew|pypi",
+   "pr": "pull request|\\bprs?\\b"
+  }
+ },
+ "needle_stop": [
+  "while",
+  "in",
+  "on",
+  "at",
+  "without",
+  "until",
+  "unless",
+  "and",
+  "or",
+  "for",
+  "to",
+  "with",
+  "before",
+  "after",
+  "from",
+  "into",
+  "of",
+  "but"
+ ],
+ "rank_stopwords": [
+  "the",
+  "and",
+  "that",
+  "this",
+  "with",
+  "for",
+  "from",
+  "are",
+  "was",
+  "were",
+  "not",
+  "but",
+  "its",
+  "into",
+  "than",
+  "then",
+  "they",
+  "them",
+  "their",
+  "have",
+  "has",
+  "had",
+  "will",
+  "would",
+  "can",
+  "could",
+  "should",
+  "you",
+  "your",
+  "what",
+  "when",
+  "which",
+  "who",
+  "how",
+  "all",
+  "any",
+  "out"
+ ],
+ "fold": [],
+ "say": {
+  "unverified": "unverified",
+  "reply_lang": "English",
+  "reply_in": "in English, even when the user\nwrites another language",
+  "reply_split": "in English, even when the user writes another language",
+  "reply_short": "reply English",
+  "gap_example": "\"I did not verify this before the deploy; this is how I weighed the risk: ...\"",
+  "blocker_tokens": "DECISION, ACCESS, IRREVERSIBLE, ENV",
+  "agree_word": "\"you're right\"",
+  "opener_short": "\"you're right\", \"good catch\", \"I didn't look closely\"",
+  "decision_gloss": "",
+  "access_gloss": "",
+  "irreversible_gloss": "",
+  "env_gloss": "",
+  "blockers_heading": "Blockers",
+  "decision": "DECISION",
+  "access": "ACCESS",
+  "irreversible": "IRREVERSIBLE",
+  "env": "ENV",
+  "done_claim": "done",
+  "opener_examples": "\"you're right\", \"absolutely right\", \"good catch\", \"I didn't look closely\", \"I should have checked\"",
+  "opener_ban": "never \"you're right\" / \"I didn't look closely\" / an apology",
+  "residual_lead": "",
+  "slice_lead": "",
+  "ready_lead": "",
+  "ask_lead": "",
+  "approval_heading": "Approval questions",
+  "recommended": "Recommended",
+  "grant_examples": "\"push without asking\", \"I approve\""
+ }
+}