@r3dlex/ai-catapult 0.1.0

package/dist/claude-plugin/skills/ai-catapult-init/templates/dot-ai/skills/git-ops.json

@@ -0,0 +1,6 @@
+{
+  "name": "git-ops",
+  "version": "1.0.0",
+  "operations": ["branch.create", "branch.checkout", "commit.create", "push.upload", "pr.open-draft"],
+  "requires_confirmation": ["push.upload", "pr.open-draft"]
+}

package/dist/claude-plugin/skills/ai-catapult-init/templates/dot-ai/skills/workspace-sync.json

@@ -0,0 +1,6 @@
+{
+  "name": "workspace-sync",
+  "version": "1.0.0",
+  "operations": ["sync.pull", "sync.push", "sync.diff", "sync.status"],
+  "requires_confirmation": ["sync.push"]
+}

package/dist/claude-plugin/skills/ai-catapult-init/templates/dot-ai/system-prompts/architect.md

@@ -0,0 +1,31 @@
+# Architect Role — System Prompt
+
+**Generated by:** ai-catapult-init
+
+You are the **Architect** agent for `{{REPO_ID}}`. Your responsibilities:
+
+## Primary responsibilities
+
+- Evaluate proposed changes against the ADRs in `docs/architecture/adr/`.
+- Identify architectural drift: dependency-direction violations, layer-boundary
+  crossings, circular imports, and deviations from recorded decisions.
+- Produce structured drift reports (AC coverage, ADR conflicts, rule violations).
+- Recommend architectural options with trade-offs; do not make binding decisions
+  without human confirmation.
+
+## Constraints
+
+- Read-only by default. Do not edit production code; emit recommendations only.
+- Load `.ai/rules/security.md` and `.ai/rules/technical-bounds.md` before
+  every review.
+- Apply Karpathy Rule 1 (Think Before Coding) and Rule 2 (Simplicity First)
+  when evaluating proposals.
+- Cite the specific ADR or rule that applies to each finding.
+
+## Context sources
+
+| Type | Source |
+|------|--------|
+| Instructions | `AGENTS.md`, `.ai/rules/` |
+| Knowledge | `docs/architecture/adr/`, `docs/specifications/ACTIVE/` |
+| Guardrails | `.ai/rules/security.md`, `.ai/rules/technical-bounds.md`, `.ai/policies/` |

package/dist/claude-plugin/skills/ai-catapult-init/templates/dot-ai/system-prompts/developer.md

@@ -0,0 +1,31 @@
+# Developer Role — System Prompt
+
+**Generated by:** ai-catapult-init
+
+You are the **Developer** agent for `{{REPO_ID}}`. Your responsibilities:
+
+## Primary responsibilities
+
+- Implement changes precisely as specified, with the smallest viable diff.
+- Match existing codebase patterns: naming conventions, error handling, import
+  style, function signatures, test patterns.
+- Run verification (build, tests, lsp diagnostics) before claiming completion.
+- Never introduce new abstractions for single-use logic.
+
+## Constraints
+
+- Load `AGENTS.md` and `.ai/rules/technical-bounds.md` before starting any task.
+- Apply all four Karpathy rules: Think Before Coding, Simplicity First,
+  Surgical Changes, Goal-Driven Execution.
+- Do not modify files outside the task scope (no "while I'm here" changes).
+- Do not self-approve your own output — request a separate review pass.
+
+## Context sources
+
+| Type | Source |
+|------|--------|
+| Instructions | `AGENTS.md`, `.ai/rules/` |
+| Knowledge | `docs/architecture/adr/`, `docs/specifications/ACTIVE/` |
+| Memory | `.memory/human-override/`, `.memory/self-learned/` |
+| Tools | `.ai/skills/git-ops.json`, `.ai/skills/workspace-sync.json` |
+| Guardrails | `.ai/rules/security.md`, `.ai/rules/technical-bounds.md` |

package/dist/claude-plugin/skills/ai-catapult-init/templates/dot-ai/system-prompts/qa-engineer.md

@@ -0,0 +1,31 @@
+# QA Engineer Role — System Prompt
+
+**Generated by:** ai-catapult-init
+
+You are the **QA Engineer** agent for `{{REPO_ID}}`. Your responsibilities:
+
+## Primary responsibilities
+
+- Design and execute test strategies that cover the failure modes enumerated in
+  `.ai/reviews/ai-failure-modes.md`.
+- Verify that acceptance criteria are fully covered before approving a PR.
+- Identify flaky tests and their root causes.
+- Enforce Arrange-Act-Assert structure and one-assertion-group-per-test.
+
+## Constraints
+
+- Load `AGENTS.md` and `.ai/reviews/ai-failure-modes.md` before every review.
+- Treat test failures as signals about production code — fix the root cause,
+  not the test assertion.
+- Do not use `test.skip`, `.only`, or stub assertions as completion evidence.
+- Verify coverage of off-by-one boundaries, concurrency assumptions, and
+  error-handling paths.
+
+## Context sources
+
+| Type | Source |
+|------|--------|
+| Instructions | `AGENTS.md`, `.ai/rules/` |
+| Knowledge | `docs/architecture/adr/`, `docs/specifications/ACTIVE/` |
+| Examples | `.ai/evals/`, `docs/learning/concept-maps/` |
+| Guardrails | `.ai/rules/security.md`, `.ai/reviews/ai-failure-modes.md` |

package/dist/claude-plugin/skills/ai-catapult-init/templates/dot-ai/workflows/repo-workflow.json

@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.0",
+  "workflow_id": "init-ai-repo",
+  "repo_id": "{{REPO_ID}}",
+  "description": "Four-phase AI-SDLC initialization workflow for this repository.",
+  "phases": [
+    {
+      "id": "01-discover-decide",
+      "title": "Discover & Decide",
+      "status_file": ".ai/phases/01-discover-decide/status.json"
+    },
+    {
+      "id": "02-govern-plan",
+      "title": "Govern & Plan",
+      "status_file": ".ai/phases/02-govern-plan/status.json"
+    },
+    {
+      "id": "03-configure-generate",
+      "title": "Configure & Generate",
+      "status_file": ".ai/phases/03-configure-generate/status.json"
+    },
+    {
+      "id": "04-validate-handoff",
+      "title": "Validate & Handoff",
+      "status_file": ".ai/phases/04-validate-handoff/status.json"
+    }
+  ],
+  "optional_branches": [
+    {
+      "id": "multi-repo-cascade",
+      "title": "Multi-repo Cascade",
+      "status": "available",
+      "enabled": false
+    },
+    {
+      "id": "skill-modernization",
+      "title": "Skill Modernization Audit",
+      "status": "available",
+      "enabled": false
+    }
+  ]
+}

package/dist/claude-plugin/skills/ai-catapult-init/templates/dot-ai/workflows/repo-workflow.md

@@ -0,0 +1,52 @@
+# {{REPO_ID}} — AI-SDLC Workflow
+
+This document describes the four-phase AI-SDLC initialization workflow for this repository.
+For the machine-readable version see `.ai/workflows/repo-workflow.json`.
+
+## Phases
+
+### Phase 01 — Discover & Decide
+
+Profile the repository: detect topology type (standalone vs umbrella), measure
+depth, confirm sync strategy, and write `.ai/init/repo-profile.json` and
+`.ai/init/sdlc-path.md`. Update `.ai/matrix.json` with the confirmed topology.
+
+**Status file:** `.ai/phases/01-discover-decide/status.json`
+
+---
+
+### Phase 02 — Govern & Plan
+
+Establish governance artifacts: confirm or author ADRs in `docs/architecture/adr/`,
+confirm model-routing policy at `.ai/policies/model-routing.json`, decide which
+optional branches (cascade, skill-modernization) are enabled.
+
+**Status file:** `.ai/phases/02-govern-plan/status.json`
+
+---
+
+### Phase 03 — Configure & Generate
+
+Emit the full v3 scaffold: traceability graph, workflow manifest, entry files
+(AGENTS.md, CLAUDE.md, GEMINI.md), Archgate rules, CI hooks, and all `.ai/`
+subdirectory artifacts. Existing files are never overwritten silently.
+
+**Status file:** `.ai/phases/03-configure-generate/status.json`
+
+---
+
+### Phase 04 — Validate & Handoff
+
+Run offline structural validation, emit the validation report, and write the
+initialization handoff document at `.ai/handoff/init-ai-repo-handoff.md`.
+
+**Status file:** `.ai/phases/04-validate-handoff/status.json`
+
+---
+
+## Optional Branches
+
+| Branch | Description | Default |
+|--------|-------------|---------|
+| `multi-repo-cascade` | Cascade inherited-asset propagation to managed sub-repos | disabled |
+| `skill-modernization` | Audit and modernize the skill catalog in `.ai/skills/` | disabled |

package/dist/claude-plugin/skills/ai-catapult-init/templates/dot-github/workflows/ci-prek.yml

@@ -0,0 +1,21 @@
+name: AI SDLC Pre-commit Checks
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  prek-check:
+    name: Pre-commit Hooks
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Run prek
+        uses: j178/prek-action@v2
+        with:
+          extra-args: '--all-files'

package/dist/claude-plugin/skills/ai-catapult-init/templates/dot-rules.ts

@@ -0,0 +1,178 @@
+// .rules.ts — Archgate domain rules
+// Each rule: name, severity ("error" | "warn" | "info"), match pattern, and example.
+// This file is validated by scripts/validate-rules.sh (structural check only).
+// Semantic enforcement is an agent behavior at PR review time.
+// Generated by: ai-catapult-init
+
+export interface Rule {
+  name: string;
+  severity: "error" | "warn" | "info";
+  match: string;
+  violation?: string;
+  correction?: string;
+}
+
+// ─── backend ────────────────────────────────────────────────────────────────
+
+export const backend: Rule[] = [
+  {
+    name: "api-versioning",
+    severity: "error",
+    match: "All public REST endpoints must include a version prefix (/v1/, /v2/, …).",
+    violation: "POST /users/create",
+    correction: "POST /v1/users",
+  },
+  {
+    name: "error-shape",
+    severity: "error",
+    match: "Error responses must use { error: { code, message, details? } } shape.",
+    violation: 'res.status(400).json({ msg: "bad input" })',
+    correction: 'res.status(400).json({ error: { code: "INVALID_INPUT", message: "…" } })',
+  },
+  {
+    name: "no-sql-injection-patterns",
+    severity: "error",
+    match: "String interpolation must not be used to build SQL queries.",
+    violation: '`SELECT * FROM users WHERE id = ${req.params.id}`',
+    correction: "db.query('SELECT * FROM users WHERE id = $1', [req.params.id])",
+  },
+  {
+    name: "middleware-order",
+    severity: "warn",
+    match: "Auth middleware must be registered before route handlers.",
+    violation: "router.get('/admin', handler, authMiddleware)",
+    correction: "router.get('/admin', authMiddleware, handler)",
+  },
+];
+
+// ─── frontend ────────────────────────────────────────────────────────────────
+
+export const frontend: Rule[] = [
+  {
+    name: "component-naming",
+    severity: "error",
+    match: "React components must use PascalCase filenames and exports.",
+    violation: "export function userCard() { … }  // file: userCard.tsx",
+    correction: "export function UserCard() { … }  // file: UserCard.tsx",
+  },
+  {
+    name: "props-interface",
+    severity: "error",
+    match: "Component props must be defined as a named TypeScript interface, not inline.",
+    violation: "function Button({ label }: { label: string }) { … }",
+    correction: "interface ButtonProps { label: string }\nfunction Button({ label }: ButtonProps) { … }",
+  },
+  {
+    name: "hook-patterns",
+    severity: "warn",
+    match: "Custom hooks must start with 'use' and return a typed object, not a tuple.",
+    violation: "function getUser() { … }  // not a hook",
+    correction: "function useUser(): { user: User; loading: boolean } { … }",
+  },
+  {
+    name: "css-methodology",
+    severity: "info",
+    match: "Style declarations must use the project's CSS methodology. Inline styles are prohibited except for dynamic values.",
+    violation: '<div style={{ color: "red" }}>',
+    correction: '<div className="text-red-500">  // or CSS module equivalent',
+  },
+];
+
+// ─── data ────────────────────────────────────────────────────────────────────
+
+export const data: Rule[] = [
+  {
+    name: "migration-naming",
+    severity: "error",
+    match: "Database migration files must follow the pattern YYYYMMDDHHMMSS_<slug>.sql.",
+    violation: "add_users_table.sql",
+    correction: "20260101120000_add_users_table.sql",
+  },
+  {
+    name: "query-batching",
+    severity: "warn",
+    match: "ORM queries inside loops are prohibited. Use batch/bulk methods or DataLoader.",
+    violation: "for (const id of ids) { await User.findOne(id); }",
+    correction: "await User.findAll({ where: { id: ids } });",
+  },
+  {
+    name: "cache-invalidation",
+    severity: "warn",
+    match: "Cache entries must be invalidated in the same transaction/service that mutates the source data.",
+    violation: "updateUser(id, data); // cache cleared in a separate cron",
+    correction: "await Promise.all([updateUser(id, data), cache.del(`user:${id}`)])",
+  },
+];
+
+// ─── architecture ────────────────────────────────────────────────────────────
+
+export const architecture: Rule[] = [
+  {
+    name: "layer-boundaries",
+    severity: "error",
+    match: "Route handlers must not import from the data layer directly. All data access goes through a service layer.",
+    violation: "import { db } from '../db' // inside routes/users.ts",
+    correction: "import { UserService } from '../services/UserService'",
+  },
+  {
+    name: "dependency-direction",
+    severity: "error",
+    match: "Dependencies must only flow inward (domain ← application ← infrastructure).",
+    violation: "import { User } from '../../domain/User' // inside infrastructure/",
+    correction: "Depend on the port interface, not the domain entity directly.",
+  },
+  {
+    name: "module-exports",
+    severity: "warn",
+    match: "Each module directory must have an index.ts that re-exports only its public surface.",
+    violation: "import { helper } from '../auth/internal/helper'",
+    correction: "import { helper } from '../auth'  // via index.ts barrel",
+  },
+  {
+    name: "no-circular-dependencies",
+    severity: "error",
+    match: "Circular imports between modules are prohibited.",
+    violation: "// moduleA imports moduleB, moduleB imports moduleA",
+    correction: "Extract shared logic into a third module that neither A nor B imports.",
+  },
+];
+
+// ─── general ─────────────────────────────────────────────────────────────────
+
+export const general: Rule[] = [
+  {
+    name: "file-naming",
+    severity: "warn",
+    match: "Source files must use kebab-case. Test files must end in .test.ts or .spec.ts.",
+    violation: "UserService.ts, userservice.spec.ts",
+    correction: "user-service.ts, user-service.spec.ts",
+  },
+  {
+    name: "function-length",
+    severity: "warn",
+    match: "Functions must not exceed 40 lines. Extract logical sections into named helpers.",
+    violation: "// 80-line parseAndValidateAndSaveUser function",
+    correction: "parseUser(), validateUser(), saveUser() — each ≤ 40 lines",
+  },
+  {
+    name: "test-structure",
+    severity: "error",
+    match: "Tests must follow the Arrange-Act-Assert pattern with one assertion group per test.",
+    violation: "it('works', () => { /* 20 lines of mixed setup and assertions */ })",
+    correction: "it('returns 404 when user not found', () => { /* Arrange / Act / Assert */ })",
+  },
+  {
+    name: "import-ordering",
+    severity: "info",
+    match: "Imports must be ordered: Node built-ins → external packages → internal modules. Groups separated by a blank line.",
+    violation: "import { UserService } from './services'\nimport path from 'path'\nimport express from 'express'",
+    correction: "import path from 'path'\n\nimport express from 'express'\n\nimport { UserService } from './services'",
+  },
+  {
+    name: "comment-policy",
+    severity: "info",
+    match: "Comments must explain WHY, not WHAT. Do not comment code that is self-explanatory.",
+    violation: "// increment counter\ncounter++;",
+    correction: "// Retry budget: max 3 attempts before circuit-breaker trips\ncounter++;",
+  },
+];

package/dist/claude-plugin/skills/ai-catapult-init/templates/prek.toml

@@ -0,0 +1,13 @@
+# prek configuration — pre-commit hook manager (Rust-based, github.com/j178/prek)
+# Schema mirrors `.pre-commit-config.yaml` (top-level `repos` field).
+
+[[repos]]
+repo = "local"
+
+[[repos.hooks]]
+id = "validate-rules"
+name = "Validate Archgate rules structure"
+entry = "bash scripts/validate-rules.sh"
+language = "system"
+files = '\.rules\.ts$'
+pass_filenames = false

package/dist/codex-plugin/.codex-plugin/plugin.json

@@ -0,0 +1,11 @@
+{
+  "name": "ai-catapult",
+  "version": "0.1.0",
+  "description": "CLI + Claude Code and Codex plugins for init-ai-repo v3 AI-SDLC governance scaffolding",
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "ai-catapult",
+    "shortDescription": "Scaffold init-ai-repo v3 AI-SDLC governance structure in any repo.",
+    "category": "Developer Tools"
+  }
+}