@ryuenn3123/agentic-senior-core 5.8.13 → 5.8.14

package/.agents/plugins/agentic-senior-core/hooks/hooks.json

@@ -0,0 +1,74 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "startup|resume|clear|compact",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/session-start.js\"; exit 0",
+            "commandWindows": "if (Get-Command node -ErrorAction SilentlyContinue) { node \"$env:CLAUDE_PLUGIN_ROOT\\hooks\\session-start.js\" }",
+            "timeout": 5,
+            "statusMessage": "Loading ASC rules..."
+          }
+        ]
+      }
+    ],
+    "SubagentStart": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/subagent-start.js\"; exit 0",
+            "commandWindows": "if (Get-Command node -ErrorAction SilentlyContinue) { node \"$env:CLAUDE_PLUGIN_ROOT\\hooks\\subagent-start.js\" }",
+            "timeout": 5,
+            "statusMessage": "Loading ASC rules..."
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "Edit|Write",
+        "hooks": [
+          {
+            "type": "command",
+            "if": "Edit(**/package.json)",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/pre-tool-dependency-gate.js\"; exit 0",
+            "commandWindows": "if (Get-Command node -ErrorAction SilentlyContinue) { node \"$env:CLAUDE_PLUGIN_ROOT\\hooks\\pre-tool-dependency-gate.js\" }",
+            "timeout": 5,
+            "statusMessage": "ASC Pre-tool dependency check (Edit)..."
+          },
+          {
+            "type": "command",
+            "if": "Write(**/package.json)",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/pre-tool-dependency-gate.js\"; exit 0",
+            "commandWindows": "if (Get-Command node -ErrorAction SilentlyContinue) { node \"$env:CLAUDE_PLUGIN_ROOT\\hooks\\pre-tool-dependency-gate.js\" }",
+            "timeout": 5,
+            "statusMessage": "ASC Pre-tool dependency check (Write)..."
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "Edit|Write",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/post-edit-enforce.js\"; exit 0",
+            "commandWindows": "if (Get-Command node -ErrorAction SilentlyContinue) { node \"$env:CLAUDE_PLUGIN_ROOT\\hooks\\post-edit-enforce.js\" }",
+            "timeout": 5,
+            "statusMessage": "ASC ladder & spec gate check..."
+          },
+          {
+            "type": "prompt",
+            "if": "Edit(**/package.json)",
+            "prompt": "A new dependency '$ARGUMENTS' was added to package.json. Does it duplicate Node.js standard library or platform features? If yes, return JSON: {\"hookSpecificOutput\": {\"hookEventName\": \"PostToolUse\", \"additionalContext\": \"[ASC Advisory] The newly added dependency appears to duplicate stdlib or platform features. Consider native alternatives.\"}}. If no, return {}.",
+            "timeout": 30
+          }
+        ]
+      }
+    ]
+  }
+}

package/.agents/plugins/agentic-senior-core/hooks/lib/known-duplicates.json

@@ -0,0 +1,32 @@
+{
+  "description": "Single source of truth for packages that duplicate standard library or native platform features.",
+  "duplicates": [
+    "lodash",
+    "lodash-es",
+    "underscore",
+    "moment",
+    "dayjs",
+    "uuid",
+    "nanoid",
+    "chalk",
+    "kleur",
+    "colorette",
+    "axios",
+    "got",
+    "node-fetch",
+    "superagent",
+    "mkdirp",
+    "rimraf",
+    "del",
+    "glob",
+    "globby",
+    "left-pad",
+    "pad-left",
+    "is-odd",
+    "is-even",
+    "is-number",
+    "is-string",
+    "path-exists",
+    "fs-extra"
+  ]
+}

package/.agents/plugins/agentic-senior-core/hooks/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/.agents/plugins/agentic-senior-core/hooks/path-util.cjs

@@ -0,0 +1,23 @@
+const crypto = require('crypto');
+const path = require('path');
+const os = require('os');
+
+/**
+ * Computes a stable path for the workflow gate file based on the project path.
+ * Normalizes the path (resolves absolute, lowercase, forward slashes, no trailing slash)
+ * to ensure identical hashes regardless of OS path separator or drive letter casing.
+ * Note: .toLowerCase() deliberately treats Linux/Mac paths case-insensitively, 
+ * accepting the negligible risk of collisions for the benefit of Windows stability.
+ * 
+ * @param {string} projectPath - The root path of the project.
+ * @returns {string} Absolute path to the global workflow gate JSON file.
+ */
+function getWorkflowGatePath(projectPath) {
+  const normalizedPath = path.resolve(projectPath).replace(/\\/g, '/').toLowerCase().replace(/\/$/, '');
+  const projectHash = crypto.createHash('sha256').update(normalizedPath).digest('hex').substring(0, 16);
+  return path.join(os.homedir(), '.config', 'agentic-senior-core', 'gates', `${projectHash}.json`);
+}
+
+module.exports = {
+  getWorkflowGatePath
+};

package/.agents/plugins/agentic-senior-core/hooks/post-edit-enforce.js

@@ -0,0 +1,234 @@
+#!/usr/bin/env node
+// Agentic Senior Core — PostToolUse enforcement hook
+// Fires after Edit/Write. Checks for ladder violations and injects a nudge.
+// Supports Claude Code, Codex CLI, and GitHub Copilot CLI.
+
+const fs = require('fs');
+const path = require('path');
+
+let STDLIB_DUPLICATES = new Set([
+  'lodash', 'lodash-es', 'underscore',
+  'moment', 'dayjs',
+  'uuid', 'nanoid',
+  'chalk', 'kleur', 'colorette',
+  'axios', 'got', 'node-fetch', 'superagent',
+  'mkdirp', 'rimraf', 'del',
+  'glob', 'globby',
+  'left-pad', 'pad-left',
+  'is-odd', 'is-even', 'is-number', 'is-string',
+  'path-exists', 'fs-extra',
+]);
+
+try {
+  const knownPath = path.join(__dirname, 'lib', 'known-duplicates.json');
+  if (fs.existsSync(knownPath)) {
+    const raw = JSON.parse(fs.readFileSync(knownPath, 'utf8'));
+    if (Array.isArray(raw.duplicates)) {
+      STDLIB_DUPLICATES = new Set(raw.duplicates);
+    }
+  }
+} catch (_) {}
+
+const SOURCE_EXTENSIONS = new Set([
+  'js', 'ts', 'mjs', 'cjs', 'jsx', 'tsx',
+  'py', 'rb', 'go', 'rs', 'java', 'kt', 'swift', 'cs',
+]);
+
+const LOC_DELTA_THRESHOLD = 30;
+const NEW_FILE_LINE_THRESHOLD = 50;
+
+let inputBuffer = '';
+process.stdin.setEncoding('utf8');
+process.stdin.on('data', function (chunk) { inputBuffer += chunk; });
+process.stdin.on('end', function () {
+  try {
+    const data = JSON.parse(inputBuffer);
+    const toolName = data.tool_name || '';
+    const toolInput = data.tool_input || {};
+    const filePath = toolInput.file_path || '';
+    const findings = [];
+
+    if (filePath.endsWith('package.json')) {
+      checkDependencyAddition(toolName, toolInput, findings);
+    }
+
+    const ext = path.extname(filePath).slice(1);
+    if (SOURCE_EXTENSIONS.has(ext)) {
+      if (toolName === 'Edit') {
+        checkLocDelta(toolInput, filePath, findings);
+      } else if (toolName === 'Write') {
+        checkNewFileSize(toolInput, filePath, findings);
+      }
+    }
+
+    checkLivingDocNudge(filePath, findings);
+
+    if (ext !== 'md') {
+      checkWorkflowGate(toolName, filePath, ext, findings);
+    }
+
+    if (findings.length === 0) return;
+
+    const nudge = '[ASC enforcement] ' + findings.join(' ') + ' Review the decision ladder before continuing.';
+    emit(nudge);
+  } catch (_) {
+    // Silent fail — enforcement must not break the session
+  }
+});
+
+function checkDependencyAddition(toolName, toolInput, findings) {
+  var target = toolName === 'Edit' ? (toolInput.new_string || '') : (toolInput.content || '');
+  var baseline = toolName === 'Edit' ? (toolInput.old_string || '') : '';
+
+  var depPattern = /"([^"]+)"\s*:\s*"[~^>=<*]?\d/g;
+  var newDeps = extractDeps(target, depPattern);
+  var oldDeps = extractDeps(baseline, depPattern);
+
+  var added = newDeps.filter(function (d) { return oldDeps.indexOf(d) === -1; });
+  if (added.length === 0) return;
+
+  var stdlibDupes = added.filter(function (d) { return STDLIB_DUPLICATES.has(d); });
+  if (stdlibDupes.length > 0) {
+    findings.push(
+      'Dependency ' + stdlibDupes.join(', ') + ' may duplicate stdlib/platform features. '
+      + 'Ladder step 3: does the standard library cover this?'
+    );
+  } else {
+    findings.push(
+      'New dependency added: ' + added.join(', ') + '. '
+      + 'Ladder step 3-4: stdlib or already-installed alternative?'
+    );
+  }
+}
+
+function extractDeps(text, pattern) {
+  var matches = [];
+  var match;
+  while ((match = pattern.exec(text)) !== null) {
+    matches.push(match[1]);
+  }
+  return matches;
+}
+
+function checkLocDelta(toolInput, filePath, findings) {
+  var newLines = (toolInput.new_string || '').split('\n').length;
+  var oldLines = (toolInput.old_string || '').split('\n').length;
+  var delta = newLines - oldLines;
+  if (delta > LOC_DELTA_THRESHOLD) {
+    findings.push(
+      'Edit added ' + delta + ' net lines to ' + path.basename(filePath) + '. '
+      + 'Ladder step 5: can this be one straightforward function?'
+    );
+  }
+}
+
+function checkNewFileSize(toolInput, filePath, findings) {
+  var lines = (toolInput.content || '').split('\n').length;
+  if (lines > NEW_FILE_LINE_THRESHOLD) {
+    findings.push(
+      'New file ' + path.basename(filePath) + ' created with ' + lines + ' lines. '
+      + 'Ladder step 1-2: does this need to be built? Does the codebase already have this?'
+    );
+  }
+}
+
+function checkLivingDocNudge(filePath, findings) {
+  var lower = filePath.toLowerCase();
+  if (lower.includes('schema') || lower.includes('migration') || lower.includes('model') || lower.includes('prisma')) {
+    findings.push(
+      '[ASC Living Doc] Data contract/model modified in ' + path.basename(filePath) + '. '
+      + 'Ensure docs/Schema.md and docs/Architecture.md are kept in sync to prevent spec drift.'
+    );
+  }
+}
+
+function checkWorkflowGate(toolName, filePath, ext, findings) {
+  try {
+    var pathUtil = require('./path-util.cjs');
+    var gatePath = pathUtil.getWorkflowGatePath(process.cwd());
+    if (!fs.existsSync(gatePath)) return;
+    
+    var gateStr = fs.readFileSync(gatePath, 'utf8');
+    var gate = JSON.parse(gateStr);
+    
+    if (gate.updatedAt) {
+      var ageHours = (Date.now() - new Date(gate.updatedAt).getTime()) / (1000 * 60 * 60);
+      if (ageHours > 4) {
+        fs.unlinkSync(gatePath);
+        findings.push('Cleared stale workflow gate (' + gate.workflow + ').');
+        return;
+      }
+    }
+    
+    if (gate.phase === 'research' || gate.phase === 'plan') {
+      findings.push(
+        'Workflow gate bypass: ' + gate.workflow + ' is in ' + gate.phase + ' phase but source code was edited. '
+        + 'Stop and wait for phase approval. If you must proceed, log this bypass to the debt ledger.'
+      );
+    } else if (gate.phase === 'implement') {
+      validateDocSpecs(gate.workflow, findings);
+    }
+  } catch (_) {
+    // Silent fail
+  }
+}
+
+function validateDocSpecs(workflow, findings) {
+  try {
+    var cwd = process.cwd();
+    var docsDir = path.join(cwd, 'docs');
+    
+    // Anti-typo check for common doc typos (e.g. Architectyre.md)
+    var searchDirs = [cwd, docsDir];
+    var typoFound = false;
+    searchDirs.forEach(function (d) {
+      if (fs.existsSync(d)) {
+        var files = fs.readdirSync(d);
+        files.forEach(function (f) {
+          if (f.toLowerCase() !== f && /architect[y|u]re/i.test(f) && f !== 'Architecture.md') {
+            findings.push('[ASC Spec Typo Alert] Typo detected in doc filename "' + f + '". Rename to "Architecture.md".');
+            typoFound = true;
+          }
+        });
+      }
+    });
+
+    if (workflow === 'asc-new-project') {
+      var requiredDocs = ['PRD.md', 'Architecture.md', 'Design.md', 'Schema.md'];
+      var missing = requiredDocs.filter(function (doc) {
+        return !fs.existsSync(path.join(cwd, doc)) && !fs.existsSync(path.join(docsDir, doc));
+      });
+      if (missing.length > 0) {
+        findings.push(
+          '[ASC 5-Doc SDD Gate] Greenfield project missing spec document(s): ' + missing.join(', ') + '. '
+          + 'Create them in docs/ to align requirements before continuing implementation.'
+        );
+      }
+    } else if (workflow === 'asc-add-feature') {
+      var hasPrd = fs.existsSync(path.join(cwd, 'PRD.md')) || fs.existsSync(path.join(docsDir, 'PRD.md'));
+      if (!hasPrd) {
+        findings.push(
+          '[ASC SDD Gate] Feature addition missing docs/PRD.md. Define goals and non-goals before coding.'
+        );
+      }
+    }
+  } catch (_) {}
+}
+
+function emit(nudge) {
+  try {
+    var isCopilot = Boolean(process.env.COPILOT_PLUGIN_DATA);
+    var output = {
+      hookSpecificOutput: {
+        hookEventName: 'PostToolUse',
+        additionalContext: nudge,
+      },
+    };
+    if (isCopilot) {
+      output = { additionalContext: nudge };
+    }
+    process.stdout.write(JSON.stringify(output));
+  } catch (_) {
+    // EPIPE — silent
+  }
+}

package/.agents/plugins/agentic-senior-core/hooks/pre-tool-dependency-gate.js

@@ -0,0 +1,108 @@
+#!/usr/bin/env node
+// Agentic Senior Core — PreToolUse dependency gate hook
+// Hard-blocks edits/writes to package.json if new dependencies duplicate stdlib/platform features.
+// Supports Claude Code hookSpecificOutput permissionDecision deny response format.
+
+const fs = require('fs');
+const path = require('path');
+
+let knownDuplicates = new Set();
+try {
+  const knownPath = path.join(__dirname, 'lib', 'known-duplicates.json');
+  if (fs.existsSync(knownPath)) {
+    const raw = JSON.parse(fs.readFileSync(knownPath, 'utf8'));
+    if (Array.isArray(raw.duplicates)) {
+      knownDuplicates = new Set(raw.duplicates);
+    }
+  }
+} catch (_) {
+  // Fallback set if JSON loading fails
+  knownDuplicates = new Set(['lodash', 'underscore', 'moment', 'dayjs', 'uuid', 'axios', 'rimraf']);
+}
+
+let inputBuffer = '';
+process.stdin.setEncoding('utf8');
+process.stdin.on('data', function (chunk) { inputBuffer += chunk; });
+process.stdin.on('end', function () {
+  try {
+    const data = JSON.parse(inputBuffer);
+    const toolName = data.tool_name || '';
+    const toolInput = data.tool_input || {};
+    const filePath = toolInput.file_path || '';
+
+    if (!filePath.endsWith('package.json')) {
+      process.exit(0);
+      return;
+    }
+
+    const target = toolName === 'Edit' ? (toolInput.new_string || '') : (toolInput.content || '');
+    const baseline = toolName === 'Edit' ? (toolInput.old_string || '') : '';
+
+    const depPattern = /"([^"]+)"\s*:\s*"[~^>=<*]?\d/g;
+    const newDeps = extractDeps(target, depPattern);
+    const oldDeps = extractDeps(baseline, depPattern);
+
+    const added = newDeps.filter(function (d) { return oldDeps.indexOf(d) === -1; });
+    if (added.length === 0) {
+      process.exit(0);
+      return;
+    }
+
+    const allowlist = loadAllowlist();
+    const forbidden = added.filter(function (dep) {
+      return knownDuplicates.has(dep) && !allowlist.has(dep);
+    });
+
+    if (forbidden.length > 0) {
+      const reason = '[ASC Hard-Block] Dependency ' + forbidden.map(function(d){ return "'" + d + "'"; }).join(', ') 
+        + ' duplicates standard library or native platform features. '
+        + 'Ladder step 3: use stdlib/native features instead, or add to .asc/dependency-allowlist.json to override.';
+      
+      const output = {
+        hookSpecificOutput: {
+          hookEventName: 'PreToolUse',
+          permissionDecision: 'deny',
+          permissionDecisionReason: reason
+        }
+      };
+      process.stdout.write(JSON.stringify(output));
+      process.exit(0);
+      return;
+    }
+  } catch (_) {
+    // Silent fail to ensure session stability
+  }
+  process.exit(0);
+});
+
+function extractDeps(text, pattern) {
+  const matches = [];
+  let match;
+  while ((match = pattern.exec(text)) !== null) {
+    matches.push(match[1]);
+  }
+  return matches;
+}
+
+function loadAllowlist() {
+  const allowed = new Set();
+  const candidates = [
+    path.join(process.cwd(), '.asc', 'dependency-allowlist.json'),
+    path.join(process.cwd(), '.agents', 'dependency-allowlist.json')
+  ];
+
+  for (let i = 0; i < candidates.length; i++) {
+    try {
+      if (fs.existsSync(candidates[i])) {
+        const content = JSON.parse(fs.readFileSync(candidates[i], 'utf8'));
+        const deps = content.allowedDependencies || content.allowed || {};
+        if (Array.isArray(deps)) {
+          deps.forEach(function (d) { allowed.add(d); });
+        } else if (typeof deps === 'object') {
+          Object.keys(deps).forEach(function (d) { allowed.add(d); });
+        }
+      }
+    } catch (_) {}
+  }
+  return allowed;
+}

package/.agents/plugins/agentic-senior-core/hooks/session-start.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+// Agentic Senior Core — SessionStart hook
+// Injects universal coding rules on every session start.
+// Supports Claude Code, Codex CLI, and GitHub Copilot CLI.
+
+const fs = require('fs');
+const path = require('path');
+
+const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || path.resolve(__dirname, '..');
+const isCopilot = Boolean(process.env.COPILOT_PLUGIN_DATA);
+const isCodex = !isCopilot && Boolean(process.env.PLUGIN_DATA);
+
+let content;
+try {
+  content = fs.readFileSync(path.join(pluginRoot, 'AGENTS.md'), 'utf8');
+} catch (e) {
+  process.exit(0);
+}
+
+try {
+  if (isCopilot) {
+    process.stdout.write(JSON.stringify({ additionalContext: content }));
+  } else if (isCodex) {
+    process.stdout.write(JSON.stringify({
+      systemMessage: 'ASC:ACTIVE',
+      hookSpecificOutput: {
+        hookEventName: 'SessionStart',
+        additionalContext: content,
+      },
+    }));
+  } else {
+    process.stdout.write(content);
+  }
+} catch (e) {
+  // Silent fail — stdout closed/EPIPE at hook exit must not surface as a hook failure
+}

package/.agents/plugins/agentic-senior-core/hooks/subagent-start.js

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+// Agentic Senior Core — SubagentStart hook
+// SessionStart context is parent-thread only and never reaches subagents.
+// This injects the same ruleset into each subagent.
+
+const fs = require('fs');
+const path = require('path');
+
+const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || path.resolve(__dirname, '..');
+const isCopilot = Boolean(process.env.COPILOT_PLUGIN_DATA);
+const isCodex = !isCopilot && Boolean(process.env.PLUGIN_DATA);
+
+let content;
+try {
+  content = fs.readFileSync(path.join(pluginRoot, 'AGENTS.md'), 'utf8');
+} catch (e) {
+  process.exit(0);
+}
+
+try {
+  if (isCodex) {
+    process.stdout.write(JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: 'SubagentStart',
+        additionalContext: content,
+      },
+    }));
+  } else {
+    process.stdout.write(JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: 'SubagentStart',
+        additionalContext: content,
+      },
+    }));
+  }
+} catch (e) {
+  // Silent fail
+}

package/.agents/plugins/agentic-senior-core/skills/asc-add-feature/SKILL.md

@@ -10,11 +10,11 @@ Structured brownfield workflow. Adapted from QRSPI to prevent context rot and en
 
 Grounded in: RPI (Dex Horthy, HumanLayer 2025) with corrections from QRSPI 8-stage evolution (Coding Agents Conference, March 2026). Plan-reading illusion fix and instruction budget constraint applied. Stages 2/5/7 adapted; stages 1/3/4/6/8 skipped as too heavyweight for individual-developer workflow.
 
-## Gate Mechanism
+## Gate Mechanism & Scaled Spec Requirement
 
 This workflow nudges the agent to stop at each phase boundary, same enforcement tier as the existing decision ladder — not a hard block. Bypasses are logged to the debt ledger.
 
-**Known limitation:** Bypass-to-debt-ledger logging is self-reported by the agent, not enforced by the hook. The PostToolUse hook has no MCP access — it nudges the agent to log, but cannot write the debt entry itself.
+For brownfield feature development (`asc-add-feature`), Phase 2 requires a lightweight **PRD.md** (or feature spec in `docs/PRD.md`) defining product intent, goals, and non-goals to avoid scope creep and context rot.
 
 To track phase, write to `workflow-gate.json` via the `state_write` MCP tool.
 Format:
@@ -37,11 +37,12 @@ Format:
 ## Phase 2: Plan
 
 1. On approval of Phase 1, update `workflow-gate.json` phase to `plan`.
-2. Create a numbered, step-by-step implementation plan with specific files, functions, and line references.
-3. Include a "Don't Build" list from the research phase.
-4. **Callout: Plan-Reading Illusion.** Ask the user to explicitly verify the plan against the codebase, not just skim it.
-5. Output the plan.
-6. **STOP and wait for user approval.** Do not implement.
+2. Ensure `docs/PRD.md` or feature brief exists.
+3. Create a numbered, step-by-step implementation plan with specific files, functions, and line references.
+4. Include a "Don't Build" list from the research phase.
+5. **Callout: Plan-Reading Illusion.** Ask the user to explicitly verify the plan against the codebase, not just skim it.
+6. Output the plan.
+7. **STOP and wait for user approval.** Do not implement.
 
 ## Phase 3: Implement
 

package/.agents/plugins/agentic-senior-core/skills/asc-new-project/SKILL.md

@@ -8,13 +8,19 @@ description: >
 
 Structured greenfield workflow. Prevents building before alignment on what to build.
 
-Grounded in: Spec-Driven Development (SDD) with scaffolding-spec approach. Specs guide implementation, then the code becomes the source of truth — specs are not maintained as living documents unless the team explicitly opts in.
+Grounded in: Spec-Driven Development (SDD) with scaffolding-spec approach. Core spec documents guide greenfield implementation (`PRD.md`, `Architecture.md`, `Design.md`, `Schema.md`). Once implemented, the code becomes the primary ground truth, while docs are updated on structural changes.
 
-## Gate Mechanism
+## Gate Mechanism & 4 Spec Document Requirement
 
 This workflow nudges the agent to stop at each phase boundary, same enforcement tier as the existing decision ladder — not a hard block. Bypasses are logged to the debt ledger.
 
-**Known limitation:** Bypass-to-debt-ledger logging is self-reported by the agent, not enforced by the hook. The PostToolUse hook has no MCP access — it nudges the agent to log, but cannot write the debt entry itself.
+For greenfield projects (`asc-new-project`), Phase 2 requires creating the **4 Core SDD Documents** in `docs/` or project root:
+1. `PRD.md` — Product intent, goals, non-goals, and user problems.
+2. `Architecture.md` — System structure, module boundaries, and tech stack choices.
+3. `Design.md` — UX / UI layout, component hierarchy, interaction rules.
+4. `Schema.md` — Data contracts, database entities, API endpoints.
+
+*Note on Rules:* Coding conventions and project constraints are automatically loaded from global plugin rules (`agentic-senior-core.md`) or workspace `AGENTS.md`. No duplicate `docs/Rules.md` file is required.
 
 To track phase, write to `workflow-gate.json` via the `state_write` MCP tool.
 Format:
@@ -37,16 +43,17 @@ Format:
 ## Phase 2: Spec (No Implementation Code)
 
 1. On approval of Phase 1, update `workflow-gate.json` phase to `plan`.
-2. Write per-feature specs with acceptance criteria and edge cases.
-3. Specs are scaffolding — they guide the build, then the code is the source of truth.
+2. Generate the 4 core SDD documents from templates (`docs/PRD.md`, `docs/Architecture.md`, `docs/Design.md`, `docs/Schema.md`).
+3. Verify exact file naming — check for typos like `Architectyre.md`.
 4. Output specs for review.
-5. **STOP and wait for user approval.** Do not implement.
+5. **STOP and wait for user approval.** Do not implement code.
 
 ## Phase 3: Implement
 
 1. On approval of Phase 2, update `workflow-gate.json` phase to `implement`.
-2. Build against the approved specs. Apply the ASC decision ladder on every file.
-3. Run the decision ladder: does this need to exist? Does stdlib cover it? One function or full module?
+2. Run Anti Context-Blindness check: verify entities/tables mentioned in `Schema.md` or `Architecture.md` align with proposed code targets.
+3. Build against the approved specs. Apply the ASC decision ladder on every file.
+4. Run the decision ladder: does this need to exist? Does stdlib cover it? One function or full module?
 
 ## Phase 4: Validate
 

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-senior-core",
-  "version": "5.8.13",
+  "version": "5.8.14",
   "displayName": "Agentic Senior Core",
   "description": "Universal AI coding rules. Write code like a staff engineer.",
   "author": {

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-senior-core",
-  "version": "5.8.13",
+  "version": "5.8.14",
   "description": "Universal AI coding rules. Write code like a staff engineer.",
   "author": {
     "name": "fatidaprilian",

package/.devin-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-senior-core",
-  "version": "5.8.13",
+  "version": "5.8.14",
   "description": "Universal AI coding rules. Write code like a staff engineer.",
   "author": {
     "name": "fatidaprilian",

package/.github/plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agentic-senior-core",
   "description": "Universal AI coding rules. Write code like a staff engineer.",
-  "version": "5.8.13",
+  "version": "5.8.14",
   "author": {
     "name": "fatidaprilian",
     "url": "https://github.com/fatidaprilian"

package/README.md

@@ -13,12 +13,19 @@
 
 </div>
 
-## How Skills Work (Plugins)
+## How Skills & Hooks Work (Multi-Tier Architecture)
 
-The plugin comes bundled with specialized skills (like security audits, refactoring, etc.).
+Agentic Senior Core operates on a two-tier architecture:
 
-- **Automatic Triggering**: Agents attempt to detect and load these skills if your prompt matches the skill's description (e.g., asking "perform a security audit" will likely load the `asc-audit` skill). However, because AI relies on semantic probability, this is **never 100% guaranteed**.
-- **Manual Triggering (Highly Recommended)**: For maximum reliability and zero guesswork, explicitly call the skill using pseudo-commands like `/asc-refactor` or `/asc-new-project`. This forces the agent to enter the exact workflow immediately.
+1. **Instructional Layer (Universal — Works in 23+ AI Tools)**:
+   - **Rules (`AGENTS.md` / `agentic-senior-core.md`) & Skills (`SKILL.md`)** are cross-compatible across **Google Antigravity IDE, Claude Code, Cursor, Windsurf, Copilot, Codex, Kiro, Roo, OpenCode, Zed, Aider, etc.**.
+   - **Automatic Skill Triggering**: Agents attempt to detect and load skills if your prompt matches the skill's description (e.g., asking "perform a security audit" loads `asc-audit`).
+   - **Manual Skill Triggering (Highly Recommended)**: Explicitly call skills using commands like `/asc-refactor` or `/asc-new-project` for guaranteed execution.
+
+2. **Active Enforcement Layer (Hooks — Host-Specific Hard Guardrails)**:
+   - **Hard-Block Guardrails**: For tools supporting active hook execution engines (Claude Code, GitHub Copilot CLI, Google Antigravity IDE, Cursor), ASC automatically intercepts tool calls:
+     - **PreToolUse Hard Block**: Immediately rejects edits adding stdlib-duplicating dependencies (e.g., `lodash`, `moment`, `uuid`) before execution (`permissionDecision: "deny"`). Escape hatch available via `.asc/dependency-allowlist.json`.
+     - **PostToolUse Advisory**: Soft nudges for LOC deltas, spec drift, and workflow gate bypasses.
 
 ---
 

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-senior-core",
-  "version": "5.8.13",
+  "version": "5.8.14",
   "description": "Universal AI coding rules. Write code like a staff engineer.",
   "author": "fatidaprilian",
   "license": "MIT",

package/hooks/hooks.json

@@ -27,6 +27,29 @@
         ]
       }
     ],
+    "PreToolUse": [
+      {
+        "matcher": "Edit|Write",
+        "hooks": [
+          {
+            "type": "command",
+            "if": "Edit(**/package.json)",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/pre-tool-dependency-gate.js\"; exit 0",
+            "commandWindows": "if (Get-Command node -ErrorAction SilentlyContinue) { node \"$env:CLAUDE_PLUGIN_ROOT\\hooks\\pre-tool-dependency-gate.js\" }",
+            "timeout": 5,
+            "statusMessage": "ASC Pre-tool dependency check (Edit)..."
+          },
+          {
+            "type": "command",
+            "if": "Write(**/package.json)",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/pre-tool-dependency-gate.js\"; exit 0",
+            "commandWindows": "if (Get-Command node -ErrorAction SilentlyContinue) { node \"$env:CLAUDE_PLUGIN_ROOT\\hooks\\pre-tool-dependency-gate.js\" }",
+            "timeout": 5,
+            "statusMessage": "ASC Pre-tool dependency check (Write)..."
+          }
+        ]
+      }
+    ],
     "PostToolUse": [
       {
         "matcher": "Edit|Write",
@@ -36,7 +59,13 @@
             "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/post-edit-enforce.js\"; exit 0",
             "commandWindows": "if (Get-Command node -ErrorAction SilentlyContinue) { node \"$env:CLAUDE_PLUGIN_ROOT\\hooks\\post-edit-enforce.js\" }",
             "timeout": 5,
-            "statusMessage": "ASC ladder check..."
+            "statusMessage": "ASC ladder & spec gate check..."
+          },
+          {
+            "type": "prompt",
+            "if": "Edit(**/package.json)",
+            "prompt": "A new dependency '$ARGUMENTS' was added to package.json. Does it duplicate Node.js standard library or platform features? If yes, return JSON: {\"hookSpecificOutput\": {\"hookEventName\": \"PostToolUse\", \"additionalContext\": \"[ASC Advisory] The newly added dependency appears to duplicate stdlib or platform features. Consider native alternatives.\"}}. If no, return {}.",
+            "timeout": 30
           }
         ]
       }

package/hooks/lib/known-duplicates.json

@@ -0,0 +1,32 @@
+{
+  "description": "Single source of truth for packages that duplicate standard library or native platform features.",
+  "duplicates": [
+    "lodash",
+    "lodash-es",
+    "underscore",
+    "moment",
+    "dayjs",
+    "uuid",
+    "nanoid",
+    "chalk",
+    "kleur",
+    "colorette",
+    "axios",
+    "got",
+    "node-fetch",
+    "superagent",
+    "mkdirp",
+    "rimraf",
+    "del",
+    "glob",
+    "globby",
+    "left-pad",
+    "pad-left",
+    "is-odd",
+    "is-even",
+    "is-number",
+    "is-string",
+    "path-exists",
+    "fs-extra"
+  ]
+}

package/hooks/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/hooks/post-edit-enforce.js

@@ -6,7 +6,7 @@
 const fs = require('fs');
 const path = require('path');
 
-const STDLIB_DUPLICATES = new Set([
+let STDLIB_DUPLICATES = new Set([
   'lodash', 'lodash-es', 'underscore',
   'moment', 'dayjs',
   'uuid', 'nanoid',
@@ -19,6 +19,16 @@ const STDLIB_DUPLICATES = new Set([
   'path-exists', 'fs-extra',
 ]);
 
+try {
+  const knownPath = path.join(__dirname, 'lib', 'known-duplicates.json');
+  if (fs.existsSync(knownPath)) {
+    const raw = JSON.parse(fs.readFileSync(knownPath, 'utf8'));
+    if (Array.isArray(raw.duplicates)) {
+      STDLIB_DUPLICATES = new Set(raw.duplicates);
+    }
+  }
+} catch (_) {}
+
 const SOURCE_EXTENSIONS = new Set([
   'js', 'ts', 'mjs', 'cjs', 'jsx', 'tsx',
   'py', 'rb', 'go', 'rs', 'java', 'kt', 'swift', 'cs',
@@ -38,7 +48,7 @@ process.stdin.on('end', function () {
     const filePath = toolInput.file_path || '';
     const findings = [];
 
-    if (filePath.endsWith('package.json') || filePath.endsWith('package.json5')) {
+    if (filePath.endsWith('package.json')) {
       checkDependencyAddition(toolName, toolInput, findings);
     }
 
@@ -51,6 +61,8 @@ process.stdin.on('end', function () {
       }
     }
 
+    checkLivingDocNudge(filePath, findings);
+
     if (ext !== 'md') {
       checkWorkflowGate(toolName, filePath, ext, findings);
     }
@@ -120,6 +132,16 @@ function checkNewFileSize(toolInput, filePath, findings) {
   }
 }
 
+function checkLivingDocNudge(filePath, findings) {
+  var lower = filePath.toLowerCase();
+  if (lower.includes('schema') || lower.includes('migration') || lower.includes('model') || lower.includes('prisma')) {
+    findings.push(
+      '[ASC Living Doc] Data contract/model modified in ' + path.basename(filePath) + '. '
+      + 'Ensure docs/Schema.md and docs/Architecture.md are kept in sync to prevent spec drift.'
+    );
+  }
+}
+
 function checkWorkflowGate(toolName, filePath, ext, findings) {
   try {
     var pathUtil = require('./path-util.cjs');
@@ -143,12 +165,56 @@ function checkWorkflowGate(toolName, filePath, ext, findings) {
         'Workflow gate bypass: ' + gate.workflow + ' is in ' + gate.phase + ' phase but source code was edited. '
         + 'Stop and wait for phase approval. If you must proceed, log this bypass to the debt ledger.'
       );
+    } else if (gate.phase === 'implement') {
+      validateDocSpecs(gate.workflow, findings);
     }
   } catch (_) {
     // Silent fail
   }
 }
 
+function validateDocSpecs(workflow, findings) {
+  try {
+    var cwd = process.cwd();
+    var docsDir = path.join(cwd, 'docs');
+    
+    // Anti-typo check for common doc typos (e.g. Architectyre.md)
+    var searchDirs = [cwd, docsDir];
+    var typoFound = false;
+    searchDirs.forEach(function (d) {
+      if (fs.existsSync(d)) {
+        var files = fs.readdirSync(d);
+        files.forEach(function (f) {
+          if (f.toLowerCase() !== f && /architect[y|u]re/i.test(f) && f !== 'Architecture.md') {
+            findings.push('[ASC Spec Typo Alert] Typo detected in doc filename "' + f + '". Rename to "Architecture.md".');
+            typoFound = true;
+          }
+        });
+      }
+    });
+
+    if (workflow === 'asc-new-project') {
+      var requiredDocs = ['PRD.md', 'Architecture.md', 'Design.md', 'Schema.md'];
+      var missing = requiredDocs.filter(function (doc) {
+        return !fs.existsSync(path.join(cwd, doc)) && !fs.existsSync(path.join(docsDir, doc));
+      });
+      if (missing.length > 0) {
+        findings.push(
+          '[ASC 5-Doc SDD Gate] Greenfield project missing spec document(s): ' + missing.join(', ') + '. '
+          + 'Create them in docs/ to align requirements before continuing implementation.'
+        );
+      }
+    } else if (workflow === 'asc-add-feature') {
+      var hasPrd = fs.existsSync(path.join(cwd, 'PRD.md')) || fs.existsSync(path.join(docsDir, 'PRD.md'));
+      if (!hasPrd) {
+        findings.push(
+          '[ASC SDD Gate] Feature addition missing docs/PRD.md. Define goals and non-goals before coding.'
+        );
+      }
+    }
+  } catch (_) {}
+}
+
 function emit(nudge) {
   try {
     var isCopilot = Boolean(process.env.COPILOT_PLUGIN_DATA);

package/hooks/pre-tool-dependency-gate.js

@@ -0,0 +1,108 @@
+#!/usr/bin/env node
+// Agentic Senior Core — PreToolUse dependency gate hook
+// Hard-blocks edits/writes to package.json if new dependencies duplicate stdlib/platform features.
+// Supports Claude Code hookSpecificOutput permissionDecision deny response format.
+
+const fs = require('fs');
+const path = require('path');
+
+let knownDuplicates = new Set();
+try {
+  const knownPath = path.join(__dirname, 'lib', 'known-duplicates.json');
+  if (fs.existsSync(knownPath)) {
+    const raw = JSON.parse(fs.readFileSync(knownPath, 'utf8'));
+    if (Array.isArray(raw.duplicates)) {
+      knownDuplicates = new Set(raw.duplicates);
+    }
+  }
+} catch (_) {
+  // Fallback set if JSON loading fails
+  knownDuplicates = new Set(['lodash', 'underscore', 'moment', 'dayjs', 'uuid', 'axios', 'rimraf']);
+}
+
+let inputBuffer = '';
+process.stdin.setEncoding('utf8');
+process.stdin.on('data', function (chunk) { inputBuffer += chunk; });
+process.stdin.on('end', function () {
+  try {
+    const data = JSON.parse(inputBuffer);
+    const toolName = data.tool_name || '';
+    const toolInput = data.tool_input || {};
+    const filePath = toolInput.file_path || '';
+
+    if (!filePath.endsWith('package.json')) {
+      process.exit(0);
+      return;
+    }
+
+    const target = toolName === 'Edit' ? (toolInput.new_string || '') : (toolInput.content || '');
+    const baseline = toolName === 'Edit' ? (toolInput.old_string || '') : '';
+
+    const depPattern = /"([^"]+)"\s*:\s*"[~^>=<*]?\d/g;
+    const newDeps = extractDeps(target, depPattern);
+    const oldDeps = extractDeps(baseline, depPattern);
+
+    const added = newDeps.filter(function (d) { return oldDeps.indexOf(d) === -1; });
+    if (added.length === 0) {
+      process.exit(0);
+      return;
+    }
+
+    const allowlist = loadAllowlist();
+    const forbidden = added.filter(function (dep) {
+      return knownDuplicates.has(dep) && !allowlist.has(dep);
+    });
+
+    if (forbidden.length > 0) {
+      const reason = '[ASC Hard-Block] Dependency ' + forbidden.map(function(d){ return "'" + d + "'"; }).join(', ') 
+        + ' duplicates standard library or native platform features. '
+        + 'Ladder step 3: use stdlib/native features instead, or add to .asc/dependency-allowlist.json to override.';
+      
+      const output = {
+        hookSpecificOutput: {
+          hookEventName: 'PreToolUse',
+          permissionDecision: 'deny',
+          permissionDecisionReason: reason
+        }
+      };
+      process.stdout.write(JSON.stringify(output));
+      process.exit(0);
+      return;
+    }
+  } catch (_) {
+    // Silent fail to ensure session stability
+  }
+  process.exit(0);
+});
+
+function extractDeps(text, pattern) {
+  const matches = [];
+  let match;
+  while ((match = pattern.exec(text)) !== null) {
+    matches.push(match[1]);
+  }
+  return matches;
+}
+
+function loadAllowlist() {
+  const allowed = new Set();
+  const candidates = [
+    path.join(process.cwd(), '.asc', 'dependency-allowlist.json'),
+    path.join(process.cwd(), '.agents', 'dependency-allowlist.json')
+  ];
+
+  for (let i = 0; i < candidates.length; i++) {
+    try {
+      if (fs.existsSync(candidates[i])) {
+        const content = JSON.parse(fs.readFileSync(candidates[i], 'utf8'));
+        const deps = content.allowedDependencies || content.allowed || {};
+        if (Array.isArray(deps)) {
+          deps.forEach(function (d) { allowed.add(d); });
+        } else if (typeof deps === 'object') {
+          Object.keys(deps).forEach(function (d) { allowed.add(d); });
+        }
+      }
+    } catch (_) {}
+  }
+  return allowed;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ryuenn3123/agentic-senior-core",
-  "version": "5.8.13",
+  "version": "5.8.14",
   "type": "module",
   "description": "Agentic Senior Core: Universal AI coding rules and workflows. Write code like a staff engineer, not a junior.",
   "bin": {

package/plugin.yaml

@@ -1,5 +1,5 @@
 name: agentic-senior-core
-version: 5.8.13
+version: 5.8.14
 description: Universal AI coding rules. Write code like a staff engineer.
 author: fatidaprilian
 provides_hooks:

package/skills/asc-add-feature/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: asc-add-feature
 description: >
-  Structured brownfield workflow. Adapted from QRSPI to prevent context rot and ensure alignment before building.
+  Structured brownfield workflow. Adapted from QRSPI to prevent context rot and ensure alignment before building. Use this skill when user asks to add new features, build new endpoints, extend existing functionality, implement new UI components, modify an existing codebase, or work on brownfield development.
 ---
 
 # Add Feature Workflow
@@ -10,11 +10,11 @@ Structured brownfield workflow. Adapted from QRSPI to prevent context rot and en
 
 Grounded in: RPI (Dex Horthy, HumanLayer 2025) with corrections from QRSPI 8-stage evolution (Coding Agents Conference, March 2026). Plan-reading illusion fix and instruction budget constraint applied. Stages 2/5/7 adapted; stages 1/3/4/6/8 skipped as too heavyweight for individual-developer workflow.
 
-## Gate Mechanism
+## Gate Mechanism & Scaled Spec Requirement
 
 This workflow nudges the agent to stop at each phase boundary, same enforcement tier as the existing decision ladder — not a hard block. Bypasses are logged to the debt ledger.
 
-**Known limitation:** Bypass-to-debt-ledger logging is self-reported by the agent, not enforced by the hook. The PostToolUse hook has no MCP access — it nudges the agent to log, but cannot write the debt entry itself.
+For brownfield feature development (`asc-add-feature`), Phase 2 requires a lightweight **PRD.md** (or feature spec in `docs/PRD.md`) defining product intent, goals, and non-goals to avoid scope creep and context rot.
 
 To track phase, write to `workflow-gate.json` via the `state_write` MCP tool.
 Format:
@@ -37,11 +37,12 @@ Format:
 ## Phase 2: Plan
 
 1. On approval of Phase 1, update `workflow-gate.json` phase to `plan`.
-2. Create a numbered, step-by-step implementation plan with specific files, functions, and line references.
-3. Include a "Don't Build" list from the research phase.
-4. **Callout: Plan-Reading Illusion.** Ask the user to explicitly verify the plan against the codebase, not just skim it.
-5. Output the plan.
-6. **STOP and wait for user approval.** Do not implement.
+2. Ensure `docs/PRD.md` or feature brief exists.
+3. Create a numbered, step-by-step implementation plan with specific files, functions, and line references.
+4. Include a "Don't Build" list from the research phase.
+5. **Callout: Plan-Reading Illusion.** Ask the user to explicitly verify the plan against the codebase, not just skim it.
+6. Output the plan.
+7. **STOP and wait for user approval.** Do not implement.
 
 ## Phase 3: Implement
 

package/skills/asc-new-project/SKILL.md

@@ -1,20 +1,26 @@
 ---
 name: asc-new-project
 description: >
-  Structured greenfield workflow. Prevents building before alignment on what to build.
+  Structured greenfield workflow. Prevents building before alignment on what to build. Use this skill for greenfield projects, scaffolding new repositories, bootstrapping apps, starting from scratch, planning new system architectures, or creating a new project.
 ---
 
 # New Project Workflow
 
 Structured greenfield workflow. Prevents building before alignment on what to build.
 
-Grounded in: Spec-Driven Development (SDD) with scaffolding-spec approach. Specs guide implementation, then the code becomes the source of truth — specs are not maintained as living documents unless the team explicitly opts in.
+Grounded in: Spec-Driven Development (SDD) with scaffolding-spec approach. Core spec documents guide greenfield implementation (`PRD.md`, `Architecture.md`, `Design.md`, `Schema.md`). Once implemented, the code becomes the primary ground truth, while docs are updated on structural changes.
 
-## Gate Mechanism
+## Gate Mechanism & 4 Spec Document Requirement
 
 This workflow nudges the agent to stop at each phase boundary, same enforcement tier as the existing decision ladder — not a hard block. Bypasses are logged to the debt ledger.
 
-**Known limitation:** Bypass-to-debt-ledger logging is self-reported by the agent, not enforced by the hook. The PostToolUse hook has no MCP access — it nudges the agent to log, but cannot write the debt entry itself.
+For greenfield projects (`asc-new-project`), Phase 2 requires creating the **4 Core SDD Documents** in `docs/` or project root:
+1. `PRD.md` — Product intent, goals, non-goals, and user problems.
+2. `Architecture.md` — System structure, module boundaries, and tech stack choices.
+3. `Design.md` — UX / UI layout, component hierarchy, interaction rules.
+4. `Schema.md` — Data contracts, database entities, API endpoints.
+
+*Note on Rules:* Coding conventions and project constraints are automatically loaded from global plugin rules (`agentic-senior-core.md`) or workspace `AGENTS.md`. No duplicate `docs/Rules.md` file is required.
 
 To track phase, write to `workflow-gate.json` via the `state_write` MCP tool.
 Format:
@@ -37,16 +43,17 @@ Format:
 ## Phase 2: Spec (No Implementation Code)
 
 1. On approval of Phase 1, update `workflow-gate.json` phase to `plan`.
-2. Write per-feature specs with acceptance criteria and edge cases.
-3. Specs are scaffolding — they guide the build, then the code is the source of truth.
+2. Generate the 4 core SDD documents from templates (`docs/PRD.md`, `docs/Architecture.md`, `docs/Design.md`, `docs/Schema.md`).
+3. Verify exact file naming — check for typos like `Architectyre.md`.
 4. Output specs for review.
-5. **STOP and wait for user approval.** Do not implement.
+5. **STOP and wait for user approval.** Do not implement code.
 
 ## Phase 3: Implement
 
 1. On approval of Phase 2, update `workflow-gate.json` phase to `implement`.
-2. Build against the approved specs. Apply the ASC decision ladder on every file.
-3. Run the decision ladder: does this need to exist? Does stdlib cover it? One function or full module?
+2. Run Anti Context-Blindness check: verify entities/tables mentioned in `Schema.md` or `Architecture.md` align with proposed code targets.
+3. Build against the approved specs. Apply the ASC decision ladder on every file.
+4. Run the decision ladder: does this need to exist? Does stdlib cover it? One function or full module?
 
 ## Phase 4: Validate