@schneiderjoseph/devia 0.1.0

package/templates/project/11_GAPS.md

@@ -0,0 +1,18 @@
+# 11 — Gaps (undecided)
+
+> Questions nobody has ruled on. Until a gap is decided, the code must not encode an answer
+> silently (`MEM-001`).
+
+IDs are monotone and never reused (`MEM-004`). A gap is closed by recording the decision — then
+either building it, or opening a debt line for it.
+
+Add one with `npx devia gap add "question"`.
+
+| ID | Question | Impact if wrong | Interim behaviour | Status |
+|---|---|---|---|---|
+| G1 | TODO(devia): the first open question | | | open |
+
+## Closed
+
+| ID | Question | Decided by |
+|---|---|---|

package/templates/project/12_DEBT.md

@@ -0,0 +1,19 @@
+# 12 — Debt (decided, not built)
+
+> The project decided; the code does not honour it yet. Adding a line is mandatory even when you
+> are not the one fixing it (`MEM-002`). A line is removed only by the change that discharges it,
+> and partial work **reduces** the line rather than deleting it (`MEM-003`).
+
+IDs are monotone and never reused (`MEM-004`). A false line is worse than a missing one
+(`MEM-005`).
+
+Add one with `npx devia debt add "what is missing"`.
+
+| ID | Rule | Where | What is missing | Priority | Opened |
+|---|---|---|---|---|---|
+| D1 | TODO(devia): the first known gap between rule and code | | | P2 | |
+
+## Discharged
+
+| ID | What was missing | Discharged by |
+|---|---|---|

package/templates/project/13_RECIPES.md

@@ -0,0 +1,35 @@
+# 13 — Recipes
+
+> How to do the routine things **in this repository**, in the order that actually works. A recipe
+> exists so nobody has to rediscover step five.
+
+## Add an endpoint
+
+```text
+1. TODO(devia)
+2. ...
+n. Update 02_SURFACES.md in the same change
+```
+
+## Add a table or a migration
+
+```text
+1. TODO(devia)
+n. Update 03_DATA_MODEL.md in the same change
+```
+
+## Add a screen
+
+```text
+1. TODO(devia)
+n. Update 02_SURFACES.md and 07_DESIGN.md in the same change
+```
+
+## Run the checks
+
+```text
+TODO(devia): the real commands — install, dev, test, lint, typecheck, migrate
+```
+
+Every recipe ends with the memory update it implies. That is what makes `MEM-009` mechanical
+rather than virtuous.

package/templates/project/14_INDEX.md

@@ -0,0 +1,50 @@
+# 14 — Index
+
+> Where to find what. The first stop when the answer is "somewhere in the repo".
+
+## Memory
+
+| Question | File |
+|---|---|
+| What is this project? | [`00_OVERVIEW.md`](00_OVERVIEW.md) |
+| How is it structured? | [`01_ARCHITECTURE.md`](01_ARCHITECTURE.md) |
+| What routes, endpoints and jobs exist? | [`02_SURFACES.md`](02_SURFACES.md) |
+| What is stored? | [`03_DATA_MODEL.md`](03_DATA_MODEL.md) |
+| Who can do what? | [`04_PERMISSIONS.md`](04_PERMISSIONS.md) |
+| What must never break? | [`05_FLOWS.md`](05_FLOWS.md) |
+| What do we call out to? | [`06_INTEGRATIONS.md`](06_INTEGRATIONS.md) |
+| What are the interface rules here? | [`07_DESIGN.md`](07_DESIGN.md) |
+| What is banned? | [`10_NEVER_ALWAYS.md`](10_NEVER_ALWAYS.md) |
+| What is undecided? | [`11_GAPS.md`](11_GAPS.md) |
+| What is owed? | [`12_DEBT.md`](12_DEBT.md) |
+| How do I do X? | [`13_RECIPES.md`](13_RECIPES.md) |
+
+## Code
+
+| Thing | Path |
+|---|---|
+| Entry point | TODO(devia) |
+| Routes / controllers | TODO(devia) |
+| Domain logic | TODO(devia) |
+| Data access | TODO(devia) |
+| Migrations | TODO(devia) |
+| UI components | TODO(devia) |
+| Tests | TODO(devia) |
+| CI configuration | TODO(devia) |
+
+## Documents
+
+| Document | Path | Owns |
+|---|---|---|
+| TODO(devia) | | |
+
+## Standard (vendored)
+
+| Need | Where |
+|---|---|
+| Work contract | [`standard/AGENTS.md`](standard/AGENTS.md) |
+| Rule by ID | [`standard/rules/README.md`](standard/rules/README.md) |
+| Engineering policy | [`standard/standard/engineering/README.md`](standard/standard/engineering/README.md) |
+| Design policy | [`standard/standard/design/README.md`](standard/standard/design/README.md) |
+| Checklists | [`standard/checklists/README.md`](standard/checklists/README.md) |
+| Memory doctrine | [`standard/MEMORY.md`](standard/MEMORY.md) |

package/templates/project/AGENTS.md

@@ -0,0 +1,51 @@
+# AGENTS.md — work contract for {{PROJECT_NAME}}
+
+You are working on **{{PROJECT_NAME}}** under devia {{DEVIA_VERSION}}.
+This file is your contract. Violating it is a failed task.
+
+## Before you touch anything
+
+1. Read [`10_NEVER_ALWAYS.md`](10_NEVER_ALWAYS.md) — what this project has already banned
+2. Read [`00_OVERVIEW.md`](00_OVERVIEW.md) — what this project is
+3. Read the memory file for the surface you are about to change ([`14_INDEX.md`](14_INDEX.md))
+4. Read the standard section for the domain: [`standard/AGENTS.md`](standard/AGENTS.md),
+   [`standard/rules/README.md`](standard/rules/README.md)
+
+Then work. Then update this memory in the same change.
+
+## Non-negotiable here
+
+- Never invent an endpoint, field, config key or business rule. Unknown means **ask**, or record
+  it in [`11_GAPS.md`](11_GAPS.md) — not a quiet default (`AGT-004`, `MEM-001`)
+- Decided but not built goes in [`12_DEBT.md`](12_DEBT.md), even when you are not fixing it
+  (`MEM-002`)
+- Smallest change that satisfies the request; no opportunistic refactors (`AGT-003`)
+- Never disable a test, skip a hook, or weaken a rule to go green (`TST-003`, `OPS-003`,
+  `AGT-011`)
+- Never claim done or production ready without naming the checks that ran (`AGT-005`)
+- Always report what you did **not** verify (`AGT-006`)
+- Update `.devia/` in the same change, per [`impact-map.yaml`](impact-map.yaml) (`MEM-009`)
+
+## Checks
+
+```bash
+npx devia validate     # memory integrity
+npx devia check        # readiness gates (P0 blocks)
+```
+
+TODO(devia): add this project's own commands — install, dev, test, lint, migrate.
+
+## Output contract
+
+```text
+## Devia compliance
+- Memory read: ...
+- Rules applied (IDs): ...
+- P0 status: ...
+- Checks run / NOT run: ...
+- .devia updated: ...
+- Registries: gaps / debt touched
+- Not verified: ...
+```
+
+Full contract, routing table and hard stops: [`standard/AGENTS.md`](standard/AGENTS.md).

package/templates/project/README.md

@@ -0,0 +1,49 @@
+# .devia — living memory for {{PROJECT_NAME}}
+
+This folder is the project's memory. It is read **before** any work and updated **with** every
+change. It is not documentation: it is the short, indexed truth an agent needs to stop guessing.
+
+Created by `devia init` (devia {{DEVIA_VERSION}}, {{DATE}}).
+
+## Read order
+
+| # | File | Answers |
+|---|---|---|
+| — | [`AGENTS.md`](AGENTS.md) | What am I allowed to do here? **Read first.** |
+| 10 | [`10_NEVER_ALWAYS.md`](10_NEVER_ALWAYS.md) | What has this project already banned? |
+| 00 | [`00_OVERVIEW.md`](00_OVERVIEW.md) | What is this project, and what is it built with? |
+| 01 | [`01_ARCHITECTURE.md`](01_ARCHITECTURE.md) | How is it organised? What boundaries hold? |
+| 02 | [`02_SURFACES.md`](02_SURFACES.md) | What pages, endpoints and jobs exist, and where? |
+| 03 | [`03_DATA_MODEL.md`](03_DATA_MODEL.md) | What is stored, and where is it defined? |
+| 04 | [`04_PERMISSIONS.md`](04_PERMISSIONS.md) | Who can do what? What is audited? |
+| 05 | [`05_FLOWS.md`](05_FLOWS.md) | What journeys must never break? |
+| 06 | [`06_INTEGRATIONS.md`](06_INTEGRATIONS.md) | What external services, and which secrets? |
+| 07 | [`07_DESIGN.md`](07_DESIGN.md) | What tokens, components and interface decisions? |
+| 11 | [`11_GAPS.md`](11_GAPS.md) | What is **not decided**? |
+| 12 | [`12_DEBT.md`](12_DEBT.md) | What is decided and **not built**? |
+| 13 | [`13_RECIPES.md`](13_RECIPES.md) | How do I do this routine task here? |
+| 14 | [`14_INDEX.md`](14_INDEX.md) | Where do I find X? |
+
+Machine files: [`devia.json`](devia.json) (profile, maturity, pinned version) and
+[`impact-map.yaml`](impact-map.yaml) (change type → files to update).
+
+The standard itself is vendored, version-pinned, under [`standard/`](standard/) — the same text
+for every agent, offline, no network and no package manager required.
+
+## The two registries
+
+| File | Means | Never |
+|---|---|---|
+| `11_GAPS.md` | Undecided. Nobody has ruled. | Quietly pick an answer and code it |
+| `12_DEBT.md` | Decided, not built. | Delete a line you did not discharge |
+
+## Maintenance
+
+```bash
+npx devia validate    # structure, registries, placeholders
+npx devia doctor      # is the memory older than the code?
+npx devia check       # readiness gates
+npx devia sync        # refresh the vendored standard after an upgrade
+```
+
+`.devia/` is committed. It is part of the repository, not a local scratch pad.

package/templates/project/impact-map.yaml

@@ -0,0 +1,41 @@
+# Change type -> memory files that must be updated in the SAME change (MEM-009).
+#
+# `devia validate` checks that every target exists.
+# `devia doctor` reports when code moved and the memory did not.
+#
+# Extend this map as the project grows a surface. A map that never changes is a map nobody uses.
+
+version: 1
+
+impacts:
+  new_endpoint:        ["02_SURFACES.md"]
+  changed_endpoint:    ["02_SURFACES.md"]
+  new_page:            ["02_SURFACES.md", "07_DESIGN.md"]
+  new_background_job:  ["02_SURFACES.md"]
+  new_webhook:         ["02_SURFACES.md", "06_INTEGRATIONS.md"]
+
+  new_table:           ["03_DATA_MODEL.md"]
+  new_column:          ["03_DATA_MODEL.md"]
+  migration:           ["03_DATA_MODEL.md"]
+  state_machine_change:["03_DATA_MODEL.md", "05_FLOWS.md"]
+
+  permission_change:   ["04_PERMISSIONS.md"]
+  new_role:            ["04_PERMISSIONS.md"]
+  new_audited_action:  ["04_PERMISSIONS.md"]
+
+  new_flow:            ["05_FLOWS.md"]
+  new_integration:     ["06_INTEGRATIONS.md"]
+  new_secret:          ["06_INTEGRATIONS.md"]
+
+  design_token:        ["07_DESIGN.md"]
+  new_component:       ["07_DESIGN.md"]
+
+  architecture_change: ["01_ARCHITECTURE.md"]
+  stack_change:        ["00_OVERVIEW.md", "01_ARCHITECTURE.md"]
+  new_module:          ["00_OVERVIEW.md", "01_ARCHITECTURE.md", "14_INDEX.md"]
+
+  decision_recorded:   ["11_GAPS.md"]
+  rule_not_yet_built:  ["12_DEBT.md"]
+  incident_postmortem: ["10_NEVER_ALWAYS.md"]
+  new_routine_task:    ["13_RECIPES.md"]
+  file_moved:          ["14_INDEX.md"]