@zalom/plastic 1.0.0-alpha.3 → 1.0.0-alpha.31

package/scripts/hook-auto-arm

@@ -0,0 +1,51 @@
+#!/usr/bin/env ruby
+# encoding: UTF-8
+# frozen_string_literal: true
+
+# Usage: hook-auto-arm <message>
+# UserPromptSubmit arming (intent 27). Two jobs, both additive context — never blocks:
+#   1. Detect auto-trigger phrases -> steer the agent to invoke plastic-auto.
+#   2. If auto mode is armed and the active intent hasn't reached How -> remind the agent
+#      that project-code edits are gate-blocked until plan.md + checklist.md exist.
+# Outputs UserPromptSubmit hookSpecificOutput JSON, or exits silently.
+
+require "json"
+require_relative "lib/bridge"
+
+message = (ARGV[0] || "").downcase
+parts = []
+
+# --- 1. Auto-trigger steering ---
+AUTO_TRIGGERS = ["take it from here", "deliver this", "/plastic-auto", "auto mode"].freeze
+# bare "auto" only as a standalone word to avoid matching "automatic", "automation", etc.
+triggered = AUTO_TRIGGERS.any? { |p| message.include?(p) } || message.match?(/\bauto\b/)
+if triggered
+  parts << "Auto-mode request detected. Invoke the plastic-auto skill to deliver the " \
+           "active intent autonomously — it arms the lifecycle gate so project code " \
+           "cannot be edited before plan.md + checklist.md exist."
+end
+
+# --- 2. Standing gate reminder when armed and pre-How ---
+bridge_data = Bridge.discover_bridge(session: ENV["CLAUDE_SESSION_ID"], cwd: Dir.pwd)
+if bridge_data && bridge_data.dig("build", "auto") == true
+  intent = bridge_data["intent"] || {}
+  store = intent["store"]; dir = intent["dir"]
+  if store && dir
+    intent_dir = File.expand_path("#{store}/#{dir}")
+    reached_how = File.exist?("#{intent_dir}/plan.md") && File.exist?("#{intent_dir}/checklist.md")
+    unless reached_how
+      parts << "Auto mode armed on intent #{intent["id"]} — produce spec -> plan -> " \
+               "checklist before editing project code. Code edits are gate-blocked until then."
+    end
+  end
+end
+
+exit 0 if parts.empty?
+
+payload = {
+  "hookSpecificOutput" => {
+    "hookEventName" => "UserPromptSubmit",
+    "additionalContext" => parts.join("\n")
+  }
+}
+puts JSON.generate(payload)

package/scripts/hook-bash-gate

@@ -0,0 +1,41 @@
+#!/usr/bin/env ruby
+# encoding: UTF-8
+# frozen_string_literal: true
+
+# PreToolUse gate for Bash (intent 27a): close the Bash-edit bypass. When auto
+# mode is armed and the active intent has not reached How (plan.md + checklist.md),
+# block Bash commands that WRITE project code outside the store.
+#
+# Reads the Claude Code PreToolUse payload as JSON on STDIN:
+#   { "tool_input": { "command": "..." }, "cwd": "..." }
+# Empty / unparseable / no command => exit 0 (allow). Conservatism is the prime
+# directive: when a command's write intent is ambiguous, ALLOW.
+#
+# Exit 0 = allow. Exit 2 = block (reason on stderr, shown to the agent).
+
+require "json"
+require_relative "lib/bridge"
+
+raw = $stdin.read rescue nil
+exit 0 if raw.nil? || raw.strip.empty?
+
+payload = JSON.parse(raw) rescue nil
+exit 0 unless payload.is_a?(Hash)
+
+command = payload.dig("tool_input", "command") || payload.dig("tool_params", "command")
+exit 0 if command.nil? || command.to_s.strip.empty?
+
+cwd = payload["cwd"]
+cwd = Dir.pwd if cwd.nil? || cwd.to_s.empty?
+
+# --- Load bridge (shared resolution; stdin session_id -> env -> /tmp scan) ---
+session = payload["session_id"]
+session = ENV["CLAUDE_SESSION_ID"] if session.nil? || session.to_s.empty?
+bridge_data = Bridge.discover_bridge(session: session, cwd: cwd)
+exit 0 unless bridge_data
+
+reason = Bridge.bash_gate_decision(bridge_data, command, cwd: cwd)
+exit 0 unless reason
+
+$stderr.puts "PLASTIC GATE — #{reason}"
+exit 2

package/scripts/hook-code-gate

@@ -0,0 +1,27 @@
+#!/usr/bin/env ruby
+# encoding: UTF-8
+# frozen_string_literal: true
+
+# Usage: hook-code-gate <file_path>
+# PreToolUse gate (intent 27): when auto mode is armed and the active intent has not
+# reached How (plan.md + checklist.md), block edits to project code outside the store.
+#
+# Exit 0 = allow. Exit 2 = block (reason on stderr, shown to the agent).
+# No bridge / auto not armed / How reached / path under ~/.plastic or the intent dir = allow.
+
+require_relative "lib/bridge"
+
+file_path = ARGV[0]
+exit 0 unless file_path && !file_path.empty?
+
+session = (ARGV[1] unless ARGV[1].to_s.empty?) || ENV["CLAUDE_SESSION_ID"]
+
+# --- Load bridge (shared resolution; stdin session_id -> env -> /tmp scan) ---
+bridge_data = Bridge.discover_bridge(session: session, cwd: Dir.pwd)
+exit 0 unless bridge_data
+
+reason = Bridge.code_gate_decision(bridge_data, file_path)
+exit 0 unless reason
+
+$stderr.puts "PLASTIC GATE — #{reason}"
+exit 2

package/scripts/hook-continue

@@ -1,130 +1,31 @@
 #!/usr/bin/env ruby
 # encoding: UTF-8
 # Usage: hook-continue <index_path> <store_root> <mode>
-# Outputs hook JSON for the continue hook. Exits silently if nothing to show.
+# Renders the dashboard `continue` cockpit as UserPromptSubmit additionalContext.
+# Exits silently (no output) if the dashboard produces nothing — the bash caller
+# then falls back to a minimal notice.
 
 require "json"
-require "date"
-require "yaml"
+require "open3"
 
-index_path, store_root, mode = ARGV
-exit 0 unless index_path && store_root && mode
+index_path, _store_root, _mode = ARGV
+exit 0 unless index_path && File.exist?(index_path)
 
-# --- Parse INDEX.md ---
+dashboard = File.expand_path("dashboard.rb", __dir__)
+exit 0 unless File.exist?(dashboard)
 
-lines = File.readlines(index_path)
-active = []
-future = []
-section = nil
+cockpit, _err, status = Open3.capture3("ruby", dashboard, "continue")
+exit 0 unless status.success? && !cockpit.strip.empty?
 
-lines.each do |line|
-  if line.start_with?("## Active")
-    section = :active
-    next
-  elsif line.start_with?("## Future")
-    section = :future
-    next
-  elsif line.start_with?("## ")
-    section = nil
-    next
-  end
-
-  next unless section && line.strip.start_with?("- [")
-
-  if section == :active
-    active << line.strip
-  elsif section == :future
-    future << line.strip
-  end
-end
-
-# --- Detect stale future intents ---
-
-stale = []
-stale_days = 3
-config_path = "#{store_root}/config.yml"
-if File.exist?(config_path)
-  config = YAML.safe_load(File.read(config_path)) rescue {}
-  stale_days = config["stale_threshold_days"] || 3
-end
-
-future.each do |f|
-  if f =~ /store\/([\w-]+)\//
-    dir_name = $1
-    intent_file = "#{store_root}/store/#{dir_name}/#{dir_name}.md"
-    next unless File.exist?(intent_file)
-
-    content = File.read(intent_file)
-    if content =~ /^created:\s*['"]?(\d{4}-\d{2}-\d{2})/
-      age = (Date.today - Date.parse($1)).to_i
-      if age >= stale_days
-        name = f[/\[([^\]]+)\]/, 1] || "unknown"
-        stale << { name: name, age: age, entry: f }
-      end
-    end
-  end
-end
-
-# --- Detect current project ---
-
-current_project = nil
-if mode == "global"
-  projects_path = "#{store_root}/projects.yml"
-  if File.exist?(projects_path)
-    projects = YAML.safe_load(File.read(projects_path)) rescue {}
-    cwd = Dir.pwd
-    (projects["projects"] || {}).each do |slug, info|
-      project_path = File.expand_path(info["path"])
-      if cwd.start_with?(project_path)
-        current_project = { "slug" => slug, "parent" => info["parent"], "path" => project_path }
-        break
-      end
-    end
-  end
-end
-
-# --- Build context ---
-
-parts = []
-parts << "PLASTIC CONTINUE — The user wants to resume work.\n"
-
-if mode == "global" && current_project
-  parts << "Project: #{current_project["slug"]} (#{current_project["path"]})\n"
-  parts << "Governing intent: #{current_project["parent"]}\n" if current_project["parent"]
-end
-
-if active.any?
-  parts << "## Active Intents (work on these first)\n"
-  active.each { |a| parts << a }
-  parts << ""
-else
-  parts << "## No Active Intents\n"
-end
-
-if future.any?
-  parts << "## Future Intents (offer as next work)\n"
-  future.each { |f| parts << f }
-  parts << ""
-end
-
-if stale.any?
-  parts << "## Stale Future Intents\n"
-  parts << "These future intents have not been actioned. Ask the user what to do with each:\n"
-  stale.each do |s|
-    parts << "- #{s[:name]} (#{s[:age]} days old) — options: activate, abandon, or defer to agent (implement / research / ideate)"
-  end
-  parts << ""
-end
-
-parts << "Follow the plastic:continuing skill workflow.\n"
-parts << "1. If active intents exist: read their state and resume\n"
-parts << "2. If no active intents: present future intents as options\n"
-parts << "3. If stale intents exist: surface them and ask user to decide"
+context = cockpit.rstrip +
+  "\n\nFollow the plastic-continuing skill workflow to resume: " \
+  "if active intents exist, read their state and resume; otherwise offer the " \
+  "Value×Effort matrix items above, surfacing any stale (Nd) / ⚑ triage intents."
 
 payload = {
   "hookSpecificOutput" => {
     "hookEventName" => "UserPromptSubmit",
-    "additionalContext" => parts.join("\n")
+    "additionalContext" => context
   }
 }
 puts JSON.generate(payload)

package/scripts/hook-gate-check

@@ -1,6 +1,6 @@
 #!/usr/bin/env ruby
 # encoding: UTF-8
-# Usage: hook-gate-check <file_path>
+# Usage: hook-gate-check <file_path> [session_id]
 # PostToolUse gate enforcement for Plastic intent lifecycle.
 # Checks if a written file triggers a stage-transition gate.
 # Exit 0 = allow (optionally with transition context)
@@ -12,32 +12,28 @@ require_relative "lib/bridge"
 file_path = ARGV[0]
 exit 0 unless file_path && !file_path.empty?
 
-# --- Find bridge file ---
-
-session = ENV["CLAUDE_SESSION_ID"]
-bridge_path = nil
-bridge_data = nil
+session = (ARGV[1] unless ARGV[1].to_s.empty?) || ENV["CLAUDE_SESSION_ID"]
 
-if session && !session.empty?
-  bridge_path = Bridge.path(session)
-  bridge_data = Bridge.read(session) if File.exist?(bridge_path)
-end
+file_path_abs = File.expand_path(file_path)
 
-# Fallback: scan /tmp for most recent plastic bridge file
-unless bridge_data
-  candidates = Dir.glob("/tmp/plastic-*.json").reject { |f| f.end_with?(".tmp") }
-  if candidates.any?
-    bridge_path = candidates.max_by { |f| File.mtime(f) }
-    raw = JSON.parse(File.read(bridge_path)) rescue nil
-    if raw
-      session = raw["session"]
-      bridge_data = raw
-    end
+# --- Decoupled savepoint ledger (intent 34, hardened in intent 52) ---
+# The savepoint is derived purely from the file path's intent directory, BEFORE
+# any bridge resolution. A missing bridge must never skip the savepoint.
+intent_dir_abs = Bridge.intent_dir_for(file_path_abs)
+if intent_dir_abs
+  begin
+    Bridge.append_savepoint(intent_dir_abs, file_path_abs)
+  rescue StandardError
+    # ignore — rebuildable from disk
   end
 end
 
-# No bridge = no active intent = no enforcement
-exit 0 unless bridge_data && session
+# --- Find bridge file ---
+bridge_data = Bridge.discover_bridge(session: session, cwd: Dir.pwd)
+
+# No bridge = no active intent = no stage enforcement. Savepoint already handled.
+exit 0 unless bridge_data
+session = bridge_data["session"]
 
 # --- Resolve intent directory ---
 
@@ -49,15 +45,14 @@ dir = intent_info["dir"]
 intent_dir = "#{store}/#{dir}"
 
 # Normalize both paths for comparison
-intent_dir_abs = File.expand_path(intent_dir)
-file_path_abs = File.expand_path(file_path)
+bridge_intent_dir_abs = File.expand_path(intent_dir)
 
 # Not inside intent dir = not our business
-exit 0 unless file_path_abs.start_with?("#{intent_dir_abs}/")
+exit 0 unless file_path_abs.start_with?("#{bridge_intent_dir_abs}/")
 
 # --- Determine if this is a stage-transition file ---
 
-relative = file_path_abs.sub("#{intent_dir_abs}/", "")
+relative = file_path_abs.sub("#{bridge_intent_dir_abs}/", "")
 basename = File.basename(file_path)
 
 stage_files = %w[spec.md plan.md checklist.md outcome.md]
@@ -66,7 +61,7 @@ is_action_file = relative.start_with?("actions/")
 
 if is_stage_file || is_action_file
   # Run gate check
-  error = Bridge.check_gate(intent_dir_abs, file_path_abs)
+  error = Bridge.check_gate(bridge_intent_dir_abs, file_path_abs)
 
   if error
     # Gate violation — block the write
@@ -83,11 +78,11 @@ if is_stage_file || is_action_file
 
   # Gate passed — update bridge with new stage
   old_stage = bridge_data["build"]["stage"]
-  new_stage = Bridge.derive_stage(intent_dir_abs)
-  new_missing = Bridge.missing_for_stage(new_stage) - Bridge.has_files(intent_dir_abs)
+  new_stage = Bridge.derive_stage(bridge_intent_dir_abs)
+  new_missing = Bridge.missing_for_stage(new_stage) - Bridge.has_files(bridge_intent_dir_abs)
 
   bridge_data["build"]["stage"] = new_stage
-  bridge_data["build"]["has"] = Bridge.has_files(intent_dir_abs)
+  bridge_data["build"]["has"] = Bridge.has_files(bridge_intent_dir_abs)
   bridge_data["build"]["missing"] = new_missing
   bridge_data["build"]["gate_failures"] = 0
   bridge_data["build"]["last_activity"] = Time.now.utc.iso8601
@@ -102,9 +97,9 @@ if is_stage_file || is_action_file
   stage_labels = { "what" => "What", "why" => "Why", "how" => "How", "exec" => "Exec", "done" => "Done" }
   next_hints = {
     "why" => "write spec.md",
-    "how" => "Why complete. Invoke plastic:auto to deliver autonomously, or write plan.md manually.",
-    "exec" => "How complete. Invoke plastic:auto or plastic:executing-plan to execute, or work through the checklist manually.",
-    "done" => "Exec complete. Intent must be completed now — write outcome.md, update INDEX.md, auto-commit. Use plastic:auto or do it manually."
+    "how" => "Why complete. Invoke plastic-auto to deliver autonomously, or write plan.md manually.",
+    "exec" => "How complete. Invoke plastic-auto or plastic-executing-plan to execute, or work through the checklist manually.",
+    "done" => "Exec complete. Intent must be completed now — write outcome.md, update INDEX.md, auto-commit. Use plastic-auto or do it manually."
   }
 
   context_parts = ["PLASTIC"]
@@ -129,7 +124,8 @@ if is_stage_file || is_action_file
   puts JSON.generate(payload)
   exit 0
 else
-  # Regular file in intent dir — just update last_activity
+  # Regular file in intent dir — just update last_activity. The savepoint for
+  # the What milestone was already handled above by the decoupled ledger write.
   bridge_data["build"]["last_activity"] = Time.now.utc.iso8601
   Bridge.write(session, bridge_data)
   exit 0

package/scripts/hook-session-start

@@ -7,6 +7,9 @@ require "json"
 require "date"
 require "yaml"
 require_relative "lib/bridge"
+require_relative "lib/boot_banner"
+require_relative "lib/qmd_sync"
+require_relative "doctor"
 
 index_path, store_root, mode, plugin_root = ARGV
 exit 0 unless index_path && store_root && mode
@@ -117,15 +120,23 @@ if File.exist?(projects_path)
   end
 end
 
+# --- Load PLASTIC.md conventions ---
+
+plastic_md_path = "#{store_root}/PLASTIC.md"
+plastic_md = File.exist?(plastic_md_path) ? File.read(plastic_md_path).strip : nil
+
 # --- Load deprecations ---
 
+dep_file = if plugin_root && !plugin_root.empty?
+  "#{plugin_root}/deprecations.yml"
+else
+  "#{store_root}/deprecations.yml"
+end
+
 deprecations = []
-if plugin_root && !plugin_root.empty?
-  dep_file = "#{plugin_root}/deprecations.yml"
-  if File.exist?(dep_file)
-    dep_data = YAML.safe_load(File.read(dep_file)) rescue {}
-    deprecations = dep_data["deprecations"] || []
-  end
+if File.exist?(dep_file)
+  dep_data = YAML.safe_load(File.read(dep_file)) rescue {}
+  deprecations = dep_data["deprecations"] || []
 end
 
 dismissed_json = `"#{read_config}" deprecations_dismissed`.strip
@@ -136,7 +147,10 @@ rescue
 end
 
 current_version = nil
-if plugin_root && !plugin_root.empty?
+version_file = "#{store_root}/VERSION"
+if File.exist?(version_file)
+  current_version = File.read(version_file).strip
+elsif plugin_root && !plugin_root.empty?
   plugin_json_path = "#{plugin_root}/.claude-plugin/plugin.json"
   if File.exist?(plugin_json_path)
     pj = JSON.parse(File.read(plugin_json_path)) rescue {}
@@ -150,42 +164,105 @@ active_deprecations = deprecations.select do |dep|
   !dismissed.include?(dep["id"])
 end
 
-# --- Early exit if nothing to show ---
+# --- Check for available updates (from previous session's check) ---
+
+update_notice = nil
+cache_file = "#{store_root}/.cache/update-check.json"
+if File.exist?(cache_file)
+  cache = JSON.parse(File.read(cache_file)) rescue {}
+  if cache["updateAvailable"]
+    update_notice = "Plastic update available: #{cache["current"]} -> #{cache["latest"]} — run /plastic-update"
+  end
+end
+
+# --- Run core health in-process (intent 36a) ---
+# Reuse Doctor's own --core checks so there is one source of truth for "core
+# health" (no second process spawn, no duplicated check list). Never blocks the
+# session: any failure or exception degrades to a banner and we continue.
+
+core_health = begin
+  Doctor.new(plastic_home: store_root).run_core_checks("claude")
+rescue
+  nil
+end
+core_banner = BootBanner.render(health: core_health, version: current_version)
+
+# --- Assemble session context ---
 
 all_active = active + project_active
 all_future = future + project_future
-exit 0 if all_active.empty? && stale.empty? && all_future.empty? && active_deprecations.empty?
 
 # --- Build context ---
+# PLASTIC.md conventions and intent context render only when conventions are
+# installed. Deprecation warnings and update notices render regardless, so a
+# partial install (or a missing PLASTIC.md) still surfaces critical warnings.
 
 parts = []
 
-if current_project
-  parts << "PLASTIC — Global store | Project: #{current_project["slug"]} (#{current_project["path"]})\n"
-else
-  parts << "PLASTIC — Global store loaded from ~/.plastic/\n"
-end
+# Boot banner first: every session start surfaces that Plastic loaded, with the
+# version (clean) or the first failing core check (degraded). Owned by the hook
+# so it runs by construction — the plastic-continuing skill no longer does this.
+parts << core_banner
+parts << ""
 
-if all_active.any?
-  parts << "Active intents:\n"
-  all_active.each { |a| parts << a }
-  if bridge_data
-    stage = bridge_data["build"]["stage"]
-    missing = bridge_data["build"]["missing"]
-    missing_str = missing.empty? ? "none" : missing.join(", ")
-    parts << "Stage: #{stage} | Next: #{missing_str}"
+# --- QMD search status (intent 45a, READ-ONLY) ---
+# Report-only line for the model (additionalContext), never systemMessage and
+# never the exit code. QmdSync.status shells out to `qmd collection list`, so the
+# whole block is guarded: a 2s timeout caps any hang, and rescue-all guarantees a
+# slow/broken/missing qmd appends nothing and the hook continues cleanly.
+begin
+  require "timeout"
+  qmd_status = Timeout.timeout(2) { QmdSync.status(plastic_home: store_root) }
+  if qmd_status[:present]
+    if qmd_status[:all_registered]
+      parts << "QMD: #{qmd_status[:registered].size} Plastic collections indexed (search with the qmd skill)."
+    else
+      parts << "QMD detected — run `qmd-sync register --all` to index your Plastic stores for search."
+    end
   end
-  parts << ""
-else
-  parts << "No active intents. #{future.length} future intents available.\n"
+rescue Exception
+  # Any failure (timeout, missing binary, parse error) — stay silent, never crash.
 end
 
-if stale.any?
-  parts << "\nStale future intents (untouched for days):\n"
-  stale.each do |s|
-    parts << "- #{s[:name]} (#{s[:age]} days) — consider: activate, abandon, or defer to agent"
+if plastic_md
+  # Conventions always loaded first
+  parts << plastic_md
+  parts << "\n---\n"
+
+  if current_project
+    slug = current_project["slug"]
+    banner = "Project: #{slug} | Store: ~/.plastic/projects/#{slug}/store/"
+    if project_active.any? && project_active.first =~ /\[([^\]]+)\].*store\/([\w-]+)\//
+      intent_name, dir_name = $1, $2
+      intent_id = dir_name.split("--").first
+      banner += "\nActive: [#{intent_id} — #{intent_name}] | Artifacts → store/#{dir_name}/"
+    end
+    parts << banner + "\n"
+  else
+    parts << "PLASTIC — Global store loaded from ~/.plastic/\n"
+  end
+
+  if all_active.any?
+    parts << "Active intents:\n"
+    all_active.each { |a| parts << a }
+    if bridge_data
+      stage = bridge_data["build"]["stage"]
+      missing = bridge_data["build"]["missing"]
+      missing_str = missing.empty? ? "none" : missing.join(", ")
+      parts << "Stage: #{stage} | Next: #{missing_str}"
+    end
+    parts << ""
+  else
+    parts << "No active intents. #{future.length} future intents available.\n"
+  end
+
+  if stale.any?
+    parts << "\nStale future intents (untouched for days):\n"
+    stale.each do |s|
+      parts << "- #{s[:name]} (#{s[:age]} days) — consider: activate, abandon, or defer to agent"
+    end
+    parts << "\nWhen appropriate, ask the user what to do with stale intents."
   end
-  parts << "\nWhen appropriate, ask the user what to do with stale intents."
 end
 
 if active_deprecations.any?
@@ -215,10 +292,23 @@ if active_deprecations.any?
   end
 end
 
+if update_notice
+  parts.unshift("! #{update_notice}\n")
+end
+
+# Emit nothing when there is genuinely nothing to surface (no conventions,
+# no deprecations, no update notice).
+exit 0 if parts.join.strip.empty?
+
 payload = {
   "hookSpecificOutput" => {
     "hookEventName" => "SessionStart",
     "additionalContext" => parts.join("\n")
-  }
+  },
+  # Intent 54: additionalContext is model-only, so the banner stays invisible to
+  # the human. The top-level systemMessage channel is rendered in the user's
+  # terminal (and re-fires on /clear). Reuse the same BootBanner line so the
+  # visible banner and the model-facing banner cannot drift.
+  "systemMessage" => core_banner
 }
 puts JSON.generate(payload)