agent-quality-police 0.2.7 → 0.2.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agent-quality-police",
3
- "version": "0.2.7",
3
+ "version": "0.2.8",
4
4
  "description": "Strict governance framework for coding agents that blocks testing and typing bypasses.",
5
5
  "author": {
6
6
  "name": "Davy Massoneto",
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agent-quality-police",
3
- "version": "0.2.7",
3
+ "version": "0.2.8",
4
4
  "description": "Strict governance framework for coding agents that blocks testing and typing bypasses.",
5
5
  "author": {
6
6
  "name": "Davy Massoneto",
package/CLAUDE.md CHANGED
@@ -4,33 +4,40 @@
4
4
 
5
5
  - Direct system, developer, and user instructions override this file.
6
6
  - Prefer current local code and current official documentation over memory.
7
- - Load only the smallest relevant skill set for the task.
7
+ - Treat the required skills and auditors in this file as mandatory workflow requirements.
8
8
 
9
9
  ## Startup Sequence
10
10
 
11
11
  1. Read [quality-definition](docs/policy/quality-definition.md) when the task needs repository policy context.
12
12
  2. Read [workflow](docs/policy/workflow.md) when the repository defines one.
13
- 3. Load only the relevant skill set from `.claude/skills/`.
13
+ 3. Load the smallest required skill set from `.claude/skills/` before proposing edits or writing code.
14
14
 
15
15
  ## Skill Routing
16
16
 
17
- - Use [quality-index](.claude/skills/quality-index/SKILL.md) when the task spans multiple concerns.
17
+ - Use [quality-index](.claude/skills/quality-index/SKILL.md) when the task spans multiple concerns or when you are unsure which validators apply.
18
18
  - Use [typescript-zero-bypass](.claude/skills/typescript-zero-bypass/SKILL.md) for `.ts` or `.tsx` changes.
19
19
  - Use [vite-vitest-tdd](.claude/skills/vite-vitest-tdd/SKILL.md) for Vite or Vitest TDD.
20
20
  - Use [react-public-api-testing](.claude/skills/react-public-api-testing/SKILL.md) for React behavior tests.
21
+ - Use [anti-bypass-audit](.claude/skills/anti-bypass-audit/SKILL.md) when reviewing diffs, suspicious helpers, weakened configs, or type/config-heavy changes.
22
+ - Use [refactoring-with-safety](.claude/skills/refactoring-with-safety/SKILL.md) for refactors that are not pure bug fixes.
23
+ - Use [governance-installation](.claude/skills/governance-installation/SKILL.md) when installing or updating this governance package.
21
24
 
22
25
  ## Quality Rules
23
26
 
27
+ - Load the required skills before proposing edits or writing code.
28
+ - If a required skill is unavailable in the current runtime, stop and report `BLOCKED`.
24
29
  - Use behavior-first tests when tests are viable.
25
30
  - Avoid type bypasses, comment bypasses, config weakening, and fake greens.
26
31
  - Prefer named types and explicit models over inline structural shortcuts.
27
32
 
28
33
  ## Review Flow
29
34
 
30
- - Before final approval, run the relevant auditors for the actual risk surface.
31
- - Use `bypass-auditor` for typing, config, mocks, helpers, or suspicious diffs.
32
- - Use `tdd-warden` when behavior or tests changed or should have changed.
33
- - Use `pr-gatekeeper` only for final approve-or-reject review.
35
+ - For code changes, explicitly invoke the required auditors before final approval.
36
+ - For code changes, do not finalize until the required auditors have run and their results were reviewed.
37
+ - For typing, config, mocks, helpers, or suspicious diffs, run `bypass-auditor`.
38
+ - For behavior changes or bug fixes, run `tdd-warden` and `bypass-auditor`.
39
+ - For final approval, release, or merge decisions, run `pr-gatekeeper` after the other required auditors.
40
+ - If a required skill or auditor cannot run in the current runtime, stop and report `BLOCKED`.
34
41
 
35
42
  ## Claude Code
36
43
 
package/lib/install.mjs CHANGED
@@ -89,29 +89,36 @@ function globalPolicySections() {
89
89
  priorityBody: [
90
90
  "- Direct system, developer, and user instructions override this file.",
91
91
  "- Prefer current local code and current official documentation over memory.",
92
- "- Load only the smallest relevant skill set for the task."
92
+ "- Treat the required skills and auditors in this file as mandatory workflow requirements."
93
93
  ].join("\n"),
94
94
  startupSequenceBody: [
95
95
  "1. Read [quality-definition]({{quality_definition_path}}) when the task needs repository policy context.",
96
96
  "2. Read [workflow]({{workflow_path}}) when the repository defines one.",
97
- "3. Load only the relevant skill set from `{{primary_skill_root}}`."
97
+ "3. Load the smallest required skill set from `{{primary_skill_root}}` before proposing edits or writing code."
98
98
  ].join("\n"),
99
99
  skillRoutingBody: [
100
- "- Use [quality-index]({{quality_index_skill_path}}) when the task spans multiple concerns.",
100
+ "- Use [quality-index]({{quality_index_skill_path}}) when the task spans multiple concerns or when you are unsure which validators apply.",
101
101
  "- Use [typescript-zero-bypass]({{typescript_zero_bypass_skill_path}}) for `.ts` or `.tsx` changes.",
102
102
  "- Use [vite-vitest-tdd]({{vite_vitest_tdd_skill_path}}) for Vite or Vitest TDD.",
103
- "- Use [react-public-api-testing]({{react_public_api_testing_skill_path}}) for React behavior tests."
103
+ "- Use [react-public-api-testing]({{react_public_api_testing_skill_path}}) for React behavior tests.",
104
+ "- Use [anti-bypass-audit]({{anti_bypass_audit_skill_path}}) when reviewing diffs, suspicious helpers, weakened configs, or type/config-heavy changes.",
105
+ "- Use [refactoring-with-safety]({{refactoring_with_safety_skill_path}}) for refactors that are not pure bug fixes.",
106
+ "- Use [governance-installation]({{governance_installation_skill_path}}) when installing or updating this governance package."
104
107
  ].join("\n"),
105
108
  qualityRulesBody: [
109
+ "- Load the required skills before proposing edits or writing code.",
110
+ "- If a required skill is unavailable in the current runtime, stop and report `BLOCKED`.",
106
111
  "- Use behavior-first tests when tests are viable.",
107
112
  "- Avoid type bypasses, comment bypasses, config weakening, and fake greens.",
108
113
  "- Prefer named types and explicit models over inline structural shortcuts."
109
114
  ].join("\n"),
110
115
  reviewFlowBody: [
111
- "- Before final approval, run the relevant auditors for the actual risk surface.",
112
- "- Use `bypass-auditor` for typing, config, mocks, helpers, or suspicious diffs.",
113
- "- Use `tdd-warden` when behavior or tests changed or should have changed.",
114
- "- Use `pr-gatekeeper` only for final approve-or-reject review."
116
+ "- For code changes, explicitly invoke the required auditors before final approval.",
117
+ "- For code changes, do not finalize until the required auditors have run and their results were reviewed.",
118
+ "- For typing, config, mocks, helpers, or suspicious diffs, run `bypass-auditor`.",
119
+ "- For behavior changes or bug fixes, run `tdd-warden` and `bypass-auditor`.",
120
+ "- For final approval, release, or merge decisions, run `pr-gatekeeper` after the other required auditors.",
121
+ "- If a required skill or auditor cannot run in the current runtime, stop and report `BLOCKED`."
115
122
  ].join("\n")
116
123
  };
117
124
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "agent-quality-police",
3
- "version": "0.2.7",
3
+ "version": "0.2.8",
4
4
  "description": "Strict governance framework for coding agents that blocks testing and typing bypasses.",
5
5
  "type": "module",
6
6
  "license": "MIT",