agentic-sdlc-wizard 1.68.0 → 1.70.0

package/.claude-plugin/marketplace.json

@@ -13,7 +13,7 @@
       "name": "sdlc-wizard",
       "source": ".",
       "description": "SDLC enforcement for AI agents — TDD, planning, self-review, CI shepherd",
-      "version": "1.68.0",
+      "version": "1.70.0",
       "author": {
         "name": "Stefan Ayala"
       },

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "sdlc-wizard",
-  "version": "1.68.0",
+  "version": "1.70.0",
   "description": "SDLC enforcement for AI agents — TDD, planning, self-review, CI shepherd",
   "author": {
     "name": "Stefan Ayala",

package/CHANGELOG.md

@@ -4,6 +4,59 @@ All notable changes to the SDLC Wizard.
 
 > **Note:** This changelog is for humans to read. Don't manually apply these changes - just run the wizard ("Check for SDLC wizard updates") and it handles everything automatically.
 
+## [1.70.0] - 2026-05-05
+
+### Token-bloat fix: TDD CHECK nudge fires once per CC session
+
+`hooks/tdd-pretool-check.sh` was emitting a ~50-token JSON nudge ("TDD CHECK: Are you writing IMPLEMENTATION before a FAILING TEST?") on every Write/Edit/MultiEdit touching `src/**`. After the SDLC skill auto-invokes (which already covers TDD RED/GREEN), the per-Edit nudge is duplicate context — typical SDLC session has 10-30 src Edits = ~0.5-1.5K wasted tokens.
+
+Now gated on per-`session_id` sentinel under `$SDLC_WIZARD_CACHE_DIR/tdd-shown-<id>`, atomic-claimed via subshell `set -C` (noclobber). Same pattern as v1.69.0 BASELINE gate.
+
+### Behavior
+
+- **First src/ edit of a CC session** → TDD CHECK emits as before.
+- **Subsequent src/ edits (same session_id)** → TDD CHECK suppressed.
+- **New CC session (different session_id)** → TDD CHECK re-emits.
+- **Non-src/ files** → no output (existing behavior, regardless of sentinel). Editing README first does NOT consume the sentinel slot — TDD CHECK still fires on first src/ edit afterward.
+- **No session_id in stdin** (legacy CC, direct shell tests) → emits every src/ edit (back-compat preserved).
+- **N parallel src/ edits with same session_id** → exactly 1 TDD CHECK emit (atomic claim).
+
+### Files
+
+- `hooks/tdd-pretool-check.sh` — atomic-claim sentinel + jq-decoupled session_id extraction.
+- `tests/test-tdd-pretool-fires-once.sh` (new — 9 cases including 50-parallel concurrency, non-src/ doesn't consume sentinel, suppressed-fire-empty assertion).
+- `.github/workflows/ci.yml`, `CONTRIBUTING.md` — wire new test into validate job + contributor checklist.
+- `CHANGELOG.md`, `SDLC.md`, `skills/update/SKILL.md`, `package.json`, `.claude-plugin/plugin.json` + `marketplace.json`, `CLAUDE_CODE_SDLC_WIZARD.md` (1.69.0 → 1.70.0).
+
+### Notes
+
+ROADMAP #236 functional-bloat audit, phase 2. Phase 1 (v1.69.0) trimmed the BASELINE block (~12K tokens/session). Phase 2 trims the per-Edit nudge. Combined savings on a 50-prompt + 20-Edit session: ~13.5K tokens. Audit method continues — measure cost × frequency, judge value, don't blind-delete. Other always-on hooks (`model-effort-check`, `precompact-seam-check`, `token-spike-check`) remain silent at healthy state and are not bloat.
+
+## [1.69.0] - 2026-05-04
+
+### Token-bloat fix: BASELINE block fires once per CC session
+
+Cuts ~12K tokens/session of duplicate context for users with >3 prompts. The `SDLC BASELINE` block in `hooks/sdlc-prompt-check.sh` (~250 tokens) was firing on every `UserPromptSubmit` — once Claude has the SDLC skill auto-invoked (covers TodoWrite/confidence/workflow phases), every subsequent re-emission is pure duplication. Now gated by a per-`session_id` sentinel under `$SDLC_WIZARD_CACHE_DIR/baseline-shown-<id>`, pruned at 7d.
+
+### Behavior
+
+- **First prompt of a CC session** → BASELINE emits as before (cold-start nudge survives).
+- **Subsequent prompts (same session_id)** → BASELINE suppressed.
+- **New CC session (different session_id)** → BASELINE re-emits.
+- **No session_id in stdin** (legacy CC, direct shell tests) → BASELINE emits every fire (back-compat preserved).
+- `SETUP NOT COMPLETE` warning + `EFFORT BUMP REQUIRED` nudge **continue to fire every prompt** — they're dynamic state warnings, not static reminders.
+
+### Files
+
+- `hooks/sdlc-prompt-check.sh` — extracts `session_id` from stdin JSON; gates the static BASELINE block via per-session sentinel; prunes >7d sentinels on emit.
+- `tests/test-baseline-fires-once.sh` (new — 8 cases covering first-fire, suppression, different-session re-emit, no-session-id back-compat, SETUP-warning persistence, EFFORT-bump persistence, cross-cache-dir isolation, byte-shrink verification).
+- `.github/workflows/ci.yml` — wires new test into `validate` job.
+- `CHANGELOG.md`, `SDLC.md`, `skills/update/SKILL.md`, `package.json`, `.claude-plugin/plugin.json` + `marketplace.json`, `CLAUDE_CODE_SDLC_WIZARD.md` (1.68.0 → 1.69.0).
+
+### Notes
+
+Discovered during ROADMAP #236 functional-bloat audit. Identified `sdlc-prompt-check.sh` as the #1 amplifier (every-prompt × 22 lines × N prompts). Audit method: measure cost × frequency, judge value — not blind delete-and-see. Per-prompt BASELINE failed cost/value once skill is loaded; conditional warnings + effort-bump detector earned their keep and stayed untouched. Other hooks (`model-effort-check`, `precompact-seam-check`, `token-spike-check`) are silent at healthy state — not bloat.
+
 ## [1.68.0] - 2026-05-04
 
 ### Closed (paperwork-stale roadmap rows)

package/CLAUDE_CODE_SDLC_WIZARD.md

@@ -2976,7 +2976,7 @@ If deployment fails or post-deploy verification catches issues:
 
 **SDLC.md:**
 ```markdown
-<!-- SDLC Wizard Version: 1.68.0 -->
+<!-- SDLC Wizard Version: 1.70.0 -->
 <!-- Setup Date: [DATE] -->
 <!-- Completed Steps: step-0.1, step-0.2, step-0.4, step-1, step-2, step-3, step-4, step-5, step-6, step-7, step-8, step-9 -->
 <!-- Git Workflow: [PRs or Solo] -->
@@ -4055,7 +4055,7 @@ Walk through updates? (y/n)
 Store wizard state in `SDLC.md` as metadata comments (invisible to readers, parseable by Claude):
 
 ```markdown
-<!-- SDLC Wizard Version: 1.68.0 -->
+<!-- SDLC Wizard Version: 1.70.0 -->
 <!-- Setup Date: 2026-01-24 -->
 <!-- Completed Steps: step-0.1, step-0.2, step-1, step-2, step-3, step-4, step-5, step-6, step-7, step-8, step-9 -->
 <!-- Git Workflow: PRs -->

package/hooks/sdlc-prompt-check.sh

@@ -43,10 +43,25 @@ fi
 EFFORT_CACHE_DIR="${SDLC_WIZARD_CACHE_DIR:-$HOME/.cache/sdlc-wizard}"
 EFFORT_SIGNALS="$EFFORT_CACHE_DIR/effort-signals.log"
 PROMPT_TEXT=""
-if [ ! -t 0 ] && command -v jq > /dev/null 2>&1; then
+SESSION_ID=""
+# Read stdin once regardless of jq availability — session_id extraction
+# is jq-independent (Codex round 1 P1: BASELINE gate failed when jq was
+# missing or broken). Prompt extraction still needs jq because prompt
+# content can contain arbitrary multi-line text + escapes.
+if [ ! -t 0 ]; then
     STDIN_JSON=$(cat)
     if [ -n "$STDIN_JSON" ]; then
-        PROMPT_TEXT=$(printf '%s' "$STDIN_JSON" | jq -r '.prompt // empty' 2>/dev/null) || PROMPT_TEXT=""
+        # session_id is a UUID-shaped string with no escapable content
+        # in CC's stdin contract — regex extraction is sufficient.
+        # `tr -cd` later strips anything filename-unsafe, so a malformed
+        # input cannot escape the cache dir.
+        SESSION_ID=$(printf '%s' "$STDIN_JSON" \
+            | grep -o '"session_id"[[:space:]]*:[[:space:]]*"[^"]*"' \
+            | head -1 \
+            | sed 's/.*"\([^"]*\)"$/\1/')
+        if command -v jq > /dev/null 2>&1; then
+            PROMPT_TEXT=$(printf '%s' "$STDIN_JSON" | jq -r '.prompt // empty' 2>/dev/null) || PROMPT_TEXT=""
+        fi
     fi
 fi
 if [ -n "$PROMPT_TEXT" ]; then
@@ -109,7 +124,49 @@ SETUP
     exit 0
 fi
 
-cat << 'EOF'
+# Token-bloat fix: BASELINE block fires once per CC session (~250 tok × 50
+# prompts = ~12K wasted tokens before this gate). Once Claude has the SDLC
+# skill auto-invoked (covers TodoWrite/confidence/workflow), this static
+# block is duplicate context. Sentinel is per-session_id so a fresh CC
+# session re-emits the cold-start nudge. Without session_id (legacy CC, or
+# direct shell tests with no JSON stdin), behavior is unchanged — emits
+# every fire. SETUP-not-complete + EFFORT-bump branches above are NOT
+# gated; they're dynamic state warnings that must fire every prompt.
+#
+# Concurrency: claim is atomic via `set -C` (noclobber) — the redirect
+# `: > "$path"` create-or-fails. Across N parallel fires with the same
+# session_id, exactly one wins the claim and emits BASELINE; the rest
+# see file-exists and suppress. (Codex round 1 P1: previous "check then
+# write after emit" pattern allowed N parallel fires to all emit.)
+SHOULD_EMIT_BASELINE=1
+BASELINE_SENTINEL=""
+if [ -n "$SESSION_ID" ]; then
+    BASELINE_CACHE_DIR="${SDLC_WIZARD_CACHE_DIR:-$HOME/.cache/sdlc-wizard}"
+    # Strip path-traversal chars from session_id before using in filename
+    # (defense-in-depth — CC session_ids are UUIDs, but never trust stdin).
+    SAFE_SID=$(printf '%s' "$SESSION_ID" | tr -cd 'A-Za-z0-9._-')
+    if [ -n "$SAFE_SID" ]; then
+        BASELINE_SENTINEL="$BASELINE_CACHE_DIR/baseline-shown-${SAFE_SID}"
+        mkdir -p "$BASELINE_CACHE_DIR" 2>/dev/null || true
+        # Atomic create-or-fail: subshell sets noclobber so `: > "$path"`
+        # fails (rc≠0) if the file already exists. The full conditional
+        # tree:
+        #   - claim succeeds → emit (we won the race)
+        #   - claim fails AND file exists → suppress (someone else won)
+        #   - claim fails AND file doesn't exist → cache unwritable;
+        #     fall back to emit so user never loses cold-start nudge.
+        if (set -C; : > "$BASELINE_SENTINEL") 2>/dev/null; then
+            SHOULD_EMIT_BASELINE=1
+        elif [ -f "$BASELINE_SENTINEL" ]; then
+            SHOULD_EMIT_BASELINE=0
+        else
+            SHOULD_EMIT_BASELINE=1
+        fi
+    fi
+fi
+
+if [ "$SHOULD_EMIT_BASELINE" -eq 1 ]; then
+    cat << 'EOF'
 SDLC BASELINE:
 1. TodoWrite FIRST (plan tasks before coding)
 2. STATE CONFIDENCE: HIGH/MEDIUM/LOW
@@ -130,3 +187,9 @@ Workflow phases:
 
 Quick refs: SDLC.md | TESTING.md | *_PLAN.md for feature
 EOF
+    # Prune sentinels older than 7d so cache doesn't grow forever.
+    # Best-effort: errors silently swallowed.
+    if [ -n "$BASELINE_SENTINEL" ]; then
+        find "$BASELINE_CACHE_DIR" -name 'baseline-shown-*' -type f -mtime +7 -delete 2>/dev/null || true
+    fi
+fi

package/hooks/tdd-pretool-check.sh

@@ -17,13 +17,59 @@ TOOL_INPUT=$(cat)
 # Extract the file path being edited (requires jq)
 FILE_PATH=$(echo "$TOOL_INPUT" | jq -r '.tool_input.file_path // empty')
 
+# session_id extraction is jq-independent (same pattern as sdlc-prompt-check.sh
+# v1.69.0 — Codex round 1 P1 from that PR proved jq-coupling silently disabled
+# the gate when jq was missing/broken). UUIDs are simple strings, no escapes.
+SESSION_ID=$(printf '%s' "$TOOL_INPUT" \
+    | grep -o '"session_id"[[:space:]]*:[[:space:]]*"[^"]*"' \
+    | head -1 \
+    | sed 's/.*"\([^"]*\)"$/\1/')
+
 # CUSTOMIZE: Change this pattern to match YOUR source directory
 # Examples: "/src/", "/app/", "/lib/", "/packages/", "/server/"
 if [[ "$FILE_PATH" == *"/src/"* ]]; then
-  # Output additionalContext that Claude will read
-  cat << 'EOF'
+  # Token-bloat fix (v1.70.0): nudge fires once per CC session. Once Claude
+  # has the SDLC skill auto-invoked (covers TDD RED/GREEN), the per-Edit
+  # nudge becomes duplicate context — typical session has 10-30 src Edits
+  # = ~0.5-1.5K wasted tokens. Same atomic-noclobber claim pattern as
+  # sdlc-prompt-check.sh BASELINE gate.
+  #
+  # No-session_id stdin (legacy CC, direct shell tests) → emit every fire,
+  # preserving back-compat with existing tests in test-hooks.sh that don't
+  # pass session_id.
+  SHOULD_EMIT=1
+  if [ -n "$SESSION_ID" ]; then
+    CACHE_DIR="${SDLC_WIZARD_CACHE_DIR:-$HOME/.cache/sdlc-wizard}"
+    SAFE_SID=$(printf '%s' "$SESSION_ID" | tr -cd 'A-Za-z0-9._-')
+    if [ -n "$SAFE_SID" ]; then
+      SENTINEL="$CACHE_DIR/tdd-shown-${SAFE_SID}"
+      mkdir -p "$CACHE_DIR" 2>/dev/null || true
+      # Atomic claim: subshell `set -C` makes `: > path` create-or-fail.
+      # Conditional tree:
+      #   - claim succeeds → emit (we won the race)
+      #   - claim fails AND file exists → suppress (someone else won)
+      #   - claim fails AND file missing → cache unwritable; fall back
+      #     to emit so user never loses cold-start nudge.
+      if (set -C; : > "$SENTINEL") 2>/dev/null; then
+        SHOULD_EMIT=1
+      elif [ -f "$SENTINEL" ]; then
+        SHOULD_EMIT=0
+      else
+        SHOULD_EMIT=1
+      fi
+    fi
+  fi
+
+  if [ "$SHOULD_EMIT" -eq 1 ]; then
+    # Output additionalContext that Claude will read
+    cat << 'EOF'
 {"hookSpecificOutput": {"hookEventName": "PreToolUse", "additionalContext": "TDD CHECK: Are you writing IMPLEMENTATION before a FAILING TEST? If yes, STOP. Write the test first (TDD RED), then implement (TDD GREEN)."}}
 EOF
+    # Prune sentinels older than 7d so cache doesn't grow forever.
+    if [ -n "$SESSION_ID" ] && [ -n "$SAFE_SID" ]; then
+      find "$CACHE_DIR" -name 'tdd-shown-*' -type f -mtime +7 -delete 2>/dev/null || true
+    fi
+  fi
 fi
 
 # No output = allow the tool to proceed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-sdlc-wizard",
-  "version": "1.68.0",
+  "version": "1.70.0",
   "description": "SDLC enforcement for Claude Code — hooks, skills, and wizard setup in one command",
   "bin": {
     "sdlc-wizard": "cli/bin/sdlc-wizard.js"

package/skills/update/SKILL.md

@@ -93,13 +93,12 @@ Parse CHANGELOG entries between the user's installed version and latest. Present
 
 ```
 Installed: 1.42.0
-Latest:    1.68.0
+Latest:    1.70.0
 
 What changed:
-- [1.68.0] roadmap hygiene — closed #97 (Anthropic Policy & Research alignment audit — NO-GO with one validating parallel: April 2026 "Automated Alignment Researchers" paper conceptually parallel to our cross-model review, our implementation predates it and mitigates noted weaknesses). Research write-up at `.reviews/research-97-anthropic-policy.md`. Also closes #243 follow-up — `.metrics/token-history.jsonl` accumulating (8 rows on maintainer machine, well over 5-record threshold). 6/6 external audits NO-GO.
-- [1.67.0] roadmap hygiene — closed #99 (AutoGPT integration audit — NO-GO; AutoGPT is an agent host like Claude Code / Codex / OpenCode, no hook primitive maps, audience is agent-builders not SWE workflow). Research write-up at `.reviews/research-99-autogpt.md`. 5/5 external-product audits NO-GO (continues #76 + #77 + #235 + #95).
-- [1.66.0] roadmap hygiene — closed #95 (Nous Research NO-GO — different layer; Nous builds models + agent frameworks, we enforce SDLC process). Rolls in PR #309 codex callout near top + issue #308 close (4/4 API entries audited).
-- [1.65.0] roadmap hygiene — closed #210 (Node 24 false-green, already shipped PR #217) + #235 (Thoughtworks AI Evals NO-GO).
+- [1.70.0] token-bloat fix phase 2 — `hooks/tdd-pretool-check.sh` TDD CHECK JSON nudge (the per-`Write/Edit` "Are you writing IMPLEMENTATION before a FAILING TEST?" reminder) now fires once per CC `session_id` instead of every src/ edit. Saves ~0.5-1.5K tokens/session (10-30 src Edits × ~50 tok). Same atomic-noclobber claim pattern as v1.69.0 BASELINE gate. Non-src/ edits don't consume the sentinel slot.
+- [1.69.0] token-bloat fix phase 1 — `hooks/sdlc-prompt-check.sh` BASELINE block (the ~250-token "TodoWrite FIRST / STATE CONFIDENCE / AUTO-INVOKE" reminder) now fires once per CC `session_id`. Saves ~12K tokens/session. SETUP-not-complete + EFFORT-bump warnings still fire every prompt (dynamic state).
+- [1.68.0–1.65.0] roadmap hygiene — five paperwork closes: #97 Anthropic Policy NO-GO + AAR-paper validating parallel; #99 AutoGPT NO-GO; #95 Nous NO-GO; #243 token-history liveness verified; #210 Node-24 false-green; #235 Thoughtworks AI Evals NO-GO. **6/6 external-product audits NO-GO** (continues #76, #77). Research write-ups in `.reviews/research-*.md`.
 - [1.64.0] XDLC ecosystem cross-references — README, wizard doc, and ROADMAP now cross-reference all three sibling packages (`agentic-sdlc-wizard`, `codex-sdlc-wizard`, `claude-gdlc-wizard`). New "Ecosystem (Sibling Projects)" section in README. 3 new doc-consistency tests prevent drift.
 - [1.63.0] cache-cost observability closeout (#204 absorbed by #220) — `tests/test-token-spike.sh` gains explicit cache-miss regression test + negative-control test. SDLC skill + wizard doc gain "Cache-Cost Surprises" sections covering 10-20× silent cost blowups (mid-session CLAUDE.md edits, idle pruning, upstream cache bugs) and detection via `hooks/token-spike-check.sh`'s `costly_tokens` metric.
 - [1.62.0] roadmap hygiene + #211 backfill — closes paperwork-stale rows (#207, #211 historical, #215, #217, #78, #79, #80, #219). Backfilled 5 corrupted `score-history.jsonl` rows from `max_score:10` → `max_score:11` (UI scenarios with design_system criterion). Codex strategic review confirmed scope.