autoworkflow 3.1.4 → 3.1.5

package/.claude/commands/audit.md

@@ -19,10 +19,34 @@ Per `system/router.md`, audit is required for:
 ## Arguments
 - `/audit` - Run standard checks (UI + cycles)
 - `/audit project` - Full project scan (generates BLUEPRINT.md)
+- `/audit sync` - Compare BLUEPRINT vs code, one feature at a time
 - `/audit [feature name]` - Deep audit of specific feature
 
 ---
 
+## Core Principle: ONE FEATURE AT A TIME
+
+**NEVER audit multiple features simultaneously.** This prevents:
+- Information overload
+- Multiple incomplete features
+- User confusion
+
+```
+❌ WRONG: "Here are 15 features with gaps across your codebase..."
+✅ RIGHT: "Feature 1: User Auth. Here's what's missing. Fix now? → Done → Next feature..."
+```
+
+**Serial workflow:**
+```
+Feature 1 → Audit → Fix → Verify → ✅ Complete
+    ↓
+Feature 2 → Audit → Fix → Verify → ✅ Complete
+    ↓
+Feature 3 → ...
+```
+
+---
+
 ## Audit Types
 
 ### Type 1: Feature Audit (`/audit [feature]`)
@@ -207,7 +231,99 @@ Update both files with discovered information.
 
 ---
 
-### Type 3: Standard Audit (`/audit`)
+### Type 3: Blueprint Sync (`/audit sync`)
+
+Compare BLUEPRINT.md against actual code, **one feature at a time**.
+
+#### Step 1: Parse BLUEPRINT.md
+Extract features list from the Features section.
+
+#### Step 2: For EACH Feature (Serial)
+
+```
+Feature 1: [Name]
+    ↓
+Read BLUEPRINT requirements for this feature
+    ↓
+Scan code for this feature's implementation
+    ↓
+Compare: BLUEPRINT ↔ Code
+    ↓
+Report gaps (one feature only)
+    ↓
+Offer fixes
+    ↓
+Wait for user
+    ↓
+Fix if approved
+    ↓
+THEN → Feature 2
+```
+
+#### Step 3: Report Format (Per Feature)
+
+```
+## Blueprint Sync: Feature 1 of 5
+
+### 📘 User Authentication
+
+**BLUEPRINT says:**
+- Login with email/password
+- OAuth (Google, GitHub)
+- Password reset flow
+- Session management
+
+**Code has:**
+- ✅ Login with email/password (`src/auth/login.ts`)
+- ✅ OAuth Google (`src/auth/oauth.ts`)
+- ❌ OAuth GitHub - NOT FOUND
+- ⚠️ Password reset - Partial (no email sending)
+- ✅ Session management (`src/auth/session.ts`)
+
+**Sync Status:** 75% aligned
+
+---
+
+### Gap Analysis
+
+| Gap | Direction | Action |
+|-----|-----------|--------|
+| OAuth GitHub | 📘→💻 | In BLUEPRINT, not in code |
+| Password reset email | 📘→💻 | Incomplete implementation |
+
+### Suggested Actions
+
+1. **Implement OAuth GitHub** - Add GitHub provider to oauth.ts
+2. **Complete password reset** - Add email sending to reset flow
+
+---
+
+**Options:**
+- `implement` - Build missing code
+- `remove` - Remove from BLUEPRINT (if not needed)
+- `skip` - Move to next feature
+- `1` - Only action 1
+```
+
+#### Step 4: After User Action
+- If `implement`: Build the missing parts, verify, re-check
+- If `remove`: Update BLUEPRINT.md to remove the item
+- If `skip`: Log as skipped, move to next feature
+
+#### Step 5: Next Feature
+Only after current feature is resolved (fixed/skipped/removed), show next:
+
+```
+✅ Feature 1: User Authentication - SYNCED
+
+## Blueprint Sync: Feature 2 of 5
+
+### 📘 Dashboard...
+```
+
+---
+
+### Type 4: Standard Audit (`/audit`)
 
 Quick check for UI enforcement and circular dependencies.
 
@@ -275,21 +391,42 @@ Ready to proceed to COMMIT.
 
 ---
 
-## Critical Rule: Always Offer to Fix
+## Critical Rule: Complete Cycle Per Feature
 
-**NEVER** just report issues and move on. The workflow is:
+**NEVER** move to the next feature until the current one is FULLY resolved.
 
+**Complete cycle for ONE feature:**
+```
+1. AUDIT      → Find issues in Feature X
+2. REPORT     → Show issues with severity
+3. SUGGEST    → Offer specific fixes
+4. WAIT       → Get user approval
+5. IMPLEMENT  → Make the approved changes
+6. VERIFY     → Run npm run verify
+7. RE-AUDIT   → Check Feature X again
+8. CONFIRM    → Feature X is now complete? ✅
+9. THEN       → Move to Feature X+1
 ```
-1. AUDIT → Find issues
-2. REPORT → Show issues with severity
-3. SUGGEST → Offer specific fixes
-4. WAIT → Get user approval
-5. FIX → Implement approved fixes
-6. RE-AUDIT → Verify fixes worked
-7. THEN → Proceed to next item
+
+**What "complete" means:**
+- All approved fixes implemented
+- Verification passes (no TS/ESLint errors)
+- Re-audit shows no remaining issues
+- User confirms ready to move on
+
+**If user says "skip":**
+- Log as skipped with reason
+- Mark feature as incomplete in tracking
+- Move to next feature
+- DO NOT leave silently
+
 ```
+❌ WRONG:
+"Found 3 issues in Auth. Found 2 issues in Dashboard. Found 5 issues in Settings..."
 
-If user says "no" to fixes, log it and proceed. But ALWAYS offer.
+✅ RIGHT:
+"Found 3 issues in Auth. Fix? → [fixes] → Verify → Pass → Auth complete ✅ → Dashboard?"
+```
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "autoworkflow",
-  "version": "3.1.4",
+  "version": "3.1.5",
   "description": "Automated workflow enforcement for Claude Code via hooks and system prompts",
   "type": "module",
   "bin": {