cabloy 5.1.191 → 5.1.193

package/.cabloy-version

@@ -1 +1 @@
-5.1.191
+5.1.193

package/.github/workflows/agent-governance.yml

@@ -0,0 +1,39 @@
+name: agent-governance
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    env:
+      PNPM_CONFIG_MINIMUM_RELEASE_AGE: 0
+    steps:
+      - uses: actions/checkout@v6
+      - uses: pnpm/action-setup@v5
+        with:
+          version: 11.5.2
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          cache: pnpm
+      - name: install root dependencies
+        run: pnpm install --frozen-lockfile
+      - name: install docs dependencies
+        run: pnpm --dir repo-docs install --frozen-lockfile
+      - name: verify agent-governance assets
+        run: |
+          npm run test:agent-governance
+          npm run agent:governance:check
+          npm run agent:governance:pack-check
+          npm run test:spec-charts
+          npm run spec:charts:check -- a-commerce
+      - name: build documentation
+        run: npm run docs:build

package/.github/workflows/docs-pages.yml

@@ -5,6 +5,7 @@ on:
       - main
     paths:
       - 'repo-docs/**'
+      - 'repo-agent-governance/**'
       - 'repo-e2e/docs/**'
       - 'package.json'
       - 'pnpm-lock.yaml'

package/.gitignore

@@ -78,3 +78,6 @@ vona/docker-compose.yml
 !/zova/packages-utils/quasar-app-extension-zova/dist
 
 **/assets/site
+
+**/.claude/scheduled_tasks.lock
+.cabloy-agent-governance-state.json

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 5.1.193
+
+### Features
+
+- Add support for Cursor and Codex agents.
+- Update agent capabilities and integrations.
+
+## 5.1.192
+
+### Features
+
+- Update core functionality.
+- Add agents for Claude Code, Codex, and Cursor.
+
 ## 5.1.191
 
 ### Features

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cabloy",
-  "version": "5.1.191",
+  "version": "5.1.193",
   "gitHead": "2c5c19284bab738e492856189acb6fad74b8a7b7",
   "description": "A Node.js fullstack framework",
   "keywords": [
@@ -57,9 +57,9 @@
     "format:fix": "oxfmt --write",
     "lint": "oxlint --disable-nested-config",
     "lint:fix": "oxlint --disable-nested-config --fix",
-    "test:spec-charts": "node --test .claude/skills/cabloy-spec-generation/scripts/generate-implementation-charts.test.mjs",
-    "spec:charts": "node ./.claude/skills/cabloy-spec-generation/scripts/generate-implementation-charts.mjs",
-    "spec:charts:check": "node ./.claude/skills/cabloy-spec-generation/scripts/generate-implementation-charts.mjs --check",
+    "test:spec-charts": "node --test repo-agent-governance/tools/spec-charts/generate-implementation-charts.test.mjs",
+    "spec:charts": "node ./repo-agent-governance/tools/spec-charts/generate-implementation-charts.mjs",
+    "spec:charts:check": "node ./repo-agent-governance/tools/spec-charts/generate-implementation-charts.mjs --check",
     "docs:dev": "pnpm --dir repo-docs docs:dev",
     "docs:build": "pnpm --dir repo-docs docs:build",
     "docs:preview": "pnpm --dir repo-docs docs:preview",
@@ -72,7 +72,13 @@
     "release:changelog": "node scripts/release.ts --changelog-only",
     "release:publish": "node scripts/release.ts --publish-only",
     "release:github": "node scripts/release.ts --release-only",
-    "prepare": "husky"
+    "prepare": "husky",
+    "agent:governance:render": "node repo-agent-governance/scripts/governance.mjs render",
+    "agent:governance:check": "node repo-agent-governance/scripts/governance.mjs check",
+    "agent:governance:adopt": "node repo-agent-governance/scripts/governance.mjs adopt",
+    "test:agent-governance": "node --test repo-agent-governance/tests/*.test.mjs",
+    "contract:gate": "node repo-agent-governance/tools/contract-loop/check.mjs",
+    "agent:governance:pack-check": "node repo-agent-governance/scripts/pack-check.mjs"
   },
   "devDependencies": {
     "@cabloy/dotenv": "^1.2.8",

package/repo-agent-governance/adapters/claude/contract-loop-gate.ts

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import {
+  evaluateEditedFile,
+  extractClaudeEditedFilePath,
+  formatClaudeHookOutput,
+  readHookPayload,
+} from '../../repo-agent-governance/tools/contract-loop/hook-runtime.mjs';
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '../..');
+
+function runClaudeHook(): number {
+  // Cursor can import this Claude-compatible bridge alongside its native hook. Its native
+  // Cursor adapter owns that event, so avoid duplicate context and reverse auto-sync work.
+  if (process.env.CURSOR_PROJECT_DIR) return 0;
+  const payload = readHookPayload();
+  if (!payload) return 0;
+  const evaluated = evaluateEditedFile(ROOT, extractClaudeEditedFilePath(payload));
+  if (!evaluated) return 0;
+  // eslint-disable-next-line
+  console.log(JSON.stringify(formatClaudeHookOutput(evaluated.message)));
+  return 0;
+}
+
+process.exit(runClaudeHook());

package/repo-agent-governance/adapters/codex/contract-loop-gate.mjs

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import {
+  evaluateCodexEditedFiles,
+  extractCodexEditedFiles,
+  formatCodexHookOutput,
+  readHookPayload,
+} from '../../repo-agent-governance/tools/contract-loop/hook-runtime.mjs';
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '../..');
+
+function runCodexHook() {
+  const payload = readHookPayload();
+  if (!payload) return 0;
+  const evaluated = evaluateCodexEditedFiles(ROOT, extractCodexEditedFiles(payload), payload.cwd);
+  if (!evaluated.length) return 0;
+  const message = evaluated.map(item => item.message).join('\n\n');
+  // eslint-disable-next-line
+  console.log(JSON.stringify(formatCodexHookOutput(message)));
+  return 0;
+}
+
+process.exit(runCodexHook());

package/repo-agent-governance/adapters/codex/hooks.json

@@ -0,0 +1,19 @@
+{
+  "description": "Cabloy repository lifecycle hooks generated from repo-agent-governance.",
+  "hooks": {
+    "PostToolUse": [
+      {
+        "matcher": "apply_patch|Edit|Write",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node -e \"const fs=require('node:fs'),path=require('node:path'),{pathToFileURL}=require('node:url');let d=process.cwd();for(;;){const h=path.join(d,'.codex','hooks','contract-loop-gate.mjs');if(fs.existsSync(h)){import(pathToFileURL(h).href);break}const p=path.dirname(d);if(p===d)break;d=p}\"",
+            "commandWindows": "node -e \"const fs=require('node:fs'),path=require('node:path'),{pathToFileURL}=require('node:url');let d=process.cwd();for(;;){const h=path.join(d,'.codex','hooks','contract-loop-gate.mjs');if(fs.existsSync(h)){import(pathToFileURL(h).href);break}const p=path.dirname(d);if(p===d)break;d=p}\"",
+            "timeout": 600,
+            "statusMessage": "Checking contract-loop gate"
+          }
+        ]
+      }
+    ]
+  }
+}

package/repo-agent-governance/adapters/cursor/contract-loop-gate.mjs

@@ -0,0 +1,28 @@
+#!/usr/bin/env node
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import {
+  evaluateEditedFile,
+  extractCursorEditedFilePath,
+  formatCursorHookOutput,
+  inferCursorHookEvent,
+  readHookPayload,
+} from '../../repo-agent-governance/tools/contract-loop/hook-runtime.mjs';
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '../..');
+
+function runCursorHook() {
+  const payload = readHookPayload();
+  if (!payload) return 0;
+  const evaluated = evaluateEditedFile(ROOT, extractCursorEditedFilePath(payload));
+  if (!evaluated) return 0;
+  const output = formatCursorHookOutput(evaluated.message, inferCursorHookEvent(payload));
+  if (output) {
+    // eslint-disable-next-line
+    console.log(JSON.stringify(output));
+  }
+  return 0;
+}
+
+process.exit(runCursorHook());

package/repo-agent-governance/adapters/cursor/hooks.json

@@ -0,0 +1,19 @@
+{
+  "version": 1,
+  "hooks": {
+    "postToolUse": [
+      {
+        "command": "node .cursor/hooks/contract-loop-gate.mjs",
+        "matcher": "Write",
+        "timeout": 600
+      }
+    ],
+    "afterTabFileEdit": [
+      {
+        "command": "node .cursor/hooks/contract-loop-gate.mjs",
+        "matcher": "TabWrite",
+        "timeout": 600
+      }
+    ]
+  }
+}

package/{.claude → repo-agent-governance}/commands/release.md

@@ -24,31 +24,31 @@ The release script at `scripts/release.ts` performs 4 steps for the public `cabl
 
 Only after the Basic preflight above succeeds, use the matching script that exists in the active root `package.json`:
 
-| Command | Description |
-|---------|-------------|
-| `pnpm release-patch` | Full release with patch version bump |
-| `pnpm release-minor` | Full release with minor version bump |
-| `pnpm release-major` | Full release with major version bump |
-| `pnpm release` | Full release with default patch bump |
-| `pnpm release:dry-run` | Preview what would happen without executing |
-| `pnpm release:changelog` | Only generate changelog (no version bump) |
-| `pnpm release:publish` | Only publish to npm |
-| `pnpm release:github` | Only create GitHub release |
+| Command                  | Description                                 |
+| ------------------------ | ------------------------------------------- |
+| `pnpm release-patch`     | Full release with patch version bump        |
+| `pnpm release-minor`     | Full release with minor version bump        |
+| `pnpm release-major`     | Full release with major version bump        |
+| `pnpm release`           | Full release with default patch bump        |
+| `pnpm release:dry-run`   | Preview what would happen without executing |
+| `pnpm release:changelog` | Only generate changelog (no version bump)   |
+| `pnpm release:publish`   | Only publish to npm                         |
+| `pnpm release:github`    | Only create GitHub release                  |
 
 Do not infer equivalent commands in Cabloy Start when this table is absent from its package scripts.
 
 ## CLI Options
 
-| Option | Description |
-|--------|-------------|
-| `--dry-run` | Show what would happen without executing |
-| `--changelog-only` | Only generate changelog (no version bump) |
-| `--publish-only` | Only publish to npm |
-| `--release-only` | Only create GitHub release |
-| `--skip-changelog` | Skip changelog generation |
-| `--skip-publish` | Skip npm publish |
-| `--skip-release` | Skip GitHub release |
-| `--no-ai` | Use raw commit list instead of AI for changelog |
+| Option             | Description                                     |
+| ------------------ | ----------------------------------------------- |
+| `--dry-run`        | Show what would happen without executing        |
+| `--changelog-only` | Only generate changelog (no version bump)       |
+| `--publish-only`   | Only publish to npm                             |
+| `--release-only`   | Only create GitHub release                      |
+| `--skip-changelog` | Skip changelog generation                       |
+| `--skip-publish`   | Skip npm publish                                |
+| `--skip-release`   | Skip GitHub release                             |
+| `--no-ai`          | Use raw commit list instead of AI for changelog |
 
 ## Execution