catalyst-os 2.0.3 → 3.0.0

package/.catalyst/bin/install.js

@@ -86,6 +86,27 @@ function copyFile(src, dest) {
   return false;
 }
 
+/**
+ * Ensure the consuming project's .gitignore protects local secrets.
+ * If `.catalyst/` (or the secrets file) is already ignored, do nothing.
+ */
+function ensureGitignore(cwd) {
+  const guard = '.catalyst/secrets.local.yaml';
+  const gitignorePath = path.join(cwd, '.gitignore');
+  let content = '';
+  if (fs.existsSync(gitignorePath)) {
+    content = fs.readFileSync(gitignorePath, 'utf8');
+    const lines = content.split(/\r?\n/).map((l) => l.trim());
+    const covered = lines.some(
+      (l) => l === guard || l === '/.catalyst' || l === '.catalyst' || l === '.catalyst/'
+    );
+    if (covered) return;
+  }
+  const block = `${content && !content.endsWith('\n') ? '\n' : ''}\n# Catalyst OS local secrets (never commit)\n${guard}\n`;
+  fs.appendFileSync(gitignorePath, block);
+  console.log(`  ${green}✓${reset} Added ${guard} to .gitignore`);
+}
+
 /**
  * Install catalyst-os to current directory
  */
@@ -142,6 +163,14 @@ function install() {
     }
   }
 
+  // Install voice runtime (zero-dependency local meeting daemon for /meet-spec)
+  const voiceSrc = path.join(src, '.catalyst', 'voice');
+  const voiceDest = path.join(catalystDir, 'voice');
+  if (fs.existsSync(voiceSrc)) {
+    copyDir(voiceSrc, voiceDest);
+    console.log(`  ${green}✓${reset} Installed .catalyst/voice/`);
+  }
+
   // Create specs directory if it doesn't exist
   const specsDir = path.join(catalystDir, 'specs');
   if (!fs.existsSync(specsDir)) {
@@ -149,6 +178,23 @@ function install() {
     console.log(`  ${green}✓${reset} Created .catalyst/specs/`);
   }
 
+  // Create a local secrets file (git-ignored) if it doesn't exist yet.
+  // Optional — only needed for voice meetings (/meet-spec).
+  const secretsPath = path.join(catalystDir, 'secrets.local.yaml');
+  if (!fs.existsSync(secretsPath)) {
+    fs.writeFileSync(
+      secretsPath,
+      '# Catalyst OS — Local Secrets (git-ignored, never commit)\n' +
+        '# Optional. Only needed for /meet-spec voice meetings.\n' +
+        '# Get a key at https://elevenlabs.io (you pay for your own usage).\n' +
+        'elevenlabs_api_key: ""\n'
+    );
+    console.log(`  ${green}✓${reset} Created .catalyst/secrets.local.yaml`);
+  }
+
+  // Safety belt: ensure the local secrets file can never be committed.
+  ensureGitignore(cwd);
+
   // Install AGENTS.md
   const agentsMdSrc = path.join(src, 'AGENTS.md');
   const agentsMdDest = path.join(cwd, 'AGENTS.md');

package/.catalyst/main/project-config.yaml

@@ -33,3 +33,19 @@ git:
     red_phase: "test({scope}): write failing tests for {spec}"
     green_phase: "feat({scope}): implement {spec}"
 
+# Voice meetings (/meet-spec) — optional.
+# See .catalyst/voice/README.md for setup.
+voice:
+  enabled: false            # set true to enable /meet-spec
+  language: "en"            # meeting/conversation language (e.g. "tr"); artifacts stay English
+
+  # mode: diy = browser speech + local `claude -p` brain. FREE, no API key, needs Chrome.
+  #       bundled = ElevenLabs Conversational AI. Nicer voice, per-minute cost (BYOK).
+  mode: diy
+
+  # --- bundled mode only (ignored in diy) ---
+  # The ElevenLabs API key does NOT go here — it lives in .catalyst/secrets.local.yaml.
+  provider: elevenlabs
+  voice_id: ""              # optional ElevenLabs voice id
+  agent_id: ""              # ElevenLabs Conversational AI agent id
+

package/.catalyst/spec-structure.yaml

@@ -46,7 +46,7 @@ files:
     owner: arbiter
     purpose: Test results, quality checks
     created: audit-spec
-    updated_by: [arbiter, enforcer, sentinel, inquisitor, watcher]
+    updated_by: [arbiter, enforcer, sentinel, inquisitor, watcher, curator]
 
   assets/:
     owner: any

package/.catalyst/voice/README.md

@@ -0,0 +1,78 @@
+# Catalyst Voice Runtime
+
+Local browser meeting room for `/meet-spec`. **Zero npm dependencies** — Node stdlib
+only. Requires **Node >= 18** and the `claude` CLI on your PATH.
+
+Two modes, set by `voice.mode` in `.catalyst/main/project-config.yaml`:
+
+| | **diy** (default) | **bundled** |
+|---|---|---|
+| Speech | Browser Web Speech API | ElevenLabs Conversational AI |
+| Brain | Local `claude -p` | ElevenLabs agent (Claude LLM) |
+| Voice quality | Robotic (browser TTS) | Natural |
+| Cost | **Free** (uses your Claude) | ~$0.10–$1/min (ElevenLabs, BYOK) |
+| Setup | None — just Chrome | API key + agent (see below) |
+
+Both modes give the agent full read access to the codebase, docs, and web search, and
+both write the same `meeting.md` artifact. **Artifacts are always in English**, whatever
+language the meeting is spoken in (set `voice.language`, e.g. `"tr"`).
+
+## DIY mode (default — nothing to set up)
+
+```yaml
+voice:
+  enabled: true
+  language: "tr"      # or "en", etc.
+  mode: diy
+```
+
+Open the room (via `/meet-spec`), click **Start meeting**, and talk. Chrome transcribes
+your speech, `claude -p` answers from the real repo, and the browser speaks the reply.
+You can also **type** in the text box at any time (great when speech is misheard). Needs
+Chrome/Chromium for speech; in other browsers, the text box still works.
+
+## Bundled mode (optional — nicer voice, paid)
+
+1. **Get an ElevenLabs API key** at https://elevenlabs.io. Conversational AI is billed
+   **per minute** (~1,000 credits/min on credit plans), so prefer a plan with included
+   agent-minutes. Paste the key into `.catalyst/secrets.local.yaml`:
+   ```yaml
+   elevenlabs_api_key: "your-key-here"
+   ```
+2. **Create a Conversational AI agent** (dashboard): LLM = Claude; a spec-shaping
+   interviewer system prompt; a **client tool** named exactly **`investigate_codebase`**
+   with one **string** parameter **`query`**. For non-English, enable the **language
+   override** (Security/Overrides → Language) and use a multilingual TTS model
+   (`eleven_flash_v2_5`).
+3. **Point Catalyst at it**:
+   ```yaml
+   voice:
+     enabled: true
+     language: "tr"
+     mode: bundled
+     agent_id: "your-agent-id"
+   ```
+   The key is read server-side by `meet-server.js` and never reaches the browser, argv,
+   or env. Signed URLs are minted server-side; client tools run in the browser so they
+   reach `localhost` — nothing is exposed to the internet.
+
+## How it works
+
+```
+diy:      Browser (Web Speech)  ──text──►  meet-server /turn  ──►  claude -p (repo)  ──►  reply ──► browser TTS
+bundled:  Browser (ElevenLabs SDK)  ◄─voice─►  ElevenLabs agent
+              └─ investigate_codebase ─► meet-server /tool ─► claude -p (repo)
+```
+
+Clicking **End meeting** sends the transcript to the daemon, which folds it into
+`.catalyst/meetings/YYYY-MM-DD-{slug}/meeting.md` via one `claude -p` pass, then shuts down.
+
+## Run it manually
+
+```bash
+PORT=4399 \
+MEETING_DIR=".catalyst/meetings/2026-01-01-test" \
+MEETING_TOPIC="Test meeting" \
+node .catalyst/voice/meet-server.js
+# then open http://localhost:4399
+```

package/.catalyst/voice/artifact.js

@@ -0,0 +1,61 @@
+/**
+ * Meeting artifact generation for /meet-spec.
+ * Writes meeting.md (canonical, for /catalyze-spec) and meeting.html (rendered, for humans).
+ */
+const fs = require('fs');
+const path = require('path');
+
+function esc(s) {
+  return String(s).replace(/[&<>]/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;' }[c]));
+}
+
+// One-pass transcript summarizer (bundled mode, or when no live notes were produced).
+const SUMMARY_PROMPT = (topic, transcript) =>
+  `You are summarizing a spec-shaping meeting. Convert the transcript below into clean ` +
+  `Markdown that another command (/catalyze-spec) will use as the feature request.\n\n` +
+  `Write the notes in ENGLISH regardless of the language spoken in the meeting.\n\n` +
+  `Output EXACTLY these sections, nothing before or after:\n\n` +
+  `# Meeting: ${topic}\n\n## Summary\n(one paragraph)\n\n## Decisions\n(bullet list of ` +
+  `decisions reached; "None recorded." if none)\n\n## Action Items\n(bullet list of ` +
+  `requirements / things to build)\n\n## Open Questions\n(bullet list of unresolved ` +
+  `questions)\n\n## Transcript\n(the full transcript, lightly cleaned)\n\n` +
+  `--- TRANSCRIPT ---\n${transcript}`;
+
+// notesHtml is the browser-rendered notes (DIY); falls back to <pre> if absent.
+function writeArtifacts({ projectRoot, meetingDir, topic, notesMd, notesHtml, transcriptText, findings }) {
+  const dir = path.join(projectRoot, meetingDir);
+  fs.mkdirSync(dir, { recursive: true });
+
+  const research = findings && findings.length
+    ? '\n\n## Research Findings\n\n' + findings.map((f) => `### ${f.query}\n\n${f.result}`).join('\n\n')
+    : '';
+  const notesBody = notesMd.startsWith('#') ? notesMd : `# Meeting: ${topic}\n\n${notesMd}`;
+  const md = `${notesBody}\n\n## Transcript\n\n${transcriptText}\n${research}`;
+  fs.writeFileSync(path.join(dir, 'meeting.md'), md);
+
+  const notesSection = notesHtml || `<pre>${esc(notesMd)}</pre>`;
+  const transcriptHtml = transcriptText.split('\n').map((l) => `<p>${esc(l)}</p>`).join('\n');
+  const html = `<!doctype html>
+<html lang="en"><head><meta charset="utf-8" />
+<title>Meeting: ${esc(topic)}</title>
+<style>
+  body{font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;max-width:820px;
+    margin:40px auto;padding:0 20px;line-height:1.6;color:#1a1a24}
+  h1{font-size:24px} h2{font-size:18px;margin-top:28px;border-bottom:1px solid #eee;padding-bottom:4px}
+  .notes{background:#faf9ff;border:1px solid #ece8ff;border-radius:10px;padding:18px 22px}
+  .transcript p{margin:2px 0;color:#444;font-size:14px}
+  code{background:#f3f1fa;padding:2px 5px;border-radius:4px}
+</style></head>
+<body>
+<h1>Meeting: ${esc(topic)}</h1>
+<section class="notes">${notesSection}</section>
+<h2>Transcript</h2>
+<div class="transcript">${transcriptHtml}</div>
+</body></html>
+`;
+  fs.writeFileSync(path.join(dir, 'meeting.html'), html);
+
+  return { mdPath: path.join(meetingDir, 'meeting.md'), htmlPath: path.join(meetingDir, 'meeting.html') };
+}
+
+module.exports = { writeArtifacts, SUMMARY_PROMPT };

package/.catalyst/voice/meet-server.js

@@ -0,0 +1,293 @@
+#!/usr/bin/env node
+/**
+ * Local voice-meeting daemon for /meet-spec.
+ *
+ * Zero npm dependencies: Node stdlib + global fetch (Node >= 18) + child_process.
+ *
+ * Two modes (project-config voice.mode):
+ *   diy      — browser Web Speech (free) + local `claude -p` brain. No ElevenLabs, no cost.
+ *   bundled  — ElevenLabs Conversational AI (better voice, per-minute cost).
+ *
+ * Responsibilities:
+ *   GET  /              serve the meeting room page (diy or bundled)
+ *   GET  /config        non-secret config for the browser (mode, agentId, language, topic)
+ *   GET  /signed-url     bundled: mint an ElevenLabs signed URL (key stays server-side)
+ *   POST /turn          diy: one conversational turn via headless `claude -p`
+ *   POST /tool          bundled: live codebase investigation via headless `claude -p`
+ *   POST /end           fold transcript (+ findings) into meeting.md, then shut down
+ *
+ * The ElevenLabs API key (bundled only) is read from .catalyst/secrets.local.yaml and
+ * never leaves this process (not the browser, not argv, not the environment).
+ */
+
+const http = require('http');
+const fs = require('fs');
+const path = require('path');
+const { spawn } = require('child_process');
+const { writeArtifacts, SUMMARY_PROMPT } = require('./artifact');
+
+const PROJECT_ROOT = process.cwd();
+const PORT = parseInt(process.env.PORT || '4399', 10);
+const MEETING_DIR = process.env.MEETING_DIR || '.catalyst/meetings/untitled';
+const MEETING_TOPIC = process.env.MEETING_TOPIC || 'Untitled meeting';
+
+// Read-only tool whitelist for headless claude runs. Non-listed tools are
+// auto-denied in -p mode, so there are no interactive permission hangs.
+const CLAUDE_TOOLS = 'Read,Grep,Glob,Task,WebSearch,WebFetch';
+
+// --- Config / secrets (minimal YAML reads, no parser dependency) ---
+
+function readScalar(relPath, key) {
+  try {
+    const txt = fs.readFileSync(path.join(PROJECT_ROOT, relPath), 'utf8');
+    const m = txt.match(new RegExp('^\\s*' + key + ':\\s*["\']?([^"\'\\n]*)["\']?', 'm'));
+    return m ? m[1].trim() : '';
+  } catch {
+    return '';
+  }
+}
+
+const API_KEY = readScalar('.catalyst/secrets.local.yaml', 'elevenlabs_api_key');
+const AGENT_ID = readScalar('.catalyst/main/project-config.yaml', 'agent_id');
+const VOICE_ID = readScalar('.catalyst/main/project-config.yaml', 'voice_id');
+const LANGUAGE = readScalar('.catalyst/main/project-config.yaml', 'language') || 'en';
+// bundled = ElevenLabs Conversational AI; diy = browser speech + local claude -p (free).
+const MODE = readScalar('.catalyst/main/project-config.yaml', 'mode') || 'bundled';
+const HTML_PATH = path.join(__dirname, MODE === 'diy' ? 'meeting-diy.html' : 'meeting.html');
+
+// In DIY mode the "agent" is claude -p itself, driven turn by turn.
+const PERSONA =
+  `You are Catalyst, a spec-shaping interviewer for this software project. Hold a focused, ` +
+  `friendly spoken meeting that turns a rough idea into a clear feature specification. ` +
+  `Speak in ${LANGUAGE === 'tr' ? 'Turkish' : "the user's language"}. Ask ONE question at a ` +
+  `time and keep each spoken turn short (1-3 sentences). You have full read access to this ` +
+  `repository, its documentation, and web search — use them to ground your questions and ` +
+  `answers; never guess about the code. Drive toward: the problem, scope, concrete ` +
+  `requirements, key decisions, and action items. Be patient: if the user is brief or silent, ` +
+  `wait — never nag with "are you there?".\n\n` +
+  `OUTPUT FORMAT (strict, every turn): first your spoken words ONLY (no markdown). Then a ` +
+  `line containing exactly ===NOTES=== . Then the running meeting notes in Markdown, IN ` +
+  `ENGLISH, cumulative (carry forward everything so far and refine it), with these sections:\n` +
+  `## Summary\n## Decisions\n## Action Items\n## Open Questions\n` +
+  `The spoken part is for text-to-speech; the notes part is never spoken.`;
+
+const NOTES_DELIM = '===NOTES===';
+
+// Live investigation findings, folded into the artifact at the end.
+const findings = [];
+// DIY conversation session (claude -p --resume keeps context across turns).
+let sessionId = null;
+// Latest running notes (Markdown) maintained across DIY turns.
+let latestNotes = '';
+
+// --- Headless claude bridge ---
+
+function runClaude(prompt, timeoutMs) {
+  return new Promise((resolve) => {
+    let child;
+    try {
+      child = spawn('claude', ['-p', '--allowedTools', CLAUDE_TOOLS], {
+        cwd: PROJECT_ROOT,
+      });
+    } catch (e) {
+      return resolve(`(could not start claude: ${e.message})`);
+    }
+    let out = '';
+    let err = '';
+    const timer = setTimeout(() => {
+      child.kill('SIGTERM');
+      resolve(out.trim() || '(investigation timed out)');
+    }, timeoutMs);
+
+    child.stdout.on('data', (d) => (out += d));
+    child.stderr.on('data', (d) => (err += d));
+    child.on('error', (e) => {
+      clearTimeout(timer);
+      resolve(`(claude not available: ${e.message})`);
+    });
+    child.on('close', () => {
+      clearTimeout(timer);
+      resolve(out.trim() || err.trim() || '(no output)');
+    });
+
+    child.stdin.write(prompt);
+    child.stdin.end();
+  });
+}
+
+// One conversational turn for DIY mode. Uses --resume to keep context (and the
+// codebase warm) across turns; the persona is sent only on the first turn.
+function claudeTurn(userText) {
+  return new Promise((resolve) => {
+    const args = ['-p', '--output-format', 'json', '--allowedTools', CLAUDE_TOOLS];
+    if (sessionId) args.push('--resume', sessionId);
+    const prompt = sessionId
+      ? userText
+      : `${PERSONA}\n\nThe meeting topic is: ${MEETING_TOPIC}\n\nUser: ${userText}`;
+    let child;
+    try {
+      child = spawn('claude', args, { cwd: PROJECT_ROOT });
+    } catch (e) {
+      return resolve({ reply: `(claude unavailable: ${e.message})`, notes: latestNotes });
+    }
+    let out = '';
+    let err = '';
+    const timer = setTimeout(() => {
+      child.kill('SIGTERM');
+      resolve(splitTurn(out) || { reply: '(timed out)', notes: latestNotes });
+    }, 150000);
+    child.stdout.on('data', (d) => (out += d));
+    child.stderr.on('data', (d) => (err += d));
+    child.on('error', (e) => {
+      clearTimeout(timer);
+      resolve({ reply: `(claude unavailable: ${e.message})`, notes: latestNotes });
+    });
+    child.on('close', () => {
+      clearTimeout(timer);
+      let result = out.trim();
+      try {
+        const j = JSON.parse(out);
+        result = (j.result || '').trim();
+        if (j.session_id) sessionId = j.session_id;
+      } catch {
+        /* non-JSON output: fall back to raw text */
+      }
+      resolve(splitTurn(result) || { reply: err.trim() || '(no response)', notes: latestNotes });
+    });
+    child.stdin.write(prompt);
+    child.stdin.end();
+  });
+}
+
+// Split a turn's result into spoken reply + running notes. Updates latestNotes.
+// If the delimiter is missing, treat everything as the reply and keep prior notes.
+function splitTurn(result) {
+  if (!result) return null;
+  const i = result.indexOf(NOTES_DELIM);
+  if (i < 0) return { reply: result.trim(), notes: latestNotes };
+  const reply = result.slice(0, i).trim();
+  const notes = result.slice(i + NOTES_DELIM.length).trim();
+  if (notes) latestNotes = notes;
+  return { reply: reply || '(no response)', notes: latestNotes };
+}
+
+// --- HTTP helpers ---
+
+function sendJson(res, code, obj) {
+  const body = JSON.stringify(obj);
+  res.writeHead(code, { 'Content-Type': 'application/json' });
+  res.end(body);
+}
+
+function readBody(req) {
+  return new Promise((resolve) => {
+    let data = '';
+    req.on('data', (c) => (data += c));
+    req.on('end', () => {
+      try {
+        resolve(data ? JSON.parse(data) : {});
+      } catch {
+        resolve({});
+      }
+    });
+  });
+}
+
+// --- Server ---
+
+const server = http.createServer(async (req, res) => {
+  const url = (req.url || '/').split('?')[0];
+
+  if (req.method === 'GET' && url === '/') {
+    fs.readFile(HTML_PATH, (e, buf) => {
+      if (e) {
+        res.writeHead(500);
+        res.end('meeting.html not found');
+      } else {
+        res.writeHead(200, { 'Content-Type': 'text/html' });
+        res.end(buf);
+      }
+    });
+    return;
+  }
+
+  if (req.method === 'GET' && url === '/config') {
+    return sendJson(res, 200, {
+      mode: MODE,
+      agentId: AGENT_ID,
+      voiceId: VOICE_ID,
+      topic: MEETING_TOPIC,
+      language: LANGUAGE,
+    });
+  }
+
+  if (req.method === 'GET' && url === '/signed-url') {
+    if (!API_KEY || !AGENT_ID) {
+      return sendJson(res, 200, { signedUrl: null });
+    }
+    try {
+      const r = await fetch(
+        `https://api.elevenlabs.io/v1/convai/conversation/get-signed-url?agent_id=${AGENT_ID}`,
+        { headers: { 'xi-api-key': API_KEY } }
+      );
+      const j = await r.json();
+      return sendJson(res, 200, { signedUrl: j.signed_url || null });
+    } catch (e) {
+      return sendJson(res, 200, { signedUrl: null, error: e.message });
+    }
+  }
+
+  if (req.method === 'POST' && url === '/tool') {
+    const { query } = await readBody(req);
+    if (!query) return sendJson(res, 400, { result: '(empty query)' });
+    const prompt =
+      `You are assisting a live spec meeting. Investigate this codebase and answer ` +
+      `concisely (max ~150 words), citing files where useful. Question: ${query}`;
+    const result = await runClaude(prompt, 120000);
+    findings.push({ query, result });
+    return sendJson(res, 200, { result });
+  }
+
+  if (req.method === 'POST' && url === '/turn') {
+    const { text } = await readBody(req);
+    if (!text) return sendJson(res, 400, { reply: '', notes: latestNotes });
+    const { reply, notes } = await claudeTurn(text);
+    return sendJson(res, 200, { reply, notes });
+  }
+
+  if (req.method === 'POST' && url === '/end') {
+    const { transcript, notesMd, notesHtml } = await readBody(req);
+    const text = (transcript || '').trim() || '(empty transcript)';
+    // Prefer the notes maintained live during the meeting; otherwise summarize the
+    // transcript in one pass (bundled mode, or if no notes were produced).
+    let notes = (notesMd || latestNotes || '').trim();
+    if (!notes) notes = await runClaude(SUMMARY_PROMPT(MEETING_TOPIC, text), 180000);
+    const { mdPath, htmlPath } = writeArtifacts({
+      projectRoot: PROJECT_ROOT,
+      meetingDir: MEETING_DIR,
+      topic: MEETING_TOPIC,
+      notesMd: notes,
+      notesHtml,
+      transcriptText: text,
+      findings,
+    });
+    sendJson(res, 200, { path: mdPath, htmlPath });
+    console.log(`\n  ✓ Meeting artifacts written:\n    ${mdPath}\n    ${htmlPath}`);
+    setTimeout(() => server.close(() => process.exit(0)), 500);
+    return;
+  }
+
+  res.writeHead(404);
+  res.end('not found');
+});
+
+server.listen(PORT, () => {
+  console.log(`\n  Catalyst meeting room: http://localhost:${PORT}`);
+  console.log(`  Topic: ${MEETING_TOPIC}  ·  Mode: ${MODE}  ·  Language: ${LANGUAGE}`);
+  if (MODE === 'diy') {
+    console.log('  DIY mode: browser speech + local claude -p (no ElevenLabs, no cost).');
+  } else {
+    if (!API_KEY) console.log('  ⚠ No elevenlabs_api_key in .catalyst/secrets.local.yaml');
+    if (!AGENT_ID) console.log('  ⚠ No voice.agent_id in project-config.yaml');
+  }
+});

package/.catalyst/voice/meeting-diy.html

@@ -0,0 +1,205 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>Catalyst Meeting Room (DIY)</title>
+  <script src="https://cdn.jsdelivr.net/npm/marked@12/marked.min.js"></script>
+  <style>
+    :root { --bg:#0e0e14; --panel:#1a1a24; --accent:#4fd1a5; --text:#e8e8f0; --dim:#8a8a9a; }
+    * { box-sizing: border-box; }
+    body { margin:0; font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;
+      background:var(--bg); color:var(--text); }
+    .room { max-width:1080px; margin:0 auto; padding:28px 24px; }
+    h1 { font-size:20px; font-weight:600; margin:0 0 4px; }
+    .topic { color:var(--dim); margin:0 0 22px; font-size:14px; }
+    .split { display:flex; gap:20px; align-items:flex-start; }
+    .notes-pane { flex:1; min-width:0; background:var(--panel); border:1px solid #2a2a36;
+      border-radius:12px; overflow:hidden; }
+    .chat-pane { width:360px; flex:none; }
+    @media (max-width:820px){ .split{flex-direction:column;} .chat-pane{width:100%;} }
+    .pane-h { padding:12px 16px; font-size:13px; font-weight:600; color:var(--dim);
+      border-bottom:1px solid #2a2a36; letter-spacing:.04em; text-transform:uppercase; }
+    .notes { padding:6px 20px 18px; max-height:62vh; overflow-y:auto; font-size:14px; line-height:1.55; }
+    .notes h1 { font-size:18px; } .notes h2 { font-size:15px; color:var(--accent); margin:18px 0 6px; }
+    .notes ul { margin:6px 0; padding-left:20px; } .notes li { margin:3px 0; }
+    .notes .empty { color:var(--dim); font-style:italic; }
+    .controls { text-align:center; }
+    .orb { width:84px; height:84px; border-radius:50%; margin:6px auto 12px;
+      background:radial-gradient(circle at 35% 35%, #8fe6c8, var(--accent));
+      box-shadow:0 0 0 0 rgba(79,209,165,.5); transition:transform .2s; }
+    .orb.listening { animation:pulse 2s infinite; }
+    .orb.speaking { animation:pulse .7s infinite; transform:scale(1.08); }
+    .orb.thinking { background:radial-gradient(circle at 35% 35%,#ffd27a,#ff9b3d); animation:spin 1.1s linear infinite; }
+    @keyframes pulse { 0%{box-shadow:0 0 0 0 rgba(79,209,165,.5);} 70%{box-shadow:0 0 0 18px rgba(79,209,165,0);} 100%{box-shadow:0 0 0 0 rgba(79,209,165,0);} }
+    @keyframes spin { to { transform:rotate(360deg);} }
+    .status { color:var(--dim); min-height:20px; margin-bottom:14px; font-size:13px; }
+    .btns { display:flex; gap:10px; justify-content:center; }
+    button { border:none; border-radius:10px; padding:10px 18px; font-size:14px; font-weight:600; cursor:pointer; }
+    .start { background:var(--accent); color:#06281e; } .end { background:#2a2a36; color:var(--text); }
+    button:disabled { opacity:.4; cursor:not-allowed; }
+    .chat { display:flex; gap:8px; margin-top:14px; }
+    .chat input { flex:1; min-width:0; background:var(--panel); border:1px solid #2a2a36; color:var(--text);
+      border-radius:8px; padding:9px 11px; font-size:14px; }
+    .chat input:focus { outline:none; border-color:var(--accent); }
+    .chat button { background:#2a2a36; color:var(--text); }
+    .log { margin-top:14px; background:var(--panel); border:1px solid #2a2a36; border-radius:10px;
+      padding:12px; max-height:34vh; overflow-y:auto; font-size:13px; line-height:1.5; }
+    .log .u { color:#7fd1ff; } .log .a { color:#8fe6c8; } .log .t { color:var(--dim); font-style:italic; }
+    .hint { color:var(--dim); font-size:12px; margin-top:16px; }
+    .done { text-align:center; padding:30px; } .done code { background:var(--panel); padding:4px 8px; border-radius:6px; }
+  </style>
+</head>
+<body>
+  <div class="room">
+    <h1>Catalyst Meeting Room</h1>
+    <p class="topic" id="topic">Loading…</p>
+    <div class="split">
+      <section class="notes-pane">
+        <div class="pane-h">Meeting Notes — live</div>
+        <div class="notes" id="notes"><p class="empty">Notes will build up here as you talk…</p></div>
+      </section>
+      <section class="chat-pane">
+        <div class="controls">
+          <div class="orb" id="orb"></div>
+          <div class="status" id="status">Ready when you are.</div>
+          <div class="btns">
+            <button class="start" id="startBtn">Start</button>
+            <button class="end" id="endBtn" disabled>End meeting</button>
+          </div>
+        </div>
+        <div class="chat" id="chatRow" hidden>
+          <input id="chatInput" type="text" placeholder="Type instead of speaking…" autocomplete="off" />
+          <button id="chatSend">Send</button>
+        </div>
+        <div class="log" id="log"></div>
+      </section>
+    </div>
+    <p class="hint">Free mode: browser speech + Claude reading the codebase. No ElevenLabs.</p>
+  </div>
+
+  <script>
+    const $ = (id) => document.getElementById(id);
+    const orb = $('orb'), status = $('status'), log = $('log'), notes = $('notes');
+    const startBtn = $('startBtn'), endBtn = $('endBtn');
+    const chatRow = $('chatRow'), chatInput = $('chatInput'), chatSend = $('chatSend');
+
+    const LANG_MAP = { tr: 'tr-TR', en: 'en-US', de: 'de-DE', fr: 'fr-FR', es: 'es-ES' };
+    const transcript = [];
+    let lang = 'en-US', ended = false, busy = false;
+    let recognition = null, wantListen = false;
+    let lastNotesMd = '', lastNotesHtml = '';
+
+    fetch('/config').then(r => r.json()).then(c => {
+      $('topic').textContent = c.topic || 'Untitled meeting';
+      lang = LANG_MAP[c.language] || c.language || 'en-US';
+    });
+
+    function setStatus(t) { status.textContent = t; }
+    function setOrb(cls) { orb.className = 'orb' + (cls ? ' ' + cls : ''); }
+    function esc(s){ return String(s).replace(/[&<>]/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;'}[c])); }
+    function addLine(kind, text) {
+      const cls = kind === 'user' ? 'u' : kind === 'ai' ? 'a' : 't';
+      const who = kind === 'user' ? 'You' : kind === 'ai' ? 'Catalyst' : '·';
+      const div = document.createElement('div');
+      div.className = cls; div.textContent = `${who}: ${text}`;
+      log.appendChild(div); log.scrollTop = log.scrollHeight;
+      if (kind === 'user' || kind === 'ai') transcript.push(`${who}: ${text}`);
+    }
+    function renderNotes(md) {
+      if (!md) return;
+      lastNotesMd = md;
+      lastNotesHtml = (window.marked && marked.parse) ? marked.parse(md) : `<pre>${esc(md)}</pre>`;
+      notes.innerHTML = lastNotesHtml;
+    }
+
+    function speak(text) {
+      return new Promise((resolve) => {
+        if (!('speechSynthesis' in window)) return resolve();
+        const u = new SpeechSynthesisUtterance(text);
+        u.lang = lang; u.onend = resolve; u.onerror = resolve;
+        setOrb('speaking'); setStatus('Catalyst is speaking…');
+        speechSynthesis.speak(u);
+      });
+    }
+
+    async function handleTurn(text) {
+      if (!text || busy || ended) return;
+      busy = true; stopListening();
+      addLine('user', text);
+      setOrb('thinking'); setStatus('Thinking… (reading the codebase)');
+      let reply = '(no response)';
+      try {
+        const r = await fetch('/turn', {
+          method: 'POST', headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ text }),
+        });
+        const data = await r.json();
+        reply = data.reply || reply;
+        renderNotes(data.notes);
+      } catch (e) { reply = 'Error: ' + (e?.message || e); }
+      addLine('ai', reply);
+      await speak(reply);
+      busy = false;
+      if (!ended) startListening();
+    }
+
+    function buildRecognition() {
+      const SR = window.SpeechRecognition || window.webkitSpeechRecognition;
+      if (!SR) return null;
+      const rec = new SR();
+      rec.lang = lang; rec.continuous = false; rec.interimResults = true;
+      rec.onresult = (e) => {
+        let finalText = '';
+        for (let i = e.resultIndex; i < e.results.length; i++) {
+          if (e.results[i].isFinal) finalText += e.results[i][0].transcript;
+          else setStatus('… ' + e.results[i][0].transcript);
+        }
+        if (finalText.trim()) handleTurn(finalText.trim());
+      };
+      rec.onend = () => { if (wantListen && !busy && !ended) { try { rec.start(); } catch {} } };
+      rec.onerror = (ev) => { if (ev.error === 'not-allowed') setStatus('Mic blocked — use the text box.'); };
+      return rec;
+    }
+    function startListening() {
+      wantListen = true; if (!recognition) return;
+      setOrb('listening'); setStatus('Listening…');
+      try { recognition.start(); } catch {}
+    }
+    function stopListening() { wantListen = false; if (recognition) { try { recognition.stop(); } catch {} } }
+
+    startBtn.onclick = () => {
+      startBtn.disabled = true; endBtn.disabled = false; chatRow.hidden = false;
+      recognition = buildRecognition();
+      if (!recognition) { setStatus('Speech needs Chrome. You can still type below.'); setOrb(''); return; }
+      startListening();
+    };
+
+    function sendChat() {
+      const t = chatInput.value.trim(); if (!t) return;
+      chatInput.value = ''; handleTurn(t);
+    }
+    chatSend.onclick = sendChat;
+    chatInput.addEventListener('keydown', (e) => { if (e.key === 'Enter') sendChat(); });
+
+    endBtn.onclick = async () => {
+      ended = true; endBtn.disabled = true; stopListening();
+      if ('speechSynthesis' in window) speechSynthesis.cancel();
+      setOrb('thinking'); setStatus('Wrapping up…');
+      try {
+        const r = await fetch('/end', {
+          method: 'POST', headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ transcript: transcript.join('\n'), notesMd: lastNotesMd, notesHtml: lastNotesHtml }),
+        });
+        const j = await r.json();
+        document.querySelector('.room').innerHTML =
+          `<div class="done"><h1>Meeting captured ✓</h1>` +
+          `<p>Notes saved to:</p><p><code>${j.path}</code><br><code>${j.htmlPath || ''}</code></p>` +
+          `<p class="topic">Back in your terminal, shape it with<br>` +
+          `<code>/catalyze-spec @${j.path}</code></p>` +
+          `<p class="topic">You can close this tab.</p></div>`;
+      } catch (e) { setStatus('Failed to save: ' + (e?.message || e)); }
+    };
+  </script>
+</body>
+</html>

package/.catalyst/voice/meeting.html

@@ -0,0 +1,198 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>Catalyst Meeting Room</title>
+  <style>
+    :root { --bg:#0e0e14; --panel:#1a1a24; --accent:#9b6dff; --text:#e8e8f0; --dim:#8a8a9a; }
+    * { box-sizing: border-box; }
+    body { margin:0; font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;
+      background:var(--bg); color:var(--text); display:flex; min-height:100vh; }
+    .room { margin:auto; width:100%; max-width:680px; padding:32px; }
+    h1 { font-size:20px; font-weight:600; margin:0 0 4px; }
+    .topic { color:var(--dim); margin:0 0 28px; font-size:14px; }
+    .orb { width:120px; height:120px; border-radius:50%; margin:24px auto;
+      background:radial-gradient(circle at 35% 35%, #b89bff, var(--accent));
+      box-shadow:0 0 0 0 rgba(155,109,255,.5); transition:transform .2s; }
+    .orb.listening { animation:pulse 2s infinite; }
+    .orb.speaking { animation:pulse .7s infinite; transform:scale(1.08); }
+    .orb.thinking { background:radial-gradient(circle at 35% 35%,#ffd27a,#ff9b3d);
+      animation:spin 1.1s linear infinite; }
+    @keyframes pulse { 0%{box-shadow:0 0 0 0 rgba(155,109,255,.5);} 70%{box-shadow:0 0 0 22px rgba(155,109,255,0);} 100%{box-shadow:0 0 0 0 rgba(155,109,255,0);} }
+    @keyframes spin { to { transform:rotate(360deg);} }
+    .status { text-align:center; color:var(--dim); min-height:22px; margin:8px 0 24px; font-size:14px; }
+    .btns { display:flex; gap:12px; justify-content:center; }
+    button { border:none; border-radius:10px; padding:12px 22px; font-size:15px;
+      font-weight:600; cursor:pointer; }
+    .start { background:var(--accent); color:#fff; }
+    .end { background:#2a2a36; color:var(--text); }
+    button:disabled { opacity:.4; cursor:not-allowed; }
+    .log { margin-top:28px; background:var(--panel); border-radius:12px; padding:16px;
+      max-height:34vh; overflow-y:auto; font-size:13px; line-height:1.6; }
+    .log .u { color:#7fd1ff; } .log .a { color:#c8b0ff; } .log .t { color:var(--dim); font-style:italic; }
+    .done { text-align:center; padding:20px; }
+    .done code { background:var(--panel); padding:4px 8px; border-radius:6px; }
+    .chat { display:flex; gap:8px; margin-top:16px; }
+    .chat input { flex:1; background:var(--panel); border:1px solid #2a2a36; color:var(--text);
+      border-radius:8px; padding:10px 12px; font-size:14px; }
+    .chat input:focus { outline:none; border-color:var(--accent); }
+    .chat button { background:#2a2a36; color:var(--text); }
+  </style>
+</head>
+<body>
+  <div class="room">
+    <h1>Catalyst Meeting Room</h1>
+    <p class="topic" id="topic">Loading…</p>
+    <div class="orb" id="orb"></div>
+    <div class="status" id="status">Ready when you are.</div>
+    <div class="btns">
+      <button class="start" id="startBtn">Start meeting</button>
+      <button class="end" id="endBtn" disabled>End meeting</button>
+    </div>
+    <div class="chat" id="chatRow" hidden>
+      <input id="chatInput" type="text" placeholder="Type a message instead of speaking…" autocomplete="off" />
+      <button id="chatSend">Send</button>
+    </div>
+    <div class="log" id="log" hidden></div>
+  </div>
+
+  <script type="module">
+    import { Conversation } from 'https://esm.sh/@elevenlabs/client';
+
+    const $ = (id) => document.getElementById(id);
+    const orb = $('orb'), status = $('status'), log = $('log');
+    const startBtn = $('startBtn'), endBtn = $('endBtn');
+    const chatRow = $('chatRow'), chatInput = $('chatInput'), chatSend = $('chatSend');
+    let conversation = null;
+    const transcript = [];
+
+    fetch('/config').then(r => r.json()).then(c => {
+      $('topic').textContent = c.topic || 'Untitled meeting';
+    });
+
+    function setStatus(t) { status.textContent = t; }
+    function setOrb(cls) { orb.className = 'orb' + (cls ? ' ' + cls : ''); }
+    function addLine(kind, text) {
+      log.hidden = false;
+      const cls = kind === 'user' ? 'u' : kind === 'ai' ? 'a' : 't';
+      const who = kind === 'user' ? 'You' : kind === 'ai' ? 'Catalyst' : '·';
+      const div = document.createElement('div');
+      div.className = cls;
+      div.textContent = `${who}: ${text}`;
+      log.appendChild(div);
+      log.scrollTop = log.scrollHeight;
+      if (kind === 'user' || kind === 'ai') transcript.push(`${who}: ${text}`);
+    }
+
+    // Client tool: live codebase investigation via the local daemon -> claude -p.
+    const clientTools = {
+      investigate_codebase: async ({ query }) => {
+        const prev = orb.className;
+        setOrb('thinking');
+        setStatus(`🔍 Investigating: ${query}`);
+        addLine('tool', `investigating: ${query}`);
+        try {
+          const r = await fetch('/tool', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ query }),
+          });
+          const j = await r.json();
+          addLine('tool', `findings ready`);
+          return j.result || 'No result.';
+        } catch (e) {
+          return `Investigation failed: ${e.message}`;
+        } finally {
+          orb.className = prev;
+          setStatus('Listening…');
+        }
+      },
+    };
+
+    startBtn.onclick = async () => {
+      startBtn.disabled = true;
+      setStatus('Connecting…');
+      try {
+        const cfg = await (await fetch('/config')).json();
+        const signed = await (await fetch('/signed-url')).json();
+        const opts = {
+          clientTools,
+          onConnect: () => { setStatus('Listening…'); setOrb('listening'); endBtn.disabled = false; chatRow.hidden = false; },
+          onDisconnect: () => { setOrb(''); },
+          onError: (e) => { setStatus('Error: ' + (e?.message || e)); },
+          onModeChange: ({ mode }) => {
+            setOrb(mode === 'speaking' ? 'speaking' : 'listening');
+            setStatus(mode === 'speaking' ? 'Catalyst is speaking…' : 'Listening…');
+          },
+          onMessage: (payload) => {
+            // SDK versions differ: payload may be {message, source} or a bare string.
+            const raw = payload && typeof payload === 'object' ? payload.message ?? payload : payload;
+            const text = typeof raw === 'string' ? raw : (raw && raw.message) || JSON.stringify(raw);
+            const src = payload && payload.source;
+            if (text) addLine(src === 'user' ? 'user' : 'ai', text);
+          },
+        };
+        if (signed.signedUrl) opts.signedUrl = signed.signedUrl;
+        else opts.agentId = cfg.agentId;
+        // Drive the conversation language from project-config (voice.language).
+        // Requires the language override to be enabled on the agent; if it isn't,
+        // ElevenLabs rejects the override, so we retry once without it.
+        if (cfg.language) opts.overrides = { agent: { language: cfg.language } };
+        try {
+          conversation = await Conversation.startSession(opts);
+        } catch (err) {
+          if (opts.overrides) {
+            console.warn('Language override rejected (enable it on the agent). Retrying without it.', err);
+            delete opts.overrides;
+            conversation = await Conversation.startSession(opts);
+          } else {
+            throw err;
+          }
+        }
+      } catch (e) {
+        setStatus('Could not start: ' + (e?.message || e));
+        startBtn.disabled = false;
+      }
+    };
+
+    // Typed messages — useful when speech is misheard. Treated as a user turn.
+    function sendChat() {
+      const t = chatInput.value.trim();
+      if (!t || !conversation) return;
+      try {
+        conversation.sendUserMessage(t);
+        addLine('user', t);
+        chatInput.value = '';
+      } catch (e) {
+        addLine('tool', 'could not send message: ' + (e?.message || e));
+      }
+    }
+    chatSend.onclick = sendChat;
+    chatInput.addEventListener('keydown', (e) => { if (e.key === 'Enter') sendChat(); });
+
+    endBtn.onclick = async () => {
+      endBtn.disabled = true;
+      setStatus('Wrapping up…');
+      setOrb('thinking');
+      try { if (conversation) await conversation.endSession(); } catch {}
+      try {
+        const r = await fetch('/end', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ transcript: transcript.join('\n') }),
+        });
+        const j = await r.json();
+        document.querySelector('.room').innerHTML =
+          `<div class="done"><h1>Meeting captured ✓</h1>` +
+          `<p>Artifact written to:</p><p><code>${j.path}</code></p>` +
+          `<p class="topic">Back in your terminal, shape it with<br>` +
+          `<code>/catalyze-spec @${j.path}</code></p>` +
+          `<p class="topic">You can close this tab.</p></div>`;
+      } catch (e) {
+        setStatus('Failed to save: ' + (e?.message || e));
+      }
+    };
+  </script>
+</body>
+</html>

package/.catalyst/voice/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "catalyst-os-voice",
+  "version": "1.0.0",
+  "private": true,
+  "description": "Local voice-meeting runtime for /meet-spec. Zero npm dependencies — Node stdlib only; the browser loads the ElevenLabs SDK from a CDN.",
+  "type": "commonjs",
+  "main": "meet-server.js",
+  "engines": {
+    "node": ">=18.0.0"
+  }
+}

package/.claude/agents/arbiter.md

@@ -6,8 +6,9 @@ description: >
   - Implementation is complete and needs quality checks
   - Production readiness needs to be verified
 
-  This agent orchestrates Guardians (Enforcer, Sentinel, Inquisitor, Watcher)
-  to run tests, check code quality, scan for security issues, and verify compliance.
+  This agent orchestrates Guardians (Enforcer, Sentinel, Inquisitor, Watcher,
+  and Curator for database specs) to run tests, check code quality, scan for
+  security issues, verify schema integrity, and verify compliance.
 
   DO NOT validate implementations yourself - delegate to Arbiter.
 model: opus
@@ -56,6 +57,7 @@ Before any action, load `.claude/skills/using-skills/SKILL.md` and check which s
 4. **Coverage**: Meets coverage thresholds
 5. **Performance**: No regressions detected
 6. **Documentation**: Required docs are present
+7. **Schema Integrity** (database specs only): Live DB matches the spec — delegate to Curator (read-only), never to the Alchemist that built it
 
 ## Output
 

package/.claude/agents/curator.md

@@ -0,0 +1,75 @@
+---
+name: curator
+description: >
+  PROACTIVELY DELEGATE schema-integrity audits to this agent. MUST BE USED when:
+  - Verifying a built implementation matches the actual database schema
+  - Confirming columns, constraints, and foreign keys exist in the real DB
+  - Tracing that API endpoints persist every field the spec expects
+  - Validating SQL functions, sequences, or triggers the feature depends on
+
+  This is a READ-ONLY Guardian. It audits the database — it never creates or
+  modifies schemas, migrations, or data. Building is the Alchemist's job.
+
+  DO NOT audit database integrity yourself - delegate to Curator.
+model: sonnet
+color: cyan
+skills: secret-scanning
+---
+
+You are the Curator, a schema-integrity auditor who verifies that the
+implementation matches the real database.
+
+## Opening
+
+*"Reconciling the schema against reality..."*
+
+## Role
+
+You are a **Guardian** in the `/audit-spec` validation phase, orchestrated by the
+Arbiter. You audit — you do not build. The Alchemist designs and migrates the
+schema during `/forge-spec`; you independently verify that what was built is real
+and complete. This separation is the point: the agent that creates a table must
+never be the one that signs off on it.
+
+## Read-Only Discipline — BLOCKING
+
+- **NEVER** run migrations, `ALTER`/`CREATE`/`DROP`, or any write/DDL statement.
+- **NEVER** edit migration files, schema definitions, or application code.
+- Use read-only queries only (`SELECT`, `information_schema`, `pg_catalog`, describe).
+- If you discover a defect, you **report** it — you do not fix it. Remediation
+  goes back to the Alchemist via `/forge-spec`.
+
+## Audit Checklist (only for specs touching the database)
+
+1. **Tables exist**: Every table the spec/code references exists in the live DB.
+2. **Columns match**: Real column names and types match what the spec and code
+   assume — check against `information_schema.columns`, not code aliases.
+3. **Constraints & keys**: All foreign keys, unique constraints, NOT NULL, and
+   check constraints the spec requires actually exist.
+4. **End-to-end persistence**: Trace each field the spec expects through the API
+   path (API call → DB write → DB read → API response). Flag any dropped field.
+5. **Functions & procedures**: Any SQL functions/stored procedures the feature
+   calls actually exist with the expected signature.
+6. **DB-level machinery**: Sequences, triggers, and DB-level defaults the feature
+   assumes are present.
+
+## Verification Before Reporting
+
+Follow `.claude/skills/verification-before-completion/SKILL.md`. Every claim must
+be backed by the actual query output — paste it. "The column exists" is not
+evidence; the `information_schema` row is.
+
+## Output
+
+Provide a schema-integrity report to the Arbiter:
+
+- Overall status: PASS / FAIL
+- Tables / columns verified (with query evidence)
+- Constraints and foreign keys verified
+- API end-to-end trace result per expected field
+- DB functions / sequences / triggers verified
+- Issues found, by severity, each with a remediation note pointing back to
+  `/forge-spec` (Alchemist)
+
+Block on any mismatch between what the spec expects and what the database
+actually contains.

package/.claude/commands/audit-spec.md

@@ -28,6 +28,6 @@ echo "=== FILES CHANGED ===" && git diff --name-only main...HEAD 2>/dev/null ||
 
 **Invoke skill:** `spec-validation`
 
-**Orchestrator:** Arbiter (delegates to Enforcer, Sentinel, Inquisitor, Watcher)
+**Orchestrator:** Arbiter (delegates to Enforcer, Sentinel, Inquisitor, Watcher, and Curator for database specs)
 
 **Process skills used:** `verification-before-completion`, `agent-delegation`, `test-driven-development`

package/.claude/commands/meet-spec.md

@@ -0,0 +1,43 @@
+# /meet-spec
+
+Hold a **voice meeting** with Catalyst, then turn the notes into a spec.
+
+Start a local browser meeting room. Talk through a feature; the meeting agent can
+investigate the codebase, docs, and web live (via `claude -p` → Seer/Scout). When you
+click **End meeting**, a structured, `/catalyze-spec`-ready notes artifact is written.
+
+Default mode is **diy** — free, browser speech + local Claude, no API key. Switch
+`voice.mode` to `bundled` for ElevenLabs' nicer (paid) voice.
+
+> **Lifecycle position:** **`/meet-spec`** → `/catalyze-spec` → *(optional)* `/challenge-spec` → `/forge-spec` → `/audit-spec` → `/seal-spec`
+
+## Usage
+
+```
+/meet-spec "realtime notifications"
+/meet-spec                          # will ask for the meeting topic
+```
+
+The output is a meeting artifact, NOT a spec. After the meeting, shape it yourself:
+
+```
+/catalyze-spec @.catalyst/meetings/YYYY-MM-DD-{slug}/meeting.md
+```
+
+## Pre-computed Context
+
+```bash
+echo "=== NODE VERSION ===" && node --version
+echo "=== CLAUDE CLI? ===" && command -v claude >/dev/null && echo "claude found" || echo "MISSING claude CLI (needed for the brain)"
+echo "=== VOICE CONFIG ===" && sed -n '/^voice:/,/^[^ ]/p' .catalyst/main/project-config.yaml 2>/dev/null || echo "No voice config"
+echo "=== VOICE RUNTIME? ===" && test -f .catalyst/voice/meet-server.js && echo "meet-server.js found" || echo "MISSING .catalyst/voice/ (re-install catalyst-os)"
+echo "=== SECRETS (bundled mode only) ===" && test -f .catalyst/secrets.local.yaml && echo "secrets.local.yaml found" || echo "no secrets.local.yaml (only needed for bundled mode)"
+```
+
+---
+
+**Invoke skill:** `meet-spec`
+
+**Orchestrator:** Catalyst (the meeting persona lives in the ElevenLabs agent prompt; codebase investigation delegates to Seer/Scout via headless `claude -p`)
+
+**Process skills used:** `brainstorming`, `agent-delegation`

package/.claude/commands/seal-spec.md

@@ -18,3 +18,19 @@ Commit, archive, and propagate learnings from a **fully built and audited** impl
 **Invoke skill:** `spec-approval`
 
 **Process skills used:** `verification-before-completion`, `agent-delegation`
+
+---
+
+## Execution Mode
+
+`/seal-spec` is the user's explicit authorization to run the **full ceremony end-to-end**:
+
+> commit → archive → push → **create PR** → self-document
+
+Do **not** stop and ask for confirmation between phases. In particular, after `git push` succeeds, immediately run `gh pr create` in the same turn. The only valid reasons to halt are:
+
+- A hard gate from Phase 1 fails (TDD missing, validation not passed, handoff missing)
+- A `git` or `gh` command returns an error
+- The working tree contains unexpected uncommitted state
+
+If everything is clean, the entire flow runs to completion and reports the PR URL at the end.

package/.claude/skills/meet-spec/SKILL.md

@@ -0,0 +1,112 @@
+# Meet Spec
+
+> **When to invoke:** When the user wants to shape a spec by holding a voice meeting.
+> **Invoked by:** `/meet-spec` command.
+> **Orchestrator:** Catalyst agent.
+
+## Purpose
+
+Run a local, browser-based voice meeting (ElevenLabs) where the user talks through a
+feature. The meeting agent can investigate the codebase live. When the meeting ends,
+write a structured, `/catalyze-spec`-ready notes artifact.
+
+**This skill does NOT produce a spec.** It produces a meeting artifact. The user runs
+`/catalyze-spec @<artifact>` afterwards, when they choose to.
+
+## Output Location
+
+```
+.catalyst/meetings/YYYY-MM-DD-{slug}/
+└── meeting.md        # Summary + Decisions + Action Items + Open Questions + Research Findings + Transcript
+```
+
+## Modes
+
+`voice.mode` in `project-config.yaml` picks how the meeting runs:
+
+- **diy** (default, free) — the browser does speech (Web Speech API) and the brain is a
+  local `claude -p`, which reads the codebase/docs and searches the web natively. No
+  ElevenLabs, no API key, no per-minute cost. Needs Chrome and the `claude` CLI on PATH.
+- **bundled** — ElevenLabs Conversational AI. Nicer voice, but billed per minute (BYOK).
+  Requires `elevenlabs_api_key` in `.catalyst/secrets.local.yaml`, `voice.agent_id` in
+  config, and an agent that has a `investigate_codebase` client tool. See the README.
+
+`language` sets the spoken meeting language (e.g. `"tr"`); written artifacts stay English.
+
+## Workflow
+
+### Phase 0: Preflight (stop early if not ready)
+
+1. Read `.catalyst/main/project-config.yaml`. If `voice.enabled` is not `true`, stop and
+   tell the user how to enable it. Do not proceed.
+2. Check `node --version` is >= 18 and `.catalyst/voice/meet-server.js` exists; otherwise
+   stop and explain (re-install catalyst-os if the runtime is missing).
+3. **Bundled mode only:** check `.catalyst/secrets.local.yaml` has a non-empty
+   `elevenlabs_api_key` and `voice.agent_id` is set. If missing, stop with setup
+   instructions — do NOT print or echo the key. In **diy** mode, skip this check entirely.
+
+**On any failure: stop gracefully. Voice is optional; never break the rest of Catalyst.**
+
+### Phase 1: Initialize meeting folder
+
+1. Determine the topic from `$ARGUMENTS`; if empty, ask the user one short question.
+2. Derive a kebab-case `{slug}` from the topic.
+3. Create `.catalyst/meetings/YYYY-MM-DD-{slug}/` (today's date).
+
+### Phase 2: Launch the meeting room
+
+Start the local daemon in the background and open the browser. The server reads config
+(and, in bundled mode, the key from `secrets.local.yaml`) itself — never pass the key on
+the command line or env.
+
+```bash
+PORT=4399 \
+MEETING_DIR=".catalyst/meetings/YYYY-MM-DD-{slug}" \
+MEETING_TOPIC="{topic}" \
+node .catalyst/voice/meet-server.js &
+```
+
+Run it from the project root (so `claude -p` investigations resolve against this repo).
+Then open `http://localhost:4399` (e.g. `open`, `xdg-open`, or `start`). Tell the user:
+"The meeting room is open. Click **Start meeting**, talk it through, then click **End
+meeting** when you're done."
+
+### Phase 3: Wait for the artifact
+
+Poll for `.catalyst/meetings/YYYY-MM-DD-{slug}/meeting.md`. It is written when the user
+clicks **End meeting** (the server folds the transcript + live findings into the artifact
+via a single `claude -p` summarization pass). When it appears, the meeting is over — the
+server shuts itself down.
+
+### Phase 4: Output
+
+```
+Meeting captured.
+
+Artifact: .catalyst/meetings/YYYY-MM-DD-{slug}/meeting.md
+  ├── Summary
+  ├── Decisions
+  ├── Action Items
+  ├── Open Questions
+  ├── Research Findings   (live codebase investigations from the meeting)
+  └── Transcript
+
+Next step — shape it into a spec when you're ready:
+  /catalyze-spec @.catalyst/meetings/YYYY-MM-DD-{slug}/meeting.md
+```
+
+**Do NOT auto-run `/catalyze-spec`.** The user references the artifact themselves.
+
+## Notes
+
+- **Live codebase access:** in **diy** mode every turn is a headless `claude -p` in this
+  repo, so the agent reads the codebase/docs and searches the web natively. In **bundled**
+  mode the ElevenLabs agent calls the `investigate_codebase` client tool, which the browser
+  relays to the daemon, which runs the same `claude -p`. Either way it loads Catalyst's
+  agents and can delegate to Seer/Scout.
+- **Typed messages:** the meeting room has a text box; typed messages are sent as user
+  turns (handy when speech is misheard) and appear in the transcript.
+- **Latency:** investigations take seconds; the meeting room shows a "thinking" indicator
+  while the agent says it is looking into it. This is expected meeting behavior.
+- **Cost:** billed to the user's ElevenLabs account (~$0.10/min bundled). A 30-min meeting
+  is ~$3.

package/.claude/skills/spec-approval/SKILL.md

@@ -73,13 +73,20 @@ Update spec.md status to COMPLETE.
 
 ### Phase 7: Push & Pull Request
 
+> **This phase is atomic — do NOT stop or ask for confirmation between push and PR creation.**
+> If validation passed in Phase 1 and the commit succeeded in Phase 5, proceed straight through push → PR without pausing.
+> Only halt if a git/gh command returns an error.
+
 1. Read `git.development_branch` from `.catalyst/main/project-config.yaml` (e.g., `development`, `staging`)
 2. Push the feature branch: `git push -u origin {branch-name}`
-3. Create a PR targeting the development branch:
+3. **Immediately** create a PR targeting the development branch — do not wait for user input:
    ```
    gh pr create --base {development_branch} --title "feat({scope}): {spec title}" --body "..."
    ```
 4. Include spec summary, TDD stats, and file change counts in the PR body
+5. Capture the returned PR URL for the final output
+
+**Do not ask** "should I create a PR?" or "ready to push?" — the user already invoked `/seal-spec`, which is the explicit authorization for the full push + PR flow. Only pause if a command fails or the working tree is in an unexpected state.
 
 ### Phase 8: Self-Documentation
 

package/.claude/skills/spec-validation/SKILL.md

@@ -56,7 +56,7 @@ If TDD was skipped → REJECT and return to /forge-spec
 TDD Check (sequential, must pass first)
         |
         v
-[Enforcer + Sentinel + Inquisitor + Watcher] (all parallel)
+[Enforcer + Sentinel + Inquisitor + Watcher + Curator] (all parallel)
         |
         v
 Arbiter compiles results → validation.md
@@ -98,7 +98,9 @@ Spawn all Guardians in parallel:
 - Secret scanning
 - Input validation checks
 
-**Alchemist** (Schema Integrity — only for specs touching database):
+**Curator** (Schema Integrity — only for specs touching database):
+- READ-ONLY Guardian — audits the schema, never creates or modifies it
+- (The Alchemist *builds* the schema during `/forge-spec`; Curator independently *verifies* it here)
 - Query actual database schema for all tables the spec touches
 - Verify column names in spec/code match real database columns
 - Verify all foreign keys and constraints exist in the actual DB
@@ -147,7 +149,7 @@ If all validation passes, create handoff.md with:
 - Secrets: status
 - Inputs: status
 
-### Schema Integrity (Alchemist) — if spec touches database
+### Schema Integrity (Curator) — if spec touches database
 - Column names match: status
 - Constraints verified: status
 - API end-to-end trace: status

package/.claude/skills/using-skills/SKILL.md

@@ -41,6 +41,7 @@ Skills tell you HOW. User instructions tell you WHAT.
 
 | Skill | Path | Load when... |
 |-------|------|-------------|
+| **meet-spec** | `.claude/skills/meet-spec/SKILL.md` | `/meet-spec` — shaping a spec via a voice meeting (optional) |
 | **spec-shaping** | `.claude/skills/spec-shaping/SKILL.md` | `/catalyze-spec` — shaping a new specification |
 | **spec-challenge** | `.claude/skills/spec-challenge/SKILL.md` | `/challenge-spec` — interrogating a shaped spec branch by branch (optional) |
 | **build-orchestration** | `.claude/skills/build-orchestration/SKILL.md` | `/forge-spec` — implementing a specification |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "catalyst-os",
-  "version": "2.0.3",
+  "version": "3.0.0",
   "scripts": {
     "postinstall": "node .catalyst/bin/install.js",
     "validate": "node .catalyst/bin/validate-artifacts.js"
@@ -13,6 +13,7 @@
     "AGENTS.md",
     ".claude",
     ".catalyst/bin",
+    ".catalyst/voice",
     ".catalyst/spec-structure.yaml",
     ".catalyst/main/project-config.yaml"
   ],