chati-dev 4.2.2 → 4.3.1

package/framework/hooks/team-quality-gate.js

@@ -19,18 +19,18 @@ import { join } from 'path';
 // Artifact scope per agent — defines which output paths each agent owns
 const AGENT_ARTIFACT_SCOPES = {
   detail: [
-    'chati.dev/artifacts/2-PRD/',
-    'chati.dev/artifacts/handoffs/detail-',
+    'artifacts/2-PRD/',
+    'artifacts/handoffs/detail-',
     'prd.md',
   ],
   architect: [
-    'chati.dev/artifacts/3-Architecture/',
-    'chati.dev/artifacts/handoffs/architect-',
+    'artifacts/3-Architecture/',
+    'artifacts/handoffs/architect-',
     'architecture.md',
   ],
   ux: [
-    'chati.dev/artifacts/4-UX/',
-    'chati.dev/artifacts/handoffs/ux-',
+    'artifacts/4-UX/',
+    'artifacts/handoffs/ux-',
     'ux-specification.md',
     'brandbook.md',
     'brandbook.html',
@@ -50,20 +50,27 @@ const AGENT_ARTIFACT_SCOPES = {
     'test/',
     'tests/',
     '__tests__/',
-    'chati.dev/artifacts/8-Implementation/',
-    'chati.dev/artifacts/handoffs/dev-',
+    'artifacts/8-Implementation/',
+    'artifacts/handoffs/dev-',
+  ],
+  'qa-planning': [
+    'artifacts/7-QA-Planning/',
+    'artifacts/handoffs/qa-planning',
   ],
   'qa-implementation': [
-    'chati.dev/artifacts/9-QA-Implementation/',
-    'chati.dev/artifacts/handoffs/qa-implementation-',
+    'artifacts/9-QA-Implementation/',
+    'artifacts/handoffs/qa-implementation-',
+  ],
+  'qa-visual': [
+    'artifacts/handoffs/qa-visual',
   ],
 };
 
 // Shared paths any teammate can write to
 const SHARED_PATHS = [
   '.chati/',
-  'chati.dev/artifacts/handoffs/teams/',
-  'chati.dev/artifacts/decisions/',
+  'artifacts/handoffs/teams/',
+  'artifacts/decisions/',
 ];
 
 async function main() {

package/framework/hooks/undercover-guard.js

@@ -13,7 +13,7 @@
  * What gets sanitized:
  *   - Agent names (greenfield-wu, brownfield-wu, qa-planning, etc.)
  *   - Pipeline terminology (PRISM, L0-L5, deviation protocol)
- *   - Internal paths (chati.dev/artifacts/, .chati/)
+ *   - Internal paths (artifacts/, .chati/)
  *   - Framework name references in generated code/commits
  *   - Constitution/Article references
  *   - Quality gate internals (adversarial review, devil's advocate)
@@ -44,6 +44,7 @@ const UNDERCOVER_RULES = [
   { pattern: /\bbrownfield-wu\b/gi, replacement: 'codebase analysis', category: 'agent' },
   { pattern: /\bqa-planning\b/gi, replacement: 'planning review', category: 'agent' },
   { pattern: /\bqa-implementation\b/gi, replacement: 'code review', category: 'agent' },
+  { pattern: /\bqa-visual\b/gi, replacement: 'visual review', category: 'agent' },
   { pattern: /\bdevops agent\b/gi, replacement: 'deployment', category: 'agent' },
   { pattern: /\bdev agent\b/gi, replacement: 'implementation', category: 'agent' },
   { pattern: /\bbrief agent\b/gi, replacement: 'requirements analysis', category: 'agent' },
@@ -110,7 +111,8 @@ function isExemptPath(filePath, projectDir) {
  */
 function isUndercoverEnabled(projectDir) {
   try {
-    const configPath = join(projectDir, 'chati.dev', 'config.yaml');
+    const fwDir = existsSync(join(projectDir, '.chati.dev')) ? '.chati.dev' : 'chati.dev';
+    const configPath = join(projectDir, fwDir, 'config.yaml');
     if (!existsSync(configPath)) return true;
     const raw = readFileSync(configPath, 'utf-8');
     const match = raw.match(/^\s*undercover_mode:\s*(false|no|off|0)/mi);

package/framework/i18n/en.yaml

@@ -31,7 +31,7 @@ installer:
   agents_count: "Agent definitions across DISCOVER, PLAN, BUILD, DEPLOY phases"
   workflows_count: "7 workflow blueprints"
   templates_count: "10 templates (PRD, Brownfield PRD, Architecture, Task, QA Gate, Quick Brief, Brandbook, Design Tokens, Component Spec, Icon System)"
-  constitution: "Constitution (19 Articles + Preamble)"
+  constitution: "Constitution (23 Articles + Preamble)"
   session_mgmt: "Session management system"
   quality_gates: "Quality gates (3-tier verdicts)"
   proceed: "Proceed with installation?"
@@ -39,7 +39,7 @@ installer:
   created_chati: "Created .chati/ session directory"
   created_framework: "Created chati.dev/ system directory (agents, templates, workflows)"
   created_commands: "Created .claude/commands/ (thin router)"
-  installed_constitution: "Installed Constitution (Articles I-XIX)"
+  installed_constitution: "Installed Constitution (Articles I-XXIII)"
   created_session: "Created session.yaml schema"
   created_claude_md: "Created CLAUDE.md"
   configured_mcps: "Configured MCPs:"
@@ -47,7 +47,7 @@ installer:
   agents_valid: "All agents implement 8 protocols"
   handoff_ok: "Handoff protocol: OK"
   validation_ok: "Self-validation criteria: OK"
-  constitution_ok: "Constitution: 19 articles verified"
+  constitution_ok: "Constitution: 23 articles verified"
   created_memories: "Created .chati/memories/ (Memory Layer)"
   installed_intelligence: "Installed Intelligence Layer (Context Engine, Memory, Registry)"
   intelligence_valid: "Intelligence: 6 spec files verified"

package/framework/i18n/es.yaml

@@ -31,7 +31,7 @@ installer:
   agents_count: "Definiciones de agentes en las fases DISCOVER, PLAN, BUILD, DEPLOY"
   workflows_count: "7 blueprints de workflow"
   templates_count: "10 templates (PRD, PRD Brownfield, Arquitectura, Task, QA Gate, Quick Brief, Brandbook, Design Tokens, Component Spec, Icon System)"
-  constitution: "Constitucion (19 Articulos + Preambulo)"
+  constitution: "Constitucion (22 Articulos + Preambulo)"
   session_mgmt: "Sistema de gestion de sesion"
   quality_gates: "Quality gates (veredictos en 3 niveles)"
   proceed: "Proceder con la instalacion?"
@@ -39,7 +39,7 @@ installer:
   created_chati: "Creado directorio de sesion .chati/"
   created_framework: "Creado directorio del sistema chati.dev/ (agentes, templates, workflows)"
   created_commands: "Creado .claude/commands/ (enrutador)"
-  installed_constitution: "Instalada Constitucion (Articulos I-XIX)"
+  installed_constitution: "Instalada Constitucion (Artículos I-XXIII)"
   created_session: "Creado schema session.yaml"
   created_claude_md: "Creado CLAUDE.md"
   configured_mcps: "MCPs configurados:"
@@ -47,7 +47,7 @@ installer:
   agents_valid: "Todos los agentes implementan 8 protocolos"
   handoff_ok: "Protocolo de handoff: OK"
   validation_ok: "Criterios de auto-validacion: OK"
-  constitution_ok: "Constitucion: 19 articulos verificados"
+  constitution_ok: "Constitucion: 22 articulos verificados"
   created_memories: "Creado .chati/memories/ (Memory Layer)"
   installed_intelligence: "Instalada Intelligence Layer (Context Engine, Memory, Registry)"
   intelligence_valid: "Intelligence: 6 archivos de spec verificados"

package/framework/i18n/fr.yaml

@@ -31,7 +31,7 @@ installer:
   agents_count: "Definitions d'agents dans les phases DISCOVER, PLAN, BUILD, DEPLOY"
   workflows_count: "7 blueprints de workflow"
   templates_count: "10 templates (PRD, PRD Brownfield, Architecture, Task, QA Gate, Quick Brief, Brandbook, Design Tokens, Component Spec, Icon System)"
-  constitution: "Constitution (19 Articles + Preambule)"
+  constitution: "Constitution (23 Articles + Preambule)"
   session_mgmt: "Systeme de gestion de session"
   quality_gates: "Quality gates (verdicts en 3 niveaux)"
   proceed: "Proceder a l'installation?"
@@ -39,7 +39,7 @@ installer:
   created_chati: "Cree le repertoire de session .chati/"
   created_framework: "Cree le repertoire du systeme chati.dev/ (agents, templates, workflows)"
   created_commands: "Cree .claude/commands/ (routeur)"
-  installed_constitution: "Installee la Constitution (Articles I-XIX)"
+  installed_constitution: "Installee la Constitution (Articles I-XXIII)"
   created_session: "Cree le schema session.yaml"
   created_claude_md: "Cree CLAUDE.md"
   configured_mcps: "MCPs configures:"
@@ -47,7 +47,7 @@ installer:
   agents_valid: "Tous les agents implementent 8 protocoles"
   handoff_ok: "Protocole de passation: OK"
   validation_ok: "Criteres d'auto-validation: OK"
-  constitution_ok: "Constitution: 19 articles verifies"
+  constitution_ok: "Constitution: 23 articles verifies"
   created_memories: "Cree .chati/memories/ (Memory Layer)"
   installed_intelligence: "Installee Intelligence Layer (Context Engine, Memory, Registry)"
   intelligence_valid: "Intelligence: 6 fichiers de spec verifies"

package/framework/i18n/pt.yaml

@@ -31,7 +31,7 @@ installer:
   agents_count: "Definicoes de agentes nas fases DISCOVER, PLAN, BUILD, DEPLOY"
   workflows_count: "7 blueprints de workflow"
   templates_count: "10 templates (PRD, PRD Brownfield, Arquitetura, Task, QA Gate, Quick Brief, Brandbook, Design Tokens, Component Spec, Icon System)"
-  constitution: "Constituicao (19 Artigos + Preambulo)"
+  constitution: "Constituicao (22 Artigos + Preambulo)"
   session_mgmt: "Sistema de gerenciamento de sessao"
   quality_gates: "Quality gates (veredictos em 3 niveis)"
   proceed: "Prosseguir com a instalacao?"
@@ -39,7 +39,7 @@ installer:
   created_chati: "Criado diretorio de sessao .chati/"
   created_framework: "Criado diretorio do sistema chati.dev/ (agentes, templates, workflows)"
   created_commands: "Criado .claude/commands/ (roteador)"
-  installed_constitution: "Instalada Constituicao (Artigos I-XIX)"
+  installed_constitution: "Instalada Constituicao (Artigos I-XXIII)"
   created_session: "Criado schema session.yaml"
   created_claude_md: "Criado CLAUDE.md"
   configured_mcps: "MCPs configurados:"
@@ -47,7 +47,7 @@ installer:
   agents_valid: "Todos os agentes implementam 8 protocolos"
   handoff_ok: "Protocolo de handoff: OK"
   validation_ok: "Criterios de auto-validacao: OK"
-  constitution_ok: "Constituicao: 19 artigos verificados"
+  constitution_ok: "Constituicao: 22 artigos verificados"
   created_memories: "Criado .chati/memories/ (Memory Layer)"
   installed_intelligence: "Instalada Intelligence Layer (Context Engine, Memory, Registry)"
   intelligence_valid: "Intelligence: 6 arquivos de spec verificados"

package/framework/intelligence/context-engine.md

@@ -33,7 +33,7 @@ The orchestrator injects context through 6 hierarchical layers:
 
 | Layer | Name | Source | When Active |
 |-------|------|--------|-------------|
-| **L0** | Constitution | `chati.dev/constitution.md` (Articles I-XIX) | ALWAYS (non-negotiable) |
+| **L0** | Constitution | `chati.dev/constitution.md` (Articles I-XXIII) | ALWAYS (non-negotiable) |
 | **L1** | Mode + Global | `config.yaml` + mode governance (planning/build/deploy) | ALWAYS |
 | **L2** | Agent Scope | `chati.dev/agents/{agent}/` — mission, inputs, outputs, criteria | When agent is active |
 | **L3** | Pipeline State | `.chati/session.yaml` — pipeline position, scores, backlog | When session is active |
@@ -60,7 +60,7 @@ The orchestrator produces a structured XML block injected into agent prompts:
 ```xml
 <chati-context bracket="MODERATE">
   <constitution>
-    Articles I-XIX governing agent behavior.
+    Articles I-XXIII governing agent behavior.
     Key: Self-validation required. Loop until quality threshold.
     Guided options (1,2,3). Persistent session state.
     Two-layer handoff. Language protocol. Deviation protocol.
@@ -77,8 +77,7 @@ The orchestrator produces a structured XML block injected into agent prompts:
   </agent>
 
   <pipeline>
-    WU(100%) -> Brief(in_progress, 45%) -> Detail(pending) -> Architect(pending)
-    -> UX(pending) -> Phases(pending) -> Tasks(pending) -> QA-Planning(pending)
+    WU(100%) -> Brief(in_progress, 45%) -> [Planning Team: Detail+Architect+UX+QA-Planning](pending) -> Phases(pending) -> Tasks(pending)
   </pipeline>
 
   <task>Phase 2: Core Requirements Elicitation</task>
@@ -186,7 +185,7 @@ Memory injection follows the same progressive reinforcement principle: as contex
 
 ---
 
-*Context Engine v4.0 — Chati.dev Intelligence Layer (Progressive Reinforcement Model)*
+*Context Engine v4.3.0 — Chati.dev Intelligence Layer (Progressive Reinforcement Model)*
 
 ---
 

package/framework/intelligence/decision-engine.md

@@ -96,7 +96,7 @@ npx chati-dev health
 Checks:
 1. All registered entities exist on disk
 2. Schema files are valid JSON
-3. Constitution has >= 19 articles
+3. Constitution has >= 23 articles
 4. Agents contain required protocol references
 5. Entity count matches actual file count
 6. Checksums match (if calculated)

package/framework/intelligence/hooks-performance.md

@@ -16,7 +16,7 @@ Claude Code spawns each hook as a child process, waits for JSON output, then pro
 | PreCompact | `.*` | session-digest.js | Session state capture + auto-dream + daily digest |
 | PreToolUse | `Read` | read-protection.js | Block reading sensitive files |
 | PreToolUse | `Write\|Edit` | mode-governance.js | Write scope enforcement by phase |
-| PreToolUse | `Write\|Edit` | constitution-guard.js | Secret detection + 23 shell injection checks |
+| PreToolUse | `Write\|Edit` | constitution-guard.js | Secret detection + 21 shell injection checks |
 | PreToolUse | `Write\|Edit` | undercover-guard.js | Sanitize framework terms from deliverables |
 | PreToolUse | `Write\|Edit` | style-guard.js | Em-dash and emoji enforcement |
 | PreToolUse | `Bash` | constitution-guard.js | Destructive command + shell injection checks |
@@ -31,7 +31,7 @@ Claude Code spawns each hook as a child process, waits for JSON output, then pro
 | PreCompact | 1 | ~50-200ms | Runs rarely (context compaction). Auto-dream may add 5-10s if triggered |
 | PreToolUse (Read) | 1 | ~30ms | Minimal overhead per file read |
 | PreToolUse (Write/Edit) | 4 | ~200ms | Heaviest path. 4 sequential hooks |
-| PreToolUse (Bash) | 3 | ~150ms | 23 regex checks in constitution-guard are negligible (<5ms) |
+| PreToolUse (Bash) | 3 | ~150ms | 21 regex checks in constitution-guard are negligible (<5ms) |
 
 ## Performance Characteristics
 
@@ -42,7 +42,7 @@ Claude Code spawns each hook as a child process, waits for JSON output, then pro
 
 ## Optimization Notes
 
-1. constitution-guard's 23 shell injection regex checks run in <5ms total (all patterns compiled once)
+1. constitution-guard's 21 shell injection regex checks run in <5ms total (all patterns compiled once)
 2. undercover-guard and style-guard could be skipped in discover/plan phases (no code being written)
 3. If latency becomes noticeable, consider merging undercover-guard + style-guard into one hook (same event, similar logic)
 4. license-guard has a 5-minute ping throttle to avoid network latency on every message

package/framework/migrations/v1.0-to-v1.1.yaml

@@ -45,4 +45,4 @@ notes: |
   - Every migration is idempotent (safe to run multiple times)
   - Backup is created BEFORE any migration
   - Automatic rollback on failure
-  - User artifacts (chati.dev/artifacts/, chati.dev/intelligence/) are NEVER modified
+  - User artifacts (artifacts/, chati.dev/intelligence/) are NEVER modified

package/framework/migrations/v1.4-to-v2.0.yaml

@@ -34,17 +34,17 @@ operations:
       - .chati/checkpoints
       - .chati/decisions
       - chati.dev/data
-      - chati.dev/artifacts/0-WU
-      - chati.dev/artifacts/1-Brief
-      - chati.dev/artifacts/2-PRD
-      - chati.dev/artifacts/3-Architecture
-      - chati.dev/artifacts/4-UX
-      - chati.dev/artifacts/5-Phases
-      - chati.dev/artifacts/6-Tasks
-      - chati.dev/artifacts/7-QA-Planning
-      - chati.dev/artifacts/8-QA-Impl
-      - chati.dev/artifacts/9-Deploy
-      - chati.dev/artifacts/handoffs
+      - artifacts/0-WU
+      - artifacts/1-Brief
+      - artifacts/2-PRD
+      - artifacts/3-Architecture
+      - artifacts/4-UX
+      - artifacts/5-Phases
+      - artifacts/6-Tasks
+      - artifacts/7-QA-Planning
+      - artifacts/8-QA-Impl
+      - artifacts/9-Deploy
+      - artifacts/handoffs
 
   # 2. Create agent memory directories
   - type: create_directory

package/framework/migrations/v4.0-to-v4.1.yaml

@@ -17,8 +17,8 @@ preconditions:
     version: "4.0.0"
     message: "Requires chati.dev v4.0.0 or later"
   - type: constitution_articles
-    count: 19
-    message: "Requires Constitution with 19 Articles"
+    count: 22
+    message: "Requires Constitution with 22 Articles"
 
 backup:
   directories:

package/framework/migrations/v4.2-to-v4.3.yaml

@@ -0,0 +1,29 @@
+migration:
+  from: "4.2.0"
+  to: "4.3.0"
+  description: "Framework/user separation hardening: comprehensive .gitignore, tracked-file detection, runtime boundary fixes"
+  breaking: false
+
+# This migration ensures users upgrading from any v4.2.x to v4.3.0 get:
+#   1. The new comprehensive .gitignore (covers .chati.dev/, .chati/, providers, etc.)
+#   2. Detection + warning if framework files are already tracked in git
+#   3. New 4.3.0 runtime boundary fixes (delivered via copyFrameworkFiles, this is a no-op step)
+#
+# Step types `update_gitignore` and `warn_tracked_files` are introduced in 4.3.0
+# and require src/upgrade/migrator.js >= the corresponding feature.
+
+steps:
+  # Step 1: Update .gitignore to the comprehensive 4.3.0 template.
+  # Idempotent: detects old marker (pre-4.3.0) and replaces; detects new marker and replaces.
+  # Merges with user's existing .gitignore (does not overwrite user content outside the chati block).
+  - type: update_gitignore
+    description: "Replace minimal pre-4.3.0 .gitignore block with comprehensive framework exclusions"
+
+  # Step 2: Detect framework files already tracked in git history (pre-4.3.0 leaks).
+  # Non-blocking: prints a warning with exact `git rm --cached` commands.
+  # User decides when/whether to clean up history.
+  - type: warn_tracked_files
+    description: "Warn if framework files were committed before .gitignore was fixed"
+
+# Validation: nothing critical to verify (gitignore content is variable per user).
+# The warn_tracked_files step itself acts as observability.