create-claude-cabinet 0.6.0

package/templates/scripts/load-triage-history.js

@@ -0,0 +1,151 @@
+#!/usr/bin/env node
+// Build suppression lists from triage history.
+//
+// Outputs JSON with rejected/deferred finding IDs and fingerprints.
+// The audit skill uses this to skip previously-triaged findings.
+//
+// Usage:
+//   node scripts/load-triage-history.js              # Auto-detect source
+//   node scripts/load-triage-history.js --db-only    # Only check database
+//   node scripts/load-triage-history.js --files-only # Only check triage.json files
+//
+// Two sources (tried in order):
+//   1. pib-db (SQLite) — if PIB_DB_PATH exists
+//   2. Filesystem — scan reviews/*/triage.json files
+//
+// Environment:
+//   PIB_DB_PATH   — path to SQLite file (default: ./pib.db)
+//   REVIEWS_DIR   — path to reviews directory (default: ./reviews)
+
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { createRequire } from 'node:module';
+
+const DB_PATH = process.env.PIB_DB_PATH || join(process.cwd(), 'pib.db');
+const REVIEWS_DIR = process.env.REVIEWS_DIR || join(process.cwd(), 'reviews');
+const args = process.argv.slice(2);
+const dbOnly = args.includes('--db-only');
+const filesOnly = args.includes('--files-only');
+
+const result = {
+  rejectedIds: [],
+  rejectedFingerprints: [],
+  deferredIds: [],
+  deferredFingerprints: [],
+};
+
+// ---------------------------------------------------------------------------
+// Source 1: Database
+// ---------------------------------------------------------------------------
+function tryDatabase() {
+  if (filesOnly) return false;
+  if (!existsSync(DB_PATH)) return false;
+
+  try {
+    const require = createRequire(import.meta.url);
+    const Database = require('better-sqlite3');
+    const db = new Database(DB_PATH, { readonly: true });
+
+    const rejected = db.prepare(`
+      SELECT id, perspective, title FROM audit_findings
+      WHERE triage_status = 'rejected'
+    `).all();
+
+    const deferred = db.prepare(`
+      SELECT id, perspective, title FROM audit_findings
+      WHERE triage_status = 'deferred'
+    `).all();
+
+    db.close();
+
+    result.rejectedIds = rejected.map(r => r.id);
+    result.rejectedFingerprints = rejected.map(r => ({
+      perspective: r.perspective,
+      title: r.title,
+    }));
+    result.deferredIds = deferred.map(r => r.id);
+    result.deferredFingerprints = deferred.map(r => ({
+      perspective: r.perspective,
+      title: r.title,
+    }));
+
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Source 2: Filesystem (triage.json files)
+// ---------------------------------------------------------------------------
+function tryFilesystem() {
+  if (dbOnly) return false;
+  if (!existsSync(REVIEWS_DIR)) return false;
+
+  const MAX_AGE_DAYS = 30;
+  const cutoff = Date.now() - MAX_AGE_DAYS * 24 * 60 * 60 * 1000;
+
+  try {
+    const dateDirs = readdirSync(REVIEWS_DIR)
+      .filter(d => /^\d{4}-\d{2}-\d{2}$/.test(d))
+      .sort()
+      .reverse();
+
+    for (const dateDir of dateDirs) {
+      const datePath = join(REVIEWS_DIR, dateDir);
+      if (!statSync(datePath).isDirectory()) continue;
+
+      // Check age
+      const dirDate = new Date(dateDir).getTime();
+      if (dirDate < cutoff) break;
+
+      // Look for triage.json in date dir or run subdirs
+      const triagePaths = [];
+      const directTriage = join(datePath, 'triage.json');
+      if (existsSync(directTriage)) triagePaths.push(directTriage);
+
+      // Check run subdirectories
+      for (const sub of readdirSync(datePath)) {
+        const subTriage = join(datePath, sub, 'triage.json');
+        if (existsSync(subTriage)) triagePaths.push(subTriage);
+      }
+
+      for (const triagePath of triagePaths) {
+        try {
+          const data = JSON.parse(readFileSync(triagePath, 'utf-8'));
+          const verdicts = data.verdicts || data;
+
+          for (const v of (Array.isArray(verdicts) ? verdicts : [])) {
+            const fp = { perspective: v.perspective, title: v.title };
+
+            if (v.verdict === 'reject' || v.status === 'rejected') {
+              if (v.id && !result.rejectedIds.includes(v.id)) {
+                result.rejectedIds.push(v.id);
+                result.rejectedFingerprints.push(fp);
+              }
+            } else if (v.verdict === 'defer' || v.status === 'deferred') {
+              if (v.id && !result.deferredIds.includes(v.id)) {
+                result.deferredIds.push(v.id);
+                result.deferredFingerprints.push(fp);
+              }
+            }
+          }
+        } catch {
+          // Skip malformed triage files
+        }
+      }
+    }
+
+    return result.rejectedIds.length > 0 || result.deferredIds.length > 0;
+  } catch {
+    return false;
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Main
+// ---------------------------------------------------------------------------
+const foundDb = tryDatabase();
+if (!foundDb) tryFilesystem();
+
+console.log(JSON.stringify(result, null, 2));

package/templates/scripts/merge-findings.js

@@ -0,0 +1,126 @@
+#!/usr/bin/env node
+// Merge cabinet member JSON outputs into a unified run-summary.json.
+//
+// Usage:
+//   node scripts/merge-findings.js <run-dir>            # Merge only
+//   node scripts/merge-findings.js <run-dir> --db       # Merge + ingest to pib-db
+//
+// Reads all *.json files in <run-dir> (one per cabinet member), validates
+// against finding-schema.json, deduplicates by finding ID, and writes
+// run-summary.json with merged findings and metadata.
+//
+// Environment:
+//   PIB_DB_PATH  — path to SQLite file (for --db mode)
+
+import { readdirSync, readFileSync, writeFileSync, existsSync } from 'node:fs';
+import { join, dirname, basename } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { execSync } from 'node:child_process';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const SKIP_FILES = new Set(['run-summary.json', 'day-summary.json', 'layer1-results.json', 'triage.json']);
+
+// ---------------------------------------------------------------------------
+// Args
+// ---------------------------------------------------------------------------
+const args = process.argv.slice(2);
+const runDir = args.find(a => !a.startsWith('--'));
+const useDb = args.includes('--db');
+
+if (!runDir) {
+  console.log(`Usage: merge-findings.js <run-dir> [--db]
+
+Merges per-cabinet-member JSON files into run-summary.json.
+  --db    Also ingest findings into the pib-db database.`);
+  process.exit(1);
+}
+
+if (!existsSync(runDir)) {
+  console.error(`Directory not found: ${runDir}`);
+  process.exit(1);
+}
+
+// ---------------------------------------------------------------------------
+// Read and merge
+// ---------------------------------------------------------------------------
+const files = readdirSync(runDir).filter(f =>
+  f.endsWith('.json') && !SKIP_FILES.has(f)
+);
+
+if (files.length === 0) {
+  console.error(`No cabinet member JSON files found in ${runDir}`);
+  process.exit(1);
+}
+
+const allFindings = [];
+const seenIds = new Set();
+const perspectiveCounts = {};
+const severityCounts = { critical: 0, warn: 0, info: 0, idea: 0 };
+let positiveCount = 0;
+
+for (const file of files) {
+  try {
+    const data = JSON.parse(readFileSync(join(runDir, file), 'utf-8'));
+    const findings = data.findings || [];
+    const perspective = data.meta?.perspective || basename(file, '.json');
+
+    for (const f of findings) {
+      if (seenIds.has(f.id)) continue;
+      seenIds.add(f.id);
+
+      allFindings.push(f);
+
+      if (f.type === 'positive') {
+        positiveCount++;
+      } else {
+        severityCounts[f.severity] = (severityCounts[f.severity] || 0) + 1;
+        perspectiveCounts[perspective] = (perspectiveCounts[perspective] || 0) + 1;
+      }
+    }
+
+    console.log(`  ${perspective}: ${findings.length} findings`);
+  } catch (err) {
+    console.error(`  Error reading ${file}: ${err.message}`);
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Write run-summary.json
+// ---------------------------------------------------------------------------
+const timestamp = new Date().toISOString();
+const runId = `run-${basename(runDir)}`;
+
+const summary = {
+  findings: allFindings,
+  meta: {
+    runId,
+    timestamp,
+    trigger: 'manual',
+    perspectives: Object.keys(perspectiveCounts),
+    counts: {
+      total: allFindings.length,
+      findings: allFindings.length - positiveCount,
+      positive: positiveCount,
+      ...severityCounts,
+    },
+    byPerspective: perspectiveCounts,
+  },
+};
+
+const summaryPath = join(runDir, 'run-summary.json');
+writeFileSync(summaryPath, JSON.stringify(summary, null, 2));
+console.log(`\nMerged ${allFindings.length} findings → ${summaryPath}`);
+console.log(`  critical: ${severityCounts.critical}, warn: ${severityCounts.warn}, info: ${severityCounts.info}, idea: ${severityCounts.idea}, positive: ${positiveCount}`);
+
+// ---------------------------------------------------------------------------
+// Optional: ingest to pib-db
+// ---------------------------------------------------------------------------
+if (useDb) {
+  try {
+    const pibDb = join(__dirname, 'pib-db.js');
+    execSync(`node "${pibDb}" ingest-findings "${runDir}"`, { stdio: 'inherit' });
+  } catch (err) {
+    console.error(`DB ingest failed: ${err.message}`);
+    console.error('Findings are still saved in run-summary.json.');
+  }
+}

package/templates/scripts/pib-db-schema.sql

@@ -0,0 +1,68 @@
+-- Process-in-a-Box reference data layer
+-- Local SQLite database for work tracking and audit findings.
+-- This is the default persistence layer. Projects that outgrow it
+-- override via phase files (pointing to their own API, DB, or service).
+--
+-- Initialize: node scripts/pib-db.js init
+-- Query:      node scripts/pib-db.js query "SELECT ..."
+
+CREATE TABLE IF NOT EXISTS projects (
+  fid           TEXT PRIMARY KEY CHECK(fid GLOB 'prj:*'),
+  name          TEXT NOT NULL,
+  area          TEXT,
+  status        TEXT NOT NULL DEFAULT 'active'
+                  CHECK(status IN ('active','paused','done','dropped','someday')),
+  notes         TEXT NOT NULL DEFAULT '',
+  created       TEXT NOT NULL CHECK(created GLOB '????-??-??'),
+  completed_at  TEXT,
+  due           TEXT,
+  deleted_at    TEXT
+);
+
+CREATE TABLE IF NOT EXISTS actions (
+  fid           TEXT PRIMARY KEY CHECK(fid GLOB 'act:*'),
+  text          TEXT NOT NULL,
+  area          TEXT,
+  project_fid   TEXT REFERENCES projects(fid) ON DELETE SET NULL,
+  due           TEXT,
+  flagged       INTEGER NOT NULL DEFAULT 0 CHECK(flagged IN (0, 1)),
+  completed     INTEGER NOT NULL DEFAULT 0 CHECK(completed IN (0, 1)),
+  completed_at  TEXT,
+  status        TEXT NOT NULL DEFAULT 'open'
+                  CHECK(status IN ('open','in-progress','blocked','deferred','done')),
+  tags          TEXT NOT NULL DEFAULT '',
+  sort_order    INTEGER NOT NULL DEFAULT 0,
+  created       TEXT NOT NULL CHECK(created GLOB '????-??-??'),
+  notes         TEXT NOT NULL DEFAULT '',
+  deleted_at    TEXT
+);
+
+CREATE TABLE IF NOT EXISTS audit_runs (
+  id            TEXT PRIMARY KEY,
+  date          TEXT NOT NULL,
+  timestamp     TEXT NOT NULL,
+  trigger       TEXT NOT NULL,
+  finding_count INTEGER DEFAULT 0
+);
+
+CREATE TABLE IF NOT EXISTS audit_findings (
+  id                  TEXT PRIMARY KEY,
+  run_id              TEXT NOT NULL REFERENCES audit_runs(id),
+  perspective         TEXT NOT NULL,
+  severity            TEXT NOT NULL CHECK(severity IN ('critical','warn','info','idea')),
+  title               TEXT NOT NULL,
+  description         TEXT,
+  assumption          TEXT,
+  evidence            TEXT,
+  question            TEXT,
+  file                TEXT,
+  line                INTEGER,
+  suggested_fix       TEXT,
+  auto_fixable        INTEGER DEFAULT 0,
+  type                TEXT DEFAULT 'finding' CHECK(type IN ('finding','positive')),
+  triage_status       TEXT DEFAULT 'open'
+                        CHECK(triage_status IN ('open','approved','rejected','deferred','fixed','archived')),
+  triage_notes        TEXT,
+  triaged_at          TEXT,
+  fix_description     TEXT
+);