delimit-cli 3.14.16 → 3.14.18

package/lib/cross-model-hooks.js

@@ -322,14 +322,14 @@ function installClaudeHooks(tool, hookConfig) {
             if (!existingSecurity) {
                 config.hooks.PreToolUse.push({
                     matcher: 'Bash',
-                    if: "command matches 'npm publish' or command matches 'npx deploy' or command matches 'deploy' or command matches 'release'",
+                    if: "command matches 'npm publish' or command matches 'npx deploy' or command matches 'deploy' or command matches 'release' or command matches 'docker compose up' or command matches 'docker-compose up' or command matches 'docker build'",
                     hooks: [{
                         type: 'command',
-                        command: `${npxCmd} security-audit`,
+                        command: `${npxCmd} hook deploy-gate`,
                         timeout: 30,
                     }],
                 });
-                changes.push('PreToolUse:deploy-audit');
+                changes.push('PreToolUse:deploy-gate');
             }
         }
     }
@@ -696,14 +696,21 @@ async function hookSessionStart() {
         lines.push('[Delimit] No policy file found -- run "delimit init" to set up governance');
     }
 
-    // Check for updates
+    // Auto-update check + install
     try {
         const pkgPath = path.join(__dirname, '..', 'package.json');
         const currentVersion = JSON.parse(fs.readFileSync(pkgPath, 'utf-8')).version;
         const { execSync: execS } = require('child_process');
         const latest = execS('npm view delimit-cli version 2>/dev/null', { encoding: 'utf-8', timeout: 5000 }).trim();
         if (latest && latest !== currentVersion && latest > currentVersion) {
-            lines.push(`[Delimit] Update available: ${currentVersion} → ${latest} (run: npx delimit-cli@latest setup)`);
+            lines.push(`[Delimit] Updating ${currentVersion} -> ${latest}...`);
+            try {
+                execS('npm install -g delimit-cli@latest 2>/dev/null', { timeout: 30000, stdio: 'pipe' });
+                execS('delimit-cli setup --yes 2>/dev/null', { timeout: 30000, stdio: 'pipe' });
+                lines.push(`[Delimit] Updated to ${latest}`);
+            } catch {
+                lines.push(`[Delimit] Auto-update failed. Run: npm install -g delimit-cli@latest`);
+            }
         }
     } catch { /* offline or timeout — skip silently */ }
 
@@ -937,6 +944,97 @@ async function hookPreCommit() {
 
 // ---------------------------------------------------------------------------
 // Exports
+// ---------------------------------------------------------------------------
+// Deploy gate hook — runs smoke test before any deploy (LED-024 feedback)
+// ---------------------------------------------------------------------------
+
+async function hookDeployGate() {
+    const lines = [];
+    lines.push('[Delimit] Deploy gate check');
+    lines.push('');
+
+    let blocked = false;
+
+    // 1. Check for common import/syntax errors
+    const cwd = process.cwd();
+    const hasDockerCompose = fs.existsSync(path.join(cwd, 'docker-compose.yml'))
+        || fs.existsSync(path.join(cwd, 'docker-compose.yaml'))
+        || fs.existsSync(path.join(cwd, 'compose.yml'));
+
+    // 2. Check for Python import errors if it's a Python project
+    const hasPython = fs.existsSync(path.join(cwd, 'requirements.txt'))
+        || fs.existsSync(path.join(cwd, 'pyproject.toml'))
+        || fs.existsSync(path.join(cwd, 'setup.py'));
+
+    if (hasPython) {
+        try {
+            // Find the main app module
+            const appDirs = ['app', 'src', 'api'];
+            for (const dir of appDirs) {
+                const initFile = path.join(cwd, dir, '__init__.py');
+                const mainFile = path.join(cwd, dir, 'main.py');
+                if (fs.existsSync(initFile) || fs.existsSync(mainFile)) {
+                    try {
+                        execSync(`python3 -c "import ${dir}" 2>&1`, {
+                            encoding: 'utf-8',
+                            timeout: 10000,
+                            cwd,
+                        });
+                        lines.push(`[Delimit] ✓ ${dir}/ imports clean`);
+                    } catch (e) {
+                        lines.push(`[Delimit] ✗ ${dir}/ import error: ${e.stdout || e.stderr || e.message}`);
+                        blocked = true;
+                    }
+                }
+            }
+        } catch { /* ignore */ }
+    }
+
+    // 3. Check for Node.js syntax errors
+    const hasNode = fs.existsSync(path.join(cwd, 'package.json'));
+    if (hasNode) {
+        try {
+            execSync('node -e "require(\'./\')" 2>&1', {
+                encoding: 'utf-8',
+                timeout: 5000,
+                cwd,
+            });
+            lines.push('[Delimit] ✓ Node.js entry point loads');
+        } catch {
+            // Not all projects have a main entry — skip silently
+        }
+    }
+
+    // 4. Check for uncommitted changes
+    try {
+        const status = execSync('git status --porcelain 2>/dev/null', {
+            encoding: 'utf-8',
+            timeout: 3000,
+            cwd,
+        }).trim();
+        if (status) {
+            const fileCount = status.split('\n').length;
+            lines.push(`[Delimit] ⚠ ${fileCount} uncommitted file(s) — consider committing before deploy`);
+        }
+    } catch { /* not a git repo */ }
+
+    // 5. Result
+    lines.push('');
+    if (blocked) {
+        lines.push('[Delimit] ✗ DEPLOY BLOCKED — fix import errors above');
+        lines.push('[Delimit] Run: delimit_test_smoke for full diagnostics');
+    } else {
+        lines.push('[Delimit] ✓ Deploy gate passed');
+    }
+    lines.push('');
+
+    process.stdout.write(lines.join('\n') + '\n');
+
+    if (blocked) {
+        process.exit(1);
+    }
+}
+
 // ---------------------------------------------------------------------------
 
 module.exports = {
@@ -954,6 +1052,7 @@ module.exports = {
     hookSessionStart,
     hookPreTool,
     hookPreCommit,
+    hookDeployGate,
     countPendingStrategyItems,
     getTopStrategyItem,
     findClaudeHookGroup,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "delimit-cli",
   "mcpName": "io.github.delimit-ai/delimit-mcp-server",
-  "version": "3.14.16",
+  "version": "3.14.18",
   "description": "Unify Claude Code, Codex, Cursor, and Gemini CLI with persistent context, governance, and multi-model debate.",
   "main": "index.js",
   "files": [