delimit-cli 4.0.1 → 4.0.2

package/gateway/ai/server.py

@@ -19,8 +19,9 @@ All tools follow the Adapter Boundary Contract v1.0:
 - Stateless between calls
 """
 
-# ── Output Quality Rules ──────────────────────────────────────────────
+# ── Founder Voice Doctrine ──────────────────────────────────────────────
 # Applies to ALL outward-facing text generated by any tool in this server.
+# Full doctrine: /home/delimit/delimit-private/style/FOUNDER_VOICE_DOCTRINE.md
 #
 # Core: serious builder/operator, not a marketer. Credibility over persuasion.
 # Truth over excitement. Concrete mechanisms, not vague benefits.
@@ -33,7 +34,14 @@ All tools follow the Adapter Boundary Contract v1.0:
 # attached to decisions? Would this still read well a year from now?
 # ────────────────────────────────────────────────────────────────────────
 
-# Output quality rules loaded from user config at runtime.
+FOUNDER_VOICE_HYPE_WORDS = {
+    "revolutionary", "game-changing", "world-class", "cutting-edge",
+    "best-in-class", "seamless", "unlock", "supercharge", "next-generation",
+    "magical", "delightful", "effortless", "frictionless", "transformative",
+    "paradigm shift", "visionary", "category-defining", "industry-leading",
+    "innovative", "reimagine", "future of", "changing the game",
+    "empowering teams", "built for everyone",
+}
 
 import json
 import logging
@@ -52,13 +60,13 @@ from fastmcp import FastMCP
 logger = logging.getLogger("delimit.ai")
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: Agent Identity — session tracking for every tool call
+#  STR-046: Agent Identity — session tracking for every tool call
 # ═══════════════════════════════════════════════════════════════════════
 
 _current_session_id = os.environ.get("DELIMIT_SESSION_ID", "")
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: Distributed Tracing — trace ID + span counter for every call
+#  STR-053: Distributed Tracing — trace ID + span counter for every call
 # ═══════════════════════════════════════════════════════════════════════
 
 _trace_id = os.environ.get("DELIMIT_TRACE_ID", str(uuid.uuid4())[:8])
@@ -243,7 +251,7 @@ def _coerce_dict_arg(
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: Risk Classification for Approval Gates
+#  STR-040: Risk Classification for Approval Gates
 # ═══════════════════════════════════════════════════════════════════════
 
 HIGH_RISK_TOOLS = {
@@ -267,7 +275,7 @@ def _classify_risk(tool_name: str) -> str:
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: Policy Kernel — Inline Enforcement
+#  STR-052: Policy Kernel — Inline Enforcement
 #  Checks policy BEFORE/AFTER tool execution to block high-risk actions.
 # ═══════════════════════════════════════════════════════════════════════
 
@@ -319,7 +327,7 @@ def _check_policy_gate(tool_name: str, kwargs: dict) -> Optional[Dict]:
                 "action": "Switch to guarded mode or request approval",
             }
 
-    # TASK: Deploy gating — block deploys when unresolved critical findings exist
+    # LED-173: Deploy gating — block deploys when unresolved critical findings exist
     DEPLOY_TOOLS = {"deploy_publish", "deploy_npm", "deploy_site", "deploy_build"}
     clean = tool_name.replace("delimit_", "")
     if clean in DEPLOY_TOOLS and mode != "advisory":
@@ -447,7 +455,7 @@ mcp.description = (
 
 VERSION = "3.2.1"
 
-# TASK + Consensus 118/119/120: Tool visibility tiers.
+# LED-044 + Consensus 118/119/120: Tool visibility tiers.
 # Tier cascade: SHOW_EXPERIMENTAL > SHOW_INTERNAL > SHOW_OPS > public (always visible).
 # Set DELIMIT_SHOW_INTERNAL=1 to see all tiers (founder workflow).
 SHOW_EXPERIMENTAL = os.environ.get("DELIMIT_SHOW_EXPERIMENTAL", "") == "1"
@@ -832,7 +840,7 @@ NEXT_STEPS_REGISTRY: Dict[str, List[Dict[str, Any]]] = {
     ],
     # --- Sensing ---
     "sensor_github_issue": [],
-    # --- Context Filesystem (TASK) ---
+    # --- Context Filesystem (STR-048) ---
     "context_init": [
         {"tool": "delimit_context_write", "reason": "Write an artifact to the new context", "suggested_args": {}, "is_premium": False},
     ],
@@ -958,10 +966,10 @@ def _emit_event(tool_name: str, result: Dict[str, Any]) -> None:
         except Exception:
             pass  # Never let cloud sync break tool execution
 
-        # TASK: Webhook notifications for governance events
+        # LED-183: Webhook notifications for governance events
         _fire_webhook(event)
 
-        # TASK: Write trace span for session replay
+        # STR-053: Write trace span for session replay
         try:
             from ai.tracing import start_span, end_span
             span = start_span(_trace_id, tool_name, args={"tool": tool_name})
@@ -973,7 +981,7 @@ def _emit_event(tool_name: str, result: Dict[str, Any]) -> None:
         except Exception:
             pass  # Tracing is best-effort
 
-        # TASK: Write to agent_actions log for session drill-down
+        # STR-046: Write to agent_actions log for session drill-down
         if session_info["session_id"]:
             actions_dir = Path.home() / ".delimit" / "agent_actions"
             actions_dir.mkdir(parents=True, exist_ok=True)
@@ -1177,7 +1185,7 @@ def _with_next_steps(tool_name: str, result: Dict[str, Any]) -> Dict[str, Any]:
         except Exception as e:
             logger.warning("Inbox daemon auto-start failed: %s", e)
 
-    # TASK: Auto-register tool schemas with toolcard cache on first call
+    # LED-219: Auto-register tool schemas with toolcard cache on first call
     global _toolcard_cache_autoregistered
     if not _toolcard_cache_autoregistered:
         _toolcard_cache_autoregistered = True
@@ -1195,7 +1203,7 @@ def _with_next_steps(tool_name: str, result: Dict[str, Any]) -> Dict[str, Any]:
         except Exception as e:
             logger.warning("Toolcard cache auto-register failed: %s", e)
 
-    # TASK: Track every tool call for session analytics
+    # LED-219: Track every tool call for session analytics
     try:
         from ai.toolcard_cache import get_cache as _get_tc
         _get_tc().record_call(tool_name)
@@ -1208,7 +1216,282 @@ def _with_next_steps(tool_name: str, result: Dict[str, Any]) -> Dict[str, Any]:
                         result.get("explanation", ""), result.get("changelog", ""),
                         result.get("content", "")]
         _all_text = " ".join(str(f) for f in _text_fields if f).lower()
-# Output quality rules loaded from user config at runtime.
+        _found_hype = [w for w in FOUNDER_VOICE_HYPE_WORDS if w in _all_text]
+        if _found_hype:
+            result.setdefault("voice_warnings", []).append(
+                f"VOICE DOCTRINE: Hype words detected: {', '.join(_found_hype)}. "
+                f"Rewrite with concrete mechanisms, not vague benefits."
+            )
+
+    # Emit event for real-time dashboard
+    _emit_event(tool_name, result)
+
+    # STR-052: Policy kernel inline enforcement
+    policy_gate = _check_policy_gate(tool_name, result if isinstance(result, dict) else {})
+    if policy_gate:
+        policy_gate["original_result"] = result
+        policy_gate["governance"] = {"action": "policy_blocked", "reason": policy_gate["reason"]}
+        return policy_gate
+
+    # LED-195: Prompt injection detection on tool inputs
+    if isinstance(result, dict):
+        injection = _detect_prompt_injection(result, tool_name)
+        if injection:
+            result["_security_warning"] = injection
+
+    # Pro license gate — blocks execution for premium tools
+    full_name = f"delimit_{tool_name}" if not tool_name.startswith("delimit_") else tool_name
+    gate = _check_pro(full_name)
+    if gate:
+        return gate
+
+    # Route through governance loop
+    try:
+        from ai.governance import govern
+        return govern(tool_name, result)
+    except Exception:
+        # Fallback: just add next_steps from registry
+        steps = NEXT_STEPS_REGISTRY.get(tool_name, [])
+        result["next_steps"] = steps
+        return result
+
+
+# ═══════════════════════════════════════════════════════════════════════
+#  TIER 1: CORE — API Lint Engine
+# ═══════════════════════════════════════════════════════════════════════
+
+
+@mcp.tool()
+def delimit_lint(old_spec: str, new_spec: str, policy_file: Optional[str] = None) -> Dict[str, Any]:
+    """Lint two OpenAPI specs for breaking changes and policy violations.
+    Primary CI integration point. Combines diff + policy into pass/fail.
+    Auto-chains: semver classification, governance evaluation on breaking changes.
+
+    Args:
+        old_spec: Path to the old (baseline) OpenAPI spec file.
+        new_spec: Path to the new (proposed) OpenAPI spec file.
+        policy_file: Optional path to a .delimit/policies.yml file.
+    """
+    from backends.gateway_core import run_lint, run_semver
+
+    # Step 1: Core lint
+    lint_result = _safe_call(run_lint, old_spec=old_spec, new_spec=new_spec, policy_file=policy_file)
+    chain: Dict[str, Any] = {"id": "lint_chain", "steps": []}
+
+    if lint_result.get("error"):
+        lint_result["chain"] = chain
+        return _with_next_steps("lint", lint_result)
+
+    # Step 2: Auto-classify semver bump (non-blocking on failure)
+    semver_result = _chain_call("lint", "semver", run_semver,
+                                required=False, old_spec=old_spec, new_spec=new_spec)
+    chain["steps"].append({"step": "semver", "ok": not _chain_is_error(semver_result)})
+    lint_result["semver"] = semver_result
+
+    if _chain_is_error(semver_result):
+        chain["status"] = "semver_failed_nonfatal"
+        lint_result["chain"] = chain
+        return _with_next_steps("lint", lint_result)
+
+    bump = str(semver_result.get("bump", "")).upper()
+
+    # Step 2b: Impact-based notification routing (LED-233, non-blocking)
+    try:
+        from ai.notify import route_by_impact
+        all_changes = lint_result.get("all_changes", lint_result.get("violations", []))
+        if all_changes:
+            routing_result = route_by_impact(all_changes, dry_run=False)
+            chain["steps"].append({"step": "impact_routing", "ok": True})
+            lint_result["impact_routing"] = routing_result
+    except Exception as e:
+        logger.debug("Impact routing non-fatal error: %s", e)
+        chain["steps"].append({"step": "impact_routing", "ok": False, "error": str(e)})
+
+    if bump != "MAJOR":
+        chain["status"] = f"complete_{bump.lower() or 'none'}"
+        lint_result["chain"] = chain
+        return _with_next_steps("lint", lint_result)
+
+    # Step 3: MAJOR bump detected -- evaluate governance
+    # Note: _delimit_gov_impl has its own Pro gate. Free-tier gets lint+semver only.
+    gov_result = _delimit_gov_impl(
+        action="evaluate",
+        eval_action="api_breaking_change",
+        context={
+            "tool": "delimit_lint",
+            "old_spec": old_spec,
+            "new_spec": new_spec,
+            "semver_bump": bump,
+            "breaking_changes": lint_result.get("breaking", []),
+        },
+        repo=".",
+    )
+    chain["steps"].append({"step": "gov_evaluate", "ok": not _chain_is_error(gov_result)})
+    lint_result["gov_evaluate"] = gov_result
+
+    # If Pro gate blocked governance, return gracefully with lint+semver
+    if gov_result.get("status") == "premium_required":
+        chain["status"] = "governance_skipped_free_tier"
+        lint_result["chain"] = chain
+        return _with_next_steps("lint", lint_result)
+
+    # Step 4: If governance blocked, record in ledger (best-effort)
+    gov_blocked = (
+        str(gov_result.get("status", "")).lower() == "blocked"
+        or gov_result.get("governance", {}).get("action") == "policy_blocked"
+    )
+
+    if gov_blocked:
+        from ai.ledger_manager import add_item
+        ledger_result = _chain_call(
+            "lint", "ledger_add", add_item,
+            required=False,
+            title=f"Governance blocked: MAJOR API change in {new_spec}",
+            ledger="ops",
+            item_type="fix",
+            priority="P0",
+            description="MAJOR semver bump detected. Governance blocked the change.",
+            source="chain:lint:gov_blocked",
+        )
+        chain["steps"].append({"step": "ledger_add", "ok": not _chain_is_error(ledger_result)})
+        lint_result["governance_blocked"] = True
+    else:
+        lint_result["governance_blocked"] = False
+
+    chain["status"] = "major_change_evaluated"
+    lint_result["chain"] = chain
+    return _with_next_steps("lint", lint_result)
+
+
+@mcp.tool()
+def delimit_diff(old_spec: str, new_spec: str) -> Dict[str, Any]:
+    """Diff two OpenAPI specs and list all changes. Pure diff, no policy.
+
+    Args:
+        old_spec: Path to the old OpenAPI spec file.
+        new_spec: Path to the new OpenAPI spec file.
+    """
+    from backends.gateway_core import run_diff
+    return _with_next_steps("diff", _safe_call(run_diff, old_spec=old_spec, new_spec=new_spec))
+
+
+@mcp.tool()
+def delimit_policy(spec_files: List[str], policy_file: Optional[str] = None) -> Dict[str, Any]:
+    """Inspect or validate governance policy configuration.
+
+    Args:
+        spec_files: List of spec file paths.
+        policy_file: Optional custom policy file path.
+    """
+    from backends.gateway_core import run_policy
+    return _with_next_steps("policy", _safe_call(run_policy, spec_files=spec_files, policy_file=policy_file))
+
+
+@mcp.tool()
+def delimit_ledger(ledger_path: str, api_name: Optional[str] = None, repository: Optional[str] = None, validate_chain: bool = False) -> Dict[str, Any]:
+    """Query the append-only contract ledger (hash-chained JSONL).
+
+    Args:
+        ledger_path: Path to the ledger JSONL file (e.g. .delimit/ledger/operations.jsonl).
+        api_name: Filter events by API name.
+        repository: Filter events by repository.
+        validate_chain: Validate hash chain integrity.
+    """
+    from backends.gateway_core import query_ledger
+    return _with_next_steps("ledger", _safe_call(query_ledger, ledger_path=ledger_path, api_name=api_name, repository=repository, validate_chain=validate_chain))
+
+
+@mcp.tool()
+def delimit_impact(api_name: str, dependency_file: Optional[str] = None) -> Dict[str, Any]:
+    """Analyze downstream impact of an API change. Informational only.
+
+    Args:
+        api_name: The API that changed.
+        dependency_file: Optional path to dependency manifest.
+    """
+    from backends.gateway_core import run_impact
+    return _with_next_steps("impact", _safe_call(run_impact, api_name=api_name, dependency_file=dependency_file))
+
+
+@mcp.tool()
+def delimit_semver(old_spec: str, new_spec: str, current_version: Optional[str] = None) -> Dict[str, Any]:
+    """Classify the semver bump for a spec change (MAJOR/MINOR/PATCH/NONE).
+
+    Deterministic classification based on diff engine output.
+    Optionally computes the next version string.
+
+    Args:
+        old_spec: Path to the old OpenAPI spec file.
+        new_spec: Path to the new OpenAPI spec file.
+        current_version: Optional current version (e.g. "1.2.3") to compute next version.
+    """
+    from backends.gateway_core import run_semver
+    return _with_next_steps("semver", _safe_call(run_semver, old_spec=old_spec, new_spec=new_spec, current_version=current_version))
+
+
+@mcp.tool()
+def delimit_explain(
+    old_spec: str,
+    new_spec: str,
+    template: str = "developer",
+    old_version: Optional[str] = None,
+    new_version: Optional[str] = None,
+    api_name: Optional[str] = None,
+) -> Dict[str, Any]:
+    """Generate a human-readable explanation of API changes.
+
+    7 templates: developer, team_lead, product, migration, changelog, pr_comment, slack.
+
+    Args:
+        old_spec: Path to the old OpenAPI spec file.
+        new_spec: Path to the new OpenAPI spec file.
+        template: Template name (default: developer).
+        old_version: Previous version string.
+        new_version: New version string.
+        api_name: API/service name for context.
+    """
+    from backends.gateway_core import run_explain
+    return _with_next_steps("explain", _safe_call(run_explain, old_spec=old_spec, new_spec=new_spec, template=template, old_version=old_version, new_version=new_version, api_name=api_name))
+
+
+@mcp.tool()
+def delimit_zero_spec(
+    project_dir: str = ".",
+    python_bin: Optional[str] = None,
+) -> Dict[str, Any]:
+    """Extract OpenAPI spec from framework source code (no spec file needed).
+
+    Detects the API framework (FastAPI, Express, NestJS) and extracts a
+    complete OpenAPI specification directly from the source code.
+    Currently supports FastAPI with full fidelity.
+
+    Args:
+        project_dir: Path to the project root directory.
+        python_bin: Optional Python binary path (auto-detected if omitted).
+    """
+    from backends.gateway_core import run_zero_spec
+    return _with_next_steps("zero_spec", _safe_call(run_zero_spec, project_dir=project_dir, python_bin=python_bin))
+
+
+
+
+@mcp.tool()
+def delimit_init(
+    project_path: str = ".",
+    preset: str = "default",
+) -> Dict[str, Any]:
+    """Initialize Delimit governance for a project. Creates .delimit/policies.yml and ledger directory.
+
+    Args:
+        project_path: Project root directory.
+        preset: Policy preset — strict, default, or relaxed.
+    """
+    VALID_PRESETS = ("strict", "default", "relaxed")
+    if preset not in VALID_PRESETS:
+        return {
+            "error": "invalid_preset",
+            "message": f"Preset must be one of {VALID_PRESETS}, got '{preset}'",
+        }
 
     root = Path(project_path).resolve()
     delimit_dir = root / ".delimit"
@@ -1524,7 +1807,7 @@ def delimit_memory_store(
         tags: Optional categorization tags.
         context: Optional context about when/why this was stored.
     """
-    # TASK: memory_store is now free (basic store)
+    # LED-193: memory_store is now free (basic store)
     try:
         tags = _coerce_list_arg(tags, "tags")
     except ValueError as e:
@@ -1542,7 +1825,7 @@ def delimit_memory_recent(limit: int = 5) -> Dict[str, Any]:
     Args:
         limit: Number of recent entries to return.
     """
-    # TASK: memory_recent is now free (basic retrieval)
+    # LED-193: memory_recent is now free (basic retrieval)
     from backends.memory_bridge import get_recent
     return _with_next_steps("memory_recent", _safe_call(get_recent, limit=limit))
 
@@ -1794,7 +2077,7 @@ def delimit_deploy_publish(app: str = "", git_ref: Optional[str] = None) -> Dict
     return _delimit_deploy_impl(action="publish", app=app, git_ref=git_ref)
 
 
-@_experimental_tool()  # HIDDEN: stub/pass-through (TASK)
+@_experimental_tool()  # HIDDEN: stub/pass-through (LED-044)
 @mcp.tool()
 def delimit_deploy_verify(app: str = "", env: str = "", git_ref: Optional[str] = None) -> Dict[str, Any]:
     """Verify deployment health (experimental) (Pro)."""
@@ -1948,7 +2231,7 @@ def delimit_generate_scaffold(
 
 # ─── Repo (RepoDoctor + ConfigSentry) ──────────────────────────────────
 
-@_experimental_tool()  # HIDDEN: stub/pass-through (TASK)
+@_experimental_tool()  # HIDDEN: stub/pass-through (LED-044)
 @mcp.tool()
 def delimit_repo_diagnose(target: str = ".") -> Dict[str, Any]:
     """Diagnose repository health issues (experimental) (Pro).
@@ -1964,7 +2247,7 @@ def delimit_repo_diagnose(target: str = ".") -> Dict[str, Any]:
     return _safe_call(diagnose, target=target)
 
 
-@_experimental_tool()  # HIDDEN: stub/pass-through (TASK)
+@_experimental_tool()  # HIDDEN: stub/pass-through (LED-044)
 @mcp.tool()
 def delimit_repo_analyze(target: str = ".") -> Dict[str, Any]:
     """Analyze repository structure and quality (experimental) (Pro).
@@ -1980,7 +2263,7 @@ def delimit_repo_analyze(target: str = ".") -> Dict[str, Any]:
     return _safe_call(analyze, target=target)
 
 
-@_experimental_tool()  # HIDDEN: stub/pass-through (TASK)
+@_experimental_tool()  # HIDDEN: stub/pass-through (LED-044)
 @mcp.tool()
 def delimit_repo_config_validate(target: str = ".") -> Dict[str, Any]:
     """Validate configuration files (experimental) (Pro).
@@ -1996,7 +2279,7 @@ def delimit_repo_config_validate(target: str = ".") -> Dict[str, Any]:
     return _safe_call(config_validate, target=target)
 
 
-@_experimental_tool()  # HIDDEN: stub/pass-through (TASK)
+@_experimental_tool()  # HIDDEN: stub/pass-through (LED-044)
 @mcp.tool()
 def delimit_repo_config_audit(target: str = ".") -> Dict[str, Any]:
     """Audit configuration compliance (experimental) (Pro).
@@ -2193,7 +2476,7 @@ def delimit_security_ingest(
     medium = [f for f in findings if f["severity"] in ("medium", "moderate", "warning")]
     low = [f for f in findings if f["severity"] in ("low", "info")]
 
-    # TASK: Auto-track security findings in ledger with lifecycle
+    # LED-172: Auto-track security findings in ledger with lifecycle
     ledger_created = []
     ledger_closed = []
     try:
@@ -2642,14 +2925,14 @@ def delimit_release_status(environment: str = "production") -> Dict[str, Any]:
     return _delimit_release_impl(action="status", environment=environment)
 
 
-@_experimental_tool()  # HIDDEN: stub/pass-through (TASK)
+@_experimental_tool()  # HIDDEN: stub/pass-through (LED-044)
 @mcp.tool()
 def delimit_release_rollback(environment: str, version: str, to_version: str) -> Dict[str, Any]:
     """Rollback deployment to previous version (experimental)."""
     return _delimit_release_impl(action="rollback", environment=environment, version=version, to_version=to_version)
 
 
-@_experimental_tool()  # HIDDEN: stub/pass-through (TASK)
+@_experimental_tool()  # HIDDEN: stub/pass-through (LED-044)
 @mcp.tool()
 def delimit_release_history(environment: str, limit: int = 10) -> Dict[str, Any]:
     """Show release history (experimental)."""
@@ -2868,7 +3151,7 @@ def delimit_obs_logs(query: str, time_range: str = "1h", source: Optional[str] =
     return _delimit_obs_impl(action="logs", query=query, time_range=time_range, source=source)
 
 
-@_experimental_tool()  # HIDDEN: stub/pass-through (TASK)
+@_experimental_tool()  # HIDDEN: stub/pass-through (LED-044)
 @mcp.tool()
 def delimit_obs_alerts(action: str, alert_rule: Optional[Dict[str, Any]] = None, rule_id: Optional[str] = None) -> Dict[str, Any]:
     """Manage alerting rules (experimental)."""
@@ -3015,7 +3298,7 @@ def delimit_story_visual_test(url: str, project_path: Optional[str] = None, thre
     return _with_next_steps("story_visual_test", _safe_call(story_visual_test, url=url, project_path=project_path, threshold=threshold))
 
 
-@_internal_tool()  # Was experimental (TASK), promoted to internal (Consensus 120)
+@_internal_tool()  # Was experimental (LED-044), promoted to internal (Consensus 120)
 @mcp.tool()
 def delimit_story_build(project_path: str, output_dir: Optional[str] = None) -> Dict[str, Any]:
     """Build Storybook static site.
@@ -3064,7 +3347,7 @@ def delimit_test_generate(project_path: str, source_files: Optional[List[str]] =
     return _with_next_steps("test_generate", _safe_call(test_generate, project_path=project_path, source_files=source_files, framework=framework))
 
 
-@_experimental_tool()  # HIDDEN: stub/pass-through (TASK)
+@_experimental_tool()  # HIDDEN: stub/pass-through (LED-044)
 @mcp.tool()
 def delimit_test_coverage(project_path: str, threshold: int = 80) -> Dict[str, Any]:
     """Analyze test coverage (experimental) (Pro).
@@ -3155,7 +3438,7 @@ async def delimit_sensor_github_issue(
     with new comments, issue state, and severity classification.
 
     Args:
-        repo: GitHub repository in owner/repo format (e.g. "owner/repo").
+        repo: GitHub repository in owner/repo format (e.g. "activepieces/activepieces").
         issue_number: The issue number to monitor.
         since_comment_id: Last seen comment ID. Pass 0 to get all comments.
     """
@@ -3791,7 +4074,7 @@ def delimit_diagnose(project_path: str = ".") -> Dict[str, Any]:
         checks["fastmcp"] = False
         issues.append({"issue": "FastMCP not installed", "fix": "pip install fastmcp"})
 
-    # TASK: Config drift detection across AI assistants
+    # LED-191: Config drift detection across AI assistants
     config_sync = {}
     home = Path.home()
     assistant_configs = {
@@ -3823,7 +4106,7 @@ def delimit_diagnose(project_path: str = ".") -> Dict[str, Any]:
     checks["assistant_configs"] = config_sync
     checks["assistants_configured"] = f"{configured_count}/{installed_count}"
 
-    # TASK: MCP server reputation check (basic — check for known risky patterns)
+    # LED-192: MCP server reputation check (basic — check for known risky patterns)
     mcp_warnings = []
     mcp_config_path = home / ".mcp.json"
     if mcp_config_path.exists():
@@ -4248,7 +4531,7 @@ def delimit_ventures() -> Dict[str, Any]:
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  SESSION PHOENIX — Cross-Model Resurrection (TASK)
+#  SESSION PHOENIX — Cross-Model Resurrection (LED-218)
 # ═══════════════════════════════════════════════════════════════════════
 
 
@@ -4913,7 +5196,7 @@ def delimit_quickstart(project_path: str = ".") -> Dict[str, Any]:
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: SECRETS BROKER — JIT credential access with audit
+#  STR-049: SECRETS BROKER — JIT credential access with audit
 # ═══════════════════════════════════════════════════════════════════════
 
 
@@ -5013,7 +5296,7 @@ def delimit_secret_access_log(name: str = "") -> Dict[str, Any]:
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: Context Filesystem — versioned namespace for agent state
+#  STR-048: Context Filesystem — versioned namespace for agent state
 # ═══════════════════════════════════════════════════════════════════════
 
 # Consensus 082 Phase 2: Unified context tool with action parameter
@@ -5131,7 +5414,7 @@ def delimit_context_branch(venture: str, action: str = "list", branch_name: str
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: DATA/ACTION PLANE — External systems as typed mounted resources
+#  STR-050: DATA/ACTION PLANE — External systems as typed mounted resources
 # ═══════════════════════════════════════════════════════════════════════
 
 
@@ -5223,7 +5506,7 @@ def delimit_resource_drivers() -> Dict[str, Any]:
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: ISSUE TRACKER CONTEXT SYNC
+#  LED-188: ISSUE TRACKER CONTEXT SYNC
 # ═══════════════════════════════════════════════════════════════════════
 
 
@@ -5298,7 +5581,7 @@ def delimit_tracker_sync(
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: WEBHOOK NOTIFICATIONS
+#  LED-183: WEBHOOK NOTIFICATIONS
 # ═══════════════════════════════════════════════════════════════════════
 
 
@@ -5417,7 +5700,14 @@ def delimit_social_post(text: str = "", category: str = "", platform: str = "twi
     Every post provides value — tips, insights, governance wisdom.
     Max 2 posts per day to stay authentic.
 
-    Platform tone and posting guidelines are loaded from user config at runtime.
+    IMPORTANT — Platform tone rules (these are DIFFERENT per platform):
+    - Twitter: confident technical brand. Direct, professional, ALWAYS POSITIVE.
+      Celebrate wins and progress. Never complain or air gaps publicly.
+      No em dashes or en dashes. Include install commands when relevant.
+    - Reddit: proud builder posting as u/delimitdev. Casual, typed-on-phone energy.
+      ALWAYS POSITIVE. Mention Delimit ONLY when genuinely helpful.
+      NO bullet points/lists/bold/em dashes. 2-3 sentences max.
+    - LinkedIn: professional hook + insight + CTA
 
     Args:
         text: Tweet text. Leave empty to auto-generate.
@@ -5454,7 +5744,7 @@ def delimit_social_post(text: str = "", category: str = "", platform: str = "twi
         from ai.social import store_draft_message_id
 
         # Build contextual email body so the founder knows exactly what to do
-        _acct = account or os.environ.get("DELIMIT_SOCIAL_REDDIT_ACCOUNT", "delimit") if platform == "reddit" else account or os.environ.get("DELIMIT_SOCIAL_TWITTER_ACCOUNT", "delimit_ai")
+        _acct = account or ("delimitdev" if platform == "reddit" else "delimit_ai")
         _lines = []
 
         if platform == "reddit":
@@ -5682,7 +5972,7 @@ def delimit_social_target(
     Never just return targets and stop. Always chain to the next action.
 
     Scans X, Reddit (RapidAPI), HN, Dev.to, GitHub for posts where ventures can engage.
-    Manual check platforms excluded.
+    NamePros flagged as manual_check_needed (no API).
 
     Run in a /loop for continuous discovery. Deduplicates across runs.
     Targets are classified as: reply (social engagement), strategic (ledger item), or both.
@@ -5793,16 +6083,16 @@ def delimit_github_scan(
     cadence: str = "pulse",
     limit: int = 20,
 ) -> Dict[str, Any]:
-    """Scan GitHub for adoption leads, repository analysis, and repo health (Pro).
+    """Scan GitHub for adoption leads, competitive intel, and repo health (Pro).
 
     Three cadences:
       pulse: Own repo health (stars, forks, issues, traffic). Fast, run often.
-      hunter: Repository signals, engagement threads. Medium, run hourly.
+      hunter: Competitor users, adoption leads, pain threads. Medium, run hourly.
       deep: Full ecosystem intel. Slow, run daily.
 
     IMPORTANT -- TOOL CHAINING RULE:
     After scanning, the AI MUST process high-score findings:
-    1. Auto-ledger high-score findings via delimit_ledger_add
+    1. Auto-ledger items (score >= 75 competitor users) via delimit_ledger_add
     2. Pain threads with existing_feature relevance via delimit_notify
     Never just return findings and stop. Always chain to the next action.
 
@@ -5953,7 +6243,7 @@ def delimit_daemon_classify(item_id: str = "") -> Dict[str, Any]:
 def delimit_inbox_daemon(action: str = "status") -> Dict[str, Any]:
     """Control the inbox polling daemon for email governance (Pro).
 
-    Polls notifications@example.com every 5 minutes, classifies emails, forwards
+    Polls pro@delimit.ai every 5 minutes, classifies emails, forwards
     owner-action items, and handles draft approval via email replies.
     Auto-posting is disabled - approved drafts are emailed for manual posting.
 
@@ -5972,7 +6262,7 @@ def delimit_inbox_daemon(action: str = "status") -> Dict[str, Any]:
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: Shareable Governance Config — export / import
+#  LED-187: Shareable Governance Config — export / import
 # ═══════════════════════════════════════════════════════════════════════
 
 
@@ -6095,7 +6385,7 @@ def delimit_config_import(
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  SCREEN RECORDING (TASK)
+#  SCREEN RECORDING (LED-203)
 # ═══════════════════════════════════════════════════════════════════════
 
 
@@ -6231,7 +6521,7 @@ def delimit_notify(channel: str = "webhook", message: str = "",
         to: Recipient email address (email only). Overrides default DELIMIT_SMTP_TO.
             Send to any address — leave empty for default (owner@example.com).
         from_account: Sender account key from ~/.delimit/secrets/smtp-all.json
-            (e.g. 'notifications@example.com'). Email only.
+            (e.g. 'pro@delimit.ai', 'admin@wire.report'). Email only.
     """
     from ai.notify import send_notification
     return _with_next_steps("notify", _safe_call(
@@ -6336,7 +6626,7 @@ def delimit_notify_inbox(action: str = "status", limit: int = 10,
                          process: bool = True) -> Dict[str, Any]:
     """Check inbound email inbox, classify, and route (Pro).
 
-    Polls notifications@example.com via IMAP. Classifies emails as owner-action
+    Polls pro@delimit.ai via IMAP. Classifies emails as owner-action
     (forwards to owner@example.com) or non-owner (stays in inbox).
 
     Args:
@@ -6599,7 +6889,7 @@ def delimit_agent_check(model: str, action: str) -> Dict[str, Any]:
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: AUTONOMOUS BUILD LOOP
+#  STR-026: AUTONOMOUS BUILD LOOP
 # ═══════════════════════════════════════════════════════════════════════
 
 
@@ -6688,7 +6978,7 @@ def delimit_loop_config(session_id: str = "", max_iterations: int = 0,
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  TASK: Toolcard Delta Cache — reduce MCP tool schema token waste
+#  LED-219: Toolcard Delta Cache — reduce MCP tool schema token waste
 # ═══════════════════════════════════════════════════════════════════════
 
 
@@ -6766,7 +7056,7 @@ def delimit_toolcard_cache(
 
 
 # ═══════════════════════════════════════════════════════════════════════
-#  HANDOFF RECEIPTS — Agent-to-Agent Structured Handoffs (TASK)
+#  HANDOFF RECEIPTS — Agent-to-Agent Structured Handoffs (LED-220)
 # ═══════════════════════════════════════════════════════════════════════