heyspex 0.2.5 → 0.2.6

package/package.json

@@ -1,257 +1,261 @@
-{
-  "name": "heyspex",
-  "version": "0.2.5",
-  "description": "HeySpex CLI + MCP server — connect Claude Code, Cursor, and any MCP client to your HeySpex spec vault",
-  "keywords": [
-    "heyspex",
-    "mcp",
-    "model-context-protocol",
-    "claude-code",
-    "cursor",
-    "spec-driven-development",
-    "agents"
-  ],
-  "type": "module",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/pwhermanson/workflow-protocol.git"
-  },
-  "engines": {
-    "node": ">=20.0.0 <25.0.0"
-  },
-  "workspaces": [
-    "spex-console",
-    "pm-control-center",
-    "companion/extension"
-  ],
-  "bin": {
-    "hs": "bin/hs.mjs",
-    "heyspex": "bin/hs.mjs",
-    "heyspex-mcp": "vendor/heyspex-mcp/cli.mjs",
-    "spexcode": "bin/spexcode.mjs"
-  },
-  "exports": {
-    "./package.json": "./package.json",
-    "./console-url-resolver": "./scripts/lib/console-url-resolver.mjs"
-  },
-  "files": [
-    "bin/hs.mjs",
-    "bin/postinstall.mjs",
-    "bin/hs-vault-binding.mjs",
-    "vendor/heyspex-mcp/**/*.mjs",
-    "!vendor/heyspex-mcp/**/*.test.mjs",
-    "vendor/heyspex-mcp/config-seed.yaml",
-    "scripts/check-mcp-freshness.mjs",
-    "scripts/gateway-skills-lib.mjs",
-    "scripts/vault-id-lib.mjs",
-    "scripts/lib/console-url-resolver.mjs",
-    "scripts/lib/window-placement.mjs",
-    "scripts/lib/hs-link.mjs",
-    "scripts/lib/hook-vault-header.mjs",
-    "scripts/lib/dev-mode.mjs",
-    "scripts/lib/directive-obligations.mjs",
-    "scripts/lib/hs-command.mjs",
-    "scripts/lib/shared-path-helpers.mjs",
-    "scripts/claude-statusline/statusline-command.mjs",
-    "scripts/claude-statusline/fonts/HeySpexIcons.ttf",
-    "scripts/dev-server-status.mjs",
-    "scripts/lib/hs-source-*.mjs",
-    "scripts/lib/agent-env-markers.mjs",
-    "!scripts/lib/hs-source-*.test.mjs",
-    "scripts/lib/standalone-doctor.mjs",
-    "dev-factory/lib/fleet-readiness.mjs",
-    "dev-factory/lib/fleet-state.mjs",
-    "dev-factory/lib/code-repo-root.mjs",
-    "dev-factory/lib/sufficiency-score.mjs",
-    "dev-factory/lib/model-catalog.mjs",
-    "dev-factory/model-catalog.json",
-    "docs/mcp-client-config.md",
-    "docs/copilot-plugin-install.md",
-    "docs/driving-heyspex-from-copilot.md",
-    "plugins/heyspex/README.md",
-    "dist/cli/*.mjs",
-    "dist/cli-templates/**",
-    "LICENSE",
-    "scripts/install-claude-code-hooks.mjs",
-    "scripts/install-cursor-hooks.mjs",
-    "scripts/install-copilot-hooks.mjs",
-    "scripts/copilot-statusline.mjs",
-    "scripts/lib/customer-kit.mjs",
-    "scripts/lib/copilot-cli.mjs",
-    "scripts/lib/hook-dispositions.mjs",
-    "scripts/lib/template-pin.mjs",
-    "scripts/cursor-hooks/manifest.mjs",
-    "scripts/dev-server-stop.mjs",
-    "scripts/wip-ledger-health.mjs",
-    "scripts/hs-worktree.mjs",
-    "scripts/lib/hs-worktree-args.mjs",
-    "dev-factory/lib/worktree-allocator.mjs",
-    "dev-factory/engine/worktree.mjs",
-    "scripts/hs-view.mjs",
-    "scripts/hs-capture-cli.mjs",
-    "scripts/lib/heyspex-home.mjs",
-    "scripts/hs-companion.mjs",
-    "scripts/lib/hs-companion-settings.mjs",
-    "scripts/hs-next.mjs",
-    "scripts/hs-mode.mjs",
-    "scripts/heyspex-mode.mjs",
-    "scripts/hs-gateway.mjs",
-    "scripts/hs-settings.mjs",
-    "scripts/hs-classifier.mjs",
-    "scripts/hs-auto.mjs",
-    "scripts/hs-auto-resolve.mjs",
-    "scripts/hs-auto-source.mjs",
-    "dev-factory/lib/spec-io.mjs",
-    "dev-factory/lib/epic-detect.mjs",
-    "plugins/heyspex/bin/launch-mcp.mjs",
-    "plugins/heyspex/bin/run-hook.mjs",
-    "plugins/heyspex/.claude-plugin/plugin.json",
-    ".claude-plugin/marketplace.json",
-    "plugins/heyspex/.mcp.json",
-    "plugins/heyspex/.cursor-plugin/plugin.json",
-    "plugins/heyspex/mcp.json",
-    "plugins/heyspex/assets/*",
-    "plugins/heyspex/hooks/*.json",
-    "scripts/claude-hooks/*.mjs",
-    "!scripts/claude-hooks/*.test.mjs",
-    "!scripts/claude-hooks/*.smoke.mjs",
-    "!scripts/claude-hooks/*.fixtures.mjs",
-    "!scripts/claude-hooks/*.measure.mjs",
-    "scripts/stamp-provenance-on-edit.mjs",
-    "scripts/provenance-lib.mjs",
-    "scripts/lib/subagent-git-lock.mjs",
-    "dev-factory/lib/seat-context.mjs",
-    "dev-factory/lib/context-budget.mjs",
-    "dev-factory/lib/fleet-queue.mjs",
-    "dev-factory/lib/fleet-queue-file.mjs",
-    "spexharness/src/adapters/*.mjs",
-    "spexharness/src/gates/capture-workflow-gate.mjs",
-    "spexharness/src/gates/claim-before-code-gate.decide.mjs",
-    "spexharness/src/gates/claim-before-code-gate.mjs",
-    "spexharness/src/gates/directive-obligation-gate.decide.mjs",
-    "spexharness/src/gates/directive-obligation-gate.mjs",
-    "spexharness/src/gates/deep-research-cost-gate.mjs",
-    "spexharness/src/gates/enforce-session-sequence.mjs",
-    "spexharness/src/gates/enforce-vault-naming.mjs",
-    "spexharness/src/gates/epic-milestone-phrasing-gate.mjs",
-    "spexharness/src/gates/diagnose-capture-reminder.mjs",
-    "spexharness/src/gates/git-identity-guard.decide.mjs",
-    "spexharness/src/gates/git-identity-guard.mjs",
-    "spexharness/src/gates/_shell-write-targets.mjs",
-    "spexharness/src/gates/vault-write-tier-guard.decide.mjs",
-    "spexharness/src/gates/vault-write-tier-guard.mjs",
-    "spexharness/src/gates/vault-mirror-catchup.mjs",
-    "spexharness/src/gates/vault-mirror-catchup.runner.mjs",
-    "spexharness/src/gates/git-reflog-audit.mjs",
-    "spexharness/src/gates/git-stash-gate.decide.mjs",
-    "spexharness/src/gates/git-stash-gate.mjs",
-    "spexharness/src/gates/id-display-format-gate.mjs",
-    "spexharness/src/gates/inject-doctrine-gate.mjs",
-    "spexharness/src/gates/inject-vault-context.mjs",
-    "spexharness/src/gates/naughty-list-gate.mjs",
-    "spexharness/src/gates/plan-review-gate.mjs",
-    "spexharness/src/gates/preflight-reminder-gate.mjs",
-    "spexharness/src/gates/research-protocol-gate.mjs",
-    "spexharness/src/gates/settings-write-gate.decide.mjs",
-    "spexharness/src/gates/settings-write-gate.mjs",
-    "spexharness/src/profile/*.mjs",
-    "spexharness/src/doctrine/*.mjs",
-    "spexharness/doctrine/baseline/SPEXCODE-DOCTRINE.baseline.json",
-    "spexharness/src/chat/tui/ansi.mjs",
-    "spexharness/src/chat/tui/palette.mjs",
-    "spexharness/src/chat/tui/select.mjs",
-    "spexharness/src/config-root.mjs",
-    "spexharness/src/context-budget.mjs",
-    "spexharness/src/dev-server-control.mjs",
-    "spexharness/src/events.mjs",
-    "spexharness/src/git-reflog-audit.mjs",
-    "spexharness/src/intent-classifier.mjs",
-    "spexharness/src/intent-directive.mjs",
-    "spexharness/src/redact.mjs",
-    "spexharness/src/rule-table.mjs",
-    "spexharness/src/seat-context.mjs",
-    "spexharness/src/session-bootstrap.mjs",
-    "spexharness/src/session-record.mjs",
-    "spexharness/src/token-inventory.mjs",
-    "!spexharness/**/*.test.mjs"
-  ],
-  "dependencies": {
-    "js-yaml": ">=3.13.0 <5.0.0"
-  },
-  "devDependencies": {
-    "esbuild": "^0.24.2"
-  },
-  "scripts": {
-    "prepack": "node scripts/sync-skills.mjs && node scripts/build-cli-bundle.mjs && node scripts/prepack-closure-gate.mjs",
-    "build:cli": "node scripts/build-cli-bundle.mjs",
-    "postinstall": "node bin/postinstall.mjs",
-    "setup": "node scripts/heyspex-doctor.mjs --fix",
-    "doctor": "node scripts/heyspex-doctor.mjs",
-    "heyspex:on": "node scripts/hs-mode.mjs on",
-    "heyspex:off": "node scripts/hs-mode.mjs off",
-    "heyspex:status": "node scripts/hs-mode.mjs status",
-    "commandcode:install": "node scripts/install-commandcode.mjs",
-    "commandcode:check": "node scripts/install-commandcode.mjs --check",
-    "commandcode:uninstall": "node scripts/install-commandcode.mjs --uninstall",
-    "seats:sync": "node scripts/sync-seat-context.mjs",
-    "seats:check": "node scripts/sync-seat-context.mjs --check",
-    "skills:sync": "node scripts/sync-skills.mjs",
-    "skills:check": "node scripts/sync-skills.mjs --check",
-    "pm:dashboard": "node bin/cli.mjs dashboard",
-    "pm:control-center": "node bin/cli.mjs control-center",
-    "pm:parallel-check": "node bin/cli.mjs parallel-check",
-    "validate:vault-ids": "node scripts/validate-vault-ids.mjs --require-family",
-    "validate:vault-naming": "node scripts/validate-vault-naming.mjs",
-    "validate:vault-blockers": "node scripts/validate-vault-blockers.mjs",
-    "validate:vault-frontmatter": "node scripts/validate-vault-frontmatter.mjs",
-    "validate:vault-encoding": "node scripts/fix-mojibake.mjs --check",
-    "fix:vault-encoding": "node scripts/fix-mojibake.mjs --apply",
-    "validate:review-backlinks": "node scripts/validate-review-backlinks.mjs",
-    "build:procedure-catalog": "node scripts/build-procedure-catalog.mjs",
-    "validate:procedure-catalog": "node scripts/build-procedure-catalog.mjs --check",
-    "build:guardrails": "node scripts/build-guardrails.mjs",
-    "validate:guardrails": "node scripts/build-guardrails.mjs --check",
-    "compile:agents": "node scripts/compile-agents.mjs",
-    "validate:agents": "node scripts/compile-agents.mjs --check",
-    "build:vault-index": "node scripts/build-vault-index.mjs",
-    "validate:vault-index": "node scripts/build-vault-index.mjs --check",
-    "check:retired-names": "node scripts/check-retired-names.mjs",
-    "check:model-ids": "node scripts/check-model-ids.mjs",
-    "check:shared-helpers": "node scripts/check-shared-helpers.mjs",
-    "check:no-process-exit": "node scripts/check-no-process-exit.mjs",
-    "check:epic-milestone-phrasing": "node scripts/check-epic-milestone-phrasing.mjs",
-    "smoke:cli-help": "node scripts/smoke-cli-help.mjs",
-    "commit": "node scripts/human-commit.mjs",
-    "commit:owner": "node scripts/owner-commit.mjs",
-    "hooks:install": "node scripts/install-git-hooks.mjs",
-    "hooks:install-claude": "node scripts/install-claude-code-hooks.mjs",
-    "hooks:check-claude": "node scripts/install-claude-code-hooks.mjs --check",
-    "hooks:install-cursor": "node scripts/install-cursor-hooks.mjs",
-    "hooks:check-cursor": "node scripts/install-cursor-hooks.mjs --check",
-    "hooks:write-github": "node scripts/lib/customer-kit.mjs --write-github-hooks",
-    "hooks:check-github": "node scripts/lib/customer-kit.mjs --check-github-hooks",
-    "hooks:smoke-cursor": "node scripts/cursor-hooks/_run.smoke.mjs",
-    "companion": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action start",
-    "companion:stop": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action stop",
-    "companion:status": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action status",
-    "spexcompanion": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action start",
-    "spexcompanion:stop": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action stop",
-    "spexcompanion:status": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action status",
-    "console": "npm run dev -w spex-console",
-    "console:log": "pwsh -NoProfile -ExecutionPolicy Bypass -File scripts/run-console-devlog.ps1",
-    "console:log:lan": "pwsh -NoProfile -ExecutionPolicy Bypass -File scripts/run-console-devlog.ps1 -Lan",
-    "console:stop": "node scripts/dev-server-stop.mjs",
-    "console:status": "node scripts/dev-server-status.mjs",
-    "//test": "`npm test` is an ALIAS for `test:all` (scripts/run-all-tests.mjs) - the repo-health sweep over all four suites. It is deliberately NOT wired into CI or any git/Claude hook: .github/workflows/ci.yml runs `npm test --workspace spex-console`, which is a different script and is unaffected.",
-    "test": "npm run test:all",
-    "test:all": "node scripts/run-all-tests.mjs",
-    "test:mcp": "node --test vendor/heyspex-mcp/*.test.mjs scripts/lib/*.test.mjs dev-factory/lib/*.test.mjs dev-factory/watch-dev-log.test.mjs",
-    "test:harness": "node --test spexharness/**/*.test.mjs",
-    "verify:package": "node scripts/verify-mcp-package.mjs",
-    "smoke:packed-install": "node scripts/packed-install.smoke.mjs",
-    "verify:onboarding": "node scripts/verify-onboarding-scenario.mjs --fake",
-    "sweep": "node scripts/sweep.mjs"
-  },
-  "//files": "PUBLISHED SURFACE - every entry is verified by `node scripts/verify-mcp-package.mjs`. It must cover the STATIC import closure of vendor/heyspex-mcp/cli.mjs, plus (since [[HS-LGG2-WW9R-TASK-ship-the-hook-runtime-in-the-npm]]) the customer hook kit: scripts/claude-hooks/_run.mjs, every HOOK_SCOPES customer hook (scripts/lib/customer-kit.mjs) and their static closure under spexharness/src, dev-factory/lib and scripts/ - the hookTargets check names any file that falls out - plus the run-time data files in customer-kit.mjs CUSTOMER_HOOK_DATA (only the baseline edition of SpexCode Doctrine, never the learned spexharness/doctrine/SPEXCODE-DOCTRINE.json; [[HS-A2PO-WW9R-TASK-owner-ruling-does-inject-doctrine-ship]]) - and nothing else. SpexFleet internals (dev-factory/router.mjs, cloud-clients.mjs, cost-tracker.mjs, spexcrawl/) are deliberately absent - research-tools.mjs reaches them through the lazy dev-factory-bridge.mjs. Do not add a path here without re-running the verifier; npm publish is a one-way door ([[HS-ZJSP-0JNK-TASK-ship-the-heyspex-mcp-server-as-an]] / [[HS-8DET-0JNK-TASK-confirm-the-open-core-boundary-and]]). `dist/cli/*.mjs` + `dist/cli-templates/**` are a SEPARATE published surface (`hs-init`, `hs-install`, `hs-claim`, `hs-check`, `hs-env`, `hs-connect`, `hs-join`, `hs-vault`, `hs-workspace`, `hs-defer`, `hs-vault-pull`, `hs-vault-push`, `hs-dev`, `hs-index-rebuild`, `hs-index-reconcile` bundled by `scripts/build-cli-bundle.mjs`'s `ENTRIES` array, regenerated fresh every `prepack` - `dist/` itself stays git-ignored) - see that script's doc comment for the entry scope decision and [[HS-JOQX-0JNK-TASK-published-package-runs-hs-init-and-hs]]."
-}
+{
+  "name": "heyspex",
+  "version": "0.2.6",
+  "description": "HeySpex CLI + MCP server — connect Claude Code, Cursor, and any MCP client to your HeySpex spec vault",
+  "keywords": [
+    "heyspex",
+    "mcp",
+    "model-context-protocol",
+    "claude-code",
+    "cursor",
+    "spec-driven-development",
+    "agents"
+  ],
+  "type": "module",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/pwhermanson/workflow-protocol.git"
+  },
+  "engines": {
+    "node": ">=20.0.0 <25.0.0"
+  },
+  "workspaces": [
+    "spex-console",
+    "pm-control-center",
+    "companion/extension"
+  ],
+  "bin": {
+    "hs": "bin/hs.mjs",
+    "heyspex": "bin/hs.mjs",
+    "heyspex-mcp": "vendor/heyspex-mcp/cli.mjs",
+    "spexcode": "bin/spexcode.mjs"
+  },
+  "exports": {
+    "./package.json": "./package.json",
+    "./console-url-resolver": "./scripts/lib/console-url-resolver.mjs"
+  },
+  "files": [
+    "bin/hs.mjs",
+    "bin/hs-vault-binding.mjs",
+    "vendor/heyspex-mcp/**/*.mjs",
+    "!vendor/heyspex-mcp/**/*.test.mjs",
+    "vendor/heyspex-mcp/config-seed.yaml",
+    "scripts/check-mcp-freshness.mjs",
+    "scripts/gateway-skills-lib.mjs",
+    "scripts/vault-id-lib.mjs",
+    "scripts/lib/console-url-resolver.mjs",
+    "scripts/lib/window-placement.mjs",
+    "scripts/lib/hs-link.mjs",
+    "scripts/lib/hook-vault-header.mjs",
+    "scripts/lib/dev-mode.mjs",
+    "scripts/lib/directive-obligations.mjs",
+    "scripts/lib/hs-command.mjs",
+    "scripts/lib/shared-path-helpers.mjs",
+    "scripts/claude-statusline/statusline-command.mjs",
+    "scripts/claude-statusline/fonts/HeySpexIcons.ttf",
+    "scripts/dev-server-status.mjs",
+    "scripts/lib/hs-source-*.mjs",
+    "scripts/lib/agent-env-markers.mjs",
+    "!scripts/lib/hs-source-*.test.mjs",
+    "scripts/lib/standalone-doctor.mjs",
+    "dev-factory/lib/fleet-readiness.mjs",
+    "dev-factory/lib/fleet-state.mjs",
+    "dev-factory/lib/code-repo-root.mjs",
+    "dev-factory/lib/sufficiency-score.mjs",
+    "dev-factory/lib/model-catalog.mjs",
+    "dev-factory/model-catalog.json",
+    "dev-factory/spexcrawl/spexcrawl-cli.mjs",
+    "docs/mcp-client-config.md",
+    "docs/copilot-plugin-install.md",
+    "docs/driving-heyspex-from-copilot.md",
+    "plugins/heyspex/README.md",
+    "dist/cli/*.mjs",
+    "dist/cli-templates/**",
+    "LICENSE",
+    "scripts/install-claude-code-hooks.mjs",
+    "scripts/install-cursor-hooks.mjs",
+    "scripts/install-copilot-hooks.mjs",
+    "scripts/copilot-statusline.mjs",
+    "scripts/lib/customer-kit.mjs",
+    "scripts/lib/copilot-cli.mjs",
+    "scripts/lib/hook-dispositions.mjs",
+    "scripts/lib/template-pin.mjs",
+    "scripts/cursor-hooks/manifest.mjs",
+    "scripts/dev-server-stop.mjs",
+    "scripts/wip-ledger-health.mjs",
+    "scripts/hs-worktree.mjs",
+    "scripts/lib/hs-worktree-args.mjs",
+    "dev-factory/lib/worktree-allocator.mjs",
+    "dev-factory/engine/worktree.mjs",
+    "dev-factory/lib/runner-path.mjs",
+    "dev-factory/lib/dispatch-guard.mjs",
+    "scripts/hs-view.mjs",
+    "scripts/hs-capture-cli.mjs",
+    "scripts/record-grounding.mjs",
+    "scripts/lib/capture-execution-guard.mjs",
+    "scripts/lib/heyspex-home.mjs",
+    "scripts/hs-companion.mjs",
+    "scripts/lib/hs-companion-settings.mjs",
+    "scripts/hs-next.mjs",
+    "scripts/hs-mode.mjs",
+    "scripts/heyspex-mode.mjs",
+    "scripts/hs-gateway.mjs",
+    "scripts/hs-settings.mjs",
+    "scripts/hs-classifier.mjs",
+    "scripts/hs-auto.mjs",
+    "scripts/hs-auto-resolve.mjs",
+    "scripts/hs-auto-source.mjs",
+    "dev-factory/lib/spec-io.mjs",
+    "dev-factory/lib/epic-detect.mjs",
+    "plugins/heyspex/bin/launch-mcp.mjs",
+    "plugins/heyspex/bin/run-hook.mjs",
+    "plugins/heyspex/.claude-plugin/plugin.json",
+    ".claude-plugin/marketplace.json",
+    "plugins/heyspex/.mcp.json",
+    "plugins/heyspex/.cursor-plugin/plugin.json",
+    "plugins/heyspex/mcp.json",
+    "plugins/heyspex/assets/*",
+    "plugins/heyspex/hooks/*.json",
+    "scripts/claude-hooks/*.mjs",
+    "!scripts/claude-hooks/*.test.mjs",
+    "!scripts/claude-hooks/*.smoke.mjs",
+    "!scripts/claude-hooks/*.fixtures.mjs",
+    "!scripts/claude-hooks/*.measure.mjs",
+    "scripts/stamp-provenance-on-edit.mjs",
+    "scripts/provenance-lib.mjs",
+    "scripts/lib/subagent-git-lock.mjs",
+    "dev-factory/lib/seat-context.mjs",
+    "dev-factory/lib/context-budget.mjs",
+    "dev-factory/lib/fleet-queue.mjs",
+    "dev-factory/lib/fleet-queue-file.mjs",
+    "spexharness/src/adapters/*.mjs",
+    "spexharness/src/gates/capture-workflow-gate.mjs",
+    "spexharness/src/gates/claim-before-code-gate.decide.mjs",
+    "spexharness/src/gates/claim-before-code-gate.mjs",
+    "spexharness/src/gates/directive-obligation-gate.decide.mjs",
+    "spexharness/src/gates/directive-obligation-gate.mjs",
+    "spexharness/src/gates/deep-research-cost-gate.mjs",
+    "spexharness/src/gates/enforce-session-sequence.mjs",
+    "spexharness/src/gates/enforce-vault-naming.mjs",
+    "spexharness/src/gates/epic-milestone-phrasing-gate.mjs",
+    "spexharness/src/gates/diagnose-capture-reminder.mjs",
+    "spexharness/src/gates/git-identity-guard.decide.mjs",
+    "spexharness/src/gates/git-identity-guard.mjs",
+    "spexharness/src/gates/_shell-write-targets.mjs",
+    "spexharness/src/gates/vault-write-tier-guard.decide.mjs",
+    "spexharness/src/gates/vault-write-tier-guard.mjs",
+    "spexharness/src/gates/vault-mirror-catchup.mjs",
+    "spexharness/src/gates/vault-mirror-catchup.runner.mjs",
+    "spexharness/src/gates/git-reflog-audit.mjs",
+    "spexharness/src/gates/git-stash-gate.decide.mjs",
+    "spexharness/src/gates/git-stash-gate.mjs",
+    "spexharness/src/gates/id-display-format-gate.mjs",
+    "spexharness/src/gates/inject-doctrine-gate.mjs",
+    "spexharness/src/gates/inject-vault-context.mjs",
+    "spexharness/src/gates/naughty-list-gate.mjs",
+    "spexharness/src/gates/plan-review-gate.mjs",
+    "spexharness/src/gates/preflight-reminder-gate.mjs",
+    "spexharness/src/gates/research-protocol-gate.mjs",
+    "spexharness/src/gates/settings-write-gate.decide.mjs",
+    "spexharness/src/gates/settings-write-gate.mjs",
+    "spexharness/src/profile/*.mjs",
+    "spexharness/src/doctrine/*.mjs",
+    "spexharness/doctrine/baseline/SPEXCODE-DOCTRINE.baseline.json",
+    "spexharness/src/chat/tui/ansi.mjs",
+    "spexharness/src/chat/tui/palette.mjs",
+    "spexharness/src/chat/tui/select.mjs",
+    "spexharness/src/config-root.mjs",
+    "spexharness/src/context-budget.mjs",
+    "spexharness/src/dev-server-control.mjs",
+    "spexharness/src/events.mjs",
+    "spexharness/src/git-reflog-audit.mjs",
+    "spexharness/src/intent-classifier.mjs",
+    "spexharness/src/intent-directive.mjs",
+    "spexharness/src/redact.mjs",
+    "spexharness/src/rule-table.mjs",
+    "spexharness/src/seat-context.mjs",
+    "spexharness/src/session-bootstrap.mjs",
+    "spexharness/src/session-record.mjs",
+    "spexharness/src/token-inventory.mjs",
+    "!spexharness/**/*.test.mjs"
+  ],
+  "dependencies": {
+    "js-yaml": ">=3.13.0 <5.0.0"
+  },
+  "devDependencies": {
+    "esbuild": "^0.24.2"
+  },
+  "scripts": {
+    "prepack": "node scripts/sync-skills.mjs && node scripts/build-cli-bundle.mjs && node scripts/prepack-closure-gate.mjs && node scripts/pack-manifest.mjs strip",
+    "postpack": "node scripts/pack-manifest.mjs restore",
+    "build:cli": "node scripts/build-cli-bundle.mjs",
+    "setup": "node scripts/heyspex-doctor.mjs --fix",
+    "doctor": "node scripts/heyspex-doctor.mjs",
+    "heyspex:on": "node scripts/hs-mode.mjs on",
+    "heyspex:off": "node scripts/hs-mode.mjs off",
+    "heyspex:status": "node scripts/hs-mode.mjs status",
+    "commandcode:install": "node scripts/install-commandcode.mjs",
+    "commandcode:check": "node scripts/install-commandcode.mjs --check",
+    "commandcode:uninstall": "node scripts/install-commandcode.mjs --uninstall",
+    "seats:sync": "node scripts/sync-seat-context.mjs",
+    "seats:check": "node scripts/sync-seat-context.mjs --check",
+    "skills:sync": "node scripts/sync-skills.mjs",
+    "skills:check": "node scripts/sync-skills.mjs --check",
+    "pm:dashboard": "node bin/cli.mjs dashboard",
+    "pm:control-center": "node bin/cli.mjs control-center",
+    "pm:parallel-check": "node bin/cli.mjs parallel-check",
+    "validate:vault-ids": "node scripts/validate-vault-ids.mjs --require-family",
+    "validate:vault-naming": "node scripts/validate-vault-naming.mjs",
+    "validate:vault-blockers": "node scripts/validate-vault-blockers.mjs",
+    "validate:vault-frontmatter": "node scripts/validate-vault-frontmatter.mjs",
+    "validate:vault-encoding": "node scripts/fix-mojibake.mjs --check",
+    "fix:vault-encoding": "node scripts/fix-mojibake.mjs --apply",
+    "validate:review-backlinks": "node scripts/validate-review-backlinks.mjs",
+    "build:procedure-catalog": "node scripts/build-procedure-catalog.mjs",
+    "validate:procedure-catalog": "node scripts/build-procedure-catalog.mjs --check",
+    "build:guardrails": "node scripts/build-guardrails.mjs",
+    "validate:guardrails": "node scripts/build-guardrails.mjs --check",
+    "compile:agents": "node scripts/compile-agents.mjs",
+    "validate:agents": "node scripts/compile-agents.mjs --check",
+    "build:vault-index": "node scripts/build-vault-index.mjs",
+    "validate:vault-index": "node scripts/build-vault-index.mjs --check",
+    "check:retired-names": "node scripts/check-retired-names.mjs",
+    "check:model-ids": "node scripts/check-model-ids.mjs",
+    "check:shared-helpers": "node scripts/check-shared-helpers.mjs",
+    "check:no-process-exit": "node scripts/check-no-process-exit.mjs",
+    "check:epic-milestone-phrasing": "node scripts/check-epic-milestone-phrasing.mjs",
+    "smoke:cli-help": "node scripts/smoke-cli-help.mjs",
+    "commit": "node scripts/human-commit.mjs",
+    "commit:owner": "node scripts/owner-commit.mjs",
+    "hooks:install": "node scripts/install-git-hooks.mjs",
+    "hooks:install-claude": "node scripts/install-claude-code-hooks.mjs",
+    "hooks:check-claude": "node scripts/install-claude-code-hooks.mjs --check",
+    "hooks:install-cursor": "node scripts/install-cursor-hooks.mjs",
+    "hooks:check-cursor": "node scripts/install-cursor-hooks.mjs --check",
+    "hooks:write-github": "node scripts/lib/customer-kit.mjs --write-github-hooks",
+    "hooks:check-github": "node scripts/lib/customer-kit.mjs --check-github-hooks",
+    "hooks:smoke-cursor": "node scripts/cursor-hooks/_run.smoke.mjs",
+    "companion": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action start",
+    "companion:stop": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action stop",
+    "companion:status": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action status",
+    "spexcompanion": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action start",
+    "spexcompanion:stop": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action stop",
+    "spexcompanion:status": "pwsh -NoProfile -ExecutionPolicy Bypass -File companion/start.ps1 -Action status",
+    "console": "npm run dev -w spex-console",
+    "console:log": "pwsh -NoProfile -ExecutionPolicy Bypass -File scripts/run-console-devlog.ps1",
+    "console:log:lan": "pwsh -NoProfile -ExecutionPolicy Bypass -File scripts/run-console-devlog.ps1 -Lan",
+    "console:stop": "node scripts/dev-server-stop.mjs",
+    "console:status": "node scripts/dev-server-status.mjs",
+    "//test": "`npm test` is an ALIAS for `test:all` (scripts/run-all-tests.mjs) - the repo-health sweep over all four suites. It is deliberately NOT wired into CI or any git/Claude hook: .github/workflows/ci.yml runs `npm test --workspace spex-console`, which is a different script and is unaffected.",
+    "test": "npm run test:all",
+    "test:all": "node scripts/run-all-tests.mjs",
+    "test:mcp": "node --test vendor/heyspex-mcp/*.test.mjs scripts/lib/*.test.mjs dev-factory/lib/*.test.mjs dev-factory/watch-dev-log.test.mjs",
+    "test:harness": "node --test spexharness/**/*.test.mjs",
+    "verify:package": "node scripts/verify-mcp-package.mjs",
+    "smoke:packed-install": "node scripts/packed-install.smoke.mjs",
+    "verify:onboarding": "node scripts/verify-onboarding-scenario.mjs --fake",
+    "sweep": "node scripts/sweep.mjs"
+  },
+  "//files": "PUBLISHED SURFACE - every entry is verified by `node scripts/verify-mcp-package.mjs`. It must cover the STATIC import closure of vendor/heyspex-mcp/cli.mjs, plus (since [[HS-LGG2-WW9R-TASK-ship-the-hook-runtime-in-the-npm]]) the customer hook kit: scripts/claude-hooks/_run.mjs, every HOOK_SCOPES customer hook (scripts/lib/customer-kit.mjs) and their static closure under spexharness/src, dev-factory/lib and scripts/ - the hookTargets check names any file that falls out - plus the run-time data files in customer-kit.mjs CUSTOMER_HOOK_DATA (only the baseline edition of SpexCode Doctrine, never the learned spexharness/doctrine/SPEXCODE-DOCTRINE.json; [[HS-A2PO-WW9R-TASK-owner-ruling-does-inject-doctrine-ship]]) - and nothing else. SpexFleet internals (dev-factory/router.mjs, cloud-clients.mjs, cost-tracker.mjs, spexcrawl/) are deliberately absent - research-tools.mjs reaches them through the lazy dev-factory-bridge.mjs. Do not add a path here without re-running the verifier; npm publish is a one-way door ([[HS-ZJSP-0JNK-TASK-ship-the-heyspex-mcp-server-as-an]] / [[HS-8DET-0JNK-TASK-confirm-the-open-core-boundary-and]]). `dist/cli/*.mjs` + `dist/cli-templates/**` are a SEPARATE published surface (`hs-init`, `hs-install`, `hs-claim`, `hs-check`, `hs-env`, `hs-connect`, `hs-join`, `hs-vault`, `hs-workspace`, `hs-defer`, `hs-vault-pull`, `hs-vault-push`, `hs-dev`, `hs-index-rebuild`, `hs-index-reconcile`, `hs-handoff`, `hs-pin`, `hs-events`, `hs-export-events`, `hs-prereq`, `hs-trash`, `hs-trust`, `hs-next-launch`, `hs-revalidate`, `hs-test`, `hs-spawn` bundled by `scripts/build-cli-bundle.mjs`'s `ENTRIES` array, regenerated fresh every `prepack` - `dist/` itself stays git-ignored) - see that script's doc comment for the entry scope decision and [[HS-JOQX-0JNK-TASK-published-package-runs-hs-init-and-hs]]."
+}

package/plugins/heyspex/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "heyspex",
   "displayName": "HeySpex",
   "icon": "./assets/heyspex-glyph-256.png",
-  "description": "HeySpex vault integration for Claude Code and GitHub Copilot CLI (Claude-format plugin, installed from the same marketplace): MCP server (spec vault tools + hs-* prompts) and lifecycle hooks. Prototype packaging per HS-QTBK — additive; the project-level .mcp.json/settings.json wiring remains the live source of truth until cutover.",
+  "description": "SpexCode plugin (for Claude Code), also loaded by GitHub Copilot CLI (Claude-format plugin, installed from the same marketplace): HeySpex vault integration — MCP server (spec vault tools + hs-* prompts) and lifecycle hooks. Prototype packaging per HS-QTBK — additive; the project-level .mcp.json/settings.json wiring remains the live source of truth until cutover.",
   "author": {
     "name": "pwher",
     "email": "paul@monstergrowth.com"

package/plugins/heyspex/.cursor-plugin/plugin.json

@@ -3,7 +3,7 @@
   "displayName": "HeySpex",
   "version": "0.1.0",
   "logo": "assets/heyspex-glyph.svg",
-  "description": "HeySpex vault integration for Cursor: MCP server (spec vault tools + hs-* workflows) and the full lifecycle hook set. Prototype packaging — additive; the project-level .cursor/mcp.json and .cursor/hooks.json wiring remains the live source of truth until cutover.",
+  "description": "Cursor build of the SpexCode plugin (for Claude Code): HeySpex vault integration for Cursor — MCP server (spec vault tools + hs-* workflows) and the full lifecycle hook set. Prototype packaging — additive; the project-level .cursor/mcp.json and .cursor/hooks.json wiring remains the live source of truth until cutover.",
   "author": {
     "name": "pwher",
     "email": "paul@monstergrowth.com"

package/scripts/claude-hooks/wip-checkpoint.mjs

@@ -49,6 +49,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { getActiveConfig, isResolvedVault } from '../../vendor/heyspex-mcp/vault-resolve.mjs';
+import { parseSpecId } from '../../vendor/heyspex-mcp/spec-id-lib.mjs';
 import { hookVaultHeaders } from '../lib/hook-vault-header.mjs';
 import { resolveConsoleUrl as resolveConsoleUrlShared } from '../lib/console-url-resolver.mjs';
 import { readCredentialsMcpToken, resolveDevMode } from '../lib/dev-mode.mjs';
@@ -105,9 +106,23 @@ function ledgerRoots() {
 // HS-EPIC-BUD-PROTECT under vault id `vault-test`). Real ids are server-minted
 // file keys; a SessionStart preview must never present one of these as the
 // prior session's hand-off.
-const FIXTURE_ID_RE = /^HS-EPIC-(?:FILLER-\d+|OLD\d+|BUD-[A-Z0-9-]+|CLAIMED-BUD|TRIGGER(?:-[A-Z0-9-]+)?)$/;
+// Parsed through the sanctioned id parser (spec-id-lib parseSpecId), never a
+// hand-rolled type-first regex ([[HS-MIL-KY1F]]): only legacy type-first EPIC
+// ids whose family token is one of the known fixture families qualify.
+const FIXTURE_EPIC_FAMILIES = {
+  FILLER: (slug) => /^\d+$/.test(slug), // HS-EPIC-FILLER-07
+  BUD: (slug) => slug !== '', // HS-EPIC-BUD-PROTECT
+  CLAIMED: (slug) => slug === 'BUD', // HS-EPIC-CLAIMED-BUD
+  TRIGGER: () => true, // HS-EPIC-TRIGGER, HS-EPIC-TRIGGER-X
+};
 function isFixtureLedgerEntry(epicId) {
-  return typeof epicId === 'string' && FIXTURE_ID_RE.test(epicId);
+  if (typeof epicId !== 'string') return false;
+  const parsed = parseSpecId(epicId);
+  if (!parsed || parsed.ordering !== 'type-first' || parsed.typeLabel !== 'EPIC') return false;
+  const { familyKey, titleSlug } = parsed;
+  if (/^OLD\d+$/.test(familyKey)) return titleSlug === ''; // HS-EPIC-OLD34
+  const rule = FIXTURE_EPIC_FAMILIES[familyKey];
+  return rule ? rule(titleSlug) : false;
 }
 
 async function readStdinJson() {