luciazero 2.0.2 → 2.1.0

package/CHANGELOG.md

@@ -7,6 +7,36 @@ Versioning: [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [2.1.0] - 2026-08-15
+
+### Added
+
+- `/show` turns code relationships, structural changes, and verification
+  evidence into the smallest useful traceable visual.
+- `./test.sh --fast` provides a measured intermediate tier while the default
+  and `--full` preserve complete CI/closeout coverage.
+- Opt-in Claude hooks use private per-session scratch state to record
+  privacy-preserving aggregate turn/merged-Bash wall time and Bash, failed or
+  successful verify, and model/user skill counts; `luciazero discipline`
+  summarizes them.
+
+### Changed
+
+- `/luciazero-bootstrap` is now `/ready`. The old command remains as a
+  deprecated compatibility alias for one release.
+- The doctrine reserves full verification for closeout, and `/plan` plus
+  `/debug` no longer auto-trigger for routine edits or first obvious failures.
+
+## [2.0.3] - 2026-08-13
+
+### Fixed
+
+- The Claude plugin now exposes its reviewer from the default root `agents/`
+  directory. Claude Code 2.1.227 validated the former custom manifest path but
+  reported and loaded zero agents; the default layout reports one. CI requires
+  the plugin mirror to match the classic install source byte-for-byte and
+  prevents the custom path from returning.
+
 ## [2.0.2] - 2026-08-13
 
 ### Fixed

package/README.md

@@ -16,7 +16,7 @@ of handing back work they merely believe is finished.
 > Done is proven by a command, not by my judgment. If no verification command
 > exists, that is the first bug.
 
-It ships a compact [9-rule doctrine](claude/luciazero.md), 9 on-demand skills,
+It ships a compact [9-rule doctrine](claude/luciazero.md), 10 on-demand skills,
 verification hooks, a risk-routed reviewer, and an eval harness. It is a
 discipline layer, not an agent runtime or overnight orchestrator.
 
@@ -83,7 +83,7 @@ Carries the doctrine, all skills, reviewer, and verify-tracking hooks:
 /plugin install luciazero@luciazero
 ```
 
-Start a repository with `/luciazero:luciazero-bootstrap`. Plugin skills use the
+Start a repository with `/luciazero:ready`. Plugin skills use the
 `/luciazero:` prefix. The plugin has no statusline because Claude Code plugins
 cannot set one.
 
@@ -93,7 +93,8 @@ cannot set one.
 npx skills add ohm41321/luciazero
 ```
 
-This installs the 9 skills only: no doctrine, reviewer, or hooks.
+This installs the 10 skills plus the temporary `/luciazero-bootstrap`
+compatibility alias: no doctrine, reviewer, or hooks.
 
 ### Classic Claude Code and Codex
 
@@ -140,14 +141,15 @@ Claude Code can auto-update the plugin at startup: open `/plugin` →
 marketplaces leave this off by default. For release-only notifications, use
 GitHub **Watch → Custom → Releases**.
 
-## The 9 skills
+## The 10 skills
 
-Run `/luciazero-bootstrap` first; the rest activate when their moment arrives.
+Run `/ready` first; the rest activate when their moment arrives.
 
 | Moment | Skill | Result |
 |---|---|---|
-| Entering a repository | `/luciazero-bootstrap` | Finds or creates a verify command and proves it can fail |
-| Before risky or multi-step work | `/plan` | Fixes scope and observable acceptance evidence |
+| Entering a repository | `/ready` | Finds or creates a verify command and proves it can fail |
+| Structure or evidence is hard to scan | `/show` | Maps connections, changes, and proof into the smallest useful visual |
+| Before risky, ambiguous, or multi-module work | `/plan` | Fixes scope and observable acceptance evidence |
 | A bug survives the first look | `/debug` | Reproduction, hypothesis ledger, regression test |
 | Good and bad revisions are known | `/bisect` | Finds the first bad commit in a temporary worktree |
 | Before claiming completion | `/done` | Full verify, skeptic review, scope report |
@@ -205,6 +207,9 @@ only one run per arm per task. See the [full benchmark](docs/benchmark.md),
 - Core installers, hooks, helpers, and graders are offline. Real behavioral
   evals invoke a model CLI and consume API credit or subscription quota.
 - Hooks run commands on your machine. Read them before enabling them.
+- Hook telemetry stays local in private per-session state and records aggregate
+  turn/Bash wall time plus Bash, verify, and model/user skill counts—never raw
+  commands, skill names, or paths.
 - Set `LUCIAZERO_VERIFY_CMD` to the repo's exact fast verify command.
 - Put `LUCIAZERO_STRICT_VERIFY_CMD` only in personal settings, never in a
   committed repository config. Strict mode fails open on internal errors.
@@ -214,12 +219,16 @@ See [SECURITY.md](SECURITY.md) for the complete trust boundary.
 ## Development
 
 ```bash
-./test.sh
+./test.sh --fast   # intermediate loop: core doctrine/hooks/report/Relay checks
+./test.sh          # closeout/CI: full eval, packaging, and install coverage
 ```
 
-The suite covers scripts, hook state, Relay, bisect, plugin/npm manifests,
-self-proving eval graders, and sandboxed install → reinstall → uninstall for
-Claude Code and Codex.
+The fast tier is the default intermediate check for this repository; use a
+more targeted command when changing a component it does not cover. The default
+full tier (also `./test.sh --full`) covers scripts, hook state, Relay, bisect,
+plugin/npm manifests, self-proving eval graders, and sandboxed install →
+reinstall → uninstall for Claude Code and Codex. CI and `/done` use the full
+tier.
 
 More detail:
 

package/README.th.md

@@ -17,7 +17,7 @@ Luciazero ทำให้ coding agent รันลูป `วางแผน
 > ถ้ายังไม่มีคำสั่งตรวจ นั่นคือบั๊กแรก
 
 ภายในมี [doctrine 9 ข้อ](claude/luciazero.md) ที่สั้น, skill แบบเรียกเมื่อจำเป็น
-9 ตัว, hook ติดตามการ verify, reviewer ที่ route ตามความเสี่ยง และ eval harness
+10 ตัว, hook ติดตามการ verify, reviewer ที่ route ตามความเสี่ยง และ eval harness
 นี่คือชั้นวินัย ไม่ใช่ agent runtime หรือระบบ orchestration สำหรับรันงานข้ามคืน
 
 ## ดูการทำงานใน 15 วินาที
@@ -81,7 +81,7 @@ fingerprint เก่า (5/6) ตัวเลขเหล่านี้เป
 /plugin install luciazero@luciazero
 ```
 
-เริ่ม repo ด้วย `/luciazero:luciazero-bootstrap` ชื่อ skill แบบ plugin มี prefix
+เริ่ม repo ด้วย `/luciazero:ready` ชื่อ skill แบบ plugin มี prefix
 `/luciazero:` และไม่มี statusline เพราะ Claude Code plugin ตั้งค่านี้ไม่ได้
 
 ### เฉพาะ skill — agent ที่รองรับ
@@ -90,7 +90,8 @@ fingerprint เก่า (5/6) ตัวเลขเหล่านี้เป
 npx skills add ohm41321/luciazero
 ```
 
-ช่องทางนี้ติดตั้งเฉพาะ skill 9 ตัว ไม่มี doctrine, reviewer หรือ hook
+ช่องทางนี้ติดตั้งเฉพาะ skill 10 ตัว พร้อม alias `/luciazero-bootstrap`
+ชั่วคราว ไม่มี doctrine, reviewer หรือ hook
 
 ### Classic Claude Code และ Codex
 
@@ -136,14 +137,15 @@ Claude Code อัปเดต plugin ตอนเริ่มโปรแกร
 ภายนอกจะปิดตัวเลือกนี้เป็นค่าเริ่มต้น ถ้าต้องการเพียงการแจ้งเตือน release ให้ใช้
 GitHub **Watch → Custom → Releases**
 
-## Skill ทั้ง 9 ตัว
+## Skill ทั้ง 10 ตัว
 
-รัน `/luciazero-bootstrap` ก่อนหนึ่งครั้ง ที่เหลือใช้เมื่อถึงจังหวะของมัน
+รัน `/ready` ก่อนหนึ่งครั้ง ที่เหลือใช้เมื่อถึงจังหวะของมัน
 
 | จังหวะ | Skill | ผลลัพธ์ |
 |---|---|---|
-| เข้า repository | `/luciazero-bootstrap` | หาหรือสร้างคำสั่ง verify และพิสูจน์ว่าแดงได้ |
-| ก่อนงานเสี่ยงหรือหลายขั้น | `/plan` | ล็อก scope และหลักฐานยอมรับที่สังเกตได้ |
+| เข้า repository | `/ready` | หาหรือสร้างคำสั่ง verify และพิสูจน์ว่าแดงได้ |
+| โครงสร้างหรือหลักฐานไล่อ่านยาก | `/show` | แสดงความเชื่อมโยง สิ่งที่เปลี่ยน และหลักฐานด้วยภาพที่เล็กที่สุด |
+| ก่อนงานเสี่ยง กำกวม หรือแตะหลาย module | `/plan` | ล็อก scope และหลักฐานยอมรับที่สังเกตได้ |
 | บั๊กที่มองรอบแรกไม่ออก | `/debug` | Reproduction, hypothesis ledger, regression test |
 | รู้ revision ดีและเสีย | `/bisect` | หา first bad commit ใน worktree ชั่วคราว |
 | ก่อนบอกว่าเสร็จ | `/done` | Full verify, skeptic review และรายงาน scope |
@@ -200,6 +202,9 @@ pilot มีเพียง 1 run ต่อ arm ต่อ task ดู [ผลเ
 - Installer, hook, helper และ grader หลักรัน offline ส่วน behavioral eval จริง
   เรียก model CLI และใช้เครดิต API หรือโควตา subscription
 - Hook รันคำสั่งบนเครื่อง ควรอ่านก่อนเปิดใช้
+- Telemetry ของ hook อยู่ใน private state แยกตาม session ภายในเครื่อง เก็บเวลา
+  wall time ของ turn/Bash และจำนวน Bash, verify, skill ที่ model/user เรียก
+  โดยไม่เก็บ command, ชื่อ skill หรือ path ดิบ
 - ตั้ง `LUCIAZERO_VERIFY_CMD` เป็นคำสั่ง verify ระดับเร็วที่ exact ของ repo
 - ใส่ `LUCIAZERO_STRICT_VERIFY_CMD` ใน personal settings เท่านั้น ห้าม commit ลง
   config ของ repository; strict mode จะ fail open เมื่อเกิด internal error
@@ -209,12 +214,15 @@ pilot มีเพียง 1 run ต่อ arm ต่อ task ดู [ผลเ
 ## พัฒนา repo นี้
 
 ```bash
-./test.sh
+./test.sh --fast   # loop ระหว่างทำ: ตรวจ doctrine/hook/report/Relay ส่วนหลัก
+./test.sh          # ปิดงาน/CI: ตรวจ eval, packaging และ install แบบเต็ม
 ```
 
-ชุดทดสอบครอบคลุม script, state ของ hook, Relay, bisect, manifest ของ plugin/npm,
-eval grader ที่พิสูจน์ตัวเองได้ และ install → reinstall → uninstall แบบ sandbox
-ทั้ง Claude Code และ Codex
+fast tier เป็นคำสั่งระหว่างทำงานของ repo นี้; ถ้าแก้ส่วนที่ fast tier ไม่ครอบคลุม
+ให้ใช้คำสั่ง targeted ของส่วนนั้น ส่วน full tier (`./test.sh` หรือ
+`./test.sh --full`) ครอบคลุม script, state ของ hook, Relay, bisect, manifest ของ
+plugin/npm, eval grader ที่พิสูจน์ตัวเองได้ และ install → reinstall → uninstall
+แบบ sandbox ทั้ง Claude Code และ Codex โดย CI และ `/done` ใช้ full tier
 
 อ่านต่อ:
 

package/agents/reviewer.md

@@ -0,0 +1,49 @@
+---
+name: reviewer
+description: Risk-routed adversarial code reviewer with general, security, and contract focus modes. Spawn before declaring a risky change done, or when asked to review a diff, branch, or PR. Tries to refute the change, reads callers and consumers, and never edits files. If the harness offers a built-in adversarial review command, prefer it; use this agent when none exists or an independent focused pass is wanted.
+tools: Read, Grep, Glob, Bash
+model: inherit
+---
+
+You are an adversarial code reviewer. Your job is to **refute** the change, not to approve it. Hunt for a real problem; praise is noise and is forbidden. An empty result after a genuine search is better than an invented finding.
+
+## Input
+
+You are given a diff, branch, PR, or changed-file list and an optional `focus`: `general` (default), `security`, or `contract`. If given a branch or nothing specific, derive the diff (`git diff`, `git diff main...HEAD`, `git show`). Read enough surrounding code to judge every hunk, then search call sites, consumers, schemas, and tests that still rely on the old behavior.
+
+## What to hunt
+
+Automated checks already cover the happy path. Hunt what they do not:
+
+- **Edge cases** — empty input, zero, negative, unicode, max length, first/last element, concurrent access
+- **Error paths** — what happens when the call fails, the file is missing, the network drops; are errors swallowed?
+- **Changed contracts** — public API shape, serialized formats, DB schema, config keys: does anything else consume the old shape?
+- **Unintended diff content** — files touched by accident, debug prints, commented-out code, secrets, dependency pins loosened
+- **Resource discipline** — leaks (handles, connections, subscriptions), missing cleanup on the error path
+- **Test honesty** — do the new/changed tests actually fail if the change is reverted? Tests that assert nothing, or were weakened to pass, are findings.
+- **Security** — injection via interpolated input, path traversal, secrets in code or logs
+
+## Focus routes
+
+- `security`: map every changed trust boundary from input to sensitive sink. Check validation, encoding, authorization, failure defaults, path containment, command/query construction, secret handling, and error disclosure. Read endpoint wiring and permission callers—not only the changed function.
+- `contract`: identify the old externally observable shape, then search all in-repo consumers, fixtures, docs, serializers, migrations, and compatibility shims. Treat silent default changes and parse/format drift as contracts too.
+- `general`: apply the whole checklist with extra attention to error paths, state transitions, concurrency, and resource cleanup.
+
+## Rules
+
+- **Verify before reporting.** Read the actual code for each suspected finding. A finding you did not confirm against the source is speculation — drop it or mark it explicitly as unverified.
+- Run cheap read-only commands when they settle a question (`git log` for context, the test suite if it is fast). Never edit, never commit, never push.
+- No style or formatting nits unless they change meaning.
+- Stay inside the diff's causal scope; a defect in an unchanged consumer broken by the diff is in scope. Pre-existing unrelated problems go in one short "outside scope" line at the end.
+
+## Output
+
+One line per finding, most severe first:
+
+```
+path:line — severity — problem. Concrete fix.
+```
+
+Severity: `blocker` (exploitable security, data loss, or fundamentally wrong result) / `major` (breaks a supported contract, permission boundary, or material edge case) / `minor` (works now, but has a concrete fragility).
+
+If, after a genuine hunt, nothing survives verification: report exactly `No findings.` plus one sentence on what you checked. Do **not** invent findings to seem useful — a false finding costs more than an empty report.

package/bin/discipline-report.js

@@ -56,12 +56,20 @@ function parseLine(line) {
     if (Number.isNaN(timestamp.valueOf()) || typeof row.project_id !== "string" || typeof row.project !== "string") {
       return { malformed: true };
     }
+    let telemetry = null;
+    if (row.telemetry && typeof row.telemetry === "object") {
+      const keys = ["turn_ms", "bash_ms", "bash_count", "verify_count", "skill_count"];
+      if (keys.every((key) => Number.isSafeInteger(row.telemetry[key]) && row.telemetry[key] >= 0)) {
+        telemetry = Object.fromEntries(keys.map((key) => [key, row.telemetry[key]]));
+      }
+    }
     return {
       timestamp,
       event: row.event,
       project: row.project,
       projectId: row.project_id,
       verifyMode: ["regex", "exact", "strict"].includes(row.verify_mode) ? row.verify_mode : "unknown",
+      telemetry,
       legacy: false,
     };
   }
@@ -75,6 +83,7 @@ function parseLine(line) {
     project: match[3],
     projectId: `legacy-${crypto.createHash("sha256").update(match[3]).digest("hex").slice(0, 12)}`,
     verifyMode: "unknown",
+    telemetry: null,
     legacy: true,
   };
 }
@@ -111,10 +120,23 @@ if (options.project) {
 
 const counts = { "stop-clean": 0, nudge: 0, "strict-block": 0 };
 const modes = { regex: 0, exact: 0, strict: 0, unknown: 0 };
+const telemetry = {
+  measured_turns: 0, turn_ms: 0, bash_ms: 0, non_bash_ms: 0,
+  bash_count: 0, verify_count: 0, skill_count: 0,
+};
 const projects = new Map();
 for (const row of rows) {
   counts[row.event] += 1;
   modes[row.verifyMode] = (modes[row.verifyMode] || 0) + 1;
+  if (row.telemetry) {
+    telemetry.measured_turns += 1;
+    telemetry.turn_ms += row.telemetry.turn_ms;
+    telemetry.bash_ms += row.telemetry.bash_ms;
+    telemetry.non_bash_ms += Math.max(0, row.telemetry.turn_ms - row.telemetry.bash_ms);
+    telemetry.bash_count += row.telemetry.bash_count;
+    telemetry.verify_count += row.telemetry.verify_count;
+    telemetry.skill_count += row.telemetry.skill_count;
+  }
   const current = projects.get(row.projectId) || {
     project: row.project,
     project_id: row.projectId,
@@ -160,6 +182,7 @@ const report = {
   legacy_records: legacyRecords,
   outcomes: counts,
   verify_modes: modes,
+  telemetry,
   top_nudged_projects: topNudged,
   recommendations,
 };
@@ -182,6 +205,18 @@ console.log(`  Clean stops:   ${String(counts["stop-clean"]).padStart(5)} (${per
 console.log(`  Nudges:        ${String(counts.nudge).padStart(5)} (${percent(counts.nudge)})`);
 console.log(`  Strict blocks: ${String(counts["strict-block"]).padStart(5)} (${percent(counts["strict-block"])})`);
 console.log("");
+console.log("Latency Telemetry:");
+if (telemetry.measured_turns === 0) {
+  console.log("  No measured turns (new hooks collect this locally).");
+} else {
+  const average = (value) => Math.round(value / telemetry.measured_turns);
+  console.log(`  Measured turns:    ${telemetry.measured_turns}`);
+  console.log(`  Average turn:      ${average(telemetry.turn_ms)} ms`);
+  console.log(`  Average Bash time: ${average(telemetry.bash_ms)} ms`);
+  console.log(`  Average non-Bash:  ${average(telemetry.non_bash_ms)} ms`);
+  console.log(`  Bash / verify / skill calls: ${telemetry.bash_count} / ${telemetry.verify_count} / ${telemetry.skill_count}`);
+}
+console.log("");
 console.log("Top Nudged Repositories:");
 if (topNudged.length === 0) console.log("  None in the selected period.");
 for (const [index, item] of topNudged.entries()) {

package/claude/hooks/hooks.json

@@ -1,5 +1,27 @@
 {
   "hooks": {
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          { "type": "command", "command": "LUCIAZERO_CHANNEL=plugin ${CLAUDE_PLUGIN_ROOT}/claude/hooks/luciazero-verify.sh prompt" }
+        ]
+      }
+    ],
+    "UserPromptExpansion": [
+      {
+        "hooks": [
+          { "type": "command", "command": "LUCIAZERO_CHANNEL=plugin ${CLAUDE_PLUGIN_ROOT}/claude/hooks/luciazero-verify.sh skill-prompt" }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          { "type": "command", "command": "LUCIAZERO_CHANNEL=plugin ${CLAUDE_PLUGIN_ROOT}/claude/hooks/luciazero-verify.sh bash-start" }
+        ]
+      }
+    ],
     "PostToolUse": [
       {
         "matcher": "Edit|Write|NotebookEdit",
@@ -12,6 +34,20 @@
         "hooks": [
           { "type": "command", "command": "LUCIAZERO_CHANNEL=plugin ${CLAUDE_PLUGIN_ROOT}/claude/hooks/luciazero-verify.sh bash" }
         ]
+      },
+      {
+        "matcher": "Skill",
+        "hooks": [
+          { "type": "command", "command": "LUCIAZERO_CHANNEL=plugin ${CLAUDE_PLUGIN_ROOT}/claude/hooks/luciazero-verify.sh skill" }
+        ]
+      }
+    ],
+    "PostToolUseFailure": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          { "type": "command", "command": "LUCIAZERO_CHANNEL=plugin ${CLAUDE_PLUGIN_ROOT}/claude/hooks/luciazero-verify.sh bash-failure" }
+        ]
       }
     ],
     "Stop": [

package/claude/hooks/luciazero-statusline.sh

@@ -16,7 +16,7 @@ set -u
 IN="$(cat 2>/dev/null || true)"
 
 LINE="$(printf '%s' "${IN}" | python3 -c '
-import json, os, sys, time, hashlib
+import json, os, sys, time, hashlib, stat
 
 try:
     d = json.load(sys.stdin)
@@ -27,9 +27,24 @@ model = ((d.get("model") or {}).get("display_name")) or "claude"
 cwd = ((d.get("workspace") or {}).get("current_dir")) or d.get("cwd") or os.getcwd()
 
 key = hashlib.md5(cwd.encode()).hexdigest()[:12]
-state = os.path.join(os.environ.get("TMPDIR", "/tmp"), "luciazero-verify-state", key)
+uid = os.getuid() if hasattr(os, "getuid") else "unknown"
+base = os.path.join(os.environ.get("TMPDIR", "/tmp"), f"luciazero-verify-state-{uid}")
+try:
+    info = os.lstat(base)
+    if stat.S_ISLNK(info.st_mode) or not stat.S_ISDIR(info.st_mode):
+        raise OSError("unsafe state base")
+    if hasattr(os, "getuid") and info.st_uid != os.getuid():
+        raise OSError("wrong state owner")
+    if stat.S_IMODE(info.st_mode) & 0o077:
+        raise OSError("state base is not private")
+except OSError:
+    state = None
+else:
+    state = os.path.join(base, key)
 
 def mtime(name):
+    if state is None:
+        return None
     try:
         return os.path.getmtime(os.path.join(state, name))
     except OSError: