nccgs 2.1.0 → 2.1.1

package/.claude/nccgs/protocols/shared-workflow-context.md

@@ -0,0 +1,33 @@
+# Optional shared Graphify context consumer
+
+Use this protocol only when the project has adopted the external Agent Project
+Workflow 1.7 tooling. Preserve NCCGS's existing internal execution and task gates.
+The approved outer assignment and actual source documents remain authoritative.
+
+Resolve the external implementation root from the accepted project workflow binding.
+The default common configuration is `docs/workflow/workflow.config.json`; it is owned
+by the shared workflow, not an NCCGS policy/freshness copy. Do not create it during
+ordinary intake. A missing configuration skips context operations without installing
+or bootstrapping Graphify.
+
+At task entry, after required direct instruction/source reads, run:
+
+```text
+node .claude/nccgs/tools/shared-context.mjs --project PROJECT_ROOT --workflow-root EXTERNAL_IMPLEMENTATION_ROOT --action status
+```
+
+Use `--action query --text TERM` only for suitable verified coverage. A held review
+adds the actual `--hold HOLD_ID --secret HOLD_CAPABILITY`; queries resolve the retained
+generation and pinned source. Preserve the hold capability as local operational state.
+At a settled write boundary use `--action refresh` only when accepted scope covers it.
+This consumer cannot perform setup, update or initial rebuild. Report unavailable,
+partial/stale or recovery-required coverage and continue with original sources.
+
+The external common adapter owns GC-01 through GC-04, one current commit and updater.
+Do not add a private graph, native hook, model change, independent source ignore rule,
+or copied freshness file. Link the common generation/result in the existing context
+packet/handoff. Graph context does not provide provider execution evidence or external
+acceptance; NCCGS internal DONE may return a candidate awaiting outer review.
+
+This source bridge has fixture coverage. It does not certify a Claude Code/native
+or Unity runtime session; adoption and host qualification remain explicit operations.

package/.claude/nccgs/protocols/unity-boundary.md

@@ -1,5 +1,25 @@
 # Unity responsibility boundary
 
+## Unity transport: direct CLI/Pipeline only
+
+Use direct `unity run`, `unity test`, `unity build`, `unity command`, and the
+approved `com.unity.pipeline` integration. Unity MCP is disabled, including
+Coplay, AnkleBreaker, discovery/read-only calls, and the official CLI's optional
+`unity mcp` / `unity mcp configure` mode. Never reinstall or configure a Unity MCP
+server as a fallback when CLI, licensing or Editor connectivity fails.
+
+`nccgs run` uses strict MCP isolation with an empty server list by default.
+An external operator may explicitly pass a validated non-Unity MCP configuration;
+this never permits Unity MCP or changes global configurations. Retained supervised
+runs without the required isolation are refused rather than rewritten or refunded.
+
+This policy takes precedence over generic vendored skill guidance, including the
+new-project skill's optional MCP route. Upstream skills and their hash manifest
+remain unmodified reference material. Read them for direct CLI/Pipeline mechanics.
+Transport hooks cover ordinary tool names and shell invocations; they are not an
+arbitrary-code or hostile-client sandbox. Existing native permissions, ownership,
+independent review and actual execution evidence remain required.
+
 Studio roles own player intent, architecture, subsystem boundaries, project truth,
 test strategy, risk, acceptance, and closure. Official Unity Skills own current Unity
 CLI/Pipeline syntax and Editor, scene, prefab, asset, package, build, test, runtime,

package/.claude/nccgs/routing.generated.md

@@ -5,10 +5,10 @@ NCCGS runs in Claude Code. New installations use standalone execution; model ali
 | Stage | Owner/model | Effort | Maximum review rounds |
 |---|---|---|---|
 | Intake, plan and documents | Claude Code | Routed by task | — |
-| FAST implementation | sonnet | medium | 2 |
-| STANDARD implementation | opus | medium | 3 |
-| CONTROLLED implementation | opus | high | 3 |
-| Independent review | opus | high | Shared task budget |
+| FAST implementation | sonnet | high | 2 |
+| STANDARD implementation | opus | high | 3 |
+| CONTROLLED implementation | opus | xhigh | 3 |
+| Independent review | fable | high | Shared task budget |
 | External review | Off by default; advisory or required when configured | External evidence | — |
 | Acceptance | Contract-defined Product Owner decision | Explicit when required | — |
 

package/.claude/nccgs/settings.fragment.json

@@ -17,20 +17,41 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/session-start.mjs\"",
-            "timeout": 10
+            "command": "node",
+            "timeout": 10,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/session-start.mjs"
+            ]
           }
         ]
       }
     ],
     "PreToolUse": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node",
+            "timeout": 10,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/unity-transport-guard.mjs"
+            ],
+            "onFailure": "block"
+          }
+        ]
+      },
       {
         "matcher": "Bash|PowerShell",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/protect-git.mjs\"",
-            "timeout": 10
+            "command": "node",
+            "timeout": 10,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/protect-git.mjs"
+            ],
+            "onFailure": "block"
           }
         ]
       },
@@ -39,8 +60,12 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/protect-write.mjs\"",
-            "timeout": 10
+            "command": "node",
+            "timeout": 10,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/protect-write.mjs"
+            ],
+            "onFailure": "block"
           }
         ]
       },
@@ -49,8 +74,13 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/closure-guard.mjs\" pre",
-            "timeout": 30
+            "command": "node",
+            "timeout": 30,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/closure-guard.mjs",
+              "pre"
+            ],
+            "onFailure": "block"
           }
         ]
       }
@@ -61,8 +91,11 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/pre-compact.mjs\"",
-            "timeout": 10
+            "command": "node",
+            "timeout": 10,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/pre-compact.mjs"
+            ]
           }
         ]
       }
@@ -73,8 +106,11 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/post-compact.mjs\"",
-            "timeout": 10
+            "command": "node",
+            "timeout": 10,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/post-compact.mjs"
+            ]
           }
         ]
       }
@@ -85,8 +121,13 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/agent-audit.mjs\" start",
-            "timeout": 5
+            "command": "node",
+            "timeout": 5,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/agent-audit.mjs",
+              "start"
+            ],
+            "onFailure": "block"
           }
         ]
       }
@@ -97,8 +138,13 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/agent-audit.mjs\" stop",
-            "timeout": 5
+            "command": "node",
+            "timeout": 5,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/agent-audit.mjs",
+              "stop"
+            ],
+            "onFailure": "block"
           }
         ]
       }
@@ -109,8 +155,11 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/session-stop.mjs\"",
-            "timeout": 10
+            "command": "node",
+            "timeout": 10,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/session-stop.mjs"
+            ]
           }
         ]
       },
@@ -119,8 +168,12 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/closure-guard.mjs\" stop",
-            "timeout": 30
+            "command": "node",
+            "timeout": 30,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/closure-guard.mjs",
+              "stop"
+            ]
           }
         ]
       }
@@ -131,8 +184,12 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/runtime-observation.mjs\" failure",
-            "timeout": 30
+            "command": "node",
+            "timeout": 30,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/runtime-observation.mjs",
+              "failure"
+            ]
           }
         ]
       }
@@ -143,8 +200,11 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/runtime-observation.mjs\"",
-            "timeout": 30
+            "command": "node",
+            "timeout": 30,
+            "args": [
+              "${CLAUDE_PROJECT_DIR}/.claude/nccgs/hooks/runtime-observation.mjs"
+            ]
           }
         ]
       }