qfai 2.1.0 → 2.1.2

package/assets/init/.claude/settings.json

@@ -30,7 +30,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{let p;try{p=JSON.parse(require('fs').readFileSync(0,'utf8')).prompt}catch{}if(!(typeof p==='string'&&/^[ \\t]*<(task-notification|wake)[\\s>]/m.test(p))){const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}const p=i.prompt;if(!(typeof p==='string'&&/^[ \\t]*(<(task-notification|wake)[\\s>]|\\[SYSTEM NOTIFICATION)/m.test(p))){let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "structured-question"
             ]
@@ -46,7 +46,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}const p=i.prompt;if(!(typeof p==='string'&&/^[ \\t]*(<(task-notification|wake)[\\s>]|\\[SYSTEM NOTIFICATION)/m.test(p))){let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "free-text-entry"
             ]
@@ -96,7 +96,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "grilling-design-artifact"
             ]
@@ -112,7 +112,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "grilling-delegation"
             ]
@@ -128,7 +128,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "grilling-plan"
             ]
@@ -144,7 +144,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const c=JSON.parse(require('fs').readFileSync(0,'utf8')).tool_input.command;if(typeof c==='string'&&/(^|[^\\w.-])gh([^\\w.-]|$)|api\\.github\\.com/.test(c)){const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}const c=i.tool_input&&i.tool_input.command;if(typeof c==='string'&&/(^|[^\\w.-])gh([^\\w.-]|$)|api\\.github\\.com/.test(c)){let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "api-budget"
             ]
@@ -163,7 +163,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "documentation-clarity-after-write"
             ]
@@ -175,7 +175,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "documentation-clarity-after-edit"
             ]
@@ -191,13 +191,31 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}catch{}",
+              "try{const f=require('fs'),p=require('path'),R=p.dirname(p.dirname(p.dirname(process.argv[1])));let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}const u=i.tool_input&&i.tool_input.file_path;let src=true;if(typeof u==='string'&&(x=>{const s=x.split(p.sep),b=s.pop();return p.isAbsolute(x)||s[0]==='..'||s.some(y=>['tmp','test','tests','__tests__','node_modules','.qfai','.agents'].includes(y))||b[0]==='.'||/\\.(test|spec)\\./.test(b)||['.md','.mdx','.markdown','.txt','.rst','.yml','.yaml','.json','.jsonc','.json5','.toml','.ini','.csv','.tsv','.lock','.svg','.png','.jpg','.jpeg','.gif'].includes(p.extname(b).toLowerCase())})(p.relative(R,p.resolve(R,u))))src=false;if(src){let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "minimal-implementation"
             ]
           }
         ]
       }
+    ],
+    "Stop": [
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "statusMessage": "QFAI session feedback reminder",
+            "command": "node",
+            "args": [
+              "-e",
+              "try{const f=require('fs');let i;try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{process.exit(0)}const l=typeof i.last_assistant_message==='string'?i.last_assistant_message.trim():'';if(i.stop_hook_active===true||(l.length>0&&('?'+String.fromCharCode(65311)).includes(l.slice(-1))))process.exit(0);const m=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}catch{}",
+              "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
+              "session-feedback"
+            ]
+          }
+        ]
+      }
     ]
   }
 }

package/assets/init/.codex/hooks.json

@@ -6,7 +6,7 @@
           {
             "type": "command",
             "statusMessage": "QFAI structured-question reminder",
-            "command": "node -e \"try{const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){const m=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];m===undefined||console.log(JSON.stringify(m))}}catch{}\" structured-question",
+            "command": "node -e \"try{const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){let j={};try{j=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}let n=1;if(typeof j.session_id==='string'){try{const t=p.join(require('os').tmpdir(),['qfai-reminder',j.session_id,j.agent_id||'main',process.argv[1]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];if(e===undefined){}else{const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}\" structured-question",
             "timeout": 10
           }
         ]
@@ -16,7 +16,7 @@
           {
             "type": "command",
             "statusMessage": "QFAI free-text entry reminder",
-            "command": "node -e \"try{const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){const m=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];m===undefined||console.log(JSON.stringify(m))}}catch{}\" free-text-entry",
+            "command": "node -e \"try{const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){let j={};try{j=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}let n=1;if(typeof j.session_id==='string'){try{const t=p.join(require('os').tmpdir(),['qfai-reminder',j.session_id,j.agent_id||'main',process.argv[1]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];if(e===undefined){}else{const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}\" free-text-entry",
             "timeout": 10
           }
         ]
@@ -50,7 +50,7 @@
           {
             "type": "command",
             "statusMessage": "QFAI grilling reminder: design artifact",
-            "command": "node -e \"try{const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){const m=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];m===undefined||console.log(JSON.stringify(m))}}catch{}\" grilling-design-artifact",
+            "command": "node -e \"try{const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){let j={};try{j=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}let n=1;if(typeof j.session_id==='string'){try{const t=p.join(require('os').tmpdir(),['qfai-reminder',j.session_id,j.agent_id||'main',process.argv[1]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];if(e===undefined){}else{const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}\" grilling-design-artifact",
             "timeout": 10
           }
         ]
@@ -61,7 +61,7 @@
           {
             "type": "command",
             "statusMessage": "QFAI grilling reminder: delegation",
-            "command": "node -e \"try{const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){const m=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];m===undefined||console.log(JSON.stringify(m))}}catch{}\" grilling-delegation",
+            "command": "node -e \"try{const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){let j={};try{j=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}let n=1;if(typeof j.session_id==='string'){try{const t=p.join(require('os').tmpdir(),['qfai-reminder',j.session_id,j.agent_id||'main',process.argv[1]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];if(e===undefined){}else{const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}\" grilling-delegation",
             "timeout": 10
           }
         ]
@@ -72,7 +72,7 @@
           {
             "type": "command",
             "statusMessage": "QFAI api-budget reminder",
-            "command": "node -e \"try{const i=JSON.parse(require('fs').readFileSync(0,'utf8')).tool_input.command;if(typeof i==='string'&&/[^\\w.-]gh[^\\w.-]|api\\.github\\.com/.test(' '+i+' ')){const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){const m=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];m===undefined||console.log(JSON.stringify(m))}}}catch{}\" api-budget",
+            "command": "node -e \"try{const j=JSON.parse(require('fs').readFileSync(0,'utf8')),i=j.tool_input.command;if(typeof i==='string'&&/[^\\w.-]gh[^\\w.-]|api\\.github\\.com/.test(' '+i+' ')){const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){let n=1;if(typeof j.session_id==='string'){try{const t=p.join(require('os').tmpdir(),['qfai-reminder',j.session_id,j.agent_id||'main',process.argv[1]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];if(e===undefined){}else{const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}}catch{}\" api-budget",
             "timeout": 10
           }
         ]
@@ -85,13 +85,13 @@
           {
             "type": "command",
             "statusMessage": "QFAI documentation-clarity reminder",
-            "command": "node -e \"try{const i=JSON.parse(require('fs').readFileSync(0,'utf8')).tool_input.command;if(typeof i==='string'&&/^\\*\\*\\* Add File: .*\\.md\\r?\\n/m.test(i)){const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){const m=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];m===undefined||console.log(JSON.stringify(m))}}}catch{}\" documentation-clarity-after-write",
+            "command": "node -e \"try{const j=JSON.parse(require('fs').readFileSync(0,'utf8')),i=j.tool_input.command;if(typeof i==='string'&&/^\\*\\*\\* Add File: .*\\.md\\r?\\n/m.test(i)){const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){let n=1;if(typeof j.session_id==='string'){try{const t=p.join(require('os').tmpdir(),['qfai-reminder',j.session_id,j.agent_id||'main',process.argv[1]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];if(e===undefined){}else{const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}}catch{}\" documentation-clarity-after-write",
             "timeout": 10
           },
           {
             "type": "command",
             "statusMessage": "QFAI documentation-clarity reminder",
-            "command": "node -e \"try{const i=JSON.parse(require('fs').readFileSync(0,'utf8')).tool_input.command;if(typeof i==='string'&&/^\\*\\*\\* Update File: .*\\.md\\r?\\n/m.test(i)){const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){const m=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];m===undefined||console.log(JSON.stringify(m))}}}catch{}\" documentation-clarity-after-edit",
+            "command": "node -e \"try{const j=JSON.parse(require('fs').readFileSync(0,'utf8')),i=j.tool_input.command;if(typeof i==='string'&&/^\\*\\*\\* Update File: .*\\.md\\r?\\n/m.test(i)){const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){let n=1;if(typeof j.session_id==='string'){try{const t=p.join(require('os').tmpdir(),['qfai-reminder',j.session_id,j.agent_id||'main',process.argv[1]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];if(e===undefined){}else{const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}}catch{}\" documentation-clarity-after-edit",
             "timeout": 10
           }
         ]
@@ -102,7 +102,19 @@
           {
             "type": "command",
             "statusMessage": "QFAI minimal-implementation reminder",
-            "command": "node -e \"try{const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){const m=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];m===undefined||console.log(JSON.stringify(m))}}catch{}\" minimal-implementation",
+            "command": "node -e \"try{const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){let go=true,j={};try{j=JSON.parse(f.readFileSync(0,'utf8'))}catch{}try{const R=p.dirname(p.dirname(p.dirname(r))),n=(x=>{const s=x.split(p.sep),b=s.pop();return p.isAbsolute(x)||s[0]==='..'||s.some(y=>['tmp','test','tests','__tests__','node_modules','.qfai','.agents'].includes(y))||b[0]==='.'||/\\.(test|spec)\\./.test(b)||['.md','.mdx','.markdown','.txt','.rst','.yml','.yaml','.json','.jsonc','.json5','.toml','.ini','.csv','.tsv','.lock','.svg','.png','.jpg','.jpeg','.gif'].includes(p.extname(b).toLowerCase())}),a=[...j.tool_input.command.matchAll(/^\\*\\*\\* (?:(?:Add|Update|Delete) File|Move to): (.+)/gm)].map(m=>p.relative(R,p.resolve(process.cwd(),m[1].trim())));if(a.length>0&&a.every(n))go=false}catch{}if(go){let n=1;if(typeof j.session_id==='string'){try{const t=p.join(require('os').tmpdir(),['qfai-reminder',j.session_id,j.agent_id||'main',process.argv[1]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];if(e===undefined){}else{const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}}catch{}\" minimal-implementation",
+            "timeout": 10
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "statusMessage": "QFAI session feedback reminder",
+            "command": "node -e \"try{const f=require('fs'),p=require('path');let d=process.cwd(),r;for(;;){const c=p.join(d,'.agents','rules','reminders.json');if(r===undefined&&f.existsSync(c))r=c;if(f.existsSync(p.join(d,'.git')))break;const u=p.dirname(d);if(u===d){r=undefined;break}d=u}if(r){let i;try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{process.exit(0)}const l=typeof i.last_assistant_message==='string'?i.last_assistant_message.trim():'';if(i.stop_hook_active===true||(l.length>0&&('?'+String.fromCharCode(65311)).includes(l.slice(-1))))process.exit(0);const m=JSON.parse(f.readFileSync(r,'utf8'))[process.argv[1]];m===undefined||console.log(JSON.stringify(m))}}catch{}\" session-feedback",
             "timeout": 10
           }
         ]

package/assets/init/.qfai/assistant/agent/frontend-engineer.md

@@ -45,6 +45,11 @@ specialization_tags:
   a deliberate shortcut with its ceiling and the condition that lifts it.
 - Apply `.qfai/assistant/rule/ui-procurement.md`: install a component before writing one, and for anything the prototype does not show, take the adopted system's default rather than inventing one.
 - Apply `.agents/rules/interface-clarity.md`: label a control in the user's words, never the parameter's. The label stays; the sentence explaining it goes.
+- Read each screen's `supplements` and `structure` in its UI contract before adding any text.
+  Show the title, the group headings, the labels and the declared supplements, and no other text.
+  A text the screen needs that the contract lacks, or a declared one the screen should not show,
+  is a change to the contract and goes back to `/qfai-sdd`.
+  Element ids stay the same when only wording changes.
 
 ## Inputs you must read
 

package/assets/init/.qfai/assistant/agent/implementation-reviewer.md

@@ -30,8 +30,13 @@ specialization_tags:
 
 ## Domain Responsibilities
 
-- Review changed production code and tests against the affected BF, AC, EX, BR and contracts. Check correctness, input validation, security, performance, maintainability and operational failure paths.
+- Review changed production code and tests against the affected BF, AC, EX, BR and contracts. Check correctness, performance, maintainability and operational failure paths, and security as set out below.
 - Apply the repository review checklist and `.agents/rules/minimal-implementation.md`. Require a concrete smaller implementation when reporting excess; preserve every safety-floor obligation.
+- Check that the change adds test files sized like their neighbours, commits no
+  scratch checks, follows § 4 on unrequested fixes, including its exception for
+  a necessary fix and reporting requirement, and states any assumption it built
+  on (`.qfai/assistant/rule/test-layers.md#test-suite-sizing`,
+  `.agents/rules/minimal-implementation.md` § 4).
 - Check each new module against the `## Architecture` table of `<paths.contractsDir>/tech.md`: it belongs to one layer and imports only from the layers its row lists. A crossing is a finding.
 - In TypeScript, flag unjustified assertions, unchecked `unknown`, needless generic complexity and promises that callers neither await nor return.
 - Read the whole of every file the change touches for silent failure and type design, not only the lines the change adds or alters.
@@ -46,6 +51,14 @@ specialization_tags:
 - Type design, against § 2 of the same rule: a value crossing a trust boundary is parsed there into a form that cannot hold an invalid value.
   Flag mutable internals exposed to outside code, an invariant held only by documentation, validation missing at construction,
   enforcement that differs from one mutation to another, and outside code left to maintain an invariant the type should own.
+- Security, read on the same scope as silent failure and type design above. Check the three shapes the drift protocol names:
+  missing validation on an input the code already treats as trusted, credential or personal-data exposure, and an injection or traversal path opened by the change.
+  Cover injection, cross-site scripting, server-side request forgery, hardcoded secrets, insecure direct object reference, auth bypass,
+  unsafe deserialization and path traversal. Judge validation at a trust boundary against `.agents/rules/minimal-implementation.md` § 2.
+- Follow every input the change adds or alters to where it is used, across files the change did not touch.
+  A path the change opens there, such as an insecure direct object reference, a server-side request forgery or an auth bypass reached through several files, blocks.
+  This is the one reach beyond the touched files, and it covers only the inputs the change handles.
+  A security finding the review demonstrates traces to `defect:security`.
 - Check the EX test's oracle, selector and RED/GREEN/Refactor evidence.
 - Check for code written only to pass a test: no value hard-coded to the test's
   inputs and no branch written only for the test, and a wrong test or infeasible

package/assets/init/.qfai/assistant/agent/product-experience-architect.md

@@ -51,6 +51,10 @@ specialization_tags:
 - Apply `.agents/rules/minimal-implementation.md`: the first rung is this stage's — whether the thing needs to exist. After a spec row is agreed, that question is a Change Request.
 - Apply `.qfai/assistant/rule/ui-procurement.md`: the theme is adopted from a published one, and a screen's composition comes from a catalogue before it is drawn.
 - Apply `.agents/rules/interface-clarity.md`: a screen that needs explaining is a screen that needs redesigning. Hint text only where a need was demonstrated and the control was improved first.
+- Record the decisions that rule leads to in the screen contract: the `supplements` a screen shows,
+  each with the reason it is needed, and the `structure` of any heading beyond the title
+  (`.qfai/assistant/skill/qfai-sdd/references/ui-contract-guide.md`).
+  Fix the control before adding a supplement for it.
 
 ## Inputs you must read
 

package/assets/init/.qfai/assistant/agent/product-surface-reviewer.md

@@ -61,6 +61,13 @@ specialization_tags:
 - Require more work only on what `.qfai/assistant/rule/shared-skill-delegation-baseline.md#what-a-reviewer-may-demand-more-of-must` admits, and report any other gap as advisory.
 - Apply `.qfai/assistant/rule/ui-procurement.md`: report a region that was drawn where a catalogue had it, and name the item that would have served.
 - Apply `.agents/rules/interface-clarity.md`: report copy that explains the interface as a finding against the control under it, and name the control to fix.
+- Compare the rendered text with each screen's `supplements` and `structure` in its UI contract.
+  A text no contract key declares is excess; a declared supplement that is not shown is an unmet need.
+  Name the screen, the task or state, the duplicated meaning or unmet need, and the text to remove or the control or structure to repair.
+  Apply `.qfai/assistant/skill/qfai-sdd/references/design-anti-patterns.md#copy-that-adds-no-meaning`.
+  Never cut a condition, cost, destination, result, recovery step, consequence, label, accessible name, role or state,
+  and never move one into a tooltip or placeholder.
+  Word counts are observations, never a verdict.
 
 ## Inputs you must read
 

package/assets/init/.qfai/assistant/agent/qa-gatekeeper.md

@@ -59,6 +59,11 @@ scope.
   code, control, setting or copy to remove or simplify and what replaces it.
   Do not weaken an active obligation to reduce code.
 - Treat test volume and density as review signals, not independent hard gates.
+- Check that the change adds test files sized like their neighbours, commits no
+  scratch checks, follows § 4 on unrequested fixes, including its exception for
+  a necessary fix and reporting requirement, and states any assumption it built
+  on
+  (`.qfai/assistant/rule/test-layers.md#test-suite-sizing`, `.agents/rules/minimal-implementation.md` § 4).
 
 ## Coverage gate
 
@@ -79,6 +84,30 @@ required gap or weak oracle; report a gap owned by another stage with that
 owner. During SDD, assess the requirement links without demanding tests that
 implementation has not written.
 
+## Refactor survival check (advisory)
+
+Read each test on four questions. Three are already judged elsewhere; apply
+them there, not twice.
+
+| Question                                                          | Where it is judged                                                      |
+| ----------------------------------------------------------------- | ----------------------------------------------------------------------- |
+| Does it cover the behaviour that matters, not just the lines run? | The coverage gate above                                                 |
+| Are the recurring gaps covered: kept failures and boundary cases? | The coverage gate above                                                 |
+| Would it fail on a concrete regression?                           | `skill/qfai-implement/references/oracle-strength.md`, proof per example |
+| Would it survive a refactor that keeps the behaviour?             | This check                                                              |
+
+A test fails the last question when it asserts on what the contract does not
+name: a private function, an internal call order, a mock of the code's own
+collaborators, or the structure of a value rather than what it means. Such a
+test breaks on a safe change and teaches authors to weaken the test instead of
+fixing the code.
+
+Read the whole of every test file the change touches, not only the tests it
+adds or alters. Record each finding with the test and a concrete
+behaviour-preserving change it would fail on. A finding with no named change is
+not admitted. A finding on a test that existed before the change is recorded
+and deferred. This check does not REVISE on its own and carries no score.
+
 ## Completion and runtime gate
 
 - Read the current BF's test selectors, command results and reviewer

package/assets/init/.qfai/assistant/agent/requirements-analyst.md

@@ -64,6 +64,14 @@ specialization_tags:
   `/qfai-prototyping` at the validate lane, under `QFAI-AUD-001`. The shipped
   `ui-contract.sample.yaml` carries filled entries; replace them with the
   screen's own rather than emptying the list.
+- For UI-bearing surfaces: every screen also declares `supplements` (`[]` when it
+  shows no text beyond its title, group headings and labels), and `structure` when
+  it shows a heading beyond its title. Check each proposed text element against the
+  screen's tasks and the information the user needs there, and write the ones that
+  stay into the contract with the reason. A text that only repeats a heading, an
+  action or a condition the user already has is left out. Discussion sidecars
+  inform these keys; they do not replace them. See
+  `.qfai/assistant/skill/qfai-sdd/references/ui-contract-guide.md`.
 
 ## Stop conditions
 

package/assets/init/.qfai/assistant/rule/communication.md

@@ -45,14 +45,24 @@ Applies to every text an agent produces: pull request and issue titles and
 bodies, source-code comments, and Markdown files — inside the current change
 only, never beyond its diff.
 
-- No issue or pull-request numbers, ticket identifiers, or names only this
-  project understands, anywhere in source code or Markdown files. Those belong
-  in the pull request, the commit message and the changelog.
-- No account of how the work went. State the current behaviour and why it is
-  that way; the history is already in the git log and the pull request.
-- Cut what is self-evident, repeated, or wordy.
-- Ordinary vocabulary, one claim per sentence, lines short enough to scan.
-- Bullet lists and tables for parallel items.
+- Keep out issue or pull-request numbers, ticket identifiers and names only
+  this project understands, anywhere in source code or Markdown files. Those
+  belong in the pull request, the commit message and the changelog.
+  Pull request and issue bodies may contain numbers and links.
+- Keep out any account of how the work went. State the current behaviour and
+  why it is that way; the history is already in the git log and the pull
+  request.
+- Settle the message, then open with the conclusion: the title or opening says
+  the result, with no preamble.
+- Cut what is self-evident, repeated or wordy, and announcements, recaps and
+  empty intensifiers.
+- Use ordinary vocabulary, one claim per sentence, and name who acts; software
+  does not know or decide.
+- Mark what is unverified, and say what a claim rests on.
+- Use bullet lists and tables for parallel items, with lines short enough to
+  scan.
+- Open a report with the outcome, and separate what was checked from what was
+  not.
 - Re-read every changed line afterwards. Text that reads as a literal
   translation is a defect in any language pair — rewrite it the way someone
   writing natively in that language would.

package/assets/init/.qfai/assistant/rule/constitution.md

@@ -95,7 +95,7 @@ The test obligation is determined by the ID and the test's layer:
 
 - `BF-*` requires a `QFAI:BF-NNNN` annotation in an E2E test.
 - `AC-*` requires a `QFAI:AC-NNNN-NNNN-NN` annotation in an integration or API test.
-- `EX-*` requires a `QFAI:EX-NNNN-NNNN-NN` annotation in a selected non-E2E test file.
+- `EX-*` requires a `QFAI:EX-NNNN-NNNN-NN` annotation in a selected non-E2E test file, on the comment line directly before the test declaration it marks.
 
 `.qfai/assistant/rule/test-layers.md` defines the layer directories. Test
 selection uses `validation.traceability.testFileGlobs`. A missing BF, AC, or EX
@@ -429,7 +429,8 @@ This article survives context compaction because `.qfai/assistant/rule/constitut
 
 Scratch files an agent creates for its own convenience — working notes, one-off
 scripts, captured command output, downloaded samples, intermediate data —
-must be placed under the repository‑root `tmp/` directory.
+go in the scratch directory the host names for the session, and under the
+repository-root `tmp/` directory where the host names none.
 
 Scope: this article is about files written **into the working tree**. Two kinds
 of output are outside it:
@@ -445,7 +446,7 @@ of output are outside it:
 Rules:
 
 1. **Never** create a scratch file in the repository root, `src/`, `.qfai/spec/`, or any other production/artifact directory.
-2. Use `tmp/` (repository root) as the sole staging area. Create subdirectories as needed (e.g., `tmp/notes/`, `tmp/capture/`).
+2. When the host names a scratch directory for the session, use it. Otherwise use `tmp/` (repository root) as the sole staging area, with subdirectories as needed (e.g., `tmp/notes/`, `tmp/capture/`). A file the repository's own tooling must read from the working tree goes under `tmp/` whichever the host names.
 3. `tmp/` MUST be listed in `.gitignore` so temporary files are never committed.
-4. Clean up `tmp/` contents when the task that created them is complete.
+4. Clean up `tmp/` contents when the task that created them is complete. The host's own scratch directory is the host's to clean.
 5. If a scratch file is found outside `tmp/` **in the working tree**, treat it as a defect and move or delete it immediately. A test's `mkdtemp` sandbox and configured toolchain output are not scratch files — see Scope above.

package/assets/init/.qfai/assistant/rule/drift-protocol.md

@@ -11,7 +11,18 @@ open-questions.md, and every file under paths.contractsDir. Production code and
 obligation may change in a later task, but the change must preserve or deliberately reapprove that obligation.
 QFAI-owned files under .qfai/assistant/rule/ are updated through the package, then synchronized by init.
 
-A new change-request row in decisions.md is permitted without an earlier change request. Existing rows are append-only records: a prior row may change its Status cell, while its ID, Content, and Approach stay fixed. A changed obligation needs a new row, even when an older row discusses the same topic.
+A new change-request row in decisions.md is permitted without an earlier change request.
+Existing rows are append-only records: a prior row may change its Status cell,
+while its ID, Content, and Approach stay fixed. The sole ID-change exception is
+explicit local renumbering of a unique branch-added decision absent from the
+unique common ancestor of HEAD and a required local base. That operation changes
+only its ID and provably branch-added exact references. Inherited row cells and
+references stay fixed. A changed obligation needs a new row, even when an older
+row discusses the same topic.
+
+The sole Approach-change exception is the published decision prefix recovery
+below. It preserves the target's ID, Content, Status and complete original
+Approach suffix. It excludes inherited rows and open-question rows.
 
 ## Allowed exceptions (minimal whitelist)
 
@@ -25,6 +36,51 @@ diff changes no file under `01_policy/`, `02_business-flow/` or
 paths.contractsDir appends no `Change request:` row. A row naming a story file
 the bugfix did not touch would state an upstream change that did not happen.
 
+## Published decision prefix recovery
+
+The SDD owner may prepend only an approved Evidence/Grounds prefix to a
+published malformed decision added by the branch. Approval of this protocol
+does not authorize any target. First obtain a separate new in-force recovery
+change request naming the target and its repository-relative file.
+
+1. Fix the explicit base commit and its unique common ancestor with current
+   HEAD. The target ID must be absent from both. The documented published
+   source commit must be an ancestor of current HEAD and expose the unique
+   original row. Inherited records and open-question rows are excluded.
+2. Read the original raw cell bytes. The row must be single-line valid UTF-8,
+   with exactly one ASCII padding space at each Approach delimiter and no
+   additional boundary whitespace. Hash the stored Approach bytes with
+   SHA-256, excluding only the delimiter pipes and those two padding spaces.
+   Do not decode escapes, trim text or normalize it. Ambiguous boundaries,
+   additional padding or invalid UTF-8 stop recovery.
+3. Confirm the original Residual risk and Rollback items already satisfy the
+   required ordered, nonempty form. The new Approach must be exactly
+   `- Evidence: <actual file references> - Grounds: `, including its trailing
+   space, followed by the complete original Approach as a byte-identical
+   suffix. Preserve the original wording, order, facts, authority and scope.
+   The prefixed row must satisfy the existing form checks.
+4. Record the target ID, published source commit, fixed base and common
+   ancestor, old and new Approach digests, exact prefix, actual file evidence,
+   approval authority, recovery reason, residual risk and rollback in the new
+   request. The old digest must match the published source Approach; the new
+   digest must match the exact prefix plus that source value. Record actual
+   authority; do not invent a user answer or approval.
+5. Immediately before writing, recheck the unique current target, its
+   byte-identical ID, Content and Status, and its recorded old Approach digest.
+   Unknown or unavailable provenance, inherited or duplicate targets, stale
+   data or a change beyond the approved prefix stops recovery before writing.
+   Apply only that prefix. Keep every other row byte-identical and run the existing
+   validation without an exemption.
+6. Rollback removes only the recorded prefix when the current new Approach
+   digest still matches. Otherwise preserve the current row and stop. Removal
+   restores the original Approach and its validation failure. Do not reset,
+   amend or force push.
+
+Status changes, supersession and a diagnostic's rewrite suggestion supply no
+recovery authority and clear no form error. Inherited malformed records need a
+separate owning change request; this operation cannot repair them. These are
+owner instructions, not an automatic recovery command or a concurrency guarantee.
+
 ## Drift classes
 
 Intent drift means an approved obligation should change. Record the current obligation, the proposed behavior, realistic
@@ -49,14 +105,18 @@ Both classes use the same approval and owner-rerun path.
 
    When the user cannot be asked, write no row to either table: report the proposed change as the decision still
    needed and keep the affected items stopped. A WIP Change request: row is the in-force authorization that the drift gate reads.
-   TODO is not authorization. A DONE row authorizes only on the branch that appended it or moved it from WIP. A DONE
-   row the base already holds records a change already applied, so a later edit to the same path needs a row of its own.
+   TODO is not authorization. A DONE row authorizes only on the branch that appended it or moved it from WIP. A row
+   the base already holds at DONE records a change already applied and authorizes nothing at any Status, so setting it back to WIP
+   reopens nothing and a later edit to the same path needs a row of its own.
 
 4. Rerun the owner skill against the affected artifact. The owner names the approved decision row, the input revision, and whether it is confirming existing content or changing it.
    A contract with a contract ID, such as `API-0002`, is selected by its full ID; a contract without one is selected by its repository-relative path.
    The owner updates the specification and its tests together, then validates the relevant flow.
 5. Recheck every dependent BF, AC, and EX test obligation and every affected contract reference. Rewrite tests where their former expectation is invalid. Report any uncovered obligation. No execution ledger, TC row, or status reset substitutes for this check.
-6. Complete the decision row by changing Status from WIP to DONE only after the owner artifact and dependent checks are complete. Cite the DEC ID in the stage report. A second open request on the same artifact waits for the first outcome and is restated if its premise changed.
+6. Complete the decision row by changing Status from WIP to DONE only after the owner artifact and dependent checks are complete.
+   A row has one Status, so DONE claims every action its Approach lists. While one of them is deferred, keep the row at WIP.
+   Cite the DEC ID in the stage report.
+   A second open request on the same artifact waits for the first outcome and is restated if its premise changed.
 
 The decision table has no separate Applied at field and no standalone CR file. Approval alone does not certify a change as applied.
 
@@ -70,6 +130,13 @@ Open requests have independent affected sets. Their union is the set of work pau
 
 A defect is demonstrable from the deliverable or an existing obligation: incorrect behavior, missing input validation, data loss, or a failing required quality gate. It is blocking with the concrete artifact and evidence as provenance.
 
+No repository gate scans for a security or data-integrity defect. Review is that
+class's detector: `.qfai/assistant/agent/implementation-reviewer.md` checks each
+change for missing validation on an input the code already treats as trusted,
+credential or personal-data exposure, and an injection or traversal path opened
+by the change. A finding the reviewer demonstrates traces to `defect:security`
+and blocks like the other blocking classes.
+
 New scope adds product behavior or a quality bar the approved story tree and contracts do not require. A reviewer records it as advisory and sends it to the SDD owner. It becomes binding only after the owner records the decision and updates the relevant BF, AC, EX, BR, or contract. An advisory does not create a test assertion by itself.
 
 ### Provenance and routing
@@ -101,6 +168,6 @@ copy of a locked file before deciding its lock is wrong.
 ## Non-negotiable constraints
 
 - Downstream stages do not patch protected upstream artifacts before an in-force Change request: decision row authorizes the path. The drift profile compares the branch against baseBranch and reports QFAI-DRIFT-001 for an unapproved protected change. The SDD owner may create the request row itself without a prior row.
-- Existing decisions.md and open-questions.md rows retain their ID, Content, and Approach. A former row may change Status; new content is appended as a new row.
+- Existing decisions.md and open-questions.md rows retain their ID, Content, and Approach, except for the explicit branch-added decision renumbering and published decision prefix recovery above. Inherited rows retain those cells without exception. A former row may change Status; new content is appended as a new row.
 - Vendored assistant rules are changed in the package and synchronized into projects by `npx qfai init --force`, which overwrites a local edit. A project rule lives in a `*.local.md` overlay beside the vendored one.
 - When approval is unavailable, keep the affected items stopped and report the decision needed. Continue unrelated work.

package/assets/init/.qfai/assistant/rule/references/asset-authoring.md

@@ -0,0 +1,72 @@
+# Asset Authoring
+
+Read when you write or change a shipped asset.
+
+## Asset Authoring Shape (Mandatory)
+
+A `SKILL.md` states the contract and points at the file that carries the detail. It is not where the detail lives.
+
+- **Keep in `SKILL.md`**: what the skill is for, its non-goals, its hard constraints, the phase/step order, and the gate conditions. Enough for an agent to know what it must do and when it is done.
+- **Move out**: command sets, table schemas, field-by-field contracts, worked procedures, checklists and rationale. These go under the owning tree's own directory:
+  - `references/` — normative detail the body cites (`references/<topic>.md`)
+  - `templates/` — artifacts the file produces, as fillable skeletons
+  - `examples/` — worked instances that illustrate, and bind, nothing
+- **One topic per file.** Do not replace an oversized `SKILL.md` with an oversized `references/everything.md`; that is the same problem one directory down. Split by topic and keep each file readable on its own — a reader who followed one pointer should not have to scan past three unrelated subjects to reach the one they came for.
+- **Every pointer resolves.** A line that moves detail out must name the file (and anchor, when the file covers more than one topic) so the reader is never left guessing where the rule went.
+
+A hard line ceiling backs this up: **500 lines per Markdown assistant asset file** and **800 lines per YAML assistant asset file**, for every `.qfai/assistant/**/*.{md,yml,yaml}` file, counted as `content.split(/\r?\n/).length` — blank lines included.
+`npx qfai doctor` measures it and reports every file over its ceiling as `assets.lineBudget`.
+The ceiling is a backstop, not the rule: a file approaching it is a signal to move a section out, not to raise the number.
+
+The Markdown ceiling is the limit an agent can follow in one file: it follows fewer instructions as its context grows, and follows those in the middle of a long file worst. A Markdown file has a `references/` home to move detail into. A YAML asset is parsed as data and cannot be split that way (see below), which is why its ceiling is higher.
+
+A body at its ceiling stops shedding topics and starts packing them into longer lines, and a line count cannot see that. The width ceiling below is what catches it.
+
+**A width ceiling makes the count honest: 400 characters per line.** A count of lines bounds reading cost only while a line is a roughly constant unit of reading, and packing broke that — one line in the shipped tree ran 9,104 characters against a median of 118, and cost the budget one unit. The two are read together, because each permits what the other refuses: width alone allows a thin
+file of a thousand short lines, and the count alone allows a packed one.
+
+Two shapes are not measured, and for the same reason — the author cannot make them narrower:
+
+| not measured   | why                                                       |
+| -------------- | --------------------------------------------------------- |
+| a table row    | markdown gives it no continuation, so it cannot wrap      |
+| a fenced block | its content is a command, a diagram or a sample, verbatim |
+
+A table is found by its delimiter row, not by a leading pipe: that pipe is optional, so a table written without one is still a table, and a paragraph that opens with one is still a paragraph. Rows a blank line has cut off from their delimiter are prose, because that is how they render.
+
+Some shipped files predate the ceiling and carry a recorded width of their own. It is the width each arrives with, so `npx qfai doctor` does not report a fresh tree for content you received rather than wrote. That record belongs to the package and shrinks there; it is not a per-project allowance, and it never loosens the ceiling on an asset you write. **Everything you author is held
+at 400.**
+
+The exemption from the line ceiling does not carry here. Its reason is about a file's length, not about how wide one line may be.
+
+No shipped prose asset has a line-ceiling exemption. Agent definitions are
+individual cards under `assistant/agent/`, so their count does not lengthen
+one roster file.
+
+### The owning tree is the one the file sits in
+
+The ceiling applies to **every** shipped assistant prose asset, including
+rules and cards. A rule at the ceiling moves topic detail to
+`rule/references/<topic>.md`; a skill uses its own `references/` directory.
+The tree that owns the file owns its detail.
+
+For a prose asset, raising the ceiling or claiming an exemption is not the remedy. An exemption claims no split is possible, and a Markdown file whose tree has a `references/` home available cannot make that claim.
+
+### Machine-readable assets split in their own format, or say why they cannot
+
+The ceiling is measured over YAML assets too — package routing and review-profile defaults and the shipped contract templates. The split above is not open to them: a validator parses those files as structured data, or a skill copies one whole into a project, so an entry moved into a Markdown sibling under `references/` leaves the parsed document and stops meaning anything. Prose about the
+file may move there; the file's own items may not.
+
+So for a machine-readable asset at the ceiling the remedy is, in order:
+
+1. **Split it in its own format** — a sibling of the same kind that the loader or schema already reads, so every item stays parsed.
+2. **Record an exemption** where the document has to stay whole — a file generated from another asset, one the schema admits only as a single document — naming what makes the split impossible. "This file is long" is not that reason, and a prose asset may not use this step.
+
+## Citation Path Form (Mandatory)
+
+A pointer only resolves if the reader knows what base to resolve it against. There is one base, and it is the project root.
+
+- **Cite a shared rule by its full path from the project root.** Write the path from the project root, with `#anchor` appended when one applies: `.qfai/assistant/rule/drift-protocol.md`. Not the bare filename, not a relative climb. That form resolves from every directory in the tree,
+  and the only one that still resolves when read with the cwd at the project root — which is where an agent's cwd is.
+- **The same holds when a rule cites another one**, including a sibling in its own directory. A bare name works there only by accident of where the citing file sits; it stops working the moment the text is quoted elsewhere.
+- **Within a skill's own directory, keep pointers relative to that directory**: `references/<topic>.md`, `templates/<name>.md`. Those name the skill's own parts, not a shared document, and the surrounding text already establishes which skill is meant.