reviewflow 3.8.0 → 3.9.0

package/CHANGELOG.md

@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.9.0](https://github.com/DGouron/review-flow/compare/reviewflow-v3.8.1...reviewflow-v3.9.0) (2026-04-03)
+
+
+### Added
+
+* **harness:** add SDD+TDD double loop with deterministic hooks ([793c8d8](https://github.com/DGouron/review-flow/commit/793c8d8d0c38ba88c770e0a5971fb670e4209ae9))
+* **harness:** add SDD+TDD double loop with deterministic hooks ([9a9a25a](https://github.com/DGouron/review-flow/commit/9a9a25af7925da8518ae53ebe5362a0a6743981f))
+
+## [3.8.1](https://github.com/DGouron/review-flow/compare/reviewflow-v3.8.0...reviewflow-v3.8.1) (2026-03-16)
+
+
+### Fixed
+
+* **docs:** escape angle bracket placeholders in spec files ([e82ff68](https://github.com/DGouron/review-flow/commit/e82ff688a5ce9e556d01a94369ac14b4598bfa2c))
+
 ## [3.8.0](https://github.com/DGouron/review-flow/compare/reviewflow-v3.7.0...reviewflow-v3.8.0) (2026-03-16)
 
 

package/README.md

@@ -92,9 +92,32 @@ A WebSocket-powered dashboard shows live review progress:
 - Phase and agent-level progress bars
 - Running / queued / completed review counts
 - Review history with duration, scores, and error details
+- **Team tab** with developer cards, insights, and AI analysis
+- **Stats section** with canvas charts, score trends, and animated counters
 - Log stream for debugging
 - Auto-reconnection with exponential backoff
 
+### Developer & Team Insights
+
+The dashboard computes performance insights from your review history — no configuration needed.
+
+**Per-developer analysis** across 4 categories:
+
+| Category | What it measures |
+|----------|-----------------|
+| Quality | Average score, blocking issues ratio |
+| Responsiveness | Review turnaround time vs team average |
+| Code Volume | Additions/deletions per review |
+| Iteration | First-pass quality rate (reviews without blocking issues) |
+
+Each developer gets a **level** (beginner → expert), a **trend** (improving / stable / declining), identified **strengths and weaknesses**, and a title based on their strongest category (Architect, Firefighter, Workhorse, Sentinel, or Balanced).
+
+**Team-level analysis** shows top performer, most improved developer, and actionable tips.
+
+**AI-powered narrative** (optional): click "Generate AI Insights" to have Claude produce a written analysis with per-developer and team recommendations.
+
+Insights are computed from the first 5 reviews onward and persist across sessions.
+
 ### Follow-Up Reviews
 
 When a developer pushes fixes after a review, Claude automatically:
@@ -210,6 +233,11 @@ For detailed setup, see the **[Quick Start Guide](https://dgouron.github.io/revi
 | `/webhooks/github` | POST | GitHub webhook receiver |
 | `/api/reviews` | GET | List reviews |
 | `/api/reviews/cancel/:jobId` | POST | Cancel a running review |
+| `/api/insights?path=` | GET | Developer & team insights |
+| `/api/insights/generate` | POST | Generate AI-powered insights via Claude |
+| `/api/stats/recalculate` | POST | Recalculate stats with optional diff backfill |
+| `/api/version/check` | GET | Check for updates |
+| `/api/version/update` | POST | Trigger self-update |
 | `/ws` | WS | Real-time progress updates |
 
 ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "reviewflow",
-  "version": "3.8.0",
+  "version": "3.9.0",
   "description": "AI-powered code review automation for GitLab/GitHub using Claude Code",
   "type": "module",
   "main": "dist/main/server.js",

package/scripts/hooks/no-barrel-exports.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Blocks creation or editing of barrel export files (index.ts).
+# Used as PreToolUse hook on Write|Edit.
+# Exit 0 = allow, Exit 2 = block with feedback to Claude.
+
+HOOK_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+INPUT=$(cat)
+FILE_PATH=$(echo "$INPUT" | "$HOOK_DIR/parse-json.sh" tool_input.file_path)
+
+is_barrel_export() {
+  local filename
+  filename=$(basename "$FILE_PATH")
+  [[ "$filename" == "index.ts" || "$filename" == "index.js" ]]
+}
+
+if is_barrel_export; then
+  echo "Barrel exports are forbidden. Import directly from the source file instead of using index.ts." >&2
+  exit 2
+fi
+
+exit 0

package/scripts/hooks/parse-json.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+# Extracts a value from JSON on stdin using a dot-separated path.
+# Usage: echo '{"a":{"b":"c"}}' | parse-json.sh a.b
+# Returns empty string if path not found. No external dependencies beyond python3.
+
+python3 -c "
+import json, sys
+data = json.load(sys.stdin)
+path = sys.argv[1].split('.')
+for key in path:
+    if isinstance(data, dict) and key in data:
+        data = data[key]
+    else:
+        sys.exit(0)
+print(data if data is not None else '')
+" "$1"

package/scripts/hooks/pre-commit-gate.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Blocks git commit if tests fail.
+# Used as PreToolUse hook on Bash(git commit *).
+# Exit 0 = allow, Exit 2 = block with feedback to Claude.
+
+HOOK_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | "$HOOK_DIR/parse-json.sh" tool_input.command)
+
+is_commit_command() {
+  echo "$COMMAND" | grep -qE "git commit"
+}
+
+if ! is_commit_command; then
+  exit 0
+fi
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(cd "$HOOK_DIR/../.." && pwd)}"
+
+cd "$PROJECT_DIR"
+
+if yarn test:ci 2>&1; then
+  exit 0
+else
+  echo "Tests failed. Fix them before committing." >&2
+  exit 2
+fi

package/scripts/hooks/protect-main-branch.sh

@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Blocks git commit on main/master branch.
+# Used as PreToolUse hook on Bash(git commit *).
+# Exit 0 = allow, Exit 2 = block with feedback to Claude.
+
+HOOK_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | "$HOOK_DIR/parse-json.sh" tool_input.command)
+
+is_commit_command() {
+  echo "$COMMAND" | grep -qE "git commit"
+}
+
+if ! is_commit_command; then
+  exit 0
+fi
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(cd "$HOOK_DIR/../.." && pwd)}"
+CURRENT_BRANCH=$(cd "$PROJECT_DIR" && git branch --show-current 2>/dev/null || true)
+
+if [[ "$CURRENT_BRANCH" == "main" || "$CURRENT_BRANCH" == "master" ]]; then
+  echo "You are on '$CURRENT_BRANCH'. Create a feature branch or use /worktree add <name> first." >&2
+  exit 2
+fi
+
+exit 0

package/scripts/hooks/protect-main-push.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Blocks git push to main/master branch and force pushes.
+# Used as PreToolUse hook on Bash(git push *).
+# Exit 0 = allow, Exit 2 = block with feedback to Claude.
+
+HOOK_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | "$HOOK_DIR/parse-json.sh" tool_input.command)
+
+is_push_command() {
+  echo "$COMMAND" | grep -qE "git push"
+}
+
+if ! is_push_command; then
+  exit 0
+fi
+
+is_force_push() {
+  echo "$COMMAND" | grep -qE "\-\-force|\-f"
+}
+
+if is_force_push; then
+  echo "Force push is forbidden. Push normally to your feature branch instead." >&2
+  exit 2
+fi
+
+pushes_to_protected_branch() {
+  echo "$COMMAND" | grep -qE "git push.*(origin\s+(main|master)|origin/main|origin/master)"
+}
+
+if pushes_to_protected_branch; then
+  echo "Push to main/master is forbidden. Push to your feature branch instead." >&2
+  exit 2
+fi
+
+exit 0

package/scripts/hooks/require-spec.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Blocks feature-implementer agent if no spec file exists or spec is incomplete.
+# Used as PreToolUse hook on Agent.
+# Exit 0 = allow, Exit 2 = block with feedback to Claude.
+
+HOOK_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+INPUT=$(cat)
+PROMPT=$(echo "$INPUT" | "$HOOK_DIR/parse-json.sh" tool_input.prompt)
+
+is_feature_agent() {
+  echo "$PROMPT" | grep -qi "feature-implementer\|feature-planner"
+}
+
+if ! is_feature_agent; then
+  exit 0
+fi
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(cd "$HOOK_DIR/../.." && pwd)}"
+
+spec_file_referenced() {
+  echo "$PROMPT" | grep -oP 'docs/specs/[a-z0-9-]+\.md' | head -1 || true
+}
+
+SPEC_REF=$(spec_file_referenced || true)
+
+if [[ -z "$SPEC_REF" ]]; then
+  echo "No spec file referenced in the prompt. Create a spec first with /product-manager." >&2
+  exit 2
+fi
+
+if [[ ! -f "$PROJECT_DIR/$SPEC_REF" ]]; then
+  echo "Spec file '$SPEC_REF' does not exist. Create it first with /product-manager." >&2
+  exit 2
+fi
+
+SPEC_CONTENT=$(cat "$PROJECT_DIR/$SPEC_REF")
+
+has_rules_section() {
+  echo "$SPEC_CONTENT" | grep -qE "^## (Rules|Business Rules|Remaining Scope|Functional Requirements)"
+}
+
+has_scenarios_section() {
+  echo "$SPEC_CONTENT" | grep -qE "^## (Scenarios|Acceptance Criteria|Gherkin Scenarios)"
+}
+
+if ! has_rules_section; then
+  echo "Spec '$SPEC_REF' is missing the '## Rules' (or '## Business Rules') section. Fix it before implementing." >&2
+  exit 2
+fi
+
+if ! has_scenarios_section; then
+  echo "Spec '$SPEC_REF' is missing the '## Scenarios' (or '## Acceptance Criteria') section. Fix it before implementing." >&2
+  exit 2
+fi
+
+exit 0

package/scripts/hooks/session-context.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Injects feature tracker status into session context on startup.
+# Used as SessionStart hook.
+# Outputs JSON with additionalContext field.
+
+HOOK_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(cd "$HOOK_DIR/../.." && pwd)}"
+TRACKER="$PROJECT_DIR/docs/feature-tracker.md"
+
+if [[ ! -f "$TRACKER" ]]; then
+  exit 0
+fi
+
+FEATURE_COUNT=$(tail -n +3 "$TRACKER" | grep -c '|' || true)
+
+if [[ "$FEATURE_COUNT" -eq 0 ]]; then
+  exit 0
+fi
+
+IMPLEMENTING=$(tail -n +3 "$TRACKER" | grep -c "| implementing |" || true)
+IMPLEMENTED=$(tail -n +3 "$TRACKER" | grep -c "| implemented |" || true)
+DRAFTED=$(tail -n +3 "$TRACKER" | grep -c "| drafted |" || true)
+PLANNED=$(tail -n +3 "$TRACKER" | grep -c "| planned |" || true)
+
+CONTEXT="Feature tracker: ${FEATURE_COUNT} features total"
+
+if [[ "$IMPLEMENTING" -gt 0 ]]; then
+  CONTEXT="$CONTEXT, ${IMPLEMENTING} in progress"
+fi
+if [[ "$PLANNED" -gt 0 ]]; then
+  CONTEXT="$CONTEXT, ${PLANNED} planned"
+fi
+if [[ "$DRAFTED" -gt 0 ]]; then
+  CONTEXT="$CONTEXT, ${DRAFTED} drafted"
+fi
+if [[ "$IMPLEMENTED" -gt 0 ]]; then
+  CONTEXT="$CONTEXT, ${IMPLEMENTED} implemented"
+fi
+
+CONTEXT="$CONTEXT. See docs/feature-tracker.md for details."
+
+python3 -c "
+import json, sys
+print(json.dumps({'additionalContext': sys.argv[1]}))
+" "$CONTEXT"

package/scripts/hooks/tests/run-tests.sh

@@ -0,0 +1,189 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Test runner for Claude Code hook scripts.
+# Run: bash scripts/hooks/tests/run-tests.sh
+
+HOOK_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+TEST_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PASSED=0
+FAILED=0
+TOTAL=0
+
+green() { printf "\033[32m%s\033[0m\n" "$1"; }
+red() { printf "\033[31m%s\033[0m\n" "$1"; }
+bold() { printf "\033[1m%s\033[0m\n" "$1"; }
+
+assert_exit() {
+  local test_name="$1"
+  local expected_exit="$2"
+  local actual_exit="$3"
+  TOTAL=$((TOTAL + 1))
+
+  if [[ "$actual_exit" -eq "$expected_exit" ]]; then
+    green "  PASS: $test_name (exit $actual_exit)"
+    PASSED=$((PASSED + 1))
+  else
+    red "  FAIL: $test_name (expected exit $expected_exit, got $actual_exit)"
+    FAILED=$((FAILED + 1))
+  fi
+}
+
+assert_stderr_contains() {
+  local test_name="$1"
+  local pattern="$2"
+  local stderr_output="$3"
+  TOTAL=$((TOTAL + 1))
+
+  if echo "$stderr_output" | grep -q "$pattern"; then
+    green "  PASS: $test_name (stderr contains '$pattern')"
+    PASSED=$((PASSED + 1))
+  else
+    red "  FAIL: $test_name (stderr missing '$pattern')"
+    red "    actual stderr: $stderr_output"
+    FAILED=$((FAILED + 1))
+  fi
+}
+
+# ─────────────────────────────────────────────
+bold "=== parse-json.sh ==="
+
+OUTPUT=$(echo '{"tool_input":{"command":"git commit -m test"}}' | "$HOOK_DIR/parse-json.sh" tool_input.command)
+TOTAL=$((TOTAL + 1))
+if [[ "$OUTPUT" == "git commit -m test" ]]; then
+  green "  PASS: extracts nested value"
+  PASSED=$((PASSED + 1))
+else
+  red "  FAIL: extracts nested value (got: $OUTPUT)"
+  FAILED=$((FAILED + 1))
+fi
+
+OUTPUT=$(echo '{"tool_input":{"command":"test"}}' | "$HOOK_DIR/parse-json.sh" tool_input.missing_key)
+TOTAL=$((TOTAL + 1))
+if [[ -z "$OUTPUT" ]]; then
+  green "  PASS: returns empty for missing key"
+  PASSED=$((PASSED + 1))
+else
+  red "  FAIL: returns empty for missing key (got: $OUTPUT)"
+  FAILED=$((FAILED + 1))
+fi
+
+# ─────────────────────────────────────────────
+bold "=== no-barrel-exports.sh ==="
+
+echo '{"tool_input":{"file_path":"/src/entities/index.ts"}}' | "$HOOK_DIR/no-barrel-exports.sh" > /dev/null 2>&1 || true
+EXIT_CODE=$(echo '{"tool_input":{"file_path":"/src/entities/index.ts"}}' | "$HOOK_DIR/no-barrel-exports.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "blocks index.ts" 2 "$EXIT_CODE"
+
+STDERR=$(echo '{"tool_input":{"file_path":"/src/entities/index.ts"}}' | "$HOOK_DIR/no-barrel-exports.sh" 2>&1 > /dev/null || true)
+assert_stderr_contains "error message mentions barrel" "Barrel exports" "$STDERR"
+
+EXIT_CODE=$(echo '{"tool_input":{"file_path":"/src/entities/review.ts"}}' | "$HOOK_DIR/no-barrel-exports.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "allows normal .ts file" 0 "$EXIT_CODE"
+
+EXIT_CODE=$(echo '{"tool_input":{"file_path":"/src/entities/index.js"}}' | "$HOOK_DIR/no-barrel-exports.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "blocks index.js" 2 "$EXIT_CODE"
+
+# ─────────────────────────────────────────────
+bold "=== protect-main-branch.sh ==="
+
+# Create temp git repo to test
+TEMP_REPO=$(mktemp -d)
+cd "$TEMP_REPO"
+git init -q
+git checkout -q -b master
+
+EXIT_CODE=$(echo '{"tool_input":{"command":"git commit -m test"}}' | CLAUDE_PROJECT_DIR="$TEMP_REPO" "$HOOK_DIR/protect-main-branch.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "blocks commit on master" 2 "$EXIT_CODE"
+
+STDERR=$(echo '{"tool_input":{"command":"git commit -m test"}}' | CLAUDE_PROJECT_DIR="$TEMP_REPO" "$HOOK_DIR/protect-main-branch.sh" 2>&1 > /dev/null || true)
+assert_stderr_contains "mentions master" "master" "$STDERR"
+
+git checkout -q -b feat/test
+EXIT_CODE=$(echo '{"tool_input":{"command":"git commit -m test"}}' | CLAUDE_PROJECT_DIR="$TEMP_REPO" "$HOOK_DIR/protect-main-branch.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "allows commit on feature branch" 0 "$EXIT_CODE"
+
+EXIT_CODE=$(echo '{"tool_input":{"command":"ls -la"}}' | CLAUDE_PROJECT_DIR="$TEMP_REPO" "$HOOK_DIR/protect-main-branch.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "ignores non-commit commands" 0 "$EXIT_CODE"
+
+rm -rf "$TEMP_REPO"
+
+# ─────────────────────────────────────────────
+bold "=== protect-main-push.sh ==="
+
+EXIT_CODE=$(echo '{"tool_input":{"command":"git push origin master"}}' | "$HOOK_DIR/protect-main-push.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "blocks push to master" 2 "$EXIT_CODE"
+
+EXIT_CODE=$(echo '{"tool_input":{"command":"git push origin main"}}' | "$HOOK_DIR/protect-main-push.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "blocks push to main" 2 "$EXIT_CODE"
+
+EXIT_CODE=$(echo '{"tool_input":{"command":"git push --force origin feat/test"}}' | "$HOOK_DIR/protect-main-push.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "blocks force push" 2 "$EXIT_CODE"
+
+EXIT_CODE=$(echo '{"tool_input":{"command":"git push origin feat/test"}}' | "$HOOK_DIR/protect-main-push.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "allows push to feature branch" 0 "$EXIT_CODE"
+
+EXIT_CODE=$(echo '{"tool_input":{"command":"ls -la"}}' | "$HOOK_DIR/protect-main-push.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "ignores non-push commands" 0 "$EXIT_CODE"
+
+# ─────────────────────────────────────────────
+bold "=== require-spec.sh ==="
+
+PROJECT_DIR="$HOOK_DIR/../.."
+
+# Test: no spec reference → block
+EXIT_CODE=$(echo '{"tool_input":{"prompt":"implement the feature-implementer for login"}}' | CLAUDE_PROJECT_DIR="$PROJECT_DIR" "$HOOK_DIR/require-spec.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "blocks agent without spec reference" 2 "$EXIT_CODE"
+
+STDERR=$(echo '{"tool_input":{"prompt":"implement the feature-implementer for login"}}' | CLAUDE_PROJECT_DIR="$PROJECT_DIR" "$HOOK_DIR/require-spec.sh" 2>&1 > /dev/null || true)
+assert_stderr_contains "suggests /product-manager" "product-manager" "$STDERR"
+
+# Test: non-feature agent → allow
+EXIT_CODE=$(echo '{"tool_input":{"prompt":"review the code in src/entities"}}' | CLAUDE_PROJECT_DIR="$PROJECT_DIR" "$HOOK_DIR/require-spec.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "allows non-feature agents" 0 "$EXIT_CODE"
+
+# Test: valid spec reference with existing file
+EXIT_CODE=$(echo '{"tool_input":{"prompt":"run feature-planner with docs/specs/44-zod-guard-gitlab-webhook.md"}}' | CLAUDE_PROJECT_DIR="$PROJECT_DIR" "$HOOK_DIR/require-spec.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "allows with valid spec reference" 0 "$EXIT_CODE"
+
+# Test: spec file does not exist
+EXIT_CODE=$(echo '{"tool_input":{"prompt":"run feature-implementer with docs/specs/999-nonexistent.md"}}' | CLAUDE_PROJECT_DIR="$PROJECT_DIR" "$HOOK_DIR/require-spec.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "blocks with nonexistent spec" 2 "$EXIT_CODE"
+
+# ─────────────────────────────────────────────
+bold "=== session-context.sh ==="
+
+EXIT_CODE=$(CLAUDE_PROJECT_DIR="$PROJECT_DIR" "$HOOK_DIR/session-context.sh" > /dev/null 2>&1; echo $?) || true
+assert_exit "runs without error" 0 "$EXIT_CODE"
+
+OUTPUT=$(CLAUDE_PROJECT_DIR="$PROJECT_DIR" "$HOOK_DIR/session-context.sh" 2>/dev/null || true)
+TOTAL=$((TOTAL + 1))
+if echo "$OUTPUT" | python3 -c "import json,sys; json.load(sys.stdin)" 2>/dev/null; then
+  green "  PASS: outputs valid JSON"
+  PASSED=$((PASSED + 1))
+else
+  red "  FAIL: outputs valid JSON (got: $OUTPUT)"
+  FAILED=$((FAILED + 1))
+fi
+
+TOTAL=$((TOTAL + 1))
+if echo "$OUTPUT" | python3 -c "import json,sys; d=json.load(sys.stdin); assert 'additionalContext' in d" 2>/dev/null; then
+  green "  PASS: JSON contains additionalContext"
+  PASSED=$((PASSED + 1))
+else
+  red "  FAIL: JSON contains additionalContext (got: $OUTPUT)"
+  FAILED=$((FAILED + 1))
+fi
+
+# ─────────────────────────────────────────────
+echo ""
+bold "=== RESULTS ==="
+echo "Total: $TOTAL | Passed: $PASSED | Failed: $FAILED"
+
+if [[ "$FAILED" -gt 0 ]]; then
+  red "SOME TESTS FAILED"
+  exit 1
+else
+  green "ALL TESTS PASSED"
+  exit 0
+fi

package/scripts/hooks/verify-spec-updated.sh

@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Blocks git commit if staged files include src/ code but the corresponding
+# spec does not have "## Status: implemented" and the feature-tracker is stale.
+# Used as PreToolUse hook on Bash(git commit *).
+# Exit 0 = allow, Exit 2 = block with feedback to Claude.
+
+HOOK_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | "$HOOK_DIR/parse-json.sh" tool_input.command)
+
+is_commit_command() {
+  echo "$COMMAND" | grep -qE "git commit"
+}
+
+if ! is_commit_command; then
+  exit 0
+fi
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(cd "$HOOK_DIR/../.." && pwd)}"
+cd "$PROJECT_DIR"
+
+STAGED_FILES=$(git diff --cached --name-only 2>/dev/null || true)
+
+if [[ -z "$STAGED_FILES" ]]; then
+  exit 0
+fi
+
+has_source_code() {
+  echo "$STAGED_FILES" | grep -q "^src/" 2>/dev/null
+}
+
+if ! has_source_code; then
+  exit 0
+fi
+
+TRACKER="$PROJECT_DIR/docs/feature-tracker.md"
+SPECS_DIR="$PROJECT_DIR/docs/specs"
+
+ERRORS=""
+
+if [[ -f "$TRACKER" ]]; then
+  DRAFTS_IN_TRACKER=$(grep -c "| drafted |" "$TRACKER" || true)
+  STAGED_HAS_TRACKER=$(echo "$STAGED_FILES" | grep -c "docs/feature-tracker.md" || true)
+
+  if [[ "$DRAFTS_IN_TRACKER" -gt 0 && "$STAGED_HAS_TRACKER" -eq 0 ]]; then
+    IMPLEMENTING=$(grep -c "| implementing |" "$TRACKER" || true)
+    if [[ "$IMPLEMENTING" -gt 0 ]]; then
+      ERRORS="${ERRORS}Feature tracker has features in 'implementing' status. Update docs/feature-tracker.md before committing.\n"
+    fi
+  fi
+fi
+
+if [[ -d "$SPECS_DIR" ]]; then
+  for SPEC_FILE in "$SPECS_DIR"/*.md; do
+    [[ -f "$SPEC_FILE" ]] || continue
+    SPEC_NAME=$(basename "$SPEC_FILE")
+
+    if grep -q "^## Status: implemented" "$SPEC_FILE" 2>/dev/null; then
+      continue
+    fi
+
+    if echo "$STAGED_FILES" | grep -q "$SPEC_NAME" 2>/dev/null; then
+      continue
+    fi
+  done
+fi
+
+if [[ -n "$ERRORS" ]]; then
+  echo -e "$ERRORS" >&2
+  exit 2
+fi
+
+exit 0