robisie 0.1.0 → 0.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "robisie",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Instalator klienta robisie: łączy agenta (Claude Code, Codex CLI, OpenCode) z tablicą robisie i instaluje role klienta.",
   "license": "UNLICENSED",
   "type": "module",
@@ -24,9 +24,14 @@
     "zod": "^4.3.6"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "node scripts/build-package.mjs",
     "sync": "node scripts/sync-assets.mjs",
-    "prepack": "node scripts/sync-assets.mjs && tsc -p tsconfig.json"
+    "prepack": "node scripts/sync-assets.mjs && node scripts/build-package.mjs"
   },
-  "homepage": "https://robisie.app/SKILL.md"
+  "homepage": "https://robisie.app/SKILL.md",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/chuppa12/robisie-app",
+    "directory": "packages/client"
+  }
 }

package/roles/ceo-client.md

@@ -55,13 +55,14 @@ async function readCompleteCard(cardRef) {
   const card = await mcp__robisie__get_task({ id: cardRef, include: detailsKeys });
   if (card === null) return null;
   const expected = JSON.stringify([...detailsKeys].sort());
-  if (JSON.stringify([...(card.availableDetailsKeys ?? [])].sort()) !== expected
+  if (!Array.isArray(card.availableDetailsKeys) || card.availableDetailsKeys.some(key => typeof key !== "string")
+    || JSON.stringify([...card.availableDetailsKeys].sort()) !== expected
     || JSON.stringify(Object.keys(card.details ?? {}).sort()) !== expected) throw new Error("Details keys changed during read");
   return card;
 }
 ```
 
-Use the complete second result as the card. The index response is never evidence of complete details. If keys are unreadable or change, report the read failure through the existing failure path; do not continue with partial content.
+Use the complete second result as the card. The index response is never evidence of complete details. Both indexes must be arrays of strings: [] to [] passes the key check; a missing or null second index fails it. If keys are unreadable or change, report the read failure through the existing failure path; do not continue with partial content.
 
 ## Discover the operator's intent
 

package/roles/manager-builder-client.md

@@ -47,13 +47,27 @@ async function readCompleteCard(cardRef) {
   const card = await mcp__robisie__get_task({ id: cardRef, include: detailsKeys });
   if (card === null) return null;
   const expected = JSON.stringify([...detailsKeys].sort());
-  if (JSON.stringify([...(card.availableDetailsKeys ?? [])].sort()) !== expected
+  if (!Array.isArray(card.availableDetailsKeys) || card.availableDetailsKeys.some(key => typeof key !== "string")
+    || JSON.stringify([...card.availableDetailsKeys].sort()) !== expected
     || JSON.stringify(Object.keys(card.details ?? {}).sort()) !== expected) throw new Error("Details keys changed during read");
+  const details = card.details && typeof card.details === "object" && !Array.isArray(card.details) ? card.details : {};
+  const nonblank = value => typeof value === "string" && value.trim().length > 0;
+  const missing = ["goal", "expectedResult", "boundaries", "doneWhen"].filter(key => {
+    const value = details[key];
+    return key === "goal" || key === "expectedResult"
+      ? !nonblank(value)
+      : !Array.isArray(value) || value.length === 0 || ![...value].every(nonblank);
+  });
+  if (missing.length) throw new Error(`Missing intent data: ${missing.join(", ")}`);
   return card;
 }
 ```
 
-Use the complete second result as the card. The index response is never evidence of complete details. If keys are unreadable or change, report the read failure through the existing failure path; do not continue with partial content.
+Use the complete second result as the card. The index response is never evidence of complete details. Both indexes must be arrays of strings: [] to [] passes the key check; a missing or null second index fails it. If keys are unreadable or change, report the read failure through the existing failure path; do not continue with partial content.
+
+D04 client intent gate: every complete read must validate `goal` and `expectedResult` as nonblank strings, and `boundaries` and `doneWhen` as nonempty arrays of nonblank strings. `trim()` checks only; preserve the original values and foreign keys, including canonical legacy details. Unreadable details (missing, null, primitive, or array) lack all four fields. `done_when` is builder evidence, never an alias for `doneWhen`.
+
+On `Missing intent data`, name every reported field and stop before project work or checks, `mcp__client-launch-context__prepare_review`, identity or receipt creation, evidence append, or status handoff. Do not guess, coerce, fill, or write repairs. This also applies to every fresh reread and context recovery. D04 refusal happens after reservation; do not roll back the status or add a read before reservation.
 
 ## First action: reserve the named card
 
@@ -76,8 +90,8 @@ The only status flow you use is:
 3. Build only the requested result and persist it locally according to the project's delivery policy. Do not require a remote push, a merge, or a particular repository topology before handoff; the self-contained proof on the card is the handoff record. Handle I/O failures explicitly, keep secrets out of code and logs, and use no `any` in TypeScript.
 4. Collect evidence before claiming completion: relevant test output, a screenshot for visual work, a diff or changed-file summary, and a location where the operator can inspect the result.
 5. Run review before handoff. Use available review subagents first: `kieran-typescript-reviewer`, `security-sentinel`, and `code-simplicity-reviewer` for TypeScript work; add the relevant language reviewer for other stacks. Resolve every material finding and rerun affected checks. If review subagents are unavailable, use their published checklists manually in that order, record the fallback and its outcome in the evidence, and do not call the work complete without it. If review does not pass, do not append evidence or change the status; report the unresolved finding and stop.
-6. Write a self-contained proof to the same card with `mcp__robisie__append_detail({ id: cardRef, patch })`. The patch must let a reviewer decide without this session transcript: what changed, which Done-When conditions it satisfies, exact checks and results, where to inspect the result, and any limitation or fallback. If `mcp__robisie__append_detail` fails, do not change the card status; report the failure and stop.
-7. Hand off with `mcp__robisie__update_task({ id: cardRef, status: "in_review" })`. If the handoff update fails, do not retry blindly or finalize the work yourself; report the failure with the card's current state and stop.
+6. Re-read the card with `readCompleteCard` and require valid D04 intent before any evidence append. Write a self-contained proof to the same card with `mcp__robisie__append_detail({ id: cardRef, patch })`. The patch must let a reviewer decide without this session transcript: what changed, which Done-When conditions it satisfies, exact checks and results, where to inspect the result, and any limitation or fallback. If `mcp__robisie__append_detail` fails, do not change the card status; report the failure and stop.
+7. Re-read the card with `readCompleteCard` and require valid D04 intent before the status handoff. Hand off with `mcp__robisie__update_task({ id: cardRef, status: "in_review" })`. If the handoff update fails, do not retry blindly or finalize the work yourself; report the failure with the card's current state and stop.
 8. Stop. Do not merge, accept, or mark the card as delivered or done. A separate reviewer and the operator own that decision.
 
 After launch-context validation, use only `mcp__robisie__reserve_task`, `mcp__robisie__get_task`, `mcp__robisie__append_detail`, and `mcp__robisie__update_task` on the returned `cardRef`. `mcp__robisie__append_detail` shallow-merges the evidence; do not use `mcp__robisie__update_task` details for incremental notes because it replaces the whole details object.

package/roles/quality-officer-client.md

@@ -45,13 +45,27 @@ async function readCompleteCard(cardRef) {
   const card = await mcp__robisie__get_task({ id: cardRef, include: detailsKeys });
   if (card === null) return null;
   const expected = JSON.stringify([...detailsKeys].sort());
-  if (JSON.stringify([...(card.availableDetailsKeys ?? [])].sort()) !== expected
+  if (!Array.isArray(card.availableDetailsKeys) || card.availableDetailsKeys.some(key => typeof key !== "string")
+    || JSON.stringify([...card.availableDetailsKeys].sort()) !== expected
     || JSON.stringify(Object.keys(card.details ?? {}).sort()) !== expected) throw new Error("Details keys changed during read");
+  const details = card.details && typeof card.details === "object" && !Array.isArray(card.details) ? card.details : {};
+  const nonblank = value => typeof value === "string" && value.trim().length > 0;
+  const missing = ["goal", "expectedResult", "boundaries", "doneWhen"].filter(key => {
+    const value = details[key];
+    return key === "goal" || key === "expectedResult"
+      ? !nonblank(value)
+      : !Array.isArray(value) || value.length === 0 || ![...value].every(nonblank);
+  });
+  if (missing.length) throw new Error(`Missing intent data: ${missing.join(", ")}`);
   return card;
 }
 ```
 
-Use the complete second result as the card. The index response is never evidence of complete details. If keys are unreadable or change, report the read failure through the existing failure path; do not continue with partial content.
+Use the complete second result as the card. The index response is never evidence of complete details. Both indexes must be arrays of strings: [] to [] passes the key check; a missing or null second index fails it. If keys are unreadable or change, report the read failure through the existing failure path; do not continue with partial content.
+
+D04 client intent gate: every complete read must validate `goal` and `expectedResult` as nonblank strings, and `boundaries` and `doneWhen` as nonempty arrays of nonblank strings. `trim()` checks only; preserve the original values and foreign keys, including canonical legacy details. Unreadable details (missing, null, primitive, or array) lack all four fields. `done_when` is builder evidence, never an alias for `doneWhen`.
+
+On `Missing intent data`, name every reported field and stop before project work or checks, `mcp__client-launch-context__prepare_review`, identity or receipt creation, evidence append, or status handoff. Do not guess, coerce, fill, or write repairs. This also applies to every fresh reread and context recovery. Report the missing intent to the CEO without constructing a review verdict or receipt.
 
 ## Card and status ownership
 
@@ -87,12 +101,12 @@ Use `Read`, `Glob`, and `Grep` for inspection inside the validated project direc
 Call `mcp__robisie__get_task` for `cardRef`. Confirm all of the following before planning checks:
 
 - status is `in_review`;
-- the card states a goal or expected result;
-- objective boundaries are clear and checkable;
-- objective Done-When conditions are present;
+- D04 passes: both `goal` and `expectedResult` are nonblank strings;
+- `boundaries` is a nonempty array of nonblank strings, with objective boundaries clear and checkable;
+- `doneWhen` is a nonempty array of nonblank strings stating the objective Done-When conditions;
 - builder evidence identifies what changed and where to inspect it, including its `summary`, `verification`, `inspection`, `limitations`, and `review` fields when applicable.
 
-If the Done-When conditions, boundaries, or builder evidence are missing or unusable, skip acceptance analysis and prepare `evidence_missing`. State precisely what is absent and what the builder must provide.
+If D04 fails, stop through the intent gate before `mcp__client-launch-context__prepare_review`. With complete D04 intent, if builder evidence is missing or unusable, skip acceptance analysis and prepare `evidence_missing`. State precisely what is absent and what the builder must provide.
 
 Create a revision-bound identity for the submission before running checks: