sequant 2.0.1 → 2.1.0

package/.claude-plugin/marketplace.json

@@ -8,7 +8,7 @@
     {
       "name": "sequant",
       "description": "Structured workflow system for Claude Code - GitHub issue resolution with spec, exec, test, and QA phases. Includes 17 skills, MCP server with workflow tools, and pre/post-tool hooks.",
-      "version": "1.20.3",
+      "version": "2.1.0",
       "author": {
         "name": "sequant-io",
         "email": "hello@sequant.io"

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "sequant",
   "description": "Structured workflow system for Claude Code - GitHub issue resolution with spec, exec, test, and QA phases",
-  "version": "2.0.1",
+  "version": "2.1.0",
   "author": {
     "name": "sequant-io",
     "email": "hello@sequant.io"

package/dist/bin/cli.js

@@ -66,7 +66,7 @@ configureUI({
 // This helps users who accidentally have a stale local install
 if (!process.argv.includes("--quiet") && isLocalNodeModulesInstall()) {
     const pmCommands = getPackageManagerCommands(detectPackageManagerSync());
-    console.warn(chalk.yellow("⚠️  Running sequant from local node_modules\n" +
+    console.warn(chalk.yellow("!  Running sequant from local node_modules\n" +
         "   For latest version: npx sequant@latest\n" +
         `   To remove local: ${pmCommands.removePkg} sequant\n`));
 }
@@ -152,6 +152,7 @@ program
     .option("--no-pr", "Skip PR creation after successful QA (manual PR workflow)")
     .option("-f, --force", "Force re-execution of completed issues (bypass pre-flight state guard)")
     .option("--concurrency <n>", "Max concurrent issues in parallel mode (default: 3)", parseInt)
+    .option("--isolate-parallel", "Isolate parallel agent groups in separate worktrees (prevents file conflicts)")
     .option("--reflect", "Analyze run results and suggest improvements")
     .option("--agent <name>", 'Agent driver for phase execution (default: "claude-code")')
     .action(runCommand);

package/dist/marketplace/external_plugins/sequant/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "sequant",
   "description": "Structured workflow system for Claude Code - GitHub issue resolution with spec, exec, test, and QA phases",
-  "version": "1.17.0",
+  "version": "2.0.1",
   "author": {
     "name": "sequant-io",
     "email": "hello@sequant.io"

package/dist/marketplace/external_plugins/sequant/.mcp.json

@@ -0,0 +1,6 @@
+{
+  "sequant": {
+    "command": "npx",
+    "args": ["-y", "sequant@latest", "serve"]
+  }
+}

package/dist/marketplace/external_plugins/sequant/README.md

@@ -2,31 +2,81 @@
 
 Structured workflow system for Claude Code — GitHub issue resolution with spec, exec, test, and QA phases.
 
+## Prerequisites
+
+- **Git** with a GitHub remote
+- **GitHub CLI** (`gh`) authenticated (`gh auth status`)
+- **Node.js 20+** (for MCP server via `npx`)
+
 ## Installation
 
+### Plugin (interactive users)
+
 ```
-/plugin install sequant@claude-plugin-directory
+/plugin install sequant@sequant-io/sequant
 ```
 
 Or browse in `/plugin > Discover`.
 
-## Features
+After installing, run `/sequant:setup` to configure your project.
+
+### npm (power users / CI)
 
-- **16 workflow skills** for planning, implementation, testing, and code review
-- **Automated quality gates** with test and QA loops
-- **GitHub integration** for issue tracking and PR creation
-- **Multi-stack support** (Next.js, Python, Go, Rust, and more)
+```bash
+npm install -g sequant
+sequant init
+```
+
+## What You Get
 
-## Skills
+### 17 Workflow Skills
 
 | Skill | Purpose |
 |-------|---------|
+| `/assess` | Triage issue, recommend workflow |
 | `/spec` | Plan implementation and extract acceptance criteria |
 | `/exec` | Implement changes in a feature worktree |
 | `/test` | Browser-based UI testing |
 | `/qa` | Code review and AC validation |
 | `/fullsolve` | End-to-end issue resolution |
-| `/solve` | Generate recommended workflow for issues |
+| `/loop` | Quality loop — iterate until gates pass |
+| `/testgen` | Generate test stubs from spec criteria |
+| `/verify` | CLI/script execution verification |
+| `/docs` | Generate documentation for features |
+| `/reflect` | Strategic workflow reflection |
+| `/improve` | Codebase analysis and improvement |
+| `/clean` | Repository cleanup |
+| `/security-review` | Deep security analysis |
+| `/release` | Automated release workflow |
+| `/merger` | Multi-issue integration and merge |
+| `/setup` | Project initialization for plugin users |
+
+### MCP Tools (automatic with plugin)
+
+| Tool | Purpose |
+|------|---------|
+| `sequant_status` | Check issue progress and workflow state |
+| `sequant_run` | Execute workflow phases |
+| `sequant_logs` | Review past run results |
+
+### MCP Resources
+
+| Resource | Purpose |
+|----------|---------|
+| `sequant://state` | Dashboard view of all tracked issues |
+| `sequant://config` | Current workflow settings |
+
+### Hooks
+
+- **Pre-tool guardrails** — blocks dangerous commands, enforces worktree safety
+- **Post-tool tracking** — timing, quality metrics, smart test runner
+
+## Quick Start
+
+```
+/assess 123          # Analyze issue, get recommended workflow
+/fullsolve 123       # End-to-end: spec → exec → qa → PR
+```
 
 ## Documentation
 

package/dist/marketplace/external_plugins/sequant/hooks/post-tool.sh

@@ -38,24 +38,35 @@ else
     TOOL_OUTPUT=$(echo "$INPUT_JSON" | grep -oE '"tool_response"\s*:\s*\{[^}]+\}' | head -1)
 fi
 
-TIMING_LOG="/tmp/claude-timing.log"
-QUALITY_LOG="/tmp/claude-quality.log"
-TESTS_LOG="/tmp/claude-tests.log"
-PARALLEL_MARKER_PREFIX="/tmp/claude-parallel-"
+_TMPDIR="${TMPDIR:-/tmp}"
+
+# Use CLAUDE_PLUGIN_DATA for persistent logs (survives plugin updates)
+if [[ -n "${CLAUDE_PLUGIN_DATA}" ]]; then
+  _LOG_DIR="${CLAUDE_PLUGIN_DATA}/logs"
+  mkdir -p "$_LOG_DIR"
+else
+  _LOG_DIR="${_TMPDIR}"
+fi
+
+TIMING_LOG="${_LOG_DIR}/claude-timing.log"
+QUALITY_LOG="${_LOG_DIR}/claude-quality.log"
+TESTS_LOG="${_LOG_DIR}/claude-tests.log"
+PARALLEL_MARKER_PREFIX="${_TMPDIR}/claude-parallel-"
 
 # === AGENT ID DETECTION ===
 # For parallel agents, detect group ID from marker files
-# Format: /tmp/claude-parallel-<group-id>.marker
+# Format: ${_TMPDIR}/claude-parallel-<group-id>.marker
 AGENT_ID=""
 IS_PARALLEL_AGENT="false"
-for marker in "${PARALLEL_MARKER_PREFIX}"*.marker; do
-    if [[ -f "$marker" ]]; then
+# Find marker files using find (works in both bash and zsh)
+while IFS= read -r marker; do
+    if [[ -n "$marker" && -f "$marker" ]]; then
         # Extract group ID from marker filename
         AGENT_ID=$(basename "$marker" | sed 's/claude-parallel-//' | sed 's/\.marker//')
         IS_PARALLEL_AGENT="true"
         break
     fi
-done
+done < <(find "${_TMPDIR}" -maxdepth 1 -name "claude-parallel-*.marker" 2>/dev/null)
 
 # === TIMING END ===
 # Include agent ID in log format if available (AC-4)

package/dist/marketplace/external_plugins/sequant/hooks/pre-tool.sh

@@ -33,20 +33,32 @@ else
     fi
 fi
 
-TIMING_LOG="/tmp/claude-timing.log"
-PARALLEL_MARKER_PREFIX="/tmp/claude-parallel-"
+_TMPDIR="${TMPDIR:-/tmp}"
+
+# Use CLAUDE_PLUGIN_DATA for persistent logs (survives plugin updates)
+if [[ -n "${CLAUDE_PLUGIN_DATA}" ]]; then
+  _LOG_DIR="${CLAUDE_PLUGIN_DATA}/logs"
+  mkdir -p "$_LOG_DIR"
+else
+  _LOG_DIR="${_TMPDIR}"
+fi
+
+TIMING_LOG="${_LOG_DIR}/claude-timing.log"
+HOOK_LOG="${_LOG_DIR}/claude-hook.log"
+PARALLEL_MARKER_PREFIX="${_TMPDIR}/claude-parallel-"
 
 # === AGENT ID DETECTION ===
 # For parallel agents, detect group ID from marker files
-# Format: /tmp/claude-parallel-<group-id>.marker
+# Format: ${_TMPDIR}/claude-parallel-<group-id>.marker
 AGENT_ID=""
-for marker in "${PARALLEL_MARKER_PREFIX}"*.marker; do
-    if [[ -f "$marker" ]]; then
+# Find marker files using find (works in both bash and zsh)
+while IFS= read -r marker; do
+    if [[ -n "$marker" && -f "$marker" ]]; then
         # Extract group ID from marker filename
         AGENT_ID=$(basename "$marker" | sed 's/claude-parallel-//' | sed 's/\.marker//')
         break
     fi
-done
+done < <(find "${_TMPDIR}" -maxdepth 1 -name "claude-parallel-*.marker" 2>/dev/null)
 
 # === TIMING START ===
 # Include agent ID in log format if available (AC-4)
@@ -75,38 +87,38 @@ if [[ "$TOOL_NAME" == "Bash" ]]; then
 if ! echo "$TOOL_INPUT" | grep -qE '^gh (issue|pr) '; then
     # Pattern requires command to START with file reader (not match in quoted strings)
     if echo "$TOOL_INPUT" | grep -qE '^(cat|less|head|tail|more) .*\.(env|pem|key)'; then
-        echo "HOOK_BLOCKED: Reading secret file" | tee -a /tmp/claude-hook.log >&2
+        echo "HOOK_BLOCKED: Reading secret file" | tee -a "$HOOK_LOG" >&2
         exit 2
     fi
 
     if echo "$TOOL_INPUT" | grep -qE '^(cat|less) .*~/\.(ssh|aws|gnupg|config/gh)'; then
-        echo "HOOK_BLOCKED: Reading credential directory" | tee -a /tmp/claude-hook.log >&2
+        echo "HOOK_BLOCKED: Reading credential directory" | tee -a "$HOOK_LOG" >&2
         exit 2
     fi
 fi
 
 # Bare environment dump
 if echo "$TOOL_INPUT" | grep -qE '^(env|printenv|export)$'; then
-    echo "HOOK_BLOCKED: Environment dump" | tee -a /tmp/claude-hook.log >&2
+    echo "HOOK_BLOCKED: Environment dump" | tee -a "$HOOK_LOG" >&2
     exit 2
 fi
 
 # Destructive system commands
 if echo "$TOOL_INPUT" | grep -qE 'sudo|rm -rf /|rm -rf ~|rm -rf \$HOME'; then
-    echo "HOOK_BLOCKED: Destructive system command" | tee -a /tmp/claude-hook.log >&2
+    echo "HOOK_BLOCKED: Destructive system command" | tee -a "$HOOK_LOG" >&2
     exit 2
 fi
 
 # Deployment (should never happen in issue automation)
 if echo "$TOOL_INPUT" | grep -qE 'vercel (deploy|--prod)|terraform (apply|destroy)|kubectl (apply|delete)'; then
-    echo "HOOK_BLOCKED: Deployment command" | tee -a /tmp/claude-hook.log >&2
+    echo "HOOK_BLOCKED: Deployment command" | tee -a "$HOOK_LOG" >&2
     exit 2
 fi
 
 # Force push
 # Pattern requires -f to be a standalone flag (not part of branch name like -fix)
 if echo "$TOOL_INPUT" | grep -qE 'git push.*(--force| -f($| ))'; then
-    echo "HOOK_BLOCKED: Force push" | tee -a /tmp/claude-hook.log >&2
+    echo "HOOK_BLOCKED: Force push" | tee -a "$HOOK_LOG" >&2
     exit 2
 fi
 
@@ -149,14 +161,14 @@ if echo "$TOOL_INPUT" | grep -qE 'git reset.*(--hard|origin)'; then
             echo "    git stash                        # save changes"
             echo "    git merge --abort                # cancel merge"
             echo "  Or run directly in terminal (outside Claude Code) to bypass"
-        } | tee -a /tmp/claude-hook.log >&2
+        } | tee -a "$HOOK_LOG" >&2
         exit 2
     fi
 fi
 
 # CI/CD triggers (automation shouldn't trigger more automation)
 if echo "$TOOL_INPUT" | grep -qE 'gh workflow run'; then
-    echo "HOOK_BLOCKED: Workflow trigger" | tee -a /tmp/claude-hook.log >&2
+    echo "HOOK_BLOCKED: Workflow trigger" | tee -a "$HOOK_LOG" >&2
     exit 2
 fi
 
@@ -222,7 +234,7 @@ if [[ "${CLAUDE_HOOKS_SECURITY:-true}" != "false" ]]; then
                 {
                     echo "HOOK_BLOCKED: Hardcoded secret detected in staged changes"
                     echo "  Use 'git commit --no-verify' to bypass if this is a false positive"
-                } | tee -a /tmp/claude-hook.log >&2
+                } | tee -a "$HOOK_LOG" >&2
                 exit 2
             fi
 
@@ -233,7 +245,7 @@ if [[ "${CLAUDE_HOOKS_SECURITY:-true}" != "false" ]]; then
                     echo "HOOK_BLOCKED: Sensitive file in commit (${STAGED_FILES})"
                     echo "  Files like .env, *.pem, *.key should not be committed"
                     echo "  Use 'git commit --no-verify' to bypass if this is intentional"
-                } | tee -a /tmp/claude-hook.log >&2
+                } | tee -a "$HOOK_LOG" >&2
                 exit 2
             fi
         fi
@@ -262,7 +274,7 @@ if [[ "$TOOL_NAME" == "Bash" ]] && echo "$TOOL_INPUT" | grep -qE 'git commit'; t
         fi
 
         if [[ "$CHANGES" -eq 0 ]]; then
-            echo "HOOK_BLOCKED: No changes to commit. Stage files with 'git add' first." | tee -a /tmp/claude-hook.log >&2
+            echo "HOOK_BLOCKED: No changes to commit. Stage files with 'git add' first." | tee -a "$HOOK_LOG" >&2
             exit 2
         fi
     fi
@@ -271,7 +283,7 @@ fi
 # --- Worktree Validation (AC-8) ---
 # Warn (but don't block) when committing outside a feature worktree
 # This catches accidental commits to main repo during feature work
-QUALITY_LOG="/tmp/claude-quality.log"
+QUALITY_LOG="${_LOG_DIR}/claude-quality.log"
 if [[ "$TOOL_NAME" == "Bash" ]] && echo "$TOOL_INPUT" | grep -qE 'git commit'; then
     CWD=$(pwd)
     if ! echo "$CWD" | grep -qE 'worktrees/feature/'; then
@@ -321,7 +333,7 @@ if [[ "$TOOL_NAME" == "Bash" ]] && echo "$TOOL_INPUT" | grep -qE 'git commit'; t
                 fi
                 echo "  Types: feat|fix|docs|style|refactor|test|chore|ci|build|perf"
                 echo "  Got: $MSG"
-            } | tee -a /tmp/claude-hook.log >&2
+            } | tee -a "$HOOK_LOG" >&2
             exit 2
         fi
     fi
@@ -356,7 +368,7 @@ if [[ "$TOOL_NAME" == "Edit" || "$TOOL_NAME" == "Write" ]]; then
         # AC-4 (Issue #31): Check worktree directory exists before path validation
         # Prevents Write tool from creating non-existent worktree directories
         if [[ ! -d "$EXPECTED_WORKTREE" ]]; then
-            echo "HOOK_BLOCKED: Worktree does not exist: $EXPECTED_WORKTREE" | tee -a /tmp/claude-hook.log >&2
+            echo "HOOK_BLOCKED: Worktree does not exist: $EXPECTED_WORKTREE" | tee -a "$HOOK_LOG" >&2
             exit 2
         fi
 
@@ -385,7 +397,7 @@ if [[ "$TOOL_NAME" == "Edit" || "$TOOL_NAME" == "Write" ]]; then
                     if [[ -n "${SEQUANT_ISSUE:-}" ]]; then
                         echo "  Issue: #$SEQUANT_ISSUE"
                     fi
-                } | tee -a /tmp/claude-hook.log >&2
+                } | tee -a "$HOOK_LOG" >&2
                 exit 2
             fi
         fi
@@ -408,7 +420,7 @@ if [[ "${CLAUDE_HOOKS_FILE_LOCKING:-true}" == "true" ]]; then
 
         if [[ -n "$FILE_PATH" ]]; then
             # Create a lock file based on file path hash (handles special chars)
-            LOCK_FILE="/tmp/claude-lock-$(echo "$FILE_PATH" | md5 -q 2>/dev/null || echo "$FILE_PATH" | md5sum | cut -d' ' -f1).lock"
+            LOCK_FILE="${_TMPDIR}/claude-lock-$(echo "$FILE_PATH" | md5 -q 2>/dev/null || echo "$FILE_PATH" | md5sum | cut -d' ' -f1).lock"
 
             # Try to acquire lock with 30 second timeout
             # Use a subshell to hold the lock during the tool execution
@@ -416,7 +428,7 @@ if [[ "${CLAUDE_HOOKS_FILE_LOCKING:-true}" == "true" ]]; then
                 # macOS: use lockf
                 exec 200>"$LOCK_FILE"
                 if ! lockf -t 30 200 2>/dev/null; then
-                    echo "HOOK_BLOCKED: File locked by another agent: $FILE_PATH" | tee -a /tmp/claude-hook.log >&2
+                    echo "HOOK_BLOCKED: File locked by another agent: $FILE_PATH" | tee -a "$HOOK_LOG" >&2
                     exit 2
                 fi
                 # Lock will be released when the file descriptor closes (process exits)
@@ -424,7 +436,7 @@ if [[ "${CLAUDE_HOOKS_FILE_LOCKING:-true}" == "true" ]]; then
                 # Linux: use flock
                 exec 200>"$LOCK_FILE"
                 if ! flock -w 30 200 2>/dev/null; then
-                    echo "HOOK_BLOCKED: File locked by another agent: $FILE_PATH" | tee -a /tmp/claude-hook.log >&2
+                    echo "HOOK_BLOCKED: File locked by another agent: $FILE_PATH" | tee -a "$HOOK_LOG" >&2
                     exit 2
                 fi
             fi
@@ -433,31 +445,6 @@ if [[ "${CLAUDE_HOOKS_FILE_LOCKING:-true}" == "true" ]]; then
     fi
 fi
 
-# === PRE-MERGE WORKTREE CLEANUP ===
-# Auto-remove worktree before `gh pr merge` to prevent --delete-branch failure
-# The worktree locks the branch, causing merge to partially fail
-if [[ "$TOOL_NAME" == "Bash" ]] && echo "$TOOL_INPUT" | grep -qE 'gh pr merge'; then
-    # Extract PR number from command
-    PR_NUM=$(echo "$TOOL_INPUT" | grep -oE 'gh pr merge [0-9]+' | grep -oE '[0-9]+')
-
-    if [[ -n "$PR_NUM" ]]; then
-        # Get the branch name for this PR
-        BRANCH_NAME=$(gh pr view "$PR_NUM" --json headRefName --jq '.headRefName' 2>/dev/null || true)
-
-        if [[ -n "$BRANCH_NAME" ]]; then
-            # Check if a worktree exists for this branch
-            # Note: worktree line is 2 lines before branch line in porcelain output
-            WORKTREE_PATH=$(git worktree list --porcelain 2>/dev/null | grep -B2 "branch refs/heads/$BRANCH_NAME" | grep "^worktree " | sed 's/^worktree //' || true)
-
-            if [[ -n "$WORKTREE_PATH" && -d "$WORKTREE_PATH" ]]; then
-                # Remove the worktree before merge proceeds
-                git worktree remove "$WORKTREE_PATH" --force 2>/dev/null || true
-                echo "PRE-MERGE: Removed worktree $WORKTREE_PATH for branch $BRANCH_NAME" >> /tmp/claude-hook.log
-            fi
-        fi
-    fi
-fi
-
 # === ALLOW EVERYTHING ELSE ===
 # Slash commands need: git, npm, file edits, gh pr/issue, MCP tools
 exit 0