sinapse-ai 1.12.1 → 1.13.0

package/scripts/validate-changelog-tags.js

@@ -0,0 +1,97 @@
+#!/usr/bin/env node
+/**
+ * Validate Changelog Tags
+ *
+ * Guards against release/version drift: every published git version tag MUST
+ * have a matching `## [x.y.z]` heading in CHANGELOG.md. This catches the failure
+ * mode where semantic-release publishes a version but the CHANGELOG entry was
+ * never committed back to the repo (the root cause of the 1.9.0 -> 1.12.2 drift).
+ *
+ * Usage:
+ *   node scripts/validate-changelog-tags.js
+ *   npm run validate:changelog
+ *
+ * Exit codes:
+ *   0 - Every version tag has a CHANGELOG heading (or git unavailable -> SKIP)
+ *   1 - One or more version tags are missing a CHANGELOG heading
+ */
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const { execFileSync } = require('child_process');
+
+const ROOT = path.resolve(__dirname, '..');
+const CHANGELOG_PATH = path.join(ROOT, 'CHANGELOG.md');
+
+// Matches a clean semver core: x.y.z (no pre-release/build suffix).
+const SEMVER_RE = /^\d+\.\d+\.\d+$/;
+
+/**
+ * List git version tags, normalized (leading `v` stripped) and filtered to
+ * clean `x.y.z` semver. Returns null if git is unavailable (offline / no repo).
+ * @returns {string[]|null}
+ */
+function listVersionTags() {
+  let raw;
+  try {
+    raw = execFileSync('git', ['tag', '-l'], { cwd: ROOT, encoding: 'utf8' });
+  } catch {
+    return null; // git not available or not a repo
+  }
+
+  return raw
+    .split('\n')
+    .map((t) => t.trim())
+    .filter(Boolean)
+    .map((t) => t.replace(/^v/, ''))
+    .filter((t) => SEMVER_RE.test(t));
+}
+
+/**
+ * Collect all `## [x.y.z]` headings from CHANGELOG.md.
+ * @returns {Set<string>}
+ */
+function collectChangelogVersions() {
+  const content = fs.readFileSync(CHANGELOG_PATH, 'utf8');
+  const headings = new Set();
+  const re = /^##\s*\[(\d+\.\d+\.\d+)\]/gm;
+  let m;
+  while ((m = re.exec(content)) !== null) {
+    headings.add(m[1]);
+  }
+  return headings;
+}
+
+function main() {
+  const tags = listVersionTags();
+
+  if (tags === null) {
+    console.log('SKIP — git is unavailable; cannot cross-check tags vs CHANGELOG.');
+    process.exit(0);
+  }
+
+  if (!fs.existsSync(CHANGELOG_PATH)) {
+    console.error('FAIL — CHANGELOG.md not found.');
+    process.exit(1);
+  }
+
+  const documented = collectChangelogVersions();
+  const missing = tags.filter((t) => !documented.has(t)).sort();
+
+  if (missing.length > 0) {
+    console.error('FAIL — version tags without a CHANGELOG heading:');
+    for (const v of missing) {
+      console.error(`   - ${v}  (expected "## [${v}]" in CHANGELOG.md)`);
+    }
+    console.error('');
+    console.error('Add the missing entries to CHANGELOG.md before releasing.');
+    process.exit(1);
+  }
+
+  console.log(`OK — all ${tags.length} version tag(s) have a CHANGELOG heading.`);
+  process.exit(0);
+}
+
+main();

package/scripts/validate-no-personal-leaks.js

@@ -32,6 +32,20 @@
  *   - "Caio's Second Brain", "Caio's vault" — vault path references
  *   - "C:\\Users\\Caio Imori" — absolute paths
  *   - "OneDrive\\...\\Second-Brain" — vault path references
+ *
+ * SECOND CHECK — Conceptual leak guard (Wave 2):
+ * The literal "Caio" check above misses CONCEPTUAL internal leaks: the
+ * maintainer's private grounding mechanisms (vault-grounding, second-brain,
+ * brandbook) and the maintainer's BUSINESS CLIENT names (Módulo, Mindloop,
+ * Sayuri, Vascularte, itsoffbrand, sinapse.club). These are internal/business
+ * context and must NOT appear on the surfaces an external user actually sees:
+ * the installer, the CLI, and the public docs the npm package ships.
+ *
+ * This second check is SCOPED ONLY to user-facing surfaces (CONCEPT_SCOPES):
+ *   packages/installer/**, bin/**, README.md, docs/getting-started.md,
+ *   docs/pt/**, docs/en/**.
+ * It deliberately does NOT scan .sinapse-ai/development/**, squad agent files,
+ * or internal docs — those legitimately discuss framework concepts.
  */
 
 'use strict';
@@ -112,6 +126,107 @@ function isAllowed(filePath) {
   return ALLOWLIST_PREFIXES.some((prefix) => normalized.startsWith(prefix));
 }
 
+// ---------------------------------------------------------------------------
+// SECOND CHECK — Conceptual leak guard (user-facing surfaces only).
+// ---------------------------------------------------------------------------
+
+// The ONLY surfaces an external user sees: the installer, the CLI, and the
+// public docs that ship in the npm package. A concept/business leak here is a
+// real leak. Everything else (framework internals, squad agents, internal
+// docs) is intentionally OUT of scope.
+const CONCEPT_FILE_SCOPES = new Set(['README.md', 'docs/getting-started.md']);
+const CONCEPT_PREFIX_SCOPES = ['packages/installer/', 'bin/', 'docs/pt/', 'docs/en/'];
+
+function isConceptScoped(filePath) {
+  const normalized = filePath.replace(/\\/g, '/');
+  if (CONCEPT_FILE_SCOPES.has(normalized)) return true;
+  return CONCEPT_PREFIX_SCOPES.some((prefix) => normalized.startsWith(prefix));
+}
+
+// Conceptual / business denylist. Each entry is paired with a friendly
+// description. Patterns are written to catch the INTERNAL token while avoiding
+// generic-word false positives:
+//   - "Módulo" alone is the generic Portuguese word for "module" (capitalized
+//     and accented in prose/headings: "Módulo Core", "Estrutura de Módulo"),
+//     so it CANNOT be used to identify the client. The maintainer's client
+//     "Colégio Módulo" is matched ONLY by its full, unambiguous name —
+//     "Colégio Módulo" / "Colegio Modulo".
+//   - The other client names (Mindloop, Sayuri, Vascularte, itsoffbrand) and
+//     the grounding concepts (vault-grounding, second-brain, brandbook) are
+//     distinctive enough to match as whole words.
+const CONCEPT_PATTERNS = [
+  {
+    pattern: /\bvault-grounding\b/i,
+    description: 'Internal grounding mechanism (vault-grounding) leaked to user-facing surface',
+    suggestion: 'Describe generically (e.g. "a session-start grounding hook") — do not name the private mechanism',
+  },
+  {
+    pattern: /\bsecond-brain\b/i,
+    description: "Maintainer's private knowledge base (Second-Brain) leaked to user-facing surface",
+    suggestion: 'Generalize to "external memory source (e.g. an Obsidian vault)"',
+  },
+  {
+    pattern: /\bbrandbook\b/i,
+    description: "Maintainer's internal design-system concept (brandbook) leaked to user-facing surface",
+    suggestion: 'Use a generic term like "design system" or "brand guidelines"',
+  },
+  {
+    pattern: /Col[ée]gio\s+M[óÓoO]dulo/,
+    description: "Maintainer's business client name (Colégio Módulo) leaked to user-facing surface",
+    suggestion: 'Remove the client name; use a neutral placeholder (e.g. "your client")',
+  },
+  {
+    pattern: /\bMindloop\b/i,
+    description: "Maintainer's business client name (Mindloop) leaked to user-facing surface",
+    suggestion: 'Remove the client name; use a neutral placeholder',
+  },
+  {
+    pattern: /\bSayuri\b/i,
+    description: "Maintainer's business client name (Sayuri) leaked to user-facing surface",
+    suggestion: 'Remove the client name; use a neutral placeholder',
+  },
+  {
+    pattern: /\bVascularte\b/i,
+    description: "Maintainer's business client name (Vascularte) leaked to user-facing surface",
+    suggestion: 'Remove the client name; use a neutral placeholder',
+  },
+  {
+    pattern: /\bitsoffbrand\b/i,
+    description: "Maintainer's business client name (itsoffbrand) leaked to user-facing surface",
+    suggestion: 'Remove the client name; use a neutral placeholder',
+  },
+  {
+    pattern: /\bsinapse\.club\b/i,
+    description: "Maintainer's internal/business property (sinapse.club) leaked to user-facing surface",
+    suggestion: 'Remove the internal domain reference',
+  },
+];
+
+function scanFileForConcepts(filePath) {
+  const fullPath = path.join(ROOT, filePath);
+  if (!fs.existsSync(fullPath)) return [];
+  const content = fs.readFileSync(fullPath, 'utf8');
+  const lines = content.split('\n');
+  const violations = [];
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i];
+    for (const rule of CONCEPT_PATTERNS) {
+      const match = line.match(rule.pattern);
+      if (match) {
+        violations.push({
+          file: filePath,
+          line: i + 1,
+          match: match[0],
+          description: rule.description,
+          suggestion: rule.suggestion,
+          context: line.trim().slice(0, 120),
+        });
+      }
+    }
+  }
+  return violations;
+}
+
 function isTextFile(filePath) {
   const binaryExts = new Set([
     '.png', '.jpg', '.jpeg', '.gif', '.svg', '.webp', '.ico',
@@ -157,43 +272,77 @@ function scanFile(filePath) {
 function run() {
   const files = getTrackedFiles();
   const allViolations = [];
+  const conceptViolations = [];
 
   for (const file of files) {
-    if (isAllowed(file)) continue;
     if (!isTextFile(file)) continue;
-    const violations = scanFile(file);
-    allViolations.push(...violations);
+
+    // CHECK 1 — operational personal references ("Caio" literals, paths).
+    // Scanned across the whole tree except the autorship/history allow-list.
+    if (!isAllowed(file)) {
+      allViolations.push(...scanFile(file));
+    }
+
+    // CHECK 2 — conceptual / business leaks, scoped ONLY to user-facing
+    // surfaces (installer, CLI, public docs the package ships).
+    if (isConceptScoped(file)) {
+      conceptViolations.push(...scanFileForConcepts(file));
+    }
   }
 
-  if (allViolations.length === 0) {
-    console.log('✅ no-personal-leaks: no operational personal references found.');
-    console.log(`   Scanned ${files.length} tracked files.`);
+  if (allViolations.length === 0 && conceptViolations.length === 0) {
+    console.log('✅ no-personal-leaks: no operational personal or conceptual references found.');
+    console.log(`   Scanned ${files.length} tracked files (concept guard scoped to user-facing surfaces).`);
     return 0;
   }
 
-  console.error('');
-  console.error('❌ no-personal-leaks: found operational personal references in framework code.');
-  console.error('');
-  console.error(`   ${allViolations.length} violation(s) across ${new Set(allViolations.map((v) => v.file)).size} file(s).`);
-  console.error('');
-  for (const v of allViolations) {
-    console.error(`  ${v.file}:${v.line}`);
-    console.error(`    Match:       "${v.match}"`);
-    console.error(`    Issue:       ${v.description}`);
-    console.error(`    Suggestion:  ${v.suggestion}`);
-    console.error(`    Context:     ${v.context}`);
+  if (allViolations.length > 0) {
+    console.error('');
+    console.error('❌ no-personal-leaks: found operational personal references in framework code.');
+    console.error('');
+    console.error(`   ${allViolations.length} violation(s) across ${new Set(allViolations.map((v) => v.file)).size} file(s).`);
+    console.error('');
+    for (const v of allViolations) {
+      console.error(`  ${v.file}:${v.line}`);
+      console.error(`    Match:       "${v.match}"`);
+      console.error(`    Issue:       ${v.description}`);
+      console.error(`    Suggestion:  ${v.suggestion}`);
+      console.error(`    Context:     ${v.context}`);
+      console.error('');
+    }
+    console.error('Why this matters:');
+    console.error('  SINAPSE-AI is a multi-tenant framework distributed via npm.');
+    console.error('  Personal/operational context belongs in ~/.claude/ (private),');
+    console.error('  not in the public framework code.');
+    console.error('');
+    console.error('Exempt locations (allowed):');
+    console.error('  README/CONTRIBUTING/LICENSE — author credit');
+    console.error('  CHANGELOG.md — historical record');
+    console.error('  docs/audits/, docs/epics/, docs/research/ — historical/archive');
+    console.error('');
+  }
+
+  if (conceptViolations.length > 0) {
+    console.error('');
+    console.error('❌ no-personal-leaks (concept guard): found internal/business references on user-facing surfaces.');
+    console.error('');
+    console.error(`   ${conceptViolations.length} violation(s) across ${new Set(conceptViolations.map((v) => v.file)).size} file(s).`);
+    console.error('');
+    for (const v of conceptViolations) {
+      console.error(`  ${v.file}:${v.line}`);
+      console.error(`    Match:       "${v.match}"`);
+      console.error(`    Issue:       ${v.description}`);
+      console.error(`    Suggestion:  ${v.suggestion}`);
+      console.error(`    Context:     ${v.context}`);
+      console.error('');
+    }
+    console.error('Why this matters:');
+    console.error('  These surfaces (installer, CLI, public docs) are what an external');
+    console.error('  user actually sees. Internal grounding concepts and the maintainer\'s');
+    console.error('  business client names must never leak into them.');
     console.error('');
   }
-  console.error('Why this matters:');
-  console.error('  SINAPSE-AI is a multi-tenant framework distributed via npm.');
-  console.error('  Personal/operational context belongs in ~/.claude/ (private),');
-  console.error('  not in the public framework code.');
-  console.error('');
-  console.error('Exempt locations (allowed):');
-  console.error('  README/CONTRIBUTING/LICENSE — author credit');
-  console.error('  CHANGELOG.md — historical record');
-  console.error('  docs/audits/, docs/epics/, docs/research/ — historical/archive');
-  console.error('');
+
   return 1;
 }
 
@@ -201,4 +350,11 @@ if (require.main === module) {
   process.exit(run());
 }
 
-module.exports = { run, BLOCKED_PATTERNS, isAllowed };
+module.exports = {
+  run,
+  BLOCKED_PATTERNS,
+  isAllowed,
+  CONCEPT_PATTERNS,
+  isConceptScoped,
+  scanFileForConcepts,
+};

package/scripts/validate-schemas.js

@@ -23,10 +23,15 @@
  *      and report found/missing. A known kind with no schema -> violation.
  *
  *   3. ARTIFACT VALIDATION (no-op clean when absent): kind -> glob by CONVENTION
- *      (story -> docs/stories/ ** / *.story.md, epic -> docs/epics/ ** / *.md,
- *      prd -> docs/prd/ ** / *.md). docs/stories and docs/epics are gitignored,
- *      so in public CI there are 0 artifacts -> reported as skipped, NOT a
- *      failure. When artifacts ARE present, extract data via
+ *      (story -> docs/stories/ ** / *.story.md, epic -> docs/epics/ ** / *.epic.md,
+ *      prd -> docs/prd/ ** / *.md). By DEFAULT the artifact layer is GIT-SCOPED
+ *      (git ls-files): only TRACKED artifacts are validated, so the result is
+ *      hermetic — identical locally and in CI regardless of untracked local
+ *      drafts. docs/stories and docs/epics are gitignored, so in a clean public
+ *      checkout there are 0 tracked artifacts -> reported as skipped, NOT a
+ *      failure. The --artifacts <dir> flag overrides this with a filesystem walk
+ *      of <dir> (used by the jest wrapper / tests). When artifacts ARE present,
+ *      extract data via
  *      TemplateValidator.extractDataFromMarkdown (or frontmatter parse) and
  *      validate via TemplateValidator.validate(data, kind); each error is
  *      reported with the instancePath that formatErrors() already produces.
@@ -47,9 +52,10 @@
  *         with no fallback, etc).
  *
  * FLAGS:
- *   --artifacts <dir>   Use <dir> as the artifact root instead of the repo root
- *                       (used by the jest wrapper / for testing). Globs are
- *                       resolved relative to this root.
+ *   --artifacts <dir>   Use <dir> as the artifact root (filesystem walk) instead
+ *                       of the DEFAULT git-scoped scan of the repo. Used by the
+ *                       jest wrapper / for testing. Globs are resolved relative
+ *                       to this root.
  *   --quiet             Suppress the per-schema OK lines; still prints the
  *                       summary and every violation.
  *
@@ -97,7 +103,12 @@ const ARTIFACT_CONVENTIONS = [
 // ---------------------------------------------------------------------------
 
 function parseArgs(argv) {
-  const opts = { artifactsRoot: REPO_ROOT, quiet: false };
+  // artifactsExplicit: whether the caller passed --artifacts. When NOT passed,
+  // the artifact layer is GIT-SCOPED (tracked files only) so it is hermetic —
+  // identical locally and in CI, regardless of untracked local drafts. When
+  // passed (jest wrapper / tests), it falls back to filesystem walking of the
+  // given dir so tests can stage fixtures outside git.
+  const opts = { artifactsRoot: REPO_ROOT, quiet: false, artifactsExplicit: false };
   for (let i = 0; i < argv.length; i += 1) {
     const a = argv[i];
     if (a === '--quiet') {
@@ -109,9 +120,11 @@ function parseArgs(argv) {
         process.exit(2);
       }
       opts.artifactsRoot = path.resolve(next);
+      opts.artifactsExplicit = true;
       i += 1;
     } else if (a.startsWith('--artifacts=')) {
       opts.artifactsRoot = path.resolve(a.slice('--artifacts='.length));
+      opts.artifactsExplicit = true;
     }
   }
   return opts;
@@ -338,6 +351,35 @@ async function kindCoverage() {
 // LAYER 3 — artifact validation by convention (no-op clean when absent).
 // ---------------------------------------------------------------------------
 
+/**
+ * Collect GIT-TRACKED artifacts under `relDir` (relative to REPO_ROOT) ending
+ * with `suffix`. Hermetic: docs/stories|epics|prd are gitignored, so untracked
+ * local drafts are invisible and the result is identical locally and in CI.
+ * Returns absolute paths. Falls back to [] (not the FS) when git is unavailable
+ * — keeping the default scope strictly git-defined.
+ */
+function collectTrackedArtifacts(relDir, suffix) {
+  const posixDir = relDir.split(path.sep).join('/');
+  try {
+    // Use the DIRECTORY pathspec (git recurses) + filter by suffix in JS. A
+    // glob like '<dir>/**' would match only NESTED files and MISS artifacts
+    // directly in <dir> (per git pathspec semantics).
+    const out = execFileSync('git', ['ls-files', '-z', posixDir], {
+      cwd: REPO_ROOT,
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+    });
+    return out
+      .split('\0')
+      .map((l) => l.trim())
+      .filter(Boolean)
+      .filter((l) => l.endsWith(suffix))
+      .map((l) => path.join(REPO_ROOT, l));
+  } catch {
+    return [];
+  }
+}
+
 /** Recursively collect files under `dir` ending with `suffix`. */
 function collectArtifacts(dir, suffix, acc) {
   let entries;
@@ -429,8 +471,11 @@ async function validateArtifacts(opts) {
   const summary = { kinds: {}, total: 0, valid: 0, invalid: 0 };
 
   for (const conv of ARTIFACT_CONVENTIONS) {
-    const root = path.join(opts.artifactsRoot, conv.dir);
-    const files = collectArtifacts(root, conv.suffix, []);
+    // Default (no --artifacts): GIT-SCOPED, hermetic. With --artifacts: walk the
+    // given dir on disk (tests stage fixtures outside git).
+    const files = opts.artifactsExplicit
+      ? collectArtifacts(path.join(opts.artifactsRoot, conv.dir), conv.suffix, [])
+      : collectTrackedArtifacts(conv.dir, conv.suffix);
     summary.kinds[conv.kind] = files.length;
     summary.total += files.length;
 

package/scripts/validate-story-meta.js

@@ -2,12 +2,14 @@
 /**
  * validate-story-meta — Story 10.19
  *
- * LOCAL-ONLY validator for `docs/stories/*.story.md` files.
+ * Validator for `docs/stories/*.story.md` files.
  *
- * Why local-only:
- *   docs/stories/ is gitignored, so a CI checkout contains zero story
- *   files. Running this in CI would always be a no-op. Use it instead
- *   via `npm run validate:story-meta` and via lint-staged on commit.
+ * Scope (hermetic):
+ *   The DEFAULT scope is git-TRACKED story files only (`git ls-files`).
+ *   docs/stories/ is gitignored, so untracked local drafts are NOT scanned
+ *   by default — the result is deterministic and identical locally and in CI
+ *   (a clean checkout with no tracked stories is simply a no-op). Use
+ *   `--staged` to scope to staged stories (lint-staged on commit).
  *
  * What it checks:
  *   1. Files lack YAML frontmatter            -> WARN  (grandfathered)
@@ -63,12 +65,23 @@ function findStoryFiles(projectRoot, opts = {}) {
       .filter((line) => line.startsWith('docs/stories/') && line.endsWith('.story.md'))
       .map((rel) => path.join(projectRoot, rel));
   }
-  const dir = path.join(projectRoot, 'docs', 'stories');
-  if (!fs.existsSync(dir)) return [];
-  return fs
-    .readdirSync(dir)
-    .filter((name) => name.endsWith('.story.md'))
-    .map((name) => path.join(dir, name));
+  // Default scope: git-TRACKED story files only (hermetic — same result
+  // locally and in CI). docs/stories/ is gitignored, so untracked local drafts
+  // must NOT be scanned by default; only files actually committed are checked.
+  // This mirrors validate-no-personal-leaks.js (git ls-files as source of truth).
+  // NB: use the DIRECTORY pathspec ('docs/stories') and filter by suffix in JS.
+  // A glob like 'docs/stories/**/*.story.md' would (per git pathspec semantics)
+  // match only NESTED files and MISS stories directly in docs/stories/.
+  const result = spawnSync('git', ['ls-files', 'docs/stories'], {
+    cwd: projectRoot,
+    encoding: 'utf8',
+  });
+  if (result.status !== 0 || !result.stdout) return [];
+  return result.stdout
+    .split('\n')
+    .map((line) => line.trim())
+    .filter((line) => line.endsWith('.story.md'))
+    .map((rel) => path.join(projectRoot, rel));
 }
 
 function parseFrontmatter(content) {
@@ -224,7 +237,7 @@ function main() {
   if (files.length === 0) {
     if (!args.quiet) {
       console.log('=== validate-story-meta ===');
-      console.log('No story files found — skipping (this is expected in CI checkouts).');
+      console.log('No git-tracked story files found — skipping (untracked local drafts are not scanned by default).');
     }
     return 0;
   }

package/squads/claude-code-mastery/agents/claude-mastery-chief.md

@@ -195,7 +195,7 @@ sinapse_awareness:
     - 14 workflow definitions in .sinapse-ai/development/workflows/
     - L1-L4 boundary protection model
     - Entity registry with 740+ entities
-    - Hook system: runtime grounding hooks in .sinapse-ai/hooks/ (wired via .claude/settings.json) + git hooks in .sinapse-ai/git-hooks/ (core.hooksPath)
+    - Hook system: runtime hooks in .sinapse-ai/hooks/ (wired via .claude/settings.json) + git hooks in .sinapse-ai/git-hooks/ (core.hooksPath)
     - Template engine with Handlebars (.hbs)
     - Quality gates (Layer 1-4: pre-commit, CI, pre-push, deployment)
     - CLI: sinapse doctor, sinapse graph, sinapse workers, sinapse manifest, etc.

package/squads/claude-code-mastery/agents/hooks-architect.md

@@ -135,8 +135,8 @@ persona:
     - "PRINCIPLE: Team validation pattern. Pair a Builder agent (full tools) with a Validator agent (read-only). PostToolUse hooks run validators after every write operation."
 
     # --- SINAPSE INTEGRATION ---
-    - "PRINCIPLE: SINAPSE awareness. This project ships its own hooks in two places: .sinapse-ai/hooks/ holds runtime hooks (Node .cjs/.js: grounding injectors like sinapse-vault-grounding.cjs, sinapse-ds-grounding.cjs, sinapse-brand-grounding.cjs, plus the unified/ runner) and .sinapse-ai/git-hooks/ holds the git hooks (pre-commit, pre-push, post-commit + lib/). Always check existing hooks before creating new ones."
-    - "PRINCIPLE: SINAPSE runtime hooks are wired in .claude/settings.json, where thin wrappers under .claude/hooks/ (e.g. synapse-wrapper.cjs, precompact-wrapper.cjs) delegate to the grounding/runner scripts in .sinapse-ai/hooks/. Git hooks are wired via core.hooksPath -> .sinapse-ai/git-hooks. Respect these wiring points when extending instead of adding parallel registrations."
+    - "PRINCIPLE: SINAPSE awareness. This project ships its own hooks in two places: .sinapse-ai/hooks/ holds runtime hooks (Node .cjs/.js: the unified/ runner plus IDS hooks) and .sinapse-ai/git-hooks/ holds the git hooks (pre-commit, pre-push, post-commit + lib/). Always check existing hooks before creating new ones."
+    - "PRINCIPLE: SINAPSE runtime hooks are wired in .claude/settings.json, where thin wrappers under .claude/hooks/ (e.g. synapse-wrapper.cjs, precompact-wrapper.cjs) delegate to the runner scripts in .sinapse-ai/hooks/. Git hooks are wired via core.hooksPath -> .sinapse-ai/git-hooks. Respect these wiring points when extending instead of adding parallel registrations."
 
     # --- SCOPE & SAFETY ---
     - "PRINCIPLE: Six scopes, choose wisely. user (~/.claude/settings.json) = all projects. project (.claude/settings.json) = shared team hooks. local (.claude/settings.local.json) = personal project hooks. managed = org-wide policy. plugin = bundled extensions. skill/agent = component-scoped."
@@ -211,10 +211,7 @@ dependencies:
   reference_files:
     - .claude/settings.json # Project hook definitions (wires runtime hooks)
     - .claude/settings.local.json # Local hook definitions
-    - .sinapse-ai/hooks/ # SINAPSE runtime hooks (grounding injectors + unified/ runner)
-    - .sinapse-ai/hooks/sinapse-vault-grounding.cjs # Vault context grounding injector
-    - .sinapse-ai/hooks/sinapse-ds-grounding.cjs # Design-system grounding injector
-    - .sinapse-ai/hooks/sinapse-brand-grounding.cjs # Brand grounding injector
+    - .sinapse-ai/hooks/ # SINAPSE runtime hooks (unified/ runner + IDS hooks)
     - .sinapse-ai/hooks/unified/ # Unified hook runner (index.js, hook-registry.js, runners/)
     - .sinapse-ai/git-hooks/ # SINAPSE git hooks (core.hooksPath target)
     - .sinapse-ai/git-hooks/pre-commit # Secret-scan / SQL / boundary guard
@@ -559,8 +556,8 @@ objection_algorithms:
 
   "How do I integrate with the existing SINAPSE hooks?":
     response: |
-      SINAPSE ships hooks in two layers. Runtime hooks live in .sinapse-ai/hooks/ (Node .cjs
-      grounding injectors + the unified/ runner) and are wired in .claude/settings.json via thin
+      SINAPSE ships hooks in two layers. Runtime hooks live in .sinapse-ai/hooks/ (the unified/
+      runner + IDS hooks) and are wired in .claude/settings.json via thin
       wrappers under .claude/hooks/. Git hooks live in .sinapse-ai/git-hooks/ (pre-commit,
       pre-push, post-commit) and are wired via core.hooksPath. To extend: add a new wrapper
       entry in .claude/settings.json that delegates to a script in .sinapse-ai/hooks/, or add a
@@ -829,20 +826,15 @@ sinapse_core_hooks:
     language: "Node (.cjs / .js)"
     wiring: ".claude/settings.json -> thin wrappers in .claude/hooks/ delegate to scripts here"
     architecture: |
-      SINAPSE runtime hooks inject grounding context into Claude's prompt at lifecycle events:
+      SINAPSE runtime hooks run coordinated logic at lifecycle events:
       1. Claude Code fires the lifecycle event and runs the wrapper named in .claude/settings.json
-      2. The wrapper (.claude/hooks/*.cjs) delegates to the grounding/runner script in .sinapse-ai/hooks/
-      3. The grounding script resolves project domain (vault / design-system / brand) and emits context
-      4. The unified/ runner coordinates the shared runners (e.g. precompact-runner.js)
+      2. The wrapper (.claude/hooks/*.cjs) delegates to the runner script in .sinapse-ai/hooks/
+      3. The unified/ runner coordinates the shared runners (e.g. precompact-runner.js)
     existing_hooks:
-      - file: sinapse-vault-grounding.cjs
-        behavior: "Injects relevant Second-Brain vault context based on project domain"
-      - file: sinapse-ds-grounding.cjs
-        behavior: "Resolves and injects the design-system law for any UI output"
-      - file: sinapse-brand-grounding.cjs
-        behavior: "Injects brand positioning / MVV grounding"
       - file: unified/
         behavior: "Unified runner: index.js, hook-registry.js, hook-interface.js, runners/ (e.g. precompact-runner.js)"
+      - file: ids-pre-push.js / ids-post-commit.js
+        behavior: "IDS (Incremental Development System) registry hooks"
 
   git_hooks:
     location: ".sinapse-ai/git-hooks/"
@@ -856,7 +848,7 @@ sinapse_core_hooks:
         behavior: "Post-commit hook"
 
   integration_rules:
-    - "Do NOT duplicate SINAPSE grounding or git hooks. They handle context injection and commit-time guards."
+    - "Do NOT duplicate SINAPSE runtime or git hooks. They handle the unified runner and commit-time guards."
     - "New runtime hooks should COMPLEMENT existing ones: add a wrapper entry in .claude/settings.json delegating to a script in .sinapse-ai/hooks/."
     - "For additional commit-time guards, extend the managed .sinapse-ai/git-hooks/ — do not register a parallel git hook system that diverges from core.hooksPath."
     - "For additional PreToolUse blocking, create a separate hook script -- Claude runs all matching hooks in parallel."
@@ -995,7 +987,7 @@ Add to settings file. Test with piped JSON. Verify with `*debug-hook`.
 ### SINAPSE Integration
 
 The project ships its own hooks in two layers:
-- **Runtime hooks** in `.sinapse-ai/hooks/` (Node grounding injectors + the `unified/` runner), wired in `.claude/settings.json` through thin wrappers under `.claude/hooks/`. They inject grounding context (vault, design-system, brand) at lifecycle events.
+- **Runtime hooks** in `.sinapse-ai/hooks/` (the `unified/` runner + IDS hooks), wired in `.claude/settings.json` through thin wrappers under `.claude/hooks/`. They run coordinated logic at lifecycle events.
 - **Git hooks** in `.sinapse-ai/git-hooks/` (`pre-commit`, `pre-push`, `post-commit`), wired via `core.hooksPath`. They enforce commit-time guards (secret-scan, SQL governance, framework boundary).
 
 Do NOT duplicate these hooks. Create complementary hooks for blocking, formatting, or custom logic — add a wrapper in `.claude/settings.json` (runtime) or a guard in `.sinapse-ai/git-hooks/` (commit-time). Multiple hooks on the same event run in parallel.

package/squads/claude-code-mastery/tasks/audit-setup.md

@@ -113,7 +113,7 @@ Score each item:
    - PreToolUse for Bash command validation
    - PreCompact for context preservation
    - Stop for session cleanup
-4. If SINAPSE project: check the SINAPSE hook system — runtime grounding hooks in `.sinapse-ai/hooks/` (wired via `.claude/settings.json`) and git hooks in `.sinapse-ai/git-hooks/` (`core.hooksPath`)
+4. If SINAPSE project: check the SINAPSE hook system — runtime hooks in `.sinapse-ai/hooks/` (wired via `.claude/settings.json`) and git hooks in `.sinapse-ai/git-hooks/` (`core.hooksPath`)
 
 ### Phase 5: List MCP Servers
 

package/squads/squad-product/agents/product-orqx.md

@@ -1,4 +1,3 @@
----
 # Agent: Vector 🎯
 
 ## Identity

package/squads/squad-product/agents/ps-client-product-manager.md

@@ -1,4 +1,3 @@
----
 # Agent: Proxy 🤝
 
 ## Identity

package/squads/squad-product/agents/ps-delivery-manager.md

@@ -1,4 +1,3 @@
----
 # Agent: Tempo ⏱️
 
 ## Identity

package/squads/squad-product/agents/ps-discovery-lead.md

@@ -1,4 +1,3 @@
----
 # Agent: Quorum 🔬
 
 ## Identity

package/squads/squad-product/agents/ps-product-analyst.md

@@ -1,4 +1,3 @@
----
 # Agent: Delta 📈
 
 ## Identity

package/squads/squad-product/agents/ps-product-ops-specialist.md

@@ -1,4 +1,3 @@
----
 # Agent: Mosaic 🧩
 
 ## Identity

package/squads/squad-product/agents/ps-product-strategist.md

@@ -1,4 +1,3 @@
----
 # Agent: Charter 📐
 
 ## Identity