specweave 0.23.18 → 0.24.1

package/dist/src/utils/env-manager.js

@@ -0,0 +1,188 @@
+/**
+ * .env File Management Utilities
+ *
+ * Atomic updates, backup management, and project list merging
+ *
+ * NEW (v0.24.0): Supports import command .env updates
+ *
+ * @module utils/env-manager
+ */
+import { promises as fs } from 'fs';
+import { existsSync } from 'fs';
+import path from 'path';
+import { consoleLogger } from './logger.js';
+/**
+ * Parse .env file content into key-value pairs
+ */
+export function parseEnvContent(content) {
+    const envMap = new Map();
+    const lines = content.split('\n');
+    for (const line of lines) {
+        const trimmed = line.trim();
+        // Skip comments and empty lines
+        if (trimmed.startsWith('#') || trimmed === '') {
+            continue;
+        }
+        // Parse KEY=VALUE
+        const match = trimmed.match(/^([^=]+)=(.*)$/);
+        if (match) {
+            const key = match[1].trim();
+            const value = match[2].trim();
+            envMap.set(key, value);
+        }
+    }
+    return envMap;
+}
+/**
+ * Serialize env map to .env file format
+ */
+export function serializeEnvContent(envMap) {
+    const lines = [];
+    for (const [key, value] of envMap.entries()) {
+        lines.push(`${key}=${value}`);
+    }
+    return lines.join('\n') + '\n';
+}
+/**
+ * Update single key in .env file (atomic write with backup)
+ *
+ * TC-075: Atomic .env Update
+ *
+ * @param options - Update options
+ */
+export async function updateEnvFile(options) {
+    const { key, value, projectRoot, logger = consoleLogger, createBackup = true } = options;
+    const envPath = path.join(projectRoot, '.env');
+    const tempPath = path.join(projectRoot, '.env.tmp');
+    const backupPath = path.join(projectRoot, '.env.backup');
+    try {
+        // Step 1: Read existing .env content
+        let existingContent = '';
+        if (existsSync(envPath)) {
+            existingContent = await fs.readFile(envPath, 'utf-8');
+        }
+        // Step 2: Parse and update
+        const envMap = parseEnvContent(existingContent);
+        envMap.set(key, value);
+        // Step 3: Serialize
+        const newContent = serializeEnvContent(envMap);
+        // Step 4: Write to temp file (atomic write step 1)
+        await fs.writeFile(tempPath, newContent, 'utf-8');
+        // Step 5: Backup existing .env (if exists)
+        if (createBackup && existsSync(envPath)) {
+            await fs.copyFile(envPath, backupPath);
+            logger.log(`Created backup: .env.backup`);
+        }
+        // Step 6: Atomic rename (atomic write step 2)
+        await fs.rename(tempPath, envPath);
+        logger.log(`Updated .env: ${key}=${value}`);
+    }
+    catch (error) {
+        // Cleanup temp file on error
+        if (existsSync(tempPath)) {
+            await fs.unlink(tempPath);
+        }
+        throw new Error(`Failed to update .env file: ${error.message}`);
+    }
+}
+/**
+ * Merge new values with existing comma-separated list (no duplicates)
+ *
+ * TC-076: Merge Project Lists (No Duplicates)
+ *
+ * Example:
+ * - Existing: JIRA_PROJECTS=BACKEND,FRONTEND
+ * - New: [MOBILE, INFRA, BACKEND]
+ * - Result: JIRA_PROJECTS=BACKEND,FRONTEND,MOBILE,INFRA
+ *
+ * @param options - Merge options
+ */
+export async function mergeEnvList(options) {
+    const { key, newValues, projectRoot, logger = consoleLogger, createBackup = true } = options;
+    const envPath = path.join(projectRoot, '.env');
+    // Step 1: Read existing value
+    let existingValues = [];
+    if (existsSync(envPath)) {
+        const content = await fs.readFile(envPath, 'utf-8');
+        const envMap = parseEnvContent(content);
+        const existingValue = envMap.get(key);
+        if (existingValue) {
+            existingValues = existingValue.split(',').map(v => v.trim()).filter(v => v.length > 0);
+        }
+    }
+    // Step 2: Merge (no duplicates)
+    const merged = mergeProjectList(existingValues, newValues);
+    // Step 3: Update .env
+    const mergedValue = merged.join(',');
+    await updateEnvFile({
+        key,
+        value: mergedValue,
+        projectRoot,
+        logger,
+        createBackup
+    });
+    logger.log(`Merged ${newValues.length} new value(s) into ${key}`);
+    logger.log(`Total: ${merged.length} unique value(s)`);
+}
+/**
+ * Merge two project lists without duplicates
+ *
+ * Preserves existing order, appends new projects
+ *
+ * @param existing - Existing project list
+ * @param newProjects - New projects to add
+ * @returns Merged list without duplicates
+ */
+export function mergeProjectList(existing, newProjects) {
+    const merged = [...existing];
+    const existingSet = new Set(existing.map(p => p.toLowerCase()));
+    for (const project of newProjects) {
+        // Case-insensitive duplicate check
+        if (!existingSet.has(project.toLowerCase())) {
+            merged.push(project);
+            existingSet.add(project.toLowerCase());
+        }
+    }
+    return merged;
+}
+/**
+ * Get value from .env file
+ *
+ * @param projectRoot - Project root path
+ * @param key - Environment variable key
+ * @returns Value or null if not found
+ */
+export async function getEnvValue(projectRoot, key) {
+    const envPath = path.join(projectRoot, '.env');
+    if (!existsSync(envPath)) {
+        return null;
+    }
+    const content = await fs.readFile(envPath, 'utf-8');
+    const envMap = parseEnvContent(content);
+    return envMap.get(key) || null;
+}
+/**
+ * Check if .env file exists
+ *
+ * @param projectRoot - Project root path
+ * @returns True if .env exists
+ */
+export function envFileExists(projectRoot) {
+    return existsSync(path.join(projectRoot, '.env'));
+}
+/**
+ * Restore .env from backup
+ *
+ * @param projectRoot - Project root path
+ * @param logger - Logger instance
+ */
+export async function restoreEnvBackup(projectRoot, logger = consoleLogger) {
+    const envPath = path.join(projectRoot, '.env');
+    const backupPath = path.join(projectRoot, '.env.backup');
+    if (!existsSync(backupPath)) {
+        throw new Error('No .env.backup file found');
+    }
+    await fs.copyFile(backupPath, envPath);
+    logger.log('Restored .env from backup');
+}
+//# sourceMappingURL=env-manager.js.map

package/dist/src/utils/env-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-manager.js","sourceRoot":"","sources":["../../../src/utils/env-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAkB5C;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,gCAAgC;QAChC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,kBAAkB;QAClB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC9C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAyB;IAC3D,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,EAAE,YAAY,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAEzF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAEzD,IAAI,CAAC;QACH,qCAAqC;QACrC,IAAI,eAAe,GAAG,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,eAAe,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAED,2BAA2B;QAC3B,MAAM,MAAM,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAEvB,oBAAoB;QACpB,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAE/C,mDAAmD;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAElD,2CAA2C;QAC3C,IAAI,YAAY,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC5C,CAAC;QAED,8CAA8C;QAC9C,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,iBAAiB,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAE9C,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,6BAA6B;QAC7B,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAwB;IACzD,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,EAAE,YAAY,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAE7F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAE/C,8BAA8B;IAC9B,IAAI,cAAc,GAAa,EAAE,CAAC;IAClC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtC,IAAI,aAAa,EAAE,CAAC;YAClB,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAE3D,sBAAsB;IACtB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,aAAa,CAAC;QAClB,GAAG;QACH,KAAK,EAAE,WAAW;QAClB,WAAW;QACX,MAAM;QACN,YAAY;KACb,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,UAAU,SAAS,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC,CAAC;IAClE,MAAM,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,MAAM,kBAAkB,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAkB,EAAE,WAAqB;IACxE,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEhE,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,mCAAmC;QACnC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrB,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,WAAmB,EAAE,GAAW;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAE/C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAmB,EAAE,SAAiB,aAAa;IACxF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAEzD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;AAC1C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specweave",
-  "version": "0.23.18",
+  "version": "0.24.1",
   "description": "Spec-driven development framework for Claude Code. AI-native workflow with living documentation, intelligent agents, and multilingual support (9 languages). Enterprise-grade traceability with permanent specs and temporary increments.",
   "type": "module",
   "main": "dist/index.js",

package/plugins/specweave/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "specweave",
   "description": "SpecWeave framework. Provides increment planning (PM, Architect, Tech Lead agents), specification generation, TDD workflow, living docs sync, and brownfield support. Essential for all SpecWeave projects.",
-  "version": "0.22.14",
+  "version": "0.24.0",
   "author": {
     "name": "SpecWeave Team",
     "url": "https://spec-weave.com"

package/plugins/specweave/agents/AGENTS-INDEX.md

@@ -150,7 +150,7 @@ Task({
   prompt: "Assess quality of increment specification and implementation"
 });
 ```
-**Use for**: AI-powered quality assessment, risk scoring (BMAD), quality gate decisions
+**Use for**: AI-powered quality assessment, quantitative risk scoring (Probability × Impact), quality gate decisions
 
 #### Reflective Reviewer
 ```typescript

package/plugins/specweave/agents/increment-quality-judge-v2/AGENT.md

@@ -1,6 +1,6 @@
 ---
 name: increment-quality-judge-v2
-description: Enhanced AI-powered quality assessment with RISK SCORING (BMAD pattern) and quality gate decisions. Evaluates specifications, plans, and tests for clarity, testability, completeness, feasibility, maintainability, edge cases, and RISKS. Provides PASS/CONCERNS/FAIL decisions. Activates for validate quality, quality check, assess spec, evaluate increment, spec review, quality score, risk assessment, qa check, quality gate, /specweave:qa command.
+description: Enhanced AI-powered quality assessment with RISK SCORING (Probability × Impact method) and quality gate decisions. Evaluates specifications, plans, and tests for clarity, testability, completeness, feasibility, maintainability, edge cases, and RISKS. Provides PASS/CONCERNS/FAIL decisions. Activates for validate quality, quality check, assess spec, evaluate increment, spec review, quality score, risk assessment, qa check, quality gate, /specweave:qa command.
 tools: Read, Grep, Glob
 model: claude-sonnet-4-5-20250929
 model_preference: haiku
@@ -28,11 +28,11 @@ Task({
 
 Risk Assessment + Quality Gate Decisions
 
-AI-powered quality assessment with BMAD-pattern risk scoring and formal quality gate decisions (PASS/CONCERNS/FAIL).
+AI-powered quality assessment with quantitative risk scoring (Probability × Impact) and formal quality gate decisions (PASS/CONCERNS/FAIL).
 
 ## What's New in v2.0
 
-1. **Risk Assessment Dimension** - Probability × Impact scoring (0-10 scale, BMAD pattern)
+1. **Risk Assessment Dimension** - Probability × Impact scoring (0-10 scale, quantitative method)
 2. **Quality Gate Decisions** - Formal PASS/CONCERNS/FAIL with thresholds
 3. **NFR Checking** - Non-functional requirements (performance, security, scalability)
 4. **Enhanced Output** - Blockers, concerns, recommendations with actionable mitigations
@@ -42,7 +42,7 @@ AI-powered quality assessment with BMAD-pattern risk scoring and formal quality
 
 Provide comprehensive quality assessment that goes beyond structural validation to evaluate:
 - ✅ Specification quality (6 dimensions)
-- ✅ **Risk levels (BMAD P×I scoring)** - NEW!
+- ✅ **Risk levels (Probability × Impact scoring)** - NEW!
 - ✅ **Quality gate readiness (PASS/CONCERNS/FAIL)** - NEW!
 
 ## Your Mission
@@ -63,7 +63,7 @@ When invoked by `/specweave:qa` command or programmatically via Task tool:
    - Edge Cases (9%)
    - **Risk Assessment (11%)** - NEW!
 
-3. **Assess risks using BMAD pattern**:
+3. **Assess risks using quantitative scoring**:
    - Security risks (OWASP Top 10, data exposure, auth/authz)
    - Technical risks (architecture, scalability, performance)
    - Implementation risks (timeline, dependencies, complexity)
@@ -176,7 +176,7 @@ When invoked by `/specweave:qa` command or programmatically via Task tool:
 - 0.50-0.69: Some risks identified, partial mitigations
 - 0.00-0.49: Risks not identified or no mitigations
 
-## Risk Assessment (BMAD Pattern) - CRITICAL!
+## Risk Assessment (Probability × Impact Method) - CRITICAL!
 
 ### Risk Scoring Formula
 
@@ -570,7 +570,7 @@ Suggestions:
 - Define "session" in terminology section
 ```
 
-### Step 3: Assess Risks (BMAD Pattern)
+### Step 3: Assess Risks (Quantitative Method)
 
 ```markdown
 <thinking>
@@ -680,7 +680,7 @@ Return the complete JSON response with all scores, risks, and quality gate decis
 - ✅ Spot untestable acceptance criteria
 - ✅ Suggest industry best practices
 - ✅ Flag missing edge cases
-- ✅ **Assess risks systematically (BMAD pattern)**
+- ✅ **Assess risks systematically (Probability × Impact method)**
 - ✅ **Provide formal quality gate decisions**
 
 ## Summary
@@ -689,7 +689,7 @@ You are the **Increment Quality Judge v2.0** agent. Your job is to:
 
 1. **Read** increment files (spec.md, plan.md, tasks.md)
 2. **Evaluate** 7 dimensions (including NEW risk assessment)
-3. **Assess risks** using BMAD pattern (P×I scoring)
+3. **Assess risks** using quantitative method (P×I scoring)
 4. **Make quality gate decision** (PASS/CONCERNS/FAIL)
 5. **Return JSON** with scores, risks, and recommendations
 

package/plugins/specweave/commands/specweave-do.md

@@ -105,6 +105,43 @@ npx specweave validate-plugins --auto-install
    - Check no blocking dependencies
    - Check tasks.md has tasks to execute
 
+4. **🚨 CRITICAL: Validate AC Presence (v0.24.0+)**:
+
+   **MANDATORY**: Run pre-increment-start validation hook to verify spec.md contains ACs.
+
+   Use the Bash tool to run:
+   ```bash
+   bash plugins/specweave/hooks/pre-increment-start.sh <increment-path>
+   # Example: bash plugins/specweave/hooks/pre-increment-start.sh .specweave/increments/0050-feature-name
+   ```
+
+   **Expected Output (Success)**:
+   ```
+   ✅ AC Presence Validation PASSED
+      • spec.md contains 39 ACs
+      • Matches metadata.json (39 expected)
+      • Ready to start implementation
+   ```
+
+   **Expected Output (Failure)**:
+   ```
+   ❌ AC Presence Validation FAILED
+      • spec.md contains 0 ACs (expected 39)
+      • ACs are REQUIRED for task-AC sync to work
+
+   💡 Fix: Run /specweave:embed-acs <increment-id>
+   ```
+
+   **What to Do After Validation**:
+   - ✅ **If validation passes**: Proceed to Step 2
+   - ❌ **If validation fails**: Show error, run `/specweave:embed-acs`, then retry
+   - **DO NOT PROCEED** without ACs in spec.md (hooks will fail!)
+
+   **Why This Matters** (ADR-0064):
+   - The AC sync hook requires ACs in spec.md to update completion status
+   - Without inline ACs, you get 0% AC completion and broken status line
+   - Even with external living docs, ACs MUST be embedded in spec.md
+
 **Example output**:
 ```
 📂 Loading increment 0001-user-authentication...

package/plugins/specweave/commands/specweave-done.md

@@ -810,6 +810,146 @@ Increment remains: in-progress
 Try again after fixing blockers: /specweave:done 0001
 ```
 
+### Step 5.5: Post-Closure Quality Assessment (NEW - v0.24.0+)
+
+**🎯 MANDATORY**: After successful closure, automatically run quality assessment to validate implementation quality.
+
+**This step runs ONLY if closure succeeded** (all PM gates passed). If gates failed, increment remains in-progress and this step is skipped.
+
+**Why This Step Matters**:
+- PM validation (Gates 0-3) checks **structural completion** (tasks done, tests pass, docs updated, AC coverage)
+- Quality assessment checks **implementation quality** (code quality, architecture decisions, risks, security)
+- Provides retrospective learning and continuous improvement
+- Identifies technical debt and areas for future enhancement
+- Builds quality metrics over time for velocity tracking
+
+**Implementation**:
+
+1. **Invoke QA command automatically**:
+   ```bash
+   /specweave:qa ${incrementId}
+   ```
+
+2. **Quality assessment evaluates 7 dimensions**:
+   - **Clarity**: Problem statement, objectives, terminology consistency
+   - **Testability**: Acceptance criteria testability, measurable success, edge cases
+   - **Completeness**: Requirements coverage, error handling, NFRs
+   - **Feasibility**: Architecture scalability, technical constraints, timeline
+   - **Maintainability**: Modular design, extension points, technical debt
+   - **Edge Cases**: Failure scenarios, performance limits, security considerations
+   - **Risk Assessment** (BMAD): Probability × Impact scoring (0-10 scale)
+
+3. **Quality gate decision**:
+   - **✅ PASS**: Score ≥80, no critical risks → Proceed to next work
+   - **🟡 CONCERNS**: Score 60-79, high risks present → Log concerns, suggest improvements
+   - **🔴 FAIL**: Score <60, critical risks present → Create follow-up increment for fixes
+
+4. **Generate quality report**:
+   - Save to `.specweave/increments/####/reports/qa-post-closure.md`
+   - Include dimension scores, risks identified, recommendations
+   - Link to specific code locations and acceptance criteria
+
+**Example Output (PASS)**:
+```
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+🔍 POST-CLOSURE QUALITY ASSESSMENT
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+Running quality assessment to validate implementation...
+
+Overall Score: 87/100 (GOOD) ✓
+
+Dimension Scores:
+  Clarity:         92/100 ✓✓
+  Testability:     85/100 ✓
+  Completeness:    90/100 ✓✓
+  Feasibility:     88/100 ✓✓
+  Maintainability: 85/100 ✓
+  Edge Cases:      78/100 ✓
+  Risk Assessment: 75/100 ✓
+
+Quality Gate Decision: ✅ PASS
+
+📋 Report: .specweave/increments/0001-user-authentication/reports/qa-post-closure.md
+
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+```
+
+**Example Output (CONCERNS)**:
+```
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+🔍 POST-CLOSURE QUALITY ASSESSMENT
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+Overall Score: 72/100 (ACCEPTABLE) ⚠️
+
+Dimension Scores:
+  Clarity:         85/100 ✓
+  Testability:     68/100 ⚠️
+  Edge Cases:      65/100 ⚠️
+  Risk Assessment: 70/100 ⚠️
+
+Quality Gate Decision: 🟡 CONCERNS
+
+Issues to Address:
+  • Testability: Some acceptance criteria not measurable
+  • Edge cases: Missing error handling for network failures
+  • 2 HIGH risks identified (see report)
+
+Recommendations:
+  1. Add measurable metrics to 3 acceptance criteria
+  2. Implement retry logic for API calls
+  3. Add integration tests for edge cases
+
+📋 Full report: .specweave/increments/0001-*/reports/qa-post-closure.md
+
+These can be addressed in future iterations.
+
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+```
+
+**Example Output (FAIL)**:
+```
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+🔍 POST-CLOSURE QUALITY ASSESSMENT
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+Overall Score: 58/100 (POOR) 🔴
+
+Dimension Scores:
+  Risk Assessment: 45/100 🔴 (CRITICAL)
+
+Quality Gate Decision: 🔴 FAIL
+
+CRITICAL Issues Found:
+  🔴 RISK-001: Password storage implementation (9.0/10 - CRITICAL)
+     → No password hashing specified
+     → SECURITY VULNERABILITY: Passwords stored in plain text
+     → MUST FIX: Use bcrypt or Argon2
+
+  🔴 RISK-002: Rate limiting not specified (8.0/10 - HIGH)
+     → No brute-force protection
+     → SECURITY VULNERABILITY: OWASP A07:2021
+
+Recommendation: Create follow-up increment 0002-security-fixes immediately
+
+Options:
+  A. Create follow-up increment now (STRONGLY RECOMMENDED)
+  B. Log as critical technical debt (must fix in next sprint)
+  C. Continue anyway (NOT RECOMMENDED - security risk!)
+
+What would you like to do? [A/B/C]
+
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+```
+
+**IMPORTANT Notes**:
+- Quality assessment runs **AFTER** closure to not block delivery
+- Increment is already closed and can be deployed
+- QA provides learning, continuous improvement, and technical debt identification
+- Critical issues trigger follow-up increment creation for fixes
+- Quality metrics tracked over time for velocity and quality trends
+
 ### Step 6: Handle Incomplete Work
 
 **If increment cannot close due to scope creep**:
@@ -865,6 +1005,25 @@ PM Approval: ✅ APPROVED
 
 🎉 Increment 0001 closed successfully!
 
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+🔍 POST-CLOSURE QUALITY ASSESSMENT
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
+Running quality assessment to validate implementation...
+
+Overall Score: 87/100 (GOOD) ✓
+
+Dimension Scores:
+  Clarity:         92/100 ✓✓
+  Testability:     85/100 ✓
+  Risk Assessment: 75/100 ✓
+
+Quality Gate Decision: ✅ PASS
+
+📋 Report: .specweave/increments/0001-user-authentication/reports/qa-post-closure.md
+
+━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
+
 Next: /specweave:increment "Next feature"
 ```