syntropic 0.9.1 → 0.9.2

package/README.md

@@ -66,16 +66,17 @@ Built in production on a real product (27 AI agents, 8-lens analyser, CLI, 7 fre
 
 **Why it matters.** The PRISM network grows exponentially with contributors. Every anonymous report adds signal — which cycle weights work for which project shapes, where pipelines break down, what patterns lead to first-pass success. More contributors = better data = smarter rules for everyone.
 
-**Contributors get more.** When telemetry is enabled, your PRISM sync fetches live network benchmarks — real success rates, iteration counts, and pattern intelligence computed from aggregate data across all contributors. When telemetry is disabled, you still get the full EG rules and agents, but benchmarks are static baselines only. No account needed — your identity is a double-hashed device fingerprint ([pseudonymisation details](https://zenodo.org/records/17894441)).
+**Contributors get more.** When telemetry is enabled, your PRISM sync fetches live network benchmarks — real success rates, iteration counts, and pattern intelligence computed from aggregate data across all contributors. This is how the methodology caught 3 classes of production bugs before they reached users, and how 12 test-to-production promotions were verified clean. When telemetry is disabled, you still get the full EG rules and agents, but benchmarks are static baselines only — you lose the network learning that makes rules smarter over time. No account needed — your identity is a double-hashed device fingerprint ([pseudonymisation details](https://zenodo.org/records/17894441)).
 
 | | Community (telemetry off) | Contributor (telemetry on) |
 |---|---|---|
 | EG rules | Full | Full |
 | Pipeline agents | Full | Full |
 | Governance docs | Full | Full |
-| Benchmarks | Static baselines | **Live network data** |
-| Pattern intelligence | Frozen snapshot | **Updated from aggregate reports** |
-| Network benefit | None | **Your reports improve rules for everyone** |
+| Benchmarks | Static baselines | **Live network data** (success rates, iteration counts, failure patterns) |
+| Pattern intelligence | Frozen snapshot | **Updated from aggregate reports** (which cycle weights work for your stack) |
+| Cycle recommendations | Generic defaults | **Tuned by real data** (upgrade/downgrade triggers from contributor patterns) |
+| Network benefit | None | **Your reports improve rules for everyone — including you** |
 
 Default: on. Opt out anytime:
 

package/bin/syntropic.js

@@ -13,6 +13,46 @@
 const args = process.argv.slice(2);
 const command = args[0];
 
+// Check for updates (once per day, non-blocking)
+function checkForUpdates() {
+  try {
+    const fs = require('fs');
+    const path = require('path');
+    const configDir = path.join(require('os').homedir(), '.syntropic');
+    const checkFile = path.join(configDir, '.update-check');
+    const now = Date.now();
+
+    // Only check once per day
+    if (fs.existsSync(checkFile)) {
+      const lastCheck = parseInt(fs.readFileSync(checkFile, 'utf8'), 10);
+      if (now - lastCheck < 86400000) return; // 24 hours
+    }
+
+    // Write timestamp immediately (even if check fails)
+    if (!fs.existsSync(configDir)) fs.mkdirSync(configDir, { recursive: true });
+    fs.writeFileSync(checkFile, String(now), 'utf8');
+
+    // Non-blocking check against npm registry
+    const https = require('https');
+    const req = https.get('https://registry.npmjs.org/syntropic/latest', { timeout: 3000 }, (res) => {
+      let data = '';
+      res.on('data', (chunk) => data += chunk);
+      res.on('end', () => {
+        try {
+          const latest = JSON.parse(data).version;
+          const current = require('../package.json').version;
+          if (latest && latest !== current) {
+            console.log(`\n  Update available: ${current} → ${latest} — run \`npm i -g syntropic\`\n`);
+          }
+        } catch {}
+      });
+    });
+    req.on('error', () => {});
+    req.on('timeout', () => req.destroy());
+  } catch {}
+}
+checkForUpdates();
+
 const COMMANDS = {
   audit: () => require('../commands/audit'),
   init: () => require('../commands/init'),

package/commands/config-utils.js

@@ -25,7 +25,7 @@ function ensureConfig() {
         config: null,
       },
     };
-    fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), 'utf8');
+    fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { encoding: 'utf8', mode: 0o600 });
   }
 }
 

package/commands/init.js

@@ -86,33 +86,6 @@ function replaceInFile(filePath, replacements) {
   fs.writeFileSync(filePath, content, 'utf8');
 }
 
-function installPostCommitHook(targetDir) {
-  const hooksDir = path.join(targetDir, '.git', 'hooks');
-  if (!fs.existsSync(hooksDir)) return false; // Not a git repo
-
-  const hookPath = path.join(hooksDir, 'post-commit');
-  if (fs.existsSync(hookPath)) {
-    // Don't overwrite existing hook — check if it already has syntropic
-    const existing = fs.readFileSync(hookPath, 'utf8');
-    if (existing.includes('syntropic report')) return 'exists';
-    // Append to existing hook
-    fs.appendFileSync(hookPath, '\n# Syntropic PRISM — anonymous cycle reporting\ncommand -v syntropic >/dev/null 2>&1 && syntropic report >/dev/null 2>&1 &\n');
-    console.log(`  append  .git/hooks/post-commit (added PRISM reporting)`);
-    return 'appended';
-  }
-
-  // Create new hook
-  const hookContent = `#!/bin/sh
-# Syntropic PRISM — anonymous cycle reporting
-# Fire-and-forget: never blocks commits, respects telemetry opt-out
-# Disable: syntropic telemetry disable (or delete this hook)
-command -v syntropic >/dev/null 2>&1 && syntropic report >/dev/null 2>&1 &
-`;
-  fs.writeFileSync(hookPath, hookContent, { mode: 0o755 });
-  console.log(`  create  .git/hooks/post-commit (PRISM cycle reporting)`);
-  return 'created';
-}
-
 function hasSyntropicMarker(filePath) {
   if (!fs.existsSync(filePath)) return false;
   return fs.readFileSync(filePath, 'utf8').includes('<!-- syntropic -->');
@@ -325,12 +298,6 @@ async function run(args) {
   // Ensure ~/.syntropic/config.json exists (device_id, hmac_key, telemetry)
   ensureConfig();
 
-  // Install post-commit hook for PRISM cycle reporting
-  const hookResult = installPostCommitHook(targetDir);
-  const hookLine = hookResult === 'created' || hookResult === 'appended'
-    ? '\n    .git/hooks/post-commit             PRISM cycle reporting (anonymous)'
-    : '';
-
   console.log(`
   Done! Your project is set up with the Syntropic pipeline.
 
@@ -338,7 +305,7 @@ async function run(args) {
 ${toolFiles}
     .claude/docs/                       Project governance docs (North Star, Backlog, Issues, ADRs)
     .github/workflows/                  Daily health check with auto-remediation
-    scripts/health-check.js             Local health check script${hookLine}
+    scripts/health-check.js             Local health check script
 
   Tools configured: ${selectedTools.map(t => TOOLS[t].label).join(', ')}
 

package/commands/report.js

@@ -135,13 +135,24 @@ function detectGovernanceChanges() {
 }
 
 function autoDetectSuccess() {
+  const { execSync } = require('child_process');
+  const fs = require('fs');
+  const path = require('path');
+
+  // If no package.json or no build script, default true (nothing to fail)
   try {
-    const { execSync } = require('child_process');
-    // Check if build passes
-    execSync('npm run build --if-present 2>/dev/null', { encoding: 'utf8', timeout: 30000, stdio: 'pipe' });
+    const pkg = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'package.json'), 'utf8'));
+    if (!pkg.scripts || !pkg.scripts.build) return true;
+  } catch {
+    return true; // No package.json — can't determine, assume ok
+  }
+
+  // Build script exists — actually check if it passes
+  try {
+    execSync('npm run build', { encoding: 'utf8', timeout: 30000, stdio: 'pipe' });
     return true;
   } catch {
-    return true; // Default optimistic — don't penalise if no build script
+    return false; // Build failed — report accurately
   }
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "syntropic",
-  "version": "0.9.1",
+  "version": "0.9.2",
   "description": "Ship better software with a proven development methodology. Audit your git history, install disciplined rules, and track iterations — for Claude Code, Cursor, Windsurf, GitHub Copilot, and OpenAI Codex.",
   "bin": {
     "syntropic": "./bin/syntropic.js"