toga-ai 1.0.80 → 1.0.82

package/.claude/settings.json

@@ -1,6 +1,27 @@
 {
   "hooks": {
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \".claude/hooks/toga/kickoff-gate.js\"",
+            "timeout": 3000
+          }
+        ]
+      }
+    ],
     "PreToolUse": [
+      {
+        "matcher": "Bash|Read|Grep|Glob|Edit|Write|MultiEdit|NotebookEdit|Task|WebFetch|WebSearch",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \".claude/hooks/toga/kickoff-gate.js\"",
+            "timeout": 3000
+          }
+        ]
+      },
       {
         "matcher": "Bash",
         "hooks": [

package/knowledge/2.0/apps/toga2-hub/INDEX.md

@@ -1,6 +1,6 @@
-# toga2-hub (TOGA Hub) — 2.0 knowledge
+# toga2-hub (TOGa Hub) — 2.0 knowledge
 
 | Doc | Summary | Files |
 |-----|---------|-------|
-| [TOGA Hub Architecture](architecture.md) | toga2-hub (TOGA Hub) is a React + TypeScript single-page admin portal for the TOGA platform. | toga2-hub/src/main.tsx, toga2-hub/src/routes.tsx, toga2-hub/src/App.tsx, toga2-hub/src/api/axiosInstance.ts, toga2-hub/src/api/apiFunctions.ts, toga2-hub/src/utils/queryHelpers.ts, toga2-hub/src/contexts/AuthContext.tsx, toga2-hub/src/stores/useUserStore.ts |
-| [ACL Record Permissions — Rendering Semantics (Permissions Page)](features/acl-permissions-rendering.md) | How the TOGA Hub Permissions page must interpret the api2 endpoint `GET /v2/acl-record-permissions/getAclRecordPermissionsByRecordAndRole` and turn its response | toga2-hub/src/pages/Permissions/api/permissionsApi.ts, toga2-hub/src/pages/Permissions/utils/permissionsUtils.ts, toga2-hub/src/pages/Permissions/viewModel/useRolesViewModel.ts, toga2-hub/src/hooks/useAclPermissionsByRoleQuery.ts, toga2-hub/src/pages/Permissions/view/RolesView/RoleDetailView/LogicGroupView.tsx, toga2-hub/src/pages/Permissions/view/RecordsView/RecordDetailView/RecordDetailView.tsx, toga2-hub/src/hooks/useQueryData.ts |
+| [TOGa Hub Architecture](architecture.md) | toga2-hub (TOGa Hub) is a React + TypeScript single-page admin portal for the TOGA platform. | toga2-hub/src/main.tsx, toga2-hub/src/routes.tsx, toga2-hub/src/App.tsx, toga2-hub/src/api/axiosInstance.ts, toga2-hub/src/api/apiFunctions.ts, toga2-hub/src/utils/queryHelpers.ts, toga2-hub/src/contexts/AuthContext.tsx, toga2-hub/src/stores/useUserStore.ts |
+| [ACL Record Permissions — Rendering Semantics (Permissions Page)](features/acl-permissions-rendering.md) | How the TOGa Hub Permissions page must interpret the api2 endpoint `GET /v2/acl-record-permissions/getAclRecordPermissionsByRecordAndRole` and turn its response | toga2-hub/src/pages/Permissions/api/permissionsApi.ts, toga2-hub/src/pages/Permissions/utils/permissionsUtils.ts, toga2-hub/src/pages/Permissions/viewModel/useRolesViewModel.ts, toga2-hub/src/hooks/useAclPermissionsByRoleQuery.ts, toga2-hub/src/pages/Permissions/view/RolesView/RoleDetailView/LogicGroupView.tsx, toga2-hub/src/pages/Permissions/view/RecordsView/RecordDetailView/RecordDetailView.tsx, toga2-hub/src/hooks/useQueryData.ts |

package/knowledge/2.0/apps/toga2-hub/architecture.md

@@ -1,8 +1,8 @@
 ---
-title: TOGA Hub Architecture
+title: TOGa Hub Architecture
 framework: "2.0"
 repo: toga2-hub
-project: TOGA Hub
+project: TOGa Hub
 client: shared
 type: architecture
 status: active
@@ -23,7 +23,7 @@ related:
 
 ## Summary
 
-toga2-hub (TOGA Hub) is a React + TypeScript single-page admin portal for the TOGA
+toga2-hub (TOGa Hub) is a React + TypeScript single-page admin portal for the TOGA
 platform. It is a pure frontend client — all business logic and persistence live in the
 `api2` backend (framework 2.0), which Hub talks to exclusively over REST. The portal is
 multi-tenant: it selects both its API endpoint and theme from the hostname it is served

package/knowledge/2.0/apps/toga2-hub/features/acl-permissions-rendering.md

@@ -2,7 +2,7 @@
 title: ACL Record Permissions — Rendering Semantics (Permissions Page)
 framework: "2.0"
 repo: toga2-hub
-project: TOGA Hub
+project: TOGa Hub
 client: shared
 type: feature
 status: active
@@ -21,7 +21,7 @@ related: []
 
 ## Summary
 
-How the TOGA Hub Permissions page must interpret the api2 endpoint
+How the TOGa Hub Permissions page must interpret the api2 endpoint
 `GET /v2/acl-record-permissions/getAclRecordPermissionsByRecordAndRole` and turn its
 response into the green-check / red-X permissions grid. Semantics confirmed in a design
 review with jcardinal (Naperville, 2026-06-09); an earlier implementation over-thought

package/knowledge/INDEX.md

@@ -18,7 +18,7 @@ _Auto-generated by `knowledge.js index`. Do not hand-edit._
 - **toga2-supply** (TOGa Supply) — 2 doc(s) → [2.0/apps/toga2-supply/INDEX.md](2.0/apps/toga2-supply/INDEX.md)
 - **saml** (SAML SSO Gateway) — 2 doc(s) → [2.0/apps/saml/INDEX.md](2.0/apps/saml/INDEX.md)
 - **toga2-view** (TOGa View Frontend) — 0 doc(s) → [2.0/apps/toga2-view/INDEX.md](2.0/apps/toga2-view/INDEX.md)
-- **toga2-hub** (TOGA Hub) — 2 doc(s) → [2.0/apps/toga2-hub/INDEX.md](2.0/apps/toga2-hub/INDEX.md)
+- **toga2-hub** (TOGa Hub) — 2 doc(s) → [2.0/apps/toga2-hub/INDEX.md](2.0/apps/toga2-hub/INDEX.md)
 
 ## Clients
 

package/knowledge/registry.json

@@ -10,6 +10,6 @@
   { "repo": "toga2-view",  "project": "TOGa View Frontend", "framework": "2.0", "role": "app",  "dependsOn": ["api2"] },
   { "repo": "togadesk",    "project": "TOGa Desk",   "framework": "1.0", "role": "app",  "dependsOn": [] },
   { "repo": "togaview",    "project": "TOGa View",   "framework": "1.0", "role": "app",  "dependsOn": [] },
-  { "repo": "toga2-hub",   "project": "TOGA Hub",    "framework": "2.0", "role": "app",  "dependsOn": ["api2"] }
+  { "repo": "toga2-hub",   "project": "TOGa Hub",    "framework": "2.0", "role": "app",  "dependsOn": ["api2"] }
 
 ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toga-ai",
-  "version": "1.0.80",
+  "version": "1.0.82",
   "description": "TOGA Technology Team Claude Knowledge System — shared AI coding harness with skills, knowledge base CLI, and project installer for Claude Code.",
   "keywords": [
     "claude",

package/scripts/hooks/kickoff-gate.js

@@ -0,0 +1,180 @@
+#!/usr/bin/env node
+'use strict';
+
+/*
+ * kickoff-gate.js — DETERMINISTIC enforcement of the /kickoff priming gate.
+ *
+ * Why this exists: the kickoff SKILL.md states a "hard gate" — when /kickoff is
+ * invoked you MUST complete priming (Steps 0–6) BEFORE touching the task with any
+ * Read/Grep/Glob/Edit/Write/Task call. Prose alone did not stop the model from
+ * jumping straight to investigation when /kickoff was followed by a long, specific
+ * task description. This hook makes the gate mechanical, not advisory.
+ *
+ * It registers for TWO events from a single file:
+ *
+ *   UserPromptSubmit  → if the submitted prompt invokes /kickoff, ARM the gate:
+ *                       write a session-scoped lock and inject a forceful reminder.
+ *
+ *   PreToolUse        → while the gate is armed for THIS session, ALLOW only the
+ *                       read-only priming steps (the priming Bash commands + the
+ *                       interview via AskUserQuestion/Skill, which don't match the
+ *                       PreToolUse matcher) and BLOCK every task tool
+ *                       (Read/Grep/Glob/Edit/Write/MultiEdit/NotebookEdit/Task/
+ *                       WebFetch/WebSearch and any non-priming Bash). The lock
+ *                       AUTO-CLEARS the moment `knowledge.js kickoff-preflight`
+ *                       runs — the definitive priming step that precedes Step 4's
+ *                       first Read. So the model literally cannot investigate or
+ *                       edit the task until it has actually primed.
+ *
+ * Fail-open: any internal/parse error allows the tool (a crashing gate must never
+ * brick every session). The SKILL.md prose remains the backup.
+ *
+ * Escape hatch: set KICKOFF_GATE_DISABLED=1 to disable enforcement entirely.
+ */
+
+const fs = require('fs');
+const path = require('path');
+
+/* ---------- input: read stdin JSON (CC standard), fall back to env ---------- */
+function readPayload() {
+  let raw = '';
+  try { raw = fs.readFileSync(0, 'utf8'); } catch (e) { /* no stdin */ }
+  let data = {};
+  if (raw && raw.trim()) {
+    try { data = JSON.parse(raw); } catch (e) { data = {}; }
+  }
+  // env fallbacks used by this harness's other hooks
+  if (!data.tool_name && process.env.CLAUDE_TOOL_NAME) data.tool_name = process.env.CLAUDE_TOOL_NAME;
+  if (!data.tool_input && process.env.CLAUDE_TOOL_INPUT) {
+    try { data.tool_input = JSON.parse(process.env.CLAUDE_TOOL_INPUT); } catch (e) {}
+  }
+  if (!data.prompt && process.env.CLAUDE_USER_PROMPT) data.prompt = process.env.CLAUDE_USER_PROMPT;
+  if (!data.session_id && process.env.CLAUDE_SESSION_ID) data.session_id = process.env.CLAUDE_SESSION_ID;
+  return data;
+}
+
+function lockPath() {
+  return path.join(process.cwd(), '.claude', '.kickoff-gate.json');
+}
+
+function readLock() {
+  try { return JSON.parse(fs.readFileSync(lockPath(), 'utf8')); } catch (e) { return null; }
+}
+
+function writeLock(sessionId) {
+  try {
+    fs.mkdirSync(path.dirname(lockPath()), { recursive: true });
+    fs.writeFileSync(lockPath(), JSON.stringify({ session: sessionId || null, ts: Date.now() }) + '\n');
+  } catch (e) { /* non-fatal */ }
+}
+
+function clearLock() {
+  try { fs.unlinkSync(lockPath()); } catch (e) { /* already gone */ }
+}
+
+/* A prompt invokes /kickoff if it carries any of these signals (covers the literal
+ * "/kickoff ...", the expanded skill command form, and the rendered skill header). */
+function invokesKickoff(prompt) {
+  if (typeof prompt !== 'string' || !prompt) return false;
+  return (
+    /(^|\s)\/kickoff(\s|$)/.test(prompt) ||
+    /command-name>\s*\/?kickoff\s*<\/command-name>/i.test(prompt) ||
+    /Kickoff\s+—\s+prime a coding session/i.test(prompt)
+  );
+}
+
+/* Bash commands that ARE the read-only priming steps (Steps 0–3). Everything else
+ * is task work and stays blocked until preflight clears the gate. */
+function isPrimingBash(command) {
+  if (typeof command !== 'string') return false;
+  return /knowledge\.js|kickoff-preflight|toga-ai\.version|npm\s+view\s+toga-ai|npx\s+toga-ai|registry\.json|rev-parse/i.test(command);
+}
+
+function isPreflightBash(command) {
+  return typeof command === 'string' && /kickoff-preflight/i.test(command);
+}
+
+/* Tools that constitute touching the task — blocked while the gate is armed. */
+const BLOCKED_TOOLS = new Set([
+  'Read', 'Grep', 'Glob', 'Edit', 'Write', 'MultiEdit',
+  'NotebookEdit', 'Task', 'Agent', 'WebFetch', 'WebSearch',
+]);
+
+function blockMessage() {
+  return [
+    '🛑 KICKOFF GATE — priming is not complete.',
+    '',
+    '/kickoff was invoked this session. You MUST finish priming BEFORE touching the task',
+    'with any Read/Grep/Glob/Edit/Write/Task call — no matter how detailed the request after',
+    '/kickoff looks. That trailing text is the Step 2 task description, NOT permission to start.',
+    '',
+    'Do this now, in order (these are allowed while the gate is armed):',
+    '  • Step 0  version check (cat .claude/toga-ai.version ; npm view toga-ai version)',
+    '  • Step 1  resolve the team repo (probe for knowledge/registry.json)',
+    '  • Step 2  interview the developer (framework / layer / repo(s) / client / task)',
+    '  • Step 3  node "<TEAM_REPO>/knowledge.js" kickoff-preflight ...   ← this AUTO-CLEARS the gate',
+    '  • Step 4+ THEN read the knowledge docs and start the task',
+    '',
+    'The gate releases automatically the instant kickoff-preflight runs.',
+    '(Emergency override only: set KICKOFF_GATE_DISABLED=1.)',
+  ].join('\n');
+}
+
+function main() {
+  if (process.env.KICKOFF_GATE_DISABLED === '1') process.exit(0);
+
+  const data = readPayload();
+
+  // ---- UserPromptSubmit: arm the gate when /kickoff is invoked ----
+  // Identify by the presence of a prompt and absence of a tool call.
+  const isPromptEvent =
+    data.hook_event_name === 'UserPromptSubmit' ||
+    (typeof data.prompt === 'string' && !data.tool_name);
+
+  if (isPromptEvent) {
+    if (invokesKickoff(data.prompt)) {
+      writeLock(data.session_id);
+      // stdout from UserPromptSubmit is injected into the model's context.
+      console.log(
+        '<system-reminder>KICKOFF GATE ARMED. Before ANY other tool call, complete priming ' +
+        'Steps 0–6 of the kickoff skill — version check, resolve team repo, interview, then ' +
+        'run `knowledge.js kickoff-preflight` (which releases the gate), THEN read docs and work. ' +
+        'The trailing task description is Step 2 input, not permission to start. ' +
+        'A hook will block Read/Grep/Edit/Write/Task until preflight runs.</system-reminder>'
+      );
+    }
+    process.exit(0);
+  }
+
+  // ---- PreToolUse: enforce while armed for THIS session ----
+  const lock = readLock();
+  if (!lock) process.exit(0);
+
+  // Cross-session safety: only enforce for the session that armed the gate.
+  // If we can't match sessions, fall back to a 3-hour staleness window.
+  const sameSession = lock.session && data.session_id && lock.session === data.session_id;
+  const fresh = lock.ts && (Date.now() - lock.ts) < 3 * 60 * 60 * 1000;
+  if (!sameSession && !fresh) { clearLock(); process.exit(0); }
+  if (data.session_id && lock.session && !sameSession) process.exit(0);
+
+  const tool = data.tool_name || '';
+  const command = (data.tool_input && data.tool_input.command) || '';
+
+  if (tool === 'Bash') {
+    if (isPreflightBash(command)) { clearLock(); process.exit(0); } // priming reached — release
+    if (isPrimingBash(command)) process.exit(0);                    // other read-only priming step
+    console.log(blockMessage());
+    process.exit(2);
+  }
+
+  if (BLOCKED_TOOLS.has(tool)) {
+    console.log(blockMessage());
+    process.exit(2);
+  }
+
+  // Anything else (AskUserQuestion, Skill, TodoWrite, ExitPlanMode, …) is part of
+  // priming/interview — allow.
+  process.exit(0);
+}
+
+try { main(); } catch (e) { process.exit(0); } // fail-open: never brick a session

package/skills/kickoff/SKILL.md

@@ -22,6 +22,16 @@ description: Start-of-session context loader for TOGA Technology projects. Run t
 >
 > Only after Step 5's "primed and ready" summary (and Step 6's plan, for non-trivial work)
 > may you touch the task itself.
+>
+> **This gate is mechanically enforced — it is not just prose.** A hook
+> (`hooks/toga/kickoff-gate.js`, wired on `UserPromptSubmit` + `PreToolUse`) arms the
+> instant `/kickoff` is invoked and will **hard-block** `Read`, `Grep`, `Glob`, `Edit`,
+> `Write`, `Task`, and any non-priming `Bash` until you actually prime. The only calls it
+> permits while armed are the read-only priming steps (the version check, team-repo probe,
+> `knowledge.js manifest`, the developer interview) and `knowledge.js kickoff-preflight` —
+> **running preflight (Step 3) is what releases the gate.** So the correct response to a
+> block message is never to fight it: run Steps 0–3, and the moment preflight executes you
+> are free to read docs and work. (Emergency override only: `KICKOFF_GATE_DISABLED=1`.)
 
 ## Arguments — text passed after `/kickoff` never skips any step