v0.1: tree-sitter complexity gate binary with Claude/Codex hooks

[ElbertePlinio]

Goal: ship v0.1 of complexity-gate, the tree-sitter binary specified in docs/spec.md, with hooks for Claude Code and Codex, golden fixtures for JS/TS/TSX, Svelte, Dart, Rust, Python, Go, and release artifacts via cargo-dist.

Agent plan

Checklist:

• Cargo workspace: crates/core (parse, metrics, config, diff spans), crates/cli
• Language tables + golden fixtures with reference numbers (strictness invariant test)
• check (paths, --changed, text/json, exit codes)
• hook claude, hook codex, loop guard, docs/hooks.md
• init, doctor --coverage
• Repo gates: CI (test, clippy -D warnings, llvm-cov ratchet, gitleaks, osv-scanner, self-check), release workflow (cargo-dist, rust-cache)
• Branch protection requiring CI
• Validation on real repos (pickscribe, pickforge, a Flutter repo)
• PR/review

Validation:

• cargo test --workspace --locked --all-targets
• cargo clippy --workspace --all-targets -- -D warnings
• cargo run -- check crates (self-gate)
• cargo run -- check --changed in a repo with a deliberately complex edit → FAIL; after refactor → exit 0

Current status: In progress
Next action: implementation lane from docs/spec.md

Harness package (Pi extension, Claude plugin, Codex skill, installer): pickforge/pickforge-platform, tracked separately.

[ElbertePlinio]

Progress update:

• Cargo workspace, core + CLI (~2k lines), 8 grammars (JS/TS/TSX/Svelte/Dart/Rust/Python/Go), all verified
• Golden fixtures with reference numbers (ESLint 10.9.1, oxlint 1.80, radon 6.0.1, gocyclo 0.6, lizard 1.24); strictness invariant test
• check, --changed, hook claude|codex, init, doctor --coverage, docs/hooks.md
• CI (test, clippy -D warnings, llvm-cov floor 83, self-gate, gitleaks, osv-scanner), release via cargo-dist; branch protection requires rust, gitleaks, osv-scanner
• Validated locally: tests/clippy green; hook protocol demo (PostToolUse feedback, Stop block, loop guard); real-repo scans (pickscribe 17, pickforge 96, pickgauge 9 legacy violations — --changed scopes them out)
• Correctness review (in progress) + fixes
• Live harness runs (Claude Code, Codex) on a scratch repo
• PR

PR: pending
Blocked: none
Next: review findings → PR

[ElbertePlinio]

Progress update:

• Correctness review round 1 (17 findings) → fixed
• Serious-backend panel (fix verification, tests/ops, security/deps) → 3 P1 + P2s fixed; SHA-pinning and cwd-relative explicit paths dismissed with rationale; release permissions deferred to release.yml: scope contents:write to the release job #2
• Fix verification round 2 → 4 new defects in the --changed seam fixed (path normalization, lossy diff decoding, --exclude-standard restored, config ignore before language lookup)
• Live harness runs: Claude Code (Stop blocks), Codex (hook trust required; PostToolUse feedback drives refactor), Pi (turn-end follow-up drives refactor)
• Final targeted verification on HEAD 128da43 (running)
• PR → CI → merge → tag v0.1.0

PR: pending
Blocked: none
Next: PR after verification

[ElbertePlinio]

Shipped: PR #3 merged, release v0.1.0 published with linux x86_64/aarch64, macOS x86_64/aarch64, windows x86_64 archives. Harness package: pickforge/pickforge-platform#88 (+ #89 downloader fix). Follow-ups: #2 (release permissions), #4 (UNVERIFIED in hook reason).