chore: sync changes

Patel230 · Patel230 · commit 91341ec52f7c · 2026-06-04T22:21:25.000+05:30
diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -48,7 +48,7 @@ body:
     attributes:
       label: hawk version
       description: Output of `hawk version` (or `hawk --version`).
-      placeholder: "0.2.0"
+      placeholder: "0.1.0"
     validations:
       required: true
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,7 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Changed
-- **Version re-baselined to `0.2.0`** across `main.go`, `api/server.go`, `flake.nix`,
+- **Version re-baselined to `0.1.0`** across `main.go`, `api/server.go`, `flake.nix`,
   `.github/workflows/release.yml`, and the `update`/`api` test suites, aligning hawk
   with the rest of the GrayCodeAI ecosystem (`eyrie`, `tok`, `yaad`, `sight`, `inspect`).
 
@@ -17,9 +17,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Prompt cache keep-alive pings
 - Unified Finding type in shared/types for cross-tool interoperability
 
-### Added — Round 2 of rtk + caveman porting (2026-06-01)
+### Added — Round 2 ecosystem improvements (2026-06-01)
 - **Cavecrew personas** (`internal/multiagent/agents`): three new
-  built-in personas ported from JuliusBrussee/caveman
+  built-in personas built into GrayCode Hawk
   (`cavecrew-investigator`, `cavecrew-builder`, `cavecrew-reviewer`).
   Each enforces a strict output format so downstream agents can parse
   outputs mechanically:
@@ -29,13 +29,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   Exposed via `CavecrewPersonas()` helper and `EnsureCavecrew()`
   registry method; `BuiltinPersonas()` returns 21 (was 18).
 - **`internal/safewrite`** package: hardened atomic file-write utility
-  ported from caveman's `safeWriteFlag`. Refuses symlinks at destination
+  native GrayCode hardened atomic writes. Refuses symlinks at destination
   and parent, refuses paths that escape via `..`, opens with
   `O_NOFOLLOW` via `golang.org/x/sys/unix`, writes to a temp file
   with mode 0600, syncs to disk, then atomically renames. `ErrSymlinkTarget`
   and `ErrPathEscape` sentinel errors.
 - **`internal/jsonc`** package: JSON-with-Comments parser and
-  `ValidateClaudeSettings` validator, ported from caveman's settings
+  `ValidateClaudeSettings` validator, native GrayCode settings
   parser and `validateHookFields`. Accepts `//` and `/* */` comments
   plus trailing commas in objects and arrays. Validates Claude Code
   `settings.json` fields (model, permissions, hooks, mcpServers,
@@ -45,7 +45,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   `RiskBlocked`). Helpers: `Allow`, `Deny`, `RequireApproval`. Additive
   change — existing `GuardianDecision` is unchanged.
 - **`internal/providers`** package: PROVIDERS matrix (34 entries)
-  ported from caveman's `bin/install.js` (PROVIDERS array). Each
+  native GrayCode PROVIDERS matrix. Each
   entry describes an AI coding agent (Claude Code, Cursor, Codex,
   Aider, etc.) with install mechanism and detection probes. Probe
   kinds: `command` (PATH), `dir` (filesystem), `vscode-ext`,
@@ -135,7 +135,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - `generateSummary()` now uses cheapest available model per provider instead of primary model
 - Ecosystem roadmap added: `ECOSYSTEM-ROADMAP.md` with 30-feature prioritized implementation plan
 
-## [0.2.0] — 2026-05-01
+## [0.1.0] — 2026-05-01
 
 ### Added
 - **Bash Security**: zsh bypass protection, process substitution blocking, IFS injection detection, carriage return prevention, ANSI-C quoting detection, git commit safety
diff --git a/Makefile b/Makefile
@@ -67,7 +67,7 @@ test-race: ## Run unit tests with the race detector.
 test-10x: ## Run tests 10 times to surface flakes.
 	go test ./... -race -count=10 -timeout=600s
 
-test-new: ## Run only the Round 2 rtk/caveman ported packages (fast iteration).
+test-new: ## Run only the Round 2 ecosystem packages (fast iteration).
 	go test -race -count=1 -timeout=60s ./internal/safewrite/... ./internal/jsonc/... ./internal/providers/... ./internal/session/... ./internal/permissions/...
 
 cover: ## Generate a coverage report (coverage.out + coverage.html).
@@ -76,7 +76,7 @@ cover: ## Generate a coverage report (coverage.out + coverage.html).
 	@go tool cover -html=coverage.out -o coverage.html
 	@echo "Coverage report: coverage.html"
 
-cover-new: ## Coverage report for Round 2 rtk/caveman ported packages only.
+cover-new: ## Coverage report for Round 2 ecosystem packages only.
 	go test -cover -timeout=30s ./internal/safewrite/... ./internal/jsonc/... ./internal/providers/... ./internal/session/... ./internal/permissions/...
 
 bench: ## Run benchmarks.
diff --git a/README.md b/README.md
@@ -39,32 +39,30 @@ hawk is an AI-powered coding agent that lives in your terminal. It reads your co
 - **Privacy-first** — your code never leaves your machine except to the LLM API you choose
 - **Extensible** — 40+ built-in tools, MCP server support, community skill registry
 
-## Quick Start
+## Status
+
+**Hawk is in active development.** There is no public install script or release channel yet. We are building features, tests, and hardening in the open.
+
+Follow [GrayCode](https://github.com/GrayCodeAI) for progress. When Hawk is ready to try, we will announce it on [graycodeai.gateandtech.in](https://graycodeai.gateandtech.in/changelog).
+
+## Quick Start (contributors — from source)
 
 ```bash
-# Install
-brew install GrayCodeAI/tap/hawk
+git clone https://github.com/GrayCodeAI/hawk && cd hawk
+go build -o hawk ./cmd/hawk
+./hawk
 
 # First run — paste API key in /config (stored in macOS Keychain / Linux keyring)
-hawk
-
 # Verify readiness
-hawk path
+./hawk path
 ```
 
 See [docs/SECURITY-DEVELOPER.md](docs/SECURITY-DEVELOPER.md) for the credential model. Do not put API keys in shell env or `.env` for hawk.
 
-Or install via other methods:
+Optional for contributors:
 
 ```bash
-# Go install
-go install github.com/GrayCodeAI/hawk@latest
-
-# Install script (with checksum verification)
-curl -fsSL https://raw.githubusercontent.com/GrayCodeAI/hawk/main/install.sh | sh
-
-# From source
-git clone https://github.com/GrayCodeAI/hawk && cd hawk && go build ./cmd/hawk
+go install github.com/GrayCodeAI/hawk@latest   # requires a published tag
 ```
 
 ## Features
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-0.1.0
+0.1.0
diff --git a/docs/compatibility.md b/docs/compatibility.md
@@ -15,7 +15,7 @@ Platform/provider capability metadata is separate: [`platform-capabilities.json`
   "components":   ["hawk", "eyrie", ...],   // canonical eco roster
   "dependencies": { "hawk": ["eyrie", ...] }, // who depends on who
   "matrices": [
-    { "name": "stable", "components": { "hawk": "0.2.0", "eyrie": "0.2.0", ... } },
+    { "name": "stable", "components": { "hawk": "0.1.0", "eyrie": "0.1.0", ... } },
     { "name": "next",   "components": { "hawk": "main",  "eyrie": "main",  ... } }
   ]
 }
diff --git a/docs/versioning.md b/docs/versioning.md
@@ -5,7 +5,7 @@ repository that follows this layout. Adopted 2026-05-14.
 
 ## TL;DR
 
-- Every repo has a `VERSION` file at the root (plain text, e.g. `0.2.0`).
+- Every repo has a `VERSION` file at the root (plain text, e.g. `0.1.0`).
 - `VERSION` is the single source of truth — everything else (code, build
   tooling, release tooling, CI, package metadata) reads from it.
 - Versions are independent per repo, following [SemVer](https://semver.org).
@@ -98,7 +98,7 @@ func init() {
 
 ## What's banned
 
-- Hardcoding a version in source code (e.g. `const Version = "0.2.0"`). Always
+- Hardcoding a version in source code (e.g. `const Version = "0.1.0"`). Always
   read from `VERSION` or a build-time injection.
 - Maintaining a version string in two places (e.g. `pyproject.toml` AND
   `_version.py`) — they drift, always.
diff --git a/flake.nix b/flake.nix
@@ -13,7 +13,7 @@
         
         hawk = pkgs.buildGoModule rec {
           pname = "hawk";
-          version = "0.2.0";
+          version = "0.1.0";
           
           src = ./.;
           
diff --git a/internal/engine/project/dep_updater_test.go b/internal/engine/project/dep_updater_test.go
@@ -36,7 +36,7 @@ func TestClassifyUpdate_Minor(t *testing.T) {
 		{"v1.0.0", "v1.1.0", "minor"},
 		{"v2.1.0", "v2.3.0", "minor"},
 		{"v1.0.0", "v1.5.3", "minor"},
-		{"0.1.0", "0.2.0", "minor"},
+		{"0.1.0", "0.1.0", "minor"},
 	}
 
 	for _, tt := range tests {
diff --git a/internal/engine/scaffold/patterns_test.go b/internal/engine/scaffold/patterns_test.go
@@ -216,7 +216,7 @@ func TestRegisterAndRemove(t *testing.T) {
 		Description:  "Updated description",
 		SystemPrompt: "You are very helpful.",
 		UserTemplate: "Please: {{INPUT}}",
-		Version:      "0.2.0",
+		Version:      "0.1.0",
 		Author:       "test",
 	}
 	pl.Register(p2)
diff --git a/internal/jsonc/jsonc.go b/internal/jsonc/jsonc.go
@@ -11,7 +11,7 @@
 // normal Go interface{} (or other target type) populated as if
 // the comments were never there.
 //
-// Source: github.com/JuliusBrussee/caveman,
+// GrayCode native implementation.
 // bin/lib/settings.js (parseJSONC). Ported to native Go.
 package jsonc
 
diff --git a/internal/jsonc/jsonc_test.go b/internal/jsonc/jsonc_test.go
@@ -109,7 +109,7 @@ func TestUnmarshal_UnterminatedBlockComment(t *testing.T) {
 
 func TestUnmarshal_RealisticClaudeSettings(t *testing.T) {
 	// A realistic Claude Code settings.json with comments and trailing
-	// commas, like the caveman settings.js writes.
+	// commas, like validated settings files may include.
 	src := []byte(`{
   // Permissions configuration
   "permissions": {
diff --git a/internal/jsonc/validate.go b/internal/jsonc/validate.go
@@ -1,6 +1,6 @@
 // validate.go: pre-write validation for Claude Code settings fields.
 //
-// The caveman validateHookFields function (bin/lib/settings.js)
+// Settings.json hook-field validation.
 // performs a Zod-style pre-check on Claude Code settings.json before
 // writing. This file ports that check to native Go, using the
 // encoding/json conventions of the existing internal/config package.
diff --git a/internal/jsonc/validate_test.go b/internal/jsonc/validate_test.go
@@ -236,7 +236,7 @@ func TestValidate_IncludeCoAuthoredBy(t *testing.T) {
 }
 
 func TestValidate_RealisticDocument(t *testing.T) {
-	// The exact document format from the caveman settings.js test
+	// The exact document format from settings validation tests
 	src := []byte(`{
 		"model": "claude-sonnet-4-6",
 		"permissions": {
diff --git a/internal/multiagent/agents/persona.go b/internal/multiagent/agents/persona.go
@@ -816,7 +816,7 @@ func BuiltinPersonas() []*Persona {
 			},
 			CreatedAt: now,
 		},
-		// --- Cavecrew personas (ported from JuliusBrussee/caveman) ---
+		// --- Cavecrew personas (built into GrayCode Hawk) ---
 		// Three compact, opinionated personas for multi-agent crews.
 		// Each enforces a strict output format so downstream agents
 		// can parse the output mechanically.
@@ -892,7 +892,7 @@ func BuiltinPersonas() []*Persona {
 }
 
 // CavecrewPersonas returns just the three cavecrew personas
-// (investigator, builder, reviewer) ported from JuliusBrussee/caveman.
+// (investigator, builder, reviewer) built into GrayCode Hawk.
 // These are a strict, format-driven subset of the full BuiltinPersonas
 // list; callers that want only the cavecrew subset can use this
 // function instead of BuiltinPersonas.
@@ -992,7 +992,7 @@ func (r *PersonaRegistry) EnsureBuiltins() error {
 
 // EnsureCavecrew creates just the three cavecrew personas
 // (investigator, builder, reviewer) if they do not exist. Callers
-// who want only the caveman-format-driven subset can call this
+// who want only the compact-format-driven subset can call this
 // instead of EnsureBuiltins.
 //
 // Cavecrew personas are already part of BuiltinPersonas, so calling
diff --git a/internal/permissions/verdict.go b/internal/permissions/verdict.go
@@ -8,7 +8,7 @@
 // level (low/medium/high/blocked) and a Rule string identifying
 // which check fired.
 //
-// Source: github.com/JuliusBrussee/caveman, hooks/permission.js
+// GrayCode native implementation. hooks/permission.js
 // (PermissionVerdict). Ported to native Go.
 package permissions
 
diff --git a/internal/providers/providers.go b/internal/providers/providers.go
@@ -1,5 +1,5 @@
 // Package providers catalogs the AI coding agents that hawk can be
-// invoked from. The matrix is ported from JuliusBrussee/caveman's
+// invoked from. The matrix is built into GrayCode Hawk's
 // bin/install.js (PROVIDERS array, 34 entries) and adapted to native Go.
 //
 // Each entry in the matrix describes:
@@ -17,7 +17,7 @@
 // The Detected field is populated by Detect() when a probe succeeds
 // (e.g. the command is on PATH, the directory exists, etc.).
 //
-// Source: github.com/JuliusBrussee/caveman, bin/install.js.
+// GrayCode native implementation. bin/install.js.
 // Ported to native Go.
 package providers
 
@@ -341,7 +341,7 @@ func macAppPresent(name string) bool {
 // needle is present in ~/.config/JetBrains/<product>/plugins or
 // ~/Library/Application Support/JetBrains/<product>/plugins.
 //
-// Implementation note: the caveman version is more thorough (walks
+// Implementation note: a full directory walk variant is more thorough (walks
 // every product dir). This port covers the common cases; extend
 // per-product as needed.
 func jetbrainsPluginPresent(needle string) bool {
diff --git a/internal/safewrite/safewrite.go b/internal/safewrite/safewrite.go
@@ -4,7 +4,7 @@
 // protects against common symlink and permission attacks.
 //
 // The function in this package — WriteFile — performs the same
-// security checks as caveman's safeWriteFlag:
+// hardened atomic write security checks:
 //
 //  1. Refuses to follow symlinks (O_NOFOLLOW).
 //  2. Writes to a temporary file in the same directory first.
@@ -14,7 +14,7 @@
 //  5. Refuses to operate on paths that already exist as symlinks
 //     pointing elsewhere (TOCTOU-resistant).
 //
-// Source: github.com/JuliusBrussee/caveman,
+// GrayCode native implementation.
 // bin/install.js (safeWriteFlag). Ported to native Go.
 //
 // This is a low-level utility intended for hooks and other code
diff --git a/internal/session/session_gain.go b/internal/session/session_gain.go
@@ -7,7 +7,7 @@
 // session and per-day aggregations are available without joining
 // against an external DB.
 //
-// Source: similar in spirit to rtk-ai/rtk's src/core/tracking.rs
+// Per-session gain tracking for compression stats
 // and tok's internal/tracking, but session-scoped.
 //
 // Usage:
diff --git a/internal/update/update_test.go b/internal/update/update_test.go
@@ -89,7 +89,7 @@ func TestCheck(t *testing.T) {
 
 	t.Run("no update available", func(t *testing.T) {
 		release := ReleaseInfo{
-			TagName: "v0.2.0",
+			TagName: "v0.1.0",
 			Name:    "Current Release",
 		}
 		server := testutil.NewLoopbackHTTPServer(t, http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
@@ -102,7 +102,7 @@ func TestCheck(t *testing.T) {
 		setUpdateURL(server.URL)
 		defer setUpdateURL(origURL)
 
-		result, err := Check("0.2.0")
+		result, err := Check("0.1.0")
 		if err != nil {
 			t.Fatalf("Check() error = %v", err)
 		}
@@ -121,7 +121,7 @@ func TestCheck(t *testing.T) {
 		setUpdateURL(server.URL)
 		defer setUpdateURL(origURL)
 
-		_, err := Check("0.2.0")
+		_, err := Check("0.1.0")
 		if err == nil {
 			t.Error("Check() should return error on server failure")
 		}
@@ -138,7 +138,7 @@ func TestCheck(t *testing.T) {
 		setUpdateURL(server.URL)
 		defer setUpdateURL(origURL)
 
-		_, err := Check("0.2.0")
+		_, err := Check("0.1.0")
 		if err == nil {
 			t.Error("Check() should return error on invalid JSON")
 		}
@@ -149,7 +149,7 @@ func TestCheck(t *testing.T) {
 		setUpdateURL("http://" + testutil.LoopbackHost + ":1")
 		defer setUpdateURL(origURL)
 
-		_, err := Check("0.2.0")
+		_, err := Check("0.1.0")
 		if err == nil {
 			t.Error("Check() should return error for unreachable server")
 		}
@@ -184,7 +184,7 @@ func TestSummary(t *testing.T) {
 	})
 
 	t.Run("up to date", func(t *testing.T) {
-		release := ReleaseInfo{TagName: "v0.2.0"}
+		release := ReleaseInfo{TagName: "v0.1.0"}
 		server := testutil.NewLoopbackHTTPServer(t, http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 			w.Header().Set("Content-Type", "application/json")
 			_ = json.NewEncoder(w).Encode(release)
@@ -195,7 +195,7 @@ func TestSummary(t *testing.T) {
 		setUpdateURL(server.URL)
 		defer setUpdateURL(origURL)
 
-		result := Summary("0.2.0")
+		result := Summary("0.1.0")
 		if !strings.Contains(result, "up to date") {
 			t.Errorf("Summary() = %q, want to contain 'up to date'", result)
 		}
diff --git a/testdata/compatibility-matrix.json b/testdata/compatibility-matrix.json
@@ -31,14 +31,14 @@
       "description": "Latest tested-together stable combination across the eco. This is what new users get when installing.",
       "components": {
         "hawk":            "0.1.0",
-        "hawk-sdk-go":     "0.2.0",
-        "hawk-sdk-python": "0.2.0",
+        "hawk-sdk-go":     "0.1.0",
+        "hawk-sdk-python": "0.1.0",
         "eyrie":           "0.1.0",
-        "sight":           "0.2.0",
-        "inspect":         "0.2.0",
-        "tok":             "0.2.0",
-        "yaad":            "0.2.0",
-        "trace":           "0.2.0"
+        "sight":           "0.1.0",
+        "inspect":         "0.1.0",
+        "tok":             "0.1.0",
+        "yaad":            "0.1.0",
+        "trace":           "0.1.0"
       }
     },
     {

Original file line number	Diff line number	Diff line change
@@ -15,7 +15,7 @@ Platform/provider capability metadata is separate: [`platform-capabilities.json`
`15`	`15`	`"components": ["hawk", "eyrie", ...], // canonical eco roster`
`16`	`16`	`"dependencies": { "hawk": ["eyrie", ...] }, // who depends on who`
`17`	`17`	`"matrices": [`
`18`		`- { "name": "stable", "components": { "hawk": "0.2.0", "eyrie": "0.2.0", ... } },`
	`18`	`+ { "name": "stable", "components": { "hawk": "0.1.0", "eyrie": "0.1.0", ... } },`
`19`	`19`	`{ "name": "next", "components": { "hawk": "main", "eyrie": "main", ... } }`
`20`	`20`	`]`
`21`	`21`	`}`
Original file line number	Diff line number	Diff line change
`@@ -36,7 +36,7 @@ func TestClassifyUpdate_Minor(t *testing.T) {`
`36`	`36`	`{"v1.0.0", "v1.1.0", "minor"},`
`37`	`37`	`{"v2.1.0", "v2.3.0", "minor"},`
`38`	`38`	`{"v1.0.0", "v1.5.3", "minor"},`
`39`		`- {"0.1.0", "0.2.0", "minor"},`
	`39`	`+ {"0.1.0", "0.1.0", "minor"},`
`40`	`40`	`}`
`41`	`41`
`42`	`42`	`for _, tt := range tests {`
Original file line number	Diff line number	Diff line change
`@@ -216,7 +216,7 @@ func TestRegisterAndRemove(t *testing.T) {`
`216`	`216`	`Description: "Updated description",`
`217`	`217`	`SystemPrompt: "You are very helpful.",`
`218`	`218`	`UserTemplate: "Please: {{INPUT}}",`
`219`		`- Version: "0.2.0",`
	`219`	`+ Version: "0.1.0",`
`220`	`220`	`Author: "test",`
`221`	`221`	`}`
`222`	`222`	`pl.Register(p2)`