roadmap(#218, #219): CC 2.1.118 follow-ups — MCP-tool hooks + #198 re-verify

ROADMAP.md

@@ -238,6 +238,8 @@ Living tracker of projects shipped using this wizard. **Rule:** only list projec
 | 90 | Distribution Channels Sprint | Multi-channel expansion beyond npm: (a) awesome-claude-code + awesome-claude-skills + SkillsMP submissions, (b) `install.sh` curl script, (c) Homebrew tap (`homebrew-sdlc-wizard` repo), (d) GitHub CLI extension (`gh-sdlc-wizard` repo, 30min), (e) GitHub Releases with CI automation, (f) Scoop bucket for Windows, (g) AUR package for Arch. Skip: Flatpak (rejects CLI), Snap (sandbox conflicts), .deb/.rpm (curl covers), pip/cargo/go (wrong ecosystem). Meta-tool: GH Actions release workflow auto-updates all channels on npm publish |
 | 91 | Multi-Agent Adapter Layer | Skills (SKILL.md) port directly to any AI agent. Hooks need per-agent adaptation: Codex (notify config), Cursor (.cursorrules + marketplace), Windsurf (.windsurfrules), Aider (conventions). Strategy: adapter layers per agent, not forks. Cursor marketplace submission is medium priority (1-2 days). Codex plugin: Stefan building this weekend. Also consider: Continue.dev, Amazon Q, GitHub Copilot Workspace |
 | 194 | ~~opencode SDLC Adapter~~ SUPERSEDED → see Next Up #9 | Expanded and promoted to Next Up #9 on 2026-04-22 with privacy-first / any-backend framing (local Ollama/LM Studio/vLLM, enterprise Azure OpenAI + internal gateways, hosted OSS). Original scope retained there plus backend-matrix proof phase |
+| 218 | Evaluate MCP-tool hooks (CC 2.1.118) | CC 2.1.118 introduced `type: "mcp_tool"` — hooks can now directly invoke MCP tools instead of bash scripts. Our 5 current hooks are all bash (`_find-sdlc-root.sh`, `sdlc-prompt-check.sh`, `tdd-pretool-check.sh`, `instructions-loaded-check.sh`, `model-effort-check.sh`, `precompact-seam-check.sh`). Audit whether any would benefit: candidate is a hook that wants to read/write structured state (e.g. a "score-history reader" hook that queries persisted JSON via an MCP tool instead of cat+jq). Prove-It Gate applies: don't rewrite a working bash hook as an MCP call unless quality improves. Default answer is leave them — bash hooks are portable to Codex/OpenCode; MCP hooks may not be |
+| 219 | Re-verify #198 model-pin guidance against CC 2.1.117 persistence change | CC 2.1.117 changelog: "Model selections now persist across restarts despite project-level pins." Our #198 fix removed the top-level `"model": "opus[1m]"` from `.claude/settings.json` because it disables CC auto-mode. Verify the new persistence behavior doesn't break or change that recommendation: does "persist across restarts" mean session-picked model is now remembered (good, orthogonal), or does it mean project pins are re-asserted across restarts (could conflict with our migration path)? Test by removing the pin, picking Opus 4.7 mid-session, restarting CC, checking which model is active. Zero-API, ~10 min |
 | 223 | Adopt GPT-5.5 in review-tier guidance | **Status 2026-04-23:** GPT-5.5 confirmed released by OpenAI ([announcement](https://openai.com/index/introducing-gpt-5-5/)). **Two variants:** standard GPT-5.5 ($5/$30 per MTok input/output, rolling out to Plus/Pro/Business/Enterprise in ChatGPT **and Codex**) and GPT-5.5 Pro ($30/$180 per MTok, **ChatGPT-only** per rollout notes — API availability unclear on announcement day). For our Codex-CLI-backed cross-model review, **standard 5.5 is the usable ceiling** — Pro isn't in Codex. Pricing vs Opus 4.7 ($5/$25): GPT-5.5 is a 20% output premium; GPT-5.5 Pro is 6× standard — reserve for release-blocker / critical-infra one-offs. Supports xhigh reasoning effort, matches GPT-5.4 per-token latency, "especially strong in agentic coding, computer use... holding context across large systems, reasoning through ambiguous failures." Senior-engineer feedback quoted in the announcement says GPT-5.5 is "noticeably stronger than GPT-5.4 **and Claude Opus 4.7** at reasoning and autonomy" — if that holds in our harness, it changes our tiered-model strategy meaningfully. Codex CLI v0.124.0 (shipped the same day) does **not** mention 5.5 in release notes yet — needs either a CLI bump or `-c model="gpt-5.5"` override to verify availability. **Actions:** (a) confirm 5.5 is actually selectable from our current Codex CLI (try `codex exec -c model="gpt-5.5" ...` on a small prompt); (b) if yes, run the calibration: replay 3-5 historical `.reviews/*` handoffs with 5.5 xhigh and compare P1 counts vs the 5.4-xhigh reviews already on file — prove-it before we recommend switching; (c) if 5.5 is significantly stronger than Opus 4.7 on review work, revisit tiered-model roles: maybe Opus 4.7 codes + **GPT-5.5 reviews** for Complex (current plan), but also consider GPT-5.5 as executor for Light paths (replacing 5.4-mini) if latency/cost match; (d) update `CLAUDE_CODE_SDLC_WIZARD.md` cross-model-review section and SDLC skill's default codex-exec command once calibration confirms. Calibration replay cost ≈ $3-5 (a few handoffs × xhigh review). Blocker: CLI-side 5.5 availability |
 | 195 | ~~Dynamic effort auto-bump hook~~ DONE | `sdlc-prompt-check.sh` now reads the UserPromptSubmit payload, scans for first-person LOW/FAILED/CONFUSED phrases (`i'm stuck`, `i'm confused`, `i tried twice`, `i can't figure`, `i'm not sure why`, `my confidence is low`, `confidence: low`, `it's still failing`, `it keeps failing`, `it failed again`, `failed twice`, plus contraction variants), and logs a timestamped signal to `$SDLC_WIZARD_CACHE_DIR/effort-signals.log`. When ≥2 signals land inside a 30-minute window, the hook emits a loud `!! EFFORT BUMP REQUIRED !!` block with the exact `/effort xhigh` command. Safety: writes wrapped in `{ ... } 2>/dev/null || true` so `HOME`-unset / unwritable-cache leaks no stderr. Log capped by pruning entries >1h old on write. 8 quality tests: writes-signal, no-signal-on-neutral, nudge-on-2-recent (requires BOTH marker AND `/effort xhigh`), silent-on-1, old-signals-ignored, no-log-on-ambient-mention (7 Codex-flagged ambient prompts), silent-stderr-on-unwritable-cache, prunes-stale-log-entries. Each fix backed by an independently-verifiable negative control |
 | 196 | ~~Wizard staleness nudge (N-releases-behind)~~ DONE | `instructions-loaded-check.sh` now caches npm latest for 24h in `$SDLC_WIZARD_CACHE_DIR` (default `~/.cache/sdlc-wizard/`) and prints a loud multi-line `!! WARNING: SDLC Wizard is N minor versions behind !!` when the gap is ≥3 minor (delta computed from the `<!-- SDLC Wizard Version -->` metadata). 1–2 minor keeps the existing mild one-liner so we don't over-warn. 3 new hook tests: loud-when-≥3, mild-when-2, uses-daily-cache. Negative control proved the loud branch is actually gated |