@cleocode/core 2026.3.76 → 2026.4.0

package/dist/sessions/session-archive.js

@@ -0,0 +1,40 @@
+/**
+ * Archive old/ended sessions.
+ *
+ * @task T4782
+ * @epic T4654
+ */
+import { getAccessor } from '../store/data-accessor.js';
+/**
+ * Archive old/ended sessions.
+ * Identifies ended and suspended sessions older than the threshold.
+ * With SQLite, all sessions live in a single table — "archiving" marks them
+ * as identified for potential cleanup rather than moving between arrays.
+ */
+export async function archiveSessions(projectRoot, olderThan) {
+    const accessor = await getAccessor(projectRoot);
+    const sessions = await accessor.loadSessions();
+    if (!sessions || sessions.length === 0) {
+        return { archived: [], count: 0 };
+    }
+    const archivedIds = [];
+    for (const session of sessions) {
+        if (session.status === 'active')
+            continue;
+        // Only archive ended, orphaned, or suspended sessions
+        if (session.status !== 'ended' &&
+            session.status !== 'orphaned' &&
+            session.status !== 'suspended')
+            continue;
+        // Check age threshold
+        if (olderThan) {
+            const sessionDate = session.endedAt || session.startedAt;
+            if (sessionDate && new Date(sessionDate) > new Date(olderThan)) {
+                continue;
+            }
+        }
+        archivedIds.push(session.id);
+    }
+    return { archived: archivedIds, count: archivedIds.length };
+}
+//# sourceMappingURL=session-archive.js.map

package/dist/sessions/session-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-archive.js","sourceRoot":"","sources":["../../src/sessions/session-archive.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB,EACnB,SAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;IAE/C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;YAAE,SAAS;QAC1C,sDAAsD;QACtD,IACE,OAAO,CAAC,MAAM,KAAK,OAAO;YAC1B,OAAO,CAAC,MAAM,KAAK,UAAU;YAC7B,OAAO,CAAC,MAAM,KAAK,WAAW;YAE9B,SAAS;QAEX,sBAAsB;QACtB,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC;YACzD,IAAI,WAAW,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/D,SAAS;YACX,CAAC;QACH,CAAC;QAED,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;AAC9D,CAAC"}

package/dist/sessions/session-cleanup.js

@@ -0,0 +1,59 @@
+/**
+ * Remove orphaned sessions and clean up stale data.
+ *
+ * @task T4782
+ * @task T2304
+ * @epic T4654
+ */
+import { getRawConfigValue } from '../config.js';
+import { getAccessor } from '../store/data-accessor.js';
+/** Default auto-end threshold when no config is set (7 days). */
+const DEFAULT_AUTO_END_DAYS = 7;
+/**
+ * Remove orphaned sessions, auto-end stale active sessions, and clean up stale data.
+ *
+ * Stale active sessions (no activity beyond the configured threshold) are
+ * transitioned to 'ended' with an auto-end note. The threshold is read from
+ * `retention.autoEndActiveAfterDays` in the project config (default: 7 days).
+ *
+ * @task T2304
+ */
+export async function cleanupSessions(projectRoot) {
+    const accessor = await getAccessor(projectRoot);
+    const sessions = await accessor.loadSessions();
+    if (sessions.length === 0) {
+        return { removed: [], autoEnded: [], cleaned: false };
+    }
+    const removed = [];
+    const autoEnded = [];
+    // Read auto-end threshold from config
+    const configDays = await getRawConfigValue('retention.autoEndActiveAfterDays', projectRoot);
+    const autoEndDays = typeof configDays === 'number' && configDays > 0 ? configDays : DEFAULT_AUTO_END_DAYS;
+    const autoEndMs = autoEndDays * 24 * 60 * 60 * 1000;
+    const now = Date.now();
+    for (const session of sessions) {
+        // Auto-end stale active sessions (T2304)
+        if (session.status === 'active') {
+            const sessionTime = new Date(session.startedAt).getTime();
+            if (now - sessionTime > autoEndMs) {
+                session.status = 'ended';
+                session.endedAt = new Date().toISOString();
+                if (!session.notes)
+                    session.notes = [];
+                session.notes.push(`Auto-ended: session exceeded ${autoEndDays}-day inactivity threshold`);
+                autoEnded.push(session.id);
+                await accessor.upsertSingleSession(session);
+            }
+        }
+        // Identify archived sessions to remove
+        if (session.status === 'archived') {
+            removed.push(session.id);
+        }
+    }
+    // Remove archived sessions
+    for (const id of removed) {
+        await accessor.removeSingleSession(id);
+    }
+    return { removed, autoEnded, cleaned: removed.length > 0 || autoEnded.length > 0 };
+}
+//# sourceMappingURL=session-cleanup.js.map

package/dist/sessions/session-cleanup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-cleanup.js","sourceRoot":"","sources":["../../src/sessions/session-cleanup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,iEAAiE;AACjE,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;IAE/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,sCAAsC;IACtC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,kCAAkC,EAAE,WAAW,CAAC,CAAC;IAC5F,MAAM,WAAW,GACf,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACxF,MAAM,SAAS,GAAG,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,yCAAyC;QACzC,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1D,IAAI,GAAG,GAAG,WAAW,GAAG,SAAS,EAAE,CAAC;gBAClC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;gBACzB,OAAO,CAAC,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC3C,IAAI,CAAC,OAAO,CAAC,KAAK;oBAAE,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC;gBACvC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,WAAW,2BAA2B,CAAC,CAAC;gBAC3F,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAC3B,MAAM,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAK,OAAO,CAAC,MAAiB,KAAK,UAAU,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;AACrF,CAAC"}

package/dist/sessions/session-drift.js

@@ -0,0 +1,134 @@
+/**
+ * Compute context drift score for a session.
+ *
+ * @task T4782
+ * @epic T4654
+ */
+import { ExitCode } from '@cleocode/contracts';
+import { CleoError } from '../errors.js';
+import { getAccessor } from '../store/data-accessor.js';
+/**
+ * Collect all descendant task IDs for a given parent task.
+ */
+function collectDescendantIds(parentId, tasks) {
+    const result = new Set();
+    for (const task of tasks) {
+        if (task.parentId === parentId) {
+            result.add(task.id);
+            const grandchildren = collectDescendantIds(task.id, tasks);
+            for (const gc of grandchildren) {
+                result.add(gc);
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Compute context drift score for the current session.
+ * Compares session progress against original scope by counting
+ * completed vs total tasks in scope, and detecting out-of-scope work.
+ */
+export async function getContextDrift(projectRoot, params) {
+    const accessor = await getAccessor(projectRoot);
+    const { tasks } = await accessor.queryTasks({});
+    const focus = await accessor.getMetaValue('focus_state');
+    const current = {
+        tasks,
+        focus: focus ?? undefined,
+    };
+    // Find the active session (or specified session)
+    let session;
+    if (params?.sessionId) {
+        const sessions = await accessor.loadSessions();
+        session = sessions.find((s) => s.id === params.sessionId);
+        if (!session) {
+            throw new CleoError(ExitCode.SESSION_NOT_FOUND, `Session '${params.sessionId}' not found`);
+        }
+    }
+    else {
+        const activeSession = await accessor.getActiveSession();
+        session = activeSession ?? undefined;
+    }
+    const factors = [];
+    // If no session with scope, compute a basic drift from focus state
+    if (!session) {
+        const focusTask = current.focus?.currentTask;
+        if (!focusTask) {
+            return {
+                score: 0,
+                factors: ['No active session or focus'],
+                completedInScope: 0,
+                totalInScope: 0,
+                outOfScope: 0,
+            };
+        }
+        const rootTaskId = focusTask;
+        const inScopeIds = collectDescendantIds(rootTaskId, tasks);
+        inScopeIds.add(rootTaskId);
+        const inScopeTasks = tasks.filter((t) => inScopeIds.has(t.id));
+        const completedInScope = inScopeTasks.filter((t) => t.status === 'done').length;
+        const totalInScope = inScopeTasks.length;
+        const score = totalInScope > 0 ? Math.round((completedInScope / totalInScope) * 100) : 0;
+        factors.push('Single-session mode (focus-based scope)');
+        if (completedInScope === 0)
+            factors.push('No tasks completed in scope yet');
+        return { score, factors, completedInScope, totalInScope, outOfScope: 0 };
+    }
+    // Multi-session: use session scope to determine in-scope tasks
+    const rootTaskId = session.scope.rootTaskId ?? session.scope.epicId ?? '';
+    const inScopeIds = new Set();
+    if (session.scope.explicitTaskIds && session.scope.explicitTaskIds.length > 0) {
+        for (const id of session.scope.explicitTaskIds) {
+            inScopeIds.add(id);
+        }
+    }
+    else {
+        inScopeIds.add(rootTaskId);
+        if (session.scope.includeDescendants !== false) {
+            const descendants = collectDescendantIds(rootTaskId, tasks);
+            for (const id of descendants) {
+                inScopeIds.add(id);
+            }
+        }
+    }
+    if (session.scope.excludeTaskIds) {
+        for (const id of session.scope.excludeTaskIds) {
+            inScopeIds.delete(id);
+        }
+    }
+    const inScopeTasks = tasks.filter((t) => inScopeIds.has(t.id));
+    const completedInScope = inScopeTasks.filter((t) => t.status === 'done').length;
+    const totalInScope = inScopeTasks.length;
+    // Detect out-of-scope work: tasks completed during session that are NOT in scope
+    let outOfScope = 0;
+    const sessionStartTime = new Date(session.startedAt).getTime();
+    for (const task of tasks) {
+        if (!inScopeIds.has(task.id) && task.status === 'done') {
+            const completedAt = typeof task.completedAt === 'string' ? new Date(task.completedAt).getTime() : 0;
+            if (completedAt >= sessionStartTime) {
+                outOfScope++;
+            }
+        }
+    }
+    // Calculate drift score (0 = no progress, 100 = all done in scope)
+    let score = 0;
+    if (totalInScope > 0) {
+        const progressRatio = completedInScope / totalInScope;
+        const driftPenalty = outOfScope > 0 ? Math.min(outOfScope / totalInScope, 0.5) : 0;
+        score = Math.round(Math.max(0, Math.min(100, progressRatio * 100 - driftPenalty * 50)));
+    }
+    if (totalInScope === 0)
+        factors.push('No tasks found in session scope');
+    if (completedInScope === 0 && totalInScope > 0)
+        factors.push('No tasks completed in scope yet');
+    if (completedInScope === totalInScope && totalInScope > 0)
+        factors.push('All in-scope tasks completed');
+    if (outOfScope > 0)
+        factors.push(`${outOfScope} task(s) completed outside of session scope`);
+    if (outOfScope === 0 && completedInScope > 0)
+        factors.push('All completed work is within scope');
+    if (session.scope.type)
+        factors.push(`Scope type: ${session.scope.type}`);
+    return { score, factors, completedInScope, totalInScope, outOfScope };
+}
+//# sourceMappingURL=session-drift.js.map

package/dist/sessions/session-drift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-drift.js","sourceRoot":"","sources":["../../src/sessions/session-drift.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAUxD;;GAEG;AACH,SAAS,oBAAoB,CAAC,QAAgB,EAAE,KAAa;IAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,MAAM,aAAa,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC3D,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB,EACnB,MAA+B;IAE/B,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAgB,aAAa,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG;QACd,KAAK;QACL,KAAK,EAAE,KAAK,IAAI,SAAS;KAC1B,CAAC;IAEF,iDAAiD;IACjD,IAAI,OAA4B,CAAC;IAEjC,IAAI,MAAM,EAAE,SAAS,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC/C,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,YAAY,MAAM,CAAC,SAAS,aAAa,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACxD,OAAO,GAAG,aAAa,IAAI,SAAS,CAAC;IACvC,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,mEAAmE;IACnE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC;QAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,CAAC,4BAA4B,CAAC;gBACvC,gBAAgB,EAAE,CAAC;gBACnB,YAAY,EAAE,CAAC;gBACf,UAAU,EAAE,CAAC;aACd,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,SAAS,CAAC;QAC7B,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC3D,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE3B,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;QAChF,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC;QAEzC,MAAM,KAAK,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACxD,IAAI,gBAAgB,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAE5E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED,+DAA+D;IAC/D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;IAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,IAAI,OAAO,CAAC,KAAK,CAAC,eAAe,IAAI,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9E,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YAC/C,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;YAC/C,MAAM,WAAW,GAAG,oBAAoB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC5D,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;gBAC7B,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACjC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC9C,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IAChF,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC;IAEzC,iFAAiF;IACjF,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACvD,MAAM,WAAW,GACf,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,IAAI,WAAW,IAAI,gBAAgB,EAAE,CAAC;gBACpC,UAAU,EAAE,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,aAAa,GAAG,gBAAgB,GAAG,YAAY,CAAC;QACtD,MAAM,YAAY,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,GAAG,GAAG,GAAG,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,YAAY,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACxE,IAAI,gBAAgB,KAAK,CAAC,IAAI,YAAY,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAChG,IAAI,gBAAgB,KAAK,YAAY,IAAI,YAAY,GAAG,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC/C,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,6CAA6C,CAAC,CAAC;IAC7F,IAAI,UAAU,KAAK,CAAC,IAAI,gBAAgB,GAAG,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACjG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAE1E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AACxE,CAAC"}

package/dist/sessions/session-enforcement.js

@@ -0,0 +1,144 @@
+/**
+ * Session enforcement - require active sessions for write operations.
+ *
+ * Part of the Epic-Bound Session architecture. Enforces that write operations
+ * (add, update, complete) require an active session.
+ *
+ * @task T4454
+ * @epic T4454
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { ExitCode } from '@cleocode/contracts';
+import { CleoError } from '../errors.js';
+import { getCleoDir } from '../paths.js';
+import { sessionStatus } from './index.js';
+/** Synchronous config value reader. */
+function readConfigValueSync(path, defaultValue, cwd) {
+    try {
+        const configPath = join(getCleoDir(cwd), 'config.json');
+        if (!existsSync(configPath))
+            return defaultValue;
+        const config = JSON.parse(readFileSync(configPath, 'utf-8'));
+        const keys = path.split('.');
+        let value = config;
+        for (const key of keys) {
+            if (value == null || typeof value !== 'object')
+                return defaultValue;
+            value = value[key];
+        }
+        return value ?? defaultValue;
+    }
+    catch {
+        return defaultValue;
+    }
+}
+/** Get the current enforcement mode. */
+export function getEnforcementMode(cwd) {
+    // CLEO_TEST_MODE disables enforcement in vitest — tests validate enforcement
+    // logic directly via unit tests, not via side effects during data setup.
+    if (process.env.VITEST)
+        return 'none';
+    try {
+        const requiredForMutate = readConfigValueSync('enforcement.session.requiredForMutate', true, cwd);
+        if (requiredForMutate === false)
+            return 'none';
+        // Legacy mode fallback from config
+        const mode = readConfigValueSync('session.enforcement', 'strict', cwd);
+        if (mode === 'strict' || mode === 'warn' || mode === 'none')
+            return mode;
+        return 'strict'; // Default
+    }
+    catch {
+        return 'strict';
+    }
+}
+/** Check if session enforcement is enabled. */
+export function isSessionEnforcementEnabled(cwd) {
+    return getEnforcementMode(cwd) !== 'none';
+}
+/** Get active session info. Returns null if no active session. */
+export async function getActiveSessionInfo(cwd) {
+    const session = await sessionStatus(cwd);
+    if (!session)
+        return null;
+    return {
+        id: session.id,
+        name: session.name,
+        scope: session.scope,
+    };
+}
+/**
+ * Require an active session for write operations.
+ * In strict mode, throws if no session is active.
+ * In warn mode, returns a warning but allows the operation.
+ * In none mode, always allows.
+ */
+export async function requireActiveSession(operation, cwd) {
+    const mode = getEnforcementMode(cwd);
+    if (mode === 'none') {
+        return { allowed: true, mode, session: null };
+    }
+    const session = await getActiveSessionInfo(cwd);
+    if (session) {
+        return { allowed: true, mode, session };
+    }
+    // No active session
+    if (mode === 'strict') {
+        throw new CleoError(ExitCode.SESSION_REQUIRED, `Operation '${operation}' requires an active session`, {
+            fix: 'Start a session with \'cleo session start --scope epic:T### --auto-start --name "Work"\'',
+            alternatives: [
+                {
+                    action: 'Start session',
+                    command: 'cleo session start --scope epic:T001 --auto-start --name "Work"',
+                },
+                { action: 'List sessions', command: 'cleo session list' },
+            ],
+        });
+    }
+    // Warn mode
+    return {
+        allowed: true,
+        mode,
+        session: null,
+        warning: `No active session for operation '${operation}'. Consider starting one.`,
+    };
+}
+/**
+ * Validate that a task is within the current session's scope.
+ * Only enforced when a session is active.
+ */
+export async function validateTaskInScope(taskId, taskEpicId, cwd) {
+    const mode = getEnforcementMode(cwd);
+    if (mode === 'none')
+        return { inScope: true };
+    const session = await getActiveSessionInfo(cwd);
+    if (!session)
+        return { inScope: true }; // No session = no scope enforcement
+    // Global scope allows everything
+    if (session.scope.type === 'global')
+        return { inScope: true };
+    // Epic scope: task must be within the session's epic
+    if (session.scope.type === 'epic' && session.scope.epicId) {
+        const epicId = session.scope.epicId;
+        // Task is the epic itself or is a child
+        if (taskId === epicId || taskEpicId === epicId) {
+            return { inScope: true };
+        }
+        if (mode === 'strict') {
+            throw new CleoError(ExitCode.TASK_NOT_IN_SCOPE, `Task ${taskId} is not in scope of session ${session.id} (epic: ${epicId})`, {
+                fix: `Focus on tasks within epic ${epicId} or start a new session`,
+                alternatives: [
+                    { action: 'View session', command: `cleo session status` },
+                    { action: 'End session', command: `cleo session end` },
+                ],
+            });
+        }
+        return {
+            inScope: false,
+            warning: `Task ${taskId} is outside session scope (epic: ${epicId})`,
+        };
+    }
+    return { inScope: true };
+}
+//# sourceMappingURL=session-enforcement.js.map

package/dist/sessions/session-enforcement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-enforcement.js","sourceRoot":"","sources":["../../src/sessions/session-enforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,uCAAuC;AACvC,SAAS,mBAAmB,CAAC,IAAY,EAAE,YAAqB,EAAE,GAAY;IAC5E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,YAAY,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,GAAY,MAAM,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,YAAY,CAAC;YACpE,KAAK,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,IAAI,YAAY,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC;AAKD,wCAAwC;AACxC,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,iBAAiB,GAAG,mBAAmB,CAC3C,uCAAuC,EACvC,IAAI,EACJ,GAAG,CACJ,CAAC;QACF,IAAI,iBAAiB,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC;QAE/C,mCAAmC;QACnC,MAAM,IAAI,GAAG,mBAAmB,CAAC,qBAAqB,EAAE,QAAQ,EAAE,GAAG,CAAW,CAAC;QACjF,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACzE,OAAO,QAAQ,CAAC,CAAC,UAAU;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,2BAA2B,CAAC,GAAY;IACtD,OAAO,kBAAkB,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC;AAC5C,CAAC;AASD,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAY;IACrD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC;AACJ,CAAC;AAUD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,GAAY;IAEZ,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAEhD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAED,oBAAoB;IACpB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,gBAAgB,EACzB,cAAc,SAAS,8BAA8B,EACrD;YACE,GAAG,EAAE,0FAA0F;YAC/F,YAAY,EAAE;gBACZ;oBACE,MAAM,EAAE,eAAe;oBACvB,OAAO,EAAE,iEAAiE;iBAC3E;gBACD,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,EAAE;aAC1D;SACF,CACF,CAAC;IACJ,CAAC;IAED,YAAY;IACZ,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,oCAAoC,SAAS,2BAA2B;KAClF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,UAAmB,EACnB,GAAY;IAEZ,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE9C,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,oCAAoC;IAE5E,iCAAiC;IACjC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAE9D,qDAAqD;IACrD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAEpC,wCAAwC;QACxC,IAAI,MAAM,KAAK,MAAM,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,SAAS,CACjB,QAAQ,CAAC,iBAAiB,EAC1B,QAAQ,MAAM,+BAA+B,OAAO,CAAC,EAAE,WAAW,MAAM,GAAG,EAC3E;gBACE,GAAG,EAAE,8BAA8B,MAAM,yBAAyB;gBAClE,YAAY,EAAE;oBACZ,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,EAAE;oBAC1D,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,EAAE;iBACvD;aACF,CACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,QAAQ,MAAM,oCAAoC,MAAM,GAAG;SACrE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/sessions/session-grade.js

@@ -0,0 +1,253 @@
+/**
+ * Session grading - rubric-based behavioral analysis of agent sessions.
+ *
+ * Reads audit log entries for a session and applies a 5-dimension rubric
+ * to score agent behavior:
+ *   - Session discipline (20pts)
+ *   - Discovery efficiency (20pts)
+ *   - Task hygiene (20pts)
+ *   - Error protocol (20pts)
+ *   - Progressive disclosure use (20pts)
+ *
+ * @task T4916
+ */
+import { existsSync } from 'node:fs';
+import { appendFile, mkdir, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { queryAudit } from '../audit.js';
+import { getCleoDirAbsolute } from '../paths.js';
+/**
+ * Grade a session by sessionId using the 5-dimension behavioral rubric.
+ */
+export async function gradeSession(sessionId, cwd) {
+    const sessionEntries = await queryAudit({ sessionId });
+    const result = {
+        sessionId,
+        totalScore: 0,
+        maxScore: 100,
+        dimensions: {
+            sessionDiscipline: { score: 0, max: 20, evidence: [] },
+            discoveryEfficiency: { score: 0, max: 20, evidence: [] },
+            taskHygiene: { score: 0, max: 20, evidence: [] },
+            errorProtocol: { score: 0, max: 20, evidence: [] },
+            disclosureUse: { score: 0, max: 20, evidence: [] },
+        },
+        flags: [],
+        timestamp: new Date().toISOString(),
+        entryCount: sessionEntries.length,
+    };
+    if (sessionEntries.length === 0) {
+        result.flags.push('No audit entries found for session (use --grade flag when starting session)');
+        await appendGradeResult(result, cwd);
+        return result;
+    }
+    // -- Dimension 1: Session Discipline (20pts) --
+    const sessionListCalls = sessionEntries.filter((e) => e.domain === 'session' && e.operation === 'list');
+    const sessionEndCalls = sessionEntries.filter((e) => e.domain === 'session' && e.operation === 'end');
+    const taskOps = sessionEntries.filter((e) => e.domain === 'tasks');
+    let disciplineScore = 0;
+    if (sessionListCalls.length > 0) {
+        const firstListTime = new Date(sessionListCalls[0].timestamp).getTime();
+        const firstTaskTime = taskOps.length > 0 ? new Date(taskOps[0].timestamp).getTime() : Infinity;
+        if (firstListTime <= firstTaskTime) {
+            disciplineScore += 10;
+            result.dimensions.sessionDiscipline.evidence.push('session.list called before first task op');
+        }
+        else {
+            result.flags.push('session.list called after task ops (should check sessions first)');
+        }
+    }
+    else {
+        result.flags.push('session.list never called (check existing sessions before starting)');
+    }
+    if (sessionEndCalls.length > 0) {
+        disciplineScore += 10;
+        result.dimensions.sessionDiscipline.evidence.push('session.end called');
+    }
+    else {
+        result.flags.push('session.end never called (always end sessions when done)');
+    }
+    result.dimensions.sessionDiscipline.score = disciplineScore;
+    // -- Dimension 2: Discovery Efficiency (20pts) --
+    const findCalls = sessionEntries.filter((e) => e.domain === 'tasks' && e.operation === 'find');
+    const listCalls = sessionEntries.filter((e) => e.domain === 'tasks' && e.operation === 'list');
+    const showCalls = sessionEntries.filter((e) => e.domain === 'tasks' && e.operation === 'show');
+    let discoveryScore = 0;
+    const totalDiscoveryCalls = findCalls.length + listCalls.length;
+    if (totalDiscoveryCalls > 0) {
+        const findRatio = findCalls.length / totalDiscoveryCalls;
+        if (findRatio >= 0.8) {
+            discoveryScore += 15;
+            result.dimensions.discoveryEfficiency.evidence.push(`find:list ratio ${(findRatio * 100).toFixed(0)}% >= 80%`);
+        }
+        else {
+            result.flags.push(`tasks.list used ${listCalls.length}x (prefer tasks.find for discovery)`);
+            discoveryScore += Math.round(15 * findRatio);
+        }
+    }
+    else {
+        discoveryScore += 10;
+        result.dimensions.discoveryEfficiency.evidence.push('No discovery calls needed');
+    }
+    if (showCalls.length > 0) {
+        discoveryScore = Math.min(20, discoveryScore + 5);
+        result.dimensions.discoveryEfficiency.evidence.push(`tasks.show used ${showCalls.length}x for detail`);
+    }
+    result.dimensions.discoveryEfficiency.score = Math.min(20, discoveryScore);
+    // -- Dimension 3: Task Hygiene (20pts) --
+    const addCalls = sessionEntries.filter((e) => e.domain === 'tasks' && e.operation === 'add' && e.result.success);
+    const existsCalls = sessionEntries.filter((e) => e.domain === 'tasks' && e.operation === 'exists');
+    let hygieneScore = 20;
+    for (const addCall of addCalls) {
+        const desc = addCall.params?.description;
+        if (!desc || desc.trim().length === 0) {
+            hygieneScore -= 5;
+            result.flags.push(`tasks.add without description (taskId: ${addCall.metadata?.taskId ?? 'unknown'})`);
+        }
+    }
+    const subtaskAdds = addCalls.filter((e) => e.params?.parent);
+    if (subtaskAdds.length > 0 && existsCalls.length > 0) {
+        result.dimensions.taskHygiene.evidence.push('Parent existence verified before subtask creation');
+    }
+    else if (subtaskAdds.length > 0) {
+        result.flags.push('Subtasks created without tasks.exists parent check');
+        hygieneScore -= 3;
+    }
+    if (addCalls.length > 0 && hygieneScore >= 20) {
+        result.dimensions.taskHygiene.evidence.push(`All ${addCalls.length} tasks.add calls had descriptions`);
+    }
+    result.dimensions.taskHygiene.score = Math.max(0, hygieneScore);
+    // -- Dimension 4: Error Protocol (20pts) --
+    const notFoundErrors = sessionEntries.filter((e) => !e.result.success && e.result.exitCode === 4);
+    let errorScore = 20;
+    for (const errEntry of notFoundErrors) {
+        const errIdx = sessionEntries.indexOf(errEntry);
+        const nextEntries = sessionEntries.slice(errIdx + 1, errIdx + 5);
+        const hasRecovery = nextEntries.some((e) => e.domain === 'tasks' && (e.operation === 'find' || e.operation === 'exists'));
+        if (!hasRecovery) {
+            errorScore -= 5;
+            result.flags.push(`E_NOT_FOUND (${errEntry.domain}.${errEntry.operation}) not followed by recovery lookup`);
+        }
+        else {
+            result.dimensions.errorProtocol.evidence.push('E_NOT_FOUND followed by recovery lookup');
+        }
+    }
+    const duplicateCreates = detectDuplicateCreates(sessionEntries);
+    if (duplicateCreates > 0) {
+        errorScore -= 5;
+        result.flags.push(`${duplicateCreates} potentially duplicate task create(s) detected`);
+    }
+    if (notFoundErrors.length === 0 && duplicateCreates === 0) {
+        result.dimensions.errorProtocol.evidence.push('No error protocol violations');
+    }
+    result.dimensions.errorProtocol.score = Math.max(0, errorScore);
+    // -- Dimension 5: Progressive Disclosure Use (20pts) --
+    const helpCalls = sessionEntries.filter((e) => (e.domain === 'admin' && e.operation === 'help') ||
+        (e.domain === 'tools' && (e.operation === 'skill.show' || e.operation === 'skill.list')) ||
+        (e.domain === 'skills' && (e.operation === 'list' || e.operation === 'show')));
+    // gateway is stored as 'query'/'mutate' in the audit log
+    const mcpQueryCalls = sessionEntries.filter((e) => e.metadata?.gateway === 'query');
+    let disclosureScore = 0;
+    if (helpCalls.length > 0) {
+        disclosureScore += 10;
+        result.dimensions.disclosureUse.evidence.push(`Progressive disclosure used (${helpCalls.length}x)`);
+    }
+    else {
+        result.flags.push('No admin.help or skill lookup calls (load ct-cleo for guidance)');
+    }
+    if (mcpQueryCalls.length > 0) {
+        disclosureScore += 10;
+        result.dimensions.disclosureUse.evidence.push(`query (MCP) used ${mcpQueryCalls.length}x`);
+    }
+    else {
+        result.flags.push('No MCP query calls (prefer query over CLI for programmatic access)');
+    }
+    result.dimensions.disclosureUse.score = disclosureScore;
+    // -- Total --
+    result.totalScore = Object.values(result.dimensions).reduce((sum, d) => sum + d.score, 0);
+    await feedGradeToBrain(result, cwd);
+    await appendGradeResult(result, cwd);
+    return result;
+}
+/** Detect potentially duplicate task creates (same title within session). */
+function detectDuplicateCreates(entries) {
+    const creates = entries.filter((e) => e.domain === 'tasks' && e.operation === 'add' && e.result.success);
+    const titles = creates
+        .map((e) => e.params?.title?.toLowerCase().trim())
+        .filter(Boolean);
+    const unique = new Set(titles);
+    return titles.length - unique.size;
+}
+/**
+ * Feed grade insights back into brain.db as learnings.
+ * Best-effort — errors are silently caught.
+ */
+async function feedGradeToBrain(result, projectRoot) {
+    if (!projectRoot)
+        return;
+    try {
+        const { storeLearning } = await import('../memory/learnings.js');
+        // Find dimensions scoring below 50% of max
+        const weakDimensions = [];
+        for (const [name, dim] of Object.entries(result.dimensions)) {
+            if (dim.score < dim.max * 0.5) {
+                weakDimensions.push(name);
+            }
+        }
+        if (weakDimensions.length > 0) {
+            await storeLearning(projectRoot, {
+                insight: `Session ${result.sessionId} scored ${result.totalScore}/${result.maxScore}. Weak dimensions: ${weakDimensions.join(', ')}`,
+                source: `grade:${result.sessionId}`,
+                confidence: 0.8,
+                actionable: true,
+                application: `Improve in next session: ${weakDimensions.join(', ')}`,
+            });
+        }
+        // Store protocol violations as separate learning
+        if (result.flags.length > 0) {
+            await storeLearning(projectRoot, {
+                insight: `Session ${result.sessionId} protocol violations: ${result.flags.join('; ')}`,
+                source: `grade:${result.sessionId}`,
+                confidence: 0.7,
+                actionable: true,
+                application: 'Address protocol violations in next session',
+            });
+        }
+    }
+    catch {
+        // Best-effort — grade feedback should never block
+    }
+}
+/** Append a grade result to .cleo/metrics/GRADES.jsonl */
+async function appendGradeResult(result, cwd) {
+    try {
+        const cleoDir = getCleoDirAbsolute(cwd);
+        const metricsDir = join(cleoDir, 'metrics');
+        await mkdir(metricsDir, { recursive: true });
+        const gradesPath = join(metricsDir, 'GRADES.jsonl');
+        const line = JSON.stringify({ ...result, evaluator: 'auto' }) + '\n';
+        await appendFile(gradesPath, line, 'utf8');
+    }
+    catch {
+        // Best-effort
+    }
+}
+/** Read past grade results from .cleo/metrics/GRADES.jsonl */
+export async function readGrades(sessionId, cwd) {
+    try {
+        const cleoDir = getCleoDirAbsolute(cwd);
+        const gradesPath = join(cleoDir, 'metrics', 'GRADES.jsonl');
+        if (!existsSync(gradesPath))
+            return [];
+        const content = await readFile(gradesPath, 'utf8');
+        const results = content
+            .split('\n')
+            .filter((l) => l.trim())
+            .map((l) => JSON.parse(l));
+        return sessionId ? results.filter((r) => r.sessionId === sessionId) : results;
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=session-grade.js.map