@curdx/flow 7.1.6 → 7.1.7

package/dist/check-TJPGCG3Z.mjs

@@ -0,0 +1,222 @@
+#!/usr/bin/env node
+
+// src/hooks/lib/check-verification-blocks.ts
+import { readFileSync, readdirSync, statSync, existsSync } from "fs";
+import path from "path";
+var VERIFICATION_PHASES = [
+  "research",
+  "requirements",
+  "design",
+  "tasks",
+  "execution"
+];
+async function runVerificationCheck(opts = {}) {
+  const repoRoot = opts.repoRoot ?? process.cwd();
+  const env = opts.env ?? process.env;
+  const specsDir = path.join(repoRoot, "specs");
+  const specDir = resolveActiveSpecDir(specsDir);
+  if (!specDir) {
+    return {
+      ok: true,
+      code: 0,
+      skipped: true,
+      message: "check-verification-blocks: no active spec found, skipping.\n"
+    };
+  }
+  if (env.CURDX_VERIFY_SKIP_BLOCKS === "1") {
+    return {
+      ok: true,
+      code: 0,
+      skipped: true,
+      specDir,
+      message: "[check-verification-blocks] CURDX_VERIFY_SKIP_BLOCKS=1 \u2014 skipping gate.\n"
+    };
+  }
+  const stateFile = path.join(specDir, ".curdx-state.json");
+  let state;
+  try {
+    state = JSON.parse(readFileSync(stateFile, "utf8"));
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return {
+      ok: false,
+      code: 2,
+      specDir,
+      message: `\u2717 failed to read ${path.relative(repoRoot, stateFile)}: ${msg}
+`
+    };
+  }
+  if (typeof state !== "object" || state === null || !("verificationBlocks" in state)) {
+    const rel2 = path.relative(repoRoot, specDir);
+    return {
+      ok: true,
+      code: 0,
+      skipped: true,
+      specDir,
+      message: `[check-verification-blocks] No verificationBlocks defined \u2014 skipping (treat as initial state)
+  Active spec: ${rel2}
+`
+    };
+  }
+  const blocks = state.verificationBlocks;
+  const blocksObj = blocks && typeof blocks === "object" && !Array.isArray(blocks) ? blocks : null;
+  const presentPhases = blocksObj ? Object.keys(blocksObj).filter(
+    (p) => blocksObj[p] !== void 0 && blocksObj[p] !== null
+  ) : [];
+  if (!blocksObj || presentPhases.length === 0) {
+    const rel2 = path.relative(repoRoot, specDir);
+    return {
+      ok: false,
+      code: 2,
+      specDir,
+      message: `\u2717 No verificationBlocks found. Run the appropriate phase verification command.
+  Active spec: ${rel2}
+  Hint: each phase must record an entry in .curdx-state.json::verificationBlocks
+        (see plugins/curdx-flow/references/iron-law-verification.md).
+`
+    };
+  }
+  const failures = [];
+  for (const phase of presentPhases) {
+    if (!VERIFICATION_PHASES.includes(phase)) {
+      failures.push({
+        phase,
+        reason: `unknown phase key "${phase}"`,
+        command: "(remove from state)"
+      });
+      continue;
+    }
+    const raw = blocksObj[phase];
+    if (typeof raw !== "object" || raw === null) {
+      failures.push({
+        phase,
+        reason: "block is not an object",
+        command: "(rewrite block)"
+      });
+      continue;
+    }
+    const block = raw;
+    const command = typeof block.command === "string" ? block.command : "(unknown command)";
+    const exitCode = block.exitCode;
+    const timestamp = block.timestamp;
+    const srcMtime = block.srcMtime;
+    const failedReason = block.failedReason;
+    if (exitCode !== 0) {
+      failures.push({
+        phase,
+        reason: typeof failedReason === "string" && failedReason.length > 0 ? `verification failed: ${failedReason} (exitCode=${String(exitCode)})` : `verification failed (exitCode=${String(exitCode)})`,
+        command
+      });
+      continue;
+    }
+    const ts = typeof timestamp === "string" ? Date.parse(timestamp) : NaN;
+    if (Number.isNaN(ts)) {
+      failures.push({
+        phase,
+        reason: `invalid timestamp "${String(timestamp)}"`,
+        command
+      });
+      continue;
+    }
+    if (typeof srcMtime !== "number" || !Number.isFinite(srcMtime) || srcMtime < 0) {
+      failures.push({
+        phase,
+        reason: `invalid srcMtime ${String(srcMtime)}`,
+        command
+      });
+      continue;
+    }
+    if (ts < srcMtime) {
+      const srcIso = new Date(srcMtime).toISOString();
+      failures.push({
+        phase,
+        reason: `stale evidence: src changed at ${srcIso}, last verified at ${String(timestamp)}`,
+        command
+      });
+    }
+  }
+  if (failures.length > 0) {
+    const rel2 = path.relative(repoRoot, specDir);
+    let message = "\u2717 verificationBlocks gate failed:\n";
+    message += `  Active spec: ${rel2}
+`;
+    for (const f of failures) {
+      message += `  - phase "${f.phase}": ${f.reason}
+`;
+      message += `      Re-run: ${f.command}
+`;
+    }
+    message += "\n";
+    message += "See plugins/curdx-flow/references/iron-law-verification.md for the full checklist.\n";
+    return { ok: false, code: 2, specDir, message };
+  }
+  const rel = path.relative(repoRoot, specDir);
+  return {
+    ok: true,
+    code: 0,
+    specDir,
+    message: `All verificationBlocks valid.
+  Active spec: ${rel}
+  Phases verified: ${presentPhases.join(", ")}
+`
+  };
+}
+function resolveActiveSpecDir(specsDir) {
+  const pointer = path.join(specsDir, ".current-spec");
+  if (existsSync(pointer)) {
+    try {
+      const name = readFileSync(pointer, "utf8").trim();
+      if (name) {
+        const dir = path.join(specsDir, name);
+        if (existsSync(path.join(dir, ".curdx-state.json"))) return dir;
+      }
+    } catch {
+    }
+  }
+  if (!existsSync(specsDir)) return null;
+  let entries;
+  try {
+    entries = readdirSync(specsDir, { withFileTypes: true });
+  } catch {
+    return null;
+  }
+  let latest = null;
+  let latestMtime = 0;
+  for (const e of entries) {
+    if (!e.isDirectory()) continue;
+    if (e.name.startsWith(".") || e.name.startsWith("_")) continue;
+    const stateFile = path.join(specsDir, e.name, ".curdx-state.json");
+    if (!existsSync(stateFile)) continue;
+    try {
+      const st = statSync(stateFile);
+      if (st.mtimeMs > latestMtime) {
+        latestMtime = st.mtimeMs;
+        latest = path.join(specsDir, e.name);
+      }
+    } catch {
+    }
+  }
+  return latest;
+}
+
+// src/cli/commands/check.ts
+async function runCheckCommand(args) {
+  void args;
+  const result = await runVerificationCheck();
+  if (result.ok) {
+    process.stdout.write("All verificationBlocks valid.\n");
+    if (result.specDir !== void 0) {
+      const rest = result.message.replace(
+        /^All verificationBlocks valid\.\n/,
+        ""
+      );
+      if (rest.length > 0) process.stderr.write(rest);
+    }
+    process.exit(0);
+  }
+  process.stderr.write(result.message);
+  process.exit(2);
+}
+export {
+  runCheckCommand
+};

package/dist/index.mjs

@@ -1626,17 +1626,49 @@ var analyzeCmd = defineCommand({
     "include-prompts": {
       type: "boolean",
       description: "Skip prompt redaction (D-9 white-list passthrough disabled \u2014 local debugging only)"
+    },
+    session: {
+      type: "string",
+      description: "Filter to single session UUID (matches <uuid>.jsonl in encoded project dir)"
+    },
+    "cost-summary": {
+      type: "boolean",
+      description: "Emit OB-3 cost analytics: totalCost.usd top-level + ## Cost Summary markdown (opt-in, default false)"
+    },
+    "by-spec": {
+      type: "boolean",
+      description: "OB-3 R1: aggregate cost by spec dimension (opt-in, default false; with --cost-summary alone all 3 dims emit)"
+    },
+    "by-phase": {
+      type: "boolean",
+      description: "OB-3 R2: aggregate cost by phase dimension (opt-in, default false; with --cost-summary alone all 3 dims emit)"
+    },
+    "by-task": {
+      type: "boolean",
+      description: "OB-3 R7: aggregate cost by task (correlationId) dimension, top-N truncated by --top (opt-in, default false)"
+    },
+    top: {
+      type: "string",
+      description: "OB-3 R7 top-N truncation for --by-task buckets (default: 10)"
     }
   },
   async run({ args }) {
     const limitRaw = args.limit;
     const limit = typeof limitRaw === "string" && limitRaw.length > 0 ? Number(limitRaw) : void 0;
-    const { runAnalyze } = await import("./analyze-4DE3HVCA.mjs");
+    const topRaw = args.top;
+    const top = typeof topRaw === "string" && topRaw.length > 0 ? Number(topRaw) : void 0;
+    const { runAnalyze } = await import("./analyze-FX2PCSL6.mjs");
     await runAnalyze({
       out: typeof args.out === "string" ? args.out : void 0,
       json: Boolean(args.json),
       limit: Number.isFinite(limit) ? limit : void 0,
-      includePrompts: Boolean(args["include-prompts"])
+      includePrompts: Boolean(args["include-prompts"]),
+      session: typeof args.session === "string" && args.session.length > 0 ? args.session : void 0,
+      costSummary: Boolean(args["cost-summary"]),
+      bySpec: Boolean(args["by-spec"]),
+      byPhase: Boolean(args["by-phase"]),
+      byTask: Boolean(args["by-task"]),
+      top: Number.isFinite(top) ? top : void 0
     });
   }
 });
@@ -1770,6 +1802,17 @@ var updateCmd = defineCommand2({
     p10.outro(t("app.outro"));
   }
 });
+var checkCmd = defineCommand2({
+  meta: {
+    name: "check",
+    description: "Verify active spec verificationBlocks (iron-law gate)"
+  },
+  args: {},
+  async run() {
+    const { runCheckCommand } = await import("./check-TJPGCG3Z.mjs");
+    await runCheckCommand([]);
+  }
+});
 var statusCmd = defineCommand2({
   meta: { name: "status", description: "Show install status" },
   args: {
@@ -1783,7 +1826,27 @@ var statusCmd = defineCommand2({
     if (!args.json) p10.outro(t("app.outro"));
   }
 });
-var SUBCOMMANDS = /* @__PURE__ */ new Set(["install", "uninstall", "update", "status", "analyze"]);
+var SUBCOMMANDS = /* @__PURE__ */ new Set(["install", "uninstall", "update", "status", "analyze", "check"]);
+var CHECK_HELP = `USAGE \`@curdx/flow check\`
+
+DESCRIPTION
+  Verify the active spec's verificationBlocks (iron-law gate) \u2014 the same
+  check enforced by the Stop hook and \`npm run verify\` release gate.
+
+OPTIONS
+  --help, -h    Show this help message and exit.
+
+EXIT CODES
+   0  All verificationBlocks valid (or no spec is active \u2014 graceful no-op).
+   2  At least one phase block is missing, stale, or failed.
+
+ENV
+  CURDX_VERIFY_SKIP_BLOCKS=1   Skip the gate (human escape hatch; never set
+                               in CI / release).
+
+SEE ALSO
+  plugins/curdx-flow/references/iron-law-verification.md
+`;
 var root = defineCommand2({
   meta: {
     name: "@curdx/flow",
@@ -1796,7 +1859,8 @@ var root = defineCommand2({
     uninstall: uninstallCmd,
     update: updateCmd,
     status: statusCmd,
-    analyze: analyze_default
+    analyze: analyze_default,
+    check: checkCmd
   }
   // No root run() — citty 0.1.6 calls parent.run AFTER a matching subcommand,
   // which would render the menu after a subcommand finishes. We dispatch the
@@ -1830,6 +1894,16 @@ async function runInteractive(argv2) {
 var argv = process.argv.slice(2);
 var first = firstNonFlag(argv);
 assertFreshLocalBuild();
+if (process.argv[2] === "check") {
+  const rest = process.argv.slice(3);
+  if (rest.includes("--help") || rest.includes("-h")) {
+    process.stdout.write(CHECK_HELP);
+    process.exit(0);
+  }
+  const { runCheckCommand } = await import("./check-TJPGCG3Z.mjs");
+  await runCheckCommand(rest);
+  process.exit(0);
+}
 if (first === void 0 || first !== void 0 && !SUBCOMMANDS.has(first) && first !== "--help" && first !== "-h") {
   if (first === void 0) {
     runInteractive(argv).catch((err) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@curdx/flow",
-  "version": "7.1.6",
+  "version": "7.1.7",
   "description": "Interactive installer for Claude Code plugins and MCP servers",
   "type": "module",
   "bin": "./dist/index.mjs",
@@ -21,7 +21,7 @@
     "test:analyze": "vitest run tests/analyze",
     "start": "node ./dist/index.mjs",
     "typecheck": "tsc --noEmit",
-    "verify": "npm run typecheck && npm run check-versions && npm run check:hooks-fresh && npm run build && npm run check:bundle && npm run test:hooks && npm run test:analyze",
+    "verify": "npm run typecheck && npm run check-versions && npm run check:hooks-fresh && npm run build && npm run check:bundle && npm run test:hooks && npm run test:analyze && node scripts/check-verification-blocks.mjs",
     "check-versions": "node scripts/check-versions.mjs",
     "bump-version": "node scripts/bump-version.mjs",
     "prepublishOnly": "node scripts/check-versions.mjs && npm run typecheck && npm run check:hooks-fresh && npm run build"