@devflow-tools/cli 0.14.4 → 0.16.0

package/dist/plugin-files/dist/hooks/post-tool-use.js

@@ -0,0 +1,3 @@
+import {existsSync,readFileSync,writeFileSync,readdirSync,unlinkSync,mkdirSync,appendFileSync}from'fs';import {join,dirname}from'path';import {createHash}from'crypto';import {getLogWriter}from'@devflow-tools/telemetry';import {request}from'http';import {homedir}from'os';import {getLocalApiKey,getProjectStateDir}from'@devflow-tools/sdk';import {openGlobalDevFlowDatabase}from'@devflow-tools/database';import {fileURLToPath}from'url';import {MemoryGate}from'@devflow-tools/memory-engine';function q(n,e,t){try{let r=openGlobalDevFlowDatabase();try{r.insertEvent({kind:n,timestamp:Date.now(),duration:t,success:e.success!==!1,metadata:e});}finally{r.close();}}catch{}}var M=process.env.DEVFLOW_SERVER_URL||"http://127.0.0.1:13337",ve=getLocalApiKey(),we=8,_e=6e4,G=new Map;function Re(n){let e=new URL(n,M).pathname,t=G.get(e);return t||(t={failures:0,lastFailure:0,openUntil:0,status:"closed"},G.set(e,t)),t}function j(n,e,t){if(e.status===t)return;let r=e.status;e.status=t,q("http_circuit_transition",{path:new URL(n,M).pathname,previous:r,status:t,failures:e.failures,openUntil:e.openUntil});}function A(n,e){e.failures++,e.lastFailure=Date.now(),e.failures>=we&&(e.openUntil=Date.now()+_e,j(n,e,"open"));}function Ce(n,e){let t=e.status!=="closed";e.failures=0,e.openUntil=0,t&&j(n,e,"closed");}var F=join(homedir(),".devflow","errors");function J(n,e){try{existsSync(F)||mkdirSync(F,{recursive:!0});let t=`${new Date().toISOString()} | ${n} | ${e?.message??String(e)}
+`;appendFileSync(join(F,"http-errors.log"),t);}catch{}}function K(n,e,t={}){let r=t.timeout??5e3,o=t.maxRetries??2,s=t.circuitBreaker??true,i=Re(n);if(s&&i.openUntil>Date.now())return Promise.resolve();s&&i.status==="open"&&j(n,i,"half_open");let c=l=>new Promise(a=>{let v=JSON.stringify(e),m=new URL(n,M),f=request({hostname:m.hostname,port:m.port,path:m.pathname+m.search,method:"POST",headers:{"Content-Type":"application/json","X-API-Key":ve,"Content-Length":Buffer.byteLength(v)},timeout:r},g=>{if(g.resume(),g.statusCode&&g.statusCode>=400){let y=new Error(`HTTP ${g.statusCode}`);if(J(n,y),l>0){let w=Math.min(1e3*Math.pow(2,o-l),8e3);setTimeout(()=>{c(l-1).then(a);},w);}else A(n,i),a();return}Ce(n,i),a();});f.on("error",g=>{if(J(n,g),l>0){let y=Math.min(1e3*Math.pow(2,o-l),8e3);setTimeout(()=>{c(l-1).then(a);},y);}else A(n,i),a();}),f.on("timeout",()=>{f.destroy(),l>0?c(l-1).then(a):(A(n,i),a());}),f.write(v),f.end();});return c(o)}function P(n){return n??process.env.CLAUDE_PROJECT_DIR??process.cwd()}function d(n){return process.env.DEVFLOW_STATE_DIR??getProjectStateDir(P(n))}function C(n){if(!n||typeof n!="object"||Array.isArray(n))return {};let e=n,t={};for(let r of ["lastMcpCall","bypassCount"])if(r in e){let o=e[r];if(o==null)continue;t[r]=typeof o=="number"&&Number.isFinite(o)&&o>=0?o:0;}return t}function ke(n,e){return n.lastMcpCall===e.lastMcpCall&&n.bypassCount===e.bypassCount}function Ee(n){try{return existsSync(n)?C(JSON.parse(readFileSync(n,"utf-8"))):{}}catch{return {}}}function X(n,e){let t=e instanceof Error?e.message:String(e);console.error(`[devflow] Receipt ${n} skipped: ${t}`);}function V(n){let e=d(n);for(let t of ["receipt.json","receipt-lock.sqlite","receipt-lock.sqlite-shm","receipt-lock.sqlite-wal"])try{existsSync(join(e,t))&&unlinkSync(join(e,t));}catch{}}function Z(n,e){if(n.getHookReceipt(e)){V(e);return}let t=join(d(e),"receipt.json");if(!existsSync(t))return;let r=Ee(t);n.updateHookReceipt(e,()=>r),V(e);}function Q(n,e,t){let r;try{r=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250}),Z(r,n);let o={},s=r.updateHookReceipt(n,c=>(o=C(c),C(e(o)))),i=C(s);return {receipt:i,applied:!0,changed:!ke(o,i)}}catch(o){return X(t,o),{receipt:{},applied:false,changed:false}}finally{try{r?.close();}catch{}}}function Te(n){let e;try{return e=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250}),Z(e,n),C(e.getHookReceipt(n))}catch(t){return X("update",t),{}}finally{try{e?.close();}catch{}}}function N(n,e){return Q(n,()=>e,"write").applied}function U(n,e){return Q(n,e,"update")}var xe={Grep:"get_project_context",Glob:"get_project_context",Agent:"get_project_context",Bash:"get_project_context",WebSearch:"get_knowledge",WebFetch:"get_knowledge"};function Oe(n){switch(n){case "WebSearch":case "WebFetch":return 1;case "Agent":return 3;case "Grep":case "Glob":return 3;case "Bash":return 5;default:return 2}}var k=class{constructor(e){this.projectRoot=e;}getPhase(){let t=Te(this.projectRoot).lastMcpCall??0;if(Math.floor(Date.now()/1e3)-t<30)return "context_ready";let o=join(d(this.projectRoot),"current-skill.json");if(existsSync(o))try{let c=JSON.parse(readFileSync(o,"utf-8")).registeredAt??0;if(Date.now()-c<300*1e3)return "context_gathering"}catch{}return "idle"}evaluate(e,t){let r=this.getPhase();if(t||e==="Skill")return {permissionDecision:"allow"};if(r==="context_gathering")return {permissionDecision:"deny",reason:"DevFlow skill requires MCP context first. The context is being gathered automatically \u2014 retry this tool after the MCP call completes."};if(r==="context_ready")return {permissionDecision:"allow"};let o=xe[e];if(!o)return {permissionDecision:"allow"};let s=U(this.projectRoot,l=>({...l,bypassCount:(l.bypassCount??0)+1}));if(!s.applied)return {permissionDecision:"allow"};let i=s.receipt.bypassCount??0,c=Oe(e);return i>=c?{permissionDecision:"allow",additionalContext:`\u5DF2 ${i} \u6B21\u76F4\u63A5\u4F7F\u7528 ${e}\uFF0C\u5EFA\u8BAE\u7528 mcp__devflow__${o} \u83B7\u53D6\u66F4\u7CBE\u786E\u7684\u4E0A\u4E0B\u6587\u3002`}:{permissionDecision:"allow"}}recordMcpCall(){N(this.projectRoot,{lastMcpCall:Math.floor(Date.now()/1e3),bypassCount:0});}};var oe=1e4,Ne=3e4,T=500;function Ue(n,e,t){return new Promise(r=>{try{let o=new URL(n),s=request({hostname:o.hostname,port:o.port||80,path:o.pathname+o.search,method:"POST",headers:{"Content-Type":"application/json","X-API-Key":t,"Content-Length":Buffer.byteLength(e)},timeout:5e3},i=>{let c=[];i.on("data",l=>c.push(l)),i.on("end",()=>{let l=Buffer.concat(c).toString();r(i.statusCode!=null&&i.statusCode>=200&&i.statusCode<300?l:null);});});s.on("error",()=>r(null)),s.on("timeout",()=>{s.destroy(),r(null);}),s.write(e),s.end();}catch{r(null);}})}var x=class{constructor(e){this.retryScheduled=false;this.apiUrl=e?.apiUrl??process.env.DEVFLOW_API_URL??"http://127.0.0.1:13337",this.apiKey=e?.apiKey??getLocalApiKey(),this.cacheDir=e?.cacheDir??join(process.env.DEVFLOW_STATE_DIR??join(homedir(),".devflow","global"),"telemetry-cache"),this.legacyCacheDir=e?.legacyCacheDir??(e?.cacheDir?null:join(homedir(),".devflow","telemetry-cache")),this.database=e?.database??null,this.ownsDatabase=!e?.database;}async sendEvent(e){let t={...e,input:this.truncateInput(e.input)};return this.commitOrCache("tool_call",t)?(this.postHttp("/api/telemetry/tool-call",t),e.eventId):null}async sendExecutionStart(e,t,r,o){let s={executionId:e,sessionId:t,skillName:r,startedAt:o};this.commitOrCache("execution_start",s)&&this.postHttp("/api/telemetry/skill-execution/start",s);}async sendSessionStart(e,t,r){let o={id:e,projectRoot:t,startedAt:r,label:t.split("/").pop()??"unknown"},s=this.commitOrCache("session_start",o);return s&&this.postHttp("/api/telemetry/sessions",o),s}async completeEvent(e){let t=this.commitOrCache("complete_event",e);return t&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp("/api/telemetry/tool-call/output",e)),t}async endSession(e,t=Date.now()){let r={sessionId:e,finishedAt:t},o=this.commitOrCache("session_end",r);return o&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp(`/api/telemetry/sessions/${encodeURIComponent(e)}/close`,{finishedAt:t})),o}async flushCache(){try{let r=this.getDatabase(),o=r.listTelemetryFailures({unresolvedOnly:!0,limit:T}).reverse();for(let s of o)try{this.applyOperation(s.operation,s.payload),r.resolveTelemetryFailure(s.id);}catch{}r.trimTelemetryFailures(T);}catch{}let t=[...new Set([this.cacheDir,this.legacyCacheDir].filter(r=>!!r))].filter(r=>existsSync(r)).flatMap(r=>readdirSync(r).filter(o=>o.endsWith(".json")).map(o=>{let s=join(r,o);try{return {cacheFile:s,envelope:Le(JSON.parse(readFileSync(s,"utf8")),o)}}catch{return null}})).filter(r=>r!==null).sort((r,o)=>r.envelope.timestamp-o.envelope.timestamp||se(r.envelope.operation)-se(o.envelope.operation));for(let{cacheFile:r,envelope:o}of t)try{let s=this.getDatabase();s.insertTelemetryFailure({id:o.id,operation:o.operation,payload:o.payload,error:o.failure,createdAt:o.timestamp}),this.applyOperation(o.operation,o.payload),s.resolveTelemetryFailure(o.id),unlinkSync(r);}catch{}this.database?.aggregatePendingToolMetrics();}aggregateMetrics(){return this.getDatabase().aggregatePendingToolMetrics()}async flushAndAggregate(){await this.flushCache(),this.aggregateMetrics();}close(){this.ownsDatabase&&this.database?.close(),this.database=null;}getDatabase(){return this.database??=openGlobalDevFlowDatabase(),this.database}commitOrCache(e,t){try{return this.applyOperation(e,t),!0}catch(r){return this.cacheOperation(e,t,r),false}}applyOperation(e,t){let r=this.getDatabase();switch(e){case "tool_call":r.insertToolCallEvent(t);return;case "execution_start":r.insertSkillExecution({executionId:t.executionId,sessionId:t.sessionId,skillName:t.skillName,startedAt:t.startedAt,status:"running"});return;case "session_start":r.insertSession(t),r.insertRun({id:ie(t.id),source:"hook",tool:"session",input:{projectRoot:t.projectRoot},status:"active",startedAt:t.startedAt,tokenUsed:0,metadata:{sessionId:t.id,projectRoot:t.projectRoot}});return;case "complete_event":if(!r.updateToolCallEvent(t.eventId,{output:t.output===void 0?void 0:JSON.stringify(t.output),error:t.error,duration:t.duration}))throw new Error(`Tool call event ${t.eventId} is not available for completion`);return;case "session_end":r.closeSession(t.sessionId,t.finishedAt),r.updateRun(ie(t.sessionId),{status:"completed",finishedAt:t.finishedAt});return}}cacheOperation(e,t,r){let o=Date.now(),s={id:`failure:${o}:${Math.random().toString(36).slice(2,11)}`,operation:e,payload:t,failure:r instanceof Error?r.message:String(r),timestamp:o};try{let i=this.getDatabase();i.insertTelemetryFailure({id:s.id,operation:e,payload:t,error:s.failure,createdAt:o}),i.trimTelemetryFailures(T),this.scheduleRetry();return}catch{}try{existsSync(this.cacheDir)||mkdirSync(this.cacheDir,{recursive:!0});let i=join(this.cacheDir,`${o}_${Math.random().toString(36).slice(2,11)}.json`);writeFileSync(i,JSON.stringify(s,null,2),{mode:384}),this.trimCompatibilityCache(),this.scheduleRetry();}catch{}}trimCompatibilityCache(){try{let e=readdirSync(this.cacheDir).filter(t=>t.endsWith(".json")).sort();for(let t of e.slice(0,Math.max(0,e.length-T)))unlinkSync(join(this.cacheDir,t));}catch{}}scheduleRetry(){this.retryScheduled||(this.retryScheduled=true,setTimeout(()=>{this.retryScheduled=false,this.flushCache();},Ne).unref());}postHttp(e,t){Ue(`${this.apiUrl}${e}`,JSON.stringify(t),this.apiKey);}truncateInput(e){let t=JSON.stringify(e);return t===void 0||t.length<=oe?e:{_truncated:true,_original_size:t.length,_preview:`${t.substring(0,oe)}...`}}};function se(n){return ["session_start","execution_start","tool_call","complete_event","session_end"].indexOf(n)}function ie(n){return `hook-run:${n}`}function Le(n,e){if(!n||typeof n!="object")throw new Error("Invalid telemetry cache envelope");let t=n;if(typeof t.operation=="string"&&t.payload!==void 0)return t;let r=t.type==="tool_call"?"tool_call":t.type==="execution_start"?"execution_start":null;if(!r)throw new Error("Unknown legacy telemetry cache operation");let o=t.payload??{},s=Number(o.timestamp??o.startedAt??Date.now());return {id:`legacy-cache:${e}`,operation:r,payload:o,failure:"Replayed legacy HTTP-first telemetry cache entry",timestamp:s}}var Ge=1;function Je(){if(process.env.CLAUDE_PLUGIN_ROOT)return process.env.CLAUDE_PLUGIN_ROOT;try{return join(dirname(fileURLToPath(import.meta.url)),"..","..")}catch{return process.cwd()}}function ce(n=Je()){let e=[join(n,"dist","command-registry.json"),join(n,"command-registry.json")];for(let t of e)try{if(!existsSync(t))continue;let r=JSON.parse(readFileSync(t,"utf8"));if(r.version!==Ge||!Be(r.commands)){console.error(`[devflow] command registry contract mismatch: ${t}`);continue}return r.commands}catch(r){console.error(`[devflow] command registry load failed: ${r.message}`);}return null}function Be(n){return !n||typeof n!="object"||Array.isArray(n)?false:Object.values(n).every(e=>{if(!e||typeof e!="object"||Array.isArray(e))return  false;let t=e;return ae(t.mcpTools)&&ae(t.blockedNative)})}function ae(n){return Array.isArray(n)&&n.every(e=>typeof e=="string"&&e.length>0)}var Xe=new Set(["Agent","Bash","Glob","Grep","WebSearch","WebFetch"]);function Ze(n){try{let e=createHash("sha256").update(n).digest("hex").slice(0,12),t=join(d(n),`session-id-${e}`);if(existsSync(t))return readFileSync(t,"utf-8").trim()}catch{}return null}function Qe(n,e,t){try{let r=join(d(n),"event-map.json");if(!existsSync(r))return null;let o=JSON.parse(readFileSync(r,"utf-8")),s=o.filter(a=>a.toolName===e);if(s.length===0)return null;let i=t??Date.now();s.sort((a,v)=>Math.abs(a.timestamp-i)-Math.abs(v.timestamp-i));let c=s[0],l=o.findIndex(a=>a.eventId===c.eventId);return l!==-1&&o.splice(l,1),writeFileSync(r,JSON.stringify(o)),{eventId:c.eventId,timestamp:c.timestamp}}catch{return null}}function le(n){if(!n)return 0;let e=n;if(typeof n=="string")try{e=JSON.parse(n);}catch{return 1}let t=e,r=["files","results","data","result","memories","nodes","chunks","findings","symbols","keySymbols"],o=["reasoning","riskHints","nextActions"],s=t.data??t.structuredContent??t;if(Array.isArray(s))return s.length;if(typeof s=="object"&&s!==null){let i=s,c=0;for(let a of r)Array.isArray(i[a])&&(c+=i[a].length);for(let a of o)Array.isArray(i[a])&&(c+=i[a].length);for(let[,a]of Object.entries(i))a&&typeof a=="object"&&!Array.isArray(a)&&(c+=le(a));let l=!!(i._devflow||i._devflow_unique||i.taskType);return c===0&&l?1:c>0?c:Object.keys(i).length>0?1:0}return 0}function et(n){let e=d(n);return existsSync(e)||mkdirSync(e,{recursive:true}),e}function tt(n){let e=ce();return e?e[n]?.mcpTools??[]:[]}function nt(n,e){let t=et(n),r=join(t,"current-execution-id");if(existsSync(r))return;let o=`exec_${Date.now()}_${Math.random().toString(36).slice(2,11)}`;writeFileSync(r,o),writeFileSync(join(t,"current-skill.json"),JSON.stringify({name:e,required_mcp_tools:tt(e),registeredAt:Date.now()}));}function rt(n,e){if(!Xe.has(e))return null;let t=U(n,o=>({...o,bypassCount:(o.bypassCount??0)+1}));if(!t.applied)return null;let r=t.receipt.bypassCount??0;return r>20&&r%10===0?`MCP \u5DE5\u5177\u4F7F\u7528\u7387\u4F4E\uFF1A${r} \u6B21\u76F4\u63A5\u5DE5\u5177\u8C03\u7528\u3002\u5EFA\u8BAE\u4F7F\u7528 get_project_context \u83B7\u53D6\u66F4\u7CBE\u786E\u7684\u4E0A\u4E0B\u6587\u3002`:null}async function ot(n){if(!n)return null;let e;try{e=JSON.parse(n);}catch{return null}let t=e.tool_name||"",r=P(),o=e.tool_input||{},s=e.tool_response||{},i=Ze(r);if(t==="Skill"){let u=typeof o=="object"&&o.skill?o.skill:"";u&&u.startsWith("devflow:")&&(nt(r,u),N(r,{lastMcpCall:Math.floor(Date.now()/1e3),bypassCount:0}));}t.startsWith("mcp__")&&new k(r).recordMcpCall();let c=join(d(r),"current-execution-id"),l=Qe(r,t,Date.now()),a=typeof s=="object"&&s!==null?s:null,v=JSON.stringify(s),m=Buffer.byteLength(v,"utf8"),f=le(s);if(existsSync(c)||t.startsWith("mcp__devflow__")||t==="Skill"){let u=getLogWriter(r),p=existsSync(c)?readFileSync(c,"utf-8").trim():`auto-${Date.now()}`;u.toolCall({tool:t,runId:p,stepId:`step-${p}`,input:o,output:s,duration:l?Date.now()-l.timestamp:0,success:!a?.error,resultCount:f,resultSizeBytes:m,error:a?.error});}if(l&&i){let u=typeof s=="string"?s:JSON.stringify(s),p=u.length>5e3?{_truncated:true,_originalSize:u.length,text:u.slice(0,5e3)}:s,pe=Date.now()-l.timestamp;await new x().completeEvent({eventId:l.eventId,sessionId:i,output:p,duration:pe,completedAt:Date.now()});}let y=typeof o=="object"&&o.command?o.command:"",w=a?.exitCode,H=a?.stderr,ue=/^\s*(ls|cat|pwd|cd|echo|head|tail|wc|which|whoami|date|env|printenv|id|hostname|uname)\b/,h,b,O=true;if(t.startsWith("mcp__"))h="mcp_call",b={mcpTool:t.replace(/^mcp__[^_]+__/,""),query:typeof o=="object"&&o.query?o.query:null,resultCount:f,resultSizeBytes:m};else if(t==="Read"||t==="Write"||t==="Edit")h=t==="Read"?"file_read":"file_write",b={filePath:typeof o=="object"&&o.file_path?o.file_path:null,fileContentSize:m};else if(t==="Bash"){let u=ue.test(y),p=w!==void 0&&w!==0;O=!u||p,h=p?"bash_error":"bash_command",b={command:y||t,exitCode:w??null,stderr:H??null};}else t==="Agent"?(h="subagent",b={subagentType:typeof o=="object"&&o.subagent_type?o.subagent_type:null,description:typeof o=="object"&&o.description?String(o.description).slice(0,200):null}):t==="WebSearch"||t==="WebFetch"?(h=t==="WebSearch"?"web_search":"web_fetch",b={query:typeof o=="object"&&o.query?String(o.query).slice(0,200):null}):(O=false,h="tool_use",b={});if(O){let u={id:`evt:${Date.now()}:${Math.random().toString(36).slice(2,7)}`,sessionId:i??`session:${r.split("/").pop()||"default"}`,tool:t,kind:h,payload:b,command:y||void 0,exitCode:w,stderr:H??void 0,durationMs:l?Date.now()-l.timestamp:0,createdAt:Date.now()},p=new MemoryGate(r);try{await p.forceWarmUp(),await p.recordEvent(u);}catch{}finally{p.close();}K(`/api/memory/session-events?rootPath=${encodeURIComponent(r)}`,u);}let I=rt(r,t);return I&&console.error("[devflow] Enforcement:",I),I}if(process.argv[1]?.endsWith("post-tool-use")||process.argv[1]?.endsWith("post-tool-use.js")){let n="";process.stdin.setEncoding("utf8"),process.stdin.on("data",e=>{n+=e;}),process.stdin.on("end",async()=>{let e=await ot(n.trim()||process.argv[2]||"");if(e){let t=JSON.stringify(e);console.log(JSON.stringify({hookSpecificOutput:{hookEventName:"PostToolUse",additionalContext:t}}));}}),process.stdin.on("error",()=>process.exit(0)),setTimeout(()=>process.exit(0),5e3).unref();}
+export{ot as handlePostToolUse};

package/dist/plugin-files/dist/hooks/pre-compact.js

@@ -0,0 +1,3 @@
+import {getLocalApiKey}from'@devflow-tools/sdk';import {existsSync,readdirSync,readFileSync,unlinkSync,mkdirSync,writeFileSync}from'fs';import {request}from'http';import {join}from'path';import {homedir}from'os';import {openGlobalDevFlowDatabase}from'@devflow-tools/database';import {MemoryGate}from'@devflow-tools/memory-engine';function u(n){return n??process.env.CLAUDE_PROJECT_DIR??process.cwd()}var f=1e4,S=3e4,d=500;function x(n,r,e){return new Promise(t=>{try{let o=new URL(n),s=request({hostname:o.hostname,port:o.port||80,path:o.pathname+o.search,method:"POST",headers:{"Content-Type":"application/json","X-API-Key":e,"Content-Length":Buffer.byteLength(r)},timeout:5e3},i=>{let a=[];i.on("data",l=>a.push(l)),i.on("end",()=>{let l=Buffer.concat(a).toString();t(i.statusCode!=null&&i.statusCode>=200&&i.statusCode<300?l:null);});});s.on("error",()=>t(null)),s.on("timeout",()=>{s.destroy(),t(null);}),s.write(r),s.end();}catch{t(null);}})}var m=class{constructor(r){this.retryScheduled=false;this.apiUrl=r?.apiUrl??process.env.DEVFLOW_API_URL??"http://127.0.0.1:13337",this.apiKey=r?.apiKey??getLocalApiKey(),this.cacheDir=r?.cacheDir??join(process.env.DEVFLOW_STATE_DIR??join(homedir(),".devflow","global"),"telemetry-cache"),this.legacyCacheDir=r?.legacyCacheDir??(r?.cacheDir?null:join(homedir(),".devflow","telemetry-cache")),this.database=r?.database??null,this.ownsDatabase=!r?.database;}async sendEvent(r){let e={...r,input:this.truncateInput(r.input)};return this.commitOrCache("tool_call",e)?(this.postHttp("/api/telemetry/tool-call",e),r.eventId):null}async sendExecutionStart(r,e,t,o){let s={executionId:r,sessionId:e,skillName:t,startedAt:o};this.commitOrCache("execution_start",s)&&this.postHttp("/api/telemetry/skill-execution/start",s);}async sendSessionStart(r,e,t){let o={id:r,projectRoot:e,startedAt:t,label:e.split("/").pop()??"unknown"},s=this.commitOrCache("session_start",o);return s&&this.postHttp("/api/telemetry/sessions",o),s}async completeEvent(r){let e=this.commitOrCache("complete_event",r);return e&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp("/api/telemetry/tool-call/output",r)),e}async endSession(r,e=Date.now()){let t={sessionId:r,finishedAt:e},o=this.commitOrCache("session_end",t);return o&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp(`/api/telemetry/sessions/${encodeURIComponent(r)}/close`,{finishedAt:e})),o}async flushCache(){try{let t=this.getDatabase(),o=t.listTelemetryFailures({unresolvedOnly:!0,limit:d}).reverse();for(let s of o)try{this.applyOperation(s.operation,s.payload),t.resolveTelemetryFailure(s.id);}catch{}t.trimTelemetryFailures(d);}catch{}let e=[...new Set([this.cacheDir,this.legacyCacheDir].filter(t=>!!t))].filter(t=>existsSync(t)).flatMap(t=>readdirSync(t).filter(o=>o.endsWith(".json")).map(o=>{let s=join(t,o);try{return {cacheFile:s,envelope:M(JSON.parse(readFileSync(s,"utf8")),o)}}catch{return null}})).filter(t=>t!==null).sort((t,o)=>t.envelope.timestamp-o.envelope.timestamp||v(t.envelope.operation)-v(o.envelope.operation));for(let{cacheFile:t,envelope:o}of e)try{let s=this.getDatabase();s.insertTelemetryFailure({id:o.id,operation:o.operation,payload:o.payload,error:o.failure,createdAt:o.timestamp}),this.applyOperation(o.operation,o.payload),s.resolveTelemetryFailure(o.id),unlinkSync(t);}catch{}this.database?.aggregatePendingToolMetrics();}aggregateMetrics(){return this.getDatabase().aggregatePendingToolMetrics()}async flushAndAggregate(){await this.flushCache(),this.aggregateMetrics();}close(){this.ownsDatabase&&this.database?.close(),this.database=null;}getDatabase(){return this.database??=openGlobalDevFlowDatabase(),this.database}commitOrCache(r,e){try{return this.applyOperation(r,e),!0}catch(t){return this.cacheOperation(r,e,t),false}}applyOperation(r,e){let t=this.getDatabase();switch(r){case "tool_call":t.insertToolCallEvent(e);return;case "execution_start":t.insertSkillExecution({executionId:e.executionId,sessionId:e.sessionId,skillName:e.skillName,startedAt:e.startedAt,status:"running"});return;case "session_start":t.insertSession(e),t.insertRun({id:D(e.id),source:"hook",tool:"session",input:{projectRoot:e.projectRoot},status:"active",startedAt:e.startedAt,tokenUsed:0,metadata:{sessionId:e.id,projectRoot:e.projectRoot}});return;case "complete_event":if(!t.updateToolCallEvent(e.eventId,{output:e.output===void 0?void 0:JSON.stringify(e.output),error:e.error,duration:e.duration}))throw new Error(`Tool call event ${e.eventId} is not available for completion`);return;case "session_end":t.closeSession(e.sessionId,e.finishedAt),t.updateRun(D(e.sessionId),{status:"completed",finishedAt:e.finishedAt});return}}cacheOperation(r,e,t){let o=Date.now(),s={id:`failure:${o}:${Math.random().toString(36).slice(2,11)}`,operation:r,payload:e,failure:t instanceof Error?t.message:String(t),timestamp:o};try{let i=this.getDatabase();i.insertTelemetryFailure({id:s.id,operation:r,payload:e,error:s.failure,createdAt:o}),i.trimTelemetryFailures(d),this.scheduleRetry();return}catch{}try{existsSync(this.cacheDir)||mkdirSync(this.cacheDir,{recursive:!0});let i=join(this.cacheDir,`${o}_${Math.random().toString(36).slice(2,11)}.json`);writeFileSync(i,JSON.stringify(s,null,2),{mode:384}),this.trimCompatibilityCache(),this.scheduleRetry();}catch{}}trimCompatibilityCache(){try{let r=readdirSync(this.cacheDir).filter(e=>e.endsWith(".json")).sort();for(let e of r.slice(0,Math.max(0,r.length-d)))unlinkSync(join(this.cacheDir,e));}catch{}}scheduleRetry(){this.retryScheduled||(this.retryScheduled=true,setTimeout(()=>{this.retryScheduled=false,this.flushCache();},S).unref());}postHttp(r,e){x(`${this.apiUrl}${r}`,JSON.stringify(e),this.apiKey);}truncateInput(r){let e=JSON.stringify(r);return e===void 0||e.length<=f?r:{_truncated:true,_original_size:e.length,_preview:`${e.substring(0,f)}...`}}};function v(n){return ["session_start","execution_start","tool_call","complete_event","session_end"].indexOf(n)}function D(n){return `hook-run:${n}`}function M(n,r){if(!n||typeof n!="object")throw new Error("Invalid telemetry cache envelope");let e=n;if(typeof e.operation=="string"&&e.payload!==void 0)return e;let t=e.type==="tool_call"?"tool_call":e.type==="execution_start"?"execution_start":null;if(!t)throw new Error("Unknown legacy telemetry cache operation");let o=e.payload??{},s=Number(o.timestamp??o.startedAt??Date.now());return {id:`legacy-cache:${r}`,operation:t,payload:o,failure:"Replayed legacy HTTP-first telemetry cache entry",timestamp:s}}async function b(n){let r=!n.memory,e=n.memory??new MemoryGate(n.projectRoot),t=0,o=0;try{await e.forceWarmUp(),n.trigger==="session_end"&&(t=await e.releasePendingDistillLeases(n.sessionId)),o=e.getPendingEventCount();}finally{r&&e.close();}let s={pendingEvents:o,releasedLeases:t,trigger:n.trigger,sessionId:n.sessionId};try{let i=openGlobalDevFlowDatabase();try{let a=Date.now(),l=`distill:${a}:${Math.random().toString(36).slice(2,10)}`;i.recordMemoryDistillCheckpoint({id:l,projectRoot:n.projectRoot,sessionId:n.sessionId,trigger:n.trigger,pendingEvents:o,releasedLeases:t,createdAt:a}),i.insertEvent({kind:"memory_distill_requested",timestamp:a,success:!0,metadata:{...s,projectRoot:n.projectRoot}});}finally{i.close();}}catch{}return s}function _(n){if(n.pendingEvents===0)return "";let r=n.sessionId?`\uFF0CsessionId=${n.sessionId}`:"";return `Memory distill checkpoint: ${n.pendingEvents} \u4E2A\u4E8B\u4EF6\u5F85\u63D0\u70BC${r}\u3002\u4E0A\u4E0B\u6587\u538B\u7F29\u5B8C\u6210\u540E\uFF0C\u8C03\u7528 mcp__devflow__memory_request_distill\uFF1B\u6309\u8FD4\u56DE prompt \u63D0\u70BC observations\uFF0C\u518D\u8C03\u7528 mcp__devflow__memory_save_distilled\u3002`}var w="WARNING: DevFlow is in degraded mode (daemon unreachable): 4-Gate enforcement and memory prefetch cache are unavailable. Run `devflow doctor` for details.";function C(){return process.env.DEVFLOW_HOOK_DEGRADED==="1"}async function F(n="",r=u()){let e;try{let i=JSON.parse(n);typeof i.session_id=="string"&&i.session_id.trim()&&(e=i.session_id.trim());}catch{}let t=new m;try{await t.flushAndAggregate();}finally{t.close();}let o=await b({projectRoot:r,sessionId:e,trigger:"pre_compact"}),s=[C()?w:"",_(o)].filter(Boolean).join(`
+
+`);return {hookSpecificOutput:{hookEventName:"PreCompact",...s?{additionalContext:s}:{}}}}if(process.argv[1]?.endsWith("pre-compact")||process.argv[1]?.endsWith("pre-compact.js")){let n=console.log,r=console.info,e=()=>{console.log=n,console.info=r;};console.log=console.error.bind(console),console.info=console.error.bind(console);let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",o=>{t+=o;}),process.stdin.on("end",()=>{F(t.trim()||process.argv[2]||"").then(o=>{e(),n(JSON.stringify(o)),process.exit(0);}).catch(()=>{e(),process.exit(0);});}),process.stdin.on("error",()=>{e(),process.exit(0);}),setTimeout(()=>process.exit(0),14e3).unref();}export{F as handlePreCompact};

package/dist/plugin-files/dist/hooks/pre-tool-use.js

@@ -0,0 +1,2 @@
+import {existsSync,readdirSync,readFileSync,unlinkSync,mkdirSync,writeFileSync}from'fs';import {join,dirname as dirname$1}from'path';import {createHash}from'crypto';import {request}from'http';import {homedir}from'os';import {openGlobalDevFlowDatabase}from'@devflow-tools/database';import {getLocalApiKey,getProjectStateDir}from'@devflow-tools/sdk';import {fileURLToPath}from'url';import {mkdirSync as mkdirSync$1,existsSync as existsSync$1,statSync,appendFileSync,chmodSync,rmSync,renameSync}from'node:fs';import {createHash as createHash$1}from'node:crypto';import {homedir as homedir$1}from'node:os';import {dirname,join as join$1}from'node:path';var $=1e4,be=3e4,b=500;function De(n,e,t){return new Promise(r=>{try{let o=new URL(n),i=request({hostname:o.hostname,port:o.port||80,path:o.pathname+o.search,method:"POST",headers:{"Content-Type":"application/json","X-API-Key":t,"Content-Length":Buffer.byteLength(e)},timeout:5e3},s=>{let c=[];s.on("data",u=>c.push(u)),s.on("end",()=>{let u=Buffer.concat(c).toString();r(s.statusCode!=null&&s.statusCode>=200&&s.statusCode<300?u:null);});});i.on("error",()=>r(null)),i.on("timeout",()=>{i.destroy(),r(null);}),i.write(e),i.end();}catch{r(null);}})}var D=class{constructor(e){this.retryScheduled=false;this.apiUrl=e?.apiUrl??process.env.DEVFLOW_API_URL??"http://127.0.0.1:13337",this.apiKey=e?.apiKey??getLocalApiKey(),this.cacheDir=e?.cacheDir??join(process.env.DEVFLOW_STATE_DIR??join(homedir(),".devflow","global"),"telemetry-cache"),this.legacyCacheDir=e?.legacyCacheDir??(e?.cacheDir?null:join(homedir(),".devflow","telemetry-cache")),this.database=e?.database??null,this.ownsDatabase=!e?.database;}async sendEvent(e){let t={...e,input:this.truncateInput(e.input)};return this.commitOrCache("tool_call",t)?(this.postHttp("/api/telemetry/tool-call",t),e.eventId):null}async sendExecutionStart(e,t,r,o){let i={executionId:e,sessionId:t,skillName:r,startedAt:o};this.commitOrCache("execution_start",i)&&this.postHttp("/api/telemetry/skill-execution/start",i);}async sendSessionStart(e,t,r){let o={id:e,projectRoot:t,startedAt:r,label:t.split("/").pop()??"unknown"},i=this.commitOrCache("session_start",o);return i&&this.postHttp("/api/telemetry/sessions",o),i}async completeEvent(e){let t=this.commitOrCache("complete_event",e);return t&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp("/api/telemetry/tool-call/output",e)),t}async endSession(e,t=Date.now()){let r={sessionId:e,finishedAt:t},o=this.commitOrCache("session_end",r);return o&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp(`/api/telemetry/sessions/${encodeURIComponent(e)}/close`,{finishedAt:t})),o}async flushCache(){try{let r=this.getDatabase(),o=r.listTelemetryFailures({unresolvedOnly:!0,limit:b}).reverse();for(let i of o)try{this.applyOperation(i.operation,i.payload),r.resolveTelemetryFailure(i.id);}catch{}r.trimTelemetryFailures(b);}catch{}let t=[...new Set([this.cacheDir,this.legacyCacheDir].filter(r=>!!r))].filter(r=>existsSync(r)).flatMap(r=>readdirSync(r).filter(o=>o.endsWith(".json")).map(o=>{let i=join(r,o);try{return {cacheFile:i,envelope:ve(JSON.parse(readFileSync(i,"utf8")),o)}}catch{return null}})).filter(r=>r!==null).sort((r,o)=>r.envelope.timestamp-o.envelope.timestamp||L(r.envelope.operation)-L(o.envelope.operation));for(let{cacheFile:r,envelope:o}of t)try{let i=this.getDatabase();i.insertTelemetryFailure({id:o.id,operation:o.operation,payload:o.payload,error:o.failure,createdAt:o.timestamp}),this.applyOperation(o.operation,o.payload),i.resolveTelemetryFailure(o.id),unlinkSync(r);}catch{}this.database?.aggregatePendingToolMetrics();}aggregateMetrics(){return this.getDatabase().aggregatePendingToolMetrics()}async flushAndAggregate(){await this.flushCache(),this.aggregateMetrics();}close(){this.ownsDatabase&&this.database?.close(),this.database=null;}getDatabase(){return this.database??=openGlobalDevFlowDatabase(),this.database}commitOrCache(e,t){try{return this.applyOperation(e,t),!0}catch(r){return this.cacheOperation(e,t,r),false}}applyOperation(e,t){let r=this.getDatabase();switch(e){case "tool_call":r.insertToolCallEvent(t);return;case "execution_start":r.insertSkillExecution({executionId:t.executionId,sessionId:t.sessionId,skillName:t.skillName,startedAt:t.startedAt,status:"running"});return;case "session_start":r.insertSession(t),r.insertRun({id:U(t.id),source:"hook",tool:"session",input:{projectRoot:t.projectRoot},status:"active",startedAt:t.startedAt,tokenUsed:0,metadata:{sessionId:t.id,projectRoot:t.projectRoot}});return;case "complete_event":if(!r.updateToolCallEvent(t.eventId,{output:t.output===void 0?void 0:JSON.stringify(t.output),error:t.error,duration:t.duration}))throw new Error(`Tool call event ${t.eventId} is not available for completion`);return;case "session_end":r.closeSession(t.sessionId,t.finishedAt),r.updateRun(U(t.sessionId),{status:"completed",finishedAt:t.finishedAt});return}}cacheOperation(e,t,r){let o=Date.now(),i={id:`failure:${o}:${Math.random().toString(36).slice(2,11)}`,operation:e,payload:t,failure:r instanceof Error?r.message:String(r),timestamp:o};try{let s=this.getDatabase();s.insertTelemetryFailure({id:i.id,operation:e,payload:t,error:i.failure,createdAt:o}),s.trimTelemetryFailures(b),this.scheduleRetry();return}catch{}try{existsSync(this.cacheDir)||mkdirSync(this.cacheDir,{recursive:!0});let s=join(this.cacheDir,`${o}_${Math.random().toString(36).slice(2,11)}.json`);writeFileSync(s,JSON.stringify(i,null,2),{mode:384}),this.trimCompatibilityCache(),this.scheduleRetry();}catch{}}trimCompatibilityCache(){try{let e=readdirSync(this.cacheDir).filter(t=>t.endsWith(".json")).sort();for(let t of e.slice(0,Math.max(0,e.length-b)))unlinkSync(join(this.cacheDir,t));}catch{}}scheduleRetry(){this.retryScheduled||(this.retryScheduled=true,setTimeout(()=>{this.retryScheduled=false,this.flushCache();},be).unref());}postHttp(e,t){De(`${this.apiUrl}${e}`,JSON.stringify(t),this.apiKey);}truncateInput(e){let t=JSON.stringify(e);return t===void 0||t.length<=$?e:{_truncated:true,_original_size:t.length,_preview:`${t.substring(0,$)}...`}}};function L(n){return ["session_start","execution_start","tool_call","complete_event","session_end"].indexOf(n)}function U(n){return `hook-run:${n}`}function ve(n,e){if(!n||typeof n!="object")throw new Error("Invalid telemetry cache envelope");let t=n;if(typeof t.operation=="string"&&t.payload!==void 0)return t;let r=t.type==="tool_call"?"tool_call":t.type==="execution_start"?"execution_start":null;if(!r)throw new Error("Unknown legacy telemetry cache operation");let o=t.payload??{},i=Number(o.timestamp??o.startedAt??Date.now());return {id:`legacy-cache:${e}`,operation:r,payload:o,failure:"Replayed legacy HTTP-first telemetry cache entry",timestamp:i}}function x(n){return n??process.env.CLAUDE_PROJECT_DIR??process.cwd()}function l(n){return process.env.DEVFLOW_STATE_DIR??getProjectStateDir(x(n))}var Ee=1;function Ce(){if(process.env.CLAUDE_PLUGIN_ROOT)return process.env.CLAUDE_PLUGIN_ROOT;try{return join(dirname$1(fileURLToPath(import.meta.url)),"..","..")}catch{return process.cwd()}}function q(n=Ce()){let e=[join(n,"dist","command-registry.json"),join(n,"command-registry.json")];for(let t of e)try{if(!existsSync(t))continue;let r=JSON.parse(readFileSync(t,"utf8"));if(r.version!==Ee||!Oe(r.commands)){console.error(`[devflow] command registry contract mismatch: ${t}`);continue}return r.commands}catch(r){console.error(`[devflow] command registry load failed: ${r.message}`);}return null}function Oe(n){return !n||typeof n!="object"||Array.isArray(n)?false:Object.values(n).every(e=>{if(!e||typeof e!="object"||Array.isArray(e))return  false;let t=e;return G(t.mcpTools)&&G(t.blockedNative)})}function G(n){return Array.isArray(n)&&n.every(e=>typeof e=="string"&&e.length>0)}var Ae=1800*1e3,Fe=300*1e3;function B(n){let e=q();return e?e[n]?.mcpTools??[]:[]}var v=class{constructor(e){this.stateDir=l(e);}detect(){let e=join(this.stateDir,"current-skill.json");if(!existsSync(e))return null;try{let t=readFileSync(e,"utf8"),r=JSON.parse(t);return !r.registeredAt||Date.now()-r.registeredAt>Ae?(this.endExecution(),null):(Date.now()-r.registeredAt>Fe&&(r.registeredAt=Date.now(),writeFileSync(e,JSON.stringify(r))),r)}catch{return null}}startExecution(e,t){existsSync(this.stateDir)||mkdirSync(this.stateDir,{recursive:true});let r=this.getCurrentExecutionId();if(r)return r;let o=`exec_${Date.now()}_${Math.random().toString(36).slice(2,11)}`;return writeFileSync(join(this.stateDir,"current-execution-id"),o),writeFileSync(join(this.stateDir,"current-skill.json"),JSON.stringify({name:e,required_mcp_tools:t?.required_mcp_tools??[],registeredAt:Date.now()})),o}getCurrentExecutionId(){let e=join(this.stateDir,"current-execution-id");if(!existsSync(e))return null;try{return readFileSync(e,"utf8").trim()}catch{return null}}endExecution(){let e=join(this.stateDir,"current-skill.json"),t=join(this.stateDir,"current-execution-id");try{existsSync(e)&&unlinkSync(e);}catch{}try{existsSync(t)&&unlinkSync(t);}catch{}}};function h(n){if(!n||typeof n!="object"||Array.isArray(n))return {};let e=n,t={};for(let r of ["lastMcpCall","bypassCount"])if(r in e){let o=e[r];if(o==null)continue;t[r]=typeof o=="number"&&Number.isFinite(o)&&o>=0?o:0;}return t}function je(n,e){return n.lastMcpCall===e.lastMcpCall&&n.bypassCount===e.bypassCount}function Me(n){try{return existsSync(n)?h(JSON.parse(readFileSync(n,"utf-8"))):{}}catch{return {}}}function X(n,e){let t=e instanceof Error?e.message:String(e);console.error(`[devflow] Receipt ${n} skipped: ${t}`);}function K(n){let e=l(n);for(let t of ["receipt.json","receipt-lock.sqlite","receipt-lock.sqlite-shm","receipt-lock.sqlite-wal"])try{existsSync(join(e,t))&&unlinkSync(join(e,t));}catch{}}function Y(n,e){if(n.getHookReceipt(e)){K(e);return}let t=join(l(e),"receipt.json");if(!existsSync(t))return;let r=Me(t);n.updateHookReceipt(e,()=>r),K(e);}function Z(n,e,t){let r;try{r=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250}),Y(r,n);let o={},i=r.updateHookReceipt(n,c=>(o=h(c),h(e(o)))),s=h(i);return {receipt:s,applied:!0,changed:!je(o,s)}}catch(o){return X(t,o),{receipt:{},applied:false,changed:false}}finally{try{r?.close();}catch{}}}function O(n){let e;try{return e=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250}),Y(e,n),h(e.getHookReceipt(n))}catch(t){return X("update",t),{}}finally{try{e?.close();}catch{}}}function Ne(n,e){return Z(n,()=>e,"write").applied}function Pe(n,e){return Z(n,e,"update")}var He={Grep:"get_project_context",Glob:"get_project_context",Agent:"get_project_context",Bash:"get_project_context",WebSearch:"get_knowledge",WebFetch:"get_knowledge"};function $e(n){switch(n){case "WebSearch":case "WebFetch":return 1;case "Agent":return 3;case "Grep":case "Glob":return 3;case "Bash":return 5;default:return 2}}var w=class{constructor(e){this.projectRoot=e;}getPhase(){let t=O(this.projectRoot).lastMcpCall??0;if(Math.floor(Date.now()/1e3)-t<30)return "context_ready";let o=join(l(this.projectRoot),"current-skill.json");if(existsSync(o))try{let c=JSON.parse(readFileSync(o,"utf-8")).registeredAt??0;if(Date.now()-c<300*1e3)return "context_gathering"}catch{}return "idle"}evaluate(e,t){let r=this.getPhase();if(t||e==="Skill")return {permissionDecision:"allow"};if(r==="context_gathering")return {permissionDecision:"deny",reason:"DevFlow skill requires MCP context first. The context is being gathered automatically \u2014 retry this tool after the MCP call completes."};if(r==="context_ready")return {permissionDecision:"allow"};let o=He[e];if(!o)return {permissionDecision:"allow"};let i=Pe(this.projectRoot,u=>({...u,bypassCount:(u.bypassCount??0)+1}));if(!i.applied)return {permissionDecision:"allow"};let s=i.receipt.bypassCount??0,c=$e(e);return s>=c?{permissionDecision:"allow",additionalContext:`\u5DF2 ${s} \u6B21\u76F4\u63A5\u4F7F\u7528 ${e}\uFF0C\u5EFA\u8BAE\u7528 mcp__devflow__${o} \u83B7\u53D6\u66F4\u7CBE\u786E\u7684\u4E0A\u4E0B\u6587\u3002`}:{permissionDecision:"allow"}}recordMcpCall(){Ne(this.projectRoot,{lastMcpCall:Math.floor(Date.now()/1e3),bypassCount:0});}};var Ve=10*1024*1024,ze=5;function Xe(n){return createHash$1("sha256").update(n).digest("hex").slice(0,16)}function te(n){return join$1(homedir$1(),".devflow","logs","hook-debug",`${Xe(n)}.jsonl`)}function ne(n,e,t={}){let r=t.maxBytes??Ve,o=t.maxFiles??ze;mkdirSync$1(dirname(n),{recursive:true,mode:448});let i=Buffer.byteLength(e),s=existsSync$1(n)?statSync(n).size:0;s>0&&s+i>r&&Ye(n,o),appendFileSync(n,e,{mode:384}),chmodSync(n,384);}function Ye(n,e){if(e<=1){rmSync(n,{force:true});return}rmSync(`${n}.${e-1}`,{force:true});for(let t=e-2;t>=1;t-=1){let r=`${n}.${t}`;existsSync$1(r)&&renameSync(r,`${n}.${t+1}`);}existsSync$1(n)&&renameSync(n,`${n}.1`);}var re="WARNING: DevFlow is in degraded mode (daemon unreachable): 4-Gate enforcement and memory prefetch cache are unavailable. Run `devflow doctor` for details.";function oe(){return process.env.DEVFLOW_HOOK_DEGRADED==="1"}function y(){return {hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"allow"}}}function ie(n){return {hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"allow",additionalContext:n}}}function le(n){let e=l(n);return existsSync(e)||mkdirSync(e,{recursive:true}),e}function ue(n){let e=createHash("sha256").update(n).digest("hex").slice(0,12);return join(l(n),`session-id-${e}`)}function et(n){try{let e=ue(n);if(existsSync(e))return readFileSync(e,"utf-8").trim()}catch{}return null}function tt(n,e){le(e),writeFileSync(ue(e),n);}function nt(n,e,t,r){let o=join(le(n),"event-map.json"),i=[];try{existsSync(o)&&(i=JSON.parse(readFileSync(o,"utf-8")));}catch{}i.push({toolName:e,eventId:t,timestamp:r}),writeFileSync(o,JSON.stringify(i));}function rt(n){switch(n){case "Read":case "Glob":return "file_read";case "Write":case "Edit":case "NotebookEdit":return "file_write";case "Bash":return "bash_command";case "Agent":return "subagent";case "Skill":return "skill_invoke";default:return "tool_use"}}async function ot(n){if(oe())return ie(re);try{if(!n||n.trim()==="")return y();let e=JSON.parse(n),t=Date.now(),r=x(),o=r.split("/").pop()||"unknown",i=new D,s=et(r);s||(s=`session:${o}:${Date.now().toString(36)}`,tt(s,r),i.sendSessionStart(s,r,Date.now()).catch(()=>{}));let c=new v(r);if(e.tool_name==="Skill"){let a=e.tool_input?.skill;if(a&&a.startsWith("devflow:")){let R=c.startExecution(a,{required_mcp_tools:B(a)});i.sendExecutionStart(R,s,a,Date.now()).catch(()=>{});}}let u=c.detect(),p=e.tool_name.startsWith("mcp__"),pe=p?e.tool_name.replace(/^mcp__[^_]+__/,""):void 0,F=new w(r),I=F.getPhase(),d,_=F.evaluate(e.tool_name,p);_.permissionDecision==="deny"?d={hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:_.reason??"MCP context required"}}:_.additionalContext?d=ie(_.additionalContext):d=y();let de=c.getCurrentExecutionId()??s,j={eventId:`evt_${Date.now()}_${Math.random().toString(36).slice(2,11)}`,executionId:de,sessionId:s,timestamp:Date.now(),toolName:e.tool_name,toolType:p?"mcp":e.tool_name==="Agent"?"subagent":"direct",isMcpTool:p,mcpToolName:pe,mcpEnforced:p&&I==="context_gathering",mcpFallback:!p&&I==="context_gathering",kind:rt(e.tool_name),input:e.tool_input,duration:0,blocked:d.hookSpecificOutput.permissionDecision==="deny"};i.sendEvent(j).then(a=>{a&&nt(r,e.tool_name,a,j.timestamp);}).catch(()=>{});try{let a=O(r),R={ts:t,tool:e.tool_name,skill:u?.name??"(none)",requiredTools:requiredMcpTools,isMcp:p,enforce:shouldSkillEnforce,stateless:!shouldSkillEnforce&&!p&&e.tool_name!=="Skill",bypassCount:a.bypassCount??0,decision:d.hookSpecificOutput.permissionDecision,env_CLAUDE_PLUGIN_ROOT:process.env.CLAUDE_PLUGIN_ROOT??"(unset)",cwd:process.cwd()};ne(te(r),`${JSON.stringify(R)}
+`);}catch{}return d}catch{return y()}}if(process.argv[1]?.endsWith("pre-tool-use")||process.argv[1]?.endsWith("pre-tool-use.js")){let n="";process.stdin.setEncoding("utf8"),process.stdin.on("data",e=>{n+=e;}),process.stdin.on("end",async()=>{let e=await ot(n);console.log(JSON.stringify(e));}),process.stdin.on("error",()=>{console.log(JSON.stringify(y())),process.exit(0);}),setTimeout(()=>{console.log(JSON.stringify(y())),process.exit(0);},4e3).unref();}export{ot as handlePreToolUse};

package/dist/plugin-files/dist/hooks/server-bootstrap.js

@@ -0,0 +1,109 @@
+import {spawn,execFileSync}from'node:child_process';import {randomUUID}from'node:crypto';import {mkdirSync,writeFileSync,existsSync}from'node:fs';import {request}from'node:http';import {createRequire}from'node:module';import {homedir}from'node:os';import {join}from'node:path';var{DatabaseSync:y}=createRequire(import.meta.url)("node:sqlite"),C=75,x=400,U=2e3,H=300*1e3,W=1e3,B=1e3,F=15e3,Q=["--yes","@devflow-tools/server","--devflow-instance-token"],z=process.env.DEVFLOW_SERVER_BOOTSTRAP_HEALTH_URL??"http://127.0.0.1:13337/api/health";function E(e){let t=e instanceof Error?e.message:String(e);console.error(`[devflow] Server bootstrap skipped: ${t}`);}function $(e){let t=new y(e);t.exec(`PRAGMA busy_timeout = ${C}`);let n=t.prepare(`
+    SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'server_bootstrap_state'
+  `).get();if(n?.sql&&!n.sql.includes("'terminating'")){t.exec("BEGIN IMMEDIATE");try{t.exec("ALTER TABLE server_bootstrap_state RENAME TO server_bootstrap_state_legacy"),g(t),t.exec(`
+        INSERT INTO server_bootstrap_state (
+          id, token, state, owner_pid, wrapper_pid, process_group_id, server_pid,
+          created_at, updated_at
+        )
+        SELECT
+          id, token, state, owner_pid, wrapper_pid, process_group_id, server_pid,
+          created_at, updated_at
+        FROM server_bootstrap_state_legacy
+      `),t.exec("DROP TABLE server_bootstrap_state_legacy"),t.exec("COMMIT");}catch(r){try{t.exec("ROLLBACK");}catch{}throw r}}else n||g(t);return t}function g(e){e.exec(`
+    CREATE TABLE IF NOT EXISTS server_bootstrap_state (
+      id INTEGER PRIMARY KEY CHECK (id = 1),
+      token TEXT NOT NULL,
+      state TEXT NOT NULL CHECK (state IN ('launching', 'running', 'terminating')),
+      owner_pid INTEGER NOT NULL,
+      wrapper_pid INTEGER,
+      process_group_id INTEGER,
+      server_pid INTEGER,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL
+    )
+  `);}function K(e){return e.prepare(`
+    SELECT
+      token,
+      state,
+      owner_pid AS ownerPid,
+      wrapper_pid AS wrapperPid,
+      process_group_id AS processGroupId,
+      server_pid AS serverPid,
+      created_at AS createdAt,
+      updated_at AS updatedAt
+    FROM server_bootstrap_state
+    WHERE id = 1
+  `).get()}function c(e){return Number(e.changes)}function q(e){if(!Number.isSafeInteger(e)||e<=1)return  false;try{return process.kill(e,0),!0}catch{return  false}}function A(){let e=execFileSync("ps",["-axo","pid=,pgid=,command="],{encoding:"utf8",stdio:["ignore","pipe","ignore"],timeout:500}),t=[];for(let n of e.split(`
+`)){let r=n.match(/^\s*(\d+)\s+(\d+)\s+(.+)$/);if(!r)continue;let o=Number(r[1]),a=Number(r[2]);!Number.isSafeInteger(o)||!Number.isSafeInteger(a)||t.push({pid:o,processGroupId:a,command:r[3]});}return t}function V(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}function v(e,t){let n=V(t);return new RegExp(`(?:^|\\s)--devflow-instance-token(?:=|\\s+)${n}(?:\\s|$)`).test(e)}function P(e){return /(?:@devflow-tools\/server|devflow-server)/.test(e)}function Y(e){let t=A().filter(r=>P(r.command)&&v(r.command,e)),n=new Map;for(let r of t){let o=n.get(r.processGroupId)??[];o.push(r),n.set(r.processGroupId,o);}return [...n.entries()].map(([r,o])=>({processGroupId:r,processes:o})).sort((r,o)=>o.processes.length-r.processes.length)}function w(e,t){return Y(e).find(n=>t===void 0||n.processGroupId===t)}function d(e,t){let n=m(e,t);if(!n)return;let r=n.processes.find(o=>o.pid!==n.wrapperPid&&o.command.includes("devflow-server"));if(r)return {wrapperPid:n.wrapperPid,processGroupId:n.processGroupId,serverPid:r.pid,processes:n.processes}}function m(e,t){let n=w(e,t);if(!n)return;let r=n.processes.find(o=>o.pid===n.processGroupId&&o.command.includes("@devflow-tools/server"));if(r)return {wrapperPid:r.pid,processGroupId:r.processGroupId,processes:n.processes}}function _(e){if(!q(e))return  false;try{return execFileSync("ps",["-p",String(e),"-o","command="],{encoding:"utf8",stdio:["ignore","pipe","ignore"],timeout:250}).trim().includes("server-bootstrap")}catch{return  false}}function X(){return new Promise(e=>{let t=false,n=r=>{t||(t=true,e(r));};try{let r=request(z,{method:"GET",timeout:x},o=>{o.resume(),n((o.statusCode??500)>=200&&(o.statusCode??500)<300);});r.on("timeout",()=>r.destroy(new Error("health timeout"))),r.on("error",()=>n(!1)),r.end();}catch{n(false);}})}async function j(e){let t=false;try{e.exec("BEGIN IMMEDIATE"),t=!0;let n=await X(),r=K(e);if(n){if(r?.state==="running"||r?.state==="launching"){let s=d(r.token,r.processGroupId??void 0);s?e.prepare(`
+            UPDATE server_bootstrap_state
+            SET state = 'running', owner_pid = ?, wrapper_pid = ?, process_group_id = ?, server_pid = ?,
+                updated_at = ?
+            WHERE id = 1 AND token = ? AND state = ?
+          `).run(process.pid,s.wrapperPid,s.processGroupId,s.serverPid,Date.now(),r.token,r.state):r.state==="running"&&e.prepare(`
+            DELETE FROM server_bootstrap_state
+            WHERE id = 1 AND token = ? AND state = 'running'
+          `).run(r.token);}return e.exec("COMMIT"),t=!1,{action:"skip"}}if(r?.state==="launching"){if(_(r.ownerPid))return e.exec("COMMIT"),t=!1,{action:"skip"};let s=r.processGroupId??void 0,i=d(r.token,s);if(i){let f=e.prepare(`
+          UPDATE server_bootstrap_state
+          SET state = 'running', owner_pid = ?, wrapper_pid = ?, process_group_id = ?,
+              server_pid = ?, updated_at = ?
+          WHERE id = 1 AND token = ? AND state = 'launching' AND owner_pid = ?
+        `).run(process.pid,i.wrapperPid,i.processGroupId,i.serverPid,Date.now(),r.token,r.ownerPid);if(c(f)!==1)throw new Error("launch intent changed before adoption");return e.exec("COMMIT"),t=!1,console.error(`[devflow] Adopted server process group ${i.processGroupId}`),{action:"skip"}}let p=m(r.token,s);if(p&&Date.now()-r.createdAt<H)return e.exec("COMMIT"),t=!1,{action:"skip"};if(p){let f=e.prepare(`
+          UPDATE server_bootstrap_state
+          SET state = 'terminating', owner_pid = ?, process_group_id = ?, updated_at = ?
+          WHERE id = 1 AND token = ? AND state = 'launching' AND owner_pid = ?
+        `).run(process.pid,p.processGroupId,Date.now(),r.token,r.ownerPid);if(c(f)!==1)throw new Error("launch intent changed before cleanup claim");return e.exec("COMMIT"),t=!1,{action:"cleanup",token:r.token,processGroupId:p.processGroupId}}e.prepare(`
+        DELETE FROM server_bootstrap_state
+        WHERE id = 1 AND token = ? AND state = 'launching' AND owner_pid = ?
+      `).run(r.token,r.ownerPid);}else if(r?.state==="terminating"){if(_(r.ownerPid))return e.exec("COMMIT"),t=!1,{action:"skip"};let s=w(r.token);if(s){let i=e.prepare(`
+          UPDATE server_bootstrap_state
+          SET owner_pid = ?, process_group_id = ?, updated_at = ?
+          WHERE id = 1 AND token = ? AND state = 'terminating' AND owner_pid = ?
+        `).run(process.pid,s.processGroupId,Date.now(),r.token,r.ownerPid);if(c(i)!==1)throw new Error("cleanup ownership changed during recovery");return e.exec("COMMIT"),t=!1,{action:"cleanup",token:r.token,processGroupId:s.processGroupId}}e.prepare(`
+        DELETE FROM server_bootstrap_state
+        WHERE id = 1 AND token = ? AND state = 'terminating' AND owner_pid = ?
+      `).run(r.token,r.ownerPid);}else if(r?.state==="running"){let s=d(r.token);if(s)return e.prepare(`
+          UPDATE server_bootstrap_state
+          SET owner_pid = ?, wrapper_pid = ?, process_group_id = ?, server_pid = ?, updated_at = ?
+          WHERE id = 1 AND token = ? AND state = 'running'
+        `).run(process.pid,s.wrapperPid,s.processGroupId,s.serverPid,Date.now(),r.token),e.exec("COMMIT"),t=!1,{action:"skip"};let i=w(r.token);if(i&&!_(r.ownerPid)){let p=e.prepare(`
+          UPDATE server_bootstrap_state
+          SET state = 'terminating', owner_pid = ?, process_group_id = ?, updated_at = ?
+          WHERE id = 1 AND token = ? AND state = 'running' AND owner_pid = ?
+        `).run(process.pid,i.processGroupId,Date.now(),r.token,r.ownerPid);if(c(p)!==1)throw new Error("running cleanup ownership changed");return e.exec("COMMIT"),t=!1,{action:"cleanup",token:r.token,processGroupId:i.processGroupId}}e.prepare(`
+        DELETE FROM server_bootstrap_state
+        WHERE id = 1 AND token = ? AND state = 'running' AND owner_pid = ?
+      `).run(r.token,r.ownerPid);}let o=randomUUID(),a=Date.now();return e.prepare(`
+      INSERT INTO server_bootstrap_state (
+        id, token, state, owner_pid, wrapper_pid, process_group_id, server_pid,
+        created_at, updated_at
+      ) VALUES (1, ?, 'launching', ?, NULL, NULL, NULL, ?, ?)
+      ON CONFLICT(id) DO UPDATE SET
+        token = excluded.token,
+        state = 'launching',
+        owner_pid = excluded.owner_pid,
+        wrapper_pid = NULL,
+        process_group_id = NULL,
+        server_pid = NULL,
+        created_at = excluded.created_at,
+        updated_at = excluded.updated_at
+    `).run(o,process.pid,a,a),e.exec("COMMIT"),t=!1,{action:"launch",token:o}}finally{if(t)try{e.exec("ROLLBACK");}catch{}}}function J(e){return new Promise((t,n)=>{let r;try{r=spawn("npx",[...Q,e],{detached:!0,env:process.env,stdio:["ignore","inherit","inherit"]});}catch(o){n(o);return}r.once("spawn",()=>t(r)),r.once("error",n);})}async function u(e,t){let n=Date.now()+t;for(;Date.now()<n;){if(e())return  true;await new Promise(r=>setTimeout(r,10));}return e()}async function h(e){let t=process.env[e];if(!t)return;writeFileSync(t,`${process.pid}
+`);let n=process.env.DEVFLOW_SERVER_BOOTSTRAP_TEST_CONTINUE_FILE;if(!n)return;if(!await u(()=>existsSync(n),F))throw new Error(`test checkpoint timed out: ${e}`)}async function Z(e,t){let n;return await u(()=>{let o=d(e,t);return o?(n=o,true):false},U)?n:void 0}function ee(e,t,n){let r=false;try{e.exec("BEGIN IMMEDIATE"),r=!0;let o=e.prepare(`
+      UPDATE server_bootstrap_state
+      SET wrapper_pid = ?, process_group_id = ?, server_pid = NULL, updated_at = ?
+      WHERE id = 1 AND token = ? AND state = 'launching' AND owner_pid = ?
+    `).run(n.wrapperPid,n.processGroupId,Date.now(),t,process.pid);if(c(o)!==1)throw new Error("launch intent ownership changed before wrapper persistence");e.exec("COMMIT"),r=!1;}finally{if(r)try{e.exec("ROLLBACK");}catch{}}}function re(e,t,n){let r=false;try{e.exec("BEGIN IMMEDIATE"),r=!0;let o=e.prepare(`
+      UPDATE server_bootstrap_state
+      SET state = 'running', wrapper_pid = ?, process_group_id = ?, server_pid = ?,
+          updated_at = ?
+      WHERE id = 1 AND token = ? AND state = 'launching' AND owner_pid = ?
+    `).run(n.wrapperPid,n.processGroupId,n.serverPid,Date.now(),t,process.pid);if(c(o)!==1)throw new Error("launch intent ownership changed before promotion");e.exec("COMMIT"),r=!1;}finally{if(r)try{e.exec("ROLLBACK");}catch{}}}function te(e,t){let n=false;try{e.exec("BEGIN IMMEDIATE"),n=!0,e.prepare(`
+      DELETE FROM server_bootstrap_state
+      WHERE id = 1 AND token = ? AND state = 'launching' AND owner_pid = ?
+    `).run(t,process.pid),e.exec("COMMIT"),n=!1;}finally{if(n)try{e.exec("ROLLBACK");}catch{}}}function ne(e,t,n){let r=false;try{e.exec("BEGIN IMMEDIATE"),r=!0;let o=e.prepare(`
+      UPDATE server_bootstrap_state
+      SET state = 'terminating', owner_pid = ?, updated_at = ?
+      WHERE id = 1 AND token = ? AND state = 'launching' AND owner_pid = ?
+    `).run(process.pid,Date.now(),t,n);return e.exec("COMMIT"),r=!1,c(o)===1}finally{if(r)try{e.exec("ROLLBACK");}catch{}}}function oe(e,t){let n=false;try{e.exec("BEGIN IMMEDIATE"),n=!0;let r=e.prepare(`
+      DELETE FROM server_bootstrap_state
+      WHERE id = 1 AND token = ? AND state = 'terminating' AND owner_pid = ?
+    `).run(t,process.pid);return e.exec("COMMIT"),n=!1,c(r)===1}finally{if(n)try{e.exec("ROLLBACK");}catch{}}}function l(e){return A().filter(t=>t.processGroupId===e)}function S(e,t){return l(e).some(n=>P(n.command)&&v(n.command,t))}async function se(e,t){if(!S(e,t))return  false;console.error(`[devflow] Terminating untracked server process group ${e}`);try{process.kill(-e,"SIGTERM");}catch{}if(await u(()=>l(e).length===0,W))return  true;if(!S(e,t))return  false;try{process.kill(-e,"SIGKILL");}catch{}return u(()=>l(e).length===0,B)}async function D(e,t,n){return l(n).length===0||await se(n,t)?oe(e,t):false}async function ie(){let e=join(homedir(),".devflow");mkdirSync(e,{recursive:true});let t=$(join(e,"server-bootstrap.sqlite")),n,r,o=false;try{for(;;){let i=await j(t);if(i.action==="skip")return;if(i.action==="cleanup"){if(!await D(t,i.token,i.processGroupId))throw new Error("claimed server process group cleanup did not complete");continue}n=i.token;break}if(await h("DEVFLOW_SERVER_BOOTSTRAP_TEST_INTENT_READY_FILE"),r=await J(n),!r.pid)throw new Error("npx launched without a PID");let a=r.pid,s=await Z(n,a);if(!s){let i=m(n,a);if(!i)throw new Error("npx process group ownership could not be validated");ee(t,n,i),r.unref(),console.error(`[devflow] Server package launch still warming (PID ${i.wrapperPid})`);return}await h("DEVFLOW_SERVER_BOOTSTRAP_TEST_AFTER_SPAWN_READY_FILE"),re(t,n,s),o=!0,r.unref(),console.error(`[devflow] Server starting in background (PID ${s.wrapperPid})`);}catch(a){if(n&&r?.pid&&!o){let s=false;try{s=ne(t,n,process.pid);}catch(i){E(i);}s?await D(t,n,r.pid)||console.error(`[devflow] Server process group ${r.pid} cleanup did not complete`):(console.error(`[devflow] Server cleanup claim lost for token ${n}`),r.unref());}else if(n&&!r)try{te(t,n);}catch(s){E(s);}throw a}finally{try{t.close();}catch{}}}ie().catch(E).then(()=>{process.exitCode=0;},()=>{process.exitCode=0;});

package/dist/plugin-files/dist/hooks/session-end.js

@@ -0,0 +1,2 @@
+import {request}from'http';import {existsSync,readFileSync,readdirSync,unlinkSync,mkdirSync,writeFileSync}from'fs';import {join}from'path';import {createHash}from'crypto';import {getLocalApiKey,getProjectStateDir}from'@devflow-tools/sdk';import {openGlobalDevFlowDatabase}from'@devflow-tools/database';import {homedir}from'os';import {MemoryGate}from'@devflow-tools/memory-engine';function b(i){return i??process.env.CLAUDE_PROJECT_DIR??process.cwd()}function I(i){return process.env.DEVFLOW_STATE_DIR??getProjectStateDir(b(i))}var O=1e4,B=3e4,g=500;function G(i,t,e){return new Promise(n=>{try{let r=new URL(i),o=request({hostname:r.hostname,port:r.port||80,path:r.pathname+r.search,method:"POST",headers:{"Content-Type":"application/json","X-API-Key":e,"Content-Length":Buffer.byteLength(t)},timeout:5e3},s=>{let l=[];s.on("data",a=>l.push(a)),s.on("end",()=>{let a=Buffer.concat(l).toString();n(s.statusCode!=null&&s.statusCode>=200&&s.statusCode<300?a:null);});});o.on("error",()=>n(null)),o.on("timeout",()=>{o.destroy(),n(null);}),o.write(t),o.end();}catch{n(null);}})}var y=class{constructor(t){this.retryScheduled=false;this.apiUrl=t?.apiUrl??process.env.DEVFLOW_API_URL??"http://127.0.0.1:13337",this.apiKey=t?.apiKey??getLocalApiKey(),this.cacheDir=t?.cacheDir??join(process.env.DEVFLOW_STATE_DIR??join(homedir(),".devflow","global"),"telemetry-cache"),this.legacyCacheDir=t?.legacyCacheDir??(t?.cacheDir?null:join(homedir(),".devflow","telemetry-cache")),this.database=t?.database??null,this.ownsDatabase=!t?.database;}async sendEvent(t){let e={...t,input:this.truncateInput(t.input)};return this.commitOrCache("tool_call",e)?(this.postHttp("/api/telemetry/tool-call",e),t.eventId):null}async sendExecutionStart(t,e,n,r){let o={executionId:t,sessionId:e,skillName:n,startedAt:r};this.commitOrCache("execution_start",o)&&this.postHttp("/api/telemetry/skill-execution/start",o);}async sendSessionStart(t,e,n){let r={id:t,projectRoot:e,startedAt:n,label:e.split("/").pop()??"unknown"},o=this.commitOrCache("session_start",r);return o&&this.postHttp("/api/telemetry/sessions",r),o}async completeEvent(t){let e=this.commitOrCache("complete_event",t);return e&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp("/api/telemetry/tool-call/output",t)),e}async endSession(t,e=Date.now()){let n={sessionId:t,finishedAt:e},r=this.commitOrCache("session_end",n);return r&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp(`/api/telemetry/sessions/${encodeURIComponent(t)}/close`,{finishedAt:e})),r}async flushCache(){try{let n=this.getDatabase(),r=n.listTelemetryFailures({unresolvedOnly:!0,limit:g}).reverse();for(let o of r)try{this.applyOperation(o.operation,o.payload),n.resolveTelemetryFailure(o.id);}catch{}n.trimTelemetryFailures(g);}catch{}let e=[...new Set([this.cacheDir,this.legacyCacheDir].filter(n=>!!n))].filter(n=>existsSync(n)).flatMap(n=>readdirSync(n).filter(r=>r.endsWith(".json")).map(r=>{let o=join(n,r);try{return {cacheFile:o,envelope:J(JSON.parse(readFileSync(o,"utf8")),r)}}catch{return null}})).filter(n=>n!==null).sort((n,r)=>n.envelope.timestamp-r.envelope.timestamp||P(n.envelope.operation)-P(r.envelope.operation));for(let{cacheFile:n,envelope:r}of e)try{let o=this.getDatabase();o.insertTelemetryFailure({id:r.id,operation:r.operation,payload:r.payload,error:r.failure,createdAt:r.timestamp}),this.applyOperation(r.operation,r.payload),o.resolveTelemetryFailure(r.id),unlinkSync(n);}catch{}this.database?.aggregatePendingToolMetrics();}aggregateMetrics(){return this.getDatabase().aggregatePendingToolMetrics()}async flushAndAggregate(){await this.flushCache(),this.aggregateMetrics();}close(){this.ownsDatabase&&this.database?.close(),this.database=null;}getDatabase(){return this.database??=openGlobalDevFlowDatabase(),this.database}commitOrCache(t,e){try{return this.applyOperation(t,e),!0}catch(n){return this.cacheOperation(t,e,n),false}}applyOperation(t,e){let n=this.getDatabase();switch(t){case "tool_call":n.insertToolCallEvent(e);return;case "execution_start":n.insertSkillExecution({executionId:e.executionId,sessionId:e.sessionId,skillName:e.skillName,startedAt:e.startedAt,status:"running"});return;case "session_start":n.insertSession(e),n.insertRun({id:M(e.id),source:"hook",tool:"session",input:{projectRoot:e.projectRoot},status:"active",startedAt:e.startedAt,tokenUsed:0,metadata:{sessionId:e.id,projectRoot:e.projectRoot}});return;case "complete_event":if(!n.updateToolCallEvent(e.eventId,{output:e.output===void 0?void 0:JSON.stringify(e.output),error:e.error,duration:e.duration}))throw new Error(`Tool call event ${e.eventId} is not available for completion`);return;case "session_end":n.closeSession(e.sessionId,e.finishedAt),n.updateRun(M(e.sessionId),{status:"completed",finishedAt:e.finishedAt});return}}cacheOperation(t,e,n){let r=Date.now(),o={id:`failure:${r}:${Math.random().toString(36).slice(2,11)}`,operation:t,payload:e,failure:n instanceof Error?n.message:String(n),timestamp:r};try{let s=this.getDatabase();s.insertTelemetryFailure({id:o.id,operation:t,payload:e,error:o.failure,createdAt:r}),s.trimTelemetryFailures(g),this.scheduleRetry();return}catch{}try{existsSync(this.cacheDir)||mkdirSync(this.cacheDir,{recursive:!0});let s=join(this.cacheDir,`${r}_${Math.random().toString(36).slice(2,11)}.json`);writeFileSync(s,JSON.stringify(o,null,2),{mode:384}),this.trimCompatibilityCache(),this.scheduleRetry();}catch{}}trimCompatibilityCache(){try{let t=readdirSync(this.cacheDir).filter(e=>e.endsWith(".json")).sort();for(let e of t.slice(0,Math.max(0,t.length-g)))unlinkSync(join(this.cacheDir,e));}catch{}}scheduleRetry(){this.retryScheduled||(this.retryScheduled=true,setTimeout(()=>{this.retryScheduled=false,this.flushCache();},B).unref());}postHttp(t,e){G(`${this.apiUrl}${t}`,JSON.stringify(e),this.apiKey);}truncateInput(t){let e=JSON.stringify(t);return e===void 0||e.length<=O?t:{_truncated:true,_original_size:e.length,_preview:`${e.substring(0,O)}...`}}};function P(i){return ["session_start","execution_start","tool_call","complete_event","session_end"].indexOf(i)}function M(i){return `hook-run:${i}`}function J(i,t){if(!i||typeof i!="object")throw new Error("Invalid telemetry cache envelope");let e=i;if(typeof e.operation=="string"&&e.payload!==void 0)return e;let n=e.type==="tool_call"?"tool_call":e.type==="execution_start"?"execution_start":null;if(!n)throw new Error("Unknown legacy telemetry cache operation");let r=e.payload??{},o=Number(r.timestamp??r.startedAt??Date.now());return {id:`legacy-cache:${t}`,operation:n,payload:r,failure:"Replayed legacy HTTP-first telemetry cache entry",timestamp:o}}async function F(i){let t=!i.memory,e=i.memory??new MemoryGate(i.projectRoot),n=0,r=0;try{await e.forceWarmUp(),i.trigger==="session_end"&&(n=await e.releasePendingDistillLeases(i.sessionId)),r=e.getPendingEventCount();}finally{t&&e.close();}let o={pendingEvents:r,releasedLeases:n,trigger:i.trigger,sessionId:i.sessionId};try{let s=openGlobalDevFlowDatabase();try{let l=Date.now(),a=`distill:${l}:${Math.random().toString(36).slice(2,10)}`;s.recordMemoryDistillCheckpoint({id:a,projectRoot:i.projectRoot,sessionId:i.sessionId,trigger:i.trigger,pendingEvents:r,releasedLeases:n,createdAt:l}),s.insertEvent({kind:"memory_distill_requested",timestamp:l,success:!0,metadata:{...o,projectRoot:i.projectRoot}});}finally{s.close();}}catch{}return o}var ee=process.env.DEVFLOW_SERVER_URL||"http://127.0.0.1:13337",te=getLocalApiKey();function ne(i,t){return new Promise(e=>{let n=JSON.stringify(t),r=new URL(i,ee),o=request({hostname:r.hostname,port:r.port,path:r.pathname,method:"POST",headers:{"Content-Type":"application/json","X-API-Key":te,"Content-Length":Buffer.byteLength(n)},timeout:5e3},()=>e());o.on("error",()=>e()),o.write(n),o.end();})}function _(i){let t=I(i),e=createHash("sha256").update(i).digest("hex").slice(0,12);return [join(t,`session-id-${e}`),join(t,"current-execution-id"),join(t,"current-skill.json"),join(t,"event-map.json")]}function re(i){try{let t=_(i)[0];if(existsSync(t))return readFileSync(t,"utf-8").trim()}catch{}return null}function ie(i){for(let t of _(i))try{existsSync(t)&&unlinkSync(t);}catch{}}async function oe(i,t=b(),e=true,n){let r;try{r=JSON.parse(i);}catch{return}let o=r.session_id||re(t);if(!o)return;let s=n?.telemetry??new y,l=!n?.telemetry;try{try{await s.flushAndAggregate();}catch{}let a;try{a=openGlobalDevFlowDatabase();let L=a.listToolCallEventsBySession(o),C=_(t)[1];if(e&&existsSync(C)){let p="";try{p=readFileSync(C,"utf-8").trim();}catch{}if(p){let h=L.filter(m=>m.executionId===p),c=h.length,d=h.filter(m=>m.isMcpTool).length,T=c-d,w=h.filter(m=>m.toolType==="subagent").length,v=h.map(m=>m.timestamp).filter(Boolean),E=v.length>=2?Math.max(...v)-Math.min(...v):0;try{a.updateSkillExecution(p,{status:"completed",finishedAt:Date.now(),totalToolCalls:c,mcpToolCalls:d,directToolCalls:T,subagentCount:w,totalDuration:E,mcpComplianceRate:c>0?Math.round(d/c*1e4)/100:0}),await ne("/api/telemetry/skill-execution/complete",{executionId:p,finishedAt:Date.now(),status:"completed",summary:{totalToolCalls:c,mcpToolCalls:d,directToolCalls:T,subagentCount:w,totalDuration:E,mcpComplianceRate:c>0?Math.round(d/c*1e4)/100:0}});}catch{}}}e&&a.deleteHookReceipt(t);}catch{}finally{a?.close();}try{await F({projectRoot:t,sessionId:o,trigger:"session_end",memory:n?.memory});}catch{}try{await s.endSession(o),await s.flushAndAggregate();}catch{}}finally{l&&s.close(),e&&ie(t);}}if(process.argv[1]?.endsWith("session-end")||process.argv[1]?.endsWith("session-end.js")){let i="";process.stdin.setEncoding("utf8"),process.stdin.on("data",t=>{i+=t;}),process.stdin.on("end",async()=>{await oe(i.trim()||process.argv[2]||""),process.exit(0);}),process.stdin.on("error",()=>process.exit(0)),setTimeout(()=>process.exit(0),1e4).unref();}
+export{oe as handleSessionEnd};

package/dist/plugin-files/dist/hooks/stop.js

@@ -0,0 +1,2 @@
+import {request}from'http';import {existsSync,readFileSync}from'fs';import {join}from'path';import {homedir}from'os';import {createHash}from'crypto';import {getLocalApiKey}from'@devflow-tools/sdk';var h=process.env.DEVFLOW_SERVER_URL||"http://127.0.0.1:13337",f=getLocalApiKey();function _(t,e){return new Promise(o=>{let r=JSON.stringify(e),n=new URL(t,h),s=request({hostname:n.hostname,port:n.port,path:n.pathname,method:"POST",headers:{"Content-Type":"application/json","X-API-Key":f,"Content-Length":Buffer.byteLength(r)},timeout:5e3},()=>o());s.on("error",()=>o()),s.write(r),s.end();})}var S=join(homedir(),".devflow"),g=process.env.CLAUDE_PROJECT_DIR||process.cwd(),E=createHash("sha256").update(g).digest("hex").slice(0,12),i=join(S,`session-id-${E}`);function R(){try{if(existsSync(i))return readFileSync(i,"utf-8").trim()}catch{}return null}async function y(t){let e;try{e=JSON.parse(t);}catch{return null}if(e.stop_hook_active)return null;let o=R();return o&&_(`/api/telemetry/sessions/${encodeURIComponent(o)}/tick`,{timestamp:Date.now()}).catch(()=>{}),null}if(process.argv[1]?.endsWith("stop")||process.argv[1]?.endsWith("stop.js")){let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",e=>{t+=e;}),process.stdin.on("end",async()=>{await y(t.trim()||process.argv[2]||""),process.exit(0);}),process.stdin.on("error",()=>process.exit(0)),setTimeout(()=>process.exit(0),4e3).unref();}
+export{y as handleStop};

package/dist/plugin-files/dist/hooks/user-prompt-submit.js

@@ -0,0 +1,2 @@
+import {createHash}from'node:crypto';import {mkdirSync,appendFileSync}from'node:fs';import {homedir}from'node:os';import {dirname,join}from'node:path';import {MemoryGate}from'@devflow-tools/memory-engine';import'@devflow-tools/database';var g=/(?:^|[.!?。！？]\s*)(?:(?:please\s+)?(?:remember|memorize)\b|(?:请记|(?:请)?记住))/iu,D=/\b(?:(?:do\s+not|don't|dont|never|not)(?:\s+need\s+to)?|no\s+need\s+to)\s+(?:please\s+)?(?:remember|memorize)\b|(?:不要|别|不用|无需|不必|不需要)(?:再)?(?:记住|记|记忆)/iu;function c(e){let t=e.trim();return t&&g.test(t)&&!D.test(t)?t:null}function S(e){let t=createHash("sha256").update(e).digest("hex").slice(0,16),n=process.env.DEVFLOW_STATE_DIR||join(homedir(),".devflow","state",t);return join(n,"memory-intents.jsonl")}function a(e,t){let n=S(e);mkdirSync(dirname(n),{recursive:true}),appendFileSync(n,`${JSON.stringify(t)}
+`,{mode:384});}var m="WARNING: DevFlow is in degraded mode (daemon unreachable): 4-Gate enforcement and memory prefetch cache are unavailable. Run `devflow doctor` for details.";function u(){return process.env.DEVFLOW_HOOK_DEGRADED==="1"}var p=process.env.CLAUDE_PROJECT_DIR||process.cwd();async function I(e){let t=u()?{additionalContext:m}:{},n;try{n=JSON.parse(e);}catch{return {hookSpecificOutput:{hookEventName:"UserPromptSubmit",permissionDecision:"allow",...t}}}let r=n.prompt||"";if(!r.trim())return {hookSpecificOutput:{hookEventName:"UserPromptSubmit",permissionDecision:"allow",...t}};let s=c(r);if(s)try{a(p,{content:s,sessionId:n.session_id,createdAt:Date.now()});}catch{}let o=new MemoryGate(p);try{await o.forceWarmUp(),await o.recordUserMessage(r.slice(0,2e3));}catch{}finally{o.close();}return {hookSpecificOutput:{hookEventName:"UserPromptSubmit",permissionDecision:"allow",...t}}}if(process.argv[1]?.endsWith("user-prompt-submit")||process.argv[1]?.endsWith("user-prompt-submit.js")){let e="";process.stdin.setEncoding("utf8"),process.stdin.on("data",t=>{e+=t;}),process.stdin.on("end",async()=>{let t=await I(e.trim()||process.argv[2]||"");console.log(JSON.stringify(t)),process.exit(0);}),process.stdin.on("error",()=>{console.log(JSON.stringify({hookSpecificOutput:{hookEventName:"UserPromptSubmit",permissionDecision:"allow"}})),process.exit(0);}),setTimeout(()=>{console.log(JSON.stringify({hookSpecificOutput:{hookEventName:"UserPromptSubmit",permissionDecision:"allow"}})),process.exit(0);},3e4).unref();}export{I as handleUserPromptSubmit};

package/dist/plugin-files/dist/skills/devflow:animation/SKILL.md

@@ -28,44 +28,6 @@ When the skill execution is complete, clean up:
 rm -f ~/.devflow/current-skill.json ~/.devflow/current-execution-id
 ```
 
-## 工作流（必须按顺序执行）
-
-### Step 1: 获取精确上下文
-调用 `mcp__devflow__get_project_context` 获取与用户问题相关的代码、记忆和知识库信息。
-这一步确保你拿到的是项目真实状态，而非凭空猜测。
-
-### Step 2: 分析
-基于 Step 1 返回的上下文，分析问题根因或设计方案。
-此时可以自由使用 Read 查看具体文件。
-
-### Step 3: 执行
-根据分析结果修改代码，逐文件编辑。
-
-### Step 4: 验证
-运行类型检查和测试，确保改动正确。
-
-## 可用工具
-
-| 工具 | 何时调用 |
-|------|----------|
-| `mcp__devflow__get_project_context` | 每次任务第一步（必须） |
-| `mcp__devflow__animation_suggest` | 按需调用 |
-
-## 规则
-- 永远从 `mcp__devflow__get_project_context` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
-## 规则
-- 永远从 `get_project_context` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
-## 规则
-- 永远从 `animation_suggest` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
 # ✨ ANIMATION
 
 你是一个动画专家。精通 CSS Animation、Framer Motion、GSAP。动画必须 60fps 且支持 prefers-reduced-motion。
@@ -92,3 +54,10 @@ rm -f ~/.devflow/current-skill.json ~/.devflow/current-execution-id
 
 - animation-docs: 2024 — https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_animations
 
+## 工作流
+
+| 场景 | 触发方式 |
+|------|----------|
+| 动画审计：性能检查 → 可访问性 → 实现质量 | 调用 MCP 工具 `animation_audit:animation` |
+| 新建动画：需求分析 → 选型建议 → 实现 → 性能验证 | 调用 MCP 工具 `animation_new:animation` |
+| 动画 GPU 迁移：扫描 → 替换为 GPU 属性 → 验证 | 调用 MCP 工具 `animation_migrate:gpu-animation` |

package/dist/plugin-files/dist/skills/devflow:css/SKILL.md

@@ -28,44 +28,6 @@ When the skill execution is complete, clean up:
 rm -f ~/.devflow/current-skill.json ~/.devflow/current-execution-id
 ```
 
-## 工作流（必须按顺序执行）
-
-### Step 1: 获取精确上下文
-调用 `mcp__devflow__get_project_context` 获取与用户问题相关的代码、记忆和知识库信息。
-这一步确保你拿到的是项目真实状态，而非凭空猜测。
-
-### Step 2: 分析
-基于 Step 1 返回的上下文，分析问题根因或设计方案。
-此时可以自由使用 Read 查看具体文件。
-
-### Step 3: 执行
-根据分析结果修改代码，逐文件编辑。
-
-### Step 4: 验证
-运行类型检查和测试，确保改动正确。
-
-## 可用工具
-
-| 工具 | 何时调用 |
-|------|----------|
-| `mcp__devflow__get_project_context` | 每次任务第一步（必须） |
-| `mcp__devflow__css_audit_selectors` | 按需调用 |
-
-## 规则
-- 永远从 `mcp__devflow__get_project_context` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
-## 规则
-- 永远从 `get_project_context` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
-## 规则
-- 永远从 `css_audit_selectors` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
 # 🎨 CSS
 
 你是一个 CSS 专家。使用现代布局方案（Flexbox/Grid），遵循 BEM 命名，移动优先响应式设计。遇到问题先查 MDN 文档。
@@ -92,3 +54,10 @@ rm -f ~/.devflow/current-skill.json ~/.devflow/current-execution-id
 
 - mdn-css: 2024 — https://developer.mozilla.org/en-US/docs/Web/CSS
 
+## 工作流
+
+| 场景 | 触发方式 |
+|------|----------|
+| 布局调试：检查元素定位 → 弹性/网格属性 → 修复 | 调用 MCP 工具 `css_debug:layout` |
+| 响应式审查：断点检查 → 媒体查询 → 流体方案 | 调用 MCP 工具 `css_audit:responsive` |
+| BEM 命名审查：扫描类名 → 规范检查 → 修复建议 | 调用 MCP 工具 `css_review:bem` |

package/dist/plugin-files/dist/skills/devflow:docker/SKILL.md

@@ -28,44 +28,6 @@ When the skill execution is complete, clean up:
 rm -f ~/.devflow/current-skill.json ~/.devflow/current-execution-id
 ```
 
-## 工作流（必须按顺序执行）
-
-### Step 1: 获取精确上下文
-调用 `mcp__devflow__get_project_context` 获取与用户问题相关的代码、记忆和知识库信息。
-这一步确保你拿到的是项目真实状态，而非凭空猜测。
-
-### Step 2: 分析
-基于 Step 1 返回的上下文，分析问题根因或设计方案。
-此时可以自由使用 Read 查看具体文件。
-
-### Step 3: 执行
-根据分析结果修改代码，逐文件编辑。
-
-### Step 4: 验证
-运行类型检查和测试，确保改动正确。
-
-## 可用工具
-
-| 工具 | 何时调用 |
-|------|----------|
-| `mcp__devflow__get_project_context` | 每次任务第一步（必须） |
-| `mcp__devflow__docker_dockerize_project` | 按需调用 |
-
-## 规则
-- 永远从 `mcp__devflow__get_project_context` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
-## 规则
-- 永远从 `get_project_context` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
-## 规则
-- 永远从 `docker_dockerize_project` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
 # 🐳 DOCKER
 
 你是一个 Docker 专家。使用多阶段构建优化镜像，遵循安全和性能最佳实践。遇到问题先查官方文档。
@@ -95,3 +57,11 @@ rm -f ~/.devflow/current-skill.json ~/.devflow/current-execution-id
 
 - docker-docs: 26.0.0 — https://docs.docker.com/reference/
 
+## 工作流
+
+| 场景 | 触发方式 |
+|------|----------|
+| 项目 Docker 化：分析项目 → 多阶段 Dockerfile → Compose → 构建验证 | 调用 MCP 工具 `docker_dockerize_project` |
+| 镜像优化：体积分析 → 层优化 → 多阶段重构 | 调用 MCP 工具 `docker_optimize:image` |
+| 安全扫描：漏洞检测 → 配置审查 → 修复建议 | 调用 MCP 工具 `docker_scan:security` |
+| 多服务 Compose 编排：依赖分析 → 网络设计 → 环境管理 | 调用 MCP 工具 `docker_setup:compose` |

package/dist/plugin-files/dist/skills/devflow:electron/SKILL.md

@@ -28,44 +28,6 @@ When the skill execution is complete, clean up:
 rm -f ~/.devflow/current-skill.json ~/.devflow/current-execution-id
 ```
 
-## 工作流（必须按顺序执行）
-
-### Step 1: 获取精确上下文
-调用 `mcp__devflow__get_project_context` 获取与用户问题相关的代码、记忆和知识库信息。
-这一步确保你拿到的是项目真实状态，而非凭空猜测。
-
-### Step 2: 分析
-基于 Step 1 返回的上下文，分析问题根因或设计方案。
-此时可以自由使用 Read 查看具体文件。
-
-### Step 3: 执行
-根据分析结果修改代码，逐文件编辑。
-
-### Step 4: 验证
-运行类型检查和测试，确保改动正确。
-
-## 可用工具
-
-| 工具 | 何时调用 |
-|------|----------|
-| `mcp__devflow__get_project_context` | 每次任务第一步（必须） |
-| `mcp__devflow__electron_diagnose_bug` | 按需调用 |
-
-## 规则
-- 永远从 `mcp__devflow__get_project_context` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
-## 规则
-- 永远从 `get_project_context` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
-## 规则
-- 永远从 `electron_diagnose_bug` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
 # ⚛️ ELECTRON
 
 你是一个 Electron 专家。使用 contextBridge + IPC 安全通信模式。严格遵循 Electron 安全最佳实践。
@@ -95,3 +57,11 @@ rm -f ~/.devflow/current-skill.json ~/.devflow/current-execution-id
 
 - electron-docs: 30.0.0 — https://www.electronjs.org/docs/latest/
 
+## 工作流
+
+| 场景 | 触发方式 |
+|------|----------|
+| 新建 IPC 通道：定义 API → Preload 暴露 → 主进程处理 | 调用 MCP 工具 `electron_new:ipc` |
+| 安全审计：配置检查 → IPC 暴露面 → CSP → 第三方依赖 | 调用 MCP 工具 `electron_audit:security` |
+| 自动更新配置：electron-updater → 发布渠道 → 更新 UI | 调用 MCP 工具 `electron_setup:auto-update` |
+| Electron Bug 诊断：进程分类 → IPC 追踪 → 原生调试 | 调用 MCP 工具 `electron_diagnose_bug` |

package/dist/plugin-files/dist/skills/devflow:git/SKILL.md

@@ -28,44 +28,6 @@ When the skill execution is complete, clean up:
 rm -f ~/.devflow/current-skill.json ~/.devflow/current-execution-id
 ```
 
-## 工作流（必须按顺序执行）
-
-### Step 1: 获取精确上下文
-调用 `mcp__devflow__get_project_context` 获取与用户问题相关的代码、记忆和知识库信息。
-这一步确保你拿到的是项目真实状态，而非凭空猜测。
-
-### Step 2: 分析
-基于 Step 1 返回的上下文，分析问题根因或设计方案。
-此时可以自由使用 Read 查看具体文件。
-
-### Step 3: 执行
-根据分析结果修改代码，逐文件编辑。
-
-### Step 4: 验证
-运行类型检查和测试，确保改动正确。
-
-## 可用工具
-
-| 工具 | 何时调用 |
-|------|----------|
-| `mcp__devflow__get_project_context` | 每次任务第一步（必须） |
-| `mcp__devflow__git_analyze_repo` | 按需调用 |
-
-## 规则
-- 永远从 `mcp__devflow__get_project_context` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
-## 规则
-- 永远从 `get_project_context` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
-## 规则
-- 永远从 `git_analyze_repo` 开始——你不知道项目里有什么
-- 上下文返回后，用 Read 确认关键文件
-- 改完代码后跑类型检查
-
 # 🔀 GIT
 
 你是一个 Git 工作流专家。遵循 Conventional Commits 规范和 GitFlow 分支策略。
@@ -95,3 +57,11 @@ rm -f ~/.devflow/current-skill.json ~/.devflow/current-execution-id
 - conventional-commits: 1.0.0 — https://www.conventionalcommits.org/en/v1.0.0/
 - git-scm-docs: 2.45.0 — https://git-scm.com/docs
 
+## 工作流
+
+| 场景 | 触发方式 |
+|------|----------|
+| 规范化提交： | 调用 MCP 工具 `git_commit` |
+| 发布流程： | 调用 MCP 工具 `git_release` |
+| 分支清理： | 调用 MCP 工具 `git_audit:branches` |
+| 冲突解决： | 调用 MCP 工具 `git_resolve:conflicts` |