@devflow-tools/cli 0.18.27 → 0.18.28

package/dist/plugin-files/dist/hooks/pre-compact.js

@@ -1,4 +1,4 @@
-import {getLocalApiKey,getDevFlowStateRoot,acquireRuntimeHttpCircuit,registerRuntimeHttpSuccess,registerRuntimeHttpFailure,readRuntimeState}from'@devflow-tools/sdk';import {existsSync,readdirSync,readFileSync,unlinkSync,mkdirSync,writeFileSync}from'fs';import {join as join$1}from'path';import {openGlobalDevFlowDatabase}from'@devflow-tools/database';import {request}from'node:http';import {existsSync as existsSync$1,mkdirSync as mkdirSync$1,appendFileSync}from'node:fs';import {join}from'node:path';import {rotateDiagnosticLogFile}from'@devflow-tools/telemetry';import {MemoryGate}from'@devflow-tools/memory-engine';import {createHash}from'node:crypto';function b(s){return s??process.env.CLAUDE_PROJECT_DIR??process.cwd()}function p(s,r,e){try{let t=openGlobalDevFlowDatabase();try{t.insertEvent({kind:s,timestamp:Date.now(),duration:e,success:r.success!==!1,metadata:r});}finally{t.close();}}catch{}}var J=getLocalApiKey(),y=join(getDevFlowStateRoot(),"errors");async function R(s,r,e={}){let t=e.endpoint??process.env.DEVFLOW_SERVER_URL?.trim()??W();if(!t)return {delivered:false,suppressed:false,fallbackReason:"runtime_not_ready"};let o=e.timeout??1500,n=e.durableMirror??true,i=e.maxRetries??(n?0:2),a=e.circuitBreaker??true,c=acquireRuntimeHttpCircuit(t,s);if(a&&!c.allowed)return {delivered:false,suppressed:true,fallbackReason:c.state.fallbackReason};let d;for(let l=0;l<=i;l+=1)try{return await B(t,s,r,o),a&&registerRuntimeHttpSuccess(t,s).transitioned&&p("http_circuit_transition",{endpoint:t,path:new URL(s,t).pathname,previous:c.state.status,status:"closed",failures:0}),{delivered:!0,suppressed:!1}}catch(m){d=m instanceof Error?m:new Error(String(m)),l<i&&await K(Math.min(100*2**l,1e3));}if(!d)return {delivered:false,suppressed:false,fallbackReason:"unknown_http_failure"};if(!a)return v(s,d),{delivered:false,suppressed:false,fallbackReason:d.message};let u=registerRuntimeHttpFailure(t,s,e.fallbackReason??(n?"local_durable_mirror":"http_delivery_failed"));return u.transitioned&&(v(s,d),p("http_circuit_transition",{endpoint:t,path:new URL(s,t).pathname,previous:c.state.status,status:"open",failures:u.state.failures,openUntil:u.state.openUntil,fallbackReason:u.state.fallbackReason})),{delivered:false,suppressed:false,fallbackReason:u.state.fallbackReason}}function W(){let s=readRuntimeState();return s?.status==="ready"&&s.dashboardAvailable?s.url:void 0}function B(s,r,e,t){return new Promise((o,n)=>{let i=JSON.stringify(e),a=new URL(r,s),c=false,d=l=>{c||(c=true,l?n(l):o());},u=request({hostname:a.hostname,port:a.port,path:a.pathname+a.search,method:"POST",headers:{"Content-Type":"application/json","X-API-Key":J,"Content-Length":Buffer.byteLength(i)},timeout:t},l=>{l.on("error",d),l.on("end",()=>{let m=l.statusCode??0;d(m>=200&&m<300?void 0:new Error(`HTTP ${m}`));}),l.resume();});u.on("error",d),u.on("timeout",()=>u.destroy(new Error(`HTTP mirror timed out after ${t}ms`))),u.write(i),u.end();})}function v(s,r){try{existsSync$1(y)||mkdirSync$1(y,{recursive:!0});let e=join(y,"http-errors.log"),t=`${new Date().toISOString()} | ${s} | ${r.message}
-`;rotateDiagnosticLogFile({path:e,maxBytes:50*1024*1024,maxFiles:5,incomingBytes:Buffer.byteLength(t)}),appendFileSync(e,t);}catch{}}function K(s){return new Promise(r=>setTimeout(r,s))}var E=1e4,Q=3e4,g=500,h=class{constructor(r){this.retryScheduled=false;this.metricAggregationScheduled=false;this.apiUrl=r?.apiUrl,this.cacheDir=r?.cacheDir??join$1(getDevFlowStateRoot(),"global","telemetry-cache"),this.database=r?.database??null,this.ownsDatabase=!r?.database;let e=r?.busyTimeoutMs??Number(process.env.DEVFLOW_TELEMETRY_DB_BUSY_TIMEOUT_MS);this.busyTimeoutMs=Number.isSafeInteger(e)&&e>=0?e:100;}async sendEvent(r){let e={...r,input:this.truncateInput(r.input)};return this.commitOrCache("tool_call",e)?(this.postHttp("/api/telemetry/tool-call",e),r.eventId):null}async sendExecutionStart(r,e,t,o,n=process.env.CLAUDE_PROJECT_DIR??process.cwd(),i=[]){let a={executionId:r,sessionId:e,skillName:t,startedAt:o,projectRoot:n,requiredMcpTools:i};this.commitOrCache("execution_start",a)&&this.postHttp("/api/telemetry/skill-execution/start",a);}async sendExecutionComplete(r,e="completed",t=Date.now(),o){let n={executionId:r,status:e,finishedAt:t,metadata:o},i=this.commitOrCache("execution_complete",n);return i&&this.postHttp("/api/telemetry/skill-execution/complete-reconciled",n),i}async sendSessionStart(r,e,t){let o={id:r,projectRoot:e,startedAt:t,label:e.split("/").pop()??"unknown"},n=this.commitOrCache("session_start",o);return n&&this.postHttp("/api/telemetry/sessions",o),n}async completeEvent(r){let e=this.commitOrCache("complete_event",r);return e&&(this.postHttp("/api/telemetry/tool-call/output",r),this.scheduleMetricAggregation()),e}async endSession(r,e=Date.now()){let t={sessionId:r,finishedAt:e},o=this.commitOrCache("session_end",t);return o&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp(`/api/telemetry/sessions/${encodeURIComponent(r)}/close`,{finishedAt:e})),o}async flushCache(){try{let e=this.getDatabase(),t=e.listTelemetryFailures({unresolvedOnly:!0,limit:g}).reverse();for(let o of t)try{this.applyOperation(o.operation,o.payload),e.resolveTelemetryFailure(o.id);}catch{}e.trimTelemetryFailures(g);}catch{}let r=(existsSync(this.cacheDir)?readdirSync(this.cacheDir):[]).filter(e=>e.endsWith(".json")).map(e=>{let t=join$1(this.cacheDir,e);try{return {cacheFile:t,envelope:ee(JSON.parse(readFileSync(t,"utf8")))}}catch{return null}}).filter(e=>e!==null).sort((e,t)=>e.envelope.timestamp-t.envelope.timestamp||I(e.envelope.operation)-I(t.envelope.operation));for(let{cacheFile:e,envelope:t}of r)try{let o=this.getDatabase();o.insertTelemetryFailure({id:t.id,operation:t.operation,payload:t.payload,error:t.failure,createdAt:t.timestamp}),this.applyOperation(t.operation,t.payload),o.resolveTelemetryFailure(t.id),unlinkSync(e);}catch{}this.database?.aggregatePendingToolMetrics();}aggregateMetrics(){return this.getDatabase().aggregatePendingToolMetrics()}async flushAndAggregate(){await this.flushCache(),this.aggregateMetrics();}close(){this.ownsDatabase&&this.database?.close(),this.database=null;}getDatabase(){return this.database??=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:this.busyTimeoutMs}),this.database}commitOrCache(r,e){try{return this.applyOperation(r,e),!0}catch(t){return this.cacheOperation(r,e,t),false}}applyOperation(r,e){let t=this.getDatabase();switch(r){case "tool_call":this.ensureParentSession(t,e),t.insertToolCallEvent(e);return;case "execution_start":this.ensureParentSession(t,e),t.insertSkillExecution({executionId:e.executionId,sessionId:e.sessionId,skillName:e.skillName,startedAt:e.startedAt,status:"running",requiredMcpTools:e.requiredMcpTools});return;case "execution_complete":t.reconcileSkillExecution(e.executionId,e.status,e.finishedAt,e.metadata);return;case "session_start":t.ensureSession(e),t.insertRun({id:T(e.id),source:"hook",tool:"session",input:{projectRoot:e.projectRoot},status:"active",startedAt:e.startedAt,tokenUsed:0,metadata:{sessionId:e.id,projectRoot:e.projectRoot}});return;case "complete_event":if(!t.updateToolCallEvent(e.eventId,{output:e.output===void 0?void 0:JSON.stringify(e.output),error:e.error,failureCategory:e.failureCategory,duration:e.duration}))throw new Error(`Tool call event ${e.eventId} is not available for completion`);return;case "session_end":t.closeSession(e.sessionId,e.finishedAt),t.updateRun(T(e.sessionId),{status:"completed",finishedAt:e.finishedAt});return}}ensureParentSession(r,e){let t=typeof e.sessionId=="string"?e.sessionId.trim():"";if(!t)throw new Error("Canonical session ID is required for telemetry");let o=typeof e.projectRoot=="string"&&e.projectRoot.trim()?e.projectRoot:typeof e.input?.projectRoot=="string"&&e.input.projectRoot.trim()?e.input.projectRoot:process.env.CLAUDE_PROJECT_DIR??"unknown";r.ensureSession({id:t,projectRoot:o,label:o==="unknown"?void 0:o.split("/").pop(),startedAt:Number(e.startedAt??e.timestamp??Date.now())});}cacheOperation(r,e,t){let o=Date.now(),n={id:`failure:${o}:${Math.random().toString(36).slice(2,11)}`,operation:r,payload:e,failure:t instanceof Error?t.message:String(t),timestamp:o};try{let i=this.getDatabase();i.insertTelemetryFailure({id:n.id,operation:r,payload:e,error:n.failure,createdAt:o}),i.trimTelemetryFailures(g),this.scheduleRetry();return}catch{}try{existsSync(this.cacheDir)||mkdirSync(this.cacheDir,{recursive:!0});let i=join$1(this.cacheDir,`${o}_${Math.random().toString(36).slice(2,11)}.json`);writeFileSync(i,JSON.stringify(n,null,2),{mode:384}),this.trimRetryCache(),this.scheduleRetry();}catch{}}trimRetryCache(){try{let r=readdirSync(this.cacheDir).filter(e=>e.endsWith(".json")).sort();for(let e of r.slice(0,Math.max(0,r.length-g)))unlinkSync(join$1(this.cacheDir,e));}catch{}}scheduleRetry(){this.retryScheduled||(this.retryScheduled=true,setTimeout(()=>{this.retryScheduled=false,this.flushCache();},Q).unref());}scheduleMetricAggregation(){if(this.metricAggregationScheduled||process.env.DEVFLOW_HOOK_DEGRADED==="1")return;this.metricAggregationScheduled=true,setTimeout(()=>{this.metricAggregationScheduled=false;try{this.getDatabase().aggregatePendingToolMetrics(50)===50&&this.scheduleMetricAggregation();}catch{}},25).unref();}postHttp(r,e){R(r,e,{endpoint:this.apiUrl,fallbackReason:"telemetry_already_committed_locally"});}truncateInput(r){let e=JSON.stringify(r);return e===void 0||e.length<=E?r:{_truncated:true,_original_size:e.length,_preview:`${e.substring(0,E)}...`}}};function I(s){return ["session_start","execution_start","tool_call","complete_event","execution_complete","session_end"].indexOf(s)}function T(s){return `hook-run:${s}`}function ee(s){if(!s||typeof s!="object")throw new Error("Invalid telemetry cache envelope");let r=s;if(typeof r.id!="string"||typeof r.operation!="string"||r.payload===void 0||typeof r.failure!="string"||typeof r.timestamp!="number")throw new Error("Invalid telemetry cache envelope");return r}async function S(s){let r=!s.memory,e=s.memory??new MemoryGate(s.projectRoot),t=0,o=0;try{await e.forceWarmUp(),s.trigger==="session_end"&&(t=await e.releasePendingDistillLeases(s.sessionId)),o=e.getPendingEventCount(s.sessionId,s.trigger!=="session_end");}finally{r&&e.close();}let n=Date.now(),i=s.trigger==="session_end"&&s.sessionId?`distill:session_end:${createHash("sha256").update(`${s.projectRoot}\0${s.sessionId}`).digest("hex").slice(0,24)}`:`distill:${n}:${Math.random().toString(36).slice(2,10)}`,a={id:i,pendingEvents:o,releasedLeases:t,trigger:s.trigger,sessionId:s.sessionId,details:s.details};try{let c=openGlobalDevFlowDatabase();try{c.recordMemoryDistillCheckpoint({id:i,projectRoot:s.projectRoot,sessionId:s.sessionId,trigger:s.trigger,pendingEvents:o,releasedLeases:t,details:s.details,createdAt:n}),c.insertEvent({kind:"memory_distill_requested",timestamp:n,success:!0,metadata:{...a,projectRoot:s.projectRoot}});}finally{c.close();}}catch(c){if(s.strictPersistence)throw c}return a}function C(s){if(s.pendingEvents===0)return "";let r=s.sessionId?`\uFF0CsessionId=${s.sessionId}`:"";return `Memory distill checkpoint: ${s.pendingEvents} \u4E2A\u4E8B\u4EF6\u5F85\u63D0\u70BC${r}\u3002\u4E0A\u4E0B\u6587\u538B\u7F29\u5B8C\u6210\u540E\uFF0C\u8C03\u7528 mcp__devflow__memory_request_distill\uFF1B\u6309\u8FD4\u56DE\u7684 nextPage \u5206\u9875\u8BFB\u53D6\u5168\u90E8\u4E8B\u4EF6\uFF0C\u63D0\u70BC observations\uFF0C\u518D\u8C03\u7528 mcp__devflow__memory_save_distilled \u5E76\u786E\u8BA4\u4FDD\u5B58\u7ED3\u679C\u3002`}var O="WARNING: DevFlow is in degraded mode (daemon unreachable): 4-Gate enforcement and memory prefetch cache are unavailable. Run `devflow doctor` for details.";function x(){return process.env.DEVFLOW_HOOK_DEGRADED==="1"}async function oe(s="",r=b()){let e;try{let i=JSON.parse(s);typeof i.session_id=="string"&&i.session_id.trim()&&(e=i.session_id.trim());}catch{}let t=new h;try{await t.flushAndAggregate();}finally{t.close();}let o=await S({projectRoot:r,sessionId:e,trigger:"pre_compact"}),n=[x()?O:"",C(o)].filter(Boolean).join(`
+import {getLocalApiKey,getDevFlowStateRoot,projectClaudeToolName,acquireRuntimeHttpCircuit,registerRuntimeHttpSuccess,registerRuntimeHttpFailure,readRuntimeState}from'@devflow-tools/sdk';import {existsSync,readdirSync,readFileSync,unlinkSync,mkdirSync,writeFileSync}from'fs';import {join as join$1}from'path';import {openGlobalDevFlowDatabase}from'@devflow-tools/database';import {request}from'node:http';import {existsSync as existsSync$1,mkdirSync as mkdirSync$1,appendFileSync}from'node:fs';import {join}from'node:path';import {rotateDiagnosticLogFile}from'@devflow-tools/telemetry';import {MemoryGate}from'@devflow-tools/memory-engine';import {createHash}from'node:crypto';function b(s){return s??process.env.CLAUDE_PROJECT_DIR??process.cwd()}function p(s,r,e){try{let t=openGlobalDevFlowDatabase();try{t.insertEvent({kind:s,timestamp:Date.now(),duration:e,success:r.success!==!1,metadata:r});}finally{t.close();}}catch{}}var W=getLocalApiKey(),y=join(getDevFlowStateRoot(),"errors");async function R(s,r,e={}){let t=e.endpoint??process.env.DEVFLOW_SERVER_URL?.trim()??B();if(!t)return {delivered:false,suppressed:false,fallbackReason:"runtime_not_ready"};let o=e.timeout??1500,n=e.durableMirror??true,i=e.maxRetries??(n?0:2),a=e.circuitBreaker??true,c=acquireRuntimeHttpCircuit(t,s);if(a&&!c.allowed)return {delivered:false,suppressed:true,fallbackReason:c.state.fallbackReason};let d;for(let l=0;l<=i;l+=1)try{return await K(t,s,r,o),a&&registerRuntimeHttpSuccess(t,s).transitioned&&p("http_circuit_transition",{endpoint:t,path:new URL(s,t).pathname,previous:c.state.status,status:"closed",failures:0}),{delivered:!0,suppressed:!1}}catch(m){d=m instanceof Error?m:new Error(String(m)),l<i&&await V(Math.min(100*2**l,1e3));}if(!d)return {delivered:false,suppressed:false,fallbackReason:"unknown_http_failure"};if(!a)return v(s,d),{delivered:false,suppressed:false,fallbackReason:d.message};let u=registerRuntimeHttpFailure(t,s,e.fallbackReason??(n?"local_durable_mirror":"http_delivery_failed"));return u.transitioned&&(v(s,d),p("http_circuit_transition",{endpoint:t,path:new URL(s,t).pathname,previous:c.state.status,status:"open",failures:u.state.failures,openUntil:u.state.openUntil,fallbackReason:u.state.fallbackReason})),{delivered:false,suppressed:false,fallbackReason:u.state.fallbackReason}}function B(){let s=readRuntimeState();return s?.status==="ready"&&s.dashboardAvailable?s.url:void 0}function K(s,r,e,t){return new Promise((o,n)=>{let i=JSON.stringify(e),a=new URL(r,s),c=false,d=l=>{c||(c=true,l?n(l):o());},u=request({hostname:a.hostname,port:a.port,path:a.pathname+a.search,method:"POST",headers:{"Content-Type":"application/json","X-API-Key":W,"Content-Length":Buffer.byteLength(i)},timeout:t},l=>{l.on("error",d),l.on("end",()=>{let m=l.statusCode??0;d(m>=200&&m<300?void 0:new Error(`HTTP ${m}`));}),l.resume();});u.on("error",d),u.on("timeout",()=>u.destroy(new Error(`HTTP mirror timed out after ${t}ms`))),u.write(i),u.end();})}function v(s,r){try{existsSync$1(y)||mkdirSync$1(y,{recursive:!0});let e=join(y,"http-errors.log"),t=`${new Date().toISOString()} | ${s} | ${r.message}
+`;rotateDiagnosticLogFile({path:e,maxBytes:50*1024*1024,maxFiles:5,incomingBytes:Buffer.byteLength(t)}),appendFileSync(e,t);}catch{}}function V(s){return new Promise(r=>setTimeout(r,s))}var E=1e4,ee=3e4,f=500,h=class{constructor(r){this.retryScheduled=false;this.metricAggregationScheduled=false;this.apiUrl=r?.apiUrl,this.cacheDir=r?.cacheDir??join$1(getDevFlowStateRoot(),"global","telemetry-cache"),this.database=r?.database??null,this.ownsDatabase=!r?.database;let e=r?.busyTimeoutMs??Number(process.env.DEVFLOW_TELEMETRY_DB_BUSY_TIMEOUT_MS);this.busyTimeoutMs=Number.isSafeInteger(e)&&e>=0?e:100;}async sendEvent(r){let e={...r,input:this.truncateInput(r.input)};return this.commitOrCache("tool_call",e)?(this.postHttp("/api/telemetry/tool-call",e),r.eventId):null}async sendExecutionStart(r,e,t,o,n=process.env.CLAUDE_PROJECT_DIR??process.cwd(),i=[]){let a={executionId:r,sessionId:e,skillName:t,startedAt:o,projectRoot:n,requiredMcpTools:i};this.commitOrCache("execution_start",a)&&this.postHttp("/api/telemetry/skill-execution/start",a);}async sendExecutionComplete(r,e="completed",t=Date.now(),o){let n={executionId:r,status:e,finishedAt:t,metadata:o},i=this.commitOrCache("execution_complete",n);return i&&this.postHttp("/api/telemetry/skill-execution/complete-reconciled",n),i}async sendSessionStart(r,e,t){let o={id:r,projectRoot:e,startedAt:t,label:e.split("/").pop()??"unknown"},n=this.commitOrCache("session_start",o);return n&&this.postHttp("/api/telemetry/sessions",o),n}async completeEvent(r){let e=this.commitOrCache("complete_event",r);return e&&(this.postHttp("/api/telemetry/tool-call/output",r),this.scheduleMetricAggregation()),e}async endSession(r,e=Date.now()){let t={sessionId:r,finishedAt:e},o=this.commitOrCache("session_end",t);return o&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp(`/api/telemetry/sessions/${encodeURIComponent(r)}/close`,{finishedAt:e})),o}async flushCache(){try{let e=this.getDatabase(),t=e.listTelemetryFailures({unresolvedOnly:!0,limit:f}).reverse();for(let o of t)try{this.applyOperation(o.operation,o.payload),e.resolveTelemetryFailure(o.id);}catch{}e.trimTelemetryFailures(f);}catch{}let r=(existsSync(this.cacheDir)?readdirSync(this.cacheDir):[]).filter(e=>e.endsWith(".json")).map(e=>{let t=join$1(this.cacheDir,e);try{return {cacheFile:t,envelope:te(JSON.parse(readFileSync(t,"utf8")))}}catch{return null}}).filter(e=>e!==null).sort((e,t)=>e.envelope.timestamp-t.envelope.timestamp||I(e.envelope.operation)-I(t.envelope.operation));for(let{cacheFile:e,envelope:t}of r)try{let o=this.getDatabase();o.insertTelemetryFailure({id:t.id,operation:t.operation,payload:t.payload,error:t.failure,createdAt:t.timestamp}),this.applyOperation(t.operation,t.payload),o.resolveTelemetryFailure(t.id),unlinkSync(e);}catch{}this.database?.aggregatePendingToolMetrics();}aggregateMetrics(){return this.getDatabase().aggregatePendingToolMetrics()}async flushAndAggregate(){await this.flushCache(),this.aggregateMetrics();}close(){this.ownsDatabase&&this.database?.close(),this.database=null;}getDatabase(){return this.database??=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:this.busyTimeoutMs}),this.database}commitOrCache(r,e){try{return this.applyOperation(r,e),!0}catch(t){return this.cacheOperation(r,e,t),false}}applyOperation(r,e){let t=this.getDatabase();switch(r){case "tool_call":this.ensureParentSession(t,e),t.insertToolCallEvent(e);return;case "execution_start":this.ensureParentSession(t,e),t.insertSkillExecution({executionId:e.executionId,sessionId:e.sessionId,skillName:e.skillName,startedAt:e.startedAt,status:"running",requiredMcpTools:e.requiredMcpTools});return;case "execution_complete":t.reconcileSkillExecution(e.executionId,e.status,e.finishedAt,e.metadata);return;case "session_start":t.ensureSession(e),t.insertRun({id:T(e.id),source:"hook",tool:"session",input:{projectRoot:e.projectRoot},status:"active",startedAt:e.startedAt,tokenUsed:0,metadata:{sessionId:e.id,projectRoot:e.projectRoot}});return;case "complete_event":if(!t.updateToolCallEvent(e.eventId,{output:e.output===void 0?void 0:JSON.stringify(e.output),error:e.error,failureCategory:e.failureCategory,duration:e.duration}))throw new Error(`Tool call event ${e.eventId} is not available for completion`);return;case "session_end":t.closeSession(e.sessionId,e.finishedAt),t.updateRun(T(e.sessionId),{status:"completed",finishedAt:e.finishedAt});return}}ensureParentSession(r,e){let t=typeof e.sessionId=="string"?e.sessionId.trim():"";if(!t)throw new Error("Canonical session ID is required for telemetry");let o=typeof e.projectRoot=="string"&&e.projectRoot.trim()?e.projectRoot:typeof e.input?.projectRoot=="string"&&e.input.projectRoot.trim()?e.input.projectRoot:process.env.CLAUDE_PROJECT_DIR??"unknown";r.ensureSession({id:t,projectRoot:o,label:o==="unknown"?void 0:o.split("/").pop(),startedAt:Number(e.startedAt??e.timestamp??Date.now())});}cacheOperation(r,e,t){let o=Date.now(),n={id:`failure:${o}:${Math.random().toString(36).slice(2,11)}`,operation:r,payload:e,failure:t instanceof Error?t.message:String(t),timestamp:o};try{let i=this.getDatabase();i.insertTelemetryFailure({id:n.id,operation:r,payload:e,error:n.failure,createdAt:o}),i.trimTelemetryFailures(f),this.scheduleRetry();return}catch{}try{existsSync(this.cacheDir)||mkdirSync(this.cacheDir,{recursive:!0});let i=join$1(this.cacheDir,`${o}_${Math.random().toString(36).slice(2,11)}.json`);writeFileSync(i,JSON.stringify(n,null,2),{mode:384}),this.trimRetryCache(),this.scheduleRetry();}catch{}}trimRetryCache(){try{let r=readdirSync(this.cacheDir).filter(e=>e.endsWith(".json")).sort();for(let e of r.slice(0,Math.max(0,r.length-f)))unlinkSync(join$1(this.cacheDir,e));}catch{}}scheduleRetry(){this.retryScheduled||(this.retryScheduled=true,setTimeout(()=>{this.retryScheduled=false,this.flushCache();},ee).unref());}scheduleMetricAggregation(){if(this.metricAggregationScheduled||process.env.DEVFLOW_HOOK_DEGRADED==="1")return;this.metricAggregationScheduled=true,setTimeout(()=>{this.metricAggregationScheduled=false;try{this.getDatabase().aggregatePendingToolMetrics(50)===50&&this.scheduleMetricAggregation();}catch{}},25).unref();}postHttp(r,e){R(r,e,{endpoint:this.apiUrl,fallbackReason:"telemetry_already_committed_locally"});}truncateInput(r){let e=JSON.stringify(r);return e===void 0||e.length<=E?r:{_truncated:true,_original_size:e.length,_preview:`${e.substring(0,E)}...`}}};function I(s){return ["session_start","execution_start","tool_call","complete_event","execution_complete","session_end"].indexOf(s)}function T(s){return `hook-run:${s}`}function te(s){if(!s||typeof s!="object")throw new Error("Invalid telemetry cache envelope");let r=s;if(typeof r.id!="string"||typeof r.operation!="string"||r.payload===void 0||typeof r.failure!="string"||typeof r.timestamp!="number")throw new Error("Invalid telemetry cache envelope");return r}async function C(s){let r=!s.memory,e=s.memory??new MemoryGate(s.projectRoot),t=0,o=0;try{await e.forceWarmUp(),s.trigger==="session_end"&&(t=await e.releasePendingDistillLeases(s.sessionId)),o=e.getPendingEventCount(s.sessionId,s.trigger!=="session_end");}finally{r&&e.close();}let n=Date.now(),i=s.trigger==="session_end"&&s.sessionId?`distill:session_end:${createHash("sha256").update(`${s.projectRoot}\0${s.sessionId}`).digest("hex").slice(0,24)}`:`distill:${n}:${Math.random().toString(36).slice(2,10)}`,a={id:i,pendingEvents:o,releasedLeases:t,trigger:s.trigger,sessionId:s.sessionId,details:s.details};try{let c=openGlobalDevFlowDatabase();try{c.recordMemoryDistillCheckpoint({id:i,projectRoot:s.projectRoot,sessionId:s.sessionId,trigger:s.trigger,pendingEvents:o,releasedLeases:t,details:s.details,createdAt:n}),c.insertEvent({kind:"memory_distill_requested",timestamp:n,success:!0,metadata:{...a,projectRoot:s.projectRoot}});}finally{c.close();}}catch(c){if(s.strictPersistence)throw c}return a}function O(s){if(s.pendingEvents===0)return "";let r=s.sessionId?`\uFF0CsessionId=${s.sessionId}`:"";return `Memory distill checkpoint: ${s.pendingEvents} \u4E2A\u4E8B\u4EF6\u5F85\u63D0\u70BC${r}\u3002\u4E0A\u4E0B\u6587\u538B\u7F29\u5B8C\u6210\u540E\uFF0C\u8C03\u7528 ${projectClaudeToolName("memory_request_distill")}\uFF1B\u6309\u8FD4\u56DE\u7684 nextPage \u5206\u9875\u8BFB\u53D6\u5168\u90E8\u4E8B\u4EF6\uFF0C\u63D0\u70BC observations\uFF0C\u518D\u8C03\u7528 ${projectClaudeToolName("memory_save_distilled")} \u5E76\u786E\u8BA4\u4FDD\u5B58\u7ED3\u679C\u3002`}var x="WARNING: DevFlow is in degraded mode (daemon unreachable): 4-Gate enforcement and memory prefetch cache are unavailable. Run `devflow doctor` for details.";function M(){return process.env.DEVFLOW_HOOK_DEGRADED==="1"}async function ne(s="",r=b()){let e;try{let i=JSON.parse(s);typeof i.session_id=="string"&&i.session_id.trim()&&(e=i.session_id.trim());}catch{}let t=new h;try{await t.flushAndAggregate();}finally{t.close();}let o=await C({projectRoot:r,sessionId:e,trigger:"pre_compact"}),n=[M()?x:"",O(o)].filter(Boolean).join(`
 
-`);return {hookSpecificOutput:{hookEventName:"PreCompact",...n?{additionalContext:n}:{}}}}if(process.argv[1]?.endsWith("pre-compact")||process.argv[1]?.endsWith("pre-compact.js")){let s=console.log,r=console.info,e=()=>{console.log=s,console.info=r;};console.log=console.error.bind(console),console.info=console.error.bind(console);let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",o=>{t+=o;}),process.stdin.on("end",()=>{oe(t.trim()||process.argv[2]||"").then(o=>{e(),s(JSON.stringify(o)),process.exit(0);}).catch(()=>{e(),process.exit(0);});}),process.stdin.on("error",()=>{e(),process.exit(0);}),setTimeout(()=>process.exit(0),14e3).unref();}export{oe as handlePreCompact};
+`);return {hookSpecificOutput:{hookEventName:"PreCompact",...n?{additionalContext:n}:{}}}}if(process.argv[1]?.endsWith("pre-compact")||process.argv[1]?.endsWith("pre-compact.js")){let s=console.log,r=console.info,e=()=>{console.log=s,console.info=r;};console.log=console.error.bind(console),console.info=console.error.bind(console);let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",o=>{t+=o;}),process.stdin.on("end",()=>{ne(t.trim()||process.argv[2]||"").then(o=>{e(),s(JSON.stringify(o)),process.exit(0);}).catch(()=>{e(),process.exit(0);});}),process.stdin.on("error",()=>{e(),process.exit(0);}),setTimeout(()=>process.exit(0),14e3).unref();}export{ne as handlePreCompact};

package/dist/plugin-files/dist/hooks/pre-tool-use.js

@@ -1,4 +1,4 @@
-import {existsSync,readdirSync,readFileSync,unlinkSync,mkdirSync,writeFileSync,rmSync,linkSync,renameSync}from'fs';import {join as join$1,dirname as dirname$1}from'path';import {openGlobalDevFlowDatabase}from'@devflow-tools/database';import {getLocalApiKey,getDevFlowStateRoot,acquireRuntimeHttpCircuit,registerRuntimeHttpSuccess,registerRuntimeHttpFailure,getProjectStateDir,readRuntimeState}from'@devflow-tools/sdk';import {request}from'node:http';import {existsSync as existsSync$1,mkdirSync as mkdirSync$1,appendFileSync,chmodSync,readFileSync as readFileSync$1,writeFileSync as writeFileSync$1,renameSync as renameSync$1}from'node:fs';import {join,resolve,basename,relative,sep,dirname,isAbsolute,normalize}from'node:path';import {maybeRunDiagnosticLogCleanup,rotateDiagnosticLogFile,emitSemanticControlLog}from'@devflow-tools/telemetry';import {fileURLToPath}from'url';import {randomUUID,createHash}from'crypto';import {createHash as createHash$1}from'node:crypto';import {homedir}from'node:os';import {DatabaseSync}from'node:sqlite';function C(i,t,e){try{let n=openGlobalDevFlowDatabase();try{n.insertEvent({kind:i,timestamp:Date.now(),duration:e,success:t.success!==!1,metadata:t});}finally{n.close();}}catch{}}var nt=getLocalApiKey(),H=join(getDevFlowStateRoot(),"errors");async function ee(i,t,e={}){let n=e.endpoint??process.env.DEVFLOW_SERVER_URL?.trim()??it();if(!n)return {delivered:false,suppressed:false,fallbackReason:"runtime_not_ready"};let o=e.timeout??1500,r=e.durableMirror??true,s=e.maxRetries??(r?0:2),a=e.circuitBreaker??true,d=acquireRuntimeHttpCircuit(n,i);if(a&&!d.allowed)return {delivered:false,suppressed:true,fallbackReason:d.state.fallbackReason};let c;for(let p=0;p<=s;p+=1)try{return await ot(n,i,t,o),a&&registerRuntimeHttpSuccess(n,i).transitioned&&C("http_circuit_transition",{endpoint:n,path:new URL(i,n).pathname,previous:d.state.status,status:"closed",failures:0}),{delivered:!0,suppressed:!1}}catch(u){c=u instanceof Error?u:new Error(String(u)),p<s&&await rt(Math.min(100*2**p,1e3));}if(!c)return {delivered:false,suppressed:false,fallbackReason:"unknown_http_failure"};if(!a)return Q(i,c),{delivered:false,suppressed:false,fallbackReason:c.message};let l=registerRuntimeHttpFailure(n,i,e.fallbackReason??(r?"local_durable_mirror":"http_delivery_failed"));return l.transitioned&&(Q(i,c),C("http_circuit_transition",{endpoint:n,path:new URL(i,n).pathname,previous:d.state.status,status:"open",failures:l.state.failures,openUntil:l.state.openUntil,fallbackReason:l.state.fallbackReason})),{delivered:false,suppressed:false,fallbackReason:l.state.fallbackReason}}function it(){let i=readRuntimeState();return i?.status==="ready"&&i.dashboardAvailable?i.url:void 0}function ot(i,t,e,n){return new Promise((o,r)=>{let s=JSON.stringify(e),a=new URL(t,i),d=false,c=p=>{d||(d=true,p?r(p):o());},l=request({hostname:a.hostname,port:a.port,path:a.pathname+a.search,method:"POST",headers:{"Content-Type":"application/json","X-API-Key":nt,"Content-Length":Buffer.byteLength(s)},timeout:n},p=>{p.on("error",c),p.on("end",()=>{let u=p.statusCode??0;c(u>=200&&u<300?void 0:new Error(`HTTP ${u}`));}),p.resume();});l.on("error",c),l.on("timeout",()=>l.destroy(new Error(`HTTP mirror timed out after ${n}ms`))),l.write(s),l.end();})}function Q(i,t){try{existsSync$1(H)||mkdirSync$1(H,{recursive:!0});let e=join(H,"http-errors.log"),n=`${new Date().toISOString()} | ${i} | ${t.message}
-`;rotateDiagnosticLogFile({path:e,maxBytes:50*1024*1024,maxFiles:5,incomingBytes:Buffer.byteLength(n)}),appendFileSync(e,n);}catch{}}function rt(i){return new Promise(t=>setTimeout(t,i))}var oe=1e4,ut=3e4,F=500,L=class{constructor(t){this.retryScheduled=false;this.metricAggregationScheduled=false;this.apiUrl=t?.apiUrl,this.cacheDir=t?.cacheDir??join$1(getDevFlowStateRoot(),"global","telemetry-cache"),this.database=t?.database??null,this.ownsDatabase=!t?.database;let e=t?.busyTimeoutMs??Number(process.env.DEVFLOW_TELEMETRY_DB_BUSY_TIMEOUT_MS);this.busyTimeoutMs=Number.isSafeInteger(e)&&e>=0?e:100;}async sendEvent(t){let e={...t,input:this.truncateInput(t.input)};return this.commitOrCache("tool_call",e)?(this.postHttp("/api/telemetry/tool-call",e),t.eventId):null}async sendExecutionStart(t,e,n,o,r=process.env.CLAUDE_PROJECT_DIR??process.cwd(),s=[]){let a={executionId:t,sessionId:e,skillName:n,startedAt:o,projectRoot:r,requiredMcpTools:s};this.commitOrCache("execution_start",a)&&this.postHttp("/api/telemetry/skill-execution/start",a);}async sendExecutionComplete(t,e="completed",n=Date.now(),o){let r={executionId:t,status:e,finishedAt:n,metadata:o},s=this.commitOrCache("execution_complete",r);return s&&this.postHttp("/api/telemetry/skill-execution/complete-reconciled",r),s}async sendSessionStart(t,e,n){let o={id:t,projectRoot:e,startedAt:n,label:e.split("/").pop()??"unknown"},r=this.commitOrCache("session_start",o);return r&&this.postHttp("/api/telemetry/sessions",o),r}async completeEvent(t){let e=this.commitOrCache("complete_event",t);return e&&(this.postHttp("/api/telemetry/tool-call/output",t),this.scheduleMetricAggregation()),e}async endSession(t,e=Date.now()){let n={sessionId:t,finishedAt:e},o=this.commitOrCache("session_end",n);return o&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp(`/api/telemetry/sessions/${encodeURIComponent(t)}/close`,{finishedAt:e})),o}async flushCache(){try{let e=this.getDatabase(),n=e.listTelemetryFailures({unresolvedOnly:!0,limit:F}).reverse();for(let o of n)try{this.applyOperation(o.operation,o.payload),e.resolveTelemetryFailure(o.id);}catch{}e.trimTelemetryFailures(F);}catch{}let t=(existsSync(this.cacheDir)?readdirSync(this.cacheDir):[]).filter(e=>e.endsWith(".json")).map(e=>{let n=join$1(this.cacheDir,e);try{return {cacheFile:n,envelope:pt(JSON.parse(readFileSync(n,"utf8")))}}catch{return null}}).filter(e=>e!==null).sort((e,n)=>e.envelope.timestamp-n.envelope.timestamp||re(e.envelope.operation)-re(n.envelope.operation));for(let{cacheFile:e,envelope:n}of t)try{let o=this.getDatabase();o.insertTelemetryFailure({id:n.id,operation:n.operation,payload:n.payload,error:n.failure,createdAt:n.timestamp}),this.applyOperation(n.operation,n.payload),o.resolveTelemetryFailure(n.id),unlinkSync(e);}catch{}this.database?.aggregatePendingToolMetrics();}aggregateMetrics(){return this.getDatabase().aggregatePendingToolMetrics()}async flushAndAggregate(){await this.flushCache(),this.aggregateMetrics();}close(){this.ownsDatabase&&this.database?.close(),this.database=null;}getDatabase(){return this.database??=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:this.busyTimeoutMs}),this.database}commitOrCache(t,e){try{return this.applyOperation(t,e),!0}catch(n){return this.cacheOperation(t,e,n),false}}applyOperation(t,e){let n=this.getDatabase();switch(t){case "tool_call":this.ensureParentSession(n,e),n.insertToolCallEvent(e);return;case "execution_start":this.ensureParentSession(n,e),n.insertSkillExecution({executionId:e.executionId,sessionId:e.sessionId,skillName:e.skillName,startedAt:e.startedAt,status:"running",requiredMcpTools:e.requiredMcpTools});return;case "execution_complete":n.reconcileSkillExecution(e.executionId,e.status,e.finishedAt,e.metadata);return;case "session_start":n.ensureSession(e),n.insertRun({id:se(e.id),source:"hook",tool:"session",input:{projectRoot:e.projectRoot},status:"active",startedAt:e.startedAt,tokenUsed:0,metadata:{sessionId:e.id,projectRoot:e.projectRoot}});return;case "complete_event":if(!n.updateToolCallEvent(e.eventId,{output:e.output===void 0?void 0:JSON.stringify(e.output),error:e.error,failureCategory:e.failureCategory,duration:e.duration}))throw new Error(`Tool call event ${e.eventId} is not available for completion`);return;case "session_end":n.closeSession(e.sessionId,e.finishedAt),n.updateRun(se(e.sessionId),{status:"completed",finishedAt:e.finishedAt});return}}ensureParentSession(t,e){let n=typeof e.sessionId=="string"?e.sessionId.trim():"";if(!n)throw new Error("Canonical session ID is required for telemetry");let o=typeof e.projectRoot=="string"&&e.projectRoot.trim()?e.projectRoot:typeof e.input?.projectRoot=="string"&&e.input.projectRoot.trim()?e.input.projectRoot:process.env.CLAUDE_PROJECT_DIR??"unknown";t.ensureSession({id:n,projectRoot:o,label:o==="unknown"?void 0:o.split("/").pop(),startedAt:Number(e.startedAt??e.timestamp??Date.now())});}cacheOperation(t,e,n){let o=Date.now(),r={id:`failure:${o}:${Math.random().toString(36).slice(2,11)}`,operation:t,payload:e,failure:n instanceof Error?n.message:String(n),timestamp:o};try{let s=this.getDatabase();s.insertTelemetryFailure({id:r.id,operation:t,payload:e,error:r.failure,createdAt:o}),s.trimTelemetryFailures(F),this.scheduleRetry();return}catch{}try{existsSync(this.cacheDir)||mkdirSync(this.cacheDir,{recursive:!0});let s=join$1(this.cacheDir,`${o}_${Math.random().toString(36).slice(2,11)}.json`);writeFileSync(s,JSON.stringify(r,null,2),{mode:384}),this.trimRetryCache(),this.scheduleRetry();}catch{}}trimRetryCache(){try{let t=readdirSync(this.cacheDir).filter(e=>e.endsWith(".json")).sort();for(let e of t.slice(0,Math.max(0,t.length-F)))unlinkSync(join$1(this.cacheDir,e));}catch{}}scheduleRetry(){this.retryScheduled||(this.retryScheduled=true,setTimeout(()=>{this.retryScheduled=false,this.flushCache();},ut).unref());}scheduleMetricAggregation(){if(this.metricAggregationScheduled||process.env.DEVFLOW_HOOK_DEGRADED==="1")return;this.metricAggregationScheduled=true,setTimeout(()=>{this.metricAggregationScheduled=false;try{this.getDatabase().aggregatePendingToolMetrics(50)===50&&this.scheduleMetricAggregation();}catch{}},25).unref();}postHttp(t,e){ee(t,e,{endpoint:this.apiUrl,fallbackReason:"telemetry_already_committed_locally"});}truncateInput(t){let e=JSON.stringify(t);return e===void 0||e.length<=oe?t:{_truncated:true,_original_size:e.length,_preview:`${e.substring(0,oe)}...`}}};function re(i){return ["session_start","execution_start","tool_call","complete_event","execution_complete","session_end"].indexOf(i)}function se(i){return `hook-run:${i}`}function pt(i){if(!i||typeof i!="object")throw new Error("Invalid telemetry cache envelope");let t=i;if(typeof t.id!="string"||typeof t.operation!="string"||t.payload===void 0||typeof t.failure!="string"||typeof t.timestamp!="number")throw new Error("Invalid telemetry cache envelope");return t}function O(i){return i??process.env.CLAUDE_PROJECT_DIR??process.cwd()}function R(i){return getProjectStateDir(O(i))}var E=emitSemanticControlLog;var bt=2,_t=1;function Rt(){if(process.env.CLAUDE_PLUGIN_ROOT)return process.env.CLAUDE_PLUGIN_ROOT;try{return join$1(dirname$1(fileURLToPath(import.meta.url)),"..","..")}catch{return process.cwd()}}function ae(i=Rt()){let t=[join$1(i,"dist","command-registry.json"),join$1(i,"command-registry.json")];for(let e of t)try{if(!existsSync(e))continue;let n=JSON.parse(readFileSync(e,"utf8"));if(n.version!==bt&&n.version!==_t||!Et(n.commands)){E({event:"hook.runtime.degraded",identity:{projectRoot:process.env.CLAUDE_PROJECT_DIR||process.cwd()},level:"warn",timestamp:Date.now(),data:{stage:"command_registry",reason:"contract_mismatch",registryPath:e}});continue}return n.commands}catch(n){E({event:"hook.runtime.degraded",identity:{projectRoot:process.env.CLAUDE_PROJECT_DIR||process.cwd()},level:"warn",timestamp:Date.now(),data:{stage:"command_registry",reason:n.message,fallback:"next_registry_candidate"}});}return null}function Et(i){return !i||typeof i!="object"||Array.isArray(i)?false:Object.values(i).every(t=>{if(!t||typeof t!="object"||Array.isArray(t))return  false;let e=t;return j(e.mcpTools)&&j(e.blockedNative)&&(e.source===void 0||e.source==="core"||e.source==="plugin")&&(e.requiresContext===void 0||typeof e.requiresContext=="boolean")&&(e.runtimePackages===void 0||j(e.runtimePackages))&&(e.hostTools===void 0||It(e.hostTools))&&(e.evidenceMode===void 0||["static","runtime","mixed"].includes(e.evidenceMode))})}function It(i){return !!i&&typeof i=="object"&&!Array.isArray(i)&&Object.entries(i).every(([t,e])=>t.length>0&&j(e))}function j(i){return Array.isArray(i)&&i.every(t=>typeof t=="string"&&t.length>0)}function ce(i){let t=ae();return t?t[i]?.mcpTools??[]:[]}function pe(i){return Buffer.from(i,"utf8").toString("base64url")}function kt(i,t,e){let n=t?.trim();if(n){let o=/^[a-zA-Z0-9:._-]{1,192}$/.test(n)?n:`tool-${createHash("sha256").update(n.slice(0,1024)).digest("hex").slice(0,32)}`;return `${i}:${o}`}return `${i}:legacy-${e}-${randomUUID().slice(0,8)}`}function ve(i){return `${i}:legacy-journal`}var x=class{constructor(t){this.projectRoot=t;this.sessions=new Map;this.sessionsDir=join$1(R(t),"hook-sessions");}registerSession(t){let e=t.trim();if(!e)throw new Error("session_id_required");let n=this.get(e);if(n)return n.lastActivityAt=Date.now(),this.persist(n),n;let o=Date.now(),r={sessionId:e,projectRoot:this.projectRoot,requiredMcpTools:[],evidenceObligations:[],evidenceDegradations:[],evidenceOutcomes:[],startedAt:o,lastActivityAt:o};return this.sessions.set(e,r),this.persist(r),r}startExecution(t,e,n){let o=this.registerSession(t);return (!o.executionId||o.skillName!==e)&&(o.executionId=`exec_${Date.now()}_${randomUUID().slice(0,8)}`),o.skillName=e,o.requiredMcpTools=[...new Set(n)],delete o.contextInitialization,o.lastActivityAt=Date.now(),this.persist(o),o}beginContextInitialization(t,e){let n=this.registerSession(t);return n.contextInitialization={startedAt:Date.now(),...e?{toolUseId:e}:{}},n.lastActivityAt=Date.now(),this.persist(n),n}completeContextInitialization(t,e){let n=this.get(t);return n?(e&&n.contextInitialization?.toolUseId&&n.contextInitialization.toolUseId!==e||(delete n.contextInitialization,n.lastActivityAt=Date.now(),this.persist(n)),n):null}bindTaskIdentity(t,e){let n=this.registerSession(t);return n.activeTurnId=e.turnId,n.activeRequestId=e.requestId,n.intentArtifactHash=e.intentArtifactHash,n.lastActivityAt=Date.now(),this.persist(n),n}get(t){let e=t.trim();if(!e)return null;let n=this.sessions.get(e);if(n)return this.replayEvidenceJournal(n),n;let o=this.snapshotPath(e);if(!existsSync(o))return null;try{let r=JSON.parse(readFileSync(o,"utf8"));return r.sessionId!==e||r.projectRoot!==this.projectRoot?null:(r.requiredMcpTools=Array.isArray(r.requiredMcpTools)?r.requiredMcpTools:[],r.evidenceObligations=ge(r.evidenceObligations),r.evidenceDegradations=fe(r.evidenceDegradations),r.evidenceOutcomes=me(r.evidenceOutcomes),this.replayEvidenceJournal(r),this.sessions.set(e,r),r)}catch{return null}}completeExecution(t){let e=this.get(t);if(!e)return null;let n=structuredClone(e);return delete e.executionId,delete e.skillName,delete e.contextInitialization,e.requiredMcpTools=[],e.lastActivityAt=Date.now(),this.persist(e),n}addEvidenceObligation(t,e,n=Date.now(),o){let r=this.registerSession(t),a=(o?void 0:r.evidenceObligations.find(c=>c.contractId===e.id))?.obligationId??kt(e.id,o,n);this.appendEvidenceEvent(t,{kind:"add",obligationId:a,contractId:e.id,at:n,contract:e},`add\0${a}`),this.replayEvidenceJournal(r);let d=r.evidenceObligations.find(c=>c.obligationId===a);return d?(r.lastActivityAt=Date.now(),this.persist(r),structuredClone(d)):null}listEvidenceObligations(t){return (this.get(t)?.evidenceObligations??[]).map(e=>structuredClone(e))}markEvidenceCorrection(t,e,n,o,r=Date.now()){let s=this.get(t),a=s?.evidenceObligations.find(l=>l.obligationId===e);if(!s||!a)return null;let d=/^[a-f0-9]{64}$/.test(o)?o:"";if(!d)return null;this.appendEvidenceEvent(t,{kind:"correction",obligationId:e,contractId:a.contractId,at:r,fingerprint:d,violations:n.slice(0,16).map(l=>l.slice(0,240))},`correction\0${e}\0${d}`),this.replayEvidenceJournal(s),s.lastActivityAt=r,this.persist(s);let c=s.evidenceObligations.find(l=>l.obligationId===e);return c?structuredClone(c):null}resolveEvidenceObligation(t,e){let n=this.get(t);if(!n)return  false;let o=n.evidenceObligations.find(s=>s.obligationId===e);if(!o)return  false;let r=Date.now();return this.appendEvidenceEvent(t,{kind:"resolve",obligationId:e,contractId:o.contractId,at:r},`resolve\0${e}`),this.replayEvidenceJournal(n),n.lastActivityAt=r,this.persist(n),true}resolveDegradedEvidence(t,e){let n=this.get(t),o=n?.evidenceDegradations.find(s=>s.obligationId===e);if(!n||!o)return  false;let r=Date.now();return this.appendEvidenceEvent(t,{kind:"resolve",obligationId:e,contractId:o.contractId,at:r},`resolve-degraded\0${e}\0${r}`),this.replayEvidenceJournal(n),n.lastActivityAt=r,this.persist(n),true}degradeEvidenceObligation(t,e,n,o=Date.now()){let r=this.get(t),s=r?.evidenceObligations.find(d=>d.obligationId===e);if(!r||!s)return  false;let a=n.slice(0,240);return this.appendEvidenceEvent(t,{kind:"degrade",obligationId:e,contractId:s.contractId,at:o,reason:a},`degrade\0${e}\0${a}`),this.replayEvidenceJournal(r),r.lastActivityAt=o,this.persist(r),true}removeSession(t){let e=t.trim();e&&(this.sessions.delete(e),rmSync(this.snapshotPath(e),{force:true}),rmSync(this.evidenceJournalDir(e),{recursive:true,force:true}));}list(){return [...this.sessions.values()]}snapshotPath(t){return join$1(this.sessionsDir,`${pe(t)}.json`)}evidenceJournalDir(t){return join$1(this.sessionsDir,"evidence-journal",pe(t))}appendEvidenceEvent(t,e,n){let o=this.evidenceJournalDir(t);mkdirSync(o,{recursive:true,mode:448});let r=createHash("sha256").update(n).digest("hex"),s=join$1(o,`${e.kind}-${r}.json`);if(existsSync(s))return;let a=join$1(o,`.${process.pid}.${randomUUID()}.tmp`);writeFileSync(a,JSON.stringify(e),{mode:384});try{linkSync(a,s);}catch(d){if(d.code!=="EEXIST")throw d}finally{rmSync(a,{force:true});}}replayEvidenceJournal(t){t.evidenceObligations=ge(t.evidenceObligations),t.evidenceDegradations=fe(t.evidenceDegradations),t.evidenceOutcomes=me(t.evidenceOutcomes);let e=this.evidenceJournalDir(t.sessionId);if(!existsSync(e))return;let n;try{n=readdirSync(e).filter(r=>/^(?:add|correction|resolve|degrade)-[a-f0-9]{64}\.json$/.test(r)).slice(0,4096);}catch{return}let o=n.flatMap(r=>{try{let s=readFileSync(join$1(e,r),"utf8");if(Buffer.byteLength(s,"utf8")>64*1024)return [];let a=St(JSON.parse(s));return a?[a]:[]}catch{return []}}).sort((r,s)=>r.at-s.at||he(r.kind)-he(s.kind));for(let r of o)this.applyEvidenceEvent(t,r);t.evidenceObligations=t.evidenceObligations.slice(-8),t.evidenceDegradations=t.evidenceDegradations.slice(-20),t.evidenceOutcomes=t.evidenceOutcomes.slice(-20);}applyEvidenceEvent(t,e){let n=t.evidenceOutcomes.find(s=>s.obligationId===e.obligationId);if(e.kind==="add"){if(n)return;let s=t.evidenceObligations.find(a=>a.obligationId===e.obligationId);s?(s.contract=e.contract,s.promptedAt=Math.min(s.promptedAt,e.at)):t.evidenceObligations.push({obligationId:e.obligationId,contractId:e.contractId,contract:e.contract,promptedAt:e.at,attempt:0,correctionRequested:false,violations:[]});return}let o=t.evidenceObligations.find(s=>s.obligationId===e.obligationId);if(e.kind==="correction"){if(!o||n||o.correctionFingerprint===e.fingerprint)return;o.attempt+=1,o.correctionRequested=true,o.correctionRequestedAt=e.at,o.correctionFingerprint=e.fingerprint,o.violations=e.violations;return}let r=o?.attempt??n?.attempt??0;if(e.kind==="resolve"&&n?.status==="degraded")t.evidenceOutcomes=t.evidenceOutcomes.filter(s=>s.obligationId!==e.obligationId),t.evidenceDegradations=t.evidenceDegradations.filter(s=>s.obligationId!==e.obligationId);else if(n)return;e.kind==="degrade"?(t.evidenceObligations=t.evidenceObligations.filter(s=>s.obligationId!==e.obligationId),t.evidenceDegradations.push({obligationId:e.obligationId,contractId:e.contractId,reason:e.reason,degradedAt:e.at,attempt:r,contract:o?.contract})):t.evidenceObligations=t.evidenceObligations.filter(s=>s.obligationId!==e.obligationId),t.evidenceOutcomes.push({obligationId:e.obligationId,contractId:e.contractId,status:e.kind==="resolve"?"resolved":"degraded",completedAt:e.at,attempt:r,...e.kind==="degrade"?{reason:e.reason}:{}});}persist(t){mkdirSync(this.sessionsDir,{recursive:true,mode:448});let e=this.snapshotPath(t.sessionId),n=`${e}.${process.pid}.${randomUUID()}.tmp`;writeFileSync(n,JSON.stringify(t),{mode:384}),renameSync(n,e);}};function ge(i){return Array.isArray(i)?i.flatMap(t=>{if(!t||typeof t!="object")return [];let e=t;if(typeof e.contractId!="string"||e.contractId.length===0||e.contractId.length>128||typeof e.promptedAt!="number"||typeof e.attempt!="number"||typeof e.correctionRequested!="boolean"||!Array.isArray(e.violations)||!be(e.contract))return [];let n=typeof e.obligationId=="string"&&e.obligationId.length>0&&e.obligationId.length<=384?e.obligationId:ve(e.contractId),o=typeof e.correctionTranscriptHash=="string"?e.correctionTranscriptHash:void 0,r=e.correctionFingerprint??o;return r!==void 0&&!/^[a-f0-9]{64}$/.test(r)?[]:[{...e,obligationId:n,correctionFingerprint:r}]}).slice(-8):[]}function fe(i){return Array.isArray(i)?i.filter(t=>{if(!t||typeof t!="object")return  false;let e=t;return typeof e.obligationId=="string"&&typeof e.contractId=="string"&&typeof e.reason=="string"&&typeof e.degradedAt=="number"&&typeof e.attempt=="number"}).slice(-20):[]}function me(i){return Array.isArray(i)?i.filter(t=>{if(!t||typeof t!="object")return  false;let e=t;return typeof e.obligationId=="string"&&typeof e.contractId=="string"&&(e.status==="resolved"||e.status==="degraded")&&typeof e.completedAt=="number"&&typeof e.attempt=="number"&&(e.reason===void 0||typeof e.reason=="string")}).slice(-20):[]}function St(i){if(!i||typeof i!="object")return null;let t=i,e=t.kind;if(e!=="add"&&e!=="correction"&&e!=="resolve"&&e!=="degrade"||typeof t.contractId!="string"||t.contractId.length>128||typeof t.at!="number")return null;let o={obligationId:typeof t.obligationId=="string"&&t.obligationId.length>0&&t.obligationId.length<=384?t.obligationId:ve(t.contractId),contractId:t.contractId,at:t.at};if(e==="add")return be(t.contract)?{kind:e,...o,contract:t.contract}:null;if(e==="correction"){let r=typeof t.fingerprint=="string"?t.fingerprint:t.transcriptHash;return typeof r=="string"&&/^[a-f0-9]{64}$/.test(r)&&Array.isArray(t.violations)&&t.violations.every(s=>typeof s=="string"&&s.length<=240)?{kind:e,...o,fingerprint:r,violations:t.violations}:null}return e==="resolve"?{kind:e,...o}:typeof t.reason=="string"&&t.reason.length<=240?{kind:e,...o,reason:t.reason}:null}function he(i){return i==="add"?0:i==="correction"?1:2}function be(i){if(!i||typeof i!="object")return  false;let t=i,e=t.requiredSections,n=t.prohibitedClaims;return t.version==="1.0"&&typeof t.id=="string"&&/^[a-zA-Z0-9][a-zA-Z0-9:._-]{0,127}$/.test(t.id)&&typeof t.runtimeProfilingOccurred=="boolean"&&typeof t.samplingEvidenceOccurred=="boolean"&&Array.isArray(e)&&e.length===3&&e[0]==="\u5DE5\u5177\u53D1\u73B0"&&e[1]==="\u6A21\u578B\u5047\u8BBE"&&e[2]==="\u9700\u8981\u8FD0\u884C\u65F6\u9A8C\u8BC1"&&Array.isArray(n)&&n.length<=16&&n.every(o=>typeof o=="string"&&o.length<=128)&&typeof t.canonicalReport=="string"&&Buffer.byteLength(t.canonicalReport,"utf8")<=48*1024&&!!t.correctionPolicy&&t.correctionPolicy.maxAttempts===1&&t.correctionPolicy.repeatedViolation==="fail_open"}function M(i){if(!i||typeof i!="object"||Array.isArray(i))return {};let t=i,e={};for(let n of ["lastMcpCall","bypassCount"])if(n in t){let o=t[n];if(o==null)continue;e[n]=typeof o=="number"&&Number.isFinite(o)&&o>=0?o:0;}return e}function Ot(i,t){return i.lastMcpCall===t.lastMcpCall&&i.bypassCount===t.bypassCount}function _e(i,t,e){let n=e instanceof Error?e.message:String(e);E({event:"hook.runtime.degraded",identity:{projectRoot:i},level:"warn",timestamp:Date.now(),data:{stage:"enforcement_receipt",operation:t,reason:n,fallback:"fail_open"}});}function Re(i,t,e){let n;try{n=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});let o={},r=n.updateHookReceipt(i,a=>(o=M(a),M(t(o)))),s=M(r);return {receipt:s,applied:!0,changed:!Ot(o,s)}}catch(o){return _e(i,e,o),{receipt:{},applied:false,changed:false}}finally{try{n?.close();}catch{}}}function Ee(i){let t;try{return t=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250}),M(t.getHookReceipt(i))}catch(e){return _e(i,"update",e),{}}finally{try{t?.close();}catch{}}}function At(i,t){return Re(i,()=>t,"write").applied}function Ct(i,t){return Re(i,t,"update")}var V={Grep:"get_project_context",Glob:"get_project_context",Agent:"get_project_context",Bash:"get_project_context",WebSearch:"get_knowledge",WebFetch:"get_knowledge"},Tt=new Set(["Write","Edit","NotebookEdit"]),Ft=new Set(["failed","timeout","unavailable"]);function Lt(i){switch(i){case "WebSearch":case "WebFetch":return 1;case "Agent":return 3;case "Grep":case "Glob":return 3;case "Bash":return 5;default:return 2}}var N=class{constructor(t,e,n){this.projectRoot=t;this.sessionId=e;this.executionId=n;}getPhase(){if(!this.sessionId||!this.executionId)return "idle";let t;try{t=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});let n=t.getContextReceipt(this.projectRoot,this.sessionId,this.executionId);if(n&&n.expiresAt>Date.now())return "context_ready";n&&t.deleteContextReceipt(this.projectRoot,this.sessionId,this.executionId);}catch{}finally{try{t?.close();}catch{}}let e=new x(this.projectRoot).get(this.sessionId);return e?.executionId===this.executionId&&e.contextInitialization?"context_initializing":"context_gathering"}getContextReceipt(){if(!this.sessionId||!this.executionId)return null;let t;try{t=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});let e=t.getContextReceipt(this.projectRoot,this.sessionId,this.executionId);return e&&e.expiresAt>Date.now()?e:(e&&t.deleteContextReceipt(this.projectRoot,this.sessionId,this.executionId),null)}catch{return null}finally{try{t?.close();}catch{}}}evaluate(t,e){let n=this.getPhase();if(e||t==="Skill")return {permissionDecision:"allow"};if(n==="context_initializing"&&V[t])return {permissionDecision:"deny",reasonCode:"DEVFLOW_CONTEXT_INITIALIZING",reason:`DevFlow context initialization is in progress. Wait for mcp__devflow__get_project_context to complete, then retry ${t}.`};if(n==="context_gathering"&&V[t])return {permissionDecision:"deny",reasonCode:"DEVFLOW_CONTEXT_REQUIRED",reason:`DevFlow context required. Call mcp__devflow__get_project_context, then retry ${t}.`};if(n==="context_ready"){if(Tt.has(t)){let d=this.evaluateRequiredAction();if(d)return d}return {permissionDecision:"allow"}}let o=V[t];if(!o)return {permissionDecision:"allow"};let r=Ct(this.projectRoot,d=>({...d,bypassCount:(d.bypassCount??0)+1}));if(!r.applied)return {permissionDecision:"allow"};let s=r.receipt.bypassCount??0,a=Lt(t);return s>=a?{permissionDecision:"allow",additionalContext:`\u5DF2 ${s} \u6B21\u76F4\u63A5\u4F7F\u7528 ${t}\uFF0C\u5EFA\u8BAE\u7528 mcp__devflow__${o} \u83B7\u53D6\u66F4\u7CBE\u786E\u7684\u4E0A\u4E0B\u6587\u3002`}:{permissionDecision:"allow"}}recordMcpCall(){At(this.projectRoot,{lastMcpCall:Math.floor(Date.now()/1e3),bypassCount:0});}recordDomainActionOutcome(t,e,n,o){if(!this.sessionId||!this.executionId)return  false;let r;try{r=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});let s=r.getContextReceipt(this.projectRoot,this.sessionId,this.executionId);if(!s||s.expiresAt<=Date.now()||s.canonicalAction?.tool!==t)return !1;let a=Date.now(),d=o?.trim()?`${o.trim()}:${e}`:`${t}:${e}:${a}`,c=s.actionAttempts??[];return r.upsertContextReceipt({...s,actionAttempts:c.some(l=>l.id===d||o&&l.toolUseId===o&&l.status===e)?c:[...c,{id:d,tool:t,status:e,attemptedAt:a,toolUseId:o,reason:n?.slice(0,500)}].slice(-20),actionSatisfiedAt:e==="succeeded"?a:s.actionSatisfiedAt,actionDegradation:e==="succeeded"?void 0:s.actionDegradation}),!0}catch{return  false}finally{try{r?.close();}catch{}}}evaluateRequiredAction(){let t=this.getContextReceipt(),e=t?.canonicalAction;if(!t||!e||!e.required||e.status!=="required")return null;let n=e.binding;if(n.requiredContextReceipt!==t.contextHash||n.projectRoot!==this.projectRoot||n.sessionId!==this.sessionId||n.requestId!==t.requestId||n.executionId&&n.executionId!==this.executionId)return {permissionDecision:"deny",reasonCode:"DEVFLOW_ACTION_BINDING_STALE",reason:"DevFlow canonical action binding is stale or mismatched. Call mcp__devflow__get_project_context again before writing."};if(t.actionSatisfiedAt)return null;if(t.actionDegradation?.authorizedByContextReceipt===t.contextHash)return {permissionDecision:"allow",additionalContext:`DevFlow degraded fallback authorized by context receipt ${t.contextHash}: ${t.actionDegradation.reason}`};let o=(t.actionAttempts??[]).filter(r=>r.tool===e.tool&&Ft.has(r.status));if(o.length>0){let r=o.at(-1),s={missedTool:e.tool,failedAttemptCount:o.length,reason:`${r.status}:${r.reason??"canonical domain action did not complete"}`,authorizedByContextReceipt:t.contextHash,authorizedAt:Date.now()};return this.persistDegradation(t,s),{permissionDecision:"allow",additionalContext:`DevFlow canonical tool mcp__devflow__${e.tool} ${r.status}; degraded direct write authorized by context receipt ${t.contextHash}. Preserve the action contract and verification plan.`}}return {permissionDecision:"deny",reasonCode:"DEVFLOW_REQUIRED_ACTION",reason:`DevFlow required action not completed. Call mcp__devflow__${e.tool} using context receipt ${t.contextHash}, then retry the write. Direct fallback is allowed only after unavailable, failed, or timeout evidence.`}}persistDegradation(t,e){let n;try{n=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});let o=n.getContextReceipt(t.projectRoot,t.sessionId,t.executionId);if(!o||o.contextHash!==t.contextHash||o.actionDegradation)return;n.upsertContextReceipt({...o,actionDegradation:e});let r=n.getSkillExecution(t.executionId);if(!r)return;let s=r.metadata&&typeof r.metadata=="object"?r.metadata:{},a=Array.isArray(s.requiredActionDegradations)?s.requiredActionDegradations:[];n.updateSkillExecution(t.executionId,{missedMcpTools:[...new Set([...r.missedMcpTools??[],e.missedTool])],failedToolCalls:Math.max(r.failedToolCalls??0,e.failedAttemptCount),fallbackCount:(r.fallbackCount??0)+1,fallbackReasons:[...new Set([...r.fallbackReasons??[],`required_action_${e.reason}`])],metadata:{...s,requiredActionDegradations:[...a,e]}});}catch{}finally{try{n?.close();}catch{}}}};var Wt=10*1024*1024,Jt=5;function Vt(i){return createHash$1("sha256").update(i).digest("hex").slice(0,16)}function Ie(i){return join(homedir(),".devflow","logs","hook-debug",`${Vt(i)}.jsonl`)}function we(i,t,e={}){let n=e.maxBytes??Wt,o=e.maxFiles??Jt;mkdirSync$1(dirname(i),{recursive:true,mode:448});let r=Buffer.byteLength(t);rotateDiagnosticLogFile({path:i,maxBytes:n,maxFiles:o,incomingBytes:r}),appendFileSync(i,t,{mode:384}),chmodSync(i,384);}var B="WARNING: DevFlow is in degraded mode (daemon unreachable): 4-Gate enforcement and memory prefetch cache are unavailable. Run `devflow doctor` for details.";function xe(){return process.env.DEVFLOW_HOOK_DEGRADED==="1"}function De(i){let t=i.trim().replace(/^\//,"");if(!t.startsWith("devflow:"))return null;let e=t.slice(8).replace(/^devflow-/,"");return /^[a-z0-9][a-z0-9-]*$/i.test(e)?`devflow:${e.toLowerCase()}`:null}function ke(i,t){return t?`evt_tool_${createHash("sha256").update(`${i}\0${t}`).digest("hex").slice(0,24)}`:`evt_${Date.now()}_${Math.random().toString(36).slice(2,11)}`}var Yt=new Set(["Write","Edit","NotebookEdit"]),Se="Claude native memory writes are disabled for this project. Use DevFlow explicit memory or mcp__devflow__memory_commit_turn so a canonical receipt is created.";function Fe(i){if(!Yt.has(i.toolName))return null;let t=Kt(i.toolInput);if(!t)return null;let e=Xt(t,i.projectRoot),n=resolve(i.projectRoot,".claude");if(Oe(e,n)&&basename(e).toLocaleUpperCase("en-US")==="MEMORY.MD")return Se;let o=resolve(i.home??homedir(),".claude","projects");return Oe(e,o)&&relative(o,e).split(sep).some(s=>s.toLocaleLowerCase("en-US")==="memory")?Se:null}function Kt(i){for(let t of ["file_path","notebook_path","path"]){let e=i[t];if(typeof e=="string"&&e.trim())return e.trim()}return null}function Xt(i,t){return resolve(isAbsolute(i)?i:resolve(t,i))}function Oe(i,t){let e=relative(t,i);return e===""||!e.startsWith(`..${sep}`)&&e!==".."&&!isAbsolute(e)}function Me(i){let t=sn(i.toolName,i.toolInput),e=t?an(i.projectRoot,i.toolName,i.toolInput):void 0;if(!t||!e||!i.toolUseId)return {allowed:true};let n=ln(e),o,r=0,s,a;try{a=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:100,readonly:!0});let c=a.getActiveContextReceipt(i.projectRoot,i.sessionId,i.executionId);o=c?.contextHash,r=c?.issuedAt??0,s=c?.canonicalAction?.binding.operationTargets?.find(l=>dn(i.projectRoot,l.path,e));}catch{}finally{try{a?.close();}catch{}}let d={toolUseId:i.toolUseId,sessionId:i.sessionId,executionId:i.executionId,operation:t,path:e,before:n,contextReceipt:o,observedAt:Date.now()};if(gn(i.projectRoot,d),t==="edit"||t==="write"||t==="delete"){let c=fn(i.projectRoot,e),l=c?.success&&c.operation==="delete"&&!c.after.exists&&c.completedAt>=r,p=s?.expectedState==="existing"&&!n.exists||s?.expectedState==="missing"&&n.exists||!!(s?.contentHash&&n.hash!==s.contentHash);if(l||s?.expectedState==="existing"&&!n.exists)return Le(i,d,"DEVFLOW_FILE_STATE_DELETED","The target was deleted after the active Context receipt. Refresh project context before editing or recreating it.");if(p)return Le(i,d,"DEVFLOW_FILE_STATE_STALE","The target state no longer matches the active Context receipt. Refresh project context before overwriting it.")}return Ne(i,d,true),{allowed:true,pending:d}}function Le(i,t,e,n){return Ne(i,t,false,e),{allowed:false,reasonCode:e,reason:n,pending:t}}function Ne(i,t,e,n){E({event:"canonical.action.validated",identity:{projectRoot:i.projectRoot,sessionId:i.sessionId,executionId:i.executionId,contextReceipt:t.contextReceipt},level:e?"info":"warn",timestamp:Date.now(),data:{stage:"host_file_state_precondition",valid:e,operation:t.operation,targetPath:relative(i.projectRoot,t.path),targetExists:t.before.exists,targetHash:t.before.hash,reason:n,toolUseId:t.toolUseId}});}function sn(i,t){if(i==="Read")return "read";if(i==="Edit"||i==="NotebookEdit")return "edit";if(i==="Write")return "write";if(i==="Delete"||i==="Bash"&&$e(t.command))return "delete"}function an(i,t,e){let n=cn(e,["file_path","filePath","notebook_path","path","targetPath"])??(t==="Bash"?$e(e.command):void 0);if(!n)return;let o=isAbsolute(n)?normalize(n):resolve(i,n),r=relative(i,o);return r.startsWith("..")||isAbsolute(r)?void 0:o}function $e(i){return typeof i!="string"?void 0:/(?:^|[;&|]\s*)\s*(?:rm|unlink)\s+(?:-[A-Za-z]+\s+)*(?:--\s+)?(["']?)([^\s;&|"']+)\1/u.exec(i)?.[2]}function cn(i,t){for(let e of t){let n=i[e];if(typeof n=="string"&&n.trim())return n.trim()}}function ln(i){if(!existsSync$1(i))return {exists:false};try{return {exists:!0,hash:createHash$1("sha256").update(readFileSync$1(i)).digest("hex")}}catch{return {exists:true}}}function dn(i,t,e){return (isAbsolute(t)?normalize(t):resolve(i,t))===normalize(e)}function Ue(i){return join(R(i),"file-state")}function He(i){return join(Ue(i),"pending.json")}function un(i){return join(Ue(i),"observations.jsonl")}function pn(i){try{return JSON.parse(readFileSync$1(He(i),"utf8"))}catch{return {}}}function gn(i,t){let e=He(i);mkdirSync$1(dirname(e),{recursive:true});let n=pn(i);n[t.toolUseId]=t,mn(e,JSON.stringify(n));}function fn(i,t){try{let e=readFileSync$1(un(i),"utf8").trim().split(`
-`);for(let n=e.length-1;n>=0;n-=1){let o=JSON.parse(e[n]);if(o.path===t)return o}}catch{}}function mn(i,t){let e=`${i}.${process.pid}.${Date.now()}.tmp`;writeFileSync$1(e,t,{encoding:"utf8",mode:384}),renameSync$1(e,i);}var bn=new Set(["delivered","cancelled","rejected"]),_n=new Set(["cancelled","rejected"]),Rn=new Set(["Write","Edit","NotebookEdit","Bash"]);function X(i,t,e,n){if(!Rn.has(e)||!t.trim())return null;let o=join(i,".devflow","delivery-line","state.db");if(!existsSync$1(o))return null;let r;try{r=new DatabaseSync(o,{readOnly:!0,timeout:250});let s=r.prepare("SELECT id, payload, updated_at FROM delivery_cases").all(),a=new Set;if(!!r.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'delivery_workflow_bindings'").get()){let u=r.prepare("SELECT case_id, source_path, aliases FROM delivery_workflow_bindings WHERE status = 'enforced'").all();for(let g of u){let m=[];try{m=JSON.parse(g.aliases);}catch{}(g.source_path===i||m.includes(i))&&a.add(g.case_id);}}let c=[];for(let u of s){let g=JSON.parse(u.payload),m=a.has(u.id);(g.sessionId===t||t===u.id||m)&&c.push({id:u.id,payload:g,updatedAt:typeof u.updated_at=="number"?u.updated_at:typeof g.updatedAt=="number"?g.updatedAt:0});let f=typeof g.stage=="string"?g.stage:"unknown";if(!bn.has(f)){if(n&&f==="executing"){let y=r.prepare("SELECT id, lease_owner, fencing_token FROM delivery_tasks WHERE case_id = ? AND lease_expires_at > ? AND lease_owner IS NOT NULL AND fencing_token > 0 LIMIT 1").get(u.id,Date.now()),k=typeof g.sessionId=="string"?g.sessionId:void 0,U=typeof g.executionId=="string"?g.executionId:void 0,b=n===y?.id||n===y?.lease_owner||n===U,I=t===u.id||t===k;if(y?.id&&b&&I)return null}if(g.sessionId===t||t===u.id||m)return {code:"DELIVERY_AUTHORITY_REQUIRED",caseId:u.id,stage:f,message:`Delivery case ${u.id} is ${f}; use the Delivery task lease before modifying files.`}}}let l=c.sort((u,g)=>g.updatedAt-u.updatedAt)[0],p=typeof l?.payload.stage=="string"?l.payload.stage:void 0;return l&&p&&_n.has(p)?{code:"DELIVERY_AUTHORITY_REQUIRED",caseId:l.id,stage:p,message:`Delivery case ${l.id} is ${p}; start a new Delivery case or session before modifying files.`}:null}catch{return {code:"DELIVERY_AUTHORITY_UNAVAILABLE",caseId:"unknown",stage:"unknown",message:"Delivery state cannot be read; file writes are blocked until runtime health is restored."}}finally{r?.close();}}function A(){return {hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"allow"}}}function qe(i){return {hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"allow",additionalContext:i}}}function kn(i){let t=R(i);return existsSync(t)||mkdirSync(t,{recursive:true}),t}function Sn(i,t,e,n,o,r){let s=join$1(kn(i),"event-map.json"),a=[];try{existsSync(s)&&(a=JSON.parse(readFileSync(s,"utf-8")));}catch{}a.push({sessionId:t,toolName:e,toolUseId:n,eventId:o,timestamp:r}),writeFileSync(s,JSON.stringify(a));}function On(i){switch(i){case "Read":case "Glob":return "file_read";case "Write":case "Edit":case "NotebookEdit":return "file_write";case "Bash":return "bash_command";case "Agent":return "subagent";case "Skill":return "skill_invoke";default:return "tool_use"}}async function An(i){let t=xe();try{if(!i||i.trim()==="")return A();let e=JSON.parse(i),n=Date.now();try{maybeRunDiagnosticLogCleanup(O(),{now:n});}catch{}let o=O(),r=new L;e.tool_name.startsWith("mcp__devflow__")&&(typeof e.tool_input.projectRoot!="string"||!e.tool_input.projectRoot.trim())&&(e.tool_input.projectRoot=o);let s=e.session_id?.trim();if(!s)return qe(B);let a=new x(o),d=a.get(s)!==null;if(a.registerSession(s),d||await r.sendSessionStart(s,o,Date.now()),e.tool_name==="Skill"){let v=e.tool_input?.skill,h=v?De(v):null;if(h){let _=a.get(s)?.executionId,S=a.startExecution(s,h,ce(h));S.executionId&&S.executionId!==_&&await r.sendExecutionStart(S.executionId,s,h,S.lastActivityAt,o,S.requiredMcpTools);}}let c=a.get(s);e.tool_name==="mcp__devflow__get_project_context"&&a.beginContextInitialization(s,e.tool_use_id),e.tool_name.startsWith("mcp__devflow__")&&(e.tool_input._devflow_session_id=s,e.tool_input._devflow_execution_id=c?.executionId??s,c?.activeTurnId&&(e.tool_input._devflow_turn_id=c.activeTurnId),c?.activeRequestId&&(e.tool_input._devflow_request_id=c.activeRequestId),c?.intentArtifactHash&&(e.tool_input._devflow_intent_artifact_hash=c.intentArtifactHash),c?.skillName&&(e.tool_input._devflow_active_skill=c.skillName),e.tool_use_id&&(e.tool_input._devflow_tool_use_id=e.tool_use_id));let l=e.tool_name.startsWith("mcp__"),p=l?e.tool_name.replace(/^mcp__[^_]+__/,""):void 0,u=a.get(s),g=new N(o,s,u?.executionId),m=g.getPhase(),f,y,k=X(o,s,e.tool_name,u?.executionId);if(k)y=k.code,f={hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`${k.message} Resolve the case blocker or obtain an authorized task lease before retrying.`}};else {let v=Fe({toolName:e.tool_name,toolInput:e.tool_input,projectRoot:o}),h=Me({projectRoot:o,sessionId:s,executionId:u?.executionId,toolUseId:e.tool_use_id,toolName:e.tool_name,toolInput:e.tool_input}),_=v?{permissionDecision:"deny",reason:v}:h.allowed?g.evaluate(e.tool_name,l):{permissionDecision:"deny",reason:h.reason,reasonCode:h.reasonCode};_.permissionDecision==="deny"?(y=v?"DEVFLOW_CANONICAL_MEMORY_REQUIRED":_.reasonCode??"DEVFLOW_CONTEXT_REQUIRED",f={hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:_.reason??"MCP context required"}}):_.additionalContext?f=qe(_.additionalContext):f=A();}e.tool_name.startsWith("mcp__devflow__")&&(f.hookSpecificOutput.updatedInput=e.tool_input),t&&f.hookSpecificOutput.permissionDecision==="allow"&&(f.hookSpecificOutput.additionalContext=B);let U=u?.executionId??s,b={eventId:ke(s,e.tool_use_id),executionId:U,sessionId:s,projectRoot:o,toolUseId:e.tool_use_id,timestamp:Date.now(),toolName:e.tool_name,toolType:l?"mcp":e.tool_name==="Agent"?"subagent":"direct",isMcpTool:l,mcpToolName:p,mcpEnforced:l&&(m==="context_gathering"||m==="context_initializing"),mcpFallback:!l&&(m==="context_gathering"||m==="context_initializing"),kind:On(e.tool_name),input:e.tool_input,duration:0,blocked:f.hookSpecificOutput.permissionDecision==="deny",blockReason:f.hookSpecificOutput.permissionDecision==="deny"?y??"DEVFLOW_CONTEXT_REQUIRED":void 0},I=await r.sendEvent(b);I&&!b.blocked&&Sn(o,s,e.tool_name,e.tool_use_id,I,b.timestamp),I&&b.blocked&&await r.completeEvent({eventId:I,sessionId:s,error:y??"DEVFLOW_CONTEXT_REQUIRED",duration:Date.now()-b.timestamp,completedAt:Date.now()});try{let v=Ee(o),h={ts:n,tool:e.tool_name,sessionId:s,skill:c?.skillName??"(none)",requiredTools:c?.requiredMcpTools??[],isMcp:l,enforce:c?.executionId!==void 0,stateless:c?.executionId===void 0&&!l&&e.tool_name!=="Skill",bypassCount:v.bypassCount??0,decision:f.hookSpecificOutput.permissionDecision,env_CLAUDE_PLUGIN_ROOT:process.env.CLAUDE_PLUGIN_ROOT??"(unset)",cwd:process.cwd()};we(Ie(o),`${JSON.stringify(h)}
-`);}catch{}return f}catch{try{let e=JSON.parse(i),n=O(),o=X(n,String(e.session_id??""),String(e.tool_name??""),void 0);if(o)return {hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:o.message}}}catch{}return A()}}if(process.argv[1]?.endsWith("pre-tool-use")||process.argv[1]?.endsWith("pre-tool-use.js")){let i=console.log.bind(console);console.log=console.error.bind(console),console.info=console.error.bind(console);let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",e=>{t+=e;}),process.stdin.on("end",async()=>{let e=await An(t);i(JSON.stringify(e));}),process.stdin.on("error",()=>{i(JSON.stringify(A())),process.exit(0);}),setTimeout(()=>{i(JSON.stringify(A())),process.exit(0);},4e3).unref();}export{An as handlePreToolUse};
+import {existsSync,readdirSync,readFileSync,unlinkSync,mkdirSync,writeFileSync,rmSync,linkSync,renameSync}from'fs';import {join as join$1,dirname as dirname$1}from'path';import {openGlobalDevFlowDatabase}from'@devflow-tools/database';import {getLocalApiKey,getDevFlowStateRoot,projectClaudeToolName,resolveClaudeToolName,acquireRuntimeHttpCircuit,registerRuntimeHttpSuccess,registerRuntimeHttpFailure,getProjectStateDir,readRuntimeState}from'@devflow-tools/sdk';import {request}from'node:http';import {existsSync as existsSync$1,mkdirSync as mkdirSync$1,appendFileSync,chmodSync,readFileSync as readFileSync$1,writeFileSync as writeFileSync$1,renameSync as renameSync$1}from'node:fs';import {join,resolve,basename,relative,sep,dirname,isAbsolute,normalize}from'node:path';import {maybeRunDiagnosticLogCleanup,rotateDiagnosticLogFile,emitSemanticControlLog}from'@devflow-tools/telemetry';import {fileURLToPath}from'url';import {randomUUID,createHash}from'crypto';import {createHash as createHash$1}from'node:crypto';import {homedir}from'node:os';import {DatabaseSync}from'node:sqlite';function L(i,t,e){try{let n=openGlobalDevFlowDatabase();try{n.insertEvent({kind:i,timestamp:Date.now(),duration:e,success:t.success!==!1,metadata:t});}finally{n.close();}}catch{}}var rt=getLocalApiKey(),J=join(getDevFlowStateRoot(),"errors");async function ie(i,t,e={}){let n=e.endpoint??process.env.DEVFLOW_SERVER_URL?.trim()??st();if(!n)return {delivered:false,suppressed:false,fallbackReason:"runtime_not_ready"};let o=e.timeout??1500,r=e.durableMirror??true,s=e.maxRetries??(r?0:2),a=e.circuitBreaker??true,c=acquireRuntimeHttpCircuit(n,i);if(a&&!c.allowed)return {delivered:false,suppressed:true,fallbackReason:c.state.fallbackReason};let l;for(let u=0;u<=s;u+=1)try{return await at(n,i,t,o),a&&registerRuntimeHttpSuccess(n,i).transitioned&&L("http_circuit_transition",{endpoint:n,path:new URL(i,n).pathname,previous:c.state.status,status:"closed",failures:0}),{delivered:!0,suppressed:!1}}catch(p){l=p instanceof Error?p:new Error(String(p)),u<s&&await ct(Math.min(100*2**u,1e3));}if(!l)return {delivered:false,suppressed:false,fallbackReason:"unknown_http_failure"};if(!a)return te(i,l),{delivered:false,suppressed:false,fallbackReason:l.message};let d=registerRuntimeHttpFailure(n,i,e.fallbackReason??(r?"local_durable_mirror":"http_delivery_failed"));return d.transitioned&&(te(i,l),L("http_circuit_transition",{endpoint:n,path:new URL(i,n).pathname,previous:c.state.status,status:"open",failures:d.state.failures,openUntil:d.state.openUntil,fallbackReason:d.state.fallbackReason})),{delivered:false,suppressed:false,fallbackReason:d.state.fallbackReason}}function st(){let i=readRuntimeState();return i?.status==="ready"&&i.dashboardAvailable?i.url:void 0}function at(i,t,e,n){return new Promise((o,r)=>{let s=JSON.stringify(e),a=new URL(t,i),c=false,l=u=>{c||(c=true,u?r(u):o());},d=request({hostname:a.hostname,port:a.port,path:a.pathname+a.search,method:"POST",headers:{"Content-Type":"application/json","X-API-Key":rt,"Content-Length":Buffer.byteLength(s)},timeout:n},u=>{u.on("error",l),u.on("end",()=>{let p=u.statusCode??0;l(p>=200&&p<300?void 0:new Error(`HTTP ${p}`));}),u.resume();});d.on("error",l),d.on("timeout",()=>d.destroy(new Error(`HTTP mirror timed out after ${n}ms`))),d.write(s),d.end();})}function te(i,t){try{existsSync$1(J)||mkdirSync$1(J,{recursive:!0});let e=join(J,"http-errors.log"),n=`${new Date().toISOString()} | ${i} | ${t.message}
+`;rotateDiagnosticLogFile({path:e,maxBytes:50*1024*1024,maxFiles:5,incomingBytes:Buffer.byteLength(n)}),appendFileSync(e,n);}catch{}}function ct(i){return new Promise(t=>setTimeout(t,i))}var ae=1e4,ft=3e4,P=500,N=class{constructor(t){this.retryScheduled=false;this.metricAggregationScheduled=false;this.apiUrl=t?.apiUrl,this.cacheDir=t?.cacheDir??join$1(getDevFlowStateRoot(),"global","telemetry-cache"),this.database=t?.database??null,this.ownsDatabase=!t?.database;let e=t?.busyTimeoutMs??Number(process.env.DEVFLOW_TELEMETRY_DB_BUSY_TIMEOUT_MS);this.busyTimeoutMs=Number.isSafeInteger(e)&&e>=0?e:100;}async sendEvent(t){let e={...t,input:this.truncateInput(t.input)};return this.commitOrCache("tool_call",e)?(this.postHttp("/api/telemetry/tool-call",e),t.eventId):null}async sendExecutionStart(t,e,n,o,r=process.env.CLAUDE_PROJECT_DIR??process.cwd(),s=[]){let a={executionId:t,sessionId:e,skillName:n,startedAt:o,projectRoot:r,requiredMcpTools:s};this.commitOrCache("execution_start",a)&&this.postHttp("/api/telemetry/skill-execution/start",a);}async sendExecutionComplete(t,e="completed",n=Date.now(),o){let r={executionId:t,status:e,finishedAt:n,metadata:o},s=this.commitOrCache("execution_complete",r);return s&&this.postHttp("/api/telemetry/skill-execution/complete-reconciled",r),s}async sendSessionStart(t,e,n){let o={id:t,projectRoot:e,startedAt:n,label:e.split("/").pop()??"unknown"},r=this.commitOrCache("session_start",o);return r&&this.postHttp("/api/telemetry/sessions",o),r}async completeEvent(t){let e=this.commitOrCache("complete_event",t);return e&&(this.postHttp("/api/telemetry/tool-call/output",t),this.scheduleMetricAggregation()),e}async endSession(t,e=Date.now()){let n={sessionId:t,finishedAt:e},o=this.commitOrCache("session_end",n);return o&&(this.getDatabase().aggregatePendingToolMetrics(),this.postHttp(`/api/telemetry/sessions/${encodeURIComponent(t)}/close`,{finishedAt:e})),o}async flushCache(){try{let e=this.getDatabase(),n=e.listTelemetryFailures({unresolvedOnly:!0,limit:P}).reverse();for(let o of n)try{this.applyOperation(o.operation,o.payload),e.resolveTelemetryFailure(o.id);}catch{}e.trimTelemetryFailures(P);}catch{}let t=(existsSync(this.cacheDir)?readdirSync(this.cacheDir):[]).filter(e=>e.endsWith(".json")).map(e=>{let n=join$1(this.cacheDir,e);try{return {cacheFile:n,envelope:mt(JSON.parse(readFileSync(n,"utf8")))}}catch{return null}}).filter(e=>e!==null).sort((e,n)=>e.envelope.timestamp-n.envelope.timestamp||ce(e.envelope.operation)-ce(n.envelope.operation));for(let{cacheFile:e,envelope:n}of t)try{let o=this.getDatabase();o.insertTelemetryFailure({id:n.id,operation:n.operation,payload:n.payload,error:n.failure,createdAt:n.timestamp}),this.applyOperation(n.operation,n.payload),o.resolveTelemetryFailure(n.id),unlinkSync(e);}catch{}this.database?.aggregatePendingToolMetrics();}aggregateMetrics(){return this.getDatabase().aggregatePendingToolMetrics()}async flushAndAggregate(){await this.flushCache(),this.aggregateMetrics();}close(){this.ownsDatabase&&this.database?.close(),this.database=null;}getDatabase(){return this.database??=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:this.busyTimeoutMs}),this.database}commitOrCache(t,e){try{return this.applyOperation(t,e),!0}catch(n){return this.cacheOperation(t,e,n),false}}applyOperation(t,e){let n=this.getDatabase();switch(t){case "tool_call":this.ensureParentSession(n,e),n.insertToolCallEvent(e);return;case "execution_start":this.ensureParentSession(n,e),n.insertSkillExecution({executionId:e.executionId,sessionId:e.sessionId,skillName:e.skillName,startedAt:e.startedAt,status:"running",requiredMcpTools:e.requiredMcpTools});return;case "execution_complete":n.reconcileSkillExecution(e.executionId,e.status,e.finishedAt,e.metadata);return;case "session_start":n.ensureSession(e),n.insertRun({id:le(e.id),source:"hook",tool:"session",input:{projectRoot:e.projectRoot},status:"active",startedAt:e.startedAt,tokenUsed:0,metadata:{sessionId:e.id,projectRoot:e.projectRoot}});return;case "complete_event":if(!n.updateToolCallEvent(e.eventId,{output:e.output===void 0?void 0:JSON.stringify(e.output),error:e.error,failureCategory:e.failureCategory,duration:e.duration}))throw new Error(`Tool call event ${e.eventId} is not available for completion`);return;case "session_end":n.closeSession(e.sessionId,e.finishedAt),n.updateRun(le(e.sessionId),{status:"completed",finishedAt:e.finishedAt});return}}ensureParentSession(t,e){let n=typeof e.sessionId=="string"?e.sessionId.trim():"";if(!n)throw new Error("Canonical session ID is required for telemetry");let o=typeof e.projectRoot=="string"&&e.projectRoot.trim()?e.projectRoot:typeof e.input?.projectRoot=="string"&&e.input.projectRoot.trim()?e.input.projectRoot:process.env.CLAUDE_PROJECT_DIR??"unknown";t.ensureSession({id:n,projectRoot:o,label:o==="unknown"?void 0:o.split("/").pop(),startedAt:Number(e.startedAt??e.timestamp??Date.now())});}cacheOperation(t,e,n){let o=Date.now(),r={id:`failure:${o}:${Math.random().toString(36).slice(2,11)}`,operation:t,payload:e,failure:n instanceof Error?n.message:String(n),timestamp:o};try{let s=this.getDatabase();s.insertTelemetryFailure({id:r.id,operation:t,payload:e,error:r.failure,createdAt:o}),s.trimTelemetryFailures(P),this.scheduleRetry();return}catch{}try{existsSync(this.cacheDir)||mkdirSync(this.cacheDir,{recursive:!0});let s=join$1(this.cacheDir,`${o}_${Math.random().toString(36).slice(2,11)}.json`);writeFileSync(s,JSON.stringify(r,null,2),{mode:384}),this.trimRetryCache(),this.scheduleRetry();}catch{}}trimRetryCache(){try{let t=readdirSync(this.cacheDir).filter(e=>e.endsWith(".json")).sort();for(let e of t.slice(0,Math.max(0,t.length-P)))unlinkSync(join$1(this.cacheDir,e));}catch{}}scheduleRetry(){this.retryScheduled||(this.retryScheduled=true,setTimeout(()=>{this.retryScheduled=false,this.flushCache();},ft).unref());}scheduleMetricAggregation(){if(this.metricAggregationScheduled||process.env.DEVFLOW_HOOK_DEGRADED==="1")return;this.metricAggregationScheduled=true,setTimeout(()=>{this.metricAggregationScheduled=false;try{this.getDatabase().aggregatePendingToolMetrics(50)===50&&this.scheduleMetricAggregation();}catch{}},25).unref();}postHttp(t,e){ie(t,e,{endpoint:this.apiUrl,fallbackReason:"telemetry_already_committed_locally"});}truncateInput(t){let e=JSON.stringify(t);return e===void 0||e.length<=ae?t:{_truncated:true,_original_size:e.length,_preview:`${e.substring(0,ae)}...`}}};function ce(i){return ["session_start","execution_start","tool_call","complete_event","execution_complete","session_end"].indexOf(i)}function le(i){return `hook-run:${i}`}function mt(i){if(!i||typeof i!="object")throw new Error("Invalid telemetry cache envelope");let t=i;if(typeof t.id!="string"||typeof t.operation!="string"||t.payload===void 0||typeof t.failure!="string"||typeof t.timestamp!="number")throw new Error("Invalid telemetry cache envelope");return t}function C(i){return i??process.env.CLAUDE_PROJECT_DIR??process.cwd()}function R(i){return getProjectStateDir(C(i))}var E=emitSemanticControlLog;var Et=2,It=1;function wt(){if(process.env.CLAUDE_PLUGIN_ROOT)return process.env.CLAUDE_PLUGIN_ROOT;try{return join$1(dirname$1(fileURLToPath(import.meta.url)),"..","..")}catch{return process.cwd()}}function de(i=wt()){let t=[join$1(i,"dist","command-registry.json"),join$1(i,"command-registry.json")];for(let e of t)try{if(!existsSync(e))continue;let n=JSON.parse(readFileSync(e,"utf8"));if(n.version!==Et&&n.version!==It||!xt(n.commands)){E({event:"hook.runtime.degraded",identity:{projectRoot:process.env.CLAUDE_PROJECT_DIR||process.cwd()},level:"warn",timestamp:Date.now(),data:{stage:"command_registry",reason:"contract_mismatch",registryPath:e}});continue}return n.commands}catch(n){E({event:"hook.runtime.degraded",identity:{projectRoot:process.env.CLAUDE_PROJECT_DIR||process.cwd()},level:"warn",timestamp:Date.now(),data:{stage:"command_registry",reason:n.message,fallback:"next_registry_candidate"}});}return null}function xt(i){return !i||typeof i!="object"||Array.isArray(i)?false:Object.values(i).every(t=>{if(!t||typeof t!="object"||Array.isArray(t))return  false;let e=t;return M(e.mcpTools)&&M(e.blockedNative)&&(e.source===void 0||e.source==="core"||e.source==="plugin")&&(e.requiresContext===void 0||typeof e.requiresContext=="boolean")&&(e.runtimePackages===void 0||M(e.runtimePackages))&&(e.hostTools===void 0||Dt(e.hostTools))&&(e.evidenceMode===void 0||["static","runtime","mixed"].includes(e.evidenceMode))})}function Dt(i){return !!i&&typeof i=="object"&&!Array.isArray(i)&&Object.entries(i).every(([t,e])=>t.length>0&&M(e))}function M(i){return Array.isArray(i)&&i.every(t=>typeof t=="string"&&t.length>0)}function ue(i){let t=de();return t?t[i]?.mcpTools??[]:[]}function me(i){return Buffer.from(i,"utf8").toString("base64url")}function At(i,t,e){let n=t?.trim();if(n){let o=/^[a-zA-Z0-9:._-]{1,192}$/.test(n)?n:`tool-${createHash("sha256").update(n.slice(0,1024)).digest("hex").slice(0,32)}`;return `${i}:${o}`}return `${i}:legacy-${e}-${randomUUID().slice(0,8)}`}function Re(i){return `${i}:legacy-journal`}var x=class{constructor(t){this.projectRoot=t;this.sessions=new Map;this.sessionsDir=join$1(R(t),"hook-sessions");}registerSession(t){let e=t.trim();if(!e)throw new Error("session_id_required");let n=this.get(e);if(n)return n.lastActivityAt=Date.now(),this.persist(n),n;let o=Date.now(),r={sessionId:e,projectRoot:this.projectRoot,requiredMcpTools:[],evidenceObligations:[],evidenceDegradations:[],evidenceOutcomes:[],startedAt:o,lastActivityAt:o};return this.sessions.set(e,r),this.persist(r),r}startExecution(t,e,n){let o=this.registerSession(t);return (!o.executionId||o.skillName!==e)&&(o.executionId=`exec_${Date.now()}_${randomUUID().slice(0,8)}`),o.skillName=e,o.requiredMcpTools=[...new Set(n)],delete o.contextInitialization,o.lastActivityAt=Date.now(),this.persist(o),o}beginContextInitialization(t,e){let n=this.registerSession(t);return n.contextInitialization={startedAt:Date.now(),...e?{toolUseId:e}:{}},n.lastActivityAt=Date.now(),this.persist(n),n}completeContextInitialization(t,e){let n=this.get(t);return n?(e&&n.contextInitialization?.toolUseId&&n.contextInitialization.toolUseId!==e||(delete n.contextInitialization,n.lastActivityAt=Date.now(),this.persist(n)),n):null}bindTaskIdentity(t,e){let n=this.registerSession(t);return n.activeTurnId=e.turnId,n.activeRequestId=e.requestId,n.intentArtifactHash=e.intentArtifactHash,n.lastActivityAt=Date.now(),this.persist(n),n}get(t){let e=t.trim();if(!e)return null;let n=this.sessions.get(e);if(n)return this.replayEvidenceJournal(n),n;let o=this.snapshotPath(e);if(!existsSync(o))return null;try{let r=JSON.parse(readFileSync(o,"utf8"));return r.sessionId!==e||r.projectRoot!==this.projectRoot?null:(r.requiredMcpTools=Array.isArray(r.requiredMcpTools)?r.requiredMcpTools:[],r.evidenceObligations=he(r.evidenceObligations),r.evidenceDegradations=ye(r.evidenceDegradations),r.evidenceOutcomes=ve(r.evidenceOutcomes),this.replayEvidenceJournal(r),this.sessions.set(e,r),r)}catch{return null}}completeExecution(t){let e=this.get(t);if(!e)return null;let n=structuredClone(e);return delete e.executionId,delete e.skillName,delete e.contextInitialization,e.requiredMcpTools=[],e.lastActivityAt=Date.now(),this.persist(e),n}addEvidenceObligation(t,e,n=Date.now(),o){let r=this.registerSession(t),a=(o?void 0:r.evidenceObligations.find(l=>l.contractId===e.id))?.obligationId??At(e.id,o,n);this.appendEvidenceEvent(t,{kind:"add",obligationId:a,contractId:e.id,at:n,contract:e},`add\0${a}`),this.replayEvidenceJournal(r);let c=r.evidenceObligations.find(l=>l.obligationId===a);return c?(r.lastActivityAt=Date.now(),this.persist(r),structuredClone(c)):null}listEvidenceObligations(t){return (this.get(t)?.evidenceObligations??[]).map(e=>structuredClone(e))}markEvidenceCorrection(t,e,n,o,r=Date.now()){let s=this.get(t),a=s?.evidenceObligations.find(d=>d.obligationId===e);if(!s||!a)return null;let c=/^[a-f0-9]{64}$/.test(o)?o:"";if(!c)return null;this.appendEvidenceEvent(t,{kind:"correction",obligationId:e,contractId:a.contractId,at:r,fingerprint:c,violations:n.slice(0,16).map(d=>d.slice(0,240))},`correction\0${e}\0${c}`),this.replayEvidenceJournal(s),s.lastActivityAt=r,this.persist(s);let l=s.evidenceObligations.find(d=>d.obligationId===e);return l?structuredClone(l):null}resolveEvidenceObligation(t,e){let n=this.get(t);if(!n)return  false;let o=n.evidenceObligations.find(s=>s.obligationId===e);if(!o)return  false;let r=Date.now();return this.appendEvidenceEvent(t,{kind:"resolve",obligationId:e,contractId:o.contractId,at:r},`resolve\0${e}`),this.replayEvidenceJournal(n),n.lastActivityAt=r,this.persist(n),true}resolveDegradedEvidence(t,e){let n=this.get(t),o=n?.evidenceDegradations.find(s=>s.obligationId===e);if(!n||!o)return  false;let r=Date.now();return this.appendEvidenceEvent(t,{kind:"resolve",obligationId:e,contractId:o.contractId,at:r},`resolve-degraded\0${e}\0${r}`),this.replayEvidenceJournal(n),n.lastActivityAt=r,this.persist(n),true}degradeEvidenceObligation(t,e,n,o=Date.now()){let r=this.get(t),s=r?.evidenceObligations.find(c=>c.obligationId===e);if(!r||!s)return  false;let a=n.slice(0,240);return this.appendEvidenceEvent(t,{kind:"degrade",obligationId:e,contractId:s.contractId,at:o,reason:a},`degrade\0${e}\0${a}`),this.replayEvidenceJournal(r),r.lastActivityAt=o,this.persist(r),true}removeSession(t){let e=t.trim();e&&(this.sessions.delete(e),rmSync(this.snapshotPath(e),{force:true}),rmSync(this.evidenceJournalDir(e),{recursive:true,force:true}));}list(){return [...this.sessions.values()]}snapshotPath(t){return join$1(this.sessionsDir,`${me(t)}.json`)}evidenceJournalDir(t){return join$1(this.sessionsDir,"evidence-journal",me(t))}appendEvidenceEvent(t,e,n){let o=this.evidenceJournalDir(t);mkdirSync(o,{recursive:true,mode:448});let r=createHash("sha256").update(n).digest("hex"),s=join$1(o,`${e.kind}-${r}.json`);if(existsSync(s))return;let a=join$1(o,`.${process.pid}.${randomUUID()}.tmp`);writeFileSync(a,JSON.stringify(e),{mode:384});try{linkSync(a,s);}catch(c){if(c.code!=="EEXIST")throw c}finally{rmSync(a,{force:true});}}replayEvidenceJournal(t){t.evidenceObligations=he(t.evidenceObligations),t.evidenceDegradations=ye(t.evidenceDegradations),t.evidenceOutcomes=ve(t.evidenceOutcomes);let e=this.evidenceJournalDir(t.sessionId);if(!existsSync(e))return;let n;try{n=readdirSync(e).filter(r=>/^(?:add|correction|resolve|degrade)-[a-f0-9]{64}\.json$/.test(r)).slice(0,4096);}catch{return}let o=n.flatMap(r=>{try{let s=readFileSync(join$1(e,r),"utf8");if(Buffer.byteLength(s,"utf8")>64*1024)return [];let a=Ct(JSON.parse(s));return a?[a]:[]}catch{return []}}).sort((r,s)=>r.at-s.at||be(r.kind)-be(s.kind));for(let r of o)this.applyEvidenceEvent(t,r);t.evidenceObligations=t.evidenceObligations.slice(-8),t.evidenceDegradations=t.evidenceDegradations.slice(-20),t.evidenceOutcomes=t.evidenceOutcomes.slice(-20);}applyEvidenceEvent(t,e){let n=t.evidenceOutcomes.find(s=>s.obligationId===e.obligationId);if(e.kind==="add"){if(n)return;let s=t.evidenceObligations.find(a=>a.obligationId===e.obligationId);s?(s.contract=e.contract,s.promptedAt=Math.min(s.promptedAt,e.at)):t.evidenceObligations.push({obligationId:e.obligationId,contractId:e.contractId,contract:e.contract,promptedAt:e.at,attempt:0,correctionRequested:false,violations:[]});return}let o=t.evidenceObligations.find(s=>s.obligationId===e.obligationId);if(e.kind==="correction"){if(!o||n||o.correctionFingerprint===e.fingerprint)return;o.attempt+=1,o.correctionRequested=true,o.correctionRequestedAt=e.at,o.correctionFingerprint=e.fingerprint,o.violations=e.violations;return}let r=o?.attempt??n?.attempt??0;if(e.kind==="resolve"&&n?.status==="degraded")t.evidenceOutcomes=t.evidenceOutcomes.filter(s=>s.obligationId!==e.obligationId),t.evidenceDegradations=t.evidenceDegradations.filter(s=>s.obligationId!==e.obligationId);else if(n)return;e.kind==="degrade"?(t.evidenceObligations=t.evidenceObligations.filter(s=>s.obligationId!==e.obligationId),t.evidenceDegradations.push({obligationId:e.obligationId,contractId:e.contractId,reason:e.reason,degradedAt:e.at,attempt:r,contract:o?.contract})):t.evidenceObligations=t.evidenceObligations.filter(s=>s.obligationId!==e.obligationId),t.evidenceOutcomes.push({obligationId:e.obligationId,contractId:e.contractId,status:e.kind==="resolve"?"resolved":"degraded",completedAt:e.at,attempt:r,...e.kind==="degrade"?{reason:e.reason}:{}});}persist(t){mkdirSync(this.sessionsDir,{recursive:true,mode:448});let e=this.snapshotPath(t.sessionId),n=`${e}.${process.pid}.${randomUUID()}.tmp`;writeFileSync(n,JSON.stringify(t),{mode:384}),renameSync(n,e);}};function he(i){return Array.isArray(i)?i.flatMap(t=>{if(!t||typeof t!="object")return [];let e=t;if(typeof e.contractId!="string"||e.contractId.length===0||e.contractId.length>128||typeof e.promptedAt!="number"||typeof e.attempt!="number"||typeof e.correctionRequested!="boolean"||!Array.isArray(e.violations)||!Ee(e.contract))return [];let n=typeof e.obligationId=="string"&&e.obligationId.length>0&&e.obligationId.length<=384?e.obligationId:Re(e.contractId),o=typeof e.correctionTranscriptHash=="string"?e.correctionTranscriptHash:void 0,r=e.correctionFingerprint??o;return r!==void 0&&!/^[a-f0-9]{64}$/.test(r)?[]:[{...e,obligationId:n,correctionFingerprint:r}]}).slice(-8):[]}function ye(i){return Array.isArray(i)?i.filter(t=>{if(!t||typeof t!="object")return  false;let e=t;return typeof e.obligationId=="string"&&typeof e.contractId=="string"&&typeof e.reason=="string"&&typeof e.degradedAt=="number"&&typeof e.attempt=="number"}).slice(-20):[]}function ve(i){return Array.isArray(i)?i.filter(t=>{if(!t||typeof t!="object")return  false;let e=t;return typeof e.obligationId=="string"&&typeof e.contractId=="string"&&(e.status==="resolved"||e.status==="degraded")&&typeof e.completedAt=="number"&&typeof e.attempt=="number"&&(e.reason===void 0||typeof e.reason=="string")}).slice(-20):[]}function Ct(i){if(!i||typeof i!="object")return null;let t=i,e=t.kind;if(e!=="add"&&e!=="correction"&&e!=="resolve"&&e!=="degrade"||typeof t.contractId!="string"||t.contractId.length>128||typeof t.at!="number")return null;let o={obligationId:typeof t.obligationId=="string"&&t.obligationId.length>0&&t.obligationId.length<=384?t.obligationId:Re(t.contractId),contractId:t.contractId,at:t.at};if(e==="add")return Ee(t.contract)?{kind:e,...o,contract:t.contract}:null;if(e==="correction"){let r=typeof t.fingerprint=="string"?t.fingerprint:t.transcriptHash;return typeof r=="string"&&/^[a-f0-9]{64}$/.test(r)&&Array.isArray(t.violations)&&t.violations.every(s=>typeof s=="string"&&s.length<=240)?{kind:e,...o,fingerprint:r,violations:t.violations}:null}return e==="resolve"?{kind:e,...o}:typeof t.reason=="string"&&t.reason.length<=240?{kind:e,...o,reason:t.reason}:null}function be(i){return i==="add"?0:i==="correction"?1:2}function Ee(i){if(!i||typeof i!="object")return  false;let t=i,e=t.requiredSections,n=t.prohibitedClaims;return t.version==="1.0"&&typeof t.id=="string"&&/^[a-zA-Z0-9][a-zA-Z0-9:._-]{0,127}$/.test(t.id)&&typeof t.runtimeProfilingOccurred=="boolean"&&typeof t.samplingEvidenceOccurred=="boolean"&&Array.isArray(e)&&e.length===3&&e[0]==="\u5DE5\u5177\u53D1\u73B0"&&e[1]==="\u6A21\u578B\u5047\u8BBE"&&e[2]==="\u9700\u8981\u8FD0\u884C\u65F6\u9A8C\u8BC1"&&Array.isArray(n)&&n.length<=16&&n.every(o=>typeof o=="string"&&o.length<=128)&&typeof t.canonicalReport=="string"&&Buffer.byteLength(t.canonicalReport,"utf8")<=48*1024&&!!t.correctionPolicy&&t.correctionPolicy.maxAttempts===1&&t.correctionPolicy.repeatedViolation==="fail_open"}function U(i){if(!i||typeof i!="object"||Array.isArray(i))return {};let t=i,e={};for(let n of ["lastMcpCall","bypassCount"])if(n in t){let o=t[n];if(o==null)continue;e[n]=typeof o=="number"&&Number.isFinite(o)&&o>=0?o:0;}return e}function Tt(i,t){return i.lastMcpCall===t.lastMcpCall&&i.bypassCount===t.bypassCount}function Ie(i,t,e){let n=e instanceof Error?e.message:String(e);E({event:"hook.runtime.degraded",identity:{projectRoot:i},level:"warn",timestamp:Date.now(),data:{stage:"enforcement_receipt",operation:t,reason:n,fallback:"fail_open"}});}function we(i,t,e){let n;try{n=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});let o={},r=n.updateHookReceipt(i,a=>(o=U(a),U(t(o)))),s=U(r);return {receipt:s,applied:!0,changed:!Tt(o,s)}}catch(o){return Ie(i,e,o),{receipt:{},applied:false,changed:false}}finally{try{n?.close();}catch{}}}function xe(i){let t;try{return t=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250}),U(t.getHookReceipt(i))}catch(e){return Ie(i,"update",e),{}}finally{try{t?.close();}catch{}}}function Ft(i,t){return we(i,()=>t,"write").applied}function Lt(i,t){return we(i,t,"update")}var G={Grep:"get_project_context",Glob:"get_project_context",Agent:"get_project_context",Bash:"get_project_context",WebSearch:"get_knowledge",WebFetch:"get_knowledge"},jt=new Set(["Write","Edit","NotebookEdit"]),Pt=new Set(["failed","timeout","unavailable"]);function Nt(i){switch(i){case "WebSearch":case "WebFetch":return 1;case "Agent":return 3;case "Grep":case "Glob":return 3;case "Bash":return 5;default:return 2}}var H=class{constructor(t,e,n){this.projectRoot=t;this.sessionId=e;this.executionId=n;}getPhase(){if(!this.sessionId||!this.executionId)return "idle";let t;try{t=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});let n=t.getContextReceipt(this.projectRoot,this.sessionId,this.executionId);if(n&&n.expiresAt>Date.now())return "context_ready";n&&t.deleteContextReceipt(this.projectRoot,this.sessionId,this.executionId);}catch{}finally{try{t?.close();}catch{}}let e=new x(this.projectRoot).get(this.sessionId);return e?.executionId===this.executionId&&e.contextInitialization?"context_initializing":"context_gathering"}getContextReceipt(){if(!this.sessionId||!this.executionId)return null;let t;try{t=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});let e=t.getContextReceipt(this.projectRoot,this.sessionId,this.executionId);return e&&e.expiresAt>Date.now()?e:(e&&t.deleteContextReceipt(this.projectRoot,this.sessionId,this.executionId),null)}catch{return null}finally{try{t?.close();}catch{}}}evaluate(t,e){let n=this.getPhase();if(e||t==="Skill")return {permissionDecision:"allow"};if(n==="context_initializing"&&G[t])return {permissionDecision:"deny",reasonCode:"DEVFLOW_CONTEXT_INITIALIZING",reason:`DevFlow context initialization is in progress. Wait for ${projectClaudeToolName("get_project_context")} to complete, then retry ${t}.`};if(n==="context_gathering"&&G[t])return {permissionDecision:"deny",reasonCode:"DEVFLOW_CONTEXT_REQUIRED",reason:`DevFlow context required. Call ${projectClaudeToolName("get_project_context")}, then retry ${t}.`};if(n==="context_ready"){if(jt.has(t)){let c=this.evaluateRequiredAction();if(c)return c}return {permissionDecision:"allow"}}let o=G[t];if(!o)return {permissionDecision:"allow"};let r=Lt(this.projectRoot,c=>({...c,bypassCount:(c.bypassCount??0)+1}));if(!r.applied)return {permissionDecision:"allow"};let s=r.receipt.bypassCount??0,a=Nt(t);return s>=a?{permissionDecision:"allow",additionalContext:`\u5DF2 ${s} \u6B21\u76F4\u63A5\u4F7F\u7528 ${t}\uFF0C\u5EFA\u8BAE\u7528 ${projectClaudeToolName(o)} \u83B7\u53D6\u66F4\u7CBE\u786E\u7684\u4E0A\u4E0B\u6587\u3002`}:{permissionDecision:"allow"}}recordMcpCall(){Ft(this.projectRoot,{lastMcpCall:Math.floor(Date.now()/1e3),bypassCount:0});}recordDomainActionOutcome(t,e,n,o){if(!this.sessionId||!this.executionId)return  false;let r;try{r=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});let s=r.getContextReceipt(this.projectRoot,this.sessionId,this.executionId);if(!s||s.expiresAt<=Date.now()||s.canonicalAction?.tool!==t)return !1;let a=Date.now(),c=o?.trim()?`${o.trim()}:${e}`:`${t}:${e}:${a}`,l=s.actionAttempts??[];return r.upsertContextReceipt({...s,actionAttempts:l.some(d=>d.id===c||o&&d.toolUseId===o&&d.status===e)?l:[...l,{id:c,tool:t,status:e,attemptedAt:a,toolUseId:o,reason:n?.slice(0,500)}].slice(-20),actionSatisfiedAt:e==="succeeded"?a:s.actionSatisfiedAt,actionDegradation:e==="succeeded"?void 0:s.actionDegradation}),!0}catch{return  false}finally{try{r?.close();}catch{}}}evaluateRequiredAction(){let t=this.getContextReceipt(),e=t?.canonicalAction;if(!t||!e||!e.required||e.status!=="required")return null;let n=e.binding;if(n.requiredContextReceipt!==t.contextHash||n.projectRoot!==this.projectRoot||n.sessionId!==this.sessionId||n.requestId!==t.requestId||n.executionId&&n.executionId!==this.executionId)return {permissionDecision:"deny",reasonCode:"DEVFLOW_ACTION_BINDING_STALE",reason:`DevFlow canonical action binding is stale or mismatched. Call ${projectClaudeToolName("get_project_context")} again before writing.`};if(t.actionSatisfiedAt)return null;if(t.actionDegradation?.authorizedByContextReceipt===t.contextHash)return {permissionDecision:"allow",additionalContext:`DevFlow degraded fallback authorized by context receipt ${t.contextHash}: ${t.actionDegradation.reason}`};let o=(t.actionAttempts??[]).filter(r=>r.tool===e.tool&&Pt.has(r.status));if(o.length>0){let r=o.at(-1),s={missedTool:e.tool,failedAttemptCount:o.length,reason:`${r.status}:${r.reason??"canonical domain action did not complete"}`,authorizedByContextReceipt:t.contextHash,authorizedAt:Date.now()};return this.persistDegradation(t,s),{permissionDecision:"allow",additionalContext:`DevFlow canonical tool ${projectClaudeToolName(e.tool)} ${r.status}; degraded direct write authorized by context receipt ${t.contextHash}. Preserve the action contract and verification plan.`}}return {permissionDecision:"deny",reasonCode:"DEVFLOW_REQUIRED_ACTION",reason:`DevFlow required action not completed. Call ${projectClaudeToolName(e.tool)} using context receipt ${t.contextHash}, then retry the write. Direct fallback is allowed only after unavailable, failed, or timeout evidence.`}}persistDegradation(t,e){let n;try{n=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});let o=n.getContextReceipt(t.projectRoot,t.sessionId,t.executionId);if(!o||o.contextHash!==t.contextHash||o.actionDegradation)return;n.upsertContextReceipt({...o,actionDegradation:e});let r=n.getSkillExecution(t.executionId);if(!r)return;let s=r.metadata&&typeof r.metadata=="object"?r.metadata:{},a=Array.isArray(s.requiredActionDegradations)?s.requiredActionDegradations:[];n.updateSkillExecution(t.executionId,{missedMcpTools:[...new Set([...r.missedMcpTools??[],e.missedTool])],failedToolCalls:Math.max(r.failedToolCalls??0,e.failedAttemptCount),fallbackCount:(r.fallbackCount??0)+1,fallbackReasons:[...new Set([...r.fallbackReasons??[],`required_action_${e.reason}`])],metadata:{...s,requiredActionDegradations:[...a,e]}});}catch{}finally{try{n?.close();}catch{}}}};var Bt=10*1024*1024,zt=5;function Gt(i){return createHash$1("sha256").update(i).digest("hex").slice(0,16)}function De(i){return join(homedir(),".devflow","logs","hook-debug",`${Gt(i)}.jsonl`)}function ke(i,t,e={}){let n=e.maxBytes??Bt,o=e.maxFiles??zt;mkdirSync$1(dirname(i),{recursive:true,mode:448});let r=Buffer.byteLength(t);rotateDiagnosticLogFile({path:i,maxBytes:n,maxFiles:o,incomingBytes:r}),appendFileSync(i,t,{mode:384}),chmodSync(i,384);}var Y="WARNING: DevFlow is in degraded mode (daemon unreachable): 4-Gate enforcement and memory prefetch cache are unavailable. Run `devflow doctor` for details.";function Se(){return process.env.DEVFLOW_HOOK_DEGRADED==="1"}function Oe(i){let t=i.trim().replace(/^\//,"");if(!t.startsWith("devflow:"))return null;let e=t.slice(8).replace(/^devflow-/,"");return /^[a-z0-9][a-z0-9-]*$/i.test(e)?`devflow:${e.toLowerCase()}`:null}function Ae(i,t){return t?`evt_tool_${createHash("sha256").update(`${i}\0${t}`).digest("hex").slice(0,24)}`:`evt_${Date.now()}_${Math.random().toString(36).slice(2,11)}`}var Zt=new Set(["Write","Edit","NotebookEdit"]),Ce=`Claude native memory writes are disabled for this project. Use DevFlow explicit memory or ${projectClaudeToolName("memory_commit_turn")} so a canonical receipt is created.`;function Pe(i){if(!Zt.has(i.toolName))return null;let t=en(i.toolInput);if(!t)return null;let e=tn(t,i.projectRoot),n=resolve(i.projectRoot,".claude");if(Te(e,n)&&basename(e).toLocaleUpperCase("en-US")==="MEMORY.MD")return Ce;let o=resolve(i.home??homedir(),".claude","projects");return Te(e,o)&&relative(o,e).split(sep).some(s=>s.toLocaleLowerCase("en-US")==="memory")?Ce:null}function en(i){for(let t of ["file_path","notebook_path","path"]){let e=i[t];if(typeof e=="string"&&e.trim())return e.trim()}return null}function tn(i,t){return resolve(isAbsolute(i)?i:resolve(t,i))}function Te(i,t){let e=relative(t,i);return e===""||!e.startsWith(`..${sep}`)&&e!==".."&&!isAbsolute(e)}function Ue(i){let t=dn(i.toolName,i.toolInput),e=t?un(i.projectRoot,i.toolName,i.toolInput):void 0;if(!t||!e||!i.toolUseId)return {allowed:true};let n=gn(e),o,r=0,s,a;try{a=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:100,readonly:!0});let l=a.getActiveContextReceipt(i.projectRoot,i.sessionId,i.executionId);o=l?.contextHash,r=l?.issuedAt??0,s=l?.canonicalAction?.binding.operationTargets?.find(d=>fn(i.projectRoot,d.path,e));}catch{}finally{try{a?.close();}catch{}}let c={toolUseId:i.toolUseId,sessionId:i.sessionId,executionId:i.executionId,operation:t,path:e,before:n,contextReceipt:o,observedAt:Date.now()};if(yn(i.projectRoot,c),t==="edit"||t==="write"||t==="delete"){let l=vn(i.projectRoot,e),d=l?.success&&l.operation==="delete"&&!l.after.exists&&l.completedAt>=r,u=s?.expectedState==="existing"&&!n.exists||s?.expectedState==="missing"&&n.exists||!!(s?.contentHash&&n.hash!==s.contentHash);if(d||s?.expectedState==="existing"&&!n.exists)return Ne(i,c,"DEVFLOW_FILE_STATE_DELETED","The target was deleted after the active Context receipt. Refresh project context before editing or recreating it.");if(u)return Ne(i,c,"DEVFLOW_FILE_STATE_STALE","The target state no longer matches the active Context receipt. Refresh project context before overwriting it.")}return He(i,c,true),{allowed:true,pending:c}}function Ne(i,t,e,n){return He(i,t,false,e),{allowed:false,reasonCode:e,reason:n,pending:t}}function He(i,t,e,n){E({event:"canonical.action.validated",identity:{projectRoot:i.projectRoot,sessionId:i.sessionId,executionId:i.executionId,contextReceipt:t.contextReceipt},level:e?"info":"warn",timestamp:Date.now(),data:{stage:"host_file_state_precondition",valid:e,operation:t.operation,targetPath:relative(i.projectRoot,t.path),targetExists:t.before.exists,targetHash:t.before.hash,reason:n,toolUseId:t.toolUseId}});}function dn(i,t){if(i==="Read")return "read";if(i==="Edit"||i==="NotebookEdit")return "edit";if(i==="Write")return "write";if(i==="Delete"||i==="Bash"&&qe(t.command))return "delete"}function un(i,t,e){let n=pn(e,["file_path","filePath","notebook_path","path","targetPath"])??(t==="Bash"?qe(e.command):void 0);if(!n)return;let o=isAbsolute(n)?normalize(n):resolve(i,n),r=relative(i,o);return r.startsWith("..")||isAbsolute(r)?void 0:o}function qe(i){return typeof i!="string"?void 0:/(?:^|[;&|]\s*)\s*(?:rm|unlink)\s+(?:-[A-Za-z]+\s+)*(?:--\s+)?(["']?)([^\s;&|"']+)\1/u.exec(i)?.[2]}function pn(i,t){for(let e of t){let n=i[e];if(typeof n=="string"&&n.trim())return n.trim()}}function gn(i){if(!existsSync$1(i))return {exists:false};try{return {exists:!0,hash:createHash$1("sha256").update(readFileSync$1(i)).digest("hex")}}catch{return {exists:true}}}function fn(i,t,e){return (isAbsolute(t)?normalize(t):resolve(i,t))===normalize(e)}function We(i){return join(R(i),"file-state")}function Je(i){return join(We(i),"pending.json")}function mn(i){return join(We(i),"observations.jsonl")}function hn(i){try{return JSON.parse(readFileSync$1(Je(i),"utf8"))}catch{return {}}}function yn(i,t){let e=Je(i);mkdirSync$1(dirname(e),{recursive:true});let n=hn(i);n[t.toolUseId]=t,bn(e,JSON.stringify(n));}function vn(i,t){try{let e=readFileSync$1(mn(i),"utf8").trim().split(`
+`);for(let n=e.length-1;n>=0;n-=1){let o=JSON.parse(e[n]);if(o.path===t)return o}}catch{}}function bn(i,t){let e=`${i}.${process.pid}.${Date.now()}.tmp`;writeFileSync$1(e,t,{encoding:"utf8",mode:384}),renameSync$1(e,i);}var In=new Set(["delivered","cancelled","rejected"]),wn=new Set(["cancelled","rejected"]),xn=new Set(["Write","Edit","NotebookEdit","Bash"]);function ee(i,t,e,n){if(!xn.has(e)||!t.trim())return null;let o=join(i,".devflow","delivery-line","state.db");if(!existsSync$1(o))return null;let r;try{r=new DatabaseSync(o,{readOnly:!0,timeout:250});let s=r.prepare("SELECT id, payload, updated_at FROM delivery_cases").all(),a=new Set;if(!!r.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'delivery_workflow_bindings'").get()){let p=r.prepare("SELECT case_id, source_path, aliases FROM delivery_workflow_bindings WHERE status = 'enforced'").all();for(let g of p){let m=[];try{m=JSON.parse(g.aliases);}catch{}(g.source_path===i||m.includes(i))&&a.add(g.case_id);}}let l=[];for(let p of s){let g=JSON.parse(p.payload),m=a.has(p.id);(g.sessionId===t||t===p.id||m)&&l.push({id:p.id,payload:g,updatedAt:typeof p.updated_at=="number"?p.updated_at:typeof g.updatedAt=="number"?g.updatedAt:0});let b=typeof g.stage=="string"?g.stage:"unknown";if(!In.has(b)){if(n&&b==="executing"){let y=r.prepare("SELECT id, lease_owner, fencing_token FROM delivery_tasks WHERE case_id = ? AND lease_expires_at > ? AND lease_owner IS NOT NULL AND fencing_token > 0 LIMIT 1").get(p.id,Date.now()),f=typeof g.sessionId=="string"?g.sessionId:void 0,I=typeof g.executionId=="string"?g.executionId:void 0,S=n===y?.id||n===y?.lease_owner||n===I,W=t===p.id||t===f;if(y?.id&&S&&W)return null}if(g.sessionId===t||t===p.id||m)return {code:"DELIVERY_AUTHORITY_REQUIRED",caseId:p.id,stage:b,message:`Delivery case ${p.id} is ${b}; use the Delivery task lease before modifying files.`}}}let d=l.sort((p,g)=>g.updatedAt-p.updatedAt)[0],u=typeof d?.payload.stage=="string"?d.payload.stage:void 0;return d&&u&&wn.has(u)?{code:"DELIVERY_AUTHORITY_REQUIRED",caseId:d.id,stage:u,message:`Delivery case ${d.id} is ${u}; start a new Delivery case or session before modifying files.`}:null}catch{return {code:"DELIVERY_AUTHORITY_UNAVAILABLE",caseId:"unknown",stage:"unknown",message:"Delivery state cannot be read; file writes are blocked until runtime health is restored."}}finally{r?.close();}}function T(){return {hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"allow"}}}function Ve(i){return {hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"allow",additionalContext:i}}}function Tn(i){let t=R(i);return existsSync(t)||mkdirSync(t,{recursive:true}),t}function Fn(i,t,e,n,o,r){let s=join$1(Tn(i),"event-map.json"),a=[];try{existsSync(s)&&(a=JSON.parse(readFileSync(s,"utf-8")));}catch{}a.push({sessionId:t,toolName:e,toolUseId:n,eventId:o,timestamp:r}),writeFileSync(s,JSON.stringify(a));}function Ln(i){switch(i){case "Read":case "Glob":return "file_read";case "Write":case "Edit":case "NotebookEdit":return "file_write";case "Bash":return "bash_command";case "Agent":return "subagent";case "Skill":return "skill_invoke";default:return "tool_use"}}async function jn(i){let t=Se();try{if(!i||i.trim()==="")return T();let e=JSON.parse(i),n=Date.now();try{maybeRunDiagnosticLogCleanup(C(),{now:n});}catch{}let o=C(),r=new N,s=resolveClaudeToolName(e.tool_name,e.tool_input),a=s.status==="unsupported"?void 0:s.canonicalName;a&&(typeof e.tool_input.projectRoot!="string"||!e.tool_input.projectRoot.trim())&&(e.tool_input.projectRoot=o);let c=e.session_id?.trim();if(!c)return Ve(Y);let l=new x(o),d=l.get(c)!==null;if(l.registerSession(c),d||await r.sendSessionStart(c,o,Date.now()),e.tool_name==="Skill"){let v=e.tool_input?.skill,h=v?Oe(v):null;if(h){let _=l.get(c)?.executionId,A=l.startExecution(c,h,ue(h));A.executionId&&A.executionId!==_&&await r.sendExecutionStart(A.executionId,c,h,A.lastActivityAt,o,A.requiredMcpTools);}}let u=l.get(c);a==="get_project_context"&&l.beginContextInitialization(c,e.tool_use_id),a&&(e.tool_input._devflow_session_id=c,e.tool_input._devflow_execution_id=u?.executionId??c,u?.activeTurnId&&(e.tool_input._devflow_turn_id=u.activeTurnId),u?.activeRequestId&&(e.tool_input._devflow_request_id=u.activeRequestId),u?.intentArtifactHash&&(e.tool_input._devflow_intent_artifact_hash=u.intentArtifactHash),u?.skillName&&(e.tool_input._devflow_active_skill=u.skillName),e.tool_use_id&&(e.tool_input._devflow_tool_use_id=e.tool_use_id));let p=e.tool_name.startsWith("mcp__"),g=a,m=l.get(c),b=new H(o,c,m?.executionId),y=b.getPhase(),f,I,S=ee(o,c,e.tool_name,m?.executionId);if(S)I=S.code,f={hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`${S.message} Resolve the case blocker or obtain an authorized task lease before retrying.`}};else {let v=Pe({toolName:e.tool_name,toolInput:e.tool_input,projectRoot:o}),h=Ue({projectRoot:o,sessionId:c,executionId:m?.executionId,toolUseId:e.tool_use_id,toolName:e.tool_name,toolInput:e.tool_input}),_=v?{permissionDecision:"deny",reason:v}:h.allowed?b.evaluate(e.tool_name,p):{permissionDecision:"deny",reason:h.reason,reasonCode:h.reasonCode};_.permissionDecision==="deny"?(I=v?"DEVFLOW_CANONICAL_MEMORY_REQUIRED":_.reasonCode??"DEVFLOW_CONTEXT_REQUIRED",f={hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:_.reason??"MCP context required"}}):_.additionalContext?f=Ve(_.additionalContext):f=T();}a&&(f.hookSpecificOutput.updatedInput=e.tool_input),t&&f.hookSpecificOutput.permissionDecision==="allow"&&(f.hookSpecificOutput.additionalContext=Y);let W=m?.executionId??c,O={eventId:Ae(c,e.tool_use_id),executionId:W,sessionId:c,projectRoot:o,toolUseId:e.tool_use_id,timestamp:Date.now(),toolName:e.tool_name,toolType:p?"mcp":e.tool_name==="Agent"?"subagent":"direct",isMcpTool:p,mcpToolName:g,mcpEnforced:p&&(y==="context_gathering"||y==="context_initializing"),mcpFallback:!p&&(y==="context_gathering"||y==="context_initializing"),kind:Ln(e.tool_name),input:e.tool_input,duration:0,blocked:f.hookSpecificOutput.permissionDecision==="deny",blockReason:f.hookSpecificOutput.permissionDecision==="deny"?I??"DEVFLOW_CONTEXT_REQUIRED":void 0},F=await r.sendEvent(O);F&&!O.blocked&&Fn(o,c,e.tool_name,e.tool_use_id,F,O.timestamp),F&&O.blocked&&await r.completeEvent({eventId:F,sessionId:c,error:I??"DEVFLOW_CONTEXT_REQUIRED",duration:Date.now()-O.timestamp,completedAt:Date.now()});try{let v=xe(o),h={ts:n,tool:e.tool_name,sessionId:c,skill:u?.skillName??"(none)",requiredTools:u?.requiredMcpTools??[],isMcp:p,enforce:u?.executionId!==void 0,stateless:u?.executionId===void 0&&!p&&e.tool_name!=="Skill",bypassCount:v.bypassCount??0,decision:f.hookSpecificOutput.permissionDecision,env_CLAUDE_PLUGIN_ROOT:process.env.CLAUDE_PLUGIN_ROOT??"(unset)",cwd:process.cwd()};ke(De(o),`${JSON.stringify(h)}
+`);}catch{}return f}catch{try{let e=JSON.parse(i),n=C(),o=ee(n,String(e.session_id??""),String(e.tool_name??""),void 0);if(o)return {hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:o.message}}}catch{}return T()}}if(process.argv[1]?.endsWith("pre-tool-use")||process.argv[1]?.endsWith("pre-tool-use.js")){let i=console.log.bind(console);console.log=console.error.bind(console),console.info=console.error.bind(console);let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",e=>{t+=e;}),process.stdin.on("end",async()=>{let e=await jn(t);i(JSON.stringify(e));}),process.stdin.on("error",()=>{i(JSON.stringify(T())),process.exit(0);}),setTimeout(()=>{i(JSON.stringify(T())),process.exit(0);},4e3).unref();}export{jn as handlePreToolUse};

package/dist/plugin-files/dist/hooks/session-end.js

@@ -3,4 +3,4 @@ import {getLocalApiKey,getDevFlowStateRoot,getProjectStateDir,claudeCodeRuntimeA
 `)+1)));let u=d.split(/\r?\n/).slice(-zt),g=t.length>0?Math.min(...t.map(h=>h.promptedAt)):0,c=Wt(u,g),v=[...c].reverse().find(h=>Vt(h.text,t))??c.at(-1);return v?.text?{answer:v.text,fingerprint:v.fingerprint}:{degradationReason:"transcript_answer_unavailable"}}catch{return {degradationReason:"transcript_unreadable"}}finally{e!==void 0&&closeSync(e);}}function Vt(n,t){let e=new Set(t.flatMap(o=>o.contract.requiredSections)),i=Yt(Ut(n.split(/\r?\n/u)).headingLines);return [...e].every(o=>i.found.has(o))}function Le(n){return Jt(n,[]).answer}function Wt(n,t){let e=[];for(let i=0;i<n.length;i++){let o=n[i];if(o.trim())try{let r=JSON.parse(o),s=r.message;if(!s||typeof s!="object"||s.role!=="assistant")continue;let a=s,d=Gt(r.timestamp);if(d>0&&d+5e3<t)continue;let u=s.content,g=typeof u=="string"?u:Array.isArray(u)?u.filter(c=>c&&typeof c=="object"&&c.type==="text").map(c=>c.text).filter(c=>typeof c=="string").join(`
 `):"";if(g.trim()){let c=g.trim(),y=typeof a.id=="string"&&a.id?`message:${a.id}`:typeof r.uuid=="string"&&r.uuid?`uuid:${r.uuid}`:`record:${String(r.timestamp??"")}:${i}:${createHash("sha256").update(o).digest("hex")}`,v=createHash("sha256").update(c).digest("hex"),h=createHash("sha256").update(`${y}\0${v}`).digest("hex");e.push({text:c,timestamp:d,fingerprint:h});}}catch{continue}}return e}function Gt(n){if(typeof n=="number"&&Number.isFinite(n))return n;if(typeof n!="string")return 0;let t=Date.parse(n);return Number.isFinite(t)?t:0}function Yt(n){let t=new Set,e=new Map,i;for(let o=0;o<n.length;o++){let r=n[o].trim().replace(/^#{1,6}\s*/,"").replace(/^\*\*(.*)\*\*$/,"$1").replace(/^(?:[一二三123][、.．]\s*)/,"").replace(/[：:]\s*$/,"").trim(),s=Ht.find(a=>r===a);s&&(i=s,t.add(s)),e.set(o,i);}return {found:t,byLine:e}}function He(n){let t=openGlobalDevFlowDatabase();try{let e=t.listRetrievalLedgerEvents(n),i=new Map(e.filter(c=>c.stage==="selected").map(c=>[ze(c),c])),o=new Map(e.filter(c=>c.stage==="consumed").map(c=>[ze(c),c])),r=0,s=0,a=0;for(let[c,y]of i){let v=o.get(c);v&&n.verificationReceipt&&t.appendRetrievalLedgerEvent({...v,id:retrievalLedgerTransitionId(v.id,"verified",n.verificationReceipt),stage:"verified",verificationReceipt:n.verificationReceipt,reasonCode:"same_task_verification_receipt",createdAt:n.finishedAt??Date.now()});let h=v&&n.verificationReceipt&&n.outcome!=="unknown"?n.outcome:"unknown",b=h==="positive"?"positive_outcome":h==="negative"?"negative_outcome":"unknown_outcome";t.appendRetrievalLedgerEvent({...y,id:retrievalLedgerTransitionId(y.id,b,n.verificationReceipt??n.sessionId),stage:b,reason:v?n.outcomeReason:"selected_not_consumed",toolEvidence:v?.toolEvidence??[],verificationReceipt:h==="unknown"?void 0:n.verificationReceipt,payload:{...y.payload,consumed:!!v},createdAt:n.finishedAt??Date.now()}),b==="positive_outcome"?r+=1:b==="negative_outcome"?s+=1:a+=1;}let d=n.requiredChannels.map(c=>{let y=[...i.values()].filter(h=>h.sourceType===c).length,v=[...o.values()].filter(h=>h.sourceType===c).length;return {channel:c,selected:y,consumed:v,verified:n.verificationReceipt?v:0}}),u={status:d.length>0&&d.every(c=>c.selected>0&&c.consumed===c.selected&&c.verified===c.selected)?"complete":"unavailable",channels:d},g={consumed:o.size,positive:r,negative:s,unknown:a,consumedSources:[...o.values()].map(c=>({sourceType:c.sourceType,sourceId:c.sourceId})),proof:u};return n.verificationReceipt&&o.size>0&&le({event:"retrieval.attribution.transitioned",identity:{projectRoot:n.projectRoot,sessionId:n.sessionId,executionId:n.executionId,requestId:n.requestId},level:"info",timestamp:n.finishedAt??Date.now(),data:{stage:"verified",verifiedCount:o.size}}),le({event:"task.proof.completed",identity:{projectRoot:n.projectRoot,sessionId:n.sessionId,executionId:n.executionId,requestId:n.requestId},level:u.status==="complete"?"info":"warn",timestamp:n.finishedAt??Date.now(),data:u}),le({event:"retrieval.attribution.transitioned",identity:{projectRoot:n.projectRoot,sessionId:n.sessionId,executionId:n.executionId,requestId:n.requestId},level:a>0?"warn":"info",timestamp:n.finishedAt??Date.now(),data:{stage:"session_outcome",selectedCount:i.size,consumedCount:o.size,verifiedCount:n.verificationReceipt?o.size:0,positiveCount:r,negativeCount:s,unknownCount:a}}),g}finally{t.close();}}function ze(n){return [n.requestId,n.contextReceipt,n.sourceType,n.sourceId].join("\0")}function le(n){try{_(n);}catch{}}var on=8*1024*1024;function Je(n){if(!n.transcriptPath||!existsSync(n.transcriptPath))return {status:"unavailable",eventsRead:0,failuresFound:0,failuresRecorded:0,reason:"transcript_path_unavailable"};let t=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});try{let e=t.getLatestTranscriptCheckpoint({projectRoot:n.projectRoot,hostId:"claude-code",sessionId:n.sessionId,sourcePath:n.transcriptPath}),i=statSync(n.transcriptPath).size,o=Math.min(e?.byteOffset??0,i),r=Math.min(on,i-o);if(r<=0)return {status:"completed",eventsRead:0,failuresFound:0,failuresRecorded:0,checkpointId:e?.id};let s=Buffer.alloc(r),a=openSync(n.transcriptPath,"r");try{readSync(a,s,0,r,o);}finally{closeSync(a);}let d=s.toString("utf8").split(/\r?\n/u).filter(Boolean),u=t.listLatestTaskIntentArtifacts(n.projectRoot,n.sessionId),g=new Map,c=new Set,y=0,v=0;for(let D of d){let C;try{C=JSON.parse(D);}catch{continue}for(let O of ue(C,g)){let I=claudeCodeRuntimeAdapter.normalizeToolResult(O,{projectRoot:n.projectRoot});if(I.success||!I.error)continue;let q=I.toolUseId??I.sourceHash;if(c.has(q))continue;c.add(q),y++;let w=I.toolUseId?t.getToolCallEventByToolUseId(n.sessionId,I.toolUseId):null,x=Be(w?.input,"_devflow_turn_id"),U=Be(w?.input,"_devflow_request_id"),k=x?u.find(R=>R.turnId===x):[...u].reverse().find(R=>(!w?.executionId||R.executionId===w.executionId)&&R.createdAt<=(w?.timestamp??I.timestamp))??u.at(-1),B=`host-failure:${I.sourceHash}`;t.insertEvent({kind:"host_transcript_tool_failure",timestamp:I.timestamp,success:!1,toolName:I.canonicalName??I.requestedName,metadata:{projectRoot:n.projectRoot,sessionId:n.sessionId,turnId:x??k?.turnId,requestId:U??k?.requestId,sourceId:B,toolUseId:I.toolUseId,correlatedEventId:w?.eventId,requestedName:I.requestedName,canonicalName:I.canonicalName,failureCategory:I.failureCategory,error:I.error.slice(0,1e3)}}),_({event:"host.tool.result.reconciled",identity:{projectRoot:n.projectRoot,sessionId:n.sessionId,turnId:x??k?.turnId,requestId:U??k?.requestId,executionId:w?.executionId},level:"warn",timestamp:Date.now(),data:{toolUseId:I.toolUseId,toolName:I.canonicalName??I.requestedName,failureCategory:I.failureCategory,correlation:w?"tool_use_id":"timestamp_fallback"}}),v++;}}let h=createHash("sha256").update(s).digest("hex"),b=`transcript:${createHash("sha256").update(`${n.projectRoot}\0${n.sessionId}\0${n.transcriptPath}\0${o+r}\0${h}`).digest("hex").slice(0,24)}`;return t.appendTranscriptCheckpoint({id:b,projectRoot:n.projectRoot,hostId:"claude-code",sessionId:n.sessionId,sourcePath:n.transcriptPath,sourceHash:h,byteOffset:o+r,eventCount:d.length,createdAt:Date.now()}),_({event:"session.reconciled",identity:{projectRoot:n.projectRoot,sessionId:n.sessionId},level:y>0?"warn":"info",timestamp:Date.now(),data:{stage:"transcript",eventsRead:d.length,failuresFound:y,failuresRecorded:v,checkpointId:b}}),{status:"completed",eventsRead:d.length,failuresFound:y,failuresRecorded:v,checkpointId:b}}catch(e){return {status:"degraded",eventsRead:0,failuresFound:0,failuresRecorded:0,reason:e instanceof Error?e.message:String(e)}}finally{t.close();}}function Be(n,t){let e=n?.[t];return typeof e=="string"&&e.trim()?e.trim():void 0}function ue(n,t,e=0){if(e>7||n===null||n===void 0)return [];if(Array.isArray(n))return n.flatMap(s=>ue(s,t,e+1));if(typeof n!="object")return [];let i=n,o=typeof i.type=="string"?i.type:"";o==="tool_use"&&typeof i.id=="string"&&typeof i.name=="string"&&t.set(i.id,i.name);let r=[];if(o==="tool_result"){let s=typeof i.tool_use_id=="string"?i.tool_use_id:void 0;r.push({tool_name:s?t.get(s)??"unknown":"unknown",tool_use_id:s,tool_response:i.content,is_error:i.is_error===true,...i.is_error===true?{error:fe(i.content)||"host tool result failed"}:{},timestamp:i.timestamp});}else (i.tool_name||i.toolName)&&(i.tool_response!==void 0||i.output!==void 0||i.error!==void 0)&&r.push(i);for(let[s,a]of Object.entries(i))s==="content"&&o==="tool_result"||r.push(...ue(a,t,e+1));return r}function fe(n){if(typeof n=="string")return n.slice(0,4e3);if(Array.isArray(n))return n.map(fe).filter(Boolean).join(`
 `).slice(0,4e3);if(!n||typeof n!="object")return "";let t=n;return [t.text,t.content,t.message].map(fe).filter(Boolean).join(`
-`).slice(0,4e3)}var cn={open:["intent_bound"],intent_bound:["context_ready","context_degraded"],context_ready:["action_required","action_not_required"],context_degraded:["action_required","action_not_required"],action_required:["action_satisfied","action_degraded","action_failed"],action_not_required:["memory_decided","memory_quarantined"],action_satisfied:["memory_decided","memory_quarantined"],action_degraded:["memory_decided","memory_quarantined"],action_failed:["action_satisfied","action_degraded"],memory_decided:["closed","closed_with_degradation","closed_with_retry_work"],memory_quarantined:["closed_with_degradation","closed_with_retry_work"],closed:[],closed_with_degradation:[],closed_with_retry_work:[]};function Ve(n){return dn(n)}function dn(n){let t=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});try{let e=mn(t,n.artifact);if(gn(e.toState))return e;let i=t.getContextReceiptForRequest(n.artifact.projectRoot,n.artifact.sessionId,n.artifact.requestId),o=t.getMemoryTurn(n.artifact.turnId),r=n.artifact.intent==="memory"||o?.source==="explicit_intent";if(!i&&!r)return e;let s=i?ln(n.artifact,i):"context_ready";e.toState==="intent_bound"&&(e=E(t,e,n,s,r?"task_context_not_required":s==="context_ready"?"canonical_context_receipt_ready":"canonical_context_receipt_degraded"));let a=i?un(n.artifact,i):"action_not_required";if((e.toState==="context_ready"||e.toState==="context_degraded")&&(a==="action_not_required"?e=E(t,e,n,"action_not_required","task_action_not_required"):e=E(t,e,n,"action_required","canonical_action_obligation_present")),e.toState==="action_required"){if(a==="action_required")return e;if(a==="action_failed")return E(t,e,n,"action_failed","canonical_action_attempt_failed");a==="action_degraded"?e=E(t,e,n,"action_degraded","canonical_action_unavailable_or_degraded"):a==="action_satisfied"&&(e=E(t,e,n,"action_satisfied","canonical_action_succeeded"));}if(e.toState==="action_failed")if(a==="action_satisfied")e=E(t,e,n,"action_satisfied","canonical_action_retry_succeeded");else if(a==="action_degraded")e=E(t,e,n,"action_degraded","canonical_action_retry_degraded");else return e;let d=s==="context_degraded"||a==="action_degraded";return ["action_not_required","action_satisfied","action_degraded"].includes(e.toState)&&(e=E(t,e,n,n.memoryStatus==="pending"?"memory_quarantined":"memory_decided",n.memoryStatus==="pending"?n.reason:`canonical_memory_${n.memoryStatus}`)),e.toState==="memory_decided"?E(t,e,n,d?"closed_with_degradation":"closed",n.reason):e.toState==="memory_quarantined"?E(t,e,n,n.retryOwned?"closed_with_retry_work":"closed_with_degradation",n.retryOwned?"durable_retry_owner_confirmed":"terminal_obligation_unowned"):e}finally{t.close();}}function ln(n,t){return n.intent==="memory"||n.intent==="knowledge"||(t.selectedFiles?.length??0)>0?"context_ready":"context_degraded"}function un(n,t){let e=t.canonicalAction,o=(e?(t.actionAttempts??[]).filter(r=>r.tool===e.tool):[]).at(-1);return t.actionSatisfiedAt||o?.status==="succeeded"?"action_satisfied":o&&["failed","timeout","unavailable"].includes(o.status)?"action_failed":t.actionDegradation||e?.status==="degraded"||e?.status==="unsupported"?"action_degraded":e?.required||fn(n)?"action_required":"action_not_required"}function fn(n){return ["create","modify","debug","test","format"].includes(n.action)||["feature","refactor","performance"].includes(n.intent)}function mn(n,t){let e=n.getLatestTerminalTransition(t.projectRoot,t.sessionId,t.turnId);if(!e)throw new Error(`TERMINAL_INTENT_STATE_MISSING:${t.turnId}`);return e}function E(n,t,e,i,o){if(!cn[t.toState]?.includes(i))throw new Error(`TERMINAL_PATH_UNAVAILABLE:${t.toState}->${i}`);let r=t.sequence+1,s=`terminal:${createHash("sha256").update(`${e.artifact.artifactHash}\0${r}\0${i}`).digest("hex").slice(0,24)}`,a=n.appendTerminalTransition({projectRoot:e.artifact.projectRoot,projectId:e.artifact.projectId,hostId:e.artifact.hostId,sessionId:e.artifact.sessionId,turnId:e.artifact.turnId,requestId:e.artifact.requestId,executionId:e.artifact.executionId,sequence:r,fromState:t.toState,toState:i,receiptId:s,sourceReceiptId:e.memoryReceiptId??t.receiptId,reason:o,payload:{memoryStatus:e.memoryStatus,retryOwned:e.retryOwned??false,sourceIntentHash:e.artifact.artifactHash},createdAt:Date.now()});return _({event:"terminal.state.transitioned",identity:{projectRoot:e.artifact.projectRoot,projectId:e.artifact.projectId,hostId:e.artifact.hostId,sessionId:e.artifact.sessionId,turnId:e.artifact.turnId,requestId:e.artifact.requestId,...e.artifact.executionId?{executionId:e.artifact.executionId}:{}},level:i==="closed"?"info":i.includes("degradation")||i.includes("retry")||i==="action_failed"?"warn":"info",timestamp:Date.now(),data:{fromState:t.toState,nextState:i,receiptId:s,reason:o}}),a}function gn(n){return n==="closed"||n==="closed_with_degradation"||n==="closed_with_retry_work"}function We(n,t){let e=join(n,".devflow","delivery-line","state.db");if(!existsSync(e)||!t.trim())return 0;let i;try{i=new DatabaseSync(e,{timeout:250});let o=i.prepare("SELECT id, payload FROM delivery_cases WHERE id = ? OR json_extract(payload, '$.sessionId') = ?").all(t,t),r=0,s=!!i.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'delivery_events'").get();for(let a of o){let d="incomplete";try{let u=JSON.parse(a.payload);d=u.evidence?.some(g=>g.metadata?.trust==="external-untrusted")?"untrusted":u.stage==="delivered"?"clean":"incomplete";}catch{}if(r+=Number(i.prepare("UPDATE delivery_tasks SET lease_owner = NULL, lease_expires_at = NULL WHERE case_id = ? AND lease_owner IS NOT NULL").run(a.id).changes),s){let u=`session.closed:${a.id}:${t}`;i.prepare("INSERT OR IGNORE INTO delivery_events (id,case_id,idempotency_key,actor,type,payload,created_at,processed_at) VALUES (?,?,?,?,?,?,?,NULL)").run(u,a.id,u,JSON.stringify({id:"devflow:session-end",kind:"system"}),"session.closed",JSON.stringify({sessionId:t,releasedLeases:r,outcome:d}),Date.now());}}return r}catch{return 0}finally{i?.close();}}function _n(n){let t={committed:0,skipped:0,pending:0},e=[];for(let i of n)t[i.status]+=1,i.receiptId&&e.push(i.receiptId);return {memoryReceiptIds:[...new Set(e)],missingMemoryDecisionCount:t.pending,memoryTurnOutcomes:t}}function A(n){return (n instanceof Error?n.message:String(n)).trim().slice(0,240)||"memory_lifecycle_unavailable"}var M=class extends Error{constructor(t,e){super(`session_finalize_${t}:${e}`),this.name="SessionFinalizationRetryableError",this.category=`session_finalize_${t}`;}};function Y(n){let t;try{t=openGlobalDevFlowDatabase();let e=(n.executionId?t.getSkillExecution(n.executionId):null)??t.getLatestSkillExecutionForSession(n.sessionId),i={stage:n.stage,reason:n.reason,degradedAt:Date.now()};e&&t.mergeSkillExecutionMetadata(e.executionId,{...n.metadata,sessionFinalizationDegradations:[i]}),t.insertEvent({kind:"session_finalize_degraded",timestamp:i.degradedAt,success:!1,metadata:{projectRoot:n.projectRoot,sessionId:n.sessionId,executionId:e?.executionId,...i}}),_({event:"hook.session_end.degraded",identity:{projectRoot:n.projectRoot,sessionId:n.sessionId,executionId:e?.executionId},level:"warn",timestamp:i.degradedAt,data:{stage:n.stage,reason:n.reason}});}catch{}finally{t?.close();}}function wn(n,t=Z(),e=true,i,o=true){let r;try{r=JSON.parse(n);}catch{return null}let s=r.session_id?.trim();if(!s)return null;let a=`session-close:${createHash("sha256").update(`${t}\0${s}`).digest("hex").slice(0,24)}`,d={inputJson:n,sessionId:s,cleanupSharedState:e,executionId:i};try{We(t,s);}catch{}let u;try{u=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:50});let g=u.requestSessionClosure({receiptId:a,projectRoot:t,sessionId:s,payload:d}),c=u.getWorkByIdempotencyKey(a),y={status:g.state==="closed"||g.state==="closed_with_pending_work"?"completed":"accepted",receiptId:a,workState:c?.state??"pending",closureState:g.state,pendingWorkCount:g.pendingWorkCount,...c?.id?{workItemId:c.id}:{}};return _({event:"hook.session_end.completed",identity:{projectRoot:t,sessionId:s,executionId:i,terminalReceipt:a},level:y.status==="completed"?"info":"debug",timestamp:Date.now(),data:{stage:"enqueue",...y}}),y}catch(g){if(!o)throw g;return Fe(t,{receiptId:a,...d}),_({event:"hook.session_end.degraded",identity:{projectRoot:t,sessionId:s,executionId:i,terminalReceipt:a},level:"warn",timestamp:Date.now(),data:{stage:"enqueue",reason:A(g),fallback:"durable_spool"}}),{status:"accepted",receiptId:a,workState:"spooled",closureState:"closing",pendingWorkCount:1}}finally{u?.close();}}async function lr(n,t=Z(),e=true,i){let o;try{o=JSON.parse(n);}catch{return}let r=o.session_id?.trim();if(!r)return;let s=new G(t),a=s.get(r),d=Je({projectRoot:t,sessionId:r,transcriptPath:o.transcript_path}),u={evidenceDegradations:a?.evidenceDegradations??[],evidenceContractOutcomes:a?.evidenceOutcomes??[],pendingEvidenceContractIds:a?.evidenceObligations.map(h=>h.contractId)??[],transcriptReconciliation:d},g=i?.telemetry??new ee,c=!i?.telemetry,y=false,v;try{try{await g.flushAndAggregate();}catch{}let h=Date.now(),b=i?.executionId??a?.executionId,D;try{let m=openGlobalDevFlowDatabase();try{D=m.listSessionMemoryTurnsForReconciliation(t,r);for(let l of D){let p=`memory:${l.turnId}`,f=m.getSessionObligation(t,r,p);f?f.state==="open"&&l.status!=="pending"&&m.resolveSessionObligation({projectRoot:t,sessionId:r,obligationId:p,state:"satisfied",receiptId:l.receiptId,reason:l.reason,resolvedAt:l.decidedAt}):m.upsertSessionObligation({obligationId:p,projectRoot:t,sessionId:r,turnId:l.turnId,kind:"memory_decision",state:l.status==="pending"?"open":"satisfied",payload:{eventId:l.eventId,promptHash:l.promptHash},receiptId:l.receiptId,reason:l.reason,createdAt:l.createdAt,updatedAt:l.decidedAt??l.createdAt,resolvedAt:l.decidedAt});}}finally{m.close();}}catch(m){let l=A(m),p={...u,memoryEventReconciliation:{status:"degraded",stage:"turn_load",reason:l,committedProcessed:0,skippedDiscarded:0,remainingUndecided:null,checkpointPending:null}};throw Y({projectRoot:t,sessionId:r,executionId:b,stage:"turn_load",reason:l,metadata:p}),new M("turn_load",l)}let C=_n(D),O=i?.memory??(v=new MemoryGate(t)),I={status:"completed"};try{I=typeof O.reconcileTurnObservationLineage=="function"?{status:"completed",...await O.reconcileTurnObservationLineage(D)}:{status:"unsupported_adapter",committed:0,skipped:0,quarantined:0,unlinked:0};}catch(m){let l=A(m);throw I={status:"degraded",reason:l},Y({projectRoot:t,sessionId:r,executionId:b,stage:"memory_lineage",reason:l,metadata:{...C,...u,memoryLineageReconciliation:I}}),new M("memory_lineage",l)}let q={status:"unknown",selected:0,consumed:0,unknown:0,positive:0,negative:0};try{let m=Le(o.transcript_path),l=openGlobalDevFlowDatabase(),p="unknown",f="no_terminal_host_action_evidence",J,T,$,L=[],ne=[];try{let P=l.listHostActionsForSession(t,r,b),ge=P.filter(S=>S.state==="verified"),ie=P.filter(S=>["failed","cancelled","degraded"].includes(S.state));ie.length>0?(p="negative",f=`terminal_host_action_${ie[0].state}`):ge.length>0&&(p="positive",f="host_action_verified");let K=ie[0]??ge.at(-1);if(J=K?.runId,T=K?.contextReceipt,$=K?.evidenceHash,ne=P.flatMap(S=>{let N=S.report.toolUseIds;return Array.isArray(N)?N.filter(V=>typeof V=="string"):[]}),!K&&b){let S=l.getSkillExecution(b),N=S?.metadata&&typeof S.metadata=="object"&&Array.isArray(S.metadata.policyVerificationOutcomes)?S.metadata.policyVerificationOutcomes:[],V=N.find(j=>j.status==="failed"),re=N.filter(j=>j.status==="passed");V?(p="negative",f="policy_verification_failed",$=typeof V.receiptId=="string"?V.receiptId:void 0):re.length>0&&(p="positive",f="policy_verification_passed",$=typeof re.at(-1)?.receiptId=="string"?String(re.at(-1).receiptId):void 0),T=l.getActiveContextReceipt(t,r,b)?.contextHash,ne=N.map(j=>j.command).filter(j=>typeof j=="string");}T&&(L=l.getSemanticExecutionContextByHash(T)?.dispositions.filter(S=>S.requirement==="required").map(S=>S.channel)??[]);}finally{l.close();}let me=He({projectRoot:t,sessionId:r,executionId:b,outcome:p,outcomeReason:f,verificationReceipt:$,requiredChannels:L,finishedAt:h}),Ye=await O.attributeRetrievalBenefits({sessionId:r,executionId:b,outcome:p,outcomeReason:f,workflowRunId:J,contextReceipt:T,toolEvidence:ne,verificationReceipt:$,consumedSourceIds:me.consumedSources.filter(P=>P.sourceType==="memory").map(P=>P.sourceId)});q={status:m?"evaluated":"unknown",...Ye,retrievalLedger:me};}catch(m){q={...q,status:"degraded",reason:A(m)};}let w;try{w=await O.reconcileDecidedTurnEventWindows(r,D,h);}catch(m){let l=A(m),p={...C,...u,memoryEventReconciliation:{status:"degraded",stage:"event_reconciliation",reason:l,committedProcessed:0,skippedDiscarded:0,remainingUndecided:null,checkpointPending:null}};throw Y({projectRoot:t,sessionId:r,executionId:b,stage:"event_reconciliation",reason:l,metadata:p}),new M("event_reconciliation",l)}let x;try{x=await Re({projectRoot:t,sessionId:r,trigger:"session_end",memory:O,details:{eventReconciliation:w},strictPersistence:!0});}catch(m){let l=A(m),p={...C,...u,memoryEventReconciliation:{status:"completed",...w,checkpointPending:null},memoryCheckpointDegradation:l};throw Y({projectRoot:t,sessionId:r,executionId:b,stage:"checkpoint",reason:l,metadata:p}),new M("checkpoint",l)}let U={memoryLineageReconciliation:I,memoryBenefitAttribution:q,memoryEventReconciliation:{status:"completed",...w,checkpointPending:x.pendingEvents},memoryDistillCheckpoint:x};try{let m=openGlobalDevFlowDatabase();try{let l=`session-finalize:${r}:events`,p=Math.max(Number(x.pendingEvents??0),Number(w.remainingUndecided??0)),f=m.getSessionObligation(t,r,l);p>0?m.upsertSessionObligation({obligationId:l,projectRoot:t,sessionId:r,executionId:b,kind:"session_finalize",state:"open",payload:{pendingEvents:p,reconciliation:w,checkpointId:x.id},reason:"active_unprocessed_session_events",createdAt:f?.createdAt??h,updatedAt:h}):f?.state==="open"&&m.resolveSessionObligation({projectRoot:t,sessionId:r,obligationId:l,state:"satisfied",reason:"session_events_reconciled",resolvedAt:h});}finally{m.close();}}catch(m){_({event:"hook.session_end.degraded",identity:{projectRoot:t,sessionId:r,executionId:b},level:"warn",timestamp:Date.now(),data:{stage:"obligation_persistence",reason:A(m)}});}try{await O.closeSession(r),v&&(v.close(),v=void 0);}catch(m){let l=A(m),p={...C,...u,...U,memorySessionCloseDegradation:l};throw Y({projectRoot:t,sessionId:r,executionId:b,stage:"memory_close",reason:l,metadata:p}),new M("memory_close",l)}let k={...C,...u,...U},B=[];try{let m=openGlobalDevFlowDatabase();try{let l=new Map(m.listLatestTaskIntentArtifacts(t,r).map(p=>[p.turnId,p]));for(let p of D){let f=l.get(p.turnId);if(!f)continue;let T=[m.getWorkByIdempotencyKey(`memory-turn:capture_prompt:${p.turnId}`),m.getWorkByIdempotencyKey(`memory-turn:commit_explicit:${p.turnId}`)].filter(Boolean).some(L=>L.state==="pending"||L.state==="leased"||L.state==="failed"),$=Ve({artifact:f,memoryStatus:p.status,memoryReceiptId:p.receiptId,retryOwned:T,reason:p.status==="pending"?"session_end_memory_pending":"session_end_reconciled"});B.push({turnId:p.turnId,state:$.toState,receiptId:$.receiptId});}}finally{m.close();}}catch(m){B.push({state:"terminal_integrity_failure",reason:A(m)});}k.terminalOutcomes=B,y=!0;let R;try{R=openGlobalDevFlowDatabase();let m=b;if(m)try{R.reconcileSkillExecution(m,"completed",h,k);let f=R.getSkillExecution(m);await W("/api/telemetry/skill-execution/complete",{executionId:m,finishedAt:h,status:"completed",summary:{totalToolCalls:f?.totalToolCalls??0,mcpToolCalls:f?.mcpToolCalls??0,directToolCalls:f?.directToolCalls??0,subagentCount:f?.subagentCount??0,totalDuration:f?.totalDuration??0,mcpComplianceRate:f?.mcpComplianceRate??0,missedTools:f?.missedMcpTools??[],actualFailureCount:f?.failedToolCalls??0,fallbackCount:f?.fallbackCount??0,fallbackReasons:f?.fallbackReasons??[]},metadata:k},{fallbackReason:"skill_execution_already_reconciled_locally"});}catch{}let l=R.reconcileRunningSkillExecutionsForSession(r,h,{closureReason:"session_finalize",...k});for(let f of l)await W("/api/telemetry/skill-execution/complete",{executionId:f.executionId,finishedAt:f.finishedAt,status:f.status,summary:{totalToolCalls:f.totalToolCalls??0,mcpToolCalls:f.mcpToolCalls??0,directToolCalls:f.directToolCalls??0,subagentCount:f.subagentCount??0,totalDuration:f.totalDuration??0,mcpComplianceRate:f.mcpComplianceRate??0,missedTools:f.missedMcpTools??[],actualFailureCount:f.failedToolCalls??0,fallbackCount:f.fallbackCount??0,fallbackReasons:f.fallbackReasons??[]},metadata:k},{fallbackReason:"skill_execution_already_reconciled_locally"});let p=R.getLatestSkillExecutionForSession(r);if(p&&!l.some(f=>f.executionId===p.executionId)&&R.mergeSkillExecutionMetadata(p.executionId,k),e){R.deleteHookReceipt(t);let f=z(t),J=createHash("sha256").update(t).digest("hex").slice(0,12);for(let T of [`session-id-${J}`,"current-execution-id","current-skill.json","event-map.json"])rmSync(join(f,T),{force:!0});}R.deleteContextReceipt(t,r);}catch(m){_({event:"hook.session_end.degraded",identity:{projectRoot:t,sessionId:r,executionId:b},level:"warn",timestamp:Date.now(),data:{stage:"lifecycle_telemetry",reason:A(m),fallback:"fail_open"}});}finally{R?.close();}try{await g.endSession(r),await g.flushAndAggregate();}catch(m){_({event:"hook.session_end.degraded",identity:{projectRoot:t,sessionId:r,executionId:b},level:"warn",timestamp:Date.now(),data:{stage:"telemetry_flush",reason:A(m),fallback:"local_state_authoritative"}});}}finally{if(v)try{v.close();}catch{}c&&g.close(),y&&s.removeSession(r),_({event:y?"hook.session_end.completed":"hook.session_end.degraded",identity:{projectRoot:t,sessionId:r,executionId:i?.executionId??a?.executionId},level:y?"info":"warn",timestamp:Date.now(),data:{stage:"finalize",criticalStagesCompleted:y,transcriptStatus:d.status}});}}if(process.argv[1]?.endsWith("session-end")||process.argv[1]?.endsWith("session-end.js")){let n=console.log.bind(console);console.log=console.error.bind(console),console.info=console.error.bind(console);let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",e=>{t+=e;}),process.stdin.on("end",async()=>{let e=wn(t.trim()||process.argv[2]||"");e&&n(JSON.stringify(e)),process.exit(0);}),process.stdin.on("error",()=>process.exit(0)),setTimeout(()=>process.exit(0),1e4).unref();}export{_n as buildMemoryTurnOutcomeMetadata,wn as enqueueSessionEndFinalization,lr as handleSessionEnd};
+`).slice(0,4e3)}var cn={open:["intent_bound"],intent_bound:["context_ready","context_degraded"],context_ready:["action_required","action_not_required"],context_degraded:["action_required","action_not_required"],action_required:["action_satisfied","action_degraded","action_failed"],action_not_required:["memory_decided","memory_quarantined"],action_satisfied:["memory_decided","memory_quarantined"],action_degraded:["memory_decided","memory_quarantined"],action_failed:["action_satisfied","action_degraded"],memory_decided:["closed","closed_with_degradation","closed_with_retry_work"],memory_quarantined:["closed_with_degradation","closed_with_retry_work"],closed:[],closed_with_degradation:[],closed_with_retry_work:[]};function Ve(n){return dn(n)}function dn(n){let t=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:250});try{let e=mn(t,n.artifact);if(gn(e.toState))return e;let i=t.getContextReceiptForRequest(n.artifact.projectRoot,n.artifact.sessionId,n.artifact.requestId),o=t.getMemoryTurn(n.artifact.turnId),r=n.artifact.intent==="memory"||o?.source==="explicit_intent";if(!i&&!r)return e;let s=i?ln(n.artifact,i):"context_ready";e.toState==="intent_bound"&&(e=E(t,e,n,s,r?"task_context_not_required":s==="context_ready"?"canonical_context_receipt_ready":"canonical_context_receipt_degraded"));let a=i?un(n.artifact,i):"action_not_required";if((e.toState==="context_ready"||e.toState==="context_degraded")&&(a==="action_not_required"?e=E(t,e,n,"action_not_required","task_action_not_required"):e=E(t,e,n,"action_required","canonical_action_obligation_present")),e.toState==="action_required"){if(a==="action_required")return e;if(a==="action_failed")return E(t,e,n,"action_failed","canonical_action_attempt_failed");a==="action_degraded"?e=E(t,e,n,"action_degraded","canonical_action_unavailable_or_degraded"):a==="action_satisfied"&&(e=E(t,e,n,"action_satisfied","canonical_action_succeeded"));}if(e.toState==="action_failed")if(a==="action_satisfied")e=E(t,e,n,"action_satisfied","canonical_action_retry_succeeded");else if(a==="action_degraded")e=E(t,e,n,"action_degraded","canonical_action_retry_degraded");else return e;let d=s==="context_degraded"||a==="action_degraded";return ["action_not_required","action_satisfied","action_degraded"].includes(e.toState)&&(e=E(t,e,n,n.memoryStatus==="pending"?"memory_quarantined":"memory_decided",n.memoryStatus==="pending"?n.reason:`canonical_memory_${n.memoryStatus}`)),e.toState==="memory_decided"?E(t,e,n,d?"closed_with_degradation":"closed",n.reason):e.toState==="memory_quarantined"?E(t,e,n,n.retryOwned?"closed_with_retry_work":"closed_with_degradation",n.retryOwned?"durable_retry_owner_confirmed":"terminal_obligation_unowned"):e}finally{t.close();}}function ln(n,t){return n.intent==="memory"||n.intent==="knowledge"||(t.selectedFiles?.length??0)>0?"context_ready":"context_degraded"}function un(n,t){let e=t.canonicalAction,o=(e?(t.actionAttempts??[]).filter(r=>r.tool===e.tool):[]).at(-1);return t.actionSatisfiedAt||o?.status==="succeeded"?"action_satisfied":o&&["failed","timeout","unavailable"].includes(o.status)?"action_failed":t.actionDegradation||e?.status==="degraded"||e?.status==="unsupported"?"action_degraded":e?.required||fn(n)?"action_required":"action_not_required"}function fn(n){return ["create","modify","debug","test","format"].includes(n.action)||["feature","refactor","performance"].includes(n.intent)}function mn(n,t){let e=n.getLatestTerminalTransition(t.projectRoot,t.sessionId,t.turnId);if(!e)throw new Error(`TERMINAL_INTENT_STATE_MISSING:${t.turnId}`);return e}function E(n,t,e,i,o){if(!cn[t.toState]?.includes(i))throw new Error(`TERMINAL_PATH_UNAVAILABLE:${t.toState}->${i}`);let r=t.sequence+1,s=`terminal:${createHash("sha256").update(`${e.artifact.artifactHash}\0${r}\0${i}`).digest("hex").slice(0,24)}`,a=n.appendTerminalTransition({projectRoot:e.artifact.projectRoot,projectId:e.artifact.projectId,hostId:e.artifact.hostId,sessionId:e.artifact.sessionId,turnId:e.artifact.turnId,requestId:e.artifact.requestId,executionId:e.artifact.executionId,sequence:r,fromState:t.toState,toState:i,receiptId:s,sourceReceiptId:e.memoryReceiptId??t.receiptId,reason:o,payload:{memoryStatus:e.memoryStatus,retryOwned:e.retryOwned??false,sourceIntentHash:e.artifact.artifactHash},createdAt:Date.now()});return _({event:"terminal.state.transitioned",identity:{projectRoot:e.artifact.projectRoot,projectId:e.artifact.projectId,hostId:e.artifact.hostId,sessionId:e.artifact.sessionId,turnId:e.artifact.turnId,requestId:e.artifact.requestId,...e.artifact.executionId?{executionId:e.artifact.executionId}:{}},level:i==="closed"?"info":i.includes("degradation")||i.includes("retry")||i==="action_failed"?"warn":"info",timestamp:Date.now(),data:{fromState:t.toState,nextState:i,receiptId:s,reason:o}}),a}function gn(n){return n==="closed"||n==="closed_with_degradation"||n==="closed_with_retry_work"}function We(n,t){let e=join(n,".devflow","delivery-line","state.db");if(!existsSync(e)||!t.trim())return 0;let i;try{i=new DatabaseSync(e,{timeout:250});let o=i.prepare("SELECT id, payload FROM delivery_cases WHERE id = ? OR json_extract(payload, '$.sessionId') = ?").all(t,t),r=0,s=!!i.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'delivery_events'").get();for(let a of o){let d="incomplete";try{let u=JSON.parse(a.payload);d=u.evidence?.some(g=>g.metadata?.trust==="external-untrusted")?"untrusted":u.stage==="delivered"?"clean":"incomplete";}catch{}if(r+=Number(i.prepare("UPDATE delivery_tasks SET lease_owner = NULL, lease_expires_at = NULL WHERE case_id = ? AND lease_owner IS NOT NULL").run(a.id).changes),s){let u=`session.closed:${a.id}:${t}`;i.prepare("INSERT OR IGNORE INTO delivery_events (id,case_id,idempotency_key,actor,type,payload,created_at,processed_at) VALUES (?,?,?,?,?,?,?,NULL)").run(u,a.id,u,JSON.stringify({id:"devflow:session-end",kind:"system"}),"session.closed",JSON.stringify({sessionId:t,releasedLeases:r,outcome:d}),Date.now());}}return r}catch{return 0}finally{i?.close();}}function _n(n){let t={committed:0,skipped:0,pending:0},e=[];for(let i of n)t[i.status]+=1,i.receiptId&&e.push(i.receiptId);return {memoryReceiptIds:[...new Set(e)],missingMemoryDecisionCount:t.pending,memoryTurnOutcomes:t}}function A(n){return (n instanceof Error?n.message:String(n)).trim().slice(0,240)||"memory_lifecycle_unavailable"}var M=class extends Error{constructor(t,e){super(`session_finalize_${t}:${e}`),this.name="SessionFinalizationRetryableError",this.category=`session_finalize_${t}`;}};function Y(n){let t;try{t=openGlobalDevFlowDatabase();let e=(n.executionId?t.getSkillExecution(n.executionId):null)??t.getLatestSkillExecutionForSession(n.sessionId),i={stage:n.stage,reason:n.reason,degradedAt:Date.now()};e&&t.mergeSkillExecutionMetadata(e.executionId,{...n.metadata,sessionFinalizationDegradations:[i]}),t.insertEvent({kind:"session_finalize_degraded",timestamp:i.degradedAt,success:!1,metadata:{projectRoot:n.projectRoot,sessionId:n.sessionId,executionId:e?.executionId,...i}}),_({event:"hook.session_end.degraded",identity:{projectRoot:n.projectRoot,sessionId:n.sessionId,executionId:e?.executionId},level:"warn",timestamp:i.degradedAt,data:{stage:n.stage,reason:n.reason}});}catch{}finally{t?.close();}}function wn(n,t=Z(),e=true,i,o=true){let r;try{r=JSON.parse(n);}catch{return null}let s=r.session_id?.trim();if(!s)return null;let a=`session-close:${createHash("sha256").update(`${t}\0${s}`).digest("hex").slice(0,24)}`,d={inputJson:n,sessionId:s,cleanupSharedState:e,executionId:i};try{We(t,s);}catch{}let u;try{u=openGlobalDevFlowDatabase(void 0,{busyTimeoutMs:50});let g=u.requestSessionClosure({receiptId:a,projectRoot:t,sessionId:s,payload:d}),c=u.getWorkByIdempotencyKey(a),y={status:g.state==="closed"||g.state==="closed_with_pending_work"?"completed":"accepted",receiptId:a,workState:c?.state??"pending",closureState:g.state,pendingWorkCount:g.pendingWorkCount,...c?.id?{workItemId:c.id}:{}};return _({event:"hook.session_end.completed",identity:{projectRoot:t,sessionId:s,executionId:i,terminalReceipt:a},level:y.status==="completed"?"info":"debug",timestamp:Date.now(),data:{stage:"enqueue",...y}}),y}catch(g){if(!o)throw g;return Fe(t,{receiptId:a,...d}),_({event:"hook.session_end.degraded",identity:{projectRoot:t,sessionId:s,executionId:i,terminalReceipt:a},level:"warn",timestamp:Date.now(),data:{stage:"enqueue",reason:A(g),fallback:"durable_spool"}}),{status:"accepted",receiptId:a,workState:"spooled",closureState:"closing",pendingWorkCount:1}}finally{u?.close();}}async function fr(n,t=Z(),e=true,i){let o;try{o=JSON.parse(n);}catch{return}let r=o.session_id?.trim();if(!r)return;let s=new G(t),a=s.get(r),d=Je({projectRoot:t,sessionId:r,transcriptPath:o.transcript_path}),u={evidenceDegradations:a?.evidenceDegradations??[],evidenceContractOutcomes:a?.evidenceOutcomes??[],pendingEvidenceContractIds:a?.evidenceObligations.map(h=>h.contractId)??[],transcriptReconciliation:d},g=i?.telemetry??new ee,c=!i?.telemetry,y=false,v;try{try{await g.flushAndAggregate();}catch{}let h=Date.now(),b=i?.executionId??a?.executionId,D;try{let m=openGlobalDevFlowDatabase();try{D=m.listSessionMemoryTurnsForReconciliation(t,r);for(let l of D){let p=`memory:${l.turnId}`,f=m.getSessionObligation(t,r,p);f?f.state==="open"&&l.status!=="pending"&&m.resolveSessionObligation({projectRoot:t,sessionId:r,obligationId:p,state:"satisfied",receiptId:l.receiptId,reason:l.reason,resolvedAt:l.decidedAt}):m.upsertSessionObligation({obligationId:p,projectRoot:t,sessionId:r,turnId:l.turnId,kind:"memory_decision",state:l.status==="pending"?"open":"satisfied",payload:{eventId:l.eventId,promptHash:l.promptHash},receiptId:l.receiptId,reason:l.reason,createdAt:l.createdAt,updatedAt:l.decidedAt??l.createdAt,resolvedAt:l.decidedAt});}}finally{m.close();}}catch(m){let l=A(m),p={...u,memoryEventReconciliation:{status:"degraded",stage:"turn_load",reason:l,committedProcessed:0,skippedDiscarded:0,remainingUndecided:null,checkpointPending:null}};throw Y({projectRoot:t,sessionId:r,executionId:b,stage:"turn_load",reason:l,metadata:p}),new M("turn_load",l)}let C=_n(D),O=i?.memory??(v=new MemoryGate(t)),I={status:"completed"};try{I=typeof O.reconcileTurnObservationLineage=="function"?{status:"completed",...await O.reconcileTurnObservationLineage(D)}:{status:"unsupported_adapter",committed:0,skipped:0,quarantined:0,unlinked:0};}catch(m){let l=A(m);throw I={status:"degraded",reason:l},Y({projectRoot:t,sessionId:r,executionId:b,stage:"memory_lineage",reason:l,metadata:{...C,...u,memoryLineageReconciliation:I}}),new M("memory_lineage",l)}let q={status:"unknown",selected:0,consumed:0,unknown:0,positive:0,negative:0};try{let m=Le(o.transcript_path),l=openGlobalDevFlowDatabase(),p="unknown",f="no_terminal_host_action_evidence",J,T,$,L=[],ne=[];try{let P=l.listHostActionsForSession(t,r,b),ge=P.filter(S=>S.state==="verified"),ie=P.filter(S=>["failed","cancelled","degraded"].includes(S.state));ie.length>0?(p="negative",f=`terminal_host_action_${ie[0].state}`):ge.length>0&&(p="positive",f="host_action_verified");let K=ie[0]??ge.at(-1);if(J=K?.runId,T=K?.contextReceipt,$=K?.evidenceHash,ne=P.flatMap(S=>{let N=S.report.toolUseIds;return Array.isArray(N)?N.filter(V=>typeof V=="string"):[]}),!K&&b){let S=l.getSkillExecution(b),N=S?.metadata&&typeof S.metadata=="object"&&Array.isArray(S.metadata.policyVerificationOutcomes)?S.metadata.policyVerificationOutcomes:[],V=N.find(j=>j.status==="failed"),re=N.filter(j=>j.status==="passed");V?(p="negative",f="policy_verification_failed",$=typeof V.receiptId=="string"?V.receiptId:void 0):re.length>0&&(p="positive",f="policy_verification_passed",$=typeof re.at(-1)?.receiptId=="string"?String(re.at(-1).receiptId):void 0),T=l.getActiveContextReceipt(t,r,b)?.contextHash,ne=N.map(j=>j.command).filter(j=>typeof j=="string");}T&&(L=l.getSemanticExecutionContextByHash(T)?.dispositions.filter(S=>S.requirement==="required").map(S=>S.channel)??[]);}finally{l.close();}let me=He({projectRoot:t,sessionId:r,executionId:b,outcome:p,outcomeReason:f,verificationReceipt:$,requiredChannels:L,finishedAt:h}),Ye=await O.attributeRetrievalBenefits({sessionId:r,executionId:b,outcome:p,outcomeReason:f,workflowRunId:J,contextReceipt:T,toolEvidence:ne,verificationReceipt:$,consumedSourceIds:me.consumedSources.filter(P=>P.sourceType==="memory").map(P=>P.sourceId)});q={status:m?"evaluated":"unknown",...Ye,retrievalLedger:me};}catch(m){q={...q,status:"degraded",reason:A(m)};}let w;try{w=await O.reconcileDecidedTurnEventWindows(r,D,h);}catch(m){let l=A(m),p={...C,...u,memoryEventReconciliation:{status:"degraded",stage:"event_reconciliation",reason:l,committedProcessed:0,skippedDiscarded:0,remainingUndecided:null,checkpointPending:null}};throw Y({projectRoot:t,sessionId:r,executionId:b,stage:"event_reconciliation",reason:l,metadata:p}),new M("event_reconciliation",l)}let x;try{x=await Re({projectRoot:t,sessionId:r,trigger:"session_end",memory:O,details:{eventReconciliation:w},strictPersistence:!0});}catch(m){let l=A(m),p={...C,...u,memoryEventReconciliation:{status:"completed",...w,checkpointPending:null},memoryCheckpointDegradation:l};throw Y({projectRoot:t,sessionId:r,executionId:b,stage:"checkpoint",reason:l,metadata:p}),new M("checkpoint",l)}let U={memoryLineageReconciliation:I,memoryBenefitAttribution:q,memoryEventReconciliation:{status:"completed",...w,checkpointPending:x.pendingEvents},memoryDistillCheckpoint:x};try{let m=openGlobalDevFlowDatabase();try{let l=`session-finalize:${r}:events`,p=Math.max(Number(x.pendingEvents??0),Number(w.remainingUndecided??0)),f=m.getSessionObligation(t,r,l);p>0?m.upsertSessionObligation({obligationId:l,projectRoot:t,sessionId:r,executionId:b,kind:"session_finalize",state:"open",payload:{pendingEvents:p,reconciliation:w,checkpointId:x.id},reason:"active_unprocessed_session_events",createdAt:f?.createdAt??h,updatedAt:h}):f?.state==="open"&&m.resolveSessionObligation({projectRoot:t,sessionId:r,obligationId:l,state:"satisfied",reason:"session_events_reconciled",resolvedAt:h});}finally{m.close();}}catch(m){_({event:"hook.session_end.degraded",identity:{projectRoot:t,sessionId:r,executionId:b},level:"warn",timestamp:Date.now(),data:{stage:"obligation_persistence",reason:A(m)}});}try{await O.closeSession(r),v&&(v.close(),v=void 0);}catch(m){let l=A(m),p={...C,...u,...U,memorySessionCloseDegradation:l};throw Y({projectRoot:t,sessionId:r,executionId:b,stage:"memory_close",reason:l,metadata:p}),new M("memory_close",l)}let k={...C,...u,...U},B=[];try{let m=openGlobalDevFlowDatabase();try{let l=new Map(m.listLatestTaskIntentArtifacts(t,r).map(p=>[p.turnId,p]));for(let p of D){let f=l.get(p.turnId);if(!f)continue;let T=[m.getWorkByIdempotencyKey(`memory-turn:capture_prompt:${p.turnId}`),m.getWorkByIdempotencyKey(`memory-turn:commit_explicit:${p.turnId}`)].filter(Boolean).some(L=>L.state==="pending"||L.state==="leased"||L.state==="failed"),$=Ve({artifact:f,memoryStatus:p.status,memoryReceiptId:p.receiptId,retryOwned:T,reason:p.status==="pending"?"session_end_memory_pending":"session_end_reconciled"});B.push({turnId:p.turnId,state:$.toState,receiptId:$.receiptId});}}finally{m.close();}}catch(m){B.push({state:"terminal_integrity_failure",reason:A(m)});}k.terminalOutcomes=B,y=!0;let R;try{R=openGlobalDevFlowDatabase();let m=b;if(m)try{R.reconcileSkillExecution(m,"completed",h,k);let f=R.getSkillExecution(m);await W("/api/telemetry/skill-execution/complete",{executionId:m,finishedAt:h,status:"completed",summary:{totalToolCalls:f?.totalToolCalls??0,mcpToolCalls:f?.mcpToolCalls??0,directToolCalls:f?.directToolCalls??0,subagentCount:f?.subagentCount??0,totalDuration:f?.totalDuration??0,mcpComplianceRate:f?.mcpComplianceRate??0,missedTools:f?.missedMcpTools??[],actualFailureCount:f?.failedToolCalls??0,fallbackCount:f?.fallbackCount??0,fallbackReasons:f?.fallbackReasons??[]},metadata:k},{fallbackReason:"skill_execution_already_reconciled_locally"});}catch{}let l=R.reconcileRunningSkillExecutionsForSession(r,h,{closureReason:"session_finalize",...k});for(let f of l)await W("/api/telemetry/skill-execution/complete",{executionId:f.executionId,finishedAt:f.finishedAt,status:f.status,summary:{totalToolCalls:f.totalToolCalls??0,mcpToolCalls:f.mcpToolCalls??0,directToolCalls:f.directToolCalls??0,subagentCount:f.subagentCount??0,totalDuration:f.totalDuration??0,mcpComplianceRate:f.mcpComplianceRate??0,missedTools:f.missedMcpTools??[],actualFailureCount:f.failedToolCalls??0,fallbackCount:f.fallbackCount??0,fallbackReasons:f.fallbackReasons??[]},metadata:k},{fallbackReason:"skill_execution_already_reconciled_locally"});let p=R.getLatestSkillExecutionForSession(r);if(p&&!l.some(f=>f.executionId===p.executionId)&&R.mergeSkillExecutionMetadata(p.executionId,k),e){R.deleteHookReceipt(t);let f=z(t),J=createHash("sha256").update(t).digest("hex").slice(0,12);for(let T of [`session-id-${J}`,"current-execution-id","current-skill.json","event-map.json"])rmSync(join(f,T),{force:!0});}R.deleteContextReceipt(t,r);}catch(m){_({event:"hook.session_end.degraded",identity:{projectRoot:t,sessionId:r,executionId:b},level:"warn",timestamp:Date.now(),data:{stage:"lifecycle_telemetry",reason:A(m),fallback:"fail_open"}});}finally{R?.close();}try{await g.endSession(r),await g.flushAndAggregate();}catch(m){_({event:"hook.session_end.degraded",identity:{projectRoot:t,sessionId:r,executionId:b},level:"warn",timestamp:Date.now(),data:{stage:"telemetry_flush",reason:A(m),fallback:"local_state_authoritative"}});}}finally{if(v)try{v.close();}catch{}c&&g.close(),y&&s.removeSession(r),_({event:y?"hook.session_end.completed":"hook.session_end.degraded",identity:{projectRoot:t,sessionId:r,executionId:i?.executionId??a?.executionId},level:y?"info":"warn",timestamp:Date.now(),data:{stage:"finalize",criticalStagesCompleted:y,transcriptStatus:d.status}});}}if(process.argv[1]?.endsWith("session-end")||process.argv[1]?.endsWith("session-end.js")){let n=console.log.bind(console);console.log=console.error.bind(console),console.info=console.error.bind(console);let t="";process.stdin.setEncoding("utf8"),process.stdin.on("data",e=>{t+=e;}),process.stdin.on("end",async()=>{let e=wn(t.trim()||process.argv[2]||"");e&&n(JSON.stringify(e)),process.exit(0);}),process.stdin.on("error",()=>process.exit(0)),setTimeout(()=>process.exit(0),1e4).unref();}export{_n as buildMemoryTurnOutcomeMetadata,wn as enqueueSessionEndFinalization,fr as handleSessionEnd};