@ekkos/cli 1.2.18 → 1.3.1

package/templates/windsurf-hooks/pre-user-prompt.sh

@@ -1,435 +0,0 @@
-#!/bin/bash
-# ═══════════════════════════════════════════════════════════════════════════
-# ekkOS_ Hook: pre_user_prompt (Windsurf Cascade) - RETRIEVE + INJECT + CONTRACT
-#
-# ARCHITECTURE: Dumb Hook, Smart Backend
-# ═══════════════════════════════════════════════════════════════════════════
-# This hook runs BEFORE the user prompt is processed by Cascade.
-# It is THE CANONICAL retrieval path for Windsurf Cascade.
-#
-# FEATURES:
-# - Proactive pattern retrieval from all memory layers
-# - Endless Context automatic restoration
-# - Time Machine "Continue from here" support
-# - STRICT mode support (block on failed retrieval)
-# - Golden Loop compliance: Turn contract + PatternGuard + Footer
-#
-# Windsurf Hook Input:
-# {
-#   "agent_action_name": "pre_user_prompt",
-#   "trajectory_id": "...",
-#   "execution_id": "...",
-#   "timestamp": "...",
-#   "tool_info": {"user_prompt": "..."}
-# }
-#
-# Output Format:
-# {"continue": true, "user_message": "augmented prompt"}
-# ═══════════════════════════════════════════════════════════════════════════
-
-set +e  # Don't exit on errors - be bulletproof
-
-# Get project root
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-PROJECT_ROOT="$(dirname "$(dirname "$SCRIPT_DIR")")"
-STATE_DIR="$PROJECT_ROOT/.windsurf/state"
-mkdir -p "$STATE_DIR" 2>/dev/null || true
-
-# Load turn contract library
-if [ -f "$SCRIPT_DIR/lib/contract.sh" ]; then
-  source "$SCRIPT_DIR/lib/contract.sh" 2>/dev/null || true
-fi
-
-# Fallback functions if library didn't load
-if ! command -v write_turn_contract >/dev/null 2>&1; then
-  write_turn_contract() { return 0; }
-fi
-if ! command -v generate_query_hash >/dev/null 2>&1; then
-  generate_query_hash() { echo "$(date +%s)"; }
-fi
-if ! command -v is_strict_mode >/dev/null 2>&1; then
-  is_strict_mode() { [ "${EKKOS_STRICT:-0}" = "1" ]; }
-fi
-if ! command -v get_strict_blocker_message >/dev/null 2>&1; then
-  get_strict_blocker_message() { echo "⛔ EKKOS_STRICT: Retrieval failed - DO NOT ANSWER"; }
-fi
-
-# ═══════════════════════════════════════════════════════════════════════════
-# Read JSON input from stdin (Windsurf format)
-# ═══════════════════════════════════════════════════════════════════════════
-INPUT=$(cat)
-
-# Extract prompt text from Windsurf format
-PROMPT_TEXT=$(echo "$INPUT" | jq -r '.tool_info.user_prompt // ""' 2>/dev/null || echo "")
-
-# Extract trajectory/session info
-TRAJECTORY_ID=$(echo "$INPUT" | jq -r '.trajectory_id // ""' 2>/dev/null || echo "")
-EXECUTION_ID=$(echo "$INPUT" | jq -r '.execution_id // ""' 2>/dev/null || echo "")
-
-# Generate session ID if not provided
-if [ -z "$TRAJECTORY_ID" ] || [ "$TRAJECTORY_ID" = "null" ]; then
-  TRAJECTORY_ID="windsurf-$(date +%s)-$$"
-fi
-
-SESSION_ID="$TRAJECTORY_ID"
-
-# Skip if empty prompt
-if [ -z "$PROMPT_TEXT" ] || [ "$PROMPT_TEXT" = "null" ]; then
-  echo '{"continue": true}'
-  exit 0
-fi
-
-# Generate query hash for contract
-QUERY_HASH=$(generate_query_hash "$PROMPT_TEXT")
-
-# ═══════════════════════════════════════════════════════════════════════════
-# Load auth token - PORTABLE: Check 3 sources in priority order
-# ═══════════════════════════════════════════════════════════════════════════
-EKKOS_CONFIG="$HOME/.ekkos/config.json"
-AUTH_TOKEN=""
-USER_ID=""
-
-# 1. First try ~/.ekkos/config.json (set by VS Code extension - most portable)
-#    Prefer hookApiKey (scoped key for hooks) over apiKey (legacy)
-if [ -f "$EKKOS_CONFIG" ]; then
-  AUTH_TOKEN=$(jq -r '.hookApiKey // .apiKey // ""' "$EKKOS_CONFIG" 2>/dev/null || echo "")
-  USER_ID=$(jq -r '.userId // ""' "$EKKOS_CONFIG" 2>/dev/null || echo "")
-fi
-
-# 2. Then try project .env.local (for developers)
-if [ -z "$AUTH_TOKEN" ] && [ -f "$PROJECT_ROOT/.env.local" ]; then
-  AUTH_TOKEN=$(grep -E "^SUPABASE_SECRET_KEY=" "$PROJECT_ROOT/.env.local" | cut -d'=' -f2- | tr -d '"' | tr -d "'" | tr -d '\r')
-fi
-
-# 3. Finally try environment variable
-if [ -z "$AUTH_TOKEN" ]; then
-  AUTH_TOKEN="${SUPABASE_SECRET_KEY:-}"
-fi
-
-# Track retrieval status
-RETRIEVAL_OK="false"
-RETRIEVED_PATTERN_IDS=""
-RETRIEVED_DIRECTIVE_IDS=""
-
-# Skip if no auth
-if [ -z "$AUTH_TOKEN" ]; then
-  # STRICT MODE: Block turn if no auth
-  if is_strict_mode; then
-    BLOCKER_MSG=$(get_strict_blocker_message)
-    write_turn_contract "$SESSION_ID" "false" "windsurf" "" "" "$QUERY_HASH" "$PROJECT_ROOT"
-    echo "{\"continue\": false, \"user_message\": $(echo "$BLOCKER_MSG" | jq -R -s .)}"
-    exit 0
-  fi
-
-  write_turn_contract "$SESSION_ID" "false" "windsurf" "" "" "$QUERY_HASH" "$PROJECT_ROOT"
-  echo '{"continue": true, "user_message": "[ekkOS] No auth token. Run ekkOS: Connect in VS Code."}'
-  exit 0
-fi
-
-# Cloud API
-MEMORY_API_URL="https://mcp.ekkos.dev"
-
-# ═══════════════════════════════════════════════════════════════════════════
-# [ENDLESS CONTEXT] Automatic context restoration (like Claude Code)
-# ═══════════════════════════════════════════════════════════════════════════
-# Cascade loses context silently - we detect and restore automatically.
-# Triggers: new session, time gap, or explicit request.
-# ═══════════════════════════════════════════════════════════════════════════
-ENDLESS_CONTEXT=""
-SESSION_FLAG="$STATE_DIR/session-active.flag"
-LAST_INTERACTION_FILE="$STATE_DIR/last-interaction.txt"
-TURN_COUNTER_FILE="$STATE_DIR/cascade-turn.txt"
-
-# Get current turn count
-CURRENT_TURN=1
-if [ -f "$TURN_COUNTER_FILE" ]; then
-  CURRENT_TURN=$(cat "$TURN_COUNTER_FILE" 2>/dev/null || echo "0")
-  CURRENT_TURN=$((CURRENT_TURN + 1))
-fi
-echo "$CURRENT_TURN" > "$TURN_COUNTER_FILE" 2>/dev/null || true
-
-# Determine if we should restore context
-SHOULD_RESTORE_CONTEXT=false
-RESTORE_REASON=""
-
-# 1. First turn of new session
-if [ ! -f "$SESSION_FLAG" ]; then
-  SHOULD_RESTORE_CONTEXT=true
-  RESTORE_REASON="new session"
-fi
-
-# 2. Time gap detection (context likely compacted)
-if [ -f "$LAST_INTERACTION_FILE" ]; then
-  LAST_INTERACTION=$(cat "$LAST_INTERACTION_FILE" 2>/dev/null || echo "0")
-  NOW=$(date +%s)
-  SECONDS_AGO=$((NOW - LAST_INTERACTION))
-
-  # 10 minutes = likely new conversation / compacted
-  if [ "$SECONDS_AGO" -gt 600 ]; then
-    SHOULD_RESTORE_CONTEXT=true
-    RESTORE_REASON="10min gap"
-    rm -f "$SESSION_FLAG" 2>/dev/null || true
-    CURRENT_TURN=1
-    echo "1" > "$TURN_COUNTER_FILE" 2>/dev/null || true
-  fi
-fi
-
-# 3. User explicitly asks
-PROMPT_LOWER=$(echo "$PROMPT_TEXT" | tr '[:upper:]' '[:lower:]')
-if echo "$PROMPT_LOWER" | grep -qE "(recall|where were we|what were we|continue|restore context|load context|what did we)"; then
-  SHOULD_RESTORE_CONTEXT=true
-  RESTORE_REASON="user request"
-fi
-
-# Update last interaction
-date +%s > "$LAST_INTERACTION_FILE" 2>/dev/null || true
-
-# Auto-restore when triggered
-if [ "$SHOULD_RESTORE_CONTEXT" = true ] && [ -n "$USER_ID" ]; then
-  # Fetch recent turns from L2
-  RECENT_RESPONSE=$(curl -s -X POST "$MEMORY_API_URL/api/v1/turns/recall" \
-    -H "Authorization: Bearer $AUTH_TOKEN" \
-    -H "Content-Type: application/json" \
-    -d "{\"user_id\": \"$USER_ID\", \"last_n\": 10, \"format\": \"summary\"}" \
-    --connect-timeout 3 \
-    --max-time 5 2>/dev/null || echo '{}')
-
-  RECENT_COUNT=$(echo "$RECENT_RESPONSE" | jq '.turns // [] | length' 2>/dev/null || echo "0")
-
-  if [ "$RECENT_COUNT" -gt 0 ]; then
-    RECENT_CONTEXT=$(echo "$RECENT_RESPONSE" | jq -r '.formatted_context // ""' 2>/dev/null)
-    TOTAL_TURNS=$(echo "$RECENT_RESPONSE" | jq -r '.total_turns_in_session // 0' 2>/dev/null)
-
-    if [ -n "$RECENT_CONTEXT" ] && [ "$RECENT_CONTEXT" != "null" ]; then
-      ENDLESS_CONTEXT="━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-🧠 ENDLESS CONTEXT · Auto-restored ($RESTORE_REASON)
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-
-$RECENT_CONTEXT
-
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-Turn $CURRENT_TURN · Session has $TOTAL_TURNS turns saved
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-
-      # Mark session as active
-      echo "$(date +%s)" > "$SESSION_FLAG" 2>/dev/null || true
-    fi
-  fi
-fi
-
-# ═══════════════════════════════════════════════════════════════════════════
-# [TIME MACHINE] Check for pending "Continue from here" requests
-# ═══════════════════════════════════════════════════════════════════════════
-TIME_MACHINE_CONTEXT=""
-TIME_MACHINE_FLAG="$STATE_DIR/time-machine-consumed.flag"
-
-# Only check if we haven't already consumed a request this session
-if [ -n "$USER_ID" ] && [ ! -f "$TIME_MACHINE_FLAG" ]; then
-  PENDING_RESPONSE=$(curl -s -X GET "$MEMORY_API_URL/api/v1/context/restore-request/pending?user_id=$USER_ID" \
-    -H "Authorization: Bearer $AUTH_TOKEN" \
-    --connect-timeout 2 \
-    --max-time 3 2>/dev/null || echo '{}')
-
-  IS_PENDING=$(echo "$PENDING_RESPONSE" | jq -r '.pending // false' 2>/dev/null)
-
-  if [ "$IS_PENDING" = "true" ]; then
-    TM_SESSION=$(echo "$PENDING_RESPONSE" | jq -r '.request.session_id // ""')
-    TM_FROM_TURN=$(echo "$PENDING_RESPONSE" | jq -r '.request.from_turn // ""')
-    TM_REQUEST_ID=$(echo "$PENDING_RESPONSE" | jq -r '.request.request_id // ""')
-
-    if [ -n "$TM_SESSION" ]; then
-      # Build recall request
-      RECALL_BODY="{\"session_id\": \"$TM_SESSION\", \"last_n\": 15, \"format\": \"summary\"}"
-      if [ -n "$TM_FROM_TURN" ] && [ "$TM_FROM_TURN" != "null" ]; then
-        RECALL_BODY="{\"session_id\": \"$TM_SESSION\", \"from_turn\": $TM_FROM_TURN, \"format\": \"summary\"}"
-      fi
-
-      # Fetch turns
-      TM_RESPONSE=$(curl -s -X POST "$MEMORY_API_URL/api/v1/turns/recall" \
-        -H "Authorization: Bearer $AUTH_TOKEN" \
-        -H "Content-Type: application/json" \
-        -d "$RECALL_BODY" \
-        --connect-timeout 3 \
-        --max-time 5 2>/dev/null || echo '{}')
-
-      TM_TURNS=$(echo "$TM_RESPONSE" | jq -r '.formatted_context // ""' 2>/dev/null)
-
-      if [ -n "$TM_TURNS" ] && [ "$TM_TURNS" != "null" ]; then
-        TIME_MACHINE_CONTEXT="━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-⏰ TIME MACHINE - Restored from past session
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-
-$TM_TURNS
-
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-Continue from where you left off!
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-
-        # Mark request as consumed
-        curl -s -X POST "$MEMORY_API_URL/api/v1/context/restore-request/consume" \
-          -H "Authorization: Bearer $AUTH_TOKEN" \
-          -H "Content-Type: application/json" \
-          -d "{\"request_id\": \"$TM_REQUEST_ID\"}" \
-          --connect-timeout 2 \
-          --max-time 3 >/dev/null 2>&1 || true
-
-        # Set flag so we don't check again this session
-        echo "$TM_REQUEST_ID" > "$TIME_MACHINE_FLAG" 2>/dev/null || true
-      fi
-    fi
-  fi
-fi
-
-# ═══════════════════════════════════════════════════════════════════════════
-# [ekkOS_RETRIEVE] Search memory for patterns (all 8 queryable layers)
-# ═══════════════════════════════════════════════════════════════════════════
-JSON_PAYLOAD=$(jq -n \
-  --arg query "$PROMPT_TEXT" \
-  --arg user_id "${USER_ID:-system}" \
-  --arg session "windsurf-$SESSION_ID" \
-  '{
-    query: $query,
-    user_id: $user_id,
-    session_id: $session,
-    max_per_layer: 5,
-    include_layers: ["working", "episodic", "semantic", "patterns", "procedural", "collective", "codebase", "directives"],
-    metadata: { source: "windsurf-cascade-hook" }
-  }' 2>/dev/null || echo '{}')
-
-API_RESPONSE=$(curl -s -X POST "$MEMORY_API_URL/api/v1/context/retrieve" \
-  -H "Authorization: Bearer $AUTH_TOKEN" \
-  -H "Content-Type: application/json" \
-  -d "$JSON_PAYLOAD" \
-  --connect-timeout 3 \
-  --max-time 5 2>/dev/null || echo '{"error":"timeout"}')
-
-# Check if retrieval succeeded
-if echo "$API_RESPONSE" | jq -e '.layers' >/dev/null 2>&1; then
-  RETRIEVAL_OK="true"
-else
-  # STRICT MODE: Block turn if retrieval failed
-  if is_strict_mode; then
-    BLOCKER_MSG=$(get_strict_blocker_message)
-    write_turn_contract "$SESSION_ID" "false" "windsurf" "" "" "$QUERY_HASH" "$PROJECT_ROOT"
-    echo "{\"continue\": false, \"user_message\": $(echo "$BLOCKER_MSG" | jq -R -s .)}"
-    exit 0
-  fi
-
-  API_RESPONSE='{"error":"timeout","formatted_context":"","layers":{"patterns":[],"directives":[]}}'
-fi
-
-# Extract counts
-PATTERN_COUNT=$(echo "$API_RESPONSE" | jq '.layers.patterns // [] | length' 2>/dev/null || echo "0")
-DIRECTIVE_COUNT=$(echo "$API_RESPONSE" | jq '.layers.directives // [] | length' 2>/dev/null || echo "0")
-TOTAL_COUNT=$((PATTERN_COUNT + DIRECTIVE_COUNT))
-
-# Extract pattern and directive IDs for turn contract
-RETRIEVED_PATTERN_IDS=$(echo "$API_RESPONSE" | jq -r '.layers.patterns // [] | map(.pattern_id // .id) | join(",")' 2>/dev/null || echo "")
-RETRIEVED_DIRECTIVE_IDS=$(echo "$API_RESPONSE" | jq -r '.layers.directives // [] | map(.directive_id // .id) | join(",")' 2>/dev/null || echo "")
-
-# ═══════════════════════════════════════════════════════════════════════════
-# [ekkOS_CONTRACT] Write turn contract as evidence of retrieval
-# ═══════════════════════════════════════════════════════════════════════════
-write_turn_contract "$SESSION_ID" "$RETRIEVAL_OK" "windsurf" "$RETRIEVED_PATTERN_IDS" "$RETRIEVED_DIRECTIVE_IDS" "$QUERY_HASH" "$PROJECT_ROOT"
-
-# Save session ID and query for post_cascade_response hook
-echo "$SESSION_ID" > "$STATE_DIR/current_session_id.txt" 2>/dev/null || true
-echo "$PROMPT_TEXT" > "$STATE_DIR/last_query.txt" 2>/dev/null || true
-
-# ═══════════════════════════════════════════════════════════════════════════
-# [ekkOS_INJECT] Build user message with patterns + footer requirement
-# ═══════════════════════════════════════════════════════════════════════════
-MESSAGE=""
-
-# Add Endless Context if present (auto-restored recent turns)
-if [ -n "$ENDLESS_CONTEXT" ]; then
-  MESSAGE="$ENDLESS_CONTEXT
-
-"
-fi
-
-# Add Time Machine context if present (overrides Endless Context)
-if [ -n "$TIME_MACHINE_CONTEXT" ]; then
-  MESSAGE="$TIME_MACHINE_CONTEXT
-
-"
-fi
-
-if [ "$PATTERN_COUNT" -gt 0 ]; then
-  # Get formatted context
-  FORMATTED=$(echo "$API_RESPONSE" | jq -r '.formatted_context // ""' 2>/dev/null)
-
-  # Get pattern IDs for PatternGuard
-  PATTERN_ID_LIST=$(echo "$API_RESPONSE" | jq -r '.layers.patterns[:5][] | .pattern_id // .id' 2>/dev/null || echo "")
-
-  if [ -n "$FORMATTED" ] && [ "$FORMATTED" != "null" ]; then
-    MESSAGE="${MESSAGE}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-🧠 ekkOS™ Memory Substrate
-✓ $PATTERN_COUNT patterns loaded from memory
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-
-$FORMATTED
-
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-⚠️  PATTERNGUARD REQUIRED
-
-You MUST acknowledge ALL $PATTERN_COUNT pattern(s) above.
-
-Pattern IDs to acknowledge:
-$PATTERN_ID_LIST
-
-For patterns you USE:
-[ekkOS_SELECT]
-- id: <pattern-uuid>
-  reason: <why using>
-  confidence: <0.0-1.0>
-[/ekkOS_SELECT]
-
-For patterns you DO NOT use:
-[ekkOS_SKIP]
-- id: <pattern-uuid>
-  reason: <why not relevant>
-[/ekkOS_SKIP]
-
-Coverage MUST be 100% (all IDs acknowledged).
-
-RESPONSE FORMAT: End with:
-🧠 **ekkOS_™** · 📅 YYYY-MM-DD H:MM AM/PM TZ
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-  else
-    # Fallback: minimal injection
-    MESSAGE="${MESSAGE}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-🧠 ekkOS™: $PATTERN_COUNT patterns found
-
-Pattern IDs to acknowledge with [ekkOS_SELECT] or [ekkOS_SKIP]:
-$PATTERN_ID_LIST
-
-End response with: 🧠 **ekkOS_™** · 📅 YYYY-MM-DD
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-  fi
-
-  # Save patterns for post_cascade_response hook
-  echo "$API_RESPONSE" | jq '.layers.patterns // []' > "$STATE_DIR/patterns-${SESSION_ID}.json" 2>/dev/null || true
-
-  echo "{\"continue\": true, \"user_message\": $(echo "$MESSAGE" | jq -R -s .)}" | jq -c .
-elif [ -n "$TIME_MACHINE_CONTEXT" ] || [ -n "$ENDLESS_CONTEXT" ]; then
-  # Time Machine or Endless Context only, no patterns - still require footer
-  MESSAGE="${MESSAGE}━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-🧠 ekkOS™: Context restored, no new patterns
-
-End response with: 🧠 **ekkOS_™** · 📅 YYYY-MM-DD
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-
-  echo "{\"continue\": true, \"user_message\": $(echo "$MESSAGE" | jq -R -s .)}" | jq -c .
-else
-  # No Time Machine, no patterns - still write contract and remind about footer
-  MESSAGE="━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-🧠 ekkOS™: No patterns found (new territory)
-
-End response with: 🧠 **ekkOS_™** · 📅 YYYY-MM-DD
-━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-
-  echo "{\"continue\": true, \"user_message\": $(echo "$MESSAGE" | jq -R -s .)}" | jq -c .
-fi
-
-exit 0