@elevasis/sdk 0.5.13 → 0.5.15

package/dist/index.d.ts

@@ -2436,7 +2436,11 @@ type Database = {
             };
             sessions: {
                 Row: {
+                    context_window_size: number;
                     created_at: string | null;
+                    cumulative_input_tokens: number;
+                    cumulative_output_tokens: number;
+                    deleted_at: string | null;
                     ended_at: string | null;
                     memory_snapshot: Json;
                     metadata: Json | null;
@@ -2448,7 +2452,11 @@ type Database = {
                     user_id: string | null;
                 };
                 Insert: {
+                    context_window_size?: number;
                     created_at?: string | null;
+                    cumulative_input_tokens?: number;
+                    cumulative_output_tokens?: number;
+                    deleted_at?: string | null;
                     ended_at?: string | null;
                     memory_snapshot: Json;
                     metadata?: Json | null;
@@ -2460,7 +2468,11 @@ type Database = {
                     user_id?: string | null;
                 };
                 Update: {
+                    context_window_size?: number;
                     created_at?: string | null;
+                    cumulative_input_tokens?: number;
+                    cumulative_output_tokens?: number;
+                    deleted_at?: string | null;
                     ended_at?: string | null;
                     memory_snapshot?: Json;
                     metadata?: Json | null;
@@ -3084,6 +3096,18 @@ declare class ResourceRegistry {
      * @throws Error if incoming deployment contains duplicate resourceIds
      */
     registerOrganization(orgName: string, org: OrganizationResources, remote: RemoteOrgConfig): void;
+    /**
+     * Register built-in platform resources (static, local execution)
+     *
+     * Unlike registerOrganization(), these resources:
+     * - Do NOT have remote config (execute in-process, not in worker threads)
+     * - Are NOT removed by unregisterOrganization() (persist across redeployments)
+     * - Use reserved resource IDs that external deployments cannot claim
+     *
+     * @param orgName - Organization name
+     * @param org - Resource definitions with real handlers (not stubs)
+     */
+    registerStaticResources(orgName: string, org: OrganizationResources): void;
     /**
      * Unregister runtime-registered resources for an organization
      *
@@ -3124,6 +3148,14 @@ declare class ResourceRegistry {
      * @returns Remote config or null if org has no remote resources
      */
     getAnyRemoteConfig(orgName: string): RemoteOrgConfig | null;
+    /**
+     * Get statistics about remotely-deployed resources
+     * Used by the health endpoint for platform-wide deployment visibility.
+     */
+    getRemoteStats(): {
+        activeOrgs: number;
+        totalResources: number;
+    };
     /**
      * Get triggers for an organization
      * @param organizationName - Organization name

package/dist/index.js

@@ -142,6 +142,12 @@ var DOMAIN_MAP = {
   [DOMAINS.DIAGNOSTIC]: DIAGNOSTIC_DOMAIN
 };
 
+// ../core/src/platform/registry/reserved.ts
+var RESERVED_RESOURCE_IDS = /* @__PURE__ */ new Set(["command-center-assistant"]);
+function isReservedResourceId(resourceId) {
+  return RESERVED_RESOURCE_IDS.has(resourceId);
+}
+
 // ../core/src/execution/engine/base/errors.ts
 var ExecutionError2 = class extends Error {
   /**
@@ -3295,6 +3301,13 @@ var ResourceRegistry = class {
       }
       seen.add(id);
     }
+    for (const id of incomingIds) {
+      if (isReservedResourceId(id)) {
+        throw new Error(
+          `Resource ID '${id}' is reserved for platform use. External deployments cannot use reserved resource IDs.`
+        );
+      }
+    }
     if (this.isRemote(orgName)) {
       this.unregisterOrganization(orgName);
     }
@@ -3327,6 +3340,46 @@ var ResourceRegistry = class {
     }
     this.serializedCache.set(orgName, serializeOrganization(this.registry[orgName]));
   }
+  /**
+   * Register built-in platform resources (static, local execution)
+   *
+   * Unlike registerOrganization(), these resources:
+   * - Do NOT have remote config (execute in-process, not in worker threads)
+   * - Are NOT removed by unregisterOrganization() (persist across redeployments)
+   * - Use reserved resource IDs that external deployments cannot claim
+   *
+   * @param orgName - Organization name
+   * @param org - Resource definitions with real handlers (not stubs)
+   */
+  registerStaticResources(orgName, org) {
+    const incomingWorkflowIds = (org.workflows ?? []).map((w) => w.config.resourceId);
+    const incomingAgentIds = (org.agents ?? []).map((a) => a.config.resourceId);
+    const incomingIds = [...incomingWorkflowIds, ...incomingAgentIds];
+    const seen = /* @__PURE__ */ new Set();
+    for (const id of incomingIds) {
+      if (seen.has(id)) {
+        throw new Error(`Duplicate resource ID '${id}' in static resources.`);
+      }
+      seen.add(id);
+    }
+    const existingOrg = this.registry[orgName];
+    if (existingOrg) {
+      const existingWorkflowIds = new Set((existingOrg.workflows ?? []).map((w) => w.config.resourceId));
+      const existingAgentIds = new Set((existingOrg.agents ?? []).map((a) => a.config.resourceId));
+      for (const id of incomingIds) {
+        if (existingWorkflowIds.has(id) || existingAgentIds.has(id)) {
+          throw new Error(`Static resource '${id}' conflicts with existing resource in '${orgName}'.`);
+        }
+      }
+    }
+    if (existingOrg) {
+      existingOrg.workflows = [...existingOrg.workflows ?? [], ...org.workflows ?? []];
+      existingOrg.agents = [...existingOrg.agents ?? [], ...org.agents ?? []];
+    } else {
+      this.registry[orgName] = org;
+    }
+    this.serializedCache.set(orgName, serializeOrganization(this.registry[orgName]));
+  }
   /**
    * Unregister runtime-registered resources for an organization
    *
@@ -3410,6 +3463,21 @@ var ResourceRegistry = class {
     }
     return null;
   }
+  /**
+   * Get statistics about remotely-deployed resources
+   * Used by the health endpoint for platform-wide deployment visibility.
+   */
+  getRemoteStats() {
+    const orgs = /* @__PURE__ */ new Set();
+    for (const key of this.remoteResources.keys()) {
+      const orgName = key.split("/")[0];
+      orgs.add(orgName);
+    }
+    return {
+      activeOrgs: orgs.size,
+      totalResources: this.remoteResources.size
+    };
+  }
   // ============================================================================
   // Resource Manifest Accessors
   // ============================================================================

package/dist/templates.js

@@ -1,7 +1,7 @@
 // package.json
 
 // src/cli/commands/templates/core/workspace.ts
-var TEMPLATE_VERSION = 27;
+var TEMPLATE_VERSION = 28;
 function configTemplate() {
   return `import type { ElevasConfig } from '@elevasis/sdk'
 
@@ -49,6 +49,28 @@ function claudeSettingsTemplate() {
               }
             ]
           }
+        ],
+        PostToolUse: [
+          {
+            matcher: "Write|Edit|MultiEdit",
+            hooks: [
+              {
+                type: "command",
+                command: "node .claude/hooks/post-edit-validate.mjs"
+              }
+            ]
+          }
+        ],
+        PostToolUseFailure: [
+          {
+            matcher: "Bash",
+            hooks: [
+              {
+                type: "command",
+                command: "node .claude/hooks/tool-failure-recovery.mjs"
+              }
+            ]
+          }
         ]
       }
     },
@@ -257,16 +279,16 @@ proactivity -- to their assessed levels.
 
 | Resource | Location | When to Load |
 | --- | --- | --- |
-| Workspace concepts | \`reference/concepts/index.mdx\` | User asks "what is...?" or needs conceptual grounding |
+| Workspace concepts | \`reference/concepts.mdx\` | User asks "what is...?" or needs conceptual grounding |
 | SDK patterns and examples | \`reference/resources/patterns.mdx\` | Building or modifying a workflow |
 | Platform tool catalog | \`reference/platform-tools/index.mdx\` | Connecting to external services |
-| CLI reference | \`reference/cli/index.mdx\` | Running execution/platform operations |
-| Credential model | \`reference/security/credentials.mdx\` | Setting up integrations or tool access |
-| Interaction guidance | \`reference/developer/interaction-guidance.mdx\` | Unsure how to adapt for a skill combination |
+| CLI reference | \`reference/cli.mdx\` | Running execution/platform operations |
+| Credential model | \`reference/platform-tools/index.mdx\` | Setting up integrations or credential security |
+| Interaction guidance | \`reference/framework/interaction-guidance.mdx\` | Unsure how to adapt for a skill combination |
 | Error history | \`.claude/memory/errors/index.md\` | Debugging errors, checking past fixes |
-| Command View model | \`reference/deployment/command-view.mdx\` | Deploying or building resources that invoke other resources |
-| Command Center UI reference | \`reference/deployment/command-center-ui.mdx\` | User asks about post-deployment UI or Command Center navigation |
-| SDK error reference | \`reference/troubleshooting/common-errors.mdx\` | Unknown error not in workspace memory |
+| Command View model | \`reference/deployment/command-center.mdx\` | Deploying or building resources that invoke other resources |
+| Command Center UI reference | \`reference/deployment/command-center.mdx\` | User asks about post-deployment UI or Command Center navigation |
+| SDK error reference | \`reference/troubleshooting.mdx\` | Unknown error not in workspace memory |
 | Project map | \`docs/project-map.mdx\` | Session start, project orientation |
 | Resource inventory | \`docs/resource-map.mdx\` | Finding a specific resource by name or ID |
 | Project priorities | \`docs/priorities.mdx\` | Deciding what to work on next |
@@ -292,7 +314,7 @@ Use \`pnpm exec elevasis-sdk\` for runtime commands (resolves the locally instal
 - \`pnpm exec elevasis-sdk execution <resource-id> <execution-id>\` -- inspect execution detail
 
 Organization is derived from your API key -- no org prefix needed in the resource ID.
-For full CLI reference: \`reference/cli/index.mdx\`
+For full CLI reference: \`reference/cli.mdx\`
 
 ## Rules
 
@@ -307,8 +329,8 @@ SDK patterns (imports, source structure, platform tools) are auto-loaded from
 
 When an error occurs:
 1. Check \`.claude/memory/errors/\` first for past fixes
-2. If new, check \`reference/troubleshooting/common-errors.mdx\`
-3. After resolving, record in \`memory/errors/\` with context and fix
+2. If new, check \`reference/troubleshooting.mdx\`
+3. After resolving, record in \`.claude/memory/errors/\` with context and fix
 4. If an error recurs 3+ times, add a rule to \`.claude/rules/workspace-patterns.md\`${ctx.hasUI ? `
 
 ### UI App (\`ui/\`)
@@ -340,7 +362,7 @@ based on what you find.
 - When growth is observed, note it in the skills.md Growth Log.
 
 For detailed per-dimension adaptation rules, read
-\`reference/developer/interaction-guidance.mdx\`.
+\`reference/framework/interaction-guidance.mdx\`.
 
 ## Commands
 
@@ -349,7 +371,7 @@ For detailed per-dimension adaptation rules, read
 | \`/meta\` | Project lifecycle: init, status, fix, deploy, health |
 | \`/docs\` | Browse, create, and verify permanent documentation |
 | \`/work\` | Task tracking: create, save, resume, complete |
-| \`/tutorial\` | Progressive learning path (7 core lessons + 9 modules) |
+| \`/tutorial\` | Progressive learning path (21 items across 4 sections) |
 
 ## Skills
 
@@ -382,7 +404,7 @@ Do not store in \`.claude/memory/\`:
 
 ### Structure
 
-- \`memory/index.md\` is the root -- maps to topic files and subdirectories
+- \`.claude/memory/index.md\` is the root -- maps to topic files and subdirectories
 - Every subdirectory has its own \`index.md\` mapping to children
 - Start at the root index and drill down
 - When a file outgrows a single document, split into a subdirectory
@@ -406,14 +428,14 @@ Read \`.claude/memory/profile/skills.md\` first. The \`automation\` skill level
 controls which docs you load and which lesson variant you deliver.
 
 **automation: none**
-- Load from \`reference/concepts/index.mdx\`: Glossary, What is a Workflow,
+- Load from \`reference/concepts.mdx\`: Glossary, What is a Workflow,
   Platform Tools Overview only. Skip Zod, Execution Model, Design Decisions.
-- Load \`reference/deployment/command-center-ui.mdx\` for UI-first teaching.
+- Load \`reference/deployment/command-center.mdx\` for UI-first teaching.
 - Do NOT load \`reference/resources/patterns.mdx\` or
   \`reference/platform-tools/adapters.mdx\` during core lessons.
 
 **automation: low-code**
-- Load all sections of \`reference/concepts/index.mdx\`.
+- Load all sections of \`reference/concepts.mdx\`.
 - Load \`reference/resources/patterns.mdx\` with Zapier/Make mapping in mind.
 - Load \`reference/platform-tools/adapters.mdx\` on-demand (when tools are used).
 
@@ -501,7 +523,7 @@ Each lesson follows this flow:
 
 When automation is none:
 Skip the file tour. Start with what Elevasis does for their business -- use analogies
-from \`reference/developer/interaction-guidance.mdx\` (recipe, assembly line, kitchen
+from \`reference/framework/interaction-guidance.mdx\` (recipe, assembly line, kitchen
 appliance). Explain deployment plainly: "You write the recipe here, then deploy it so
 it's live." Deploy the starter echo workflow (\`elevasis-sdk check\` + \`elevasis-sdk deploy\`),
 THEN tour the Command Center so the user sees populated pages, not empty ones. Tour:
@@ -749,14 +771,14 @@ Each module follows this flow:
 ## Modules
 
 **Module: hitl -- Human-in-the-Loop**
-Read: \`reference/deployment/command-center-ui.mdx\` (Command Queue section).
+Read: \`reference/deployment/command-center.mdx\` (Command Queue section).
 Build: Add an approval gate using \`approval.requestApproval()\`. Test full lifecycle:
 trigger, see pending in Command Queue, approve/reject, observe resume.
 Key concepts: approval adapter, pending state, Command Queue UI, resume on decision.
 Verify: Trigger workflow, open Command Queue, approve, confirm completion.
 
 **Module: schedules -- Task Scheduling**
-Read: \`reference/deployment/command-center-ui.mdx\` (Task Scheduler section).
+Read: \`reference/deployment/command-center.mdx\` (Task Scheduler section).
 Build: Create all three schedule types (Recurring cron, Relative delay, Absolute
 datetime). Use \`scheduler\` adapter for in-workflow scheduling.
 Key concepts: schedule types, cron syntax, scheduler adapter, Task Scheduler UI.
@@ -770,7 +792,7 @@ Verify: Run workflow, check notification in Command Center, confirm email receiv
 
 **Module: integrations -- Real-World Integrations**
 Read: \`reference/platform-tools/index.mdx\`, \`reference/platform-tools/adapters.mdx\`,
-\`reference/security/credentials.mdx\`.
+\`reference/platform-tools/index.mdx\`.
 Build: Pick a real integration adapter based on user's goals (read \`identity.md\`).
 Set up credential (OAuth via UI, API key via CLI). Build end-to-end integration workflow.
 Key concepts: adapter pattern, credential scoping, error handling for external calls.
@@ -779,7 +801,7 @@ handling with invalid credential.
 
 **Module: error-handling -- Error Handling Mastery**
 Read: \`reference/resources/patterns.mdx\` (error handling),
-\`reference/troubleshooting/common-errors.mdx\`.
+\`reference/troubleshooting.mdx\`.
 Build: Create a workflow demonstrating all three error types. Add try/catch,
 \`context.logger\`, and error recovery.
 Key concepts: ExecutionError, PlatformToolError, ToolingError, recovery patterns.
@@ -795,7 +817,7 @@ Key concepts: context.store, context.logger, domain organization, schema depth.
 Verify: Run workflow, confirm store values in step output, check logs in Execution Logs.
 
 **Module: composition -- Resource Composition**
-Read: \`reference/deployment/command-view.mdx\`, \`reference/resources/patterns.mdx\`.
+Read: \`reference/deployment/command-center.mdx\`, \`reference/resources/patterns.mdx\`.
 Build: Create two workflows where the first triggers the second using
 \`execution.trigger()\`. Declare the relationship.
 Key concepts: execution.trigger, relationship declarations, Command View graph edges.
@@ -943,7 +965,7 @@ Last Session: {today's date}
 \`\`\`
 
 Update rules:
-- \`Current\`: free-form, e.g. "4: Using Platform Tools" or "M:integrations" or "20: Rules, Memory, and Customization"
+- \`Current\`: free-form, e.g. "7: Using Platform Tools" or "M:integrations" or "20: Rules, Memory, and Customization"
 - \`Last Session\`: update to today's date on each \`/tutorial\` invocation
 - Completed Lessons: add a row when any numbered item (1-10, 20-21) finishes
 - Completed Modules: add a row when any module (items 11-19) finishes
@@ -1039,9 +1061,9 @@ by the \`<!-- initialized: false -->\` flag in CLAUDE.md, or run manually.
    - Create \`.claude/memory/profile/preferences.md\` (verbosity, guidance)
 
 4. **Git check**
-   - If \`.git/\` exists: note git is configured in memory/profile/preferences.md
+   - If \`.git/\` exists: note git is configured in .claude/memory/profile/preferences.md
    - If \`.git/\` does not exist: suggest \`git init\` and optionally GitHub
-   - If git remote exists: note remote URL in memory/profile/preferences.md
+   - If git remote exists: note remote URL in .claude/memory/profile/preferences.md
 
 5. **Verify project**
    Run \`elevasis-sdk check\` to confirm the starter resource is valid.
@@ -1062,9 +1084,9 @@ by the \`<!-- initialized: false -->\` flag in CLAUDE.md, or run manually.
 
 Display a project health summary:
 1. Template version (from elevasis.config.ts) and installed SDK version (from package.json). Suggest \`elevasis-sdk update\` to check for updates
-3. Profile summary (from memory/profile/skills.md)
-4. Quick drift check: count of missing managed files, missing gitignore entries
-5. Last deployment status (from memory/deployment-state.md if it exists)
+2. Profile summary (from .claude/memory/profile/skills.md)
+3. Quick drift check: count of missing managed files, missing gitignore entries
+4. Last deployment status (from .claude/memory/deployment-state.md if it exists)
 
 ### \`/meta fix\` -- Maintenance and Upgrade
 
@@ -1082,9 +1104,9 @@ Detect and repair all drift. Optionally upgrades the SDK first.
 3. **CLAUDE.md sections:** Add missing sections in correct position
 4. **Memory structure:** Create base structure if missing, then verify index consistency.
    If \`.claude/memory/\` does not exist or is empty:
-   - Create \`memory/index.md\` (root index with placeholder entries)
-   - Create \`memory/errors/index.md\` (error category summary, empty tables)
-   - Create \`memory/errors/deploy.md\`, \`memory/errors/runtime.md\`, \`memory/errors/typescript.md\`
+   - Create \`.claude/memory/index.md\` (root index with placeholder entries)
+   - Create \`.claude/memory/errors/index.md\` (error category summary, empty tables)
+   - Create \`.claude/memory/errors/deploy.md\`, \`.claude/memory/errors/runtime.md\`, \`.claude/memory/errors/typescript.md\`
    If memory exists, verify: every file referenced in an index exists; every file
    without an index entry gets one added; broken references are removed.
 5. **Documentation verification:** For each file in docs/:
@@ -1095,7 +1117,7 @@ Detect and repair all drift. Optionally upgrades the SDK first.
    e. Report discrepancies with suggested fixes
    Note: \`/docs verify\` is available for standalone interactive verification outside this pipeline.
 6. **Settings consistency:** Verify expected fields
-7. **Rules health:** Scan \`memory/errors/\` -- flag any entry that has recurred
+7. **Rules health:** Scan \`.claude/memory/errors/\` -- flag any entry that has recurred
    3+ times and is not yet in \`.claude/rules/workspace-patterns.md\`.
    If \`workspace-patterns.md\` has no rules yet and 5+ resources exist in \`src/\`,
    suggest adding patterns. Surface suggestions only -- do not auto-generate.
@@ -1108,7 +1130,7 @@ Each step reports its result. Steps 1-8 run even if step 0 is skipped.
 
 ### \`/meta deploy\` -- Full Deploy Pipeline
 
-0. Read \`reference/deployment/command-view.mdx\` -- understand the Command View
+0. Read \`reference/deployment/command-center.mdx\` -- understand the Command View
    model, relationship declarations, and what deploy-time validation checks.
    This context is essential for diagnosing validation failures in steps 1-2.
 1. Run \`elevasis-sdk check\` (validation)
@@ -1118,18 +1140,18 @@ Each step reports its result. Steps 1-8 run even if step 0 is skipped.
 5. Run \`elevasis-sdk deploy\`
 6. \`docs/project-map.mdx\` is auto-regenerated by deploy (no manual bump needed)
 7. Verify deployment via platform
-8. Update \`memory/deployment-state.md\` with count, timestamp, inventory
+8. Update \`.claude/memory/deployment-state.md\` with count, timestamp, inventory
 9. If git configured and remote exists: optionally push
 
 Each step reports its result. Pipeline stops on failure with suggested fix.
-If validation fails with relationship errors, re-read \`reference/deployment/command-view.mdx\`
+If validation fails with relationship errors, re-read \`reference/deployment/command-center.mdx\`
 for the enforcement model and common fixes.
 
 ### \`/meta health\` -- Execution Debugging
 
 Diagnose runtime failures and environment issues:
 - Show recent executions with status (completed/failed)
-- For failed executions: analyze logs, cross-reference with memory/errors/
+- For failed executions: analyze logs, cross-reference with .claude/memory/errors/
 - Check resource deployment status (deployed, outdated, never deployed)
 - Verify environment: API key valid, credentials accessible, DB connected
 
@@ -1725,6 +1747,199 @@ When all plan steps are marked COMPLETE, suggest \`/work complete\` to finalize
 - Completed tasks move OUT of \`docs/in-progress/\` to \`docs/<relevant-dir>/\`
 `;
 }
+function claudePostEditValidateHookTemplate() {
+  return `#!/usr/bin/env node
+// post-edit-validate.mjs
+// PostToolUse hook \u2014 auto-formats with prettier, type-checks .ts/.tsx files.
+// Fires after Edit|Write|MultiEdit succeeds.
+
+import { existsSync } from 'node:fs'
+import { resolve, normalize, extname, join, dirname } from 'node:path'
+import { execSync } from 'node:child_process'
+
+const ROOT = process.env.CLAUDE_PROJECT_DIR ?? process.cwd()
+
+// Extensions prettier should format
+const PRETTIER_EXTENSIONS = new Set([
+  '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs', '.json', '.css', '.md', '.mdx'
+])
+
+// Extensions that trigger type-checking
+const TS_EXTENSIONS = new Set(['.ts', '.tsx'])
+
+function findNearestTsconfig(startDir) {
+  let dir = startDir
+  const root = normalize(ROOT)
+  while (dir.length >= root.length) {
+    const candidate = join(dir, 'tsconfig.json')
+    if (existsSync(candidate)) return candidate
+    const parent = dirname(dir)
+    if (parent === dir) break
+    dir = parent
+  }
+  return null
+}
+
+try {
+  const chunks = []
+  for await (const chunk of process.stdin) chunks.push(chunk)
+  const input = JSON.parse(Buffer.concat(chunks).toString())
+
+  const filePath = input.tool_input?.file_path
+  if (!filePath) process.exit(0)
+
+  const ext = extname(filePath).toLowerCase()
+  const absPath = normalize(resolve(filePath))
+  if (!existsSync(absPath)) process.exit(0)
+
+  const results = []
+
+  // 1. Prettier
+  if (PRETTIER_EXTENSIONS.has(ext)) {
+    try {
+      execSync('pnpm exec prettier --write "' + absPath + '"', {
+        cwd: ROOT,
+        stdio: ['pipe', 'pipe', 'pipe'],
+        timeout: 10_000
+      })
+    } catch (err) {
+      const stderr = err.stderr?.toString().trim() || ''
+      if (stderr && !/ignored/i.test(stderr)) {
+        results.push('Prettier error: ' + stderr.slice(0, 300))
+      }
+    }
+  }
+
+  // 2. Type-check for .ts/.tsx
+  if (TS_EXTENSIONS.has(ext)) {
+    const tsconfig = findNearestTsconfig(dirname(absPath))
+    if (tsconfig) {
+      try {
+        execSync('pnpm exec tsc --noEmit -p "' + tsconfig + '"', {
+          cwd: ROOT,
+          stdio: ['pipe', 'pipe', 'pipe'],
+          timeout: 30_000,
+          env: { ...process.env, NODE_OPTIONS: '--max-old-space-size=4096' }
+        })
+      } catch (err) {
+        if (err.killed) process.exit(0) // Don't block on timeout
+        const stdout = err.stdout?.toString() || ''
+        if (stdout.includes('error TS')) {
+          const errorLines = stdout
+            .split('\\n')
+            .filter(l => l.includes('error TS'))
+            .slice(0, 10)
+          results.push('Type errors after editing ' + filePath + ':\\n' + errorLines.join('\\n'))
+        }
+      }
+    }
+  }
+
+  // Output errors to Claude's context (silence = success)
+  if (results.length > 0) {
+    process.stderr.write(results.join('\\n\\n'))
+    process.exit(2) // Exit 2 = send stderr as feedback to Claude
+  }
+} catch {}
+
+process.exit(0)
+`;
+}
+function claudeToolFailureRecoveryHookTemplate() {
+  return `#!/usr/bin/env node
+// tool-failure-recovery.mjs
+// PostToolUseFailure hook \u2014 pattern-matches known Bash errors and returns
+// recovery advice via stderr + exit 2 (feedback to Claude).
+
+const RECOVERY_TABLE = [
+  {
+    test: r => /JavaScript heap out of memory/i.test(r),
+    advice: 'Out of memory.',
+    fix: 'Run the command with NODE_OPTIONS="--max-old-space-size=4096".',
+    why: 'Large TypeScript projects can exceed Node default heap limit.',
+  },
+  {
+    test: r => /boundary hook/i.test(r) && /block|denied/i.test(r),
+    advice: 'Command blocked by SDK boundary hook.',
+    fix: 'Ask the user to run this command manually.',
+    why: 'The boundary hook blocks gh CLI, destructive git operations, and file writes outside the project.',
+    see: 'CLAUDE.md',
+  },
+  {
+    test: r => /ENOENT/.test(r) && /node_modules/.test(r),
+    advice: 'Missing node_modules dependency.',
+    fix: 'Run: pnpm install',
+    why: 'Dependencies are not installed or were cleared.',
+  },
+  {
+    test: r => /ERR_MODULE_NOT_FOUND/.test(r) && /@elevasis\\/sdk/.test(r),
+    advice: '@elevasis/sdk module not found.',
+    fix: 'Run: pnpm install \u2014 then verify @elevasis/sdk is in package.json dependencies.',
+    why: 'The SDK package is not installed or the version is mismatched.',
+  },
+  {
+    test: r => /ERR_MODULE_NOT_FOUND/.test(r),
+    advice: 'Module not found at import path.',
+    fix: 'Check the import path and verify the package is installed (pnpm install).',
+    why: 'The import path does not match any installed package or local file.',
+  },
+  {
+    test: r => /TS2307/.test(r) || (/cannot find/i.test(r) && /declaration/i.test(r)),
+    advice: 'TypeScript cannot resolve module or declaration file.',
+    fix: 'Check that the package is installed and tsconfig paths are correct.',
+    why: 'Missing dependency or incorrect TypeScript configuration.',
+  },
+  {
+    test: r => /EPERM/.test(r) || /permission denied/i.test(r),
+    advice: 'Permission denied (EPERM).',
+    fix: 'Close the file in any other process (editor, terminal, or dev server) and retry.',
+    why: 'On Windows, files locked by another process cannot be written to.',
+  },
+  {
+    test: r => /lockfile/i.test(r) && /conflict|outdated|ERR_PNPM/i.test(r),
+    advice: 'pnpm lockfile conflict or outdated.',
+    fix: 'Run: pnpm install to regenerate the lockfile.',
+    why: 'The lockfile is out of sync with package.json changes.',
+  },
+  {
+    test: r => /elevasis-sdk check/.test(r) || /elevasis-sdk deploy/.test(r),
+    advice: 'elevasis-sdk CLI command failed.',
+    fix: 'Check the error output above. Common causes: missing .env ELEVASIS_API_KEY, invalid resource schemas, or network issues.',
+    why: 'The SDK CLI validates resources and communicates with the platform API.',
+  },
+  {
+    test: r => /EADDRINUSE/.test(r),
+    advice: 'Port already in use.',
+    fix: 'Find and kill the process using the port, or use a different port.',
+    why: 'A previous dev server or process is still holding the port.',
+  },
+]
+
+function formatRecovery(entry) {
+  let msg = 'FAILED: ' + entry.advice + '\\nFIX: ' + entry.fix
+  if (entry.why) msg += '\\nWHY: ' + entry.why
+  if (entry.see) msg += '\\nSEE: ' + entry.see
+  return msg
+}
+
+try {
+  const chunks = []
+  for await (const chunk of process.stdin) chunks.push(chunk)
+  const input = JSON.parse(Buffer.concat(chunks).toString())
+
+  const response = input.tool_response ?? ''
+
+  for (const entry of RECOVERY_TABLE) {
+    if (entry.test(response)) {
+      process.stderr.write(formatRecovery(entry))
+      process.exit(2)
+    }
+  }
+} catch {}
+
+process.exit(0)
+`;
+}
 
 // src/cli/commands/templates/core/resources.ts
 function starterWorkflowTemplate() {
@@ -1882,6 +2097,8 @@ function getManagedTemplates(ctx = {}) {
     ".claude/settings.json": claudeSettingsTemplate,
     ".claude/scripts/statusline-command.js": claudeStatuslineScriptTemplate,
     ".claude/hooks/enforce-sdk-boundary.mjs": claudeSdkBoundaryHookTemplate,
+    ".claude/hooks/post-edit-validate.mjs": claudePostEditValidateHookTemplate,
+    ".claude/hooks/tool-failure-recovery.mjs": claudeToolFailureRecoveryHookTemplate,
     ".claude/commands/tutorial.md": claudeTutorialCommandTemplate,
     ".claude/commands/meta.md": claudeMetaCommandTemplate,
     ".claude/commands/work.md": claudeWorkCommandTemplate,

package/dist/worker/index.js

@@ -3596,13 +3596,9 @@ function validateActionSequence(actions) {
     throw new Error("Multiple complete actions not allowed in single iteration");
   }
   if (completeActions.length === 1) {
-    const hasIncompatibleActions = actions.some(
-      (a) => a.type === "tool-call" || a.type === "navigate-knowledge"
-    );
-    if (hasIncompatibleActions) {
-      throw new Error(
-        "Complete action cannot mix with tool-call or navigate-knowledge actions"
-      );
+    const hasNavigateKnowledge = actions.some((a) => a.type === "navigate-knowledge");
+    if (hasNavigateKnowledge) {
+      throw new Error("Complete action cannot mix with navigate-knowledge actions");
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elevasis/sdk",
-  "version": "0.5.13",
+  "version": "0.5.15",
   "description": "SDK for building Elevasis organization resources",
   "type": "module",
   "bin": {