@evo-dev/evodev 0.0.1-alpha.2 → 0.0.1-alpha.20

package/dist/plugins/evodev/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "evodev",
   "description": "EvoDev hook, skill, and Teams MCP integration for disciplined AI coding workflows.",
-  "version": "0.0.1-alpha.2",
+  "version": "0.0.1-alpha.20",
   "author": {
     "name": "EvoDev"
   },

package/dist/plugins/evodev/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "evodev",
-  "version": "0.0.1-alpha.2",
+  "version": "0.0.1-alpha.20",
   "description": "EvoDev hook, skill, and Teams MCP integration for disciplined AI coding workflows.",
   "author": {
     "name": "EvoDev"

package/dist/plugins/evodev/hooks/codex.ts

@@ -54,6 +54,7 @@ export interface CodexPluginOptions {
   pluginSelector?: string;
   pluginMarketplaceSource?: string;
   pluginMarketplaceFallbackSource?: string;
+  pluginVersion?: string;
   paths?: CodexPaths;
   syncFileSystem?: CodexSyncFileSystem;
 }
@@ -195,6 +196,7 @@ async function installCodexPlugin(
     | "pluginSelector"
     | "pluginMarketplaceSource"
     | "pluginMarketplaceFallbackSource"
+    | "pluginVersion"
     | "paths"
   >,
 ): Promise<PluginInstallResult> {
@@ -202,8 +204,46 @@ async function installCodexPlugin(
   const selector = options.pluginSelector ?? "evodev@evodev";
   const args = ["plugin", "add", selector];
   const runner = options.commandRunner ?? new NodeCodexCommandRunner();
+  const installedPlugin =
+    input.force === true || options.pluginVersion === undefined
+      ? null
+      : await readInstalledCodexPlugin(runner, selector);
+  let needsRepair = false;
+
+  if (
+    installedPlugin !== null &&
+    installedPlugin.version === options.pluginVersion &&
+    installedPlugin.enabled
+  ) {
+    try {
+      const hydration = await hydrateCodexWorkspaceCoreDependency({
+        paths: options.paths,
+        selector,
+      });
+      if (hydration.warnings.length === 0 && hydration.errors.length === 0) {
+        return createPluginInstallResult(
+          input.targetPlugin,
+          "already-installed",
+          command,
+          args,
+          `Codex plugin ${selector} already matches EvoDev ${options.pluginVersion}; skipped marketplace refresh.`,
+        );
+      }
+    } catch {
+      // Fall through to the normal repair path, which returns a structured install failure.
+    }
+    needsRepair = true;
+  }
+
+  const effectiveInput =
+    input.force === true ||
+    needsRepair ||
+    (installedPlugin !== null &&
+      (installedPlugin.version !== options.pluginVersion || !installedPlugin.enabled))
+      ? { ...input, force: true }
+      : input;
   const primaryResult = await installCodexPluginOnce({
-    input,
+    input: effectiveInput,
     command,
     selector,
     args,
@@ -224,7 +264,7 @@ async function installCodexPlugin(
   }
 
   const fallbackResult = await installCodexPluginOnce({
-    input,
+    input: effectiveInput,
     command,
     selector,
     args,
@@ -243,6 +283,33 @@ async function installCodexPlugin(
   };
 }
 
+interface InstalledCodexPlugin {
+  version: string | null;
+  enabled: boolean;
+}
+
+async function readInstalledCodexPlugin(
+  runner: CodexCommandRunner,
+  selector: string,
+): Promise<InstalledCodexPlugin | null> {
+  try {
+    const result = await runner.run("codex", ["plugin", "list", "--json"]);
+    if (result.exitCode !== 0 || result.stdout === undefined) return null;
+    const parsed = JSON.parse(result.stdout) as unknown;
+    const plugins = isRecord(parsed) && Array.isArray(parsed.installed) ? parsed.installed : [];
+    const plugin = plugins.find(
+      (candidate) => isRecord(candidate) && candidate.pluginId === selector,
+    );
+    if (!isRecord(plugin)) return null;
+    return {
+      version: typeof plugin.version === "string" ? plugin.version : null,
+      enabled: plugin.enabled !== false,
+    };
+  } catch {
+    return null;
+  }
+}
+
 async function installCodexPluginOnce(input: {
   input: PluginInstallInput;
   command: string;

package/dist/plugins/evodev/hooks/hooks.ts

@@ -158,7 +158,7 @@ export function planClaudeHookInstallDryRun(
         action: "merge-with-backup",
         targetPath: paths.settingsPath,
         reason:
-          "would add or replace EvoDev-managed user-level hook entries without touching user-owned hooks",
+          "would reconcile EvoDev-managed user-level hook entries with Claude plugin ownership without touching user-owned hooks",
       },
     ],
     warnings: ["Project .claude, .codex, CLAUDE.md, and AGENTS.md are not targeted."],
@@ -191,12 +191,34 @@ export async function installClaudeHooks(input: {
   paths?: ClaudePaths;
   now?: string;
   pluginSelector?: string;
+  pluginManaged?: boolean;
 }): Promise<HookInstallResult> {
   const paths = input.paths ?? resolveClaudePaths({ homeDir: input.homeDir });
   const existing = await readTextIfExists(paths.settingsPath);
+  const pluginSelector = input.pluginSelector ?? DEFAULT_CLAUDE_PLUGIN_SELECTOR;
+  if (input.pluginManaged === true || isClaudePluginEnabled(existing, pluginSelector)) {
+    const next = removeClaudeManagedUserHooks(existing);
+    if (next === null) {
+      return {
+        target: "claude",
+        targetPath: paths.settingsPath,
+        backupPath: null,
+        changed: false,
+        warnings: [],
+      };
+    }
+    return writeMergedConfig({
+      target: "claude",
+      path: paths.settingsPath,
+      existing,
+      next,
+      now: input.now,
+      warnings: [],
+    });
+  }
   const runtimeCommand = await resolveClaudeUserHookRuntimeCommand({
     paths,
-    pluginSelector: input.pluginSelector ?? DEFAULT_CLAUDE_PLUGIN_SELECTOR,
+    pluginSelector,
   });
   const next = mergeClaudeSettingsHooks(existing, createClaudeHookConfig(runtimeCommand).hooks);
   return writeMergedConfig({
@@ -497,6 +519,37 @@ function mergeClaudeSettingsHooks(
   return `${JSON.stringify({ ...settings, hooks: nextHooks }, null, 2)}\n`;
 }
 
+function isClaudePluginEnabled(existing: string | null, pluginSelector: string): boolean {
+  if (existing === null) return false;
+  const settings = parseJsonConfig(existing, "Claude settings");
+  const enabledPlugins = isRecord(settings.enabledPlugins) ? settings.enabledPlugins : {};
+  return enabledPlugins[pluginSelector] === true;
+}
+
+function removeClaudeManagedUserHooks(existing: string | null): string | null {
+  if (existing === null) return null;
+  const settings = parseJsonConfig(existing, "Claude settings");
+  if (!isRecord(settings.hooks)) return existing;
+
+  const nextHooks: Record<string, unknown> = {};
+  let changed = false;
+  for (const [eventName, groups] of Object.entries(settings.hooks)) {
+    if (!Array.isArray(groups)) {
+      nextHooks[eventName] = groups;
+      continue;
+    }
+    const retained = groups.filter((group) => !isEvoDevHookGroup(group, "claude"));
+    changed ||= retained.length !== groups.length;
+    if (retained.length > 0 || groups.length === 0) nextHooks[eventName] = retained;
+  }
+  if (!changed) return existing;
+
+  const nextSettings = { ...settings };
+  if (Object.keys(nextHooks).length === 0) nextSettings.hooks = undefined;
+  else nextSettings.hooks = nextHooks;
+  return `${JSON.stringify(nextSettings, null, 2)}\n`;
+}
+
 function parseJsonConfig(existing: string | null, label: string): Record<string, unknown> {
   if (existing === null || existing.trim() === "") return {};
   const parsed = JSON.parse(existing) as unknown;

package/dist/plugins/evodev/hooks/plugin.ts

@@ -56,6 +56,7 @@ export interface ClaudePluginOptions {
   pluginSelector?: string;
   pluginMarketplaceSource?: string;
   pluginScope?: "user";
+  pluginVersion?: string;
 }
 
 export function createClaudePlugin(options: ClaudePluginOptions = {}): CodeAgentPlugin {
@@ -186,7 +187,12 @@ async function installClaudeCodePlugin(
   input: PluginInstallInput,
   options: Pick<
     ClaudePluginOptions,
-    "commandRunner" | "paths" | "pluginSelector" | "pluginMarketplaceSource" | "pluginScope"
+    | "commandRunner"
+    | "paths"
+    | "pluginSelector"
+    | "pluginMarketplaceSource"
+    | "pluginScope"
+    | "pluginVersion"
   >,
 ): Promise<PluginInstallResult> {
   const command = "claude";
@@ -195,6 +201,42 @@ async function installClaudeCodePlugin(
   const args = ["plugin", "install", selector, "--scope", scope];
   const runner = options.commandRunner ?? new NodeClaudeCommandRunner();
   const warnings: string[] = [];
+  const installedPlugin =
+    input.force === true || options.pluginVersion === undefined
+      ? null
+      : await readInstalledClaudePlugin(runner, selector);
+  let needsRepair = false;
+
+  if (
+    installedPlugin !== null &&
+    installedPlugin.version === options.pluginVersion &&
+    installedPlugin.enabled
+  ) {
+    try {
+      const hydration = await hydrateClaudeWorkspaceCoreDependency({
+        paths: options.paths,
+        selector,
+      });
+      if (hydration.warnings.length === 0 && hydration.errors.length === 0) {
+        return createPluginInstallResult(
+          input.targetPlugin,
+          "already-installed",
+          command,
+          args,
+          `Claude Code plugin ${selector} already matches EvoDev ${options.pluginVersion}; skipped marketplace refresh.`,
+        );
+      }
+    } catch {
+      // Fall through to the normal repair path, which returns a structured install failure.
+    }
+    needsRepair = true;
+  }
+
+  const forceRefresh =
+    input.force === true ||
+    needsRepair ||
+    (installedPlugin !== null &&
+      (installedPlugin.version !== options.pluginVersion || !installedPlugin.enabled));
 
   try {
     if (options.pluginMarketplaceSource !== undefined) {
@@ -244,7 +286,7 @@ async function installClaudeCodePlugin(
       }
     }
 
-    if (input.force === true) {
+    if (forceRefresh) {
       const uninstallArgs = [
         "plugin",
         "uninstall",
@@ -293,7 +335,7 @@ async function installClaudeCodePlugin(
           result.stdout,
           [
             ...warnings,
-            input.force === true
+            forceRefresh
               ? "Claude Code reported the plugin is already installed after forced refresh; check the local plugin cache if changes are not visible."
               : "Claude Code reported the plugin is already installed; if local plugin files changed without a version bump, Claude may keep the existing cached copy. Bump the plugin version or uninstall and reinstall to refresh the cache.",
           ],
@@ -330,6 +372,35 @@ async function installClaudeCodePlugin(
   }
 }
 
+interface InstalledClaudePlugin {
+  version: string | null;
+  enabled: boolean;
+}
+
+async function readInstalledClaudePlugin(
+  runner: ClaudeCommandRunner,
+  selector: string,
+): Promise<InstalledClaudePlugin | null> {
+  try {
+    const result = await runner.run("claude", ["plugin", "list", "--json"]);
+    if (result.exitCode !== 0 || result.stdout === undefined) return null;
+    const parsed = JSON.parse(result.stdout) as unknown;
+    const plugins = Array.isArray(parsed)
+      ? parsed
+      : isRecord(parsed) && Array.isArray(parsed.plugins)
+        ? parsed.plugins
+        : [];
+    const plugin = plugins.find((candidate) => isRecord(candidate) && candidate.id === selector);
+    if (!isRecord(plugin)) return null;
+    return {
+      version: typeof plugin.version === "string" ? plugin.version : null,
+      enabled: plugin.enabled !== false,
+    };
+  } catch {
+    return null;
+  }
+}
+
 function isAlreadyInstalledMessage(message: string | undefined): boolean {
   return message !== undefined && /already\s+installed/i.test(message);
 }
@@ -655,6 +726,10 @@ function isNotDirectoryError(error: unknown): boolean {
   );
 }
 
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
 function describeError(error: unknown): string {
   if (error instanceof Error) {
     return error.message;

package/dist/plugins/evodev/hooks/runtime.ts

@@ -79,6 +79,7 @@ export async function runHookRuntimeCli(options: HookRuntimeCliOptions = {}): Pr
       receivedAt: event.time.receivedAt,
       environment,
       runtimeInjectionEnabled: settings.memory.runtimeInjection,
+      sessionMemoryPolicy: settings.memory.sessionMemory,
     });
     const formatted = runtimeApi.core.formatHookRuntimeOutput(result);
     await appendExecutionEventSafely({
@@ -183,6 +184,12 @@ async function appendExecutionEventSafely(input: {
       environment: input.environment,
       payload: input.payload,
     });
+    const cwd =
+      input.payload !== null && typeof input.payload.cwd === "string" ? input.payload.cwd : null;
+    const workspace =
+      team === null && cwd !== null
+        ? await input.core.resolveProjectWorkspaceFromCwd({ homeDir: input.homeDir, cwd })
+        : null;
     const traceRefId = await recordTraceRefSafely(input);
     await input.core.appendEvoDevExecutionEvent(
       input.homeDir,
@@ -191,7 +198,7 @@ async function appendExecutionEventSafely(input: {
         target: input.target,
         eventType: input.event?.type ?? runtimePhaseEventType(input.phase),
         sessionKey,
-        projectKey: team?.projectKey ?? null,
+        projectKey: team?.projectKey ?? workspace?.projectKey ?? null,
         runId: team?.runId ?? null,
         roleId: team?.roleId ?? null,
         taskId: input.event?.scope.taskId ?? null,

package/dist/plugins/evodev/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evo-dev/plugin",
-  "version": "0.0.1-alpha.2",
+  "version": "0.0.1-alpha.20",
   "type": "module",
   "exports": {
     ".": "./hooks/index.ts"

package/dist/plugins/evodev/skills/knowledge-distillation/SKILL.md

@@ -23,7 +23,7 @@ It is not a trace summarizer, automatic memory writer, OKF file writer, or team
 ## Do Not Use This Skill For
 
 - Writing `CLAUDE.md`, `AGENTS.md`, `.claude/`, `.codex/`, `.evodev/`, source files, or project assets without explicit project opt-in.
-- Storing raw prompts, transcripts, source dumps, raw command output, secrets, tokens, internal links, or private URLs.
+- Storing credentials or wholesale prompts, transcripts, source files, source dumps, or raw command output. Distilled private facts and necessary short excerpts may remain in user-local knowledge.
 - Treating unreviewed observations, model reflection, or trace logs as accepted memory.
 - Writing final OKF concept documents directly; output a transient plan for the organizer.
 - Starting subagents or teams automatically.
@@ -62,14 +62,14 @@ Classify every input before extraction:
 ## Distillation Pipeline
 
 1. **Scope**: identify repo, task, role audience, workflow audience, path scope, evidence ids, and user-local OKF target scope.
-2. **Minimize**: remove raw prompts, raw logs, source dumps, secrets, personal data, internal links, and one-off noise.
+2. **Minimize**: remove credentials, wholesale prompts/logs/source/command output, and one-off noise. Preserve private facts or short excerpts only when needed to keep the knowledge accurate and reusable.
 3. **Analyze execution structure**: when event evidence is present, identify task slices, owner roles, dependencies, key tool calls, skill invocations, subagent lifecycle events, verification gates, and merge outcomes.
 4. **Extract atomic candidates**: one claim per candidate. Allowed `kind` values are `rule`, `decision`, `pattern`, `anti-pattern`, `warning`, `checklist`, `concept`, `workflow-improvement`, `task-split-improvement`, `tool-use-improvement`, `skill-improvement`, `repo-asset-suggestion`, `role-agent-suggestion`, `team-suggestion`, `eval-set`, and `open-question`.
 5. **Separate fact from inference**: mark whether the candidate is directly evidenced or inferred from evidence.
 6. **Classify**: add `okfType`, `targetPath`, `stableKey`, `roleTags`, `repoTags`, `workflowTags`, `pathScopes`, `domainTags`, `stability`, `sensitivity`, and `targetStore`.
 7. **Score**: estimate evidence strength, reuse value, actionability, stability, novelty, privacy risk, and duplication risk.
 8. **Pair improvements with evals**: every proposed skill, role-agent, team, workflow, routing, tool-use, or subagent behavior change should include an `evoEvalSets` entry, unless the plan explains why eval coverage is not applicable.
-9. **Privacy gate**: defer candidates that require raw private content to remain meaningful.
+9. **Privacy gate**: reject credentials and unbounded raw copying. Private facts, internal links, local paths, emails, and short excerpts may remain in local-private knowledge when necessary.
 10. **Route**: emit `no_write`, `create`, `update`, `skip`, or `needs-human` for each candidate.
 11. **Plan OKF organization**: provide canonical concept targets and repo/role/workflow overlay updates. Do not emit final OKF files.
 12. **Recovery notes**: explain conflicts, stale information, required repo fact checks, and why human intervention is needed when applicable.
@@ -197,6 +197,8 @@ Return executable JSON with `schemaVersion: 1` and `kind: "knowledge-distillatio
 
 Required candidate fields are `id`, `decision`, `kind`, `okfType`, `targetStore`, `targetPath`, `stableKey`, `confidence`, `title`, `description`, `claim`, `basis`, `metadataOnlyEvidence`, `howToApply`, `antiCriteria`, `roleTags`, `repoTags`, `workflowTags`, `pathScopes`, `relatedConceptLinks`, `overlayUpdates`, `scores`, `decisionReason`, `evidenceRefs`, `reviewState`, `bodySections`, and `privacyCheck`.
 
+All raw-content and credential privacy flags must remain `false`. `internalLinksStored` is instead a disclosure flag: set it to `true` when the durable candidate retains an HTTP(S) link. EvoDev recomputes this field locally before persistence.
+
 Valid decisions are `auto-accept`, `create`, `update`, `needs-human`, `skip`, and canonical `no_write`. `no-write` may be normalized by the runtime but new output should emit `no_write`. Active writes (`auto-accept`, `create`, `update`) must target `okf`, use reviewState `auto-accepted` or `accepted`, use metadata-only evidence, include evidence refs, have a safe relative `.md` target path outside reserved `index.md` and `log.md`, and include verification or `verificationNotApplicableReason`.
 
 Behavior-changing active writes, including skill, role-agent, team, workflow, routing, tool-use, task-split, and subagent changes, must include `evalSetRefs` that point to provided `evoEvalSets`. Eval sets must be metadata-only and use privacy flags `usesRawPrompt: false`, `usesSourceDump: false`, and `usesRawCommandOutput: false`.