@hiveai/cli 0.10.3 → 0.10.4

package/README.md

@@ -169,6 +169,21 @@ Strict mode checks for:
 
 `haive enforce check` prints an enforcement score and fails strict gates when the score drops below the configured threshold.
 
+### `haive sensors`
+
+Operate executable regex sensors stored on `gotcha`/`attempt` memories.
+
+```bash
+haive sensors list
+haive sensors check                    # scans git diff --cached
+haive sensors check --diff-file diff.patch --json
+haive sensors export --format grep
+```
+
+Autogenerated sensors are conservative: they start as `warn` and `autogen: true`. A human can promote
+high-confidence sensors to `severity: block`, which makes a deterministic pre-commit blocker when the
+sensor matches added diff lines.
+
 ### `haive benchmark`
 
 Turn hAIve-vs-plain agent trials into a repeatable demo/report.

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command as Command52 } from "commander";
+import { Command as Command53 } from "commander";
 
 // src/commands/briefing.ts
 import { existsSync as existsSync3 } from "fs";
@@ -199,7 +199,7 @@ async function getHotFiles(root, daysBack, maxHotFiles, filePaths) {
       if (!f) continue;
       counts.set(f, (counts.get(f) ?? 0) + 1);
     }
-    let entries = [...counts.entries()].map(([path51, changes]) => ({ path: path51, changes }));
+    let entries = [...counts.entries()].map(([path53, changes]) => ({ path: path53, changes }));
     const lowerPaths = filePaths.map((p) => p.toLowerCase());
     if (lowerPaths.length > 0) {
       entries = entries.filter((e) => lowerPaths.some((p) => e.path.toLowerCase().includes(p)));
@@ -3623,7 +3623,8 @@ import {
   loadConfig as loadConfig2,
   loadMemoriesFromDir as loadMemoriesFromDir22,
   memoryFilePath as memoryFilePath2,
-  serializeMemory as serializeMemory3
+  serializeMemory as serializeMemory3,
+  suggestSensorFromMemory
 } from "@hiveai/core";
 import { z as z4 } from "zod";
 import { existsSync as existsSync52 } from "fs";
@@ -3712,7 +3713,8 @@ import path52 from "path";
 import {
   buildFrontmatter as buildFrontmatter22,
   memoryFilePath as memoryFilePath22,
-  serializeMemory as serializeMemory6
+  serializeMemory as serializeMemory6,
+  suggestSensorFromMemory as suggestSensorFromMemory2
 } from "@hiveai/core";
 import { z as z14 } from "zod";
 import { mkdir as mkdir42, writeFile as writeFile82 } from "fs/promises";
@@ -3811,8 +3813,8 @@ import {
   loadUsageIndex as loadUsageIndex9,
   literalMatchesAnyToken as literalMatchesAnyToken3,
   memoryMatchesAnchorPaths as memoryMatchesAnchorPaths4,
-  runRegexSensor,
-  sensorAppliesToPath,
+  runSensors,
+  sensorTargetsFromDiff,
   tokenizeQuery as tokenizeQuery3
 } from "@hiveai/core";
 import { z as z24 } from "zod";
@@ -4071,6 +4073,8 @@ async function memSave(input, ctx) {
           symbols: input.symbols.length ? input.symbols : fm.anchor.symbols
         }
       };
+      const suggestedSensor = !newFrontmatter.sensor ? suggestSensorForSavedMemory(input.type, input.body, newFrontmatter.anchor.paths) : null;
+      if (suggestedSensor) newFrontmatter.sensor = suggestedSensor;
       await writeFile22(
         topicMatch.filePath,
         serializeMemory3({ frontmatter: newFrontmatter, body: input.body }),
@@ -4089,7 +4093,8 @@ async function memSave(input, ctx) {
         revision_count: newFrontmatter.revision_count,
         ...mergedTw ? { warning: mergedTw } : {},
         ...bs ? { body_similar: bs } : {},
-        ...invalidPaths.length > 0 ? { invalid_paths: invalidPaths } : {}
+        ...invalidPaths.length > 0 ? { invalid_paths: invalidPaths } : {},
+        ...suggestedSensor ? { suggested_sensor: true } : {}
       };
     }
   }
@@ -4105,7 +4110,8 @@ async function memSave(input, ctx) {
     symbols: input.symbols,
     commit: input.commit,
     topic: input.topic,
-    status: haiveConfig.defaultStatus === "validated" ? "validated" : void 0
+    status: haiveConfig.defaultStatus === "validated" ? "validated" : void 0,
+    sensor: suggestSensorForSavedMemory(input.type, input.body, input.paths) ?? void 0
   });
   const file = memoryFilePath2(
     ctx.paths,
@@ -4146,9 +4152,14 @@ async function memSave(input, ctx) {
     ...finalWarning ? { warning: finalWarning } : {},
     ...similar_found ? { similar_found } : {},
     ...bsNew ? { body_similar: bsNew } : {},
-    ...invalidPaths.length > 0 ? { invalid_paths: invalidPaths } : {}
+    ...invalidPaths.length > 0 ? { invalid_paths: invalidPaths } : {},
+    ...frontmatter.sensor?.autogen ? { suggested_sensor: true } : {}
   };
 }
+function suggestSensorForSavedMemory(type, body, paths) {
+  if (type !== "gotcha" && type !== "attempt") return null;
+  return suggestSensorFromMemory(body, paths);
+}
 function criticalAnchorWarning(type, status, paths, symbols) {
   if (!["decision", "gotcha", "architecture"].includes(type)) return null;
   if (status !== "validated") return null;
@@ -4791,6 +4802,10 @@ async function memTried(input, ctx) {
     lines.push("", `**Instead, use:** ${input.instead}`);
   }
   const body = lines.join("\n") + "\n";
+  const sensor = suggestSensorFromMemory2(body, input.paths);
+  if (sensor) {
+    frontmatter.sensor = sensor;
+  }
   const file = memoryFilePath22(ctx.paths, frontmatter.scope, frontmatter.id, frontmatter.module);
   await mkdir32(path52.dirname(file), { recursive: true });
   if (existsSync142(file)) {
@@ -6197,24 +6212,18 @@ async function antiPatternsCheck(input, ctx) {
   }
   if (input.diff) {
     const added = addedLinesFromDiff(input.diff);
-    const scanText = added.trim().length > 0 ? added : input.diff;
-    for (const { memory: memory2 } of negative) {
-      const sensor = memory2.frontmatter.sensor;
-      if (!sensor || sensor.kind !== "regex") continue;
-      const anchorPaths = memory2.frontmatter.anchor.paths;
-      const inScope = input.paths.length === 0 || input.paths.some((p) => sensorAppliesToPath(sensor, anchorPaths, p));
-      if (!inScope) continue;
-      const hit = runRegexSensor(memory2.frontmatter.id, sensor, {
-        path: input.paths[0] ?? "",
-        content: scanText
-      });
-      if (hit) {
-        upsert(memory2.frontmatter, memory2.body, "sensor");
-        const w = seen.get(memory2.frontmatter.id);
-        if (w) {
-          w.sensor_message = hit.message;
-          w.sensor_severity = hit.severity;
-        }
+    const diffTargets = sensorTargetsFromDiff(input.diff);
+    const hasFileTargets = diffTargets.some((target) => target.path.length > 0);
+    const targets = diffTargets.length > 0 && hasFileTargets ? diffTargets : input.paths.length > 0 ? input.paths.map((p) => ({ path: p, content: added.trim().length > 0 ? added : input.diff })) : [{ path: "", content: added.trim().length > 0 ? added : input.diff }];
+    const hits = runSensors(negative.map(({ memory: memory2 }) => memory2), targets);
+    for (const hit of hits) {
+      const found = negative.find(({ memory: memory2 }) => memory2.frontmatter.id === hit.memory_id);
+      if (!found) continue;
+      upsert(found.memory.frontmatter, found.memory.body, "sensor");
+      const w = seen.get(found.memory.frontmatter.id);
+      if (w) {
+        w.sensor_message = hit.message;
+        w.sensor_severity = hit.severity;
       }
     }
   }
@@ -6744,6 +6753,24 @@ function classifyWarning(warning, paths, anchoredBlocks = false) {
       repair_command: repairCommand
     };
   }
+  if (warning.reasons.includes("sensor")) {
+    if (warning.sensor_severity === "block") {
+      return {
+        ...warning,
+        level: "blocking",
+        rationale: "deterministic hAIve sensor with block severity matched the added diff",
+        affected_files: affectedFiles,
+        repair_command: repairCommand
+      };
+    }
+    return {
+      ...warning,
+      level: "review",
+      rationale: "deterministic hAIve sensor with warn severity matched the added diff",
+      affected_files: affectedFiles,
+      repair_command: repairCommand
+    };
+  }
   if (isBlockingWarning(warning)) {
     return {
       ...warning,
@@ -7415,7 +7442,7 @@ When done, respond with: "Imported N memories: [list of IDs]" or "Nothing action
   };
 }
 var SERVER_NAME = "haive";
-var SERVER_VERSION = "0.10.3";
+var SERVER_VERSION = "0.10.4";
 function jsonResult(data) {
   return {
     content: [
@@ -8934,7 +8961,8 @@ import {
   loadMemoriesFromDir as loadMemoriesFromDir24,
   memoryFilePath as memoryFilePath6,
   resolveHaivePaths as resolveHaivePaths10,
-  serializeMemory as serializeMemory12
+  serializeMemory as serializeMemory12,
+  suggestSensorFromMemory as suggestSensorFromMemory3
 } from "@hiveai/core";
 function registerMemoryAdd(memory2) {
   memory2.command("add").description(
@@ -9036,9 +9064,12 @@ TODO \u2014 write the memory body.
             symbols: parseCsv2(opts.symbols).length ? parseCsv2(opts.symbols) : fm.anchor.symbols
           }
         };
+        const suggestedSensor = !newFrontmatter.sensor ? suggestSensorForCliMemory(opts.type, body, newFrontmatter.anchor.paths) : null;
+        if (suggestedSensor) newFrontmatter.sensor = suggestedSensor;
         await writeFile14(topicMatch.filePath, serializeMemory12({ frontmatter: newFrontmatter, body }), "utf8");
         ui.success(`Updated (topic upsert) ${path16.relative(root, topicMatch.filePath)}`);
         ui.info(`id=${fm.id}  revision=${revisionCount}`);
+        if (suggestedSensor) ui.info(`sensor=regex warn autogen pattern=${JSON.stringify(suggestedSensor.pattern)}`);
         await runPostMemoryAutopilot(root, paths, config);
         return;
       }
@@ -9055,7 +9086,8 @@ TODO \u2014 write the memory body.
       symbols: parseCsv2(opts.symbols),
       commit: opts.commit,
       topic: opts.topic,
-      status: config.defaultStatus === "validated" ? "validated" : void 0
+      status: config.defaultStatus === "validated" ? "validated" : void 0,
+      sensor: suggestSensorForCliMemory(opts.type, body, anchorPaths) ?? void 0
     });
     const file = memoryFilePath6(paths, frontmatter.scope, frontmatter.id, frontmatter.module);
     await mkdir11(path16.dirname(file), { recursive: true });
@@ -9079,6 +9111,9 @@ TODO \u2014 write the memory body.
     await writeFile14(file, serializeMemory12({ frontmatter, body }), "utf8");
     ui.success(`Created ${path16.relative(root, file)}`);
     ui.info(`id=${frontmatter.id}  scope=${frontmatter.scope}  status=${frontmatter.status}`);
+    if (frontmatter.sensor?.autogen) {
+      ui.info(`sensor=regex warn autogen pattern=${JSON.stringify(frontmatter.sensor.pattern)}`);
+    }
     await runPostMemoryAutopilot(root, paths, config);
     if (inferredTags.length > 0) {
       ui.info(`auto-tagged: ${inferredTags.join(", ")}  (use --no-auto-tag to disable)`);
@@ -9122,6 +9157,10 @@ function parseCsv2(value) {
   if (!value) return [];
   return value.split(",").map((s) => s.trim()).filter(Boolean);
 }
+function suggestSensorForCliMemory(type, body, anchorPaths) {
+  if (type !== "gotcha" && type !== "attempt") return null;
+  return suggestSensorFromMemory3(body, anchorPaths);
+}
 function normalizeBody(rawBody, title, titleExplicit) {
   const trimmed = rawBody.trim();
   if (/^#{1,3}\s+\S/m.test(trimmed)) return `${trimmed}
@@ -9777,7 +9816,8 @@ import {
   findProjectRoot as findProjectRoot22,
   memoryFilePath as memoryFilePath8,
   resolveHaivePaths as resolveHaivePaths19,
-  serializeMemory as serializeMemory17
+  serializeMemory as serializeMemory17,
+  suggestSensorFromMemory as suggestSensorFromMemory4
 } from "@hiveai/core";
 function registerMemoryTried(memory2) {
   memory2.command("tried").description(
@@ -9820,6 +9860,10 @@ function registerMemoryTried(memory2) {
       lines.push("", `**Instead, use:** ${opts.instead}`);
     }
     const body = lines.join("\n") + "\n";
+    const sensor = suggestSensorFromMemory4(body, frontmatter.anchor.paths);
+    if (sensor) {
+      frontmatter.sensor = sensor;
+    }
     const file = memoryFilePath8(paths, frontmatter.scope, frontmatter.id, frontmatter.module);
     await mkdir13(path26.dirname(file), { recursive: true });
     if (existsSync40(file)) {
@@ -9830,6 +9874,7 @@ function registerMemoryTried(memory2) {
     await writeFile19(file, serializeMemory17({ frontmatter, body }), "utf8");
     ui.success(`Recorded: ${path26.relative(root, file)}`);
     ui.info(`id=${frontmatter.id}  type=attempt  status=validated (auto-approved)`);
+    if (sensor) ui.info(`sensor=regex warn autogen pattern=${JSON.stringify(sensor.pattern)}`);
   });
 }
 function parseCsv4(value) {
@@ -12303,8 +12348,8 @@ function registerDoctor(program2) {
         fix: "haive init"
       });
     } else {
-      const { readFile: readFile23 } = await import("fs/promises");
-      const content = await readFile23(paths.projectContext, "utf8");
+      const { readFile: readFile24 } = await import("fs/promises");
+      const content = await readFile24(paths.projectContext, "utf8");
       const isTemplate = content.includes("TODO \u2014 high-level overview") || content.includes("Generated by `haive init`");
       if (isTemplate) {
         findings.push({
@@ -12469,8 +12514,8 @@ function registerDoctor(program2) {
       let hasClaudeEnforcement = false;
       if (existsSync61(claudeSettings)) {
         try {
-          const { readFile: readFile23 } = await import("fs/promises");
-          const raw = await readFile23(claudeSettings, "utf8");
+          const { readFile: readFile24 } = await import("fs/promises");
+          const raw = await readFile24(claudeSettings, "utf8");
           hasClaudeEnforcement = raw.includes("haive enforce session-start") && raw.includes("haive enforce pre-tool-use");
         } catch {
           hasClaudeEnforcement = false;
@@ -12493,14 +12538,14 @@ function registerDoctor(program2) {
         fix: "Edit .ai/haive.config.json: set autoSessionEnd: true (or re-run `haive init` without --manual)."
       });
     }
-    findings.push(...await collectInstallFindings(root, "0.10.3"));
+    findings.push(...await collectInstallFindings(root, "0.10.4"));
     try {
       const legacyRaw = execSync3("haive-mcp --version", {
         encoding: "utf8",
         timeout: 3e3,
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
-      const cliVersion = "0.10.3";
+      const cliVersion = "0.10.4";
       if (legacyRaw && legacyRaw !== cliVersion) {
         findings.push({
           severity: "warn",
@@ -13798,7 +13843,7 @@ async function buildEnforcementReport(dir, stage, sessionId) {
       findings: [{ severity: "info", code: "enforcement-off", message: "hAIve enforcement is disabled." }]
     });
   }
-  findings.push(...await inspectIntegrationVersions(root, "0.10.3"));
+  findings.push(...await inspectIntegrationVersions(root, "0.10.4"));
   if (config.enforcement?.requireBriefingFirst !== false && stage !== "ci") {
     const hasBriefing = await hasRecentBriefingMarker(paths, sessionId);
     findings.push(hasBriefing ? { severity: "ok", code: "briefing-loaded", message: "A recent hAIve briefing marker exists." } : {
@@ -14408,9 +14453,157 @@ function registerRun(program2) {
   });
 }
 
+// src/commands/sensors.ts
+import { execFile as execFile2 } from "child_process";
+import { existsSync as existsSync69 } from "fs";
+import { chmod as chmod3, mkdir as mkdir20, readFile as readFile23, writeFile as writeFile34 } from "fs/promises";
+import path51 from "path";
+import { promisify as promisify2 } from "util";
+import "commander";
+import {
+  findProjectRoot as findProjectRoot50,
+  isRetiredMemory as isRetiredMemory3,
+  loadMemoriesFromDir as loadMemoriesFromDir37,
+  resolveHaivePaths as resolveHaivePaths46,
+  runSensors as runSensors2,
+  sensorTargetsFromDiff as sensorTargetsFromDiff2
+} from "@hiveai/core";
+var exec2 = promisify2(execFile2);
+function registerSensors(program2) {
+  const sensors = program2.command("sensors").description("Operate executable sensors derived from hAIve memories");
+  sensors.command("list").description("List memories carrying executable sensors").option("--json", "emit JSON", false).option("-d, --dir <dir>", "project root").action(async (opts) => {
+    const root = findProjectRoot50(opts.dir);
+    const paths = resolveHaivePaths46(root);
+    const rows = await sensorRows(paths);
+    if (opts.json) {
+      console.log(JSON.stringify(rows, null, 2));
+      return;
+    }
+    if (rows.length === 0) {
+      ui.warn("No sensors found.");
+      return;
+    }
+    console.log(ui.bold(`hAIve sensors \u2014 ${rows.length}`));
+    for (const row of rows) {
+      console.log(
+        `  \u2022 ${row.id} ${ui.dim(`(${row.kind}, ${row.severity})`)} ${row.pattern ?? row.command ?? ""}`
+      );
+      if (row.paths.length > 0) console.log(`     ${ui.dim("paths:")} ${row.paths.join(", ")}`);
+      if (row.last_fired) console.log(`     ${ui.dim("last fired:")} ${row.last_fired}`);
+    }
+  });
+  sensors.command("check").description("Run regex sensors against a diff; defaults to `git diff --cached`").option("--diff-file <path>", "read unified diff from a file instead of staged changes").option("--json", "emit JSON", false).option("-d, --dir <dir>", "project root").action(async (opts) => {
+    const root = findProjectRoot50(opts.dir);
+    const paths = resolveHaivePaths46(root);
+    const memories = await runnableSensorMemories(paths);
+    const diff = opts.diffFile ? await readFile23(path51.resolve(root, opts.diffFile), "utf8") : await stagedDiff(root);
+    const targets = sensorTargetsFromDiff2(diff);
+    const hits = runSensors2(memories, targets.length > 0 ? targets : [{ path: "", content: diff }]);
+    const output = {
+      scanned: memories.length,
+      hits: hits.map((hit) => ({
+        memory_id: hit.memory_id,
+        file: hit.file,
+        severity: hit.severity,
+        message: hit.message,
+        matched_line: hit.matched_line
+      }))
+    };
+    if (opts.json) {
+      console.log(JSON.stringify(output, null, 2));
+    } else {
+      console.log(ui.bold(`hAIve sensors check \u2014 ${hits.length} hit(s), ${memories.length} sensor(s)`));
+      for (const hit of hits) {
+        const marker = hit.severity === "block" ? ui.red("\u2717") : ui.yellow("\u26A0");
+        console.log(`  ${marker} ${hit.memory_id} ${ui.dim(`(${hit.severity})`)}`);
+        if (hit.file) console.log(`     ${ui.dim("file:")} ${hit.file}`);
+        console.log(`     ${hit.message}`);
+        if (hit.matched_line) console.log(`     ${ui.dim(hit.matched_line)}`);
+      }
+    }
+    if (hits.some((hit) => hit.severity === "block")) process.exitCode = 1;
+  });
+  sensors.command("export").description("Export regex sensors into .ai/generated for external toolchains").option("--format <format>", "grep | eslint", "grep").option("--out-dir <dir>", "output directory", ".ai/generated").option("-d, --dir <dir>", "project root").action(async (opts) => {
+    const format = opts.format ?? "grep";
+    if (format !== "grep" && format !== "eslint") {
+      ui.error("--format must be grep or eslint");
+      process.exitCode = 1;
+      return;
+    }
+    const root = findProjectRoot50(opts.dir);
+    const paths = resolveHaivePaths46(root);
+    const rows = await sensorRows(paths);
+    const outDir = path51.resolve(root, opts.outDir ?? ".ai/generated");
+    await mkdir20(outDir, { recursive: true });
+    const outPath = path51.join(outDir, format === "grep" ? "haive-sensors-grep.sh" : "haive-sensors-eslint.json");
+    const content = format === "grep" ? renderGrepScript(rows) : JSON.stringify({ sensors: rows }, null, 2) + "\n";
+    await writeFile34(outPath, content, "utf8");
+    if (format === "grep") await chmod3(outPath, 493);
+    ui.success(`Exported ${rows.length} sensor(s): ${path51.relative(root, outPath)}`);
+  });
+}
+async function sensorRows(paths) {
+  const memories = await runnableSensorMemories(paths, false);
+  return memories.map((memory2) => {
+    const sensor = memory2.frontmatter.sensor;
+    return {
+      id: memory2.frontmatter.id,
+      kind: sensor.kind,
+      severity: sensor.severity,
+      pattern: sensor.pattern,
+      command: sensor.command,
+      paths: sensor.paths.length > 0 ? sensor.paths : memory2.frontmatter.anchor.paths,
+      message: sensor.message,
+      autogen: sensor.autogen,
+      last_fired: sensor.last_fired
+    };
+  });
+}
+async function runnableSensorMemories(paths, regexOnly = true) {
+  if (!existsSync69(paths.memoriesDir)) return [];
+  const loaded = await loadMemoriesFromDir37(paths.memoriesDir);
+  return loaded.map(({ memory: memory2 }) => memory2).filter((memory2) => {
+    const sensor = memory2.frontmatter.sensor;
+    if (!sensor) return false;
+    if (regexOnly && sensor.kind !== "regex") return false;
+    return !isRetiredMemory3(memory2.frontmatter, memory2.body);
+  });
+}
+async function stagedDiff(root) {
+  try {
+    const { stdout } = await exec2("git", ["diff", "--cached"], { cwd: root });
+    return stdout;
+  } catch (err) {
+    throw new Error(`git diff --cached failed: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+function renderGrepScript(rows) {
+  const lines = [
+    "#!/usr/bin/env bash",
+    "set -euo pipefail",
+    "status=0",
+    ""
+  ];
+  for (const row of rows.filter((item) => item.kind === "regex" && item.pattern)) {
+    const paths = row.paths.length > 0 ? row.paths : ["."];
+    for (const p of paths) {
+      lines.push(`if grep -RInE -- ${shellQuote(row.pattern)} ${shellQuote(p)}; then`);
+      lines.push(`  echo ${shellQuote(`hAIve sensor ${row.id}: ${row.message}`)}`);
+      if (row.severity === "block") lines.push("  status=1");
+      lines.push("fi");
+      lines.push("");
+    }
+  }
+  lines.push("exit $status", "");
+  return lines.join("\n");
+}
+function shellQuote(value) {
+  return `'${value.replace(/'/g, "'\\''")}'`;
+}
+
 // src/index.ts
-var program = new Command52();
-program.name("haive").description("hAIve - repo-native memory and context policy for coding-agent harnesses").version("0.10.3").option("--advanced", "show maintenance and experimental commands in help");
+var program = new Command53();
+program.name("haive").description("hAIve - repo-native memory and context policy for coding-agent harnesses").version("0.10.4").option("--advanced", "show maintenance and experimental commands in help");
 registerInit(program);
 registerWelcome(program);
 registerResolveProject(program);
@@ -14418,6 +14611,7 @@ registerRuntime(program);
 registerEnforce(program);
 registerRun(program);
 registerAgent(program);
+registerSensors(program);
 registerMcp(program);
 registerBriefing(program);
 registerTui(program);
@@ -14473,6 +14667,7 @@ var CORE_ROOT_COMMANDS = /* @__PURE__ */ new Set([
   "briefing",
   "enforce",
   "run",
+  "sensors",
   "sync",
   "mcp",
   "memory",