@hivelore/cli 0.35.0 → 0.36.0

package/dist/index.js

@@ -10,7 +10,7 @@ import {
   preCommitCheck,
   readPresumedCorrectTargets,
   runHaiveMcpStdio
-} from "./chunk-ZR7UPTRR.js";
+} from "./chunk-EWJQ3YE7.js";
 import {
   registerMemoryPending
 } from "./chunk-OYJKHD22.js";
@@ -3755,7 +3755,7 @@ ${SEED_FOOTER(stack)}` });
 
 // src/commands/init.ts
 var execFileAsync = promisify2(execFile2);
-var HAIVE_GITHUB_ACTION_REF = `v${"0.35.0"}`;
+var HAIVE_GITHUB_ACTION_REF = `v${"0.36.0"}`;
 var PROJECT_CONTEXT_TEMPLATE = `# Project context
 
 > Generated by \`hivelore init\`. Run \`hivelore init --bootstrap\` to auto-fill from your codebase,
@@ -4715,6 +4715,7 @@ import "commander";
 import {
   DEFAULT_AUTO_PROMOTE_RULE,
   assessSensorHealth,
+  sensorPromotedAtMap,
   buildFrontmatter as buildFrontmatter3,
   existingGateMissShas,
   findProjectRoot as findProjectRoot9,
@@ -4773,10 +4774,12 @@ function registerSync(program2) {
     let promoted = 0;
     let autoApproved = 0;
     let quarantined = 0;
+    const quarantineCandidates = await loadMemoriesFromDir7(paths.memoriesDir);
     const sensorHealth = new Map(
-      assessSensorHealth(await loadSensorLedger(paths)).map((health) => [health.memory_id, health])
+      assessSensorHealth(await loadSensorLedger(paths), /* @__PURE__ */ new Date(), {
+        promotedAt: sensorPromotedAtMap(quarantineCandidates.map((m) => m.memory.frontmatter))
+      }).map((health) => [health.memory_id, health])
     );
-    const quarantineCandidates = await loadMemoriesFromDir7(paths.memoriesDir);
     for (const { memory: memory2, filePath } of quarantineCandidates) {
       const sensor = memory2.frontmatter.sensor;
       const health = sensorHealth.get(memory2.frontmatter.id);
@@ -5261,7 +5264,8 @@ async function processGateMissWatch(root, paths, dryRun) {
   const proposals = proposeGateMissDrafts(
     readGitCommitsRange(root, plan.range),
     existingGateMissShas(await loadMemoriesFromDir7(paths.memoriesDir)),
-    gatePassedShas(await loadSensorLedger(paths))
+    gatePassedShas(await loadSensorLedger(paths)),
+    { pathExists: (rel) => existsSync14(path15.join(root, rel)) }
   );
   const ids = [];
   for (const proposal of proposals) {
@@ -7321,13 +7325,15 @@ import {
   loadPreventionEvents as loadPreventionEvents2,
   parseSince,
   readUsageEvents,
+  renderPreventionReceiptShare,
   resolveHaivePaths as resolveHaivePaths27,
   usageLogSize
 } from "@hivelore/core";
 function registerStats(program2) {
   const stats = program2.command("stats").description("Show MCP tool-usage stats and prevention receipts.");
-  stats.command("receipt").description("Show documented mistakes refused by the gate over a time window").addHelpText("after", "\nParent options also apply: --since <window> (default 7d here), --json, --dir <dir>.").action(async () => {
+  const receiptCmd = stats.command("receipt").description("Show documented mistakes refused by the gate over a time window").option("--share", "emit a Markdown block ready to paste into Slack or a PR (with attribution)", false).addHelpText("after", "\nParent options also apply: --since <window> (default 7d here), --json, --dir <dir>.").action(async () => {
     const opts = stats.opts();
+    const sub = receiptCmd.opts();
     const root = findProjectRoot28(opts.dir);
     const paths = resolveHaivePaths27(root);
     const sinceRaw = stats.getOptionValueSource("since") === "default" ? "7d" : opts.since ?? "7d";
@@ -7338,7 +7344,8 @@ function registerStats(program2) {
       existsSync33(paths.memoriesDir) ? loadMemoriesFromDir11(paths.memoriesDir) : Promise.resolve([])
     ]);
     const receipt = buildPreventionReceipt(events, memories, usage, { since });
-    console.log(opts.json ? JSON.stringify(receipt, null, 2) : renderPreventionReceipt(receipt));
+    const output = sub.share ? renderPreventionReceiptShare(receipt) : opts.json ? JSON.stringify(receipt, null, 2) : renderPreventionReceipt(receipt);
+    console.log(output);
   });
   stats.option("--since <window>", "ISO date or relative (e.g. '7d', '24h', '30m')", "30d").option("--json", "emit JSON instead of human-readable output", false).option("--memory-hits", "show top-read memories (which mems are actually being used)", false).option(
     "--export-report <path>",
@@ -8574,6 +8581,7 @@ import "commander";
 import {
   codeMapPath as codeMapPath2,
   assessSensorHealth as assessSensorHealth2,
+  sensorPromotedAtMap as sensorPromotedAtMap2,
   countSourceFilesOnDisk,
   extractReferencedPaths,
   sensorPatternBrittleness,
@@ -8832,7 +8840,9 @@ function registerDoctor(program2) {
         fix: "Make the pattern discriminating (add an 'absent' companion), or demote: `hivelore sensors promote <id> --severity warn`"
       });
     }
-    const sensorHealth = assessSensorHealth2(await loadSensorLedger2(paths));
+    const sensorHealth = assessSensorHealth2(await loadSensorLedger2(paths), /* @__PURE__ */ new Date(), {
+      promotedAt: sensorPromotedAtMap2(memories.map((m) => m.memory.frontmatter))
+    });
     for (const health of sensorHealth.filter((h) => h.quarantine_pending)) {
       const last = health.flaps.at(-1);
       findings.push({
@@ -8949,7 +8959,7 @@ function registerDoctor(program2) {
         fix: "Edit .ai/haive.config.json: set autoSessionEnd: true (or re-run `hivelore init` without --manual)."
       });
     }
-    findings.push(...await collectInstallFindings(root, "0.35.0"));
+    findings.push(...await collectInstallFindings(root, "0.36.0"));
     findings.push(...await collectToolchainFindings(root));
     try {
       const legacyRaw = execSync("haive-mcp --version", {
@@ -8957,7 +8967,7 @@ function registerDoctor(program2) {
         timeout: 3e3,
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
-      const cliVersion = "0.35.0";
+      const cliVersion = "0.36.0";
       if (legacyRaw && legacyRaw !== cliVersion) {
         findings.push({
           severity: "warn",
@@ -9697,6 +9707,7 @@ import {
   antiPatternGateParams as antiPatternGateParams2,
   appendSensorEvaluations,
   assessSensorHealth as assessSensorHealth3,
+  sensorPromotedAtMap as sensorPromotedAtMap3,
   assessBootstrapState,
   isSensorScannablePath,
   findProjectRoot as findProjectRoot37,
@@ -9715,6 +9726,7 @@ import {
   readRecentBriefingMarker,
   recordPreventionHits,
   resolveBriefingBudget as resolveBriefingBudget2,
+  incidentSuffix,
   resolveHaivePaths as resolveHaivePaths35,
   runSensors,
   saveConfig as saveConfig3,
@@ -9864,7 +9876,8 @@ async function executeCommandSensor(spec, root) {
     command: spec.command,
     kind: spec.kind,
     severity: spec.severity,
-    message: spec.message
+    message: spec.message,
+    ...spec.incident ? { incident: spec.incident } : {}
   };
   try {
     const { stdout, stderr } = await exec2("bash", ["-c", spec.command], {
@@ -10657,7 +10670,7 @@ async function buildEnforcementReport(dir, stage, sessionId) {
       findings: [{ severity: "info", code: "enforcement-off", message: "Hivelore enforcement is disabled." }]
     });
   }
-  findings.push(...await inspectIntegrationVersions(root, "0.35.0"));
+  findings.push(...await inspectIntegrationVersions(root, "0.36.0"));
   if (config.enforcement?.requireBriefingFirst !== false && stage !== "ci") {
     const hasBriefing = await hasRecentBriefingMarker(paths, sessionId);
     findings.push(hasBriefing ? { severity: "ok", code: "briefing-loaded", message: "A recent Hivelore briefing marker exists." } : {
@@ -11012,7 +11025,7 @@ async function runSensorGate(paths, diff, stage) {
         findings.push({
           severity: "error",
           code: "sensor-block",
-          message: `Block sensor fired \u2014 ${hit.memory_id}: ${hit.message}${where}`,
+          message: `Block sensor fired \u2014 ${hit.memory_id}: ${hit.message}${where}${incidentSuffix(hit.sensor.incident)}`,
           fix: "Remove the flagged pattern, or run `hivelore sensors check` to inspect the match.",
           impact: 45,
           memory_ids: [hit.memory_id]
@@ -11021,7 +11034,7 @@ async function runSensorGate(paths, diff, stage) {
         findings.push({
           severity: "warn",
           code: "sensor-warn",
-          message: `Sensor flagged ${hit.memory_id}: ${hit.message}${where}`,
+          message: `Sensor flagged ${hit.memory_id}: ${hit.message}${where}${incidentSuffix(hit.sensor.incident)}`,
           fix: "Review the flagged line; `hivelore sensors check` shows the matched code.",
           impact: 5,
           memory_ids: [hit.memory_id]
@@ -11045,7 +11058,10 @@ async function runSensorGate(paths, diff, stage) {
         }, { exit_code: run.exit_code, duration_ms: run.duration_ms }));
       }
       const prior = await loadSensorLedger3(paths);
-      const health = new Map(assessSensorHealth3([...prior, ...ledgerRows]).map((h) => [h.memory_id, h]));
+      const promotedAt = sensorPromotedAtMap3(scannable.map((m) => m.frontmatter));
+      const health = new Map(
+        assessSensorHealth3([...prior, ...ledgerRows], /* @__PURE__ */ new Date(), { promotedAt }).map((h) => [h.memory_id, h])
+      );
       for (const run of runs) {
         const sensorHealth = health.get(run.memory_id);
         const quarantined = sensorHealth?.quarantine_pending === true;
@@ -11080,7 +11096,7 @@ ${run.output_tail}` : "";
           findings.push({
             severity: "error",
             code: "sensor-block",
-            message: `Block ${run.kind} sensor fired \u2014 ${run.memory_id}: ${run.message}
+            message: `Block ${run.kind} sensor fired \u2014 ${run.memory_id}: ${run.message}${incidentSuffix(run.incident)}
 command: ${run.command} (exit ${run.exit_code}, ${run.duration_ms}ms)${outputBlock}`,
             fix: "Fix the behaviour the command checks, or run `hivelore sensors check --commands` to inspect it.",
             impact: 45,
@@ -11090,7 +11106,7 @@ command: ${run.command} (exit ${run.exit_code}, ${run.duration_ms}ms)${outputBlo
           findings.push({
             severity: "warn",
             code: "sensor-warn",
-            message: `${run.kind} sensor flagged ${run.memory_id}: ${run.message} (exit ${run.exit_code})${outputBlock}`,
+            message: `${run.kind} sensor flagged ${run.memory_id}: ${run.message}${incidentSuffix(run.incident)} (exit ${run.exit_code})${outputBlock}`,
             fix: "Review the failing command; `hivelore sensors check --commands` re-runs it.",
             impact: 5,
             memory_ids: [run.memory_id]
@@ -11784,7 +11800,10 @@ jobs:
             "
 
 Weekly total: **" + ($receipt.total|tostring) + "** refused; previous window: **" +
-            ($receipt.previous_total|tostring) + "**."
+            ($receipt.previous_total|tostring) + "**." +
+            "
+
+<sub>\u{1F6E1}\uFE0F Generated by [Hivelore](https://github.com/Doucs91/hivelore) \u2014 the deterministic policy gate for agent-written code.</sub>"
           ')" || exit 0
           comments="$(gh api "repos/$GITHUB_REPOSITORY/issues/$PR_NUMBER/comments" --paginate 2>/dev/null)" || exit 0
           comment_id="$(printf '%s' "$comments" | jq -r '.[] | select(.body | contains("<!-- haive:prevention-receipt -->")) | .id' | head -1)"
@@ -11799,6 +11818,30 @@ Weekly total: **" + ($receipt.total|tostring) + "** refused; previous window: **
 # haive:enforcement-workflow:end
 `;
 }
+var CONTENT_CATCH_CODES = /* @__PURE__ */ new Set(["sensor-block", "precommit-policy-block"]);
+var SETUP_GATE_CODES = /* @__PURE__ */ new Set([
+  "briefing-missing",
+  "session-recap-missing",
+  "decision-coverage-missing",
+  "bootstrap-incomplete",
+  "enforcement-score-below-threshold"
+]);
+function printBlockHeadline(report) {
+  const blocking = report.categories?.blocking ?? report.findings.filter((f) => f.severity === "error");
+  if (blocking.length === 0) return;
+  const catches = blocking.filter((f) => CONTENT_CATCH_CODES.has(f.code));
+  console.log();
+  if (catches.length > 0) {
+    console.log(ui.red(ui.bold("\u{1F6E1}\uFE0F  A documented lesson refused this commit \u2014 about the change you just made:")));
+    for (const c of catches) {
+      const id = c.memory_ids?.[0] ?? c.code;
+      console.log(`    ${ui.red("\u2022")} ${ui.bold(id)}  ${c.message.split("\n")[0]}`);
+    }
+  } else if (blocking.every((f) => SETUP_GATE_CODES.has(f.code))) {
+    console.log(ui.yellow(ui.bold("\u2699  Setup gate \u2014 about your repo's baseline, not the change you just made.")));
+    console.log(ui.dim("    Fill the knowledge layer once (bootstrap / load a briefing); later commits pass silently."));
+  }
+}
 function printReport(report, json, explain = false) {
   if (json) {
     console.log(JSON.stringify(report, null, 2));
@@ -11807,6 +11850,7 @@ function printReport(report, json, explain = false) {
   console.log(ui.bold(`Hivelore enforcement \u2014 ${report.mode}${report.actor ? ` \xB7 ${report.actor}` : ""}`));
   console.log(ui.dim(`  root: ${report.root}`));
   console.log(ui.dim(`  score: ${report.score.score}% / threshold ${report.score.threshold}%`));
+  if (report.should_block) printBlockHeadline(report);
   if (explain) {
     printFindingGroup("Blocking", report.categories.blocking, "error");
     printFindingGroup("Review", report.categories.review, "warn");
@@ -12108,6 +12152,7 @@ import {
   extractSensorExamples,
   appendSensorEvaluations as appendSensorEvaluations2,
   assessSensorHealth as assessSensorHealth4,
+  sensorPromotedAtMap as sensorPromotedAtMap4,
   findProjectRoot as findProjectRoot39,
   isRetiredMemory as isRetiredMemory3,
   judgeProposedSensor,
@@ -12203,7 +12248,10 @@ function registerSensors(program2) {
         }, { exit_code: run.exit_code, duration_ms: run.duration_ms }));
       }
       const prior = await loadSensorLedger4(paths);
-      const health = new Map(assessSensorHealth4([...prior, ...ledgerRows]).map((h) => [h.memory_id, h]));
+      const promotedAt = sensorPromotedAtMap4(allSensorMemories.map((m) => m.frontmatter));
+      const health = new Map(
+        assessSensorHealth4([...prior, ...ledgerRows], /* @__PURE__ */ new Date(), { promotedAt }).map((h) => [h.memory_id, h])
+      );
       for (const run of runs) {
         const quarantined = health.get(run.memory_id)?.quarantine_pending === true;
         if (run.status === "failed") {
@@ -12336,7 +12384,9 @@ function registerSensors(program2) {
     const next = {
       frontmatter: {
         ...found.memory.frontmatter,
-        sensor: { ...sensor, severity }
+        // promoted_at makes health assessment ignore pre-promotion ledger rows: promoting is the
+        // human's assertion the oracle was fixed, so old flaps must not re-quarantine it.
+        sensor: severity === "block" ? { ...sensor, severity, promoted_at: (/* @__PURE__ */ new Date()).toISOString() } : { ...sensor, severity }
       },
       body: severity === "block" ? withoutQuarantineNote(found.memory.body) : found.memory.body
     };
@@ -12347,7 +12397,7 @@ function registerSensors(program2) {
   });
   sensors.command("propose").description(
     "Propose a discriminating sensor for a memory \u2014 you write the pattern, Hivelore validates it before\n  trusting it to block. Mirrors the MCP `propose_sensor` tool (the agent-authored path).\n\n  A `block` proposal is accepted ONLY if it is not brittle, stays SILENT on the current code,\n  and FIRES on the bad example. Rejected proposals are not written \u2014 fix and re-run.\n\n  Example:\n    hivelore sensors propose <memory-id> \\\n      --pattern 'stripe\\.paymentIntents\\.create' --absent 'idempotencyKey' \\\n      --bad-example 'stripe.paymentIntents.create({ amount })'"
-  ).argument("<memory-id>", "memory id to attach the sensor to").option("--kind <kind>", "regex (default) | shell | test \u2014 command kinds route the team's own oracle to this lesson", "regex").option("--pattern <regex>", "kind=regex: regex matching the FAULTY usage").option("--command <cmd>", "kind=shell|test: command the gate runs when the diff touches the sensor's paths").option("--timeout <ms>", "kind=shell|test: max runtime in ms (default 120000)").option("--absent <regex>", "regex for the CORRECT-usage marker (makes it discriminate)").option("--bad-example <code>", "a snippet that SHOULD match (else examples are read from the lesson)").option("--severity <severity>", "block | warn", "block").option("--message <text>", "fix message shown when it fires").option("--flags <flags>", "regex flags (e.g. i)").option("--paths <csv>", "override scope paths (defaults to the memory anchors)").option("-d, --dir <dir>", "project root").action(async (id, opts) => {
+  ).argument("<memory-id>", "memory id to attach the sensor to").option("--kind <kind>", "regex (default) | shell | test \u2014 command kinds route the team's own oracle to this lesson", "regex").option("--pattern <regex>", "kind=regex: regex matching the FAULTY usage").option("--command <cmd>", "kind=shell|test: command the gate runs when the diff touches the sensor's paths").option("--timeout <ms>", "kind=shell|test: max runtime in ms (default 120000)").option("--absent <regex>", "regex for the CORRECT-usage marker (makes it discriminate)").option("--bad-example <code>", "a snippet that SHOULD match (else examples are read from the lesson)").option("--severity <severity>", "block | warn", "block").option("--message <text>", "fix message shown when it fires").option("--incident <ref>", "provenance: the incident this sensor guards (e.g. 'prod #442') \u2014 shown when it fires and in the receipt").option("--flags <flags>", "regex flags (e.g. i)").option("--paths <csv>", "override scope paths (defaults to the memory anchors)").option("-d, --dir <dir>", "project root").action(async (id, opts) => {
     if (opts.kind === "shell" || opts.kind === "test") {
       if (!opts.command?.trim()) {
         ui.error("--kind shell|test requires --command.");
@@ -12355,7 +12405,7 @@ function registerSensors(program2) {
         return;
       }
       const root2 = findProjectRoot39(opts.dir);
-      const { proposeSensor } = await import("./server-2FUYM6KI.js");
+      const { proposeSensor } = await import("./server-JFLUYWUB.js");
       const out = await proposeSensor(
         {
           memory_id: id,
@@ -12367,6 +12417,7 @@ function registerSensors(program2) {
           bad_example: void 0,
           severity: opts.severity === "warn" ? "warn" : "block",
           message: opts.message,
+          incident: opts.incident,
           flags: void 0,
           paths: opts.paths ? opts.paths.split(",").map((p) => p.trim()).filter(Boolean) : []
         },
@@ -12418,6 +12469,7 @@ function registerSensors(program2) {
       ...opts.flags ? { flags: opts.flags } : {},
       paths: anchorPaths,
       message: opts.message?.trim() || deriveProposedMessage(found.memory.body, opts.pattern, opts.absent),
+      ...opts.incident?.trim() ? { incident: opts.incident.trim() } : {},
       severity,
       autogen: false,
       last_fired: null
@@ -13192,7 +13244,7 @@ function registerBridges(program2) {
 
 // src/index.ts
 var program = new Command48();
-program.name("hivelore").description("Hivelore - repo-native memory and context policy for coding-agent harnesses").version("0.35.0").option("--advanced", "show maintenance and experimental commands in help").showSuggestionAfterError(true);
+program.name("hivelore").description("Hivelore - the deterministic policy gate for agent-written code (rules live as repo-native team memory)").version("0.36.0").option("--advanced", "show maintenance and experimental commands in help").showSuggestionAfterError(true);
 registerInit(program);
 registerResolveProject(program);
 registerEnforce(program);