@massu/core 0.1.1 → 0.4.0

package/dist/hooks/pre-compact.js

@@ -3,12 +3,13 @@ import{createRequire as __cr}from"module";const require=__cr(import.meta.url);
 
 // src/memory-db.ts
 import Database from "better-sqlite3";
-import { dirname as dirname2 } from "path";
+import { dirname as dirname2, basename } from "path";
 import { existsSync as existsSync2, mkdirSync } from "fs";
 
 // src/config.ts
 import { resolve, dirname } from "path";
 import { existsSync, readFileSync } from "fs";
+import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
 var DomainConfigSchema = z.object({
@@ -140,6 +141,49 @@ var CloudConfigSchema = z.object({
     audit: z.boolean().default(true)
   }).default({ memory: true, analytics: true, audit: true })
 }).optional();
+var ConventionsConfigSchema = z.object({
+  claudeDirName: z.string().default(".claude").refine(
+    (s) => !s.includes("..") && !s.startsWith("/"),
+    { message: 'claudeDirName must not contain ".." or start with "/"' }
+  ),
+  sessionStatePath: z.string().default(".claude/session-state/CURRENT.md").refine(
+    (s) => !s.includes("..") && !s.startsWith("/"),
+    { message: 'sessionStatePath must not contain ".." or start with "/"' }
+  ),
+  sessionArchivePath: z.string().default(".claude/session-state/archive").refine(
+    (s) => !s.includes("..") && !s.startsWith("/"),
+    { message: 'sessionArchivePath must not contain ".." or start with "/"' }
+  ),
+  knowledgeCategories: z.array(z.string()).default([
+    "patterns",
+    "commands",
+    "incidents",
+    "reference",
+    "protocols",
+    "checklists",
+    "playbooks",
+    "critical",
+    "scripts",
+    "status",
+    "templates",
+    "loop-state",
+    "session-state",
+    "agents"
+  ]),
+  knowledgeSourceFiles: z.array(z.string()).default(["CLAUDE.md", "MEMORY.md", "corrections.md"]),
+  excludePatterns: z.array(z.string()).default(["/ARCHIVE/", "/SESSION-HISTORY/"])
+}).optional();
+var PythonDomainConfigSchema = z.object({
+  name: z.string(),
+  packages: z.array(z.string()),
+  allowed_imports_from: z.array(z.string()).default([])
+});
+var PythonConfigSchema = z.object({
+  root: z.string(),
+  alembic_dir: z.string().optional(),
+  domains: z.array(PythonDomainConfigSchema).default([]),
+  exclude_dirs: z.array(z.string()).default(["__pycache__", ".venv", "venv", ".mypy_cache", ".pytest_cache"])
+}).optional();
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
@@ -174,7 +218,9 @@ var RawConfigSchema = z.object({
   security: SecurityConfigSchema,
   team: TeamConfigSchema,
   regression: RegressionConfigSchema,
-  cloud: CloudConfigSchema
+  cloud: CloudConfigSchema,
+  conventions: ConventionsConfigSchema,
+  python: PythonConfigSchema
 }).passthrough();
 var _config = null;
 var _projectRoot = null;
@@ -238,13 +284,24 @@ function getConfig() {
     security: parsed.security,
     team: parsed.team,
     regression: parsed.regression,
-    cloud: parsed.cloud
+    cloud: parsed.cloud,
+    conventions: parsed.conventions,
+    python: parsed.python
   };
+  if (!_config.cloud?.apiKey && process.env.MASSU_API_KEY) {
+    _config.cloud = {
+      enabled: true,
+      sync: { memory: true, analytics: true, audit: true },
+      ..._config.cloud,
+      apiKey: process.env.MASSU_API_KEY
+    };
+  }
   return _config;
 }
 function getResolvedPaths() {
   const config = getConfig();
   const root = getProjectRoot();
+  const claudeDirName = config.conventions?.claudeDirName ?? ".claude";
   return {
     codegraphDbPath: resolve(root, ".codegraph/codegraph.db"),
     dataDbPath: resolve(root, ".massu/data.db"),
@@ -260,22 +317,43 @@ function getResolvedPaths() {
     ),
     extensions: [".ts", ".tsx", ".js", ".jsx"],
     indexFiles: ["index.ts", "index.tsx", "index.js", "index.jsx"],
-    patternsDir: resolve(root, ".claude/patterns"),
-    claudeMdPath: resolve(root, ".claude/CLAUDE.md"),
+    patternsDir: resolve(root, claudeDirName, "patterns"),
+    claudeMdPath: resolve(root, claudeDirName, "CLAUDE.md"),
     docsMapPath: resolve(root, ".massu/docs-map.json"),
     helpSitePath: resolve(root, "../" + config.project.name + "-help"),
-    memoryDbPath: resolve(root, ".massu/memory.db")
+    memoryDbPath: resolve(root, ".massu/memory.db"),
+    knowledgeDbPath: resolve(root, ".massu/knowledge.db"),
+    plansDir: resolve(root, "docs/plans"),
+    docsDir: resolve(root, "docs"),
+    claudeDir: resolve(root, claudeDirName),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
+    sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
+    mcpJsonPath: resolve(root, ".mcp.json"),
+    settingsLocalPath: resolve(root, claudeDirName, "settings.local.json")
   };
 }
 
-// src/memory-schema.ts
+// src/memory-db.ts
+function getMemoryDb() {
+  const dbPath = getResolvedPaths().memoryDbPath;
+  const dir = dirname2(dbPath);
+  if (!existsSync2(dir)) {
+    mkdirSync(dir, { recursive: true });
+  }
+  const db = new Database(dbPath);
+  db.pragma("journal_mode = WAL");
+  db.pragma("foreign_keys = ON");
+  initMemorySchema(db);
+  return db;
+}
 function initMemorySchema(db) {
   db.exec(`
     -- Sessions table (linked to Claude Code session IDs)
     CREATE TABLE IF NOT EXISTS sessions (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
       session_id TEXT UNIQUE NOT NULL,
-      project TEXT NOT NULL DEFAULT 'unknown',
+      project TEXT NOT NULL DEFAULT 'my-project',
       git_branch TEXT,
       started_at TEXT NOT NULL,
       started_at_epoch INTEGER NOT NULL,
@@ -330,9 +408,7 @@ function initMemorySchema(db) {
         content_rowid='id'
       );
     `);
-  } catch (e) {
-    process.stderr.write(`FTS5 setup warning: ${e instanceof Error ? e.message : String(e)}
-`);
+  } catch (_e) {
   }
   db.exec(`
     CREATE TRIGGER IF NOT EXISTS observations_ai AFTER INSERT ON observations BEGIN
@@ -392,9 +468,7 @@ function initMemorySchema(db) {
         content_rowid='id'
       );
     `);
-  } catch (e) {
-    process.stderr.write(`FTS5 setup warning: ${e instanceof Error ? e.message : String(e)}
-`);
+  } catch (_e) {
   }
   db.exec(`
     CREATE TRIGGER IF NOT EXISTS prompts_ai AFTER INSERT ON user_prompts BEGIN
@@ -464,9 +538,7 @@ function initMemorySchema(db) {
         content_rowid=id
       );
     `);
-  } catch (e) {
-    process.stderr.write(`FTS5 setup warning: ${e instanceof Error ? e.message : String(e)}
-`);
+  } catch (_e) {
   }
   db.exec(`
     CREATE TRIGGER IF NOT EXISTS ct_fts_insert AFTER INSERT ON conversation_turns BEGIN
@@ -490,7 +562,7 @@ function initMemorySchema(db) {
     CREATE TABLE IF NOT EXISTS session_quality_scores (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
       session_id TEXT NOT NULL UNIQUE,
-      project TEXT NOT NULL DEFAULT 'unknown',
+      project TEXT NOT NULL DEFAULT 'my-project',
       score INTEGER NOT NULL DEFAULT 100,
       security_score INTEGER NOT NULL DEFAULT 100,
       architecture_score INTEGER NOT NULL DEFAULT 100,
@@ -513,7 +585,7 @@ function initMemorySchema(db) {
     CREATE TABLE IF NOT EXISTS session_costs (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
       session_id TEXT NOT NULL UNIQUE,
-      project TEXT NOT NULL DEFAULT 'unknown',
+      project TEXT NOT NULL DEFAULT 'my-project',
       input_tokens INTEGER NOT NULL DEFAULT 0,
       output_tokens INTEGER NOT NULL DEFAULT 0,
       cache_read_tokens INTEGER NOT NULL DEFAULT 0,
@@ -740,10 +812,40 @@ function initMemorySchema(db) {
     );
     CREATE INDEX IF NOT EXISTS idx_pending_sync_created ON pending_sync(created_at ASC);
   `);
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS license_cache (
+      api_key_hash TEXT PRIMARY KEY,
+      tier TEXT NOT NULL,
+      valid_until TEXT NOT NULL,
+      last_validated TEXT NOT NULL,
+      features TEXT DEFAULT '[]'
+    );
+  `);
+}
+function assignImportance(type, vrResult) {
+  switch (type) {
+    case "decision":
+    case "failed_attempt":
+      return 5;
+    case "cr_violation":
+    case "incident_near_miss":
+      return 4;
+    case "vr_check":
+      return vrResult === "PASS" ? 2 : 4;
+    case "pattern_compliance":
+      return vrResult === "PASS" ? 2 : 4;
+    case "feature":
+    case "bugfix":
+      return 3;
+    case "refactor":
+      return 2;
+    case "file_change":
+    case "discovery":
+      return 1;
+    default:
+      return 3;
+  }
 }
-
-// src/memory-queries.ts
-import { basename } from "path";
 function autoDetectTaskId(planFile) {
   if (!planFile) return null;
   const base = basename(planFile);
@@ -757,6 +859,29 @@ function createSession(db, sessionId, opts) {
     VALUES (?, ?, ?, ?, ?, ?)
   `).run(sessionId, opts?.branch ?? null, opts?.planFile ?? null, taskId, now.toISOString(), Math.floor(now.getTime() / 1e3));
 }
+function addObservation(db, sessionId, type, title, detail, opts) {
+  const now = /* @__PURE__ */ new Date();
+  const importance = opts?.importance ?? assignImportance(type, opts?.evidence?.includes("PASS") ? "PASS" : void 0);
+  const result = db.prepare(`
+    INSERT INTO observations (session_id, type, title, detail, files_involved, plan_item, cr_rule, vr_type, evidence, importance, original_tokens, created_at, created_at_epoch)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  `).run(
+    sessionId,
+    type,
+    title,
+    detail,
+    JSON.stringify(opts?.filesInvolved ?? []),
+    opts?.planItem ?? null,
+    opts?.crRule ?? null,
+    opts?.vrType ?? null,
+    opts?.evidence ?? null,
+    importance,
+    opts?.originalTokens ?? 0,
+    now.toISOString(),
+    Math.floor(now.getTime() / 1e3)
+  );
+  return Number(result.lastInsertRowid);
+}
 function addSummary(db, sessionId, summary) {
   const now = /* @__PURE__ */ new Date();
   db.prepare(`
@@ -779,24 +904,6 @@ function addSummary(db, sessionId, summary) {
   );
 }
 
-// src/memory-db.ts
-var initializedPaths = /* @__PURE__ */ new Set();
-function getMemoryDb() {
-  const dbPath = getResolvedPaths().memoryDbPath;
-  const dir = dirname2(dbPath);
-  if (!existsSync2(dir)) {
-    mkdirSync(dir, { recursive: true });
-  }
-  const db = new Database(dbPath);
-  db.pragma("journal_mode = WAL");
-  db.pragma("foreign_keys = ON");
-  if (!initializedPaths.has(dbPath)) {
-    initMemorySchema(db);
-    initializedPaths.add(dbPath);
-  }
-  return db;
-}
-
 // src/audit-trail.ts
 function logAuditEntry(db, entry) {
   db.prepare(`
@@ -833,6 +940,23 @@ async function main() {
       ).all(session_id);
       const summary = buildSnapshotSummary(observations, prompts);
       addSummary(db, session_id, summary);
+      try {
+        const knowledgeObs = observations.filter(
+          (o) => o.title?.includes("knowledge") || o.title?.includes("Knowledge") || o.detail?.includes("knowledge")
+        );
+        if (knowledgeObs.length > 0) {
+          const knowledgeContext = knowledgeObs.map((o) => `[${o.type}] ${o.title}`).join("; ");
+          addObservation(
+            db,
+            session_id,
+            "discovery",
+            "Knowledge context preserved before compaction",
+            knowledgeContext,
+            { importance: 4 }
+          );
+        }
+      } catch (_knowledgeErr) {
+      }
       try {
         logAuditEntry(db, {
           sessionId: session_id,
@@ -894,14 +1018,14 @@ function safeParseJson(json, fallback) {
   }
 }
 function readStdin() {
-  return new Promise((resolve2) => {
+  return new Promise((resolve3) => {
     let data = "";
     process.stdin.setEncoding("utf-8");
     process.stdin.on("data", (chunk) => {
       data += chunk;
     });
-    process.stdin.on("end", () => resolve2(data));
-    setTimeout(() => resolve2(data), 3e3);
+    process.stdin.on("end", () => resolve3(data));
+    setTimeout(() => resolve3(data), 3e3);
   });
 }
 main();

package/dist/hooks/pre-delete-check.js

@@ -2,12 +2,13 @@
 import{createRequire as __cr}from"module";const require=__cr(import.meta.url);
 
 // src/hooks/pre-delete-check.ts
-import Database from "better-sqlite3";
+import Database2 from "better-sqlite3";
 import { existsSync as existsSync2 } from "fs";
 
 // src/config.ts
 import { resolve, dirname } from "path";
 import { existsSync, readFileSync } from "fs";
+import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
 var DomainConfigSchema = z.object({
@@ -139,6 +140,49 @@ var CloudConfigSchema = z.object({
     audit: z.boolean().default(true)
   }).default({ memory: true, analytics: true, audit: true })
 }).optional();
+var ConventionsConfigSchema = z.object({
+  claudeDirName: z.string().default(".claude").refine(
+    (s) => !s.includes("..") && !s.startsWith("/"),
+    { message: 'claudeDirName must not contain ".." or start with "/"' }
+  ),
+  sessionStatePath: z.string().default(".claude/session-state/CURRENT.md").refine(
+    (s) => !s.includes("..") && !s.startsWith("/"),
+    { message: 'sessionStatePath must not contain ".." or start with "/"' }
+  ),
+  sessionArchivePath: z.string().default(".claude/session-state/archive").refine(
+    (s) => !s.includes("..") && !s.startsWith("/"),
+    { message: 'sessionArchivePath must not contain ".." or start with "/"' }
+  ),
+  knowledgeCategories: z.array(z.string()).default([
+    "patterns",
+    "commands",
+    "incidents",
+    "reference",
+    "protocols",
+    "checklists",
+    "playbooks",
+    "critical",
+    "scripts",
+    "status",
+    "templates",
+    "loop-state",
+    "session-state",
+    "agents"
+  ]),
+  knowledgeSourceFiles: z.array(z.string()).default(["CLAUDE.md", "MEMORY.md", "corrections.md"]),
+  excludePatterns: z.array(z.string()).default(["/ARCHIVE/", "/SESSION-HISTORY/"])
+}).optional();
+var PythonDomainConfigSchema = z.object({
+  name: z.string(),
+  packages: z.array(z.string()),
+  allowed_imports_from: z.array(z.string()).default([])
+});
+var PythonConfigSchema = z.object({
+  root: z.string(),
+  alembic_dir: z.string().optional(),
+  domains: z.array(PythonDomainConfigSchema).default([]),
+  exclude_dirs: z.array(z.string()).default(["__pycache__", ".venv", "venv", ".mypy_cache", ".pytest_cache"])
+}).optional();
 var PathsConfigSchema = z.object({
   source: z.string().default("src"),
   aliases: z.record(z.string(), z.string()).default({ "@": "src" }),
@@ -173,7 +217,9 @@ var RawConfigSchema = z.object({
   security: SecurityConfigSchema,
   team: TeamConfigSchema,
   regression: RegressionConfigSchema,
-  cloud: CloudConfigSchema
+  cloud: CloudConfigSchema,
+  conventions: ConventionsConfigSchema,
+  python: PythonConfigSchema
 }).passthrough();
 var _config = null;
 var _projectRoot = null;
@@ -237,13 +283,24 @@ function getConfig() {
     security: parsed.security,
     team: parsed.team,
     regression: parsed.regression,
-    cloud: parsed.cloud
+    cloud: parsed.cloud,
+    conventions: parsed.conventions,
+    python: parsed.python
   };
+  if (!_config.cloud?.apiKey && process.env.MASSU_API_KEY) {
+    _config.cloud = {
+      enabled: true,
+      sync: { memory: true, analytics: true, audit: true },
+      ..._config.cloud,
+      apiKey: process.env.MASSU_API_KEY
+    };
+  }
   return _config;
 }
 function getResolvedPaths() {
   const config = getConfig();
   const root = getProjectRoot();
+  const claudeDirName = config.conventions?.claudeDirName ?? ".claude";
   return {
     codegraphDbPath: resolve(root, ".codegraph/codegraph.db"),
     dataDbPath: resolve(root, ".massu/data.db"),
@@ -259,14 +316,26 @@ function getResolvedPaths() {
     ),
     extensions: [".ts", ".tsx", ".js", ".jsx"],
     indexFiles: ["index.ts", "index.tsx", "index.js", "index.jsx"],
-    patternsDir: resolve(root, ".claude/patterns"),
-    claudeMdPath: resolve(root, ".claude/CLAUDE.md"),
+    patternsDir: resolve(root, claudeDirName, "patterns"),
+    claudeMdPath: resolve(root, claudeDirName, "CLAUDE.md"),
     docsMapPath: resolve(root, ".massu/docs-map.json"),
     helpSitePath: resolve(root, "../" + config.project.name + "-help"),
-    memoryDbPath: resolve(root, ".massu/memory.db")
+    memoryDbPath: resolve(root, ".massu/memory.db"),
+    knowledgeDbPath: resolve(root, ".massu/knowledge.db"),
+    plansDir: resolve(root, "docs/plans"),
+    docsDir: resolve(root, "docs"),
+    claudeDir: resolve(root, claudeDirName),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
+    sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
+    mcpJsonPath: resolve(root, ".mcp.json"),
+    settingsLocalPath: resolve(root, claudeDirName, "settings.local.json")
   };
 }
 
+// src/memory-db.ts
+import Database from "better-sqlite3";
+
 // src/sentinel-db.ts
 var PROJECT_ROOT = getProjectRoot();
 function parsePortalScope(raw) {
@@ -294,45 +363,32 @@ function toFeature(row) {
     removed_reason: row.removed_reason || null
   };
 }
+function getFeatureById(db, id) {
+  const row = db.prepare("SELECT * FROM massu_sentinel WHERE id = ?").get(id);
+  return row ? toFeature(row) : null;
+}
 function getFeatureImpact(db, filePaths) {
-  if (filePaths.length === 0) {
-    return { files_analyzed: [], orphaned: [], degraded: [], unaffected: [], blocked: false, block_reason: null };
-  }
   const fileSet = new Set(filePaths);
-  const placeholders = filePaths.map(() => "?").join(",");
-  const featureLinks = db.prepare(
-    `SELECT DISTINCT feature_id FROM massu_sentinel_components WHERE component_file IN (${placeholders})`
-  ).all(...filePaths);
-  const affectedFeatureIds = featureLinks.map((l) => l.feature_id);
-  if (affectedFeatureIds.length === 0) {
-    return { files_analyzed: filePaths, orphaned: [], degraded: [], unaffected: [], blocked: false, block_reason: null };
-  }
-  const featurePlaceholders = affectedFeatureIds.map(() => "?").join(",");
-  const featureRows = db.prepare(
-    `SELECT * FROM massu_sentinel WHERE id IN (${featurePlaceholders}) AND status = 'active'`
-  ).all(...affectedFeatureIds);
-  const featuresById = new Map(featureRows.map((r) => [r.id, toFeature(r)]));
-  const allComponents = db.prepare(
-    `SELECT feature_id, component_file, is_primary FROM massu_sentinel_components WHERE feature_id IN (${featurePlaceholders})`
-  ).all(...affectedFeatureIds);
-  const componentsByFeature = /* @__PURE__ */ new Map();
-  for (const comp of allComponents) {
-    let list = componentsByFeature.get(comp.feature_id);
-    if (!list) {
-      list = [];
-      componentsByFeature.set(comp.feature_id, list);
+  const affectedFeatureIds = /* @__PURE__ */ new Set();
+  for (const filePath of filePaths) {
+    const links = db.prepare(
+      "SELECT feature_id FROM massu_sentinel_components WHERE component_file = ?"
+    ).all(filePath);
+    for (const link of links) {
+      affectedFeatureIds.add(link.feature_id);
     }
-    list.push(comp);
   }
   const orphaned = [];
   const degraded = [];
   const unaffected = [];
   for (const featureId of affectedFeatureIds) {
-    const feature = featuresById.get(featureId);
-    if (!feature) continue;
-    const comps = componentsByFeature.get(featureId) ?? [];
-    const affected = comps.filter((c) => fileSet.has(c.component_file));
-    const remaining = comps.filter((c) => !fileSet.has(c.component_file));
+    const feature = getFeatureById(db, featureId);
+    if (!feature || feature.status !== "active") continue;
+    const allComponents = db.prepare(
+      "SELECT component_file, is_primary FROM massu_sentinel_components WHERE feature_id = ?"
+    ).all(featureId);
+    const affected = allComponents.filter((c) => fileSet.has(c.component_file));
+    const remaining = allComponents.filter((c) => !fileSet.has(c.component_file));
     const primaryAffected = affected.some((c) => c.is_primary);
     const item = {
       feature,
@@ -364,17 +420,46 @@ function getFeatureImpact(db, filePaths) {
 
 // src/hooks/pre-delete-check.ts
 var PROJECT_ROOT2 = getProjectRoot();
+var KNOWLEDGE_PROTECTED_FILES = [
+  "knowledge-db.ts",
+  "knowledge-indexer.ts",
+  "knowledge-tools.ts"
+];
 function getDataDb() {
   const dbPath = getResolvedPaths().dataDbPath;
   if (!existsSync2(dbPath)) return null;
   try {
-    const db = new Database(dbPath, { readonly: true });
+    const db = new Database2(dbPath, { readonly: true });
     db.pragma("journal_mode = WAL");
     return db;
   } catch {
     return null;
   }
 }
+function checkKnowledgeFileProtection(input) {
+  const candidateFiles = [];
+  if (input.tool_name === "Bash" && input.tool_input.command) {
+    const cmd = input.tool_input.command;
+    const rmMatch = cmd.match(/(?:rm|git\s+rm)\s+(?:-[rf]*\s+)*(.+)/);
+    if (rmMatch) {
+      const parts = rmMatch[1].split(/\s+/).filter((p) => !p.startsWith("-"));
+      candidateFiles.push(...parts);
+    }
+  }
+  if (input.tool_name === "Write" && input.tool_input.file_path) {
+    const content = input.tool_input.content || "";
+    if (content.trim().length === 0) {
+      candidateFiles.push(input.tool_input.file_path);
+    }
+  }
+  for (const f of candidateFiles) {
+    const basename = f.split("/").pop() ?? f;
+    if (KNOWLEDGE_PROTECTED_FILES.includes(basename)) {
+      return `KNOWLEDGE SYSTEM PROTECTION: "${basename}" is a core knowledge system file. Deleting it will break knowledge indexing and memory retrieval. Create a replacement before removing.`;
+    }
+  }
+  return null;
+}
 function extractDeletedFiles(input) {
   const files = [];
   if (input.tool_name === "Bash" && input.tool_input.command) {
@@ -384,7 +469,7 @@ function extractDeletedFiles(input) {
       const paths = rmMatch[1].split(/\s+/).filter((p) => !p.startsWith("-"));
       for (const p of paths) {
         const relPath = p.startsWith("src/") ? p : p.replace(PROJECT_ROOT2 + "/", "");
-        if (relPath.startsWith("src/")) {
+        if (relPath.startsWith("src/") || relPath.endsWith(".py")) {
           files.push(relPath);
         }
       }
@@ -394,7 +479,7 @@ function extractDeletedFiles(input) {
     const content = input.tool_input.content || "";
     if (content.trim().length === 0) {
       const relPath = input.tool_input.file_path.replace(PROJECT_ROOT2 + "/", "");
-      if (relPath.startsWith("src/")) {
+      if (relPath.startsWith("src/") || relPath.endsWith(".py")) {
         files.push(relPath);
       }
     }
@@ -405,6 +490,12 @@ async function main() {
   try {
     const input = await readStdin();
     const hookInput = JSON.parse(input);
+    const knowledgeWarning = checkKnowledgeFileProtection(hookInput);
+    if (knowledgeWarning) {
+      process.stdout.write(JSON.stringify({ message: knowledgeWarning }));
+      process.exit(0);
+      return;
+    }
     const deletedFiles = extractDeletedFiles(hookInput);
     if (deletedFiles.length === 0) {
       process.exit(0);
@@ -415,10 +506,11 @@ async function main() {
       process.exit(0);
       return;
     }
+    const SENTINEL_TABLE = "massu_sentinel";
     try {
       const tableExists = db.prepare(
-        "SELECT name FROM sqlite_master WHERE type='table' AND name='massu_sentinel'"
-      ).get();
+        `SELECT name FROM sqlite_master WHERE type='table' AND name=?`
+      ).get(SENTINEL_TABLE);
       if (!tableExists) {
         process.exit(0);
         return;
@@ -445,6 +537,31 @@ async function main() {
         msg.push("Create a migration plan before deleting these files.");
         process.stdout.write(JSON.stringify({ message: msg.join("\n") }));
       }
+      const pyFiles = deletedFiles.filter((f) => f.endsWith(".py"));
+      if (pyFiles.length > 0) {
+        try {
+          for (const pyFile of pyFiles) {
+            const importers = db.prepare(
+              "SELECT source_file FROM massu_py_imports WHERE target_file = ?"
+            ).all(pyFile);
+            const routes = db.prepare(
+              "SELECT method, path FROM massu_py_routes WHERE file = ?"
+            ).all(pyFile);
+            const models = db.prepare(
+              "SELECT class_name FROM massu_py_models WHERE file = ?"
+            ).all(pyFile);
+            if (importers.length > 0 || routes.length > 0 || models.length > 0) {
+              const parts = [];
+              if (importers.length > 0) parts.push(`imported by ${importers.length} files`);
+              if (routes.length > 0) parts.push(`defines ${routes.length} routes`);
+              if (models.length > 0) parts.push(`defines ${models.length} models`);
+              const msg = `PYTHON IMPACT: "${pyFile}" ${parts.join(", ")}. Check dependents before deleting.`;
+              process.stdout.write(JSON.stringify({ message: msg }));
+            }
+          }
+        } catch {
+        }
+      }
     } finally {
       db.close();
     }