@massu/core 1.10.8 → 1.12.0

package/src/changelog-generator.ts

@@ -1,178 +0,0 @@
-// Copyright (c) 2026 Massu. All rights reserved.
-// Licensed under BSL 1.1 - see LICENSE file for details.
-
-/**
- * Release-boundary CHANGELOG entry generator. Reads `git log <last-tag>..HEAD`
- * commit subjects, groups by `(plan-<token>)` paren-notation prefix, looks up
- * the matching `docs/plans/*.md` files for their `## Changelog Summary` section,
- * and emits a Keep-a-Changelog 1.1.0-compliant entry.
- *
- * Plan-token regex mirrors `scripts/lib/plan-token-regex.sh` (SSOT). See
- * plan-1.9.0-plan-token-aware-changelog-batcher Phase B.
- *
- * Pure functions only — caller threads in commit subjects + plan directory.
- * No git invocations inside this module (those live in commands/changelog.ts).
- */
-
-import { existsSync, readFileSync, readdirSync } from 'fs';
-import { resolve } from 'path';
-
-/**
- * Plan-token regex (TS shim of scripts/lib/plan-token-regex.sh PLAN_TOKEN_REGEX).
- * Matches subject prefix `<type>(plan-<token>):` where <type> ∈ {feat, fix, chore, docs}.
- * Captures: group 1 = type, group 2 = full plan-<token>.
- */
-const PLAN_TOKEN_RE = /^(feat|fix|chore|docs)\((plan-[a-z0-9._-]+)\)/;
-
-export class MissingPlanFileError extends Error {
-  constructor(token: string) {
-    super(`No plan file found in plans directory matching Plan Token: ${token}`);
-    this.name = 'MissingPlanFileError';
-  }
-}
-
-export class MissingChangelogSummaryError extends Error {
-  constructor(token: string, planFile: string) {
-    super(`Plan file ${planFile} for token ${token} has no '## Changelog Summary' section`);
-    this.name = 'MissingChangelogSummaryError';
-  }
-}
-
-export interface PlanSummary {
-  title: string;
-  summary: string;
-}
-
-export interface ParseResult {
-  tokens: Set<string>;
-  maintenance: string[];
-}
-
-/**
- * Parse commit subject lines into:
- *   - `tokens`: Set of unique `plan-<token>` strings (with `plan-` prefix)
- *   - `maintenance`: subjects that DID NOT match the paren-notation pattern
- */
-export function parseCommitsForPlanTokens(subjects: readonly string[]): ParseResult {
-  const tokens = new Set<string>();
-  const maintenance: string[] = [];
-  for (const subject of subjects) {
-    const m = subject.match(PLAN_TOKEN_RE);
-    if (m && m[2]) {
-      tokens.add(m[2]);
-    } else {
-      maintenance.push(subject);
-    }
-  }
-  return { tokens, maintenance };
-}
-
-/**
- * For each plan-token, find the corresponding `docs/plans/*.md` file and
- * extract its title (first `# Plan: ...` heading) and `## Changelog Summary`
- * section body. Throws on missing file or missing section.
- */
-export function loadPlanSummaries(
-  tokens: ReadonlySet<string>,
-  planDir: string,
-): Map<string, PlanSummary> {
-  const result = new Map<string, PlanSummary>();
-  if (tokens.size === 0) return result;
-
-  if (!existsSync(planDir)) {
-    throw new Error(`Plan directory does not exist: ${planDir}`);
-  }
-  const files = readdirSync(planDir).filter((f) => f.endsWith('.md'));
-
-  for (const token of tokens) {
-    let matchedFile: string | null = null;
-    let content = '';
-    for (const file of files) {
-      const path = resolve(planDir, file);
-      const text = readFileSync(path, 'utf-8');
-      // Match `**Plan Token**: `plan-<token>`` allowing optional surrounding text.
-      const tokenRe = new RegExp(
-        `^\\*\\*Plan Token\\*\\*:\\s*\`?${token.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\$&')}\`?(\\s|$)`,
-        'm',
-      );
-      if (tokenRe.test(text)) {
-        matchedFile = file;
-        content = text;
-        break;
-      }
-    }
-    if (!matchedFile) {
-      throw new MissingPlanFileError(token);
-    }
-
-    // Extract title: first line starting with `# ` (after the metadata block).
-    const titleMatch = content.match(/^# (.+)$/m);
-    const title = titleMatch ? titleMatch[1].trim() : token;
-
-    // Extract `## Changelog Summary` section body.
-    const sectionRe = /^## Changelog Summary\s*\n([\s\S]*?)(?=\n## |\n---|\n# |$)/m;
-    const sectionMatch = content.match(sectionRe);
-    if (!sectionMatch || !sectionMatch[1].trim()) {
-      throw new MissingChangelogSummaryError(token, matchedFile);
-    }
-    const summary = sectionMatch[1].trim();
-    result.set(token, { title, summary });
-  }
-
-  return result;
-}
-
-export interface GenerateOptions {
-  version: string;
-  date: string;
-  planSummaries: ReadonlyMap<string, PlanSummary>;
-  maintenance: readonly string[];
-}
-
-/**
- * Emit a CHANGELOG.md entry in Keep-a-Changelog 1.1.0 format. Each plan-token
- * becomes one paragraph (or `### Added` subsection if the plan summary itself
- * uses Keep-a-Changelog subsections). Maintenance commits go under a
- * `### Maintenance` subsection at the end.
- */
-export function generateChangelogEntry(opts: GenerateOptions): string {
-  const parts: string[] = [];
-  parts.push(`## [${opts.version}] - ${opts.date}\n`);
-  parts.push('');
-
-  // Plan summaries, in iteration order
-  for (const [, planSum] of opts.planSummaries) {
-    parts.push(planSum.summary);
-    parts.push('');
-  }
-
-  // Maintenance fallback
-  if (opts.maintenance.length > 0) {
-    parts.push('### Maintenance');
-    parts.push('');
-    for (const subject of opts.maintenance) {
-      parts.push(`- ${subject}`);
-    }
-    parts.push('');
-  }
-
-  return parts.join('\n') + '\n';
-}
-
-/**
- * Given a CHANGELOG.md entry body and a set of plan-tokens that should be
- * referenced, return the subset of tokens NOT mentioned in the body.
- * Used by `permissions check-drift` verification + pre-tag gate.
- */
-export function findCoverageGaps(
-  entryText: string,
-  tokens: ReadonlySet<string>,
-): string[] {
-  const gaps: string[] = [];
-  for (const token of tokens) {
-    if (!entryText.includes(token)) {
-      gaps.push(token);
-    }
-  }
-  return gaps;
-}

package/src/cli.ts

@@ -1,246 +0,0 @@
-// Copyright (c) 2026 Massu. All rights reserved.
-// Licensed under BSL 1.1 - see LICENSE file for details.
-
-/**
- * Massu CLI Entry Point
- *
- * Routes subcommands to handlers, falls through to MCP server mode
- * when no subcommand is provided (backward compatible).
- *
- * Usage:
- *   npx massu init            - Full project setup
- *   npx massu doctor          - Health check
- *   npx massu install-hooks   - Install hooks only
- *   npx massu validate-config - Validate configuration
- *   npx @massu/core           - MCP server mode (no args)
- */
-
-import { readFileSync } from 'fs';
-import { resolve, dirname } from 'path';
-import { fileURLToPath } from 'url';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-const args = process.argv.slice(2);
-const subcommand = args[0];
-
-async function main(): Promise<void> {
-  switch (subcommand) {
-    case 'init': {
-      const { runInit } = await import('./commands/init.ts');
-      await runInit();
-      break;
-    }
-    case 'doctor': {
-      const { runDoctor } = await import('./commands/doctor.ts');
-      await runDoctor();
-      break;
-    }
-    case 'install-hooks': {
-      const { runInstallHooks } = await import('./commands/install-hooks.ts');
-      await runInstallHooks();
-      break;
-    }
-    case 'hook-runner': {
-      // Dynamic hook dispatcher — invoked by Claude Code's hook command lines
-      // (settings.json -> `npx -y @massu/core@<version> hook-runner <name>`).
-      // Closes P-003 by resolving the hook file at fire-time instead of baking
-      // an absolute npx-cache path at install-time.
-      const { runHookRunner } = await import('./commands/hook-runner.ts');
-      const result = await runHookRunner(args.slice(1));
-      process.exit(result.exitCode);
-      return;
-    }
-    case 'install-commands': {
-      const { runInstallCommands } = await import('./commands/install-commands.ts');
-      await runInstallCommands();
-      break;
-    }
-    case 'permissions': {
-      const { handlePermissionsSubcommand } = await import('./commands/permissions.ts');
-      const result = await handlePermissionsSubcommand(args.slice(1));
-      process.exit(result.exitCode);
-      return;
-    }
-    case 'changelog': {
-      const { handleChangelogSubcommand } = await import('./commands/changelog.ts');
-      const result = await handleChangelogSubcommand(args.slice(1));
-      process.exit(result.exitCode);
-      return;
-    }
-    case 'show-template': {
-      const { runShowTemplate } = await import('./commands/show-template.ts');
-      await runShowTemplate(args.slice(1));
-      break;
-    }
-    case 'watch': {
-      const { runWatch } = await import('./commands/watch.ts');
-      const result = await runWatch(args.slice(1));
-      process.exit(result.exitCode);
-      return;
-    }
-    case 'refresh-log': {
-      const { runRefreshLog } = await import('./commands/refresh-log.ts');
-      const result = await runRefreshLog(args.slice(1));
-      process.exit(result.exitCode);
-      return;
-    }
-    case 'validate-config': {
-      const { runValidateConfig } = await import('./commands/doctor.ts');
-      await runValidateConfig();
-      break;
-    }
-    case 'config': {
-      await handleConfigSubcommand(args.slice(1));
-      break;
-    }
-    case 'adapters': {
-      const { handleAdaptersSubcommand } = await import('./commands/adapters.ts');
-      const result = await handleAdaptersSubcommand(args.slice(1));
-      process.exit(result.exitCode);
-      return;
-    }
-    case '--help':
-    case '-h': {
-      printHelp();
-      break;
-    }
-    case '--version':
-    case '-v': {
-      printVersion();
-      break;
-    }
-    default: {
-      // No subcommand or unknown: fall through to MCP server mode
-      // This maintains backward compatibility with `npx @massu/core`
-      await import('./server.ts');
-    }
-  }
-}
-
-async function handleConfigSubcommand(configArgs: string[]): Promise<void> {
-  const sub = configArgs[0];
-  const flags = new Set(configArgs.slice(1));
-  switch (sub) {
-    case 'refresh': {
-      const { runConfigRefresh } = await import('./commands/config-refresh.ts');
-      const result = await runConfigRefresh({
-        dryRun: flags.has('--dry-run'),
-        skipCommands: flags.has('--skip-commands'),
-        autoYes: flags.has('--yes') || flags.has('-y'),
-      });
-      process.exit(result.exitCode);
-      return;
-    }
-    case 'validate': {
-      const { runValidateConfig } = await import('./commands/doctor.ts');
-      await runValidateConfig();
-      return;
-    }
-    case 'upgrade': {
-      const { runConfigUpgrade } = await import('./commands/config-upgrade.ts');
-      const result = await runConfigUpgrade({
-        rollback: flags.has('--rollback'),
-        ci: flags.has('--ci') || flags.has('--yes'),
-      });
-      process.exit(result.exitCode);
-      return;
-    }
-    case 'doctor': {
-      const { runDoctor } = await import('./commands/doctor.ts');
-      await runDoctor();
-      return;
-    }
-    case 'check-drift': {
-      const { runConfigCheckDrift } = await import('./commands/config-check-drift.ts');
-      const result = await runConfigCheckDrift({ verbose: flags.has('--verbose') });
-      process.exit(result.exitCode);
-      return;
-    }
-    case '--help':
-    case '-h':
-    case undefined: {
-      printConfigHelp();
-      return;
-    }
-    default: {
-      process.stderr.write(`massu: unknown config subcommand: ${sub}\n`);
-      printConfigHelp();
-      process.exit(1);
-      return;
-    }
-  }
-}
-
-function printHelp(): void {
-  console.log(`
-Massu AI - Engineering Governance Platform
-
-Usage:
-  massu <command>
-
-Commands:
-  init              Set up Massu AI in your project (one command, full setup)
-  doctor            Check installation health
-  install-hooks     Install/update Claude Code hooks
-  install-commands  Install/update slash commands (use --skip-permissions to opt out of MCP allowlist seeding)
-  show-template     Print the resolved variant of a bundled template (e.g. for diffs)
-  watch             Run the file-watcher daemon (auto-refresh on stack changes)
-  refresh-log [N]   Show the last N watcher auto-refresh events
-  validate-config   Validate massu.config.yaml (alias: config validate)
-  config <sub>      Config lifecycle: refresh | validate | upgrade | doctor | check-drift
-  permissions <sub> MCP permission lifecycle: install | verify | check-drift
-  changelog <sub>   CHANGELOG generation / verification: generate | verify
-  adapters <sub>    Third-party adapter registry: list | refresh | search | add-local | remove-local | install | resign
-
-Options:
-  --help, -h        Show this help message
-  --version, -v     Show version
-
-Getting started:
-  npx massu init              # Full setup in one command
-  npx massu init --help       # Show all init options (--ci, --force, --template)
-  npx massu config --help     # Show config subcommands
-
-Documentation: https://massu.ai/docs
-`);
-}
-
-function printConfigHelp(): void {
-  console.log(`
-massu config <subcommand>
-
-Subcommands:
-  refresh       Re-run detection and apply changes to massu.config.yaml.
-                  --dry-run        Print diff and exit without writing.
-                  --skip-commands  Don't re-template .claude/commands/.
-                  --yes, -y        Auto-apply without prompting (CI / scripts).
-  validate      Validate massu.config.yaml (alias of \`massu validate-config\`).
-  upgrade       Migrate a v1 config to schema_version=2.
-                  --rollback   Restore from .bak file.
-                  --ci, --yes  Non-interactive mode (no prompts).
-  doctor        Run the full health check (alias of \`massu doctor\`).
-  check-drift   CI-safe drift gate; exits 1 on drift.
-                  --verbose    Print detailed changes to stdout.
-
-Examples:
-  npx massu config refresh --dry-run
-  npx massu config upgrade --ci
-  npx massu config check-drift --verbose
-`);
-}
-
-function printVersion(): void {
-  try {
-    const pkg = JSON.parse(readFileSync(resolve(__dirname, '../package.json'), 'utf-8'));
-    console.log(`massu v${pkg.version}`);
-  } catch {
-    console.log('massu v0.1.0');
-  }
-}
-
-main().catch((err) => {
-  console.error(`massu: ${err instanceof Error ? err.message : String(err)}`);
-  process.exit(1);
-});

package/src/cloud-sync.ts

@@ -1,234 +0,0 @@
-// Copyright (c) 2026 Massu. All rights reserved.
-// Licensed under BSL 1.1 - see LICENSE file for details.
-
-import type Database from 'better-sqlite3';
-import { getConfig } from './config.ts';
-import {
-  enqueueSyncPayload,
-  dequeuePendingSync,
-  removePendingSync,
-  incrementRetryCount,
-} from './memory-db.ts';
-import { classifyVisibility } from './observation-extractor.ts';
-
-// ============================================================
-// Cloud Sync Module
-// Internal module — NOT an MCP tool. Called by session-end hook.
-// ============================================================
-
-export interface SyncPayload {
-  sessions?: Array<{
-    local_session_id: string;
-    project_name?: string;
-    summary?: string;
-    started_at?: string;
-    ended_at?: string;
-    turns?: number;
-    tokens_used?: number;
-    estimated_cost?: number;
-    tools_used?: string[];
-  }>;
-  observations?: Array<{
-    local_observation_id: string;
-    session_id?: string;
-    type: string;
-    content: string;
-    importance: number;
-    file_path?: string;
-  }>;
-  analytics?: Array<{
-    event_type: string;
-    event_data: Record<string, unknown>;
-  }>;
-  audit?: Array<{
-    action: string;
-    resource?: string;
-    details: Record<string, unknown>;
-  }>;
-}
-
-export interface SyncResult {
-  success: boolean;
-  synced: {
-    sessions: number;
-    observations: number;
-    analytics: number;
-    audit: number;
-  };
-  error?: string;
-}
-
-const MAX_RETRIES = 3;
-const RETRY_DELAYS = [1000, 2000, 4000]; // exponential backoff
-
-// P-H003 (plan-stage-c-high-batch): bound each HTTP request so offline
-// customers don't burn the entire Stop-hook 15s budget on a single
-// unreachable endpoint. Default 2_000ms is well under hook timeout while
-// still tolerating typical latency. Override via config.cloud.requestTimeoutMs.
-const DEFAULT_CLOUD_REQUEST_TIMEOUT_MS = 2_000;
-
-/**
- * Sync data to the cloud endpoint.
- * Respects config flags for selective sync.
- * On failure after retries, enqueues payload for later retry.
- */
-export async function syncToCloud(
-  db: Database.Database,
-  payload: SyncPayload
-): Promise<SyncResult> {
-  const config = getConfig();
-  const cloud = config.cloud;
-
-  // Check if cloud sync is enabled
-  if (!cloud?.enabled) {
-    return { success: true, synced: { sessions: 0, observations: 0, analytics: 0, audit: 0 } };
-  }
-
-  // Check API key
-  if (!cloud.apiKey) {
-    return { success: false, synced: { sessions: 0, observations: 0, analytics: 0, audit: 0 }, error: 'No API key configured' };
-  }
-
-  // Check endpoint
-  const endpoint = cloud.endpoint;
-  if (!endpoint) {
-    return { success: false, synced: { sessions: 0, observations: 0, analytics: 0, audit: 0 }, error: 'No sync endpoint configured' };
-  }
-
-  // Apply selective sync filters
-  const filteredPayload: SyncPayload = {};
-  if (cloud.sync?.memory !== false) {
-    filteredPayload.sessions = payload.sessions;
-    // P-H020 (plan-stage-c-high-batch): consume classifyVisibility() to drop
-    // observations whose title/detail matches PRIVATE_PATTERNS (Stripe keys,
-    // env var names, file paths, Bearer tokens, etc.). Pre-fix: cloud-sync
-    // transmitted EVERY observation to Massu's Supabase, leaking customer
-    // secrets and absolute file paths.
-    if (payload.observations) {
-      let droppedPrivate = 0;
-      filteredPayload.observations = payload.observations.filter((obs) => {
-        if (classifyVisibility(obs.content ?? '', obs.content ?? '') === 'private') {
-          droppedPrivate += 1;
-          return false;
-        }
-        // Belt-and-suspenders: also drop if file_path matches private patterns.
-        if (obs.file_path && classifyVisibility(obs.file_path, obs.file_path) === 'private') {
-          droppedPrivate += 1;
-          return false;
-        }
-        return true;
-      });
-      if (droppedPrivate > 0) {
-        // Surface to the customer's stderr so they can audit what got filtered.
-        process.stderr.write(
-          `[massu] cloud-sync: dropped ${droppedPrivate} private observation(s) (PRIVATE_PATTERNS match)\n`,
-        );
-      }
-    }
-  }
-  if (cloud.sync?.analytics !== false) {
-    filteredPayload.analytics = payload.analytics;
-  }
-  if (cloud.sync?.audit !== false) {
-    filteredPayload.audit = payload.audit;
-  }
-
-  // Attempt sync with retry
-  let lastError = '';
-  const requestTimeoutMs = (cloud as { requestTimeoutMs?: number }).requestTimeoutMs
-    ?? DEFAULT_CLOUD_REQUEST_TIMEOUT_MS;
-  for (let attempt = 0; attempt < MAX_RETRIES; attempt++) {
-    try {
-      const response = await fetch(endpoint, {
-        method: 'POST',
-        headers: {
-          'Content-Type': 'application/json',
-          'Authorization': `Bearer ${cloud.apiKey}`,
-        },
-        body: JSON.stringify(filteredPayload),
-        // P-H003: bounded request — AbortSignal.timeout fires AbortError when
-        // the request stalls (DNS failure, TCP unreachable, slow server). Cleans
-        // up before hook timeout kills the whole process.
-        signal: AbortSignal.timeout(requestTimeoutMs),
-      });
-
-      if (!response.ok) {
-        lastError = `HTTP ${response.status}: ${response.statusText}`;
-        if (response.status >= 400 && response.status < 500) {
-          // Client errors are not retryable
-          break;
-        }
-        // Server errors — retry
-        if (attempt < MAX_RETRIES - 1) {
-          await sleep(RETRY_DELAYS[attempt]);
-          continue;
-        }
-        break;
-      }
-
-      const result = await response.json() as { synced?: { sessions?: number; observations?: number; analytics?: number } };
-      return {
-        success: true,
-        synced: {
-          sessions: result.synced?.sessions ?? 0,
-          observations: result.synced?.observations ?? 0,
-          analytics: result.synced?.analytics ?? 0,
-          audit: 0,
-        },
-      };
-    } catch (err) {
-      lastError = err instanceof Error ? err.message : String(err);
-      // P-H003: AbortError from AbortSignal.timeout means the request stalled
-      // (customer offline / DNS failure / unreachable). Don't burn the remaining
-      // hook budget retrying; queue for later and bail.
-      if (err instanceof Error && (err.name === 'AbortError' || err.name === 'TimeoutError')) {
-        break;
-      }
-      if (attempt < MAX_RETRIES - 1) {
-        await sleep(RETRY_DELAYS[attempt]);
-        continue;
-      }
-    }
-  }
-
-  // All retries exhausted — enqueue for later
-  try {
-    enqueueSyncPayload(db, JSON.stringify(payload));
-  } catch (_e) {
-    // Best effort — don't crash if queue fails
-  }
-
-  return {
-    success: false,
-    synced: { sessions: 0, observations: 0, analytics: 0, audit: 0 },
-    error: lastError,
-  };
-}
-
-/**
- * Drain the pending sync queue. Processes items oldest-first.
- * Successfully synced items are removed; failed items get their retry count incremented.
- */
-export async function drainSyncQueue(db: Database.Database): Promise<void> {
-  const config = getConfig();
-  if (!config.cloud?.enabled || !config.cloud?.apiKey) return;
-
-  const pending = dequeuePendingSync(db, 10);
-  for (const item of pending) {
-    try {
-      const payload = JSON.parse(item.payload) as SyncPayload;
-      const result = await syncToCloud(db, payload);
-      if (result.success) {
-        removePendingSync(db, item.id);
-      } else {
-        incrementRetryCount(db, item.id, result.error ?? 'Unknown error');
-      }
-    } catch (err) {
-      incrementRetryCount(db, item.id, err instanceof Error ? err.message : String(err));
-    }
-  }
-}
-
-function sleep(ms: number): Promise<void> {
-  return new Promise(resolve => setTimeout(resolve, ms));
-}