@massu/core 1.10.8 → 1.12.1

package/dist/hooks/post-tool-use.js

@@ -1,5 +1,11 @@
 #!/usr/bin/env node
 import{createRequire as __cr}from"module";const require=__cr(import.meta.url);
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
 
 // src/memory-db.ts
 import Database from "better-sqlite3";
@@ -348,6 +354,22 @@ var RawConfigSchema = z.object({
   accessScopes: z.array(z.string()).optional(),
   domains: z.array(DomainConfigSchema).default([]),
   rules: z.array(PatternRuleConfigSchema).default([]),
+  // P-M-036 (plan-stage-d-medium-sweep): customer-authored CR-style
+  // governance rules. DISTINCT from `rules:` above (path-scoped lint hints
+  // used by pattern-scanner). At config-refresh time these entries are
+  // loaded into the `knowledge_rules` SQLite table with
+  // `source = 'customer-config'` so `massu_knowledge_rule` and the
+  // governance docs surface customer-defined rules alongside framework CRs.
+  governance_rules: z.array(
+    z.object({
+      id: z.string().min(1, "governance_rules[].id is required"),
+      title: z.string().min(1, "governance_rules[].title is required"),
+      description: z.string().min(1, "governance_rules[].description is required"),
+      vr_type: z.string().default("VR-CUSTOM"),
+      reference_path: z.string().optional(),
+      severity: z.enum(["critical", "high", "medium", "low", "info"]).default("medium")
+    }).passthrough()
+  ).default([]),
   analytics: AnalyticsConfigSchema,
   governance: GovernanceConfigSchema,
   security: SecurityConfigSchema,
@@ -466,6 +488,8 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
     accessScopes: parsed.accessScopes,
     domains: parsed.domains,
     rules: parsed.rules,
+    // P-M-036: customer-authored CR-style governance rules.
+    governance_rules: parsed.governance_rules,
     analytics: parsed.analytics,
     governance: parsed.governance,
     security: parsed.security,
@@ -1018,6 +1042,12 @@ function initMemorySchema(db) {
       features TEXT DEFAULT '[]'
     );
   `);
+  const licenseCacheCols = db.prepare(`PRAGMA table_info(license_cache)`).all();
+  if (!licenseCacheCols.some((c) => c.name === "signed_payload_json")) {
+    db.exec(
+      `ALTER TABLE license_cache ADD COLUMN signed_payload_json TEXT NOT NULL DEFAULT ''`
+    );
+  }
   db.exec(`
     CREATE TABLE IF NOT EXISTS failure_classes (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -1848,9 +1878,8 @@ function storeSecurityScore(db, sessionId, filePath, riskScore, findings) {
 }
 
 // src/hooks/post-tool-use.ts
-import { readFileSync as readFileSync6, existsSync as existsSync7 } from "fs";
+import { readFileSync as readFileSync6, existsSync as existsSync7, statSync as statSync2 } from "fs";
 import { join as join2 } from "path";
-import { parse as parseYaml3 } from "yaml";
 
 // src/memory-file-ingest.ts
 import { readFileSync as readFileSync5, existsSync as existsSync6, readdirSync } from "fs";
@@ -1908,6 +1937,13 @@ function mapMemoryTypeToObservationType(memoryType) {
 }
 
 // src/hooks/post-tool-use.ts
+var _yamlParser = null;
+var parseYaml3 = (content) => {
+  if (!_yamlParser) {
+    _yamlParser = __require("yaml").parse;
+  }
+  return _yamlParser(content);
+};
 var seenReads = /* @__PURE__ */ new Set();
 var currentSessionId = null;
 async function main() {
@@ -1992,7 +2028,7 @@ async function main() {
             const counts = parseTestRunOutput(tool_response ?? "");
             if (counts) {
               const modifiedFeatures = db.prepare(
-                "SELECT feature_key FROM feature_health WHERE modifications_since_test > 0"
+                "SELECT feature_key FROM feature_health WHERE modifications_since_test > 0 LIMIT 10000"
               ).all();
               for (const row of modifiedFeatures) {
                 recordTestResult(db, row.feature_key, counts.passing, counts.failing);
@@ -2135,26 +2171,37 @@ function readStdin() {
     setTimeout(() => resolve5(data), 3e3);
   });
 }
+var _cachedConventions = null;
+var _cachedConventionsPath = null;
+var _cachedConventionsMtimeMs = 0;
+var _conventionDefaults = {
+  knowledgeSourceFiles: ["CLAUDE.md", "MEMORY.md", "corrections.md"],
+  claudeDirName: ".claude"
+};
 function readConventions(cwd) {
-  const defaults = {
-    knowledgeSourceFiles: ["CLAUDE.md", "MEMORY.md", "corrections.md"],
-    claudeDirName: ".claude"
-  };
   try {
     const projectRoot = cwd ?? process.cwd();
     const configPath = join2(projectRoot, "massu.config.yaml");
-    if (!existsSync7(configPath)) return defaults;
+    if (!existsSync7(configPath)) return _conventionDefaults;
+    const mtimeMs = statSync2(configPath).mtimeMs;
+    if (_cachedConventions !== null && _cachedConventionsPath === configPath && _cachedConventionsMtimeMs === mtimeMs) {
+      return _cachedConventions;
+    }
     const content = readFileSync6(configPath, "utf-8");
     const parsed = parseYaml3(content);
-    if (!parsed || typeof parsed !== "object") return defaults;
+    if (!parsed || typeof parsed !== "object") return _conventionDefaults;
     const conventions = parsed.conventions;
-    if (!conventions || typeof conventions !== "object") return defaults;
-    return {
-      knowledgeSourceFiles: Array.isArray(conventions.knowledgeSourceFiles) ? conventions.knowledgeSourceFiles : defaults.knowledgeSourceFiles,
-      claudeDirName: typeof conventions.claudeDirName === "string" ? conventions.claudeDirName : defaults.claudeDirName
+    if (!conventions || typeof conventions !== "object") return _conventionDefaults;
+    const resolved = {
+      knowledgeSourceFiles: Array.isArray(conventions.knowledgeSourceFiles) ? conventions.knowledgeSourceFiles : _conventionDefaults.knowledgeSourceFiles,
+      claudeDirName: typeof conventions.claudeDirName === "string" ? conventions.claudeDirName : _conventionDefaults.claudeDirName
     };
+    _cachedConventions = resolved;
+    _cachedConventionsPath = configPath;
+    _cachedConventionsMtimeMs = mtimeMs;
+    return resolved;
   } catch {
-    return defaults;
+    return _conventionDefaults;
   }
 }
 function isKnowledgeSourceFile(filePath) {
@@ -2182,11 +2229,12 @@ function checkMemoryFileIntegrity(filePath) {
     if (lines.length > MAX_LINES) {
       issues.push(`MEMORY.md exceeds ${MAX_LINES} lines (currently ${lines.length}). Consider archiving old entries.`);
     }
-    const requiredSections = ["# Massu Memory", "## Key Learnings", "## Common Gotchas"];
-    for (const section of requiredSections) {
-      if (!content.includes(section)) {
-        issues.push(`Missing required section: "${section}"`);
-      }
+    if (!/^#\s+Memory(\s+Index)?\s*$/m.test(content)) {
+      issues.push("MEMORY.md missing top-level `# Memory Index` heading");
+    }
+    const linkLineCount = (content.match(/^- \[[^\]]+\]\([^)]+\.md\)/mg) ?? []).length;
+    if (linkLineCount === 0) {
+      issues.push("MEMORY.md has no `- [Title](file.md) \u2014 hook` index lines");
     }
   } catch (_e) {
   }

package/dist/hooks/pre-compact.js

@@ -348,6 +348,22 @@ var RawConfigSchema = z.object({
   accessScopes: z.array(z.string()).optional(),
   domains: z.array(DomainConfigSchema).default([]),
   rules: z.array(PatternRuleConfigSchema).default([]),
+  // P-M-036 (plan-stage-d-medium-sweep): customer-authored CR-style
+  // governance rules. DISTINCT from `rules:` above (path-scoped lint hints
+  // used by pattern-scanner). At config-refresh time these entries are
+  // loaded into the `knowledge_rules` SQLite table with
+  // `source = 'customer-config'` so `massu_knowledge_rule` and the
+  // governance docs surface customer-defined rules alongside framework CRs.
+  governance_rules: z.array(
+    z.object({
+      id: z.string().min(1, "governance_rules[].id is required"),
+      title: z.string().min(1, "governance_rules[].title is required"),
+      description: z.string().min(1, "governance_rules[].description is required"),
+      vr_type: z.string().default("VR-CUSTOM"),
+      reference_path: z.string().optional(),
+      severity: z.enum(["critical", "high", "medium", "low", "info"]).default("medium")
+    }).passthrough()
+  ).default([]),
   analytics: AnalyticsConfigSchema,
   governance: GovernanceConfigSchema,
   security: SecurityConfigSchema,
@@ -466,6 +482,8 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
     accessScopes: parsed.accessScopes,
     domains: parsed.domains,
     rules: parsed.rules,
+    // P-M-036: customer-authored CR-style governance rules.
+    governance_rules: parsed.governance_rules,
     analytics: parsed.analytics,
     governance: parsed.governance,
     security: parsed.security,
@@ -1018,6 +1036,12 @@ function initMemorySchema(db) {
       features TEXT DEFAULT '[]'
     );
   `);
+  const licenseCacheCols = db.prepare(`PRAGMA table_info(license_cache)`).all();
+  if (!licenseCacheCols.some((c) => c.name === "signed_payload_json")) {
+    db.exec(
+      `ALTER TABLE license_cache ADD COLUMN signed_payload_json TEXT NOT NULL DEFAULT ''`
+    );
+  }
   db.exec(`
     CREATE TABLE IF NOT EXISTS failure_classes (
       id INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -1148,11 +1172,12 @@ async function main() {
     const db = getMemoryDb();
     try {
       createSession(db, session_id);
-      const observations = db.prepare(
-        "SELECT * FROM observations WHERE session_id = ? ORDER BY created_at_epoch ASC"
+      const observationsDesc = db.prepare(
+        "SELECT * FROM observations WHERE session_id = ? ORDER BY created_at_epoch DESC LIMIT 1000"
       ).all(session_id);
+      const observations = observationsDesc.reverse();
       const prompts = db.prepare(
-        "SELECT prompt_text FROM user_prompts WHERE session_id = ? ORDER BY prompt_number ASC"
+        "SELECT prompt_text FROM user_prompts WHERE session_id = ? ORDER BY prompt_number ASC LIMIT 10000"
       ).all(session_id);
       const summary = buildSnapshotSummary(observations, prompts);
       addSummary(db, session_id, summary);

package/dist/hooks/pre-delete-check.js

@@ -347,6 +347,22 @@ var RawConfigSchema = z.object({
   accessScopes: z.array(z.string()).optional(),
   domains: z.array(DomainConfigSchema).default([]),
   rules: z.array(PatternRuleConfigSchema).default([]),
+  // P-M-036 (plan-stage-d-medium-sweep): customer-authored CR-style
+  // governance rules. DISTINCT from `rules:` above (path-scoped lint hints
+  // used by pattern-scanner). At config-refresh time these entries are
+  // loaded into the `knowledge_rules` SQLite table with
+  // `source = 'customer-config'` so `massu_knowledge_rule` and the
+  // governance docs surface customer-defined rules alongside framework CRs.
+  governance_rules: z.array(
+    z.object({
+      id: z.string().min(1, "governance_rules[].id is required"),
+      title: z.string().min(1, "governance_rules[].title is required"),
+      description: z.string().min(1, "governance_rules[].description is required"),
+      vr_type: z.string().default("VR-CUSTOM"),
+      reference_path: z.string().optional(),
+      severity: z.enum(["critical", "high", "medium", "low", "info"]).default("medium")
+    }).passthrough()
+  ).default([]),
   analytics: AnalyticsConfigSchema,
   governance: GovernanceConfigSchema,
   security: SecurityConfigSchema,
@@ -465,6 +481,8 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
     accessScopes: parsed.accessScopes,
     domains: parsed.domains,
     rules: parsed.rules,
+    // P-M-036: customer-authored CR-style governance rules.
+    governance_rules: parsed.governance_rules,
     analytics: parsed.analytics,
     governance: parsed.governance,
     security: parsed.security,
@@ -574,7 +592,7 @@ function getFeatureImpact(db, filePaths) {
   const affectedFeatureIds = /* @__PURE__ */ new Set();
   for (const filePath of filePaths) {
     const links = db.prepare(
-      `SELECT feature_id FROM ${t("sentinel_components")} WHERE component_file = ?`
+      `SELECT feature_id FROM ${t("sentinel_components")} WHERE component_file = ? LIMIT 10000`
     ).all(filePath);
     for (const link of links) {
       affectedFeatureIds.add(link.feature_id);
@@ -587,7 +605,7 @@ function getFeatureImpact(db, filePaths) {
     const feature = getFeatureById(db, featureId);
     if (!feature || feature.status !== "active") continue;
     const allComponents = db.prepare(
-      `SELECT component_file, is_primary FROM ${t("sentinel_components")} WHERE feature_id = ?`
+      `SELECT component_file, is_primary FROM ${t("sentinel_components")} WHERE feature_id = ? LIMIT 10000`
     ).all(featureId);
     const affected = allComponents.filter((c) => fileSet.has(c.component_file));
     const remaining = allComponents.filter((c) => !fileSet.has(c.component_file));
@@ -620,6 +638,11 @@ function getFeatureImpact(db, filePaths) {
   };
 }
 
+// src/hooks/lib/write-hook-message.ts
+function writeHookMessage(message) {
+  process.stdout.write(JSON.stringify({ message }) + "\n");
+}
+
 // src/hooks/pre-delete-check.ts
 var PROJECT_ROOT2 = getProjectRoot();
 var KNOWLEDGE_PROTECTED_FILES = [
@@ -688,35 +711,24 @@ function extractDeletedFiles(input) {
   }
   return files;
 }
-async function main() {
+function runPreDeleteChecks(hookInput) {
+  const messages = [];
   try {
-    const input = await readStdin();
-    const hookInput = JSON.parse(input);
     const knowledgeWarning = checkKnowledgeFileProtection(hookInput);
     if (knowledgeWarning) {
-      process.stdout.write(JSON.stringify({ message: knowledgeWarning }));
-      process.exit(0);
-      return;
+      messages.push(knowledgeWarning);
+      return messages;
     }
     const deletedFiles = extractDeletedFiles(hookInput);
-    if (deletedFiles.length === 0) {
-      process.exit(0);
-      return;
-    }
+    if (deletedFiles.length === 0) return messages;
     const db = getDataDb();
-    if (!db) {
-      process.exit(0);
-      return;
-    }
+    if (!db) return messages;
     const SENTINEL_TABLE = t("sentinel");
     try {
       const tableExists = db.prepare(
         `SELECT name FROM sqlite_master WHERE type='table' AND name=?`
       ).get(SENTINEL_TABLE);
-      if (!tableExists) {
-        process.exit(0);
-        return;
-      }
+      if (!tableExists) return messages;
       const impact = getFeatureImpact(db, deletedFiles);
       if (impact.blocked) {
         const msg = [
@@ -737,28 +749,27 @@ async function main() {
         }
         msg.push("");
         msg.push("Create a migration plan before deleting these files.");
-        process.stdout.write(JSON.stringify({ message: msg.join("\n") }));
+        messages.push(msg.join("\n"));
       }
       const pyFiles = deletedFiles.filter((f) => f.endsWith(".py"));
       if (pyFiles.length > 0) {
         try {
           for (const pyFile of pyFiles) {
             const importers = db.prepare(
-              `SELECT source_file FROM ${t("py_imports")} WHERE target_file = ?`
+              `SELECT source_file FROM ${t("py_imports")} WHERE target_file = ? LIMIT 10000`
             ).all(pyFile);
             const routes = db.prepare(
-              `SELECT method, path FROM ${t("py_routes")} WHERE file = ?`
+              `SELECT method, path FROM ${t("py_routes")} WHERE file = ? LIMIT 10000`
             ).all(pyFile);
             const models = db.prepare(
-              `SELECT class_name FROM ${t("py_models")} WHERE file = ?`
+              `SELECT class_name FROM ${t("py_models")} WHERE file = ? LIMIT 10000`
             ).all(pyFile);
             if (importers.length > 0 || routes.length > 0 || models.length > 0) {
               const parts = [];
               if (importers.length > 0) parts.push(`imported by ${importers.length} files`);
               if (routes.length > 0) parts.push(`defines ${routes.length} routes`);
               if (models.length > 0) parts.push(`defines ${models.length} models`);
-              const msg = `PYTHON IMPACT: "${pyFile}" ${parts.join(", ")}. Check dependents before deleting.`;
-              process.stdout.write(JSON.stringify({ message: msg }));
+              messages.push(`PYTHON IMPACT: "${pyFile}" ${parts.join(", ")}. Check dependents before deleting.`);
             }
           }
         } catch {
@@ -769,6 +780,16 @@ async function main() {
     }
   } catch {
   }
+  return messages;
+}
+async function main() {
+  try {
+    const input = await readStdin();
+    const hookInput = JSON.parse(input);
+    const messages = runPreDeleteChecks(hookInput);
+    for (const msg of messages) writeHookMessage(msg);
+  } catch {
+  }
   process.exit(0);
 }
 function readStdin() {
@@ -782,4 +803,9 @@ function readStdin() {
     setTimeout(() => resolve2(data), 400);
   });
 }
-main();
+if (process.argv[1]?.endsWith("pre-delete-check.js") || process.argv[1]?.endsWith("pre-delete-check")) {
+  main();
+}
+export {
+  runPreDeleteChecks
+};