@massu/core 1.9.3 → 1.10.0

package/dist/hooks/auto-learning-pipeline.js

@@ -2,7 +2,7 @@
 import{createRequire as __cr}from"module";const require=__cr(import.meta.url);
 
 // src/hooks/auto-learning-pipeline.ts
-import { execSync } from "child_process";
+import { execFileSync } from "child_process";
 import { existsSync as existsSync2, readFileSync as readFileSync2, unlinkSync, readdirSync, statSync } from "fs";
 import { tmpdir } from "os";
 import { join } from "path";
@@ -490,6 +490,7 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
 }
 
 // src/hooks/auto-learning-pipeline.ts
+var MAX_FULL_DIFF_BYTES = 2 * 1024 * 1024;
 function getSessionFlagPath(sessionId) {
   return join(tmpdir(), "massu-auto-learning", `fixes-${sessionId.slice(0, 12)}.jsonl`);
 }
@@ -516,13 +517,34 @@ async function main() {
     }
     let uncommittedFix = false;
     try {
-      const diff = execSync("git diff --name-only", { cwd: root, timeout: 3e3, encoding: "utf-8" });
-      if (diff.trim()) {
-        const fullDiff = execSync("git diff", { cwd: root, timeout: 5e3, encoding: "utf-8" });
-        const fixPatterns = (fullDiff.match(/^\+.*(try|except|catch|guard|throw|raise|assert|validate|if.*null|if.*nil|if.*None|if.*undefined)/gm) || []).length;
-        const removedBroken = (fullDiff.match(/^-.*(bug|broken|crash|wrong|incorrect|typo|fail|error|miss|stale)/gm) || []).length;
-        if (fixPatterns > 3 || removedBroken > 1) {
-          uncommittedFix = true;
+      const nameOnly = execFileSync("git", ["diff", "--name-only"], {
+        cwd: root,
+        timeout: 3e3,
+        encoding: "utf-8",
+        maxBuffer: 1024 * 1024
+      });
+      if (nameOnly.trim()) {
+        const shortstat = execFileSync("git", ["diff", "--shortstat"], {
+          cwd: root,
+          timeout: 2e3,
+          encoding: "utf-8",
+          maxBuffer: 64 * 1024
+        });
+        const insertions = parseInt(shortstat.match(/(\d+) insertion/)?.[1] ?? "0", 10);
+        const deletions = parseInt(shortstat.match(/(\d+) deletion/)?.[1] ?? "0", 10);
+        const estimatedBytes = (insertions + deletions) * 80;
+        if (estimatedBytes <= MAX_FULL_DIFF_BYTES) {
+          const fullDiff = execFileSync("git", ["diff"], {
+            cwd: root,
+            timeout: 5e3,
+            encoding: "utf-8",
+            maxBuffer: MAX_FULL_DIFF_BYTES
+          });
+          const fixPatterns = (fullDiff.match(/^\+.*(try|except|catch|guard|throw|raise|assert|validate|if.*null|if.*nil|if.*None|if.*undefined)/gm) || []).length;
+          const removedBroken = (fullDiff.match(/^-.*(bug|broken|crash|wrong|incorrect|typo|fail|error|miss|stale)/gm) || []).length;
+          if (fixPatterns > 3 || removedBroken > 1) {
+            uncommittedFix = true;
+          }
         }
       }
     } catch {

package/dist/hooks/classify-failure.js

@@ -12,6 +12,13 @@ import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+
+// src/lib/memory-path.ts
+function encodeMemoryDirName(projectRoot) {
+  return projectRoot.replace(/\//g, "-");
+}
+
+// src/config.ts
 var DomainConfigSchema = z.object({
   name: z.string().default("Unknown"),
   routers: z.array(z.string()).default([]),
@@ -516,7 +523,7 @@ function getResolvedPaths() {
     plansDir: resolve(root, "docs/plans"),
     docsDir: resolve(root, "docs"),
     claudeDir: resolve(root, claudeDirName),
-    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
     sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
     sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
     mcpJsonPath: resolve(root, ".mcp.json"),

package/dist/hooks/cost-tracker.js

@@ -12,6 +12,13 @@ import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+
+// src/lib/memory-path.ts
+function encodeMemoryDirName(projectRoot) {
+  return projectRoot.replace(/\//g, "-");
+}
+
+// src/config.ts
 var DomainConfigSchema = z.object({
   name: z.string().default("Unknown"),
   routers: z.array(z.string()).default([]),
@@ -516,7 +523,7 @@ function getResolvedPaths() {
     plansDir: resolve(root, "docs/plans"),
     docsDir: resolve(root, "docs"),
     claudeDir: resolve(root, claudeDirName),
-    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
     sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
     sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
     mcpJsonPath: resolve(root, ".mcp.json"),

package/dist/hooks/fix-detector.js

@@ -2,7 +2,7 @@
 import{createRequire as __cr}from"module";const require=__cr(import.meta.url);
 
 // src/hooks/fix-detector.ts
-import { execSync } from "child_process";
+import { execFileSync } from "child_process";
 import { existsSync as existsSync2, appendFileSync, mkdirSync, readFileSync as readFileSync2 } from "fs";
 import { tmpdir } from "os";
 import { join } from "path";
@@ -565,9 +565,9 @@ async function main() {
     const root = getProjectRoot();
     let diff = "";
     try {
-      diff = execSync(`git diff -- "${filePath}"`, { cwd: root, timeout: 3e3, encoding: "utf-8" });
+      diff = execFileSync("git", ["diff", "--", filePath], { cwd: root, timeout: 3e3, encoding: "utf-8" });
       if (!diff) {
-        diff = execSync(`git diff HEAD -- "${filePath}"`, { cwd: root, timeout: 3e3, encoding: "utf-8" });
+        diff = execFileSync("git", ["diff", "HEAD", "--", filePath], { cwd: root, timeout: 3e3, encoding: "utf-8" });
       }
     } catch {
       process.exit(0);

package/dist/hooks/incident-pipeline.js

@@ -11,6 +11,13 @@ import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+
+// src/lib/memory-path.ts
+function encodeMemoryDirName(projectRoot) {
+  return projectRoot.replace(/\//g, "-");
+}
+
+// src/config.ts
 var DomainConfigSchema = z.object({
   name: z.string().default("Unknown"),
   routers: z.array(z.string()).default([]),
@@ -515,7 +522,7 @@ function getResolvedPaths() {
     plansDir: resolve(root, "docs/plans"),
     docsDir: resolve(root, "docs"),
     claudeDir: resolve(root, claudeDirName),
-    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
     sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
     sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
     mcpJsonPath: resolve(root, ".mcp.json"),

package/dist/hooks/post-edit-context.js

@@ -10,6 +10,13 @@ import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+
+// src/lib/memory-path.ts
+function encodeMemoryDirName(projectRoot) {
+  return projectRoot.replace(/\//g, "-");
+}
+
+// src/config.ts
 var DomainConfigSchema = z.object({
   name: z.string().default("Unknown"),
   routers: z.array(z.string()).default([]),
@@ -514,7 +521,7 @@ function getResolvedPaths() {
     plansDir: resolve(root, "docs/plans"),
     docsDir: resolve(root, "docs"),
     claudeDir: resolve(root, claudeDirName),
-    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
     sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
     sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
     mcpJsonPath: resolve(root, ".mcp.json"),

package/dist/hooks/post-tool-use.js

@@ -12,6 +12,13 @@ import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+
+// src/lib/memory-path.ts
+function encodeMemoryDirName(projectRoot) {
+  return projectRoot.replace(/\//g, "-");
+}
+
+// src/config.ts
 var DomainConfigSchema = z.object({
   name: z.string().default("Unknown"),
   routers: z.array(z.string()).default([]),
@@ -516,7 +523,7 @@ function getResolvedPaths() {
     plansDir: resolve(root, "docs/plans"),
     docsDir: resolve(root, "docs"),
     claudeDir: resolve(root, claudeDirName),
-    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
     sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
     sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
     mcpJsonPath: resolve(root, ".mcp.json"),
@@ -1448,6 +1455,32 @@ function trackModification(db, featureKey) {
     `).run(featureKey);
   }
 }
+function recordTestResult(db, featureKey, passing, failing) {
+  const existing = db.prepare(
+    "SELECT * FROM feature_health WHERE feature_key = ?"
+  ).get(featureKey);
+  const healthScore = calculateHealthScore(passing, failing, 0, (/* @__PURE__ */ new Date()).toISOString(), existing?.last_modified);
+  db.prepare(`
+    INSERT INTO feature_health
+    (feature_key, last_tested, test_coverage_pct, health_score, tests_passing, tests_failing, modifications_since_test)
+    VALUES (?, datetime('now'), ?, ?, ?, ?, 0)
+    ON CONFLICT(feature_key) DO UPDATE SET
+      last_tested = datetime('now'),
+      health_score = ?,
+      tests_passing = ?,
+      tests_failing = ?,
+      modifications_since_test = 0
+  `).run(
+    featureKey,
+    passing > 0 ? passing / (passing + failing) * 100 : 0,
+    healthScore,
+    passing,
+    failing,
+    healthScore,
+    passing,
+    failing
+  );
+}
 
 // src/import-resolver.ts
 import { readFileSync as readFileSync2, existsSync as existsSync3, statSync } from "fs";
@@ -1952,6 +1985,26 @@ async function main() {
         }
       } catch (_securityErr) {
       }
+      try {
+        if (tool_name === "Bash") {
+          const command = tool_input.command ?? "";
+          if (isTestRunnerCommand(command)) {
+            const counts = parseTestRunOutput(tool_response ?? "");
+            if (counts) {
+              const modifiedFeatures = db.prepare(
+                "SELECT feature_key FROM feature_health WHERE modifications_since_test > 0"
+              ).all();
+              for (const row of modifiedFeatures) {
+                recordTestResult(db, row.feature_key, counts.passing, counts.failing);
+              }
+              if (modifiedFeatures.length === 0) {
+                recordTestResult(db, "_session_test_run", counts.passing, counts.failing);
+              }
+            }
+          }
+        }
+      } catch (_testResultErr) {
+      }
       try {
         if (tool_name === "Edit" || tool_name === "Write") {
           const filePath = tool_input.file_path ?? "";
@@ -2027,6 +2080,50 @@ function updatePlanProgress(db, sessionId, progress) {
     addSummary(db, sessionId, { planProgress: progressMap });
   }
 }
+function isTestRunnerCommand(command) {
+  const trimmed = command.trim().toLowerCase();
+  const stripped = trimmed.replace(/^cd\s+\S+\s*(&&|;)\s*/, "").replace(/^\(\s*cd\s+\S+\s*(&&|;)\s*/, "");
+  const testRunnerPrefixes = [
+    "npm test",
+    "npm run test",
+    "npx vitest",
+    "npx jest",
+    "vitest",
+    "jest",
+    "pnpm test",
+    "pnpm run test",
+    "yarn test",
+    "pytest",
+    "go test",
+    "cargo test"
+  ];
+  return testRunnerPrefixes.some((prefix) => stripped.startsWith(prefix));
+}
+function parseTestRunOutput(output) {
+  const vitestSplit = output.match(/Tests?\s+(?:(\d+)\s+failed\s+\|\s+)?(\d+)\s+passed/);
+  if (vitestSplit) {
+    return {
+      passing: parseInt(vitestSplit[2], 10),
+      failing: vitestSplit[1] ? parseInt(vitestSplit[1], 10) : 0
+    };
+  }
+  const jest = output.match(/Tests?:\s+(?:(\d+)\s+failed,\s+)?(\d+)\s+passed/);
+  if (jest) {
+    return {
+      passing: parseInt(jest[2], 10),
+      failing: jest[1] ? parseInt(jest[1], 10) : 0
+    };
+  }
+  const pytestPassed = output.match(/(\d+)\s+passed/);
+  const pytestFailed = output.match(/(\d+)\s+failed/);
+  if (pytestPassed) {
+    return {
+      passing: parseInt(pytestPassed[1], 10),
+      failing: pytestFailed ? parseInt(pytestFailed[1], 10) : 0
+    };
+  }
+  return null;
+}
 function readStdin() {
   return new Promise((resolve5) => {
     let data = "";

package/dist/hooks/pre-compact.js

@@ -12,6 +12,13 @@ import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+
+// src/lib/memory-path.ts
+function encodeMemoryDirName(projectRoot) {
+  return projectRoot.replace(/\//g, "-");
+}
+
+// src/config.ts
 var DomainConfigSchema = z.object({
   name: z.string().default("Unknown"),
   routers: z.array(z.string()).default([]),
@@ -516,7 +523,7 @@ function getResolvedPaths() {
     plansDir: resolve(root, "docs/plans"),
     docsDir: resolve(root, "docs"),
     claudeDir: resolve(root, claudeDirName),
-    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
     sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
     sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
     mcpJsonPath: resolve(root, ".mcp.json"),

package/dist/hooks/pre-delete-check.js

@@ -11,6 +11,13 @@ import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+
+// src/lib/memory-path.ts
+function encodeMemoryDirName(projectRoot) {
+  return projectRoot.replace(/\//g, "-");
+}
+
+// src/config.ts
 var DomainConfigSchema = z.object({
   name: z.string().default("Unknown"),
   routers: z.array(z.string()).default([]),
@@ -515,7 +522,7 @@ function getResolvedPaths() {
     plansDir: resolve(root, "docs/plans"),
     docsDir: resolve(root, "docs"),
     claudeDir: resolve(root, claudeDirName),
-    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
     sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
     sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
     mcpJsonPath: resolve(root, ".mcp.json"),

package/dist/hooks/quality-event.js

@@ -12,6 +12,13 @@ import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+
+// src/lib/memory-path.ts
+function encodeMemoryDirName(projectRoot) {
+  return projectRoot.replace(/\//g, "-");
+}
+
+// src/config.ts
 var DomainConfigSchema = z.object({
   name: z.string().default("Unknown"),
   routers: z.array(z.string()).default([]),
@@ -516,7 +523,7 @@ function getResolvedPaths() {
     plansDir: resolve(root, "docs/plans"),
     docsDir: resolve(root, "docs"),
     claudeDir: resolve(root, claudeDirName),
-    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
     sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
     sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
     mcpJsonPath: resolve(root, ".mcp.json"),

package/dist/hooks/session-end.js

@@ -12,6 +12,13 @@ import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+
+// src/lib/memory-path.ts
+function encodeMemoryDirName(projectRoot) {
+  return projectRoot.replace(/\//g, "-");
+}
+
+// src/config.ts
 var DomainConfigSchema = z.object({
   name: z.string().default("Unknown"),
   routers: z.array(z.string()).default([]),
@@ -516,7 +523,7 @@ function getResolvedPaths() {
     plansDir: resolve(root, "docs/plans"),
     docsDir: resolve(root, "docs"),
     claudeDir: resolve(root, claudeDirName),
-    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
     sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
     sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
     mcpJsonPath: resolve(root, ".mcp.json"),
@@ -1411,6 +1418,7 @@ function estimateTokens(text) {
 // src/cloud-sync.ts
 var MAX_RETRIES = 3;
 var RETRY_DELAYS = [1e3, 2e3, 4e3];
+var DEFAULT_CLOUD_REQUEST_TIMEOUT_MS = 2e3;
 async function syncToCloud(db, payload) {
   const config = getConfig();
   const cloud = config.cloud;
@@ -1436,6 +1444,7 @@ async function syncToCloud(db, payload) {
     filteredPayload.audit = payload.audit;
   }
   let lastError = "";
+  const requestTimeoutMs = cloud.requestTimeoutMs ?? DEFAULT_CLOUD_REQUEST_TIMEOUT_MS;
   for (let attempt = 0; attempt < MAX_RETRIES; attempt++) {
     try {
       const response = await fetch(endpoint, {
@@ -1444,7 +1453,11 @@ async function syncToCloud(db, payload) {
           "Content-Type": "application/json",
           "Authorization": `Bearer ${cloud.apiKey}`
         },
-        body: JSON.stringify(filteredPayload)
+        body: JSON.stringify(filteredPayload),
+        // P-H003: bounded request — AbortSignal.timeout fires AbortError when
+        // the request stalls (DNS failure, TCP unreachable, slow server). Cleans
+        // up before hook timeout kills the whole process.
+        signal: AbortSignal.timeout(requestTimeoutMs)
       });
       if (!response.ok) {
         lastError = `HTTP ${response.status}: ${response.statusText}`;
@@ -1469,6 +1482,9 @@ async function syncToCloud(db, payload) {
       };
     } catch (err) {
       lastError = err instanceof Error ? err.message : String(err);
+      if (err instanceof Error && (err.name === "AbortError" || err.name === "TimeoutError")) {
+        break;
+      }
       if (attempt < MAX_RETRIES - 1) {
         await sleep(RETRY_DELAYS[attempt]);
         continue;

package/dist/hooks/session-start.js

@@ -5804,6 +5804,13 @@ import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+
+// src/lib/memory-path.ts
+function encodeMemoryDirName(projectRoot) {
+  return projectRoot.replace(/\//g, "-");
+}
+
+// src/config.ts
 var DomainConfigSchema = z.object({
   name: z.string().default("Unknown"),
   routers: z.array(z.string()).default([]),
@@ -6308,7 +6315,7 @@ function getResolvedPaths() {
     plansDir: resolve(root, "docs/plans"),
     docsDir: resolve(root, "docs"),
     claudeDir: resolve(root, claudeDirName),
-    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
     sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
     sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
     mcpJsonPath: resolve(root, ".mcp.json"),

package/dist/hooks/user-prompt.js

@@ -12,6 +12,13 @@ import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { parse as parseYaml } from "yaml";
 import { z } from "zod";
+
+// src/lib/memory-path.ts
+function encodeMemoryDirName(projectRoot) {
+  return projectRoot.replace(/\//g, "-");
+}
+
+// src/config.ts
 var DomainConfigSchema = z.object({
   name: z.string().default("Unknown"),
   routers: z.array(z.string()).default([]),
@@ -516,7 +523,7 @@ function getResolvedPaths() {
     plansDir: resolve(root, "docs/plans"),
     docsDir: resolve(root, "docs"),
     claudeDir: resolve(root, claudeDirName),
-    memoryDir: resolve(homedir(), claudeDirName, "projects", root.replace(/\//g, "-"), "memory"),
+    memoryDir: resolve(homedir(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
     sessionStatePath: resolve(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
     sessionArchivePath: resolve(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
     mcpJsonPath: resolve(root, ".mcp.json"),

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@massu/core",
-  "version": "1.9.3",
+  "version": "1.10.0",
   "type": "module",
-  "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 72 total), 55+ workflow commands, 11 agents, 20+ patterns",
+  "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 73 total), 59 workflow commands, 11 agents, 20+ patterns",
   "main": "src/server.ts",
   "exports": {
     ".": "./src/server.ts",

package/src/backfill-sessions.ts

@@ -14,6 +14,7 @@ import { getMemoryDb, createSession, addObservation, addSummary, addUserPrompt,
 import { parseTranscript, extractUserMessages, getLastAssistantMessage } from './transcript-parser.ts';
 import { extractObservationsFromEntries } from './observation-extractor.ts';
 import { getProjectRoot, getConfig } from './config.ts';
+import { encodeMemoryDirName } from './lib/memory-path.ts';
 
 /**
  * Auto-detect the Claude Code project transcript directory.
@@ -23,8 +24,8 @@ function findTranscriptDir(): string {
   const home = process.env.HOME ?? '~';
   const projectRoot = getProjectRoot();
   const claudeDirName = getConfig().conventions?.claudeDirName ?? '.claude';
-  // Claude Code escapes the path by replacing / with -
-  const escapedPath = projectRoot.replace(/\//g, '-');
+  // Claude Code escapes the path by replacing / with -. Shared helper is SoT.
+  const escapedPath = encodeMemoryDirName(projectRoot);
   const candidate = resolve(home, `${claudeDirName}/projects`, escapedPath);
   if (existsSync(candidate)) return candidate;
   // Fallback: scan projects dir for directories matching the project name

package/src/cli.ts

@@ -42,6 +42,16 @@ async function main(): Promise<void> {
       await runInstallHooks();
       break;
     }
+    case 'hook-runner': {
+      // Dynamic hook dispatcher — invoked by Claude Code's hook command lines
+      // (settings.json -> `npx -y @massu/core@<version> hook-runner <name>`).
+      // Closes P-003 by resolving the hook file at fire-time instead of baking
+      // an absolute npx-cache path at install-time.
+      const { runHookRunner } = await import('./commands/hook-runner.ts');
+      const result = await runHookRunner(args.slice(1));
+      process.exit(result.exitCode);
+      return;
+    }
     case 'install-commands': {
       const { runInstallCommands } = await import('./commands/install-commands.ts');
       await runInstallCommands();

package/src/cloud-sync.ts

@@ -60,6 +60,12 @@ export interface SyncResult {
 const MAX_RETRIES = 3;
 const RETRY_DELAYS = [1000, 2000, 4000]; // exponential backoff
 
+// P-H003 (plan-stage-c-high-batch): bound each HTTP request so offline
+// customers don't burn the entire Stop-hook 15s budget on a single
+// unreachable endpoint. Default 2_000ms is well under hook timeout while
+// still tolerating typical latency. Override via config.cloud.requestTimeoutMs.
+const DEFAULT_CLOUD_REQUEST_TIMEOUT_MS = 2_000;
+
 /**
  * Sync data to the cloud endpoint.
  * Respects config flags for selective sync.
@@ -103,6 +109,8 @@ export async function syncToCloud(
 
   // Attempt sync with retry
   let lastError = '';
+  const requestTimeoutMs = (cloud as { requestTimeoutMs?: number }).requestTimeoutMs
+    ?? DEFAULT_CLOUD_REQUEST_TIMEOUT_MS;
   for (let attempt = 0; attempt < MAX_RETRIES; attempt++) {
     try {
       const response = await fetch(endpoint, {
@@ -112,6 +120,10 @@ export async function syncToCloud(
           'Authorization': `Bearer ${cloud.apiKey}`,
         },
         body: JSON.stringify(filteredPayload),
+        // P-H003: bounded request — AbortSignal.timeout fires AbortError when
+        // the request stalls (DNS failure, TCP unreachable, slow server). Cleans
+        // up before hook timeout kills the whole process.
+        signal: AbortSignal.timeout(requestTimeoutMs),
       });
 
       if (!response.ok) {
@@ -140,6 +152,12 @@ export async function syncToCloud(
       };
     } catch (err) {
       lastError = err instanceof Error ? err.message : String(err);
+      // P-H003: AbortError from AbortSignal.timeout means the request stalled
+      // (customer offline / DNS failure / unreachable). Don't burn the remaining
+      // hook budget retrying; queue for later and bail.
+      if (err instanceof Error && (err.name === 'AbortError' || err.name === 'TimeoutError')) {
+        break;
+      }
       if (attempt < MAX_RETRIES - 1) {
         await sleep(RETRY_DELAYS[attempt]);
         continue;

package/src/commands/doctor.ts

@@ -8,7 +8,7 @@
  * 1. massu.config.yaml exists and parses correctly
  * 2. .mcp.json has massu entry
  * 3. .claude/settings.local.json has hooks config
- * 4. All 11 compiled hook files exist
+ * 4. All compiled hook files exist (count sourced from lib/hook-registry.ts SoT)
  * 5. Knowledge DB exists (.massu/memory.db)
  * 6. Memory directory exists (~/.claude/projects/.../memory/)
  * 7. Shell hooks wired in settings.local.json
@@ -24,6 +24,7 @@ import { parse as parseYaml } from 'yaml';
 import { getConfig, getResolvedPaths } from '../config.ts';
 import { getCurrentTier, getLicenseInfo, daysUntilExpiry } from '../license.ts';
 import { readSettingsAtPath } from '../lib/settings-local.ts';
+import { getExpectedHookFiles } from '../lib/hook-registry.ts';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -42,19 +43,13 @@ interface CheckResult {
 // Hook Files
 // ============================================================
 
-const EXPECTED_HOOKS = [
-  'session-start.js',
-  'session-end.js',
-  'post-tool-use.js',
-  'user-prompt.js',
-  'pre-compact.js',
-  'pre-delete-check.js',
-  'post-edit-context.js',
-  'security-gate.js',
-  'cost-tracker.js',
-  'quality-event.js',
-  'intent-suggester.js',
-];
+// P-H001 (plan-stage-c-high-batch): drift-fix. EXPECTED_HOOKS now consumes
+// the lib/hook-registry.ts SoT; the registry-parity drift-guard test asserts
+// this list matches `src/hooks/*.ts` AND `buildHooksConfig()`. Previously
+// a hand-maintained list of 11 entries silently drifted from the 16 hooks
+// actually registered by installHooks(), letting hook files go missing
+// without doctor noticing.
+const EXPECTED_HOOKS: readonly string[] = getExpectedHookFiles();
 
 // ============================================================
 // Individual Checks