@mnemonik/shared 7.49.1 → 7.51.0

package/dist/gitEditDetector.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Shell-write classification via filesystem observation, not command parsing.
+ *
+ * Permissive/auto-approve modes steer agents toward the shell for file work on
+ * every host, and a shell payload carries a command string, not a file path —
+ * so post-shell events reached the server with no edit to report and the
+ * session's filesEdited/ideEditCount stayed empty, silencing every edit-gated
+ * signal (checkpoint pressure above all). Parsing the command text for written
+ * paths was considered and rejected (decision 2026-08-19: shell semantics make
+ * path extraction guesswork). What git reports about the working tree is not
+ * guesswork.
+ *
+ * Mechanism: snapshot the set of dirty paths (`git status --porcelain -uall`)
+ * at session start, and after each shell call diff the current set against the
+ * snapshot. Paths that are newly dirty were written between the two
+ * observations; report those as edits and roll the snapshot forward. Only
+ * additions count — a commit or stash SHRINKS the set, and saving work is not
+ * new work. Edit tool writes are unioned into the snapshot by each host's edit
+ * handler so they are never re-credited to the next shell call.
+ *
+ * Host-agnostic by construction: the caller owns session identity and passes
+ * the absolute path of its own private snapshot file. An empty `snapshotFile`
+ * is the caller's "no usable session identity" signal and every entry point
+ * no-ops on it — a synthesized or fallback id must never own a snapshot.
+ * Because the diff rolls the snapshot forward, it is idempotent: a host with
+ * no post-shell event may call it from several carrier events and each new
+ * write is still reported exactly once.
+ *
+ * Known limits, accepted by design:
+ * - A file already dirty at baseline that the shell modifies again is not
+ *   re-reported (set membership, not content, is compared).
+ * - Any working-tree change between two observations is credited to the shell
+ *   call, including background processes. For "does this session have unsaved
+ *   work" that is the right signal.
+ * - Only the repo containing cwd is observed. Not a git repo → report nothing
+ *   rather than guess.
+ */
+/**
+ * The current dirty set as absolute paths, or null when cwd is not inside a
+ * git repo, git is unavailable, a bound is exceeded, or the set is too large
+ * to be agent work.
+ */
+export declare function listGitDirtyPaths(cwd: string): {
+    root: string;
+    paths: string[];
+} | null;
+/** Session start: baseline the dirty set so pre-existing dirt is never reported. */
+export declare function captureGitDirtyBaseline(snapshotFile: string, cwd: string): void;
+/**
+ * After a shell call: paths newly dirty since the last observation, capped.
+ * Rolls the snapshot forward. Without a usable baseline it establishes one
+ * and reports nothing — degrading toward silence, never toward a false edit.
+ */
+export declare function diffGitDirtySnapshot(snapshotFile: string, cwd: string): string[];
+/**
+ * After an edit tool: fold tool-reported edits into the snapshot so the next
+ * shell diff does not re-credit them. Only when a baseline exists — seeding a
+ * partial snapshot would make later diffs report pre-existing dirt.
+ */
+export declare function addPathsToGitDirtySnapshot(snapshotFile: string, paths: string[]): void;
+//# sourceMappingURL=gitEditDetector.d.ts.map

package/dist/gitEditDetector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitEditDetector.d.ts","sourceRoot":"","sources":["../src/gitEditDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAsCH;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAuBvF;AA0BD,oFAAoF;AACpF,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAK/E;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAUhF;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAQtF"}

package/dist/gitEditDetector.js

@@ -0,0 +1,165 @@
+/**
+ * Shell-write classification via filesystem observation, not command parsing.
+ *
+ * Permissive/auto-approve modes steer agents toward the shell for file work on
+ * every host, and a shell payload carries a command string, not a file path —
+ * so post-shell events reached the server with no edit to report and the
+ * session's filesEdited/ideEditCount stayed empty, silencing every edit-gated
+ * signal (checkpoint pressure above all). Parsing the command text for written
+ * paths was considered and rejected (decision 2026-08-19: shell semantics make
+ * path extraction guesswork). What git reports about the working tree is not
+ * guesswork.
+ *
+ * Mechanism: snapshot the set of dirty paths (`git status --porcelain -uall`)
+ * at session start, and after each shell call diff the current set against the
+ * snapshot. Paths that are newly dirty were written between the two
+ * observations; report those as edits and roll the snapshot forward. Only
+ * additions count — a commit or stash SHRINKS the set, and saving work is not
+ * new work. Edit tool writes are unioned into the snapshot by each host's edit
+ * handler so they are never re-credited to the next shell call.
+ *
+ * Host-agnostic by construction: the caller owns session identity and passes
+ * the absolute path of its own private snapshot file. An empty `snapshotFile`
+ * is the caller's "no usable session identity" signal and every entry point
+ * no-ops on it — a synthesized or fallback id must never own a snapshot.
+ * Because the diff rolls the snapshot forward, it is idempotent: a host with
+ * no post-shell event may call it from several carrier events and each new
+ * write is still reported exactly once.
+ *
+ * Known limits, accepted by design:
+ * - A file already dirty at baseline that the shell modifies again is not
+ *   re-reported (set membership, not content, is compared).
+ * - Any working-tree change between two observations is credited to the shell
+ *   call, including background processes. For "does this session have unsaved
+ *   work" that is the right signal.
+ * - Only the repo containing cwd is observed. Not a git repo → report nothing
+ *   rather than guess.
+ */
+import { execFileSync } from 'node:child_process';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+/** Bounded so a pathological repo cannot stall the hook's PostToolUse turn. */
+const GIT_REV_PARSE_TIMEOUT_MS = 400;
+const GIT_STATUS_TIMEOUT_MS = 800;
+/** T5, the widest volume tier, needs 15 files; 25 keeps tier semantics intact. */
+const MAX_REPORTED_PATHS_PER_CALL = 25;
+/**
+ * A dirty set larger than this is not agent work (mass generation, a missing
+ * .gitignore). Classification is skipped rather than flooding filesEdited.
+ */
+const MAX_SNAPSHOT_PATHS = 2000;
+function runGit(cwd, args, timeout) {
+    try {
+        // --no-optional-locks is a TOP-LEVEL git option: passed after the
+        // subcommand git exits 129 and every observation silently reports nothing.
+        return execFileSync('git', ['--no-optional-locks', '-C', cwd, ...args], {
+            timeout,
+            encoding: 'utf8',
+            maxBuffer: 8 * 1024 * 1024,
+            stdio: ['ignore', 'pipe', 'ignore'],
+        });
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The current dirty set as absolute paths, or null when cwd is not inside a
+ * git repo, git is unavailable, a bound is exceeded, or the set is too large
+ * to be agent work.
+ */
+export function listGitDirtyPaths(cwd) {
+    const rootOut = runGit(cwd, ['rev-parse', '--show-toplevel'], GIT_REV_PARSE_TIMEOUT_MS);
+    const root = rootOut?.trim();
+    if (!root)
+        return null;
+    const statusOut = runGit(cwd, ['status', '--porcelain=v1', '-z', '--untracked-files=all'], GIT_STATUS_TIMEOUT_MS);
+    if (statusOut === null)
+        return null;
+    const paths = [];
+    const tokens = statusOut.split('\0');
+    for (let i = 0; i < tokens.length; i++) {
+        const entry = tokens[i];
+        if (!entry || entry.length < 4)
+            continue;
+        // "XY <path>"; a rename/copy entry is followed by the ORIGINAL path as its
+        // own NUL token — consume it so it is never misread as a status entry.
+        const statusCode = entry.slice(0, 2);
+        paths.push(join(root, entry.slice(3)));
+        if (statusCode.startsWith('R') || statusCode.startsWith('C'))
+            i++;
+        if (paths.length > MAX_SNAPSHOT_PATHS)
+            return null;
+    }
+    return { root, paths };
+}
+function readSnapshot(snapshotFile) {
+    try {
+        const parsed = JSON.parse(readFileSync(snapshotFile, 'utf8'));
+        if (parsed?.v !== 1 || typeof parsed.root !== 'string' || !Array.isArray(parsed.paths)) {
+            return null;
+        }
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+function writeSnapshot(snapshotFile, root, paths) {
+    try {
+        mkdirSync(dirname(snapshotFile), { recursive: true, mode: 0o700 });
+        writeFileSync(snapshotFile, JSON.stringify({ v: 1, root, paths }), {
+            mode: 0o600,
+        });
+    }
+    catch {
+        // Best-effort: a missing snapshot degrades to "report nothing", never to a
+        // wrong report.
+    }
+}
+/** Session start: baseline the dirty set so pre-existing dirt is never reported. */
+export function captureGitDirtyBaseline(snapshotFile, cwd) {
+    if (!snapshotFile)
+        return;
+    const current = listGitDirtyPaths(cwd);
+    if (!current)
+        return;
+    writeSnapshot(snapshotFile, current.root, current.paths);
+}
+/**
+ * After a shell call: paths newly dirty since the last observation, capped.
+ * Rolls the snapshot forward. Without a usable baseline it establishes one
+ * and reports nothing — degrading toward silence, never toward a false edit.
+ */
+export function diffGitDirtySnapshot(snapshotFile, cwd) {
+    if (!snapshotFile)
+        return [];
+    const current = listGitDirtyPaths(cwd);
+    if (!current)
+        return [];
+    const baseline = readSnapshot(snapshotFile);
+    writeSnapshot(snapshotFile, current.root, current.paths);
+    if (!baseline || baseline.root !== current.root)
+        return [];
+    const known = new Set(baseline.paths);
+    const additions = current.paths.filter((p) => !known.has(p));
+    return additions.slice(0, MAX_REPORTED_PATHS_PER_CALL);
+}
+/**
+ * After an edit tool: fold tool-reported edits into the snapshot so the next
+ * shell diff does not re-credit them. Only when a baseline exists — seeding a
+ * partial snapshot would make later diffs report pre-existing dirt.
+ */
+export function addPathsToGitDirtySnapshot(snapshotFile, paths) {
+    if (!snapshotFile || paths.length === 0)
+        return;
+    const snapshot = readSnapshot(snapshotFile);
+    if (!snapshot)
+        return;
+    const known = new Set(snapshot.paths);
+    const additions = paths.filter((p) => !known.has(p));
+    if (additions.length === 0)
+        return;
+    writeSnapshot(snapshotFile, snapshot.root, [...snapshot.paths, ...additions]);
+}
+//# sourceMappingURL=gitEditDetector.js.map

package/dist/gitEditDetector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitEditDetector.js","sourceRoot":"","sources":["../src/gitEditDetector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,+EAA+E;AAC/E,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,kFAAkF;AAClF,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC;;;GAGG;AACH,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAQhC,SAAS,MAAM,CAAC,GAAW,EAAE,IAAc,EAAE,OAAe;IAC1D,IAAI,CAAC;QACH,kEAAkE;QAClE,2EAA2E;QAC3E,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE;YACtE,OAAO;YACP,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;YAC1B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,SAAS,GAAG,MAAM,CACtB,GAAG,EACH,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,CAAC,EAC3D,qBAAqB,CACtB,CAAC;IACF,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACzC,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,CAAC,EAAE,CAAC;QAClE,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB;YAAE,OAAO,IAAI,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAkB,CAAC;QAC/E,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,YAAoB,EAAE,IAAY,EAAE,KAAe;IACxE,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAA0B,CAAC,EAAE;YACzF,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,gBAAgB;IAClB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CAAC,YAAoB,EAAE,GAAW;IACvE,IAAI,CAAC,YAAY;QAAE,OAAO;IAC1B,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,YAAoB,EAAE,GAAW;IACpE,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAC5C,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,YAAoB,EAAE,KAAe;IAC9E,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACnC,aAAa,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/hookRuntime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hookRuntime.d.ts","sourceRoot":"","sources":["../src/hookRuntime.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CA6BjC;AAID,wBAAsB,iBAAiB,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAYzE"}
+{"version":3,"file":"hookRuntime.d.ts","sourceRoot":"","sources":["../src/hookRuntime.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CA8BjC;AAID,wBAAsB,iBAAiB,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAYzE"}

package/dist/hookRuntime.js

@@ -5,8 +5,9 @@ const identityCache = new Map();
 export async function findProjectIdentity(startCwd, opts = {}) {
     if (!startCwd)
         return null;
-    if (identityCache.has(startCwd))
-        return identityCache.get(startCwd);
+    const cached = identityCache.get(startCwd);
+    if (cached !== undefined)
+        return cached;
     let directory = isAbsolute(startCwd) ? startCwd : resolve(startCwd);
     const maxDepth = opts.maxDepth ?? 10;
     for (let depth = 0; depth <= maxDepth; depth += 1) {

package/dist/hookRuntime.js.map

@@ -1 +1 @@
-{"version":3,"file":"hookRuntime.js","sourceRoot":"","sources":["../src/hookRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAQtC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkC,CAAC;AAEhE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,IAAI,GAA0B,EAAE;IAEhC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;IAErE,IAAI,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,QAAQ,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAC/B,CAAC;YAC7B,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxE,MAAM,QAAQ,GAAoB;oBAChC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;oBACpF,WAAW,EAAE,SAAS;iBACvB,CAAC;gBACF,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACtC,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM;QAChC,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,eAAe,GAAG,KAAK,CAAC;AAE5B,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAI,QAAkB;IAC3D,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAyC,CAAC;IACzD,IAAI,CAAC,eAAe,IAAI,MAAM,EAAE,EAAE,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACtF,MAAM,CAAC,KAAK,CACV,mFAAmF;YACjF,qEAAqE;YACrE,0GAA0G,CAC7G,CAAC;QACF,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"hookRuntime.js","sourceRoot":"","sources":["../src/hookRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAQtC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkC,CAAC;AAEhE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,IAAI,GAA0B,EAAE;IAEhC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,IAAI,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IACrC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,QAAQ,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAC/B,CAAC;YAC7B,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxE,MAAM,QAAQ,GAAoB;oBAChC,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;oBACpF,WAAW,EAAE,SAAS;iBACvB,CAAC;gBACF,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACtC,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0DAA0D;QAC5D,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM;QAChC,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,eAAe,GAAG,KAAK,CAAC;AAE5B,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAI,QAAkB;IAC3D,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAyC,CAAC;IACzD,IAAI,CAAC,eAAe,IAAI,MAAM,EAAE,EAAE,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACtF,MAAM,CAAC,KAAK,CACV,mFAAmF;YACjF,qEAAqE;YACrE,0GAA0G,CAC7G,CAAC;QACF,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemonik/shared",
-  "version": "7.49.1",
+  "version": "7.51.0",
   "description": "Shared constants and utilities for Mnemonik packages",
   "repository": {
     "type": "git",
@@ -30,6 +30,10 @@
     "./context-budget": {
       "import": "./dist/contextBudget.js",
       "types": "./dist/contextBudget.d.ts"
+    },
+    "./git-edit-detector": {
+      "import": "./dist/gitEditDetector.js",
+      "types": "./dist/gitEditDetector.d.ts"
     }
   },
   "scripts": {

package/src/gitEditDetector.ts

@@ -0,0 +1,167 @@
+/**
+ * Shell-write classification via filesystem observation, not command parsing.
+ *
+ * Permissive/auto-approve modes steer agents toward the shell for file work on
+ * every host, and a shell payload carries a command string, not a file path —
+ * so post-shell events reached the server with no edit to report and the
+ * session's filesEdited/ideEditCount stayed empty, silencing every edit-gated
+ * signal (checkpoint pressure above all). Parsing the command text for written
+ * paths was considered and rejected (decision 2026-08-19: shell semantics make
+ * path extraction guesswork). What git reports about the working tree is not
+ * guesswork.
+ *
+ * Mechanism: snapshot the set of dirty paths (`git status --porcelain -uall`)
+ * at session start, and after each shell call diff the current set against the
+ * snapshot. Paths that are newly dirty were written between the two
+ * observations; report those as edits and roll the snapshot forward. Only
+ * additions count — a commit or stash SHRINKS the set, and saving work is not
+ * new work. Edit tool writes are unioned into the snapshot by each host's edit
+ * handler so they are never re-credited to the next shell call.
+ *
+ * Host-agnostic by construction: the caller owns session identity and passes
+ * the absolute path of its own private snapshot file. An empty `snapshotFile`
+ * is the caller's "no usable session identity" signal and every entry point
+ * no-ops on it — a synthesized or fallback id must never own a snapshot.
+ * Because the diff rolls the snapshot forward, it is idempotent: a host with
+ * no post-shell event may call it from several carrier events and each new
+ * write is still reported exactly once.
+ *
+ * Known limits, accepted by design:
+ * - A file already dirty at baseline that the shell modifies again is not
+ *   re-reported (set membership, not content, is compared).
+ * - Any working-tree change between two observations is credited to the shell
+ *   call, including background processes. For "does this session have unsaved
+ *   work" that is the right signal.
+ * - Only the repo containing cwd is observed. Not a git repo → report nothing
+ *   rather than guess.
+ */
+
+import { execFileSync } from 'node:child_process';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+
+/** Bounded so a pathological repo cannot stall the hook's PostToolUse turn. */
+const GIT_REV_PARSE_TIMEOUT_MS = 400;
+const GIT_STATUS_TIMEOUT_MS = 800;
+/** T5, the widest volume tier, needs 15 files; 25 keeps tier semantics intact. */
+const MAX_REPORTED_PATHS_PER_CALL = 25;
+/**
+ * A dirty set larger than this is not agent work (mass generation, a missing
+ * .gitignore). Classification is skipped rather than flooding filesEdited.
+ */
+const MAX_SNAPSHOT_PATHS = 2000;
+
+interface DirtySnapshot {
+  v: 1;
+  root: string;
+  paths: string[];
+}
+
+function runGit(cwd: string, args: string[], timeout: number): string | null {
+  try {
+    // --no-optional-locks is a TOP-LEVEL git option: passed after the
+    // subcommand git exits 129 and every observation silently reports nothing.
+    return execFileSync('git', ['--no-optional-locks', '-C', cwd, ...args], {
+      timeout,
+      encoding: 'utf8',
+      maxBuffer: 8 * 1024 * 1024,
+      stdio: ['ignore', 'pipe', 'ignore'],
+    });
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * The current dirty set as absolute paths, or null when cwd is not inside a
+ * git repo, git is unavailable, a bound is exceeded, or the set is too large
+ * to be agent work.
+ */
+export function listGitDirtyPaths(cwd: string): { root: string; paths: string[] } | null {
+  const rootOut = runGit(cwd, ['rev-parse', '--show-toplevel'], GIT_REV_PARSE_TIMEOUT_MS);
+  const root = rootOut?.trim();
+  if (!root) return null;
+  const statusOut = runGit(
+    cwd,
+    ['status', '--porcelain=v1', '-z', '--untracked-files=all'],
+    GIT_STATUS_TIMEOUT_MS
+  );
+  if (statusOut === null) return null;
+  const paths: string[] = [];
+  const tokens = statusOut.split('\0');
+  for (let i = 0; i < tokens.length; i++) {
+    const entry = tokens[i];
+    if (!entry || entry.length < 4) continue;
+    // "XY <path>"; a rename/copy entry is followed by the ORIGINAL path as its
+    // own NUL token — consume it so it is never misread as a status entry.
+    const statusCode = entry.slice(0, 2);
+    paths.push(join(root, entry.slice(3)));
+    if (statusCode.startsWith('R') || statusCode.startsWith('C')) i++;
+    if (paths.length > MAX_SNAPSHOT_PATHS) return null;
+  }
+  return { root, paths };
+}
+
+function readSnapshot(snapshotFile: string): DirtySnapshot | null {
+  try {
+    const parsed = JSON.parse(readFileSync(snapshotFile, 'utf8')) as DirtySnapshot;
+    if (parsed?.v !== 1 || typeof parsed.root !== 'string' || !Array.isArray(parsed.paths)) {
+      return null;
+    }
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+
+function writeSnapshot(snapshotFile: string, root: string, paths: string[]): void {
+  try {
+    mkdirSync(dirname(snapshotFile), { recursive: true, mode: 0o700 });
+    writeFileSync(snapshotFile, JSON.stringify({ v: 1, root, paths } satisfies DirtySnapshot), {
+      mode: 0o600,
+    });
+  } catch {
+    // Best-effort: a missing snapshot degrades to "report nothing", never to a
+    // wrong report.
+  }
+}
+
+/** Session start: baseline the dirty set so pre-existing dirt is never reported. */
+export function captureGitDirtyBaseline(snapshotFile: string, cwd: string): void {
+  if (!snapshotFile) return;
+  const current = listGitDirtyPaths(cwd);
+  if (!current) return;
+  writeSnapshot(snapshotFile, current.root, current.paths);
+}
+
+/**
+ * After a shell call: paths newly dirty since the last observation, capped.
+ * Rolls the snapshot forward. Without a usable baseline it establishes one
+ * and reports nothing — degrading toward silence, never toward a false edit.
+ */
+export function diffGitDirtySnapshot(snapshotFile: string, cwd: string): string[] {
+  if (!snapshotFile) return [];
+  const current = listGitDirtyPaths(cwd);
+  if (!current) return [];
+  const baseline = readSnapshot(snapshotFile);
+  writeSnapshot(snapshotFile, current.root, current.paths);
+  if (!baseline || baseline.root !== current.root) return [];
+  const known = new Set(baseline.paths);
+  const additions = current.paths.filter((p) => !known.has(p));
+  return additions.slice(0, MAX_REPORTED_PATHS_PER_CALL);
+}
+
+/**
+ * After an edit tool: fold tool-reported edits into the snapshot so the next
+ * shell diff does not re-credit them. Only when a baseline exists — seeding a
+ * partial snapshot would make later diffs report pre-existing dirt.
+ */
+export function addPathsToGitDirtySnapshot(snapshotFile: string, paths: string[]): void {
+  if (!snapshotFile || paths.length === 0) return;
+  const snapshot = readSnapshot(snapshotFile);
+  if (!snapshot) return;
+  const known = new Set(snapshot.paths);
+  const additions = paths.filter((p) => !known.has(p));
+  if (additions.length === 0) return;
+  writeSnapshot(snapshotFile, snapshot.root, [...snapshot.paths, ...additions]);
+}

package/src/hookRuntime.ts

@@ -15,7 +15,8 @@ export async function findProjectIdentity(
   opts: { maxDepth?: number } = {}
 ): Promise<ProjectIdentity | null> {
   if (!startCwd) return null;
-  if (identityCache.has(startCwd)) return identityCache.get(startCwd)!;
+  const cached = identityCache.get(startCwd);
+  if (cached !== undefined) return cached;
 
   let directory = isAbsolute(startCwd) ? startCwd : resolve(startCwd);
   const maxDepth = opts.maxDepth ?? 10;