@ngockhoale/ukit 3.4.29 → 3.4.31

package/template_project/.claude/hooks/skill-router.sh

@@ -1132,6 +1132,35 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
     }
   }
 
+  // Reuse/reference/clone/SQL asks name an EXISTING source (function, approved page, DDL
+  // column). Live runs showed agents guessing without it (OMP: "use checknull from Core" ->
+  // `import … from 'Core'`, an invented module). Emit one bounded line per detected signal
+  // naming the deterministic resolver. Advisory only — never blocks, never throws.
+  async function emitSourceResolutionAdvisory({ promptText, commandText, skip }) {
+    try {
+      if (skip) return;
+      const registry = await loadPlaybookRegistry();
+      if (!registry || typeof registry.deriveRouteOrchestrationSignals !== 'function') return;
+      const sig = registry.deriveRouteOrchestrationSignals({ promptText, commandText });
+      const text = String(promptText || '');
+      const advice = [];
+      if (sig.reuseFirst) {
+        const named = text.match(/\buse\s+([A-Za-z_][\w.]*)\s+from\b/i)?.[1];
+        advice.push(`Reuse-first: the ask names an existing function${named ? ` ("${named}")` : ''} — resolve the REAL definition with \`node .claude/ukit/index/query-index.mjs --symbol ${named || '<name>'}\`, read its signature/semantics, import it; never invent a module or re-implement it. A needs-confirmation candidate is a lookup result, not a substitution: state which symbol you chose.`);
+      }
+      if (sig.referenceTarget || sig.cloneIntent) {
+        advice.push('Reference/clone: locate the named source page/component with `node .claude/ukit/index/resolve-context.mjs "<ask>"`, read it and its API/loader dependencies first, reuse the existing component, change only target-specific parts, and leave the reference untouched.');
+      }
+      if (sig.sqlIntent) {
+        const ids = [...new Set(text.match(/\b[a-z][a-z0-9]*(?:_[a-z0-9]+)+\b/g) || [])].slice(0, 3);
+        advice.push(`SQL: resolve the identifier in the real DDL${ids.length ? ` (${ids.map((i) => `\`query-index.mjs --symbol ${i}\``).join(', ')})` : ''}; an exact alias match is not proof of a source column — verify table/schema, never invent a column, keep the requested output alias distinct from the source column, then check dependent objects.`);
+      }
+      for (const line of advice) {
+        process.stdout.write(`[ukit-skill-router] ${line}\n`);
+      }
+    } catch {}
+  }
+
   async function readProjectPackage(projectRoot) {
     return readJson(path.join(projectRoot, 'package.json'), null);
   }
@@ -1761,6 +1790,39 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
     return null;
   }
 
+
+// Task semantics are independent of source execution strategy and observed progress.
+function classifyTaskSemantics({ promptText = '', targetFile = '' } = {}) {
+  const text = String(promptText).normalize('NFD').replace(/[\u0300-\u036f]/g, '').replace(/đ/g, 'd').toLowerCase();
+  const clauses = text.split(/\s*(?:[;\n,]|\.(?:\s+|$)|\band\b|\bthen\b|\bva\b)\s*/);
+  const actionable = clauses.map((clause) => clause.split(/\bwithout\b/)[0]).filter((clause) => !/\b(?:do not|don't|never|khong|dung)\b/.test(clause)
+    && !/^\s*(?:audit|inspect|review|analyze|analyse|explain|read|kiem tra|phan tich)\b/.test(clause));
+  const sourceOrder = actionable.some((clause) => /\b(?:implement|fix|refactor|modify|edit|write|update|sua|viet|chinh)\b/.test(clause)
+    && /\b(?:source|code|logic|scheduler|implementation|ma nguon)\b|\.[cm]?[jt]sx?\b/.test(clause));
+  const operation = actionable.some((clause) => /\b(?:delete|remove|cancel|xoa|huy|ensure|dam bao)\b/.test(clause)
+    && /\bcron\b|scheduled\s+(?:cron\s+)?(?:task|job)|tac vu\s+(?:cron|dinh ky)/.test(clause));
+  const config = actionable.some((clause) => /\b(?:configuration|config|toggle|cau hinh)\b/.test(clause));
+  const repository = Boolean(targetFile) || /[\w.-]+\.(?:json|ya?ml|toml|ini)\b/.test(text);
+  const readOnly = /\b(?:audit|inspect|review|analyze|analyse|explain|read|kiem tra|phan tich)\b/.test(text)
+    && !sourceOrder && !operation && !config;
+  const taskKind = operation ? (sourceOrder ? 'MIXED' : 'OPERATIONAL')
+    : config ? 'CONFIGURATION' : readOnly ? 'READ_ONLY' : 'CODE_IMPLEMENTATION';
+  const id = text.match(/\b[a-f0-9]{8}(?:[a-f0-9-]{0,28})\b/)?.[0] || null;
+  return { taskKind, ...(config ? { configurationScope: repository ? 'repository' : 'external' } : {}),
+    ...(operation ? { operationGoal: { domain: 'scheduled-job', target: id, desiredState: /\b(?:delete|remove|cancel|xoa|huy|absent|removed|deleted|no longer|khong con)\b/.test(actionable.join(' ')) ? 'absent' : 'present',
+      completionSemantics: /\b(?:ensure|dam bao)\b/.test(text) ? 'ensure-state' : 'execute-and-verify' } } : {}) };
+}
+
+function applyTaskSemantics(contract, semantic) {
+  const evidence = contract?.completionEvidence || [];
+  const operationOnly = semantic.taskKind === 'OPERATIONAL'
+    || (semantic.taskKind === 'CONFIGURATION' && semantic.configurationScope === 'external');
+  return { ...(contract || {}), ...semantic,
+    completionEvidence: operationOnly ? ['operation-verification']
+      : semantic.taskKind === 'MIXED' ? [...new Set([...evidence, 'write-evidence', 'operation-verification'])]
+        : semantic.taskKind === 'READ_ONLY' ? (evidence.length === 1 && evidence[0] === 'verification-evidence' ? evidence : ['impact-evidence']) : evidence };
+}
+
   function buildRouteSummary({
     activeSkills = [],
     routingContext = {},
@@ -1801,9 +1863,10 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
       executionScores,
       executionCandidates,
     });
-    const executionContract = buildExecutionContract(executionMode);
+    const executionContract = applyTaskSemantics(buildExecutionContract(executionMode), classifyTaskSemantics({ promptText: routingContext.lastExplicitUserPromptText || routingContext.promptText, targetFile: routingContext.targetFile }));
     const completionState = buildCompletionState({
       executionMode,
+    executionContract,
       verificationRecommendation,
     });
     const continuationState = buildContinuationState({
@@ -1990,6 +2053,38 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
     return questionSignal || consultShape;
   }
 
+  // Greeting fast-path (parity with route-task.mjs isPureGreetingPrompt): a
+  // bare "hi" / "xin chào" / "thanks" (≤6 tokens, no command, no target) is an
+  // informational turn — no mutating lane, no task debt. Any non-greeting
+  // word ("hi, fix the login bug") disqualifies the prompt.
+  function isPureGreetingPrompt({ promptText = '', commandText = '', targetFile = null } = {}) {
+    const raw = String(promptText ?? '').trim();
+    if (!raw || String(commandText ?? '').trim() || targetFile) return false;
+    if (raw.length > 64) return false;
+    const tokens = raw.toLowerCase().normalize('NFD').replace(/[\u0300-\u036f]/g, '').replace(/\u0111/g, 'd')
+      .replace(/[^a-z0-9\s]/g, ' ').split(/\s+/).filter(Boolean);
+    if (tokens.length === 0 || tokens.length > 6) return false;
+    const core = new Set([
+      'hi', 'hello', 'hey', 'yo', 'chao', 'xin', 'good',
+      'morning', 'afternoon', 'evening',
+      'thanks', 'thank', 'cam', 'on', 'bye', 'tam', 'biet',
+    ]);
+    const filler = new Set([
+      'you', 'u', 'there', 'guys', 'everyone', 'all',
+      'ban', 'cac', 'minh', 'moi', 'nguoi', 'nhe', 'nha', 'nhieu',
+      'ok', 'okay', 'again', 'still',
+    ]);
+    let coreHit = false;
+    for (const token of tokens) {
+      if (core.has(token)) {
+        coreHit = true;
+      } else if (!filler.has(token)) {
+        return false; // any non-greeting word means this is a task wearing a greeting
+      }
+    }
+    return coreHit;
+  }
+
   // TASK-C85-019: an explicit no-change/advisory assertion overrides the signal
   // scores. A report or advisory question carrying fix vocabulary as SUBJECT
   // MATTER ("không tạo thay đổi", "giữ nguyên mã", "do not change anything",
@@ -2053,6 +2148,7 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
     // — "giữ nguyên header và sửa lỗi login" keeps 'và sửa lỗi' as a surviving
     // order; an unbounded [^.,;\n]* swallows it and the order escapes the gate.
     // TAIL = lazy strip ending before 'và'/'and' (folded va|and) or EOS.
+    const MUT_VERBS = 'implement|apply|update|modify|add|create|ship|deliver|fix|refactor|remove|delete|rename|change|write|build|make|install|run|deploy|execute|edit|sua|them|tao|xoa|doi|thay\\s+the|cap\\s+nhat|viet|chay|cai|chinh|trien\\s+khai|cau\\s+hinh';
     const TAIL = '[^.,;\\n]*?(?=\\s+(?:va|and)\\s+(?:implement|apply|update|modify|add|create|ship|deliver|fix|refactor|remove|delete|rename|change|write|build|make|install|run|deploy|execute|edit|sua|them|tao|xoa|doi|thay\\s+the|cap\\s+nhat|viet|chay|cai|chinh|trien\\s+khai|cau\\s+hinh)(?![A-Za-z0-9_])|[.,;]|\\s*$)';
     // C89-008: WAIT_TAIL ends a waiting-clause strip before any coordinating
     // conjunction ('và/and/nhưng/rồi/then/later/sau đó') followed by anything
@@ -2061,7 +2157,12 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
     const WAIT_TAIL = '[^.,;\\n]*?(?=\\s+(?:va|and|nhung|roi|then|later|sau\\s+do)\\s+[^.,;\\n]*?\\b(?:implement|apply|update|modify|add|create|ship|deliver|fix|refactor|remove|delete|rename|change|write|build|make|install|run|deploy|execute|edit|sua|them|tao|xoa|doi|thay\\s+the|cap\\s+nhat|viet|chay|cai|chinh|trien\\s+khai|cau\\s+hinh)(?![A-Za-z0-9_])|[.,;]|\\s*$)';
     const residue = trimmed
       .replace(/"[^"\n]*"|«[^»\n]*»/g, ' ')
+      // "tạo plan" / "create a plan": the plan is the deliverable, not a mutation order.
+      .replace(/\b(?:tao|lap|create|make|write|draft)\s+(?:cho\s+toi\s+)?(?:a\s+|an\s+|the\s+|1\s+|mot\s+)?(?:plan|ke\s+hoach|phuong\s+an|lo\s+trinh|roadmap)\b/g, ' ')
       .replace(/\bwrite-evidence\b|\bverification-evidence\b|\bimpact-evidence\b|\broot-cause\b/g, ' ')
+      // A negated LIST ("do not implement, fix, or refactor"; "khong implement, sua, refactor hay chinh") negates every
+    // verb in the list: the TAIL strip below stops at the first comma, which would leave the later verbs as orders.
+    .replace(new RegExp(`\\b(?:do\\s+not|don't|dont|must\\s+not|never|not|khong(?:\\s+duoc)?|tuyet\\s+doi\\s+khong)\\s+(?:${MUT_VERBS})(?![A-Za-z0-9_])(?:\\s*(?:,|,?\\s+(?:or|and|nor|hay|hoac|va))\\s*(?:(?:${MUT_VERBS})(?![A-Za-z0-9_])|(?:${MUT_VERBS})\\s))*[^.,;\\n\u2014]*?(?=\\s+(?:va|and|then|roi|nhung|but)\\s|[.,;\u2014\\n]|\\s*$)`, 'g'), ' ')
       .replace(new RegExp(`\\bgiu\\s+nguyen\\b${TAIL}`, 'g'), ' ')
       .replace(new RegExp(`\\bmuon\\s+giu\\b${TAIL}`, 'g'), ' ')
       .replace(new RegExp(`\\bkhong\\s+(?!chi\\b)${TAIL}`, 'g'), ' ')
@@ -2081,7 +2182,6 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
       .replace(new RegExp(`\\b(?:de|cho)\\s+${TAIL}`, 'g'), ' ')
       .replace(new RegExp(`\\b(?:yeu\\s+cau|doi\\s+hoi|ep\\s+phai|bat\\s+buoc|bat\\s+phai)\\b${TAIL}`, 'g'), ' ')
       .replace(new RegExp(`\\b(?:demand(?:ed|s)?|require(?:d|s)?|forcing|forced|forcibly|must|has\\s+to|have\\s+to)\\b${TAIL}`, 'g'), ' ')
-      .replace(new RegExp(`\\b(?:do\\s+not|don't|dont|not|never|no)\\s+(?!only\\b)${TAIL}`, 'g'), ' ')
       .replace(new RegExp(`\\b(?:can|nen|phai|duoc)\\s+(?:duoc\\s+)?(?:sua|cau\\s+hinh|thay\\s+doi|cap\\s+nhat|edit|fix|config)\\b${TAIL}`, 'g'), ' ')
       .replace(/\bco\s+(?:can|nen)\s+sua\b[^.,;\n?]*/g, ' ')
       .replace(/(?:^|[.,;\n]\s*)(?:should|shall)\s+(?:i|we|you)\b[^.,;\n?]*/g, ' ')
@@ -2111,6 +2211,7 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
     // — "giữ nguyên header và sửa lỗi login" keeps 'và sửa lỗi' as a surviving
     // order; an unbounded [^.,;\n]* swallows it and the order escapes the gate.
     // TAIL = lazy strip ending before 'và'/'and' (folded va|and) or EOS.
+    const MUT_VERBS = 'implement|apply|update|modify|add|create|ship|deliver|fix|refactor|remove|delete|rename|change|write|build|make|install|run|deploy|execute|edit|sua|them|tao|xoa|doi|thay\\s+the|cap\\s+nhat|viet|chay|cai|chinh|trien\\s+khai|cau\\s+hinh';
     const TAIL = '[^.,;\\n]*?(?=\\s+(?:va|and)\\s+(?:implement|apply|update|modify|add|create|ship|deliver|fix|refactor|remove|delete|rename|change|write|build|make|install|run|deploy|execute|edit|sua|them|tao|xoa|doi|thay\\s+the|cap\\s+nhat|viet|chay|cai|chinh|trien\\s+khai|cau\\s+hinh)(?![A-Za-z0-9_])|[.,;]|\\s*$)';
     // C89-008: WAIT_TAIL ends a waiting-clause strip before a coordinating
     // conjunction ('và/and/nhưng/rồi/then/later/sau đó') followed by anything
@@ -2118,10 +2219,15 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
     const WAIT_TAIL = '[^.,;\\n]*?(?=\\s+(?:va|and|nhung|roi|then|later|sau\\s+do)\\s+[^.,;\\n]*?\\b(?:implement|apply|update|modify|add|create|ship|deliver|fix|refactor|remove|delete|rename|change|write|build|make|install|run|deploy|execute|edit|sua|them|tao|xoa|doi|thay\\s+the|cap\\s+nhat|viet|chay|cai|chinh|trien\\s+khai|cau\\s+hinh)(?![A-Za-z0-9_])|[.,;]|\\s*$)';
     const residue = trimmed
       .replace(/"[^"\n]*"|«[^»\n]*»/g, ' ')
+      // "tạo plan" / "create a plan": the plan is the deliverable, not a mutation order.
+      .replace(/\b(?:tao|lap|create|make|write|draft)\s+(?:cho\s+toi\s+)?(?:a\s+|an\s+|the\s+|1\s+|mot\s+)?(?:plan|ke\s+hoach|phuong\s+an|lo\s+trinh|roadmap)\b/g, ' ')
       // Descriptive state, not an order: "đã/vừa [được] + verb" ("hooks vừa được cài đặt") reports
       // something already done. Only the verb is stripped, so a later imperative still survives.
       .replace(/(?<![a-z0-9_])(?:da|vua)\s+(?:duoc\s+)?(?:implement|apply|update|modify|add|create|ship|deliver|fix|refactor|remove|delete|rename|change|write|build|make|install|run|deploy|execute|edit|sua|them|tao|xoa|doi|thay\s+the|cap\s+nhat|viet|chay|cai|chinh|trien\s+khai|cau\s+hinh)(?![a-z0-9_])/g, ' ')
       .replace(/\bwrite-evidence\b|\bverification-evidence\b|\bimpact-evidence\b|\broot-cause\b/g, ' ')
+      // A negated LIST ("do not implement, fix, or refactor"; "khong implement, sua, refactor hay chinh") negates every
+    // verb in the list: the TAIL strip below stops at the first comma, which would leave the later verbs as orders.
+    .replace(new RegExp(`\\b(?:do\\s+not|don't|dont|must\\s+not|never|not|khong(?:\\s+duoc)?|tuyet\\s+doi\\s+khong)\\s+(?:${MUT_VERBS})(?![A-Za-z0-9_])(?:\\s*(?:,|,?\\s+(?:or|and|nor|hay|hoac|va))\\s*(?:(?:${MUT_VERBS})(?![A-Za-z0-9_])|(?:${MUT_VERBS})\\s))*[^.,;\\n\u2014]*?(?=\\s+(?:va|and|then|roi|nhung|but)\\s|[.,;\u2014\\n]|\\s*$)`, 'g'), ' ')
       .replace(new RegExp(`\\bgiu\\s+nguyen\\b${TAIL}`, 'g'), ' ')
       .replace(new RegExp(`\\bmuon\\s+giu\\b${TAIL}`, 'g'), ' ')
       .replace(new RegExp(`\\bkhong\\s+(?!chi\\b)${TAIL}`, 'g'), ' ')
@@ -2143,7 +2249,6 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
       .replace(new RegExp(`\\b(?:de|cho)\\s+${TAIL}`, 'g'), ' ')
       .replace(new RegExp(`\\b(?:yeu\\s+cau|doi\\s+hoi|ep\\s+phai|bat\\s+buoc|bat\\s+phai)\\b${TAIL}`, 'g'), ' ')
       .replace(new RegExp(`\\b(?:demand(?:ed|s)?|require(?:d|s)?|forcing|forced|forcibly|must|has\\s+to|have\\s+to)\\b${TAIL}`, 'g'), ' ')
-      .replace(new RegExp(`\\b(?:do\\s+not|don't|dont|not|never|no)\\s+(?!only\\b)${TAIL}`, 'g'), ' ')
       .replace(new RegExp(`\\b(?:can|nen|phai|duoc)\\s+(?:duoc\\s+)?(?:sua|cau\\s+hinh|thay\\s+doi|cap\\s+nhat|edit|fix|config)\\b${TAIL}`, 'g'), ' ')
       .replace(/\bco\s+(?:can|nen)\s+sua\b[^.,;\n?]*/g, ' ')
       .replace(/(?:^|[.,;\n]\s*)(?:should|shall)\s+(?:i|we|you)\b[^.,;\n?]*/g, ' ')
@@ -2239,6 +2344,7 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
       /\b(?:chi|just|only)\s+(?:len|lap|vach|lam)\b[^.,;\n]{0,40}\b(?:plan|ke\s+hoach|phuong\s+an|lo\s+trinh|roadmap|blueprint)\b/.test(trimmed)
       || /\b(?:len|lap|vach|de\s+xuat|draft)\s+(?:ke\s+hoach|plan|phuong\s+an|lo\s+trinh|roadmap)\b/.test(trimmed)
       || /\b(?:plan|planning)\s+(?:only|first|mode)\b/.test(trimmed)
+      || /\b(?:chi|just|only)\s+(?:tao|create|make|write|draft)\s+(?:a\s+|an\s+|1\s+|mot\s+)?(?:plan|ke\s+hoach|phuong\s+an|roadmap)\b/.test(trimmed)
       || /\b(?:ke\s+hoach|plan|phuong\s+an|lo\s+trinh|roadmap)\b[^.,;\n]{0,40}\b(?:khong|chua|khong\s+can)\s+(?:implement|code|thuc\s+hien|thuc\s+thi|sua|lam|build|viet)\b/.test(trimmed)
       || (/\b(?:khong|chua|dung)\s+(?:implement|code|thuc\s+hien|thuc\s+thi|sua|lam|viet\s+code)\b/.test(trimmed)
         && /\b(?:plan|ke\s+hoach|phuong\s+an|roadmap)\b/.test(trimmed));
@@ -2626,12 +2732,12 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
     };
   }
 
-  function buildCompletionState({ executionMode = null, verificationRecommendation = null } = {}) {
+  function buildCompletionState({ executionMode = null, verificationRecommendation = null, executionContract = null } = {}) {
     if (!executionMode || executionMode === 'informational') {
       return null;
     }
 
-    const contract = buildExecutionContract(executionMode);
+    const contract = executionContract || buildExecutionContract(executionMode);
     const missingEvidence = [...(contract?.completionEvidence ?? [])];
     const requiresVerification = missingEvidence.includes('verification-evidence');
     if (
@@ -3509,14 +3615,68 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
   const sessionId = sessionCandidate === undefined || sessionCandidate === null
     ? null
     : String(sessionCandidate).trim() || null;
+
+  // Per-session sidecar next to the shared single-slot state: a concurrent session routing
+  // after this one overwrites the shared file, and this session's Stop would then see a
+  // foreign owner and report its route as lost. Best-effort — the shared write is authoritative.
+  async function persistRouteState(text) {
+    const persisted = JSON.parse(text);
+    persisted.taskInstanceId = taskInstanceId;
+    if (continuingTask && previous.routingContext?.lastExplicitUserPromptText) {
+      persisted.routingContext ||= {};
+      persisted.routingContext.lastExplicitUserPromptText = previous.routingContext.lastExplicitUserPromptText;
+    }
+    const semantic = continuingTask && previous.routeSummary?.executionContract?.taskKind
+      ? previous.routeSummary.executionContract
+      : classifyTaskSemantics({ promptText: extractPrompt(payload) || persisted.routingContext?.lastExplicitUserPromptText, targetFile: persisted.routingContext?.targetFile });
+    const informationalTurn = !continuingTask && persisted.routingContext?.executionMode === 'informational'
+      && semantic.taskKind === 'CODE_IMPLEMENTATION';
+    if (informationalTurn) {
+      delete persisted.routeSummary;
+      delete persisted.requestKey;
+    } else if (semantic.taskKind !== 'CODE_IMPLEMENTATION' || persisted.routeSummary) {
+      persisted.routeSummary ||= { executionMode: 'local-build' };
+      persisted.routeSummary.executionContract = applyTaskSemantics(
+        persisted.routeSummary.executionContract || buildExecutionContract(persisted.routeSummary.executionMode === 'informational' ? 'local-build' : persisted.routeSummary.executionMode), semantic);
+      if (semantic.taskKind === 'OPERATIONAL' || semantic.taskKind === 'READ_ONLY'
+        || (semantic.taskKind === 'CONFIGURATION' && semantic.configurationScope === 'external')) {
+        persisted.routeSummary.completionState = buildCompletionState({
+          executionMode: persisted.routeSummary.executionMode === 'informational' ? 'local-build' : persisted.routeSummary.executionMode,
+          executionContract: persisted.routeSummary.executionContract,
+        });
+        persisted.routeSummary.continuationState = buildContinuationState({ completionState: persisted.routeSummary.completionState });
+      }
+    }
+    text = JSON.stringify(persisted);
+    await writeJsonFileAtomic(statePath, text);
+    if (!sessionId) return;
+    try {
+      const dir = path.join(projectRoot, '.ukit', 'storage', 'cache', 'route-state');
+      await writeJsonFileAtomic(path.join(dir, `${String(sessionId).replace(/[^a-zA-Z0-9._-]/g, '_').slice(0, 96) || 'default'}.json`), text);
+      if (Math.random() < 0.05) {
+        const cutoff = Date.now() - 14 * 24 * 3600 * 1000;
+        for (const name of await fsp.readdir(dir)) {
+          const file = path.join(dir, name);
+          const st = await fsp.stat(file).catch(() => null);
+          if (st && st.mtimeMs < cutoff) await fsp.rm(file, { force: true });
+        }
+      }
+    } catch {}
+  }
   const storedPrevious = await readJson(statePath, {});
-  // Route state is project-local, while hook ledgers are session-local. Do not let a
-  // differently-bound snapshot become the contract for a new session.
+  // The shared slot may belong to another session; recover only our owned sidecar.
+  const sidecarPrevious = sessionId && String(storedPrevious?.sessionId || '').trim() !== sessionId
+    ? await readJson(path.join(projectRoot, '.ukit', 'storage', 'cache', 'route-state', `${sessionId.replace(/[^a-zA-Z0-9._-]/g, '_').slice(0, 96) || 'default'}.json`), {})
+    : {};
   const previous = sessionId
-    ? (storedPrevious?.sessionId && String(storedPrevious.sessionId).trim() === sessionId
-      ? storedPrevious
-      : {})
+    ? [storedPrevious, sidecarPrevious].find((state) => String(state?.sessionId || '').trim() === sessionId) || {}
     : storedPrevious;
+  const continuationPrompt = /^(?:continue|resume|keep going|proceed|tiep tuc)(?:\s+(?:the task|this task|previous task))?[.!]?$/i.test(
+    extractPrompt(payload).normalize('NFD').replace(/[̀-ͯ]/g, '').trim());
+  const continuingTask = Boolean(previous.taskInstanceId && (payload.tool_name || continuationPrompt));
+  const taskInstanceId = continuingTask
+    ? previous.taskInstanceId
+    : `task-${crypto.randomBytes(16).toString("hex")}`;
   const runtimeConfig = await loadRuntimeConfig(projectRoot);
   // BL-013: the hook/bridge payload's transcript pointer (ukit-bridge.js:217,228
   // forwards transcriptPath; Claude Code payloads carry transcript_path). The
@@ -3584,6 +3744,9 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
   const previousTs = Number(previous?.ts || 0);
   const informationalNoTargetPrompt = (isInformationalPrompt({ promptText, commandText })
     || hasAdvisoryOnlyAssertion({ promptText, commandText })) && !filePath;
+  // Greeting fast-path: a pure greeting gets the same read-only stamp as an
+  // informational question — never a mutating lane, never task debt.
+  const greetingFastPath = !filePath && isPureGreetingPrompt({ promptText, commandText });
   // A delivery-only prompt ("push this to git", "đẩy bộ này lên git") starts a new,
   // mutation-free action and typically matches no skill. It must not inherit the
   // previous request's completion contract — carrying find-cause/map-impact debt
@@ -3629,7 +3792,7 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
       targetFile: filePath,
       contextIntent: '',
       taskType: '',
-      ...((informationalNoTargetPrompt || deliveryOnlyNoRoute) ? { executionMode: 'informational' } : {}),
+      ...((informationalNoTargetPrompt || deliveryOnlyNoRoute || greetingFastPath) ? { executionMode: 'informational' } : {}),
       // Read-only/carried contexts: stamp whether THIS prompt ordered a
       // mutation so the Stop gate can release a misrouted write-debt instead
       // of looping "make an Edit" on an answer-only question.
@@ -3650,7 +3813,7 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
     });
 
     if (
-      previous?.fingerprint === fingerprint
+      payload.tool_name && previous?.fingerprint === fingerprint
       && !previous?.routeSummary
       && Array.isArray(previous?.activeSkills)
       && previous.activeSkills.length === 0
@@ -3659,12 +3822,14 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
       process.exit(0);
     }
 
+    await emitSourceResolutionAdvisory({ promptText, commandText, skip: informationalNoTargetPrompt || greetingFastPath || deliveryOnlyNoRoute });
+
     await ensureDir(statePath);
     // A no-route prompt (short nudge, informational question) must not wipe the last full
     // route: completion-gate.sh reads routeSummary/requestKey from this state to decide
     // whether a Stop is premature. Downgrading to a route-less state here silently disarms
     // the gate mid-task, so carry the previous route forward until a real route replaces it.
-    await writeJsonFileAtomic(statePath, JSON.stringify({
+    await persistRouteState(JSON.stringify({
       ...(sessionId ? { sessionId } : {}),
       fingerprint,
       ts: now,
@@ -3809,7 +3974,7 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
   };
   provisionalState.fingerprint = buildRouteStateFingerprint(provisionalState);
   await ensureDir(statePath);
-  await writeJsonFileAtomic(statePath, JSON.stringify(provisionalState));
+  await persistRouteState(JSON.stringify(provisionalState));
 
   let cacheUtils = null;
   if (await pathExists(cacheUtilsPath)) {
@@ -3882,7 +4047,7 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
     }
 
     await ensureDir(statePath);
-    await writeJsonFileAtomic(statePath, JSON.stringify(reusedState));
+    await persistRouteState(JSON.stringify(reusedState));
     await appendRouteAuditEntry(routeAuditPath, buildRouteAuditEntry({
       routingContext: reusedState.routingContext || {},
       routeSummary: rescuedRouteSummary || {},
@@ -3987,6 +4152,11 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
   });
 
   if (previous?.fingerprint === fingerprint && now - previousTs < debounceMs) {
+    await appendRouteAuditEntry(routeAuditPath, buildRouteAuditEntry({
+      routingContext,
+      routeSummary,
+      state: { requestKey, fingerprint, source: 'skill-router' },
+    }));
     process.exit(0);
   }
 
@@ -4007,7 +4177,7 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
     ...(helpers ? { helpers } : {}),
     routeSummary: compactRouteSummary(routeSummary),
   };
-  await writeJsonFileAtomic(statePath, JSON.stringify(sharedState));
+  await persistRouteState(JSON.stringify(sharedState));
   await appendRouteAuditEntry(routeAuditPath, buildRouteAuditEntry({
     routingContext,
     routeSummary,
@@ -4032,6 +4202,7 @@ setTimeout(() => process.exit(0), HOOK_DEADLINE_MS).unref();
 
   process.stdout.write(`[ukit-skill-router] Read skills: ${getActiveSkillPaths(selected).join(', ')}\n`);
   process.stdout.write(`[ukit-skill-router] Route: ${formatDisplayRouteSummary(routeSummary, routingContext)}\n`);
+  await emitSourceResolutionAdvisory({ promptText, commandText, skip: false });
   const nextDisplay = formatDisplayNextAction(routeSummary);
   if (nextDisplay) {
     process.stdout.write(`[ukit-skill-router] Next: ${nextDisplay}\n`);

package/template_project/.claude/settings.json

@@ -49,7 +49,7 @@
       "Bash(rm -rf ..:*)",
       "Bash(rm -rf .:*)",
       "Bash(dd if=/dev/:*)",
-      "Bash(*> /dev/sda:*)",
+      "Bash(*> /dev/sda*)",
       "Bash(mkfs:*)",
       "Bash(:(){ :|:& };::*)",
       "Bash(gh pr create:*)",
@@ -79,6 +79,16 @@
           }
         ]
       },
+      {
+        "matcher": "MultiEdit|NotebookEdit|Agent|Task",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/ukit/runtime/hook-chain-runner.mjs\" --emit-verdict - \"$CLAUDE_PROJECT_DIR/.claude/hooks/handoff-model-guard.sh\":8",
+            "timeout": 18
+          }
+        ]
+      },
       {
         "matcher": "Bash",
         "hooks": [
@@ -91,6 +101,16 @@
       }
     ],
     "PostToolUse": [
+      {
+        "matcher": "CronDelete|CronList",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/ukit/runtime/hook-chain-runner.mjs\" --emit-verdict - \"$CLAUDE_PROJECT_DIR/.claude/hooks/record-execution.mjs\":8",
+            "timeout": 18
+          }
+        ]
+      },
       {
         "matcher": "Read|Grep|Glob",
         "hooks": [
@@ -111,6 +131,16 @@
           }
         ]
       },
+      {
+        "matcher": "MultiEdit|NotebookEdit|Agent|Task",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/ukit/runtime/hook-chain-runner.mjs\" --emit-verdict - \"$CLAUDE_PROJECT_DIR/.claude/hooks/record-execution.mjs\":8",
+            "timeout": 18
+          }
+        ]
+      },
       {
         "matcher": "Bash",
         "hooks": [
@@ -122,6 +152,18 @@
         ]
       }
     ],
+    "PostToolUseFailure": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/ukit/runtime/hook-chain-runner.mjs\" --emit-verdict - \"$CLAUDE_PROJECT_DIR/.claude/hooks/record-execution.mjs\":8",
+            "timeout": 18
+          }
+        ]
+      }
+    ],
     "UserPromptSubmit": [
       {
         "hooks": [

package/template_project/.claude/ukit/index/cleanup-task-worktree.mjs

@@ -167,7 +167,7 @@ const APPROVAL_KEYS = [
   'schemaVersion', 'taskId', 'receiptSha256', 'verdict', 'executorModel',
   'reviewerModel', 'reviewedResultTree',
 ];
-const TASK_TOKEN = /^TASK-C97-\d{3}$/;
+const TASK_TOKEN = /^TASK-(?:[A-Z]\d{1,3}-)?\d{3,4}$/;
 const OID = /^[0-9a-f]{40}$/;
 
 function readJson(p, taskId, label) {

package/template_project/.claude/ukit/index/fix-loop-escalation.mjs

@@ -394,14 +394,20 @@ export async function applyFixLoopEscalation({
     : null;
   // A model lane that refuses to deepen is not an escalation answer — the
   // deterministic deeper lane wins so the loop actually exits its lane.
-  const usableModelLane = modelLane && modelLane !== currentLane ? modelLane : null;
-  const lane = usableModelLane ?? deterministicLane;
+  // Lanes are capabilities, not an ordinal ladder. Without a validated policy
+  // relation only the deterministic destination is admissible.
+  const usableModelLane = planeStage !== 'shadow' && modelLane === deterministicLane
+    ? modelLane : null;
+  const lane = deterministicLane;
   const endpointDown = batchResult !== null
     && batchResult.status !== 'accepted'
     && batchResult.status !== 'partial'
     && !usableModelLane;
-  const depth = (modelDepth && modelDepth !== 'none' ? modelDepth : null)
-    ?? resolveEscalationVerificationDepth({ routeSummary, config });
+  const depthFloor = resolveEscalationVerificationDepth({ routeSummary, config });
+  const depthOrder = ['none', 'runnable', 'review-round', 'escalate'];
+  const depth = planeStage !== 'shadow'
+    && depthOrder.indexOf(modelDepth) > depthOrder.indexOf(depthFloor)
+    ? modelDepth : depthFloor;
 
   const reason = [
     `fix-loop: fixLoopCount=${fixLoopCount} threshold=${settings.debugLoopThreshold} fingerprint-joined`,

package/template_project/.claude/ukit/index/impact-context.mjs

@@ -34,30 +34,85 @@ async function main() {
     return;
   }
 
-  await ensureFreshIndex(rootDir);
-
-  const impact = resolveImpactContext
-    ? await resolveImpactContext({ rootDir, changedFiles, changedSymbols })
-    : {
-        changedFiles,
-        changedSymbols,
-        riskLabels: [],
-        callees: [],
-        callers: [],
-        importers: [],
-        mirrorCounterparts: [],
-        relatedTests: [],
-        recommendedTestFiles: [],
-      };
+  let impact = null;
+  try {
+    await ensureFreshIndex(rootDir);
+    impact = resolveImpactContext
+      ? await resolveImpactContext({ rootDir, changedFiles, changedSymbols })
+      : {
+          changedFiles,
+          changedSymbols,
+          riskLabels: [],
+          callees: [],
+          callers: [],
+          importers: [],
+          mirrorCounterparts: [],
+          relatedTests: [],
+          recommendedTestFiles: [],
+        };
+  } catch (error) {
+    // Index missing, rebuild failed, or lock timed out — answer from source
+    // with a bounded search instead of exiting 1.
+    const answered = await runFallbackSearch(rootDir, changedFiles, changedSymbols);
+    if (!answered) {
+      throw error;
+    }
+    return;
+  }
 
   printCompact(impact);
 
+  if ((impact.unverifiedImpact ?? []).length > 0) {
+    console.log(`unverified-impact: ${impact.unverifiedImpact.slice(0, CALLER_CAP).join(', ')}`);
+    console.log('note: name-only matches without import proof — verify before acting');
+  }
+  const truncated = impact.truncated ?? {};
+  const truncatedParts = Object.entries(truncated).filter(([, count]) => count > 0).map(([key, count]) => `${key}:+${count}`);
+  if (truncatedParts.length > 0) {
+    console.log(`truncated: ${truncatedParts.join(', ')}`);
+  }
+
   if (formatImpactConfidenceSummary) {
     console.log('');
     console.log(formatImpactConfidenceSummary(impact));
   }
 }
 
+// Bounded source search over the changed file basenames and symbol names.
+// Returns true when it produced output; false when the fallback itself is
+// unavailable so the original index error can surface.
+async function runFallbackSearch(rootDir, changedFiles, changedSymbols) {
+  if (typeof indexCore.boundedSourceSearch !== 'function') {
+    return false;
+  }
+  const queries = [
+    ...changedFiles.map((filePath) => String(filePath).split('/').pop().replace(/\.[^.]+$/, '')),
+    ...changedSymbols,
+  ].filter(Boolean).slice(0, 4);
+  try {
+    console.log('source: fallback-search');
+    let printed = 0;
+    for (const searchQuery of queries) {
+      const rows = await indexCore.boundedSourceSearch({ rootDir, query: searchQuery, limit: 5 });
+      console.log(`[ukit:impact:fallback] ${rows.length} source matches for: ${searchQuery}`);
+      for (const row of rows) {
+        console.log(`  ${row.filePath}${row.line ? `:${row.line}` : ''}`);
+      }
+      if (rows.truncated?.length) {
+        console.log(`[ukit:impact:fallback] search truncated (${rows.truncated.join(',')}) — NOT exhaustive`);
+      }
+      printed += rows.length;
+    }
+    if (printed === 0) {
+      console.log('[ukit:impact:fallback] no source matches — verify changed files manually');
+    }
+    return true;
+  } catch (fallbackError) {
+    console.error(`fallback-search failed: ${fallbackError && fallbackError.message ? fallbackError.message : fallbackError}`);
+    return false;
+  }
+}
+
 async function ensureFreshIndex(rootDir) {
   if (typeof indexCore.ensureIndexFresh === 'function') {
     return indexCore.ensureIndexFresh({ rootDir });

package/template_project/.claude/ukit/index/land-worktree.mjs

@@ -168,8 +168,8 @@ function readScope() {
   }
   if (parsed.schemaVersion !== 1) refuse(parsed.taskId, 'invalid-scope', 'schemaVersion must be 1');
   const { taskId, baseCommit, sourceRoot, destinationRoot, sourceHead, destinationHead, targetPaths } = parsed;
-  if (typeof taskId !== 'string' || !/^TASK-C97-\d{3}$/.test(taskId)) {
-    refuse(taskId, 'invalid-scope', 'taskId must be an exact TASK-C97-009-style token');
+  if (typeof taskId !== 'string' || !/^TASK-(?:[A-Z]\d{1,3}-)?\d{3,4}$/.test(taskId)) {
+    refuse(taskId, 'invalid-scope', 'taskId must be an exact TASK-001 or TASK-C97-009 style token');
   }
   for (const [k, v] of Object.entries({ baseCommit, sourceRoot, destinationRoot, sourceHead, destinationHead })) {
     if (typeof v !== 'string' || v.length === 0) refuse(taskId, 'invalid-scope', `${k} must be a nonempty string`);