@nirnex/cli 2.0.3 → 4.0.0

package/dist/runtime/validate.js

@@ -0,0 +1,91 @@
+// Stop hook handler.
+// Called when Claude thinks it is done with a task.
+// Validates the active task envelope against the trace, and blocks completion
+// if required conditions are not met.
+import fs from 'node:fs';
+import path from 'node:path';
+import { loadActiveEnvelope, loadTraceEvents } from './session.js';
+function readStdin() {
+    return new Promise(resolve => {
+        let buf = '';
+        process.stdin.setEncoding('utf8');
+        process.stdin.on('data', chunk => { buf += chunk; });
+        process.stdin.on('end', () => resolve(buf));
+    });
+}
+export async function runValidate() {
+    const raw = await readStdin();
+    let hookData = { session_id: 'unknown' };
+    try {
+        hookData = JSON.parse(raw || '{}');
+    }
+    catch {
+        // Non-fatal
+    }
+    const repoRoot = process.env.NIRNEX_REPO_ROOT ?? process.cwd();
+    const sessionId = hookData.session_id ?? process.env.NIRNEX_SESSION_ID ?? '';
+    if (!fs.existsSync(path.join(repoRoot, 'nirnex.config.json'))) {
+        const out = { decision: 'allow' };
+        process.stdout.write(JSON.stringify(out));
+        process.exit(0);
+    }
+    const envelope = loadActiveEnvelope(repoRoot, sessionId);
+    // No active envelope → nothing to validate
+    if (!envelope) {
+        process.stdout.write(JSON.stringify({ decision: 'allow' }));
+        process.exit(0);
+    }
+    const events = loadTraceEvents(repoRoot, sessionId);
+    const reasons = [];
+    // If ECO was blocked, Claude should not have proceeded at all
+    if (envelope.eco_summary.blocked) {
+        reasons.push('Task was marked blocked by ECO — no changes should have been made');
+    }
+    // If ECO was forced unknown for a non-trivial task, require human verification
+    if (envelope.eco_summary.forced_unknown && envelope.lane !== 'A') {
+        reasons.push('Task confidence is insufficient (forced_unknown=true) — human verification required before accepting changes');
+    }
+    // Lane C: require at least one trace event (cannot stop without having done something traceable)
+    if (envelope.lane === 'C' && events.length === 0) {
+        reasons.push('Lane C task completed with no recorded tool events — trace is empty');
+    }
+    // Check for unresolved deviations in trace
+    const unresolvedDeviations = events
+        .flatMap(e => e.deviation_flags)
+        .filter(f => f.startsWith('file_in_blocked_path:'));
+    if (unresolvedDeviations.length > 0) {
+        reasons.push(`Unresolved blocked-path deviations: ${unresolvedDeviations.join(', ')}`);
+    }
+    // Check deadlock: Lane C with denied patterns triggered but required files unchanged
+    if (envelope.lane === 'C') {
+        const touchedFiles = new Set(events.flatMap(e => e.affected_files));
+        const expectedTouched = envelope.scope.modules_expected;
+        if (expectedTouched.length > 0) {
+            const anyExpectedTouched = expectedTouched.some(m => [...touchedFiles].some(f => f.includes(m)));
+            if (!anyExpectedTouched) {
+                reasons.push(`Lane C task expected changes in [${expectedTouched.join(', ')}] but no matching files were modified — possible deadlock or guard block`);
+            }
+        }
+    }
+    if (reasons.length > 0) {
+        const out = {
+            decision: 'block',
+            reason: `[Nirnex Validate] ${reasons.join(' | ')}`,
+        };
+        process.stdout.write(JSON.stringify(out));
+    }
+    else {
+        // Mark envelope as completed
+        try {
+            envelope.status = 'completed';
+            const { saveEnvelope } = await import('./session.js');
+            saveEnvelope(repoRoot, envelope);
+        }
+        catch {
+            // Non-fatal
+        }
+        process.stdout.write(JSON.stringify({ decision: 'allow' }));
+    }
+    process.exit(0);
+}
+//# sourceMappingURL=validate.js.map

package/dist/runtime/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/runtime/validate.ts"],"names":[],"mappings":"AAAA,qBAAqB;AACrB,oDAAoD;AACpD,8EAA8E;AAC9E,sCAAsC;AAEtC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGnE,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAE9B,IAAI,QAAQ,GAAa,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACnD,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAa,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;IAE7E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAqB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEzD,2CAA2C;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAsB,CAAC,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,8DAA8D;IAC9D,IAAI,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IACpF,CAAC;IAED,+EAA+E;IAC/E,IAAI,QAAQ,CAAC,WAAW,CAAC,cAAc,IAAI,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,8GAA8G,CAAC,CAAC;IAC/H,CAAC;IAED,iGAAiG;IACjG,IAAI,QAAQ,CAAC,IAAI,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IACtF,CAAC;IAED,2CAA2C;IAC3C,MAAM,oBAAoB,GAAG,MAAM;SAChC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAEtD,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,uCAAuC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,qFAAqF;IACrF,IAAI,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QACpE,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACxD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,kBAAkB,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjG,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CACV,oCAAoC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,0EAA0E,CACzI,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,GAAqB;YAC5B,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,qBAAqB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;SACnD,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,6BAA6B;QAC7B,IAAI,CAAC;YACH,QAAQ,CAAC,MAAM,GAAG,WAAW,CAAC;YAC9B,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;YACtD,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAsB,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nirnex/cli",
-  "version": "2.0.3",
+  "version": "4.0.0",
   "description": "Nirnex CLI — Decision Intelligence for software delivery",
   "type": "module",
   "bin": {