@piecemaker-legal/piecemaker 2.0.8 → 2.0.10

package/server/piecemaker/vendor/piecemaker-plugin/scripts/statusline.mjs

@@ -1,120 +1,46 @@
 #!/usr/bin/env node
-/**
- * statusLine Claude Code — bandeau permanent d'état de l'anonymisation PieceMaker.
- *
- * Contrat statusLine (type "command") : JSON sur stdin décrivant la session
- * (workspace, model...), une seule ligne sur stdout, exit 0. Appelé très
- * souvent (à chaque rendu de l'interface) : ce script doit rester rapide et
- * ne jamais bloquer ni jeter.
- *
- * Le badge reflète les deux mêmes conditions que `proxy-guard.mjs` (routage
- * + proxy vivant), mais sans autostart ni journalisation : une statusLine
- * n'est pas le bon endroit pour une action de fond, seulement pour un
- * affichage. Le sondage réseau est borné à 400 ms et son résultat est mis en
- * cache 5 s dans ~/.piecemaker/proxy-statusline.json pour éviter une requête
- * à chaque frappe.
- */
-
-import fs from 'node:fs';
 import http from 'node:http';
-import os from 'node:os';
 import path from 'node:path';
-import { HOME_DIR, loadPieceMakerConfig, readHookPayload } from './lib/hook-io.mjs';
+import { loadPieceMakerConfig, readHookPayload } from './lib/hook-io.mjs';
 
-const CACHE_FILE = path.join(HOME_DIR, 'proxy-statusline.json');
-const CACHE_TTL_MS = 5000;
 const PROBE_TIMEOUT_MS = 400;
 const STDIN_TIMEOUT_MS = 1000;
-const DEFAULT_PORT = 4000;
 const FLUSH_TIMEOUT_MS = 1000;
+const VERT = '\u001b[32m';
+const ROUGE = '\u001b[31m';
+const RESET = '\u001b[0m';
 
-const SETTINGS_FILE = path.join(os.homedir(), '.claude', 'settings.json');
-
-function validPort(value) {
-  const port = Number(value);
-  return Number.isInteger(port) && port >= 1024 && port <= 65535 ? port : DEFAULT_PORT;
-}
-
-/** Même définition du routage que proxy-guard.mjs — lecture directe, jamais de throw. */
-function readRouting() {
-  try {
-    const settings = JSON.parse(fs.readFileSync(SETTINGS_FILE, 'utf8'));
-    const value = settings?.env?.HTTPS_PROXY;
-    if (typeof value !== 'string' || !value) return false;
-    const url = new URL(value);
-    return ['127.0.0.1', 'localhost'].includes(url.hostname);
-  } catch {
-    return false;
-  }
-}
-
-/** Cache court entre deux sondages. Un cache illisible/absent n'empêche pas de sonder. */
-function readCache() {
+function routedProxy() {
   try {
-    const parsed = JSON.parse(fs.readFileSync(CACHE_FILE, 'utf8'));
-    if (typeof parsed?.ts !== 'number' || typeof parsed?.actif !== 'boolean') return null;
-    if (Date.now() - parsed.ts > CACHE_TTL_MS) return null;
-    return parsed;
+    const url = new URL(process.env.HTTPS_PROXY || process.env.https_proxy || '');
+    return ['127.0.0.1', 'localhost'].includes(url.hostname) ? url : null;
   } catch {
     return null;
   }
 }
 
-function writeCache(actif) {
-  try {
-    fs.mkdirSync(HOME_DIR, { recursive: true });
-    fs.writeFileSync(CACHE_FILE, JSON.stringify({ ts: Date.now(), actif }), 'utf8');
-  } catch {
-    // Le cache est un confort de performance, pas une garantie.
-  }
-}
-
-function probe(port, timeoutMs) {
+function proxyHealthy(proxy) {
   return new Promise((resolve) => {
-    let settled = false;
-    const finish = (ok) => {
-      if (settled) return;
-      settled = true;
-      resolve(ok);
-    };
-    try {
-      const request = http.get({
-        hostname: '127.0.0.1',
-        port,
-        path: '/health/liveliness',
-        timeout: timeoutMs,
-      }, (response) => {
-        response.resume();
-        finish(response.statusCode === 200);
-      });
-      request.on('timeout', () => { request.destroy(); finish(false); });
-      request.on('error', () => finish(false));
-    } catch {
-      finish(false);
-    }
+    const request = http.get({ hostname: proxy.hostname, port: proxy.port, path: '/health', timeout: PROBE_TIMEOUT_MS }, (response) => {
+      response.resume();
+      resolve(response.statusCode === 200);
+    });
+    request.on('timeout', () => { request.destroy(); resolve(false); });
+    request.on('error', () => resolve(false));
   });
 }
 
-/**
- * Couleur ANSI du badge : vert quand l'anonymisation est effective, rouge
- * sinon. Claude Code rend les séquences ANSI de la statusLine ; on n'en met
- * que sur le badge, jamais sur le dossier ni le modèle.
- */
-const VERT = '\u001b[32m';
-const ROUGE = '\u001b[31m';
-const RESET = '\u001b[0m';
-
 function colore(texte, couleur) {
   return process.env.NO_COLOR ? texte : `${couleur}${texte}${RESET}`;
 }
 
-function badge(routed, actif) {
-  if (routed && actif) return colore('🔒 Anonymisation PieceMaker active ✓', VERT);
-  if (routed) return colore('⚠️ Anonymisation PieceMaker inactive — proxy arrêté (piecemaker)', ROUGE);
-  return colore('⚠️ Anonymisation PieceMaker inactive — accès direct', ROUGE);
+async function badge() {
+  const proxy = routedProxy();
+  if (!proxy) return colore('⚠️ Anonymisation PieceMaker inactive — accès direct', ROUGE);
+  if (await proxyHealthy(proxy)) return colore('🔒 Anonymisation PieceMaker active ✓', VERT);
+  return colore('⛔ Anonymisation PieceMaker indisponible — requêtes bloquées (relancer piecemaker)', ROUGE);
 }
 
-/** Écrit la ligne et quitte proprement, en attendant le flush comme hook-io.mjs::emit. */
 function printAndExit(text) {
   const guard = setTimeout(() => process.exit(0), FLUSH_TIMEOUT_MS);
   guard.unref?.();
@@ -139,35 +65,16 @@ function safeCwdName(cwd) {
 }
 
 async function main() {
-  let payload = null;
-  try {
-    payload = await readHookPayload(STDIN_TIMEOUT_MS);
-  } catch {
-    payload = null;
-  }
-
+  const payload = await readHookPayload(STDIN_TIMEOUT_MS).catch(() => null);
   const dirName = safeCwdName(payload?.workspace?.current_dir || payload?.cwd);
   const modelName = typeof payload?.model?.display_name === 'string' ? payload.model.display_name : '';
-
-  let config = {};
+  let disabled = false;
   try {
-    config = loadPieceMakerConfig();
+    disabled = loadPieceMakerConfig()?.anonymizer?.enabled === false;
   } catch {
-    config = {};
+    disabled = false;
   }
-  const port = validPort(config.litellmPort);
-  const routed = readRouting();
-
-  const cached = readCache();
-  let actif;
-  if (cached) {
-    actif = cached.actif;
-  } else {
-    actif = await probe(port, PROBE_TIMEOUT_MS);
-    writeCache(actif);
-  }
-
-  const parts = [badge(routed, actif)];
+  const parts = [disabled ? 'Anonymisation PieceMaker désactivée' : await badge()];
   if (dirName) parts.push(dirName);
   if (modelName) parts.push(modelName);
   printAndExit(parts.join(' · '));

package/server/piecemaker/vendor/piecemaker-plugin/skills/tamponnage/SKILL.md

@@ -40,8 +40,8 @@ dossier ni par utilisateur.
    haute définition : forme, contour, police, couleur et épaisseur, puis
    « Enregistrer le tampon »).
 2. **La liste des pièces vient des dossiers juridiques enregistrés** :
-   `GET /api/admin/dossiers` → `listDossiers` bâtit la liste sur le registre
-   `caseFolders` (quelle que soit sa place dans l'arborescence), et chaque
+   `GET /api/admin/dossiers` → `listDossiers` bâtit la liste sur les projets
+   publiés par le serveur (`~/.piecemaker/projects.json`), et chaque
    pièce est un **fichier original** du dossier (tout fichier qui n'est ni
    `.md` ni `.json`, via `listOriginals`), **identifié par son chemin relatif
    au dossier** — aucun `compilation_dossier_*.json` n'est requis. L'ancien

package/server/piecemaker/vendor/websocket-server/admin-routes.cjs

@@ -5,9 +5,9 @@ const crypto = require('node:crypto');
 const { spawn, spawnSync } = require('child_process');
 const { performance } = require('node:perf_hooks');
 const {
-  listConfiguredCases,
+  listProjectCases,
+  projectCaseEntry,
   readRegistryConfig,
-  registerCaseFolder,
   resolveCaseReference,
   validateSelectedCaseFolder,
 } = require('./case-registry.cjs');
@@ -67,13 +67,6 @@ const {
   unregisterClaudeAsset,
 } = require('./claude-assets.cjs');
 const { claudeHooksStatus } = require('./claude-hooks.cjs');
-const {
-  controlDossierBot,
-  controlTelegram,
-  getTelegramState,
-  saveDossierBot,
-  saveTelegramConfig,
-} = require('./telegram-admin.cjs');
 const {
   DEFAULT_CASE_FOLDER_STRUCTURE,
   configuredCaseFolderStructure,
@@ -208,8 +201,9 @@ async function registerLegalCase({
   homeDir,
 } = {}) {
   const root = validateSelectedCaseFolder(folder);
-  const previous = readRegistryConfig(configFile);
-  const structure = ensureCaseFolderStructure(root, previous);
+  const entry = projectCaseEntry(root);
+  if (!entry) throw new Error('Ce dossier n’est pas un projet enregistré.');
+  const structure = ensureCaseFolderStructure(root, readRegistryConfig(configFile));
   const protection = readProtection(root);
   if (!protection.exists) writeProtection(root, { unprotected: [] });
   const currentMapping = readCaseMapping(root);
@@ -217,11 +211,8 @@ async function registerLegalCase({
     ? currentMapping
     : writeCaseMapping(root, { mapping: {}, reverse_mapping: {} });
 
-  const registered = registerCaseFolder(previous, root);
-  atomicWrite(configFile, `${JSON.stringify(registered.config, null, 2)}\n`);
-
   const folderOverview = await caseOverview(path.dirname(root), homeDir, path.basename(root));
-  folderOverview.path = registered.entry.id;
+  folderOverview.path = entry.id;
   folderOverview.location = root;
   folderOverview.registered = true;
   folderOverview.branches = await historyBranches(path.dirname(root), homeDir, path.basename(root));
@@ -237,20 +228,12 @@ async function registerLegalCase({
 
 function defaultConfig(repoRoot, homeDir = path.join(os.homedir(), '.piecemaker')) {
   return {
-    port: 43098,
     pythonPath: null,
     venvPath: path.join(homeDir, 'venv'),
-    adminTheme: 'light',
     caseFolderStructure: { ...DEFAULT_CASE_FOLDER_STRUCTURE },
   };
 }
 
-function validateAdminTheme(value) {
-  const theme = String(value || '');
-  if (theme !== 'light' && theme !== 'dark') throw new Error('Le thème doit être « light » ou « dark ».');
-  return theme;
-}
-
 function readJson(file, fallback) {
   try {
     return fs.existsSync(file) ? JSON.parse(fs.readFileSync(file, 'utf8')) : fallback;
@@ -741,7 +724,6 @@ async function configurationOverview({ repoRoot, homeDir, userHome, getRuntimeSt
     },
   ];
   const models = await ollamaState(fetchImpl);
-  const telegram = getTelegramState({ repoRoot, homeDir, userHome });
 
   // Moteurs Python locaux du venv — détection par présence de paquet, sans import
   // (importer gliner2/mineru chargerait des centaines de Mo à chaque appel).
@@ -777,22 +759,11 @@ async function configurationOverview({ repoRoot, homeDir, userHome, getRuntimeSt
     && glinerModelReady;
   const mineruReady = hasPackage('mineru') || hasPackage('magic_pdf')
     || fs.existsSync(path.join(venvDir, 'bin', 'mineru'));
-  const folders = listConfiguredCases(readRegistryConfig(path.join(homeDir, 'config.json'))).map((entry) => {
-    const bot = telegram.dossiers.find((candidate) => {
-      try { return path.resolve(candidate.workdir) === path.resolve(entry.root); } catch { return false; }
-    });
-    return {
-      id: entry.id,
-      name: entry.name,
-      path: entry.root,
-      bot: bot ? {
-        id: bot.id,
-        name: bot.name,
-        configured: Boolean(bot.linked),
-        running: Boolean(bot.running),
-      } : null,
-    };
-  });
+  const folders = listProjectCases().map((entry) => ({
+    id: entry.id,
+    name: entry.name,
+    path: entry.root,
+  }));
 
   return {
     components: {
@@ -845,22 +816,6 @@ async function configurationOverview({ repoRoot, homeDir, userHome, getRuntimeSt
           ? 'OCR local · PDF scannés et images'
           : 'Optionnel · non installé',
       },
-      telegram: {
-        name: 'Telegram',
-        installed: true,
-        optional: true,
-        configured: Boolean(telegram.assistant.token.configured || telegram.monitor.token.configured),
-        summary: (() => {
-          const running = [telegram.assistant.running && 'Assistant', telegram.monitor.running && 'Surveillance'].filter(Boolean);
-          if (running.length) return `${running.join(' + ')} en ligne`;
-          if (telegram.assistant.token.configured || telegram.monitor.token.configured) return 'Configuré · arrêté';
-          return 'Aucun bot configuré';
-        })(),
-        bots: [
-          { name: telegram.assistant.name, role: 'Assistant', configured: Boolean(telegram.assistant.token.configured), running: Boolean(telegram.assistant.running) },
-          { name: telegram.monitor.name, role: 'Surveillance', configured: Boolean(telegram.monitor.token.configured), running: Boolean(telegram.monitor.running) },
-        ],
-      },
     },
     models: {
       provider: 'Ollama',
@@ -1584,9 +1539,8 @@ function finishAdminTiming(res, metric, startedAt, details = {}) {
 // dans l'arborescence. Chaque dossier expose ses pièces originales — tout fichier
 // qui n'est ni `.md` ni `.json` —, identifiées par leur chemin relatif au dossier.
 async function listDossiers(repoRoot, homeDir) {
-  const config = readRegistryConfig(path.join(homeDir, 'config.json'));
   const dossiers = [];
-  for (const entry of listConfiguredCases(config)) {
+  for (const entry of listProjectCases()) {
     let originals;
     try {
       originals = await listOriginals(entry.root);
@@ -2045,11 +1999,10 @@ function createAdminRouter({
   const envFile = path.join(repoRoot, '.env');
   const registryConfig = () => readRegistryConfig(configFile);
   const selectedCase = (reference) => {
-    const config = registryConfig();
-    const legalCase = resolveCaseReference(config, reference);
+    const legalCase = resolveCaseReference(reference);
     // Migration idempotente des dossiers enregistrés avant l'introduction de
     // l'arborescence métier. Le manifeste fige les noms utilisés par ce dossier.
-    ensureCaseFolderStructure(legalCase.root, config);
+    ensureCaseFolderStructure(legalCase.root, registryConfig());
     return legalCase;
   };
 
@@ -2166,13 +2119,7 @@ function createAdminRouter({
       const patch = req.body?.config || {};
       const next = { ...current };
 
-      if (patch.port !== undefined) {
-        const port = Number(patch.port);
-        if (!Number.isInteger(port) || port < 1024 || port > 65535) throw new Error('Le port doit être compris entre 1024 et 65535.');
-        next.port = port;
-      }
       if (patch.pythonPath !== undefined) next.pythonPath = String(patch.pythonPath || '').trim() || null;
-      if (patch.adminTheme !== undefined) next.adminTheme = validateAdminTheme(patch.adminTheme);
       if (patch.caseFolderStructure !== undefined) {
         next.caseFolderStructure = normalizeCaseFolderStructure({
           ...current.caseFolderStructure,
@@ -2421,8 +2368,7 @@ function createAdminRouter({
   router.get('/repository', async (req, res) => {
     const startedAt = performance.now();
     try {
-      const config = registryConfig();
-      const entries = listConfiguredCases(config);
+      const entries = listProjectCases();
       const overview = {
         name: 'PieceMaker',
         root: '',
@@ -2444,21 +2390,6 @@ function createAdminRouter({
     }
   });
 
-  router.post('/repository/cases', async (req, res) => {
-    try {
-      const selected = await pickFolder(process.platform, userHome);
-      if (!selected) return res.json({ ok: true, cancelled: true });
-      const result = await registerLegalCase({
-        folder: selected,
-        configFile,
-        homeDir,
-      });
-      res.status(201).json({ ok: true, ...result });
-    } catch (error) {
-      res.status(400).json({ error: error.message });
-    }
-  });
-
   router.get('/repository/case', async (req, res) => {
     const startedAt = performance.now();
     try {
@@ -2980,42 +2911,6 @@ function createAdminRouter({
     }
   });
 
-  router.get('/telegram', (req, res) => {
-    res.json(getTelegramState({ repoRoot, homeDir, userHome }));
-  });
-
-  router.put('/telegram', (req, res) => {
-    try {
-      res.json({ ok: true, ...saveTelegramConfig({ repoRoot, homeDir, userHome }, req.body) });
-    } catch (error) {
-      res.status(400).json({ error: error.message });
-    }
-  });
-
-  router.post('/telegram/:role/:action', (req, res) => {
-    try {
-      res.json(controlTelegram({ repoRoot, homeDir, userHome }, req.params.role, req.params.action));
-    } catch (error) {
-      res.status(400).json({ error: error.message });
-    }
-  });
-
-  router.put('/telegram/dossiers/:id', (req, res) => {
-    try {
-      res.json({ ok: true, dossier: saveDossierBot({ repoRoot, homeDir, userHome }, req.params.id, req.body) });
-    } catch (error) {
-      res.status(400).json({ error: error.message });
-    }
-  });
-
-  router.post('/telegram/dossiers/:id/:action', (req, res) => {
-    try {
-      res.json(controlDossierBot({ repoRoot, homeDir, userHome }, req.params.id, req.params.action));
-    } catch (error) {
-      res.status(400).json({ error: error.message });
-    }
-  });
-
   return router;
 }
 
@@ -3057,5 +2952,4 @@ module.exports = {
   saveManagedFile,
   selectLocalFolder,
   updateEnvFile,
-  validateAdminTheme,
 };

package/server/piecemaker/vendor/websocket-server/case-registry.cjs

@@ -1,4 +1,4 @@
-/** Explicit legal-case folder registry used by the local admin and hooks. */
+/** Legal-case registry: every CloudCLI project published by the server is a case. */
 const crypto = require('node:crypto');
 const fs = require('node:fs');
 const path = require('node:path');
@@ -6,10 +6,7 @@ const path = require('node:path');
 const {
   isTechnicalCaseDirectoryName,
 } = require('../piecemaker-plugin/scripts/lib/commits.cjs');
-const {
-  configuredWatchPaths,
-  registeredCaseFolders,
-} = require('../piecemaker-plugin/scripts/lib/case-folders.cjs');
+const { registeredProjectFolders } = require('../piecemaker-plugin/scripts/lib/case-folders.cjs');
 
 function readRegistryConfig(configFile) {
   try {
@@ -25,8 +22,8 @@ function caseFolderId(folder) {
   return `folder-${digest}`;
 }
 
-function explicitEntries(config) {
-  return registeredCaseFolders(config).map((root) => ({
+function projectEntries() {
+  return registeredProjectFolders().map((root) => ({
     id: caseFolderId(root),
     name: path.basename(root),
     root,
@@ -36,22 +33,21 @@ function explicitEntries(config) {
   }));
 }
 
-/**
- * Admin index: only the explicitly registered legal-case folders. There is no
- * longer a workspace root whose immediate children are listed automatically —
- * a matter appears once it has been registered from the admin panel.
- */
-function listConfiguredCases(config) {
-  return explicitEntries(config).sort((a, b) =>
+function listProjectCases() {
+  return projectEntries().sort((a, b) =>
     a.name.localeCompare(b.name, 'fr') || a.root.localeCompare(b.root, 'fr'));
 }
 
-function resolveCaseReference(config, reference) {
+function resolveCaseReference(reference) {
   const token = String(reference || '').trim();
   if (!token) throw new Error('Dossier juridique invalide.');
-  const explicit = explicitEntries(config).find((entry) => entry.id === token);
-  if (!explicit) throw new Error('Ce dossier juridique n’est pas enregistré.');
-  return explicit;
+  const entry = projectEntries().find((candidate) => candidate.id === token);
+  if (!entry) throw new Error('Ce dossier juridique n’est pas un projet enregistré.');
+  return entry;
+}
+
+function projectCaseEntry(root) {
+  return projectEntries().find((entry) => entry.root === root) || null;
 }
 
 function validateSelectedCaseFolder(folder) {
@@ -71,23 +67,11 @@ function validateSelectedCaseFolder(folder) {
   return root;
 }
 
-function registerCaseFolder(config, folder) {
-  const root = validateSelectedCaseFolder(folder);
-  const existing = registeredCaseFolders(config);
-  const caseFolders = [...new Set([...existing, root])];
-  const next = { ...config, caseFolders };
-  next.anonymization = {
-    ...(config?.anonymization || {}),
-    watchPaths: configuredWatchPaths(next),
-  };
-  return { config: next, entry: explicitEntries(next).find((item) => item.root === root) };
-}
-
 module.exports = {
   caseFolderId,
-  listConfiguredCases,
+  listProjectCases,
+  projectCaseEntry,
   readRegistryConfig,
-  registerCaseFolder,
   resolveCaseReference,
   validateSelectedCaseFolder,
 };

package/server/piecemaker/vendor/websocket-server/claude-hooks.cjs

@@ -10,9 +10,6 @@
 const fs = require('fs');
 const path = require('path');
 
-/** Racine du dépôt git, quatre niveaux au-dessus de ce fichier vendorisé. */
-const GIT_REPO_ROOT = path.resolve(__dirname, '..', '..', '..', '..');
-
 const DEPRECATED_HOOKS = new Set([
   'anonymize-read.mjs',
   'deanonymize-write.mjs',
@@ -231,74 +228,6 @@ function installClaudeHooks(repoRoot, userHome) {
   return { ok: true, changed: changed || cleanup.changed, registered, settings: target, cleanup };
 }
 
-/**
- * Sentinelle SessionStart (proxy PII) — script unique, partagé avec Codex,
- * hors de piecemaker-plugin/ (voir scripts/piecemaker/hooks/proxy-guard.mjs).
- * Non sourcée depuis hooks.json : son placeholder ${CLAUDE_PLUGIN_ROOT} ne
- * peut pas désigner un script qui n'est délibérément pas vendorisé.
- */
-function sessionHookScriptPath() {
-  return path.join(GIT_REPO_ROOT, 'scripts', 'piecemaker', 'hooks', 'proxy-guard.mjs');
-}
-
-function sessionHookCommand() {
-  return `node "${sessionHookScriptPath().replaceAll('"', '\\"')}"`;
-}
-
-function isOwnSessionHook(hook) {
-  const command = typeof hook?.command === 'string' ? hook.command : '';
-  return command.includes('proxy-guard.mjs');
-}
-
-function claudeSessionHookStatus(userHome) {
-  const target = settingsPath(userHome);
-  const command = sessionHookCommand();
-  if (!fs.existsSync(target)) return { ok: false, reason: 'settings-absent', command };
-  const settings = readJson(target);
-  if (!settings) return { ok: false, reason: 'settings-invalide', command };
-  const groups = Array.isArray(settings.hooks?.SessionStart) ? settings.hooks.SessionStart : [];
-  const managed = groups.flatMap((group) => Array.isArray(group?.hooks) ? group.hooks : []).filter(isOwnSessionHook);
-  const exact = groups.some((group) => group?.matcher === 'startup|resume|clear'
-    && Array.isArray(group.hooks)
-    && group.hooks.some((hook) => hook?.type === 'command' && hook.command === command));
-  return { ok: exact && managed.length === 1, reason: exact && managed.length === 1 ? '' : 'hook-absent-ou-perime', command };
-}
-
-/** Fusionne uniquement la sentinelle SessionStart ; tous les hooks personnels sont conservés. */
-function installClaudeSessionHook(userHome) {
-  const target = settingsPath(userHome);
-  const command = sessionHookCommand();
-
-  let settings = {};
-  if (fs.existsSync(target)) {
-    settings = readJson(target);
-    if (!settings) return { ok: false, changed: false, reason: 'settings-invalide', command, settings: target };
-  }
-  if (!settings.hooks || typeof settings.hooks !== 'object' || Array.isArray(settings.hooks)) settings.hooks = {};
-
-  const groups = Array.isArray(settings.hooks.SessionStart) ? settings.hooks.SessionStart : [];
-  const preserved = [];
-  for (const group of groups) {
-    if (!group || typeof group !== 'object' || Array.isArray(group)) {
-      preserved.push(group);
-      continue;
-    }
-    const hooks = Array.isArray(group.hooks) ? group.hooks.filter((hook) => !isOwnSessionHook(hook)) : [];
-    if (hooks.length || !Array.isArray(group.hooks)) preserved.push({ ...group, hooks });
-  }
-
-  const status = claudeSessionHookStatus(userHome);
-  if (status.ok) return { ok: true, changed: false, command, settings: target };
-
-  settings.hooks.SessionStart = [...preserved, {
-    matcher: 'startup|resume|clear',
-    hooks: [{ type: 'command', command, timeout: 45 }],
-  }];
-  fs.mkdirSync(path.dirname(target), { recursive: true });
-  fs.writeFileSync(target, `${JSON.stringify(settings, null, 2)}\n`, 'utf8');
-  return { ok: true, changed: true, command, settings: target };
-}
-
 /**
  * statusLine Claude Code — même logique de matérialisation que les hooks,
  * mais pour une clé unique de settings.json (`statusLine`) plutôt qu'un
@@ -371,11 +300,9 @@ function installClaudeStatusLine(repoRoot, userHome) {
 
 module.exports = {
   claudeHooksStatus,
-  claudeSessionHookStatus,
   claudeStatusLineStatus,
   directHookGroups,
   installClaudeHooks,
-  installClaudeSessionHook,
   installClaudeStatusLine,
   removeDeprecatedHooks,
   settingsPath,

package/server/piecemaker/vendor/websocket-server/originals-pipeline.cjs

@@ -45,11 +45,6 @@ const {
 // Vocabulaire des sigles de sociétés (SA_1, SARL_1, PERS_MORALE_1…), miroir de
 // `_LEGAL_FORMS` (scan_utils.py) — sert à classer un code déjà attribué.
 const { isSocieteCode, societeCounterKey, detectCompanySigle, LEGAL_FORM_TOKENS } = require('./legal-forms.cjs');
-// À chaque enregistrement d'un mapping de dossier, le mapping central global est
-// reconstruit et dé-conflicté : c'est lui que le hook central applique à toute
-// lecture, dossier ou non. `syncCentralMapping` ne jette jamais — un central qui
-// échoue ne doit pas faire échouer la sauvegarde du dossier.
-const { syncCentralMapping } = require('../piecemaker-plugin/scripts/lib/central-mapping.cjs');
 
 const SCRIPTS_DIR = path.join(__dirname, 'scripts');
 const PIECEMAKER_HOME = path.join(os.homedir(), '.piecemaker');
@@ -154,8 +149,6 @@ function writeCaseMapping(caseRoot, document) {
       fs.unlinkSync(full);
     }
   }
-  // Le mapping central reflète désormais ce dossier. Best-effort et jamais bloquant.
-  try { syncCentralMapping(); } catch { /* le central ne doit pas bloquer une sauvegarde */ }
   return { file, exists: true, ignored: payload.ignored || [], ...payload };
 }
 

package/server/piecemaker/vendor/websocket-server/scripts/presidio-gliner/scanner_worker.py

@@ -26,6 +26,8 @@ from collections import defaultdict
 from importlib.metadata import PackageNotFoundError, version as package_version
 from typing import Dict, List, Optional
 
+os.environ["HF_HUB_OFFLINE"] = "1"
+
 # ---------------------------------------------------------------------------
 # Heavy imports — these are the expensive ones (~30-60s)
 # ---------------------------------------------------------------------------