@su-record/vibe 2.9.22 → 2.9.23

package/hooks/scripts/sentinel-guard.js

@@ -1,130 +1,130 @@
-#!/usr/bin/env node
-/**
- * Sentinel Guard — PreToolUse hook
- * Protects sentinel files and blocks dangerous operations.
- * Runs before pre-tool-guard.js.
- */
-
-const SENTINEL_PATH_PREFIX = 'src/infra/lib/autonomy/';
-
-const SENTINEL_PATH_RE = /^(\.\/|\.\\)?src[\\/]infra[\\/]lib[\\/]autonomy[\\/]/;
-
-const DANGEROUS_BASH_RE =
-  /\b(rm\s+-rf|kill\s+-9|drop\s+table|truncate|shutdown|reboot|mkfs|dd\s+if=)\b/i;
-
-/**
- * Extract file path from tool input
- */
-function extractFilePath(toolName, input) {
-  if (!input) return null;
-  try {
-    const parsed = typeof input === 'string' ? JSON.parse(input) : input;
-    if (toolName === 'Write' || toolName === 'Edit' || toolName === 'Read') {
-      return parsed.file_path || parsed.filePath || null;
-    }
-  } catch {
-    // Not JSON, try as plain string
-    return typeof input === 'string' ? input : null;
-  }
-  return null;
-}
-
-/**
- * Extract command from Bash tool input
- */
-function extractBashCommand(input) {
-  if (!input) return null;
-  try {
-    const parsed = typeof input === 'string' ? JSON.parse(input) : input;
-    return parsed.command || null;
-  } catch {
-    return typeof input === 'string' ? input : null;
-  }
-}
-
-/**
- * Check if path targets sentinel files
- */
-function isSentinelPath(filePath) {
-  if (!filePath) return false;
-  const normalized = filePath.replace(/\\/g, '/').replace(/^\.\//, '');
-  return normalized.startsWith(SENTINEL_PATH_PREFIX) || SENTINEL_PATH_RE.test(filePath);
-}
-
-/**
- * Main guard logic
- */
-function guard(toolName, toolInput) {
-  // Write/Edit targeting sentinel files → block
-  if (toolName === 'Write' || toolName === 'Edit') {
-    const filePath = extractFilePath(toolName, toolInput);
-    if (isSentinelPath(filePath)) {
-      return {
-        decision: 'block',
-        reason: `Sentinel files are protected. Cannot modify: ${filePath}`,
-      };
-    }
-  }
-
-  // Bash targeting sentinel files or dangerous commands
-  if (toolName === 'Bash') {
-    const command = extractBashCommand(toolInput);
-    if (command && isSentinelPath(command)) {
-      return {
-        decision: 'block',
-        reason: `Sentinel files are protected. Dangerous command targeting sentinel path.`,
-      };
-    }
-    if (command && DANGEROUS_BASH_RE.test(command)) {
-      // Check if command targets sentinel files
-      if (command.includes(SENTINEL_PATH_PREFIX) || command.includes('src/infra/lib/autonomy')) {
-        return {
-          decision: 'block',
-          reason: `Dangerous command targeting sentinel path: ${command}`,
-        };
-      }
-    }
-  }
-
-  // Allow — return undefined for normal flow
-  return undefined;
-}
-
-import fs from 'fs';
-
-/**
- * stdin에서 JSON 페이로드 읽기 (Claude Code 하네스 호환)
- */
-function readStdinSync() {
-  try {
-    if (process.stdin.isTTY) return null;
-    // fd 0을 직접 사용 (Windows는 '/dev/stdin'이 없음)
-    const buf = Buffer.alloc(65536);
-    const bytesRead = fs.readSync(0, buf, 0, buf.length, null);
-    if (bytesRead > 0) {
-      return JSON.parse(buf.toString('utf-8', 0, bytesRead));
-    }
-  } catch { /* 폴백 */ }
-  return null;
-}
-
-// Main execution: stdin JSON 우선, argv 폴백
-const stdinPayload = readStdinSync();
-const toolName = stdinPayload?.tool_name || process.argv[2] || '';
-const toolInput = stdinPayload?.tool_input
-  ? (typeof stdinPayload.tool_input === 'string'
-    ? stdinPayload.tool_input
-    : JSON.stringify(stdinPayload.tool_input))
-  : (process.argv[3] || process.env.TOOL_INPUT || '');
-
-import { logHookDecision } from './utils.js';
-
-const result = guard(toolName, toolInput);
-
-if (result) {
-  logHookDecision('sentinel-guard', toolName, 'block', result.reason);
-  console.log(JSON.stringify(result));
-  process.exit(2); // deny 규약
-}
-
-process.exit(0);
+#!/usr/bin/env node
+/**
+ * Sentinel Guard — PreToolUse hook
+ * Protects sentinel files and blocks dangerous operations.
+ * Runs before pre-tool-guard.js.
+ */
+
+const SENTINEL_PATH_PREFIX = 'src/infra/lib/autonomy/';
+
+const SENTINEL_PATH_RE = /^(\.\/|\.\\)?src[\\/]infra[\\/]lib[\\/]autonomy[\\/]/;
+
+const DANGEROUS_BASH_RE =
+  /\b(rm\s+-rf|kill\s+-9|drop\s+table|truncate|shutdown|reboot|mkfs|dd\s+if=)\b/i;
+
+/**
+ * Extract file path from tool input
+ */
+function extractFilePath(toolName, input) {
+  if (!input) return null;
+  try {
+    const parsed = typeof input === 'string' ? JSON.parse(input) : input;
+    if (toolName === 'Write' || toolName === 'Edit' || toolName === 'Read') {
+      return parsed.file_path || parsed.filePath || null;
+    }
+  } catch {
+    // Not JSON, try as plain string
+    return typeof input === 'string' ? input : null;
+  }
+  return null;
+}
+
+/**
+ * Extract command from Bash tool input
+ */
+function extractBashCommand(input) {
+  if (!input) return null;
+  try {
+    const parsed = typeof input === 'string' ? JSON.parse(input) : input;
+    return parsed.command || null;
+  } catch {
+    return typeof input === 'string' ? input : null;
+  }
+}
+
+/**
+ * Check if path targets sentinel files
+ */
+function isSentinelPath(filePath) {
+  if (!filePath) return false;
+  const normalized = filePath.replace(/\\/g, '/').replace(/^\.\//, '');
+  return normalized.startsWith(SENTINEL_PATH_PREFIX) || SENTINEL_PATH_RE.test(filePath);
+}
+
+/**
+ * Main guard logic
+ */
+function guard(toolName, toolInput) {
+  // Write/Edit targeting sentinel files → block
+  if (toolName === 'Write' || toolName === 'Edit') {
+    const filePath = extractFilePath(toolName, toolInput);
+    if (isSentinelPath(filePath)) {
+      return {
+        decision: 'block',
+        reason: `Sentinel files are protected. Cannot modify: ${filePath}`,
+      };
+    }
+  }
+
+  // Bash targeting sentinel files or dangerous commands
+  if (toolName === 'Bash') {
+    const command = extractBashCommand(toolInput);
+    if (command && isSentinelPath(command)) {
+      return {
+        decision: 'block',
+        reason: `Sentinel files are protected. Dangerous command targeting sentinel path.`,
+      };
+    }
+    if (command && DANGEROUS_BASH_RE.test(command)) {
+      // Check if command targets sentinel files
+      if (command.includes(SENTINEL_PATH_PREFIX) || command.includes('src/infra/lib/autonomy')) {
+        return {
+          decision: 'block',
+          reason: `Dangerous command targeting sentinel path: ${command}`,
+        };
+      }
+    }
+  }
+
+  // Allow — return undefined for normal flow
+  return undefined;
+}
+
+import fs from 'fs';
+
+/**
+ * stdin에서 JSON 페이로드 읽기 (Claude Code 하네스 호환)
+ */
+function readStdinSync() {
+  try {
+    if (process.stdin.isTTY) return null;
+    // fd 0을 직접 사용 (Windows는 '/dev/stdin'이 없음)
+    const buf = Buffer.alloc(65536);
+    const bytesRead = fs.readSync(0, buf, 0, buf.length, null);
+    if (bytesRead > 0) {
+      return JSON.parse(buf.toString('utf-8', 0, bytesRead));
+    }
+  } catch { /* 폴백 */ }
+  return null;
+}
+
+// Main execution: stdin JSON 우선, argv 폴백
+const stdinPayload = readStdinSync();
+const toolName = stdinPayload?.tool_name || process.argv[2] || '';
+const toolInput = stdinPayload?.tool_input
+  ? (typeof stdinPayload.tool_input === 'string'
+    ? stdinPayload.tool_input
+    : JSON.stringify(stdinPayload.tool_input))
+  : (process.argv[3] || process.env.TOOL_INPUT || '');
+
+import { logHookDecision } from './utils.js';
+
+const result = guard(toolName, toolInput);
+
+if (result) {
+  logHookDecision('sentinel-guard', toolName, 'block', result.reason);
+  console.log(JSON.stringify(result));
+  process.exit(2); // deny 규약
+}
+
+process.exit(0);

package/hooks/scripts/session-start.js

@@ -1,177 +1,186 @@
-/**
- * SessionStart Hook - 세션 시작 시 메모리/시간 로드 + 버전 체크
- */
-import { getToolsBaseUrl, PROJECT_DIR } from './utils.js';
-import fs from 'fs';
-import path from 'path';
-import os from 'os';
-import https from 'https';
-import { execSync } from 'child_process';
-
-const BASE_URL = getToolsBaseUrl();
-
-/**
- * npm 레지스트리에서 최신 버전 조회 (타임아웃 3초)
- */
-function fetchLatestVersion() {
-  return new Promise((resolve) => {
-    const req = https.get(
-      'https://registry.npmjs.org/@su-record/vibe/latest',
-      { timeout: 3000, headers: { 'Accept': 'application/json' } },
-      (res) => {
-        let data = '';
-        res.on('data', (chunk) => { data += chunk; });
-        res.on('end', () => {
-          try {
-            resolve(JSON.parse(data).version || null);
-          } catch { resolve(null); }
-        });
-      },
-    );
-    req.on('error', () => resolve(null));
-    req.on('timeout', () => { req.destroy(); resolve(null); });
-  });
-}
-
-function compareVersions(a, b) {
-  const partsA = a.replace(/^v/, '').split('.').map(Number);
-  const partsB = b.replace(/^v/, '').split('.').map(Number);
-  for (let i = 0; i < 3; i++) {
-    const numA = partsA[i] || 0;
-    const numB = partsB[i] || 0;
-    if (numA > numB) return 1;
-    if (numA < numB) return -1;
-  }
-  return 0;
-}
-
-function getCurrentVersion() {
-  try {
-    let globalNpmPath;
-    try {
-      globalNpmPath = execSync('npm root -g', { encoding: 'utf8', timeout: 3000 }).trim();
-    } catch {
-      const homeDir = os.homedir();
-      const fallbacks = [
-        '/usr/local/lib/node_modules',
-        path.join(homeDir, '.npm-global', 'lib', 'node_modules'),
-      ];
-      globalNpmPath = fallbacks.find(p => fs.existsSync(p)) || fallbacks[0];
-    }
-    const pkgPath = path.join(globalNpmPath, '@su-record', 'vibe', 'package.json');
-    if (fs.existsSync(pkgPath)) {
-      return JSON.parse(fs.readFileSync(pkgPath, 'utf8')).version || null;
-    }
-  } catch { /* ignore */ }
-  return null;
-}
-
-async function main() {
-  try {
-    const [memoryModule, timeModule] = await Promise.all([
-      import(`${BASE_URL}memory/index.js`),
-      import(`${BASE_URL}time/index.js`),
-    ]);
-
-    const [session, time, memories, latestVersion] = await Promise.all([
-      memoryModule.startSession({ projectPath: PROJECT_DIR }),
-      timeModule.getCurrentTime({ format: 'human', timezone: 'Asia/Seoul' }),
-      memoryModule.listMemories({ limit: 5, projectPath: PROJECT_DIR }),
-      fetchLatestVersion(),
-    ]);
-
-    console.log(session.content[0].text);
-    console.log('\n' + time.content[0].text);
-    console.log('\n[Recent Memories]');
-    console.log(memories.content[0].text);
-
-    // Version check
-    if (latestVersion) {
-      const currentVersion = getCurrentVersion();
-      if (currentVersion && compareVersions(latestVersion, currentVersion) > 0) {
-        console.log(`\n⬆️ Harness update available: v${currentVersion} → v${latestVersion}`);
-        console.log('   Run: vibe upgrade');
-      }
-    }
-
-    // Autonomy status summary
-    try {
-      const fs = await import('fs');
-      const configPath = `${PROJECT_DIR}/.claude/vibe/config.json`;
-      let autonomyMode = 'suggest';
-      let sentinelEnabled = true;
-
-      if (fs.existsSync(configPath)) {
-        const config = JSON.parse(fs.readFileSync(configPath, 'utf8'));
-        autonomyMode = config.autonomy?.mode || 'suggest';
-        sentinelEnabled = config.sentinel?.enabled !== false;
-      }
-
-      const LIB_BASE_A = (await import('./utils.js')).getLibBaseUrl();
-      const memModA = await import(`${LIB_BASE_A}memory/MemoryStorage.js`);
-      const storageA = new memModA.MemoryStorage(PROJECT_DIR);
-      const db = storageA.getDatabase();
-
-      const last24h = new Date(Date.now() - 86_400_000).toISOString();
-      let totalActions = 0;
-      let allowedActions = 0;
-      let blockedActions = 0;
-      let pendingSuggestions = 0;
-      let pendingConfirmations = 0;
-
-      try {
-        totalActions = db.prepare('SELECT COUNT(*) as c FROM audit_events WHERE createdAt >= ?').get(last24h)?.c ?? 0;
-        allowedActions = db.prepare("SELECT COUNT(*) as c FROM audit_events WHERE createdAt >= ? AND outcome = 'allowed'").get(last24h)?.c ?? 0;
-        blockedActions = db.prepare("SELECT COUNT(*) as c FROM audit_events WHERE createdAt >= ? AND outcome = 'blocked'").get(last24h)?.c ?? 0;
-      } catch { /* table not initialized yet */ }
-
-      try {
-        pendingSuggestions = db.prepare("SELECT COUNT(*) as c FROM suggestions WHERE status = 'pending'").get()?.c ?? 0;
-      } catch { /* table not initialized yet */ }
-
-      try {
-        pendingConfirmations = db.prepare("SELECT COUNT(*) as c FROM confirmations WHERE status = 'pending'").get()?.c ?? 0;
-      } catch { /* table not initialized yet */ }
-
-      const parts = [`${autonomyMode} mode`];
-      if (sentinelEnabled) parts.push('sentinel ON');
-      if (pendingConfirmations > 0) parts.push(`${pendingConfirmations} pending confirmations`);
-      if (pendingSuggestions > 0) parts.push(`${pendingSuggestions} suggestions`);
-      if (totalActions > 0) parts.push(`${totalActions} actions (${allowedActions} ok, ${blockedActions} blocked)`);
-
-      console.log(`\n🤖 Autonomy: ${parts.join(' | ')}`);
-      storageA.close();
-    } catch { /* autonomy not yet initialized, skip */ }
-
-    // Evolution status summary
-    try {
-      const LIB_BASE = (await import('./utils.js')).getLibBaseUrl();
-      const [memMod, regMod, insMod] = await Promise.all([
-        import(`${LIB_BASE}memory/MemoryStorage.js`),
-        import(`${LIB_BASE}evolution/GenerationRegistry.js`),
-        import(`${LIB_BASE}evolution/InsightStore.js`),
-      ]);
-      const storage = new memMod.MemoryStorage(PROJECT_DIR);
-      const registry = new regMod.GenerationRegistry(storage);
-      const insightStore = new insMod.InsightStore(storage);
-
-      const genStats = registry.getStats();
-      const active = genStats.byStatus?.active || 0;
-      const drafts = genStats.byStatus?.draft || 0;
-      const gaps = insightStore.getByType('skill_gap').length;
-
-      if (active > 0 || drafts > 0 || gaps > 0) {
-        const parts = [];
-        if (active > 0) parts.push(`${active} active skills`);
-        if (drafts > 0) parts.push(`${drafts} pending approval`);
-        if (gaps > 0) parts.push(`${gaps} gaps detected`);
-        console.log(`\n🧬 Evolution: ${parts.join(', ')}`);
-      }
-      storage.close();
-    } catch { /* evolution not yet initialized, skip */ }
-  } catch (e) {
-    console.log('[Session] Error:', e.message);
-  }
-}
-
-main();
+/**
+ * SessionStart Hook - 세션 시작 시 메모리/시간 로드 + 버전 체크
+ */
+import { getToolsBaseUrl, PROJECT_DIR } from './utils.js';
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import https from 'https';
+import { execSync } from 'child_process';
+
+const BASE_URL = getToolsBaseUrl();
+
+/**
+ * npm 레지스트리에서 최신 버전 조회 (타임아웃 3초)
+ */
+function fetchLatestVersion() {
+  return new Promise((resolve) => {
+    const req = https.get(
+      'https://registry.npmjs.org/@su-record/vibe/latest',
+      { timeout: 3000, headers: { 'Accept': 'application/json' } },
+      (res) => {
+        let data = '';
+        res.on('data', (chunk) => { data += chunk; });
+        res.on('end', () => {
+          try {
+            resolve(JSON.parse(data).version || null);
+          } catch { resolve(null); }
+        });
+      },
+    );
+    req.on('error', () => resolve(null));
+    req.on('timeout', () => { req.destroy(); resolve(null); });
+  });
+}
+
+function compareVersions(a, b) {
+  const partsA = a.replace(/^v/, '').split('.').map(Number);
+  const partsB = b.replace(/^v/, '').split('.').map(Number);
+  for (let i = 0; i < 3; i++) {
+    const numA = partsA[i] || 0;
+    const numB = partsB[i] || 0;
+    if (numA > numB) return 1;
+    if (numA < numB) return -1;
+  }
+  return 0;
+}
+
+function getCurrentVersion() {
+  try {
+    let globalNpmPath;
+    try {
+      globalNpmPath = execSync('npm root -g', { encoding: 'utf8', timeout: 3000 }).trim();
+    } catch {
+      const homeDir = os.homedir();
+      const fallbacks = [
+        '/usr/local/lib/node_modules',
+        path.join(homeDir, '.npm-global', 'lib', 'node_modules'),
+      ];
+      globalNpmPath = fallbacks.find(p => fs.existsSync(p)) || fallbacks[0];
+    }
+    const pkgPath = path.join(globalNpmPath, '@su-record', 'vibe', 'package.json');
+    if (fs.existsSync(pkgPath)) {
+      return JSON.parse(fs.readFileSync(pkgPath, 'utf8')).version || null;
+    }
+  } catch { /* ignore */ }
+  return null;
+}
+
+async function main() {
+  try {
+    const [memoryModule, timeModule] = await Promise.all([
+      import(`${BASE_URL}memory/index.js`),
+      import(`${BASE_URL}time/index.js`),
+    ]);
+
+    const [session, time, memories, latestVersion] = await Promise.all([
+      memoryModule.startSession({ projectPath: PROJECT_DIR }),
+      timeModule.getCurrentTime({ format: 'human', timezone: 'Asia/Seoul' }),
+      memoryModule.listMemories({ limit: 5, projectPath: PROJECT_DIR }),
+      fetchLatestVersion(),
+    ]);
+
+    console.log(session.content[0].text);
+    console.log('\n' + time.content[0].text);
+    console.log('\n[Recent Memories]');
+    console.log(memories.content[0].text);
+
+    // Version check
+    if (latestVersion) {
+      const currentVersion = getCurrentVersion();
+      if (currentVersion && compareVersions(latestVersion, currentVersion) > 0) {
+        console.log(`\n⬆️ Harness update available: v${currentVersion} → v${latestVersion}`);
+        console.log('   Run: vibe upgrade');
+      }
+    }
+
+    // Scope sync — 활성 SPEC 기반으로 scope.json 자동 갱신 (수동 관리면 스킵)
+    try {
+      const { syncScopeFile } = await import('./lib/scope-from-spec.js');
+      const result = syncScopeFile(PROJECT_DIR);
+      if (result.action === 'created' || result.action === 'updated' || result.action === 'removed') {
+        console.log(`\n🚧 Scope ${result.action} from active SPECs (.claude/vibe/scope.json)`);
+      }
+    } catch { /* scope sync is best-effort */ }
+
+    // Autonomy status summary
+    try {
+      const fs = await import('fs');
+      const configPath = `${PROJECT_DIR}/.claude/vibe/config.json`;
+      let autonomyMode = 'suggest';
+      let sentinelEnabled = true;
+
+      if (fs.existsSync(configPath)) {
+        const config = JSON.parse(fs.readFileSync(configPath, 'utf8'));
+        autonomyMode = config.autonomy?.mode || 'suggest';
+        sentinelEnabled = config.sentinel?.enabled !== false;
+      }
+
+      const LIB_BASE_A = (await import('./utils.js')).getLibBaseUrl();
+      const memModA = await import(`${LIB_BASE_A}memory/MemoryStorage.js`);
+      const storageA = new memModA.MemoryStorage(PROJECT_DIR);
+      const db = storageA.getDatabase();
+
+      const last24h = new Date(Date.now() - 86_400_000).toISOString();
+      let totalActions = 0;
+      let allowedActions = 0;
+      let blockedActions = 0;
+      let pendingSuggestions = 0;
+      let pendingConfirmations = 0;
+
+      try {
+        totalActions = db.prepare('SELECT COUNT(*) as c FROM audit_events WHERE createdAt >= ?').get(last24h)?.c ?? 0;
+        allowedActions = db.prepare("SELECT COUNT(*) as c FROM audit_events WHERE createdAt >= ? AND outcome = 'allowed'").get(last24h)?.c ?? 0;
+        blockedActions = db.prepare("SELECT COUNT(*) as c FROM audit_events WHERE createdAt >= ? AND outcome = 'blocked'").get(last24h)?.c ?? 0;
+      } catch { /* table not initialized yet */ }
+
+      try {
+        pendingSuggestions = db.prepare("SELECT COUNT(*) as c FROM suggestions WHERE status = 'pending'").get()?.c ?? 0;
+      } catch { /* table not initialized yet */ }
+
+      try {
+        pendingConfirmations = db.prepare("SELECT COUNT(*) as c FROM confirmations WHERE status = 'pending'").get()?.c ?? 0;
+      } catch { /* table not initialized yet */ }
+
+      const parts = [`${autonomyMode} mode`];
+      if (sentinelEnabled) parts.push('sentinel ON');
+      if (pendingConfirmations > 0) parts.push(`${pendingConfirmations} pending confirmations`);
+      if (pendingSuggestions > 0) parts.push(`${pendingSuggestions} suggestions`);
+      if (totalActions > 0) parts.push(`${totalActions} actions (${allowedActions} ok, ${blockedActions} blocked)`);
+
+      console.log(`\n🤖 Autonomy: ${parts.join(' | ')}`);
+      storageA.close();
+    } catch { /* autonomy not yet initialized, skip */ }
+
+    // Evolution status summary
+    try {
+      const LIB_BASE = (await import('./utils.js')).getLibBaseUrl();
+      const [memMod, regMod, insMod] = await Promise.all([
+        import(`${LIB_BASE}memory/MemoryStorage.js`),
+        import(`${LIB_BASE}evolution/GenerationRegistry.js`),
+        import(`${LIB_BASE}evolution/InsightStore.js`),
+      ]);
+      const storage = new memMod.MemoryStorage(PROJECT_DIR);
+      const registry = new regMod.GenerationRegistry(storage);
+      const insightStore = new insMod.InsightStore(storage);
+
+      const genStats = registry.getStats();
+      const active = genStats.byStatus?.active || 0;
+      const drafts = genStats.byStatus?.draft || 0;
+      const gaps = insightStore.getByType('skill_gap').length;
+
+      if (active > 0 || drafts > 0 || gaps > 0) {
+        const parts = [];
+        if (active > 0) parts.push(`${active} active skills`);
+        if (drafts > 0) parts.push(`${drafts} pending approval`);
+        if (gaps > 0) parts.push(`${gaps} gaps detected`);
+        console.log(`\n🧬 Evolution: ${parts.join(', ')}`);
+      }
+      storage.close();
+    } catch { /* evolution not yet initialized, skip */ }
+  } catch (e) {
+    console.log('[Session] Error:', e.message);
+  }
+}
+
+main();