@su-record/vibe 3.1.0 → 3.2.1

package/hooks/scripts/code-check.js

@@ -14,6 +14,7 @@ import { getToolsBaseUrl, PROJECT_DIR, readProjectConfig } from './utils.js';
 import { readFileSync } from 'fs';
 import path from 'path';
 import { buildCliCtx, isDirectRun } from './lib/hook-context.js';
+import { globToRegExp } from './lib/glob.js';
 
 const BASE_URL = getToolsBaseUrl();
 
@@ -42,35 +43,6 @@ const DEFAULT_CONSOLE_ALLOW_GLOBS = [
   '**/__tests__/**',
 ];
 
-/**
- * 경량 glob → RegExp 변환 (scope-guard와 동일 알고리즘, 독립 복사본).
- * @param {string} glob
- * @returns {RegExp}
- */
-function globToRegExp(glob) {
-  const normalized = glob.replace(/\\/g, '/');
-  let out = '';
-  for (let i = 0; i < normalized.length; i++) {
-    const c = normalized[i];
-    if (c === '*') {
-      if (normalized[i + 1] === '*') {
-        out += '.*';
-        i++;
-        if (normalized[i + 1] === '/') i++;
-      } else {
-        out += '[^/]*';
-      }
-    } else if (c === '?') {
-      out += '[^/]';
-    } else if ('.+^$()|{}[]\\'.includes(c)) {
-      out += '\\' + c;
-    } else {
-      out += c;
-    }
-  }
-  return new RegExp('^' + out + '$');
-}
-
 /**
  * .vibe/config.json의 qualityCheck.consoleAllow 글로브 목록 로드.
  * 기본 글로브와 병합하여 반환.
@@ -105,19 +77,12 @@ function isConsoleAllowed(filePath) {
 }
 
 /**
- * hook input에서 수정된 파일 경로 추출.
+ * hook ctx에서 수정된 파일 경로 추출.
  * @param {object} ctx
  * @returns {string[]}
  */
 function getModifiedFiles(ctx) {
-  try {
-    const parsed = ctx.payload || (ctx.hookInput ? JSON.parse(ctx.hookInput) : null);
-    const filePath = parsed?.tool_input?.file_path || parsed?.tool_input?.path;
-    return filePath ? [filePath] : [];
-  } catch {
-    // ignore
-  }
-  return [];
+  return ctx.filePath ? [ctx.filePath] : [];
 }
 
 /**
@@ -217,7 +182,7 @@ function runDetectors(filePath) {
 /**
  * in-process 진입점 — 품질 검사 + 관찰 캡처.
  * findings 배열을 반환한다 (디스패처가 수집해 additionalContext에 주입).
- * @param {{ payload: object|null, hookInput: string|null }} ctx
+ * @param {{ filePath: string }} ctx
  * @returns {Promise<{ exitCode: number, findings: string[] }>}
  */
 export async function run(ctx) {
@@ -225,9 +190,10 @@ export async function run(ctx) {
   const files = getModifiedFiles(ctx);
   if (files.length === 0) return { exitCode: 0, findings };
 
-  // 1. 하드룰 탐지기 실행 (changed file only) — additionalContext 주입만.
-  //    커밋 게이트(verifyRequired)는 태우지 않는다: 정규식 오탐 하나가
-  //    auto-commit을 차단하는 결합은 제거됨 (harness-review-2026-07-01).
+  // 1. 하드룰 탐지기 실행 (changed file only, regex only — 동적 import 없음) —
+  //    additionalContext 주입만. 커밋 게이트(verifyRequired)는 태우지 않는다:
+  //    정규식 오탐 하나가 auto-commit을 차단하는 결합은 제거됨
+  //    (harness-review-2026-07-01).
   try {
     const { p1 } = runDetectors(files[0]);
     for (const msg of p1) findings.push(msg);
@@ -235,6 +201,10 @@ export async function run(ctx) {
     // 탐지기 실패 → fail-open, 계속 진행
   }
 
+  // validateCodeQuality가 처리하지 않는 확장자는 무거운 동적 import
+  // (convention/index.js·memory/index.js — 모듈 그래프 + SQLite 오픈) 전에 조기 반환.
+  if (!CODE_EXT_RE.test(files[0])) return { exitCode: 0, findings };
+
   // 2. validateCodeQuality 호출 (P1/P2 필터)
   try {
     const module = await import(`${BASE_URL}convention/index.js`);
@@ -249,19 +219,21 @@ export async function run(ctx) {
     // Silently continue on check failure
   }
 
-  // 3. 관찰 자동 캡처
-  try {
-    const memModule = await import(`${BASE_URL}memory/index.js`);
-    const { type, title } = classifyObservation(files);
-
-    await memModule.addObservation({
-      type,
-      title: `${title}: ${files.map(f => f.split(/[\\/]/).pop()).join(', ')}`,
-      filesModified: files,
-      projectPath: PROJECT_DIR,
-    });
-  } catch {
-    // 관찰 캡처 실패해도 무시
+  // 3. 관찰 자동 캡처 — 위반(findings)이 실제로 있을 때만 SQLite 기록 (clean edit은 write 생략)
+  if (findings.length > 0) {
+    try {
+      const memModule = await import(`${BASE_URL}memory/index.js`);
+      const { type, title } = classifyObservation(files);
+
+      await memModule.addObservation({
+        type,
+        title: `${title}: ${files.map(f => f.split(/[\\/]/).pop()).join(', ')}`,
+        filesModified: files,
+        projectPath: PROJECT_DIR,
+      });
+    } catch {
+      // 관찰 캡처 실패해도 무시
+    }
   }
 
   return { exitCode: 0, findings };

package/hooks/scripts/lib/glob.js

@@ -0,0 +1,32 @@
+/**
+ * 경량 glob → RegExp 변환 — code-check.js·scope-guard.js 공용 (중복 제거).
+ *  - `**` : 경로 구분자 포함 임의 문자열
+ *  - `*`  : 구분자 제외 임의 문자열
+ *  - `?`  : 구분자 제외 한 글자
+ *  - 기타 정규식 메타문자는 이스케이프
+ * @param {string} glob
+ * @returns {RegExp}
+ */
+export function globToRegExp(glob) {
+  const normalized = glob.replace(/\\/g, '/');
+  let out = '';
+  for (let i = 0; i < normalized.length; i++) {
+    const c = normalized[i];
+    if (c === '*') {
+      if (normalized[i + 1] === '*') {
+        out += '.*';
+        i++;
+        if (normalized[i + 1] === '/') i++; // `**/` → `.*`
+      } else {
+        out += '[^/]*';
+      }
+    } else if (c === '?') {
+      out += '[^/]';
+    } else if ('.+^$()|{}[]\\'.includes(c)) {
+      out += '\\' + c;
+    } else {
+      out += c;
+    }
+  }
+  return new RegExp('^' + out + '$');
+}

package/hooks/scripts/lib/hook-context.js

@@ -7,11 +7,13 @@
  *   2. standalone CLI: antigravity-hooks.json / 기존 테스트가 스크립트를
  *      직접 실행 — isDirectRun()으로 감지해 stdin/argv/env에서 ctx를 구성
  *
- * ctx 형태: { toolName, toolInput, payload, hookInput }
+ * ctx 형태: { toolName, toolInput, payload, hookInput, filePath }
  *   - toolName: payload.tool_name 우선, argv 폴백 (현행 각 스크립트와 동일 우선순위)
  *   - toolInput: 문자열 정규화된 tool_input (payload → argv[3] → env.TOOL_INPUT)
  *   - payload: 파싱된 stdin JSON 또는 null
  *   - hookInput: stdin 원문 문자열 (code-check의 HOOK_INPUT 사용처 대체)
+ *   - filePath: toolInput 에서 뽑은 대상 파일 경로 (file_path → notebook_path →
+ *     path 우선순위 — 각 스크립트의 인라인 추출 로직과 동일 규약)
  */
 import fs from 'fs';
 import { pathToFileURL } from 'url';
@@ -96,6 +98,21 @@ export function readStdinSync() {
   return { raw: null, parsed: null, truncated: false };
 }
 
+/**
+ * toolInput(문자열화된 JSON)에서 대상 파일 경로 추출.
+ * 각 훅 스크립트의 인라인 추출과 동일 우선순위: file_path → notebook_path → path.
+ * @param {string} toolInput
+ * @returns {string}
+ */
+function extractFilePath(toolInput) {
+  try {
+    const parsed = JSON.parse(toolInput || '{}');
+    return parsed.file_path || parsed.notebook_path || parsed.path || '';
+  } catch {
+    return '';
+  }
+}
+
 /**
  * 실행 컨텍스트 구성. 우선순위는 현행 스크립트들과 동일:
  *   toolName: payload.tool_name → argvToolName
@@ -106,7 +123,7 @@ export function buildCtx({ rawInput = null, payload = null, argvToolName = '', a
   const toolInput = payload?.tool_input !== undefined && payload?.tool_input !== null
     ? (typeof payload.tool_input === 'string' ? payload.tool_input : JSON.stringify(payload.tool_input))
     : (argvToolInput || process.env.TOOL_INPUT || '');
-  return { toolName, toolInput, payload, hookInput: rawInput };
+  return { toolName, toolInput, payload, hookInput: rawInput, filePath: extractFilePath(toolInput) };
 }
 
 /** standalone CLI 모드용 ctx — stdin/argv/env에서 구성 */

package/hooks/scripts/lib/run-ledger.js

@@ -2,7 +2,7 @@
  * Run Ledger — vibe.run 실행 및 vibe.verify 결과 추적.
  *
  * 파일 위치: <projectDir>/.vibe/metrics/run-ledger.json
- * 형식: { runStarted, runFeature, verifyPassed, verifyAt, stopWarned,
+ * 형식: { runId, runStarted, runFeature, verifyPassed, verifyAt, stopWarned,
  *         verifyRequired, verifyRequiredReason }
  *
  * 모든 함수는 fail-open (try/catch, 오류 시 null/false 반환).
@@ -10,14 +10,56 @@
  */
 
 import fs from 'fs';
-import os from 'os';
+import { randomUUID } from 'crypto';
 import path from 'path';
 
+const EVIDENCE_SCHEMA_VERSION = '1.0.0';
+const UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+
 /** 레저 파일 경로 */
 function ledgerPath(projectDir) {
   return path.join(projectDir, '.vibe', 'metrics', 'run-ledger.json');
 }
 
+function evidencePath(projectDir, runId) {
+  if (!UUID_PATTERN.test(runId)) return null;
+  const runsDir = path.resolve(projectDir, '.vibe', 'runs');
+  const target = path.resolve(runsDir, runId, 'evidence.json');
+  return target.startsWith(`${runsDir}${path.sep}`) ? target : null;
+}
+
+function writeJsonAtomic(targetPath, data) {
+  if (!targetPath) return false;
+  const dir = path.dirname(targetPath);
+  fs.mkdirSync(dir, { recursive: true });
+  const tmp = path.join(dir, `.${path.basename(targetPath)}.${process.pid}.${Date.now()}.tmp`);
+  try {
+    fs.writeFileSync(tmp, JSON.stringify(data, null, 2), 'utf-8');
+    fs.renameSync(tmp, targetPath);
+    return true;
+  } catch {
+    try { fs.rmSync(tmp, { force: true }); } catch { /* fail-open */ }
+    return false;
+  }
+}
+
+function withLedgerLock(projectDir, operation) {
+  const lockPath = path.join(projectDir, '.vibe', 'metrics', 'run-ledger.lock');
+  let descriptor;
+  try {
+    fs.mkdirSync(path.dirname(lockPath), { recursive: true });
+    descriptor = fs.openSync(lockPath, 'wx');
+    return operation();
+  } catch {
+    return false;
+  } finally {
+    if (descriptor !== undefined) {
+      fs.closeSync(descriptor);
+      try { fs.rmSync(lockPath, { force: true }); } catch { /* fail-open */ }
+    }
+  }
+}
+
 /**
  * 레저 파일 읽기.
  * @param {string} projectDir
@@ -41,12 +83,61 @@ export function readLedger(projectDir) {
  */
 function writeLedger(projectDir, data) {
   try {
-    const p = ledgerPath(projectDir);
-    fs.mkdirSync(path.dirname(p), { recursive: true });
-    const tmp = path.join(os.tmpdir(), `run-ledger-${process.pid}-${Date.now()}.tmp`);
-    fs.writeFileSync(tmp, JSON.stringify(data, null, 2), 'utf-8');
-    fs.renameSync(tmp, p);
-    return true;
+    return writeJsonAtomic(ledgerPath(projectDir), data);
+  } catch {
+    return false;
+  }
+}
+
+function verificationResults(results) {
+  if (Array.isArray(results)) {
+    return results
+      .filter(item => item
+        && typeof item === 'object'
+        && typeof item.command === 'string'
+        && Number.isInteger(item.exitCode))
+      .map(item => ({
+        command: item.command,
+        exitCode: item.exitCode,
+      }));
+  }
+  return [];
+}
+
+function resolveSpecPath(projectDir, feature) {
+  if (typeof feature !== 'string' || feature.includes('..') || /[\\/]/.test(feature)) {
+    return null;
+  }
+  const flatPath = `.vibe/specs/${feature}.md`;
+  if (fs.existsSync(path.join(projectDir, flatPath))) return flatPath;
+  const splitPath = `.vibe/specs/${feature}/_index.md`;
+  return fs.existsSync(path.join(projectDir, splitPath)) ? splitPath : null;
+}
+
+function buildEvidence(projectDir, ledger, passed, generatedAt) {
+  return {
+    schemaVersion: EVIDENCE_SCHEMA_VERSION,
+    runId: ledger.runId,
+    specPath: resolveSpecPath(projectDir, ledger.runFeature),
+    generatedAt,
+    judges: {
+      deterministic: {
+        authority: 'blocking',
+        verifyPassed: Boolean(passed),
+        verificationResults: verificationResults(ledger.verificationResults),
+      },
+      model: { authority: 'advisory-only', canComplete: false },
+      humanTaste: { authority: 'release-only', canComplete: false },
+    },
+  };
+}
+
+function writeEvidence(projectDir, ledger, passed, generatedAt) {
+  try {
+    return writeJsonAtomic(
+      evidencePath(projectDir, ledger.runId),
+      buildEvidence(projectDir, ledger, passed, generatedAt),
+    );
   } catch {
     return false;
   }
@@ -59,10 +150,12 @@ function writeLedger(projectDir, data) {
  * @returns {boolean} 성공 여부
  */
 export function recordRunStart(projectDir, feature) {
-  try {
+  return withLedgerLock(projectDir, () => {
     const existing = readLedger(projectDir) || {};
+    const { verificationResults: _results, verificationCommands: _commands, ...retained } = existing;
     const next = {
-      ...existing,
+      ...retained,
+      runId: randomUUID(),
       runStarted: new Date().toISOString(),
       runFeature: feature || null,
       verifyPassed: false,
@@ -70,9 +163,7 @@ export function recordRunStart(projectDir, feature) {
       stopWarned: false,
     };
     return writeLedger(projectDir, next);
-  } catch {
-    return false;
-  }
+  });
 }
 
 /**
@@ -80,25 +171,36 @@ export function recordRunStart(projectDir, feature) {
  * pass 시 verifyRequired 상태를 클리어한다.
  * @param {string} projectDir
  * @param {boolean} passed - 검증 통과 여부
+ * @param {{runId?: string, verificationResults?: object[]}} options
  * @returns {boolean} 성공 여부
  */
-export function recordVerify(projectDir, passed) {
-  try {
+export function recordVerify(projectDir, passed, options = {}) {
+  return withLedgerLock(projectDir, () => {
     const existing = readLedger(projectDir) || {};
+    const existingRunId = UUID_PATTERN.test(existing.runId || '') ? existing.runId : null;
+    if (existing.runId !== undefined && !existingRunId) return false;
+    if (existingRunId && options.runId !== existingRunId) return false;
+    const runId = existingRunId || randomUUID();
+    const results = verificationResults(options.verificationResults);
+    if (passed && (results.length === 0 || results.some(result => result.exitCode !== 0))) {
+      return false;
+    }
+    const generatedAt = new Date().toISOString();
     const next = {
       ...existing,
+      runId,
       verifyPassed: Boolean(passed),
-      verifyAt: new Date().toISOString(),
+      verifyAt: generatedAt,
+      verificationResults: results,
     };
     // pass 시 verifyRequired 클리어
     if (passed) {
       next.verifyRequired = false;
       next.verifyRequiredReason = null;
     }
+    if (!writeEvidence(projectDir, next, passed, generatedAt)) return false;
     return writeLedger(projectDir, next);
-  } catch {
-    return false;
-  }
+  });
 }
 
 /**
@@ -144,9 +246,9 @@ export function markStopWarned(projectDir) {
  */
 export function extractRunFeature(prompt) {
   try {
-    const m = prompt.match(/(?:\/|\$)vibe\.run\s+([^\s]+)/i);
+    const m = prompt.match(/(?:\/|\$)vibe\.run\s+(?:"([^"]+)"|'([^']+)'|([^\s]+))/i);
     if (!m) return null;
-    const token = m[1];
+    const token = m[1] || m[2] || m[3];
     // 플래그(-- 시작)나 키워드는 기능명이 아님
     if (token.startsWith('-')) return null;
     return token;

package/hooks/scripts/post-edit.js

@@ -17,14 +17,13 @@ const CODE_EXT_RE = /\.(ts|tsx|js|jsx|mjs|cjs)$/;
 /**
  * in-process 진입점 — console.log 감지만 수행.
  * findings 배열 반환 (디스패처가 수집해 additionalContext에 주입).
- * @param {{ toolInput: string }} ctx
+ * @param {{ filePath: string }} ctx
  * @returns {Promise<{ exitCode: number, findings: string[] }>}
  */
 export async function run(ctx) {
   const findings = [];
   try {
-    const input = JSON.parse(ctx.toolInput || '{}');
-    const filePath = input.file_path || input.path || '';
+    const filePath = ctx.filePath;
 
     if (filePath && CODE_EXT_RE.test(filePath)) {
       const resolved = path.resolve(filePath);

package/hooks/scripts/prompt-dispatcher.js

@@ -76,7 +76,7 @@ const DISPATCH_RULES = [
   {
     pattern: /e2e.*테스트|e2e.*test|playwright|브라우저.*테스트|browser.*test/i,
     script: null,
-    echo: '[E2E MODE] Use /vibe.utils --e2e for Playwright-based browser testing. Supports visual regression and video recording.',
+    echo: '[E2E MODE] Use /vibe.verify --e2e for Playwright-based browser testing. Supports visual regression and video recording.',
     label: 'e2e-echo',
   },
 

package/hooks/scripts/scope-guard.js

@@ -23,6 +23,7 @@ import fs from 'fs';
 import path from 'path';
 import { PROJECT_DIR, logHookDecision, projectVibePath, projectVibeRoot } from './utils.js';
 import { buildCliCtx, isDirectRun } from './lib/hook-context.js';
+import { globToRegExp } from './lib/glob.js';
 
 const SCOPE_PATH = projectVibePath(PROJECT_DIR, 'scope.json');
 
@@ -45,37 +46,6 @@ function readScope() {
   }
 }
 
-/**
- * 경량 glob → RegExp 변환.
- *  - `**` : 경로 구분자 포함 임의 문자열
- *  - `*`  : 구분자 제외 임의 문자열
- *  - `?`  : 구분자 제외 한 글자
- *  - 기타 정규식 메타문자는 이스케이프
- */
-function globToRegExp(glob) {
-  const normalized = glob.replace(/\\/g, '/');
-  let out = '';
-  for (let i = 0; i < normalized.length; i++) {
-    const c = normalized[i];
-    if (c === '*') {
-      if (normalized[i + 1] === '*') {
-        out += '.*';
-        i++;
-        if (normalized[i + 1] === '/') i++; // `**/` → `.*`
-      } else {
-        out += '[^/]*';
-      }
-    } else if (c === '?') {
-      out += '[^/]';
-    } else if ('.+^$()|{}[]\\'.includes(c)) {
-      out += '\\' + c;
-    } else {
-      out += c;
-    }
-  }
-  return new RegExp('^' + out + '$');
-}
-
 function matchesAny(relPath, patterns) {
   return patterns.some(p => globToRegExp(p).test(relPath));
 }
@@ -87,18 +57,9 @@ function toRelative(filePath) {
   return rel || path.basename(filePath).replace(/\\/g, '/');
 }
 
-function extractFilePath(toolInput) {
-  if (!toolInput) return '';
-  if (typeof toolInput === 'string') {
-    try { return JSON.parse(toolInput).file_path || ''; }
-    catch { return toolInput; }
-  }
-  return typeof toolInput.file_path === 'string' ? toolInput.file_path : '';
-}
-
 /**
  * in-process 진입점 — 디스패처가 ctx를 전달해 직접 호출.
- * @param {{ toolName: string, toolInput: string }} ctx
+ * @param {{ toolName: string, toolInput: string, filePath: string }} ctx
  * @returns {Promise<number>} exit code (0 = allow/no-op, 2 = block)
  */
 export async function run(ctx) {
@@ -108,7 +69,7 @@ export async function run(ctx) {
   const toolName = ctx.toolName;
   if (toolName !== 'Edit' && toolName !== 'Write') return 0;
 
-  const filePath = extractFilePath(ctx.toolInput);
+  const filePath = ctx.filePath;
   if (!filePath) return 0;
 
   const rel = toRelative(filePath);

package/hooks/scripts/sentinel-guard.js

@@ -30,22 +30,6 @@ const SENTINEL_PATH_RE =
 const DANGEROUS_BASH_RE =
   /\b(rm\s+-rf|kill\s+-9|drop\s+table|truncate|shutdown|reboot|mkfs|dd\s+if=)\b/i;
 
-/**
- * Extract file path from tool input
- */
-function extractFilePath(toolName, input) {
-  if (!input) return null;
-  try {
-    const parsed = typeof input === 'string' ? JSON.parse(input) : input;
-    if (toolName === 'Write' || toolName === 'Edit' || toolName === 'Read') {
-      return parsed.file_path || parsed.filePath || null;
-    }
-  } catch {
-    return typeof input === 'string' ? input : null;
-  }
-  return null;
-}
-
 /**
  * Extract command from Bash tool input
  */
@@ -72,10 +56,11 @@ function isSentinelPath(filePath) {
 /**
  * Main guard logic
  */
-function guard(toolName, toolInput) {
+function guard(ctx) {
+  const { toolName, toolInput } = ctx;
   // Write/Edit targeting sentinel files → block
   if (toolName === 'Write' || toolName === 'Edit') {
-    const filePath = extractFilePath(toolName, toolInput);
+    const filePath = ctx.filePath;
     if (isSentinelPath(filePath)) {
       return {
         decision: 'block',
@@ -111,11 +96,11 @@ import { buildCliCtx, isDirectRun } from './lib/hook-context.js';
 
 /**
  * in-process 진입점 — 디스패처가 ctx를 전달해 직접 호출.
- * @param {{ toolName: string, toolInput: string }} ctx
+ * @param {{ toolName: string, toolInput: string, filePath: string }} ctx
  * @returns {Promise<number>} exit code (2 = deny 규약, 0 = allow)
  */
 export async function run(ctx) {
-  const result = guard(ctx.toolName, ctx.toolInput);
+  const result = guard(ctx);
   if (result) {
     logHookDecision('sentinel-guard', ctx.toolName, 'block', result.reason);
     console.log(JSON.stringify(result));

package/hooks/scripts/session-start.js

@@ -89,7 +89,7 @@ async function main() {
     // 인덱스만 주입 (harness-review-2026-07-01 P1-5):
     // 이전에는 startSession 전체 요약(git log·테스트 상태·관찰·리플렉션·RAG
     // goals/constraints/decisions)을 매 세션 덤프했다. 이제는 1줄 인덱스만
-    // 주입하고, 전체 컨텍스트 복원은 명시적 `/vibe.utils --continue` 전용.
+    // 주입하고, 전체 컨텍스트 복원은 명시적 `/vibe.continue` 전용.
     const [time, memories, latestVersion] = await Promise.all([
       timeModule.getCurrentTime({ format: 'human', timezone: 'Asia/Seoul' }),
       memoryModule.listMemories({ limit: 5, projectPath: PROJECT_DIR }),
@@ -104,7 +104,7 @@ async function main() {
       const iterMod = await import(`${LIB_BASE_P}IterationTracker.js`);
       const progressLine = iterMod.getProgressSummary(PROJECT_DIR);
       if (progressLine) {
-        console.log(`\n📋 ${progressLine} — resume full context: /vibe.utils --continue`);
+        console.log(`\n📋 ${progressLine} — resume full context: /vibe.continue`);
       }
     } catch { /* progress index is best-effort */ }