@su-record/vibe 3.2.64 → 4.0.1

package/hooks/scripts/recipe-extractor.js

@@ -1,249 +0,0 @@
-#!/usr/bin/env node
-/**
- * Phase 3 — Recipe extractor (post-task curation)
- *
- * `/vibe.verify` 마지막 단계에서 호출됨. PostToolUse hot-path 가 아니라
- * 명시적 1회 호출이므로 LLM 호출 허용.
- *
- * 동작:
- *   1) `.vibe/metrics/current-run.jsonl` 읽기 (Phase 1 의 산출)
- *   2) 휴리스틱 게이트: total_tools ≥ 8 AND fail_count ≥ 3 (= 어렵게 푼 task)
- *   3) Haiku 로 3줄 요약 (When/Recipe/Anti-tip)
- *   4) `.vibe/recipes/<slug>.md` 작성 (frontmatter 강제)
- *
- * 안전성:
- *   - 모든 실패 silent — recipe 가 없는 게 잘못된 recipe 보다 낫다.
- *   - LLM 호출 재귀 가드: VIBE_HOOK_DEPTH (다른 hook 와 동일 패턴).
- *   - 테스트 모드: VIBE_RECIPE_LLM=mock 이면 LLM 스킵, 결정적 stub 사용.
- *
- * 사용:
- *   node hooks/scripts/recipe-extractor.js
- */
-import fs from 'fs';
-import path from 'path';
-import { spawnSync } from 'child_process';
-import { PROJECT_DIR, projectVibePath, projectVibeRoot } from './utils.js';
-
-const METRICS_DIR = projectVibePath(PROJECT_DIR, 'metrics');
-const CURRENT_RUN_JSONL = path.join(METRICS_DIR, 'current-run.jsonl');
-const CURRENT_RUN_JSON = path.join(METRICS_DIR, 'current-run.json');
-
-// 휴리스틱 게이트 — SPEC 의 "Risk #1: LLM 호출 비용" 대응
-const MIN_TOOLS = 8;
-const MIN_FAILS = 3;
-
-const HAIKU_MODEL = 'claude-haiku-4-5-20251001';
-
-// ─────────────────────────────────────────────────────
-// 재귀 가드
-// ─────────────────────────────────────────────────────
-function isRecursive() {
-  const depth = parseInt(process.env.VIBE_HOOK_DEPTH || '0', 10);
-  return depth >= 1;
-}
-
-// ─────────────────────────────────────────────────────
-// jsonl 로드 + 게이트 평가
-// ─────────────────────────────────────────────────────
-function loadJsonl() {
-  if (!fs.existsSync(CURRENT_RUN_JSONL)) return [];
-  return fs.readFileSync(CURRENT_RUN_JSONL, 'utf-8')
-    .split('\n').filter(Boolean)
-    .map((l) => { try { return JSON.parse(l); } catch { return null; } })
-    .filter(Boolean);
-}
-
-function loadCurrentRunMeta() {
-  try { return JSON.parse(fs.readFileSync(CURRENT_RUN_JSON, 'utf-8')); }
-  catch { return { feature: null, startedAt: null, steps: 0 }; }
-}
-
-function evaluateGate(records) {
-  const total = records.length;
-  const fails = records.filter((r) => r.ok === false).length;
-  const lastIsSuccess = records.length > 0 && records[records.length - 1].ok === true;
-  const passes = total >= MIN_TOOLS && fails >= MIN_FAILS && lastIsSuccess;
-  return { passes, total, fails };
-}
-
-// ─────────────────────────────────────────────────────
-// LLM 프롬프트 빌드
-// ─────────────────────────────────────────────────────
-function buildPrompt(records, meta) {
-  const tools = [...new Set(records.map((r) => r.tool))].join(', ');
-  const failsByCategory = {};
-  for (const r of records) {
-    if (r.ok === false && r.error_category) {
-      failsByCategory[r.error_category] = (failsByCategory[r.error_category] || 0) + 1;
-    }
-  }
-  const failSummary = Object.entries(failsByCategory)
-    .map(([cat, n]) => `${cat}×${n}`).join(', ') || 'none';
-
-  // 최근 12개 호출만 — 토큰 절약
-  const tail = records.slice(-12).map((r, i) => {
-    const mark = r.ok ? '✓' : '✗';
-    const cat = r.error_category ? ` [${r.error_category}]` : '';
-    const file = r.target_file ? ` ${r.target_file}` : '';
-    return `${i + 1}. ${mark} ${r.tool}${file}${cat}`;
-  }).join('\n');
-
-  return `You are summarizing a successfully completed task into a 3-line reusable recipe.
-
-Task feature: ${meta.feature || 'unknown'}
-Tool calls: ${records.length} total, ${failSummary}
-Tools used: ${tools}
-
-Last 12 calls (chronological):
-${tail}
-
-Output EXACTLY 3 lines of plain text, no markdown, no preamble:
-LINE 1 — When to use this recipe (1 sentence, the situation/context)
-LINE 2 — The working approach (1-2 sentences, what actually worked)
-LINE 3 — Anti-tip: one thing to avoid (1 sentence)
-
-Be specific — name the tools, the file types, the error categories. Do not output anything else.`;
-}
-
-// ─────────────────────────────────────────────────────
-// claude CLI 호출 — --model 우선, fallback 가능
-// ─────────────────────────────────────────────────────
-let _modelFlagSupported = null;
-
-function detectModelFlag() {
-  if (_modelFlagSupported !== null) return _modelFlagSupported;
-  try {
-    const help = spawnSync('claude', ['--help'], { encoding: 'utf-8', timeout: 3000 });
-    const out = (help.stdout || '') + (help.stderr || '');
-    _modelFlagSupported = /--model\b/.test(out);
-  } catch {
-    _modelFlagSupported = false;
-  }
-  return _modelFlagSupported;
-}
-
-function callClaude(prompt) {
-  if (process.env.VIBE_RECIPE_LLM === 'mock') {
-    // 테스트용 결정적 stub
-    return {
-      ok: true,
-      text: 'When auth + integration retries pile up.\nUse claude CLI with explicit model + retry on transient failures.\nAvoid swallowing stderr; surface error_category for downstream classification.',
-    };
-  }
-
-  const args = ['--print', '--dangerously-skip-permissions'];
-  if (detectModelFlag()) {
-    args.unshift('--model', HAIKU_MODEL);
-  }
-
-  const env = { ...process.env, VIBE_HOOK_DEPTH: '1' };
-  try {
-    const r = spawnSync('claude', args, {
-      input: prompt,
-      encoding: 'utf-8',
-      timeout: 60_000,
-      env,
-    });
-    if (r.status !== 0) return { ok: false, text: '' };
-    const text = (r.stdout || '').trim();
-    if (!text) return { ok: false, text: '' };
-    return { ok: true, text };
-  } catch {
-    return { ok: false, text: '' };
-  }
-}
-
-// ─────────────────────────────────────────────────────
-// Recipe md 작성
-// ─────────────────────────────────────────────────────
-function timestampSlug() {
-  const d = new Date();
-  const pad = (n) => String(n).padStart(2, '0');
-  return `${d.getFullYear()}${pad(d.getMonth() + 1)}${pad(d.getDate())}-${pad(d.getHours())}${pad(d.getMinutes())}${pad(d.getSeconds())}`;
-}
-
-function safeFeature(name) {
-  if (!name) return 'anon';
-  return String(name).toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '').slice(0, 40) || 'anon';
-}
-
-function writeRecipe({ records, meta, summary }) {
-  const vibeRoot = projectVibeRoot(PROJECT_DIR);
-  const dir = path.join(vibeRoot, 'recipes');
-  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
-
-  const slug = `${safeFeature(meta.feature)}__${timestampSlug()}`;
-  const file = path.join(dir, `${slug}.md`);
-  if (fs.existsSync(file)) return null; // 동시 호출 dedup
-
-  const today = new Date().toISOString().slice(0, 10);
-  const tools = [...new Set(records.map((r) => r.tool))];
-  const failCount = records.filter((r) => r.ok === false).length;
-
-  // summary 가 3줄 보장 안 되면 채워서 안전화
-  const lines = summary.split('\n').map((l) => l.trim()).filter(Boolean);
-  while (lines.length < 3) lines.push('—');
-  const [whenLine, recipeLine, antiTip] = lines.slice(0, 3);
-
-  const body =
-`---
-slug: ${slug}
-type: recipe
-symptom-context: "${(meta.feature || 'unknown').replace(/"/g, '\\"')}"
-recipe: "${recipeLine.replace(/"/g, '\\"')}"
-tools-touched: [${tools.map((t) => JSON.stringify(t)).join(', ')}]
-retry-count-saved: ${failCount}
-created: ${today}
-source-run: "${meta.startedAt || 'unknown'}"
-confidence: low
----
-
-# Recipe: ${meta.feature || 'unknown'}
-
-## When to use
-${whenLine}
-
-## What worked
-${recipeLine}
-
-## Avoid
-${antiTip}
-
-## Stats
-- Total tool calls: ${records.length}
-- Failures before success: ${failCount}
-- Tools touched: ${tools.join(', ')}
-- Source run started: ${meta.startedAt || 'unknown'}
-
-> Auto-generated by \`recipe-extractor.js\` from \`.vibe/metrics/current-run.jsonl\`. \
-Confidence \`low\` — single observation. Increment to \`medium\`/\`high\` when the same recipe is seen multiple times across runs.
-`;
-
-  fs.writeFileSync(file, body);
-  return file;
-}
-
-// ─────────────────────────────────────────────────────
-// 메인
-// ─────────────────────────────────────────────────────
-function main() {
-  if (isRecursive()) return; // claude CLI 가 다시 우리 hook 을 트리거하는 것 방지
-
-  let records;
-  try { records = loadJsonl(); } catch { return; }
-  if (records.length === 0) return;
-
-  const gate = evaluateGate(records);
-  if (!gate.passes) return;
-
-  const meta = loadCurrentRunMeta();
-  const prompt = buildPrompt(records, meta);
-  const llm = callClaude(prompt);
-  if (!llm.ok) return;
-
-  try { writeRecipe({ records, meta, summary: llm.text }); }
-  catch { /* silent */ }
-}
-
-try { main(); } catch { /* never throw */ }
-process.exit(0);

package/hooks/scripts/scope-guard.js

@@ -1,107 +0,0 @@
-#!/usr/bin/env node
-/**
- * Scope Guard — declared-scope enforcement for Edit/Write.
- *
- * CLAUDE.md의 Hard Rule "Modify only requested scope"를 훅으로 강제한다.
- * 사용자가 `.claude/vibe/scope.json`에 범위를 선언하면, Edit/Write가 그
- * 범위를 벗어날 때 경고(warn) 또는 차단(block)한다.
- *
- * 스코프 파일이 없거나 비어있으면 no-op — 기존 동작을 바꾸지 않는다.
- *
- * scope.json 스키마:
- * {
- *   "mode": "warn" | "block",      // default: "warn"
- *   "allow": ["src/cli/**"],       // glob 패턴 (둘 중 하나라도 있으면 allow-list 모드)
- *   "deny":  ["src/hooks/**"],     // glob 패턴 (allow 통과 후에도 deny 매칭 시 차단)
- *   "reason": "CLI refactor"       // 메시지에 표시
- * }
- *
- * 매칭 대상: tool_input.file_path (project-relative 또는 absolute 모두 허용)
- */
-
-import fs from 'fs';
-import path from 'path';
-import { PROJECT_DIR, logHookDecision, projectVibePath, projectVibeRoot } from './utils.js';
-import { buildCliCtx, isDirectRun } from './lib/hook-context.js';
-import { globToRegExp } from './lib/glob.js';
-
-const SCOPE_PATH = projectVibePath(PROJECT_DIR, 'scope.json');
-
-function readScope() {
-  try {
-    if (!fs.existsSync(SCOPE_PATH)) return null;
-    const raw = fs.readFileSync(SCOPE_PATH, 'utf-8');
-    const parsed = JSON.parse(raw);
-    const allow = Array.isArray(parsed.allow) ? parsed.allow : [];
-    const deny = Array.isArray(parsed.deny) ? parsed.deny : [];
-    if (allow.length === 0 && deny.length === 0) return null;
-    return {
-      mode: parsed.mode === 'block' ? 'block' : 'warn',
-      allow,
-      deny,
-      reason: typeof parsed.reason === 'string' ? parsed.reason : '',
-    };
-  } catch {
-    return null;
-  }
-}
-
-function matchesAny(relPath, patterns) {
-  return patterns.some(p => globToRegExp(p).test(relPath));
-}
-
-function toRelative(filePath) {
-  if (!filePath) return '';
-  const abs = path.isAbsolute(filePath) ? filePath : path.resolve(PROJECT_DIR, filePath);
-  const rel = path.relative(path.resolve(PROJECT_DIR), abs).replace(/\\/g, '/');
-  return rel || path.basename(filePath).replace(/\\/g, '/');
-}
-
-/**
- * in-process 진입점 — 디스패처가 ctx를 전달해 직접 호출.
- * @param {{ toolName: string, toolInput: string, filePath: string }} ctx
- * @returns {Promise<number>} exit code (0 = allow/no-op, 2 = block)
- */
-export async function run(ctx) {
-  const scope = readScope();
-  if (!scope) return 0; // no scope declared → no-op
-
-  const toolName = ctx.toolName;
-  if (toolName !== 'Edit' && toolName !== 'Write') return 0;
-
-  const filePath = ctx.filePath;
-  if (!filePath) return 0;
-
-  const rel = toRelative(filePath);
-
-  // 평가 순서: deny 우선 → allow 검증
-  const denied = scope.deny.length > 0 && matchesAny(rel, scope.deny);
-  const allowed = scope.allow.length === 0 || matchesAny(rel, scope.allow);
-
-  const violated = denied || !allowed;
-  if (!violated) return 0;
-
-  const lines = [];
-  lines.push(`🚧 SCOPE GUARD: ${toolName} — out of declared scope`);
-  lines.push(`  file: ${rel}`);
-  if (denied) lines.push(`  reason: matches deny pattern`);
-  else if (!allowed) lines.push(`  reason: not in allow list`);
-  if (scope.reason) lines.push(`  declared scope: ${scope.reason}`);
-  lines.push(`  declared in: ${path.relative(PROJECT_DIR, SCOPE_PATH)} (mode=${scope.mode})`);
-
-  const blocking = scope.mode === 'block';
-  if (blocking) {
-    lines.push('');
-    lines.push('🚫 BLOCKED. Edit scope.json or justify to the user before proceeding.');
-  }
-
-  process.stderr.write(lines.join('\n') + '\n');
-  logHookDecision('scope-guard', toolName, blocking ? 'block' : 'warn', `${rel} ${denied ? '(deny)' : '(out-of-allow)'}`);
-
-  return blocking ? 2 : 0;
-}
-
-// standalone CLI 모드: stdin JSON 우선, argv 폴백
-if (isDirectRun(import.meta.url)) {
-  process.exit(await run(buildCliCtx()));
-}

package/hooks/scripts/sentinel-guard.js

@@ -1,115 +0,0 @@
-#!/usr/bin/env node
-/**
- * Sentinel Guard — PreToolUse hook
- * 핵심 자율 기계 경로를 Write/Edit/Bash 로부터 보호한다.
- * pre-tool-guard.js 이전에 실행된다.
- *
- * 보호 경로 결정 근거:
- *   src/infra/lib/autonomy/ 는 레포에 존재하지 않는 팬텀 경로였다.
- *   git log 와 src/ 전수 조사 결과, 자율 기계(evolution machinery)의 실제
- *   위치는 src/infra/lib/evolution/ 이다. GuardAnalyzer·HookTraceReader 등이
- *   hook-traces.jsonl을 분석해 하네스 자기 개선 인사이트를 생성한다.
- *   따라서 sentinel 대상을 이 실존 경로로 교체한다.
- *
- *   추가로 hooks/scripts/lib/ (디스패처 인프라)도 보호 — 이 디렉토리의
- *   hook-context.js / dispatcher.js 가 손상되면 모든 pre-tool 게이트가
- *   무력화된다.
- *
- * exit 2 = deny 규약 (PreToolUse 차단).
- */
-
-const SENTINEL_PREFIXES = [
-  'src/infra/lib/evolution/',
-  'hooks/scripts/lib/',
-];
-
-// 빠른 prefix 검사용 정규식 (backslash 포함)
-const SENTINEL_PATH_RE =
-  /^(?:\.[\\/])?(?:src[\\/]infra[\\/]lib[\\/]evolution|hooks[\\/]scripts[\\/]lib)[\\/]/;
-
-const DANGEROUS_BASH_RE =
-  /\b(rm\s+-rf|kill\s+-9|drop\s+table|truncate|shutdown|reboot|mkfs|dd\s+if=)\b/i;
-
-/**
- * Extract command from Bash tool input
- */
-function extractBashCommand(input) {
-  if (!input) return null;
-  try {
-    const parsed = typeof input === 'string' ? JSON.parse(input) : input;
-    return parsed.command || null;
-  } catch {
-    return typeof input === 'string' ? input : null;
-  }
-}
-
-/**
- * Check if path targets sentinel files
- */
-function isSentinelPath(filePath) {
-  if (!filePath) return false;
-  const normalized = filePath.replace(/\\/g, '/').replace(/^\.\//, '');
-  return SENTINEL_PREFIXES.some(p => normalized.startsWith(p)) ||
-    SENTINEL_PATH_RE.test(filePath);
-}
-
-/**
- * Main guard logic
- */
-function guard(ctx) {
-  const { toolName, toolInput } = ctx;
-  // Write/Edit targeting sentinel files → block
-  if (toolName === 'Write' || toolName === 'Edit') {
-    const filePath = ctx.filePath;
-    if (isSentinelPath(filePath)) {
-      return {
-        decision: 'block',
-        reason: `Sentinel files are protected. Cannot modify: ${filePath}`,
-      };
-    }
-  }
-
-  // Bash targeting sentinel files or dangerous commands
-  if (toolName === 'Bash') {
-    const command = extractBashCommand(toolInput);
-    if (command && isSentinelPath(command)) {
-      return {
-        decision: 'block',
-        reason: `Sentinel files are protected. Dangerous command targeting sentinel path.`,
-      };
-    }
-    if (command && DANGEROUS_BASH_RE.test(command)) {
-      if (SENTINEL_PREFIXES.some(p => command.includes(p))) {
-        return {
-          decision: 'block',
-          reason: `Dangerous command targeting sentinel path: ${command}`,
-        };
-      }
-    }
-  }
-
-  return undefined;
-}
-
-import { logHookDecision } from './utils.js';
-import { buildCliCtx, isDirectRun } from './lib/hook-context.js';
-
-/**
- * in-process 진입점 — 디스패처가 ctx를 전달해 직접 호출.
- * @param {{ toolName: string, toolInput: string, filePath: string }} ctx
- * @returns {Promise<number>} exit code (2 = deny 규약, 0 = allow)
- */
-export async function run(ctx) {
-  const result = guard(ctx);
-  if (result) {
-    logHookDecision('sentinel-guard', ctx.toolName, 'block', result.reason);
-    console.log(JSON.stringify(result));
-    return 2;
-  }
-  return 0;
-}
-
-// standalone CLI 모드 (antigravity-hooks.json / 기존 테스트): stdin JSON 우선, argv 폴백
-if (isDirectRun(import.meta.url)) {
-  process.exit(await run(buildCliCtx()));
-}