@techierathore/techieflow 1.1.0 → 1.1.1

package/.tfcore/utils/tf-emit.sh

@@ -1015,16 +1015,34 @@ def _window_opencode(t0, t1):
         return None
     dbp = ptr.get("db_path")
     sid = ptr.get("session_id")
-    if not dbp or not sid or not os.path.isfile(dbp):
+    if not dbp or not os.path.isfile(dbp):
         return None
     try:
         import sqlite3
         db = sqlite3.connect("file:%s?mode=ro" % dbp, uri=True)
-        pairs = db.execute("SELECT id, parent_id FROM session").fetchall()
+        # OpenCode 2 keeps sessions in session_v2 and messages in session_message; the old tables
+        # stopped on 2026-09-27, so every OpenCode record since read tokens_scope "none". Both are read.
+        tables = {r[0] for r in db.execute("SELECT name FROM sqlite_master WHERE type='table'")}
+        pairs = db.execute("SELECT id, parent_id FROM session").fetchall() if "session" in tables else []
+        if "session_v2" in tables:
+            pairs += db.execute("SELECT id, parent_id FROM session_v2").fetchall()
         kids = {}
         for i, p in pairs:
             kids.setdefault(p, []).append(i)
-        tree, queue = {sid}, [sid]
+        # The roots: the pointer's session, and every root session OpenCode 2 recorded in THIS project's
+        # folder. Each *develop-end-to-end phase runs in a new session and the plugin's pointer kept the
+        # first one, so the later phases read "none" (2026-10-08). Messages are still taken only inside
+        # the record's own window.
+        roots = {sid} if sid else set()
+        if "session_v2" in tables:
+            here = os.path.realpath(root)
+            for i, p_, dr in db.execute("SELECT id, parent_id, directory FROM session_v2"):
+                if not p_ and dr and os.path.realpath(dr) == here:
+                    roots.add(i)
+        if not roots:
+            db.close()
+            return None
+        tree, queue = set(roots), list(roots)
         while queue:
             for c in kids.get(queue.pop(), []):
                 if c not in tree:
@@ -1036,15 +1054,20 @@ def _window_opencode(t0, t1):
         # Same rule as the Claude branch: a CHILD session counts as a subagent run
         # for THIS window only if it produced output inside it.
         child_out = {}
-        q = "SELECT session_id, data FROM message WHERE time_created BETWEEN ? AND ?"
-        for msid, data in db.execute(q, (t0, t1)):
+        rows = []
+        if "message" in tables:
+            rows += db.execute("SELECT session_id, data FROM message WHERE time_created BETWEEN ? AND ?", (t0, t1)).fetchall()
+        if "session_message" in tables:
+            rows += [(a, b) for a, b in db.execute(
+                "SELECT session_id, data FROM session_message WHERE type = 'assistant' AND time_created BETWEEN ? AND ?", (t0, t1))]
+        for msid, data in rows:
             if msid not in tree:
                 continue
             try:
                 d = json.loads(data)
             except Exception:
                 continue
-            if d.get("role") != "assistant":
+            if d.get("role") not in (None, "assistant"):
                 continue
             t = d.get("tokens") or {}
             cache = t.get("cache") or {}
@@ -1054,9 +1077,11 @@ def _window_opencode(t0, t1):
             tot["cr"] += cache.get("read") or 0
             tot["cw"] += cache.get("write") or 0
             cost += d.get("cost") or 0
-            if msid != sid and o:
+            if msid not in roots and o:
                 child_out[msid] = child_out.get(msid, 0) + o
-            m = (d.get("providerID", "") + "/" if d.get("providerID") else "") + (d.get("modelID") or "")
+            mo = d.get("model") if isinstance(d.get("model"), dict) else {}
+            prov = d.get("providerID") or mo.get("providerID") or ""
+            m = (prov + "/" if prov else "") + (d.get("modelID") or mo.get("id") or "")
             if m:
                 models[m] = models.get(m, 0) + o
         db.close()
@@ -1463,7 +1488,7 @@ _ALLOWED = {
                       "routed", "tokens_in", "tokens_out", "tokens_cache_read", "tokens_cache_write",
                       "cost_usd", "tokens_scope", "attempt", "subagent_runs", "tokens_out_subagents",
                       "model_tokens_out", "session_id", "usage_start_event_ts", "usage_end_event_ts",
-                      "billing_mode", "cost_source", "fallback_from"},
+                      "billing_mode", "cost_source", "fallback_from", "app_phase"},
     # A correction, not a deletion: it names a run record that is wrong by the pair every
     # run carries (`cmd` + `started`) and says why, so every figure can skip it while the
     # record itself stays where it is. Written by --void-run, which refuses one that names
@@ -1474,7 +1499,7 @@ _ALLOWED = {
                         "tier", "tier_model", "model", "models", "tokens_in", "tokens_out", "tokens_cache_read",
                         "tokens_cache_write", "cost_usd", "tokens_scope", "model_tokens_out", "routed",
                         "subagent_runs", "tokens_out_subagents", "session_id",
-                        "billing_mode", "cost_source", "fallback_from"},
+                        "billing_mode", "cost_source", "fallback_from", "app_phase"},
     ("sessions", "session"): {"session_id", "model", "duration_s", "input_tokens", "output_tokens",
                               "cache_read_tokens", "cache_creation_tokens", "cost_usd", "children_sessions"},
     ("commits", "commit"): {"sha", "files", "insertions", "deletions", "subject_prefix", "branch"},
@@ -1519,6 +1544,11 @@ def _shape_ok(rec):
     if kind == "run" and rec.get("build_result") not in (None, "pass", "fail", "not-run"):
         sys.stdout.write("tf-emit: REFUSED — build_result must be pass, fail or not-run (SCHEMA.md §2); got %r. Put the detail in the checklist Remarks or Known blockers, not here. Nothing was appended.\n" % (rec.get("build_result"),))
         return False
+    # one REQ's verdict, never a suite note: Lekhak hand-wrote four {"gate":"verify-suite","result":…}
+    # records with neither, and the report counted each as a failure (TF-020)
+    if kind == "gate" and not rec.get("backfilled") and not (rec.get("req_id") and rec.get("verdict")):
+        sys.stdout.write("tf-emit: REFUSED — a gate record is one REQ's verdict and needs both req_id and verdict (SCHEMA.md §3). A suite result (unit tests, the whole browser run) belongs in the run record's notes, not here. Nothing was appended.\n")
+        return False
     if kind == "miss" and not rec.get("miss_id"):
         sys.stdout.write("tf-emit: REFUSED — a miss record needs a miss_id; get one with: bash .tfcore/utils/tf-emit.sh --next-miss-id. Nothing was appended.\n")
         return False

package/.tfcore/utils/tf-fix-close.sh

@@ -3,6 +3,7 @@
 #
 #   bash .tfcore/utils/tf-fix-close.sh <App> [--started <ISO>] [--reqs REQ-UI-009,REQ-FN-014]
 #                                            [--subagents trblazeui,builder] [--build pass|fail|not-run] [--files N]
+#                                            [--cmd triage-and-fix]   # the command the run record is filed under
 #   bash .tfcore/utils/tf-fix-close.sh <App> --misses MISS-App-20260901-06,MISS-App-20260830-03 \
 #                                            --fix-cmd amend-docs [--verdict Verified]
 #
@@ -24,13 +25,16 @@
 #      re-verify). A row no verify graded gets no miss-fix and is listed. A row with no open miss is listed,
 #      not invented: a fix on a defect nobody logged is a triage gap, so open it first with tf-triage.sh
 #      demote or tf-log-miss.sh, then re-run this.
+# --cmd names the command the run record is filed under (default fix-issues): *triage-and-fix passes
+# --cmd triage-and-fix, so its run is counted as itself and no second record over the same window is
+# needed, which the overlap rule refused (TrBlazeUI TF-004). The miss-fix records keep fix_cmd fix-issues.
 # --reqs defaults to every row those verifies graded. The start defaults to the fix's marker, or its
 # "outer" entry when a chained verify replaced it. Telemetry never blocks: refusals are printed, exit 0.
 set -u
 HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 [[ $# -ge 1 && "$1" != "-h" && "$1" != "--help" ]] || { sed -n '2,17p' "$0" | sed 's/^# \{0,1\}//'; exit 3; }
 APP="$1"; shift
-STARTED=""; REQS=""; SUBS=""; BUILD="pass"; FILES=""; MISSES=""; FIXCMD="fix-issues"; VERDICT=""
+STARTED=""; REQS=""; SUBS=""; BUILD="pass"; FILES=""; MISSES=""; FIXCMD="fix-issues"; VERDICT=""; RUNCMD="fix-issues"
 while [[ $# -gt 0 ]]; do
   case "$1" in
     --started) STARTED="${2:-}"; shift 2 ;;
@@ -41,6 +45,7 @@ while [[ $# -gt 0 ]]; do
     --misses) MISSES="${2:-}"; shift 2 ;;
     --fix-cmd) FIXCMD="${2:-}"; shift 2 ;;
     --verdict) VERDICT="${2:-}"; shift 2 ;;
+    --cmd) RUNCMD="${2:-}"; shift 2 ;;
     *) echo "tf-fix-close: unknown argument $1" >&2; exit 3 ;;
   esac
 done
@@ -51,9 +56,10 @@ except Exception: m={}
 o=m.get('outer') or {}
 print(m.get('started','') if m.get('cmd')!='verify-phase' or not o.get('started') else o['started'])" 2>/dev/null)"
 TF_APP="$APP" TF_STARTED="$STARTED" TF_REQS="$REQS" TF_SUBS="$SUBS" TF_BUILD="$BUILD" TF_FILES="$FILES" \
-TF_MISSES="$MISSES" TF_FIXCMD="$FIXCMD" TF_VERDICT="$VERDICT" TF_EMIT="$HERE/tf-emit.sh" python3 - <<'PY'
+TF_MISSES="$MISSES" TF_FIXCMD="$FIXCMD" TF_RUNCMD="$RUNCMD" TF_VERDICT="$VERDICT" TF_EMIT="$HERE/tf-emit.sh" python3 - <<'PY'
 import datetime, json, os, subprocess
 EMIT = os.environ["TF_EMIT"]; app = os.environ["TF_APP"]; started = os.environ["TF_STARTED"]
+cmd = os.environ.get("TF_RUNCMD") or "fix-issues"
 now = datetime.datetime.now(datetime.timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
 def q(*a): return subprocess.run(["bash", EMIT, *a], capture_output=True, text=True).stdout.strip()
 def emit(stream, rec):
@@ -121,7 +127,7 @@ inner, voided = [], set()
 for r in jsonl("runs.jsonl"):
     if r.get("kind") == "run-void":
         voided.add((r.get("cmd"), r.get("started")))
-    elif r.get("kind", "run") == "run" and r.get("app") == app and r.get("cmd") != "fix-issues" and not r.get("backfilled") \
+    elif r.get("kind", "run") == "run" and r.get("app") == app and r.get("cmd") not in ("fix-issues", cmd) and not r.get("backfilled") \
             and started and (r.get("started") or "") >= started and (r.get("ended") or "") and r["ended"] <= now:
         inner.append((r["started"], r["ended"], r.get("cmd")))
 inner = sorted(w for w in inner if (w[2], w[0]) not in voided)
@@ -130,11 +136,11 @@ for s, e, _c in inner:
     if t and s > t: gaps.append((t, s))
     t = max(t, e) if t else e
 if not started or not gaps or t < now: gaps.append((t, now))
-existing = {r.get("started") for r in jsonl("runs.jsonl") if r.get("kind", "run") == "run" and r.get("cmd") == "fix-issues"}
+existing = {r.get("started") for r in jsonl("runs.jsonl") if r.get("kind", "run") == "run" and r.get("cmd") == cmd}
 wrote = had = 0
 for i, (s, e) in enumerate(gaps):
     first = i == 0
-    run = {"kind": "run", "app": app, "cmd": "fix-issues", "mode": "fix", "ended": e, "reqs_touched": reqs if first else [],
+    run = {"kind": "run", "app": app, "cmd": cmd, "mode": "fix", "ended": e, "reqs_touched": reqs if first else [],
            "reqs_count": len(reqs) if first else 0, "subagents": subs if first else [],
            "files_written": (int(files) if files.isdigit() else len(reqs)) if first else 0, "build_result": os.environ["TF_BUILD"]}
     if s: run["started"] = s
@@ -143,7 +149,7 @@ for i, (s, e) in enumerate(gaps):
         had += 1; continue
     wrote += emit("runs", run)
 if inner:
-    print(f"fix-issues: recorded around {len(inner)} chained run(s) ({', '.join(sorted({c for _s, _e, c in inner}))}) in {len(gaps)} segment(s)")
+    print(f"{cmd}: recorded around {len(inner)} chained run(s) ({', '.join(sorted({c for _s, _e, c in inner}))}) in {len(gaps)} segment(s)")
 closed, none, unverified = 0, [], []
 for rid in reqs:
     if rid not in rows:
@@ -158,7 +164,7 @@ for rid in reqs:
     if started: rec["fix_run_id"] = started
     if emit("misses", rec): closed += 1
 state = "already there" if had == len(gaps) else "written" if wrote + had == len(gaps) else "not written"
-print(f"fix-issues: run record {state}; {closed} miss-fix record(s) with the verifier's verdict"
+print(f"{cmd}: run record {state}; {closed} miss-fix record(s) with the verifier's verdict"
       + (f"; no open miss on {', '.join(none)} (log it first, then re-run)" if none else "")
       + (f"; no verify graded {', '.join(unverified)} during this fix, so its miss stays open with no miss-fix" if unverified else ""))
 PY

package/.tfcore/utils/tf-maccatalyst-check.sh

@@ -0,0 +1,92 @@
+#!/usr/bin/env bash
+# tf-maccatalyst-check.sh — the Mac Catalyst rules a MAUI project must meet before its Mac app can
+# start (coding-standards-dotnet.md §9; 2026-10-07). Reads files only: runs the same on Windows (WSL,
+# Git Bash), Linux and a Mac, so a team without a Mac finds these before the Mac build does.
+#
+#   bash .tfcore/utils/tf-maccatalyst-check.sh [<csproj> ...]   (default: every project with a
+#                                                                net*-maccatalyst target)
+#
+# FAIL  the scene manifest: Platforms/MacCatalyst/Info.plist has no UIApplicationSceneManifest, or
+#       names a scene delegate no class in the project registers as a MauiUISceneDelegate. On
+#       macOS 27 such an app quits at its first window (the stock `dotnet new maui` template has none).
+# WARN  the keychain: an entitlements file asks for keychain-access-groups and the project names no
+#       provisioning profile and no Debug entitlements file without it. macOS refuses to start a
+#       locally signed (ad hoc) build that asks for it ("Launch failed", POSIX 163).
+# WARN  zoom (§9b): a project drawing its screens in a BlazorWebView, Mac or Windows head, whose code has
+#       no zoom wiring for that head: Mac, WKWebView.PageZoom and a "Zoom In" menu command; Windows,
+#       WebView2's IsZoomControlEnabled set by the app; either, the level kept through Preferences. Copy
+#       .tfcore/standards/blazor-zoom.cs.txt. A WARN, so tf-verify-boot.sh still boots such a head.
+# Prints one line per finding and an OK line per clean project. A Windows-only MAUI project is read
+# for the zoom rule alone.
+# Exit 0 no FAIL (WARNs allowed) · 1 a FAIL · 3 usage.
+set -u
+case "${1:-}" in -h|--help) sed -n '2,22p' "$0" | sed 's/^# \{0,1\}//'; exit 0 ;; esac
+
+PROJECTS=("$@")
+if [[ ${#PROJECTS[@]} -eq 0 ]]; then
+  while IFS= read -r p; do PROJECTS+=("$p"); done < <(
+    find . -maxdepth 5 -name '*.csproj' -not -path '*/bin/*' -not -path '*/obj/*' -not -path '*/node_modules/*' \
+         -not -path './tests/.artifacts/*' 2>/dev/null | sed 's#^\./##' | sort)
+fi
+fails=0; seen=0
+for P in ${PROJECTS[@]+"${PROJECTS[@]}"}; do
+  [[ -f "$P" ]] || { echo "tf-maccatalyst-check: $P does not exist" >&2; exit 3; }
+  grep -qiE '<UseMaui>[[:space:]]*true|Microsoft\.NET\.Sdk\.Maui' "$P" || continue
+  mac=0; win=0
+  grep -qE 'net[0-9.]+-maccatalyst' "$P" && mac=1
+  grep -qE 'net[0-9.]+-windows' "$P" && win=1
+  [[ $mac -eq 1 || $win -eq 1 ]] || continue
+  seen=$((seen+1)); D="$(dirname "$P")"; M="$D/Platforms/MacCatalyst"; found=0
+  # --- zoom in a Blazor Hybrid head (§9b): read before the Mac-only rules, which a Windows-only project skips
+  CODE=(-rqs --include='*.cs' --exclude-dir=bin --exclude-dir=obj)
+  if grep "${CODE[@]}" --include='*.xaml' -E '<BlazorWebView|new BlazorWebView' "$D" \
+     || grep -qs 'Microsoft.AspNetCore.Components.WebView.Maui' "$P"; then
+    heads=()
+    if [[ $mac -eq 1 ]] && ! { grep "${CODE[@]}" 'PageZoom' "$D" && grep "${CODE[@]}" '"Zoom In"' "$D"; }; then heads+=("Mac (no WKWebView.PageZoom and View › Zoom In)"); fi
+    if [[ $win -eq 1 ]] && ! grep "${CODE[@]}" 'IsZoomControlEnabled' "$D"; then heads+=("Windows (WebView2's zoom not handled)"); fi
+    if [[ ${#heads[@]} -eq 0 ]] && ! grep -rlis --include='*.cs' --exclude-dir=bin --exclude-dir=obj 'zoom' "$D" | xargs grep -ls 'Preferences' >/dev/null 2>&1; then heads+=("the level is not kept in Preferences"); fi
+    if [[ ${#heads[@]} -gt 0 ]]; then
+      echo "WARN $P: a Blazor Hybrid head without OS zoom: $(IFS=';'; echo "${heads[*]}" | sed 's/;/; /g'). Cmd/Ctrl+=, -, 0 must zoom 50% to 300% and keep the level; copy .tfcore/standards/blazor-zoom.cs.txt (coding-standards-dotnet.md §9b)"
+      found=1
+    fi
+  fi
+  if [[ $mac -eq 0 ]]; then
+    [[ $found -eq 0 ]] && echo "OK   $P: zoom wired (no Mac Catalyst target)"
+    continue
+  fi
+  # --- the scene manifest and its delegate
+  PL="$M/Info.plist"
+  if [[ ! -f "$PL" ]]; then
+    echo "FAIL $P: $PL is missing"; fails=$((fails+1)); found=1
+  elif ! grep -q 'UIApplicationSceneManifest' "$PL"; then
+    echo "FAIL $P: $PL has no UIApplicationSceneManifest; on macOS 27 the app quits at its first window. Add the manifest and a SceneDelegate : MauiUISceneDelegate (coding-standards-dotnet.md §9)"
+    fails=$((fails+1)); found=1
+  else
+    # the delegate the manifest names: the <string> after UISceneDelegateClassName
+    DEL="$(tr -d '\n\r' < "$PL" | grep -oE '<key>UISceneDelegateClassName</key>[[:space:]]*<string>[^<]+' | head -1 | sed 's/.*<string>//')"
+    if [[ -n "$DEL" ]] && ! grep -rqsE "Register\(\"$DEL\"\)" "$D" --include='*.cs'; then
+      echo "FAIL $P: Info.plist names the scene delegate $DEL, and no class in the project carries [Register(\"$DEL\")] (a class deriving from MauiUISceneDelegate)"
+      fails=$((fails+1)); found=1
+    elif [[ -n "$DEL" ]] && ! grep -rqs 'MauiUISceneDelegate' "$D" --include='*.cs'; then
+      echo "FAIL $P: [Register(\"$DEL\")] is there, but no class derives from MauiUISceneDelegate"
+      fails=$((fails+1)); found=1
+    fi
+  fi
+  # --- the keychain permission on a locally signed build
+  ENTS=()
+  while IFS= read -r e; do [[ -n "$e" ]] && ENTS+=("$D/$(tr '\\' '/' <<<"$e")"); done < <(
+    grep -oE '<CodesignEntitlements[^>]*>[^<]+' "$P" | sed 's/<CodesignEntitlements[^>]*>//')   # a Condition= one too
+  [[ ${#ENTS[@]} -eq 0 && -f "$M/Entitlements.plist" ]] && ENTS=("$M/Entitlements.plist")
+  with=0; without=0
+  for e in ${ENTS[@]+"${ENTS[@]}"}; do
+    [[ -f "$e" ]] || continue
+    if grep -q 'keychain-access-groups' "$e"; then with=1; else without=1; fi
+  done
+  if [[ $with -eq 1 && $without -eq 0 ]] && ! grep -q '<CodesignProvisioningProfile>' "$P"; then
+    echo "WARN $P: the entitlements ask for keychain-access-groups and the project names no provisioning profile; macOS will not start a locally signed build that asks for it. Sign with a development certificate and profile, or give Debug builds an entitlements file without it (coding-standards-dotnet.md §9)"
+    found=1
+  fi
+  [[ $found -eq 0 ]] && echo "OK   $P: scene manifest and delegate in place; no keychain permission a local build cannot have; zoom wired or not a Blazor Hybrid head"
+done
+[[ $seen -eq 0 ]] && echo "NONE no MAUI project with a Mac Catalyst or Windows target"
+[[ $fails -eq 0 ]]