@tekmidian/pai 1.0.0 → 1.0.3

package/src/hooks/ts/lib/todo-sync.ts

@@ -0,0 +1,120 @@
+/**
+ * TODO.md section handling for the TodoWrite sync hook.
+ *
+ * Only the "## Current Session" section is managed; every other byte of the
+ * file (preamble, other sections, blank lines between them) is kept as is.
+ */
+
+import { writeFileSync, renameSync, unlinkSync } from 'fs';
+import { dirname, join, basename } from 'path';
+
+export interface TodoItem {
+  content: string;
+  status: 'pending' | 'in_progress' | 'completed';
+  activeForm: string;
+}
+
+const MANAGED_HEADING = /^## Current Session[ \t]*$/;
+const FOOTER = /(\n---[ \t\r\n]*)?(\n\*Last updated:[^\n]*\*[ \t\r\n]*)?$/;
+
+/** Format current session todos as markdown. */
+export function formatSessionTodos(todos: TodoItem[]): string {
+  const inProgress = todos.filter(t => t.status === 'in_progress');
+  const pending = todos.filter(t => t.status === 'pending');
+  const completed = todos.filter(t => t.status === 'completed');
+
+  let content = '';
+
+  if (inProgress.length > 0) {
+    content += `### In Progress\n\n`;
+    for (const todo of inProgress) {
+      content += `- [ ] **${todo.content}** _(${todo.activeForm})_\n`;
+    }
+    content += '\n';
+  }
+
+  if (pending.length > 0) {
+    content += `### Pending\n\n`;
+    for (const todo of pending) {
+      content += `- [ ] ${todo.content}\n`;
+    }
+    content += '\n';
+  }
+
+  if (completed.length > 0) {
+    content += `### Completed\n\n`;
+    for (const todo of completed) {
+      content += `- [x] ${todo.content}\n`;
+    }
+    content += '\n';
+  }
+
+  if (todos.length === 0) {
+    content += `_(No active session tasks)_\n\n`;
+  }
+
+  return content;
+}
+
+/**
+ * Split into a preamble (text before the first "## " heading, possibly empty)
+ * and sections, each starting at its "## " line. Concatenating them
+ * reproduces the input exactly.
+ */
+function splitSections(content: string): { preamble: string; sections: string[] } {
+  const starts: number[] = [];
+  let offset = 0;
+  for (const line of content.split('\n')) {
+    if (line.startsWith('## ')) starts.push(offset);
+    offset += line.length + 1;
+  }
+  if (starts.length === 0) return { preamble: content, sections: [] };
+  const sections = starts.map((s, i) => content.slice(s, starts[i + 1] ?? content.length));
+  return { preamble: content.slice(0, starts[0]), sections };
+}
+
+/** Build the new TODO.md, replacing only the Current Session section. */
+export function buildTodoContent(todos: TodoItem[], existingContent: string, now = new Date().toISOString()): string {
+  const body = existingContent.replace(FOOTER, '');
+  const managed = `## Current Session\n\n${formatSessionTodos(todos)}`;
+  const { preamble, sections } = splitSections(body);
+
+  let out: string;
+  const idx = sections.findIndex(s => MANAGED_HEADING.test(s.split('\n', 1)[0]));
+  if (idx >= 0) {
+    // Keep the separator that followed the old managed section.
+    const old = sections[idx];
+    const trailing = old.slice(old.trimEnd().length);
+    const replaced = sections.slice();
+    replaced[idx] = managed.trimEnd() + (idx < sections.length - 1 ? (trailing.length > 1 ? trailing : '\n\n') : '\n');
+    out = preamble + replaced.join('');
+  } else if (body.trim() === '') {
+    out = `# TODO\n\n${managed}`;
+  } else {
+    // No managed section yet: put it first, after the title if there is one.
+    const titleEnd = /^# [^\n]*\n\n?/.exec(preamble);
+    const head = titleEnd ? preamble.slice(0, titleEnd[0].length) : '';
+    const rest = preamble.slice(head.length);
+    out = head + managed + rest + sections.join('');
+  }
+
+  if (!out.endsWith('\n')) out += '\n';
+  return `${out}\n---\n\n*Last updated: ${now}*\n`;
+}
+
+/** Fix malformed headings: Remove --- prefix from headings (---# → #). */
+export function fixMalformedHeadings(content: string): string {
+  return content.replace(/^---#/gm, '#');
+}
+
+/** Write via temp file + rename so a crash never leaves a truncated file. */
+export function writeFileAtomic(path: string, data: string): void {
+  const tmp = join(dirname(path), `.${basename(path)}.${process.pid}.tmp`);
+  try {
+    writeFileSync(tmp, data);
+    renameSync(tmp, path);
+  } catch (e) {
+    try { unlinkSync(tmp); } catch { /* ignore */ }
+    throw e;
+  }
+}

package/src/hooks/ts/lib/worker-git-guard.ts

@@ -95,7 +95,7 @@ const GIT_WRITE = /\bgit\b[^&;|\n]*?\s(?:commit|add|am|cherry-pick|apply|push|ta
 const UNKNOWN_DIR = "/\0unresolved";
 
 /** Splits on &&, ||, ;, | and newlines outside quotes. */
-function splitSegments(command: string): string[] {
+export function splitSegments(command: string): string[] {
   const out: string[] = [];
   let cur = "";
   let quote = "";

package/src/hooks/ts/post-tool-use/capture-tool-output.ts

@@ -7,15 +7,15 @@
  * for later processing and analysis.
  */
 
-import { appendFileSync, mkdirSync, existsSync } from 'fs';
 import { join } from 'path';
 import { historyDir } from '../lib/pai-paths.js';
+import { appendRawCapture, redactDeep } from '../lib/raw-capture.js';
 
 interface ToolUseData {
   tool_name: string;
   tool_input: Record<string, any>;
   tool_response: Record<string, any>;
-  conversation_id: string;
+  session_id: string;
   timestamp: string;
 }
 
@@ -47,24 +47,20 @@ async function main() {
     const today = now.toISOString().split('T')[0]; // YYYY-MM-DD
     const yearMonth = today.substring(0, 7); // YYYY-MM
 
-    // Ensure capture directory exists
     const dateDir = join(CAPTURE_DIR, yearMonth);
-    if (!existsSync(dateDir)) {
-      mkdirSync(dateDir, { recursive: true });
-    }
 
     // Format output as JSONL (one JSON object per line)
     const captureFile = join(dateDir, `${today}_tool-outputs.jsonl`);
     const captureEntry = JSON.stringify({
       timestamp: data.timestamp || now.toISOString(),
       tool: data.tool_name,
-      input: data.tool_input,
-      output: data.tool_response,
-      session: data.conversation_id
+      input: redactDeep(data.tool_input),
+      output: redactDeep(data.tool_response),
+      session: data.session_id
     }) + '\n';
 
     // Append to daily log
-    appendFileSync(captureFile, captureEntry);
+    appendRawCapture(captureFile, dateDir, captureEntry);
 
     // Exit successfully (code 0 = continue normally)
     process.exit(0);

package/src/hooks/ts/post-tool-use/sync-todo-to-md.ts

@@ -11,8 +11,9 @@
  */
 
 import { isWorkerSession } from "../lib/worker-session.js";
-import { writeFileSync, existsSync, readFileSync, mkdirSync } from 'fs';
-import { join } from 'path';
+import { existsSync, readFileSync, mkdirSync } from 'fs';
+import { dirname } from 'path';
+import { buildTodoContent, fixMalformedHeadings, writeFileAtomic, type TodoItem } from '../lib/todo-sync.js';
 import {
   findTodoPath,
   findNotesDir,
@@ -21,12 +22,6 @@ import {
   type WorkItem
 } from '../lib/project-utils.js';
 
-interface TodoItem {
-  content: string;
-  status: 'pending' | 'in_progress' | 'completed';
-  activeForm: string;
-}
-
 interface HookInput {
   session_id: string;
   cwd: string;
@@ -36,101 +31,6 @@ interface HookInput {
   };
 }
 
-/**
- * Format current session todos as markdown
- */
-function formatSessionTodos(todos: TodoItem[]): string {
-  const inProgress = todos.filter(t => t.status === 'in_progress');
-  const pending = todos.filter(t => t.status === 'pending');
-  const completed = todos.filter(t => t.status === 'completed');
-
-  let content = '';
-
-  if (inProgress.length > 0) {
-    content += `### In Progress\n\n`;
-    for (const todo of inProgress) {
-      content += `- [ ] **${todo.content}** _(${todo.activeForm})_\n`;
-    }
-    content += '\n';
-  }
-
-  if (pending.length > 0) {
-    content += `### Pending\n\n`;
-    for (const todo of pending) {
-      content += `- [ ] ${todo.content}\n`;
-    }
-    content += '\n';
-  }
-
-  if (completed.length > 0) {
-    content += `### Completed\n\n`;
-    for (const todo of completed) {
-      content += `- [x] ${todo.content}\n`;
-    }
-    content += '\n';
-  }
-
-  if (todos.length === 0) {
-    content += `_(No active session tasks)_\n\n`;
-  }
-
-  return content;
-}
-
-/**
- * Extract all sections from TODO.md EXCEPT "Current Session"
- * These are user-managed sections that should be preserved.
- */
-function extractPreservedSections(content: string): string {
-  let preserved = '';
-
-  // Match all ## sections that are NOT "Current Session"
-  const sectionRegex = /\n(## (?!Current Session)[^\n]+[\s\S]*?)(?=\n## |\n---\n+\*Last updated|$)/g;
-  const matches = content.matchAll(sectionRegex);
-
-  for (const match of matches) {
-    preserved += match[1];
-  }
-
-  return preserved;
-}
-
-/**
- * Fix malformed headings: Remove --- prefix from headings (---# → #)
- * Claude sometimes incorrectly merges horizontal rules with headings.
- */
-function fixMalformedHeadings(content: string): string {
-  return content.replace(/^---#/gm, '#');
-}
-
-/**
- * Build new TODO.md preserving user sections
- */
-function buildTodoContent(todos: TodoItem[], existingContent: string): string {
-  const now = new Date().toISOString();
-
-  // Get all preserved sections (everything except Current Session)
-  const preserved = extractPreservedSections(existingContent);
-
-  // Build new content
-  let content = `# TODO
-
-## Current Session
-
-${formatSessionTodos(todos)}`;
-
-  // Add preserved sections
-  if (preserved.trim()) {
-    content += preserved;
-  }
-
-  // Ensure we end with exactly one timestamp
-  content = content.replace(/(\n---\s*)*(\n\*Last updated:.*\*\s*)*$/, '');
-  content += `\n---\n\n*Last updated: ${now}*\n`;
-
-  return content;
-}
-
 async function main() {
   if (isWorkerSession()) return; // disposable worker: no per-session bookkeeping
   try {
@@ -165,7 +65,7 @@ async function main() {
 
     // Create TODO.md if it doesn't exist
     if (!existsSync(todoPath)) {
-      const parentDir = todoPath.replace(/\/[^/]+$/, '');
+      const parentDir = dirname(todoPath);
       mkdirSync(parentDir, { recursive: true });
       console.error(`Creating TODO.md at ${todoPath}`);
     }
@@ -181,7 +81,7 @@ async function main() {
     // Build and write new content (with heading fix)
     let newContent = buildTodoContent(todos, existingContent);
     newContent = fixMalformedHeadings(newContent);
-    writeFileSync(todoPath, newContent);
+    writeFileAtomic(todoPath, newContent);
 
     const stats = {
       inProgress: todos.filter(t => t.status === 'in_progress').length,

package/src/hooks/ts/pre-compact/context-compression-hook.ts

@@ -694,7 +694,7 @@ async function main() {
             let noteContent = readFileSync(newPath, 'utf-8');
             noteContent = noteContent.replace(
               /^(# Session \d+:)\s*.*$/m,
-              `$1 ${title}`
+              (_m, h1) => `${h1} ${title}`
             );
             writeFileSync(newPath, noteContent);
             console.error(`Updated note H1 to match rename`);

package/src/hooks/ts/pre-tool-use/security-validator.ts

@@ -18,11 +18,12 @@
  */
 
 import { currentWorkerId } from "../../../workers/worker-id.js";
-import { appendFileSync, mkdirSync, existsSync } from 'fs';
+import { appendFileSync, mkdirSync, existsSync, chmodSync } from 'fs';
 import { dirname, resolve } from 'path';
 import { securityEventsPath } from '../lib/pai-paths.js';
 import { isSharedCheckout } from '../lib/shared-checkout.js';
-import { decideWorkerGitGuard, workerGitGuardMessage } from '../lib/worker-git-guard.js';
+import { maskSecrets } from '../lib/loop-guard.js';
+import { decideWorkerGitGuard, splitSegments, workerGitGuardMessage } from '../lib/worker-git-guard.js';
 import { detectUnsafePlutil, plutilGuardMessage } from '../lib/plutil-guard.js';
 import { readWorkersSection } from '../../../workers/config.js';
 import { workersLogDir } from '../../../workers/paths.js';
@@ -75,6 +76,7 @@ const DANGEROUS_FILE_OPS_PATTERNS: RegExp[] = [
 // OPTIONAL: Operations that require confirmation instead of blocking
 const DANGEROUS_GIT_PATTERNS: RegExp[] = [
   /\bgit\b.*\spush\b.*(\s-f\b|\s--force(\s|$))/i,  // git push -f / --force; --force-with-lease and --follow-tags pass
+  /\bgit\b.*\spush\b.*\s\+\S/i,                  // a plus-prefixed refspec forces the update without -f
   /\bgit\s+reset\s+--hard/i,                        // git reset --hard
   // Add your own git safety patterns here
 ];
@@ -149,20 +151,35 @@ interface DetectionResult {
   pattern?: string;
 }
 
+/** Quoted strings removed: text inside a commit message or echo is not a command. */
+function dropQuoted(segment: string): string {
+  return segment.replace(/"(?:\\.|[^"\\])*"|'[^']*'/g, '""');
+}
+
+/** A quoted +refspec is still a forced push, so push segments also test with only the quote marks removed. */
+function gitPatternHit(pattern: RegExp, segment: string): boolean {
+  const bare = dropQuoted(segment);
+  if (pattern.test(bare)) return true;
+  return /\bgit\b.*\spush\b/.test(bare) && pattern.test(segment.replace(/["']/g, ''));
+}
+
 function detectAttack(content: string): DetectionResult {
+  // A quoted target is the same target: test the text with quote marks removed too.
+  const unquoted = content.replace(/["']/g, '');
   // First check for hard blocks
   for (const { category, patterns } of ALL_BLOCK_PATTERNS) {
     for (const pattern of patterns) {
-      if (pattern.test(content)) {
+      if (pattern.test(content) || pattern.test(unquoted)) {
         return { blocked: true, category, pattern: pattern.source };
       }
     }
   }
 
   // Then check for confirmation-required patterns
+  const segments = splitSegments(content);
   for (const { category, patterns } of CONFIRM_PATTERNS) {
     for (const pattern of patterns) {
-      if (pattern.test(content)) {
+      if (segments.some((seg) => gitPatternHit(pattern, seg))) {
         return { blocked: false, requiresConfirmation: true, category, pattern: pattern.source };
       }
     }
@@ -177,6 +194,7 @@ function detectAttack(content: string): DetectionResult {
 
 function logSecurityEvent(event: Record<string, unknown>): void {
   const logPath = securityEventsPath();
+  if (typeof event.command === 'string') event = { ...event, command: maskSecrets(event.command) };
   const entry = JSON.stringify({ timestamp: new Date().toISOString(), ...event }) + '\n';
 
   try {
@@ -184,7 +202,8 @@ function logSecurityEvent(event: Record<string, unknown>): void {
     if (!existsSync(dir)) {
       mkdirSync(dir, { recursive: true });
     }
-    appendFileSync(logPath, entry);
+    appendFileSync(logPath, entry, { mode: 0o600 });
+    chmodSync(logPath, 0o600);
   } catch {
     // Silently fail - logging should never break the hook
   }
@@ -198,11 +217,12 @@ async function main(): Promise<void> {
   let input: HookInput;
 
   try {
-    // Read stdin
+    // Read stdin to end of input; the timer only bounds a hung pipe.
     const chunks: Buffer[] = [];
-    const timeoutPromise = new Promise<Buffer[]>((_, reject) =>
-      setTimeout(() => reject(new Error('timeout')), 100)
-    );
+    let timer: NodeJS.Timeout | undefined;
+    const timeoutPromise = new Promise<Buffer[]>((_, reject) => {
+      timer = setTimeout(() => reject(new Error('timeout')), 2000);
+    });
     const readPromise = (async () => {
       for await (const chunk of process.stdin) {
         chunks.push(chunk);
@@ -215,8 +235,10 @@ async function main(): Promise<void> {
       const result = await Promise.race([readPromise, timeoutPromise]);
       text = Buffer.concat(result).toString('utf-8');
     } catch {
-      console.log(JSON.stringify({ permissionDecision: 'allow' }));
-      return;
+      // Without the payload the delete and git guards cannot run: fail closed.
+      deny('The hook input could not be read in time, so the command cannot be checked. Retry the command.');
+    } finally {
+      clearTimeout(timer);
     }
 
     if (!text.trim()) {
@@ -226,9 +248,8 @@ async function main(): Promise<void> {
 
     input = JSON.parse(text);
   } catch {
-    // Parse error or timeout - fail open
-    console.log(JSON.stringify({ permissionDecision: 'allow' }));
-    return;
+    // Unparseable payload: the command is unknown, so the guards cannot run.
+    deny('The hook input could not be parsed, so the command cannot be checked. Retry the command.');
   }
 
   // Only validate Bash commands

package/src/hooks/ts/session-end/capture-session-summary.ts

@@ -8,12 +8,14 @@
  */
 
 import { paiSocketPath } from "../../../runtime-paths.js";
-import { writeFileSync, mkdirSync, existsSync, readFileSync, readdirSync } from 'fs';
+import { writeFileSync, mkdirSync, existsSync, readFileSync, unlinkSync } from 'fs';
+import { tmpdir } from 'os';
 import { join } from 'path';
 import { historyDir } from '../lib/pai-paths.js';
+import { analyzeSession, formatSessionDocument } from '../lib/session-summary.js';
 
 interface SessionData {
-  conversation_id: string;
+  session_id: string;
   timestamp: string;
   [key: string]: any;
 }
@@ -27,25 +29,35 @@ async function main() {
       chunks.push(chunk);
     }
     const input = Buffer.concat(chunks).toString('utf-8');
-    if (!input || input.trim() === '') {
+    // The detached child has stdin ignored; its payload comes from the temp file.
+    if ((!input || input.trim() === '') && !process.env.__PAI_HOOK_INPUT_FILE) {
       process.exit(0);
     }
 
-    // Fork: re-exec ourselves with --background flag and pipe the stdin data via env.
+    // Fork: re-exec ourselves with --background flag and hand the stdin data over via a private temp file
+    // (an env var is visible to ps eww and hits E2BIG on large payloads).
     // This detaches the heavy work (JSONL scan, IPC) from CC's abort signal.
     if (!process.env.__PAI_HOOK_BG) {
       const { spawn } = await import('child_process');
+      const inputFile = join(tmpdir(), `pai-session-end-${process.pid}-${Date.now()}.json`);
+      writeFileSync(inputFile, input, { mode: 0o600 });
       const child = spawn(process.execPath, [process.argv[1], '--background'], {
         detached: true,
         stdio: 'ignore',
-        env: { ...process.env, __PAI_HOOK_BG: '1', __PAI_HOOK_INPUT: input },
+        env: { ...process.env, __PAI_HOOK_BG: '1', __PAI_HOOK_INPUT_FILE: inputFile },
       });
       child.unref();
       process.exit(0); // Return immediately — CC sees success, abort signal is harmless
     }
 
     // Background mode: we're detached, safe from abort signals
-    const data: SessionData = JSON.parse(process.env.__PAI_HOOK_INPUT || input);
+    const inputFile = process.env.__PAI_HOOK_INPUT_FILE;
+    let raw = input;
+    if (inputFile) {
+      raw = readFileSync(inputFile, 'utf-8');
+      try { unlinkSync(inputFile); } catch { /* ignore */ }
+    }
+    const data: SessionData = JSON.parse(raw);
 
     // Generate timestamp for filename
     const now = new Date();
@@ -57,7 +69,7 @@ async function main() {
     const yearMonth = timestamp.substring(0, 7); // YYYY-MM
 
     // Try to extract session info from raw outputs
-    const sessionInfo = await analyzeSession(data.conversation_id, yearMonth);
+    const sessionInfo = await analyzeSession(data.session_id, yearMonth);
 
     // Generate filename
     const filename = `${timestamp}_SESSION_${sessionInfo.focus}.md`;
@@ -75,7 +87,7 @@ async function main() {
     writeFileSync(join(sessionDir, filename), sessionDoc);
 
     // Also store structured summary via daemon IPC for the observations system
-    await storeStructuredSummary(data.conversation_id, sessionInfo);
+    await storeStructuredSummary(data.session_id, sessionInfo);
 
     // Exit successfully
     process.exit(0);
@@ -86,126 +98,6 @@ async function main() {
   }
 }
 
-async function analyzeSession(conversationId: string, yearMonth: string): Promise<any> {
-  // Try to read raw outputs for this session
-  const rawOutputsDir = join(historyDir(), 'raw-outputs', yearMonth);
-
-  let filesChanged: string[] = [];
-  let commandsExecuted: string[] = [];
-  let toolsUsed: Set<string> = new Set();
-
-  try {
-    if (existsSync(rawOutputsDir)) {
-      // Only scan today's file — not the entire month (which can be 400MB+).
-      // JSONL filenames are prefixed with YYYY-MM-DD.
-      const todayPrefix = new Date().toISOString().substring(0, 10);
-      const files = readdirSync(rawOutputsDir).filter(
-        f => f.endsWith('.jsonl') && f.startsWith(todayPrefix)
-      );
-
-      for (const file of files) {
-        const filePath = join(rawOutputsDir, file);
-        const content = readFileSync(filePath, 'utf-8');
-        const lines = content.split('\n').filter(l => l.trim());
-
-        for (const line of lines) {
-          try {
-            const entry = JSON.parse(line);
-            if (entry.session === conversationId) {
-              toolsUsed.add(entry.tool);
-
-              // Extract file changes
-              if (entry.tool === 'Edit' || entry.tool === 'Write') {
-                if (entry.input?.file_path) {
-                  filesChanged.push(entry.input.file_path);
-                }
-              }
-
-              // Extract bash commands
-              if (entry.tool === 'Bash' && entry.input?.command) {
-                commandsExecuted.push(entry.input.command);
-              }
-            }
-          } catch (e) {
-            // Skip invalid JSON lines
-          }
-        }
-      }
-    }
-  } catch (error) {
-    // Silent failure
-  }
-
-  return {
-    focus: 'general-work',
-    filesChanged: [...new Set(filesChanged)].slice(0, 10), // Unique, max 10
-    commandsExecuted: commandsExecuted.slice(0, 10), // Max 10
-    toolsUsed: Array.from(toolsUsed),
-    duration: 0 // Unknown
-  };
-}
-
-function formatSessionDocument(timestamp: string, data: SessionData, info: any): string {
-  const date = timestamp.substring(0, 10); // YYYY-MM-DD
-  const time = timestamp.substring(11).replace(/-/g, ':'); // HH:MM:SS
-  const da = process.env.DA || 'PAI';
-
-  return `---
-capture_type: SESSION
-timestamp: ${new Date().toISOString()}
-session_id: ${data.conversation_id}
-duration_minutes: ${info.duration}
-executor: ${da}
----
-
-# Session: ${info.focus}
-
-**Date:** ${date}
-**Time:** ${time}
-**Session ID:** ${data.conversation_id}
-
----
-
-## Session Overview
-
-**Focus:** General development work
-**Duration:** ${info.duration > 0 ? `${info.duration} minutes` : 'Unknown'}
-
----
-
-## Tools Used
-
-${info.toolsUsed.length > 0 ? info.toolsUsed.map((t: string) => `- ${t}`).join('\n') : '- None recorded'}
-
----
-
-## Files Modified
-
-${info.filesChanged.length > 0 ? info.filesChanged.map((f: string) => `- \`${f}\``).join('\n') : '- None recorded'}
-
-**Total Files Changed:** ${info.filesChanged.length}
-
----
-
-## Commands Executed
-
-${info.commandsExecuted.length > 0 ? '```bash\n' + info.commandsExecuted.join('\n') + '\n```' : 'None recorded'}
-
----
-
-## Notes
-
-This session summary was automatically generated by the UOCS SessionEnd hook.
-
-For detailed tool outputs, see: \`${join(historyDir(), 'raw-outputs', timestamp.substring(0, 7))}/\`
-
----
-
-**Session Outcome:** Completed
-**Generated:** ${new Date().toISOString()}
-`;
-}
-
 async function storeStructuredSummary(
   sessionId: string,
   info: { focus: string; filesChanged: string[]; commandsExecuted: string[]; toolsUsed: string[]; duration: number }

package/src/hooks/ts/session-start/load-core-context.ts

@@ -74,9 +74,9 @@ async function main() {
 
     // Replace placeholders {{DA}}, {{DA_COLOR}}, {{ENGINEER_NAME}}
     coreContent = coreContent
-      .replace(/\{\{DA\}\}/g, daName)
-      .replace(/\{\{DA_COLOR\}\}/g, daColor)
-      .replace(/\{\{ENGINEER_NAME\}\}/g, engineerName);
+      .replace(/\{\{DA\}\}/g, () => daName)
+      .replace(/\{\{DA_COLOR\}\}/g, () => daColor)
+      .replace(/\{\{ENGINEER_NAME\}\}/g, () => engineerName);
 
     console.error(`Read ${coreContent.length} characters from ${coreSkillPath} (Personalized for ${engineerName} & ${daName})`);