@useorgx/orgx-opencode-plugin 0.1.0-alpha.1 → 0.1.0-alpha.10

package/scripts/orgx-work-graph-reconcile.mjs

@@ -0,0 +1,994 @@
+#!/usr/bin/env node
+
+import {
+  createReadStream,
+  existsSync,
+  mkdirSync,
+  realpathSync,
+  writeFileSync,
+} from "node:fs";
+import { createInterface } from "node:readline";
+import { createHash } from "node:crypto";
+import { basename, dirname, join } from "node:path";
+import { homedir } from "node:os";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+const WORK_GRAPH_SCHEMA_VERSION = "2.0.0";
+const WORK_GRAPH_FINGERPRINT_VERSION = "wgf_v1";
+const DEFAULT_OUTBOX = join(
+  homedir(),
+  ".config",
+  "useorgx",
+  "wizard",
+  "hooks",
+  "events.jsonl"
+);
+const SOURCE_CLIENTS = new Set([
+  "codex",
+  "claude",
+  "claude-code",
+  "cursor",
+  "opencode",
+  "goose",
+  "openclaw",
+  "slack",
+  "mcp",
+  "orgx_runtime_hook",
+  "github",
+  "linear",
+  "gmail",
+  "calendar",
+  "notion",
+  "docs",
+  "manual",
+  "wizard",
+  "api",
+  "unknown",
+]);
+
+export function parseArgs(argv) {
+  const args = {};
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (!arg.startsWith("--")) continue;
+    const [rawKey, ...rest] = arg.slice(2).split("=");
+    const key = rawKey.trim();
+    if (!key) continue;
+    if (rest.length > 0) {
+      args[key] = rest.join("=");
+    } else if (argv[index + 1] && !argv[index + 1].startsWith("--")) {
+      args[key] = argv[index + 1];
+      index += 1;
+    } else {
+      args[key] = "true";
+    }
+  }
+  return args;
+}
+
+export function pickString(...values) {
+  for (const value of values) {
+    if (typeof value !== "string") continue;
+    const trimmed = value.trim();
+    if (trimmed) return trimmed;
+  }
+  return undefined;
+}
+
+function stableJson(value) {
+  if (Array.isArray(value)) {
+    return `[${value.map((item) => stableJson(item)).join(",")}]`;
+  }
+  if (value && typeof value === "object") {
+    return `{${Object.keys(value)
+      .sort()
+      .map((key) => `${JSON.stringify(key)}:${stableJson(value[key])}`)
+      .join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+
+export function hashString(value, length = 24) {
+  return createHash("sha256").update(value).digest("hex").slice(0, length);
+}
+
+function stableHash(value, length = 24) {
+  return hashString(stableJson(value), length);
+}
+
+function slug(value, fallback = "unknown") {
+  return (
+    pickString(value)
+      ?.toLowerCase()
+      .replace(/[^a-z0-9._:-]+/g, "-")
+      .replace(/^-+|-+$/g, "")
+      .slice(0, 120) || fallback
+  );
+}
+
+function toIsoTimestamp(value, fallback) {
+  const parsed = Date.parse(String(value || ""));
+  if (Number.isFinite(parsed)) return new Date(parsed).toISOString();
+  return fallback;
+}
+
+export function normalizeSourceClient(value) {
+  const raw = pickString(value)?.toLowerCase() || "unknown";
+  if (raw === "claude_code") return "claude-code";
+  if (raw === "claudecode") return "claude-code";
+  if (raw === "open-claw") return "openclaw";
+  return SOURCE_CLIENTS.has(raw) ? raw : "unknown";
+}
+
+function sourceLabel(sourceClient) {
+  return {
+    codex: "Codex",
+    "claude-code": "Claude Code",
+    claude: "Claude",
+    openclaw: "OpenClaw",
+    orgx_runtime_hook: "OrgX runtime hook",
+    mcp: "MCP",
+    wizard: "OrgX wizard",
+  }[sourceClient] || sourceClient;
+}
+
+function eventPhase(event) {
+  const normalized = String(event || "").toLowerCase();
+  if (normalized.includes("stop") || normalized.includes("complete")) {
+    return "completed";
+  }
+  if (normalized.includes("block") || normalized.includes("error")) {
+    return "blocked";
+  }
+  if (normalized.includes("permission")) return "blocked";
+  return "in_progress";
+}
+
+function recordSortKey(record) {
+  return [
+    record.timestamp || "",
+    record.source_client || "",
+    record.run_id || "",
+    record.session_id || "",
+    record.event || "",
+    record.turn_id || "",
+  ].join("\u0000");
+}
+
+export function normalizeHookRecord(record, index = 0) {
+  if (!record || typeof record !== "object" || Array.isArray(record)) {
+    return null;
+  }
+  const sourceClient = normalizeSourceClient(record.source_client);
+  const sessionId = pickString(record.session_id, record.sessionId);
+  const runId = pickString(record.run_id, record.runId);
+  const cwd = pickString(record.cwd, record.workspace, process.cwd());
+  const timestamp = toIsoTimestamp(record.timestamp, "1970-01-01T00:00:00.000Z");
+  const summary =
+    record.summary && typeof record.summary === "object" && !Array.isArray(record.summary)
+      ? record.summary
+      : {};
+  return {
+    schema_version: pickString(record.schema_version, "2026-05-07"),
+    source: pickString(record.source, "orgx_runtime_hook"),
+    source_client: sourceClient,
+    event: pickString(record.event, "unknown"),
+    run_id: runId,
+    session_id: sessionId || `unknown-session-${index + 1}`,
+    turn_id: pickString(record.turn_id, record.turnId),
+    cwd,
+    transcript_path: pickString(record.transcript_path, record.transcriptPath),
+    timestamp,
+    summary: {
+      tool_name: pickString(summary.tool_name, summary.toolName),
+      prompt_chars:
+        typeof summary.prompt_chars === "number" && Number.isFinite(summary.prompt_chars)
+          ? summary.prompt_chars
+          : undefined,
+      payload_keys: Array.isArray(summary.payload_keys)
+        ? summary.payload_keys
+            .filter((item) => typeof item === "string")
+            .slice(0, 40)
+        : [],
+    },
+  };
+}
+
+export async function loadHookOutboxRecords(outboxPath, { maxRecords = 5000 } = {}) {
+  if (!existsSync(outboxPath)) {
+    return { records: [], skipped: 0, missing: true };
+  }
+
+  const records = [];
+  let skipped = 0;
+  const rl = createInterface({
+    input: createReadStream(outboxPath, { encoding: "utf8" }),
+    crlfDelay: Infinity,
+  });
+
+  for await (const line of rl) {
+    const trimmed = line.trim();
+    if (!trimmed) continue;
+    try {
+      const parsed = JSON.parse(trimmed);
+      const normalized = normalizeHookRecord(parsed, records.length + skipped);
+      if (normalized) records.push(normalized);
+      else skipped += 1;
+    } catch {
+      skipped += 1;
+    }
+    if (records.length >= maxRecords) break;
+  }
+
+  return { records, skipped, missing: false };
+}
+
+function toolNames(records) {
+  return [
+    ...new Set(
+      records
+        .map((record) => pickString(record.summary?.tool_name))
+        .filter(Boolean)
+        .sort()
+    ),
+  ];
+}
+
+function hasOrgxSignal(records) {
+  return records.some((record) => {
+    const haystack = [
+      record.source,
+      record.source_client,
+      record.event,
+      record.summary?.tool_name,
+      ...(record.summary?.payload_keys || []),
+    ]
+      .filter(Boolean)
+      .join(" ")
+      .toLowerCase();
+    return haystack.includes("orgx") || haystack.includes("useorgx");
+  });
+}
+
+function hasMcpSignal(records) {
+  return records.some((record) => {
+    const haystack = [
+      record.event,
+      record.summary?.tool_name,
+      ...(record.summary?.payload_keys || []),
+    ]
+      .filter(Boolean)
+      .join(" ")
+      .toLowerCase();
+    return haystack.includes("mcp");
+  });
+}
+
+function hasOrgxMcpSignal(records) {
+  return records.some((record) => {
+    const haystack = [
+      record.event,
+      record.summary?.tool_name,
+      ...(record.summary?.payload_keys || []),
+    ]
+      .filter(Boolean)
+      .join(" ")
+      .toLowerCase();
+    return (
+      haystack.includes("mcp") &&
+      (haystack.includes("orgx") || haystack.includes("useorgx"))
+    );
+  });
+}
+
+function buildEvidenceRef(record, ordinal) {
+  const sourceId = `${record.source_client}:${record.session_id}`;
+  const id = `${sourceId}:${ordinal}`;
+  const tool = pickString(record.summary?.tool_name);
+  const summaryBits = [
+    `${sourceLabel(record.source_client)} ${record.event} hook observed.`,
+    tool ? `Tool signal: ${tool}.` : undefined,
+    typeof record.summary?.prompt_chars === "number"
+      ? `Prompt length: ${record.summary.prompt_chars} characters.`
+      : undefined,
+  ].filter(Boolean);
+  return {
+    id,
+    source_client: record.source_client,
+    source_id: sourceId,
+    label: `${sourceLabel(record.source_client)} ${record.event}`,
+    summary: summaryBits.join(" "),
+    occurred_at: record.timestamp,
+    confidence: 0.72,
+    redaction_state: "public_summary",
+    metadata: {
+      event: record.event,
+      cwd_hash: hashString(record.cwd, 16),
+      has_transcript_path: Boolean(record.transcript_path),
+    },
+  };
+}
+
+function buildAttributionNode({
+  id,
+  kind,
+  label,
+  summary,
+  sourceClient,
+  evidenceRefs,
+  linkedNodeIds = [],
+  confidence = 0.72,
+  weight = 50,
+  metadata = {},
+}) {
+  return {
+    id,
+    kind,
+    label,
+    summary,
+    source_client: sourceClient,
+    evidence_refs: evidenceRefs,
+    linked_node_ids: linkedNodeIds,
+    confidence,
+    weight,
+    review_state: "unreviewed",
+    dedupe_key: id,
+    metadata,
+  };
+}
+
+function finalStateFor(records) {
+  if (records.some((record) => eventPhase(record.event) === "blocked")) {
+    return "blocked";
+  }
+  if (records.some((record) => eventPhase(record.event) === "completed")) {
+    return "completed";
+  }
+  if (records.length > 0) return "in_progress";
+  return "unknown";
+}
+
+function findingTypeCounts(findings) {
+  const counts = {};
+  for (const finding of findings) {
+    counts[finding.type] = (counts[finding.type] || 0) + 1;
+  }
+  return counts;
+}
+
+function emptyAttributionSpine(evidenceRefs = []) {
+  return {
+    source_events: [],
+    actions: [],
+    decisions: [],
+    artifacts: [],
+    people: [],
+    agents: [],
+    tools: [],
+    businesses: [],
+    product_surfaces: [],
+    goals: [],
+    sources: [],
+    initiative_candidates: [],
+    evidence_refs: evidenceRefs,
+    confidence: evidenceRefs.length ? 0.7 : 0,
+    dedupe_keys: [],
+    privacy: {
+      redaction_state: "public_summary",
+      raw_transcripts_included: false,
+      public_summary_only: true,
+    },
+    review: {
+      pending_count: 0,
+      correction_affordances: [
+        "confirm",
+        "merge",
+        "hide",
+        "mark_important",
+        "launch_or_dismiss",
+      ],
+    },
+  };
+}
+
+export function buildWorkGraphReport(recordsInput, options = {}) {
+  const generatedAt = toIsoTimestamp(
+    options.generatedAt,
+    new Date().toISOString()
+  );
+  const records = recordsInput
+    .map((record, index) => normalizeHookRecord(record, index))
+    .filter(Boolean)
+    .sort((a, b) => recordSortKey(a).localeCompare(recordSortKey(b)));
+  const firstRecord = records[0];
+  const workspaceCwd = pickString(options.workspaceCwd, firstRecord?.cwd, process.cwd());
+  const workspaceName = pickString(
+    options.workspaceName,
+    basename(workspaceCwd) || workspaceCwd,
+    "Local workspace"
+  );
+  const workspaceHash = `sha256:${hashString(workspaceCwd, 32)}`;
+  const workspace = {
+    id: pickString(options.workspaceId, `local:${hashString(workspaceCwd, 16)}`),
+    name: workspaceName,
+  };
+  const sourceClients = [
+    ...new Set(records.map((record) => record.source_client).filter(Boolean)),
+  ].sort();
+  const sessions = [
+    ...new Set(
+      records
+        .map((record) => `${record.source_client}:${record.session_id}`)
+        .filter(Boolean)
+    ),
+  ].sort();
+  const observedToolNames = toolNames(records);
+  const orgxMcpCalled = hasOrgxMcpSignal(records);
+  const evidenceRefs = records.slice(0, 200).map(buildEvidenceRef);
+  const primaryEvidenceRef = evidenceRefs[0]?.id || "work-graph:hook-outbox:empty";
+  const sourceEvents = records.slice(0, 200).map((record, index) => ({
+    source_client: record.source_client,
+    source_id: `${record.source_client}:${record.session_id}`,
+    source_label: `${sourceLabel(record.source_client)} session`,
+    event_type: "runtime_hook",
+    occurred_at: record.timestamp,
+    evidence_ref: evidenceRefs[index].id,
+    confidence: 0.72,
+    metadata: {
+      event: record.event,
+      tool_name: record.summary?.tool_name,
+      prompt_chars: record.summary?.prompt_chars,
+    },
+  }));
+  const reportEvents = sourceEvents.map((event) => ({
+    source_client: event.source_client,
+    source_id: event.source_id,
+    source_label: event.source_label,
+    event_type: event.metadata?.tool_name ? "tool_signal" : "client_extraction",
+    evidence_ref: event.evidence_ref,
+    metadata: {
+      ...event.metadata,
+      occurred_at: event.occurred_at,
+      attribution_event_type: event.event_type,
+    },
+  }));
+
+  const findings = [];
+  if (records.length > 0) {
+    findings.push({
+      type: "action",
+      title: "AI client lifecycle activity observed",
+      summary:
+        "OrgX captured summary-only hook events from local AI client sessions.",
+      source_client: records[0].source_client,
+      source_id: `${records[0].source_client}:${records[0].session_id}`,
+      evidence_ref: primaryEvidenceRef,
+      confidence: 0.72,
+      metadata: {
+        event_count: records.length,
+        session_count: sessions.length,
+        source_clients: sourceClients,
+      },
+    });
+  }
+  if (observedToolNames.length > 0) {
+    findings.push({
+      type: "artifact",
+      title: "Tool-use trail is available for work graph hydration",
+      summary:
+        "Hook metadata includes compact tool names that can seed OrgX sources, tools, and evidence refs without raw transcript upload.",
+      source_client: records[0]?.source_client || "unknown",
+      source_id: records[0]
+        ? `${records[0].source_client}:${records[0].session_id}`
+        : "unknown:session",
+      evidence_ref: primaryEvidenceRef,
+      confidence: 0.7,
+      metadata: {
+        tool_names: observedToolNames.slice(0, 20),
+      },
+    });
+  }
+
+  const missedOrchestration = [];
+  if (records.length > 0 && !orgxMcpCalled) {
+    const missed = {
+      type: "missed_orchestration_opportunity",
+      title: "Session activity was captured without durable OrgX writeback",
+      summary:
+        "The hook outbox observed client lifecycle events, but no OrgX MCP tool signal was detected in the compact hook metadata.",
+      source_client: "wizard",
+      source_id: "work-graph:hook-outbox",
+      evidence_ref: primaryEvidenceRef,
+      confidence: 0.76,
+      metadata: {
+        event_count: records.length,
+        session_count: sessions.length,
+      },
+    };
+    findings.push(missed);
+    missedOrchestration.push(missed);
+  }
+
+  const sourceNodes = sourceClients.map((sourceClient) =>
+    buildAttributionNode({
+      id: `source:${sourceClient}`,
+      kind: "source",
+      label: sourceLabel(sourceClient),
+      summary: `${sourceLabel(sourceClient)} hook events were present in the outbox.`,
+      sourceClient,
+      evidenceRefs: evidenceRefs
+        .filter((ref) => ref.source_client === sourceClient)
+        .slice(0, 10)
+        .map((ref) => ref.id),
+      linkedNodeIds: ["action:hook-lifecycle-captured"],
+      confidence: 0.72,
+      weight: 70,
+      metadata: { connected: true },
+    })
+  );
+  const toolNodes = observedToolNames.slice(0, 50).map((name) =>
+    buildAttributionNode({
+      id: `tool:${slug(name)}`,
+      kind: "tool",
+      label: name.slice(0, 120),
+      summary: `Tool signal observed from hook metadata: ${name}.`,
+      sourceClient: name.toLowerCase().includes("orgx") ? "mcp" : records[0]?.source_client || "unknown",
+      evidenceRefs: evidenceRefs
+        .filter((ref) => records[evidenceRefs.indexOf(ref)]?.summary?.tool_name === name)
+        .slice(0, 10)
+        .map((ref) => ref.id),
+      linkedNodeIds: ["action:hook-lifecycle-captured"],
+      confidence: 0.68,
+      weight: name.toLowerCase().includes("orgx") ? 84 : 60,
+      metadata: {},
+    })
+  );
+  const actionNode = records.length
+    ? buildAttributionNode({
+        id: "action:hook-lifecycle-captured",
+        kind: "action",
+        label: "Capture AI client lifecycle",
+        summary:
+          "Convert local hook outbox events into OrgX Work Graph source events, evidence refs, and reviewable initiative candidates.",
+        sourceClient: "wizard",
+        evidenceRefs: evidenceRefs.slice(0, 20).map((ref) => ref.id),
+        linkedNodeIds: [...sourceNodes.map((node) => node.id), ...toolNodes.map((node) => node.id)],
+        confidence: 0.74,
+        weight: 82,
+        metadata: { raw_transcripts_sent: false },
+      })
+    : null;
+  const initiativeNode = records.length
+    ? buildAttributionNode({
+        id: "initiative:continuous-orgx-writeback",
+        kind: "goal",
+        label: "Install continuous OrgX writeback",
+        summary:
+          "Review hook-derived session evidence and promote real decisions, blockers, artifacts, and goals into OrgX.",
+        sourceClient: "wizard",
+        evidenceRefs: evidenceRefs.slice(0, 20).map((ref) => ref.id),
+        linkedNodeIds: actionNode ? [actionNode.id] : [],
+        confidence: orgxMcpCalled ? 0.64 : 0.78,
+        weight: orgxMcpCalled ? 62 : 88,
+        metadata: { priority: orgxMcpCalled ? "p2" : "p0" },
+      })
+    : null;
+
+  const attributionSpine = emptyAttributionSpine(evidenceRefs);
+  attributionSpine.source_events = sourceEvents;
+  attributionSpine.actions = actionNode ? [actionNode] : [];
+  attributionSpine.sources = sourceNodes;
+  attributionSpine.tools = toolNodes;
+  attributionSpine.initiative_candidates = initiativeNode ? [initiativeNode] : [];
+  attributionSpine.confidence = records.length ? 0.72 : 0;
+  attributionSpine.dedupe_keys = [
+    ...attributionSpine.actions,
+    ...attributionSpine.sources,
+    ...attributionSpine.tools,
+    ...attributionSpine.initiative_candidates,
+  ].map((node) => node.dedupe_key);
+  attributionSpine.review.pending_count =
+    attributionSpine.actions.length +
+    attributionSpine.tools.length +
+    attributionSpine.initiative_candidates.length;
+
+  const counts = findingTypeCounts(findings);
+  const fingerprintBasis = {
+    schema_version: WORK_GRAPH_SCHEMA_VERSION,
+    fingerprint_version: WORK_GRAPH_FINGERPRINT_VERSION,
+    workspace_hash: workspaceHash,
+    source_clients: sourceClients.length ? sourceClients : ["unknown"],
+    connected_source_hashes: sessions.map((session) => `sha256:${hashString(session, 32)}`),
+    missing_source_hashes: orgxMcpCalled ? [] : [`sha256:${hashString("orgx-mcp", 32)}`],
+    finding_type_counts: counts,
+    pattern_hashes: [
+      ...records.map((record) =>
+        `sha256:${stableHash({
+          source_client: record.source_client,
+          event: record.event,
+          tool_name: record.summary?.tool_name,
+        }, 32)}`
+      ),
+    ].sort(),
+    trail_shape_hashes: [],
+    recurring_pattern_hashes: [],
+    kickoff_hashes: records.length
+      ? [`sha256:${hashString("continuous-orgx-writeback", 32)}`]
+      : [],
+    raw_transcripts_included: false,
+  };
+  const workGraphFingerprint = `wgf_${stableHash(fingerprintBasis, 24)}`;
+  const hydrationKey = `orgx:work-graph:${workGraphFingerprint}`;
+  const reportId = `report_${stableHash({ workGraphFingerprint, generatedAt }, 24)}`;
+
+  return {
+    schema_version: WORK_GRAPH_SCHEMA_VERSION,
+    report_id: reportId,
+    idempotency_key: `work-graph:hook-outbox:${workGraphFingerprint}`,
+    work_graph_fingerprint: workGraphFingerprint,
+    fingerprint_version: WORK_GRAPH_FINGERPRINT_VERSION,
+    fingerprint_basis: fingerprintBasis,
+    signup_hydration: {
+      strategy: "work_graph_fingerprint_claim",
+      hydration_key: hydrationKey,
+      eligible: records.length > 0,
+      notes: records.length
+        ? ["claim after signup", "summary-only hook outbox hydration"]
+        : ["no hook events found"],
+    },
+    generated_at: generatedAt,
+    source_client: "wizard",
+    session_id: sessions[0] || "hook-outbox-empty",
+    workspace,
+    audit_method: {
+      mode: "ai_client_session_search",
+      searched_session_files: records.length > 0 ? 1 : 0,
+      skipped_session_files: 0,
+      searched_message_count: records.length,
+      retained_evidence_lines: evidenceRefs.length,
+      searched_source_groups: sourceClients.length,
+      extraction_lenses: ["runtime_hooks", "summary_only_work_graph"],
+      client_native_packs: sourceClients.map((sourceClient) => ({
+        source_client: sourceClient,
+        source_label: sourceLabel(sourceClient),
+        searched_session_count: records.filter(
+          (record) => record.source_client === sourceClient
+        ).length,
+        finding_count: findings.filter(
+          (finding) => finding.source_client === sourceClient
+        ).length,
+        confidence: 0.72,
+      })),
+      privacy_contract: [
+        "raw transcripts are excluded",
+        "hook payload values are summarized before persistence",
+        "workspace paths are hashed in public evidence metadata",
+      ],
+      notes: [],
+    },
+    domain_coverage: [
+      {
+        id: "runtime-hooks",
+        label: "Runtime hooks",
+        summary: `${records.length} summary-only lifecycle events captured.`,
+        finding_count: findings.length,
+        source_clients: sourceClients.length ? sourceClients : ["unknown"],
+        evidence_refs: evidenceRefs.slice(0, 20).map((ref) => ref.id),
+        confidence: records.length ? 0.72 : 0,
+      },
+    ],
+    skill_tool_signals: observedToolNames.slice(0, 50).map((name) => ({
+      id: `tool:${slug(name)}`,
+      label: name.slice(0, 120),
+      kind: name.toLowerCase().includes("orgx") ? "mcp_tool" : "client_tool",
+      mention_count: records.filter((record) => record.summary?.tool_name === name).length,
+      source_clients: sourceClients.length ? sourceClients : ["unknown"],
+      evidence_refs: evidenceRefs
+        .filter((_, index) => records[index]?.summary?.tool_name === name)
+        .slice(0, 20)
+        .map((ref) => ref.id),
+      confidence: 0.68,
+    })),
+    source_coverage: {
+      connected: sourceClients.map(sourceLabel),
+      missing: orgxMcpCalled ? [] : ["OrgX MCP writeback"],
+      mcpObserved: hasMcpSignal(records),
+      orgxObserved: hasOrgxSignal(records),
+      orgxMcpCalled,
+      skillOnlySignal: records.length > 0 && !orgxMcpCalled,
+      coverage_score: orgxMcpCalled ? 80 : records.length ? 45 : 0,
+      manifests: sourceClients.map((sourceClient) => ({
+        source_client: sourceClient,
+        source_label: sourceLabel(sourceClient),
+        status: "connected",
+        searched_sources: ["hook_outbox"],
+        searched_session_count: records.filter(
+          (record) => record.source_client === sourceClient
+        ).length,
+        skipped_session_count: 0,
+        query_count: 0,
+        finding_count: findings.filter(
+          (finding) => finding.source_client === sourceClient
+        ).length,
+        confidence: 0.72,
+        notes: [],
+      })),
+      notes: orgxMcpCalled
+        ? ["OrgX MCP signal detected in hook metadata."]
+        : ["No OrgX MCP writeback signal detected in compact hook metadata."],
+    },
+    final_state: finalStateFor(records),
+    events: reportEvents,
+    findings,
+    missed_orchestration_opportunities: missedOrchestration,
+    trails: [],
+    recurring_patterns: [],
+    recommendations: records.length && !orgxMcpCalled
+      ? [
+          {
+            id: "recommendation:promote-hook-outbox",
+            title: "Promote hook outbox evidence",
+            summary:
+              "Review summary-only hook records and promote real decisions, blockers, artifacts, and goals into OrgX.",
+            action_type: "connect_source",
+            trail_ids: [],
+            evidence_refs: [primaryEvidenceRef],
+            priority: "p0",
+            expected_lift: "+work graph durability",
+            confidence: 0.76,
+          },
+        ]
+      : [],
+    mirror: {
+      headline: records.length
+        ? "AI work is ready for OrgX review"
+        : "No AI hook activity found",
+      body: records.length
+        ? "OrgX found summary-only lifecycle evidence that can hydrate a work graph without sending raw transcripts."
+        : "The hook outbox did not contain records to hydrate.",
+      lens: "all",
+      generated_at: generatedAt,
+      claims: records.length
+        ? [
+            {
+              id: "mirror:hook-outbox",
+              text: `${records.length} lifecycle events were captured across ${sessions.length} session(s).`,
+              evidence_refs: [primaryEvidenceRef],
+              confidence: 0.72,
+            },
+          ]
+        : [],
+    },
+    tension_metrics: records.length && !orgxMcpCalled
+      ? [
+          {
+            id: "tension:work-without-writeback",
+            label: "work without writeback",
+            value: String(records.length),
+            tone: "warning",
+            trail_ids: [],
+            evidence_refs: [primaryEvidenceRef],
+            explanation:
+              "Hook events exist, but compact metadata did not prove durable OrgX MCP writeback.",
+          },
+        ]
+      : [],
+    opportunity_score: {
+      overall: records.length ? (orgxMcpCalled ? 58 : 76) : 0,
+      value_potential: records.length ? 78 : 0,
+      evidence_quality: records.length ? 62 : 0,
+      urgency: records.length && !orgxMcpCalled ? 80 : 35,
+      owner_clarity: records.length ? 55 : 0,
+      automation_potential: records.length ? 86 : 0,
+      orgx_fit: records.length ? 90 : 0,
+    },
+    execution_quality: {
+      overall: records.length ? 64 : 0,
+      evidence_coverage: records.length ? 58 : 0,
+      source_attribution: records.length ? 70 : 0,
+      trail_depth: 0,
+      insight_depth: records.length ? 45 : 0,
+      actionability: records.length ? 72 : 0,
+      impact_confidence: records.length ? 52 : 0,
+      notes: [
+        "This producer intentionally emits summary-only evidence.",
+        "Durable entities should be confirmed before promotion.",
+      ],
+    },
+    impact_projection: {
+      time_saved_hours_per_week: records.length ? 2 : 0,
+      acceleration_percent: records.length ? 8 : 0,
+      estimated_monthly_value_usd: 0,
+      confidence: records.length ? 0.35 : 0,
+      basis: ["hook outbox event count", "source coverage"],
+      assumptions: ["manual review promotes only confirmed entities"],
+    },
+    investigation: {
+      schema_version: WORK_GRAPH_SCHEMA_VERSION,
+      audit_id: `hook-outbox:${stableHash({ workspaceHash, generatedAt }, 16)}`,
+      fingerprint: workGraphFingerprint,
+      generated_at: generatedAt,
+      raw_events_summary: {
+        event_count: records.length,
+        source_clients: sourceClients,
+        sessions: sessions.length,
+      },
+      corpus_manifest: {
+        outbox_path: options.outboxPath ? "<local-hook-outbox>" : undefined,
+        raw_transcripts_excluded: true,
+      },
+      work_loops: [],
+      loop_families: [],
+      usage_catalogue: {
+        tools: observedToolNames,
+      },
+      source_confidence: {
+        hook_outbox: records.length ? 0.72 : 0,
+      },
+      why_not_100: orgxMcpCalled
+        ? [
+            {
+              code: "compact_hook_records",
+              summary: "Hook records are compact and need entity confirmation.",
+            },
+          ]
+        : [
+            {
+              code: "missing_orgx_mcp_writeback",
+              summary: "No OrgX MCP writeback signal was detected.",
+            },
+          ],
+      counterfactuals: [],
+      verification_log: [
+        {
+          step: "load_hook_outbox",
+          status: "passed",
+          records_read: records.length,
+          records_skipped: options.recordsSkipped || 0,
+        },
+      ],
+      critic_log: [],
+      verification_log_summary: {
+        total: records.length,
+        passed: records.length,
+        dropped: 0,
+      },
+      critic_log_summary: {
+        total: 0,
+        survived: 0,
+        dropped_or_demoted: 0,
+      },
+      mirror_paragraph: {},
+      repair_plan: [],
+      impact_projection: {},
+      redaction_log: [
+        {
+          rule: "exclude_raw_transcripts",
+          status: "passed",
+        },
+      ],
+      raw_transcripts_excluded: true,
+      claimable: records.length > 0,
+    },
+    initiative_kickoffs: records.length
+      ? [
+          {
+            title: "Install continuous OrgX writeback",
+            summary:
+              "Turn hook-derived lifecycle evidence into reviewed OrgX entities and runtime progress.",
+            reason: orgxMcpCalled
+              ? "Hook evidence exists and can be attached to the active graph."
+              : "Work happened in AI clients without a proven OrgX MCP writeback signal.",
+            finding_refs: [primaryEvidenceRef],
+            priority: orgxMcpCalled ? "p2" : "p0",
+          },
+        ]
+      : [],
+    attribution_spine: attributionSpine,
+    redaction_level: "summary_only",
+    raw_transcripts_sent: false,
+  };
+}
+
+export async function postWorkGraphReport({
+  report,
+  baseUrl,
+  apiKey,
+  fetchImpl = fetch,
+}) {
+  const normalizedBaseUrl = pickString(baseUrl, "https://www.useorgx.com").replace(/\/+$/, "");
+  const token = pickString(apiKey);
+  if (!token) {
+    throw new Error("ORGX_API_KEY is required when posting a Work Graph report");
+  }
+  const response = await fetchImpl(`${normalizedBaseUrl}/api/client/work-graph/reports`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`,
+    },
+    body: JSON.stringify({
+      report,
+      public_share: false,
+      attach_artifact: false,
+    }),
+  });
+  const body = await response.json().catch(async () => ({
+    text: await response.text().catch(() => ""),
+  }));
+  if (!response.ok) {
+    throw new Error(`Work Graph report post failed with HTTP ${response.status}`);
+  }
+  return body;
+}
+
+export async function main({
+  argv = process.argv.slice(2),
+  env = process.env,
+  now = () => new Date(),
+  fetchImpl = fetch,
+} = {}) {
+  const args = parseArgs(argv);
+  const outboxPath = pickString(args.outbox, env.ORGX_WIZARD_HOOK_OUTBOX, DEFAULT_OUTBOX);
+  const maxRecords = Number.parseInt(pickString(args.max_records, args["max-records"], "5000"), 10);
+  const loaded = await loadHookOutboxRecords(outboxPath, {
+    maxRecords: Number.isFinite(maxRecords) && maxRecords > 0 ? maxRecords : 5000,
+  });
+  const report = buildWorkGraphReport(loaded.records, {
+    outboxPath,
+    generatedAt: now().toISOString(),
+    workspaceCwd: pickString(args.cwd, env.ORGX_WORKSPACE_CWD),
+    workspaceName: pickString(args.workspace_name, args["workspace-name"]),
+    workspaceId: pickString(args.workspace_id, args["workspace-id"]),
+    recordsSkipped: loaded.skipped,
+  });
+
+  const result = {
+    ok: true,
+    outbox_path: outboxPath,
+    records_read: loaded.records.length,
+    records_skipped: loaded.skipped,
+    outbox_missing: loaded.missing,
+    work_graph_fingerprint: report.work_graph_fingerprint,
+    hydration_key: report.signup_hydration.hydration_key,
+    report,
+  };
+
+  if (args.post === "true") {
+    result.posted = await postWorkGraphReport({
+      report,
+      baseUrl: pickString(args.base_url, args["base-url"], env.ORGX_BASE_URL),
+      apiKey: pickString(args.api_key, args["api-key"], env.ORGX_API_KEY),
+      fetchImpl,
+    });
+  }
+
+  const outputPath = pickString(args.output);
+  if (outputPath) {
+    mkdirSync(dirname(outputPath), { recursive: true, mode: 0o700 });
+    writeFileSync(outputPath, `${JSON.stringify(result, null, 2)}\n`, {
+      encoding: "utf8",
+      mode: 0o600,
+    });
+  } else {
+    process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+  }
+
+  return result;
+}
+
+export function isDirectRun({ invokedPath = process.argv[1], moduleUrl = import.meta.url } = {}) {
+  if (!invokedPath) return false;
+  try {
+    return realpathSync(invokedPath) === realpathSync(fileURLToPath(moduleUrl));
+  } catch {
+    return moduleUrl === pathToFileURL(invokedPath).href;
+  }
+}
+
+if (isDirectRun()) {
+  main().catch((error) => {
+    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+    process.exit(1);
+  });
+}