@webpieces/ai-hook-rules 0.4.584 → 0.4.588

package/src/core/main-sync-refresh.js.map

@@ -1 +1 @@
-{"version":3,"file":"main-sync-refresh.js","sourceRoot":"","sources":["../../../../../../packages/tooling/ai-hook-rules/src/core/main-sync-refresh.ts"],"names":[],"mappings":";;AAcA,4EAEC;AAaD,wDAmCC;;AAhED,iDAAsC;AACtC,+CAAyB;AACzB,mDAA6B;AAE7B,0DAAuE;AAEvE,yCAAqC;AACrC,mDAAgF;AAEhF,qGAAqG;AACrG,yEAAyE;AACzE,IAAI,gBAAgB,GAAG,KAAK,CAAC;AAE7B,8GAA8G;AAC9G,SAAgB,gCAAgC;IAC5C,gBAAgB,GAAG,KAAK,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,sBAAsB,CAAC,aAAqB,EAAE,qBAA6B,2CAA4B;IACnH,gGAAgG;IAChG,mGAAmG;IACnG,mGAAmG;IACnG,2FAA2F;IAC3F,wFAAwF;IACxF,IAAI,gBAAgB;QAAE,OAAO;IAC7B,gBAAgB,GAAG,IAAI,CAAC;IAExB,8DAA8D;IAC9D,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACvD,2FAA2F;QAC3F,IAAA,4BAAY,EAAC,aAAa,EAAE,IAAI,4BAAY,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,SAAS,EAAE,CAAC,CAAC,CAAC;QAE3G,6FAA6F;QAC7F,mFAAmF;QACnF,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAA,iCAAiB,EAAC,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,EAAE;YAC1F,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;SAClC,CAAC,CAAC;QACH,8FAA8F;QAC9F,wFAAwF;QACxF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAU,EAAQ,EAAE;YACrC,IAAA,4BAAY,EAAC,aAAa,EAAE,IAAI,4BAAY,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,mFAAmF;QACnF,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;QAC3B,KAAK,KAAK,CAAC;QACX,0EAA0E;IAC9E,CAAC;AACL,CAAC","sourcesContent":["import { spawn } from 'child_process';\nimport * as fs from 'fs';\nimport * as path from 'path';\n\nimport { DEFAULT_HANG_TIMEOUT_MINUTES } from '@webpieces/rules-config';\n\nimport { toError } from './to-error';\nimport { logSyncEvent, SyncLogEvent, syncStderrLogPath } from './main-sync-log';\n\n// Per-process latch for the spawn below. A hook process handles exactly one tool call, so this makes\n// the refresher at-most-once per tool call. Exported reset is test-only.\nlet alreadyTriggered = false;\n\n// webpieces-disable no-function-outside-class -- test-only latch reset, matching this module's function shape\nexport function resetMainSyncRefreshLatchForTest(): void {\n    alreadyTriggered = false;\n}\n\n/**\n * Fire-and-forget spawn of the detached refresher (sync-main.js in this same dir — spawned by path,\n * not a bin). The child outlives this hook process (`detached` + `unref`), does the slow\n * merged-PR/fetch/merge-base/overlap work, and writes the cache the feature-branch-guard reads on\n * the NEXT call. This is the first detached spawn in the codebase — every existing hook is synchronous.\n *\n * Observability: we log SPAWN_ATTEMPT here and the child logs START/FINISH/ERROR, all to\n * `.webpieces/logs/guard-async-work.log`. The child's stdout/stderr are redirected to a sibling file (not\n * /dev/null) so a crash before the child's own logging is still captured. If guard-async-work.log shows\n * SPAWN_ATTEMPT but never START, the detached child was killed before it ran.\n */\nexport function triggerMainSyncRefresh(workspaceRoot: string, hangTimeoutMinutes: number = DEFAULT_HANG_TIMEOUT_MINUTES): void {\n    // ONE refresher per hook process. Several call sites fire this on a single tool call — the Read\n    // fast path in hook-core AND read-stale-guard's own check(), for one — which is why the log showed\n    // two SPAWN_ATTEMPTs ~20ms apart from the same pid on every cycle. The loser only ever reached the\n    // lock and exited, so the second child was pure waste (and one more `git fetch` racing the\n    // agent's). The child's lock still guards against refreshers from OTHER hook processes.\n    if (alreadyTriggered) return;\n    alreadyTriggered = true;\n\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n    try {\n        const refresher = path.join(__dirname, 'sync-main.js');\n        // SPAWN_ATTEMPT first — this also creates .webpieces/logs so the stderr fd below can open.\n        logSyncEvent(workspaceRoot, new SyncLogEvent('SPAWN_ATTEMPT', process.pid, '-', `refresher=${refresher}`));\n\n        // Redirect the detached child's stdout+stderr to a file (not /dev/null) so an uncaught crash\n        // before the child's own logging — e.g. a module-load failure — is still captured.\n        const errFd = fs.openSync(syncStderrLogPath(workspaceRoot), 'a');\n        const child = spawn(process.execPath, [refresher, workspaceRoot, String(hangTimeoutMinutes)], {\n            detached: true,\n            stdio: ['ignore', errFd, errFd],\n        });\n        // spawn errors (e.g. ENOENT) arrive asynchronously; record one if it fires. The hook may exit\n        // before this handler runs, but on POSIX a successful exec has already happened by now.\n        child.once('error', (err: Error): void => {\n            logSyncEvent(workspaceRoot, new SyncLogEvent('ERROR', child.pid ?? -1, '-', `spawn failed: ${err.message}`));\n        });\n        child.unref();\n        // The child has its own dup'd copy of the fd after spawn; close the parent's copy.\n        fs.closeSync(errFd);\n    } catch (err: unknown) {\n        const error = toError(err);\n        void error;\n        // Spawning the background refresh must never block or fail the tool call.\n    }\n}\n"]}
+{"version":3,"file":"main-sync-refresh.js","sourceRoot":"","sources":["../../../../../../packages/tooling/ai-hook-rules/src/core/main-sync-refresh.ts"],"names":[],"mappings":";;AAcA,4EAEC;AAcD,wDAmCC;;AAjED,iDAAsC;AACtC,+CAAyB;AACzB,mDAA6B;AAE7B,0DAAuE;AAEvE,yCAAqC;AACrC,mDAAgF;AAEhF,qGAAqG;AACrG,yEAAyE;AACzE,IAAI,gBAAgB,GAAG,KAAK,CAAC;AAE7B,8GAA8G;AAC9G,SAAgB,gCAAgC;IAC5C,gBAAgB,GAAG,KAAK,CAAC;AAC7B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,sBAAsB,CAAC,aAAqB,EAAE,qBAA6B,2CAA4B;IACnH,gGAAgG;IAChG,mGAAmG;IACnG,mGAAmG;IACnG,2FAA2F;IAC3F,wFAAwF;IACxF,IAAI,gBAAgB;QAAE,OAAO;IAC7B,gBAAgB,GAAG,IAAI,CAAC;IAExB,8DAA8D;IAC9D,IAAI,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACvD,2FAA2F;QAC3F,IAAA,4BAAY,EAAC,aAAa,EAAE,IAAI,4BAAY,CAAC,eAAe,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,SAAS,EAAE,CAAC,CAAC,CAAC;QAE3G,6FAA6F;QAC7F,mFAAmF;QACnF,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAA,iCAAiB,EAAC,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC,EAAE;YAC1F,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;SAClC,CAAC,CAAC;QACH,8FAA8F;QAC9F,wFAAwF;QACxF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAU,EAAQ,EAAE;YACrC,IAAA,4BAAY,EAAC,aAAa,EAAE,IAAI,4BAAY,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,mFAAmF;QACnF,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;QAC3B,KAAK,KAAK,CAAC;QACX,0EAA0E;IAC9E,CAAC;AACL,CAAC","sourcesContent":["import { spawn } from 'child_process';\nimport * as fs from 'fs';\nimport * as path from 'path';\n\nimport { DEFAULT_HANG_TIMEOUT_MINUTES } from '@webpieces/rules-config';\n\nimport { toError } from './to-error';\nimport { logSyncEvent, SyncLogEvent, syncStderrLogPath } from './main-sync-log';\n\n// Per-process latch for the spawn below. A hook process handles exactly one tool call, so this makes\n// the refresher at-most-once per tool call. Exported reset is test-only.\nlet alreadyTriggered = false;\n\n// webpieces-disable no-function-outside-class -- test-only latch reset, matching this module's function shape\nexport function resetMainSyncRefreshLatchForTest(): void {\n    alreadyTriggered = false;\n}\n\n/**\n * Fire-and-forget spawn of the detached refresher (sync-main.js in this same dir — spawned by path,\n * not a bin). The child outlives this hook process (`detached` + `unref`), does the slow\n * merged-PR/fetch/merge-base/overlap work, and writes the cache the feature-branch-guard reads on\n * the NEXT call. This is the first detached spawn in the codebase — every existing hook is synchronous.\n *\n * Observability: we log SPAWN_ATTEMPT here and the child logs START/FINISH/ERROR, all to\n * `.webpieces/logs/<stream>guard-async-work.log` (LogStream prefixes every name). The child's\n * stdout/stderr are redirected to a sibling file (not\n * /dev/null) so a crash before the child's own logging is still captured. If guard-async-work.log shows\n * SPAWN_ATTEMPT but never START, the detached child was killed before it ran.\n */\nexport function triggerMainSyncRefresh(workspaceRoot: string, hangTimeoutMinutes: number = DEFAULT_HANG_TIMEOUT_MINUTES): void {\n    // ONE refresher per hook process. Several call sites fire this on a single tool call — the Read\n    // fast path in hook-core AND read-stale-guard's own check(), for one — which is why the log showed\n    // two SPAWN_ATTEMPTs ~20ms apart from the same pid on every cycle. The loser only ever reached the\n    // lock and exited, so the second child was pure waste (and one more `git fetch` racing the\n    // agent's). The child's lock still guards against refreshers from OTHER hook processes.\n    if (alreadyTriggered) return;\n    alreadyTriggered = true;\n\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n    try {\n        const refresher = path.join(__dirname, 'sync-main.js');\n        // SPAWN_ATTEMPT first — this also creates .webpieces/logs so the stderr fd below can open.\n        logSyncEvent(workspaceRoot, new SyncLogEvent('SPAWN_ATTEMPT', process.pid, '-', `refresher=${refresher}`));\n\n        // Redirect the detached child's stdout+stderr to a file (not /dev/null) so an uncaught crash\n        // before the child's own logging — e.g. a module-load failure — is still captured.\n        const errFd = fs.openSync(syncStderrLogPath(workspaceRoot), 'a');\n        const child = spawn(process.execPath, [refresher, workspaceRoot, String(hangTimeoutMinutes)], {\n            detached: true,\n            stdio: ['ignore', errFd, errFd],\n        });\n        // spawn errors (e.g. ENOENT) arrive asynchronously; record one if it fires. The hook may exit\n        // before this handler runs, but on POSIX a successful exec has already happened by now.\n        child.once('error', (err: Error): void => {\n            logSyncEvent(workspaceRoot, new SyncLogEvent('ERROR', child.pid ?? -1, '-', `spawn failed: ${err.message}`));\n        });\n        child.unref();\n        // The child has its own dup'd copy of the fd after spawn; close the parent's copy.\n        fs.closeSync(errFd);\n    } catch (err: unknown) {\n        const error = toError(err);\n        void error;\n        // Spawning the background refresh must never block or fail the tool call.\n    }\n}\n"]}

package/src/core/rejection-log.js

@@ -6,6 +6,7 @@ const tslib_1 = require("tslib");
 const fs = tslib_1.__importStar(require("fs"));
 const path = tslib_1.__importStar(require("path"));
 const rules_config_1 = require("@webpieces/rules-config");
+const log_stream_1 = require("./log-stream");
 // The rejection log SPLITS across the two state dirs on purpose: the `.log` index goes to `logs/`
 // with every other webpieces log, while the dated `hooks/<YYYY-MM-DD>/writeInfo-*.md` DETAIL files
 // are not logs and stay in `hooks/` (see LOGS_STATE_DIR).
@@ -40,8 +41,8 @@ function logRejection(toolKind, input, result, cwd) {
         const detailRelPath = `${rules_config_1.HOOKS_STATE_DIR}/${dateStr}/${detailFileName}`;
         const detail = buildDetailContent(timestamp, toolKind, relativePath, ruleNames, result.report, input);
         fs.writeFileSync(path.join(dayDir, detailFileName), detail);
-        const logPath = path.join(logsDir, LOG_FILE);
-        rotateLogFile(logPath, path.join(logsDir, LOG_FILE_PREV));
+        const logPath = path.join(logsDir, log_stream_1.logStream.fileName(LOG_FILE));
+        rotateLogFile(logPath, path.join(logsDir, log_stream_1.logStream.fileName(LOG_FILE_PREV)));
         const logLine = `[${timestamp}]\t${toolKind}\t${relativePath}\t[${ruleNames.join(',')}]\t${detailRelPath}\n`;
         fs.appendFileSync(logPath, logLine);
         rotateOldDays(hooksDir, MAX_AGE_DAYS);

package/src/core/rejection-log.js.map

@@ -1 +1 @@
-{"version":3,"file":"rejection-log.js","sourceRoot":"","sources":["../../../../../../packages/tooling/ai-hook-rules/src/core/rejection-log.ts"],"names":[],"mappings":";;AAiBA,oCA8CC;AAkBD,4CASC;;AA1FD,+CAAyB;AACzB,mDAA6B;AAE7B,0DAAwF;AAIxF,kGAAkG;AAClG,mGAAmG;AACnG,0DAA0D;AAC1D,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AACtC,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAC7C,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,gCAAgC;AAClE,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAE1C,SAAgB,YAAY,CACxB,QAAkB,EAClB,KAA0B,EAC1B,MAAqB,EACrB,GAAW;IAEX,8DAA8D;IAC9D,IAAI,CAAC;QACD,4FAA4F;QAC5F,iFAAiF;QACjF,MAAM,IAAI,GAAG,IAAI,6BAAc,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEvC,6FAA6F;QAC7F,yFAAyF;QACzF,MAAM,QAAQ,GAAG,2BAAY,CAAC,SAAS,CAAC,IAAI,EAAE,8BAAe,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,2BAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3C,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,aAAa,OAAO,KAAK,CAAC;QACjD,yFAAyF;QACzF,wFAAwF;QACxF,uDAAuD;QACvD,MAAM,aAAa,GAAG,GAAG,8BAAe,IAAI,OAAO,IAAI,cAAc,EAAE,CAAC;QAExE,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7C,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;QAE1D,MAAM,OAAO,GAAG,IAAI,SAAS,MAAM,QAAQ,KAAK,YAAY,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,aAAa,IAAI,CAAC;QAC7G,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEpC,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,KAAK,GAAG,CAAC;IACb,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB,EAAE,GAAW;IACtD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,GAAG,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,kNAAkN;AAClN,SAAgB,gBAAgB,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACvB,SAAiB,EACjB,QAAkB,EAClB,YAAoB,EACpB,SAAmB,EACnB,MAAc,EACd,KAA0B;IAE1B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,SAAS,EAAE,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,eAAe,YAAY,EAAE,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,yBAAyB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;SAAM,CAAC;QACJ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,QAAgB;IACpD,8DAA8D;IAC9D,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;YAC5B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,KAAK,GAAG,CAAC;IACb,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,UAAkB;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC7D,IAAI,OAAiB,CAAC;IACtB,8DAA8D;IAC9D,IAAI,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,KAAK,GAAG,CAAC;QACT,OAAO;IACX,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACjD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAAE,SAAS;QACvC,IAAI,OAAO,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;YAC7B,8DAA8D;YAC9D,IAAI,CAAC;gBACD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACpB,6BAA6B;gBAC7B,KAAK,GAAG,CAAC;YACb,CAAC;QACL,CAAC;IACL,CAAC;AACL,CAAC","sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\n\nimport { dotWebpieces, RepoRootFinder, HOOKS_STATE_DIR } from '@webpieces/rules-config';\n\nimport type { ToolKind, NormalizedToolInput, BlockedResult } from './types';\n\n// The rejection log SPLITS across the two state dirs on purpose: the `.log` index goes to `logs/`\n// with every other webpieces log, while the dated `hooks/<YYYY-MM-DD>/writeInfo-*.md` DETAIL files\n// are not logs and stay in `hooks/` (see LOGS_STATE_DIR).\nconst LOG_FILE = 'hook-rejection.log';\nconst LOG_FILE_PREV = 'hook-rejection.1.log';\nconst MAX_LOG_BYTES = 512 * 1024; // 512 KB — rotate when exceeded\nconst MAX_AGE_DAYS = 7;\n\nconst RULE_NAME_RE = /^\\[([^\\]]+)\\] \\(/gm;\n\nexport function logRejection(\n    toolKind: ToolKind,\n    input: NormalizedToolInput,\n    result: BlockedResult,\n    cwd: string,\n): void {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n    try {\n        // `.webpieces/` lives at the repo root, NOT the AI's cwd — resolve it so a hook fired while\n        // the AI is in a subdirectory never scatters a stray `<subdir>/.webpieces` tree.\n        const root = new RepoRootFinder().resolveRepoRoot(cwd);\n        const now = new Date();\n        const timestamp = now.toISOString();\n        const epochMs = String(now.getTime());\n        const dateStr = timestamp.slice(0, 10);\n\n        // LOCAL scope — a rejection is this worktree's event, and a per-worktree log has exactly one\n        // writer, so its appends and its daily detail files cannot collide with another agent's.\n        const hooksDir = dotWebpieces.localFile(root, HOOKS_STATE_DIR);\n        const logsDir = dotWebpieces.logs(root);\n        const dayDir = path.join(hooksDir, dateStr);\n        fs.mkdirSync(dayDir, { recursive: true });\n        fs.mkdirSync(logsDir, { recursive: true });\n\n        const relativePath = computeRelativePath(input.filePath, root);\n        const ruleNames = extractRuleNames(result.report);\n        const detailFileName = `writeInfo-${epochMs}.md`;\n        // Relative to the STATE DIR, not to the log file's own directory: the index now lives in\n        // `logs/` while the detail lives in `hooks/<date>/`, so a bare `<date>/<file>` would no\n        // longer resolve from where the reader found the line.\n        const detailRelPath = `${HOOKS_STATE_DIR}/${dateStr}/${detailFileName}`;\n\n        const detail = buildDetailContent(timestamp, toolKind, relativePath, ruleNames, result.report, input);\n        fs.writeFileSync(path.join(dayDir, detailFileName), detail);\n\n        const logPath = path.join(logsDir, LOG_FILE);\n        rotateLogFile(logPath, path.join(logsDir, LOG_FILE_PREV));\n\n        const logLine = `[${timestamp}]\\t${toolKind}\\t${relativePath}\\t[${ruleNames.join(',')}]\\t${detailRelPath}\\n`;\n        fs.appendFileSync(logPath, logLine);\n\n        rotateOldDays(hooksDir, MAX_AGE_DAYS);\n    } catch (err: unknown) {\n        //const error = toError(err);\n        void err;\n    }\n}\n\nfunction computeRelativePath(filePath: string, cwd: string): string {\n    if (filePath.startsWith(cwd)) {\n        const rel = filePath.slice(cwd.length);\n        if (rel.startsWith('/')) return rel.slice(1);\n        return rel;\n    }\n    return filePath;\n}\n\n/**\n * The rule names a block report cites — every `[<rule-name>] (` header it opens with. Exported because\n * two audit streams need the same answer from the same regex: this file's rejection index, and the\n * `rule=` field guard-invocations.log now carries (see InvocationLog.finish). Two scrapers would be\n * two answers to one question.\n */\n// webpieces-disable no-function-outside-class -- pure regex scraper beside this module's other module-scope helpers; exported so the invocation log and the rejection index scrape rule names with the SAME code.\nexport function extractRuleNames(report: string): string[] {\n    const names: string[] = [];\n    let match = RULE_NAME_RE.exec(report);\n    while (match !== null) {\n        names.push(match[1]);\n        match = RULE_NAME_RE.exec(report);\n    }\n    RULE_NAME_RE.lastIndex = 0;\n    return names;\n}\n\nfunction buildDetailContent(\n    timestamp: string,\n    toolKind: ToolKind,\n    relativePath: string,\n    ruleNames: string[],\n    report: string,\n    input: NormalizedToolInput,\n): string {\n    const lines: string[] = [];\n    lines.push('# Hook Rejection Detail');\n    lines.push('');\n    lines.push(`- **Timestamp:** ${timestamp}`);\n    lines.push(`- **Tool:** ${toolKind}`);\n    lines.push(`- **File:** ${relativePath}`);\n    lines.push(`- **Rules violated:** ${ruleNames.join(', ')}`);\n    lines.push('');\n    lines.push('## Report');\n    lines.push('');\n    lines.push('```');\n    lines.push(report.trimEnd());\n    lines.push('```');\n    lines.push('');\n    lines.push('## Content Being Written');\n    lines.push('');\n\n    if (toolKind === 'Write') {\n        const content = input.edits.length > 0 ? input.edits[0].newString : '';\n        lines.push('```typescript');\n        lines.push(content.trimEnd());\n        lines.push('```');\n    } else {\n        for (let i = 0; i < input.edits.length; i += 1) {\n            const edit = input.edits[i];\n            lines.push(`### Edit ${String(i + 1)} of ${String(input.edits.length)}`);\n            lines.push('');\n            lines.push('**old_string:**');\n            lines.push('```typescript');\n            lines.push(edit.oldString.trimEnd());\n            lines.push('```');\n            lines.push('');\n            lines.push('**new_string:**');\n            lines.push('```typescript');\n            lines.push(edit.newString.trimEnd());\n            lines.push('```');\n            lines.push('');\n        }\n    }\n\n    return lines.join('\\n') + '\\n';\n}\n\nfunction rotateLogFile(logPath: string, prevPath: string): void {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n    try {\n        const stat = fs.statSync(logPath);\n        if (stat.size > MAX_LOG_BYTES) {\n            if (fs.existsSync(prevPath)) fs.unlinkSync(prevPath);\n            fs.renameSync(logPath, prevPath);\n        }\n    } catch (err: unknown) {\n        //const error = toError(err);\n        void err;\n    }\n}\n\nfunction rotateOldDays(hooksDir: string, maxAgeDays: number): void {\n    const cutoff = Date.now() - maxAgeDays * 24 * 60 * 60 * 1000;\n    let entries: string[];\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n    try {\n        entries = fs.readdirSync(hooksDir);\n    } catch (err: unknown) {\n        //const error = toError(err);\n        void err;\n        return;\n    }\n\n    for (const entry of entries) {\n        if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(entry)) continue;\n        const dirDate = new Date(entry + 'T00:00:00Z');\n        if (isNaN(dirDate.getTime())) continue;\n        if (dirDate.getTime() < cutoff) {\n            // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n            try {\n                fs.rmSync(path.join(hooksDir, entry), { recursive: true, force: true });\n            } catch (err: unknown) {\n                //const error = toError(err);\n                void err;\n            }\n        }\n    }\n}\n"]}
+{"version":3,"file":"rejection-log.js","sourceRoot":"","sources":["../../../../../../packages/tooling/ai-hook-rules/src/core/rejection-log.ts"],"names":[],"mappings":";;AAkBA,oCA8CC;AAkBD,4CASC;;AA3FD,+CAAyB;AACzB,mDAA6B;AAE7B,0DAAwF;AAGxF,6CAAyC;AAEzC,kGAAkG;AAClG,mGAAmG;AACnG,0DAA0D;AAC1D,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AACtC,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAC7C,MAAM,aAAa,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,gCAAgC;AAClE,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAE1C,SAAgB,YAAY,CACxB,QAAkB,EAClB,KAA0B,EAC1B,MAAqB,EACrB,GAAW;IAEX,8DAA8D;IAC9D,IAAI,CAAC;QACD,4FAA4F;QAC5F,iFAAiF;QACjF,MAAM,IAAI,GAAG,IAAI,6BAAc,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEvC,6FAA6F;QAC7F,yFAAyF;QACzF,MAAM,QAAQ,GAAG,2BAAY,CAAC,SAAS,CAAC,IAAI,EAAE,8BAAe,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,2BAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC5C,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3C,MAAM,YAAY,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,aAAa,OAAO,KAAK,CAAC;QACjD,yFAAyF;QACzF,wFAAwF;QACxF,uDAAuD;QACvD,MAAM,aAAa,GAAG,GAAG,8BAAe,IAAI,OAAO,IAAI,cAAc,EAAE,CAAC;QAExE,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAE9E,MAAM,OAAO,GAAG,IAAI,SAAS,MAAM,QAAQ,KAAK,YAAY,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,aAAa,IAAI,CAAC;QAC7G,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEpC,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,KAAK,GAAG,CAAC;IACb,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB,EAAE,GAAW;IACtD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,GAAG,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,kNAAkN;AAClN,SAAgB,gBAAgB,CAAC,MAAc;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,KAAK,KAAK,IAAI,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CACvB,SAAiB,EACjB,QAAkB,EAClB,YAAoB,EACpB,SAAmB,EACnB,MAAc,EACd,KAA0B;IAE1B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,SAAS,EAAE,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,eAAe,YAAY,EAAE,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,yBAAyB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;SAAM,CAAC;QACJ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,QAAgB;IACpD,8DAA8D;IAC9D,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;YAC5B,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,KAAK,GAAG,CAAC;IACb,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,UAAkB;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC7D,IAAI,OAAiB,CAAC;IACtB,8DAA8D;IAC9D,IAAI,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,6BAA6B;QAC7B,KAAK,GAAG,CAAC;QACT,OAAO;IACX,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACjD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAAE,SAAS;QACvC,IAAI,OAAO,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;YAC7B,8DAA8D;YAC9D,IAAI,CAAC;gBACD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5E,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACpB,6BAA6B;gBAC7B,KAAK,GAAG,CAAC;YACb,CAAC;QACL,CAAC;IACL,CAAC;AACL,CAAC","sourcesContent":["import * as fs from 'fs';\nimport * as path from 'path';\n\nimport { dotWebpieces, RepoRootFinder, HOOKS_STATE_DIR } from '@webpieces/rules-config';\n\nimport type { ToolKind, NormalizedToolInput, BlockedResult } from './types';\nimport { logStream } from './log-stream';\n\n// The rejection log SPLITS across the two state dirs on purpose: the `.log` index goes to `logs/`\n// with every other webpieces log, while the dated `hooks/<YYYY-MM-DD>/writeInfo-*.md` DETAIL files\n// are not logs and stay in `hooks/` (see LOGS_STATE_DIR).\nconst LOG_FILE = 'hook-rejection.log';\nconst LOG_FILE_PREV = 'hook-rejection.1.log';\nconst MAX_LOG_BYTES = 512 * 1024; // 512 KB — rotate when exceeded\nconst MAX_AGE_DAYS = 7;\n\nconst RULE_NAME_RE = /^\\[([^\\]]+)\\] \\(/gm;\n\nexport function logRejection(\n    toolKind: ToolKind,\n    input: NormalizedToolInput,\n    result: BlockedResult,\n    cwd: string,\n): void {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n    try {\n        // `.webpieces/` lives at the repo root, NOT the AI's cwd — resolve it so a hook fired while\n        // the AI is in a subdirectory never scatters a stray `<subdir>/.webpieces` tree.\n        const root = new RepoRootFinder().resolveRepoRoot(cwd);\n        const now = new Date();\n        const timestamp = now.toISOString();\n        const epochMs = String(now.getTime());\n        const dateStr = timestamp.slice(0, 10);\n\n        // LOCAL scope — a rejection is this worktree's event, and a per-worktree log has exactly one\n        // writer, so its appends and its daily detail files cannot collide with another agent's.\n        const hooksDir = dotWebpieces.localFile(root, HOOKS_STATE_DIR);\n        const logsDir = dotWebpieces.logs(root);\n        const dayDir = path.join(hooksDir, dateStr);\n        fs.mkdirSync(dayDir, { recursive: true });\n        fs.mkdirSync(logsDir, { recursive: true });\n\n        const relativePath = computeRelativePath(input.filePath, root);\n        const ruleNames = extractRuleNames(result.report);\n        const detailFileName = `writeInfo-${epochMs}.md`;\n        // Relative to the STATE DIR, not to the log file's own directory: the index now lives in\n        // `logs/` while the detail lives in `hooks/<date>/`, so a bare `<date>/<file>` would no\n        // longer resolve from where the reader found the line.\n        const detailRelPath = `${HOOKS_STATE_DIR}/${dateStr}/${detailFileName}`;\n\n        const detail = buildDetailContent(timestamp, toolKind, relativePath, ruleNames, result.report, input);\n        fs.writeFileSync(path.join(dayDir, detailFileName), detail);\n\n        const logPath = path.join(logsDir, logStream.fileName(LOG_FILE));\n        rotateLogFile(logPath, path.join(logsDir, logStream.fileName(LOG_FILE_PREV)));\n\n        const logLine = `[${timestamp}]\\t${toolKind}\\t${relativePath}\\t[${ruleNames.join(',')}]\\t${detailRelPath}\\n`;\n        fs.appendFileSync(logPath, logLine);\n\n        rotateOldDays(hooksDir, MAX_AGE_DAYS);\n    } catch (err: unknown) {\n        //const error = toError(err);\n        void err;\n    }\n}\n\nfunction computeRelativePath(filePath: string, cwd: string): string {\n    if (filePath.startsWith(cwd)) {\n        const rel = filePath.slice(cwd.length);\n        if (rel.startsWith('/')) return rel.slice(1);\n        return rel;\n    }\n    return filePath;\n}\n\n/**\n * The rule names a block report cites — every `[<rule-name>] (` header it opens with. Exported because\n * two audit streams need the same answer from the same regex: this file's rejection index, and the\n * `rule=` field guard-invocations.log now carries (see InvocationLog.finish). Two scrapers would be\n * two answers to one question.\n */\n// webpieces-disable no-function-outside-class -- pure regex scraper beside this module's other module-scope helpers; exported so the invocation log and the rejection index scrape rule names with the SAME code.\nexport function extractRuleNames(report: string): string[] {\n    const names: string[] = [];\n    let match = RULE_NAME_RE.exec(report);\n    while (match !== null) {\n        names.push(match[1]);\n        match = RULE_NAME_RE.exec(report);\n    }\n    RULE_NAME_RE.lastIndex = 0;\n    return names;\n}\n\nfunction buildDetailContent(\n    timestamp: string,\n    toolKind: ToolKind,\n    relativePath: string,\n    ruleNames: string[],\n    report: string,\n    input: NormalizedToolInput,\n): string {\n    const lines: string[] = [];\n    lines.push('# Hook Rejection Detail');\n    lines.push('');\n    lines.push(`- **Timestamp:** ${timestamp}`);\n    lines.push(`- **Tool:** ${toolKind}`);\n    lines.push(`- **File:** ${relativePath}`);\n    lines.push(`- **Rules violated:** ${ruleNames.join(', ')}`);\n    lines.push('');\n    lines.push('## Report');\n    lines.push('');\n    lines.push('```');\n    lines.push(report.trimEnd());\n    lines.push('```');\n    lines.push('');\n    lines.push('## Content Being Written');\n    lines.push('');\n\n    if (toolKind === 'Write') {\n        const content = input.edits.length > 0 ? input.edits[0].newString : '';\n        lines.push('```typescript');\n        lines.push(content.trimEnd());\n        lines.push('```');\n    } else {\n        for (let i = 0; i < input.edits.length; i += 1) {\n            const edit = input.edits[i];\n            lines.push(`### Edit ${String(i + 1)} of ${String(input.edits.length)}`);\n            lines.push('');\n            lines.push('**old_string:**');\n            lines.push('```typescript');\n            lines.push(edit.oldString.trimEnd());\n            lines.push('```');\n            lines.push('');\n            lines.push('**new_string:**');\n            lines.push('```typescript');\n            lines.push(edit.newString.trimEnd());\n            lines.push('```');\n            lines.push('');\n        }\n    }\n\n    return lines.join('\\n') + '\\n';\n}\n\nfunction rotateLogFile(logPath: string, prevPath: string): void {\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n    try {\n        const stat = fs.statSync(logPath);\n        if (stat.size > MAX_LOG_BYTES) {\n            if (fs.existsSync(prevPath)) fs.unlinkSync(prevPath);\n            fs.renameSync(logPath, prevPath);\n        }\n    } catch (err: unknown) {\n        //const error = toError(err);\n        void err;\n    }\n}\n\nfunction rotateOldDays(hooksDir: string, maxAgeDays: number): void {\n    const cutoff = Date.now() - maxAgeDays * 24 * 60 * 60 * 1000;\n    let entries: string[];\n    // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n    try {\n        entries = fs.readdirSync(hooksDir);\n    } catch (err: unknown) {\n        //const error = toError(err);\n        void err;\n        return;\n    }\n\n    for (const entry of entries) {\n        if (!/^\\d{4}-\\d{2}-\\d{2}$/.test(entry)) continue;\n        const dirDate = new Date(entry + 'T00:00:00Z');\n        if (isNaN(dirDate.getTime())) continue;\n        if (dirDate.getTime() < cutoff) {\n            // eslint-disable-next-line @webpieces/no-unmanaged-exceptions\n            try {\n                fs.rmSync(path.join(hooksDir, entry), { recursive: true, force: true });\n            } catch (err: unknown) {\n                //const error = toError(err);\n                void err;\n            }\n        }\n    }\n}\n"]}

package/templates/ai-hook.sh

@@ -7,13 +7,27 @@
 # the hook has a stable entry point even when node_modules is absent. Safe to delete along with the
 # matching .claude/settings.json entries if you remove @webpieces/ai-hook-rules.
 #
-# Usage (wired into .claude/settings.json): sh "$CLAUDE_PROJECT_DIR/.claude/webpieces/ai-hook.sh" <bin-name>
+# Usage (wired into .claude/settings.json, RELATIVE so each git tree runs its own copy):
+#   sh ".claude/webpieces/ai-hook.sh" <bin-name>
 BIN_NAME="$1"
 shift
-# Resolve the bin relative to THIS script (…/<root>/.claude/webpieces/ai-hook.sh → <root>), not the
+# Resolve the tree relative to THIS script (…/<root>/.claude/webpieces/ai-hook.sh → <root>), not the
 # caller's cwd — the hook can be invoked from any directory (a subdir, or a nested clone).
 ROOT="$(CDPATH= cd -- "$(dirname -- "$0")/../.." && pwd)"
+# The BIN is resolved by walking UP from ROOT (as Node does), and BIN_ROOT records which tree supplied
+# it — the version-drift guard below compares THIS tree's pin against THAT tree's installed version.
+BIN_ROOT="$ROOT"
 BIN="$ROOT/node_modules/.bin/$BIN_NAME"
+WP_WALK="$ROOT"
+while [ ! -x "$WP_WALK/node_modules/.bin/$BIN_NAME" ]; do
+  WP_UP="$(dirname -- "$WP_WALK")"
+  [ "$WP_UP" != "$WP_WALK" ] || break
+  WP_WALK="$WP_UP"
+done
+if [ -x "$WP_WALK/node_modules/.bin/$BIN_NAME" ]; then
+  BIN_ROOT="$WP_WALK"
+  BIN="$WP_WALK/node_modules/.bin/$BIN_NAME"
+fi
 # --- webpieces version-drift guard (pure sh — runs even when the installed guard bin is stale) -----
 # The committed shim is version-agnostic, so it keeps working right after a git pull, BEFORE the
 # matching pnpm install. That is exactly when node_modules can be STALE: an OLDER @webpieces than
@@ -77,7 +91,7 @@ if [ -f "$ROOT/package.json" ]; then
     esac
     # The release the rest of this repo is on — what fault U's cure should pin to.
     [ -n "$WP_PIN" ] || WP_PIN="$WP_DECL"
-    WP_MANIFEST="$ROOT/node_modules/@webpieces/$WP_NAME/package.json"
+    WP_MANIFEST="$BIN_ROOT/node_modules/@webpieces/$WP_NAME/package.json"
     [ -f "$WP_MANIFEST" ] || continue
     WP_INST="$(sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' "$WP_MANIFEST" | head -n1)"
     [ -n "$WP_INST" ] || continue
@@ -91,16 +105,31 @@ if [ -f "$ROOT/package.json" ]; then
 $(sed -n 's/.*"@webpieces\/\([A-Za-z0-9._-]*\)"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1 \2/p' "$ROOT/package.json")
 WPEOF
 fi
+# THE CURE FOR A BORROWED node_modules RUNS IN THIS TREE, NOT WHEREVER THE BIN CAME FROM. A bare
+# 'pnpm install' typed while the shell sits in the primary clone installs into the primary, changes
+# nothing in the worktree being judged, and re-fires the identical fault — the four-cure straddle
+# recorded above committedShimStale(). When the bin was inherited, prescribe the cd and say why.
+WP_INSTALL_CMD="pnpm install"
+WP_BORROW_NOTE=""
+if [ "$BIN_ROOT" != "$ROOT" ]; then
+  WP_INSTALL_CMD="cd $ROOT && pnpm install"
+  WP_BORROW_NOTE=" NOTE: this tree ($ROOT) has NO node_modules of its own, so the guard binary was inherited from $BIN_ROOT by walking up - which is only correct while the two agree on the version. Run the install HERE, in this tree, so it gets its own node_modules at its own pin."
+fi
 # Read the tool payload ONCE, up front. The shim no longer exec's the bin (see RUN_BIN_SH), so it must
 # forward stdin to the bin itself — and it needs the payload again on the fail-closed path below.
 PAYLOAD="$(cat)"
 CMD="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"command"[[:space:]]*:[[:space:]]*"\([^"\\]*\)".*/\1/p')"
+CMD_LOG="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"command"[[:space:]]*:[[:space:]]*"\([^"\\]*\).*/\1/p')"
+[ -n "$CMD_LOG" ] || CMD_LOG="$CMD"
 TOOL="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"tool_name"[[:space:]]*:[[:space:]]*"\([^"\\]*\)".*/\1/p')"
+WP_SID="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"session_id"[[:space:]]*:[[:space:]]*"\([^"\\]*\)".*/\1/p')"
+WP_AID="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"agent_id"[[:space:]]*:[[:space:]]*"\([^"\\]*\)".*/\1/p')"
 FILE="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"file_path"[[:space:]]*:[[:space:]]*"\([^"\\]*\)".*/\1/p')"
 WP_CWD="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"cwd"[[:space:]]*:[[:space:]]*"\([^"\\]*\)".*/\1/p')"
 [ -n "$WP_CWD" ] || WP_CWD="$ROOT"    # no cwd in the payload (older client, or a hand-run) → the shim's own tree
 # Best-effort AUDIT TRAIL of what L0 did with this call — every call, not just the broken ones. One
-# tab-separated line per invocation into this TREE's own logs/ai-hook-shim.log (gitignored), so the
+# tab-separated line per invocation into this TREE's own
+# logs/<session>-<agent|coordinator>-<binName>-ai-hook-shim.log (gitignored), so the
 # observed behaviour can be diffed against the matrix in guards/L0-tooling.md. NEVER breaks or blocks the
 # hook: every write is swallowed, and nothing ever goes to stdout (stdout is the PreToolUse decision
 # channel — a stray byte there would corrupt allow/deny).
@@ -133,17 +162,29 @@ wp_resolve_log_dir() {
     WP_LOG_DIR="$_wp_primary/.webpieces/worktrees/$WP_TREE/logs"
   fi
 }
+wp_clean() {                 # one path segment from an UNTRUSTED payload id — twin of LogStream's segment()
+  printf '%s' "$1" | tr -c 'A-Za-z0-9._-' '_' | sed -e 's/\.\{2,\}/_/g' -e 's/^\.\{1,\}/_/' | cut -c1-64
+}
 wp_log() {                   # $1 = L0 fault code (D|X|K|-), $2 = verdict label
   {
     [ -n "$WP_LOG_DIR" ] || wp_resolve_log_dir
     mkdir -p "$WP_LOG_DIR" 2>/dev/null || return 0
-    _wp_f="$WP_LOG_DIR/ai-hook-shim.log"
+    # Same flat scheme as LogStream.fileName(): <session>-<agent|coordinator>-<hook>-<base>. $BIN_NAME
+    # IS the hook discriminator here (wp-ai-guards-hook vs wp-ai-rules-hook), and Claude Code runs those
+    # two IN PARALLEL on every file edit — without this prefix they append to ONE file and tear above
+    # PIPE_BUF. An empty session id renders 'unknown' — this has no bare-name branch, matching
+    # LogStream.fileName(), which has none either.
+    # ALWAYS prefixed - a missing session_id renders as 'unknown', never as the shared bare name.
+    # Gating this on a non-empty id would drop both parallel hooks back onto one file, which is the
+    # torn-append case this exists to remove. Twin of LogStream.fileName(), which has no bare branch.
+    _wp_pfx="$(wp_clean "${WP_SID:-unknown}")-$(wp_clean "${WP_AID:-coordinator}")-$BIN_NAME-"
+    _wp_f="$WP_LOG_DIR/${_wp_pfx}ai-hook-shim.log"
     # Rotate at the SAME 512 KB into the SAME .1.log sibling as every JS-side webpieces log. This runs
     # on every tool call, so it is one wc and no more; a size we cannot read counts as 0 (no rotation).
     _wp_sz="$(wc -c < "$_wp_f" 2>/dev/null | tr -d ' ')"
     case "$_wp_sz" in ''|*[!0-9]*) _wp_sz=0 ;; esac
-    [ "$_wp_sz" -gt 524288 ] && mv -f "$_wp_f" "$WP_LOG_DIR/ai-hook-shim.1.log" 2>/dev/null
-    printf '%s\t%s\t%s\t%s\t%s\t%s\t%s\n' "$(date '+%Y-%m-%dT%H:%M:%S%z' 2>/dev/null)" "$BIN_NAME" "$TOOL" "tree=$WP_TREE" "fault=$1" "$2" "$CMD" >> "$_wp_f"
+    [ "$_wp_sz" -gt 524288 ] && mv -f "$_wp_f" "$WP_LOG_DIR/${_wp_pfx}ai-hook-shim.1.log" 2>/dev/null
+    printf '%s\t%s\t%s\t%s\t%s\t%s\t%s\n' "$(date '+%Y-%m-%dT%H:%M:%S%z' 2>/dev/null)" "$BIN_NAME" "$TOOL" "tree=$WP_TREE" "fault=$1" "$2" "$CMD_LOG" >> "$_wp_f"
   } 2>/dev/null || true
 }
 BROKEN_BIN=""
@@ -212,7 +253,7 @@ if [ -n "$BROKEN_BIN" ]; then
   # Report (do NOT auto-clean) the orphaned pnpm staging dirs — a package pnpm was mid-way through
   # writing is left behind as <name>_<pid>_<hash>. Their presence is the fingerprint of an install that
   # was killed, which is what corrupts node_modules in the first place. Best-effort; never fatal.
-  STAGING_N="$(ls "$ROOT/node_modules" 2>/dev/null | grep -Ec '_[0-9a-f]+_[0-9a-f]+$' || true)"
+  STAGING_N="$(ls "$BIN_ROOT/node_modules" 2>/dev/null | grep -Ec '_[0-9a-f]+_[0-9a-f]+$' || true)"
   STAGING_NOTE=""
   if [ "${STAGING_N:-0}" -gt 0 ] 2>/dev/null; then
     STAGING_NOTE=" Also found $STAGING_N orphaned pnpm staging dirs (name_pid_hash) under node_modules - the fingerprint of an install that was killed mid-write."   # only when N > 0
@@ -252,13 +293,13 @@ elif [ -n "$DRIFT_PKG" ]; then
     if (ip == "" && dp != "") print "newer"
   }' 2>/dev/null)"
   if [ "$DRIFT_DIR" = older ]; then
-    REASON="❌ webpieces version drift: package.json pins $DRIFT_PKG@$DRIFT_DECLARED but node_modules has $DRIFT_INSTALLED - node_modules is OLDER, so the pin is what you want. Every other call is blocked until they agree. Run EXACTLY: 'pnpm install'. Run it EXACTLY as written - the allowlist matches the whole command, so appending anything (even && git status) makes it a different command and it is rejected; that is not the guard blocking its own cure. Only these may be added: a leading cd <dir> && (single-quote a path containing spaces), a trailing 2>&1, and | tail -N."
+    REASON="❌ webpieces version drift: package.json pins $DRIFT_PKG@$DRIFT_DECLARED but node_modules has $DRIFT_INSTALLED - node_modules is OLDER, so the pin is what you want. Every other call is blocked until they agree. Run EXACTLY: '$WP_INSTALL_CMD'.${WP_BORROW_NOTE} Run it EXACTLY as written - the allowlist matches the whole command, so appending anything (even && git status) makes it a different command and it is rejected; that is not the guard blocking its own cure. Only these may be added: a leading cd <dir> && (single-quote a path containing spaces), a trailing 2>&1, and | tail -N."
   else
     # NEWER, or undecidable — the same three choices apply either way, so the only thing the ambiguous
     # case changes is the claim about which side is stale.
     DRIFT_NOTE="node_modules is NEWER, so the PIN is the stale side and a bare 'pnpm install' DOWNGRADES you to $DRIFT_DECLARED"
     [ "$DRIFT_DIR" = newer ] || DRIFT_NOTE="these two versions could not be ordered automatically - compare them yourself: if node_modules is the NEWER side then the PIN is the stale side and a bare 'pnpm install' DOWNGRADES you to $DRIFT_DECLARED"
-    REASON="❌ webpieces version drift: package.json pins $DRIFT_PKG@$DRIFT_DECLARED but node_modules has $DRIFT_INSTALLED - $DRIFT_NOTE. That may be exactly what you want. Every other call is blocked until they agree. Pick one: - move forward to what origin pins: run 'git pull origin main', then 'pnpm install'. - stay on this code deliberately: run 'pnpm install' (the downgrade is the point). - on a feature branch: run 'pnpm install' (aligns to YOUR branch pin - usually right). Run it EXACTLY as written - the allowlist matches the whole command, so appending anything (even && git status) makes it a different command and it is rejected; that is not the guard blocking its own cure. Only these may be added: a leading cd <dir> && (single-quote a path containing spaces), a trailing 2>&1, and | tail -N."
+    REASON="❌ webpieces version drift: package.json pins $DRIFT_PKG@$DRIFT_DECLARED but node_modules has $DRIFT_INSTALLED - $DRIFT_NOTE. That may be exactly what you want. Every other call is blocked until they agree. Pick one: - move forward to what origin pins: run 'git pull origin main', then 'pnpm install'. - stay on this code deliberately: run 'pnpm install' (the downgrade is the point). - on a feature branch: run 'pnpm install' (aligns to YOUR branch pin - usually right).${WP_BORROW_NOTE} Run it EXACTLY as written - the allowlist matches the whole command, so appending anything (even && git status) makes it a different command and it is rejected; that is not the guard blocking its own cure. Only these may be added: a leading cd <dir> && (single-quote a path containing spaces), a trailing 2>&1, and | tail -N."
   fi
 else
   # A LINKED WORKTREE is the overwhelmingly common way to land here with a perfectly healthy repo:

package/templates/guarantee-root.sh

@@ -0,0 +1,110 @@
+#!/bin/sh
+# webpieces L-1 hook — GUARANTEE ROOT. Generated by renderGuaranteeRoot(); do not hand-edit.
+#
+# Registered ABSOLUTE in .claude/settings.json, matcher "Bash":
+#   sh "$CLAUDE_PROJECT_DIR/.claude/webpieces/guarantee-root.sh"
+#
+# It exists because the GUARD hooks beside it are registered RELATIVE, so that each git tree is
+# governed by its own @webpieces release. A relative hook that cannot resolve does not block — the
+# harness logs it and lets the tool call proceed UNGUARDED. This file makes that unreachable by
+# refusing any cd that would park the shell where the relative hooks cannot launch.
+#
+# Three tests, no config, no binary, no network:
+#   1. destination holds .git                     -> ALLOW (tree root, worktree, or foreign clone)
+#   2. destination is outside $CLAUDE_PROJECT_DIR -> ALLOW (the harness resets the cwd next call)
+#   3. otherwise                                  -> DENY  (sticky AND unguarded)
+#
+# A denied cd never runs, so the shell never leaves the root and there is nothing to recover from.
+
+PAYLOAD="$(cat)"
+CWD="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"cwd"[[:space:]]*:[[:space:]]*"\([^"\\]*\)".*/\1/p')"
+TOOL="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"tool_name"[[:space:]]*:[[:space:]]*"\([^"\\]*\)".*/\1/p')"
+
+# The command PREFIX, not the whole command — note there is no closing " in this pattern.
+# WHY: a JSON payload escapes an embedded double quote as \", and `[^"\\]*` stops dead at that
+# backslash, so the usual "capture between quotes" form yields the EMPTY STRING for any command
+# containing a quote at all (measured: `cd /a/b && echo "hi"` -> ''). An empty CMD here would mean
+# "no cd found" -> ALLOW, i.e. this guard would fail OPEN for every quoted command — the exact hazard
+# it exists to close. Capturing only up to the first quote/backslash is enough, because everything
+# L-1 needs (is the FIRST word a cd, and what is its target) lives in the prefix; a quote can only
+# appear later, in the part we do not need.
+CMD="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"command"[[:space:]]*:[[:space:]]*"\([^"\\]*\).*/\1/p')"
+
+# Only Bash can move the shell. Anything else, and any payload we cannot read, is not ours.
+[ "$TOOL" = "Bash" ] || exit 0
+[ -n "$CMD" ] || exit 0
+
+# --- cd audit (best-effort; never blocks, never touches stdout) --------------------------------
+SID="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"session_id"[[:space:]]*:[[:space:]]*"\([^"\\]*\)".*/\1/p')"
+AID="$(printf '%s' "$PAYLOAD" | sed -n 's/.*"agent_id"[[:space:]]*:[[:space:]]*"\([^"\\]*\)".*/\1/p')"
+# Untrusted payload values are used as path segments, so anything outside [A-Za-z0-9._-] collapses to _
+# and a leading dot is neutralised — ../../etc can never escape the logs directory.
+clean() { printf '%s' "$1" | tr -c 'A-Za-z0-9._-' '_' \
+  | sed -e 's/\.\{2,\}/_/g' -e 's/^\.\{1,\}/_/' | cut -c1-64; }
+wp_cd_log() {              # $1 = verdict, $2 = destination (may be empty)
+  {
+    [ -n "$CLAUDE_PROJECT_DIR" ] || return 0
+    _d="$CLAUDE_PROJECT_DIR/.webpieces/logs"
+    mkdir -p "$_d" 2>/dev/null || return 0
+    # Flat name, same scheme as LogStream.fileName(): <session>-<agent|coordinator>-guarantee-root-<base>
+    # ALWAYS prefixed; a missing session_id renders as 'unknown'. No bare-name branch anywhere.
+    _p="$(clean "${SID:-unknown}")-$(clean "${AID:-coordinator}")-guarantee-root-"
+    _f="$_d/${_p}cd-audit.log"
+    _sz="$(wc -c < "$_f" 2>/dev/null | tr -d ' ')"
+    case "$_sz" in ''|*[!0-9]*) _sz=0 ;; esac
+    [ "$_sz" -gt 524288 ] && mv -f "$_f" "$_d/${_p}cd-audit.1.log" 2>/dev/null
+    printf '%s\t%s\tdest=%s\tcwd=%s\t%s\n' \
+      "$(date '+%Y-%m-%dT%H:%M:%S%z' 2>/dev/null)" "$1" "$2" "$CWD" "$CMD" >> "$_f"
+  } 2>/dev/null || true
+}
+
+
+# Does the command OPEN with cd/pushd? Only a LEADING cd counts — the same rule effective-tree.ts
+# enforces, because a later cd cannot retroactively move a command that has already run.
+FIRST="$(printf '%s' "$CMD" | sed -n 's/^[[:space:]]*\([^[:space:]]\{1,\}\).*/\1/p')"
+case "$FIRST" in
+  cd|pushd) ;;
+  *) exit 0 ;;                 # no leading cd: nothing to audit, nothing to judge
+esac
+
+# The target: a single-quoted path first (that is how a path with spaces is spelled), else a bare word.
+DEST="$(printf '%s' "$CMD" | sed -n "s/^[[:space:]]*[a-z]\{2,5\}[[:space:]]\{1,\}'\([^']*\)'.*/\1/p")"
+[ -n "$DEST" ] || DEST="$(printf '%s' "$CMD" | sed -n 's/^[[:space:]]*[a-z]\{2,5\}[[:space:]]\{1,\}\([^[:space:];&|]\{1,\}\).*/\1/p')"
+
+REASON=""
+if [ -z "$DEST" ] || [ "$DEST" = "-" ]; then
+  REASON='A bare cd (or cd -) moves the shell somewhere the guards cannot predict - a bare cd goes to your home directory, where the webpieces hooks do not exist and every later tool call would run UNGUARDED. Name the directory: cd /abs/path && <your command>.'
+else
+  # A target the guard cannot expand is a target it cannot judge. sh has no regex here, so test the
+  # four unexpandable shapes directly.
+  case "$DEST" in
+    *'$'*|*'`'*|'~'|'~/'*) REASON='This cd target is not a literal path, so the guards cannot tell where the shell will end up. Use a literal absolute path: cd /abs/path && <your command>. A $VAR, ~, $(...) or backtick is never expanded by the guard.' ;;
+  esac
+fi
+
+if [ -z "$REASON" ]; then
+  # Resolve against the shell's real cwd. A destination that does not exist needs no verdict: the cd
+  # itself will fail and the shell stays exactly where it is.
+  ABS="$(CDPATH= cd -- "${CWD:-.}" 2>/dev/null && CDPATH= cd -- "$DEST" 2>/dev/null && pwd)"
+  if [ -z "$ABS" ]; then wp_cd_log ALLOW-NO-SUCH-DIR "$DEST"; exit 0; fi
+
+  # TEST 1 — a git tree of any kind. A worktree's .git is a FILE, a clone's is a DIR; -e covers both.
+  if [ -e "$ABS/.git" ]; then wp_cd_log ALLOW-GIT-TREE "$ABS"; exit 0; fi
+
+  # TEST 2 — outside the governed project. The harness resets the cwd before the next call, so at most
+  # one command runs there, on paths we do not govern anyway.
+  case "$ABS/" in
+    "$CLAUDE_PROJECT_DIR"/*) ;;
+    *) wp_cd_log ALLOW-OUTSIDE "$ABS"; exit 0 ;;
+  esac
+
+  # TEST 3 — inside a governed tree with no shim beside it: sticky AND unguarded.
+  REASON="$(printf 'The webpieces guard hooks are registered RELATIVE (.claude/webpieces/ai-hook.sh) so that each git tree is governed by its own release. %s has no .claude/webpieces/ai-hook.sh, so a shell parked there launches NO hooks at all and every later tool call runs UNGUARDED - and a cd that stays inside the project PERSISTS to your next call. Run it from the tree root instead: cd %s && <your command>. Tools that take their own directory (git -C, pnpm -C, pnpm --filter, nx) need no cd at all.' "$ABS" "$CLAUDE_PROJECT_DIR")"
+fi
+
+wp_cd_log DENY "${ABS:-$DEST}"
+
+BS='\'                      # one literal backslash, so the \u001b escape never sits in this source
+ESC="${BS}u001b"           # the 6 chars: backslash u 0 0 1 b — Claude Code parses \u001b -> ESC
+printf '{"systemMessage":"%s🛑 %s%s","hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"%s"}}\n' "${ESC}[31;1m" "$REASON" "${ESC}[0m" "$REASON"
+exit 0                       # the decision is carried by permissionDecision deny, not the exit code