avorelo 0.1.0 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (260) hide show
  1. package/LICENSE +23 -16
  2. package/README.md +91 -51
  3. package/bin/avorelo.mjs +7 -0
  4. package/dist/avorelo.mjs +14337 -0
  5. package/package.json +106 -120
  6. package/bin/avorelo +0 -9
  7. package/scripts/README.md +0 -40
  8. package/scripts/cco-dashboard.js +0 -252
  9. package/scripts/cco-status.js +0 -430
  10. package/scripts/lib/activation/account-state.js +0 -37
  11. package/scripts/lib/activation/activation-runner.js +0 -546
  12. package/scripts/lib/activation/activation-self-healing.js +0 -480
  13. package/scripts/lib/activation/activation-state.js +0 -83
  14. package/scripts/lib/activation/activation-summary.js +0 -191
  15. package/scripts/lib/activation/adapters/claude-code.js +0 -77
  16. package/scripts/lib/activation/adapters/codex-cli.js +0 -52
  17. package/scripts/lib/activation/adapters/cursor.js +0 -37
  18. package/scripts/lib/activation/adapters/github-agent.js +0 -39
  19. package/scripts/lib/activation/adapters/terminal.js +0 -42
  20. package/scripts/lib/activation/adapters/vscode.js +0 -39
  21. package/scripts/lib/activation/adapters/windsurf.js +0 -37
  22. package/scripts/lib/activation/ai-surface-detector.js +0 -151
  23. package/scripts/lib/activation/connect-account.js +0 -145
  24. package/scripts/lib/activation/detect-environment.js +0 -75
  25. package/scripts/lib/activation/detect-hosts.js +0 -62
  26. package/scripts/lib/activation/format-activation-output.js +0 -109
  27. package/scripts/lib/activation/next-action.js +0 -43
  28. package/scripts/lib/activation/repair-engine.js +0 -219
  29. package/scripts/lib/activation-distribution-readiness.js +0 -507
  30. package/scripts/lib/adapter-conformance.js +0 -176
  31. package/scripts/lib/adapter-readiness.js +0 -417
  32. package/scripts/lib/adapter-safety-boundaries.js +0 -335
  33. package/scripts/lib/adapter-technical-readiness-gate.js +0 -205
  34. package/scripts/lib/agent-access-governance.js +0 -455
  35. package/scripts/lib/agent-enforcement.js +0 -765
  36. package/scripts/lib/agent-policy-profile.js +0 -210
  37. package/scripts/lib/agent-security/action-evaluator.js +0 -507
  38. package/scripts/lib/agent-security/adapter-registry.js +0 -98
  39. package/scripts/lib/agent-security/auto-policy.js +0 -139
  40. package/scripts/lib/agent-security/bounded-scan.js +0 -93
  41. package/scripts/lib/agent-security/enforcement-adapter.js +0 -174
  42. package/scripts/lib/agent-security/enforcement-engine.js +0 -1129
  43. package/scripts/lib/agent-security/file-write-adapter.js +0 -183
  44. package/scripts/lib/agent-security/file-write-rules.js +0 -178
  45. package/scripts/lib/agent-security/index.js +0 -3342
  46. package/scripts/lib/agent-security/instruction-risk.js +0 -181
  47. package/scripts/lib/agent-security/mcp-action-adapter.js +0 -185
  48. package/scripts/lib/agent-security/mcp-action-rules.js +0 -184
  49. package/scripts/lib/agent-security/package-action-adapter.js +0 -175
  50. package/scripts/lib/agent-security/package-action-rules.js +0 -233
  51. package/scripts/lib/agent-security/performance.js +0 -148
  52. package/scripts/lib/agent-security/permission-minimizer.js +0 -403
  53. package/scripts/lib/agent-security/scan-cache.js +0 -74
  54. package/scripts/lib/agent-security/source-trust.js +0 -146
  55. package/scripts/lib/ai-install-prompt.js +0 -288
  56. package/scripts/lib/ai-workspace-hygiene.js +0 -1499
  57. package/scripts/lib/alpha-activation.js +0 -520
  58. package/scripts/lib/alpha-feedback.js +0 -263
  59. package/scripts/lib/alpha-readiness-gate.js +0 -332
  60. package/scripts/lib/anti-gaming.js +0 -169
  61. package/scripts/lib/artifact-health.js +0 -431
  62. package/scripts/lib/attribution.js +0 -180
  63. package/scripts/lib/audit.js +0 -289
  64. package/scripts/lib/avorelo-skill-registry.js +0 -810
  65. package/scripts/lib/batch-jobs.js +0 -71
  66. package/scripts/lib/brain-pack.js +0 -578
  67. package/scripts/lib/brand-boundary.js +0 -424
  68. package/scripts/lib/brand.js +0 -74
  69. package/scripts/lib/browser-capability.js +0 -1048
  70. package/scripts/lib/browser-proof-preflight.js +0 -321
  71. package/scripts/lib/cache-readiness.js +0 -187
  72. package/scripts/lib/canonical-reentry.js +0 -162
  73. package/scripts/lib/capability-packs.js +0 -314
  74. package/scripts/lib/capability-recommender.js +0 -512
  75. package/scripts/lib/capability-registry.js +0 -1059
  76. package/scripts/lib/carry-forward-surfacing.js +0 -194
  77. package/scripts/lib/ccusage-adapter.js +0 -188
  78. package/scripts/lib/company-loop.js +0 -1149
  79. package/scripts/lib/config.js +0 -637
  80. package/scripts/lib/context-acquisition-plan.js +0 -287
  81. package/scripts/lib/context-budget-guard.js +0 -170
  82. package/scripts/lib/context-budget-scanner.js +0 -257
  83. package/scripts/lib/context-optimizer.js +0 -715
  84. package/scripts/lib/context-reduction-plan.js +0 -178
  85. package/scripts/lib/context-safety.js +0 -88
  86. package/scripts/lib/context-savings-engine.js +0 -158
  87. package/scripts/lib/cost-evidence.js +0 -254
  88. package/scripts/lib/cross-host-install-plan.js +0 -308
  89. package/scripts/lib/cross-host-install-readiness.js +0 -237
  90. package/scripts/lib/cross-host-value-flow.js +0 -268
  91. package/scripts/lib/dashboard.js +0 -900
  92. package/scripts/lib/design-partner-feedback.js +0 -346
  93. package/scripts/lib/entitlements.js +0 -100
  94. package/scripts/lib/execution-packet.js +0 -559
  95. package/scripts/lib/experimentation-events.js +0 -547
  96. package/scripts/lib/external-capability-compliance.js +0 -107
  97. package/scripts/lib/external-user-simulation.js +0 -166
  98. package/scripts/lib/failure-recovery-readiness.js +0 -81
  99. package/scripts/lib/failure-recovery.js +0 -419
  100. package/scripts/lib/feedback-intelligence.js +0 -537
  101. package/scripts/lib/feedback-signals.js +0 -205
  102. package/scripts/lib/file-integrity.js +0 -68
  103. package/scripts/lib/fsx.js +0 -127
  104. package/scripts/lib/full-readiness-gate.js +0 -451
  105. package/scripts/lib/guidance-builder.js +0 -174
  106. package/scripts/lib/hook-apply.js +0 -1019
  107. package/scripts/lib/hook-baseline.js +0 -310
  108. package/scripts/lib/hook-config-preview.js +0 -275
  109. package/scripts/lib/hook-contracts.js +0 -290
  110. package/scripts/lib/hook-safety-boundary-readiness.js +0 -80
  111. package/scripts/lib/host-capability-matrix.js +0 -351
  112. package/scripts/lib/host-support-context.js +0 -254
  113. package/scripts/lib/http-hook-action.js +0 -538
  114. package/scripts/lib/install-ai-readiness.js +0 -84
  115. package/scripts/lib/install-intake-risk.js +0 -1037
  116. package/scripts/lib/install-journey-intelligence.js +0 -329
  117. package/scripts/lib/intervention-guidance.js +0 -57
  118. package/scripts/lib/known-limitations.js +0 -115
  119. package/scripts/lib/l8-path-truth.js +0 -146
  120. package/scripts/lib/launch-hardening-gate.js +0 -436
  121. package/scripts/lib/launch-readiness.js +0 -628
  122. package/scripts/lib/learning-memory.js +0 -686
  123. package/scripts/lib/lifecycle-hooks.js +0 -802
  124. package/scripts/lib/local-package-smoke.js +0 -423
  125. package/scripts/lib/local-pricing.js +0 -299
  126. package/scripts/lib/mcp-enforcement.js +0 -311
  127. package/scripts/lib/mcp-least-privilege-policy.js +0 -303
  128. package/scripts/lib/mcp-tool-inventory.js +0 -388
  129. package/scripts/lib/mcp-tool-risk.js +0 -0
  130. package/scripts/lib/memory.js +0 -335
  131. package/scripts/lib/metrics.js +0 -699
  132. package/scripts/lib/micro-proof.js +0 -133
  133. package/scripts/lib/next-run-context.js +0 -436
  134. package/scripts/lib/operating-value.js +0 -1648
  135. package/scripts/lib/optimization-v3.js +0 -122
  136. package/scripts/lib/orchestration/adapters/_shared.js +0 -49
  137. package/scripts/lib/orchestration/adapters/aider.js +0 -18
  138. package/scripts/lib/orchestration/adapters/claude-code.js +0 -35
  139. package/scripts/lib/orchestration/adapters/codex.js +0 -35
  140. package/scripts/lib/orchestration/adapters/gemini-cli.js +0 -18
  141. package/scripts/lib/orchestration/adapters/git.js +0 -25
  142. package/scripts/lib/orchestration/adapters/index.js +0 -31
  143. package/scripts/lib/orchestration/adapters/lm-studio.js +0 -18
  144. package/scripts/lib/orchestration/adapters/ollama.js +0 -18
  145. package/scripts/lib/orchestration/adapters/opencode.js +0 -18
  146. package/scripts/lib/orchestration/adapters/openrouter.js +0 -18
  147. package/scripts/lib/orchestration/adapters/test-runner.js +0 -25
  148. package/scripts/lib/orchestration/cli.js +0 -438
  149. package/scripts/lib/orchestration/execution-manager.js +0 -279
  150. package/scripts/lib/orchestration/handoff.js +0 -314
  151. package/scripts/lib/orchestration/index.js +0 -456
  152. package/scripts/lib/orchestration/inventory.js +0 -47
  153. package/scripts/lib/orchestration/model-discovery.js +0 -498
  154. package/scripts/lib/orchestration/model-profiler.js +0 -170
  155. package/scripts/lib/orchestration/model-profiles.js +0 -252
  156. package/scripts/lib/orchestration/model-refresh-policy.js +0 -72
  157. package/scripts/lib/orchestration/proof-writer.js +0 -349
  158. package/scripts/lib/orchestration/provider-discovery/aider.js +0 -49
  159. package/scripts/lib/orchestration/provider-discovery/claude-code.js +0 -56
  160. package/scripts/lib/orchestration/provider-discovery/codex.js +0 -49
  161. package/scripts/lib/orchestration/provider-discovery/common.js +0 -186
  162. package/scripts/lib/orchestration/provider-discovery/gemini.js +0 -106
  163. package/scripts/lib/orchestration/provider-discovery/lm-studio.js +0 -118
  164. package/scripts/lib/orchestration/provider-discovery/models-dev.js +0 -12
  165. package/scripts/lib/orchestration/provider-discovery/ollama.js +0 -100
  166. package/scripts/lib/orchestration/provider-discovery/opencode.js +0 -47
  167. package/scripts/lib/orchestration/provider-discovery/openrouter.js +0 -44
  168. package/scripts/lib/orchestration/risk-classifier.js +0 -130
  169. package/scripts/lib/orchestration/routing-policy.js +0 -486
  170. package/scripts/lib/orchestration/settings.js +0 -112
  171. package/scripts/lib/orchestration/state.js +0 -165
  172. package/scripts/lib/orchestration/verification-manager.js +0 -138
  173. package/scripts/lib/output-profiles.js +0 -146
  174. package/scripts/lib/package-content-audit.js +0 -368
  175. package/scripts/lib/package-runtime.js +0 -278
  176. package/scripts/lib/plan-surface.js +0 -53
  177. package/scripts/lib/plans.js +0 -2318
  178. package/scripts/lib/policy-provider.js +0 -27
  179. package/scripts/lib/prelaunch-activation-readiness.js +0 -409
  180. package/scripts/lib/prelaunch-evidence-store.js +0 -816
  181. package/scripts/lib/prelaunch-intelligence.js +0 -869
  182. package/scripts/lib/pricing-experiment.js +0 -118
  183. package/scripts/lib/pro-moment-events.js +0 -77
  184. package/scripts/lib/pro-moment-state.js +0 -227
  185. package/scripts/lib/pro-moments.js +0 -1216
  186. package/scripts/lib/product-learning-events.js +0 -629
  187. package/scripts/lib/project-profile.js +0 -555
  188. package/scripts/lib/prompt-compiler.js +0 -280
  189. package/scripts/lib/prompt-lint.js +0 -32
  190. package/scripts/lib/prompt-suggestions.js +0 -52
  191. package/scripts/lib/proof-canonical.js +0 -398
  192. package/scripts/lib/proof-drilldown.js +0 -383
  193. package/scripts/lib/proof-events.js +0 -342
  194. package/scripts/lib/proof-history.js +0 -243
  195. package/scripts/lib/proof-metrics.js +0 -296
  196. package/scripts/lib/proof-outcome-evidence.js +0 -134
  197. package/scripts/lib/proof-receipt.js +0 -335
  198. package/scripts/lib/proof-record.js +0 -461
  199. package/scripts/lib/public-activation-distribution-gate.js +0 -258
  200. package/scripts/lib/public-cli.js +0 -3891
  201. package/scripts/lib/public-distribution-truth.js +0 -211
  202. package/scripts/lib/public-install-claim-checker.js +0 -294
  203. package/scripts/lib/publish-provenance-readiness.js +0 -283
  204. package/scripts/lib/readiness-delta.js +0 -218
  205. package/scripts/lib/readiness-evidence-closure.js +0 -196
  206. package/scripts/lib/reentry-memory-capture.js +0 -241
  207. package/scripts/lib/reentry-memory-retrieval.js +0 -302
  208. package/scripts/lib/reentry-memory-status.js +0 -146
  209. package/scripts/lib/reentry-memory-store.js +0 -178
  210. package/scripts/lib/reentry-state.js +0 -66
  211. package/scripts/lib/release-candidate-bundle.js +0 -166
  212. package/scripts/lib/remediation.js +0 -81
  213. package/scripts/lib/repo-map.js +0 -391
  214. package/scripts/lib/run-improvements-lifecycle.js +0 -330
  215. package/scripts/lib/run-improvements.js +0 -789
  216. package/scripts/lib/runtime-decision-policy.js +0 -387
  217. package/scripts/lib/safe-path-engine.js +0 -705
  218. package/scripts/lib/safe-run-controller.js +0 -887
  219. package/scripts/lib/score.js +0 -262
  220. package/scripts/lib/seamless-enforcement.js +0 -329
  221. package/scripts/lib/seamless-outcome.js +0 -689
  222. package/scripts/lib/seamless-reality-gate.js +0 -5043
  223. package/scripts/lib/security-risk-classifier.js +0 -511
  224. package/scripts/lib/security-scan.js +0 -384
  225. package/scripts/lib/session-context-optimizer.js +0 -1211
  226. package/scripts/lib/session-timing.js +0 -315
  227. package/scripts/lib/skill-hygiene.js +0 -805
  228. package/scripts/lib/skill-packs.js +0 -161
  229. package/scripts/lib/skills-operating-layer.js +0 -580
  230. package/scripts/lib/smart-work-routing.js +0 -768
  231. package/scripts/lib/source-catalog.js +0 -700
  232. package/scripts/lib/status-value-summary.js +0 -32
  233. package/scripts/lib/support-bundle.js +0 -578
  234. package/scripts/lib/task-continuation.js +0 -440
  235. package/scripts/lib/test-helpers.js +0 -15
  236. package/scripts/lib/tier.js +0 -38
  237. package/scripts/lib/token-context-quality-gate.js +0 -370
  238. package/scripts/lib/token-cost-capture.js +0 -187
  239. package/scripts/lib/token-cost-intelligence.js +0 -358
  240. package/scripts/lib/token-efficiency-evidence.js +0 -213
  241. package/scripts/lib/token-evidence.js +0 -699
  242. package/scripts/lib/tokenish.js +0 -17
  243. package/scripts/lib/tool-output-sandbox.js +0 -304
  244. package/scripts/lib/trust-audit.js +0 -136
  245. package/scripts/lib/unified-events.js +0 -396
  246. package/scripts/lib/upgrade-interruption-recovery.js +0 -407
  247. package/scripts/lib/usage-ledger.js +0 -201
  248. package/scripts/lib/value-ledger.js +0 -130
  249. package/scripts/lib/value-proof-calibration.js +0 -531
  250. package/scripts/lib/visual-qa.js +0 -231
  251. package/scripts/lib/voice-alpha.js +0 -29
  252. package/scripts/lib/work-aware-orchestration.js +0 -976
  253. package/scripts/lib/work-control-receipts.js +0 -577
  254. package/scripts/lib/work-ledger.js +0 -1123
  255. package/scripts/lib/work-panel-preview.js +0 -352
  256. package/scripts/lib/workflow-discipline.js +0 -280
  257. package/scripts/lib/workflow-signals.js +0 -419
  258. package/scripts/lib/workspace-map.js +0 -281
  259. package/scripts/lib/workspace-registry.js +0 -1367
  260. package/scripts/lib/workspace-resolver.js +0 -480
@@ -1,699 +0,0 @@
1
- "use strict";
2
-
3
- const fs = require("fs");
4
- const path = require("path");
5
- const { buildOutcomeEvent, appendOutcomeEvents } = require("./unified-events");
6
- const { getEffectiveConfig } = require("./config");
7
- const { normalizeAttribution } = require("./attribution");
8
-
9
- const SLICE1_RECOMMENDATION_IDS = new Set([
10
- "REC_LOOP_REPLAN",
11
- "REC_RETRY_SUPPRESSION",
12
- "REC_PROMPT_ENVELOPE",
13
- "REC_ENABLE_TOOL_SEARCH",
14
- "REC_MCP_OUTPUT_CAP",
15
- "REC_PRECOMPACT_EVIDENCE",
16
- ]);
17
-
18
- function metricsPath(cwd) {
19
- return path.join(cwd, ".claude", "cco", "metrics", "metrics.jsonl");
20
- }
21
-
22
- function appendJsonl(file, obj) {
23
- fs.mkdirSync(path.dirname(file), { recursive: true });
24
- fs.appendFileSync(file, JSON.stringify(obj) + "\n", "utf8");
25
- }
26
-
27
- function logMetric(cwd, entry) {
28
- const line = {
29
- ts: new Date().toISOString(),
30
- sessionId: entry.sessionId || "unknown",
31
- event: entry.event,
32
- tool: entry.tool || null,
33
- action: entry.action || null,
34
- reasonCodes: entry.reasonCodes || [],
35
- meta: entry.meta || {},
36
- };
37
- const attribution = normalizeAttribution({ ...entry, ...line });
38
- if (attribution) line.attribution = attribution;
39
-
40
- appendJsonl(metricsPath(cwd), line);
41
-
42
- try {
43
- if (line.meta?.skipOutcomeEvent) return;
44
- const effective = getEffectiveConfig(cwd)?.config || {};
45
- const projectId = String(line.meta?.projectId || effective.cloud?.projectId || path.basename(cwd).toLowerCase());
46
- const userId = String(line.meta?.userId || process.env.CCO_USER_ID || "local-user");
47
- const outcome = buildOutcomeEvent({
48
- metric: line,
49
- platform: "claude",
50
- projectId,
51
- repoId: projectId,
52
- userId,
53
- });
54
- appendOutcomeEvents(cwd, [outcome]);
55
- } catch {
56
- // Outcome instrumentation must never break runtime metrics.
57
- }
58
- }
59
-
60
- function readAllMetrics(cwd) {
61
- const p = metricsPath(cwd);
62
- if (!fs.existsSync(p)) return [];
63
- return fs
64
- .readFileSync(p, "utf8")
65
- .split("\n")
66
- .filter(Boolean)
67
- .map((ln) => {
68
- try {
69
- return JSON.parse(ln);
70
- } catch {
71
- return null;
72
- }
73
- })
74
- .filter(Boolean);
75
- }
76
-
77
- function readSessionMetrics(cwd, sessionId) {
78
- return readAllMetrics(cwd).filter((x) => x && x.sessionId === sessionId);
79
- }
80
-
81
- function confidenceFromScore(score) {
82
- if (score >= 10) return "high";
83
- if (score >= 5) return "medium";
84
- return "low";
85
- }
86
-
87
- function percentile(values, p) {
88
- if (!Array.isArray(values) || values.length === 0) return 0;
89
- const sorted = values.slice().sort((a, b) => a - b);
90
- const idx = Math.min(sorted.length - 1, Math.max(0, Math.floor((p / 100) * (sorted.length - 1))));
91
- return sorted[idx];
92
- }
93
-
94
- function weightsForProfile(profile) {
95
- const p = profile || "balanced";
96
- if (p === "cost-saver") return { cost: 1.35, quality: 0.85, security: 1.0, ux: 0.9 };
97
- if (p === "quality") return { cost: 0.85, quality: 1.35, security: 1.25, ux: 1.1 };
98
- return { cost: 1.0, quality: 1.0, security: 1.0, ux: 1.0 };
99
- }
100
-
101
- function buildRecommendationTraces(signals, profile) {
102
- const w = weightsForProfile(profile);
103
-
104
- const recs = [
105
- {
106
- id: "REC_MCP_OUTPUT_CAP",
107
- text: "Tune MAX_MCP_OUTPUT_TOKENS and use pagination/filters for noisy tools.",
108
- score: Math.round((signals.largeOutputsStored * 2 + Math.floor((signals.outputBytesAvg || 0) / 25000)) * w.cost),
109
- signalEvidence: [`largeOutputsStored=${signals.largeOutputsStored}`, `avgOutputBytes=${signals.outputBytesAvg || 0}`, `p95OutputBytes=${signals.outputBytesP95 || 0}`],
110
- estimatedImpact: "Lower context pressure and fewer compactions.",
111
- actionPath: "settings -> MAX_MCP_OUTPUT_TOKENS",
112
- triggerEvent: "PostToolUse",
113
- saturationGroup: "cost",
114
- },
115
- {
116
- id: "REC_ENABLE_TOOL_SEARCH",
117
- text: "Enable ENABLE_TOOL_SEARCH to reduce idle MCP schema overhead.",
118
- score: Math.round((Math.max(0, signals.mcpToolCalls - 3) + signals.mcpServerCount) * w.cost),
119
- signalEvidence: [`mcpToolCalls=${signals.mcpToolCalls}`, `mcpServerCount=${signals.mcpServerCount}`],
120
- estimatedImpact: "Lower token overhead for MCP-heavy workflows.",
121
- actionPath: "settings -> ENABLE_TOOL_SEARCH",
122
- triggerEvent: "PreToolUse",
123
- saturationGroup: "cost",
124
- },
125
- {
126
- id: "REC_MCP_MATCHER_NARROW",
127
- text: "Narrow MCP matchers to active servers to reduce hook routing overhead.",
128
- score: Math.round((signals.mcpServerCount > 1 ? signals.mcpServerCount + 2 : 0) * w.cost),
129
- signalEvidence: [`mcpServerCount=${signals.mcpServerCount}`],
130
- estimatedImpact: "Lower hook overhead in multi-server repos.",
131
- actionPath: "hooks -> matcher narrowing (mcp__<server>__.*)",
132
- triggerEvent: "PreToolUse",
133
- saturationGroup: "cost",
134
- },
135
- {
136
- id: "REC_CLI_OVER_MCP",
137
- text: "Prefer equivalent CLI tools over MCP where practical for lower context overhead.",
138
- score: Math.round((signals.mcpToolCalls > 6 ? Math.ceil(signals.mcpToolCalls / 3) : 0) * w.cost),
139
- signalEvidence: [`mcpToolCalls=${signals.mcpToolCalls}`, `cliToolCalls=${signals.cliToolCalls}`],
140
- estimatedImpact: "Reduce schema overhead and permission churn.",
141
- actionPath: "workflow -> choose CLI when equivalent",
142
- triggerEvent: "PreToolUse",
143
- saturationGroup: "cost",
144
- },
145
- {
146
- id: "REC_LOOP_REPLAN",
147
- text: "Repeated loops detected. Add stricter DoD and split tasks into smaller chunks.",
148
- score: Math.round((signals.loopsInterrupted * 3 + signals.failRetryGuards * 2) * w.quality),
149
- signalEvidence: [`loopsInterrupted=${signals.loopsInterrupted}`, `failRetryGuards=${signals.failRetryGuards}`],
150
- estimatedImpact: "Reduce retries and wasted tool calls.",
151
- actionPath: "prompt-quality -> DoD/output format/constraints",
152
- triggerEvent: "PreToolUse",
153
- saturationGroup: "quality",
154
- },
155
- {
156
- id: "REC_RETRY_SUPPRESSION",
157
- text: "On repeated failures, summarize stderr and re-plan before retrying tools.",
158
- score: Math.round((signals.postToolFailures * 2 + signals.failRetryGuards * 2) * w.quality),
159
- signalEvidence: [`postToolFailures=${signals.postToolFailures}`, `failRetryGuards=${signals.failRetryGuards}`],
160
- estimatedImpact: "Prevent runaway retries and lower cycle time.",
161
- actionPath: "PostToolUseFailure -> re-plan policy",
162
- triggerEvent: "PostToolUseFailure",
163
- saturationGroup: "quality",
164
- },
165
- {
166
- id: "REC_PROMPT_ENVELOPE",
167
- text: "Prompt lint opportunities detected. Keep DoD, output format, and constraints explicit.",
168
- score: Math.round((signals.promptLintInjects + Math.max(0, signals.promptBypass - 1)) * w.quality),
169
- signalEvidence: [`promptLintInjects=${signals.promptLintInjects}`, `promptBypass=${signals.promptBypass}`],
170
- estimatedImpact: "Fewer clarification turns and faster completion.",
171
- actionPath: "UserPromptSubmit -> quality envelope",
172
- triggerEvent: "UserPromptSubmit",
173
- saturationGroup: "quality",
174
- },
175
- {
176
- id: "REC_THINKING_BUDGET",
177
- text: "Set profile-aware MAX_THINKING_TOKENS for predictable cost/quality behavior.",
178
- score: Math.round((signals.toolCalls > 15 ? 3 : signals.toolCalls > 8 ? 2 : 1) * w.cost),
179
- signalEvidence: [`toolCalls=${signals.toolCalls}`, `profile=${profile || "balanced"}`],
180
- estimatedImpact: "More predictable spend and latency.",
181
- actionPath: "settings -> MAX_THINKING_TOKENS",
182
- triggerEvent: "PreToolUse",
183
- saturationGroup: "cost",
184
- },
185
- {
186
- id: "REC_SECURITY_AUDIT",
187
- text: "Security risk signals observed. Run /cco-audit and review remediation jobs.",
188
- score: Math.round((signals.riskyIntercepts * 3 + signals.remediationJobs * 2 + signals.suppressionEvents) * w.security),
189
- signalEvidence: [`riskyIntercepts=${signals.riskyIntercepts}`, `remediationJobs=${signals.remediationJobs}`, `suppressionEvents=${signals.suppressionEvents}`],
190
- estimatedImpact: "Lower supply-chain and command execution risk.",
191
- actionPath: "security -> /cco-audit -> remediation",
192
- triggerEvent: "PostToolUse",
193
- saturationGroup: "security",
194
- },
195
- {
196
- id: "REC_TRUST_SURFACE_REVIEW",
197
- text: "Trust-surface alerts detected. Review changed skills/agents/hooks before execution.",
198
- score: Math.round((signals.trustAlerts * 3 + signals.worktreeEvents) * w.security),
199
- signalEvidence: [`trustAlerts=${signals.trustAlerts}`, `worktreeEvents=${signals.worktreeEvents}`],
200
- estimatedImpact: "Reduce malicious skill/plugin supply-chain risk.",
201
- actionPath: "trust-audit -> review unknown/untrusted files",
202
- triggerEvent: "WorktreeCreate",
203
- saturationGroup: "security",
204
- },
205
- {
206
- id: "REC_PERMISSION_CONSOLIDATION",
207
- text: "Permission fatigue observed. Consolidate repeated safe approvals and narrow high-risk prompts.",
208
- score: Math.round((signals.permissionRequests + signals.permissionAsks - signals.permissionFatigueAllows) * w.ux),
209
- signalEvidence: [
210
- `permissionRequests=${signals.permissionRequests}`,
211
- `permissionAsks=${signals.permissionAsks}`,
212
- `fatigueConsolidations=${signals.permissionFatigueAllows}`,
213
- ],
214
- estimatedImpact: "Lower approval friction while preserving safeguards.",
215
- actionPath: "PermissionRequest -> consolidation policy",
216
- triggerEvent: "PermissionRequest",
217
- saturationGroup: "ux",
218
- },
219
- {
220
- id: "REC_PRECOMPACT_EVIDENCE",
221
- text: "Use PreCompact snapshots and evidence bundles before long sessions compact.",
222
- score: Math.round((signals.precompactSnapshots > 0 ? 2 : 4) * w.quality),
223
- signalEvidence: [`precompactSnapshots=${signals.precompactSnapshots}`],
224
- estimatedImpact: "Reduce context-loss regressions after compaction.",
225
- actionPath: "PreCompact -> snapshot/evidence bundle",
226
- triggerEvent: "PreCompact",
227
- saturationGroup: "quality",
228
- },
229
- {
230
- id: "REC_IDLE_DEEP_SCAN",
231
- text: "Use idle windows for deferred scans and trust refresh tasks.",
232
- score: Math.round((signals.teammateIdleEvents + signals.notificationsDeduped) * w.ux),
233
- signalEvidence: [`teammateIdleEvents=${signals.teammateIdleEvents}`, `notificationsDeduped=${signals.notificationsDeduped}`],
234
- estimatedImpact: "Improved risk freshness without interrupting active work.",
235
- actionPath: "TeammateIdle -> deferred scan",
236
- triggerEvent: "TeammateIdle",
237
- saturationGroup: "ux",
238
- },
239
- {
240
- id: "REC_WORKTREE_POLICY_RESCAN",
241
- text: "Worktree changes detected. Re-run trust and security checks on creation/removal.",
242
- score: Math.round((signals.worktreeEvents > 0 ? signals.worktreeEvents + 1 : 0) * w.security),
243
- signalEvidence: [`worktreeEvents=${signals.worktreeEvents}`],
244
- estimatedImpact: "Prevent policy drift across ephemeral worktrees.",
245
- actionPath: "WorktreeCreate/WorktreeRemove -> trust audit",
246
- triggerEvent: "WorktreeCreate",
247
- saturationGroup: "security",
248
- },
249
- {
250
- id: "REC_COMPACT_PRESSURE",
251
- text: "Compact pressure is high. Trigger /compact earlier and rely on memory snapshots.",
252
- score: Math.round((signals.compactPressureEvents > 1 ? signals.compactPressureEvents * 2 : 0) * w.quality),
253
- signalEvidence: [`compactPressureEvents=${signals.compactPressureEvents}`],
254
- estimatedImpact: "Stabilize long sessions and lower context churn.",
255
- actionPath: "compact-discipline -> precompact snapshot + focused resume",
256
- triggerEvent: "PreCompact",
257
- saturationGroup: "quality",
258
- },
259
- {
260
- id: "REC_BATCH_CANDIDATE",
261
- text: "High repetition detected. Move repeated jobs to headless/API batch mode.",
262
- score: Math.round((signals.batchCandidates + signals.batchJobsCreated) * w.cost),
263
- signalEvidence: [`batchCandidates=${signals.batchCandidates}`, `batchJobsCreated=${signals.batchJobsCreated}`],
264
- estimatedImpact: "Lower interactive overhead and improve throughput.",
265
- actionPath: "batch -> cco-batch create",
266
- triggerEvent: "TaskCompleted",
267
- saturationGroup: "cost",
268
- },
269
- {
270
- id: "REC_HTTP_HOOK_TEMPLATE",
271
- text: "Use direct HTTP hook actions with HMAC and timeout policies for integrations.",
272
- score: Math.round((signals.httpHookActions + (signals.cloudSyncs === 0 ? 1 : 0)) * w.ux),
273
- signalEvidence: [`httpHookActions=${signals.httpHookActions}`, `cloudSyncs=${signals.cloudSyncs}`],
274
- estimatedImpact: "Safer non-Python hook integrations with auditable controls.",
275
- actionPath: "http-hook -> cco-http-hook endpoint=...",
276
- triggerEvent: "Notification",
277
- saturationGroup: "ux",
278
- },
279
- {
280
- id: "REC_VOICE_ALPHA",
281
- text: "Enable edge-first voice alpha for low-latency command routing.",
282
- score: Math.round((signals.voiceCommands > 0 ? 2 : 1) * w.ux),
283
- signalEvidence: [`voiceCommands=${signals.voiceCommands}`],
284
- estimatedImpact: "Faster command entry with confirmation on risky intents.",
285
- actionPath: "voice -> cco-voice transcript=...",
286
- triggerEvent: "Notification",
287
- saturationGroup: "ux",
288
- },
289
- ];
290
-
291
- return recs
292
- .map((r) => ({
293
- ...r,
294
- recommendationId: r.id,
295
- confidence: confidenceFromScore(r.score),
296
- weight: r.score,
297
- memoryEvidence: [],
298
- }))
299
- .sort((a, b) => b.score - a.score)
300
- .slice(0, 14);
301
- }
302
-
303
- function filterSlice1RecommendationTraces(traces) {
304
- return (Array.isArray(traces) ? traces : [])
305
- .filter((t) => SLICE1_RECOMMENDATION_IDS.has(String(t.id || t.recommendationId || "")))
306
- .slice(0, 5);
307
- }
308
-
309
- function rankRecommendations(signals, profile) {
310
- return filterSlice1RecommendationTraces(buildRecommendationTraces(signals, profile)).map((x) => x.text);
311
- }
312
-
313
- function buildSignalSummary(metrics, profile) {
314
- const toolCalls = metrics.filter((m) => m.event === "PreToolUse").length;
315
- const mcpToolCalls = metrics.filter((m) => String(m.tool || "").startsWith("mcp__")).length;
316
- const cliToolCalls = metrics.filter((m) => m.event === "PreToolUse" && m.tool === "Bash").length;
317
-
318
- const loopsInterrupted = metrics.filter((m) => (m.reasonCodes || []).includes("LOOP_REPEATED_TOOL")).length;
319
- const riskyIntercepts = metrics.filter((m) => (m.reasonCodes || []).some((c) => String(c).startsWith("SEC_"))).length;
320
- const largeOutputsStored = metrics.filter((m) => (m.reasonCodes || []).includes("CTX_LARGE_OUTPUT")).length;
321
- const suppressionEvents = metrics.filter((m) => (m.reasonCodes || []).includes("SEC_SUPPRESSION_AUDIT")).length;
322
- const trustAlerts = metrics.filter((m) => (m.reasonCodes || []).includes("SEC_TRUST_UNKNOWN_HIGH") || (m.reasonCodes || []).includes("SEC_TRUST_AUDIT")).length;
323
- const failRetryGuards = metrics.filter((m) => (m.reasonCodes || []).includes("FAIL_RETRY_GUARD")).length;
324
- const scanSkips = metrics.filter((m) => (m.reasonCodes || []).includes("CTX_SCAN_SKIPPED_UNCHANGED")).length;
325
-
326
- const permissionRequests = metrics.filter((m) => m.event === "PermissionRequest").length;
327
- const permissionAsks = metrics.filter((m) => m.event === "PermissionRequest" && m.action === "ask").length;
328
- const permissionDenies = metrics.filter((m) => m.event === "PermissionRequest" && m.action === "deny").length;
329
- const permissionFatigueAllows = metrics.filter((m) => (m.reasonCodes || []).includes("PERM_FATIGUE_CONSOLIDATED")).length;
330
-
331
- const notificationsDeduped = metrics.filter((m) => (m.reasonCodes || []).includes("NOTIF_DEDUPED")).length;
332
- const subagentStarts = metrics.filter((m) => m.event === "SubagentStart").length;
333
- const subagentStops = metrics.filter((m) => m.event === "SubagentStop").length;
334
- const subagentPressure = metrics.filter((m) => (m.reasonCodes || []).includes("CTX_COST_PRESSURE_SUBAGENT")).length;
335
- const stopSnapshots = metrics.filter((m) => (m.reasonCodes || []).includes("STOP_SNAPSHOT")).length;
336
- const teammateIdleEvents = metrics.filter((m) => m.event === "TeammateIdle").length;
337
- const taskCompletedEvents = metrics.filter((m) => m.event === "TaskCompleted").length;
338
- const worktreeEvents = metrics.filter((m) => m.event === "WorktreeCreate" || m.event === "WorktreeRemove").length;
339
- const precompactSnapshots = metrics.filter((m) => (m.reasonCodes || []).includes("CTX_SNAPSHOT")).length;
340
-
341
- const promptLintInjects = metrics.filter((m) => m.event === "UserPromptSubmit" && m.action === "injectAdditionalContext").length;
342
- const promptBypass = metrics.filter((m) => (m.reasonCodes || []).includes("PROMPT_BYPASS")).length;
343
- const remediationJobs = metrics.filter((m) => (m.reasonCodes || []).includes("SEC_REMEDIATION_JOB_CREATED")).length;
344
- const postToolFailures = metrics.filter((m) => m.event === "PostToolUseFailure").length;
345
-
346
- const batchJobsCreated = metrics.filter((m) => (m.reasonCodes || []).includes("BATCH_JOB_CREATED")).length;
347
- const batchJobsCompleted = metrics.filter((m) => (m.reasonCodes || []).includes("BATCH_JOB_COMPLETED")).length;
348
- const cloudSyncs = metrics.filter((m) => m.event === "CloudSync").length;
349
- const httpHookActions = metrics.filter((m) => m.event === "HttpHookAction").length;
350
- const voiceCommands = metrics.filter((m) => m.event === "VoiceCommand").length;
351
-
352
- const largeOutputBytes = metrics
353
- .filter((m) => (m.reasonCodes || []).includes("CTX_LARGE_OUTPUT"))
354
- .map((m) => Number(m.meta?.bytes || 0))
355
- .filter((x) => Number.isFinite(x) && x > 0);
356
-
357
- const outputBytesAvg = largeOutputBytes.length
358
- ? Math.round(largeOutputBytes.reduce((a, b) => a + b, 0) / largeOutputBytes.length)
359
- : 0;
360
-
361
- const outputBytesP95 = percentile(largeOutputBytes, 95);
362
-
363
- const mcpServerUsage = {};
364
- metrics.forEach((m) => {
365
- const tool = String(m.tool || "");
366
- if (!tool.startsWith("mcp__")) return;
367
- const server = tool.split("__")[1] || "unknown";
368
- mcpServerUsage[server] = (mcpServerUsage[server] || 0) + 1;
369
- });
370
-
371
- const mcpServerCount = Object.keys(mcpServerUsage).length;
372
- const compactPressureEvents = largeOutputsStored + failRetryGuards + Math.max(0, loopsInterrupted - precompactSnapshots);
373
- const batchCandidates = Math.max(0, loopsInterrupted + postToolFailures - batchJobsCreated);
374
-
375
- const rawSignals = {
376
- toolCalls,
377
- mcpToolCalls,
378
- cliToolCalls,
379
- loopsInterrupted,
380
- riskyIntercepts,
381
- largeOutputsStored,
382
- suppressionEvents,
383
- trustAlerts,
384
- failRetryGuards,
385
- scanSkips,
386
- permissionRequests,
387
- permissionAsks,
388
- permissionDenies,
389
- permissionFatigueAllows,
390
- notificationsDeduped,
391
- subagentStarts,
392
- subagentStops,
393
- subagentPressure,
394
- stopSnapshots,
395
- teammateIdleEvents,
396
- taskCompletedEvents,
397
- worktreeEvents,
398
- precompactSnapshots,
399
- promptLintInjects,
400
- promptBypass,
401
- remediationJobs,
402
- postToolFailures,
403
- outputBytesAvg,
404
- outputBytesP95,
405
- mcpServerUsage,
406
- mcpServerCount,
407
- compactPressureEvents,
408
- batchCandidates,
409
- batchJobsCreated,
410
- batchJobsCompleted,
411
- cloudSyncs,
412
- httpHookActions,
413
- voiceCommands,
414
- };
415
-
416
- const recommendationTraces = filterSlice1RecommendationTraces(buildRecommendationTraces(rawSignals, profile));
417
-
418
- return {
419
- ...rawSignals,
420
- recommendationTraces,
421
- recommendations: recommendationTraces.map((x) => x.text),
422
- };
423
- }
424
-
425
- // SkillAudit aggregation — surfaces Skill Contract execution trust/proof signals.
426
- function buildSkillAuditSummary(metrics) {
427
- const auditEvents = metrics.filter((m) => m.event === "SkillAudit");
428
- const skillAuditCount = auditEvents.length;
429
-
430
- if (skillAuditCount === 0) {
431
- return {
432
- skillAuditCount: 0,
433
- totalSkillManualStepsSaved: 0,
434
- allProofSatisfiedCount: 0,
435
- proofStatusCounts: { missing: 0, partial: 0, satisfied: 0 },
436
- selectedSkillCounts: {},
437
- topSelectedSkills: [],
438
- };
439
- }
440
-
441
- let totalSkillManualStepsSaved = 0;
442
- let allProofSatisfiedCount = 0;
443
- const proofStatusCounts = { missing: 0, partial: 0, satisfied: 0 };
444
- const selectedSkillCounts = {};
445
-
446
- for (const m of auditEvents) {
447
- const meta = m.meta || {};
448
-
449
- // totalManualStepsSaved — conservative, already capped at 3/skill in evidence.ts
450
- const saved = Number(meta.totalManualStepsSaved);
451
- if (Number.isFinite(saved) && saved > 0) {
452
- totalSkillManualStepsSaved += saved;
453
- }
454
-
455
- // allProofSatisfied flag — only meaningful when skills were actually selected.
456
- // Vacuous truth (selectedSkillIds: []) must not inflate the count.
457
- if (
458
- meta.allProofSatisfied === true &&
459
- Array.isArray(meta.selectedSkillIds) &&
460
- meta.selectedSkillIds.length > 0
461
- ) {
462
- allProofSatisfiedCount++;
463
- }
464
-
465
- // proofStatuses per-skill per-event
466
- if (Array.isArray(meta.proofStatuses)) {
467
- for (const ps of meta.proofStatuses) {
468
- const status = String(ps.proofStatus || "");
469
- if (status === "missing" || status === "partial" || status === "satisfied") {
470
- proofStatusCounts[status]++;
471
- }
472
- }
473
- }
474
-
475
- // selected skill ids
476
- if (Array.isArray(meta.selectedSkillIds)) {
477
- for (const id of meta.selectedSkillIds) {
478
- const key = String(id || "");
479
- if (key) selectedSkillCounts[key] = (selectedSkillCounts[key] || 0) + 1;
480
- }
481
- }
482
- }
483
-
484
- const topSelectedSkills = Object.keys(selectedSkillCounts)
485
- .sort((a, b) => selectedSkillCounts[b] - selectedSkillCounts[a])
486
- .slice(0, 5);
487
-
488
- return {
489
- skillAuditCount,
490
- totalSkillManualStepsSaved,
491
- allProofSatisfiedCount,
492
- proofStatusCounts,
493
- selectedSkillCounts,
494
- topSelectedSkills,
495
- };
496
- }
497
-
498
- // Canonical savings heuristic for active CJS runtime surfaces.
499
- function buildSavingsFirstSummary(signals) {
500
- const loopsDetected = Number(signals.loopsInterrupted || 0) + Number(signals.failRetryGuards || 0);
501
- const loopsPrevented = Number(signals.loopsInterrupted || 0);
502
- const outputsTrimmed = Number(signals.largeOutputsStored || 0);
503
- const estimatedMinutesSaved = Math.max(0, loopsPrevented * 3 + outputsTrimmed);
504
- const density = loopsPrevented + outputsTrimmed + Number(signals.riskyIntercepts || 0);
505
- const confidenceLabel = density >= 6 ? "high" : density >= 2 ? "medium" : "low";
506
-
507
- return {
508
- loopsDetected,
509
- loopsPrevented,
510
- outputsTrimmed,
511
- estimatedMinutesSaved,
512
- confidenceLabel,
513
- };
514
- }
515
-
516
- function buildSavingsSummaryFromMetrics(metrics, profile = "balanced") {
517
- return buildSavingsFirstSummary(buildSignalSummary(metrics, profile));
518
- }
519
-
520
- function sessionSummaryFromMetrics(sessionId, metrics, profile) {
521
- const signals = buildSignalSummary(metrics, profile);
522
-
523
- const reasonCounts = {};
524
- metrics.flatMap((m) => m.reasonCodes || []).forEach((r) => {
525
- reasonCounts[r] = (reasonCounts[r] || 0) + 1;
526
- });
527
- const topReasonCodes = Object.keys(reasonCounts)
528
- .sort((a, b) => reasonCounts[b] - reasonCounts[a])
529
- .slice(0, 3);
530
-
531
- const durationEstimateMin = Math.max(1, Math.round(metrics.length * 0.4));
532
- const endTs =
533
- metrics
534
- .map((m) => Date.parse(m.ts || 0))
535
- .filter((n) => Number.isFinite(n))
536
- .sort((a, b) => b - a)[0] || 0;
537
-
538
- return {
539
- sessionId,
540
- durationEstimateMin,
541
- ...signals,
542
- savingsFirstSummary: buildSavingsSummaryFromMetrics(metrics, profile),
543
- skillAuditSummary: buildSkillAuditSummary(metrics),
544
- topReasonCodes,
545
- endTs,
546
- };
547
- }
548
-
549
- function summarizeLastSessions(cwd, limit = 7, profile = "balanced") {
550
- const all = readAllMetrics(cwd);
551
- const bySession = new Map();
552
- all.forEach((m) => {
553
- const id = m.sessionId || "unknown";
554
- if (!bySession.has(id)) bySession.set(id, []);
555
- bySession.get(id).push(m);
556
- });
557
-
558
- return Array.from(bySession.entries())
559
- .map(([sessionId, metrics]) => sessionSummaryFromMetrics(sessionId, metrics, profile))
560
- .sort((a, b) => b.endTs - a.endTs)
561
- .slice(0, limit);
562
- }
563
-
564
- function weeklyRollup(cwd, days = 7, profile = "balanced") {
565
- const all = readAllMetrics(cwd);
566
- const cutoff = Date.now() - days * 24 * 60 * 60 * 1000;
567
- const recent = all.filter((m) => {
568
- const ts = Date.parse(m.ts || 0);
569
- return Number.isFinite(ts) && ts >= cutoff;
570
- });
571
-
572
- const sessions = new Set(recent.map((m) => m.sessionId || "unknown"));
573
- const signals = buildSignalSummary(recent, profile);
574
-
575
- const reasonCounts = {};
576
- recent.flatMap((m) => m.reasonCodes || []).forEach((r) => {
577
- reasonCounts[r] = (reasonCounts[r] || 0) + 1;
578
- });
579
- const topReasonCodes = Object.keys(reasonCounts)
580
- .sort((a, b) => reasonCounts[b] - reasonCounts[a])
581
- .slice(0, 5);
582
-
583
- return {
584
- periodDays: days,
585
- sessions: sessions.size,
586
- ...signals,
587
- savingsFirstSummary: buildSavingsSummaryFromMetrics(recent, profile),
588
- skillAuditSummary: buildSkillAuditSummary(recent),
589
- topReasonCodes,
590
- };
591
- }
592
-
593
- function teamSecurityRollup(cwd, days = 7) {
594
- const weekly = weeklyRollup(cwd, days);
595
- return {
596
- periodDays: days,
597
- riskyIntercepts: weekly.riskyIntercepts,
598
- trustAlerts: weekly.trustAlerts,
599
- suppressionEvents: weekly.suppressionEvents,
600
- topReasonCodes: weekly.topReasonCodes.filter((c) => String(c).startsWith("SEC_")),
601
- };
602
- }
603
-
604
- function recordToolCallAndDetectLoop(cwd, sessionId, toolName) {
605
- const statePath = path.join(cwd, ".claude", "cco", "state", `toolbuf-${sessionId}.json`);
606
- let buf = [];
607
- try {
608
- buf = JSON.parse(fs.readFileSync(statePath, "utf8"));
609
- } catch {
610
- buf = [];
611
- }
612
-
613
- buf.push({ ts: Date.now(), tool: toolName });
614
- if (buf.length > 12) buf = buf.slice(-12);
615
- fs.mkdirSync(path.dirname(statePath), { recursive: true });
616
- fs.writeFileSync(statePath, JSON.stringify(buf, null, 2), "utf8");
617
-
618
- if (buf.length >= 8) {
619
- const a = buf.slice(-4).map((x) => x.tool).join("|");
620
- const b = buf.slice(-8, -4).map((x) => x.tool).join("|");
621
- if (a === b) return { shouldInterrupt: true };
622
- }
623
- return null;
624
- }
625
-
626
- function buildSessionReportMarkdown({ sessionId, reason, metrics, profile = "balanced", recommendationDecision = null, memorySummary = null }) {
627
- const s = sessionSummaryFromMetrics(sessionId, metrics, profile);
628
- const displayed = recommendationDecision?.displayedRecommendations || s.recommendationTraces.slice(0, 5);
629
- const nextBestAction = recommendationDecision?.nextBestAction || displayed[0]?.text || "Run /cco-optimize for proactive quick wins.";
630
-
631
- return [
632
- "# ClaudeCode Optimizer - Session Summary",
633
- "",
634
- `Session: ${sessionId}`,
635
- `End reason: ${reason}`,
636
- "",
637
- "## Savings-first summary",
638
- `- Loops detected: ${s.savingsFirstSummary.loopsDetected}`,
639
- `- Loops prevented: ${s.savingsFirstSummary.loopsPrevented}`,
640
- `- Outputs trimmed: ${s.savingsFirstSummary.outputsTrimmed}`,
641
- `- Estimated minutes saved: ~${s.savingsFirstSummary.estimatedMinutesSaved}`,
642
- `- Confidence: ${s.savingsFirstSummary.confidenceLabel}`,
643
- "",
644
- "## What happened",
645
- `- Tool calls observed: ${s.toolCalls}`,
646
- `- Loop interruptions: ${s.loopsInterrupted}`,
647
- `- Large outputs stored: ${s.largeOutputsStored}`,
648
- `- Risky command intercepts: ${s.riskyIntercepts}`,
649
- memorySummary ? `- Memory efficiency score: ${memorySummary.memoryScore}` : "",
650
- "",
651
- "## Top recommended fixes",
652
- ...displayed.slice(0, 5).map((r) => `- ${r.text} [confidence=${r.confidence}; path=${r.actionPath}]`),
653
- `- Next best action: ${nextBestAction}`,
654
- "",
655
- // Skill contracts section — only emitted when SkillAudit events are present.
656
- ...(s.skillAuditSummary.skillAuditCount > 0
657
- ? [
658
- "## Skill contracts",
659
- `- ${s.skillAuditSummary.skillAuditCount} skill-audited session${s.skillAuditSummary.skillAuditCount !== 1 ? "s" : ""}`,
660
- `- ${s.skillAuditSummary.totalSkillManualStepsSaved} manual steps saved (estimate)`,
661
- `- proof satisfied: ${s.skillAuditSummary.allProofSatisfiedCount}/${s.skillAuditSummary.skillAuditCount}`,
662
- s.skillAuditSummary.topSelectedSkills.length > 0
663
- ? `- top skills: ${s.skillAuditSummary.topSelectedSkills.join(", ")}`
664
- : "",
665
- "",
666
- ]
667
- : []),
668
- "## Notes",
669
- "- Works locally first. Team integrations can come later.",
670
- "- Get value before you connect tools.",
671
- "- Bypass prompt lint by prefixing prompts with [cco:raw].",
672
- "",
673
- ].filter(Boolean).join("\n");
674
- }
675
- module.exports = {
676
- logMetric,
677
- readAllMetrics,
678
- readSessionMetrics,
679
- summarizeLastSessions,
680
- weeklyRollup,
681
- teamSecurityRollup,
682
- rankRecommendations,
683
- buildRecommendationTraces,
684
- buildSavingsSummaryFromMetrics,
685
- buildSkillAuditSummary,
686
- recordToolCallAndDetectLoop,
687
- buildSessionReportMarkdown,
688
- percentile,
689
- };
690
-
691
-
692
-
693
-
694
-
695
-
696
-
697
-
698
-
699
-