avorelo 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (258) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +56 -0
  3. package/bin/avorelo +9 -0
  4. package/package.json +135 -0
  5. package/scripts/README.md +40 -0
  6. package/scripts/cco-dashboard.js +252 -0
  7. package/scripts/cco-status.js +430 -0
  8. package/scripts/lib/activation/account-state.js +37 -0
  9. package/scripts/lib/activation/activation-runner.js +546 -0
  10. package/scripts/lib/activation/activation-self-healing.js +480 -0
  11. package/scripts/lib/activation/activation-state.js +83 -0
  12. package/scripts/lib/activation/activation-summary.js +191 -0
  13. package/scripts/lib/activation/adapters/claude-code.js +77 -0
  14. package/scripts/lib/activation/adapters/codex-cli.js +52 -0
  15. package/scripts/lib/activation/adapters/cursor.js +37 -0
  16. package/scripts/lib/activation/adapters/github-agent.js +39 -0
  17. package/scripts/lib/activation/adapters/terminal.js +42 -0
  18. package/scripts/lib/activation/adapters/vscode.js +39 -0
  19. package/scripts/lib/activation/adapters/windsurf.js +37 -0
  20. package/scripts/lib/activation/ai-surface-detector.js +151 -0
  21. package/scripts/lib/activation/connect-account.js +145 -0
  22. package/scripts/lib/activation/detect-environment.js +75 -0
  23. package/scripts/lib/activation/detect-hosts.js +62 -0
  24. package/scripts/lib/activation/format-activation-output.js +109 -0
  25. package/scripts/lib/activation/next-action.js +43 -0
  26. package/scripts/lib/activation/repair-engine.js +219 -0
  27. package/scripts/lib/activation-distribution-readiness.js +507 -0
  28. package/scripts/lib/adapter-conformance.js +176 -0
  29. package/scripts/lib/adapter-readiness.js +417 -0
  30. package/scripts/lib/adapter-safety-boundaries.js +335 -0
  31. package/scripts/lib/adapter-technical-readiness-gate.js +205 -0
  32. package/scripts/lib/agent-access-governance.js +455 -0
  33. package/scripts/lib/agent-enforcement.js +765 -0
  34. package/scripts/lib/agent-policy-profile.js +210 -0
  35. package/scripts/lib/agent-security/action-evaluator.js +507 -0
  36. package/scripts/lib/agent-security/adapter-registry.js +98 -0
  37. package/scripts/lib/agent-security/auto-policy.js +139 -0
  38. package/scripts/lib/agent-security/bounded-scan.js +93 -0
  39. package/scripts/lib/agent-security/enforcement-adapter.js +174 -0
  40. package/scripts/lib/agent-security/enforcement-engine.js +1129 -0
  41. package/scripts/lib/agent-security/file-write-adapter.js +183 -0
  42. package/scripts/lib/agent-security/file-write-rules.js +178 -0
  43. package/scripts/lib/agent-security/index.js +3342 -0
  44. package/scripts/lib/agent-security/instruction-risk.js +181 -0
  45. package/scripts/lib/agent-security/mcp-action-adapter.js +185 -0
  46. package/scripts/lib/agent-security/mcp-action-rules.js +184 -0
  47. package/scripts/lib/agent-security/package-action-adapter.js +175 -0
  48. package/scripts/lib/agent-security/package-action-rules.js +233 -0
  49. package/scripts/lib/agent-security/performance.js +148 -0
  50. package/scripts/lib/agent-security/permission-minimizer.js +403 -0
  51. package/scripts/lib/agent-security/scan-cache.js +74 -0
  52. package/scripts/lib/agent-security/source-trust.js +146 -0
  53. package/scripts/lib/ai-install-prompt.js +288 -0
  54. package/scripts/lib/ai-workspace-hygiene.js +1499 -0
  55. package/scripts/lib/alpha-activation.js +520 -0
  56. package/scripts/lib/alpha-feedback.js +263 -0
  57. package/scripts/lib/alpha-readiness-gate.js +332 -0
  58. package/scripts/lib/anti-gaming.js +169 -0
  59. package/scripts/lib/artifact-health.js +431 -0
  60. package/scripts/lib/attribution.js +180 -0
  61. package/scripts/lib/audit.js +289 -0
  62. package/scripts/lib/avorelo-skill-registry.js +810 -0
  63. package/scripts/lib/batch-jobs.js +71 -0
  64. package/scripts/lib/brain-pack.js +578 -0
  65. package/scripts/lib/brand-boundary.js +424 -0
  66. package/scripts/lib/brand.js +74 -0
  67. package/scripts/lib/browser-capability.js +1048 -0
  68. package/scripts/lib/browser-proof-preflight.js +321 -0
  69. package/scripts/lib/cache-readiness.js +187 -0
  70. package/scripts/lib/canonical-reentry.js +162 -0
  71. package/scripts/lib/capability-packs.js +314 -0
  72. package/scripts/lib/capability-recommender.js +512 -0
  73. package/scripts/lib/capability-registry.js +1059 -0
  74. package/scripts/lib/carry-forward-surfacing.js +194 -0
  75. package/scripts/lib/ccusage-adapter.js +188 -0
  76. package/scripts/lib/company-loop.js +1149 -0
  77. package/scripts/lib/config.js +637 -0
  78. package/scripts/lib/context-acquisition-plan.js +287 -0
  79. package/scripts/lib/context-budget-guard.js +170 -0
  80. package/scripts/lib/context-budget-scanner.js +257 -0
  81. package/scripts/lib/context-optimizer.js +715 -0
  82. package/scripts/lib/context-reduction-plan.js +178 -0
  83. package/scripts/lib/context-safety.js +88 -0
  84. package/scripts/lib/context-savings-engine.js +158 -0
  85. package/scripts/lib/cost-evidence.js +254 -0
  86. package/scripts/lib/cross-host-install-plan.js +308 -0
  87. package/scripts/lib/cross-host-install-readiness.js +237 -0
  88. package/scripts/lib/cross-host-value-flow.js +268 -0
  89. package/scripts/lib/dashboard.js +900 -0
  90. package/scripts/lib/design-partner-feedback.js +346 -0
  91. package/scripts/lib/entitlements.js +100 -0
  92. package/scripts/lib/execution-packet.js +559 -0
  93. package/scripts/lib/experimentation-events.js +547 -0
  94. package/scripts/lib/external-capability-compliance.js +107 -0
  95. package/scripts/lib/external-user-simulation.js +166 -0
  96. package/scripts/lib/failure-recovery-readiness.js +81 -0
  97. package/scripts/lib/failure-recovery.js +419 -0
  98. package/scripts/lib/feedback-intelligence.js +537 -0
  99. package/scripts/lib/feedback-signals.js +205 -0
  100. package/scripts/lib/file-integrity.js +68 -0
  101. package/scripts/lib/fsx.js +127 -0
  102. package/scripts/lib/full-readiness-gate.js +451 -0
  103. package/scripts/lib/guidance-builder.js +174 -0
  104. package/scripts/lib/hook-apply.js +1019 -0
  105. package/scripts/lib/hook-baseline.js +310 -0
  106. package/scripts/lib/hook-config-preview.js +275 -0
  107. package/scripts/lib/hook-contracts.js +290 -0
  108. package/scripts/lib/hook-safety-boundary-readiness.js +80 -0
  109. package/scripts/lib/host-capability-matrix.js +351 -0
  110. package/scripts/lib/host-support-context.js +254 -0
  111. package/scripts/lib/http-hook-action.js +538 -0
  112. package/scripts/lib/install-ai-readiness.js +84 -0
  113. package/scripts/lib/install-intake-risk.js +1037 -0
  114. package/scripts/lib/install-journey-intelligence.js +329 -0
  115. package/scripts/lib/intervention-guidance.js +57 -0
  116. package/scripts/lib/known-limitations.js +115 -0
  117. package/scripts/lib/l8-path-truth.js +146 -0
  118. package/scripts/lib/launch-hardening-gate.js +436 -0
  119. package/scripts/lib/launch-readiness.js +628 -0
  120. package/scripts/lib/learning-memory.js +686 -0
  121. package/scripts/lib/lifecycle-hooks.js +802 -0
  122. package/scripts/lib/local-package-smoke.js +423 -0
  123. package/scripts/lib/local-pricing.js +299 -0
  124. package/scripts/lib/mcp-enforcement.js +311 -0
  125. package/scripts/lib/mcp-least-privilege-policy.js +303 -0
  126. package/scripts/lib/mcp-tool-inventory.js +388 -0
  127. package/scripts/lib/mcp-tool-risk.js +0 -0
  128. package/scripts/lib/memory.js +335 -0
  129. package/scripts/lib/metrics.js +699 -0
  130. package/scripts/lib/micro-proof.js +133 -0
  131. package/scripts/lib/next-run-context.js +436 -0
  132. package/scripts/lib/operating-value.js +1648 -0
  133. package/scripts/lib/optimization-v3.js +122 -0
  134. package/scripts/lib/orchestration/adapters/_shared.js +49 -0
  135. package/scripts/lib/orchestration/adapters/aider.js +18 -0
  136. package/scripts/lib/orchestration/adapters/claude-code.js +35 -0
  137. package/scripts/lib/orchestration/adapters/codex.js +35 -0
  138. package/scripts/lib/orchestration/adapters/gemini-cli.js +18 -0
  139. package/scripts/lib/orchestration/adapters/git.js +25 -0
  140. package/scripts/lib/orchestration/adapters/index.js +31 -0
  141. package/scripts/lib/orchestration/adapters/lm-studio.js +18 -0
  142. package/scripts/lib/orchestration/adapters/ollama.js +18 -0
  143. package/scripts/lib/orchestration/adapters/opencode.js +18 -0
  144. package/scripts/lib/orchestration/adapters/openrouter.js +18 -0
  145. package/scripts/lib/orchestration/adapters/test-runner.js +25 -0
  146. package/scripts/lib/orchestration/cli.js +438 -0
  147. package/scripts/lib/orchestration/execution-manager.js +279 -0
  148. package/scripts/lib/orchestration/handoff.js +314 -0
  149. package/scripts/lib/orchestration/index.js +456 -0
  150. package/scripts/lib/orchestration/inventory.js +47 -0
  151. package/scripts/lib/orchestration/model-discovery.js +498 -0
  152. package/scripts/lib/orchestration/model-profiler.js +170 -0
  153. package/scripts/lib/orchestration/model-profiles.js +252 -0
  154. package/scripts/lib/orchestration/model-refresh-policy.js +72 -0
  155. package/scripts/lib/orchestration/proof-writer.js +349 -0
  156. package/scripts/lib/orchestration/provider-discovery/aider.js +49 -0
  157. package/scripts/lib/orchestration/provider-discovery/claude-code.js +56 -0
  158. package/scripts/lib/orchestration/provider-discovery/codex.js +49 -0
  159. package/scripts/lib/orchestration/provider-discovery/common.js +186 -0
  160. package/scripts/lib/orchestration/provider-discovery/gemini.js +106 -0
  161. package/scripts/lib/orchestration/provider-discovery/lm-studio.js +118 -0
  162. package/scripts/lib/orchestration/provider-discovery/models-dev.js +12 -0
  163. package/scripts/lib/orchestration/provider-discovery/ollama.js +100 -0
  164. package/scripts/lib/orchestration/provider-discovery/opencode.js +47 -0
  165. package/scripts/lib/orchestration/provider-discovery/openrouter.js +44 -0
  166. package/scripts/lib/orchestration/risk-classifier.js +130 -0
  167. package/scripts/lib/orchestration/routing-policy.js +486 -0
  168. package/scripts/lib/orchestration/settings.js +112 -0
  169. package/scripts/lib/orchestration/state.js +165 -0
  170. package/scripts/lib/orchestration/verification-manager.js +138 -0
  171. package/scripts/lib/output-profiles.js +146 -0
  172. package/scripts/lib/package-content-audit.js +368 -0
  173. package/scripts/lib/package-runtime.js +278 -0
  174. package/scripts/lib/plan-surface.js +53 -0
  175. package/scripts/lib/plans.js +2318 -0
  176. package/scripts/lib/policy-provider.js +27 -0
  177. package/scripts/lib/prelaunch-activation-readiness.js +409 -0
  178. package/scripts/lib/prelaunch-evidence-store.js +816 -0
  179. package/scripts/lib/prelaunch-intelligence.js +869 -0
  180. package/scripts/lib/pricing-experiment.js +118 -0
  181. package/scripts/lib/pro-moment-events.js +77 -0
  182. package/scripts/lib/pro-moment-state.js +227 -0
  183. package/scripts/lib/pro-moments.js +1216 -0
  184. package/scripts/lib/product-learning-events.js +629 -0
  185. package/scripts/lib/project-profile.js +555 -0
  186. package/scripts/lib/prompt-compiler.js +280 -0
  187. package/scripts/lib/prompt-lint.js +32 -0
  188. package/scripts/lib/prompt-suggestions.js +52 -0
  189. package/scripts/lib/proof-canonical.js +398 -0
  190. package/scripts/lib/proof-drilldown.js +383 -0
  191. package/scripts/lib/proof-events.js +342 -0
  192. package/scripts/lib/proof-history.js +243 -0
  193. package/scripts/lib/proof-metrics.js +296 -0
  194. package/scripts/lib/proof-outcome-evidence.js +134 -0
  195. package/scripts/lib/proof-receipt.js +335 -0
  196. package/scripts/lib/proof-record.js +461 -0
  197. package/scripts/lib/public-activation-distribution-gate.js +258 -0
  198. package/scripts/lib/public-cli.js +3891 -0
  199. package/scripts/lib/public-distribution-truth.js +211 -0
  200. package/scripts/lib/public-install-claim-checker.js +294 -0
  201. package/scripts/lib/publish-provenance-readiness.js +283 -0
  202. package/scripts/lib/readiness-delta.js +218 -0
  203. package/scripts/lib/readiness-evidence-closure.js +196 -0
  204. package/scripts/lib/reentry-memory-capture.js +241 -0
  205. package/scripts/lib/reentry-memory-retrieval.js +302 -0
  206. package/scripts/lib/reentry-memory-status.js +146 -0
  207. package/scripts/lib/reentry-memory-store.js +178 -0
  208. package/scripts/lib/reentry-state.js +66 -0
  209. package/scripts/lib/release-candidate-bundle.js +166 -0
  210. package/scripts/lib/remediation.js +81 -0
  211. package/scripts/lib/repo-map.js +391 -0
  212. package/scripts/lib/run-improvements-lifecycle.js +330 -0
  213. package/scripts/lib/run-improvements.js +789 -0
  214. package/scripts/lib/runtime-decision-policy.js +387 -0
  215. package/scripts/lib/safe-path-engine.js +705 -0
  216. package/scripts/lib/safe-run-controller.js +887 -0
  217. package/scripts/lib/score.js +262 -0
  218. package/scripts/lib/seamless-enforcement.js +329 -0
  219. package/scripts/lib/seamless-outcome.js +689 -0
  220. package/scripts/lib/seamless-reality-gate.js +5043 -0
  221. package/scripts/lib/security-risk-classifier.js +511 -0
  222. package/scripts/lib/security-scan.js +384 -0
  223. package/scripts/lib/session-context-optimizer.js +1211 -0
  224. package/scripts/lib/session-timing.js +315 -0
  225. package/scripts/lib/skill-hygiene.js +805 -0
  226. package/scripts/lib/skill-packs.js +161 -0
  227. package/scripts/lib/skills-operating-layer.js +580 -0
  228. package/scripts/lib/smart-work-routing.js +768 -0
  229. package/scripts/lib/source-catalog.js +700 -0
  230. package/scripts/lib/status-value-summary.js +32 -0
  231. package/scripts/lib/support-bundle.js +578 -0
  232. package/scripts/lib/task-continuation.js +440 -0
  233. package/scripts/lib/test-helpers.js +15 -0
  234. package/scripts/lib/tier.js +38 -0
  235. package/scripts/lib/token-context-quality-gate.js +370 -0
  236. package/scripts/lib/token-cost-capture.js +187 -0
  237. package/scripts/lib/token-cost-intelligence.js +358 -0
  238. package/scripts/lib/token-efficiency-evidence.js +213 -0
  239. package/scripts/lib/token-evidence.js +699 -0
  240. package/scripts/lib/tokenish.js +17 -0
  241. package/scripts/lib/tool-output-sandbox.js +304 -0
  242. package/scripts/lib/trust-audit.js +136 -0
  243. package/scripts/lib/unified-events.js +396 -0
  244. package/scripts/lib/upgrade-interruption-recovery.js +407 -0
  245. package/scripts/lib/usage-ledger.js +201 -0
  246. package/scripts/lib/value-ledger.js +130 -0
  247. package/scripts/lib/value-proof-calibration.js +531 -0
  248. package/scripts/lib/visual-qa.js +231 -0
  249. package/scripts/lib/voice-alpha.js +29 -0
  250. package/scripts/lib/work-aware-orchestration.js +976 -0
  251. package/scripts/lib/work-control-receipts.js +577 -0
  252. package/scripts/lib/work-ledger.js +1123 -0
  253. package/scripts/lib/work-panel-preview.js +352 -0
  254. package/scripts/lib/workflow-discipline.js +280 -0
  255. package/scripts/lib/workflow-signals.js +419 -0
  256. package/scripts/lib/workspace-map.js +281 -0
  257. package/scripts/lib/workspace-registry.js +1367 -0
  258. package/scripts/lib/workspace-resolver.js +480 -0
@@ -0,0 +1,335 @@
1
+ "use strict";
2
+
3
+ const path = require("path");
4
+ const { safeReadJson, safeWriteJson, nowIso } = require("./fsx");
5
+
6
+ const PROFILE_REL = ".claude/cco/memory/profile.json";
7
+ const TTL_DAYS = 30;
8
+
9
+ function projectIdFromCwd(cwd) {
10
+ return path.basename(cwd).toLowerCase();
11
+ }
12
+
13
+ function defaultMemoryProfile(projectId) {
14
+ return {
15
+ version: 1,
16
+ projectId,
17
+ updatedAt: nowIso(),
18
+ hotFiles: [],
19
+ riskZones: [],
20
+ toolUsageModel: {
21
+ totalEvents: 0,
22
+ byTool: {},
23
+ byEvent: {},
24
+ },
25
+ retryClusters: [],
26
+ recommendationOutcomes: {},
27
+ signalDistributions: {
28
+ outputBytes: [],
29
+ contextPressureEvents: 0,
30
+ scanSkipEvents: 0,
31
+ },
32
+ sessionSnapshots: [],
33
+ memoryScore: 0,
34
+ };
35
+ }
36
+
37
+ function loadMemoryProfile(cwd) {
38
+ const profile = safeReadJson(cwd, PROFILE_REL, null);
39
+ if (!profile || typeof profile !== "object") return defaultMemoryProfile(projectIdFromCwd(cwd));
40
+ return {
41
+ ...defaultMemoryProfile(projectIdFromCwd(cwd)),
42
+ ...profile,
43
+ toolUsageModel: {
44
+ ...defaultMemoryProfile(projectIdFromCwd(cwd)).toolUsageModel,
45
+ ...(profile.toolUsageModel || {}),
46
+ byTool: { ...(profile.toolUsageModel?.byTool || {}) },
47
+ byEvent: { ...(profile.toolUsageModel?.byEvent || {}) },
48
+ },
49
+ signalDistributions: {
50
+ ...defaultMemoryProfile(projectIdFromCwd(cwd)).signalDistributions,
51
+ ...(profile.signalDistributions || {}),
52
+ outputBytes: Array.isArray(profile.signalDistributions?.outputBytes)
53
+ ? profile.signalDistributions.outputBytes.filter((n) => Number.isFinite(Number(n))).slice(-500)
54
+ : [],
55
+ },
56
+ hotFiles: Array.isArray(profile.hotFiles) ? profile.hotFiles : [],
57
+ riskZones: Array.isArray(profile.riskZones) ? profile.riskZones : [],
58
+ retryClusters: Array.isArray(profile.retryClusters) ? profile.retryClusters : [],
59
+ sessionSnapshots: Array.isArray(profile.sessionSnapshots) ? profile.sessionSnapshots : [],
60
+ recommendationOutcomes: profile.recommendationOutcomes && typeof profile.recommendationOutcomes === "object"
61
+ ? profile.recommendationOutcomes
62
+ : {},
63
+ };
64
+ }
65
+
66
+ function saveMemoryProfile(cwd, profile) {
67
+ const next = {
68
+ ...profile,
69
+ updatedAt: nowIso(),
70
+ };
71
+ safeWriteJson(cwd, PROFILE_REL, next);
72
+ return next;
73
+ }
74
+
75
+ function increment(map, key, amount = 1) {
76
+ const k = String(key || "unknown");
77
+ map[k] = (map[k] || 0) + amount;
78
+ }
79
+
80
+ function topEntries(map, limit = 10) {
81
+ return Object.keys(map)
82
+ .map((k) => ({ key: k, value: map[k] }))
83
+ .sort((a, b) => b.value - a.value)
84
+ .slice(0, limit);
85
+ }
86
+
87
+ function percentile(values, p) {
88
+ if (!Array.isArray(values) || values.length === 0) return 0;
89
+ const sorted = values.slice().sort((a, b) => a - b);
90
+ const idx = Math.min(sorted.length - 1, Math.max(0, Math.floor((p / 100) * (sorted.length - 1))));
91
+ return sorted[idx];
92
+ }
93
+
94
+ function buildRetryClusters(metrics) {
95
+ const counts = {};
96
+ metrics
97
+ .filter((m) => m.event === "PostToolUseFailure")
98
+ .forEach((m) => {
99
+ const tool = String(m.tool || "unknown");
100
+ increment(counts, tool);
101
+ });
102
+
103
+ return topEntries(counts, 5).map((x) => ({
104
+ clusterId: `retry_${x.key}`,
105
+ tool: x.key,
106
+ count: x.value,
107
+ severity: x.value >= 3 ? "high" : x.value >= 2 ? "medium" : "low",
108
+ }));
109
+ }
110
+
111
+ function buildHotFiles(metrics) {
112
+ const counts = {};
113
+ metrics.forEach((m) => {
114
+ const fp = m.meta && m.meta.filePath ? String(m.meta.filePath) : null;
115
+ if (!fp) return;
116
+ increment(counts, fp);
117
+ });
118
+ return topEntries(counts, 10).map((x) => ({ path: x.key, count: x.value }));
119
+ }
120
+
121
+ function buildRiskZones(metrics) {
122
+ const counts = {};
123
+ metrics.forEach((m) => {
124
+ (m.reasonCodes || []).forEach((code) => {
125
+ if (!String(code).startsWith("SEC_")) return;
126
+ const fp = m.meta && m.meta.filePath ? String(m.meta.filePath) : "(no-file)";
127
+ increment(counts, `${fp}|${code}`);
128
+ });
129
+ });
130
+
131
+ return topEntries(counts, 10).map((x) => {
132
+ const parts = x.key.split("|");
133
+ return {
134
+ path: parts[0],
135
+ reasonCode: parts[1] || "SEC_UNKNOWN",
136
+ hits: x.value,
137
+ };
138
+ });
139
+ }
140
+
141
+ function computeMemoryScore(profile) {
142
+ const toolDiversity = Object.keys(profile.toolUsageModel.byTool || {}).length;
143
+ const retryPenalty = (profile.retryClusters || []).reduce((acc, r) => acc + (r.severity === "high" ? 6 : r.severity === "medium" ? 3 : 1), 0);
144
+ const contextPressure = Number(profile.signalDistributions.contextPressureEvents || 0);
145
+ const scanSkips = Number(profile.signalDistributions.scanSkipEvents || 0);
146
+ const p95 = percentile(profile.signalDistributions.outputBytes || [], 95);
147
+
148
+ let score = 100;
149
+ score -= Math.min(35, retryPenalty);
150
+ score -= Math.min(25, Math.round(contextPressure * 1.2));
151
+ score -= Math.min(15, Math.round(p95 / 50000));
152
+ score += Math.min(15, Math.round(scanSkips * 0.8));
153
+ score += Math.min(8, toolDiversity);
154
+
155
+ return Math.max(0, Math.min(100, score));
156
+ }
157
+
158
+ function inferTaskType(metrics) {
159
+ const mcpCalls = metrics.filter((m) => String(m.tool || "").startsWith("mcp__")).length;
160
+ const writeCalls = metrics.filter((m) => m.tool === "Write" || m.tool === "Edit").length;
161
+ const bashCalls = metrics.filter((m) => m.tool === "Bash").length;
162
+
163
+ if (mcpCalls > writeCalls && mcpCalls > bashCalls) return "integration-heavy";
164
+ if (writeCalls >= bashCalls && writeCalls > 0) return "code-editing";
165
+ if (bashCalls > 0) return "automation-ops";
166
+ return "general";
167
+ }
168
+
169
+ function buildContextBudgetPlan(profileName, taskType, memoryProfile) {
170
+ const base = {
171
+ "cost-saver": { maxContextChars: 12000, maxToolOutputBytes: 18000 },
172
+ balanced: { maxContextChars: 18000, maxToolOutputBytes: 28000 },
173
+ quality: { maxContextChars: 26000, maxToolOutputBytes: 40000 },
174
+ }[profileName || "balanced"];
175
+
176
+ let maxContextChars = base.maxContextChars;
177
+ let maxToolOutputBytes = base.maxToolOutputBytes;
178
+
179
+ const p95 = percentile(memoryProfile.signalDistributions.outputBytes || [], 95);
180
+ if (p95 > 0) {
181
+ maxToolOutputBytes = Math.max(12000, Math.min(maxToolOutputBytes, Math.round(p95 * 0.85)));
182
+ }
183
+
184
+ if (taskType === "integration-heavy") maxContextChars = Math.round(maxContextChars * 0.9);
185
+ if (taskType === "code-editing") maxContextChars = Math.round(maxContextChars * 1.05);
186
+
187
+ const prioritySources = ["hotFiles", "recentFailures", "securityFindings", "teamPolicy"];
188
+ const dropPolicy = [
189
+ "drop_low_confidence_recommendations_first",
190
+ "store_large_tool_outputs_out_of_band",
191
+ "prefer_compaction_snapshots_over_raw_history",
192
+ ];
193
+
194
+ return {
195
+ profile: profileName,
196
+ taskType,
197
+ maxContextChars,
198
+ maxToolOutputBytes,
199
+ prioritySources,
200
+ dropPolicy,
201
+ };
202
+ }
203
+
204
+ function updateMemoryFromSession(cwd, params) {
205
+ const { sessionId, metrics, profileName, recommendationDecision } = params;
206
+ const profile = loadMemoryProfile(cwd);
207
+ const sessionMetrics = Array.isArray(metrics) ? metrics : [];
208
+
209
+ sessionMetrics.forEach((m) => {
210
+ increment(profile.toolUsageModel.byEvent, m.event || "unknown");
211
+ if (m.tool) increment(profile.toolUsageModel.byTool, m.tool);
212
+ profile.toolUsageModel.totalEvents += 1;
213
+
214
+ if ((m.reasonCodes || []).includes("CTX_LARGE_OUTPUT") && Number.isFinite(Number(m.meta?.bytes))) {
215
+ profile.signalDistributions.outputBytes.push(Number(m.meta.bytes));
216
+ profile.signalDistributions.outputBytes = profile.signalDistributions.outputBytes.slice(-500);
217
+ profile.signalDistributions.contextPressureEvents += 1;
218
+ }
219
+ if ((m.reasonCodes || []).includes("CTX_SCAN_SKIPPED_UNCHANGED")) {
220
+ profile.signalDistributions.scanSkipEvents += 1;
221
+ }
222
+ });
223
+
224
+ profile.hotFiles = buildHotFiles(sessionMetrics);
225
+ profile.riskZones = buildRiskZones(sessionMetrics);
226
+ profile.retryClusters = buildRetryClusters(sessionMetrics);
227
+
228
+ const taskType = inferTaskType(sessionMetrics);
229
+ const budgetPlan = buildContextBudgetPlan(profileName, taskType, profile);
230
+
231
+ if (recommendationDecision && Array.isArray(recommendationDecision.displayedRecommendations)) {
232
+ recommendationDecision.displayedRecommendations.forEach((r) => {
233
+ const id = String(r.recommendationId || r.id || "unknown");
234
+ profile.recommendationOutcomes[id] = profile.recommendationOutcomes[id] || { shownCount: 0, acceptedCount: 0, lastShownAt: null };
235
+ profile.recommendationOutcomes[id].shownCount += 1;
236
+ profile.recommendationOutcomes[id].lastShownAt = nowIso();
237
+ if (recommendationDecision.nextBestAction && recommendationDecision.nextBestAction.includes(r.text || "")) {
238
+ profile.recommendationOutcomes[id].acceptedCount += 1;
239
+ }
240
+ });
241
+ }
242
+
243
+ profile.memoryScore = computeMemoryScore(profile);
244
+
245
+ const snapshot = {
246
+ sessionId,
247
+ savedAt: nowIso(),
248
+ taskType,
249
+ budgetPlan,
250
+ memoryScore: profile.memoryScore,
251
+ hotFiles: profile.hotFiles.slice(0, 5),
252
+ retryClusters: profile.retryClusters,
253
+ riskZones: profile.riskZones.slice(0, 5),
254
+ };
255
+
256
+ profile.sessionSnapshots = [...(profile.sessionSnapshots || []).slice(-49), snapshot];
257
+
258
+ saveMemoryProfile(cwd, profile);
259
+ safeWriteJson(cwd, `.claude/cco/memory/shards/${sessionId}.json`, snapshot);
260
+ safeWriteJson(cwd, `.claude/cco/memory/snapshots/${sessionId}.json`, {
261
+ savedAt: nowIso(),
262
+ profileVersion: profile.version,
263
+ memoryScore: profile.memoryScore,
264
+ budgetPlan,
265
+ recommendationDecision: recommendationDecision || null,
266
+ });
267
+
268
+ return {
269
+ memoryProfile: profile,
270
+ contextBudgetPlan: budgetPlan,
271
+ taskType,
272
+ };
273
+ }
274
+
275
+ function buildMemorySummary(profile) {
276
+ return {
277
+ projectId: profile.projectId,
278
+ updatedAt: profile.updatedAt,
279
+ memoryScore: profile.memoryScore,
280
+ hotFiles: (profile.hotFiles || []).slice(0, 5),
281
+ riskZones: (profile.riskZones || []).slice(0, 5),
282
+ retryClusters: profile.retryClusters || [],
283
+ };
284
+ }
285
+
286
+ function buildMemoryEvidence(traceId, profile) {
287
+ const evidence = [];
288
+ const hotPaths = (profile.hotFiles || []).map((h) => h.path);
289
+ const risky = (profile.riskZones || []).map((r) => r.reasonCode);
290
+ const retries = (profile.retryClusters || []).reduce((a, b) => a + Number(b.count || 0), 0);
291
+
292
+ if (traceId === "REC_MCP_OUTPUT_CAP") {
293
+ const p95 = percentile(profile.signalDistributions.outputBytes || [], 95);
294
+ evidence.push(`outputBytesP95=${p95}`);
295
+ }
296
+
297
+ if (traceId === "REC_SECURITY_AUDIT" && risky.length) evidence.push(`riskCodes=${risky.slice(0, 3).join(",")}`);
298
+ if (traceId === "REC_LOOP_REPLAN" && retries > 0) evidence.push(`retryClustersTotal=${retries}`);
299
+ if (["REC_TRUST_SURFACE_REVIEW", "REC_WORKTREE_POLICY_RESCAN"].includes(traceId) && risky.length) {
300
+ evidence.push(`riskZoneCount=${risky.length}`);
301
+ }
302
+ if (traceId === "REC_PRECOMPACT_EVIDENCE" && hotPaths.length) evidence.push(`hotFiles=${hotPaths.slice(0, 3).join(",")}`);
303
+
304
+ return evidence;
305
+ }
306
+
307
+ function applyDecay(profile) {
308
+ const cutoff = Date.now() - TTL_DAYS * 24 * 60 * 60 * 1000;
309
+ profile.sessionSnapshots = (profile.sessionSnapshots || []).filter((s) => {
310
+ const ts = Date.parse(s.savedAt || 0);
311
+ return Number.isFinite(ts) && ts >= cutoff;
312
+ });
313
+
314
+ const byId = profile.recommendationOutcomes || {};
315
+ Object.keys(byId).forEach((id) => {
316
+ const last = Date.parse(byId[id].lastShownAt || 0);
317
+ if (!Number.isFinite(last) || last < cutoff) delete byId[id];
318
+ });
319
+
320
+ return profile;
321
+ }
322
+
323
+ module.exports = {
324
+ PROFILE_REL,
325
+ defaultMemoryProfile,
326
+ loadMemoryProfile,
327
+ saveMemoryProfile,
328
+ updateMemoryFromSession,
329
+ buildContextBudgetPlan,
330
+ buildMemorySummary,
331
+ buildMemoryEvidence,
332
+ applyDecay,
333
+ inferTaskType,
334
+ percentile,
335
+ };