codecruise 0.1.0

package/config/hooks/activity-log.sh

@@ -0,0 +1,187 @@
+#!/bin/bash
+# activity-log.sh — Human-readable activity log for tail -f
+#
+# PostToolUse hook that writes to .codecruise/activity.log
+# Designed for real-time monitoring: tail -f .codecruise/activity.log
+#
+# Log format:
+#   [YYYY-MM-DD HH:MM:SS] <emoji> <message>
+#   [YYYY-MM-DD HH:MM:SS]    └─ <detail>
+#
+# Configuration:
+#   CODECRUISE_ACTIVITY_LOG - Custom log path (default: .codecruise/activity.log)
+#   CODECRUISE_LOG_ROTATION - Max size in bytes (default: 1048576 = 1MB)
+
+set -e
+
+# Configuration
+ACTIVITY_LOG="${CODECRUISE_ACTIVITY_LOG:-.codecruise/activity.log}"
+MAX_LOG_SIZE="${CODECRUISE_LOG_ROTATION:-1048576}"  # 1MB default
+
+# Ensure directory exists
+mkdir -p "$(dirname "$ACTIVITY_LOG")"
+
+# Read input from stdin (hook receives JSON)
+INPUT=$(cat)
+
+# Extract event data
+TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name // empty')
+TOOL_RESULT=$(echo "$INPUT" | jq -r '.tool_result // empty' 2>/dev/null || echo "")
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null || echo "")
+
+# Get timestamp
+TIMESTAMP=$(date "+%Y-%m-%d %H:%M:%S")
+
+# Helper: append to activity log
+log() {
+  echo "[$TIMESTAMP] $1" >> "$ACTIVITY_LOG"
+}
+
+# Helper: append indented detail
+log_detail() {
+  echo "[$TIMESTAMP]    $1" >> "$ACTIVITY_LOG"
+}
+
+# Log rotation: rotate if file exceeds max size
+rotate_log() {
+  if [[ -f "$ACTIVITY_LOG" ]]; then
+    local size
+    # macOS uses -f%z, Linux uses -c%s
+    size=$(stat -f%z "$ACTIVITY_LOG" 2>/dev/null || stat -c%s "$ACTIVITY_LOG" 2>/dev/null || echo 0)
+    if [[ "$size" -gt "$MAX_LOG_SIZE" ]]; then
+      mv "$ACTIVITY_LOG" "${ACTIVITY_LOG}.1"
+      log "━━━ LOG ROTATED ━━━"
+    fi
+  fi
+}
+
+# Detect event type from command output patterns
+detect_event() {
+  local cmd="$1"
+  local result="$2"
+
+  # Session events (detected from progress.yaml changes)
+  if [[ "$cmd" == *"progress.yaml"* ]] && [[ "$result" == *"status: running"* ]]; then
+    echo "session_start"
+    return
+  fi
+
+  if [[ "$cmd" == *"progress.yaml"* ]] && [[ "$result" == *"status: paused"* ]]; then
+    echo "session_pause"
+    return
+  fi
+
+  # Test results
+  if [[ "$cmd" == *"test"* ]] || [[ "$cmd" == *"jest"* ]] || [[ "$cmd" == *"vitest"* ]] || [[ "$cmd" == *"pytest"* ]]; then
+    if [[ "$result" == *"PASS"* ]] || [[ "$result" == *"passed"* ]]; then
+      echo "test_pass"
+    elif [[ "$result" == *"FAIL"* ]] || [[ "$result" == *"failed"* ]]; then
+      echo "test_fail"
+    fi
+    return
+  fi
+
+  # Lint results
+  if [[ "$cmd" == *"lint"* ]] || [[ "$cmd" == *"eslint"* ]] || [[ "$cmd" == *"biome"* ]]; then
+    if [[ "$result" == *"error"* ]] || [[ "$result" == *"Error"* ]]; then
+      echo "lint_fail"
+    else
+      echo "lint_pass"
+    fi
+    return
+  fi
+
+  # Git commits
+  if [[ "$cmd" == git\ commit* ]]; then
+    echo "commit"
+    return
+  fi
+
+  # Quality verification
+  if [[ "$cmd" == *"quality"* ]] || [[ "$cmd" == *"verify"* ]]; then
+    echo "verify"
+    return
+  fi
+
+  echo "unknown"
+}
+
+# Extract TODO ID from context if available
+get_current_todo() {
+  if [[ -f "progress.yaml" ]]; then
+    grep -oE "todo-[0-9]+\.[0-9]+[a-z]-[0-9]+" progress.yaml 2>/dev/null | head -1 || echo ""
+  else
+    echo ""
+  fi
+}
+
+# Main logging logic
+main() {
+  # Rotate if needed
+  rotate_log
+
+  # Skip if not a Bash command (we mainly log execution events)
+  if [[ "$TOOL_NAME" != "Bash" ]]; then
+    exit 0
+  fi
+
+  # Skip if no command
+  if [[ -z "$COMMAND" ]]; then
+    exit 0
+  fi
+
+  local event
+  event=$(detect_event "$COMMAND" "$TOOL_RESULT")
+  local todo
+  todo=$(get_current_todo)
+
+  case "$event" in
+    "session_start")
+      log "━━━ SESSION START ━━━"
+      ;;
+
+    "session_pause")
+      log "⏸ PAUSE"
+      log "━━━ SESSION PAUSE ━━━"
+      ;;
+
+    "test_pass")
+      log_detail "└─ ✓ TEST PASS"
+      ;;
+
+    "test_fail")
+      local error_msg
+      error_msg=$(echo "$TOOL_RESULT" | grep -oE "(FAIL|Error|failed).*" | head -1 | cut -c1-60)
+      log_detail "└─ ✗ TEST FAIL: ${error_msg:-unknown error}"
+      ;;
+
+    "lint_pass")
+      log_detail "└─ ✓ LINT PASS"
+      ;;
+
+    "lint_fail")
+      log_detail "└─ ✗ LINT FAIL"
+      ;;
+
+    "commit")
+      local commit_hash
+      commit_hash=$(echo "$TOOL_RESULT" | grep -oE "[a-f0-9]{7,}" | head -1 || echo "???")
+      local commit_msg
+      commit_msg=$(echo "$COMMAND" | grep -oP "(?<=-m ['\"])[^'\"]+")
+      log "✓ COMMIT $commit_hash: ${commit_msg:0:50}"
+      ;;
+
+    "verify")
+      log_detail "└─ VERIFY complete"
+      ;;
+
+    *)
+      # Don't log unknown events to avoid noise
+      ;;
+  esac
+}
+
+# Run main
+main
+
+exit 0

package/config/hooks/anti-rationalize.sh

@@ -0,0 +1,52 @@
+#!/bin/bash
+# Stop hook - prevents Claude from declaring victory with incomplete work
+# From Trail of Bits research: "Claude has a tendency to declare victory while leaving work undone."
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+# Load enforcement tracking
+if [[ -f "$SCRIPT_DIR/track-enforcement.sh" ]]; then
+  source "$SCRIPT_DIR/track-enforcement.sh"
+elif [[ -f "$HOME/.claude/hooks/track-enforcement.sh" ]]; then
+  source "$HOME/.claude/hooks/track-enforcement.sh"
+else
+  track_enforcement() { :; }
+fi
+
+INPUT=$(cat)
+RESPONSE=$(echo "$INPUT" | jq -r '.response // empty')
+
+# Patterns that indicate rationalization of incomplete work
+PATTERNS=(
+  "pre-existing"
+  "out of scope"
+  "leave.*for.*follow-up"
+  "too many issues"
+  "will address later"
+  "beyond the scope"
+  "for now.*sufficient"
+  "good enough for"
+  "can be improved later"
+  "defer.*to.*next"
+  "revisit.*later"
+  "skip.*for now"
+  "not critical"
+  "low priority.*skip"
+)
+
+# Check each pattern
+for pattern in "${PATTERNS[@]}"; do
+  if echo "$RESPONSE" | grep -qi "$pattern"; then
+    track_enforcement "rationalization_caught" "detected: '$pattern'" "anti-rationalize"
+    cat <<EOF
+{
+  "decision": "block",
+  "reason": "Rationalization detected: '$pattern'. Please complete the task fully or explicitly document what remains incomplete with specific next steps. Use /found to log discovered work that must be deferred."
+}
+EOF
+    exit 0
+  fi
+done
+
+# Allow the stop
+exit 0

package/config/hooks/capture-verification.sh

@@ -0,0 +1,112 @@
+#!/bin/bash
+# capture-verification.sh
+# Captures output from quality commands for verified execution
+# Called by Claude Code hooks after quality commands run
+
+set -e
+
+VERIFY_DIR=".codecruise/verification"
+mkdir -p "$VERIFY_DIR"
+
+# Capture timestamp
+TIMESTAMP=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+echo "$TIMESTAMP" > "$VERIFY_DIR/timestamp.txt"
+
+# Initialize summary
+SUMMARY_FILE="$VERIFY_DIR/summary.json"
+
+# Function to run and capture a command
+capture_command() {
+  local name=$1
+  local cmd=$2
+  local output_file="$VERIFY_DIR/${name}.txt"
+  local exit_file="$VERIFY_DIR/${name}-exit.txt"
+
+  if eval "$cmd" > "$output_file" 2>&1; then
+    echo "0" > "$exit_file"
+  else
+    echo "$?" > "$exit_file"
+  fi
+}
+
+# Detect package manager
+if [ -f "pnpm-lock.yaml" ]; then
+  PM="pnpm"
+elif [ -f "yarn.lock" ]; then
+  PM="yarn"
+elif [ -f "package-lock.json" ]; then
+  PM="npm"
+else
+  PM="npm"
+fi
+
+# Run lint if available
+if grep -q '"lint"' package.json 2>/dev/null; then
+  capture_command "lint" "$PM run lint"
+  LINT_EXIT=$(cat "$VERIFY_DIR/lint-exit.txt")
+  LINT_ERRORS=$(grep -c "error" "$VERIFY_DIR/lint.txt" 2>/dev/null || echo "0")
+  LINT_WARNINGS=$(grep -c "warning" "$VERIFY_DIR/lint.txt" 2>/dev/null || echo "0")
+else
+  LINT_EXIT="-1"
+  LINT_ERRORS="0"
+  LINT_WARNINGS="0"
+  echo "Lint script not found" > "$VERIFY_DIR/lint.txt"
+fi
+
+# Run typecheck if TypeScript project
+if [ -f "tsconfig.json" ]; then
+  if grep -q '"typecheck"' package.json 2>/dev/null; then
+    capture_command "typecheck" "$PM run typecheck"
+  else
+    capture_command "typecheck" "npx tsc --noEmit"
+  fi
+  TSC_EXIT=$(cat "$VERIFY_DIR/typecheck-exit.txt")
+  TSC_ERRORS=$(grep -c "error TS" "$VERIFY_DIR/typecheck.txt" 2>/dev/null || echo "0")
+else
+  TSC_EXIT="-1"
+  TSC_ERRORS="0"
+  echo "Not a TypeScript project" > "$VERIFY_DIR/typecheck.txt"
+fi
+
+# Run tests if available
+if grep -q '"test"' package.json 2>/dev/null; then
+  capture_command "test" "$PM test -- --reporter=verbose 2>&1 || $PM test 2>&1"
+  TEST_EXIT=$(cat "$VERIFY_DIR/test-exit.txt")
+
+  # Try to parse test results (varies by test runner)
+  TEST_PASSED=$(grep -oE "[0-9]+ passed" "$VERIFY_DIR/test.txt" | grep -oE "[0-9]+" | head -1 || echo "0")
+  TEST_FAILED=$(grep -oE "[0-9]+ failed" "$VERIFY_DIR/test.txt" | grep -oE "[0-9]+" | head -1 || echo "0")
+  TEST_TOTAL=$((TEST_PASSED + TEST_FAILED))
+else
+  TEST_EXIT="-1"
+  TEST_PASSED="0"
+  TEST_FAILED="0"
+  TEST_TOTAL="0"
+  echo "Test script not found" > "$VERIFY_DIR/test.txt"
+fi
+
+# Generate summary JSON
+cat << EOF > "$SUMMARY_FILE"
+{
+  "timestamp": "$TIMESTAMP",
+  "lint": {
+    "exit_code": $LINT_EXIT,
+    "errors": $LINT_ERRORS,
+    "warnings": $LINT_WARNINGS
+  },
+  "typecheck": {
+    "exit_code": $TSC_EXIT,
+    "errors": $TSC_ERRORS
+  },
+  "tests": {
+    "exit_code": $TEST_EXIT,
+    "total": $TEST_TOTAL,
+    "passed": $TEST_PASSED,
+    "failed": $TEST_FAILED
+  }
+}
+EOF
+
+echo "---"
+echo "Verification complete. Results saved to $VERIFY_DIR/"
+echo "Summary: lint=$LINT_EXIT, tsc=$TSC_EXIT, test=$TEST_EXIT"

package/config/hooks/collect-metrics.sh

@@ -0,0 +1,135 @@
+#!/bin/bash
+# PostToolUse hook - Collects metrics for codecruise execution
+#
+# P2: Tracks success rates, retry rates, intervention rates
+#
+# Metrics collected:
+# - TODO start/complete/fail/skip events
+# - Retry counts
+# - Duration per TODO
+# - Quality gate results
+# - Human interventions (when ask mode used)
+#
+# Stores metrics in .codecruise/metrics/
+
+METRICS_DIR=".codecruise/metrics"
+METRICS_FILE="$METRICS_DIR/events.jsonl"
+SUMMARY_FILE="$METRICS_DIR/summary.json"
+
+# Create metrics directory if needed
+mkdir -p "$METRICS_DIR"
+
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty')
+TOOL_INPUT=$(echo "$INPUT" | jq -r '.tool_input // {}')
+TOOL_RESULT=$(echo "$INPUT" | jq -r '.tool_result // empty')
+TIMESTAMP=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+
+# Helper to append event
+append_event() {
+  local event_type="$1"
+  local data="$2"
+
+  echo "{\"timestamp\":\"$TIMESTAMP\",\"event\":\"$event_type\",\"data\":$data}" >> "$METRICS_FILE"
+}
+
+# Detect TODO-related events based on tool usage patterns
+
+# Track Bash commands (test runs, quality checks)
+if [[ "$TOOL" == "Bash" ]]; then
+  COMMAND=$(echo "$TOOL_INPUT" | jq -r '.command // empty')
+
+  # Detect test runs
+  if echo "$COMMAND" | grep -qE "(npm|pnpm|yarn|bun) (run )?(test|vitest|jest)"; then
+    # Check if tests passed or failed based on exit code
+    EXIT_CODE=$(echo "$TOOL_RESULT" | grep -oE "exit code:? [0-9]+" | grep -oE "[0-9]+" | tail -1 || echo "0")
+
+    if [[ "$EXIT_CODE" == "0" ]]; then
+      append_event "test_pass" "{\"command\":\"$COMMAND\"}"
+    else
+      append_event "test_fail" "{\"command\":\"$COMMAND\",\"exit_code\":$EXIT_CODE}"
+    fi
+  fi
+
+  # Detect lint runs
+  if echo "$COMMAND" | grep -qE "(npm|pnpm|yarn|bun) (run )?(lint|eslint)"; then
+    EXIT_CODE=$(echo "$TOOL_RESULT" | grep -oE "exit code:? [0-9]+" | grep -oE "[0-9]+" | tail -1 || echo "0")
+
+    if [[ "$EXIT_CODE" == "0" ]]; then
+      append_event "lint_pass" "{\"command\":\"$COMMAND\"}"
+    else
+      append_event "lint_fail" "{\"command\":\"$COMMAND\",\"exit_code\":$EXIT_CODE}"
+    fi
+  fi
+
+  # Detect commits
+  if echo "$COMMAND" | grep -qE "git commit"; then
+    append_event "commit" "{\"command\":\"$COMMAND\"}"
+  fi
+fi
+
+# Track file edits (implementation activity)
+if [[ "$TOOL" == "Write" || "$TOOL" == "Edit" ]]; then
+  FILE_PATH=$(echo "$TOOL_INPUT" | jq -r '.file_path // empty')
+
+  # Categorize file type
+  if [[ "$FILE_PATH" == *.test.* || "$FILE_PATH" == *.spec.* ]]; then
+    append_event "test_written" "{\"file\":\"$FILE_PATH\"}"
+  elif [[ "$FILE_PATH" == *.ts || "$FILE_PATH" == *.tsx || "$FILE_PATH" == *.js || "$FILE_PATH" == *.jsx ]]; then
+    append_event "code_written" "{\"file\":\"$FILE_PATH\"}"
+  fi
+fi
+
+# Update summary periodically (every 10 events)
+EVENT_COUNT=$(wc -l < "$METRICS_FILE" 2>/dev/null || echo "0")
+if (( EVENT_COUNT % 10 == 0 )); then
+  # Calculate summary statistics
+  TOTAL_EVENTS=$EVENT_COUNT
+  TEST_PASSES=$(grep -c '"event":"test_pass"' "$METRICS_FILE" 2>/dev/null || echo "0")
+  TEST_FAILS=$(grep -c '"event":"test_fail"' "$METRICS_FILE" 2>/dev/null || echo "0")
+  LINT_PASSES=$(grep -c '"event":"lint_pass"' "$METRICS_FILE" 2>/dev/null || echo "0")
+  LINT_FAILS=$(grep -c '"event":"lint_fail"' "$METRICS_FILE" 2>/dev/null || echo "0")
+  COMMITS=$(grep -c '"event":"commit"' "$METRICS_FILE" 2>/dev/null || echo "0")
+  TESTS_WRITTEN=$(grep -c '"event":"test_written"' "$METRICS_FILE" 2>/dev/null || echo "0")
+  CODE_WRITTEN=$(grep -c '"event":"code_written"' "$METRICS_FILE" 2>/dev/null || echo "0")
+
+  # Calculate rates
+  TOTAL_TESTS=$((TEST_PASSES + TEST_FAILS))
+  if (( TOTAL_TESTS > 0 )); then
+    TEST_SUCCESS_RATE=$(echo "scale=2; $TEST_PASSES * 100 / $TOTAL_TESTS" | bc)
+  else
+    TEST_SUCCESS_RATE="N/A"
+  fi
+
+  TOTAL_LINTS=$((LINT_PASSES + LINT_FAILS))
+  if (( TOTAL_LINTS > 0 )); then
+    LINT_SUCCESS_RATE=$(echo "scale=2; $LINT_PASSES * 100 / $TOTAL_LINTS" | bc)
+  else
+    LINT_SUCCESS_RATE="N/A"
+  fi
+
+  cat << EOF > "$SUMMARY_FILE"
+{
+  "updated_at": "$TIMESTAMP",
+  "total_events": $TOTAL_EVENTS,
+  "tests": {
+    "passes": $TEST_PASSES,
+    "fails": $TEST_FAILS,
+    "success_rate": "$TEST_SUCCESS_RATE%"
+  },
+  "lint": {
+    "passes": $LINT_PASSES,
+    "fails": $LINT_FAILS,
+    "success_rate": "$LINT_SUCCESS_RATE%"
+  },
+  "activity": {
+    "commits": $COMMITS,
+    "tests_written": $TESTS_WRITTEN,
+    "code_written": $CODE_WRITTEN
+  }
+}
+EOF
+fi
+
+# Always exit successfully - metrics are passive
+exit 0

package/config/hooks/enforce-file-scope.sh

@@ -0,0 +1,75 @@
+#!/bin/bash
+# PreToolUse hook - blocks edits outside owned file scope
+# Essential for parallel execution with git worktrees
+
+INPUT=$(cat)
+TOOL=$(echo "$INPUT" | jq -r '.tool_name // empty')
+FILE=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty')
+
+# Skip if not a file operation
+if [[ "$TOOL" != "Edit" && "$TOOL" != "Write" ]]; then
+  exit 0
+fi
+
+# Skip if no file path
+if [[ -z "$FILE" ]]; then
+  exit 0
+fi
+
+# Check for scope file
+SCOPE_FILE=".claude/file_scope.txt"
+if [[ ! -f "$SCOPE_FILE" ]]; then
+  # No scope restriction - allow all
+  exit 0
+fi
+
+# Normalize file path (remove leading ./)
+FILE="${FILE#./}"
+
+# Check if file matches any pattern in scope
+MATCH=false
+while IFS= read -r pattern || [[ -n "$pattern" ]]; do
+  # Skip empty lines and comments
+  [[ -z "$pattern" || "$pattern" == \#* ]] && continue
+
+  # Trim whitespace
+  pattern=$(echo "$pattern" | xargs)
+
+  # Handle glob patterns
+  # Convert glob to regex-like matching
+  if [[ "$FILE" == $pattern ]]; then
+    MATCH=true
+    break
+  fi
+
+  # Also check if file is under a directory pattern
+  if [[ "$pattern" == *"/**/*" ]]; then
+    dir="${pattern%/**/*}"
+    if [[ "$FILE" == "$dir"/* ]]; then
+      MATCH=true
+      break
+    fi
+  elif [[ "$pattern" == *"/*" ]]; then
+    dir="${pattern%/*}"
+    if [[ "$FILE" == "$dir"/* ]]; then
+      MATCH=true
+      break
+    fi
+  fi
+done < "$SCOPE_FILE"
+
+if [[ "$MATCH" == "false" ]]; then
+  SCOPE_CONTENT=$(cat "$SCOPE_FILE" | grep -v '^#' | grep -v '^$' | head -5 | tr '\n' ', ')
+  cat <<EOF
+{
+  "hookSpecificOutput": {
+    "hookEventName": "PreToolUse",
+    "permissionDecision": "deny",
+    "permissionDecisionReason": "File '$FILE' is outside your file scope. Your scope: $SCOPE_CONTENT. This prevents conflicts during parallel execution. If you need to modify this file, coordinate with the owner or update .claude/file_scope.txt."
+  }
+}
+EOF
+  exit 0
+fi
+
+exit 0