codehere 0.1.1 → 0.2.2

package/dist/presentation/cli/commands/status-command.js

@@ -1,32 +1,204 @@
 /**
- * CLI Command: Status
- * Show a concise agent reliability snapshot
+ * CLI Command: status
  *
- * Phase 1: v0.5.0-alpha.0
+ * Growth/audit surface — personal security dashboard.
+ * Shows what Claude Code has been doing, what got blocked, and how your project is doing.
+ *
+ * Usage:
+ *   codehere status           # full dashboard
+ *   codehere status --json    # machine-readable output
+ *   codehere status --trust   # include a quick trust scan
  */
-import { colors, newline } from '../../../ui.js';
-import { getTaskRepository } from '../../../infrastructure/storage/task-repository.js';
+import { readFileSync, existsSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+import { colors, newline, sectionHeader } from '../../../ui.js';
 import { getVersion } from '../../../utils/version.js';
-import { agentFeedbackManager } from '../../../infrastructure/validation/agent-feedback.js';
-export async function executeStatusCommand(options) {
+import { loadProductContext } from '../../../infrastructure/config/product-context.js';
+import { AUDIT_FILE } from '../../../infrastructure/hooks/claude-sdk-hook.js';
+import { analyzeSessions, detectAmplificationAlerts, formatDuration } from '../../../infrastructure/hooks/session-analyzer.js';
+function readAuditLog(maxLines = 5000) {
+    if (!existsSync(AUDIT_FILE))
+        return [];
+    try {
+        const lines = readFileSync(AUDIT_FILE, 'utf-8').split('\n').filter(Boolean);
+        const recent = lines.slice(-maxLines);
+        return recent.map(l => {
+            try {
+                return JSON.parse(l);
+            }
+            catch {
+                return null;
+            }
+        }).filter(Boolean);
+    }
+    catch {
+        return [];
+    }
+}
+function withinHours(timestamp, hours) {
+    return Date.now() - new Date(timestamp).getTime() < hours * 3600 * 1000;
+}
+function timeAgo(timestamp) {
+    const ms = Date.now() - new Date(timestamp).getTime();
+    const mins = Math.floor(ms / 60000);
+    if (mins < 60)
+        return `${mins}m ago`;
+    const hours = Math.floor(mins / 60);
+    if (hours < 24)
+        return `${hours}h ago`;
+    return `${Math.floor(hours / 24)}d ago`;
+}
+// ── helpers ───────────────────────────────────────────────────────────────────
+function extractBlockReason(entry) {
+    try {
+        const input = JSON.parse(entry.toolInput);
+        // Bash: show command description or first 50 chars of command
+        if (input.description)
+            return String(input.description).substring(0, 50);
+        if (input.command)
+            return String(input.command).replace(/\n/g, ' ').substring(0, 50);
+        // Edit/Write: show filename
+        if (input.file_path) {
+            const parts = String(input.file_path).split('/');
+            return parts.slice(-2).join('/');
+        }
+        // MultiEdit: show first filename
+        if (Array.isArray(input.edits) && input.edits[0]?.file_path) {
+            const parts = String(input.edits[0].file_path).split('/');
+            return parts.slice(-2).join('/');
+        }
+    }
+    catch { /* parse failed — truncated JSON, try regex */ }
+    // Fallback: extract file_path or command from truncated JSON via regex
+    const fpMatch = entry.toolInput.match(/"file_path"\s*:\s*"([^"]+)"/);
+    if (fpMatch) {
+        const parts = fpMatch[1].split('/');
+        return parts.slice(-2).join('/');
+    }
+    const cmdMatch = entry.toolInput.match(/"command"\s*:\s*"([^"]{0,60})"/);
+    if (cmdMatch)
+        return cmdMatch[1].replace(/\\n/g, ' ').substring(0, 50);
+    return 'tool call';
+}
+// ── main command ──────────────────────────────────────────────────────────────
+// ── session drill-down ────────────────────────────────────────────────────────
+function renderSessionDrillDown(sessionId, entries) {
+    const sessionEntries = entries.filter(e => e.sessionId === sessionId || e.sessionId?.startsWith(sessionId));
+    if (sessionEntries.length === 0) {
+        console.log(colors.yellow(`No entries found for session: ${sessionId}`));
+        console.log(colors.dim('  Tip: use the first 8+ characters of a session ID from `codehere status --sessions`'));
+        return;
+    }
+    const sorted = [...sessionEntries].sort((a, b) => new Date(a.timestamp).getTime() - new Date(b.timestamp).getTime());
+    const blocked = sorted.filter(e => e.blocked);
+    const critical = sorted.filter(e => e.criticalFindings > 0);
+    const durationMs = new Date(sorted[sorted.length - 1].timestamp).getTime() - new Date(sorted[0].timestamp).getTime();
+    const toolCounts = {};
+    for (const e of sorted) {
+        toolCounts[e.toolName] = (toolCounts[e.toolName] ?? 0) + 1;
+    }
+    sectionHeader(`Session: ${sessionId.substring(0, 16)}…`);
+    newline();
+    console.log(`  ${sorted.length} tool calls · ${blocked.length} blocked · ${critical.length} critical`);
+    console.log(`  Duration: ${Math.round(durationMs / 1000)}s · Started ${timeAgo(sorted[0].timestamp)}`);
+    newline();
+    // Tool breakdown
+    console.log(colors.bold('Tool breakdown:'));
+    const sorted_tools = Object.entries(toolCounts).sort((a, b) => b[1] - a[1]);
+    for (const [tool, count] of sorted_tools) {
+        const bar = '█'.repeat(Math.min(count, 20));
+        const pct = Math.round((count / sorted.length) * 100);
+        console.log(`  ${tool.padEnd(12)} ${String(count).padStart(3)}  ${colors.dim(bar)} ${colors.dim(pct + '%')}`);
+    }
+    newline();
+    // Timeline of blocked calls
+    if (blocked.length > 0) {
+        console.log(colors.bold('Blocked calls:'));
+        for (const entry of blocked) {
+            const time = colors.dim(new Date(entry.timestamp).toLocaleTimeString());
+            const tool = colors.cyan(entry.toolName.padEnd(12));
+            const reason = extractBlockReason(entry);
+            const risk = entry.riskScore > 70 ? colors.red(`risk:${entry.riskScore}`) : colors.yellow(`risk:${entry.riskScore}`);
+            console.log(`  ${colors.red('✗')}  ${time}  ${tool}  ${risk}  ${colors.dim(reason)}`);
+        }
+        newline();
+    }
+    else {
+        console.log(`  ${colors.green('✓')} No blocked calls in this session.`);
+        newline();
+    }
+    // Full timeline (last 20)
+    const toShow = sorted.slice(-20);
+    if (sorted.length > 20) {
+        console.log(colors.dim(`  (showing last 20 of ${sorted.length} calls)`));
+    }
+    console.log(colors.bold('Timeline:'));
+    for (const entry of toShow) {
+        const time = colors.dim(new Date(entry.timestamp).toLocaleTimeString());
+        const tool = (entry.blocked ? colors.red : colors.cyan)(entry.toolName.padEnd(12));
+        const icon = entry.blocked ? colors.red('✗') : entry.criticalFindings > 0 ? colors.yellow('!') : colors.green('✓');
+        const reason = extractBlockReason(entry);
+        console.log(`  ${icon}  ${time}  ${tool}  ${colors.dim(reason)}`);
+    }
+    newline();
+    // Verdict
+    if (blocked.length > 2 && sorted.length > 20) {
+        console.log(colors.red('  ⚠ High block rate in a long session — possible prompt injection in multi-agent chain.'));
+    }
+    else if (blocked.length > 0) {
+        console.log(colors.yellow(`  ${blocked.length} blocked call${blocked.length !== 1 ? 's' : ''} — review the blocked entries above.`));
+    }
+    else if (sorted.length > 50) {
+        console.log(colors.yellow(`  ${sorted.length} calls in one session — check for amplification.`));
+    }
+    else {
+        console.log(colors.green('  Session looks clean.'));
+    }
+    newline();
+}
+export async function executeStatusCommand(options = {}) {
+    const cwd = process.cwd();
     const version = getVersion();
-    if (options?.json) {
+    const entries = readAuditLog();
+    // Session drill-down mode
+    if (options.session) {
+        renderSessionDrillDown(options.session, entries);
+        return;
+    }
+    const last24h = entries.filter(e => withinHours(e.timestamp, 24));
+    const last7d = entries.filter(e => withinHours(e.timestamp, 24 * 7));
+    const stats = (subset) => ({
+        total: subset.length,
+        blocked: subset.filter(e => e.blocked).length,
+        critical: subset.filter(e => e.criticalFindings > 0).length,
+    });
+    const s24 = stats(last24h);
+    const s7d = stats(last7d);
+    const sAll = stats(entries);
+    const productCtx = loadProductContext(cwd);
+    const hookRunning = existsSync(join(homedir(), '.claude', 'settings.json'));
+    const hasSkills = existsSync(join(homedir(), '.claude', 'commands', 'codehere'));
+    // ── JSON mode ──────────────────────────────────────────────────────────────
+    if (options.json) {
         const result = {
-            status: 'ok',
             version,
+            status: 'ok',
+            hooks: {
+                running: hookRunning,
+                stats: { last24h: s24, last7d: s7d, allTime: sAll },
+            },
+            skills: { installed: hasSkills },
+            product: productCtx,
         };
-        if (options?.tasks) {
+        if (options.tasks) {
             try {
+                const { getTaskRepository } = await import('../../../infrastructure/storage/task-repository.js');
                 const taskRepo = getTaskRepository();
                 const tasks = await taskRepo.getAll();
                 result.tasks = tasks.slice(0, 20).map(t => ({
-                    id: t.id,
-                    mode: t.mode,
-                    status: t.status,
-                    riskTier: t.riskTier,
-                    environment: t.environment,
-                    goal: t.goal,
-                    createdAt: t.createdAt,
+                    id: t.id, mode: t.mode, status: t.status,
+                    riskTier: t.riskTier, environment: t.environment, goal: t.goal, createdAt: t.createdAt,
                 }));
                 result.taskCount = tasks.length;
             }
@@ -38,50 +210,128 @@ export async function executeStatusCommand(options) {
         console.log(JSON.stringify(result, null, 2));
         return;
     }
-    console.log(colors.bold('Codehere Status'));
-    console.log(`Version: ${version}`);
-    console.log('Status: Running');
-    if (options?.tasks) {
+    // ── Human dashboard ────────────────────────────────────────────────────────
+    sectionHeader('Codehere Status');
+    newline();
+    // Version + hooks
+    const hookStatus = hookRunning
+        ? colors.green('✓') + ' Hooks running'
+        : colors.yellow('⚠') + ' Hooks not installed';
+    console.log(`  Version: ${version}  ·  Status: Running  ·  ${hookStatus}`);
+    newline();
+    // Product brain
+    if (productCtx) {
+        const riskColor = productCtx.riskLevel === 'critical' ? colors.red
+            : productCtx.riskLevel === 'high' ? colors.yellow
+                : productCtx.riskLevel === 'medium' ? colors.cyan
+                    : colors.green;
+        const parts = [
+            colors.bold(productCtx.name),
+            `risk: ${riskColor(productCtx.riskLevel)}`,
+            productCtx.productionApp ? colors.yellow('production') : '',
+        ].filter(Boolean);
+        console.log('  ' + parts.join(colors.dim('  ·  ')));
+        newline();
+    }
+    if (entries.length === 0) {
+        console.log(colors.dim('  No activity yet. Run Claude Code with hooks installed to start tracking.'));
+        newline();
+    }
+    else {
+        // Activity table
+        // Pad number BEFORE applying color, so ANSI codes don't break alignment
+        const fmtNum = (n, color) => {
+            const padded = String(n).padStart(10);
+            return color && n > 0 ? color(padded) : colors.dim(padded);
+        };
+        const labelW = 12;
+        const label = (s) => s.padEnd(labelW);
+        const header = `  ${label('')}${'Last 24h'.padStart(10)}${'This week'.padStart(10)}${'All time'.padStart(10)}`;
+        console.log(colors.dim(header));
+        console.log(colors.dim(`  ${'-'.repeat(labelW + 30)}`));
+        console.log(`  ${label('Scans')}${fmtNum(s24.total)}${fmtNum(s7d.total)}${fmtNum(sAll.total)}`);
+        console.log(`  ${label('Blocked')}${fmtNum(s24.blocked, colors.red)}${fmtNum(s7d.blocked, colors.red)}${fmtNum(sAll.blocked, colors.red)}`);
+        if (sAll.critical > 0) {
+            console.log(`  ${label('Critical')}${fmtNum(s24.critical, colors.red)}${fmtNum(s7d.critical, colors.red)}${fmtNum(sAll.critical, colors.red)}`);
+        }
+        newline();
+        // Recent blocks
+        const recentBlocked = [...entries].reverse().filter(e => e.blocked).slice(0, 5);
+        if (recentBlocked.length > 0) {
+            console.log(colors.dim('  RECENT BLOCKS'));
+            for (const entry of recentBlocked) {
+                const tool = colors.cyan(entry.toolName.padEnd(10));
+                const time = colors.dim(timeAgo(entry.timestamp).padEnd(8));
+                const reason = extractBlockReason(entry);
+                console.log(`  ${colors.red('✗')}  ${time}  ${tool}  ${colors.dim(reason)}`);
+            }
+            newline();
+        }
+        // If nothing was ever blocked, celebrate
+        if (sAll.blocked === 0) {
+            console.log(`  ${colors.green('✓')} Nothing blocked yet — all scans clean.`);
+            newline();
+        }
+    }
+    // Skills status
+    console.log(colors.dim('  ─────'));
+    if (hasSkills) {
+        console.log(colors.dim('  /codehere:trust  /codehere:report  /codehere:audit  /codehere:hook-status'));
+    }
+    else {
+        console.log(colors.dim('  Run codehere hook install to add slash commands'));
+    }
+    newline();
+    // Multi-agent session analysis
+    if (options.sessions && entries.length > 0) {
+        const allSessions = analyzeSessions(entries);
+        const sessions = allSessions.filter(s => s.sessionId !== 'unknown');
+        const alerts = detectAmplificationAlerts(sessions);
+        console.log(colors.bold('Sessions (last 10):'));
+        for (const s of sessions.slice(0, 10)) {
+            const sid = s.sessionId.substring(0, 8);
+            const risk = s.amplificationRisk === 'high' ? colors.red('high')
+                : s.amplificationRisk === 'medium' ? colors.yellow('med')
+                    : colors.green('low');
+            const blocked = s.blockedCalls > 0 ? colors.red(` ${s.blockedCalls} blocked`) : '';
+            const dur = formatDuration(s.durationMs);
+            console.log(`  ${colors.dim(sid)}  ${String(s.totalCalls).padStart(4)} calls  ${dur.padEnd(6)}  risk: ${risk}${blocked}`);
+        }
+        newline();
+        if (alerts.length > 0) {
+            console.log(colors.bold('Amplification alerts:'));
+            for (const alert of alerts) {
+                const icon = alert.risk === 'high' ? colors.red('!') : colors.yellow('!');
+                console.log(`  ${icon} ${colors.dim(alert.sessionId.substring(0, 8))}  ${alert.message}`);
+            }
+            newline();
+        }
+        else {
+            console.log(colors.dim('  No amplification patterns detected.'));
+            newline();
+        }
+    }
+    // Removed: Cost router jargon — not meaningful to users
+    // Tasks table (--tasks flag)
+    if (options.tasks) {
         newline();
         console.log(colors.bold('Recent tasks (experimental)'));
         console.log(colors.dim('Task storage: .codehere/tasks.jsonl'));
         newline();
         try {
+            const { getTaskRepository } = await import('../../../infrastructure/storage/task-repository.js');
             const taskRepo = getTaskRepository();
             const tasks = await taskRepo.getAll();
             if (tasks.length === 0) {
                 console.log(colors.dim('No tasks found. Run "codehere suggest" or "codehere run" to create tasks.'));
             }
             else {
-                // Simple table format without box borders
-                const header = [
-                    padRight('ID', 10),
-                    padRight('Mode', 8),
-                    padRight('Status', 12),
-                    padRight('Risk', 4),
-                    padRight('Env', 6),
-                    'Goal',
-                ].join('  ');
-                const separator = [
-                    '-'.repeat(10),
-                    '-'.repeat(8),
-                    '-'.repeat(12),
-                    '-'.repeat(4),
-                    '-'.repeat(6),
-                    '-'.repeat(30),
-                ].join('  ');
-                console.log(colors.dim(header));
-                console.log(colors.dim(separator));
+                const pad = (s, n) => s.length >= n ? s.substring(0, n) : s + ' '.repeat(n - s.length);
+                const trunc = (s, n) => s.length <= n ? s : s.substring(0, n - 1) + '…';
+                console.log(colors.dim([pad('ID', 10), pad('Mode', 8), pad('Status', 12), pad('Risk', 4), pad('Env', 6), 'Goal'].join('  ')));
+                console.log(colors.dim(['-'.repeat(10), '-'.repeat(8), '-'.repeat(12), '-'.repeat(4), '-'.repeat(6), '-'.repeat(30)].join('  ')));
                 tasks.slice(0, 10).forEach(task => {
-                    const row = [
-                        padRight(task.id.substring(0, 8) + '..', 10),
-                        padRight(task.mode, 8),
-                        padRight(task.status, 12),
-                        padRight(task.riskTier.toUpperCase(), 4),
-                        padRight(task.environment.substring(0, 6), 6),
-                        truncate(task.goal, 30),
-                    ].join('  ');
-                    console.log(row);
+                    console.log([pad(task.id.substring(0, 8) + '..', 10), pad(task.mode, 8), pad(task.status, 12), pad(task.riskTier.toUpperCase(), 4), pad(task.environment.substring(0, 6), 6), trunc(task.goal, 30)].join('  '));
                 });
                 if (tasks.length > 10) {
                     newline();
@@ -89,79 +339,14 @@ export async function executeStatusCommand(options) {
                 }
             }
         }
-        catch (err) {
+        catch {
             console.log(colors.dim('No tasks found. Run "codehere suggest" or "codehere run" to create tasks.'));
         }
     }
-    if (options?.env) {
-        newline();
-        console.log(colors.bold('Environment:'));
-        console.log(`  Node: ${process.version}`);
-        console.log(`  Platform: ${process.platform}`);
-        console.log(`  CWD: ${process.cwd()}`);
+    // Quick trust scan (opt-in)
+    if (options.trust) {
+        const { executeTrustCommand } = await import('./trust-command.js');
+        await executeTrustCommand(undefined, {});
     }
-    if (options?.track) {
-        newline();
-        console.log(colors.bold('What Works:'));
-        const allFeedback = agentFeedbackManager.getAllFeedback(500);
-        if (allFeedback.length === 0) {
-            console.log(colors.dim('No execution data yet. Run commands to start tracking.'));
-        }
-        else {
-            // Group by operation (command)
-            const byOperation = {};
-            for (const record of allFeedback) {
-                const op = record.operation || 'unknown';
-                if (!byOperation[op]) {
-                    byOperation[op] = { success: 0, failure: 0, total: 0 };
-                }
-                byOperation[op].total++;
-                if (record.outcome === 'success') {
-                    byOperation[op].success++;
-                }
-                else if (record.outcome === 'failure') {
-                    byOperation[op].failure++;
-                }
-            }
-            // Sort by total usage
-            const sorted = Object.entries(byOperation)
-                .sort((a, b) => b[1].total - a[1].total)
-                .slice(0, 10);
-            if (sorted.length > 0) {
-                const header = [
-                    padRight('Command', 20),
-                    padRight('Success', 10),
-                    padRight('Failed', 10),
-                    padRight('Total', 8),
-                    'Rate',
-                ].join('  ');
-                console.log(colors.dim(header));
-                console.log(colors.dim('-'.repeat(70)));
-                for (const [op, stats] of sorted) {
-                    const rate = stats.total > 0 ? ((stats.success / stats.total) * 100).toFixed(0) : '0';
-                    const rateColor = parseFloat(rate) >= 80 ? colors.green : parseFloat(rate) >= 50 ? colors.yellow : colors.red;
-                    const row = [
-                        padRight(op, 20),
-                        padRight(colors.green(String(stats.success)), 10),
-                        padRight(colors.red(String(stats.failure)), 10),
-                        padRight(String(stats.total), 8),
-                        rateColor(`${rate}%`),
-                    ].join('  ');
-                    console.log(row);
-                }
-                newline();
-                console.log(colors.dim(`Based on ${allFeedback.length} recent executions`));
-            }
-        }
-    }
-    newline();
-}
-function padRight(str, len) {
-    return str.length >= len ? str.substring(0, len) : str + ' '.repeat(len - str.length);
-}
-function truncate(str, maxLen) {
-    if (str.length <= maxLen)
-        return str;
-    return str.substring(0, maxLen - 1) + '…';
 }
 //# sourceMappingURL=status-command.js.map