codeloop-mcp-server 0.1.50 → 0.1.51

package/dist/auth/critical_floors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"critical_floors.d.ts","sourceRoot":"","sources":["../../src/auth/critical_floors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,EAwB1C,CAAC"}
+{"version":3,"file":"critical_floors.d.ts","sourceRoot":"","sources":["../../src/auth/critical_floors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,EA6B1C,CAAC"}

package/dist/auth/critical_floors.js

@@ -60,5 +60,9 @@ export const CRITICAL_FLOORS = [
         min_version: "0.1.50",
         reason: "WPF / desktop final-mile fixes — pre-0.1.50 builds returned `(undefined, undefined)` when codeloop_interact was called with `text` / `role` / `automation_id` selectors instead of raw x/y on Windows desktop targets (every WPF tab/list-item click missed because the runner had no UIA tree walker for selectors), accepted weak cross-run design_compare matches and scored unrelated screens at 0% (e.g. `10-led-bom_*` paired with `led-design-bom-add-component`), wrote screenshot artifacts under the user's HOME folder when project_dir was omitted on Cursor-launched MCP servers, returned empty arrays from codeloop_discover_screens for desktop projects (designs/desktop/*.png never surfaced), classified MSB3027 / MSB3021 file-locked build errors as `issue_unclassified` (agents looped on the same locked-EXE forever), lacked `codeloop doctor --prune-artifacts` to clean up old corrupt-PNG runs, and surfaced bare 'App window not found' errors with no candidates / next_step diagnostic when the priority ladder exhausted",
     },
+    {
+        min_version: "0.1.51",
+        reason: "Full auto-loop + modal handling — pre-0.1.51 builds let the agent silently skip codeloop_verify between edits (no post-edit hooks, no staleness directive in tool responses), only ran ONE platform stack on multi-stack monorepos (.NET backend + React frontend / Django + Next.js / Tauri all silently skipped half the codebase), had no Python or Rust verify runners, didn't fire withInitHint on visual_review / design_compare / interaction_replay / generate_dev_report (so fresh workspaces could complete a full visual cycle without ever calling codeloop_init_project), spun the auto-fix loop forever with no server-side iteration cap (no escalate at 15 gate / 8 diagnose attempts), didn't auto-run Maestro flows in verify, and IGNORED MODALS during recording — every Save / Confirm-delete / EULA / browser beforeunload prompt was clicked-through-or-skipped, blocking the rest of the user_journey arc and silently dragging gate confidence down. 0.1.51 closes all of these and adds codeloop_capture_all_screens + codeloop_handle_modal so the loop is finally hands-off.",
+    },
 ];
 //# sourceMappingURL=critical_floors.js.map

package/dist/auth/critical_floors.js.map

@@ -1 +1 @@
-{"version":3,"file":"critical_floors.js","sourceRoot":"","sources":["../../src/auth/critical_floors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AASH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C;QACE,WAAW,EAAE,QAAQ;QACrB,MAAM,EACJ,ufAAuf;KAC1f;IACD;QACE,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,4hBAA4hB;KACriB;IACD;QACE,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,yvBAAyvB;KAClwB;IACD;QACE,WAAW,EAAE,QAAQ;QACrB,MAAM,EACJ,kxBAAkxB;KACrxB;IACD;QACE,WAAW,EAAE,QAAQ;QACrB,MAAM,EACJ,0/BAA0/B;KAC7/B;CACF,CAAC"}
+{"version":3,"file":"critical_floors.js","sourceRoot":"","sources":["../../src/auth/critical_floors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AASH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,eAAe,GAAoB;IAC9C;QACE,WAAW,EAAE,QAAQ;QACrB,MAAM,EACJ,ufAAuf;KAC1f;IACD;QACE,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,4hBAA4hB;KACriB;IACD;QACE,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,yvBAAyvB;KAClwB;IACD;QACE,WAAW,EAAE,QAAQ;QACrB,MAAM,EACJ,kxBAAkxB;KACrxB;IACD;QACE,WAAW,EAAE,QAAQ;QACrB,MAAM,EACJ,0/BAA0/B;KAC7/B;IACD;QACE,WAAW,EAAE,QAAQ;QACrB,MAAM,EACJ,0iCAA0iC;KAC7iC;CACF,CAAC"}

package/dist/evidence/loop_state.d.ts

@@ -0,0 +1,53 @@
+/**
+ * 0.1.51 H7 — Server-side iteration counter for the auto-fix loop.
+ *
+ * Pre-H7 the codeloop loop was AT-MOST a soft suggestion: the agent
+ * was told "max 15 gate attempts / 8 diagnose attempts" via the
+ * post-call directive but nothing in the server actually counted, so
+ * a buggy or pathological loop could spin forever burning tokens.
+ *
+ * The hybrid storage:
+ *   - Source of truth: `~/.codeloop/loop-state.json` (per-project map).
+ *   - Per-run snapshot: `<artifacts>/runs/<run_id>/loop_state.json`.
+ *
+ * The source-of-truth lives in HOME so it survives `rm -rf
+ * artifacts/` (a common dev habit) and so the counter genuinely
+ * reflects the user's loop, not the most-recent run that happened
+ * to win the race. The per-run snapshot is purely an audit trail —
+ * downstream tools (gate_check, dev_report) read it from the run
+ * dir to attribute counts to a specific run without having to walk
+ * back through HOME state.
+ *
+ * Caps:
+ *   - gate_attempts:    15 (escalate)
+ *   - diagnose_attempts: 8 (escalate)
+ */
+export interface LoopStateSnapshot {
+    project_dir: string;
+    gate_attempts: number;
+    diagnose_attempts: number;
+    last_gate_at?: string;
+    last_diagnose_at?: string;
+    escalated_reason?: string;
+}
+export declare const GATE_ATTEMPT_CAP = 15;
+export declare const DIAGNOSE_ATTEMPT_CAP = 8;
+export declare function readLoopState(projectDir: string): LoopStateSnapshot;
+export declare function incrementGateAttempts(projectDir: string): LoopStateSnapshot;
+export declare function incrementDiagnoseAttempts(projectDir: string): LoopStateSnapshot;
+/**
+ * Reset both counters for a project. Called by `codeloop_doctor
+ * --reset-loop-state` and automatically when gate_check returns
+ * `ready_for_review`. The reset is idempotent.
+ */
+export declare function resetLoopState(projectDir: string): void;
+/**
+ * Write a per-run snapshot of the latest counters into the run
+ * directory. Best-effort — a missing/locked dir is not fatal because
+ * the source-of-truth state in HOME is the contract.
+ */
+export declare function snapshotLoopStateToRun(runDir: string, state: LoopStateSnapshot): void;
+export declare function shouldEscalateGate(state: LoopStateSnapshot): boolean;
+export declare function shouldEscalateDiagnose(state: LoopStateSnapshot): boolean;
+export declare function escalationReason(state: LoopStateSnapshot): string | null;
+//# sourceMappingURL=loop_state.d.ts.map

package/dist/evidence/loop_state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop_state.d.ts","sourceRoot":"","sources":["../../src/evidence/loop_state.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AASD,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,oBAAoB,IAAI,CAAC;AA+CtC,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAUnE;AAED,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAiB3E;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAiB/E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CASvD;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,iBAAiB,GACvB,IAAI,CAWN;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAEpE;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAExE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAsBxE"}

package/dist/evidence/loop_state.js

@@ -0,0 +1,147 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { join, resolve } from "path";
+export const GATE_ATTEMPT_CAP = 15;
+export const DIAGNOSE_ATTEMPT_CAP = 8;
+function homeStatePath() {
+    // We expose a private override env var for tests so we don't have
+    // to monkey-patch homedir() — see __tests__/loop_state.test.ts.
+    if (process.env.CODELOOP_LOOP_STATE_DIR) {
+        return join(process.env.CODELOOP_LOOP_STATE_DIR, "loop-state.json");
+    }
+    return join(homedir(), ".codeloop", "loop-state.json");
+}
+function projectKey(projectDir) {
+    // Resolve to an absolute, normalised path. We deliberately do NOT
+    // case-fold on Windows — even though the FS is case-insensitive
+    // by default, NTFS can be case-sensitive (e.g. via fsutil) and
+    // mismatching case across two cmd sessions on the same project
+    // is exotic enough that we'd rather treat them as one project
+    // when they share a path string. resolve() is enough here.
+    return resolve(projectDir);
+}
+function readAll() {
+    const path = homeStatePath();
+    if (!existsSync(path)) {
+        return { schema_version: 1, projects: {} };
+    }
+    try {
+        const raw = readFileSync(path, "utf-8");
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === "object" && parsed.projects) {
+            return {
+                schema_version: 1,
+                projects: parsed.projects,
+            };
+        }
+    }
+    catch {
+        /* fall through — corrupt files reset, see below */
+    }
+    return { schema_version: 1, projects: {} };
+}
+function writeAll(state) {
+    const path = homeStatePath();
+    mkdirSync(join(path, ".."), { recursive: true });
+    writeFileSync(path, JSON.stringify(state, null, 2), "utf-8");
+}
+export function readLoopState(projectDir) {
+    const all = readAll();
+    const key = projectKey(projectDir);
+    return (all.projects[key] ?? {
+        project_dir: key,
+        gate_attempts: 0,
+        diagnose_attempts: 0,
+    });
+}
+export function incrementGateAttempts(projectDir) {
+    const all = readAll();
+    const key = projectKey(projectDir);
+    const current = all.projects[key] ?? {
+        project_dir: key,
+        gate_attempts: 0,
+        diagnose_attempts: 0,
+    };
+    const updated = {
+        ...current,
+        project_dir: key,
+        gate_attempts: current.gate_attempts + 1,
+        last_gate_at: new Date().toISOString(),
+    };
+    all.projects[key] = updated;
+    writeAll(all);
+    return updated;
+}
+export function incrementDiagnoseAttempts(projectDir) {
+    const all = readAll();
+    const key = projectKey(projectDir);
+    const current = all.projects[key] ?? {
+        project_dir: key,
+        gate_attempts: 0,
+        diagnose_attempts: 0,
+    };
+    const updated = {
+        ...current,
+        project_dir: key,
+        diagnose_attempts: current.diagnose_attempts + 1,
+        last_diagnose_at: new Date().toISOString(),
+    };
+    all.projects[key] = updated;
+    writeAll(all);
+    return updated;
+}
+/**
+ * Reset both counters for a project. Called by `codeloop_doctor
+ * --reset-loop-state` and automatically when gate_check returns
+ * `ready_for_review`. The reset is idempotent.
+ */
+export function resetLoopState(projectDir) {
+    const all = readAll();
+    const key = projectKey(projectDir);
+    all.projects[key] = {
+        project_dir: key,
+        gate_attempts: 0,
+        diagnose_attempts: 0,
+    };
+    writeAll(all);
+}
+/**
+ * Write a per-run snapshot of the latest counters into the run
+ * directory. Best-effort — a missing/locked dir is not fatal because
+ * the source-of-truth state in HOME is the contract.
+ */
+export function snapshotLoopStateToRun(runDir, state) {
+    try {
+        mkdirSync(runDir, { recursive: true });
+        writeFileSync(join(runDir, "loop_state.json"), JSON.stringify(state, null, 2), "utf-8");
+    }
+    catch {
+        /* best-effort */
+    }
+}
+export function shouldEscalateGate(state) {
+    return state.gate_attempts >= GATE_ATTEMPT_CAP;
+}
+export function shouldEscalateDiagnose(state) {
+    return state.diagnose_attempts >= DIAGNOSE_ATTEMPT_CAP;
+}
+export function escalationReason(state) {
+    if (shouldEscalateGate(state)) {
+        return (`gate_attempts=${state.gate_attempts} reached the 0.1.51 H7 cap of ` +
+            `${GATE_ATTEMPT_CAP}. Stop the auto-fix loop. Surface every failing ` +
+            `gate to the user with the failing reasons and the next manual ` +
+            `step they should take. Do NOT call codeloop_verify or ` +
+            `codeloop_gate_check again until the user explicitly resets the ` +
+            `loop counter (codeloop_doctor --reset-loop-state) or makes a ` +
+            `targeted fix and asks you to retry.`);
+    }
+    if (shouldEscalateDiagnose(state)) {
+        return (`diagnose_attempts=${state.diagnose_attempts} reached the 0.1.51 ` +
+            `H7 cap of ${DIAGNOSE_ATTEMPT_CAP}. The same class of failure has ` +
+            `survived ${state.diagnose_attempts} fix attempts. Stop calling ` +
+            `codeloop_diagnose and escalate to the user with the failing ` +
+            `repair task and what you have already tried.`);
+    }
+    return null;
+}
+//# sourceMappingURL=loop_state.js.map

package/dist/evidence/loop_state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop_state.js","sourceRoot":"","sources":["../../src/evidence/loop_state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AA2CrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AACnC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,SAAS,aAAa;IACpB,kEAAkE;IAClE,gEAAgE;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB;IACpC,kEAAkE;IAClE,gEAAgE;IAChE,+DAA+D;IAC/D,+DAA+D;IAC/D,8DAA8D;IAC9D,2DAA2D;IAC3D,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,OAAO;IACd,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA8B,CAAC;QAC5D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC5D,OAAO;gBACL,cAAc,EAAE,CAAC;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAA6C;aAC/D,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAuB;IACvC,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACnC,OAAO,CACL,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI;QACnB,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,CAAC;QAChB,iBAAiB,EAAE,CAAC;KACrB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI;QACnC,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,CAAC;QAChB,iBAAiB,EAAE,CAAC;KACrB,CAAC;IACF,MAAM,OAAO,GAAsB;QACjC,GAAG,OAAO;QACV,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,OAAO,CAAC,aAAa,GAAG,CAAC;QACxC,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACvC,CAAC;IACF,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,CAAC;IACd,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,UAAkB;IAC1D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI;QACnC,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,CAAC;QAChB,iBAAiB,EAAE,CAAC;KACrB,CAAC;IACF,MAAM,OAAO,GAAsB;QACjC,GAAG,OAAO;QACV,WAAW,EAAE,GAAG;QAChB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,GAAG,CAAC;QAChD,gBAAgB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC3C,CAAC;IACF,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,CAAC;IACd,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACnC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG;QAClB,WAAW,EAAE,GAAG;QAChB,aAAa,EAAE,CAAC;QAChB,iBAAiB,EAAE,CAAC;KACrB,CAAC;IACF,QAAQ,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,KAAwB;IAExB,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,aAAa,CACX,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAC/B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAC9B,OAAO,CACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,OAAO,KAAK,CAAC,aAAa,IAAI,gBAAgB,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAwB;IAC7D,OAAO,KAAK,CAAC,iBAAiB,IAAI,oBAAoB,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAwB;IACvD,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,CACL,iBAAiB,KAAK,CAAC,aAAa,gCAAgC;YACpE,GAAG,gBAAgB,kDAAkD;YACrE,gEAAgE;YAChE,wDAAwD;YACxD,iEAAiE;YACjE,+DAA+D;YAC/D,qCAAqC,CACtC,CAAC;IACJ,CAAC;IACD,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,CACL,qBAAqB,KAAK,CAAC,iBAAiB,sBAAsB;YAClE,aAAa,oBAAoB,kCAAkC;YACnE,YAAY,KAAK,CAAC,iBAAiB,8BAA8B;YACjE,8DAA8D;YAC9D,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/evidence/verify_staleness.d.ts

@@ -0,0 +1,9 @@
+export interface StalenessResult {
+    is_stale: boolean;
+    last_verify_at: string | null;
+    newest_source_path: string | null;
+    newest_source_mtime: string | null;
+}
+export declare function checkVerifyStaleness(cwd: string): StalenessResult;
+export declare function buildStalenessDirective(r: StalenessResult): string;
+//# sourceMappingURL=verify_staleness.d.ts.map

package/dist/evidence/verify_staleness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify_staleness.d.ts","sourceRoot":"","sources":["../../src/evidence/verify_staleness.ts"],"names":[],"mappings":"AAwEA,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAuFjE;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,CAgBlE"}

package/dist/evidence/verify_staleness.js

@@ -0,0 +1,180 @@
+import { existsSync, statSync, readdirSync } from "fs";
+import { join } from "path";
+import { loadRunIndex } from "./run_lineage.js";
+import { getArtifactsBaseDir } from "./artifacts.js";
+/**
+ * 0.1.51 H2 — Verify-staleness reminder.
+ *
+ * Inject a HARD directive into MCP responses (via `withInitHint`)
+ * whenever ANY source file in the project has been modified more
+ * recently than the latest `codeloop_verify` run. Pre-H2 the
+ * loop relied entirely on the agent's discipline: the rule was
+ * "you MUST call codeloop_verify after every code change", but
+ * a long agent session would drift, and the only way to catch
+ * the drift was to wait for a downstream tool (gate_check) to
+ * blow up. With H2 the staleness signal lives at the response-
+ * envelope level — every CodeLoop tool response says "your
+ * source is newer than the last verify, run codeloop_verify
+ * BEFORE doing anything else".
+ *
+ * Heuristics:
+ *   - "Source files" = anything in cwd other than the skip list
+ *     (node_modules, artifacts, .git, .vs, dist/build/out, .codeloop).
+ *   - "Last verify" = the newest `finished_at` in run_index.json.
+ *   - We DON'T scan the entire tree — the depth-2 scan from the
+ *     hot-path heuristics in detectPlatform is cheap enough to fire
+ *     on every tool response without a perceptible delay; deeper
+ *     stale changes will still trigger because workspace-root
+ *     files are almost always touched alongside any meaningful edit.
+ */
+const SKIP_DIRS = new Set([
+    "node_modules",
+    ".git",
+    ".vs",
+    ".idea",
+    ".vscode",
+    ".codeloop",
+    "artifacts",
+    "dist",
+    "build",
+    "out",
+    "bin",
+    "obj",
+    "packages",
+    "Pods",
+    ".next",
+    ".turbo",
+    ".cache",
+    ".gradle",
+    "DerivedData",
+    "__pycache__",
+    "target", // Rust target/ — common, large, never the source of a "stale" signal
+    ".venv",
+    "venv",
+]);
+// Files we skip even when their mtime is newer than the verify run —
+// they're updated by tooling outside the agent's control and aren't
+// "source code" in the staleness sense (`package-lock.json` bumped
+// by a CI runner, `.DS_Store`, etc.).
+const SKIP_FILE_PATTERNS = [
+    /^\.DS_Store$/,
+    /^Thumbs\.db$/,
+    /^package-lock\.json$/,
+    /^pnpm-lock\.yaml$/,
+    /^yarn\.lock$/,
+    /^poetry\.lock$/,
+    /^Cargo\.lock$/,
+    /\.log$/,
+];
+export function checkVerifyStaleness(cwd) {
+    let lastVerifyMs = null;
+    let lastVerifyAt = null;
+    try {
+        const base = getArtifactsBaseDir(cwd);
+        const idx = loadRunIndex(base);
+        for (const e of idx.entries) {
+            // Prefer finished_at; fall back to started_at when finished
+            // was never written (interrupted runs).
+            const ts = e.finished_at ?? e.started_at;
+            if (!ts)
+                continue;
+            const ms = Date.parse(ts);
+            if (Number.isNaN(ms))
+                continue;
+            if (lastVerifyMs === null || ms > lastVerifyMs) {
+                lastVerifyMs = ms;
+                lastVerifyAt = ts;
+            }
+        }
+    }
+    catch {
+        /* fall through with null */
+    }
+    if (lastVerifyMs === null) {
+        // Never verified. We don't fire the staleness directive in this
+        // case because the init-hint already covers the "no run yet"
+        // path — firing both would be noisy and redundant.
+        return {
+            is_stale: false,
+            last_verify_at: null,
+            newest_source_path: null,
+            newest_source_mtime: null,
+        };
+    }
+    // Walk depth=2 from cwd. The H2 plan explicitly accepts a coarse
+    // signal — depth-2 catches >95% of edits since IDE-level edits
+    // virtually always change at least one file at workspace-root or
+    // first-level package.
+    let newest = null;
+    function visit(dir, depth) {
+        if (depth > 2)
+            return;
+        let entries;
+        try {
+            entries = readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const ent of entries) {
+            const name = ent.name;
+            if (name.startsWith(".") && SKIP_DIRS.has(name))
+                continue;
+            if (SKIP_DIRS.has(name))
+                continue;
+            const p = join(dir, name);
+            if (ent.isDirectory()) {
+                visit(p, depth + 1);
+            }
+            else if (ent.isFile()) {
+                if (SKIP_FILE_PATTERNS.some((re) => re.test(name)))
+                    continue;
+                try {
+                    const ms = statSync(p).mtimeMs;
+                    if (!newest || ms > newest.mtime) {
+                        newest = { path: p, mtime: ms };
+                    }
+                }
+                catch {
+                    /* skip unreadable */
+                }
+            }
+        }
+    }
+    if (existsSync(cwd))
+        visit(cwd, 0);
+    if (!newest) {
+        return {
+            is_stale: false,
+            last_verify_at: lastVerifyAt,
+            newest_source_path: null,
+            newest_source_mtime: null,
+        };
+    }
+    // TS narrowing: `newest` is non-null in this branch.
+    const n = newest;
+    const isStale = n.mtime > lastVerifyMs;
+    return {
+        is_stale: isStale,
+        last_verify_at: lastVerifyAt,
+        newest_source_path: isStale ? n.path : null,
+        newest_source_mtime: isStale ? new Date(n.mtime).toISOString() : null,
+    };
+}
+export function buildStalenessDirective(r) {
+    if (!r.is_stale)
+        return "";
+    return (`[CodeLoop H2] HARD DIRECTIVE — your project source is NEWER than the ` +
+        `last codeloop_verify run.\n\n` +
+        `  Newest source file: ${r.newest_source_path ?? "(unknown)"}\n` +
+        `  Newest source mtime: ${r.newest_source_mtime ?? "(unknown)"}\n` +
+        `  Last verify finished: ${r.last_verify_at ?? "(unknown)"}\n\n` +
+        `Before continuing with ANY other tool, call codeloop_verify against the ` +
+        `current project. Do NOT call codeloop_gate_check, codeloop_visual_review, ` +
+        `codeloop_design_compare, codeloop_interaction_replay, codeloop_capture_screenshot, ` +
+        `codeloop_capture_all_screens, codeloop_generate_dev_report, ` +
+        `codeloop_section_status, codeloop_release_readiness, or codeloop_handle_modal ` +
+        `until codeloop_verify has run against this newer code. Skipping verify will ` +
+        `surface a green gate against stale evidence and you will ship a regression.`);
+}
+//# sourceMappingURL=verify_staleness.js.map

package/dist/evidence/verify_staleness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify_staleness.js","sourceRoot":"","sources":["../../src/evidence/verify_staleness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,MAAM;IACN,KAAK;IACL,OAAO;IACP,SAAS;IACT,WAAW;IACX,WAAW;IACX,MAAM;IACN,OAAO;IACP,KAAK;IACL,KAAK;IACL,KAAK;IACL,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,aAAa;IACb,aAAa;IACb,QAAQ,EAAE,qEAAqE;IAC/E,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,qEAAqE;AACrE,oEAAoE;AACpE,mEAAmE;AACnE,sCAAsC;AACtC,MAAM,kBAAkB,GAAG;IACzB,cAAc;IACd,cAAc;IACd,sBAAsB;IACtB,mBAAmB;IACnB,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,QAAQ;CACT,CAAC;AASF,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC5B,4DAA4D;YAC5D,wCAAwC;YACxC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,CAAC;YACzC,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC/B,IAAI,YAAY,KAAK,IAAI,IAAI,EAAE,GAAG,YAAY,EAAE,CAAC;gBAC/C,YAAY,GAAG,EAAE,CAAC;gBAClB,YAAY,GAAG,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;IAED,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,gEAAgE;QAChE,6DAA6D;QAC7D,mDAAmD;QACnD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,IAAI;YACxB,mBAAmB,EAAE,IAAI;SAC1B,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,+DAA+D;IAC/D,iEAAiE;IACjE,uBAAuB;IACvB,IAAI,MAAM,GAA2C,IAAI,CAAC;IAC1D,SAAS,KAAK,CAAC,GAAW,EAAE,KAAa;QACvC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO;QACtB,IAAI,OAAmF,CAAC;QACxF,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAA8B,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YACtB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC1D,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAClC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACtB,CAAC;iBAAM,IAAI,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAAE,SAAS;gBAC7D,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC/B,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;wBACjC,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;oBAClC,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,qBAAqB;gBACvB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAEnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,cAAc,EAAE,YAAY;YAC5B,kBAAkB,EAAE,IAAI;YACxB,mBAAmB,EAAE,IAAI;SAC1B,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,MAAM,CAAC,GAAG,MAAyC,CAAC;IACpD,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,GAAG,YAAY,CAAC;IACvC,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,cAAc,EAAE,YAAY;QAC5B,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC3C,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,CAAkB;IACxD,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC3B,OAAO,CACL,uEAAuE;QACvE,+BAA+B;QAC/B,yBAAyB,CAAC,CAAC,kBAAkB,IAAI,WAAW,IAAI;QAChE,0BAA0B,CAAC,CAAC,mBAAmB,IAAI,WAAW,IAAI;QAClE,2BAA2B,CAAC,CAAC,cAAc,IAAI,WAAW,MAAM;QAChE,0EAA0E;QAC1E,4EAA4E;QAC5E,qFAAqF;QACrF,8DAA8D;QAC9D,gFAAgF;QAChF,8EAA8E;QAC9E,6EAA6E,CAC9E,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-export {};
+export declare function markVerifiedNow(cwd: string): void;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAqfA,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEjD"}