create-egregore 0.19.33 → 0.20.1

package/runtime/prime/bin/lib/identity.sh

@@ -0,0 +1,213 @@
+# shellcheck shell=bash
+# identity.sh — User identity resolution for session-start.sh
+#
+# Resolves the current user's identity through multiple fallback layers:
+#   1. .egregore-state.json github_username (stored during setup)
+#   2. GitHub API auto-detect via GITHUB_TOKEN
+#   3. Graph person lookup (existing team member on new machine)
+#   4. Global git config user.name (last resort)
+#
+# Inputs:  STATE_FILE, ENV_FILE, SCRIPT_DIR, HEALTH_GITHUB
+# Outputs: AUTHOR, DISPLAY_NAME_STATE, FIRST_SESSION, HEALTH_GITHUB,
+#          EGREGORE_USER, EGREGORE_ORG, EGREGORE_SESSION_ID
+#          Writes .egregore-session-id and ~/.egregore/session-*.id
+
+STORED_USERNAME=""
+FIRST_SESSION=""
+AUTHOR=""
+if [ -f "$STATE_FILE" ]; then
+  STORED_USERNAME=$(jq -r '.github_username // empty' "$STATE_FILE" 2>/dev/null)
+fi
+
+DISPLAY_NAME_STATE=""
+if [ -f "$STATE_FILE" ]; then
+  DISPLAY_NAME_STATE=$(jq -r '.display_name // empty' "$STATE_FILE" 2>/dev/null)
+fi
+
+if [ -n "$STORED_USERNAME" ]; then
+  # Identity stored during setup — use it and ensure repo-local git config matches
+  AUTHOR="$STORED_USERNAME"
+  HEALTH_GITHUB="ok"
+  CURRENT_LOCAL=$(git config --local user.name 2>/dev/null || echo "")
+  if [ "$CURRENT_LOCAL" != "$STORED_USERNAME" ]; then
+    STORED_NAME=$(jq -r '.github_name // empty' "$STATE_FILE" 2>/dev/null)
+    git config user.name "${STORED_NAME:-$STORED_USERNAME}" 2>/dev/null || true
+    git config user.email "${STORED_USERNAME}@users.noreply.github.com" 2>/dev/null || true
+  fi
+else
+  # No stored identity — try GitHub API to auto-detect (self-healing for pre-fix installs)
+  if [ -f "$ENV_FILE" ]; then
+    GH_TOKEN=$(grep '^GITHUB_TOKEN=' "$ENV_FILE" 2>/dev/null | cut -d'=' -f2-)
+    if [ -n "$GH_TOKEN" ]; then
+      GH_USER_JSON=$(curl -s -H "Authorization: token $GH_TOKEN" https://api.github.com/user --max-time 5 2>/dev/null || echo "")
+      GH_LOGIN=$(echo "$GH_USER_JSON" | jq -r '.login // empty' 2>/dev/null)
+      GH_ID=$(echo "$GH_USER_JSON" | jq -r '.id // empty' 2>/dev/null)
+      GH_NAME=$(echo "$GH_USER_JSON" | jq -r '.name // empty' 2>/dev/null)
+      GH_EMAIL=$(echo "$GH_USER_JSON" | jq -r '.email // empty' 2>/dev/null)
+      if [ -n "$GH_LOGIN" ]; then
+        GH_ID_JSON="null"
+        GH_PERSON_ID="github-login:$(echo "$GH_LOGIN" | tr '[:upper:]' '[:lower:]')"
+        if [[ "$GH_ID" =~ ^[0-9]+$ ]]; then
+          GH_ID_JSON="$GH_ID"
+          GH_PERSON_ID="github:$GH_ID"
+        fi
+        AUTHOR="$GH_LOGIN"
+        HEALTH_GITHUB="ok"
+        # Set repo-local config and save to state for next time
+        git config user.name "${GH_NAME:-$GH_LOGIN}" 2>/dev/null || true
+        git config user.email "${GH_LOGIN}@users.noreply.github.com" 2>/dev/null || true
+        # Save to state file so we don't need API call next time
+        # Include onboarding_complete + name so it doesn't re-trigger onboarding
+        # Determine if founder or joiner: if github_username != github_org, they're a joiner
+        GITHUB_ORG_CFG=$(jq -r '.github_org // empty' "$SCRIPT_DIR/egregore.json" 2>/dev/null)
+        if [ -n "$GITHUB_ORG_CFG" ] && [ "$GH_LOGIN" != "$GITHUB_ORG_CFG" ]; then
+          USAGE_TYPE="joiner_group"
+        else
+          USAGE_TYPE="founder_group"
+        fi
+        if [ -f "$STATE_FILE" ]; then
+          # Existing state file — update identity but preserve onboarding status
+          HAS_ONBOARDING=$(jq -r '.onboarding_complete // "unset"' "$STATE_FILE" 2>/dev/null)
+          if [ "$HAS_ONBOARDING" = "unset" ]; then
+            # State file exists but no onboarding flag — set to false to trigger it
+            jq --arg u "$GH_LOGIN" --arg n "${GH_NAME:-$GH_LOGIN}" --arg ut "$USAGE_TYPE" \
+              --argjson gid "$GH_ID_JSON" --arg pid "$GH_PERSON_ID" --arg email "$GH_EMAIL" \
+              '.github_username = $u | .github_id = $gid | .person_id = $pid |
+               .github_name = $n | .name = $n |
+               (if $email != "" then .email = ($email | ascii_downcase) else . end) |
+               .onboarding_complete = false | .usage_type = $ut' "$STATE_FILE" > "$STATE_FILE.tmp" \
+              && mv "$STATE_FILE.tmp" "$STATE_FILE"
+          else
+            jq --arg u "$GH_LOGIN" --arg n "${GH_NAME:-$GH_LOGIN}" --arg ut "$USAGE_TYPE" \
+              --argjson gid "$GH_ID_JSON" --arg pid "$GH_PERSON_ID" --arg email "$GH_EMAIL" \
+              '.github_username = $u | .github_id = $gid | .person_id = $pid |
+               .github_name = $n | .name = $n |
+               (if $email != "" then .email = ($email | ascii_downcase) else . end) |
+               .usage_type = $ut' "$STATE_FILE" > "$STATE_FILE.tmp" \
+              && mv "$STATE_FILE.tmp" "$STATE_FILE"
+          fi
+          FIRST_SESSION="false"
+        else
+          # No state file — check graph to see if this person already exists
+          # (handles fresh clone / new machine for existing team members)
+          GRAPH_PERSON=""
+          GRAPH_DISPLAY_NAME=""
+          GRAPH_PERSON=$(bash "$SCRIPT_DIR/bin/graph.sh" query \
+            "MATCH (p:Person)
+             WHERE NOT coalesce(p.kind, '') IN ['external', 'identity_alias']
+               AND coalesce(p.status, 'active') = 'active'
+               AND p.ingestRef IS NULL
+               AND (p.github = \$github
+                 OR (\$githubId <> '' AND coalesce(toString(p.githubId), '') = \$githubId)
+                 OR toLower(\$github) IN [alias IN coalesce(p.githubAliases, []) | toLower(alias)])
+             RETURN p.name AS name" \
+            "$(jq -n --arg github "$GH_LOGIN" --arg githubId "$GH_ID" \
+              '{github: $github, githubId: $githubId}')" 2>/dev/null || echo "")
+          if echo "$GRAPH_PERSON" | jq -e '.values | length > 0' &>/dev/null; then
+            GRAPH_DISPLAY_NAME=$(echo "$GRAPH_PERSON" | jq -r '.values[0][0] // empty' 2>/dev/null)
+            # Existing team member — skip onboarding
+            jq -n --arg github "$GH_LOGIN" --argjson githubId "$GH_ID_JSON" \
+              --arg personId "$GH_PERSON_ID" --arg githubName "${GH_NAME:-$GH_LOGIN}" \
+              --arg name "${GRAPH_DISPLAY_NAME:-${GH_NAME:-$GH_LOGIN}}" \
+              --arg displayName "${GRAPH_DISPLAY_NAME:-}" --arg email "$GH_EMAIL" \
+              --arg usageType "$USAGE_TYPE" \
+              '{
+                github_username: $github, github_id: $githubId, person_id: $personId,
+                github_name: $githubName, name: $name, display_name: $displayName,
+                email: (if $email == "" then null else ($email | ascii_downcase) end),
+                onboarding_complete: true, usage_type: $usageType,
+                session_tracking: true, transcript_sharing: true, telemetry: true,
+                contact_preference: "all", telemetry_noticed: true
+              }' > "$STATE_FILE"
+            FIRST_SESSION="false"
+          else
+            # Genuinely new user — trigger onboarding
+            jq -n --arg github "$GH_LOGIN" --argjson githubId "$GH_ID_JSON" \
+              --arg personId "$GH_PERSON_ID" --arg githubName "${GH_NAME:-$GH_LOGIN}" \
+              --arg email "$GH_EMAIL" --arg usageType "$USAGE_TYPE" \
+              '{
+                github_username: $github, github_id: $githubId, person_id: $personId,
+                github_name: $githubName, name: $githubName,
+                email: (if $email == "" then null else ($email | ascii_downcase) end),
+                onboarding_complete: false, usage_type: $usageType, first_session: true
+              }' > "$STATE_FILE"
+            FIRST_SESSION="true"
+          fi
+        fi
+      fi
+    fi
+  fi
+
+  # Final fallback: git config user.name (global or local)
+  if [ -z "$AUTHOR" ]; then
+    FULLNAME=$(git config user.name 2>/dev/null || echo "")
+    AUTHOR=$(echo "$FULLNAME" | tr '[:upper:]' '[:lower:]' | cut -d' ' -f1)
+  fi
+fi
+
+if [ -z "$AUTHOR" ]; then
+  AUTHOR="unknown"
+  HEALTH_GITHUB="fail"
+fi
+
+# --- Validate gh CLI identity matches git identity ---
+# The gh CLI has its own auth (keyring) separate from .env GITHUB_TOKEN.
+# If they diverge, PRs get created under the wrong account.
+# The `gh api user` round-trip (~1s) is off the boot path: each start reports
+# the marker the previous background check left, then refreshes it detached.
+# A mismatch therefore surfaces one session late — acceptable for a warning
+# about a rare, persistent condition.
+if command -v gh &>/dev/null && [ -n "$AUTHOR" ] && [ "$AUTHOR" != "unknown" ]; then
+  _GH_MISMATCH_FILE="$HOME/.egregore/gh-identity-mismatch-$(echo -n "${MAIN_PROJECT_DIR:-$SCRIPT_DIR}" | cksum | cut -d' ' -f1)"
+  # Marker format: line 1 = the AUTHOR the check ran as, line 2 = the gh login
+  # observed. Warn only when line 1 matches the current AUTHOR — the same
+  # machine/instance can serve different git identities, and Alice's stale
+  # marker must not tell Bob that Bob mismatches Bob.
+  _GH_MARKER_AUTHOR=$(sed -n '1p' "$_GH_MISMATCH_FILE" 2>/dev/null || true)
+  GH_CLI_USER=$(sed -n '2p' "$_GH_MISMATCH_FILE" 2>/dev/null || true)
+  if [ -n "$GH_CLI_USER" ] && [ "$_GH_MARKER_AUTHOR" = "$AUTHOR" ]; then
+    echo ""
+    echo "WARNING: Identity mismatch detected."
+    echo "  Git identity (.env):  $AUTHOR"
+    echo "  gh CLI (active):      $GH_CLI_USER"
+    echo "  PRs will be created as '$GH_CLI_USER', not '$AUTHOR'."
+    echo "  Fix: gh auth switch --user $AUTHOR"
+    echo ""
+  fi
+  ( (
+    _GH_LIVE=$(gh api user --jq '.login' 2>/dev/null || true)
+    if [ -n "$_GH_LIVE" ]; then
+      if [ "$(echo "$_GH_LIVE" | tr '[:upper:]' '[:lower:]')" != "$(echo "$AUTHOR" | tr '[:upper:]' '[:lower:]')" ]; then
+        mkdir -p "$HOME/.egregore" 2>/dev/null
+        printf '%s\n%s\n' "$AUTHOR" "$_GH_LIVE" > "$_GH_MISMATCH_FILE.tmp" \
+          && mv "$_GH_MISMATCH_FILE.tmp" "$_GH_MISMATCH_FILE"
+      else
+        rm -f "$_GH_MISMATCH_FILE"
+      fi
+    fi
+  ) >/dev/null 2>&1 & ) 2>/dev/null
+fi
+
+# --- Export telemetry identity env vars ---
+export EGREGORE_USER="$AUTHOR"
+export EGREGORE_ORG="$(jq -r '.slug // .github_org // empty' "$SCRIPT_DIR/egregore.json" 2>/dev/null || true)"
+export EGREGORE_SESSION_ID="$(date -u +%Y%m%dT%H%M%S)-${AUTHOR}-$$"
+
+# Persist session ID to file so telemetry.sh can read it
+# (env vars from hooks don't propagate into the Claude Code agent)
+SESSION_ID_DIR="$HOME/.egregore"
+mkdir -p "$SESSION_ID_DIR"
+PROJ_HASH=$(echo -n "$SCRIPT_DIR" | md5 2>/dev/null || echo -n "$SCRIPT_DIR" | md5sum 2>/dev/null | cut -d' ' -f1)
+echo "$EGREGORE_SESSION_ID" > "$SESSION_ID_DIR/session-${PROJ_HASH}.id"
+# Also write project-local file (CLAUDE.md reads this — no glob needed)
+echo "$EGREGORE_SESSION_ID" > "$SCRIPT_DIR/.egregore-session-id"
+
+# Model stamp hashes the git common-dir root because telemetry.sh resolves it that way.
+MODEL_REPO_ROOT=$(git -C "$SCRIPT_DIR" rev-parse --path-format=absolute --git-common-dir 2>/dev/null | sed 's|/\.git$||') || MODEL_REPO_ROOT="$SCRIPT_DIR"
+MODEL_PROJ_HASH=$(echo -n "$MODEL_REPO_ROOT" | md5 2>/dev/null || echo -n "$MODEL_REPO_ROOT" | md5sum 2>/dev/null | cut -d' ' -f1)
+MODEL_STAMP_FILE="$SESSION_ID_DIR/session-model-${MODEL_PROJ_HASH}"
+if [ -n "${CLAUDE_MODEL:-}" ]; then
+  echo "$CLAUDE_MODEL" > "$MODEL_STAMP_FILE"
+else
+  rm -f "$MODEL_STAMP_FILE"
+fi

package/runtime/prime/bin/lib/metrics.sh

@@ -0,0 +1,374 @@
+# shellcheck shell=bash
+# metrics.sh — Momentum metrics gathering and rendering for startup greetings.
+#
+# Function-only library. Safe to source from bash or zsh.
+
+_metrics_zero_json() {
+  printf '%s\n' '{"source":"local","sessions":{"buckets":[0,0,0,0,0],"week":0,"prev":0,"all":0},"commits":{"buckets":[0,0,0,0,0],"week":0,"prev":0,"authors":0,"all":0},"handoffs":{"buckets":[0,0,0,0,0],"week":0,"prev":0,"avg_resolution_days":null,"all":0},"knowledge":{"buckets":[0,0,0,0,0],"week":0,"prev":0,"all":0},"members":{"active":0,"total":0}}'
+}
+
+_num() {
+  awk '{n=$1+0; if (n < 0) n=0; printf "%d\n", n}' 2>/dev/null <<EOF
+$1
+EOF
+}
+
+_num_float() {
+  awk '{n=$1+0; if (n < 0) n=0; printf "%.1f\n", n}' 2>/dev/null <<EOF
+$1
+EOF
+}
+
+_normalize_buckets() {
+  set -- $(printf '%s' "$1")
+  printf '%d %d %d %d %d\n' "$(_num "${1:-0}")" "$(_num "${2:-0}")" "$(_num "${3:-0}")" "$(_num "${4:-0}")" "$(_num "${5:-0}")"
+}
+
+_buckets_json() {
+  set -- $(printf '%s' "$(_normalize_buckets "$1")")
+  jq -n --argjson a "$(_num "${1:-0}")" --argjson b "$(_num "${2:-0}")" \
+    --argjson c "$(_num "${3:-0}")" --argjson d "$(_num "${4:-0}")" \
+    --argjson e "$(_num "${5:-0}")" '[$a,$b,$c,$d,$e]' 2>/dev/null || echo '[0,0,0,0,0]'
+}
+
+_bucket_week() {
+  set -- $(printf '%s' "$(_normalize_buckets "$1")")
+  _num "${5:-0}"
+}
+
+_bucket_prev() {
+  set -- $(printf '%s' "$(_normalize_buckets "$1")")
+  _num "${4:-0}"
+}
+
+_spark() {
+  local values max out v idx glyph
+  values="${1:-0 0 0 0 0}"
+  max=0
+  set -- $(printf '%s' "$values")
+  [ "$#" -eq 0 ] && set -- 0 0 0 0 0
+  for v in "$@"; do
+    v=$(_num "$v")
+    [ "$v" -gt "$max" ] 2>/dev/null && max="$v"
+  done
+  out=""
+  for v in "$@"; do
+    v=$(_num "$v")
+    if [ "$max" -le 0 ] 2>/dev/null; then
+      idx=0
+    else
+      idx=$(( (v * 7) / max ))
+    fi
+    # Select glyphs explicitly: substring slicing can split UTF-8 characters
+    # under Bash 3.2 or a C locale.
+    case "$idx" in
+      0) glyph="▁" ;;
+      1) glyph="▂" ;;
+      2) glyph="▃" ;;
+      3) glyph="▄" ;;
+      4) glyph="▅" ;;
+      5) glyph="▆" ;;
+      6) glyph="▇" ;;
+      *) glyph="█" ;;
+    esac
+    out="${out}${glyph}"
+  done
+  printf '%s\n' "$out"
+}
+
+_pct_delta() {
+  local cur prev pct
+  cur=$(_num "${1:-0}")
+  prev=$(_num "${2:-0}")
+  [ "$prev" -le 0 ] 2>/dev/null && return 0
+  pct=$(( ((cur - prev) * 100) / prev ))
+  if [ "$pct" -gt 0 ] 2>/dev/null; then
+    printf '↑ %d%%\n' "$pct"
+  elif [ "$pct" -lt 0 ] 2>/dev/null; then
+    printf '↓ %d%%\n' "$(( -pct ))"
+  else
+    printf '→ 0%%\n'
+  fi
+}
+
+_commafy() {
+  awk '
+    function comma(s, out, sign) {
+      s = int(s + 0)
+      if (s < 0) { sign = "-"; s = -s } else { sign = "" }
+      s = sprintf("%d", s)
+      out = ""
+      while (length(s) > 3) {
+        out = "," substr(s, length(s) - 2, 3) out
+        s = substr(s, 1, length(s) - 3)
+      }
+      return sign s out
+    }
+    { print comma($1) }
+  ' 2>/dev/null <<EOF
+${1:-0}
+EOF
+}
+
+_git_added_buckets() {
+  local repo now paths
+  repo="$1"
+  shift
+  now=$(date +%s)
+  if [ -d "$repo" ] || [ -f "$repo" ]; then
+    git -C "$repo" log --diff-filter=A --since="35 days ago" --format='%ct' -- "$@" 2>/dev/null | \
+      awk -v now="$now" '
+        BEGIN { for (i=0;i<5;i++) b[i]=0 }
+        /^[0-9]+$/ {
+          days = int((now - $1) / 86400)
+          idx = 4 - int(days / 7)
+          if (idx >= 0 && idx < 5) b[idx]++
+        }
+        END { printf "%d %d %d %d %d\n", b[0], b[1], b[2], b[3], b[4] }
+      ' 2>/dev/null || echo "0 0 0 0 0"
+  else
+    echo "0 0 0 0 0"
+  fi
+}
+
+_find_count_md() {
+  find -L "$@" -name '*.md' ! -name 'index*' 2>/dev/null | wc -l | awk '{print $1+0}' 2>/dev/null || echo 0
+}
+
+_metrics_gather() {
+  local _root _mem _scratch _API_URL _API_KEY _connected
+  _root="${SCRIPT_DIR:-$PWD}"
+  _mem="$_root/memory"
+  _scratch=$(mktemp -d 2>/dev/null || mktemp -d -t egregore-metrics)
+  _API_URL=$(jq -r '.api_url // empty' "$_root/egregore.json" 2>/dev/null || echo "")
+  _API_KEY=$(grep '^EGREGORE_API_KEY=' "${ENV_FILE:-$_root/.env}" 2>/dev/null | cut -d'=' -f2- || true)
+  _connected=false
+  [ -n "$_API_URL" ] && [ -n "$_API_KEY" ] && _connected=true
+
+  (
+    if [ "$_connected" = true ]; then
+      raw=$(bash "$_root/bin/graph.sh" query "MATCH (s:Session) WHERE date(s.date) >= date() - duration('P35D')
+OPTIONAL MATCH (s)-[:BY]->(p:Person)
+WITH duration.inDays(date(s.date), date()).days / 7 AS weeksAgo,
+     count(s) AS sessions, count(DISTINCT p) AS people
+RETURN weeksAgo, sessions, people ORDER BY weeksAgo" 2>/dev/null || echo "")
+      printf '%s' "$raw" | jq -r '
+        (.values // []) as $v
+        | if ($v|length) == 0 then empty else
+          reduce $v[] as $r ({b:[0,0,0,0,0], a:0, ok:0};
+            ($r[0] // 99 | tonumber? // 99) as $w
+            | if $w >= 0 and $w <= 4 then
+                .b[4 - $w] = (($r[1] // 0 | tonumber? // 0) | floor)
+                | .ok = 1
+                | if $w == 0 then .a = (($r[2] // 0 | tonumber? // 0) | floor) else . end
+              else . end)
+          | "\(.b|join(" "))|\(.a)|\(.ok)"
+          end
+      ' 2>/dev/null || echo "0 0 0 0 0|0|0"
+    else
+      echo "0 0 0 0 0|0|0"
+    fi
+  ) > "$_scratch/graph_sessions" 2>/dev/null &
+
+  (
+    if [ "$_connected" = true ]; then
+      raw=$(bash "$_root/bin/graph.sh" query "MATCH (s:Session) WITH count(s) AS totalSessions MATCH (p:Person)-[:MEMBER_OF]->(:Org) RETURN totalSessions, count(DISTINCT p) AS members" 2>/dev/null || echo "")
+      total=$(printf '%s' "$raw" | jq -r '.values[0][0] // 0' 2>/dev/null || echo 0)
+      members=$(printf '%s' "$raw" | jq -r '.values[0][1] // 0' 2>/dev/null || echo 0)
+      if [ "$(_num "$members")" -eq 0 ] 2>/dev/null; then
+        raw2=$(bash "$_root/bin/graph.sh" query "MATCH (p:Person) RETURN count(p)" 2>/dev/null || echo "")
+        members=$(printf '%s' "$raw2" | jq -r '.values[0][0] // 0' 2>/dev/null || echo 0)
+      fi
+      printf '%s|%s\n' "$(_num "$total")" "$(_num "$members")"
+    else
+      echo "0|0"
+    fi
+  ) > "$_scratch/graph_totals" 2>/dev/null &
+
+  (
+    if [ "$_connected" = true ]; then
+      raw=$(bash "$_root/bin/graph.sh" query "MATCH (s:Session)-[:HANDED_TO]->(:Person)
+WHERE s.handoffStatus = 'done' AND date(s.date) >= date() - duration('P30D')
+  AND s.handoffReadDate IS NOT NULL
+WITH duration.inDays(date(s.date), date(s.handoffReadDate)).days AS d
+RETURN avg(d) AS avgDays, count(*) AS n" 2>/dev/null || echo "")
+      avg=$(printf '%s' "$raw" | jq -r '.values[0][0] // empty' 2>/dev/null || echo "")
+      n=$(printf '%s' "$raw" | jq -r '.values[0][1] // 0' 2>/dev/null || echo 0)
+      if [ "$(_num "$n")" -gt 0 ] 2>/dev/null && [ -n "$avg" ]; then _num_float "$avg"; else echo ""; fi
+    else
+      echo ""
+    fi
+  ) > "$_scratch/handoff_resolution" 2>/dev/null &
+
+  (
+    buckets=$(_git_added_buckets "$_mem" sessions wraps)
+    all=$(_find_count_md "$_root/memory/sessions" "$_root/memory/wraps")
+    printf '%s|%s\n' "$buckets" "$all"
+  ) > "$_scratch/local_sessions" 2>/dev/null &
+
+  (
+    now=$(date +%s)
+    if [ -d "$_mem" ] || [ -f "$_mem" ]; then
+      git -C "$_mem" log --since="35 days ago" --format='%ct|%ae' 2>/dev/null | \
+        awk -F'|' -v now="$now" '
+          BEGIN { for (i=0;i<5;i++) b[i]=0 }
+          {
+            days = int((now - $1) / 86400)
+            idx = 4 - int(days / 7)
+            if (idx >= 0 && idx < 5) {
+              b[idx]++
+              if (idx == 4 && $2 != "") a[$2]=1
+            }
+          }
+          END {
+            n=0; for (k in a) n++
+            printf "%d %d %d %d %d|%d\n", b[0], b[1], b[2], b[3], b[4], n
+          }
+        ' 2>/dev/null || echo "0 0 0 0 0|0"
+    else
+      echo "0 0 0 0 0|0"
+    fi
+  ) > "$_scratch/commits" 2>/dev/null &
+
+  (
+    if [ -d "$_mem" ] || [ -f "$_mem" ]; then git -C "$_mem" rev-list --count HEAD 2>/dev/null || echo 0; else echo 0; fi
+  ) > "$_scratch/commits_all" 2>/dev/null &
+
+  (
+    buckets=$(_git_added_buckets "$_mem" handoffs)
+    all=$(_find_count_md "$_root/memory/handoffs")
+    printf '%s|%s\n' "$buckets" "$all"
+  ) > "$_scratch/handoffs" 2>/dev/null &
+
+  (
+    buckets=$(_git_added_buckets "$_mem" knowledge/decisions knowledge/findings knowledge/patterns)
+    all=$(_find_count_md "$_root/memory/knowledge/decisions" "$_root/memory/knowledge/findings" "$_root/memory/knowledge/patterns")
+    printf '%s|%s\n' "$buckets" "$all"
+  ) > "$_scratch/knowledge" 2>/dev/null &
+
+  (
+    _find_count_md "$_root/memory/people"
+  ) > "$_scratch/members_total_local" 2>/dev/null &
+
+  wait
+
+  gs=$(cat "$_scratch/graph_sessions" 2>/dev/null || echo "0 0 0 0 0|0|0")
+  gt=$(cat "$_scratch/graph_totals" 2>/dev/null || echo "0|0")
+  lsess=$(cat "$_scratch/local_sessions" 2>/dev/null || echo "0 0 0 0 0|0")
+  commits=$(cat "$_scratch/commits" 2>/dev/null || echo "0 0 0 0 0|0")
+  handoffs=$(cat "$_scratch/handoffs" 2>/dev/null || echo "0 0 0 0 0|0")
+  knowledge=$(cat "$_scratch/knowledge" 2>/dev/null || echo "0 0 0 0 0|0")
+
+  graph_valid=$(_num "$(printf '%s' "$gs" | awk -F'|' '{print $3}')")
+  if [ "$graph_valid" -gt 0 ] 2>/dev/null; then
+    source_name="graph"
+    session_buckets=$(_normalize_buckets "$(printf '%s' "$gs" | awk -F'|' '{print $1}')")
+    session_all=$(_num "$(printf '%s' "$gt" | awk -F'|' '{print $1}')")
+    members_active=$(_num "$(printf '%s' "$gs" | awk -F'|' '{print $2}')")
+    members_total=$(_num "$(printf '%s' "$gt" | awk -F'|' '{print $2}')")
+    if [ "$session_all" -le 0 ] 2>/dev/null; then
+      session_all=$(_num "$(printf '%s' "$lsess" | awk -F'|' '{print $2}')")
+    fi
+    if [ "$members_total" -le 0 ] 2>/dev/null; then
+      members_total=$(_num "$(cat "$_scratch/members_total_local" 2>/dev/null || echo 0)")
+    fi
+  else
+    source_name="local"
+    session_buckets=$(_normalize_buckets "$(printf '%s' "$lsess" | awk -F'|' '{print $1}')")
+    session_all=$(_num "$(printf '%s' "$lsess" | awk -F'|' '{print $2}')")
+    members_active=$(_num "$(printf '%s' "$commits" | awk -F'|' '{print $2}')")
+    members_total=$(_num "$(cat "$_scratch/members_total_local" 2>/dev/null || echo 0)")
+  fi
+
+  commit_buckets=$(_normalize_buckets "$(printf '%s' "$commits" | awk -F'|' '{print $1}')")
+  handoff_buckets=$(_normalize_buckets "$(printf '%s' "$handoffs" | awk -F'|' '{print $1}')")
+  knowledge_buckets=$(_normalize_buckets "$(printf '%s' "$knowledge" | awk -F'|' '{print $1}')")
+  avg_res=$(cat "$_scratch/handoff_resolution" 2>/dev/null || echo "")
+
+  session_buckets_json=$(_buckets_json "$session_buckets")
+  commit_buckets_json=$(_buckets_json "$commit_buckets")
+  handoff_buckets_json=$(_buckets_json "$handoff_buckets")
+  knowledge_buckets_json=$(_buckets_json "$knowledge_buckets")
+
+  if [ -n "$avg_res" ]; then
+    jq -n --arg source "$source_name" \
+      --argjson sb "$session_buckets_json" --argjson sw "$(_bucket_week "$session_buckets")" --argjson sp "$(_bucket_prev "$session_buckets")" --argjson sall "$session_all" \
+      --argjson cb "$commit_buckets_json" --argjson cw "$(_bucket_week "$commit_buckets")" --argjson cp "$(_bucket_prev "$commit_buckets")" --argjson ca "$(_num "$(printf '%s' "$commits" | awk -F'|' '{print $2}')")" --argjson call "$(_num "$(cat "$_scratch/commits_all" 2>/dev/null || echo 0)")" \
+      --argjson hb "$handoff_buckets_json" --argjson hw "$(_bucket_week "$handoff_buckets")" --argjson hp "$(_bucket_prev "$handoff_buckets")" --argjson havg "$avg_res" --argjson hall "$(_num "$(printf '%s' "$handoffs" | awk -F'|' '{print $2}')")" \
+      --argjson kb "$knowledge_buckets_json" --argjson kw "$(_bucket_week "$knowledge_buckets")" --argjson kp "$(_bucket_prev "$knowledge_buckets")" --argjson kall "$(_num "$(printf '%s' "$knowledge" | awk -F'|' '{print $2}')")" \
+      --argjson ma "$members_active" --argjson mt "$members_total" \
+      '{source:$source,sessions:{buckets:$sb,week:$sw,prev:$sp,all:$sall},commits:{buckets:$cb,week:$cw,prev:$cp,authors:$ca,all:$call},handoffs:{buckets:$hb,week:$hw,prev:$hp,avg_resolution_days:$havg,all:$hall},knowledge:{buckets:$kb,week:$kw,prev:$kp,all:$kall},members:{active:$ma,total:$mt}}' 2>/dev/null || _metrics_zero_json
+  else
+    jq -n --arg source "$source_name" \
+      --argjson sb "$session_buckets_json" --argjson sw "$(_bucket_week "$session_buckets")" --argjson sp "$(_bucket_prev "$session_buckets")" --argjson sall "$session_all" \
+      --argjson cb "$commit_buckets_json" --argjson cw "$(_bucket_week "$commit_buckets")" --argjson cp "$(_bucket_prev "$commit_buckets")" --argjson ca "$(_num "$(printf '%s' "$commits" | awk -F'|' '{print $2}')")" --argjson call "$(_num "$(cat "$_scratch/commits_all" 2>/dev/null || echo 0)")" \
+      --argjson hb "$handoff_buckets_json" --argjson hw "$(_bucket_week "$handoff_buckets")" --argjson hp "$(_bucket_prev "$handoff_buckets")" --argjson hall "$(_num "$(printf '%s' "$handoffs" | awk -F'|' '{print $2}')")" \
+      --argjson kb "$knowledge_buckets_json" --argjson kw "$(_bucket_week "$knowledge_buckets")" --argjson kp "$(_bucket_prev "$knowledge_buckets")" --argjson kall "$(_num "$(printf '%s' "$knowledge" | awk -F'|' '{print $2}')")" \
+      --argjson ma "$members_active" --argjson mt "$members_total" \
+      '{source:$source,sessions:{buckets:$sb,week:$sw,prev:$sp,all:$sall},commits:{buckets:$cb,week:$cw,prev:$cp,authors:$ca,all:$call},handoffs:{buckets:$hb,week:$hw,prev:$hp,avg_resolution_days:null,all:$hall},knowledge:{buckets:$kb,week:$kw,prev:$kp,all:$kall},members:{active:$ma,total:$mt}}' 2>/dev/null || _metrics_zero_json
+  fi
+  rm -rf "$_scratch" 2>/dev/null || true
+}
+
+_metrics_read() {
+  local file filter fallback
+  file="${CTX_DIR:-}/metrics"
+  filter="$1"
+  fallback="$2"
+  if [ -f "$file" ]; then
+    jq -r "$filter" "$file" 2>/dev/null || echo "$fallback"
+  else
+    echo "$fallback"
+  fi
+}
+
+_render_momentum_board() {
+  local separator line_width header_left header_right pad
+  local sb sw sp sall cb cw ca call hb hw havg hall kb kw kall active total
+  local sdelta sann cann hann kann know_week
+  separator="${SEPARATOR:-  ┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄┄}"
+  line_width="${LINE_WIDTH:-67}"
+
+  sb=$(_metrics_read '(.sessions.buckets // [0,0,0,0,0]) | .[0:5] | map(. // 0) | join(" ")' "0 0 0 0 0")
+  sw=$(_num "$(_metrics_read '.sessions.week // 0' "0")")
+  sp=$(_num "$(_metrics_read '.sessions.prev // 0' "0")")
+  sall=$(_num "$(_metrics_read '.sessions.all // 0' "0")")
+  cb=$(_metrics_read '(.commits.buckets // [0,0,0,0,0]) | .[0:5] | map(. // 0) | join(" ")' "0 0 0 0 0")
+  cw=$(_num "$(_metrics_read '.commits.week // 0' "0")")
+  ca=$(_num "$(_metrics_read '.commits.authors // 0' "0")")
+  call=$(_num "$(_metrics_read '.commits.all // 0' "0")")
+  hb=$(_metrics_read '(.handoffs.buckets // [0,0,0,0,0]) | .[0:5] | map(. // 0) | join(" ")' "0 0 0 0 0")
+  hw=$(_num "$(_metrics_read '.handoffs.week // 0' "0")")
+  havg=$(_metrics_read '.handoffs.avg_resolution_days // empty' "")
+  hall=$(_num "$(_metrics_read '.handoffs.all // 0' "0")")
+  kb=$(_metrics_read '(.knowledge.buckets // [0,0,0,0,0]) | .[0:5] | map(. // 0) | join(" ")' "0 0 0 0 0")
+  kw=$(_num "$(_metrics_read '.knowledge.week // 0' "0")")
+  kall=$(_num "$(_metrics_read '.knowledge.all // 0' "0")")
+  active=$(_num "$(_metrics_read '.members.active // 0' "0")")
+  total=$(_num "$(_metrics_read '.members.total // 0' "0")")
+
+  header_left="  ◦ momentum · this week"
+  header_right="${active} of ${total} active"
+  pad=$((line_width - ${#header_left} - ${#header_right}))
+  [ "$pad" -lt 1 ] && pad=1
+  printf "%s%*s%s\n" "$header_left" "$pad" "" "$header_right"
+
+  sdelta=$(_pct_delta "$sw" "$sp")
+  sann=""
+  [ -n "$sdelta" ] && sann="${sdelta} vs last week"
+  cann=""
+  if [ "$ca" -gt 0 ] 2>/dev/null; then
+    if [ "$ca" -eq 1 ] 2>/dev/null; then cann="1 author"; else cann="${ca} authors"; fi
+  fi
+  hann=""
+  if [ -n "$havg" ]; then hann="$(_num_float "$havg")d avg resolution"; fi
+  kann="$(_commafy "$kall") artifacts total"
+  know_week="+${kw}"
+
+  printf "  %-11s%5s   5-week %s   %s\n\n" "sessions" "$sw" "$(_spark "$sb")" "$sann"
+  printf "  %-11s%5s   5-week %s   %s\n\n" "commits" "$cw" "$(_spark "$cb")" "$cann"
+  printf "  %-11s%5s   5-week %s   %s\n\n" "handoffs" "$hw" "$(_spark "$hb")" "$hann"
+  printf "  %-11s%5s   5-week %s   %s\n" "knowledge" "$know_week" "$(_spark "$kb")" "$kann"
+  echo "$separator"
+  printf "  %s sessions · %s commits · %s handoffs all-time\n" "$(_commafy "$sall")" "$(_commafy "$call")" "$(_commafy "$hall")"
+}

package/runtime/prime/bin/lib/noncode.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+# noncode.sh — shared "non-coding change" classifier for auto-merge decisions.
+#
+# The org rule: non-coding PRs auto-merge to develop; code goes to review.
+# Non-coding means:
+#   - any .md file, anywhere
+#   - anything under content directories (artifacts/, docs/, .threads/) —
+#     html/css/images/design bundles there are authored content, not shipped code
+#   - session-state droppings (.egregore-worktree-tty)
+# Everything else — bin/, api/, packages/, .claude/, site 2/, root config — is
+# code and stays open for review.
+#
+# Sourced by handoff-save-egregore.sh, session-autosave.sh, agent.sh, and the
+# /save skill. Keep the policy HERE — call sites must not grow their own.
+
+# noncode_filter — reads paths on stdin, prints the first code-bearing path.
+# Empty output = everything is non-coding.
+noncode_filter() {
+  grep -Ev '\.md$' \
+    | grep -Ev '^(artifacts|docs|\.threads)/' \
+    | grep -Ev '^\.egregore-worktree-tty$' \
+    | head -1 || true
+}
+
+# noncode_blockers [base-ref] [repo-dir] — first code-bearing path committed
+# on HEAD relative to base (three-dot: only our side of the diff).
+# Empty output = the branch is non-coding and safe to auto-merge.
+noncode_blockers() {
+  local base="${1:-origin/develop}" dir="${2:-.}"
+  git -C "$dir" diff "$base...HEAD" --name-only 2>/dev/null | noncode_filter
+}