heyspex 0.2.2 → 0.2.3

package/scripts/claude-hooks/wip-checkpoint.mjs

@@ -48,7 +48,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { getActiveConfig } from '../../vendor/heyspex-mcp/vault-resolve.mjs';
+import { getActiveConfig, isResolvedVault } from '../../vendor/heyspex-mcp/vault-resolve.mjs';
 import { hookVaultHeaders } from '../lib/hook-vault-header.mjs';
 import { resolveConsoleUrl as resolveConsoleUrlShared } from '../lib/console-url-resolver.mjs';
 import { readCredentialsMcpToken, resolveDevMode } from '../lib/dev-mode.mjs';
@@ -68,26 +68,48 @@ function repoRoot() {
 // code checkout. Reading repoRoot() here previewed a frozen pre-split snapshot to
 // every new session — the HS-OR8H repo-split "quiet window OPEN" notice kept
 // re-appearing for days after the window closed, because the live ledger had moved
-// and this copy never advanced. Resolve the vault first; fall back to the code repo
-// so a pre-split or standalone checkout still previews its own ledger.
+// and this copy never advanced. Resolve the vault first; fall back to the session's
+// own project so a pre-split or standalone checkout still previews its own ledger.
 function vaultRoot() {
   try {
-    return getActiveConfig()?.repoRootAbs ?? null;
+    const resolved = getActiveConfig();
+    return isResolvedVault(resolved) ? resolved.repoRootAbs ?? null : null;
   } catch {
-    return null; // registry unreadable — the code-repo base still applies
+    return null; // registry unreadable — the project base still applies
   }
 }
 
-// Ledger roots in precedence order: vault first, code repo second.
+// The session's project — NOT this script's location. In a satellite repo the hook
+// runs out of the `heyspex` package (node_modules/heyspex, often an npm link to the
+// platform checkout), so repoRoot() is the PLATFORM's tree and its ledger belongs to
+// somebody else's sessions: a satellite once previewed the platform checkout's
+// `HS-EPIC-FILLER-20` (a leaked wip-state.prune.test.ts fixture) as its own WIP.
+function projectDir() {
+  const fromEnv = process.env.CLAUDE_PROJECT_DIR;
+  return path.resolve(typeof fromEnv === 'string' && fromEnv.trim() ? fromEnv.trim() : process.cwd());
+}
+
+// Ledger roots in precedence order: bound vault first, the session's project second.
+// The package's own checkout is never a root unless it IS the project.
 function ledgerRoots() {
   const roots = [];
   const vault = vaultRoot();
-  if (vault) roots.push(vault);
-  const repo = repoRoot();
-  if (!roots.includes(repo)) roots.push(repo);
+  if (vault) roots.push(path.resolve(vault));
+  const project = projectDir();
+  if (!roots.includes(project)) roots.push(project);
   return roots;
 }
 
+// Defense in depth against test fixtures that escaped into a real ledger (the
+// wip-state*.test.ts suites write ids like HS-EPIC-FILLER-07, HS-EPIC-OLD34,
+// HS-EPIC-BUD-PROTECT under vault id `vault-test`). Real ids are server-minted
+// file keys; a SessionStart preview must never present one of these as the
+// prior session's hand-off.
+const FIXTURE_ID_RE = /^HS-EPIC-(?:FILLER-\d+|OLD\d+|BUD-[A-Z0-9-]+|CLAIMED-BUD|TRIGGER(?:-[A-Z0-9-]+)?)$/;
+function isFixtureLedgerEntry(epicId) {
+  return typeof epicId === 'string' && FIXTURE_ID_RE.test(epicId);
+}
+
 async function readStdinJson() {
   if (process.stdin.isTTY) return null;
   return new Promise((resolve) => {
@@ -152,6 +174,7 @@ function mostRecentLedgerEntry() {
   let best = null;
   for (const [epicId, entry] of Object.entries(parsed)) {
     if (!entry || typeof entry !== 'object') continue;
+    if (isFixtureLedgerEntry(epicId)) continue;
     const updatedAt = typeof entry.updatedAt === 'string' ? entry.updatedAt : '';
     if (!best || updatedAt > best.updatedAt) {
       best = { epicId, updatedAt, entry };
@@ -228,6 +251,7 @@ async function fetchCloudLedgerEntry(root) {
     let best = null;
     for (const [specId, entry] of Object.entries(wipState)) {
       if (!entry || typeof entry !== 'object') continue;
+      if (isFixtureLedgerEntry(specId)) continue;
       const updatedAt = typeof entry.updatedAt === 'string' ? entry.updatedAt : '';
       if (!best || updatedAt > best.updatedAt) {
         best = { epicId: specId, updatedAt, entry };