hypomnema 1.1.0 → 1.2.1

package/hooks/hypo-cwd-change.mjs

@@ -6,21 +6,42 @@
  * project hot.md. Skips if still within the same project subtree.
  */
 
-import { readFileSync, existsSync, readdirSync, statSync } from 'fs';
+import { readFileSync, writeFileSync, existsSync, readdirSync, statSync } from 'fs';
 import { homedir } from 'os';
 import { join } from 'path';
-import { HYPO_DIR, buildOutput } from './hypo-shared.mjs';
+import {
+  HYPO_DIR,
+  buildOutput,
+  loadHypoIgnore,
+  isIgnored,
+  sessionMarkerPath,
+  shouldSuggestProjectCreation,
+  buildProjectSuggestionLine,
+  recordSuggestionCooldown,
+  sanitizeProjForPrompt,
+} from './hypo-shared.mjs';
 
 const PROJECTS_DIR = join(HYPO_DIR, 'projects');
-const GLOBAL_HOT   = join(HYPO_DIR, 'hot.md');
-const MAX_CHARS    = 3000;
+const GLOBAL_HOT = join(HYPO_DIR, 'hot.md');
+const MAX_CHARS = 3000;
+
+// Privacy guard: a .hypoignore-matched hot.md must not be
+// re-emitted into additionalContext on cwd change.
+function readIfNotIgnored(path, patterns) {
+  if (!path) return null;
+  if (patterns.length > 0 && isIgnored(path, HYPO_DIR, patterns)) return null;
+  return readFileSync(path, 'utf-8').slice(0, MAX_CHARS);
+}
 
 function parseFrontmatterField(content, key) {
   const match = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
   if (!match) return null;
-  const line = match[1].split('\n').find(l => l.startsWith(`${key}:`));
+  const line = match[1].split('\n').find((l) => l.startsWith(`${key}:`));
   if (!line) return null;
-  return line.slice(key.length + 1).trim().replace(/^['"]|['"]$/g, '');
+  return line
+    .slice(key.length + 1)
+    .trim()
+    .replace(/^['"]|['"]$/g, '');
 }
 
 function findProjectHot(cwd) {
@@ -30,7 +51,7 @@ function findProjectHot(cwd) {
     if (!statSync(projDir).isDirectory()) continue;
     const indexPath = join(projDir, 'index.md');
     if (!existsSync(indexPath)) continue;
-    const content    = readFileSync(indexPath, 'utf-8');
+    const content = readFileSync(indexPath, 'utf-8');
     const workingDir = parseFrontmatterField(content, 'working_dir');
     if (!workingDir) continue;
     const resolved = workingDir.startsWith('~/')
@@ -38,7 +59,13 @@ function findProjectHot(cwd) {
       : workingDir;
     if (cwd === resolved || cwd.startsWith(resolved + '/')) {
       const hotPath = join(projDir, 'hot.md');
-      return { proj, hotPath: existsSync(hotPath) ? hotPath : null, resolved };
+      const statePath = join(projDir, 'session-state.md');
+      return {
+        proj,
+        hotPath: existsSync(hotPath) ? hotPath : null,
+        statePath: existsSync(statePath) ? statePath : null,
+        resolved,
+      };
     }
   }
   return null;
@@ -46,14 +73,17 @@ function findProjectHot(cwd) {
 
 let raw = '';
 process.stdin.setEncoding('utf-8');
-process.stdin.on('data', chunk => raw += chunk);
+process.stdin.on('data', (chunk) => (raw += chunk));
 process.stdin.on('end', () => {
   try {
     let data = {};
-    try { data = JSON.parse(raw); } catch {}
+    try {
+      data = JSON.parse(raw);
+    } catch {}
 
     const newCwd = data.new_cwd || data.new_directory || data.cwd || process.cwd();
     const oldCwd = data.old_cwd || data.old_directory || data.previous_cwd || '';
+    const sessionId = data.session_id || 'default';
 
     // Skip re-injection if still in the same project
     const oldHit = oldCwd ? findProjectHot(oldCwd) : null;
@@ -64,28 +94,85 @@ process.stdin.on('end', () => {
       return;
     }
 
+    const ignorePatterns = loadHypoIgnore(HYPO_DIR);
+
     if (newHit) {
-      const content = newHit.hotPath
-        ? readFileSync(newHit.hotPath, 'utf-8').slice(0, MAX_CHARS)
-        : '(no hot.md yet — will be created at session close)';
-      console.log(JSON.stringify(
-        buildOutput(`[WIKI: cwd changed → project=${newHit.proj}]\n\n${content}`, { continue: true, suppressOutput: true })
-      ));
+      const fromFile = readIfNotIgnored(newHit.hotPath, ignorePatterns);
+      const content = fromFile ?? '(no hot.md yet — will be created at session close)';
+      // fix #13: arm the first-prompt marker so the NEXT user prompt re-triggers
+      // hypo-first-prompt, which forces a "Resuming <project>" summary line.
+      // Only arm when real hot content was actually injected — if hot.md is
+      // missing or .hypoignore'd (fromFile null), there is nothing for the LLM
+      // to summarize, so forcing "Resuming" would be empty noise (codex review).
+      if (fromFile) {
+        try {
+          writeFileSync(
+            sessionMarkerPath(sessionId),
+            JSON.stringify({
+              proj: newHit.proj,
+              hotPath: newHit.hotPath,
+              statePath: newHit.statePath,
+              hasSnapshot: true,
+              source: 'cwd-change',
+              ts: Date.now(),
+            }),
+          );
+        } catch (err) {
+          process.stderr.write(
+            `[hypo-cwd-change] marker write failed: ${err?.message ?? String(err)}\n`,
+          );
+        }
+      }
+      console.log(
+        JSON.stringify(
+          buildOutput(
+            `[WIKI: cwd changed → project=${sanitizeProjForPrompt(newHit.proj)}]\n\n${content}`,
+            {
+              continue: true,
+              suppressOutput: true,
+            },
+          ),
+        ),
+      );
       return;
     }
 
-    if (!existsSync(GLOBAL_HOT)) {
-      console.log(JSON.stringify({ continue: true, suppressOutput: true }));
-      return;
+    // MISS: cwd matches no project. fix #23 / ADR 0023 — offer to create one
+    // when the trigger conditions hold. Same nudge-only model as session-start.
+    let suggestPrefix = '';
+    if (shouldSuggestProjectCreation(newCwd, HYPO_DIR)) {
+      const suggestLine = buildProjectSuggestionLine(newCwd);
+      suggestPrefix = `${suggestLine}\n\n`;
+      recordSuggestionCooldown(HYPO_DIR, newCwd);
+      process.stderr.write(`\n\x1b[33m${suggestLine}\x1b[0m\n`);
     }
 
-    const globalContent = readFileSync(GLOBAL_HOT, 'utf-8').slice(0, MAX_CHARS);
-    console.log(JSON.stringify(
-      buildOutput(`[WIKI: cwd changed → no project match, injecting global hot]\n\n${globalContent}`, { continue: true, suppressOutput: true })
-    ));
+    const globalContent = existsSync(GLOBAL_HOT)
+      ? readIfNotIgnored(GLOBAL_HOT, ignorePatterns)
+      : null;
 
+    if (!globalContent) {
+      if (suggestPrefix) {
+        console.log(
+          JSON.stringify(
+            buildOutput(suggestPrefix.trimEnd(), { continue: true, suppressOutput: true }),
+          ),
+        );
+      } else {
+        console.log(JSON.stringify({ continue: true, suppressOutput: true }));
+      }
+      return;
+    }
+    console.log(
+      JSON.stringify(
+        buildOutput(
+          `${suggestPrefix}[WIKI: cwd changed → no project match, injecting global hot]\n\n${globalContent}`,
+          { continue: true, suppressOutput: true },
+        ),
+      ),
+    );
   } catch (err) {
-    process.stderr.write(`[wiki-cwd-change] error: ${err.message}\n`);
+    process.stderr.write(`[hypo-cwd-change] error: ${err?.message ?? String(err)}\n`);
     console.log(JSON.stringify({ continue: true, suppressOutput: true }));
   }
 });

package/hooks/hypo-file-watch.mjs

@@ -8,17 +8,19 @@
 
 import { readFileSync, existsSync } from 'fs';
 import { join } from 'path';
-import { HYPO_DIR } from './hypo-shared.mjs';
+import { HYPO_DIR, loadHypoIgnore, isIgnored } from './hypo-shared.mjs';
 
 const MAX_CHARS = 2000;
 
 let raw = '';
 process.stdin.setEncoding('utf-8');
-process.stdin.on('data', chunk => raw += chunk);
+process.stdin.on('data', (chunk) => (raw += chunk));
 process.stdin.on('end', () => {
   try {
     let data = {};
-    try { data = JSON.parse(raw); } catch {}
+    try {
+      data = JSON.parse(raw);
+    } catch {}
 
     const filePath = data.file_path || data.path || '';
 
@@ -27,6 +29,15 @@ process.stdin.on('end', () => {
       return;
     }
 
+    // Privacy guard: refuse to inject
+    // .hypoignore-matched paths. Without this, `.env*` or other secrets under
+    // HYPO_DIR are re-emitted as additionalContext to the Claude provider.
+    const patterns = loadHypoIgnore(HYPO_DIR);
+    if (patterns.length > 0 && isIgnored(filePath, HYPO_DIR, patterns)) {
+      console.log(JSON.stringify({ continue: true, suppressOutput: true }));
+      return;
+    }
+
     if (!existsSync(filePath)) {
       console.log(JSON.stringify({ continue: true, suppressOutput: true }));
       return;
@@ -35,13 +46,15 @@ process.stdin.on('end', () => {
     const content = readFileSync(filePath, 'utf-8').slice(0, MAX_CHARS);
     const relPath = filePath.replace(HYPO_DIR + '/', '');
 
-    console.log(JSON.stringify({
-      continue: true,
-      suppressOutput: true,
-      additionalContext: `[WIKI FILE UPDATED: ${relPath}]\n\n${content}`,
-    }));
-
-  } catch {
+    console.log(
+      JSON.stringify({
+        continue: true,
+        suppressOutput: true,
+        additionalContext: `[WIKI FILE UPDATED: ${relPath}]\n\n${content}`,
+      }),
+    );
+  } catch (err) {
+    process.stderr.write(`[hypo-file-watch] error: ${err?.message ?? String(err)}\n`);
     console.log(JSON.stringify({ continue: true, suppressOutput: true }));
   }
 });

package/hooks/hypo-first-prompt.mjs

@@ -2,31 +2,33 @@
 /**
  * hypo-first-prompt.mjs — UserPromptSubmit hook
  *
- * Consumes the marker written by wiki-session-start.mjs.
- * On the FIRST user prompt of a new session, injects a lightweight decision
- * instruction so the LLM can decide whether to announce the resume context.
+ * Consumes the marker written by hypo-session-start.mjs (source omitted /
+ * 'session-start') or hypo-cwd-change.mjs (source 'cwd-change', fix #13).
+ * On the FIRST user prompt after the marker is written, FORCES a one-line
+ * resume summary into the reply (fix #3 — the old "answer only if related"
+ * conditional is removed; the line is injected unconditionally).
  *
- * hot.md content is NOT re-injected here — wiki-session-start.mjs already
- * injected it on SessionStart. Only the decision hint is added.
+ * hot.md / session-state.md content is NOT re-injected here — the upstream
+ * hook already placed it in additionalContext. This hook only forces the LLM
+ * to lead with the summary line drawn from that context.
  * Marker expires after 10 minutes.
  */
 
 import { readFileSync, unlinkSync, existsSync } from 'fs';
-import { tmpdir } from 'os';
-import { join } from 'path';
-import { buildOutput } from './hypo-shared.mjs';
+import { buildOutput, sessionMarkerPath, sanitizeProjForPrompt } from './hypo-shared.mjs';
 
 const MARKER_TTL = 10 * 60 * 1000; // 10 min
 
 let raw = '';
 process.stdin.setEncoding('utf-8');
-process.stdin.on('data', chunk => raw += chunk);
+process.stdin.on('data', (chunk) => (raw += chunk));
 process.stdin.on('end', () => {
   try {
     let data = {};
-    try { data = JSON.parse(raw); } catch {}
-    const sessionId = data.session_id || 'default';
-    const MARKER_FILE = join(tmpdir(), `hypo-session-marker-${sessionId}.json`);
+    try {
+      data = JSON.parse(raw);
+    } catch {}
+    const MARKER_FILE = sessionMarkerPath(data.session_id);
 
     if (!existsSync(MARKER_FILE)) {
       console.log(JSON.stringify({ continue: true, suppressOutput: true }));
@@ -34,26 +36,70 @@ process.stdin.on('end', () => {
     }
 
     const marker = JSON.parse(readFileSync(MARKER_FILE, 'utf-8'));
-    const age    = Date.now() - (marker.ts || 0);
+    const age = Date.now() - (marker.ts || 0);
 
-    try { unlinkSync(MARKER_FILE); } catch {}
+    try {
+      unlinkSync(MARKER_FILE);
+    } catch {}
 
     if (age > MARKER_TTL) {
       console.log(JSON.stringify({ continue: true, suppressOutput: true }));
       return;
     }
 
-    const hasSnapshot  = marker.hasSnapshot ?? (marker.hotPath && existsSync(marker.hotPath));
+    const hasSnapshot = marker.hasSnapshot ?? (marker.hotPath && existsSync(marker.hotPath));
     const snapshotNote = hasSnapshot ? '' : ' (no snapshot yet — first session)';
+    // fix #13: a cwd-change re-trigger says "Resuming"; a fresh session start
+    // (default source) says "Previously working on".
+    const verb = marker.source === 'cwd-change' ? 'Resuming' : 'Previously working on';
+    // marker.proj originates from a wiki directory name read by findProjectFiles;
+    // sanitize via the shared helper so a hand-crafted project name cannot close
+    // the wrapper tag, smuggle newlines/control chars, or inject conflicting
+    // directives into the resume contract (codex v2 review 2026-05-26).
+    const projSafe = sanitizeProjForPrompt(marker.proj);
+    // When there is no snapshot, the [HOT] / [SESSION STATE] context has nothing
+    // for the model to fill the placeholders with. Provide a concrete fallback
+    // line so the model doesn't leak literal `[one-line summary]` text on a
+    // first-ever session (codex v2 review 2026-05-26).
+    const exampleLine = hasSnapshot
+      ? `${verb} ${projSafe}: [one-line summary]. Continue with [next task]?`
+      : `${verb} ${projSafe}: no prior snapshot yet — first session. What would you like to start with?`;
+    const fillNote = hasSnapshot
+      ? `Replace the bracketed placeholders using the [HOT] / [SESSION STATE] ` +
+        `context already injected this session — do NOT emit the literal brackets.`
+      : `Use the line above verbatim — there is no prior snapshot to summarize.`;
 
-    console.log(JSON.stringify(
-      buildOutput(
-        `[WIKI SESSION START: project=${marker.proj}${snapshotNote}]\nDecision hint: if the first message relates to this project → answer first, then add one line "Previously working on ${marker.proj} — continue?" If unrelated / simple Q&A → answer only, no mention.`,
-        { continue: true, suppressOutput: true }
-      )
-    ));
-
-  } catch {
+    console.log(
+      JSON.stringify(
+        buildOutput(
+          `<hypomnema-session-resume>\n` +
+            `[WIKI SESSION START: project=${projSafe}${snapshotNote}]\n` +
+            `\n` +
+            `Lead your FIRST reply this session with exactly one line in this shape:\n` +
+            `\n` +
+            `${exampleLine}\n` +
+            `\n` +
+            `${fillNote}\n` +
+            `\n` +
+            `Emit this line unconditionally on the first prompt, including when the ` +
+            `user's message is:\n` +
+            `  • a simple greeting ("안녕", "hi", "hello")\n` +
+            `  • a trivial question or unrelated topic\n` +
+            `  • a one-word reply\n` +
+            `\n` +
+            `Do not skip it, do not decide it is "not relevant", do not shorten the ` +
+            `reply to omit it. After the line, answer the user's actual message on the ` +
+            `following line(s) as normal.\n` +
+            `\n` +
+            `This is the Hypomnema session-resume contract — the user relies on this ` +
+            `line to confirm which project context is loaded.\n` +
+            `</hypomnema-session-resume>`,
+          { continue: true, suppressOutput: true },
+        ),
+      ),
+    );
+  } catch (err) {
+    process.stderr.write(`[hypo-first-prompt] error: ${err?.message ?? String(err)}\n`);
     console.log(JSON.stringify({ continue: true, suppressOutput: true }));
   }
 });

package/hooks/hypo-hot-rebuild.mjs

@@ -14,8 +14,8 @@ import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'fs';
 import { join } from 'path';
 import { HYPO_DIR, computeSessionGrowth, formatGrowthMetrics } from './hypo-shared.mjs';
 
-const HOT_PATH         = join(HYPO_DIR, 'hot.md');
-const GROWTH_CACHE     = join(HYPO_DIR, '.cache', 'last-session-growth.json');
+const HOT_PATH = join(HYPO_DIR, 'hot.md');
+const GROWTH_CACHE = join(HYPO_DIR, '.cache', 'last-session-growth.json');
 
 function parseFrontmatter(content) {
   const m = content.match(/^---\r?\n([\s\S]*?)\r?\n---/);
@@ -56,10 +56,12 @@ function rebuild() {
 
   const today = new Date().toISOString().slice(0, 10);
 
-  const tableRows = rows.map(({ name, slug }) => {
-    const date = getProjectDate(slug) || today;
-    return `| ${name} | ${date} | [[projects/${slug}/hot]] |`;
-  }).join('\n');
+  const tableRows = rows
+    .map(({ name, slug }) => {
+      const date = getProjectDate(slug) || today;
+      return `| ${name} | ${date} | [[projects/${slug}/hot]] |`;
+    })
+    .join('\n');
 
   const canonical = `---
 title: Hot Cache — Pointer
@@ -92,7 +94,7 @@ ${tableRows}
 function emitGrowth() {
   if (!existsSync(HYPO_DIR)) return;
   const stats = computeSessionGrowth(HYPO_DIR);
-  const line  = formatGrowthMetrics('stop', stats);
+  const line = formatGrowthMetrics('stop', stats);
   if (line) process.stderr.write(`${line}\n`);
   try {
     mkdirSync(join(HYPO_DIR, '.cache'), { recursive: true });
@@ -100,7 +102,17 @@ function emitGrowth() {
   } catch {}
 }
 
-try { rebuild();     } catch {}
-try { emitGrowth();  } catch {}
+try {
+  rebuild();
+} catch (err) {
+  process.stderr.write(`[hypo-hot-rebuild] error: ${err?.message ?? String(err)}\n`);
+}
+try {
+  emitGrowth();
+} catch (err) {
+  process.stderr.write(`[hypo-hot-rebuild] error: ${err?.message ?? String(err)}\n`);
+}
 
-try { console.log(JSON.stringify({ continue: true, suppressOutput: true })); } catch {}
+try {
+  console.log(JSON.stringify({ continue: true, suppressOutput: true }));
+} catch {}