hypomnema 1.3.0 → 1.3.2

package/hooks/hypo-personal-check.mjs

@@ -3,8 +3,8 @@
  * hypo-personal-check.mjs — PreCompact hook
  *
  * Hard gate before /compact. Blocks if:
- *   - the session-close memory files were not updated this session (fix #17:
- *     session-state.md, project hot.md, root hot.md, session-log, log.md)
+ *   - the session-close memory files were not updated this session
+ *     (session-state.md, project hot.md, root hot.md, session-log, log.md)
  *   - wiki git repo has uncommitted/unpushed changes
  *   - hot.md has forbidden structure
  *   - lint blockers exist
@@ -14,7 +14,7 @@
  *   2. HYPO_SKIP_GATE=1 in a recent *user-role* transcript message
  *      (assistant/tool output is excluded to prevent self-triggering from block reason text)
  *
- * NOTE: capacity bypass (wiki-context-critical.json ≥90%) was REMOVED by fix #26
+ * NOTE: capacity bypass (wiki-context-critical.json ≥90%) was REMOVED
  * (ADR 0022 amendment 2026-05-13). Spec §7.5: even at full context, minimal
  * session-close is mandatory — auto-bypass on capacity caused silent state loss.
  */
@@ -26,16 +26,11 @@ import { homedir } from 'os';
 import {
   HYPO_DIR,
   PKG_ROOT,
-  hypoIsClean,
-  hotMdIsClean,
-  sessionCloseFileStatus,
+  precompactGateStatus,
   readChecklist,
   isGateSkipped,
   isClosePattern,
   extractUserMessages,
-  extractTouchedWikiFiles,
-  closeFileTargets,
-  partitionLintScope,
 } from './hypo-shared.mjs';
 
 const WARNING_FILE = join(homedir(), '.claude', 'state', 'wiki-context-warning.json');
@@ -45,14 +40,19 @@ process.stdin.setEncoding('utf-8');
 process.stdin.on('data', (chunk) => (raw += chunk));
 process.stdin.on('end', () => {
   let transcriptPath = null;
+  let sessionId = null;
   try {
     const input = JSON.parse(raw || '{}');
     transcriptPath = input.transcript_path ?? null;
+    // A log-only marker for this session activates log-only gate
+    // semantics (no project attribution) so /compact does not block a closed
+    // non-project session on the active/phantom project's files.
+    sessionId = input.session_id ?? input.sessionId ?? null;
   } catch {
     /* fail-open */
   }
 
-  // ── Capacity bypass (≥90%) REMOVED — fix #26, ADR 0022 amendment 2026-05-13.
+  // ── Capacity bypass (≥90%) REMOVED — ADR 0022 amendment 2026-05-13.
   //    Even at full context, minimal session-close is mandatory (spec §7.5).
   //    Bypass paths are now only: HYPO_SKIP_GATE env / HYPO_SKIP_GATE in transcript.
 
@@ -93,164 +93,82 @@ process.stdin.on('end', () => {
   // ── Heavy checks ──
   const today = new Date().toISOString().slice(0, 10);
 
-  const gitStatus = hypoIsClean();
-  const hotStatus = hotMdIsClean();
-  // strict session-close (steps 1~6 of the 11-step crystallize
-  // checklist). closeFiles gates the 5 mandatory files (steps 1-4 + log.md);
-  // open-questions.md (step 5) is conditional ("변경 시") and intentionally
-  // ungated — see hypo-shared.mjs sessionCloseFileStatus and spec §5.2.7.
-  const closeFiles = sessionCloseFileStatus(HYPO_DIR);
-  const closeFilesReason = closeFiles.ok
-    ? ''
-    : `memory files not updated this session: ${[
-        ...closeFiles.missing.map((f) => `${f} (missing)`),
-        ...closeFiles.stale.map((f) => `${f} (stale)`),
-      ].join(', ')}`;
+  // The full PreCompact gate decision, single-sourced (ADR 0046). The SAME
+  // function backs `crystallize --check-session-close`, so a green self-check
+  // there means this hook will not block. precompactGateStatus runs git-clean +
+  // hot.md structure + session-close files (ADR 0043 global invariant) + scoped
+  // lint + W8 design-history + feedback projection. The transcript widens the
+  // lint scope to this session's edited files (ADR 0041); without one the scope
+  // is the mandatory close files. Read-only: pure feedback drift comes back as
+  // gate.driftTargets, a self-heal effect requirement we run as --write below.
+  let gate;
+  try {
+    gate = precompactGateStatus(HYPO_DIR, {
+      transcriptPath,
+      ...(sessionId ? { sessionId } : {}),
+    });
+  } catch (err) {
+    // Defense-in-depth: precompactGateStatus fails open per-check, but if it ever
+    // throws, never crash the PreCompact hook — fail open (continue) so a tooling
+    // fault can't wedge /compact.
+    process.stderr.write(`[hypo-personal-check] error: ${err?.message ?? String(err)}\n`);
+    console.log(JSON.stringify({ continue: true, suppressOutput: true }));
+    return;
+  }
 
-  const lintPath = PKG_ROOT ? join(PKG_ROOT, 'scripts', 'lint.mjs') : null;
-  let lintBlockers = [];
-  let lintW8 = [];
-  let lintNotices = []; // pre-existing debt in files this session did not touch
-  let lintSkipped = false;
-  if (!lintPath || !existsSync(lintPath)) {
-    lintSkipped = true;
-  } else {
-    try {
-      const r = spawnSync('node', [lintPath, '--json'], {
-        encoding: 'utf-8',
-        cwd: HYPO_DIR,
-        timeout: 30000,
+  // Self-heal pure feedback projection drift (ADR 0045): the one mutation the
+  // read-only gate leaves to the caller. Fails CLOSED — if the --write errors we
+  // turn the (otherwise non-blocking) drift into a blocker, since real drift is
+  // confirmed and silently passing it would defeat the gate. --write only applies
+  // when no target conflicts/over-caps (code===0 across ALL targets), so a late
+  // race exits non-zero and blocks here. It is semantic-preflight atomic but not
+  // filesystem-atomic (concurrent edit / mid-write I/O fault is best-effort) —
+  // pre-existing engine behavior, not introduced by the self-heal.
+  let feedbackHealed = '';
+  if (gate.ok && gate.driftTargets.length > 0) {
+    const feedbackPath = PKG_ROOT ? join(PKG_ROOT, 'scripts', 'feedback-sync.mjs') : null;
+    const w = feedbackPath
+      ? spawnSync(
+          process.execPath,
+          [
+            feedbackPath,
+            '--write',
+            '--no-input',
+            `--hypo-dir=${HYPO_DIR}`,
+            `--claude-home=${join(homedir(), '.claude')}`,
+          ],
+          { encoding: 'utf-8', timeout: 30000 },
+        )
+      : { status: 1 };
+    if (w.error || w.status === null || w.status !== 0) {
+      gate.ok = false;
+      gate.blockers.push({
+        type: 'feedback',
+        reason: `feedback projection drift (${gate.driftTargets.join(', ')}) — auto-sync failed; run \`hypomnema feedback-sync --write\` manually`,
       });
-      const parsed = JSON.parse(r.stdout || '{}');
-      const allErrors = parsed.errors || [];
-      const allW8 = (parsed.warns || []).filter((w) => w.id === 'W8');
-      // Bug B: judge this session on the files IT touched, not the whole vault.
-      // A readable transcript lets us scope (edited files ∪ mandatory close
-      // files); a missing/unreadable transcript falls back to the conservative
-      // global gate (never weaker than before).
-      const haveTranscript = !!(transcriptPath && existsSync(transcriptPath));
-      if (haveTranscript) {
-        const scope = new Set([
-          ...extractTouchedWikiFiles(transcriptPath, HYPO_DIR),
-          ...closeFileTargets(HYPO_DIR),
-        ]);
-        const part = partitionLintScope(allErrors, scope);
-        lintBlockers = part.blocking;
-        lintNotices = part.notice;
-        // W8 (design-history stale) is the CURRENT project's close
-        // responsibility, not cross-project debt — block on the active
-        // project's, surface others' as notices.
-        if (closeFiles.project) {
-          const mine = `projects/${closeFiles.project}/design-history.md`;
-          lintW8 = allW8.filter((w) => w.file === mine);
-          lintNotices.push(...allW8.filter((w) => w.file !== mine));
-        } else {
-          lintW8 = allW8;
-        }
-      } else {
-        lintBlockers = allErrors;
-        lintW8 = allW8;
-      }
-    } catch (err) {
-      /* fail-open */
-      process.stderr.write(`[hypo-personal-check] error: ${err?.message ?? String(err)}\n`);
+    } else {
+      feedbackHealed = `[WIKI CHECK] feedback projection re-synced (${gate.driftTargets.join(', ')}); MEMORY.md body may be unchanged — drift was in the managed block / side-files.`;
     }
   }
 
-  const lintOk = lintBlockers.length === 0;
-  const designHistoryOk = lintW8.length === 0;
-  // Non-blocking heads-up about pre-existing lint debt in untouched files (other
-  // projects / shared pages). Surfaced so it is visible but never blocks compact.
-  const noticeText =
-    lintNotices.length > 0
-      ? `[WIKI CHECK] ${lintNotices.length} pre-existing lint issue(s) in files this session did not touch (not blocking): ${[
-          ...new Set(lintNotices.map((b) => b.file)),
+  // Non-blocking heads-up about pre-existing lint / out-of-scope design-history
+  // debt in untouched files (other projects / shared pages). Surfaced so it is
+  // visible but never blocks compact. (Mirrors the pre-ADR-0046 inline behavior,
+  // which lumped out-of-scope W8 into the same lint-notice list.)
+  const debtNotices = gate.notices.filter((n) => n.type === 'lint' || n.type === 'design-history');
+  let noticeText =
+    debtNotices.length > 0
+      ? `[WIKI CHECK] ${debtNotices.length} pre-existing lint issue(s) in files this session did not touch (not blocking): ${[
+          ...new Set(debtNotices.map((n) => n.reason.replace(/ \([^)]*\)$/, ''))),
         ]
           .slice(0, 5)
-          .join(', ')}${lintNotices.length > 5 ? ', …' : ''} — clean up when convenient.`
+          .join(', ')}${debtNotices.length > 5 ? ', …' : ''} — clean up when convenient.`
       : '';
+  // Surface the self-heal so a re-synced projection is not a silent mutation of
+  // the user's MEMORY.md / CLAUDE.md (ADR 0045 transparency).
+  if (feedbackHealed) noticeText = noticeText ? `${noticeText}\n${feedbackHealed}` : feedbackHealed;
 
-  // ── fix #37 Phase C: feedback projection drift (ADR 0031) ──
-  // Single blocking gate invariant (spec §7.5): integrate into THIS hook, never
-  // add a separate PreCompact hook. `feedback-sync --check --strict` reports
-  // projection drift (wiki feedback SoT vs MEMORY / CLAUDE.md learned-behaviors
-  // projection). `--no-input` keeps this non-TTY hook from ever blocking on a
-  // prompt, and the engine's skip-MEMORY warning is *soft* (never escalated by
-  // --strict) so a fresh / external user whose ~/.claude/projects/<id> dir does
-  // not exist yet is never gated (contract §5 step 4). Fail-open on any spawn
-  // error, exactly like the lint check above.
-  const feedbackPath = PKG_ROOT ? join(PKG_ROOT, 'scripts', 'feedback-sync.mjs') : null;
-  let feedbackOk = true;
-  let feedbackReason = '';
-  let feedbackSkipped = false;
-  if (!feedbackPath || !existsSync(feedbackPath)) {
-    feedbackSkipped = true;
-  } else {
-    try {
-      const r = spawnSync(
-        process.execPath,
-        [
-          feedbackPath,
-          '--check',
-          '--strict',
-          '--no-input',
-          '--json',
-          `--hypo-dir=${HYPO_DIR}`,
-          `--claude-home=${join(homedir(), '.claude')}`,
-        ],
-        { encoding: 'utf-8', timeout: 30000 },
-      );
-      if (r.error || r.status === null) {
-        feedbackSkipped = true; // spawn failure → fail-open (never block on tooling)
-      } else if (r.status !== 0) {
-        // exit≠0 alone is ambiguous. A *missing* target file (e.g. a system
-        // whose ~/.claude/CLAUDE.md was never created) reports buildError +
-        // exit 1, which is benign — there is nothing to gate. Decide from the
-        // JSON report's per-target state instead of the raw exit code: block
-        // ONLY when some target has a genuine, actionable issue (drift,
-        // conflict, over-cap, or a malformed managed region). buildError is
-        // never actionable here, so any mix that lacks a real issue fails open
-        // — including memory:clean + claude:buildError, where the prior
-        // `every(buildError)` predicate wrongly blocked that case. Mirrors
-        // doctor's buildError→warn (non-fatal) handling.
-        let report = null;
-        try {
-          report = JSON.parse(r.stdout || '');
-        } catch {
-          /* unparseable → fail-open below */
-        }
-        const targets = report ? Object.values(report.targets || {}) : [];
-        const conflicted = targets.some(
-          (t) =>
-            t.intruder || t.unpaired || t.outOfContainer || (t.conflicts && t.conflicts.length),
-        );
-        const overCap = targets.some((t) => t.overCap);
-        const drifted = targets.some((t) => t.dirty);
-        if (!report || !(conflicted || overCap || drifted)) {
-          feedbackSkipped = true; // missing target / pure warning / unparseable → fail-open
-        } else {
-          feedbackOk = false;
-          feedbackReason = conflicted
-            ? 'feedback projection conflict (manual edit) — run `hypomnema feedback-sync --import-target-change --from=<memory|claude>`'
-            : overCap
-              ? 'feedback projection over cap — demote/archive feedback pages'
-              : 'feedback projection drift — run `hypomnema feedback-sync --write`';
-        }
-      }
-    } catch (err) {
-      feedbackSkipped = true;
-      process.stderr.write(`[hypo-personal-check] error: ${err?.message ?? String(err)}\n`);
-    }
-  }
-
-  if (
-    gitStatus.clean &&
-    hotStatus.clean &&
-    lintOk &&
-    designHistoryOk &&
-    closeFiles.ok &&
-    feedbackOk
-  ) {
+  if (gate.ok) {
     console.log(
       JSON.stringify(
         noticeText
@@ -264,13 +182,9 @@ process.stdin.on('end', () => {
   // ── Bypass 3: HYPO_SKIP_GATE ──
   if (isGateSkipped()) {
     const skipped = [
-      !gitStatus.clean ? gitStatus.reason : '',
-      !hotStatus.clean ? hotStatus.reason : '',
-      !closeFiles.ok ? closeFilesReason : '',
-      !designHistoryOk ? `design-history stale (${lintW8.length})` : '',
-      !feedbackOk ? feedbackReason : '',
-      lintSkipped ? 'lint skipped (hypo-pkg.json missing)' : '',
-      feedbackSkipped ? 'feedback-sync skipped (hypo-pkg.json missing)' : '',
+      ...gate.blockers.map((b) => b.reason),
+      gate.skipped.lint ? 'lint skipped (hypo-pkg.json missing)' : '',
+      gate.skipped.feedback ? 'feedback-sync skipped (hypo-pkg.json missing)' : '',
     ]
       .filter(Boolean)
       .join(', ');
@@ -284,18 +198,12 @@ process.stdin.on('end', () => {
   }
 
   // ── Block ──
+  // gate.blockers already carry per-type reasons in the canonical order
+  // (git, hot, close, lint, design-history, feedback) — same strings as before
+  // ADR 0046, now sourced from the shared gate instead of inline checks.
   const reasons = [
-    !gitStatus.clean ? gitStatus.reason : '',
-    !hotStatus.clean ? hotStatus.reason : '',
-    !closeFiles.ok ? closeFilesReason : '',
-    !lintOk
-      ? `lint blockers: ${[...new Set(lintBlockers.map((b) => b.id || b.file))].join(', ')}`
-      : '',
-    !designHistoryOk
-      ? `design-history stale: ${lintW8.map((w) => w.file.split('/')[1]).join(', ')}`
-      : '',
-    !feedbackOk ? feedbackReason : '',
-    lintSkipped ? 'lint skipped (run `hypomnema init` to enable lint gate)' : '',
+    ...gate.blockers.map((b) => b.reason),
+    gate.skipped.lint ? 'lint skipped (run `hypomnema init` to enable lint gate)' : '',
   ].filter(Boolean);
 
   const checklist = readChecklist(today);
@@ -304,11 +212,13 @@ process.stdin.on('end', () => {
     [
       `  [ ] 0. Read SCHEMA.md + hypo-guide.md (required before wiki work)`,
       `  [ ] 1. PRD       — create projects/<name>/prd.md if missing`,
-      `  [ ] 2. ADR       — decide yes/no on 5 types; if all N, note "no ADR — reason: <why>"`,
+      `  [ ] 2. ADR       — decide yes/no on 5 types. Design change → append to projects/<name>/design-history.md.`,
+      `           If none, note the literal marker "ADR 없음 — reason: <why>" in the session-log entry`,
+      `           (machine-readable; suppresses the W8 design-history gate for no-design sessions).`,
       `  [ ] 3. Ingest    — if new external knowledge, save to sources/ and ingest`,
       `  [ ] 4. Pages     — extract new concepts/patterns to pages/`,
       `  [ ] 5. Synthesis — if 3+ cross-page analysis results, save to pages/syntheses/`,
-      `  [ ] 6. session-log — append to projects/<name>/session-log/YYYY-MM.md`,
+      `  [ ] 6. session-log — append to projects/<name>/session-log/YYYY-MM-DD.md (daily shard)`,
       `  [ ] 7. index.md  — update Projects section if needed`,
       `  [ ] 8. log.md    — append ## [${today}] session | <project-name>`,
       `  [ ] 9. hot.md    — update projects/<name>/hot.md (no exceptions)`,
@@ -317,6 +227,8 @@ process.stdin.on('end', () => {
       `  [ ] 12. lint — run scripts/lint.mjs; fix errors in files YOU touched`,
       `           (other projects' / shared-page debt is reported as non-blocking notice)`,
       `  [ ] 13. git commit & push`,
+      `  [ ] 14. verify — run \`crystallize.mjs --check-session-close\`; only declare`,
+      `           the session closed once it prints "Compact-ready" (= this gate passes).`,
     ].join('\n');
 
   const closeIntentNote = hasCloseIntent

package/hooks/hypo-pre-commit.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * hypo-pre-commit.mjs — wiki git pre-commit hook worker (§6.8 fix #24)
+ * hypo-pre-commit.mjs — wiki git pre-commit hook worker (§6.8)
  *
  * Blocks staged files that match .hypoignore patterns.
  * Installed by `hypo init` to <wiki>/.git/hooks/pre-commit.

package/hooks/hypo-session-end.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * hypo-session-end.mjs — SessionEnd hook (fix #25 PR-A2, ADR 0022 Layer 2)
+ * hypo-session-end.mjs — SessionEnd hook (ADR 0022 Layer 2)
  *
  * `/clear` cannot be blocked: it never fires UserPromptSubmit (Stage 0 PoC,
  * 2026-05-14). The only intervention point is the SessionEnd(reason='clear')

package/hooks/hypo-session-start.mjs

@@ -176,7 +176,7 @@ function readLastGrowthLine() {
 }
 
 /**
- * fix #25 PR-A2 (ADR 0022 amendment 2026-05-14): if the prior session ended
+ * ADR 0022 amendment 2026-05-14: if the prior session ended
  * via `/clear`, hypo-session-end stashed its identity in `.cache/clear-marker.json`.
  * Read it (with 7-day stale guard), unlink it (one-shot), and return a
  * `[WIKI_AUTOCLOSE]` recovery line for additionalContext + stderr.
@@ -212,8 +212,8 @@ function gitPull(dir) {
 }
 
 /**
- * fix #10: surface unresolved sync failures recorded by a prior session's
- * Stop hook (fix #9). The entry is cleared only once this session's pull has
+ * Surface unresolved sync failures recorded by a prior session's
+ * Stop hook. The entry is cleared only once this session's pull has
  * succeeded AND there is no unpushed commit left behind by a failed push
  * (`[ahead N]`).
  *
@@ -323,6 +323,10 @@ let raw = '';
 process.stdin.setEncoding('utf-8');
 process.stdin.on('data', (chunk) => (raw += chunk));
 process.stdin.on('end', () => {
+  // Declared before the try so every emit branch — including the outer
+  // catch — carries the same `systemMessage` (the user-visible update/sibling
+  // banner). Reassigned once below after the notices are computed.
+  let outExtra = { continue: true, suppressOutput: true };
   try {
     let data = {};
     try {
@@ -339,10 +343,16 @@ process.stdin.on('end', () => {
     const clearRecoveryLine = buildClearRecoveryLine(data.source);
     const updateLine = buildUpdateNotice();
     const siblingLine = buildSiblingNotice();
-    // Intentional dual emit: stderr (yellow/cyan) is the human-visible nudge in
-    // the terminal; noticePrefix injects the same plain-text lines into the
-    // LLM's additionalContext so model and user start the session looking at
-    // the same state. ANSI escapes are kept out of additionalContext on purpose.
+    // The update + stale-sibling banners must reach the USER. On a
+    // SessionStart hook that exits 0, stderr is invisible in the normal TUI
+    // (only shown on exit 2 / --verbose) and additionalContext is model-only —
+    // `systemMessage` is the documented user-visible channel. Route those two
+    // banners there. They ALSO stay in noticePrefix → additionalContext below,
+    // so the model and the user start the session looking at the same state.
+    // (The other stderr notices — sync/growth/clear/suggest — are intentionally
+    // transcript/--verbose only and out of this banner's scope.)
+    const userMessage = [updateLine, siblingLine].filter(Boolean).join('\n\n');
+    if (userMessage) outExtra = { ...outExtra, systemMessage: userMessage };
     const notices = [syncLine, growthLine, clearRecoveryLine, updateLine, siblingLine].filter(
       Boolean,
     );
@@ -383,7 +393,7 @@ process.stdin.on('end', () => {
           JSON.stringify(
             buildOutput(
               `${noticePrefix}[WIKI HOT CACHE: project=${sanitizeProjForPrompt(hit.proj)}]\n\n${parts.join('\n\n')}`,
-              { continue: true, suppressOutput: true },
+              outExtra,
             ),
           ),
         );
@@ -399,10 +409,7 @@ process.stdin.on('end', () => {
           JSON.stringify(
             buildOutput(
               `${noticePrefix}[WIKI HOT CACHE: project=${sanitizeProjForPrompt(hit.proj)}, no snapshot yet]`,
-              {
-                continue: true,
-                suppressOutput: true,
-              },
+              outExtra,
             ),
           ),
         );
@@ -410,7 +417,7 @@ process.stdin.on('end', () => {
       return;
     }
 
-    // MISS: cwd matches no project. fix #23 / ADR 0023 — offer to create one
+    // MISS: cwd matches no project. ADR 0023 — offer to create one
     // when the ADR trigger conditions hold (git repo + project marker + no
     // cooldown + not previously declined). The actual scaffold is the LLM's
     // job on a "Y" reply (scripts/lib/project-create.mjs); the hook only nudges.
@@ -425,9 +432,9 @@ process.stdin.on('end', () => {
     if (!existsSync(GLOBAL_HOT)) {
       const notice = notices.join('\n\n');
       if (notice) {
-        console.log(JSON.stringify(buildOutput(notice, { continue: true, suppressOutput: true })));
+        console.log(JSON.stringify(buildOutput(notice, outExtra)));
       } else {
-        console.log(JSON.stringify({ continue: true, suppressOutput: true }));
+        console.log(JSON.stringify(outExtra));
       }
       return;
     }
@@ -439,9 +446,9 @@ process.stdin.on('end', () => {
       // would otherwise be silently dropped here.
       const notice = notices.join('\n\n');
       if (notice) {
-        console.log(JSON.stringify(buildOutput(notice, { continue: true, suppressOutput: true })));
+        console.log(JSON.stringify(buildOutput(notice, outExtra)));
       } else {
-        console.log(JSON.stringify({ continue: true, suppressOutput: true }));
+        console.log(JSON.stringify(outExtra));
       }
       return;
     }
@@ -449,12 +456,12 @@ process.stdin.on('end', () => {
       JSON.stringify(
         buildOutput(
           `${noticePrefix}[WIKI HOT CACHE: global — no project matched cwd=${cwd}]\n\n${globalContent}`,
-          { continue: true, suppressOutput: true },
+          outExtra,
         ),
       ),
     );
   } catch (err) {
     process.stderr.write(`[hypo-session-start] error: ${err?.message ?? String(err)}\n`);
-    console.log(JSON.stringify({ continue: true, suppressOutput: true }));
+    console.log(JSON.stringify(outExtra));
   }
 });