knoxis-helper 1.9.0 → 1.10.1

package/lib/knoxis-local-agent.js

@@ -1413,8 +1413,22 @@ function connectRelayWebSocket() {
             // Interactive mode: use multi-turn pair programming script
             const scriptPath = resolveInteractiveScript();
             if (scriptPath) {
-              command = buildEnvCommand({ KNOXIS_TASK_FILE: promptFile }, `node "${scriptPath}"`);
+              // Forward QIG attribution from relay message → env vars so
+              // SessionRecorder writes non-null workspace_id / product_slug /
+              // project_slug / task_ids to pair_programmer_sessions.
+              const envVars = { KNOXIS_TASK_FILE: promptFile, KNOXIS_WORKSPACE_PATH: wsDir };
+              if (msg.userId) envVars.KNOXIS_USER_ID = msg.userId;
+              if (msg.workspaceId) envVars.KNOXIS_WORKSPACE_ID = msg.workspaceId;
+              if (msg.productSlug) envVars.KNOXIS_PRODUCT_SLUG = msg.productSlug;
+              if (msg.projectSlug) envVars.KNOXIS_PROJECT_SLUG = msg.projectSlug;
+              if (msg.kitMode) envVars.KNOXIS_KIT_MODE = msg.kitMode;
+              if (Array.isArray(msg.taskIds) && msg.taskIds.length > 0) {
+                envVars.KNOXIS_TASK_IDS = msg.taskIds.filter(Boolean).join(',');
+              }
+              command = buildEnvCommand(envVars, `node "${scriptPath}"`);
               console.log(`   🤝 Interactive mode: ${scriptPath}`);
+              const forwarded = Object.keys(envVars).filter(k => k !== 'KNOXIS_TASK_FILE' && k !== 'KNOXIS_WORKSPACE_PATH');
+              if (forwarded.length > 0) console.log(`   🏷️  Identity vars: ${forwarded.join(', ')}`);
             } else {
               command = buildCatCommand(promptFile) + ' | claude --dangerously-skip-permissions';
               console.warn(`   ⚠️ Interactive script not found, falling back to single-shot`);

package/lib/session-recorder.js

@@ -3,6 +3,7 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
+const crypto = require('crypto');
 const { execSync } = require('child_process');
 const util = require('util');
 const { exec } = require('child_process');
@@ -65,29 +66,39 @@ const MAX_BAG_BYTES = 2 * 1024 * 1024;        // 2MB total — fits Postgres JSO
 const MAX_FILES_PER_DIR = 50;                 // Bounds runaway dirs (e.g. archive of old reports).
 const MAX_WALK_DEPTH = 5;
 
+/**
+ * Walk the workspace's framework markdown docs and return a SPLIT representation:
+ *   manifest[relPath] = { sha256, size }                  // small — goes into the JSONB column
+ *   contents[sha256]  = base64(utf8 content)              // large — uploaded to Supabase Storage
+ *
+ * Legacy placeholders (oversized-file notes, truncation marker) stay as string
+ * values in the manifest — they're not real files, just metadata the frontend
+ * already knows how to render.
+ */
 function readStateFiles(workspace) {
-  const out = {};
+  const manifest = {};
+  const contents = {};
   const skipped = [];
   const state = { bytes: 0, halted: false };
-  if (!workspace) return out;
+  if (!workspace) return { manifest, contents };
 
   for (const dir of STATE_DOC_DIRS) {
-    walkMdFiles(path.join(workspace, 'docs', dir), `docs/${dir}`, out, 0, state, skipped);
+    walkMdFiles(path.join(workspace, 'docs', dir), `docs/${dir}`, manifest, contents, 0, state, skipped);
     if (state.halted) break;
   }
 
   if (skipped.length > 0) {
-    out['__truncated__'] = JSON.stringify({
+    manifest['__truncated__'] = JSON.stringify({
       reason: `state_files bag hit ${MAX_BAG_BYTES}-byte budget`,
       capturedBytes: state.bytes,
       skippedFiles: skipped.slice(0, 200)
     }, null, 2);
   }
 
-  return out;
+  return { manifest, contents };
 }
 
-function walkMdFiles(absDir, relDir, out, depth, state, skipped) {
+function walkMdFiles(absDir, relDir, manifest, contents, depth, state, skipped) {
   if (state.halted || depth > MAX_WALK_DEPTH) return;
   let entries;
   try {
@@ -110,7 +121,7 @@ function walkMdFiles(absDir, relDir, out, depth, state, skipped) {
     const absPath = path.join(absDir, entry.name);
     const relPath = `${relDir}/${entry.name}`;
     if (entry.isDirectory()) {
-      walkMdFiles(absPath, relPath, out, depth + 1, state, skipped);
+      walkMdFiles(absPath, relPath, manifest, contents, depth + 1, state, skipped);
     } else if (entry.isFile()) {
       if (!entry.name.endsWith('.md')) continue;
       if (entry.name.includes('.bak-')) continue; // Skip *.bak-<timestamp> backups.
@@ -119,12 +130,12 @@ function walkMdFiles(absDir, relDir, out, depth, state, skipped) {
         continue;
       }
       filesInDir++;
-      readSafe(absPath, relPath, out, state, skipped);
+      readSafe(absPath, relPath, manifest, contents, state, skipped);
     }
   }
 }
 
-function readSafe(absPath, relPath, out, state, skipped) {
+function readSafe(absPath, relPath, manifest, contents, state, skipped) {
   let stat;
   try {
     stat = fs.statSync(absPath);
@@ -133,7 +144,9 @@ function readSafe(absPath, relPath, out, state, skipped) {
   }
   if (!stat.isFile()) return;
   if (stat.size > MAX_STATE_FILE_BYTES) {
-    out[relPath] = `[File omitted: ${stat.size} bytes exceeds ${MAX_STATE_FILE_BYTES}-byte cap]`;
+    // Oversized files stay as inline placeholder strings — the frontend treats
+    // these as "metadata, not file content" and shows them as-is.
+    manifest[relPath] = `[File omitted: ${stat.size} bytes exceeds ${MAX_STATE_FILE_BYTES}-byte cap]`;
     return;
   }
   if (state.bytes + stat.size > MAX_BAG_BYTES) {
@@ -141,12 +154,20 @@ function readSafe(absPath, relPath, out, state, skipped) {
     state.halted = true;
     return;
   }
+  let buf;
   try {
-    out[relPath] = fs.readFileSync(absPath, 'utf8');
-    state.bytes += stat.size;
+    buf = fs.readFileSync(absPath);
   } catch (e) {
-    // Read failure (perms etc.) — skip silently.
+    return; // Read failure (perms etc.) — skip silently.
+  }
+  const sha256 = crypto.createHash('sha256').update(buf).digest('hex');
+  manifest[relPath] = { sha256, size: buf.length };
+  // Dedupe: only one base64 payload per unique sha. Multiple paths with the
+  // same content reference the same Storage object.
+  if (!Object.prototype.hasOwnProperty.call(contents, sha256)) {
+    contents[sha256] = buf.toString('base64');
   }
+  state.bytes += buf.length;
 }
 
 // Enumerate feature slugs from the workspace so the frontend can list features
@@ -344,6 +365,10 @@ class SessionRecorder {
   _buildRecord(finalCommit, totalDiff) {
     const completedSteps = this.steps.filter(s => s.completedAt && !s.error).length;
     const closedCleanly = this.steps.length > 0 && completedSteps === this.steps.length;
+    // Split the state-files snapshot into a manifest (small, goes to JSONB) and
+    // a base64 contents map (large, backend offloads to Supabase Storage and
+    // strips before persisting the row).
+    const { manifest: stateFilesManifest, contents: stateFileContents } = readStateFiles(this.workspace);
     return {
       sessionId: this.sessionId,
       version: '1.1.0',
@@ -367,13 +392,14 @@ class SessionRecorder {
       completedSteps,
       closedCleanly,
       filesTouched: extractFilesTouched(totalDiff),
-      // Snapshot of state-pack + architecture + feature files at session-end
-      // so the QIG frontend can display the latest STATUS / HANDOFF /
-      // DECISIONS / ROADMAP / etc. without needing live filesystem access
-      // on the dev's machine. Single bag keyed by relative path; frontend
-      // filters by prefix (docs/state/*, docs/architecture/*,
-      // docs/features/<slug>/*).
-      stateFiles: readStateFiles(this.workspace),
+      // Manifest keyed by relative path. Each entry is either a `{sha256, size}`
+      // pointer (Supabase Storage), an inline placeholder string (oversized
+      // file / truncation marker), or — in older agents — the raw content
+      // string. The frontend renders all three shapes; see useStateFileBody.
+      stateFiles: stateFilesManifest,
+      // sha → base64(utf8). Drained server-side into pair-programmer-files
+      // bucket; never persisted to the JSONB column.
+      stateFileContents,
       // Quick index of feature slugs found in docs/features/. Lets the
       // frontend enumerate features without parsing the bag.
       featureSlugs: listFeatureSlugs(this.workspace),

package/lib/templates/kickoff.js

@@ -15,6 +15,23 @@ You are running in single-shot mode. There is no interactive REPL with the opera
 
 The interview happens through \`docs/state/OPEN_QUESTIONS.md\`. You write questions there, the operator fills in answers there, the operator re-runs kickoff, you read the answers and produce the context pack. Same questions, same coverage, just batched.
 
+## Step 0a — Reconcile prompt-injected operator answers
+
+The QIG frontend stores operator answers in a database and injects them into this prompt as a section titled \`## Operator answers to pending questions\`. Each entry has the shape:
+
+\`\`\`
+- Q: <question text>
+  A: <answer text>
+\`\`\`
+
+If that section is present, treat those answers as authoritative — operators typed them in the frontend after the previous kickoff run and they may not be reflected in the file yet. Before evaluating the branch in Step 0:
+
+1. Read \`docs/state/OPEN_QUESTIONS.md\`. Scaffold it if missing (see State A).
+2. For each \`Q:\`/\`A:\` pair in the prompt block, find the matching entry in \`## Pending Answers\` by question text (case-insensitive, whitespace-normalized — \`#N.\` prefix is optional in the prompt). When you find a match, replace its \`**Answer:** _(fill in)_\` line with \`**Answer:** <answer>\` (or \`**Answer:** <answer> *(via frontend)*\` if you want the provenance preserved).
+3. Save the file.
+
+If the prompt block is absent or empty, skip this step entirely. After reconciliation (or skip), proceed to Step 0 with the file as the source of truth.
+
 ## Step 0 — Read state and pick a branch
 
 Before anything else, read \`docs/state/OPEN_QUESTIONS.md\` (if it doesn't exist, scaffold the layout first). It has three sections: \`## Pending Answers\`, \`## Active\`, \`## Resolved\`. Look only at \`## Pending Answers\` to decide which branch you're in.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "knoxis-helper",
-  "version": "1.9.0",
+  "version": "1.10.1",
   "description": "Local helper for Knoxis pair programming - connects your machine to Knoxis on qig.ai",
   "bin": {
     "knoxis-helper": "./bin/knoxis-helper.js"