mason-context 0.16.1 → 0.16.3

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.16.3 — 2026-09-09
+
+- Coordinate overlapping hooks without holding the shared state lock during audit analysis. Reuse analysis for identical inputs, let changed inputs proceed independently, and revalidate before publishing results so older work cannot overwrite newer evidence.
+- Retain independent execution receipts during parallel calls. Report repeated, durably recorded failures once per session until recovery; keep failures without receipts visible and preserve pre-edit evidence for shell and unknown tools.
+- Accept decision bodies up to 2,500 characters, with a warning above the recommended 1,500. Preserve the full body, report precise validation limits, and shorten generated IDs at word boundaries where possible.
+- Cover slow checks, overlapping CLI processes, failure recovery, and changing inputs with concurrency regressions. Simplify README badges for consistent rendering.
+
+Run `mason upgrade` for standalone installations, then restart running assistants. Existing PATH-based project integrations do not need setup again for this release.
+
+## 0.16.2 — 2026-09-09
+
+- Guard generated hooks when Mason is absent, and keep a checkout without local host setup quiet. Preserve active failure diagnostics and strict MCP startup; setup/status/teardown recognize the generated guard variants without project wrapper scripts.
+- Observe known read-only tools without rescanning audit inputs or advancing verification. Keep before/after capture for shell and unknown tools. Add a reproducible full-CLI hook benchmark and publish its measured scope and limits.
+- Document hook inputs, retained data, local versus optional networked features, MCP installation, and company mirrors. Require an explicit version with a custom release mirror to avoid public version discovery.
+- Exercise core CLI/MCP and hook paths with denied network operations, raw-input retention markers, inactive/invalid setup, and changed evidence before potentially mutating tools. On macOS, apply OS network denial to the tested process tree too.
+
 ## 0.16.1 — 2026-09-08
 
 - Resolve references using literal import paths and declared Kotlin/Java package symbols. Separate explicit path mentions and uncertain name candidates; suppress config/document-name collisions and keep weak candidates out of compact task context with an omission count.

package/README.md

@@ -1,16 +1,22 @@
+<div align="center">
+
 # Mason
 
-[![npm version](https://img.shields.io/npm/v/mason-context)](https://www.npmjs.com/package/mason-context)
-[![CI](https://img.shields.io/github/actions/workflow/status/adrianczuczka/mason/ci.yml?branch=main)](https://github.com/adrianczuczka/mason/actions/workflows/ci.yml)
-[![npm downloads](https://img.shields.io/npm/dm/mason-context)](https://www.npmjs.com/package/mason-context)
-[![license](https://img.shields.io/github/license/adrianczuczka/mason)](https://github.com/adrianczuczka/mason/blob/main/LICENSE)
-[![issues](https://img.shields.io/github/issues/adrianczuczka/mason)](https://github.com/adrianczuczka/mason/issues)
+### Your agents are creating tech debt. Mason helps you prevent it.
+
+**Remember why decisions were made · Catch outdated guidance · Find what else needs updating**
 
-## Your AI agent is creating tech debt.
+[![npm version](https://img.shields.io/npm/v/mason-context?style=flat-square&labelColor=334155&color=2563eb)](https://www.npmjs.com/package/mason-context)
+[![CI](https://img.shields.io/github/actions/workflow/status/adrianczuczka/mason/ci.yml?branch=main&style=flat-square&labelColor=334155&label=CI)](https://github.com/adrianczuczka/mason/actions/workflows/ci.yml)
+[![Monthly downloads](https://img.shields.io/npm/dm/mason-context?style=flat-square&labelColor=334155&color=2563eb)](https://www.npmjs.com/package/mason-context)
+[![License](https://img.shields.io/github/license/adrianczuczka/mason?style=flat-square&labelColor=334155&color=64748b)](https://github.com/adrianczuczka/mason/blob/main/LICENSE)
 
-**Mason helps your coding agent catch what a patch leaves behind:** stale instructions, missed companion updates, and engineering decisions that need another look.
+[![Works with Codex](https://img.shields.io/badge/Codex-supported-64748b?style=flat-square&labelColor=334155)](https://github.com/adrianczuczka/mason/blob/main/docs/setup.md)
+[![Works with Claude Code](https://img.shields.io/badge/Claude%20Code-supported-64748b?style=flat-square&labelColor=334155)](https://github.com/adrianczuczka/mason/blob/main/docs/setup.md)
+[![MCP compatible](https://img.shields.io/badge/MCP-compatible-64748b?style=flat-square&labelColor=334155)](https://github.com/adrianczuczka/mason/blob/main/docs/setup.md#other-clients)
+[![Supported platforms](https://img.shields.io/badge/platforms-macOS%20%7C%20Linux%20%7C%20Windows-64748b?style=flat-square&labelColor=334155)](https://github.com/adrianczuczka/mason/blob/main/docs/distribution.md)
 
-Works through MCP, with automatic documentation checks for **Codex** and **Claude Code**. No concept map required.
+</div>
 
 ## Get started
 
@@ -74,6 +80,7 @@ Earlier read-only decision-retrieval evaluations scored **9.0/10 with Mason vs 7
 ## Documentation
 
 - [Setup, hooks, and upgrades](docs/setup.md)
+- [Data and network behavior](docs/data-and-network.md) · [Hook performance](docs/hook-performance.md)
 - [Audits, repair verification, and CI evidence](docs/checks.md)
 - [Decisions, tools, and optional architecture maps](docs/reference.md)
 - [Roadmap](ROADMAP.md) · [Changelog](CHANGELOG.md) · [MIT license](LICENSE)

package/dist/mason-audit.js

@@ -1337,6 +1337,7 @@ import path14 from "path";
 import fs8 from "fs/promises";
 import path13 from "path";
 import { createHash } from "crypto";
+import { z as z3 } from "zod";
 
 // src/context/lexical.ts
 import path12 from "path";
@@ -1479,6 +1480,18 @@ function decisionProvenance(record, freshness = "unknown") {
 }
 
 // src/decisions/decisions.ts
+var TITLE_MAX_CHARS = 80;
+var BODY_RECOMMENDED_CHARS = 1500;
+var BODY_MAX_CHARS = 2500;
+var boundedText = (field, max, hint) => z3.string({
+  errorMap: (issue, ctx) => ({ message: issue.code === "too_big" ? `${field} has ${ctx.data.length} characters; maximum is ${max} (${ctx.data.length - max} over). ${hint}` : ctx.defaultError })
+}).trim().min(1, `${field} must be non-empty`).max(max);
+var decisionTitleSchema = boundedText("title", TITLE_MAX_CHARS, "Tighten it to a specific headline.");
+var decisionBodySchema = boundedText(
+  "body",
+  BODY_MAX_CHARS,
+  `Aim for ${BODY_RECOMMENDED_CHARS} characters or fewer. Preserve the rule, reason, and exceptions; put supporting references in sources.`
+);
 async function loadDecisionStore(rootDir) {
   const records = [];
   const diagnostics = [];
@@ -1654,96 +1667,103 @@ async function computeAudit(rootDir, options = {}) {
 import fs10 from "fs/promises";
 import path16 from "path";
 import { createHash as createHash2, randomUUID as randomUUID2 } from "crypto";
-import { z as z3 } from "zod";
-var checkSchema = z3.enum(["deleted-reference", "new-module", "stale-count", "dead-command", "deps-changed", "decision-anchor-drift"]);
-var commitSchema = z3.object({ hash: z3.string().regex(/^[a-f0-9]{40,64}$/), date: z3.string(), subject: z3.string() });
-var anchorSchema = z3.object({ doc: z3.string(), line: z3.number().int().positive().nullable(), excerpt: z3.string().nullable() });
-var count = z3.number().int().nonnegative();
-var evidenceSchema = z3.discriminatedUnion("kind", [
-  z3.object({
-    kind: z3.literal("missing-path"),
-    claimed: z3.string(),
-    renamedTo: z3.string().nullable(),
+import { z as z4 } from "zod";
+var checkSchema = z4.enum(["deleted-reference", "new-module", "stale-count", "dead-command", "deps-changed", "decision-anchor-drift"]);
+var commitSchema = z4.object({ hash: z4.string().regex(/^[a-f0-9]{40,64}$/), date: z4.string(), subject: z4.string() });
+var anchorSchema = z4.object({ doc: z4.string(), line: z4.number().int().positive().nullable(), excerpt: z4.string().nullable() });
+var count = z4.number().int().nonnegative();
+var evidenceSchema = z4.discriminatedUnion("kind", [
+  z4.object({
+    kind: z4.literal("missing-path"),
+    claimed: z4.string(),
+    renamedTo: z4.string().nullable(),
     deletedInCommit: commitSchema.nullable(),
-    everTracked: z3.boolean(),
-    parentDirExists: z3.boolean()
+    everTracked: z4.boolean(),
+    parentDirExists: z4.boolean()
   }),
-  z3.object({
-    kind: z3.literal("unmentioned-dir"),
-    dir: z3.string(),
+  z4.object({
+    kind: z4.literal("unmentioned-dir"),
+    dir: z4.string(),
     sourceFileCount: count,
     firstCommit: commitSchema.nullable(),
-    checkedDocs: z3.array(z3.string())
+    checkedDocs: z4.array(z4.string())
   }),
-  z3.object({
-    kind: z3.literal("count-mismatch"),
+  z4.object({
+    kind: z4.literal("count-mismatch"),
     claimed: count,
     actual: count,
-    unit: z3.string(),
-    countedFrom: z3.string(),
-    members: z3.array(z3.string())
+    unit: z4.string(),
+    countedFrom: z4.string(),
+    members: z4.array(z4.string())
   }),
-  z3.object({
-    kind: z3.literal("missing-script"),
-    scriptName: z3.string(),
-    invocation: z3.string(),
-    manifestsChecked: z3.array(z3.string()),
-    availableScripts: z3.array(z3.string())
+  z4.object({
+    kind: z4.literal("missing-script"),
+    scriptName: z4.string(),
+    invocation: z4.string(),
+    manifestsChecked: z4.array(z4.string()),
+    availableScripts: z4.array(z4.string())
   }),
-  z3.object({
-    kind: z3.literal("doc-behind-manifests"),
+  z4.object({
+    kind: z4.literal("doc-behind-manifests"),
     docLastCommit: commitSchema,
-    manifestCommits: z3.array(commitSchema.extend({ files: z3.array(z3.string()) })),
+    manifestCommits: z4.array(commitSchema.extend({ files: z4.array(z4.string()) })),
     totalCommits: count
   }),
-  z3.object({
-    kind: z3.literal("decision-anchor"),
-    decisionId: z3.string(),
-    title: z3.string(),
-    changedFiles: z3.array(z3.string()),
-    refreshedHash: z3.string(),
-    provenance: z3.object({}).passthrough().optional()
+  z4.object({
+    kind: z4.literal("decision-anchor"),
+    decisionId: z4.string(),
+    title: z4.string(),
+    changedFiles: z4.array(z4.string()),
+    refreshedHash: z4.string(),
+    provenance: z4.object({}).passthrough().optional()
   })
 ]);
-var findingSchema = z3.object({ message: z3.string(), anchor: anchorSchema, evidence: evidenceSchema });
+var findingSchema = z4.object({ message: z4.string(), anchor: anchorSchema, evidence: evidenceSchema });
 var issueSchema = findingSchema.extend({
-  type: z3.enum(["deleted-reference", "new-module", "stale-count", "dead-command"]),
-  confidence: z3.enum(["certain", "likely"])
+  type: z4.enum(["deleted-reference", "new-module", "stale-count", "dead-command"]),
+  confidence: z4.enum(["certain", "likely"])
 });
-var advisorySchema = findingSchema.extend({ type: z3.enum(["deps-changed", "decision-anchor-drift"]) });
-var checkResultSchema = z3.object({
-  issues: z3.array(issueSchema),
-  advisories: z3.array(advisorySchema),
-  suppressedAdvisories: z3.array(advisorySchema).optional(),
-  skipped: z3.array(z3.object({ check: z3.string(), reason: z3.string(), doc: z3.string().optional() }))
+var advisorySchema = findingSchema.extend({ type: z4.enum(["deps-changed", "decision-anchor-drift"]) });
+var checkResultSchema = z4.object({
+  issues: z4.array(issueSchema),
+  advisories: z4.array(advisorySchema),
+  suppressedAdvisories: z4.array(advisorySchema).optional(),
+  skipped: z4.array(z4.object({ check: z4.string(), reason: z4.string(), doc: z4.string().optional() }))
 });
-var reportSchema = z3.object({
-  version: z3.literal(1),
-  root: z3.string(),
-  gitAvailable: z3.literal(true),
+var reportSchema = z4.object({
+  version: z4.literal(1),
+  root: z4.string(),
+  gitAvailable: z4.literal(true),
   headHash: commitSchema.shape.hash,
-  checksRun: z3.array(checkSchema).nonempty(),
-  docs: z3.array(z3.object({
-    path: z3.enum(DOC_CANDIDATES),
+  checksRun: z4.array(checkSchema).nonempty(),
+  docs: z4.array(z4.object({
+    path: z4.enum(DOC_CANDIDATES),
     lastCommit: commitSchema.nullable(),
-    dirty: z3.boolean(),
+    dirty: z4.boolean(),
     lineCount: count
   })).nonempty(),
-  decisionsChecked: z3.boolean(),
-  clean: z3.boolean(),
-  issues: z3.array(issueSchema),
-  advisories: z3.array(advisorySchema),
-  suppressedAdvisories: z3.array(advisorySchema).optional(),
-  skippedChecks: z3.array(z3.object({ check: z3.string(), reason: z3.string(), doc: z3.string().optional() }))
+  decisionsChecked: z4.boolean(),
+  clean: z4.boolean(),
+  issues: z4.array(issueSchema),
+  advisories: z4.array(advisorySchema),
+  suppressedAdvisories: z4.array(advisorySchema).optional(),
+  skippedChecks: z4.array(z4.object({ check: z4.string(), reason: z4.string(), doc: z4.string().optional() }))
 });
-var baselineSchema = z3.object({
-  kind: z3.literal("mason-audit-repair"),
-  version: z3.literal(1),
-  createdAt: z3.string().datetime(),
+var baselineSchema = z4.object({
+  kind: z4.literal("mason-audit-repair"),
+  version: z4.literal(1),
+  createdAt: z4.string().datetime(),
   report: reportSchema,
-  digest: z3.string().regex(/^[a-f0-9]{64}$/)
+  digest: z4.string().regex(/^[a-f0-9]{64}$/)
 });
 var digest = (value) => createHash2("sha256").update(JSON.stringify(value)).digest("hex");
+var repairFindingSchema = z4.object({
+  id: z4.string(),
+  original: z4.union([issueSchema, advisorySchema]),
+  status: z4.enum(["resolved", "unresolved", "review-required", "unverified"]),
+  reason: z4.string(),
+  current: z4.union([issueSchema, advisorySchema]).optional()
+});
 function findingId(finding) {
   const e = finding.evidence;
   let key;
@@ -1797,7 +1817,7 @@ async function stableAudit(root, checks, options = {}) {
 }
 async function prepareRepair(rootDir, checks = ALL_CHECKS, options = {}) {
   const root = await fs10.realpath(rootDir);
-  const selected = z3.array(checkSchema).nonempty().parse(checks);
+  const selected = z4.array(checkSchema).nonempty().parse(checks);
   const report = await stableAudit(root, selected, options);
   if (!report) throw new Error("No context files found to prepare a repair.");
   if (!report.gitAvailable) throw new Error("Readable Git history is required to prepare a repair.");