opensquid 0.5.395

package/dist/hooks/drift-patterns.test.js

@@ -0,0 +1,325 @@
+import { afterEach, describe, expect, it } from "vitest";
+import { decide, findDrifts, stripHeredocBodies } from "./drift-patterns.js";
+function bash(command) {
+    return { tool: "Bash", input: { command } };
+}
+function telegramReply(text) {
+    return {
+        tool: "mcp__plugin_telegram_telegram__reply",
+        input: { chat_id: "8075471258", text },
+    };
+}
+describe("drift catalog — never-amend", () => {
+    it("blocks `git commit --amend`", () => {
+        const hits = findDrifts(bash('git commit --amend -m "fix typo"'));
+        expect(hits.map((h) => h.pattern.id)).toContain("never-amend");
+        expect(decide(hits).exit).toBe(2);
+    });
+    it("blocks `git commit -a --amend`", () => {
+        const hits = findDrifts(bash("git commit -a --amend"));
+        expect(hits.map((h) => h.pattern.id)).toContain("never-amend");
+    });
+    it("doesn't fire on a normal `git commit -m`", () => {
+        const hits = findDrifts(bash('git commit -m "regular commit"'));
+        expect(hits.map((h) => h.pattern.id)).not.toContain("never-amend");
+    });
+});
+describe("drift catalog — no-implicit-push", () => {
+    it("blocks `git push`", () => {
+        const hits = findDrifts(bash("git push origin main"));
+        expect(hits.map((h) => h.pattern.id)).toContain("no-implicit-push");
+        expect(decide(hits).exit).toBe(2);
+    });
+    it("blocks `git push -u origin feature`", () => {
+        const hits = findDrifts(bash("git push -u origin feature/x"));
+        expect(hits.map((h) => h.pattern.id)).toContain("no-implicit-push");
+    });
+    it("force-push to main is ALSO caught by both rules", () => {
+        const hits = findDrifts(bash("git push --force origin main"));
+        const ids = hits.map((h) => h.pattern.id);
+        expect(ids).toContain("no-implicit-push");
+        expect(ids).toContain("no-force-push-main");
+        expect(decide(hits).exit).toBe(2);
+    });
+    it("doesn't fire on `git pull` or `git status`", () => {
+        expect(findDrifts(bash("git pull")).length).toBe(0);
+        expect(findDrifts(bash("git status")).length).toBe(0);
+    });
+});
+describe("drift catalog — substrate-purity (engine commits)", () => {
+    it("warns on engine commit message referencing 'codex'", () => {
+        const hits = findDrifts(bash('cd /Users/slee/projects/loop/engine && git commit -m "v1.1: codex support"'));
+        expect(hits.map((h) => h.pattern.id)).toContain("substrate-purity");
+        // Severity = warn, so exit stays 0 (call proceeds).
+        expect(decide(hits).exit).toBe(0);
+    });
+    it("warns on engine commit referencing 'opensquid'", () => {
+        const hits = findDrifts(bash('cd ~/projects/loop/engine && git commit -m "support for opensquid pack"'));
+        expect(hits.map((h) => h.pattern.id)).toContain("substrate-purity");
+    });
+    it("doesn't fire on substrate-pure engine commits", () => {
+        const hits = findDrifts(bash('cd /Users/slee/projects/loop/engine && git commit -m "v1.1: Pack authorship"'));
+        expect(hits.map((h) => h.pattern.id)).not.toContain("substrate-purity");
+    });
+    it("doesn't fire on opensquid commits mentioning codex (correct context)", () => {
+        const hits = findDrifts(bash('cd /Users/slee/projects/opensquid && git commit -m "v0.4: codex CLI"'));
+        expect(hits.map((h) => h.pattern.id)).not.toContain("substrate-purity");
+    });
+});
+describe("decide — combining hits", () => {
+    it("returns exit 0 + empty stderr on no hits", () => {
+        const { exit, stderr } = decide([]);
+        expect(exit).toBe(0);
+        expect(stderr).toBe("");
+    });
+    it("returns exit 2 if any hit is severity=block", () => {
+        const hits = findDrifts(bash("git push --force origin main"));
+        const { exit, stderr } = decide(hits);
+        expect(exit).toBe(2);
+        expect(stderr).toContain("BLOCKED");
+    });
+    it("returns exit 0 + stderr on warn-only hits", () => {
+        const hits = findDrifts(bash('cd /Users/slee/projects/loop/engine && git commit -m "codex stuff"'));
+        const { exit, stderr } = decide(hits);
+        expect(exit).toBe(0);
+        expect(stderr).toContain("WARN");
+    });
+});
+describe("non-bash tools are not matched by bash rules", () => {
+    it("Edit calls bypass git rules", () => {
+        const call = {
+            tool: "Edit",
+            input: { file_path: "/x/y", old_string: "git commit --amend", new_string: "" },
+        };
+        expect(findDrifts(call).length).toBe(0);
+    });
+});
+describe("false-positive resistance — patterns inside quoted strings", () => {
+    it("never-amend ignores --amend inside double-quoted string", () => {
+        const hits = findDrifts(bash('echo "git commit --amend in a string literal"'));
+        expect(hits.map((h) => h.pattern.id)).not.toContain("never-amend");
+    });
+    it("never-amend ignores --amend inside single-quoted string", () => {
+        const hits = findDrifts(bash("grep 'git commit --amend' file.txt"));
+        expect(hits.map((h) => h.pattern.id)).not.toContain("never-amend");
+    });
+    it("no-implicit-push ignores 'git push' in an echo literal", () => {
+        const hits = findDrifts(bash('echo "to deploy run git push origin main"'));
+        expect(hits.map((h) => h.pattern.id)).not.toContain("no-implicit-push");
+    });
+    it("never-amend STILL fires when amend is a real shell token", () => {
+        const hits = findDrifts(bash('git commit --amend -m "fix typo"'));
+        expect(hits.map((h) => h.pattern.id)).toContain("never-amend");
+    });
+    it("never-amend fires after shell continuation (&&, ;, |)", () => {
+        expect(findDrifts(bash("cd /repo && git commit --amend")).map((h) => h.pattern.id)).toContain("never-amend");
+        expect(findDrifts(bash("foo; git commit --amend")).map((h) => h.pattern.id)).toContain("never-amend");
+    });
+});
+// =====================================================================
+// v0.6.5 (#136) — HEREDOC body stripping. Caught while dogfooding the
+// v0.6.4 commit: the no-implicit-push drift fired against a `git commit`
+// whose HEREDOC commit message body contained the literal string
+// describing a regex pattern (the words `git push` appeared in prose
+// describing a pattern). The hook scanned the entire bash command
+// string including HEREDOC bodies → false-positive block.
+//
+// Fix: stripHeredocBodies runs before stripQuotedStrings so the body
+// is removed before any drift regex sees it.
+// =====================================================================
+describe("stripHeredocBodies (v0.6.5)", () => {
+    it("strips single-quoted-delimiter HEREDOC body", () => {
+        const cmd = `git commit -m "$(cat <<'EOF'
+This body contains git push origin main
+EOF
+)"`;
+        expect(stripHeredocBodies(cmd)).not.toContain("git push");
+    });
+    it("strips unquoted-delimiter HEREDOC body", () => {
+        const cmd = `cat <<MARKER
+inner content with git push verbatim
+MARKER`;
+        expect(stripHeredocBodies(cmd)).not.toContain("git push");
+    });
+    it("strips double-quoted-delimiter HEREDOC body", () => {
+        const cmd = `cat <<"END"
+git push --force here
+END`;
+        expect(stripHeredocBodies(cmd)).not.toContain("git push");
+    });
+    it("strips tab-stripping (<<-) variant", () => {
+        const cmd = `cat <<-EOF
+\t\tgit push danger
+\tEOF`;
+        expect(stripHeredocBodies(cmd)).not.toContain("git push");
+    });
+    it("strips multiple HEREDOCs in one command", () => {
+        const cmd = `cat <<'A'
+contains git push
+A
+echo "between"
+cat <<'B'
+contains git commit --amend
+B`;
+        const stripped = stripHeredocBodies(cmd);
+        expect(stripped).not.toContain("git push");
+        expect(stripped).not.toContain("git commit --amend");
+    });
+    it("leaves a truncated HEREDOC (no closing delimiter) intact (fail-open)", () => {
+        const cmd = `cat <<EOF
+truncated body with git push but no EOF closing`;
+        // No \nEOF\b on its own → regex doesn't match → fail-open
+        expect(stripHeredocBodies(cmd)).toContain("git push");
+    });
+});
+describe("drift catalog — HEREDOC false-positive resistance (v0.6.5 #136)", () => {
+    it("no-implicit-push does NOT fire when 'git push' appears only in a HEREDOC commit message", () => {
+        // This is the exact pattern that bit me during the v0.6.4 commit.
+        const cmd = `git -c commit.gpgsign=false commit -m "$(cat <<'EOF'
+feat: blah
+
+- pushed (bash_regex git push) — this LITERAL string in the message
+  body would have tripped the no-implicit-push drift block before
+  the v0.6.5 fix.
+EOF
+)"`;
+        const hits = findDrifts(bash(cmd));
+        expect(hits.map((h) => h.pattern.id)).not.toContain("no-implicit-push");
+    });
+    it("never-amend does NOT fire on 'git commit --amend' in HEREDOC commit body", () => {
+        const cmd = `git commit -m "$(cat <<'EOF'
+Mentioning git commit --amend in the message body for context.
+EOF
+)"`;
+        const hits = findDrifts(bash(cmd));
+        expect(hits.map((h) => h.pattern.id)).not.toContain("never-amend");
+    });
+    it("STILL fires when 'git push' is the actual command after a HEREDOC", () => {
+        // The HEREDOC ends, then a real git push follows. Must still block.
+        const cmd = `cat <<'EOF'
+some prose
+EOF
+git push origin main`;
+        const hits = findDrifts(bash(cmd));
+        expect(hits.map((h) => h.pattern.id)).toContain("no-implicit-push");
+    });
+});
+// =====================================================================
+// v0.6.6 (#137) — OPENSQUID_SKIP_DRIFT emergency bypass. Mirrors
+// OPENSQUID_SKIP_VERSION_GATE / OPENSQUID_SKIP_WORKFLOW_GATE shape so
+// the operator only has one mental model for "this hook is wrong, get
+// out of my way". The documented uninstall-hooks workaround doesn't
+// actually work mid-session because Claude Code caches the settings.json
+// hook command at session start.
+// =====================================================================
+describe("OPENSQUID_SKIP_DRIFT bypass (v0.6.6)", () => {
+    // Vitest runs tests serially within a file by default; we restore the
+    // env var after each test so other tests aren't tainted.
+    afterEach(() => {
+        delete process.env.OPENSQUID_SKIP_DRIFT;
+    });
+    it("ALLOWS (exit 0) with bypass warning when OPENSQUID_SKIP_DRIFT=1 is in parent env and a block would fire", () => {
+        process.env.OPENSQUID_SKIP_DRIFT = "1";
+        const call = bash("git push origin main");
+        const hits = findDrifts(call);
+        expect(hits.length).toBeGreaterThan(0);
+        const { exit, stderr } = decide(hits, call);
+        expect(exit).toBe(0);
+        expect(stderr).toContain("BYPASSED via OPENSQUID_SKIP_DRIFT=1");
+        expect(stderr).toContain("no-implicit-push");
+    });
+    it("ALLOWS via INLINE prefix `OPENSQUID_SKIP_DRIFT=1 git push ...` even when parent env unset", () => {
+        delete process.env.OPENSQUID_SKIP_DRIFT;
+        const call = bash("OPENSQUID_SKIP_DRIFT=1 git push origin main");
+        const hits = findDrifts(call);
+        expect(hits.length).toBeGreaterThan(0);
+        const { exit, stderr } = decide(hits, call);
+        expect(exit).toBe(0);
+        expect(stderr).toContain("BYPASSED via OPENSQUID_SKIP_DRIFT=1");
+    });
+    it("ALLOWS via inline prefix after `cd ... &&` chain", () => {
+        const call = bash("cd /tmp && OPENSQUID_SKIP_DRIFT=1 git push origin main");
+        const hits = findDrifts(call);
+        const { exit } = decide(hits, call);
+        expect(exit).toBe(0);
+    });
+    it("includes ALL hit ids in the bypass message (operator audit trail)", () => {
+        process.env.OPENSQUID_SKIP_DRIFT = "1";
+        const call = bash("git push --force origin main");
+        const hits = findDrifts(call);
+        const { stderr } = decide(hits, call);
+        expect(stderr).toContain("no-implicit-push");
+        expect(stderr).toContain("no-force-push-main");
+    });
+    it("does NOT bypass when env var is unset or != '1'", () => {
+        process.env.OPENSQUID_SKIP_DRIFT = "true";
+        const call = bash("git push origin main");
+        const hits = findDrifts(call);
+        const { exit } = decide(hits, call);
+        expect(exit).toBe(2);
+    });
+    it("does NOT bypass when inline prefix value != '1'", () => {
+        const call = bash("OPENSQUID_SKIP_DRIFT=true git push origin main");
+        const hits = findDrifts(call);
+        const { exit } = decide(hits, call);
+        expect(exit).toBe(2);
+    });
+    it("does NOT bypass when var name appears only as substring", () => {
+        // Defensive: `MY_OPENSQUID_SKIP_DRIFT=1` shouldn't match (leading word-boundary).
+        const call = bash("MY_OPENSQUID_SKIP_DRIFT=1 git push origin main");
+        const hits = findDrifts(call);
+        const { exit } = decide(hits, call);
+        expect(exit).toBe(2);
+    });
+    it("emits nothing on empty hits regardless of env var", () => {
+        process.env.OPENSQUID_SKIP_DRIFT = "1";
+        const { exit, stderr } = decide([]);
+        expect(exit).toBe(0);
+        expect(stderr).toBe("");
+    });
+});
+describe("drift catalog — telegram-redirect-report (D2)", () => {
+    it("warns when plugin:telegram reply starts with `🦑 #N` task-report marker", () => {
+        const hits = findDrifts(telegramReply("🦑 #170 — engine-client startupAck fix\n\nshipped"));
+        expect(hits.map((h) => h.pattern.id)).toContain("telegram-redirect-report");
+        expect(decide(hits).exit).toBe(0); // warn-severity = non-blocking
+    });
+    it("warns with leading whitespace before the marker", () => {
+        const hits = findDrifts(telegramReply("  🦑 #4 — cleanup commit"));
+        expect(hits.map((h) => h.pattern.id)).toContain("telegram-redirect-report");
+    });
+    it("does NOT fire on regular plugin:telegram replies", () => {
+        const hits = findDrifts(telegramReply("ok, working on it now"));
+        expect(hits.map((h) => h.pattern.id)).not.toContain("telegram-redirect-report");
+    });
+    it("does NOT fire on chat_send (the correct tool for reports)", () => {
+        const hits = findDrifts({
+            tool: "mcp__opensquid__chat_send",
+            input: { text: "🦑 #170 — full 7-phase report goes here" },
+        });
+        expect(hits.map((h) => h.pattern.id)).not.toContain("telegram-redirect-report");
+    });
+});
+describe("drift catalog — bundled-commit (D4)", () => {
+    it("warns on a commit message that references 2+ task numbers", () => {
+        const hits = findDrifts(bash('git commit -m "close #166 and defer #168"'));
+        expect(hits.map((h) => h.pattern.id)).toContain("bundled-commit");
+        expect(decide(hits).exit).toBe(0); // warn-severity = non-blocking
+    });
+    it('warns on inline `-m "..."` with 2 #N refs on one line', () => {
+        const hits = findDrifts(bash('git commit -m "release: #166 + #168 + cleanup"'));
+        expect(hits.map((h) => h.pattern.id)).toContain("bundled-commit");
+    });
+    // Known limitation: HEREDOC commit message bodies are stripped by
+    // stripHeredocBodies BEFORE pattern matching, so refs inside the
+    // HEREDOC body don't fire this pattern. Adding staged-content-aware
+    // detection (via a dedicated bundled-commit-gate) is deferred.
+    it("does NOT fire on a single-task commit", () => {
+        const hits = findDrifts(bash('git commit -m "fix(workflow-gate): session_id mismatch (#166)"'));
+        expect(hits.map((h) => h.pattern.id)).not.toContain("bundled-commit");
+    });
+    it("does NOT fire on commits with no task ref at all", () => {
+        const hits = findDrifts(bash('git commit -m "refactor: drift-patterns.ts"'));
+        expect(hits.map((h) => h.pattern.id)).not.toContain("bundled-commit");
+    });
+});

package/dist/hooks/engine-vocab-gate.d.ts

@@ -0,0 +1,108 @@
+/**
+ * Engine vocabulary gate — pre-commit check enforcing substrate purity
+ * in engine repos (0.7.21 / drift D6).
+ *
+ * Wired into the PreToolUse hook for `git commit` commands when the
+ * cwd is detected as an engine repo. Catches commit messages AND
+ * staged content (CHANGELOG.md, code comments, etc.) that reference
+ * consumer-product names like `opensquid` or `claude code` — engine
+ * is general substrate and must not name specific consumers per
+ * `[[feedback_engine_vocabulary_discipline]]`.
+ *
+ * Why this gate exists: the existing `substrate-purity` pattern in
+ * drift-patterns.ts only matched commit messages where the bash
+ * command itself contained the path `loop/engine`. Real engine work
+ * happens in cwd /Users/slee/projects/loop/engine/ with the command
+ * just `git commit -m "..."` — the path isn't in the command. This
+ * gate uses cwd directly + scans both the -m message AND the staged
+ * diff content.
+ *
+ * Detection:
+ *   1. Skip silently if cwd doesn't look like an engine repo.
+ *   2. Parse the -m message text from the bash command; check for
+ *      consumer names.
+ *   3. Run `git diff --cached` and scan added lines for consumer
+ *      names, excluding `src/host/claude_code/**` paths and lines
+ *      that look like MIT attribution comments.
+ *   4. Block with an actionable message if any leak found.
+ *
+ * Fail-open invariant: any error parsing the command, running git, or
+ * scanning the diff → allow with stderr warning. Mirrors the
+ * workflow-gate / versioning-gate precedent.
+ *
+ * Override: `OPENSQUID_SKIP_ENGINE_VOCAB_GATE=1` bypasses with loud
+ * stderr warning. For genuine emergencies where naming the consumer
+ * is unavoidable (e.g. a migration-note commit explicitly tracking
+ * cross-product impact).
+ */
+export interface EngineVocabGateInput {
+    /** Working directory — used to detect if this is an engine repo and
+     * as the cwd for the git diff subprocess. */
+    cwd?: string;
+    /** The full bash command text — scanned for `-m "..."` message content. */
+    bashCommand?: string;
+}
+export interface EngineVocabGateResult {
+    block: boolean;
+    stderr: string;
+}
+/**
+ * Evaluate the gate against a planned `git commit` invocation.
+ *
+ * Exported for direct unit testing.
+ */
+export declare function evaluateEngineVocabGate(input: EngineVocabGateInput): Promise<EngineVocabGateResult>;
+/**
+ * Heuristic: is this cwd an engine repo?
+ *
+ * Catches:
+ *   - /any/path/engine (engine repo as a directory inside a monorepo)
+ *   - /any/path/loop-engine (standalone engine repo)
+ *   - /any/path/<anything>-engine
+ *
+ * False-positives risk: a `/Users/foo/projects/build-engine/` Vue.js
+ * project would match. Acceptable — this gate runs only on `git commit`
+ * in that dir, and the regex would not match any of its content. Net
+ * cost: one git-diff subprocess call. Cheap.
+ *
+ * Exported for direct unit testing.
+ */
+export declare function isEngineRepoCwd(cwd: string): boolean;
+/**
+ * Parse a `git commit -m "..."` (or `-m '...'`) message from a bash
+ * command and check for consumer names. Returns the first matched
+ * consumer-name substring, or null if clean.
+ *
+ * Handles common shells: -m followed by a quoted string, OR -m
+ * followed by a HEREDOC (`-m "$(cat <<'EOF' ... EOF)"`). For HEREDOC
+ * the regex below catches the body since it's embedded in the bash
+ * command string.
+ *
+ * Exported for direct unit testing.
+ */
+export declare function scanCommitMessage(bashCommand: string): string | null;
+interface DiffHit {
+    file: string;
+    match: string;
+}
+/**
+ * Run `git diff --cached` and scan added lines for consumer names.
+ * Excludes structurally-allowed paths and MIT attribution comments.
+ *
+ * Returns the list of hits (empty if clean).
+ *
+ * Exported for direct unit testing.
+ */
+export declare function scanStagedDiff(cwd: string): Promise<DiffHit[]>;
+/**
+ * Parse a unified diff text and return consumer-name hits on added
+ * lines, with path-prefix and attribution-comment exclusions applied.
+ *
+ * Exported for direct unit testing (avoids needing a git subprocess
+ * in unit tests).
+ */
+export declare function parseDiffForConsumerNames(diff: string): DiffHit[];
+/** Exported for the test suite. */
+export declare function checkOverrideEnv(): boolean;
+export {};
+//# sourceMappingURL=engine-vocab-gate.d.ts.map

package/dist/hooks/engine-vocab-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-vocab-gate.d.ts","sourceRoot":"","sources":["../../src.legacy/hooks/engine-vocab-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AA4BH,MAAM,WAAW,oBAAoB;IACnC;iDAC6C;IAC7C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CA6ChC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAKpD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWpE;AAED,UAAU,OAAO;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAMpE;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CA8BjE;AAoBD,mCAAmC;AACnC,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C"}

package/dist/hooks/engine-vocab-gate.js

@@ -0,0 +1,225 @@
+/**
+ * Engine vocabulary gate — pre-commit check enforcing substrate purity
+ * in engine repos (0.7.21 / drift D6).
+ *
+ * Wired into the PreToolUse hook for `git commit` commands when the
+ * cwd is detected as an engine repo. Catches commit messages AND
+ * staged content (CHANGELOG.md, code comments, etc.) that reference
+ * consumer-product names like `opensquid` or `claude code` — engine
+ * is general substrate and must not name specific consumers per
+ * `[[feedback_engine_vocabulary_discipline]]`.
+ *
+ * Why this gate exists: the existing `substrate-purity` pattern in
+ * drift-patterns.ts only matched commit messages where the bash
+ * command itself contained the path `loop/engine`. Real engine work
+ * happens in cwd /Users/slee/projects/loop/engine/ with the command
+ * just `git commit -m "..."` — the path isn't in the command. This
+ * gate uses cwd directly + scans both the -m message AND the staged
+ * diff content.
+ *
+ * Detection:
+ *   1. Skip silently if cwd doesn't look like an engine repo.
+ *   2. Parse the -m message text from the bash command; check for
+ *      consumer names.
+ *   3. Run `git diff --cached` and scan added lines for consumer
+ *      names, excluding `src/host/claude_code/**` paths and lines
+ *      that look like MIT attribution comments.
+ *   4. Block with an actionable message if any leak found.
+ *
+ * Fail-open invariant: any error parsing the command, running git, or
+ * scanning the diff → allow with stderr warning. Mirrors the
+ * workflow-gate / versioning-gate precedent.
+ *
+ * Override: `OPENSQUID_SKIP_ENGINE_VOCAB_GATE=1` bypasses with loud
+ * stderr warning. For genuine emergencies where naming the consumer
+ * is unavoidable (e.g. a migration-note commit explicitly tracking
+ * cross-product impact).
+ */
+import { exec as execCb } from "node:child_process";
+import { promisify } from "node:util";
+const exec = promisify(execCb);
+/**
+ * Consumer product names that may not appear in engine artifacts.
+ * Case-insensitive. Word-boundary-ish so substrings like
+ * "openssquidly" don't false-fire — but tight enough to catch
+ * "opensquid's", "claude_code", "open squid", etc.
+ */
+const CONSUMER_NAME_REGEX = /\b(opensquid|claude[._\- ]code|open[._\- ]squid)\b/i;
+/**
+ * File path prefix that's allowed to name consumer products structurally
+ * (engine's per-host adapter directories). Adding more here as new host
+ * adapters land is fine.
+ */
+const STRUCTURALLY_ALLOWED_PATH_PREFIXES = ["src/host/claude_code/"];
+/**
+ * Lines starting with comment syntax that mention MIT attribution are
+ * allowed — they're licence headers for cherry-picked code.
+ */
+const MIT_ATTRIBUTION_REGEX = /(\/\/|#|\*).*\b(MIT|Copyright|License)\b/i;
+/**
+ * Evaluate the gate against a planned `git commit` invocation.
+ *
+ * Exported for direct unit testing.
+ */
+export async function evaluateEngineVocabGate(input) {
+    if (checkOverrideEnv()) {
+        return {
+            block: false,
+            stderr: "🦑 [opensquid engine-vocab-gate] BYPASSED via OPENSQUID_SKIP_ENGINE_VOCAB_GATE=1\n",
+        };
+    }
+    const cwd = input.cwd;
+    if (!cwd || !isEngineRepoCwd(cwd)) {
+        // Not an engine repo — gate doesn't apply. Silent allow.
+        return { block: false, stderr: "" };
+    }
+    const violations = [];
+    // Scan 1: the -m message text from the bash command.
+    if (input.bashCommand) {
+        const messageHit = scanCommitMessage(input.bashCommand);
+        if (messageHit) {
+            violations.push(`  - commit message references "${messageHit}"`);
+        }
+    }
+    // Scan 2: staged file content (CHANGELOG.md edits, code comments, etc.).
+    try {
+        const stagedHits = await scanStagedDiff(cwd);
+        for (const hit of stagedHits) {
+            violations.push(`  - ${hit.file}: "${hit.match}" on added line`);
+        }
+    }
+    catch (err) {
+        return {
+            block: false,
+            stderr: `[opensquid engine-vocab-gate] git diff failed (proceeding): ${err instanceof Error ? err.message : err}\n`,
+        };
+    }
+    if (violations.length === 0) {
+        return { block: false, stderr: "" };
+    }
+    return {
+        block: true,
+        stderr: buildBlockMessage(violations),
+    };
+}
+/**
+ * Heuristic: is this cwd an engine repo?
+ *
+ * Catches:
+ *   - /any/path/engine (engine repo as a directory inside a monorepo)
+ *   - /any/path/loop-engine (standalone engine repo)
+ *   - /any/path/<anything>-engine
+ *
+ * False-positives risk: a `/Users/foo/projects/build-engine/` Vue.js
+ * project would match. Acceptable — this gate runs only on `git commit`
+ * in that dir, and the regex would not match any of its content. Net
+ * cost: one git-diff subprocess call. Cheap.
+ *
+ * Exported for direct unit testing.
+ */
+export function isEngineRepoCwd(cwd) {
+    // Normalize trailing slash.
+    const normalized = cwd.replace(/\/+$/, "");
+    // Match: ends with `/engine` OR ends with `*-engine`
+    return /\/engine$|-engine$/.test(normalized);
+}
+/**
+ * Parse a `git commit -m "..."` (or `-m '...'`) message from a bash
+ * command and check for consumer names. Returns the first matched
+ * consumer-name substring, or null if clean.
+ *
+ * Handles common shells: -m followed by a quoted string, OR -m
+ * followed by a HEREDOC (`-m "$(cat <<'EOF' ... EOF)"`). For HEREDOC
+ * the regex below catches the body since it's embedded in the bash
+ * command string.
+ *
+ * Exported for direct unit testing.
+ */
+export function scanCommitMessage(bashCommand) {
+    // Look for -m followed by a quoted string. Match both `-m "..."` and
+    // `-m '...'` forms, including HEREDOC bodies that get interpolated.
+    // Simple approach: scan the ENTIRE command for consumer names that
+    // appear after a `-m`. False-positives if the command has unrelated
+    // `-m` content followed by consumer names — acceptable for D6.
+    const dashMIndex = bashCommand.search(/\s-m\b/);
+    if (dashMIndex === -1)
+        return null;
+    const afterDashM = bashCommand.slice(dashMIndex);
+    const match = afterDashM.match(CONSUMER_NAME_REGEX);
+    return match ? match[0] : null;
+}
+/**
+ * Run `git diff --cached` and scan added lines for consumer names.
+ * Excludes structurally-allowed paths and MIT attribution comments.
+ *
+ * Returns the list of hits (empty if clean).
+ *
+ * Exported for direct unit testing.
+ */
+export async function scanStagedDiff(cwd) {
+    const { stdout } = await exec("git diff --cached --unified=0 --no-color", {
+        cwd,
+        maxBuffer: 4 * 1024 * 1024,
+    });
+    return parseDiffForConsumerNames(stdout);
+}
+/**
+ * Parse a unified diff text and return consumer-name hits on added
+ * lines, with path-prefix and attribution-comment exclusions applied.
+ *
+ * Exported for direct unit testing (avoids needing a git subprocess
+ * in unit tests).
+ */
+export function parseDiffForConsumerNames(diff) {
+    const hits = [];
+    let currentFile = null;
+    for (const line of diff.split("\n")) {
+        // Track file context. Unified diff: `+++ b/path/to/file`
+        if (line.startsWith("+++ ")) {
+            const path = line.slice(4).replace(/^b\//, "").trim();
+            currentFile = path === "/dev/null" ? null : path;
+            continue;
+        }
+        if (line.startsWith("--- "))
+            continue;
+        if (line.startsWith("@@"))
+            continue;
+        // Only scan added lines.
+        if (!line.startsWith("+"))
+            continue;
+        // Skip the `+++` header (caught above) and pure `+` lines.
+        if (line.length === 1)
+            continue;
+        const content = line.slice(1);
+        if (currentFile === null)
+            continue;
+        if (isStructurallyAllowedPath(currentFile))
+            continue;
+        if (MIT_ATTRIBUTION_REGEX.test(content))
+            continue;
+        const match = content.match(CONSUMER_NAME_REGEX);
+        if (match) {
+            hits.push({ file: currentFile, match: match[0] });
+        }
+    }
+    return hits;
+}
+function isStructurallyAllowedPath(path) {
+    return STRUCTURALLY_ALLOWED_PATH_PREFIXES.some((prefix) => path.startsWith(prefix));
+}
+function buildBlockMessage(violations) {
+    return (`🦑 [opensquid engine-vocab-gate] engine commit blocked — consumer-product names detected\n` +
+        `${violations.join("\n")}\n` +
+        `\n` +
+        `Engine is general substrate per [[feedback_engine_vocabulary_discipline]].\n` +
+        `Re-word using engine-domain terminology (e.g. "the RPC writer" / "the consumer",\n` +
+        `not "opensquid"; "claude_session_id" → neutral identifier). For per-host adapter\n` +
+        `code that is structurally consumer-specific, place under src/host/claude_code/**.\n` +
+        `\n` +
+        `Override (genuine emergency): set OPENSQUID_SKIP_ENGINE_VOCAB_GATE=1 for this command.\n`);
+}
+/** Exported for the test suite. */
+export function checkOverrideEnv() {
+    return process.env.OPENSQUID_SKIP_ENGINE_VOCAB_GATE === "1";
+}
+//# sourceMappingURL=engine-vocab-gate.js.map

package/dist/hooks/engine-vocab-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-vocab-gate.js","sourceRoot":"","sources":["../../src.legacy/hooks/engine-vocab-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,qDAAqD,CAAC;AAElF;;;;GAIG;AACH,MAAM,kCAAkC,GAAG,CAAC,uBAAuB,CAAU,CAAC;AAE9E;;;GAGG;AACH,MAAM,qBAAqB,GAAG,2CAA2C,CAAC;AAe1E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA2B;IAE3B,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,oFAAoF;SAC7F,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,yDAAyD;QACzD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,qDAAqD;IACrD,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC,kCAAkC,UAAU,GAAG,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,UAAU,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,KAAK,iBAAiB,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,+DAA+D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI;SACpH,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACtC,CAAC;IAED,OAAO;QACL,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,iBAAiB,CAAC,UAAU,CAAC;KACtC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,4BAA4B;IAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,qDAAqD;IACrD,OAAO,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,qEAAqE;IACrE,oEAAoE;IACpE,mEAAmE;IACnE,oEAAoE;IACpE,+DAA+D;IAC/D,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW;IAC9C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,0CAA0C,EAAE;QACxE,GAAG;QACH,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;KAC3B,CAAC,CAAC;IACH,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAkB,IAAI,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,yDAAyD;QACzD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,WAAW,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACjD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QACtC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAEpC,yBAAyB;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,2DAA2D;QAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE9B,IAAI,WAAW,KAAK,IAAI;YAAE,SAAS;QACnC,IAAI,yBAAyB,CAAC,WAAW,CAAC;YAAE,SAAS;QACrD,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QAElD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACjD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAY;IAC7C,OAAO,kCAAkC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAoB;IAC7C,OAAO,CACL,4FAA4F;QAC5F,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QAC5B,IAAI;QACJ,8EAA8E;QAC9E,oFAAoF;QACpF,oFAAoF;QACpF,qFAAqF;QACrF,IAAI;QACJ,0FAA0F,CAC3F,CAAC;AACJ,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,gCAAgC,KAAK,GAAG,CAAC;AAC9D,CAAC"}