patchwork-os 0.2.0-alpha.8 → 0.2.0-beta.0

package/dist/automationSuggestions.js

@@ -0,0 +1,150 @@
+/**
+ * automationSuggestions — pattern-mine the activity log + run history to
+ * surface "you've been doing X by hand; want to make a recipe?" hints.
+ *
+ * From docs/strategic/2026-05-02/memory-ecosystem-report.md §6. Three of
+ * the four query-catalog patterns ship here; the fourth ("repeated
+ * manual workflow" via PrefixSpan-lite sequence mining) is deferred to
+ * a follow-up — the agent flagged it as the only entry in the catalog
+ * that requires a new ~50-line primitive (`mineSequences`), and shipping
+ * it without dashboard rendering would be premature.
+ *
+ *   1. **Co-occurring pairs** — tools that often run within W minutes of
+ *      each other but don't already appear together in any successful
+ *      recipe → "create a recipe?" suggestion.
+ *   2. **Installed but unused** — tools registered with the bridge but
+ *      never called → "review your installed tool list" suggestion.
+ *   3. **Recipe trust graduation** — recipes with ≥ 10 runs all status
+ *      "done" → "consider auto-approving" suggestion (does NOT auto-
+ *      change policy; this is purely a hint).
+ *
+ * Pure function over (ActivityLog, RecipeRunLog, ToolRegistry). No I/O
+ * of its own; tested in isolation by feeding mock instances. The CLI
+ * `patchwork suggest` is a thin printer over this output.
+ */
+import { computeCoOccurrence } from "./fp/activityAnalytics.js";
+import { listTools } from "./recipes/toolRegistry.js";
+const DEFAULT_CO_OCCURRENCE_WINDOW_MS = 5 * 60 * 1000;
+const DEFAULT_CO_OCCURRENCE_MIN_COUNT = 5;
+const DEFAULT_ACTIVITY_SINCE_MS = 7 * 24 * 60 * 60 * 1000;
+const DEFAULT_TRUST_GRADUATION_MIN_RUNS = 10;
+/**
+ * Compute the full suggestion set. Returns at most 30 suggestions
+ * (10 of each kind) sorted by salience within each bucket.
+ */
+export function computeAutomationSuggestions(deps) {
+    const window = deps.coOccurrenceWindowMs ?? DEFAULT_CO_OCCURRENCE_WINDOW_MS;
+    const minCount = deps.coOccurrenceMinCount ?? DEFAULT_CO_OCCURRENCE_MIN_COUNT;
+    const sinceLookback = deps.activitySinceMs ?? DEFAULT_ACTIVITY_SINCE_MS;
+    const minRuns = deps.trustGraduationMinRuns ?? DEFAULT_TRUST_GRADUATION_MIN_RUNS;
+    const sinceMs = Date.now() - sinceLookback;
+    const recent = deps.activityLog.queryAll({ sinceMs });
+    const suggestions = [];
+    // (1) Co-occurring tool pairs that aren't already in a recipe.
+    // The agent's filter `!pairAlreadyInRecipe(p, runs)` requires us to
+    // know which (tool, tool) pairs ever appeared together inside a single
+    // recipe run. We synthesize that set from RecipeRun.stepResults.
+    const pairsInRecipes = deps.recipeRunLog
+        ? buildRecipePairSet(deps.recipeRunLog)
+        : new Set();
+    const coOccurringPairs = computeCoOccurrence(recent, window, 50)
+        .filter((p) => p.count >= minCount)
+        .filter((p) => !pairsInRecipes.has(p.pair));
+    for (const { pair, count } of coOccurringPairs.slice(0, 10)) {
+        const [a, b] = pair.split("|");
+        suggestions.push({
+            kind: "co_occurring_pair",
+            label: `You called ${a} and ${b} together ${count} times in the last 7 days. Create a recipe?`,
+            details: { pair: [a, b], count },
+        });
+    }
+    // (2) Installed but never used (in the lookback window).
+    const listToolNames = deps.listToolNamesFn ?? defaultListToolNames;
+    const installed = listToolNames();
+    if (installed.length > 0) {
+        const usedSet = new Set();
+        for (const e of recent) {
+            if (e.tool)
+                usedSet.add(e.tool);
+        }
+        const unused = installed.filter((t) => !usedSet.has(t));
+        if (unused.length > 0) {
+            // Single rolled-up suggestion with the count + a few examples;
+            // listing every unused tool would flood the output for fresh
+            // installs where ~150 of 170 tools have never been called.
+            const examples = unused.slice(0, 5);
+            const more = unused.length > 5 ? `, … (+${unused.length - 5} more)` : "";
+            suggestions.push({
+                kind: "installed_but_unused",
+                label: `${unused.length} installed tools haven't been used in the last 7 days. Examples: ${examples.join(", ")}${more}.`,
+                details: { unusedTools: unused.slice(0, 50) },
+            });
+        }
+    }
+    // (3) Recipe trust graduation — recipes with ≥ minRuns successful runs.
+    if (deps.recipeRunLog) {
+        const byRecipe = groupRunsByRecipe(deps.recipeRunLog);
+        const graduates = [...byRecipe.entries()]
+            .filter(([, runs]) => runs.length >= minRuns)
+            .filter(([, runs]) => runs.every((r) => r.status === "done"))
+            .sort((a, b) => b[1].length - a[1].length)
+            .slice(0, 10);
+        for (const [recipeName, runs] of graduates) {
+            suggestions.push({
+                kind: "recipe_trust_graduation",
+                label: `Recipe \`${recipeName}\` has succeeded ${runs.length}/${runs.length} times — consider trust graduation.`,
+                details: { recipeName, runCount: runs.length },
+            });
+        }
+    }
+    return suggestions;
+}
+function defaultListToolNames() {
+    return listTools().map((t) => t.id);
+}
+/**
+ * Build the set of (toolA, toolB) pairs that ever appeared together
+ * inside a single recipe run. Pairs are alphabetized to match
+ * `computeCoOccurrence`'s key shape ("a|b" with a < b).
+ *
+ * We pull from the most recent 500 runs (the default in-memory cap) —
+ * older runs are evicted from RAM and we don't pay for the disk scan
+ * here; if a tool pair only ever appeared in a 6-month-old run, the
+ * suggestion will fire as if the pair is new, which is a fine UX
+ * (the user has time to re-promote it).
+ */
+function buildRecipePairSet(runLog) {
+    const pairs = new Set();
+    const runs = runLog.query({ limit: 500 });
+    for (const run of runs) {
+        if (!run.stepResults || run.stepResults.length < 2)
+            continue;
+        const tools = run.stepResults
+            .map((s) => s.tool)
+            .filter((t) => typeof t === "string" && t.length > 0);
+        for (let i = 0; i < tools.length; i++) {
+            for (let j = i + 1; j < tools.length; j++) {
+                const a = tools[i];
+                const b = tools[j];
+                if (!a || !b || a === b)
+                    continue;
+                const key = a < b ? `${a}|${b}` : `${b}|${a}`;
+                pairs.add(key);
+            }
+        }
+    }
+    return pairs;
+}
+function groupRunsByRecipe(runLog) {
+    const grouped = new Map();
+    // We pull more than the default 100 since we're computing aggregate
+    // stats — 500 is the in-memory cap and matches the typical buffer.
+    const runs = runLog.query({ limit: 500 });
+    for (const run of runs) {
+        const list = grouped.get(run.recipeName) ?? [];
+        list.push(run);
+        grouped.set(run.recipeName, list);
+    }
+    return grouped;
+}
+//# sourceMappingURL=automationSuggestions.js.map

package/dist/automationSuggestions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automationSuggestions.js","sourceRoot":"","sources":["../src/automationSuggestions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAwDtD,MAAM,+BAA+B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACtD,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAC1C,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1D,MAAM,iCAAiC,GAAG,EAAE,CAAC;AAE7C;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAA8B;IAE9B,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,IAAI,+BAA+B,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,IAAI,+BAA+B,CAAC;IAC9E,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,IAAI,yBAAyB,CAAC;IACxE,MAAM,OAAO,GACX,IAAI,CAAC,sBAAsB,IAAI,iCAAiC,CAAC;IAEnE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAEtD,MAAM,WAAW,GAA2B,EAAE,CAAC;IAE/C,+DAA+D;IAC/D,oEAAoE;IACpE,uEAAuE;IACvE,iEAAiE;IACjE,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY;QACtC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC;QACvC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;IACtB,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC;SAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QACnD,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,cAAc,CAAC,QAAQ,CAAC,aAAa,KAAK,6CAA6C;YAC9F,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE;SACjC,CAAC,CAAC;IACL,CAAC;IAED,yDAAyD;IACzD,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,IAAI,oBAAoB,CAAC;IACnE,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,+DAA+D;YAC/D,6DAA6D;YAC7D,2DAA2D;YAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,sBAAsB;gBAC5B,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,oEAAoE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG;gBACxH,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;aACtC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC;aAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;aAC5D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;aACzC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;YAC3C,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,yBAAyB;gBAC/B,KAAK,EAAE,YAAY,UAAU,oBAAoB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,qCAAqC;gBAChH,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,kBAAkB,CAAC,MAAoB;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC7D,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW;aAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC1C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACnB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACnB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAClC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAoB;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,oEAAoE;IACpE,mEAAmE;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/bridge.d.ts

@@ -39,8 +39,10 @@ export declare class Bridge {
     private pluginTools;
     private pluginWatcher;
     private automationHooks;
+    private recipeOrchestration;
     private recipeScheduler;
     private recipeRunLog;
+    private recipeOrchestrator;
     private commitIssueLinkLog;
     private decisionTraceLog;
     /** Pre-computed digest of recent decisions, refreshed on each session connect. */
@@ -56,6 +58,7 @@ export declare class Bridge {
     /** ISO timestamp of last getProjectContext cache write — drives status-bar "context X min ago". */
     private _lastContextCachedAt;
     private wsHeartbeatInterval;
+    private tokenUsageTracker;
     constructor(config: Config);
     /** Push live bridge state to the extension for status-bar display. */
     private _emitLiveState;

package/dist/bridge.js

@@ -11,27 +11,32 @@ import { getApprovalQueue } from "./approvalQueue.js";
 import { AutomationHooks, loadPolicy } from "./automation.js";
 import { loadOrCreateBridgeToken } from "./bridgeToken.js";
 import { repairBridgeToolsRulesIfStale } from "./bridgeToolsRules.js";
-import { createDriver } from "./claudeDriver.js";
 import { ClaudeOrchestrator } from "./claudeOrchestrator.js";
 import { CommitIssueLinkLog } from "./commitIssueLinkLog.js";
 import { DecisionTraceLog } from "./decisionTraceLog.js";
+import { createDriver } from "./drivers/index.js";
 import { ExtensionClient } from "./extensionClient.js";
+import { lockKillSwitchEnv } from "./featureFlags.js";
 import { FileLock } from "./fileLock.js";
 import { buildEnforcementReminder } from "./instructionsUtils.js";
 import { LockFileManager } from "./lockfile.js";
 import { Logger } from "./logger.js";
 import { OAuthServerImpl } from "./oauth.js";
+import { loadConfig as loadPatchworkConfig } from "./patchworkConfig.js";
 import { loadPlugins, loadPluginsFull } from "./pluginLoader.js";
 import { PluginWatcher } from "./pluginWatcher.js";
+import { isPreToolUseHookRegistered } from "./preToolUseHook.js";
 import { probeAll } from "./probe.js";
-import { RecipeScheduler } from "./recipes/scheduler.js";
-import { findWebhookRecipe, listInstalledRecipes, loadRecipePrompt, renderWebhookPrompt, saveRecipe, } from "./recipesHttp.js";
+import { RecipeOrchestration } from "./recipeOrchestration.js";
+import { warnAboutLegacyPermissionsSidecars } from "./recipes/migrationWarnings.js";
+import { RecipeOrchestrator } from "./recipes/RecipeOrchestrator.js";
 import { classifyTool } from "./riskTier.js";
 import { RecipeRunLog } from "./runLog.js";
 import { Server } from "./server.js";
 import { SessionCheckpoint } from "./sessionCheckpoint.js";
 import { StreamableHttpHandler } from "./streamableHttp.js";
 import { initTelemetry, shutdownTelemetry } from "./telemetry.js";
+import { TokenUsageTracker } from "./tokenUsageTracker.js";
 import { createCtxQueryTracesTool } from "./tools/ctxQueryTraces.js";
 import { readNote, writeNote } from "./tools/handoffNote.js";
 import { registerAllTools } from "./tools/index.js";
@@ -112,8 +117,10 @@ export class Bridge {
     pluginTools = [];
     pluginWatcher = null;
     automationHooks = undefined;
+    recipeOrchestration = null;
     recipeScheduler = null;
     recipeRunLog = null;
+    recipeOrchestrator = null;
     commitIssueLinkLog = null;
     decisionTraceLog = null;
     /** Pre-computed digest of recent decisions, refreshed on each session connect. */
@@ -129,6 +136,7 @@ export class Bridge {
     /** ISO timestamp of last getProjectContext cache write — drives status-bar "context X min ago". */
     _lastContextCachedAt = null;
     wsHeartbeatInterval = null;
+    tokenUsageTracker;
     constructor(config) {
         this.config = config;
         this.logger = new Logger(config.verbose, config.jsonl);
@@ -136,6 +144,7 @@ export class Bridge {
         const configDir = process.env.CLAUDE_CONFIG_DIR ?? path.join(os.homedir(), ".claude");
         this.authToken = config.fixedToken ?? loadOrCreateBridgeToken(configDir);
         this.server = new Server(this.authToken, this.logger, config.corsOrigins);
+        this.server.bridgeConfigPath = config.configFilePath ?? undefined;
         if (config.issuerUrl) {
             this.oauthServer = new OAuthServerImpl(this.authToken, config.issuerUrl, {
                 configDir,
@@ -150,6 +159,10 @@ export class Bridge {
             this.logger.info(`Audit log: ${config.auditLogPath}`);
         }
         this.extensionClient = new ExtensionClient(this.logger);
+        this.tokenUsageTracker = new TokenUsageTracker({
+            workspace: config.workspace,
+            logger: { warn: (m) => this.logger.warn(m) },
+        });
         // Handle new Claude Code connections
         this.server.on("connection", async (ws) => {
             // Reject connections before probes are ready
@@ -181,6 +194,15 @@ export class Bridge {
                     existing.graceTimer = null;
                     existing.ws = ws;
                     existing.wsAlive = true;
+                    // Clean up old WS listener + reject stale pending elicitations
+                    // before attaching the new socket. Without this, the previous
+                    // listener accumulates and pending elicitations from the old
+                    // client can resolve against the new connection's `activeWs`,
+                    // surfacing prompts to a client that didn't request them.
+                    // Intentionally NOT calling `detach()` — that would abort
+                    // in-flight tool calls, but grace-period semantics preserve
+                    // those across the reconnect.
+                    existing.transport.detachSoft();
                     existing.transport.attach(ws);
                     ws.on("pong", () => {
                         existing.wsAlive = true;
@@ -239,8 +261,26 @@ export class Bridge {
             transport.sessionId = sessionId;
             transport.setActivityLog(this.activityLog);
             transport.setToolRateLimit(this.config.toolRateLimit);
+            if (this.config.lazyTools)
+                transport.setLazyTools(true);
             if (this.server.approvalGate !== "off") {
                 this.logger.info(`[patchwork] approval gate active: ${this.server.approvalGate} tier(s) require dashboard approval`);
+                // The approval gate only sees traffic if Claude Code's PreToolUse
+                // hook is registered to POST into /approvals. If it isn't, every
+                // CC tool call bypasses the bridge entirely — the queue stays
+                // empty, no `approval_decision` rows accumulate, and the entire
+                // personalSignals catalog has no input data. Silent foot-gun
+                // that wasted hours of investigation; surface it loudly.
+                try {
+                    const ccSettingsPath = path.join(process.env.CLAUDE_CONFIG_DIR ?? path.join(os.homedir(), ".claude"), "settings.json");
+                    if (!isPreToolUseHookRegistered(ccSettingsPath)) {
+                        this.logger.warn?.(`[patchwork] WARNING: approval gate is on but no PreToolUse hook found in ${ccSettingsPath}. ` +
+                            `Claude Code will bypass the approval queue. Run 'patchwork-init' to register the hook.`);
+                    }
+                }
+                catch {
+                    // Best-effort warning — never block startup on a hook check failure.
+                }
                 transport.setApprovalGate(async ({ toolName, params, sessionId }) => {
                     const tier = classifyTool(toolName);
                     if (this.server.approvalGate === "off")
@@ -677,7 +717,11 @@ export class Bridge {
     async start() {
         // 0. Initialize OpenTelemetry (no-op when OTEL_EXPORTER_OTLP_ENDPOINT is unset)
         initTelemetry();
-        // 0a. Auto-repair .claude/rules/bridge-tools.md if stale (present but missing the
+        // 0a. Snapshot env-derived kill-switch flags. After this, plugins or
+        // recipe steps mutating `process.env.PATCHWORK_FLAG_*` cannot disable an
+        // active emergency stop. Closes MED-2 from the 2026-04-28 audit.
+        lockKillSwitchEnv();
+        // 0b. Auto-repair .claude/rules/bridge-tools.md if stale (present but missing the
         // current version sentinel). Older package versions write stale files that may
         // lack new tool substitution rules. Repair is silent on success; falls back to
         // warn-only if the template is missing or the write fails.
@@ -685,6 +729,7 @@ export class Bridge {
         // 1. Probe available CLI tools (pass workspace so local node_modules/.bin is checked)
         this.probes = await probeAll(this.config.workspace);
         this.ready = true;
+        this.tokenUsageTracker.start();
         // 2. Load plugins (after probes, before accepting sessions)
         this.pluginTools = await loadPlugins(this.config.plugins, this.config, this.logger);
         if (this.config.pluginWatch && this.config.plugins.length > 0) {
@@ -703,8 +748,19 @@ export class Bridge {
         this.logger.info(`Available linters: ${probeList(["tsc", "eslint", "pyright", "ruff", "cargo", "go", "biome"])}`);
         this.logger.info(`Available test runners: ${probeList(["vitest", "jest", "pytest", "cargo", "go"])}`);
         // 2. Initialize Claude driver and orchestrator (if configured)
-        if (this.config.claudeDriver !== "none") {
-            const driver = createDriver(this.config.claudeDriver, this.config.claudeBinary, this.config.antBinary, (msg) => this.logger.info(msg));
+        if (this.config.driver !== "none") {
+            const driver = createDriver(this.config.driver, {
+                binary: this.config.claudeBinary,
+                antBinary: this.config.antBinary,
+                bridgeMcp: this.config.driver === "gemini"
+                    ? () => this.port > 0
+                        ? {
+                            url: `http://127.0.0.1:${this.port}/mcp`,
+                            authToken: this.authToken,
+                        }
+                        : undefined
+                    : undefined,
+            }, (msg) => this.logger.info(msg));
             // Patchwork: enrichment link log is useful regardless of orchestrator.
             const patchworkDir = path.join(os.homedir(), ".patchwork");
             this.commitIssueLinkLog = new CommitIssueLinkLog({
@@ -764,17 +820,33 @@ export class Bridge {
                     },
                 });
                 this.logger.info(`[bridge] Claude driver: ${driver.name}`);
-                // Patchwork: start cron-trigger scheduler once the orchestrator exists.
+                // Recipe orchestrator — owns in-flight dedup across all entry paths.
+                this.recipeOrchestrator = new RecipeOrchestrator({
+                    workdir: this.config.workspace,
+                });
+                // Patchwork: wire recipe server fns + build cron scheduler.
                 const recipesDir = path.join(os.homedir(), ".patchwork", "recipes");
-                this.recipeScheduler = new RecipeScheduler({
+                // One-shot scan for legacy `<name>.permissions.json` sidecars (alpha.36+
+                // no longer generates them). Skipped under NODE_ENV=test.
+                warnAboutLegacyPermissionsSidecars(recipesDir);
+                this.recipeOrchestration = new RecipeOrchestration({
+                    server: this.server,
+                    getOrchestrator: () => this.orchestrator,
+                    recipeOrchestrator: this.recipeOrchestrator,
+                    recipeRunLog: this.recipeRunLog,
+                    activityLog: this.activityLog,
+                    workdir: this.config.workspace,
+                    logger: this.logger,
+                });
+                this.recipeOrchestration.wireServerFns();
+                this.recipeScheduler = RecipeOrchestration.buildScheduler({
                     recipesDir,
-                    enqueue: (opts) => this.orchestrator.enqueue(opts),
+                    runRecipeFn: async (name) => this.server.runRecipeFn?.(name),
+                    enqueue: (opts) => this.orchestrator?.enqueue(opts) ?? "",
                     logger: this.logger,
                 });
-                const scheduled = this.recipeScheduler.start();
-                if (scheduled.length > 0) {
-                    this.logger.info(`[patchwork] scheduled ${scheduled.length} cron recipe${scheduled.length === 1 ? "" : "s"}`);
-                }
+                // scheduler.start() deferred to after this.port is set (see below)
+                // so bridgeMcp callback has a valid port when first cron fires.
             }
         }
         if (this.config.automationEnabled) {
@@ -808,6 +880,7 @@ export class Bridge {
                 extensionCircuitBreaker: this.extensionClient.getCircuitBreakerState(),
                 extensionDisconnectCount: this.extensionDisconnectCount,
                 recentActivity: this.activityLog.query({ last: 10 }),
+                tokens: this.tokenUsageTracker.getTotals(),
             };
         };
         this.server.metricsFn = () => this.activityLog.toPrometheus({
@@ -974,6 +1047,37 @@ export class Bridge {
             };
         };
         this.server.streamFn = (listener) => this.activityLog.subscribe(listener);
+        this.server.cancelTaskFn = (id) => this.orchestrator?.cancel(id, "user") ?? false;
+        // Wire `/sessions` for the dashboard's Sessions page. The same Map is
+        // already iterated by `statusFn` for the bridge-status payload — exposing
+        // it as a list-only endpoint lets the dashboard render per-session cards
+        // without coupling to the rest of the status payload. Without this the
+        // page returns 404 forever (sessionsFn was declared but never assigned),
+        // even when sessions are connected.
+        this.server.sessionsFn = () => {
+            const approvals = getApprovalQueue().list();
+            const pendingBySession = new Map();
+            for (const a of approvals) {
+                if (!a.sessionId)
+                    continue;
+                // Match by 8-char prefix because the dashboard's session id is
+                // the same prefix shape (statusFn emits `s.id.slice(0, 8)`).
+                const prefix = a.sessionId.slice(0, 8);
+                pendingBySession.set(prefix, (pendingBySession.get(prefix) ?? 0) + 1);
+            }
+            const out = [];
+            for (const s of this.sessions.values()) {
+                const id = s.id.slice(0, 8);
+                out.push({
+                    id,
+                    connectedAt: new Date(s.connectedAt).toISOString(),
+                    openedFileCount: s.openedFiles.size,
+                    pendingApprovals: pendingBySession.get(id) ?? 0,
+                    ...(s.remoteAddr ? { remoteAddr: s.remoteAddr } : {}),
+                });
+            }
+            return out;
+        };
         this.server.tasksFn = () => ({
             tasks: (this.orchestrator?.list() ?? []).map((t) => ({
                 taskId: t.id,
@@ -1000,134 +1104,21 @@ export class Bridge {
         this.server.approvalWebhookUrl =
             this.config.approvalWebhookUrl ?? undefined;
         this.server.onApprovalDecision = (event, meta) => this.activityLog.recordEvent(event, meta);
-        this.server.recipesFn = () => {
-            const recipesDir = path.join(os.homedir(), ".patchwork", "recipes");
-            return listInstalledRecipes(recipesDir);
-        };
-        this.server.saveRecipeFn = (draft) => {
-            const recipesDir = path.join(os.homedir(), ".patchwork", "recipes");
-            return saveRecipe(recipesDir, draft);
-        };
-        this.server.runsFn = (q) => {
-            if (!this.recipeRunLog)
-                return [];
-            return this.recipeRunLog.query({
-                ...(q.limit !== undefined && { limit: q.limit }),
-                ...(q.trigger !== undefined && {
-                    trigger: q.trigger,
-                }),
-                ...(q.status !== undefined && {
-                    status: q.status,
-                }),
-                ...(q.recipe !== undefined && { recipe: q.recipe }),
-                ...(q.after !== undefined && { after: q.after }),
-            });
-        };
-        this.server.sessionsFn = () => [...this.sessions.values()].map((s) => {
-            const tools = this.activityLog.querySessionTools(s.id, 1);
-            return {
-                id: s.id,
-                connectedAt: new Date(s.connectedAt).toISOString(),
-                openedFileCount: s.openedFiles.size,
-                pendingApprovals: getApprovalQueue()
-                    .list()
-                    .filter((a) => a.sessionId === s.id).length,
-                firstTool: tools[0]?.tool,
-                remoteAddr: s.remoteAddr,
-            };
-        });
-        this.server.sessionDetailFn = (id) => {
-            const s = this.sessions.get(id);
-            const summary = s
-                ? {
-                    id: s.id,
-                    connectedAt: new Date(s.connectedAt).toISOString(),
-                    openedFileCount: s.openedFiles.size,
-                    pendingApprovals: getApprovalQueue()
-                        .list()
-                        .filter((a) => a.sessionId === s.id).length,
-                }
-                : null;
-            const lifecycle = this.activityLog.querySessionLifecycle(id, 100);
-            const tools = this.activityLog.querySessionTools(id, 100);
-            const decisions = this.decisionTraceLog?.query({ sessionId: id, limit: 50 }) ?? [];
-            const approvals = getApprovalQueue()
-                .list()
-                .filter((a) => a.sessionId === id);
-            return {
-                summary,
-                lifecycle: lifecycle,
-                tools: tools,
-                decisions: decisions,
-                approvals: approvals,
-            };
-        };
-        this.server.webhookFn = async (hookPath, payload) => {
-            if (!this.orchestrator) {
-                return {
-                    ok: false,
-                    error: "orchestrator_unavailable",
-                };
-            }
-            const recipesDir = path.join(os.homedir(), ".patchwork", "recipes");
-            const match = findWebhookRecipe(recipesDir, hookPath);
-            if (!match) {
-                return { ok: false, error: "not_found" };
-            }
-            const loaded = loadRecipePrompt(recipesDir, match.name);
-            if (!loaded) {
-                return { ok: false, error: "recipe_file_missing" };
-            }
-            try {
-                const taskId = this.orchestrator.enqueue({
-                    prompt: renderWebhookPrompt(loaded.prompt, payload),
-                    triggerSource: `webhook:${match.name}`,
-                });
-                return { ok: true, taskId, name: match.name };
-            }
-            catch (err) {
-                return {
-                    ok: false,
-                    error: err instanceof Error ? err.message : String(err),
-                };
-            }
-        };
-        this.server.runRecipeFn = async (name, vars) => {
-            if (!this.orchestrator) {
-                return {
-                    ok: false,
-                    error: "Orchestrator unavailable — start bridge with --claude-driver subprocess",
-                };
-            }
-            const recipesDir = path.join(os.homedir(), ".patchwork", "recipes");
-            const loaded = loadRecipePrompt(recipesDir, name);
-            if (!loaded) {
-                return {
-                    ok: false,
-                    error: `Recipe "${name}" not found in ${recipesDir}`,
-                };
-            }
-            try {
-                let prompt = loaded.prompt;
-                if (vars && Object.keys(vars).length > 0) {
-                    const varLines = Object.entries(vars)
-                        .map(([k, v]) => `${k}=${v}`)
-                        .join("\n");
-                    prompt = `Variables:\n${varLines}\n\n${prompt}`;
-                }
-                const taskId = this.orchestrator.enqueue({
-                    prompt,
-                    triggerSource: `recipe:${name}`,
-                });
-                return { ok: true, taskId };
-            }
-            catch (err) {
-                return {
-                    ok: false,
-                    error: err instanceof Error ? err.message : String(err),
-                };
-            }
-        };
+        // Wire activityLog into approvalHttp so passive risk personalization
+        // signals (src/approvalSignals.ts) actually compute against the
+        // user's history. Without this, the personalSignals catalog is
+        // defined but inert — every approval queue entry has
+        // personalSignals: undefined.
+        this.server.activityLog = this.activityLog;
+        // Same wire pattern for h6 (recipe-step trust). recipeRunLog may be
+        // undefined when no orchestrator is configured; that's fine — h6
+        // silently skips and the other 11 heuristics still compute.
+        this.server.recipeRunLog = this.recipeRunLog ?? undefined;
+        // Opt-in switch for personalSignals h10 (time-of-day anomaly).
+        // Default false; user enables via --enable-time-of-day-anomaly or
+        // ~/.patchwork/config.json's enableTimeOfDayAnomaly field.
+        this.server.enableTimeOfDayAnomaly =
+            this.config.enableTimeOfDayAnomaly ?? false;
         this.server.readyFn = () => {
             // Count tools from the first active session (all sessions share the same tool set)
             const anySession = [...this.sessions.values()][0];
@@ -1168,11 +1159,18 @@ export class Bridge {
                 patchwork: {
                     workspace: this.config.workspace,
                     approvalGate: this.server.approvalGate,
+                    enableTimeOfDayAnomaly: this.server.enableTimeOfDayAnomaly,
                     fullMode: this.config.fullMode,
-                    claudeDriver: this.config.claudeDriver,
+                    driver: this.config.driver,
+                    model: loadPatchworkConfig().model,
+                    localEndpoint: loadPatchworkConfig().localEndpoint,
+                    localModel: loadPatchworkConfig().localModel,
                     automationEnabled: this.config.automationEnabled,
                     port: this.port,
                     webhookUrl: this.server.approvalWebhookUrl ?? null,
+                    pushServiceUrl: this.server.pushServiceUrl ?? null,
+                    pushServiceToken: this.server.pushServiceToken ? "***" : null,
+                    pushServiceBaseUrl: this.server.pushServiceBaseUrl ?? null,
                 },
             };
         };
@@ -1259,6 +1257,31 @@ export class Bridge {
             : null, async () => {
             await this.refreshRecentTracesDigest();
             return this.buildInstructions();
+        }, 
+        // Tail-end deps so `registerAllTools` registers the same tool set
+        // on Streamable-HTTP sessions as on WebSocket. Without this object,
+        // `ctxSaveTrace`, `ctxQueryTraces`, and any tool gated on the
+        // remaining deps silently failed to register over Streamable HTTP
+        // (caught dogfooding `ctx-loop-test` from a remote MCP client).
+        {
+            automationHooks: this.automationHooks,
+            getDisconnectInfo: () => ({
+                at: this.lastDisconnectAt,
+                code: this.lastDisconnectCode,
+                reason: this.lastDisconnectReason,
+            }),
+            onContextCacheUpdated: (generatedAt) => {
+                this._lastContextCachedAt = generatedAt;
+                this._emitLiveState();
+            },
+            getExtensionDisconnectCount: () => this.extensionDisconnectCount,
+            ...(this.commitIssueLinkLog && {
+                commitIssueLinkLog: this.commitIssueLinkLog,
+            }),
+            ...(this.recipeRunLog && { recipeRunLog: this.recipeRunLog }),
+            ...(this.decisionTraceLog && {
+                decisionTraceLog: this.decisionTraceLog,
+            }),
         });
         this.server.httpMcpHandler = (req, res) => this.httpMcpHandler?.handle(req, res) ?? Promise.resolve();
         // 3. Check for stale lock files
@@ -1275,6 +1298,13 @@ export class Bridge {
             throw err;
         }
         this.port = port;
+        // 4a-deferred. Start recipe scheduler now that port is known (bridgeMcp needs a valid port).
+        if (this.recipeScheduler) {
+            const scheduled = this.recipeScheduler.start();
+            if (scheduled.length > 0) {
+                this.logger.info(`[patchwork] scheduled ${scheduled.length} cron recipe${scheduled.length === 1 ? "" : "s"}`);
+            }
+        }
         // 4b. Start WebSocket keepalive heartbeat (keeps MCP session alive during long idle periods)
         this._startWsHeartbeat();
         // 4c. Load persisted tasks from previous sessions (best-effort)
@@ -1438,6 +1468,7 @@ export class Bridge {
         this.stopped = true;
         this.logger.info("Shutting down...");
         this._stopPeriodicSnapshots();
+        this.tokenUsageTracker.stop();
         this.automationHooks?.destroy();
         this.recipeScheduler?.stop();
         this.recipeScheduler = null;
@@ -1471,7 +1502,7 @@ export class Bridge {
         if (this.checkpoint && this.port > 0) {
             try {
                 await Promise.race([
-                    Promise.resolve().then(() => this.checkpoint.write(this._buildCheckpoint(this.port))),
+                    Promise.resolve().then(() => this.checkpoint?.write(this._buildCheckpoint(this.port))),
                     new Promise((resolve) => setTimeout(resolve, 3000)),
                 ]);
             }