qfai 2.1.1 → 2.2.0

package/README.md

@@ -79,11 +79,21 @@ Then open your AI coding agent in the repository and describe the change in your
 
 > Let each customer register up to five notification addresses, with no duplicates.
 
+If you only have an idea, say so: the run starts with a discussion that structures scope and open questions.
+
 The agent announces the goal, the stages it will run and the files it may change, then runs them.
 It asks you only what it cannot decide for you, such as whether to create a new story.
+Answer its questions, or say `stop` to end the run.
 The stages fill the seeded story tree and follow the project's Standard commands in
 `<paths.contractsDir>/tech.md` (by default `.qfai/spec/03_contract/tech.md`) for its quality gates.
 
+When the run ends, check the result:
+
+```bash
+npx qfai validate
+npx qfai report
+```
+
 To drive the stages yourself instead:
 Run `/qfai-discussion` and `/qfai-sdd` to fill the seeded story tree.
 See [Invoking a stage directly](#invoking-a-stage-directly-expert-path).
@@ -313,27 +323,22 @@ flowchart LR
     (`assistant/rule/`, `skill/`, `agent/` and `prompt/`), plus `qfai.config.yaml`.
   - Options:
 
-    | Flag                       | Effect                                                                                                                                                                                                                                                                                                                                                                                                 |
-    | -------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
-    | `--dir <path>`             | Output directory (default: the current directory). Wins over `--root` when both are given.                                                                                                                                                                                                                                                                                                             |
-    | `--root <path>`            | Every other command reads this as the target directory; `init` reads it as the output directory too, but only when `--dir` is omitted.                                                                                                                                                                                                                                                                 |
-    | `--force`                  | Overwrite the shipped skills, steps, agents and rules, the rule masters under `.agents/rules/`, their host wrappers, and generated Copilot instructions, whether or not you edited them. Project content, `qfai.config.yaml`, `DESIGN.md`, `AGENTS.md`, `CLAUDE.md` and routing overrides are preserved. The managed `.gitignore` block and `core.symlinks` setting are repaired on every non-dry-run. |
-    | `--dry-run`                | Report what would change and write nothing. Use it to rehearse `--upgrade-assistant-tree`.                                                                                                                                                                                                                                                                                                             |
-    | `--upgrade-assistant-tree` | Copy recognized legacy assistant files into the singular tree without deleting a source or overwriting a destination. Migrate old spec packs with `/qfai-migration-v1-to-v2`. Unrecognized assistant files stay in place.                                                                                                                                                                              |
-    | `--yes`                    | Reserved for a future interactive mode; no behavioural difference today.                                                                                                                                                                                                                                                                                                                               |
-    | `--verbose`                | Expand the run report's `skipped` list to the full path listing. Off by default, so a no-op re-run prints the skip count and a pointer to this flag instead of every shipped asset path. It does not gate the written or removed listings: those are printed whenever they have entries, with or without this flag.                                                                                    |
-    | `--help`, `-h`             | Print the CLI usage banner and exit without writing anything. Accepted by every command, `init` included, and handled before the command runs.                                                                                                                                                                                                                                                         |
-    | `--version`, `-V`          | Print the installed QFAI version to stdout and exit 0. Accepted by every command, `init` included, and handled before the command runs, so it works outside a project too.                                                                                                                                                                                                                             |
-
-  - `QFAI-DEPRECATED-001` means the legacy assistant layout remains past its
-    supported window. Run `npx qfai init --upgrade-assistant-tree` to copy
-    recognized files into the current tree without deleting their sources.
+    | Flag              | Effect                                                                                                                                                                                                                                                                                                                                                                                    |
+    | ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+    | `--dir <path>`    | Output directory (default: the current directory). Wins over `--root` when both are given.                                                                                                                                                                                                                                                                                                |
+    | `--root <path>`   | Every other command reads this as the target directory; `init` reads it as the output directory too, but only when `--dir` is omitted.                                                                                                                                                                                                                                                    |
+    | `--force`         | Overwrite the shipped skills, steps, agents and rules, the rule masters under `.agents/rules/`, their host wrappers, and generated Copilot instructions, whether or not you edited them. Project content, `qfai.config.yaml`, `DESIGN.md`, `AGENTS.md` and routing overrides are preserved. The managed `.gitignore` block and `core.symlinks` setting are repaired on every non-dry-run. |
+    | `--dry-run`       | Report what would change and write nothing.                                                                                                                                                                                                                                                                                                                                               |
+    | `--yes`           | Reserved for a future interactive mode; no behavioural difference today.                                                                                                                                                                                                                                                                                                                  |
+    | `--verbose`       | Expand the run report's `skipped` list to the full path listing. Off by default, so a no-op re-run prints the skip count and a pointer to this flag instead of every shipped asset path. It does not gate the written or removed listings: those are printed whenever they have entries, with or without this flag.                                                                       |
+    | `--help`, `-h`    | Print the CLI usage banner and exit without writing anything. Accepted by every command, `init` included, and handled before the command runs.                                                                                                                                                                                                                                            |
+    | `--version`, `-V` | Print the installed QFAI version to stdout and exit 0. Accepted by every command, `init` included, and handled before the command runs, so it works outside a project too.                                                                                                                                                                                                                |
 
 - `npx qfai validate`
   - Validates the story tree, contracts and test obligations, writes `.qfai/report/validate.json`,
     and appends run logs to `.qfai/report/run-*/`; use `--fail-on error` (or `--fail-on warning`) to turn it into a CI gate,
     and `--format github` to emit GitHub-friendly annotations.
-    Use `--flow BF-0001` to scope a run to one business flow. `--spec` is retired.
+    Use `--flow BF-0001` to scope a run to one business flow.
     Use `--profile discussion|sdd|prototyping|atdd|tdd|verify` for local skill-owned checks; CI should use default/full validation (or `verify` / `tdd` for the dedicated CI gates).
 - `npx qfai report`
   - Produces a human-readable report (`report.md` by default) or an internal JSON export (`report.json`) from `validate.json`; use `--base-url` to link file paths in Markdown to your repository viewer.
@@ -426,15 +431,29 @@ Notes.
   issue order are not stable; match on `issues[].code`.
 - `report.json`, `doctor.json`, and `run-*` JSON logs are internal exports and are not a stable external contract; prefer `report.md` for integrations that must survive tool upgrades.
 
-## Minimal tutorial
+## Dependency security
 
-1. `npx qfai init`
-2. Open your AI coding agent in the repository and describe the change in your own words.
-   If you only have an idea, say so: the run starts with a discussion that structures scope and open questions.
-3. Answer the questions the work puts to you, or say `stop` to end it.
-4. Run `npx qfai validate` then `npx qfai report`.
+The glob-matching dependency `braces` has an unresolved
+[stack-exhaustion denial-of-service advisory](https://github.com/advisories/GHSA-vfj7-8cjw-p6xm).
+QFAI accepts this residual risk only for reviewed project patterns and paths,
+trusted configuration and trusted SDK callers. This is risk acceptance, not a
+clean audit or proof that QFAI is unaffected. Reproduction and exploitation in
+QFAI remain unverified.
 
-To choose each stage yourself, see [Invoking a stage directly](#invoking-a-stage-directly-expert-path).
+Review include, ignore and negative patterns, constructed paths and SDK inputs.
+`validateProject` accepts a caller-supplied `ConfigLoadResult` without invoking
+the configuration loader; the caller must review those values too. Catching
+errors and limiting results after glob expansion do not defend against stack
+exhaustion during expansion.
+
+Untrusted pull requests, externally supplied configuration and service request
+inputs are outside this acceptance. Review those inputs and restrict access;
+do not expose glob processing to them until your mitigation and security review
+cover them.
+
+Reassess the risk when a compatible patch becomes available or untrusted input
+is needed. A forced downgrade to `qfai@0.4.0` is not a compatible fix for the
+current major API; do not apply it through `npm audit fix --force`.
 
 ## FAQ
 
@@ -607,6 +626,17 @@ Waiver policy.
 - Expired waivers are reported as warnings (`QFAI-WAIVER-003`) and must be renewed or removed with evidence.
 - Suppressed findings remain visible in reports as `suppressed=true`; waivers do not erase findings.
 
+When upgrading a project with `.qfai/waivers.yml`, back up that file. Check the
+current public finding codes and the release notes for confirmed removals or
+renames. Update a `rule:` value only when the documented rename preserves the
+finding's meaning and scope. Remove confirmed retired or inapplicable waivers,
+keeping the backup and recording each removal's reason for the operator. Do not
+rename whole code prefixes or automatically delete an unknown rule.
+
+Rerun full validation and require zero errors. An unknown waiver rule produces
+`QFAI-WAIVER-004` at `warning` and is not applied in that run; investigate it
+against the current diagnostics and release notes.
+
 Typical customizations.
 
 - Add a `doctor` step before validate if you want to fail fast on path/glob/config issues.
@@ -929,7 +959,6 @@ commit that bumps the package, and to keep the two from being merged separately.
 │   │   └── open-questions.md
 │   └── waivers.yml
 ├── AGENTS.md
-├── CLAUDE.md
 └── qfai.config.yaml
 ```
 
@@ -966,17 +995,6 @@ provide those defaults to the agent.
 The `.claude` / `.github` agent wrappers are symlinks and follow the canonical document
 automatically; the Codex profiles are generated files, so rerun `npx qfai init --force`
 to refresh them (and any other wrapper asset that has drifted).
-`--force` deletes as well as overwrites: it removes the command and prompt wrappers
-under `.claude/commands/` and `.github/prompts/`, and the skill wrappers under
-`.claude/skills/`, `.agents/skills/`, `.codex/skills/` and `.github/skills/` for skills that are
-not in the current release, whether those wrappers are directories or symlinks.
-Files it did not write — a project's own slash command, prompt file or skill,
-including one published from a project-authored `.qfai/assistant/skill/` entry — are left in place,
-whatever they are named. Ownership is read from the file, not the name: a wrapper is removed only when
-it carries the delegation line to the canonical document of the same name, or is a symlink into
-`.qfai/assistant/skill/`. One consequence of that: a symlink has no content to prove who wrote it, so
-if you publish a canonical skill of your own under a name QFAI itself once shipped, `--force` removes
-that link. Your `.qfai/assistant/skill/` entry is untouched; re-create the link to publish it again.
 
 ### Supported hosts
 
@@ -986,7 +1004,9 @@ No host is declared supported in this release.
 ### Cross-AI rules and the writing reminder
 
 `npx qfai init` seeds `.agents/rules/**`, the rule set every AI coding agent in
-the project shares, and points `AGENTS.md` and `CLAUDE.md` at it. One of those
+the project shares, and points `AGENTS.md` at it, with a line for each rule that says when
+to read it. Claude Code reads `AGENTS.md` when the project has no `CLAUDE.md` (Claude Code
+2.1.277 or later). One of those
 rules, `documentation-clarity.md`, sets the writing standard for pull requests,
 issues, code comments and Markdown: no project-local identifiers, no account of
 how the work went, cut to what a reader outside the team can follow.

package/assets/defaults/agent-routing/qfai-implement.yml

@@ -216,6 +216,15 @@ routing:
         rerun_policy: changed-scope-dependents
     review_profile: default
 
+  - step: implement-procedure
+    phases:
+      - id: documentation
+        mandatory_agents: [doc-steward]
+        conditional_agents: []
+        parallel_groups: []
+        rerun_policy: changed-scope-dependents
+    review_profile: default
+
   # Writes the bodies of empty acceptance tests, keeping each annotation.
   - step: implement-acceptance
     phases:

package/assets/defaults/agent-routing/qfai-triage.yml

@@ -4,6 +4,24 @@
 routing:
   # The triage steps change no tracked file, so each has one author and no
   # build or test phase.
+  - step: triage-operate
+    phases:
+      - id: operate
+        mandatory_agents: [devops-ci-engineer]
+        conditional_agents: []
+        parallel_groups: []
+        rerun_policy: changed-scope-dependents
+    review_profile: default
+
+  - step: triage-owned-cleanup
+    phases:
+      - id: cleanup
+        mandatory_agents: [devops-ci-engineer]
+        conditional_agents: []
+        parallel_groups: []
+        rerun_policy: changed-scope-dependents
+    review_profile: default
+
   - step: triage-close
     phases:
       - id: record

package/assets/defaults/workflows/answer-in-session.yml

@@ -0,0 +1,8 @@
+route: answer-in-session
+family: close
+stages:
+  - id: answer
+    kind: triage
+    steps: [triage-answer]
+decisionPoints: []
+branchPoints: []

package/assets/defaults/workflows/quarantine-flaky.yml

@@ -29,6 +29,9 @@ stages:
     after: [note]
 decisionPoints: []
 branchPoints:
+  - step: implement-quarantine
+    outcomes:
+      - { outcome: failing-consistently, routes: decision-table }
   - step: implement-diagnose
     outcomes:
       - { outcome: product-race, routes: [fix-intermittent] }

package/assets/defaults/workflows/repair-consistency.yml

@@ -11,6 +11,7 @@ stages:
       - { step: sdd-flow, passThrough: true }
       - { step: sdd-story, passThrough: true }
       - { step: sdd-contract, passThrough: true }
+      - { step: common-design-md, passThrough: true }
       - { step: sdd-cycle, passThrough: true }
     after: [diagnose]
     review: spec

package/assets/defaults/workflows/run-operation.yml

@@ -0,0 +1,11 @@
+route: run-operation
+family: upkeep
+stages:
+  - id: operate
+    kind: triage
+    steps: [triage-operate]
+decisionPoints: []
+branchPoints:
+  - step: triage-operate
+    outcomes:
+      - { outcome: needs-change, routes: decision-table }

package/assets/defaults/workflows/run-owned-cleanup.yml

@@ -0,0 +1,12 @@
+route: run-owned-cleanup
+family: upkeep
+stages:
+  - id: cleanup
+    kind: triage
+    steps: [triage-owned-cleanup]
+  - id: close
+    kind: triage
+    steps: [triage-close]
+    after: [cleanup]
+decisionPoints: []
+branchPoints: []

package/assets/defaults/workflows/write-procedure.yml

@@ -0,0 +1,18 @@
+route: write-procedure
+family: change
+stages:
+  - id: documentation
+    kind: documentation
+    steps: [implement-procedure]
+  - id: note
+    kind: verify
+    steps:
+      - { step: verify-change-note, passThrough: true }
+    after: [documentation]
+    review: code
+  - id: verify
+    kind: verify
+    steps: [verify-qfai-gate, verify-repo-gate, verify-commit]
+    after: [note]
+decisionPoints: []
+branchPoints: []

package/assets/graph/codegraph-native.mjs

@@ -0,0 +1,174 @@
+import process from "node:process";
+import path from "node:path";
+import { readFile, writeFile } from "node:fs/promises";
+import { pathToFileURL } from "node:url";
+
+async function main() {
+  const sdk = await import(pathToFileURL(process.argv[2]).href);
+  const { default: CodeGraph, setLogger, silentLogger } = sdk.default;
+  setLogger(silentLogger);
+  const mode = process.argv[4];
+  const corpus = process.argv[3];
+  const graph = mode
+    ? await CodeGraph.open(process.argv[3], { readOnly: true })
+    : await CodeGraph.init(process.argv[3], { index: false });
+  try {
+    if (mode === "inventory") {
+      process.stdout.write(
+        JSON.stringify({ files: graph.getFiles().map((file) => file.path) }) + "\n",
+      );
+    } else if (mode === "coverage") {
+      process.stdout.write(JSON.stringify(await coverage(graph, corpus)) + "\n");
+    } else if (mode === undefined) {
+      const result = await graph.indexAll();
+      const build = graph.getIndexBuildInfo();
+      await writeFile(
+        path.join(corpus, ".codegraph", "qfai-native-evidence.json"),
+        JSON.stringify({
+          engineVersion: build.version,
+          extractionVersion: build.extractionVersion,
+          lastIndexedAt: graph.getLastIndexedAt(),
+          result: {
+            success: result.success,
+            filesDiscovered: result.filesDiscovered ?? null,
+            filesIndexed: result.filesIndexed,
+            filesSkipped: result.filesSkipped,
+            filesErrored: result.filesErrored,
+            filesSkippedUnsupported: result.filesSkippedUnsupported ?? 0,
+            topUnsupportedExtensions: result.topUnsupportedExtensions ?? [],
+            errors: result.errors.map((error) => ({
+              code: error.code ?? "unclassified",
+              severity: error.severity,
+              filePath: safeRelativeInput(corpus, error.filePath),
+            })),
+          },
+        }) + "\n",
+      );
+      process.stdout.write("CodeGraph native indexing completed.\n");
+    } else {
+      throw new Error("Unsupported native operation");
+    }
+  } finally {
+    graph.close();
+  }
+}
+
+function safeRelativeInput(corpus, file) {
+  if (typeof file !== "string" || !file) return "Unidentified native input";
+  const relative = (path.isAbsolute(file) ? path.relative(corpus, file) : file).replaceAll(
+    "\\",
+    "/",
+  );
+  if (
+    path.posix.isAbsolute(relative) ||
+    path.win32.isAbsolute(relative) ||
+    relative.split("/").some((part) => !part || part === "." || part === "..") ||
+    /(?:^|\/)(?:\.env(?:\.|$)|\.npmrc$|\.pypirc$|\.netrc$|credentials?(?:\.|$)|secrets?(?:\.|$))|\.(?:pem|key|p12|pfx)$/i.test(
+      relative,
+    )
+  )
+    return "Unidentified native input";
+  return relative;
+}
+
+async function coverage(graph, corpus) {
+  const unknown = { complete: false, unsupported: [], unreadable: [], unparsed: [] };
+  let evidence;
+  try {
+    evidence = JSON.parse(
+      await readFile(path.join(corpus, ".codegraph", "qfai-native-evidence.json"), "utf8"),
+    );
+  } catch {
+    return unknown;
+  }
+  const build = graph.getIndexBuildInfo();
+  const result = evidence?.result;
+  const counts = [
+    "filesDiscovered",
+    "filesIndexed",
+    "filesSkipped",
+    "filesErrored",
+    "filesSkippedUnsupported",
+  ];
+  if (
+    !record(evidence) ||
+    Object.keys(evidence).length !== 4 ||
+    evidence.engineVersion !== build.version ||
+    evidence.extractionVersion !== build.extractionVersion ||
+    !Number.isSafeInteger(evidence.lastIndexedAt) ||
+    evidence.lastIndexedAt !== graph.getLastIndexedAt() ||
+    !record(result) ||
+    Object.keys(result).length !== 8 ||
+    typeof result.success !== "boolean" ||
+    counts.some((key) => !Number.isSafeInteger(result[key]) || result[key] < 0) ||
+    !Array.isArray(result.errors) ||
+    !Array.isArray(result.topUnsupportedExtensions)
+  )
+    return unknown;
+  const unsupported = [];
+  const unreadable = [];
+  const unparsed = [];
+  let documentedInputs = 0;
+  for (const group of result.topUnsupportedExtensions) {
+    if (
+      !record(group) ||
+      typeof group.ext !== "string" ||
+      !Number.isSafeInteger(group.count) ||
+      group.count < 0
+    )
+      return unknown;
+    if (
+      /^\.(?:md|mdx|txt|rst|adoc|pdf|png|jpe?g|gif|svg|webp|ico|woff2?|ttf|mp[34]|wav)$/i.test(
+        group.ext,
+      )
+    ) {
+      documentedInputs += group.count;
+    } else {
+      unsupported.push(`${group.ext} (${group.count} inputs)`);
+    }
+  }
+  const namedUnsupported = result.topUnsupportedExtensions.reduce(
+    (count, group) => count + group.count,
+    0,
+  );
+  if (namedUnsupported < result.filesSkippedUnsupported)
+    unsupported.push("Other unsupported native inputs");
+  if (
+    namedUnsupported > result.filesSkippedUnsupported ||
+    documentedInputs > result.filesSkippedUnsupported
+  )
+    return unknown;
+  for (const error of [
+    ...result.errors,
+    ...graph.getFiles().flatMap((file) => file.errors ?? []),
+  ]) {
+    if (!record(error) || !["error", "warning"].includes(error.severity)) return unknown;
+    const file = safeRelativeInput(corpus, error.filePath);
+    if (error.code === "read_error") unreadable.push(file);
+    else unparsed.push(file);
+  }
+  if (result.filesErrored > 0 && unreadable.length === 0 && unparsed.length === 0)
+    unparsed.push("Unidentified native extraction errors");
+  const complete =
+    result.success &&
+    result.filesIndexed + result.filesSkipped + result.filesErrored >= result.filesDiscovered &&
+    result.filesErrored === 0 &&
+    unsupported.length === 0 &&
+    unreadable.length === 0 &&
+    unparsed.length === 0;
+  return {
+    complete,
+    unsupported,
+    unreadable: [...new Set(unreadable)],
+    unparsed: [...new Set(unparsed)],
+  };
+}
+
+function record(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+main().catch(() => {
+  process.stderr.write("CodeGraph native indexing failed.\n");
+  process.exitCode = 1;
+});

package/assets/graph/graphify-native.py

@@ -0,0 +1,72 @@
+"""Inspect the managed corpus with Graphify's native freshness operation."""
+
+import json
+import sys
+from pathlib import Path
+
+from graphify.detect import detect_incremental
+
+
+def input_inventory(output, graph):
+    manifest = json.loads((output / "manifest.json").read_text(encoding="utf-8"))
+    if not isinstance(manifest, dict):
+        raise ValueError("Invalid native manifest")
+    files = set(manifest.keys())
+    groups = [graph["nodes"]]
+    for name in ("edges", "links", "hyperedges"):
+        if name in graph:
+            groups.append(graph[name])
+    nested = graph.get("graph", {})
+    if not isinstance(nested, dict):
+        raise ValueError("Invalid native graph attributes")
+    if "hyperedges" in nested:
+        groups.append(nested["hyperedges"])
+    for group in groups:
+        if not isinstance(group, list):
+            raise ValueError("Invalid native graph references")
+        for item in group:
+            if not isinstance(item, dict):
+                raise ValueError("Invalid native graph reference")
+            for field in ("source_file", "definition_file", "path"):
+                value = item.get(field)
+                if value is None or value == "":
+                    continue
+                if not isinstance(value, str):
+                    raise ValueError("Invalid native input path")
+                files.add(value)
+    return sorted(files)
+
+
+def main():
+    root = Path(sys.argv[1])
+    kind = sys.argv[2]
+    output = root / "graphify-out"
+    graph = json.loads((output / "graph.json").read_text(encoding="utf-8"))
+    if not isinstance(graph, dict) or not isinstance(graph.get("nodes"), list):
+        raise ValueError("Invalid native graph")
+    if kind == "inventory":
+        print(json.dumps({"files": input_inventory(output, graph)}))
+        return
+    if kind not in ("semantic", "ast"):
+        raise ValueError("Unsupported native inspection")
+    state = detect_incremental(
+        root,
+        manifest_path=str(output / "manifest.json"),
+        kind=kind,
+        cache_root=output,
+    )
+    print(json.dumps({
+        "current": state["new_total"] == 0
+        and not state["deleted_files"]
+        and not state["excluded_files"],
+        "unsupported": state.get("unclassified", []),
+        "unreadable": state.get("unreadable", []),
+    }))
+
+
+if __name__ == "__main__":
+    try:
+        main()
+    except Exception:
+        sys.stderr.write("Graphify freshness inspection failed.\n")
+        sys.exit(1)

package/assets/init/.claude/settings.json

@@ -30,7 +30,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{let p;try{p=JSON.parse(require('fs').readFileSync(0,'utf8')).prompt}catch{}if(!(typeof p==='string'&&/^[ \\t]*(<(task-notification|wake)[\\s>]|\\[SYSTEM NOTIFICATION)/m.test(p))){const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}const p=i.prompt;if(!(typeof p==='string'&&/^[ \\t]*(<(task-notification|wake|ci-monitor-event)[\\s>]|\\[SYSTEM NOTIFICATION)/m.test(p))){let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "structured-question"
             ]
@@ -46,7 +46,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{let p;try{p=JSON.parse(require('fs').readFileSync(0,'utf8')).prompt}catch{}if(!(typeof p==='string'&&/^[ \\t]*(<(task-notification|wake)[\\s>]|\\[SYSTEM NOTIFICATION)/m.test(p))){const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}const p=i.prompt;if(!(typeof p==='string'&&/^[ \\t]*(<(task-notification|wake|ci-monitor-event)[\\s>]|\\[SYSTEM NOTIFICATION)/m.test(p))){let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "free-text-entry"
             ]
@@ -96,7 +96,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}if((n-1)%20===0){const m=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "grilling-design-artifact"
             ]
@@ -112,7 +112,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}if((n-1)%20===0){const m=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "grilling-delegation"
             ]
@@ -128,7 +128,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const m=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "grilling-plan"
             ]
@@ -144,7 +144,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}const c=i.tool_input&&i.tool_input.command;if(typeof c==='string'&&/(^|[^\\w.-])gh([^\\w.-]|$)|api\\.github\\.com/.test(c)){let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}if((n-1)%20===0){const m=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}}}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))||{}}catch{}const c=i.tool_input&&i.tool_input.command;if(typeof c==='string'&&/(^|[^\\w.-])gh([^\\w.-]|$)|api\\.github\\.com/.test(c)){let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "api-budget"
             ]
@@ -163,7 +163,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}if((n-1)%20===0){const m=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "documentation-clarity-after-write"
             ]
@@ -175,7 +175,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}if((n-1)%20===0){const m=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}}catch{}",
+              "try{const f=require('fs');let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "documentation-clarity-after-edit"
             ]
@@ -191,7 +191,7 @@
             "command": "node",
             "args": [
               "-e",
-              "try{const f=require('fs'),p=require('path'),R=p.dirname(p.dirname(p.dirname(process.argv[1])));let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}const u=i.tool_input&&i.tool_input.file_path;let src=true;if(typeof u==='string'&&(x=>{const s=x.split(p.sep),b=s.pop();return p.isAbsolute(x)||s[0]==='..'||s.some(y=>['tmp','test','tests','__tests__','node_modules','.qfai','.agents'].includes(y))||b[0]==='.'||/\\.(test|spec)\\./.test(b)||['.md','.mdx','.markdown','.txt','.rst','.yml','.yaml','.json','.jsonc','.json5','.toml','.ini','.csv','.tsv','.lock','.svg','.png','.jpg','.jpeg','.gif'].includes(p.extname(b).toLowerCase())})(p.relative(R,p.resolve(R,u))))src=false;if(src){let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}if((n-1)%20===0){const m=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(m!==undefined)console.log(JSON.stringify(m))}}}catch{}",
+              "try{const f=require('fs'),p=require('path'),R=p.dirname(p.dirname(p.dirname(process.argv[1])));let i={};try{i=JSON.parse(f.readFileSync(0,'utf8'))}catch{}const u=i.tool_input&&i.tool_input.file_path;let src=true;if(typeof u==='string'&&(x=>{const s=x.split(p.sep),b=s.pop();return p.isAbsolute(x)||s[0]==='..'||s.some(y=>['tmp','test','tests','__tests__','node_modules','.qfai','.agents'].includes(y))||b[0]==='.'||/\\.(test|spec)\\./.test(b)||['.md','.mdx','.markdown','.txt','.rst','.yml','.yaml','.json','.jsonc','.json5','.toml','.ini','.csv','.tsv','.lock','.svg','.png','.jpg','.jpeg','.gif'].includes(p.extname(b).toLowerCase())})(p.relative(R,p.resolve(R,u))))src=false;if(src){let n=1;if(typeof i.session_id==='string'){try{const t=require('path').join(require('os').tmpdir(),['qfai-reminder',i.session_id,i.agent_id||'main',process.argv[2]].join('-').replace(/[^\\w.-]/g,'_'));f.appendFileSync(t,'.');n=f.statSync(t).size}catch{}}const e=JSON.parse(f.readFileSync(process.argv[1],'utf8'))[process.argv[2]];if(e!==undefined){const {briefContext,...m}=e;if(n>1&&typeof briefContext==='string')m.hookSpecificOutput.additionalContext=briefContext;console.log(JSON.stringify(m))}}}catch{}",
               "${CLAUDE_PROJECT_DIR}/.agents/rules/reminders.json",
               "minimal-implementation"
             ]