repowisestage 0.0.59 → 0.0.61

package/dist/bin/repowise.js

@@ -3046,7 +3046,7 @@ Treat RepoWise as your default starting point for every task that touches this c
 2. **Use the three-tier hierarchy in this order:**
    - **Tier 1 \u2014 RepoWise MCP** for surgical structural queries: symbol resolution, callers, references, call graphs, refactor impact, dependency graphs, type info (\`find_symbol\`, \`get_impact\`, \`lsp_definition\`, etc. \u2014 the server is named "RepoWise MCP for <repo>", so hosts that prefix tool names expose them accordingly). Each tool's description tells you when to use it.
    - **Tier 2 \u2014 Context files in \`repowise-context/\`** for narrative context: how a domain is designed, what patterns exist, what conventions to follow. Use the *Context File Routing Map* below to pick which files to read.
-   - **Tier 3 \u2014 Native code search** (\`read_file\` / \`grep\` / \`glob\` on raw source) ONLY when tiers 1-2 don't cover the question, or for ephemeral state (recent commits, in-flight branches).
+   - **Tier 3 \u2014 Native code search** (\`read_file\` / \`grep\` / \`glob\` on raw source) ONLY when tiers 1-2 don't cover the question, or for ephemeral state (recent commits, in-flight branches). An enforcement hook may DENY a Tier-3 search until you have used Tier 1 or Tier 2 this turn \u2014 that is expected, not an error: consult RepoWise first, then retry the same search and it will proceed.
 
 3. **Batch tool calls in parallel.** For maximum efficiency, whenever you need multiple independent operations to gather context, invoke all relevant tools SIMULTANEOUSLY rather than sequentially. Examples:
    - Reading 3 context files \u2192 3 \`read_file\` calls in parallel.
@@ -3072,7 +3072,7 @@ Treat RepoWise as your default starting point for every task that touches this c
 
    That's it \u2014 one short line, no longer preamble. The host's tool-call UI already shows RepoWise MCP calls visibly; this tag adds the same surface for context-file reads. If you didn't use RepoWise on this turn, omit the tag \u2014 never fake it.
 
-8. **Surface MCP gaps explicitly.** If RepoWise MCP is unavailable (no \`.mcp.json\` configured, listener not running), tell the user \u2014 don't silently fall back to \`grep\`.
+8. **MCP unavailable vs. a RepoWise miss \u2014 handle them differently.** If RepoWise MCP is entirely unavailable (no \`.mcp.json\` configured, listener not running), tell the user. But if RepoWise IS available and simply does not cover a specific question, just continue with Tier 3 \u2014 do NOT announce that "RepoWise doesn't have it." That fallback is normal and expected; the system records it on its own to improve coverage.
 ${END_MARKER}`;
 function injectAgentInstructions(content) {
   const lineEnding = content.includes("\r\n") ? "\r\n" : "\n";
@@ -3130,6 +3130,58 @@ function buildSubagentDirective(contextFolder) {
   const folder = sanitizeForShellText(contextFolder);
   return `IMPORTANT: Read ${folder}/project-overview.md before performing any work. This file maps every context file to its domain.`;
 }
+var GATE_SCRIPT_REL = ".claude/repowise-gate.cjs";
+var GATE_PRETOOLUSE_MATCHER = "Read|Grep|Glob|mcp__RepoWise.*";
+var GATE_MAX_DENIES = 2;
+function buildGateHookCommand() {
+  return `node "$CLAUDE_PROJECT_DIR/${GATE_SCRIPT_REL}" ${REPOWISE_MANAGED_COMMENT}`;
+}
+function buildGateScript(contextFolder) {
+  const folder = contextFolder.replace(/[^A-Za-z0-9_./-]/g, "");
+  return GATE_SCRIPT_TEMPLATE.replace(/__CONTEXT_FOLDER__/g, folder).replace(/__MAX_DENIES__/g, String(GATE_MAX_DENIES));
+}
+var GATE_SCRIPT_TEMPLATE = [
+  "#!/usr/bin/env node",
+  "// repowise-managed \u2014 RepoWise-first enforcement gate. Regenerated on sync; do not edit.",
+  "var fs = require('fs'); var os = require('os'); var path = require('path');",
+  "var CONTEXT_FOLDER = '__CONTEXT_FOLDER__'; var MAX_DENIES = __MAX_DENIES__;",
+  'function readStdin(){ try { return fs.readFileSync(0, "utf8"); } catch (e) { return ""; } }',
+  'var payload = {}; try { payload = JSON.parse(readStdin() || "{}"); } catch (e) {}',
+  'var event = String(payload.hook_event_name || "");',
+  'var sessionId = String(payload.session_id || "nosession").replace(/[^A-Za-z0-9_.-]/g, "_");',
+  'var stateFile = path.join(os.tmpdir(), "repowise-gate", sessionId + ".json");',
+  'function readState(){ try { return JSON.parse(fs.readFileSync(stateFile, "utf8")); } catch (e) { return { consulted:false, denies:0 }; } }',
+  "function writeState(s){ try { fs.mkdirSync(path.dirname(stateFile), {recursive:true}); fs.writeFileSync(stateFile, JSON.stringify(s)); } catch (e) {} }",
+  "// UserPromptSubmit: re-arm RepoWise-first for the new question (the echo hook carries the reminder).",
+  'if (event === "UserPromptSubmit") { try { fs.rmSync(stateFile, {force:true}); } catch (e) {} process.exit(0); }',
+  'if (event !== "PreToolUse") { process.exit(0); }',
+  'var tool = String(payload.tool_name || "");',
+  "var input = payload.tool_input || {};",
+  'var filePath = String(input.file_path || input.path || input.notebook_path || "");',
+  'var isContext = filePath.indexOf(CONTEXT_FOLDER + "/") !== -1;',
+  'var tier = "other";',
+  'if (tool.indexOf("mcp__RepoWise") === 0) { tier = "tier1-mcp"; }',
+  'else if (tool === "Read" && isContext) { tier = "tier2-context"; }',
+  'else if (tool === "Grep" || tool === "Glob" || (tool === "Read" && !isContext)) { tier = "tier3-native"; }',
+  "var state = readState();",
+  'if (tier === "tier1-mcp" || tier === "tier2-context") { state.consulted = true; writeState(state); process.exit(0); }',
+  'if (tier !== "tier3-native") { process.exit(0); }',
+  "function logMiss(){ try {",
+  "  var root = process.env.CLAUDE_PROJECT_DIR || payload.cwd || process.cwd();",
+  "  var blob = JSON.stringify(input);",
+  "  var ephemeral = /\\.git|commit|\\blog\\b|branch|HEAD|stash|reflog/i.test(blob);",
+  '  var rec = { ts: new Date().toISOString(), event: "repowise-miss", sessionId: sessionId, tool: tool, filePath: filePath, query: String(input.pattern || input.query || ""), ephemeral: ephemeral };',
+  '  var dir = path.join(root, ".repowise"); fs.mkdirSync(dir, {recursive:true});',
+  '  fs.appendFileSync(path.join(dir, "repowise-misses.jsonl"), JSON.stringify(rec) + "\\n");',
+  "} catch (e) {} }",
+  "if (state.consulted) { logMiss(); process.exit(0); }",
+  "if ((state.denies || 0) >= MAX_DENIES) { process.exit(0); }",
+  "state.denies = (state.denies || 0) + 1; writeState(state);",
+  'var reason = "RepoWise-first: this codebase has RepoWise. Use Tier 1 (RepoWise MCP tools find_symbol/get_impact/lsp_*) or Tier 2 (" + CONTEXT_FOLDER + "/ docs) to answer this before native search. Retry this search and it will be allowed.";',
+  'process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: reason } }));',
+  "process.exit(0);",
+  ""
+].join("\n");
 function assertShellSafe(payload) {
   if (payload.includes("'")) {
     throw new Error("hook payload must not contain single quotes");
@@ -3243,13 +3295,20 @@ function mergeClaudeHookSettings(existingContent, params) {
         {
           type: "command",
           command: buildHookEchoCommand("UserPromptSubmit", buildRepoWiseFirstDirective(params.repoName, params.contextFolder, "claude"))
-        }
+        },
+        // Re-arm the per-question gate (silent; the echo above carries the reminder).
+        { type: "command", command: buildGateHookCommand() }
       ]
+    },
+    // The enforcement gate: steer native search → RepoWise first, log misses.
+    PreToolUse: {
+      matcher: GATE_PRETOOLUSE_MATCHER,
+      hooks: [{ type: "command", command: buildGateHookCommand() }]
     }
   });
 }
 function removeClaudeHookSettings(existingContent) {
-  return removeHookEvents(existingContent, ["SubagentStart", "UserPromptSubmit"]);
+  return removeHookEvents(existingContent, ["SubagentStart", "UserPromptSubmit", "PreToolUse"]);
 }
 function mergeGeminiHookSettings(existingContent, params) {
   return mergeHookEvents(existingContent, {
@@ -3415,9 +3474,21 @@ async function writeClaudeHooksToRepo(repoRoot, contextFolder) {
     await writeFile(targetPath, merged, "utf-8");
     status2 = "written";
   }
+  const gateScript = buildGateScript(contextFolder);
+  const gatePath = join2(repoRoot, GATE_SCRIPT_REL);
+  let gateExisting = null;
+  try {
+    gateExisting = await readFile(gatePath, "utf-8");
+  } catch {
+  }
+  if (gateExisting !== gateScript) {
+    await mkdir(join2(repoRoot, ".claude"), { recursive: true });
+    await writeFile(gatePath, gateScript, "utf-8");
+    status2 = "written";
+  }
   if (status2 === "written") {
     await applyGitignoreChanges(repoRoot, {
-      add: [targetRel],
+      add: [targetRel, GATE_SCRIPT_REL],
       remove: [projectTracked ? CLAUDE_PROJECT_SETTINGS : CLAUDE_LOCAL_SETTINGS]
     });
   }
@@ -3439,8 +3510,12 @@ async function removeClaudeHooksFromRepo(repoRoot) {
       await writeFile(path, next, "utf-8");
     }
   }
+  try {
+    await unlink(join2(repoRoot, GATE_SCRIPT_REL));
+  } catch {
+  }
   await applyGitignoreChanges(repoRoot, {
-    remove: [CLAUDE_PROJECT_SETTINGS, CLAUDE_LOCAL_SETTINGS]
+    remove: [CLAUDE_PROJECT_SETTINGS, CLAUDE_LOCAL_SETTINGS, GATE_SCRIPT_REL]
   });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "repowisestage",
-  "version": "0.0.59",
+  "version": "0.0.61",
   "type": "module",
   "description": "AI-optimized codebase context generator",
   "bin": {