sawbuck 0.1.40 → 0.1.42

package/README.md

@@ -84,7 +84,7 @@ Exit codes: `0` verified · `1` regression · `2` gamed · `3` inconclusive · `
     Run `sawbuck context` first to see what broke in these files before (reverts, weakened tests,
     fragile spots). Never skip, weaken, or delete a test to go green.
 
-**After you sign.** A new contract starts by watching: protected paths, new install scripts and sources outside the registry block from day one, and new dependencies and structure changes show as notes. `sawbuck contract --strict` blocks them all. When something fails, the check says what changed in words. To accept it on a pull request, someone with write access comments `sawbuck-allow: <reason>` and re-runs the check; the reason stays on the record. An agent signed in as that person could post the same comment, so branch protection and review still matter. Locally, use `--allow "<reason>"`.
+**After you sign.** A new contract starts by watching: protected paths, new install scripts and sources outside the registry block from day one, and new dependencies and structure changes show as notes. `sawbuck contract --strict` blocks them all. When something fails, the check says what changed in words. If your tests can't run in CI, the check says so and doesn't fail the job, and protected paths are still enforced. To accept it on a pull request, someone with write access comments `sawbuck-allow: <reason>` and re-runs the check; the reason stays on the record. An agent signed in as that person could post the same comment, so branch protection and review still matter. Locally, use `--allow "<reason>"`.
 
 **Rewritten history.** Logbook reads git, so a squash or a rebase takes a revert with it. `sawbuck context` also reads the reflog for commits no branch reaches any more and shows them for the files in hand, and once attached it keeps them in `.sawbuck/rewritten.jsonl` after the reflog expires. It stays local: a clone does not get it, nothing older than the reflog comes back, and work that was never committed is not in git at all. Your steering is separate: `reins` reads your agent transcripts, not git.
 

package/contract-cmd.mjs

@@ -19,7 +19,9 @@ const noCi = process.argv.includes('--no-ci');
 // a new contract starts by watching: everyday change shows as a note. Protected paths, install scripts and sources
 // outside the registry still fail from day one. --strict holds them all, and an existing contract is left as it is.
 const REPORT = new Set(['dependency_entries', 'lock_drift', 'pins_changed', 'unpinned_execution', 'install_policy_gaps']);
-const WORKFLOW = `# Written by sawbuck contract. Checks every pull request against the contract in promptwheel.config.json.
+// Tests need their dependencies, so an npm lockfile gets an install, with no scripts. Elsewhere tests may not run in
+// CI, so inconclusive does not fail the job: protected paths are checked either way, and a gamed or failed verdict still fails.
+const workflow = (npm) => `# Written by sawbuck contract. Checks every pull request against the contract in promptwheel.config.json.
 name: Sawbuck
 on: pull_request
 permissions: { contents: read, pull-requests: write }
@@ -29,7 +31,11 @@ jobs:
     steps:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
         with: { fetch-depth: 0 }
-      - uses: promptwheel-ai/promptwheel@v0
+${npm ? `      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with: { node-version: 22 }
+      - run: npm ci --ignore-scripts
+` : ''}      - uses: promptwheel-ai/promptwheel@v0
+        with: { inconclusive: pass }
 `;
 const cfgPath = join(repo, 'promptwheel.config.json');
 const run = (args, cwd, stdio = ['ignore', 'pipe', 'pipe']) => execFileSync(process.execPath, args, { cwd, encoding: 'utf8', stdio });
@@ -73,11 +79,11 @@ try {
     let remote = ''; try { remote = execFileSync('git', ['-C', repo, 'remote', 'get-url', 'origin'], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }); } catch {}
     const realTests = !(cfg.metrics || []).some((m) => /set your test command/.test(String(m.cmd)));
     let ci = '';
-    if (!noCi && /github\.com/.test(remote) && realTests && !existsSync(wf)) { mkdirSync(dirname(wf), { recursive: true }); writeFileSync(wf, WORKFLOW); ci = wf; }
+    if (!noCi && /github\.com/.test(remote) && realTests && !existsSync(wf)) { mkdirSync(dirname(wf), { recursive: true }); writeFileSync(wf, workflow(existsSync(join(repo, 'package-lock.json')))); ci = wf; }
     const locked = existsSync(join(repo, 'promptwheel.lock.json'));
     if (!locked) run([join(pack, 'lock.mjs'), 'write', repo], repo);
     const added = (cfg.mandates.length - before.m) + (cfg.metrics.length - before.g);
-    process.stdout.write(added || !locked ? `sawbuck: signed. ${cfg.metrics.length} guards, ${cfg.mandates.length} protected-path rules, and the shape of this repo in promptwheel.lock.json.\n${strict ? '' : '  New dependencies and structure changes show as notes for now; protected paths and install scripts block. --strict blocks them all.\n'}${ci ? '  Added .github/workflows/sawbuck.yml, so pull requests are checked in CI.\n' : ''}` : 'sawbuck: already signed, nothing changed.\n');
+    process.stdout.write(added || !locked ? `sawbuck: signed. ${cfg.metrics.length} guards, ${cfg.mandates.length} protected-path rules, and the shape of this repo in promptwheel.lock.json.\n${strict ? '' : '  New dependencies and structure changes show as notes for now; protected paths and install scripts block. --strict blocks them all.\n'}${ci ? '  Added .github/workflows/sawbuck.yml, so pull requests are checked in CI. Commit it with the contract.\n' : ''}` : 'sawbuck: already signed, nothing changed.\n');
   }
 } finally { rmSync(scratch, { recursive: true, force: true }); }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sawbuck",
-  "version": "0.1.40",
+  "version": "0.1.42",
   "description": "Sign your agent to a contract: a deterministic, zero-LLM check re-proves each win from the agent's source edits alone, so a test that went green by editing the test, grader, or config is sent back. For Claude Code, with Codex support in beta.",
   "type": "module",
   "license": "Apache-2.0",
@@ -34,12 +34,13 @@
   },
   "dependencies": {
     "@promptwheel/logbook": "0.9.10",
-    "promptwheel": "0.7.14"
+    "promptwheel": "0.7.15"
   },
   "files": [
     "sawbuck.mjs",
     "rewrites.mjs",
     "steers.mjs",
+    "rules.mjs",
     "exclude.mjs",
     "contract-cmd.mjs",
     "bins.mjs",

package/rules.mjs

@@ -0,0 +1,82 @@
+// Find the rules you keep enforcing and never wrote down. `prepare` gathers what you typed to Claude Code, on this
+// machine, with copies and likely secrets removed. The agent proposes rules from it, each with quotes. `check` proves
+// every quote is really yours: a rule with fewer than two real quotes is dropped. Nothing is added to any file here.
+import { readdirSync, readFileSync, writeFileSync, mkdirSync, existsSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+
+const MAX_LINES = 3000;
+const SECRET = /(sk-[a-z0-9_-]{16,}|gh[pousr]_[a-z0-9]{20,}|github_pat_\w{20,}|AKIA[0-9A-Z]{16}|xox[baprs]-[\w-]{10,}|eyJ[\w-]{20,}\.[\w-]{10,}|-----BEGIN [A-Z ]*PRIVATE KEY|\b[a-f0-9]{40,}\b|(password|passwd|secret|token|api[_-]?key)\s*[:=]\s*\S+)/i;
+const norm = (s) => s.toLowerCase().replace(/\s+/g, ' ').trim();
+const paths = (home) => ({ dir: join(home, '.sawbuck'), input: join(home, '.sawbuck', 'rule-input.txt') });
+
+function typed(message) {
+  const c = message && message.content;
+  if (typeof c === 'string') return c;
+  if (Array.isArray(c) && c.length && c.every((b) => b.type === 'text')) return c.map((b) => b.text).join(' ');
+  return '';
+}
+
+export function prepareRules({ home = homedir() } = {}) {
+  const root = join(home, '.claude', 'projects');
+  const found = [];
+  const seen = new Set();
+  let secrets = 0;
+  let dirs = []; try { dirs = readdirSync(root); } catch {}
+  for (const d of dirs) {
+    let files = []; try { files = readdirSync(join(root, d)).filter((f) => f.endsWith('.jsonl')); } catch { continue; }
+    for (const f of files) {
+      const p = join(root, d, f);
+      let text = ''; try { text = readFileSync(p, 'utf8'); } catch { continue; }
+      for (const line of text.split('\n')) {
+        if (!line.includes('"type":"user"')) continue;
+        let e; try { e = JSON.parse(line); } catch { continue; }
+        if (e.type !== 'user' || e.isMeta || e.isSidechain) continue;
+        const t = typed(e.message).replace(/\s+/g, ' ').trim();
+        if (t.length < 8 || t.length > 400 || /^[<[]/.test(t) || t.startsWith('Caveat:') || t.startsWith('This session is being continued')) continue;
+        const k = norm(t).slice(0, 120);
+        if (seen.has(k)) continue;   // a resumed session copies its history
+        seen.add(k);
+        if (SECRET.test(t)) { secrets++; continue; }
+        found.push({ t, at: e.timestamp || '' });
+      }
+    }
+  }
+  found.sort((a, b) => String(a.at).localeCompare(String(b.at)));
+  const lines = found.slice(-MAX_LINES).map((x) => x.t);
+  const { dir, input } = paths(home);
+  mkdirSync(dir, { recursive: true });
+  writeFileSync(input, lines.join('\n') + '\n', { mode: 0o600 });
+  return { input, lines: lines.length, secrets };
+}
+
+export function checkRules(file, { home = homedir() } = {}) {
+  const lines = readFileSync(paths(home).input, 'utf8').split('\n').map(norm);
+  const raw = readFileSync(file, 'utf8');
+  const m = raw.match(/\[[\s\S]*\]/);
+  const list = m ? JSON.parse(m[0]) : [];
+  const kept = [], dropped = [];
+  for (const r of list) {
+    const quotes = (r.quotes || []).filter((q) => { const n = norm(String(q)); return n.length >= 8 && lines.some((l) => l.includes(n)); });
+    (quotes.length >= 2 ? kept : dropped).push({ rule: String(r.rule), quotes });
+  }
+  return { kept, dropped };
+}
+
+export function rulesCli(args, { home = homedir() } = {}) {
+  if (args.includes('--prepare')) {
+    const r = prepareRules({ home });
+    return `🐴 ${r.lines} of your messages are ready in ${r.input}, copies removed${r.secrets ? `, ${r.secrets} that looked like secrets left out` : ''}. Stays on this machine until an agent reads it.`;
+  }
+  const i = args.indexOf('--check');
+  if (i > -1) {
+    const file = args[i + 1];
+    if (!file || !existsSync(file) || !statSync(file).isFile()) return '🐴 sawbuck: --check needs the candidates file.';
+    if (!existsSync(paths(home).input)) return '🐴 sawbuck: run sawbuck rules --prepare first.';
+    const { kept, dropped } = checkRules(file, { home });
+    const out = [`🐴 ${kept.length} rules have at least 2 quotes that are really yours${dropped.length ? `, ${dropped.length} dropped` : ''}.`];
+    kept.forEach((r, n) => { out.push('', `${n + 1}. ${r.rule}`); for (const q of r.quotes.slice(0, 3)) out.push(`     "${q.slice(0, 110)}"`); });
+    return out.join('\n');
+  }
+  return 'sawbuck rules --prepare | --check <candidates.json>';
+}

package/sawbuck.mjs

@@ -15,6 +15,7 @@
 import { execFileSync } from 'node:child_process';
 import { erasedBlock } from './rewrites.mjs';
 import { steersReport } from './steers.mjs';
+import { rulesCli } from './rules.mjs';
 import { ensureExcluded } from './exclude.mjs';
 import { readFileSync, writeFileSync, existsSync, chmodSync, mkdirSync, unlinkSync, rmdirSync, rmSync, readdirSync } from 'node:fs';
 import { basename, join, dirname, resolve } from 'node:path';
@@ -94,6 +95,8 @@ Usage:
   sawbuck doctor [repo]     Check the attachment still resolves to a live sawbuck; --all for every repo
   sawbuck where             List every repo Sawbuck is attached to
   sawbuck contract          Sign this repo: tests, tripwires, protected paths, and the architecture lock (--dry-run to preview)
+  sawbuck rules --prepare   Gather your messages on this machine so an agent can propose the rules you never wrote
+  sawbuck rules --check F   Keep only proposed rules with 2 quotes that are really yours
   sawbuck steers            What you keep correcting, from the plugin's scratchpad on this machine (--json)
   sawbuck statusline        One-line segment for your status line (🐴 watching | N caught | steer %)
 
@@ -355,6 +358,7 @@ switch (cmd) {
   case 'trace': { traceRepo(repoRoot()); break; }
   case 'doctor': { if (flags.has('--all')) doctorAll(); else doctorRepo(repoRoot()); break; }
   case 'where': { whereAttached(); break; }
+  case 'rules': { out(rulesCli(rest)); break; }
   case 'steers': { out(steersReport({ json: flags.has('--json') })); break; }
   case 'statusline': {
     // compact status-line segment for the cwd repo. Never throws; fast.