selftune 0.2.8 → 0.2.10

package/cli/selftune/export.ts

@@ -5,6 +5,7 @@
  */
 import { mkdirSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+
 import { getDb } from "./localdb/db.js";
 import {
   getOrchestrateRuns,

package/cli/selftune/grading/auto-grade.ts

@@ -101,6 +101,7 @@ Options:
     telRecords = querySessionTelemetry(db) as SessionTelemetryRecord[];
     skillUsageRecords = querySkillUsageRecords(db) as SkillUsageRecord[];
   } else {
+    // Intentional JSONL fallback: custom --telemetry-log path overrides SQLite reads
     telRecords = readJsonl<SessionTelemetryRecord>(telemetryLog);
     skillUsageRecords = [];
   }

package/cli/selftune/grading/grade-session.ts

@@ -812,6 +812,7 @@ Options:
     telRecords = querySessionTelemetry(db) as SessionTelemetryRecord[];
     skillUsageRecords = querySkillUsageRecords(db) as SkillUsageRecord[];
   } else {
+    // Intentional JSONL fallback: custom --telemetry-log path overrides SQLite reads
     telRecords = readJsonl<SessionTelemetryRecord>(telemetryLog);
     skillUsageRecords = [];
   }
@@ -883,6 +884,14 @@ Options:
   }
   writeFileSync(outputPath, JSON.stringify(result, null, 2), "utf-8");
 
+  // Persist to SQLite for upload staging (fail-open)
+  try {
+    const { writeGradingResultToDb } = await import("../localdb/direct-write.js");
+    writeGradingResultToDb(result);
+  } catch {
+    // fail-open: grading file is already written above
+  }
+
   printSummary(result);
   console.log(`\nWrote ${outputPath}`);
 }

package/cli/selftune/hooks/auto-activate.ts

@@ -11,6 +11,7 @@
 
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
+
 import {
   CLAUDE_SETTINGS_PATH,
   EVOLUTION_AUDIT_LOG,
@@ -158,6 +159,11 @@ if (import.meta.main) {
     // Dynamically import default rules (keeps hook file lightweight)
     const { DEFAULT_RULES } = await import("../activation-rules.js");
 
+    /**
+     * The *_log_path fields exist for test overrides only; default code paths
+     * in activation-rules.ts read from SQLite when the path matches the
+     * constant (QUERY_LOG, EVOLUTION_AUDIT_LOG, etc.).
+     */
     const ctx: ActivationContext = {
       session_id: sessionId,
       query_log_path: QUERY_LOG,

package/cli/selftune/hooks/evolution-guard.ts

@@ -16,8 +16,8 @@
 
 import { existsSync, readFileSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
-import { EVOLUTION_AUDIT_LOG, SELFTUNE_CONFIG_DIR } from "../constants.js";
 
+import { EVOLUTION_AUDIT_LOG, SELFTUNE_CONFIG_DIR } from "../constants.js";
 import type { PreToolUsePayload } from "../types.js";
 import { readJsonl } from "../utils/jsonl.js";
 
@@ -35,12 +35,12 @@ function extractSkillName(filePath: string): string {
 }
 
 // ---------------------------------------------------------------------------
-// Active monitoring check (reads audit log directly — no evolution imports)
+// Active monitoring check (SQLite-first — JSONL only for test/custom paths)
 // ---------------------------------------------------------------------------
 
 /**
  * Check if a skill has an active deployed evolution (meaning it's under monitoring).
- * Reads the evolution audit JSONL directly to respect architecture lint rules.
+ * SQLite is the default read path; JSONL is used only for test/custom-path overrides.
  *
  * A skill is "actively monitored" if its last audit action is "deployed".
  * If the last action is "rolled_back", it's no longer monitored.
@@ -49,21 +49,18 @@ export async function checkActiveMonitoring(
   skillName: string,
   auditLogPath: string,
 ): Promise<boolean> {
-  // Try SQLite first, fall back to JSONL for non-default paths (e.g., tests)
+  // SQLite is the default path; JSONL fallback only for non-default paths (tests)
   let entries: Array<{ skill_name?: string; action: string }>;
   if (auditLogPath === EVOLUTION_AUDIT_LOG) {
-    try {
-      const { getDb } = await import("../localdb/db.js");
-      const { queryEvolutionAudit } = await import("../localdb/queries.js");
-      const db = getDb();
-      entries = queryEvolutionAudit(db, skillName) as Array<{
-        skill_name?: string;
-        action: string;
-      }>;
-    } catch {
-      entries = readJsonl<{ skill_name?: string; action: string }>(auditLogPath);
-    }
+    const { getDb } = await import("../localdb/db.js");
+    const { queryEvolutionAudit } = await import("../localdb/queries.js");
+    const db = getDb();
+    entries = queryEvolutionAudit(db, skillName) as Array<{
+      skill_name?: string;
+      action: string;
+    }>;
   } else {
+    // test/custom-path fallback
     entries = readJsonl<{ skill_name?: string; action: string }>(auditLogPath);
   }
 

package/cli/selftune/hooks/prompt-log.ts

@@ -11,6 +11,7 @@
 import { readdirSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
+
 import { CANONICAL_LOG, QUERY_LOG, SKIP_PREFIXES } from "../constants.js";
 import {
   appendCanonicalRecord,

package/cli/selftune/hooks/session-stop.ts

@@ -9,9 +9,9 @@
  */
 
 import { execSync } from "node:child_process";
-import { closeSync, openSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
-import { CANONICAL_LOG, ORCHESTRATE_LOCK, TELEMETRY_LOG } from "../constants.js";
+import { readFileSync } from "node:fs";
 
+import { CANONICAL_LOG, ORCHESTRATE_LOCK, TELEMETRY_LOG } from "../constants.js";
 import {
   appendCanonicalRecords,
   buildCanonicalExecutionFact,
@@ -25,6 +25,22 @@ import { parseTranscript } from "../utils/transcript.js";
 
 const LOCK_STALE_MS = 30 * 60 * 1000;
 
+interface ReactiveSpawnDeps {
+  spawnOrchestrate?: () => boolean;
+}
+
+function hasFreshOrchestrateLock(lockPath: string): boolean {
+  try {
+    const lockContent = readFileSync(lockPath, "utf8");
+    const lock = JSON.parse(lockContent) as { timestamp?: string };
+    if (typeof lock.timestamp !== "string") return false;
+    const lockAge = Date.now() - new Date(lock.timestamp).getTime();
+    return Number.isFinite(lockAge) && lockAge < LOCK_STALE_MS;
+  } catch {
+    return false;
+  }
+}
+
 /**
  * Check for pending improvement signals and spawn a focused orchestrate run
  * in the background if warranted. Fire-and-forget — the hook exits immediately.
@@ -33,6 +49,7 @@ const LOCK_STALE_MS = 30 * 60 * 1000;
  */
 export async function maybeSpawnReactiveOrchestrate(
   lockPath: string = ORCHESTRATE_LOCK,
+  deps: ReactiveSpawnDeps = {},
 ): Promise<boolean> {
   try {
     // Read pending signals from SQLite (dynamic import to reduce hook startup cost)
@@ -42,48 +59,25 @@ export async function maybeSpawnReactiveOrchestrate(
     const pending = queryImprovementSignals(db, false);
     if (pending.length === 0) return false;
 
-    // Atomically claim the lock — openSync with "wx" fails if file exists
-    let fd: number;
-    try {
-      fd = openSync(lockPath, "wx");
-      writeFileSync(fd, JSON.stringify({ timestamp: new Date().toISOString(), pid: process.pid }));
-      closeSync(fd);
-    } catch (lockErr: unknown) {
-      // Lock exists — check if stale
-      if ((lockErr as NodeJS.ErrnoException).code === "EEXIST") {
-        try {
-          const lockContent = readFileSync(lockPath, "utf8");
-          const lock = JSON.parse(lockContent);
-          const lockAge = Date.now() - new Date(lock.timestamp).getTime();
-          if (lockAge < LOCK_STALE_MS) return false; // Active lock, skip
-          // Stale lock — override
-          writeFileSync(
-            lockPath,
-            JSON.stringify({ timestamp: new Date().toISOString(), pid: process.pid }),
-          );
-        } catch {
-          return false; // Can't read lock, skip
-        }
-      } else {
-        return false;
-      }
-    }
+    // Do not pre-claim the orchestrate lock here. The spawned process must
+    // acquire its own lock or it will immediately self-block on startup.
+    if (hasFreshOrchestrateLock(lockPath)) return false;
 
     // Spawn orchestrate in background (fire-and-forget)
     try {
-      const proc = Bun.spawn(["selftune", "orchestrate", "--max-skills", "2"], {
-        stdout: "ignore",
-        stderr: "ignore",
-        stdin: "ignore",
-      });
-      proc.unref();
+      const spawnOrchestrate =
+        deps.spawnOrchestrate ??
+        (() => {
+          const proc = Bun.spawn(["selftune", "orchestrate", "--max-skills", "2"], {
+            stdout: "ignore",
+            stderr: "ignore",
+            stdin: "ignore",
+          });
+          proc.unref();
+          return true;
+        });
+      if (!spawnOrchestrate()) return false;
     } catch {
-      // Spawn failed — release our lock
-      try {
-        unlinkSync(lockPath);
-      } catch {
-        /* ignore */
-      }
       return false;
     }
 

package/cli/selftune/hooks/skill-change-guard.ts

@@ -12,6 +12,7 @@
 
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { basename, dirname } from "node:path";
+
 import { SESSION_STATE_DIR } from "../constants.js";
 import type { PreToolUsePayload } from "../types.js";
 

package/cli/selftune/hooks/skill-eval.ts

@@ -13,6 +13,7 @@
 
 import { existsSync, readFileSync } from "node:fs";
 import { basename, dirname } from "node:path";
+
 import { CANONICAL_LOG, SKILL_LOG } from "../constants.js";
 import {
   appendCanonicalRecord,
@@ -24,7 +25,6 @@ import {
   getLatestPromptIdentity,
 } from "../normalization.js";
 import type { PostToolUsePayload, SkillUsageRecord } from "../types.js";
-
 import { classifySkillPath } from "../utils/skill-discovery.js";
 import { getLastUserMessage } from "../utils/transcript.js";
 

package/cli/selftune/index.ts

@@ -10,6 +10,7 @@
  *   selftune sync               — Sync source-truth telemetry across supported agents
  *   selftune orchestrate        — Run autonomous core loop (sync → status → evolve → watch)
  *   selftune init               — Initialize agent identity and config
+ *   selftune uninstall          — Clean removal of all selftune data and config
  *   selftune status             — Show skill health summary
  *   selftune watch              — Monitor post-deploy skill health
  *   selftune doctor             — Run health checks
@@ -44,6 +45,7 @@ Commands:
   sync               Sync source-truth telemetry across supported agents
   orchestrate        Run autonomous core loop (sync → status → evolve → watch)
   init               Initialize agent identity and config
+  uninstall          Clean removal of all selftune data and config
   status             Show skill health summary
   watch              Monitor post-deploy skill health
   doctor             Run health checks
@@ -338,6 +340,11 @@ Run 'selftune eval <action> --help' for action-specific options.`);
     await cliMain();
     break;
   }
+  case "uninstall": {
+    const { cliMain } = await import("./uninstall.js");
+    await cliMain();
+    break;
+  }
   case "contribute": {
     const { cliMain } = await import("./contribute/contribute.js");
     await cliMain();
@@ -464,7 +471,7 @@ Run 'selftune cron <subcommand> --help' for subcommand-specific options.`);
   }
   case "sync": {
     const { cliMain } = await import("./sync.js");
-    cliMain();
+    await cliMain();
     break;
   }
   case "workflows": {
@@ -606,9 +613,8 @@ Output:
         const { readAlphaIdentity } = await import("./alpha-identity.js");
         const { getDb } = await import("./localdb/db.js");
         const { runUploadCycle } = await import("./alpha-upload/index.js");
-        const { getSelftuneVersion, readConfiguredAgentType } = await import(
-          "./utils/selftune-meta.js"
-        );
+        const { getSelftuneVersion, readConfiguredAgentType } =
+          await import("./utils/selftune-meta.js");
 
         const identity = readAlphaIdentity(SELFTUNE_CONFIG_PATH);
         if (!identity?.enrolled) {
@@ -670,36 +676,39 @@ Output:
       }
       case "relink": {
         const { SELFTUNE_CONFIG_PATH } = await import("./constants.js");
-        const { readAlphaIdentity, writeAlphaIdentity, generateUserId } = await import(
-          "./alpha-identity.js"
-        );
-        const { requestDeviceCode, pollDeviceCode } = await import("./auth/device-code.js");
+        const { readAlphaIdentity, writeAlphaIdentity, generateUserId } =
+          await import("./alpha-identity.js");
+        const { buildVerificationUrl, pollDeviceCode, requestDeviceCode, tryOpenUrl } =
+          await import("./auth/device-code.js");
         const { chmodSync } = await import("node:fs");
 
         const existingIdentity = readAlphaIdentity(SELFTUNE_CONFIG_PATH);
         process.stderr.write("[alpha relink] Starting device-code authentication flow...\n");
 
         const grant = await requestDeviceCode();
+        const verificationUrlWithCode = buildVerificationUrl(
+          grant.verification_url,
+          grant.user_code,
+        );
 
         console.log(
           JSON.stringify({
             level: "info",
             code: "device_code_issued",
             verification_url: grant.verification_url,
+            verification_url_with_code: verificationUrlWithCode,
             user_code: grant.user_code,
             expires_in: grant.expires_in,
-            message: `Open ${grant.verification_url} and enter code: ${grant.user_code}`,
+            message: `Open ${verificationUrlWithCode} to approve.`,
           }),
         );
 
         // Try to open browser
-        try {
-          const url = `${grant.verification_url}?code=${grant.user_code}`;
-          Bun.spawn(["open", url], { stdout: "ignore", stderr: "ignore" });
+        if (tryOpenUrl(verificationUrlWithCode)) {
           process.stderr.write("[alpha relink] Browser opened. Waiting for approval...\n");
-        } catch {
+        } else {
           process.stderr.write(
-            "[alpha relink] Could not open browser. Visit the URL above manually.\n",
+            `[alpha relink] Could not open browser. Visit ${verificationUrlWithCode} manually.\n`,
           );
         }
 

package/cli/selftune/ingestors/claude-replay.ts

@@ -24,6 +24,7 @@
 import { statSync } from "node:fs";
 import { basename } from "node:path";
 import { parseArgs } from "node:util";
+
 import {
   CANONICAL_LOG,
   CLAUDE_CODE_MARKER,

package/cli/selftune/ingestors/codex-rollout.ts

@@ -25,6 +25,7 @@ import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { basename, join } from "node:path";
 import { parseArgs } from "node:util";
+
 import { CANONICAL_LOG, QUERY_LOG, SKILL_LOG, TELEMETRY_LOG } from "../constants.js";
 import {
   appendCanonicalRecords,

package/cli/selftune/ingestors/codex-wrapper.ts

@@ -19,6 +19,7 @@
 
 import { homedir } from "node:os";
 import { join } from "node:path";
+
 import { CANONICAL_LOG, QUERY_LOG, SKILL_LOG, TELEMETRY_LOG } from "../constants.js";
 import {
   appendCanonicalRecords,

package/cli/selftune/ingestors/openclaw-ingest.ts

@@ -25,6 +25,7 @@ import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { basename, join } from "node:path";
 import { parseArgs } from "node:util";
+
 import {
   CANONICAL_LOG,
   OPENCLAW_AGENTS_DIR,

package/cli/selftune/ingestors/opencode-ingest.ts

@@ -25,6 +25,7 @@ import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { basename, join } from "node:path";
 import { parseArgs } from "node:util";
+
 import { CANONICAL_LOG, QUERY_LOG, SKILL_LOG, TELEMETRY_LOG } from "../constants.js";
 import {
   appendCanonicalRecords,