Dev10x 0.76.0__tar.gz → 0.78.0__tar.gz

{dev10x-0.76.0/src/Dev10x.egg-info → dev10x-0.78.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Dev10x
-Version: 0.76.0
+Version: 0.78.0
 Summary: Claude Code plugin providing reusable skills, hooks, and commands
 Author: Janusz Skonieczny
 License: MIT License

{dev10x-0.76.0 → dev10x-0.78.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "Dev10x"
-version = "0.76.0"
+version = "0.78.0"
 description = "Claude Code plugin providing reusable skills, hooks, and commands"
 readme = "README.md"
 license = { file = "LICENSE" }
@@ -63,7 +63,7 @@ addopts = "--cov=src/dev10x --cov-report=term-missing"
 source = ["src/dev10x"]
 
 [tool.coverage.report]
-fail_under = 38
+fail_under = 75
 show_missing = true
 exclude_lines = ["if __name__", "pragma: no cover"]
 
@@ -74,5 +74,15 @@ src = ["src"]
 [tool.ruff.lint]
 select = ["E", "F", "I", "UP"]
 
+[tool.pytest_benchmark]
+# Store baselines in .benchmarks/ (gitignored per-run, cached by CI)
+storage = "file"
+# Fail on mean regression > 20% vs stored baseline
+compare_fail = ["mean:20%"]
+# Minimum rounds so outliers don't skew results
+min_rounds = 5
+timer = "perf_counter"
+disable_gc = true
+
 [tool.mypy]
 mypy_path = "src"

{dev10x-0.76.0 → dev10x-0.78.0/src/Dev10x.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Dev10x
-Version: 0.76.0
+Version: 0.78.0
 Summary: Claude Code plugin providing reusable skills, hooks, and commands
 Author: Janusz Skonieczny
 License: MIT License

{dev10x-0.76.0 → dev10x-0.78.0}/src/Dev10x.egg-info/SOURCES.txt

@@ -39,6 +39,7 @@ src/dev10x/domain/git_context.py
 src/dev10x/domain/hook_telemetry.py
 src/dev10x/domain/install_version.py
 src/dev10x/domain/profile_tier.py
+src/dev10x/domain/sensitivity.py
 src/dev10x/domain/session_document.py
 src/dev10x/domain/session_rules.py
 src/dev10x/domain/common/__init__.py
@@ -78,13 +79,21 @@ src/dev10x/hooks/task_plan_sync.py
 src/dev10x/mcp/__init__.py
 src/dev10x/mcp/_app.py
 src/dev10x/mcp/audit_tools.py
+src/dev10x/mcp/daemon.py
 src/dev10x/mcp/git_tools.py
 src/dev10x/mcp/github_tools.py
+src/dev10x/mcp/knowledge_prompts.py
+src/dev10x/mcp/knowledge_resources.py
 src/dev10x/mcp/misc_tools.py
 src/dev10x/mcp/plan_tools.py
+src/dev10x/mcp/resource_watcher.py
+src/dev10x/mcp/roots_manager.py
+src/dev10x/mcp/roots_tools.py
 src/dev10x/mcp/server_cli.py
 src/dev10x/mcp/server_db.py
+src/dev10x/mcp/session_store.py
 src/dev10x/mcp/transport.py
+src/dev10x/mcp/wiring.py
 src/dev10x/monitor/__init__.py
 src/dev10x/permission/__init__.py
 src/dev10x/plan/__init__.py
@@ -118,15 +127,20 @@ src/dev10x/skills/doctor/registry.py
 src/dev10x/skills/doctor/strategy.py
 src/dev10x/skills/doctor/strategies/__init__.py
 src/dev10x/skills/doctor/strategies/forbidden_token_priming.py
+src/dev10x/skills/doctor/strategies/mcp_horizontal_duplicates.py
 src/dev10x/skills/doctor/strategies/mcp_vs_script_drift.py
 src/dev10x/skills/doctor/strategies/missing_linear_mcp_allow.py
 src/dev10x/skills/evidence/__init__.py
 src/dev10x/skills/git_fixup/__init__.py
 src/dev10x/skills/git_fixup/find_fixup_target.py
+src/dev10x/skills/harvest/__init__.py
+src/dev10x/skills/harvest/closed_prs.py
+src/dev10x/skills/harvest/review_threads.py
 src/dev10x/skills/monitor/__init__.py
 src/dev10x/skills/monitor/ci_check_status.py
 src/dev10x/skills/monitor/pr_notify.py
 src/dev10x/skills/notifications/__init__.py
+src/dev10x/skills/notifications/slack_notify.py
 src/dev10x/skills/notifications/slack_review_request.py
 src/dev10x/skills/orchestration/__init__.py
 src/dev10x/skills/orchestration/batch_detection.py
@@ -174,7 +188,9 @@ src/dev10x/validators/redundant_fetch.py
 src/dev10x/validators/registry.py
 src/dev10x/validators/safe_expansion.py
 src/dev10x/validators/safe_subshell.py
+src/dev10x/validators/sensitivity_target.py
 src/dev10x/validators/skill_redirect.py
+src/dev10x/validators/spec_drift.py
 src/dev10x/validators/sql_safety.py
 tests/test_cli.py
 tests/test_cli_lazy.py

{dev10x-0.76.0 → dev10x-0.78.0}/src/dev10x/commands/permission.py

@@ -304,13 +304,49 @@ def init() -> None:
     help="Print one line per changed file (count) instead of full per-file details",
 )
 @click.option("--restore", is_flag=True, help="Restore settings from most recent backups")
-def clean(*, dry_run: bool, verbose: bool, summary: bool, restore: bool) -> None:
+@click.option(
+    "--skip-global-dedup",
+    is_flag=True,
+    default=False,
+    help=(
+        "Do not remove project rules that are exact duplicates of global rules. "
+        "Retained for backward compatibility — global-dedup is now OFF by "
+        "default, so this flag is only meaningful alongside --aggressive."
+    ),
+)
+@click.option(
+    "--aggressive",
+    is_flag=True,
+    default=False,
+    help=(
+        "Also remove project rules that are exact duplicates of global rules. "
+        "OFF by default (finding #47): global→project rule inheritance is NOT "
+        "guaranteed when a project has its own settings.local.json, so stripping "
+        "the local copy can reintroduce permission prompts. Only enable after "
+        "`dev10x permission investigate` confirms inheritance holds for this "
+        "environment. Recover a bad run with `dev10x permission clean --restore`."
+    ),
+)
+def clean(
+    *,
+    dry_run: bool,
+    verbose: bool,
+    summary: bool,
+    restore: bool,
+    skip_global_dedup: bool,
+    aggressive: bool,
+) -> None:
     """Clean redundant permissions from project settings files."""
     from dev10x.skills.permission import clean_project_files as mod
 
     if restore:
         sys.exit(mod._restore(config_path=mod.find_config()))
 
+    # Global-dedup is opt-in (finding #47). It runs only under --aggressive,
+    # and --skip-global-dedup always wins so the safe behavior cannot be
+    # accidentally re-enabled.
+    skip_global_dedup = skip_global_dedup or not aggressive
+
     config_path = mod.find_config()
     click.echo(f"Config: {config_path}")
     config = mod.load_config(config_path)
@@ -342,6 +378,7 @@ def clean(*, dry_run: bool, verbose: bool, summary: bool, restore: bool) -> None
     total_kept = 0
     files_changed = 0
     total_secrets = 0
+    total_global_dedup = 0
 
     for path in sorted(settings_files):
         result, messages = mod.clean_file(
@@ -352,6 +389,7 @@ def clean(*, dry_run: bool, verbose: bool, summary: bool, restore: bool) -> None
             cache_root=cache_root,
             dry_run=dry_run,
             verbose=verbose,
+            skip_global_dedup=skip_global_dedup,
         )
         if result is None:
             click.echo(f"\n{path}")
@@ -376,6 +414,7 @@ def clean(*, dry_run: bool, verbose: bool, summary: bool, restore: bool) -> None
             total_removed += result.total_removed
             total_kept += len(result.kept)
             total_secrets += len(result.leaked_secrets)
+            total_global_dedup += len(result.exact_duplicates)
             if result.total_removed > 0:
                 files_changed += 1
         else:
@@ -389,6 +428,14 @@ def clean(*, dry_run: bool, verbose: bool, summary: bool, restore: bool) -> None
         click.echo(f"{verb} {total_removed} rules across {files_changed} files.")
         click.echo(f"Kept {total_kept} rules total.")
 
+    if total_global_dedup > 0 and not skip_global_dedup:
+        click.echo(
+            f"\n⚠  WARNING: {total_global_dedup} rules removed as exact duplicates of global"
+            " rules (--aggressive). Global→project rule inheritance is NOT guaranteed when a"
+            " project has its own settings.local.json (finding #47). If new permission prompts"
+            " appear, recover with `dev10x permission clean --restore`."
+        )
+
     if total_secrets > 0:
         click.echo(
             f"\n⚠ Found {total_secrets} rules containing leaked secrets."
@@ -951,6 +998,87 @@ def doctor_enable_group(*, group_name: str, dry_run: bool) -> None:
     click.echo(f"\n{verb} {total_added} rules from group {group_name!r}.")
 
 
+@doctor.command(name="anchor-worktree-roots")
+@click.option("--dry-run", is_flag=True, help="Show changes without modifying files")
+@click.option("--quiet", is_flag=True, help="Suppress per-file details")
+def doctor_anchor_worktree_roots(*, dry_run: bool, quiet: bool) -> None:
+    """Anchor .worktrees parents in additionalDirectories and flag relative skill-script rules.
+
+    Worktrees accumulate per-leaf ``additionalDirectories`` entries instead of
+    anchoring the project-level ``.worktrees`` parent. This command:
+
+    \b
+    1. Discovers every ``<project>/.worktrees`` parent beneath configured roots.
+    2. Ensures each parent is present in ``additionalDirectories`` across all
+       settings files — anchoring at the parent covers all sibling and future
+       worktrees without re-prompting per leaf (GH-376).
+    3. Flags bare-relative ``.claude/skills/.../scripts/`` allow rules that
+       silently target different skill dirs per worktree CWD.
+    """
+    from dev10x.skills.permission import doctor as mod
+    from dev10x.skills.permission import update_paths as paths_mod
+
+    config_path = paths_mod.find_config()
+    config = paths_mod.load_config(config_path)
+    roots = config.get("roots", [])
+    if not roots:
+        click.echo("No roots configured. Run `dev10x permission init` first.")
+        return
+
+    settings_files = paths_mod.find_settings_files(
+        roots=roots,
+        include_user=config.get("include_user_settings", True),
+    )
+    if not settings_files:
+        click.echo("No settings files found.")
+        return
+
+    if dry_run and not quiet:
+        click.echo("(dry run — no files will be modified)\n")
+
+    worktrees_parents = mod.discover_worktrees_parents(roots)
+    if not quiet:
+        if worktrees_parents:
+            click.echo(f"Discovered {len(worktrees_parents)} .worktrees parent(s):")
+            for parent in worktrees_parents:
+                click.echo(f"  {parent}")
+        else:
+            click.echo("No .worktrees parents found beneath configured roots.")
+
+    anchor_result = mod.anchor_worktree_roots(
+        settings_files,
+        roots=roots,
+        dry_run=dry_run,
+    )
+
+    workspace_count = anchor_result.workspace_anchored
+    skill_script_count = sum(1 for f in anchor_result.findings if f.scope == "skill-script")
+
+    for finding in anchor_result.findings:
+        if finding.scope == "workspace" and not quiet:
+            click.echo(f"\n{finding.settings_path}")
+            click.echo(f"  {finding.suggestion}")
+        elif finding.scope == "skill-script":
+            click.echo(f"\n{finding.settings_path}")
+            click.echo(f"  ! RELATIVE_SKILL_SCRIPT: {finding.rule}")
+            if not quiet:
+                click.echo(f"    {finding.suggestion}")
+
+    if workspace_count == 0 and skill_script_count == 0:
+        click.echo("\nAll settings files already have worktrees parents anchored.")
+    else:
+        if workspace_count > 0:
+            verb = "Would anchor" if dry_run else "Anchored"
+            click.echo(
+                f"\n{verb} {workspace_count} worktrees parent path(s) in additionalDirectories."
+            )
+        if skill_script_count > 0:
+            click.echo(
+                f"\nFound {skill_script_count} relative skill-script rule(s) "
+                f"— rewrite to absolute plugin-cache paths or Skill() invocations."
+            )
+
+
 @permission.command(name="record-upgrade")
 @click.option(
     "--version",

{dev10x-0.76.0 → dev10x-0.78.0}/src/dev10x/commands/skill.py

@@ -1,6 +1,5 @@
 from __future__ import annotations
 
-import subprocess
 import sys
 from pathlib import Path
 
@@ -23,14 +22,6 @@ def notify() -> None:
     """
 
 
-def _plugin_root() -> Path:
-    """Resolve the plugin root containing the skills/ directory.
-
-    `src/dev10x/commands/skill.py` -> parents[3] = plugin root.
-    """
-    return Path(__file__).resolve().parents[3]
-
-
 @notify.command(name="slack-review-prepare")
 @click.option("--pr", type=int, required=True, help="PR number")
 @click.option("--repo", required=True, help="GitHub repo (owner/name)")
@@ -69,37 +60,36 @@ def slack_send(
     thread_ts: str | None,
     workspace: str | None,
 ) -> None:
-    """Send a Slack message via the plugin's slack-notify.py script.
+    """Send a Slack message via the importable slack_notify module (GH-442).
 
-    Delegates to `skills/slack/slack-notify.py` while exposing a
-    version-stable CLI surface. The underlying script handles token
-    resolution, user-group mention expansion, and bot identity.
+    Delegates to `dev10x.skills.notifications.slack_notify` so the command
+    works when dev10x is installed via ``uvx`` — where ``skills/`` data files
+    are not shipped as part of the wheel and cannot be reached by filesystem
+    traversal from the installed package location.
     """
     if not message and not message_file:
         raise click.UsageError("Provide --message or --message-file.")
 
-    slack_notify = _plugin_root() / "skills" / "slack" / "slack-notify.py"
-    if not slack_notify.exists():
-        click.echo(f"slack-notify.py not found at {slack_notify}", err=True)
-        sys.exit(1)
+    from dev10x.skills.notifications import slack_notify
 
-    cmd: list[str] = [str(slack_notify), "--channel", channel]
-    if message_file is not None:
-        cmd.extend(["--message-file", str(message_file)])
-    if message is not None:
-        cmd.extend(["--message", message])
-    if thread_ts is not None:
-        cmd.extend(["--thread-ts", thread_ts])
     if workspace is not None:
-        cmd.extend(["--workspace", workspace])
-
-    result = subprocess.run(cmd, capture_output=True, text=True, timeout=30)
-    if result.stdout:
-        click.echo(result.stdout.rstrip())
-    if result.returncode != 0:
-        if result.stderr:
-            click.echo(result.stderr.rstrip(), err=True)
-        sys.exit(result.returncode)
+        slack_notify.set_workspace(workspace)
+
+    msg: str
+    if message_file is not None:
+        msg = message_file.read_text()
+    else:
+        msg = message  # type: ignore[assignment]  # validated above
+
+    ts = slack_notify.send_slack_message(
+        channel=channel,
+        message=msg,
+        thread_ts=thread_ts,
+    )
+    if ts:
+        click.echo(f"✅ Slack message sent successfully! ts={ts}")
+    else:
+        sys.exit(1)
 
 
 @skill.command(name="count-instructions")

{dev10x-0.76.0 → dev10x-0.78.0}/src/dev10x/domain/__init__.py

@@ -8,6 +8,7 @@ from dev10x.domain.git_context import GitContext
 from dev10x.domain.rules.rule_engine import RuleEngine, RuleMatch
 from dev10x.domain.rules.sql import SqlStatement, is_read_only_sql
 from dev10x.domain.rules.validation_rule import Compensation, Rule
+from dev10x.domain.sensitivity import SensitivityClassifier, SensitivityLabel, SensitivityMatch
 
 __all__ = [
     "Compensation",
@@ -28,6 +29,9 @@ __all__ = [
     "Rule",
     "RuleEngine",
     "RuleMatch",
+    "SensitivityClassifier",
+    "SensitivityLabel",
+    "SensitivityMatch",
     "SqlStatement",
     "is_read_only_sql",
 ]

{dev10x-0.76.0 → dev10x-0.78.0}/src/dev10x/domain/dev10x_paths.py

@@ -164,6 +164,13 @@ class Dev10xConfigDir:
             _legacy_settings_pr_merge_yaml,
         )
 
+    @classmethod
+    def plugin_maintenance_prefs_yaml(cls) -> Path:
+        return _with_lazy_migration(
+            cls._resolve("plugin-maintenance-prefs.yaml"),
+            _legacy_plugin_maintenance_prefs_yaml,
+        )
+
 
 def _with_lazy_migration(current: Path, legacy_provider: Callable[[], Path]) -> Path:
     migrate_path(legacy=legacy_provider(), current=current)
@@ -185,6 +192,10 @@ _legacy_github_reviewers_config_yaml = ClaudeDir.github_reviewers_config_yaml
 _legacy_settings_pr_merge_yaml = ClaudeDir.settings_pr_merge_yaml
 
 
+def _legacy_plugin_maintenance_prefs_yaml() -> Path:
+    return ClaudeDir.memory_dev10x_dir() / "plugin-maintenance-prefs.yaml"
+
+
 def _legacy_playbooks_dir() -> Path:
     return ClaudeDir.memory_dev10x_dir() / "playbooks"
 
@@ -219,6 +230,10 @@ def _migration_pairs() -> list[tuple[Path, Path]]:
             _legacy_settings_pr_merge_yaml(),
             Dev10xConfigDir._resolve("settings-pr-merge.yaml"),
         ),
+        (
+            _legacy_plugin_maintenance_prefs_yaml(),
+            Dev10xConfigDir._resolve("plugin-maintenance-prefs.yaml"),
+        ),
     ]
 
 

{dev10x-0.76.0 → dev10x-0.78.0}/src/dev10x/domain/friction_level.py

@@ -54,5 +54,48 @@ class FrictionLevel(StrEnum):
                 return member
         return cls.default()
 
+    def pending_decisions_guidance(self) -> str:
+        """Return the session-resume instruction for pending-decision state.
+
+        Called by ``DecisionGuidanceRule`` when the plan has one or more
+        unresolved decision tasks.  Each member encodes its own pacing
+        rule, eliminating the if/elif dispatch from the rule body.
+
+        Returns:
+            A non-empty instruction string for every recognised member.
+        """
+        if self is FrictionLevel.ADAPTIVE:
+            return (
+                "Session resumed with pending decisions. Friction level is adaptive — "
+                "auto-select recommended options for all queued decisions and continue "
+                "advancing through the task list without calling AskUserQuestion."
+            )
+        return (
+            "Session resumed with pending decisions. "
+            "Re-ask each pending decision using AskUserQuestion — "
+            "invoke Dev10x:ask before advancing."
+        )
+
+    def fallback_guidance(self, *, fallback: str) -> str:
+        """Return a friction-level-specific fallback clause for block messages.
+
+        In GUIDED mode the agent is shown a concrete fallback path (skill
+        guardrails to apply manually, or an MCP-unavailability escape).
+        In STRICT and ADAPTIVE modes the block is unadorned — the fallback
+        text is omitted so the message stays concise.
+
+        Args:
+            fallback: The fallback snippet to surface in GUIDED mode.
+                      May be an MCP-server fallback description, a manual-
+                      guardrail list, or any other escape-hatch hint.
+
+        Returns:
+            The fallback clause (including a leading newline) when GUIDED,
+            or an empty string for other levels.
+        """
+        if self is FrictionLevel.GUIDED:
+            return fallback
+        return ""
+
 
 __all__ = ["FrictionLevel"]

{dev10x-0.76.0 → dev10x-0.78.0}/src/dev10x/domain/install_version.py

@@ -85,6 +85,55 @@ def write_applied_version(
     return path
 
 
+def read_running_hook_version(*, plugin_root: Path | None = None) -> str | None:
+    """Return the version that is *currently executing* inside this session.
+
+    ``$CLAUDE_PLUGIN_ROOT`` is set by Claude Code to the plugin directory
+    that was resolved when the session started. Hooks loaded from that
+    directory run for the entire session lifetime — an on-disk upgrade
+    does not swap them out. Reading the version from this directory gives
+    us the *running* version, which may lag behind the latest installed
+    version when the user ran ``claude plugin update`` mid-session.
+
+    Returns ``None`` when the running root is unknown (e.g., local
+    ``--plugin-dir`` dev runs that do not carry a versioned cache path).
+    """
+    root = plugin_root or _default_plugin_root()
+    return read_plugin_version(plugin_root=root)
+
+
+def read_latest_installed_version(
+    *,
+    cache_dir: Path | None = None,
+    publisher: str = "Dev10x-Guru",
+    plugin_slug: str = "dev10x-claude",
+) -> str | None:
+    """Return the highest-version directory under the plugin cache.
+
+    Scans ``~/.claude/plugins/cache/<publisher>/<plugin_slug>/`` for
+    semver-named subdirectories and returns the latest. Returns ``None``
+    when the directory is absent or empty (e.g., ``--plugin-dir`` installs
+    that bypass the cache).
+    """
+    from dev10x.domain.claude_paths import ClaudeDir
+
+    root = cache_dir or (ClaudeDir.plugins_cache_dir() / publisher / plugin_slug)
+    if not root.is_dir():
+        return None
+    versions = sorted(
+        (d for d in root.iterdir() if d.is_dir()),
+        key=lambda p: _version_tuple(p.name),
+    )
+    return versions[-1].name if versions else None
+
+
+def _version_tuple(version: str) -> tuple[int, ...]:
+    try:
+        return tuple(int(x) for x in version.split("."))
+    except ValueError:
+        return (0,)
+
+
 def record_upgrade(*, version: str | None = None) -> Result[dict[str, Any]]:
     """Record the currently-installed plugin version as applied.
 
@@ -169,7 +218,9 @@ __all__ = [
     "InstallState",
     "install_state",
     "read_applied_version",
+    "read_latest_installed_version",
     "read_plugin_version",
+    "read_running_hook_version",
     "record_upgrade",
     "write_applied_version",
 ]