Dev10x 0.77.0__tar.gz → 0.78.0__tar.gz

{dev10x-0.77.0/src/Dev10x.egg-info → dev10x-0.78.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Dev10x
-Version: 0.77.0
+Version: 0.78.0
 Summary: Claude Code plugin providing reusable skills, hooks, and commands
 Author: Janusz Skonieczny
 License: MIT License

{dev10x-0.77.0 → dev10x-0.78.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "Dev10x"
-version = "0.77.0"
+version = "0.78.0"
 description = "Claude Code plugin providing reusable skills, hooks, and commands"
 readme = "README.md"
 license = { file = "LICENSE" }
@@ -63,7 +63,7 @@ addopts = "--cov=src/dev10x --cov-report=term-missing"
 source = ["src/dev10x"]
 
 [tool.coverage.report]
-fail_under = 38
+fail_under = 75
 show_missing = true
 exclude_lines = ["if __name__", "pragma: no cover"]
 
@@ -74,5 +74,15 @@ src = ["src"]
 [tool.ruff.lint]
 select = ["E", "F", "I", "UP"]
 
+[tool.pytest_benchmark]
+# Store baselines in .benchmarks/ (gitignored per-run, cached by CI)
+storage = "file"
+# Fail on mean regression > 20% vs stored baseline
+compare_fail = ["mean:20%"]
+# Minimum rounds so outliers don't skew results
+min_rounds = 5
+timer = "perf_counter"
+disable_gc = true
+
 [tool.mypy]
 mypy_path = "src"

{dev10x-0.77.0 → dev10x-0.78.0/src/Dev10x.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: Dev10x
-Version: 0.77.0
+Version: 0.78.0
 Summary: Claude Code plugin providing reusable skills, hooks, and commands
 Author: Janusz Skonieczny
 License: MIT License

{dev10x-0.77.0 → dev10x-0.78.0}/src/Dev10x.egg-info/SOURCES.txt

@@ -82,8 +82,13 @@ src/dev10x/mcp/audit_tools.py
 src/dev10x/mcp/daemon.py
 src/dev10x/mcp/git_tools.py
 src/dev10x/mcp/github_tools.py
+src/dev10x/mcp/knowledge_prompts.py
+src/dev10x/mcp/knowledge_resources.py
 src/dev10x/mcp/misc_tools.py
 src/dev10x/mcp/plan_tools.py
+src/dev10x/mcp/resource_watcher.py
+src/dev10x/mcp/roots_manager.py
+src/dev10x/mcp/roots_tools.py
 src/dev10x/mcp/server_cli.py
 src/dev10x/mcp/server_db.py
 src/dev10x/mcp/session_store.py
@@ -128,10 +133,14 @@ src/dev10x/skills/doctor/strategies/missing_linear_mcp_allow.py
 src/dev10x/skills/evidence/__init__.py
 src/dev10x/skills/git_fixup/__init__.py
 src/dev10x/skills/git_fixup/find_fixup_target.py
+src/dev10x/skills/harvest/__init__.py
+src/dev10x/skills/harvest/closed_prs.py
+src/dev10x/skills/harvest/review_threads.py
 src/dev10x/skills/monitor/__init__.py
 src/dev10x/skills/monitor/ci_check_status.py
 src/dev10x/skills/monitor/pr_notify.py
 src/dev10x/skills/notifications/__init__.py
+src/dev10x/skills/notifications/slack_notify.py
 src/dev10x/skills/notifications/slack_review_request.py
 src/dev10x/skills/orchestration/__init__.py
 src/dev10x/skills/orchestration/batch_detection.py
@@ -181,6 +190,7 @@ src/dev10x/validators/safe_expansion.py
 src/dev10x/validators/safe_subshell.py
 src/dev10x/validators/sensitivity_target.py
 src/dev10x/validators/skill_redirect.py
+src/dev10x/validators/spec_drift.py
 src/dev10x/validators/sql_safety.py
 tests/test_cli.py
 tests/test_cli_lazy.py

{dev10x-0.77.0 → dev10x-0.78.0}/src/dev10x/commands/permission.py

@@ -310,12 +310,31 @@ def init() -> None:
     default=False,
     help=(
         "Do not remove project rules that are exact duplicates of global rules. "
-        "Use this when global→project rule inheritance cannot be verified "
-        "(finding #47: local settings.local.json may not inherit global rules)."
+        "Retained for backward compatibility — global-dedup is now OFF by "
+        "default, so this flag is only meaningful alongside --aggressive."
+    ),
+)
+@click.option(
+    "--aggressive",
+    is_flag=True,
+    default=False,
+    help=(
+        "Also remove project rules that are exact duplicates of global rules. "
+        "OFF by default (finding #47): global→project rule inheritance is NOT "
+        "guaranteed when a project has its own settings.local.json, so stripping "
+        "the local copy can reintroduce permission prompts. Only enable after "
+        "`dev10x permission investigate` confirms inheritance holds for this "
+        "environment. Recover a bad run with `dev10x permission clean --restore`."
     ),
 )
 def clean(
-    *, dry_run: bool, verbose: bool, summary: bool, restore: bool, skip_global_dedup: bool
+    *,
+    dry_run: bool,
+    verbose: bool,
+    summary: bool,
+    restore: bool,
+    skip_global_dedup: bool,
+    aggressive: bool,
 ) -> None:
     """Clean redundant permissions from project settings files."""
     from dev10x.skills.permission import clean_project_files as mod
@@ -323,6 +342,11 @@ def clean(
     if restore:
         sys.exit(mod._restore(config_path=mod.find_config()))
 
+    # Global-dedup is opt-in (finding #47). It runs only under --aggressive,
+    # and --skip-global-dedup always wins so the safe behavior cannot be
+    # accidentally re-enabled.
+    skip_global_dedup = skip_global_dedup or not aggressive
+
     config_path = mod.find_config()
     click.echo(f"Config: {config_path}")
     config = mod.load_config(config_path)
@@ -407,9 +431,9 @@ def clean(
     if total_global_dedup > 0 and not skip_global_dedup:
         click.echo(
             f"\n⚠  WARNING: {total_global_dedup} rules removed as exact duplicates of global"
-            " rules. Global→project rule inheritance is NOT guaranteed when a project has its"
-            " own settings.local.json (finding #47). Re-run with --skip-global-dedup to"
-            " preserve project-local copies if you see new permission prompts."
+            " rules (--aggressive). Global→project rule inheritance is NOT guaranteed when a"
+            " project has its own settings.local.json (finding #47). If new permission prompts"
+            " appear, recover with `dev10x permission clean --restore`."
         )
 
     if total_secrets > 0:

{dev10x-0.77.0 → dev10x-0.78.0}/src/dev10x/commands/skill.py

@@ -1,6 +1,5 @@
 from __future__ import annotations
 
-import subprocess
 import sys
 from pathlib import Path
 
@@ -23,14 +22,6 @@ def notify() -> None:
     """
 
 
-def _plugin_root() -> Path:
-    """Resolve the plugin root containing the skills/ directory.
-
-    `src/dev10x/commands/skill.py` -> parents[3] = plugin root.
-    """
-    return Path(__file__).resolve().parents[3]
-
-
 @notify.command(name="slack-review-prepare")
 @click.option("--pr", type=int, required=True, help="PR number")
 @click.option("--repo", required=True, help="GitHub repo (owner/name)")
@@ -69,37 +60,36 @@ def slack_send(
     thread_ts: str | None,
     workspace: str | None,
 ) -> None:
-    """Send a Slack message via the plugin's slack-notify.py script.
+    """Send a Slack message via the importable slack_notify module (GH-442).
 
-    Delegates to `skills/slack/slack-notify.py` while exposing a
-    version-stable CLI surface. The underlying script handles token
-    resolution, user-group mention expansion, and bot identity.
+    Delegates to `dev10x.skills.notifications.slack_notify` so the command
+    works when dev10x is installed via ``uvx`` — where ``skills/`` data files
+    are not shipped as part of the wheel and cannot be reached by filesystem
+    traversal from the installed package location.
     """
     if not message and not message_file:
         raise click.UsageError("Provide --message or --message-file.")
 
-    slack_notify = _plugin_root() / "skills" / "slack" / "slack-notify.py"
-    if not slack_notify.exists():
-        click.echo(f"slack-notify.py not found at {slack_notify}", err=True)
-        sys.exit(1)
+    from dev10x.skills.notifications import slack_notify
 
-    cmd: list[str] = [str(slack_notify), "--channel", channel]
-    if message_file is not None:
-        cmd.extend(["--message-file", str(message_file)])
-    if message is not None:
-        cmd.extend(["--message", message])
-    if thread_ts is not None:
-        cmd.extend(["--thread-ts", thread_ts])
     if workspace is not None:
-        cmd.extend(["--workspace", workspace])
-
-    result = subprocess.run(cmd, capture_output=True, text=True, timeout=30)
-    if result.stdout:
-        click.echo(result.stdout.rstrip())
-    if result.returncode != 0:
-        if result.stderr:
-            click.echo(result.stderr.rstrip(), err=True)
-        sys.exit(result.returncode)
+        slack_notify.set_workspace(workspace)
+
+    msg: str
+    if message_file is not None:
+        msg = message_file.read_text()
+    else:
+        msg = message  # type: ignore[assignment]  # validated above
+
+    ts = slack_notify.send_slack_message(
+        channel=channel,
+        message=msg,
+        thread_ts=thread_ts,
+    )
+    if ts:
+        click.echo(f"✅ Slack message sent successfully! ts={ts}")
+    else:
+        sys.exit(1)
 
 
 @skill.command(name="count-instructions")

{dev10x-0.77.0 → dev10x-0.78.0}/src/dev10x/domain/friction_level.py

@@ -54,5 +54,48 @@ class FrictionLevel(StrEnum):
                 return member
         return cls.default()
 
+    def pending_decisions_guidance(self) -> str:
+        """Return the session-resume instruction for pending-decision state.
+
+        Called by ``DecisionGuidanceRule`` when the plan has one or more
+        unresolved decision tasks.  Each member encodes its own pacing
+        rule, eliminating the if/elif dispatch from the rule body.
+
+        Returns:
+            A non-empty instruction string for every recognised member.
+        """
+        if self is FrictionLevel.ADAPTIVE:
+            return (
+                "Session resumed with pending decisions. Friction level is adaptive — "
+                "auto-select recommended options for all queued decisions and continue "
+                "advancing through the task list without calling AskUserQuestion."
+            )
+        return (
+            "Session resumed with pending decisions. "
+            "Re-ask each pending decision using AskUserQuestion — "
+            "invoke Dev10x:ask before advancing."
+        )
+
+    def fallback_guidance(self, *, fallback: str) -> str:
+        """Return a friction-level-specific fallback clause for block messages.
+
+        In GUIDED mode the agent is shown a concrete fallback path (skill
+        guardrails to apply manually, or an MCP-unavailability escape).
+        In STRICT and ADAPTIVE modes the block is unadorned — the fallback
+        text is omitted so the message stays concise.
+
+        Args:
+            fallback: The fallback snippet to surface in GUIDED mode.
+                      May be an MCP-server fallback description, a manual-
+                      guardrail list, or any other escape-hatch hint.
+
+        Returns:
+            The fallback clause (including a leading newline) when GUIDED,
+            or an empty string for other levels.
+        """
+        if self is FrictionLevel.GUIDED:
+            return fallback
+        return ""
+
 
 __all__ = ["FrictionLevel"]

{dev10x-0.77.0 → dev10x-0.78.0}/src/dev10x/domain/install_version.py

@@ -85,6 +85,55 @@ def write_applied_version(
     return path
 
 
+def read_running_hook_version(*, plugin_root: Path | None = None) -> str | None:
+    """Return the version that is *currently executing* inside this session.
+
+    ``$CLAUDE_PLUGIN_ROOT`` is set by Claude Code to the plugin directory
+    that was resolved when the session started. Hooks loaded from that
+    directory run for the entire session lifetime — an on-disk upgrade
+    does not swap them out. Reading the version from this directory gives
+    us the *running* version, which may lag behind the latest installed
+    version when the user ran ``claude plugin update`` mid-session.
+
+    Returns ``None`` when the running root is unknown (e.g., local
+    ``--plugin-dir`` dev runs that do not carry a versioned cache path).
+    """
+    root = plugin_root or _default_plugin_root()
+    return read_plugin_version(plugin_root=root)
+
+
+def read_latest_installed_version(
+    *,
+    cache_dir: Path | None = None,
+    publisher: str = "Dev10x-Guru",
+    plugin_slug: str = "dev10x-claude",
+) -> str | None:
+    """Return the highest-version directory under the plugin cache.
+
+    Scans ``~/.claude/plugins/cache/<publisher>/<plugin_slug>/`` for
+    semver-named subdirectories and returns the latest. Returns ``None``
+    when the directory is absent or empty (e.g., ``--plugin-dir`` installs
+    that bypass the cache).
+    """
+    from dev10x.domain.claude_paths import ClaudeDir
+
+    root = cache_dir or (ClaudeDir.plugins_cache_dir() / publisher / plugin_slug)
+    if not root.is_dir():
+        return None
+    versions = sorted(
+        (d for d in root.iterdir() if d.is_dir()),
+        key=lambda p: _version_tuple(p.name),
+    )
+    return versions[-1].name if versions else None
+
+
+def _version_tuple(version: str) -> tuple[int, ...]:
+    try:
+        return tuple(int(x) for x in version.split("."))
+    except ValueError:
+        return (0,)
+
+
 def record_upgrade(*, version: str | None = None) -> Result[dict[str, Any]]:
     """Record the currently-installed plugin version as applied.
 
@@ -169,7 +218,9 @@ __all__ = [
     "InstallState",
     "install_state",
     "read_applied_version",
+    "read_latest_installed_version",
     "read_plugin_version",
+    "read_running_hook_version",
     "record_upgrade",
     "write_applied_version",
 ]

{dev10x-0.77.0 → dev10x-0.78.0}/src/dev10x/domain/session_rules.py

@@ -69,26 +69,12 @@ class DecisionGuidanceRule(PolicyRule[str]):
             raise UnknownFrictionLevelError(f"Unknown friction level: {self.friction_level!r}")
 
         summary = PlanSummary.from_dict(data=self.plan)
-        decisions = summary.pending_decisions
-        if not decisions:
-            has_remaining = bool(summary.pending_tasks)
-            if has_remaining:
+        if not summary.pending_decisions:
+            if summary.pending_tasks:
                 return "Session resumed with tasks remaining. Auto-advance through the task list."
             return ""
 
-        if self.friction_level is FrictionLevel.ADAPTIVE:
-            return (
-                "Session resumed with pending decisions. Friction level is adaptive — "
-                "auto-select recommended options for all queued decisions and continue "
-                "advancing through the task list without calling AskUserQuestion."
-            )
-        if self.friction_level in (FrictionLevel.STRICT, FrictionLevel.GUIDED):
-            return (
-                "Session resumed with pending decisions. "
-                "Re-ask each pending decision using AskUserQuestion — "
-                "invoke Dev10x:ask before advancing."
-            )
-        raise UnknownFrictionLevelError(f"Unhandled friction level: {self.friction_level!r}")
+        return self.friction_level.pending_decisions_guidance()
 
 
 __all__ = [

{dev10x-0.77.0 → dev10x-0.78.0}/src/dev10x/hooks/edit_validator.py

@@ -1,7 +1,14 @@
-"""Edit/Write tool validator — blocks sensitive file writes.
+"""Edit/Write tool validator — blocks sensitive file writes and spec drift.
 
-Loads rules from command-skill-map.yaml where matcher="Edit|Write",
-delegates evaluation to RuleEngine. First block wins.
+Two validation passes:
+
+1. YAML-rule pass: loads rules from command-skill-map.yaml where
+   matcher="Edit|Write", delegates evaluation to RuleEngine.
+   First block wins.
+
+2. Python-validator pass: runs active Edit|Write validators from the
+   shared ValidatorRegistry (e.g. SpecDriftValidator / DX015).
+   Only validators whose ``should_run()`` returns True participate.
 """
 
 from __future__ import annotations
@@ -10,7 +17,7 @@ import sys
 from pathlib import Path
 from typing import TYPE_CHECKING, Any
 
-from dev10x.domain.events.hook_input import HookResult
+from dev10x.domain.events.hook_input import HookInput, HookResult
 
 if TYPE_CHECKING:
     from dev10x.domain.rules.rule_engine import RuleEngine
@@ -26,6 +33,28 @@ def _build_engine(*, yaml_path: Path) -> RuleEngine:
     return RuleEngine.from_config(config=config)
 
 
+def _run_python_validators(*, data: dict[str, Any], debug: bool = False) -> None:
+    """Run Python validators that handle Edit|Write tool calls.
+
+    Mirrors the dispatch pattern in ``commands/hook.py:_validate_bash_body``
+    but filters to validators whose ``should_run`` returns True for the
+    given Edit|Write input.  YAML-rule blocks have already been handled
+    before this function is called.
+    """
+    from dev10x.validators import get_chain
+
+    inp = HookInput.from_dict(data=data)
+    for result in get_chain().run(inp=inp):
+        if debug:
+            import sys as _sys
+
+            print(
+                f"[DEBUG] Python validator blocked: {result}",
+                file=_sys.stderr,
+            )
+        result.emit()
+
+
 def validate_edit_write(
     *,
     data: dict[str, Any],
@@ -55,4 +84,6 @@ def validate_edit_write(
             )
         HookResult(message=match.message).emit()
 
+    _run_python_validators(data=data, debug=debug)
+
     sys.exit(0)

{dev10x-0.77.0 → dev10x-0.78.0}/src/dev10x/hooks/session.py

@@ -26,6 +26,7 @@ from dev10x.domain.session_document import (
 from dev10x.hooks.session_dispatch import (
     build_autonomy_reassurance_context,  # noqa: F401 — re-exported via __all__
     build_guidance_context,  # noqa: F401 — re-exported via __all__
+    build_hook_version_drift_context,  # noqa: F401 — re-exported via __all__
     build_install_check_context,  # noqa: F401 — re-exported via __all__
     build_reload_context,  # noqa: F401 — re-exported via __all__
     context_compact,  # noqa: F401 — re-exported via __all__
@@ -73,6 +74,7 @@ def _format_decision_guidance(*, plan, friction_level):
 __all__ = [
     "build_autonomy_reassurance_context",
     "build_guidance_context",
+    "build_hook_version_drift_context",
     "build_install_check_context",
     "build_reload_context",
     "context_compact",

{dev10x-0.77.0 → dev10x-0.78.0}/src/dev10x/hooks/session_dispatch.py

@@ -139,6 +139,44 @@ def build_install_check_context() -> str:
     return ""
 
 
+def build_hook_version_drift_context() -> str:
+    """Warn when the running-hook version lags the latest installed version.
+
+    Claude Code loads hooks once at session start from ``$CLAUDE_PLUGIN_ROOT``.
+    An on-disk ``claude plugin update`` installs a newer version but does NOT
+    swap the running hooks — the session continues executing the pre-upgrade
+    hooks until it restarts. This means shipped friction fixes, new validators,
+    and catalog improvements are dormant in long-running sessions.
+
+    This check is **distinct** from :func:`build_install_check_context`, which
+    compares the installed version against the last-applied upgrade-cleanup
+    version. That check detects settings staleness; this one detects
+    running-hook staleness — they can diverge when settings were refreshed
+    but the session was not restarted.
+
+    Returns an empty string when no drift is detected or when either version
+    cannot be determined (``--plugin-dir`` dev installs, new users, etc.).
+    """
+    from dev10x.domain.install_version import (
+        read_latest_installed_version,
+        read_running_hook_version,
+    )
+
+    running = read_running_hook_version()
+    if running is None:
+        return ""
+    latest = read_latest_installed_version()
+    if latest is None:
+        return ""
+    if running == latest:
+        return ""
+    return (
+        f"Dev10x hooks running v{running} but v{latest} is installed on disk.\n"
+        "Restart this session (or run `/Dev10x:upgrade-cleanup`) to activate "
+        "shipped friction fixes, validators, and catalog improvements."
+    )
+
+
 def session_install_check() -> None:
     """Emit install-state guidance as additionalContext (SessionStart hook)."""
     content = build_install_check_context()
@@ -233,6 +271,7 @@ def session_goodbye(data: dict | None = None) -> None:
 
 
 __all__ = [
+    "build_hook_version_drift_context",
     "build_install_check_context",
     "build_reload_context",
     "build_autonomy_reassurance_context",

dev10x-0.78.0/src/dev10x/mcp/_app.py

@@ -0,0 +1,76 @@
+"""Shared FastMCP application instance for the Dev10x CLI server.
+
+Split out of server_cli.py (GH-243/A6) so per-domain tool modules
+register against one server without a circular import.
+
+GH-341: A lifespan context manager starts the knowledge-resource file
+watcher and wires it to the active MCP session so that
+``notifications/resources/list_changed`` and
+``notifications/resources/updated`` are emitted to clients whenever the
+underlying files change.
+
+GH-344: The same lifespan also creates a :class:`ClientRootsManager`
+that fetches and caches the client-declared directory roots via
+``roots/list`` on session initialisation and refreshes the cache on
+``notifications/roots/list_changed``.  The roots are used to scope
+CWD/worktree operations, complementing the GH-979 effective-CWD
+discipline.
+"""
+
+from __future__ import annotations
+
+import asyncio
+import logging
+from collections.abc import AsyncIterator
+from contextlib import asynccontextmanager
+
+from mcp.server.fastmcp import FastMCP
+
+from dev10x.mcp.resource_watcher import KnowledgeResourceWatcher, wire_watcher_to_server
+from dev10x.mcp.roots_manager import ClientRootsManager, wire_roots_to_server
+from dev10x.subprocess_utils import get_plugin_root
+
+log = logging.getLogger(__name__)
+
+
+@asynccontextmanager
+async def _server_lifespan(app: FastMCP) -> AsyncIterator[None]:
+    """Lifespan that wires the knowledge-resource watcher and roots manager.
+
+    On server start:
+
+    1. Creates a :class:`~dev10x.mcp.resource_watcher.KnowledgeResourceWatcher`
+       rooted at the plugin install directory and registers its
+       ``InitializedNotification`` handler (GH-341).
+    2. Creates a :class:`~dev10x.mcp.roots_manager.ClientRootsManager` and
+       registers its ``InitializedNotification`` handler (chained after the
+       watcher's) plus a ``RootsListChangedNotification`` handler (GH-344).
+    3. Starts the resource-watcher poll loop as a background asyncio task.
+
+    On server shutdown (lifespan exit) the background task is cancelled.
+    """
+    plugin_root = get_plugin_root()
+    watcher = KnowledgeResourceWatcher(plugin_root=plugin_root)
+
+    # GH-341: resource watcher registers the first InitializedNotification handler.
+    wire_watcher_to_server(server=app._mcp_server, watcher=watcher)
+
+    # GH-344: roots manager chains its handler after the watcher's.
+    roots_manager = ClientRootsManager()
+    wire_roots_to_server(server=app._mcp_server, manager=roots_manager)
+
+    task = asyncio.create_task(watcher.run(), name="dev10x-resource-watcher")
+    log.debug("Resource watcher task started for root: %s", plugin_root)
+
+    try:
+        yield
+    finally:
+        task.cancel()
+        try:
+            await task
+        except asyncio.CancelledError:
+            pass
+        log.debug("Resource watcher task stopped")
+
+
+server = FastMCP(name="Dev10x-cli", lifespan=_server_lifespan)