claude-mpm 5.4.48__py3-none-any.whl → 5.6.34__py3-none-any.whl

claude_mpm/hooks/claude_hooks/event_handlers.py

@@ -3,16 +3,30 @@
 
 This module provides individual event handlers for different types of
 Claude Code hook events.
+
+Supports Dependency Injection:
+- Optional services can be passed via constructor
+- Lazy loading fallback for services not provided
+- Eliminates runtime imports inside methods
 """
 
+import asyncio
 import os
 import re
-import subprocess
-import sys
+import subprocess  # nosec B404 - subprocess used for safe claude CLI version checking only
 import uuid
 from datetime import datetime, timezone
 from pathlib import Path
-from typing import Optional
+from typing import Any, Callable, Optional
+
+# Import _log helper to avoid stderr writes (which cause hook errors)
+try:
+    from .hook_handler import _log
+except ImportError:
+    # Fallback for direct execution
+    def _log(message: str) -> None:
+        """Fallback logger when hook_handler not available."""
+
 
 # Import tool analysis with fallback for direct execution
 try:
@@ -34,8 +48,15 @@ except ImportError:
         extract_tool_results,
     )
 
-# Debug mode
-DEBUG = os.environ.get("CLAUDE_MPM_HOOK_DEBUG", "true").lower() != "false"
+# Import correlation manager with fallback for direct execution
+# WHY at top level: Runtime relative imports fail with "no known parent package" error
+try:
+    from .correlation_manager import CorrelationManager
+except ImportError:
+    from correlation_manager import CorrelationManager
+
+# Debug mode - MUST match hook_handler.py default (false) to prevent stderr writes
+DEBUG = os.environ.get("CLAUDE_MPM_HOOK_DEBUG", "false").lower() == "true"
 
 # Import constants for configuration
 try:
@@ -46,13 +67,186 @@ except ImportError:
         QUICK_TIMEOUT = 2.0
 
 
+# ============================================================================
+# Optional Dependencies - loaded once at module level for DI
+# ============================================================================
+
+# Log manager (for agent prompt logging)
+_log_manager: Optional[Any] = None
+_log_manager_loaded = False
+
+
+def _get_log_manager() -> Optional[Any]:
+    """Get log manager with lazy loading."""
+    global _log_manager, _log_manager_loaded
+    if not _log_manager_loaded:
+        try:
+            from claude_mpm.core.log_manager import get_log_manager
+
+            _log_manager = get_log_manager()
+        except ImportError:
+            _log_manager = None
+        _log_manager_loaded = True
+    return _log_manager
+
+
+# Config service (for autotodos configuration)
+_config: Optional[Any] = None
+_config_loaded = False
+
+
+def _get_config() -> Optional[Any]:
+    """Get Config with lazy loading."""
+    global _config, _config_loaded
+    if not _config_loaded:
+        try:
+            from claude_mpm.core.config import Config
+
+            _config = Config()
+        except ImportError:
+            _config = None
+        _config_loaded = True
+    return _config
+
+
+# Autotodos function (for pending todos injection)
+_get_pending_todos_fn: Optional[Callable] = None
+_get_pending_todos_loaded = False
+
+
+def _get_pending_todos_func() -> Optional[Callable]:
+    """Get get_pending_todos function with lazy loading."""
+    global _get_pending_todos_fn, _get_pending_todos_loaded
+    if not _get_pending_todos_loaded:
+        try:
+            from claude_mpm.cli.commands.autotodos import get_pending_todos
+
+            _get_pending_todos_fn = get_pending_todos
+        except ImportError:
+            _get_pending_todos_fn = None
+        _get_pending_todos_loaded = True
+    return _get_pending_todos_fn
+
+
+# Delegation detector (for anti-pattern detection)
+_delegation_detector: Optional[Any] = None
+_delegation_detector_loaded = False
+
+
+def _get_delegation_detector_service() -> Optional[Any]:
+    """Get delegation detector with lazy loading."""
+    global _delegation_detector, _delegation_detector_loaded
+    if not _delegation_detector_loaded:
+        try:
+            from claude_mpm.services.delegation_detector import get_delegation_detector
+
+            _delegation_detector = get_delegation_detector()
+        except ImportError:
+            _delegation_detector = None
+        _delegation_detector_loaded = True
+    return _delegation_detector
+
+
+# Event log (for PM violation logging)
+_event_log: Optional[Any] = None
+_event_log_loaded = False
+
+
+def _get_event_log_service() -> Optional[Any]:
+    """Get event log with lazy loading."""
+    global _event_log, _event_log_loaded
+    if not _event_log_loaded:
+        try:
+            from claude_mpm.services.event_log import get_event_log
+
+            _event_log = get_event_log()
+        except ImportError:
+            _event_log = None
+        _event_log_loaded = True
+    return _event_log
+
+
 class EventHandlers:
-    """Collection of event handlers for different Claude Code hook events."""
+    """Collection of event handlers for different Claude Code hook events.
+
+    Supports dependency injection for optional services:
+    - log_manager: For agent prompt logging
+    - config: For autotodos configuration
+    - delegation_detector: For anti-pattern detection
+    - event_log: For PM violation logging
 
-    def __init__(self, hook_handler):
-        """Initialize with reference to the main hook handler."""
+    If services are not provided, they are loaded lazily on first use.
+    """
+
+    def __init__(
+        self,
+        hook_handler,
+        *,
+        log_manager: Optional[Any] = None,
+        config: Optional[Any] = None,
+        delegation_detector: Optional[Any] = None,
+        event_log: Optional[Any] = None,
+        get_pending_todos_fn: Optional[Callable] = None,
+    ):
+        """Initialize with reference to the main hook handler and optional services.
+
+        Args:
+            hook_handler: The main ClaudeHookHandler instance
+            log_manager: Optional LogManager for agent prompt logging
+            config: Optional Config for autotodos configuration
+            delegation_detector: Optional DelegationDetector for anti-pattern detection
+            event_log: Optional EventLog for PM violation logging
+            get_pending_todos_fn: Optional function to get pending todos
+        """
         self.hook_handler = hook_handler
 
+        # Store injected services (None means use lazy loading)
+        self._log_manager = log_manager
+        self._config = config
+        self._delegation_detector = delegation_detector
+        self._event_log = event_log
+        self._get_pending_todos_fn = get_pending_todos_fn
+
+    @property
+    def log_manager(self) -> Optional[Any]:
+        """Get log manager (injected or lazy loaded)."""
+        if self._log_manager is not None:
+            return self._log_manager
+        return _get_log_manager()
+
+    @property
+    def config(self) -> Optional[Any]:
+        """Get config (injected or lazy loaded)."""
+        if self._config is not None:
+            return self._config
+        return _get_config()
+
+    @property
+    def delegation_detector(self) -> Optional[Any]:
+        """Get delegation detector (injected or lazy loaded)."""
+        if self._delegation_detector is not None:
+            return self._delegation_detector
+        return _get_delegation_detector_service()
+
+    @property
+    def event_log(self) -> Optional[Any]:
+        """Get event log (injected or lazy loaded)."""
+        if self._event_log is not None:
+            return self._event_log
+        return _get_event_log_service()
+
+    def get_pending_todos(
+        self, max_todos: int = 10, working_dir: Optional[Path] = None
+    ) -> list:
+        """Get pending todos (using injected function or lazy loaded)."""
+        fn = self._get_pending_todos_fn or _get_pending_todos_func()
+        if fn is None:
+            return []
+        try:
+            return fn(max_todos=max_todos, working_dir=working_dir)
+        except Exception:
+            return []
+
     def handle_user_prompt_fast(self, event):
         """Handle user prompt with comprehensive data capture.
 
@@ -111,14 +305,22 @@ class EventHandlers:
                         "working_directory": working_dir,
                     }
                     if DEBUG:
-                        print(
-                            f"Stored prompt for comprehensive tracking: session {session_id[:8]}...",
-                            file=sys.stderr,
+                        _log(
+                            f"Stored prompt for comprehensive tracking: session {session_id[:8]}..."
                         )
-        except Exception:
+        except Exception:  # nosec B110
             # Response tracking is optional - silently continue if it fails
             pass
 
+        # Record user message for auto-pause if active
+        auto_pause = getattr(self.hook_handler, "auto_pause_handler", None)
+        if auto_pause and auto_pause.is_pause_active():
+            try:
+                auto_pause.on_user_message(prompt)
+            except Exception as e:
+                if DEBUG:
+                    _log(f"Auto-pause user message recording error: {e}")
+
         # Emit normalized event (namespace no longer needed with normalized events)
         self.hook_handler._emit_socketio_event("", "user_prompt", prompt_data)
 
@@ -133,11 +335,8 @@ class EventHandlers:
         # Enhanced debug logging for session correlation
         session_id = event.get("session_id", "")
         if DEBUG:
-            print(
-                f"  - session_id: {session_id[:16] if session_id else 'None'}...",
-                file=sys.stderr,
-            )
-            print(f"  - event keys: {list(event.keys())}", file=sys.stderr)
+            _log(f"  - session_id: {session_id[:16] if session_id else 'None'}...")
+            _log(f"  - event keys: {list(event.keys())}")
 
         tool_name = event.get("tool_name", "")
         tool_input = event.get("tool_input", {})
@@ -176,21 +375,43 @@ class EventHandlers:
 
         # Store tool_call_id using CorrelationManager for cross-process retrieval
         if session_id:
-            from .correlation_manager import CorrelationManager
-
             CorrelationManager.store(session_id, tool_call_id, tool_name)
             if DEBUG:
-                print(
-                    f"  - Generated tool_call_id: {tool_call_id[:8]}... for session {session_id[:8]}...",
-                    file=sys.stderr,
+                _log(
+                    f"  - Generated tool_call_id: {tool_call_id[:8]}... for session {session_id[:8]}..."
                 )
 
         # Add delegation-specific data if this is a Task tool
         if tool_name == "Task" and isinstance(tool_input, dict):
             self._handle_task_delegation(tool_input, pre_tool_data, session_id)
 
+        # Record tool call for auto-pause if active
+        auto_pause = getattr(self.hook_handler, "auto_pause_handler", None)
+        if auto_pause and auto_pause.is_pause_active():
+            try:
+                auto_pause.on_tool_call(tool_name, tool_input)
+            except Exception as e:
+                if DEBUG:
+                    _log(f"Auto-pause tool recording error: {e}")
+
         self.hook_handler._emit_socketio_event("", "pre_tool", pre_tool_data)
 
+        # Handle TodoWrite specially - emit dedicated todo_updated event
+        # WHY: Frontend expects todo_updated events for dashboard display
+        # The broadcaster.todo_updated() method exists but was never called
+        if tool_name == "TodoWrite" and tool_params.get("todos"):
+            todo_data = {
+                "todos": tool_params["todos"],
+                "total_count": len(tool_params["todos"]),
+                "session_id": session_id,
+                "timestamp": timestamp,
+            }
+            self.hook_handler._emit_socketio_event("", "todo_updated", todo_data)
+            if DEBUG:
+                _log(
+                    f"  - Emitted todo_updated event with {len(tool_params['todos'])} todos for session {session_id[:8]}..."
+                )
+
     def _handle_task_delegation(
         self, tool_input: dict, pre_tool_data: dict, session_id: str
     ):
@@ -229,12 +450,9 @@ class EventHandlers:
 
         # Track this delegation for SubagentStop correlation and response tracking
         if DEBUG:
-            print(
-                f"  - session_id: {session_id[:16] if session_id else 'None'}...",
-                file=sys.stderr,
-            )
-            print(f"  - agent_type: {agent_type}", file=sys.stderr)
-            print(f"  - raw_agent_type: {raw_agent_type}", file=sys.stderr)
+            _log(f"  - session_id: {session_id[:16] if session_id else 'None'}...")
+            _log(f"  - agent_type: {agent_type}")
+            _log(f"  - raw_agent_type: {raw_agent_type}")
 
         if session_id and agent_type != "unknown":
             # Prepare request data for response tracking correlation
@@ -246,24 +464,17 @@ class EventHandlers:
             self.hook_handler._track_delegation(session_id, agent_type, request_data)
 
             if DEBUG:
-                print("  - Delegation tracked successfully", file=sys.stderr)
-                print(
-                    f"  - Request data keys: {list(request_data.keys())}",
-                    file=sys.stderr,
-                )
+                _log("  - Delegation tracked successfully")
+                _log(f"  - Request data keys: {list(request_data.keys())}")
                 delegation_requests = getattr(
                     self.hook_handler, "delegation_requests", {}
                 )
-                print(
-                    f"  - delegation_requests size: {len(delegation_requests)}",
-                    file=sys.stderr,
-                )
+                _log(f"  - delegation_requests size: {len(delegation_requests)}")
 
             # Log important delegations for debugging
             if DEBUG or agent_type in ["research", "engineer", "qa", "documentation"]:
-                print(
-                    f"Hook handler: Task delegation started - agent: '{agent_type}', session: '{session_id}'",
-                    file=sys.stderr,
+                _log(
+                    f"Hook handler: Task delegation started - agent: '{agent_type}', session: '{session_id}'"
                 )
 
         # Trigger memory pre-delegation hook
@@ -271,7 +482,7 @@ class EventHandlers:
             mhm = getattr(self.hook_handler, "memory_hook_manager", None)
             if mhm and hasattr(mhm, "trigger_pre_delegation_hook"):
                 mhm.trigger_pre_delegation_hook(agent_type, tool_input, session_id)
-        except Exception:
+        except Exception:  # nosec B110
             # Memory hooks are optional
             pass
 
@@ -290,53 +501,50 @@ class EventHandlers:
         )
 
         # Log agent prompt if LogManager is available
-        try:
-            from claude_mpm.core.log_manager import get_log_manager
-
-            log_manager = get_log_manager()
-
-            # Prepare prompt content
-            prompt_content = tool_input.get("prompt", "")
-            if not prompt_content:
-                prompt_content = tool_input.get("description", "")
-
-            if prompt_content:
-                import asyncio
-
-                # Prepare metadata
-                metadata = {
-                    "agent_type": agent_type,
-                    "agent_id": f"{agent_type}_{session_id}",
-                    "session_id": session_id,
-                    "delegation_context": {
-                        "description": tool_input.get("description", ""),
-                        "timestamp": datetime.now(timezone.utc).isoformat(),
-                    },
-                }
+        # Uses injected log_manager or lazy-loaded module-level instance
+        log_manager = self.log_manager
+        if log_manager is not None:
+            try:
+                # Prepare prompt content
+                prompt_content = tool_input.get("prompt", "")
+                if not prompt_content:
+                    prompt_content = tool_input.get("description", "")
+
+                if prompt_content:
+                    # Prepare metadata
+                    metadata = {
+                        "agent_type": agent_type,
+                        "agent_id": f"{agent_type}_{session_id}",
+                        "session_id": session_id,
+                        "delegation_context": {
+                            "description": tool_input.get("description", ""),
+                            "timestamp": datetime.now(timezone.utc).isoformat(),
+                        },
+                    }
 
-                # Log the agent prompt asynchronously
-                try:
-                    loop = asyncio.get_running_loop()
-                    _task = asyncio.create_task(
-                        log_manager.log_prompt(
-                            f"agent_{agent_type}", prompt_content, metadata
-                        )
-                    )  # Fire-and-forget logging (ephemeral hook process)
-                except RuntimeError:
-                    # No running loop, create one
-                    loop = asyncio.new_event_loop()
-                    asyncio.set_event_loop(loop)
-                    loop.run_until_complete(
-                        log_manager.log_prompt(
-                            f"agent_{agent_type}", prompt_content, metadata
+                    # Log the agent prompt asynchronously
+                    try:
+                        loop = asyncio.get_running_loop()
+                        _task = asyncio.create_task(
+                            log_manager.log_prompt(
+                                f"agent_{agent_type}", prompt_content, metadata
+                            )
+                        )  # Fire-and-forget logging (ephemeral hook process)
+                    except RuntimeError:
+                        # No running loop, create one
+                        loop = asyncio.new_event_loop()
+                        asyncio.set_event_loop(loop)
+                        loop.run_until_complete(
+                            log_manager.log_prompt(
+                                f"agent_{agent_type}", prompt_content, metadata
+                            )
                         )
-                    )
 
+                    if DEBUG:
+                        _log(f"  - Agent prompt logged for {agent_type}")
+            except Exception as e:
                 if DEBUG:
-                    print(f"  - Agent prompt logged for {agent_type}", file=sys.stderr)
-        except Exception as e:
-            if DEBUG:
-                print(f"  - Could not log agent prompt: {e}", file=sys.stderr)
+                    _log(f"  - Could not log agent prompt: {e}")
 
     def _get_git_branch(self, working_dir: Optional[str] = None) -> str:
         """Get git branch for the given directory with caching."""
@@ -364,7 +572,7 @@ class EventHandlers:
             os.chdir(working_dir)
 
             # Run git command to get current branch
-            result = subprocess.run(
+            result = subprocess.run(  # nosec B603 B607
                 ["git", "branch", "--show-current"],
                 capture_output=True,
                 text=True,
@@ -420,13 +628,10 @@ class EventHandlers:
         git_branch = self._get_git_branch(working_dir) if working_dir else "Unknown"
 
         # Retrieve tool_call_id using CorrelationManager for cross-process correlation
-        from .correlation_manager import CorrelationManager
-
         tool_call_id = CorrelationManager.retrieve(session_id) if session_id else None
         if DEBUG and tool_call_id:
-            print(
-                f"  - Retrieved tool_call_id: {tool_call_id[:8]}... for session {session_id[:8]}...",
-                file=sys.stderr,
+            _log(
+                f"  - Retrieved tool_call_id: {tool_call_id[:8]}... for session {session_id[:8]}..."
             )
 
         post_tool_data = {
@@ -474,7 +679,7 @@ class EventHandlers:
                 mhm = getattr(self.hook_handler, "memory_hook_manager", None)
                 if mhm and hasattr(mhm, "trigger_post_delegation_hook"):
                     mhm.trigger_post_delegation_hook(agent_type, event, session_id)
-            except Exception:
+            except Exception:  # nosec B110
                 # Memory hooks are optional
                 pass
 
@@ -488,7 +693,7 @@ class EventHandlers:
                     rtm.track_agent_response(
                         session_id, agent_type, event, delegation_requests
                     )
-            except Exception:
+            except Exception:  # nosec B110
                 # Response tracking is optional
                 pass
 
@@ -550,13 +755,60 @@ class EventHandlers:
         if DEBUG:
             self._log_stop_event_debug(event, session_id, metadata)
 
+        # Auto-pause integration (independent of response tracking)
+        # WHY HERE: Auto-pause must work even when response_tracking is disabled
+        # Extract usage data directly from event and trigger auto-pause if thresholds crossed
+        if "usage" in event:
+            auto_pause = getattr(self.hook_handler, "auto_pause_handler", None)
+            if auto_pause:
+                try:
+                    usage_data = event["usage"]
+                    metadata["usage"] = {
+                        "input_tokens": usage_data.get("input_tokens", 0),
+                        "output_tokens": usage_data.get("output_tokens", 0),
+                        "cache_creation_input_tokens": usage_data.get(
+                            "cache_creation_input_tokens", 0
+                        ),
+                        "cache_read_input_tokens": usage_data.get(
+                            "cache_read_input_tokens", 0
+                        ),
+                    }
+
+                    threshold_crossed = auto_pause.on_usage_update(metadata["usage"])
+                    if threshold_crossed:
+                        warning = auto_pause.emit_threshold_warning(threshold_crossed)
+                        # CRITICAL: Never write to stderr unconditionally - causes hook errors
+                        # Use _log() instead which only writes to file if DEBUG=true
+                        _log(f"⚠️  Auto-pause threshold crossed: {warning}")
+
+                        if DEBUG:
+                            _log(
+                                f"  - Auto-pause threshold crossed: {threshold_crossed}"
+                            )
+                except Exception as e:
+                    if DEBUG:
+                        _log(f"Auto-pause error in handle_stop_fast: {e}")
+
+                # Finalize pause session if active
+                try:
+                    if auto_pause.is_pause_active():
+                        session_file = auto_pause.on_session_end()
+                        if session_file:
+                            if DEBUG:
+                                _log(
+                                    f"✅ Auto-pause session finalized: {session_file.name}"
+                                )
+                except Exception as e:
+                    if DEBUG:
+                        _log(f"❌ Failed to finalize auto-pause session: {e}")
+
         # Track response if enabled
         try:
             rtm = getattr(self.hook_handler, "response_tracking_manager", None)
             if rtm and hasattr(rtm, "track_stop_response"):
                 pending_prompts = getattr(self.hook_handler, "pending_prompts", {})
                 rtm.track_stop_response(event, session_id, metadata, pending_prompts)
-        except Exception:
+        except Exception:  # nosec B110
             # Response tracking is optional
             pass
 
@@ -590,24 +842,15 @@ class EventHandlers:
                 getattr(rtm, "response_tracker", None) is not None if rtm else False
             )
 
-            print(
-                f"  - response_tracking_enabled: {tracking_enabled}",
-                file=sys.stderr,
-            )
-            print(
-                f"  - response_tracker exists: {tracker_exists}",
-                file=sys.stderr,
-            )
-        except Exception:
+            _log(f"  - response_tracking_enabled: {tracking_enabled}")
+            _log(f"  - response_tracker exists: {tracker_exists}")
+        except Exception:  # nosec B110
             # If debug logging fails, just skip it
             pass
 
-        print(
-            f"  - session_id: {session_id[:8] if session_id else 'None'}...",
-            file=sys.stderr,
-        )
-        print(f"  - reason: {metadata['reason']}", file=sys.stderr)
-        print(f"  - stop_type: {metadata['stop_type']}", file=sys.stderr)
+        _log(f"  - session_id: {session_id[:8] if session_id else 'None'}...")
+        _log(f"  - reason: {metadata['reason']}")
+        _log(f"  - stop_type: {metadata['stop_type']}")
 
     def _emit_stop_event(self, event: dict, session_id: str, metadata: dict) -> None:
         """Emit stop event data to Socket.IO."""
@@ -664,15 +907,12 @@ class EventHandlers:
         try:
             # Get the original request data (with fuzzy matching fallback)
             delegation_requests = getattr(self.hook_handler, "delegation_requests", {})
-            request_info = delegation_requests.get(session_id)
+            request_info = delegation_requests.get(session_id)  # nosec B113
 
             # If exact match fails, try partial matching
             if not request_info and session_id:
                 if DEBUG:
-                    print(
-                        f"  - Trying fuzzy match for session {session_id[:16]}...",
-                        file=sys.stderr,
-                    )
+                    _log(f"  - Trying fuzzy match for session {session_id[:16]}...")
                 # Try to find a session that matches the first 8-16 characters
                 for stored_sid in list(delegation_requests.keys()):
                     if (
@@ -685,11 +925,8 @@ class EventHandlers:
                         )
                     ):
                         if DEBUG:
-                            print(
-                                f"  - ✅ Fuzzy match found: {stored_sid[:16]}...",
-                                file=sys.stderr,
-                            )
-                        request_info = delegation_requests.get(stored_sid)
+                            _log(f"  - ✅ Fuzzy match found: {stored_sid[:16]}...")
+                        request_info = delegation_requests.get(stored_sid)  # nosec B113
                         # Update the key to use the current session_id for consistency
                         if request_info:
                             delegation_requests[session_id] = request_info
@@ -757,9 +994,8 @@ class EventHandlers:
                     )
 
                     if file_path and DEBUG:
-                        print(
-                            f"✅ Tracked {agent_type} agent response on SubagentStop: {file_path.name}",
-                            file=sys.stderr,
+                        _log(
+                            f"✅ Tracked {agent_type} agent response on SubagentStop: {file_path.name}"
                         )
 
                 # Clean up the request data
@@ -770,16 +1006,13 @@ class EventHandlers:
                     del delegation_requests[session_id]
 
             elif DEBUG:
-                print(
-                    f"No request data for SubagentStop session {session_id[:8]}..., agent: {agent_type}",
-                    file=sys.stderr,
+                _log(
+                    f"No request data for SubagentStop session {session_id[:8]}..., agent: {agent_type}"
                 )
 
         except Exception as e:
             if DEBUG:
-                print(
-                    f"❌ Failed to track response on SubagentStop: {e}", file=sys.stderr
-                )
+                _log(f"❌ Failed to track response on SubagentStop: {e}")
 
     def handle_assistant_response(self, event):
         """Handle assistant response events for comprehensive response tracking.
@@ -789,6 +1022,7 @@ class EventHandlers:
         - Captures response content and metadata for analysis
         - Enables tracking of conversation flow and response patterns
         - Essential for comprehensive monitoring of Claude interactions
+        - Scans for delegation anti-patterns and creates autotodos
         """
         # Track the response for logging
         try:
@@ -796,10 +1030,17 @@ class EventHandlers:
             if rtm and hasattr(rtm, "track_assistant_response"):
                 pending_prompts = getattr(self.hook_handler, "pending_prompts", {})
                 rtm.track_assistant_response(event, pending_prompts)
-        except Exception:
+        except Exception:  # nosec B110
             # Response tracking is optional
             pass
 
+        # Scan response for delegation anti-patterns and create autotodos
+        try:
+            self._scan_for_delegation_patterns(event)
+        except Exception as e:  # nosec B110
+            if DEBUG:
+                _log(f"Delegation scanning error: {e}")
+
         # Get working directory and git branch
         working_dir = event.get("cwd", "")
         git_branch = self._get_git_branch(working_dir) if working_dir else "Unknown"
@@ -847,11 +1088,25 @@ class EventHandlers:
 
         # Debug logging
         if DEBUG:
-            print(
-                f"Hook handler: Processing AssistantResponse - session: '{session_id}', response_length: {len(response_text)}",
-                file=sys.stderr,
+            _log(
+                f"Hook handler: Processing AssistantResponse - session: '{session_id}', response_length: {len(response_text)}"
             )
 
+        # Record assistant response for auto-pause if active
+        auto_pause = getattr(self.hook_handler, "auto_pause_handler", None)
+        if auto_pause and auto_pause.is_pause_active():
+            try:
+                # Summarize response to first 200 chars
+                summary = (
+                    response_text[:200] + "..."
+                    if len(response_text) > 200
+                    else response_text
+                )
+                auto_pause.on_assistant_response(summary)
+            except Exception as e:
+                if DEBUG:
+                    _log(f"Auto-pause response recording error: {e}")
+
         # Emit normalized event
         self.hook_handler._emit_socketio_event(
             "", "assistant_response", assistant_response_data
@@ -864,6 +1119,7 @@ class EventHandlers:
         - Provides visibility into new conversation sessions
         - Enables tracking of session lifecycle and duration
         - Useful for monitoring concurrent sessions and resource usage
+        - Auto-inject pending autotodos if enabled in config
         """
         session_id = event.get("session_id", "")
         working_dir = event.get("cwd", "")
@@ -877,12 +1133,147 @@ class EventHandlers:
             "hook_event_name": "SessionStart",
         }
 
+        # Auto-inject pending autotodos if enabled
+        # Uses injected config and get_pending_todos or lazy-loaded instances
+        config = self.config
+        if config is not None:
+            try:
+                auto_inject_enabled = config.get(
+                    "autotodos.auto_inject_on_startup", True
+                )
+                max_todos = config.get("autotodos.max_todos_per_session", 10)
+
+                if auto_inject_enabled:
+                    # Pass working directory from event to avoid Path.cwd() issues
+                    working_dir_param = None
+                    if working_dir:
+                        working_dir_param = Path(working_dir)
+
+                    pending_todos = self.get_pending_todos(
+                        max_todos=max_todos, working_dir=working_dir_param
+                    )
+                    if pending_todos:
+                        session_start_data["pending_autotodos"] = pending_todos
+                        session_start_data["autotodos_count"] = len(pending_todos)
+                        _log(
+                            f"  - Auto-injected {len(pending_todos)} pending autotodos"
+                        )
+            except Exception as e:  # nosec B110
+                # Auto-injection is optional - continue if it fails
+                _log(f"  - Failed to auto-inject autotodos: {e}")
+
         # Debug logging
-        if DEBUG:
-            print(
-                f"Hook handler: Processing SessionStart - session: '{session_id}'",
-                file=sys.stderr,
-            )
+        _log(f"Hook handler: Processing SessionStart - session: '{session_id}'")
 
         # Emit normalized event
         self.hook_handler._emit_socketio_event("", "session_start", session_start_data)
+
+    def handle_subagent_start_fast(self, event):
+        """Handle SubagentStart events with proper agent type extraction.
+
+        WHY separate from SessionStart:
+        - SubagentStart contains agent-specific information
+        - Frontend needs agent_type to create distinct agent nodes
+        - Multiple engineers should show as separate nodes in hierarchy
+        - Research agents must appear in the agent hierarchy
+
+        Unlike SessionStart, SubagentStart events contain agent-specific
+        information that must be preserved and emitted to the dashboard.
+        """
+        session_id = event.get("session_id", "")
+
+        # Extract agent type from event - Claude provides this in SubagentStart
+        # Try multiple possible field names for compatibility
+        agent_type = event.get("agent_type") or event.get("subagent_type") or "unknown"
+
+        # Generate unique agent ID combining type and session
+        agent_id = event.get("agent_id", f"{agent_type}_{session_id[:8]}")
+
+        # Get working directory and git branch
+        working_dir = event.get("cwd", "")
+        git_branch = self._get_git_branch(working_dir) if working_dir else "Unknown"
+
+        # Build subagent start data with all required fields
+        subagent_start_data = {
+            "session_id": session_id,
+            "agent_type": agent_type,
+            "agent_id": agent_id,
+            "timestamp": datetime.now(timezone.utc).isoformat(),
+            "hook_event_name": "SubagentStart",  # Preserve correct hook name
+            "working_directory": working_dir,
+            "git_branch": git_branch,
+        }
+
+        # Debug logging
+        if DEBUG:
+            _log(
+                f"Hook handler: SubagentStart - agent_type='{agent_type}', agent_id='{agent_id}', session_id='{session_id[:16]}...'"
+            )
+
+        # Emit to /hook namespace as subagent_start (NOT session_start!)
+        self.hook_handler._emit_socketio_event(
+            "", "subagent_start", subagent_start_data
+        )
+
+    def _scan_for_delegation_patterns(self, event):
+        """Scan assistant response for delegation anti-patterns.
+
+        WHY this is needed:
+        - Detect when PM asks user to do something manually instead of delegating
+        - Flag PM behavior violations for immediate correction
+        - Enforce delegation principle in PM workflow
+        - Help PM recognize delegation opportunities
+
+        This method scans the assistant's response text for patterns like:
+        - "Make sure .env.local is in your .gitignore"
+        - "You'll need to run npm install"
+        - "Please run the tests manually"
+
+        When patterns are detected, PM violations are logged as errors/warnings
+        that should be corrected immediately, NOT as todos to delegate.
+
+        DESIGN DECISION: pm.violation vs autotodo.delegation
+        - Delegation patterns = PM doing something WRONG → pm.violation (error)
+        - Script failures = Something BROKEN → autotodo.error (todo)
+        """
+        # Only scan if delegation detector and event log are available
+        # Uses injected services or lazy-loaded module-level instances
+        detector = self.delegation_detector
+        event_log_service = self.event_log
+
+        if detector is None or event_log_service is None:
+            if DEBUG:
+                _log("Delegation detector or event log not available")
+            return
+
+        response_text = event.get("response", "")
+        if not response_text:
+            return
+
+        # Detect delegation patterns
+        detections = detector.detect_user_delegation(response_text)
+
+        if not detections:
+            return  # No patterns detected
+
+        # Create PM violation events (NOT autotodos)
+        for detection in detections:
+            # Create event log entry as pm.violation
+            event_log_service.append_event(
+                event_type="pm.violation",
+                payload={
+                    "violation_type": "delegation_anti_pattern",
+                    "pattern_type": detection["pattern_type"],
+                    "original_text": detection["original_text"],
+                    "suggested_action": detection["suggested_todo"],
+                    "action": detection["action"],
+                    "session_id": event.get("session_id", ""),
+                    "timestamp": datetime.now(timezone.utc).isoformat(),
+                    "severity": "warning",  # Not critical, but should be fixed
+                    "message": f"PM asked user to do something manually: {detection['original_text'][:80]}...",
+                },
+                status="pending",
+            )
+
+            if DEBUG:
+                _log(f"⚠️  PM violation detected: {detection['original_text'][:60]}...")