claude-mpm 5.4.55__py3-none-any.whl → 5.6.1__py3-none-any.whl

claude_mpm/hooks/claude_hooks/event_handlers.py

@@ -7,7 +7,7 @@ Claude Code hook events.
 
 import os
 import re
-import subprocess
+import subprocess  # nosec B404 - subprocess used for safe claude CLI version checking only
 import sys
 import uuid
 from datetime import datetime, timezone
@@ -115,7 +115,7 @@ class EventHandlers:
                             f"Stored prompt for comprehensive tracking: session {session_id[:8]}...",
                             file=sys.stderr,
                         )
-        except Exception:
+        except Exception:  # nosec B110
             # Response tracking is optional - silently continue if it fails
             pass
 
@@ -189,8 +189,34 @@ class EventHandlers:
         if tool_name == "Task" and isinstance(tool_input, dict):
             self._handle_task_delegation(tool_input, pre_tool_data, session_id)
 
+        # Record tool call for auto-pause if active
+        auto_pause = getattr(self.hook_handler, "auto_pause_handler", None)
+        if auto_pause and auto_pause.is_pause_active():
+            try:
+                auto_pause.on_tool_call(tool_name, tool_input)
+            except Exception as e:
+                if DEBUG:
+                    print(f"Auto-pause tool recording error: {e}", file=sys.stderr)
+
         self.hook_handler._emit_socketio_event("", "pre_tool", pre_tool_data)
 
+        # Handle TodoWrite specially - emit dedicated todo_updated event
+        # WHY: Frontend expects todo_updated events for dashboard display
+        # The broadcaster.todo_updated() method exists but was never called
+        if tool_name == "TodoWrite" and tool_params.get("todos"):
+            todo_data = {
+                "todos": tool_params["todos"],
+                "total_count": len(tool_params["todos"]),
+                "session_id": session_id,
+                "timestamp": timestamp,
+            }
+            self.hook_handler._emit_socketio_event("", "todo_updated", todo_data)
+            if DEBUG:
+                print(
+                    f"  - Emitted todo_updated event with {len(tool_params['todos'])} todos for session {session_id[:8]}...",
+                    file=sys.stderr,
+                )
+
     def _handle_task_delegation(
         self, tool_input: dict, pre_tool_data: dict, session_id: str
     ):
@@ -271,7 +297,7 @@ class EventHandlers:
             mhm = getattr(self.hook_handler, "memory_hook_manager", None)
             if mhm and hasattr(mhm, "trigger_pre_delegation_hook"):
                 mhm.trigger_pre_delegation_hook(agent_type, tool_input, session_id)
-        except Exception:
+        except Exception:  # nosec B110
             # Memory hooks are optional
             pass
 
@@ -364,7 +390,7 @@ class EventHandlers:
             os.chdir(working_dir)
 
             # Run git command to get current branch
-            result = subprocess.run(
+            result = subprocess.run(  # nosec B603 B607
                 ["git", "branch", "--show-current"],
                 capture_output=True,
                 text=True,
@@ -474,7 +500,7 @@ class EventHandlers:
                 mhm = getattr(self.hook_handler, "memory_hook_manager", None)
                 if mhm and hasattr(mhm, "trigger_post_delegation_hook"):
                     mhm.trigger_post_delegation_hook(agent_type, event, session_id)
-            except Exception:
+            except Exception:  # nosec B110
                 # Memory hooks are optional
                 pass
 
@@ -488,7 +514,7 @@ class EventHandlers:
                     rtm.track_agent_response(
                         session_id, agent_type, event, delegation_requests
                     )
-            except Exception:
+            except Exception:  # nosec B110
                 # Response tracking is optional
                 pass
 
@@ -550,13 +576,49 @@ class EventHandlers:
         if DEBUG:
             self._log_stop_event_debug(event, session_id, metadata)
 
+        # Auto-pause integration (independent of response tracking)
+        # WHY HERE: Auto-pause must work even when response_tracking is disabled
+        # Extract usage data directly from event and trigger auto-pause if thresholds crossed
+        if "usage" in event:
+            auto_pause = getattr(self.hook_handler, "auto_pause_handler", None)
+            if auto_pause:
+                try:
+                    usage_data = event["usage"]
+                    metadata["usage"] = {
+                        "input_tokens": usage_data.get("input_tokens", 0),
+                        "output_tokens": usage_data.get("output_tokens", 0),
+                        "cache_creation_input_tokens": usage_data.get(
+                            "cache_creation_input_tokens", 0
+                        ),
+                        "cache_read_input_tokens": usage_data.get(
+                            "cache_read_input_tokens", 0
+                        ),
+                    }
+
+                    threshold_crossed = auto_pause.on_usage_update(metadata["usage"])
+                    if threshold_crossed:
+                        warning = auto_pause.emit_threshold_warning(threshold_crossed)
+                        print(f"\n⚠️  {warning}", file=sys.stderr)
+
+                        if DEBUG:
+                            print(
+                                f"  - Auto-pause threshold crossed: {threshold_crossed}",
+                                file=sys.stderr,
+                            )
+                except Exception as e:
+                    if DEBUG:
+                        print(
+                            f"Auto-pause error in handle_stop_fast: {e}",
+                            file=sys.stderr,
+                        )
+
         # Track response if enabled
         try:
             rtm = getattr(self.hook_handler, "response_tracking_manager", None)
             if rtm and hasattr(rtm, "track_stop_response"):
                 pending_prompts = getattr(self.hook_handler, "pending_prompts", {})
                 rtm.track_stop_response(event, session_id, metadata, pending_prompts)
-        except Exception:
+        except Exception:  # nosec B110
             # Response tracking is optional
             pass
 
@@ -598,7 +660,7 @@ class EventHandlers:
                 f"  - response_tracker exists: {tracker_exists}",
                 file=sys.stderr,
             )
-        except Exception:
+        except Exception:  # nosec B110
             # If debug logging fails, just skip it
             pass
 
@@ -664,7 +726,7 @@ class EventHandlers:
         try:
             # Get the original request data (with fuzzy matching fallback)
             delegation_requests = getattr(self.hook_handler, "delegation_requests", {})
-            request_info = delegation_requests.get(session_id)
+            request_info = delegation_requests.get(session_id)  # nosec B113
 
             # If exact match fails, try partial matching
             if not request_info and session_id:
@@ -689,7 +751,7 @@ class EventHandlers:
                                 f"  - ✅ Fuzzy match found: {stored_sid[:16]}...",
                                 file=sys.stderr,
                             )
-                        request_info = delegation_requests.get(stored_sid)
+                        request_info = delegation_requests.get(stored_sid)  # nosec B113
                         # Update the key to use the current session_id for consistency
                         if request_info:
                             delegation_requests[session_id] = request_info
@@ -789,6 +851,7 @@ class EventHandlers:
         - Captures response content and metadata for analysis
         - Enables tracking of conversation flow and response patterns
         - Essential for comprehensive monitoring of Claude interactions
+        - Scans for delegation anti-patterns and creates autotodos
         """
         # Track the response for logging
         try:
@@ -796,10 +859,17 @@ class EventHandlers:
             if rtm and hasattr(rtm, "track_assistant_response"):
                 pending_prompts = getattr(self.hook_handler, "pending_prompts", {})
                 rtm.track_assistant_response(event, pending_prompts)
-        except Exception:
+        except Exception:  # nosec B110
             # Response tracking is optional
             pass
 
+        # Scan response for delegation anti-patterns and create autotodos
+        try:
+            self._scan_for_delegation_patterns(event)
+        except Exception as e:  # nosec B110
+            if DEBUG:
+                print(f"Delegation scanning error: {e}", file=sys.stderr)
+
         # Get working directory and git branch
         working_dir = event.get("cwd", "")
         git_branch = self._get_git_branch(working_dir) if working_dir else "Unknown"
@@ -852,6 +922,21 @@ class EventHandlers:
                 file=sys.stderr,
             )
 
+        # Record assistant response for auto-pause if active
+        auto_pause = getattr(self.hook_handler, "auto_pause_handler", None)
+        if auto_pause and auto_pause.is_pause_active():
+            try:
+                # Summarize response to first 200 chars
+                summary = (
+                    response_text[:200] + "..."
+                    if len(response_text) > 200
+                    else response_text
+                )
+                auto_pause.on_assistant_response(summary)
+            except Exception as e:
+                if DEBUG:
+                    print(f"Auto-pause response recording error: {e}", file=sys.stderr)
+
         # Emit normalized event
         self.hook_handler._emit_socketio_event(
             "", "assistant_response", assistant_response_data
@@ -864,6 +949,7 @@ class EventHandlers:
         - Provides visibility into new conversation sessions
         - Enables tracking of session lifecycle and duration
         - Useful for monitoring concurrent sessions and resource usage
+        - Auto-inject pending autotodos if enabled in config
         """
         session_id = event.get("session_id", "")
         working_dir = event.get("cwd", "")
@@ -877,6 +963,39 @@ class EventHandlers:
             "hook_event_name": "SessionStart",
         }
 
+        # Auto-inject pending autotodos if enabled
+        try:
+            from pathlib import Path
+
+            from claude_mpm.cli.commands.autotodos import get_pending_todos
+            from claude_mpm.core.config import Config
+
+            config = Config()
+            auto_inject_enabled = config.get("autotodos.auto_inject_on_startup", True)
+            max_todos = config.get("autotodos.max_todos_per_session", 10)
+
+            if auto_inject_enabled:
+                # Pass working directory from event to avoid Path.cwd() issues
+                working_dir_param = None
+                if working_dir:
+                    working_dir_param = Path(working_dir)
+
+                pending_todos = get_pending_todos(
+                    max_todos=max_todos, working_dir=working_dir_param
+                )
+                if pending_todos:
+                    session_start_data["pending_autotodos"] = pending_todos
+                    session_start_data["autotodos_count"] = len(pending_todos)
+                    if DEBUG:
+                        print(
+                            f"  - Auto-injected {len(pending_todos)} pending autotodos",
+                            file=sys.stderr,
+                        )
+        except Exception as e:  # nosec B110
+            # Auto-injection is optional - continue if it fails
+            if DEBUG:
+                print(f"  - Failed to auto-inject autotodos: {e}", file=sys.stderr)
+
         # Debug logging
         if DEBUG:
             print(
@@ -886,3 +1005,123 @@ class EventHandlers:
 
         # Emit normalized event
         self.hook_handler._emit_socketio_event("", "session_start", session_start_data)
+
+    def handle_subagent_start_fast(self, event):
+        """Handle SubagentStart events with proper agent type extraction.
+
+        WHY separate from SessionStart:
+        - SubagentStart contains agent-specific information
+        - Frontend needs agent_type to create distinct agent nodes
+        - Multiple engineers should show as separate nodes in hierarchy
+        - Research agents must appear in the agent hierarchy
+
+        Unlike SessionStart, SubagentStart events contain agent-specific
+        information that must be preserved and emitted to the dashboard.
+        """
+        session_id = event.get("session_id", "")
+
+        # Extract agent type from event - Claude provides this in SubagentStart
+        # Try multiple possible field names for compatibility
+        agent_type = event.get("agent_type") or event.get("subagent_type") or "unknown"
+
+        # Generate unique agent ID combining type and session
+        agent_id = event.get("agent_id", f"{agent_type}_{session_id[:8]}")
+
+        # Get working directory and git branch
+        working_dir = event.get("cwd", "")
+        git_branch = self._get_git_branch(working_dir) if working_dir else "Unknown"
+
+        # Build subagent start data with all required fields
+        subagent_start_data = {
+            "session_id": session_id,
+            "agent_type": agent_type,
+            "agent_id": agent_id,
+            "timestamp": datetime.now(timezone.utc).isoformat(),
+            "hook_event_name": "SubagentStart",  # Preserve correct hook name
+            "working_directory": working_dir,
+            "git_branch": git_branch,
+        }
+
+        # Debug logging
+        if DEBUG:
+            print(
+                f"Hook handler: SubagentStart - agent_type='{agent_type}', "
+                f"agent_id='{agent_id}', session_id='{session_id[:16]}...'",
+                file=sys.stderr,
+            )
+
+        # Emit to /hook namespace as subagent_start (NOT session_start!)
+        self.hook_handler._emit_socketio_event(
+            "", "subagent_start", subagent_start_data
+        )
+
+    def _scan_for_delegation_patterns(self, event):
+        """Scan assistant response for delegation anti-patterns.
+
+        WHY this is needed:
+        - Detect when PM asks user to do something manually instead of delegating
+        - Flag PM behavior violations for immediate correction
+        - Enforce delegation principle in PM workflow
+        - Help PM recognize delegation opportunities
+
+        This method scans the assistant's response text for patterns like:
+        - "Make sure .env.local is in your .gitignore"
+        - "You'll need to run npm install"
+        - "Please run the tests manually"
+
+        When patterns are detected, PM violations are logged as errors/warnings
+        that should be corrected immediately, NOT as todos to delegate.
+
+        DESIGN DECISION: pm.violation vs autotodo.delegation
+        - Delegation patterns = PM doing something WRONG → pm.violation (error)
+        - Script failures = Something BROKEN → autotodo.error (todo)
+        """
+        # Only scan if delegation detector is available
+        try:
+            from claude_mpm.services.delegation_detector import get_delegation_detector
+            from claude_mpm.services.event_log import get_event_log
+        except ImportError:
+            if DEBUG:
+                print("Delegation detector or event log not available", file=sys.stderr)
+            return
+
+        response_text = event.get("response", "")
+        if not response_text:
+            return
+
+        # Get the delegation detector
+        detector = get_delegation_detector()
+
+        # Detect delegation patterns
+        detections = detector.detect_user_delegation(response_text)
+
+        if not detections:
+            return  # No patterns detected
+
+        # Get event log for violation recording
+        event_log = get_event_log()
+
+        # Create PM violation events (NOT autotodos)
+        for detection in detections:
+            # Create event log entry as pm.violation
+            event_log.append_event(
+                event_type="pm.violation",
+                payload={
+                    "violation_type": "delegation_anti_pattern",
+                    "pattern_type": detection["pattern_type"],
+                    "original_text": detection["original_text"],
+                    "suggested_action": detection["suggested_todo"],
+                    "action": detection["action"],
+                    "session_id": event.get("session_id", ""),
+                    "timestamp": datetime.now(timezone.utc).isoformat(),
+                    "severity": "warning",  # Not critical, but should be fixed
+                    "message": f"PM asked user to do something manually: {detection['original_text'][:80]}...",
+                },
+                status="pending",
+            )
+
+            if DEBUG:
+                print(
+                    f"⚠️  PM violation detected: {detection['original_text'][:60]}...",
+                    file=sys.stderr,
+                )