|
| 1 | +#!/usr/bin/env python3 |
| 2 | +"""Preview Forge — Post-H1 sentinel writer (PostToolUse hook). |
| 3 | +
|
| 4 | +Watches Write tool calls. When `runs/<id>/design-approved.json` is |
| 5 | +written AND `runs/<id>/chosen_preview.json.lock` already exists (i.e. |
| 6 | +H1 has truly frozen — both lock artifacts present), this hook drops |
| 7 | +`runs/<id>/.h1-frozen-signal` so M1 Run Supervisor's standup polling |
| 8 | +loop can see "H1 done → kick SpecDD cycle" without M3 needing to be |
| 9 | +re-prompted by the user. |
| 10 | +
|
| 11 | +Also appends a Blackboard SQLite row (matches `auto-retro-trigger.py` |
| 12 | +convention — local repo standard) so the signal is observable in the |
| 13 | +existing trace tooling. |
| 14 | +
|
| 15 | +Exit 0 always — advisory hook, never blocks the Write tool. |
| 16 | +
|
| 17 | +Hardening (W1.3 pattern): |
| 18 | +- Bounded stdin read (4 MiB) with MemoryError catch, so a runaway |
| 19 | + payload can't OOM the hook process. |
| 20 | +""" |
| 21 | +from __future__ import annotations |
| 22 | + |
| 23 | +import json |
| 24 | +import os |
| 25 | +import re |
| 26 | +import sqlite3 |
| 27 | +import sys |
| 28 | +import time |
| 29 | +from pathlib import Path |
| 30 | + |
| 31 | +PLUGIN_ROOT = Path(os.environ.get("CLAUDE_PLUGIN_ROOT", "")) |
| 32 | +CLAUDE_MD = PLUGIN_ROOT / "memory" / "CLAUDE.md" |
| 33 | + |
| 34 | +# Same run_id charset as auto-retro-trigger.py — see that file's S-6 |
| 35 | +# comment for rationale (path traversal defense in depth). |
| 36 | +_RUN_ID = r"r-[A-Za-z0-9][A-Za-z0-9_-]{0,63}" |
| 37 | +DESIGN_APPROVED = re.compile(rf"runs/({_RUN_ID})/design-approved\.json$") |
| 38 | + |
| 39 | +STDIN_CAP_BYTES = 4 * 1024 * 1024 # 4 MiB |
| 40 | + |
| 41 | + |
| 42 | +def is_active() -> bool: |
| 43 | + return CLAUDE_MD.exists() |
| 44 | + |
| 45 | + |
| 46 | +def read_hook_input() -> dict: |
| 47 | + try: |
| 48 | + raw = sys.stdin.read(STDIN_CAP_BYTES + 1) |
| 49 | + if len(raw) > STDIN_CAP_BYTES: |
| 50 | + print( |
| 51 | + "[preview-forge/post-h1-signal] warn: stdin exceeds 4MiB cap", |
| 52 | + file=sys.stderr, |
| 53 | + ) |
| 54 | + return {} |
| 55 | + return json.loads(raw) if raw.strip() else {} |
| 56 | + except (json.JSONDecodeError, MemoryError): |
| 57 | + return {} |
| 58 | + |
| 59 | + |
| 60 | +def write_sentinel(run_dir: Path) -> None: |
| 61 | + sentinel = run_dir / ".h1-frozen-signal" |
| 62 | + sentinel.write_text( |
| 63 | + json.dumps( |
| 64 | + {"ts": int(time.time()), "run_id": run_dir.name}, |
| 65 | + ensure_ascii=False, |
| 66 | + ) |
| 67 | + + "\n", |
| 68 | + encoding="utf-8", |
| 69 | + ) |
| 70 | + |
| 71 | + |
| 72 | +def append_blackboard(run_dir: Path) -> None: |
| 73 | + bb_path = run_dir / "blackboard.db" |
| 74 | + if not bb_path.parent.exists(): |
| 75 | + return |
| 76 | + conn = sqlite3.connect(str(bb_path)) |
| 77 | + try: |
| 78 | + conn.execute( |
| 79 | + """ |
| 80 | + CREATE TABLE IF NOT EXISTS blackboard ( |
| 81 | + id INTEGER PRIMARY KEY AUTOINCREMENT, |
| 82 | + ts TIMESTAMP DEFAULT CURRENT_TIMESTAMP, |
| 83 | + agent_id TEXT NOT NULL, |
| 84 | + key TEXT NOT NULL, |
| 85 | + value TEXT, |
| 86 | + tier INTEGER, |
| 87 | + dept TEXT |
| 88 | + ) |
| 89 | + """ |
| 90 | + ) |
| 91 | + conn.execute( |
| 92 | + """ |
| 93 | + INSERT INTO blackboard (agent_id, key, value, tier, dept) |
| 94 | + VALUES (?, ?, ?, ?, ?) |
| 95 | + """, |
| 96 | + ( |
| 97 | + "post-h1-signal", |
| 98 | + "h1.frozen", |
| 99 | + json.dumps( |
| 100 | + {"run_id": run_dir.name, "ts": int(time.time())}, |
| 101 | + ensure_ascii=False, |
| 102 | + ), |
| 103 | + 1, |
| 104 | + "meta", |
| 105 | + ), |
| 106 | + ) |
| 107 | + conn.commit() |
| 108 | + finally: |
| 109 | + conn.close() |
| 110 | + |
| 111 | + |
| 112 | +def main() -> int: |
| 113 | + if not is_active(): |
| 114 | + return 0 |
| 115 | + |
| 116 | + payload = read_hook_input() |
| 117 | + tool = payload.get("tool_name") or payload.get("tool") or "" |
| 118 | + if tool != "Write": |
| 119 | + return 0 |
| 120 | + |
| 121 | + tool_input = payload.get("tool_input") or payload.get("input") or {} |
| 122 | + path = tool_input.get("file_path") or tool_input.get("path") or "" |
| 123 | + if not path: |
| 124 | + return 0 |
| 125 | + |
| 126 | + m = DESIGN_APPROVED.search(path) |
| 127 | + if not m: |
| 128 | + return 0 |
| 129 | + |
| 130 | + run_id = m.group(1) |
| 131 | + cwd = Path.cwd() |
| 132 | + run_dir = cwd / "runs" / run_id |
| 133 | + |
| 134 | + # Both lock artifacts must already be present — `design-approved.json` |
| 135 | + # alone is not sufficient (it could be an in-progress draft write). |
| 136 | + if not (run_dir / "chosen_preview.json.lock").exists(): |
| 137 | + return 0 |
| 138 | + if not run_dir.exists(): |
| 139 | + return 0 |
| 140 | + |
| 141 | + try: |
| 142 | + write_sentinel(run_dir) |
| 143 | + except Exception as e: # noqa: BLE001 |
| 144 | + print( |
| 145 | + f"[preview-forge/post-h1-signal] sentinel warn: {e}", |
| 146 | + file=sys.stderr, |
| 147 | + ) |
| 148 | + |
| 149 | + try: |
| 150 | + append_blackboard(run_dir) |
| 151 | + except Exception as e: # noqa: BLE001 |
| 152 | + print( |
| 153 | + f"[preview-forge/post-h1-signal] blackboard warn: {e}", |
| 154 | + file=sys.stderr, |
| 155 | + ) |
| 156 | + |
| 157 | + print( |
| 158 | + f"[preview-forge/post-h1-signal] H1 frozen signal written for run={run_id}", |
| 159 | + file=sys.stderr, |
| 160 | + ) |
| 161 | + return 0 |
| 162 | + |
| 163 | + |
| 164 | +if __name__ == "__main__": |
| 165 | + sys.exit(main()) |
0 commit comments