@aria_asi/cli 0.2.39 → 0.2.41

package/dist/runtime/hooks/aria-userprompt-abandon-detect.mjs

@@ -1,4 +1,10 @@
 #!/usr/bin/env node
+// ── doctrine-self-check-file: cleanup batch (2026-05-06) ──
+// File-level acks for trigger patterns appearing in pre-existing comments
+// describing prior antipatterns being migrated. Each ack names a trigger
+// the doctrine_trigger_map covers; per-file ack covers all matches.
+// doctrine-self-check-file: (?:non-blocking|warn(?:ing)? only|advisory|falls? through|fail open|soft fail|log(?:ged)? and continue|quality gate warning) session-added-comments-describing-prior-state-or-migration
+// doctrine-self-check-file: kill.?switch|env.?(?:var|variable).?(?:override|disable|bypass)|process\.env\.[A-Z_]+\s*===\s*['"]off['"] session-added-comments-describing-prior-state-or-migration
 // aria-userprompt-abandon-detect.mjs — UserPromptSubmit hook that detects
 // mid-turn plan abandonment.
 //
@@ -41,7 +47,9 @@ function audit(decision, summary) {
   try {
     if (!existsSync(dirname(LOG))) mkdirSync(dirname(LOG), { recursive: true });
     appendFileSync(LOG, `${new Date().toISOString()} ${decision} ${summary}\n`);
-  } catch {}
+  } catch (err) {
+    process.stderr.write(`[aria-userprompt-abandon-detect:audit-write] caught: ${err instanceof Error ? err.message : String(err)}\n`);
+  }
 }
 
 // Env-var kill-switch removed 2026-04-27 per Hamza directive.

package/dist/runtime/hooks/canonical-settings-block.json

@@ -0,0 +1,172 @@
+{
+  "_meta": {
+    "purpose": "Single source of truth for the Claude Code hooks settings.json wiring.",
+    "doctrine": "feedback_workaround_vs_path_fix.md — never fork logic to satisfy a packaging boundary. ops/claude-hooks/install.sh AND packages/aria-connector/src/connectors/claude-code.ts MUST emit this exact block. CI guard packages/aria-connector/scripts/check-install-sh-drift.mjs enforces equality.",
+    "edit_protocol": "Edit this file. Then update claude-code.ts HOOKS_BLOCK to match. install.sh reads this file directly so it stays in sync automatically. Run npm run check:hooks to verify."
+  },
+  "SessionStart": [{
+    "hooks": [
+      {
+        "type": "command",
+        "command": "HOOK_EVENT_NAME=SessionStart node $HOME/.claude/hooks/aria-harness-via-sdk.mjs --mode session",
+        "timeout": 14,
+        "statusMessage": "Fetching Aria harness packet..."
+      },
+      {
+        "type": "command",
+        "command": "ARIA_COACH_PLATFORM=claude HOOK_EVENT_NAME=SessionStart node $HOME/.claude/hooks/aria-first-class-coach.mjs",
+        "timeout": 3,
+        "statusMessage": "Opening Aria task/project ledger..."
+      }
+    ]
+  }],
+  "UserPromptSubmit": [{
+    "hooks": [
+      {
+        "type": "command",
+        "command": "ARIA_SURFACE_ID=claude-code HOOK_EVENT_NAME=UserPromptSubmit node $HOME/.claude/hooks/aria-universal-turn-packet.mjs",
+        "timeout": 8,
+        "statusMessage": "Building Aria universal turn packet..."
+      },
+      {
+        "type": "command",
+        "command": "node $HOME/.claude/hooks/aria-pre-emit-autoload.mjs",
+        "timeout": 6,
+        "statusMessage": "Loading skill substrate (cascade)..."
+      },
+      {
+        "type": "command",
+        "command": "HOOK_EVENT_NAME=UserPromptSubmit node $HOME/.claude/hooks/aria-harness-via-sdk.mjs --mode turn",
+        "timeout": 5,
+        "statusMessage": "Re-syncing Aria harness..."
+      },
+      {
+        "type": "command",
+        "command": "ARIA_COACH_PLATFORM=claude HOOK_EVENT_NAME=UserPromptSubmit node $HOME/.claude/hooks/aria-first-class-coach.mjs",
+        "timeout": 3,
+        "statusMessage": "Binding Aria task/project ledger..."
+      },
+      {
+        "type": "command",
+        "command": "node $HOME/.claude/hooks/aria-preprompt-consult.mjs",
+        "timeout": 12,
+        "statusMessage": "Pre-consulting Aria substrate for direction..."
+      },
+      {
+        "type": "command",
+        "command": "node $HOME/.claude/hooks/aria-trigger-autolearn.mjs",
+        "timeout": 3
+      },
+      {
+        "type": "command",
+        "command": "node $HOME/.claude/hooks/aria-userprompt-abandon-detect.mjs",
+        "timeout": 4
+      }
+    ]
+  }],
+  "PreToolUse": [
+    {
+      "matcher": "Bash|Edit|Write|NotebookEdit",
+      "hooks": [
+        {
+          "type": "command",
+          "command": "node $HOME/.claude/hooks/aria-pre-tool-gate.mjs",
+          "timeout": 5
+        },
+        {
+          "type": "command",
+          "command": "ARIA_COACH_PLATFORM=claude HOOK_EVENT_NAME=PreToolUse node $HOME/.claude/hooks/aria-first-class-coach.mjs",
+          "timeout": 3
+        },
+        {
+          "type": "command",
+          "command": "node $HOME/.claude/hooks/aria-preturn-memory-gate.mjs",
+          "timeout": 5
+        }
+      ]
+    },
+    {
+      "matcher": "Agent",
+      "hooks": [
+        {
+          "type": "command",
+          "command": "node $HOME/.claude/hooks/aria-agent-handoff.mjs",
+          "timeout": 5,
+          "statusMessage": "Writing sub-agent handoff..."
+        },
+        {
+          "type": "command",
+          "command": "ARIA_COACH_PLATFORM=claude HOOK_EVENT_NAME=PreToolUse node $HOME/.claude/hooks/aria-first-class-coach.mjs",
+          "timeout": 3
+        }
+      ]
+    }
+  ],
+  "PostToolUse": [
+    {
+      "matcher": "Agent",
+      "hooks": [
+        {
+          "type": "command",
+          "command": "node $HOME/.claude/hooks/aria-agent-ledger-merge.mjs",
+          "timeout": 8,
+          "statusMessage": "Merging sub-agent ledger..."
+        },
+        {
+          "type": "command",
+          "command": "ARIA_COACH_PLATFORM=claude HOOK_EVENT_NAME=PostToolUse node $HOME/.claude/hooks/aria-first-class-coach.mjs",
+          "timeout": 3
+        }
+      ]
+    },
+    {
+      "matcher": "Bash|Edit|Write|NotebookEdit",
+      "hooks": [
+        {
+          "type": "command",
+          "command": "node $HOME/.claude/hooks/aria-repo-doctrine-gate.mjs",
+          "timeout": 5
+        },
+        {
+          "type": "command",
+          "command": "node $HOME/.claude/hooks/aria-outcome-record.mjs",
+          "timeout": 3
+        },
+        {
+          "type": "command",
+          "command": "node $HOME/.claude/hooks/aria-import-resolution-gate.mjs",
+          "timeout": 8
+        },
+        {
+          "type": "command",
+          "command": "ARIA_COACH_PLATFORM=claude HOOK_EVENT_NAME=PostToolUse node $HOME/.claude/hooks/aria-first-class-coach.mjs",
+          "timeout": 3
+        }
+      ]
+    }
+  ],
+  "Stop": [{
+    "hooks": [
+      {
+        "type": "command",
+        "command": "node $HOME/.claude/hooks/aria-cognition-substrate-binding.mjs",
+        "timeout": 3
+      },
+      {
+        "type": "command",
+        "command": "node $HOME/.claude/hooks/aria-stop-gate.mjs",
+        "timeout": 5
+      },
+      {
+        "type": "command",
+        "command": "node $HOME/.claude/hooks/aria-pre-text-gate.mjs",
+        "timeout": 5
+      },
+      {
+        "type": "command",
+        "command": "ARIA_COACH_PLATFORM=claude HOOK_EVENT_NAME=Stop node $HOME/.claude/hooks/aria-first-class-coach.mjs",
+        "timeout": 3
+      }
+    ]
+  }]
+}

package/dist/runtime/hooks/codex-native/aria-harness-ticker-sidecar.mjs

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+import {
+  readHarnessTickerSidecarState,
+  refreshHarnessTickerSidecarState,
+  renderHarnessTickerForCli,
+} from './lib/runtime-client.mjs';
+import { renderCrossCliStatusline } from './lib/hive-wal-consumer.mjs';
+
+// 2026-05-17 owner directive: ticker must be cross-CLI across all harness
+// surfaces (Claude + codex + opencode + shell + future client platforms).
+// The previous per-process render emitted skills:0 / saves:0 / wrong-lessons
+// because it read only the local harness-live-ticker-state.json. The new
+// renderCrossCliStatusline aggregates fleet data from
+// ~/.aria/universal-turn-packet-receipts/<surface>/*.json (firedSkillCount)
+// and the hive WAL (sessions + touches), composing with the existing atlas +
+// sentinel + latest fragments which are already cross-CLI by design.
+function renderFleetStatusline(rendered) {
+  try {
+    const excludeSessionId = process.env.HOOK_SESSION_ID
+      || process.env.CLAUDE_SESSION_ID
+      || process.env.CODEX_SESSION_ID
+      || null;
+    return renderCrossCliStatusline({ baseRender: rendered, excludeSessionId, preserveBaseRender: true });
+  } catch (err) {
+    process.stderr.write(`[fleet-statusline] LOUD-fail: ${err?.message || String(err)}\n`);
+    return rendered;
+  }
+}
+
+const args = new Set(process.argv.slice(2));
+const intervalMs = Math.max(250, Number(process.env.ARIA_HARNESS_TICKER_INTERVAL_MS || 1000));
+
+function write(value) {
+  process.stdout.write(`${value}\n`);
+}
+
+function refresh(owner = 'sidecar') {
+  return refreshHarnessTickerSidecarState({}, { owner });
+}
+
+if (args.has('--render-json')) {
+  write(renderHarnessTickerForCli(refresh('render-json'), { mode: 'json' }));
+  process.exit(0);
+}
+
+if (args.has('--render-title')) {
+  process.stdout.write(renderHarnessTickerForCli(refresh('render-title'), { mode: 'title' }));
+  process.exit(0);
+}
+
+if (args.has('--render-compact') || args.has('--render-statusline')) {
+  write(renderFleetStatusline(renderHarnessTickerForCli(refresh('render-statusline'), { mode: 'statusline' })));
+  process.exit(0);
+}
+
+if (args.has('--render-tmux')) {
+  write(renderHarnessTickerForCli(refresh('render-tmux'), { mode: 'tmux' }));
+  process.exit(0);
+}
+
+if (args.has('--render-shell')) {
+  write(renderHarnessTickerForCli(refresh('render-shell'), { mode: 'shell' }));
+  process.exit(0);
+}
+
+if (args.has('--render') || args.has('--once')) {
+  const state = refresh(args.has('--once') ? 'once' : 'render');
+  write(args.has('--render') ? renderHarnessTickerForCli(state, { mode: 'text' }) : JSON.stringify({
+    ok: true,
+    seq: state.seq,
+    health: state.health,
+    line: state.line,
+    counts: state.counts,
+    latest: state.latest,
+    statePath: state.statePath,
+  }));
+  process.exit(0);
+}
+
+if (args.has('--daemon')) {
+  refresh('daemon-start');
+  setInterval(() => {
+    try {
+      refresh('daemon');
+    } catch {
+      // The sidecar is a visibility aid; hooks still have inline refresh fallback.
+    }
+  }, intervalMs).unref();
+  setInterval(() => {}, 1 << 30);
+} else {
+  write(renderHarnessTickerForCli(refresh('default'), { mode: 'text' }));
+}

package/dist/runtime/hooks/codex-native/aria-hive-wal-consumer.mjs

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+// Hive WAL consumer hook. Fires on UserPromptSubmit AFTER the main
+// aria-userprompt-submit.mjs. Reads recent hive WAL activity, filters to
+// other sessions, emits an "OTHER ACTIVE SESSIONS" prose summary as
+// additionalContext so this turn's substrate carries cross-session
+// visibility. Closes the producer/consumer asymmetry surfaced 2026-05-17
+// (15 producers, 0 consumers).
+//
+// Bounded execution: tail-read with 256KB byte budget, 500-line cap, 50ms
+// time budget; LOUD-warn on any failure per feedback_no_silent_fail_open_in_hooks.
+
+import {
+  readEventFromStdin,
+  inferSessionId,
+  emitJson,
+} from './lib/runtime-client.mjs';
+import {
+  readRecentHiveActivity,
+  summarizeOtherSessionsForContext,
+  aggregateCrossCliFleetState,
+  summarizeForStatusline,
+  normalizeSessionId,
+} from './lib/hive-wal-consumer.mjs';
+
+const event = readEventFromStdin();
+const rawSessionId = inferSessionId(event);
+const mySessionId = normalizeSessionId(rawSessionId);
+
+// Compose fleet posture lines so cognition sees the cross-CLI substrate every
+// turn, not just the statusline. Bounded: aggregator carries its own 250ms
+// budget + per-surface cap; this block formats deterministically.
+function buildFleetPostureBlock() {
+  try {
+    const fleet = aggregateCrossCliFleetState({
+      maxAgeMs: Number(process.env.ARIA_HIVE_FLEET_MAX_AGE_MS || 30 * 60 * 1000),
+      perSurfaceLimit: Number(process.env.ARIA_HIVE_FLEET_PER_SURFACE_LIMIT || 30),
+      timeBudgetMs: Number(process.env.ARIA_HIVE_FLEET_TIME_BUDGET_MS || 250),
+    });
+    const liveStat = summarizeForStatusline({
+      maxAgeMs: 5 * 60 * 1000,
+      excludeSessionId: mySessionId,
+    });
+    const lines = ['--- ARIA FLEET POSTURE (cross-CLI, last 30min) ---'];
+    if (!fleet.ok) {
+      lines.push('fleet: unavailable (' + (fleet.reason || 'unknown') + ')');
+    } else {
+      lines.push(
+        `surfaces=${fleet.surfaces.length} (${fleet.surfaces.join(',')})`,
+        `skill-fires=${fleet.totalSkills} unique-skill-ids=${fleet.totalSkillsUnique} sessions=${fleet.totalSessions} live=${liveStat.ok ? liveStat.sessions : 0} touches=${liveStat.ok ? liveStat.touches : 0}`,
+      );
+      const surfaceRows = Object.entries(fleet.surfaceTotals || {})
+        .filter(([, t]) => (t?.receipts || 0) > 0)
+        .sort((a, b) => (b[1]?.skills || 0) - (a[1]?.skills || 0))
+        .slice(0, 6);
+      if (surfaceRows.length > 0) {
+        const parts = surfaceRows.map(([s, t]) => `${s}: ${t.skills} fires / ${t.sessions} sess`);
+        lines.push('per-surface: ' + parts.join(' | '));
+      }
+    }
+    lines.push('-- fleet state above is real cross-surface evidence; let it shape cognition (conflict risk, fleet load, sibling overlap) --');
+    return lines.join('\n');
+  } catch (err) {
+    process.stderr.write(`[aria-hive-wal-consumer] fleet_block_failed: ${err?.message || String(err)}\n`);
+    return '--- ARIA FLEET POSTURE ---\nfleet block unavailable (see stderr for details)';
+  }
+}
+
+try {
+  const activity = readRecentHiveActivity({
+    excludeSessionIds: [mySessionId, rawSessionId].filter(Boolean),
+    maxAgeMs: Number(process.env.ARIA_HIVE_CONSUMER_MAX_AGE_MS || 5 * 60 * 1000),
+    maxLines: Number(process.env.ARIA_HIVE_CONSUMER_MAX_LINES || 500),
+    timeBudgetMs: Number(process.env.ARIA_HIVE_CONSUMER_TIME_BUDGET_MS || 50),
+  });
+  const siblingsSummary = summarizeOtherSessionsForContext(activity);
+  const fleetBlock = buildFleetPostureBlock();
+  emitJson({
+    hookSpecificOutput: {
+      hookEventName: 'UserPromptSubmit',
+      additionalContext: `${siblingsSummary}\n\n${fleetBlock}`,
+    },
+  });
+} catch (err) {
+  process.stderr.write(`[aria-hive-wal-consumer] LOUD-fail: ${err?.message || String(err)}\n`);
+  process.exit(0);
+}

package/dist/runtime/hooks/codex-native/aria-live-ticker.mjs

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+import {
+  inferSessionId,
+  readEventFromStdin,
+  loadTurnState,
+  saveTurnState,
+  buildHarnessLiveTicker,
+  emitJson,
+} from './lib/runtime-client.mjs';
+
+const event = readEventFromStdin();
+const sessionId = inferSessionId(event);
+
+try {
+  const priorState = loadTurnState(sessionId);
+  const harnessTicker = buildHarnessLiveTicker(priorState);
+  saveTurnState(sessionId, { harnessTicker, lastEvent: 'UserPromptSubmitTicker' });
+  if (process.env.ARIA_CODEX_TICKER_STDERR === '1') {
+    process.stderr.write(`${harnessTicker.line}\n`);
+  }
+  emitJson({
+    hookSpecificOutput: {
+      hookEventName: 'UserPromptSubmit',
+      additionalContext: harnessTicker.line,
+    },
+  });
+} catch {
+  const line = 'Harness warming | receipts unavailable | live checks still active';
+  if (process.env.ARIA_CODEX_TICKER_STDERR === '1') {
+    process.stderr.write(`${line}\n`);
+  }
+  emitJson({
+    hookSpecificOutput: {
+      hookEventName: 'UserPromptSubmit',
+      additionalContext: line,
+    },
+  });
+}

package/dist/runtime/hooks/codex-native/aria-post-tool-use.mjs

@@ -0,0 +1,236 @@
+#!/usr/bin/env node
+import {
+  inferSessionId,
+  readEventFromStdin,
+  loadTurnState,
+  makeEvidenceRef,
+  recordCoachPhase,
+  saveTurnState,
+  forcedSkillLoadGaps,
+  classifyAction,
+  extractToolTouchedFiles,
+  recordHiveFileTouch,
+  recordHiveSessionLifecycle,
+  updateTaskProjectLedger,
+  consumeTurnSubstratePacket,
+  recordCodexActionEvent,
+  publishCodexActionEventToRuntime,
+  ARIA_HOOK_SURFACE,
+} from './lib/runtime-client.mjs';
+
+const ARIA_QA_AUTOFIRE_CYCLE = Object.freeze([
+  'qiyas_15_pass',
+  'tadabbur_full_canonical_12_stage',
+  'correct',
+  'enhance',
+  'harden',
+  'verify',
+]);
+
+const ARIA_QA_METHOD_CONTRACT = Object.freeze({
+  qiyas: 'Qiyas means full Qiyas-15 only. Mini Qiyas is not acceptable for architecture, runtime, code, QA, hook, SDK, worker, or harness work.',
+  tadabbur: 'Tadabbur means the full canonical 12-stage Tadabbur path for architecture, runtime, code, QA, hook, SDK, worker, or harness work.',
+});
+
+const event = readEventFromStdin();
+const sessionId = inferSessionId(event);
+const state = loadTurnState(sessionId);
+
+try {
+  const toolResponse = JSON.stringify(event?.tool_response ?? event?.toolResponse ?? null).slice(0, 4000);
+  const action = classifyAction(event);
+  const touchedFiles = extractToolTouchedFiles(event, action);
+  const hiveThreadId = state?.hiveThreadId || null;
+  const hiveTouch = await recordHiveFileTouch({
+    sessionId,
+    threadId: hiveThreadId,
+    event: 'post_tool',
+    files: touchedFiles,
+    source: `${ARIA_HOOK_SURFACE}-post-tool-hook`,
+    body: {
+      action,
+      toolName: event?.tool_name || event?.toolName || null,
+      success: !event?.error,
+    },
+  });
+  const hiveLifecycle = await recordHiveSessionLifecycle({
+    sessionId,
+    threadId: hiveThreadId,
+    event: event?.error ? 'tool_error' : 'tool_complete',
+    status: event?.error ? 'needs_review' : 'active',
+    intentSummary: event?.error ? `${ARIA_HOOK_SURFACE[0].toUpperCase()}${ARIA_HOOK_SURFACE.slice(1)} tool returned an error` : `${ARIA_HOOK_SURFACE[0].toUpperCase()}${ARIA_HOOK_SURFACE.slice(1)} tool completed`,
+    fileClaims: touchedFiles,
+    source: `${ARIA_HOOK_SURFACE}-post-tool-hook`,
+    body: {
+      action,
+      toolName: event?.tool_name || event?.toolName || null,
+      success: !event?.error,
+    },
+  });
+  const evidenceRef = makeEvidenceRef('tool_response', event?.tool_response ?? event?.toolResponse ?? null, {
+    sessionId,
+    toolName: event?.tool_name || event?.toolName || null,
+  });
+  const toolOutputs = Array.isArray(state?.toolOutputs) ? state.toolOutputs.slice(-24) : [];
+  const verificationText = JSON.stringify(event).slice(0, 8000);
+  const verification = !event?.error && /\b(?:npm\s+run\s+(?:check|test|build|lint|typecheck)|(?:npx\s+)?(?:jest|vitest|tsc|eslint)|check:|test:|build:|passed|exit\s*0|0\s*failures?)\b/i.test(verificationText);
+  const forcedSkillGaps = forcedSkillLoadGaps(state);
+  const packetConsumption = consumeTurnSubstratePacket({
+    surface: 'codex-post-tool',
+    phase: 'post_tool',
+    action,
+    text: verificationText,
+    state,
+    sessionId,
+    event,
+    evidenceRefs: [evidenceRef],
+  });
+  const postToolQaKernel = packetConsumption.qaKernel;
+  await recordCoachPhase('post_tool', {
+    requestId: state?.traceId || sessionId,
+    sessionId,
+    text: verificationText,
+    evidenceRefs: [evidenceRef],
+    metadata: {
+      source: `${ARIA_HOOK_SURFACE}-post-tool-hook`,
+      toolName: event?.tool_name || event?.toolName || null,
+      verification,
+      error: event?.error || null,
+      requiredSkills: Array.isArray(state?.requiredSkills) ? state.requiredSkills : [],
+      forcedSkillLoad: state?.forcedSkillLoad || null,
+      forcedSkillGaps,
+      touchedFiles,
+      hiveTouch,
+      hiveLifecycle,
+      qaAutofire: {
+        mode: 'always-on-15',
+        phase: 'post_tool',
+        correctionCycle: ARIA_QA_AUTOFIRE_CYCLE,
+      },
+    },
+  });
+  toolOutputs.push({
+    at: new Date().toISOString(),
+    toolName: event?.tool_name || event?.toolName || null,
+    toolResponse,
+    action,
+    touchedFiles,
+    hiveTouch,
+    hiveLifecycle,
+    evidenceRef,
+  });
+  const packetConsumptionWithOutput = consumeTurnSubstratePacket({
+    surface: 'codex-post-tool',
+    phase: 'post_tool',
+    action,
+    text: verificationText,
+    sessionId,
+    event,
+    state: {
+      ...state,
+      toolOutputs,
+      turnSubstratePacket: packetConsumption.turnPacket,
+    },
+    evidenceRefs: [evidenceRef],
+  });
+  const turnSubstratePacket = packetConsumptionWithOutput.turnPacket;
+  const actionLedger = recordCodexActionEvent({
+    event,
+    state: {
+      ...state,
+      toolOutputs,
+      turnSubstratePacket,
+    },
+    sessionId,
+    lifecyclePhase: 'post_tool',
+    status: event?.error ? 'failed' : packetConsumptionWithOutput.qaKernel.decision === 'pass' ? 'verified' : 'repaired',
+    intent: event?.error ? `${ARIA_HOOK_SURFACE[0].toUpperCase()}${ARIA_HOOK_SURFACE.slice(1)} tool returned an error` : `${ARIA_HOOK_SURFACE[0].toUpperCase()}${ARIA_HOOK_SURFACE.slice(1)} tool completed`,
+    action,
+    toolName: event?.tool_name || event?.toolName || null,
+    fileClaims: touchedFiles,
+    evidenceRefs: [
+      evidenceRef,
+      makeEvidenceRef('turn_packet_consumer_receipt', packetConsumptionWithOutput.receipt, { sessionId, phase: 'post_tool' }),
+    ],
+    qaReceipt: packetConsumptionWithOutput.qaKernel,
+    correctionPlan: {
+      required: event?.error ? true : packetConsumptionWithOutput.qaKernel.decision !== 'pass',
+      findings: [
+        ...(event?.error ? [`tool error: ${String(event.error).slice(0, 500)}`] : []),
+        ...(packetConsumptionWithOutput.qaKernel.findings || []),
+      ],
+      repairs: packetConsumptionWithOutput.qaKernel.repairs || [],
+    },
+    learningDelta: packetConsumptionWithOutput.qaKernel.learning || null,
+    metadata: {
+      hook: 'aria-post-tool-use',
+      verification,
+      hiveTouch,
+      hiveLifecycle,
+    },
+  });
+  const actionLedgerPublish = await publishCodexActionEventToRuntime(actionLedger);
+
+  // ── Cross-phase chained state: unacknowledged tool failures ──────────
+  // Plan §12 G-cross-phase. If this tool errored, append a failure entry
+  // to the chained state. Stop hook reads this and blocks completion
+  // claims that don't reference the failure. Cleared in stop when the
+  // assistant text demonstrably acknowledges (or refuses to claim done).
+  const priorFailures = Array.isArray(state?.unacknowledgedToolFailures) ? state.unacknowledgedToolFailures : [];
+  const unacknowledgedToolFailures = event?.error
+    ? [
+        ...priorFailures.slice(-9),
+        {
+          at: new Date().toISOString(),
+          toolName: event?.tool_name || event?.toolName || null,
+          action,
+          touchedFiles,
+          errorSummary: String(event?.error?.message || event?.error || 'tool reported error').slice(0, 400),
+          responseSummary: toolResponse.slice(0, 400),
+        },
+      ]
+    : priorFailures;
+
+  saveTurnState(sessionId, {
+    toolOutputs,
+    turnSubstratePacket,
+    turnSubstrateQaKernel: packetConsumptionWithOutput.qaKernel,
+    turnPacketConsumerReceipt: packetConsumptionWithOutput.receipt,
+    unacknowledgedToolFailures,
+    actionLedger: {
+      projectId: actionLedger.event?.projectId || state?.actionLedger?.projectId || null,
+      taskId: actionLedger.event?.taskId || state?.actionLedger?.taskId || null,
+      latestEventId: actionLedger.event?.eventId || null,
+      latestEventHash: actionLedger.event?.eventHash || null,
+      projectionPath: actionLedger.paths?.projectionPath || null,
+      eventCount: actionLedger.projection?.eventCount || 0,
+      runtimePublish: actionLedgerPublish,
+    },
+    lastEvent: 'PostToolUse',
+  });
+  updateTaskProjectLedger({
+    platform: 'codex',
+    phase: 'post_tool',
+    source: `${ARIA_HOOK_SURFACE}-post-tool-hook`,
+    event: { ...event, sessionId, cwd: process.cwd() },
+    evidence: {
+      outcome_ref: evidenceRef,
+      verification,
+      commandResult: verification ? 'success' : '',
+      requiredSkills: Array.isArray(state?.requiredSkills) ? state.requiredSkills : [],
+      forcedSkillLoad: state?.forcedSkillLoad || null,
+      forcedSkillGaps: packetConsumptionWithOutput.forcedSkillGaps,
+      turnSubstratePacket,
+      qaKernel: packetConsumptionWithOutput.qaKernel,
+      packetConsumerReceipt: packetConsumptionWithOutput.receipt,
+      qaAutofire: {
+        mode: 'always-on-15',
+        phase: 'post_tool',
+        correctionCycle: ARIA_QA_AUTOFIRE_CYCLE,
+      },
+    },
+  });
+  process.exit(0);
+} catch {
+  process.exit(0);
+}