@bookedsolid/reagent 0.13.2 → 0.14.2

package/dist/obsidian/vault-writer.js

@@ -0,0 +1,166 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { loadObsidianConfig } from './vault-config.js';
+import { generateKanban } from './kanban-generator.js';
+import { ObsidianCli } from './cli.js';
+import { TaskStore } from '../pm/task-store.js';
+/**
+ * Obsidian vault writer — writes markdown files directly to the vault.
+ * Obsidian auto-refreshes via filesystem watcher.
+ *
+ * All methods return silently when not configured.
+ * Pattern: DiscordNotifier (fail-silent, config-gated).
+ */
+export class VaultWriter {
+    config;
+    store;
+    constructor(baseDir) {
+        this.config = loadObsidianConfig(baseDir);
+        this.store = new TaskStore(baseDir);
+    }
+    /**
+     * Check whether Obsidian vault sync is enabled.
+     */
+    isEnabled() {
+        return this.config !== null;
+    }
+    /**
+     * Get resolved config for status display. Returns null if not configured.
+     */
+    getConfig() {
+        return this.config;
+    }
+    /**
+     * Sync the Kanban board to the vault.
+     * Writes only if sync.kanban is enabled.
+     */
+    syncKanban(dryRun = false) {
+        if (!this.config) {
+            return { target: 'kanban', written: false };
+        }
+        if (!this.config.sync.kanban) {
+            return { target: 'kanban', written: false, error: 'kanban sync not enabled in config' };
+        }
+        try {
+            const tasks = this.store.listTasks();
+            const markdown = generateKanban(tasks);
+            const outputPath = path.join(this.config.vault_path, this.config.paths.kanban);
+            if (!dryRun) {
+                // Ensure parent directory exists
+                fs.mkdirSync(path.dirname(outputPath), { recursive: true });
+                fs.writeFileSync(outputPath, markdown, 'utf8');
+            }
+            return { target: 'kanban', written: !dryRun, path: outputPath };
+        }
+        catch {
+            return { target: 'kanban', written: false, error: 'Failed to write kanban' };
+        }
+    }
+    /**
+     * Sync context dump to the vault.
+     * Placeholder for Phase 3.
+     */
+    syncContextDump(dryRun = false) {
+        if (!this.config) {
+            return { target: 'context', written: false };
+        }
+        if (!this.config.sync.context_dump) {
+            return {
+                target: 'context',
+                written: false,
+                error: 'context_dump sync not enabled in config',
+            };
+        }
+        // Phase 3: context-dumper.ts will be wired here
+        void dryRun;
+        return { target: 'context', written: false, error: 'Not yet implemented' };
+    }
+    /**
+     * Sync wiki pages to the vault.
+     * Placeholder for Phase 4.
+     */
+    syncWiki(dryRun = false) {
+        if (!this.config) {
+            return { target: 'wiki', written: false };
+        }
+        if (!this.config.sync.wiki_refresh) {
+            return { target: 'wiki', written: false, error: 'wiki_refresh sync not enabled in config' };
+        }
+        // Phase 4: wiki-generator.ts will be wired here
+        void dryRun;
+        return { target: 'wiki', written: false, error: 'Not yet implemented' };
+    }
+    /**
+     * Sync tasks as individual Obsidian notes via the CLI.
+     * Writes only if sync.tasks is enabled and the Obsidian CLI is available.
+     */
+    syncTasks(dryRun = false) {
+        if (!this.config) {
+            return { target: 'tasks', written: false };
+        }
+        if (!this.config.sync.tasks) {
+            return { target: 'tasks', written: false, error: 'tasks sync not enabled in config' };
+        }
+        if (!this.config.vault_name) {
+            return { target: 'tasks', written: false, error: 'vault_name not set in config' };
+        }
+        if (!ObsidianCli.isAvailable()) {
+            return { target: 'tasks', written: false, error: 'Obsidian CLI not available' };
+        }
+        try {
+            const tasks = this.store.listTasks();
+            if (tasks.length === 0) {
+                return { target: 'tasks', written: false, error: 'No tasks to sync' };
+            }
+            if (dryRun) {
+                return { target: 'tasks', written: false, path: `${tasks.length} tasks would be synced` };
+            }
+            const cli = new ObsidianCli(this.config.vault_name);
+            const tasksPath = this.config.paths.tasks;
+            let synced = 0;
+            for (const task of tasks) {
+                const noteName = `${task.id} ${task.title}`;
+                const content = [
+                    '---',
+                    'reagent_managed: true',
+                    `task_id: "${task.id}"`,
+                    `status: "${task.status}"`,
+                    `urgency: "${task.urgency}"`,
+                    `assignee: "${task.assignee || 'unassigned'}"`,
+                    '---',
+                    '',
+                    `# ${task.title}`,
+                    '',
+                    `- **ID:** ${task.id}`,
+                    `- **Status:** ${task.status}`,
+                    `- **Urgency:** ${task.urgency}`,
+                    `- **Assignee:** ${task.assignee || 'unassigned'}`,
+                    '',
+                ].join('\n');
+                if (cli.createNote(noteName, content, { path: tasksPath })) {
+                    synced++;
+                }
+            }
+            return {
+                target: 'tasks',
+                written: synced > 0,
+                path: `${synced}/${tasks.length} tasks synced to ${tasksPath}`,
+            };
+        }
+        catch {
+            return { target: 'tasks', written: false, error: 'Failed to sync tasks' };
+        }
+    }
+    /**
+     * Sync all enabled targets.
+     */
+    syncAll(dryRun = false) {
+        return [
+            this.syncKanban(dryRun),
+            this.syncContextDump(dryRun),
+            this.syncWiki(dryRun),
+            this.syncTasks(dryRun),
+        ];
+    }
+}
+//# sourceMappingURL=vault-writer.js.map

package/dist/obsidian/vault-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-writer.js","sourceRoot":"","sources":["../../src/obsidian/vault-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAA+B,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAShD;;;;;;GAMG;AACH,MAAM,OAAO,WAAW;IACL,MAAM,CAAgC;IACtC,KAAK,CAAY;IAElC,YAAY,OAAe;QACzB,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,MAAM,GAAG,KAAK;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QAC1F,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAE/E,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,iCAAiC;gBACjC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,CAAC;YAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,MAAM,GAAG,KAAK;QAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACnC,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,yCAAyC;aACjD,CAAC;QACJ,CAAC;QAED,gDAAgD;QAChD,KAAK,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC7E,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,MAAM,GAAG,KAAK;QACrB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACnC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC;QAC9F,CAAC;QAED,gDAAgD;QAChD,KAAK,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC1E,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,MAAM,GAAG,KAAK;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;QAClF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;YACxE,CAAC;YAED,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,wBAAwB,EAAE,CAAC;YAC5F,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1C,IAAI,MAAM,GAAG,CAAC,CAAC;YAEf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAG;oBACd,KAAK;oBACL,uBAAuB;oBACvB,aAAa,IAAI,CAAC,EAAE,GAAG;oBACvB,YAAY,IAAI,CAAC,MAAM,GAAG;oBAC1B,aAAa,IAAI,CAAC,OAAO,GAAG;oBAC5B,cAAc,IAAI,CAAC,QAAQ,IAAI,YAAY,GAAG;oBAC9C,KAAK;oBACL,EAAE;oBACF,KAAK,IAAI,CAAC,KAAK,EAAE;oBACjB,EAAE;oBACF,aAAa,IAAI,CAAC,EAAE,EAAE;oBACtB,iBAAiB,IAAI,CAAC,MAAM,EAAE;oBAC9B,kBAAkB,IAAI,CAAC,OAAO,EAAE;oBAChC,mBAAmB,IAAI,CAAC,QAAQ,IAAI,YAAY,EAAE;oBAClD,EAAE;iBACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAEb,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;oBAC3D,MAAM,EAAE,CAAC;gBACX,CAAC;YACH,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,MAAM,GAAG,CAAC;gBACnB,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,oBAAoB,SAAS,EAAE;aAC/D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,MAAM,GAAG,KAAK;QACpB,OAAO;YACL,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YACvB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACrB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SACvB,CAAC;IACJ,CAAC;CACF"}

package/dist/types/policy.d.ts

@@ -11,5 +11,9 @@ export interface Policy {
     blocked_paths: string[];
     notification_channel: string;
     injection_detection?: 'block' | 'warn';
+    context_protection?: {
+        delegate_to_subagent: string[];
+        max_bash_output_lines?: number;
+    };
 }
 //# sourceMappingURL=policy.d.ts.map

package/dist/types/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/types/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,aAAa,CAAC;IAC9B,kBAAkB,EAAE,aAAa,CAAC;IAClC,iCAAiC,EAAE,OAAO,CAAC;IAC3C,oBAAoB,EAAE,OAAO,CAAC;IAC9B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAE7B,mBAAmB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CACxC"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/types/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,aAAa,CAAC;IAC9B,kBAAkB,EAAE,aAAa,CAAC;IAClC,iCAAiC,EAAE,OAAO,CAAC;IAC3C,oBAAoB,EAAE,OAAO,CAAC;IAC9B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAE7B,mBAAmB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAEvC,kBAAkB,CAAC,EAAE;QACnB,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;CACH"}

package/hooks/dangerous-bash-interceptor.sh

@@ -261,6 +261,49 @@ if printf '%s' "$CMD" | grep -qiE '(alias|function)[[:space:]]+[a-zA-Z_]+.*(--(n
     "Alt: Do not wrap bypass patterns in aliases or functions."
 fi
 
+# H17: context_protection — block commands that should be delegated to subagents
+# Reads context_protection.delegate_to_subagent from .reagent/policy.yaml.
+# These commands produce excessive output that exhausts coordinator context windows.
+POLICY_FILE="${REAGENT_ROOT}/.reagent/policy.yaml"
+if [[ -f "$POLICY_FILE" ]]; then
+  DELEGATE_PATTERNS=()
+  IN_DELEGATE_BLOCK=0
+  while IFS= read -r line; do
+    if printf '%s' "$line" | grep -qE '^[[:space:]]*delegate_to_subagent:'; then
+      # Check for inline empty array
+      if printf '%s' "$line" | grep -qE 'delegate_to_subagent:[[:space:]]*\[\]'; then
+        break
+      fi
+      IN_DELEGATE_BLOCK=1
+      continue
+    fi
+    if [[ $IN_DELEGATE_BLOCK -eq 1 ]]; then
+      # Block sequence items start with "  - "
+      if printf '%s' "$line" | grep -qE '^[[:space:]]*-[[:space:]]'; then
+        pattern=$(printf '%s' "$line" | sed "s/^[[:space:]]*-[[:space:]]*//; s/^[\"']//; s/[\"']$//")
+        if [[ -n "$pattern" ]]; then
+          DELEGATE_PATTERNS+=("$pattern")
+        fi
+      else
+        # Non-continuation line = end of block
+        break
+      fi
+    fi
+  done < "$POLICY_FILE"
+
+  for pattern in "${DELEGATE_PATTERNS[@]+"${DELEGATE_PATTERNS[@]}"}"; do
+    # Use fixed-string match — these are command prefixes, not regex
+    if printf '%s' "$CMD" | grep -qF "$pattern"; then
+      add_high \
+        "Context protection — command must run in a subagent" \
+        "This command produces excessive output that will exhaust the coordinator context window. Delegate it to a subagent instead of running it directly." \
+        "Alt: Use the Agent tool to delegate: Agent(subagent_type: 'qa-engineer-automation', prompt: 'Run $pattern and report pass/fail summary only.')" \
+        "Alt: The context_protection policy in .reagent/policy.yaml lists commands that must be delegated."
+      break
+    fi
+  done
+fi
+
 # ── 10. MEDIUM severity checks ────────────────────────────────────────────────
 
 # M1: npm install --force

package/hooks/reagent-obsidian-journal.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+# reagent-obsidian-journal.sh — Session journaling to Obsidian daily note
+#
+# Hook type: Stop (fires when Claude Code session ends)
+# Appends session summary to the project's daily note via Obsidian CLI.
+# Fail-silent: exits 0 even on error (non-blocking).
+#
+# Requires:
+#   - /usr/local/bin/obsidian CLI installed
+#   - REAGENT_OBSIDIAN_VAULT env var set
+#   - obsidian_vault.sync.journal: true in .reagent/gateway.yaml
+
+set -euo pipefail
+
+OBSIDIAN_CLI="/usr/local/bin/obsidian"
+POLICY_DIR=".reagent"
+GATEWAY="${POLICY_DIR}/gateway.yaml"
+TASK_STORE="${POLICY_DIR}/tasks.jsonl"
+
+# ── Guard: CLI available ──────────────────────────────────────────────
+if [[ ! -x "$OBSIDIAN_CLI" ]]; then
+  exit 0
+fi
+
+# ── Guard: gateway.yaml exists ────────────────────────────────────────
+if [[ ! -f "$GATEWAY" ]]; then
+  exit 0
+fi
+
+# ── Guard: journal sync enabled ──────────────────────────────────────
+# Anchored grep — must be indented (under sync: block), avoids matching comments
+if ! grep -qE '^\s+journal:\s*true' "$GATEWAY" 2>/dev/null; then
+  exit 0
+fi
+
+# ── Resolve vault name ────────────────────────────────────────────────
+VAULT_NAME=$(grep 'vault_name:' "$GATEWAY" 2>/dev/null | head -1 | sed "s/.*vault_name:\s*['\"]*//" | sed "s/['\"].*//")
+if [[ -z "$VAULT_NAME" ]]; then
+  exit 0
+fi
+
+# ── Build session summary ─────────────────────────────────────────────
+PROJECT_NAME=$(basename "$(pwd)")
+TIMESTAMP=$(date '+%Y-%m-%d %H:%M')
+SESSION_ID="${RANDOM}"
+
+SUMMARY="### ${PROJECT_NAME} — Session ${SESSION_ID} (${TIMESTAMP})\n"
+
+# Materialize task state if task store exists
+if [[ -f "$TASK_STORE" ]]; then
+  COMPLETED=$(grep -c '"completed"' "$TASK_STORE" 2>/dev/null || echo "0")
+  IN_PROGRESS=$(grep -c '"started"' "$TASK_STORE" 2>/dev/null || echo "0")
+  BLOCKED=$(grep -c '"blocked"' "$TASK_STORE" 2>/dev/null || echo "0")
+  CREATED=$(grep -c '"created"' "$TASK_STORE" 2>/dev/null || echo "0")
+
+  SUMMARY="${SUMMARY}- Completed: ${COMPLETED}\n"
+  SUMMARY="${SUMMARY}- In Progress: ${IN_PROGRESS}\n"
+  SUMMARY="${SUMMARY}- Blocked: ${BLOCKED}\n"
+  SUMMARY="${SUMMARY}- Backlog: ${CREATED}\n"
+else
+  SUMMARY="${SUMMARY}- No task store found\n"
+fi
+
+SUMMARY="${SUMMARY}\n---\n"
+
+# ── Append to daily note ──────────────────────────────────────────────
+"$OBSIDIAN_CLI" daily:append --vault "$VAULT_NAME" -- "$(echo -e "$SUMMARY")" 2>/dev/null || true
+
+exit 0

package/hooks/reagent-obsidian-precompact.sh

@@ -0,0 +1,88 @@
+#!/usr/bin/env bash
+# reagent-obsidian-precompact.sh — Knowledge extraction before context compaction
+#
+# Hook type: PreCompact (fires before Claude Code compacts context)
+# Spawns a subprocess to extract durable knowledge from the transcript
+# and creates a session knowledge note in Obsidian.
+#
+# Disabled by default (precompact: false in gateway.yaml).
+# Fail-silent: exits 0 even on error (non-blocking).
+#
+# Requires:
+#   - /usr/local/bin/obsidian CLI installed
+#   - REAGENT_OBSIDIAN_VAULT env var set
+#   - obsidian_vault.sync.precompact: true in .reagent/gateway.yaml
+
+set -euo pipefail
+
+OBSIDIAN_CLI="/usr/local/bin/obsidian"
+POLICY_DIR=".reagent"
+GATEWAY="${POLICY_DIR}/gateway.yaml"
+
+# ── Guard: CLI available ──────────────────────────────────────────────
+if [[ ! -x "$OBSIDIAN_CLI" ]]; then
+  exit 0
+fi
+
+# ── Guard: gateway.yaml exists ────────────────────────────────────────
+if [[ ! -f "$GATEWAY" ]]; then
+  exit 0
+fi
+
+# ── Guard: precompact sync enabled ───────────────────────────────────
+# Anchored grep — must be indented (under sync: block), avoids matching comments
+if ! grep -qE '^\s+precompact:\s*true' "$GATEWAY" 2>/dev/null; then
+  exit 0
+fi
+
+# ── Resolve vault name and sessions path ──────────────────────────────
+VAULT_NAME=$(grep 'vault_name:' "$GATEWAY" 2>/dev/null | head -1 | sed "s/.*vault_name:\s*['\"]*//" | sed "s/['\"].*//")
+if [[ -z "$VAULT_NAME" ]]; then
+  exit 0
+fi
+
+SESSIONS_PATH=$(grep 'sessions:' "$GATEWAY" 2>/dev/null | head -1 | sed "s/.*sessions:\s*['\"]*//" | sed "s/['\"].*//")
+SESSIONS_PATH="${SESSIONS_PATH:-Wiki/Sessions}"
+
+# ── Resolve engine ────────────────────────────────────────────────────
+ENGINE=$(grep 'engine:' "$GATEWAY" 2>/dev/null | head -1 | sed "s/.*engine:\s*['\"]*//" | sed "s/['\"].*//")
+ENGINE="${ENGINE:-claude}"
+
+PROJECT_NAME=$(basename "$(pwd)")
+DATE=$(date '+%Y-%m-%d')
+SESSION_ID="${RANDOM}"
+NOTE_NAME="${PROJECT_NAME} Session ${DATE} ${SESSION_ID}"
+
+# ── Stub: knowledge extraction ────────────────────────────────────────
+# TODO: Implement actual transcript extraction via claude subprocess or ollama
+# For now, create a placeholder session note
+
+CONTENT="---
+reagent_managed: true
+project: ${PROJECT_NAME}
+date: ${DATE}
+session_id: ${SESSION_ID}
+engine: ${ENGINE}
+---
+
+# Session Knowledge — ${PROJECT_NAME}
+
+*Auto-extracted at ${DATE} by reagent precompact hook.*
+
+> Knowledge extraction engine: ${ENGINE}
+> Status: stub — full extraction not yet implemented
+
+## Decisions
+
+## Discoveries
+
+## Open Questions
+"
+
+"$OBSIDIAN_CLI" create \
+  --vault "$VAULT_NAME" \
+  --path "$SESSIONS_PATH" \
+  --name "$NOTE_NAME" \
+  -- "$CONTENT" 2>/dev/null || true
+
+exit 0

package/hooks/reagent-obsidian-tasks.sh

@@ -0,0 +1,126 @@
+#!/usr/bin/env bash
+# reagent-obsidian-tasks.sh — Task sync to Obsidian individual notes
+#
+# Hook type: PostToolUse (fires after task_create, task_update MCP tools)
+# Materializes task events as individual Obsidian notes with typed frontmatter.
+# One-way sync: JSONL → Obsidian. Reverse sync deferred.
+#
+# Fail-silent: exits 0 even on error (non-blocking).
+#
+# Requires:
+#   - /usr/local/bin/obsidian CLI installed
+#   - REAGENT_OBSIDIAN_VAULT env var set
+#   - obsidian_vault.sync.tasks: true in .reagent/gateway.yaml
+
+set -euo pipefail
+
+OBSIDIAN_CLI="/usr/local/bin/obsidian"
+POLICY_DIR=".reagent"
+GATEWAY="${POLICY_DIR}/gateway.yaml"
+TASK_STORE="${POLICY_DIR}/tasks.jsonl"
+
+# ── Guard: CLI available ──────────────────────────────────────────────
+if [[ ! -x "$OBSIDIAN_CLI" ]]; then
+  exit 0
+fi
+
+# ── Guard: gateway.yaml exists ────────────────────────────────────────
+if [[ ! -f "$GATEWAY" ]]; then
+  exit 0
+fi
+
+# ── Guard: tasks sync enabled ────────────────────────────────────────
+# Match sync.tasks specifically — use awk to only match within the sync: block
+if ! awk '/^\s+sync:/{found=1} found && /tasks:\s*true/{exit 0} END{exit 1}' "$GATEWAY" 2>/dev/null; then
+  exit 0
+fi
+
+# ── Guard: task store exists ──────────────────────────────────────────
+if [[ ! -f "$TASK_STORE" ]]; then
+  exit 0
+fi
+
+# ── Resolve vault name and tasks path ─────────────────────────────────
+VAULT_NAME=$(grep 'vault_name:' "$GATEWAY" 2>/dev/null | head -1 | sed "s/.*vault_name:\s*['\"]*//" | sed "s/['\"].*//")
+if [[ -z "$VAULT_NAME" ]]; then
+  exit 0
+fi
+
+# Extract paths.tasks — use awk to match only within the paths: block (not sync:)
+TASKS_PATH=$(awk '/^\s+paths:/{found=1} found && /tasks:/{print; exit}' "$GATEWAY" 2>/dev/null | sed "s/.*tasks:\s*['\"]*//" | sed "s/['\"].*//")
+TASKS_PATH="${TASKS_PATH:-Tasks}"
+
+PROJECT_NAME=$(basename "$(pwd)")
+
+# ── Read tool result from stdin (Claude hook protocol) ────────────────
+TOOL_RESULT=""
+if [[ ! -t 0 ]]; then
+  TOOL_RESULT=$(cat 2>/dev/null || true)
+fi
+
+# Extract task ID from the tool result JSON
+TASK_ID=""
+if [[ -n "$TOOL_RESULT" ]]; then
+  TASK_ID=$(echo "$TOOL_RESULT" | grep -o '"id"\s*:\s*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)"$/\1/')
+fi
+
+# If we don't have a specific task ID, sync the most recent task
+if [[ -z "$TASK_ID" ]]; then
+  TASK_ID=$(tail -1 "$TASK_STORE" | grep -o '"id"\s*:\s*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)"$/\1/')
+fi
+
+if [[ -z "$TASK_ID" ]]; then
+  exit 0
+fi
+
+# ── Extract task data from JSONL ──────────────────────────────────────
+# Get the latest event for this task
+TASK_LINE=$(grep "\"$TASK_ID\"" "$TASK_STORE" | tail -1)
+
+if [[ -z "$TASK_LINE" ]]; then
+  exit 0
+fi
+
+# Extract fields (simple grep — avoids jq dependency)
+TITLE=$(echo "$TASK_LINE" | grep -o '"title"\s*:\s*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)"$/\1/')
+STATUS=$(echo "$TASK_LINE" | grep -o '"status"\s*:\s*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)"$/\1/')
+URGENCY=$(echo "$TASK_LINE" | grep -o '"urgency"\s*:\s*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)"$/\1/')
+ASSIGNEE=$(echo "$TASK_LINE" | grep -o '"assignee"\s*:\s*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)"$/\1/')
+
+TITLE="${TITLE:-Untitled Task}"
+STATUS="${STATUS:-created}"
+URGENCY="${URGENCY:-normal}"
+
+# ── Create/update note via Obsidian CLI ───────────────────────────────
+NOTE_NAME="${TASK_ID} ${TITLE}"
+
+CONTENT="---
+reagent_managed: true
+task_id: ${TASK_ID}
+project: ${PROJECT_NAME}
+status: ${STATUS}
+urgency: ${URGENCY}
+assignee: ${ASSIGNEE:-unassigned}
+---
+
+# ${TITLE}
+
+- **ID:** ${TASK_ID}
+- **Status:** ${STATUS}
+- **Urgency:** ${URGENCY}
+- **Assignee:** ${ASSIGNEE:-unassigned}
+- **Project:** ${PROJECT_NAME}
+"
+
+# Create note (overwrites if exists)
+"$OBSIDIAN_CLI" create \
+  --vault "$VAULT_NAME" \
+  --path "$TASKS_PATH" \
+  --name "$NOTE_NAME" \
+  -- "$CONTENT" 2>/dev/null || true
+
+# Set properties via CLI for proper frontmatter handling
+"$OBSIDIAN_CLI" property:set --vault "$VAULT_NAME" --file "${TASKS_PATH}/${NOTE_NAME}.md" \
+  --name "status" --value "$STATUS" 2>/dev/null || true
+
+exit 0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bookedsolid/reagent",
-  "version": "0.13.2",
-  "description": "Zero-trust MCP server — policy enforcement, secret redaction, and audit logging for AI-assisted projects",
+  "version": "0.14.2",
+  "description": "Governance layer for Claude Code — policy enforcement, hook-based safety gates, and audit logging for AI-assisted projects",
   "license": "MIT",
   "author": "Booked Solid Technology <oss@bookedsolid.tech> (https://bookedsolid.tech)",
   "homepage": "https://github.com/bookedsolidtech/reagent#readme",

package/profiles/bst-internal.json

@@ -6,7 +6,7 @@
   "huskyPreCommit": true,
   "huskyPrePush": true,
   "cursorRules": ["001-no-hallucination", "002-verify-before-act", "003-attribution"],
-  "blockedPaths": [".reagent/", ".env"],
+  "blockedPaths": [".reagent/policy.yaml", ".reagent/HALT", ".env"],
   "gitignoreEntries": [".claude/agents/", ".claude/hooks/", ".claude/settings.json", "RESTART.md"],
   "qualityGates": {
     "commitReview": { "enabled": true, "trivialThreshold": 20, "significantThreshold": 200 },

package/profiles/client-engagement.json

@@ -6,8 +6,8 @@
   "huskyPreCommit": true,
   "huskyPrePush": true,
   "cursorRules": ["001-no-hallucination", "002-verify-before-act", "003-attribution"],
-  "blockedPaths": [".reagent/", ".github/workflows/", ".env", ".env.*"],
-  "gitignoreEntries": [".claude/agents/", ".claude/hooks/", ".claude/settings.json", "RESTART.md"],
+  "blockedPaths": [".reagent/policy.yaml", ".reagent/HALT", ".github/workflows/", ".env", ".env.*"],
+  "gitignoreEntries": [".claude/hooks/", ".claude/settings.json", "RESTART.md"],
   "qualityGates": {
     "commitReview": { "enabled": true, "trivialThreshold": 20, "significantThreshold": 200 },
     "pushReview": { "enabled": true },