@cleocode/cleo 2026.10.21 → 2026.10.22-rc.ci.693

package/dist/cli/{hook-VOHU4YPF.js → hook-7L73CHBZ.js}

@@ -21,7 +21,7 @@ import {
 import {
   cliError,
   cliOutput
-} from "./chunk-4RGSNUUP.js";
+} from "./chunk-6UGBRRKY.js";
 import "./chunk-6JSJNYH2.js";
 
 // packages/cleo/src/cli/commands/hook.ts
@@ -176,7 +176,7 @@ var askEnforceSubcommand = defineCommand({
 var stopSubcommand = defineCommand({
   meta: {
     name: "stop",
-    description: "Stop hook (T13796): ask the live goal runtime first (CLEO_GOAL_TICK_COMMAND, default `ocg tick`), pass its block verbatim, and end the CLEO session only when the goal says the turn is final or no goal is live. Fails open to the session end."
+    description: "Stop hook (T13796): ask the live goal runtime first (CLEO_GOAL_TICK_COMMAND, default `ocg tick`) and pass its block verbatim, else run ask-enforce. A turn end never ends the CLEO session (T13913). Fails open."
   },
   args: {
     provider: {
@@ -190,15 +190,51 @@ var stopSubcommand = defineCommand({
     process.exitCode = await runHookCli(["stop", "--provider", provider]);
   }
 });
+var sessionEndSubcommand = defineCommand({
+  meta: {
+    name: "session-end",
+    description: "SessionEnd hook (T13913): the harness session really ended, so end the CLEO session (cleo session end, detached, waited for at most 20 s). Its stdin is not read; it prints nothing."
+  },
+  args: {
+    provider: {
+      type: "string",
+      description: "Harness whose session ended: claude-code (default)"
+    }
+  },
+  async run({ args }) {
+    const { runHookCli } = await import("./hook-entry.js");
+    const provider = typeof args.provider === "string" ? args.provider : "claude-code";
+    process.exitCode = await runHookCli(["session-end", "--provider", provider]);
+  }
+});
+var subagentStartSubcommand = defineCommand({
+  meta: {
+    name: "subagent-start",
+    description: "SubagentStart hook (T13667): give harness-spawned subagents the ct-lean rules at the effective level (none at off). Reads the hook JSON on stdin; prints the harness answer."
+  },
+  args: {
+    provider: {
+      type: "string",
+      description: "Harness protocol to answer in: claude-code (default)"
+    }
+  },
+  async run({ args }) {
+    const { runHookCli } = await import("./hook-entry.js");
+    const provider = typeof args.provider === "string" ? args.provider : "claude-code";
+    process.exitCode = await runHookCli(["subagent-start", "--provider", provider]);
+  }
+});
 var hookCommand = defineCommand({
   meta: {
     name: "hook",
-    description: "Agent-harness hooks installed by cleo init/upgrade; stdout is the harness hook protocol, not LAFS: cleo hook heavy-command --provider claude-code|codex|kimi|opencode"
+    description: "Agent-harness hooks installed by cleo init/upgrade; stdout is the harness hook protocol, not LAFS: cleo hook heavy-command|ask-enforce|stop|session-end|subagent-start --provider <harness>"
   },
   subCommands: {
     "heavy-command": heavyCommandSubcommand,
     "ask-enforce": askEnforceSubcommand,
     stop: stopSubcommand,
+    "session-end": sessionEndSubcommand,
+    "subagent-start": subagentStartSubcommand,
     sync: syncSubcommand,
     run: runSubcommand,
     check: checkSubcommand
@@ -212,4 +248,4 @@ var hookCommand = defineCommand({
 export {
   hookCommand
 };
-//# sourceMappingURL=hook-VOHU4YPF.js.map
+//# sourceMappingURL=hook-7L73CHBZ.js.map

package/dist/cli/hook-entry.js

@@ -546,7 +546,24 @@ function claudePreApprovalVerdict(command, cwd, env, core, ctx) {
   const verdict = core.claudePreApproval(command, rules.patterns, { cwd, workingDir: projectDir });
   return verdict.approved ? verdict : { approved: false, reason: `it is not pre-approved: ${verdict.reason}` };
 }
-var USAGE = "usage: cleo hook heavy-command [--provider claude-code|codex|kimi|opencode] < hook-input.json\n       cleo hook ask-enforce [--provider claude-code|codex|copilot-cli|gemini-cli|cursor|opencode|kimi] < stop-input.json\n       cleo hook stop [--provider claude-code|codex] < stop-input.json\n";
+var USAGE = "usage: cleo hook heavy-command [--provider claude-code|codex|kimi|opencode] < hook-input.json\n       cleo hook ask-enforce [--provider claude-code|codex|copilot-cli|gemini-cli|cursor|opencode|kimi] < stop-input.json\n       cleo hook stop [--provider claude-code|codex] < stop-input.json\n       cleo hook session-end [--provider claude-code]\n       cleo hook subagent-start [--provider claude-code] < subagent-start-input.json\n";
+async function runSubagentStart(rest, io) {
+  const entry = await import("./subagent-start-entry-EAXMODIE.js");
+  if (!entry.SUBAGENT_START_PROVIDERS.some((p) => p === providerArg(rest))) {
+    io.writeStderr(USAGE);
+    return 1;
+  }
+  try {
+    const answer = await entry.subagentStartHook(await io.readStdin(), io.env, io.cwd);
+    if (answer !== "") io.writeStdout(answer);
+  } catch (err) {
+    io.writeStderr(
+      `[cleo hook] subagent-start skipped: ${err instanceof Error ? err.message : String(err)}
+`
+    );
+  }
+  return 0;
+}
 function providerArg(rest) {
   const flag = rest.findIndex((a) => a === "--provider" || a.startsWith("--provider="));
   return flag === -1 ? "claude-code" : rest[flag]?.split("=")[1] ?? rest[flag + 1];
@@ -574,7 +591,7 @@ async function runAskEnforce(rest, io) {
   }
 }
 async function runStopDispatch(rest, io) {
-  const entry = await import("./stop-dispatch-entry-RT3MJTWD.js");
+  const entry = await import("./stop-dispatch-entry-2CA4IGQN.js");
   const value = providerArg(rest);
   const provider = entry.STOP_DISPATCH_PROVIDERS.find((p) => p === value);
   if (provider === void 0) {
@@ -583,22 +600,31 @@ async function runStopDispatch(rest, io) {
   }
   const deps = entry.processStopDispatchDeps(provider, io.env);
   try {
-    const endsSession = entry.PROVIDER_ENDS_SESSION[provider];
-    const answer = await entry.stopDispatch(await io.readStdin(), io.env, deps, endsSession);
+    const answer = await entry.stopDispatch(await io.readStdin(), io.env, deps);
     if (answer.stdout !== "") io.writeStdout(answer.stdout);
   } catch (err) {
     io.writeStderr(
       `[cleo hook] stop dispatch failed: ${err instanceof Error ? err.message : String(err)}
 `
     );
-    if (entry.PROVIDER_ENDS_SESSION[provider]) await deps.endSession();
   }
   return 0;
 }
+async function runSessionEnd(rest, io) {
+  const entry = await import("./stop-dispatch-entry-2CA4IGQN.js");
+  if (!entry.SESSION_END_PROVIDERS.some((p) => p === providerArg(rest))) {
+    io.writeStderr(USAGE);
+    return 1;
+  }
+  await entry.sessionEndHook((line) => io.writeStderr(line));
+  return 0;
+}
 async function runHookCli(argv, io = processHookIo()) {
   const [name, ...rest] = argv;
   if (name === "ask-enforce") return runAskEnforce(rest, io);
   if (name === "stop") return runStopDispatch(rest, io);
+  if (name === "session-end") return runSessionEnd(rest, io);
+  if (name === "subagent-start") return runSubagentStart(rest, io);
   if (name !== "heavy-command") {
     io.writeStderr(USAGE);
     return 1;

package/dist/cli/{import-T4QOIUUK.js → import-SD2NNIKN.js}

@@ -15,7 +15,7 @@
 })();
 import {
   dispatchFromCli
-} from "./chunk-L3W2NVWA.js";
+} from "./chunk-VBTCULVY.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -23,10 +23,10 @@ import {
   showUsage
 } from "./chunk-PKKZPOOP.js";
 import "./chunk-QKMBWYAS.js";
-import "./chunk-4RGSNUUP.js";
+import "./chunk-6UGBRRKY.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-GAMCDPPS.js";
+import "./chunk-BFRYJSL5.js";
 
 // packages/cleo/src/cli/commands/import.ts
 var importCommand = defineCommand({
@@ -86,4 +86,4 @@ var importCommand = defineCommand({
 export {
   importCommand
 };
-//# sourceMappingURL=import-T4QOIUUK.js.map
+//# sourceMappingURL=import-SD2NNIKN.js.map

package/dist/cli/{import-tasks-X34KUSKM.js → import-tasks-BMESEONQ.js}

@@ -18,17 +18,17 @@ import {
 } from "./chunk-47JYZAMS.js";
 import {
   dispatchFromCli
-} from "./chunk-L3W2NVWA.js";
+} from "./chunk-VBTCULVY.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
   defineCommand
 } from "./chunk-PKKZPOOP.js";
 import "./chunk-QKMBWYAS.js";
-import "./chunk-4RGSNUUP.js";
+import "./chunk-6UGBRRKY.js";
 import "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-GAMCDPPS.js";
+import "./chunk-BFRYJSL5.js";
 
 // packages/cleo/src/cli/commands/import-tasks.ts
 var importTasksCommand = defineCommand({
@@ -106,4 +106,4 @@ var importTasksCommand = defineCommand({
 export {
   importTasksCommand
 };
-//# sourceMappingURL=import-tasks-X34KUSKM.js.map
+//# sourceMappingURL=import-tasks-BMESEONQ.js.map