@connexum/ai-governance 1.0.0-beta.11

package/dist/hooks/powershell/hook-health-monitor.ps1

@@ -0,0 +1,153 @@
+# hook-health-monitor.ps1 -- Standalone health check for governance hooks.
+#
+# Run periodically to verify:
+#   - All hook files exist and are readable
+#   - Hook files haven't been tampered with (SHA-256 verification)
+#   - Log directories are writable
+#   - No hooks are missing from the configuration
+#
+# T-049: Hook health monitoring.
+#
+# Usage:
+#   pwsh hook-health-monitor.ps1 [-ManifestFile path/to/manifest.json]
+#
+# @connexum/ai-governance
+
+param(
+    [string]$ManifestFile = ''
+)
+
+$ErrorActionPreference = 'Stop'
+
+$hookDir = $PSScriptRoot
+$logDir = if ($env:GOVERNANCE_LOG_DIR) { $env:GOVERNANCE_LOG_DIR } else { Join-Path $env:TEMP 'governance/logs' }
+$errors = 0
+$warnings = 0
+
+New-Item -ItemType Directory -Path $logDir -Force | Out-Null
+
+$timestamp = [DateTime]::UtcNow.ToString('yyyy-MM-ddTHH:mm:ssZ')
+$reportFile = Join-Path $logDir "hook-health-$([DateTime]::UtcNow.ToString('yyyyMMdd')).jsonl"
+
+function Write-Check {
+    param([string]$Status, [string]$Check, [string]$Detail)
+
+    $entry = @{ timestamp = $timestamp; status = $Status; check = $Check; detail = $Detail } | ConvertTo-Json -Compress
+    Add-Content -Path $reportFile -Value $entry -ErrorAction SilentlyContinue
+
+    switch ($Status) {
+        'FAIL' {
+            [Console]::Error.WriteLine("x FAIL: $Check -- $Detail")
+            $script:errors++
+        }
+        'WARN' {
+            [Console]::Error.WriteLine("! WARN: $Check -- $Detail")
+            $script:warnings++
+        }
+        default {
+            [Console]::Error.WriteLine("v PASS: $Check")
+        }
+    }
+}
+
+# --- 1. Check PowerShell version ---
+if ($PSVersionTable.PSVersion.Major -ge 7) {
+    Write-Check 'PASS' 'powershell:version' "PowerShell $($PSVersionTable.PSVersion)"
+} else {
+    Write-Check 'WARN' 'powershell:version' "PowerShell $($PSVersionTable.PSVersion) -- recommend 7+"
+}
+
+# --- 2. Check hook files exist ---
+$expectedHooks = @(
+    'governance-file-shield.ps1'
+    'destructive-command-guard.ps1'
+    'secret-leak-scanner.ps1'
+    'hook-utils.ps1'
+    'output-exfiltration-scanner.ps1'
+    'hook-health-monitor.ps1'
+)
+
+foreach ($hook in $expectedHooks) {
+    $hookPath = Join-Path $hookDir $hook
+
+    if (-not (Test-Path $hookPath)) {
+        Write-Check 'FAIL' "hook:exists:$hook" 'File not found'
+        continue
+    }
+
+    # Check for valid PowerShell header
+    $firstLine = Get-Content $hookPath -TotalCount 1
+    if ($firstLine -notmatch '^#') {
+        Write-Check 'WARN' "hook:header:$hook" "Non-standard header: $firstLine"
+    }
+
+    Write-Check 'PASS' "hook:exists:$hook" 'Present and readable'
+}
+
+# --- 3. SHA-256 integrity verification ---
+if ($ManifestFile -and (Test-Path $ManifestFile)) {
+    try {
+        $manifestData = Get-Content $ManifestFile -Raw | ConvertFrom-Json
+        foreach ($hookEntry in $manifestData.hooks) {
+            $fullPath = Join-Path $hookDir $hookEntry.file
+            if (Test-Path $fullPath) {
+                $actualHash = (Get-FileHash -Path $fullPath -Algorithm SHA256).Hash.ToLower()
+                if ($actualHash -eq $hookEntry.sha256) {
+                    Write-Check 'PASS' "integrity:$($hookEntry.file)" 'Hash matches'
+                } else {
+                    Write-Check 'FAIL' "integrity:$($hookEntry.file)" "TAMPERED: expected=$($hookEntry.sha256) actual=$actualHash"
+                }
+            }
+        }
+    } catch {
+        Write-Check 'WARN' 'integrity:manifest' "Could not parse manifest: $_"
+    }
+} else {
+    Write-Check 'WARN' 'integrity:manifest' 'No manifest file provided (use -ManifestFile)'
+}
+
+# --- 4. Check log directories ---
+$governanceAuditDir = if ($env:GOVERNANCE_AUDIT_DIR) { $env:GOVERNANCE_AUDIT_DIR } else { Join-Path $env:TEMP 'governance/audit' }
+
+foreach ($dir in @($logDir, $governanceAuditDir)) {
+    if (Test-Path $dir) {
+        try {
+            $testFile = Join-Path $dir '.write-test'
+            Set-Content -Path $testFile -Value 'test' -ErrorAction Stop
+            Remove-Item $testFile -ErrorAction SilentlyContinue
+            Write-Check 'PASS' "dir:writable:$dir" 'Writable'
+        } catch {
+            Write-Check 'FAIL' "dir:writable:$dir" 'Not writable'
+        }
+    } else {
+        Write-Check 'WARN' "dir:exists:$dir" 'Does not exist (will be created on first use)'
+    }
+}
+
+# --- 5. Check disk space ---
+try {
+    $drive = (Get-Item $logDir -ErrorAction SilentlyContinue).PSDrive
+    if ($drive) {
+        $freeGB = [math]::Round($drive.Free / 1GB, 2)
+        if ($freeGB -lt 0.1) {
+            Write-Check 'WARN' 'disk:space' "Low disk space: ${freeGB}GB available"
+        } else {
+            Write-Check 'PASS' 'disk:space' "${freeGB}GB available"
+        }
+    }
+} catch { }
+
+# --- Summary ---
+[Console]::Error.WriteLine('')
+[Console]::Error.WriteLine("Hook Health Summary: $errors errors, $warnings warnings")
+
+$summaryEntry = @{
+    timestamp = $timestamp
+    status = if ($errors -gt 0) { 'UNHEALTHY' } else { 'HEALTHY' }
+    errors = $errors
+    warnings = $warnings
+} | ConvertTo-Json -Compress
+Add-Content -Path $reportFile -Value $summaryEntry -ErrorAction SilentlyContinue
+
+if ($errors -gt 0) { exit 1 }
+exit 0

package/dist/hooks/powershell/hook-utils.ps1

@@ -0,0 +1,44 @@
+# hook-utils.ps1 -- Shared validation for all governance hooks.
+#
+# Dot-source this file at the top of every hook script:
+#   . "$PSScriptRoot\hook-utils.ps1"
+#
+# Provides:
+#   Read-HookInput  - Read and validate stdin JSON
+#   $Script:HookInput     - Validated JSON object
+#   $Script:HookToolName  - Extracted tool_name
+#   $Script:HookToolInput - Extracted tool_input
+#
+# @connexum/ai-governance
+
+$Script:MAX_INPUT_BYTES = 1048576
+
+function Read-HookInput {
+    # Read all stdin
+    $rawInput = [Console]::In.ReadToEnd()
+
+    # Check input size
+    $inputSize = [System.Text.Encoding]::UTF8.GetByteCount($rawInput)
+    if ($inputSize -gt $Script:MAX_INPUT_BYTES) {
+        [Console]::Error.WriteLine("BLOCKED: Hook input exceeds maximum size ($inputSize bytes > $($Script:MAX_INPUT_BYTES) bytes). Possible injection attempt.")
+        exit 2
+    }
+
+    # Check for empty input
+    if ([string]::IsNullOrWhiteSpace($rawInput)) {
+        exit 0
+    }
+
+    # Validate JSON structure
+    try {
+        $Script:HookInput = $rawInput | ConvertFrom-Json
+    }
+    catch {
+        [Console]::Error.WriteLine("BLOCKED: Hook input is not valid JSON. Possible injection attempt.")
+        exit 2
+    }
+
+    # Extract top-level fields
+    $Script:HookToolName = if ($Script:HookInput.tool_name) { $Script:HookInput.tool_name } else { '' }
+    $Script:HookToolInput = if ($Script:HookInput.tool_input) { $Script:HookInput.tool_input } else { '' }
+}

package/dist/hooks/powershell/hook-wrapper.ps1

@@ -0,0 +1,67 @@
+# hook-wrapper.ps1 -- Universal wrapper that respects runtime controls
+# Wraps any governance hook with profile checking and disable controls.
+# Usage: pwsh hook-wrapper.ps1 <actual-hook.ps1>
+#
+# Environment variables:
+#   CXNI_HOOK_PROFILE     - minimal|standard|strict (default: standard)
+#   CXNI_DISABLED_HOOKS   - comma-separated list of hook names to skip
+#   CXNI_MAINTENANCE_MODE - true to disable ALL blocking hooks (audit-only)
+#
+# Part of @connexum/ai-governance
+
+param(
+    [Parameter(Position = 0, Mandatory = $true)]
+    [string]$HookScript
+)
+
+if (-not (Test-Path $HookScript)) { exit 0 }
+
+$hookName = [System.IO.Path]::GetFileNameWithoutExtension($HookScript)
+
+# Check if hook is explicitly disabled
+if ($env:CXNI_DISABLED_HOOKS) {
+    $disabled = $env:CXNI_DISABLED_HOOKS -split ',' | ForEach-Object { $_.Trim() }
+    if ($hookName -in $disabled) { exit 0 }
+}
+
+# In maintenance mode, convert all blocking hooks to audit-only
+if ($env:CXNI_MAINTENANCE_MODE -eq 'true') {
+    $input_data = [Console]::In.ReadToEnd()
+    try {
+        $output = $input_data | pwsh -File $HookScript 2>&1
+        foreach ($line in $output) {
+            [Console]::Error.WriteLine("[MAINTENANCE] $line")
+        }
+    } catch { }
+    exit 0
+}
+
+# Check profile-based activation
+$profile = if ($env:CXNI_HOOK_PROFILE) { $env:CXNI_HOOK_PROFILE } else { 'standard' }
+
+# Profile hierarchy: strict includes standard includes minimal
+$hookProfiles = @{
+    'governance-file-shield' = 'minimal'
+    'secret-leak-scanner' = 'minimal'
+    'destructive-command-guard' = 'minimal'
+    'web-access-gate' = 'standard'
+    'audit-logger' = 'standard'
+    'file-boundary-guard' = 'strict'
+    'cost-budget-gate' = 'strict'
+    'token-tracker' = 'strict'
+    'file-change-tracker' = 'strict'
+    'governance-integrity-check' = 'minimal'
+}
+
+$requiredProfile = if ($hookProfiles.ContainsKey($hookName)) { $hookProfiles[$hookName] } else { 'standard' }
+
+$profileRanks = @{ 'minimal' = 1; 'standard' = 2; 'strict' = 3 }
+$profileRank = if ($profileRanks.ContainsKey($profile)) { $profileRanks[$profile] } else { 0 }
+$requiredRank = if ($profileRanks.ContainsKey($requiredProfile)) { $profileRanks[$requiredProfile] } else { 0 }
+
+if ($profileRank -lt $requiredRank) { exit 0 }
+
+# Run the actual hook -- pass stdin through
+$input_data = [Console]::In.ReadToEnd()
+$input_data | pwsh -File $HookScript
+exit $LASTEXITCODE

package/dist/hooks/powershell/install-hooks.ps1

@@ -0,0 +1,142 @@
+# install-hooks.ps1 -- Installs AI Governance hooks into a Claude Code project (Windows)
+# Usage: pwsh install-hooks.ps1 [-Profile minimal|standard|strict] [-ProjectDir /path]
+#
+# This is the entry point for hook installation. It:
+# 1. Copies hook scripts to .claude/hooks/ (or project-specific location)
+# 2. Creates governance config files
+# 3. Sets up directory structure
+#
+# Part of @connexum/ai-governance
+
+param(
+    [ValidateSet('minimal', 'standard', 'strict')]
+    [string]$Profile = 'standard',
+
+    [string]$ProjectDir = '.'
+)
+
+$ErrorActionPreference = 'Stop'
+
+$scriptDir = $PSScriptRoot
+
+Write-Host "Installing AI Governance hooks (PowerShell)..."
+Write-Host "  Profile: $Profile"
+Write-Host "  Project: $ProjectDir"
+
+# Create directories
+$hooksDir = Join-Path $ProjectDir '.claude/hooks'
+$govDir = Join-Path $ProjectDir '.claude/governance'
+$auditDir = Join-Path $govDir 'audit'
+$tokenTrackDir = Join-Path $govDir 'token-tracking'
+$fileChangesDir = Join-Path $govDir 'file-changes'
+
+foreach ($dir in @($hooksDir, $govDir, $auditDir, $tokenTrackDir, $fileChangesDir)) {
+    New-Item -ItemType Directory -Path $dir -Force | Out-Null
+}
+
+# Define hooks by profile
+$preToolMinimal = @(
+    'governance-file-shield.ps1'
+    'secret-leak-scanner.ps1'
+    'destructive-command-guard.ps1'
+)
+
+$preToolStandard = $preToolMinimal + @('web-access-gate.ps1')
+$preToolStrict = $preToolStandard + @('file-boundary-guard.ps1', 'cost-budget-gate.ps1')
+
+$postToolMinimal = @()
+$postToolStandard = @('audit-logger.ps1')
+$postToolStrict = @('audit-logger.ps1', 'token-tracker.ps1', 'file-change-tracker.ps1')
+
+$sessionHooks = @('governance-integrity-check.ps1')
+
+# Select hooks based on profile
+switch ($Profile) {
+    'minimal' {
+        $preToolHooks = $preToolMinimal
+        $postToolHooks = $postToolMinimal
+    }
+    'standard' {
+        $preToolHooks = $preToolStandard
+        $postToolHooks = $postToolStandard
+    }
+    'strict' {
+        $preToolHooks = $preToolStrict
+        $postToolHooks = $postToolStrict
+    }
+}
+
+# Copy hooks
+$installed = 0
+
+foreach ($hook in $preToolHooks) {
+    $source = Join-Path $scriptDir $hook
+    if (Test-Path $source) {
+        Copy-Item $source (Join-Path $hooksDir $hook) -Force
+        $installed++
+        Write-Host "  Installed PreToolUse: $hook"
+    }
+}
+
+foreach ($hook in $postToolHooks) {
+    $source = Join-Path $scriptDir $hook
+    if (Test-Path $source) {
+        Copy-Item $source (Join-Path $hooksDir $hook) -Force
+        $installed++
+        Write-Host "  Installed PostToolUse: $hook"
+    }
+}
+
+foreach ($hook in $sessionHooks) {
+    $source = Join-Path $scriptDir $hook
+    if (Test-Path $source) {
+        Copy-Item $source (Join-Path $hooksDir $hook) -Force
+        $installed++
+        Write-Host "  Installed SessionStart: $hook"
+    }
+}
+
+# Copy shared utilities
+$utilsSource = Join-Path $scriptDir 'hook-utils.ps1'
+if (Test-Path $utilsSource) {
+    Copy-Item $utilsSource (Join-Path $hooksDir 'hook-utils.ps1') -Force
+}
+
+# Copy wrapper
+$wrapperSource = Join-Path $scriptDir 'hook-wrapper.ps1'
+if (Test-Path $wrapperSource) {
+    Copy-Item $wrapperSource (Join-Path $hooksDir 'hook-wrapper.ps1') -Force
+}
+
+# Create default governance config
+$protectedConf = Join-Path $govDir 'protected-files.conf'
+if (-not (Test-Path $protectedConf)) {
+    @(
+        '# Protected files -- these cannot be modified by AI agents'
+        '# Add one pattern per line. Lines starting with # are comments.'
+        'SOUL.md'
+        'governance.md'
+        'GOVERNANCE_RULES.md'
+        'ROUTING_RULES.md'
+        'agent-web-permissions.md'
+        'web-interaction-security.md'
+    ) | Set-Content $protectedConf
+    Write-Host "  Created: protected-files.conf"
+}
+
+# Create hook profile marker
+Set-Content (Join-Path $govDir '.hook-profile') $Profile
+
+Write-Host ""
+Write-Host "Installed $installed hooks ($Profile profile)."
+Write-Host ""
+Write-Host "Next steps:"
+Write-Host "  1. Register hooks in your Claude Code settings (see docs)"
+Write-Host "  2. Configure project-boundaries.conf if using strict profile"
+Write-Host "  3. Configure token-budget.json if using cost budget gate"
+Write-Host "  4. Run a session to verify hooks are active"
+Write-Host ""
+Write-Host "Runtime controls:"
+Write-Host "  `$env:CXNI_HOOK_PROFILE = 'minimal|standard|strict'"
+Write-Host "  `$env:CXNI_DISABLED_HOOKS = 'comma,separated,hook,names'"
+Write-Host "  `$env:CXNI_MAINTENANCE_MODE = 'true'  (disables all blocking hooks)"

package/dist/hooks/powershell/output-exfiltration-scanner.ps1

@@ -0,0 +1,85 @@
+# output-exfiltration-scanner.ps1 -- PostToolUse hook
+#
+# Detects potential data exfiltration attempts in tool outputs:
+#   - Encoded data (base64 blobs, hex dumps)
+#   - Sensitive patterns in outputs (credentials, tokens)
+#   - Suspicious URL patterns in outputs
+#
+# T-048: Output exfiltration scanning.
+#
+# @connexum/ai-governance
+
+$rawInput = [Console]::In.ReadToEnd()
+
+if ([string]::IsNullOrWhiteSpace($rawInput)) { exit 0 }
+
+try { $input_obj = $rawInput | ConvertFrom-Json } catch { exit 0 }
+
+$toolName = if ($input_obj.tool_name) { $input_obj.tool_name } else { '' }
+$toolOutput = if ($input_obj.tool_output) { $input_obj.tool_output.ToString() }
+               elseif ($input_obj.output) { $input_obj.output.ToString() }
+               else { '' }
+
+if (-not $toolOutput) { exit 0 }
+
+$violations = @()
+
+# 1. Large base64 blobs (>500 chars of continuous base64)
+if ($toolOutput -match '[A-Za-z0-9+/]{500,}={0,2}') {
+    $violations += 'Large base64 blob detected in output (potential encoded data exfiltration)'
+}
+
+# 2. Long hex dumps (>200 chars of continuous hex)
+if ($toolOutput -match '([0-9a-fA-F]{2}\s?){100,}') {
+    $violations += 'Large hex dump in output (potential binary data exfiltration)'
+}
+
+# 3. Credential patterns in output
+if ($toolOutput -match '(?i)(api[_-]?key|secret[_-]?key|access[_-]?token|bearer|authorization)\s*[:=]\s*[A-Za-z0-9+/_.=-]{20,}') {
+    $violations += 'Credential/token pattern detected in output'
+}
+
+# 4. AWS-style keys in output
+if ($toolOutput -match 'AKIA[0-9A-Z]{16}') {
+    $violations += 'AWS access key detected in output'
+}
+
+# 5. Private key material
+if ($toolOutput -match '-----BEGIN (RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----') {
+    $violations += 'Private key material detected in output'
+}
+
+# 6. Connection strings with credentials
+if ($toolOutput -match '(?i)(postgres|mysql|mongodb|redis)://[^:]+:[^@]+@') {
+    $violations += 'Database connection string with credentials in output'
+}
+
+# 7. JWT tokens
+if ($toolOutput -match 'eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}') {
+    $violations += 'JWT token detected in output'
+}
+
+# Report violations
+$logDir = if ($env:GOVERNANCE_LOG_DIR) { $env:GOVERNANCE_LOG_DIR } else { Join-Path $env:TEMP 'governance/logs' }
+try { New-Item -ItemType Directory -Path $logDir -Force | Out-Null } catch { }
+$logFile = Join-Path $logDir 'exfiltration-scan.jsonl'
+
+if ($violations.Count -gt 0) {
+    $timestamp = [DateTime]::UtcNow.ToString('yyyy-MM-ddTHH:mm:ssZ')
+
+    foreach ($violation in $violations) {
+        $entry = @{
+            timestamp = $timestamp
+            tool = $toolName
+            violation = $violation
+            action = 'WARN'
+        } | ConvertTo-Json -Compress
+
+        try { Add-Content -Path $logFile -Value $entry -ErrorAction SilentlyContinue } catch { }
+        [Console]::Error.WriteLine("EXFILTRATION WARNING: $violation (tool: $toolName)")
+    }
+
+    exit 0
+}
+
+exit 0

package/dist/hooks/powershell/secret-leak-scanner.ps1

@@ -0,0 +1,105 @@
+# secret-leak-scanner.ps1 -- PreToolUse hook
+# Scans file write content for API keys, tokens, passwords, .env patterns.
+# Prevents accidental secret commits.
+# Exit code 2 = block. Exit code 0 = allow.
+#
+# Part of @connexum/ai-governance
+
+$ErrorActionPreference = 'Stop'
+
+$rawInput = [Console]::In.ReadToEnd()
+
+if ([string]::IsNullOrWhiteSpace($rawInput)) { exit 0 }
+
+try { $input_obj = $rawInput | ConvertFrom-Json } catch { exit 0 }
+
+$toolName = if ($input_obj.tool_name) { $input_obj.tool_name } else { '' }
+$toolInput = $input_obj.tool_input
+
+# Only gate write tools and git commands
+switch ($toolName) {
+    { $_ -in 'Write', 'Edit', 'NotebookEdit' } { break }
+    'Bash' {
+        $command = if ($toolInput.command) { $toolInput.command } else { '' }
+        if (-not $command) { exit 0 }
+        # Block git add of .env files
+        if ($command -match 'git\s+add\s+.*\.env\b') {
+            [Console]::Error.WriteLine("BLOCKED: Attempted to stage .env file for commit. Secrets must not be committed.")
+            exit 2
+        }
+        # Block git add of common credential files
+        if ($command -match 'git\s+add\s+.*(credentials\.json|service-account\.json|\.pem$|\.key$|id_rsa|id_ed25519)') {
+            [Console]::Error.WriteLine("BLOCKED: Attempted to stage sensitive credential file for commit.")
+            exit 2
+        }
+        exit 0
+    }
+    default { exit 0 }
+}
+
+# Get content being written
+$content = if ($toolInput.content) { $toolInput.content }
+            elseif ($toolInput.new_string) { $toolInput.new_string }
+            else { '' }
+
+$filePath = if ($toolInput.file_path) { $toolInput.file_path }
+             elseif ($toolInput.path) { $toolInput.path }
+             else { '' }
+
+if (-not $content) { exit 0 }
+
+$fileName = if ($filePath) { [System.IO.Path]::GetFileName($filePath) } else { '' }
+
+# Secret patterns (high confidence only)
+$secretPatterns = @(
+    @{ Pattern = 'sk-[a-zA-Z0-9]{20,}'; Description = 'Anthropic/OpenAI API key' }
+    @{ Pattern = 'AKIA[0-9A-Z]{16}'; Description = 'AWS Access Key ID' }
+    @{ Pattern = 'ghp_[a-zA-Z0-9]{36}'; Description = 'GitHub Personal Access Token' }
+    @{ Pattern = 'gho_[a-zA-Z0-9]{36}'; Description = 'GitHub OAuth Token' }
+    @{ Pattern = 'glpat-[a-zA-Z0-9_-]{20,}'; Description = 'GitLab Personal Access Token' }
+    @{ Pattern = 'xoxb-[0-9]{10,}-[a-zA-Z0-9]{20,}'; Description = 'Slack Bot Token' }
+    @{ Pattern = 'xoxp-[0-9]{10,}-[a-zA-Z0-9]{20,}'; Description = 'Slack User Token' }
+    @{ Pattern = 'SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43}'; Description = 'SendGrid API Key' }
+    @{ Pattern = 'sq0atp-[a-zA-Z0-9_-]{22}'; Description = 'Square Access Token' }
+    @{ Pattern = 'sk_live_[a-zA-Z0-9]{24,}'; Description = 'Stripe Live Secret Key' }
+    @{ Pattern = 'rk_live_[a-zA-Z0-9]{24,}'; Description = 'Stripe Live Restricted Key' }
+    @{ Pattern = 'pk_live_[a-zA-Z0-9]{24,}'; Description = 'Stripe Live Publishable Key' }
+    @{ Pattern = '-----BEGIN (RSA |EC |DSA )?PRIVATE KEY-----'; Description = 'Private Key' }
+    @{ Pattern = 'DATABASE_URL\s*=\s*postgres(ql)?://[^"''\s]+@[^"''\s]+'; Description = 'Database connection string with credentials' }
+    @{ Pattern = 'RESEND_API_KEY\s*=\s*re_[a-zA-Z0-9]{20,}'; Description = 'Resend API Key' }
+)
+
+# PHI/PII patterns (HIPAA, GDPR, PCI DSS)
+$phiPiiPatterns = @(
+    @{ Pattern = '[0-9]{3}-[0-9]{2}-[0-9]{4}'; Description = 'SSN (Social Security Number)' }
+    @{ Pattern = '\b[0-9]{4}[\s-]?[0-9]{4}[\s-]?[0-9]{4}[\s-]?[0-9]{4}\b'; Description = 'Possible credit card number (PCI DSS)' }
+    @{ Pattern = 'MRN[:\s]*[0-9]{6,}'; Description = 'Medical Record Number (HIPAA PHI)' }
+    @{ Pattern = 'DOB[:\s]*[0-9]{1,2}[/-][0-9]{1,2}[/-][0-9]{2,4}'; Description = 'Date of Birth (PHI/PII)' }
+    @{ Pattern = 'patient[_\s]?(name|id|ssn|dob)[:\s]*[A-Za-z0-9]'; Description = 'Patient identifier (HIPAA PHI)' }
+    @{ Pattern = 'health[_\s]?plan[_\s]?(id|number)[:\s]*[A-Za-z0-9]'; Description = 'Health Plan ID (HIPAA PHI)' }
+)
+
+foreach ($entry in $secretPatterns) {
+    if ($content -match $entry.Pattern) {
+        [Console]::Error.WriteLine("BLOCKED: Secret detected in file write -- $($entry.Description)")
+        [Console]::Error.WriteLine("File: $filePath")
+        [Console]::Error.WriteLine("Remove the secret and use environment variables instead.")
+        exit 2
+    }
+}
+
+# Scan for PHI/PII in non-test, non-hook files
+$skipPhi = $fileName -match '\.(test|spec)\.' -or $fileName -match '\.(sh|ps1|md)$' -or
+           $fileName -eq 'data-classifier.ts' -or $fileName -eq 'encryption-layer.ts'
+
+if (-not $skipPhi) {
+    foreach ($entry in $phiPiiPatterns) {
+        if ($content -match $entry.Pattern) {
+            [Console]::Error.WriteLine("WARNING: Possible sensitive data detected -- $($entry.Description)")
+            [Console]::Error.WriteLine("File: $filePath")
+            [Console]::Error.WriteLine("Ensure this data is redacted or encrypted before storage.")
+        }
+    }
+}
+
+exit 0

package/dist/hooks/powershell/token-tracker.ps1

@@ -0,0 +1,83 @@
+# token-tracker.ps1 -- PostToolUse hook (matcher: Agent)
+# Records token usage per Agent tool call for anomaly detection baselines.
+# Never blocks (always exits 0).
+#
+# Part of @connexum/ai-governance
+
+$rawInput = [Console]::In.ReadToEnd()
+
+if ([string]::IsNullOrWhiteSpace($rawInput)) { exit 0 }
+
+try { $input_obj = $rawInput | ConvertFrom-Json } catch { exit 0 }
+
+$toolName = if ($input_obj.tool_name) { $input_obj.tool_name } else { '' }
+
+# Only track Agent calls (which consume API tokens)
+if ($toolName -ne 'Agent') { exit 0 }
+
+$agentName = if ($input_obj.agent_name) { $input_obj.agent_name } else { 'unknown' }
+$timestamp = [DateTime]::UtcNow.ToString('yyyy-MM-ddTHH:mm:ssZ')
+
+# Extract usage from tool result if available
+$toolResult = if ($input_obj.tool_result) { $input_obj.tool_result.ToString() } else { '' }
+$totalTokens = 0
+$durationMs = 0
+
+if ($toolResult -match 'total_tokens:\s*(\d+)') { $totalTokens = [int]$Matches[1] }
+if ($toolResult -match 'duration_ms:\s*(\d+)') { $durationMs = [int]$Matches[1] }
+
+# Token tracking directory
+$trackDir = $null
+foreach ($candidate in @(
+    '.claude/governance/token-tracking',
+    '.claude/cost-tracking',
+    'GOVERNANCE/token-tracking'
+)) {
+    if (Test-Path $candidate) {
+        $trackDir = $candidate
+        break
+    }
+    try {
+        New-Item -ItemType Directory -Path $candidate -Force | Out-Null
+        $trackDir = $candidate
+        break
+    } catch { continue }
+}
+
+if (-not $trackDir) { exit 0 }
+
+$trackFile = Join-Path $trackDir "tokens-$([DateTime]::UtcNow.ToString('yyyy-MM-dd')).jsonl"
+
+$entry = @{
+    timestamp = $timestamp
+    agent = $agentName
+    tokens = $totalTokens
+    duration_ms = $durationMs
+} | ConvertTo-Json -Compress
+
+try {
+    Add-Content -Path $trackFile -Value $entry -ErrorAction SilentlyContinue
+} catch { }
+
+# Update running session total for budget gate
+$budgetFile = $null
+foreach ($candidate in @(
+    '.claude/governance/token-budget.json',
+    '.claude/cost-tracking/budget.json'
+)) {
+    if (Test-Path $candidate) {
+        $budgetFile = $candidate
+        break
+    }
+}
+
+if ($budgetFile -and $totalTokens -gt 0) {
+    try {
+        $budget = Get-Content $budgetFile -Raw | ConvertFrom-Json
+        $current = if ($budget.current_session_tokens) { [int]$budget.current_session_tokens } else { 0 }
+        $budget.current_session_tokens = $current + $totalTokens
+        $budget | ConvertTo-Json | Set-Content $budgetFile
+    } catch { }
+}
+
+exit 0