@h-rig/core 0.0.6-alpha.164 → 0.0.6-alpha.166

package/dist/src/capability-loaders.js

@@ -313,8 +313,8 @@ function loadDeclarativeConfig(path) {
 }
 
 // packages/core/src/load-config.ts
-var TS_NAMES = ["rig.config.ts", "rig.config.mts"];
-var JSON_NAMES = ["rig.config.json"];
+var TS_NAMES = [".rig/rig.config.ts", ".rig/rig.config.mts"];
+var JSON_NAMES = [".rig/rig.config.json"];
 function isModuleResolutionError(error) {
   const message = error instanceof Error ? error.message : String(error);
   return message.includes("Cannot find module") || message.includes("Could not resolve");
@@ -649,7 +649,7 @@ async function loadConfig(cwd) {
       return decodeExplicitPluginConfig(raw);
     }
   }
-  throw new Error(`no rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
+  throw new Error(`no .rig/rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
 }
 function decodeExplicitPluginConfig(raw) {
   const withDefaults = applyConfigDefaults(raw);
@@ -662,10 +662,19 @@ function decodeExplicitPluginConfig(raw) {
 }
 
 // packages/core/src/project-plugins.ts
-var RIG_CONFIG_FILENAMES = ["rig.config.ts", "rig.config.mts", "rig.config.json"];
+var TS_CONFIG_FILENAMES = ["rig.config.ts", "rig.config.mts"];
+var JSON_CONFIG_FILENAMES = ["rig.config.json"];
 function findProjectConfigPath(projectRoot) {
-  for (const name of RIG_CONFIG_FILENAMES) {
-    const path = resolve2(projectRoot, name);
+  for (const name of TS_CONFIG_FILENAMES) {
+    const path = resolve2(projectRoot, ".rig", name);
+    if (existsSync3(path))
+      return path;
+  }
+  const declarativePath = findDeclarativeConfigPath(projectRoot);
+  if (declarativePath)
+    return declarativePath;
+  for (const name of JSON_CONFIG_FILENAMES) {
+    const path = resolve2(projectRoot, ".rig", name);
     if (existsSync3(path))
       return path;
   }

package/dist/src/default-kernel.d.ts

@@ -0,0 +1 @@
+export { createDefaultKernel, createDefaultKernelPlugin, createPlacementTransportPlugin, } from "@rig/kernel-seed/default-kernel";

package/dist/src/default-kernel.js

@@ -0,0 +1,12 @@
+// @bun
+// packages/core/src/default-kernel.ts
+import {
+  createDefaultKernel,
+  createDefaultKernelPlugin,
+  createPlacementTransportPlugin
+} from "@rig/kernel-seed/default-kernel";
+export {
+  createPlacementTransportPlugin,
+  createDefaultKernelPlugin,
+  createDefaultKernel
+};

package/dist/src/hook-materializer.js

@@ -1,12 +1,16 @@
 // @bun
 // packages/core/src/hook-materializer.ts
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, writeFileSync } from "fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync } from "fs";
 import { dirname, resolve as resolve2 } from "path";
 
 // packages/core/src/hook-runtime.ts
-import { existsSync, readFileSync, realpathSync, writeSync } from "fs";
+import { appendFileSync, existsSync, mkdirSync, readFileSync, realpathSync, writeSync } from "fs";
 import { resolve } from "path";
 import { RIG_DEFINITION_DIRNAME, RIG_STATE_DIRNAME } from "@rig/contracts";
+function bunRuntime() {
+  const runtime = globalThis;
+  return runtime.Bun;
+}
 function normalizeBuildConfig(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     return {};
@@ -30,7 +34,11 @@ function readBuildConfigForCoreHooks() {
 var BUILD_CONFIG = readBuildConfigForCoreHooks();
 var BAKED_PROJECT_ROOT = BUILD_CONFIG.AGENT_PROJECT_ROOT ?? "";
 var BAKED_TASK_ID = BUILD_CONFIG.AGENT_TASK_ID ?? "";
+var BAKED_STATE_DIR = BUILD_CONFIG.AGENT_STATE_DIR ?? "";
 var BAKED_BUN_PATH = BUILD_CONFIG.AGENT_BUN_PATH ?? "";
+var BAKED_TASK_CONFIG = BUILD_CONFIG.AGENT_TASK_CONFIG ?? "";
+var BAKED_POLICY_CONTENT = BUILD_CONFIG.AGENT_POLICY_CONTENT ?? "";
+var BAKED_TASK_SCOPES = BUILD_CONFIG.AGENT_TASK_SCOPES ?? "";
 function normalizeExecutablePath(candidate) {
   if (!candidate) {
     return "";
@@ -54,8 +62,7 @@ function resolveBunBinaryPath() {
   if (explicit) {
     return explicit;
   }
-  const bunGlobal = globalThis.Bun;
-  const bunWhich = bunGlobal?.which?.("bun");
+  const bunWhich = bunRuntime()?.which?.("bun");
   const pathBun = normalizeExecutablePath(bunWhich?.trim());
   if (pathBun && !looksLikeRuntimeGateway(pathBun)) {
     return pathBun;
@@ -245,7 +252,7 @@ function writeClaudeCodeHookSettings(projectRoot, entries) {
   const settingsPath = resolve2(projectRoot, ".claude", "settings.json");
   const existing = existsSync2(settingsPath) ? safeReadJson(settingsPath) : {};
   const { settings, events } = applyClaudeCodeSessionHooksToSettings(existing, entries, projectRoot);
-  mkdirSync(dirname(settingsPath), { recursive: true });
+  mkdirSync2(dirname(settingsPath), { recursive: true });
   writeFileSync(settingsPath, `${JSON.stringify(settings, null, 2)}
 `, "utf-8");
   return {

package/dist/src/hook-protocol.d.ts

@@ -0,0 +1,2 @@
+export type { HookInput, ParsedHookInput, TypedHookOptions } from "./hook-runtime";
+export { BAKED_BUN_PATH, BAKED_POLICY_CONTENT, BAKED_PROJECT_ROOT, BAKED_STATE_DIR, BAKED_TASK_CONFIG, BAKED_TASK_ID, BAKED_TASK_SCOPES, block, buildPluginHookContext, escapeRegExp, extractToolFilePaths, hookResultToProtocol, isTestFilePath, readHookInput, resolveBunCli, resolveBunCliInvocation, resolvePolicyContent, resolveProjectRoot, resolveTaskConfig, resolveTaskIdForHook, resolveTaskScopes, runTypedHook, } from "./hook-runtime";

package/dist/src/hook-protocol.js

@@ -0,0 +1,462 @@
+// @bun
+// packages/core/src/hook-runtime.ts
+import { appendFileSync, existsSync, mkdirSync, readFileSync, realpathSync, writeSync } from "fs";
+import { resolve } from "path";
+import { RIG_DEFINITION_DIRNAME, RIG_STATE_DIRNAME } from "@rig/contracts";
+function bunRuntime() {
+  const runtime = globalThis;
+  return runtime.Bun;
+}
+function normalizeBuildConfig(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    return {};
+  }
+  return Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[1] === "string"));
+}
+function readBuildConfigForCoreHooks() {
+  if (typeof __RIG_BUILD_CONFIG__ !== "undefined") {
+    return normalizeBuildConfig(__RIG_BUILD_CONFIG__);
+  }
+  const raw = process.env.RIG_BUILD_CONFIG_JSON?.trim();
+  if (!raw) {
+    return {};
+  }
+  try {
+    return normalizeBuildConfig(JSON.parse(raw));
+  } catch {
+    return {};
+  }
+}
+var BUILD_CONFIG = readBuildConfigForCoreHooks();
+var BAKED_PROJECT_ROOT = BUILD_CONFIG.AGENT_PROJECT_ROOT ?? "";
+var BAKED_TASK_ID = BUILD_CONFIG.AGENT_TASK_ID ?? "";
+var BAKED_STATE_DIR = BUILD_CONFIG.AGENT_STATE_DIR ?? "";
+var BAKED_BUN_PATH = BUILD_CONFIG.AGENT_BUN_PATH ?? "";
+var BAKED_TASK_CONFIG = BUILD_CONFIG.AGENT_TASK_CONFIG ?? "";
+var BAKED_POLICY_CONTENT = BUILD_CONFIG.AGENT_POLICY_CONTENT ?? "";
+var BAKED_TASK_SCOPES = BUILD_CONFIG.AGENT_TASK_SCOPES ?? "";
+var RUNTIME_CONTEXT_ENV = "RIG_RUNTIME_CONTEXT_FILE";
+function isPlainObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isStringArray(value) {
+  return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function loadHookContextFromEnv() {
+  const contextFile = process.env[RUNTIME_CONTEXT_ENV]?.trim();
+  let filePath = contextFile || "";
+  if (!filePath) {
+    let current = resolve(process.cwd());
+    while (true) {
+      const candidate = resolve(current, "runtime-context.json");
+      if (existsSync(candidate)) {
+        filePath = candidate;
+        break;
+      }
+      const parent = resolve(current, "..");
+      if (parent === current) {
+        break;
+      }
+      current = parent;
+    }
+  }
+  if (!filePath || !existsSync(filePath)) {
+    return null;
+  }
+  try {
+    const raw = JSON.parse(readFileSync(filePath, "utf-8"));
+    if (!isPlainObject(raw)) {
+      return null;
+    }
+    const taskId = typeof raw.taskId === "string" ? raw.taskId : "";
+    const role = typeof raw.role === "string" ? raw.role : "";
+    const scopes = isStringArray(raw.scopes) ? raw.scopes : [];
+    const validation = isStringArray(raw.validation) ? raw.validation : [];
+    const hostProjectRoot = typeof raw.hostProjectRoot === "string" ? raw.hostProjectRoot : undefined;
+    const monorepoMainRoot = typeof raw.monorepoMainRoot === "string" ? raw.monorepoMainRoot : undefined;
+    const stateDir = typeof raw.stateDir === "string" ? raw.stateDir : "";
+    const policyFile = typeof raw.policyFile === "string" ? raw.policyFile : "";
+    if (!taskId || !stateDir) {
+      return null;
+    }
+    return {
+      taskId,
+      role,
+      scopes,
+      validation,
+      hostProjectRoot,
+      monorepoMainRoot,
+      stateDir,
+      policyFile
+    };
+  } catch {
+    return null;
+  }
+}
+var cachedContext;
+function getContext() {
+  if (cachedContext !== undefined) {
+    return cachedContext;
+  }
+  cachedContext = loadHookContextFromEnv();
+  return cachedContext;
+}
+function resolveProjectRoot() {
+  const ctx = getContext();
+  if (ctx?.hostProjectRoot)
+    return ctx.hostProjectRoot;
+  if (BAKED_PROJECT_ROOT) {
+    return BAKED_PROJECT_ROOT;
+  }
+  if (process.env.PROJECT_RIG_ROOT) {
+    return process.env.PROJECT_RIG_ROOT;
+  }
+  const candidates = [process.cwd(), resolve(import.meta.dirname, "../..")];
+  for (const candidate of candidates) {
+    if (existsSync(resolve(candidate, RIG_DEFINITION_DIRNAME)) || existsSync(resolve(candidate, RIG_STATE_DIRNAME))) {
+      return candidate;
+    }
+  }
+  return resolve(import.meta.dirname, "../..");
+}
+function resolveTaskIdForHook(_projectRoot) {
+  const ctx = getContext();
+  if (ctx)
+    return ctx.taskId;
+  if (BAKED_TASK_ID) {
+    return BAKED_TASK_ID;
+  }
+  const fromEnv = (process.env.RIG_TASK_ID || "").trim();
+  if (fromEnv) {
+    return fromEnv;
+  }
+  const runtimeId = (process.env.RIG_TASK_RUNTIME_ID || "").trim();
+  if (runtimeId.startsWith("task-") && runtimeId.length > "task-".length) {
+    return runtimeId.slice("task-".length);
+  }
+  return "";
+}
+function isTaskConfigEntry(value) {
+  if (!isPlainObject(value)) {
+    return false;
+  }
+  if ("role" in value && value.role !== undefined && typeof value.role !== "string") {
+    return false;
+  }
+  if ("scope" in value && value.scope !== undefined && !isStringArray(value.scope)) {
+    return false;
+  }
+  if ("validation" in value && value.validation !== undefined && !isStringArray(value.validation)) {
+    return false;
+  }
+  return true;
+}
+async function readTaskConfigFromDisk(configPath) {
+  if (!existsSync(configPath)) {
+    return null;
+  }
+  try {
+    const bunFile = bunRuntime()?.file;
+    const content = bunFile ? await bunFile(configPath).json() : JSON.parse(readFileSync(configPath, "utf-8"));
+    return isPlainObject(content) ? content : null;
+  } catch {
+    return null;
+  }
+}
+function taskConfigCandidates(ctx) {
+  const taskWorkspace = process.env.RIG_TASK_WORKSPACE?.trim();
+  return [
+    ctx?.monorepoMainRoot ? resolve(ctx.monorepoMainRoot, ".rig", "task-config.json") : "",
+    process.env.MONOREPO_MAIN_ROOT?.trim() ? resolve(process.env.MONOREPO_MAIN_ROOT.trim(), ".rig", "task-config.json") : "",
+    taskWorkspace ? resolve(taskWorkspace, ".rig", "task-config.json") : ""
+  ].filter(Boolean);
+}
+async function resolveTaskConfig(_projectRoot, _taskId) {
+  const ctx = getContext();
+  if (ctx) {
+    return {
+      scope: ctx.scopes,
+      validation: ctx.validation,
+      role: ctx.role
+    };
+  }
+  if (BAKED_TASK_CONFIG) {
+    try {
+      const parsed = JSON.parse(BAKED_TASK_CONFIG);
+      if (isTaskConfigEntry(parsed) && Object.keys(parsed).length > 0) {
+        return parsed;
+      }
+    } catch {}
+  }
+  for (const configPath of taskConfigCandidates(ctx)) {
+    const config = await readTaskConfigFromDisk(configPath);
+    if (!config) {
+      continue;
+    }
+    const taskEntry = config[_taskId];
+    if (isTaskConfigEntry(taskEntry)) {
+      return taskEntry;
+    }
+  }
+  return {};
+}
+async function resolveTaskScopes(projectRoot, taskId) {
+  const ctx = getContext();
+  if (ctx && ctx.scopes.length > 0)
+    return ctx.scopes;
+  if (BAKED_TASK_SCOPES) {
+    try {
+      const parsed = JSON.parse(BAKED_TASK_SCOPES);
+      if (Array.isArray(parsed) && parsed.length > 0 && parsed.every((item) => typeof item === "string")) {
+        return parsed;
+      }
+    } catch {}
+  }
+  return (await resolveTaskConfig(projectRoot, taskId)).scope || [];
+}
+function resolvePolicyContent(projectRoot) {
+  const ctx = getContext();
+  if (ctx?.policyFile && existsSync(ctx.policyFile)) {
+    return readFileSync(ctx.policyFile, "utf-8");
+  }
+  if (BAKED_POLICY_CONTENT)
+    return BAKED_POLICY_CONTENT;
+  const policyPath = resolve(projectRoot, "rig/policy/policy.json");
+  if (existsSync(policyPath))
+    return readFileSync(policyPath, "utf-8");
+  return "{}";
+}
+async function readHookInput() {
+  let text = "";
+  const inputFile = process.env.RIG_HOOK_INPUT_FILE?.trim();
+  if (inputFile) {
+    text = readFileSync(inputFile, "utf-8");
+  } else {
+    try {
+      text = readFileSync("/dev/stdin", "utf-8");
+    } catch {
+      text = readFileSync(0, "utf-8");
+    }
+  }
+  if (!text.trim()) {
+    return { input: {}, valid: true, hadPayload: false };
+  }
+  try {
+    return {
+      input: JSON.parse(text),
+      valid: true,
+      hadPayload: true
+    };
+  } catch {
+    return { input: {}, valid: false, hadPayload: true };
+  }
+}
+function extractToolFilePaths(toolName, input) {
+  const paths = [];
+  const add = (value) => {
+    if (typeof value === "string" && value.trim()) {
+      paths.push(value.trim());
+    }
+  };
+  if (toolName === "Read" || toolName === "Write" || toolName === "Edit" || toolName === "MultiEdit") {
+    add(input.file_path);
+    add(input.path);
+  } else if (toolName === "Glob") {
+    add(input.path);
+  } else if (toolName === "Grep") {
+    add(input.path);
+  } else {
+    add(input.file_path);
+    add(input.path);
+  }
+  return paths;
+}
+function isTestFilePath(path) {
+  return /\.(test|spec)\.(ts|tsx|js|jsx)$/.test(path) || /\/(__tests__|tests|test)\//.test(path);
+}
+function buildPluginHookContext(parsed, opts) {
+  const toolName = parsed.input.tool_name;
+  const toolInput = parsed.input.tool_input ?? {};
+  return {
+    event: opts.event,
+    toolName,
+    toolInput,
+    filePaths: toolName ? extractToolFilePaths(toolName, toolInput) : [],
+    projectRoot: opts.projectRoot,
+    taskId: opts.taskId
+  };
+}
+function hookResultToProtocol(result) {
+  if (result.decision === "block") {
+    const lines = [`BLOCKED: ${result.reason ?? "blocked by plugin hook"}`];
+    if (result.systemMessage) {
+      lines.push(result.systemMessage);
+    }
+    return { exitCode: 1, stdout: `${lines.join(`
+`)}
+` };
+  }
+  return {
+    exitCode: 0,
+    stdout: result.systemMessage ? `${result.systemMessage}
+` : ""
+  };
+}
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function block(hookName, message, projectRoot) {
+  const runtimeWorkspace = process.env.RIG_TASK_WORKSPACE?.trim();
+  const stateDir = BAKED_STATE_DIR || (runtimeWorkspace ? resolve(runtimeWorkspace, ".rig", "state") : resolve(projectRoot, ".rig", "state"));
+  mkdirSync(stateDir, { recursive: true });
+  const tripLog = resolve(stateDir, "hook_trips.log");
+  let count = 0;
+  if (existsSync(tripLog)) {
+    const content = readFileSync(tripLog, "utf-8");
+    count = (content.match(new RegExp(`^${escapeRegExp(hookName)}\\s`, "gm")) || []).length;
+  }
+  appendFileSync(tripLog, `${hookName} ${new Date().toISOString()}
+`, "utf-8");
+  count += 1;
+  const lines = [
+    `BLOCKED: ${message}`,
+    "",
+    "Re-read CLAUDE.md safety rules before your next action."
+  ];
+  if (count >= 3) {
+    lines.push("");
+    lines.push(`REPEATED VIOLATION (${count}x ${hookName}).`);
+    lines.push("STOP. Read the FULL CLAUDE.md from top to bottom.");
+    lines.push("If stuck, write the problem to .rig/state/failed_approaches.md and request help.");
+  }
+  writeSync(1, `${lines.join(`
+`)}
+`);
+  process.exit(1);
+}
+function normalizeExecutablePath(candidate) {
+  if (!candidate) {
+    return "";
+  }
+  const normalized = resolve(candidate);
+  if (!existsSync(normalized)) {
+    return "";
+  }
+  try {
+    return realpathSync(normalized);
+  } catch {
+    return normalized;
+  }
+}
+function looksLikeRuntimeGateway(candidate) {
+  const normalized = resolve(candidate).replace(/\\/g, "/");
+  return normalized.includes("/.rig/bin/") || normalized.endsWith("/rig-shell") || normalized.endsWith("/rig-agent");
+}
+function resolveBunBinaryPath() {
+  const explicit = normalizeExecutablePath(process.env.RIG_BUN_PATH?.trim());
+  if (explicit) {
+    return explicit;
+  }
+  const bunWhich = bunRuntime()?.which?.("bun");
+  const pathBun = normalizeExecutablePath(bunWhich?.trim());
+  if (pathBun && !looksLikeRuntimeGateway(pathBun)) {
+    return pathBun;
+  }
+  const home = process.env.HOME?.trim();
+  const fallbackCandidates = [
+    home ? resolve(home, ".bun/bin/bun") : "",
+    "/opt/homebrew/bin/bun",
+    "/usr/local/bin/bun",
+    "/usr/bin/bun"
+  ];
+  for (const candidate of fallbackCandidates) {
+    const normalized = normalizeExecutablePath(candidate);
+    if (normalized) {
+      return normalized;
+    }
+  }
+  const execPath = normalizeExecutablePath(process.execPath?.trim());
+  if (execPath && !looksLikeRuntimeGateway(execPath)) {
+    return execPath;
+  }
+  throw new Error("bun not found in PATH");
+}
+function resolveBunCli() {
+  return resolveBunCliInvocation().command;
+}
+function resolveBunCliInvocation() {
+  if (BAKED_BUN_PATH) {
+    return {
+      command: BAKED_BUN_PATH,
+      env: {}
+    };
+  }
+  if (process.env.RIG_BUN_PATH?.trim()) {
+    return {
+      command: process.env.RIG_BUN_PATH.trim(),
+      env: {}
+    };
+  }
+  try {
+    const systemBun = resolveBunBinaryPath();
+    return {
+      command: systemBun,
+      env: {}
+    };
+  } catch {}
+  if (process.execPath?.trim()) {
+    return {
+      command: process.execPath,
+      env: { BUN_BE_BUN: "1" }
+    };
+  }
+  return { command: "bun", env: {} };
+}
+async function runTypedHook(fn, opts) {
+  const parsed = await readHookInput();
+  const projectRoot = opts.projectRoot ?? resolveProjectRoot();
+  const taskId = opts.taskId ?? resolveTaskIdForHook(projectRoot);
+  const ctx = buildPluginHookContext(parsed, {
+    event: opts.event,
+    projectRoot,
+    taskId
+  });
+  let result;
+  try {
+    result = await fn(ctx);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    writeSync(2, `[rig hook] typed hook threw: ${message}
+`);
+    process.exit(0);
+  }
+  const { exitCode, stdout } = hookResultToProtocol(result);
+  if (stdout) {
+    writeSync(1, stdout);
+  }
+  process.exit(exitCode);
+}
+export {
+  runTypedHook,
+  resolveTaskScopes,
+  resolveTaskIdForHook,
+  resolveTaskConfig,
+  resolveProjectRoot,
+  resolvePolicyContent,
+  resolveBunCliInvocation,
+  resolveBunCli,
+  readHookInput,
+  isTestFilePath,
+  hookResultToProtocol,
+  extractToolFilePaths,
+  escapeRegExp,
+  buildPluginHookContext,
+  block,
+  BAKED_TASK_SCOPES,
+  BAKED_TASK_ID,
+  BAKED_TASK_CONFIG,
+  BAKED_STATE_DIR,
+  BAKED_PROJECT_ROOT,
+  BAKED_POLICY_CONTENT,
+  BAKED_BUN_PATH
+};

package/dist/src/hook-runner.js

@@ -90,8 +90,8 @@ function loadDeclarativeConfig(path) {
 }
 
 // packages/core/src/load-config.ts
-var TS_NAMES = ["rig.config.ts", "rig.config.mts"];
-var JSON_NAMES = ["rig.config.json"];
+var TS_NAMES = [".rig/rig.config.ts", ".rig/rig.config.mts"];
+var JSON_NAMES = [".rig/rig.config.json"];
 function isModuleResolutionError(error) {
   const message = error instanceof Error ? error.message : String(error);
   return message.includes("Cannot find module") || message.includes("Could not resolve");
@@ -426,7 +426,7 @@ async function loadConfig(cwd) {
       return decodeExplicitPluginConfig(raw);
     }
   }
-  throw new Error(`no rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
+  throw new Error(`no .rig/rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
 }
 function decodeExplicitPluginConfig(raw) {
   const withDefaults = applyConfigDefaults(raw);
@@ -439,7 +439,7 @@ function decodeExplicitPluginConfig(raw) {
 }
 
 // packages/core/src/hook-runtime.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, realpathSync, writeSync } from "fs";
+import { appendFileSync, existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, realpathSync, writeSync } from "fs";
 import { resolve as resolve2 } from "path";
 import { RIG_DEFINITION_DIRNAME, RIG_STATE_DIRNAME } from "@rig/contracts";
 function normalizeBuildConfig(value) {
@@ -465,7 +465,11 @@ function readBuildConfigForCoreHooks() {
 var BUILD_CONFIG = readBuildConfigForCoreHooks();
 var BAKED_PROJECT_ROOT = BUILD_CONFIG.AGENT_PROJECT_ROOT ?? "";
 var BAKED_TASK_ID = BUILD_CONFIG.AGENT_TASK_ID ?? "";
+var BAKED_STATE_DIR = BUILD_CONFIG.AGENT_STATE_DIR ?? "";
 var BAKED_BUN_PATH = BUILD_CONFIG.AGENT_BUN_PATH ?? "";
+var BAKED_TASK_CONFIG = BUILD_CONFIG.AGENT_TASK_CONFIG ?? "";
+var BAKED_POLICY_CONTENT = BUILD_CONFIG.AGENT_POLICY_CONTENT ?? "";
+var BAKED_TASK_SCOPES = BUILD_CONFIG.AGENT_TASK_SCOPES ?? "";
 var RUNTIME_CONTEXT_ENV = "RIG_RUNTIME_CONTEXT_FILE";
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);

package/dist/src/hook-runtime.d.ts

@@ -1,9 +1,50 @@
-import { type HookEvent, type HookImplementation } from "@rig/contracts";
+import { type HookContext as PluginHookContext, type HookEvent, type HookImplementation, type HookResult } from "@rig/contracts";
+export type HookInput = {
+    tool_name?: string;
+    tool_input?: Record<string, unknown>;
+    command?: string;
+};
+export type ParsedHookInput = {
+    input: HookInput;
+    valid: boolean;
+    hadPayload: boolean;
+};
 export interface TypedHookOptions {
     readonly event: HookEvent;
     readonly projectRoot?: string;
     readonly taskId?: string;
 }
+export declare const BAKED_PROJECT_ROOT: string;
+export declare const BAKED_TASK_ID: string;
+export declare const BAKED_STATE_DIR: string;
+export declare const BAKED_BUN_PATH: string;
+export declare const BAKED_TASK_CONFIG: string;
+export declare const BAKED_POLICY_CONTENT: string;
+export declare const BAKED_TASK_SCOPES: string;
+export declare function resolveProjectRoot(): string;
+export declare function resolveTaskIdForHook(_projectRoot: string): string;
+export declare function resolveTaskConfig(_projectRoot: string, _taskId: string): Promise<{
+    scope?: string[];
+    validation?: string[];
+    role?: string;
+}>;
+export declare function resolveTaskScopes(projectRoot: string, taskId: string): Promise<string[]>;
+export declare function resolvePolicyContent(projectRoot: string): string;
+export declare function readHookInput(): Promise<ParsedHookInput>;
+export declare function extractToolFilePaths(toolName: string, input: Record<string, unknown>): string[];
+export declare function isTestFilePath(path: string): boolean;
+export declare function buildPluginHookContext(parsed: ParsedHookInput, opts: {
+    event: HookEvent;
+    projectRoot: string;
+    taskId: string;
+}): PluginHookContext;
+export declare function hookResultToProtocol(result: HookResult): {
+    exitCode: 0 | 1;
+    stdout: string;
+};
+export declare function escapeRegExp(value: string): string;
+export declare function block(hookName: string, message: string, projectRoot: string): never;
+export declare function resolveBunCli(): string;
 export declare function resolveBunCliInvocation(): {
     command: string;
     env: Record<string, string>;

package/dist/src/hook-runtime.js

@@ -1,8 +1,12 @@
 // @bun
 // packages/core/src/hook-runtime.ts
-import { existsSync, readFileSync, realpathSync, writeSync } from "fs";
+import { appendFileSync, existsSync, mkdirSync, readFileSync, realpathSync, writeSync } from "fs";
 import { resolve } from "path";
 import { RIG_DEFINITION_DIRNAME, RIG_STATE_DIRNAME } from "@rig/contracts";
+function bunRuntime() {
+  const runtime = globalThis;
+  return runtime.Bun;
+}
 function normalizeBuildConfig(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     return {};
@@ -26,7 +30,11 @@ function readBuildConfigForCoreHooks() {
 var BUILD_CONFIG = readBuildConfigForCoreHooks();
 var BAKED_PROJECT_ROOT = BUILD_CONFIG.AGENT_PROJECT_ROOT ?? "";
 var BAKED_TASK_ID = BUILD_CONFIG.AGENT_TASK_ID ?? "";
+var BAKED_STATE_DIR = BUILD_CONFIG.AGENT_STATE_DIR ?? "";
 var BAKED_BUN_PATH = BUILD_CONFIG.AGENT_BUN_PATH ?? "";
+var BAKED_TASK_CONFIG = BUILD_CONFIG.AGENT_TASK_CONFIG ?? "";
+var BAKED_POLICY_CONTENT = BUILD_CONFIG.AGENT_POLICY_CONTENT ?? "";
+var BAKED_TASK_SCOPES = BUILD_CONFIG.AGENT_TASK_SCOPES ?? "";
 var RUNTIME_CONTEXT_ENV = "RIG_RUNTIME_CONTEXT_FILE";
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -128,6 +136,96 @@ function resolveTaskIdForHook(_projectRoot) {
   }
   return "";
 }
+function isTaskConfigEntry(value) {
+  if (!isPlainObject(value)) {
+    return false;
+  }
+  if ("role" in value && value.role !== undefined && typeof value.role !== "string") {
+    return false;
+  }
+  if ("scope" in value && value.scope !== undefined && !isStringArray(value.scope)) {
+    return false;
+  }
+  if ("validation" in value && value.validation !== undefined && !isStringArray(value.validation)) {
+    return false;
+  }
+  return true;
+}
+async function readTaskConfigFromDisk(configPath) {
+  if (!existsSync(configPath)) {
+    return null;
+  }
+  try {
+    const bunFile = bunRuntime()?.file;
+    const content = bunFile ? await bunFile(configPath).json() : JSON.parse(readFileSync(configPath, "utf-8"));
+    return isPlainObject(content) ? content : null;
+  } catch {
+    return null;
+  }
+}
+function taskConfigCandidates(ctx) {
+  const taskWorkspace = process.env.RIG_TASK_WORKSPACE?.trim();
+  return [
+    ctx?.monorepoMainRoot ? resolve(ctx.monorepoMainRoot, ".rig", "task-config.json") : "",
+    process.env.MONOREPO_MAIN_ROOT?.trim() ? resolve(process.env.MONOREPO_MAIN_ROOT.trim(), ".rig", "task-config.json") : "",
+    taskWorkspace ? resolve(taskWorkspace, ".rig", "task-config.json") : ""
+  ].filter(Boolean);
+}
+async function resolveTaskConfig(_projectRoot, _taskId) {
+  const ctx = getContext();
+  if (ctx) {
+    return {
+      scope: ctx.scopes,
+      validation: ctx.validation,
+      role: ctx.role
+    };
+  }
+  if (BAKED_TASK_CONFIG) {
+    try {
+      const parsed = JSON.parse(BAKED_TASK_CONFIG);
+      if (isTaskConfigEntry(parsed) && Object.keys(parsed).length > 0) {
+        return parsed;
+      }
+    } catch {}
+  }
+  for (const configPath of taskConfigCandidates(ctx)) {
+    const config = await readTaskConfigFromDisk(configPath);
+    if (!config) {
+      continue;
+    }
+    const taskEntry = config[_taskId];
+    if (isTaskConfigEntry(taskEntry)) {
+      return taskEntry;
+    }
+  }
+  return {};
+}
+async function resolveTaskScopes(projectRoot, taskId) {
+  const ctx = getContext();
+  if (ctx && ctx.scopes.length > 0)
+    return ctx.scopes;
+  if (BAKED_TASK_SCOPES) {
+    try {
+      const parsed = JSON.parse(BAKED_TASK_SCOPES);
+      if (Array.isArray(parsed) && parsed.length > 0 && parsed.every((item) => typeof item === "string")) {
+        return parsed;
+      }
+    } catch {}
+  }
+  return (await resolveTaskConfig(projectRoot, taskId)).scope || [];
+}
+function resolvePolicyContent(projectRoot) {
+  const ctx = getContext();
+  if (ctx?.policyFile && existsSync(ctx.policyFile)) {
+    return readFileSync(ctx.policyFile, "utf-8");
+  }
+  if (BAKED_POLICY_CONTENT)
+    return BAKED_POLICY_CONTENT;
+  const policyPath = resolve(projectRoot, "rig/policy/policy.json");
+  if (existsSync(policyPath))
+    return readFileSync(policyPath, "utf-8");
+  return "{}";
+}
 async function readHookInput() {
   let text = "";
   const inputFile = process.env.RIG_HOOK_INPUT_FILE?.trim();
@@ -173,6 +271,9 @@ function extractToolFilePaths(toolName, input) {
   }
   return paths;
 }
+function isTestFilePath(path) {
+  return /\.(test|spec)\.(ts|tsx|js|jsx)$/.test(path) || /\/(__tests__|tests|test)\//.test(path);
+}
 function buildPluginHookContext(parsed, opts) {
   const toolName = parsed.input.tool_name;
   const toolInput = parsed.input.tool_input ?? {};
@@ -201,6 +302,38 @@ function hookResultToProtocol(result) {
 ` : ""
   };
 }
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function block(hookName, message, projectRoot) {
+  const runtimeWorkspace = process.env.RIG_TASK_WORKSPACE?.trim();
+  const stateDir = BAKED_STATE_DIR || (runtimeWorkspace ? resolve(runtimeWorkspace, ".rig", "state") : resolve(projectRoot, ".rig", "state"));
+  mkdirSync(stateDir, { recursive: true });
+  const tripLog = resolve(stateDir, "hook_trips.log");
+  let count = 0;
+  if (existsSync(tripLog)) {
+    const content = readFileSync(tripLog, "utf-8");
+    count = (content.match(new RegExp(`^${escapeRegExp(hookName)}\\s`, "gm")) || []).length;
+  }
+  appendFileSync(tripLog, `${hookName} ${new Date().toISOString()}
+`, "utf-8");
+  count += 1;
+  const lines = [
+    `BLOCKED: ${message}`,
+    "",
+    "Re-read CLAUDE.md safety rules before your next action."
+  ];
+  if (count >= 3) {
+    lines.push("");
+    lines.push(`REPEATED VIOLATION (${count}x ${hookName}).`);
+    lines.push("STOP. Read the FULL CLAUDE.md from top to bottom.");
+    lines.push("If stuck, write the problem to .rig/state/failed_approaches.md and request help.");
+  }
+  writeSync(1, `${lines.join(`
+`)}
+`);
+  process.exit(1);
+}
 function normalizeExecutablePath(candidate) {
   if (!candidate) {
     return "";
@@ -224,8 +357,7 @@ function resolveBunBinaryPath() {
   if (explicit) {
     return explicit;
   }
-  const bunGlobal = globalThis.Bun;
-  const bunWhich = bunGlobal?.which?.("bun");
+  const bunWhich = bunRuntime()?.which?.("bun");
   const pathBun = normalizeExecutablePath(bunWhich?.trim());
   if (pathBun && !looksLikeRuntimeGateway(pathBun)) {
     return pathBun;
@@ -249,6 +381,9 @@ function resolveBunBinaryPath() {
   }
   throw new Error("bun not found in PATH");
 }
+function resolveBunCli() {
+  return resolveBunCliInvocation().command;
+}
 function resolveBunCliInvocation() {
   if (BAKED_BUN_PATH) {
     return {
@@ -303,5 +438,25 @@ async function runTypedHook(fn, opts) {
 }
 export {
   runTypedHook,
-  resolveBunCliInvocation
+  resolveTaskScopes,
+  resolveTaskIdForHook,
+  resolveTaskConfig,
+  resolveProjectRoot,
+  resolvePolicyContent,
+  resolveBunCliInvocation,
+  resolveBunCli,
+  readHookInput,
+  isTestFilePath,
+  hookResultToProtocol,
+  extractToolFilePaths,
+  escapeRegExp,
+  buildPluginHookContext,
+  block,
+  BAKED_TASK_SCOPES,
+  BAKED_TASK_ID,
+  BAKED_TASK_CONFIG,
+  BAKED_STATE_DIR,
+  BAKED_PROJECT_ROOT,
+  BAKED_POLICY_CONTENT,
+  BAKED_BUN_PATH
 };

package/dist/src/kernel-boot.d.ts

@@ -0,0 +1,2 @@
+export { bootDefaultKernelIntoProcess, getProcessKernel, } from "@rig/kernel-seed/boot-default";
+export type { DefaultKernelBootRecord } from "@rig/kernel-seed/boot-default";

package/dist/src/kernel-boot.js

@@ -0,0 +1,10 @@
+// @bun
+// packages/core/src/kernel-boot.ts
+import {
+  bootDefaultKernelIntoProcess,
+  getProcessKernel
+} from "@rig/kernel-seed/boot-default";
+export {
+  getProcessKernel,
+  bootDefaultKernelIntoProcess
+};

package/dist/src/kernel-entrypoint.d.ts

@@ -1,6 +1,6 @@
 import type { JournalCapability, TransportCapability } from "@rig/contracts";
-import { type DefaultKernelBootRecord } from "@rig/kernel-seed/boot-default";
-import type { CapabilityProviderPlugin } from "@rig/kernel-seed/plugin-abi";
+import { type DefaultKernelBootRecord } from "./kernel-boot";
+import type { CapabilityProviderPlugin } from "./kernel-plugin-abi";
 export type HydrationResult = {
     readonly projectRoot: string;
     readonly dotenvLoaded: boolean;

package/dist/src/kernel-entrypoint.js

@@ -2,8 +2,19 @@
 // packages/core/src/kernel-entrypoint.ts
 import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
 import { resolve as resolve2 } from "path";
-import { bootDefaultKernelIntoProcess } from "@rig/kernel-seed/boot-default";
-import { createPlacementTransportPlugin } from "@rig/kernel-seed/default-kernel";
+
+// packages/core/src/kernel-boot.ts
+import {
+  bootDefaultKernelIntoProcess,
+  getProcessKernel
+} from "@rig/kernel-seed/boot-default";
+
+// packages/core/src/default-kernel.ts
+import {
+  createDefaultKernel,
+  createDefaultKernelPlugin,
+  createPlacementTransportPlugin
+} from "@rig/kernel-seed/default-kernel";
 
 // packages/core/src/config-env.ts
 function applyConfigEnv(config, env = process.env) {
@@ -114,8 +125,8 @@ function loadDeclarativeConfig(path) {
 }
 
 // packages/core/src/load-config.ts
-var TS_NAMES = ["rig.config.ts", "rig.config.mts"];
-var JSON_NAMES = ["rig.config.json"];
+var TS_NAMES = [".rig/rig.config.ts", ".rig/rig.config.mts"];
+var JSON_NAMES = [".rig/rig.config.json"];
 function isModuleResolutionError(error) {
   const message = error instanceof Error ? error.message : String(error);
   return message.includes("Cannot find module") || message.includes("Could not resolve");
@@ -450,7 +461,7 @@ async function loadConfig(cwd) {
       return decodeExplicitPluginConfig(raw);
     }
   }
-  throw new Error(`no rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
+  throw new Error(`no .rig/rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
 }
 function decodeExplicitPluginConfig(raw) {
   const withDefaults = applyConfigDefaults(raw);

package/dist/src/kernel-plugin-abi.d.ts

@@ -0,0 +1 @@
+export type { CapabilityProviderPlugin } from "@rig/kernel-seed/plugin-abi";

package/dist/src/kernel-plugin-abi.js

@@ -0,0 +1 @@
+// @bun

package/dist/src/kernel-resolver.d.ts

@@ -0,0 +1,2 @@
+export { resolveKernelStages } from "@rig/kernel-seed/resolver";
+export type { KernelStageResolverResult } from "@rig/kernel-seed/resolver";

package/dist/src/kernel-resolver.js

@@ -0,0 +1,6 @@
+// @bun
+// packages/core/src/kernel-resolver.ts
+import { resolveKernelStages } from "@rig/kernel-seed/resolver";
+export {
+  resolveKernelStages
+};

package/dist/src/layout.js

@@ -45,7 +45,7 @@ function resolveNearestRigProjectRoot(startDir) {
     const hasDefinition = existsSync2(resolve2(current, RIG_DEFINITION_DIRNAME));
     const hasState = existsSync2(resolve2(current, RIG_STATE_DIRNAME));
     const hasTaskConfig = existsSync2(resolve2(current, RIG_STATE_DIRNAME, "task-config.json"));
-    const hasConfig = existsSync2(resolve2(current, "rig.config.ts")) || existsSync2(resolve2(current, "rig.config.json"));
+    const hasConfig = existsSync2(resolve2(current, ".rig", "rig.config.ts")) || existsSync2(resolve2(current, ".rig", "rig.config.json"));
     const hasGit = existsSync2(resolve2(current, ".git"));
     const hasControlPlane = existsSync2(resolve2(current, "packages", "cli", "bin", "rig.ts")) || existsSync2(resolve2(current, "packages", "server"));
     if ((hasDefinition || hasState || hasConfig) && weakMarkerCandidate === null) {

package/dist/src/load-config.js

@@ -90,8 +90,8 @@ function loadDeclarativeConfig(path) {
 }
 
 // packages/core/src/load-config.ts
-var TS_NAMES = ["rig.config.ts", "rig.config.mts"];
-var JSON_NAMES = ["rig.config.json"];
+var TS_NAMES = [".rig/rig.config.ts", ".rig/rig.config.mts"];
+var JSON_NAMES = [".rig/rig.config.json"];
 function isModuleResolutionError(error) {
   const message = error instanceof Error ? error.message : String(error);
   return message.includes("Cannot find module") || message.includes("Could not resolve");
@@ -426,7 +426,7 @@ async function loadConfig(cwd) {
       return decodeExplicitPluginConfig(raw);
     }
   }
-  throw new Error(`no rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
+  throw new Error(`no .rig/rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
 }
 function decodeExplicitPluginConfig(raw) {
   const withDefaults = applyConfigDefaults(raw);

package/dist/src/placement.js

@@ -94,8 +94,8 @@ function loadDeclarativeConfig(path) {
 }
 
 // packages/core/src/load-config.ts
-var TS_NAMES = ["rig.config.ts", "rig.config.mts"];
-var JSON_NAMES = ["rig.config.json"];
+var TS_NAMES = [".rig/rig.config.ts", ".rig/rig.config.mts"];
+var JSON_NAMES = [".rig/rig.config.json"];
 function isModuleResolutionError(error) {
   const message = error instanceof Error ? error.message : String(error);
   return message.includes("Cannot find module") || message.includes("Could not resolve");
@@ -430,7 +430,7 @@ async function loadConfig(cwd) {
       return decodeExplicitPluginConfig(raw);
     }
   }
-  throw new Error(`no rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
+  throw new Error(`no .rig/rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
 }
 function decodeExplicitPluginConfig(raw) {
   const withDefaults = applyConfigDefaults(raw);

package/dist/src/plugin-host-context.js

@@ -313,8 +313,8 @@ function loadDeclarativeConfig(path) {
 }
 
 // packages/core/src/load-config.ts
-var TS_NAMES = ["rig.config.ts", "rig.config.mts"];
-var JSON_NAMES = ["rig.config.json"];
+var TS_NAMES = [".rig/rig.config.ts", ".rig/rig.config.mts"];
+var JSON_NAMES = [".rig/rig.config.json"];
 function isModuleResolutionError(error) {
   const message = error instanceof Error ? error.message : String(error);
   return message.includes("Cannot find module") || message.includes("Could not resolve");
@@ -649,7 +649,7 @@ async function loadConfig(cwd) {
       return decodeExplicitPluginConfig(raw);
     }
   }
-  throw new Error(`no rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
+  throw new Error(`no .rig/rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
 }
 function decodeExplicitPluginConfig(raw) {
   const withDefaults = applyConfigDefaults(raw);
@@ -662,10 +662,19 @@ function decodeExplicitPluginConfig(raw) {
 }
 
 // packages/core/src/project-plugins.ts
-var RIG_CONFIG_FILENAMES = ["rig.config.ts", "rig.config.mts", "rig.config.json"];
+var TS_CONFIG_FILENAMES = ["rig.config.ts", "rig.config.mts"];
+var JSON_CONFIG_FILENAMES = ["rig.config.json"];
 function findProjectConfigPath(projectRoot) {
-  for (const name of RIG_CONFIG_FILENAMES) {
-    const path = resolve2(projectRoot, name);
+  for (const name of TS_CONFIG_FILENAMES) {
+    const path = resolve2(projectRoot, ".rig", name);
+    if (existsSync3(path))
+      return path;
+  }
+  const declarativePath = findDeclarativeConfigPath(projectRoot);
+  if (declarativePath)
+    return declarativePath;
+  for (const name of JSON_CONFIG_FILENAMES) {
+    const path = resolve2(projectRoot, ".rig", name);
     if (existsSync3(path))
       return path;
   }
@@ -937,13 +946,17 @@ function setScopeRules(rules) {
 }
 
 // packages/core/src/hook-materializer.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync2, readFileSync as readFileSync4, writeFileSync } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync } from "fs";
 import { dirname as dirname2, resolve as resolve4 } from "path";
 
 // packages/core/src/hook-runtime.ts
-import { existsSync as existsSync5, readFileSync as readFileSync3, realpathSync, writeSync } from "fs";
+import { appendFileSync, existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync3, realpathSync, writeSync } from "fs";
 import { resolve as resolve3 } from "path";
 import { RIG_DEFINITION_DIRNAME, RIG_STATE_DIRNAME } from "@rig/contracts";
+function bunRuntime() {
+  const runtime = globalThis;
+  return runtime.Bun;
+}
 function normalizeBuildConfig(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     return {};
@@ -967,7 +980,11 @@ function readBuildConfigForCoreHooks() {
 var BUILD_CONFIG = readBuildConfigForCoreHooks();
 var BAKED_PROJECT_ROOT = BUILD_CONFIG.AGENT_PROJECT_ROOT ?? "";
 var BAKED_TASK_ID = BUILD_CONFIG.AGENT_TASK_ID ?? "";
+var BAKED_STATE_DIR = BUILD_CONFIG.AGENT_STATE_DIR ?? "";
 var BAKED_BUN_PATH = BUILD_CONFIG.AGENT_BUN_PATH ?? "";
+var BAKED_TASK_CONFIG = BUILD_CONFIG.AGENT_TASK_CONFIG ?? "";
+var BAKED_POLICY_CONTENT = BUILD_CONFIG.AGENT_POLICY_CONTENT ?? "";
+var BAKED_TASK_SCOPES = BUILD_CONFIG.AGENT_TASK_SCOPES ?? "";
 function normalizeExecutablePath(candidate) {
   if (!candidate) {
     return "";
@@ -991,8 +1008,7 @@ function resolveBunBinaryPath() {
   if (explicit) {
     return explicit;
   }
-  const bunGlobal = globalThis.Bun;
-  const bunWhich = bunGlobal?.which?.("bun");
+  const bunWhich = bunRuntime()?.which?.("bun");
   const pathBun = normalizeExecutablePath(bunWhich?.trim());
   if (pathBun && !looksLikeRuntimeGateway(pathBun)) {
     return pathBun;
@@ -1178,7 +1194,7 @@ function writeClaudeCodeHookSettings(projectRoot, entries) {
   const settingsPath = resolve4(projectRoot, ".claude", "settings.json");
   const existing = existsSync6(settingsPath) ? safeReadJson(settingsPath) : {};
   const { settings, events } = applyClaudeCodeSessionHooksToSettings(existing, entries, projectRoot);
-  mkdirSync2(dirname2(settingsPath), { recursive: true });
+  mkdirSync3(dirname2(settingsPath), { recursive: true });
   writeFileSync(settingsPath, `${JSON.stringify(settings, null, 2)}
 `, "utf-8");
   return {
@@ -1208,7 +1224,7 @@ async function buildPluginHostContext(projectRoot) {
     ({ config, host: pluginHost } = await resolvePluginHost(projectRoot));
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    if (msg.includes("no rig.config")) {
+    if (msg.includes("no .rig/rig.config") || msg.includes("no rig.config")) {
       return null;
     }
     throw err;

package/dist/src/project-plugins.js

@@ -313,8 +313,8 @@ function loadDeclarativeConfig(path) {
 }
 
 // packages/core/src/load-config.ts
-var TS_NAMES = ["rig.config.ts", "rig.config.mts"];
-var JSON_NAMES = ["rig.config.json"];
+var TS_NAMES = [".rig/rig.config.ts", ".rig/rig.config.mts"];
+var JSON_NAMES = [".rig/rig.config.json"];
 function isModuleResolutionError(error) {
   const message = error instanceof Error ? error.message : String(error);
   return message.includes("Cannot find module") || message.includes("Could not resolve");
@@ -649,7 +649,7 @@ async function loadConfig(cwd) {
       return decodeExplicitPluginConfig(raw);
     }
   }
-  throw new Error(`no rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
+  throw new Error(`no .rig/rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ${cwd}`);
 }
 function decodeExplicitPluginConfig(raw) {
   const withDefaults = applyConfigDefaults(raw);
@@ -662,17 +662,27 @@ function decodeExplicitPluginConfig(raw) {
 }
 
 // packages/core/src/project-plugins.ts
-var RIG_CONFIG_FILENAMES = ["rig.config.ts", "rig.config.mts", "rig.config.json"];
+var TS_CONFIG_FILENAMES = ["rig.config.ts", "rig.config.mts"];
+var JSON_CONFIG_FILENAMES = ["rig.config.json"];
+var MISSING_CONFIG_PREFIX = "no .rig/rig.config.{ts,mts,json} or .rig/rigfig.{toml,json} found in ";
 function findProjectConfigPath(projectRoot) {
-  for (const name of RIG_CONFIG_FILENAMES) {
-    const path = resolve2(projectRoot, name);
+  for (const name of TS_CONFIG_FILENAMES) {
+    const path = resolve2(projectRoot, ".rig", name);
+    if (existsSync3(path))
+      return path;
+  }
+  const declarativePath = findDeclarativeConfigPath(projectRoot);
+  if (declarativePath)
+    return declarativePath;
+  for (const name of JSON_CONFIG_FILENAMES) {
+    const path = resolve2(projectRoot, ".rig", name);
     if (existsSync3(path))
       return path;
   }
   return null;
 }
 function isMissingProjectConfigError(error) {
-  return error instanceof Error && error.message.startsWith("no rig.config.{ts,mts,json} found in ");
+  return error instanceof Error && (error.message.startsWith(MISSING_CONFIG_PREFIX) || error.message.startsWith("no rig.config.{ts,mts,json} found in "));
 }
 async function loadProjectPluginSet(projectRootOrOptions, maybeOptions = {}) {
   const projectRoot = typeof projectRootOrOptions === "string" ? projectRootOrOptions : projectRootOrOptions.projectRoot;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@h-rig/core",
-  "version": "0.0.6-alpha.164",
+  "version": "0.0.6-alpha.166",
   "type": "module",
   "description": "Config and plugin composition library for Rig's OMP extension ecosystem; not a product host/runtime.",
   "license": "UNLICENSED",
@@ -53,6 +53,22 @@
       "types": "./dist/src/kernel-entrypoint.d.ts",
       "import": "./dist/src/kernel-entrypoint.js"
     },
+    "./kernel-boot": {
+      "types": "./dist/src/kernel-boot.d.ts",
+      "import": "./dist/src/kernel-boot.js"
+    },
+    "./default-kernel": {
+      "types": "./dist/src/default-kernel.d.ts",
+      "import": "./dist/src/default-kernel.js"
+    },
+    "./kernel-resolver": {
+      "types": "./dist/src/kernel-resolver.d.ts",
+      "import": "./dist/src/kernel-resolver.js"
+    },
+    "./kernel-plugin-abi": {
+      "types": "./dist/src/kernel-plugin-abi.d.ts",
+      "import": "./dist/src/kernel-plugin-abi.js"
+    },
     "./setup-version": {
       "types": "./dist/src/setup-version.d.ts",
       "import": "./dist/src/setup-version.js"
@@ -113,6 +129,10 @@
       "types": "./dist/src/hook-runner.d.ts",
       "import": "./dist/src/hook-runner.js"
     },
+    "./hook-protocol": {
+      "types": "./dist/src/hook-protocol.d.ts",
+      "import": "./dist/src/hook-protocol.js"
+    },
     "./plugin-host-registries": {
       "types": "./dist/src/plugin-host-registries.d.ts",
       "import": "./dist/src/plugin-host-registries.js"
@@ -165,8 +185,8 @@
   "module": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
   "dependencies": {
-    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.164",
-    "@rig/kernel-seed": "npm:@h-rig/kernel-seed@0.0.6-alpha.164",
+    "@rig/contracts": "npm:@h-rig/contracts@0.0.6-alpha.166",
+    "@rig/kernel-seed": "npm:@h-rig/kernel-seed@0.0.6-alpha.166",
     "effect": "4.0.0-beta.90",
     "smol-toml": "^1.6.0"
   }