@hasna/hooks 0.6.8 → 0.7.0

package/hooks/hook-spiral-detector/LICENSE

@@ -0,0 +1,191 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to the Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by the Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding any notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2025 Hasna
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/hooks/hook-spiral-detector/README.md

@@ -0,0 +1,23 @@
+# hook-spiral-detector
+
+A PostToolUse hook that interrupts Claude Code after five consecutive Bash calls produce the same command, non-zero exit status, and first line of stderr.
+
+## Installation
+
+```bash
+hooks install spiral-detector
+```
+
+## Behavior
+
+- Hashes the command and error signature; command text and stderr are not persisted
+- Keeps streaks separate by session
+- Resets the streak after a success, a different failure, or a non-Bash tool call
+- Returns `{ "continue": false }` on the fifth identical failure, stopping the agent loop
+- Fails open if input or state cannot be read or written
+
+The threshold is deliberately five: it permits a small number of legitimate retries while interrupting a repeated repair loop early.
+
+## Event
+
+- **PostToolUse** (all tools, so non-Bash calls can reset the streak)

package/hooks/hook-spiral-detector/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "hook-spiral-detector",
+  "version": "0.1.0",
+  "description": "Interrupts Claude Code sessions after repeated identical command failures",
+  "type": "module",
+  "main": "./src/hook.ts",
+  "scripts": {
+    "typecheck": "tsc --noEmit"
+  },
+  "author": "Hasna",
+  "license": "Apache-2.0"
+}

package/hooks/hook-spiral-detector/src/hook.test.ts

@@ -0,0 +1,72 @@
+import { afterEach, describe, expect, test } from "bun:test";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+const homes: string[] = [];
+const hookPath = join(import.meta.dir, "hook.ts");
+
+async function invoke(home: string, input: object): Promise<Record<string, unknown>> {
+  const proc = Bun.spawn(["bun", "run", hookPath], {
+    stdin: new Response(JSON.stringify(input)),
+    stdout: "pipe",
+    stderr: "pipe",
+    env: { ...process.env, HOME: home },
+  });
+  const [stdout, exitCode] = await Promise.all([new Response(proc.stdout).text(), proc.exited]);
+  expect(exitCode).toBe(0);
+  return JSON.parse(stdout);
+}
+
+function input(session: string, command = "bun test", exitCode = 1): object {
+  return {
+    session_id: session,
+    tool_name: "Bash",
+    tool_input: { command },
+    tool_response: { exit_code: exitCode, stderr: "tests failed\nmore details" },
+  };
+}
+
+afterEach(() => {
+  for (const home of homes.splice(0)) rmSync(home, { recursive: true, force: true });
+});
+
+describe("spiral detector", () => {
+  test("interrupts on the fifth identical red signature", async () => {
+    const home = mkdtempSync(join(tmpdir(), "spiral-detector-"));
+    homes.push(home);
+    for (let attempt = 1; attempt < 5; attempt++) {
+      expect(await invoke(home, input("session-1"))).toEqual({ continue: true });
+    }
+    expect(await invoke(home, input("session-1"))).toMatchObject({
+      continue: false,
+      stopReason: expect.stringContaining("after 5 identical command failures"),
+    });
+  });
+
+  test("successes and changed failures reset the streak", async () => {
+    const home = mkdtempSync(join(tmpdir(), "spiral-detector-"));
+    homes.push(home);
+    for (let attempt = 0; attempt < 4; attempt++) await invoke(home, input("session-2"));
+    expect(await invoke(home, input("session-2", "bun test", 0))).toEqual({ continue: true });
+    for (let attempt = 0; attempt < 4; attempt++) await invoke(home, input("session-2"));
+    expect(await invoke(home, input("session-2", "bun run typecheck"))).toEqual({ continue: true });
+    for (let attempt = 1; attempt < 5; attempt++) {
+      expect(await invoke(home, input("session-2"))).toEqual({ continue: true });
+    }
+    expect(await invoke(home, input("session-2"))).toMatchObject({ continue: false });
+  });
+
+  test("supports the repository's legacy tool_output field", async () => {
+    const home = mkdtempSync(join(tmpdir(), "spiral-detector-"));
+    homes.push(home);
+    const legacy = {
+      session_id: "session-3",
+      tool_name: "Bash",
+      tool_input: { command: "npm test" },
+      tool_output: { exitCode: "2", stderr: "same error" },
+    };
+    for (let attempt = 1; attempt < 5; attempt++) await invoke(home, legacy);
+    expect(await invoke(home, legacy)).toMatchObject({ continue: false });
+  });
+});

package/hooks/hook-spiral-detector/src/hook.ts

@@ -0,0 +1,93 @@
+#!/usr/bin/env bun
+
+/** Interrupt a session after five consecutive identical Bash failures. */
+
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+
+interface HookInput {
+  session_id?: string;
+  tool_name?: string;
+  tool_input?: Record<string, unknown>;
+  tool_response?: unknown;
+  tool_output?: unknown;
+}
+
+interface State {
+  signature: string;
+  count: number;
+}
+
+const THRESHOLD = 5;
+const STATE_DIR = join(homedir(), ".hasna", "hooks", "state", "spiral-detector");
+
+function hash(value: string): string {
+  return createHash("sha256").update(value).digest("hex");
+}
+
+function statePath(sessionId: string): string {
+  return join(STATE_DIR, `${hash(sessionId)}.json`);
+}
+
+function readState(path: string): State {
+  try {
+    const state = JSON.parse(readFileSync(path, "utf8")) as State;
+    if (typeof state.signature === "string" && Number.isInteger(state.count) && state.count > 0) return state;
+  } catch {}
+  return { signature: "", count: 0 };
+}
+
+function clearState(path: string): void {
+  try {
+    if (existsSync(path)) unlinkSync(path);
+  } catch {}
+}
+
+function redSignature(input: HookInput): string | null {
+  if (input.tool_name !== "Bash" || typeof input.tool_input?.command !== "string") return null;
+  const output = input.tool_response ?? input.tool_output;
+  if (!output || typeof output !== "object") return null;
+  const record = output as Record<string, unknown>;
+  const rawCode = record.exit_code ?? record.exitCode ?? record.code;
+  const exitCode = typeof rawCode === "string" ? Number(rawCode) : rawCode;
+  if (typeof exitCode !== "number" || !Number.isFinite(exitCode) || exitCode === 0) return null;
+  const stderr = typeof record.stderr === "string" ? record.stderr : "";
+  const firstLine = stderr.split(/\r?\n/, 1)[0] ?? "";
+  return hash(`${hash(input.tool_input.command)}\0${exitCode}\0${firstLine}`);
+}
+
+export function processInput(input: HookInput): { continue: boolean; stopReason?: string } {
+  if (!input.session_id) return { continue: true };
+  const path = statePath(input.session_id);
+  const signature = redSignature(input);
+  if (!signature) {
+    clearState(path);
+    return { continue: true };
+  }
+
+  const previous = readState(path);
+  const count = previous.signature === signature ? previous.count + 1 : 1;
+  try {
+    mkdirSync(STATE_DIR, { recursive: true });
+    writeFileSync(path, JSON.stringify({ signature, count }));
+  } catch {
+    return { continue: true };
+  }
+
+  return count >= THRESHOLD
+    ? { continue: false, stopReason: `Spiral detector interrupted the session after ${count} identical command failures. Change the command or underlying state before resuming.` }
+    : { continue: true };
+}
+
+export function run(): void {
+  try {
+    const input = JSON.parse(readFileSync(0, "utf8")) as HookInput;
+    console.log(JSON.stringify(processInput(input)));
+  } catch {
+    console.log(JSON.stringify({ continue: true }));
+  }
+}
+
+if (import.meta.main) run();

package/hooks/hook-workspace-repos-guard/README.md

@@ -35,9 +35,10 @@ it sits under `repos/`; parenthesized command groups
 
 ## Configuration
 
-Allowed orgs default to `hasna,hasnaxyz,hasna-internal,hasna-products` and
-are overridable with the `WORKSPACE_REPOS_GUARD_ORGS` env var
-(comma-separated). The home directory is resolved with `os.homedir()` —
+Allowed orgs default to `hasna,hasnaxyz,hasna-products` and are overridable
+with the `WORKSPACE_REPOS_GUARD_ORGS` env var (comma-separated). Private
+workspace orgs must be added per-install via that var; they are never part
+of the public default. The home directory is resolved with `os.homedir()` —
 never hardcoded.
 
 ## Failure mode

package/hooks/hook-workspace-repos-guard/src/hook.test.ts

@@ -15,8 +15,8 @@ function isBlocked(result: { output: { decision?: string; reason?: string } }):
   return null;
 }describe("hook-workspace-repos-guard", () => {
   describe("resolveAllowedOrgs", () => {
-    test("defaults to the four canonical GitHub orgs", () => {
-      expect([...resolveAllowedOrgs({})].sort()).toEqual(["hasna", "hasna-internal", "hasna-products", "hasnaxyz"]);
+    test("defaults to the three public canonical GitHub orgs", () => {
+      expect([...resolveAllowedOrgs({})].sort()).toEqual(["hasna", "hasna-products", "hasnaxyz"]);
     });
 
     test("parses comma-separated env override, trimming whitespace and empties", () => {
@@ -31,9 +31,9 @@ function isBlocked(result: { output: { decision?: string; reason?: string } }):
       expect(isBlocked(result)).toBeNull();
     });
 
-    test("Edit inside hasna-internal org continues", () => {
-      const result = evaluate(preToolUse("Edit", { file_path: join(REPOS, "hasna-internal", "platform", "docs", "readme.md") }));
-      expect(result.output.continue).toBe(true);
+    test("Edit inside a non-default org is blocked", () => {
+      const result = evaluate(preToolUse("Edit", { file_path: join(REPOS, "notanorg", "platform", "docs", "readme.md") }));
+      expect(isBlocked(result)).not.toBeNull();
     });
 
     test("MultiEdit with relative file_path resolves against cwd and continues inside allowed org", () => {
@@ -65,7 +65,7 @@ function isBlocked(result: { output: { decision?: string; reason?: string } }):
         `echo note > ${join(REPOS, "hasna", "apps", "scratch.md")}`,
         `touch ${join(REPOS, "hasna", "apps", "apps", "foo", "x.txt")}`,
         `git clone https://github.com/hasna/foo.git ${join(REPOS, "hasna", "foo")}`,
-        `mkdir -p ${join(REPOS, "hasna-internal", "platform", "apps")}`,
+        `mkdir -p ${join(REPOS, "hasnaxyz", "iapp-probe", "docs")}`,
       ];
       for (const command of commands) {
         const result = evaluate(preToolUse("Bash", { command }));
@@ -77,7 +77,7 @@ function isBlocked(result: { output: { decision?: string; reason?: string } }):
       const commands = [
         `touch ~/workspace/repos/hasna/apps/foo.md`,
         `echo x > ~/workspace/repos/hasnaxyz/iapp-probe/notes.md`,
-        `mkdir -p "${HOME}/workspace/repos/hasna-internal/platform/apps"`,
+        `mkdir -p "${HOME}/workspace/repos/hasnaxyz/iapp-probe/notes"`,
         `touch "$HOME"/workspace/repos/hasna/apps/x.txt`,
         `echo x > "\${HOME}"/workspace/repos/hasnaxyz/iapp-probe/notes.md`,
       ];

package/hooks/hook-workspace-repos-guard/src/hook.ts

@@ -30,8 +30,10 @@
  * tools are inspected through their `*** Add File:` / `*** Update File:` /
  * `*** Delete File:` markers. Parenthesized command groups are unwrapped.
  *
- * Allowed orgs default to hasna,hasnaxyz,hasna-internal,hasna-products and are
- * overridable with the WORKSPACE_REPOS_GUARD_ORGS env var (comma-separated).
+ * Allowed orgs default to hasna,hasnaxyz,hasna-products and are overridable
+ * with the WORKSPACE_REPOS_GUARD_ORGS env var (comma-separated). Private
+ * workspace orgs must be added per-install via that var; they are never part
+ * of the public default.
  * Home is resolved with os.homedir(); never hardcoded. Fail-open on any parse
  * or evaluation error so a guard defect cannot wedge the agent.
  */
@@ -51,7 +53,7 @@ const FILE_WRITE_TOOLS = new Set(["Write", "Edit", "MultiEdit", "NotebookEdit"])
 
 const PATCH_TOOLS = new Set(["apply_patch", "ApplyPatch", "functions.apply_patch"]);
 
-const DEFAULT_ORGS = ["hasna", "hasnaxyz", "hasna-internal", "hasna-products"];
+const DEFAULT_ORGS = ["hasna", "hasnaxyz", "hasna-products"];
 
 const RULE = "workspace-repos-guard";
 

package/hooks/mention-context/src/hasna-mention-context.py

@@ -721,7 +721,7 @@ def render_section(t):
         if proj.get("path"):
             L.append(f"  {'':<11} path {sanitize(proj.get('path'), 120)}")
         if isinstance(dups, int) and dups > 1:
-            # Real hazard, not trivia: `open-todos` exists as FIVE project rows
+            # Real hazard, not trivia: `todos` exists as FIVE project rows
             # with task counters 3/50/58/101/150 across three machine_ids, and
             # the BUG rows are spread over all of them. An agent that files
             # against the wrong row files into a fossil nobody reads.
@@ -732,7 +732,7 @@ def render_section(t):
 
     # --- last 3 bugs -------------------------------------------------------
     # Merged across every matching project row, because BUG rows are genuinely
-    # spread across the duplicates: open-todos carries 58 across 5 rows. Scoping
+    # spread across the duplicates: todos carries 58 across 5 rows. Scoping
     # to the primary alone would hide real bugs. The scope is stated on the line
     # so the count is never read as belonging to the single project above.
     bugs = t.get("bugs") or []

package/hooks/mention-context/src/hasna-mention-warm.py

@@ -340,7 +340,7 @@ def candidate_names(org, word):
 def warm_slow(org, word, tmpdir, projects_cache):
     """Resolve the todos project for a repo and collect its last 3 BUG rows.
 
-    Duplicate project rows are the norm, not the exception: `open-todos` exists
+    Duplicate project rows are the norm, not the exception: `todos` exists
     FOUR times, with 3 / 101 / 58 / 150 task counters on three different
     machine_ids, and the BUG rows are spread across all four (2+7+14+34 = 57).
     Picking by name alone would silently return a 3-task fossil. So the primary

package/hooks/pre-bash/README.md

@@ -81,7 +81,7 @@ remote relative path cannot be resolved against the local working directory.
 
 ## Install for Codewith
 
-Prefer renderer-managed configuration through open-configs. @hasna/hooks can emit the TOML fragment:
+Prefer renderer-managed configuration through configs. @hasna/hooks can emit the TOML fragment:
 
 ```bash
 hooks install pre-bash --target codewith

package/hooks/prompt-guard/README.md

@@ -6,7 +6,7 @@ This hook is OSS-safe: optional Hasna CLIs are best-effort and missing CLIs fail
 
 ## Install for Codewith
 
-Prefer renderer-managed configuration through open-configs. @hasna/hooks can emit the TOML fragment:
+Prefer renderer-managed configuration through configs. @hasna/hooks can emit the TOML fragment:
 
 ```bash
 hooks install prompt-guard --target codewith

package/hooks/session-start/README.md

@@ -6,7 +6,7 @@ This hook is OSS-safe: optional Hasna CLIs are best-effort and missing CLIs fail
 
 ## Install for Codewith
 
-Prefer renderer-managed configuration through open-configs. @hasna/hooks can emit the TOML fragment:
+Prefer renderer-managed configuration through configs. @hasna/hooks can emit the TOML fragment:
 
 ```bash
 hooks install session-start --target codewith

package/hooks/stop-sync/README.md

@@ -6,7 +6,7 @@ This hook is OSS-safe: optional Hasna CLIs are best-effort and missing CLIs fail
 
 ## Install for Codewith
 
-Prefer renderer-managed configuration through open-configs. @hasna/hooks can emit the TOML fragment:
+Prefer renderer-managed configuration through configs. @hasna/hooks can emit the TOML fragment:
 
 ```bash
 hooks install stop-sync --target codewith

package/hooks/worktree-guard/README.md

@@ -61,7 +61,7 @@ from a guardrail by a cooperating agent, not a way to reach a shared checkout.
 
 ## Install for Codewith
 
-Prefer renderer-managed configuration through open-configs. @hasna/hooks can emit the TOML fragment:
+Prefer renderer-managed configuration through configs. @hasna/hooks can emit the TOML fragment:
 
 ```bash
 hooks install worktree-guard --target codewith

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/hooks",
-  "version": "0.6.8",
+  "version": "0.7.0",
   "description": "Open source hooks library for AI coding agents - Install safety, quality, and automation hooks with a single command",
   "type": "module",
   "bin": {
@@ -30,7 +30,9 @@
     "dashboard:dev": "cd dashboard && bun run dev",
     "dashboard:build": "cd dashboard && bun run build",
     "dashboard:preview": "cd dashboard && bun run preview",
-    "postinstall": "mkdir -p $HOME/.hasna/hooks/profiles 2>/dev/null || true"
+    "postinstall": "mkdir -p $HOME/.hasna/hooks/profiles 2>/dev/null || true",
+    "scan:artifact": "bun scripts/artifact-scan.ts",
+    "prepack": "bun run build && bun run scan:artifact"
   },
   "keywords": [
     "claude-code",
@@ -49,11 +51,12 @@
     "@types/pg": "^8.15.6",
     "@types/react": "^18.2.0",
     "typescript": "^5",
-    "bun-types": "1.3.14"
+    "bun-types": "1.3.14",
+    "@hasna/contracts": "0.13.1"
   },
   "dependencies": {
-    "@hasna/events": "^0.1.6",
-    "@hasna/secrets": "0.3.0",
+    "@hasna/events": "^0.1.16",
+    "@hasna/secrets": "0.3.3",
     "@modelcontextprotocol/sdk": "^1.26.0",
     "chalk": "^5.3.0",
     "commander": "^12.1.0",
@@ -64,7 +67,8 @@
     "ink-text-input": "^6.0.0",
     "pg": "^8.16.3",
     "react": "^18.2.0",
-    "zod": "3.25.76"
+    "zod": "3.25.76",
+    "@hasna/contracts": "0.13.1"
   },
   "engines": {
     "bun": ">=1.0.0"