@hiveai/cli 0.9.7 → 0.9.8

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command as Command47 } from "commander";
+import { Command as Command48 } from "commander";
 
 // src/commands/briefing.ts
 import { existsSync } from "fs";
@@ -2171,6 +2171,16 @@ function registerInit(program2) {
       } else {
         ui.warn("Git hooks not installed (not a git repo or no .git/ found) \u2014 run `haive install-hooks` manually");
       }
+      const claudeHookResult = spawnSync(
+        process.execPath,
+        [haiveBin, "install-hooks", "claude", "--scope", "project", "--dir", root],
+        { encoding: "utf8" }
+      );
+      if (claudeHookResult.status === 0) {
+        ui.success("Claude Code enforcement hooks installed (.claude/settings.local.json)");
+      } else {
+        ui.warn("Claude Code hooks not installed \u2014 run `haive install-hooks claude --scope project` manually");
+      }
       try {
         ui.info("Building code-map\u2026");
         const map = await buildCodeMap2(root);
@@ -2342,7 +2352,7 @@ import { findProjectRoot as findProjectRoot6 } from "@hiveai/core";
 import { existsSync as existsSync7 } from "fs";
 import { mkdir as mkdir4, readFile as readFile5, writeFile as writeFile4 } from "fs/promises";
 import path8 from "path";
-var HAIVE_HOOK_TAG = "haive-passive-capture";
+var HAIVE_HOOK_TAG = "haive-enforcement";
 var POST_TOOL_USE_GROUP = {
   matcher: "Edit|Write|Bash",
   hooks: [
@@ -2353,6 +2363,25 @@ var POST_TOOL_USE_GROUP = {
     }
   ]
 };
+var PRE_TOOL_USE_GROUP = {
+  matcher: "Edit|Write|MultiEdit|NotebookEdit|Bash",
+  hooks: [
+    {
+      type: "command",
+      command: "haive enforce pre-tool-use",
+      haive_tag: HAIVE_HOOK_TAG
+    }
+  ]
+};
+var SESSION_START_GROUP = {
+  hooks: [
+    {
+      type: "command",
+      command: "haive enforce session-start",
+      haive_tag: HAIVE_HOOK_TAG
+    }
+  ]
+};
 var SESSION_END_GROUP = {
   hooks: [
     {
@@ -2370,6 +2399,14 @@ function dropHaiveGroups(groups) {
 function patchClaudeSettings(input) {
   const settings = input ? { ...input } : {};
   const hooks = settings.hooks ? { ...settings.hooks } : {};
+  hooks.SessionStart = [
+    ...dropHaiveGroups(hooks.SessionStart ?? []),
+    SESSION_START_GROUP
+  ];
+  hooks.PreToolUse = [
+    ...dropHaiveGroups(hooks.PreToolUse ?? []),
+    PRE_TOOL_USE_GROUP
+  ];
   hooks.PostToolUse = [
     ...dropHaiveGroups(hooks.PostToolUse ?? []),
     POST_TOOL_USE_GROUP
@@ -2523,7 +2560,7 @@ async function installClaudeHooks(opts) {
   try {
     const result = await installClaudeHooksAtPath(settingsPath);
     if (result.created) {
-      ui.success(`Created ${result.settingsPath} with hAIve passive-capture hooks`);
+      ui.success(`Created ${result.settingsPath} with hAIve enforcement hooks`);
     } else {
       ui.success(`Patched ${result.settingsPath} (existing user hooks preserved)`);
     }
@@ -2532,8 +2569,9 @@ async function installClaudeHooks(opts) {
     process.exitCode = 1;
     return;
   }
-  ui.info("PostToolUse hook: `haive observe` runs after every Edit/Write/Bash");
-  ui.info("                   (appends a JSON line to .ai/.cache/observations.jsonl)");
+  ui.info("SessionStart hook: `haive enforce session-start` injects briefing context");
+  ui.info("PreToolUse hook:   blocks Edit/Write/dangerous Bash until briefing is loaded");
+  ui.info("PostToolUse hook:  `haive observe` captures Edit/Write/Bash activity");
   ui.info("SessionEnd hook:   `haive session end --auto --quiet` distills observations");
   ui.info("                   into a session_recap memory at session close");
   ui.info("Restart Claude Code (or open a new conversation) for the hooks to take effect.");
@@ -2541,7 +2579,7 @@ async function installClaudeHooks(opts) {
 }
 function registerInstallHooks(program2) {
   program2.command("install-hooks [target]").description(
-    "Install hAIve hooks. Targets:\n\n    git     (default) post-merge / post-rewrite / pre-push for haive sync + precommit\n    claude  PostToolUse + SessionEnd hooks in ~/.claude/settings.json\n            for passive observation capture (Claude Code only)\n\n  Examples:\n    haive install-hooks           # git hooks (legacy default)\n    haive install-hooks git\n    haive install-hooks claude\n    haive install-hooks claude --scope project\n    haive install-hooks claude --uninstall\n"
+    "Install hAIve hooks. Targets:\n\n    git     (default) post-merge / post-rewrite / pre-push for haive sync + precommit\n    claude  SessionStart + PreToolUse + PostToolUse + SessionEnd hooks\n            for briefing injection, pre-edit blocking, and capture (Claude Code only)\n\n  Examples:\n    haive install-hooks           # git hooks (legacy default)\n    haive install-hooks git\n    haive install-hooks claude\n    haive install-hooks claude --scope project\n    haive install-hooks claude --uninstall\n"
   ).option("-d, --dir <dir>", "project root").option("--force", "overwrite existing hooks (git target only)").option("--scope <scope>", "claude target: 'user' (~/.claude) or 'project' (.claude/)", "user").option("--uninstall", "remove previously installed hAIve hooks (claude target only)").option("--settings <path>", "explicit path to settings.json (claude target only)").action(async (target, opts) => {
     const t = (target ?? "git").toLowerCase();
     if (t === "git") {
@@ -2926,6 +2964,7 @@ import { z as z35 } from "zod";
 import { z as z36 } from "zod";
 import { z as z37 } from "zod";
 import { z as z38 } from "zod";
+import { loadConfigSync } from "@hiveai/core";
 function createContext(options = {}) {
   const env = options.env ?? process.env;
   const cwd = options.cwd ?? process.cwd();
@@ -6030,7 +6069,7 @@ When done, respond with: "Imported N memories: [list of IDs]" or "Nothing action
   };
 }
 var SERVER_NAME = "haive";
-var SERVER_VERSION = "0.9.7";
+var SERVER_VERSION = "0.9.8";
 function jsonResult(data) {
   return {
     content: [
@@ -6041,15 +6080,70 @@ function jsonResult(data) {
     ]
   };
 }
+var ENFORCEMENT_PROFILE_TOOLS = /* @__PURE__ */ new Set([
+  "get_briefing",
+  "mem_save",
+  "mem_tried",
+  "mem_search",
+  "mem_get",
+  "mem_update",
+  "mem_verify",
+  "mem_relevant_to",
+  "code_map",
+  "pre_commit_check"
+]);
+var BRIEFING_TOOLS = /* @__PURE__ */ new Set(["get_briefing", "mem_relevant_to"]);
+var MUTATING_TOOLS = /* @__PURE__ */ new Set([
+  "mem_save",
+  "mem_tried",
+  "mem_observe",
+  "mem_session_end",
+  "bootstrap_project_save",
+  "mem_update",
+  "mem_approve",
+  "mem_reject",
+  "mem_delete",
+  "runtime_journal_append",
+  "pattern_detect"
+]);
 function createHaiveServer(options = {}) {
   const context = createContext(options);
+  const config = loadConfigSync(context.paths);
+  const toolProfile = options.env?.HAIVE_TOOL_PROFILE ?? config.enforcement?.toolProfile ?? "enforcement";
+  const requireBriefingFirst = options.env?.HAIVE_REQUIRE_BRIEFING_FIRST === "0" ? false : config.enforcement?.requireBriefingFirst ?? true;
+  let briefingLoaded = false;
   const tracker = new SessionTracker(context);
   void tracker.init();
   const server = new McpServer(
     { name: SERVER_NAME, version: SERVER_VERSION },
     { capabilities: { tools: {}, prompts: {} } }
   );
-  server.tool(
+  const shouldRegisterTool = (name) => toolProfile === "full" || ENFORCEMENT_PROFILE_TOOLS.has(name);
+  const registerTool = (name, description, schema, handler) => {
+    if (!shouldRegisterTool(name)) return;
+    const tool = server.tool.bind(server);
+    tool(
+      name,
+      description,
+      schema,
+      async (input) => {
+        if (BRIEFING_TOOLS.has(name)) {
+          briefingLoaded = true;
+          return await handler(input);
+        }
+        if (requireBriefingFirst && MUTATING_TOOLS.has(name) && !briefingLoaded) {
+          return jsonResult({
+            error: "haive_briefing_required",
+            message: "This hAIve project requires get_briefing or mem_relevant_to before state-changing hAIve tools. Call get_briefing({ task: '...' }) first.",
+            tool: name
+          });
+        }
+        return await handler(input);
+      }
+    );
+  };
+  const shouldRegisterPrompt = (name) => toolProfile === "full" || name === "bootstrap_project" || name === "post_task";
+  registerTool(
     "mem_save",
     [
       "Save a piece of knowledge as a persistent memory that survives across AI sessions.",
@@ -6081,7 +6175,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await memSave(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "mem_suggest_topic",
     [
       "Propose a stable `topic` key (topic-upsert) from type + short title.",
@@ -6098,7 +6192,7 @@ function createHaiveServer(options = {}) {
     MemSuggestTopicInputSchema,
     async (input) => jsonResult(await memSuggestTopic(input, context))
   );
-  server.tool(
+  registerTool(
     "mem_tried",
     [
       "Record a FAILED approach so future agents don't repeat the same mistake.",
@@ -6125,7 +6219,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await memTried(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "mem_observe",
     [
       "Capture a code-level discovery made WHILE READING existing code.",
@@ -6157,7 +6251,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await memObserve(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "mem_session_end",
     [
       "Save an end-of-session recap so the NEXT session starts with fresh context.",
@@ -6186,7 +6280,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await memSessionEnd(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "get_briefing",
     [
       "\u2B50 DEFAULT-FIRST for coding agents on any repo where `haive init` ran: call this BEFORE",
@@ -6237,7 +6331,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await getBriefing(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "mem_search",
     [
       "Search memories by keyword or semantic similarity.",
@@ -6269,7 +6363,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await memSearch(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "mem_timeline",
     [
       "Chronological view of related memories: by shared frontmatter.topic OR expanded from a seed id",
@@ -6285,7 +6379,7 @@ function createHaiveServer(options = {}) {
     MemTimelineInputSchema,
     async (input) => jsonResult(await memTimeline(input, context))
   );
-  server.tool(
+  registerTool(
     "mem_for_files",
     [
       "Surface memories relevant to the files you are currently editing.",
@@ -6309,7 +6403,7 @@ function createHaiveServer(options = {}) {
     MemForFilesInputSchema,
     async (input) => jsonResult(await memForFiles(input, context))
   );
-  server.tool(
+  registerTool(
     "mem_get",
     [
       "Fetch a single memory by its full id with all details.",
@@ -6325,7 +6419,7 @@ function createHaiveServer(options = {}) {
     MemGetInputSchema,
     async (input) => jsonResult(await memGet(input, context))
   );
-  server.tool(
+  registerTool(
     "mem_list",
     [
       "List memories with optional filters. Use for browsing, not for task onboarding.",
@@ -6345,7 +6439,7 @@ function createHaiveServer(options = {}) {
     MemListInputSchema,
     async (input) => jsonResult(await memList(input, context))
   );
-  server.tool(
+  registerTool(
     "get_project_context",
     [
       "Read .ai/project-context.md (and optionally a module context) directly.",
@@ -6363,7 +6457,7 @@ function createHaiveServer(options = {}) {
     GetProjectContextInputSchema,
     async (input) => jsonResult(await getProjectContext(input, context))
   );
-  server.tool(
+  registerTool(
     "bootstrap_project_save",
     [
       "Persist the project context document (.ai/project-context.md) or a module",
@@ -6381,7 +6475,7 @@ function createHaiveServer(options = {}) {
     BootstrapProjectSaveInputSchema,
     async (input) => jsonResult(await bootstrapProjectSave(input, context))
   );
-  server.tool(
+  registerTool(
     "code_map",
     [
       "Look up where symbols (classes, functions, interfaces) are defined in the codebase.",
@@ -6402,7 +6496,7 @@ function createHaiveServer(options = {}) {
     CodeMapInputSchema,
     async (input) => jsonResult(await codeMapTool(input, context))
   );
-  server.tool(
+  registerTool(
     "mem_resolve_project",
     [
       "Diagnostics: resolve which project root hAIve is using (never throws).",
@@ -6418,7 +6512,7 @@ function createHaiveServer(options = {}) {
     MemResolveProjectInputSchema,
     async (input) => jsonResult(await memResolveProject(input, context))
   );
-  server.tool(
+  registerTool(
     "mem_update",
     [
       "Update the body, tags, or anchor of an existing memory in-place.",
@@ -6441,7 +6535,7 @@ function createHaiveServer(options = {}) {
     MemUpdateInputSchema,
     async (input) => jsonResult(await memUpdate(input, context))
   );
-  server.tool(
+  registerTool(
     "mem_verify",
     [
       "Check whether memory anchor paths and symbols still exist in the current code.",
@@ -6460,7 +6554,7 @@ function createHaiveServer(options = {}) {
     MemVerifyInputSchema,
     async (input) => jsonResult(await memVerify(input, context))
   );
-  server.tool(
+  registerTool(
     "mem_approve",
     [
       "Mark a memory as validated (trusted, approved by a human or the team).",
@@ -6476,7 +6570,7 @@ function createHaiveServer(options = {}) {
     MemApproveInputSchema,
     async (input) => jsonResult(await memApprove(input, context))
   );
-  server.tool(
+  registerTool(
     "mem_reject",
     [
       "Mark a memory as rejected and record a reason.",
@@ -6494,7 +6588,7 @@ function createHaiveServer(options = {}) {
     MemRejectInputSchema,
     async (input) => jsonResult(await memReject(input, context))
   );
-  server.tool(
+  registerTool(
     "mem_pending",
     [
       "List memories in 'proposed' status awaiting review, sorted by read count.",
@@ -6510,7 +6604,7 @@ function createHaiveServer(options = {}) {
     MemPendingInputSchema,
     async (input) => jsonResult(await memPending(input, context))
   );
-  server.tool(
+  registerTool(
     "mem_delete",
     [
       "Permanently delete a memory by id.",
@@ -6527,7 +6621,7 @@ function createHaiveServer(options = {}) {
     MemDeleteInputSchema,
     async (input) => jsonResult(await memDelete(input, context))
   );
-  server.tool(
+  registerTool(
     "get_recap",
     [
       "Return ONLY the most recent session_recap. Cheaper than get_briefing when",
@@ -6545,7 +6639,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await getRecap(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "mem_relevant_to",
     [
       "One-shot ranked memories for a task \u2014 use instead of get_briefing when",
@@ -6571,7 +6665,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await memRelevantTo(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "code_search",
     [
       "Semantic search over the codebase \u2014 finds exported symbols (functions, classes,",
@@ -6594,7 +6688,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await codeSearch(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "why_this_file",
     [
       "One-shot file-context lookup: combines recent git history, memories anchored",
@@ -6614,7 +6708,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await whyThisFile(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "anti_patterns_check",
     [
       "Scan a diff (or set of paths) against documented attempt/gotcha memories.",
@@ -6637,7 +6731,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await antiPatternsCheck(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "mem_distill",
     [
       "Cluster recurring observations / failed attempts so a human can collapse",
@@ -6662,7 +6756,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await memDistill(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "why_this_decision",
     [
       "Trace the genealogy of a memory (especially decision/architecture):",
@@ -6684,7 +6778,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await whyThisDecision(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "mem_conflicts_with",
     [
       "Detect memories that potentially CONTRADICT a given memory.",
@@ -6710,7 +6804,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await memConflicts(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "mem_conflict_candidates",
     [
       "Bulk scan for conflict CANDIDATES (not proof):",
@@ -6731,7 +6825,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await memConflictCandidates(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "runtime_journal_append",
     [
       "Append one line to `.ai/.runtime/session-journal.ndjson` \u2014 machine-local session continuity.",
@@ -6745,7 +6839,7 @@ function createHaiveServer(options = {}) {
     RuntimeJournalAppendInputSchema,
     async (input) => jsonResult(await runtimeJournalAppend(input, context))
   );
-  server.tool(
+  registerTool(
     "runtime_journal_tail",
     [
       "Read the last N entries from the runtime session journal (parsed JSON lines).",
@@ -6757,7 +6851,7 @@ function createHaiveServer(options = {}) {
     RuntimeJournalTailInputSchema,
     async (input) => jsonResult(await runtimeJournalTail(input, context))
   );
-  server.tool(
+  registerTool(
     "pre_commit_check",
     [
       "One-shot 'should I block this commit?' check. Combines three signals:",
@@ -6782,7 +6876,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await preCommitCheck(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "pattern_detect",
     [
       "Heuristic memory detector \u2014 finds knowledge worth saving WITHOUT calling an LLM.",
@@ -6813,7 +6907,7 @@ function createHaiveServer(options = {}) {
       return jsonResult(await patternDetect(input, context));
     }
   );
-  server.tool(
+  registerTool(
     "mem_diff",
     [
       "Compare two memories side-by-side to decide if they should be merged.",
@@ -6830,44 +6924,50 @@ function createHaiveServer(options = {}) {
     MemDiffInputSchema,
     async (input) => jsonResult(await memDiff(input, context))
   );
-  server.prompt(
-    "bootstrap_project",
-    [
-      "Analyze the project codebase and write .ai/project-context.md \u2014 run once after haive init.",
-      "The AI explores the directory structure, reads key files (package.json, README, config),",
-      "identifies the tech stack, architectural patterns, key modules, and conventions,",
-      "then persists everything via bootstrap_project_save.",
-      "For multi-component projects, run with module param to create .ai/modules/<name>/context.md."
-    ].join(" "),
-    BootstrapProjectArgsSchema,
-    (args) => bootstrapProjectPrompt(args, context)
-  );
-  server.prompt(
-    "post_task",
-    [
-      "\u2B50 Post-task reflection \u2014 run at the end of every session to capture what you learned:",
-      "failed approaches (mem_tried), new conventions/decisions/gotchas (mem_save),",
-      "code discoveries (mem_observe), and an end-of-session recap (mem_session_end).",
-      "In autopilot mode a minimal recap saves automatically; calling this produces a richer one."
-    ].join(" "),
-    PostTaskArgsSchema,
-    (args) => postTaskPrompt(args, context)
-  );
-  server.prompt(
-    "import_docs",
-    [
-      "Import knowledge from a document (README, ADR, wiki, API spec) as hAIve memories.",
-      "Pass the full document content; the AI extracts up to 10 actionable memories",
-      "(conventions, decisions, gotchas, architecture) and saves them via mem_save.",
-      "Good candidates: ADRs, onboarding docs, runbooks, team wikis."
-    ].join(" "),
-    ImportDocsArgsSchema,
-    (args) => importDocsPrompt(args, context)
-  );
+  if (shouldRegisterPrompt("bootstrap_project")) {
+    server.prompt(
+      "bootstrap_project",
+      [
+        "Analyze the project codebase and write .ai/project-context.md \u2014 run once after haive init.",
+        "The AI explores the directory structure, reads key files (package.json, README, config),",
+        "identifies the tech stack, architectural patterns, key modules, and conventions,",
+        "then persists everything via bootstrap_project_save.",
+        "For multi-component projects, run with module param to create .ai/modules/<name>/context.md."
+      ].join(" "),
+      BootstrapProjectArgsSchema,
+      (args) => bootstrapProjectPrompt(args, context)
+    );
+  }
+  if (shouldRegisterPrompt("post_task")) {
+    server.prompt(
+      "post_task",
+      [
+        "\u2B50 Post-task reflection \u2014 run at the end of every session to capture what you learned:",
+        "failed approaches (mem_tried), new conventions/decisions/gotchas (mem_save),",
+        "code discoveries (mem_observe), and an end-of-session recap (mem_session_end).",
+        "In autopilot mode a minimal recap saves automatically; calling this produces a richer one."
+      ].join(" "),
+      PostTaskArgsSchema,
+      (args) => postTaskPrompt(args, context)
+    );
+  }
+  if (shouldRegisterPrompt("import_docs")) {
+    server.prompt(
+      "import_docs",
+      [
+        "Import knowledge from a document (README, ADR, wiki, API spec) as hAIve memories.",
+        "Pass the full document content; the AI extracts up to 10 actionable memories",
+        "(conventions, decisions, gotchas, architecture) and saves them via mem_save.",
+        "Good candidates: ADRs, onboarding docs, runbooks, team wikis."
+      ].join(" "),
+      ImportDocsArgsSchema,
+      (args) => importDocsPrompt(args, context)
+    );
+  }
   return { server, context, tracker };
 }
 async function runHaiveMcpStdio(options) {
-  const { server, context } = createHaiveServer({ root: options.root });
+  const { server, context } = createHaiveServer({ root: options.root, env: process.env });
   console.error(
     `[haive-mcp] starting server v${SERVER_VERSION} (project root: ${context.paths.root})`
   );
@@ -10195,7 +10295,7 @@ function parseDays(input) {
 // src/commands/doctor.ts
 import { existsSync as existsSync59 } from "fs";
 import { stat } from "fs/promises";
-import "path";
+import path39 from "path";
 import { execSync as execSync3 } from "child_process";
 import "commander";
 import {
@@ -10356,6 +10456,27 @@ function registerDoctor(program2) {
       }
     }
     const config = await loadConfig7(paths);
+    if (config.enforcement?.requireBriefingFirst) {
+      const claudeSettings = path39.join(root, ".claude", "settings.local.json");
+      let hasClaudeEnforcement = false;
+      if (existsSync59(claudeSettings)) {
+        try {
+          const { readFile: readFile16 } = await import("fs/promises");
+          const raw = await readFile16(claudeSettings, "utf8");
+          hasClaudeEnforcement = raw.includes("haive enforce session-start") && raw.includes("haive enforce pre-tool-use");
+        } catch {
+          hasClaudeEnforcement = false;
+        }
+      }
+      if (!hasClaudeEnforcement) {
+        findings.push({
+          severity: "info",
+          code: "claude-enforcement-hooks-missing",
+          message: "hAIve enforcement is enabled, but project-scoped Claude Code hooks are not installed.",
+          fix: "haive install-hooks claude --scope project"
+        });
+      }
+    }
     if (!config.autoSessionEnd) {
       findings.push({
         severity: "info",
@@ -10370,7 +10491,7 @@ function registerDoctor(program2) {
         timeout: 3e3,
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
-      const cliVersion = "0.9.7";
+      const cliVersion = "0.9.8";
       if (legacyRaw && legacyRaw !== cliVersion) {
         findings.push({
           severity: "warn",
@@ -10972,13 +11093,164 @@ function registerMemoryConflictCandidates(memory2) {
   });
 }
 
+// src/commands/enforce.ts
+import { existsSync as existsSync67 } from "fs";
+import { mkdir as mkdir17 } from "fs/promises";
+import "commander";
+import {
+  findProjectRoot as findProjectRoot46,
+  hasRecentBriefingMarker,
+  resolveBriefingBudget as resolveBriefingBudget3,
+  resolveHaivePaths as resolveHaivePaths43,
+  writeBriefingMarker
+} from "@hiveai/core";
+var MAX_STDIN_BYTES2 = 256 * 1024;
+function registerEnforce(program2) {
+  const enforce = program2.command("enforce").description("Agent enforcement helpers used by hAIve-installed hooks.");
+  enforce.command("session-start").description("Claude Code SessionStart hook: inject briefing and write a local briefing marker.").option("-d, --dir <dir>", "project root").option("--task <text>", "task text to rank memories").option("--source <name>", "marker source", "claude-session-start").option("--session-id <id>", "agent session id").action(async (opts) => {
+    const payload = await readHookPayload();
+    const root = resolveRoot(opts.dir, payload);
+    if (!root) return;
+    const paths = resolveHaivePaths43(root);
+    if (!existsSync67(paths.haiveDir)) return;
+    await mkdir17(paths.runtimeDir, { recursive: true });
+    const sessionId = opts.sessionId ?? payload.session_id;
+    const task = opts.task ?? payload.prompt ?? "Start an AI coding session in this hAIve-initialized project.";
+    await writeBriefingMarker(paths, {
+      sessionId,
+      task,
+      source: opts.source ?? "claude-session-start"
+    });
+    const budget = resolveBriefingBudget3("quick", {
+      max_tokens: 2500,
+      max_memories: 5,
+      include_module_contexts: false
+    });
+    const briefing = await getBriefing(
+      {
+        task,
+        files: [],
+        max_tokens: budget.max_tokens,
+        max_memories: budget.max_memories,
+        include_project_context: true,
+        include_module_contexts: budget.include_module_contexts,
+        semantic: true,
+        include_stale: false,
+        track: true,
+        format: "actions",
+        symbols: [],
+        min_semantic_score: 0.25,
+        budget_preset: "quick"
+      },
+      { paths }
+    );
+    console.log("hAIve briefing loaded. Agents must consult this before editing.");
+    if (briefing.last_session) {
+      console.log(`
+## Last session
+${briefing.last_session.body.slice(0, 1200)}`);
+    }
+    if (briefing.project_context?.content) {
+      console.log(`
+## Project context
+${briefing.project_context.content.slice(0, 1800)}`);
+    }
+    if (briefing.memories.length > 0) {
+      console.log("\n## Relevant memories");
+      for (const memory2 of briefing.memories.slice(0, 6)) {
+        console.log(`
+### ${memory2.id} (${memory2.scope}/${memory2.type}, ${memory2.confidence})`);
+        console.log(memory2.body.slice(0, 1e3));
+      }
+    }
+    for (const warning of briefing.setup_warnings) {
+      console.log(`
+[setup warning] ${warning}`);
+    }
+  });
+  enforce.command("pre-tool-use").description("Claude Code PreToolUse hook: block writes until hAIve briefing has been loaded.").option("-d, --dir <dir>", "project root").action(async (opts) => {
+    const payload = await readHookPayload();
+    const root = resolveRoot(opts.dir, payload);
+    if (!root) return;
+    const paths = resolveHaivePaths43(root);
+    if (!existsSync67(paths.haiveDir)) return;
+    if (!isWriteLikeTool(payload)) return;
+    const ok = await hasRecentBriefingMarker(paths, payload.session_id);
+    if (ok) return;
+    const tool = payload.tool_name ?? "write tool";
+    console.error(
+      [
+        "hAIve enforcement blocked this action.",
+        `Tool: ${tool}`,
+        "",
+        "This project is initialized with hAIve. Load the team briefing before editing:",
+        "  haive enforce session-start",
+        "or call MCP get_briefing / mem_relevant_to from your AI client.",
+        "",
+        "If this is intentional, a human can disable enforcement in .ai/haive.config.json:",
+        '  { "enforcement": { "requireBriefingFirst": false } }'
+      ].join("\n")
+    );
+    process.exit(2);
+  });
+}
+async function readHookPayload() {
+  const raw = await readStdin2(MAX_STDIN_BYTES2);
+  if (!raw.trim()) return {};
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return {};
+  }
+}
+function resolveRoot(dir, payload) {
+  try {
+    return findProjectRoot46(dir ?? payload.cwd);
+  } catch {
+    return null;
+  }
+}
+function isWriteLikeTool(payload) {
+  const tool = payload.tool_name ?? "";
+  if (["Edit", "Write", "MultiEdit", "NotebookEdit"].includes(tool)) return true;
+  if (tool !== "Bash") return false;
+  const command = String(payload.tool_input?.["command"] ?? "");
+  return /\b(rm|mv|cp|mkdir|touch|tee|sed|perl|python|node|npm|pnpm|yarn|git)\b/.test(command) || />{1,2}/.test(command);
+}
+async function readStdin2(maxBytes) {
+  if (process.stdin.isTTY) return "";
+  return await new Promise((resolve) => {
+    const chunks = [];
+    let total = 0;
+    let done = false;
+    const finish = () => {
+      if (done) return;
+      done = true;
+      resolve(Buffer.concat(chunks).toString("utf8"));
+    };
+    process.stdin.on("data", (c) => {
+      total += c.length;
+      if (total > maxBytes) {
+        process.stdin.destroy();
+        finish();
+        return;
+      }
+      chunks.push(c);
+    });
+    process.stdin.on("end", finish);
+    process.stdin.on("error", finish);
+    setTimeout(finish, 2e3);
+  });
+}
+
 // src/index.ts
-var program = new Command47();
-program.name("haive").description("hAIve \u2014 team-first persistent memory layer for AI coding agents").version("0.9.7");
+var program = new Command48();
+program.name("haive").description("hAIve \u2014 team-first persistent memory layer for AI coding agents").version("0.9.8");
 registerInit(program);
 registerWelcome(program);
 registerResolveProject(program);
 registerRuntime(program);
+registerEnforce(program);
 registerMcp(program);
 registerBriefing(program);
 registerTui(program);