@iowarp/clio-coder 0.4.0 → 0.4.2

package/dist/{chunk-QLL7ILRG.js → chunk-UBRFI4HS.js}

@@ -1,46 +1,53 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  hashToolCall
-} from "./chunk-UOV2BYIW.js";
 import {
   TASK_MEMORY_DEFAULT_PROCEDURAL_CAP,
   TASK_MEMORY_POLICY_DEFAULT_TIMEOUT_MS,
   runTaskMemoryPolicy,
   taskMemoryBankDelta
-} from "./chunk-BKFJHQCA.js";
+} from "./chunk-I66EAJFY.js";
 import {
   isTerminalRunEnvelope
-} from "./chunk-J4W7KFM7.js";
+} from "./chunk-IKSLQ4XV.js";
 import {
   taskBoardCounts
-} from "./chunk-2JDWVJND.js";
+} from "./chunk-Q4XWMHX6.js";
+import {
+  hashToolCall
+} from "./chunk-IDNA72AH.js";
 import {
+  SKILL_INSTALL_OFFER_OPTION_NEVER,
+  SKILL_INSTALL_OFFER_OPTION_NOT_NOW,
+  SKILL_INSTALL_OFFER_OPTION_PROJECT,
+  SKILL_INSTALL_OFFER_OPTION_USER,
   SKILL_SUGGESTION_ANCHOR,
   SKILL_SUGGESTION_PREFIX
-} from "./chunk-RAPCMZL4.js";
+} from "./chunk-FSP7CMNU.js";
 import {
   legacyToolResultDigest,
   sanitizeToolResultDigest
-} from "./chunk-CY6FY24N.js";
+} from "./chunk-B7HM5Z7T.js";
 import {
   ToolNames
 } from "./chunk-K6BSR66V.js";
 import {
   registerForegroundStream
-} from "./chunk-DQITNCXG.js";
+} from "./chunk-BYMNWQ7O.js";
 import {
   ceilChars
-} from "./chunk-UM7N4G5A.js";
+} from "./chunk-CWVRRIEI.js";
 import {
   BusChannels
-} from "./chunk-HLW2MRKE.js";
+} from "./chunk-F4EKGO4N.js";
 import {
   reportCommitAttributionDiagnostic,
   withManagedGitCommitAttributionEnvironment
-} from "./chunk-BBVJUZHB.js";
+} from "./chunk-JIEGK6UF.js";
 import {
   require_dist
 } from "./chunk-APJ265NV.js";
+import {
+  clioConfigDir
+} from "./chunk-BYP5D4HI.js";
 import {
   safeResourceWrite
 } from "./chunk-WEPFGWHJ.js";
@@ -424,19 +431,27 @@ function cloneRuleDefinition(definition) {
 function writeMiddlewareDiagnosticToStderr(diagnostic) {
   if (diagnostic.kind === "hook_failed") {
     process.stderr.write(
-      `[clio:middleware] registration '${diagnostic.registrationId}' failed on '${diagnostic.hook}': ${diagnostic.message}
+      `[clio-coder:middleware] registration '${diagnostic.registrationId}' failed on '${diagnostic.hook}': ${diagnostic.message}
 `
     );
     return;
   }
+  if (diagnostic.kind === "registration_conflict") {
+    process.stderr.write(`[clio-coder:middleware] ${formatRegistrationConflict(diagnostic)}
+`);
+    return;
+  }
   if (!diagnostic.steadyStateWarn && process.env.CLIO_CODER_HOOK_BUDGET_DEBUG !== "1") return;
   const stats = diagnostic.stats;
   const trend = stats.window > 0 ? ` (slow on ${stats.overCount}/${stats.window} recent ${diagnostic.hook} calls, p95 ${stats.p95Ms.toFixed(1)}ms)` : "";
   process.stderr.write(
-    `[clio:middleware] registration '${diagnostic.registrationId}' exceeded budget on '${diagnostic.hook}': ${diagnostic.elapsedMs.toFixed(1)}ms > ${diagnostic.budgetMs}ms${trend}
+    `[clio-coder:middleware] registration '${diagnostic.registrationId}' exceeded budget on '${diagnostic.hook}': ${diagnostic.elapsedMs.toFixed(1)}ms > ${diagnostic.budgetMs}ms${trend}
 `
   );
 }
+function formatRegistrationConflict(diagnostic) {
+  return diagnostic.action === "dropped" ? `${diagnostic.owner} registration '${diagnostic.registrationId}' (generation ${diagnostic.generation}) dropped: id is held by a ${diagnostic.conflictsWith} registration` : `${diagnostic.owner} registration '${diagnostic.registrationId}' (generation ${diagnostic.generation}) evicted by a ${diagnostic.conflictsWith} registration with the same id`;
+}
 function registrationFromRuleDefinition(definition) {
   const registration = {
     id: definition.rule.id,
@@ -899,6 +914,7 @@ function createDetachedDispatchNudgeRegistration(options) {
 
 // src/domains/middleware/hook-receipts.ts
 init_esm_shims();
+import { readFileSync } from "node:fs";
 var HOOK_RECEIPT_LOG_CAPACITY = 200;
 var PERSIST_THROTTLE_MS = 2e3;
 function createHookReceiptLog(options = {}) {
@@ -936,456 +952,432 @@ function createHookReceiptLog(options = {}) {
     }
   };
 }
+function readPersistedHookReceipts(persistPath) {
+  let raw;
+  try {
+    raw = readFileSync(persistPath, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT") return [];
+    throw error;
+  }
+  const parsed = JSON.parse(raw);
+  if (parsed.version !== 1 || !Array.isArray(parsed.receipts)) {
+    throw new Error(`${persistPath}: unrecognized hook receipt log shape`);
+  }
+  return parsed.receipts;
+}
 
-// src/domains/middleware/hooks-io.ts
+// src/domains/middleware/skills-reminder.ts
 init_esm_shims();
-var import_yaml = __toESM(require_dist(), 1);
-import { spawnSync } from "node:child_process";
-import { readFileSync } from "node:fs";
-import { join } from "node:path";
+var SKILLS_REMINDER_REGISTRATION_ID = "observer.skills-reminder";
+function skillsReminderMessage(installed, installable = 0) {
+  const counts = installable > 0 ? `${installed} installed, ${installable} installable from the marketplace` : `${installed} installed`;
+  return `[Skills] ${counts}. Start this task by listing them with context(scope="skills") and checking for a match; if one matches, open your reply with the line \`${SKILL_SUGGESTION_ANCHOR}\` (a comma-separated sequence, in order, when several compose) and then continue the task in the same turn without the skill. Only the operator loads a skill, and a marketplace skill is offered for install when the operator runs it. If none match, do not mention skills and continue with the task.`;
+}
+var NO_EFFECTS = [];
+var GREETING_WORDS = /* @__PURE__ */ new Set([
+  "hi",
+  "hello",
+  "hey",
+  "heya",
+  "hiya",
+  "howdy",
+  "yo",
+  "sup",
+  "hola",
+  "greetings",
+  "gm",
+  "gn",
+  "morning",
+  "afternoon",
+  "evening",
+  "good",
+  "day",
+  "night",
+  "there",
+  "you",
+  "clio",
+  "thanks",
+  "thank",
+  "thankyou",
+  "thx",
+  "ty",
+  "ok",
+  "okay",
+  "k",
+  "cool",
+  "nice",
+  "test",
+  "testing",
+  "ping",
+  "pong"
+]);
+function isSubstantiveUserTurn(text) {
+  const normalized = (text ?? "").toLowerCase().replace(/[^\p{L}\p{N}\s]/gu, " ").replace(/\s+/g, " ").trim();
+  if (normalized.length === 0) return false;
+  const tokens = normalized.split(" ");
+  if (tokens.length > 4) return true;
+  return tokens.some((token) => !GREETING_WORDS.has(token));
+}
+function createSkillsReminderRegistration(deps) {
+  let lastSeenSessionId;
+  let spentForActiveSession = false;
+  let observedFreshStart = false;
+  let observedAnyTurn = false;
+  return {
+    id: SKILLS_REMINDER_REGISTRATION_ID,
+    description: "once per session, on the first substantive turn, teaches the skill-suggestion reply protocol; keeps a turn going that stopped on the suggestion",
+    hooks: ["turn_start", "turn_end"],
+    evaluate(input) {
+      if (input.hook === "turn_end") {
+        return isSkillSuggestionWait(input) ? [{ kind: "request_continuation", message: SKILL_SUGGESTION_WAIT_CONTINUATION_MESSAGE }] : NO_EFFECTS;
+      }
+      const sessionId = input.sessionId ?? null;
+      if (lastSeenSessionId === void 0) {
+        lastSeenSessionId = sessionId;
+      } else if (lastSeenSessionId === null && sessionId !== null) {
+        lastSeenSessionId = sessionId;
+      } else if (sessionId !== lastSeenSessionId) {
+        lastSeenSessionId = sessionId;
+        spentForActiveSession = false;
+        observedFreshStart = false;
+        observedAnyTurn = false;
+      }
+      if (spentForActiveSession) return NO_EFFECTS;
+      const conversationMessages = metadataNumber(input, "conversationMessages");
+      if (!observedAnyTurn) {
+        observedAnyTurn = true;
+        if (conversationMessages === null || conversationMessages > 0) {
+          spentForActiveSession = true;
+          return NO_EFFECTS;
+        }
+        observedFreshStart = true;
+      }
+      if (!observedFreshStart) {
+        spentForActiveSession = true;
+        return NO_EFFECTS;
+      }
+      if (!isSubstantiveUserTurn(input.text)) return NO_EFFECTS;
+      spentForActiveSession = true;
+      const pendingSkillRequests = metadataNumber(input, "pendingSkillRequests");
+      if (pendingSkillRequests !== null && pendingSkillRequests > 0) return NO_EFFECTS;
+      let installed = 0;
+      let installable = 0;
+      try {
+        installed = deps.countModelVisibleSkills();
+        installable = deps.countInstallableSkills?.() ?? 0;
+      } catch {
+        return NO_EFFECTS;
+      }
+      if (installed <= 0 && installable <= 0) return NO_EFFECTS;
+      return [{ kind: "inject_reminder", severity: "info", message: skillsReminderMessage(installed, installable) }];
+    }
+  };
+}
 
-// src/domains/middleware/hooks.ts
+// src/domains/middleware/marketplace-offer.ts
 init_esm_shims();
-import { createHash } from "node:crypto";
-import { isAbsolute, resolve } from "node:path";
+import { randomUUID } from "node:crypto";
 
-// src/domains/middleware/validate.ts
+// src/domains/resources/skills/promotion.ts
 init_esm_shims();
-function validateMiddlewareEffect(value, source = "$") {
-  const issues = [];
-  const effect = readMiddlewareEffect(value, source, issues);
-  if (issues.length > 0 || effect === null) return { valid: false, issues };
-  return { valid: true, effect, issues: [] };
-}
-function readMiddlewareEffect(value, path, issues) {
-  if (!isRecord(value)) {
-    issues.push({ path, message: "expected middleware effect object" });
-    return null;
-  }
-  const kindValue = value.kind;
-  if (typeof kindValue !== "string" || !isMiddlewareEffectKind(kindValue)) {
-    issues.push({ path: `${path}.kind`, message: "expected known middleware effect kind" });
-    return null;
-  }
-  switch (kindValue) {
-    case "inject_reminder":
-      return readInjectReminder(value, path, issues);
-    case "annotate_tool_result":
-      return readAnnotateToolResult(value, path, issues);
-    case "block_tool":
-      return readBlockTool(value, path, issues);
-    case "protect_path":
-      return readProtectPath(value, path, issues);
-    case "request_continuation":
-      return readRequestContinuation(value, path, issues);
-    case "require_tool":
-      return readRequireTool(value, path, issues);
-    case "lock_tools":
-      rejectUnexpectedFields(value, path, ["kind"], issues);
-      return { kind: "lock_tools" };
-  }
-}
-function readRequireTool(record, path, issues) {
-  rejectUnexpectedFields(record, path, ["kind", "toolName"], issues);
-  const toolName = readRequiredString(record, `${path}.toolName`, issues);
-  return toolName === null ? null : { kind: "require_tool", toolName };
-}
-function readInjectReminder(record, path, issues) {
-  rejectUnexpectedFields(record, path, ["kind", "message", "severity"], issues);
-  const message = readRequiredString(record, `${path}.message`, issues);
-  const severity = readOptionalString(record, `${path}.severity`, issues);
-  if (severity !== void 0 && !isMiddlewareReminderSeverity(severity)) {
-    issues.push({ path: `${path}.severity`, message: "expected info, advisory, warn, or hard-block" });
-  }
-  if (message === null) return null;
-  const effect = { kind: "inject_reminder", message };
-  if (severity !== void 0 && isMiddlewareReminderSeverity(severity)) effect.severity = severity;
-  return effect;
+import { existsSync, readFileSync as readFileSync2 } from "node:fs";
+import path from "node:path";
+var TOKEN_STOPWORDS = /* @__PURE__ */ new Set([
+  "the",
+  "a",
+  "an",
+  "and",
+  "or",
+  "for",
+  "with",
+  "this",
+  "that",
+  "when",
+  "what",
+  "how",
+  "into",
+  "from",
+  "use",
+  "used",
+  "using",
+  "one",
+  "not",
+  "skill",
+  "skills",
+  "clio",
+  "please",
+  "can",
+  "you",
+  "should",
+  "would",
+  "about",
+  "need",
+  "want",
+  "help",
+  "make",
+  "file",
+  "files",
+  "code"
+]);
+function normalize(text) {
+  return text.toLowerCase().replace(/[^\p{L}\p{N}\s]/gu, " ").replace(/\s+/g, " ").trim();
 }
-function readAnnotateToolResult(record, path, issues) {
-  rejectUnexpectedFields(record, path, ["kind", "message", "severity"], issues);
-  const message = readRequiredString(record, `${path}.message`, issues);
-  const severity = readOptionalString(record, `${path}.severity`, issues);
-  if (severity !== void 0 && !isMiddlewareAnnotationSeverity(severity)) {
-    issues.push({ path: `${path}.severity`, message: "expected info or warn" });
-  }
-  if (message === null) return null;
-  const effect = { kind: "annotate_tool_result", message };
-  if (severity !== void 0 && isMiddlewareAnnotationSeverity(severity)) effect.severity = severity;
-  return effect;
+function distinctiveTokens(text) {
+  return new Set(
+    normalize(text).split(" ").filter((token) => token.length >= 4 && !TOKEN_STOPWORDS.has(token))
+  );
 }
-function readBlockTool(record, path, issues) {
-  rejectUnexpectedFields(record, path, ["kind", "reason", "severity"], issues);
-  const reason = readRequiredString(record, `${path}.reason`, issues);
-  const severity = readRequiredString(record, `${path}.severity`, issues);
-  if (severity !== null && severity !== "hard-block") {
-    issues.push({ path: `${path}.severity`, message: "expected hard-block" });
+var TRIGGER_SCORE = 4;
+var TOKEN_FIRE_THRESHOLD = 3;
+function scorePromotionEntry(userText, entry) {
+  const haystack = ` ${normalize(userText)} `;
+  if (haystack.trim().length === 0) return null;
+  for (const trigger of entry.triggers ?? []) {
+    const phrase = normalize(trigger);
+    if (phrase.length >= 4 && haystack.includes(` ${phrase} `)) {
+      return { entry, score: TRIGGER_SCORE, matchedTrigger: trigger };
+    }
   }
-  if (reason === null || severity !== "hard-block") return null;
-  return { kind: "block_tool", reason, severity };
-}
-function readProtectPath(record, path, issues) {
-  rejectUnexpectedFields(record, path, ["kind", "path", "reason"], issues);
-  const protectedPath = readRequiredString(record, `${path}.path`, issues);
-  const reason = readRequiredString(record, `${path}.reason`, issues);
-  if (protectedPath === null || reason === null) return null;
-  return { kind: "protect_path", path: protectedPath, reason };
+  const requestTokens = distinctiveTokens(userText);
+  if (requestTokens.size === 0) return null;
+  const entryTokens = distinctiveTokens(`${entry.name.replace(/-/g, " ")} ${entry.description}`);
+  let overlap = 0;
+  for (const token of requestTokens) if (entryTokens.has(token)) overlap += 1;
+  return overlap >= TOKEN_FIRE_THRESHOLD ? { entry, score: overlap } : null;
+}
+function matchMarketplaceSkills(userText, entries, excludedNames) {
+  const matches = [];
+  for (const entry of entries) {
+    if (entry.kind !== "skill" || excludedNames.has(entry.name)) continue;
+    const match = scorePromotionEntry(userText, entry);
+    if (match) matches.push(match);
+  }
+  return matches.sort((a, b) => b.score - a.score || a.entry.name.localeCompare(b.entry.name));
+}
+var OWN_MARKETPLACE_URL_PREFIX = "https://github.com/iowarp/clio-coder/";
+function isOwnMarketplaceSource(entry) {
+  const source = entry.sourceUrl.trim();
+  if (/^(?:https?:\/\/|git@)/.test(source)) return source.startsWith(OWN_MARKETPLACE_URL_PREFIX);
+  return entry.origin === "catalog" && path.isAbsolute(source);
+}
+function assertPromotionInstallSource(entry) {
+  if (isOwnMarketplaceSource(entry)) return;
+  throw new Error(
+    `skill promotion: refusing to install "${entry.name}" from ${entry.sourceUrl}; promotion installs only from Clio's own marketplace (local catalog or ${OWN_MARKETPLACE_URL_PREFIX}). Install manually with clio-coder skills install if intended.`
+  );
 }
-function readRequestContinuation(record, path, issues) {
-  rejectUnexpectedFields(record, path, ["kind", "message"], issues);
-  const message = readRequiredString(record, `${path}.message`, issues);
-  if (message === null) return null;
-  return { kind: "request_continuation", message };
+var PROMOTION_DECLINES_FILE = "skill-promotion-declines.json";
+function declineKey(name, version) {
+  return `${name}@${version ?? ""}`;
 }
-function readRequiredString(record, path, issues) {
-  const value = record[pathField(path)];
-  if (typeof value !== "string" || value.trim().length === 0) {
-    issues.push({ path, message: "expected non-empty string" });
-    return null;
-  }
-  return value;
+function declinesPath(configDir) {
+  return path.join(configDir ?? clioConfigDir(), PROMOTION_DECLINES_FILE);
 }
-function readOptionalString(record, path, issues) {
-  const field = pathField(path);
-  if (!Object.hasOwn(record, field)) return void 0;
-  const value = record[field];
-  if (typeof value !== "string" || value.trim().length === 0) {
-    issues.push({ path, message: "expected non-empty string" });
-    return void 0;
+function readPromotionDeclines(configDir) {
+  const file = declinesPath(configDir);
+  if (!existsSync(file)) return { never: {} };
+  try {
+    const parsed = JSON.parse(readFileSync2(file, "utf8"));
+    const never = parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed.never : void 0;
+    if (never && typeof never === "object" && !Array.isArray(never)) {
+      const entries = Object.entries(never).filter(
+        (pair) => typeof pair[1] === "string"
+      );
+      return { never: Object.fromEntries(entries) };
+    }
+  } catch {
   }
-  return value;
+  return { never: {} };
 }
-function rejectUnexpectedFields(record, path, allowedFields, issues) {
-  const allowed = new Set(allowedFields);
-  for (const field of Object.keys(record).sort((a, b) => a.localeCompare(b))) {
-    if (!allowed.has(field)) issues.push({ path: `${path}.${field}`, message: "unexpected field" });
-  }
+function recordPromotionNeverDecline(name, version, configDir) {
+  const store = readPromotionDeclines(configDir);
+  store.never[declineKey(name, version)] = (/* @__PURE__ */ new Date()).toISOString();
+  safeResourceWrite(declinesPath(configDir), `${JSON.stringify(store, null, 2)}
+`, { encoding: "utf8" });
 }
-function pathField(path) {
-  return path.slice(path.lastIndexOf(".") + 1);
+
+// src/domains/middleware/marketplace-offer.ts
+var MARKETPLACE_OFFER_REGISTRATION_ID = "observer.marketplace-offer";
+var NO_EFFECTS2 = [];
+function offerBindingTag(offerTag) {
+  return `[clio-install:${offerTag}]`;
 }
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+function marketplaceOfferReminder(entry, offerTag) {
+  return `[Marketplace] This request may need expertise no installed skill covers. The local marketplace has "${entry.name}" (not installed): ${entry.description} First check the installed side with context(scope="skills"); if ${entry.name} is genuinely the right fit and nothing installed serves, ask the operator with ask_user (mode=single_question, header "Install skill") whether to install ${entry.name}, offering exactly these options in this order: "${SKILL_INSTALL_OFFER_OPTION_PROJECT}", "${SKILL_INSTALL_OFFER_OPTION_USER}", "${SKILL_INSTALL_OFFER_OPTION_NOT_NOW}", "${SKILL_INSTALL_OFFER_OPTION_NEVER}". Include the exact tag ${offerBindingTag(offerTag)} verbatim in that question's text so the harness can bind the answer to this offer; the harness acts only on an answer carrying this tag. Then continue the task in the same turn. The harness handles the answer; never install or load a skill yourself. If it is not actually needed, do not mention it.`;
 }
-
-// src/domains/middleware/hooks.ts
-var USER_HOOK_ORIGIN_ORDER = ["extension", "user", "project", "project.local"];
-var USER_HOOK_COMMAND_TIMEOUT_DEFAULT_MS = 2e3;
-var USER_HOOK_COMMAND_TIMEOUT_MIN_MS = 100;
-var USER_HOOK_COMMAND_TIMEOUT_MAX_MS = 5e3;
-var USER_HOOK_COMMAND_OUTPUT_MAX_CHARS = 4e3;
-var USER_HOOK_PROMPT_MAX_CHARS = 2e3;
-function isRecord2(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
+function marketplaceAutoInstallReminder(entry, result) {
+  return `[Marketplace] Installed skill "${entry.name}" from Clio's own local marketplace (full-auto) to ${result.path}. Source ${result.sourceUrl}, sha256 ${result.installedHash}. ${entry.description} It is installed but not active \u2014 activation stays operator-gated. If it fits this task, suggest /skill ${entry.name} to the operator; never load it yourself.`;
 }
-function stableHash(value) {
-  return createHash("sha256").update(canonicalJson(value)).digest("hex").slice(0, 16);
+function answersFromDetails(details) {
+  const raw = details?.answers;
+  if (!Array.isArray(raw)) return [];
+  return raw.filter(
+    (entry) => typeof entry === "object" && entry !== null && typeof entry.question === "string" && typeof entry.answer === "string"
+  );
 }
-function canonicalJson(value) {
-  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
-  if (isRecord2(value)) {
-    const keys = Object.keys(value).sort();
-    return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`).join(",")}}`;
+function chosenOfferOption(answer) {
+  const labels = [
+    SKILL_INSTALL_OFFER_OPTION_PROJECT,
+    SKILL_INSTALL_OFFER_OPTION_USER,
+    SKILL_INSTALL_OFFER_OPTION_NOT_NOW,
+    SKILL_INSTALL_OFFER_OPTION_NEVER
+  ];
+  for (const label of labels) {
+    if (answer.options?.includes(label)) return label;
   }
-  return JSON.stringify(value) ?? "null";
-}
-function readStringArray(value) {
-  if (!Array.isArray(value)) return null;
-  const out = [];
-  for (const item of value) {
-    if (typeof item !== "string" || item.length === 0) return null;
-    out.push(item);
+  for (const label of labels) {
+    if (answer.answer.includes(label)) return label;
   }
-  return out;
+  return null;
 }
-function normalizeCommandSpec(raw, options, issues) {
-  const argv = readStringArray(raw.argv);
-  if (!argv || argv.length === 0) {
-    issues.push("command.argv must be a non-empty array of non-empty strings");
-    return null;
-  }
-  const spec = {
-    kind: "command",
-    argv,
-    cwd: resolve(options.workspaceRoot),
-    timeoutMs: USER_HOOK_COMMAND_TIMEOUT_DEFAULT_MS,
-    as: "annotate"
+function createMarketplaceOfferRegistration(deps) {
+  const declines = deps.declines ?? {
+    readNever: () => readPromotionDeclines().never,
+    recordNever: (name, version) => recordPromotionNeverDecline(name, version)
   };
-  if (raw.cwd !== void 0) {
-    if (typeof raw.cwd !== "string" || raw.cwd.length === 0) {
-      issues.push("command.cwd must be a non-empty string");
-      return null;
+  const newOfferTag = deps.newOfferTag ?? (() => randomUUID());
+  let lastSeenSessionId;
+  let offeredNames = /* @__PURE__ */ new Set();
+  let sessionDeclines = /* @__PURE__ */ new Set();
+  let installedNamesCache = null;
+  let marketplaceEntriesCache = null;
+  let pendingOffer = null;
+  const trackSession = (input) => {
+    const sessionId = input.sessionId ?? null;
+    if (lastSeenSessionId === void 0 || lastSeenSessionId === null && sessionId !== null) {
+      lastSeenSessionId = sessionId;
+      return;
     }
-    const resolved = isAbsolute(raw.cwd) ? resolve(raw.cwd) : resolve(options.workspaceRoot, raw.cwd);
-    if (!isWithin(resolved, options.workspaceRoot)) {
-      issues.push("command.cwd must resolve under the workspace root");
-      return null;
+    if (sessionId !== lastSeenSessionId) {
+      lastSeenSessionId = sessionId;
+      offeredNames = /* @__PURE__ */ new Set();
+      sessionDeclines = /* @__PURE__ */ new Set();
+      pendingOffer = null;
+      installedNamesCache = null;
+      marketplaceEntriesCache = null;
     }
-    spec.cwd = resolved;
-  }
-  if (raw.timeoutMs !== void 0) {
-    if (typeof raw.timeoutMs !== "number" || !Number.isFinite(raw.timeoutMs)) {
-      issues.push("command.timeoutMs must be a number");
+  };
+  const bestMatch = (text) => {
+    const installedWasCached = installedNamesCache !== null;
+    let never;
+    try {
+      installedNamesCache ??= new Set(deps.listInstalledSkillNames());
+      marketplaceEntriesCache ??= deps.listMarketplaceEntries();
+      never = declines.readNever();
+    } catch {
       return null;
     }
-    spec.timeoutMs = Math.min(
-      USER_HOOK_COMMAND_TIMEOUT_MAX_MS,
-      Math.max(USER_HOOK_COMMAND_TIMEOUT_MIN_MS, Math.floor(raw.timeoutMs))
-    );
-  }
-  if (raw.as !== void 0) {
-    if (raw.as !== "annotate" && raw.as !== "reminder") {
-      issues.push('command.as must be "annotate" or "reminder"');
-      return null;
+    const declinedKeys = /* @__PURE__ */ new Set([...Object.keys(never), ...sessionDeclines]);
+    const findMatch = () => matchMarketplaceSkills(
+      text,
+      marketplaceEntriesCache ?? [],
+      /* @__PURE__ */ new Set([...installedNamesCache ?? [], ...offeredNames])
+    ).find((candidate) => !declinedKeys.has(declineKey(candidate.entry.name, candidate.entry.version))) ?? null;
+    let match = findMatch();
+    if (match && installedWasCached) {
+      try {
+        installedNamesCache = new Set(deps.listInstalledSkillNames());
+      } catch {
+        return null;
+      }
+      match = findMatch();
     }
-    spec.as = raw.as;
-  }
-  return spec;
-}
-function normalizePromptSpec(raw, issues) {
-  if (typeof raw.message !== "string" || raw.message.trim().length === 0) {
-    issues.push("prompt.message must be a non-empty string");
-    return null;
-  }
-  let severity = "info";
-  if (raw.severity !== void 0) {
-    if (typeof raw.severity !== "string" || !isMiddlewareReminderSeverity(raw.severity)) {
-      issues.push("prompt.severity must be info, advisory, warn, or hard-block");
-      return null;
+    return match;
+  };
+  const installGated = (entry, scope) => {
+    assertPromotionInstallSource(entry);
+    const result = deps.installEntry(entry, scope);
+    installedNamesCache?.add(entry.name);
+    return result;
+  };
+  const evaluateAskUserAnswers = (input) => {
+    const offer = pendingOffer;
+    if (!offer) return NO_EFFECTS2;
+    const marker = offerBindingTag(offer.tag);
+    if (input.toolResultDetails?.cancelled === true) {
+      return NO_EFFECTS2;
     }
-    severity = raw.severity;
-  }
-  return { kind: "prompt", message: raw.message.slice(0, USER_HOOK_PROMPT_MAX_CHARS), severity };
-}
-function normalizeEffectSpec(raw, issues) {
-  const result = validateMiddlewareEffect(raw.effect ?? raw, "effect");
-  if (!result.valid) {
-    for (const issue of result.issues) issues.push(`effect: ${issue.message}`);
-    return null;
-  }
-  return { kind: "effect", effect: result.effect };
-}
-function isWithin(child, parent) {
-  const rel = resolve(child);
-  const base = resolve(parent);
-  return rel === base || rel.startsWith(`${base}/`);
-}
-function normalizeUserHook(raw, source, options) {
-  const issues = [];
-  if (!isRecord2(raw)) {
-    return { issues: ["hook declaration must be an object"] };
-  }
-  if (raw.on === void 0 || typeof raw.on !== "string" || !isMiddlewareHook(raw.on)) {
-    issues.push("on must be one of before_tool, after_tool, turn_start, turn_end, on_compaction");
-  }
-  let tools;
-  if (raw.tools !== void 0) {
-    const parsed = readStringArray(raw.tools);
-    if (!parsed) issues.push("tools must be an array of non-empty tool names");
-    else tools = parsed;
-  }
-  let enabled = true;
-  if (raw.enabled !== void 0) {
-    if (typeof raw.enabled !== "boolean") issues.push("enabled must be a boolean");
-    else enabled = raw.enabled;
-  }
-  let spec = null;
-  if (raw.kind === "command") spec = normalizeCommandSpec(raw, options, issues);
-  else if (raw.kind === "prompt") spec = normalizePromptSpec(raw, issues);
-  else if (raw.kind === "effect") spec = normalizeEffectSpec(raw, issues);
-  else issues.push('kind must be "command", "prompt", or "effect"');
-  if (issues.length > 0 || spec === null || raw.on === void 0 || typeof raw.on !== "string") {
-    return { issues };
-  }
-  const on = raw.on;
-  const hash = stableHash({ on, tools: tools ?? null, spec });
-  const id = typeof raw.id === "string" && raw.id.length > 0 ? raw.id : `${source.sourceId ?? source.origin}.${spec.kind}.${hash}`;
-  const hook = { id, source, hash, on, enabled, spec };
-  if (tools !== void 0) hook.tools = tools;
-  return { hook, issues };
-}
-function declarationsArray(declarations) {
-  if (Array.isArray(declarations)) return declarations;
-  if (isRecord2(declarations) && Array.isArray(declarations.hooks)) return declarations.hooks;
-  return [];
-}
-function loadUserHooks(batches, options) {
-  const ordered = [...batches].sort(
-    (a, b) => USER_HOOK_ORIGIN_ORDER.indexOf(a.source.origin) - USER_HOOK_ORIGIN_ORDER.indexOf(b.source.origin)
-  );
-  const byId = /* @__PURE__ */ new Map();
-  const overridden = [];
-  const issues = [];
-  for (const batch of ordered) {
-    const declarations = declarationsArray(batch.declarations);
-    declarations.forEach((raw, index) => {
-      const result = normalizeUserHook(raw, batch.source, options);
-      if (!result.hook) {
-        issues.push({ source: batch.source, index, issues: result.issues });
-        return;
+    for (const answer of answersFromDetails(input.toolResultDetails)) {
+      if (!answer.question.includes(marker)) continue;
+      const option = chosenOfferOption(answer);
+      if (option === null) continue;
+      pendingOffer = null;
+      const offerKey = declineKey(offer.entry.name, offer.entry.version);
+      if (option === SKILL_INSTALL_OFFER_OPTION_NOT_NOW) {
+        sessionDeclines.add(offerKey);
+        return NO_EFFECTS2;
       }
-      const existing = byId.get(result.hook.id);
-      if (existing) overridden.push({ winner: batch.source, loser: existing });
-      byId.set(result.hook.id, result.hook);
-    });
-  }
-  return { hooks: [...byId.values()], overridden, issues };
-}
-function reminderEffect(message, severity) {
-  return severity === "info" ? { kind: "inject_reminder", message } : { kind: "inject_reminder", message, severity };
-}
-function commandEffect(hook, output) {
-  const message = output.slice(0, USER_HOOK_COMMAND_OUTPUT_MAX_CHARS);
-  return hook.as === "reminder" ? { kind: "inject_reminder", message } : { kind: "annotate_tool_result", message };
-}
-function userHookToRegistration(hook, deps) {
-  const now = deps.now ?? Date.now;
-  const baseReceipt = (input) => ({
-    at: now(),
-    hookId: hook.id,
-    origin: hook.source.origin,
-    sourcePath: hook.source.sourcePath,
-    hash: hook.hash,
-    hook: hook.on,
-    kind: hook.spec.kind,
-    ...input.toolName !== void 0 ? { toolName: input.toolName } : {}
-  });
-  const registration = {
-    id: hook.id,
-    description: `${hook.spec.kind} hook from ${hook.source.origin} (${hook.source.sourcePath})`,
-    hooks: [hook.on],
-    evaluate: (input) => {
-      if (!hook.enabled) return [];
+      if (option === SKILL_INSTALL_OFFER_OPTION_NEVER) {
+        sessionDeclines.add(offerKey);
+        try {
+          declines.recordNever(offer.entry.name, offer.entry.version);
+        } catch {
+        }
+        return NO_EFFECTS2;
+      }
+      const scope = option === SKILL_INSTALL_OFFER_OPTION_USER ? "user" : "project";
       try {
-        return evaluateHook(hook, deps, baseReceipt(input));
-      } catch {
-        deps.recordReceipt({ ...baseReceipt(input), outcome: "skipped" });
-        return [];
+        const result = installGated(offer.entry, scope);
+        return [
+          {
+            kind: "annotate_tool_result",
+            severity: "info",
+            message: `[Marketplace] Installed skill "${offer.entry.name}" (${scope} scope) to ${result.path}. It is installed but not active; the operator activates it with /skill ${offer.entry.name}.`
+          }
+        ];
+      } catch (error) {
+        sessionDeclines.add(offerKey);
+        return [
+          {
+            kind: "annotate_tool_result",
+            severity: "warn",
+            message: `[Marketplace] Install of "${offer.entry.name}" failed: ${error instanceof Error ? error.message : String(error)}. Continue the task without it.`
+          }
+        ];
       }
     }
+    return NO_EFFECTS2;
   };
-  if (hook.tools !== void 0) registration.toolNames = [...hook.tools];
-  return registration;
-}
-function evaluateHook(hook, deps, base) {
-  if (hook.spec.kind === "prompt") {
-    const effect2 = reminderEffect(hook.spec.message, hook.spec.severity);
-    deps.recordReceipt({ ...base, outcome: "emitted", effectKinds: ["inject_reminder"] });
-    return [effect2];
-  }
-  if (hook.spec.kind === "effect") {
-    deps.recordReceipt({ ...base, outcome: "emitted", effectKinds: [hook.spec.effect.kind] });
-    return [hook.spec.effect];
-  }
-  const result = deps.runCommand(hook.spec.argv, {
-    timeoutMs: hook.spec.timeoutMs,
-    ...hook.spec.cwd !== void 0 ? { cwd: hook.spec.cwd } : {}
-  });
-  const output = (result.stdout || result.stderr || "").trim();
-  if (result.timedOut) {
-    deps.recordReceipt({ ...base, outcome: "command-timeout", exitCode: result.code ?? -1, outputChars: output.length });
-    return [];
-  }
-  const outcome = result.code === 0 ? "command-ok" : "command-failed";
-  deps.recordReceipt({ ...base, outcome, exitCode: result.code ?? -1, outputChars: output.length });
-  if (output.length === 0) return [];
-  const effect = commandEffect(hook.spec, output);
-  return [effect];
-}
-
-// src/domains/middleware/hooks-io.ts
-var COMMAND_OUTPUT_MAX_BYTES = 1024 * 1024;
-function readBatch(source, filePath, fileIssues) {
-  let text;
-  try {
-    text = readFileSync(filePath, "utf8");
-  } catch {
-    return null;
-  }
-  try {
-    const parsed = (0, import_yaml.parse)(text);
-    return { source, declarations: parsed ?? [] };
-  } catch (err) {
-    fileIssues.push({
-      source,
-      message: `failed to parse ${filePath}: ${err instanceof Error ? err.message : String(err)}`
-    });
-    return null;
-  }
-}
-function readHookSources(options) {
-  const fileIssues = [];
-  const batches = [];
-  for (const extension of options.extensions ?? []) {
-    const source = {
-      origin: "extension",
-      sourcePath: `${extension.id}:hooks.yaml`,
-      sourceId: extension.id
-    };
-    const batch = readBatch(source, join(extension.rootPath, "hooks.yaml"), fileIssues);
-    if (batch) batches.push(batch);
-  }
-  const projectBatch = readBatch(
-    { origin: "project", sourcePath: ".clio-coder/hooks.yaml" },
-    join(options.cwd, ".clio-coder", "hooks.yaml"),
-    fileIssues
-  );
-  if (projectBatch) batches.push(projectBatch);
-  const localBatch = readBatch(
-    { origin: "project.local", sourcePath: ".clio-coder/hooks.local.yaml" },
-    join(options.cwd, ".clio-coder", "hooks.local.yaml"),
-    fileIssues
-  );
-  if (localBatch) batches.push(localBatch);
-  return { batches, fileIssues };
-}
-function installUserHooks(options) {
-  const workspaceRoot = options.workspaceRoot ?? options.cwd;
-  const readOptions = { cwd: options.cwd };
-  if (options.extensions !== void 0) readOptions.extensions = options.extensions;
-  const { batches, fileIssues } = readHookSources(readOptions);
-  const loaded = loadUserHooks(batches, { workspaceRoot });
-  const runCommand = options.runCommand ?? spawnSyncCommandRunner();
-  for (const hook of loaded.hooks) {
-    options.registerHook(
-      userHookToRegistration(hook, {
-        recordReceipt: options.recordReceipt,
-        runCommand,
-        ...options.now !== void 0 ? { now: options.now } : {}
-      })
-    );
-  }
-  return { ...loaded, fileIssues };
-}
-function spawnSyncCommandRunner() {
-  return (argv, options) => {
-    const [command, ...args] = argv;
-    const attribution = withManagedGitCommitAttributionEnvironment(process.env, {
-      cwd: options.cwd ?? process.cwd(),
-      evidence: {}
-    });
-    reportCommitAttributionDiagnostic(attribution.diagnostic);
-    const result = spawnSync(command ?? "", args, {
-      ...options.cwd !== void 0 ? { cwd: options.cwd } : {},
-      timeout: options.timeoutMs,
-      maxBuffer: COMMAND_OUTPUT_MAX_BYTES,
-      encoding: "utf8",
-      shell: false,
-      env: attribution.env
-    });
-    const timedOut = result.error !== void 0 && result.error.code === "ETIMEDOUT";
-    return {
-      code: result.status,
-      timedOut,
-      stdout: typeof result.stdout === "string" ? result.stdout : "",
-      stderr: typeof result.stderr === "string" ? result.stderr : ""
-    };
+  return {
+    id: MARKETPLACE_OFFER_REGISTRATION_ID,
+    description: "offers an uninstalled marketplace skill via ask_user when the request matches it; consented installs run gated to Clio's own marketplace, declines are remembered",
+    hooks: ["turn_start", "after_tool"],
+    evaluate(input) {
+      trackSession(input);
+      if (input.hook === "after_tool") {
+        return input.toolName === ToolNames.AskUser ? evaluateAskUserAnswers(input) : NO_EFFECTS2;
+      }
+      if (input.hook !== "turn_start") return NO_EFFECTS2;
+      if (!isSubstantiveUserTurn(input.text)) return NO_EFFECTS2;
+      const pendingSkillRequests = metadataNumber(input, "pendingSkillRequests");
+      if (pendingSkillRequests !== null && pendingSkillRequests > 0) return NO_EFFECTS2;
+      const match = bestMatch(input.text ?? "");
+      if (!match) return NO_EFFECTS2;
+      offeredNames.add(match.entry.name);
+      if (deps.getAutonomy() === "full-auto") {
+        try {
+          const result = installGated(match.entry, "project");
+          return [
+            {
+              kind: "inject_reminder",
+              severity: "info",
+              message: marketplaceAutoInstallReminder(match.entry, result)
+            }
+          ];
+        } catch {
+        }
+      }
+      const tag = newOfferTag();
+      pendingOffer = { entry: match.entry, tag };
+      return [{ kind: "inject_reminder", severity: "info", message: marketplaceOfferReminder(match.entry, tag) }];
+    }
   };
 }
 
 // src/domains/middleware/memory-intervention.ts
 init_esm_shims();
-import { createHash as createHash2 } from "node:crypto";
+import { createHash } from "node:crypto";
 var MEMORY_INTERVENTION_REGISTRATION_ID = "observer.memory-intervention";
 var MEMORY_INTERVENTION_DEFAULT_WINDOW_STEPS = 8;
 var MEMORY_INTERVENTION_DEFAULT_MAX_TOKENS = 2e3;
@@ -1393,7 +1385,7 @@ var MEMORY_INTERVENTION_DEFAULT_EVERY_N_TOOLS = 10;
 var MEMORY_INTERVENTION_TIMEOUT_BACKOFF_THRESHOLD = 2;
 var MEMORY_INTERVENTION_ACTIVITY_LIMIT = 20;
 var CALL_DESCRIPTION_MAX_CHARS = 180;
-var NO_EFFECTS = [];
+var NO_EFFECTS3 = [];
 function createMemoryInterventionRegistration(deps) {
   const pending = /* @__PURE__ */ new Map();
   const trajectory = [];
@@ -1423,16 +1415,16 @@ function createMemoryInterventionRegistration(deps) {
     description: "maintain bounded task execution memory and selectively remind after repeated failures or compaction",
     hooks: ["before_tool", "after_tool", "turn_start", "turn_end", "on_compaction"],
     evaluate(input) {
-      if (!settings().enabled) return NO_EFFECTS;
+      if (!settings().enabled) return NO_EFFECTS3;
       try {
         switch (input.hook) {
           case "before_tool":
             observeBeforeTool(input);
-            return NO_EFFECTS;
+            return NO_EFFECTS3;
           case "after_tool":
             return observeAfterTool(input);
           case "turn_end": {
-            if (toolStep <= lastTurnEndStep) return NO_EFFECTS;
+            if (toolStep <= lastTurnEndStep) return NO_EFFECTS3;
             const alreadyReported = annotatedSinceTurnEnd;
             annotatedSinceTurnEnd = false;
             const started = process.hrtime.bigint();
@@ -1451,9 +1443,9 @@ function createMemoryInterventionRegistration(deps) {
             return effects;
           }
           case "on_compaction":
-            if (input.metadata?.stage === "working_set_recall") return NO_EFFECTS;
+            if (input.metadata?.stage === "working_set_recall") return NO_EFFECTS3;
             reactivateAfterCompaction = true;
-            return NO_EFFECTS;
+            return NO_EFFECTS3;
           case "turn_start": {
             if (input.text?.trim()) currentTask = shortText(input.text, 2e3);
             annotatedThisTurn.clear();
@@ -1476,7 +1468,7 @@ function createMemoryInterventionRegistration(deps) {
           }
         }
       } catch {
-        return NO_EFFECTS;
+        return NO_EFFECTS3;
       }
     },
     /**
@@ -1490,13 +1482,13 @@ function createMemoryInterventionRegistration(deps) {
      * would have been buffered anyway.
      */
     async evaluateAsync(input, context) {
-      if (!settings().enabled || input.hook !== "turn_end" || pendingTriggers.size === 0) return NO_EFFECTS;
+      if (!settings().enabled || input.hook !== "turn_end" || pendingTriggers.size === 0) return NO_EFFECTS3;
       const boundary = input.turnId ?? input.metadata?.userTurnId?.toString() ?? `tool-step:${toolStep}`;
-      if (boundary === lastPromptedBoundary) return NO_EFFECTS;
+      if (boundary === lastPromptedBoundary) return NO_EFFECTS3;
       if (deps.deliversDeferredReminders === false) {
         emitTelemetry([...pendingTriggers], "rules", "silent", "no_consumer", 0, 0, 0, process.hrtime.bigint());
         pendingTriggers.clear();
-        return NO_EFFECTS;
+        return NO_EFFECTS3;
       }
       if (promptedStepInFlight) {
         emitTelemetry(
@@ -1509,7 +1501,7 @@ function createMemoryInterventionRegistration(deps) {
           0,
           process.hrtime.bigint()
         );
-        return NO_EFFECTS;
+        return NO_EFFECTS3;
       }
       lastPromptedBoundary = boundary;
       const triggers = [...pendingTriggers];
@@ -1534,7 +1526,7 @@ function createMemoryInterventionRegistration(deps) {
       }).finally(() => {
         promptedStepInFlight = false;
       });
-      return NO_EFFECTS;
+      return NO_EFFECTS3;
     },
     runPromptedStep,
     signalLoop() {
@@ -1568,7 +1560,7 @@ function createMemoryInterventionRegistration(deps) {
       inputTokens: 0,
       outputTokens: 0,
       usage: null,
-      effects: NO_EFFECTS
+      effects: NO_EFFECTS3
     });
     const live = settings();
     if (!live.enabled) {
@@ -1647,7 +1639,7 @@ function createMemoryInterventionRegistration(deps) {
     );
     return {
       ...promptedResult,
-      effects: promptedResult.reminder === null ? NO_EFFECTS : [{ kind: "inject_reminder", message: promptedResult.reminder, severity: "advisory" }]
+      effects: promptedResult.reminder === null ? NO_EFFECTS3 : [{ kind: "inject_reminder", message: promptedResult.reminder, severity: "advisory" }]
     };
   }
   function emitTelemetry(triggerReasons, tier, decision, reason, citedEntries2, inputTokens, outputTokens, started, operations = { bankOperations: 0, droppedOperations: 0 }) {
@@ -1708,7 +1700,7 @@ function createMemoryInterventionRegistration(deps) {
   }
   function observeAfterTool(input) {
     const fallback = prepareToolStep(input);
-    if (fallback === null) return NO_EFFECTS;
+    if (fallback === null) return NO_EFFECTS3;
     const key = pendingKey(input, fallback.operationFingerprint);
     const prepared = pending.get(key) ?? fallback;
     pending.delete(key);
@@ -1733,22 +1725,22 @@ function createMemoryInterventionRegistration(deps) {
     };
     trajectory.push(step);
     if (trajectory.length > live.windowSteps) trajectory.splice(0, trajectory.length - live.windowSteps);
-    if (outcome !== "error") return NO_EFFECTS;
+    if (outcome !== "error") return NO_EFFECTS3;
     rememberFailure(step);
     return annotateRepeatedFailure(step);
   }
   function annotateRepeatedFailure(step) {
-    if (annotatedThisTurn.has(step.operationFingerprint)) return NO_EFFECTS;
+    if (annotatedThisTurn.has(step.operationFingerprint)) return NO_EFFECTS3;
     const occurrences = trajectory.filter(
       (candidate) => candidate.outcome === "error" && candidate.operationFingerprint === step.operationFingerprint
     ).length;
     const failure = failures.get(step.operationFingerprint);
-    if (occurrences < 2 || failure === void 0) return NO_EFFECTS;
+    if (occurrences < 2 || failure === void 0) return NO_EFFECTS3;
     const message = boundedReminder(
       `Memory: [${failure.entryId}] you already tried ${failure.callDescription} at step ${failure.firstStep} and it failed with ${failure.errorDigest}. Change the approach rather than repeating it.`,
       settings().maxTokens
     );
-    if (message.length === 0) return NO_EFFECTS;
+    if (message.length === 0) return NO_EFFECTS3;
     annotatedThisTurn.add(step.operationFingerprint);
     lastInjectedOperationFingerprint = step.operationFingerprint;
     lastDecision = "injected";
@@ -1802,7 +1794,7 @@ function createMemoryInterventionRegistration(deps) {
           `Memory: [${failure.entryId}] you already tried ${failure.callDescription} at step ${failure.firstStep} and it failed with ${failure.errorDigest}.`,
           settings().maxTokens
         );
-        if (message.length === 0) return NO_EFFECTS;
+        if (message.length === 0) return NO_EFFECTS3;
         lastInjectedOperationFingerprint = step.operationFingerprint;
         lastInjectedMessage = message;
         lastDecision = "injected";
@@ -1811,13 +1803,13 @@ function createMemoryInterventionRegistration(deps) {
         return [{ kind: "inject_reminder", message, severity: "advisory" }];
       }
       lastDecision = "silent";
-      return NO_EFFECTS;
+      return NO_EFFECTS3;
     } finally {
       lastTurnEndStep = toolStep;
     }
   }
   function reactivateKnowledge() {
-    if (!reactivateAfterCompaction) return NO_EFFECTS;
+    if (!reactivateAfterCompaction) return NO_EFFECTS3;
     reactivateAfterCompaction = false;
     const prefix = "Memory: execution state restored after compaction:\n";
     const maxTokens = settings().maxTokens;
@@ -1825,12 +1817,12 @@ function createMemoryInterventionRegistration(deps) {
     const rendered = deps.bank.renderRestoredState(Math.max(0, maxTokens - prefixTokens));
     if (rendered.length === 0) {
       lastDecision = "silent";
-      return NO_EFFECTS;
+      return NO_EFFECTS3;
     }
     const message = boundedReminder(`${prefix}${rendered}`, maxTokens);
     if (message.length === 0) {
       lastDecision = "silent";
-      return NO_EFFECTS;
+      return NO_EFFECTS3;
     }
     const citedIds = [...message.matchAll(/\[([^\]]+)\]/gu)].map((match) => match[1]).filter((id) => id !== void 0);
     deps.bank.recordInjection(citedIds);
@@ -1845,7 +1837,7 @@ function prepareToolStep(input) {
   const canonical = hashToolCall(toolName, input.toolArgs ?? {});
   return {
     toolName,
-    operationFingerprint: createHash2("sha256").update(canonical).digest("hex").slice(0, 16),
+    operationFingerprint: createHash("sha256").update(canonical).digest("hex").slice(0, 16),
     callDescription: shortText(canonical, CALL_DESCRIPTION_MAX_CHARS)
   };
 }
@@ -1929,114 +1921,6 @@ function announceMemoryStepEndpoint(deps, complete) {
   };
 }
 
-// src/domains/middleware/skills-reminder.ts
-init_esm_shims();
-var SKILLS_REMINDER_REGISTRATION_ID = "observer.skills-reminder";
-function skillsReminderMessage(installed, installable = 0) {
-  const counts = installable > 0 ? `${installed} installed, ${installable} installable from the marketplace` : `${installed} installed`;
-  return `[Skills] ${counts}. Start this task by listing them with context(scope="skills") and checking for a match; if one matches, open your reply with the line \`${SKILL_SUGGESTION_ANCHOR}\` (a comma-separated sequence, in order, when several compose) and then continue the task in the same turn without the skill. Only the operator loads a skill, and a marketplace skill is offered for install when the operator runs it. If none match, do not mention skills and continue with the task.`;
-}
-var NO_EFFECTS2 = [];
-var GREETING_WORDS = /* @__PURE__ */ new Set([
-  "hi",
-  "hello",
-  "hey",
-  "heya",
-  "hiya",
-  "howdy",
-  "yo",
-  "sup",
-  "hola",
-  "greetings",
-  "gm",
-  "gn",
-  "morning",
-  "afternoon",
-  "evening",
-  "good",
-  "day",
-  "night",
-  "there",
-  "you",
-  "clio",
-  "thanks",
-  "thank",
-  "thankyou",
-  "thx",
-  "ty",
-  "ok",
-  "okay",
-  "k",
-  "cool",
-  "nice",
-  "test",
-  "testing",
-  "ping",
-  "pong"
-]);
-function isSubstantiveUserTurn(text) {
-  const normalized = (text ?? "").toLowerCase().replace(/[^\p{L}\p{N}\s]/gu, " ").replace(/\s+/g, " ").trim();
-  if (normalized.length === 0) return false;
-  const tokens = normalized.split(" ");
-  if (tokens.length > 4) return true;
-  return tokens.some((token) => !GREETING_WORDS.has(token));
-}
-function createSkillsReminderRegistration(deps) {
-  let lastSeenSessionId;
-  let spentForActiveSession = false;
-  let observedFreshStart = false;
-  let observedAnyTurn = false;
-  return {
-    id: SKILLS_REMINDER_REGISTRATION_ID,
-    description: "once per session, on the first substantive turn, teaches the skill-suggestion reply protocol; keeps a turn going that stopped on the suggestion",
-    hooks: ["turn_start", "turn_end"],
-    evaluate(input) {
-      if (input.hook === "turn_end") {
-        return isSkillSuggestionWait(input) ? [{ kind: "request_continuation", message: SKILL_SUGGESTION_WAIT_CONTINUATION_MESSAGE }] : NO_EFFECTS2;
-      }
-      const sessionId = input.sessionId ?? null;
-      if (lastSeenSessionId === void 0) {
-        lastSeenSessionId = sessionId;
-      } else if (lastSeenSessionId === null && sessionId !== null) {
-        lastSeenSessionId = sessionId;
-      } else if (sessionId !== lastSeenSessionId) {
-        lastSeenSessionId = sessionId;
-        spentForActiveSession = false;
-        observedFreshStart = false;
-        observedAnyTurn = false;
-      }
-      if (spentForActiveSession) return NO_EFFECTS2;
-      const conversationMessages = metadataNumber(input, "conversationMessages");
-      if (!observedAnyTurn) {
-        observedAnyTurn = true;
-        if (conversationMessages === null || conversationMessages > 0) {
-          spentForActiveSession = true;
-          return NO_EFFECTS2;
-        }
-        observedFreshStart = true;
-      }
-      if (!observedFreshStart) {
-        spentForActiveSession = true;
-        return NO_EFFECTS2;
-      }
-      if (!isSubstantiveUserTurn(input.text)) return NO_EFFECTS2;
-      spentForActiveSession = true;
-      const pendingSkillRequests = metadataNumber(input, "pendingSkillRequests");
-      if (pendingSkillRequests !== null && pendingSkillRequests > 0) return NO_EFFECTS2;
-      let installed = 0;
-      let installable = 0;
-      try {
-        installed = deps.countModelVisibleSkills();
-        installable = deps.countInstallableSkills?.() ?? 0;
-      } catch {
-        return NO_EFFECTS2;
-      }
-      if (installed <= 0 && installable <= 0) return NO_EFFECTS2;
-      return [{ kind: "inject_reminder", severity: "info", message: skillsReminderMessage(installed, installable) }];
-    }
-  };
-}
-
 // src/domains/middleware/task-board-reminder.ts
 init_esm_shims();
 var TASK_BOARD_REMINDER_REGISTRATION_ID = "observer.task-board-reminder";
@@ -2063,7 +1947,7 @@ function countEnumeratedSteps(text) {
   const bulletLines = value.split(/\r?\n/).filter((line) => /^\s*[-*]\s+\S/.test(line)).length;
   return bulletLines >= 3 ? bulletLines : 0;
 }
-var NO_EFFECTS3 = [];
+var NO_EFFECTS4 = [];
 function createTaskBoardReminderRegistration() {
   let lastSeenSessionId;
   let spentForActiveSession = false;
@@ -2079,12 +1963,12 @@ function createTaskBoardReminderRegistration() {
         lastSeenSessionId = sessionId;
         spentForActiveSession = false;
       }
-      if (spentForActiveSession) return NO_EFFECTS3;
+      if (spentForActiveSession) return NO_EFFECTS4;
       const steps = countEnumeratedSteps(input.text);
-      if (steps < 3) return NO_EFFECTS3;
+      if (steps < 3) return NO_EFFECTS4;
       spentForActiveSession = true;
       const pendingSkillRequests = metadataNumber(input, "pendingSkillRequests");
-      if (pendingSkillRequests !== null && pendingSkillRequests > 0) return NO_EFFECTS3;
+      if (pendingSkillRequests !== null && pendingSkillRequests > 0) return NO_EFFECTS4;
       return [{ kind: "inject_reminder", severity: "info", message: taskBoardReminderMessage(steps) }];
     }
   };
@@ -2166,7 +2050,7 @@ var WATCHDOG_DIFF_MAX_BYTES = 12 * 1024;
 var WATCHDOG_PATHS_MAX = 40;
 var WATCHDOG_TRUNCATION_MARKER = "\n[diff truncated]";
 var MUTATING_TOOL_NAMES = /* @__PURE__ */ new Set([ToolNames.Write, ToolNames.Edit, ToolNames.Artifact]);
-var NO_EFFECTS4 = [];
+var NO_EFFECTS5 = [];
 function stringValue2(value) {
   return typeof value === "string" && value.length > 0 ? value : null;
 }
@@ -2174,20 +2058,20 @@ function firstPath(details) {
   const paths = details?.paths;
   if (!Array.isArray(paths)) return null;
   for (const entry of paths) {
-    const path = stringValue2(entry);
-    if (path !== null) return path;
+    const path2 = stringValue2(entry);
+    if (path2 !== null) return path2;
   }
   return null;
 }
 function coalesceTurnDiff(byPath, maxBytes = WATCHDOG_DIFF_MAX_BYTES) {
   const blocks = [];
   let index = 0;
-  for (const [path, diff] of byPath) {
+  for (const [path2, diff] of byPath) {
     if (index >= WATCHDOG_PATHS_MAX) {
       blocks.push(`[${byPath.size - WATCHDOG_PATHS_MAX} more changed path(s) omitted]`);
       break;
     }
-    blocks.push(`--- ${path}
+    blocks.push(`--- ${path2}
 ${diff}`);
     index += 1;
   }
@@ -2279,19 +2163,19 @@ function createWatchdogRegistration(deps) {
       const settings = active();
       if (settings === null) {
         if (input.hook === "turn_end") resetTurn();
-        return NO_EFFECTS4;
+        return NO_EFFECTS5;
       }
       if (input.hook === "after_tool") {
         toolCalls += 1;
         recordMutation(input);
         const cadence = settings.cadenceToolCalls;
         if (cadence !== void 0 && cadence >= 1 && toolCalls % cadence === 0) fire("cadence");
-        return NO_EFFECTS4;
+        return NO_EFFECTS5;
       }
-      if (input.hook !== "turn_end") return NO_EFFECTS4;
+      if (input.hook !== "turn_end") return NO_EFFECTS5;
       fire("turn_end");
       resetTurn();
-      return NO_EFFECTS4;
+      return NO_EFFECTS5;
     },
     droppedTriggers: () => dropped,
     runInFlight: () => inFlight,
@@ -2312,6 +2196,179 @@ init_esm_shims();
 // src/domains/middleware/extension.ts
 init_esm_shims();
 
+// src/domains/middleware/registrations.ts
+init_esm_shims();
+var MIDDLEWARE_REGISTRATION_OWNERS = ["user-hooks"];
+function isRegistrationOwner(value) {
+  return MIDDLEWARE_REGISTRATION_OWNERS.includes(value);
+}
+function createMiddlewareRegistrationTable(options) {
+  const fixed = Object.freeze([...options.fixed]);
+  const fixedIds = new Set(fixed.map((registration) => registration.id));
+  const buildList = (host, slots) => {
+    const list = [...fixed];
+    const slotAt = (index) => {
+      for (const owner of MIDDLEWARE_REGISTRATION_OWNERS) {
+        const slot = slots.get(owner);
+        if (slot !== void 0 && slot.anchor === index) list.push(...slot.registrations);
+      }
+    };
+    for (let index = 0; index < host.length; index += 1) {
+      slotAt(index);
+      list.push(host[index]);
+    }
+    slotAt(host.length);
+    return Object.freeze(list);
+  };
+  const makeState = (host, slots) => Object.freeze({
+    host: Object.freeze([...host]),
+    hostIds: new Set(host.map((registration) => registration.id)),
+    slots: new Map(slots),
+    list: buildList(host, slots)
+  });
+  let state = makeState([], /* @__PURE__ */ new Map());
+  const emit = (diagnostic) => {
+    try {
+      options.diagnosticSink()(diagnostic);
+    } catch {
+    }
+  };
+  const slotFor = (base, owner) => base.slots.get(owner) ?? { generation: 0, registrations: [], anchor: base.host.length };
+  const disposeGeneration = (owner, generation) => {
+    const base = state;
+    const held = base.slots.get(owner);
+    if (held === void 0 || held.generation !== generation || held.registrations.length === 0) return;
+    const slots = new Map(base.slots);
+    slots.set(owner, { ...held, registrations: Object.freeze([]) });
+    state = makeState(base.host, slots);
+  };
+  const table = {
+    list: () => state.list,
+    registerHook(registration) {
+      const base = state;
+      if (fixedIds.has(registration.id) || base.hostIds.has(registration.id)) return;
+      const evictions = [];
+      const slots = new Map(base.slots);
+      for (const [owner, slot] of base.slots) {
+        if (!slot.registrations.some((entry) => entry.id === registration.id)) continue;
+        slots.set(owner, {
+          ...slot,
+          registrations: Object.freeze(slot.registrations.filter((entry) => entry.id !== registration.id))
+        });
+        evictions.push({
+          kind: "registration_conflict",
+          registrationId: registration.id,
+          owner,
+          generation: slot.generation,
+          conflictsWith: "host",
+          action: "evicted"
+        });
+      }
+      state = makeState([...base.host, registration], slots);
+      for (const eviction of evictions) emit(eviction);
+    },
+    prepareReplacement(owner, generation, registrations) {
+      if (!isRegistrationOwner(owner)) {
+        return { status: "rejected", owner, reason: "unknown-owner", activeGeneration: 0 };
+      }
+      const base = state;
+      const slot = slotFor(base, owner);
+      if (!Number.isInteger(generation) || generation <= slot.generation) {
+        return { status: "rejected", owner, reason: "stale", activeGeneration: slot.generation };
+      }
+      const dropped = [];
+      const conflicts = [];
+      const accepted = [];
+      const seen = /* @__PURE__ */ new Set();
+      for (const registration of registrations) {
+        const conflictsWith = fixedIds.has(registration.id) ? "builtin" : base.hostIds.has(registration.id) ? "host" : seen.has(registration.id) ? "owned" : null;
+        if (conflictsWith !== null) {
+          dropped.push({ id: registration.id, conflictsWith });
+          conflicts.push({
+            kind: "registration_conflict",
+            registrationId: registration.id,
+            owner,
+            generation,
+            conflictsWith,
+            action: "dropped"
+          });
+          continue;
+        }
+        seen.add(registration.id);
+        accepted.push(registration);
+      }
+      const slots = new Map(base.slots);
+      slots.set(owner, { generation, registrations: Object.freeze(accepted), anchor: slot.anchor });
+      const prepared = makeState(base.host, slots);
+      let settled = false;
+      const frozenDropped = Object.freeze(dropped);
+      const frozenConflicts = Object.freeze(conflicts);
+      const replacement = {
+        owner,
+        generation,
+        dropped: frozenDropped,
+        conflicts: frozenConflicts,
+        size: accepted.length,
+        // Reference identity on the base state covers every kind of
+        // intervening change: host appends, other replacements, disposals.
+        current: () => !settled && state === base,
+        publish() {
+          settled = true;
+          state = prepared;
+        },
+        emitConflicts() {
+          for (const conflict of frozenConflicts) emit(conflict);
+        },
+        dispose() {
+          disposeGeneration(owner, generation);
+        },
+        discard() {
+          settled = true;
+        }
+      };
+      return { status: "prepared", replacement };
+    },
+    replaceRegistrations(owner, generation, registrations) {
+      const prepared = table.prepareReplacement(owner, generation, registrations);
+      if (prepared.status === "rejected") {
+        return {
+          applied: false,
+          owner: prepared.owner,
+          activeGeneration: prepared.activeGeneration,
+          reason: prepared.reason,
+          dropped: [],
+          dispose: () => void 0
+        };
+      }
+      const replacement = prepared.replacement;
+      if (!replacement.current()) {
+        replacement.discard();
+        return {
+          applied: false,
+          owner,
+          activeGeneration: table.ownedGeneration(owner),
+          reason: "stale",
+          dropped: replacement.dropped,
+          dispose: () => void 0
+        };
+      }
+      replacement.publish();
+      replacement.emitConflicts();
+      return {
+        applied: true,
+        owner,
+        activeGeneration: generation,
+        dropped: replacement.dropped,
+        dispose: () => replacement.dispose()
+      };
+    },
+    ownedGeneration(owner) {
+      return state.slots.get(owner)?.generation ?? 0;
+    }
+  };
+  return table;
+}
+
 // src/domains/middleware/snapshot.ts
 init_esm_shims();
 function createMiddlewareSnapshot(rules = listMiddlewareRules()) {
@@ -2332,15 +2389,18 @@ function createMiddlewareContractFromSnapshot(snapshot) {
     if (builtin?.predicate !== void 0) definition.predicate = builtin.predicate;
     return definition;
   });
-  const registrations = definitions.map(registrationFromRuleDefinition);
-  const registeredIds = new Set(registrations.map((registration) => registration.id));
+  let diagnosticSink;
+  const table = createMiddlewareRegistrationTable({
+    fixed: definitions.map(registrationFromRuleDefinition),
+    diagnosticSink: () => diagnosticSink ?? writeMiddlewareDiagnosticToStderr
+  });
   const budgetTracker = createHookBudgetTracker({
     budgets: resolveHookBudgetsFromEnv(),
     ...resolveHookBudgetTunablesFromEnv()
   });
-  let diagnosticSink;
   return {
     runHook(input) {
+      const registrations = table.list();
       return runMiddlewareRegistrations(input, registrations, {
         budgetTracker,
         ...diagnosticSink !== void 0 ? { onDiagnostic: diagnosticSink } : {}
@@ -2353,12 +2413,19 @@ function createMiddlewareContractFromSnapshot(snapshot) {
       return createMiddlewareSnapshot(definitions.map((definition) => definition.rule));
     },
     registerHook(registration) {
-      if (registeredIds.has(registration.id)) return;
-      registeredIds.add(registration.id);
-      registrations.push(registration);
+      table.registerHook(registration);
     },
     setDiagnosticSink(sink) {
       diagnosticSink = sink;
+    },
+    prepareRegistrationReplacement(owner, generation, registrations) {
+      return table.prepareReplacement(owner, generation, registrations);
+    },
+    replaceRegistrations(owner, generation, registrations) {
+      return table.replaceRegistrations(owner, generation, registrations);
+    },
+    ownedGeneration(owner) {
+      return table.ownedGeneration(owner);
     }
   };
 }
@@ -2369,18 +2436,23 @@ function createEnvHookBudgetTracker(env = process.env) {
 }
 function createMiddlewareBundle(options = {}) {
   const ruleDefinitions = combineRuleDefinitions(listMiddlewareRuleDefinitions(), options.ruleDefinitions ?? []);
-  const registrations = combineRegistrations(ruleDefinitions, options.registrations ?? []);
-  const registeredIds = new Set(registrations.map((registration) => registration.id));
   let diagnosticSink = options.onDiagnostic;
+  const table = createMiddlewareRegistrationTable({
+    fixed: ruleDefinitions.map(registrationFromRuleDefinition),
+    diagnosticSink: () => diagnosticSink ?? writeMiddlewareDiagnosticToStderr
+  });
+  for (const registration of options.registrations ?? []) table.registerHook(registration);
   const budgetTracker = options.budgetTracker ?? createEnvHookBudgetTracker();
   const contract = {
     runHook(input) {
+      const registrations = table.list();
       return runMiddlewareRegistrations(input, registrations, {
         budgetTracker,
         ...diagnosticSink !== void 0 ? { onDiagnostic: diagnosticSink } : {}
       });
     },
     runAsyncHook(input, priorEffects = []) {
+      const registrations = table.list();
       return runMiddlewareAsyncRegistrations(input, registrations, priorEffects, {
         ...diagnosticSink !== void 0 ? { onDiagnostic: diagnosticSink } : {}
       });
@@ -2392,12 +2464,19 @@ function createMiddlewareBundle(options = {}) {
       return createMiddlewareSnapshot(ruleDefinitions.map((definition) => definition.rule));
     },
     registerHook(registration) {
-      if (registeredIds.has(registration.id)) return;
-      registeredIds.add(registration.id);
-      registrations.push(registration);
+      table.registerHook(registration);
     },
     setDiagnosticSink(sink) {
       diagnosticSink = sink;
+    },
+    prepareRegistrationReplacement(owner, generation, registrations) {
+      return table.prepareReplacement(owner, generation, registrations);
+    },
+    replaceRegistrations(owner, generation, registrations) {
+      return table.replaceRegistrations(owner, generation, registrations);
+    },
+    ownedGeneration(owner) {
+      return table.ownedGeneration(owner);
     }
   };
   return {
@@ -2419,16 +2498,6 @@ function combineRuleDefinitions(builtin, registered) {
   }
   return combined;
 }
-function combineRegistrations(ruleDefinitions, coded) {
-  const seen = new Set(ruleDefinitions.map((definition) => definition.rule.id));
-  const combined = ruleDefinitions.map(registrationFromRuleDefinition);
-  for (const registration of coded) {
-    if (seen.has(registration.id)) continue;
-    seen.add(registration.id);
-    combined.push(registration);
-  }
-  return combined;
-}
 
 // src/domains/middleware/manifest.ts
 init_esm_shims();
@@ -2437,28 +2506,496 @@ var MiddlewareManifest = {
   dependsOn: []
 };
 
-// src/domains/middleware/index.ts
-var MiddlewareDomainModule = {
-  manifest: MiddlewareManifest,
-  createExtension: () => createMiddlewareBundle()
-};
+// src/domains/middleware/hooks.ts
+init_esm_shims();
+import { createHash as createHash2 } from "node:crypto";
+import { isAbsolute, resolve } from "node:path";
 
-export {
-  MIDDLEWARE_HOOK_TEXT_MAX_CHARS,
-  shouldRequestStalledTurnContinuation,
-  writeMiddlewareDiagnosticToStderr,
-  createMiddlewareContractFromSnapshot,
-  createReadOnlyExplorationNudgeRegistration,
-  createUnbackedWorkerClaimRegistration,
-  openDetachedBatchViews,
-  createDetachedDispatchNudgeRegistration,
-  createHookReceiptLog,
-  loadUserHooks,
-  readHookSources,
-  installUserHooks,
-  createMemoryInterventionRegistration,
-  announceMemoryStepEndpoint,
-  createSkillsReminderRegistration,
+// src/domains/middleware/validate.ts
+init_esm_shims();
+function validateMiddlewareEffect(value, source = "$") {
+  const issues = [];
+  const effect = readMiddlewareEffect(value, source, issues);
+  if (issues.length > 0 || effect === null) return { valid: false, issues };
+  return { valid: true, effect, issues: [] };
+}
+function readMiddlewareEffect(value, path2, issues) {
+  if (!isRecord(value)) {
+    issues.push({ path: path2, message: "expected middleware effect object" });
+    return null;
+  }
+  const kindValue = value.kind;
+  if (typeof kindValue !== "string" || !isMiddlewareEffectKind(kindValue)) {
+    issues.push({ path: `${path2}.kind`, message: "expected known middleware effect kind" });
+    return null;
+  }
+  switch (kindValue) {
+    case "inject_reminder":
+      return readInjectReminder(value, path2, issues);
+    case "annotate_tool_result":
+      return readAnnotateToolResult(value, path2, issues);
+    case "block_tool":
+      return readBlockTool(value, path2, issues);
+    case "protect_path":
+      return readProtectPath(value, path2, issues);
+    case "request_continuation":
+      return readRequestContinuation(value, path2, issues);
+    case "require_tool":
+      return readRequireTool(value, path2, issues);
+    case "lock_tools":
+      rejectUnexpectedFields(value, path2, ["kind"], issues);
+      return { kind: "lock_tools" };
+  }
+}
+function readRequireTool(record, path2, issues) {
+  rejectUnexpectedFields(record, path2, ["kind", "toolName"], issues);
+  const toolName = readRequiredString(record, `${path2}.toolName`, issues);
+  return toolName === null ? null : { kind: "require_tool", toolName };
+}
+function readInjectReminder(record, path2, issues) {
+  rejectUnexpectedFields(record, path2, ["kind", "message", "severity"], issues);
+  const message = readRequiredString(record, `${path2}.message`, issues);
+  const severity = readOptionalString(record, `${path2}.severity`, issues);
+  if (severity !== void 0 && !isMiddlewareReminderSeverity(severity)) {
+    issues.push({ path: `${path2}.severity`, message: "expected info, advisory, warn, or hard-block" });
+  }
+  if (message === null) return null;
+  const effect = { kind: "inject_reminder", message };
+  if (severity !== void 0 && isMiddlewareReminderSeverity(severity)) effect.severity = severity;
+  return effect;
+}
+function readAnnotateToolResult(record, path2, issues) {
+  rejectUnexpectedFields(record, path2, ["kind", "message", "severity"], issues);
+  const message = readRequiredString(record, `${path2}.message`, issues);
+  const severity = readOptionalString(record, `${path2}.severity`, issues);
+  if (severity !== void 0 && !isMiddlewareAnnotationSeverity(severity)) {
+    issues.push({ path: `${path2}.severity`, message: "expected info or warn" });
+  }
+  if (message === null) return null;
+  const effect = { kind: "annotate_tool_result", message };
+  if (severity !== void 0 && isMiddlewareAnnotationSeverity(severity)) effect.severity = severity;
+  return effect;
+}
+function readBlockTool(record, path2, issues) {
+  rejectUnexpectedFields(record, path2, ["kind", "reason", "severity"], issues);
+  const reason = readRequiredString(record, `${path2}.reason`, issues);
+  const severity = readRequiredString(record, `${path2}.severity`, issues);
+  if (severity !== null && severity !== "hard-block") {
+    issues.push({ path: `${path2}.severity`, message: "expected hard-block" });
+  }
+  if (reason === null || severity !== "hard-block") return null;
+  return { kind: "block_tool", reason, severity };
+}
+function readProtectPath(record, path2, issues) {
+  rejectUnexpectedFields(record, path2, ["kind", "path", "reason"], issues);
+  const protectedPath = readRequiredString(record, `${path2}.path`, issues);
+  const reason = readRequiredString(record, `${path2}.reason`, issues);
+  if (protectedPath === null || reason === null) return null;
+  return { kind: "protect_path", path: protectedPath, reason };
+}
+function readRequestContinuation(record, path2, issues) {
+  rejectUnexpectedFields(record, path2, ["kind", "message"], issues);
+  const message = readRequiredString(record, `${path2}.message`, issues);
+  if (message === null) return null;
+  return { kind: "request_continuation", message };
+}
+function readRequiredString(record, path2, issues) {
+  const value = record[pathField(path2)];
+  if (typeof value !== "string" || value.trim().length === 0) {
+    issues.push({ path: path2, message: "expected non-empty string" });
+    return null;
+  }
+  return value;
+}
+function readOptionalString(record, path2, issues) {
+  const field = pathField(path2);
+  if (!Object.hasOwn(record, field)) return void 0;
+  const value = record[field];
+  if (typeof value !== "string" || value.trim().length === 0) {
+    issues.push({ path: path2, message: "expected non-empty string" });
+    return void 0;
+  }
+  return value;
+}
+function rejectUnexpectedFields(record, path2, allowedFields, issues) {
+  const allowed = new Set(allowedFields);
+  for (const field of Object.keys(record).sort((a, b) => a.localeCompare(b))) {
+    if (!allowed.has(field)) issues.push({ path: `${path2}.${field}`, message: "unexpected field" });
+  }
+}
+function pathField(path2) {
+  return path2.slice(path2.lastIndexOf(".") + 1);
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+// src/domains/middleware/hooks.ts
+var USER_HOOK_ORIGIN_ORDER = ["extension", "user", "project", "project.local"];
+var USER_HOOK_COMMAND_TIMEOUT_DEFAULT_MS = 2e3;
+var USER_HOOK_COMMAND_TIMEOUT_MIN_MS = 100;
+var USER_HOOK_COMMAND_TIMEOUT_MAX_MS = 5e3;
+var USER_HOOK_COMMAND_OUTPUT_MAX_CHARS = 4e3;
+var USER_HOOK_PROMPT_MAX_CHARS = 2e3;
+function isRecord2(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function stableHash(value) {
+  return createHash2("sha256").update(canonicalJson(value)).digest("hex").slice(0, 16);
+}
+function canonicalJson(value) {
+  if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
+  if (isRecord2(value)) {
+    const keys = Object.keys(value).sort();
+    return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalJson(value[key])}`).join(",")}}`;
+  }
+  return JSON.stringify(value) ?? "null";
+}
+function readStringArray(value) {
+  if (!Array.isArray(value)) return null;
+  const out = [];
+  for (const item of value) {
+    if (typeof item !== "string" || item.length === 0) return null;
+    out.push(item);
+  }
+  return out;
+}
+function normalizeCommandSpec(raw, options, issues) {
+  const argv = readStringArray(raw.argv);
+  if (!argv || argv.length === 0) {
+    issues.push("command.argv must be a non-empty array of non-empty strings");
+    return null;
+  }
+  const spec = {
+    kind: "command",
+    argv,
+    cwd: resolve(options.workspaceRoot),
+    timeoutMs: USER_HOOK_COMMAND_TIMEOUT_DEFAULT_MS,
+    as: "annotate"
+  };
+  if (raw.cwd !== void 0) {
+    if (typeof raw.cwd !== "string" || raw.cwd.length === 0) {
+      issues.push("command.cwd must be a non-empty string");
+      return null;
+    }
+    const resolved = isAbsolute(raw.cwd) ? resolve(raw.cwd) : resolve(options.workspaceRoot, raw.cwd);
+    if (!isWithin(resolved, options.workspaceRoot)) {
+      issues.push("command.cwd must resolve under the workspace root");
+      return null;
+    }
+    spec.cwd = resolved;
+  }
+  if (raw.timeoutMs !== void 0) {
+    if (typeof raw.timeoutMs !== "number" || !Number.isFinite(raw.timeoutMs)) {
+      issues.push("command.timeoutMs must be a number");
+      return null;
+    }
+    spec.timeoutMs = Math.min(
+      USER_HOOK_COMMAND_TIMEOUT_MAX_MS,
+      Math.max(USER_HOOK_COMMAND_TIMEOUT_MIN_MS, Math.floor(raw.timeoutMs))
+    );
+  }
+  if (raw.as !== void 0) {
+    if (raw.as !== "annotate" && raw.as !== "reminder") {
+      issues.push('command.as must be "annotate" or "reminder"');
+      return null;
+    }
+    spec.as = raw.as;
+  }
+  return spec;
+}
+function normalizePromptSpec(raw, issues) {
+  if (typeof raw.message !== "string" || raw.message.trim().length === 0) {
+    issues.push("prompt.message must be a non-empty string");
+    return null;
+  }
+  let severity = "info";
+  if (raw.severity !== void 0) {
+    if (typeof raw.severity !== "string" || !isMiddlewareReminderSeverity(raw.severity)) {
+      issues.push("prompt.severity must be info, advisory, warn, or hard-block");
+      return null;
+    }
+    severity = raw.severity;
+  }
+  return { kind: "prompt", message: raw.message.slice(0, USER_HOOK_PROMPT_MAX_CHARS), severity };
+}
+function normalizeEffectSpec(raw, issues) {
+  const result = validateMiddlewareEffect(raw.effect ?? raw, "effect");
+  if (!result.valid) {
+    for (const issue of result.issues) issues.push(`effect: ${issue.message}`);
+    return null;
+  }
+  return { kind: "effect", effect: result.effect };
+}
+function isWithin(child, parent) {
+  const rel = resolve(child);
+  const base = resolve(parent);
+  return rel === base || rel.startsWith(`${base}/`);
+}
+function normalizeUserHook(raw, source, options) {
+  const issues = [];
+  if (!isRecord2(raw)) {
+    return { issues: ["hook declaration must be an object"] };
+  }
+  if (raw.on === void 0 || typeof raw.on !== "string" || !isMiddlewareHook(raw.on)) {
+    issues.push("on must be one of before_tool, after_tool, turn_start, turn_end, on_compaction");
+  }
+  let tools;
+  if (raw.tools !== void 0) {
+    const parsed = readStringArray(raw.tools);
+    if (!parsed) issues.push("tools must be an array of non-empty tool names");
+    else tools = parsed;
+  }
+  let enabled = true;
+  if (raw.enabled !== void 0) {
+    if (typeof raw.enabled !== "boolean") issues.push("enabled must be a boolean");
+    else enabled = raw.enabled;
+  }
+  let spec = null;
+  if (raw.kind === "command") spec = normalizeCommandSpec(raw, options, issues);
+  else if (raw.kind === "prompt") spec = normalizePromptSpec(raw, issues);
+  else if (raw.kind === "effect") spec = normalizeEffectSpec(raw, issues);
+  else issues.push('kind must be "command", "prompt", or "effect"');
+  if (issues.length > 0 || spec === null || raw.on === void 0 || typeof raw.on !== "string") {
+    return { issues };
+  }
+  const on = raw.on;
+  const hash = stableHash({ on, tools: tools ?? null, spec });
+  const id = typeof raw.id === "string" && raw.id.length > 0 ? raw.id : `${source.sourceId ?? source.origin}.${spec.kind}.${hash}`;
+  const hook = { id, source, hash, on, enabled, spec };
+  if (tools !== void 0) hook.tools = tools;
+  return { hook, issues };
+}
+function declarationsArray(declarations) {
+  if (Array.isArray(declarations)) return declarations;
+  if (isRecord2(declarations) && Array.isArray(declarations.hooks)) return declarations.hooks;
+  return [];
+}
+function loadUserHooks(batches, options) {
+  const ordered = [...batches].sort(
+    (a, b) => USER_HOOK_ORIGIN_ORDER.indexOf(a.source.origin) - USER_HOOK_ORIGIN_ORDER.indexOf(b.source.origin)
+  );
+  const byId = /* @__PURE__ */ new Map();
+  const overridden = [];
+  const issues = [];
+  for (const batch of ordered) {
+    const declarations = declarationsArray(batch.declarations);
+    declarations.forEach((raw, index) => {
+      const result = normalizeUserHook(raw, batch.source, options);
+      if (!result.hook) {
+        issues.push({ source: batch.source, index, issues: result.issues });
+        return;
+      }
+      const existing = byId.get(result.hook.id);
+      if (existing) overridden.push({ winner: batch.source, loser: existing });
+      byId.set(result.hook.id, result.hook);
+    });
+  }
+  return { hooks: [...byId.values()], overridden, issues };
+}
+function reminderEffect(message, severity) {
+  return severity === "info" ? { kind: "inject_reminder", message } : { kind: "inject_reminder", message, severity };
+}
+function commandEffect(hook, output) {
+  const message = output.slice(0, USER_HOOK_COMMAND_OUTPUT_MAX_CHARS);
+  return hook.as === "reminder" ? { kind: "inject_reminder", message } : { kind: "annotate_tool_result", message };
+}
+function userHookToRegistration(hook, deps) {
+  const now = deps.now ?? Date.now;
+  const extension = hook.source.extension === void 0 ? void 0 : receiptExtension(hook.source.extension);
+  const baseReceipt = (input) => ({
+    at: now(),
+    hookId: hook.id,
+    origin: hook.source.origin,
+    sourcePath: hook.source.sourcePath,
+    hash: hook.hash,
+    hook: hook.on,
+    kind: hook.spec.kind,
+    ...extension !== void 0 ? { extension: { ...extension } } : {},
+    ...input.toolName !== void 0 ? { toolName: input.toolName } : {}
+  });
+  const registration = {
+    id: hook.id,
+    description: `${hook.spec.kind} hook from ${hook.source.origin} (${hook.source.sourcePath})`,
+    hooks: [hook.on],
+    evaluate: (input) => {
+      if (!hook.enabled) return [];
+      try {
+        return evaluateHook(hook, deps, baseReceipt(input));
+      } catch {
+        deps.recordReceipt({ ...baseReceipt(input), outcome: "skipped" });
+        return [];
+      }
+    }
+  };
+  if (hook.tools !== void 0) registration.toolNames = [...hook.tools];
+  return registration;
+}
+function receiptExtension(source) {
+  return {
+    id: source.provenance.id,
+    scope: source.provenance.scope,
+    canonicalRoot: source.provenance.canonicalRoot,
+    manifestDigest: source.provenance.manifestDigest,
+    contentDigest: source.provenance.contentDigest,
+    declarationsDigest: source.declarationsDigest,
+    generation: source.generation
+  };
+}
+function evaluateHook(hook, deps, base) {
+  if (hook.spec.kind === "prompt") {
+    const effect2 = reminderEffect(hook.spec.message, hook.spec.severity);
+    deps.recordReceipt({ ...base, outcome: "emitted", effectKinds: ["inject_reminder"] });
+    return [effect2];
+  }
+  if (hook.spec.kind === "effect") {
+    deps.recordReceipt({ ...base, outcome: "emitted", effectKinds: [hook.spec.effect.kind] });
+    return [hook.spec.effect];
+  }
+  const result = deps.runCommand(hook.spec.argv, {
+    timeoutMs: hook.spec.timeoutMs,
+    ...hook.spec.cwd !== void 0 ? { cwd: hook.spec.cwd } : {}
+  });
+  const output = (result.stdout || result.stderr || "").trim();
+  if (result.timedOut) {
+    deps.recordReceipt({ ...base, outcome: "command-timeout", exitCode: result.code ?? -1, outputChars: output.length });
+    return [];
+  }
+  const outcome = result.code === 0 ? "command-ok" : "command-failed";
+  deps.recordReceipt({ ...base, outcome, exitCode: result.code ?? -1, outputChars: output.length });
+  if (output.length === 0) return [];
+  const effect = commandEffect(hook.spec, output);
+  return [effect];
+}
+
+// src/domains/middleware/hooks-io.ts
+init_esm_shims();
+var import_yaml = __toESM(require_dist(), 1);
+import { spawnSync } from "node:child_process";
+import { readFileSync as readFileSync3 } from "node:fs";
+import { join } from "node:path";
+var COMMAND_OUTPUT_MAX_BYTES = 1024 * 1024;
+function readBatch(source, filePath, fileIssues) {
+  let text;
+  try {
+    text = readFileSync3(filePath, "utf8");
+  } catch {
+    return null;
+  }
+  try {
+    const parsed = (0, import_yaml.parse)(text);
+    return { source, declarations: parsed ?? [] };
+  } catch (err) {
+    fileIssues.push({
+      source,
+      message: `failed to parse ${filePath}: ${err instanceof Error ? err.message : String(err)}`
+    });
+    return null;
+  }
+}
+function readHookSources(options) {
+  const fileIssues = [];
+  const batches = [];
+  const captured = options.capturedSources;
+  for (const entry of captured?.sources ?? []) {
+    const source = {
+      origin: "extension",
+      sourcePath: `${entry.provenance.id}:hooks.yaml`,
+      sourceId: entry.provenance.id,
+      extension: {
+        provenance: entry.provenance,
+        generation: captured?.generation ?? 0,
+        declarationsDigest: entry.declarationsDigest
+      }
+    };
+    if (entry.parseError !== void 0) {
+      fileIssues.push({ source, message: `failed to parse ${source.sourcePath}: ${entry.parseError}` });
+      continue;
+    }
+    batches.push({ source, declarations: entry.declarations });
+  }
+  const projectBatch = readBatch(
+    { origin: "project", sourcePath: ".clio-coder/hooks.yaml" },
+    join(options.cwd, ".clio-coder", "hooks.yaml"),
+    fileIssues
+  );
+  if (projectBatch) batches.push(projectBatch);
+  const localBatch = readBatch(
+    { origin: "project.local", sourcePath: ".clio-coder/hooks.local.yaml" },
+    join(options.cwd, ".clio-coder", "hooks.local.yaml"),
+    fileIssues
+  );
+  if (localBatch) batches.push(localBatch);
+  return { batches, fileIssues };
+}
+function buildUserHookRegistrations(options) {
+  const workspaceRoot = options.workspaceRoot ?? options.cwd;
+  const readOptions = { cwd: options.cwd };
+  if (options.capturedSources !== void 0) readOptions.capturedSources = options.capturedSources;
+  const { batches, fileIssues } = readHookSources(readOptions);
+  const loaded = loadUserHooks(batches, { workspaceRoot });
+  const runCommand = options.runCommand ?? spawnSyncCommandRunner();
+  const registrations = loaded.hooks.map(
+    (hook) => userHookToRegistration(hook, {
+      recordReceipt: options.recordReceipt,
+      runCommand,
+      ...options.now !== void 0 ? { now: options.now } : {}
+    })
+  );
+  return { ...loaded, fileIssues, registrations };
+}
+function spawnSyncCommandRunner() {
+  return (argv, options) => {
+    const [command, ...args] = argv;
+    const attribution = withManagedGitCommitAttributionEnvironment(process.env, {
+      cwd: options.cwd ?? process.cwd(),
+      evidence: {}
+    });
+    reportCommitAttributionDiagnostic(attribution.diagnostic);
+    const result = spawnSync(command ?? "", args, {
+      ...options.cwd !== void 0 ? { cwd: options.cwd } : {},
+      timeout: options.timeoutMs,
+      maxBuffer: COMMAND_OUTPUT_MAX_BYTES,
+      encoding: "utf8",
+      shell: false,
+      env: attribution.env
+    });
+    const timedOut = result.error !== void 0 && result.error.code === "ETIMEDOUT";
+    return {
+      code: result.status,
+      timedOut,
+      stdout: typeof result.stdout === "string" ? result.stdout : "",
+      stderr: typeof result.stderr === "string" ? result.stderr : ""
+    };
+  };
+}
+
+// src/domains/middleware/index.ts
+var MiddlewareDomainModule = {
+  manifest: MiddlewareManifest,
+  createExtension: () => createMiddlewareBundle()
+};
+
+export {
+  MIDDLEWARE_HOOK_TEXT_MAX_CHARS,
+  shouldRequestStalledTurnContinuation,
+  writeMiddlewareDiagnosticToStderr,
+  formatRegistrationConflict,
+  createMiddlewareContractFromSnapshot,
+  createReadOnlyExplorationNudgeRegistration,
+  createUnbackedWorkerClaimRegistration,
+  openDetachedBatchViews,
+  createDetachedDispatchNudgeRegistration,
+  HOOK_RECEIPT_LOG_CAPACITY,
+  createHookReceiptLog,
+  readPersistedHookReceipts,
+  loadUserHooks,
+  readHookSources,
+  buildUserHookRegistrations,
+  createSkillsReminderRegistration,
+  createMarketplaceOfferRegistration,
+  createMemoryInterventionRegistration,
+  announceMemoryStepEndpoint,
   createTaskBoardReminderRegistration,
   createTaskNudgeRegistration,
   createMiddlewareToolChoiceControl,
@@ -2467,4 +3004,4 @@ export {
   createWatchdogRegistration,
   MiddlewareDomainModule
 };
-//# sourceMappingURL=chunk-QLL7ILRG.js.map
+//# sourceMappingURL=chunk-UBRFI4HS.js.map