@isaacriehm/cairn-core 0.1.0

package/dist/hooks/post-tool-use/read-enricher.js

@@ -0,0 +1,157 @@
+/**
+ * `cairn hook read-enrich` — PostToolUse hook on the Read tool.
+ *
+ * Scans the file content the agent just read for cairn citation
+ * patterns (`§V<N>`, `TODO(TSK-<id>)`, banned `DEC-<N>`) and prepends a
+ * legend block via Claude Code's documented Shape-B `additionalContext`
+ * field so the agent sees authoritative resolutions inline with the
+ * file content. No MCP round-trip; all sources read directly from
+ * `.cairn/` on disk.
+ *
+ * Spec: docs/READ_ENRICHER_SPEC.md
+ */
+import { relative } from "node:path";
+import { resolveRepoRoot } from "../../session-start/index.js";
+import { scanCitations } from "./citation-scanner.js";
+import { getInvariantsLedger, getScopeIndexEntry, lookupTask, } from "./ledger-cache.js";
+import { buildLegend } from "./legend-builder.js";
+const MAX_CONTENT_BYTES = 512_000;
+const BINARY_SAMPLE_BYTES = 1024;
+const BINARY_THRESHOLD = 0.05;
+function readStdin() {
+    return new Promise((resolveP) => {
+        const chunks = [];
+        process.stdin.on("data", (chunk) => chunks.push(chunk));
+        process.stdin.on("end", () => {
+            resolveP(Buffer.concat(chunks).toString("utf8"));
+        });
+        process.stdin.on("error", () => {
+            resolveP("");
+        });
+        if (process.stdin.isTTY) {
+            resolveP("");
+        }
+    });
+}
+function parsePayload(text) {
+    if (text.trim().length === 0)
+        return {};
+    try {
+        const parsed = JSON.parse(text);
+        return typeof parsed === "object" && parsed !== null ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+function pickContent(resp) {
+    if (!resp || typeof resp !== "object")
+        return undefined;
+    const candidates = ["content", "text", "output"];
+    for (const k of candidates) {
+        const v = resp[k];
+        if (typeof v === "string" && v.length > 0)
+            return v;
+    }
+    return undefined;
+}
+function isBinary(content) {
+    const sampleLen = Math.min(content.length, BINARY_SAMPLE_BYTES);
+    if (sampleLen === 0)
+        return false;
+    let suspicious = 0;
+    for (let i = 0; i < sampleLen; i++) {
+        const code = content.charCodeAt(i);
+        if (code < 0x09 || (code >= 0x0e && code <= 0x1f))
+            suspicious++;
+    }
+    return suspicious / sampleLen > BINARY_THRESHOLD;
+}
+function isExcludedPath(relPath) {
+    if (relPath.startsWith(".archive/") || relPath === ".archive")
+        return true;
+    if (relPath.startsWith(".cairn/ground/") ||
+        relPath === ".cairn/ground") {
+        return true;
+    }
+    return false;
+}
+function computeRelPath(repoRoot, filePath) {
+    const rel = relative(repoRoot, filePath);
+    if (rel.startsWith("..") || rel.length === 0)
+        return filePath;
+    return rel.replace(/\\/g, "/");
+}
+function emitShapeB(additionalContext) {
+    const out = {
+        continue: true,
+        hookSpecificOutput: {
+            hookEventName: "PostToolUse",
+            additionalContext,
+        },
+    };
+    process.stdout.write(JSON.stringify(out));
+    process.stdout.write("\n");
+}
+export async function runReadEnricher() {
+    try {
+        const raw = await readStdin();
+        const payload = parsePayload(raw);
+        if (payload.tool_name !== "Read") {
+            emitShapeB("");
+            return;
+        }
+        const filePath = typeof payload.tool_input?.file_path === "string"
+            ? payload.tool_input.file_path
+            : undefined;
+        const content = pickContent(payload.tool_response);
+        if (filePath === undefined || content === undefined || content.length === 0) {
+            emitShapeB("");
+            return;
+        }
+        if (content.length > MAX_CONTENT_BYTES) {
+            emitShapeB("");
+            return;
+        }
+        const repoRoot = resolveRepoRoot(filePath);
+        if (repoRoot === null) {
+            emitShapeB("");
+            return;
+        }
+        const relPath = computeRelPath(repoRoot, filePath);
+        if (isExcludedPath(relPath)) {
+            emitShapeB("");
+            return;
+        }
+        if (isBinary(content)) {
+            emitShapeB("");
+            return;
+        }
+        const matches = scanCitations(content);
+        const ledger = getInvariantsLedger(repoRoot);
+        const cachedEntry = getScopeIndexEntry(repoRoot, relPath);
+        const scopeHint = cachedEntry !== null
+            ? {
+                decisions: cachedEntry.decisions,
+                invariants: cachedEntry.invariants,
+            }
+            : null;
+        const resolveTaskFn = (taskId) => lookupTask(repoRoot, taskId);
+        const legend = buildLegend(matches, ledger, scopeHint, resolveTaskFn);
+        if (legend === null) {
+            emitShapeB("");
+            return;
+        }
+        emitShapeB(legend);
+    }
+    catch {
+        // Defer-fail gracefully — the hook is a no-op enrichment, NOT a gate.
+        try {
+            emitShapeB("");
+        }
+        catch {
+            // Last-resort: nothing we can do.
+        }
+    }
+}
+//# sourceMappingURL=read-enricher.js.map

package/dist/hooks/post-tool-use/read-enricher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-enricher.js","sourceRoot":"","sources":["../../../src/hooks/post-tool-use/read-enricher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,GAEX,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAuB,MAAM,qBAAqB,CAAC;AAEvE,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAyB9B,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC7B,QAAQ,CAAC,EAAE,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACxB,QAAQ,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC;QAC5D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,IAA+C;IAE/C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAChE,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;YAAE,UAAU,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,UAAU,GAAG,SAAS,GAAG,gBAAgB,CAAC;AACnD,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,OAAO,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC3E,IACE,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACpC,OAAO,KAAK,eAAe,EAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,QAAgB;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9D,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,iBAAyB;IAC3C,MAAM,GAAG,GAA4B;QACnC,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE;YAClB,aAAa,EAAE,aAAa;YAC5B,iBAAiB;SAClB;KACF,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YACjC,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,UAAU,EAAE,SAAS,KAAK,QAAQ;YAC/C,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS;YAC9B,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACvC,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACtB,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,SAAS,GACb,WAAW,KAAK,IAAI;YAClB,CAAC,CAAC;gBACE,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,UAAU,EAAE,WAAW,CAAC,UAAU;aACnC;YACH,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,aAAa,GAAG,CAAC,MAAc,EAAoB,EAAE,CACzD,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACtE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,IAAI,CAAC;YACH,UAAU,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/hooks/post-tool-use/write-guardian.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `cairn hook write-guard` — PostToolUse hook on the Write/Edit tool.
+ *
+ * Scans the just-written content for internal-only copy patterns
+ * leaking into a user-facing surface (TODO/FIXME comments, cairn
+ * citations, snake_case identifiers in display strings, internal repo
+ * paths). Independent of the copy-safety glob, also looks up the
+ * file's scope-index entry and renders a "decisions/invariants in
+ * scope" reminder.
+ *
+ * Both sections are emitted via Claude Code's documented Shape-B
+ * `additionalContext` field — the file on disk is NEVER modified, the
+ * Write/Edit always succeeds. Guardian is a hint, not a gate.
+ *
+ * Spec: docs/READ_ENRICHER_SPEC.md "Write Guardian" section.
+ */
+export declare function runWriteGuardian(): Promise<void>;

package/dist/hooks/post-tool-use/write-guardian.js

@@ -0,0 +1,176 @@
+/**
+ * `cairn hook write-guard` — PostToolUse hook on the Write/Edit tool.
+ *
+ * Scans the just-written content for internal-only copy patterns
+ * leaking into a user-facing surface (TODO/FIXME comments, cairn
+ * citations, snake_case identifiers in display strings, internal repo
+ * paths). Independent of the copy-safety glob, also looks up the
+ * file's scope-index entry and renders a "decisions/invariants in
+ * scope" reminder.
+ *
+ * Both sections are emitted via Claude Code's documented Shape-B
+ * `additionalContext` field — the file on disk is NEVER modified, the
+ * Write/Edit always succeeds. Guardian is a hint, not a gate.
+ *
+ * Spec: docs/READ_ENRICHER_SPEC.md "Write Guardian" section.
+ */
+import { basename, relative } from "node:path";
+import { matchAnyGlob } from "../../ground/glob.js";
+import { resolveRepoRoot } from "../../session-start/index.js";
+import { readCopySafetyConfig, } from "./allowlist-reader.js";
+import { scanForCopyLeakage } from "./copy-scanner.js";
+import { getScopeIndexEntry } from "./ledger-cache.js";
+function readStdin() {
+    return new Promise((resolveP) => {
+        const chunks = [];
+        process.stdin.on("data", (chunk) => chunks.push(chunk));
+        process.stdin.on("end", () => {
+            resolveP(Buffer.concat(chunks).toString("utf8"));
+        });
+        process.stdin.on("error", () => {
+            resolveP("");
+        });
+        if (process.stdin.isTTY) {
+            resolveP("");
+        }
+    });
+}
+function parsePayload(text) {
+    if (text.trim().length === 0)
+        return {};
+    try {
+        const parsed = JSON.parse(text);
+        return typeof parsed === "object" && parsed !== null ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+function pickContent(resp) {
+    if (!resp || typeof resp !== "object")
+        return undefined;
+    const candidates = ["content", "text", "output"];
+    for (const k of candidates) {
+        const v = resp[k];
+        if (typeof v === "string" && v.length > 0)
+            return v;
+    }
+    return undefined;
+}
+function computeRelPath(repoRoot, filePath) {
+    const rel = relative(repoRoot, filePath);
+    if (rel.startsWith("..") || rel.length === 0)
+        return filePath;
+    return rel.replace(/\\/g, "/");
+}
+function emitShapeB(additionalContext) {
+    const out = {
+        continue: true,
+        hookSpecificOutput: {
+            hookEventName: "PostToolUse",
+            additionalContext,
+        },
+    };
+    process.stdout.write(JSON.stringify(out));
+    process.stdout.write("\n");
+}
+function filterAllowed(issues, config) {
+    if (config.allowlist.length === 0)
+        return issues;
+    const allowed = new Set(config.allowlist);
+    return issues.filter((i) => !allowed.has(i.match));
+}
+function renderCopySafetySection(fileName, issues) {
+    const lines = [];
+    lines.push(`⚠ cairn:copy-safety — ${issues.length} potential internal copy issue(s) in ${fileName}:`);
+    for (const issue of issues) {
+        lines.push(`  line ${issue.line}  "${issue.match}"  → ${issue.pattern} in user-facing string`);
+    }
+    return lines.join("\n");
+}
+function renderScopeSection(scopeHint) {
+    const lines = [];
+    lines.push("ℹ cairn:scope — this file has rules in scope:");
+    if (scopeHint.decisions.length > 0) {
+        lines.push(`  decisions: ${scopeHint.decisions.join(", ")}`);
+    }
+    if (scopeHint.invariants.length > 0) {
+        const formatted = scopeHint.invariants
+            .map((v) => (v.startsWith("§") ? v : `§${v}`))
+            .join(", ");
+        lines.push(`  invariants: ${formatted}`);
+    }
+    return lines.join("\n");
+}
+export async function runWriteGuardian() {
+    try {
+        const raw = await readStdin();
+        const payload = parsePayload(raw);
+        const toolName = payload.tool_name;
+        if (toolName !== "Write" && toolName !== "Edit") {
+            emitShapeB("");
+            return;
+        }
+        const filePath = typeof payload.tool_input?.file_path === "string"
+            ? payload.tool_input.file_path
+            : undefined;
+        if (filePath === undefined) {
+            emitShapeB("");
+            return;
+        }
+        let content = pickContent(payload.tool_response);
+        if ((content === undefined || content.length === 0) &&
+            toolName === "Edit") {
+            const ns = payload.tool_input?.new_string;
+            if (typeof ns === "string" && ns.length > 0)
+                content = ns;
+        }
+        if (content === undefined || content.length === 0) {
+            emitShapeB("");
+            return;
+        }
+        const repoRoot = resolveRepoRoot(filePath);
+        if (repoRoot === null) {
+            emitShapeB("");
+            return;
+        }
+        const relPath = computeRelPath(repoRoot, filePath);
+        const config = readCopySafetyConfig(repoRoot);
+        const inGlobs = config.enabled && matchAnyGlob(relPath, config.globs);
+        let issues = [];
+        if (inGlobs) {
+            const raw = scanForCopyLeakage(content, filePath);
+            issues = filterAllowed(raw, config);
+        }
+        const cachedEntry = getScopeIndexEntry(repoRoot, relPath);
+        const scopeHint = cachedEntry !== null
+            ? {
+                decisions: cachedEntry.decisions,
+                invariants: cachedEntry.invariants,
+            }
+            : null;
+        const sections = [];
+        if (issues.length > 0) {
+            sections.push(renderCopySafetySection(basename(filePath), issues));
+        }
+        if (scopeHint !== null) {
+            sections.push(renderScopeSection(scopeHint));
+        }
+        if (sections.length === 0) {
+            emitShapeB("");
+            return;
+        }
+        const block = sections.join("\n\n") + "\n\nWrite succeeded. Review before committing.";
+        emitShapeB(block);
+    }
+    catch {
+        // Defer-fail gracefully — guardian is a hint, NOT a gate.
+        try {
+            emitShapeB("");
+        }
+        catch {
+            // Last-resort: nothing we can do.
+        }
+    }
+}
+//# sourceMappingURL=write-guardian.js.map

package/dist/hooks/post-tool-use/write-guardian.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-guardian.js","sourceRoot":"","sources":["../../../src/hooks/post-tool-use/write-guardian.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EACL,oBAAoB,GAErB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAkB,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AA0BvD,SAAS,SAAS;IAChB,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC7B,QAAQ,CAAC,EAAE,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACxB,QAAQ,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC;QAC5D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,IAA+C;IAE/C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,QAAgB;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9D,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,iBAAyB;IAC3C,MAAM,GAAG,GAA4B;QACnC,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE;YAClB,aAAa,EAAE,aAAa;YAC5B,iBAAiB;SAClB;KACF,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CACpB,MAAmB,EACnB,MAAwB;IAExB,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,uBAAuB,CAC9B,QAAgB,EAChB,MAAmB;IAEnB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CACR,yBAAyB,MAAM,CAAC,MAAM,wCAAwC,QAAQ,GAAG,CAC1F,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,UAAU,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,KAAK,QAAQ,KAAK,CAAC,OAAO,wBAAwB,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAyB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC5D,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,gBAAgB,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aAC7C,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAChD,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,UAAU,EAAE,SAAS,KAAK,QAAQ;YAC/C,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS;YAC9B,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,IAAI,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjD,IACE,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;YAC/C,QAAQ,KAAK,MAAM,EACnB,CAAC;YACD,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC;YAC1C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,GAAG,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAExD,IAAI,MAAM,GAAgB,EAAE,CAAC;QAC7B,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAClD,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,SAAS,GACb,WAAW,KAAK,IAAI;YAClB,CAAC,CAAC;gBACE,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,UAAU,EAAE,WAAW,CAAC,UAAU;aACnC;YACH,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,UAAU,CAAC,EAAE,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GACT,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,gDAAgD,CAAC;QAC3E,UAAU,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;QAC1D,IAAI,CAAC;YACH,UAAU,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/hooks/read-enrich.d.ts

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+/**
+ * Bin entrypoint — `node cairn-core/dist/hooks/read-enrich.js`.
+ * PostToolUse on Read; injects citation legend.
+ */
+export {};

package/dist/hooks/read-enrich.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+/**
+ * Bin entrypoint — `node cairn-core/dist/hooks/read-enrich.js`.
+ * PostToolUse on Read; injects citation legend.
+ */
+import { runReadEnricher } from "./post-tool-use/index.js";
+runReadEnricher().catch((err) => {
+    process.stderr.write(`[cairn read-enrich] ${err instanceof Error ? err.message : String(err)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=read-enrich.js.map

package/dist/hooks/read-enrich.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-enrich.js","sourceRoot":"","sources":["../../src/hooks/read-enrich.ts"],"names":[],"mappings":";AACA;;;GAGG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC5E,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/hooks/runners/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Claude Code hook runners — pure logic, called by both bin scripts
+ * (`cairn-core/dist/hooks/<event>.js`) and the umbrella CLI
+ * (`cairn hook <event>`).
+ */
+export { runSessionStartHook } from "./session-start.js";
+export { runSessionEndHook } from "./session-end.js";
+export { runStopHook } from "./stop.js";
+export { renderBypassHint, scanBypassedCommits, } from "../bypass-detection.js";
+export type { BypassedCommit, ScanBypassResult, } from "../bypass-detection.js";
+export { CAIRN_HOOK_VERSION, emitShapeB, parseHookPayload, readHookStdin, recordHookTelemetry, } from "./payload.js";
+export type { ClaudeHookPayload, HookTelemetryRow } from "./payload.js";

package/dist/hooks/runners/index.js

@@ -0,0 +1,11 @@
+/**
+ * Claude Code hook runners — pure logic, called by both bin scripts
+ * (`cairn-core/dist/hooks/<event>.js`) and the umbrella CLI
+ * (`cairn hook <event>`).
+ */
+export { runSessionStartHook } from "./session-start.js";
+export { runSessionEndHook } from "./session-end.js";
+export { runStopHook } from "./stop.js";
+export { renderBypassHint, scanBypassedCommits, } from "../bypass-detection.js";
+export { CAIRN_HOOK_VERSION, emitShapeB, parseHookPayload, readHookStdin, recordHookTelemetry, } from "./payload.js";
+//# sourceMappingURL=index.js.map

package/dist/hooks/runners/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/hooks/runners/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAKhC,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,mBAAmB,GACpB,MAAM,cAAc,CAAC"}

package/dist/hooks/runners/payload.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Shared utilities for Claude Code hook runners — stdin reader,
+ * payload parser, Shape-B emitter, telemetry sink.
+ *
+ * Spec: Claude Code hook contract (Shape-B JSON on stdout).
+ */
+export declare const CAIRN_HOOK_VERSION = "0.0.0";
+export interface ClaudeHookPayload {
+    session_id?: string;
+    transcript_path?: string;
+    cwd?: string;
+    hook_event_name?: string;
+    source?: string;
+}
+export declare function readHookStdin(): Promise<string>;
+export declare function parseHookPayload(text: string): ClaudeHookPayload;
+export declare function emitShapeB(output: object): void;
+export interface HookTelemetryRow {
+    hook: string;
+    repoRoot: string | null;
+    sessionId: string | null;
+    source: string | null;
+    durationMs: number;
+    warnings: string[];
+    /** Free-form fields merged into the telemetry row. */
+    extra?: Record<string, unknown>;
+}
+/**
+ * Append a telemetry row to `~/.local/cairn/state/<hook>.jsonl`.
+ * Telemetry must never throw — failures are swallowed.
+ */
+export declare function recordHookTelemetry(row: HookTelemetryRow): void;

package/dist/hooks/runners/payload.js

@@ -0,0 +1,70 @@
+/**
+ * Shared utilities for Claude Code hook runners — stdin reader,
+ * payload parser, Shape-B emitter, telemetry sink.
+ *
+ * Spec: Claude Code hook contract (Shape-B JSON on stdout).
+ */
+import { appendFileSync, existsSync, mkdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+export const CAIRN_HOOK_VERSION = "0.0.0";
+export function readHookStdin() {
+    return new Promise((resolveP) => {
+        const chunks = [];
+        process.stdin.on("data", (chunk) => chunks.push(chunk));
+        process.stdin.on("end", () => {
+            resolveP(Buffer.concat(chunks).toString("utf8"));
+        });
+        process.stdin.on("error", () => {
+            resolveP("");
+        });
+        if (process.stdin.isTTY) {
+            // No piped input — Claude Code always pipes; this only matters in
+            // dev/test invocations.
+            resolveP("");
+        }
+    });
+}
+export function parseHookPayload(text) {
+    if (text.trim().length === 0)
+        return {};
+    try {
+        const parsed = JSON.parse(text);
+        return typeof parsed === "object" && parsed !== null ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+export function emitShapeB(output) {
+    process.stdout.write(JSON.stringify(output));
+    process.stdout.write("\n");
+}
+/**
+ * Append a telemetry row to `~/.local/cairn/state/<hook>.jsonl`.
+ * Telemetry must never throw — failures are swallowed.
+ */
+export function recordHookTelemetry(row) {
+    try {
+        const dir = resolve(homedir(), ".local", "cairn", "state");
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+        const path = join(dir, `${row.hook}.jsonl`);
+        const body = {
+            ts: new Date().toISOString(),
+            hook_version: CAIRN_HOOK_VERSION,
+            hook: row.hook,
+            ...(row.sessionId !== null ? { session_id: row.sessionId } : {}),
+            ...(row.source !== null ? { source: row.source } : {}),
+            ...(row.repoRoot !== null ? { repo_root: row.repoRoot } : {}),
+            duration_ms: row.durationMs,
+            warnings: row.warnings,
+            ...(row.extra ?? {}),
+        };
+        appendFileSync(path, `${JSON.stringify(body)}\n`, "utf8");
+    }
+    catch {
+        // Telemetry must never block the hook.
+    }
+}
+//# sourceMappingURL=payload.js.map

package/dist/hooks/runners/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../src/hooks/runners/payload.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAU1C,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YAC3B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC7B,QAAQ,CAAC,EAAE,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACxB,kEAAkE;YAClE,wBAAwB;YACxB,QAAQ,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,CAAC;QACrD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAaD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAqB;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG;YACX,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,YAAY,EAAE,kBAAkB;YAChC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,WAAW,EAAE,GAAG,CAAC,UAAU;YAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;SACrB,CAAC;QACF,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC"}

package/dist/hooks/runners/session-end.d.ts

@@ -0,0 +1,7 @@
+/**
+ * `SessionEnd` hook runner — removes the per-session directory.
+ *
+ * Spec: PLUGIN_ARCHITECTURE §7. Best-effort; stale sessions GC'd at
+ * the next SessionStart anyway.
+ */
+export declare function runSessionEndHook(): Promise<void>;

package/dist/hooks/runners/session-end.js

@@ -0,0 +1,42 @@
+/**
+ * `SessionEnd` hook runner — removes the per-session directory.
+ *
+ * Spec: PLUGIN_ARCHITECTURE §7. Best-effort; stale sessions GC'd at
+ * the next SessionStart anyway.
+ */
+import { resolveRepoRoot } from "../../session-start/index.js";
+import { cleanupSession } from "../../session/index.js";
+import { emitShapeB, parseHookPayload, readHookStdin, recordHookTelemetry, } from "./payload.js";
+export async function runSessionEndHook() {
+    const startedAt = Date.now();
+    const raw = await readHookStdin();
+    const payload = parseHookPayload(raw);
+    const sessionId = typeof payload.session_id === "string" ? payload.session_id : null;
+    const cwdInput = typeof payload.cwd === "string" ? payload.cwd : process.cwd();
+    const repoRoot = resolveRepoRoot(cwdInput);
+    let removed = false;
+    const warnings = [];
+    if (repoRoot !== null && sessionId !== null && sessionId.length > 0) {
+        try {
+            removed = cleanupSession(repoRoot, sessionId);
+        }
+        catch (err) {
+            warnings.push(`cleanup_failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    const out = {
+        continue: true,
+        hookSpecificOutput: { hookEventName: "SessionEnd" },
+    };
+    emitShapeB(out);
+    recordHookTelemetry({
+        hook: "session-end",
+        repoRoot,
+        sessionId,
+        source: null,
+        durationMs: Date.now() - startedAt,
+        warnings,
+        extra: { removed },
+    });
+}
+//# sourceMappingURL=session-end.js.map

package/dist/hooks/runners/session-end.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-end.js","sourceRoot":"","sources":["../../../src/hooks/runners/session-end.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAStB,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/E,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE3C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,QAAQ,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC;YACH,OAAO,GAAG,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CACX,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAA2B;QAClC,QAAQ,EAAE,IAAI;QACd,kBAAkB,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE;KACpD,CAAC;IACF,UAAU,CAAC,GAAG,CAAC,CAAC;IAEhB,mBAAmB,CAAC;QAClB,IAAI,EAAE,aAAa;QACnB,QAAQ;QACR,SAAS;QACT,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QAClC,QAAQ;QACR,KAAK,EAAE,EAAE,OAAO,EAAE;KACnB,CAAC,CAAC;AACL,CAAC"}

package/dist/hooks/runners/session-start.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `SessionStart` hook runner — composes the additionalContext payload
+ * Claude Code injects on session open and seeds the per-session state
+ * partition (status.json, events marker), then GCs stale sessions +
+ * events.
+ *
+ * Spec: PLUGIN_ARCHITECTURE §7 + §10. Bin entrypoint at
+ * `cairn-core/src/hooks/session-start.ts` calls into this runner.
+ */
+export declare function runSessionStartHook(): Promise<void>;