@rryando/arcs 4.2.0 → 5.0.0

package/dist/web-server/hook-auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook-auth.d.ts","sourceRoot":"","sources":["../../src/web-server/hook-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAY9C,eAAO,MAAM,gBAAgB,EAAE,iBAmB9B,CAAC"}

package/dist/web-server/hook-auth.js

@@ -1,36 +0,0 @@
-/**
- * Bearer-token gate for `/api/hook/*`.
- *
- * Layered on top of (never instead of) the global loopback-only
- * `secureLocalRequest`: loopback proves the caller is on this machine, the
- * token proves it is this project's installed hook script. Browser-facing
- * routes stay token-free — only the hook endpoint carries a shared secret,
- * because only it is called by something that is not the ARCS web UI.
- */
-import { verifyHookToken } from "../utils/hook-token-store.js";
-import { fail, requireProjectDir } from "./respond.js";
-const BEARER = /^Bearer\s+(\S+)$/i;
-/** `/api/hook/:slug/...` → the slug segment, or "" when the shape is wrong. */
-function slugFromPath(url) {
-    const segments = new URL(url).pathname.split("/");
-    return segments[1] === "api" && segments[2] === "hook" ? (segments[3] ?? "") : "";
-}
-export const requireHookToken = async (c, next) => {
-    const unauthorized = () => c.json(fail("hook_unauthorized", "Missing or invalid ARCS hook token"), 401);
-    const match = BEARER.exec((c.req.header("authorization") ?? "").trim());
-    if (!match)
-        return unauthorized();
-    let projectDir;
-    try {
-        projectDir = requireProjectDir(slugFromPath(c.req.url));
-    }
-    catch {
-        // Deliberately 401, not 404: an unauthenticated caller must not be able to
-        // probe which project slugs exist on this machine.
-        return unauthorized();
-    }
-    if (!(await verifyHookToken(projectDir, match[1])))
-        return unauthorized();
-    await next();
-};
-//# sourceMappingURL=hook-auth.js.map

package/dist/web-server/hook-auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook-auth.js","sourceRoot":"","sources":["../../src/web-server/hook-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEvD,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,+EAA+E;AAC/E,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAsB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IACnE,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,oCAAoC,CAAC,EAAE,GAAG,CAAC,CAAC;IAE/E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK;QAAE,OAAO,YAAY,EAAE,CAAC;IAElC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,mDAAmD;QACnD,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,YAAY,EAAE,CAAC;IAE1E,MAAM,IAAI,EAAE,CAAC;AACf,CAAC,CAAC"}

package/dist/web-server/routes/hook-events.d.ts

@@ -1,43 +0,0 @@
-/**
- * Claude Code session-bridge endpoint.
- *
- * Claude Code has no live-injection channel: hooks are stateless, fire per
- * event, and hold no persistent connection. So the session drives the bridge —
- * it announces itself at `SessionStart`, checkpoints at every
- * `UserPromptSubmit`, closes out at `SessionEnd`, and reports its transcript
- * at `Stop` (the last checkpoint before teardown).
- *
- * Those checkpoints are also the only liveness signal an observed session ever
- * emits, so each one stamps `lastCheckpointAt` — the field the session's derived
- * phase reads to decide whether a terminal is still working.
- *
- * `SessionStart` additionally answers with `stagedContext`: the same staged
- * environment an ARCS-owned headless run carries on `--append-system-prompt`,
- * so a terminal a human drives knows its project, its workspace and its DAG
- * position without the human setting the stage by hand. See
- * `sessionStartContext` for what differs from the owned path.
- *
- * The response stays ARCS-shaped (`{sessionId, stagedContext?}`); turning that
- * into Claude Code's `hookSpecificOutput` envelope is the hook script's job, so
- * a change to Claude Code's wire format never reaches the server.
- *
- * Unlike every other route here this one is not browser-facing, so it sits
- * behind `requireHookToken` in addition to the global loopback check.
- */
-import { Hono } from "hono";
-export declare const hookEventsRoute: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
-/**
- * Ceiling on the block a SessionStart mirrors into a terminal, in characters.
- *
- * Deliberately far below `STAGE_SOFT_CAP` (6000): that budget is spent inside a
- * headless `claude -p` process nobody is watching, whereas this text lands at
- * the head of a live session a human is about to type into. Anything wider buys
- * context nobody asked for at the cost of the window they did.
- *
- * Enforced by SELECTION, never by clipping — see `sessionStartContext`.
- * `scripts/claude-code-session-hook.mjs` carries its own, wider refusal bound
- * (`MAX_CONTEXT_CHARS`), pinned against this constant by
- * `test/claude-code-hook-script.test.ts`.
- */
-export declare const SESSION_START_STAGE_CAP = 2500;
-//# sourceMappingURL=hook-events.d.ts.map

package/dist/web-server/routes/hook-events.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook-events.d.ts","sourceRoot":"","sources":["../../../src/web-server/routes/hook-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAiB5B,eAAO,MAAM,eAAe,4EAAa,CAAC;AAqI1C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,uBAAuB,OAAO,CAAC"}

package/dist/web-server/routes/hook-events.js

@@ -1,316 +0,0 @@
-/**
- * Claude Code session-bridge endpoint.
- *
- * Claude Code has no live-injection channel: hooks are stateless, fire per
- * event, and hold no persistent connection. So the session drives the bridge —
- * it announces itself at `SessionStart`, checkpoints at every
- * `UserPromptSubmit`, closes out at `SessionEnd`, and reports its transcript
- * at `Stop` (the last checkpoint before teardown).
- *
- * Those checkpoints are also the only liveness signal an observed session ever
- * emits, so each one stamps `lastCheckpointAt` — the field the session's derived
- * phase reads to decide whether a terminal is still working.
- *
- * `SessionStart` additionally answers with `stagedContext`: the same staged
- * environment an ARCS-owned headless run carries on `--append-system-prompt`,
- * so a terminal a human drives knows its project, its workspace and its DAG
- * position without the human setting the stage by hand. See
- * `sessionStartContext` for what differs from the owned path.
- *
- * The response stays ARCS-shaped (`{sessionId, stagedContext?}`); turning that
- * into Claude Code's `hookSpecificOutput` envelope is the hook script's job, so
- * a change to Claude Code's wire format never reaches the server.
- *
- * Unlike every other route here this one is not browser-facing, so it sits
- * behind `requireHookToken` in addition to the global loopback check.
- */
-import { join } from "node:path";
-import { Hono } from "hono";
-import { z } from "zod";
-import { mirrorSessionTranscript } from "../../utils/claude-transcript.js";
-import { HOOK_EVENTS } from "../../utils/hook-contract.js";
-import { readJsonSafe } from "../../utils/json.js";
-import { readPlanIndex } from "../../utils/plan-store.js";
-import { getSession, updateSession, upsertSession, } from "../../utils/session-store.js";
-import { listTasks } from "../../utils/task-store.js";
-import { deriveOperatingBrief } from "../../utils/workflow-policy.js";
-import { buildStagedEnvironment, stripStageDelimiters } from "../prompt-assembly.js";
-import { parseBody, requireProjectDir, respond } from "../respond.js";
-export const hookEventsRoute = new Hono();
-/**
- * Claude Code's native stdin fields, forwarded verbatim by the hook script.
- * Unknown extra fields are ignored rather than rejected — Claude Code adds
- * fields between releases and a hook must not start failing because of it.
- *
- * The accepted event names come straight from the bridge contract: the server
- * cannot end up rejecting an event the installer registered the hook for.
- */
-const hookEventSchema = z.object({
-    hook_event_name: z.enum(HOOK_EVENTS),
-    session_id: z.string().min(1),
-    cwd: z.string().optional(),
-    source: z.string().optional(),
-    prompt: z.string().optional(),
-    reason: z.string().optional(),
-    transcript_path: z.string().optional(),
-    control: z.string().optional(),
-});
-/**
- * Builds the metadata persisted on the session. Claude Code's `cwd` lands under
- * the `directory` key: that is the metadata key the sessions UI already reads,
- * so every session renders its worktree the same way.
- * `transcript_path` is persisted under `transcriptPath` (the sessions UI reads
- * that key) so headless-run write-backs can resolve the transcript without the
- * client resupplying it, and `control` is persisted verbatim for back-compat
- * with readers that still display it — it no longer decides anything here, the
- * session's persisted `origin` does.
- */
-function sessionMetadata(event) {
-    const metadata = {
-        ...(event.cwd && { directory: event.cwd }),
-        ...(event.source && { source: event.source }),
-        ...(event.control !== undefined && { control: event.control }),
-        ...(event.transcript_path !== undefined && { transcriptPath: event.transcript_path }),
-    };
-    return Object.keys(metadata).length > 0 ? metadata : undefined;
-}
-/**
- * Registers (or refreshes) the session behind a hook event.
- *
- * Anything announcing itself through this endpoint is by definition a real
- * terminal session ARCS is watching, so a record created here is `observed` —
- * the origin that opts it into transcript mirroring. Provenance is create-only
- * in the store, so an event arriving for an ARCS-owned thread refreshes it
- * without demoting it.
- */
-function registerSession(projectDir, event) {
-    const metadata = sessionMetadata(event);
-    return upsertSession(projectDir, {
-        runtimeType: "claude-code",
-        runtimeSessionId: event.session_id,
-        origin: "observed",
-        status: "active",
-        ...(metadata && { metadata }),
-    });
-}
-/**
- * Records the checkpoint itself, plus whatever it carried.
- *
- * `lastCheckpointAt` is written at EVERY UserPromptSubmit and Stop, even for an
- * event with no metadata at all: it is the only proof of life a session ARCS
- * merely observes ever emits, and the derived phase reads nothing else for such
- * a session. Miss one and a working terminal reads idle.
- *
- * ISO-8601, like every other top-level session timestamp (`metadata.run` keeps
- * epoch ms — the two units never mix). Checkpoint-derived metadata
- * (transcriptPath, directory…) rides the same write, so the transcript path a
- * checkpoint carries is still never dropped.
- */
-async function persistCheckpoint(projectDir, session, event) {
-    const metadata = sessionMetadata(event);
-    return updateSession(projectDir, {
-        id: session.normalizedId,
-        lastCheckpointAt: new Date().toISOString(),
-        ...(metadata !== undefined && { metadata }),
-    });
-}
-/**
- * Whether a checkpoint's runtime transcript should be mirrored into the
- * session's sidecar.
- *
- * Only sessions ARCS observes qualify. An `arcs`-origin record owns its sidecar
- * through the run route's own turn appends, so mirroring a runtime transcript
- * on top would duplicate the conversation. The rule reads the persisted origin,
- * never `metadata.control`.
- */
-function shouldMirrorTranscript(session) {
-    return session.origin === "observed";
-}
-/**
- * Resolves the session behind a checkpoint, registering it if this is the first
- * event ARCS has seen. `resume`/`compact` can deliver a prompt for a session
- * whose SessionStart never reached us, and dropping the checkpoint would cost
- * the session its only proof of life.
- */
-async function resolveCheckpointSession(projectDir, event) {
-    try {
-        return await getSession(projectDir, event.session_id);
-    }
-    catch {
-        return registerSession(projectDir, event);
-    }
-}
-// ---------------------------------------------------------------------------
-// SessionStart staged context
-// ---------------------------------------------------------------------------
-/**
- * Ceiling on the block a SessionStart mirrors into a terminal, in characters.
- *
- * Deliberately far below `STAGE_SOFT_CAP` (6000): that budget is spent inside a
- * headless `claude -p` process nobody is watching, whereas this text lands at
- * the head of a live session a human is about to type into. Anything wider buys
- * context nobody asked for at the cost of the window they did.
- *
- * Enforced by SELECTION, never by clipping — see `sessionStartContext`.
- * `scripts/claude-code-session-hook.mjs` carries its own, wider refusal bound
- * (`MAX_CONTEXT_CHARS`), pinned against this constant by
- * `test/claude-code-hook-script.test.ts`.
- */
-export const SESSION_START_STAGE_CAP = 2500;
-/** Width for one value interpolated into the degraded block. */
-const DEGRADED_FIELD_WIDTH = 160;
-/**
- * Normalizes one untrusted value for an ARCS-authored line: delimiter-stripped,
- * whitespace-collapsed, width-bounded. Mirrors prompt-assembly's `field` (not
- * exported), and applies to EVERY slot below rather than to the values that
- * look risky — a project name and a task title are both agent- or user-authored
- * text arriving in the controller's voice.
- */
-function degradedField(value, width = DEGRADED_FIELD_WIDTH) {
-    const clean = stripStageDelimiters(value).replace(/\s+/g, " ").trim();
-    return clean.length <= width ? clean : `${clean.slice(0, width - 1)}…`;
-}
-/**
- * The two lines a session with nothing staged for it still deserves.
- *
- * An observed session carries no `linkedNodeId` until a human sets one —
- * discovery never links — so this is the COMMON case at SessionStart, not an
- * edge. It therefore states what is true and useful (which project this
- * workspace is, how to read its DAG, and what the operating brief says the
- * project is currently on) instead of apologising for the missing link.
- *
- * No wrapper, and none needed: nothing here is a quoted body. The two variable
- * values are stripped, collapsed and width-bounded through `degradedField`,
- * exactly as prompt-assembly treats the same task title in its own brief block.
- */
-async function degradedStagedContext(projectDir, slug) {
-    const [projectMeta, tasks, planIndex] = await Promise.all([
-        readJsonSafe(join(projectDir, "meta.json")),
-        listTasks(projectDir),
-        readPlanIndex(projectDir),
-    ]);
-    const operating = deriveOperatingBrief({
-        tasks: tasks.map((t) => ({
-            id: t.id,
-            title: t.title,
-            status: t.status,
-            planId: t.planId,
-            priority: t.priority,
-            dependsOn: t.dependsOn,
-        })),
-        plans: planIndex.plans.map((p) => ({ id: p.id, title: p.title, status: p.status })),
-    });
-    return [
-        `This workspace is tracked by ARCS as project ${degradedField(slug)} ` +
-            `"${degradedField(projectMeta?.name ?? slug)}" — read its DAG with ` +
-            `\`arcs brief ${degradedField(slug)} --lean --json\`. Link this session to a task in the ` +
-            "ARCS web UI to stage that task's scope, acceptance and verify command here.",
-        `Project current focus: ${degradedField(operating.currentFocus)} · ` +
-            `Next action: ${degradedField(operating.nextAction)}`,
-    ].join("\n");
-}
-/**
- * The staged block a SessionStart answers with, or nothing at all.
- *
- * Same builder as an ARCS-owned headless run (`buildStagedEnvironment`), and
- * deliberately NOT the same call:
- *  - no references — those are attached per SEND, and a session that has not
- *    started yet has none;
- *  - no argv, no permission segment — the terminal's user owns their own
- *    permissions and ARCS does not get to narrow them from here;
- *  - a much tighter cap (see SESSION_START_STAGE_CAP);
- *  - STATELESS — no fingerprint, no `metadata.stage`, no restage bookkeeping at
- *    all. The staleness machinery exists to avoid re-injecting an unchanged
- *    block across turns of one conversation; a SessionStart IS turn zero, so
- *    there is nothing to compare against and nothing to persist.
- *
- * The cap is enforced by SELECTION — the whole assembled text, or the whole
- * degraded block — never by clipping the assembled text. A head truncation
- * would keep an untrusted body's opener and sever its closer, putting every
- * later ARCS-authored line (including the one stating the controller's own
- * scope) inside an unterminated untrusted region. `softCap` lets the builder's
- * own ladder degrade gracefully first; the degraded block is the floor for the
- * DAG wide enough that even a fully degraded build does not fit.
- *
- * Any failure returns `undefined`: the hook script's hard rule is that a broken
- * bridge is invisible, so a staging error must reach it as an absent field, not
- * as a 500.
- *
- * ONE builder, but not one wording: prompt-assembly conditions its IDENTITY and
- * LIMITS blocks on the session's PERSISTED origin, and provenance is CREATE-ONLY
- * (see `registerSession`). A first sighting is created `observed`; an event
- * arriving for an ARCS-owned thread refreshes it without demoting it, so an
- * `arcs`-origin session reaching SessionStart keeps its origin and therefore gets
- * the `arcs` variant. Either variant states what is true of THAT session — for
- * the observed one, that ARCS is NOT setting its tools, permissions or lifecycle,
- * which the bullets above are the reason for, since no argv exists to set them
- * with. The untrusted-content half is identical on both origins; only the claim
- * of control moves.
- */
-async function sessionStartContext(projectDir, slug, session, event) {
-    try {
-        if (session.linkedNodeType && session.linkedNodeId) {
-            const staged = await buildStagedEnvironment(projectDir, slug, session, {
-                // Claude Code's own cwd: the directory this terminal is actually in,
-                // which is a truer workspace root than the project's registered first
-                // path when a project spans more than one checkout.
-                ...(event.cwd && { workspaceRoot: event.cwd }),
-                softCap: SESSION_START_STAGE_CAP,
-            });
-            if (staged.text.length <= SESSION_START_STAGE_CAP)
-                return staged.text;
-        }
-        return await degradedStagedContext(projectDir, slug);
-    }
-    catch {
-        return undefined;
-    }
-}
-async function handleHookEvent(projectDir, slug, event) {
-    if (event.hook_event_name === "SessionStart") {
-        const session = await registerSession(projectDir, event);
-        const stagedContext = await sessionStartContext(projectDir, slug, session, event);
-        return {
-            sessionId: session.normalizedId,
-            ...(stagedContext !== undefined && { stagedContext }),
-        };
-    }
-    if (event.hook_event_name === "UserPromptSubmit") {
-        const session = await resolveCheckpointSession(projectDir, event);
-        const checkpoint = await persistCheckpoint(projectDir, session, event);
-        if (event.transcript_path !== undefined && shouldMirrorTranscript(checkpoint)) {
-            await mirrorSessionTranscript(projectDir, checkpoint.normalizedId, event.transcript_path);
-        }
-        return { sessionId: checkpoint.normalizedId };
-    }
-    if (event.hook_event_name === "Stop") {
-        // Stop is a checkpoint like UserPromptSubmit, so an unknown session is
-        // auto-registered rather than dropped.
-        const session = await resolveCheckpointSession(projectDir, event);
-        const checkpoint = await persistCheckpoint(projectDir, session, event);
-        if (event.transcript_path !== undefined && shouldMirrorTranscript(checkpoint)) {
-            await mirrorSessionTranscript(projectDir, checkpoint.normalizedId, event.transcript_path);
-        }
-        return { sessionId: checkpoint.normalizedId };
-    }
-    // SessionEnd. Every documented reason (clear|resume|logout|other) is an
-    // ordinary teardown — none of them signals a crash, so none maps to "failed".
-    const metadata = sessionMetadata(event);
-    const session = await updateSession(projectDir, {
-        id: event.session_id,
-        status: "completed",
-        ...(metadata !== undefined && { metadata }),
-    });
-    if (event.transcript_path !== undefined && shouldMirrorTranscript(session)) {
-        await mirrorSessionTranscript(projectDir, session.normalizedId, event.transcript_path);
-    }
-    return { sessionId: session.normalizedId };
-}
-hookEventsRoute.post("/api/hook/:slug/event", async (c) => respond(c, async () => {
-    const slug = c.req.param("slug");
-    // Validates the slug before it is threaded on to the stager, which uses it
-    // both as a knowledge-selection key and as an interpolated identity value.
-    const projectDir = requireProjectDir(slug);
-    return handleHookEvent(projectDir, slug, await parseBody(c, hookEventSchema));
-}));
-//# sourceMappingURL=hook-events.js.map

package/dist/web-server/routes/hook-events.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook-events.js","sourceRoot":"","sources":["../../../src/web-server/routes/hook-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EACL,UAAU,EAEV,aAAa,EACb,aAAa,GACd,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEtE,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAcH;;;;;;;;;GASG;AACH,SAAS,eAAe,CAAC,KAAgB;IACvC,MAAM,QAAQ,GAA4B;QACxC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7C,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9D,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;KACtF,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CAAC,UAAkB,EAAE,KAAgB;IAC3D,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,aAAa,CAAC,UAAU,EAAE;QAC/B,WAAW,EAAE,aAAa;QAC1B,gBAAgB,EAAE,KAAK,CAAC,UAAU;QAClC,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,QAAQ;QAChB,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,iBAAiB,CAC9B,UAAkB,EAClB,OAAoB,EACpB,KAAgB;IAEhB,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,aAAa,CAAC,UAAU,EAAE;QAC/B,EAAE,EAAE,OAAO,CAAC,YAAY;QACxB,gBAAgB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC1C,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,OAAoB;IAClD,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,wBAAwB,CACrC,UAAkB,EAClB,KAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAE5C,gEAAgE;AAChE,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,KAAK,GAAG,oBAAoB;IAChE,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,IAAY;IACnE,MAAM,CAAC,WAAW,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACxD,YAAY,CAAoB,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAC9D,SAAS,CAAC,UAAU,CAAC;QACrB,aAAa,CAAC,UAAU,CAAC;KAC1B,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;QACH,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;KACpF,CAAC,CAAC;IACH,OAAO;QACL,gDAAgD,aAAa,CAAC,IAAI,CAAC,GAAG;YACpE,IAAI,aAAa,CAAC,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC,wBAAwB;YACpE,gBAAgB,aAAa,CAAC,IAAI,CAAC,uDAAuD;YAC1F,6EAA6E;QAC/E,0BAA0B,aAAa,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK;YAClE,gBAAgB,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;KACxD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,KAAK,UAAU,mBAAmB,CAChC,UAAkB,EAClB,IAAY,EACZ,OAAoB,EACpB,KAAgB;IAEhB,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;gBACrE,qEAAqE;gBACrE,sEAAsE;gBACtE,oDAAoD;gBACpD,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC9C,OAAO,EAAE,uBAAuB;aACjC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,uBAAuB;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QACxE,CAAC;QACD,OAAO,MAAM,qBAAqB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,IAAY,EACZ,KAAgB;IAEhB,IAAI,KAAK,CAAC,eAAe,KAAK,cAAc,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAClF,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,YAAY;YAC/B,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,KAAK,kBAAkB,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9E,MAAM,uBAAuB,CAAC,UAAU,EAAE,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;QACrC,uEAAuE;QACvE,uCAAuC;QACvC,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9E,MAAM,uBAAuB,CAAC,UAAU,EAAE,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC;IAChD,CAAC;IAED,wEAAwE;IACxE,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE;QAC9C,EAAE,EAAE,KAAK,CAAC,UAAU;QACpB,MAAM,EAAE,WAAW;QACnB,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC5C,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3E,MAAM,uBAAuB,CAAC,UAAU,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;AAC7C,CAAC;AAED,eAAe,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CACxD,OAAO,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE;IACpB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,2EAA2E;IAC3E,2EAA2E;IAC3E,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;AAChF,CAAC,CAAC,CACH,CAAC"}

package/opencode/arcs/skills/install-claude-code-hook/SKILL.md

@@ -1,23 +0,0 @@
----
-name: install-claude-code-hook
-description: Install the ARCS session-bridge hook into an existing Claude Code workspace
----
-
-# Install Claude Code Hook
-
-## Boundary
-
-Claude Code only. If the current harness is not Claude Code, stop. The hook changes `.claude/settings.local.json`, so obtain explicit confirmation before using `--write`.
-
-## Method
-
-1. Run `arcs hooks status <slug> --json`.
-2. If already installed for this slug, report a no-op.
-3. Explain the file written, registered events, local token, and that a new Claude Code session is required.
-4. If the hook points at another slug, warn that installation will repoint it and confirm that effect.
-5. After explicit confirmation, run `arcs hooks install-claude-code <slug> --write --json` once.
-6. Report `settingsPath`, events, and next-session requirement.
-
-Do not hand-edit Claude settings. A malformed settings file is a stop condition: surface the CLI error and do not repair, reformat, or delete it. Do not rerun installation for reassurance because it may rotate the token.
-
-Without confirmation, offer the snippet-only command without `--write`.

package/scripts/claude-code-session-hook.mjs

@@ -1,146 +0,0 @@
-#!/usr/bin/env node
-/**
- * ARCS ↔ Claude Code session-bridge hook.
- *
- * Registered four times in settings.json (SessionStart, UserPromptSubmit,
- * SessionEnd, Stop) and dispatches internally on the `hook_event_name` field
- * Claude Code writes to stdin. Install with `arcs hooks install-claude-code
- * <slug>`, which generates the token and prints the snippet to paste.
- *
- * One of the four can put text in front of the model: SessionStart mirrors
- * ARCS's staged environment (project, workspace, DAG position) into the new
- * session, emitting Claude Code's `hookSpecificOutput` envelope on stdout; the
- * other three print nothing.
- *
- * HARD RULE: this script never blocks the session. Any failure — ARCS not
- * running, token rejected, timeout, malformed JSON — is swallowed, nothing is
- * printed, and the exit code stays 0. Exit code 2 (the "block" signal) is never
- * produced. A broken bridge must be invisible, never an obstacle to the user's
- * actual Claude Code session.
- *
- * Config comes from the environment, assigned inline in the settings.json
- * command string:
- *   ARCS_HOOK_TOKEN  per-project token (required)
- *   ARCS_HOOK_SLUG   ARCS project slug (required)
- *   ARCS_HOOK_URL    ARCS web server URL (default http://127.0.0.1:4173)
- */
-
-// DEFAULT_URL and EVENTS are literals on purpose: this file runs standalone out
-// of the user's settings.json and importing ARCS would give the HARD RULE above
-// a way to fail. `src/utils/hook-contract.ts` owns the same two values for the
-// TypeScript side, and `test/hook-contract-parity.test.ts` parses THIS source
-// and fails if the two ever diverge — so keep the shapes greppable: a
-// double-quoted DEFAULT_URL, and a flat `new Set([...])` of string literals.
-const DEFAULT_URL = "http://127.0.0.1:4173";
-/** Short by design: a hung ARCS server must not stall prompt submission. */
-const TIMEOUT_MS = 1500;
-const EVENTS = new Set(["SessionStart", "UserPromptSubmit", "SessionEnd", "Stop"]);
-/**
- * Refusal bound on a context block the server sends, in characters.
- *
- * The server caps the SessionStart block at 2500 (`SESSION_START_STAGE_CAP` in
- * `src/web-server/routes/hook-events.ts`); this is the CLIENT's own limit, so a
- * misbehaving, mismatched or hostile ARCS cannot shove an unbounded body into
- * the head of the user's live session. Over the bound the block is dropped
- * whole rather than clipped — a clip would sever a wrapper's closing delimiter.
- * `test/claude-code-hook-script.test.ts` parses this literal and fails if the
- * server's cap ever climbs above it, so the two cannot silently cross.
- */
-const MAX_CONTEXT_CHARS = 4000;
-
-/** Never rejects: an unreadable stdin yields "" and the run turns into a no-op. */
-function readStdin() {
-  return new Promise((resolveStdin) => {
-    let raw = "";
-    let settled = false;
-    const finish = () => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      process.stdin.destroy();
-      resolveStdin(raw);
-    };
-    const timer = setTimeout(finish, TIMEOUT_MS);
-
-    process.stdin.setEncoding("utf-8");
-    process.stdin.on("data", (chunk) => {
-      raw += chunk;
-    });
-    process.stdin.on("end", finish);
-    process.stdin.on("error", finish);
-  });
-}
-
-async function main() {
-  const raw = await readStdin();
-  if (!raw.trim()) return;
-
-  const event = JSON.parse(raw);
-  const eventName = event?.hook_event_name;
-  const sessionId = event?.session_id;
-  if (!EVENTS.has(eventName) || typeof sessionId !== "string" || !sessionId) return;
-
-  const token = process.env.ARCS_HOOK_TOKEN;
-  const slug = process.env.ARCS_HOOK_SLUG;
-  if (!token || !slug) return;
-  const baseUrl = (process.env.ARCS_HOOK_URL || DEFAULT_URL).replace(/\/+$/, "");
-
-  const response = await fetch(`${baseUrl}/api/hook/${encodeURIComponent(slug)}/event`, {
-    method: "POST",
-    headers: {
-      "content-type": "application/json",
-      authorization: `Bearer ${token}`,
-    },
-    body: JSON.stringify({
-      hook_event_name: eventName,
-      session_id: sessionId,
-      ...(typeof event.cwd === "string" && { cwd: event.cwd }),
-      ...(typeof event.source === "string" && { source: event.source }),
-      ...(typeof event.reason === "string" && { reason: event.reason }),
-      ...(typeof event.transcript_path === "string" && { transcript_path: event.transcript_path }),
-    }),
-    signal: AbortSignal.timeout(TIMEOUT_MS),
-  });
-  if (!response.ok) return;
-
-  // Only SessionStart can inject context: it mirrors ARCS's staged environment
-  // into the fresh session. UserPromptSubmit, SessionEnd and Stop are pure
-  // notifications and answer with empty stdout, so only SessionStart reads the
-  // response body at all.
-  if (eventName !== "SessionStart") return;
-
-  const envelope = await response.json();
-
-  const staged = envelope?.data?.stagedContext;
-  // Every rejection here is a silent no-op, never a repair: an absent field,
-  // a non-string, an empty string and an oversized body all mean "ARCS has
-  // nothing usable to stage", and the session proceeds exactly as if the
-  // bridge were not installed.
-  if (typeof staged !== "string" || staged === "" || staged.length > MAX_CONTEXT_CHARS) return;
-
-  process.stdout.write(
-    JSON.stringify({
-      hookSpecificOutput: {
-        hookEventName: "SessionStart",
-        additionalContext: staged,
-      },
-    }),
-  );
-}
-
-// Belt and braces around the hard rule: even a bug in this file (or a stray
-// async rejection) must not surface as a non-zero exit for the user.
-process.on("uncaughtException", () => {
-  process.exitCode = 0;
-});
-process.on("unhandledRejection", () => {
-  process.exitCode = 0;
-});
-
-// No process.exit(): letting the event loop drain guarantees stdout is flushed
-// before the process ends, and the default exit code is already 0.
-main()
-  .catch(() => {})
-  .finally(() => {
-    process.exitCode = 0;
-  });