@rulemetric/hooks 0.12.7 → 0.13.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulemetric/hooks",
-  "version": "0.12.7",
+  "version": "0.13.0",
   "publishConfig": {
     "access": "public"
   },
@@ -16,6 +16,7 @@
     "vitest": "^3.2.4"
   },
   "scripts": {
-    "test": "vitest run"
+    "test": "vitest run",
+    "lint": "eslint ."
   }
 }

package/scripts/jq

@@ -378,6 +378,14 @@ def run():
     if files:
         with open(files[0], "r", encoding="utf-8") as handle:
             stdin = handle.read()
+    elif "n" in flags and not re.search(r"\binputs\b", filter_):
+        # Real jq does NOT read stdin under -n/--null-input — its input is
+        # null. Reading it anyway made a bare `jq -n --arg k v '{k:$k}'` block
+        # forever when the caller attached an open-but-silent stdin (a harness
+        # with no heredoc), a divergence invisible in tests that close stdin.
+        # `inputs` is the one construct that consumes the stream even under -n
+        # and is handled below from this same variable, so it still reads.
+        stdin = ""
     else:
         stdin = sys.stdin.read()
 

package/scripts/session-end.sh

@@ -95,12 +95,26 @@ _rulemetric_log "session-end" "success"
 # ── Emit a synthetic instruction snapshot (hooks-first, zero-proxy linking) ──
 # The proxy classifies the rendered system prompt into context_items that
 # link-instructions matches on. Hooks-only sessions have no proxy, so build an
-# equivalent snapshot from on-disk CLAUDE.md files and POST it SYNCHRONOUSLY —
-# it must land before the backgrounded link-instructions call below. Best-effort:
-# a failure never breaks session-end (see the ERR trap guard). Claude Code only
-# for now (the snapshot uses claude_md items).
-if [ "$HOOK_TOOL" = "claude_code" ]; then
-  INSTR_SNAPSHOT=$(rulemetric hooks emit-instructions --project-dir "${HOOK_CWD:-$(pwd)}" 2>/dev/null || true)
+# equivalent snapshot from the on-disk instruction files and POST it
+# SYNCHRONOUSLY — it must land before the backgrounded link-instructions call
+# below. Best-effort: a failure never breaks session-end (see the ERR trap guard).
+#
+# The tool is PASSED, not assumed: each harness reads a different file
+# (CLAUDE.md / AGENTS.md / .github/copilot-instructions.md). This block used to
+# be gated on claude_code alone, so a Codex or Copilot project could have a rule
+# adopted into the file its agent reads while linking never saw it. The command
+# prints nothing for a tool it does not know, so an unrecognised HOOK_TOOL is a
+# no-op rather than a CLAUDE.md attributed to the wrong harness.
+#
+# Kept in its OWN variable: HOOK_TOOL is still read further down (the transcript
+# reimport is claude_code-only), so narrowing it here would silently disable
+# that block too.
+case "$HOOK_TOOL" in
+  claude_code|codex|copilot_agent|copilot_cli|vscode_copilot) SNAPSHOT_TOOL="$HOOK_TOOL" ;;
+  *) SNAPSHOT_TOOL="" ;;
+esac
+if [ -n "$SNAPSHOT_TOOL" ]; then
+  INSTR_SNAPSHOT=$(rulemetric hooks emit-instructions --project-dir "${HOOK_CWD:-$(pwd)}" --tool "$SNAPSHOT_TOOL" 2>/dev/null || true)
   if [ -n "$INSTR_SNAPSHOT" ]; then
     # Bounded 503/429 retry — this snapshot is the ONLY instruction-linking
     # signal a hooks-only (no-proxy) session ever emits; a one-shot curl made