@rulemetric/hooks 0.2.4 → 0.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulemetric/hooks",
-  "version": "0.2.4",
+  "version": "0.4.0",
   "publishConfig": {
     "access": "public"
   },

package/scripts/_ensure-session.sh

@@ -160,7 +160,7 @@ _rulemetric_ensure_session() {
     '{tool: $tool, externalSessionId: $externalSessionId, projectPath: $projectPath, gitBranch: $gitBranch, metadata: $metadata, orgId: $orgId, runId: $runId}')
 
   local response
-  response=$(curl -sf -X POST "${RULEMETRIC_API_URL}/api/sessions" \
+  response=$(curl -sf --noproxy '*' --max-time 4 -X POST "${RULEMETRIC_API_URL}/api/sessions" \
     -H "$AUTH_HEADER" \
     -H "Content-Type: application/json" \
     -d "$payload" \

package/scripts/assistant-response.sh

@@ -16,7 +16,9 @@ trap 'echo "rulemetric assistant-response failed at line $LINENO: $BASH_COMMAND"
 # Load config (env vars, ~/.config/rulemetric/env, or .env.local)
 source "$SCRIPT_DIR/_config.sh" 2>/dev/null || true
 
-INPUT=$(cat)
+# Bound the read so a hook runner that leaves stdin open cannot wedge the agent.
+INPUT=""
+IFS= read -r -d '' -t 2 INPUT || true
 source "$SCRIPT_DIR/_normalize.sh"
 
 if [ -z "$HOOK_SESSION_ID" ] || [ -z "${RULEMETRIC_API_URL:-}" ]; then
@@ -74,7 +76,15 @@ TOKEN_USAGE=$(jq -n \
 # Increment per-session sequence (same locking pattern as post-tool-use)
 SEQ_FILE="$TEMP_DIR/$HOOK_SESSION_ID.seq"
 LOCK_DIR="$TEMP_DIR/$HOOK_SESSION_ID.seqlock"
-while ! mkdir "$LOCK_DIR" 2>/dev/null; do sleep 0.01; done
+SEQ_LOCK_TRIES=0
+while ! mkdir "$LOCK_DIR" 2>/dev/null; do
+  sleep 0.01
+  SEQ_LOCK_TRIES=$((SEQ_LOCK_TRIES + 1))
+  if [ "$SEQ_LOCK_TRIES" -ge 500 ]; then
+    _rulemetric_log "assistant-response" "skip" "seq_lock_timeout"
+    exit 0
+  fi
+done
 SEQ=1
 if [ -f "$SEQ_FILE" ]; then
   SEQ=$(( $(cat "$SEQ_FILE") + 1 ))
@@ -115,7 +125,7 @@ PAYLOAD=$(jq -n \
 _rulemetric_log "assistant-response" "success"
 
 # Fire-and-forget (same error-logging pattern as post-tool-use)
-(CURL_OUT=$(curl -s -w "\n%{http_code}" -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/events" \
+(CURL_OUT=$(curl -s --noproxy '*' --max-time 4 -w "\n%{http_code}" -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/events" \
   -H "$AUTH_HEADER" \
   -H "Content-Type: application/json" \
   -d "$PAYLOAD" 2>&1)

package/scripts/post-tool-use.sh

@@ -9,8 +9,10 @@ trap 'echo "rulemetric post-tool-use failed at line $LINENO: $BASH_COMMAND" >&2;
 # Load config (env vars, ~/.config/rulemetric/env, or .env.local)
 source "$SCRIPT_DIR/_config.sh" 2>/dev/null || true
 
-# Read hook input from stdin and normalize across tools
-INPUT=$(cat)
+# Read hook input from stdin and normalize across tools. Bound the read so a
+# hook runner that leaves stdin open cannot wedge the agent.
+INPUT=""
+IFS= read -r -d '' -t 2 INPUT || true
 source "$SCRIPT_DIR/_normalize.sh"
 
 # Session paper-trail: snapshot the full working tree to a shadow git ref for
@@ -51,7 +53,15 @@ fi
 # Increment sequence counter (atomic mkdir lock, works on macOS + Linux)
 SEQ_FILE="$TEMP_DIR/$HOOK_SESSION_ID.seq"
 LOCK_DIR="$TEMP_DIR/$HOOK_SESSION_ID.seqlock"
-while ! mkdir "$LOCK_DIR" 2>/dev/null; do sleep 0.01; done
+SEQ_LOCK_TRIES=0
+while ! mkdir "$LOCK_DIR" 2>/dev/null; do
+  sleep 0.01
+  SEQ_LOCK_TRIES=$((SEQ_LOCK_TRIES + 1))
+  if [ "$SEQ_LOCK_TRIES" -ge 500 ]; then
+    _rulemetric_log "post-tool-use" "skip" "seq_lock_timeout"
+    exit 0
+  fi
+done
 SEQ=1
 if [ -f "$SEQ_FILE" ]; then
   SEQ=$(( $(cat "$SEQ_FILE") + 1 ))
@@ -71,7 +81,7 @@ PAYLOAD=$(jq -n \
 _rulemetric_log "post-tool-use" "success"
 
 # Fire-and-forget (capture HTTP errors for debugging)
-(CURL_OUT=$(curl -s -w "\n%{http_code}" -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/events" \
+(CURL_OUT=$(curl -s --noproxy '*' --max-time 4 -w "\n%{http_code}" -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/events" \
   -H "$AUTH_HEADER" \
   -H "Content-Type: application/json" \
   -d "$PAYLOAD" 2>&1)

package/scripts/session-end.sh

@@ -9,8 +9,10 @@ trap 'echo "rulemetric session-end failed at line $LINENO: $BASH_COMMAND" >&2; _
 # Load config (env vars, ~/.config/rulemetric/env, or .env.local)
 source "$SCRIPT_DIR/_config.sh" 2>/dev/null || true
 
-# Read hook input from stdin and normalize across tools
-INPUT=$(cat)
+# Read hook input from stdin and normalize across tools. Bound the read so a
+# hook runner that leaves stdin open cannot wedge the agent.
+INPUT=""
+IFS= read -r -d '' -t 2 INPUT || true
 source "$SCRIPT_DIR/_normalize.sh"
 
 if [ -z "$HOOK_SESSION_ID" ] || [ -z "${RULEMETRIC_API_URL:-}" ]; then
@@ -39,20 +41,20 @@ fi
 # Try to reimport with full transcript, fall back to close
 if [ -n "$HOOK_TRANSCRIPT_PATH" ] && [ -f "$HOOK_TRANSCRIPT_PATH" ]; then
   CONTENT=$(cat "$HOOK_TRANSCRIPT_PATH")
-  curl -sf -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/reimport" \
+  curl -sf --noproxy '*' --max-time 8 -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/reimport" \
     -H "$AUTH_HEADER" \
     -H "Content-Type: application/json" \
     -d "{\"content\":$(echo "$CONTENT" | jq -Rs .),\"tool\":\"$HOOK_TOOL\"}" \
     > /dev/null 2>&1 || {
     _rulemetric_log "session-end" "fallback" "reimport_failed"
-    curl -sf -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/close" \
+    curl -sf --noproxy '*' --max-time 4 -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/close" \
       -H "$AUTH_HEADER" \
       > /dev/null 2>&1 || \
       _rulemetric_log "session-end" "error" "close_failed"
   }
 else
   # No transcript available — just close the session
-  curl -sf -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/close" \
+  curl -sf --noproxy '*' --max-time 4 -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/close" \
     -H "$AUTH_HEADER" \
     > /dev/null 2>&1 || \
     _rulemetric_log "session-end" "error" "close_failed"
@@ -60,9 +62,26 @@ fi
 
 _rulemetric_log "session-end" "success"
 
+# ── Emit a synthetic instruction snapshot (hooks-first, zero-proxy linking) ──
+# The proxy classifies the rendered system prompt into context_items that
+# link-instructions matches on. Hooks-only sessions have no proxy, so build an
+# equivalent snapshot from on-disk CLAUDE.md files and POST it SYNCHRONOUSLY —
+# it must land before the backgrounded link-instructions call below. Best-effort:
+# a failure never breaks session-end (see the ERR trap guard). Claude Code only
+# for now (the snapshot uses claude_md items).
+if [ "$HOOK_TOOL" = "claude_code" ]; then
+  INSTR_SNAPSHOT=$(rulemetric hooks emit-instructions --project-dir "${HOOK_CWD:-$(pwd)}" 2>/dev/null || true)
+  if [ -n "$INSTR_SNAPSHOT" ]; then
+    curl -sf --noproxy '*' --max-time 5 -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/context-snapshots" \
+      -H "$AUTH_HEADER" \
+      -H "Content-Type: application/json" \
+      -d "$INSTR_SNAPSHOT" > /dev/null 2>&1 || _rulemetric_log "session-end" "warn" "instruction_snapshot_failed"
+  fi
+fi
+
 # ── Auto-link instructions from context snapshots ──
 # Fire-and-forget: link any captured context to instruction records
-(curl -sf -X POST "${RULEMETRIC_API_URL}/api/sessions/link-instructions" \
+(curl -sf --noproxy '*' --max-time 8 -X POST "${RULEMETRIC_API_URL}/api/sessions/link-instructions" \
   -H "$AUTH_HEADER" \
   -H "Content-Type: application/json" \
   -d '{}' > /dev/null 2>&1) &
@@ -108,7 +127,7 @@ except:
 " 2>/dev/null)
 
     if [ -n "$ENRICH_PAYLOAD" ]; then
-      (curl -sf -X PATCH "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/enrich" \
+      (curl -sf --noproxy '*' --max-time 4 -X PATCH "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/enrich" \
         -H "$AUTH_HEADER" \
         -H "Content-Type: application/json" \
         -d "$ENRICH_PAYLOAD" > /dev/null 2>&1) &
@@ -116,7 +135,7 @@ except:
   fi
 else
   # Non-Claude tools: derive enrichment from stored session events
-  (curl -sf -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/derive-enrichment" \
+  (curl -sf --noproxy '*' --max-time 8 -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/derive-enrichment" \
     -H "$AUTH_HEADER" \
     -H "Content-Type: application/json" \
     -d '{}' > /dev/null 2>&1) &
@@ -133,11 +152,22 @@ fi
 # ── Auto-generate recommendations (daily debounce) ──
 # Queue a recommendation job if one hasn't been generated today.
 # The worker picks it up and runs 7 Opus prompts (~$5-15 per run).
-(curl -sf -X POST "${RULEMETRIC_API_URL}/api/insights-jobs" \
+(curl -sf --noproxy '*' --max-time 4 -X POST "${RULEMETRIC_API_URL}/api/insights-jobs" \
   -H "$AUTH_HEADER" \
   -H "Content-Type: application/json" \
   -d "{\"dedup\":\"daily\",\"projectPath\":\"${HOOK_CWD}\"}" > /dev/null 2>&1) &
 
 # Clean up temp files
+for registry_file in "$TEMP_DIR"/*; do
+  [ -f "$registry_file" ] || continue
+  case "$registry_file" in
+    *.log|*.seq|*.ctxhash|*.pid|*.lock) continue ;;
+  esac
+  if [ "$(sed -n '1p' "$registry_file" 2>/dev/null || true)" = "$RW_SESSION_ID" ]; then
+    rm -f "$registry_file" 2>/dev/null || true
+    rm -f "$registry_file.seq" 2>/dev/null || true
+    rm -f "$registry_file.ctxhash" 2>/dev/null || true
+  fi
+done
 rm -f "$TEMP_DIR/$HOOK_SESSION_ID" 2>/dev/null || true
 rm -f "$TEMP_DIR/$HOOK_SESSION_ID.seq" 2>/dev/null || true

package/scripts/session-start.sh

@@ -10,8 +10,10 @@ trap 'echo "rulemetric session-start failed at line $LINENO: $BASH_COMMAND" >&2;
 # Load config (env vars, ~/.config/rulemetric/env, or .env.local)
 source "$SCRIPT_DIR/_config.sh" 2>/dev/null || true
 
-# Read hook input from stdin and normalize across tools
-INPUT=$(cat)
+# Read hook input from stdin and normalize across tools. Bound the read so a
+# hook runner that leaves stdin open cannot wedge the agent.
+INPUT=""
+IFS= read -r -d '' -t 2 INPUT || true
 source "$SCRIPT_DIR/_normalize.sh"
 
 if [ -z "$HOOK_SESSION_ID" ]; then
@@ -38,7 +40,7 @@ _rulemetric_check_auth() {
 
   # Quick auth check — GET /api/sessions?limit=1 with a 3s timeout
   local http_code
-  http_code=$(curl -s -o /dev/null -w "%{http_code}" --max-time 3 \
+  http_code=$(curl -s --noproxy '*' -o /dev/null -w "%{http_code}" --max-time 3 \
     "$api_url/api/sessions?limit=1" \
     -H "Authorization: Bearer $auth_token" 2>/dev/null) || http_code="000"
 
@@ -120,7 +122,7 @@ _rulemetric_suggest_instructions() {
   # suggestions arrive with the actual rule body. The body is rendered to
   # stdout, which Claude Code surfaces to the model as session context.
   # Low-confidence suggestions still render as name+reason only.
-  response="$(curl -s --max-time 4 \
+  response="$(curl -s --noproxy '*' --max-time 4 \
     "${api_url}/api/instruction-suggestions?projectPath=${encoded_path}&limit=3&includeContent=true" \
     -H "Authorization: Bearer ${auth_token}" 2>/dev/null)" || return 0
 
@@ -172,7 +174,7 @@ _rulemetric_suggest_instructions() {
     else
       event_type="surfaced"
     fi
-    curl -s --max-time 3 -X POST \
+    curl -s --noproxy '*' --max-time 3 -X POST \
       "${api_url}/api/instruction-suggestions/${sid}/events" \
       -H "Authorization: Bearer ${auth_token}" \
       -H "Content-Type: application/json" \

package/scripts/user-prompt.sh

@@ -9,8 +9,10 @@ trap 'echo "rulemetric user-prompt failed at line $LINENO: $BASH_COMMAND" >&2; _
 # Load config (env vars, ~/.config/rulemetric/env, or .env.local)
 source "$SCRIPT_DIR/_config.sh" 2>/dev/null || true
 
-# Read hook input from stdin and normalize across tools
-INPUT=$(cat)
+# Read hook input from stdin and normalize across tools. Bound the read so a
+# hook runner that leaves stdin open cannot wedge the agent.
+INPUT=""
+IFS= read -r -d '' -t 2 INPUT || true
 source "$SCRIPT_DIR/_normalize.sh"
 
 if [ -z "$HOOK_SESSION_ID" ] || [ -z "${RULEMETRIC_API_URL:-}" ]; then
@@ -39,7 +41,15 @@ fi
 # Increment sequence counter (atomic mkdir lock, works on macOS + Linux)
 SEQ_FILE="$TEMP_DIR/$HOOK_SESSION_ID.seq"
 LOCK_DIR="$TEMP_DIR/$HOOK_SESSION_ID.seqlock"
-while ! mkdir "$LOCK_DIR" 2>/dev/null; do sleep 0.01; done
+SEQ_LOCK_TRIES=0
+while ! mkdir "$LOCK_DIR" 2>/dev/null; do
+  sleep 0.01
+  SEQ_LOCK_TRIES=$((SEQ_LOCK_TRIES + 1))
+  if [ "$SEQ_LOCK_TRIES" -ge 500 ]; then
+    _rulemetric_log "user-prompt" "skip" "seq_lock_timeout"
+    exit 0
+  fi
+done
 SEQ=1
 if [ -f "$SEQ_FILE" ]; then
   SEQ=$(( $(cat "$SEQ_FILE") + 1 ))
@@ -48,7 +58,7 @@ echo "$SEQ" > "$SEQ_FILE"
 rmdir "$LOCK_DIR"
 
 # Fire-and-forget: send user message event (capture HTTP errors for debugging)
-(CURL_OUT=$(curl -s -w "\n%{http_code}" -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/events" \
+(CURL_OUT=$(curl -s --noproxy '*' --max-time 4 -w "\n%{http_code}" -X POST "${RULEMETRIC_API_URL}/api/sessions/${RW_SESSION_ID}/events" \
   -H "$AUTH_HEADER" \
   -H "Content-Type: application/json" \
   -d "{\"sequence\":$SEQ,\"eventType\":\"user_message\",\"content\":$(printf '%s' "$HOOK_PROMPT" | jq -Rs .),\"timestamp\":\"$(date -u +%Y-%m-%dT%H:%M:%S.000Z)\"}" 2>&1)