@rune-kit/rune 2.26.0 → 2.26.1

package/README.md

@@ -103,11 +103,15 @@ Plus **9 domain packs** (product, sales, data-science, support, growth, media, p
 
 ---
 
-## What's New (v2.26.0 — Motion Craft)
+## What's New (v2.26.1 — Codex Wiring)
+
+> **v2.26.1 (2026-07-22):** Rune's runtime hooks were silently inert on **Codex CLI**. `hooks/hooks.json` is loaded by both Claude Code and Codex — Codex reads `<plugin>/hooks/hooks.json`, the same path, and maps the event names — but every tool matcher named only Claude's tools. Codex has no `Read`, `Write`, `Edit` or `Bash` tool; it issues `shell_command`, `exec`, `apply_patch`, `view_image`, `spawn_agent`. So the privacy gate and the secret scanner matched nothing and never fired. Matchers now name both platforms' tools (plain alternation — Claude behaviour is byte-for-byte unchanged), and `pre-tool-guard` reads the target path out of a Codex `apply_patch` payload (`*** Update File: <path>`), which is what makes it an actual gate there instead of a no-op. Note that Codex does not support `async` hooks yet and skips them, so Rune's six background hooks stay inactive on Codex — `async` is kept because Claude Code honours it.
+
+### Previous (v2.26.0 — Motion Craft)
 
 > **v2.26.0 (2026-07-18):** Rune's UI mesh gains a deep **motion authority**. New reference `skills/design/MOTION-CRAFT.md` is the canonical source for animation decisions: the *should-it-animate* frequency gate (never animate keyboard/100+-per-day actions), easing decision tree with strong custom curves, per-element duration budgets (UI under 300ms, modals/drawers exempt to 500ms), physicality rules (never `scale(0)`, origin-aware popovers, press feedback), spring physics (damping/response, velocity handoff, momentum projection, rubber-banding), interruptibility (transitions vs keyframes, `@starting-style`), motion performance, reduced-motion, and a reverse-lookup vocabulary glossary. `design` (v0.8.0) loads it whenever a domain involves motion and gains an advisory motion-audit mode. `review` (v1.5.0) adds **Motion Craft Checks** — an advisory lens that fires only on motion diffs, flagging `ease-in` on UI, `scale(0)` entrances, animation on high-frequency actions, layout-property animation, and more, citing MOTION-CRAFT for exact fixes. `perf` (v0.6.0) adds **Step 5.5 Motion Performance** — GPU-property, Framer-Motion-shorthand, and recalc-storm detection ranked in the Cost Impact Hierarchy. Advisory-first throughout (no new HARD-GATEs) — enrichment only, mesh unchanged at 66 skills.
 
-### Previous (v2.25.0 — Council)
+#### Earlier (v2.25.0 — Council)
 
 > **v2.25.0 (2026-07-11):** New **`council`** L3 primitive — genuinely decorrelated multi-perspective gathering. Detects installed AI CLIs, fans a question across distinct model families (external CLIs when present, subagents when not), gates off-topic/malformed voices, normalizes claims (anchor-first + shared-evidence arbiter fallback — prose similarity never counts), and arbitrates inline with an honest `NO_DECORRELATION` stamp when fewer than 2 real model families answered. Wired into 4 consumers: `adversary` (CRITICAL-tier plans), `review` (high-blast-radius diffs), `brainstorm` (Design-It-Twice candidate judgment), `problem-solver` (high-stakes conclusions) — every integration explicitly refuses to launder a same-family run as independent confirmation. **Live-dogfooded same day**: a real 3-voice self-test (external `grok` dispatch + 2 subagent fallbacks) independently converged on a real gap — "confirmed" `model_family` was CLI-brand identity, not verified backend identity, letting two CLIs redirected to the same backend (BYOK/proxy override) defeat the gate — fixed before shipping. **Pro**: `council-cockpit` (separate repo) adds a read-only live panel + cost-aware allocation + history-informed family weighting, PRE-council advisory only — Free never depends on Pro. Mesh now 66 skills / 208 connections / 45 signals.
 

package/hooks/hooks.json

@@ -26,7 +26,7 @@
     ],
     "PreToolUse": [
       {
-        "matcher": "Read|Write|Edit",
+        "matcher": "Read|Write|Edit|apply_patch|view_image",
         "hooks": [
           {
             "type": "command",
@@ -46,7 +46,7 @@
         ]
       },
       {
-        "matcher": "Bash",
+        "matcher": "Bash|shell_command",
         "hooks": [
           {
             "type": "command",
@@ -58,7 +58,7 @@
     ],
     "PostToolUse": [
       {
-        "matcher": "Edit|Write",
+        "matcher": "Edit|Write|apply_patch",
         "hooks": [
           {
             "type": "command",
@@ -73,7 +73,7 @@
         ]
       },
       {
-        "matcher": "Skill|Task|Agent",
+        "matcher": "Skill|Task|Agent|spawn_agent",
         "hooks": [
           {
             "type": "command",
@@ -83,7 +83,7 @@
         ]
       },
       {
-        "matcher": "mcp__.*|WebFetch|Read",
+        "matcher": "mcp__.*|WebFetch|Read|web_search",
         "hooks": [
           {
             "type": "command",

package/hooks/pre-tool-guard/index.cjs

@@ -50,6 +50,26 @@ function appendGateOutcome(gate, outcome, detail) {
   }
 }
 
+/**
+ * Path a Codex `apply_patch` call is about to write.
+ *
+ * Codex has no Edit/Write tool — file writes arrive as one `apply_patch` call
+ * whose payload is raw patch text, so there is no `file_path` to read. The
+ * target is in the patch header. Without this the privacy gate is a no-op on
+ * Codex: every write sails past.
+ *
+ * @param {string} toolName
+ * @param {object} toolInput
+ * @returns {string} target path, or '' when this is not a patch we understand
+ */
+function patchTargetPath(toolName, toolInput) {
+  if (toolName !== 'apply_patch') return '';
+  const patch = typeof toolInput === 'string' ? toolInput : toolInput.input || toolInput.patch || '';
+  if (typeof patch !== 'string') return '';
+  const match = patch.match(/^\*\*\* (?:Update|Add|Delete) File:\s*(.+)$/m);
+  return match ? match[1].trim() : '';
+}
+
 // Read tool_input from Claude Code hook stdin
 let input = '';
 process.stdin.setEncoding('utf-8');
@@ -66,7 +86,7 @@ process.stdin.on('end', () => {
     process.exit(0);
   }
 
-  const filePath = toolInput.file_path || toolInput.path || '';
+  const filePath = toolInput.file_path || toolInput.path || patchTargetPath(toolName, toolInput);
   if (!filePath) process.exit(0);
 
   const basename = path.basename(filePath);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rune-kit/rune",
-  "version": "2.26.0",
+  "version": "2.26.1",
   "description": "65-skill mesh for AI coding assistants — runtime auto-discipline via native hooks (Claude/Cursor/Windsurf/Antigravity), 5-layer architecture, 204 connections + 43 signals, multi-platform compiler. converge (L3) scans spec vs code so dead-button/frontend-only implementations can't ship.",
   "type": "module",
   "bin": {