@rune-kit/rune 2.29.1 → 2.30.1

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rune",
-  "version": "2.29.1",
+  "version": "2.30.1",
   "description": "66-skill engineering mesh with Codex-native skills, subagents, synchronous lifecycle hooks, security gates, MCP-aware workflows, and project memory.",
   "author": {
     "name": "Rune Contributors"

package/README.md

@@ -103,11 +103,19 @@ Plus **9 domain packs** (product, sales, data-science, support, growth, media, p
 
 ---
 
-## What's New (v2.29.1 — One-Command Update)
+## What's New (v2.30.1 — Hooks That Land)
 
-> **v2.29.1 (2026-07-24):** v2.29.0 documented the update flow; this release automates it. New **`rune update`** command — one-shot updater for an already-configured project: `git pull --ff-only` any detected Pro/Business tier repos (env var → sibling dir, same detection as setup; a failed pull **aborts loudly**, never a silent half-update), re-runs the managed setup rewrite in place non-interactively (your installed platforms, preset, and tiers are detected from the existing hook config — no prompts), then verifies with doctor + hook drift and reminds Codex users to re-trust `/hooks` only when `.codex/hooks.json` actually changed. Flags: `--no-pull`, `--preset`, `--tier`, `--dry`. Plus: "Updating" sections in all three tier READMEs. Docs-and-CLI patch — no skill or mesh changes. 1,638 tests.
+> **v2.30.1 (2026-07-29):** Five hooks had been running, exiting 0, and reaching nobody — nothing logged an error, so the hook layer looked healthy while contributing nothing. Two independent faults, each fatal on its own: **`process.stdout.write` from an exit handler is not guaranteed to reach a piped stdout** (most hooks emit via `captureConsole`, which flushes on exit — the envelope was built, "written", and lost; now `fs.writeSync(1, …)`), and **a hook that collects stdin with an async listener has its stdout discarded by Claude Code** even when the write is synchronous (new `hooks/lib/hook-stdin.cjs` reads with `readFileSync(0)`; `intent-router`, `context-watch`, `metrics-collector`, `pre-tool-guard`, `quarantine` converted). Both isolated by differential test — identical hooks, one variable at a time — and confirmed by the model quoting hook-injected context back. Separately, `intent-router` never had an index to read: `skill-index.json` is emitted at build time and Claude Code doesn't compile, so all five candidate paths were missing and it exited silently on every prompt since it shipped. New `scripts/build-skill-index.js` generates it at the plugin root with a `--check` staleness gate in CI. It was also registered `"async": true`, which drops `additionalContext` outright. 1,649 tests.
 
-### Previous (v2.29.0 — Codex Native)
+### Previous (v2.30.0 — Tier Restored)
+
+> **v2.30.0 (2026-07-29):** Rune's model tier table had quietly stopped applying on Claude Code, and had been wrong in **23 of 66 places** for longer than that. `agents/*.md` is a hand-written parallel copy of each skill's tier; nothing generated it from `skills/` and no check compared the two, so they drifted — `cook` said opus in one file and sonnet in the other, `verification` said sonnet and haiku. `skills/*/SKILL.md` is now the single source of truth, every pair agrees, and a new **`validateAgentSync`** gate fails CI on any future drift, alongside a model-split check and a warning for a top-level `model` that cannot take effect. Where the two disagreed the tier was decided by role, with one rule overriding both old values: **a gate never runs below sonnet** — `completion-gate`, `constraint-check`, `integrity-check`, `hallucination-guard`, and `verification` exist to catch unverified claims, so running them cheaper than the agent they audit defeats the point. Separately: tiering only ever applied through spawned subagents, and on Opus 5 the harness tells the model not to spawn them unless asked — so every tier assignment had become a silent no-op. `scout` and `docs-seeker` now declare `context: fork` + `model: haiku` and route through the Skill tool instead; verified end-to-end on Opus 5 by per-model billing showing `claude-haiku-4-5`. `cook` deliberately declares no model — an orchestrator inherits the session model, because choosing Opus for a session is a deliberate act. 1,647 tests.
+
+#### Earlier (v2.29.1 — One-Command Update)
+
+> **v2.29.1 (2026-07-24):** v2.29.0 documented the update flow; this release automates it. New **`rune update`** command — one-shot updater for an already-configured project: `git pull --ff-only` any detected Pro/Business tier repos (env var → sibling dir, same detection as setup; a failed pull **aborts loudly**, never a silent half-update), re-runs the managed setup rewrite in place non-interactively (your installed platforms, preset, and tiers are detected from the existing hook config — no prompts), then verifies with doctor + hook drift and reminds Codex users to re-trust `/hooks` only when `.codex/hooks.json` actually changed. Flags: `--no-pull`, `--preset`, `--tier`, `--dry`. Plus: "Updating" sections in all three tier READMEs. Docs-and-CLI patch — no skill or mesh changes. 1,641 tests.
+
+#### Earlier (v2.29.0 — Codex Native)
 
 > **v2.29.0 (2026-07-23):** Codex stops being a compile target that happens to work and becomes a **first-class native runtime**. The Codex adapter now emits everything current Codex supports natively — `.agents/skills/`, project-scoped agent TOML (`.codex/agents/rune-{heavy,standard,fast}.toml`), a dedicated synchronous hook adapter targeting `.codex/hooks.json` (Codex silently skips async handlers), MCP config, and tier-aware compilation so Free/Pro/Business stacks resolve exactly as on Claude Code. The mesh validator was fixed at the root — `Calls (outbound)` is now the single authoritative edge inventory, acknowledged by the target's `Called By` — moving the canonical count from 209 to **248 connections** (same mesh, honest count; doctor now fails CI on any stale claim). Doctor also grew a cross-tier audit: Business metadata (28 pack skills, 4 orchestrators), $149 pricing, 13-platform count, and JSON-schema validation of the new `docs/config-schema.json` + hooks manifest schema. All XLabs remote-MCP references now go through `XLABS_MCP_TOKEN` — plaintext bearer values are forbidden. 1,615 tests pass.
 

package/agents/audit.md

@@ -25,7 +25,7 @@ You are the **audit** skill — Rune's comprehensive project auditor.
 
 **Critical Rules:**
 - MUST complete all 8 phases (explicitly state if skipped)
-- Only findings >80% confidence (no speculation)
+- Drop a finding only on direct counter-evidence, never on uncertainty — an unconfirmable finding is reported and typed `ASSUMED` with its unchecked premise named
 - Include at least 3 positive findings
 - Delegate Phase 1 to dependency-doctor, Phase 2 to sentinel
 

package/agents/cook.md

@@ -1,7 +1,7 @@
 ---
 name: cook
 description: "Feature implementation orchestrator — handles 70% of requests. Full TDD cycle: understand → plan → test → implement → verify → commit. Use for ANY code modification (features, bugs, refactors, security)."
-model: opus
+model: sonnet
 subagent_type: general-purpose
 ---
 

package/agents/journal.md

@@ -1,7 +1,7 @@
 ---
 name: journal
 description: "Persistent state tracking across sessions — records decisions with rationale, progress, risks, ADRs to .rune/ files. Called by surgeon, deploy, rescue for cross-session continuity."
-model: sonnet
+model: haiku
 subagent_type: general-purpose
 ---
 

package/agents/reviewer.md

@@ -9,7 +9,7 @@ You are the **reviewer** subagent — a code review specialist spawned by other
 
 ## Operating Rules
 
-1. **Every finding MUST have file:line reference** — vague observations are rejected
+1. **Every finding MUST carry a verbatim evidence snippet** — vague observations are rejected, and so are line numbers produced from memory (see Evidence & Anchoring below)
 2. Check all 5 areas: correctness, security, performance, conventions, test coverage
 3. Severity levels: CRITICAL (blocks merge) → HIGH → MEDIUM → LOW
 4. Never rubber-stamp — if zero issues found, look harder (default-suspicious mindset)
@@ -17,4 +17,26 @@ You are the **reviewer** subagent — a code review specialist spawned by other
 6. Include at least 1 positive note (what's well-designed)
 7. Verdict: APPROVE / REQUEST CHANGES / NEEDS DISCUSSION
 
+## Falsification Pass (before reporting)
+
+**Falsify, not verify.** Do not filter findings by how confident you feel — you cannot calibrate that. Filter by disproof:
+
+- **DROP** only when the code you read holds **direct counter-evidence** against the finding's key claim. Discard it silently.
+- **KEEP** when the finding rests on context outside the diff that you actually read — that context is evidence.
+- **KEEP** when you can neither confirm nor disprove it. "Unsure" is not grounds to drop.
+
+Type every surviving finding `OBSERVED` (you read the defect), `DERIVED` (follows from what you read, state the mechanism), or `ASSUMED` (rests on an unverified premise — name it). **`ASSUMED` findings are never CRITICAL.**
+
+## Evidence & Anchoring
+
+Report the snippet, not the line number. A line number recalled from a long context drifts, and a correct finding pointing at the wrong line is unactionable.
+
+- **Copy** the offending lines verbatim from the file — no rewriting, no re-indenting, diff markers (`+`/`-`) stripped, max 5 lines. A finding needing more than 5 lines to show is a design comment: report it without evidence at MEDIUM or below.
+- **Anchor** each finding before reporting: `Grep` the exact snippet in its file → hit, use that line. Miss → retry once with whitespace normalised and the first and last lines dropped.
+- **`UNANCHORED`** on a second miss: downgrade one severity level, report as `path (unanchored)` with the snippet shown inline. Never drop it — a failed `Grep` is not counter-evidence.
+
+## Strict Focus
+
+Read anything you need for context. Report findings **only** about files in the stated review scope — an out-of-scope finding is dropped, or noted as a one-line follow-up in the report footer with no severity.
+
 You do NOT fix code. You identify issues with evidence. The parent skill decides next steps.

package/agents/session-bridge.md

@@ -1,7 +1,7 @@
 ---
 name: session-bridge
 description: "Cross-session context persistence — auto-saves decisions, conventions, progress, instincts to .rune/ files. Loads + integrity-checks at session start. Auto-triggered before compaction."
-model: sonnet
+model: haiku
 subagent_type: general-purpose
 ---
 

package/agents/skill-forge.md

@@ -1,7 +1,7 @@
 ---
 name: skill-forge
 description: "The skill that builds skills — TDD-driven: baseline test → write skill → verify → refactor → integrate into mesh. Use for creating or editing Rune skills."
-model: sonnet
+model: opus
 subagent_type: general-purpose
 ---
 

package/agents/skill-router.md

@@ -1,7 +1,7 @@
 ---
 name: skill-router
 description: "Meta-enforcement layer — routes EVERY agent action through the correct skill before any code is written. Always active. Prevents 'just this once' bypasses."
-model: opus
+model: sonnet
 subagent_type: general-purpose
 ---
 

package/agents/trend-scout.md

@@ -1,7 +1,7 @@
 ---
 name: trend-scout
 description: "Market intelligence — competitor analysis, technology trends, community sentiment. Scans Product Hunt, GitHub Trending, HN, Reddit. Use for positioning, not API docs."
-model: sonnet
+model: haiku
 subagent_type: general-purpose
 ---
 

package/agents/worktree.md

@@ -1,7 +1,7 @@
 ---
 name: worktree
 description: "Git worktree lifecycle — create isolated workspaces for parallel development, manage branches, cleanup. Max 3 active worktrees. Called by team for parallel streams."
-model: sonnet
+model: haiku
 subagent_type: general-purpose
 ---
 

package/compiler/__tests__/skill-attribution.test.js

@@ -0,0 +1,109 @@
+/**
+ * Attribution hygiene — skills and agents must not carry graft-source credits.
+ *
+ * Rune skills present their guidance as Rune's own. A `> From <repo> (N★): "…"`
+ * blockquote leaks where a pattern was grafted from, dates the file with a star
+ * count, and reads as borrowed authority. The prose stays; the credit line goes.
+ *
+ * Guards the patterns removed in a2df7b5 so they cannot drift back in.
+ *
+ * Legitimate credits are NOT attribution: a license obligation for redistributed
+ * data (skills/design), a descriptive "Source patterns:" lead-in, and a filename
+ * cited inside a config example all stay. Each is asserted explicitly below so a
+ * future tightening of the rules cannot silently outlaw them.
+ */
+
+import assert from 'node:assert';
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { dirname, join, relative, resolve } from 'node:path';
+import { describe, test } from 'node:test';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const REPO_ROOT = resolve(__dirname, '../..');
+const SCAN_DIRS = ['skills', 'agents'];
+
+/**
+ * Each rule matches a single line. Keep them shape-based: a rule that keys on a
+ * repo name rots the moment a different repo is grafted.
+ */
+const FORBIDDEN = [
+  { name: 'blockquote "> From <repo>"', re: /^\s*>\s*From\s+\S/ },
+  { name: 'blockquote "> Inspired by"', re: /^\s*>\s*Inspired by\s/ },
+  { name: 'blockquote "> Source:"', re: /^\s*>\s*Source:/ },
+  { name: 'bare "Source: … ★"', re: /^\s*Source:\s.*★/ },
+  { name: 'blockquote carrying a star count', re: /^\s*>\s.*★/ },
+];
+
+/** Lines that look adjacent to the rules above and must keep passing. */
+const MUST_PASS = [
+  'Design intelligence data from [UI/UX Pro Max](https://github.com/nextlevelbuilder/ui-ux-pro-max-skill) (MIT, 42.8k★).',
+  '> Source patterns: production-proven PostgreSQL scaling strategies.',
+  'Source: compliance-soc2.yaml',
+];
+
+function walkMarkdown(dir) {
+  const out = [];
+  for (const entry of readdirSync(dir)) {
+    const full = join(dir, entry);
+    if (statSync(full).isDirectory()) {
+      out.push(...walkMarkdown(full));
+    } else if (entry.endsWith('.md')) {
+      out.push(full);
+    }
+  }
+  return out;
+}
+
+function findViolations(text, file) {
+  const hits = [];
+  text.split(/\r?\n/).forEach((line, i) => {
+    for (const rule of FORBIDDEN) {
+      if (rule.re.test(line)) {
+        hits.push(`${file}:${i + 1} — ${rule.name} → ${line.trim()}`);
+      }
+    }
+  });
+  return hits;
+}
+
+describe('attribution hygiene', () => {
+  test('no source-attribution lines in skills/ or agents/', () => {
+    const violations = [];
+    for (const dirName of SCAN_DIRS) {
+      const dir = join(REPO_ROOT, dirName);
+      for (const file of walkMarkdown(dir)) {
+        violations.push(...findViolations(readFileSync(file, 'utf8'), relative(REPO_ROOT, file)));
+      }
+    }
+
+    assert.deepStrictEqual(
+      violations,
+      [],
+      `Attribution lines found — delete the credit, keep the prose:\n${violations.join('\n')}`,
+    );
+  });
+
+  test('rules fire on the exact lines removed in a2df7b5', () => {
+    const removed = [
+      '> From goclaw (nextlevelbuilder/goclaw, 832★): "Compact during run, not just at session boundary."',
+      '> From superpowers (obra/superpowers, 84k★): "Each fix revealing new problems elsewhere = structural issue."',
+      '> Inspired by CLI-Anything (HKUDS/CLI-Anything, 14.5k★): "Never trust exit 0."',
+      'Source: goclaw (832★) — SHA256-based loop detection distinguishes true stuck loops.',
+    ];
+
+    for (const line of removed) {
+      assert.ok(
+        FORBIDDEN.some((rule) => rule.re.test(line)),
+        `no rule caught a known attribution line: ${line}`,
+      );
+    }
+  });
+
+  test('legitimate credits and lookalikes are not flagged', () => {
+    for (const line of MUST_PASS) {
+      const caught = FORBIDDEN.filter((rule) => rule.re.test(line)).map((rule) => rule.name);
+      assert.deepStrictEqual(caught, [], `false positive on a legitimate line: ${line}`);
+    }
+  });
+});

package/compiler/emitter.js

@@ -897,7 +897,7 @@ const INTENT_KEYWORDS = {
  * @param {Array} parsedSkills - array of parsed skill objects
  * @returns {object} skill index with graph + intents
  */
-function generateSkillIndex(parsedSkills) {
+export function generateSkillIndex(parsedSkills) {
   // Build adjacency graph from cross-references
   const graph = {};
   const skills = {};

package/hooks/context-watch/index.cjs

@@ -14,6 +14,7 @@
 const fs = require('fs');
 const { stateFile } = require('../lib/context-key.cjs');
 const { captureConsole } = require('../lib/hook-output.cjs');
+const { readStdinSync } = require('../lib/hook-stdin.cjs');
 
 captureConsole('PreToolUse');
 
@@ -31,9 +32,9 @@ const CRITICAL_THRESHOLD = 120;
 
 // Read stdin JSON to get tool name (Claude Code passes hook data via stdin)
 let stdinData = '';
-process.stdin.setEncoding('utf-8');
-process.stdin.on('data', chunk => { stdinData += chunk; });
-process.stdin.on('end', () => {
+stdinData = readStdinSync();
+
+(() => {
   let toolName = 'unknown';
   let sessionId;
   try {
@@ -102,8 +103,4 @@ process.stdin.on('end', () => {
   }
 
   process.exit(0);
-});
-
-// Handle empty stdin (pipe closed immediately)
-process.stdin.on('error', () => process.exit(0));
-process.stdin.resume();
+})();

package/hooks/hooks.json

@@ -19,7 +19,7 @@
           {
             "type": "command",
             "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook.cjs\" intent-router",
-            "async": true
+            "async": false
           }
         ]
       }

package/hooks/intent-router/index.cjs

@@ -10,14 +10,14 @@
 const fs = require('fs');
 const path = require('path');
 const { captureConsole } = require('../lib/hook-output.cjs');
+const { readStdinSync } = require('../lib/hook-stdin.cjs');
 
 captureConsole('UserPromptSubmit');
 
-// Read user prompt from Claude Code hook stdin
-let input = '';
-process.stdin.setEncoding('utf-8');
-process.stdin.on('data', (chunk) => { input += chunk; });
-process.stdin.on('end', () => {
+// Read user prompt from the hook payload. Must be synchronous — see hook-stdin.cjs.
+const input = readStdinSync();
+
+(() => {
   let userPrompt = '';
   try {
     const parsed = JSON.parse(input);
@@ -34,6 +34,9 @@ process.stdin.on('end', () => {
   // Find skill-index.json — check multiple locations
   const pluginRoot = process.env.CLAUDE_PLUGIN_ROOT || path.resolve(__dirname, '../..');
   const candidates = [
+    // Uncompiled plugin root (Claude Code serves the repo directly — nothing to
+    // compile, so this is the only index that exists on that runtime).
+    path.join(pluginRoot, 'skill-index.json'),
     path.join(pluginRoot, '.cursor', 'rules', 'skill-index.json'),
     path.join(pluginRoot, '.windsurf', 'rules', 'skill-index.json'),
     path.join(pluginRoot, 'dist', 'cursor', 'skill-index.json'),
@@ -108,4 +111,4 @@ process.stdin.on('end', () => {
   console.log('');
 
   process.exit(0);
-});
+})();

package/hooks/lib/hook-output.cjs

@@ -22,6 +22,8 @@
 // Buffer-then-emit, because the envelope is ONE JSON object: a hook that prints
 // three lines must accumulate them and emit once at exit, not three times.
 
+const fs = require('node:fs');
+
 /** Events where the model-facing payload is `additionalContext`. */
 const CONTEXT_EVENTS = new Set(['SessionStart', 'UserPromptSubmit']);
 
@@ -50,7 +52,11 @@ function outputBuffer(hookEventName) {
       const payload = CONTEXT_EVENTS.has(hookEventName)
         ? { hookSpecificOutput: { hookEventName, additionalContext: text } }
         : { systemMessage: text };
-      process.stdout.write(`${JSON.stringify(payload)}\n`);
+      // fs.writeSync, not process.stdout.write: most of these emits happen from a
+      // `process.on('exit')` handler, where a piped stdout is not guaranteed to
+      // flush before the process is gone. The write reports success either way, so
+      // the loss is silent — every hook using console.log was landing nowhere.
+      fs.writeSync(1, `${JSON.stringify(payload)}\n`);
     },
   };
 }

package/hooks/lib/hook-stdin.cjs

@@ -0,0 +1,52 @@
+'use strict';
+
+// Hook stdin — read it synchronously, always.
+//
+// A hook that collects stdin with `process.stdin.on('data'/'end')` and writes its
+// result from the 'end' callback has its stdout DISCARDED by Claude Code. The hook
+// runs, the payload arrives, the callback fires, the write succeeds, exit code is 0
+// — and the output never reaches the model. Nothing reports an error, which is why
+// five Rune hooks looked healthy while contributing nothing.
+//
+// Verified by differential test on Claude Code 2.1.220: an identical hook writing
+// the identical envelope is seen by the model when stdin is read with
+// `readFileSync(0)`, and unseen when read with an async listener. Switching the
+// write to `fs.writeSync(1, …)` does not rescue the async form, so this is about
+// when the process settles, not about flushing.
+//
+// So: read stdin synchronously, then do the work on the main tick.
+
+const fs = require('node:fs');
+
+/**
+ * Read the hook payload from stdin, synchronously.
+ *
+ * @returns {string} raw stdin, or '' when there is nothing to read
+ */
+function readStdinSync() {
+  try {
+    return fs.readFileSync(0, 'utf-8');
+  } catch {
+    // No stdin attached (manual invocation, or a runtime that omits the payload)
+    return '';
+  }
+}
+
+/**
+ * Read and parse the payload. Hook payloads are JSON, but a runtime invoking a
+ * hook by hand may pipe raw text — callers that want that fallback read `.raw`.
+ *
+ * @returns {{raw: string, data: object}}
+ */
+function readHookInput() {
+  const raw = readStdinSync();
+  let data = {};
+  try {
+    data = JSON.parse(raw);
+  } catch {
+    data = {};
+  }
+  return { raw, data };
+}
+
+module.exports = { readStdinSync, readHookInput };

package/hooks/metrics-collector/index.cjs

@@ -10,6 +10,7 @@ const fs = require('fs');
 const path = require('path');
 const os = require('os');
 const { resolveStateKey, stateFile } = require('../lib/context-key.cjs');
+const { readStdinSync } = require('../lib/hook-stdin.cjs');
 
 // metricsFile + watchFile are keyed by the Claude Code session_id (parsed from
 // stdin in the handler) so they reset per session and match the session-keyed
@@ -17,9 +18,9 @@ const { resolveStateKey, stateFile } = require('../lib/context-key.cjs');
 
 // Read stdin JSON to get tool input (Claude Code passes hook data via stdin)
 let stdinData = '';
-process.stdin.setEncoding('utf-8');
-process.stdin.on('data', chunk => { stdinData += chunk; });
-process.stdin.on('end', () => {
+stdinData = readStdinSync();
+
+(() => {
   let skillName = 'unknown';
   let claudeSessionId; // raw Claude Code session_id — used to key temp files
 
@@ -108,8 +109,4 @@ process.stdin.on('end', () => {
   }
 
   process.exit(0);
-});
-
-// Handle empty stdin (pipe closed immediately)
-process.stdin.on('error', () => process.exit(0));
-process.stdin.resume();
+})();

package/hooks/pre-tool-guard/index.cjs

@@ -16,6 +16,7 @@ const fs = require('fs');
 const path = require('path');
 
 const { captureConsole } = require('../lib/hook-output.cjs');
+const { readStdinSync } = require('../lib/hook-stdin.cjs');
 // Hook stdout is a JSON contract, not free text (Codex rejects bare lines and
 // discards the output). Capture the prints below and emit one envelope on exit.
 captureConsole('PreToolUse');
@@ -76,11 +77,10 @@ function patchTargetPaths(toolName, toolInput) {
   return Array.from(patch.matchAll(/^\*\*\* (?:Update|Add|Delete) File:\s*(.+)$/gm), (match) => match[1].trim());
 }
 
-// Read tool_input from Claude Code hook stdin
-let input = '';
-process.stdin.setEncoding('utf-8');
-process.stdin.on('data', (chunk) => { input += chunk; });
-process.stdin.on('end', () => {
+// Read tool_input from the hook payload. Must be synchronous — see hook-stdin.cjs.
+const input = readStdinSync();
+
+(() => {
   let toolInput = {};
   let toolName = '';
   try {
@@ -179,7 +179,7 @@ process.stdin.on('end', () => {
   }
 
   process.exit(0);
-});
+})();
 
 /**
  * Load .rune/privacy.json from project root

package/hooks/quarantine/index.cjs

@@ -22,6 +22,7 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
+const { readStdinSync } = require('../lib/hook-stdin.cjs');
 
 const HOOK_TIMEOUT_MS = 5000;
 
@@ -49,28 +50,18 @@ if (process.env.QUARANTINE_DISABLE === '1') {
   process.exit(0);
 }
 
-let stdinBuf = '';
-process.stdin.setEncoding('utf-8');
-process.stdin.on('data', (chunk) => {
-  stdinBuf += chunk;
-  // Cap stdin at 1MB — Claude Code never sends payloads this large
-  if (stdinBuf.length > 1_000_000) {
-    process.stdin.destroy();
-    process.exit(0);
-  }
-});
-process.stdin.on('end', () => {
-  try {
-    main(stdinBuf);
-  } catch {
-    // Any unexpected error → silent advisory exit (never block tool dispatch)
-    process.exit(0);
-  }
-});
-process.stdin.on('error', () => process.exit(0));
+// Read synchronously — see hook-stdin.cjs for why an async listener loses output.
+const stdinBuf = readStdinSync();
+
+// Cap stdin at 1MB — Claude Code never sends payloads this large
+if (stdinBuf.length > 1_000_000) {
+  process.exit(0);
+}
 
-// If stdin is a TTY (no input), exit clean
-if (process.stdin.isTTY) {
+try {
+  main(stdinBuf);
+} catch {
+  // Any unexpected error → silent advisory exit (never block tool dispatch)
   process.exit(0);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rune-kit/rune",
-  "version": "2.29.1",
+  "version": "2.30.1",
   "description": "66-skill mesh for AI coding assistants — native lifecycle hooks for Claude Code and Codex, 5-layer architecture, 248 connections + 45 signals, and a 13-platform compiler.",
   "type": "module",
   "bin": {
@@ -8,7 +8,7 @@
   },
   "scripts": {
     "build": "node compiler/bin/rune.js build",
-    "doctor": "node compiler/bin/rune.js doctor && node scripts/version-sync-check.js",
+    "doctor": "node compiler/bin/rune.js doctor && node scripts/version-sync-check.js && node scripts/build-skill-index.js --check",
     "test": "node --test compiler/__tests__/*.test.js scripts/__tests__/*.test.js",
     "test:coverage": "c8 --reporter=text --reporter=lcov node --test compiler/__tests__/*.test.js scripts/__tests__/*.test.js",
     "lint": "biome check .",
@@ -53,7 +53,8 @@
     "agents/",
     "hooks/",
     ".codex-plugin/",
-    "references/"
+    "references/",
+    "skill-index.json"
   ],
   "homepage": "https://rune-kit.github.io/rune",
   "bugs": {