@vpxa/aikit 0.1.357 → 0.1.359

package/scaffold/general/hooks/scripts/privacy-guard.mjs

@@ -1,4 +1,14 @@
 #!/usr/bin/env node
+/**
+ * privacy-guard — PreToolUse guard against secret/key material reads.
+ *
+ * Denies reads of .env, .pem, .key, .ssh/*, credentials, token files, .netrc, .pgpass.
+ * Uses deterministic path matching — no LLM, no config files, no external state.
+ *
+ * @category guard
+ * @event PreToolUse
+ */
+
 import { createHook } from './_runtime.mjs';
 
 const BLOCKED = [
@@ -17,23 +27,26 @@ const BLOCKED = [
   '**/.pgpass',
   '**/secret.*',
   '**/secrets.*',
+  '**/*.token',
+  '**/*.tkn',
 ];
 
 const READ_TOOLS = new Set(['Read', 'read_file', 'readFile']);
 
-/** Blocks reads of secret-bearing files and key material. */
-export const privacyGuard = async (context) => {
-  if (context.event !== 'PreToolUse' || !READ_TOOLS.has(context.toolName))
-    return { decision: 'allow' };
+/** Deny reads matching blocked secret patterns. */
+const handler = async (context) => {
+  if (!READ_TOOLS.has(context.toolName)) return { decision: 'allow' };
+
   const blockedPath = context.filePaths.find((filePath) =>
     context.matchesPattern(filePath, BLOCKED),
   );
+
   return blockedPath
     ? {
         decision: 'deny',
-        reason: `Blocked: reading sensitive file ${blockedPath}. Use environment variables or secrets manager instead.`,
+        reason: `Reading sensitive file: ${blockedPath}. Use environment variables or secrets manager.`,
       }
     : { decision: 'allow' };
 };
 
-createHook(privacyGuard);
+createHook(handler, { event: 'PreToolUse', category: 'guard' });

package/scaffold/general/hooks/scripts/scope-guard.mjs

@@ -0,0 +1,160 @@
+#!/usr/bin/env node
+
+/**
+ * scope-guard — PostToolUse signal for edit drift detection.
+ *
+ * After file writes, checks:
+ *   - File change count vs threshold (default 5)
+ *   - Active flow scope boundary
+ *   - Scaffold source/dist mismatch
+ *
+ * Returns silence when healthy. Signals only actionable drift.
+ *
+ * @category signal
+ * @event PostToolUse
+ */
+
+import { execSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHook } from './_runtime.mjs';
+
+const DIFF_THRESHOLD = 5;
+
+const exists = (p) => {
+  try {
+    return fs.existsSync(p);
+  } catch {
+    return false;
+  }
+};
+
+/**
+ * Run git diff covering working-tree, staged, and untracked files.
+ * Returns array of relative paths. Empty on error or no changes.
+ */
+function getChangedFiles(cwd) {
+  try {
+    // Tracked working-tree changes + staged changes
+    const tracked = execSync('git diff --name-only && git diff --cached --name-only', {
+      cwd,
+      encoding: 'utf-8',
+      timeout: 3000,
+      stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    // Untracked files that are not ignored
+    let untracked = '';
+    try {
+      untracked = execSync('git ls-files --others --exclude-standard', {
+        cwd,
+        encoding: 'utf-8',
+        timeout: 3000,
+        stdio: ['ignore', 'pipe', 'pipe'],
+      });
+    } catch {
+      // ls-files may fail in detached or bare repos
+    }
+
+    const allFiles = [...tracked.split('\n'), ...untracked.split('\n')];
+    return [...new Set(allFiles.map((s) => s.trim()).filter(Boolean))];
+  } catch {
+    return [];
+  }
+}
+
+/**
+ * Read active flow scope from .flows/<slug>/meta.json.
+ * Flow runs are stored as directories under .flows/, each with a meta.json.
+ */
+function getFlowScope(cwd) {
+  const flowsDir = path.join(cwd, '.flows');
+  if (!exists(flowsDir)) return null;
+
+  try {
+    const entries = fs.readdirSync(flowsDir);
+    for (const entry of entries) {
+      const metaPath = path.join(flowsDir, entry, 'meta.json');
+      if (!exists(metaPath)) continue;
+      try {
+        const meta = JSON.parse(fs.readFileSync(metaPath, 'utf8'));
+        if (meta?.status === 'active') {
+          const scope = meta?.scope || meta?.roots || meta?.config?.scope || null;
+          return {
+            slug: entry,
+            scope: Array.isArray(scope) ? scope : scope ? [scope] : null,
+          };
+        }
+      } catch {
+        // Skip unreadable meta files
+      }
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Check if modified files include scaffold definitions but no regenerate.
+ */
+function checkScaffoldDrift(changedFiles) {
+  const scaffoldDefs = changedFiles.filter(
+    (f) => f.startsWith('scaffold/') && (f.endsWith('.mjs') || f.endsWith('.json')),
+  );
+  if (scaffoldDefs.length === 0) return null;
+
+  const hasDist = changedFiles.some((f) => f.startsWith('scaffold/dist/'));
+  const hasPreview = changedFiles.some((f) => f.startsWith('scaffold/_preview/'));
+
+  if (!hasDist && !hasPreview) {
+    return `Scaffold source changed (${scaffoldDefs.length} files) but dist not regenerated. Run \`node scaffold/generate.mjs\`.`;
+  }
+
+  return null;
+}
+
+/** Signal edit drift — silence when under threshold and no scope issues. */
+const handler = async (context) => {
+  const signals = [];
+
+  // 1. Get changed files list (working-tree + staged + untracked)
+  const changedFiles = getChangedFiles(context.cwd);
+  if (changedFiles.length === 0) return { decision: 'allow' };
+
+  // 2. Count check
+  if (changedFiles.length > DIFF_THRESHOLD) {
+    signals.push(
+      `Modified ${changedFiles.length} files this session (threshold: ${DIFF_THRESHOLD}).`,
+    );
+  }
+
+  // 3. Flow scope boundary check
+  const flow = getFlowScope(context.cwd);
+  if (flow?.scope) {
+    const outOfScope = changedFiles.filter((f) => {
+      const normalizedFile = f.replace(/\\/g, '/');
+      return !flow.scope.some((s) => {
+        const normalizedScope = s.replace(/\\/g, '/').replace(/\/$/, '');
+        return normalizedFile.startsWith(normalizedScope);
+      });
+    });
+    if (outOfScope.length > 0) {
+      signals.push(
+        `Files outside active flow "${flow.slug}" scope: ${outOfScope.slice(0, 5).join(', ')}${outOfScope.length > 5 ? ` (+${outOfScope.length - 5} more)` : ''}.`,
+      );
+    }
+  }
+
+  // 4. Scaffold drift
+  const drift = checkScaffoldDrift(changedFiles);
+  if (drift) signals.push(drift);
+
+  // Silence when healthy
+  if (signals.length === 0) return { decision: 'allow' };
+
+  return {
+    additionalContext: `[Scope]\n${signals.join('\n')}`,
+  };
+};
+
+createHook(handler, { event: 'PostToolUse', category: 'signal', outputBudgetLines: 5 });

package/scaffold/general/hooks/scripts/scout-guard.mjs

@@ -1,4 +1,14 @@
 #!/usr/bin/env node
+/**
+ * scout-guard — PreToolUse guard against low-value context reads.
+ *
+ * Denies reads/searches inside generated, dependency, and git object directories.
+ * Pushes agents toward file_summary, search, symbol, and digest instead.
+ *
+ * @category guard
+ * @event PreToolUse
+ */
+
 import { createHook } from './_runtime.mjs';
 
 const BLOCKED_DIRS = [
@@ -15,31 +25,25 @@ const BLOCKED_DIRS = [
   'target/release/',
   '.gradle/',
   'Pods/',
+  '.cache/',
 ];
 
-const normalize = (value) =>
-  String(value ?? '')
-    .replace(/\\/g, '/')
-    .toLowerCase();
-
-/** Blocks reads and searches inside generated or dependency-heavy directories. */
-export const scoutGuard = async (context) => {
-  if (context.event !== 'PreToolUse') return { decision: 'allow' };
+/** Deny when any file path falls inside a blocked directory. */
+const handler = async (context) => {
   const blockedDir = context.filePaths.reduce((match, filePath) => {
     if (match) return match;
-    const normalizedPath = normalize(filePath);
+    const normalized = context.normalizePath(filePath);
     return (
-      BLOCKED_DIRS.find(
-        (dir) => normalizedPath.startsWith(dir) || normalizedPath.includes(`/${dir}`),
-      ) ?? ''
+      BLOCKED_DIRS.find((dir) => normalized.startsWith(dir) || normalized.includes(`/${dir}`)) ?? ''
     );
   }, '');
+
   return blockedDir
     ? {
         decision: 'deny',
-        reason: `Blocked: accessing ${blockedDir} wastes context. Use search tools or package documentation instead.`,
+        reason: `Reading ${blockedDir} wastes context. Use file_summary, search, symbol, or digest instead.`,
       }
     : { decision: 'allow' };
 };
 
-createHook(scoutGuard);
+createHook(handler, { event: 'PreToolUse', category: 'guard' });

package/packages/cli/dist/init-CWLiK7bC.js

@@ -1,7 +0,0 @@
-import{c as e,l as t,n,o as r,r as i,t as a}from"./scaffold-BNPHP-QC.js";import{_ as o,c as s,l as c,n as l,o as u,r as d,s as f,t as p}from"./templates-Bu7dZtk_.js";import{appendFileSync as m,existsSync as h,mkdirSync as g,readFileSync as _,unlinkSync as v,writeFileSync as y}from"node:fs";import{basename as b,dirname as x,resolve as S}from"node:path";import{homedir as C}from"node:os";import{AIKIT_PATHS as w,EMBEDDING_DEFAULTS as T,isUserInstalled as E}from"../../core/dist/index.js";function D(e){return h(S(e,`.cursor`))?`cursor`:h(S(e,`.claude`))?`claude-code`:h(S(e,`.windsurf`))?`windsurf`:h(S(e,`.zed`))?`zed`:h(S(e,`.idea`))?`intellij`:h(S(e,`.opencode`))?`opencode`:h(S(e,`AGENTS.md`))?`hermes`:`copilot`}function O(e){let t=[];return h(S(e,`.cursor`))&&t.push(`cursor`),(h(S(e,`.claude`))||h(S(e,`CLAUDE.md`)))&&t.push(`claude-code`),h(S(e,`.windsurf`))&&t.push(`windsurf`),h(S(e,`.zed`))&&t.push(`zed`),h(S(e,`.idea`))&&t.push(`intellij`),h(S(e,`.gemini`))&&t.push(`gemini-cli`),(h(S(e,`.codex`))||h(S(e,`codex.md`)))&&t.push(`codex-cli`),(h(S(e,`.opencode`))||h(S(e,`OPENCODE.md`)))&&t.push(`opencode`),t.push(`copilot`),t.push(`hermes`),[...new Set(t)]}function k(e){return{servers:{[e]:{...f}}}}function A(e){let{type:t,...n}=f;return{mcpServers:{[e]:n}}}function j(e){let{type:t,...n}=f;return{context_servers:{[e]:{...n}}}}function M(e){let{type:t,...n}=f;return{mcp:{[e]:{type:`local`,command:[n.command,...n.args]}}}}const N={scaffoldDir:`general`,writeMcpConfig(e,t){let n=S(e,`.vscode`),r=S(n,`mcp.json`);h(r)||(g(n,{recursive:!0}),y(r,`${JSON.stringify(k(t),null,2)}\n`,`utf-8`),console.log(`  Created .vscode/mcp.json`))},writeInstructions(e,t){let n=S(e,`.github`),r=S(n,`copilot-instructions.md`);g(n,{recursive:!0}),y(r,l(b(e),t),`utf-8`),console.log(`  Updated .github/copilot-instructions.md`)},writeAgentsMd(e,t){y(S(e,`AGENTS.md`),p(b(e),t),`utf-8`),console.log(`  Updated AGENTS.md`)}},P=`Orchestrator`;function F(e){let{command:t,args:n}=f;return{[e]:{command:t,args:[...n],type:`stdio`,env:{}}}}function I(e,t){let n=t??S(C(),`.claude`),r=S(n,`settings.json`),i=S(n,`..`,`.claude.json`),a=F(e),o;if(!h(i))o={};else try{o=JSON.parse(_(i,`utf-8`))}catch{console.warn(`  ⚠ ${i} invalid JSON — overwriting`),o={}}g(x(i),{recursive:!0}),o.mcpServers={...o.mcpServers||{},...a},y(i,`${JSON.stringify(o,null,2)}\n`,`utf-8`),console.log(`  Updated ${i} — ${e} MCP server`);let s;if(!h(r))g(n,{recursive:!0}),s={agent:P};else{try{s=JSON.parse(_(r,`utf-8`))}catch{console.warn(`  ⚠ ${r} invalid JSON — overwriting`),s={}}delete s.mcpServers}s.agent=P;let c=S(n,`hooks`,`scripts`).replace(/\\/g,`/`);try{let e=d(`claude`,c);e.hooks&&Object.keys(e.hooks).length>0&&(s.hooks=e.hooks)}catch{console.warn(`  ⚠ Failed to generate hooks block`)}y(r,`${JSON.stringify(s,null,2)}\n`,`utf-8`),console.log(`  Updated ${r} — default agent + hooks`)}const L={scaffoldDir:`general`,writeMcpConfig(e,t){I(t);let n=S(e,`.mcp.json`);h(n)||(y(n,`${JSON.stringify(A(t),null,2)}\n`,`utf-8`),console.log(`  Created .mcp.json`))},writeInstructions(e,t){let n=S(e,`CLAUDE.md`),r=b(e);y(n,`${l(r,t)}\n---\n\n${p(r,t)}`,`utf-8`),console.log(`  Updated CLAUDE.md`)},writeAgentsMd(e,t){}},R={scaffoldDir:`general`,writeMcpConfig(e,t){let n=S(e,`.cursor`),r=S(n,`mcp.json`);h(r)||(g(n,{recursive:!0}),y(r,`${JSON.stringify(A(t),null,2)}\n`,`utf-8`),console.log(`  Created .cursor/mcp.json`))},writeInstructions(e,t){let n=S(e,`.cursor`,`rules`),r=S(n,`aikit.mdc`);g(n,{recursive:!0});let i=b(e);y(r,`${l(i,t)}\n---\n\n${p(i,t)}`,`utf-8`),console.log(`  Updated .cursor/rules/aikit.mdc`);let a=S(n,`kb.mdc`);h(a)&&a!==r&&(v(a),console.log(`  Removed legacy .cursor/rules/kb.mdc`))},writeAgentsMd(e,t){}},z={scaffoldDir:`general`,writeMcpConfig(e,t){let n=S(e,`.vscode`),r=S(n,`mcp.json`);h(r)||(g(n,{recursive:!0}),y(r,`${JSON.stringify(k(t),null,2)}\n`,`utf-8`),console.log(`  Created .vscode/mcp.json (Windsurf-compatible)`))},writeInstructions(e,t){let n=S(e,`.windsurfrules`),r=b(e);y(n,`${l(r,t)}\n---\n\n${p(r,t)}`,`utf-8`),console.log(`  Updated .windsurfrules`)},writeAgentsMd(e,t){}},B={scaffoldDir:`general`,writeMcpConfig(e,t){let n=S(e,`.zed`),r=S(n,`settings.json`);if(g(n,{recursive:!0}),!h(r))y(r,`${JSON.stringify(j(t),null,2)}\n`,`utf-8`),console.log(`  Created .zed/settings.json`);else{let e;try{e=JSON.parse(_(r,`utf-8`))}catch{console.warn(`  ⚠ .zed/settings.json contains invalid JSON — skipping MCP config merge`);return}e.context_servers?.[t]||(e.context_servers={...e.context_servers,...j(t).context_servers},y(r,`${JSON.stringify(e,null,2)}\n`,`utf-8`),console.log(`  Updated .zed/settings.json with context_servers`))}},writeInstructions(e,t){let n=S(e,`.rules`),r=b(e);y(n,`${l(r,t)}\n---\n\n${p(r,t)}`,`utf-8`),console.log(`  Updated .rules`)},writeAgentsMd(e,t){}},V={scaffoldDir:`general`,writeMcpConfig(e,t){let n=S(e,`mcp.json`);h(n)||(y(n,`${JSON.stringify(A(t),null,2)}\n`,`utf-8`),console.log(`  Created mcp.json`))},writeInstructions(e,t){let n=S(e,`.aiassistant`,`rules`),r=S(n,`aikit.md`);g(n,{recursive:!0});let i=b(e);y(r,`${l(i,t)}\n---\n\n${p(i,t)}`,`utf-8`),console.log(`  Updated .aiassistant/rules/aikit.md`)},writeAgentsMd(e,t){}},H={scaffoldDir:`general`,writeMcpConfig(e,t){let n=S(e,`.opencode`),r=S(n,`opencode.json`);h(r)||(g(n,{recursive:!0}),y(r,`${JSON.stringify(M(t),null,2)}\n`,`utf-8`),console.log(`  Created .opencode/opencode.json`))},writeInstructions(e,t){let n=S(e,`OPENCODE.md`),r=b(e);y(n,`${l(r,t)}\n---\n\n${p(r,t)}`,`utf-8`),console.log(`  Updated OPENCODE.md`)},writeAgentsMd(e,t){}},U={scaffoldDir:`general`,writeMcpConfig(e,t){},writeInstructions(e,t){let n=S(e,`AGENTS.md`),r=b(e);y(n,`${l(r,t)}\n---\n\n${p(r,t)}`,`utf-8`),console.log(`  Updated AGENTS.md (Hermes)`)},writeAgentsMd(e,t){}};function W(e){switch(e){case`copilot`:return N;case`claude-code`:return L;case`cursor`:return R;case`windsurf`:return z;case`zed`:return B;case`intellij`:return V;case`opencode`:return H;case`hermes`:return U;case`gemini-cli`:case`codex-cli`:return N}}const G={serverName:s,sources:[{path:`.`,excludePatterns:[`**/node_modules/**`,`**/dist/**`,`**/build/**`,`**/.git/**`,`**/${w.data}/**`,`**/coverage/**`,`**/*.min.js`,`**/package-lock.json`,`**/pnpm-lock.yaml`]}],indexing:{chunkSize:1500,chunkOverlap:200,minChunkSize:100},embedding:{model:T.model,dimensions:T.dimensions},store:{backend:`sqlite-vec`,path:w.data},curated:{path:w.aiCurated}};function K(e,t){let n=S(e,`aikit.config.json`);return h(n)&&!t?(console.log(`aikit.config.json already exists. Use --force to overwrite.`),!1):(y(n,`${JSON.stringify(G,null,2)}\n`,`utf-8`),console.log(`  Created aikit.config.json`),!0)}function q(e){let t=S(e,`.gitignore`),n=[{dir:`.flows/`,label:`AI Kit flow runs`}];if(h(t)){let e=_(t,`utf-8`),r=n.filter(t=>!e.includes(t.dir));r.length>0&&(m(t,`\n${r.map(e=>`# ${e.label}\n${e.dir}`).join(`
-`)}\n`,`utf-8`),console.log(`  Added ${r.map(e=>e.dir).join(`, `)} to .gitignore`))}else y(t,`${n.map(e=>`# ${e.label}\n${e.dir}`).join(`
-`)}\n`,`utf-8`),console.log(`  Created .gitignore with AI Kit entries`)}function J(){return G.serverName}const Y=[`decisions`,`patterns`,`conventions`,`troubleshooting`];function X(e){let t=S(e,`.ai`,`curated`);h(t)||(g(t,{recursive:!0}),console.log(`  Created .ai/curated/`));for(let e of Y){let n=S(t,e);h(n)||g(n,{recursive:!0})}console.log(`  Created .ai/curated/{${Y.join(`,`)}}/`)}function Z(e){switch(e){case`zed`:return`zed`;case`intellij`:return`intellij`;case`claude-code`:return`claude-code`;case`gemini-cli`:return`gemini`;case`codex-cli`:return`codex`;case`opencode`:return`opencode`;case`hermes`:return`hermes`;default:return`copilot`}}async function Q(n){let i=process.cwd();if(S(i)===S(C())){console.log(`  Skipping workspace init: cannot scaffold the home directory.`),console.log("  Use `aikit init` (without --workspace) for user-level setup.");return}if(!K(i,n.force))return;q(i);let a=J(),s=W(D(i));s.writeMcpConfig(i,a),s.writeInstructions(i,a),s.writeAgentsMd(i,a);let l=o(),d=JSON.parse(_(S(l,`package.json`),`utf-8`)).version;await t(i,l,[...c],d,n.force),await r(i,l,[...u],d,n.force);let f=O(i),p=new Set;for(let t of f){let r=Z(t);p.has(r)||(p.add(r),await e(i,l,r,d,n.force))}X(i),console.log(`
-AI Kit initialized! Next steps:`),console.log(`  aikit reindex  Index your codebase`),console.log(`  aikit search   Search indexed content`),console.log(`  aikit serve    Start MCP server for IDE integration`),E()&&console.log(`
-Note: User-level AI Kit is also installed. This workspace uses its own local data store.`)}async function ee(e){E()?await $(e):await Q(e)}async function $(t){let n=process.cwd();if(S(n)===S(C())){console.log(`  Skipping workspace scaffold: cannot scaffold the home directory.`);return}let i=J(),a=W(D(n));a.writeInstructions(n,i),a.writeAgentsMd(n,i);let s=o(),c=JSON.parse(_(S(s,`package.json`),`utf-8`)).version,l=O(n),d=new Set;for(let r of l){let i=Z(r);d.has(i)||(d.add(i),await e(n,s,i,c,t.force))}await r(n,s,[...u],c,t.force),X(n),q(n),console.log(`
-Workspace scaffolded for user-level AI Kit! Files added:`),console.log(`  Instruction files (AGENTS.md, copilot-instructions.md, etc.)`),console.log(`  .ai/curated/ directories`),console.log(`  .github/agents/ & .github/prompts/`),console.log(`
-The user-level AI Kit server will auto-index this workspace when opened in your IDE.`)}async function te(){let e=process.cwd(),t=O(e),r=o(),s=[...await i(e,r,[...c])],l=new Set;for(let i of t){let t=Z(i);l.has(t)||(l.add(t),s.push(...await n(e,r,t)))}s.push(...await a(e,r,[...u]));let d={summary:{total:s.length,new:s.filter(e=>e.status===`new`).length,outdated:s.filter(e=>e.status===`outdated`).length,current:s.filter(e=>e.status===`current`).length},files:s};console.log(JSON.stringify(d,null,2))}export{te as guideProject,Q as initProject,$ as initScaffoldOnly,ee as initSmart};

package/packages/server/dist/prelude-DetbWo8R.js

@@ -1 +0,0 @@
-import{n as e,t}from"./server-D5eu57oU.js";export{t as buildPreludeInjection,e as generatePrelude};

package/packages/server/dist/prelude-hfAEi93R.js

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import{n as e,t}from"./server-D7gZ4K_H.js";export{t as buildPreludeInjection,e as generatePrelude};

package/packages/server/dist/sampling-CWjnUevo.js

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import{r as e}from"./server-D7gZ4K_H.js";export{e as createSamplingClient};

package/packages/server/dist/sampling-CnE3owSt.js

@@ -1 +0,0 @@
-import{r as e}from"./server-D5eu57oU.js";export{e as createSamplingClient};

package/scaffold/general/hooks/scripts/post-edit-check.mjs

@@ -1,36 +0,0 @@
-#!/usr/bin/env node
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import process from 'node:process';
-import { createHook } from './_runtime.mjs';
-
-const EDIT_TOOLS = new Set(['Edit', 'Write', 'create_file', 'editFiles', 'replace_string_in_file']);
-const counterPath = path.join(os.tmpdir(), `aikit-edit-count-${process.ppid}.json`);
-const readCount = () => {
-  try {
-    return JSON.parse(fs.readFileSync(counterPath, 'utf8')).count || 0;
-  } catch {
-    return 0;
-  }
-};
-const writeCount = (count) => {
-  try {
-    fs.writeFileSync(counterPath, JSON.stringify({ count }), 'utf8');
-  } catch {}
-};
-
-/** Tracks edit counts and nudges validation after repeated file changes. */
-export const postEditCheck = async (context) => {
-  if (context.event !== 'PostToolUse' || !EDIT_TOOLS.has(context.toolName))
-    return { decision: 'allow' };
-  const count = readCount() + 1;
-  writeCount(count);
-  if (count < 5 || count % 5 !== 0) return { decision: 'allow' };
-  const prefix = count >= 10 ? 'Strongly consider' : 'Consider';
-  return {
-    additionalContext: `📋 You've made ${count} file edits this session. ${prefix} running check({}) and test_run({}) to validate changes before continuing.`,
-  };
-};
-
-createHook(postEditCheck);

package/scaffold/general/hooks/scripts/pre-compact-save.mjs

@@ -1,13 +0,0 @@
-#!/usr/bin/env node
-import { createHook } from './_runtime.mjs';
-
-const REMINDER = `⚠️ Context compaction imminent. Before proceeding:
-1. If you have uncommitted decisions, call: knowledge({ action: "remember", title: "Pre-compact save", content: "<key decisions and state>", category: "session" })
-2. If a flow is active, call: stash({ action: "set", key: "pre-compact-state", value: "<current progress>" })
-3. After compaction, call: search({ query: "SESSION CHECKPOINT", origin: "curated" }) to recover context.`;
-
-/** Injects a save-state reminder immediately before context compaction. */
-export const preCompactSave = async (context) =>
-  context.event === 'PreCompact' ? { additionalContext: REMINDER } : { decision: 'allow' };
-
-createHook(preCompactSave);

package/scaffold/general/hooks/scripts/session-init.mjs

@@ -1,85 +0,0 @@
-#!/usr/bin/env node
-import fs from 'node:fs';
-import path from 'node:path';
-import process from 'node:process';
-import { createHook } from './_runtime.mjs';
-
-const exists = (cwd, name) => {
-  try {
-    return fs.existsSync(path.join(cwd, name));
-  } catch {
-    return false;
-  }
-};
-const list = (cwd) => {
-  try {
-    return fs.readdirSync(cwd);
-  } catch {
-    return [];
-  }
-};
-const readJson = (cwd, name) => {
-  try {
-    return JSON.parse(fs.readFileSync(path.join(cwd, name), 'utf8'));
-  } catch {
-    return null;
-  }
-};
-const detectPackageManager = (cwd, pkg) =>
-  pkg?.packageManager?.split('@')[0] ||
-  (exists(cwd, 'pnpm-lock.yaml') && 'pnpm') ||
-  (exists(cwd, 'yarn.lock') && 'yarn') ||
-  ((exists(cwd, 'bun.lockb') || exists(cwd, 'bun.lock')) && 'bun') ||
-  (exists(cwd, 'package-lock.json') && 'npm') ||
-  'unknown';
-
-/** Detects workspace metadata and injects stack context at session start. */
-export const sessionInit = async (context) => {
-  if (context.event !== 'SessionStart') return { decision: 'allow' };
-  const pkg = readJson(context.cwd, 'package.json');
-  const deps = { ...pkg?.dependencies, ...pkg?.devDependencies };
-  const entries = list(context.cwd);
-  const framework = deps.react
-    ? 'React'
-    : deps.vue
-      ? 'Vue'
-      : deps.angular
-        ? 'Angular'
-        : deps.next
-          ? 'Next.js'
-          : deps.express
-            ? 'Express'
-            : deps.fastify
-              ? 'Fastify'
-              : '';
-  const stack = pkg
-    ? `Node.js${framework ? `, ${framework}` : ''}`
-    : exists(context.cwd, 'go.mod')
-      ? 'Go'
-      : exists(context.cwd, 'Cargo.toml')
-        ? 'Rust'
-        : exists(context.cwd, 'requirements.txt') || exists(context.cwd, 'pyproject.toml')
-          ? 'Python'
-          : entries.some((name) => /\.(sln|csproj)$/i.test(name))
-            ? '.NET'
-            : exists(context.cwd, 'pom.xml') || exists(context.cwd, 'build.gradle')
-              ? 'Java/Kotlin'
-              : 'Unknown';
-  const monorepo = exists(context.cwd, 'pnpm-workspace.yaml')
-    ? 'yes (pnpm-workspace)'
-    : exists(context.cwd, 'lerna.json')
-      ? 'yes (lerna)'
-      : exists(context.cwd, 'packages')
-        ? 'yes (packages/)'
-        : 'no';
-  const metadata = [
-    `Workspace: ${path.basename(context.cwd)}`,
-    `Stack: ${stack}`,
-    `Monorepo: ${monorepo}`,
-    `Package manager: ${detectPackageManager(context.cwd, pkg)}`,
-    ...(pkg ? [`Node: ${process.version}`] : []),
-  ].join('\n');
-  return { additionalContext: metadata };
-};
-
-createHook(sessionInit);

package/scaffold/general/hooks/scripts/session-learn.mjs

@@ -1,53 +0,0 @@
-#!/usr/bin/env node
-/**
- * session-learn — Stop event hook for autonomous learning.
- *
- * Fires at session end. Nudges agent to process buffered observations
- * before context is lost. Cleans up buffer if too small for analysis.
- *
- * @tier efficiency
- * @event Stop
- * @scope user
- */
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import process from 'node:process';
-import { createHook } from './_runtime.mjs';
-
-const bufferPath = path.join(os.tmpdir(), `aikit-obs-${process.ppid}.jsonl`);
-const MIN_OBSERVATIONS = 10;
-
-const getLineCount = (filePath) => {
-  try {
-    return fs.readFileSync(filePath, 'utf8').split('\n').filter(Boolean).length;
-  } catch {
-    return 0;
-  }
-};
-
-const cleanup = () => {
-  try {
-    fs.unlinkSync(bufferPath);
-  } catch {}
-};
-
-/** Nudges end-of-session lesson extraction and cleans up small buffers. */
-export const sessionLearn = async (context) => {
-  if (context.event !== 'Stop') return { decision: 'allow' };
-
-  const count = getLineCount(bufferPath);
-  if (count < MIN_OBSERVATIONS) {
-    cleanup();
-    return { decision: 'allow' };
-  }
-
-  return {
-    additionalContext: [
-      `[Observer] Session ending with ${count} observations buffered.`,
-      'Run knowledge({ action: "lesson", subAction: "auto-observe" }) to extract learning patterns.',
-    ].join(' '),
-  };
-};
-
-createHook(sessionLearn);

package/scaffold/general/hooks/scripts/session-observer.mjs

@@ -1,77 +0,0 @@
-#!/usr/bin/env node
-/**
- * session-observer — PostToolUse hook for autonomous learning.
- *
- * Captures tool usage observations to a JSONL buffer for later pattern analysis.
- * Fire-and-forget writes (<5ms). Nudges agent when batch threshold reached.
- *
- * @tier efficiency
- * @event PostToolUse
- * @scope user
- */
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import process from 'node:process';
-import { createHook } from './_runtime.mjs';
-
-const bufferPath = path.join(os.tmpdir(), `aikit-obs-${process.ppid}.jsonl`);
-const BATCH_THRESHOLD = 20;
-const EXCLUDE = new Set([
-  'knowledge',
-  'replay',
-  'stash',
-  'checkpoint',
-  'session_digest',
-  'reindex',
-  'status',
-  'flow',
-  'evidence_map',
-  'present',
-]);
-
-const countLines = (filePath) => {
-  try {
-    return fs.readFileSync(filePath, 'utf8').split('\n').filter(Boolean).length;
-  } catch {
-    return 0;
-  }
-};
-
-const summarize = (input, maxLen = 200) => {
-  if (!input) return '';
-  const value = typeof input === 'string' ? input : JSON.stringify(input);
-  return value.length > maxLen ? `${value.slice(0, maxLen)}...` : value;
-};
-
-/** Captures tool-use observations and nudges lesson extraction at batch thresholds. */
-export const sessionObserver = async (context) => {
-  if (context.event !== 'PostToolUse') return { decision: 'allow' };
-  const toolBase = context.toolName.replace(/^mcp_aikit_/, '');
-  if (EXCLUDE.has(toolBase)) return { decision: 'allow' };
-
-  const entry = JSON.stringify({
-    ts: Date.now(),
-    tool: context.toolName,
-    input: summarize(context.toolInput),
-    files: context.filePaths.slice(0, 5),
-  });
-
-  try {
-    fs.appendFileSync(bufferPath, `${entry}\n`);
-  } catch {}
-
-  const count = countLines(bufferPath);
-  if (count > 0 && count >= BATCH_THRESHOLD && count % BATCH_THRESHOLD === 0) {
-    return {
-      additionalContext: [
-        `[Observer] ${count} tool calls captured this session.`,
-        'Consider: knowledge({ action: "lesson", subAction: "auto-observe" })',
-      ].join(' '),
-    };
-  }
-
-  return { decision: 'allow' };
-};
-
-createHook(sessionObserver);

package/scaffold/general/hooks/scripts/subagent-context.mjs

@@ -1,59 +0,0 @@
-#!/usr/bin/env node
-import fs from 'node:fs';
-import path from 'node:path';
-import { createHook } from './_runtime.mjs';
-
-const readJson = (cwd, name) => {
-  try {
-    return JSON.parse(fs.readFileSync(path.join(cwd, name), 'utf8'));
-  } catch {
-    return null;
-  }
-};
-const truncate = (value, limit) =>
-  String(value ?? '')
-    .replace(/\s+/g, ' ')
-    .trim()
-    .slice(0, limit);
-const detectStack = (manifest, pkg) => {
-  const explicit = manifest?.stack ?? manifest?.techStack ?? manifest?.project?.stack;
-  if (explicit) return Array.isArray(explicit) ? explicit.join(', ') : String(explicit);
-  const deps = { ...pkg?.dependencies, ...pkg?.devDependencies };
-  const found = [];
-  if (pkg) found.push('Node.js');
-  if (deps.react) found.push('React');
-  if (deps.vue) found.push('Vue');
-  if (deps.next) found.push('Next.js');
-  if (deps.express) found.push('Express');
-  if (deps.fastify) found.push('Fastify');
-  if (deps['@nestjs/core']) found.push('NestJS');
-  return found.join(', ');
-};
-
-/** Injects compact project metadata into every subagent start. */
-export const subagentContext = async (context) => {
-  if (context.event !== 'SubagentStart') return { decision: 'allow' };
-  const manifest = readJson(context.cwd, '.aikit-scaffold.json');
-  const pkg = readJson(context.cwd, 'package.json');
-  if (!manifest && !pkg) return { decision: 'allow' };
-  const conventions =
-    manifest?.conventions ?? manifest?.keyConventions ?? manifest?.project?.conventions;
-  const conventionText = Array.isArray(conventions)
-    ? conventions.slice(0, 3).join('; ')
-    : conventions;
-  const name = truncate(pkg?.name ?? manifest?.name ?? path.basename(context.cwd), 60);
-  const description = truncate(
-    pkg?.description ?? manifest?.description ?? manifest?.project?.description,
-    120,
-  );
-  const stack = truncate(detectStack(manifest, pkg) || 'unknown', 80);
-  const contextText = [
-    `Project: ${name}${description ? ` — ${description}` : ''}`,
-    `Stack: ${stack}`,
-    `Conventions: ${truncate(conventionText || 'Reuse existing scaffold patterns.', 120)}`,
-    'Use aikit search/file_summary — NOT raw read_file for understanding code.',
-  ].join('\n');
-  return { additionalContext: contextText };
-};
-
-createHook(subagentContext);