arkaos 4.13.2 → 4.14.1

package/config/hooks/post-tool-use.cjs

@@ -0,0 +1,113 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * ArkaOS — PostToolUse fast-path shim (F2-6).
+ *
+ * Fast-exits ("{}", exit 0) only when the manifest proves the Python
+ * chain would do exactly that with no pending decision-bearing write:
+ * benign exit code, no error-trigger in the output, tool outside the
+ * stateful set (ExitPlanMode/Task/Agent), and the flow-auth confirm
+ * rescan provably redundant (enforcement off, or confirmed auth fresh).
+ * MCP usage telemetry — the one write on this path — is replicated
+ * inline. Everything else delegates to the sibling post-tool-use.sh.
+ *
+ * Kill switch: ARKA_HOOK_FASTPATH=0. Fail-open on internal error: try
+ * to delegate; if even that fails, print "{}" and exit 0 — the exact
+ * degraded form of post-tool-use.sh (NOTE: differs from the PreToolUse
+ * fail-open, which is empty stdout).
+ */
+
+const fs = require("node:fs");
+const path = require("node:path");
+
+function readStdin() {
+  try {
+    return fs.readFileSync(0, "utf8");
+  } catch {
+    return "";
+  }
+}
+
+function failOpen() {
+  process.stdout.write("{}\n");
+  process.exit(0);
+}
+
+function delegate(rawStdin) {
+  const sibling = path.join(__dirname, "post-tool-use.sh");
+  if (!fs.existsSync(sibling)) {
+    // Missing sibling → bash would exit 127; the contract is fail-open
+    // with the Post degraded form ("{}").
+    failOpen();
+  }
+  // Lazy require: the fast path never pays for child_process.
+  const { spawnSync } = require("node:child_process");
+  const result = spawnSync("bash", [sibling], {
+    input: rawStdin,
+    stdio: ["pipe", "inherit", "inherit"],
+    env: { ...process.env, ARKA_HOOK_FASTPATH: "0" },
+  });
+  if (result.error || result.status === null) {
+    failOpen();
+  }
+  process.exit(result.status);
+}
+
+function main() {
+  const rawStdin = readStdin();
+  if ((process.env.ARKA_HOOK_FASTPATH || "").trim() === "0") {
+    delegate(rawStdin);
+  }
+  // QG B3 (redo 1): the engine require lives INSIDE the fail-open
+  // boundary — a split deploy (.cjs present, _lib/fastpath absent)
+  // must delegate to the sibling .sh, not crash with a stack trace.
+  let engine;
+  try {
+    engine = require(path.join(__dirname, "_lib", "fastpath", "engine.cjs"));
+  } catch {
+    delegate(rawStdin);
+  }
+
+  let payload;
+  try {
+    payload = JSON.parse(rawStdin);
+  } catch {
+    payload = null;
+  }
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
+    delegate(rawStdin);
+  }
+
+  const manifest = engine.readJsonFile(
+    fs, path.join(__dirname, "gate-manifest.json")
+  ).data;
+  const homeDir = process.env.HOME || require("node:os").homedir();
+  const ctx = {
+    homeDir,
+    env: process.env,
+    fs,
+    config: engine.readJsonFile(fs, path.join(homeDir, ".arkaos", "config.json")),
+  };
+
+  const decision = engine.decidePost(payload, manifest, ctx);
+  if (decision.action !== "fast-exit") {
+    delegate(rawStdin);
+  }
+
+  for (const write of decision.writes) {
+    try {
+      fs.mkdirSync(path.dirname(write.path), { recursive: true });
+      fs.appendFileSync(write.path, write.line, { flag: "a" });
+    } catch {
+      // Telemetry must never break the hook.
+    }
+  }
+  process.stdout.write(decision.stdout + "\n");
+  process.exit(0);
+}
+
+try {
+  main();
+} catch {
+  failOpen();
+}

package/config/hooks/pre-tool-use.cjs

@@ -0,0 +1,109 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * ArkaOS — PreToolUse fast-path shim (F2-6).
+ *
+ * An 18ms-p50 Node process (measured; ~10ms of it is bare Node startup)
+ * replaces the 82ms-p50 bash->Python chain for the
+ * decisions the manifest proves trivial: non-flow-gated tools and
+ * discovery Bash with no active budget cap fast-allow here (with the
+ * same telemetry appends the Python chain would make); EVERYTHING else
+ * delegates to the sibling pre-tool-use.sh, byte-for-byte the current
+ * behavior. This shim has no deny path — see engine.cjs invariant #0.
+ *
+ * Kill switch: ARKA_HOOK_FASTPATH=0 delegates unconditionally (and is
+ * re-exported to the child as a recursion guard). Fail-open contract on
+ * internal error: try to delegate; if even that fails, exit 0 with
+ * empty stdout — identical to pre-tool-use.sh degraded mode.
+ */
+
+const fs = require("node:fs");
+const path = require("node:path");
+
+const FAIL_OPEN_EXIT = 0;
+
+function readStdin() {
+  try {
+    return fs.readFileSync(0, "utf8");
+  } catch {
+    return "";
+  }
+}
+
+function delegate(rawStdin) {
+  const sibling = path.join(__dirname, "pre-tool-use.sh");
+  if (!fs.existsSync(sibling)) {
+    // Missing sibling → bash would exit 127; the contract is fail-open.
+    process.exit(FAIL_OPEN_EXIT);
+  }
+  // Lazy require: the fast path never pays for child_process.
+  const { spawnSync } = require("node:child_process");
+  const result = spawnSync("bash", [sibling], {
+    input: rawStdin,
+    stdio: ["pipe", "inherit", "inherit"],
+    env: { ...process.env, ARKA_HOOK_FASTPATH: "0" },
+  });
+  if (result.error || result.status === null) {
+    process.exit(FAIL_OPEN_EXIT);
+  }
+  process.exit(result.status);
+}
+
+function main() {
+  const rawStdin = readStdin();
+  if ((process.env.ARKA_HOOK_FASTPATH || "").trim() === "0") {
+    delegate(rawStdin);
+  }
+  // QG B3 (redo 1): the engine require lives INSIDE the fail-open
+  // boundary — a split deploy (.cjs present, _lib/fastpath absent)
+  // must delegate to the sibling .sh, not crash with a stack trace.
+  let engine;
+  try {
+    engine = require(path.join(__dirname, "_lib", "fastpath", "engine.cjs"));
+  } catch {
+    delegate(rawStdin);
+  }
+
+  let payload;
+  try {
+    payload = JSON.parse(rawStdin);
+  } catch {
+    payload = null;
+  }
+  if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
+    delegate(rawStdin);
+  }
+
+  const manifest = engine.readJsonFile(
+    fs, path.join(__dirname, "gate-manifest.json")
+  ).data;
+  const homeDir = process.env.HOME || require("node:os").homedir();
+  const ctx = {
+    homeDir,
+    env: process.env,
+    fs,
+    config: engine.readJsonFile(fs, path.join(homeDir, ".arkaos", "config.json")),
+  };
+
+  const decision = engine.decidePre(payload, manifest, ctx);
+  if (decision.action !== "fast-allow") {
+    delegate(rawStdin);
+  }
+
+  for (const write of decision.writes) {
+    try {
+      fs.mkdirSync(path.dirname(write.path), { recursive: true });
+      fs.appendFileSync(write.path, write.line, { flag: "a" });
+    } catch {
+      // Telemetry must never break the hook (same contract as the
+      // Python try/except pass around record_telemetry).
+    }
+  }
+  process.exit(0); // allow: empty stdout, exit 0
+}
+
+try {
+  main();
+} catch {
+  process.exit(FAIL_OPEN_EXIT);
+}

package/config/hooks/session-end.ps1

@@ -0,0 +1,40 @@
+# ============================================================================
+# ArkaOS — SessionEnd Hook (Windows / PowerShell 5.1+)
+#
+# Parity with config/hooks/session-end.sh. Thin wrapper: reads the stdin JSON
+# payload and pipes it to ONE python process (core.hooks.session_end), which
+# owns the entire behaviour. Fail-open: no usable interpreter => exit 0.
+# ============================================================================
+
+$ErrorActionPreference = 'SilentlyContinue'
+$stdinText = [Console]::In.ReadToEnd()
+
+# Shared resolver (venv-first, yaml-verified). Mirrors _lib/arka_python.sh.
+$arkaLib = Join-Path $PSScriptRoot "_lib\arka_python.ps1"
+if (Test-Path -LiteralPath $arkaLib) { . $arkaLib }
+
+if (Get-Command Resolve-ArkaRoot -ErrorAction SilentlyContinue) {
+    $env:ARKAOS_ROOT = Resolve-ArkaRoot
+} elseif ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+    $repoPathFile = Join-Path $HOME ".arkaos/.repo-path"
+    if (Test-Path $repoPathFile) {
+        $env:ARKAOS_ROOT = (Get-Content $repoPathFile -Raw).Trim()
+    } elseif (Test-Path (Join-Path $HOME ".arkaos")) {
+        $env:ARKAOS_ROOT = (Join-Path $HOME ".arkaos")
+    } else {
+        $env:ARKAOS_ROOT = if ($env:ARKA_OS) { $env:ARKA_OS } else { Join-Path $HOME ".claude/skills/arkaos" }
+    }
+}
+
+$pythonExe = $env:ARKA_PY
+if (-not $pythonExe) { exit 0 }
+if (-not (Test-Path -LiteralPath (Join-Path $env:ARKAOS_ROOT "core/hooks/session_end.py"))) {
+    $selfRoot = (Resolve-Path (Join-Path $PSScriptRoot "..\..")).Path
+    if (Test-Path -LiteralPath (Join-Path $selfRoot "core/hooks/session_end.py")) {
+        $env:ARKAOS_ROOT = $selfRoot
+    } else { exit 0 }
+}
+
+$env:PYTHONPATH = "$($env:ARKAOS_ROOT)$([IO.Path]::PathSeparator)$($env:PYTHONPATH)"
+$stdinText | & $pythonExe -m core.hooks.session_end
+exit 0

package/config/hooks/session-end.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# ============================================================================
+# ArkaOS v2 — session-end Hook (thin wrapper, F2-4)
+#
+# Delegates the ENTIRE event to ONE python process:
+#   python3 -m core.hooks.session_end
+#
+# Writes a final session digest immediately (PreCompact only fires on
+# compaction) and marks the session ended. Best-effort, never blocks.
+# Fail-open: no usable interpreter => exit 0. Timeout: 15s.
+# ============================================================================
+
+# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
+_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
+if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
+
+# ─── Resolve ARKAOS_ROOT (validated — see arka_resolve_root in _lib) ────
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if command -v arka_resolve_root >/dev/null 2>&1; then
+  ARKAOS_ROOT="$(arka_resolve_root)"
+elif [ -z "${ARKAOS_ROOT:-}" ]; then
+  # Legacy chain (pre-snapshot _lib deployment)
+  if [ -f "$HOME/.arkaos/.repo-path" ]; then
+    ARKAOS_ROOT=$(cat "$HOME/.arkaos/.repo-path")
+  elif [ -d "$HOME/.arkaos" ]; then
+    ARKAOS_ROOT="$HOME/.arkaos"
+  else
+    ARKAOS_ROOT="${ARKA_OS:-$HOME/.claude/skills/arkaos}"
+  fi
+fi
+export ARKAOS_ROOT
+
+# ─── Degrade gracefully (fail open, same as before) ─────────────────────
+if ! command -v "$ARKA_PY" >/dev/null 2>&1; then
+  exit 0
+fi
+# Self-root fallback: the wrapper ships next to its python entrypoint, so
+# when ARKAOS_ROOT points at a pre-PR-6 install without core/hooks/, use
+# the root this script lives in.
+if [ ! -f "$ARKAOS_ROOT/core/hooks/session_end.py" ]; then
+  _SELF_ROOT="$(cd "$(dirname "$0")/../.." 2>/dev/null && pwd)"
+  if [ -n "$_SELF_ROOT" ] && [ -f "$_SELF_ROOT/core/hooks/session_end.py" ]; then
+    ARKAOS_ROOT="$_SELF_ROOT"
+    export ARKAOS_ROOT
+  else
+    exit 0
+  fi
+fi
+
+# ─── Single python process; stdin/stdout/stderr/exit-code pass through ──
+# Interpreter resolution handled by the shared resolver (ARKA_PY): prefers
+# the ArkaOS venv (has pyyaml/pydantic), falls back to a yaml-capable python3.
+PYTHONPATH="$ARKAOS_ROOT${PYTHONPATH:+:$PYTHONPATH}" \
+  exec "$ARKA_PY" -m core.hooks.session_end

package/config/hooks/session-start.sh

@@ -1,201 +1,37 @@
 #!/usr/bin/env bash
 # ============================================================================
-# ArkaOS — SessionStart Hook
-# Uses systemMessage (same protocol as claude-mem) for guaranteed display.
+# ArkaOS — SessionStart Hook (thin wrapper, F2-2 hook-hygiene completion)
+#
+# ONE python process (core.hooks.session_start) builds the entire
+# systemMessage — the 13 inline python spawns of the previous version
+# live there now (baseline 251ms p50 before consolidation). This file
+# only resolves the interpreter and execs; with no usable interpreter
+# it emits a static banner and exits 0 (fail-open, stdlib-free).
 # ============================================================================
 
-# ─── Profile ───────────────────────────────────────────────────────────
-NAME="founder"
-COMPANY="WizardingCode"
-VERSION="2.x"
+# _HOOK_CWD captured BEFORE any cd — inside a compound command $PWD
+# would expand after the cd (QG blocker, F1-A3: cross-project leak).
+_HOOK_CWD="$PWD"
+export ARKA_HOOK_CWD="$_HOOK_CWD"
 
 # ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
 _ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
 if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
 
-if [ -f "$HOME/.arkaos/profile.json" ] && command -v "$ARKA_PY" >/dev/null 2>&1; then
-  NAME=$("$ARKA_PY" -c "import json; p=json.load(open('$HOME/.arkaos/profile.json')); print(p.get('name', p.get('role', 'founder')))" 2>/dev/null || echo "founder")
-  COMPANY=$("$ARKA_PY" -c "import json; print(json.load(open('$HOME/.arkaos/profile.json')).get('company', 'WizardingCode'))" 2>/dev/null || echo "WizardingCode")
-fi
-
-if [ -f "$HOME/.arkaos/.repo-path" ]; then
-  REPO=$(cat "$HOME/.arkaos/.repo-path")
-  [ -f "$REPO/VERSION" ] && VERSION=$(cat "$REPO/VERSION" | tr -d '[:space:]')
-fi
-# .repo-path may point at a purged npx cache — the installer's snapshot
-# keeps the drift banner alive ("2.x" is the untouched default above).
-if [ "$VERSION" = "2.x" ] && [ -f "$HOME/.arkaos/lib/VERSION" ]; then
-  VERSION=$(tr -d '[:space:]' < "$HOME/.arkaos/lib/VERSION")
-fi
-
-# ─── Static greeting (cache-friendly) ──────────────────────────────────
-# Time-of-day branching removed: it invalidated prompt cache 3x/day without
-# meaningful signal. Static greeting keeps SessionStart output stable.
-GREETING="Olá"
-
-# ─── Version drift ─────────────────────────────────────────────────────
-SYNC_STATE="$HOME/.arkaos/sync-state.json"
-DRIFT=""
-
-if [ -f "$SYNC_STATE" ]; then
-  SYNCED=$("$ARKA_PY" -c "import json; print(json.load(open('$SYNC_STATE'))['version'])" 2>/dev/null || echo "none")
-  if [ "$SYNCED" != "$VERSION" ]; then
-    DRIFT="\\n[arka:update-available] Core v${VERSION} != synced v${SYNCED}. Run /arka update."
-  fi
-else
-  DRIFT="\\n[arka:update-available] Never synced. Run /arka update."
-fi
-
-# ─── Build message ─────────────────────────────────────────────────────
-MSG="\\n╔══════════════════════════════════════════════╗\\n"
-MSG+="║                                              ║\\n"
-MSG+="║              A R K A   O S                   ║\\n"
-MSG+="║                                              ║\\n"
-MSG+="║   The Operating System for AI Teams          ║\\n"
-MSG+="║                  by WizardingCode            ║\\n"
-MSG+="║                                              ║\\n"
-MSG+="╚══════════════════════════════════════════════╝\\n"
-MSG+="\\n"
-MSG+="${GREETING}, ${NAME} (${COMPANY})\\n"
-# ─── Active Workflow ──────────────────────────────────────────────────
-STATE_READER="$REPO/core/workflow/state_reader.sh"
-if [ -n "$REPO" ] && [ -f "$STATE_READER" ] && bash "$STATE_READER" active 2>/dev/null; then
-  WF_SUMMARY=$(bash "$STATE_READER" summary 2>/dev/null)
-  WF_NAME=$(echo "$WF_SUMMARY" | cut -d'|' -f1)
-  WF_PHASE=$(echo "$WF_SUMMARY" | cut -d'|' -f2)
-  WF_PROGRESS=$(echo "$WF_SUMMARY" | cut -d'|' -f3)
-  WF_BRANCH=$(echo "$WF_SUMMARY" | cut -d'|' -f4)
-  WF_VIOLATIONS=$(echo "$WF_SUMMARY" | cut -d'|' -f5)
-  MSG+="\\nWorkflow: ${WF_NAME} (${WF_PROGRESS})"
-  [ -n "$WF_BRANCH" ] && MSG+=" branch:${WF_BRANCH}"
-  [ "$WF_VIOLATIONS" != "0" ] && MSG+=" VIOLATIONS:${WF_VIOLATIONS}"
-  MSG+="\\n"
-fi
-
-# --- Forge Plan Display ---
-_FORGE_PLANS="$HOME/.arkaos/plans"
-_FORGE_ACTIVE="$_FORGE_PLANS/active.yaml"
-_FORGE_LINE=""
-
-if [ -f "$_FORGE_ACTIVE" ]; then
-  _FORGE_ID=$(cat "$_FORGE_ACTIVE" 2>/dev/null)
-  _FORGE_FILE="$_FORGE_PLANS/${_FORGE_ID}.yaml"
-  if [ -f "$_FORGE_FILE" ] && command -v "$ARKA_PY" >/dev/null 2>&1; then
-    _FORGE_NAME=$(FORGE_FILE="$_FORGE_FILE" "$ARKA_PY" -c "import yaml,os; d=yaml.safe_load(open(os.environ['FORGE_FILE'])); print(d.get('name',''))" 2>/dev/null)
-    _FORGE_STATUS=$(FORGE_FILE="$_FORGE_FILE" "$ARKA_PY" -c "import yaml,os; d=yaml.safe_load(open(os.environ['FORGE_FILE'])); print(d.get('status',''))" 2>/dev/null)
-    _FORGE_PHASES=$(FORGE_FILE="$_FORGE_FILE" "$ARKA_PY" -c "import yaml,os; d=yaml.safe_load(open(os.environ['FORGE_FILE'])); print(len(d.get('plan_phases',[])))" 2>/dev/null)
-    _FORGE_BRANCH=$(FORGE_FILE="$_FORGE_FILE" "$ARKA_PY" -c "import yaml,os; d=yaml.safe_load(open(os.environ['FORGE_FILE'])); print(d.get('governance',{}).get('branch_strategy',''))" 2>/dev/null)
-
-    if [ "$_FORGE_STATUS" = "approved" ]; then
-      _FORGE_LINE="  ⚒ Forge plan pending: ${_FORGE_NAME} | Phases: ${_FORGE_PHASES} | /forge resume"
-    elif [ "$_FORGE_STATUS" = "executing" ]; then
-      _FORGE_LINE="  ⚒ Forge executing: ${_FORGE_NAME} | Phases: ${_FORGE_PHASES} | Branch: ${_FORGE_BRANCH}"
-    fi
-  fi
-fi
-
-# Counts intentionally omitted (prompt-surface P0 2026-07-08): hand-typed
-# numbers drift from docs_stats.py truth and change no model behavior.
-MSG+="ArkaOS v${VERSION}"
-[ -n "$_FORGE_LINE" ] && MSG+="\\n${_FORGE_LINE}"
-MSG+="${DRIFT}"
-
-# ─── Evidence Flow Contract (top-of-session, highest priority) ──────────
-MSG+="\\n\\n[ARKA:EVIDENCE-FLOW] NON-NEGOTIABLE. Every non-trivial request runs the 4-gate evidence flow (constitution rule evidence-flow; source arka/skills/flow/SKILL.md):"
-MSG+="\\n  G1 CONTEXT ([arka:routing] <dept> -> <lead> + KB/graph grounding, cite or declare gap)"
-MSG+="\\n  G2 PLAN (short plan -> EXPLICIT user approval; silence != approval)"
-MSG+="\\n  G3 EXECUTE (closes only with real test run on record: command + exit 0)"
-MSG+="\\n  G4 REVIEW (executable checks: lint/type/coverage/security/spell -> honest summary)"
-MSG+="\\nEmit [arka:gate:N] at each gate start. Gates pass on evidence, never on narration."
-MSG+="\\nBypass ONLY via [arka:trivial] <reason> for single-file edits under 10 lines."
-
-# ─── Transparency tag contract (PR12 v2.34.0) ───────────────────────────
-MSG+="\\n\\n[ARKA:META-TAG] Every substantive response ends with a single line:"
-MSG+="\\n  [arka:meta] kb=N research=X persona=Y gap=Z critic=W"
-MSG+="\\nFields: kb=N (Obsidian/KB notes consulted), research=X (MCPs invoked: perplexity,exa,context7,firecrawl,xmcp or 'none'), persona=Y (advisor name or 'orchestrator'), gap=Z (KB gap topic or 'none'), critic=W (passed|failed|skipped)."
-MSG+="\\nMandatory after: EFFECT tool calls, plan/recommendation outputs, QG verdicts. Optional for pure read-only status replies."
-MSG+="\\nAbsence is measured by the Stop hook (warn-only in v2.34.0) before promotion to hard enforcement."
-
-# ─── Model Fabric routing (consumption layer) ───────────────────────────
-# Feed the operator's ~/.arkaos/models.yaml back to the orchestrator so
-# dashboard/CLI model choices actually govern agent dispatch. Cheap
-# (single python read); skipped silently if the config can't be resolved.
-if [ -n "$REPO" ]; then
-  # ARKA_PY already resolves to the venv python (has pydantic + yaml); the
-  # ambient python3 usually lacks them and routing_directive() would return "".
-  if command -v "$ARKA_PY" >/dev/null 2>&1 || [ -x "$ARKA_PY" ]; then
-    _MF_DIRECTIVE=$(cd "$REPO" && PYTHONPATH="$REPO" "$ARKA_PY" -c "
-try:
-    from core.runtime.model_routing_context import routing_directive
-    print(routing_directive())
-except Exception:
-    pass
-" 2>/dev/null)
-    if [ -n "$_MF_DIRECTIVE" ]; then
-      MSG+="\\n\\n${_MF_DIRECTIVE}"
-    fi
-  fi
-fi
-
-# ─── Stale-aware reorganizer trigger (PR24 v2.46.0) ─────────────────────
-# If today's proposal file is missing, fire the reorganizer in the
-# background with a 30s timeout. Best-effort, never blocks session
-# start. Multiple sessions per day no-op because the file now exists.
-if [ -n "$REPO" ] && command -v "$ARKA_PY" >/dev/null 2>&1; then
-  _PROPOSAL_DIR="$HOME/.arkaos/reorganize-proposals"
-  _TODAY="$(date -u +%Y-%m-%d).md"
-  if [ ! -f "$_PROPOSAL_DIR/$_TODAY" ]; then
-    (
-      cd "$REPO" && timeout 30s "$ARKA_PY" -m core.cognition.reorganizer_cli >/dev/null 2>&1
-    ) &
-    disown 2>/dev/null || true
-  fi
-fi
-
-# ─── Dashboard ensure (v4.1.2) ──────────────────────────────────────────
-# Safety net for the login autostart (`npx arkaos autostart enable`): if the
-# dashboard is healthy this is two curl health checks (~50ms); if not, it
-# starts API+UI. Background + disown so it never touches the 5s budget.
-# Toggle off: ~/.arkaos/config.json -> {"dashboard": {"ensure_on_session": false}}
-if [ -n "$REPO" ] && [ -f "$REPO/scripts/start-dashboard.sh" ]; then
-  _DASH_ENSURE=$("$ARKA_PY" -c "import json; print(json.load(open('$HOME/.arkaos/config.json')).get('dashboard',{}).get('ensure_on_session', True))" 2>/dev/null || echo "True")
-  if [ "$_DASH_ENSURE" = "True" ] || [ "$_DASH_ENSURE" = "true" ]; then
-    mkdir -p "$HOME/.arkaos/logs"
-    (
-      # GNU `timeout` is absent on stock macOS — degrade to an unbounded
-      # run; the launcher itself is bounded (health wait + start).
-      if command -v timeout >/dev/null 2>&1; then
-        ARKAOS_NO_BROWSER=1 timeout 90s bash "$REPO/scripts/start-dashboard.sh" ensure >> "$HOME/.arkaos/logs/dashboard-ensure.log" 2>&1
-      else
-        ARKAOS_NO_BROWSER=1 bash "$REPO/scripts/start-dashboard.sh" ensure >> "$HOME/.arkaos/logs/dashboard-ensure.log" 2>&1
-      fi
-    ) &
-    disown 2>/dev/null || true
-  fi
-fi
+REPO=""
+[ -f "$HOME/.arkaos/.repo-path" ] && REPO=$(cat "$HOME/.arkaos/.repo-path")
 
-# --- Session Memory Resume Context ---
-if command -v "$ARKA_PY" >/dev/null 2>&1 && [ -n "$REPO" ]; then
-  _SESSION_CTX=$(cd "$REPO" && "$ARKA_PY" -c "
-import sys
-sys.path.insert(0, '$REPO')
-try:
-    from core.memory.rehydrator import build_resume_context
-    ctx = build_resume_context()
-    if ctx:
-        print('\\n[SESSION] ' + ctx.replace('\\n', '\\n[SESSION] '))
-except Exception:
-    pass
-" 2>/dev/null)
-  [ -n "$_SESSION_CTX" ] && MSG+="\\n${_SESSION_CTX}"
+# The MODULE file is the guard, not just core/: an older installed
+# snapshot without it would exec into "No module named ..." (exit 1,
+# empty output — a broken SessionStart instead of a degraded banner).
+if [ -n "$REPO" ] && [ -f "$REPO/core/hooks/session_start.py" ] \
+   && command -v "$ARKA_PY" >/dev/null 2>&1; then
+  cd "$REPO" 2>/dev/null || true
+  PYTHONPATH="$REPO" exec "$ARKA_PY" -m core.hooks.session_start
 fi
 
-# ─── Output as systemMessage (same protocol as claude-mem) ─────────────
-# OWASP A03: MSG carries profile-derived NAME/COMPANY. Pass it through the
-# environment (with \n already expanded) rather than interpolating it into
-# the Python source, so a name containing quotes or ''' cannot break the
-# script or the JSON envelope.
-ARKA_MSG="$(echo -e "$MSG")" "$ARKA_PY" -c "
-import json, os
-print(json.dumps({'systemMessage': os.environ['ARKA_MSG']}))
-"
+# ─── Degraded fallback: static banner, valid JSON, exit 0 ──────────────
+cat <<'EOF'
+{"systemMessage": "\n╔══════════════════════════════════════════════╗\n║              A R K A   O S                   ║\n║   The Operating System for AI Teams          ║\n╚══════════════════════════════════════════════╝\nOlá, founder (WizardingCode)\nArkaOS (degraded: no usable interpreter — run npx arkaos doctor)"}
+EOF
+exit 0

package/config/hooks/subagent-stop.ps1

@@ -0,0 +1,40 @@
+# ============================================================================
+# ArkaOS — SubagentStop Hook (Windows / PowerShell 5.1+)
+#
+# Parity with config/hooks/subagent-stop.sh. Thin wrapper: reads the stdin JSON
+# payload and pipes it to ONE python process (core.hooks.subagent_stop), which
+# owns the entire behaviour. Fail-open: no usable interpreter => exit 0.
+# ============================================================================
+
+$ErrorActionPreference = 'SilentlyContinue'
+$stdinText = [Console]::In.ReadToEnd()
+
+# Shared resolver (venv-first, yaml-verified). Mirrors _lib/arka_python.sh.
+$arkaLib = Join-Path $PSScriptRoot "_lib\arka_python.ps1"
+if (Test-Path -LiteralPath $arkaLib) { . $arkaLib }
+
+if (Get-Command Resolve-ArkaRoot -ErrorAction SilentlyContinue) {
+    $env:ARKAOS_ROOT = Resolve-ArkaRoot
+} elseif ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+    $repoPathFile = Join-Path $HOME ".arkaos/.repo-path"
+    if (Test-Path $repoPathFile) {
+        $env:ARKAOS_ROOT = (Get-Content $repoPathFile -Raw).Trim()
+    } elseif (Test-Path (Join-Path $HOME ".arkaos")) {
+        $env:ARKAOS_ROOT = (Join-Path $HOME ".arkaos")
+    } else {
+        $env:ARKAOS_ROOT = if ($env:ARKA_OS) { $env:ARKA_OS } else { Join-Path $HOME ".claude/skills/arkaos" }
+    }
+}
+
+$pythonExe = $env:ARKA_PY
+if (-not $pythonExe) { exit 0 }
+if (-not (Test-Path -LiteralPath (Join-Path $env:ARKAOS_ROOT "core/hooks/subagent_stop.py"))) {
+    $selfRoot = (Resolve-Path (Join-Path $PSScriptRoot "..\..")).Path
+    if (Test-Path -LiteralPath (Join-Path $selfRoot "core/hooks/subagent_stop.py")) {
+        $env:ARKAOS_ROOT = $selfRoot
+    } else { exit 0 }
+}
+
+$env:PYTHONPATH = "$($env:ARKAOS_ROOT)$([IO.Path]::PathSeparator)$($env:PYTHONPATH)"
+$stdinText | & $pythonExe -m core.hooks.subagent_stop
+exit 0

package/config/hooks/subagent-stop.sh

@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+# ============================================================================
+# ArkaOS v2 — subagent-stop Hook (thin wrapper, F2-4)
+#
+# Delegates the ENTIRE event to ONE python process:
+#   python3 -m core.hooks.subagent_stop
+#
+# Persists each dispatched subagent's output + runs warn-only honesty
+# checks (phantom-action, meta-tag), nudging deliverable-shaped output
+# toward the Quality Gate. Never blocks (the subagent already ran).
+# Fail-open: no usable interpreter => exit 0. Timeout: 10s.
+# ============================================================================
+
+# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
+_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
+if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
+
+# ─── Resolve ARKAOS_ROOT (validated — see arka_resolve_root in _lib) ────
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if command -v arka_resolve_root >/dev/null 2>&1; then
+  ARKAOS_ROOT="$(arka_resolve_root)"
+elif [ -z "${ARKAOS_ROOT:-}" ]; then
+  # Legacy chain (pre-snapshot _lib deployment)
+  if [ -f "$HOME/.arkaos/.repo-path" ]; then
+    ARKAOS_ROOT=$(cat "$HOME/.arkaos/.repo-path")
+  elif [ -d "$HOME/.arkaos" ]; then
+    ARKAOS_ROOT="$HOME/.arkaos"
+  else
+    ARKAOS_ROOT="${ARKA_OS:-$HOME/.claude/skills/arkaos}"
+  fi
+fi
+export ARKAOS_ROOT
+
+# ─── Degrade gracefully (fail open, same as before) ─────────────────────
+if ! command -v "$ARKA_PY" >/dev/null 2>&1; then
+  exit 0
+fi
+# Self-root fallback: the wrapper ships next to its python entrypoint, so
+# when ARKAOS_ROOT points at a pre-PR-6 install without core/hooks/, use
+# the root this script lives in.
+if [ ! -f "$ARKAOS_ROOT/core/hooks/subagent_stop.py" ]; then
+  _SELF_ROOT="$(cd "$(dirname "$0")/../.." 2>/dev/null && pwd)"
+  if [ -n "$_SELF_ROOT" ] && [ -f "$_SELF_ROOT/core/hooks/subagent_stop.py" ]; then
+    ARKAOS_ROOT="$_SELF_ROOT"
+    export ARKAOS_ROOT
+  else
+    exit 0
+  fi
+fi
+
+# ─── Single python process; stdin/stdout/stderr/exit-code pass through ──
+# Interpreter resolution handled by the shared resolver (ARKA_PY): prefers
+# the ArkaOS venv (has pyyaml/pydantic), falls back to a yaml-capable python3.
+PYTHONPATH="$ARKAOS_ROOT${PYTHONPATH:+:$PYTHONPATH}" \
+  exec "$ARKA_PY" -m core.hooks.subagent_stop