arkaos 4.3.5 → 4.4.0

package/VERSION

@@ -1 +1 @@
-4.3.5
+4.4.0

package/arka/SKILL.md

@@ -179,7 +179,7 @@ violation (squad-routing, arka-supremacy, spec-driven, mandatory-qa).
 
 | Command | Description |
 |---------|-------------|
-| `/arka status` | System status (version, departments, agents, active projects). Includes **LLM costs (24h)** section: top-line cost + cache hit rate + call count from `core.runtime.llm_cost_telemetry.summarise(period="today")`. Also includes **Enforcement (24h)** section: total calls, block rate, top blocked tools/reasons from `core.governance.enforcement_telemetry.summarise(period="today")` (PR19 v2.41.0). Plus **Reorganization (today)** section: today's proposal path + artifact count from `core.cognition.reorganizer_scheduler.status_summary()` (PR24 v2.46.0). |
+| `/arka status` | System status (version, departments, agents, active projects). Includes **LLM costs (24h)** section: top-line cost + cache hit rate + call count from `core.runtime.llm_cost_telemetry.summarise(period="today")`. Also includes **Enforcement (24h)** section: total calls, block rate, top blocked tools/reasons from `core.governance.enforcement_telemetry.summarise(period="today")` (PR19 v2.41.0). Plus **Reorganization (today)** section: today's proposal path + artifact count from `core.cognition.reorganizer_scheduler.status_summary()` (PR24 v2.46.0). Plus **Model routing** section: gateway live/off + resolved per-slot routes + served counts from `core.runtime.model_routing_check.status_summary()`. |
 | `/arka costs [period]` | LLM cost visibility — aggregates telemetry by day/week/month/all, with top expensive sessions. See `arka/skills/costs/SKILL.md`. Shells out to `~/.arkaos/bin/arka-py -m core.runtime.llm_cost_telemetry_cli <period>`. |
 | `/arka enforcement [period]` | Enforcement compliance — aggregates flow-marker enforcement telemetry by day/week/month/all. Shows block rate, top blocked tools, top reasons. Shells out to `~/.arkaos/bin/arka-py -m core.governance.enforcement_telemetry_cli <period>`. |
 | `/arka compliance [period]` | Behavior compliance summary (PR29 v2.48.0) — aggregates stop-hook telemetry by day/week/month/all. Shows rates for the four contracts: closing marker, `[arka:meta]` tag, KB citation pass, sycophancy clean. Shells out to `~/.arkaos/bin/arka-py -m core.governance.compliance_telemetry_cli <period>`. |

package/bin/arka-claude

@@ -13,14 +13,24 @@ CYAN='\033[0;36m'
 YELLOW='\033[1;33m'
 RESET='\033[0m'
 
+# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
+_self="$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")" && pwd)"
+for _lib in \
+    "$_self/../config/hooks/_lib/arka_python.sh" \
+    "$HOME/.arkaos/config/hooks/_lib/arka_python.sh"; do
+  # shellcheck source=/dev/null
+  [ -f "$_lib" ] && { . "$_lib"; break; }
+done
+: "${ARKA_PY:=python3}"
+
 # ─── Profile ───────────────────────────────────────────────────────────
 NAME="founder"
 COMPANY="WizardingCode"
 VERSION="2.x"
 
-if [ -f "$HOME/.arkaos/profile.json" ] && command -v python3 &>/dev/null; then
-  NAME=$(python3 -c "import json; p=json.load(open('$HOME/.arkaos/profile.json')); print(p.get('name', p.get('role', 'founder')))" 2>/dev/null || echo "founder")
-  COMPANY=$(python3 -c "import json; print(json.load(open('$HOME/.arkaos/profile.json')).get('company', 'WizardingCode'))" 2>/dev/null || echo "WizardingCode")
+if [ -f "$HOME/.arkaos/profile.json" ]; then
+  NAME=$("$ARKA_PY" -c "import json; p=json.load(open('$HOME/.arkaos/profile.json')); print(p.get('name', p.get('role', 'founder')))" 2>/dev/null || echo "founder")
+  COMPANY=$("$ARKA_PY" -c "import json; print(json.load(open('$HOME/.arkaos/profile.json')).get('company', 'WizardingCode'))" 2>/dev/null || echo "WizardingCode")
 fi
 
 if [ -f "$HOME/.arkaos/.repo-path" ]; then
@@ -38,7 +48,7 @@ else GREETING="Boa noite"; fi
 DRIFT_MSG=""
 SYNC_STATE="$HOME/.arkaos/sync-state.json"
 if [ -f "$SYNC_STATE" ]; then
-  SYNCED=$(python3 -c "import json; print(json.load(open('$SYNC_STATE'))['version'])" 2>/dev/null || echo "none")
+  SYNCED=$("$ARKA_PY" -c "import json; print(json.load(open('$SYNC_STATE'))['version'])" 2>/dev/null || echo "none")
   if [ "$SYNCED" != "$VERSION" ]; then
     DRIFT_MSG="\n  ${YELLOW}⚠  Update available: run /arka update to sync${RESET}"
   fi
@@ -60,5 +70,26 @@ echo -e "  ${DIM}ArkaOS v${VERSION} │ 65 agents │ 17 departments │ 244+ sk
 echo -e "${DRIFT_MSG}"
 echo ""
 
+# ─── Model-routing gateway (opt-in: ARKA_GATEWAY=1) ────────────────────
+# Renders the LiteLLM proxy from ~/.arkaos/models.yaml and launches Claude
+# Code against it, so per-role model choices (execution→Ollama, quality→
+# Anthropic) actually take effect. Any failure degrades to a plain launch.
+if [ "${ARKA_GATEWAY:-0}" = "1" ] && [ -n "${REPO:-}" ]; then
+  _GW="$REPO/scripts/gateway-ensure.sh"
+  _ENV_FILE="$HOME/.arkaos/gateway/launch.env"
+  if [ -f "$_GW" ] && ARKAOS_ROOT="$REPO" ARKAOS_HOME="$HOME/.arkaos" bash "$_GW"; then
+    # Source the generated env without eval (values are ArkaOS-controlled).
+    set -a
+    # shellcheck source=/dev/null
+    . "$_ENV_FILE"
+    set +a
+    echo -e "  ${GREEN}⚡ Model Fabric gateway active${RESET} ${DIM}(models.yaml per-role routing)${RESET}"
+    echo ""
+  else
+    echo -e "  ${DIM}(gateway off — plain Claude launch)${RESET}"
+    echo ""
+  fi
+fi
+
 # ─── Launch Claude ─────────────────────────────────────────────────────
 exec claude "$@"

package/bin/arka-py

@@ -30,14 +30,29 @@ done
 : "${ARKA_PY:=python3}"
 
 # ─── Make `-m core.*` resolvable regardless of cwd ────────────────────────
-# ARKAOS_ROOT (env) wins; else the installed repo pointer; else the repo this
-# shim lives in (dev checkout: bin/ -> repo root).
+# ARKAOS_ROOT (env) wins unconditionally — an explicit operator override is
+# honored even if wrong, so misconfiguration stays loud and debuggable.
+# The guessed candidates are validated before winning: `.repo-path` points
+# at an npx cache that `npm cache clean` can purge, and ~/.arkaos/core is
+# the cognitive scheduler's minimal copy (no core/sync). A candidate only
+# counts when it holds the full package (core/sync/__init__.py marker).
+# Chain: .repo-path → dev checkout (bin/ -> repo root) → ~/.arkaos/lib
+# (stable snapshot written by the installer, survives cache purges).
 _root="${ARKAOS_ROOT:-}"
-if [ -z "$_root" ] && [ -f "$HOME/.arkaos/.repo-path" ]; then
-  _root="$(cat "$HOME/.arkaos/.repo-path" 2>/dev/null || true)"
-fi
-if [ -z "$_root" ] && [ -f "$_self/../core/hooks/__init__.py" ]; then
-  _root="$(cd "$_self/.." && pwd)"
+if [ -z "$_root" ]; then
+  _repo_ptr=""
+  if [ -f "$HOME/.arkaos/.repo-path" ]; then
+    _repo_ptr="$(cat "$HOME/.arkaos/.repo-path" 2>/dev/null || true)"
+  fi
+  for _cand in \
+      "$_repo_ptr" \
+      "$_self/.." \
+      "$HOME/.arkaos/lib"; do
+    if [ -n "$_cand" ] && [ -f "$_cand/core/sync/__init__.py" ]; then
+      _root="$(cd "$_cand" && pwd)"
+      break
+    fi
+  done
 fi
 if [ -n "$_root" ] && [ -d "$_root" ]; then
   export PYTHONPATH="${_root}${PYTHONPATH:+:$PYTHONPATH}"

package/config/hooks/_lib/arka_python.ps1

@@ -40,4 +40,35 @@ function Resolve-ArkaPython {
     return "python"
 }
 
+# Windows mirror of arka_resolve_root() in arka_python.sh: env override wins
+# unconditionally; guessed candidates must contain core/sync/__init__.py
+# (the full-package marker — `.repo-path` points at an npx cache that
+# `npm cache clean` can purge; ~/.arkaos/lib is the installer's snapshot).
+function Resolve-ArkaRoot {
+    if (-not [string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+        return $env:ARKAOS_ROOT
+    }
+    $base = if ($env:USERPROFILE) { $env:USERPROFILE } elseif ($HOME) { $HOME } else { "" }
+    $repo = ""
+    $repoPathFile = Join-Path $base ".arkaos\.repo-path"
+    if ($base -and (Test-Path -LiteralPath $repoPathFile)) {
+        $repo = (Get-Content $repoPathFile -Raw).Trim()
+    }
+    if ($repo -and (Test-Path -LiteralPath (Join-Path $repo "core\sync\__init__.py"))) {
+        return $repo
+    }
+    $lib = Join-Path $base ".arkaos\lib"
+    if ($base -and (Test-Path -LiteralPath (Join-Path $lib "core\sync\__init__.py"))) {
+        return $lib
+    }
+    if ($repo -and (Test-Path -LiteralPath $repo)) {
+        return $repo
+    }
+    if ($base -and (Test-Path -LiteralPath (Join-Path $base ".arkaos"))) {
+        return (Join-Path $base ".arkaos")
+    }
+    if ($env:ARKA_OS) { return $env:ARKA_OS }
+    return (Join-Path $base ".claude\skills\arkaos")
+}
+
 $env:ARKA_PY = Resolve-ArkaPython

package/config/hooks/_lib/arka_python.sh

@@ -61,3 +61,41 @@ arka_resolve_python() {
 # keep the export unconditional.
 ARKA_PY="$(arka_resolve_python)" || true
 export ARKA_PY
+
+# Contract of arka_resolve_root():
+#   Echoes the ArkaOS root for `-m core.*` execution. env ARKAOS_ROOT wins
+#   unconditionally (explicit operator override stays loud and debuggable).
+#   Guessed candidates are validated on core/sync/__init__.py — the marker
+#   that distinguishes the full package from the cognitive scheduler's
+#   partial ~/.arkaos/core copy — because `.repo-path` points at an npx
+#   cache that `npm cache clean` can purge at any time. Chain:
+#   .repo-path (validated) → ~/.arkaos/lib snapshot (validated, written by
+#   the installer) → .repo-path even without core (legacy VERSION readers)
+#   → ~/.arkaos → ARKA_OS env → ~/.claude/skills/arkaos.
+arka_resolve_root() {
+  if [ -n "${ARKAOS_ROOT:-}" ]; then
+    printf '%s\n' "$ARKAOS_ROOT"
+    return 0
+  fi
+  local repo=""
+  if [ -f "$HOME/.arkaos/.repo-path" ]; then
+    repo="$(cat "$HOME/.arkaos/.repo-path" 2>/dev/null || true)"
+  fi
+  if [ -n "$repo" ] && [ -f "$repo/core/sync/__init__.py" ]; then
+    printf '%s\n' "$repo"
+    return 0
+  fi
+  if [ -f "$HOME/.arkaos/lib/core/sync/__init__.py" ]; then
+    printf '%s\n' "$HOME/.arkaos/lib"
+    return 0
+  fi
+  if [ -n "$repo" ] && [ -d "$repo" ]; then
+    printf '%s\n' "$repo"
+    return 0
+  fi
+  if [ -d "$HOME/.arkaos" ]; then
+    printf '%s\n' "$HOME/.arkaos"
+    return 0
+  fi
+  printf '%s\n' "${ARKA_OS:-$HOME/.claude/skills/arkaos}"
+}

package/config/hooks/post-tool-use.ps1

@@ -150,6 +150,14 @@ if ($shouldProcessGotchas -and $null -ne $payload) {
                             $arkaosRootPtu = (Get-Content -Raw -LiteralPath $repoPathFile -Encoding UTF8).Trim()
                         } catch { }
                     }
+                    # .repo-path may point at a purged npx cache — fall through
+                    # to the ~/.arkaos/lib snapshot when core is missing.
+                    if (-not ($arkaosRootPtu -and (Test-Path -LiteralPath (Join-Path $arkaosRootPtu 'core\sync\__init__.py')))) {
+                        $libPtu = Join-Path $env:USERPROFILE '.arkaos\lib'
+                        if (Test-Path -LiteralPath (Join-Path $libPtu 'core\sync\__init__.py')) {
+                            $arkaosRootPtu = $libPtu
+                        }
+                    }
                 }
                 if (-not $arkaosRootPtu) {
                     $arkaosRootPtu = Join-Path $env:USERPROFILE '.arkaos'

package/config/hooks/post-tool-use.sh

@@ -20,7 +20,17 @@
 #   - Hook metrics. Output: JSON to stdout. Timeout: 5s.
 # ============================================================================
 
-if [ -z "${ARKAOS_ROOT:-}" ]; then
+# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
+_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
+if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
+
+# ─── Resolve ARKAOS_ROOT (validated — see arka_resolve_root in _lib) ────
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if command -v arka_resolve_root >/dev/null 2>&1; then
+  ARKAOS_ROOT="$(arka_resolve_root)"
+elif [ -z "${ARKAOS_ROOT:-}" ]; then
+  # Legacy chain (pre-snapshot _lib deployment)
   if [ -f "$HOME/.arkaos/.repo-path" ]; then
     ARKAOS_ROOT=$(cat "$HOME/.arkaos/.repo-path")
   elif [ -d "$HOME/.arkaos" ]; then
@@ -31,10 +41,6 @@ if [ -z "${ARKAOS_ROOT:-}" ]; then
 fi
 export ARKAOS_ROOT
 
-# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
-_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
-if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
-
 if ! command -v "$ARKA_PY" >/dev/null 2>&1; then
   echo '{}'
   exit 0

package/config/hooks/pre-tool-use.ps1

@@ -27,8 +27,17 @@ $transcriptPath = [string]$inp.transcript_path
 $sessionId = [string]$inp.session_id
 $cwd = [string]$inp.cwd
 
-# --- Resolve ARKAOS_ROOT ---
-if ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+# Shared resolver (venv-first, yaml-verified). Mirrors _lib/arka_python.sh.
+$arkaLib = Join-Path $PSScriptRoot "_lib\arka_python.ps1"
+if (Test-Path -LiteralPath $arkaLib) { . $arkaLib }
+
+# --- Resolve ARKAOS_ROOT (validated — see Resolve-ArkaRoot in _lib) ---
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if (Get-Command Resolve-ArkaRoot -ErrorAction SilentlyContinue) {
+    $env:ARKAOS_ROOT = Resolve-ArkaRoot
+} elseif ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+    # Legacy chain (pre-snapshot _lib deployment)
     $repoPathFile = Join-Path $HOME ".arkaos/.repo-path"
     if (Test-Path $repoPathFile) {
         $env:ARKAOS_ROOT = (Get-Content $repoPathFile -Raw).Trim()
@@ -38,10 +47,6 @@ if ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
         $env:ARKAOS_ROOT = if ($env:ARKA_OS) { $env:ARKA_OS } else { Join-Path $HOME ".claude/skills/arkaos" }
     }
 }
-
-# Shared resolver (venv-first, yaml-verified). Mirrors _lib/arka_python.sh.
-$arkaLib = Join-Path $PSScriptRoot "_lib\arka_python.ps1"
-if (Test-Path -LiteralPath $arkaLib) { . $arkaLib }
 $pythonExe = $env:ARKA_PY
 if (-not $pythonExe) { exit 0 }
 

package/config/hooks/pre-tool-use.sh

@@ -22,8 +22,17 @@
 # flags are honored inside the python modules. Timeout: 10s.
 # ============================================================================
 
-# ─── Resolve ARKAOS_ROOT (env → .repo-path → ~/.arkaos → portable) ──────
-if [ -z "${ARKAOS_ROOT:-}" ]; then
+# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
+_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
+if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
+
+# ─── Resolve ARKAOS_ROOT (validated — see arka_resolve_root in _lib) ────
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if command -v arka_resolve_root >/dev/null 2>&1; then
+  ARKAOS_ROOT="$(arka_resolve_root)"
+elif [ -z "${ARKAOS_ROOT:-}" ]; then
+  # Legacy chain (pre-snapshot _lib deployment)
   if [ -f "$HOME/.arkaos/.repo-path" ]; then
     ARKAOS_ROOT=$(cat "$HOME/.arkaos/.repo-path")
   elif [ -d "$HOME/.arkaos" ]; then
@@ -34,10 +43,6 @@ if [ -z "${ARKAOS_ROOT:-}" ]; then
 fi
 export ARKAOS_ROOT
 
-# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
-_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
-if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
-
 # ─── Degrade gracefully (fail open, same as before) ─────────────────────
 if ! command -v "$ARKA_PY" >/dev/null 2>&1; then
   exit 0

package/config/hooks/session-start.ps1

@@ -46,6 +46,16 @@ if (Test-Path -LiteralPath $repoPathFile) {
         }
     } catch { }
 }
+# .repo-path may point at a purged npx cache — the installer's snapshot
+# keeps the drift banner alive ('2.x' is the untouched default above).
+if ($version -eq '2.x') {
+    $libVersionFile = Join-Path $arkaosHome 'lib\VERSION'
+    if (Test-Path -LiteralPath $libVersionFile) {
+        try {
+            $version = (Get-Content -Raw -LiteralPath $libVersionFile -Encoding UTF8).Trim()
+        } catch { }
+    }
+}
 
 # ─── Time greeting ─────────────────────────────────────────────────────
 $hour = [int](Get-Date -Format 'HH')

package/config/hooks/session-start.sh

@@ -22,6 +22,11 @@ if [ -f "$HOME/.arkaos/.repo-path" ]; then
   REPO=$(cat "$HOME/.arkaos/.repo-path")
   [ -f "$REPO/VERSION" ] && VERSION=$(cat "$REPO/VERSION" | tr -d '[:space:]')
 fi
+# .repo-path may point at a purged npx cache — the installer's snapshot
+# keeps the drift banner alive ("2.x" is the untouched default above).
+if [ "$VERSION" = "2.x" ] && [ -f "$HOME/.arkaos/lib/VERSION" ]; then
+  VERSION=$(tr -d '[:space:]' < "$HOME/.arkaos/lib/VERSION")
+fi
 
 # ─── Static greeting (cache-friendly) ──────────────────────────────────
 # Time-of-day branching removed: it invalidated prompt cache 3x/day without

package/config/hooks/stop.ps1

@@ -29,7 +29,15 @@ if ([string]::IsNullOrWhiteSpace($sessionId) -or -not (Test-Path $wfMarker)) {
     exit 0
 }
 
-if ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+# Resolve ARKAOS_ROOT via the validated shared resolver: .repo-path can
+# point at a purged npx cache; fall through to the ~/.arkaos/lib snapshot
+# instead of exporting a dead root.
+$arkaLibEarly = Join-Path $PSScriptRoot "_lib\arka_python.ps1"
+if (Test-Path -LiteralPath $arkaLibEarly) { . $arkaLibEarly }
+if (Get-Command Resolve-ArkaRoot -ErrorAction SilentlyContinue) {
+    $env:ARKAOS_ROOT = Resolve-ArkaRoot
+} elseif ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+    # Legacy chain (pre-snapshot _lib deployment)
     $repoPathFile = Join-Path $HOME ".arkaos/.repo-path"
     if (Test-Path $repoPathFile) {
         $env:ARKAOS_ROOT = (Get-Content $repoPathFile -Raw).Trim()

package/config/hooks/stop.sh

@@ -22,7 +22,17 @@
 # Timeout: 5s | Always exit 0.
 # ============================================================================
 
-if [ -z "${ARKAOS_ROOT:-}" ]; then
+# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
+_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
+if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
+
+# ─── Resolve ARKAOS_ROOT (validated — see arka_resolve_root in _lib) ────
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if command -v arka_resolve_root >/dev/null 2>&1; then
+  ARKAOS_ROOT="$(arka_resolve_root)"
+elif [ -z "${ARKAOS_ROOT:-}" ]; then
+  # Legacy chain (pre-snapshot _lib deployment)
   if [ -f "$HOME/.arkaos/.repo-path" ]; then
     ARKAOS_ROOT=$(cat "$HOME/.arkaos/.repo-path")
   elif [ -d "$HOME/.arkaos" ]; then
@@ -33,10 +43,6 @@ if [ -z "${ARKAOS_ROOT:-}" ]; then
 fi
 export ARKAOS_ROOT
 
-# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
-_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
-if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
-
 if ! command -v "$ARKA_PY" >/dev/null 2>&1; then
   exit 0
 fi

package/config/hooks/user-prompt-submit.ps1

@@ -80,6 +80,14 @@ try {
                     $arkaosRootUps = (Get-Content -Raw -LiteralPath $repoPathFileUps -Encoding UTF8).Trim()
                 } catch { }
             }
+            # .repo-path may point at a purged npx cache — fall through to
+            # the ~/.arkaos/lib snapshot when the core package is missing.
+            if (-not ($arkaosRootUps -and (Test-Path -LiteralPath (Join-Path $arkaosRootUps 'core\sync\__init__.py')))) {
+                $libUps = Join-Path $env:USERPROFILE '.arkaos\lib'
+                if (Test-Path -LiteralPath (Join-Path $libUps 'core\sync\__init__.py')) {
+                    $arkaosRootUps = $libUps
+                }
+            }
         }
         if (-not $arkaosRootUps) {
             $arkaosRootUps = Join-Path $env:USERPROFILE '.arkaos'
@@ -160,6 +168,16 @@ if ($env:ARKAOS_ROOT) {
         $arkaosRoot = $null
     }
 }
+# .repo-path may point at a purged npx cache — prefer the ~/.arkaos/lib
+# snapshot over a root without the core package (env override untouched).
+if (-not $env:ARKAOS_ROOT) {
+    if (-not ($arkaosRoot -and (Test-Path -LiteralPath (Join-Path $arkaosRoot 'core\sync\__init__.py')))) {
+        $libRoot = Join-Path $arkaosHome 'lib'
+        if (Test-Path -LiteralPath (Join-Path $libRoot 'core\sync\__init__.py')) {
+            $arkaosRoot = $libRoot
+        }
+    }
+}
 if (-not $arkaosRoot) {
     if (Test-Path -LiteralPath $arkaosHome -PathType Container) {
         $arkaosRoot = $arkaosHome

package/config/hooks/user-prompt-submit.sh

@@ -23,7 +23,17 @@
 # Timeout: 10s | Output: JSON to stdout | Target: <100ms
 # ============================================================================
 
-if [ -z "${ARKAOS_ROOT:-}" ]; then
+# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
+_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
+if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
+
+# ─── Resolve ARKAOS_ROOT (validated — see arka_resolve_root in _lib) ────
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if command -v arka_resolve_root >/dev/null 2>&1; then
+  ARKAOS_ROOT="$(arka_resolve_root)"
+elif [ -z "${ARKAOS_ROOT:-}" ]; then
+  # Legacy chain (pre-snapshot _lib deployment)
   if [ -f "$HOME/.arkaos/.repo-path" ]; then
     ARKAOS_ROOT=$(cat "$HOME/.arkaos/.repo-path")
   elif [ -d "$HOME/.arkaos" ]; then
@@ -34,10 +44,6 @@ if [ -z "${ARKAOS_ROOT:-}" ]; then
 fi
 export ARKAOS_ROOT
 
-# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
-_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
-if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
-
 _ARKA_L0_FALLBACK='{"additionalContext": "[Constitution] NON-NEGOTIABLE: branch-isolation, obsidian-output, authority-boundaries, security-gate, context-first, solid-clean-code, spec-driven, human-writing, squad-routing, full-visibility, sequential-validation, mandatory-qa, arka-supremacy | QUALITY-GATE: marta-cqo, eduardo-copy, francisca-tech-ux | MUST: conventional-commits, test-coverage, pattern-matching, actionable-output, memory-persistence"}'
 
 if ! command -v "$ARKA_PY" >/dev/null 2>&1; then

package/core/cognition/scheduler/daemon.py

@@ -275,11 +275,15 @@ class ArkaScheduler:
         extra_paths = [
             os.path.join(home, ".local", "bin"),
             os.path.join(home, ".arkaos", "bin"),
-            "/usr/local/bin",
         ]
+        if os.name != "nt":
+            extra_paths.append("/usr/local/bin")
         env = os.environ.copy()
-        existing = env.get("PATH", "/usr/bin:/bin")
-        env["PATH"] = ":".join(extra_paths) + ":" + existing
+        existing = env.get("PATH", "" if os.name == "nt" else "/usr/bin:/bin")
+        # os.pathsep is ';' on Windows (where drive-letter entries contain
+        # ':') and ':' on POSIX, so the joined PATH stays valid on both.
+        parts = extra_paths + ([existing] if existing else [])
+        env["PATH"] = os.pathsep.join(parts)
         return env
 
     def _run_attempt(

package/core/forge/orchestrator.py

@@ -23,6 +23,7 @@ from enum import Enum
 from pathlib import Path
 from typing import Optional
 
+from core.shared.temp_paths import arkaos_temp_dir
 from core.forge.schema import (
     ForgeContext,
     ForgePlan,
@@ -361,7 +362,7 @@ class ForgeOrchestrator:
             raise RuntimeError("No active forge plan.")
 
         html = render_html(self._current_plan)
-        path = f"/tmp/forge-{self._current_plan.id}.html"
+        path = str(arkaos_temp_dir(f"forge-{self._current_plan.id}.html"))
         Path(path).write_text(html, encoding="utf-8")
         return path
 

package/core/hooks/_shared.py

@@ -51,21 +51,41 @@ def get_str(data: dict, *keys: str) -> str:
     return str(cur)
 
 
+def _has_core_package(root: str) -> bool:
+    # core/sync/__init__.py distinguishes the full package from the
+    # cognitive scheduler's minimal core/ copy (cognition + workflow only).
+    try:
+        return (Path(root) / "core" / "sync" / "__init__.py").is_file()
+    except OSError:
+        return False
+
+
 def resolve_arkaos_root() -> str:
-    """Resolve ARKAOS_ROOT with the same precedence as the bash hooks.
+    """Resolve ARKAOS_ROOT with the hook wrappers' validated chain.
 
-    env ARKAOS_ROOT → ~/.arkaos/.repo-path → ~/.arkaos → ARKA_OS env →
-    ~/.claude/skills/arkaos (portable fallback).
+    env ARKAOS_ROOT (unconditional operator override) → ~/.arkaos/.repo-path
+    (validated) → ~/.arkaos/lib stable snapshot (validated) → .repo-path
+    even without the core package (legacy VERSION readers) → ~/.arkaos →
+    ARKA_OS env → ~/.claude/skills/arkaos (portable fallback).
+
+    Mirrors arka_resolve_root() in config/hooks/_lib/arka_python.sh;
+    bin/arka-py adds one extra step (its own dev checkout) between
+    .repo-path and the snapshot.
+
+    Validation matters because .repo-path points at an npx cache that
+    `npm cache clean` can purge at any time.
     """
     env_root = os.environ.get("ARKAOS_ROOT", "").strip()
     if env_root:
         return env_root
-    repo_file = Path.home() / ".arkaos" / ".repo-path"
-    if repo_file.is_file():
-        try:
-            return repo_file.read_text(encoding="utf-8").strip()
-        except OSError:
-            pass
+    repo = repo_path()
+    if repo and _has_core_package(repo):
+        return repo
+    lib = Path.home() / ".arkaos" / "lib"
+    if _has_core_package(str(lib)):
+        return str(lib)
+    if repo and Path(repo).is_dir():
+        return repo
     if (Path.home() / ".arkaos").is_dir():
         return str(Path.home() / ".arkaos")
     return os.environ.get(

package/core/hooks/stop.py

@@ -30,6 +30,7 @@ import re
 from datetime import datetime, timezone
 from pathlib import Path
 
+from core.shared.temp_paths import arkaos_temp_dir
 from core.hooks._shared import (
     ensure_root_on_path,
     get_str,
@@ -104,7 +105,7 @@ def _write_tmp_state(subdir: str, safe_sid: str, payload: dict) -> None:
     """Owner-only /tmp state file (umask 0o077 — PR25 v2.46.1)."""
     prev_umask = os.umask(0o077)
     try:
-        state_dir = Path("/tmp") / subdir
+        state_dir = arkaos_temp_dir(subdir)
         state_dir.mkdir(parents=True, exist_ok=True)
         (state_dir / f"{safe_sid}.json").write_text(
             json.dumps(payload), encoding="utf-8"
@@ -220,7 +221,7 @@ def _flow_checks(
         kb_reported = parse_reported_kb(last)
         if safe_sid:
             injected_path = (
-                Path("/tmp/arkaos-kb-injected") / f"{safe_sid}.json"
+                arkaos_temp_dir("arkaos-kb-injected") / f"{safe_sid}.json"
             )
             if injected_path.exists():
                 injected_data = json.loads(
@@ -369,7 +370,7 @@ def main(stdin_json: dict | None = None) -> int:
     _native_usage(transcript_path, session_id, raw)
 
     # Only evaluate sessions where the classifier flagged creation intent.
-    wf_marker = Path("/tmp/arkaos-wf-required") / session_id if session_id else None
+    wf_marker = arkaos_temp_dir("arkaos-wf-required") / session_id if session_id else None
     if wf_marker is None or not safe_session_id(session_id) or not wf_marker.is_file():
         return 0
 

package/core/hooks/user_prompt_submit.py

@@ -36,6 +36,7 @@ import subprocess
 import time
 from pathlib import Path
 
+from core.shared.temp_paths import arkaos_temp_dir
 from core.hooks._shared import (
     ensure_root_on_path,
     get_str,
@@ -45,7 +46,7 @@ from core.hooks._shared import (
     safe_session_id,
 )
 
-_CACHE_DIR = Path("/tmp/arkaos-context-cache")
+_CACHE_DIR = arkaos_temp_dir("arkaos-context-cache")
 _CACHE_TTL = 300  # Constitution cache: 5 minutes
 
 _L0_FALLBACK = (
@@ -282,7 +283,7 @@ def _kb_auto_inject(root: str, user_input: str) -> str:
     project_hash = hashlib.md5(
         root.encode(), usedforsecurity=False
     ).hexdigest()[:12]
-    cache_dir = Path("/tmp") / f"arkaos-kb-{project_hash}"
+    cache_dir = arkaos_temp_dir(f"arkaos-kb-{project_hash}")
     if not cache_dir.is_dir():
         return ""
     try:
@@ -439,7 +440,7 @@ def _wf_mark_required(session_id: str) -> None:
     if safe_session_id(session_id) is None:
         return
     marker_dir = Path(
-        os.environ.get("ARKA_WF_REQUIRED_DIR", "/tmp/arkaos-wf-required")
+        os.environ.get("ARKA_WF_REQUIRED_DIR", str(arkaos_temp_dir("arkaos-wf-required")))
     )
     try:
         marker_dir.mkdir(parents=True, exist_ok=True)
@@ -469,7 +470,7 @@ def _cognitive_hits(session_id: str) -> str:
 
 def _one_shot_nudge(subdir: str, session_id: str) -> str:
     """Read + delete a /tmp/<subdir>/<session>.json nudge state file."""
-    nudge_file = Path("/tmp") / subdir / f"{session_id}.json"
+    nudge_file = arkaos_temp_dir(subdir) / f"{session_id}.json"
     if not nudge_file.is_file():
         return ""
     nudge = ""