arkaos 4.3.6 → 4.4.0

package/VERSION

@@ -1 +1 @@
-4.3.6
+4.4.0

package/bin/arka-py

@@ -30,14 +30,29 @@ done
 : "${ARKA_PY:=python3}"
 
 # ─── Make `-m core.*` resolvable regardless of cwd ────────────────────────
-# ARKAOS_ROOT (env) wins; else the installed repo pointer; else the repo this
-# shim lives in (dev checkout: bin/ -> repo root).
+# ARKAOS_ROOT (env) wins unconditionally — an explicit operator override is
+# honored even if wrong, so misconfiguration stays loud and debuggable.
+# The guessed candidates are validated before winning: `.repo-path` points
+# at an npx cache that `npm cache clean` can purge, and ~/.arkaos/core is
+# the cognitive scheduler's minimal copy (no core/sync). A candidate only
+# counts when it holds the full package (core/sync/__init__.py marker).
+# Chain: .repo-path → dev checkout (bin/ -> repo root) → ~/.arkaos/lib
+# (stable snapshot written by the installer, survives cache purges).
 _root="${ARKAOS_ROOT:-}"
-if [ -z "$_root" ] && [ -f "$HOME/.arkaos/.repo-path" ]; then
-  _root="$(cat "$HOME/.arkaos/.repo-path" 2>/dev/null || true)"
-fi
-if [ -z "$_root" ] && [ -f "$_self/../core/hooks/__init__.py" ]; then
-  _root="$(cd "$_self/.." && pwd)"
+if [ -z "$_root" ]; then
+  _repo_ptr=""
+  if [ -f "$HOME/.arkaos/.repo-path" ]; then
+    _repo_ptr="$(cat "$HOME/.arkaos/.repo-path" 2>/dev/null || true)"
+  fi
+  for _cand in \
+      "$_repo_ptr" \
+      "$_self/.." \
+      "$HOME/.arkaos/lib"; do
+    if [ -n "$_cand" ] && [ -f "$_cand/core/sync/__init__.py" ]; then
+      _root="$(cd "$_cand" && pwd)"
+      break
+    fi
+  done
 fi
 if [ -n "$_root" ] && [ -d "$_root" ]; then
   export PYTHONPATH="${_root}${PYTHONPATH:+:$PYTHONPATH}"

package/config/hooks/_lib/arka_python.ps1

@@ -40,4 +40,35 @@ function Resolve-ArkaPython {
     return "python"
 }
 
+# Windows mirror of arka_resolve_root() in arka_python.sh: env override wins
+# unconditionally; guessed candidates must contain core/sync/__init__.py
+# (the full-package marker — `.repo-path` points at an npx cache that
+# `npm cache clean` can purge; ~/.arkaos/lib is the installer's snapshot).
+function Resolve-ArkaRoot {
+    if (-not [string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+        return $env:ARKAOS_ROOT
+    }
+    $base = if ($env:USERPROFILE) { $env:USERPROFILE } elseif ($HOME) { $HOME } else { "" }
+    $repo = ""
+    $repoPathFile = Join-Path $base ".arkaos\.repo-path"
+    if ($base -and (Test-Path -LiteralPath $repoPathFile)) {
+        $repo = (Get-Content $repoPathFile -Raw).Trim()
+    }
+    if ($repo -and (Test-Path -LiteralPath (Join-Path $repo "core\sync\__init__.py"))) {
+        return $repo
+    }
+    $lib = Join-Path $base ".arkaos\lib"
+    if ($base -and (Test-Path -LiteralPath (Join-Path $lib "core\sync\__init__.py"))) {
+        return $lib
+    }
+    if ($repo -and (Test-Path -LiteralPath $repo)) {
+        return $repo
+    }
+    if ($base -and (Test-Path -LiteralPath (Join-Path $base ".arkaos"))) {
+        return (Join-Path $base ".arkaos")
+    }
+    if ($env:ARKA_OS) { return $env:ARKA_OS }
+    return (Join-Path $base ".claude\skills\arkaos")
+}
+
 $env:ARKA_PY = Resolve-ArkaPython

package/config/hooks/_lib/arka_python.sh

@@ -61,3 +61,41 @@ arka_resolve_python() {
 # keep the export unconditional.
 ARKA_PY="$(arka_resolve_python)" || true
 export ARKA_PY
+
+# Contract of arka_resolve_root():
+#   Echoes the ArkaOS root for `-m core.*` execution. env ARKAOS_ROOT wins
+#   unconditionally (explicit operator override stays loud and debuggable).
+#   Guessed candidates are validated on core/sync/__init__.py — the marker
+#   that distinguishes the full package from the cognitive scheduler's
+#   partial ~/.arkaos/core copy — because `.repo-path` points at an npx
+#   cache that `npm cache clean` can purge at any time. Chain:
+#   .repo-path (validated) → ~/.arkaos/lib snapshot (validated, written by
+#   the installer) → .repo-path even without core (legacy VERSION readers)
+#   → ~/.arkaos → ARKA_OS env → ~/.claude/skills/arkaos.
+arka_resolve_root() {
+  if [ -n "${ARKAOS_ROOT:-}" ]; then
+    printf '%s\n' "$ARKAOS_ROOT"
+    return 0
+  fi
+  local repo=""
+  if [ -f "$HOME/.arkaos/.repo-path" ]; then
+    repo="$(cat "$HOME/.arkaos/.repo-path" 2>/dev/null || true)"
+  fi
+  if [ -n "$repo" ] && [ -f "$repo/core/sync/__init__.py" ]; then
+    printf '%s\n' "$repo"
+    return 0
+  fi
+  if [ -f "$HOME/.arkaos/lib/core/sync/__init__.py" ]; then
+    printf '%s\n' "$HOME/.arkaos/lib"
+    return 0
+  fi
+  if [ -n "$repo" ] && [ -d "$repo" ]; then
+    printf '%s\n' "$repo"
+    return 0
+  fi
+  if [ -d "$HOME/.arkaos" ]; then
+    printf '%s\n' "$HOME/.arkaos"
+    return 0
+  fi
+  printf '%s\n' "${ARKA_OS:-$HOME/.claude/skills/arkaos}"
+}

package/config/hooks/post-tool-use.ps1

@@ -150,6 +150,14 @@ if ($shouldProcessGotchas -and $null -ne $payload) {
                             $arkaosRootPtu = (Get-Content -Raw -LiteralPath $repoPathFile -Encoding UTF8).Trim()
                         } catch { }
                     }
+                    # .repo-path may point at a purged npx cache — fall through
+                    # to the ~/.arkaos/lib snapshot when core is missing.
+                    if (-not ($arkaosRootPtu -and (Test-Path -LiteralPath (Join-Path $arkaosRootPtu 'core\sync\__init__.py')))) {
+                        $libPtu = Join-Path $env:USERPROFILE '.arkaos\lib'
+                        if (Test-Path -LiteralPath (Join-Path $libPtu 'core\sync\__init__.py')) {
+                            $arkaosRootPtu = $libPtu
+                        }
+                    }
                 }
                 if (-not $arkaosRootPtu) {
                     $arkaosRootPtu = Join-Path $env:USERPROFILE '.arkaos'

package/config/hooks/post-tool-use.sh

@@ -20,7 +20,17 @@
 #   - Hook metrics. Output: JSON to stdout. Timeout: 5s.
 # ============================================================================
 
-if [ -z "${ARKAOS_ROOT:-}" ]; then
+# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
+_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
+if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
+
+# ─── Resolve ARKAOS_ROOT (validated — see arka_resolve_root in _lib) ────
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if command -v arka_resolve_root >/dev/null 2>&1; then
+  ARKAOS_ROOT="$(arka_resolve_root)"
+elif [ -z "${ARKAOS_ROOT:-}" ]; then
+  # Legacy chain (pre-snapshot _lib deployment)
   if [ -f "$HOME/.arkaos/.repo-path" ]; then
     ARKAOS_ROOT=$(cat "$HOME/.arkaos/.repo-path")
   elif [ -d "$HOME/.arkaos" ]; then
@@ -31,10 +41,6 @@ if [ -z "${ARKAOS_ROOT:-}" ]; then
 fi
 export ARKAOS_ROOT
 
-# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
-_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
-if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
-
 if ! command -v "$ARKA_PY" >/dev/null 2>&1; then
   echo '{}'
   exit 0

package/config/hooks/pre-tool-use.ps1

@@ -27,8 +27,17 @@ $transcriptPath = [string]$inp.transcript_path
 $sessionId = [string]$inp.session_id
 $cwd = [string]$inp.cwd
 
-# --- Resolve ARKAOS_ROOT ---
-if ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+# Shared resolver (venv-first, yaml-verified). Mirrors _lib/arka_python.sh.
+$arkaLib = Join-Path $PSScriptRoot "_lib\arka_python.ps1"
+if (Test-Path -LiteralPath $arkaLib) { . $arkaLib }
+
+# --- Resolve ARKAOS_ROOT (validated — see Resolve-ArkaRoot in _lib) ---
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if (Get-Command Resolve-ArkaRoot -ErrorAction SilentlyContinue) {
+    $env:ARKAOS_ROOT = Resolve-ArkaRoot
+} elseif ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+    # Legacy chain (pre-snapshot _lib deployment)
     $repoPathFile = Join-Path $HOME ".arkaos/.repo-path"
     if (Test-Path $repoPathFile) {
         $env:ARKAOS_ROOT = (Get-Content $repoPathFile -Raw).Trim()
@@ -38,10 +47,6 @@ if ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
         $env:ARKAOS_ROOT = if ($env:ARKA_OS) { $env:ARKA_OS } else { Join-Path $HOME ".claude/skills/arkaos" }
     }
 }
-
-# Shared resolver (venv-first, yaml-verified). Mirrors _lib/arka_python.sh.
-$arkaLib = Join-Path $PSScriptRoot "_lib\arka_python.ps1"
-if (Test-Path -LiteralPath $arkaLib) { . $arkaLib }
 $pythonExe = $env:ARKA_PY
 if (-not $pythonExe) { exit 0 }
 

package/config/hooks/pre-tool-use.sh

@@ -22,8 +22,17 @@
 # flags are honored inside the python modules. Timeout: 10s.
 # ============================================================================
 
-# ─── Resolve ARKAOS_ROOT (env → .repo-path → ~/.arkaos → portable) ──────
-if [ -z "${ARKAOS_ROOT:-}" ]; then
+# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
+_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
+if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
+
+# ─── Resolve ARKAOS_ROOT (validated — see arka_resolve_root in _lib) ────
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if command -v arka_resolve_root >/dev/null 2>&1; then
+  ARKAOS_ROOT="$(arka_resolve_root)"
+elif [ -z "${ARKAOS_ROOT:-}" ]; then
+  # Legacy chain (pre-snapshot _lib deployment)
   if [ -f "$HOME/.arkaos/.repo-path" ]; then
     ARKAOS_ROOT=$(cat "$HOME/.arkaos/.repo-path")
   elif [ -d "$HOME/.arkaos" ]; then
@@ -34,10 +43,6 @@ if [ -z "${ARKAOS_ROOT:-}" ]; then
 fi
 export ARKAOS_ROOT
 
-# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
-_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
-if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
-
 # ─── Degrade gracefully (fail open, same as before) ─────────────────────
 if ! command -v "$ARKA_PY" >/dev/null 2>&1; then
   exit 0

package/config/hooks/session-start.ps1

@@ -46,6 +46,16 @@ if (Test-Path -LiteralPath $repoPathFile) {
         }
     } catch { }
 }
+# .repo-path may point at a purged npx cache — the installer's snapshot
+# keeps the drift banner alive ('2.x' is the untouched default above).
+if ($version -eq '2.x') {
+    $libVersionFile = Join-Path $arkaosHome 'lib\VERSION'
+    if (Test-Path -LiteralPath $libVersionFile) {
+        try {
+            $version = (Get-Content -Raw -LiteralPath $libVersionFile -Encoding UTF8).Trim()
+        } catch { }
+    }
+}
 
 # ─── Time greeting ─────────────────────────────────────────────────────
 $hour = [int](Get-Date -Format 'HH')

package/config/hooks/session-start.sh

@@ -22,6 +22,11 @@ if [ -f "$HOME/.arkaos/.repo-path" ]; then
   REPO=$(cat "$HOME/.arkaos/.repo-path")
   [ -f "$REPO/VERSION" ] && VERSION=$(cat "$REPO/VERSION" | tr -d '[:space:]')
 fi
+# .repo-path may point at a purged npx cache — the installer's snapshot
+# keeps the drift banner alive ("2.x" is the untouched default above).
+if [ "$VERSION" = "2.x" ] && [ -f "$HOME/.arkaos/lib/VERSION" ]; then
+  VERSION=$(tr -d '[:space:]' < "$HOME/.arkaos/lib/VERSION")
+fi
 
 # ─── Static greeting (cache-friendly) ──────────────────────────────────
 # Time-of-day branching removed: it invalidated prompt cache 3x/day without

package/config/hooks/stop.ps1

@@ -29,7 +29,15 @@ if ([string]::IsNullOrWhiteSpace($sessionId) -or -not (Test-Path $wfMarker)) {
     exit 0
 }
 
-if ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+# Resolve ARKAOS_ROOT via the validated shared resolver: .repo-path can
+# point at a purged npx cache; fall through to the ~/.arkaos/lib snapshot
+# instead of exporting a dead root.
+$arkaLibEarly = Join-Path $PSScriptRoot "_lib\arka_python.ps1"
+if (Test-Path -LiteralPath $arkaLibEarly) { . $arkaLibEarly }
+if (Get-Command Resolve-ArkaRoot -ErrorAction SilentlyContinue) {
+    $env:ARKAOS_ROOT = Resolve-ArkaRoot
+} elseif ([string]::IsNullOrWhiteSpace($env:ARKAOS_ROOT)) {
+    # Legacy chain (pre-snapshot _lib deployment)
     $repoPathFile = Join-Path $HOME ".arkaos/.repo-path"
     if (Test-Path $repoPathFile) {
         $env:ARKAOS_ROOT = (Get-Content $repoPathFile -Raw).Trim()

package/config/hooks/stop.sh

@@ -22,7 +22,17 @@
 # Timeout: 5s | Always exit 0.
 # ============================================================================
 
-if [ -z "${ARKAOS_ROOT:-}" ]; then
+# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
+_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
+if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
+
+# ─── Resolve ARKAOS_ROOT (validated — see arka_resolve_root in _lib) ────
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if command -v arka_resolve_root >/dev/null 2>&1; then
+  ARKAOS_ROOT="$(arka_resolve_root)"
+elif [ -z "${ARKAOS_ROOT:-}" ]; then
+  # Legacy chain (pre-snapshot _lib deployment)
   if [ -f "$HOME/.arkaos/.repo-path" ]; then
     ARKAOS_ROOT=$(cat "$HOME/.arkaos/.repo-path")
   elif [ -d "$HOME/.arkaos" ]; then
@@ -33,10 +43,6 @@ if [ -z "${ARKAOS_ROOT:-}" ]; then
 fi
 export ARKAOS_ROOT
 
-# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
-_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
-if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
-
 if ! command -v "$ARKA_PY" >/dev/null 2>&1; then
   exit 0
 fi

package/config/hooks/user-prompt-submit.ps1

@@ -80,6 +80,14 @@ try {
                     $arkaosRootUps = (Get-Content -Raw -LiteralPath $repoPathFileUps -Encoding UTF8).Trim()
                 } catch { }
             }
+            # .repo-path may point at a purged npx cache — fall through to
+            # the ~/.arkaos/lib snapshot when the core package is missing.
+            if (-not ($arkaosRootUps -and (Test-Path -LiteralPath (Join-Path $arkaosRootUps 'core\sync\__init__.py')))) {
+                $libUps = Join-Path $env:USERPROFILE '.arkaos\lib'
+                if (Test-Path -LiteralPath (Join-Path $libUps 'core\sync\__init__.py')) {
+                    $arkaosRootUps = $libUps
+                }
+            }
         }
         if (-not $arkaosRootUps) {
             $arkaosRootUps = Join-Path $env:USERPROFILE '.arkaos'
@@ -160,6 +168,16 @@ if ($env:ARKAOS_ROOT) {
         $arkaosRoot = $null
     }
 }
+# .repo-path may point at a purged npx cache — prefer the ~/.arkaos/lib
+# snapshot over a root without the core package (env override untouched).
+if (-not $env:ARKAOS_ROOT) {
+    if (-not ($arkaosRoot -and (Test-Path -LiteralPath (Join-Path $arkaosRoot 'core\sync\__init__.py')))) {
+        $libRoot = Join-Path $arkaosHome 'lib'
+        if (Test-Path -LiteralPath (Join-Path $libRoot 'core\sync\__init__.py')) {
+            $arkaosRoot = $libRoot
+        }
+    }
+}
 if (-not $arkaosRoot) {
     if (Test-Path -LiteralPath $arkaosHome -PathType Container) {
         $arkaosRoot = $arkaosHome

package/config/hooks/user-prompt-submit.sh

@@ -23,7 +23,17 @@
 # Timeout: 10s | Output: JSON to stdout | Target: <100ms
 # ============================================================================
 
-if [ -z "${ARKAOS_ROOT:-}" ]; then
+# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
+_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
+if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
+
+# ─── Resolve ARKAOS_ROOT (validated — see arka_resolve_root in _lib) ────
+# .repo-path can point at a purged npx cache; the shared resolver falls
+# through to the ~/.arkaos/lib snapshot instead of exporting a dead root.
+if command -v arka_resolve_root >/dev/null 2>&1; then
+  ARKAOS_ROOT="$(arka_resolve_root)"
+elif [ -z "${ARKAOS_ROOT:-}" ]; then
+  # Legacy chain (pre-snapshot _lib deployment)
   if [ -f "$HOME/.arkaos/.repo-path" ]; then
     ARKAOS_ROOT=$(cat "$HOME/.arkaos/.repo-path")
   elif [ -d "$HOME/.arkaos" ]; then
@@ -34,10 +44,6 @@ if [ -z "${ARKAOS_ROOT:-}" ]; then
 fi
 export ARKAOS_ROOT
 
-# ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
-_ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
-if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
-
 _ARKA_L0_FALLBACK='{"additionalContext": "[Constitution] NON-NEGOTIABLE: branch-isolation, obsidian-output, authority-boundaries, security-gate, context-first, solid-clean-code, spec-driven, human-writing, squad-routing, full-visibility, sequential-validation, mandatory-qa, arka-supremacy | QUALITY-GATE: marta-cqo, eduardo-copy, francisca-tech-ux | MUST: conventional-commits, test-coverage, pattern-matching, actionable-output, memory-persistence"}'
 
 if ! command -v "$ARKA_PY" >/dev/null 2>&1; then

package/core/cognition/scheduler/daemon.py

@@ -275,11 +275,15 @@ class ArkaScheduler:
         extra_paths = [
             os.path.join(home, ".local", "bin"),
             os.path.join(home, ".arkaos", "bin"),
-            "/usr/local/bin",
         ]
+        if os.name != "nt":
+            extra_paths.append("/usr/local/bin")
         env = os.environ.copy()
-        existing = env.get("PATH", "/usr/bin:/bin")
-        env["PATH"] = ":".join(extra_paths) + ":" + existing
+        existing = env.get("PATH", "" if os.name == "nt" else "/usr/bin:/bin")
+        # os.pathsep is ';' on Windows (where drive-letter entries contain
+        # ':') and ':' on POSIX, so the joined PATH stays valid on both.
+        parts = extra_paths + ([existing] if existing else [])
+        env["PATH"] = os.pathsep.join(parts)
         return env
 
     def _run_attempt(

package/core/forge/orchestrator.py

@@ -23,6 +23,7 @@ from enum import Enum
 from pathlib import Path
 from typing import Optional
 
+from core.shared.temp_paths import arkaos_temp_dir
 from core.forge.schema import (
     ForgeContext,
     ForgePlan,
@@ -361,7 +362,7 @@ class ForgeOrchestrator:
             raise RuntimeError("No active forge plan.")
 
         html = render_html(self._current_plan)
-        path = f"/tmp/forge-{self._current_plan.id}.html"
+        path = str(arkaos_temp_dir(f"forge-{self._current_plan.id}.html"))
         Path(path).write_text(html, encoding="utf-8")
         return path
 

package/core/hooks/_shared.py

@@ -51,21 +51,41 @@ def get_str(data: dict, *keys: str) -> str:
     return str(cur)
 
 
+def _has_core_package(root: str) -> bool:
+    # core/sync/__init__.py distinguishes the full package from the
+    # cognitive scheduler's minimal core/ copy (cognition + workflow only).
+    try:
+        return (Path(root) / "core" / "sync" / "__init__.py").is_file()
+    except OSError:
+        return False
+
+
 def resolve_arkaos_root() -> str:
-    """Resolve ARKAOS_ROOT with the same precedence as the bash hooks.
+    """Resolve ARKAOS_ROOT with the hook wrappers' validated chain.
 
-    env ARKAOS_ROOT → ~/.arkaos/.repo-path → ~/.arkaos → ARKA_OS env →
-    ~/.claude/skills/arkaos (portable fallback).
+    env ARKAOS_ROOT (unconditional operator override) → ~/.arkaos/.repo-path
+    (validated) → ~/.arkaos/lib stable snapshot (validated) → .repo-path
+    even without the core package (legacy VERSION readers) → ~/.arkaos →
+    ARKA_OS env → ~/.claude/skills/arkaos (portable fallback).
+
+    Mirrors arka_resolve_root() in config/hooks/_lib/arka_python.sh;
+    bin/arka-py adds one extra step (its own dev checkout) between
+    .repo-path and the snapshot.
+
+    Validation matters because .repo-path points at an npx cache that
+    `npm cache clean` can purge at any time.
     """
     env_root = os.environ.get("ARKAOS_ROOT", "").strip()
     if env_root:
         return env_root
-    repo_file = Path.home() / ".arkaos" / ".repo-path"
-    if repo_file.is_file():
-        try:
-            return repo_file.read_text(encoding="utf-8").strip()
-        except OSError:
-            pass
+    repo = repo_path()
+    if repo and _has_core_package(repo):
+        return repo
+    lib = Path.home() / ".arkaos" / "lib"
+    if _has_core_package(str(lib)):
+        return str(lib)
+    if repo and Path(repo).is_dir():
+        return repo
     if (Path.home() / ".arkaos").is_dir():
         return str(Path.home() / ".arkaos")
     return os.environ.get(

package/core/hooks/stop.py

@@ -30,6 +30,7 @@ import re
 from datetime import datetime, timezone
 from pathlib import Path
 
+from core.shared.temp_paths import arkaos_temp_dir
 from core.hooks._shared import (
     ensure_root_on_path,
     get_str,
@@ -104,7 +105,7 @@ def _write_tmp_state(subdir: str, safe_sid: str, payload: dict) -> None:
     """Owner-only /tmp state file (umask 0o077 — PR25 v2.46.1)."""
     prev_umask = os.umask(0o077)
     try:
-        state_dir = Path("/tmp") / subdir
+        state_dir = arkaos_temp_dir(subdir)
         state_dir.mkdir(parents=True, exist_ok=True)
         (state_dir / f"{safe_sid}.json").write_text(
             json.dumps(payload), encoding="utf-8"
@@ -220,7 +221,7 @@ def _flow_checks(
         kb_reported = parse_reported_kb(last)
         if safe_sid:
             injected_path = (
-                Path("/tmp/arkaos-kb-injected") / f"{safe_sid}.json"
+                arkaos_temp_dir("arkaos-kb-injected") / f"{safe_sid}.json"
             )
             if injected_path.exists():
                 injected_data = json.loads(
@@ -369,7 +370,7 @@ def main(stdin_json: dict | None = None) -> int:
     _native_usage(transcript_path, session_id, raw)
 
     # Only evaluate sessions where the classifier flagged creation intent.
-    wf_marker = Path("/tmp/arkaos-wf-required") / session_id if session_id else None
+    wf_marker = arkaos_temp_dir("arkaos-wf-required") / session_id if session_id else None
     if wf_marker is None or not safe_session_id(session_id) or not wf_marker.is_file():
         return 0
 

package/core/hooks/user_prompt_submit.py

@@ -36,6 +36,7 @@ import subprocess
 import time
 from pathlib import Path
 
+from core.shared.temp_paths import arkaos_temp_dir
 from core.hooks._shared import (
     ensure_root_on_path,
     get_str,
@@ -45,7 +46,7 @@ from core.hooks._shared import (
     safe_session_id,
 )
 
-_CACHE_DIR = Path("/tmp/arkaos-context-cache")
+_CACHE_DIR = arkaos_temp_dir("arkaos-context-cache")
 _CACHE_TTL = 300  # Constitution cache: 5 minutes
 
 _L0_FALLBACK = (
@@ -282,7 +283,7 @@ def _kb_auto_inject(root: str, user_input: str) -> str:
     project_hash = hashlib.md5(
         root.encode(), usedforsecurity=False
     ).hexdigest()[:12]
-    cache_dir = Path("/tmp") / f"arkaos-kb-{project_hash}"
+    cache_dir = arkaos_temp_dir(f"arkaos-kb-{project_hash}")
     if not cache_dir.is_dir():
         return ""
     try:
@@ -439,7 +440,7 @@ def _wf_mark_required(session_id: str) -> None:
     if safe_session_id(session_id) is None:
         return
     marker_dir = Path(
-        os.environ.get("ARKA_WF_REQUIRED_DIR", "/tmp/arkaos-wf-required")
+        os.environ.get("ARKA_WF_REQUIRED_DIR", str(arkaos_temp_dir("arkaos-wf-required")))
     )
     try:
         marker_dir.mkdir(parents=True, exist_ok=True)
@@ -469,7 +470,7 @@ def _cognitive_hits(session_id: str) -> str:
 
 def _one_shot_nudge(subdir: str, session_id: str) -> str:
     """Read + delete a /tmp/<subdir>/<session>.json nudge state file."""
-    nudge_file = Path("/tmp") / subdir / f"{session_id}.json"
+    nudge_file = arkaos_temp_dir(subdir) / f"{session_id}.json"
     if not nudge_file.is_file():
         return ""
     nudge = ""

package/core/knowledge/indexer.py

@@ -56,7 +56,7 @@ def index_directory(
 
         fhash = file_hash(filepath)
 
-        if skip_indexed and store.is_file_indexed(fhash):
+        if skip_indexed and store.is_file_indexed(str(filepath), fhash):
             skipped += 1
             continue
 

package/core/knowledge/vector_store.py

@@ -347,10 +347,17 @@ class VectorStore:
             for r in rows
         ]
 
-    def is_file_indexed(self, file_hash: str) -> bool:
-        """Check if a file has already been indexed."""
+    def is_file_indexed(self, source: str, file_hash: str) -> bool:
+        """Check if a file (identified by source path + content hash) is indexed.
+
+        The source path is part of the key so identical content in two
+        different locations (e.g. two npx cache directories) each gets
+        indexed — a hash-only check would skip every subsequent cache
+        and leave the new location unsearchable.
+        """
         row = self._db.execute(
-            "SELECT COUNT(*) as cnt FROM chunks WHERE file_hash = ?", (file_hash,)
+            "SELECT COUNT(*) as cnt FROM chunks WHERE source = ? AND file_hash = ?",
+            (source, file_hash),
         ).fetchone()
         return row["cnt"] > 0
 

package/core/runtime/native_usage.py

@@ -33,9 +33,10 @@ from typing import Any
 from core.runtime.llm_cost_telemetry import record_cost
 from core.runtime.pricing import estimate_cost_usd
 from core.shared.safe_session_id import safe_session_id
+from core.shared.temp_paths import arkaos_temp_dir
 
 
-DEFAULT_CURSOR_DIR = Path("/tmp/arkaos-native-cost")
+DEFAULT_CURSOR_DIR = arkaos_temp_dir("arkaos-native-cost")
 
 _USAGE_KEYS = (
     "input_tokens",