arkaos 4.37.0 → 4.39.0

package/README.md

@@ -2,7 +2,7 @@
 
 **The Operating System for AI Agent Teams.**
 
-89 agents. 17 departments. 331 skills. Enterprise frameworks. Multi-runtime. One install.
+89 agents. 17 departments. 332 skills. Enterprise frameworks. Multi-runtime. One install.
 
 ```bash
 npx arkaos install

package/THE-ARKAOS-GUIDE.md

@@ -1,6 +1,6 @@
 # The ArkaOS Guide
 
-> v4.36.0 — 89 agents, 17 departments, 331 skills, 297 commands, 17 ADRs.
+> v4.39.0 — 89 agents, 17 departments, 332 skills, 297 commands, 17 ADRs.
 > One file, everything you need to start. Generated by `scripts/guide_gen.py` — never hand-edited.
 
 ## What it is

package/VERSION

@@ -1 +1 @@
-4.37.0
+4.39.0

package/arka/SKILL.md

@@ -47,7 +47,7 @@ complementary, not alternatives.
 # ArkaOS — Main Orchestrator
 
 > **The Operating System for AI Agent Teams**
-> 89 agents. 17 departments. 331 skills. Multi-runtime. Dashboard. Knowledge RAG.
+> 89 agents. 17 departments. 332 skills. Multi-runtime. Dashboard. Knowledge RAG.
 
 ## ⛔ Evidence flow — 4 gates (NON-NEGOTIABLE)
 

package/config/hooks/cwd-changed.ps1

@@ -2,13 +2,17 @@
 # ArkaOS — CwdChanged Hook (Windows / PowerShell 5.1+)
 #
 # Port of config/hooks/cwd-changed.sh. Fires when the working directory
-# changes. Detects ecosystem and stack so Claude knows which squad and
-# tooling apply to the project.
+# changes. Detects the ecosystem/stack and surfaces them to the operator
+# as a system message.
 #
 # Contract:
 # - Reads a JSON object on stdin with a `cwd` field.
-# - Emits `{"additionalContext": "..."}` on stdout when context is found,
-#   or nothing (and exit 0) when there is nothing to say.
+# - Emits `{"systemMessage": "..."}` on stdout when context is found, or
+#   nothing (and exit 0) when there is nothing to say. CwdChanged's
+#   hookSpecificOutput accepts watchPaths only (Claude Code 2.1.220) —
+#   additionalContext is unreachable on this event. On later prompts the
+#   cwd-reading Synapse layers refresh (git branch, graph context,
+#   knowledge retrieval, cwd-scoped session memory).
 # ============================================================================
 
 $ErrorActionPreference = 'Stop'
@@ -148,5 +152,7 @@ if ($descriptor) {
 }
 
 if ($context) {
-    [pscustomobject]@{ additionalContext = $context } | ConvertTo-Json -Compress
+    # CwdChanged accepts no additionalContext (watchPaths only) — the
+    # top-level systemMessage is the one deliverable surface on this event.
+    [pscustomobject]@{ systemMessage = $context } | ConvertTo-Json -Compress
 }

package/config/hooks/cwd-changed.sh

@@ -1,8 +1,10 @@
 #!/usr/bin/env bash
 # ============================================================================
 # ArkaOS — CwdChanged Hook
-# Fires when the working directory changes. Detects ecosystem and injects
-# project context so Claude knows which squad and stack to use.
+# Fires when the working directory changes. Detects the ecosystem/stack
+# and surfaces a systemMessage naming them (the one deliverable surface
+# on this event — CwdChanged's hookSpecificOutput accepts watchPaths
+# only).
 # ============================================================================
 
 input=$(cat)
@@ -116,7 +118,12 @@ if [ -n "$DESCRIPTOR" ]; then
 fi
 
 if [ -n "$CONTEXT" ]; then
-  # Build the JSON with jq so any quote/backslash in the ecosystem name or
+  # CwdChanged's hookSpecificOutput accepts watchPaths ONLY (Claude Code
+  # 2.1.220 schema) — additionalContext is unreachable on this event. The
+  # top-level systemMessage key IS consumed and surfaced to the operator.
+  # On later prompts the cwd-reading Synapse layers refresh (git branch,
+  # graph context, knowledge retrieval, cwd-scoped session memory).
+  # Built with jq so any quote/backslash in the ecosystem name or
   # descriptor path is escaped, never breaking the envelope (OWASP A03).
-  jq -nc --arg ctx "$CONTEXT" '{additionalContext: $ctx}'
+  jq -nc --arg msg "$CONTEXT" '{systemMessage: $msg}'
 fi

package/config/hooks/session-start.sh

@@ -18,8 +18,32 @@ export ARKA_HOOK_CWD="$_HOOK_CWD"
 _ARKA_LIB="$(dirname "${BASH_SOURCE[0]:-$0}")/_lib/arka_python.sh"
 if [ -f "$_ARKA_LIB" ]; then . "$_ARKA_LIB"; else ARKA_PY="python3"; fi
 
+# ─── Resolve the root via the shared resolver (one root per session) ───
+# Reading .repo-path raw diverged from every other hook: the file points
+# at an npx cache that `npm cache clean` can purge, while
+# arka_resolve_root falls through to the ~/.arkaos/lib snapshot. The
+# chosen root AND source both travel to the entrypoint so the session
+# can name the root it actually ran from ([arka:root]).
 REPO=""
-[ -f "$HOME/.arkaos/.repo-path" ] && REPO=$(cat "$HOME/.arkaos/.repo-path")
+ARKA_ROOT_SOURCE="legacy"
+if command -v arka_resolve_root >/dev/null 2>&1; then
+  [ -n "${ARKAOS_ROOT:-}" ] && ARKA_ROOT_SOURCE="env"
+  REPO="$(arka_resolve_root)"
+  if [ "$ARKA_ROOT_SOURCE" != "env" ]; then
+    if [ -f "$HOME/.arkaos/.repo-path" ] \
+       && [ "$REPO" = "$(cat "$HOME/.arkaos/.repo-path" 2>/dev/null)" ]; then
+      ARKA_ROOT_SOURCE="repo-path"
+    elif [ "$REPO" = "$HOME/.arkaos/lib" ]; then
+      ARKA_ROOT_SOURCE="lib-snapshot"
+    else
+      ARKA_ROOT_SOURCE="fallback"
+    fi
+  fi
+elif [ -f "$HOME/.arkaos/.repo-path" ]; then
+  REPO=$(cat "$HOME/.arkaos/.repo-path")
+fi
+export ARKA_ROOT_SOURCE
+export ARKA_ROOT="$REPO"
 
 # The MODULE file is the guard, not just core/: an older installed
 # snapshot without it would exec into "No module named ..." (exit 1,

package/config/hooks/user-prompt-submit.ps1

@@ -1,17 +1,19 @@
 # ============================================================================
 # ArkaOS v2 - UserPromptSubmit Hook (Synapse Bridge) (Windows / PowerShell 5.1+)
 #
-# Port of config/hooks/user-prompt-submit.sh. Calls the Python Synapse bridge
-# for 8-layer context injection, with a pure-PowerShell fallback for
-# installations where Python is unavailable or the bridge is missing.
+# Port of config/hooks/user-prompt-submit.sh. Calls the Python Synapse
+# bridge for layered context injection, with a pure-PowerShell fallback
+# for installations where Python is unavailable or the bridge is missing.
 #
 # Contract:
 # - Reads a JSON payload from stdin (userInput / message / raw).
 # - Emits a single-line JSON object on stdout:
-#       {"additionalContext": "<sync-notice><synapse-or-fallback>"}
+#       {"hookSpecificOutput": {"hookEventName": "UserPromptSubmit",
+#        "additionalContext": "<sync-notice><route-reminder> <synapse-or-fallback>"}}
+#   (a top-level additionalContext key is ignored by Claude Code)
 # - Side effect: writes one line to the cache metrics JSONL.
 #
-# Target latency: <100ms (hook timeout is 10s in settings).
+# Target latency: <100ms (hook timeout is 20s in settings).
 #
 # File is pure ASCII. Any typographic characters that need to appear in the
 # output are built from [char] codes at runtime so PS 5.1's default ANSI
@@ -54,7 +56,7 @@ if (-not $v2Installed) {
     foreach ($v1 in $v1Paths) {
         if ((Test-Path -LiteralPath $v1 -PathType Container) -and -not (Test-Path -LiteralPath $migrationMarker)) {
             $msg = "[MIGRATION] ArkaOS v1 detected at $v1. Run: npx arkaos migrate - This will backup v1, preserve your data, and install v2. See: https://github.com/andreagroferreira/arka-os#install"
-            [pscustomobject]@{ additionalContext = $msg } | ConvertTo-Json -Compress
+            [pscustomobject]@{ hookSpecificOutput = [pscustomobject]@{ hookEventName = 'UserPromptSubmit'; additionalContext = $msg } } | ConvertTo-Json -Compress -Depth 4
             exit 0
         }
     }
@@ -336,7 +338,7 @@ $routeReminder = '[arka:route] Every response MUST route through a department sq
 
 # --- Output ----------------------------------------------------------------
 $additionalContext = "$syncNotice$routeReminder $pythonResult"
-[pscustomobject]@{ additionalContext = $additionalContext } | ConvertTo-Json -Compress
+[pscustomobject]@{ hookSpecificOutput = [pscustomobject]@{ hookEventName = 'UserPromptSubmit'; additionalContext = $additionalContext } } | ConvertTo-Json -Compress -Depth 4
 
 # --- Metrics (JSONL append) ------------------------------------------------
 $elapsed = [int]$sw.ElapsedMilliseconds

package/config/hooks/user-prompt-submit.sh

@@ -20,7 +20,8 @@
 #   - One-shot nudges (KB-cite, meta-tag, closing-marker) gated by
 #     effort level; cognitive context injection.
 #
-# Timeout: 10s | Output: JSON to stdout | Target: <100ms
+# Timeout: 20 s (in-hook budget ARKA_UPS_BUDGET_MS, default 6000 ms)
+# Output: JSON to stdout | Target: <100ms
 # ============================================================================
 
 # ─── Shared Python resolver (exports ARKA_PY) ──────────────────────────
@@ -44,7 +45,7 @@ elif [ -z "${ARKAOS_ROOT:-}" ]; then
 fi
 export ARKAOS_ROOT
 
-_ARKA_L0_FALLBACK='{"additionalContext": "[Constitution] NON-NEGOTIABLE: branch-isolation, security-gate, mandatory-qa, evidence-flow, arkaos-not-yes-man, excellence-mandate | QUALITY-GATE: marta-cqo, eduardo-copy, francisca-tech-ux | MUST (28) incl.: squad-routing, spec-driven, conventional-commits, test-coverage, subagent-discipline, persona-vs-artifact"}'
+_ARKA_L0_FALLBACK='{"hookSpecificOutput": {"hookEventName": "UserPromptSubmit", "additionalContext": "[Constitution] NON-NEGOTIABLE: branch-isolation, security-gate, mandatory-qa, evidence-flow, arkaos-not-yes-man, excellence-mandate | QUALITY-GATE: marta-cqo, eduardo-copy, francisca-tech-ux | MUST (28) incl.: squad-routing, spec-driven, conventional-commits, test-coverage, subagent-discipline, persona-vs-artifact"}}'
 
 # Test seam: bats asserts the fallback CONTENT deterministically —
 # the shared resolver overwrites ARKA_PY, so an env flag is the only

package/config/settings-template.json

@@ -25,7 +25,7 @@
           {
             "type": "command",
             "command": "{{HOOKS_DIR}}/user-prompt-submit.sh",
-            "timeout": 10
+            "timeout": 20
           }
         ]
       }

package/config/skills-curated.yaml

@@ -24,8 +24,8 @@ curated_subskills:
   community: [moderation]
   content: [calendar, hook-write]
   dev: [api-design, architecture-design, clean-code-review, code-review,
-        db-design, diagram, refactor-plan, runbook, security-audit, spec,
-        tdd-cycle, watch]
+        db-design, diagram, refactor-plan, runbook, scroll-world,
+        security-audit, spec, tdd-cycle, watch]
   ecom: [cart-recovery, store-audit]
   finance: [financial-model, unit-economics]
   kb: [search-kb, zettelkasten-process]

package/config/skills-provenance.yaml

@@ -91,6 +91,13 @@ derived:
     origin: community
     source: https://github.com/nutlope/hallmark
     license: MIT
+  # Scroll-world — scroll-scrubbed "fly through the world" landing pages
+  # (Higgsfield pipeline + portable scrub engine), vendored verbatim with
+  # ArkaOS frontmatter; THIRD-PARTY-NOTICES records the trail.
+  departments/dev/skills/scroll-world:
+    origin: community
+    source: https://github.com/oso95/scroll-world
+    license: MIT
   # Watch absorption campaign — video-input primitive derived from
   # bradautomates/claude-video v0.2.0 (MIT), maintained natively.
   departments/dev/skills/watch:

package/core/governance/evidence_checks.py

@@ -390,24 +390,54 @@ def _foreign_pytest_can_collect(
     return probe.returncode in (0, 5)
 
 
+def _degrade_pytest_no_tests(result: CheckResult) -> CheckResult:
+    """Map pytest exit 5 (no tests collected) to insufficient evidence.
+
+    A bare ``pytest`` in a Python project that ships no tests exits 5.
+    Absence of tests is not evidence of FAILURE, yet ``passed =
+    returncode == 0`` read exit 5 as FAIL and ``_derive_overall`` then
+    forced REJECTED at the QG (issue #354). ``_foreign_pytest_can_collect``
+    already treats exit 5 as a valid import path — this keeps that
+    precedent for the verdict: exit 5 becomes ``passed=None``
+    (non-conclusive), never ``False``.
+    """
+    if result.exit_code != 5:
+        return result
+    prefix = "no tests collected (pytest exit 5) — insufficient evidence; "
+    return replace(result, passed=None, summary=prefix + result.summary)
+
+
 def _check_tests(
     project_dir: Path, changed: list[str] | None,
     test_command: str | None, timeout: int,
 ) -> CheckResult:
     if test_command:
-        return _run("tests", shlex.split(test_command), project_dir, timeout)
+        argv = shlex.split(test_command)
+        result = _run("tests", argv, project_dir, timeout)
+        # exit 5 is pytest's "no tests collected"; scan the first 3
+        # tokens so `python -m pytest` / `arka-py -m pytest` degrade too,
+        # while non-pytest runners (npm test) stay a real FAIL. Bounded to
+        # argv[:3] so a later test-path arg named *pytest* never matches
+        # (issue #354).
+        if any("pytest" in Path(tok).name for tok in argv[:3]):
+            return _degrade_pytest_no_tests(result)
+        return result
     if _has_python(project_dir, changed):
         local_pytest = _project_pytest(project_dir)
         if local_pytest:
             return _labelled(
-                _run("tests", [*local_pytest, "-q"], project_dir, timeout),
+                _degrade_pytest_no_tests(
+                    _run("tests", [*local_pytest, "-q"], project_dir, timeout),
+                ),
                 "tests(project-venv)",
             )
         pytest_cmd = _tool_cmd("pytest")
         if pytest_cmd and _foreign_pytest_can_collect(
             pytest_cmd, project_dir, timeout
         ):
-            return _run("tests", [*pytest_cmd, "-q"], project_dir, timeout)
+            return _degrade_pytest_no_tests(
+                _run("tests", [*pytest_cmd, "-q"], project_dir, timeout),
+            )
         if pytest_cmd:
             return _skip(
                 "tests",