arkaos 5.11.0 → 5.13.0

package/THE-ARKAOS-GUIDE.md

@@ -1,6 +1,6 @@
 # The ArkaOS Guide
 
-> v5.10.0 — 89 agents, 17 departments, 340 skills, 306 commands, 20 ADRs.
+> v5.13.0 — 89 agents, 17 departments, 340 skills, 306 commands, 20 ADRs.
 > One file, everything you need to start. Generated by `scripts/guide_gen.py` — never hand-edited.
 
 ## What it is

package/VERSION

@@ -1 +1 @@
-5.11.0
+5.13.0

package/bin/arka-py.ps1

@@ -25,7 +25,22 @@ $libs = @(
 foreach ($lib in $libs) {
     if (Test-Path -LiteralPath $lib) { . $lib; break }
 }
-if (-not $env:ARKA_PY) { $env:ARKA_PY = "python" }
+# Empty/unset means one of two things: the shared resolver was not found at
+# all, or it WAS found and deliberately handed back nothing because every
+# candidate is a Microsoft Store App Execution Alias. A blind `= "python"`
+# here cannot tell those apart, and on a stock Windows box it picks the
+# alias — running the Python install manager, which downloads a full CPython
+# into the caller's cwd. Probe once more, alias-aware, then fail loudly.
+if (-not $env:ARKA_PY) {
+    $fallback = Get-Command python -ErrorAction SilentlyContinue
+    if ($fallback -and $fallback.Source -notmatch '\\Microsoft\\WindowsApps\\') {
+        $env:ARKA_PY = $fallback.Source
+    } else {
+        [Console]::Error.WriteLine(
+            "arka-py: no usable Python interpreter on PATH (none found, or only Store aliases) - run npx arkaos doctor")
+        exit 1
+    }
+}
 
 # ─── Make `-m core.*` resolvable regardless of cwd ────────────────────────
 $root = $env:ARKAOS_ROOT

package/config/hooks/_lib/arka_python.ps1

@@ -8,8 +8,69 @@
 # Resolution order:
 #   1. $env:ARKAOS_PYTHON (explicit override), if it exists.
 #   2. The ArkaOS venv — Scripts\python.exe (Windows) then bin/python.
-#   3. Any python3/python/py on PATH that can `import yaml`.
-#   4. Bare `python` as a last resort.
+#   3. Any python/py/python3 on PATH that can `import yaml`, in THAT order
+#      (see the comment on the probe loop), skipping the Microsoft Store
+#      App Execution Aliases (see Test-StoreAlias).
+#   4. `python` as a last resort — but '' when that name is a Store alias
+#      too, because a caller cannot tell an alias from an interpreter and
+#      would run it (see Get-ArkaPythonLastResort).
+
+function Test-StoreAlias {
+    <#
+    .SYNOPSIS
+        True when a resolved command is a Microsoft Store App Execution Alias.
+
+    .DESCRIPTION
+        %LOCALAPPDATA%\Microsoft\WindowsApps holds zero-length reparse points
+        that Get-Command resolves like any other executable. On a default
+        Windows install `python3.exe` there points at the Python install
+        manager, and *running* it — which the probe below does, with
+        `-c "import yaml"` — makes the manager download and install a full
+        CPython into the current working directory.
+
+        For a hook that is a catastrophic side effect: the cwd is the user's
+        project, so a background hook silently drops a ~3700-file Python/
+        tree and a python_install_<timestamp>.log into their repo. Observed
+        on Windows 10, Python install manager 26.3.
+
+        Probing an alias can never help anyway. Either the manager installs
+        a CPython and the probe measures THAT interpreter — a fresh install
+        with no pyyaml, so `import yaml` fails and the candidate is rejected
+        after paying the full cost — or the install is declined and the stub
+        exits without ever running the check. There is no path where probing
+        the alias answers the question it was asked.
+    #>
+    param([string]$Path)
+    if ([string]::IsNullOrWhiteSpace($Path)) { return $false }
+    return $Path -match '\\Microsoft\\WindowsApps\\'
+}
+
+function Get-ArkaPythonLastResort {
+    <#
+    .SYNOPSIS
+        The interpreter to hand back when no probed candidate answered, or
+        '' when the only name left is a Store alias.
+
+    .DESCRIPTION
+        Extracted from Resolve-ArkaPython so the branch is reachable from a
+        test: in place it sits behind a probe that matches on any machine
+        with a working interpreter.
+
+        Returning the bare string "python" from here was the hole in this
+        file's own guard. Every caller gates on `-and $env:ARKA_PY`, and any
+        non-empty string is truthy in PowerShell, so an aliased "python"
+        passed the gate and was then run — the exact install-manager side
+        effect Test-StoreAlias exists to prevent, arriving through the
+        fallback instead of the probe. '' is the only value that makes the
+        callers degrade, so '' is what a box with nothing but aliases gets.
+
+        Mirror of arka_python_last_resort() in arka_python.sh.
+    #>
+    param([string]$Name = "python")
+    $cmd = Get-Command $Name -ErrorAction SilentlyContinue
+    if ($cmd -and -not (Test-StoreAlias $cmd.Source)) { return $cmd.Source }
+    return ""
+}
 
 function Resolve-ArkaPython {
     if ($env:ARKAOS_PYTHON -and (Test-Path -LiteralPath $env:ARKAOS_PYTHON)) {
@@ -29,15 +90,17 @@ function Resolve-ArkaPython {
         }
     }
 
-    foreach ($name in @("python3", "python", "py")) {
+    # "python" before "python3": on Windows a real interpreter answers to
+    # the former, while the latter is usually only the Store alias.
+    foreach ($name in @("python", "py", "python3")) {
         $cmd = Get-Command $name -ErrorAction SilentlyContinue
-        if ($cmd) {
+        if ($cmd -and -not (Test-StoreAlias $cmd.Source)) {
             & $cmd.Source -c "import yaml" 2>$null
             if ($LASTEXITCODE -eq 0) { return $cmd.Source }
         }
     }
 
-    return "python"
+    return (Get-ArkaPythonLastResort)
 }
 
 # Windows mirror of arka_resolve_root() in arka_python.sh: env override wins

package/config/hooks/_lib/arka_python.sh

@@ -10,7 +10,9 @@
 # Contract of arka_resolve_python():
 #   Echoes the interpreter path and returns 0 when a provisioned ArkaOS
 #   interpreter is found; echoes a best-effort fallback and returns 1 when
-#   only a bare `python3` remains (caller degrades gracefully).
+#   only a bare `python3` remains (caller degrades gracefully). Echoes
+#   NOTHING and returns 1 when every remaining candidate is a Microsoft
+#   Store App Execution Alias — see arka_python_last_resort().
 #
 # Resolution order:
 #   1. $ARKAOS_PYTHON (explicit operator override), if executable.
@@ -18,7 +20,39 @@
 #      python3. `[ -x ]` follows symlinks, so a Homebrew-rotated broken
 #      symlink is skipped automatically.
 #   3. Any python3 on PATH / known locations that can `import yaml`.
-#   4. Bare `python3` as a last resort (return 1).
+#   4. Bare `python3` as a last resort (return 1), or nothing at all when
+#      that name — and `python` behind it — is only a Store alias.
+
+# Last-resort name selection, extracted from arka_resolve_python() so the
+# branch is reachable from a test: in place it sits behind a PATH probe
+# that matches on every POSIX box with a yaml-capable python3, so it can
+# only be exercised on the machine it was written for.
+#
+# Contract: echoes the name to hand back, or NOTHING when every remaining
+# candidate is a Store alias. Empty is the point, not an oversight. The
+# callers gate on `command -v "$ARKA_PY"` and an alias stub PASSES that
+# gate — the file is real, it is just the Python install manager rather
+# than an interpreter — so the only value that degrades a hook instead of
+# downloading a CPython into the user's project is no value at all.
+arka_python_last_resort() {
+  local py3 py
+  py3="$(command -v python3 2>/dev/null)"
+  case "$py3" in
+    *[Ww]indows[Aa]pps*) ;;
+    # Absent or real: the documented `python3` contract, unchanged. POSIX
+    # never reaches the alias branch below.
+    *) printf '%s\n' "python3"; return 0 ;;
+  esac
+
+  # `python3` is the alias. On a Windows box that HAS a real interpreter,
+  # `python` is the name it answers to; on a stock box with none, that is
+  # an alias too and we must hand back nothing.
+  py="$(command -v python 2>/dev/null)"
+  case "$py" in
+    "" | *[Ww]indows[Aa]pps*) return 0 ;;
+  esac
+  printf '%s\n' "python"
+}
 
 arka_resolve_python() {
   local cand
@@ -28,25 +62,46 @@ arka_resolve_python() {
     return 0
   fi
 
+  # Scripts/python.exe is the Windows venv layout. Without it, a Git-Bash
+  # hook on Windows never matches the venv and always falls through to the
+  # PATH probe below -- which is where the Store alias lives.
   for cand in \
       "$HOME/.arkaos/venv/bin/python" \
       "$HOME/.arkaos/venv/bin/python3" \
+      "$HOME/.arkaos/venv/Scripts/python.exe" \
       "$HOME/.arkaos/.venv/bin/python" \
-      "$HOME/.arkaos/.venv/bin/python3"; do
+      "$HOME/.arkaos/.venv/bin/python3" \
+      "$HOME/.arkaos/.venv/Scripts/python.exe"; do
     if [ -x "$cand" ]; then
       printf '%s\n' "$cand"
       return 0
     fi
   done
 
-  for cand in python3 /opt/homebrew/bin/python3 /usr/local/bin/python3 /usr/bin/python3; do
-    if command -v "$cand" >/dev/null 2>&1 && "$cand" -c "import yaml" >/dev/null 2>&1; then
+  # Never probe a Microsoft Store App Execution Alias: under Git Bash on
+  # Windows `command -v python3` resolves to .../Microsoft/WindowsApps/
+  # python3, which is the Python install manager, not an interpreter. The
+  # `import yaml` check RUNS each candidate, and running that one installs
+  # a CPython into the current working directory -- the user's project, for
+  # a hook. It could not have succeeded anyway: an alias stub carries no
+  # site packages. On POSIX nothing ever matches that path: pure no-op.
+  #
+  # `python` is LAST on purpose. On Windows it is the only real interpreter
+  # left once the alias is filtered out; on POSIX one of the entries before
+  # it always matches first, so an old box where `python` is Python 2 keeps
+  # resolving exactly as it does today.
+  for cand in python3 /opt/homebrew/bin/python3 /usr/local/bin/python3 /usr/bin/python3 python; do
+    case "$(command -v "$cand" 2>/dev/null)" in
+      "") continue ;;
+      *[Ww]indows[Aa]pps*) continue ;;
+    esac
+    if "$cand" -c "import yaml" >/dev/null 2>&1; then
       printf '%s\n' "$cand"
       return 0
     fi
   done
 
-  printf '%s\n' "python3"
+  arka_python_last_resort
   return 1
 }
 

package/config/hooks/_lib/workflow-classifier.sh

@@ -3,7 +3,13 @@
 # ArkaOS v2 — Shared Workflow Classifier
 #
 # Decides whether a user prompt triggers the 4-gate evidence flow.
-# Used by: user-prompt-submit.sh, pre-tool-use.sh, stop.sh.
+#
+# CLI AND TEST SURFACE ONLY — no hook sources this file. The runtime path
+# is core/hooks/user_prompt_submit.py, which user-prompt-submit.sh execs;
+# these functions survive as the documented CLI (see the dispatcher at the
+# bottom) and as the bash half of the parity contract. That is precisely
+# why the two implementations must be diffed by hand: nothing at runtime
+# will ever notice them disagreeing.
 #
 # Contract:
 #   arka_wf_classify "<prompt text>"  → echoes "true" or "false", exits 0.
@@ -11,9 +17,11 @@
 #   arka_wf_is_required "<session_id>"  → exits 0 if required, 1 otherwise.
 #   arka_wf_clear_required "<session_id>"  → removes marker file.
 #
-# Markers live under /tmp/arkaos-wf-required/<session_id>.
-# Python path for mark/clear: delegates to flow_enforcer.py when available,
-# otherwise falls back to touching the marker file directly.
+# Markers live under $ARKA_WF_REQUIRED_DIR/<session_id>, defaulting to
+# /tmp/arkaos-wf-required (see below). The override is the seam that keeps
+# writer and reader on the same directory — core/shared/temp_paths.py
+# ::wf_required_dir is the Python side of it. mark/clear here write the
+# marker file directly; they do NOT call flow_enforcer.py.
 # ============================================================================
 
 ARKA_WF_REQUIRED_DIR="${ARKA_WF_REQUIRED_DIR:-/tmp/arkaos-wf-required}"
@@ -40,6 +48,13 @@ arka_wf_safe_session_id() {
 # missed prompts were short continuations ("continua", "força") or
 # ship-tier verbs ("ship", "publish", "merge", "release", "deploy")
 # that prolong existing flow-required activity.
+# Keep in sync with _WF_QUESTION_LEAD_PATTERN in core/hooks/
+# user_prompt_submit.py. Interrogative-led prompts ending in "?" are
+# information questions, not creation intent, even when they contain an
+# action verb ("o que e que este projeto faz?"). Polite requests ("podes
+# implementar X?") keep matching: their lead word is not interrogative.
+ARKA_WF_QUESTION_LEAD='^[[:space:]]*(o[[:space:]]+que|porqu[eê]|por[[:space:]]+que|para[[:space:]]+que|qual|quais|quando|onde|quem|como|what|why|which|who|whose|when|where|how|does)\b'
+
 ARKA_WF_VERB_PATTERN='(criar?|crie[ms]?|cria[mr]?|adicionar?|adiciona[mr]?|implementar?|implementa[mr]?|desenvolver?|desenvolve[mr]?|construir?|constru[ií]a?[mr]?|fazer?|faz[ae]?[mr]?|refactor(izar?)?|corrigir?|corrige[mr]?|consertar?|conserta[mr]?|continuar?|continua[mr]?|forçar?|força[mr]?|colocar?|coloca[mr]?|p[oô]r|melhorar?|melhora[mr]?|terminar?|termina[mr]?|acabar?|acaba[mr]?|publicar?|publica[mr]?|lançar?|lança[mr]?|create[sd]?|creating|build(s|ing)?|add(s|ed|ing)?|implement(s|ed|ing)?|develop(s|ed|ing)?|fix(es|ed|ing)?|refactor(s|ed|ing)?|make[sd]?|making|continue[sd]?|continuing|ship(s|ped|ping)?|merge[sd]?|merging|publish(es|ed|ing)?|release[sd]?|releasing|deploy(s|ed|ing)?|finish(es|ed|ing)?|improve[sd]?|improving)'
 
 # Classify: returns "true" if the prompt looks like a creation/
@@ -56,6 +71,30 @@ arka_wf_classify() {
     return 0
   fi
 
+  # Question guard: interrogative lead + trailing "?" = information
+  # question, never creation intent (X5 false positive).
+  #
+  # The lead is taken from the FIRST NON-BLANK LINE, never from the whole
+  # text. The Python twin uses re.match on text.strip(), which can only
+  # match at offset 0; grep anchors ^ PER LINE, so feeding it everything
+  # made any later line able to trigger the guard. The two then disagreed
+  # on every multi-line prompt ending in a question — "implementa X\no que
+  # e que isto faz?" is a directive followed by a question, and a directive
+  # still requires the flow. awk reproduces .strip() closely enough for an
+  # anchor that already tolerates leading whitespace: skip blank lines,
+  # print the first line with content, stop.
+  local trimmed lead
+  trimmed=$(printf '%s' "$text" | sed 's/[[:space:]]*$//')
+  case "$trimmed" in
+    *\?)
+      lead=$(printf '%s' "$text" | awk 'NF { print; exit }')
+      if printf '%s' "$lead" | grep -qiE "$ARKA_WF_QUESTION_LEAD"; then
+        echo "false"
+        return 0
+      fi
+      ;;
+  esac
+
   if echo "$text" | grep -qiE "\b${ARKA_WF_VERB_PATTERN}\b"; then
     echo "true"
   else

package/config/hooks/post-tool-use.ps1

@@ -203,9 +203,16 @@ if ($shouldProcessGotchas -and $null -ne $payload) {
                 if (Test-Path -LiteralPath $venvPy) {
                     $pythonForMarker = $venvPy
                 } else {
-                    foreach ($cmd in 'python3','python','py') {
+                    # Never accept %LOCALAPPDATA%\Microsoft\WindowsApps: the
+                    # python3.exe there is the Store install-manager alias,
+                    # and running it downloads a full CPython into the cwd —
+                    # which for a hook is the user's own project directory.
+                    # Same reason "python" is tried before "python3" here.
+                    foreach ($cmd in 'python','py','python3') {
                         $resolved = Get-Command $cmd -ErrorAction SilentlyContinue
-                        if ($resolved) { $pythonForMarker = $resolved.Source; break }
+                        if ($resolved -and $resolved.Source -notmatch '\\Microsoft\\WindowsApps\\') {
+                            $pythonForMarker = $resolved.Source; break
+                        }
                     }
                 }
                 if ($pythonForMarker) {

package/config/hooks/session-start.ps1

@@ -1,121 +1,96 @@
 # ============================================================================
-# ArkaOS — SessionStart Hook (Windows / PowerShell 5.1+)
+# ArkaOS - SessionStart Hook (Windows / PowerShell 5.1+)
 #
-# Port of config/hooks/session-start.sh. Must remain behaviourally identical:
-# - Same profile lookup, time-based greeting, version-drift detection.
-# - Same JSON output contract: {"systemMessage": "<...>"} on stdout.
+# Thin wrapper - mirror of config/hooks/session-start.sh. ONE python process
+# (core.hooks.session_start) builds the whole payload: the visible banner in
+# "systemMessage" AND the operating contracts in
+# hookSpecificOutput.additionalContext. This file only resolves the
+# interpreter and delegates; whenever it cannot reach that producer — no
+# repo root, no module file, no interpreter, or the module itself exiting
+# non-zero — it emits a static banner and exits 0 (fail-open,
+# dependency-free).
+#
+# WHY A WRAPPER AND NOT A PORT
+# The previous version reimplemented the banner natively in PowerShell. It
+# was a faithful port of the *older* .sh, from the era when the .sh built the
+# banner in bash. When the .sh became a thin wrapper delegating to Python,
+# this file did not follow - so on Windows the four contract blocks
+# (EVIDENCE-FLOW, META-TAG, AUTHORITY, MODEL-FABRIC) were computed by nobody
+# and never reached the model, while the Linux side got them every session.
+# Reimplementing the blocks here would duplicate the producer and recreate
+# the same drift one release later, so this file delegates instead. The
+# twin-parity test in tests/python/test_hook_output_contract.py is what
+# holds that open: it asserts both wrappers run `-m core.hooks
+# .session_start`, and fails if either stops.
 #
 # Minimum PowerShell: 5.1 (shipped with every Windows 10+). No pwsh 7 prereq.
-# Box-drawing characters are built from [char] codes so this file stays pure
-# ASCII and avoids source-encoding pitfalls with PS 5.1 default ANSI reads.
+# This file stays pure ASCII; every non-ASCII byte in the output comes from
+# Python's UTF-8 stdout, which is why the encoding setup below is required.
 # ============================================================================
 
-$ErrorActionPreference = 'Stop'
-# Force UTF-8 on stdout so ConvertTo-Json does not emit mojibake box chars.
-[Console]::OutputEncoding = [System.Text.UTF8Encoding]::new($false)
+$ErrorActionPreference = 'SilentlyContinue'
 
-$arkaosHome = Join-Path $env:USERPROFILE '.arkaos'
+# Captured BEFORE any location change - inside a compound command the CWD
+# would resolve after the push (QG blocker F1-A3: cross-project leak).
+$env:ARKA_HOOK_CWD = (Get-Location).Path
 
-# ─── Profile ───────────────────────────────────────────────────────────
-$name    = 'founder'
-$company = 'WizardingCode'
-$version = '2.x'
+# Force UTF-8 on both sides of the pipe. Python emits UTF-8; without this
+# PS 5.1 decodes it as the ANSI codepage (cp1252 on pt-PT/pt-BR machines)
+# and the banner arrives as mojibake - the failure mode tracked in #395/#396.
+# PYTHONIOENCODING covers the producer, OutputEncoding the consumer.
+[Console]::OutputEncoding = [System.Text.UTF8Encoding]::new($false)
+$env:PYTHONIOENCODING = 'utf-8'
 
-$profilePath = Join-Path $arkaosHome 'profile.json'
-if (Test-Path -LiteralPath $profilePath) {
-    try {
-        # $profile is an automatic variable in PowerShell — use $arkaosProfile.
-        $arkaosProfile = Get-Content -Raw -LiteralPath $profilePath -Encoding UTF8 | ConvertFrom-Json
-        if ($arkaosProfile.name)      { $name    = [string]$arkaosProfile.name }
-        elseif ($arkaosProfile.role)  { $name    = [string]$arkaosProfile.role }
-        if ($arkaosProfile.company)   { $company = [string]$arkaosProfile.company }
-    } catch {
-        # Corrupt profile — keep defaults and continue.
-    }
-}
+# --- Shared Python resolver (sets $env:ARKA_PY, provides Resolve-ArkaRoot) ---
+$arkaLib = Join-Path $PSScriptRoot '_lib\arka_python.ps1'
+if (Test-Path -LiteralPath $arkaLib) { . $arkaLib }
 
-$repoPathFile = Join-Path $arkaosHome '.repo-path'
-if (Test-Path -LiteralPath $repoPathFile) {
-    try {
+# --- Resolve the repo root ---
+# .repo-path can point at a purged npx cache; Resolve-ArkaRoot falls through
+# to the ~/.arkaos/lib snapshot instead of returning a dead root.
+$repo = ''
+if (Get-Command Resolve-ArkaRoot -ErrorAction SilentlyContinue) {
+    $repo = Resolve-ArkaRoot
+} else {
+    $repoPathFile = Join-Path $HOME '.arkaos/.repo-path'
+    if (Test-Path -LiteralPath $repoPathFile) {
         $repo = (Get-Content -Raw -LiteralPath $repoPathFile -Encoding UTF8).Trim()
-        if ($repo) {
-            $versionFile = Join-Path $repo 'VERSION'
-            if (Test-Path -LiteralPath $versionFile) {
-                $version = (Get-Content -Raw -LiteralPath $versionFile -Encoding UTF8).Trim()
-            }
-        }
-    } catch { }
-}
-# .repo-path may point at a purged npx cache — the installer's snapshot
-# keeps the drift banner alive ('2.x' is the untouched default above).
-if ($version -eq '2.x') {
-    $libVersionFile = Join-Path $arkaosHome 'lib\VERSION'
-    if (Test-Path -LiteralPath $libVersionFile) {
-        try {
-            $version = (Get-Content -Raw -LiteralPath $libVersionFile -Encoding UTF8).Trim()
-        } catch { }
     }
 }
 
-# ─── Time greeting ─────────────────────────────────────────────────────
-$hour = [int](Get-Date -Format 'HH')
-if     ($hour -ge 5  -and $hour -lt 12) { $greeting = 'Bom dia' }
-elseif ($hour -ge 12 -and $hour -lt 19) { $greeting = 'Boa tarde' }
-else                                     { $greeting = 'Boa noite' }
+# The MODULE file is the guard, not just core/: an older installed snapshot
+# without it would delegate into "No module named ..." (exit 1, empty output
+# - a broken SessionStart instead of a degraded banner).
+$moduleFile = if ($repo) { Join-Path $repo 'core/hooks/session_start.py' } else { '' }
 
-# ─── Version drift ─────────────────────────────────────────────────────
-$drift = ''
-$syncStatePath = Join-Path $arkaosHome 'sync-state.json'
-if (Test-Path -LiteralPath $syncStatePath) {
+if ($repo -and $moduleFile -and (Test-Path -LiteralPath $moduleFile) -and $env:ARKA_PY) {
+    $env:PYTHONPATH = $repo
+    Push-Location -LiteralPath $repo
     try {
-        $syncState = Get-Content -Raw -LiteralPath $syncStatePath -Encoding UTF8 | ConvertFrom-Json
-        $synced = if ($null -ne $syncState.version) { [string]$syncState.version } else { 'none' }
-        if ($synced -ne $version) {
-            $drift = "`n[arka:update-available] Core v$version != synced v$synced. Run /arka update."
-        }
+        & $env:ARKA_PY -m core.hooks.session_start
+        if ($LASTEXITCODE -eq 0) { Pop-Location; exit 0 }
     } catch {
-        $drift = "`n[arka:update-available] Sync state unreadable. Run /arka update."
+        # fall through to the degraded banner
     }
-} else {
-    $drift = "`n[arka:update-available] Never synced. Run /arka update."
-}
-
-# ─── Build ASCII header from char codes ───────────────────────────────
-$tl  = [char]0x2554  # ╔
-$tr  = [char]0x2557  # ╗
-$bl  = [char]0x255A  # ╚
-$br  = [char]0x255D  # ╝
-$h   = [char]0x2550  # ═
-$v   = [char]0x2551  # ║
-$bar = [string]($h.ToString() * 46)
-
-$topLine    = "$tl$bar$tr"
-$bottomLine = "$bl$bar$br"
-$empty      = "$v" + (' ' * 46) + "$v"
-function Pad-Line([string]$text) {
-    $innerWidth = 46
-    $padLeft  = [int](($innerWidth - $text.Length) / 2)
-    $padRight = $innerWidth - $text.Length - $padLeft
-    return "$v" + (' ' * $padLeft) + $text + (' ' * $padRight) + "$v"
+    Pop-Location
 }
 
-$lines = @(
-    $topLine
-    $empty
-    (Pad-Line 'A R K A   O S')
-    $empty
-    (Pad-Line 'The Operating System for AI Teams')
-    (Pad-Line 'by WizardingCode')
-    $empty
-    $bottomLine
-    ''
-    "$greeting, $name ($company)"
-    # Counts intentionally omitted (prompt-surface P0 2026-07-08): hand-typed
-    # numbers drift from docs_stats.py truth and change no model behavior.
-    "ArkaOS v$version$drift"
-)
-
-$msg = "`n" + ($lines -join "`n")
-
-# ─── Output as systemMessage JSON (single line, same contract as .sh) ──
-[pscustomobject]@{ systemMessage = $msg } | ConvertTo-Json -Compress
+# --- Degraded fallback: static banner, valid JSON, exit 0 ------------------
+# Same contract as the .sh fallback. Built from [char] codes so this source
+# file needs no particular encoding to produce correct output.
+#
+# The message names the SYMPTOM, not a cause. Four conditions reach this
+# line (see the guard above) and only one of them is a missing interpreter;
+# the fourth — the module running and exiting non-zero — asserts the
+# opposite. The .sh twin execs, so its fallback is unreachable once an
+# interpreter is launched and the narrower wording survived there; this
+# port falls through on $LASTEXITCODE, which is what made it false. Sending
+# a Windows operator with a healthy Python to debug their Python, when the
+# real fault is a stale ~/.arkaos/.repo-path, costs more than the wording
+# saves. `npx arkaos doctor` diagnoses all four.
+$tri = [char]0x25B2
+$oAcute = [char]0x00F3
+$emDash = [char]0x2014
+$banner = "`n  $tri  A R K A   O S`n     The Operating System for AI Agent Teams`n`n  Ol$oAcute, founder`n  degraded: ArkaOS core not reachable $emDash run npx arkaos doctor"
+[pscustomobject]@{ systemMessage = $banner } | ConvertTo-Json -Compress
+exit 0

package/config/hooks/session-start.sh

@@ -5,8 +5,9 @@
 # ONE python process (core.hooks.session_start) builds the entire
 # systemMessage — the 13 inline python spawns of the previous version
 # live there now (baseline 251ms p50 before consolidation). This file
-# only resolves the interpreter and execs; with no usable interpreter
-# it emits a static banner and exits 0 (fail-open, stdlib-free).
+# only resolves the interpreter and execs; whenever it cannot reach that
+# producer — no repo root, no module file, no interpreter — it emits a
+# static banner and exits 0 (fail-open, stdlib-free).
 # ============================================================================
 
 # _HOOK_CWD captured BEFORE any cd — inside a compound command $PWD
@@ -55,7 +56,10 @@ if [ -n "$REPO" ] && [ -f "$REPO/core/hooks/session_start.py" ] \
 fi
 
 # ─── Degraded fallback: static banner, valid JSON, exit 0 ──────────────
+# Names the symptom, not a cause: three conditions reach here and only one
+# of them is a missing interpreter. Kept byte-identical in wording to the
+# .ps1 twin so an operator on either platform reads the same diagnosis.
 cat <<'EOF'
-{"systemMessage": "\n  ▲  A R K A   O S\n     The Operating System for AI Agent Teams\n\n  Olá, founder\n  degraded: no usable interpreter — run npx arkaos doctor"}
+{"systemMessage": "\n  ▲  A R K A   O S\n     The Operating System for AI Agent Teams\n\n  Olá, founder\n  degraded: ArkaOS core not reachable — run npx arkaos doctor"}
 EOF
 exit 0

package/config/hooks/stop.ps1

@@ -24,7 +24,23 @@ $cwd = [string]$inp.cwd
 
 if ($stopHookActive -eq "true") { exit 0 }
 
-$wfMarker = Join-Path "/tmp/arkaos-wf-required" $sessionId
+# Marker dir must match the Python writer: core.hooks.user_prompt_submit
+# ::_wf_mark_required resolves it through core.shared.temp_paths
+# ::wf_required_dir — which is arkaos_temp_dir('arkaos-wf-required'),
+# i.e. %TEMP%\arkaos-wf-required on Windows, EXCEPT that it honors
+# ARKA_WF_REQUIRED_DIR first. Read arkaos_temp_dir directly here and the
+# override splits writer from reader: the writer moves, this gate finds no
+# marker and allows everything, silently. That is the fail-open
+# wf_required_dir exists to close, so mirror wf_required_dir, not
+# arkaos_temp_dir.
+# The previous hardcoded "/tmp/arkaos-wf-required" resolves to a path that
+# exists on no stock Windows machine, so this gate exited 0 on every real
+# session and the whole compliance chain below never ran.
+$wfDir = $env:ARKA_WF_REQUIRED_DIR
+if ([string]::IsNullOrWhiteSpace($wfDir)) {
+    $wfDir = Join-Path ([System.IO.Path]::GetTempPath()) 'arkaos-wf-required'
+}
+$wfMarker = Join-Path $wfDir $sessionId
 if ([string]::IsNullOrWhiteSpace($sessionId) -or -not (Test-Path $wfMarker)) {
     exit 0
 }
@@ -193,6 +209,46 @@ try {
     # Swallow — enqueue is fire-and-forget.
 }
 
+# ─── Governance parity (skill capture + warn-only detectors) ───────────
+# config/hooks/stop.sh delegates the whole event to `python -m` the Stop
+# entrypoint, which runs the full detector chain (the authoritative list
+# is that module's own imports — no count is stated here because several
+# are conditional, so no fixed number is true of a given event). This
+# port reimplements the event and reached only two of them, so four
+# detectors that exist, are tested and are wired on POSIX never ran on
+# Windows at all — most visibly skill_proposer, whose constitution rule
+# (mandatory-skill-evaluation) mandates a capability sweep after every
+# completed task.
+#
+# The sweep is a real module, not an inline script: core/hooks/
+# stop_governance.py. Delegating rather than mirroring is what keeps the
+# owner-only umask on the state files it writes — the previous inline
+# copy of _write_tmp_state had already lost it — and it is what lets the
+# parity test IMPORT AND RUN the sweep instead of grepping module names
+# out of this file, which a comment could satisfy.
+#
+# Scope is deliberately the NON-ENFORCEMENT subset: these four write
+# proposals and diagnostic state only. The gating checks
+# (closing_marker_check, meta_tag_check, kb_cite_check, dna_fidelity)
+# are left out of this change — they feed enforcement surfaces and
+# deserve their own baseline on Windows before being switched on.
+$governanceModule = Join-Path $env:ARKAOS_ROOT "core/hooks/stop_governance.py"
+if (Test-Path -LiteralPath $governanceModule) {
+    # PREPEND, never clobber: an operator's own PYTHONPATH must survive
+    # the hook (the .sh twin prepends for the same reason).
+    $sep = [IO.Path]::PathSeparator
+    $env:PYTHONPATH = if ($env:PYTHONPATH) {
+        "$($env:ARKAOS_ROOT)$sep$($env:PYTHONPATH)"
+    } else {
+        $env:ARKAOS_ROOT
+    }
+    try {
+        & $pythonExe -m core.hooks.stop_governance | Out-Null
+    } catch {
+        # Swallow — governance observation must never affect the Stop hook.
+    }
+}
+
 # Belt-and-braces marker cleanup (safe even if the Python block crashed).
 if ($sessionId -match '^[A-Za-z0-9._-]{1,128}$') {
     Remove-Item -LiteralPath $wfMarker -ErrorAction SilentlyContinue