blun-king-cli 9.1.562 → 9.1.564

package/agent-spine-plugin/src/hook.js

@@ -5,9 +5,10 @@ import { recordAttentionEvent } from "./lib/attention.js";
 import { catalogForStateRoot, saveCatalog } from "./lib/catalog.js";
 import { loadGraph } from "./lib/graph.js";
 import { canonicalPath } from "./lib/paths.js";
-import { resolveHostSourceCatalog } from "./lib/source-roots.js";
+import { isInaccessibleScanError, resolveHostSourceCatalog } from "./lib/source-roots.js";
 import { sessionBriefing } from "./lib/briefing.js";
 import { captureContinuityPrompt, loadContinuity } from "./lib/continuity.js";
+import { recordLearningApplications, recordLearningDeliveries } from "./lib/learning.js";
 import {
   authorizeJobEffect, checkpointJobEffect, closeJobLease, resolveSessionJob, startOrResumeJob
 } from "./lib/selfstarter.js";
@@ -15,6 +16,7 @@ import { claimChannelEvent } from "./lib/channel-runtime.js";
 import { syncPersonaRosterFromEnvironment } from "./lib/persona-runtime.js";
 import { captureMustRememberPrompt, recordPreflightFailure, runPreflight, verifyPreflightReceipt } from "./lib/preflight.js";
 import { isMainModule } from "./lib/runtime.js";
+import { recordHookScanAudit } from "./lib/hook-audit.js";
 
 const MAX_STDIN_BYTES = 64 * 1024;
 const STANDARD_HOST_CONTEXT_BYTES = 9500;
@@ -26,15 +28,25 @@ const KNOWN_EVENTS = new Set([
 const ID_RE = /^[A-Za-z0-9][A-Za-z0-9:_.@/-]{0,127}$/;
 const ATTENTION_WRITE_EVENTS = new Set(["UserPromptSubmit", "PostToolUse", "Stop", "SubagentStop"]);
 const SELFSTART_EVENTS = new Set(["SessionStart", "PostCompact"]);
+const SILENT_OVERSIZE_POST_TOOL_USE = Symbol("silent-oversize-post-tool-use");
+const SILENT_OVERSIZE_POST_TOOL_USE_ARG = "--silent-oversize-post-tool-use";
 
-async function readStdin() {
-  let value = "";
+async function readStdin({ silentOversizePostToolUse = false } = {}) {
+  const chunks = [];
   let bytes = 0;
+  let oversized = false;
   for await (const chunk of process.stdin) {
-    bytes += Buffer.byteLength(chunk);
-    if (bytes > MAX_STDIN_BYTES) throw new Error("hook input exceeds the 64 KiB limit");
-    value += chunk;
+    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    const remaining = Math.max(0, MAX_STDIN_BYTES - bytes);
+    if (remaining) chunks.push(buffer.subarray(0, remaining));
+    bytes += buffer.length;
+    if (bytes > MAX_STDIN_BYTES) oversized = true;
   }
+  if (oversized) {
+    if (silentOversizePostToolUse) return SILENT_OVERSIZE_POST_TOOL_USE;
+    throw new Error("hook input exceeds the 64 KiB limit");
+  }
+  const value = Buffer.concat(chunks, bytes).toString("utf8");
   const parsed = value.trim() ? JSON.parse(value) : {};
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("hook input must be one JSON object");
   return parsed;
@@ -196,6 +208,7 @@ function renderContext(event, catalog, briefing, signal = null, attentionEvent =
       createdAt: preflight.receipt.createdAt,
       expiresAt: preflight.receipt.expiresAt,
       policy: preflight.policy,
+      learningApplications: preflight.learningApplications || null,
       pendingMustRemember: preflight.pendingMustRemember ? {
         id: preflight.pendingMustRemember.candidate?.id || null,
         status: preflight.pendingMustRemember.candidate?.status || (preflight.pendingMustRemember.rejected ? "rejected" : null),
@@ -459,6 +472,30 @@ function isMutationTool(name = "") {
   return /(^|__)(apply_patch|edit|write|delete|move|rename|bash|exec_command|shell)(_|$)/i.test(name);
 }
 
+function filesystemScanError(error) {
+  return Boolean(error && (isInaccessibleScanError(error)
+    || error.code === "AGENTSPINE_SCAN_INCOMPLETE" || error.agentSpineScan === true));
+}
+
+async function auditSkippedScans(input, phase, skipped = []) {
+  for (const item of skipped) {
+    await recordHookScanAudit({
+      event: "PreToolUse", toolName: input.tool_name || null, phase,
+      error: { code: item.code, message: `${item.code}: ${item.kind || item.operation || "scan"} skipped ${item.relativePath || item.path}` },
+      path: item.path || item.relativePath, operation: item.operation || item.kind,
+      now: input.timestamp || new Date()
+    });
+  }
+}
+
+async function allowScanFailure(input, phase, error) {
+  await recordHookScanAudit({
+    event: "PreToolUse", toolName: input.tool_name || null, phase, error,
+    path: error?.path || input.cwd || process.cwd(), now: input.timestamp || new Date()
+  });
+  return { blocked: false, degraded: true, scanFailedOpen: true, phase, error: error.message };
+}
+
 function stringValues(value, output = []) {
   if (typeof value === "string") output.push(value);
   else if (Array.isArray(value)) value.forEach((item) => stringValues(item, output));
@@ -501,8 +538,9 @@ function blockPrompt(reason) {
   })}\n`);
 }
 
-export async function runHook(payload = null) {
-  const input = payload || await readStdin();
+export async function runHook(payload = null, options = {}) {
+  const input = payload || await readStdin(options);
+  if (input === SILENT_OVERSIZE_POST_TOOL_USE) return;
   if (!input || typeof input !== "object" || Array.isArray(input)) throw new Error("hook input must be one JSON object");
   const event = input.hook_event_name || input.event_name || "";
   if (!KNOWN_EVENTS.has(event)) throw new Error(`unsupported hook event: ${event || "missing"}`);
@@ -533,6 +571,19 @@ export async function runHook(payload = null) {
     resolvedSources = await resolveHostSourceCatalog({ host: instructionHost, cwd, input });
   } catch (error) {
     const reason = `AgentSpine source resolution failed closed: ${error.message}`;
+    if (event === "PreToolUse" && isMutationTool(input.tool_name) && filesystemScanError(error)) {
+      const allowed = await allowScanFailure(input, "source-resolution", error);
+      const context = JSON.stringify({
+        schema: "agentspine.hook-context/v1", event, loaded: false, failedClosed: false,
+        indexedSources: 0,
+        sourceResolution: { status: "degraded", reason: error.message, auditFinding: "inaccessible-source-scan" },
+        instruction: "The filesystem scan was incomplete. The requested tool remains governed by native host permissions.",
+        authority: "context-only"
+      });
+      if (payload) return { ...allowed, context };
+      process.stdout.write("{}\n");
+      return;
+    }
     if (event === "PreToolUse" && isMutationTool(input.tool_name)) {
       if (payload) return { blocked: true, failedClosed: true, reason };
       deny(reason);
@@ -560,6 +611,12 @@ export async function runHook(payload = null) {
   let scope = null;
   let selfstarter = null;
   let channelEvent = null;
+  let learningDelivery = null;
+
+  if (event === "PreToolUse" && isMutationTool(input.tool_name)
+    && resolvedSources.diagnostics.skippedInaccessibleDirectories?.length) {
+    await auditSkippedScans(input, "source-resolution", resolvedSources.diagnostics.skippedInaccessibleDirectories);
+  }
 
   if (event === "PreToolUse" && isMutationTool(input.tool_name)) {
     const { graph } = await loadGraph(root, catalog);
@@ -610,6 +667,12 @@ export async function runHook(payload = null) {
         });
       }
     } catch (error) {
+      if (isMutationTool(input.tool_name) && filesystemScanError(error)) {
+        const allowed = await allowScanFailure(input, "self-starter", error);
+        if (payload) return allowed;
+        process.stdout.write("{}\n");
+        return;
+      }
       const reason = `AgentSpine self-starter denied this effect: ${error.message}`;
       if (payload) return { blocked: true, reason, selfstarter: { allowed: false, reason: error.message } };
       deny(reason);
@@ -637,6 +700,19 @@ export async function runHook(payload = null) {
   if (["Stop", "SubagentStop"].includes(event)) {
     scope ||= await runtimeScope(input, root, resolvedSources.userStateRoot, catalog);
     const exact = await selfstarterScope(input, scope, root, "resume");
+    if (exact && !scope.currentTaskId) scope.currentTaskId = exact.taskId;
+    try {
+      learningDelivery = await recordLearningDeliveries({
+        root, sessionId: sessionId(input), hookEvent: event,
+        scope: {
+          personaId: scope.entityId, userId: scope.userId, tenantId: scope.tenantId,
+          projectId: scope.projectId, groupId: scope.groupId, taskId: scope.currentTaskId
+        },
+        completedAt: input.timestamp || new Date()
+      });
+    } catch (error) {
+      learningDelivery = { status: "degraded", receipts: [], reason: error.message, authority: "context-only" };
+    }
     const requested = selfstarterInput(input);
     if (exact) {
       selfstarter = await closeJobLease({
@@ -694,7 +770,7 @@ export async function runHook(payload = null) {
         catalog, userStateRoot: resolvedSources.userStateRoot, sourceDiagnostics: resolvedSources.diagnostics,
         prompt: event === "UserPromptSubmit" ? promptFromInput(input) : null
       });
-      const context = renderContext(event, catalog, briefing, signal, attentionEvent, selfstarter, channelEvent, resolvedSources.diagnostics, preflight);
+      let context = renderContext(event, catalog, briefing, signal, attentionEvent, selfstarter, channelEvent, resolvedSources.diagnostics, preflight);
       if (event === "UserPromptSubmit" && Buffer.byteLength(context) > hostContextLimit(preflight)) {
         throw new Error("mandatory preflight context exceeds the host hook injection limit");
       }
@@ -702,6 +778,45 @@ export async function runHook(payload = null) {
         receipt: preflight.receipt, input, scope, resolvedSources, prompt: promptFromInput(input),
         now: input.timestamp || new Date(), env: process.env, consume: true
       })) throw new Error("preflight receipt could not be consumed atomically for this exact turn");
+      if (event === "UserPromptSubmit") {
+        const activeCanaries = briefing.learning.filter((item) => ["active", "revalidating"].includes(item.outcomeStatus));
+        if (!activeCanaries.length) {
+          preflight.learningApplications = {
+            status: "not-applicable", receipts: [], authority: "context-only"
+          };
+        } else try {
+          const application = await recordLearningApplications({
+            root, items: briefing.learning,
+            scope: {
+              personaId: scope.entityId, userId: scope.userId, tenantId: scope.tenantId,
+              projectId: scope.projectId, groupId: scope.groupId, taskId: scope.currentTaskId
+            },
+            preflightReceipt: preflight.receipt,
+            sessionBriefingDigest: createHash("sha256").update(JSON.stringify(briefing)).digest("hex"),
+            projectedAt: input.timestamp || new Date()
+          });
+          preflight.learningApplications = {
+            status: application.receipts.length ? "recorded" : "not-applicable",
+            receipts: application.receipts.map((item) => ({
+              id: item.id, learningId: item.learningId, projectedAt: item.projectedAt, expiresAt: item.expiresAt
+            })),
+            authority: "context-only"
+          };
+        } catch (error) {
+          briefing.learning = briefing.learning.filter((item) => !["active", "revalidating"].includes(item.outcomeStatus));
+          preflight.learningApplications = {
+            status: "degraded", receipts: [], reason: error.message, authority: "context-only"
+          };
+        }
+        const enriched = renderContext(event, catalog, briefing, signal, attentionEvent, selfstarter, channelEvent,
+          resolvedSources.diagnostics, preflight);
+        if (Buffer.byteLength(enriched) <= hostContextLimit(preflight)) context = enriched;
+        else if (preflight.learningApplications.status === "degraded") {
+          preflight.learningApplications = null;
+          context = renderContext(event, catalog, briefing, signal, attentionEvent, selfstarter, channelEvent,
+            resolvedSources.diagnostics, preflight);
+        }
+      }
       if (payload) return { blocked: false, context, briefing, preflight, signal, attentionEvent, channelEvent, catalogPath };
       process.stdout.write(`${JSON.stringify(hookOutput(event, context))}\n`);
       return;
@@ -728,12 +843,16 @@ export async function runHook(payload = null) {
     }
   }
 
-  if (payload) return { blocked: false, attentionEvent, selfstarter };
+  if (payload) return { blocked: false, attentionEvent, selfstarter, learningDelivery };
   process.stdout.write("{}\n");
 }
 
 if (isMainModule(import.meta.url)) {
-  runHook().catch((error) => {
+  const args = process.argv.slice(2);
+  const silentOversizePostToolUse = args.length === 1 && args[0] === SILENT_OVERSIZE_POST_TOOL_USE_ARG;
+  const argumentError = args.length && !silentOversizePostToolUse
+    ? new Error(`unsupported hook argument: ${args[0]}`) : null;
+  (argumentError ? Promise.reject(argumentError) : runHook(null, { silentOversizePostToolUse })).catch((error) => {
     process.stderr.write(`AgentSpine hook: ${String(error.message).slice(0, 2048)}\n`);
     // Claude command hooks treat exit 2 as a blocking failure. Exit 1 is
     // fail-open, which is unsafe for malformed pre-answer payloads.

package/agent-spine-plugin/src/index.js

@@ -12,9 +12,11 @@ export {
   recordActivity, recordAttentionEvent, resolveAttention, upsertAttention
 } from "./lib/attention.js";
 export {
-  acceptContinuityLearning, addLearningEvidence, configureLearning, deleteLearning, evaluateLearning,
+  acceptContinuityLearning, addLearningEvidence, beginLearningRevalidation, configureLearning, deleteLearning, evaluateLearning,
   learningContext, learningOutcomeStatus, loadLearning, proposeLearning, purgeLearningBySubject,
-  recordLearningOutcome, reviewLearning, rollbackLearning
+  purgeStaleLearningApplications, recordLearningOutcome, registerLearningEvaluation, renewLearningValidation,
+  reviewLearning, revokeLearningApplication, revokeLearningDelivery, revokeLearningEvaluation, revokeLearningEvidence, revokeLearningMeasurement, revokeLearningOutcome, revokeLearningTrialFailure, revokeLearningValidation,
+  rollbackLearning
 } from "./lib/learning.js";
 export {
   captureContinuityPrompt, configureContinuity, continuityFindings,

package/agent-spine-plugin/src/lib/audit.js

@@ -47,6 +47,24 @@ function authorityViolations(graph, attention, learning, continuity, coordinatio
     ]).filter(Boolean),
     ...(learning.outcomes || []),
     ...(learning.outcomes || []).map((outcome) => outcome.measurement).filter(Boolean),
+    ...(learning.measurements || []),
+    ...(learning.measurements || []).map((measurement) => measurement.measurement).filter(Boolean),
+    ...(learning.measurementLineage || []),
+    ...(learning.applications || []),
+    ...(learning.evaluations || []),
+    ...(learning.evaluatorRegistry || []),
+    ...(learning.evaluationBindings || []),
+    ...(learning.validationLeases || []),
+    ...(learning.trialFailures || []),
+    ...(learning.trialFailureRevocations || []),
+    ...(learning.trialRetryExhaustions || []),
+    ...(learning.evaluationRevocations || []),
+    ...(learning.validationRevocations || []),
+    ...(learning.evidenceRevocations || []),
+    ...(learning.measurementRevocations || []),
+    ...(learning.applicationRevocations || []),
+    ...(learning.deliveryRevocations || []),
+    ...(learning.outcomeRevocations || []),
     ...learning.history,
     ...learning.history.map((entry) => entry.value).filter(Boolean),
     ...continuity.signals,
@@ -270,7 +288,7 @@ export async function runAudit(root = process.cwd(), { host = null } = {}) {
     gate(2, "Discovery", catalog.schema === "agentspine.catalog/v1"
       && (!host || (sourceResolution?.status === "loaded" && !sourceResolutionError)), sourceResolutionError
       ? `${catalog.documents.length} project documents; host-native source resolution failed closed: ${sourceResolutionError}`
-      : sourceResolution ? `${sourceResolution.scopes.user} user, ${sourceResolution.scopes.project} project, and ${sourceResolution.scopes["project-memory"]} memory sources; broad home scan disabled`
+      : sourceResolution ? `${sourceResolution.scopes.user} user, ${sourceResolution.scopes.project} project, and ${sourceResolution.scopes["project-memory"]} memory sources; broad home scan disabled; ${(sourceResolution.skippedInaccessibleDirectories || []).length} inaccessible directories skipped`
         : `${catalog.documents.length} Markdown documents indexed`),
     gate(3, "State isolation", [catalogPath, graphPath, attentionPath, learningPath, continuityPath,
       policyPath, coordinationPath, executionPolicyPath, selfstarterPath, channelPolicyPath,
@@ -286,7 +304,7 @@ export async function runAudit(root = process.cwd(), { host = null } = {}) {
     gate(7, "Authority boundary", authority.length === 0 && forbidden.length === 0 && policyIssues.length === 0 && coordinationAuthorityIssues.length === 0 && executionPolicyIssues.length === 0 && selfstarterAuthorityIssues.length === 0 && channelPolicyIssues.length === 0 && personaPolicyIssues.length === 0 && gatewayPolicyIssues.length === 0 && sharingAuthorityIssues.length === 0 && !preflightError, preflightError
       ? `preflight policy or receipt state failed closed: ${preflightError}`
       : `${authority.length} context authority violations; ${forbidden.length} forbidden entity records; ${policyIssues.length} delegation policy findings; ${coordinationAuthorityIssues.length} assignment findings; ${executionPolicyIssues.length} execution policy findings; ${selfstarterAuthorityIssues.length} self-starter authority findings; ${channelPolicyIssues.length} channel policy findings; ${personaPolicyIssues.length} persona policy findings; ${gatewayPolicyIssues.length} gateway policy findings; ${sharingAuthorityIssues.length} shared authority findings; preflight ${preflight.status}`),
-    gate(8, "Context privacy", privacyInvalid.length === 0 && attentionGroupInvalid.length === 0 && attentionConfigValid && attentionIssues.length === 0 && learningIssues.length === 0 && continuityIssues.length === 0 && coordinationContextIssues.length === 0 && selfstarterStateIssues.length === 0 && channelRuntimeIssues.length === 0 && personaStateIssues.length === 0 && gatewayStateIssues.length === 0 && sharingContextIssues.length === 0 && authenticationIssues.length === 0, `${graph.entities.length} entities, ${graph.entityEdges.length} relationships, ${attention.signals.length} attention cues, ${attention.events.length} lifecycle events, ${learning.candidates.length} learning records and ${(learning.outcomes || []).length} outcome receipts, ${continuity.signals.length} continuity signals, ${coordination.tasks.length} coordination items, ${selfstarter.jobs.length} self-starter jobs, ${channelRuntime.events.length} channel events, ${personaRuntime.personas.length} authenticated personas, ${gatewayRuntime.queue.length} gateway queue items, ${gatewayRuntime.outbox.length} delivery records, ${sharing.records.length} shared records, ${trust.records.length} trusted keys, ${registry.signers.length} local signers, and ${feedState.feeds.length} feed receipts checked`),
+    gate(8, "Context privacy", privacyInvalid.length === 0 && attentionGroupInvalid.length === 0 && attentionConfigValid && attentionIssues.length === 0 && learningIssues.length === 0 && continuityIssues.length === 0 && coordinationContextIssues.length === 0 && selfstarterStateIssues.length === 0 && channelRuntimeIssues.length === 0 && personaStateIssues.length === 0 && gatewayStateIssues.length === 0 && sharingContextIssues.length === 0 && authenticationIssues.length === 0, `${graph.entities.length} entities, ${graph.entityEdges.length} relationships, ${attention.signals.length} attention cues, ${attention.events.length} lifecycle events, ${learning.candidates.length} learning records, ${(learning.evaluations || []).length} immutable evaluation contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v9", "agentspine.learning-evaluation/v10", "agentspine.learning-evaluation/v11", "agentspine.learning-evaluation/v12", "agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25"].includes(item.schema)).length} exact-target contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v8", "agentspine.learning-evaluation/v9", "agentspine.learning-evaluation/v10", "agentspine.learning-evaluation/v11", "agentspine.learning-evaluation/v12", "agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25"].includes(item.schema)).length} precommitted initial-trial contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v10", "agentspine.learning-evaluation/v11", "agentspine.learning-evaluation/v12", "agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25"].includes(item.schema)).length} deadline-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v14", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25"].includes(item.schema)).length} staleness-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v16", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25"].includes(item.schema)).length} promotion-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v18", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25"].includes(item.schema)).length} candidate-admission contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v20", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25"].includes(item.schema)).length} candidate-evidence-cohort contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v22", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25"].includes(item.schema)).length} blocking-defect-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v24", "agentspine.learning-evaluation/v25"].includes(item.schema)).length} evidence-source-bound contracts, ${(learning.evaluations || []).filter((item) => ["agentspine.learning-evaluation/v13", "agentspine.learning-evaluation/v15", "agentspine.learning-evaluation/v17", "agentspine.learning-evaluation/v19", "agentspine.learning-evaluation/v21", "agentspine.learning-evaluation/v23", "agentspine.learning-evaluation/v25"].includes(item.schema)).length} bounded retry contracts, ${(learning.trialRetryExhaustions || []).length} terminal retry-exhaustion receipts, ${(learning.applications || []).filter((item) => ["agentspine.learning-application/v5", "agentspine.learning-application/v6", "agentspine.learning-application/v7"].includes(item.schema)).length} immutable initial-trial admissions, ${(learning.applications || []).filter((item) => ["agentspine.learning-application/v6", "agentspine.learning-application/v7"].includes(item.schema)).length} exact-target admissions, ${(learning.applications || []).filter((item) => item.schema === "agentspine.learning-application/v7").length} deadline-bound admissions, ${(learning.trialFailures || []).length} blocking trial-failure receipts, ${(learning.evaluatorRegistry || []).length} locally confirmed evaluator roots, ${(learning.evaluationBindings || []).length} evaluator-registry bindings, ${(learning.validationLeases || []).length} immutable validation leases, ${(learning.measurements || []).length} immutable measurement runs, ${(learning.applications || []).length} turn-bound projections, ${(learning.deliveries || []).length} completed model-turn deliveries, ${(learning.evaluationRevocations || []).length} evaluation revocations, ${(learning.evidenceRevocations || []).length} evidence revocations, ${(learning.measurementRevocations || []).length} measurement revocations, ${(learning.applicationRevocations || []).length} application revocations, ${(learning.deliveryRevocations || []).length} delivery revocations, ${(learning.outcomeRevocations || []).length} outcome revocations, ${(learning.outcomes || []).length} outcome receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v5", "agentspine.learning-outcome/v6", "agentspine.learning-outcome/v7", "agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} case-coverage receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v6", "agentspine.learning-outcome/v7", "agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} provenance-bound receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v7", "agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} lineage-bound receipts, ${(learning.outcomes || []).filter((item) => ["agentspine.learning-outcome/v8", "agentspine.learning-outcome/v9"].includes(item.schema)).length} paired-evaluator receipts and ${(learning.outcomes || []).filter((item) => item.schema === "agentspine.learning-outcome/v9").length} evaluator-root-bound receipts, ${continuity.signals.length} continuity signals, ${coordination.tasks.length} coordination items, ${selfstarter.jobs.length} self-starter jobs, ${channelRuntime.events.length} channel events, ${personaRuntime.personas.length} authenticated personas, ${gatewayRuntime.queue.length} gateway queue items, ${gatewayRuntime.outbox.length} delivery records, ${sharing.records.length} shared records, ${trust.records.length} trusted keys, ${registry.signers.length} local signers, and ${feedState.feeds.length} feed receipts checked`),
     gate(9, "Context budget", loadedBytes <= context.budget.maxBytes && briefingBudgetValid, briefingError
       ? `${loadedBytes}/${context.budget.maxBytes} source bytes; briefing failed closed: ${briefingError}`
       : `${loadedBytes}/${context.budget.maxBytes} source bytes; ${briefingBytes}/${briefing.budget.maxBytes} briefing bytes`),

package/agent-spine-plugin/src/lib/filesystem-retry.js

@@ -8,6 +8,11 @@ export function isFileLockContention(error, platform = process.platform) {
     || (platform === "win32" && ["EACCES", "EPERM"].includes(error?.code));
 }
 
+export function isTransientLockMetadataError(error, platform = process.platform) {
+  return error?.code === "ENOENT"
+    || (platform === "win32" && WINDOWS_TRANSIENT_CODES.has(error?.code));
+}
+
 export async function replaceFileWithRetry(temporary, target, options = {}) {
   const renameFile = options.renameFile || rename;
   const wait = options.wait || delay;

package/agent-spine-plugin/src/lib/hook-audit.js

@@ -0,0 +1,29 @@
+import { appendFile, mkdir } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { stateRoot } from "./paths.js";
+
+export function hookScanAuditPath(env = process.env) {
+  return join(stateRoot(env), "hook-scan-audit.jsonl");
+}
+
+export async function recordHookScanAudit({ event = "PreToolUse", toolName = null, phase, error = null,
+  path = null, operation = null, now = new Date(), env = process.env }) {
+  try {
+    const target = hookScanAuditPath(env);
+    await mkdir(dirname(target), { recursive: true, mode: 0o700 });
+    const record = {
+      schema: "agentspine.hook-scan-audit/v1",
+      at: new Date(now).toISOString(), event, toolName, phase,
+      code: String(error?.code || "SCAN_ERROR").slice(0, 64),
+      error: String(error?.message || error || "filesystem scan skipped").slice(0, 2048),
+      path: String(path || error?.path || "unknown").slice(0, 4096),
+      operation: operation || error?.syscall || null,
+      decision: "allow",
+      authority: "diagnostic-only"
+    };
+    await appendFile(target, `${JSON.stringify(record)}\n`, { encoding: "utf8", mode: 0o600 });
+    return true;
+  } catch {
+    return false;
+  }
+}