cclaw-cli 0.48.6 → 0.48.8

package/dist/content/hooks.d.ts

@@ -8,7 +8,8 @@
 export interface HookRuntimeOptions {
 }
 /** Shared bash preamble for generated hook scripts. */
-export declare const RUNTIME_SHELL_DETECT_ROOT = "HARNESS=\"codex\"\nif [ -n \"${CLAUDE_PROJECT_DIR:-}\" ]; then\n  HARNESS=\"claude\"\nelif [ -n \"${CURSOR_PROJECT_DIR:-}\" ] || [ -n \"${CURSOR_PROJECT_ROOT:-}\" ]; then\n  HARNESS=\"cursor\"\nelif [ -n \"${OPENCODE_PROJECT_DIR:-}\" ] || [ -n \"${OPENCODE_PROJECT_ROOT:-}\" ]; then\n  HARNESS=\"opencode\"\nfi\n\nROOT=\"\"\nfor candidate in \"${CCLAW_PROJECT_ROOT:-}\" \"${CLAUDE_PROJECT_DIR:-}\" \"${CURSOR_PROJECT_DIR:-}\" \"${CURSOR_PROJECT_ROOT:-}\" \"${OPENCODE_PROJECT_DIR:-}\" \"${OPENCODE_PROJECT_ROOT:-}\" \"${PWD:-}\"; do\n  if [ -n \"$candidate\" ] && [ -d \"$candidate/.cclaw\" ]; then\n    ROOT=\"$candidate\"\n    break\n  fi\ndone\nif [ -z \"$ROOT\" ]; then\n  ROOT=\"${CCLAW_PROJECT_ROOT:-${CLAUDE_PROJECT_DIR:-${CURSOR_PROJECT_DIR:-${CURSOR_PROJECT_ROOT:-${OPENCODE_PROJECT_DIR:-${OPENCODE_PROJECT_ROOT:-${PWD}}}}}}}\"\nfi";
+export declare const RUNTIME_SHELL_DETECT_ROOT = "CCLAW_HOOK_LIB_PATH=\"\"\nfor candidate in \"${CCLAW_PROJECT_ROOT:-}\" \"${CLAUDE_PROJECT_DIR:-}\" \"${CURSOR_PROJECT_DIR:-}\" \"${CURSOR_PROJECT_ROOT:-}\" \"${OPENCODE_PROJECT_DIR:-}\" \"${OPENCODE_PROJECT_ROOT:-}\" \"${PWD:-}\"; do\n  if [ -n \"$candidate\" ] && [ -f \"$candidate/.cclaw/hooks/_lib.sh\" ]; then\n    CCLAW_HOOK_LIB_PATH=\"$candidate/.cclaw/hooks/_lib.sh\"\n    break\n  fi\ndone\nif [ -n \"$CCLAW_HOOK_LIB_PATH\" ] && [ -f \"$CCLAW_HOOK_LIB_PATH\" ]; then\n  # shellcheck disable=SC1090\n  . \"$CCLAW_HOOK_LIB_PATH\"\nfi\n\nif command -v cclaw_hook_detect_root >/dev/null 2>&1; then\n  cclaw_hook_detect_root\nelse\n  HARNESS=\"codex\"\n  if [ -n \"${CLAUDE_PROJECT_DIR:-}\" ]; then\n    HARNESS=\"claude\"\n  elif [ -n \"${CURSOR_PROJECT_DIR:-}\" ] || [ -n \"${CURSOR_PROJECT_ROOT:-}\" ]; then\n    HARNESS=\"cursor\"\n  elif [ -n \"${OPENCODE_PROJECT_DIR:-}\" ] || [ -n \"${OPENCODE_PROJECT_ROOT:-}\" ]; then\n    HARNESS=\"opencode\"\n  fi\n\n  ROOT=\"\"\n  for candidate in \"${CCLAW_PROJECT_ROOT:-}\" \"${CLAUDE_PROJECT_DIR:-}\" \"${CURSOR_PROJECT_DIR:-}\" \"${CURSOR_PROJECT_ROOT:-}\" \"${OPENCODE_PROJECT_DIR:-}\" \"${OPENCODE_PROJECT_ROOT:-}\" \"${PWD:-}\"; do\n    if [ -n \"$candidate\" ] && [ -d \"$candidate/.cclaw\" ]; then\n      ROOT=\"$candidate\"\n      break\n    fi\n  done\n  if [ -z \"$ROOT\" ]; then\n    ROOT=\"${CCLAW_PROJECT_ROOT:-${CLAUDE_PROJECT_DIR:-${CURSOR_PROJECT_DIR:-${CURSOR_PROJECT_ROOT:-${OPENCODE_PROJECT_DIR:-${OPENCODE_PROJECT_ROOT:-${PWD}}}}}}}\"\n  fi\nfi";
+export declare function hookLibScript(): string;
 export declare function sessionStartScript(_options?: HookRuntimeOptions): string;
 export declare function stopCheckpointScript(): string;
 export declare function runHookDispatcherScript(): string;
@@ -17,5 +18,5 @@ export declare function preCompactScript(): string;
 export { claudeHooksJsonWithObservation as claudeHooksJson } from "./observe.js";
 export { cursorHooksJsonWithObservation as cursorHooksJson } from "./observe.js";
 export { codexHooksJsonWithObservation as codexHooksJson } from "./observe.js";
+export { nodeHookRuntimeScript } from "./node-hooks.js";
 export { opencodePluginJs } from "./opencode-plugin.js";
-export declare function hooksAgentsMdBlock(): string;

package/dist/content/hooks.js

@@ -15,34 +15,195 @@ const ESCAPE_FN = `escape_json() {
   str=\${str//$'\\n'/\\\\n}
   printf '%s' "$str"
 }`;
-const DETECT_ROOT = `HARNESS="codex"
-if [ -n "\${CLAUDE_PROJECT_DIR:-}" ]; then
-  HARNESS="claude"
-elif [ -n "\${CURSOR_PROJECT_DIR:-}" ] || [ -n "\${CURSOR_PROJECT_ROOT:-}" ]; then
-  HARNESS="cursor"
-elif [ -n "\${OPENCODE_PROJECT_DIR:-}" ] || [ -n "\${OPENCODE_PROJECT_ROOT:-}" ]; then
-  HARNESS="opencode"
-fi
-
-ROOT=""
+const HOOK_LIB_FILE = "_lib.sh";
+/** Shared bash preamble for generated hook scripts. */
+export const RUNTIME_SHELL_DETECT_ROOT = `CCLAW_HOOK_LIB_PATH=""
 for candidate in "\${CCLAW_PROJECT_ROOT:-}" "\${CLAUDE_PROJECT_DIR:-}" "\${CURSOR_PROJECT_DIR:-}" "\${CURSOR_PROJECT_ROOT:-}" "\${OPENCODE_PROJECT_DIR:-}" "\${OPENCODE_PROJECT_ROOT:-}" "\${PWD:-}"; do
-  if [ -n "$candidate" ] && [ -d "$candidate/${RUNTIME_ROOT}" ]; then
-    ROOT="$candidate"
+  if [ -n "$candidate" ] && [ -f "$candidate/${RUNTIME_ROOT}/hooks/${HOOK_LIB_FILE}" ]; then
+    CCLAW_HOOK_LIB_PATH="$candidate/${RUNTIME_ROOT}/hooks/${HOOK_LIB_FILE}"
     break
   fi
 done
-if [ -z "$ROOT" ]; then
-  ROOT="\${CCLAW_PROJECT_ROOT:-\${CLAUDE_PROJECT_DIR:-\${CURSOR_PROJECT_DIR:-\${CURSOR_PROJECT_ROOT:-\${OPENCODE_PROJECT_DIR:-\${OPENCODE_PROJECT_ROOT:-\${PWD}}}}}}}"
+if [ -n "$CCLAW_HOOK_LIB_PATH" ] && [ -f "$CCLAW_HOOK_LIB_PATH" ]; then
+  # shellcheck disable=SC1090
+  . "$CCLAW_HOOK_LIB_PATH"
+fi
+
+if command -v cclaw_hook_detect_root >/dev/null 2>&1; then
+  cclaw_hook_detect_root
+else
+  HARNESS="codex"
+  if [ -n "\${CLAUDE_PROJECT_DIR:-}" ]; then
+    HARNESS="claude"
+  elif [ -n "\${CURSOR_PROJECT_DIR:-}" ] || [ -n "\${CURSOR_PROJECT_ROOT:-}" ]; then
+    HARNESS="cursor"
+  elif [ -n "\${OPENCODE_PROJECT_DIR:-}" ] || [ -n "\${OPENCODE_PROJECT_ROOT:-}" ]; then
+    HARNESS="opencode"
+  fi
+
+  ROOT=""
+  for candidate in "\${CCLAW_PROJECT_ROOT:-}" "\${CLAUDE_PROJECT_DIR:-}" "\${CURSOR_PROJECT_DIR:-}" "\${CURSOR_PROJECT_ROOT:-}" "\${OPENCODE_PROJECT_DIR:-}" "\${OPENCODE_PROJECT_ROOT:-}" "\${PWD:-}"; do
+    if [ -n "$candidate" ] && [ -d "$candidate/${RUNTIME_ROOT}" ]; then
+      ROOT="$candidate"
+      break
+    fi
+  done
+  if [ -z "$ROOT" ]; then
+    ROOT="\${CCLAW_PROJECT_ROOT:-\${CLAUDE_PROJECT_DIR:-\${CURSOR_PROJECT_DIR:-\${CURSOR_PROJECT_ROOT:-\${OPENCODE_PROJECT_DIR:-\${OPENCODE_PROJECT_ROOT:-\${PWD}}}}}}}"
+  fi
 fi`;
-/** Shared bash preamble for generated hook scripts. */
-export const RUNTIME_SHELL_DETECT_ROOT = DETECT_ROOT;
+export function hookLibScript() {
+    return `#!/usr/bin/env bash
+# cclaw shared hook library — generated by cclaw sync
+# Shared helper functions for root detection and lightweight JSON parsing.
+
+cclaw_hook_detect_root() {
+  HARNESS="codex"
+  if [ -n "\${CLAUDE_PROJECT_DIR:-}" ]; then
+    HARNESS="claude"
+  elif [ -n "\${CURSOR_PROJECT_DIR:-}" ] || [ -n "\${CURSOR_PROJECT_ROOT:-}" ]; then
+    HARNESS="cursor"
+  elif [ -n "\${OPENCODE_PROJECT_DIR:-}" ] || [ -n "\${OPENCODE_PROJECT_ROOT:-}" ]; then
+    HARNESS="opencode"
+  fi
+
+  ROOT=""
+  for candidate in "\${CCLAW_PROJECT_ROOT:-}" "\${CLAUDE_PROJECT_DIR:-}" "\${CURSOR_PROJECT_DIR:-}" "\${CURSOR_PROJECT_ROOT:-}" "\${OPENCODE_PROJECT_DIR:-}" "\${OPENCODE_PROJECT_ROOT:-}" "\${PWD:-}"; do
+    if [ -n "$candidate" ] && [ -d "$candidate/${RUNTIME_ROOT}" ]; then
+      ROOT="$candidate"
+      break
+    fi
+  done
+  if [ -z "$ROOT" ]; then
+    ROOT="\${CCLAW_PROJECT_ROOT:-\${CLAUDE_PROJECT_DIR:-\${CURSOR_PROJECT_DIR:-\${CURSOR_PROJECT_ROOT:-\${OPENCODE_PROJECT_DIR:-\${OPENCODE_PROJECT_ROOT:-\${PWD}}}}}}}"
+  fi
+}
+
+cclaw_hook_lower() {
+  printf '%s' "$1" | tr '[:upper:]' '[:lower:]'
+}
+
+cclaw_hook_extract_tool_and_payload() {
+  local input_json="$1"
+  CCLAW_HOOK_TOOL="unknown"
+  CCLAW_HOOK_PAYLOAD=""
+  if command -v jq >/dev/null 2>&1; then
+    CCLAW_HOOK_TOOL=$(printf '%s' "$input_json" | jq -r '.tool_name // .tool // .toolName // .name // .id // .command // .tool.name // .tool.id // .input.tool_name // .input.tool // .input.toolName // .input.name // .input.id // .input.command // .input.tool.name // .input.tool.id // "unknown"' 2>/dev/null || echo "unknown")
+    CCLAW_HOOK_PAYLOAD=$(printf '%s' "$input_json" | jq -r '.tool_input // .input // .arguments // .params // .payload // {} | tostring' 2>/dev/null || echo "")
+  elif command -v python3 >/dev/null 2>&1; then
+    CCLAW_HOOK_TOOL=$(INPUT_JSON="$input_json" python3 - <<'PY'
+import json
+import os
+try:
+    value = json.loads(os.environ.get("INPUT_JSON", "{}"))
+except Exception:
+    value = {}
+
+def pick_tool(payload):
+    if not isinstance(payload, dict):
+        return "unknown"
+    candidates = [
+        payload.get("tool_name"),
+        payload.get("tool"),
+        payload.get("toolName"),
+        payload.get("name"),
+        payload.get("id"),
+        payload.get("command")
+    ]
+    top_tool = payload.get("tool")
+    if isinstance(top_tool, dict):
+        candidates.extend([top_tool.get("name"), top_tool.get("id")])
+    nested = payload.get("input")
+    if isinstance(nested, dict):
+        candidates.extend([
+            nested.get("tool_name"),
+            nested.get("tool"),
+            nested.get("toolName"),
+            nested.get("name"),
+            nested.get("id"),
+            nested.get("command")
+        ])
+        nested_tool = nested.get("tool")
+        if isinstance(nested_tool, dict):
+            candidates.extend([nested_tool.get("name"), nested_tool.get("id")])
+    for candidate in candidates:
+        if isinstance(candidate, str) and candidate.strip():
+            return candidate.strip()
+    return "unknown"
+
+print(pick_tool(value))
+PY
+)
+    CCLAW_HOOK_PAYLOAD=$(printf '%s' "$input_json")
+  else
+    CCLAW_HOOK_PAYLOAD=$(printf '%s' "$input_json")
+  fi
+  [ -n "$CCLAW_HOOK_PAYLOAD" ] || CCLAW_HOOK_PAYLOAD=$(printf '%s' "$input_json")
+  [ -n "$CCLAW_HOOK_TOOL" ] || CCLAW_HOOK_TOOL="unknown"
+}
+
+cclaw_hook_read_flow_state_minimal() {
+  local flow_state_file="$1"
+  CCLAW_HOOK_FLOW_STAGE="none"
+  CCLAW_HOOK_FLOW_RUN_ID="active"
+  CCLAW_HOOK_FLOW_COMPLETED="0"
+  [ -f "$flow_state_file" ] || return 0
+
+  if command -v jq >/dev/null 2>&1; then
+    CCLAW_HOOK_FLOW_STAGE=$(jq -r '.currentStage // "none"' "$flow_state_file" 2>/dev/null || echo "none")
+    CCLAW_HOOK_FLOW_RUN_ID=$(jq -r '.activeRunId // "active"' "$flow_state_file" 2>/dev/null || echo "active")
+    CCLAW_HOOK_FLOW_COMPLETED=$(jq -r '(.completedStages // []) | length' "$flow_state_file" 2>/dev/null || echo "0")
+    return 0
+  fi
+
+  if command -v python3 >/dev/null 2>&1; then
+    local flow_meta
+    flow_meta=$(python3 - "$flow_state_file" <<'PY'
+import json
+import sys
+stage = "none"
+run_id = "active"
+completed = 0
+try:
+    with open(sys.argv[1], "r", encoding="utf-8") as fh:
+        payload = json.load(fh)
+    stage_value = payload.get("currentStage")
+    run_value = payload.get("activeRunId")
+    completed_value = payload.get("completedStages")
+    if isinstance(stage_value, str) and stage_value:
+        stage = stage_value
+    if isinstance(run_value, str) and run_value:
+        run_id = run_value
+    if isinstance(completed_value, list):
+        completed = len(completed_value)
+except Exception:
+    pass
+print(stage)
+print(run_id)
+print(completed)
+PY
+)
+    {
+      IFS= read -r CCLAW_HOOK_FLOW_STAGE
+      IFS= read -r CCLAW_HOOK_FLOW_RUN_ID
+      IFS= read -r CCLAW_HOOK_FLOW_COMPLETED
+    } <<EOF
+$flow_meta
+EOF
+    [ -n "$CCLAW_HOOK_FLOW_STAGE" ] || CCLAW_HOOK_FLOW_STAGE="none"
+    [ -n "$CCLAW_HOOK_FLOW_RUN_ID" ] || CCLAW_HOOK_FLOW_RUN_ID="active"
+    [ -n "$CCLAW_HOOK_FLOW_COMPLETED" ] || CCLAW_HOOK_FLOW_COMPLETED="0"
+  fi
+}
+`;
+}
 export function sessionStartScript(_options = {}) {
     return `#!/usr/bin/env bash
 # cclaw session-start hook — generated by cclaw sync
 # Injects using-cclaw + flow status + active artifacts + compact knowledge digest + checkpoint/activity summary.
 set -euo pipefail
 
-${DETECT_ROOT}
+${RUNTIME_SHELL_DETECT_ROOT}
 
 STATE_FILE="$ROOT/${RUNTIME_ROOT}/state/flow-state.json"
 ACTIVE_FEATURE_FILE="$ROOT/${RUNTIME_ROOT}/state/active-feature.json"
@@ -567,7 +728,7 @@ export function stopCheckpointScript() {
 # Writes checkpoint state and reminds agent about flow/session consistency.
 set -euo pipefail
 
-${DETECT_ROOT}
+${RUNTIME_SHELL_DETECT_ROOT}
 
 INPUT=$(cat 2>/dev/null || echo '{}')
 
@@ -844,7 +1005,7 @@ export function runHookDispatcherScript() {
 # Single entrypoint used by harness hook JSON wiring.
 set -euo pipefail
 
-${DETECT_ROOT}
+${RUNTIME_SHELL_DETECT_ROOT}
 
 if [ "$#" -lt 1 ]; then
   printf 'Usage: bash ${RUNTIME_ROOT}/hooks/run-hook.cmd <session-start|stop-checkpoint|pre-compact|prompt-guard|workflow-guard|context-monitor>\\n' >&2
@@ -895,7 +1056,7 @@ export function stageCompleteScript() {
 # mutation to \`cclaw internal advance-stage\`.
 set -euo pipefail
 
-${DETECT_ROOT}
+${RUNTIME_SHELL_DETECT_ROOT}
 
 if [ "$#" -lt 1 ]; then
   printf 'Usage: bash ${RUNTIME_ROOT}/hooks/stage-complete.sh <stage> [--passed=...] [--evidence-json=...] [--waive-delegation=...] [--waiver-reason=...]\\n' >&2
@@ -926,9 +1087,7 @@ export function preCompactScript() {
 # having to re-derive it from scratch.
 set -uo pipefail
 
-${DETECT_ROOT}
-
-INPUT=$(cat 2>/dev/null || echo '{}')
+${RUNTIME_SHELL_DETECT_ROOT}
 
 STATE_DIR="$ROOT/${RUNTIME_ROOT}/state"
 STATE_FILE="$STATE_DIR/flow-state.json"
@@ -1069,31 +1228,8 @@ exit 0
 export { claudeHooksJsonWithObservation as claudeHooksJson } from "./observe.js";
 export { cursorHooksJsonWithObservation as cursorHooksJson } from "./observe.js";
 export { codexHooksJsonWithObservation as codexHooksJson } from "./observe.js";
+export { nodeHookRuntimeScript } from "./node-hooks.js";
 // ---------------------------------------------------------------------------
 // OpenCode plugin — JS module
 // ---------------------------------------------------------------------------
 export { opencodePluginJs } from "./opencode-plugin.js";
-// ---------------------------------------------------------------------------
-// AGENTS.md block for hooks
-// ---------------------------------------------------------------------------
-export function hooksAgentsMdBlock() {
-    return `### Hooks (real lifecycle integration)
-
-Cclaw generates real hook integrations for every harness that exposes a
-hook primitive:
-- **Claude/Cursor:** lifecycle rehydration + PreToolUse/PostToolUse + Stop
-- **OpenCode:** session lifecycle + system transform rehydration + bootstrap parity (digest/warnings/knowledge snapshot)
-- **Codex:** Codex CLI ≥ v0.114 exposes lifecycle hooks at \`.codex/hooks.json\`, gated behind \`[features] codex_hooks = true\` in \`~/.codex/config.toml\`. \`PreToolUse\`/\`PostToolUse\` intercept **only the \`Bash\` tool** in Codex; \`Write\`/\`Edit\`/\`WebSearch\`/MCP calls are substituted via the \`/cc\` skill bodies under \`.agents/skills/cc*/SKILL.md\` and explicit in-turn agent steps. See \`.cclaw/references/harnesses/codex-playbook.md\` for the coverage matrix.
-
-| Harness | Hook file | Events |
-|---------|-----------|--------|
-| Claude Code | \`.claude/hooks/hooks.json\` | SessionStart(startup/resume/clear/compact), PreToolUse, PostToolUse, Stop |
-| Cursor | \`.cursor/hooks.json\` | sessionStart/sessionResume/sessionClear/sessionCompact, preToolUse, postToolUse, stop |
-| OpenCode | \`${RUNTIME_ROOT}/hooks/opencode-plugin.mjs\` | session.created/updated/resumed/cleared/compacted/idle, tool.execute.before/after, system transform |
-| Codex | \`.codex/hooks.json\` | SessionStart(startup/resume), UserPromptSubmit, PreToolUse(Bash), PostToolUse(Bash), Stop (feature-gated by \`codex_hooks = true\`) |
-
-Hook state files:
-- \`${RUNTIME_ROOT}/state/stage-activity.jsonl\`
-- \`${RUNTIME_ROOT}/state/checkpoint.json\`
-`;
-}

package/dist/content/iron-laws.d.ts

@@ -98,6 +98,14 @@ export declare const IRON_LAWS: readonly [{
     readonly enforcement: "PreToolUse";
     readonly severity: "hard-gate";
     readonly appliesTo: ["ship"];
+}, {
+    readonly id: "review-coverage-complete-before-ship";
+    readonly title: "Review layer coverage before ship";
+    readonly rule: "Block ship finalization when review-army does not confirm full Layer 1/2 coverage map.";
+    readonly rationale: "Prevents finalization when multi-pass review evidence is incomplete or partially missing.";
+    readonly enforcement: "PreToolUse";
+    readonly severity: "hard-gate";
+    readonly appliesTo: ["ship"];
 }, {
     readonly id: "subagent-task-self-contained";
     readonly title: "Subagent tasks are self-contained";

package/dist/content/iron-laws.js

@@ -71,6 +71,15 @@ export const IRON_LAWS = [
         severity: "hard-gate",
         appliesTo: ["ship"]
     },
+    {
+        id: "review-coverage-complete-before-ship",
+        title: "Review layer coverage before ship",
+        rule: "Block ship finalization when review-army does not confirm full Layer 1/2 coverage map.",
+        rationale: "Prevents finalization when multi-pass review evidence is incomplete or partially missing.",
+        enforcement: "PreToolUse",
+        severity: "hard-gate",
+        appliesTo: ["ship"]
+    },
     {
         id: "subagent-task-self-contained",
         title: "Subagent tasks are self-contained",

package/dist/content/node-hooks.d.ts

@@ -0,0 +1,14 @@
+export interface NodeHookRuntimeOptions {
+    promptGuardMode?: "advisory" | "strict";
+    workflowGuardMode?: "advisory" | "strict";
+    tddEnforcementMode?: "advisory" | "strict";
+    tddTestPathPatterns?: string[];
+    tddProductionPathPatterns?: string[];
+}
+/**
+ * Node-only hook runtime (single entrypoint).
+ *
+ * Generated into `.cclaw/hooks/run-hook.mjs` and used by all harnesses to avoid
+ * bash/python/jq runtime dependencies.
+ */
+export declare function nodeHookRuntimeScript(options?: NodeHookRuntimeOptions): string;