cowork-flow 0.0.44 → 0.0.46

package/README.md

@@ -39,7 +39,7 @@ template/
 ├── .codex/                    # Codex agents / hooks / config
 ├── .claude/                   # Claude Code settings / agents / hooks
 ├── .opencode/                 # OpenCode agents / commands / plugins
-├── .zcode/                    # ⭐ ZCode 插件（hooks + skills + scaffold instructions）
+├── .zcode/                    # ⭐ ZCode 插件（hooks + skills + agents + scaffold instructions）
 └── .cowork-flow/
     ├── config.yaml            # 项目配置
     ├── scripts/               # Python 运行时
@@ -103,17 +103,25 @@ Skills 维护在 `template/skills/` 唯一源码，`init` / `sync` 时按目录
 ```bash
 cowork-flow install-zcode-plugin     # 安装
 cowork-flow install-zcode-plugin --force  # 覆盖已安装
+cowork-flow install-zcode-plugin --force --prune-old  # 覆盖并清理旧版本缓存
 ```
 
-安装到 `~/.zcode/cli/plugins/cache/zcode-plugins-official/cowork-flow/<version>/`
+安装到 `~/.zcode/cli/plugins/cache/cowork-flow-local/cowork-flow/<version>/`。安装器会同时写入稳定 marketplace source：`~/.zcode/cli/plugins/cache/marketplaces/cowork-flow-local/marketplace.json`，以及 ZCode 当前使用的活动副本：`~/.zcode/cli/plugins/marketplaces/cowork-flow-local/marketplace.json`。`known_marketplaces.json` 指向稳定 source 目录，避免 ZCode 刷新活动副本时删除自己的 source。
 
-ZCode 插件只安装 hook、skills 和轻量说明文件；`.cowork-flow/` 流程文件仍由显式 `cowork-flow init` / `cowork-flow sync` 在项目根目录管理。插件不会通过 scaffold 创建 `.cowork-flow/`，因此不会在多模块项目的模块目录重复落盘流程文件。
+安装新版本时，marketplace 中只保留一个 `cowork-flow` entry 并指向最新版本目录；旧版本缓存默认保留，避免正在运行的 ZCode session 仍引用旧插件根目录。需要清理旧版本时显式传 `--prune-old`。
+
+ZCode 插件只安装 hook、skills、agents 和轻量说明文件；`.cowork-flow/` 流程文件仍由显式 `cowork-flow init` / `cowork-flow sync` 在项目根目录管理。插件不会通过 scaffold 创建 `.cowork-flow/`，因此不会在多模块项目的模块目录重复落盘流程文件。
 
 **Hook 注入内容：**
 - `workflow-state` — 当前任务状态
 - `contract-digest` — 合同摘要（SHA256 fingerprint）
 - `delegated_subtask` — 子代理运行时上下文
 
+**插件子代理：**
+- `cowork-implement` — 绑定 runtime context 后执行计划内实现
+- `cowork-check` — 绑定 runtime context 后做独立检查
+- `cowork-research` — 绑定 runtime context 后做只读调研
+
 ## 任务流程
 
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cowork-flow",
-  "version": "0.0.44",
+  "version": "0.0.46",
   "description": "CLI for installing and maintaining cowork-flow collaboration templates.",
   "type": "module",
   "bin": {

package/src/cli.js

@@ -12,7 +12,7 @@ const HELP = `cowork-flow
 
 Usage:
   cowork-flow init [target] --platform <codex|opencode|claude-code|all> [--developer <name>] [--dry-run] [--force]
-  cowork-flow install-zcode-plugin [--force]
+  cowork-flow install-zcode-plugin [--dry-run] [--force] [--prune-old]
   cowork-flow update
   cowork-flow sync [target] [--dry-run] [--force]
   cowork-flow --version

package/src/commands/install-zcode-plugin.js

@@ -1,17 +1,20 @@
-import { cp, mkdir, readFile, writeFile, access, rm } from 'node:fs/promises';
-import { join, resolve } from 'node:path';
+import { cp, mkdir, readFile, writeFile, access, rm, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
 import { homedir } from 'node:os';
 
 import { readPackageInfo } from '../lib/package-info.js';
 import { templateRoot } from '../lib/paths.js';
 
-const ZCODE_MARKETPLACE = 'zcode-plugins-official';
+const ZCODE_MARKETPLACE = 'cowork-flow-local';
+const LEGACY_ZCODE_MARKETPLACE = 'zcode-plugins-official';
 const PLUGIN_NAME = 'cowork-flow';
+const LOCAL_MARKETPLACE_DESCRIPTION = 'Local marketplace registration for cowork-flow during local development.';
 
 function parseArgs(args) {
   return {
     dryRun: args.includes('--dry-run'),
-    force: args.includes('--force')
+    force: args.includes('--force'),
+    pruneOld: args.includes('--prune-old')
   };
 }
 
@@ -24,9 +27,13 @@ async function pathExists(target) {
   }
 }
 
-async function getZCodeCacheDir() {
+function getZCodePluginsRoot() {
   const base = process.env.ZCODE_HOME || join(homedir(), '.zcode');
-  return join(base, 'cli', 'plugins', 'cache', ZCODE_MARKETPLACE, PLUGIN_NAME);
+  return join(base, 'cli', 'plugins');
+}
+
+async function getZCodeCacheDir() {
+  return join(getZCodePluginsRoot(), 'cache', ZCODE_MARKETPLACE, PLUGIN_NAME);
 }
 
 async function readJsonSafe(path) {
@@ -46,14 +53,46 @@ function dirname(path) {
   return idx >= 0 ? path.slice(0, idx) : path;
 }
 
-async function updateMarketplace(cacheRoot, version) {
-  const marketPath = resolve(cacheRoot, '..', '..', '..', 'marketplaces', ZCODE_MARKETPLACE, 'marketplace.json');
-  const market = (await readJsonSafe(marketPath)) || { name: ZCODE_MARKETPLACE, plugins: [], version: 1 };
+function normalizedPath(path) {
+  return path.split('\\').join('/');
+}
+
+function marketplacePaths(pluginsRoot) {
+  return {
+    activeMarketplacePath: join(pluginsRoot, 'marketplaces', ZCODE_MARKETPLACE, 'marketplace.json'),
+    sourceMarketplacePath: join(pluginsRoot, 'cache', 'marketplaces', ZCODE_MARKETPLACE, 'marketplace.json')
+  };
+}
+
+async function updateMarketplace(pluginsRoot, cacheRoot, version, manifest = {}) {
+  const { activeMarketplacePath, sourceMarketplacePath } = marketplacePaths(pluginsRoot);
+  const market = (await readJsonSafe(sourceMarketplacePath))
+    || (await readJsonSafe(activeMarketplacePath))
+    || {
+      name: ZCODE_MARKETPLACE,
+      description: LOCAL_MARKETPLACE_DESCRIPTION,
+      plugins: [],
+      version: 1
+    };
+  const pluginPath = normalizedPath(join(cacheRoot, version));
+
+  market.name = ZCODE_MARKETPLACE;
+  market.description = market.description || LOCAL_MARKETPLACE_DESCRIPTION;
+  market.version = 1;
+  if (!Array.isArray(market.plugins)) {
+    market.plugins = [];
+  }
 
   const entry = {
-    cachePath: join(cacheRoot, version).split('\\').join('/'),
+    author: manifest.author || { name: 'fisklikewater' },
+    category: 'developer-tools',
+    description: manifest.description || 'cowork-flow task lifecycle, hooks, skills, and fixed subagents for ZCode.',
+    license: manifest.license || 'MIT',
     name: PLUGIN_NAME,
-    source: 'filesystem',
+    source: {
+      source: 'directory',
+      path: pluginPath
+    },
     version
   };
 
@@ -64,15 +103,99 @@ async function updateMarketplace(cacheRoot, version) {
     market.plugins.push(entry);
   }
 
-  await mkdir(dirname(marketPath), { recursive: true });
-  await writeJsonAtomic(marketPath, market);
+  for (const targetPath of [sourceMarketplacePath, activeMarketplacePath]) {
+    await mkdir(dirname(targetPath), { recursive: true });
+    await writeJsonAtomic(targetPath, market);
+  }
+  return { activeMarketplacePath, sourceMarketplacePath };
+}
+
+async function updateKnownMarketplaces(pluginsRoot) {
+  const knownPath = join(pluginsRoot, 'known_marketplaces.json');
+  const known = (await readJsonSafe(knownPath)) || {
+    version: 1,
+    marketplaces: []
+  };
+  const now = new Date().toISOString();
+  const marketplaceDir = join(pluginsRoot, 'cache', 'marketplaces', ZCODE_MARKETPLACE);
+  const existingIdx = Array.isArray(known.marketplaces)
+    ? known.marketplaces.findIndex((marketplace) => marketplace.id === ZCODE_MARKETPLACE)
+    : -1;
+  const existing = existingIdx >= 0 ? known.marketplaces[existingIdx] : {};
+  const entry = {
+    id: ZCODE_MARKETPLACE,
+    source: {
+      source: 'directory',
+      path: normalizedPath(marketplaceDir)
+    },
+    name: ZCODE_MARKETPLACE,
+    description: LOCAL_MARKETPLACE_DESCRIPTION,
+    addedAt: existing.addedAt || now,
+    pluginCount: 1,
+    lastUpdated: now
+  };
+
+  known.version = 1;
+  if (!Array.isArray(known.marketplaces)) {
+    known.marketplaces = [];
+  }
+  if (existingIdx >= 0) {
+    known.marketplaces[existingIdx] = entry;
+  } else {
+    known.marketplaces.push(entry);
+  }
+
+  await mkdir(dirname(knownPath), { recursive: true });
+  await writeJsonAtomic(knownPath, known);
+  return knownPath;
+}
+
+async function removeLegacyMarketplaceEntry(pluginsRoot) {
+  const legacyPath = join(
+    pluginsRoot,
+    'marketplaces',
+    LEGACY_ZCODE_MARKETPLACE,
+    'marketplace.json'
+  );
+  const legacy = await readJsonSafe(legacyPath);
+  if (!legacy || !Array.isArray(legacy.plugins)) {
+    return false;
+  }
+
+  const filteredPlugins = legacy.plugins.filter((plugin) => plugin.name !== PLUGIN_NAME);
+  if (filteredPlugins.length === legacy.plugins.length) {
+    return false;
+  }
+
+  legacy.plugins = filteredPlugins;
+  await writeJsonAtomic(legacyPath, legacy);
+  return true;
+}
+
+async function pruneOldVersions(cacheRoot, currentVersion) {
+  if (!(await pathExists(cacheRoot))) {
+    return [];
+  }
+
+  const removed = [];
+  const entries = await readdir(cacheRoot, { withFileTypes: true });
+  for (const entry of entries) {
+    if (!entry.isDirectory() || entry.name === currentVersion) {
+      continue;
+    }
+    const target = join(cacheRoot, entry.name);
+    await rm(target, { recursive: true, force: true });
+    removed.push(entry.name);
+  }
+  return removed;
 }
 
 export async function runInstallZCodePlugin(args = []) {
-  const { dryRun, force } = parseArgs(args);
+  const { dryRun, force, pruneOld } = parseArgs(args);
   const pluginSrc = join(templateRoot, ".zcode");
   const skillsSrc = join(templateRoot, "skills");
   const { version } = await readPackageInfo();
+  const manifest = (await readJsonSafe(join(pluginSrc, '.zcode-plugin', 'plugin.json'))) || {};
 
   if (!(await pathExists(pluginSrc))) {
     throw new Error(`ZCode plugin source missing at ${pluginSrc}. Reinstall cowork-flow.`);
@@ -81,19 +204,32 @@ export async function runInstallZCodePlugin(args = []) {
     throw new Error(`Skills source missing at ${skillsSrc}. Reinstall cowork-flow.`);
   }
 
+  const pluginsRoot = getZCodePluginsRoot();
   const cacheRoot = await getZCodeCacheDir();
   const destDir = join(cacheRoot, version);
 
-  if (!force && (await pathExists(destDir))) {
-    console.log(`cowork-flow ZCode plugin already installed at ${destDir}`);
-    console.log('Use --force to overwrite.');
-    return;
-  }
-
   if (dryRun) {
     console.log(`[dry-run] Would install ZCode plugin:`);
     console.log(`  Plugin: ${pluginSrc} -> ${destDir}`);
     console.log(`  Skills: ${skillsSrc} -> ${join(destDir, 'skills')}`);
+    console.log(`  Marketplace source: ${join(pluginsRoot, 'cache', 'marketplaces', ZCODE_MARKETPLACE, 'marketplace.json')}`);
+    console.log(`  Active marketplace: ${join(pluginsRoot, 'marketplaces', ZCODE_MARKETPLACE, 'marketplace.json')}`);
+    console.log(`  Known marketplaces: ${join(pluginsRoot, 'known_marketplaces.json')}`);
+    return;
+  }
+
+  if (!force && (await pathExists(destDir))) {
+    await updateMarketplace(pluginsRoot, cacheRoot, version, manifest);
+    await updateKnownMarketplaces(pluginsRoot);
+    await removeLegacyMarketplaceEntry(pluginsRoot);
+    if (pruneOld) {
+      const removed = await pruneOldVersions(cacheRoot, version);
+      if (removed.length > 0) {
+        console.log(`Pruned old cowork-flow ZCode plugin versions: ${removed.join(', ')}`);
+      }
+    }
+    console.log(`cowork-flow ZCode plugin already installed at ${destDir}`);
+    console.log('Use --force to overwrite.');
     return;
   }
 
@@ -121,7 +257,15 @@ export async function runInstallZCodePlugin(args = []) {
   // Copy canonical skills into the plugin cache so plugin.json "skills" resolves.
   await cp(skillsSrc, join(destDir, "skills"), { recursive: true, force: true });
 
-  await updateMarketplace(cacheRoot, version);
+  await updateMarketplace(pluginsRoot, cacheRoot, version, manifest);
+  await updateKnownMarketplaces(pluginsRoot);
+  await removeLegacyMarketplaceEntry(pluginsRoot);
+  if (pruneOld) {
+    const removed = await pruneOldVersions(cacheRoot, version);
+    if (removed.length > 0) {
+      console.log(`Pruned old cowork-flow ZCode plugin versions: ${removed.join(', ')}`);
+    }
+  }
 
   // Write seed file for install tracking
   await writeJsonAtomic(join(destDir, ".zcode-plugin-seed.json"), {

package/template/.cowork-flow/.version

@@ -1 +1 @@
-0.0.44
+0.0.46

package/template/.cowork-flow/scripts/adapters/cli/subagent.py

@@ -72,6 +72,8 @@ def _detect_host() -> str:
         return "claude-code"
     if env.get("CODEX_SESSION_ID") or env.get("CODEX_THREAD_ID"):
         return "codex"
+    if env.get("ZCODE_SESSION_ID"):
+        return "zcode"
     if env.get("OPENCODE_SESSION_ID"):
         return "opencode"
     return "codex"
@@ -82,6 +84,7 @@ def _detect_adapter(host: str) -> str:
         "claude-code": "claude-code.hooks",
         "codex": "codex.spawn_agent",
         "opencode": "opencode.task",
+        "zcode": "zcode.plugin",
     }
     return adapters.get(host, "codex.spawn_agent")
 

package/template/.cowork-flow/scripts/runtime/session_state.py

@@ -69,6 +69,7 @@ def _resolve_env_context_key() -> str | None:
         return _sanitize(explicit)
 
     for prefix, env_name in (
+        ("zcode", "ZCODE_SESSION_ID"),
         ("opencode", "OPENCODE_SESSION_ID"),
         ("claude", "CLAUDE_SESSION_ID"),
         ("claude", "CLAUDE_CODE_SESSION_ID"),
@@ -90,6 +91,7 @@ def _resolve_input_context_key(values: Mapping[str, object] | None) -> str | Non
         return _sanitize(explicit)
 
     for prefix, names in (
+        ("zcode", ("ZCODE_SESSION_ID", "zcode_session_id")),
         ("opencode", ("OPENCODE_SESSION_ID", "opencode_session_id", "sessionID", "sessionId")),
         ("claude", ("CLAUDE_SESSION_ID", "claude_session_id", "CLAUDE_CODE_SESSION_ID", "claude_code_session_id")),
         ("codex", ("CODEX_SESSION_ID", "codex_session_id", "session_id")),

package/template/.zcode/.zcode-plugin/plugin.json

@@ -1,10 +1,12 @@
 {
   "name": "cowork-flow",
-  "version": "0.0.44",
+  "version": "0.0.46",
   "description": "AI 协作工作流引擎：任务生命周期、子代理调度、门禁与状态注入。将 cowork-flow 的完整工作流带入 ZCode。",
   "author": {
     "name": "fisklikewater"
   },
   "license": "MIT",
+  "hooks": "hooks/hooks.json",
+  "agents": "agents",
   "skills": "skills"
 }

package/template/.zcode/agents/cowork-check.md

@@ -0,0 +1,27 @@
+---
+name: cowork-check
+description: Cowork-flow check fixed subagent for independent implementation review with runtime context binding.
+---
+
+You are the `cowork-check` fixed subagent for ZCode.
+
+Read and apply these plugin Skills before review work:
+
+- `skills/agent-dispatch/SKILL.md`
+- `skills/task-review/SKILL.md`
+- `skills/decision-audit/SKILL.md`
+- `skills/spec-sync/SKILL.md`
+
+Execution:
+
+1. Follow `agent-dispatch` to bind runtime context. If binding fails, report `needs_context` and stop.
+2. Read the task directory, `decision-anchor.md`, linked plan, the `check.jsonl` context index, every referenced `file` entry, and current `git diff`; do not write review conclusions to JSONL.
+3. Apply `task-review` to verify scope, tests, specs, advisory facts, lifecycle facts, and Definition of Done coverage.
+4. Fix only clearly in-scope issues; otherwise report findings with acceptance IDs, resolutions, `test_intent_review` (test intent review), and verification commands.
+
+Rules:
+
+- Do not invoke subagents.
+- Do not run task start, finish, archive, unscoped resume, commit, or push.
+- Treat backend/frontend natural-language specs as checklist context, not dynamic hard validators.
+- Do not accept shallow tests that would still pass when target behavior breaks.

package/template/.zcode/agents/cowork-implement.md

@@ -0,0 +1,28 @@
+---
+name: cowork-implement
+description: Cowork-flow implementation fixed subagent for bounded code changes with runtime context binding.
+---
+
+You are the `cowork-implement` fixed subagent for ZCode.
+
+Read and apply these plugin Skills before task work:
+
+- `skills/agent-dispatch/SKILL.md`
+- `skills/decision-audit/SKILL.md`
+- `skills/spec-sync/SKILL.md`
+- `skills/test-first/SKILL.md` for behavior changes
+
+Execution:
+
+1. Follow `agent-dispatch` to bind runtime context. If binding fails, report `needs_context` and stop.
+2. Read the task directory, `decision-anchor.md`, optional `info.md`, `implement.jsonl`, every JSONL `file` entry, and the linked plan.
+3. Follow the plan in order, keeping edits inside assigned scope.
+4. Use project specs and quality sources as checklist context; runtime gates remain kernel-owned commands.
+5. Run planned verification and report changed files, acceptance IDs, verification commands, and spec updates or why none were needed.
+
+Rules:
+
+- Do not invoke subagents.
+- Do not run task start, finish, archive, unscoped resume, commit, or push.
+- Do not create task-local review artifacts, `tdd.jsonl`, or TDD evidence records in `check.jsonl`.
+- Do not claim completion without current verification.

package/template/.zcode/agents/cowork-research.md

@@ -0,0 +1,21 @@
+---
+name: cowork-research
+description: Cowork-flow research-only fixed subagent for sourced investigation with runtime context binding.
+---
+
+You are the `cowork-research` fixed subagent for ZCode.
+
+Read and apply `skills/agent-dispatch/SKILL.md` before research work.
+
+Execution:
+
+1. Follow `agent-dispatch` to bind runtime context. If binding fails, report `needs_context` and stop.
+2. Read the task directory, assignment, and prompt-named context.
+3. Write research notes only under the assigned task `research/` directory when asked.
+4. Report sourced findings, uncertainty, and recommended next action.
+
+Rules:
+
+- Do not invoke subagents.
+- Do not edit code, specs, task state, or git state.
+- Do not run task start, finish, archive, unscoped resume, commit, or push.

package/template/.zcode/hooks/hooks.json

@@ -5,9 +5,12 @@
         "matcher": "startup|clear|compact",
         "hooks": [
           {
-            "type": "command",
-            "command": "node ${ZCODE_PLUGIN_ROOT}/hooks/inject-context.js",
-            "async": false
+            "type": "process",
+            "command": "node",
+            "args": [
+              "${ZCODE_PLUGIN_ROOT}/hooks/inject-context.js"
+            ],
+            "timeoutMs": 5000
           }
         ]
       }
@@ -16,9 +19,12 @@
       {
         "hooks": [
           {
-            "type": "command",
-            "command": "node ${ZCODE_PLUGIN_ROOT}/hooks/inject-context.js",
-            "async": false
+            "type": "process",
+            "command": "node",
+            "args": [
+              "${ZCODE_PLUGIN_ROOT}/hooks/inject-context.js"
+            ],
+            "timeoutMs": 5000
           }
         ]
       }

package/template/.zcode/hooks/inject-context.js

@@ -29,7 +29,22 @@ const DEFAULT_CONTRACT_REGISTRY = {
   ],
 };
 
-function detectEventName() {
+function readHookInput() {
+  if (process.stdin.isTTY) return {};
+  try {
+    const raw = readFileSync(0, "utf8").trim();
+    if (!raw) return {};
+    const parsed = JSON.parse(raw);
+    return parsed && typeof parsed === "object" ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+
+function detectEventName(input) {
+  if (typeof input?.hook_event_name === "string" && input.hook_event_name.trim()) {
+    return input.hook_event_name.trim();
+  }
   if (process.env.CURSOR_PLUGIN_ROOT) return "SessionStart";
   return "UserPromptSubmit";
 }
@@ -43,12 +58,9 @@ function outputFormat() {
 // ---------------------------------------------------------------------------
 // Find project root
 // ---------------------------------------------------------------------------
-function findProjectRoot() {
-  const envDir = process.env.ZCODE_PROJECT_DIR;
-  if (envDir) {
-    return existsSync(join(envDir, DIR_WORKFLOW)) ? envDir : null;
-  }
-  let current = process.cwd();
+function findWorkflowRoot(startDir) {
+  if (typeof startDir !== "string" || !startDir.trim()) return null;
+  let current = startDir;
   const root = dirname(current);
   while (current !== root) {
     if (existsSync(join(current, DIR_WORKFLOW))) return current;
@@ -57,6 +69,20 @@ function findProjectRoot() {
   return existsSync(join(current, DIR_WORKFLOW)) ? current : null;
 }
 
+function findProjectRoot(input) {
+  const candidates = [
+    input?.cwd,
+    process.env.ZCODE_PROJECT_DIR,
+    process.env.CLAUDE_PROJECT_DIR,
+    process.cwd(),
+  ];
+  for (const candidate of candidates) {
+    const root = findWorkflowRoot(candidate);
+    if (root) return root;
+  }
+  return null;
+}
+
 // ---------------------------------------------------------------------------
 // Read active task from .cowork-flow/.runtime/sessions/
 // ---------------------------------------------------------------------------
@@ -289,14 +315,15 @@ function main() {
     process.exit(0);
   }
 
-  const event = detectEventName();
+  const input = readHookInput();
+  const event = detectEventName(input);
   const format = outputFormat();
-  const repoRoot = findProjectRoot();
+  const repoRoot = findProjectRoot(input);
 
   let context;
 
-  const envDir = process.env.ZCODE_PROJECT_DIR;
-  const effectiveRoot = repoRoot || (envDir && existsSync(join(envDir, DIR_WORKFLOW)) ? envDir : null);
+  const envDir = process.env.ZCODE_PROJECT_DIR || process.env.CLAUDE_PROJECT_DIR;
+  const effectiveRoot = repoRoot || findWorkflowRoot(envDir);
 
   if (!effectiveRoot) {
     context = `<workflow-state>
@@ -308,7 +335,7 @@ Source: cowork-flow-plugin
 </workflow-state>`;
   } else {
     // PRIORITY 1: Detect delegated_subtask from runtime context
-    const userPrompt = "";
+    const userPrompt = typeof input.prompt === "string" ? input.prompt : "";
     const delegated = detectDelegatedSubtask(effectiveRoot, userPrompt);
     if (delegated) {
       context = buildDelegatedSubtask(delegated.contextId, delegated.ctx);
@@ -321,7 +348,7 @@ Source: cowork-flow-plugin
   }
 
   // Inject contract digest
-  const rootForDigest = effectiveRoot || envDir;
+  const rootForDigest = effectiveRoot || envDir || input.cwd;
   if (rootForDigest) {
     const contractDigest = buildContractDigest(rootForDigest);
     context = `${contractDigest}\n\n${context}`;

package/template/.zcode/hooks/inject-context.selfcheck.mjs

@@ -5,7 +5,7 @@
 
 import { existsSync, writeFileSync, mkdirSync, rmSync } from "fs";
 import { join, dirname } from "path";
-import { execSync } from "child_process";
+import { spawnSync } from "child_process";
 import assert from "assert/strict";
 
 const tmpRoot = join(import.meta.dirname, ".selfcheck-tmp");
@@ -27,12 +27,18 @@ function test(name, fn) {
 }
 
 function runHook(env = {}, stdin) {
-  return execSync(`node ${hookScript}`, {
+  const result = spawnSync(process.execPath, [hookScript], {
     env: { ...process.env, ...env },
     encoding: "utf8",
     cwd: import.meta.dirname,
     input: stdin,
   });
+  if (result.status !== 0) {
+    const error = new Error(result.stderr || `hook exited with ${result.status}`);
+    error.status = result.status;
+    throw error;
+  }
+  return result.stdout;
 }
 
 function writeProjectFile(repoRoot, relativePath, content) {