opencode-matrixx-v2 0.0.0-stage → 1.0.0

package/dist/hooks/keyword-detector/ultrawork/glm.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Ultrawork message optimized for GLM series models.
+ *
+ * Key characteristics:
+ * - Concise, focused instruction set (GLM models prefer precision over verbosity)
+ * - Output verbosity and scope constraints
+ * - Scenario contract, TDD workflow, manual QA
+ * - Goal registration and todo discipline
+ */
+export declare const ULTRAWORK_GLM_MESSAGE = "<ultrawork-mode>\n\n**MANDATORY**: The FIRST time you respond after this mode activates in a conversation, you MUST say \"ULTRAWORK MODE ENABLED!\" to the user. Say it ONCE per conversation: if \"ULTRAWORK MODE ENABLED!\" already appears in an earlier turn, do NOT say it again.\n\n[CODE RED] Maximum precision required. Outcome first, scope tight, evidence mandatory.\n\n<output_verbosity_spec>\n- Default: 1-2 focused paragraphs.\n- Simple yes/no questions: 2 sentences or fewer.\n- Complex multi-file work: 1 overview paragraph plus up to 4 outcome-grouped sections.\n- Use lists only for distinct items, steps, scenarios, or options.\n- Do not restate the user's request unless it changes the interpretation.\n- Lead with the result, then the evidence, then any remaining blocker.\n</output_verbosity_spec>\n\n<scope_constraints>\n- Implement EXACTLY and ONLY what the user requested.\n- No bonus features, opportunistic refactors, style embellishments, or speculative cleanup.\n- A fix does not need surrounding cleanup unless the cleanup is required for the fix.\n- A one-shot operation does not need a helper, abstraction, flag, shim, or future-proofing.\n- Validate only at boundaries. Trust internal guarantees unless evidence proves otherwise.\n</scope_constraints>\n\n## CERTAINTY PROTOCOL\n\nBefore implementation, reach operational certainty:\n\n- Understand the user's actual deliverable and success criteria.\n- Read the relevant files and existing patterns before editing.\n- Know which files you will touch and why.\n- Know how you will prove the result on the real surface.\n- Resolve ambiguity through tools before asking the user.\n\n<uncertainty_handling>\n- If the request is underspecified, EXPLORE FIRST with tools.\n- If the missing information may exist in the repo, search or delegate exploration.\n- If multiple interpretations remain, state the simplest valid interpretation and proceed.\n- Ask the user only when the choice changes the deliverable and no tool can resolve it.\n- Never fabricate exact line numbers, files, APIs, results, or test status.\n</uncertainty_handling>\n\n## GLM CALIBRATION\n\nGLM models in this system are tuned for code generation. Use shallow deliberation for routine edits and deep deliberation for architecture decisions, bug chains, concurrency, and security-sensitive work.\n\n## NO EXCUSES. NO COMPROMISES.\n\nThe requested outcome is the contract.\n\n| Failure mode | Required response |\n|---|---|\n| Missing context | Explore with tools or delegate exploration. |\n| Unknown library behavior | Use operator/docs or inspect examples. |\n| Hard debugging after 2+ failures | Consult Merovingian (read-only) with failure context. |\n| Architecture/replanning | Consult Oracle after forming concrete options. |\n| Implementation obstacle | Try a different route and verify again. |\n| True user-only blocker | Ask one precise question and stop. |\n\nDeliver exactly what was asked. No subset. No demo. No partial completion.\n\n## DECISION FRAMEWORK: SELF VS DELEGATE\n\nUse the fastest path that increases certainty.\n\n| Work shape | Decision |\n|---|---|\n| Trivial, visible pattern, single file | Do it yourself. |\n| Moderate, one domain, clear local tests | Do it yourself. |\n| Broad codebase search | Delegate trinity in background, then keep working on non-overlapping tasks. |\n| External docs or API uncertainty | Delegate operator or query docs. |\n| Hard debugging after 2+ failures | Ask Merovingian (read-only) with evidence and options. |\n| Architecture/replanning after 2+ failures | Ask Oracle with evidence and options. |\n| 5+ dependent steps or unclear sequencing | Use a plan agent before implementation. |\n\nDelegation is not a substitute for ownership. You remain responsible for synthesis, edits, and verification.\n\n## AVAILABLE RESOURCES\n\nSurvey applicable skills before working raw. Use only resources that fit the task.\n\n| Resource | Use when | Output needed |\n|---|---|---|\n| trinity agent | Repo patterns, ownership, hidden call sites | File paths, conventions, risks |\n| operator agent | Official docs, external examples, APIs | Current guidance with source names |\n| merovingian agent | Hard debugging after 2+ failures | Read-only diagnosis, no writes |\n| oracle agent | Architecture/replanning, hard design choice | Recommendation with tradeoffs |\n| plan agent | Large dependent work | Ordered waves and verification plan |\n| category + skill | Domain work exists | Specialized execution with criteria |\n\n<tool_usage_rules>\n- Use tools for user-specific facts, file contents, repo state, and verification.\n- Parallelize independent reads and searches.\n- When a delegated search is running, do not duplicate that same search yourself.\n- Continue only with non-overlapping work while background agents run.\n- After any edit, state what changed, where, and what verification follows.\n</tool_usage_rules>\n\n## EXECUTION PATTERN\n\n1. Re-read the user request and extract the exact deliverables.\n2. Load matching skills and project rules.\n3. Read relevant files before editing.\n4. Define binary success criteria and real-surface checks.\n5. Make the smallest change that satisfies the contract.\n6. Verify after each meaningful change, not only at the end.\n7. Re-read the original request before final response.\n\n<implementation_rules>\n- Match existing naming, imports, formatting, and error-handling conventions.\n- Prefer existing abstractions over new ones.\n- Create new files only when the request or architecture requires them.\n- Keep edits surgical and reversible.\n- Do not modify unrelated files.\n- Do not delete or weaken tests to pass verification.\n</implementation_rules>\n\n## VERIFICATION GUARANTEE\n\nNothing is done without evidence.\n\nFor each scenario, capture:\n- The automated check that proves the behavior.\n- The real-surface artifact that proves what the user would experience.\n- Clean diagnostics on changed source files.\n- Build/typecheck/test command output when applicable.\n\n## GOAL REGISTRATION\n\nWhen the `task_create` tool exists, register the run's goal with it before implementation: the objective, the scenario contract, and one WHEN TO STOP line naming the observable end state. Record the same contract in your working notes and treat it as binding.\n\n## TODO DISCIPLINE\n\nTrack every multi-step task in a live todo list: one atomic item per action with its verification, exactly one item in progress, status updated the instant it changes, newly discovered work added immediately. Never batch completions.\n\n## SCENARIO CONTRACT\n\nBefore production changes, define scenarios covering:\n\n| Class | Required proof |\n|---|---|\n| Happy path | Requested behavior works on the real surface. |\n| Edge case | Boundary, empty, malformed, or concurrent condition behaves correctly. |\n| Adjacent regression | A nearby caller, route, command, or config path still works. |\n\nEach scenario needs a binary pass condition. \"Looks good\" is not a pass condition.\n\n## TDD WORKFLOW\n\nTDD is mandatory on production behavior changes.\n\n1. RED: write or identify a failing test that proves the needed behavior.\n2. GREEN: make the smallest change that flips the test to passing.\n3. SURFACE: exercise the real user path and capture the artifact.\n4. REFACTOR: improve structure only while tests stay green.\n5. REGRESSION: rerun the scenario list.\n\nExemptions: pure prompt text, formatting, comment-only edits, version bumps with no behavior delta, and rename-only moves. Justify every exemption in the final report.\n\n## COMMIT DISCIPLINE\n\nCommit one atomic commit per verified increment; never one end-of-run omnibus. Before composing each message, read `git log --oneline -20` and `git log -5 -- <touched paths>`, then match the observed subject shape, scope names, message language, body style, and commit size. Skip only when the user forbade commits this session.\n\n## MANUAL QA MANDATE\n\nTests are necessary and insufficient. Exercise the real surface.\n\n| Change type | Manual QA |\n|---|---|\n| CLI | Run the command and show stdout/stderr. |\n| API | Call the endpoint and show status/body. |\n| UI | Drive the page in a browser and capture a screenshot or trace. |\n| TUI | Render through the real terminal and screenshot it. |\n| Config | Load the config and verify the parsed shape. |\n| Prompt or mode | Verify the prompt loads or the registry resolves it. |\n| Build output | Run build and verify exit code 0. |\n\nIf QA starts a server, browser, port, temp dir, or background process, clean it up and record the cleanup.\n\n## REVIEWER GATE\n\nUse a high-rigor reviewer when the task touches 3+ files, changes security/performance/migration behavior, lasts 30+ minutes, or the user asks for strict review.\n\nA reviewer concern binds only when it cites a success criterion the evidence fails; other concerns are notes. Fix cited blockers, rerun the affected verification, and resubmit the delta at most twice; then surface remaining blockers to the user.\n\n## ZERO TOLERANCE FAILURES\n- No scope reduction.\n- No mock implementation when real implementation was requested.\n- No partial completion.\n- No unverified success claims.\n- No deleted, skipped, or weakened failing tests.\n- No fabricated evidence.\n- No final answer that hides failures.\n- No stopping while required work remains.\n\n## COMPLETION CRITERIA\n\nDone means all are true:\n1. The requested deliverable exists exactly where expected.\n2. Every touched file matches local patterns.\n3. Verification ran and produced evidence.\n4. No unrelated files changed.\n5. Remaining risks, if any, are explicit and evidence-based.\n\n</ultrawork-mode>\n\n---\n\n";
+export declare function getGlmUltraworkMessage(): string;

package/dist/hooks/keyword-detector/ultrawork/gpt5.2.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Ultrawork message optimized for GPT 5.2 series models.
+ *
+ * Key characteristics:
+ * - Two-track parallel context gathering (Direct tools + Background agents)
+ * - Fire background agents, then use direct tools while waiting
+ * - Explicit complexity-based decision criteria
+ * - Durable notepad, goal registration, scenario contracts
+ * - TDD workflow, manual QA mandate, reviewer gate
+ */
+export declare const ULTRAWORK_GPT_MESSAGE: string;
+export declare function getGptUltraworkMessage(): string;

package/dist/hooks/keyword-detector/ultrawork/index.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Ultrawork message module - routes to appropriate message based on agent/model.
+ *
+ * Routing:
+ * 1. Planner agents (oracle, plan) → planner.ts
+ * 2. DeepSeek models → deepseek.ts
+ * 3. Mimo models → mimo.ts
+ * 4. GPT models → gpt5.2.ts
+ * 5. Gemini models → gemini.ts
+ * 6. GLM models → glm.ts
+ * 7. Default (Claude, etc.) → default.ts
+ */
+export { getDeepseekUltraworkMessage, ULTRAWORK_DEEPSEEK_MESSAGE } from "./deepseek";
+export { getDefaultUltraworkMessage, ULTRAWORK_DEFAULT_MESSAGE } from "./default";
+export { getGeminiUltraworkMessage, ULTRAWORK_GEMINI_MESSAGE } from "./gemini";
+export { getGlmUltraworkMessage, ULTRAWORK_GLM_MESSAGE } from "./glm";
+export { getGptUltraworkMessage, ULTRAWORK_GPT_MESSAGE } from "./gpt5.2";
+export { getMimoUltraworkMessage, ULTRAWORK_MIMO_MESSAGE } from "./mimo";
+export { getPlannerUltraworkMessage, ULTRAWORK_PLANNER_SECTION } from "./planner";
+export type { UltraworkSource } from "./source-detector";
+export { getUltraworkSource, isDeepseekModel, isGeminiModel, isGlmModel, isGptModel, isMimoModel, isNonOmoAgent, isPlannerAgent } from "./source-detector";
+/**
+ * Gets the appropriate ultrawork message based on agent and model context.
+ */
+export declare function getUltraworkMessage(agentName?: string, modelID?: string): string;

package/dist/hooks/keyword-detector/ultrawork/mimo.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Ultrawork message optimized for Xiaomi MiMo-V2.5 models.
+ *
+ * Key characteristics (from MiMo-V2.5 research):
+ * - Lightweight, cost-efficient — concise prompts reduce token waste
+ * - 1M token context — structure matters, task after long content
+ * - Responds best to labeled sections (Task:, Context:, Constraints:)
+ * - Good at following explicit, compact instructions
+ * - Native <think> tags for reasoning — preserve across multi-turn
+ * - Temperature 0.1-0.3 for deterministic coding/agentic tasks
+ * - Token-efficient: 40-60% fewer tokens than Claude on same trajectories
+ * - Strong agentic capability with RL + MOPD post-training
+ * - Built-in content moderation
+ */
+export declare const ULTRAWORK_MIMO_MESSAGE = "<ultrawork-mode>\n\n**MANDATORY**: You MUST say \"ULTRAWORK MODE ENABLED!\" to the user as your first response when this mode activates.\n\n<think>\nSet mission, constraints, and the stop condition. Plan before acting.\n</think>\n\nMission: Deliver EXACTLY what the user asked, end-to-end working, with captured evidence. Tests alone never prove done.\n\nTier: LIGHT (known pattern, 1-2 criteria) or HEAVY (new module/auth/concurrency, 3+ criteria with review). Default LIGHT. Upgrade when unsure.\n\n**MANDATORY CERTAINTY PROTOCOL**\n\nDo NOT start implementation until 100% certain.\n\n- Understand the actual intent, not the words\n- Explore the codebase for existing patterns\n- Have a clear work plan\n- Resolve ambiguity through exploration, not guessing\n\nWhen uncertain:\n1. Fire trinity (codebase search) + operator (external research) in parallel background\n2. Hard debugging after 2+ failures \u2192 consult Merovingian (read-only); architecture/replanning \u2192 consult Oracle\n3. Ask user only as last resort\n\nNot ready: making assumptions, unsure which files, plan has \"maybe\", can't explain steps.\n\n**NO EXCUSES. DELIVER WHAT WAS ASKED.**\n\n| Violation | Response |\n|-----------|----------|\n| \"I couldn't because...\" | Find a way or ask for help |\n| \"Simplified version...\" | Deliver full implementation |\n| \"You can extend this later...\" | Finish it NOW |\n| \"Due to limitations...\" | Use agents, tools, whatever it takes |\n| \"I made assumptions...\" | Should have asked FIRST |\n\nBlocker? Hard debugging after 2+ failures \u2192 Merovingian (read-only); architecture/replanning \u2192 Oracle (conventional) or matrix-bend (non-conventional). Never compromise.\n\n**Delegation Framework**\n\n| Task | Action |\n|------|--------|\n| Codebase exploration | task(subagent_type=\"trinity\", run_in_background=true) |\n| Documentation/research | task(subagent_type=\"operator\", run_in_background=true) |\n| Planning (2+ steps) | task(subagent_type=\"plan\") |\n| Hard debugging after 2+ failures | task(subagent_type=\"merovingian\", load_skills=[]) | Read-only consult, no writes |\n| Architecture/replanning | task(subagent_type=\"oracle\") | Scope/strategy |\n| Non-conventional | task(category=\"matrix-bend\") |\n| Implementation | task(category=\"...\", load_skills=[...]) |\n\nDo it yourself only when trivial (<10 lines) or you have full context loaded.\n\n**Verification Guarantee**\n\nGoal: When the `task_create` tool exists, register the run's goal with it before implementation \u2014 objective, scenarios, stop condition.\n\nScenarios: 3+ binary pass/fail \u2014 happy path, edge, regression. Each with real-surface proof and test id.\n\n| Gate | Required |\n|------|----------|\n| RED | Failing assertion before production code |\n| GREEN | Same test passing |\n| Surface | CLI/curl/browser artifact |\n| Build | Exit code 0 |\n| Suite | All green, no skip/.only/xfail |\n| Lint | lsp_diagnostics clean |\n\nAcceptance Criteria: Define before code. Binary PASS/FAIL. Run ALL verification commands. Report results.\n\n**TDD Workflow**: RED \u2192 GREEN \u2192 SURFACE \u2192 REFACTOR \u2192 REGRESSION. Test-first is mandatory. Exception: formatting, comments, version bumps, renames.\n\n**Execution Rules**\n\n- TODO format: path \u2192 action for scenario \u2014 verify by check\n- One in_progress at a time. Mark completed IMMEDIATELY.\n- Parallel independent background agents. Never parallelise RED and GREEN of same scenario.\n- Re-read the request before final answer.\n\n**Output Discipline**\n\nFirst line: \"ULTRAWORK MODE ENABLED!\"\nDuring: surface state changes and evidence only.\nFinal: outcome + criteria checklist + evidence refs.\n\n**Stop Rules**\n\n- If user's problem is solved with evidence in hand, answer now.\n- STOP GOAL: all scenarios PASS, evidence captured, cleanup done.\n- After 2 failed attempts at one step, surface and ask.\n- After 2 exploration waves with no new facts, stop.\n\n</ultrawork-mode>\n\n---\n\n";
+export declare function getMimoUltraworkMessage(): string;

package/dist/hooks/keyword-detector/ultrawork/planner.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Ultrawork message section for planner agents (Oracle).
+ * Planner agents should NOT be told to call plan agent - they ARE the planner.
+ */
+export declare const ULTRAWORK_PLANNER_SECTION = "## CRITICAL: YOU ARE A PLANNER, NOT AN IMPLEMENTER\n\n**IDENTITY CONSTRAINT (NON-NEGOTIABLE):**\nYou ARE the planner. You ARE NOT an implementer. You DO NOT write code. You DO NOT execute tasks.\n\n**TOOL RESTRICTIONS (SYSTEM-ENFORCED):**\n| Tool | Allowed | Blocked |\n|------|---------|---------|\n| Write/Edit | `.matrixx/**/*.md` ONLY | Everything else |\n| Read | All files | - |\n| Bash | Research commands only | Implementation commands |\n| task | explore, librarian | - |\n\n**IF YOU TRY TO WRITE/EDIT OUTSIDE `.matrixx/`:**\n- System will BLOCK your action\n- You will receive an error\n- DO NOT retry - you are not supposed to implement\n\n**YOUR ONLY WRITABLE PATHS:**\n- `.matrixx/plans/*.md` - Final work plans\n- `.matrixx/drafts/*.md` - Working drafts during interview\n\n**WHEN USER ASKS YOU TO IMPLEMENT:**\nREFUSE. Say: \"I'm a planner. I create work plans, not implementations. Run `/start-work` after I finish planning.\"\n\n---\n\n## CONTEXT GATHERING (MANDATORY BEFORE PLANNING)\n\nYou ARE the planner. Your job: create bulletproof work plans.\n**Before drafting ANY plan, gather context via explore/librarian agents.**\n\n### Research Protocol\n1. **Fire parallel background agents** for comprehensive context:\n   ```\n   task(subagent_type=\"trinity\", load_skills=[], prompt=\"Find existing patterns for [topic] in codebase\", run_in_background=true)\n   task(subagent_type=\"trinity\", load_skills=[], prompt=\"Find test infrastructure and conventions\", run_in_background=true)\n   task(subagent_type=\"operator\", load_skills=[], prompt=\"Find official docs and best practices for [technology]\", run_in_background=true)\n   ```\n2. **Wait for results** before planning - rushed plans fail\n3. **Synthesize findings** into informed requirements\n\n### What to Research\n- Existing codebase patterns and conventions\n- Test infrastructure (TDD possible?)\n- External library APIs and constraints\n- Similar implementations in OSS (via librarian)\n\n**NEVER plan blind. Context first, plan second.**\n\n---\n\n## MANDATORY OUTPUT: PARALLEL TASK GRAPH + TODO LIST\n\n**YOUR PRIMARY OUTPUT IS A PARALLEL EXECUTION TASK GRAPH.**\n\nWhen you finalize a plan, you MUST structure it for maximum parallel execution:\n\n### 1. Parallel Execution Waves (REQUIRED)\n\nAnalyze task dependencies and group independent tasks into parallel waves:\n\n```\nWave 1 (Start Immediately - No Dependencies):\n\u251C\u2500\u2500 Task 1: [description] \u2192 category: X, skills: [a, b]\n\u2514\u2500\u2500 Task 4: [description] \u2192 category: Y, skills: [c]\n\nWave 2 (After Wave 1 Completes):\n\u251C\u2500\u2500 Task 2: [depends: 1] \u2192 category: X, skills: [a]\n\u251C\u2500\u2500 Task 3: [depends: 1] \u2192 category: Z, skills: [d]\n\u2514\u2500\u2500 Task 5: [depends: 4] \u2192 category: Y, skills: [c]\n\nWave 3 (After Wave 2 Completes):\n\u2514\u2500\u2500 Task 6: [depends: 2, 3] \u2192 category: X, skills: [a, b]\n\nCritical Path: Task 1 \u2192 Task 2 \u2192 Task 6\nEstimated Parallel Speedup: ~40% faster than sequential\n```\n\n### 2. Dependency Matrix (REQUIRED)\n\n| Task | Depends On | Blocks | Can Parallelize With |\n|------|------------|--------|---------------------|\n| 1 | None | 2, 3 | 4 |\n| 2 | 1 | 6 | 3, 5 |\n| 3 | 1 | 6 | 2, 5 |\n| 4 | None | 5 | 1 |\n| 5 | 4 | None | 2, 3 |\n| 6 | 2, 3 | None | None (final) |\n\n### 3. TODO List Structure (REQUIRED)\n\nEach TODO item MUST include:\n\n```markdown\n- [ ] N. [Task Title]\n\n  **What to do**: [Clear steps]\n  \n  **Dependencies**: [Task numbers this depends on] | None\n  **Blocks**: [Task numbers that depend on this]\n  **Parallel Group**: Wave N (with Tasks X, Y)\n  \n  **Recommended Agent Profile**:\n  - **Category**: `[construct | source | matrix-bend | quick | blue-pill | red-pill | writing]`\n  - **Skills**: [`skill-1`, `skill-2`]\n  \n  **Acceptance Criteria**: [Verifiable conditions]\n```\n\n### 4. Agent Dispatch Summary (REQUIRED)\n\n| Wave | Tasks | Dispatch Command |\n|------|-------|------------------|\n| 1 | 1, 4 | `task(category=\"...\", load_skills=[...], run_in_background=false)` \u00D7 2 |\n| 2 | 2, 3, 5 | `task(...)` \u00D7 3 after Wave 1 completes |\n| 3 | 6 | `task(...)` final integration |\n\n**WHY PARALLEL TASK GRAPH IS MANDATORY:**\n- Orchestrator (Morpheus) executes tasks in parallel waves\n- Independent tasks run simultaneously via background agents\n- Proper dependency tracking prevents race conditions\n- Category + skills ensure optimal model routing per task";
+export declare function getPlannerUltraworkMessage(): string;

package/dist/hooks/keyword-detector/ultrawork/source-detector.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Agent/model detection utilities for ultrawork message routing.
+ *
+ * Routing logic:
+ * 1. Planner agents (oracle, plan) → planner.ts
+ * 2. DeepSeek models → deepseek.ts
+ * 3. Mimo models → mimo.ts
+ * 4. GPT models → gpt5.2.ts
+ * 5. Gemini models → gemini.ts
+ * 6. GLM models → glm.ts
+ * 7. Everything else (Claude, etc.) → default.ts
+ */
+import { isGptModel, isMimoModel } from "../../../agents/types";
+/**
+ * Checks if agent is a planner-type agent.
+ * Planners don't need ultrawork injection (they ARE the planner).
+ */
+export declare function isPlannerAgent(agentName?: string): boolean;
+/**
+ * Checks if agent is a non-Matrixx agent (e.g., OpenCode's built-in Builder/Plan).
+ * Non-Matrixx agents should not receive ultrawork injection.
+ */
+export declare function isNonOmoAgent(agentName?: string): boolean;
+export { isGptModel, isMimoModel };
+export declare function isGeminiModel(model: string): boolean;
+export declare function isGlmModel(model: string): boolean;
+export declare function isDeepseekModel(model: string): boolean;
+/** Ultrawork message source type */
+export type UltraworkSource = "planner" | "deepseek" | "mimo" | "gpt" | "gemini" | "glm" | "default";
+/**
+ * Determines which ultrawork message source to use.
+ */
+export declare function getUltraworkSource(agentName?: string, modelID?: string): UltraworkSource;

package/dist/hooks/knowledge-hub-guard/approvals.d.ts

@@ -0,0 +1,5 @@
+export declare const HUB_WRITE_APPROVAL_TTL_MS: number;
+export declare function normalizeApprovedPath(absPath: string): string;
+export declare function approveHubWrite(sessionID: string, absPath: string, ttlMs?: number): string;
+export declare function isHubWriteApproved(sessionID: string, absPath: string): boolean;
+export declare function clearHubWriteApprovals(): void;

package/dist/hooks/knowledge-hub-guard/hook.d.ts

@@ -0,0 +1,15 @@
+import type { LoadedHub } from "../../features/knowledge-hub/loader";
+import type { MatrixxContext } from "../../plugin/context";
+export interface KnowledgeHubGuardOptions {
+    hubs?: LoadedHub[];
+    getHubs?: () => LoadedHub[];
+}
+export declare function createKnowledgeHubGuardHook(ctx: MatrixxContext, options?: KnowledgeHubGuardOptions): {
+    "tool.execute.before": (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+    }, output: {
+        args: Record<string, unknown>;
+    }) => Promise<void>;
+};

package/dist/hooks/knowledge-hub-injector/hook.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Local legacy `{info, parts}` shapes (Task 27: the V1 `experimental.chat.messages.transform`
+ * fan-out is deleted, so `legacy V1 SDK` message types are no longer imported).
+ * The live native port operates on flat `Message[]` in `src/plugin/message-hooks/`.
+ */
+type Message = {
+    id?: string;
+    sessionID?: string;
+    role?: string;
+    [key: string]: unknown;
+};
+type Part = {
+    type?: string;
+    text?: string;
+    [key: string]: unknown;
+};
+import type { KnowledgeHub } from "../../config/schema/knowledge";
+import { type ContextCollector } from "../../features/context-injector";
+import type { MatrixxContext } from "../../plugin/context";
+import type { V2Event } from "../../plugin/context";
+export interface KnowledgeHubInjectorOptions {
+    hubs?: KnowledgeHub[];
+    getHubs?: () => KnowledgeHub[];
+    pinnedFiles?: string[];
+    collector?: ContextCollector;
+}
+interface MessageWithParts {
+    info: Message;
+    parts: Part[];
+}
+export declare function createKnowledgeHubInjectorHook(ctx: MatrixxContext, options?: KnowledgeHubInjectorOptions): {
+    "experimental.chat.messages.transform": (_input: Record<string, never>, output: {
+        messages: MessageWithParts[];
+    }) => Promise<void>;
+    event: (event: V2Event) => Promise<void>;
+};
+export {};

package/dist/hooks/knowledge-hub-search-nudge/hook.d.ts

@@ -0,0 +1,16 @@
+import type { LoadedHub } from "../../features/knowledge-hub/loader";
+import type { MatrixxContext } from "../../plugin/context";
+export interface KnowledgeHubSearchNudgeOptions {
+    hubs?: LoadedHub[];
+    getHubs?: () => LoadedHub[];
+}
+export declare function createKnowledgeHubSearchNudgeHook(ctx: MatrixxContext, options?: KnowledgeHubSearchNudgeOptions): {
+    "tool.execute.before": (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+    }, output: {
+        args: Record<string, unknown>;
+        message?: string;
+    }) => Promise<void>;
+};

package/dist/hooks/matrix-loop/completion-promise-detector.d.ts

@@ -0,0 +1,11 @@
+import type { NativePluginContext } from "../../shared/session-context-source";
+import type { SessionMessage } from "../../shared/session-message";
+export type OpenCodeSessionMessage = SessionMessage;
+export declare function detectCompletionInTranscript(transcriptPath: string | undefined, promise: string): boolean;
+export declare function detectCompletionInSessionMessages(ctx: NativePluginContext, options: {
+    sessionID: string;
+    promise: string;
+    apiTimeoutMs: number;
+    directory: string;
+    preFetchedMessages?: OpenCodeSessionMessage[];
+}): Promise<boolean>;

package/dist/hooks/matrix-loop/completion-verifier.d.ts

@@ -0,0 +1,18 @@
+import type { NativePluginContext } from "../../shared/session-context-source";
+import type { OpenCodeSessionMessage } from "./completion-promise-detector";
+interface VerificationResult {
+    verified: boolean;
+    reason?: string;
+}
+export declare function verifyCompletion(ctx: NativePluginContext, options: {
+    sessionID: string;
+    directory: string;
+    completionPromise: string;
+    prompt: string;
+    iteration: number;
+    agent?: string;
+    timeoutMs?: number;
+    pollIntervalMs?: number;
+    preFetchedMessages?: OpenCodeSessionMessage[];
+}): Promise<VerificationResult>;
+export {};

package/dist/hooks/matrix-loop/constants.d.ts

@@ -0,0 +1,7 @@
+export declare const HOOK_NAME = "matrix-loop";
+export declare const DEFAULT_STATE_FILE = ".matrixx/matrix-loop.local.md";
+export declare const DEFAULT_MAX_ITERATIONS = 100;
+export declare const DEFAULT_COMPLETION_PROMISE = "DONE";
+export declare const DEFAULT_VERIFICATION_AGENT = "merovingian";
+export declare const DEFAULT_VERIFICATION_TIMEOUT_MS = 30000;
+export declare const DEFAULT_VERIFICATION_MAX_RETRIES = 2;

package/dist/hooks/matrix-loop/continuation-prompt-builder.d.ts

@@ -0,0 +1,2 @@
+import type { MatrixLoopState } from "./types";
+export declare function buildContinuationPrompt(state: MatrixLoopState): string;

package/dist/hooks/matrix-loop/continuation-prompt-injector.d.ts

@@ -0,0 +1,7 @@
+import type { NativePluginContext } from "../../shared/session-context-source";
+export declare function injectContinuationPrompt(ctx: NativePluginContext, options: {
+    sessionID: string;
+    prompt: string;
+    directory: string;
+    apiTimeoutMs: number;
+}): Promise<void>;

package/dist/hooks/matrix-loop/loop-session-recovery.d.ts

@@ -0,0 +1,7 @@
+export declare function createLoopSessionRecovery(options?: {
+    recoveryWindowMs?: number;
+}): {
+    isRecovering(sessionID: string): boolean;
+    markRecovering(sessionID: string): void;
+    clear(sessionID: string): void;
+};

package/dist/hooks/matrix-loop/loop-state-controller.d.ts

@@ -0,0 +1,16 @@
+import type { MatrixLoopOptions, MatrixLoopState } from "./types";
+export declare function createLoopStateController(options: {
+    directory: string;
+    stateDir: string | undefined;
+    config: MatrixLoopOptions["config"] | undefined;
+}): {
+    startLoop(sessionID: string, prompt: string, loopOptions?: {
+        maxIterations?: number;
+        completionPromise?: string;
+        ultrawork?: boolean;
+    }): boolean;
+    cancelLoop(sessionID: string): boolean;
+    getState(): MatrixLoopState | null;
+    clear(): boolean;
+    incrementIteration(): MatrixLoopState | null;
+};

package/dist/hooks/matrix-loop/matrix-loop-event-handler.d.ts

@@ -0,0 +1,24 @@
+import type { NativePluginContext } from "../../shared/session-context-source";
+import type { MatrixLoopOptions, MatrixLoopState } from "./types";
+type SessionRecovery = {
+    isRecovering: (sessionID: string) => boolean;
+    markRecovering: (sessionID: string) => void;
+    clear: (sessionID: string) => void;
+};
+type LoopStateController = {
+    getState: () => MatrixLoopState | null;
+    clear: () => boolean;
+    incrementIteration: () => MatrixLoopState | null;
+};
+type MatrixLoopEventHandlerOptions = {
+    directory: string;
+    apiTimeoutMs: number;
+    getTranscriptPath: (sessionID: string) => string | undefined;
+    checkSessionExists?: MatrixLoopOptions["checkSessionExists"];
+    sessionRecovery: SessionRecovery;
+    loopState: LoopStateController;
+    verification?: MatrixLoopOptions["verification"];
+};
+import type { V2Event } from "../../plugin/context";
+export declare function createMatrixLoopEventHandler(ctx: NativePluginContext, options: MatrixLoopEventHandlerOptions): (event: V2Event) => Promise<void>;
+export {};

package/dist/hooks/matrix-loop/matrix-loop-hook.d.ts

@@ -0,0 +1,14 @@
+import type { V2Event } from "../../plugin/context";
+import type { NativePluginContext } from "../../shared/session-context-source";
+import type { MatrixLoopOptions, MatrixLoopState } from "./types";
+export interface MatrixLoopHook {
+    event: (event: V2Event) => Promise<void>;
+    startLoop: (sessionID: string, prompt: string, options?: {
+        maxIterations?: number;
+        completionPromise?: string;
+        ultrawork?: boolean;
+    }) => boolean;
+    cancelLoop: (sessionID: string) => boolean;
+    getState: () => MatrixLoopState | null;
+}
+export declare function createMatrixLoopHook(ctx: NativePluginContext, options?: MatrixLoopOptions): MatrixLoopHook;

package/dist/hooks/matrix-loop/storage.d.ts

@@ -0,0 +1,5 @@
+import type { MatrixLoopState } from "./types";
+export declare function readState(directory: string, customPath?: string): MatrixLoopState | null;
+export declare function writeState(directory: string, state: MatrixLoopState, customPath?: string): boolean;
+export declare function clearState(directory: string, customPath?: string): boolean;
+export declare function incrementIteration(directory: string, customPath?: string): MatrixLoopState | null;

package/dist/hooks/matrix-loop/types.d.ts

@@ -0,0 +1,25 @@
+import type { MatrixLoopConfig } from "../../config";
+export interface MatrixLoopState {
+    active: boolean;
+    iteration: number;
+    max_iterations: number;
+    completion_promise: string;
+    started_at: string;
+    prompt: string;
+    session_id?: string;
+    ultrawork?: boolean;
+    verification_in_progress?: boolean;
+    verification_failed_count?: number;
+}
+export interface MatrixLoopOptions {
+    config?: MatrixLoopConfig;
+    getTranscriptPath?: (sessionId: string) => string;
+    apiTimeout?: number;
+    checkSessionExists?: (sessionId: string) => Promise<boolean>;
+    verification?: {
+        enabled?: boolean;
+        agent?: string;
+        timeoutMs?: number;
+        maxRetries?: number;
+    };
+}

package/dist/hooks/mouse-notepad/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const HOOK_NAME = "mouse-notepad";
+export declare const NOTEPAD_DIRECTIVE = "\n<Work_Context>\n## Notepad Location (for recording learnings)\nNOTEPAD PATH: .matrixx/notepads/{plan-name}/\n- learnings.md: Record patterns, conventions, successful approaches\n- issues.md: Record problems, blockers, gotchas encountered\n- decisions.md: Record architectural choices and rationales\n- problems.md: Record unresolved issues, technical debt\n\nYou SHOULD append findings to notepad files after completing work.\nIMPORTANT: Always APPEND to notepad files - never overwrite or use Edit tool.\n\n## Plan Location (READ ONLY)\nPLAN PATH: .matrixx/plans/{plan-name}.md\n\nCRITICAL RULE: NEVER MODIFY THE PLAN FILE\n\nThe plan file (.matrixx/plans/*.md) is SACRED and READ-ONLY.\n- You may READ the plan to understand tasks\n- You may READ checkbox items to know what to do\n- You MUST NOT edit, modify, or update the plan file\n- You MUST NOT mark checkboxes as complete in the plan\n- Only the Orchestrator manages the plan file\n\nVIOLATION = IMMEDIATE FAILURE. The Orchestrator tracks plan state.\n</Work_Context>\n";

package/dist/hooks/mouse-notepad/hook.d.ts

@@ -0,0 +1,11 @@
+import type { NativePluginContext } from "../../shared/session-context-source";
+export declare function createMouseNotepadHook(ctx: NativePluginContext): {
+    "tool.execute.before": (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+    }, output: {
+        args: Record<string, unknown>;
+        message?: string;
+    }) => Promise<void>;
+};

package/dist/hooks/niobe/bash-command-policy.d.ts

@@ -0,0 +1,4 @@
+export type BashVerdict = "allow" | "deny" | "neutral";
+export declare function unwrapWrapper(segment: string): string;
+export declare function splitCommands(command: string): string[];
+export declare function classifyBashCommand(command: string): BashVerdict;

package/dist/hooks/niobe/event-handler.d.ts

@@ -0,0 +1,9 @@
+import type { V2Event } from "../../plugin/context";
+import type { NativePluginContext } from "../../shared/session-context-source";
+import type { NiobeHookOptions, SessionState } from "./types";
+export declare function createNiobeEventHandler(input: {
+    ctx: NativePluginContext;
+    options?: NiobeHookOptions;
+    sessions: Map<string, SessionState>;
+    getState: (sessionID: string) => SessionState;
+}): (event: V2Event) => Promise<void>;

package/dist/hooks/niobe/hook-name.d.ts

@@ -0,0 +1 @@
+export declare const HOOK_NAME = "niobe";

package/dist/hooks/niobe/matrix-path.d.ts

@@ -0,0 +1 @@
+export declare function isMatrixPath(filePath: string): boolean;

package/dist/hooks/niobe/mission-continuation-injector.d.ts

@@ -0,0 +1,13 @@
+import type { BackgroundManager } from "../../features/background-agent";
+import type { NativePluginContext } from "../../shared/session-context-source";
+import type { SessionState } from "./types";
+export declare function injectMissionContinuation(input: {
+    ctx: NativePluginContext;
+    sessionID: string;
+    planName: string;
+    remaining: number;
+    total: number;
+    agent?: string;
+    backgroundManager?: BackgroundManager;
+    sessionState: SessionState;
+}): Promise<void>;

package/dist/hooks/niobe/niobe-hook.d.ts

@@ -0,0 +1,14 @@
+import type { NativePluginContext } from "../../shared/session-context-source";
+import type { NiobeHookOptions } from "./types";
+export declare function createNiobeHook(ctx: NativePluginContext, options?: NiobeHookOptions): {
+    handler: (event: import("../../plugin/context").V2Event) => Promise<void>;
+    "tool.execute.before": (toolInput: {
+        tool: string;
+        sessionID?: string;
+        callID?: string;
+    }, toolOutput: {
+        args: Record<string, unknown>;
+        message?: string;
+    }) => Promise<void>;
+    "tool.execute.after": (toolInput: import("./types").ToolExecuteAfterInput, toolOutput: import("./types").ToolExecuteAfterOutput) => Promise<void>;
+};

package/dist/hooks/niobe/recent-model-resolver.d.ts

@@ -0,0 +1,3 @@
+import type { NativePluginContext } from "../../shared/session-context-source";
+import type { ModelInfo } from "./types";
+export declare function resolveRecentModelForSession(ctx: NativePluginContext, sessionID: string): Promise<ModelInfo | undefined>;

package/dist/hooks/niobe/session-last-agent.d.ts

@@ -0,0 +1,2 @@
+import type { SessionContextCarrier } from "../../shared/session-context-source";
+export declare function getLastAgentFromSession(sessionID: string, carrier?: SessionContextCarrier): Promise<string | null>;

package/dist/hooks/niobe/subagent-session-id.d.ts

@@ -0,0 +1 @@
+export declare function extractSessionIdFromOutput(output: string): string;

package/dist/hooks/niobe/system-reminder-templates.d.ts

@@ -0,0 +1,5 @@
+export declare const DIRECT_WORK_REMINDER: string;
+export declare const MISSION_CONTINUATION_PROMPT: string;
+export declare const VERIFICATION_REMINDER = "**MANDATORY: WHAT YOU MUST DO RIGHT NOW**\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\nCRITICAL: Subagents FREQUENTLY LIE about completion.\nTests FAILING, code has ERRORS, implementation INCOMPLETE - but they say \"done\".\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n**STEP 1: AUTOMATED VERIFICATION (DO THIS FIRST)**\n\nRun these commands YOURSELF - do NOT trust agent's claims:\n1. `lsp_diagnostics` on changed files \u2192 Must be CLEAN\n2. `shell` (bash alias) to run tests \u2192 Must PASS\n3. `shell` (bash alias) to run build/typecheck \u2192 Must succeed\n\n**STEP 2: MANUAL CODE REVIEW (NON-NEGOTIABLE \u2014 DO NOT SKIP)**\n\nAutomated checks are NECESSARY but INSUFFICIENT. You MUST read the actual code.\n\n**RIGHT NOW \u2014 `Read` EVERY file the subagent touched. No exceptions.**\n\nFor EACH changed file, verify:\n1. Does the implementation logic ACTUALLY match the task requirements?\n2. Are there incomplete stubs (TODO comments, placeholder code, hardcoded values)?\n3. Are there logic errors, off-by-one bugs, or missing edge cases?\n4. Does it follow existing codebase patterns and conventions?\n5. Are imports correct? No unused or missing imports?\n6. Is error handling present where needed?\n\n**Cross-check the subagent's claims against reality:**\n- Subagent said \"Updated X\" \u2192 READ X. Is it actually updated?\n- Subagent said \"Added tests\" \u2192 READ tests. Do they test the RIGHT behavior?\n- Subagent said \"Follows patterns\" \u2192 COMPARE with reference. Does it actually?\n\n**If you cannot explain what the changed code does, you have not reviewed it.**\n**If you skip this step, you are rubber-stamping broken work.**\n\n**STEP 3: DETERMINE IF HANDS-ON QA IS NEEDED**\n\n| Deliverable Type | QA Method | Tool |\n|------------------|-----------|------|\n| **Frontend/UI** | Browser interaction | `/playwright` skill |\n| **TUI/CLI** | Run interactively | `interactive_bash` (tmux) |\n| **API/Backend** | Send real requests | `shell` (bash alias) with curl |\n\nStatic analysis CANNOT catch: visual bugs, animation issues, user flow breakages.\n\n**STEP 4: IF QA IS NEEDED - ADD A TASK IMMEDIATELY**\n\n```\ntask_create({ subject: \"HANDS-ON QA: [specific verification action]\", priority: \"high\" })\n```\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n**BLOCKING: DO NOT proceed until Steps 1-4 are ALL completed.**\n**Skipping Step 2 (manual code review) = unverified work = FAILURE.**";
+export declare const ORCHESTRATOR_DELEGATION_REQUIRED: string;
+export declare const SINGLE_TASK_DIRECTIVE: string;

package/dist/hooks/niobe/tool-execute-after.d.ts

@@ -0,0 +1,6 @@
+import type { NativePluginContext } from "../../shared/session-context-source";
+import type { ToolExecuteAfterInput, ToolExecuteAfterOutput } from "./types";
+export declare function createToolExecuteAfterHandler(input: {
+    ctx: NativePluginContext;
+    pendingFilePaths: Map<string, string>;
+}): (toolInput: ToolExecuteAfterInput, toolOutput: ToolExecuteAfterOutput) => Promise<void>;

package/dist/hooks/niobe/tool-execute-before.d.ts

@@ -0,0 +1,12 @@
+import type { NativePluginContext } from "../../shared/session-context-source";
+export declare function createToolExecuteBeforeHandler(input: {
+    ctx: NativePluginContext;
+    pendingFilePaths: Map<string, string>;
+}): (toolInput: {
+    tool: string;
+    sessionID?: string;
+    callID?: string;
+}, toolOutput: {
+    args: Record<string, unknown>;
+    message?: string;
+}) => Promise<void>;

package/dist/hooks/niobe/types.d.ts

@@ -0,0 +1,27 @@
+import type { AgentOverrides } from "../../config";
+import type { BackgroundManager } from "../../features/background-agent";
+export type ModelInfo = {
+    providerID: string;
+    modelID: string;
+};
+export interface NiobeHookOptions {
+    directory: string;
+    backgroundManager?: BackgroundManager;
+    isContinuationStopped?: (sessionID: string) => boolean;
+    agentOverrides?: AgentOverrides;
+}
+export interface ToolExecuteAfterInput {
+    tool: string;
+    sessionID?: string;
+    callID?: string;
+}
+export interface ToolExecuteAfterOutput {
+    title: string;
+    output: string;
+    metadata: Record<string, unknown>;
+}
+export interface SessionState {
+    lastEventWasAbortError?: boolean;
+    lastContinuationInjectedAt?: number;
+    promptFailureCount: number;
+}

package/dist/hooks/niobe/verification-reminders.d.ts

@@ -0,0 +1,5 @@
+export declare function buildOrchestratorReminder(planName: string, progress: {
+    total: number;
+    completed: number;
+}, sessionId: string): string;
+export declare function buildStandaloneVerificationReminder(sessionId: string): string;

package/dist/hooks/niobe/write-edit-tool-policy.d.ts

@@ -0,0 +1 @@
+export declare function isWriteOrEditToolName(toolName: string): boolean;

package/dist/hooks/non-interactive-env/constants.d.ts

@@ -0,0 +1,34 @@
+export declare const HOOK_NAME = "non-interactive-env";
+export declare const NON_INTERACTIVE_ENV: Record<string, string>;
+/**
+ * Shell command guidance for non-interactive environments.
+ * These patterns should be followed to avoid hanging on user input.
+ */
+export declare const SHELL_COMMAND_PATTERNS: {
+    readonly npm: {
+        readonly bad: readonly ["npm init", "npm install (prompts)"];
+        readonly good: readonly ["npm init -y", "npm install --yes"];
+    };
+    readonly apt: {
+        readonly bad: readonly ["apt-get install pkg"];
+        readonly good: readonly ["apt-get install -y pkg", "DEBIAN_FRONTEND=noninteractive apt-get install pkg"];
+    };
+    readonly pip: {
+        readonly bad: readonly ["pip install pkg (with prompts)"];
+        readonly good: readonly ["pip install --no-input pkg", "PIP_NO_INPUT=1 pip install pkg"];
+    };
+    readonly git: {
+        readonly bad: readonly ["git commit", "git merge branch", "git add -p", "git rebase -i"];
+        readonly good: readonly ["git commit -m 'msg'", "git merge --no-edit branch", "git add .", "git rebase --no-edit"];
+    };
+    readonly system: {
+        readonly bad: readonly ["rm file (prompts)", "cp a b (prompts)", "ssh host"];
+        readonly good: readonly ["rm -f file", "cp -f a b", "ssh -o BatchMode=yes host", "unzip -o file.zip"];
+    };
+    readonly banned: readonly ["vim", "nano", "vi", "emacs", "less", "more", "man", "python (REPL)", "node (REPL)", "git add -p", "git rebase -i"];
+    readonly workarounds: {
+        readonly yesPipe: "yes | ./script.sh";
+        readonly heredoc: "./script.sh <<EOF\noption1\noption2\nEOF";
+        readonly expectAlternative: "Use environment variables or config files instead of expect";
+    };
+};

package/dist/hooks/non-interactive-env/detector.d.ts

@@ -0,0 +1 @@
+export declare function isNonInteractive(): boolean;

package/dist/hooks/non-interactive-env/non-interactive-env-hook.d.ts

@@ -0,0 +1,13 @@
+import type { MatrixxContext } from "../../plugin/context";
+export * from "./constants";
+export * from "./detector";
+export declare function createNonInteractiveEnvHook(_ctx: MatrixxContext): {
+    "tool.execute.before": (input: {
+        tool: string;
+        sessionID: string;
+        callID: string;
+    }, output: {
+        args: Record<string, unknown>;
+        message?: string;
+    }) => Promise<void>;
+};

package/dist/hooks/nudge-loop-breaker/constants.d.ts

@@ -0,0 +1,9 @@
+export declare const DEFAULT_LOOP_THRESHOLD = 3;
+export declare const DEFAULT_COOLDOWN_MS = 1000;
+export declare const MAX_BACKOFF_EXPONENT = 5;
+export declare const DSML_PATTERNS: RegExp[];
+export declare const SESSION_ID_KEYS: readonly ["sessionID", "sessionId", "session"];
+export declare const TEXT_KEYS: readonly ["text", "content", "message", "assistantText", "snapshot", "assistantMessageID"];
+export declare const TOOL_KEYS: readonly ["tool", "toolName", "name"];
+export declare const RESET_TOOL_NAMES: Set<string>;
+export declare const DETECT_EVENT_TYPES: Set<string>;

package/dist/hooks/nudge-loop-breaker/hook.d.ts

@@ -0,0 +1,12 @@
+import type { V2Event } from "../../plugin/context";
+import type { NativePluginContext } from "../../shared/session-context-source";
+export interface NudgeLoopBreakerOptions {
+    threshold?: number;
+    cooldownMs?: number;
+    now?: () => number;
+    onCorrective?: (sessionID: string, backoff: number) => void;
+}
+export type NudgeLoopBreakerHook = {
+    event: (event: V2Event) => Promise<void>;
+};
+export declare function createNudgeLoopBreakerHook(ctx: NativePluginContext, options?: NudgeLoopBreakerOptions): NudgeLoopBreakerHook;