opensquid 0.5.395

package/dist/hooks-cli.js

@@ -0,0 +1,286 @@
+/**
+ * `opensquid hooks <subcommand>` — Claude Code settings.json hooks
+ * installer.
+ *
+ * Subcommands:
+ *   install    — append the opensquid PreToolUse hook to
+ *                ~/.claude/settings.json (idempotent — re-running
+ *                refreshes the hook command pointer without disturbing
+ *                other hooks)
+ *   uninstall  — remove the opensquid PreToolUse hook
+ *   doctor     — report what's currently installed
+ *
+ * The PreToolUse hook runs the local opensquid build's `hook
+ * pre-tool-use` handler (see src/hooks/pre-tool-use.ts), which
+ * intercepts known-anti-pattern actions (amend, push, substrate-impure
+ * engine commits) before Claude Code executes them.
+ */
+import { promises as fs } from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import * as url from "node:url";
+export class HooksCliError extends Error {
+    hint;
+    constructor(message, hint) {
+        super(message);
+        this.hint = hint;
+        this.name = "HooksCliError";
+    }
+}
+/**
+ * Per-event opensquid hook id. Was a single shared id pre-#118, which
+ * meant uninstall could not selectively target one event AND legacy
+ * entries written by older opensquid versions never got recognized
+ * (since they had a different id, or none at all).
+ */
+const HOOK_IDS = {
+    PreToolUse: "opensquid-pre-tool-use",
+    Stop: "opensquid-stop",
+    StopFalseStopGuard: "opensquid-stop-false-stop-guard",
+    UserPromptSubmit: "opensquid-user-prompt-submit",
+    SessionEnd: "opensquid-session-end",
+};
+/** Legacy id used through 2026-05-15 — purgeOurHook still recognizes it. */
+const LEGACY_HOOK_ID = "opensquid-drift-pretooluse";
+/**
+ * Path-substring fallback that identifies opensquid hook entries even
+ * when no `_id` marker is present (older installs, manual edits, etc.).
+ * Matches anything that runs `opensquid/dist/index.js`, regardless of
+ * whether the subcommand is the legacy `hook <event>` (≤0.7.34) or the
+ * new unified `anti-drift <event>` (0.7.35+).
+ */
+const COMMAND_FINGERPRINT = "/opensquid/dist/index.js";
+/**
+ * D9 false-stop guard prompt — fires as a `type: "prompt"` Stop hook
+ * alongside the existing `type: "command"` Stop hook. Claude Code
+ * evaluates this prompt against the assistant's just-completed turn
+ * via the configured model and uses the YES/NO answer to allow or
+ * block the stop. When blocked, the agent is re-prompted to continue.
+ *
+ * The prompt is intentionally framed so the default (YES, allow stop)
+ * fires on the vast majority of turns; only trailing politeness
+ * reflexes ("Run it?", "Want me to start B4?", "Should I continue?")
+ * tip it to NO.
+ *
+ * Catches drift D9 per loop/docs/opensquid-anti-drift-unified-evaluator-design.md
+ * rule #10b. Locked 2026-05-17 — user requirement: complete prevention.
+ */
+const FALSE_STOP_GUARD_PROMPT = `The assistant just finished a turn with this message:
+
+$ARGUMENTS
+
+Did the assistant message above end with a REAL blocking question that requires user input before the agent can continue? Most messages end normally (no question, or with a question mark that's part of a real decision the user must make) and should answer YES (allow the stop).
+
+Only answer NO when the message ends with a politeness reflex or suggestion the agent should just execute past — patterns like "Run it?", "Want me to do X?", "Should I continue?", "Ready for the next step?", "Want me to start Y?". These are forbidden by the user's locked automation-mode rule.
+
+OUTPUT FORMAT (required): Begin your response with the literal prefix "🦑 [opensquid D9-guard] " so the user can visually identify this as an automated hook output (not agent text). After the prefix, respond YES or NO followed by a one-sentence justification.
+
+Examples of well-formed responses:
+- "🦑 [opensquid D9-guard] YES — message ends with a factual statement of completion, not a question."
+- "🦑 [opensquid D9-guard] NO — message ends with 'Want me to start B4?' which is a politeness reflex the agent should execute past."`;
+const FALSE_STOP_GUARD_MODEL = "claude-haiku-4-5";
+function settingsPath() {
+    return path.join(os.homedir(), ".claude", "settings.json");
+}
+async function loadSettings() {
+    try {
+        const raw = await fs.readFile(settingsPath(), "utf8");
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === "object" ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+async function saveSettings(settings) {
+    const p = settingsPath();
+    await fs.mkdir(path.dirname(p), { recursive: true });
+    await fs.writeFile(p, JSON.stringify(settings, null, 2) + "\n", "utf8");
+}
+/** Absolute path to the opensquid CLI binary that hosts this code. */
+function opensquidBinPath() {
+    // import.meta.url points at dist/hooks-cli.js after build; the entry
+    // point is dist/index.js in the same directory.
+    const here = url.fileURLToPath(import.meta.url);
+    return path.join(path.dirname(here), "index.js");
+}
+function buildHookCommand(hookName) {
+    // 0.7.35 cutover: register hooks pointing at the unified anti-drift
+    // evaluator (src/anti-drift/evaluator.ts) instead of the per-file
+    // legacy handlers (src/hooks/<event>.ts). The legacy `hook <event>`
+    // dispatch is preserved in index.ts for backward compat with
+    // settings.json entries that haven't been re-installed yet.
+    return `node ${opensquidBinPath()} anti-drift ${hookName}`;
+}
+/** True when a hook entry is recognizably opensquid's. */
+export function isOurHook(h) {
+    if (h._id === LEGACY_HOOK_ID)
+        return true;
+    for (const id of Object.values(HOOK_IDS)) {
+        if (h._id === id)
+            return true;
+    }
+    // Fallback: command-path fingerprint catches un-marked legacy entries
+    // that purgeOurHook used to silently skip (the bug from #118 dogfood).
+    // Case-insensitive — macOS APFS default is case-preserving but case-
+    // insensitive, so an install at /projects/OpenSquid/ should match too.
+    // Prompt-typed hooks have no command field — they're recognized only
+    // by their _id (handled above); manual / unmarked prompt entries are
+    // not our concern (no installer wrote them).
+    if (h.type === "command" &&
+        typeof h.command === "string" &&
+        h.command.toLowerCase().includes(COMMAND_FINGERPRINT.toLowerCase())) {
+        return true;
+    }
+    return false;
+}
+/** Remove any existing opensquid hook from a matcher list. */
+function purgeOurHook(matchers) {
+    return matchers
+        .map((m) => ({
+        ...m,
+        hooks: m.hooks.filter((h) => !isOurHook(h)),
+    }))
+        .filter((m) => m.hooks.length > 0);
+}
+async function cmdInstall() {
+    const settings = await loadSettings();
+    const hooks = settings.hooks ?? {};
+    // PreToolUse — single matcher ".*" is sufficient. It catches Bash
+    // (drift checks live in pre-tool-use.ts handler keyed off tool_name)
+    // AND every other tool (so the honesty ledger has full evidence for
+    // Stop-hook reconciliation). Pre-#118 we registered TWO matchers
+    // (Bash + .*) which double-fired on Bash and caused duplicate ledger
+    // entries.
+    const preToolUse = purgeOurHook(hooks.PreToolUse ?? []);
+    preToolUse.push({
+        matcher: ".*",
+        hooks: [
+            {
+                type: "command",
+                command: buildHookCommand("pre-tool-use"),
+                _id: HOOK_IDS.PreToolUse,
+            },
+        ],
+    });
+    // Stop — claim-vs-action reconciliation + auto-classify spawn at turn end.
+    const stop = purgeOurHook(hooks.Stop ?? []);
+    stop.push({
+        hooks: [{ type: "command", command: buildHookCommand("stop"), _id: HOOK_IDS.Stop }],
+    });
+    // D9 false-stop guard — fires as a native `type: "prompt"` hook so
+    // Claude Code's framework handles the LLM evaluation (no subprocess
+    // wrapper needed in opensquid). Catches trailing politeness reflexes
+    // like "Run it?" / "Want me to start B4?" and blocks the stop,
+    // re-prompting the agent to continue per the user's locked
+    // automation-mode rule. Counts against the user's Claude Code
+    // subscription model quota (haiku-class, cheap). 0.7.20 / drift D9.
+    stop.push({
+        hooks: [
+            {
+                type: "prompt",
+                prompt: FALSE_STOP_GUARD_PROMPT,
+                model: FALSE_STOP_GUARD_MODEL,
+                _id: HOOK_IDS.StopFalseStopGuard,
+            },
+        ],
+    });
+    // UserPromptSubmit — surface previous turn's broken promises +
+    // auto-classify candidates at the start of the next turn.
+    const ups = purgeOurHook(hooks.UserPromptSubmit ?? []);
+    ups.push({
+        hooks: [
+            {
+                type: "command",
+                command: buildHookCommand("user-prompt-submit"),
+                _id: HOOK_IDS.UserPromptSubmit,
+            },
+        ],
+    });
+    // SessionEnd — clearSession to bound disk usage from per-session
+    // ledger accumulation.
+    const sessionEnd = purgeOurHook(hooks.SessionEnd ?? []);
+    sessionEnd.push({
+        hooks: [
+            {
+                type: "command",
+                command: buildHookCommand("session-end"),
+                _id: HOOK_IDS.SessionEnd,
+            },
+        ],
+    });
+    settings.hooks = {
+        ...hooks,
+        PreToolUse: preToolUse,
+        Stop: stop,
+        UserPromptSubmit: ups,
+        SessionEnd: sessionEnd,
+    };
+    await saveSettings(settings);
+    console.log(`[opensquid hooks install] wrote ${settingsPath()}`);
+    console.log(`  PreToolUse       → ${buildHookCommand("pre-tool-use")}`);
+    console.log(`  Stop             → ${buildHookCommand("stop")}`);
+    console.log(`  Stop (D9 guard)  → type:prompt model:${FALSE_STOP_GUARD_MODEL}`);
+    console.log(`  UserPromptSubmit → ${buildHookCommand("user-prompt-submit")}`);
+    console.log(`  SessionEnd       → ${buildHookCommand("session-end")}`);
+    console.log(`  next: restart Claude Code so the new settings load.`);
+}
+async function cmdUninstall() {
+    const settings = await loadSettings();
+    const hooks = settings.hooks;
+    if (!hooks) {
+        console.log(`[opensquid hooks uninstall] no hooks configured`);
+        return;
+    }
+    let totalRemoved = 0;
+    for (const event of ["PreToolUse", "Stop", "UserPromptSubmit", "SessionEnd"]) {
+        const matchers = hooks[event];
+        if (!matchers)
+            continue;
+        totalRemoved += countOurHooks(matchers);
+        const purged = purgeOurHook(matchers);
+        if (purged.length === 0) {
+            delete hooks[event];
+        }
+        else {
+            hooks[event] = purged;
+        }
+    }
+    await saveSettings(settings);
+    console.log(`[opensquid hooks uninstall] removed ${totalRemoved} opensquid hook(s)`);
+}
+async function cmdDoctor() {
+    const settings = await loadSettings();
+    const hooks = settings.hooks ?? {};
+    console.log(`[opensquid hooks doctor]`);
+    console.log(`  settings.json: ${settingsPath()}`);
+    for (const event of ["PreToolUse", "Stop", "UserPromptSubmit", "SessionEnd"]) {
+        const matchers = hooks[event] ?? [];
+        const ours = countOurHooks(matchers);
+        console.log(`  ${event.padEnd(18)} total=${matchers.length}  opensquid=${ours}`);
+    }
+}
+function countOurHooks(matchers) {
+    let n = 0;
+    for (const m of matchers) {
+        for (const h of m.hooks) {
+            if (isOurHook(h))
+                n++;
+        }
+    }
+    return n;
+}
+export async function runHooksCli(cmd, _argv) {
+    switch (cmd) {
+        case "install":
+            await cmdInstall();
+            return;
+        case "uninstall":
+            await cmdUninstall();
+            return;
+        case "doctor":
+            await cmdDoctor();
+            return;
+    }
+}
+//# sourceMappingURL=hooks-cli.js.map

package/dist/hooks-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks-cli.js","sourceRoot":"","sources":["../src.legacy/hooks-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAEhC,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGpB;IAFlB,YACE,OAAe,EACC,IAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,SAAI,GAAJ,IAAI,CAAS;QAG7B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,QAAQ,GAAG;IACf,UAAU,EAAE,wBAAwB;IACpC,IAAI,EAAE,gBAAgB;IACtB,kBAAkB,EAAE,iCAAiC;IACrD,gBAAgB,EAAE,8BAA8B;IAChD,UAAU,EAAE,uBAAuB;CAC3B,CAAC;AAEX,4EAA4E;AAC5E,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAEvD;;;;;;;;;;;;;;GAcG;AACH,MAAM,uBAAuB,GAAG;;;;;;;;;;;;sIAYsG,CAAC;AAEvI,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;AAiClD,SAAS,YAAY;IACnB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QACjD,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAwB;IAClD,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC;IACzB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,sEAAsE;AACtE,SAAS,gBAAgB;IACvB,qEAAqE;IACrE,gDAAgD;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAwE;IAExE,oEAAoE;IACpE,kEAAkE;IAClE,oEAAoE;IACpE,6DAA6D;IAC7D,4DAA4D;IAC5D,OAAO,QAAQ,gBAAgB,EAAE,eAAe,QAAQ,EAAE,CAAC;AAC7D,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,SAAS,CAAC,CAAa;IACrC,IAAI,CAAC,CAAC,GAAG,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAC1C,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;IAChC,CAAC;IACD,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,6CAA6C;IAC7C,IACE,CAAC,CAAC,IAAI,KAAK,SAAS;QACpB,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAC7B,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC,EACnE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8DAA8D;AAC9D,SAAS,YAAY,CAAC,QAAyB;IAC7C,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,GAAG,CAAC;QACJ,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;KAC5C,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IAEnC,kEAAkE;IAClE,qEAAqE;IACrE,oEAAoE;IACpE,iEAAiE;IACjE,qEAAqE;IACrE,WAAW;IACX,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IACxD,UAAU,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,IAAI;QACb,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,gBAAgB,CAAC,cAAc,CAAC;gBACzC,GAAG,EAAE,QAAQ,CAAC,UAAU;aACzB;SACF;KACF,CAAC,CAAC;IAEH,2EAA2E;IAC3E,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC;QACR,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;KACpF,CAAC,CAAC;IACH,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IACrE,+DAA+D;IAC/D,2DAA2D;IAC3D,8DAA8D;IAC9D,oEAAoE;IACpE,IAAI,CAAC,IAAI,CAAC;QACR,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,uBAAuB;gBAC/B,KAAK,EAAE,sBAAsB;gBAC7B,GAAG,EAAE,QAAQ,CAAC,kBAAkB;aACjC;SACF;KACF,CAAC,CAAC;IAEH,+DAA+D;IAC/D,0DAA0D;IAC1D,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IACvD,GAAG,CAAC,IAAI,CAAC;QACP,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,gBAAgB,CAAC,oBAAoB,CAAC;gBAC/C,GAAG,EAAE,QAAQ,CAAC,gBAAgB;aAC/B;SACF;KACF,CAAC,CAAC;IAEH,iEAAiE;IACjE,uBAAuB;IACvB,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IACxD,UAAU,CAAC,IAAI,CAAC;QACd,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,gBAAgB,CAAC,aAAa,CAAC;gBACxC,GAAG,EAAE,QAAQ,CAAC,UAAU;aACzB;SACF;KACF,CAAC,CAAC;IAEH,QAAQ,CAAC,KAAK,GAAG;QACf,GAAG,KAAK;QACR,UAAU,EAAE,UAAU;QACtB,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,GAAG;QACrB,UAAU,EAAE,UAAU;KACvB,CAAC;IACF,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAE7B,OAAO,CAAC,GAAG,CAAC,mCAAmC,YAAY,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,wBAAwB,gBAAgB,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,wBAAwB,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,0CAA0C,sBAAsB,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,GAAG,CAAC,wBAAwB,gBAAgB,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,wBAAwB,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,CAAU,EAAE,CAAC;QACtF,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,YAAY,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;QACxB,CAAC;IACH,CAAC;IACD,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,uCAAuC,YAAY,oBAAoB,CAAC,CAAC;AACvF,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,oBAAoB,YAAY,EAAE,EAAE,CAAC,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,CAAU,EAAE,CAAC;QACtF,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,QAAQ,CAAC,MAAM,eAAe,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAyB;IAC9C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,SAAS,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAgB,EAAE,KAAe;IACjE,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS;YACZ,MAAM,UAAU,EAAE,CAAC;YACnB,OAAO;QACT,KAAK,WAAW;YACd,MAAM,YAAY,EAAE,CAAC;YACrB,OAAO;QACT,KAAK,QAAQ;YACX,MAAM,SAAS,EAAE,CAAC;YAClB,OAAO;IACX,CAAC;AACH,CAAC"}

package/dist/hooks-cli.test.js

@@ -0,0 +1,148 @@
+/**
+ * Tests for #118 — hooks-cli legacy entry detection + per-event HOOK_IDs.
+ *
+ * Covers `isOurHook` directly: recognition by per-event id, by legacy id,
+ * by command-path fingerprint (un-marked entries from older installs),
+ * and rejection of non-opensquid hooks.
+ *
+ * The install/uninstall integration tests are deferred — they touch the
+ * user's real ~/.claude/settings.json and would need test-isolation
+ * infrastructure that the hooks-cli module doesn't currently expose.
+ */
+import { describe, expect, it } from "vitest";
+import { isOurHook } from "./hooks-cli.js";
+describe("isOurHook — per-event marker detection", () => {
+    it("recognizes the PreToolUse marker", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "node /path/to/something/dist/index.js hook pre-tool-use",
+            _id: "opensquid-pre-tool-use",
+        })).toBe(true);
+    });
+    it("recognizes the Stop marker", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "node /path/to/something/dist/index.js hook stop",
+            _id: "opensquid-stop",
+        })).toBe(true);
+    });
+    it("recognizes the UserPromptSubmit marker", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "node /path/to/something/dist/index.js hook user-prompt-submit",
+            _id: "opensquid-user-prompt-submit",
+        })).toBe(true);
+    });
+    it("recognizes the SessionEnd marker", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "node /path/to/something/dist/index.js hook session-end",
+            _id: "opensquid-session-end",
+        })).toBe(true);
+    });
+});
+describe("isOurHook — legacy marker detection (pre-#118)", () => {
+    it("recognizes the legacy opensquid-drift-pretooluse id even on Stop entries", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "node /opt/foo/opensquid/dist/index.js hook stop",
+            _id: "opensquid-drift-pretooluse",
+        })).toBe(true);
+    });
+});
+describe("isOurHook — command-path fallback (un-marked legacy entries)", () => {
+    it("recognizes un-marked entries by command-path fingerprint", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "node /Users/alice/projects/opensquid/dist/index.js hook pre-tool-use",
+            // No _id — the bug from #118 dogfood that left these undetected.
+        })).toBe(true);
+    });
+    it("recognizes un-marked entries with absolute paths", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "/usr/local/bin/node /opt/opensquid/dist/index.js hook stop",
+        })).toBe(true);
+    });
+    it("matches case-insensitively (macOS APFS case-preserving)", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "node /Users/alice/projects/OpenSquid/dist/index.js hook pre-tool-use",
+        })).toBe(true);
+        expect(isOurHook({
+            type: "command",
+            command: "node /OPENSQUID/dist/index.js hook stop",
+        })).toBe(true);
+    });
+    it("does NOT match commands that incidentally contain 'opensquid' in unrelated context", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "echo 'I love opensquid'",
+        })).toBe(false);
+    });
+    it("does NOT match similarly-named third-party tools", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "node /opt/some-other/dist/index.js hook stop",
+        })).toBe(false);
+    });
+});
+describe("FALSE_STOP_GUARD_PROMPT content (0.7.31 — squid emoji prefix)", () => {
+    it("install writes a Stop prompt hook whose prompt instructs Haiku to prefix with 🦑 [opensquid D9-guard]", async () => {
+        // Indirect: re-load the source file content via the install module
+        // and verify the embedded prompt string contains the marker. Avoids
+        // monkeypatching ~/.claude/settings.json in CI.
+        const fs = await import("node:fs/promises");
+        const path = await import("node:path");
+        const url = await import("node:url");
+        const here = url.fileURLToPath(import.meta.url);
+        const sourcePath = path.join(path.dirname(here), "hooks-cli.ts");
+        const src = await fs.readFile(sourcePath, "utf8");
+        expect(src).toContain("🦑 [opensquid D9-guard]");
+    });
+});
+describe("isOurHook — prompt-type Stop guard (0.7.20 / drift D9)", () => {
+    it("recognizes the false-stop guard prompt hook by _id", () => {
+        expect(isOurHook({
+            type: "prompt",
+            prompt: "any prompt text",
+            model: "claude-haiku-4-5",
+            _id: "opensquid-stop-false-stop-guard",
+        })).toBe(true);
+    });
+    it("rejects a prompt-type entry with a foreign _id (no command fingerprint to fall back on)", () => {
+        expect(isOurHook({
+            type: "prompt",
+            prompt: "some other prompt",
+            model: "claude-haiku-4-5",
+            _id: "other-tool-prompt-hook",
+        })).toBe(false);
+    });
+    it("rejects an unmarked prompt-type entry (no _id, no command field)", () => {
+        expect(isOurHook({
+            type: "prompt",
+            prompt: "unmarked prompt",
+        })).toBe(false);
+    });
+});
+describe("isOurHook — rejection of foreign hooks", () => {
+    it("rejects entries with a different _id and a non-matching command", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "bun run /Users/slee/claude-memory/scripts/sync-to-supabase.ts",
+            _id: "memory-sync",
+        })).toBe(false);
+    });
+    it("rejects entries with no _id and a non-matching command", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "/usr/local/bin/some-other-hook --flag",
+        })).toBe(false);
+    });
+    it("rejects empty command", () => {
+        expect(isOurHook({
+            type: "command",
+            command: "",
+        })).toBe(false);
+    });
+});

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * opensquid public entry. opensquid ships via its `bin` entrypoints (CLI + hooks) and the MCP
+ * servers — it exposes no library root API. (The former `./engine/*` re-export was removed when the
+ * loop-engine subsystem was retired; opensquid is fully engine-free.)
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+/**
+ * opensquid public entry. opensquid ships via its `bin` entrypoints (CLI + hooks) and the MCP
+ * servers — it exposes no library root API. (The former `./engine/*` re-export was removed when the
+ * loop-engine subsystem was retired; opensquid is fully engine-free.)
+ */
+export {};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC"}

package/dist/mcp/anchor.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Anchor this MCP server process to the host-declared project dir.
+ *
+ * The spawn cwd of a stdio MCP server is HOST-controlled: Claude spawns with
+ * cwd == CLAUDE_PROJECT_DIR (observed 7/7 live servers, 2026-06-10), codex
+ * (and any other host) makes no such guarantee. Every cwd-derived behavior in
+ * this process — recall-scope namespace resolution (rag/scope.ts), umbrella
+ * routing fallback (chat-bridge-server.ts) — must not depend on the host's
+ * choice, so the convention is normalized once at the process boundary: chdir
+ * to CLAUDE_PROJECT_DIR when the host declares it.
+ *
+ * Fail-loud contract: a bad dir throws (ENOENT/ENOTDIR) → startup death the
+ * host reports, never a silently wrong memory namespace.
+ *
+ * Imports from: nothing (node globals only).
+ * Imported by: mcp/server.ts, mcp/chat-bridge-server.ts (first call in main()).
+ */
+/** chdir to CLAUDE_PROJECT_DIR when set; no-op when unset/empty; throws on a bad dir. */
+export declare function anchorProcessToProjectDir(): void;
+//# sourceMappingURL=anchor.d.ts.map

package/dist/mcp/anchor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor.d.ts","sourceRoot":"","sources":["../../src/mcp/anchor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,yFAAyF;AACzF,wBAAgB,yBAAyB,IAAI,IAAI,CAIhD"}

package/dist/mcp/anchor.js

@@ -0,0 +1,25 @@
+/**
+ * Anchor this MCP server process to the host-declared project dir.
+ *
+ * The spawn cwd of a stdio MCP server is HOST-controlled: Claude spawns with
+ * cwd == CLAUDE_PROJECT_DIR (observed 7/7 live servers, 2026-06-10), codex
+ * (and any other host) makes no such guarantee. Every cwd-derived behavior in
+ * this process — recall-scope namespace resolution (rag/scope.ts), umbrella
+ * routing fallback (chat-bridge-server.ts) — must not depend on the host's
+ * choice, so the convention is normalized once at the process boundary: chdir
+ * to CLAUDE_PROJECT_DIR when the host declares it.
+ *
+ * Fail-loud contract: a bad dir throws (ENOENT/ENOTDIR) → startup death the
+ * host reports, never a silently wrong memory namespace.
+ *
+ * Imports from: nothing (node globals only).
+ * Imported by: mcp/server.ts, mcp/chat-bridge-server.ts (first call in main()).
+ */
+/** chdir to CLAUDE_PROJECT_DIR when set; no-op when unset/empty; throws on a bad dir. */
+export function anchorProcessToProjectDir() {
+    const dir = process.env.CLAUDE_PROJECT_DIR;
+    if (dir === undefined || dir === '')
+        return;
+    process.chdir(dir);
+}
+//# sourceMappingURL=anchor.js.map

package/dist/mcp/anchor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor.js","sourceRoot":"","sources":["../../src/mcp/anchor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,yFAAyF;AACzF,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC3C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO;IAC5C,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC"}

package/dist/mcp/chat-bridge-server.d.ts

@@ -0,0 +1,45 @@
+#!/usr/bin/env node
+/**
+ * `opensquid-chat-bridge-mcp` — MCP server bridging Claude Code sessions
+ * to the running chat-daemon's UMBRELLA Telegram routing.
+ *
+ * Why this is a SEPARATE MCP server from `opensquid-mcp`:
+ *   `src/mcp/server.ts` is intentionally read-only by design (per its
+ *   own header comment: "Mutations live behind hook bindings + rule
+ *   processes; the MCP surface is read-only inspection so an external
+ *   client can never bypass the dispatcher"). The chat bridge needs
+ *   ONE mutation tool — `chat_send` — to be useful. Adding it to the
+ *   read-only server would violate the dispatcher-bypass guard for the
+ *   whole opensquid surface. Putting it in its own MCP binary keeps
+ *   the guard intact: opensquid-mcp stays read-only; this server is
+ *   the explicit + bounded exception.
+ *
+ * Tools (2):
+ *   - `chat_poll_inbox` — read-only. Returns inbound messages from the
+ *     active UMBRELLA's `~/.opensquid/umbrellas/<id>/inbox/<platform>.jsonl`
+ *     since an optional `since` ISO-8601 timestamp. Caller tracks the
+ *     cursor; server is stateless. Honors per-platform filter.
+ *
+ *   - `chat_send` — explicit mutation. Connects to the chat-daemon's
+ *     UDS RPC server at `~/.opensquid/chat-daemon.sock` and calls its
+ *     `send` JSON-RPC method. Accepts the `project:<platform>` shorthand
+ *     that resolves to the active umbrella's outbound Telegram target via
+ *     `channels.json`. Daemon must already be running (this server does
+ *     NOT spawn it).
+ *
+ * Active-umbrella resolution (T-CHAT-AS-TERMINAL CAT.1c): resolve the cwd
+ * (`CLAUDE_PROJECT_DIR` env, else `process.cwd()`) to its umbrella via
+ * `loadChannelsConfig()` + `resolveUmbrellaForCwd` (longest-prefix over
+ * `members`). `channels.json` is synthesized at the CAT.1d cutover, so an
+ * absent config / unresolved umbrella is treated as "no inbox" (empty,
+ * fail-quiet), never an error.
+ *
+ * Transport: stdio. stdout reserved for MCP JSON-RPC; diagnostics to
+ * stderr only. NO `console.log` in this binary or its imports.
+ *
+ * Imports from: @modelcontextprotocol/sdk + zod + zod-to-json-schema.
+ * Imported by: nothing in src/. Wired as the `opensquid-chat-bridge-mcp`
+ * bin in package.json.
+ */
+export {};
+//# sourceMappingURL=chat-bridge-server.d.ts.map

package/dist/mcp/chat-bridge-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-bridge-server.d.ts","sourceRoot":"","sources":["../../src/mcp/chat-bridge-server.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG"}