ruvnet-brain 4.0.35 → 4.0.90-dev

package/plugin/commands/brain-console.md

@@ -3,14 +3,77 @@ description: "Brain Console — RuvNet Brain Console (same console as /rvbc, /br
 updated: 2026-07-20
 ---
 
-`/rvbc`, `/rvcb`, `/brain-console`, and `/ruvnet-brain:configure` are equally valid names. Never
-correct the user's spelling.
+Launch the **RuvNet Brain Console** for the user. Same console as `/ruvnet-brain:configure`,
+`/rvcb`, and `/brain-console` — every spelling lands here, so never tell the user they typed it wrong.
 
-1. Say: "Opening it now; it scans live while you watch."
-2. Use `${RUVNET_BRAIN_KB:-$HOME/.cache/ruvnet-brain/kb}/.console-runtime/scripts/onboarding-console.mjs`.
-   A current-repository copy is allowed only for an explicit developer checkout.
-3. Run `node <resolved-script> --serve --open` in the background.
-4. Give the URL immediately. Never promise a duration; the page reports its own progress.
+## The contract you are keeping
 
-An already-running server is success. It is read-only until the user clicks; changes must be
-explained and reversible. If the script or server is unavailable, report the exact failure.
+The page **opens immediately and scans itself while they watch.** The server never blocks: a cold or
+new-project read is answered in milliseconds with "measuring…", the page keeps its skeletons and
+narrates the wait, and each card fills in as its own measurement lands. A chip in the header says how
+old the picture is and re-measures when clicked.
+
+So there is nothing to wait for and nothing to warn them about. **Your entire job is: say one
+sentence, start the server in the background, hand over the URL, and get out of the way.**
+
+## 1. SPEAK FIRST — one short sentence, before any tool call
+
+Your FIRST output — before any tool call, any file read, any search — is one warm line saying you are
+opening it now and it will scan itself live in their browser. Something in the spirit of:
+
+> "Opening your console now — it'll come up right away and scan your setup live while you watch."
+
+Say it like a person, not a status bar. **Do not** promise 20 seconds, a minute, or any duration: the
+page carries its own timing now, and a number invented here is a number the page will contradict.
+
+## 2. Find the installed runtime
+
+Use `${RUVNET_BRAIN_KB:-$HOME/.cache/ruvnet-brain/kb}/.console-runtime/scripts/onboarding-console.mjs`.
+A current-repository copy is allowed only in an explicit developer checkout. Never guess a
+`~/Code/ruvnet-brain` path: the installer persists this runtime for clean users.
+
+## 3. Start it in the BACKGROUND and open the browser
+
+```
+node <repo>/scripts/onboarding-console.mjs --serve --open
+```
+
+**`run_in_background: true`, ALWAYS — never in the foreground.** This is a server: it does not exit,
+so a foreground run hangs the tool call until the 120-second timeout and turns an instant page into
+two minutes of dead air. It binds `127.0.0.1` only and prints `http://127.0.0.1:7411/` within about a
+third of a second.
+
+**Then post the URL immediately.** Do not poll the log, do not wait for a scan, do not check whether
+the data has landed — the page reports its own progress and none of it is visible from here.
+
+**If it reports it is already running**, that is a success, not an error: open the URL yourself with
+`open "http://127.0.0.1:<port>/"`. One honest caveat, worth half a sentence if it comes up — a
+console that is already running is serving the project it was *launched* from, so if they want this
+project's view they can stop that one (`^C` in its terminal) and run this again.
+
+## 4. Hand it over and stop
+
+Give them the URL as a clickable line, and one warm sentence: the page is **read-only until you
+click**, every machine change is **explained first and reversible**, and Settings save at the user
+level only. Worth naming once: the brain's on/off switch is the first card on the page, and the
+header chip says how fresh the reading is and re-measures if they click it.
+
+## 5. If it errors
+
+Report it plainly — the real error, not a guess — and offer to fix it. Never leave them staring at
+a dead tab wondering whether it is still loading.
+
+---
+
+## Things NOT to do before the page is open
+
+Each of these has cost a real user real minutes of silence, and not one of them is needed to open a
+local web page:
+
+- **No knowledge search, no memory recall, no source grounding, no repo exploration.** A cold
+  embedding-model load alone is allowed up to 180 seconds.
+- **No model selection or routing work.**
+- **No reading this repo to "check" anything first.** Find the script, run it.
+
+Do **not** narrate the machine yourself afterwards; the page is the mirror. Your job is to open it,
+say one sentence, and get out of the way.

package/plugin/commands/configure.md

@@ -1,33 +1,79 @@
 ---
 description: Open the RuvNet Brain Onboarding Console — a local web page that mirrors YOUR machine's RuvNet setup, explains it in plain English, and lets you safely configure and fix it. Read-only until you click; every machine change is explained first and is reversible.
-updated: 2026-07-15
+updated: 2026-07-20
 ---
 
-Launch the **RuvNet Brain Onboarding Console** for the user — a locally-served web page that reads
-their actual machine and lets them configure and (with consent) fix it.
+Launch the **RuvNet Brain Console** for the user. Same console as `/ruvnet-brain:configure`,
+`/rvcb`, and `/brain-console` — every spelling lands here, so never tell the user they typed it wrong.
 
-Do this:
+## The contract you are keeping
 
-1. **Find the installed runtime.** Use
-   `${RUVNET_BRAIN_KB:-$HOME/.cache/ruvnet-brain/kb}/.console-runtime/scripts/onboarding-console.mjs`.
-   A current-repository copy is allowed only for an explicit developer checkout.
+The page **opens immediately and scans itself while they watch.** The server never blocks: a cold or
+new-project read is answered in milliseconds with "measuring…", the page keeps its skeletons and
+narrates the wait, and each card fills in as its own measurement lands. A chip in the header says how
+old the picture is and re-measures when clicked.
 
-2. **Start the server in the BACKGROUND** (it is a long-running process) so this turn keeps going, and
-   open the browser:
+So there is nothing to wait for and nothing to warn them about. **Your entire job is: say one
+sentence, start the server in the background, hand over the URL, and get out of the way.**
 
-   ```
-   node <repo>/scripts/onboarding-console.mjs --serve --open
-   ```
+## 1. SPEAK FIRST — one short sentence, before any tool call
 
-   Run it with `run_in_background: true`. It binds `127.0.0.1` only and prints a line like
-   `http://127.0.0.1:7411/`.
+Your FIRST output — before any tool call, any file read, any search — is one warm line saying you are
+opening it now and it will scan itself live in their browser. Something in the spirit of:
 
-3. **Give the user the link** as a clickable `http://127.0.0.1:<port>/`, with one warm sentence:
-   the page is **read-only until you click**, everything it can change to your computer is **explained
-   in plain English and confirmed first**, and **Settings save at your user level**
-   (`~/.claude/ruvnet-brain/config.json`) without touching how anything else on your machine runs.
+> "Opening your console now — it'll come up right away and scan your setup live while you watch."
 
-4. If the server errors (e.g. `sqlite3` not found, or a bad node version), report it plainly and offer
-   to fix it — don't leave them staring at a dead tab.
+Say it like a person, not a status bar. **Do not** promise 20 seconds, a minute, or any duration: the
+page carries its own timing now, and a number invented here is a number the page will contradict.
 
-Do **not** narrate the machine yourself — the page is the mirror. Your job is just to get it open.
+## 2. Find the installed runtime
+
+Use `${RUVNET_BRAIN_KB:-$HOME/.cache/ruvnet-brain/kb}/.console-runtime/scripts/onboarding-console.mjs`.
+A current-repository copy is allowed only in an explicit developer checkout. Never guess a
+`~/Code/ruvnet-brain` path: the installer persists this runtime for clean users.
+
+## 3. Start it in the BACKGROUND and open the browser
+
+```
+node <repo>/scripts/onboarding-console.mjs --serve --open
+```
+
+**`run_in_background: true`, ALWAYS — never in the foreground.** This is a server: it does not exit,
+so a foreground run hangs the tool call until the 120-second timeout and turns an instant page into
+two minutes of dead air. It binds `127.0.0.1` only and prints `http://127.0.0.1:7411/` within about a
+third of a second.
+
+**Then post the URL immediately.** Do not poll the log, do not wait for a scan, do not check whether
+the data has landed — the page reports its own progress and none of it is visible from here.
+
+**If it reports it is already running**, that is a success, not an error: open the URL yourself with
+`open "http://127.0.0.1:<port>/"`. One honest caveat, worth half a sentence if it comes up — a
+console that is already running is serving the project it was *launched* from, so if they want this
+project's view they can stop that one (`^C` in its terminal) and run this again.
+
+## 4. Hand it over and stop
+
+Give them the URL as a clickable line, and one warm sentence: the page is **read-only until you
+click**, every machine change is **explained first and reversible**, and Settings save at the user
+level only. Worth naming once: the brain's on/off switch is the first card on the page, and the
+header chip says how fresh the reading is and re-measures if they click it.
+
+## 5. If it errors
+
+Report it plainly — the real error, not a guess — and offer to fix it. Never leave them staring at
+a dead tab wondering whether it is still loading.
+
+---
+
+## Things NOT to do before the page is open
+
+Each of these has cost a real user real minutes of silence, and not one of them is needed to open a
+local web page:
+
+- **No knowledge search, no memory recall, no source grounding, no repo exploration.** A cold
+  embedding-model load alone is allowed up to 180 seconds.
+- **No model selection or routing work.**
+- **No reading this repo to "check" anything first.** Find the script, run it.
+
+Do **not** narrate the machine yourself afterwards; the page is the mirror. Your job is to open it,
+say one sentence, and get out of the way.

package/plugin/commands/rvcb.md

@@ -3,14 +3,77 @@ description: "RvCB — RuvNet Brain Console (same console as /rvbc, /brain-conso
 updated: 2026-07-20
 ---
 
-`/rvbc`, `/rvcb`, `/brain-console`, and `/ruvnet-brain:configure` are equally valid names. Never
-correct the user's spelling.
+Launch the **RuvNet Brain Console** for the user. Same console as `/ruvnet-brain:configure`,
+`/rvcb`, and `/brain-console` — every spelling lands here, so never tell the user they typed it wrong.
 
-1. Say: "Opening it now; it scans live while you watch."
-2. Use `${RUVNET_BRAIN_KB:-$HOME/.cache/ruvnet-brain/kb}/.console-runtime/scripts/onboarding-console.mjs`.
-   A current-repository copy is allowed only for an explicit developer checkout.
-3. Run `node <resolved-script> --serve --open` in the background.
-4. Give the URL immediately. Never promise a duration; the page reports its own progress.
+## The contract you are keeping
 
-An already-running server is success. It is read-only until the user clicks; changes must be
-explained and reversible. If the script or server is unavailable, report the exact failure.
+The page **opens immediately and scans itself while they watch.** The server never blocks: a cold or
+new-project read is answered in milliseconds with "measuring…", the page keeps its skeletons and
+narrates the wait, and each card fills in as its own measurement lands. A chip in the header says how
+old the picture is and re-measures when clicked.
+
+So there is nothing to wait for and nothing to warn them about. **Your entire job is: say one
+sentence, start the server in the background, hand over the URL, and get out of the way.**
+
+## 1. SPEAK FIRST — one short sentence, before any tool call
+
+Your FIRST output — before any tool call, any file read, any search — is one warm line saying you are
+opening it now and it will scan itself live in their browser. Something in the spirit of:
+
+> "Opening your console now — it'll come up right away and scan your setup live while you watch."
+
+Say it like a person, not a status bar. **Do not** promise 20 seconds, a minute, or any duration: the
+page carries its own timing now, and a number invented here is a number the page will contradict.
+
+## 2. Find the installed runtime
+
+Use `${RUVNET_BRAIN_KB:-$HOME/.cache/ruvnet-brain/kb}/.console-runtime/scripts/onboarding-console.mjs`.
+A current-repository copy is allowed only in an explicit developer checkout. Never guess a
+`~/Code/ruvnet-brain` path: the installer persists this runtime for clean users.
+
+## 3. Start it in the BACKGROUND and open the browser
+
+```
+node <repo>/scripts/onboarding-console.mjs --serve --open
+```
+
+**`run_in_background: true`, ALWAYS — never in the foreground.** This is a server: it does not exit,
+so a foreground run hangs the tool call until the 120-second timeout and turns an instant page into
+two minutes of dead air. It binds `127.0.0.1` only and prints `http://127.0.0.1:7411/` within about a
+third of a second.
+
+**Then post the URL immediately.** Do not poll the log, do not wait for a scan, do not check whether
+the data has landed — the page reports its own progress and none of it is visible from here.
+
+**If it reports it is already running**, that is a success, not an error: open the URL yourself with
+`open "http://127.0.0.1:<port>/"`. One honest caveat, worth half a sentence if it comes up — a
+console that is already running is serving the project it was *launched* from, so if they want this
+project's view they can stop that one (`^C` in its terminal) and run this again.
+
+## 4. Hand it over and stop
+
+Give them the URL as a clickable line, and one warm sentence: the page is **read-only until you
+click**, every machine change is **explained first and reversible**, and Settings save at the user
+level only. Worth naming once: the brain's on/off switch is the first card on the page, and the
+header chip says how fresh the reading is and re-measures if they click it.
+
+## 5. If it errors
+
+Report it plainly — the real error, not a guess — and offer to fix it. Never leave them staring at
+a dead tab wondering whether it is still loading.
+
+---
+
+## Things NOT to do before the page is open
+
+Each of these has cost a real user real minutes of silence, and not one of them is needed to open a
+local web page:
+
+- **No knowledge search, no memory recall, no source grounding, no repo exploration.** A cold
+  embedding-model load alone is allowed up to 180 seconds.
+- **No model selection or routing work.**
+- **No reading this repo to "check" anything first.** Find the script, run it.
+
+Do **not** narrate the machine yourself afterwards; the page is the mirror. Your job is to open it,
+say one sentence, and get out of the way.

package/plugin/hooks/codex-hooks.json

@@ -1,5 +1,5 @@
 {
-  "description": "RuvNet Brain lifecycle hooks for Codex. Every command enters through a generation-independent wrapper and adapts the shared Brain hook bodies to Codex contracts.",
+  "description": "RuvNet Brain lifecycle hooks for Codex. Every command enters through a generation-independent wrapper and adapts the shared Brain hook bodies to Codex contracts.\n\nSCHEMA WARNING, MEASURED 2026-08-14 ON A LIVE CODEX 0.147.0 SESSION: this file accepts EXACTLY two top-level keys, `description` and `hooks`. Anything else and Codex logs `warning: failed to parse hooks config ...: unknown field `X`, expected `description` or `hooks`` and DROPS THE WHOLE FILE — all 16 hooks silently stop, on a warning line nobody reads. A structured `hostParity` object was written here first and did exactly that; the record below lives in this string because this string is the only place it can live.\n\nHOST PARITY (ADR-067). PreToolUse refusal routes through decision-gate.mjs on BOTH hosts, so decision-gate.mjs REFUSAL_POLICIES is the single list of policies and neither host can gain or lose one silently. This file deliberately does NOT restate that list: it used to name policies one by one, which is exactly why identifier-preflight, degradation-watch and adr-currency (added 2026-08-13) went live on Claude Code and were unreachable on Codex — a new policy had to be remembered twice, and nothing failed when it was not.\n\nDECLARED ABSENT — swarm-slot-recycler (Claude Code event TeammateIdle). Codex 0.147.0 has no TeammateIdle hook event. Its complete event set, read from the binary rather than assumed, is pre_tool_use, permission_request, post_tool_use, pre_compact, post_compact, session_start, session_end, user_prompt_submit, subagent_start, subagent_stop, stop. There is nothing to register against.\n\nOUTPUT CONTRACT. PreToolUse/PostToolUse/SessionStart/UserPromptSubmit stdout is PARSED by Codex (\"hook returned invalid post-tool-use JSON output\"); SessionEnd has no output schema at all and PreCompact carries no additionalContext. codex-hook-adapter.mjs enforces this per event.\n\nSESSIONEND IS HARD-CAPPED AT 3s BY THE HOST, measured on a live Codex 0.147.0 session which says so itself: `warning: clamping SessionEnd hook timeout to 3s`. A larger number here is not a longer budget, it is a lie the host silently corrects. learn-flush needs 18s (measured 18342/18347/18384 ms with a real queue and real ruflo), so codex-hook-wrapper.mjs DETACHES it: the cap governs how long the host WAITS, not how long work may take.",
   "hooks": {
     "SessionStart": [
       {
@@ -13,6 +13,18 @@
         ]
       }
     ],
+    "PreCompact": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 session-snapshot PreCompact",
+            "timeout": 5
+          }
+        ]
+      }
+    ],
     "UserPromptSubmit": [
       {
         "hooks": [
@@ -31,41 +43,31 @@
     ],
     "PreToolUse": [
       {
-        "matcher": "^(Bash|Edit|Write|exec_command|functions\\.exec_command|functions__exec_command|apply_patch)$",
+        "matcher": "^(Edit|Write|MultiEdit|apply_patch)$",
         "hooks": [
           {
             "type": "command",
-            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 hijack-ruvnet",
-            "timeout": 5
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 6500 decision-gate write",
+            "timeout": 8
           }
         ]
       },
       {
-        "matcher": "Agent|spawn_agent",
+        "matcher": "^(Bash|exec_command|functions\\.exec_command|functions__exec_command)$",
         "hooks": [
           {
             "type": "command",
-            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 route-dispatch",
-            "timeout": 5
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 6500 decision-gate bash",
+            "timeout": 8
           }
         ]
       },
       {
-        "matcher": "^(Edit|Write|apply_patch)$",
+        "matcher": "^(Agent|spawn_agent)$",
         "hooks": [
           {
             "type": "command",
-            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 ground-before-write",
-            "timeout": 5
-          },
-          {
-            "type": "command",
-            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 protect-state",
-            "timeout": 5
-          },
-          {
-            "type": "command",
-            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 unprompted-speech PreToolUse-write",
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 route-dispatch",
             "timeout": 5
           }
         ]
@@ -77,16 +79,6 @@
             "type": "command",
             "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 verify-interface",
             "timeout": 5
-          },
-          {
-            "type": "command",
-            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 design-wall",
-            "timeout": 5
-          },
-          {
-            "type": "command",
-            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 unprompted-speech PreToolUse-bash",
-            "timeout": 5
           }
         ]
       }
@@ -103,7 +95,7 @@
         ]
       },
       {
-        "matcher": "^(Bash|Edit|Write|exec_command|functions\\.exec_command|functions__exec_command|apply_patch)$",
+        "matcher": "^(Bash|Edit|Write|MultiEdit|exec_command|functions\\.exec_command|functions__exec_command|apply_patch)$",
         "hooks": [
           {
             "type": "command",
@@ -113,7 +105,7 @@
         ]
       },
       {
-        "matcher": "^(Edit|Write|apply_patch)$",
+        "matcher": "^(Edit|Write|MultiEdit|apply_patch)$",
         "hooks": [
           {
             "type": "command",
@@ -131,15 +123,30 @@
             "timeout": 5
           }
         ]
+      },
+      {
+        "matcher": "^(Agent|spawn_agent)$",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 4500 routing-outcome",
+            "timeout": 5
+          }
+        ]
       }
     ],
     "SessionEnd": [
       {
-        "matcher": "other",
+        "matcher": ".*",
         "hooks": [
           {
             "type": "command",
-            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 2500 learn-flush",
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 2800 session-snapshot SessionEnd",
+            "timeout": 3
+          },
+          {
+            "type": "command",
+            "command": "node -e \"const f=require('node:fs'),o=require('node:os'),p=require('node:path'),c=require('node:child_process'),d=process.env.CODEX_HOME||p.join(o.homedir(),'.codex'),b=process.env.RUVNET_BRAIN_HOME||p.join(p.dirname(d),'.cache','ruvnet-brain'),w=p.join(b,'codex-hook.mjs');let s;try{s=f.statSync(w)}catch{}if(!s?.isFile())process.exit(0);const r=c.spawnSync(process.execPath,[w,...process.argv.slice(2)],{stdio:['inherit','pipe','pipe'],encoding:'utf8',env:process.env,timeout:Number(process.argv[1]),killSignal:'SIGKILL'});if(r.status===0||r.status===2){if(r.stdout)process.stdout.write(r.stdout);if(r.stderr)process.stderr.write(r.stderr)}process.exit(r.status===2?2:0)\" 2800 learn-flush",
             "timeout": 3
           }
         ]

package/plugin/hooks/hook-contracts.json

@@ -1,5 +1,5 @@
 {
-  "_note": "OUT-OF-SHIM HOOK CONTRACTS (ADR-055 §6). The per-hook contract — event, matcher, layer, codeRoot, mode, offBehavior, failureBehavior, timeout, budgets, state, dependencies, reachesStrangers, owner — is carried NATIVELY by plugin/scripts/hook-shim.mjs's dispatch table for every shim-routed registration. Everything registered outside that table has nowhere to carry it, which is how the whole non-plugin two thirds of this machine's mesh ended up with no declared answer to 'what happens when the brain is off' (ADR-055 F14). This file is the other half: a checked-in contract for every registration this REPO owns but does not route through the shim. scripts/hook-registry.mjs reads both, and tests/unit/hook-registry-lint.test.mjs fails any repo-owned registration absent from both — so a new one cannot be added silently. SCOPE, deliberately: this file declares only registrations THIS repo owns (plugin/hooks/hooks.json and this project's .claude/settings.json). It does NOT declare contracts for the machine owner's ~/.claude/settings.json or for third-party plugins — those are not ours to specify, and inventing an offBehavior for someone else's hook would be exactly the fiction the lint exists to prevent. They stay visible as documented machine-local findings in the lint's expected-red block.",
+  "_note": "OUT-OF-SHIM HOOK CONTRACTS (ADR-055 \u00a76). The per-hook contract \u2014 event, matcher, layer, codeRoot, mode, offBehavior, failureBehavior, timeout, budgets, state, dependencies, reachesStrangers, owner \u2014 is carried NATIVELY by plugin/scripts/hook-shim.mjs's dispatch table for every shim-routed registration. Everything registered outside that table has nowhere to carry it, which is how the whole non-plugin two thirds of this machine's mesh ended up with no declared answer to 'what happens when the brain is off' (ADR-055 F14). This file is the other half: a checked-in contract for every registration this REPO owns but does not route through the shim. scripts/hook-registry.mjs reads both, and tests/unit/hook-registry-lint.test.mjs fails any repo-owned registration absent from both \u2014 so a new one cannot be added silently. SCOPE, deliberately: this file declares only registrations THIS repo owns (plugin/hooks/hooks.json and this project's .claude/settings.json). It does NOT declare contracts for the machine owner's ~/.claude/settings.json or for third-party plugins \u2014 those are not ours to specify, and inventing an offBehavior for someone else's hook would be exactly the fiction the lint exists to prevent. They stay visible as documented machine-local findings in the lint's expected-red block.",
   "_version": 1,
   "contracts": [
     {
@@ -10,44 +10,34 @@
       "commandIncludes": "version-bump-gate.sh",
       "mode": "blocking",
       "offBehavior": "run",
-      "offReason": "ADR-054's discriminator, applied literally: this is an HONESTY wall, not a retrieval feature. It refuses a commit that changes behaviour without bumping the version — the signal every user's updater reads. Nothing about that becomes acceptable because the owner switched the retrieval brain off, and the gate reads git state only: no corpus, no network, no brain.",
-      "failureBehavior": "fail-open — a crash or unparseable payload permits the command and records degraded health; malfunction is never a decision (ADR-055 §1.2)",
+      "offReason": "ADR-054's discriminator, applied literally: this is an HONESTY wall, not a retrieval feature. It refuses a commit that changes behaviour without bumping the version \u2014 the signal every user's updater reads. Nothing about that becomes acceptable because the owner switched the retrieval brain off, and the gate reads git state only: no corpus, no network, no brain.",
+      "failureBehavior": "fail-open \u2014 a crash or unparseable payload permits the command and records degraded health; malfunction is never a decision (ADR-055 \u00a71.2)",
       "timeoutSeconds": 5,
       "warmP95BudgetMs": 50,
       "coldBudgetMs": 500,
       "stdoutCapBytes": 4096,
-      "stateRead": ["git HEAD", "plugin/.claude-plugin/plugin.json"],
+      "stateRead": [
+        "git HEAD",
+        "plugin/.claude-plugin/plugin.json"
+      ],
       "stateWritten": [],
-      "dependencies": ["bash", "git"],
+      "dependencies": [
+        "bash",
+        "git"
+      ],
       "reachesStrangers": false,
-      "owner": "ruvnet-brain (this repo only — ADR-053; it enforces a rule that is true here and nowhere else)",
+      "owner": "ruvnet-brain (this repo only \u2014 ADR-053; it enforces a rule that is true here and nowhere else)",
       "note": "Project-scoped on purpose: it lived in the GLOBAL settings until 2026-07-14, taxing every Bash call in 34+ projects with a rule true in one."
     }
   ],
   "matcherAllowlist": [
-    {
-      "layer": "plugin",
-      "event": "PreToolUse",
-      "matcher": "Write|Edit|Bash",
-      "handler": "hijack-ruvnet.sh",
-      "reason": "UNANCHORED, known (ADR-055 F4). Claude Code SEARCHES the tool name, so this also selects MultiEdit, NotebookEdit, TodoWrite and BashOutput — an advisory hook firing on four tools nobody chose. Advisory, so the blast radius is wasted latency rather than a wrong refusal.",
-      "retiredBy": "ADR-055 build item 3 (four plane dispatchers) — registration changes are SHELL changes and item 2 (battery v2) must land first, so this is recorded, not fixed out of order."
-    },
     {
       "layer": "plugin",
       "event": "PreToolUse",
       "matcher": "Bash",
       "handler": "verify-interface.sh",
-      "reason": "UNANCHORED, known (ADR-055 F4/F12): also selects BashOutput. One of three blocking walls on the same event that each re-parse the same payload — the parse-once execution-guard is the real fix, not six anchor characters.",
-      "retiredBy": "ADR-055 build item 3 (execution-guard.mjs — ONE registration, ONE parse)"
-    },
-    {
-      "layer": "plugin",
-      "event": "PreToolUse",
-      "matcher": "Bash",
-      "handler": "design-wall.sh",
-      "reason": "UNANCHORED, known (ADR-055 F4/F12) — same pair as verify-interface above, same fix.",
-      "retiredBy": "ADR-055 build item 3 (execution-guard.mjs)"
+      "reason": "UNANCHORED, known (ADR-055 F4/F12): also selects BashOutput. One of three blocking walls on the same event that each re-parse the same payload \u2014 the parse-once execution-guard is the real fix, not six anchor characters.",
+      "retiredBy": "ADR-055 build item 3 (execution-guard.mjs \u2014 ONE registration, ONE parse)"
     },
     {
       "layer": "plugin",

package/plugin/hooks/hooks.json

@@ -1,5 +1,5 @@
 {
-  "description": "POSIX Stable Spine (ADR-023): every hook routes through hook-shim.mjs, which resolves the active generation per invocation. Advisory hooks fail open; blocking hooks preserve their exit-code contract.",
+  "description": "POSIX Stable Spine (ADR-023): every hook routes through hook-shim.mjs, which resolves the active generation per invocation. Advisory hooks fail open. ADR-067: exactly ONE hook may refuse a given tool call \u2014 decision-gate.mjs composes every policy into one decision. TIMEOUTS ARE A CONTRACT, NOT A GUESS: both decision-gate PreToolUse entries declare 5s, and the gate self-caps at DEFAULT_BUDGET_MS=2000 + MIN_HEADROOM_MS=3000, which is EXACTLY 5000ms \u2014 the relationship is the point, not the numbers. They ran at 10s for six days and that was earned at the time: an audit on 2026-08-13 timed 14 runs in unrelated projects and SIX exceeded 5s (up to 5700ms, including a plain `ls -la` at 5109ms), and because the host KILLS an over-timeout hook and renders it as a FAILED PreToolUse HOOK, the gate was producing the \"ton of hook errors\" this plugin was reported for while refusing nothing. RE-MEASURED 2026-08-19, after the adr-currency two-pass fix landed: the same full shim+gate path now runs 405-438ms in a stranger project and 412-438ms in this repo \u2014 about 10x faster \u2014 so the 10s ceiling was no longer earned by any measurement, and a ceiling nobody needs is charged to the USER, who waits behind it on every single Write and Bash. A budget is widened by evidence and must be narrowed again when the evidence goes away. The number is asserted, not asserted-to: decision-gate.mjs exports DEFAULT_BUDGET_MS + MIN_HEADROOM_MS and tests/unit/decision-gate.test.mjs reads the timeout out of THIS file and goes red if the two stop fitting. Comment keys (_note and friends) must NOT be added to this file: ADR-055 F17 records that Codex's plugin parser rejects them.",
   "hooks": {
     "SessionStart": [
       {
@@ -59,36 +59,31 @@
     ],
     "PreToolUse": [
       {
-        "matcher": "Write|Edit|Bash",
+        "matcher": "^(Write|Edit|MultiEdit|NotebookEdit)$",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hook-shim.mjs\" hijack-ruvnet || true",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hook-shim.mjs\" decision-gate write",
             "timeout": 5
           }
         ]
       },
       {
-        "matcher": "^(Task|Agent)$",
+        "matcher": "^Bash$",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hook-shim.mjs\" route-dispatch || true",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hook-shim.mjs\" decision-gate bash",
             "timeout": 5
           }
         ]
       },
       {
-        "matcher": "^(Write|Edit|MultiEdit|NotebookEdit)$",
+        "matcher": "^(Task|Agent)$",
         "hooks": [
           {
             "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hook-shim.mjs\" ground-before-write || true",
-            "timeout": 5
-          },
-          {
-            "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hook-shim.mjs\" protect-state",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hook-shim.mjs\" route-dispatch || true",
             "timeout": 5
           }
         ]
@@ -102,36 +97,6 @@
             "timeout": 5
           }
         ]
-      },
-      {
-        "matcher": "Bash",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hook-shim.mjs\" design-wall",
-            "timeout": 5
-          }
-        ]
-      },
-      {
-        "matcher": "^(Write|Edit|MultiEdit)$",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hook-shim.mjs\" unprompted-speech PreToolUse-write",
-            "timeout": 5
-          }
-        ]
-      },
-      {
-        "matcher": "^Bash$",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/hook-shim.mjs\" unprompted-speech PreToolUse-bash",
-            "timeout": 5
-          }
-        ]
       }
     ],
     "PostToolUse": [