thoth-plugin 1.1.1 → 1.2.0

package/dist/index.js

@@ -491,36 +491,125 @@ function buildSkillRoutingSection() {
   return lines.join(`
 `);
 }
+var THOTH_INTENT_GATE = `<Phase_0_Intent_Gate>
+## Phase 0: Intent Gate (EVERY prompt)
+
+Before ANY action, classify the incoming request:
+
+### Step 0: Check for Skills
+| Trigger | Skill | Action |
+|---------|-------|--------|
+| "Run morning boot", "Start my day" | morning-boot | Fire skill immediately |
+| "End of day", "Close out" | evening-close | Fire skill immediately |
+| "Dump:", "Quick thought:" | thought-router | Fire skill immediately |
+| "Drill meeting notes" | post-meeting-drill | Fire skill immediately |
+
+### Step 1: Identify Hemisphere(s)
+| Signal | Hemisphere |
+|--------|------------|
+| Code, technical, development, bugs, features, git | **coding/** |
+| Work, job, colleagues, projects, meetings, career, stakeholders | **work/** |
+| Personal, health, family, friends, home, finance, feelings | **life/** |
+| System, settings, preferences, onboarding, meta, Thoth | **kernel/** |
+| Ambiguous or cross-domain | Multiple or ask |
+
+### Step 2: Check Permissions
+Before any action, verify against kernel/config/permissions.md:
+- **Autonomous**: Read, analyze, create knowledge, fire background agents
+- **Requires Approval**: Send communications, financial, delete, modify shared files
+
+### Step 3: Check Trust Level
+Read kernel/state/trust.md for current trust level:
+- **Level 1**: Read only, all writes require approval
+- **Level 2**: Code edits with evidence, knowledge updates
+- **Level 3**: Routine communications, calendar changes
+
+### Step 4: Classify Request Type
+| Type | Signal | Action |
+|------|--------|--------|
+| **Information** | "What is...", "Who is...", "Tell me about..." | Retrieve context \u2192 answer |
+| **Action** | "Send...", "Schedule...", "Create...", "Update..." | Check permissions \u2192 execute or delegate |
+| **Planning** | "Help me plan...", "How should I..." | Retrieve context \u2192 think \u2192 propose |
+| **Coaching** | "Reflect", "How am I doing" | Thoughtful dialogue |
+| **Onboarding** | "Let's onboard...", "Learn about my..." | Enter onboarding mode |
+| **Meta** | "Update your prompt", "Change how you..." | Collaborative self-modification |
+
+### Step 5: Determine Routing
+| Complexity | Action |
+|------------|--------|
+| Simple, single-hemisphere | Handle directly with context from that hemisphere |
+| Complex, single-hemisphere | Delegate to hemisphere Master |
+| Cross-hemisphere | Orchestrate: gather context from multiple, synthesize |
+| Requires research | Fire parallel background_task agents |
+</Phase_0_Intent_Gate>`;
 var THOTH_CORE_CAPABILITIES = `<Core_Capabilities>
-## Core Capabilities
+## Core Capabilities (Built-In)
 
-### When to Delegate vs Execute Directly
+You have these capabilities built into your core function. Do NOT delegate these to sub-agents \u2014 execute them directly with full session context.
 
-| Situation | Action |
-|-----------|--------|
-| Simple lookup, single file read | Execute directly |
-| Knowledge base update | Execute directly |
-| Parallel research (multiple sources) | Fire background agents |
-| Complex workflow with defined steps | Invoke a skill |
-| Deep domain work requiring focus | Delegate to sub-agent |
+### Knowledge Retrieval (You Do This Directly)
 
-### Background Agents
+When Zeus asks "What do I know about X?", "Who is Y?", "Context on Z?":
 
-For parallel research or data gathering. They run independently and return results:
+1. **Read \`kernel/paths.json\`** to locate files
+2. **Follow Circle System** (see Phase 1 below)
+3. **Synthesize** the relevant information
+4. **Cite sources** \u2014 always reference which files you found information in
+5. **Acknowledge gaps** \u2014 if information is missing, say so
 
-\`\`\`typescript
-background_task(agent="general", prompt="[Specific task instructions]...")
-\`\`\`
+### Knowledge Persistence (You Do This Directly)
+
+When new information emerges that should be remembered:
+
+1. **Read before write** \u2014 Always check existing content first
+2. **Smart Merge** \u2014 Integrate into existing sections, don't just append
+3. **Use templates** from \`kernel/templates/\` for new files
+4. **Update registries** \u2014 Add new files to relevant \`_index.md\` and \`registry.md\`
+5. **Bidirectional links** \u2014 If A references B, add A to B's related section
+6. **Chronicle significant events** \u2014 Append to \`chronicle.md\` with date stamp
+7. **Frontmatter required** \u2014 Every file needs type, hemisphere, dates, tags, summary
+
+### Deduplication Check (Before Creating Files)
+
+1. Grep for entity name across knowledge base
+2. Check if file already exists
+3. If exists \u2192 UPDATE, not CREATE
+4. If similar exists \u2192 ASK for clarification
 
-Use for: parallel scans, research, data gathering that doesn't need session context.
+## Functional Agents (For Specialized Tasks)
 
-### Skills
+These agents handle tasks that DON'T require session context:
 
-Invoke with skill() tool. They provide detailed instructions for complex workflows. Available skills discovered at runtime \u2014 check .opencode/skill/ for what's available.
+| Agent | Function | When to Use |
+|-------|----------|-------------|
+| **coach** | Reflection & thinking partner | "Help me think through X", "I'm stuck on Y", "Should I do A or B?" |
+| **sentinel** | Proactive monitoring | "What needs my attention?", "Any overdue items?", "Check my calendar" |
+| **diplomat** | Communication drafting | "Draft an email to X", "Help me respond to Y", "How should I say Z?" |
+| **chronicler** | Meeting/event processing | "Process this meeting", "Extract action items" (from provided notes) |
 
-### Sub-Agents
+### When to Delegate vs Execute Directly
+
+| Task | Action | Why |
+|------|--------|-----|
+| "What do I know about Sarah?" | **Execute directly** | Needs session context for relevance |
+| "Remember that Sarah prefers async" | **Execute directly** | Needs session context for smart merge |
+| "Help me think through this decision" | Delegate to **coach** | Specialized coaching framework |
+| "What needs my attention today?" | Delegate to **sentinel** | Independent calendar/task scan |
+| "Draft an email to Sarah" | Delegate to **diplomat** | Specialized communication drafting |
+| "Process these meeting notes" | Delegate to **chronicler** | Structured extraction from provided text |
+
+### Background Agents (Parallel, Independent)
+
+For parallel research or data gathering, fire background agents:
+
+\`\`\`typescript
+// Example: Morning boot parallel scans
+background_task(agent="general", prompt="[Email scan instructions]...")
+background_task(agent="general", prompt="[Calendar scan instructions]...")
+background_task(agent="general", prompt="[Slack scan instructions]...")
+\`\`\`
 
-For complex tasks requiring deep expertise, delegate to specialized sub-agents (Work-Master, Life-Master, Code-Master). Use task() tool with the 7-Section Format from Execution section.
+These are appropriate because they gather independent data and return facts \u2014 they don't need session context.
 </Core_Capabilities>`;
 var THOTH_EXECUTION = `<Execution>
 ## Execution
@@ -553,6 +642,22 @@ A task is NOT complete without evidence:
 | Test run | Pass (or note pre-existing failures) |
 | Delegation | Agent result received and verified |
 </Execution>`;
+var THOTH_TEMPORAL_AWARENESS = `<Temporal_Awareness>
+## Temporal Awareness (Chronos Protocol)
+
+Operate with deep time awareness, respecting Zeus's biological and professional cycles.
+
+### Executive Calendar (Work)
+- **Monday**: Launch Mode \u2014 Prioritize planning, alignment, P0 definition
+- **Tue-Thu**: Execution Mode \u2014 Protect deep work blocks, minimize admin
+- **Friday**: Closure Mode \u2014 Wrap up, delegation follow-ups, weekly review
+- **Weekend**: Sanctuary \u2014 Block work unless Emergency P0
+
+### Biological Clock (Life)
+- **Morning (08:00-11:00)**: High Cognitive \u2014 Protect from triage hell
+- **Afternoon (14:00-17:00)**: Collaborative \u2014 Good for meetings and emails
+- **Evening (19:00+)**: Restoration \u2014 Block work notifications, prompt journaling
+</Temporal_Awareness>`;
 var THOTH_PERMISSIONS = `<Permission_System>
 ## Permission System
 
@@ -628,9 +733,11 @@ function buildThothPrompt(spec) {
   if (skillRouting) {
     sections.push(skillRouting);
   }
+  sections.push(THOTH_INTENT_GATE);
   sections.push(THOTH_CORE_CAPABILITIES);
   sections.push(THOTH_EXECUTION);
   sections.push(THOTH_PERMISSIONS);
+  sections.push(THOTH_TEMPORAL_AWARENESS);
   sections.push(THOTH_COMMUNICATION);
   sections.push(THOTH_CLOSING);
   return sections.join(`
@@ -3325,9 +3432,216 @@ To proceed, mark this as Emergency/P0 or wait until work hours.`
     getDayModeRecommendation
   };
 }
+// src/hooks/frontmatter-enforcer.ts
+import * as path5 from "path";
+var FRONTMATTER_REGEX = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?/;
+function getToday() {
+  return new Date().toISOString().split("T")[0];
+}
+function parseMarkdown(content) {
+  const match = content.match(FRONTMATTER_REGEX);
+  if (!match) {
+    return { hasFrontmatter: false, frontmatter: {}, body: content };
+  }
+  const frontmatter = {};
+  for (const line of match[1].split(`
+`)) {
+    const colonIdx = line.indexOf(":");
+    if (colonIdx === -1)
+      continue;
+    const key = line.slice(0, colonIdx).trim();
+    let value = line.slice(colonIdx + 1).trim();
+    if (value === "[]") {
+      value = [];
+    } else if (typeof value === "string") {
+      if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
+        value = value.slice(1, -1);
+      }
+    }
+    frontmatter[key] = value;
+  }
+  return {
+    hasFrontmatter: true,
+    frontmatter,
+    body: content.slice(match[0].length)
+  };
+}
+function serializeFrontmatter(data) {
+  const lines = [];
+  for (const [key, value] of Object.entries(data)) {
+    if (Array.isArray(value)) {
+      if (value.length === 0) {
+        lines.push(`${key}: []`);
+      } else {
+        lines.push(`${key}:`);
+        for (const item of value) {
+          lines.push(`  - ${item}`);
+        }
+      }
+    } else if (typeof value === "string" && value.includes(":")) {
+      lines.push(`${key}: "${value}"`);
+    } else {
+      lines.push(`${key}: ${value}`);
+    }
+  }
+  return lines.join(`
+`);
+}
+function reconstructMarkdown(frontmatter, body) {
+  return `---
+${serializeFrontmatter(frontmatter)}
+---
+
+${body.replace(/^\n+/, "")}`;
+}
+function ensureDates(content, created, updated) {
+  const parsed = parseMarkdown(content);
+  if (!parsed.hasFrontmatter) {
+    return reconstructMarkdown({ created, updated }, content);
+  }
+  if (!parsed.frontmatter.created) {
+    parsed.frontmatter.created = created;
+  }
+  parsed.frontmatter.updated = updated;
+  return reconstructMarkdown(parsed.frontmatter, parsed.body);
+}
+function createFrontmatterEnforcerHook(config) {
+  const { knowledgeBasePath, enabled = true } = config;
+  if (!enabled)
+    return null;
+  const kbPath = expandPath(knowledgeBasePath);
+  const pendingEdits = new Map;
+  function isKbMarkdownFile(filePath) {
+    if (!filePath.endsWith(".md"))
+      return false;
+    return path5.resolve(filePath).startsWith(path5.resolve(kbPath));
+  }
+  return {
+    "tool.execute.before": async (input, output) => {
+      const filePath = output.args.filePath;
+      if (!filePath || !isKbMarkdownFile(filePath))
+        return;
+      if (input.tool === "write") {
+        const content = output.args.content;
+        if (!content)
+          return;
+        const today = getToday();
+        const existing = readFileSync4(filePath);
+        const createdDate = existing ? parseMarkdown(existing).frontmatter.created || today : today;
+        output.args.content = ensureDates(content, createdDate, today);
+        log(`Frontmatter: dates enforced for ${path5.basename(filePath)}`);
+      }
+      if (input.tool === "edit" && input.callID) {
+        pendingEdits.set(input.callID, filePath);
+      }
+    },
+    "tool.execute.after": async (input, _output) => {
+      if (input.tool !== "edit")
+        return;
+      const filePath = pendingEdits.get(input.callID);
+      pendingEdits.delete(input.callID);
+      if (!filePath)
+        return;
+      const content = readFileSync4(filePath);
+      if (!content)
+        return;
+      const parsed = parseMarkdown(content);
+      if (!parsed.hasFrontmatter)
+        return;
+      parsed.frontmatter.updated = getToday();
+      writeFileSync2(filePath, reconstructMarkdown(parsed.frontmatter, parsed.body));
+      log(`Frontmatter: updated timestamp for ${path5.basename(filePath)}`);
+    }
+  };
+}
+// src/hooks/read-confirmation.ts
+import * as path6 from "path";
+function createReadConfirmationHook(config) {
+  const { knowledgeBasePath, enabled = true, kbOnly = true } = config;
+  if (!enabled) {
+    return null;
+  }
+  const kbPath = expandPath(knowledgeBasePath);
+  const tracker = {
+    pendingReadPaths: new Map
+  };
+  return {
+    "tool.execute.before": async (input, output) => {
+      if (input.tool !== "read")
+        return;
+      const filePath = output.args?.filePath;
+      if (filePath && input.callID) {
+        tracker.pendingReadPaths.set(input.callID, filePath);
+      }
+    },
+    "tool.execute.after": async (input, output) => {
+      if (input.tool !== "read")
+        return;
+      const filePath = tracker.pendingReadPaths.get(input.callID);
+      tracker.pendingReadPaths.delete(input.callID);
+      if (!filePath)
+        return;
+      if (kbOnly && !filePath.startsWith(kbPath)) {
+        return;
+      }
+      const lineCount = output.output?.split(`
+`).length || 0;
+      const relativePath = filePath.startsWith(kbPath) ? filePath.slice(kbPath.length + 1) : path6.basename(filePath);
+      log(`[Read confirmed: ${relativePath} (${lineCount} lines)]`);
+    }
+  };
+}
+// src/hooks/write-confirmation.ts
+import * as path7 from "path";
+function createWriteConfirmationHook(config) {
+  const { knowledgeBasePath, enabled = true, kbOnly = true } = config;
+  if (!enabled) {
+    return null;
+  }
+  const kbPath = expandPath(knowledgeBasePath);
+  const tracker = {
+    pendingWritePaths: new Map
+  };
+  return {
+    "tool.execute.before": async (input, output) => {
+      if (input.tool !== "write" && input.tool !== "edit")
+        return;
+      const filePath = output.args?.filePath;
+      if (filePath && input.callID) {
+        tracker.pendingWritePaths.set(input.callID, {
+          filePath,
+          action: input.tool
+        });
+      }
+    },
+    "tool.execute.after": async (input, output) => {
+      if (input.tool !== "write" && input.tool !== "edit")
+        return;
+      const pending = tracker.pendingWritePaths.get(input.callID);
+      tracker.pendingWritePaths.delete(input.callID);
+      if (!pending)
+        return;
+      const { filePath, action } = pending;
+      if (kbOnly && !filePath.startsWith(kbPath)) {
+        return;
+      }
+      const relativePath = filePath.startsWith(kbPath) ? filePath.slice(kbPath.length + 1) : path7.basename(filePath);
+      const actionLabel = action === "write" ? "Created/Overwrote" : "Edited";
+      const isNewFile = action === "write";
+      const isMarkdownFile = filePath.endsWith(".md");
+      const isIndexFile = relativePath.includes("_index.md") || relativePath.includes("registry.md");
+      let message = `[${actionLabel}: ${relativePath}]`;
+      if (isNewFile && isMarkdownFile && !isIndexFile) {
+        message += `
+Reminder: Update _index.md if this is a new file. Check bidirectional links.`;
+      }
+      log(message);
+    }
+  };
+}
 // src/hooks/directory-agents-injector/index.ts
 import { existsSync as existsSync6, readFileSync as readFileSync6 } from "fs";
-import { dirname as dirname4, join as join9, resolve } from "path";
+import { dirname as dirname4, join as join9, resolve as resolve2 } from "path";
 
 // src/hooks/directory-agents-injector/storage.ts
 import {
@@ -3397,7 +3711,7 @@ function createDirectoryAgentsInjectorHook(options) {
       return null;
     if (title.startsWith("/"))
       return title;
-    return resolve(directory, title);
+    return resolve2(directory, title);
   }
   function findAgentsMdUp(startDir) {
     const found = [];
@@ -3449,8 +3763,8 @@ function createDirectoryAgentsInjectorHook(options) {
     }
     if (toInject.length === 0)
       return;
-    for (const { path: path5, content } of toInject) {
-      const relativePath = path5.replace(knowledgeBasePath, "").replace(/^\//, "");
+    for (const { path: path8, content } of toInject) {
+      const relativePath = path8.replace(knowledgeBasePath, "").replace(/^\//, "");
       output.output += `
 
 [Directory Context: ${relativePath}]
@@ -3537,8 +3851,8 @@ function findNearestMessageWithFields(messageDir) {
 // src/shared-hooks/utils/logger.ts
 import * as fs2 from "fs";
 import * as os2 from "os";
-import * as path5 from "path";
-var logFile = path5.join(os2.tmpdir(), "thoth-plugin.log");
+import * as path8 from "path";
+var logFile = path8.join(os2.tmpdir(), "thoth-plugin.log");
 function log2(message, data) {
   try {
     const timestamp = new Date().toISOString();
@@ -5338,10 +5652,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path6) {
-  if (!path6)
+function getElementAtPath(obj, path9) {
+  if (!path9)
     return obj;
-  return path6.reduce((acc, key) => acc?.[key], obj);
+  return path9.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -5700,11 +6014,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path6, issues) {
+function prefixIssues(path9, issues) {
   return issues.map((iss) => {
     var _a;
     (_a = iss).path ?? (_a.path = []);
-    iss.path.unshift(path6);
+    iss.path.unshift(path9);
     return iss;
   });
 }
@@ -5872,7 +6186,7 @@ function treeifyError(error, _mapper) {
     return issue2.message;
   };
   const result = { errors: [] };
-  const processError = (error2, path6 = []) => {
+  const processError = (error2, path9 = []) => {
     var _a, _b;
     for (const issue2 of error2.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
@@ -5882,7 +6196,7 @@ function treeifyError(error, _mapper) {
       } else if (issue2.code === "invalid_element") {
         processError({ issues: issue2.issues }, issue2.path);
       } else {
-        const fullpath = [...path6, ...issue2.path];
+        const fullpath = [...path9, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -5914,8 +6228,8 @@ function treeifyError(error, _mapper) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path6 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path6) {
+  const path9 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path9) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -16990,7 +17304,7 @@ Use \`background_output\` tool with task_id="${task.id}" to check progress:
   });
 }
 function delay(ms) {
-  return new Promise((resolve2) => setTimeout(resolve2, ms));
+  return new Promise((resolve3) => setTimeout(resolve3, ms));
 }
 function truncateText(text, maxLength) {
   if (text.length <= maxLength)
@@ -17206,7 +17520,7 @@ Status: ${task.status}`;
 // src/tools/skill/tools.ts
 import { existsSync as existsSync11, readdirSync as readdirSync6, readFileSync as readFileSync9, lstatSync, readlinkSync } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join17, basename as basename2, resolve as resolve2, dirname as dirname5 } from "path";
+import { join as join17, basename as basename5, resolve as resolve3, dirname as dirname5 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var __filename3 = fileURLToPath2(import.meta.url);
 var __dirname3 = dirname5(__filename3);
@@ -17270,7 +17584,7 @@ function resolveSymlink(filePath) {
   try {
     const stats = lstatSync(filePath, { throwIfNoEntry: false });
     if (stats?.isSymbolicLink()) {
-      return resolve2(filePath, "..", readlinkSync(filePath));
+      return resolve3(filePath, "..", readlinkSync(filePath));
     }
     return filePath;
   } catch {
@@ -17356,7 +17670,7 @@ async function parseSkillMd(skillPath) {
     const { data, body } = parseFrontmatter(content);
     const frontmatter = parseSkillFrontmatter(data);
     const metadata = {
-      name: frontmatter.name || basename2(skillPath),
+      name: frontmatter.name || basename5(skillPath),
       description: frontmatter.description,
       license: frontmatter.license,
       allowedTools: frontmatter["allowed-tools"],
@@ -18295,10 +18609,10 @@ function mergeDefs2(...defs) {
 function cloneDef2(schema) {
   return mergeDefs2(schema._zod.def);
 }
-function getElementAtPath2(obj, path6) {
-  if (!path6)
+function getElementAtPath2(obj, path9) {
+  if (!path9)
     return obj;
-  return path6.reduce((acc, key) => acc?.[key], obj);
+  return path9.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject2(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -18679,11 +18993,11 @@ function aborted2(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues2(path6, issues) {
+function prefixIssues2(path9, issues) {
   return issues.map((iss) => {
     var _a;
     (_a = iss).path ?? (_a.path = []);
-    iss.path.unshift(path6);
+    iss.path.unshift(path9);
     return iss;
   });
 }
@@ -18866,7 +19180,7 @@ function formatError2(error45, mapper = (issue3) => issue3.message) {
 }
 function treeifyError2(error45, mapper = (issue3) => issue3.message) {
   const result = { errors: [] };
-  const processError = (error46, path6 = []) => {
+  const processError = (error46, path9 = []) => {
     var _a, _b;
     for (const issue3 of error46.issues) {
       if (issue3.code === "invalid_union" && issue3.errors.length) {
@@ -18876,7 +19190,7 @@ function treeifyError2(error45, mapper = (issue3) => issue3.message) {
       } else if (issue3.code === "invalid_element") {
         processError({ issues: issue3.issues }, issue3.path);
       } else {
-        const fullpath = [...path6, ...issue3.path];
+        const fullpath = [...path9, ...issue3.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue3));
           continue;
@@ -18908,8 +19222,8 @@ function treeifyError2(error45, mapper = (issue3) => issue3.message) {
 }
 function toDotPath2(_path) {
   const segs = [];
-  const path6 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path6) {
+  const path9 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path9) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -30656,13 +30970,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path6 = ref.slice(1).split("/").filter(Boolean);
-  if (path6.length === 0) {
+  const path9 = ref.slice(1).split("/").filter(Boolean);
+  if (path9.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path6[0] === defsKey) {
-    const key = path6[1];
+  if (path9[0] === defsKey) {
+    const key = path9[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -31076,6 +31390,9 @@ var HooksConfigSchema = exports_external2.object({
   "temporal-awareness": exports_external2.boolean().optional(),
   "knowledge-persistence": exports_external2.boolean().optional(),
   "directory-agents-injector": exports_external2.boolean().optional(),
+  "frontmatter-enforcer": exports_external2.boolean().optional(),
+  "read-confirmation": exports_external2.boolean().optional(),
+  "write-confirmation": exports_external2.boolean().optional(),
   "todo-continuation": exports_external2.boolean().optional(),
   "session-recovery": exports_external2.boolean().optional(),
   "context-window-monitor": exports_external2.boolean().optional(),
@@ -31113,7 +31430,7 @@ var ThothPluginConfigSchema = exports_external2.object({
 }).strict();
 // src/index.ts
 import * as fs3 from "fs";
-import * as path6 from "path";
+import * as path9 from "path";
 var sessionSpecializations = new Map;
 function loadConfigFromPath(configPath) {
   try {
@@ -31145,8 +31462,8 @@ function mergeConfigs(base, override) {
   };
 }
 function loadPluginConfig(directory) {
-  const userConfigPath = path6.join(getUserConfigDir(), "opencode", "thoth-plugin.json");
-  const projectConfigPath = path6.join(directory, ".opencode", "thoth-plugin.json");
+  const userConfigPath = path9.join(getUserConfigDir(), "opencode", "thoth-plugin.json");
+  const projectConfigPath = path9.join(directory, ".opencode", "thoth-plugin.json");
   let config3 = loadConfigFromPath(userConfigPath) ?? {};
   const projectConfig = loadConfigFromPath(projectConfigPath);
   if (projectConfig) {
@@ -31160,15 +31477,15 @@ function resolveKnowledgeBasePath(config3, directory) {
     return expandPath(config3.knowledge_base);
   }
   const commonLocations = [
-    path6.join(process.env.HOME || "", "Repos", "thoth"),
-    path6.join(process.env.HOME || "", "repos", "thoth"),
-    path6.join(process.env.HOME || "", "Projects", "thoth"),
-    path6.join(process.env.HOME || "", "projects", "thoth"),
-    path6.join(process.env.HOME || "", "thoth"),
-    path6.join(directory, "thoth")
+    path9.join(process.env.HOME || "", "Repos", "thoth"),
+    path9.join(process.env.HOME || "", "repos", "thoth"),
+    path9.join(process.env.HOME || "", "Projects", "thoth"),
+    path9.join(process.env.HOME || "", "projects", "thoth"),
+    path9.join(process.env.HOME || "", "thoth"),
+    path9.join(directory, "thoth")
   ];
   for (const location of commonLocations) {
-    const kernelPath = path6.join(location, "kernel");
+    const kernelPath = path9.join(location, "kernel");
     if (fs3.existsSync(kernelPath)) {
       log(`Found knowledge base at: ${location}`);
       return location;
@@ -31189,6 +31506,9 @@ var ThothPlugin = async (ctx) => {
   const trustLevelTracker = hooksConfig["trust-level-tracker"] !== false ? createTrustLevelTrackerHook({ knowledgeBasePath }) : null;
   const contextAperture = hooksConfig["context-aperture"] !== false ? createContextApertureHook({ knowledgeBasePath }) : null;
   const temporalAwareness = hooksConfig["temporal-awareness"] !== false ? createTemporalAwarenessHook() : null;
+  const frontmatterEnforcer = hooksConfig["frontmatter-enforcer"] !== false ? createFrontmatterEnforcerHook({ knowledgeBasePath }) : null;
+  const readConfirmation = hooksConfig["read-confirmation"] !== false ? createReadConfirmationHook({ knowledgeBasePath }) : null;
+  const writeConfirmation = hooksConfig["write-confirmation"] !== false ? createWriteConfirmationHook({ knowledgeBasePath }) : null;
   const todoContinuationEnforcer = hooksConfig["todo-continuation"] !== false ? createTodoContinuationEnforcer(ctx) : null;
   const sessionRecoveryHook = hooksConfig["session-recovery"] !== false ? createSessionRecoveryHook(ctx, { experimental: { auto_resume: true } }) : null;
   const contextWindowMonitor = hooksConfig["context-window-monitor"] !== false ? createContextWindowMonitorHook(ctx) : null;
@@ -31293,10 +31613,16 @@ var ThothPlugin = async (ctx) => {
       await temporalAwareness?.["tool.execute.before"]?.(input, output);
       await contextAperture?.["tool.execute.before"]?.(input, output);
       await trustLevelTracker?.["tool.execute.before"]?.(input, output);
+      await frontmatterEnforcer?.["tool.execute.before"]?.(input, output);
+      await readConfirmation?.["tool.execute.before"]?.(input, output);
+      await writeConfirmation?.["tool.execute.before"]?.(input, output);
     },
     "tool.execute.after": async (input, output) => {
       await trustLevelTracker?.["tool.execute.after"]?.(input, output);
       await contextAperture?.["tool.execute.after"]?.(input, output);
+      await frontmatterEnforcer?.["tool.execute.after"]?.(input, output);
+      await readConfirmation?.["tool.execute.after"]?.(input, output);
+      await writeConfirmation?.["tool.execute.after"]?.(input, output);
       await directoryAgentsInjector?.["tool.execute.after"]?.(input, output);
       await contextWindowMonitor?.["tool.execute.after"]?.(input, output);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thoth-plugin",
-  "version": "1.1.1",
+  "version": "1.2.0",
   "description": "Thoth - Root-level life orchestrator for OpenCode. Unified AI chief of staff combining Sisyphus execution quality, Personal-OS rhythms, and Thoth relationship model.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",