thoth-plugin 1.1.2 → 1.2.1

package/dist/config/schema.d.ts

@@ -13,6 +13,8 @@ declare const HooksConfigSchema: z.ZodObject<{
     "knowledge-persistence": z.ZodOptional<z.ZodBoolean>;
     "directory-agents-injector": z.ZodOptional<z.ZodBoolean>;
     "frontmatter-enforcer": z.ZodOptional<z.ZodBoolean>;
+    "read-confirmation": z.ZodOptional<z.ZodBoolean>;
+    "write-confirmation": z.ZodOptional<z.ZodBoolean>;
     "todo-continuation": z.ZodOptional<z.ZodBoolean>;
     "session-recovery": z.ZodOptional<z.ZodBoolean>;
     "context-window-monitor": z.ZodOptional<z.ZodBoolean>;
@@ -67,6 +69,8 @@ export declare const ThothPluginConfigSchema: z.ZodObject<{
         "knowledge-persistence": z.ZodOptional<z.ZodBoolean>;
         "directory-agents-injector": z.ZodOptional<z.ZodBoolean>;
         "frontmatter-enforcer": z.ZodOptional<z.ZodBoolean>;
+        "read-confirmation": z.ZodOptional<z.ZodBoolean>;
+        "write-confirmation": z.ZodOptional<z.ZodBoolean>;
         "todo-continuation": z.ZodOptional<z.ZodBoolean>;
         "session-recovery": z.ZodOptional<z.ZodBoolean>;
         "context-window-monitor": z.ZodOptional<z.ZodBoolean>;

package/dist/defaults/skill/gardener/SKILL.md

@@ -1,6 +1,12 @@
 ---
 name: gardener
 description: Use when knowledge base health needs checking, broken links need fixing, orphan files need registering, or cross-references between related files are missing
+triggers:
+  - "Check knowledge base"
+  - "Run gardener"
+  - "KB health"
+  - "Fix broken links"
+  - "Check for orphan files"
 ---
 
 # Gardener Skill
@@ -58,12 +64,92 @@ The canonical frontmatter schema is defined in `kernel/config/frontmatter-schema
 
 ---
 
+## Severity Levels
+
+All issues are classified by severity to prioritize repair work:
+
+| Severity | Symbol | Meaning | Action |
+|----------|--------|---------|--------|
+| **CRITICAL** | `[C]` | Data integrity at risk, navigation broken | Fix immediately |
+| **ERROR** | `[E]` | Functionality impaired, links broken | Fix soon |
+| **WARNING** | `[W]` | Best practices violated, maintenance debt | Fix when convenient |
+| **INFO** | `[I]` | Suggestions for improvement | Optional |
+
+### Severity by Issue Type
+
+| Issue | Default Severity | Escalation Condition |
+|-------|------------------|----------------------|
+| Missing required frontmatter field | ERROR | CRITICAL if `type` missing |
+| Invalid frontmatter value | WARNING | ERROR if `status` or `priority` |
+| Broken internal link | ERROR | CRITICAL if in registry/index |
+| Missing bidirectional link | WARNING | — |
+| Orphan file (not indexed) | WARNING | ERROR if in people/ or projects/ |
+| Registry ghost (indexed but missing) | CRITICAL | — |
+| Stale _index.md (files not listed) | WARNING | ERROR if >5 files missing |
+| Frontmatter schema violation | ERROR | — |
+
+---
+
 ## Mode 1: Health Check
 
-### Step 1: Run Scan
+### Step 1: Scan All Categories
+
+Perform these checks systematically:
+
+#### 1.1 Frontmatter Validation
+
+For each `.md` file in the knowledge base:
 
-```bash
-npx tsx scripts/gardener-scan.ts --verbose
+```
+CHECK: Has frontmatter block (--- ... ---)
+CHECK: Has required fields: type, hemisphere, created, updated
+CHECK: type value is valid (person, project, task, note, reference, etc.)
+CHECK: hemisphere value matches path (work/, life/, coding/, kernel/)
+CHECK: Type-specific required fields present:
+  - person: relationship
+  - project: status
+  - task: status, priority
+CHECK: Values are valid per schema:
+  - status (project): planning|active|on-hold|completed|cancelled
+  - status (task): pending|in-progress|done|cancelled|blocked
+  - priority: P0|P1|P2|P3
+  - health: green|yellow|red
+  - relationship: manager|peer|report|stakeholder|friend|family
+```
+
+#### 1.2 Link Integrity
+
+For each `[[wikilink]]` and `[markdown](link)`:
+
+```
+CHECK: Target file exists
+CHECK: Target path is correct (not moved/renamed)
+CHECK: Bidirectional: if A links to B, does B link to A?
+```
+
+#### 1.3 Index Coverage
+
+For each `_index.md` file:
+
+```
+CHECK: All files in same directory are listed
+CHECK: All listed files actually exist (no ghosts)
+CHECK: File summaries are present and accurate
+```
+
+For `registry.md`:
+
+```
+CHECK: All hemispheres represented
+CHECK: Key entity counts are accurate
+CHECK: Last updated date is recent
+```
+
+#### 1.4 Orphan Detection
+
+```
+CHECK: Every .md file (except _index.md, registry.md) is listed in its _index.md
+CHECK: Every entity file has at least one incoming link
 ```
 
 ### Step 2: Synthesize Report
@@ -73,21 +159,34 @@ npx tsx scripts/gardener-scan.ts --verbose
 
 **Scanned**: {timestamp}
 **Total Files**: {count}
-**Overall Health**: {healthy|needs-attention|critical}
-
-### Summary
-| Category | Count | Severity |
-|----------|-------|----------|
-| Frontmatter Issues | X | warning |
-| Broken Links | X | error |
-| Orphan Files | X | warning |
-| Registry Ghosts | X | error |
-
-### Critical Issues (Top 10)
-{List with file path and issue}
+**Overall Health**: {HEALTHY|NEEDS-ATTENTION|CRITICAL}
+
+### Summary by Severity
+| Severity | Count | Categories |
+|----------|-------|------------|
+| CRITICAL | X | {list} |
+| ERROR | X | {list} |
+| WARNING | X | {list} |
+| INFO | X | {list} |
+
+### Issue Breakdown
+| Category | [C] | [E] | [W] | [I] |
+|----------|-----|-----|-----|-----|
+| Frontmatter Issues | X | X | X | X |
+| Broken Links | X | X | X | X |
+| Missing Bidirectional | — | — | X | X |
+| Orphan Files | — | X | X | — |
+| Index Staleness | — | X | X | — |
+| Registry Ghosts | X | — | — | — |
+
+### Critical Issues (Must Fix)
+{List all CRITICAL items with file path and specific issue}
+
+### Errors (Should Fix)
+{List top 10 ERROR items}
 
 ### Recommendations
-{3-5 prioritized actions}
+{3-5 prioritized actions based on findings}
 ```
 
 ---
@@ -228,6 +327,87 @@ For each approved link:
 
 ---
 
+## Bidirectional Link Verification
+
+A healthy knowledge base has bidirectional links: if A references B, B should reference A.
+
+### Detection Algorithm
+
+```
+For each file A:
+  For each outgoing link to file B:
+    Check if B has any link back to A
+    If not: flag as "Missing bidirectional: B should link to A"
+```
+
+### Severity Classification
+
+| Situation | Severity |
+|-----------|----------|
+| Person A mentions Person B, B doesn't mention A | WARNING |
+| Project links to stakeholder, stakeholder doesn't link to project | WARNING |
+| Registry/index links to file, file doesn't link back | INFO (one-way is OK) |
+| Two files in `related:` frontmatter but no body links | WARNING |
+
+### Repair Suggestion Format
+
+```markdown
+### Missing Bidirectional Links
+
+| Source | Target | Evidence | Suggested Fix |
+|--------|--------|----------|---------------|
+| work/people/alice.md | work/people/bob.md | Alice mentions Bob (line 23) | Add `[[alice]]` to bob.md Related section |
+```
+
+---
+
+## Index Staleness Detection
+
+Every directory with content files should have an `_index.md` that lists all files.
+
+### Detection Algorithm
+
+```
+For each directory with _index.md:
+  List all .md files in directory (excluding _index.md)
+  Parse _index.md for file references
+  
+  STALE if:
+    - File exists but not in _index.md (orphan)
+    - File in _index.md but doesn't exist (ghost)
+    - File count mismatch > 0
+```
+
+### Severity Classification
+
+| Situation | Severity |
+|-----------|----------|
+| 1-2 files missing from _index.md | WARNING |
+| 3-5 files missing from _index.md | WARNING |
+| >5 files missing from _index.md | ERROR |
+| Ghost entry (listed but doesn't exist) | ERROR |
+| _index.md missing entirely in content directory | ERROR |
+
+### Report Format
+
+```markdown
+### Index Staleness Report
+
+| Directory | Files | Indexed | Missing | Ghosts | Severity |
+|-----------|-------|---------|---------|--------|----------|
+| work/people/ | 15 | 12 | 3 | 0 | [W] |
+| work/projects/ | 8 | 8 | 0 | 1 | [E] |
+
+#### Missing from Index
+- work/people/new-person.md (created 2026-01-09)
+- work/people/another.md (created 2026-01-08)
+
+#### Ghost Entries (file doesn't exist)
+- work/projects/deleted-project.md (remove from _index.md)
+```
+
+---
+
 ## Red Flags - STOP
 
 - About to add 50+ links without review
@@ -280,4 +460,50 @@ Before completing cross-reference mode:
 
 ---
 
-*Gardener v3.0 | Part of Thoth Knowledge Management System*
+## Frontmatter Validation Details
+
+### Required Fields by Type
+
+| File Type | Required Fields | Optional Fields |
+|-----------|-----------------|-----------------|
+| **All files** | `type`, `hemisphere`, `created`, `updated` | `tags`, `summary`, `related` |
+| **person** | + `relationship` | `email`, `slack`, `role`, `company` |
+| **project** | + `status` | `priority`, `health`, `due`, `stakeholders` |
+| **task** | + `status`, `priority` | `due`, `project`, `assignee` |
+
+### Validation Error Examples
+
+```markdown
+### Frontmatter Validation Errors
+
+| File | Issue | Severity | Fix |
+|------|-------|----------|-----|
+| work/people/alice.md | Missing `relationship` field | [E] | Add `relationship: peer` |
+| work/projects/foo.md | Invalid status: "wip" | [E] | Change to `status: active` |
+| life/notes/random.md | Missing `type` field | [C] | Add `type: note` |
+| work/people/bob.md | hemisphere: "work" but path is life/ | [W] | Update to `hemisphere: life` |
+```
+
+### Auto-Fixable Issues
+
+The following can be auto-fixed with `/gardener fix`:
+
+| Issue | Auto-Fix Action |
+|-------|-----------------|
+| Missing `created` | Set to file creation date |
+| Missing `updated` | Set to file modification date |
+| Missing `hemisphere` | Infer from file path |
+| Incorrect `hemisphere` | Correct to match path |
+
+### Manual-Fix Required
+
+| Issue | Why Manual |
+|-------|------------|
+| Missing `type` | Cannot infer content type |
+| Missing `relationship` | Cannot guess relationship |
+| Missing `status` | Cannot guess project/task state |
+| Invalid enum value | Need user to choose correct value |
+
+---
+
+*Gardener v4.0 | Part of Thoth Knowledge Management System*

package/dist/defaults/skill/onboarding/SKILL.md

@@ -0,0 +1,207 @@
+---
+name: onboarding
+description: Structured onboarding for new domains using breadth-before-depth discovery
+triggers:
+  - "Let's onboard"
+  - "New domain"
+  - "Help me set up"
+  - "Onboard my"
+  - "Learn about my"
+---
+
+# Onboarding Skill
+
+You are entering **Onboarding Mode**. Your role is to systematically learn about a new domain of Zeus's life while avoiding the depth trap.
+
+---
+
+## Philosophy
+
+1. **Breadth before depth** — Map the landscape before diving deep
+2. **Step back pattern** — After 5-10 minutes on any topic, ask "What else?"
+3. **Prevent premature action** — Focus on understanding, not doing
+4. **Structured but conversational** — Have a framework, follow Zeus's energy
+5. **Persist as you go** — Create knowledge files for important entities discovered
+
+---
+
+## Protocol
+
+### Phase 1: Orient (Start Here)
+
+Ask these questions before anything else:
+
+1. **Domain**: What domain are we onboarding? (work, life, specific project, specific area)
+2. **Goal**: What's the goal of this onboarding? (understand context, set up tracking, prepare for something)
+3. **Sources**: What systems/data sources are available? (email, calendar, documents, nothing yet)
+
+**Output**: Clear understanding of scope and available data.
+
+---
+
+### Phase 2: Scan (If Data Sources Available)
+
+If Zeus has connected email, calendar, or documents:
+
+1. Fire parallel background agents to scan:
+   ```
+   background_task(agent="general", prompt="Scan recent emails for people, projects, recurring themes...")
+   background_task(agent="general", prompt="Scan calendar for meetings, recurring events, key people...")
+   ```
+
+2. Synthesize findings:
+   - Key people mentioned
+   - Active projects/areas
+   - Recurring themes
+   - Open items/commitments
+
+**Output**: Data-driven overview of the domain landscape.
+
+---
+
+### Phase 3: Discover (Interview Mode)
+
+Ask clarifying questions about what you found (or start here if no data sources):
+
+| Area | Questions |
+|------|-----------|
+| **People** | Who are the key people? (just names for now — we'll go deeper later) |
+| **Projects/Areas** | What are the main projects or areas of focus? |
+| **Challenges** | What's the biggest challenge or pain point right now? |
+| **Success** | What does success look like? What are you optimizing for? |
+| **Gaps** | What's not working? What falls through the cracks? |
+
+**Key rule**: Collect NAMES and TOPICS first. Don't drill into any one area yet.
+
+**Output**: List of people, projects, challenges, and goals.
+
+---
+
+### Phase 4: Step Back (CRITICAL)
+
+After covering one area for 5-10 minutes, ALWAYS ask one of these:
+
+- "We've covered [X]. Before going deeper, are there other areas we should map out?"
+- "What else is on your mind that we haven't touched?"
+- "Is there anything blocking you that we should address first?"
+- "Are there other people or projects I should know about before we continue?"
+
+**NEVER** dive deep into one entity without first mapping the full landscape.
+
+**Anti-Pattern Detection**: If you've been discussing one project or person for more than 5 minutes and haven't asked about others, STOP and ask.
+
+---
+
+### Phase 5: Deepen (Only After Breadth)
+
+Once the landscape is mapped, ask Zeus which area to explore first:
+
+- "We've identified [projects A, B, C] and [people X, Y, Z]. Which would you like to detail first?"
+- "What's most urgent or important to capture deeply?"
+
+For each entity Zeus prioritizes:
+
+1. Create a knowledge file using appropriate template
+2. Capture key details, relationships, status
+3. Add to relevant `_index.md`
+4. Create bidirectional links to related entities
+
+---
+
+### Phase 6: Close
+
+Before ending the onboarding session:
+
+1. **Summarize** what was learned:
+   - Domain scope
+   - Key entities created
+   - Relationships mapped
+
+2. **Identify gaps** to fill later:
+   - "We didn't get to [X, Y, Z]. Should we schedule follow-up?"
+   - "I'm missing context on [A, B]. Can we cover that next time?"
+
+3. **Set expectations**:
+   - "I'll continue learning as we interact. Correct me when I'm wrong."
+   - "Mention new people or projects as they come up — I'll capture them."
+
+---
+
+## Anti-Pattern: The Depth Trap
+
+### WRONG
+
+```
+Zeus: "Let's onboard my work"
+Thoth: "Tell me about Project Alpha"
+Zeus: [explains Project Alpha for 20 minutes]
+Thoth: [asks more Project Alpha questions]
+[30 minutes later, deep in Project Alpha details]
+[Never asked about other projects, colleagues, goals]
+```
+
+### RIGHT
+
+```
+Zeus: "Let's onboard my work"
+Thoth: "Before we dive deep, let me understand the landscape. 
+        Who are the key people you work with?"
+Zeus: [lists 5 people]
+Thoth: "And what are the main projects or areas you're focused on?"
+Zeus: [lists 3 projects]
+Thoth: "Got it. What's your biggest challenge right now?"
+Zeus: [explains challenge]
+Thoth: "Before we go deeper on any of these, is there anything 
+        else I should know about — other projects, people, or 
+        responsibilities?"
+Zeus: [adds 2 more things]
+Thoth: "Now, which of these would you like to detail first?"
+```
+
+---
+
+## Knowledge Creation During Onboarding
+
+As you discover entities, create files:
+
+| Entity Type | Template | Location |
+|-------------|----------|----------|
+| Person (work) | `kernel/templates/person.md` | `work/people/` |
+| Person (life) | `kernel/templates/person.md` | `life/people/` |
+| Project | `kernel/templates/project.md` | `{hemisphere}/projects/` |
+| Area/Topic | Create overview file | Appropriate folder |
+
+**Rules**:
+- Check if entity already exists before creating (grep for name)
+- Add to `_index.md` immediately after creation
+- Create bidirectional links between related entities
+- Use frontmatter with appropriate type, hemisphere, tags
+
+---
+
+## Verification Checklist
+
+Before ending onboarding session:
+
+- [ ] Asked about multiple areas (people, projects, challenges, goals)
+- [ ] Used step-back pattern at least once
+- [ ] Didn't spend more than 10 minutes on any single entity before mapping others
+- [ ] Created knowledge files for key entities
+- [ ] Updated relevant `_index.md` files
+- [ ] Identified gaps for follow-up
+- [ ] Zeus knows what to expect going forward
+
+---
+
+## Quick Reference
+
+| Trigger | Action |
+|---------|--------|
+| "Let's onboard my work" | Start Phase 1 with work domain |
+| "Help me set up life tracking" | Start Phase 1 with life domain |
+| "New project: X" | Orient on project X specifically |
+| "Learn about my team" | Focus on people discovery |
+
+---
+
+*Onboarding Skill v1.0 | Part of Thoth Knowledge Management System*

package/dist/hooks/index.d.ts

@@ -3,3 +3,5 @@ export { createTrustLevelTrackerHook, type TrustLevelTrackerHook, type TrustLeve
 export { createContextApertureHook, type ContextApertureHook, type ContextApertureConfig, } from "./context-aperture";
 export { createTemporalAwarenessHook, type TemporalAwarenessHook, type TemporalAwarenessConfig, } from "./temporal-awareness";
 export { createFrontmatterEnforcerHook, type FrontmatterEnforcerHook, type FrontmatterEnforcerConfig, } from "./frontmatter-enforcer";
+export { createReadConfirmationHook, type ReadConfirmationHook, type ReadConfirmationConfig, } from "./read-confirmation";
+export { createWriteConfirmationHook, type WriteConfirmationHook, type WriteConfirmationConfig, } from "./write-confirmation";

package/dist/hooks/read-confirmation.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Read Confirmation Hook
+ *
+ * After file reads, injects a confirmation message into the conversation.
+ * This creates an audit trail and prevents hallucination about what was read.
+ *
+ * Value:
+ * - Prevents "I read file X" when it wasn't actually read
+ * - Creates audit trail of file access
+ * - Helps with context management
+ */
+export interface ReadConfirmationConfig {
+    knowledgeBasePath: string;
+    enabled?: boolean;
+    /** Only confirm reads within the knowledge base (default: true) */
+    kbOnly?: boolean;
+}
+export declare function createReadConfirmationHook(config: ReadConfirmationConfig): {
+    "tool.execute.before": (input: {
+        tool: string;
+        callID: string;
+    }, output: {
+        args: Record<string, unknown>;
+    }) => Promise<void>;
+    "tool.execute.after": (input: {
+        tool: string;
+        callID: string;
+    }, output: {
+        title: string;
+        output: string;
+        metadata: unknown;
+    }) => Promise<void>;
+} | null;
+export type ReadConfirmationHook = ReturnType<typeof createReadConfirmationHook>;

package/dist/hooks/write-confirmation.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Write Confirmation Hook
+ *
+ * After file writes/edits, injects a confirmation message with reminders.
+ * This creates an audit trail and reinforces the Smart Merge protocol.
+ *
+ * Value:
+ * - Reminds about _index.md updates for new files
+ * - Creates audit trail of file modifications
+ * - Reinforces Smart Merge protocol
+ */
+export interface WriteConfirmationConfig {
+    knowledgeBasePath: string;
+    enabled?: boolean;
+    /** Only confirm writes within the knowledge base (default: true) */
+    kbOnly?: boolean;
+}
+export declare function createWriteConfirmationHook(config: WriteConfirmationConfig): {
+    "tool.execute.before": (input: {
+        tool: string;
+        callID: string;
+    }, output: {
+        args: Record<string, unknown>;
+    }) => Promise<void>;
+    "tool.execute.after": (input: {
+        tool: string;
+        callID: string;
+    }, output: {
+        title: string;
+        output: string;
+        metadata: unknown;
+    }) => Promise<void>;
+} | null;
+export type WriteConfirmationHook = ReturnType<typeof createWriteConfirmationHook>;

package/dist/index.js

@@ -3554,6 +3554,91 @@ function createFrontmatterEnforcerHook(config) {
     }
   };
 }
+// src/hooks/read-confirmation.ts
+import * as path6 from "path";
+function createReadConfirmationHook(config) {
+  const { knowledgeBasePath, enabled = true, kbOnly = true } = config;
+  if (!enabled) {
+    return null;
+  }
+  const kbPath = expandPath(knowledgeBasePath);
+  const tracker = {
+    pendingReadPaths: new Map
+  };
+  return {
+    "tool.execute.before": async (input, output) => {
+      if (input.tool !== "read")
+        return;
+      const filePath = output.args?.filePath;
+      if (filePath && input.callID) {
+        tracker.pendingReadPaths.set(input.callID, filePath);
+      }
+    },
+    "tool.execute.after": async (input, output) => {
+      if (input.tool !== "read")
+        return;
+      const filePath = tracker.pendingReadPaths.get(input.callID);
+      tracker.pendingReadPaths.delete(input.callID);
+      if (!filePath)
+        return;
+      if (kbOnly && !filePath.startsWith(kbPath)) {
+        return;
+      }
+      const lineCount = output.output?.split(`
+`).length || 0;
+      const relativePath = filePath.startsWith(kbPath) ? filePath.slice(kbPath.length + 1) : path6.basename(filePath);
+      log(`[Read confirmed: ${relativePath} (${lineCount} lines)]`);
+    }
+  };
+}
+// src/hooks/write-confirmation.ts
+import * as path7 from "path";
+function createWriteConfirmationHook(config) {
+  const { knowledgeBasePath, enabled = true, kbOnly = true } = config;
+  if (!enabled) {
+    return null;
+  }
+  const kbPath = expandPath(knowledgeBasePath);
+  const tracker = {
+    pendingWritePaths: new Map
+  };
+  return {
+    "tool.execute.before": async (input, output) => {
+      if (input.tool !== "write" && input.tool !== "edit")
+        return;
+      const filePath = output.args?.filePath;
+      if (filePath && input.callID) {
+        tracker.pendingWritePaths.set(input.callID, {
+          filePath,
+          action: input.tool
+        });
+      }
+    },
+    "tool.execute.after": async (input, output) => {
+      if (input.tool !== "write" && input.tool !== "edit")
+        return;
+      const pending = tracker.pendingWritePaths.get(input.callID);
+      tracker.pendingWritePaths.delete(input.callID);
+      if (!pending)
+        return;
+      const { filePath, action } = pending;
+      if (kbOnly && !filePath.startsWith(kbPath)) {
+        return;
+      }
+      const relativePath = filePath.startsWith(kbPath) ? filePath.slice(kbPath.length + 1) : path7.basename(filePath);
+      const actionLabel = action === "write" ? "Created/Overwrote" : "Edited";
+      const isNewFile = action === "write";
+      const isMarkdownFile = filePath.endsWith(".md");
+      const isIndexFile = relativePath.includes("_index.md") || relativePath.includes("registry.md");
+      let message = `[${actionLabel}: ${relativePath}]`;
+      if (isNewFile && isMarkdownFile && !isIndexFile) {
+        message += `
+Reminder: Update _index.md if this is a new file. Check bidirectional links.`;
+      }
+      log(message);
+    }
+  };
+}
 // src/hooks/directory-agents-injector/index.ts
 import { existsSync as existsSync6, readFileSync as readFileSync6 } from "fs";
 import { dirname as dirname4, join as join9, resolve as resolve2 } from "path";
@@ -3678,8 +3763,8 @@ function createDirectoryAgentsInjectorHook(options) {
     }
     if (toInject.length === 0)
       return;
-    for (const { path: path6, content } of toInject) {
-      const relativePath = path6.replace(knowledgeBasePath, "").replace(/^\//, "");
+    for (const { path: path8, content } of toInject) {
+      const relativePath = path8.replace(knowledgeBasePath, "").replace(/^\//, "");
       output.output += `
 
 [Directory Context: ${relativePath}]
@@ -3766,8 +3851,8 @@ function findNearestMessageWithFields(messageDir) {
 // src/shared-hooks/utils/logger.ts
 import * as fs2 from "fs";
 import * as os2 from "os";
-import * as path6 from "path";
-var logFile = path6.join(os2.tmpdir(), "thoth-plugin.log");
+import * as path8 from "path";
+var logFile = path8.join(os2.tmpdir(), "thoth-plugin.log");
 function log2(message, data) {
   try {
     const timestamp = new Date().toISOString();
@@ -5567,10 +5652,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path7) {
-  if (!path7)
+function getElementAtPath(obj, path9) {
+  if (!path9)
     return obj;
-  return path7.reduce((acc, key) => acc?.[key], obj);
+  return path9.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -5929,11 +6014,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path7, issues) {
+function prefixIssues(path9, issues) {
   return issues.map((iss) => {
     var _a;
     (_a = iss).path ?? (_a.path = []);
-    iss.path.unshift(path7);
+    iss.path.unshift(path9);
     return iss;
   });
 }
@@ -6101,7 +6186,7 @@ function treeifyError(error, _mapper) {
     return issue2.message;
   };
   const result = { errors: [] };
-  const processError = (error2, path7 = []) => {
+  const processError = (error2, path9 = []) => {
     var _a, _b;
     for (const issue2 of error2.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
@@ -6111,7 +6196,7 @@ function treeifyError(error, _mapper) {
       } else if (issue2.code === "invalid_element") {
         processError({ issues: issue2.issues }, issue2.path);
       } else {
-        const fullpath = [...path7, ...issue2.path];
+        const fullpath = [...path9, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -6143,8 +6228,8 @@ function treeifyError(error, _mapper) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path7 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path7) {
+  const path9 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path9) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -17435,7 +17520,7 @@ Status: ${task.status}`;
 // src/tools/skill/tools.ts
 import { existsSync as existsSync11, readdirSync as readdirSync6, readFileSync as readFileSync9, lstatSync, readlinkSync } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join17, basename as basename3, resolve as resolve3, dirname as dirname5 } from "path";
+import { join as join17, basename as basename5, resolve as resolve3, dirname as dirname5 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var __filename3 = fileURLToPath2(import.meta.url);
 var __dirname3 = dirname5(__filename3);
@@ -17585,7 +17670,7 @@ async function parseSkillMd(skillPath) {
     const { data, body } = parseFrontmatter(content);
     const frontmatter = parseSkillFrontmatter(data);
     const metadata = {
-      name: frontmatter.name || basename3(skillPath),
+      name: frontmatter.name || basename5(skillPath),
       description: frontmatter.description,
       license: frontmatter.license,
       allowedTools: frontmatter["allowed-tools"],
@@ -18524,10 +18609,10 @@ function mergeDefs2(...defs) {
 function cloneDef2(schema) {
   return mergeDefs2(schema._zod.def);
 }
-function getElementAtPath2(obj, path7) {
-  if (!path7)
+function getElementAtPath2(obj, path9) {
+  if (!path9)
     return obj;
-  return path7.reduce((acc, key) => acc?.[key], obj);
+  return path9.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject2(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -18908,11 +18993,11 @@ function aborted2(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues2(path7, issues) {
+function prefixIssues2(path9, issues) {
   return issues.map((iss) => {
     var _a;
     (_a = iss).path ?? (_a.path = []);
-    iss.path.unshift(path7);
+    iss.path.unshift(path9);
     return iss;
   });
 }
@@ -19095,7 +19180,7 @@ function formatError2(error45, mapper = (issue3) => issue3.message) {
 }
 function treeifyError2(error45, mapper = (issue3) => issue3.message) {
   const result = { errors: [] };
-  const processError = (error46, path7 = []) => {
+  const processError = (error46, path9 = []) => {
     var _a, _b;
     for (const issue3 of error46.issues) {
       if (issue3.code === "invalid_union" && issue3.errors.length) {
@@ -19105,7 +19190,7 @@ function treeifyError2(error45, mapper = (issue3) => issue3.message) {
       } else if (issue3.code === "invalid_element") {
         processError({ issues: issue3.issues }, issue3.path);
       } else {
-        const fullpath = [...path7, ...issue3.path];
+        const fullpath = [...path9, ...issue3.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue3));
           continue;
@@ -19137,8 +19222,8 @@ function treeifyError2(error45, mapper = (issue3) => issue3.message) {
 }
 function toDotPath2(_path) {
   const segs = [];
-  const path7 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path7) {
+  const path9 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path9) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -30885,13 +30970,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path7 = ref.slice(1).split("/").filter(Boolean);
-  if (path7.length === 0) {
+  const path9 = ref.slice(1).split("/").filter(Boolean);
+  if (path9.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path7[0] === defsKey) {
-    const key = path7[1];
+  if (path9[0] === defsKey) {
+    const key = path9[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -31306,6 +31391,8 @@ var HooksConfigSchema = exports_external2.object({
   "knowledge-persistence": exports_external2.boolean().optional(),
   "directory-agents-injector": exports_external2.boolean().optional(),
   "frontmatter-enforcer": exports_external2.boolean().optional(),
+  "read-confirmation": exports_external2.boolean().optional(),
+  "write-confirmation": exports_external2.boolean().optional(),
   "todo-continuation": exports_external2.boolean().optional(),
   "session-recovery": exports_external2.boolean().optional(),
   "context-window-monitor": exports_external2.boolean().optional(),
@@ -31343,7 +31430,7 @@ var ThothPluginConfigSchema = exports_external2.object({
 }).strict();
 // src/index.ts
 import * as fs3 from "fs";
-import * as path7 from "path";
+import * as path9 from "path";
 var sessionSpecializations = new Map;
 function loadConfigFromPath(configPath) {
   try {
@@ -31375,8 +31462,8 @@ function mergeConfigs(base, override) {
   };
 }
 function loadPluginConfig(directory) {
-  const userConfigPath = path7.join(getUserConfigDir(), "opencode", "thoth-plugin.json");
-  const projectConfigPath = path7.join(directory, ".opencode", "thoth-plugin.json");
+  const userConfigPath = path9.join(getUserConfigDir(), "opencode", "thoth-plugin.json");
+  const projectConfigPath = path9.join(directory, ".opencode", "thoth-plugin.json");
   let config3 = loadConfigFromPath(userConfigPath) ?? {};
   const projectConfig = loadConfigFromPath(projectConfigPath);
   if (projectConfig) {
@@ -31390,15 +31477,15 @@ function resolveKnowledgeBasePath(config3, directory) {
     return expandPath(config3.knowledge_base);
   }
   const commonLocations = [
-    path7.join(process.env.HOME || "", "Repos", "thoth"),
-    path7.join(process.env.HOME || "", "repos", "thoth"),
-    path7.join(process.env.HOME || "", "Projects", "thoth"),
-    path7.join(process.env.HOME || "", "projects", "thoth"),
-    path7.join(process.env.HOME || "", "thoth"),
-    path7.join(directory, "thoth")
+    path9.join(process.env.HOME || "", "Repos", "thoth"),
+    path9.join(process.env.HOME || "", "repos", "thoth"),
+    path9.join(process.env.HOME || "", "Projects", "thoth"),
+    path9.join(process.env.HOME || "", "projects", "thoth"),
+    path9.join(process.env.HOME || "", "thoth"),
+    path9.join(directory, "thoth")
   ];
   for (const location of commonLocations) {
-    const kernelPath = path7.join(location, "kernel");
+    const kernelPath = path9.join(location, "kernel");
     if (fs3.existsSync(kernelPath)) {
       log(`Found knowledge base at: ${location}`);
       return location;
@@ -31420,6 +31507,8 @@ var ThothPlugin = async (ctx) => {
   const contextAperture = hooksConfig["context-aperture"] !== false ? createContextApertureHook({ knowledgeBasePath }) : null;
   const temporalAwareness = hooksConfig["temporal-awareness"] !== false ? createTemporalAwarenessHook() : null;
   const frontmatterEnforcer = hooksConfig["frontmatter-enforcer"] !== false ? createFrontmatterEnforcerHook({ knowledgeBasePath }) : null;
+  const readConfirmation = hooksConfig["read-confirmation"] !== false ? createReadConfirmationHook({ knowledgeBasePath }) : null;
+  const writeConfirmation = hooksConfig["write-confirmation"] !== false ? createWriteConfirmationHook({ knowledgeBasePath }) : null;
   const todoContinuationEnforcer = hooksConfig["todo-continuation"] !== false ? createTodoContinuationEnforcer(ctx) : null;
   const sessionRecoveryHook = hooksConfig["session-recovery"] !== false ? createSessionRecoveryHook(ctx, { experimental: { auto_resume: true } }) : null;
   const contextWindowMonitor = hooksConfig["context-window-monitor"] !== false ? createContextWindowMonitorHook(ctx) : null;
@@ -31525,11 +31614,15 @@ var ThothPlugin = async (ctx) => {
       await contextAperture?.["tool.execute.before"]?.(input, output);
       await trustLevelTracker?.["tool.execute.before"]?.(input, output);
       await frontmatterEnforcer?.["tool.execute.before"]?.(input, output);
+      await readConfirmation?.["tool.execute.before"]?.(input, output);
+      await writeConfirmation?.["tool.execute.before"]?.(input, output);
     },
     "tool.execute.after": async (input, output) => {
       await trustLevelTracker?.["tool.execute.after"]?.(input, output);
       await contextAperture?.["tool.execute.after"]?.(input, output);
       await frontmatterEnforcer?.["tool.execute.after"]?.(input, output);
+      await readConfirmation?.["tool.execute.after"]?.(input, output);
+      await writeConfirmation?.["tool.execute.after"]?.(input, output);
       await directoryAgentsInjector?.["tool.execute.after"]?.(input, output);
       await contextWindowMonitor?.["tool.execute.after"]?.(input, output);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thoth-plugin",
-  "version": "1.1.2",
+  "version": "1.2.1",
   "description": "Thoth - Root-level life orchestrator for OpenCode. Unified AI chief of staff combining Sisyphus execution quality, Personal-OS rhythms, and Thoth relationship model.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",