wendkeep 0.58.3 → 0.59.0

package/hooks/brain-core.mjs

@@ -1,159 +1,159 @@
-// .agent/hooks/brain-core.mjs
-// Camada fria do brain: indexa o frontmatter das notas de sessão (0 token LLM).
-import { existsSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { basename, join } from 'node:path';
-import { ensureDir, stripYamlQuotes, toVaultRelative } from './obsidian-common.mjs';
-import { getLocale } from './locale.mjs';
-
-export function brainDir(vaultBase) {
-  return join(vaultBase, '.brain');
-}
-
-// Frontmatter YAML simples: escalares `k: v` + listas `k:` seguido de `  - item`.
-export function parseFrontmatter(content) {
-  const m = content.match(/^---\n([\s\S]*?)\n---/);
-  if (!m) return {};
-  const data = {};
-  const lines = m[1].split('\n');
-  for (let i = 0; i < lines.length; i++) {
-    const kv = lines[i].match(/^([\w-]+):\s*(.*)$/);
-    if (!kv) continue;
-    const key = kv[1];
-    const val = kv[2];
-    if (val === '') {
-      const list = [];
-      while (i + 1 < lines.length && /^\s+-\s+/.test(lines[i + 1])) {
-        list.push(stripYamlQuotes(lines[++i].replace(/^\s+-\s+/, '').trim()));
-      }
-      data[key] = list.length ? list : '';
-    } else {
-      data[key] = stripYamlQuotes(val.trim());
-    }
-  }
-  return data;
-}
-
-function walkMd(dir) {
-  const out = [];
-  let entries;
-  try { entries = readdirSync(dir, { withFileTypes: true }); } catch { return out; }
-  for (const e of entries) {
-    const fp = join(dir, e.name);
-    if (e.isDirectory()) out.push(...walkMd(fp));
-    else if (e.name.endsWith('.md')) out.push(fp);
-  }
-  return out;
-}
-
-const DERIVED_RE = /\[\[(0[456]-[^\]|]+?)(?:\|[^\]]*)?\]\]/g;
-function derivedLinks(content) {
-  const dec = new Set(), bug = new Set(), lea = new Set();
-  let m;
-  while ((m = DERIVED_RE.exec(content))) {
-    const t = m[1];
-    if (t.startsWith('04-')) dec.add(t);
-    else if (t.startsWith('05-')) bug.add(t);
-    else if (t.startsWith('06-')) lea.add(t);
-  }
-  return { decisions: [...dec], bugs: [...bug], learnings: [...lea] };
-}
-
-// Varre 02-Sessões/** e regrava .brain/index.jsonl inteiro. Provider-agnóstico.
-export function buildBrainIndex(vaultBase) {
-  const rows = [];
-  for (const fp of walkMd(join(vaultBase, getLocale(vaultBase).folders.sessions))) {
-    let content;
-    try { content = readFileSync(fp, 'utf8'); } catch { continue; }
-    const fm = parseFrontmatter(content);
-    if (fm.type && fm.type !== 'session') continue;
-    const der = derivedLinks(content);
-    rows.push({
-      session_id: fm.session_id || '',
-      date: fm.date || '',
-      provider: fm.provider || '',
-      status: fm.status || '',
-      summary: fm.summary || '',
-      file: toVaultRelative(vaultBase, fp),
-      tags: Array.isArray(fm.tags) ? fm.tags : (fm.tags ? [fm.tags] : []),
-      decisions: der.decisions,
-      bugs: der.bugs,
-      learnings: der.learnings,
-    });
-  }
-  rows.sort((a, b) => (a.date + a.file).localeCompare(b.date + b.file));
-  ensureDir(brainDir(vaultBase));
-  const out = rows.map((r) => JSON.stringify(r)).join('\n') + (rows.length ? '\n' : '');
-  writeFileSync(join(brainDir(vaultBase), 'index.jsonl'), out, 'utf8');
-  return rows;
-}
-
-// Lê o índice gravado (linhas JSONL). Usado pelo recall e pelo digest.
-export function loadIndex(vaultBase) {
-  try {
-    return readFileSync(join(brainDir(vaultBase), 'index.jsonl'), 'utf8')
-      .split('\n').filter(Boolean).map((l) => JSON.parse(l));
-  } catch {
-    return [];
-  }
-}
-
-const DIGEST_CAPS = { decisions: 5, sessions: 4, bugs: 2, learnings: 2 };
-
-function adrNumber(path) {
-  const m = path.match(/ADR-(\d+)/);
-  return m ? Number(m[1]) : -1;
-}
-
-// Destila index.jsonl em .brain/DIGEST.md (camada quente, determinístico, 0 token LLM).
-// Cap por construção: 1 header + 13 itens (5/4/2/2) + 1 pointer = máx 15 linhas.
-export function buildBrainDigest(vaultBase, rows = null) {
-  const data = rows ?? loadIndex(vaultBase);
-  const byDateDesc = [...data].sort((a, b) =>
-    String(b.date || '').localeCompare(String(a.date || '')) || String(b.file || '').localeCompare(String(a.file || '')));
-
-  const seen = new Set();
-  const pick = (kind, max) => {
-    const out = [];
-    for (const r of byDateDesc) {
-      for (const p of r[kind] || []) {
-        if (out.length >= max) return out;
-        if (!seen.has(p)) { seen.add(p); out.push(p); }
-      }
-    }
-    return out;
-  };
-
-  // The digest is INJECTED into every session, so a dead wikilink is dead weight in the model's
-  // context. Keep only targets that resolve to a real note (by vault-relative path or basename)
-  // and drop placeholder paths (a truncated `…` from a summary line). `pick` collects extra so
-  // caps still fill after filtering.
-  const known = new Set();
-  for (const r of data) {
-    const rel = String(r.file || '').replace(/\.md$/i, '');
-    if (rel) { known.add(rel); known.add(basename(rel)); }
-  }
-  const resolves = (p) => {
-    const t = String(p || '').replace(/\.md$/i, '').trim();
-    if (!t || t.includes('...') || t.includes('…')) return false;
-    return known.has(t) || known.has(basename(t)) || existsSync(join(vaultBase, `${t}.md`));
-  };
-  const pickLive = (kind, max) => pick(kind, max * 4).filter(resolves).slice(0, max);
-
-  const decisions = pickLive('decisions', DIGEST_CAPS.decisions).sort((a, b) => adrNumber(b) - adrNumber(a));
-  const sessions = byDateDesc.slice(0, DIGEST_CAPS.sessions);
-  const bugs = pickLive('bugs', DIGEST_CAPS.bugs);
-  const learnings = pickLive('learnings', DIGEST_CAPS.learnings);
-
-  const lines = ['<!-- AUTO-GERADO por brain-core.mjs (0 token LLM). NÃO editar. Rebuild: node .agent/hooks/brain-reindex.mjs -->'];
-  for (const d of decisions) lines.push(`- Decisão: [[${d}]]`);
-  for (const s of sessions) lines.push(`- Sessão ${s.date} (${s.provider || '?'}): ${s.summary || s.file} → [[${String(s.file || '').replace(/\.md$/, '')}]]`);
-  for (const b of bugs) lines.push(`- Bug: [[${b}]]`);
-  for (const l of learnings) lines.push(`- Aprendizado: [[${l}]]`);
-
-  const shown = sessions.length;
-  if (data.length > shown) lines.push(`- +${data.length - shown} mais no índice — use /brain-recall <tópico>`);
-
-  ensureDir(brainDir(vaultBase));
-  writeFileSync(join(brainDir(vaultBase), 'DIGEST.md'), lines.join('\n') + '\n', 'utf8');
-  return lines;
-}
+// .agent/hooks/brain-core.mjs
+// Camada fria do brain: indexa o frontmatter das notas de sessão (0 token LLM).
+import { existsSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { basename, join } from 'node:path';
+import { ensureDir, stripYamlQuotes, toVaultRelative } from './obsidian-common.mjs';
+import { getLocale } from './locale.mjs';
+
+export function brainDir(vaultBase) {
+  return join(vaultBase, '.brain');
+}
+
+// Frontmatter YAML simples: escalares `k: v` + listas `k:` seguido de `  - item`.
+export function parseFrontmatter(content) {
+  const m = content.match(/^---\n([\s\S]*?)\n---/);
+  if (!m) return {};
+  const data = {};
+  const lines = m[1].split('\n');
+  for (let i = 0; i < lines.length; i++) {
+    const kv = lines[i].match(/^([\w-]+):\s*(.*)$/);
+    if (!kv) continue;
+    const key = kv[1];
+    const val = kv[2];
+    if (val === '') {
+      const list = [];
+      while (i + 1 < lines.length && /^\s+-\s+/.test(lines[i + 1])) {
+        list.push(stripYamlQuotes(lines[++i].replace(/^\s+-\s+/, '').trim()));
+      }
+      data[key] = list.length ? list : '';
+    } else {
+      data[key] = stripYamlQuotes(val.trim());
+    }
+  }
+  return data;
+}
+
+function walkMd(dir) {
+  const out = [];
+  let entries;
+  try { entries = readdirSync(dir, { withFileTypes: true }); } catch { return out; }
+  for (const e of entries) {
+    const fp = join(dir, e.name);
+    if (e.isDirectory()) out.push(...walkMd(fp));
+    else if (e.name.endsWith('.md')) out.push(fp);
+  }
+  return out;
+}
+
+const DERIVED_RE = /\[\[(0[456]-[^\]|]+?)(?:\|[^\]]*)?\]\]/g;
+function derivedLinks(content) {
+  const dec = new Set(), bug = new Set(), lea = new Set();
+  let m;
+  while ((m = DERIVED_RE.exec(content))) {
+    const t = m[1];
+    if (t.startsWith('04-')) dec.add(t);
+    else if (t.startsWith('05-')) bug.add(t);
+    else if (t.startsWith('06-')) lea.add(t);
+  }
+  return { decisions: [...dec], bugs: [...bug], learnings: [...lea] };
+}
+
+// Varre 02-Sessões/** e regrava .brain/index.jsonl inteiro. Provider-agnóstico.
+export function buildBrainIndex(vaultBase) {
+  const rows = [];
+  for (const fp of walkMd(join(vaultBase, getLocale(vaultBase).folders.sessions))) {
+    let content;
+    try { content = readFileSync(fp, 'utf8'); } catch { continue; }
+    const fm = parseFrontmatter(content);
+    if (fm.type && fm.type !== 'session') continue;
+    const der = derivedLinks(content);
+    rows.push({
+      session_id: fm.session_id || '',
+      date: fm.date || '',
+      provider: fm.provider || '',
+      status: fm.status || '',
+      summary: fm.summary || '',
+      file: toVaultRelative(vaultBase, fp),
+      tags: Array.isArray(fm.tags) ? fm.tags : (fm.tags ? [fm.tags] : []),
+      decisions: der.decisions,
+      bugs: der.bugs,
+      learnings: der.learnings,
+    });
+  }
+  rows.sort((a, b) => (a.date + a.file).localeCompare(b.date + b.file));
+  ensureDir(brainDir(vaultBase));
+  const out = rows.map((r) => JSON.stringify(r)).join('\n') + (rows.length ? '\n' : '');
+  writeFileSync(join(brainDir(vaultBase), 'index.jsonl'), out, 'utf8');
+  return rows;
+}
+
+// Lê o índice gravado (linhas JSONL). Usado pelo recall e pelo digest.
+export function loadIndex(vaultBase) {
+  try {
+    return readFileSync(join(brainDir(vaultBase), 'index.jsonl'), 'utf8')
+      .split('\n').filter(Boolean).map((l) => JSON.parse(l));
+  } catch {
+    return [];
+  }
+}
+
+const DIGEST_CAPS = { decisions: 5, sessions: 4, bugs: 2, learnings: 2 };
+
+function adrNumber(path) {
+  const m = path.match(/ADR-(\d+)/);
+  return m ? Number(m[1]) : -1;
+}
+
+// Destila index.jsonl em .brain/DIGEST.md (camada quente, determinístico, 0 token LLM).
+// Cap por construção: 1 header + 13 itens (5/4/2/2) + 1 pointer = máx 15 linhas.
+export function buildBrainDigest(vaultBase, rows = null) {
+  const data = rows ?? loadIndex(vaultBase);
+  const byDateDesc = [...data].sort((a, b) =>
+    String(b.date || '').localeCompare(String(a.date || '')) || String(b.file || '').localeCompare(String(a.file || '')));
+
+  const seen = new Set();
+  const pick = (kind, max) => {
+    const out = [];
+    for (const r of byDateDesc) {
+      for (const p of r[kind] || []) {
+        if (out.length >= max) return out;
+        if (!seen.has(p)) { seen.add(p); out.push(p); }
+      }
+    }
+    return out;
+  };
+
+  // The digest is INJECTED into every session, so a dead wikilink is dead weight in the model's
+  // context. Keep only targets that resolve to a real note (by vault-relative path or basename)
+  // and drop placeholder paths (a truncated `…` from a summary line). `pick` collects extra so
+  // caps still fill after filtering.
+  const known = new Set();
+  for (const r of data) {
+    const rel = String(r.file || '').replace(/\.md$/i, '');
+    if (rel) { known.add(rel); known.add(basename(rel)); }
+  }
+  const resolves = (p) => {
+    const t = String(p || '').replace(/\.md$/i, '').trim();
+    if (!t || t.includes('...') || t.includes('…')) return false;
+    return known.has(t) || known.has(basename(t)) || existsSync(join(vaultBase, `${t}.md`));
+  };
+  const pickLive = (kind, max) => pick(kind, max * 4).filter(resolves).slice(0, max);
+
+  const decisions = pickLive('decisions', DIGEST_CAPS.decisions).sort((a, b) => adrNumber(b) - adrNumber(a));
+  const sessions = byDateDesc.slice(0, DIGEST_CAPS.sessions);
+  const bugs = pickLive('bugs', DIGEST_CAPS.bugs);
+  const learnings = pickLive('learnings', DIGEST_CAPS.learnings);
+
+  const lines = ['<!-- AUTO-GERADO por brain-core.mjs (0 token LLM). NÃO editar. Rebuild: node .agent/hooks/brain-reindex.mjs -->'];
+  for (const d of decisions) lines.push(`- Decisão: [[${d}]]`);
+  for (const s of sessions) lines.push(`- Sessão ${s.date} (${s.provider || '?'}): ${s.summary || s.file} → [[${String(s.file || '').replace(/\.md$/, '')}]]`);
+  for (const b of bugs) lines.push(`- Bug: [[${b}]]`);
+  for (const l of learnings) lines.push(`- Aprendizado: [[${l}]]`);
+
+  const shown = sessions.length;
+  if (data.length > shown) lines.push(`- +${data.length - shown} mais no índice — use /brain-recall <tópico>`);
+
+  ensureDir(brainDir(vaultBase));
+  writeFileSync(join(brainDir(vaultBase), 'DIGEST.md'), lines.join('\n') + '\n', 'utf8');
+  return lines;
+}

package/hooks/brain-inject.mjs

@@ -2,10 +2,10 @@
 // Injeção da camada quente no SessionStart (Claude/Codex/Copilot): CORE curado +
 // SHARED operacional no v2; DIGEST fica só no fallback legado/recall. Nunca derruba o hook.
 // Uso (hook): node .agent/hooks/brain-inject.mjs   (input JSON via stdin)
-import { existsSync, readFileSync } from 'node:fs';
+import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { pathToFileURL } from 'node:url';
-import { getVaultBase, readHookInput, writeHookOutput } from './obsidian-common.mjs';
+import { readHookInput, writeHookOutput } from './obsidian-common.mjs';
 import { brainDir } from './brain-core.mjs';
 import { buildActiveChangeInjection, changeCtxState, writeSentinel } from './change-core.mjs';
 import { buildLessonsInjection } from './lessons-core.mjs';
@@ -13,6 +13,12 @@ import { getLocale } from './locale.mjs';
 import { resolveSessionEntry } from './session-identity.mjs';
 import { sanitizeMemoryText, validateSharedMemory } from './memory-schema.mjs';
 import { detectMemoryMode } from './memory-mode.mjs';
+import {
+  hookProfilePolicy,
+  profileSentinelId,
+  resolveHookOperatingProfile,
+} from './operating-profile-runtime.mjs';
+import { assertVaultPathSafe } from './vault-path-safety.mjs';
 import { validateCore } from '../src/validate-core.mjs';
 
 // The process ROUTER — the enforcement layer. The wk-* skills are passive files; without a
@@ -53,9 +59,27 @@ const INJECTION_LIMITS = Object.freeze({
   recallBytes: 512,
 });
 
-function readMemoryFile(dir, name) {
-  try { return readFileSync(join(dir, name), 'utf8').replace(/\r\n/g, '\n').trim(); }
-  catch { return ''; }
+function aliasBoundaryError(error) {
+  return error?.code === 'VAULT_PATH_UNSAFE'
+    && /link simbólico|junction|reparse|hardlink|nlink|redirecion|escapa logicamente/i
+      .test(String(error?.message || error));
+}
+
+function readMemoryFile(vaultBase, name) {
+  const path = join(brainDir(vaultBase), name);
+  const label = `camada de memória ${name}`;
+  try {
+    let checked = assertVaultPathSafe(vaultBase, path, { expectedType: 'file', label });
+    if (!checked.exists) return '';
+    checked = assertVaultPathSafe(vaultBase, checked.target, {
+      allowMissing: false, expectedType: 'file', label,
+    });
+    return readFileSync(checked.target, 'utf8').replace(/\r\n/g, '\n').trim();
+  }
+  catch (error) {
+    if (aliasBoundaryError(error)) throw error;
+    return '';
+  }
 }
 
 function byteLength(value) {
@@ -78,6 +102,17 @@ function safeError(layer, reasons) {
   return `<wk_memory_error layer="${layer}" repair="wendkeep memory status --gate">${visible}</wk_memory_error>`;
 }
 
+export function profileRuntimeError(diagnostic) {
+  if (!diagnostic) return '';
+  const code = diagnostic.code || 'WENDKEEP_PROFILE_RESOLUTION_ERROR';
+  const detail = sanitizeMemoryText(diagnostic.message || String(diagnostic))
+    .replace(/\s+/g, ' ')
+    .trim();
+  const max = 320;
+  const visible = detail.length <= max ? detail : `${detail.slice(0, max - 20)} … [erro resumido]`;
+  return `<wk_profile_error code="${xmlAttr(code)}" fallback="GOVERN" repair="wendkeep doctor">${visible}</wk_profile_error>`;
+}
+
 function validateCoreLayer(raw) {
   if (!raw) return { ok: false, rendered: safeError('core', ['CORE.md ausente']) };
   const sanitized = sanitizeMemoryText(raw);
@@ -105,9 +140,9 @@ function validateSharedLayer(raw) {
     : { ok: false, rendered: safeError('shared', validation.errors), metadata: validation.metadata };
 }
 
-function buildV2Memory(dir) {
-  const core = validateCoreLayer(readMemoryFile(dir, 'CORE.md'));
-  const shared = validateSharedLayer(readMemoryFile(dir, 'SHARED_MEMORY.md'));
+function buildV2Memory(vaultBase) {
+  const core = validateCoreLayer(readMemoryFile(vaultBase, 'CORE.md'));
+  const shared = validateSharedLayer(readMemoryFile(vaultBase, 'SHARED_MEMORY.md'));
   const revision = shared.metadata?.revision ?? 'unknown';
   const stateHash = shared.metadata?.state_hash ?? 'unknown';
   const attention = [core, shared].every((layer) => layer.ok)
@@ -156,10 +191,10 @@ function validateLegacyLayer(raw, layer, { maxLines, maxBytes }) {
   return errors.length ? safeError(layer.toLowerCase(), errors) : sanitized;
 }
 
-function buildLegacyMemory(dir) {
-  const coreRaw = readMemoryFile(dir, 'CORE.md');
+function buildLegacyMemory(vaultBase) {
+  const coreRaw = readMemoryFile(vaultBase, 'CORE.md');
   const coreValidation = coreRaw ? validateCoreLayer(coreRaw) : { ok: true, rendered: '' };
-  const digest = validateLegacyLayer(readMemoryFile(dir, 'DIGEST.md'), 'DIGEST', { maxLines: 15, maxBytes: 4096 });
+  const digest = validateLegacyLayer(readMemoryFile(vaultBase, 'DIGEST.md'), 'DIGEST', { maxLines: 15, maxBytes: 4096 });
   const pointer = 'Memória profunda sob demanda: /brain-recall <tópico> (índice .brain/index.jsonl).';
   return [
     '<brain_memory>',
@@ -185,24 +220,34 @@ function budgetNotice(priority, layer, message) {
   return `<wk_budget_notice priority="${priority}" layer="${layer}">${message}</wk_budget_notice>`;
 }
 
-export function buildInjection(vaultBase, input = {}) {
-  const dir = brainDir(vaultBase);
-  const brain = detectMemoryMode(vaultBase).mode === 'v2' ? buildV2Memory(dir) : buildLegacyMemory(dir);
-  const router = processRouter(getLocale(vaultBase).id);
+export function buildInjection(vaultBase, input = {}, { profile = 'GOVERN', bindingError = null } = {}) {
+  const brain = detectMemoryMode(vaultBase).mode === 'v2'
+    ? buildV2Memory(vaultBase)
+    : buildLegacyMemory(vaultBase);
+  const policy = hookProfilePolicy(profile);
+  const lessons = buildLessonsInjection(vaultBase, { maxLineChars: INJECTION_LIMITS.lineChars });
+  const profileNotice = profileRuntimeError(bindingError);
+
+  // OFF keeps only the persistent project memory layers. No process/change/gate state crosses
+  // the vault -> harness boundary in this profile.
+  if (!policy.harness) return joinInjection([brain, profileNotice, lessons]);
+
+  // FLOW executes and validates without demanding a change. Explicitly opened changes remain
+  // visible below, but the standing change router would contradict that contract.
+  const router = policy.requiresChange ? processRouter(getLocale(vaultBase).id) : '';
   const { identity, entry } = resolveSessionEntry(vaultBase, input);
   const focus = identity.state === 'resolved' && entry?.change_slug
     ? `<session_change>${boundAncillaryText(`Change vinculada a esta sessão: ${entry.change_slug}. Este vínculo prevalece para writes automáticos; todas as pendências continuam visíveis acima.`, '<session_change></session_change>'.length)}</session_change>`
     : '';
   const allChanges = buildActiveChangeInjection(vaultBase, { maxLineChars: INJECTION_LIMITS.lineChars });
-  const lessons = buildLessonsInjection(vaultBase, { maxLineChars: INJECTION_LIMITS.lineChars });
 
   // Global priority is deterministic: memory/router/focus, then changes, then lessons.
-  let output = joinInjection([brain, router, focus, allChanges, lessons]);
+  let output = joinInjection([brain, profileNotice, router, focus, allChanges, lessons]);
   if (byteLength(output) <= INJECTION_LIMITS.totalBytes) return output;
 
   // First pressure step: lessons are fully removable and remain available in the vault.
   const lessonsEvicted = budgetNotice(1, 'lessons', 'Lessons omitidas primeiro pelo budget global.');
-  output = joinInjection([brain, router, focus, allChanges, lessonsEvicted]);
+  output = joinInjection([brain, profileNotice, router, focus, allChanges, lessonsEvicted]);
   if (byteLength(output) <= INJECTION_LIMITS.totalBytes) return output;
 
   // Second pressure step: non-current changes leave the hot context before the current one.
@@ -211,12 +256,12 @@ export function buildInjection(vaultBase, input = {}) {
     currentOnly: true,
     maxLineChars: INJECTION_LIMITS.lineChars,
   });
-  output = joinInjection([brain, router, focus, currentChange, lessonsEvicted, nonCurrentEvicted]);
+  output = joinInjection([brain, profileNotice, router, focus, currentChange, lessonsEvicted, nonCurrentEvicted]);
   if (byteLength(output) <= INJECTION_LIMITS.totalBytes) return output;
 
   // Last step caps only the current change block, with an explicit marker and closed wrapper.
   const currentSummarized = budgetNotice(3, 'current-change', 'Change atual resumida por último; blocker e início da fila foram preservados.');
-  const fixed = joinInjection([brain, router, focus, lessonsEvicted, nonCurrentEvicted, currentSummarized]);
+  const fixed = joinInjection([brain, profileNotice, router, focus, lessonsEvicted, nonCurrentEvicted, currentSummarized]);
   const remaining = Math.max(512, INJECTION_LIMITS.totalBytes - byteLength(fixed) - 1);
   const boundedCurrent = buildActiveChangeInjection(vaultBase, {
     currentOnly: true,
@@ -225,6 +270,7 @@ export function buildInjection(vaultBase, input = {}) {
   });
   return joinInjection([
     brain,
+    profileNotice,
     router,
     focus,
     lessonsEvicted,
@@ -237,23 +283,34 @@ export function buildInjection(vaultBase, input = {}) {
 if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
   try {
     const input = readHookInput();
-    const vaultBase = getVaultBase(input);
+    const runtime = resolveHookOperatingProfile({ input });
+    const vaultBase = runtime.vaultBase;
     writeHookOutput({
       hookSpecificOutput: {
         hookEventName: 'SessionStart',
-        additionalContext: buildInjection(vaultBase, input),
+        additionalContext: buildInjection(vaultBase, input, {
+          profile: runtime.profile,
+          bindingError: runtime.bindingError,
+        }),
       },
     });
     // Sentinela do change-context: o backlog completo acabou de ser injetado aqui, então o hook
     // UserPromptSubmit não precisa re-pingar no 1º prompt. Bônus — nunca derruba a injeção.
-    try {
+    if (runtime.policy.harness && !runtime.bindingError) try {
       const st = changeCtxState(vaultBase);
-      const { identity } = resolveSessionEntry(vaultBase, input);
+      const { identity } = runtime;
       const sid = identity.state === 'resolved' ? identity.canonicalConversationId : (input.session_id || input.sessionId || '');
-      if (st) writeSentinel(vaultBase, 'ctx', sid, st.hash);
+      if (st) {
+        writeSentinel(vaultBase, 'ctx', profileSentinelId(sid, runtime.profile), st.hash);
+      }
     } catch { /* sentinela é bônus */ }
   } catch (error) {
     process.stderr.write(`[brain] inject falhou: ${error.message}\n`);
-    writeHookOutput({});
+    writeHookOutput({
+      hookSpecificOutput: {
+        hookEventName: 'SessionStart',
+        additionalContext: profileRuntimeError(error),
+      },
+    });
   }
 }

package/hooks/brain-recall.mjs

@@ -1,32 +1,32 @@
-// .agent/hooks/brain-recall.mjs
-// Query engine read-only: pontua o índice por tópico. Token só no resultado.
-// Uso: node .agent/hooks/brain-recall.mjs <termos da busca>
-import { pathToFileURL } from 'node:url';
-import { getVaultBase } from './obsidian-common.mjs';
-import { loadIndex } from './brain-core.mjs';
-
-export { loadIndex };
-
-export function scoreRows(rows, query, topK = 5) {
-  const terms = String(query).toLowerCase().split(/\s+/).filter(Boolean);
-  if (!terms.length) return [];
-  return rows
-    .map((r) => {
-      // Inclui slug do file + paths das derivadas (ADR/bug/aprendizado) no haystack:
-      // os títulos das sessões e tags são genéricos; o sinal tópico vem dos slugs.
-      const hay = `${r.summary || ''} ${(r.tags || []).join(' ')} ${r.file || ''} ${(r.decisions || []).join(' ')} ${(r.bugs || []).join(' ')} ${(r.learnings || []).join(' ')}`.toLowerCase();
-      let score = 0;
-      for (const t of terms) if (hay.includes(t)) score++;
-      return { row: r, score };
-    })
-    .filter((s) => s.score > 0)
-    .sort((a, b) => b.score - a.score || String(b.row.date || '').localeCompare(String(a.row.date || '')))
-    .slice(0, topK)
-    .map((s) => s.row);
-}
-
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
-  const vaultBase = getVaultBase();
-  const hits = scoreRows(loadIndex(vaultBase), process.argv.slice(2).join(' '));
-  process.stdout.write(JSON.stringify(hits, null, 2) + '\n');
-}
+// .agent/hooks/brain-recall.mjs
+// Query engine read-only: pontua o índice por tópico. Token só no resultado.
+// Uso: node .agent/hooks/brain-recall.mjs <termos da busca>
+import { pathToFileURL } from 'node:url';
+import { getVaultBase } from './obsidian-common.mjs';
+import { loadIndex } from './brain-core.mjs';
+
+export { loadIndex };
+
+export function scoreRows(rows, query, topK = 5) {
+  const terms = String(query).toLowerCase().split(/\s+/).filter(Boolean);
+  if (!terms.length) return [];
+  return rows
+    .map((r) => {
+      // Inclui slug do file + paths das derivadas (ADR/bug/aprendizado) no haystack:
+      // os títulos das sessões e tags são genéricos; o sinal tópico vem dos slugs.
+      const hay = `${r.summary || ''} ${(r.tags || []).join(' ')} ${r.file || ''} ${(r.decisions || []).join(' ')} ${(r.bugs || []).join(' ')} ${(r.learnings || []).join(' ')}`.toLowerCase();
+      let score = 0;
+      for (const t of terms) if (hay.includes(t)) score++;
+      return { row: r, score };
+    })
+    .filter((s) => s.score > 0)
+    .sort((a, b) => b.score - a.score || String(b.row.date || '').localeCompare(String(a.row.date || '')))
+    .slice(0, topK)
+    .map((s) => s.row);
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  const vaultBase = getVaultBase();
+  const hits = scoreRows(loadIndex(vaultBase), process.argv.slice(2).join(' '));
+  process.stdout.write(JSON.stringify(hits, null, 2) + '\n');
+}

package/hooks/brain-reindex.mjs

@@ -1,13 +1,13 @@
-// .agent/hooks/brain-reindex.mjs
-// Backfill manual: reconstrói .brain/index.jsonl + .brain/DIGEST.md varrendo todo 02-Sessões.
-// Uso: node .agent/hooks/brain-reindex.mjs [caminho-do-vault]
-import { pathToFileURL } from 'node:url';
-import { getVaultBase } from './obsidian-common.mjs';
-import { buildBrainDigest, buildBrainIndex, brainDir } from './brain-core.mjs';
-
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
-  const vaultBase = getVaultBase({ obsidian_vault_path: process.argv[2] });
-  const rows = buildBrainIndex(vaultBase);
-  const digest = buildBrainDigest(vaultBase, rows);
-  process.stdout.write(`[brain] index: ${rows.length} sessões; digest: ${digest.length} linhas → ${brainDir(vaultBase)}\n`);
-}
+// .agent/hooks/brain-reindex.mjs
+// Backfill manual: reconstrói .brain/index.jsonl + .brain/DIGEST.md varrendo todo 02-Sessões.
+// Uso: node .agent/hooks/brain-reindex.mjs [caminho-do-vault]
+import { pathToFileURL } from 'node:url';
+import { getVaultBase } from './obsidian-common.mjs';
+import { buildBrainDigest, buildBrainIndex, brainDir } from './brain-core.mjs';
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  const vaultBase = getVaultBase({ obsidian_vault_path: process.argv[2] });
+  const rows = buildBrainIndex(vaultBase);
+  const digest = buildBrainDigest(vaultBase, rows);
+  process.stdout.write(`[brain] index: ${rows.length} sessões; digest: ${digest.length} linhas → ${brainDir(vaultBase)}\n`);
+}