wendkeep 0.75.2 → 0.75.3

package/CHANGELOG.md

@@ -4,6 +4,15 @@ All notable changes to **wendkeep** are documented here. Format based on
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this project follows
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.75.3] — 2026-08-20
+
+### Fixed
+
+- **Sync seguro no self-checkout.** O instalador agora reconhece o repositório do próprio
+  WendKeep e migra hooks Claude/Codex para `node ./bin/wendkeep.mjs` sem duplicá-los. Projetos
+  consumidores continuam usando `npx --no-install`, e executar `sync` no checkout de
+  desenvolvimento não reintroduz a autodependência publicada.
+
 ## [0.75.2] — 2026-08-20
 
 ### Fixed

package/README.en.md

@@ -180,6 +180,10 @@ later stages. An invalid `.wendkeep.json` stops at `init` without falling back t
 The install stays outside `sync` on purpose: a running process cannot replace itself and
 keep going — the code in memory would still be the old one.
 
+In WendKeep's own development checkout, do not install `wendkeep` in `devDependencies`. Use
+`node ./bin/wendkeep.mjs sync --project . --yes`: the installer recognizes the self-checkout and
+keeps hooks on the working tree without duplicating consumer `npx` commands.
+
 In a **pnpm** monorepo the install command differs (`npm` in a pnpm repo fails with
 `Cannot read properties of null (reading 'matches')`). Resolve the published version first and
 reuse exactly the value returned:

package/README.md

@@ -180,6 +180,10 @@ later stages. An invalid `.wendkeep.json` stops at `init` without falling back t
 The install stays outside `sync` on purpose: a running process cannot replace itself and
 keep going — the code in memory would still be the old one.
 
+In WendKeep's own development checkout, do not install `wendkeep` in `devDependencies`. Use
+`node ./bin/wendkeep.mjs sync --project . --yes`: the installer recognizes the self-checkout and
+keeps hooks on the working tree without duplicating consumer `npx` commands.
+
 In a **pnpm** monorepo the install command differs (`npm` in a pnpm repo fails with
 `Cannot read properties of null (reading 'matches')`). Resolve the published version first and
 reuse exactly the value returned:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wendkeep",
-  "version": "0.75.2",
+  "version": "0.75.3",
   "description": "Vault-first persistent memory for AI coding agents, with an optional profile-aware governance runtime: OFF, FLOW, GUIDE, GOVERN, or ASSURE. Local-first and agent-agnostic (Claude Code, Codex, Cursor…).",
   "type": "module",
   "workspaces": [

package/packages/integrations/src/host-hooks.mjs

@@ -36,6 +36,12 @@ export function hookCommand(name) {
   return `npx --no-install wendkeep hook ${name}`;
 }
 
+// O checkout do próprio WendKeep não depende do pacote publicado. Seus hooks versionados
+// executam o binário do working tree para que sync/dogfood não recrie a autodependência.
+export function hookCommandWorkingTree(name) {
+  return `node ./bin/wendkeep.mjs hook ${name}`;
+}
+
 // Forma node-direta do comando de hook: 1 processo (~100-250ms) em vez dos 3 do npx (cold-start
 // de segundos no Windows). Usada pelos hooks de ALTA FREQUÊNCIA (por prompt / por tool-call)
 // quando o projeto tem wendkeep instalado localmente; o init decide (hookCommandFor).

package/src/init.mjs

@@ -13,6 +13,7 @@ import {
   CHANGE_NUDGE_HOOKS,
   CHANGE_GATE_HOOKS,
   hookCommand,
+  hookCommandWorkingTree,
   hookCommandLocal,
   hookCommandLocalLegacy,
   codexHookSpecs,
@@ -109,7 +110,19 @@ function backup(path) {
 
 // Comando preferido para um hook: node-direto quando o projeto tem o pacote local (alta
 // frequência sem cold-start de npx — ver R3 do design 0.31.0); senão o npx portátil.
+export function isWendkeepSelfCheckout(projectPath) {
+  try {
+    if (!projectPath || !existsSync(join(projectPath, 'bin', 'wendkeep.mjs'))) return false;
+    const pkg = JSON.parse(readFileSync(join(projectPath, 'package.json'), 'utf8'));
+    const bin = typeof pkg.bin === 'string' ? pkg.bin : pkg.bin?.wendkeep;
+    return pkg.name === 'wendkeep' && String(bin || '').replace(/\\/g, '/') === 'bin/wendkeep.mjs';
+  } catch {
+    return false;
+  }
+}
+
 export function hookCommandFor(name, projectPath) {
+  if (isWendkeepSelfCheckout(projectPath)) return hookCommandWorkingTree(name);
   try {
     if (projectPath && existsSync(join(projectPath, 'node_modules', 'wendkeep', 'hooks', `${name}.mjs`))) {
       return hookCommandLocal(name);
@@ -142,13 +155,22 @@ export function mergeSettings(existing, { vaultPath, withMcp, force, companions
     ...CHANGE_GATE_HOOKS,
     ...companionHookSpecs(companions, { dotcontextHookLevel }),
   ].sort((a, b) => (a.order ?? 0) - (b.order ?? 0));
+  const selfCheckout = isWendkeepSelfCheckout(projectPath);
   for (const h of allSpecs) {
+    const useWorkingTree = !h.command && selfCheckout;
     const useLocal = !h.command && h.preferLocal && localHookAvailable(h.name, projectPath);
-    const command = h.command ?? (useLocal ? 'node' : hookCommand(h.name));
-    const args = useLocal ? [localHookArg(h.name)] : undefined;
+    const command = h.command ?? (useWorkingTree
+      ? hookCommandWorkingTree(h.name)
+      : (useLocal ? 'node' : hookCommand(h.name)));
+    const args = !useWorkingTree && useLocal ? [localHookArg(h.name)] : undefined;
     // Dual-recognition: um hook nomeado é reconhecido tanto na forma npx quanto na node-direta,
     // para que trocar a forma preferida (ou re-initar noutra máquina) nunca duplique o grupo.
-    const candidates = h.command ? [h.command] : [hookCommand(h.name), hookCommandLocal(h.name), hookCommandLocalLegacy(h.name)];
+    const candidates = h.command ? [h.command] : [
+      hookCommand(h.name),
+      hookCommandWorkingTree(h.name),
+      hookCommandLocal(h.name),
+      hookCommandLocalLegacy(h.name),
+    ];
     const ownsHook = (x) => candidates.includes(x.command)
       || (x.command === 'node' && Array.isArray(x.args) && x.args[0] === localHookArg(h.name));
     const groups = Array.isArray(s.hooks[h.event]) ? [...s.hooks[h.event]] : [];
@@ -159,7 +181,8 @@ export function mergeSettings(existing, { vaultPath, withMcp, force, companions
       // entry's fields in place — without disturbing any sibling hooks the user grouped with it.
       const hk = owning.hooks.find(ownsHook);
       const brokenRelative = hk?.command === hookCommandLocalLegacy(h.name);
-      if (force || brokenRelative) {
+      const wrongRuntime = !h.command && hk?.command !== command;
+      if (force || brokenRelative || wrongRuntime) {
         hk.command = command;
         if (args) hk.args = args;
         else delete hk.args;
@@ -208,14 +231,19 @@ export function mergeSettings(existing, { vaultPath, withMcp, force, companions
 // it does handle is the legacy `timeout` key, which Codex silently ignores in favour of a
 // 600s default; rewriting it to `timeoutSec` invalidates the stored trusted_hash and costs
 // the user one "Hooks need review" prompt. That is the point.
-export function mergeCodexHooks(existing, { force = false } = {}) {
+export function mergeCodexHooks(existing, { force = false, projectPath = '' } = {}) {
   const file = existing && typeof existing === 'object' ? { ...existing } : {};
   file.hooks = { ...(file.hooks || {}) };
   const specs = codexHookSpecs([...SESSION_HOOKS, ...CHANGE_NUDGE_HOOKS, ...CHANGE_GATE_HOOKS])
     .sort((a, b) => (a.order ?? 0) - (b.order ?? 0));
+  const selfCheckout = isWendkeepSelfCheckout(projectPath);
   for (const h of specs) {
-    const entry = codexHookEntry(h);
-    const owns = (x) => x.command === entry.command;
+    const entry = {
+      ...codexHookEntry(h),
+      ...(selfCheckout ? { command: hookCommandWorkingTree(h.name) } : {}),
+    };
+    const candidates = new Set([hookCommand(h.name), hookCommandWorkingTree(h.name)]);
+    const owns = (x) => candidates.has(x.command);
     const groups = Array.isArray(file.hooks[h.event]) ? [...file.hooks[h.event]] : [];
     const owning = groups.find((g) => (g.hooks || []).some(owns));
     if (owning) {
@@ -224,7 +252,8 @@ export function mergeCodexHooks(existing, { force = false } = {}) {
       // `timeout` is the pre-0.46 key: Codex never read it. Migrate it even without --force,
       // otherwise the hook keeps running at the 600s default forever.
       const legacyTimeout = 'timeout' in hk;
-      if (force || legacyTimeout) {
+      const wrongRuntime = hk.command !== entry.command;
+      if (force || legacyTimeout || wrongRuntime) {
         if (legacyTimeout) {
           if (hk.timeoutSec === undefined) hk.timeoutSec = hk.timeout;
           delete hk.timeout;
@@ -233,6 +262,7 @@ export function mergeCodexHooks(existing, { force = false } = {}) {
           hk.timeoutSec = entry.timeoutSec;
           if (entry.statusMessage) hk.statusMessage = entry.statusMessage;
         }
+        if (wrongRuntime) hk.command = entry.command;
       }
       if (force && matcher) owning.matcher = matcher;
       if (force && !matcher) delete owning.matcher;
@@ -593,12 +623,12 @@ export async function runInit(argv) {
   const codexPath = join(projectPath, '.codex', 'hooks.json');
   const codexRead = readJsonSafe(codexPath);
   if (!codexRead.ok) {
-    writeJson(`${codexPath}.new`, mergeCodexHooks(null, { force: true }));
+    writeJson(`${codexPath}.new`, mergeCodexHooks(null, { force: true, projectPath }));
     log(M.codexBadJson(codexPath));
   } else {
     const hadFile = codexRead.data !== null;
     if (hadFile) backup(codexPath);
-    writeJson(codexPath, mergeCodexHooks(codexRead.data, { force: args.force }));
+    writeJson(codexPath, mergeCodexHooks(codexRead.data, { force: args.force, projectPath }));
     log(M.codexHooks(hadFile ? M.merged : M.created, hadFile ? M.bakSaved : ''));
   }
   log(M.codexTrust);

package/src/taxonomy.mjs

@@ -11,6 +11,7 @@ import {
   codexHookEntry,
   codexHookSpecs,
   hookCommand,
+  hookCommandWorkingTree,
   hookCommandLocal,
   hookCommandLocalLegacy,
 } from '../packages/integrations/src/host-hooks.mjs';
@@ -24,6 +25,7 @@ export {
   codexHookEntry,
   codexHookSpecs,
   hookCommand,
+  hookCommandWorkingTree,
   hookCommandLocal,
   hookCommandLocalLegacy,
   mcpServerEntry,