feat: enforce clean wraps and inbox-safe syncHEADmain

Centralize repository-state checks, bind teardown to a certified clean HEAD, and allow inbox-only refreshes. Guard installed symlinks from cross-project writes and add regression coverage.

1 files changed, 30 insertions, 0 deletions

diff --git a/.codex/hooks.json b/.codex/hooks.json
new file mode 100644
index 0000000..e14bed5
--- /dev/null
+++ b/.codex/hooks.json
@@ -0,0 +1,30 @@
+{
+  "description": "Rulesets lifecycle enforcement shared with Claude sessions.",
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Edit|Write",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "~/.claude/hooks/rulesets-write-boundary.py",
+            "timeout": 30,
+            "statusMessage": "Checking rulesets write boundary"
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "~/.claude/hooks/ai-wrap-teardown.sh",
+            "timeout": 30,
+            "statusMessage": "Verifying clean wrap state"
+          }
+        ]
+      }
+    ]
+  }
+}