From f2609d9f9ad33486bef43211d753ba53e1e24181 Mon Sep 17 00:00:00 2001
From: Craig Jennings <c@cjennings.net>
Date: Sat, 25 Jul 2026 15:35:14 -0500
Subject: feat: enforce clean wraps and inbox-safe sync

Centralize repository-state checks, bind teardown to a certified clean HEAD, and allow inbox-only refreshes. Guard installed symlinks from cross-project writes and add regression coverage.
---
 .codex/hooks.json | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 .codex/hooks.json

(limited to '.codex')

diff --git a/.codex/hooks.json b/.codex/hooks.json
new file mode 100644
index 0000000..e14bed5
--- /dev/null
+++ b/.codex/hooks.json
@@ -0,0 +1,30 @@
+{
+  "description": "Rulesets lifecycle enforcement shared with Claude sessions.",
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Edit|Write",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "~/.claude/hooks/rulesets-write-boundary.py",
+            "timeout": 30,
+            "statusMessage": "Checking rulesets write boundary"
+          }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "~/.claude/hooks/ai-wrap-teardown.sh",
+            "timeout": 30,
+            "statusMessage": "Verifying clean wrap state"
+          }
+        ]
+      }
+    ]
+  }
+}
-- 
cgit v1.2.3