release: v0.15.0 — PII archive, hard-delete remove_decision, schema v17→v24 chain

.claude/hooks/pre_tool_use_timeout_context.py

@@ -0,0 +1,59 @@
+#!/usr/bin/env python3
+"""Claude Code PreToolUse hook — emit timeout posture before bicameral tool calls.
+
+Fires before a ledger-touching tool runs. Reads the recent-timeout ring
+buffer + current budgets and emits a one-line summary to stderr so
+the Claude agent can reason about whether to fire the query at all,
+choose ``timeout_class="drift"`` thoughtfully, or back off after
+observed degradation.
+
+**Always exits 0.** Hook is advisory; the server-side
+``asyncio.wait_for`` wrap is the deterministic gate.
+
+The hook reads stdin (Claude Code passes a JSON envelope describing
+the about-to-fire tool) but does not parse it deeply — emitting the
+posture line is universally useful before any bicameral tool, so we
+skip envelope-shape coupling and just always print.
+"""
+
+from __future__ import annotations
+
+import os
+import sys
+
+
+def main() -> int:
+    # Drain stdin so Claude Code's pipe doesn't backpressure.
+    try:
+        sys.stdin.read()
+    except Exception:
+        pass
+
+    repo = os.environ.get("CLAUDE_PROJECT_DIR") or os.getcwd()
+    if repo not in sys.path:
+        sys.path.insert(0, repo)
+
+    try:
+        from ledger.timeout_telemetry import recent_timeout_counts
+    except Exception:
+        return 0
+
+    try:
+        counts = recent_timeout_counts(window_seconds=600.0)  # 10 min window
+    except Exception:
+        return 0
+
+    if counts.get("read", 0) == 0 and counts.get("drift", 0) == 0:
+        # Quiet path — no posture-changing signal to surface.
+        return 0
+
+    sys.stderr.write(
+        "[bicameral] recent ledger-query timeouts (last 10 min): "
+        f"{counts.get('read', 0)} read / {counts.get('drift', 0)} drift — "
+        "consider whether the next query may also be slow\n"
+    )
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

.claude/hooks/session_start_timeout_posture.py

@@ -0,0 +1,76 @@
+#!/usr/bin/env python3
+"""Claude Code SessionStart hook — surface ledger-query timeout posture.
+
+Runs once when a Claude Code session starts. Reads the bicameral
+ledger-query timeout configuration + the recent-timeout ring buffer
+and prints a one-line brief to stderr; Claude Code surfaces stderr
+from hooks back to the model as a context fragment.
+
+**Always exits 0.** Never blocks the session. If the bicameral package
+isn't importable (e.g. running in a checkout without the venv), prints
+a single warning and exits 0. The deterministic server-side timeout
+wrap remains the source of truth regardless of whether this hook
+runs at all.
+
+Per #224 + the feedback-claude-hooks-for-mcp-context memory:
+deterministic gate (asyncio.wait_for in ledger/client.py) is the
+floor; this hook is advisory context enrichment for the Claude
+agent only.
+"""
+
+from __future__ import annotations
+
+import os
+import sys
+
+
+def main() -> int:
+    repo = os.environ.get("CLAUDE_PROJECT_DIR") or os.getcwd()
+
+    # Add the repo root to sys.path so we can import the bicameral
+    # package without a venv hop. Hooks run in whatever shell Claude
+    # Code launched — they have no guarantee of import context.
+    if repo not in sys.path:
+        sys.path.insert(0, repo)
+
+    try:
+        from context import (
+            _read_query_timeout_drift_seconds,
+            _read_query_timeout_read_seconds,
+        )
+        from ledger.timeout_telemetry import recent_timeout_counts
+    except Exception as exc:
+        sys.stderr.write(f"[bicameral hook] timeout-posture unavailable: {exc}\n")
+        return 0
+
+    try:
+        read_budget = _read_query_timeout_read_seconds(repo)
+        drift_budget = _read_query_timeout_drift_seconds(repo)
+    except Exception:
+        read_budget = 5.0
+        drift_budget = 30.0
+
+    try:
+        counts = recent_timeout_counts()
+    except Exception:
+        counts = {"read": 0, "drift": 0}
+
+    env_disabled = os.environ.get("BICAMERAL_QUERY_TIMEOUT_DISABLE", "").strip().lower() in {
+        "1",
+        "true",
+        "yes",
+        "on",
+    }
+    env_disabled_str = "on" if env_disabled else "off"
+
+    sys.stderr.write(
+        "[bicameral] query timeouts last 1h: "
+        f"{counts.get('read', 0)} read / {counts.get('drift', 0)} drift "
+        f"| budgets: {read_budget:.1f}s / {drift_budget:.1f}s "
+        f"| env-disable: {env_disabled_str}\n"
+    )
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

.claude/skills/bicameral-bind

@@ -0,0 +1 @@
+../../skills/bicameral-bind

.claude/skills/bicameral-brief

@@ -0,0 +1 @@
+../../skills/bicameral-brief

.claude/skills/bicameral-capture-corrections

@@ -0,0 +1 @@
+../../skills/bicameral-capture-corrections

.claude/skills/bicameral-config

@@ -0,0 +1 @@
+../../skills/bicameral-config

.claude/skills/bicameral-context-sentry

@@ -0,0 +1 @@
+../../skills/bicameral-context-sentry