@bonesofspring/ai-rules 0.2.28 → 0.2.29

package/presets/claude/ios-swift/REPO_AGENTS.md

@@ -69,4 +69,4 @@ A `.ai.local/` directory MAY exist at the repo root or at any nesting depth in m
 
 Plain markdown rules under `.ai.local/rules/*.md` are read by the agent with higher priority than preset rules. Living gotchas live in `.ai.local/conventions.md`.
 
-Authoring guide: `docs/LOCAL-OVERLAY.md` in the `@bonesofspring/ai-rules` package. The `ai-local-overlay` rule (always-on for Cursor, on-demand for Claude) is the mechanism; this `MANDATORY` section is the reinforcement.
+On every turn, probe `ls -la .ai.local`, apply `.ai.local/rules/*.md` and `.ai.local/conventions.md`, and acknowledge `Using .ai.local: <rule-name>`. Authoring guide: `docs/LOCAL-OVERLAY.md` in the `@bonesofspring/ai-rules` package. The `ai-local-overlay` rule is always-on on Cursor and session-start on Claude (no `paths:`). Mavis and OpenCode have no native `alwaysApply`; this section plus the platform entry's essential-rules list is the reinforcement.

package/presets/claude/ios-swift/hooks/README.md

@@ -5,12 +5,13 @@
 | `chain-team-phases.sh` | Pipeline chaining after subagent stop (`TEAM_ROOT=.ai.local/team`) |
 | `guard-shell-command.sh` | Destructive git / package-manager guard; **allows** `xcodebuild` / `simctl` / `xcrun` |
 
-Claude Code may not use Cursor `hooks.json`. Wire scripts per project docs when enabling agent-team auto-chain.
+No `hooks.json`. Default chain and shell guard are registered in `.claude/settings.json` (see **Shipped wiring**). Cookbook scripts in `hooks/examples/` stay unwired; keep stack-safe recipes (this preset: **ios-swift**).
 
-**No `hooks.json` in Claude preset** (platform limit — same as next Claude).
+## Shipped wiring (Claude Code settings)
 
-## Optional cookbook
+`.claude/settings.json` `hooks` (https://code.claude.com/docs/en/hooks) registers:
 
-Example scripts live in `hooks/examples/` (secret-guard, format-edited, test-on-save). They are **not** auto-enabled.
+- `PreToolUse` matcher `Bash` → `guard-shell-command.sh` (reads `tool_input.command`; emits `permissionDecision` `ask` or `allow`)
+- `SubagentStop` → `chain-team-phases.sh` (kebab-case `agent_type` maps to `status: completed`; empty or non-kebab types are ignored; `stop_hook_active` does not recurse)
 
-To wire in Claude Code: copy an `.example.sh` into `hooks/`, make executable, and register per [Claude Code hooks](https://code.claude.com/docs/en/hooks) for your project. Keep stack-safe recipes (this preset: **ios-swift**). Cursor twin examples under `presets/cursor/ios-swift/hooks/examples/` are the same allowlist forks.
+There is no `hooks.json`. Cookbook scripts under `hooks/examples/` stay unwired. A hook crash is not a deny (Cursor `failClosed` has no Claude field); `ask` is the supported review decision.

package/presets/claude/ios-swift/hooks/chain-team-phases.sh

@@ -21,6 +21,24 @@ try {
   process.exit(0);
 }
 
+// Claude Code SubagentStop has hook_event_name / agent_type / stop_hook_active, not status.
+// Kebab-case agent_type (preset roles) is the completed signal. Empty or non-kebab
+// types (Claude internal agents) do not advance the pipeline. stop_hook_active
+// means this hook already continued the turn — do not recurse.
+// Manual pipes of {"status":"completed"} skip this block.
+if (hookInput.hook_event_name === 'SubagentStop') {
+  if (hookInput.stop_hook_active === true) {
+    process.stdout.write('{}');
+    process.exit(0);
+  }
+  const agentType = typeof hookInput.agent_type === 'string' ? hookInput.agent_type : '';
+  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(agentType)) {
+    process.stdout.write('{}');
+    process.exit(0);
+  }
+  if (hookInput.status == null) hookInput.status = 'completed';
+}
+
 if (hookInput.status !== 'completed') {
   process.stdout.write('{}');
   process.exit(0);

package/presets/claude/ios-swift/hooks/examples/README.md

@@ -10,6 +10,8 @@ Optional scripts under `hooks/examples/`. **Not** referenced from default `hooks
 
 ## Wiring (Claude Code)
 
+Default `.claude/settings.json` already registers `guard-shell-command.sh` on `PreToolUse` (matcher `Bash`) and `chain-team-phases.sh` on `SubagentStop`. Cookbook scripts are not in that default set.
+
 Claude Code has no preset `hooks.json`; hooks are registered in `.claude/settings.json` and fire on events such as `PreToolUse`, `PostToolUse`, and `Stop`.
 
 1. Copy an example into `hooks/` (drop `.example` suffix), e.g. `cp hooks/examples/secret-guard.example.sh hooks/secret-guard.sh`.

package/presets/claude/ios-swift/hooks/guard-shell-command.sh

@@ -19,20 +19,43 @@ try {
   process.exit(0);
 }
 
-const command = String(event.command || event.input?.command || '');
-if (!command.trim()) {
-  process.stdout.write('{ "permission": "allow" }');
-  process.exit(0);
-}
+const claudePreTool = event.hook_event_name === 'PreToolUse';
+const command = String(
+  event.command
+  || (event.input && event.input.command)
+  || (event.tool_input && event.tool_input.command)
+  || '',
+);
 
-function out(permission, userMessage, agentMessage) {
+function out(permission, userMessage) {
+  if (claudePreTool) {
+    const decision = permission === 'ask' || permission === 'deny' ? permission : 'allow';
+    const hookSpecificOutput = {
+      hookEventName: 'PreToolUse',
+      permissionDecision: decision,
+    };
+    if (userMessage && decision !== 'allow') {
+      hookSpecificOutput.permissionDecisionReason = userMessage;
+    }
+    process.stdout.write(JSON.stringify({ hookSpecificOutput }));
+    return;
+  }
+  if (!userMessage) {
+    process.stdout.write('{ "permission": "allow" }');
+    return;
+  }
   process.stdout.write(JSON.stringify({
     permission,
     user_message: userMessage,
-    agent_message: agentMessage || userMessage,
+    agent_message: userMessage,
   }));
 }
 
+if (!command.trim()) {
+  out('allow');
+  process.exit(0);
+}
+
 const dangerousGit = /\bgit\s+(reset\s+--hard|clean\s+-[^\n]*f|push\s+--force|push\s+-f|checkout\s+--\s+)/;
 if (dangerousGit.test(command)) {
   out(
@@ -61,7 +84,7 @@ if (!expected && fs.existsSync('package.json')) {
 }
 
 if (!expected) {
-  process.stdout.write('{ "permission": "allow" }');
+  out('allow');
   process.exit(0);
 }
 
@@ -75,5 +98,5 @@ if (used && used !== expected) {
   process.exit(0);
 }
 
-process.stdout.write('{ "permission": "allow" }');
+out('allow');
 NODE

package/presets/claude/ios-swift/rules/README.md

@@ -13,7 +13,7 @@ In Claude Code all `.md` files under `rules/` are **discovered recursively**. Bo
 
 ## Loading budget
 
-- **Session-start (no `paths:`):** 3–5 — `ios-app-core`, `boundaries`, `code-quality` (≤200 body lines total)
+- **Session-start (no `paths:`):** 3–5 — `ios-app-core`, `boundaries`, `code-quality` (≤200 body lines total), `ai-local-overlay`
 - **Everything else** — with `paths:` (commands/team/agents and/or Feature/Swift globs)
 - **Soft twin depth:** domain rules ≥15 body lines; thin aliases (`agent-team-intake`, `technical-retro`) may be shorter (as in next)
 

package/presets/claude/ios-swift/rules/tooling-and-review/ai-local-overlay.md

@@ -1,10 +1,5 @@
 ---
 description: Local overlay from .ai.local/ (consumer-owned rules with priority over preset rules) — MANDATORY
-paths:
-  - "**/.ai.local/**"
-  - "**/AGENTS.md"
-  - "**/CLAUDE.md"
-alwaysApply: false
 impact: CRITICAL
 ---
 

package/presets/claude/ios-swift/rules/tooling-and-review/preset-pr-checklist.md

@@ -30,7 +30,7 @@ Checklist for PRs that touch `packages/ai-rules/presets/**` (and dogfood `.curso
 - [ ] **README:** stack `rules/README.md` core→stack mapping / catalog updated if stems added
 - [ ] **CHANGELOG / package README:** note when public preset paths or install surface change
 - [ ] **i18n anchors:** kept-marked Cyrillic fragments in `tests-unit.md(c)` stay consistent with their English counterparts. Run `packages/ai-rules/scripts/check-preset-i18n.sh`.
-- [ ] **Dogfood:** run `packages/ai-rules/scripts/sync-dogfood-cursor.sh` (and `sync-dogfood-mavis.sh` / `sync-dogfood-opencode.sh` when those platforms changed), or document an intentional skip, when maintaining this monorepo
+- [ ] **Dogfood:** run `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-claude.sh`, `sync-dogfood-mavis.sh`, and `sync-dogfood-opencode.sh` when those platforms changed, or document an intentional skip, when maintaining this monorepo
 - [ ] **shared-core drift:** for embed-mode stems, run `packages/ai-rules/scripts/check-shared-core-drift.sh` (or document intentional fork)
 
 ## Pointers
@@ -40,6 +40,6 @@ Checklist for PRs that touch `packages/ai-rules/presets/**` (and dogfood `.curso
 - Budget: `preset-token-budget`
 - Leakage: `preset-no-cross-stack-leakage`
 - Validation: stack `agents/build-verifier.md` → preset-structure section
-- Dogfood scripts: `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-mavis.sh`, `sync-dogfood-opencode.sh`
+- Dogfood scripts: `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-claude.sh`, `sync-dogfood-mavis.sh`, `sync-dogfood-opencode.sh`
 - Drift script: `packages/ai-rules/scripts/check-shared-core-drift.sh`
 - Orchestrator: when editing presets, load this checklist + twin-sync

package/presets/claude/ios-swift/settings.json

@@ -6,5 +6,28 @@
       "Bash(git push *)"
     ],
     "ask": []
+  },
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/guard-shell-command.sh"
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/chain-team-phases.sh"
+          }
+        ]
+      }
+    ]
   }
 }

package/presets/claude/java/CLAUDE.md

@@ -4,7 +4,8 @@ Preset for Java backends using ports & adapters (Spring Boot default).
 
 **Repo-root agents:** see [`AGENTS.md`](../../AGENTS.md) at the project root.
 
-- Session-start: `java-app-core`, `architecture/boundaries`, `code-quality` (3–5).
+- Session-start: `java-app-core`, `architecture/boundaries`, `code-quality`, `ai-local-overlay` (3–5).
+- **Local overlay (session-start):** `ai-local-overlay` has no `paths:` and counts in the 3–5 budget. On every turn, probe `ls -la .ai.local`, apply `.ai.local/rules/*.md` and `.ai.local/conventions.md`, and acknowledge `Using .ai.local: <rule-name>`. Guide: `docs/LOCAL-OVERLAY.md`.
 - Delivery: `architecture/feature-delivery.md` + skill `feature-delivery`.
 - After Java edits: `tooling-and-review/post-change-test.md` (+ `java-tooling`).
 - Integration tests: agents `integration-test-*` + skill `integration-testing` (never Playwright/XCUITest).
@@ -39,3 +40,4 @@ Init: `npx @bonesofspring/ai-rules init claude --preset java` (also copies `REPO
   `git commit/push deny`; JS stacks also `npx jest* deny` and `npm/npx/pnpm/bun`
   ask). Re-init overwrites the file (consumer can edit afterwards); mirror
   with root `AGENTS.md` if you change the harness.
+- **Pipeline hooks:** `.claude/settings.json` `hooks` wires `guard-shell-command.sh` (`PreToolUse` / `Bash`, `permissionDecision` `ask` or `allow`) and `chain-team-phases.sh` (`SubagentStop` for kebab-case `agent_type`). See `hooks/README.md`. No `hooks.json`.

package/presets/claude/java/REPO_AGENTS.md

@@ -69,4 +69,4 @@ A `.ai.local/` directory MAY exist at the repo root or at any nesting depth in m
 
 Plain markdown rules under `.ai.local/rules/*.md` are read by the agent with higher priority than preset rules. Living gotchas live in `.ai.local/conventions.md`.
 
-Authoring guide: `docs/LOCAL-OVERLAY.md` in the `@bonesofspring/ai-rules` package. The `ai-local-overlay` rule (always-on for Cursor, on-demand for Claude) is the mechanism; this `MANDATORY` section is the reinforcement.
+On every turn, probe `ls -la .ai.local`, apply `.ai.local/rules/*.md` and `.ai.local/conventions.md`, and acknowledge `Using .ai.local: <rule-name>`. Authoring guide: `docs/LOCAL-OVERLAY.md` in the `@bonesofspring/ai-rules` package. The `ai-local-overlay` rule is always-on on Cursor and session-start on Claude (no `paths:`). Mavis and OpenCode have no native `alwaysApply`; this section plus the platform entry's essential-rules list is the reinforcement.

package/presets/claude/java/hooks/README.md

@@ -5,12 +5,13 @@
 | `chain-team-phases.sh` | Pipeline chaining after subagent stop (`TEAM_ROOT=.ai.local/team`) |
 | `guard-shell-command.sh` | Destructive git / JS package-manager guard; **allows** `mvn test / ./gradlew test` / `compiler/IDE inspections` / `configured static analysis` / `repo static analysis` |
 
-Claude Code may not use Cursor `hooks.json`. Wire scripts per project docs when enabling agent-team auto-chain.
+No `hooks.json`. Default chain and shell guard are registered in `.claude/settings.json` (see **Shipped wiring**). Cookbook scripts in `hooks/examples/` stay unwired; keep stack-safe recipes (this preset: **java**).
 
-**No `hooks.json` in Claude preset** (platform limit — same as next Claude).
+## Shipped wiring (Claude Code settings)
 
-## Optional cookbook
+`.claude/settings.json` `hooks` (https://code.claude.com/docs/en/hooks) registers:
 
-Example scripts live in `hooks/examples/` (secret-guard, format-edited, test-on-save). They are **not** auto-enabled.
+- `PreToolUse` matcher `Bash` → `guard-shell-command.sh` (reads `tool_input.command`; emits `permissionDecision` `ask` or `allow`)
+- `SubagentStop` → `chain-team-phases.sh` (kebab-case `agent_type` maps to `status: completed`; empty or non-kebab types are ignored; `stop_hook_active` does not recurse)
 
-To wire in Claude Code: copy an `.example.sh` into `hooks/`, make executable, and register per [Claude Code hooks](https://code.claude.com/docs/en/hooks) for your project. Keep stack-safe recipes (this preset: **java**). Cursor twin examples under `presets/cursor/java/hooks/examples/` are the same allowlist forks.
+There is no `hooks.json`. Cookbook scripts under `hooks/examples/` stay unwired. A hook crash is not a deny (Cursor `failClosed` has no Claude field); `ask` is the supported review decision.

package/presets/claude/java/hooks/chain-team-phases.sh

@@ -22,6 +22,24 @@ try {
   process.exit(0);
 }
 
+// Claude Code SubagentStop has hook_event_name / agent_type / stop_hook_active, not status.
+// Kebab-case agent_type (preset roles) is the completed signal. Empty or non-kebab
+// types (Claude internal agents) do not advance the pipeline. stop_hook_active
+// means this hook already continued the turn — do not recurse.
+// Manual pipes of {"status":"completed"} skip this block.
+if (hookInput.hook_event_name === 'SubagentStop') {
+  if (hookInput.stop_hook_active === true) {
+    process.stdout.write('{}');
+    process.exit(0);
+  }
+  const agentType = typeof hookInput.agent_type === 'string' ? hookInput.agent_type : '';
+  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(agentType)) {
+    process.stdout.write('{}');
+    process.exit(0);
+  }
+  if (hookInput.status == null) hookInput.status = 'completed';
+}
+
 if (hookInput.status !== 'completed') {
   process.stdout.write('{}');
   process.exit(0);

package/presets/claude/java/hooks/examples/README.md

@@ -10,6 +10,8 @@ Optional scripts under `hooks/examples/`. **Not** referenced from default `hooks
 
 ## Wiring (Claude Code)
 
+Default `.claude/settings.json` already registers `guard-shell-command.sh` on `PreToolUse` (matcher `Bash`) and `chain-team-phases.sh` on `SubagentStop`. Cookbook scripts are not in that default set.
+
 Claude Code has no preset `hooks.json`; hooks are registered in `.claude/settings.json` and fire on events such as `PreToolUse`, `PostToolUse`, and `Stop`.
 
 1. Copy an example into `hooks/` (drop `.example` suffix), e.g. `cp hooks/examples/secret-guard.example.sh hooks/secret-guard.sh`.

package/presets/claude/java/hooks/guard-shell-command.sh

@@ -20,20 +20,43 @@ try {
   process.exit(0);
 }
 
-const command = String(event.command || event.input?.command || '');
-if (!command.trim()) {
-  process.stdout.write('{ "permission": "allow" }');
-  process.exit(0);
-}
+const claudePreTool = event.hook_event_name === 'PreToolUse';
+const command = String(
+  event.command
+  || (event.input && event.input.command)
+  || (event.tool_input && event.tool_input.command)
+  || '',
+);
 
-function out(permission, userMessage, agentMessage) {
+function out(permission, userMessage) {
+  if (claudePreTool) {
+    const decision = permission === 'ask' || permission === 'deny' ? permission : 'allow';
+    const hookSpecificOutput = {
+      hookEventName: 'PreToolUse',
+      permissionDecision: decision,
+    };
+    if (userMessage && decision !== 'allow') {
+      hookSpecificOutput.permissionDecisionReason = userMessage;
+    }
+    process.stdout.write(JSON.stringify({ hookSpecificOutput }));
+    return;
+  }
+  if (!userMessage) {
+    process.stdout.write('{ "permission": "allow" }');
+    return;
+  }
   process.stdout.write(JSON.stringify({
     permission,
     user_message: userMessage,
-    agent_message: agentMessage || userMessage,
+    agent_message: userMessage,
   }));
 }
 
+if (!command.trim()) {
+  out('allow');
+  process.exit(0);
+}
+
 const dangerousGit = /\bgit\s+(reset\s+--hard|clean\s+-[^\n]*f|push\s+--force|push\s+-f|checkout\s+--\s+)/;
 if (dangerousGit.test(command)) {
   out(
@@ -62,7 +85,7 @@ if (!expected && fs.existsSync('package.json')) {
 }
 
 if (!expected) {
-  process.stdout.write('{ "permission": "allow" }');
+  out('allow');
   process.exit(0);
 }
 
@@ -76,5 +99,5 @@ if (used && used !== expected) {
   process.exit(0);
 }
 
-process.stdout.write('{ "permission": "allow" }');
+out('allow');
 NODE

package/presets/claude/java/rules/README.md

@@ -12,7 +12,7 @@ Claude topic `.md` files are **derived** from Cursor SoT `presets/cursor/java/ru
 
 ## Loading budget
 
-- **Session-start (no `paths:`):** 3–5 — `java-app-core`, `boundaries`, `code-quality`
+- **Session-start (no `paths:`):** 3–5 — `java-app-core`, `boundaries`, `code-quality`, `ai-local-overlay`
 - All others — with `paths:`
 - **Twin depth:** domain rules target ≥15 body lines; thin aliases: `agent-team-intake`, `technical-retro`; **documented stub** (v1): `api-grpc`; `messaging-adapters` is **full** — see Cursor `presets/cursor/java/rules/README.md` Catalog (Depth column)
 

package/presets/claude/java/rules/tooling-and-review/ai-local-overlay.md

@@ -1,10 +1,5 @@
 ---
 description: Local overlay from .ai.local/ (consumer-owned rules with priority over preset rules) — MANDATORY
-paths:
-  - "**/.ai.local/**"
-  - "**/AGENTS.md"
-  - "**/CLAUDE.md"
-alwaysApply: false
 impact: CRITICAL
 ---
 

package/presets/claude/java/rules/tooling-and-review/preset-pr-checklist.md

@@ -30,7 +30,7 @@ Checklist for PRs that touch `packages/ai-rules/presets/**` (and dogfood `.curso
 - [ ] **README:** stack `rules/README.md` core→stack mapping / catalog updated if stems added
 - [ ] **CHANGELOG / package README:** note when public preset paths or install surface change
 - [ ] **i18n anchors:** kept-marked Cyrillic fragments in `tests-unit.md(c)` stay consistent with their English counterparts. Run `packages/ai-rules/scripts/check-preset-i18n.sh`.
-- [ ] **Dogfood:** run `packages/ai-rules/scripts/sync-dogfood-cursor.sh` (and `sync-dogfood-mavis.sh` / `sync-dogfood-opencode.sh` when those platforms changed), or document an intentional skip, when maintaining this monorepo
+- [ ] **Dogfood:** run `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-claude.sh`, `sync-dogfood-mavis.sh`, and `sync-dogfood-opencode.sh` when those platforms changed, or document an intentional skip, when maintaining this monorepo
 - [ ] **shared-core drift:** for embed-mode stems, run `packages/ai-rules/scripts/check-shared-core-drift.sh` (or document intentional fork)
 
 ## Pointers
@@ -40,6 +40,6 @@ Checklist for PRs that touch `packages/ai-rules/presets/**` (and dogfood `.curso
 - Budget: `preset-token-budget`
 - Leakage: `preset-no-cross-stack-leakage`
 - Validation: stack `agents/build-verifier.md` → preset-structure section
-- Dogfood scripts: `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-mavis.sh`, `sync-dogfood-opencode.sh`
+- Dogfood scripts: `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-claude.sh`, `sync-dogfood-mavis.sh`, `sync-dogfood-opencode.sh`
 - Drift script: `packages/ai-rules/scripts/check-shared-core-drift.sh`
 - Orchestrator: when editing presets, load this checklist + twin-sync

package/presets/claude/java/settings.json

@@ -6,5 +6,28 @@
       "Bash(git push *)"
     ],
     "ask": []
+  },
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/guard-shell-command.sh"
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/chain-team-phases.sh"
+          }
+        ]
+      }
+    ]
   }
 }

package/presets/claude/mcp-ts/CLAUDE.md

@@ -4,7 +4,8 @@ Preset for authoring TypeScript MCP servers with `@modelcontextprotocol/sdk`.
 
 **Repo-root agents:** see [`AGENTS.md`](../../AGENTS.md) at the project root.
 
-- Session-start: `mcp-ts-app-core`, `architecture/mcp-server-boundaries`, `code-quality` (3–5).
+- Session-start: `mcp-ts-app-core`, `architecture/mcp-server-boundaries`, `code-quality`, `ai-local-overlay` (3–5).
+- **Local overlay (session-start):** `ai-local-overlay` has no `paths:` and counts in the 3–5 budget. On every turn, probe `ls -la .ai.local`, apply `.ai.local/rules/*.md` and `.ai.local/conventions.md`, and acknowledge `Using .ai.local: <rule-name>`. Guide: `docs/LOCAL-OVERLAY.md`.
 - Delivery: `architecture/feature-delivery.md` + skill `feature-delivery`.
 - After TS edits: `tooling-and-review/post-change-test.md`.
 - Contract checks: `mcp-contract-testing` rule (Phase 1: feature-developer owns verification).
@@ -23,3 +24,4 @@ Init: `npx @bonesofspring/ai-rules init claude --preset mcp-ts` (also copies `RE
   `git commit/push deny`; JS stacks also `npx jest* deny` and `npm/npx/pnpm/bun`
   ask). Re-init overwrites the file (consumer can edit afterwards); mirror
   with root `AGENTS.md` if you change the harness.
+- **Pipeline hooks:** `.claude/settings.json` `hooks` wires `guard-shell-command.sh` (`PreToolUse` / `Bash`, `permissionDecision` `ask` or `allow`) and `chain-team-phases.sh` (`SubagentStop` for kebab-case `agent_type`). See `hooks/README.md`. No `hooks.json`.

package/presets/claude/mcp-ts/REPO_AGENTS.md

@@ -72,4 +72,4 @@ A `.ai.local/` directory MAY exist at the repo root or at any nesting depth in m
 
 Plain markdown rules under `.ai.local/rules/*.md` are read by the agent with higher priority than preset rules. Living gotchas live in `.ai.local/conventions.md`.
 
-Authoring guide: `docs/LOCAL-OVERLAY.md` in the `@bonesofspring/ai-rules` package. The `ai-local-overlay` rule (always-on for Cursor, on-demand for Claude) is the mechanism; this `MANDATORY` section is the reinforcement.
+On every turn, probe `ls -la .ai.local`, apply `.ai.local/rules/*.md` and `.ai.local/conventions.md`, and acknowledge `Using .ai.local: <rule-name>`. Authoring guide: `docs/LOCAL-OVERLAY.md` in the `@bonesofspring/ai-rules` package. The `ai-local-overlay` rule is always-on on Cursor and session-start on Claude (no `paths:`). Mavis and OpenCode have no native `alwaysApply`; this section plus the platform entry's essential-rules list is the reinforcement.

package/presets/claude/mcp-ts/hooks/README.md

@@ -5,8 +5,13 @@
 | `guard-shell-command.sh` | Destructive git / JS package-manager mismatch; allows npm/npx/node/tsc |
 | `chain-team-phases.sh` | Auto-chain pipeline steps on `subagentStop` (Phase 1: build-verifier, security-reviewer; **no** `contract-test-*`) |
 
-Claude: register hooks per Claude Code project conventions.
+No `hooks.json`. Default chain and shell guard are registered in `.claude/settings.json` (see **Shipped wiring**). Cookbook scripts in `hooks/examples/` stay unwired.
 
-## Optional cookbook
+## Shipped wiring (Claude Code settings)
 
-See `hooks/examples/README.md` — secret-guard / format-edited / test-on-save. **Not** in default `hooks.json`.
+`.claude/settings.json` `hooks` (https://code.claude.com/docs/en/hooks) registers:
+
+- `PreToolUse` matcher `Bash` → `guard-shell-command.sh` (reads `tool_input.command`; emits `permissionDecision` `ask` or `allow`)
+- `SubagentStop` → `chain-team-phases.sh` (kebab-case `agent_type` maps to `status: completed`; empty or non-kebab types are ignored; `stop_hook_active` does not recurse)
+
+There is no `hooks.json`. Cookbook scripts under `hooks/examples/` stay unwired. A hook crash is not a deny (Cursor `failClosed` has no Claude field); `ask` is the supported review decision.

package/presets/claude/mcp-ts/hooks/chain-team-phases.sh

@@ -23,6 +23,24 @@ try {
   process.exit(0);
 }
 
+// Claude Code SubagentStop has hook_event_name / agent_type / stop_hook_active, not status.
+// Kebab-case agent_type (preset roles) is the completed signal. Empty or non-kebab
+// types (Claude internal agents) do not advance the pipeline. stop_hook_active
+// means this hook already continued the turn — do not recurse.
+// Manual pipes of {"status":"completed"} skip this block.
+if (hookInput.hook_event_name === 'SubagentStop') {
+  if (hookInput.stop_hook_active === true) {
+    process.stdout.write('{}');
+    process.exit(0);
+  }
+  const agentType = typeof hookInput.agent_type === 'string' ? hookInput.agent_type : '';
+  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(agentType)) {
+    process.stdout.write('{}');
+    process.exit(0);
+  }
+  if (hookInput.status == null) hookInput.status = 'completed';
+}
+
 if (hookInput.status !== 'completed') {
   process.stdout.write('{}');
   process.exit(0);

package/presets/claude/mcp-ts/hooks/examples/README.md

@@ -9,3 +9,8 @@ Optional cookbook scripts — **not** wired into default `hooks.json`.
 | `test-on-save.example.sh` | Run scoped tests after edits |
 
 Adapt commands to the repository package manager (`mcp-ts-tooling`).
+
+
+## Wiring (Claude Code)
+
+Default `.claude/settings.json` already registers `guard-shell-command.sh` on `PreToolUse` (matcher `Bash`) and `chain-team-phases.sh` on `SubagentStop`. The cookbook scripts above are not in that default set. There is no `hooks.json`.

package/presets/claude/mcp-ts/hooks/guard-shell-command.sh

@@ -19,20 +19,43 @@ try {
   process.exit(0);
 }
 
-const command = String(event.command || event.input?.command || '');
-if (!command.trim()) {
-  process.stdout.write('{ "permission": "allow" }');
-  process.exit(0);
-}
+const claudePreTool = event.hook_event_name === 'PreToolUse';
+const command = String(
+  event.command
+  || (event.input && event.input.command)
+  || (event.tool_input && event.tool_input.command)
+  || '',
+);
 
-function out(permission, userMessage, agentMessage) {
+function out(permission, userMessage) {
+  if (claudePreTool) {
+    const decision = permission === 'ask' || permission === 'deny' ? permission : 'allow';
+    const hookSpecificOutput = {
+      hookEventName: 'PreToolUse',
+      permissionDecision: decision,
+    };
+    if (userMessage && decision !== 'allow') {
+      hookSpecificOutput.permissionDecisionReason = userMessage;
+    }
+    process.stdout.write(JSON.stringify({ hookSpecificOutput }));
+    return;
+  }
+  if (!userMessage) {
+    process.stdout.write('{ "permission": "allow" }');
+    return;
+  }
   process.stdout.write(JSON.stringify({
     permission,
     user_message: userMessage,
-    agent_message: agentMessage || userMessage,
+    agent_message: userMessage,
   }));
 }
 
+if (!command.trim()) {
+  out('allow');
+  process.exit(0);
+}
+
 const dangerousGit = /\bgit\s+(reset\s+--hard|clean\s+-[^\n]*f|push\s+--force|push\s+-f|checkout\s+--\s+)/;
 if (dangerousGit.test(command)) {
   out(
@@ -61,7 +84,7 @@ if (!expected && fs.existsSync('package.json')) {
 }
 
 if (!expected) {
-  process.stdout.write('{ "permission": "allow" }');
+  out('allow');
   process.exit(0);
 }
 
@@ -75,5 +98,5 @@ if (used && used !== expected) {
   process.exit(0);
 }
 
-process.stdout.write('{ "permission": "allow" }');
+out('allow');
 NODE

package/presets/claude/mcp-ts/rules/README.md

@@ -12,7 +12,7 @@ Claude topic `.md` files are **derived** from Cursor SoT `presets/cursor/mcp-ts/
 
 ## Loading budget
 
-- **Session-start (no `paths:`):** 3–5 — `mcp-ts-app-core`, `mcp-server-boundaries`, `code-quality`
+- **Session-start (no `paths:`):** 3–5 — `mcp-ts-app-core`, `mcp-server-boundaries`, `code-quality`, `ai-local-overlay`
 - All others — with `paths:`
 - **Twin depth:** domain rules target ≥15 body lines; thin aliases: `agent-team-intake`, `technical-retro`
 

package/presets/claude/mcp-ts/rules/tooling-and-review/ai-local-overlay.md

@@ -1,10 +1,5 @@
 ---
 description: Local overlay from .ai.local/ (consumer-owned rules with priority over preset rules) — MANDATORY
-paths:
-  - "**/.ai.local/**"
-  - "**/AGENTS.md"
-  - "**/CLAUDE.md"
-alwaysApply: false
 impact: CRITICAL
 ---
 

package/presets/claude/mcp-ts/rules/tooling-and-review/preset-pr-checklist.md

@@ -30,7 +30,7 @@ Checklist for PRs that touch `packages/ai-rules/presets/**` (and dogfood `.curso
 - [ ] **README:** stack `rules/README.md` core→stack mapping / catalog updated if stems added
 - [ ] **CHANGELOG / package README:** note when public preset paths or install surface change
 - [ ] **i18n anchors:** kept-marked Cyrillic fragments in `tests-unit.md(c)` stay consistent with their English counterparts. Run `packages/ai-rules/scripts/check-preset-i18n.sh`.
-- [ ] **Dogfood:** run `packages/ai-rules/scripts/sync-dogfood-cursor.sh` (and `sync-dogfood-mavis.sh` / `sync-dogfood-opencode.sh` when those platforms changed), or document an intentional skip, when maintaining this monorepo
+- [ ] **Dogfood:** run `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-claude.sh`, `sync-dogfood-mavis.sh`, and `sync-dogfood-opencode.sh` when those platforms changed, or document an intentional skip, when maintaining this monorepo
 - [ ] **shared-core drift:** for embed-mode stems, run `packages/ai-rules/scripts/check-shared-core-drift.sh` (or document intentional fork)
 
 ## Pointers
@@ -40,6 +40,6 @@ Checklist for PRs that touch `packages/ai-rules/presets/**` (and dogfood `.curso
 - Budget: `preset-token-budget`
 - Leakage: `preset-no-cross-stack-leakage`
 - Validation: stack `agents/build-verifier.md` → preset-structure section
-- Dogfood scripts: `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-mavis.sh`, `sync-dogfood-opencode.sh`
+- Dogfood scripts: `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-claude.sh`, `sync-dogfood-mavis.sh`, `sync-dogfood-opencode.sh`
 - Drift script: `packages/ai-rules/scripts/check-shared-core-drift.sh`
 - Orchestrator: when editing presets, load this checklist + twin-sync