@claude-code-mastery/starter-kit 1.1.0 → 1.2.1

package/.claude/.starter-kit/profiles/clean.md

@@ -74,7 +74,13 @@ project/
 2. **Run the batch scaffold script** — this replaces all individual file creation with a single command:
 
 ```bash
-bash "$(pwd)/scripts/scaffold-clean.sh" "$PROJECT_PATH" "$PROJECT_NAME" "$(pwd)"
+# Resolve the kit source: npm global install takes priority over CWD
+if [ -f ~/.claude/starter-kit-source-path ]; then
+  KIT=$(cat ~/.claude/starter-kit-source-path)
+else
+  KIT="$(pwd)"
+fi
+bash "$KIT/scripts/scaffold-clean.sh" "$PROJECT_PATH" "$PROJECT_NAME" "$KIT"
 ```
 
 The script handles ALL of the following in one execution (~100ms) with a progress indicator:

package/.claude/.starter-kit/profiles/go.md

@@ -394,7 +394,7 @@ When creating a Go project, the CLAUDE.md MUST include these Go-specific rules:
 8. Create `Dockerfile` (multi-stage with scratch, using template above)
 9. Create `.golangci.yml` (using template above)
 10. Create Go-specific `CLAUDE.md` (with Go rules above + universal security rules)
-11. Copy `.claude/` contents from starter kit — only commands with `scope: project` in frontmatter (skills, hooks, settings.json copied in full)
+11. **If NOT using npm global install** (`~/.claude/starter-kit-source-path` does not exist): Copy `.claude/` contents from starter kit - only commands with `scope: project` in frontmatter (skills, hooks, settings.json copied in full). **If npm global install is active**: skip this step - commands/skills/hooks already live in `~/.claude/` globally.
 12. Create `project-docs/` templates (ARCHITECTURE.md, INFRASTRUCTURE.md, DECISIONS.md)
 13. Create `.env`, `.env.example`, `.gitignore` (Go-specific), `.dockerignore`
 14. Create `CLAUDE.local.md` template

package/.claude/.starter-kit/profiles/node.md

@@ -81,13 +81,22 @@ Based on answers, scaffold the project.
 **If the resolved choices exactly match the default profile** (fullstack + next + mongo + tailwind + docker + pnpm), use the batch scaffold script for maximum speed:
 
 ```bash
-bash "$(pwd)/scripts/scaffold-default.sh" "$PROJECT_PATH" "$PROJECT_NAME" "$(pwd)"
+# Resolve the kit source: npm global install takes priority over CWD
+if [ -f ~/.claude/starter-kit-source-path ]; then
+  KIT=$(cat ~/.claude/starter-kit-source-path)
+else
+  KIT="$(pwd)"
+fi
+bash "$KIT/scripts/scaffold-default.sh" "$PROJECT_PATH" "$PROJECT_NAME" "$KIT"
 ```
 
 The script handles ALL of the following in one execution with progress indicators:
-- Creates all directories (src/, .claude/, project-docs/, tests/, scripts/, .github/)
-- Copies project-scoped commands, all skills, and all hooks
-- Writes settings.json (full 9-hook config)
+- Creates all directories (src/, project-docs/, tests/, scripts/, .github/)
+- For clone users: copies project-scoped commands, all skills, and all hooks into the project's .claude/
+- For npm users: skips local .claude/ copy (commands/skills/hooks already live globally in ~/.claude/)
+- Writes settings.json (10-hook config) for clone users only
+- Installs StrictDB (npm package) + query system
+- Creates Next.js app structure (layout, page, API health route, instrumentation)
 - Installs StrictDB (npm package) + query system
 - Creates Next.js app structure (layout, page, API health route, instrumentation)
 - Creates TypeScript, Next.js, Tailwind, PostCSS, Vitest, Playwright configs

package/.claude/.starter-kit/profiles/python.md

@@ -415,7 +415,7 @@ When creating a Python project, the CLAUDE.md MUST include these Python-specific
 10. Create `Makefile` with dev, test, lint, format, run targets
 11. Create `Dockerfile` (multi-stage with python:3.12-slim)
 12. Create Python-specific CLAUDE.md (with Python rules + universal security rules)
-13. Copy `.claude/` contents from starter kit — only commands with `scope: project` in frontmatter (skills, hooks, settings.json copied in full)
+13. **If NOT using npm global install** (`~/.claude/starter-kit-source-path` does not exist): Copy `.claude/` contents from starter kit - only commands with `scope: project` in frontmatter (skills, hooks, settings.json copied in full). **If npm global install is active**: skip this step - commands/skills/hooks already live in `~/.claude/` globally.
 14. Create `project-docs/` templates (ARCHITECTURE.md, INFRASTRUCTURE.md, DECISIONS.md)
 15. Create `.env`, `.env.example`, `.gitignore` (Python-specific), `.dockerignore`
 16. Create `CLAUDE.local.md` template

package/.claude/skills/mongodb-rules/SKILL.md

@@ -59,4 +59,7 @@ Non-negotiable for this codebase. From production, not preference.
 
 ## Schema
 
-- **Collections enforce no structure by default.** Add a `$jsonSchema` validator as a collection stabilizes and more code depends on its shape. Roll out safely: `validationAction: "warn"` to observe first, then `error`; `validationLevel: "moderate"` to spare existing nonconforming documents.
+Collections enforce no structure by default, so validate in two layers.
+
+- **Parse before every write.** Validate each document against its Zod schema right before it hits the database, so a malformed shape never lands. The schema itself isn't Mongo-specific, it's the same contract the API and frontend use, see the `schema-source-of-truth` skill for defining it once and deriving every layer from one base.
+- **Keep a `$jsonSchema` collection validator as the floor.** Zod only guards writes that go through your app, so the DB validator is the last line that also catches mongosh, scripts, and other services. Add it as a collection stabilizes and more code depends on its shape. Roll out safely: `validationAction: "warn"` to observe first, then `error`; `validationLevel: "moderate"` to spare existing nonconforming documents.

package/.claude/skills/schema-source-of-truth/SKILL.md

@@ -0,0 +1,50 @@
+---
+name: schema-source-of-truth
+description: One canonical Zod schema per entity, reused across the stack instead of redeclared at each layer. Use whenever defining or changing a data shape, a TypeScript type or interface for an entity, an API request/response validator, an Express body/query/params check, a frontend form validator, or a DB document shape. Catches the same-entity-defined-four-times drift. TypeScript-first, derive types and per-layer variants from one base instead of hand-writing parallel copies.
+when_to_use: |
+  - Defining or editing an entity's shape (a User, Order, etc.) in types, an API, a form, or the DB
+  - Writing API request/response validation or Express middleware that checks req.body / query / params
+  - Writing a frontend form validator, or a TypeScript interface/type for data that also lives on the backend
+  - Any moment you're about to write a second definition of a shape that already exists somewhere
+  - Do NOT use for one-off internal types with no cross-layer counterpart
+---
+
+# Schema as a Single Source of Truth
+
+A data entity should be defined once, as a Zod schema, and everything else derived from it. The failure pattern to kill: declaring the same entity separately at each layer, a frontend `interface User`, a backend `interface User`, a hand-written API validator, and a manual Mongo `$jsonSchema`. Four shapes for one entity, kept in sync by hand, guaranteed to drift the first time a field is added or renamed.
+
+## One schema per entity, derive the rest
+
+Define the canonical schema once and generate every other representation from it:
+
+- **TypeScript type:** `type User = z.infer<typeof UserSchema>`. Never hand-write an `interface` that parallels a schema, infer it so it can't fall out of sync.
+- **API validation:** parse `req.body` / `req.query` / `req.params` through the schema in middleware. `safeParse` and return 400 on failure, no field-by-field `if` checks.
+- **Frontend forms:** the same schema drives form validation (`zodResolver` with react-hook-form), so client and server reject the same inputs by the same rules.
+- **Pre-write guard:** parse before writing to the DB. See the `mongodb-rules` skill for the Mongo-specific parse-before-write and `$jsonSchema` floor.
+- **OpenAPI and `$jsonSchema`:** generate them from the schema (`zod-to-openapi`, `zod-to-json-schema`) rather than maintaining them by hand.
+
+Zod is TypeScript-first with zero runtime dependencies, so this costs one small library and removes every duplicated definition.
+
+## One base, many variants (they are not identical)
+
+"Same schema everywhere" is the goal, but a create payload is not the stored document and a response is not the request, so don't pretend they're one object. Model it honestly: one base schema, with per-layer variants derived from it, sharing a single origin while differing where they genuinely must.
+
+```typescript
+const UserSchema = z.object({
+  _id: z.string(),
+  email: z.string().email(),
+  name: z.string().min(1),
+  createdAt: z.date(),
+});
+
+const CreateUser   = UserSchema.omit({ _id: true, createdAt: true }); // POST body
+const UpdateUser   = CreateUser.partial();                            // PATCH body
+const UserResponse = UserSchema.extend({ displayName: z.string() });  // adds computed field
+type User = z.infer<typeof UserSchema>;
+```
+
+Derive variants with `.omit()`, `.partial()`, `.pick()`, `.extend()`. When the base gains a field, every variant inherits it automatically, which is the entire point. A hand-copied variant is just the drift problem at smaller scale.
+
+## Make it physically shared
+
+Single source of truth only holds if there is literally one file. Put entity schemas in a shared module both sides import, a `packages/schemas` workspace, or a shared `src/schemas/` reachable by frontend and backend. If each side keeps its own copy, they diverge no matter how disciplined the intent. The shared import is the enforcement, not the convention.

package/README.md

@@ -1,6 +1,6 @@
 # @claude-code-mastery/starter-kit
 
-A Claude Code toolkit that installs 27 commands, 10 skills, 10 hooks, and scaffolding templates into Claude Code globally - so every project you open already has them available.
+A Claude Code toolkit that installs 27 commands, 11 skills, 10 hooks, and scaffolding templates into Claude Code globally - so every project you open already has them available.
 
 **Requires:** Node.js 20+ and [Claude Code](https://claude.ai/code)
 
@@ -25,7 +25,7 @@ After `init`, your `~/.claude/` directory looks like this:
 ├── starter-kit/                  <- package files live here (single source of truth)
 │   ├── commands/                 <- 27 slash commands
 │   ├── hooks/                    <- 10 lifecycle hooks
-│   ├── skills/                   <- 10 skill files
+│   ├── skills/                   <- 11 skill files
 │   └── .starter-kit/             <- scaffolding templates for /new-project
 ├── commands/
 │   ├── new-project.md  -> (symlink to starter-kit/commands/new-project.md)
@@ -84,6 +84,7 @@ Skills are expertise files Claude loads when relevant. These install automatical
 - `create-service` - scaffolding patterns for new services
 - `mcp-builder` - MCP server development patterns
 - `terminal-tui` - Ink + React TUI patterns, resize handling
+- `schema-source-of-truth` - one canonical Zod schema per entity, derived across all layers; catches the same shape defined four times drift
 
 ---
 

package/README.npm.md

@@ -1,6 +1,6 @@
 # @claude-code-mastery/starter-kit
 
-A Claude Code toolkit that installs 27 commands, 10 skills, 10 hooks, and scaffolding templates into Claude Code globally - so every project you open already has them available.
+A Claude Code toolkit that installs 27 commands, 11 skills, 10 hooks, and scaffolding templates into Claude Code globally - so every project you open already has them available.
 
 **Requires:** Node.js 20+ and [Claude Code](https://claude.ai/code)
 
@@ -25,7 +25,7 @@ After `init`, your `~/.claude/` directory looks like this:
 ├── starter-kit/                  <- package files live here (single source of truth)
 │   ├── commands/                 <- 27 slash commands
 │   ├── hooks/                    <- 10 lifecycle hooks
-│   ├── skills/                   <- 10 skill files
+│   ├── skills/                   <- 11 skill files
 │   └── .starter-kit/             <- scaffolding templates for /new-project
 ├── commands/
 │   ├── new-project.md  -> (symlink to starter-kit/commands/new-project.md)
@@ -84,6 +84,7 @@ Skills are expertise files Claude loads when relevant. These install automatical
 - `create-service` - scaffolding patterns for new services
 - `mcp-builder` - MCP server development patterns
 - `terminal-tui` - Ink + React TUI patterns, resize handling
+- `schema-source-of-truth` - one canonical Zod schema per entity, derived across all layers; catches the same shape defined four times drift
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claude-code-mastery/starter-kit",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "description": "Production-ready Claude Code starter kit — commands, hooks, skills, and agents for AI-assisted development",
   "type": "module",
   "publishConfig": {

package/scripts/scaffold-clean.sh

@@ -14,6 +14,18 @@ PROJECT_NAME="$2"
 STARTER_KIT="$3"
 REGISTRY="${HOME}/.claude/starter-kit-projects.json"
 
+# ── Global install detection ───────────────────────────────────────────────────
+# npm users: copyPackageFiles flattens .claude/* into ~/.claude/starter-kit/ directly,
+# so commands are at $STARTER_KIT/commands/ (no extra .claude/ level).
+# Clone users: content lives under $STARTER_KIT/.claude/.
+if [ -f "${HOME}/.claude/starter-kit-source-path" ]; then
+  GLOBAL_INSTALLED=true
+  CLAUDE_DIR="$STARTER_KIT"
+else
+  GLOBAL_INSTALLED=false
+  CLAUDE_DIR="$STARTER_KIT/.claude"
+fi
+
 # ── Validation ─────────────────────────────────────────────────────────────────
 if [ -d "$PROJECT_PATH" ]; then
   echo "ERROR: Directory already exists: $PROJECT_PATH"
@@ -21,7 +33,7 @@ if [ -d "$PROJECT_PATH" ]; then
   exit 1
 fi
 
-if [ ! -d "$STARTER_KIT/.claude/commands" ]; then
+if [ ! -d "$CLAUDE_DIR/commands" ]; then
   echo "ERROR: Starter kit not found at: $STARTER_KIT"
   exit 1
 fi
@@ -75,40 +87,42 @@ echo ""
 
 # ── Step 1: Create directories ─────────────────────────────────────────────────
 progress "Creating directory structure..."
-mkdir -p "$PROJECT_PATH"/.claude/{commands,skills,agents,hooks}
+if [ "$GLOBAL_INSTALLED" = "false" ]; then
+  mkdir -p "$PROJECT_PATH"/.claude/{commands,skills,agents,hooks}
+fi
 mkdir -p "$PROJECT_PATH"/project-docs
 mkdir -p "$PROJECT_PATH"/tests
 
-# ── Step 2: Copy 16 project-scoped commands ────────────────────────────────────
-progress "Copying 16 project commands..."
-for cmd in architecture commit create-api create-e2e diagram help \
-           optimize-docker progress refactor review security-check \
-           setup show-user-guide test-plan what-is-my-ai-doing worktree; do
-  cp "$STARTER_KIT/.claude/commands/${cmd}.md" "$PROJECT_PATH/.claude/commands/"
-done
-
-# ── Step 3: Copy skills, agents, hooks ─────────────────────────────────────────
-progress "Copying skills, agents, hooks..."
-cp -r "$STARTER_KIT/.claude/skills/code-review" "$PROJECT_PATH/.claude/skills/"
-cp -r "$STARTER_KIT/.claude/skills/create-service" "$PROJECT_PATH/.claude/skills/"
-cp "$STARTER_KIT/.claude/agents/code-reviewer.md" "$PROJECT_PATH/.claude/agents/"
-cp "$STARTER_KIT/.claude/agents/test-writer.md" "$PROJECT_PATH/.claude/agents/"
-cp "$STARTER_KIT/.claude/hooks/block-secrets.py" "$PROJECT_PATH/.claude/hooks/"
-cp "$STARTER_KIT/.claude/hooks/lint-on-save.sh" "$PROJECT_PATH/.claude/hooks/"
-cp "$STARTER_KIT/.claude/hooks/verify-no-secrets.sh" "$PROJECT_PATH/.claude/hooks/"
-
-# ── Step 4: Write settings.json (clean mode — 3 hooks only) ───────────────────
-progress "Writing settings.json..."
-cat > "$PROJECT_PATH/.claude/settings.json" << 'SETTINGS_EOF'
+# ── Steps 2-4: Copy Claude infrastructure (clone users only) ──────────────────
+# npm users already have commands/skills/hooks installed globally in ~/.claude/
+if [ "$GLOBAL_INSTALLED" = "false" ]; then
+  progress "Copying 16 project commands..."
+  for cmd in architecture commit create-api create-e2e diagram help \
+             optimize-docker progress refactor review security-check \
+             setup show-user-guide test-plan what-is-my-ai-doing worktree; do
+    cp "$CLAUDE_DIR/commands/${cmd}.md" "$PROJECT_PATH/.claude/commands/"
+  done
+
+  progress "Copying skills, agents, hooks..."
+  cp -r "$CLAUDE_DIR/skills/code-review" "$PROJECT_PATH/.claude/skills/"
+  cp -r "$CLAUDE_DIR/skills/create-service" "$PROJECT_PATH/.claude/skills/"
+  cp "$CLAUDE_DIR/agents/code-reviewer.md" "$PROJECT_PATH/.claude/agents/"
+  cp "$CLAUDE_DIR/agents/test-writer.md" "$PROJECT_PATH/.claude/agents/"
+  cp "$CLAUDE_DIR/hooks/block-dangerous-bash.py" "$PROJECT_PATH/.claude/hooks/"
+  cp "$CLAUDE_DIR/hooks/lint-on-save.sh" "$PROJECT_PATH/.claude/hooks/"
+  cp "$CLAUDE_DIR/hooks/verify-no-secrets.sh" "$PROJECT_PATH/.claude/hooks/"
+
+  progress "Writing settings.json..."
+  cat > "$PROJECT_PATH/.claude/settings.json" << 'SETTINGS_EOF'
 {
   "hooks": {
     "PreToolUse": [
       {
-        "matcher": "Read|Edit|Write",
+        "matcher": "Bash",
         "hooks": [
           {
             "type": "command",
-            "command": "python3 .claude/hooks/block-secrets.py"
+            "command": "python3 .claude/hooks/block-dangerous-bash.py"
           }
         ]
       }
@@ -137,6 +151,12 @@ cat > "$PROJECT_PATH/.claude/settings.json" << 'SETTINGS_EOF'
   }
 }
 SETTINGS_EOF
+else
+  # Skip counts for npm users — 3 steps replaced by one message
+  progress "Skipping local .claude/ copy (commands/skills/hooks live globally)"
+  progress "Skipping local .claude/ copy (commands/skills/hooks live globally)"
+  progress "Skipping local .claude/ copy (commands/skills/hooks live globally)"
+fi
 
 # ── Step 4b: Create features.json (empty manifest for clean mode) ─────────────
 cat > "$PROJECT_PATH/.claude/features.json" << 'FEATURES_EOF'

package/scripts/scaffold-default.sh

@@ -15,6 +15,15 @@ PROJECT_NAME="$2"
 STARTER_KIT="$3"
 REGISTRY="${HOME}/.claude/starter-kit-projects.json"
 
+# ── Global install detection ───────────────────────────────────────────────────
+if [ -f "${HOME}/.claude/starter-kit-source-path" ]; then
+  GLOBAL_INSTALLED=true
+  CLAUDE_DIR="$STARTER_KIT"
+else
+  GLOBAL_INSTALLED=false
+  CLAUDE_DIR="$STARTER_KIT/.claude"
+fi
+
 # ── Validation ─────────────────────────────────────────────────────────────────
 if [ -d "$PROJECT_PATH" ]; then
   echo "ERROR: Directory already exists: $PROJECT_PATH"
@@ -22,7 +31,7 @@ if [ -d "$PROJECT_PATH" ]; then
   exit 1
 fi
 
-if [ ! -d "$STARTER_KIT/.claude/commands" ]; then
+if [ ! -d "$CLAUDE_DIR/commands" ]; then
   echo "ERROR: Starter kit not found at: $STARTER_KIT"
   exit 1
 fi
@@ -77,7 +86,9 @@ echo ""
 
 # ── Step 1: Create directory structure ─────────────────────────────────────────
 progress "Creating directory structure..."
-mkdir -p "$PROJECT_PATH"/.claude/{commands,skills,agents,hooks}
+if [ "$GLOBAL_INSTALLED" = "false" ]; then
+  mkdir -p "$PROJECT_PATH"/.claude/{commands,skills,agents,hooks}
+fi
 mkdir -p "$PROJECT_PATH"/project-docs
 mkdir -p "$PROJECT_PATH"/src/app/api/v1/health
 mkdir -p "$PROJECT_PATH"/src/handlers
@@ -89,46 +100,41 @@ mkdir -p "$PROJECT_PATH"/content
 mkdir -p "$PROJECT_PATH"/.github/workflows
 mkdir -p "$PROJECT_PATH"/public
 
-# ── Step 2: Copy 16 project-scoped commands ────────────────────────────────────
-progress "Copying 16 project commands..."
-for cmd in architecture commit create-api create-e2e diagram help \
-           optimize-docker progress refactor review security-check \
-           setup show-user-guide test-plan what-is-my-ai-doing worktree; do
-  cp "$STARTER_KIT/.claude/commands/${cmd}.md" "$PROJECT_PATH/.claude/commands/"
-done
-
-# ── Step 3: Copy skills, agents, ALL 9 hooks ──────────────────────────────────
-progress "Copying skills, agents, 9 hooks..."
-cp -r "$STARTER_KIT/.claude/skills/code-review" "$PROJECT_PATH/.claude/skills/"
-cp -r "$STARTER_KIT/.claude/skills/create-service" "$PROJECT_PATH/.claude/skills/"
-cp "$STARTER_KIT/.claude/agents/code-reviewer.md" "$PROJECT_PATH/.claude/agents/"
-cp "$STARTER_KIT/.claude/agents/test-writer.md" "$PROJECT_PATH/.claude/agents/"
-for hook in block-secrets.py lint-on-save.sh verify-no-secrets.sh \
-            check-rybbit.sh check-branch.sh check-ports.sh \
-            check-e2e.sh check-rulecatch.sh check-env-sync.sh; do
-  cp "$STARTER_KIT/.claude/hooks/${hook}" "$PROJECT_PATH/.claude/hooks/"
-done
-chmod +x "$PROJECT_PATH/.claude/hooks/"*.sh 2>/dev/null
-chmod +x "$PROJECT_PATH/.claude/hooks/"*.py 2>/dev/null
-
-# ── Step 4: Write settings.json (full 9-hook config) ──────────────────────────
-progress "Writing settings.json (9 hooks)..."
-cat > "$PROJECT_PATH/.claude/settings.json" << 'SETTINGS_EOF'
+# ── Steps 2-4: Copy Claude infrastructure (clone users only) ──────────────────
+# npm users already have commands/skills/hooks installed globally in ~/.claude/
+if [ "$GLOBAL_INSTALLED" = "false" ]; then
+  progress "Copying 16 project commands..."
+  for cmd in architecture commit create-api create-e2e diagram help \
+             optimize-docker progress refactor review security-check \
+             setup show-user-guide test-plan what-is-my-ai-doing worktree; do
+    cp "$CLAUDE_DIR/commands/${cmd}.md" "$PROJECT_PATH/.claude/commands/"
+  done
+
+  progress "Copying skills, agents, 10 hooks..."
+  cp -r "$CLAUDE_DIR/skills/code-review" "$PROJECT_PATH/.claude/skills/"
+  cp -r "$CLAUDE_DIR/skills/create-service" "$PROJECT_PATH/.claude/skills/"
+  cp "$CLAUDE_DIR/agents/code-reviewer.md" "$PROJECT_PATH/.claude/agents/"
+  cp "$CLAUDE_DIR/agents/test-writer.md" "$PROJECT_PATH/.claude/agents/"
+  for hook in block-dangerous-bash.py check-file-length.py lint-on-save.sh \
+              verify-no-secrets.sh check-rybbit.sh check-branch.sh \
+              check-ports.sh check-e2e.sh check-rulecatch.sh check-env-sync.sh; do
+    cp "$CLAUDE_DIR/hooks/${hook}" "$PROJECT_PATH/.claude/hooks/"
+  done
+  chmod +x "$PROJECT_PATH/.claude/hooks/"*.sh 2>/dev/null
+  chmod +x "$PROJECT_PATH/.claude/hooks/"*.py 2>/dev/null
+
+  progress "Writing settings.json (10 hooks)..."
+  cat > "$PROJECT_PATH/.claude/settings.json" << 'SETTINGS_EOF'
 {
   "hooks": {
     "PreToolUse": [
       {
-        "matcher": "Read|Edit|Write",
+        "matcher": "Bash",
         "hooks": [
           {
             "type": "command",
-            "command": "python3 .claude/hooks/block-secrets.py"
-          }
-        ]
-      },
-      {
-        "matcher": "Bash",
-        "hooks": [
+            "command": "python3 .claude/hooks/block-dangerous-bash.py"
+          },
           {
             "type": "command",
             "command": "bash .claude/hooks/check-rybbit.sh"
@@ -150,8 +156,12 @@ cat > "$PROJECT_PATH/.claude/settings.json" << 'SETTINGS_EOF'
     ],
     "PostToolUse": [
       {
-        "matcher": "Write",
+        "matcher": "Write|Edit",
         "hooks": [
+          {
+            "type": "command",
+            "command": "python3 .claude/hooks/check-file-length.py"
+          },
           {
             "type": "command",
             "command": "bash .claude/hooks/lint-on-save.sh"
@@ -180,6 +190,11 @@ cat > "$PROJECT_PATH/.claude/settings.json" << 'SETTINGS_EOF'
   }
 }
 SETTINGS_EOF
+else
+  progress "Skipping local .claude/ copy (commands/skills/hooks live globally)"
+  progress "Skipping local .claude/ copy (commands/skills/hooks live globally)"
+  progress "Skipping local .claude/ copy (commands/skills/hooks live globally)"
+fi
 
 # ── Step 4b: Create features.json (populated manifest) ────────────────────────
 CREATED_AT=$(date -u +"%Y-%m-%dT%H:%M:%SZ")