@devrik-tools/claude-gates 0.6.0 → 0.7.1

package/plugins/gates/hooks/gates/implementation-pipeline/index.mjs

@@ -175,7 +175,7 @@ runGate(
     const lines = missingStages.map((stage) => `  ${stage.line}`).join('\n');
 
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `This delegation is going to build code but skips ${missingStages.length} pipeline ` +
         `stage(s). ${details} ${
           isHighRisk

package/plugins/gates/hooks/gates/intent-flow/index.mjs

@@ -181,7 +181,7 @@ function missingSignals(prompt) {
 
 function denyUnresolvedUnknown() {
   deny(
-    GATE_ID,
+    CONFIG_KEY,
     'This request touches a high-impact signal (money/auth/persisted data/public contract/' +
       'irreversible/production) AND declares an unresolved UNKNOWN. Do not relaunch assuming an ' +
       'answer — ask the user what to decide about that UNKNOWN before delegating again.',
@@ -192,7 +192,7 @@ function denyTooShortForScopeList(prompt) {
   const excerpt = prompt.slice(0, PROMPT_EXCERPT_LENGTH);
   const ellipsis = prompt.length > PROMPT_EXCERPT_LENGTH ? '…' : '';
   deny(
-    GATE_ID,
+    CONFIG_KEY,
     `This implementation request ("${excerpt}${ellipsis}") does not carry a scope list: missing IN ` +
       'SCOPE, OUT OF SCOPE and EDGE CASES. Add it to the prompt before relaunching.',
   );
@@ -200,7 +200,7 @@ function denyTooShortForScopeList(prompt) {
 
 function denyMissingSignals(missing) {
   deny(
-    GATE_ID,
+    CONFIG_KEY,
     `This implementation request does not declare, in recognizable form: ${missing.join('; ')}. ` +
       'Add what is missing to the prompt before relaunching this delegation.',
   );

package/plugins/gates/hooks/gates/lint-commit/index.mjs

@@ -133,7 +133,7 @@ runGate(
       // timeout kill). A commit gate that cannot evaluate must not silently permit — deny
       // with the spawn error so the user can fix the environment, not guess.
       deny(
-        GATE_ID,
+        CONFIG_KEY,
         `Could not run the lint command ("${lintCommand}"): ${result.error.message}. Fix ` +
           'the lint setup or set lintCommand/blockCommitWithFailingLint in .ai/config.json.',
       );
@@ -143,7 +143,7 @@ runGate(
       const combinedOutput =
         `${result.stdout ?? ''}\n${result.stderr ?? ''}`.trim();
       deny(
-        GATE_ID,
+        CONFIG_KEY,
         `Lint failed (exit ${result.status}) — commit blocked until it passes:\n` +
           `${tailLines(combinedOutput, OUTPUT_TAIL_LINES)}`,
       );

package/plugins/gates/hooks/gates/mandatory-flow/index.mjs

@@ -125,7 +125,7 @@ function readSlug(pointerPath) {
 function checkLiveTask(pointerPath) {
   if (!existsSync(pointerPath)) {
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `This delegation is going to implement, but there is no live task: ${pointerPath} ` +
         'does not exist. Start a task pointing to it before delegating, or declare ' +
         'LEVEL: QUESTION/MICRO if this is not implementation.',
@@ -135,7 +135,7 @@ function checkLiveTask(pointerPath) {
   const slug = readSlug(pointerPath);
   if (!slug) {
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `${pointerPath} exists but is empty. An active-task pointer with no slug is not ` +
         'a live task. Write the task slug into it before delegating.',
     );
@@ -144,7 +144,7 @@ function checkLiveTask(pointerPath) {
   const taskDirectory = join(process.cwd(), '.ai', 'pipeline', slug);
   if (!hasTaskContract(taskDirectory)) {
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `The active task '${slug}' has no contract on disk: none of ` +
         `${TASK_CONTRACT_FILES.join(', ')} exists under ${taskDirectory}. ` +
         'Write the contract before implementing.',

package/plugins/gates/hooks/gates/neutral-spanish/index.mjs

@@ -94,7 +94,7 @@ runGate(
 
     const unique = [...new Set(hits)].slice(0, MAX_REPORTED_MARKERS);
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `Text being written contains regional Spanish markers: ${unique.join(', ')}. ` +
         'Rewrite in neutral Spanish before writing. If the regional wording is intentional ' +
         `(a literal quote, a test fixture, a captured log, a data sample), add the marker ` +

package/plugins/gates/hooks/gates/never-assume/index.mjs

@@ -49,7 +49,7 @@ runGate(
     if (hits.length === 0) return;
 
     warn(
-      GATE_ID,
+      CONFIG_KEY,
       `Content contains conjecture phrasing without stated verification: ${hits.join(', ')}. Verify before asserting instead of assuming.`,
     );
   },

package/plugins/gates/hooks/gates/no-blocking/index.mjs

@@ -153,7 +153,7 @@ runGate(
     for (const [source, reason] of blockingPairs) {
       if (compile(source).test(command)) {
         deny(
-          GATE_ID,
+          CONFIG_KEY,
           `${reason} If this wait is genuinely justified, add "${marker} <concrete reason>" ` +
             'to the command and try again. A declared wait is a decision; a silent one is an oversight.',
         );

package/plugins/gates/hooks/gates/no-coauthor/index.mjs

@@ -116,7 +116,7 @@ runGate(
     if (!match) return;
 
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `This commit message carries an AI/agent attribution trailer (matched "${match}"). ` +
         'Remove it — no Co-Authored-By, no "Generated with", no session trailer. If this ' +
         `commit legitimately must keep a co-author (e.g. importing external history), add ` +

package/plugins/gates/hooks/gates/no-lint-suppression/index.mjs

@@ -173,7 +173,7 @@ runGate(
     if (!offender) return;
 
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `This write silences the linter/type-checker instead of fixing the code: "${offender}". ` +
         'Fix the underlying issue rather than turning the check off. If this is a genuine, ' +
         `documented false positive, put "${escapeHatch} <reason>" on the same line so the ` +

package/plugins/gates/hooks/gates/no-memory-dependency/index.mjs

@@ -128,7 +128,7 @@ runGate(
 
     const quotedPhrases = phrases.map((phrase) => `"${phrase}"`).join(', ');
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `This delegation depends on the subagent remembering something (${quotedPhrases}), but a ` +
         'fresh subagent has none of this conversation. Put the data IN the prompt, in a file it ' +
         'reads, a flag, or an already-persisted decision. If the phrase directs the subagent’s ' +

package/plugins/gates/hooks/gates/no-reconfirm/index.mjs

@@ -197,6 +197,6 @@ runGate(
       parameters.overlapThreshold,
     );
     if (notices.length === 0) return;
-    warn(GATE_ID, notices.join('\n\n'));
+    warn(CONFIG_KEY, notices.join('\n\n'));
   },
 );

package/plugins/gates/hooks/gates/protected-paths/index.mjs

@@ -87,7 +87,7 @@ function checkWrite(toolInput, protectedPaths) {
   const target = writtenPathOf(toolInput);
   if (target && isProtectedPath(target, protectedPaths)) {
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `Writing to '${target}' is not allowed: it matches a protected path (${protectedPaths.join(', ')}).`,
     );
   }
@@ -110,7 +110,7 @@ function checkShellCommand(toolInput, protectedPaths, mutatingCommands) {
 
   if (targetsProtected) {
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `This command targets a protected path (${protectedPaths.join(', ')}) with a mutating operation. ` +
         'Reading (echo/cat/grep) is fine; modifying it is not.',
     );

package/plugins/gates/hooks/gates/recurrence-lock/index.mjs

@@ -84,7 +84,7 @@ runGate(
 
     const names = openRecurrences.map((entry) => entry.class).join(', ');
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `Registered recurring issue classes are still open and at/above threshold: ${names}. Resolve or close them before proceeding.`,
     );
   },

package/plugins/gates/hooks/gates/reuse-before-build/index.mjs

@@ -224,7 +224,7 @@ function checkDelegation(toolInput, cwd, parameters) {
   const prompt = delegationPromptOf(toolInput);
   if (!isBuildIntent(prompt)) return;
   if (buildIsCleared(prompt, cwd, parameters, null)) return;
-  deny(GATE_ID, DENY_MESSAGE);
+  deny(CONFIG_KEY, DENY_MESSAGE);
 }
 
 /** Write: block a new tool-like file that is not cleared by content, map, or an installed dep. */
@@ -237,7 +237,7 @@ function checkWrite(toolInput, cwd, parameters) {
   const content = writtenContentOf(toolInput);
   const toolBaseName = basename(filePath).replace(/\.[^.]+$/, '');
   if (buildIsCleared(content, cwd, parameters, toolBaseName)) return;
-  deny(GATE_ID, DENY_MESSAGE);
+  deny(CONFIG_KEY, DENY_MESSAGE);
 }
 
 runGate(

package/plugins/gates/hooks/gates/risk-level/index.mjs

@@ -191,7 +191,7 @@ function denyNoLevelDeclared(prompt) {
   const excerpt = prompt.slice(0, PROMPT_EXCERPT_LENGTH);
   const ellipsis = prompt.length > PROMPT_EXCERPT_LENGTH ? '…' : '';
   deny(
-    GATE_ID,
+    CONFIG_KEY,
     `This implementation delegation ("${excerpt}${ellipsis}") does not declare its risk LEVEL. Add a ` +
       'line such as "LEVEL: STANDARD" (or QUESTION/MICRO/HIGH-RISK, whichever fits) before relaunching ' +
       'this delegation.',
@@ -200,7 +200,7 @@ function denyNoLevelDeclared(prompt) {
 
 function denyAmbiguousLevel(levels) {
   deny(
-    GATE_ID,
+    CONFIG_KEY,
     `This delegation declares multiple different risk levels (${[...new Set(levels)].join(', ')}) — ` +
       'it is not clear which one governs this task. Declare a single, unambiguous LEVEL for this ' +
       'delegation (remove any decoy/reference mention of a different level) before relaunching.',
@@ -209,7 +209,7 @@ function denyAmbiguousLevel(levels) {
 
 function denyLevelContradictsSignal(level, signal) {
   deny(
-    GATE_ID,
+    CONFIG_KEY,
     `This delegation declares LEVEL: ${level}, but the request touches the risk signal "${signal}" near ` +
       'an implementation verb (not quoted, not the topic of a documentary deliverable) — that requires ' +
       `LEVEL: HIGH-RISK, not ${level}. Raise the declaration to HIGH-RISK before relaunching.`,

package/plugins/gates/hooks/gates/root-cause-first/index.mjs

@@ -43,7 +43,7 @@ runGate(
     if (!matched) return;
 
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `Content matches a patch-without-diagnosis marker (${matched.source}). Identify and fix the root cause before patching; do not defer with a "fix later" marker.`,
     );
   },

package/plugins/gates/hooks/gates/root-whitelist/index.mjs

@@ -205,7 +205,7 @@ runGate(
         filesWhitelist,
         foldersWhitelist,
       );
-      if (reason) deny(GATE_ID, reason);
+      if (reason) deny(CONFIG_KEY, reason);
     }
   },
 );

package/plugins/gates/hooks/gates/rule-skill-autodiscovery/index.mjs

@@ -163,7 +163,7 @@ runGate(
       if (configsTampered(before)) {
         revertConfigs(before);
         deny(
-          GATE_ID,
+          CONFIG_KEY,
           `Discovered rule/skill script ${relative(projectRoot, script)} attempted to modify gate security configuration (.ai/config.json or the global config). The change was reverted and the action is blocked.`,
         );
         return;
@@ -171,7 +171,7 @@ runGate(
 
       if (failed) {
         deny(
-          GATE_ID,
+          CONFIG_KEY,
           `Sub-gate failed: ${relative(projectRoot, script)}. Fix it before continuing.`,
         );
         return;

package/plugins/gates/hooks/gates/sdd-specs/index.mjs

@@ -153,7 +153,7 @@ function denyIfAdvancedFeatureLacksContract(features, treeRoot) {
     if (!feature?.name || !ADVANCED_STATUSES.has(feature.status)) continue;
     if (contractExistsFor(treeRoot, feature.name)) continue;
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `Feature '${feature.name}' is set to '${feature.status}' but has no non-empty ` +
         `contract (${CONTRACT_FILES.join(', ')}) under the discovered contract tree.`,
     );
@@ -171,7 +171,7 @@ function checkCatalogWrite(toolInput, catalogPath, treeRoot) {
     // still targets the catalog is suspicious on its own -- a spec_ready/done transition
     // hidden behind a malformed payload must not be silently allowed through.
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `The write to ${CATALOG_FILE_NAME} does not parse as JSON. A catalog write that ` +
         'cannot be verified for the spec-contract invariant is not allowed; fix the JSON ' +
         'or write valid content.',
@@ -213,7 +213,7 @@ function checkDelegation(toolInput, treeRoot, exemptSubagents) {
   );
   if (missing.length === citedFeatures.length) {
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `This implementation delegation cites feature(s) [${missing.join(', ')}] with no ` +
         `non-empty contract (${CONTRACT_FILES.join(', ')}) on disk. Write the contract ` +
         'before implementing.',

package/plugins/gates/hooks/gates/staged-lint/index.mjs

@@ -133,7 +133,7 @@ function runLintOverStaged(lintCommand, files, cwd, timeoutMs) {
 function denyIfLintFailed(result, lintCommand, escapeHatch) {
   if (result.error) {
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `Could not run the lint command ("${lintCommand}") over the staged files: ` +
         `${result.error.message}. Fix the lint setup or set lintCommand/` +
         `${CONFIG_KEY} in .ai/config.json.`,
@@ -144,7 +144,7 @@ function denyIfLintFailed(result, lintCommand, escapeHatch) {
       `${result.stdout ?? ''}\n${result.stderr ?? ''}`.trim();
     const outputTail = tailLines(combinedOutput, OUTPUT_TAIL_LINES);
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `The files you staged fail lint — commit blocked until your own changes are clean ` +
         `(the rest of the repo is not checked). Fix them, or add "${escapeHatch}" to the ` +
         `commit command for a deliberate exception:\n${outputTail}`,

package/plugins/gates/hooks/gates/stop-pending/index.mjs

@@ -50,7 +50,6 @@ import { dirname, join } from 'node:path';
 import { isGateEnabled, gateParameters } from '../../lib/config.mjs';
 import { readHookPayload } from '../../lib/hook-io.mjs';
 
-const GATE_ID = 'stop-pending';
 const CONFIG_KEY = 'blockStopWithPendingTasks';
 
 const PROJECT_ROOT_MARKERS = ['.git', '.ai'];
@@ -153,7 +152,7 @@ function main() {
     if (blockingTasks.length === 0) return allow();
 
     return block(
-      `[${GATE_ID}] There are ${blockingTasks.length} pending task(s) still active for this ` +
+      `[${CONFIG_KEY}] There are ${blockingTasks.length} pending task(s) still active for this ` +
         `project:\n${describeTasks(blockingTasks)}\n` +
         'Close each before ending the turn: `task close <id> --evidence "..."` when done, ' +
         'or `task abandon <id> --reason "..."` when it will not be finished. A task left ' +

package/plugins/gates/hooks/gates/test-after-implementation/index.mjs

@@ -107,7 +107,7 @@ runGate(
     if (!pairedImplementationChanged) return;
 
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `Creating test ${testFileName} after its paired implementation was already modified ` +
         '(uncommitted). Write the test before or alongside the implementation, not after — a ' +
         'test that passes the first time it runs proves nothing about the change. If this is a ' +

package/plugins/gates/hooks/gates/test-matrix/index.mjs

@@ -175,7 +175,7 @@ runGate(
 
     const lines = missing.map((entry) => `  ${entry.line}`).join('\n');
     deny(
-      GATE_ID,
+      CONFIG_KEY,
       `Missing ${missing.length} test type(s) the requirement makes mandatory. Test types ` +
         'are chosen ACCORDING TO THE REQUIREMENT: E2E if it touches money/auth/persistence, ' +
         'visual/QA if it touches UI, and always unit or mutation. ' +

package/plugins/gates/hooks/gates/tool-map/index.mjs

@@ -129,7 +129,7 @@ function recordTool(mapPath, normalizedPath, auditLine, toolMapFile) {
     );
   } catch (error) {
     warn(
-      GATE_ID,
+      CONFIG_KEY,
       `Could not record this tool in ${toolMapFile}: ${error?.message ?? error}. ` +
         'The build proceeds, but the discovery was not remembered.',
     );

package/plugins/gates/hooks/hooks.json

@@ -121,6 +121,16 @@
           }
         ]
       },
+      {
+        "matcher": "Agent|Task|invoke_subagent|mcp__.*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/gates/brief-approved/index.mjs\"",
+            "timeout": 30
+          }
+        ]
+      },
       {
         "matcher": "Agent|Task|invoke_subagent|mcp__.*",
         "hooks": [

package/plugins/gates/hooks/lib/hook-io.mjs

@@ -359,7 +359,7 @@ export async function runGate(gate, check) {
     });
   } catch (error) {
     deny(
-      gate.id,
+      gate.configKey,
       `The gate failed to evaluate and blocks the action for safety: ${error?.message ?? error}.`,
     );
   }

package/plugins/tasks/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "tasks",
-  "version": "0.6.0",
+  "version": "0.7.1",
   "description": "Deterministic task tracking for Claude Code: persists tasks the model registers via the CLI, reminds of open tasks on a message counter, and lists active tasks on session start.",
   "author": {
     "name": "Devrik"

package/registry.json

@@ -293,6 +293,27 @@
             }
           ]
         },
+        {
+          "id": "brief-approved",
+          "configKey": "requireApprovedBriefBeforeImplementing",
+          "default": true,
+          "event": "PreToolUse",
+          "tools": ["delegation"],
+          "description": "Denies implementing a cited feature whose brief has no recorded user approval (status: approved + approval_quote frontmatter).",
+          "script": "gates/brief-approved/index.mjs",
+          "params": [
+            {
+              "name": "catalogLocations",
+              "type": "string[]",
+              "description": "Paths searched for the feature catalog."
+            },
+            {
+              "name": "exemptSubagents",
+              "type": "string[]",
+              "description": "Subagent types exempt from the approval requirement."
+            }
+          ]
+        },
         {
           "id": "implementation-pipeline",
           "configKey": "requireImplementationPipeline",
@@ -826,7 +847,7 @@
         {
           "id": "capability-map",
           "configKey": "injectCapabilityMap",
-          "default": false,
+          "default": true,
           "event": "UserPromptSubmit",
           "tools": [],
           "description": "Injects the current catalog of the project's AI capabilities (skills, agents/subagents, commands) as compact context on every message, grouped by kind, read fresh from disk. Also persists it to .ai/capability-map.json like the tool map. Autosynced: it lists the directories, never a hardcoded copy. Never blocks.",