@haposoft/cafekit 0.16.0-rc.8 → 0.16.0

package/src/claude/hooks/__tests__/precompact.test.js

@@ -0,0 +1,158 @@
+'use strict';
+
+// Behavioral tests for precompact.cjs and the compact-restart readback in
+// session.cjs. Both hooks run as real subprocesses against a temporary git
+// fixture; the capture is asserted from the file it writes and from what the
+// next session actually prints.
+
+const { test } = require('node:test');
+const assert = require('node:assert');
+const { spawnSync } = require('node:child_process');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+const PRECOMPACT = path.join(__dirname, '..', 'precompact.cjs');
+const SESSION = path.join(__dirname, '..', 'session.cjs');
+const { hookStateDir } = require(path.join(__dirname, '..', 'lib', 'hook-state-dir.cjs'));
+const RECOVERY = path.join(hookStateDir(), 'compact-recovery.json');
+
+function fixture() {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'ck-precompact-'));
+  for (const args of [
+    ['init', '-q', '-b', 'work'],
+    ['config', 'user.email', 'cafekit@example.invalid'],
+    ['config', 'user.name', 'CafeKit Test'],
+  ]) {
+    const result = spawnSync('git', ['-C', dir, ...args], { encoding: 'utf8' });
+    assert.strictEqual(result.status, 0, result.stderr);
+  }
+  fs.writeFileSync(path.join(dir, 'tracked.txt'), 'one\n');
+  for (const args of [['add', '-A'], ['commit', '-qm', 'fixture']]) {
+    const result = spawnSync('git', ['-C', dir, ...args], { encoding: 'utf8' });
+    assert.strictEqual(result.status, 0, result.stderr);
+  }
+  return dir;
+}
+
+function run(hook, dir, payload) {
+  const result = spawnSync(process.execPath, [hook], {
+    cwd: dir,
+    input: JSON.stringify(payload),
+    encoding: 'utf8',
+    env: { ...process.env, CLAUDE_PROJECT_DIR: dir },
+  });
+  return { code: result.status, stdout: result.stdout || '', stderr: result.stderr || '' };
+}
+
+function clearCapture() {
+  try { fs.unlinkSync(RECOVERY); } catch { /* absent */ }
+}
+
+function readCapture() {
+  return JSON.parse(fs.readFileSync(RECOVERY, 'utf8'));
+}
+
+test('PreCompact records branch, HEAD, dirty count and the in-flight task', () => {
+  const dir = fixture();
+  try {
+    fs.writeFileSync(path.join(dir, 'tracked.txt'), 'two\n');
+    fs.writeFileSync(path.join(dir, 'untracked.txt'), 'scratch\n');
+    const featureDir = path.join(dir, 'specs', 'demo');
+    fs.mkdirSync(featureDir, { recursive: true });
+    fs.writeFileSync(path.join(featureDir, 'plan.md'), '# Demo plan\nSpecs-Contract: process-first-ready-v1\n');
+    for (const [name, status] of [['task-01-one.md', 'in_progress'], ['task-02-two.md', 'pending']]) {
+      fs.writeFileSync(path.join(featureDir, name), [
+        `# ${name}`, '', `Status: ${status}`, '',
+        '## Dependencies', '', '- none', '',
+        '## Verification Plan', '', '- Command: node --test', '',
+      ].join('\n'));
+    }
+
+    clearCapture();
+    const result = run(PRECOMPACT, dir, { hook_event_name: 'PreCompact', trigger: 'auto', session_id: 'compact-session', cwd: dir });
+    assert.strictEqual(result.code, 0, result.stderr);
+
+    const record = readCapture();
+    assert.strictEqual(record.branch, 'work');
+    assert.match(record.head, /^[0-9a-f]{7,}$/);
+    assert.strictEqual(record.dirty_count, 3, 'one modified file, one untracked file, one untracked specs directory');
+    assert.strictEqual(record.trigger, 'auto');
+    assert.strictEqual(record.session_id, 'compact-session');
+    assert.strictEqual(record.workflow.feature, 'demo');
+    assert.deepStrictEqual(record.workflow.in_progress, ['task-01-one.md']);
+    assert.strictEqual(record.workflow.counts.in_progress, 1);
+    assert.strictEqual(record.workflow.counts.pending, 1);
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+    clearCapture();
+  }
+});
+
+test('a compact restart prints the captured anchors alongside the authorization warning', () => {
+  const dir = fixture();
+  try {
+    clearCapture();
+    assert.strictEqual(run(PRECOMPACT, dir, { hook_event_name: 'PreCompact', trigger: 'manual', cwd: dir }).code, 0);
+    const restart = run(SESSION, dir, { hook_event_name: 'SessionStart', source: 'compact', cwd: dir });
+    assert.strictEqual(restart.code, 0, restart.stderr);
+    assert.match(restart.stdout, /VERIFY PENDING AUTHORIZATIONS/, 'the existing warning must survive');
+    assert.match(restart.stdout, /State before compaction/);
+    assert.match(restart.stdout, /branch work/);
+    assert.match(restart.stdout, /Re-read these from disk before acting/);
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+    clearCapture();
+  }
+});
+
+test('a compact restart without a capture still prints the warning and nothing invented', () => {
+  const dir = fixture();
+  try {
+    clearCapture();
+    const restart = run(SESSION, dir, { hook_event_name: 'SessionStart', source: 'compact', cwd: dir });
+    assert.strictEqual(restart.code, 0, restart.stderr);
+    assert.match(restart.stdout, /VERIFY PENDING AUTHORIZATIONS/);
+    assert.doesNotMatch(restart.stdout, /State before compaction/, 'no capture means no claim about prior state');
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+  }
+});
+
+test('a normal session start prints no compaction anchors', () => {
+  const dir = fixture();
+  try {
+    clearCapture();
+    assert.strictEqual(run(PRECOMPACT, dir, { hook_event_name: 'PreCompact', cwd: dir }).code, 0);
+    const startup = run(SESSION, dir, { hook_event_name: 'SessionStart', source: 'startup', cwd: dir });
+    assert.strictEqual(startup.code, 0, startup.stderr);
+    assert.doesNotMatch(startup.stdout, /State before compaction/);
+    assert.doesNotMatch(startup.stdout, /VERIFY PENDING AUTHORIZATIONS/);
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+    clearCapture();
+  }
+});
+
+test('PreCompact fails open outside a repository and on malformed input', () => {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'ck-precompact-bare-'));
+  try {
+    clearCapture();
+    const noGit = run(PRECOMPACT, dir, { hook_event_name: 'PreCompact', cwd: dir });
+    assert.strictEqual(noGit.code, 0, 'a directory outside git must not fail the hook');
+    const record = readCapture();
+    assert.strictEqual(record.branch, null, 'unavailable git facts are recorded as null, never guessed');
+    assert.strictEqual(record.head, null);
+    assert.strictEqual(record.workflow, null);
+
+    clearCapture();
+    const malformed = spawnSync(process.execPath, [PRECOMPACT], {
+      cwd: dir, input: 'not json', encoding: 'utf8', env: { ...process.env, CLAUDE_PROJECT_DIR: dir },
+    });
+    assert.strictEqual(malformed.status, 0, 'malformed payload must fail open');
+    assert.strictEqual(fs.existsSync(RECOVERY), false, 'a malformed payload writes no capture');
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+    clearCapture();
+  }
+});

package/src/claude/hooks/__tests__/spec-gate.test.js

@@ -2,8 +2,9 @@
 
 // Behavioral tests for spec-gate.cjs (Stop completion gate). The hook is run as
 // a real subprocess: a Stop payload is piped to stdin; we assert exit code and
-// whether stdout carries {"decision":"block",...}. Cache lives under the hook's
-// own .logs/ dir (shared), so each test seeds/clears it deliberately.
+// whether stdout carries {"decision":"block",...}. The hook resolves its own
+// state directory; running from source that is a temp directory rather than the
+// source tree, and it is shared, so each test seeds/clears it deliberately.
 
 const { test, beforeEach, after } = require('node:test');
 const assert = require('node:assert');
@@ -14,7 +15,8 @@ const os = require('node:os');
 const path = require('node:path');
 
 const HOOK = path.join(__dirname, '..', 'spec-gate.cjs');
-const CACHE = path.join(__dirname, '..', '.logs', 'spec-gate-last.json');
+const { hookStateDir } = require(path.join(__dirname, '..', 'lib', 'hook-state-dir.cjs'));
+const CACHE = path.join(hookStateDir(), 'spec-gate-last.json');
 const PROVENANCE = require(path.join(__dirname, '..', '..', 'scripts', 'provenance.cjs'));
 const POLICY = require(path.join(__dirname, '..', '..', 'scripts', 'workflow-policy.cjs'));
 const FEATURE = 'demo';
@@ -286,6 +288,11 @@ function installClaudeGate(root, policyMode = 'valid') {
   fs.mkdirSync(hooks, { recursive: true });
   fs.mkdirSync(scripts, { recursive: true });
   fs.copyFileSync(HOOK, path.join(hooks, 'spec-gate.cjs'));
+  fs.mkdirSync(path.join(hooks, 'lib'), { recursive: true });
+  fs.copyFileSync(
+    path.join(__dirname, '..', 'lib', 'hook-state-dir.cjs'),
+    path.join(hooks, 'lib', 'hook-state-dir.cjs'),
+  );
   for (const name of [
     'completion-authority-check.cjs', 'completion-authority-state.cjs', 'semantic-review-authority.cjs',
   ]) fs.copyFileSync(path.join(__dirname, '..', name), path.join(hooks, name));

package/src/claude/hooks/__tests__/state.test.js

@@ -43,6 +43,11 @@ function inInstalledProcessSpecStateFixture(run) {
     fs.mkdirSync(hooks, { recursive: true });
     fs.mkdirSync(scripts, { recursive: true });
     fs.copyFileSync(path.join(CLAUDE_ROOT, 'hooks', 'spec-state.cjs'), path.join(hooks, 'spec-state.cjs'));
+    fs.mkdirSync(path.join(hooks, 'lib'), { recursive: true });
+    fs.copyFileSync(
+      path.join(CLAUDE_ROOT, 'hooks', 'lib', 'hook-state-dir.cjs'),
+      path.join(hooks, 'lib', 'hook-state-dir.cjs'),
+    );
     for (const file of [
       'provenance.cjs',
       'spec-receipt.cjs',

package/src/claude/hooks/__tests__/statusline.test.js

@@ -0,0 +1,196 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert');
+const { spawnSync } = require('node:child_process');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+const STATUS_PATH = path.resolve(__dirname, '..', '..', 'status.cjs');
+const GOLDEN_PATH = path.join(__dirname, 'fixtures', 'statusline-default.golden');
+const NBSP = / /g;
+
+const cleanupDirs = [];
+process.on('exit', () => {
+  for (const dir of cleanupDirs) fs.rmSync(dir, { recursive: true, force: true });
+});
+
+function basePayload(overrides = {}) {
+  return {
+    model: { display_name: 'TestModel' },
+    workspace: { current_dir: '/fixture/dir' },
+    cwd: '/fixture/dir',
+    context_window: {
+      context_window_size: 200000,
+      current_usage: {
+        input_tokens: 40000,
+        cache_creation_input_tokens: 0,
+        cache_read_input_tokens: 20000,
+      },
+    },
+    ...overrides,
+  };
+}
+
+/**
+ * Spawn status.cjs as a child process under a fully pinned environment:
+ * - cwd: a fixture root carrying its own .claude/runtime.json
+ * - TMPDIR/TEMP/TMP: an isolated per-case temp root (git + usage + context caches)
+ * - NO_COLOR/FORCE_COLOR scrubbed unless the case provides them
+ * - COLUMNS pinned so responsive wrapping is deterministic
+ */
+function runStatus({ runtime = { statusline: 'full', statuslineColors: true }, payload = basePayload(), envExtra = {}, tmpFiles = {} } = {}) {
+  const caseDir = fs.mkdtempSync(path.join(os.tmpdir(), 'sl-case-'));
+  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'sl-tmp-'));
+  try {
+    fs.mkdirSync(path.join(caseDir, '.claude'));
+    fs.writeFileSync(path.join(caseDir, '.claude', 'runtime.json'), JSON.stringify(runtime));
+    for (const [name, content] of Object.entries(tmpFiles)) {
+      fs.writeFileSync(path.join(tmpDir, name), JSON.stringify(content));
+    }
+    const env = {
+      PATH: process.env.PATH,
+      HOME: process.env.HOME,
+      TMPDIR: tmpDir,
+      TEMP: tmpDir,
+      TMP: tmpDir,
+      COLUMNS: '200',
+      ...envExtra,
+    };
+    const result = spawnSync(process.execPath, [STATUS_PATH], {
+      cwd: caseDir,
+      env,
+      input: Buffer.from(JSON.stringify(payload)),
+    });
+    return {
+      status: result.status,
+      stdoutBuffer: result.stdout,
+      stdout: result.stdout.toString('utf8'),
+      stderr: result.stderr.toString('utf8'),
+      readTmpFile(name) {
+        const p = path.join(tmpDir, name);
+        return fs.existsSync(p) ? JSON.parse(fs.readFileSync(p, 'utf8')) : null;
+      },
+    };
+  } finally {
+    // Defer cleanup so readTmpFile still works after the spawn returns.
+    cleanupDirs.push(caseDir, tmpDir);
+  }
+}
+
+function freshUsageCache(now = Date.now()) {
+  return {
+    status: 'available',
+    timestamp: now,
+    data: {
+      five_hour: { utilization: 20, resets_at: new Date(now + 2 * 3600 * 1000 + 29 * 60 * 1000).toISOString() },
+      seven_day: { utilization: 45, resets_at: new Date(now + (2 * 86400 + 5 * 3600) * 1000).toISOString() },
+    },
+  };
+}
+
+test('statusline default output is byte-identical to the golden fixture when no layout is configured', () => {
+  const golden = fs.readFileSync(GOLDEN_PATH);
+  const run = runStatus();
+  assert.equal(run.status, 0, run.stderr);
+  assert.ok(run.stdoutBuffer.equals(golden),
+    `default output drifted from golden\nexpected: ${JSON.stringify(golden.toString('utf8'))}\nactual:   ${JSON.stringify(run.stdout)}`);
+});
+
+test('statusline custom layout renders named sections in order per line', () => {
+  const run = runStatus({
+    runtime: { statusline: 'full', statuslineColors: true, statuslineLayout: { lines: [['directory', 'model']] } },
+  });
+  assert.equal(run.status, 0, run.stderr);
+  const dirIndex = run.stdout.indexOf('📁');
+  const modelIndex = run.stdout.indexOf('🤖');
+  assert.ok(dirIndex >= 0 && modelIndex >= 0, run.stdout);
+  assert.ok(dirIndex < modelIndex, `directory must precede model: ${JSON.stringify(run.stdout)}`);
+});
+
+test('statusline ignores unknown section ids without crashing or rendering placeholders', () => {
+  const run = runStatus({
+    runtime: { statusline: 'full', statuslineColors: true, statuslineLayout: { lines: [['model', 'bogus']] } },
+  });
+  assert.equal(run.status, 0, run.stderr);
+  assert.match(run.stdout, /🤖/);
+  assert.doesNotMatch(run.stdout, /bogus/);
+});
+
+test('statusline modes slice the layout line count (minimal renders only the first line)', () => {
+  const run = runStatus({
+    runtime: { statusline: 'minimal', statuslineColors: true, statuslineLayout: { lines: [['model'], ['directory']] } },
+  });
+  assert.equal(run.status, 0, run.stderr);
+  assert.match(run.stdout, /🤖/);
+  assert.doesNotMatch(run.stdout, /📁/);
+});
+
+test('statusline empty or invalid layout falls back to the default renderers', () => {
+  const golden = fs.readFileSync(GOLDEN_PATH);
+  for (const layout of [{}, { lines: [] }, { lines: [['bogus']] }, 'nonsense']) {
+    const run = runStatus({
+      runtime: { statusline: 'full', statuslineColors: true, statuslineLayout: layout },
+    });
+    assert.equal(run.status, 0, run.stderr);
+    assert.ok(run.stdoutBuffer.equals(golden), `fallback drifted for layout ${JSON.stringify(layout)}: ${JSON.stringify(run.stdout)}`);
+  }
+});
+
+test('statusline shows five-hour and weekly windows with countdowns when the cache is fresh', () => {
+  const run = runStatus({ tmpFiles: { 'ck-usage-limits-cache.json': freshUsageCache() } });
+  assert.equal(run.status, 0, run.stderr);
+  const plain = run.stdout.replace(NBSP, ' ');
+  assert.match(plain, /⌛ \d+h \d+m left \(20% used\)/, plain);
+  assert.match(plain, /wk 45% \(\d+d \d+h\)/, plain);
+});
+
+test('statusline hides the quota area when the cache is stale', () => {
+  const stale = freshUsageCache(Date.now() - 10 * 60 * 1000);
+  stale.timestamp = Date.now() - 10 * 60 * 1000;
+  const run = runStatus({ tmpFiles: { 'ck-usage-limits-cache.json': stale } });
+  assert.equal(run.status, 0, run.stderr);
+  assert.doesNotMatch(run.stdout, /⌛/);
+  assert.doesNotMatch(run.stdout, /wk /);
+});
+
+test('statusline cost renders only when the layout enables it, billing is api, and data exists', () => {
+  const costLayout = { statusline: 'full', statuslineColors: true, statuslineLayout: { lines: [['model', 'cost']] } };
+  const withCost = basePayload({ cost: { total_cost_usd: '1.2345' } });
+
+  const enabled = runStatus({ runtime: costLayout, payload: withCost, envExtra: { CLAUDE_BILLING_MODE: 'api' } });
+  assert.equal(enabled.status, 0, enabled.stderr);
+  const plain = enabled.stdout.replace(NBSP, ' ');
+  assert.match(plain, /💵 \$1\.23(?!\d)/, plain);
+
+  const wrongBilling = runStatus({ runtime: costLayout, payload: withCost, envExtra: { CLAUDE_BILLING_MODE: 'subscription' } });
+  assert.equal(wrongBilling.status, 0, wrongBilling.stderr);
+  assert.doesNotMatch(wrongBilling.stdout, /💵/);
+
+  const noData = runStatus({ runtime: costLayout, envExtra: { CLAUDE_BILLING_MODE: 'api' } });
+  assert.equal(noData.status, 0, noData.stderr);
+  assert.doesNotMatch(noData.stdout, /💵/);
+
+  const noLayout = runStatus({ payload: withCost, envExtra: { CLAUDE_BILLING_MODE: 'api' } });
+  assert.equal(noLayout.status, 0, noLayout.stderr);
+  assert.doesNotMatch(noLayout.stdout, /💵/);
+});
+
+test('statusline writes the ck-context session file regardless of layout', () => {
+  const run = runStatus({
+    runtime: { statusline: 'full', statuslineColors: true, statuslineLayout: { lines: [['model']] } },
+    payload: basePayload({ session_id: 'ctxcase' }),
+  });
+  assert.equal(run.status, 0, run.stderr);
+  const contextFile = run.readTmpFile('ck-context-ctxcase.json');
+  assert.ok(contextFile, 'ck-context-ctxcase.json must be written even under a custom layout');
+  assert.equal(typeof contextFile.percent, 'number');
+  assert.equal(typeof contextFile.tokens, 'number');
+});
+
+test('statusline honors NO_COLOR with no ANSI escapes in output', () => {
+  const run = runStatus({ envExtra: { NO_COLOR: '1' } });
+  assert.equal(run.status, 0, run.stderr);
+  assert.doesNotMatch(run.stdout, /\[/);
+});

package/src/claude/hooks/agent.cjs

@@ -90,7 +90,7 @@ try {
 } catch (e) {
   try {
     const fs = require('fs'), p = require('path');
-    const d = p.join(__dirname, '.logs');
+    const d = require('./lib/hook-state-dir.cjs').hookStateDir();
     if (!fs.existsSync(d)) fs.mkdirSync(d, { recursive: true });
     fs.appendFileSync(p.join(d, 'hook-log.jsonl'),
       JSON.stringify({ ts: new Date().toISOString(), hook: 'agent', status: 'crash', error: e.message }) + '\n');

package/src/claude/hooks/docs-sync.cjs

@@ -14,7 +14,7 @@
 try {
   const fs = require('fs');
   const path = require('path');
-  const { execSync } = require('child_process');
+  const { execFileSync } = require('child_process');
   const { loadConfig } = require('./lib/config.cjs');
 
   // Đọc stdin theo chuẩn hook
@@ -24,6 +24,9 @@ try {
   const config = loadConfig({ cwd, includeProject: false, includeAssertions: false, includeLocale: false });
 
   const docsDir = path.join(cwd, config.paths?.docs || 'docs');
+  const specsDir = path.join(cwd, config.paths?.specs || 'specs');
+  const docsRelative = path.relative(cwd, docsDir).replace(/\\/g, '/');
+  const specsRelative = path.relative(cwd, specsDir).replace(/\\/g, '/');
   
   // Xác định dự án đã có cốt lõi code hay chưa?
   const hasCode = fs.existsSync(path.join(cwd, 'src')) ||
@@ -46,16 +49,18 @@ try {
     lines.push('> Source exists but `docs/` does not. Create baseline docs first:');
     lines.push('> 1. `docs/system-architecture.md` — system architecture and flows');
     lines.push('> 2. `docs/project-overview-pdr.md` — overview, goals, features');
-    lines.push('> 3. Write current hash to `docs/.sync_hash` via `git log -1 --format="%H" -- . ":(exclude)docs"`');
+    lines.push('> 3. Write the latest non-docs/non-Specs source hash to `docs/.sync_hash`.');
     lines.push('');
   }
   // Case 2: docs exist — check continuous sync vs source-only git hash
   else {
     try {
       // Latest SOURCE-only hash (ignore docs-only commits)
-      const currentHash = execSync('git log -1 --format="%H" -- . ":(exclude)docs"', { 
-        cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] 
-      }).trim();
+      const currentHash = execFileSync('git', [
+        'log', '-1', '--format=%H', '--', '.',
+        `:(exclude,literal)${docsRelative}`,
+        `:(exclude,literal)${specsRelative}`,
+      ], { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();
 
       if (currentHash) {
         const syncTrackingFile = path.join(docsDir, '.sync_hash');
@@ -87,11 +92,8 @@ try {
 } catch (e) {
   // Ghi log lỗi ẩn danh nếu sập hook
   try {
-    const fs = require('fs'), p = require('path'), os = require('os');
-    const isSourceTree = __dirname.includes(`${p.sep}packages${p.sep}spec${p.sep}src`);
-    const d = isSourceTree
-      ? p.join(os.tmpdir(), 'cafekit-hook-logs', 'claude-docs-sync')
-      : p.join(__dirname, '.logs');
+    const fs = require('fs'), p = require('path');
+    const d = require('./lib/hook-state-dir.cjs').hookStateDir();
     if (!fs.existsSync(d)) fs.mkdirSync(d, { recursive: true });
     fs.appendFileSync(p.join(d, 'hook-log.jsonl'),
       JSON.stringify({ ts: new Date().toISOString(), hook: 'docs-sync', status: 'crash', error: e.message }) + '\n');

package/src/claude/hooks/inspect-block.cjs

@@ -115,7 +115,7 @@ try {
 } catch (e) {
   try {
     const fs = require('fs'), p = require('path');
-    const d = p.join(__dirname, '.logs');
+    const d = require('./lib/hook-state-dir.cjs').hookStateDir();
     if (!fs.existsSync(d)) fs.mkdirSync(d, { recursive: true });
     fs.appendFileSync(p.join(d, 'hook-log.jsonl'),
       JSON.stringify({ ts: new Date().toISOString(), hook: 'inspect-block', status: 'crash', error: e.message }) + '\n');

package/src/claude/hooks/lib/config.cjs

@@ -520,6 +520,9 @@ function loadConfig(options = {}) {
     // Statusline mode
     result.statusline = merged.statusline || 'full';
     result.statuslineColors = merged.statuslineColors !== false;
+    if (merged.statuslineLayout && typeof merged.statuslineLayout === 'object') {
+      result.statuslineLayout = merged.statuslineLayout;
+    }
 
     return sanitizeConfig(result, projectRoot);
   } catch (e) {

package/src/claude/hooks/lib/hook-state-dir.cjs

@@ -0,0 +1,39 @@
+'use strict';
+
+/**
+ * Where a Claude hook keeps its own generated state: crash logs and the
+ * gate/tollgate caches.
+ *
+ * Hooks run from two places. In an installed project they live in
+ * `.claude/hooks/`, whose `.logs/` is gitignored, so writing beside the hook is
+ * correct. During this package's tests they run straight from
+ * `packages/spec/src/claude/hooks/`, where the same write lands inside the
+ * source tree as an untracked directory. That changes the worktree digest the
+ * receipt provenance is bound to, and the completion gate then reports every
+ * done task as stale. It surfaced three times as a false alarm before the cause
+ * was found, so source-tree runs write to a temp directory instead.
+ *
+ * Keeping the rule here means a new hook cannot reintroduce the bug by copying
+ * the old `path.join(__dirname, '.logs')` line.
+ */
+
+const os = require('os');
+const path = require('path');
+
+// This module ships in `hooks/lib/`, so the hook directory is always its parent.
+const HOOKS_DIR = path.join(__dirname, '..');
+const SOURCE_MARKER = `${path.sep}packages${path.sep}spec${path.sep}src`;
+
+/** True when `dir` sits inside this package's source tree rather than an install. */
+function isSourceTree(dir) {
+  return String(dir || '').includes(SOURCE_MARKER);
+}
+
+/** Absolute directory for hook-generated state; create it before writing. */
+function hookStateDir() {
+  return isSourceTree(HOOKS_DIR)
+    ? path.join(os.tmpdir(), 'cafekit-hook-logs', 'claude')
+    : path.join(HOOKS_DIR, '.logs');
+}
+
+module.exports = { hookStateDir, isSourceTree };

package/src/claude/hooks/lib/secret-keywords.cjs

@@ -0,0 +1,42 @@
+/**
+ * Copyright (c) 2026 Haposoft. MIT License.
+ *
+ * Secret-output guardrail keyword matcher.
+ *
+ * These patterns detect prompts about credential handling. They are deliberately
+ * separate from the privacy hooks: those gate whether a sensitive file may be READ,
+ * while this list drives a soft reminder about whether a value may be PRINTED.
+ * Approval for the first is not approval for the second.
+ */
+
+const SECRET_KEYWORD_PATTERNS = [
+  /\.env(?:\b|$)/i,
+  /(?:^|[^A-Za-z0-9])credentials?(?:$|[^A-Za-z0-9])/i,
+  /(?:^|[^A-Za-z0-9])secrets?(?:$|[^A-Za-z0-9])/i,
+  /(?:^|[^A-Za-z0-9])api[\s_-]*keys?(?:$|[^A-Za-z0-9])/i,
+  /(?:^|[^A-Za-z0-9])access[\s_-]*keys?(?:$|[^A-Za-z0-9])/i,
+  /(?:^|[^A-Za-z0-9])tokens?(?:$|[^A-Za-z0-9])/i,
+  /(?:^|[^A-Za-z0-9])bearer(?:$|[^A-Za-z0-9])/i,
+  /(?:^|[^A-Za-z0-9])jwts?(?:$|[^A-Za-z0-9])/i,
+  /(?:^|[^A-Za-z0-9])private[\s_-]*keys?(?:$|[^A-Za-z0-9])/i,
+  /(?:^|[^A-Za-z0-9])oauth(?:[\s_-]+client)?[\s_-]*secrets?(?:$|[^A-Za-z0-9])/i,
+  /(?:^|[^A-Za-z0-9])client[\s_-]*secrets?(?:$|[^A-Za-z0-9])/i,
+  /(?:^|[^A-Za-z0-9])cloud[\s_-]*keys?(?:$|[^A-Za-z0-9])/i,
+  /(?:^|[^A-Za-z0-9])env[\s_-]+files?(?:$|[^A-Za-z0-9])/i,
+];
+
+/** The reminder text. It names no value and quotes no prompt. */
+const REMINDER = [
+  '## Secret handling',
+  '- Do not print raw credentials, API keys, tokens, JWTs, private keys, or secret values into the conversation.',
+  '- Use [redacted], variable names, counts, or high-level status instead.',
+  '- Approval to read a sensitive file or command output does not grant permission to print raw values.',
+  '- If a value is needed for a machine action, pass it through a non-echoing path and report only success or failure.',
+].join('\n');
+
+function containsSecretKeyword(prompt) {
+  if (typeof prompt !== 'string' || prompt.trim() === '') return false;
+  return SECRET_KEYWORD_PATTERNS.some((pattern) => pattern.test(prompt));
+}
+
+module.exports = { SECRET_KEYWORD_PATTERNS, REMINDER, containsSecretKeyword };