@haposoft/cafekit 0.16.6 → 0.18.0

package/src/claude/rules/orchestrator.md

@@ -22,10 +22,9 @@ Example prompt:
 
 ## Resource Constraints
 
-- Each subagent has a **200K token context window** — scope tasks to fit comfortably within it
-- Spawning many parallel agents degrades system performance — check available CPU/memory before scaling out. For parallel implementation waves the cap is 3 concurrent agents by default, never more than 5 (each agent carries the 200K budget above)
+- Each subagent has its own context window — scope tasks to fit comfortably within it
+- Spawning many parallel agents degrades system performance — check available CPU/memory before scaling out. For parallel implementation waves the cap is 3 concurrent agents by default, never more than 5 (each agent carries its own context window)
 - Prefer fewer, well-scoped agents over many overlapping ones
-- Include system resource info (from hook injection) when delegating tasks so subagents can self-regulate
 
 ---
 
@@ -132,7 +131,7 @@ Docs: [docs path]
 
 | ❌ Vague | ✅ Precise |
 |----------|-----------|
-| "Pick up where we left off" | "Add the `/users` POST endpoint per `phase-02.md`" |
+| "Pick up where we left off" | "Add the `/users` POST endpoint per `task-02-api.md`" |
 | "Fix the issues we talked about" | "Add null-check in `auth.ts:45` — root cause: missing input validation" |
 | "Explore the codebase" | "Read `src/api/routes.ts`, then add the missing handler" |
 | Dumping 50+ lines of chat history | A 5-line summary with file paths |

package/src/claude/rules/review-audit-self-decision.md

@@ -12,10 +12,10 @@ When rejecting an audit concern, name the verification source briefly.
 
 ## User Decisions
 
-Do not silently undo an explicit user decision. This covers the C1 scope choice,
-C2 finding dispositions, and C3 completion judgement, along with thresholds,
+Do not silently undo an explicit user decision. This covers the GATE-SCOPE scope choice,
+GATE-REVIEW finding dispositions, and GATE-DONE completion judgement, along with thresholds,
 selected libraries, feature scope, schema shape, pricing, timelines, compliance
-choices, and UX trade-offs. Those gates are defined in `workflow.md`; this rule
+choices, and UX trade-offs. Those gates are defined in `state-sync.md`; this rule
 governs only how a later review may treat them.
 
 If an audit suggests reversing a user decision, present:

package/src/claude/rules/skill-domain-routing.md

@@ -27,6 +27,4 @@ an entry condition for the primary. If zero valid capabilities match, continue
 inline when safe or name the gap. If multiple catalog entries expose the same
 public identity, do not auto-route; require explicit user disambiguation.
 
-Never infer an optional document capability from this rule. Never select the
-explicit-only numeric optimization capability unless the user invokes it with
-its required bounded metric/guard contract.
+Never infer an optional document capability from this rule.

package/src/claude/rules/skill-workflow-routing.md

@@ -9,9 +9,9 @@ workflow.
 1. If the user names a valid installed skill, use it directly.
 2. If one obvious low-risk installed skill covers the intent, use it directly.
 3. For direct factual conversation, answer directly or use the installed
-   evidence-answer capability; do not invoke Route or agents for ceremony.
-4. For ambiguous, multi-step, multi-domain, or elevated/high-risk work, use the
-   installed Route capability to classify and compose the shortest valid chain.
+   evidence-answer capability; do not spawn agents for ceremony.
+4. For ambiguous, multi-step, multi-domain, or elevated/high-risk work, classify
+   it yourself and compose the shortest valid chain below.
 
 Resolve every abstract link against the current runtime catalog. An absent,
 invalid, folder-mismatched, duplicate, or retired entry is not routable. Continue
@@ -28,5 +28,4 @@ owner, entry condition, and observable exit per retained link. Diagnosis does
 not authorize repair; implementation does not authorize commit, push, deploy,
 publish, or release; no route expands the user's existing authority.
 
-Use `skill-domain-routing.md` to resolve domain capability slots. The numeric
-optimization capability remains explicit-only and must never be auto-routed.
+Use `skill-domain-routing.md` to resolve domain capability slots.

package/src/claude/rules/state-sync.md

@@ -51,19 +51,10 @@ proves only the boundary it executed.
 
 ## Human gates and workflow ownership
 
-- C1 records the user's scope decision before the plan is written.
-- C2 records the user's disposition of deduplicated adversarial findings.
+- GATE-SCOPE records the user's scope decision before the plan is written.
+- GATE-REVIEW records the user's disposition of deduplicated adversarial findings.
 - Develop starts only after a new explicit user invocation and executes one
   unblocked task at a time.
 - Sync changes only observed file state and never starts implementation.
-- C3 occurs after current receipts and limitations are shown; the user decides
+- GATE-DONE occurs after current receipts and limitations are shown; the user decides
   whether the requested feature is complete.
-
-## Legacy compatibility
-
-Existing packets containing `spec.json`, nested `tasks/task-R*.md`, or other
-legacy kernel artifacts stay on their installed adapters. Preserve their
-`task_registry`, `semantic_model`, `planning_depth`, lane,
-`execution_tier`, typed topology, separate receipts, and feature closeout
-contract. Do not migrate that machine authority or storage shape while syncing
-an unrelated process-first packet.

package/src/claude/rules/workflow.md

@@ -8,14 +8,14 @@ Use the CafeKit loop: **Understand -> Plan -> Execute -> Verify -> Sync**.
 - Read the active spec/task file when one exists.
 - Read and activate any CafeKit skill that likely applies before taking action.
 - Inspect only the code needed to understand the affected area.
-- Use `inspect` or focused search when structure is unclear.
+- Use `cf:scout` or focused search when structure is unclear.
 
 ## 2. Plan
 
 - For non-trivial features, use `/cf:specs` to challenge the minimum scope,
-  open C1, and create `specs/<feature>/plan.md` with flat
+  open GATE-SCOPE, and create `specs/<feature>/plan.md` with flat
   `task-NN-*.md` files beside it.
-- After adversarial review, open C2 and apply only the findings the user accepts
+- After adversarial review, open GATE-REVIEW and apply only the findings the user accepts
   or revises. Specs never starts implementation.
 - Start implementation only after a new explicit `/cf:develop` invocation,
   then select one unblocked task at a time.
@@ -24,16 +24,18 @@ Use the CafeKit loop: **Understand -> Plan -> Execute -> Verify -> Sync**.
   - `Outcome`
   - `Scope`
   - `Ownership`
+  - `Steps`
   - `Acceptance`
   - `Dependencies`
   - `Verification Plan`
+  - `Failure Protocol`
 - If these are missing or too vague to verify, route back to spec correction.
 
 ## 3. Execute
 
 - Implement only the active scope.
 - Modify existing files directly; do not create duplicate "enhanced" variants.
-- Keep named contracts from `design.md` intact.
+- Keep named contracts from the plan and task intact.
 - Do not use placeholder wiring, process-local stand-ins, or fake adapters as completion proof.
 
 ## 4. Verify
@@ -53,16 +55,15 @@ Use the CafeKit loop: **Understand -> Plan -> Execute -> Verify -> Sync**.
   sole writer of task Status and proof.
 - Keep exactly one `Status:` field. Write or replace the task's final inline
   `## Receipt` before setting `Status: done`.
-- A canonical Receipt contains the exact command, `Exit: 0`,
-  `Verification: PASS`, runtime-derived Base and Head values, and non-empty
-  fenced current output. Never invent, copy, or infer missing proof.
+- The canonical Receipt is defined in `state-sync.md`. Never invent, copy, or
+  infer missing proof.
 - When the binding to Base and Head applies, and what the gate does and does not
   detect, are stated once in `state-sync.md`.
 - Re-read each edited task and reconcile its plan row, dependencies, acceptance
   mapping, status, and receipt without rewriting unrelated bytes.
-- Run docs checkpoint when a completed task affects public docs or architecture docs.
+- Update affected existing docs when a completed task changes public or architecture docs.
 - After all requested work has current proof, show evidence and limitations at
-  C3. The user decides whether the feature is complete.
+  GATE-DONE. The user decides whether the feature is complete.
 
 ## Production Or CI Issues
 
@@ -73,12 +74,3 @@ Use the CafeKit loop: **Understand -> Plan -> Execute -> Verify -> Sync**.
 5. Review before syncing or shipping.
 
 Do not patch symptoms before diagnosis unless the issue is a trivial syntax/type/lint failure with an obvious local cause.
-
-## Legacy compatibility
-
-When an existing feature contains `spec.json`, nested `tasks/task-R*.md`, or
-other legacy kernel artifacts, keep using the installed adapter. Preserve its
-`task_registry`, `semantic_model`, `planning_depth`, lane,
-`execution_tier`, typed boundaries, separate receipts, and final feature
-receipt. Do not project that machine authority or storage shape into a new
-process-first packet.

package/src/claude/runtime.schema.json

@@ -58,7 +58,8 @@
         "scaffold_guard": {
           "type": "boolean",
           "default": true,
-          "description": "Require task files to be generated by the scaffold script. Set false to write them by hand."
+          "deprecated": true,
+          "description": "Not honoured. The task-scaffold guard that read this key was removed; the key is kept so existing runtime.json files stay valid."
         },
         "tollgate": {
           "type": "boolean",
@@ -75,12 +76,13 @@
     "usage": {
       "type": "object",
       "additionalProperties": false,
-      "description": "Usage and quota reporting.",
+      "deprecated": true,
+      "description": "Not honoured. The usage hook that read this key was removed; the statusline takes quota from the rate_limits Claude Code sends. Kept so existing runtime.json files stay valid.",
       "properties": {
         "enabled": {
           "type": "boolean",
           "default": true,
-          "description": "Set false to stop fetching quota data for the statusline."
+          "description": "Not honoured. Nothing fetches quota data any more."
         }
       }
     },

package/src/claude/scripts/generate-skill-catalog.cjs

@@ -15,12 +15,13 @@ const RETIRED_DIRECTORIES = new Set([
   'mobile-development',
   'devops',
   'react-best-practices',
+  'inspect',
+  'hotfix',
+  'question',
+  'loop',
+  'route',
+  'delegate',
 ]);
-const PUBLIC_SUFFIX_BY_DIRECTORY = {
-  hotfix: 'fix',
-  inspect: 'scout',
-  question: 'ask',
-};
 
 function usage() {
   console.log(`Usage:
@@ -124,7 +125,7 @@ function publicIdentity(name) {
 }
 
 function expectedIdentity(directory) {
-  return `cf:${PUBLIC_SUFFIX_BY_DIRECTORY[directory] || directory}`;
+  return `cf:${directory}`;
 }
 
 function diagnostic(code, directory, message) {

package/src/claude/scripts/provenance.cjs

@@ -228,13 +228,30 @@ function identity(input) {
   return { root, specsRoot, specFile, feature, session, mode };
 }
 
+// A Stop hook checks every done receipt against one checkout. Without a memo each
+// receipt re-read the whole repository twice, so the gate grew with the number of
+// done tasks (minutes on a large specs root). The memo is opt-in and lives only in
+// the enabling process; every other caller still captures a fresh snapshot.
+const snapshotMemo = new Map();
+let snapshotMemoEnabled = false;
+function enableSnapshotMemo() { snapshotMemoEnabled = true; }
+
+function captureSnapshot(root, specsRoot) {
+  const key = `${root}\0${specsRoot}`;
+  if (snapshotMemoEnabled && snapshotMemo.has(key)) return snapshotMemo.get(key);
+  const base = gitBase(root, specsRoot);
+  const first = manifest(root, specsRoot);
+  const head = manifestDigest(first);
+  const second = manifest(root, specsRoot);
+  if (JSON.stringify(first) !== JSON.stringify(second) || gitBase(root, specsRoot) !== base) fail('worktree_race', 'checkout changed during provenance capture');
+  const snapshot = { base, head };
+  if (snapshotMemoEnabled) snapshotMemo.set(key, snapshot);
+  return snapshot;
+}
+
 function deriveRuntimeProvenance(input) {
   const current = identity(input);
-  const base = gitBase(current.root, current.specsRoot);
-  const first = manifest(current.root, current.specsRoot);
-  const head = manifestDigest(first);
-  const second = manifest(current.root, current.specsRoot);
-  if (JSON.stringify(first) !== JSON.stringify(second) || gitBase(current.root, current.specsRoot) !== base) fail('worktree_race', 'checkout changed during provenance capture');
+  const { base, head } = captureSnapshot(current.root, current.specsRoot);
   const stable = {
     schema_version: CONTEXT_SCHEMA_VERSION,
     project_root: current.root,
@@ -328,6 +345,7 @@ module.exports = {
   createReceiptBinding,
   deriveRuntimeContext: deriveRuntimeProvenance,
   deriveRuntimeProvenance,
+  enableSnapshotMemo,
   isTrustedRuntimeContext,
   recomputeRuntimeContext: recomputeRuntimeProvenance,
   recomputeRuntimeProvenance,

package/src/claude/scripts/spec-receipt.cjs

@@ -113,7 +113,10 @@ function hasNonEmptyFencedBlock(body) {
 
 function fieldValues(body, name) {
   const escaped = name.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-  const matcher = new RegExp(`^\\s*${escaped}\\s*:\\s*(.*?)\\s*$`, 'i');
+  // A leading list marker is accepted: every neighbouring section of a task file writes
+  // its fields as list items, so continuing that style inside the Receipt is the
+  // natural mistake rather than a malformed receipt.
+  const matcher = new RegExp(`^\\s*(?:[-*+]\\s+)?${escaped}\\s*:\\s*(.*?)\\s*$`, 'i');
   return String(body || '').split('\n').map((line) => line.match(matcher)).filter(Boolean).map((match) => match[1]);
 }
 
@@ -146,11 +149,18 @@ function workflowVerificationCommand(taskText) {
     if (current) current.push(line);
   }
   if (sections.length !== 1) return null;
-  const commands = sections[0]
-    .map((line) => line.match(/^\s*-\s+(?:\*\*Command\*\*|Command)\s*:\s*(.*?)\s*$/i))
-    .filter(Boolean)
+  // Only a top-level `- Command:` counts: an indented one belongs to another field such as a
+  // Counterexample, and one under a `###` sub-heading is a side step that must not outrank
+  // the main block. When commands exist only under sub-headings, they are used as before.
+  const commandOf = (line) => line.match(/^-\s+(?:\*\*Command\*\*|Command)\s*:\s*(.*?)\s*$/i);
+  const firstSub = sections[0].findIndex((line) => /^###\s+/.test(line));
+  const main = (firstSub === -1 ? sections[0] : sections[0].slice(0, firstSub)).map(commandOf).filter(Boolean);
+  const commands = (main.length ? main : sections[0].map(commandOf).filter(Boolean))
     .map((match) => normalizedCommand(match[1]));
-  return commands.length === 1 ? commands[0] : null;
+  // A plan may declare several commands when its proof takes more than one step. The last
+  // is canonical: earlier ones are prerequisites, and binding the Receipt to any of them
+  // would let a task close on its cheapest step. None declared still fails closed.
+  return commands.length >= 1 ? commands[commands.length - 1] : null;
 }
 
 function workflowCommandFailures(taskText, body) {
@@ -335,6 +345,41 @@ function checkWorkflowTaskReceipt(featureDir, taskPath, runtimeContext, policy)
   };
 }
 
+// The gate used to answer every receipt failure with the same sentence — write a
+// runtime-bound Receipt — which is the wrong instruction whenever the Receipt is
+// present and one field simply could not be read. Name what to change instead.
+const RECEIPT_FIX_HINTS = Object.freeze([
+  ['missing_receipt', 'add exactly one `## Receipt` section at the end of the file'],
+  ['task_status', 'the file needs exactly one `Status: done` line outside any fence'],
+  ['verification_state', 'add a `Verification: PASS` line'],
+  ['command', 'add a `Command:` line holding the exact command that was run'],
+  ['command_identity', 'the `Command:` line must match the Verification Plan command exactly'],
+  ['exit_result', 'add `Exit: 0`; a non-zero exit or a failure marker does not close a task'],
+  ['command_output', 'add a non-empty fenced block holding the real command output'],
+  ['placeholder', 'replace the placeholder values with real ones'],
+  ['provenance', 'add runtime-derived `Base:` and `Head:` lines matching the current runtime'],
+]);
+
+/**
+ * Turn receipt check codes into one instruction naming what to change. When the receipt
+ * body is available, a provenance failure is refined: telling someone to add lines they
+ * already wrote sends them looking in the wrong place, and the common cause is a pair
+ * typed by hand — git short SHAs — rather than the pair this runtime derives.
+ */
+function receiptFixHint(failures, body) {
+  const codes = new Set(Array.isArray(failures) ? failures : []);
+  const hints = RECEIPT_FIX_HINTS.filter(([code]) => codes.has(code)).map(([, hint]) => hint);
+  if (hints.length === 0) return null;
+  if (codes.has('provenance') && typeof body === 'string'
+    && fieldValues(body, 'Base').length > 0 && fieldValues(body, 'Head').length > 0) {
+    const index = hints.length - 1;
+    hints[index] = 'the `Base:` and `Head:` lines are present but are not the pair this runtime derives'
+      + ' — re-derive them (`Base` is a 40-character commit id, `Head` a 64-character tree digest);'
+      + ' git short SHAs typed by hand never match';
+  }
+  return hints.length === 1 ? hints[0] : `${hints.slice(0, -1).join('; ')}; and ${hints[hints.length - 1]}`;
+}
+
 function workflowProofSignature(taskPath, proof) {
   const hash = crypto.createHash('sha256');
   hash.update('cafekit-workflow-proof-v1\0');
@@ -381,7 +426,7 @@ function checkWorkflowReceiptSet(candidates, projectRoot, runtimeSession, policy
     for (const taskPath of doneTasks) {
       const proof = checkWorkflowTaskReceipt(candidate.featureDir, taskPath, runtimeContext, policy);
       if (proof.failures.length > 0) {
-        failures.push({ featureName: candidate.featureName, taskPath, failures: proof.failures });
+        failures.push({ featureName: candidate.featureName, taskPath, failures: proof.failures, body: proof.body });
       }
     }
   }
@@ -404,6 +449,7 @@ module.exports = {
   checkTaskReceipt,
   checkWorkflowReceiptSet,
   checkWorkflowTaskReceipt,
+  receiptFixHint,
   evidenceBody,
   readTaskProof,
   safeRead,

package/src/claude/scripts/spec-resolver.cjs

@@ -860,8 +860,7 @@ function explicitWorkflowFeatureName({ projectRoot, specsDir, explicitFeature, e
 
 /**
  * Resolve the authoring/execution workflow visible to prompt and Stop hooks.
- * Persisted spec resolution remains unchanged; process-v3 is an additive adapter
- * and never becomes completion-authority input by way of findAllSpecCandidates.
+ * Persisted spec resolution remains unchanged; process-v3 is an additive adapter.
  */
 function resolveWorkflowCandidate({ projectRoot, runtime, explicitFeature, explicitPath, target, includeCompleted = false } = {}) {
   if (!projectRoot) throw new TypeError('projectRoot required');

package/src/claude/scripts/validate-spec-output.cjs

@@ -724,11 +724,9 @@ function taskDeclaresParallel(content, taskPath, errors) {
 }
 
 /**
- * Task files are created from the scaffold template (the scaffold-guard hook
- * forces creation through it), so every task starts as a stub full of `{{...}}`
- * placeholders. The hook guarantees the stub is CREATED via scaffold, but
- * nothing guaranteed the model FILLED it. An unfilled `{{...}}` is an
- * incomplete task — SKILL.md: "Leave NO {{...}} placeholder ... fails DoCT" —
+ * Task files are usually created from the scaffold template, so a task can start as
+ * a stub full of `{{...}}` placeholders, and nothing guarantees the model FILLED it.
+ * An unfilled `{{...}}` is an incomplete task — SKILL.md: "Leave NO {{...}} placeholder ... fails DoCT" —
  * so it is a hard error here. A `.../` path fragment is a not-yet-resolved path
  * placeholder; it is only a warning, because it usually survives in prose Steps
  * while the Related Files table (which spec-ground.cjs does verify) is already
@@ -2471,23 +2469,7 @@ function validateSemanticReview(specDir, spec, context, subCriteriaIds, designTe
       errors.push('spec.json.validation.semantic_review.reviewed_artifact_digest: stale or does not match final artifacts and canonical state');
     }
   }
-  if (context.policy?.assurance_level === 'Strict' && SHA256_RE.test(review.reviewed_artifact_digest || '')) {
-    try {
-      const authority = require('../hooks/semantic-review-authority.cjs');
-      const canonicalSpecDir = fs.realpathSync(specDir);
-      let root = fs.realpathSync(process.cwd());
-      if (!isPathInside(root, canonicalSpecDir)) root = path.dirname(path.dirname(canonicalSpecDir));
-      const attestation = authority.verifyAttestation(
-        root,
-        path.join(canonicalSpecDir, 'spec.json'),
-        spec.feature_name,
-        review.reviewed_artifact_digest,
-      );
-      if (!attestation.ok) errors.push(`spec.json.validation.semantic_review: Strict assurance requires matching host-observed reviewer PASS attestation (${attestation.reason})`);
-    } catch (error) {
-      errors.push(`spec.json.validation.semantic_review: Strict assurance attestation is unavailable (${error.message})`);
-    }
-  }
+  if (context.policy?.assurance_level === 'Strict') errors.push('spec.json.validation.semantic_review: Strict assurance is no longer supported (its reviewer attestation hook was removed); move the packet to plan.md with flat task files');
 
   const criteria = Array.isArray(review.reviewed_criteria) ? review.reviewed_criteria : [];
   const criterionSet = new Set(criteria);
@@ -2901,16 +2883,7 @@ function validateSemanticReview21(specDir, spec, criteria, designIds, verificati
     }
   }
   for (const criterion of criteria) if (!covered.has(criterion)) errors.push(`semantic review counterexamples missing criterion ${criterion}`);
-  if (spec.workflow_policy?.assurance_level === 'Strict' && SHA256_RE.test(review.semantic_digest || '')) {
-    try {
-      const authority = require('../hooks/semantic-review-authority.cjs');
-      const root = canonicalProjectRoot(specDir);
-      const attestation = authority.verifyAttestation(root, path.join(specDir, 'spec.json'), spec.feature_name, review.semantic_digest);
-      if (!attestation.ok) errors.push(`spec.json.validation.semantic_review: Strict readiness requires matching allowlisted host-observed reviewer PASS attestation (${attestation.reason})`);
-    } catch (error) {
-      errors.push(`spec.json.validation.semantic_review: Strict readiness attestation is unavailable (${error.message})`);
-    }
-  }
+  if (spec.workflow_policy?.assurance_level === 'Strict') errors.push('spec.json.validation.semantic_review: Strict assurance is no longer supported (its reviewer attestation hook was removed); move the packet to plan.md with flat task files');
 }
 
 function computeLineageId(featureName, createdAt) {

package/src/claude/scripts/workflow-policy.cjs

@@ -1884,6 +1884,18 @@ function flashState(taskRegistry = {}) {
     .map(([taskPath]) => taskPath);
 }
 
+// Every other section of a task file writes its fields as list items — the Verification
+// Plan's own `- Command:` sits a few lines above the Receipt — so continuing that house
+// style inside the Receipt is the natural mistake, and it used to fail five checks at
+// once with a message that pointed at the content instead of the dash. Accept either
+// form. The receipt body is cut to its own `## Receipt` section, so this cannot pick up
+// the Verification Plan's fields.
+const RECEIPT_FIELD_PREFIX = '\\s*(?:[-*+]\\s+)?';
+
+function receiptFieldPattern(name, tail = '\\s*:', flags = '') {
+  return new RegExp(`^${RECEIPT_FIELD_PREFIX}${name}${tail}`, flags);
+}
+
 function validateCanonicalReceipt(body, options = {}) {
   if (typeof body !== 'string') return ['verification_state'];
   const failures = [];
@@ -1900,15 +1912,15 @@ function validateCanonicalReceipt(body, options = {}) {
     addFailure('verification_state');
   }
   // Unambiguous verification state: must be Verification: PASS exactly
-  if (!/^\s*Verification:\s*PASS\s*$/m.test(body)) {
+  if (!receiptFieldPattern('Verification', '\\s*:\\s*PASS\\s*$', 'm').test(body)) {
     addFailure('verification_state');
   }
   // Command must be present with non-empty concrete value on same line, not placeholder
-  const cmdLine = body.split('\n').find((l) => /^\s*Command(?:\(s\))?\s*:/m.test(l)) || null;
-  if (!cmdLine || !/^\s*Command(?:\(s\))?\s*:[ \t]*\S/m.test(cmdLine)) {
+  const cmdLine = body.split('\n').find((l) => receiptFieldPattern('Command(?:\\(s\\))?', '\\s*:', 'm').test(l)) || null;
+  if (!cmdLine || !receiptFieldPattern('Command(?:\\(s\\))?', '\\s*:[ \\t]*\\S', 'm').test(cmdLine)) {
     addFailure('command');
   } else {
-    const m = cmdLine.match(/^\s*Command(?:\(s\))?\s*:[ \t]*(.*)$/m);
+    const m = cmdLine.match(receiptFieldPattern('Command(?:\\(s\\))?', '\\s*:[ \\t]*(.*)$', 'm'));
     const val = m ? m[1].trim() : '';
     if (isPlaceholderToken(val)) {
       addFailure('command');
@@ -1921,15 +1933,15 @@ function validateCanonicalReceipt(body, options = {}) {
   const exitValues = [];
   const resultValues = [];
   for (const line of lines) {
-    if (/^\s*Exit\s*:/i.test(line)) {
-      const m = line.match(/^\s*Exit\s*:\s*(.*)$/i);
+    if (receiptFieldPattern('Exit', '\\s*:', 'i').test(line)) {
+      const m = line.match(receiptFieldPattern('Exit', '\\s*:\\s*(.*)$', 'i'));
       exitValues.push(m ? m[1].trim() : '');
     } else if (/exit\s+code\s*[:=]/i.test(line)) {
       const m = line.match(/exit\s+code\s*[:=]\s*(.*)$/i);
       if (m) exitValues.push(m[1].trim());
     }
-    if (/^\s*Result\s*:/i.test(line)) {
-      const m = line.match(/^\s*Result\s*:\s*(.+?)\s*$/i);
+    if (receiptFieldPattern('Result', '\\s*:', 'i').test(line)) {
+      const m = line.match(receiptFieldPattern('Result', '\\s*:\\s*(.+?)\\s*$', 'i'));
       resultValues.push(m ? m[1].trim() : '');
     }
   }
@@ -1954,8 +1966,8 @@ function validateCanonicalReceipt(body, options = {}) {
   // Without expected values this validates schema only; it does not claim identity binding.
   const receiptLines = body.split('\n');
   const readField = (name) => receiptLines
-    .filter((line) => new RegExp(`^\\s*${name}\\s*:`, 'i').test(line))
-    .map((line) => line.replace(new RegExp(`^\\s*${name}\\s*:\\s*`, 'i'), '').trim());
+    .filter((line) => receiptFieldPattern(name, '\\s*:', 'i').test(line))
+    .map((line) => line.replace(receiptFieldPattern(name, '\\s*:\\s*', 'i'), '').trim());
   const baseValues = readField('Base');
   const headValues = readField('Head');
   const baseShaValues = readField('base_sha');

package/src/claude/settings/settings.json

@@ -14,10 +14,6 @@
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/session.cjs\""
           },
-          {
-            "type": "command",
-            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/docs-sync.cjs\""
-          },
           {
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/state.cjs\""
@@ -58,18 +54,9 @@
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/rules.cjs\""
           },
-          {
-            "type": "command",
-            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/completion-authority.cjs\""
-          },
           {
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/spec-state.cjs\""
-          },
-          {
-            "type": "command",
-            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/usage.cjs\"",
-            "timeout": 30
           }
         ]
       }
@@ -87,15 +74,6 @@
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/inspect-block.cjs\""
           }
         ]
-      },
-      {
-        "matcher": "Write",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/task-scaffold-guard.cjs\""
-          }
-        ]
       }
     ],
     "PostToolUse": [
@@ -113,8 +91,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/usage.cjs\"",
-            "timeout": 30
+            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/spec-state.cjs\""
           }
         ]
       }
@@ -126,10 +103,6 @@
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/spec-gate.cjs\""
           },
-          {
-            "type": "command",
-            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/completion-authority.cjs\""
-          },
           {
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/state.cjs\""
@@ -140,10 +113,6 @@
     "SubagentStop": [
       {
         "hooks": [
-          {
-            "type": "command",
-            "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/semantic-review-authority.cjs\""
-          },
           {
             "type": "command",
             "command": "node \"$CLAUDE_PROJECT_DIR/.claude/hooks/state.cjs\""