@hivehub/rulebook 5.3.3 → 5.4.0

package/templates/hooks/terse-activate.ps1

@@ -0,0 +1,143 @@
+# Claude Code SessionStart hook for rulebook-terse (v5.4.0) — Windows.
+#
+# Mirrors templates/hooks/terse-activate.sh. Resolves mode, writes
+# flag file, reads SKILL.md, filters intensity table + examples to
+# the active level only, emits the filtered body to stdout.
+
+$ErrorActionPreference = 'SilentlyContinue'
+
+$validModes = @('off','brief','terse','ultra','commit','review')
+
+# Read optional JSON input from stdin (SessionStart may pass metadata).
+$input = $null
+if (-not [Console]::IsInputRedirected) { $input = $null }
+else { try { $input = [Console]::In.ReadToEnd() } catch { } }
+
+$projectRoot = $null
+if ($input) {
+  try { $projectRoot = (ConvertFrom-Json $input).cwd } catch { }
+}
+if (-not $projectRoot) {
+  if ($env:CLAUDE_PROJECT_DIR) { $projectRoot = $env:CLAUDE_PROJECT_DIR }
+  else { $projectRoot = (Get-Location).Path }
+}
+
+$flagPath     = Join-Path $projectRoot '.rulebook/.terse-mode'
+$projectCfg   = Join-Path $projectRoot '.rulebook/rulebook.json'
+$userCfgBase  = if ($env:XDG_CONFIG_HOME) { $env:XDG_CONFIG_HOME } else { Join-Path $env:APPDATA 'rulebook' }
+$userCfg      = Join-Path $userCfgBase 'config.json'
+
+function Resolve-Mode {
+  foreach ($candidate in @(
+    $env:RULEBOOK_TERSE_MODE,
+    (Get-ConfigMode $projectCfg),
+    (Get-ConfigMode $userCfg)
+  )) {
+    if ($candidate) {
+      $m = $candidate.Trim().ToLower()
+      if ($validModes -contains $m) { return $m }
+    }
+  }
+  return 'terse'
+}
+
+function Get-ConfigMode([string]$path) {
+  if (-not (Test-Path $path)) { return $null }
+  try {
+    $cfg = Get-Content -Raw -ErrorAction Stop $path | ConvertFrom-Json
+    if ($cfg -and $cfg.terse -and $cfg.terse.defaultMode) {
+      return $cfg.terse.defaultMode
+    }
+  } catch { }
+  return $null
+}
+
+function Write-SafeFlag([string]$content) {
+  $dir = Split-Path -Parent $flagPath
+  if (-not (Test-Path $dir)) { New-Item -ItemType Directory -Force $dir | Out-Null }
+
+  # Refuse if target or parent is a symlink.
+  $parentAttr = (Get-Item $dir -Force).Attributes
+  if ($parentAttr -band [IO.FileAttributes]::ReparsePoint) { return }
+  if (Test-Path $flagPath) {
+    $attr = (Get-Item $flagPath -Force).Attributes
+    if ($attr -band [IO.FileAttributes]::ReparsePoint) { return }
+  }
+
+  $tmp = Join-Path $dir (".terse-mode." + [Guid]::NewGuid().ToString('N').Substring(0,8))
+  try {
+    [IO.File]::WriteAllText($tmp, $content, (New-Object Text.UTF8Encoding $false))
+    Move-Item -Force $tmp $flagPath
+  } catch {
+    if (Test-Path $tmp) { Remove-Item -Force $tmp }
+  }
+}
+
+$mode = Resolve-Mode
+
+if ($mode -eq 'off') {
+  if (Test-Path $flagPath) { Remove-Item -Force $flagPath }
+  exit 0
+}
+
+Write-SafeFlag $mode
+
+# Locate SKILL.md.
+$skillCandidates = @(
+  (Join-Path $projectRoot '.claude/skills/rulebook-terse/SKILL.md'),
+  (Join-Path $projectRoot 'templates/skills/core/rulebook-terse/SKILL.md')
+)
+$skillBody = $null
+foreach ($p in $skillCandidates) {
+  if (Test-Path $p) {
+    $skillBody = Get-Content -Raw $p
+    break
+  }
+}
+
+Write-Output "RULEBOOK-TERSE MODE ACTIVE — level: $mode"
+Write-Output ""
+
+if (-not $skillBody) {
+  Write-Output @"
+## Persistence
+ACTIVE EVERY RESPONSE once set. Off only via "/rulebook-terse off", "normal mode", or session end.
+
+## Rules
+Drop filler (just, really, basically), pleasantries, hedging. Keep technical terms exact. Code blocks byte-for-byte unchanged.
+
+## Auto-Clarity
+Full prose for: security warnings, destructive-op confirmations, quality-gate failures, multi-step sequences, user confusion.
+
+## Boundaries
+Code/tests/commits/specs: unchanged.
+"@
+  exit 0
+}
+
+# Strip YAML frontmatter + filter intensity table + example rows.
+$lines = $skillBody -split "`n"
+$inFm = $false
+$pastFm = $false
+$tableRow = '^\s*\|\s*\*\*([^*]+)\*\*\s*\|'
+$exampleLine = '^\s*-\s*\*\*([^*]+)\*\*\s*:'
+
+foreach ($line in $lines) {
+  if (-not $pastFm) {
+    if ($line -match '^---\s*$') {
+      if (-not $inFm) { $inFm = $true; continue }
+      else { $inFm = $false; $pastFm = $true; continue }
+    }
+    if ($inFm) { continue }
+  }
+
+  if ($line -match $tableRow) {
+    if ($Matches[1] -eq $mode) { Write-Output $line }
+    continue
+  }
+  if ($line -match $exampleLine) {
+    if ($Matches[1] -eq $mode) { Write-Output $line }
+    continue
+  }
+  Write-Output $line
+}

package/templates/hooks/terse-activate.sh

@@ -0,0 +1,197 @@
+#!/usr/bin/env bash
+# Claude Code SessionStart hook for rulebook-terse (v5.4.0).
+#
+# Resolves the active intensity mode, writes it to the project-local
+# flag file via a symlink-safe path, reads the installed SKILL.md,
+# filters the intensity table + example rows down to the active
+# level only, and emits the filtered body to stdout — Claude Code
+# injects SessionStart stdout as hidden `additionalContext`.
+#
+# Contract matches `.rulebook/specs/RULEBOOK_TERSE.md`. Silent-fails
+# on every filesystem error so a broken hook never blocks session
+# start.
+#
+# Configuration resolution (first match wins):
+#   1. RULEBOOK_TERSE_MODE env var
+#   2. $PROJECT_ROOT/.rulebook/rulebook.json → terse.defaultMode
+#   3. $XDG_CONFIG_HOME/rulebook/config.json → terse.defaultMode
+#   4. ~/.config/rulebook/config.json       → terse.defaultMode
+#   5. "terse"
+
+set -u
+
+# Hook input may arrive on stdin as JSON — read it if present so we
+# can resolve PROJECT_ROOT from the `cwd` field (Claude Code may
+# invoke the hook from a sub-directory of the project).
+input=""
+if [ ! -t 0 ]; then
+  input="$(cat)"
+fi
+
+PROJECT_ROOT=""
+if [ -n "$input" ]; then
+  PROJECT_ROOT="$(printf '%s' "$input" | node -e "
+    try {
+      const data = JSON.parse(require('fs').readFileSync(0, 'utf8'));
+      process.stdout.write(data.cwd || '');
+    } catch { }
+  " 2>/dev/null || true)"
+fi
+[ -z "$PROJECT_ROOT" ] && PROJECT_ROOT="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+
+FLAG_PATH="${PROJECT_ROOT}/.rulebook/.terse-mode"
+CONFIG_DIR="${XDG_CONFIG_HOME:-$HOME/.config}/rulebook"
+USER_CONFIG="${CONFIG_DIR}/config.json"
+PROJECT_CONFIG="${PROJECT_ROOT}/.rulebook/rulebook.json"
+
+VALID_MODES_RE='^(off|brief|terse|ultra|commit|review)$'
+
+resolve_mode() {
+  # 1. Env var
+  if [ -n "${RULEBOOK_TERSE_MODE:-}" ]; then
+    local m="$(printf '%s' "$RULEBOOK_TERSE_MODE" | tr '[:upper:]' '[:lower:]' | tr -d '[:space:]')"
+    if [[ "$m" =~ $VALID_MODES_RE ]]; then
+      printf '%s' "$m"
+      return
+    fi
+  fi
+
+  # 2. Project config
+  if [ -f "$PROJECT_CONFIG" ]; then
+    local m
+    m="$(node -e "
+      try {
+        const cfg = JSON.parse(require('fs').readFileSync(process.argv[1], 'utf8'));
+        if (cfg.terse && cfg.terse.defaultMode) process.stdout.write(String(cfg.terse.defaultMode));
+      } catch { }
+    " "$PROJECT_CONFIG" 2>/dev/null | tr '[:upper:]' '[:lower:]' | tr -d '[:space:]' || true)"
+    if [ -n "$m" ] && [[ "$m" =~ $VALID_MODES_RE ]]; then
+      printf '%s' "$m"
+      return
+    fi
+  fi
+
+  # 3. User config
+  if [ -f "$USER_CONFIG" ]; then
+    local m
+    m="$(node -e "
+      try {
+        const cfg = JSON.parse(require('fs').readFileSync(process.argv[1], 'utf8'));
+        if (cfg.terse && cfg.terse.defaultMode) process.stdout.write(String(cfg.terse.defaultMode));
+      } catch { }
+    " "$USER_CONFIG" 2>/dev/null | tr '[:upper:]' '[:lower:]' | tr -d '[:space:]' || true)"
+    if [ -n "$m" ] && [[ "$m" =~ $VALID_MODES_RE ]]; then
+      printf '%s' "$m"
+      return
+    fi
+  fi
+
+  printf 'terse'
+}
+
+# Symlink-safe flag-file write. Refuses if target or parent is a
+# symlink; creates with 0600 via umask + atomic temp+rename.
+safe_write_flag() {
+  local content="$1"
+  local dir
+  dir="$(dirname "$FLAG_PATH")"
+
+  mkdir -p "$dir" 2>/dev/null || return 0
+
+  # Refuse if parent is itself a symlink.
+  [ -L "$dir" ] && return 0
+  # Refuse if target already exists as a symlink.
+  [ -L "$FLAG_PATH" ] && return 0
+
+  local tmp
+  tmp="$(mktemp "$dir/.terse-mode.XXXXXX" 2>/dev/null)" || return 0
+  {
+    umask 077
+    printf '%s' "$content" > "$tmp" 2>/dev/null || { rm -f "$tmp"; return 0; }
+  }
+  chmod 600 "$tmp" 2>/dev/null || true
+  mv -f "$tmp" "$FLAG_PATH" 2>/dev/null || rm -f "$tmp"
+}
+
+mode="$(resolve_mode)"
+
+# "off" → unlink the flag and exit cleanly (no hidden-context emission).
+if [ "$mode" = "off" ]; then
+  rm -f "$FLAG_PATH" 2>/dev/null || true
+  exit 0
+fi
+
+safe_write_flag "$mode"
+
+# Locate the SKILL.md. Prefer the installed copy; fall back to the
+# repo-local template when running inside the Rulebook source tree.
+SKILL_PATHS=(
+  "${PROJECT_ROOT}/.claude/skills/rulebook-terse/SKILL.md"
+  "${PROJECT_ROOT}/templates/skills/core/rulebook-terse/SKILL.md"
+)
+
+skill_body=""
+for p in "${SKILL_PATHS[@]}"; do
+  if [ -f "$p" ]; then
+    skill_body="$(cat "$p" 2>/dev/null || true)"
+    break
+  fi
+done
+
+# Emit the payload. When no SKILL.md is found, fall back to a
+# minimal hardcoded ruleset — matches the Caveman pattern for
+# standalone installs without templates.
+if [ -z "$skill_body" ]; then
+  cat <<EOF
+RULEBOOK-TERSE MODE ACTIVE — level: ${mode}
+
+## Persistence
+ACTIVE EVERY RESPONSE once set. Off only via "/rulebook-terse off", "normal mode", or session end.
+
+## Rules
+Drop filler (just, really, basically), pleasantries, hedging. Keep technical terms exact. Code blocks byte-for-byte unchanged.
+
+## Auto-Clarity
+Full prose for: security warnings, destructive-op confirmations, quality-gate failures, multi-step sequences, user confusion.
+
+## Boundaries
+Code/tests/commits/specs: unchanged.
+EOF
+  exit 0
+fi
+
+# Header + filtered body. Filtering:
+#   - Strip YAML frontmatter (everything up through the second `---`).
+#   - Intensity-table rows `| **<level>** | ...` — keep only the active one.
+#   - Example lines `- **<level>**: "..."` — keep only the active one.
+#   - All other lines pass through unchanged.
+#
+# Uses `node -e` for portability — BSD awk (macOS default) does not
+# support the 3-arg `match(str, re, array)` form that gawk ships with.
+printf 'RULEBOOK-TERSE MODE ACTIVE — level: %s\n\n' "$mode"
+
+printf '%s' "$skill_body" | node -e "
+  let body = '';
+  process.stdin.setEncoding('utf8');
+  process.stdin.on('data', (c) => { body += c; });
+  process.stdin.on('end', () => {
+    const active = process.argv[1];
+    // Strip YAML frontmatter.
+    const stripped = body.replace(/^---\s*\n[\s\S]*?\n---\s*\n/, '');
+    const out = [];
+    for (const line of stripped.split('\n')) {
+      const tableRow = line.match(/^\s*\|\s*\*\*([^*]+)\*\*\s*\|/);
+      if (tableRow) {
+        if (tableRow[1] === active) out.push(line);
+        continue;
+      }
+      const exampleLine = line.match(/^\s*-\s*\*\*([^*]+)\*\*\s*:/);
+      if (exampleLine) {
+        if (exampleLine[1] === active) out.push(line);
+        continue;
+      }
+      out.push(line);
+    }
+    process.stdout.write(out.join('\n'));
+  });
+" "$mode"

package/templates/hooks/terse-mode-tracker.ps1

@@ -0,0 +1,153 @@
+# Claude Code UserPromptSubmit hook for rulebook-terse (v5.4.0) — Windows.
+#
+# Mirrors templates/hooks/terse-mode-tracker.sh. Parses slash commands
+# + natural-language activation/deactivation, updates the flag file,
+# and emits an attention anchor JSON for persistent modes.
+
+$ErrorActionPreference = 'SilentlyContinue'
+
+$validModes = @('off','brief','terse','ultra','commit','review')
+$maxFlagBytes = 32
+
+$input = $null
+try { $input = [Console]::In.ReadToEnd() } catch { }
+
+$prompt = ''
+$cwd = $null
+if ($input) {
+  try {
+    $parsed = $input | ConvertFrom-Json
+    if ($parsed.prompt) { $prompt = $parsed.prompt }
+    if ($parsed.cwd)    { $cwd = $parsed.cwd }
+  } catch { }
+}
+
+$projectRoot = if ($cwd) { $cwd } elseif ($env:CLAUDE_PROJECT_DIR) { $env:CLAUDE_PROJECT_DIR } else { (Get-Location).Path }
+$flagPath = Join-Path $projectRoot '.rulebook/.terse-mode'
+$projectCfg = Join-Path $projectRoot '.rulebook/rulebook.json'
+$userCfgBase = if ($env:XDG_CONFIG_HOME) { $env:XDG_CONFIG_HOME } else { Join-Path $env:APPDATA 'rulebook' }
+$userCfg = Join-Path $userCfgBase 'config.json'
+
+function Get-ConfigMode([string]$path) {
+  if (-not (Test-Path $path)) { return $null }
+  try {
+    $cfg = Get-Content -Raw -ErrorAction Stop $path | ConvertFrom-Json
+    if ($cfg -and $cfg.terse -and $cfg.terse.defaultMode) { return $cfg.terse.defaultMode }
+  } catch { }
+  return $null
+}
+
+function Resolve-DefaultMode {
+  foreach ($candidate in @(
+    $env:RULEBOOK_TERSE_MODE,
+    (Get-ConfigMode $projectCfg),
+    (Get-ConfigMode $userCfg)
+  )) {
+    if ($candidate) {
+      $m = $candidate.Trim().ToLower()
+      if ($validModes -contains $m) { return $m }
+    }
+  }
+  return 'terse'
+}
+
+function Write-SafeFlag([string]$content) {
+  $dir = Split-Path -Parent $flagPath
+  if (-not (Test-Path $dir)) { New-Item -ItemType Directory -Force $dir | Out-Null }
+  $parentAttr = (Get-Item $dir -Force).Attributes
+  if ($parentAttr -band [IO.FileAttributes]::ReparsePoint) { return }
+  if (Test-Path $flagPath) {
+    $attr = (Get-Item $flagPath -Force).Attributes
+    if ($attr -band [IO.FileAttributes]::ReparsePoint) { return }
+  }
+  $tmp = Join-Path $dir (".terse-mode." + [Guid]::NewGuid().ToString('N').Substring(0,8))
+  try {
+    [IO.File]::WriteAllText($tmp, $content, (New-Object Text.UTF8Encoding $false))
+    Move-Item -Force $tmp $flagPath
+  } catch {
+    if (Test-Path $tmp) { Remove-Item -Force $tmp }
+  }
+}
+
+function Read-Flag {
+  if (-not (Test-Path $flagPath)) { return $null }
+  $attr = (Get-Item $flagPath -Force).Attributes
+  if ($attr -band [IO.FileAttributes]::ReparsePoint) { return $null }
+  $size = (Get-Item $flagPath).Length
+  if ($size -gt $maxFlagBytes) { return $null }
+  $raw = (Get-Content -Raw $flagPath).Trim().ToLower()
+  if ($validModes -contains $raw) { return $raw }
+  return $null
+}
+
+$defaultMode = Resolve-DefaultMode
+$lowerPrompt = $prompt.ToLower()
+
+$newMode = $null
+$deactivate = $false
+
+if ($lowerPrompt -match '^\s*/rulebook-terse-commit\b') {
+  $newMode = 'commit'
+}
+elseif ($lowerPrompt -match '^\s*/rulebook-terse-review\b') {
+  $newMode = 'review'
+}
+elseif ($lowerPrompt -match '^\s*/rulebook-terse\s*$') {
+  $newMode = $defaultMode
+}
+elseif ($lowerPrompt -match '^\s*/rulebook-terse\s+(\S+)') {
+  $arg = $Matches[1]
+  switch ($arg) {
+    'off'    { $deactivate = $true }
+    { @('brief','terse','ultra','commit','review') -contains $_ } { $newMode = $arg }
+  }
+}
+
+if (-not $newMode -and -not $deactivate) {
+  $deactRegexes = @(
+    '\b(stop|disable|turn off|deactivate)\b.*\brulebook[- ]?terse\b',
+    '\brulebook[- ]?terse\b.*\b(stop|disable|turn off|deactivate)\b',
+    '\b(stop|disable) terse\b',
+    '\bnormal mode\b'
+  )
+  foreach ($re in $deactRegexes) {
+    if ($prompt -match $re) { $deactivate = $true; break }
+  }
+}
+
+if (-not $newMode -and -not $deactivate) {
+  $actRegexes = @(
+    '\b(activate|enable|turn on|start)\b.*\brulebook[- ]?terse\b',
+    '\brulebook[- ]?terse\b.*\b(mode|activate|enable|turn on|start)\b',
+    '\bbe terse\b',
+    '\bterse mode\b',
+    '\bless tokens?\b'
+  )
+  foreach ($re in $actRegexes) {
+    if ($prompt -match $re) { $newMode = $defaultMode; break }
+  }
+}
+
+if ($deactivate) {
+  if (Test-Path $flagPath) { Remove-Item -Force $flagPath }
+}
+elseif ($newMode) {
+  if ($newMode -eq 'off') {
+    if (Test-Path $flagPath) { Remove-Item -Force $flagPath }
+  } else {
+    Write-SafeFlag $newMode
+  }
+}
+
+$active = Read-Flag
+if ($active -and $active -ne 'off' -and $active -ne 'commit' -and $active -ne 'review') {
+  $keep = if ($active -eq 'brief') { 'Keep articles and full sentences.' } else { 'Fragments OK.' }
+  $text = "RULEBOOK-TERSE ACTIVE ($active). Drop filler/hedging/pleasantries. $keep Code/tests/commits/security: write full. Quality-gate failures + destructive ops: write full."
+  $payload = @{
+    hookSpecificOutput = @{
+      hookEventName = 'UserPromptSubmit'
+      additionalContext = $text
+    }
+  } | ConvertTo-Json -Compress -Depth 5
+  Write-Output $payload
+}

package/templates/hooks/terse-mode-tracker.sh

@@ -0,0 +1,187 @@
+#!/usr/bin/env bash
+# Claude Code UserPromptSubmit hook for rulebook-terse (v5.4.0).
+#
+# Parses slash commands + natural-language activation/deactivation
+# phrases in the user prompt, updates the project-local flag file,
+# and emits a short (~45 token) attention anchor as hookSpecificOutput
+# when a persistent mode is active — keeps the compression register in
+# the model's attention on every user message.
+#
+# Independent sub-skill modes (commit / review) do NOT get the anchor:
+# their own SKILL.md files drive behavior for the single turn they're
+# invoked.
+#
+# Silent-fails on every filesystem error.
+
+set -u
+
+input="$(cat || true)"
+prompt=""
+cwd=""
+if [ -n "$input" ]; then
+  # Parse JSON via node (always available in Claude Code hook env).
+  # Emits two lines: prompt on line 1, cwd on line 2.
+  parsed="$(printf '%s' "$input" | node -e "
+    try {
+      const data = JSON.parse(require('fs').readFileSync(0, 'utf8'));
+      process.stdout.write((data.prompt || '') + '\\n' + (data.cwd || ''));
+    } catch { process.stdout.write('\\n'); }
+  " 2>/dev/null || printf '\n')"
+  prompt="$(printf '%s' "$parsed" | head -n 1)"
+  cwd="$(printf '%s' "$parsed" | tail -n +2)"
+fi
+
+PROJECT_ROOT="${cwd:-${CLAUDE_PROJECT_DIR:-$(pwd)}}"
+FLAG_PATH="${PROJECT_ROOT}/.rulebook/.terse-mode"
+CONFIG_DIR="${XDG_CONFIG_HOME:-$HOME/.config}/rulebook"
+USER_CONFIG="${CONFIG_DIR}/config.json"
+PROJECT_CONFIG="${PROJECT_ROOT}/.rulebook/rulebook.json"
+
+VALID_MODES_RE='^(off|brief|terse|ultra|commit|review)$'
+MAX_FLAG_BYTES=32
+
+resolve_default_mode() {
+  if [ -n "${RULEBOOK_TERSE_MODE:-}" ]; then
+    local m="$(printf '%s' "$RULEBOOK_TERSE_MODE" | tr '[:upper:]' '[:lower:]' | tr -d '[:space:]')"
+    if [[ "$m" =~ $VALID_MODES_RE ]]; then printf '%s' "$m"; return; fi
+  fi
+  if [ -f "$PROJECT_CONFIG" ]; then
+    local m
+    m="$(node -e "
+      try {
+        const cfg = JSON.parse(require('fs').readFileSync(process.argv[1], 'utf8'));
+        if (cfg.terse && cfg.terse.defaultMode) process.stdout.write(String(cfg.terse.defaultMode));
+      } catch { }
+    " "$PROJECT_CONFIG" 2>/dev/null | tr '[:upper:]' '[:lower:]' | tr -d '[:space:]' || true)"
+    if [ -n "$m" ] && [[ "$m" =~ $VALID_MODES_RE ]]; then printf '%s' "$m"; return; fi
+  fi
+  if [ -f "$USER_CONFIG" ]; then
+    local m
+    m="$(node -e "
+      try {
+        const cfg = JSON.parse(require('fs').readFileSync(process.argv[1], 'utf8'));
+        if (cfg.terse && cfg.terse.defaultMode) process.stdout.write(String(cfg.terse.defaultMode));
+      } catch { }
+    " "$USER_CONFIG" 2>/dev/null | tr '[:upper:]' '[:lower:]' | tr -d '[:space:]' || true)"
+    if [ -n "$m" ] && [[ "$m" =~ $VALID_MODES_RE ]]; then printf '%s' "$m"; return; fi
+  fi
+  printf 'terse'
+}
+
+safe_write_flag() {
+  local content="$1"
+  local dir
+  dir="$(dirname "$FLAG_PATH")"
+  mkdir -p "$dir" 2>/dev/null || return 0
+  [ -L "$dir" ] && return 0
+  [ -L "$FLAG_PATH" ] && return 0
+
+  local tmp
+  tmp="$(mktemp "$dir/.terse-mode.XXXXXX" 2>/dev/null)" || return 0
+  {
+    umask 077
+    printf '%s' "$content" > "$tmp" 2>/dev/null || { rm -f "$tmp"; return 0; }
+  }
+  chmod 600 "$tmp" 2>/dev/null || true
+  mv -f "$tmp" "$FLAG_PATH" 2>/dev/null || rm -f "$tmp"
+}
+
+read_flag() {
+  # Symlink-safe, size-capped, whitelist-validated read.
+  [ ! -f "$FLAG_PATH" ] && return 1
+  [ -L "$FLAG_PATH" ] && return 1
+  local size
+  size="$(wc -c < "$FLAG_PATH" 2>/dev/null || echo "$MAX_FLAG_BYTES")"
+  [ "$size" -gt "$MAX_FLAG_BYTES" ] && return 1
+
+  local raw
+  raw="$(head -c "$MAX_FLAG_BYTES" "$FLAG_PATH" 2>/dev/null | tr '[:upper:]' '[:lower:]' | tr -d '[:space:]')"
+  if [[ "$raw" =~ $VALID_MODES_RE ]]; then
+    printf '%s' "$raw"
+    return 0
+  fi
+  return 1
+}
+
+default_mode="$(resolve_default_mode)"
+lower_prompt="$(printf '%s' "$prompt" | tr '[:upper:]' '[:lower:]')"
+
+# Parse intent. Order matters: deactivation wins over accidental
+# activation, slash commands win over natural-language patterns.
+new_mode=""
+deactivate=0
+
+# Slash commands
+if [[ "$lower_prompt" == /rulebook-terse-commit* ]]; then
+  new_mode="commit"
+elif [[ "$lower_prompt" == /rulebook-terse-review* ]]; then
+  new_mode="review"
+elif [[ "$lower_prompt" == /rulebook-terse ]]; then
+  new_mode="$default_mode"
+elif [[ "$lower_prompt" == /rulebook-terse\ * ]]; then
+  arg="$(printf '%s' "$lower_prompt" | awk '{print $2}')"
+  case "$arg" in
+    off) deactivate=1 ;;
+    brief|terse|ultra|commit|review) new_mode="$arg" ;;
+    *) : ;;  # unknown subcommand → leave state unchanged
+  esac
+fi
+
+# Natural-language deactivation — checked first so "stop terse" wins.
+if [ -z "$new_mode" ] && [ "$deactivate" -eq 0 ]; then
+  if echo "$prompt" | grep -qiE '\b(stop|disable|turn off|deactivate)\b.*\brulebook[- ]?terse\b' \
+     || echo "$prompt" | grep -qiE '\brulebook[- ]?terse\b.*\b(stop|disable|turn off|deactivate)\b' \
+     || echo "$prompt" | grep -qiE '\b(stop|disable) terse\b' \
+     || echo "$prompt" | grep -qiE '\bnormal mode\b'; then
+    deactivate=1
+  fi
+fi
+
+# Natural-language activation
+if [ -z "$new_mode" ] && [ "$deactivate" -eq 0 ]; then
+  if echo "$prompt" | grep -qiE '\b(activate|enable|turn on|start)\b.*\brulebook[- ]?terse\b' \
+     || echo "$prompt" | grep -qiE '\brulebook[- ]?terse\b.*\b(mode|activate|enable|turn on|start)\b' \
+     || echo "$prompt" | grep -qiE '\bbe terse\b' \
+     || echo "$prompt" | grep -qiE '\bterse mode\b' \
+     || echo "$prompt" | grep -qiE '\bless tokens?\b'; then
+    new_mode="$default_mode"
+  fi
+fi
+
+# Apply intent
+if [ "$deactivate" -eq 1 ]; then
+  rm -f "$FLAG_PATH" 2>/dev/null || true
+elif [ -n "$new_mode" ]; then
+  if [ "$new_mode" = "off" ]; then
+    rm -f "$FLAG_PATH" 2>/dev/null || true
+  else
+    safe_write_flag "$new_mode"
+  fi
+fi
+
+# Emit attention anchor for persistent modes only.
+active_mode="$(read_flag || true)"
+case "$active_mode" in
+  brief|terse|ultra)
+    if [ "$active_mode" = "brief" ]; then
+      keep_clause="Keep articles and full sentences."
+    else
+      keep_clause="Fragments OK."
+    fi
+    text="RULEBOOK-TERSE ACTIVE (${active_mode}). Drop filler/hedging/pleasantries. ${keep_clause} Code/tests/commits/security: write full. Quality-gate failures + destructive ops: write full."
+    # Emit hookSpecificOutput JSON via node — universal across platforms.
+    node -e "
+      const text = process.argv[1];
+      process.stdout.write(JSON.stringify({
+        hookSpecificOutput: {
+          hookEventName: 'UserPromptSubmit',
+          additionalContext: text
+        }
+      }));
+    " "$text" 2>/dev/null || true
+    ;;
+  *)
+    # No active persistent mode, or commit/review sub-skill — no anchor.
+    :
+    ;;
+esac