@hivehub/rulebook 5.5.1 → 5.7.0

package/templates/hooks/enforce-team-for-background-agents.sh

@@ -1,55 +1,55 @@
-#!/usr/bin/env bash
-# Claude Code PreToolUse hook for the Agent tool.
-#
-# Policy enforced by @hivehub/rulebook v5.3.0:
-#   - A single Agent call is fine (foreground or background).
-#   - Spawning multiple standalone Agents for parallel work is FORBIDDEN.
-#     Parallel multi-agent work MUST go through a Team so agents can
-#     communicate via SendMessage.
-#
-# Enforcement strategy:
-#   Block any Agent invocation with `run_in_background: true` UNLESS it
-#   targets `subagent_type: team-lead` or provides a `team_name`. This
-#   forces background parallel work to be coordinated through a Team.
-#
-# The hook reads the tool input JSON from stdin and emits a permission
-# decision JSON on stdout, per Claude Code's PreToolUse hook contract.
-
-set -euo pipefail
-
-input="$(cat)"
-
-tool_name="$(printf '%s' "$input" | jq -r '.tool_name // empty' 2>/dev/null || true)"
-if [[ "$tool_name" != "Agent" ]]; then
-  # Not our concern — allow.
-  printf '%s' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}'
-  exit 0
-fi
-
-run_in_background="$(printf '%s' "$input" | jq -r '.tool_input.run_in_background // false' 2>/dev/null || echo false)"
-subagent_type="$(printf '%s' "$input" | jq -r '.tool_input.subagent_type // empty' 2>/dev/null || true)"
-team_name="$(printf '%s' "$input" | jq -r '.tool_input.team_name // empty' 2>/dev/null || true)"
-
-# Foreground single agent → always allowed.
-if [[ "$run_in_background" != "true" ]]; then
-  printf '%s' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}'
-  exit 0
-fi
-
-# Background agents must be part of a team OR be the team-lead coordinator.
-if [[ "$subagent_type" == "team-lead" ]] || [[ -n "$team_name" ]]; then
-  printf '%s' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}'
-  exit 0
-fi
-
-# Block standalone background agent.
-reason="POLICY VIOLATION: Spawning standalone background Agents is forbidden. Multi-agent parallel work MUST use a Team so agents can communicate via SendMessage. Either (a) use TeamCreate to create a team, (b) spawn a team-lead that creates the team, or (c) set team_name on the Agent call. See .claude/rules/multi-agent-teams.md for the policy."
-
-jq -nc --arg reason "$reason" '{
-  hookSpecificOutput: {
-    hookEventName: "PreToolUse",
-    permissionDecision: "deny",
-    permissionDecisionReason: $reason
-  }
-}'
-exit 0
+#!/usr/bin/env bash
+# Claude Code PreToolUse hook for the Agent tool.
+#
+# Policy enforced by @hivehub/rulebook v5.3.0:
+#   - A single Agent call is fine (foreground or background).
+#   - Spawning multiple standalone Agents for parallel work is FORBIDDEN.
+#     Parallel multi-agent work MUST go through a Team so agents can
+#     communicate via SendMessage.
+#
+# Enforcement strategy:
+#   Block any Agent invocation with `run_in_background: true` UNLESS it
+#   targets `subagent_type: team-lead` or provides a `team_name`. This
+#   forces background parallel work to be coordinated through a Team.
+#
+# The hook reads the tool input JSON from stdin and emits a permission
+# decision JSON on stdout, per Claude Code's PreToolUse hook contract.
+
+set -euo pipefail
+
+input="$(cat)"
+
+tool_name="$(printf '%s' "$input" | jq -r '.tool_name // empty' 2>/dev/null || true)"
+if [[ "$tool_name" != "Agent" ]]; then
+  # Not our concern — allow.
+  printf '%s' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}'
+  exit 0
+fi
+
+run_in_background="$(printf '%s' "$input" | jq -r '.tool_input.run_in_background // false' 2>/dev/null || echo false)"
+subagent_type="$(printf '%s' "$input" | jq -r '.tool_input.subagent_type // empty' 2>/dev/null || true)"
+team_name="$(printf '%s' "$input" | jq -r '.tool_input.team_name // empty' 2>/dev/null || true)"
+
+# Foreground single agent → always allowed.
+if [[ "$run_in_background" != "true" ]]; then
+  printf '%s' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}'
+  exit 0
+fi
+
+# Background agents must be part of a team OR be the team-lead coordinator.
+if [[ "$subagent_type" == "team-lead" ]] || [[ -n "$team_name" ]]; then
+  printf '%s' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"allow"}}'
+  exit 0
+fi
+
+# Block standalone background agent.
+reason="POLICY VIOLATION: Spawning standalone background Agents is forbidden. Multi-agent parallel work MUST use a Team so agents can communicate via SendMessage. Either (a) use TeamCreate to create a team, (b) spawn a team-lead that creates the team, or (c) set team_name on the Agent call. See .claude/rules/multi-agent-teams.md for the policy."
+
+jq -nc --arg reason "$reason" '{
+  hookSpecificOutput: {
+    hookEventName: "PreToolUse",
+    permissionDecision: "deny",
+    permissionDecisionReason: $reason
+  }
+}'
+exit 0

package/templates/hooks/on-compact-reinject.sh

@@ -1,34 +1,34 @@
-#!/usr/bin/env bash
-# Claude Code SessionStart hook (matcher: "compact").
-#
-# Re-injects critical architectural context after a conversation
-# compaction. Claude Code already re-loads CLAUDE.md on compact, so
-# this hook is defense-in-depth: it outputs a short, always-fresh
-# cheat sheet from `.rulebook/COMPACT_CONTEXT.md` so the model has
-# the load-bearing reminders immediately available without waiting
-# for the CLAUDE.md re-read.
-#
-# The file is user-editable. Rulebook seeds it during `init` from a
-# stack-specific template and never overwrites it afterward.
-
-set -euo pipefail
-
-PROJECT_ROOT="$(pwd)"
-CONTEXT_FILE="${PROJECT_ROOT}/.rulebook/COMPACT_CONTEXT.md"
-
-if [[ ! -f "$CONTEXT_FILE" ]]; then
-  # Nothing to inject — emit a benign empty additionalContext.
-  printf '%s' '{"hookSpecificOutput":{"hookEventName":"SessionStart","additionalContext":""}}'
-  exit 0
-fi
-
-content="$(cat "$CONTEXT_FILE")"
-
-# Emit as additionalContext via jq so we correctly escape newlines/quotes.
-jq -nc --arg ctx "$content" '{
-  hookSpecificOutput: {
-    hookEventName: "SessionStart",
-    additionalContext: $ctx
-  }
-}'
-exit 0
+#!/usr/bin/env bash
+# Claude Code SessionStart hook (matcher: "compact").
+#
+# Re-injects critical architectural context after a conversation
+# compaction. Claude Code already re-loads CLAUDE.md on compact, so
+# this hook is defense-in-depth: it outputs a short, always-fresh
+# cheat sheet from `.rulebook/COMPACT_CONTEXT.md` so the model has
+# the load-bearing reminders immediately available without waiting
+# for the CLAUDE.md re-read.
+#
+# The file is user-editable. Rulebook seeds it during `init` from a
+# stack-specific template and never overwrites it afterward.
+
+set -euo pipefail
+
+PROJECT_ROOT="$(pwd)"
+CONTEXT_FILE="${PROJECT_ROOT}/.rulebook/COMPACT_CONTEXT.md"
+
+if [[ ! -f "$CONTEXT_FILE" ]]; then
+  # Nothing to inject — emit a benign empty additionalContext.
+  printf '%s' '{"hookSpecificOutput":{"hookEventName":"SessionStart","additionalContext":""}}'
+  exit 0
+fi
+
+content="$(cat "$CONTEXT_FILE")"
+
+# Emit as additionalContext via jq so we correctly escape newlines/quotes.
+jq -nc --arg ctx "$content" '{
+  hookSpecificOutput: {
+    hookEventName: "SessionStart",
+    additionalContext: $ctx
+  }
+}'
+exit 0

package/templates/hooks/resume-from-handoff.sh

@@ -1,61 +1,61 @@
-#!/usr/bin/env bash
-# Claude Code SessionStart hook — auto-restore from handoff.
-#
-# Checks for `.rulebook/handoff/_pending.md`. If present, emits its
-# contents as additionalContext so the new session begins with full
-# prior-session context loaded, then archives the file to
-# `.rulebook/handoff/<ISO-timestamp>.md` for history.
-
-set -euo pipefail
-
-# Read hook input from stdin to get the actual project cwd
-input="$(cat || true)"
-PROJECT_ROOT=""
-if [[ -n "$input" ]] && command -v jq &>/dev/null; then
-  PROJECT_ROOT="$(printf '%s' "$input" | jq -r '.cwd // empty' 2>/dev/null || true)"
-fi
-[[ -z "$PROJECT_ROOT" ]] && PROJECT_ROOT="${CLAUDE_PROJECT_DIR:-$(pwd)}"
-HANDOFF_DIR="${PROJECT_ROOT}/.rulebook/handoff"
-PENDING="${HANDOFF_DIR}/_pending.md"
-URGENT="${HANDOFF_DIR}/.urgent"
-CONFIG_FILE="${PROJECT_ROOT}/.rulebook/rulebook.json"
-
-# No pending handoff — nothing to inject
-if [[ ! -f "$PENDING" ]]; then
-  printf '%s' '{}'
-  exit 0
-fi
-
-content="$(cat "$PENDING")"
-
-# Archive the pending file with ISO timestamp
-timestamp=$(date -u +"%Y-%m-%dT%H-%M-%S")
-archive_name="${timestamp}.md"
-mv "$PENDING" "${HANDOFF_DIR}/${archive_name}"
-
-# Clear urgent sentinel if present
-rm -f "$URGENT"
-
-# Prune old handoff files (keep max N, default 50)
-max_history=50
-if [[ -f "$CONFIG_FILE" ]] && command -v jq &>/dev/null; then
-  max_history=$(jq -r '.handoff.maxHistoryFiles // 50' "$CONFIG_FILE" 2>/dev/null || echo 50)
-fi
-
-# Count and prune (oldest first, skip _pending.md and .urgent)
-history_count=$(find "$HANDOFF_DIR" -maxdepth 1 -name "*.md" -type f 2>/dev/null | wc -l)
-if [[ "$history_count" -gt "$max_history" ]]; then
-  excess=$(( history_count - max_history ))
-  find "$HANDOFF_DIR" -maxdepth 1 -name "*.md" -type f -printf '%T@ %p\n' 2>/dev/null \
-    | sort -n | head -"$excess" | awk '{print $2}' | xargs rm -f
-fi
-
-# Emit the handoff content as additionalContext
-header="## Session restored from handoff (${archive_name})\n\nThe following context was saved by the previous session's /handoff skill:\n\n"
-jq -nc --arg ctx "${header}${content}" '{
-  hookSpecificOutput: {
-    hookEventName: "SessionStart",
-    additionalContext: $ctx
-  }
-}'
-exit 0
+#!/usr/bin/env bash
+# Claude Code SessionStart hook — auto-restore from handoff.
+#
+# Checks for `.rulebook/handoff/_pending.md`. If present, emits its
+# contents as additionalContext so the new session begins with full
+# prior-session context loaded, then archives the file to
+# `.rulebook/handoff/<ISO-timestamp>.md` for history.
+
+set -euo pipefail
+
+# Read hook input from stdin to get the actual project cwd
+input="$(cat || true)"
+PROJECT_ROOT=""
+if [[ -n "$input" ]] && command -v jq &>/dev/null; then
+  PROJECT_ROOT="$(printf '%s' "$input" | jq -r '.cwd // empty' 2>/dev/null || true)"
+fi
+[[ -z "$PROJECT_ROOT" ]] && PROJECT_ROOT="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+HANDOFF_DIR="${PROJECT_ROOT}/.rulebook/handoff"
+PENDING="${HANDOFF_DIR}/_pending.md"
+URGENT="${HANDOFF_DIR}/.urgent"
+CONFIG_FILE="${PROJECT_ROOT}/.rulebook/rulebook.json"
+
+# No pending handoff — nothing to inject
+if [[ ! -f "$PENDING" ]]; then
+  printf '%s' '{}'
+  exit 0
+fi
+
+content="$(cat "$PENDING")"
+
+# Archive the pending file with ISO timestamp
+timestamp=$(date -u +"%Y-%m-%dT%H-%M-%S")
+archive_name="${timestamp}.md"
+mv "$PENDING" "${HANDOFF_DIR}/${archive_name}"
+
+# Clear urgent sentinel if present
+rm -f "$URGENT"
+
+# Prune old handoff files (keep max N, default 50)
+max_history=50
+if [[ -f "$CONFIG_FILE" ]] && command -v jq &>/dev/null; then
+  max_history=$(jq -r '.handoff.maxHistoryFiles // 50' "$CONFIG_FILE" 2>/dev/null || echo 50)
+fi
+
+# Count and prune (oldest first, skip _pending.md and .urgent)
+history_count=$(find "$HANDOFF_DIR" -maxdepth 1 -name "*.md" -type f 2>/dev/null | wc -l)
+if [[ "$history_count" -gt "$max_history" ]]; then
+  excess=$(( history_count - max_history ))
+  find "$HANDOFF_DIR" -maxdepth 1 -name "*.md" -type f -printf '%T@ %p\n' 2>/dev/null \
+    | sort -n | head -"$excess" | awk '{print $2}' | xargs rm -f
+fi
+
+# Emit the handoff content as additionalContext
+header="## Session restored from handoff (${archive_name})\n\nThe following context was saved by the previous session's /handoff skill:\n\n"
+jq -nc --arg ctx "${header}${content}" '{
+  hookSpecificOutput: {
+    hookEventName: "SessionStart",
+    additionalContext: $ctx
+  }
+}'
+exit 0