@humwick/runner 0.130.4 → 0.130.6

package/agent-bin/humwick

@@ -1,10 +1,10 @@
 #!/bin/sh
-# Humwick #3470: `humwick browser` from the release this agent's runner belongs to, never an older
+# Humwick: `humwick browser` from the release this agent's runner belongs to, never an older
 # install a login shell puts first on PATH. Checkout: <root>/runner/agent-bin -> <root>/src;
 # npm: node_modules/@humwick/runner/agent-bin -> node_modules/@humwick/server/src.
 here=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd -P) || exit 1
 for cli in "$here/../../src/index.ts" "$here/../../server/src/index.ts"; do
-  if [ -f "$cli" ]; then exec "${AGENT_RELAY_BUN_BIN:-bun}" run --no-env-file "$cli" "$@"; fi
+  if [ -f "$cli" ]; then exec "${HUMWICK_BUN_BIN:-bun}" run --no-env-file "$cli" "$@"; fi
 done
 echo "humwick: no CLI next to $here" >&2
 exit 127

package/agent-bin/humwick-browser

@@ -0,0 +1,4 @@
+#!/bin/sh
+# use the runner's adjacent CLI shim and its shared interpreter compatibility.
+here=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd -P) || exit 1
+exec "$here/humwick" browser "$@"

package/hooks/fff-search-redirect/fff-search-redirect.cjs

@@ -110,7 +110,7 @@ function classifyStandaloneSearch(command, cwd, root, words = candidateWords(com
   return patterns > 1 ? "mcp__fff__multi_grep" : "mcp__fff__grep";
 }
 
-function fffBinary(env) { return env.AGENT_RELAY_FFF_MCP_BINARY; }
+function fffBinary(env) { return env.HUMWICK_FFF_MCP_BINARY; }
 
 function decide(payload, env = process.env, runGit = spawnSync) {
   try {

package/hooks/web-tools-redirect/web-tools-redirect.cjs

@@ -23,12 +23,12 @@ const REDIRECTS = {
 const MAX_REMEMBERED = 100;
 
 function enabledTools(env) {
-  return new Set(String(env.AGENT_RELAY_WEB_TOOLS || "").split(",").map((part) => part.trim()).filter(Boolean));
+  return new Set(String(env.HUMWICK_WEB_TOOLS ?? "").split(",").map((part) => part.trim()).filter(Boolean));
 }
 
 function stateFile(env, sessionId) {
   const safe = typeof sessionId !== "string" ? "" : sessionId.replace(/[^A-Za-z0-9_-]/g, "").slice(0, 80);
-  return safe ? join(env.AGENT_RELAY_SCRATCH_DIR || tmpdir(), `web-tools-redirect-${safe}.json`) : null;
+  return safe ? join((env.HUMWICK_SCRATCH_DIR) || tmpdir(), `web-tools-redirect-${safe}.json`) : null;
 }
 
 function decide(payload, env = process.env) {

package/package.json

@@ -1,12 +1,9 @@
 {
   "name": "@humwick/runner",
-  "version": "0.130.4",
+  "version": "0.130.6",
   "description": "Unified provider lifecycle runner for Humwick",
   "type": "module",
   "bin": {
-    "claude-relay": "src/bin/claude.ts",
-    "codex-relay": "src/bin/codex.ts",
-    "opencode-relay": "src/bin/opencode.ts",
     "claude-humwick": "src/bin/claude.ts",
     "codex-humwick": "src/bin/codex.ts",
     "opencode-humwick": "src/bin/opencode.ts"
@@ -21,18 +18,18 @@
     "!hooks/**/*.test.ts",
     "LICENSE"
   ],
-  "license": "PolyForm-Shield-1.0.0",
-  "author": "Edin Mujkanovic <edin@exelerus.com>",
+  "license": "AGPL-3.0-only",
+  "author": "Humwick contributors",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/edimuj/agent-relay.git",
+    "url": "git+https://github.com/humwick/humwick.git",
     "directory": "runner"
   },
   "dependencies": {
-    "@humwick/offload": "0.130.4",
-    "@humwick/providers": "0.104.10",
-    "@humwick/sdk": "0.2.139",
-    "callmux": "0.25.0",
+    "@humwick/offload": "0.130.6",
+    "@humwick/providers": "0.104.12",
+    "@humwick/sdk": "0.2.141",
+    "callmux": "0.27.0",
     "unbash": "6.0.0"
   },
   "devDependencies": {

package/plugins/browser/skills/playwright-cli/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: playwright-cli
 description: Drive Relay browsers; live dashboard.
-allowed-tools: Bash(agent-relay-browser:*) Bash(playwright-cli:*)
+allowed-tools: Bash(humwick-browser:*) Bash(playwright-cli:*)
 ---
 
 # Browser sessions with playwright-cli
@@ -13,14 +13,14 @@ Never install a browser or run `playwright-cli open`.
 ## Start, attach, stop
 
 ```bash
-agent-relay-browser start --json     # prints sessionId, cdpUrl, viewUrl
+humwick-browser start --json     # prints sessionId, cdpUrl, viewUrl
 playwright-cli attach --cdp=<cdpUrl> --session=relay
 playwright-cli -s=relay goto http://localhost:3000
 # ... work ...
-agent-relay-browser stop             # ends the session and deletes its profile
+humwick-browser stop             # ends the session and deletes its profile
 ```
 
-- One session per agent. `agent-relay-browser status` shows yours.
+- One session per agent. `humwick-browser status` shows yours.
 - Send `viewUrl` to the operator when they should watch ("look at this").
 - The profile is fresh each session: no logins or cookies carry over.
 
@@ -37,13 +37,15 @@ playwright-cli -s=relay hover e4; playwright-cli -s=relay upload ./file.pdf
 playwright-cli -s=relay go-back; playwright-cli -s=relay reload
 playwright-cli -s=relay eval "document.title"
 playwright-cli -s=relay eval "el => el.getAttribute('data-testid')" e5
-playwright-cli -s=relay screenshot --filename=page.png
+playwright-cli -s=relay screenshot --filename="$TMPDIR/page.png"
 playwright-cli -s=relay tab-list; playwright-cli -s=relay tab-new http://localhost:3000/b
 playwright-cli -s=relay console; playwright-cli -s=relay requests
 playwright-cli -s=relay resize 1280 800
 ```
 
-Snapshots go to `.playwright-cli/` in the working directory; read only what you need.
+Snapshots go to `.playwright-cli/` in the working directory (locally git-ignored by Relay).
+Write screenshots, traces, downloads and other scratch output under `$TMPDIR`;
+read only what you need.
 Refs change after the page changes: take a new snapshot before acting on old refs.
 
 ## More

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,8 +1,8 @@
 {
-  "name": "agent-relay-runner",
+  "name": "humwick-runner",
   "description": "Thin Humwick runner bridge for Claude Code",
-  "version": "0.130.4",
-  "agentRelayContracts": {
+  "version": "0.130.6",
+  "humwickContracts": {
     "providerPluginProtocol": 1
   }
 }

package/plugins/claude/claude-statusline-probe.cjs

@@ -5,24 +5,33 @@ const { mkdirSync, renameSync, writeFileSync } = require("node:fs");
 const { tmpdir } = require("node:os");
 const { basename, dirname, join } = require("node:path");
 
-let input = "";
-process.stdin.setEncoding("utf8");
-process.stdin.on("data", (chunk) => { input += chunk; });
-process.stdin.on("end", () => {
-  const metrics = parseClaudeStatusLineInput(input);
-  if (metrics) writeState(metrics);
-  process.stdout.write(`${standaloneOutput(metrics)}\n`);
-});
+if (require.main === module) {
+  let input = "";
+  process.stdin.setEncoding("utf8");
+  process.stdin.on("data", (chunk) => { input += chunk; });
+  process.stdin.on("end", () => {
+    process.stdout.write(`${runStatuslineProbe(input).output}\n`);
+  });
+}
+
+function runStatuslineProbe(raw, options) {
+  const opts = options || {};
+  const metrics = parseClaudeStatusLineInput(raw, opts.now === undefined ? Date.now() : opts.now, opts.agentId);
+  if (metrics) writeState(metrics, opts.stateDir || statuslineStateDir());
+  return { metrics, output: standaloneOutput(metrics) };
+}
 
 function statuslineAgentId() {
-  return stringValue(process.env.AGENT_RELAY_AGENT_ID) || stringValue(process.env.AGENT_RELAY_ID);
+  return stringValue(process.env.HUMWICK_AGENT_ID)
+    || stringValue(process.env.HUMWICK_ID);
 }
 
 function statuslineStateDir() {
-  return process.env.AGENT_RELAY_CONTEXT_STATE_DIR || process.env.AGENT_RELAY_HOST_TMPDIR || tmpdir();
+  return (process.env.HUMWICK_CONTEXT_STATE_DIR)
+    || (process.env.HUMWICK_HOST_TMPDIR) || tmpdir();
 }
 
-function parseClaudeStatusLineInput(raw) {
+function parseClaudeStatusLineInput(raw, timestamp, agentId) {
   let data;
   try {
     data = JSON.parse(raw);
@@ -31,7 +40,6 @@ function parseClaudeStatusLineInput(raw) {
   }
   if (!isRecord(data) || !isRecord(data.context_window)) return null;
   const context = data.context_window;
-  const timestamp = Date.now();
   const contextPercent = numberValue(context.used_percentage);
   const tokensMax = numberValue(context.context_window_size);
   const usage = isRecord(context.current_usage) ? context.current_usage : undefined;
@@ -50,7 +58,7 @@ function parseClaudeStatusLineInput(raw) {
   const resolvedEffort = effort || stringValue(process.env.CLAUDE_EFFORT) || stringValue(process.env.CLAUDE_CODE_EFFORT_LEVEL);
 
   const metrics = {
-    agentId: statuslineAgentId() || stringValue(data.session_id) || "unknown",
+    agentId: agentId || statuslineAgentId() || stringValue(data.session_id) || "unknown",
     contextPercent: contextPercent !== undefined ? contextPercent : ((tokensUsed || 0) / (tokensMax || 1)) * 100,
     source: "statusline",
     confidence: "exact",
@@ -69,9 +77,8 @@ function parseClaudeStatusLineInput(raw) {
   return metrics;
 }
 
-function writeState(metrics) {
-  // The runner reads this from the host temp root, not this agent's private TMPDIR (#3084).
-  const dir = statuslineStateDir();
+function writeState(metrics, dir) {
+  // The runner reads this from the host temp root, not this agent's private TMPDIR.
   const file = join(dir, `agent-relay-context-${safeStateId(metrics.agentId)}.json`);
   mkdirSync(dirname(file), { recursive: true });
   const tmp = `${file}.${process.pid}.tmp`;
@@ -79,6 +86,7 @@ function writeState(metrics) {
   renameSync(tmp, file);
 }
 
+
 function quotaWindowsFromRateLimits(rateLimits) {
   const windows = [];
   for (const name of ["five_hour", "seven_day", "seven_day_sonnet", "seven_day_opus"]) {
@@ -142,3 +150,5 @@ function secondsUntil(epochSeconds, nowMs) {
 function epochSecondsToMs(epochSeconds) {
   return epochSeconds === undefined ? undefined : epochSeconds * 1000;
 }
+
+module.exports = { runStatuslineProbe };

package/plugins/claude/hooks/gate-run-guard.provisioned.mjs

@@ -260,19 +260,27 @@ function classifyGateRun(command, commands = {}) {
   return null;
 }
 
-// sdk/src/types/host.ts
-var HOST_GATE_KINDS = ["land", "iterate", "validation"];
-
-// sdk/src/land-gates.ts
-import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve3 } from "path";
-
-// sdk/src/types/guards.ts
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+// sdk/src/project-config.ts
+var PROJECT_CONFIG_DIR = ".humwick";
+var LEGACY_PROJECT_CONFIG_DIR = ".agent-relay";
+var warnedProjects = new Set;
+function selectProjectConfigDir(project, canonical, legacy) {
+  if (project && legacy && !warnedProjects.has(project)) {
+    warnedProjects.add(project);
+    console.warn(`[project-config] ${project}: ${canonical ? `${PROJECT_CONFIG_DIR}/ wins over deprecated ${LEGACY_PROJECT_CONFIG_DIR}/` : `reading deprecated ${LEGACY_PROJECT_CONFIG_DIR}/`}; migrate with humwick project migrate-config in that checkout`);
+  }
+  return canonical || !legacy ? PROJECT_CONFIG_DIR : LEGACY_PROJECT_CONFIG_DIR;
+}
+function isProjectConfigPath(path) {
+  return [PROJECT_CONFIG_DIR, LEGACY_PROJECT_CONFIG_DIR].some((dir) => path === dir || path.startsWith(`${dir}/`));
+}
+function projectConfigPathIn(path, directory) {
+  return isProjectConfigPath(path) ? directory + path.slice(path.indexOf("/") < 0 ? path.length : path.indexOf("/")) : path;
 }
 
-// sdk/src/types/land-gates.ts
-var LAND_GATE_SCOPES = ["full", "partial"];
+// sdk/src/repo-config-file.ts
+import { dirname, resolve as resolve2 } from "path";
+import { readFileSync, existsSync, mkdirSync, appendFileSync } from "fs";
 
 // sdk/src/validation-core.ts
 import { isAbsolute, relative, resolve } from "path";
@@ -321,9 +329,12 @@ function assertNoControlBytes(text, field) {
     throw new ValidationError(`${field} must not contain control bytes (only newline and tab are allowed)`);
 }
 
+// sdk/src/types/guards.ts
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
 // sdk/src/repo-config-file.ts
-import { dirname, resolve as resolve2 } from "path";
-import { readFileSync } from "fs";
 function absent(err) {
   const code = err.code;
   if (code === "ENOENT" || code === "ENOTDIR")
@@ -347,7 +358,7 @@ function findRepoConfigFile(startDir, file, clean) {
   for (const dir of ancestors(startDir)) {
     let raw;
     try {
-      raw = readFileSync(resolve2(dir, file), "utf8");
+      raw = readFileSync(resolve2(dir, resolveRepoConfigPath(dir, file)), "utf8");
     } catch (err) {
       raw = absent(err);
     }
@@ -356,9 +367,28 @@ function findRepoConfigFile(startDir, file, clean) {
   }
   return null;
 }
+function resolveRepoConfigPath(root, file) {
+  if (!isProjectConfigPath(file))
+    return file;
+  const canonical = existsSync(resolve2(root, PROJECT_CONFIG_DIR));
+  const legacy = existsSync(resolve2(root, LEGACY_PROJECT_CONFIG_DIR));
+  const actual = projectConfigPathIn(file, selectProjectConfigDir(undefined, canonical, legacy));
+  if (existsSync(resolve2(root, actual)))
+    selectProjectConfigDir(resolve2(root), canonical, legacy);
+  return actual;
+}
+
+// sdk/src/types/host.ts
+var HOST_GATE_KINDS = ["land", "iterate", "validation"];
+
+// sdk/src/land-gates.ts
+import { isAbsolute as isAbsolute2, relative as relative2, resolve as resolve3 } from "path";
+
+// sdk/src/types/land-gates.ts
+var LAND_GATE_SCOPES = ["full", "partial"];
 
 // sdk/src/land-gates.ts
-var LAND_GATES_FILE = ".agent-relay/land-gates.json";
+var LAND_GATES_FILE = ".humwick/land-gates.json";
 var DEFAULT_LAND_GATE_TIMEOUT_MS = 5 * 60 * 1000;
 var LAND_GATE_TIMEOUT_MARGIN_MS = 5 * 60 * 1000;
 function cleanLandGate(value, index, worktreePath) {
@@ -681,7 +711,7 @@ function waitLoopDenial(command) {
   for (let depth = 0;depth <= MAX_UNWRAP_DEPTH && candidate !== undefined; depth += 1) {
     candidate = candidate.replace(TIMEOUT_PREFIX, "");
     if (isForegroundWait(lexCommandLine(candidate))) {
-      return "Do not hold the turn on a foreground wait. Run it with the relay_run MCP tool (detach: true, waitMs: 0) as ONE poll loop with a deadline " + "(e.g. `end=$((SECONDS+1800)); until <check>; do [ $SECONDS -ge $end ] && exit 1; sleep 30; done`), then end your turn with no text; " + `Relay wakes you once when it finishes. Command: ${command}`;
+      return "Do not hold the turn on a foreground wait. Run it with the humwick_run MCP tool (detach: true, waitMs: 0) as ONE poll loop with a deadline " + "(e.g. `end=$((SECONDS+1800)); until <check>; do [ $SECONDS -ge $end ] && exit 1; sleep 30; done`), then end your turn with no text; " + `Relay wakes you once when it finishes. Command: ${command}`;
     }
     candidate = executingShellScript(candidate) ?? unwrapGroupCommand(candidate);
   }
@@ -922,7 +952,7 @@ function gateDenial(command, flat, cwd) {
     return null;
   if (leavesProject(normalized, cwd))
     return null;
-  return `This is a project gate: run it with the relay_run MCP tool (waitMs: 0), then end your turn; Relay wakes you once when it finishes. Command: ${command}`;
+  return `This is a project gate: run it with the humwick_run MCP tool (waitMs: 0), then end your turn; Relay wakes you once when it finishes. Command: ${command}`;
 }
 function decide(payload) {
   const input = payload;

package/plugins/claude/hooks/gate-run-guard.sh

@@ -1,9 +1,9 @@
 #!/usr/bin/env bash
-# PreToolUse guard (#2834): steers project gate commands run via Bash/Monitor to relay_run.
+# PreToolUse guard: steers project gate commands run via Bash/Monitor to humwick_run.
 # FAIL-OPEN: the decision lives in gate-run-guard.ts (shared SDK gate classifier); every
 # precondition miss here (not relay-managed, read-only, no bun) exits 0 with no output.
-[ -n "${AGENT_RELAY_RUNNER_PORT:-}" ] || exit 0
-[ "${AGENT_RELAY_APPROVAL:-}" != "read-only" ] || exit 0
+[ -n "${HUMWICK_RUNNER_PORT:-}" ] || exit 0
+[ "${HUMWICK_APPROVAL:-}" != "read-only" ] || exit 0
 command -v bun >/dev/null 2>&1 || exit 0
 HOOK_DIR="${CLAUDE_PLUGIN_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}/hooks"
 exec bun "${HOOK_DIR}/gate-run-guard.ts" 2>/dev/null || exit 0

package/plugins/claude/hooks/gate-run-guard.ts

@@ -1,6 +1,6 @@
-// PreToolUse guard (#2834): a Bash/Monitor call that runs one of THIS project's own gates
+// PreToolUse guard: a Bash/Monitor call that runs one of THIS project's own gates
 // (`iterate`, `delivery`, `gates[].command` in the session repo's land-gates.json) is denied with
-// a steer to `relay_run`. FAIL-OPEN: any doubt or error prints nothing and exits 0. Bundled to a
+// a steer to `humwick_run`. FAIL-OPEN: any doubt or error prints nothing and exits 0. Bundled to a
 // dependency-free .mjs for provisioned copies (scripts/build-claude-monitor.ts).
 import { resolve } from "node:path";
 import { classifyGateRun, lexCommandLine, unwrapGroupCommand, unwrapShellCommand } from "@humwick/sdk/gate-run-classify";
@@ -185,7 +185,7 @@ function dropShellOptionOperands(command: string): string {
   return command.slice(0, regionStart) + kept + rest;
 }
 
-// #2843 fail-opens, hook only: the shared classifier is unchanged (heavy-lease callers keep
+// fail-opens, hook only: the shared classifier is unchanged (heavy-lease callers keep
 // its conservative join/short-circuit behavior). Each layer is checked, so wrapped forms
 // (`bash -lc 'false && gate'`, `bash -lc 'env --help gate'`) fail open through the wrapper.
 function failOpenForContrivedForm(flat: string): boolean {
@@ -212,7 +212,7 @@ function gateDenial(command: string, flat: string, cwd: string): string | null {
   const category = classifyGateRun(normalized, commands);
   if (!category || category === "heuristic") return null;
   if (leavesProject(normalized, cwd)) return null;
-  return `This is a project gate: run it with the relay_run MCP tool (waitMs: 0), then end your turn; Relay wakes you once when it finishes. Command: ${command}`;
+  return `This is a project gate: run it with the humwick_run MCP tool (waitMs: 0), then end your turn; Relay wakes you once when it finishes. Command: ${command}`;
 }
 
 function decide(payload: unknown): string | null {
@@ -223,7 +223,7 @@ function decide(payload: unknown): string | null {
   const cwd = typeof input.cwd === "string" && input.cwd ? input.cwd : process.cwd();
   const flat = trustedFlatCommand(command);
   const gate = flat === null ? null : gateDenial(command, flat, cwd);
-  // A harness-backgrounded Bash already returns the turn, so only foreground waits are redirected (#2993).
+  // A harness-backgrounded Bash already returns the turn, so only foreground waits are redirected.
   return gate ?? (input.tool_input?.run_in_background === true ? null : waitLoopDenial(command));
 }
 

package/plugins/claude/hooks/kill-guard.provisioned.mjs

@@ -6739,7 +6739,7 @@ var DYNAMIC = new Set(["eval", "source", ".", "trap", "python", "python2", "pyth
 var PLAIN_READERS = new Set(["cat", "tee", "head", "tail", "wc", "tr", "cut", "nl", "rev", "tac", "fold", "base64", "od", "md5sum", "sha256sum", "grep", "egrep", "fgrep", "jq", "echo", "printf", "true"]);
 var GIT_BODY_COMMANDS = new Set(["commit", "tag", "notes"]);
 var GH_BODY_COMMANDS = new Set(["issue create", "issue comment", "issue edit", "pr create", "pr comment", "pr edit", "pr review", "release create", "release edit", "gist create"]);
-var RELAY_BODY_COMMANDS = new Set(["message", "/message", "reply", "/reply", "pair", "/pair"]);
+var RELAY_BODY_COMMANDS = new Set(["message", "/message", "reply", "/reply"]);
 var STDIN_PATHS = new Set(["/dev/stdin", "/dev/fd/0", "/proc/self/fd/0"]);
 var REDEFINERS = new Set(["alias", "shopt", "enable", "hash"]);
 var ASSIGNMENT = /^[A-Za-z_][A-Za-z0-9_]*=/;

package/plugins/claude/hooks/kill-guard.sh

@@ -1,5 +1,5 @@
 #!/usr/bin/env bash
-# Shared "fleet fratricide" kill-pattern guard (issue #753).
+# Shared "fleet fratricide" kill-pattern guard.
 #
 # Every managed agent's runner runs as
 #   bun run .../agent-relay-runner/src/index.ts <provider> ...  (scoped install: .../@humwick/runner/...)
@@ -13,7 +13,7 @@
 # kill "$SERVER_PID") and pkill -f on a token that is unique to the caller's own
 # throwaway server (its exact test port, or "$PWD/public").
 #
-# Layers (#3117): when neither the segment matcher below nor a raw kill-verb +
+# Layers: when neither the segment matcher below nor a raw kill-verb +
 # fleet-token check fires, the command passes without starting a process.
 # Otherwise kill-guard.ts parses it and answers block (an executed broad kill, e.g.
 # behind sudo or bash -c), static (no dynamic execution, so a kill word in an
@@ -29,7 +29,7 @@
 #     the command is a dangerous broad kill, and exits 1 (silent) when it is safe.
 #     This lets non-bash callers reuse the SAME matcher as a subprocess.
 #
-# TODO(#753 follow-up): wire the Codex runner/exec layer to invoke this guard.
+# TODO: wire the Codex runner/exec layer to invoke this guard.
 # Codex managed agents have no Claude PreToolUse hook, so the same broad pkill can
 # still fratricide the fleet from a Codex session until that wiring lands. The
 # matcher is intentionally factored here so the Codex side can call it directly
@@ -41,7 +41,7 @@ shopt -s extglob
 case "${BASH_SOURCE[0]}" in */*) KILL_GUARD_PARSER="${BASH_SOURCE[0]%/*}/kill-guard.ts" ;; *) KILL_GUARD_PARSER=kill-guard.ts ;; esac
 
 # Guidance returned on a block — tells the caller how to clean up safely instead.
-FRATRICIDE_KILL_GUIDANCE='Blocked a broad process-kill (#753 fleet-fratricide guard): this pattern would match sibling agents'\'' runners, because every managed agent runs "bun run .../agent-relay-runner/src/index.ts". Kill only a PID you own — capture it when you spawn the server (SERVER_PID=$!; kill "$SERVER_PID") — or pkill -f a token that is unique to your own process (your exact test port, or "$PWD/public"). Never pkill/killall on bun, node, src/index.ts, agent-relay, humwick, or their runner packages.'
+FRATRICIDE_KILL_GUIDANCE='Blocked a broad process-kill (fleet-fratricide guard): this pattern would match sibling agents'\'' runners, because every managed agent runs "bun run.../agent-relay-runner/src/index.ts". Kill only a PID you own — capture it when you spawn the server (SERVER_PID=$!; kill "$SERVER_PID") — or pkill -f a token that is unique to your own process (your exact test port, or "$PWD/public"). Never pkill/killall on bun, node, src/index.ts, agent-relay, humwick, or their runner packages.'
 # The segment matcher reads raw text, so it cannot tell a command from prose.
 FRATRICIDE_PATTERN_GUIDANCE="${FRATRICIDE_KILL_GUIDANCE}"' If this command only MENTIONS a kill in prose (an issue body, a commit message, a heredoc), this guard cannot tell: write the text to a file with the Write tool and pass it by file (gh --body-file, git commit -F), or drop the fleet token from the prose.'
 

package/plugins/claude/hooks/kill-guard.ts

@@ -1,4 +1,4 @@
-// Fleet-fratricide parser (#753, #3117). stdin: command text. stdout: `block:<command>` for an executed
+// Fleet-fratricide parser. stdin: command text. stdout: `block:<command>` for an executed
 // broad kill, `static` when nothing in the command executes text (so a kill word in an argument, heredoc
 // or comment is prose), or `sink` when text may reach a dynamic executor and kill-guard.sh's segment
 // matcher must decide. A non-zero exit means "parser unavailable". Bundled to kill-guard.provisioned.mjs.
@@ -17,7 +17,7 @@ const PLAIN_READERS = new Set(["cat", "tee", "head", "tail", "wc", "tr", "cut",
 // (`git -c alias.x='!sh' x`, a gh alias or extension) may run the text.
 const GIT_BODY_COMMANDS = new Set(["commit", "tag", "notes"]);
 const GH_BODY_COMMANDS = new Set(["issue create", "issue comment", "issue edit", "pr create", "pr comment", "pr edit", "pr review", "release create", "release edit", "gist create"]);
-const RELAY_BODY_COMMANDS = new Set(["message", "/message", "reply", "/reply", "pair", "/pair"]);
+const RELAY_BODY_COMMANDS = new Set(["message", "/message", "reply", "/reply"]);
 const STDIN_PATHS = new Set(["/dev/stdin", "/dev/fd/0", "/proc/self/fd/0"]);
 // Builtins that change what a later command name runs.
 const REDEFINERS = new Set(["alias", "shopt", "enable", "hash"]);

package/plugins/claude/hooks/permission-request.sh

@@ -3,7 +3,7 @@ set -euo pipefail
 source "${CLAUDE_PLUGIN_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}/hooks/relay-status.sh"
 relay_install_hook_guard permission-request
 
-port="${AGENT_RELAY_RUNNER_PORT:-}"
+port="${HUMWICK_RUNNER_PORT:-}"
 if [[ -z "$port" ]]; then
   exit 0
 fi

package/plugins/claude/hooks/post-compact.sh

@@ -3,7 +3,7 @@ set -euo pipefail
 source "${CLAUDE_PLUGIN_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}/hooks/relay-status.sh"
 relay_install_hook_guard post-compact
 
-# #3398 — the trigger (manual for our /compact, auto for Claude's own) tells the runner which input settled.
+# the trigger (manual for our /compact, auto for Claude's own) tells the runner which input settled.
 trigger="$(relay_json_string_field trigger "$(cat || true)")"
 metadata=""
 [ -n "$trigger" ] && metadata="{\"compactTrigger\":\"$(relay_json_escape "$trigger")\"}"

package/plugins/claude/hooks/post-tool-use.sh

@@ -2,7 +2,7 @@
 set -euo pipefail
 source "${CLAUDE_PLUGIN_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}/hooks/relay-status.sh"
 relay_install_hook_guard post-tool-use
-[ -n "${AGENT_RELAY_RUNNER_PORT:-}" ] || exit 0
-# #3646: stdout belongs to this tool result, before Claude can make its next call.
-context="$(relay_post_json "$AGENT_RELAY_RUNNER_PORT" /tool-use 4 || true)"
+[ -n "${HUMWICK_RUNNER_PORT:-}" ] || exit 0
+# stdout belongs to this tool result, before Claude can make its next call.
+context="$(relay_post_json "${HUMWICK_RUNNER_PORT-}" /tool-use 4 || true)"
 relay_emit_additional_context PostToolUse "$context"

package/plugins/claude/hooks/pre-compact.sh

@@ -7,6 +7,6 @@ payload="$(cat || true)"
 transcript_path="$(relay_json_string_field transcript_path "$payload")"
 
 relay_post_timeline_status busy provider-turn "" compacting
-# Pre-destroy seam (#183): compaction is about to discard context — capture this segment's
-# Insights (#184) from the full transcript first. The most common boundary in practice.
+# Pre-destroy seam: compaction is about to discard context — capture this segment's
+# Insights from the full transcript first. The most common boundary in practice.
 relay_post_session_boundary "$transcript_path" compact

package/plugins/claude/hooks/read-only-bash-guard.sh

@@ -7,7 +7,7 @@ set -euo pipefail
 HOOK_DIR="${CLAUDE_PLUGIN_ROOT:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}/hooks"
 source "${HOOK_DIR}/relay-status.sh"
 relay_install_hook_guard read-only-bash-guard
-# Shared fleet-fratricide kill-pattern matcher (#753): trim_shell_text,
+# Shared fleet-fratricide kill-pattern matcher: trim_shell_text,
 # split_segments, shell_words and fratricide_deny_reason live here.
 source "${HOOK_DIR}/kill-guard.sh"
 
@@ -32,7 +32,7 @@ if command -v jq >/dev/null 2>&1; then
   command_text="$(printf '%s' "$payload" | jq -r '.tool_input.command // empty' 2>/dev/null || true)"
 fi
 
-# --- Fleet-fratricide guard: ACTIVE IN ALL APPROVAL MODES (#753) ---
+# --- Fleet-fratricide guard: ACTIVE IN ALL APPROVAL MODES ---
 # A broad pkill/killall/kill can SIGTERM every sibling agent's runner host-wide,
 # so this block runs before (and independent of) the read-only allow-list.
 if (( jq_available )); then
@@ -51,7 +51,7 @@ else
 fi
 
 # --- Read-only allow-list: only the read-only approval mode below this point ---
-case "${AGENT_RELAY_APPROVAL:-}" in
+case "${HUMWICK_APPROVAL:-}" in
   open|guarded)
     exit 0
     ;;
@@ -556,7 +556,7 @@ validate_segment() {
       validate_bun "$((i + 1))"
       return $?
       ;;
-    agent-relay)
+    humwick|agent-relay)
       validate_agent_relay "$((i + 1))"
       return $?
       ;;