@mcptoolshop/claude-hook-debug 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 mcp-tool-shop
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,80 @@
+# claude-hook-debug
+
+Diagnostic CLI for Claude Code hook issues. Detects ghost hooks from disabled plugins, scope conflicts, misconfigured settings, and known Claude Code bugs.
+
+## Install
+
+```bash
+npm install -g @mcptoolshop/claude-hook-debug
+```
+
+Or run directly:
+
+```bash
+npx @mcptoolshop/claude-hook-debug
+```
+
+## Usage
+
+```bash
+# Scan current workspace
+claude-hook-debug
+
+# Scan a specific project
+claude-hook-debug /path/to/project
+
+# JSON output (for piping/scripting)
+claude-hook-debug --json
+```
+
+Exit code 1 if any errors are found, 0 otherwise.
+
+## What It Detects
+
+| ID | Severity | Description |
+|----|----------|-------------|
+| `GHOST_HOOK_PREVIEW` | error | claude-preview plugin disabled but Stop hook still fires ([#19893](https://github.com/anthropics/claude-code/issues/19893)) |
+| `GHOST_HOOK_GENERIC` | warning | Any disabled plugin that may still have active hooks |
+| `LOCAL_ONLY_PLUGINS` | error | `enabledPlugins` in local settings only — overrides silently dropped ([#25086](https://github.com/anthropics/claude-code/issues/25086)) |
+| `SCOPE_CONFLICT` | warning | Plugin enabled in one scope, disabled in another |
+| `STOP_CONTINUE_LOOP` | error | Stop hook outputs `continue:true` causing infinite loop ([#1288](https://github.com/anthropics/claude-code/issues/1288)) |
+| `DISABLE_ALL_HOOKS_ACTIVE` | warning/error | `disableAllHooks: true` suppresses all hooks (escalates to error if managed settings exist) |
+| `BROKEN_SETTINGS_JSON` | error | Invalid JSON silently disables all settings from that file |
+| `LARGE_SETTINGS_FILE` | warning | Settings file >100KB (may cause slow startup) |
+| `PLUGIN_HOOKS_INVISIBLE` | info | No user hooks but plugins are enabled — plugin hooks are invisible to inspection |
+
+## Settings Scopes
+
+The tool reads all four settings scopes in Claude Code's load order:
+
+| Scope | Path | Precedence |
+|-------|------|------------|
+| managed | `~/.claude/managed-settings.json` | Highest |
+| user | `~/.claude/settings.json` | |
+| project | `.claude/settings.json` | |
+| local | `.claude/settings.local.json` | Lowest (last write wins) |
+
+## Library Usage
+
+```typescript
+import { debug } from '@mcptoolshop/claude-hook-debug';
+
+const report = debug({ projectRoot: '/path/to/project' });
+
+console.log(report.diagnostics);
+// [{ id: 'GHOST_HOOK_PREVIEW', severity: 'error', title: '...', ... }]
+
+console.log(report.plugins);
+// [{ pluginId: 'claude-preview@...', mergedEnabled: false, scopes: [...] }]
+```
+
+## Security
+
+- **Read-only.** Reads settings files, never modifies them.
+- **No network.** No API calls, no telemetry, no phone-home.
+- **No secrets.** Does not read or log env var values, API keys, or tokens.
+- **Zero dependencies.** Only Node.js built-ins.
+
+---
+
+Built by [MCP Tool Shop](https://mcp-tool-shop.github.io/)

package/dist/cli.js

@@ -0,0 +1,460 @@
+#!/usr/bin/env node
+
+// src/index.ts
+import { platform } from "os";
+
+// src/scanner.ts
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+function userSettingsDir() {
+  return join(homedir(), ".claude");
+}
+function resolveSettingsPaths(opts) {
+  const root = opts?.projectRoot ?? process.cwd();
+  const userDir = userSettingsDir();
+  return {
+    managed: opts?.overridePaths?.managed ?? join(userDir, "managed-settings.json"),
+    user: opts?.overridePaths?.user ?? join(userDir, "settings.json"),
+    project: opts?.overridePaths?.project ?? join(root, ".claude", "settings.json"),
+    local: opts?.overridePaths?.local ?? join(root, ".claude", "settings.local.json")
+  };
+}
+function readSettingsFile(scope, path) {
+  if (!existsSync(path)) {
+    return { scope, path, exists: false };
+  }
+  try {
+    const content = readFileSync(path, "utf-8");
+    const raw = JSON.parse(content);
+    return { scope, path, exists: true, raw };
+  } catch (err) {
+    return {
+      scope,
+      path,
+      exists: true,
+      error: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
+function scanAllSettings(opts) {
+  const paths = resolveSettingsPaths(opts);
+  const scopes = ["managed", "user", "project", "local"];
+  return scopes.map((scope) => readSettingsFile(scope, paths[scope]));
+}
+function getPlugins(file) {
+  if (!file.exists || !file.raw) return {};
+  const ep = file.raw.enabledPlugins;
+  if (!ep || typeof ep !== "object") return {};
+  const result = {};
+  for (const [key, val] of Object.entries(ep)) {
+    result[key] = val === true || Array.isArray(val) && val.length > 0;
+  }
+  return result;
+}
+function extractPlugins(files) {
+  const allIds = /* @__PURE__ */ new Set();
+  for (const f of files) {
+    for (const id of Object.keys(getPlugins(f))) {
+      allIds.add(id);
+    }
+  }
+  const states = [];
+  for (const pluginId of allIds) {
+    const scopes = [];
+    let mergedEnabled = false;
+    for (const f of files) {
+      const plugins = getPlugins(f);
+      if (pluginId in plugins) {
+        scopes.push({ scope: f.scope, enabled: plugins[pluginId] });
+        mergedEnabled = plugins[pluginId];
+      }
+    }
+    states.push({ pluginId, scopes, mergedEnabled });
+  }
+  return states;
+}
+function getHooks(file) {
+  if (!file.exists || !file.raw) return {};
+  const h = file.raw.hooks;
+  if (!h || typeof h !== "object") return {};
+  return h;
+}
+function extractHooks(files) {
+  const resolved = [];
+  for (const f of files) {
+    const hooks = getHooks(f);
+    for (const [event, groups] of Object.entries(hooks)) {
+      if (!Array.isArray(groups)) continue;
+      for (const group of groups) {
+        if (!Array.isArray(group.hooks)) continue;
+        for (const hook of group.hooks) {
+          resolved.push({
+            event,
+            matcher: group.matcher,
+            hook,
+            source: f.scope
+          });
+        }
+      }
+    }
+  }
+  return resolved;
+}
+function getDisableAllHooks(files) {
+  for (const f of files) {
+    if (f.exists && f.raw && f.raw.disableAllHooks === true) {
+      return true;
+    }
+  }
+  return false;
+}
+
+// src/diagnostics.ts
+function ghostHooks(ctx) {
+  const diagnostics = [];
+  const disabledPlugins = ctx.plugins.filter((p) => !p.mergedEnabled);
+  for (const plugin of disabledPlugins) {
+    const id = plugin.pluginId;
+    if (id.includes("preview")) {
+      diagnostics.push({
+        id: "GHOST_HOOK_PREVIEW",
+        severity: "error",
+        title: `Disabled plugin "${id}" may still fire hooks`,
+        detail: `Plugin is disabled (merged: false) but Claude Code has a known bug where disabled plugins still register hooks. The plugin's Stop hook fires "[Preview Required]" even when explicitly disabled at all scopes. Scopes: ${plugin.scopes.map((s) => `${s.scope}=${s.enabled}`).join(", ")}.`,
+        fix: `1. Ensure "enabledPlugins" key exists in ~/.claude/settings.json (even as {})
+2. Set "${id}": false in ~/.claude/settings.json (not just local)
+3. If still firing, add "disableAllHooks": true in project .claude/settings.local.json
+4. File a bug at https://github.com/anthropics/claude-code/issues`,
+        references: [
+          "https://github.com/anthropics/claude-code/issues/19893",
+          "https://github.com/anthropics/claude-code/issues/25086"
+        ]
+      });
+    } else {
+      diagnostics.push({
+        id: "GHOST_HOOK_GENERIC",
+        severity: "warning",
+        title: `Disabled plugin "${id}" may still have active hooks`,
+        detail: `Plugin is disabled (merged: false) across scopes: ${plugin.scopes.map((s) => `${s.scope}=${s.enabled}`).join(", ")}. Due to known bugs, disabled plugins can still register and fire hooks.`,
+        fix: `Disable in ~/.claude/settings.json (user scope) rather than local/project scope. Ensure the "enabledPlugins" key exists in settings.json for local overrides to take effect.`,
+        references: ["https://github.com/anthropics/claude-code/issues/19893"]
+      });
+    }
+  }
+  return diagnostics;
+}
+function localOnlyPlugins(ctx) {
+  const diagnostics = [];
+  const hasPluginsInUser = ctx.files.some(
+    (f) => f.scope === "user" && f.exists && f.raw && "enabledPlugins" in f.raw
+  );
+  const hasPluginsInProject = ctx.files.some(
+    (f) => f.scope === "project" && f.exists && f.raw && "enabledPlugins" in f.raw
+  );
+  const hasPluginsInLocal = ctx.files.some(
+    (f) => f.scope === "local" && f.exists && f.raw && "enabledPlugins" in f.raw
+  );
+  if (hasPluginsInLocal && !hasPluginsInUser && !hasPluginsInProject) {
+    diagnostics.push({
+      id: "LOCAL_ONLY_PLUGINS",
+      severity: "error",
+      title: "enabledPlugins in local settings only \u2014 overrides silently dropped",
+      detail: `"enabledPlugins" exists in settings.local.json but not in any settings.json. Claude Code merges local overrides into existing keys. If the key doesn't exist in a broader scope (user or project settings.json), the local value is silently ignored.`,
+      fix: `Add an "enabledPlugins": {} entry to ~/.claude/settings.json or .claude/settings.json, then the local override will merge correctly.`,
+      references: ["https://github.com/anthropics/claude-code/issues/25086"]
+    });
+  }
+  return diagnostics;
+}
+function disableAllHooksWarning(ctx) {
+  if (!ctx.disableAllHooks) return [];
+  const managedFile = ctx.files.find((f) => f.scope === "managed");
+  const hasManaged = managedFile?.exists && managedFile.raw;
+  return [
+    {
+      id: "DISABLE_ALL_HOOKS_ACTIVE",
+      severity: hasManaged ? "error" : "warning",
+      title: "disableAllHooks is active \u2014 all hooks suppressed",
+      detail: `"disableAllHooks": true is set. This disables ALL hooks including managed/organization hooks. ` + (hasManaged ? `A managed settings file exists \u2014 this overrides organization-enforced hooks, which is a known security bug.` : `No managed settings file detected, so this is likely safe.`),
+      fix: hasManaged ? `Remove "disableAllHooks": true \u2014 it bypasses managed hooks. Instead, disable specific plugins via "enabledPlugins".` : `This is a broad hammer. Consider disabling specific plugins instead.`,
+      references: []
+    }
+  ];
+}
+function stopContinueLoop(ctx) {
+  const diagnostics = [];
+  for (const h of ctx.hooks) {
+    if (h.event !== "Stop") continue;
+    if (h.hook.type !== "command") continue;
+    const cmd = h.hook.command ?? "";
+    if (cmd.includes('"continue"') && cmd.includes("true") && !cmd.includes("false")) {
+      diagnostics.push({
+        id: "STOP_CONTINUE_LOOP",
+        severity: "error",
+        title: `Stop hook outputs continue:true \u2014 causes infinite loop`,
+        detail: `A Stop hook in ${h.source} scope outputs {"continue": true}. In Claude Code, continue:true on a Stop hook means "don't stop yet", which re-invokes stop hooks in an infinite loop. Command: ${cmd}`,
+        fix: `Remove the hook. To allow stopping, either output nothing, output {"continue": false}, or omit the "decision" field entirely.`,
+        references: ["https://github.com/anthropics/claude-code/issues/1288"]
+      });
+    }
+  }
+  return diagnostics;
+}
+function brokenSettings(ctx) {
+  const diagnostics = [];
+  for (const f of ctx.files) {
+    if (f.exists && f.error) {
+      diagnostics.push({
+        id: "BROKEN_SETTINGS_JSON",
+        severity: "error",
+        title: `Invalid JSON in ${f.scope} settings`,
+        detail: `File ${f.path} exists but failed to parse: ${f.error}. A broken settings.json silently disables ALL settings from that file.`,
+        fix: `Fix the JSON syntax in ${f.path}. Common causes: trailing commas, missing quotes.`,
+        references: []
+      });
+    }
+  }
+  return diagnostics;
+}
+function emptyHooksButPluginActive(ctx) {
+  const diagnostics = [];
+  const userDefinedHookCount = ctx.hooks.filter((h) => h.source !== "plugin").length;
+  const hasEnabledPlugins = ctx.plugins.some((p) => p.mergedEnabled);
+  if (userDefinedHookCount === 0 && hasEnabledPlugins) {
+    diagnostics.push({
+      id: "PLUGIN_HOOKS_INVISIBLE",
+      severity: "info",
+      title: "No user-defined hooks, but plugins may inject hooks at runtime",
+      detail: `The hooks config across all settings files is empty, but ${ctx.plugins.filter((p) => p.mergedEnabled).length} plugin(s) are enabled. Plugins register hooks from their manifests at load time \u2014 these don't appear in your settings.json hooks object.`,
+      fix: `Plugin hooks are invisible to settings inspection. To debug, run "claude --debug" and look for hook events in the log.`,
+      references: []
+    });
+  }
+  return diagnostics;
+}
+function largeSettingsFile(ctx) {
+  const diagnostics = [];
+  for (const f of ctx.files) {
+    if (f.exists && f.raw) {
+      const size = JSON.stringify(f.raw).length;
+      if (size > 1e5) {
+        diagnostics.push({
+          id: "LARGE_SETTINGS_FILE",
+          severity: "warning",
+          title: `${f.scope} settings file is unusually large (${(size / 1024).toFixed(0)}KB)`,
+          detail: `File ${f.path} is ${(size / 1024).toFixed(0)}KB. Large settings files can cause slow startup and may indicate accumulated cruft (e.g. large permission arrays).`,
+          fix: `Review ${f.path} for unnecessary entries. Permissions arrays tend to grow over time.`,
+          references: []
+        });
+      }
+    }
+  }
+  return diagnostics;
+}
+function scopeConflicts(ctx) {
+  const diagnostics = [];
+  for (const plugin of ctx.plugins) {
+    if (plugin.scopes.length < 2) continue;
+    const values = plugin.scopes.map((s) => s.enabled);
+    const hasConflict = values.some((v) => v !== values[0]);
+    if (hasConflict) {
+      const scopeStr = plugin.scopes.map((s) => `${s.scope}=${s.enabled}`).join(", ");
+      diagnostics.push({
+        id: "SCOPE_CONFLICT",
+        severity: "warning",
+        title: `Plugin "${plugin.pluginId}" has conflicting enable/disable across scopes`,
+        detail: `Plugin state differs across scopes: ${scopeStr}. The last scope in load order wins (local > project > user > managed). Final merged state: ${plugin.mergedEnabled ? "enabled" : "disabled"}.`,
+        fix: `Align the plugin state across scopes. If you want it disabled, set false in ~/.claude/settings.json (user scope) for reliable behavior.`,
+        references: ["https://github.com/anthropics/claude-code/issues/25086"]
+      });
+    }
+  }
+  return diagnostics;
+}
+var ALL_RULES = [
+  brokenSettings,
+  localOnlyPlugins,
+  ghostHooks,
+  scopeConflicts,
+  emptyHooksButPluginActive,
+  stopContinueLoop,
+  disableAllHooksWarning,
+  largeSettingsFile
+];
+function runDiagnostics(ctx) {
+  const results = [];
+  for (const rule of ALL_RULES) {
+    results.push(...rule(ctx));
+  }
+  const order = { error: 0, warning: 1, info: 2 };
+  results.sort((a, b) => (order[a.severity] ?? 3) - (order[b.severity] ?? 3));
+  return results;
+}
+
+// src/report.ts
+var BOLD = "\x1B[1m";
+var GREEN = "\x1B[32m";
+var YELLOW = "\x1B[33m";
+var RED = "\x1B[31m";
+var CYAN = "\x1B[36m";
+var DIM = "\x1B[2m";
+var RESET = "\x1B[0m";
+var UNDERLINE = "\x1B[4m";
+var severityColor = {
+  error: RED,
+  warning: YELLOW,
+  info: CYAN
+};
+var severityIcon = {
+  error: "\u2717",
+  warning: "\u26A0",
+  info: "\u2139"
+};
+function formatSettingsSection(files) {
+  const lines = [];
+  lines.push(`${BOLD}${UNDERLINE}Settings Files${RESET}`);
+  lines.push("");
+  for (const f of files) {
+    const status = f.exists ? f.error ? `${RED}\u2717 BROKEN${RESET}` : `${GREEN}\u2713 loaded${RESET}` : `${DIM}\u2014 not found${RESET}`;
+    const size = f.exists && f.raw ? `${DIM}(${(JSON.stringify(f.raw).length / 1024).toFixed(1)}KB)${RESET}` : "";
+    lines.push(`  ${BOLD}${f.scope.padEnd(8)}${RESET} ${status} ${size}`);
+    lines.push(`  ${DIM}${f.path}${RESET}`);
+    if (f.error) {
+      lines.push(`  ${RED}${f.error}${RESET}`);
+    }
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+function formatPluginsSection(plugins) {
+  const lines = [];
+  lines.push(`${BOLD}${UNDERLINE}Plugins${RESET}`);
+  lines.push("");
+  if (plugins.length === 0) {
+    lines.push(`  ${DIM}No plugins configured.${RESET}`);
+    lines.push("");
+    return lines.join("\n");
+  }
+  for (const p of plugins) {
+    const enabled = p.mergedEnabled;
+    const icon = enabled ? `${GREEN}\u25CF${RESET}` : `${RED}\u25CB${RESET}`;
+    const state = enabled ? `${GREEN}enabled${RESET}` : `${RED}disabled${RESET}`;
+    lines.push(`  ${icon} ${BOLD}${p.pluginId}${RESET} \u2192 ${state}`);
+    for (const s of p.scopes) {
+      const scopeState = s.enabled ? `${GREEN}true${RESET}` : `${RED}false${RESET}`;
+      lines.push(`    ${DIM}${s.scope}:${RESET} ${scopeState}`);
+    }
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+function formatHooksSection(hooks, disableAllHooks) {
+  const lines = [];
+  lines.push(`${BOLD}${UNDERLINE}Hooks${RESET}`);
+  if (disableAllHooks) {
+    lines.push(`  ${RED}${BOLD}disableAllHooks: true${RESET} \u2014 all hooks suppressed`);
+  }
+  lines.push("");
+  if (hooks.length === 0) {
+    lines.push(`  ${DIM}No user-defined hooks in settings files.${RESET}`);
+    lines.push(`  ${DIM}(Plugin hooks are injected at runtime and invisible here.)${RESET}`);
+    lines.push("");
+    return lines.join("\n");
+  }
+  const byEvent = /* @__PURE__ */ new Map();
+  for (const h of hooks) {
+    const list = byEvent.get(h.event) ?? [];
+    list.push(h);
+    byEvent.set(h.event, list);
+  }
+  for (const [event, eventHooks] of byEvent) {
+    lines.push(`  ${CYAN}${event}${RESET} (${eventHooks.length})`);
+    for (const h of eventHooks) {
+      const matcher = h.matcher ? ` ${DIM}matcher=${h.matcher}${RESET}` : "";
+      const source = `${DIM}[${h.source}]${RESET}`;
+      const desc = h.hook.type === "command" ? h.hook.command ?? "(empty)" : h.hook.type === "prompt" ? `prompt: ${(h.hook.prompt ?? "").slice(0, 60)}...` : h.hook.type === "http" ? `http: ${h.hook.url ?? "(no url)"}` : `${h.hook.type}: agent`;
+      lines.push(`    ${source}${matcher} ${h.hook.type}: ${DIM}${desc}${RESET}`);
+    }
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+function formatDiagnosticsSection(diagnostics) {
+  const lines = [];
+  const errors = diagnostics.filter((d) => d.severity === "error").length;
+  const warnings = diagnostics.filter((d) => d.severity === "warning").length;
+  const infos = diagnostics.filter((d) => d.severity === "info").length;
+  lines.push(`${BOLD}${UNDERLINE}Diagnostics${RESET} (${errors} errors, ${warnings} warnings, ${infos} info)`);
+  lines.push("");
+  if (diagnostics.length === 0) {
+    lines.push(`  ${GREEN}\u2713 No issues detected.${RESET}`);
+    lines.push("");
+    return lines.join("\n");
+  }
+  for (const d of diagnostics) {
+    const color = severityColor[d.severity] ?? DIM;
+    const icon = severityIcon[d.severity] ?? "?";
+    lines.push(`  ${color}${icon} [${d.id}]${RESET} ${BOLD}${d.title}${RESET}`);
+    lines.push(`    ${d.detail}`);
+    if (d.fix) {
+      lines.push(`    ${GREEN}Fix:${RESET} ${d.fix}`);
+    }
+    if (d.references && d.references.length > 0) {
+      lines.push(`    ${DIM}Refs: ${d.references.join(", ")}${RESET}`);
+    }
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+function formatReport(report2) {
+  const lines = [];
+  lines.push("");
+  lines.push(`${BOLD}Claude Hook Debug${RESET}  ${DIM}${report2.timestamp}  ${report2.platform}${RESET}`);
+  lines.push(`${"\u2550".repeat(60)}`);
+  lines.push("");
+  lines.push(formatSettingsSection(report2.settingsFiles));
+  lines.push(formatPluginsSection(report2.plugins));
+  lines.push(formatHooksSection(report2.hooks, report2.disableAllHooks));
+  lines.push(formatDiagnosticsSection(report2.diagnostics));
+  return lines.join("\n");
+}
+function formatReportJson(report2) {
+  return JSON.stringify(report2, null, 2);
+}
+
+// src/index.ts
+function debug(opts) {
+  const files = scanAllSettings(opts);
+  const plugins = extractPlugins(files);
+  const hooks = extractHooks(files);
+  const disableAllHooks = getDisableAllHooks(files);
+  const diagnostics = runDiagnostics({
+    files,
+    plugins,
+    hooks,
+    disableAllHooks
+  });
+  return {
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    platform: `${platform()} ${process.arch}`,
+    settingsFiles: files,
+    plugins,
+    hooks,
+    diagnostics,
+    disableAllHooks
+  };
+}
+
+// src/cli.ts
+var args = process.argv.slice(2);
+var useJson = args.includes("--json");
+var projectRoot = args.find((a) => !a.startsWith("-"));
+var report = debug({ projectRoot: projectRoot ?? process.cwd() });
+if (useJson) {
+  console.log(formatReportJson(report));
+} else {
+  console.log(formatReport(report));
+  const hasErrors = report.diagnostics.some((d) => d.severity === "error");
+  process.exit(hasErrors ? 1 : 0);
+}

package/dist/index.d.ts

@@ -0,0 +1,87 @@
+type SettingsScope = 'managed' | 'user' | 'project' | 'local';
+interface SettingsFile {
+    scope: SettingsScope;
+    path: string;
+    exists: boolean;
+    raw?: Record<string, unknown>;
+    error?: string;
+}
+type HookEvent = 'PreToolUse' | 'PostToolUse' | 'PostToolUseFailure' | 'Notification' | 'UserPromptSubmit' | 'SessionStart' | 'SessionEnd' | 'Stop' | 'StopFailure' | 'SubagentStart' | 'SubagentStop' | 'PreCompact' | 'PostCompact' | 'PermissionRequest' | 'Setup' | 'TeammateIdle' | 'TaskCompleted' | 'Elicitation' | 'ElicitationResult' | 'ConfigChange' | 'WorktreeCreate' | 'WorktreeRemove' | 'InstructionsLoaded';
+interface HookCommand {
+    type: 'command' | 'prompt' | 'agent' | 'http';
+    command?: string;
+    prompt?: string;
+    url?: string;
+    timeout?: number;
+    statusMessage?: string;
+    once?: boolean;
+    async?: boolean;
+}
+interface HookGroup {
+    matcher?: string;
+    hooks: HookCommand[];
+}
+type HooksConfig = Partial<Record<HookEvent, HookGroup[]>>;
+interface PluginState {
+    pluginId: string;
+    scopes: {
+        scope: SettingsScope;
+        enabled: boolean;
+    }[];
+    mergedEnabled: boolean;
+}
+interface ResolvedHook {
+    event: HookEvent;
+    matcher?: string;
+    hook: HookCommand;
+    source: SettingsScope | 'plugin';
+    pluginId?: string;
+}
+type Severity = 'error' | 'warning' | 'info';
+interface Diagnostic {
+    id: string;
+    severity: Severity;
+    title: string;
+    detail: string;
+    fix?: string;
+    references?: string[];
+}
+interface DebugReport {
+    timestamp: string;
+    platform: string;
+    settingsFiles: SettingsFile[];
+    plugins: PluginState[];
+    hooks: ResolvedHook[];
+    diagnostics: Diagnostic[];
+    disableAllHooks: boolean;
+}
+
+interface ScanOptions {
+    /** Project root to scan (defaults to cwd) */
+    projectRoot?: string;
+    /** Override paths for testing */
+    overridePaths?: Partial<Record<SettingsScope, string>>;
+}
+declare function resolveSettingsPaths(opts?: ScanOptions): Record<SettingsScope, string>;
+declare function scanAllSettings(opts?: ScanOptions): SettingsFile[];
+declare function extractPlugins(files: SettingsFile[]): PluginState[];
+declare function extractHooks(files: SettingsFile[]): ResolvedHook[];
+declare function getDisableAllHooks(files: SettingsFile[]): boolean;
+
+interface DiagnosticContext {
+    files: SettingsFile[];
+    plugins: PluginState[];
+    hooks: ResolvedHook[];
+    disableAllHooks: boolean;
+}
+declare function runDiagnostics(ctx: DiagnosticContext): Diagnostic[];
+
+declare function formatReport(report: DebugReport): string;
+declare function formatReportJson(report: DebugReport): string;
+
+/**
+ * Run a full diagnostic scan and return a structured report.
+ */
+declare function debug(opts?: ScanOptions): DebugReport;
+
+export { type DebugReport, type Diagnostic, type HookCommand, type HookEvent, type HookGroup, type HooksConfig, type PluginState, type ResolvedHook, type ScanOptions, type SettingsFile, type SettingsScope, type Severity, debug, extractHooks, extractPlugins, formatReport, formatReportJson, getDisableAllHooks, resolveSettingsPaths, runDiagnostics, scanAllSettings };

package/dist/index.js

@@ -0,0 +1,456 @@
+// src/index.ts
+import { platform } from "os";
+
+// src/scanner.ts
+import { readFileSync, existsSync } from "fs";
+import { join } from "path";
+import { homedir } from "os";
+function userSettingsDir() {
+  return join(homedir(), ".claude");
+}
+function resolveSettingsPaths(opts) {
+  const root = opts?.projectRoot ?? process.cwd();
+  const userDir = userSettingsDir();
+  return {
+    managed: opts?.overridePaths?.managed ?? join(userDir, "managed-settings.json"),
+    user: opts?.overridePaths?.user ?? join(userDir, "settings.json"),
+    project: opts?.overridePaths?.project ?? join(root, ".claude", "settings.json"),
+    local: opts?.overridePaths?.local ?? join(root, ".claude", "settings.local.json")
+  };
+}
+function readSettingsFile(scope, path) {
+  if (!existsSync(path)) {
+    return { scope, path, exists: false };
+  }
+  try {
+    const content = readFileSync(path, "utf-8");
+    const raw = JSON.parse(content);
+    return { scope, path, exists: true, raw };
+  } catch (err) {
+    return {
+      scope,
+      path,
+      exists: true,
+      error: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
+function scanAllSettings(opts) {
+  const paths = resolveSettingsPaths(opts);
+  const scopes = ["managed", "user", "project", "local"];
+  return scopes.map((scope) => readSettingsFile(scope, paths[scope]));
+}
+function getPlugins(file) {
+  if (!file.exists || !file.raw) return {};
+  const ep = file.raw.enabledPlugins;
+  if (!ep || typeof ep !== "object") return {};
+  const result = {};
+  for (const [key, val] of Object.entries(ep)) {
+    result[key] = val === true || Array.isArray(val) && val.length > 0;
+  }
+  return result;
+}
+function extractPlugins(files) {
+  const allIds = /* @__PURE__ */ new Set();
+  for (const f of files) {
+    for (const id of Object.keys(getPlugins(f))) {
+      allIds.add(id);
+    }
+  }
+  const states = [];
+  for (const pluginId of allIds) {
+    const scopes = [];
+    let mergedEnabled = false;
+    for (const f of files) {
+      const plugins = getPlugins(f);
+      if (pluginId in plugins) {
+        scopes.push({ scope: f.scope, enabled: plugins[pluginId] });
+        mergedEnabled = plugins[pluginId];
+      }
+    }
+    states.push({ pluginId, scopes, mergedEnabled });
+  }
+  return states;
+}
+function getHooks(file) {
+  if (!file.exists || !file.raw) return {};
+  const h = file.raw.hooks;
+  if (!h || typeof h !== "object") return {};
+  return h;
+}
+function extractHooks(files) {
+  const resolved = [];
+  for (const f of files) {
+    const hooks = getHooks(f);
+    for (const [event, groups] of Object.entries(hooks)) {
+      if (!Array.isArray(groups)) continue;
+      for (const group of groups) {
+        if (!Array.isArray(group.hooks)) continue;
+        for (const hook of group.hooks) {
+          resolved.push({
+            event,
+            matcher: group.matcher,
+            hook,
+            source: f.scope
+          });
+        }
+      }
+    }
+  }
+  return resolved;
+}
+function getDisableAllHooks(files) {
+  for (const f of files) {
+    if (f.exists && f.raw && f.raw.disableAllHooks === true) {
+      return true;
+    }
+  }
+  return false;
+}
+
+// src/diagnostics.ts
+function ghostHooks(ctx) {
+  const diagnostics = [];
+  const disabledPlugins = ctx.plugins.filter((p) => !p.mergedEnabled);
+  for (const plugin of disabledPlugins) {
+    const id = plugin.pluginId;
+    if (id.includes("preview")) {
+      diagnostics.push({
+        id: "GHOST_HOOK_PREVIEW",
+        severity: "error",
+        title: `Disabled plugin "${id}" may still fire hooks`,
+        detail: `Plugin is disabled (merged: false) but Claude Code has a known bug where disabled plugins still register hooks. The plugin's Stop hook fires "[Preview Required]" even when explicitly disabled at all scopes. Scopes: ${plugin.scopes.map((s) => `${s.scope}=${s.enabled}`).join(", ")}.`,
+        fix: `1. Ensure "enabledPlugins" key exists in ~/.claude/settings.json (even as {})
+2. Set "${id}": false in ~/.claude/settings.json (not just local)
+3. If still firing, add "disableAllHooks": true in project .claude/settings.local.json
+4. File a bug at https://github.com/anthropics/claude-code/issues`,
+        references: [
+          "https://github.com/anthropics/claude-code/issues/19893",
+          "https://github.com/anthropics/claude-code/issues/25086"
+        ]
+      });
+    } else {
+      diagnostics.push({
+        id: "GHOST_HOOK_GENERIC",
+        severity: "warning",
+        title: `Disabled plugin "${id}" may still have active hooks`,
+        detail: `Plugin is disabled (merged: false) across scopes: ${plugin.scopes.map((s) => `${s.scope}=${s.enabled}`).join(", ")}. Due to known bugs, disabled plugins can still register and fire hooks.`,
+        fix: `Disable in ~/.claude/settings.json (user scope) rather than local/project scope. Ensure the "enabledPlugins" key exists in settings.json for local overrides to take effect.`,
+        references: ["https://github.com/anthropics/claude-code/issues/19893"]
+      });
+    }
+  }
+  return diagnostics;
+}
+function localOnlyPlugins(ctx) {
+  const diagnostics = [];
+  const hasPluginsInUser = ctx.files.some(
+    (f) => f.scope === "user" && f.exists && f.raw && "enabledPlugins" in f.raw
+  );
+  const hasPluginsInProject = ctx.files.some(
+    (f) => f.scope === "project" && f.exists && f.raw && "enabledPlugins" in f.raw
+  );
+  const hasPluginsInLocal = ctx.files.some(
+    (f) => f.scope === "local" && f.exists && f.raw && "enabledPlugins" in f.raw
+  );
+  if (hasPluginsInLocal && !hasPluginsInUser && !hasPluginsInProject) {
+    diagnostics.push({
+      id: "LOCAL_ONLY_PLUGINS",
+      severity: "error",
+      title: "enabledPlugins in local settings only \u2014 overrides silently dropped",
+      detail: `"enabledPlugins" exists in settings.local.json but not in any settings.json. Claude Code merges local overrides into existing keys. If the key doesn't exist in a broader scope (user or project settings.json), the local value is silently ignored.`,
+      fix: `Add an "enabledPlugins": {} entry to ~/.claude/settings.json or .claude/settings.json, then the local override will merge correctly.`,
+      references: ["https://github.com/anthropics/claude-code/issues/25086"]
+    });
+  }
+  return diagnostics;
+}
+function disableAllHooksWarning(ctx) {
+  if (!ctx.disableAllHooks) return [];
+  const managedFile = ctx.files.find((f) => f.scope === "managed");
+  const hasManaged = managedFile?.exists && managedFile.raw;
+  return [
+    {
+      id: "DISABLE_ALL_HOOKS_ACTIVE",
+      severity: hasManaged ? "error" : "warning",
+      title: "disableAllHooks is active \u2014 all hooks suppressed",
+      detail: `"disableAllHooks": true is set. This disables ALL hooks including managed/organization hooks. ` + (hasManaged ? `A managed settings file exists \u2014 this overrides organization-enforced hooks, which is a known security bug.` : `No managed settings file detected, so this is likely safe.`),
+      fix: hasManaged ? `Remove "disableAllHooks": true \u2014 it bypasses managed hooks. Instead, disable specific plugins via "enabledPlugins".` : `This is a broad hammer. Consider disabling specific plugins instead.`,
+      references: []
+    }
+  ];
+}
+function stopContinueLoop(ctx) {
+  const diagnostics = [];
+  for (const h of ctx.hooks) {
+    if (h.event !== "Stop") continue;
+    if (h.hook.type !== "command") continue;
+    const cmd = h.hook.command ?? "";
+    if (cmd.includes('"continue"') && cmd.includes("true") && !cmd.includes("false")) {
+      diagnostics.push({
+        id: "STOP_CONTINUE_LOOP",
+        severity: "error",
+        title: `Stop hook outputs continue:true \u2014 causes infinite loop`,
+        detail: `A Stop hook in ${h.source} scope outputs {"continue": true}. In Claude Code, continue:true on a Stop hook means "don't stop yet", which re-invokes stop hooks in an infinite loop. Command: ${cmd}`,
+        fix: `Remove the hook. To allow stopping, either output nothing, output {"continue": false}, or omit the "decision" field entirely.`,
+        references: ["https://github.com/anthropics/claude-code/issues/1288"]
+      });
+    }
+  }
+  return diagnostics;
+}
+function brokenSettings(ctx) {
+  const diagnostics = [];
+  for (const f of ctx.files) {
+    if (f.exists && f.error) {
+      diagnostics.push({
+        id: "BROKEN_SETTINGS_JSON",
+        severity: "error",
+        title: `Invalid JSON in ${f.scope} settings`,
+        detail: `File ${f.path} exists but failed to parse: ${f.error}. A broken settings.json silently disables ALL settings from that file.`,
+        fix: `Fix the JSON syntax in ${f.path}. Common causes: trailing commas, missing quotes.`,
+        references: []
+      });
+    }
+  }
+  return diagnostics;
+}
+function emptyHooksButPluginActive(ctx) {
+  const diagnostics = [];
+  const userDefinedHookCount = ctx.hooks.filter((h) => h.source !== "plugin").length;
+  const hasEnabledPlugins = ctx.plugins.some((p) => p.mergedEnabled);
+  if (userDefinedHookCount === 0 && hasEnabledPlugins) {
+    diagnostics.push({
+      id: "PLUGIN_HOOKS_INVISIBLE",
+      severity: "info",
+      title: "No user-defined hooks, but plugins may inject hooks at runtime",
+      detail: `The hooks config across all settings files is empty, but ${ctx.plugins.filter((p) => p.mergedEnabled).length} plugin(s) are enabled. Plugins register hooks from their manifests at load time \u2014 these don't appear in your settings.json hooks object.`,
+      fix: `Plugin hooks are invisible to settings inspection. To debug, run "claude --debug" and look for hook events in the log.`,
+      references: []
+    });
+  }
+  return diagnostics;
+}
+function largeSettingsFile(ctx) {
+  const diagnostics = [];
+  for (const f of ctx.files) {
+    if (f.exists && f.raw) {
+      const size = JSON.stringify(f.raw).length;
+      if (size > 1e5) {
+        diagnostics.push({
+          id: "LARGE_SETTINGS_FILE",
+          severity: "warning",
+          title: `${f.scope} settings file is unusually large (${(size / 1024).toFixed(0)}KB)`,
+          detail: `File ${f.path} is ${(size / 1024).toFixed(0)}KB. Large settings files can cause slow startup and may indicate accumulated cruft (e.g. large permission arrays).`,
+          fix: `Review ${f.path} for unnecessary entries. Permissions arrays tend to grow over time.`,
+          references: []
+        });
+      }
+    }
+  }
+  return diagnostics;
+}
+function scopeConflicts(ctx) {
+  const diagnostics = [];
+  for (const plugin of ctx.plugins) {
+    if (plugin.scopes.length < 2) continue;
+    const values = plugin.scopes.map((s) => s.enabled);
+    const hasConflict = values.some((v) => v !== values[0]);
+    if (hasConflict) {
+      const scopeStr = plugin.scopes.map((s) => `${s.scope}=${s.enabled}`).join(", ");
+      diagnostics.push({
+        id: "SCOPE_CONFLICT",
+        severity: "warning",
+        title: `Plugin "${plugin.pluginId}" has conflicting enable/disable across scopes`,
+        detail: `Plugin state differs across scopes: ${scopeStr}. The last scope in load order wins (local > project > user > managed). Final merged state: ${plugin.mergedEnabled ? "enabled" : "disabled"}.`,
+        fix: `Align the plugin state across scopes. If you want it disabled, set false in ~/.claude/settings.json (user scope) for reliable behavior.`,
+        references: ["https://github.com/anthropics/claude-code/issues/25086"]
+      });
+    }
+  }
+  return diagnostics;
+}
+var ALL_RULES = [
+  brokenSettings,
+  localOnlyPlugins,
+  ghostHooks,
+  scopeConflicts,
+  emptyHooksButPluginActive,
+  stopContinueLoop,
+  disableAllHooksWarning,
+  largeSettingsFile
+];
+function runDiagnostics(ctx) {
+  const results = [];
+  for (const rule of ALL_RULES) {
+    results.push(...rule(ctx));
+  }
+  const order = { error: 0, warning: 1, info: 2 };
+  results.sort((a, b) => (order[a.severity] ?? 3) - (order[b.severity] ?? 3));
+  return results;
+}
+
+// src/report.ts
+var BOLD = "\x1B[1m";
+var GREEN = "\x1B[32m";
+var YELLOW = "\x1B[33m";
+var RED = "\x1B[31m";
+var CYAN = "\x1B[36m";
+var DIM = "\x1B[2m";
+var RESET = "\x1B[0m";
+var UNDERLINE = "\x1B[4m";
+var severityColor = {
+  error: RED,
+  warning: YELLOW,
+  info: CYAN
+};
+var severityIcon = {
+  error: "\u2717",
+  warning: "\u26A0",
+  info: "\u2139"
+};
+function formatSettingsSection(files) {
+  const lines = [];
+  lines.push(`${BOLD}${UNDERLINE}Settings Files${RESET}`);
+  lines.push("");
+  for (const f of files) {
+    const status = f.exists ? f.error ? `${RED}\u2717 BROKEN${RESET}` : `${GREEN}\u2713 loaded${RESET}` : `${DIM}\u2014 not found${RESET}`;
+    const size = f.exists && f.raw ? `${DIM}(${(JSON.stringify(f.raw).length / 1024).toFixed(1)}KB)${RESET}` : "";
+    lines.push(`  ${BOLD}${f.scope.padEnd(8)}${RESET} ${status} ${size}`);
+    lines.push(`  ${DIM}${f.path}${RESET}`);
+    if (f.error) {
+      lines.push(`  ${RED}${f.error}${RESET}`);
+    }
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+function formatPluginsSection(plugins) {
+  const lines = [];
+  lines.push(`${BOLD}${UNDERLINE}Plugins${RESET}`);
+  lines.push("");
+  if (plugins.length === 0) {
+    lines.push(`  ${DIM}No plugins configured.${RESET}`);
+    lines.push("");
+    return lines.join("\n");
+  }
+  for (const p of plugins) {
+    const enabled = p.mergedEnabled;
+    const icon = enabled ? `${GREEN}\u25CF${RESET}` : `${RED}\u25CB${RESET}`;
+    const state = enabled ? `${GREEN}enabled${RESET}` : `${RED}disabled${RESET}`;
+    lines.push(`  ${icon} ${BOLD}${p.pluginId}${RESET} \u2192 ${state}`);
+    for (const s of p.scopes) {
+      const scopeState = s.enabled ? `${GREEN}true${RESET}` : `${RED}false${RESET}`;
+      lines.push(`    ${DIM}${s.scope}:${RESET} ${scopeState}`);
+    }
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+function formatHooksSection(hooks, disableAllHooks) {
+  const lines = [];
+  lines.push(`${BOLD}${UNDERLINE}Hooks${RESET}`);
+  if (disableAllHooks) {
+    lines.push(`  ${RED}${BOLD}disableAllHooks: true${RESET} \u2014 all hooks suppressed`);
+  }
+  lines.push("");
+  if (hooks.length === 0) {
+    lines.push(`  ${DIM}No user-defined hooks in settings files.${RESET}`);
+    lines.push(`  ${DIM}(Plugin hooks are injected at runtime and invisible here.)${RESET}`);
+    lines.push("");
+    return lines.join("\n");
+  }
+  const byEvent = /* @__PURE__ */ new Map();
+  for (const h of hooks) {
+    const list = byEvent.get(h.event) ?? [];
+    list.push(h);
+    byEvent.set(h.event, list);
+  }
+  for (const [event, eventHooks] of byEvent) {
+    lines.push(`  ${CYAN}${event}${RESET} (${eventHooks.length})`);
+    for (const h of eventHooks) {
+      const matcher = h.matcher ? ` ${DIM}matcher=${h.matcher}${RESET}` : "";
+      const source = `${DIM}[${h.source}]${RESET}`;
+      const desc = h.hook.type === "command" ? h.hook.command ?? "(empty)" : h.hook.type === "prompt" ? `prompt: ${(h.hook.prompt ?? "").slice(0, 60)}...` : h.hook.type === "http" ? `http: ${h.hook.url ?? "(no url)"}` : `${h.hook.type}: agent`;
+      lines.push(`    ${source}${matcher} ${h.hook.type}: ${DIM}${desc}${RESET}`);
+    }
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+function formatDiagnosticsSection(diagnostics) {
+  const lines = [];
+  const errors = diagnostics.filter((d) => d.severity === "error").length;
+  const warnings = diagnostics.filter((d) => d.severity === "warning").length;
+  const infos = diagnostics.filter((d) => d.severity === "info").length;
+  lines.push(`${BOLD}${UNDERLINE}Diagnostics${RESET} (${errors} errors, ${warnings} warnings, ${infos} info)`);
+  lines.push("");
+  if (diagnostics.length === 0) {
+    lines.push(`  ${GREEN}\u2713 No issues detected.${RESET}`);
+    lines.push("");
+    return lines.join("\n");
+  }
+  for (const d of diagnostics) {
+    const color = severityColor[d.severity] ?? DIM;
+    const icon = severityIcon[d.severity] ?? "?";
+    lines.push(`  ${color}${icon} [${d.id}]${RESET} ${BOLD}${d.title}${RESET}`);
+    lines.push(`    ${d.detail}`);
+    if (d.fix) {
+      lines.push(`    ${GREEN}Fix:${RESET} ${d.fix}`);
+    }
+    if (d.references && d.references.length > 0) {
+      lines.push(`    ${DIM}Refs: ${d.references.join(", ")}${RESET}`);
+    }
+    lines.push("");
+  }
+  return lines.join("\n");
+}
+function formatReport(report) {
+  const lines = [];
+  lines.push("");
+  lines.push(`${BOLD}Claude Hook Debug${RESET}  ${DIM}${report.timestamp}  ${report.platform}${RESET}`);
+  lines.push(`${"\u2550".repeat(60)}`);
+  lines.push("");
+  lines.push(formatSettingsSection(report.settingsFiles));
+  lines.push(formatPluginsSection(report.plugins));
+  lines.push(formatHooksSection(report.hooks, report.disableAllHooks));
+  lines.push(formatDiagnosticsSection(report.diagnostics));
+  return lines.join("\n");
+}
+function formatReportJson(report) {
+  return JSON.stringify(report, null, 2);
+}
+
+// src/index.ts
+function debug(opts) {
+  const files = scanAllSettings(opts);
+  const plugins = extractPlugins(files);
+  const hooks = extractHooks(files);
+  const disableAllHooks = getDisableAllHooks(files);
+  const diagnostics = runDiagnostics({
+    files,
+    plugins,
+    hooks,
+    disableAllHooks
+  });
+  return {
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    platform: `${platform()} ${process.arch}`,
+    settingsFiles: files,
+    plugins,
+    hooks,
+    diagnostics,
+    disableAllHooks
+  };
+}
+export {
+  debug,
+  extractHooks,
+  extractPlugins,
+  formatReport,
+  formatReportJson,
+  getDisableAllHooks,
+  resolveSettingsPaths,
+  runDiagnostics,
+  scanAllSettings
+};

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@mcptoolshop/claude-hook-debug",
+  "version": "1.0.0",
+  "description": "Diagnostic CLI for Claude Code hook issues — detects ghost hooks, scope conflicts, and plugin lifecycle bugs",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    }
+  },
+  "bin": {
+    "claude-hook-debug": "./dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "verify": "npm run build && node dist/cli.js",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "claude-code",
+    "hooks",
+    "debug",
+    "diagnostic",
+    "plugin",
+    "settings"
+  ],
+  "author": "mcp-tool-shop <64996768+mcp-tool-shop@users.noreply.github.com>",
+  "license": "MIT",
+  "homepage": "https://github.com/mcp-tool-shop-org/claude-hook-debug",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/mcp-tool-shop-org/claude-hook-debug.git"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.4.0",
+    "vitest": "^3.0.0"
+  }
+}