@muggleai/works 5.11.1 → 5.12.0-staging.73

package/plugin/scripts/guardrail-resolve-gate.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+set -uo pipefail
+
+# Review-thread resolve gate (PreToolUse, Bash). Denies a `gh api` GraphQL
+# resolveReviewThread and its `glab api` counterpart, so the loop replies to a
+# review thread and leaves closing it to the reviewer.
+#
+# Must stay synchronous — only a sync PreToolUse hook can deny — and it fires
+# before every Bash call, so a keyword pre-filter keeps Node off the hot path.
+# The filter is deliberately looser than the gate: it lets `unresolveReviewThread`
+# and `resolved=false` through to guardrails.mjs, which allows both. Cheaper to
+# pay one cold start on the rare inverse call than to encode the boundary twice
+# and have the two drift. Degrades to {} so it never blocks an unrelated command.
+payload="$(cat)"
+
+if ! grep -Eiq 'resolveReviewThread|resolved=(true|false)' <<<"$payload"; then
+  printf '{}'
+  exit 0
+fi
+
+root="${CLAUDE_PLUGIN_ROOT:-${CURSOR_PLUGIN_ROOT:-}}"
+printf '%s' "$payload" | node "${root}/scripts/guardrails.mjs" resolve-gate 2>/dev/null || printf '{}'

package/plugin/scripts/guardrail-stage-gate.sh

@@ -34,7 +34,7 @@ state_file="$home/.muggle-ai/guardrails/$sid.json"
 if [ ! -f "$state_file" ] \
   || ! grep -q '"mandatoryStages"' "$state_file" \
   || grep -q '"mandatoryStages": \[\]' "$state_file" \
-  || grep -q '"stageSkipped": true' "$state_file"; then
+  || grep -q '"stageReleased": true' "$state_file" \n  || grep -q '"stageSkipped": true' "$state_file"; then
   printf '{}'
   exit 0
 fi

package/plugin/scripts/guardrail-terminal-gate.sh

@@ -29,7 +29,7 @@ fi
 state_file="$home/.muggle-ai/guardrails/$sid.json"
 if [ ! -f "$state_file" ] \
   || ! grep -q '"terminalPending"' "$state_file" \
-  || grep -q '"terminalPending": \[\]' "$state_file"; then
+  || grep -q '"terminalReleased": true' "$state_file"   || grep -q '"terminalPending": \[\]' "$state_file"; then
   printf '{}'
   exit 0
 fi

package/plugin/scripts/guardrail-walkthrough-gate.sh

@@ -32,7 +32,7 @@ state_file="$home/.muggle-ai/guardrails/$sid.json"
 if [ ! -f "$state_file" ] \
   || ! grep -q '"e2eRun": true' "$state_file" \
   || grep -q '"walkthroughPosted": true' "$state_file" \
-  || grep -q '"walkthroughSkipped": true' "$state_file"; then
+  || grep -q '"walkthroughReleased": true' "$state_file" \n  || grep -q '"walkthroughSkipped": true' "$state_file"; then
   printf '{}'
   exit 0
 fi

package/plugin/scripts/guardrail-watch-gate.sh

@@ -31,7 +31,7 @@ state_file="$home/.muggle-ai/guardrails/$sid.json"
 if [ ! -f "$state_file" ] \
   || ! grep -q '"prsHandled"' "$state_file" \
   || grep -q '"prsHandled": \[\]' "$state_file" \
-  || grep -q '"watchSkipped": true' "$state_file"; then
+  || grep -q '"watchReleased": true' "$state_file" \n  || grep -q '"watchSkipped": true' "$state_file"; then
   printf '{}'
   exit 0
 fi