@onlooker-community/ecosystem 0.28.0 → 0.29.0

package/.claude-plugin/marketplace.json

@@ -215,6 +215,19 @@
       "license": "MIT",
       "keywords": ["provenance", "blame", "history", "tool-use", "transcript", "audit"],
       "tags": ["observability", "provenance"]
+    },
+    {
+      "name": "inspector",
+      "source": "./plugins/inspector",
+      "description": "Per-edit lint and typecheck gate. Runs the project's configured checks on just the touched file after every Write/Edit/MultiEdit, so the agent sees its own lint and type errors before claiming success. Cheaper than running the full project verify; complements assayer (which catches the agent lying about claims). Emits inspector.* events for downstream analysis. Requires the ecosystem plugin.",
+      "author": {
+        "name": "Onlooker Community"
+      },
+      "homepage": "https://onlooker.dev",
+      "repository": "https://github.com/onlooker-community/ecosystem",
+      "license": "MIT",
+      "keywords": ["verification", "lint", "typecheck", "post-tool-use", "audit", "feedback"],
+      "tags": ["verification", "observability"]
     }
   ]
 }

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ecosystem",
-  "version": "0.28.0",
+  "version": "0.29.0",
   "description": "Observability substrate for Claude Code. Provides the shared $ONLOOKER_DIR storage root (default $HOME/.onlooker), canonical schema-validated event emission, session and tool tracking hooks, and prompt rules. Required by all other Onlooker plugins.",
   "author": {
     "name": "Onlooker Community",

package/.release-please-manifest.json

@@ -1,11 +1,11 @@
 {
-  ".": "0.28.0",
+  ".": "0.29.0",
   "plugins/archivist": "0.1.0",
   "plugins/tribunal": "1.0.1",
   "plugins/echo": "0.2.0",
   "plugins/cartographer": "0.2.1",
   "plugins/governor": "0.2.1",
-  "plugins/compass": "0.2.0",
+  "plugins/compass": "0.3.0",
   "plugins/scribe": "0.2.1",
   "plugins/counsel": "0.3.1",
   "plugins/warden": "0.2.0",

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.29.0](https://github.com/onlooker-community/ecosystem/compare/ecosystem-v0.28.1...ecosystem-v0.29.0) (2026-06-15)
+
+
+### Features
+
+* **inspector:** ship the per-edit lint/typecheck plugin ([#88](https://github.com/onlooker-community/ecosystem/issues/88)) ([2018243](https://github.com/onlooker-community/ecosystem/commit/201824384abd6a4fc5f4395266924aa413a2ffd1))
+
+## [0.28.1](https://github.com/onlooker-community/ecosystem/compare/ecosystem-v0.28.0...ecosystem-v0.28.1) (2026-06-12)
+
+
+### Bug Fixes
+
+* **compass:** resolve MultiEdit file path from the top-level field ([#85](https://github.com/onlooker-community/ecosystem/issues/85)) ([468abaa](https://github.com/onlooker-community/ecosystem/commit/468abaaad4bef59fe4308bd8887dfcf6d633921a))
+
 ## [0.28.0](https://github.com/onlooker-community/ecosystem/compare/ecosystem-v0.27.0...ecosystem-v0.28.0) (2026-06-12)
 
 

package/CLAUDE.md

@@ -16,6 +16,7 @@ plugins/
   compass/                    ← pre-write alignment gate (design phase)
   echo/                       ← prompt-change regression detection
   governor/                   ← resource governance and budget enforcement
+  inspector/                  ← per-edit lint and typecheck gate
   lineage/                    ← per-change provenance ("why does this line exist?")
   tribunal/                   ← multi-agent quality gate (Actor → Jury → Meta-Judge → Gate)
 
@@ -42,6 +43,7 @@ scripts/lib/onlooker-event.mjs  ← canonical event builder; all plugins route t
 | assayer | Stop | Verifies the agent's final-message claims against actual command results in the transcript; advisory |
 | bursar | SessionStart, SessionEnd | Rolls each session's spend into a per-project ledger on SessionEnd; surfaces "this project burned $X this week" at SessionStart. Governor is per-session; bursar is the cross-session rollup |
 | lineage | PostToolUse (Edit, Write, MultiEdit) + skill invocation | Records per-change provenance (session_id/turn + redacted, size-capped snippets) into a per-project ledger; `/lineage <file>:<line>` answers "why does this line exist?" by joining records to historian transcripts to recover prompt context |
+| inspector | PostToolUse (Write, Edit, MultiEdit) | Per-edit verification: runs the project's configured lint + typecheck commands on just the touched file and emits `inspector.check.*` / `inspector.run.completed`. Surfaces issues to the agent for the next turn. Cheaper than the planned proctor (which runs the full project verify at Stop); complements assayer (which catches claims the agent makes without running anything) |
 
 Plugins communicate by emitting events to the JSONL log — they do not call each other directly. All plugins depend on the ecosystem substrate; no plugin depends on another plugin directly.
 

package/docs/plugin-catalog.md

@@ -0,0 +1,125 @@
+# Plugin Catalog
+
+The full set of Onlooker plugins — shipped and planned — grouped by the layer of agent behavior they address. Each entry is a sketch: name, status, hook surface, one-line purpose. Full design docs land in each plugin's own directory as the plugin is built.
+
+**Status legend**
+
+- **shipped** — code lives under `plugins/<name>/` and is exercised by the test suite
+- **design** — design doc exists, no implementation
+- **planned** — named only; this catalog is the first reference
+
+**Layer map**
+
+| Layer | What it does |
+|---|---|
+| quality | Judges output after the fact |
+| governance | Enforces resource and policy limits |
+| testing | Detects regressions in agents and prompts |
+| safety | Blocks harmful or ambiguous actions before they land |
+| analysis | Produces structured artifacts about the session and the repo |
+| memory | Persists context across compaction and across sessions |
+| discovery / routing | Surfaces the right ecosystem affordance for the moment |
+| verification / execution | Runs the agent's output and reports whether it actually worked |
+| feedback / adaptation | Detects user signals (corrections, reverts) and feeds them back |
+| provenance | Links artifacts (files, decisions, commits) back to the prompts and agents that produced them |
+
+---
+
+## Quality
+
+Post-hoc judgment of agent output.
+
+- **tribunal** — shipped — Stop + skill. Multi-agent quality gate: Actor → typed Judges → Meta-Judge → gate decides accept / retry / exhaust.
+- **muse** — planned — UserPromptSubmit. Optional prompt-clarification pass that rewrites a vague prompt into a sharper one before the agent acts. Distinct from compass (which blocks) — muse reshapes.
+- **rubric** — planned — skill only. Manages and versions the scoring rubrics that tribunal and echo consume; `/rubric` diffs or rolls back rubric revisions.
+
+## Governance
+
+Resource and policy enforcement.
+
+- **governor** — shipped — SessionStart, PreToolUse(Task), PostToolUse(Task), Stop. Per-session token and cost spend tracking; gates Task spawns against a configurable budget ceiling.
+- **bursar** — planned — SessionEnd. Per-project, multi-session budget accounting; surfaces "this project burned $X this week" at SessionStart. Governor is per-session; bursar is the rollup.
+- **arbiter** — planned — PreToolUse. Resolves cross-plugin conflicts (e.g., warden gate is closed but tribunal wants to spawn an Actor) using a declared precedence policy.
+
+## Testing
+
+Regression detection for agents and prompts.
+
+- **echo** — shipped — Stop. Single-judge quality pass when a watched agent file changes; compares the score against a stored baseline to report improved / degraded / neutral.
+- **canary** — planned — cron / scheduled. Synthetic prompts run against watched agents on a schedule; detects drift without waiting for a file edit.
+- **gauntlet** — planned — skill only. Adversarial fixture suite (jailbreaks, ambiguous prompts, edge cases) run on demand against a chosen agent.
+
+## Safety
+
+Block harmful or ambiguous actions before they land.
+
+- **compass** — shipped — PreToolUse(Write, Edit, MultiEdit, Bash). Pre-write intent clarity gate. N=5 parallel Haiku evaluators score whether two independent readers would converge on the same interpretation; blocks below threshold.
+- **warden** — shipped — PostToolUse(WebFetch, Read), PreToolUse(Write, Edit, MultiEdit, Bash), SessionStart. Scans ingested content for prompt-injection patterns; closes a session-scoped gate that blocks write-class tools until cleared.
+
+## Analysis
+
+Structured artifacts describing the session and the repo.
+
+- **cartographer** — shipped — SessionStart, PostToolUse(Write, Edit, MultiEdit). Audits the persistent instruction layer (CLAUDE.md, AGENTS.md, .claude/rules/) for contradictions, shadowing, and drift.
+- **counsel** — shipped — SessionStart. Weekly synthesis brief across all plugin event logs; injected when the last brief is stale.
+- **scribe** — shipped — SessionEnd. Distills the session's "why" — problem context, decisions, tradeoffs — into a readable artifact.
+
+## Memory
+
+Context that survives compaction and sessions.
+
+- **archivist** — shipped — PreCompact, SessionStart. Extracts decisions, dead-ends, and open questions on compaction; reinjects the most important ones at the next SessionStart.
+- **historian** — shipped — SessionEnd. Chunks and sanitizes the session transcript and stores chunks locally for future retrieval. Indexing pipeline only; retrieval lands in a follow-up.
+- **librarian** — shipped — SessionEnd, skill. Consolidates archivist's per-session artifacts into the user's durable typed memory store; queues classified proposals for explicit confirmation.
+- **curator** — shipped — SessionStart, skill. Maintenance pass over the typed memory store: four cheap heuristic checks (date decay, broken paths, broken index, orphaned memory) inside a wall-clock budget; surfaces findings, never edits the store directly.
+
+## Discovery / Routing
+
+Help the agent and the user find the right affordance for the moment.
+
+- **wayfinder** — planned — UserPromptSubmit. Ranks ecosystem plugins, skills, and agents against the current prompt; surfaces the top 1–2 as a `wayfinder.suggestion` event.
+- **herald** — planned — SessionStart. Announces plugins, skills, or agents added since the user's last session in this project. One-time per item, dismissable.
+- **dispatcher** — planned — UserPromptSubmit. Narrow intent classifier ("commit", "ship a PR", "review changes") that maps directly to the canonical skill. Narrower than wayfinder; fewer false positives.
+
+## Verification / Execution
+
+Run the agent's output. Report what actually happened.
+
+- **proctor** — planned — Stop, PostToolUse(Edit, Write). Runs the project's verification command (configurable: `npm test`, `mise run check`, `cargo test`, …) after writes or at Stop; emits `proctor.verify.passed` or `.failed`.
+- **assayer** — planned — Stop. Parses the agent's final message for testable claims ("I ran the tests", "the build passes") and verifies them against actual exit codes in the session log. Catches lying-without-malice.
+- **inspector** — planned — PostToolUse(Edit, Write). Runs lint and typecheck on just the touched files. Cheaper than proctor; fires far more often.
+
+## Feedback / Adaptation
+
+Detect user signals and feed them back into the system.
+
+- **attendant** — planned — UserPromptSubmit. Detects course-corrections in the user's prompt ("no", "stop", "don't", revert patterns); emits `attendant.pushback.detected` for other plugins to consume.
+- **interpreter** — planned — consumes attendant events. Classifies pushback tone (frustrated / clarifying / neutral) so downstream plugins don't overreact to clarifying questions.
+- **adept** — planned — SessionStart. Accumulates pushback patterns over sessions; injects "you've corrected this pattern N times" hints. Closes the loop that echo opens for prompt files.
+
+## Provenance
+
+Link artifacts back to the prompts and agents that produced them.
+
+- **lineage** — planned — PostToolUse(Edit, Write, MultiEdit). Records the prompt + agent + session that produced each file change; builds a queryable graph by joining historian transcripts with tool-use events. Answers "why does this line exist?"
+- **ledger** — planned — PostToolUse(*) write-class. Append-only audit record of every write-class tool call with the prompt and agent context attached. `/ledger` queries by file, prompt substring, or time range.
+- **witness** — planned — Stop. Captures the deciding assistant turn — the moment the agent committed to a course of action — and stores it as a discrete artifact. Distinct from scribe (which writes a narrative) — witness preserves the pivot itself.
+
+---
+
+## Coverage check
+
+| Layer | Plugins |
+|---|---|
+| quality | tribunal, muse, rubric |
+| governance | governor, bursar, arbiter |
+| testing | echo, canary, gauntlet |
+| safety | compass, warden |
+| analysis | cartographer, counsel, scribe |
+| memory | archivist, historian, librarian, curator |
+| discovery / routing | wayfinder, herald, dispatcher |
+| verification / execution | proctor, assayer, inspector |
+| feedback / adaptation | attendant, interpreter, adept |
+| provenance | lineage, ledger, witness |
+
+Every layer holds at least two plugins; most hold three. Total: 12 shipped, 0 design, 17 planned.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onlooker-community/ecosystem",
-  "version": "0.28.0",
+  "version": "0.29.0",
   "description": "Agents, skills, hooks, commands, rules, and MCP configurations that power [Onlooker](https://onlooker.dev)",
   "author": {
     "name": "Onlooker Community",
@@ -19,14 +19,14 @@
     "onlooker-install": "install.sh"
   },
   "dependencies": {
-    "@onlooker-community/schema": "^2.8.0"
+    "@onlooker-community/schema": "^2.9.0"
   },
   "scripts": {
     "postinstall": "echo '\\n  onlooker-ecosystem installed!\\n  Run: npx onlooker-install typescript\\n  Docs: https://github.com/onlooker-community/ecosystem\\n'",
     "test": "npm run test:bats && npm run test:schema",
     "test:bats": "bats test/bats",
     "test:schema": "node --test test/node/*.test.mjs",
-    "test:shellcheck": "shellcheck -S error -x install.sh scripts/common.sh scripts/hooks/*.sh scripts/lib/*.sh plugins/archivist/scripts/hooks/*.sh plugins/archivist/scripts/lib/*.sh plugins/tribunal/scripts/hooks/*.sh plugins/tribunal/scripts/lib/*.sh plugins/echo/scripts/hooks/*.sh plugins/echo/scripts/lib/*.sh plugins/governor/scripts/hooks/*.sh plugins/governor/scripts/lib/*.sh plugins/compass/scripts/hooks/*.sh plugins/compass/scripts/lib/*.sh plugins/scribe/scripts/hooks/*.sh plugins/scribe/scripts/lib/*.sh plugins/counsel/scripts/hooks/*.sh plugins/counsel/scripts/lib/*.sh plugins/warden/scripts/hooks/*.sh plugins/warden/scripts/lib/*.sh plugins/librarian/scripts/hooks/*.sh plugins/librarian/scripts/lib/*.sh plugins/curator/scripts/hooks/*.sh plugins/curator/scripts/lib/*.sh plugins/historian/scripts/hooks/*.sh plugins/historian/scripts/lib/*.sh plugins/assayer/scripts/hooks/*.sh plugins/assayer/scripts/lib/*.sh plugins/cartographer/scripts/hooks/*.sh plugins/cartographer/scripts/lib/*.sh plugins/bursar/scripts/hooks/*.sh plugins/bursar/scripts/lib/*.sh plugins/lineage/scripts/hooks/*.sh plugins/lineage/scripts/lib/*.sh",
+    "test:shellcheck": "shellcheck -S error -x install.sh scripts/common.sh scripts/hooks/*.sh scripts/lib/*.sh plugins/archivist/scripts/hooks/*.sh plugins/archivist/scripts/lib/*.sh plugins/tribunal/scripts/hooks/*.sh plugins/tribunal/scripts/lib/*.sh plugins/echo/scripts/hooks/*.sh plugins/echo/scripts/lib/*.sh plugins/governor/scripts/hooks/*.sh plugins/governor/scripts/lib/*.sh plugins/compass/scripts/hooks/*.sh plugins/compass/scripts/lib/*.sh plugins/scribe/scripts/hooks/*.sh plugins/scribe/scripts/lib/*.sh plugins/counsel/scripts/hooks/*.sh plugins/counsel/scripts/lib/*.sh plugins/warden/scripts/hooks/*.sh plugins/warden/scripts/lib/*.sh plugins/librarian/scripts/hooks/*.sh plugins/librarian/scripts/lib/*.sh plugins/curator/scripts/hooks/*.sh plugins/curator/scripts/lib/*.sh plugins/historian/scripts/hooks/*.sh plugins/historian/scripts/lib/*.sh plugins/assayer/scripts/hooks/*.sh plugins/assayer/scripts/lib/*.sh plugins/cartographer/scripts/hooks/*.sh plugins/cartographer/scripts/lib/*.sh plugins/bursar/scripts/hooks/*.sh plugins/bursar/scripts/lib/*.sh plugins/lineage/scripts/hooks/*.sh plugins/lineage/scripts/lib/*.sh plugins/inspector/scripts/hooks/*.sh plugins/inspector/scripts/lib/*.sh",
     "lint:references": "node scripts/lint/check-references.mjs",
     "lint:manifests": "node scripts/lint/check-manifests.mjs",
     "coverage:node": "node scripts/coverage/run-coverage.mjs",

package/plugins/compass/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "compass",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Pre-write intent clarity gate. Intercepts write-class tool calls and requires a confidence threshold before allowing them to proceed. Evaluates the pending write against the prior assistant turn as context to avoid false positives on question-answer turns. Builds on the Onlooker ecosystem plugin.",
   "author": {
     "name": "Onlooker Community",

package/plugins/compass/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.3.0](https://github.com/onlooker-community/ecosystem/compare/compass-v0.2.1...compass-v0.3.0) (2026-06-15)
+
+
+### Features
+
+* **inspector:** ship the per-edit lint/typecheck plugin ([#88](https://github.com/onlooker-community/ecosystem/issues/88)) ([2018243](https://github.com/onlooker-community/ecosystem/commit/201824384abd6a4fc5f4395266924aa413a2ffd1))
+
+## [0.2.1](https://github.com/onlooker-community/ecosystem/compare/compass-v0.2.0...compass-v0.2.1) (2026-06-12)
+
+
+### Bug Fixes
+
+* **compass:** resolve MultiEdit file path from the top-level field ([#85](https://github.com/onlooker-community/ecosystem/issues/85)) ([468abaa](https://github.com/onlooker-community/ecosystem/commit/468abaaad4bef59fe4308bd8887dfcf6d633921a))
+
 ## [0.2.0](https://github.com/onlooker-community/ecosystem/compare/compass-v0.1.0...compass-v0.2.0) (2026-06-01)
 
 

package/plugins/compass/README.md

@@ -74,8 +74,7 @@ All keys are optional. Unset keys fall back to the plugin's `config.json` defaul
       "identity_match": "dir_plus_stem"
     },
     "transcript": {
-      "prior_turn_chars_max": 800,
-      "transcript_max_age_seconds": 300
+      "prior_turn_chars_max": 800
     },
     "skip_patterns": {
       "reply_to_question": {
@@ -115,7 +114,6 @@ All keys are optional. Unset keys fall back to the plugin's `config.json` defaul
 | `cooldown.seconds` | `120` | A write whose path shares a parent directory and filename stem with a recent successful write is skipped within this window. |
 | `cooldown.identity_match` | `dir_plus_stem` | Cooldown identity strategy. Stem comparison strips only the final extension; the cooldown does not carry across a rename. |
 | `transcript.prior_turn_chars_max` | `800` | Maximum characters of the prior assistant turn fed into the evaluator. Set to `0` to omit the prior turn for near-zero egress. |
-| `transcript.transcript_max_age_seconds` | `300` | Maximum age of the transcript file Compass will read the prior turn from. |
 | `skip_patterns.reply_to_question.enabled` | `true` | Enables the symbolic skip layer. When disabled, every write that passes the trigger gate reaches the LLM evaluator. |
 | `max_checks_per_turn` | `3` | Per-turn evaluation budget. Writes beyond this skip with reason `turn_budget_exhausted`. |
 | `min_context_chars` | `80` | Minimum sanitized context length. Shorter context skips with reason `insufficient_context`. |

package/plugins/compass/config.json

@@ -20,8 +20,7 @@
       "identity_match": "dir_plus_stem"
     },
     "transcript": {
-      "prior_turn_chars_max": 800,
-      "transcript_max_age_seconds": 300
+      "prior_turn_chars_max": 800
     },
     "skip_patterns": {
       "reply_to_question": {

package/plugins/compass/docs/design.md

@@ -223,8 +223,7 @@ The re-check is capped at one per intervention. After one re-check, the three pa
       "identity_match": "dir_plus_stem"
     },
     "transcript": {
-      "prior_turn_chars_max": 800,
-      "transcript_max_age_seconds": 300
+      "prior_turn_chars_max": 800
     },
     "skip_patterns": {
       "reply_to_question": {

package/plugins/compass/scripts/hooks/compass-bash-gate.sh

@@ -13,6 +13,12 @@
 
 set -uo pipefail
 
+# Recursion guard — must be first.
+# When the evaluator shells out to `claude -p`, that subprocess can
+# trigger its own Bash hooks, which would re-enter Compass.
+[[ "${COMPASS_NESTED:-}" == "1" ]] && exit 0
+export COMPASS_NESTED=1
+
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PLUGIN_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
 
@@ -35,6 +41,7 @@ INPUT=$(cat)
 SESSION_ID=$(printf '%s' "$INPUT" | jq -r '.session_id // ""' 2>/dev/null) || SESSION_ID=""
 CWD=$(printf '%s' "$INPUT" | jq -r '.cwd // ""' 2>/dev/null) || CWD=""
 COMMAND=$(printf '%s' "$INPUT" | jq -r '.tool_input.command // ""' 2>/dev/null) || COMMAND=""
+TRANSCRIPT_PATH=$(printf '%s' "$INPUT" | jq -r '.transcript_path // ""' 2>/dev/null) || TRANSCRIPT_PATH=""
 
 export _HOOK_SESSION_ID="$SESSION_ID"
 
@@ -91,5 +98,5 @@ if ! _is_write_command "$COMMAND"; then
 	exit 0
 fi
 
-compass_run_gate "Bash" "" "bash_write" "$COMMAND" "$SESSION_ID" "$CWD"
+compass_run_gate "Bash" "" "bash_write" "$COMMAND" "$SESSION_ID" "$CWD" "$TRANSCRIPT_PATH"
 exit $?

package/plugins/compass/scripts/hooks/compass-pre-tool-use.sh

@@ -12,6 +12,12 @@
 
 set -uo pipefail
 
+# Recursion guard — must be first.
+# When the evaluator shells out to `claude -p`, that subprocess can
+# trigger its own Write/Edit hooks, which would re-enter Compass.
+[[ "${COMPASS_NESTED:-}" == "1" ]] && exit 0
+export COMPASS_NESTED=1
+
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PLUGIN_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
 
@@ -34,6 +40,7 @@ INPUT=$(cat)
 SESSION_ID=$(printf '%s' "$INPUT" | jq -r '.session_id // ""' 2>/dev/null) || SESSION_ID=""
 CWD=$(printf '%s' "$INPUT" | jq -r '.cwd // ""' 2>/dev/null) || CWD=""
 TOOL_NAME=$(printf '%s' "$INPUT" | jq -r '.tool_name // ""' 2>/dev/null) || TOOL_NAME=""
+TRANSCRIPT_PATH=$(printf '%s' "$INPUT" | jq -r '.transcript_path // ""' 2>/dev/null) || TRANSCRIPT_PATH=""
 
 export _HOOK_SESSION_ID="$SESSION_ID"
 
@@ -65,14 +72,19 @@ case "$TOOL_NAME" in
 		OPERATION="edit"
 		;;
 	MultiEdit)
-		# For MultiEdit, use the first file path and a summary as context.
+		# MultiEdit applies to one file via a top-level file_path; fall back to
+		# the first edit's path for any nested shape.
 		FILE_PATH=$(printf '%s' "$INPUT" \
-			| jq -r '.tool_input.edits[0].file_path // ""' 2>/dev/null) || FILE_PATH=""
+			| jq -r '.tool_input.file_path // .tool_input.edits[0].file_path // ""' 2>/dev/null) || FILE_PATH=""
 		_edit_count=$(printf '%s' "$INPUT" \
 			| jq '.tool_input.edits | length' 2>/dev/null) || _edit_count="?"
+		# Combine the top-level path with any per-edit paths, drop blanks/nulls.
 		_file_list=$(printf '%s' "$INPUT" \
-			| jq -r '[.tool_input.edits[].file_path] | unique | join(", ")' 2>/dev/null) \
-			|| _file_list="(multiple files)"
+			| jq -r '([.tool_input.file_path] + [.tool_input.edits[]?.file_path] | map(select(. != null and . != "")) | unique) | join(", ")' 2>/dev/null) \
+			|| _file_list=""
+		[[ -z "$_file_list" ]] && _file_list="$FILE_PATH"
+		# Both blank (a MultiEdit with no resolvable path) — keep the context legible.
+		[[ -z "$_file_list" ]] && _file_list="(unknown)"
 		CONTEXT="MultiEdit: ${_edit_count} edit(s) across: ${_file_list}"
 		OPERATION="multi_edit"
 		;;
@@ -82,5 +94,5 @@ case "$TOOL_NAME" in
 		;;
 esac
 
-compass_run_gate "$TOOL_NAME" "$FILE_PATH" "$OPERATION" "$CONTEXT" "$SESSION_ID" "$CWD"
+compass_run_gate "$TOOL_NAME" "$FILE_PATH" "$OPERATION" "$CONTEXT" "$SESSION_ID" "$CWD" "$TRANSCRIPT_PATH"
 exit $?

package/plugins/compass/scripts/hooks/compass-record-write.sh

@@ -11,6 +11,11 @@
 
 set -uo pipefail
 
+# Recursion guard — must be first.
+# A nested `claude -p` Write would otherwise re-enter the cooldown writer.
+[[ "${COMPASS_NESTED:-}" == "1" ]] && exit 0
+export COMPASS_NESTED=1
+
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PLUGIN_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
 

package/plugins/compass/scripts/hooks/compass-session-start.sh

@@ -18,14 +18,6 @@ set -uo pipefail
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 PLUGIN_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
 
-_ECOSYSTEM_ROOT="${ONLOOKER_ECOSYSTEM_ROOT:-}"
-if [[ -z "$_ECOSYSTEM_ROOT" ]]; then
-	_candidate="$(cd "${PLUGIN_ROOT}/../.." 2>/dev/null && pwd)"
-	if [[ -f "${_candidate}/scripts/lib/validate-path.sh" ]]; then
-		_ECOSYSTEM_ROOT="$_candidate"
-	fi
-fi
-
 export CLAUDE_PLUGIN_ROOT="$PLUGIN_ROOT"
 
 # shellcheck source=../lib/compass-config.sh