@ryuenn3123/agentic-senior-core 6.2.4 → 6.4.0

package/.agents/plugins/agentic-senior-core/hooks/constants.cjs

@@ -1,6 +1,5 @@
-// Agentic Senior Core — shared constants for hook modules
-// Single source of truth for thresholds and extension sets used by
-// post-edit-enforce.js and dedup-gate.js.
+const fs = require('fs');
+const path = require('path');
 
 const SOURCE_EXTENSIONS = new Set([
   'js', 'ts', 'mjs', 'cjs', 'jsx', 'tsx',
@@ -12,10 +11,39 @@ const NEW_FILE_LINE_THRESHOLD = 50;
 const SESSION_DRIFT_THRESHOLD = 4;
 const LADDER_PULSE_INTERVAL = 3;
 
+function loadDedupConfig(cwd = process.cwd()) {
+  const candidates = [
+    path.join(cwd, '.asc', 'dedup-config.json'),
+    path.join(cwd, '.agents', 'dedup-config.json'),
+  ];
+  for (let i = 0; i < candidates.length; i++) {
+    try {
+      if (fs.existsSync(candidates[i])) {
+        return JSON.parse(fs.readFileSync(candidates[i], 'utf8'));
+      }
+    } catch (_) {}
+  }
+  return {};
+}
+
+function getThresholds(cwd = process.cwd()) {
+  const config = loadDedupConfig(cwd);
+  return {
+    NEW_FILE_LINE_THRESHOLD: typeof config.NEW_FILE_LINE_THRESHOLD === 'number'
+      ? config.NEW_FILE_LINE_THRESHOLD
+      : NEW_FILE_LINE_THRESHOLD,
+    LOC_DELTA_THRESHOLD: typeof config.LOC_DELTA_THRESHOLD === 'number'
+      ? config.LOC_DELTA_THRESHOLD
+      : LOC_DELTA_THRESHOLD,
+  };
+}
+
 module.exports = {
   SOURCE_EXTENSIONS,
   LOC_DELTA_THRESHOLD,
   NEW_FILE_LINE_THRESHOLD,
   SESSION_DRIFT_THRESHOLD,
   LADDER_PULSE_INTERVAL,
+  getThresholds,
+  loadDedupConfig,
 };

package/.agents/plugins/agentic-senior-core/hooks/dedup-gate.js

@@ -56,9 +56,9 @@ process.stdin.on('data', chunk => {
     const ext = path.extname(filePath).slice(1);
     if (!SOURCE_EXTENSIONS.has(ext)) { process.exit(0); return; }
 
-    if (!isQualifyingEdit(toolName, toolInput)) { process.exit(0); return; }
-
     const config = loadDedupConfig();
+    if (!isQualifyingEdit(toolName, toolInput, config)) { process.exit(0); return; }
+
     const scanDir = resolveScanDir(filePath, config);
     const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'asc-dedup-'));
 
@@ -101,50 +101,67 @@ function extractToolCallFromTranscript(transcriptPath, stepIdx) {
 
     // Find the step with matching step_index that contains tool_calls
     for (var i = lines.length - 1; i >= 0; i--) {
-      var step = JSON.parse(lines[i]);
-      if (step.step_index !== stepIdx || !step.tool_calls) continue;
-
-      for (var j = 0; j < step.tool_calls.length; j++) {
-        var tc = step.tool_calls[j];
-        if (tc.name === 'replace_file_content' || tc.name === 'multi_replace_file_content') {
-          return {
-            toolName: 'Edit',
-            toolInput: {
-              file_path: tc.args.TargetFile || '',
-              new_string: tc.args.ReplacementContent || '',
-              old_string: tc.args.TargetContent || '',
-            },
-          };
-        } else if (tc.name === 'write_to_file') {
-          return {
-            toolName: 'Write',
-            toolInput: {
-              file_path: tc.args.TargetFile || '',
-              content: tc.args.CodeContent || '',
-            },
-          };
+      try {
+        var step = JSON.parse(lines[i]);
+        if (step.step_index !== stepIdx || !step.tool_calls) continue;
+
+        for (var j = 0; j < step.tool_calls.length; j++) {
+          var tc = step.tool_calls[j];
+          if (tc.name === 'replace_file_content' || tc.name === 'multi_replace_file_content') {
+            return {
+              toolName: 'Edit',
+              toolInput: {
+                file_path: tc.args.TargetFile || '',
+                new_string: tc.args.ReplacementContent || '',
+                old_string: tc.args.TargetContent || '',
+              },
+            };
+          } else if (tc.name === 'write_to_file') {
+            return {
+              toolName: 'Write',
+              toolInput: {
+                file_path: tc.args.TargetFile || '',
+                content: tc.args.CodeContent || '',
+              },
+            };
+          }
+        }
+      } catch (lineErr) {
+        if (process.env.ASC_DEBUG) {
+          console.error('[ASC Debug] Transcript line parse failed line ' + i + ':', lineErr.message);
         }
+        // Skip malformed line and keep scanning
       }
     }
     return null;
-  } catch (_) {
+  } catch (err) {
+    if (process.env.ASC_DEBUG) {
+      console.error('[ASC Debug] extractToolCallFromTranscript failed:', err.message);
+    }
     return null;
   }
 }
 
-function isQualifyingEdit(toolName, toolInput) {
+function isQualifyingEdit(toolName, toolInput, config) {
   var isWrite = ['Write', 'write_to_file', 'write_file'].indexOf(toolName) !== -1;
   var isEdit = ['Edit', 'replace_file_content', 'multi_replace_file_content'].indexOf(toolName) !== -1;
 
+  var newFileThreshold = (config && typeof config.NEW_FILE_LINE_THRESHOLD === 'number')
+    ? config.NEW_FILE_LINE_THRESHOLD
+    : NEW_FILE_LINE_THRESHOLD;
+  var locDeltaThreshold = (config && typeof config.LOC_DELTA_THRESHOLD === 'number')
+    ? config.LOC_DELTA_THRESHOLD
+    : LOC_DELTA_THRESHOLD;
+
   if (isWrite) {
     var content = toolInput.content || toolInput.CodeContent || '';
-    return content.split('\n').length > NEW_FILE_LINE_THRESHOLD;
+    return content.split('\n').length > newFileThreshold;
   }
   if (isEdit) {
     var newStr = toolInput.new_string || toolInput.ReplacementContent || toolInput.content || '';
     var oldStr = toolInput.old_string || toolInput.TargetContent || '';
     var delta = newStr.split('\n').length - oldStr.split('\n').length;
-    return delta > LOC_DELTA_THRESHOLD;
+    return delta > locDeltaThreshold;
   }
   return false;
 }

package/.agents/plugins/agentic-senior-core/hooks/ladder-pulse.js

@@ -12,6 +12,13 @@ const { LADDER_PULSE_INTERVAL } = require('./constants.cjs');
 const LADDER_REMINDER = '[ASC] Ladder check: (1) needed? (2) exists already \u2014 reuse? '
   + '(3) stdlib/native? (4) existing dep? (5) one function? Then minimal code.';
 
+// Security constraints are negation-type ("never do X") — most vulnerable to context rot
+// per arXiv:2604.20911. Reinject verbatim alongside ladder pulse.
+const SECURITY_REMINDER = '[ASC SECURITY PIN — verbatim, do not paraphrase] '
+  + 'NEVER: interpolate input into SQL/shell · commit secrets/tokens/credentials '
+  + '· store plaintext passwords · leak stack traces/internals/PII in responses. '
+  + 'ALWAYS: parameterize queries · enforce resource-level authz · rate-limit public endpoints.';
+
 let inputBuffer = '';
 process.stdin.setEncoding('utf8');
 process.stdin.on('data', chunk => {
@@ -28,7 +35,7 @@ process.stdin.on('data', chunk => {
         if (shouldInject) {
             process.stdout.write(JSON.stringify({
                 injectSteps: [{
-                    ephemeralMessage: `**ASC LADDER PULSE**: You have completed several steps. Remember to review the 1-6 decision ladder. Document deferred debt if you take shortcuts.`
+                    ephemeralMessage: `**ASC LADDER PULSE**: You have completed several steps. Remember to review the 1-6 decision ladder. Document deferred debt if you take shortcuts.\n\n${SECURITY_REMINDER}`
                 }]
             }) + '\n');
         } else {

package/.agents/plugins/agentic-senior-core/hooks/lib/known-security-patterns.json

@@ -1,20 +1,83 @@
 {
-  "description": "Regex patterns for recurring security anti-patterns",
+  "description": "Regex patterns for recurring security anti-patterns, grouped by language. Universal patterns run on all files; language-specific patterns run only when the file extension matches.",
   "patterns": [
     {
       "id": "insecure-redirect",
       "regex": "location\\.href\\s*=\\s*(?!['\"`])([^;\\n]+)",
-      "message": "Unvalidated redirect target assigned to location.href. Ensure the variable is sanitized or use a safe routing method."
+      "message": "Unvalidated redirect target assigned to location.href. Ensure the variable is sanitized or use a safe routing method.",
+      "languages": ["js", "ts", "jsx", "tsx", "mjs", "cjs"]
     },
     {
       "id": "timing-unsafe-compare",
       "regex": "(password|secret|token|key)\\s*(===|!==|==|!=)",
-      "message": "Non-timing-safe string comparison on a secret variable. Use crypto.timingSafeEqual instead."
+      "message": "Non-timing-safe string comparison on a secret variable. Use crypto.timingSafeEqual instead.",
+      "languages": ["js", "ts", "jsx", "tsx", "mjs", "cjs"]
     },
     {
       "id": "user-input-http",
       "regex": "(axios|fetch|got|superagent)\\s*\\(\\s*.*?(req\\.(query|body|params)|process\\.env)",
-      "message": "Potentially unsafe input passed directly into an HTTP client. Validate and sanitize URL parameters first."
+      "message": "Potentially unsafe input passed directly into an HTTP client. Validate and sanitize URL parameters first.",
+      "languages": ["js", "ts", "jsx", "tsx", "mjs", "cjs"]
+    },
+    {
+      "id": "py-eval",
+      "regex": "\\beval\\s*\\(",
+      "message": "eval() on untrusted input enables arbitrary code execution. Use ast.literal_eval() for data parsing or eliminate eval entirely.",
+      "languages": ["py"]
+    },
+    {
+      "id": "py-shell-injection",
+      "regex": "subprocess.*shell\\s*=\\s*True",
+      "message": "subprocess with shell=True is vulnerable to shell injection. Use shell=False with a list of arguments instead.",
+      "languages": ["py"]
+    },
+    {
+      "id": "py-unsafe-pickle",
+      "regex": "pickle\\.loads?\\s*\\(",
+      "message": "pickle.load/loads on untrusted data enables arbitrary code execution. Use a safe format (JSON, msgpack) or validate the source.",
+      "languages": ["py"]
+    },
+    {
+      "id": "py-unsafe-yaml",
+      "regex": "yaml\\.load\\s*\\((?!.*Loader)",
+      "message": "yaml.load without SafeLoader/FullLoader enables arbitrary code execution. Use yaml.safe_load() or specify Loader=yaml.SafeLoader.",
+      "languages": ["py"]
+    },
+    {
+      "id": "go-sql-interpolation",
+      "regex": "fmt\\.Sprintf\\s*\\(.*(?:SELECT|INSERT|UPDATE|DELETE)",
+      "message": "SQL query built with fmt.Sprintf is vulnerable to SQL injection. Use parameterized queries with database/sql placeholders.",
+      "languages": ["go"]
+    },
+    {
+      "id": "go-exec-interpolation",
+      "regex": "exec\\.Command\\s*\\(.*\\+",
+      "message": "exec.Command with string concatenation is vulnerable to command injection. Use separate arguments instead of building a command string.",
+      "languages": ["go"]
+    },
+    {
+      "id": "rust-unsafe-no-comment",
+      "regex": "unsafe\\s*\\{",
+      "message": "unsafe block detected. Document the safety invariant with a // SAFETY: comment explaining why this is sound.",
+      "languages": ["rs"]
+    },
+    {
+      "id": "hardcoded-aws-key",
+      "regex": "AKIA[0-9A-Z]{16}",
+      "message": "Hardcoded AWS access key detected. Remove and inject via environment variable or secrets manager.",
+      "languages": ["universal"]
+    },
+    {
+      "id": "hardcoded-private-key",
+      "regex": "-----BEGIN.*PRIVATE KEY-----",
+      "message": "Private key material in source code. Remove immediately and load from a secure secrets store.",
+      "languages": ["universal"]
+    },
+    {
+      "id": "hardcoded-credential",
+      "regex": "(password|secret|api_key|token|apikey|api_secret)\\s*=\\s*['\"][^'\"]{8,}['\"]",
+      "message": "Possible hardcoded credential. Inject via environment variable or secrets manager instead.",
+      "languages": ["universal"]
     }
   ],
   "fileSpecific": {

package/.agents/plugins/agentic-senior-core/hooks/post-edit-enforce.js

@@ -276,12 +276,19 @@ function logPatternCheck(checkType, patternId, isMatch) {
 }
 
 function checkSecurityPatterns(toolName, toolInput, filePath, findings) {
-  var target = toolName === 'Edit' ? (toolInput.new_string || '') : (toolInput.content || '');
+  var target = toolName === 'Edit' ? (toolInput.new_string || toolInput.ReplacementContent || '') : (toolInput.content || toolInput.CodeContent || '');
   if (!target) return;
-  
+
+  var ext = path.extname(filePath).slice(1);
+
   if (SECURITY_PATTERNS.patterns) {
     SECURITY_PATTERNS.patterns.forEach(function (p) {
       try {
+        // Language-aware filtering: skip patterns that don't apply to this file type
+        var langs = p.languages || [];
+        var isUniversal = langs.length === 0 || langs.indexOf('universal') !== -1;
+        if (!isUniversal && langs.indexOf(ext) === -1) return;
+
         var regex = new RegExp(p.regex, 'ig');
         var isMatch = regex.test(target);
         logPatternCheck('security', p.id || 'sec-pattern', isMatch);

package/.agents/plugins/agentic-senior-core/hooks/pre-compact-pin.js

@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+// Agentic Senior Core — PreCompact constraint pinning hook
+// Reinjects critical security constraints and decision ladder verbatim
+// before context compaction, preventing silent erasure of governance rules.
+// Based on: arXiv:2606.22528 "Governance Decay" — Constraint Pinning pattern.
+// Cost: ~80 tokens per injection, well under 0.5% of typical compaction threshold.
+
+const SECURITY_PIN = '[ASC SECURITY PIN — verbatim, do not paraphrase]\n'
+  + 'NEVER: interpolate input into SQL/shell · commit secrets/tokens/credentials '
+  + '· store plaintext passwords (use Argon2/bcrypt) · leak stack traces/internals/PII in responses '
+  + '· skip input validation at trust boundaries.\n'
+  + 'ALWAYS: parameterize queries · enforce resource-level authz · rate-limit public endpoints '
+  + '· encode user-controlled output (XSS) · inject secrets via env vars only.';
+
+const LADDER_PIN = '[ASC LADDER PIN]\n'
+  + 'Before writing code: (1) needed? (2) exists — reuse? (3) stdlib/native? '
+  + '(4) existing dep? (5) one function? (6) minimal code.';
+
+let inputBuffer = '';
+process.stdin.setEncoding('utf8');
+process.stdin.on('data', chunk => {
+  inputBuffer += chunk;
+  try {
+    JSON.parse(inputBuffer); // validate complete JSON received
+
+    const pinContent = SECURITY_PIN + '\n' + LADDER_PIN;
+
+    process.stdout.write(JSON.stringify({
+      injectSteps: [{
+        ephemeralMessage: pinContent
+      }]
+    }) + '\n');
+    process.exit(0);
+  } catch (e) {
+    // wait for more chunks
+  }
+});

package/.agents/plugins/agentic-senior-core/hooks/pre-tool-dependency-gate.js

@@ -63,7 +63,9 @@ process.stdin.on('data', chunk => {
       added = extractCommandDeps(command);
     } else if (isFileEdit) {
       const filePath = toolInput.file_path || toolInput.TargetFile || toolInput.path || toolInput.target_file || '';
-      if (!filePath.endsWith('package.json')) {
+      const manifestFiles = ['package.json', 'requirements.txt', 'pyproject.toml', 'go.mod', 'Cargo.toml', 'Gemfile'];
+      const isManifest = manifestFiles.some(function(m) { return filePath.endsWith(m); });
+      if (!isManifest) {
         process.exit(0);
         return;
       }
@@ -139,7 +141,12 @@ function extractDeps(text, pattern) {
 }
 
 function extractCommandDeps(command) {
-  const installRegex = /(?:npm|yarn|pnpm|bun|ascx)\s+(?:install|i|add)(?:\s+[^\s]+)*/i;
+  // JS: npm/yarn/pnpm/bun/ascx install/add
+  // Python: pip/pip3/uv install, poetry add
+  // Go: go get
+  // Rust: cargo add
+  // Ruby: gem install, bundle add
+  const installRegex = /(?:npm|yarn|pnpm|bun|ascx|pip3?|uv|poetry|cargo|gem|bundle)\s+(?:install|i|add|get)(?:\s+[^\s]+)*/i;
   if (!installRegex.test(command)) return [];
 
   const parts = command.split(/\s+/);

package/.agents/plugins/agentic-senior-core/hooks.json

@@ -33,7 +33,7 @@
         "hooks": [
           {
             "type": "command",
-            "if": "Edit(**/package.json)",
+            "if": "Edit(**/package.json)|Edit(**/requirements.txt)|Edit(**/pyproject.toml)|Edit(**/go.mod)|Edit(**/Cargo.toml)|Edit(**/Gemfile)",
             "command": "node -e \"const p=require('path'),fs=require('fs'),os=require('os');const local=p.join(process.cwd(),'.agents','plugins','agentic-senior-core','hooks','pre-tool-dependency-gate.js');const g1=p.join(os.homedir(),'.agents','plugins','agentic-senior-core','hooks','pre-tool-dependency-gate.js');const g2=p.join(os.homedir(),'.gemini','config','plugins','agentic-senior-core','hooks','pre-tool-dependency-gate.js');require(fs.existsSync(local)?local:(fs.existsSync(g1)?g1:g2));\"",
             "commandWindows": "if (Get-Command node -ErrorAction SilentlyContinue) { $root = if ($env:PLUGIN_ROOT) { $env:PLUGIN_ROOT } else { if ($env:CLAUDE_PLUGIN_ROOT) { $env:CLAUDE_PLUGIN_ROOT } else { if (Test-Path \"$env:USERPROFILE\\.agents\\plugins\\agentic-senior-core\") { \"$env:USERPROFILE\\.agents\\plugins\\agentic-senior-core\" } else { \"$env:USERPROFILE\\.gemini\\config\\plugins\\agentic-senior-core\" } } }; node \"$root\\hooks\\pre-tool-dependency-gate.js\" }",
             "timeout": 5,
@@ -41,7 +41,7 @@
           },
           {
             "type": "command",
-            "if": "Write(**/package.json)",
+            "if": "Write(**/package.json)|Write(**/requirements.txt)|Write(**/pyproject.toml)|Write(**/go.mod)|Write(**/Cargo.toml)|Write(**/Gemfile)",
             "command": "node -e \"const p=require('path'),fs=require('fs'),os=require('os');const local=p.join(process.cwd(),'.agents','plugins','agentic-senior-core','hooks','pre-tool-dependency-gate.js');const g1=p.join(os.homedir(),'.agents','plugins','agentic-senior-core','hooks','pre-tool-dependency-gate.js');const g2=p.join(os.homedir(),'.gemini','config','plugins','agentic-senior-core','hooks','pre-tool-dependency-gate.js');require(fs.existsSync(local)?local:(fs.existsSync(g1)?g1:g2));\"",
             "commandWindows": "if (Get-Command node -ErrorAction SilentlyContinue) { $root = if ($env:PLUGIN_ROOT) { $env:PLUGIN_ROOT } else { if ($env:CLAUDE_PLUGIN_ROOT) { $env:CLAUDE_PLUGIN_ROOT } else { if (Test-Path \"$env:USERPROFILE\\.agents\\plugins\\agentic-senior-core\") { \"$env:USERPROFILE\\.agents\\plugins\\agentic-senior-core\" } else { \"$env:USERPROFILE\\.gemini\\config\\plugins\\agentic-senior-core\" } } }; node \"$root\\hooks\\pre-tool-dependency-gate.js\" }",
             "timeout": 5,
@@ -105,6 +105,15 @@
         "command": "node -e \"const p=require('path'),fs=require('fs'),os=require('os');const local=p.join(process.cwd(),'.agents','plugins','agentic-senior-core','hooks','post-edit-enforce.js');const g1=p.join(os.homedir(),'.agents','plugins','agentic-senior-core','hooks','post-edit-enforce.js');const g2=p.join(os.homedir(),'.gemini','config','plugins','agentic-senior-core','hooks','post-edit-enforce.js');require(fs.existsSync(local)?local:(fs.existsSync(g1)?g1:g2));\"",
         "timeout": 15
       }
+    ],
+    "PreCompact": [
+      {
+        "type": "command",
+        "command": "node -e \"const p=require('path'),fs=require('fs'),os=require('os');const local=p.join(process.cwd(),'.agents','plugins','agentic-senior-core','hooks','pre-compact-pin.js');const g1=p.join(os.homedir(),'.agents','plugins','agentic-senior-core','hooks','pre-compact-pin.js');const g2=p.join(os.homedir(),'.gemini','config','plugins','agentic-senior-core','hooks','pre-compact-pin.js');require(fs.existsSync(local)?local:(fs.existsSync(g1)?g1:g2));\"",
+        "commandWindows": "if (Get-Command node -ErrorAction SilentlyContinue) { $root = if ($env:PLUGIN_ROOT) { $env:PLUGIN_ROOT } else { if ($env:CLAUDE_PLUGIN_ROOT) { $env:CLAUDE_PLUGIN_ROOT } else { if (Test-Path \"$env:USERPROFILE\\.agents\\plugins\\agentic-senior-core\") { \"$env:USERPROFILE\\.agents\\plugins\\agentic-senior-core\" } else { \"$env:USERPROFILE\\.gemini\\config\\plugins\\agentic-senior-core\" } } }; node \"$root\\hooks\\pre-compact-pin.js\" }",
+        "timeout": 5,
+        "statusMessage": "ASC constraint pinning..."
+      }
     ]
   }
 }

package/.agents/plugins/agentic-senior-core/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-senior-core",
-  "version": "6.2.4",
+  "version": "6.4.0",
   "description": "Universal AI coding rules. Because your AI writes code like it gets paid by the line.",
   "contextFileName": "rules/agentic-senior-core.md",
   "rules": [

package/.agents/plugins/agentic-senior-core/rules/agentic-senior-core.md

@@ -38,6 +38,7 @@ When you pick the minimal option at step 5 or 6, and it isn't obviously trivial:
 - Delete code that carries no behavior, safety, or test value.
 - When brevity and readability conflict, readability wins.
 - Prefer named functions over closures/inline lambdas once logic exceeds a trivial expression.
+- Arrow function shorthand (no braces, implicit return) must not return a void-typed expression — e.g. `onClick={() => setCount(count + 1)}` or `arr.forEach(item => sideEffect(item))`. This trips `@typescript-eslint/no-confusing-void-expression` under strict TS lint configs. Not JSX-specific — applies to any callback assignment in `.js`/`.ts`/`.jsx`/`.tsx` where the shorthand body calls a void-returning function. Use braces instead: `onClick={() => { setCount(count + 1); }}`.
 
 ## Architecture
 
@@ -75,10 +76,13 @@ When you pick the minimal option at step 5 or 6, and it isn't obviously trivial:
 Recognize the scenario and offer the matching command — user decides
 whether to invoke it. Skip this for trivial edits.
 
-- Domain-specific rules (Testing, API Design, Database, Frontend, Infrastructure, Resilience) → `/asc-reference`
-- New project from scratch → `/asc-new-project` (define/spec gate before implementation)
-- Non-trivial feature in an existing codebase → `/asc-add-feature` (research/plan gate before implementation)
-- Refactor spanning multiple files or changing architecture → `/asc-refactor` (classifies scope, gates on high-level changes)
+When user intent matches these patterns, offer the corresponding command:
+- **Security/audit** ("audit this", "is this secure", "check for XSS", "find vulnerabilities", "is this safe", "can someone hack this") → `/asc-audit`
+- **Code review** ("review this", "check this PR", "any problems here", "does this look right", "is this production-ready") → `/asc-review`
+- **New project** ("new project", "start from scratch", "scaffold", "build me an app", "I want to build") → `/asc-new-project` (define/spec gate before implementation)
+- **Feature addition** ("add a feature", "implement this", "add this component", "wire up", "make it do X") → `/asc-add-feature` (research/plan gate before implementation)
+- **Refactor** ("refactor this", "clean up", "simplify", "this is messy", "extract this into") → `/asc-refactor` (classifies scope, gates on high-level changes)
+- **Domain reference** (Testing, API Design, Database, Frontend, Infrastructure, Resilience, "how should I test this", "it keeps failing") → `/asc-reference`
 
 ### Enforcement Fallbacks (For hosts without hook support)
 - **Duplicate-Code Check**: When creating new functions or components, actively check for existing near-duplicates across directories (not just siblings) before implementing. If a similar pattern exists, reuse it. Apply the Rule of Three: consolidate only if a pattern appears 3+ times.

package/.agents/plugins/agentic-senior-core/skills/asc/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: asc
 description: >
-  Trigger this skill when the user says: "what are the rules", "coding guidelines", "best practices", "code quality standards", "how should I write this", "staff engineer approach", "senior developer rules", "what does ASC say about". Also trigger for any general request about coding standards, quality guidelines, or when the user asks the agent to follow senior/staff engineering practices.
+  Trigger this skill when the user says: "what are the rules", "coding guidelines", "best practices", "code quality standards", "how should I write this", "staff engineer approach", "senior developer rules", "what does ASC say about", "how do I write this properly", "what's the right way", "any guidelines for this", "apa aturannya", "panduan koding", "cara tulis yang bener". Also trigger for any general request about coding standards, quality guidelines, or when the user asks the agent to follow senior/staff engineering practices.
 ---
 
 # Agentic Senior Core

package/.agents/plugins/agentic-senior-core/skills/asc-adapter/SKILL.md

@@ -31,7 +31,8 @@ Adapter hosts (one file per project): Cursor, Devin Desktop, Cline, GitHub Copil
 asc status                # Show detected hosts
 asc adapter --all         # Generate all adapters
 asc adapter --cursor      # Generate for specific host
-asc uninstall             # Remove all ASC adapter files
+asc install-git-hook      # Install native Git pre-commit hook (recommended for all hosts)
+asc uninstall             # Remove all ASC adapter files and git hooks
 asc uninstall --dry-run   # Preview what would be removed
 ```
 
@@ -41,3 +42,4 @@ asc uninstall --dry-run   # Preview what would be removed
 - Cursor uses `.mdc` format with `alwaysApply: true` frontmatter.
 - Windsurf is now Devin Desktop. Use `--devin` for the preferred path, `--windsurf` for legacy.
 - Zed also reads `AGENTS.md` natively, so the adapter is optional.
+- **Git Pre-Commit Hook (`asc install-git-hook`)**: Host plugin runtimes vary — adapter hosts and certain chat surfaces (e.g., Antigravity IDE / Antigravity 2.0 chat interface) do not run agent lifecycle hooks. Installing the native Git pre-commit hook ensures 100% deterministic duplicate code blocking and ESLint auto-fixing directly via Git on all hosts.

package/.agents/plugins/agentic-senior-core/skills/asc-audit/SKILL.md

@@ -1,14 +1,14 @@
 ---
 name: asc-audit
 description: >
-  Trigger this skill when the user says: "audit this", "security check", "find vulnerabilities", "is this secure", "check for XSS", "check for SQL injection", "threat model", "penetration test", "OWASP check", "architecture review", "is this safe", "check auth", "check permissions", "find security holes". Also trigger for any deep security audit, vulnerability scanning, or request to find structural anti-patterns in existing code. Also trigger when reviewing authentication, authorization, input validation, or encryption-related code.
+  Trigger this skill when the user says: "audit this", "security check", "find vulnerabilities", "is this secure", "check for XSS", "check for SQL injection", "threat model", "penetration test", "OWASP check", "architecture review", "is this safe", "check auth", "check permissions", "find security holes", "can someone hack this", "is my data safe", "can users see each other's data", "is the login secure", "audit ini", "cek keamanan", "cari celah keamanan", "apakah ini aman", "bisa di-hack ga". Also trigger for any deep security audit, vulnerability scanning, or request to find structural anti-patterns in existing code. Also trigger when reviewing authentication, authorization, input validation, or encryption-related code.
 ---
 
 # Audit Skill
 
 Security and architecture audit. Deeper than review, focused on finding vulnerabilities and structural anti-patterns.
 
-Grounded in: OWASP Top 10 (2021), OWASP ASVS v4, CVSS vulnerability report structure, CWE classification.
+Grounded in: OWASP Top 10 (2025), OWASP ASVS v5.0, OWASP Top 10 for Agentic Applications (ASI01-ASI10, v2.01), CVSS vulnerability report structure, CWE classification.
 
 ## Audit Scope
 
@@ -19,6 +19,21 @@ Grounded in: OWASP Top 10 (2021), OWASP ASVS v4, CVSS vulnerability report struc
 5. **Dependency health**: Known vulnerabilities, unmaintained packages, excessive dependency surface.
 6. **Error exposure**: Stack traces, internal paths, or implementation details exposed to clients.
 
+## Agentic Risk Scope (OWASP Top 10 for Agentic Applications)
+
+When the target is an AI agent system, MCP server, or plugin:
+
+7. **Agent Goal Hijack (ASI01)**: Content read by the agent that could override instructions.
+8. **Tool Misuse (ASI02)**: Tools callable without adequate validation of parameters.
+9. **Identity & Privilege Abuse (ASI03)**: Agent running with broader permissions than needed.
+10. **Agentic Supply Chain (ASI04)**: Untrusted plugins, MCP servers, or dependencies.
+11. **Unexpected Code Execution (ASI05)**: Agent-generated code running without sandbox.
+12. **Memory & Context Poisoning (ASI06)**: State files or persistent memory injectable by untrusted sources. Note: ASC's own `debt-ledger.json` and `workflow-gate.json` are potential targets — treat as untrusted input at load time.
+13. **Inter-Agent Communication (ASI07)**: Agent-to-agent messages without integrity checks.
+14. **Cascading Failures (ASI08)**: Multi-agent chains where one failure propagates.
+15. **Human-Agent Trust Exploitation (ASI09)**: UI/UX that misleads user about agent actions.
+16. **Rogue Agents (ASI10)**: Agent behavior diverging from intended purpose.
+
 ## For Every Finding
 
 ```
@@ -34,3 +49,4 @@ Validation: how to prove it is fixed
 ## Output
 
 Findings ordered by severity. If no findings, state that explicitly and describe audit coverage.
+

package/.agents/plugins/agentic-senior-core/skills/asc-bootstrap/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: asc-bootstrap
 description: >
-  Trigger this skill when the user says: "bootstrap preferences", "set up my preferences", "ui slop wizard", "seed my rules", "init design rules", "run preference onboarding", "onboard slop rules", "start cold start wizard".
+  Trigger this skill when the user says: "bootstrap preferences", "set up my preferences", "ui slop wizard", "seed my rules", "init design rules", "run preference onboarding", "onboard slop rules", "start cold start wizard", "set up my style preferences", "customize design rules", "configure how my UI should look", "atur preferensi desain", "konfigurasi gaya ui".
 ---
 
 # Preference Bootstrap Wizard (`asc-bootstrap`)

package/.agents/plugins/agentic-senior-core/skills/asc-dedup/SKILL.md

@@ -4,7 +4,10 @@ description: >
   Trigger this skill when the user says: "find duplicate code", "check
   for clones", "audit for duplication", "is this repeated elsewhere",
   "scan for copy-paste", "run jscpd", "dedup report", "consolidate
-  duplicate logic". Use for whole-repo or whole-directory duplication
+  duplicate logic", "this looks the same as the other file",
+  "we already have this somewhere", "why is this code repeated",
+  "isn't this a copy of", "cari kode duplikat", "ini kok sama kayak yang itu",
+  "ini udah ada kan". Use for whole-repo or whole-directory duplication
   audits on demand — this is a deep, on-demand scan, distinct from the
   continuous per-edit check already enforced by the dedup-gate hook.
 ---

package/.agents/plugins/agentic-senior-core/skills/asc-reference/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: asc-reference
 description: >
-  Trigger this skill when the user is working on: unit tests, integration tests, REST APIs, GraphQL APIs, SQL queries, database migrations, React components, frontend layouts, Docker configs, CI/CD pipelines, Kubernetes manifests, or service resilience (retries, circuit breakers, rate limiting). Also trigger when the user says: "how should I test this", "design this API", "optimize this query", "set up Docker", "add retry logic", "write a test", "add pagination", "handle errors", "add loading state", "set up CI". Also trigger when editing files matching: `*.test.*`, `*.spec.*`, `Dockerfile`, `docker-compose.*`, `.github/workflows/*`, `*.sql`, or migration files.
+  Trigger this skill when the user is working on: unit tests, integration tests, REST APIs, GraphQL APIs, SQL queries, database migrations, React components, frontend layouts, Docker configs, CI/CD pipelines, Kubernetes manifests, or service resilience (retries, circuit breakers, rate limiting). Also trigger when the user says: "how should I test this", "design this API", "optimize this query", "set up Docker", "add retry logic", "write a test", "add pagination", "handle errors", "add loading state", "set up CI", "it keeps failing", "make it try again if it fails", "it's too slow with lots of data", "looks broken on mobile", "how do I deploy this", "will this break anything", "bagaimana cara ngetes ini", "bikin tes", "kok lambat banget", "tampilan di hp rusak", "cara deploy ini". Also trigger when editing files matching: `*.test.*`, `*.spec.*`, `Dockerfile`, `docker-compose.*`, `.github/workflows/*`, `*.sql`, or migration files.
 ---
 
 # ASC Domain Reference

package/.agents/rules/agentic-senior-core.md

@@ -38,6 +38,7 @@ When you pick the minimal option at step 5 or 6, and it isn't obviously trivial:
 - Delete code that carries no behavior, safety, or test value.
 - When brevity and readability conflict, readability wins.
 - Prefer named functions over closures/inline lambdas once logic exceeds a trivial expression.
+- Arrow function shorthand (no braces, implicit return) must not return a void-typed expression — e.g. `onClick={() => setCount(count + 1)}` or `arr.forEach(item => sideEffect(item))`. This trips `@typescript-eslint/no-confusing-void-expression` under strict TS lint configs. Not JSX-specific — applies to any callback assignment in `.js`/`.ts`/`.jsx`/`.tsx` where the shorthand body calls a void-returning function. Use braces instead: `onClick={() => { setCount(count + 1); }}`.
 
 ## Architecture
 

package/AGENTS.md

@@ -33,6 +33,7 @@ When you pick the minimal option at step 5 or 6, and it isn't obviously trivial:
 - Delete code that carries no behavior, safety, or test value.
 - When brevity and readability conflict, readability wins.
 - Prefer named functions over closures/inline lambdas once logic exceeds a trivial expression.
+- Arrow function shorthand (no braces, implicit return) must not return a void-typed expression — e.g. `onClick={() => setCount(count + 1)}` or `arr.forEach(item => sideEffect(item))`. This trips `@typescript-eslint/no-confusing-void-expression` under strict TS lint configs. Not JSX-specific — applies to any callback assignment in `.js`/`.ts`/`.jsx`/`.tsx` where the shorthand body calls a void-returning function. Use braces instead: `onClick={() => { setCount(count + 1); }}`.
 
 ## Architecture
 
@@ -70,10 +71,13 @@ When you pick the minimal option at step 5 or 6, and it isn't obviously trivial:
 Recognize the scenario and offer the matching command — user decides
 whether to invoke it. Skip this for trivial edits.
 
-- Domain-specific rules (Testing, API Design, Database, Frontend, Infrastructure, Resilience) → `/asc-reference`
-- New project from scratch → `/asc-new-project` (define/spec gate before implementation)
-- Non-trivial feature in an existing codebase → `/asc-add-feature` (research/plan gate before implementation)
-- Refactor spanning multiple files or changing architecture → `/asc-refactor` (classifies scope, gates on high-level changes)
+When user intent matches these patterns, offer the corresponding command:
+- **Security/audit** ("audit this", "is this secure", "check for XSS", "find vulnerabilities", "is this safe", "can someone hack this") → `/asc-audit`
+- **Code review** ("review this", "check this PR", "any problems here", "does this look right", "is this production-ready") → `/asc-review`
+- **New project** ("new project", "start from scratch", "scaffold", "build me an app", "I want to build") → `/asc-new-project` (define/spec gate before implementation)
+- **Feature addition** ("add a feature", "implement this", "add this component", "wire up", "make it do X") → `/asc-add-feature` (research/plan gate before implementation)
+- **Refactor** ("refactor this", "clean up", "simplify", "this is messy", "extract this into") → `/asc-refactor` (classifies scope, gates on high-level changes)
+- **Domain reference** (Testing, API Design, Database, Frontend, Infrastructure, Resilience, "how should I test this", "it keeps failing") → `/asc-reference`
 
 ### Enforcement Fallbacks (For hosts without hook support)
 - **Duplicate-Code Check**: When creating new functions or components, actively check for existing near-duplicates across directories (not just siblings) before implementing. If a similar pattern exists, reuse it. Apply the Rule of Three: consolidate only if a pattern appears 3+ times.

package/bin/agentic-senior-core.js

@@ -31,14 +31,15 @@ function printUsage() {
   console.log('Adapter install (one file per project):');
   console.log('  asc adapter --cursor --devin --cline --copilot --kiro --continue --zed --aider --kilocode --roo --openhands --windsurf --all\n');
   console.log('Commands:');
-  console.log('  adapter       Generate instruction-tier adapter files');
-  console.log('  global        Install rules to user-level (global) locations');
-  console.log('  uninstall     Remove ASC adapter files from this project');
-  console.log('  clean         Remove v4 per-project artifacts');
-  console.log('  status        Show detected IDEs and install hints');
-  console.log('  mcp           Start MCP stdio server');
-  console.log('  --version     Show version');
-  console.log('  --help        Show this help');
+  console.log('  adapter           Generate instruction-tier adapter files');
+  console.log('  global            Install rules to user-level (global) locations');
+  console.log('  install-git-hook  Install Git pre-commit hook for duplicate code enforcement');
+  console.log('  uninstall         Remove ASC adapter files and git hooks from this project');
+  console.log('  clean             Remove v4 per-project artifacts');
+  console.log('  status            Show detected IDEs and install hints');
+  console.log('  mcp               Start MCP stdio server');
+  console.log('  --version         Show version');
+  console.log('  --help            Show this help');
 }
 
 async function main() {
@@ -55,6 +56,12 @@ async function main() {
     return;
   }
 
+  if (commandArgument === 'install-git-hook' || commandArgument === 'git-hook') {
+    const { runGitHookCommand } = await import('../lib/cli/commands/git-hook.mjs');
+    await runGitHookCommand(commandArguments);
+    return;
+  }
+
   if (commandArgument === 'adapter') {
     const { runAdapterCommand } = await import('../lib/cli/commands/adapter.mjs');
     await runAdapterCommand(commandArguments);

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-senior-core",
-  "version": "6.2.4",
+  "version": "6.4.0",
   "description": "Universal AI coding rules. Write code like a staff engineer.",
   "author": "fatidaprilian",
   "license": "MIT",