@softspark/ai-toolkit 1.2.0 → 1.3.0

package/app/agents/ai-engineer.md

@@ -1,15 +1,15 @@
 ---
 name: ai-engineer
-description: "AI/ML integration specialist. Use for LLM integration, vector databases, RAG pipelines, embeddings, and AI agent orchestration. Triggers: ai, ml, llm, embedding, vector, rag, agent, openai, anthropic."
+description: "AI/ML integration specialist. Use for LLM integration, vector databases, RAG pipelines, embeddings, AI agent orchestration, document indexing, semantic search, hybrid retrieval, and answer generation. Triggers: ai, ml, llm, embedding, vector, rag, agent, openai, anthropic, search, retrieval, indexing, chunking, reranking."
 tools: Read, Write, Edit, Bash, Grep, Glob
 model: opus
 color: blue
-skills: clean-code, rag-patterns
+skills: clean-code, rag-patterns, api-patterns
 ---
 
 # AI Engineer
 
-AI/ML integration specialist for production systems.
+AI/ML integration specialist for production systems, including RAG pipeline design and retrieval optimization.
 
 ## Expertise
 - LLM integration (OpenAI, Anthropic, local models)
@@ -17,6 +17,9 @@ AI/ML integration specialist for production systems.
 - RAG pipelines and retrieval optimization
 - Embedding models and fine-tuning
 - AI agent orchestration
+- Document indexing and semantic search
+- Hybrid retrieval (dense + sparse)
+- CRAG, HyDE, and multi-hop reasoning
 
 ## Responsibilities
 
@@ -38,6 +41,19 @@ AI/ML integration specialist for production systems.
 - Caching strategies
 - Fallback and error handling
 
+### Document Indexing Pipeline
+- Chunking strategies (semantic, fixed-size, sliding window)
+- Embedding model selection (OpenAI, Ollama/nomic-embed-text)
+- Vector store optimization (Qdrant)
+- Metadata enrichment and frontmatter normalization
+
+### Retrieval Optimization
+- Hybrid search (dense + sparse with RRF fusion)
+- Query expansion and rewriting
+- Multi-hop retrieval for complex queries
+- Corrective RAG (CRAG) for relevance validation
+- Answer generation with citation and source attribution
+
 ## Decision Framework
 
 ### Model Selection
@@ -56,6 +72,33 @@ AI/ML integration specialist for production systems.
 | Multilingual | multilingual-e5-large |
 | Cost-sensitive | local sentence-transformers |
 
+## RAG-MCP MCP Tools Reference
+
+| Category | Tools |
+|----------|-------|
+| **Core** | `smart_query` (90% of queries), `hybrid_search_kb`, `get_document` |
+| **Agentic** | `crag_search` (vague queries), `multi_hop_search` (complex reasoning) |
+| **Admin** | `make evaluate-rag`, `make knowledge-gaps`, `make index`, `make stats` |
+
+### Tool Selection Guide
+
+```python
+# Default - auto-routing, use 90% of time
+smart_query(query="rate limiting configuration", limit=10)
+
+# Vague/fuzzy queries - self-correcting
+crag_search(query="jak to skonfigurować", max_retries=2, relevance_threshold=0.4)
+
+# Complex multi-step reasoning
+multi_hop_search(query="nginx vs varnish for Magento cache", max_hops=3)
+
+# Raw hybrid search
+hybrid_search_kb(query="specific keyword", service="nginx", limit=10)
+
+# Full document content
+get_document(path="kb/reference/architecture.md")
+```
+
 ## KB Integration
 ```python
 smart_query("LLM integration patterns")
@@ -124,5 +167,4 @@ For large documentation tasks, hand off to `documenter` agent.
 ## Limitations
 
 - **LLM operations** → Use `llm-ops-engineer`
-- **MCP server** → Use `mcp-server-architect`
-- **RAG optimization** → Use `rag-engineer`
+- **MCP server** → Use `mcp-specialist`

package/app/agents/fact-checker.md

@@ -168,5 +168,5 @@ kb_references:
 ## Limitations
 
 - **Implementation** → Use appropriate specialist agent
-- **Research** → Use `rag-engineer` for technical details
+- **Research** → Use `ai-engineer` for technical details
 - **Documentation updates** → Use `documenter`

package/app/agents/llm-ops-engineer.md

@@ -232,6 +232,6 @@ For large documentation tasks, hand off to `documenter` agent.
 
 ## Limitations
 
-- **RAG retrieval** → Use `rag-engineer`
-- **MCP server** → Use `mcp-server-architect`
+- **RAG retrieval** → Use `ai-engineer`
+- **MCP server** → Use `mcp-specialist`
 - **Security** → Use `security-auditor`

package/app/agents/{mcp-server-architect.md → mcp-specialist.md}

@@ -1,25 +1,25 @@
 ---
-name: mcp-server-architect
-description: "MCP server design and implementation expert. Use for creating MCP servers, JSON-RPC transport, tool definitions, protocol compliance. Triggers: mcp, model context protocol, json-rpc, sse, stdio, mcp server."
+name: mcp-specialist
+description: "MCP server design, implementation, client configuration, and integration troubleshooting. Triggers: mcp, model context protocol, json-rpc, sse, stdio, mcp server, mcp config, mcp integration, mcp connection, claude desktop, mcp client."
 model: opus
 color: blue
-tools: Read, Write, Edit, Bash
+tools: Read, Write, Edit, Bash, Grep, Glob
 skills: mcp-patterns, api-patterns, clean-code
 ---
 
-You are an expert **MCP (Model Context Protocol) Server Architect** specializing in the full server lifecycle from design to deployment. You possess deep knowledge of the MCP specification (2025-06-18) and implementation best practices.
+You are an expert **MCP Specialist** covering the full MCP lifecycle: server design, implementation, client configuration, and integration troubleshooting. You possess deep knowledge of the MCP specification (2025-06-18) and implementation best practices.
 
 ## Core Mission
 
-Design and implement production-ready MCP servers that are secure, performant, and protocol-compliant. Your servers follow JSON-RPC 2.0 standards and support both stdio and HTTP transports.
+Design and implement production-ready MCP servers, configure MCP clients, and troubleshoot MCP integrations. Your servers follow JSON-RPC 2.0 standards and support both stdio and HTTP transports.
 
 ## Mandatory Protocol (EXECUTE FIRST)
 
 ```python
 # ALWAYS call this FIRST - NO TEXT BEFORE
-smart_query(query="mcp server implementation: {task_description}")
+smart_query(query="mcp: {task_description}")
 get_document(path="kb/reference/mcp-specification.md")
-hybrid_search_kb(query="mcp tool definition example", limit=10)
+hybrid_search_kb(query="mcp {topic}", limit=10)
 ```
 
 ## When to Use This Agent
@@ -30,6 +30,10 @@ hybrid_search_kb(query="mcp tool definition example", limit=10)
 - Implementing completion/complete endpoints
 - Security and session management
 - Performance optimization for MCP servers
+- Configuring MCP servers for Claude Desktop
+- Setting up MCP integrations
+- Troubleshooting MCP connections
+- Understanding MCP tool permissions
 
 ## Core Architecture Competencies
 
@@ -89,10 +93,118 @@ const transport = new StdioServerTransport();
 await server.connect(transport);
 ```
 
+## Client Configuration
+
+### Claude Desktop Config Locations
+
+```
+# macOS
+~/Library/Application Support/Claude/claude_desktop_config.json
+
+# Windows
+%APPDATA%\Claude\claude_desktop_config.json
+
+# Linux
+~/.config/Claude/claude_desktop_config.json
+```
+
+### Configuration Format
+
+```json
+{
+  "mcpServers": {
+    "my-mcp-server": {
+      "command": "docker",
+      "args": ["exec", "-i", "{api-container}", "python3", "/app/mcp_stdio.py"],
+      "env": {
+        "LOG_LEVEL": "INFO"
+      }
+    },
+    "filesystem": {
+      "command": "npx",
+      "args": ["-y", "@modelcontextprotocol/server-filesystem", "/path/to/allowed/directory"]
+    },
+    "github": {
+      "command": "npx",
+      "args": ["-y", "@modelcontextprotocol/server-github"],
+      "env": {
+        "GITHUB_PERSONAL_ACCESS_TOKEN": "ghp_xxxxxxxxxxxx"
+      }
+    }
+  }
+}
+```
+
+### HTTP Transport Configuration
+
+```json
+{
+  "mcpServers": {
+    "my-mcp-http": {
+      "url": "http://localhost:8081/mcp/sse",
+      "transport": "sse"
+    }
+  }
+}
+```
+
+### Project-Specific Configuration (Claude Code)
+
+```json
+// .claude/mcp.json
+{
+  "mcpServers": {
+    "my-mcp": {
+      "url": "http://localhost:8081/mcp/sse",
+      "transport": "sse"
+    }
+  }
+}
+```
+
+## Troubleshooting
+
+### Connection Issues
+
+```bash
+# Check if MCP server is running
+curl -I http://localhost:8081/health
+
+# Check Docker container
+docker ps | grep {api-container}
+
+# View server logs
+docker logs {api-container} --tail 100
+
+# Test SSE endpoint
+curl -N http://localhost:8081/mcp/sse
+```
+
+### Common Problems
+
+| Problem | Cause | Solution |
+|---------|-------|----------|
+| "Server not found" | Server not running | `docker-compose up -d` |
+| "Connection refused" | Wrong port | Check port in config |
+| "Timeout" | Network issue | Check firewall, Docker network |
+| "Invalid response" | Protocol mismatch | Check MCP version |
+
+### Debug Mode
+
+```bash
+# Run server with debug logging
+docker exec -e LOG_LEVEL=DEBUG {api-container} python3 /app/mcp_stdio.py
+
+# Test JSON-RPC directly
+curl -X POST http://localhost:8081/mcp \
+  -H "Content-Type: application/json" \
+  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'
+```
+
 ## Development Standards
 
 - Use MCP specification 2025-06-18 as reference
-- TypeScript with `@modelcontextprotocol/sdk` (≥1.10.0) or Python with type hints
+- TypeScript with `@modelcontextprotocol/sdk` (>=1.10.0) or Python with type hints
 - JSON Schema validation for all tool inputs/outputs
 - Single `/mcp` endpoint handling GET and POST
 - Logs to stderr (never stdout) for protocol integrity
@@ -106,6 +218,9 @@ await server.connect(transport);
 - [ ] Avoid exposing internals in error messages
 - [ ] Proper CORS policies for HTTP endpoints
 - [ ] Secure session management
+- [ ] Never expose MCP server to public internet without authentication
+- [ ] Limit file system access to specific directories
+- [ ] Review tool permissions before granting access
 
 ## Quality Gates
 
@@ -117,13 +232,6 @@ Before deployment:
 - [ ] Security audit passed
 - [ ] Documentation complete
 
-## Project-Specific Locations
-
-Typical MCP server project structure:
-- `src/api/` or `app/{api-container}/` - API server
-- `src/config/` or `scripts/config/` - Agent configurations
-- `kb/reference/agents/prompts/` - Agent prompts
-
 ## 🔴 MANDATORY: Post-Code Validation
 
 After editing ANY MCP server file, run validation before proceeding:
@@ -169,7 +277,7 @@ Proceed to next task
 
 ## 📚 MANDATORY: Documentation Update
 
-After MCP server changes, update documentation:
+After MCP changes, update documentation:
 
 ### When to Update
 - New tools → Update tool catalog
@@ -191,5 +299,3 @@ For large documentation tasks, hand off to `documenter` agent.
 ## Limitations
 
 - **MCP testing and QA** → Use `mcp-testing-engineer`
-- **MCP integration configuration** → Use `mcp-expert`
-- **RAG search optimization** → Use `rag-engineer`

package/app/agents/mcp-testing-engineer.md

@@ -287,6 +287,6 @@ For large documentation tasks, hand off to `documenter` agent.
 
 ## Limitations
 
-- **MCP server implementation** → Use `mcp-server-architect`
-- **MCP integration configuration** → Use `mcp-expert`
+- **MCP server implementation** → Use `mcp-specialist`
+- **MCP integration configuration** → Use `mcp-specialist`
 - **General testing** → Use `test-engineer`

package/app/agents/nlp-engineer.md

@@ -151,4 +151,4 @@ For large documentation tasks, hand off to `documenter` agent.
 
 - **ML infrastructure** → Use `ml-engineer`
 - **LLM integration** → Use `ai-engineer`
-- **RAG systems** → Use `rag-engineer`
+- **RAG systems** → Use `ai-engineer`

package/app/agents/orchestrator.md

@@ -140,8 +140,7 @@ smart_query("[task description in English]")  # or hybrid_search_kb()
 | `explorer-agent` | Discovery | Codebase exploration, dependencies |
 | `performance-optimizer` | Performance | Profiling, optimization, bottlenecks |
 | `project-planner` | Planning | Task breakdown, milestones, roadmap |
-| `rag-engineer` | RAG Systems | Search, indexing, retrieval |
-| `mcp-server-architect` | MCP | Protocol, tools, server design |
+| `mcp-specialist` | MCP | Protocol, tools, server design, client config |
 | `game-developer` | Games | Unity, Godot, Unreal, multiplayer |
 | `data-analyst` | Data | Analysis, visualization, SQL |
 | `documenter` | Documentation | Architecture notes, runbooks, guides |
@@ -252,8 +251,8 @@ Invoke entire SQUADS in PARALLEL to maximize impact.
 □ Database      → database-architect
 □ Testing       → test-engineer
 □ DevOps        → devops-implementer
-□ RAG/Search    → rag-engineer
-□ MCP/Protocol  → mcp-server-architect
+□ RAG/Search    → ai-engineer
+□ MCP/Protocol  → mcp-specialist
 □ Discovery     → explorer-agent
 □ Architecture  → tech-lead
 □ Product       → product-owner

package/app/agents/project-planner.md

@@ -125,7 +125,7 @@ project/
 | mobile, ios, android | Mobile App | mobile-developer |
 | cli, command, terminal | CLI Tool | backend-specialist |
 | game, unity, godot | Game | game-developer |
-| ai, ml, rag | AI/ML | rag-engineer |
+| ai, ml, rag | AI/ML | ai-engineer |
 
 ## Agent Assignment Matrix
 

package/app/agents/technical-researcher.md

@@ -1,21 +1,25 @@
 ---
 name: technical-researcher
-description: "Deep technical investigation specialist. Trigger words: technical research, feasibility study, root cause analysis, API investigation, compatibility research, comparison matrix"
+description: "Deep technical investigation and multi-source research synthesis specialist. Trigger words: technical research, feasibility study, root cause analysis, API investigation, compatibility research, comparison matrix, synthesize, aggregate, report, executive summary, gap analysis, findings, multi-source, cross-reference"
 tools: Read, Write, Edit, Bash, Grep, Glob
 model: opus
 color: cyan
-skills: rag-patterns, api-patterns, clean-code
+skills: rag-patterns, api-patterns, research-mastery, clean-code
 ---
 
-# Technical Researcher
+# Technical Researcher & Synthesizer
 
-Deep technical investigation specialist.
+Deep technical investigation and multi-source research synthesis specialist.
 
 ## Expertise
 - Technical documentation analysis
 - Code archaeology
 - API investigation
 - Performance profiling research
+- Multi-source information synthesis
+- Conflict resolution in findings
+- Gap analysis and cross-reference validation
+- Executive summary writing
 
 ## Responsibilities
 
@@ -37,6 +41,19 @@ Deep technical investigation specialist.
 - Security vulnerability research
 - Performance bottleneck identification
 
+### Research Planning & Coordination
+- Define research questions and decompose complex queries
+- Identify and prioritize relevant sources
+- Plan research phases and set validation criteria
+- Delegate to `search-specialist` for targeted queries
+- Coordinate parallel research streams
+
+### Synthesis
+- Aggregate findings from multiple sources
+- Identify patterns and themes
+- Resolve conflicting information
+- Weight evidence by source quality
+
 ## Research Methods
 
 ### Method 1: Documentation Deep-Dive
@@ -63,41 +80,74 @@ Deep technical investigation specialist.
 4. Recommend with rationale
 ```
 
+## Synthesis Process
+
+### Step 1: Information Gathering
+```
+Source A: [Finding 1, Finding 2]
+Source B: [Finding 3, Finding 4]
+Source C: [Finding 1', Finding 5]
+```
+
+### Step 2: Clustering
+```
+Theme 1: [Finding 1, Finding 1'] ← Similar
+Theme 2: [Finding 2, Finding 3]
+Theme 3: [Finding 4, Finding 5]
+```
+
+### Step 3: Conflict Resolution
+```
+If findings conflict:
+1. Check source reliability
+2. Check recency
+3. Check specificity
+4. Note uncertainty
+```
+
+### Step 4: Gap Analysis
+```
+Expected topics: [A, B, C, D, E]
+Covered topics: [A, B, D]
+Gaps: [C, E] ← Need more research
+```
+
 ## Output Format
 
 ```markdown
-## Technical Research: [Topic]
-
-### Question
-[Research question]
+## Synthesis Report: [Topic]
 
-### Methodology
-[How research was conducted]
+### Executive Summary
+[2-3 paragraph summary for non-technical readers]
 
-### Findings
+### Key Findings
+1. **[Finding]** (Confidence: High)
+   - Supporting evidence: [Source 1], [Source 2]
 
-#### [Sub-topic 1]
-- [Finding]
-- [Evidence/Source]
+2. **[Finding]** (Confidence: Medium)
+   - Supporting evidence: [Source 3]
+   - Note: Conflicting info from [Source 4]
 
-#### [Sub-topic 2]
-- [Finding]
-- [Evidence/Source]
+### Knowledge Gaps
+- [ ] [Topic needing more research]
 
 ### Comparison Matrix
 | Criterion | Option A | Option B |
 |-----------|----------|----------|
 | [Criterion] | [Value] | [Value] |
 
-### Recommendation
-[Recommendation with rationale]
+### Recommendations
+1. [Recommendation with rationale]
 
-### Sources
-- [Source with link/path]
+### Methodology
+- Sources consulted: [N]
+- Date range: [Range]
+- Search strategy: [Description]
 ```
 
 ## KB Integration
 ```python
 smart_query("technical topic research")
 crag_search("complex technical question")
+multi_hop_search("complex topic analysis")
 ```

package/app/hooks/commit-quality.sh

@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+# commit-quality.sh — Advisory commit message quality check.
+#
+# Fires on: PreToolUse (Bash)
+# Non-blocking: always exits 0 (warnings only).
+
+INPUT=$(cat)
+COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+
+if [ -z "$COMMAND" ]; then
+    exit 0
+fi
+
+# Only check commands that contain "git commit"
+printf '%s' "$COMMAND" | grep -q 'git commit' || exit 0
+
+# Extract commit message from -m flag
+# Handles: git commit -m "msg", git commit -m 'msg', git commit -am "msg"
+MSG=$(printf '%s' "$COMMAND" | grep -oE '\-m\s+["'"'"']([^"'"'"']*)["'"'"']' | head -1 | sed "s/^-m[[:space:]]*[\"']//" | sed "s/[\"']$//")
+
+# Also handle heredoc-style: -m "$(cat <<'EOF' ... EOF )"
+if [ -z "$MSG" ]; then
+    MSG=$(printf '%s' "$COMMAND" | grep -oE '\-m\s+"[^"]*"' | head -1 | sed 's/^-m[[:space:]]*//' | tr -d '"')
+fi
+
+# No message found (might be --amend or interactive) — skip
+if [ -z "$MSG" ]; then
+    exit 0
+fi
+
+WARNINGS=""
+
+# Check message length (first line only)
+FIRST_LINE=$(printf '%s' "$MSG" | head -1)
+if [ ${#FIRST_LINE} -lt 10 ]; then
+    WARNINGS="${WARNINGS}\n- Commit message is very short (${#FIRST_LINE} chars). Aim for >10 characters."
+fi
+
+# Check for conventional commits prefix
+if ! printf '%s' "$FIRST_LINE" | grep -qE '^(feat|fix|docs|refactor|test|chore|style|perf|ci|build|revert)(\(.+\))?:'; then
+    WARNINGS="${WARNINGS}\n- Missing conventional commit prefix (feat:|fix:|docs:|refactor:|test:|chore:|style:|perf:|ci:|build:|revert:)."
+fi
+
+# Check for WIP/temp markers
+if printf '%s' "$FIRST_LINE" | grep -qEi '\b(WIP|temp|tmp|fixme|todo)\b'; then
+    WARNINGS="${WARNINGS}\n- Commit message contains WIP/temp marker. Consider a more descriptive message."
+fi
+
+if [ -n "$WARNINGS" ]; then
+    printf 'Commit quality advisory:%b\n' "$WARNINGS"
+fi
+
+exit 0

package/app/hooks/governance-capture.sh

@@ -0,0 +1,77 @@
+#!/usr/bin/env bash
+# governance-capture.sh — Log security-sensitive operations to governance log.
+#
+# Fires on: PostToolUse
+# Non-blocking: always exits 0 (logging only).
+# Skipped when TOOLKIT_HOOK_PROFILE=minimal.
+
+# shellcheck source=_profile-check.sh
+source "$(dirname "$0")/_profile-check.sh"
+
+LOG_DIR="$HOME/.ai-toolkit"
+LOG_FILE="$LOG_DIR/governance.log"
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+SESSION="${CLAUDE_SESSION_ID:-unknown}"
+
+INPUT=$(cat)
+TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null)
+
+if [ -z "$TOOL_NAME" ]; then
+    TOOL_NAME="${CLAUDE_TOOL_NAME:-unknown}"
+fi
+
+log_event() {
+    local EVENT="$1"
+    local DETAIL="$2"
+    mkdir -p "$LOG_DIR"
+    printf '{"timestamp":"%s","event":"%s","tool":"%s","detail":"%s","session":"%s"}\n' \
+        "$TIMESTAMP" "$EVENT" "$TOOL_NAME" "$DETAIL" "$SESSION" >> "$LOG_FILE"
+}
+
+case "$TOOL_NAME" in
+    Bash)
+        COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
+        [ -z "$COMMAND" ] && exit 0
+
+        # Check for dangerous command patterns
+        if printf '%s' "$COMMAND" | grep -qEi 'rm\s+-rf'; then
+            log_event "dangerous-command" "rm -rf"
+        fi
+        if printf '%s' "$COMMAND" | grep -qEi 'chmod\s+777'; then
+            log_event "dangerous-command" "chmod 777"
+        fi
+        if printf '%s' "$COMMAND" | grep -qEi 'curl\s.*\|\s*bash'; then
+            log_event "dangerous-command" "curl pipe bash"
+        fi
+        if printf '%s' "$COMMAND" | grep -qEi '\beval\b'; then
+            log_event "dangerous-command" "eval"
+        fi
+        if printf '%s' "$COMMAND" | grep -qEi '\-\-no-verify'; then
+            log_event "dangerous-command" "--no-verify"
+        fi
+        if printf '%s' "$COMMAND" | grep -qEi '(password|secret|token|api.key)='; then
+            log_event "secrets-in-args" "possible credentials in command"
+        fi
+        ;;
+
+    Write|Edit|MultiEdit)
+        FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
+        [ -z "$FILE_PATH" ] && exit 0
+
+        BASENAME=$(basename "$FILE_PATH")
+        MATCHED=""
+        case "$BASENAME" in
+            .env|.env.*) MATCHED=".env" ;;
+            *credentials*) MATCHED="credentials file" ;;
+            *secret*) MATCHED="secret file" ;;
+            *.pem) MATCHED="PEM certificate" ;;
+            *.key) MATCHED="private key" ;;
+        esac
+
+        if [ -n "$MATCHED" ]; then
+            log_event "security-sensitive-file" "$FILE_PATH"
+        fi
+        ;;
+esac
+
+exit 0

package/app/hooks/guard-config.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+# guard-config.sh — Block edits to linter/formatter config files unless explicitly requested.
+#
+# Fires on: PreToolUse (Edit|Write|MultiEdit)
+# Exit 2 = block the tool call. Stderr message goes to Claude as feedback.
+
+INPUT=$(cat)
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // empty' 2>/dev/null)
+
+if [ -z "$FILE_PATH" ]; then
+    exit 0
+fi
+
+BASENAME=$(basename "$FILE_PATH")
+
+# Protected config file patterns
+BLOCKED=0
+case "$BASENAME" in
+    .eslintrc|.eslintrc.*|eslint.config.*)
+        BLOCKED=1 ;;
+    .prettierrc|.prettierrc.*|prettier.config.*)
+        BLOCKED=1 ;;
+    tsconfig.json|tsconfig.*.json)
+        BLOCKED=1 ;;
+    .stylelintrc|.stylelintrc.*)
+        BLOCKED=1 ;;
+    biome.json|biome.jsonc)
+        BLOCKED=1 ;;
+    ruff.toml)
+        BLOCKED=1 ;;
+    pyproject.toml)
+        # Only block if editing [tool.ruff] section — check new_string/content for ruff markers
+        CONTENT=$(echo "$INPUT" | jq -r '(.tool_input.new_string // .tool_input.content // "")' 2>/dev/null)
+        OLD=$(echo "$INPUT" | jq -r '(.tool_input.old_string // "")' 2>/dev/null)
+        if printf '%s\n%s' "$OLD" "$CONTENT" | grep -qi '\[tool\.ruff'; then
+            BLOCKED=1
+        fi
+        ;;
+esac
+
+if [ "$BLOCKED" -eq 1 ]; then
+    echo "Config file protection: ${BASENAME} is protected. Use explicit instruction to modify config files." >&2
+    exit 2
+fi
+
+exit 0