@takuma-hirai/hirai-method 0.1.0

package/.claude/hooks/agent-router-suggest.sh

@@ -0,0 +1,123 @@
+#!/usr/bin/env bash
+# agent-router-suggest.sh — UserPromptSubmit hook.
+#
+# Reads the freshly submitted user prompt from stdin (Claude Code passes
+# {"prompt": "..."} as JSON), runs the agent-router skill, and emits an
+# additionalContext suggestion when the router has high confidence in a
+# named specialist. Fail-open: any error returns 0 with no context injection
+# so the user prompt continues unchanged.
+#
+# Activation:
+#   Wired via .claude/hooks/dispatcher-manifest.tsv (UserPromptSubmit, advisory
+#   channel), gated by feature toggle feature_agent_router_suggest_enabled
+#   (default ON). Disable per-repo with `hc-config.sh --feature
+#   agent_router_suggest=false` or env HC_FEATURE_AGENT_ROUTER_SUGGEST_ENABLED=false.
+#   Confidence threshold (suggest vs stay quiet) defaults to 0.5; set
+#   AGENT_ROUTER_SUGGEST_THRESHOLD in env to override.
+#
+# Phase 2 — Hybrid mode:
+#   Set AGENT_ROUTER_LLM_FALLBACK=on (or 1/true/yes) to enable the LLM
+#   selector for low-confidence prompts. Optional knobs:
+#     AGENT_ROUTER_LLM_THRESHOLD   (default 0.5)
+#     AGENT_ROUTER_LLM_MODEL       (default claude-haiku-4-5)
+#     AGENT_ROUTER_LLM_TIMEOUT     (default 30 seconds)
+#     AGENT_ROUTER_LLM_MAX_ATTEMPTS (default 3)
+#     AGENT_ROUTER_LLM_BUDGET_USD  (default 0.05)
+#   The router itself respects these env vars, so this hook just forwards
+#   the env to it via subprocess. No code changes needed when toggling.
+#
+# Notes:
+#   - This hook is OPTIONAL. The router skill works without it; the hook
+#     just removes one round-trip for the main agent.
+#   - The hook does NOT rewrite tool inputs — that requires a SubagentStart
+#     hook which Claude Code does not currently expose. The hook only adds
+#     a contextual hint.
+
+set -uo pipefail  # task-22 W1: errexit 外し SIGPIPE 141 サイレント死を防止 (CLAUDE.md Critical Lessons HIGH)
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+# --- feature gate (task-81、3 点セット規範) ---
+# config-loader.sh は is_feature_enabled / HC_* を提供 (fail-open 設計)。
+# dispatcher も manifest feature_key で gate するが、直接起動経路でも OFF を保証するため
+# hook 冒頭でも gate する。OFF なら stdin を消費せず即 no-op exit 0。
+# shellcheck source=lib/config-loader.sh
+if [ -f "$SCRIPT_DIR/lib/config-loader.sh" ]; then
+    # shellcheck disable=SC1091
+    source "$SCRIPT_DIR/lib/config-loader.sh"
+fi
+if command -v is_feature_enabled >/dev/null 2>&1 && ! is_feature_enabled agent_router_suggest; then
+    exit 0   # feature OFF で no-op
+fi
+
+THRESHOLD="${AGENT_ROUTER_SUGGEST_THRESHOLD:-0.5}"
+ROUTER_PY="${SCRIPT_DIR}/../skills/agent-router/router.py"
+
+if [[ ! -f "${ROUTER_PY}" ]]; then
+    # Skill not installed — silently no-op.
+    exit 0
+fi
+
+# Read stdin (Claude Code JSON payload). If python isn\'t available, no-op.
+if ! command -v python3 >/dev/null 2>&1; then
+    exit 0
+fi
+
+PAYLOAD="$(cat)"
+
+PROMPT="$(printf '''%s''' "${PAYLOAD}" | python3 -c "
+import json, sys
+try:
+    d = json.loads(sys.stdin.read())
+    print(d.get('''prompt''', ''''''), end='''''')
+except Exception:
+    pass
+")"
+
+if [[ -z "${PROMPT}" ]]; then
+    exit 0
+fi
+
+# Build router args. The router itself reads AGENT_ROUTER_LLM_FALLBACK and
+# friends from env, so we only need to pass --no-record so the hook does
+# not pollute history (the main agent\'s actual dispatch is what should
+# count, not the hook\'s preview).
+ROUTER_ARGS=(--stdin --no-record)
+
+# Route the prompt; the router itself fails open (exit 2 on error).
+ROUTING="$(printf '''%s''' "${PROMPT}" | python3 "${ROUTER_PY}" "${ROUTER_ARGS[@]}" 2>/dev/null || echo '''{"fallback": true}''')"
+
+# Decide whether to suggest. Stay quiet on fallback or low confidence.
+SUGGESTION="$(printf '''%s''' "${ROUTING}" | python3 -c "
+import json, sys, os
+threshold = float(os.environ.get('''AGENT_ROUTER_SUGGEST_THRESHOLD''', '''0.5'''))
+try:
+    r = json.loads(sys.stdin.read())
+except Exception:
+    sys.exit(0)
+if r.get('''fallback'''):
+    sys.exit(0)
+conf = float(r.get('''confidence''', 0.0))
+if conf < threshold:
+    sys.exit(0)
+agent = r.get('''agent''', '''''')
+matched = ''', '''.join(r.get('''matched_keywords''', [])) or r.get('''reason''', '''''')
+extra = ''''''
+if r.get('''llm_used'''):
+    extra = f''' [hybrid: llm-selector confirmed]'''
+if r.get('''cycle_broken'''):
+    extra += ''' [cycle-broken]'''
+print(
+    f'''[agent-router suggestion] This prompt looks like a job for the '''
+    f'''"{agent}" subagent (confidence={conf:.2f}, matched: {matched}){extra}. '''
+    f'''Consider Agent(subagent_type="{agent}", ...) instead of general-purpose.'''
+)
+")"
+
+if [[ -n "${SUGGESTION}" ]]; then
+    # additionalContext is the canonical channel for UserPromptSubmit hooks
+    # to inject context into the model\'s working set.
+    printf '''%s\n''' "${SUGGESTION}"
+fi
+
+exit 0

package/.claude/hooks/autonomous-action-guard.sh

@@ -0,0 +1,242 @@
+#!/usr/bin/env bash
+# autonomous-action-guard.sh — PreToolUse Bash hook
+#
+# 役割:
+#   Loop モード稼働中、modes.md 遵守事項 8 の自律禁止リスト (default 11
+#   カテゴリ) に match する Bash コマンドを {"decision":"block"} で
+#   BLOCK する。Normal モードでは context 注入のみ (block しない)。
+#   準備フェーズ (draft / 実装 / ローカル commit) は対象外。
+#
+# 対象カテゴリ (default、env override 可):
+#   - PR merge / リリース: gh pr merge / gh release / git tag push
+#   - 本番 deploy: vercel --prod / supabase deploy / supabase db push|reset
+#   - infra apply: kubectl apply / terraform apply|destroy
+#   - 第三者リポ: gh repo (delete|transfer|archive)
+#   - AWS 破壊操作: aws *-delete-*|terminate-*|destroy-*
+#
+# task-39 緩和 (2026-05-25、docs/draft/autonomous-action-guard-relaxation.md):
+#   - git push 一般 pattern を削除 → protected-branch-push-deny
+#     (delegation-guard.sh) に委譲。main/stg 以外は push 許可。
+#   - gh pr create を削除 → user 要望で PR 作成は自律実行可。
+#   - gh pr merge / gh release / git tag push は依然 block (本番影響大)。
+#
+# bypass:
+#   ECC_AUTONOMOUS_ACTION_OVERRIDE=1   セッション全体 OFF + bypass.log 記録
+#   HC_AUTONOMOUS_ACTION_ENABLED=false config レベル OFF + bypass.log 記録
+#   HC_AUTONOMOUS_ACTION_PATTERNS=...  検出 regex 上書き (改行区切り)
+#
+# 設計起源:
+#   docs/draft/loop-auto-progress-enforcement.md §3 W3
+#   docs/tasks/task-6-loop-auto-progress-enforcement.md W3 詳細
+#   docs/draft/autonomous-action-guard-relaxation.md §4 採用案 (task-39)
+#
+# Subagent からの操作は対象外 (delegation-guard.sh と同 pattern)。
+# bash flags: set -u のみ。set -e leak 事故 (CB-verify 教訓) を避ける。
+
+set -u
+
+input=$(cat 2>/dev/null || true)
+
+# --- subagent detection (delegation-guard.sh と同じ多段フォールバック) ---
+is_subagent="false"
+
+if [ "${CLAUDE_HARNESS_ROLE:-}" = "subagent" ]; then
+  is_subagent="true"
+fi
+
+if [ "$is_subagent" = "false" ] && command -v jq >/dev/null 2>&1; then
+  for field in agent_type subagent_type parent_tool_use_id agent_id; do
+    v=$(printf '%s' "$input" | jq -r ".${field} // empty" 2>/dev/null)
+    if [ -n "$v" ] && [ "$v" != "null" ]; then
+      is_subagent="true"
+      break
+    fi
+  done
+fi
+
+# agent marker dir は config-loader.sh の HC_AGENT_MARKER_DIR
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=lib/config-loader.sh
+if [ -f "$SCRIPT_DIR/lib/config-loader.sh" ]; then
+  # shellcheck disable=SC1091
+  source "$SCRIPT_DIR/lib/config-loader.sh"
+fi
+
+# Feature toggle 参照 (task-45 Phase 2)
+if command -v is_feature_enabled >/dev/null 2>&1 && ! is_feature_enabled autonomous_action_guard; then
+  echo '{}'
+  exit 0   # feature OFF で no-op
+fi
+
+if [ "$is_subagent" = "false" ] && [ -n "${HC_AGENT_MARKER_DIR:-}" ] && [ -d "$HC_AGENT_MARKER_DIR" ]; then
+  if ls "$HC_AGENT_MARKER_DIR"/*.lock >/dev/null 2>&1; then
+    is_subagent="true"
+  fi
+fi
+
+if [ "$is_subagent" = "true" ]; then
+  echo '{}'
+  exit 0
+fi
+
+# --- モード解決 ---
+# shellcheck source=lib/mode-loader.sh
+if [ -f "$SCRIPT_DIR/lib/mode-loader.sh" ]; then
+  # shellcheck disable=SC1091
+  source "$SCRIPT_DIR/lib/mode-loader.sh"
+  MODE=$(load_mode)
+else
+  MODE="normal"
+fi
+
+# --- bypass-logger 読み込み (best-effort) ---
+# shellcheck source=lib/bypass-logger.sh
+if [ -f "$SCRIPT_DIR/lib/bypass-logger.sh" ]; then
+  # shellcheck disable=SC1091
+  source "$SCRIPT_DIR/lib/bypass-logger.sh"
+fi
+
+# --- bypass 判定 (env-level) ---
+if [ "${ECC_AUTONOMOUS_ACTION_OVERRIDE:-0}" = "1" ] || [ "${ECC_AUTONOMOUS_ACTION_OVERRIDE:-}" = "true" ]; then
+  if declare -f log_bypass >/dev/null 2>&1; then
+    log_bypass "autonomous-action-guard" "ECC_AUTONOMOUS_ACTION_OVERRIDE" "${ECC_BYPASS_REASON:-(not provided)}"
+  fi
+  echo '{}'
+  exit 0
+fi
+
+# --- bypass 判定 (config-level) ---
+if [ "${HC_AUTONOMOUS_ACTION_ENABLED:-true}" = "false" ]; then
+  if declare -f log_bypass >/dev/null 2>&1; then
+    log_bypass "autonomous-action-guard" "HC_AUTONOMOUS_ACTION_ENABLED" "${ECC_BYPASS_REASON:-(config off)}"
+  fi
+  echo '{}'
+  exit 0
+fi
+
+# --- 依存チェック ---
+if ! command -v jq >/dev/null 2>&1; then
+  echo '{}'
+  exit 0
+fi
+
+# --- command 抽出 ---
+cmd=$(printf '%s' "$input" | jq -r '.tool_input.command // empty' 2>/dev/null)
+if [ -z "$cmd" ]; then
+  echo '{}'
+  exit 0
+fi
+
+# --- 禁止パターン (default、env override 可) ---
+# task-39 緩和 (2026-05-25):
+#   - `git push` 一般 pattern: 削除済。protected-branch-push-deny
+#     (delegation-guard.sh) に委譲。main/stg のみ block、それ以外は許可。
+#   - `gh pr create`: 削除済。user 要望で PR 作成は自律実行可 (task-39)。
+#   - `gh pr merge`: 維持。本番影響大の merge 操作は引き続き block。
+DEFAULT_PATTERNS='^gh[[:space:]]+pr[[:space:]]+merge([[:space:]]|$)
+^gh[[:space:]]+release([[:space:]]|$)
+^gh[[:space:]]+repo[[:space:]]+(delete|transfer|archive)([[:space:]]|$)
+^git[[:space:]]+tag[[:space:]].+[[:space:]]+(origin|upstream)([[:space:]]|$)
+^vercel([[:space:]].*)?--prod([[:space:]]|$)
+^supabase[[:space:]]+db[[:space:]]+(push|reset)([[:space:]]|$)
+^supabase[[:space:]]+deploy([[:space:]]|$)
+^kubectl[[:space:]]+(apply|delete)([[:space:]]|$)
+^terraform[[:space:]]+(apply|destroy)([[:space:]]|$)
+^aws[[:space:]].*[[:space:]](delete-|terminate-|destroy-)'
+
+PATTERNS="${HC_AUTONOMOUS_ACTION_PATTERNS:-$DEFAULT_PATTERNS}"
+
+# segments split (delegation-guard.sh と同じ pattern)
+# `&&` `||` `;` `|` で分割し、各 segment を pattern と照合
+segments=$(printf '%s' "$cmd" | awk '
+  BEGIN { RS=""; }
+  {
+    gsub(/&&|\|\||;|\|/, "\n", $0);
+    print $0;
+  }')
+
+matched_pattern=""
+matched_segment=""
+while IFS= read -r seg; do
+  seg_trim=$(printf '%s' "$seg" | sed -E 's/^[[:space:]]+//; s/[[:space:]]+$//')
+  [ -z "$seg_trim" ] && continue
+
+  while IFS= read -r pattern; do
+    [ -z "$pattern" ] && continue
+    if printf '%s' "$seg_trim" | grep -qE "$pattern"; then
+      matched_pattern="$pattern"
+      matched_segment="$seg_trim"
+      break 2
+    fi
+  done <<< "$PATTERNS"
+done <<EOF
+$segments
+EOF
+
+if [ -z "$matched_pattern" ]; then
+  echo '{}'
+  exit 0
+fi
+
+# --- match: モード分岐 ---
+reason_loop="[autonomous-action-guard] Loop モード自律実行禁止コマンドを検出しました。
+
+検出 segment: ${matched_segment}
+match 正規表現: ${matched_pattern}
+
+modes.md 遵守事項 8 (Loop モード自律実行禁止リスト) により、以下の操作は user の
+明示承認が必要です。準備 (draft / 設計 / 実装 / ローカル commit) のみ自律可。
+
+【ブロック対象カテゴリ (default、task-39 緩和後)】
+- PR merge / リリース: gh pr merge / gh release / git tag push
+- 第三者リポ: gh repo delete|transfer|archive
+- 本番 deploy: vercel --prod / supabase deploy / supabase db push|reset
+- infra apply: kubectl apply|delete / terraform apply|destroy
+- AWS 破壊操作: aws *-delete-*|terminate-*|destroy-*
+
+【task-39 緩和 (2026-05-25)】
+- git push (一般): 緩和。main/stg 以外への push は許可
+  (protected-branch-push-deny に委譲)
+- gh pr create: 緩和。PR 作成は自律実行可
+
+【bypass (user の明示承認下で)】
+1. user に承認を求める (chat で明示)
+2. user 承認後、以下のいずれか:
+   - export ECC_AUTONOMOUS_ACTION_OVERRIDE=1
+     export ECC_BYPASS_REASON='<理由>'
+     再実行 (.claude/.workflow-state/bypass.log に記録)
+   - config レベル: HC_AUTONOMOUS_ACTION_ENABLED=false
+
+【代替】
+- subagent 経由で実行 (本 hook 対象外)
+- /mode normal で Loop モード解除"
+
+reason_normal="[autonomous-action-guard] 注意: 自律実行禁止リストに該当するコマンドです。
+
+検出 segment: ${matched_segment}
+match 正規表現: ${matched_pattern}
+
+Normal モードでは block しませんが、modes.md 遵守事項 8 により Loop モード時は
+user の明示承認が必要なカテゴリです。実行前に意図を確認してください。
+
+【参考】このまま実行: そのまま続行 / 中止: ESC 等で取消"
+
+case "$MODE" in
+  loop)
+    jq -n --arg r "$reason_loop" '{decision:"block", reason:$r}'
+    exit 0
+    ;;
+  *)
+    # Normal モード: warning context 注入のみ。ただし禁止パターン match 時は
+    # log_bypass で監査残し (W2, task #9)。「Loop 規律から外れた可能性ある cmd」を
+    # bypass.log に記録し /harness-audit でトレース可能にする。
+    # bypass: HC_AUTONOMOUS_LOG_NORMAL_RESTRICTED=false で OFF。
+    if [ "${HC_AUTONOMOUS_LOG_NORMAL_RESTRICTED:-true}" != "false" ]; then
+      if declare -f log_bypass >/dev/null 2>&1; then
+        log_bypass "autonomous-action-guard" "mode-normal-restricted-cmd" "matched=${matched_pattern} segment=${matched_segment}"
+      fi
+    fi
+    jq -n --arg r "$reason_normal" '{hookSpecificOutput:{hookEventName:"PreToolUse",additionalContext:$r}}'
+    exit 0
+    ;;
+esac

package/.claude/hooks/byproduct-discharge-guard.sh

@@ -0,0 +1,128 @@
+#!/usr/bin/env bash
+# .claude/hooks/byproduct-discharge-guard.sh
+# Stop hook — docs/tasks/next-actions.md の未処理副産物 entry を強制 discharge
+#
+# 役割:
+#   セッション終了時 (Stop イベント) に未処理 entry を検証する:
+#     - 🔴 (高) 未処理 1 件以上 → BLOCK (exit 2) — 「memory に流すだけ禁止」ルールを強制
+#     - 🟡 (中) 未処理のみ → warning + exit 0
+#     - すべて処理済 or 🟢 のみ → silent + exit 0
+#
+# 設計:
+#   - 不在なら exit 0 silent (fail-open)
+#   - parser 不在も exit 0 silent
+#   - set -e 禁止 (mode-loader.sh の CB-verify 教訓 - 5846925)
+#
+# Bypass:
+#   ECC_BYPASS_DISCHARGE_GUARD=1   # block を skip + bypass.log 記録
+#
+# 重要制約:
+#   - source 系は set -uo pipefail のみ
+
+set -uo pipefail   # set -e は使わない (mode-loader.sh 教訓)
+
+# project root 解決 (dual-mode portability: HC_PROJECT_ROOT > git > pwd)
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=lib/project-root.sh
+source "$SCRIPT_DIR/lib/project-root.sh"
+# 後方互換: CLAUDE_PROJECT_DIR が明示設定されている場合はそれを優先
+_project_dir="${CLAUDE_PROJECT_DIR:-$(resolve_project_root)}"
+
+# stdin 消費 (Stop hook の JSON は使わないが、caller 側で残ることがある)
+cat > /dev/null 2>&1 || true
+
+# === bypass-logger 読み込み (bypass / warning 両方で使う) ===
+if [ -f "${_project_dir}/.claude/hooks/lib/bypass-logger.sh" ]; then
+  # shellcheck source=lib/bypass-logger.sh
+  source "${_project_dir}/.claude/hooks/lib/bypass-logger.sh"
+fi
+
+# === config-loader.sh (best-effort、HC_* env 解決 + is_feature_enabled) ===
+if [ -f "${_project_dir}/.claude/hooks/lib/config-loader.sh" ]; then
+  # shellcheck source=lib/config-loader.sh
+  # shellcheck disable=SC1091
+  source "${_project_dir}/.claude/hooks/lib/config-loader.sh" 2>/dev/null || true
+fi
+
+# Feature toggle 参照 (task-45 Phase 2)
+if command -v is_feature_enabled >/dev/null 2>&1 && ! is_feature_enabled byproduct_discharge; then
+  exit 0
+fi
+
+# === Bypass: ECC_BYPASS_DISCHARGE_GUARD ===
+if [ "${ECC_BYPASS_DISCHARGE_GUARD:-0}" = "1" ] || [ "${ECC_BYPASS_DISCHARGE_GUARD:-}" = "true" ]; then
+  # bypass log: session_id を含めて記録 (要件: reason 列に「{session_id}: discharge-guard bypass」と明記)
+  _bypass_reason="${CLAUDE_SESSION_ID:-unknown}: discharge-guard bypass"
+  if [ -n "${ECC_BYPASS_REASON:-}" ]; then
+    _bypass_reason="${_bypass_reason} (${ECC_BYPASS_REASON})"
+  fi
+  if command -v log_bypass >/dev/null 2>&1; then
+    log_bypass "byproduct-discharge-guard" "ECC_BYPASS_DISCHARGE_GUARD" "$_bypass_reason"
+  fi
+  exit 0
+fi
+
+# === parser library 読み込み ===
+_parser_lib="${_project_dir}/.claude/hooks/lib/next-actions-parser.sh"
+if [ ! -f "$_parser_lib" ]; then
+  exit 0
+fi
+# shellcheck source=lib/next-actions-parser.sh
+source "$_parser_lib"
+
+# === next-actions.md 解析 ===
+_md_file="${_project_dir}/docs/tasks/next-actions.md"
+
+parse_next_actions "$_md_file"
+_parse_rc=$?
+
+if [ "$_parse_rc" != "0" ]; then
+  # file 不在 or table 不在 → silent exit 0
+  exit 0
+fi
+
+# === 判定 ===
+
+# Case A: 🔴 未処理が 1 件以上 → BLOCK
+if [ "${NA_RED_COUNT:-0}" -gt 0 ]; then
+  _red_titles_joined=""
+  if [ -n "${NA_RED_TITLES:-}" ]; then
+    _red_titles_joined=$(printf '%s' "$NA_RED_TITLES" | awk 'BEGIN{first=1} {if(first){printf "%s",$0;first=0}else{printf ", %s",$0}}')
+  fi
+
+  {
+    printf '[byproduct-discharge-guard] BLOCK: 🔴 (高) 未処理副産物 entry が %s 件残存しています。\n' "${NA_RED_COUNT}"
+    printf '\n'
+    printf '未処理 🔴 entry:\n'
+    if [ -n "$_red_titles_joined" ]; then
+      printf '  - %s\n' "$_red_titles_joined"
+    fi
+    printf '\n'
+    printf '推奨アクション:\n'
+    printf '  1. 各 🔴 entry について `/new-draft <slug>` で draft を起こす\n'
+    printf '  2. user 承認後に `/new-task <id> <slug>` で list.md に移行\n'
+    printf '  3. docs/tasks/next-actions.md の「処理結果」列に移行先を記入\n'
+    printf '  4. 全 🔴 entry 処理後にセッション終了\n'
+    printf '\n'
+    printf 'Bypass (audit-logged):\n'
+    printf '  ECC_BYPASS_DISCHARGE_GUARD=1 ECC_BYPASS_REASON="<理由>"\n'
+    printf '  → .claude/.workflow-state/bypass.log に session_id 付きで記録される\n'
+    printf '\n'
+    printf '詳細: docs/tasks/next-actions.md / .claude/rules/development-process.md\n'
+  } >&2
+
+  exit 2
+fi
+
+# Case B: 🟡 のみ未処理 → warning + exit 0
+if [ "${NA_YELLOW_COUNT:-0}" -gt 0 ]; then
+  {
+    printf '[byproduct-discharge-guard] WARN: 🟡 (中) 未処理副産物 entry が %s 件残存しています (block しません)。\n' "${NA_YELLOW_COUNT}"
+    printf '  近日中に `/new-draft` で draft 起こし → tasking を推奨。\n'
+    printf '  詳細: docs/tasks/next-actions.md\n'
+  } >&2
+  exit 0
+fi
+
+# Case C: 全て処理済 or 🟢 のみ → silent
+exit 0

package/.claude/hooks/check-md-mermaid.sh

@@ -0,0 +1,144 @@
+#!/usr/bin/env bash
+# PostToolUse: Edit|Write 後に .md/.mdx の Mermaid ブロックを構文検証する。
+#
+# 入力 (stdin): PostToolUse JSON
+# 出力 (stdout): hook 応答 JSON
+#
+# 動作:
+#   - 拡張子が .md / .mdx 以外なら即 allow
+#   - ファイル内に ```mermaid フェンスが無ければ即 allow
+#   - パース失敗時は decision:"block" で Claude に修正を促す
+#
+# Mermaid library 解決順序 (task-25 A1):
+#   1. project-local: ./node_modules/{mermaid,jsdom}
+#   2. global install: $(npm root -g)/{mermaid,jsdom}
+#   3. npx fallback: network 経由で mermaid@11.13.0 + jsdom を取得
+#   いずれも失敗時は install hint を stderr に出して fail-open (hook 失敗で session 止めない)
+#
+# 関連:
+#   - スクリプト: .claude/scripts/check-md-mermaid.mjs
+#   - スキル定義: .claude/skills/check-md-mermaid/SKILL.md
+
+set -u
+
+# config 読み込み (HC_* 変数 + is_feature_enabled 関数 export、task-45 Phase 2)
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+# shellcheck source=lib/config-loader.sh
+. "$SCRIPT_DIR/lib/config-loader.sh" 2>/dev/null || true
+
+# Feature toggle 参照 (task-45 Phase 2)
+if command -v is_feature_enabled >/dev/null 2>&1 && ! is_feature_enabled check_md_mermaid; then
+  echo '{}'
+  exit 0   # feature OFF で no-op (PostToolUse hook response 規約: empty JSON)
+fi
+
+input=$(cat)
+
+# task-22 W2: jq 不在環境では fail-open (hook 機能停止して継続)
+if ! command -v jq >/dev/null 2>&1; then
+  echo '{}'
+  exit 0
+fi
+
+file_path=$(printf '%s' "$input" | jq -r '.tool_input.file_path // .tool_input.filePath // empty')
+
+if [ -z "$file_path" ]; then
+  echo '{}'
+  exit 0
+fi
+
+case "$file_path" in
+  *.md|*.mdx) ;;
+  *) echo '{}'; exit 0 ;;
+esac
+
+if [ ! -f "$file_path" ]; then
+  echo '{}'
+  exit 0
+fi
+
+# Quick skip: no mermaid fence -> nothing to validate
+if ! grep -qE '^[[:space:]]*(\`{3,}|~{3,})[[:space:]]*mermaid' "$file_path" 2>/dev/null; then
+  echo '{}'
+  exit 0
+fi
+
+# Resolve project root (dual-mode portability: HC_PROJECT_ROOT > git > pwd)
+script_dir=$(cd "$(dirname "$0")" && pwd)
+# shellcheck source=lib/project-root.sh
+source "$script_dir/lib/project-root.sh"
+project_root=$(resolve_project_root)
+cd "$project_root"
+
+if [ ! -f .claude/scripts/check-md-mermaid.mjs ]; then
+  echo '{}'
+  exit 0
+fi
+
+# Resolve mermaid library install location (3-stage fallback).
+#
+# resolve_mermaid_runner echoes one of:
+#   "local"   — node with NODE_PATH unset (cwd node_modules works by default)
+#   "global"  — node with NODE_PATH=$(npm root -g)
+#   "npx"     — npx --yes --package=mermaid@11.13.0 --package=jsdom node
+#   ""        — none found, caller should fail-open with install hint
+resolve_mermaid_runner() {
+  if [ -d node_modules/mermaid ] && [ -d node_modules/jsdom ]; then
+    echo "local"
+    return 0
+  fi
+
+  if command -v npm >/dev/null 2>&1; then
+    local global_root
+    global_root=$(npm root -g 2>/dev/null)
+    if [ -n "$global_root" ] && [ -d "$global_root/mermaid" ] && [ -d "$global_root/jsdom" ]; then
+      echo "global"
+      return 0
+    fi
+  fi
+
+  if command -v npx >/dev/null 2>&1; then
+    echo "npx"
+    return 0
+  fi
+
+  echo ""
+  return 1
+}
+
+runner=$(resolve_mermaid_runner)
+
+case "$runner" in
+  local)
+    output=$(node .claude/scripts/check-md-mermaid.mjs "$file_path" 2>&1)
+    status=$?
+    ;;
+  global)
+    global_root=$(npm root -g 2>/dev/null)
+    output=$(NODE_PATH="$global_root" node .claude/scripts/check-md-mermaid.mjs "$file_path" 2>&1)
+    status=$?
+    ;;
+  npx)
+    output=$(npx --yes --package=mermaid@11.13.0 --package=jsdom node \
+      .claude/scripts/check-md-mermaid.mjs "$file_path" 2>&1)
+    status=$?
+    ;;
+  *)
+    # No runner available. Fail-open with install hint (do not block on missing tooling).
+    printf '[mermaid-check] node / npm / npx いずれも見つかりません。Mermaid 検証を skip しました。\n' >&2
+    printf '[mermaid-check] 推奨: npm install -g @mermaid-js/mermaid-cli mermaid jsdom\n' >&2
+    printf '[mermaid-check] または project-local: npm install --save-dev mermaid@11.13.0 jsdom\n' >&2
+    echo '{}'
+    exit 0
+    ;;
+esac
+
+if [ "$status" -eq 0 ]; then
+  echo '{}'
+  exit 0
+fi
+
+reason=$(printf '[mermaid-check] %s に Mermaid 構文エラーが検出されました。修正してください。\n\n%s\n\n[hint] 検証が動かない場合は `npm install -g mermaid jsdom` (global) または `npm install --save-dev mermaid@11.13.0 jsdom` (project-local) で事前 install すると高速化・オフライン化できます。\n' \
+  "$file_path" "$output")
+jq -n --arg r "$reason" '{decision:"block", reason:$r}'
+exit 0