@takuma-hirai/hirai-method 0.1.0

package/.claude/tests/enforcement-mismatch-smoke.sh

@@ -0,0 +1,263 @@
+#!/usr/bin/env bash
+# .claude/tests/enforcement-mismatch-smoke.sh — task-70 Phase 2 (enforcement matrix) smoke test
+#
+# 目的:
+#   docs / rules が「BLOCK」と説明する guard (enforcement_matrix.<guard>.docs_claim=block) と、
+#   実 enforcement を制御する feature toggle (enforcement_matrix.<guard>.feature_key) の実値の
+#   不一致 (mismatch) を検出する。mismatch は「モデルには必須と読ませるが実際の境界では
+#   止めない」中間状態であり、最も危険。
+#
+#   ただし、mismatch があっても enforcement_matrix.<guard>.disabled_reason に現 preset
+#   (default_preset) の理由が明記されていれば「意図的な緩和」として PASS とする。
+#   disabled_reason が無い mismatch のみ FAIL にする。
+#
+#   対象 guard (draft §4.2): draft_flow_guard / task_rule_guard / workflow_guard / gateguard
+#   + review_required_{design,test,module,system}。
+#
+# 設計:
+#   - subshell 関数 ( set -uo pipefail; ... ) で各 case を隔離 (feedback_set_e_in_sourced_libs)
+#   - matrix の parse は yml を直接 awk (flat parser は nested 値を読めないため)
+#   - feature toggle 実値は hc-config.sh --get で取得 (env > local.yml > yml > default の解決を尊重)
+#   - PASS/FAIL カウンタ + 全 PASS で exit 0
+#
+# 起源: task-70 Step 4、設計 SSoT: docs/draft/harness-review-remediation-plan.md §4.2
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
+HC_CONFIG_SCRIPT="${REPO_ROOT}/.claude/scripts/hc-config.sh"
+HC_CONFIG_YML="${REPO_ROOT}/.claude/harness-config.yml"
+
+# task-70 Step 7 (LOW-1 DRY): enforcement matrix parse lib を source。
+# lib が存在すれば em_guards / em_field / em_disabled_reason を取り込む。
+_EM_PARSE_LIB="${REPO_ROOT}/.claude/scripts/lib/enforcement-matrix-parse.sh"
+if [ -f "$_EM_PARSE_LIB" ]; then
+  # shellcheck disable=SC1090
+  source "$_EM_PARSE_LIB"
+fi
+
+PASS=0
+FAIL=0
+FAILED_CASES=""
+
+_record() {
+  local result="$1" case_id="$2" desc="$3"
+  if [ "$result" = "PASS" ]; then
+    printf '  PASS  Case %s: %s\n' "$case_id" "$desc"
+    PASS=$((PASS + 1))
+  else
+    printf '  FAIL  Case %s: %s\n' "$case_id" "$desc"
+    FAIL=$((FAIL + 1))
+    FAILED_CASES="${FAILED_CASES} ${case_id}"
+  fi
+}
+
+# enforcement_matrix block の guard 名一覧を yml から抽出。
+# task-70 Step 7 (LOW-1 DRY): awk ロジックは lib/enforcement-matrix-parse.sh に SSoT 化。
+# lib 存在時は em_guards を、不在時は直接 awk に fallback。
+_matrix_guards() {
+  if command -v em_guards >/dev/null 2>&1; then
+    em_guards "$HC_CONFIG_YML"
+  else
+    awk '
+      /^enforcement_matrix:[[:space:]]*$/ { in_m=1; next }
+      in_m && /^[^[:space:]]/ { in_m=0 }
+      in_m && /^  [a-z_][a-zA-Z0-9_]*:[[:space:]]*$/ {
+        line=$0; sub(/^  /,"",line); sub(/:.*$/,"",line); print line
+      }
+    ' "$HC_CONFIG_YML"
+  fi
+}
+
+# 指定 guard の指定 field 値を抽出 (4-space インデント `    <field>: <value>`)。
+# $1=guard, $2=field
+_matrix_field() {
+  if command -v em_field >/dev/null 2>&1; then
+    em_field "$HC_CONFIG_YML" "$1" "$2"
+  else
+    local guard="$1" field="$2"
+    awk -v g="$guard" -v f="$field" '
+      /^enforcement_matrix:[[:space:]]*$/ { in_m=1; next }
+      in_m && /^[^[:space:]]/ { in_m=0 }
+      in_m && $0 ~ "^  " g ":[[:space:]]*$" { in_g=1; next }
+      in_m && in_g && /^  [a-z_]/ { in_g=0 }
+      in_m && in_g && $0 ~ "^    " f ":" {
+        line=$0; sub("^    " f ":[[:space:]]*","",line); print line; exit
+      }
+    ' "$HC_CONFIG_YML"
+  fi
+}
+
+# 指定 guard の disabled_reason に指定 preset の理由があるか (0=あり / 1=なし)。
+# $1=guard, $2=preset
+# lib の em_disabled_reason は reason string を stdout に print + return 0 (理由あり)。
+# 本関数は exit code のみを使うため stdout を /dev/null に捨てる。
+_matrix_has_disabled_reason() {
+  if command -v em_disabled_reason >/dev/null 2>&1; then
+    em_disabled_reason "$HC_CONFIG_YML" "$1" "$2" >/dev/null
+  else
+    local guard="$1" preset="$2"
+    awk -v g="$guard" -v p="$preset" '
+      /^enforcement_matrix:[[:space:]]*$/ { in_m=1; next }
+      in_m && /^[^[:space:]]/ { in_m=0 }
+      in_m && $0 ~ "^  " g ":[[:space:]]*$" { in_g=1; next }
+      in_m && in_g && /^  [a-z_]/ { in_g=0; in_dr=0 }
+      in_m && in_g && /^    disabled_reason:[[:space:]]*$/ { in_dr=1; next }
+      in_m && in_g && /^    [a-z_]/ && !/^    disabled_reason:/ { in_dr=0 }
+      in_m && in_g && in_dr && $0 ~ "^      " p ":" {
+        val=$0; sub("^      " p ":[[:space:]]*","",val)
+        gsub(/^[\"\x27]|[\"\x27][[:space:]]*$/,"",val)
+        if (length(val) > 0) { found=1 }
+      }
+      END { exit (found ? 0 : 1) }
+    ' "$HC_CONFIG_YML"
+  fi
+}
+
+# feature toggle の実効値を取得 (env > local.yml > yml > default)。
+_effective() {
+  bash "$HC_CONFIG_SCRIPT" --get "$1" 2>/dev/null | head -n1
+}
+
+# ============================================================
+# Case 1: enforcement_matrix が定義され guard を 1 件以上含む
+# ============================================================
+_case_1() (
+  set -uo pipefail
+  local guards count
+  guards="$(_matrix_guards)"
+  count=$(printf '%s\n' "$guards" | grep -c .)
+  printf 'Case 1: matrix guards=%d (%s)\n' "$count" "$(printf '%s' "$guards" | tr '\n' ' ')" >&2
+  [ "$count" -ge 4 ]
+)
+
+# ============================================================
+# Case 2: 対象 5 guard (draft/task/workflow/gateguard/review-required) が matrix に存在
+# ============================================================
+_case_2() (
+  set -uo pipefail
+  local guards required missing g
+  guards="$(_matrix_guards)"
+  required="draft_flow_guard task_rule_guard workflow_guard gateguard review_required_design review_required_test review_required_module review_required_system"
+  missing=""
+  for g in $required; do
+    if ! printf '%s\n' "$guards" | grep -qx "$g"; then
+      missing="${missing} ${g}"
+    fi
+  done
+  if [ -n "$missing" ]; then
+    printf 'Case 2: missing guards in matrix:%s\n' "$missing" >&2
+    return 1
+  fi
+  return 0
+)
+
+# ============================================================
+# Case 3: docs_claim=block かつ feature 実値=false の mismatch は
+#         現 preset の disabled_reason が無い限り FAIL
+# ============================================================
+_case_3() (
+  set -uo pipefail
+  local preset guards g fkey claim eff undoc_mismatch
+  preset="$(_effective default_preset)"
+  [ -z "$preset" ] && preset="harness-dev"
+  guards="$(_matrix_guards)"
+  undoc_mismatch=""
+  while IFS= read -r g; do
+    [ -z "$g" ] && continue
+    fkey="$(_matrix_field "$g" feature_key)"
+    claim="$(_matrix_field "$g" docs_claim)"
+    [ "$claim" = "block" ] || continue
+    [ -z "$fkey" ] && continue
+    eff="$(_effective "$fkey")"
+    if [ "$eff" = "false" ]; then
+      # mismatch: docs claims block but effectively disabled
+      if ! _matrix_has_disabled_reason "$g" "$preset"; then
+        undoc_mismatch="${undoc_mismatch} ${g}"
+        printf 'Case 3: UNDOCUMENTED mismatch guard=%s feature_key=%s claim=block eff=%s preset=%s\n' \
+          "$g" "$fkey" "$eff" "$preset" >&2
+      else
+        printf 'Case 3: documented exception guard=%s (preset=%s has disabled_reason)\n' "$g" "$preset" >&2
+      fi
+    fi
+  done <<< "$guards"
+  if [ -n "$undoc_mismatch" ]; then
+    printf 'Case 3: undocumented mismatches:%s\n' "$undoc_mismatch" >&2
+    return 1
+  fi
+  return 0
+)
+
+# ============================================================
+# Case 4: 各 guard の feature_key が yml top-level に実在する
+#         (matrix が存在しない feature_key を参照していない)
+# ============================================================
+_case_4() (
+  set -uo pipefail
+  local guards g fkey bad
+  guards="$(_matrix_guards)"
+  bad=""
+  while IFS= read -r g; do
+    [ -z "$g" ] && continue
+    fkey="$(_matrix_field "$g" feature_key)"
+    [ -z "$fkey" ] && { bad="${bad} ${g}:no-feature_key"; continue; }
+    if ! grep -qE "^${fkey}:" "$HC_CONFIG_YML"; then
+      bad="${bad} ${g}:${fkey}-not-in-yml"
+    fi
+  done <<< "$guards"
+  if [ -n "$bad" ]; then
+    printf 'Case 4: bad feature_key refs:%s\n' "$bad" >&2
+    return 1
+  fi
+  return 0
+)
+
+# ============================================================
+# Case 5: docs_claim=block + 現 preset で false にする guard には必ず disabled_reason
+#         (documented-exception の網羅性: matrix の self-consistency)
+# ============================================================
+_case_5() (
+  set -uo pipefail
+  local preset guards g claim presetval missing
+  preset="$(_effective default_preset)"
+  [ -z "$preset" ] && preset="harness-dev"
+  guards="$(_matrix_guards)"
+  missing=""
+  while IFS= read -r g; do
+    [ -z "$g" ] && continue
+    claim="$(_matrix_field "$g" docs_claim)"
+    [ "$claim" = "block" ] || continue
+    # presets line: {advisory: false, team-default: true, ...}
+    presetval="$(_matrix_field "$g" presets)"
+    # 現 preset が false 期待なら disabled_reason 必須
+    if printf '%s' "$presetval" | grep -qE "${preset}:[[:space:]]*false"; then
+      if ! _matrix_has_disabled_reason "$g" "$preset"; then
+        missing="${missing} ${g}"
+      fi
+    fi
+  done <<< "$guards"
+  if [ -n "$missing" ]; then
+    printf 'Case 5: preset=%s expects false but no disabled_reason:%s\n' "$preset" "$missing" >&2
+    return 1
+  fi
+  return 0
+)
+
+# ============================================================
+# Run
+# ============================================================
+printf '=== enforcement mismatch smoke ===\n'
+
+if _case_1 2>&1; then _record PASS 1 "enforcement_matrix に guard が 4 件以上定義されている"; else _record FAIL 1 "enforcement_matrix に guard が 4 件以上定義されている"; fi
+if _case_2 2>&1; then _record PASS 2 "対象 5 guard (draft/task/workflow/gateguard/review-required 4 種) が matrix に存在"; else _record FAIL 2 "対象 5 guard が matrix に存在"; fi
+if _case_3 2>&1; then _record PASS 3 "docs=block かつ実値=false の mismatch は disabled_reason 不在で fail"; else _record FAIL 3 "undocumented mismatch を検出 (disabled_reason 不在)"; fi
+if _case_4 2>&1; then _record PASS 4 "全 guard の feature_key が yml top-level に実在"; else _record FAIL 4 "feature_key が yml に実在"; fi
+if _case_5 2>&1; then _record PASS 5 "現 preset で false 期待の block guard に disabled_reason が網羅"; else _record FAIL 5 "現 preset false 期待 guard の disabled_reason 網羅"; fi
+
+printf '\n=== Result: %d PASS, %d FAIL ===\n' "$PASS" "$FAIL"
+if [ "$FAIL" -gt 0 ]; then
+  printf 'FAILED cases:%s\n' "$FAILED_CASES" >&2
+  exit 1
+fi
+exit 0

package/.claude/tests/fixtures/cascade-sample.jsonl

@@ -0,0 +1,9 @@
+{"tool_name": "Bash", "raw": {"cmd": "ls"}, "timestamp": "2026-05-24T00:00:00Z"}
+{"tool_name": "Read", "raw": {"path": "/tmp/foo"}, "timestamp": "2026-05-24T00:00:01Z"}
+broken-line-1-not-json
+broken-line-2-not-json
+{"tool_name":"Edit","raw":"{broken
+{"tool_name":"Write",
+broken-line-5-not-json
+{"tool_name": "Edit", "raw": {"file": "/tmp/x"}, "timestamp": "2026-05-24T00:00:08Z"}
+{"tool_name": "Write", "raw": {"file": "/tmp/y"}, "timestamp": "2026-05-24T00:00:09Z"}

package/.claude/tests/fixtures/next-actions/case-clean.md

@@ -0,0 +1,14 @@
+# Next Actions（副産物 / 派生 task 候補レジストリ）
+
+すべて処理済の fixture (未処理 0 件)。
+
+## エントリ一覧
+
+| # | 記録日 | タイトル | 発生源 | 緊急度 | 推奨処理 | 処理結果 |
+|---:|---|---|---|:---:|---|---|
+| 1 | 2026-05-12 | 既に処理済 entry A | task #1 | 🔴 | (a) draft 起こし | → `docs/draft/done-a.md` → task #99 |
+| 2 | 2026-05-12 | 既に処理済 entry B | task #2 | 🟡 | (a) draft 起こし | → `docs/draft/done-b.md` → task #100 |
+
+## 履歴セクション
+
+（過去 entry は省略）

package/.claude/tests/fixtures/next-actions/case-with-red.md

@@ -0,0 +1,16 @@
+# Next Actions（副産物 / 派生 task 候補レジストリ）
+
+🔴 未処理 2 件 + 🟡 未処理 1 件 + 処理済 1 件 の fixture。
+
+## エントリ一覧
+
+| # | 記録日 | タイトル | 発生源 | 緊急度 | 推奨処理 | 処理結果 |
+|---:|---|---|---|:---:|---|---|
+| 1 | 2026-05-12 | PR 作成タスク | task #1 | 🔴 | (a) draft 起こし | — |
+| 2 | 2026-05-12 | CB-verify 観察 | task #9 | 🟡 | (a) draft 起こし | — |
+| 3 | 2026-05-12 | hook 強制実装 | task #12 | 🔴 | (a) draft 起こし | — |
+| 4 | 2026-05-12 | 過去処理済 entry | task #5 | 🟢 | 無視 | (c) 無視 — 別リポ管轄 |
+
+## 履歴セクション
+
+（過去 entry は省略）

package/.claude/tests/fixtures/next-actions/case-with-yellow-only.md

@@ -0,0 +1,14 @@
+# Next Actions（副産物 / 派生 task 候補レジストリ）
+
+🟡 未処理 1 件のみ。🔴 は 0 件 → discharge-guard は WARN のみで pass。
+
+## エントリ一覧
+
+| # | 記録日 | タイトル | 発生源 | 緊急度 | 推奨処理 | 処理結果 |
+|---:|---|---|---|:---:|---|---|
+| 1 | 2026-05-12 | 近日対応の中優先タスク | task #4 | 🟡 | (a) draft 起こし | — |
+| 2 | 2026-05-12 | 処理済の高優先 entry | task #1 | 🔴 | (a) draft 起こし | → `docs/draft/done.md` → task #50 |
+
+## 履歴セクション
+
+（過去 entry は省略）

package/.claude/tests/fixtures/normal-broken-scatter.jsonl

@@ -0,0 +1,5 @@
+{"tool_name": "Read", "raw": {"path": "/tmp/a"}, "timestamp": "2026-05-24T00:00:00Z"}
+broken-line-1-not-json
+{"tool_name": "Edit", "raw": {"path": "/tmp/b"}, "timestamp": "2026-05-24T00:00:01Z"}
+broken-line-2-not-json
+{"tool_name": "Write", "raw": {"path": "/tmp/c"}, "timestamp": "2026-05-24T00:00:02Z"}

package/.claude/tests/fixtures/task-71/blocker-baseline.tsv

@@ -0,0 +1,24 @@
+C01	delegation-guard.sh	Edit protected src path (block)	0	yes
+C02	delegation-guard.sh	Edit README.md (non-protected pass)	0	no
+C03	delegation-guard.sh	Read protected src path (block)	0	yes
+C04	delegation-guard.sh	Bash git reset --hard HEAD (destructive block)	0	yes
+C05	delegation-guard.sh	Bash git status (whitelist pass)	0	no
+C06	gateguard.sh	Edit fresh state (first-edit block, feature ON)	0	yes
+C07	gateguard.sh	Edit feature OFF (no-op)	0	no
+C08	task-rule-guard.sh	Write new task no draft (block, feature ON)	0	yes
+C09	task-rule-guard.sh	Write feature OFF (no-op)	0	no
+C10	draft-flow-guard.sh	Write docs/zzz-new.md no draft (exit 2, feature ON)	2	no
+C11	draft-flow-guard.sh	Write docs/draft/zzz-new.md (draft path pass)	0	no
+C12	draft-flow-guard.sh	Write feature OFF (no-op)	0	no
+C13	autonomous-action-guard.sh	Loop supabase db reset (block)	0	yes
+C14	autonomous-action-guard.sh	Normal supabase db reset (advisory, no block)	0	no
+C15	workflow-guard.sh	/finish-task stage not final (exit 2, feature ON)	2	no
+C16	workflow-guard.sh	/finish-task feature OFF (no-op)	0	no
+C17	check-md-mermaid.sh	Edit .md broken mermaid (block if mermaid avail)	0	yes
+C18	byproduct-discharge-guard.sh	Stop with red entry (exit 2)	2	no
+C19	byproduct-discharge-guard.sh	Stop clean next-actions (exit 0)	0	no
+C20	confidence-gate.sh	SubagentStop confidence 0.3 (block)	0	yes
+C21	confidence-gate.sh	SubagentStop confidence 0.9 (pass)	0	no
+C22	delegation-guard.sh	Grep protected src path (block)	0	yes
+C23	delegation-guard.sh	Glob protected src path (block)	0	yes
+C24	gateguard.sh	Bash first destructive (block, feature ON)	0	yes

package/.claude/tests/fixtures/task-71/settings-inventory.tsv

@@ -0,0 +1,37 @@
+event	matcher	hook_path	timeout	feature_flag	classification	blocker_condition	success_output_bytes	cwd_robust
+PreToolUse	Edit|Write	.claude/hooks/delegation-guard.sh Edit	5	feature_delegation_guard_enabled	blocker	main-agent (not subagent) Edit/Write whose tool_input.file_path matches protected_paths/protected code ext -> stdout {"decision":"block"} (exit 0). jq absent -> fail-open.	~3 bytes (echo '{}')	yes (config-loader CLAUDE_PROJECT_DIR/git; SCRIPT_DIR via dirname $0)
+PreToolUse	Edit|Write	.claude/hooks/gateguard.sh Edit	5	feature_gateguard_enabled	blocker	main-agent first Edit/Write to a non-excluded file_path (no <state>.cleared marker yet) -> stdout {"decision":"block"} (exit 0). 2nd time same file passes. jq absent / ECC_GATEGUARD=off -> {}.	~3 bytes ({})	yes (config-loader; SCRIPT_DIR dirname $0)
+PreToolUse	Edit|Write	.claude/hooks/task-rule-guard.sh Edit	5	feature_task_rule_guard_enabled	blocker	main-agent Write of docs/tasks/task-<id>-<slug>.md when (1) same-id task/phase file exists OR (2) no matching docs/draft -> stdout {"decision":"block"} (exit 0). Edit = advisory note only. draft Write = warn only.	~3 bytes ({}) or additionalContext JSON	yes (config-loader; SCRIPT_DIR dirname $0)
+PreToolUse	Edit|Write	.claude/hooks/draft-flow-guard.sh	5	feature_draft_flow_guard_enabled	blocker	main-agent NEW Write (file not yet existing) of docs/<basename>.md directly under docs/ (depth 1, not draft/tasks/approved_dir) with no docs/draft/<basename>.md -> exit 2 + stderr. Also exit 2 on newline in file_path (injection). jq/realpath absent -> fail-open.	0 bytes (exit 0, no stdout)	yes (project-root.sh resolve_project_root + canonicalize)
+PreToolUse	Read	.claude/hooks/delegation-guard.sh Read	5	feature_delegation_guard_enabled	blocker	main-agent Read of file under protected_paths -> stdout {"decision":"block"} (exit 0).	~3 bytes ({})	yes (config-loader; dirname $0)
+PreToolUse	Grep	.claude/hooks/delegation-guard.sh Grep	5	feature_delegation_guard_enabled	blocker	main-agent Grep over protected_paths -> stdout {"decision":"block"} (exit 0).	~3 bytes ({})	yes (config-loader; dirname $0)
+PreToolUse	Glob	.claude/hooks/delegation-guard.sh Glob	5	feature_delegation_guard_enabled	blocker	main-agent Glob over protected_paths -> stdout {"decision":"block"} (exit 0).	~3 bytes ({})	yes (config-loader; dirname $0)
+PreToolUse	Bash	.claude/hooks/autonomous-action-guard.sh	5	feature_autonomous_action_guard_enabled	blocker	Loop mode + main-agent + tool_input.command segment matches 1 of 11 autonomous-deny regex (gh pr merge / gh release / supabase deploy / vercel --prod / kubectl/terraform apply / aws delete- etc) -> stdout {"decision":"block"} (exit 0). Normal mode = additionalContext only (not block).	~3 bytes ({}) or additionalContext JSON	yes (config-loader + mode-loader; SCRIPT_DIR BASH_SOURCE)
+PreToolUse	Bash	.claude/hooks/delegation-guard.sh Bash	5	feature_delegation_guard_enabled	blocker	main-agent tool_input.command matching git-destructive (10 patterns) / protected-branch push / not in bash-whitelist -> stdout {"decision":"block"} (exit 0). jq absent -> fail-open.	~3 bytes ({})	yes (config-loader; dirname $0)
+PreToolUse	Bash	.claude/hooks/gateguard.sh Bash	5	feature_gateguard_enabled	blocker	main-agent first destructive Bash (rm -rf / git reset --hard / drop table / supabase db reset etc) with no bash-<hash>.cleared marker -> stdout {"decision":"block"} (exit 0). Non-destructive or cleared -> {}.	~3 bytes ({})	yes (config-loader; dirname $0)
+PreToolUse	Bash	.claude/hooks/workflow-guard.sh Bash	5	feature_workflow_enforcement_enabled	blocker	tool_input.command containing /finish-task <slug> when .workflow-state/<slug>.json exists AND (current_stage != final stage OR pending_findings.module_review/system_review non-empty) -> exit 2 + stdout {"decision":"block"} + stderr. State file absent / workflow_type unknown -> fail-open.	~3 bytes ({})	yes (CLAUDE_PROJECT_DIR:-pwd for config + state root)
+PreToolUse	Agent|Task	.claude/hooks/agent-marker-set.sh	5	(none - always)	observer	never blocks; writes marker file <dir>/<suffix>.lock. exit 0. (warns to stderr if run_in_background!=true)	~3 bytes ({}) + writes lock file	yes (config-loader HC_AGENT_MARKER_DIR; dirname $0)
+PreToolUse	Agent|Task	.claude/hooks/parallel-subagent-reminder.sh	5	feature_parallel_subagent_reminder_enabled	advisory	never blocks (fail-open exit 0); injects additionalContext system-reminder for parallelism/agent-type hints.	~3 bytes ({}) or additionalContext JSON	yes (CLAUDE_PROJECT_DIR/git for state_dir; SCRIPT_DIR BASH_SOURCE)
+PreToolUse	Agent|Task	.claude/hooks/reviewer-count-guard.sh	5	feature_reviewer_count_guard_enabled	advisory	never blocks (fail-open exit 0); injects additionalContext warn when session review-subagent count > review_max_count_<cat>.	~3 bytes ({}) or additionalContext JSON	yes (CLAUDE_PROJECT_DIR/git for state_dir; SCRIPT_DIR BASH_SOURCE)
+PreToolUse	*	.claude/skills/continuous-learning-v2/hooks/observe.sh	3	(none - always)	observer	never blocks; appends observation to homunculus/.../observations.jsonl. exit 0.	0 bytes stdout (writes jsonl + registry)	yes (CLAUDE_PROJECT_DIR > git remote > git toplevel)
+PostToolUse	Agent|Task	.claude/hooks/agent-marker-clear.sh	5	(none - always)	observer	never blocks; removes session/expired marker locks. exit 0.	~3 bytes ({})	yes (config-loader HC_AGENT_MARKER_DIR; dirname $0)
+PostToolUse	Edit|Write	.claude/hooks/check-md-mermaid.sh	90	feature_check_md_mermaid_enabled	blocker	After Edit/Write of .md/.mdx containing a ```mermaid fence, if mermaid parser exits non-zero -> stdout {"decision":"block"} (exit 0). Non-md / no fence / no runner -> {} (fail-open).	~3 bytes ({})	yes (project-root.sh resolve_project_root; cd project_root)
+PostToolUse	*	.claude/skills/continuous-learning-v2/hooks/observe.sh	3	(none - always)	observer	never blocks; appends observation jsonl. exit 0.	0 bytes stdout	yes (CLAUDE_PROJECT_DIR > git)
+PostToolUse	*	.claude/hooks/failure-loop-detect.sh	3	feature_failure_loop_detect_enabled	advisory	never blocks (exit 0); on 3 consecutive same-signature tool errors injects additionalContext suggesting /agent-introspect.	~3 bytes ({}) or additionalContext JSON	yes (config-loader HC_FAILURE_WINDOW_DIR; dirname $0)
+PostToolUse	*	.claude/hooks/why-x5-violation-detect.sh	3	feature_why_x5_enforcement_enabled	advisory	never blocks (exit 0); on v9 4-section format残骸 in last assistant text injects <system-reminder> to stdout. else silent.	0 bytes (silent) or system-reminder text	yes (config-loader; SCRIPT_DIR BASH_SOURCE)
+Notification	(none)	.claude/hooks/notify.sh	5	feature_notify_enabled	observer	never blocks; macOS afplay + osascript notification. no stdout. exit 0.	0 bytes stdout	yes (config-loader; dirname $0; uses pwd only for project label)
+Stop	(none)	.claude/hooks/stop.sh	5	feature_notify_enabled	observer	never blocks; macOS afplay + notification. exit 0.	0 bytes stdout	partial (config-loader robust; project label from pwd basename only - cosmetic)
+Stop	(none)	.claude/hooks/byproduct-discharge-guard.sh	5	feature_byproduct_discharge_enabled	blocker	Stop event: if next-actions.md has >=1 unprocessed 🔴 entry -> exit 2 + stderr (blocks session stop). 🟡 only -> warn exit 0. else silent. parser/file absent -> fail-open.	0 bytes stdout (exit 0) / exit 2 on block	yes (project-root.sh + CLAUDE_PROJECT_DIR override)
+Stop	(none)	.claude/hooks/loop-auto-progress-reminder.sh	5	feature_loop_mode_enforcement_enabled	advisory	never blocks; Loop mode only -> emits <system-reminder> to stdout. Normal mode no-op.	0 bytes (Normal) / system-reminder text (Loop)	yes (mode-loader + config-loader; SCRIPT_DIR BASH_SOURCE)
+Stop	(none)	.claude/hooks/loop-confirmation-detector.sh	5	feature_loop_mode_enforcement_enabled	advisory	Loop mode only; on confirmation/turn-break pattern in last assistant text emits stdout {"decision":"block"} -- but in Stop semantics this means "do NOT stop / inject reason", exit 0 (never an exit-code block). Normal mode no-op.	0 bytes (no match/Normal) / {"decision":"block"} JSON (advisory continue)	yes (mode-loader + config-loader; SCRIPT_DIR BASH_SOURCE; rejects sensitive transcript paths)
+Stop	(none)	.claude/hooks/tool-call-slip-detector.sh	5	feature_tool_call_slip_detect_enabled	advisory	mode-independent; on markup-slip痕跡 in last assistant .text emits stdout {"decision":"block"} (Stop semantics = inject reason, not exit-code block), exit 0.	0 bytes (no slip) / {"decision":"block"} JSON (advisory continue)	yes (config-loader; SCRIPT_DIR BASH_SOURCE; rejects sensitive transcript paths)
+Stop	(none)	.claude/skills/continuous-learning-v2/hooks/observe.sh	3	(none - always)	observer	never blocks; appends observation jsonl. exit 0.	0 bytes stdout	yes (CLAUDE_PROJECT_DIR > git)
+SubagentStop	(none)	.claude/hooks/confidence-gate.sh	10	feature_confidence_gate_enabled	blocker	SubagentStop for a major subagent: extracted confidence < HC_CONFIDENCE_THRESHOLD (0.6) OR regex no-match on major subagent -> stdout {"decision":"block"} (exit 0). Bypass: ECC_CONFIDENCE_GATE=off / HC_CONFIDENCE_REQUIRED=false / ECC_F3_OFF.	~3 bytes ({})	yes (config-loader; SCRIPT_DIR dirname $0)
+SubagentStop	(none)	.claude/hooks/loop-auto-progress-reminder.sh	5	feature_loop_mode_enforcement_enabled	advisory	never blocks; Loop mode only -> <system-reminder> stdout. Normal no-op.	0 bytes (Normal) / system-reminder text (Loop)	yes (mode-loader + config-loader)
+SubagentStop	(none)	.claude/skills/continuous-learning-v2/hooks/observe.sh	3	(none - always)	observer	never blocks; appends observation jsonl. exit 0.	0 bytes stdout	yes (CLAUDE_PROJECT_DIR > git)
+SessionStart	(none)	.claude/hooks/session-start-wrapper.sh	15	(none - always; orchestrates 10 child hooks)	bootstrap	never blocks; runs 10 child SessionStart hooks in parallel (init-tasks-on-start, check-required-env, improvement-proposal, mode-session-start, mode-enforce, why-x5-reminder, next-actions-surface, mode-asana-prompt, check-serena-mcp, session-help-surface), aggregates stdout/stderr. exit 0.	varies (concat of child stdout, often state/context system-reminders)	yes (CLAUDE_PROJECT_DIR cd; SCRIPT_DIR BASH_SOURCE)
+SessionStart	(none)	.claude/hooks/list-md-plan-first-reminder.sh	5	feature_task_rule_guard_enabled	bootstrap	never blocks; if drafts>=3 AND list.md task rows==0 emits <system-reminder> to stderr. else silent.	0 bytes stdout (stderr system-reminder when fired)	yes (CLAUDE_PROJECT_DIR > git > pwd)
+SessionStart	(none)	.claude/hooks/stale-harness-detect.sh	5	feature_stale_harness_detect_enabled	bootstrap	never blocks; if marker files missing OR harness_version invalid/future emits <system-reminder> to stderr. latest harness -> 0-byte silent.	0 bytes (silent when current) / stderr system-reminder	yes (CLAUDE_PROJECT_DIR > git > pwd)
+SessionStart	(none)	.claude/skills/continuous-learning-v2/hooks/observe.sh	3	(none - always)	observer	never blocks; appends observation jsonl. exit 0.	0 bytes stdout	yes (CLAUDE_PROJECT_DIR > git)
+UserPromptSubmit	(none)	.claude/hooks/context-budget.sh	5	feature_context_budget_enabled	advisory	never blocks; Loop mode only -> if context ratio >= threshold (tier 60/80/95) injects <system-reminder> to stdout (once per tier/session). Normal mode no-op.	0 bytes (below threshold/Normal) / system-reminder text	yes (config-loader; SCRIPT_DIR BASH_SOURCE)
+UserPromptSubmit	(none)	.claude/skills/continuous-learning-v2/hooks/observe.sh	3	(none - always)	observer	never blocks; appends observation jsonl. exit 0.	0 bytes stdout	yes (CLAUDE_PROJECT_DIR > git)

package/.claude/tests/fixtures/transcript-50pct.jsonl

@@ -0,0 +1,2 @@
+{"type":"user","message":{"role":"user","content":"hello"},"uuid":"u1"}
+{"type":"assistant","message":{"role":"assistant","content":[{"type":"text","text":"hi"}],"usage":{"input_tokens":100000,"cache_creation_input_tokens":50000,"cache_read_input_tokens":340000,"output_tokens":10000}},"uuid":"a1"}

package/.claude/tests/fixtures/transcript-60pct.jsonl

@@ -0,0 +1,2 @@
+{"type":"user","message":{"role":"user","content":"hello"},"uuid":"u1"}
+{"type":"assistant","message":{"role":"assistant","content":[{"type":"text","text":"hi"}],"usage":{"input_tokens":100000,"cache_creation_input_tokens":50000,"cache_read_input_tokens":450000,"output_tokens":5000}},"uuid":"a1"}

package/.claude/tests/fixtures/transcript-80pct.jsonl

@@ -0,0 +1,2 @@
+{"type":"user","message":{"role":"user","content":"hello"},"uuid":"u1"}
+{"type":"assistant","message":{"role":"assistant","content":[{"type":"text","text":"hi"}],"usage":{"input_tokens":200000,"cache_creation_input_tokens":100000,"cache_read_input_tokens":500000,"output_tokens":10000}},"uuid":"a1"}

package/.claude/tests/fixtures/transcript-95pct.jsonl

@@ -0,0 +1,2 @@
+{"type":"user","message":{"role":"user","content":"hello"},"uuid":"u1"}
+{"type":"assistant","message":{"role":"assistant","content":[{"type":"text","text":"hi"}],"usage":{"input_tokens":400000,"cache_creation_input_tokens":100000,"cache_read_input_tokens":450000,"output_tokens":10000}},"uuid":"a1"}

package/.claude/tests/fixtures/workflow-guard/case-2-mid.json

@@ -0,0 +1,21 @@
+{
+  "slug": "smoke-mid",
+  "workflow_type": "new",
+  "current_stage": "tdd",
+  "completed_stages": [
+    "requirements",
+    "basic-design",
+    "detailed-design",
+    "test-design",
+    "design-review",
+    "user-approval",
+    "task-creation"
+  ],
+  "pending_findings": {
+    "module_review": [],
+    "system_review": []
+  },
+  "skip_log": [],
+  "created_at": "2026-05-12T09:00:00Z",
+  "updated_at": "2026-05-12T12:00:00Z"
+}

package/.claude/tests/fixtures/workflow-guard/case-3-blocked.json

@@ -0,0 +1,33 @@
+{
+  "slug": "smoke-blocked",
+  "workflow_type": "new",
+  "current_stage": "finish",
+  "completed_stages": [
+    "requirements",
+    "basic-design",
+    "detailed-design",
+    "test-design",
+    "design-review",
+    "user-approval",
+    "task-creation",
+    "tdd",
+    "module-review",
+    "local-test",
+    "system-review",
+    "ci-cd",
+    "scenario-test"
+  ],
+  "pending_findings": {
+    "module_review": [
+      {
+        "id": "MR-001",
+        "severity": "CRITICAL",
+        "summary": "smoke fixture: simulated unresolved CRITICAL finding"
+      }
+    ],
+    "system_review": []
+  },
+  "skip_log": [],
+  "created_at": "2026-05-12T09:00:00Z",
+  "updated_at": "2026-05-12T15:30:00Z"
+}

package/.claude/tests/fixtures/workflow-guard/case-4-clean.json

@@ -0,0 +1,27 @@
+{
+  "slug": "smoke-clean",
+  "workflow_type": "new",
+  "current_stage": "finish",
+  "completed_stages": [
+    "requirements",
+    "basic-design",
+    "detailed-design",
+    "test-design",
+    "design-review",
+    "user-approval",
+    "task-creation",
+    "tdd",
+    "module-review",
+    "local-test",
+    "system-review",
+    "ci-cd",
+    "scenario-test"
+  ],
+  "pending_findings": {
+    "module_review": [],
+    "system_review": []
+  },
+  "skip_log": [],
+  "created_at": "2026-05-12T09:00:00Z",
+  "updated_at": "2026-05-12T16:00:00Z"
+}

package/.claude/tests/fixtures/workflow-guard/case-8-modify.json

@@ -0,0 +1,23 @@
+{
+  "slug": "smoke-modify",
+  "workflow_type": "modify",
+  "current_stage": "system-review",
+  "completed_stages": [
+    "branch-decision",
+    "checkout",
+    "recover-design",
+    "pre-test",
+    "redesign",
+    "retest-design",
+    "tdd",
+    "module-review",
+    "full-test"
+  ],
+  "pending_findings": {
+    "module_review": [],
+    "system_review": []
+  },
+  "skip_log": [],
+  "created_at": "2026-05-12T09:00:00Z",
+  "updated_at": "2026-05-12T16:00:00Z"
+}

package/.claude/tests/fixtures/workflow-guard/inputs/case-1.json

@@ -0,0 +1 @@
+{"tool_name":"Bash","tool_input":{"command":"/finish-task nonexistent-slug"}}

package/.claude/tests/fixtures/workflow-guard/inputs/case-2.json

@@ -0,0 +1 @@
+{"tool_name":"Bash","tool_input":{"command":"/finish-task smoke-mid"}}

package/.claude/tests/fixtures/workflow-guard/inputs/case-3.json

@@ -0,0 +1 @@
+{"tool_name":"Bash","tool_input":{"command":"/finish-task smoke-blocked"}}

package/.claude/tests/fixtures/workflow-guard/inputs/case-4.json

@@ -0,0 +1 @@
+{"tool_name":"Bash","tool_input":{"command":"/finish-task smoke-clean"}}

package/.claude/tests/fixtures/workflow-guard/inputs/case-5.json

@@ -0,0 +1 @@
+{"tool_name":"Bash","tool_input":{"command":"/finish-task smoke-blocked"}}

package/.claude/tests/fixtures/workflow-guard/inputs/case-6.json

@@ -0,0 +1 @@
+{"tool_name":"Edit","tool_input":{"file_path":"/tmp/foo.txt","old_string":"a","new_string":"b"}}

package/.claude/tests/fixtures/workflow-guard/inputs/case-7.json

@@ -0,0 +1 @@
+{"tool_name":"Bash","tool_input":{"command":"ls -la"}}

package/.claude/tests/fixtures/workflow-guard/inputs/case-8.json

@@ -0,0 +1 @@
+{"tool_name":"Bash","tool_input":{"command":"/finish-task smoke-modify"}}