@windyroad/itil 0.60.0 → 0.61.0-preview.1033

package/.claude-plugin/plugin.json

@@ -497,5 +497,5 @@
     }
   },
   "name": "wr-itil",
-  "version": "0.60.0"
+  "version": "0.61.0"
 }

package/hooks/itil-correction-detect.sh

@@ -16,6 +16,24 @@
 # Forward-compat: advertises /wr-itil:capture-problem (ADR-032 — not
 # yet shipped) with /wr-itil:manage-problem as the today-target
 # fallback. When capture-problem ships the wording stays valid.
+#
+# P430 / STORY-047 — WR_SUPPRESS_CORRECTION_DETECT is a DISTINCT guard
+# class, not a split of WR_SUPPRESS_OVERSIGHT_NUDGE. That guard means
+# "an absent user cannot ratify"; this one means "nobody authored a
+# correction". A machine-authored iter prompt carrying an ordinary
+# imperative ("DO NOT skip the gate") is not a correction signal, and
+# conflating the two would couple this gate's suppression to the
+# ADR-068 / ADR-047 oversight-nudge contract. Provenance is a property
+# of the spawning process, so the dispatcher asserts it — the hook does
+# not sniff content for it.
+
+# Machine-authored prompt: no correction happened and no user is present to act
+# on the nudge. Ahead of the jq parses so the suppressed path costs one string
+# comparison, and before any marker write so the once-per-session budget is not
+# burned by a prompt that produced no output.
+if [ "${WR_SUPPRESS_CORRECTION_DETECT:-}" = "1" ]; then
+  exit 0
+fi
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # shellcheck source=lib/session-marker.sh

package/hooks/test/itil-correction-detect.bats

@@ -20,9 +20,15 @@ setup() {
   REPO_ROOT="$(cd "$(dirname "$BATS_TEST_FILENAME")/../../../.." && pwd)"
   HOOK="$REPO_ROOT/packages/itil/hooks/itil-correction-detect.sh"
   SID="itil-correction-test-$$-$RANDOM"
+  # An AFK iter exports WR_SUPPRESS_CORRECTION_DETECT=1, which the hook
+  # self-suppresses on. Unset it so the positive-detection cases below do not
+  # false-RED when this suite runs inside such an iter (the P391 hermeticity
+  # class). Suppression is asserted per-invocation via `run env ...` instead.
+  unset WR_SUPPRESS_CORRECTION_DETECT
 }
 
 teardown() {
+  unset WR_SUPPRESS_CORRECTION_DETECT
   rm -f "/tmp/itil-correction-detect-announced-${SID}"
   rm -f "/tmp/itil-correction-detect-announced-${SID}-alt"
 }
@@ -134,3 +140,50 @@ run_hook() {
   [ -z "$output" ]
   [ ! -f "/tmp/itil-correction-detect-announced-${SID}" ]
 }
+
+# --- P430 / STORY-047: prompt-authorship guard --------------------------------
+# A framework-authored iter prompt carrying an ordinary imperative ("DO NOT
+# skip the gate") is not a correction — nobody is correcting anything, and the
+# absent user cannot act on the nudge. Provenance is a property of the spawning
+# process, so the dispatcher asserts it via env var rather than the hook
+# guessing from content.
+
+run_hook_env() {
+  local guard="$1" sid="$2" prompt="$3"
+  echo "{\"session_id\":\"$sid\",\"prompt\":$(printf '%s' "$prompt" | jq -Rs .)}" \
+    | env WR_SUPPRESS_CORRECTION_DETECT="$guard" bash "$HOOK"
+}
+
+@test "correction-detect: WR_SUPPRESS_CORRECTION_DETECT=1 suppresses a correction prompt" {
+  run run_hook_env 1 "$SID" "DO NOT skip the architect gate"
+  [ "$status" -eq 0 ]
+  [ -z "$output" ]
+}
+
+@test "correction-detect: suppressed path writes no announcement marker" {
+  run run_hook_env 1 "$SID" "FFS, you didn't run the test"
+  [ "$status" -eq 0 ]
+  [ -z "$output" ]
+  # The once-per-session budget must survive a prompt that produced no output,
+  # or the first real correction in the orchestrator session emits only the
+  # terse reminder.
+  [ ! -f "/tmp/itil-correction-detect-announced-${SID}" ]
+}
+
+@test "correction-detect: same prompt still fires with the guard unset" {
+  run run_hook "$SID" "DO NOT skip the architect gate"
+  [ "$status" -eq 0 ]
+  [ "${#output}" -gt 300 ]
+  [[ "$output" == *"MANDATORY"* ]]
+}
+
+@test "correction-detect: only the literal value 1 suppresses" {
+  for v in 0 true yes ""; do
+    run run_hook_env "$v" "$SID-$RANDOM" "FFS, that's wrong"
+    [ "$status" -eq 0 ]
+    [ -n "$output" ] || {
+      echo "guard value '$v' wrongly suppressed"
+      false
+    }
+  done
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/itil",
-  "version": "0.60.0",
+  "version": "0.61.0-preview.1033",
   "description": "ITIL-aligned IT service management for Claude Code (problem, and future incident/change skills)",
   "bin": {
     "windyroad-itil": "./bin/install.mjs"

package/skills/work-problems/SKILL.md

@@ -582,6 +582,16 @@ export WR_SUPPRESS_PENDING_QUESTIONS=1
 # pending-questions guard above (JTBD-006 friction guard).
 export WR_SUPPRESS_OVERSIGHT_NUDGE=1
 
+# AFK-iter correction-signal suppression (P430 / JTBD-006): the iteration prompt
+# this loop writes is machine-authored, so an ordinary imperative in it ("DO NOT
+# skip the gate") is not a user correcting anything, and no user is present to
+# act on the capture nudge. itil-correction-detect.sh self-suppresses when this
+# env var is set. A real correction is typed into the ORCHESTRATOR session,
+# where this is unset, so P078 is preserved. Distinct guard class from the
+# oversight nudge above — that one means "cannot ratify", this one means
+# "nobody authored a correction".
+export WR_SUPPRESS_CORRECTION_DETECT=1
+
 # Project-scoped governance plugins are NOT loaded by headless `claude -p`
 # (P382): it activates only USER-scoped enabledPlugins, and project activation
 # is trust-gated (headless skips trust), so `--setting-sources user,project`