@zalom/plastic 1.0.0-alpha.18 → 1.0.0-alpha.19

package/scripts/hook-bash-gate

@@ -0,0 +1,53 @@
+#!/usr/bin/env ruby
+# encoding: UTF-8
+# frozen_string_literal: true
+
+# PreToolUse gate for Bash (intent 27a): close the Bash-edit bypass. When auto
+# mode is armed and the active intent has not reached How (plan.md + checklist.md),
+# block Bash commands that WRITE project code outside the store.
+#
+# Reads the Claude Code PreToolUse payload as JSON on STDIN:
+#   { "tool_input": { "command": "..." }, "cwd": "..." }
+# Empty / unparseable / no command => exit 0 (allow). Conservatism is the prime
+# directive: when a command's write intent is ambiguous, ALLOW.
+#
+# Exit 0 = allow. Exit 2 = block (reason on stderr, shown to the agent).
+
+require "json"
+require_relative "lib/bridge"
+
+raw = $stdin.read rescue nil
+exit 0 if raw.nil? || raw.strip.empty?
+
+payload = JSON.parse(raw) rescue nil
+exit 0 unless payload.is_a?(Hash)
+
+command = payload.dig("tool_input", "command") || payload.dig("tool_params", "command")
+exit 0 if command.nil? || command.to_s.strip.empty?
+
+cwd = payload["cwd"]
+cwd = Dir.pwd if cwd.nil? || cwd.to_s.empty?
+
+# --- Load bridge (mirror hook-code-gate resolution) ---
+session = ENV["CLAUDE_SESSION_ID"]
+bridge_data = nil
+
+if session && !session.empty?
+  bridge_data = Bridge.read(session) if File.exist?(Bridge.path(session))
+end
+
+unless bridge_data
+  candidates = Dir.glob("/tmp/plastic-*.json").reject { |f| f.end_with?(".tmp") }
+  if candidates.any?
+    newest = candidates.max_by { |f| File.mtime(f) }
+    bridge_data = JSON.parse(File.read(newest)) rescue nil
+  end
+end
+
+exit 0 unless bridge_data
+
+reason = Bridge.bash_gate_decision(bridge_data, command, cwd: cwd)
+exit 0 unless reason
+
+$stderr.puts "PLASTIC GATE — #{reason}"
+exit 2

package/scripts/hook-session-start

@@ -172,53 +172,57 @@ if File.exist?(cache_file)
   end
 end
 
-# --- Early exit only if no PLASTIC.md ---
+# --- Assemble session context ---
 
 all_active = active + project_active
 all_future = future + project_future
-exit 0 unless plastic_md
 
 # --- Build context ---
+# PLASTIC.md conventions and intent context render only when conventions are
+# installed. Deprecation warnings and update notices render regardless, so a
+# partial install (or a missing PLASTIC.md) still surfaces critical warnings.
 
 parts = []
 
-# Conventions always loaded first
-parts << plastic_md
-parts << "\n---\n"
-
-if current_project
-  slug = current_project["slug"]
-  banner = "Project: #{slug} | Store: ~/.plastic/projects/#{slug}/store/"
-  if project_active.any? && project_active.first =~ /\[([^\]]+)\].*store\/([\w-]+)\//
-    intent_name, dir_name = $1, $2
-    intent_id = dir_name.split("--").first
-    banner += "\nActive: [#{intent_id} — #{intent_name}] | Artifacts → store/#{dir_name}/"
+if plastic_md
+  # Conventions always loaded first
+  parts << plastic_md
+  parts << "\n---\n"
+
+  if current_project
+    slug = current_project["slug"]
+    banner = "Project: #{slug} | Store: ~/.plastic/projects/#{slug}/store/"
+    if project_active.any? && project_active.first =~ /\[([^\]]+)\].*store\/([\w-]+)\//
+      intent_name, dir_name = $1, $2
+      intent_id = dir_name.split("--").first
+      banner += "\nActive: [#{intent_id} — #{intent_name}] | Artifacts → store/#{dir_name}/"
+    end
+    parts << banner + "\n"
+  else
+    parts << "PLASTIC — Global store loaded from ~/.plastic/\n"
   end
-  parts << banner + "\n"
-else
-  parts << "PLASTIC — Global store loaded from ~/.plastic/\n"
-end
 
-if all_active.any?
-  parts << "Active intents:\n"
-  all_active.each { |a| parts << a }
-  if bridge_data
-    stage = bridge_data["build"]["stage"]
-    missing = bridge_data["build"]["missing"]
-    missing_str = missing.empty? ? "none" : missing.join(", ")
-    parts << "Stage: #{stage} | Next: #{missing_str}"
+  if all_active.any?
+    parts << "Active intents:\n"
+    all_active.each { |a| parts << a }
+    if bridge_data
+      stage = bridge_data["build"]["stage"]
+      missing = bridge_data["build"]["missing"]
+      missing_str = missing.empty? ? "none" : missing.join(", ")
+      parts << "Stage: #{stage} | Next: #{missing_str}"
+    end
+    parts << ""
+  else
+    parts << "No active intents. #{future.length} future intents available.\n"
   end
-  parts << ""
-else
-  parts << "No active intents. #{future.length} future intents available.\n"
-end
 
-if stale.any?
-  parts << "\nStale future intents (untouched for days):\n"
-  stale.each do |s|
-    parts << "- #{s[:name]} (#{s[:age]} days) — consider: activate, abandon, or defer to agent"
+  if stale.any?
+    parts << "\nStale future intents (untouched for days):\n"
+    stale.each do |s|
+      parts << "- #{s[:name]} (#{s[:age]} days) — consider: activate, abandon, or defer to agent"
+    end
+    parts << "\nWhen appropriate, ask the user what to do with stale intents."
   end
-  parts << "\nWhen appropriate, ask the user what to do with stale intents."
 end
 
 if active_deprecations.any?
@@ -252,6 +256,10 @@ if update_notice
   parts.unshift("! #{update_notice}\n")
 end
 
+# Emit nothing when there is genuinely nothing to surface (no conventions,
+# no deprecations, no update notice).
+exit 0 if parts.join.strip.empty?
+
 payload = {
   "hookSpecificOutput" => {
     "hookEventName" => "SessionStart",