@zalom/plastic 1.8.0 → 1.9.0

package/README.md

@@ -183,8 +183,9 @@ behind releases are part of the repository, not a hidden process.
 
 ## Conventions
 
-Plastic conventions live in `PLASTIC.md`, distributed to `~/.plastic/PLASTIC.md`
-and overwritten on every update. Project-specific rules live in `AGENTS.md`.
+The always-on core conventions live in `PLASTIC.md`, distributed to `~/.plastic/PLASTIC.md`
+and overwritten on every update. Deeper doctrine lives in the `plastic-conventions` skill,
+loaded on demand by the skills that need it. Project-specific rules live in `AGENTS.md`.
 Run `plastic-doctor` to check installation health; it compares files against
 the manifests, checks store state, and runs automatically after every update.
 

package/agents/plastic-intent-curator.md

@@ -27,9 +27,9 @@ You are the Plastic Intent Curator. Your role is to maintain the health and navi
 5. On a terminal-state transition (Completed OR Abandoned), do these things:
    a. Author a real `outcome.md` in the intent directory from `~/.plastic/templates/outcome.md`, with the frontmatter `disposition: delivered` for a completed intent or `disposition: abandoned` for an abandoned one. `outcome.md` is MANDATORY at every terminal, delivered and abandoned alike: on abandon it records the abandonment reason and replaces the scaffolded placeholder sentinel (never leave `outcome.md` a placeholder at a terminal).
    b. Call `plastic-intent-ending` for the terminal-transition close (INDEX move, savepoint `Done` bookend, store commit, disarm, and the QMD reindex last): `ruby ~/.plastic/scripts/end-intent --store <store> --id <id> --disposition delivered|abandoned`, then follow that skill's own disarm and reindex steps. Never restate the INDEX/savepoint/reindex one-liners here.
-6. Structural maintenance is move-and-record, and it is NEVER done without its receipt: remove the misplaced section, file, or ref from its artifact, then create or append `revisions.md` in that intent directory (copy the FORM from `~/.plastic/templates/revisions.md`) IN THE SAME PASS as the edit. If you cannot write `revisions.md` for any reason (permissions, a read-only path), you MUST NOT make the structural edit either - report the blocker instead of leaving an unrecorded change (this mirrors the tool-side rule: project-links, rebuild-graph, and restore-intent-v1 refuse rather than write a change with no receipt; you hold yourself to the same rule by hand). One entry per relocated item, newest at the bottom: a `## Revision vN - YYYY-MM-DD-HH:MM` header, a one-sentence `Why` ending with `[rule: <tag>]`, `Prior location`, and either `Content held` (verbatim) or a one-line `Change` for a frontmatter edit. For a stray file, embed its full content and delete the original. The violation-tag catalog is canonical in PLASTIC.md. A graph edit must move TOWARD ground truth (drop a dangling/false edge, add a reciprocity-forced or documented-real one) and must NEVER invent a relationship - "might be related" is never a valid `[rule:]` reason (PLASTIC.md > WORK vs MAINTENANCE).
+6. Structural maintenance is move-and-record, and it is NEVER done without its receipt: remove the misplaced section, file, or ref from its artifact, then create or append `revisions.md` in that intent directory (copy the FORM from `~/.plastic/templates/revisions.md`) IN THE SAME PASS as the edit. If you cannot write `revisions.md` for any reason (permissions, a read-only path), you MUST NOT make the structural edit either - report the blocker instead of leaving an unrecorded change (this mirrors the tool-side rule: project-links, rebuild-graph, and restore-intent-v1 refuse rather than write a change with no receipt; you hold yourself to the same rule by hand). One entry per relocated item, newest at the bottom: a `## Revision vN - YYYY-MM-DD-HH:MM` header, a one-sentence `Why` ending with `[rule: <tag>]`, `Prior location`, and either `Content held` (verbatim) or a one-line `Change` for a frontmatter edit. For a stray file, embed its full content and delete the original. The violation-tag catalog is canonical in `plastic-conventions > references/maintenance-and-revisions.md`. A graph edit must move TOWARD ground truth (drop a dangling/false edge, add a reciprocity-forced or documented-real one) and must NEVER invent a relationship - "might be related" is never a valid `[rule:]` reason (`plastic-conventions > references/maintenance-and-revisions.md`, WORK vs MAINTENANCE).
 7. Before performing structural maintenance on ANY intent that is NOT the one your own session is currently delivering under its own held delivery lock, you must:
-   a. Check the target's lock freshness: `ruby ~/.plastic/scripts/plastic-lock status --intent-dir <target-intent-dir>` and read the `lock_fresh` field of its JSON output. If `true`, DEFER: make no edit to that intent, and report it as skipped (an active delivery is in progress). This is DETECT-ONLY - you never acquire, create, or hold any lock of your own for maintenance (PLASTIC.md > WORK vs MAINTENANCE; there is exactly one lock in Plastic, the delivery lock).
+   a. Check the target's lock freshness: `ruby ~/.plastic/scripts/plastic-lock status --intent-dir <target-intent-dir>` and read the `lock_fresh` field of its JSON output. If `true`, DEFER: make no edit to that intent, and report it as skipped (an active delivery is in progress). This is DETECT-ONLY - you never acquire, create, or hold any lock of your own for maintenance (`plastic-conventions > references/maintenance-and-revisions.md`, WORK vs MAINTENANCE; there is exactly one lock in Plastic, the delivery lock).
    b. Require a clean store working tree before starting: `git -C ~/.plastic status --porcelain` (or the project store's own root, if not global) must be empty. If it is not, STOP and report the dirty paths rather than risk sweeping an unrelated concurrent change into your own commit; do not proceed until the tree is clean.
    c. Create a fresh branch from the current tip of that repo's main: `git -C <repo-root> checkout -b maintenance/curator-<UTC-timestamp> main`.
    d. Make the scoped edit plus its `revisions.md` receipt (step 6 above), touching nothing else.

package/deprecations.yml

@@ -1,6 +1,6 @@
 # Plastic deprecation notices
 # Each entry is shown to the user during SessionStart.
-# See PLASTIC.md "Deprecation Process" for the full convention.
+# See the plastic-releasing skill for the full convention.
 #
 # Schema:
 #   id: unique-slug (used for dismissal tracking)
@@ -11,4 +11,12 @@
 #   removal: semver where feature is removed
 #   link: optional URL to migration guide
 
-deprecations: []
+deprecations:
+  - id: plastic-reference-md-absorbed
+    severity: info
+    summary: "PLASTIC-reference.md has been absorbed into the plastic-conventions skill and removed; its content now lives in that skill's reference chapters."
+    migration_steps:
+      - "No action is required. Running plastic update removes the leftover ~/.plastic/PLASTIC-reference.md automatically."
+      - "If you hand-copied or hand-edited that file, delete your own copy; it is no longer read by Plastic."
+    introduced: "1.9.0"
+    removal: "1.11.0"

package/hooks/{links-gate → edit-gates}

@@ -1,3 +1,3 @@
 #!/bin/bash
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-exec ruby "$SCRIPT_DIR/../scripts/hook-links-gate"
+exec ruby "$SCRIPT_DIR/../scripts/hook-edit-gates"

package/hooks/hooks.json

@@ -35,38 +35,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" code-gate",
-            "statusMessage": "Checking lifecycle gate..."
-          },
-          {
-            "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" lock-gate",
-            "statusMessage": "Checking lock gate..."
-          }
-        ]
-      },
-      {
-        "matcher": "Write|Edit",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" savepoint-pre",
-            "statusMessage": "Recording stage start..."
-          },
-          {
-            "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" links-gate",
-            "statusMessage": "Checking Links gate..."
-          }
-        ]
-      },
-      {
-        "matcher": "Write|Edit|mcp__serena__replace_content|mcp__serena__replace_symbol_body|mcp__serena__insert_after_symbol|mcp__serena__insert_before_symbol|mcp__serena__safe_delete_symbol|mcp__serena__rename_symbol",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" create-gate",
-            "statusMessage": "Checking create gate..."
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" edit-gates",
+            "statusMessage": "Checking Plastic gates..."
           }
         ]
       },
@@ -79,16 +49,6 @@
             "statusMessage": "Checking lifecycle gate..."
           }
         ]
-      },
-      {
-        "matcher": "Bash|Read|Grep|Glob",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" retrieval-gate",
-            "statusMessage": "Checking retrieval gate..."
-          }
-        ]
       }
     ],
     "PostToolUse": [
@@ -139,8 +99,8 @@
         "hooks": [
           {
             "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" qmd-search",
-            "statusMessage": "Searching QMD..."
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-hook\" power-tools",
+            "statusMessage": "Checking power tools..."
           }
         ]
       }

package/hooks/power-tools

@@ -0,0 +1,8 @@
+#!/bin/bash
+# power-tools mandate hook launcher (intents 66, 66b, 187, 246). No-op when there is no global store.
+GLOBAL_INDEX="$HOME/.plastic/INDEX.md"
+if [ ! -f "$GLOBAL_INDEX" ]; then
+  exit 0
+fi
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+exec ruby "$SCRIPT_DIR/../scripts/hook-power-tools"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zalom/plastic",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "Intent-driven idea development system for AI coding agents",
   "type": "module",
   "bin": {
@@ -38,7 +38,6 @@
     "agents/",
     "templates/",
     "PLASTIC.md",
-    "PLASTIC-reference.md",
     "deprecations.yml"
   ]
 }

package/scripts/codex-hook

@@ -5,8 +5,8 @@
 # Usage: codex-hook <gate>
 #   file-mutation gates: code-gate | lock-gate | savepoint-pre | gate-check | create-gate | links-gate
 #   live-state hooks (intent 199): session-start | check-update | continue |
-#     future-intent-check | auto-arm | qmd-search | savepoint
-#   shell-tool gates (intent 203): bash-gate | retrieval-gate
+#     future-intent-check | auto-arm | power-tools | savepoint
+#   shell-tool gate (intent 203): bash-gate
 #
 # The Codex input adapter (intent 102, extended by 199 and 203). Reads a Codex
 # hook stdin payload once. Three shapes exist and the gate name alone selects
@@ -20,17 +20,17 @@
 # that hook (hooks/<name>), which is already harness-agnostic (resolves
 # ~/.plastic off $HOME, reads only the common stdin fields the guide confirms
 # Codex shares with Claude for these three events), so the body is reused, not
-# rewritten (D3). The shell-tool gates (bash-gate, retrieval-gate) report
-# tool_name: "Bash" with the command in tool_input.command, but MUST NOT be
-# routed through ApplyPatchEnvelope.parse below: a plain shell command has no
+# rewritten (D3). The shell-tool gate (bash-gate) reports tool_name: "Bash" with
+# the command in tool_input.command, but MUST NOT be routed through
+# ApplyPatchEnvelope.parse below: a plain shell command has no
 # *** Begin Patch/*** End Patch envelope, so it would parse to an empty op list
 # and hit this file's own `exit 0 if ops.empty?` line, silently allowing every
-# Bash call and reopening the exact hole intent 203 closes. So these two exec
-# the SAME scripts/hook-bash-gate / scripts/hook-retrieval-gate files Claude
-# already runs, unmodified, the identical "drive the body, relay its output"
-# pattern used for the live-state hooks. The one adaptation shared by both the
-# live-state and shell-tool paths is threading the payload's session_id into
-# CLAUDE_CODE_SESSION_ID, since Codex's own process env never carries it, plus
+# Bash call and reopening the exact hole intent 203 closes. So it execs the SAME
+# scripts/hook-bash-gate file Claude already runs, unmodified, the identical
+# "drive the body, relay its output" pattern used for the live-state hooks. The
+# one adaptation shared by both the live-state and shell-tool paths is threading
+# the payload's session_id into CLAUDE_CODE_SESSION_ID, since Codex's own
+# process env never carries it, plus
 # a bounded timeout: hooks/check-update backgrounds a real npm network call
 # without redirecting its output away from the inherited stdout/stderr pipes,
 # and Codex invokes hooks synchronously, so without a bound a slow network call
@@ -50,9 +50,9 @@ require_relative "lib/links_gate"
 # caller that merges the dispatcher's own stdout and stderr.
 $stdout.sync = true
 
-STATE_HOOKS = %w[session-start check-update continue future-intent-check auto-arm qmd-search savepoint].freeze
+STATE_HOOKS = %w[session-start check-update continue future-intent-check auto-arm power-tools savepoint].freeze
 STATE_TIMEOUT = 5
-SHELL_HOOKS = %w[bash-gate retrieval-gate].freeze
+SHELL_HOOKS = %w[bash-gate].freeze
 
 gate = ARGV[0].to_s
 raw = ($stdin.read rescue nil)
@@ -78,20 +78,15 @@ if STATE_HOOKS.include?(gate)
 end
 
 if SHELL_HOOKS.include?(gate)
-  # bash-gate / retrieval-gate (intent 203): a shell command has no apply_patch
-  # diff envelope, so this branch execs the SAME scripts/hook-bash-gate /
-  # scripts/hook-retrieval-gate files Claude already runs, unmodified, and
-  # relays their exit code and stderr. It must never fall through to
-  # ApplyPatchEnvelope.parse below (see header comment).
+  # bash-gate (intent 203): a shell command has no apply_patch diff envelope, so
+  # this branch execs the SAME scripts/hook-bash-gate file Claude already runs,
+  # unmodified, and relays its exit code and stderr. It must never fall through
+  # to ApplyPatchEnvelope.parse below (see header comment).
   cwd = payload["cwd"].to_s
   cwd = Dir.pwd if cwd.empty? || !Dir.exist?(cwd)
   env = { "CLAUDE_CODE_SESSION_ID" => (session.empty? ? nil : session) }
   script = File.join(__dir__, "hook-#{gate}")
   argv = [script]
-  # hook-retrieval-gate reads plastic_home off ARGV[0] (mirrors hooks/retrieval-gate's
-  # own launcher, which passes "$HOME/.plastic"); hook-bash-gate takes no args, it
-  # resolves Dir.home directly.
-  argv << ENV.fetch("PLASTIC_HOME") { File.join(Dir.home, ".plastic") } if gate == "retrieval-gate"
   out, err, status = begin
     Timeout.timeout(STATE_TIMEOUT) { Open3.capture3(env, RbConfig.ruby, *argv, stdin_data: raw, chdir: cwd) }
   rescue StandardError

package/scripts/doctor.rb

@@ -560,7 +560,7 @@ class Doctor
         fixable: true,
         fix_hint: "Dispatch plastic-store-curating to relocate each unsanctioned section into the " \
                   "intent's revisions.md via move-and-record (a missing required section is restored " \
-                  "or reprojected instead); see PLASTIC.md > Structural maintenance and revisions.md"
+                  "or reprojected instead); see plastic-conventions > references/maintenance-and-revisions.md"
       )
     end
 
@@ -929,7 +929,7 @@ end
       "project-links --intent <id> --apply` over running project-links directly: it detects " \
       "(never acquires) the target's delivery lock, requires a clean store working tree, and " \
       "commits the scoped change plus its revisions.md receipt as one merged operation " \
-      "(PLASTIC.md > WORK vs MAINTENANCE)."
+      "(plastic-conventions > references/maintenance-and-revisions.md)."
     )
   end
 
@@ -1229,7 +1229,7 @@ end
       "Every sources/chain id resolves to a real intent (I4)",
       "Dispatch plastic-store-curating to record the dangling sources/chain edge as a " \
       "broken-source/broken-chain move-and-record entry in the intent's revisions.md (see " \
-      "PLASTIC.md > Structural maintenance and revisions.md), or restore the missing intent"
+      "plastic-conventions > references/maintenance-and-revisions.md), or restore the missing intent"
     )
     checks
   end
@@ -1347,6 +1347,12 @@ end
       )
     end
 
+    # claude_hooks_implemented (intent 244): the edit-path gates now live as
+    # branches inside one dispatcher (scripts/hook-edit-gates), which is
+    # exactly the shape that let links-gate ship registered and dead on
+    # Codex (intent 200's failure class, one level up).
+    checks << claude_hooks_implemented_check
+
     # hooks_registered — settings.json has Plastic hooks for required events
     settings_path = File.join(agent_dir, "settings.json")
     settings = read_json_safe(settings_path)
@@ -1437,6 +1443,82 @@ end
     checks
   end
 
+  # claude_hooks_implemented (intent 244, the Claude twin of intent 200's Codex
+  # check): the edit-path gates now live as branches inside one dispatcher,
+  # which is exactly the shape that let links-gate ship registered and dead on
+  # Codex. HookRegistry::GATE_TOOLS is the registry side; scripts/hook-edit-gates
+  # is the implementation side. Checked in BOTH directions, so a registered gate
+  # with no branch (always allows, silently) and a branch nobody registers
+  # (dead code) are both reported.
+  #
+  # Read as plain text, never required: the dispatcher has top-level side effects
+  # (it reads $stdin and exits), the same reason codex_dispatcher_gate_names reads
+  # scripts/codex-hook as text.
+  def claude_dispatcher_gate_names(source)
+    case_start = source.index(/^\s*case gate\b/)
+    return nil unless case_start
+
+    case_body = source[case_start..-1]
+    end_idx = case_body.index(/^\s*end\b/)
+    scanned = end_idx ? case_body[0...end_idx] : case_body
+    names = scanned.scan(/^\s*when\s+"([^"]+)"/).flatten.uniq
+    names.empty? ? nil : names
+  end
+
+  def claude_hooks_implemented_check
+    dispatcher_path = File.join(plastic_home, "scripts", "hook-edit-gates")
+
+    unless File.exist?(dispatcher_path)
+      return check(
+        category: "agent_registration", name: "claude_hooks_implemented", status: "fail",
+        message: "scripts/hook-edit-gates not found at #{tilde(dispatcher_path)}; cannot verify " \
+                 "the edit-path gate registry and dispatcher agree",
+        fixable: true, fix_hint: "Re-run the Plastic installer"
+      )
+    end
+
+    dispatcher_names = claude_dispatcher_gate_names(File.read(dispatcher_path))
+
+    if dispatcher_names.nil?
+      return check(
+        category: "agent_registration", name: "claude_hooks_implemented", status: "fail",
+        message: "Could not read any gate names out of #{tilde(dispatcher_path)}: the `case gate` " \
+                 "statement no longer matches the shape this check expects, so the registry was " \
+                 "never actually checked against the real dispatcher. Update " \
+                 "claude_dispatcher_gate_names in doctor.rb to the file's new shape.",
+        fixable: false
+      )
+    end
+
+    registry_names = HookRegistry::GATE_TOOLS.keys
+    missing_branch = registry_names - dispatcher_names
+    dead_branch = dispatcher_names - registry_names
+
+    if missing_branch.empty? && dead_branch.empty?
+      return check(
+        category: "agent_registration", name: "claude_hooks_implemented", status: "pass",
+        message: "Every registered edit-path gate has a scripts/hook-edit-gates branch, and every " \
+                 "dispatcher branch is registered"
+      )
+    end
+
+    details = missing_branch.map do |name|
+      "#{name} is in HookRegistry::GATE_TOOLS but scripts/hook-edit-gates has no branch for it, " \
+        "so the dispatcher skips it on every edit and it never blocks anything"
+    end
+    details += dead_branch.map do |name|
+      "#{name} has a branch in scripts/hook-edit-gates but is not in HookRegistry::GATE_TOOLS, so " \
+        "the dispatcher never reaches it and it is dead code"
+    end
+
+    check(
+      category: "agent_registration", name: "claude_hooks_implemented", status: "fail",
+      message: "The edit-path gate registry and scripts/hook-edit-gates disagree on " \
+               "#{details.size} gate(s)",
+      details: details, fixable: false
+    )
+  end
+
   # Plastic skills install as ~/.claude/skills/plastic-<name>/SKILL.md. Pass if at
   # least one such skill is present.
   def flat_skills_check(agent_dir, installer_flag)

package/scripts/hook-code-gate

@@ -2,7 +2,7 @@
 # encoding: UTF-8
 # frozen_string_literal: true
 
-# Usage: hook-code-gate <file_path>
+# Usage: hook-code-gate <file_path> [session_id] [content]
 # PreToolUse gate. Composes two independent block rules; EITHER blocks the edit:
 #   - Stage rule (intent 27): when auto mode is armed and the active intent has not
 #     reached How (plan.md + checklist.md), block edits to project code outside the store.
@@ -12,39 +12,24 @@
 #
 # Exit 0 = allow. Exit 2 = block (reason on stderr, shown to the agent).
 # No bridge = allow. Each rule fails open on its own conditions (see bridge.rb).
+#
+# Thin CLI wrapper (intent 244): the gate logic itself lives in
+# scripts/lib/edit_gates.rb, shared with the merged Claude dispatcher
+# (scripts/hook-edit-gates) so the two harnesses cannot drift.
 
-require_relative "lib/bridge"
+require_relative "lib/edit_gates"
 
 file_path = ARGV[0]
 exit 0 unless file_path && !file_path.empty?
 
 session = (ARGV[1] unless ARGV[1].to_s.empty?) || ENV["CLAUDE_CODE_SESSION_ID"]
 
-# Auditable escape (intent 150, mirrors the Bash gate's intent 108 D7): a trailing
-# `# plastic-ok` in the new Write/Edit content allows the edit and logs it, so a
-# deliberately sanctioned code edit no longer needs the Bash-funneling workaround.
-new_content = ARGV[2]
-if new_content && Bridge::PLASTIC_OK_RE.match?(new_content.chomp)
-  begin
-    require "fileutils"
-    log = File.join(Dir.home, ".plastic", ".cache", "gate-escapes.log")
-    FileUtils.mkdir_p(File.dirname(log))
-    File.open(log, "a") do |io|
-      io.puts("#{Time.now.utc.iso8601}\t#{session}\t#{file_path}")
-    end
-  rescue StandardError
-    # the escape still applies; logging is best-effort
-  end
-  exit 0
-end
-
-# --- Load bridge (shared resolution; stdin session_id -> CLAUDE_CODE_SESSION_ID -> /tmp scan) ---
-bridge_data = Bridge.discover_bridge(session: session, cwd: file_path, edited_path: file_path)
-exit 0 unless bridge_data
-
-reason = Bridge.code_gate_decision(bridge_data, file_path) ||
-         Bridge.worktree_gate_decision(bridge_data, file_path, current_session: session)
-exit 0 unless reason
+ctx = EditGates::Context.new(
+  tool_name: "Write", session: session, gate_path: file_path, file_path: file_path,
+  content: ARGV[2], harness: "claude",
+)
 
-$stderr.puts "PLASTIC GATE — #{reason}"
+outcome = EditGates.code_gate(ctx)
+exit 0 unless outcome
+outcome.lines.each { |line| $stderr.puts line }
 exit 2

package/scripts/hook-create-gate

@@ -26,9 +26,15 @@
 #   Pathless MCP mutation:  validate the CURRENT on-disk file (the PostToolUse
 #                           gate-check backstop validates the result); a
 #                           missing file blocks (fail-safe).
+#
+# Thin CLI wrapper (intent 244): the gate logic itself lives in
+# scripts/lib/edit_gates.rb, shared with the merged Claude dispatcher
+# (scripts/hook-edit-gates) so the two harnesses cannot drift. Deliberately
+# WITHOUT a top-level rescue, matching this script's behavior before the
+# extraction: an internal exception here has never been caught.
 
 require "json"
-require_relative "lib/intent_validator"
+require_relative "lib/edit_gates"
 
 raw = $stdin.read rescue nil
 exit 0 if raw.nil? || raw.strip.empty?
@@ -36,60 +42,7 @@ exit 0 if raw.nil? || raw.strip.empty?
 payload = JSON.parse(raw) rescue nil
 exit 0 unless payload.is_a?(Hash)
 
-path = payload.dig("tool_input", "file_path") || payload.dig("tool_params", "file_path")
-exit 0 if path.nil? || path.to_s.strip.empty?
-
-# Precise path matcher: the target must be an intent file inside its own
-# equally-named dir. Never matches sibling lifecycle files (spec.md, etc.) or
-# unrelated store files.
-abs = File.expand_path(path)
-dir = File.dirname(abs)
-is_intent_file = dir.match?(%r{/store/[^/]+--[^/]+\z}) &&
-                 File.basename(abs) == "#{File.basename(dir)}.md"
-exit 0 unless is_intent_file
-
-input = payload["tool_input"] || payload["tool_params"] || {}
-content = input["content"]
-old_string = input["old_string"]
-
-def block!(lines)
-  Array(lines).each { |l| $stderr.puts l }
-  exit 2
-end
-
-result =
-  if !content.nil?
-    # Write: validate the proposed content (intent 60b, unchanged).
-    IntentValidator.validate_content(content)
-  elsif !old_string.nil?
-    # Edit (intent 108, D7): simulate the replacement on the on-disk file and
-    # validate the RESULT, so an Edit can no longer sneak an intent file past
-    # the validator.
-    unless File.exist?(abs)
-      block!("PLASTIC CREATE GATE — #{File.basename(abs)} does not exist; " \
-             "create intents via new-intent / plastic-intent-creating.")
-    end
-    current = File.read(abs)
-    unless current.include?(old_string)
-      exit 0 # the Edit tool itself will fail; nothing lands, nothing to judge
-    end
-    simulated = input["replace_all"] ? current.gsub(old_string, input["new_string"].to_s)
-                                     : current.sub(old_string, input["new_string"].to_s)
-    IntentValidator.validate_content(simulated)
-  else
-    # Pathless mutation (MCP symbolic edits): the proposal is not visible at
-    # PreToolUse. Judge the CURRENT file: valid -> allow (the PostToolUse
-    # gate-check backstop validates the result), invalid/missing -> block.
-    unless File.exist?(abs)
-      block!("PLASTIC CREATE GATE — #{File.basename(abs)}: cannot read proposed " \
-             "content and no file exists; refusing to allow an unvalidated intent write.")
-    end
-    IntentValidator.validate_content(File.read(abs))
-  end
-
-exit 0 if result[:ok]
-
-$stderr.puts "PLASTIC CREATE GATE — #{File.basename(abs)} is not a valid intent:"
-result[:errors].each { |e| $stderr.puts "  #{e}" }
-$stderr.puts "Create intents via new-intent / plastic-intent-creating; do not hand-author them."
+outcome = EditGates.create_gate(EditGates.context_from(payload))
+exit 0 unless outcome
+outcome.lines.each { |line| $stderr.puts line }
 exit 2

package/scripts/hook-edit-gates

@@ -0,0 +1,58 @@
+#!/usr/bin/env ruby
+# encoding: UTF-8
+# frozen_string_literal: true
+
+# The merged Claude PreToolUse edit-path dispatcher (intent 244). One registered
+# hook, one Ruby process, one stdin parse, five gates in-process, in the fixed
+# order savepoint-pre, lock-gate, code-gate, links-gate, create-gate (spec D-a).
+# The first deny ends evaluation and its own shape is reproduced exactly: stderr
+# plus exit 2 for code-gate/links-gate/create-gate, stdout permissionDecision
+# JSON plus exit 0 for lock-gate (spec D-b). savepoint-pre runs first so its
+# `started` ledger append stays unconditional, including on a call another gate
+# then blocks (spec D-c).
+#
+# Fail-open everywhere (spec D-i): each gate runs inside its own rescue in
+# EditGates.dispatch, and this file's top level rescues to exit 0, so a gate bug
+# never denies and never silences a sibling gate.
+#
+# LOAD-BEARING SHAPE: doctor's claude_hooks_implemented_check reads THIS FILE as
+# plain text and extracts the `when "<gate>"` labels of the `case gate` statement
+# below, because a script with top-level side effects can never be required to
+# introspect it (the same technique intent 200 used for scripts/codex-hook). If
+# the case statement is reshaped, update that check in scripts/doctor.rb in the
+# same change, or it will fail loudly by design.
+
+require "json"
+require_relative "lib/edit_gates"
+
+def route(gate, ctx)
+  case gate
+  when "savepoint-pre" then EditGates.savepoint_pre(ctx)
+  when "lock-gate"     then EditGates.lock_gate(ctx)
+  when "code-gate"     then EditGates.code_gate(ctx)
+  when "links-gate"    then EditGates.links_gate(ctx)
+  when "create-gate"   then EditGates.create_gate(ctx)
+  end
+end
+
+begin
+  raw = begin
+    $stdin.read
+  rescue StandardError
+    nil
+  end
+  exit 0 if raw.nil? || raw.strip.empty?
+
+  payload = begin
+    JSON.parse(raw)
+  rescue StandardError
+    nil
+  end
+  exit 0 unless payload.is_a?(Hash)
+
+  exit EditGates.dispatch(ctx: EditGates.context_from(payload), route: method(:route))
+rescue StandardError => e
+  # Dispatcher-internal failure: never impersonate a deny (spec D-i).
+  $stderr.puts "plastic edit-gates error: #{e.message}"
+  exit 0
+end

package/scripts/hook-links-gate

@@ -13,9 +13,13 @@
 #   { "tool_input": { "file_path":, "content": | "old_string"/"new_string"/"replace_all": } }
 # Exit 0 = allow (including every "cannot judge" case). Exit 2 = deny (message
 # on stderr).
+#
+# Thin CLI wrapper (intent 244): the gate logic itself lives in
+# scripts/lib/edit_gates.rb, shared with the merged Claude dispatcher
+# (scripts/hook-edit-gates) so the two harnesses cannot drift.
 
 require "json"
-require_relative "lib/links_gate"
+require_relative "lib/edit_gates"
 
 begin
   raw = begin
@@ -32,36 +36,9 @@ begin
   end
   exit 0 unless payload.is_a?(Hash)
 
-  path = payload.dig("tool_input", "file_path") || payload.dig("tool_params", "file_path")
-  exit 0 if path.to_s.strip.empty?
-
-  abs = File.expand_path(path)
-  exit 0 unless LinksGate.intent_file?(abs)
-
-  input = payload["tool_input"] || payload["tool_params"] || {}
-  content = input["content"]
-  old_string = input["old_string"]
-
-  before_content = File.exist?(abs) ? File.read(abs) : ""
-
-  after_content =
-    if !content.nil?
-      content
-    elsif !old_string.nil?
-      exit 0 unless before_content.include?(old_string) # the Edit tool itself will fail; nothing to judge
-      input["replace_all"] ? before_content.gsub(old_string, input["new_string"].to_s)
-                            : before_content.sub(old_string, input["new_string"].to_s)
-    else
-      exit 0 # pathless mutation (no visible proposal); cannot judge, allow
-    end
-
-  plastic_home = ENV.fetch("PLASTIC_HOME") { File.join(Dir.home, ".plastic") }
-
-  reason = LinksGate.decision(file_path: abs, before_content: before_content,
-                               after_content: after_content, plastic_home: plastic_home)
-  exit 0 unless reason
-
-  $stderr.puts reason
+  outcome = EditGates.links_gate(EditGates.context_from(payload))
+  exit 0 unless outcome
+  outcome.lines.each { |line| $stderr.puts line }
   exit 2
 rescue => e
   # Hook-internal failure only: do NOT impersonate a user-deny. Log and fail open