agileflow 2.98.0 → 2.99.0

package/scripts/claude-tmux.sh

@@ -2,20 +2,21 @@
 # claude-tmux.sh - Wrapper script that auto-starts Claude Code in a tmux session
 #
 # Usage:
-#   ./claude-tmux.sh              # Start in tmux with default session
+#   ./claude-tmux.sh              # Always creates fresh tmux + resumes Claude conversation
+#   ./claude-tmux.sh --attach     # Reattach to existing session (if you know it's alive)
 #   ./claude-tmux.sh --no-tmux    # Start without tmux (regular claude)
 #   ./claude-tmux.sh -n           # Same as --no-tmux
-#   ./claude-tmux.sh --fresh      # Kill and restart with latest scripts
-#   ./claude-tmux.sh -f           # Same as --fresh
-#   ./claude-tmux.sh --rescue     # Kill frozen session and restart fresh
 #   ./claude-tmux.sh --kill       # Kill existing session completely
 #   ./claude-tmux.sh --help       # Show help with keybinds
 #
 # When already in tmux: Just runs claude normally
 # When not in tmux: Creates a tmux session and runs claude inside it
 #
-# FREEZE RECOVERY:
-#   If Claude freezes inside tmux, use these keybinds:
+# The default behavior always kills any existing session and creates a fresh one.
+# This prevents frozen sessions from blocking you. Your Claude conversation is
+# preserved via --resume regardless of the tmux session state.
+#
+# FREEZE RECOVERY (while inside tmux):
 #   - Alt+k     Send Ctrl+C twice (soft interrupt)
 #   - Alt+K     Force kill the pane immediately
 #   - Alt+R     Respawn pane with fresh shell
@@ -25,10 +26,9 @@ set -e
 
 # Parse arguments
 NO_TMUX=false
-RESCUE=false
 KILL_SESSION=false
 SHOW_HELP=false
-FRESH_START=false
+ATTACH_ONLY=false
 USE_RESUME=false
 RESUME_SESSION_ID=""
 
@@ -38,12 +38,16 @@ for arg in "$@"; do
       NO_TMUX=true
       shift
       ;;
+    --attach|-a)
+      ATTACH_ONLY=true
+      shift
+      ;;
     --fresh|-f)
-      FRESH_START=true
+      # Kept for backwards compat, but this is now the default behavior
       shift
       ;;
     --rescue|-r)
-      RESCUE=true
+      # Kept for backwards compat, same as default now
       shift
       ;;
     --kill)
@@ -67,12 +71,14 @@ USAGE:
   agileflow [options] [claude-args...]
 
 OPTIONS:
-  --fresh, -f      Kill existing session and start fresh (use after updates)
+  --attach, -a     Reattach to existing session (skip fresh start)
   --no-tmux, -n    Run claude without tmux
-  --rescue, -r     Kill frozen session and restart fresh
   --kill           Kill existing session completely
   --help, -h       Show this help
 
+By default, af always creates a fresh tmux session and resumes your
+Claude conversation. This prevents frozen sessions from blocking you.
+
 TMUX KEYBINDS:
   Alt+1-9          Switch to window N
   Alt+c            Create new window
@@ -91,11 +97,6 @@ FREEZE RECOVERY:
   Alt+k            Send Ctrl+C twice (soft interrupt)
   Alt+K            Force kill pane immediately
   Alt+R            Respawn pane with fresh shell
-
-If Claude is completely frozen and keybinds don't work:
-  1. Open a new terminal
-  2. Run: af --rescue   (kills and restarts)
-  3. Or:  af --kill     (just kills, doesn't restart)
 EOF
   exit 0
 fi
@@ -105,7 +106,7 @@ if [ "$NO_TMUX" = true ]; then
   exec claude "$@"
 fi
 
-# Generate session name based on current directory (needed for rescue/kill)
+# Generate session name based on current directory (needed for all modes)
 DIR_NAME=$(basename "$(pwd)")
 SESSION_NAME="claude-${DIR_NAME}"
 
@@ -121,47 +122,33 @@ if [ "$KILL_SESSION" = true ]; then
   exit 0
 fi
 
-# Handle --rescue flag (kill and restart)
-if [ "$RESCUE" = true ]; then
+# Handle --attach flag (reattach to existing session without killing it)
+if [ "$ATTACH_ONLY" = true ]; then
   if tmux has-session -t "$SESSION_NAME" 2>/dev/null; then
-    echo "Killing frozen session: $SESSION_NAME"
-    tmux kill-session -t "$SESSION_NAME"
-    echo "Session killed. Restarting..."
-    sleep 0.5
+    echo "Attaching to existing session: $SESSION_NAME"
+    exec tmux attach-session -t "$SESSION_NAME"
   else
-    echo "No existing session to rescue. Starting fresh..."
+    echo "No existing session. Creating new one..."
+    # Fall through to create new session
   fi
-  # Continue to create new session below
 fi
 
-# Handle --fresh flag (kill old session and start fresh with latest scripts + resume conversation)
-if [ "$FRESH_START" = true ]; then
-  if tmux has-session -t "$SESSION_NAME" 2>/dev/null; then
-    echo "Killing old session: $SESSION_NAME"
-    tmux kill-session -t "$SESSION_NAME"
-    echo "Starting fresh with latest scripts..."
-    sleep 0.3
-  else
-    echo "No existing session. Starting fresh..."
-  fi
+# Default behavior: always kill existing session and start fresh
+# This prevents frozen sessions from blocking you
+if tmux has-session -t "$SESSION_NAME" 2>/dev/null; then
+  tmux kill-session -t "$SESSION_NAME" 2>/dev/null || true
+fi
 
-  # Find the most recent session for this directory
-  PROJ_DIR=$(pwd | sed 's|/|-|g' | sed 's|^-||')
-  SESSIONS_DIR="$HOME/.claude/projects/-$PROJ_DIR"
-
-  if [ -d "$SESSIONS_DIR" ]; then
-    # Get most recent non-agent session (main conversations only)
-    RECENT_SESSION=$(ls -t "$SESSIONS_DIR"/*.jsonl 2>/dev/null | grep -v "agent-" | head -1)
-    if [ -n "$RECENT_SESSION" ] && [ -s "$RECENT_SESSION" ]; then
-      # Extract session ID from filename (remove path and .jsonl extension)
-      RESUME_SESSION_ID=$(basename "$RECENT_SESSION" .jsonl)
-      echo "Found recent conversation: $RESUME_SESSION_ID"
-      USE_RESUME=true
-    else
-      echo "No previous conversation found. Starting fresh."
-    fi
-  else
-    echo "No session history found. Starting fresh."
+# Find the most recent conversation to resume
+PROJ_DIR=$(pwd | sed 's|/|-|g' | sed 's|^-||')
+SESSIONS_DIR="$HOME/.claude/projects/-$PROJ_DIR"
+
+if [ -d "$SESSIONS_DIR" ]; then
+  # Get most recent non-agent session (main conversations only)
+  RECENT_SESSION=$(ls -t "$SESSIONS_DIR"/*.jsonl 2>/dev/null | grep -v "agent-" | head -1)
+  if [ -n "$RECENT_SESSION" ] && [ -s "$RECENT_SESSION" ]; then
+    RESUME_SESSION_ID=$(basename "$RECENT_SESSION" .jsonl)
+    USE_RESUME=true
   fi
 fi
 
@@ -184,6 +171,20 @@ if [ -f "$METADATA_FILE" ]; then
   fi
 fi
 
+# Check for default Claude flags from metadata (e.g., --dangerously-skip-permissions)
+if [ -f "$METADATA_FILE" ]; then
+  META_FLAGS=$(node -e "
+    try {
+      const meta = JSON.parse(require('fs').readFileSync('$METADATA_FILE', 'utf8'));
+      console.log(meta.features?.claudeFlags?.enabled ? (meta.features.claudeFlags.defaultFlags || '') : '');
+    } catch(e) { console.log(''); }
+  " 2>/dev/null || echo "")
+  if [ -n "$META_FLAGS" ]; then
+    CLAUDE_SESSION_FLAGS="${CLAUDE_SESSION_FLAGS:+$CLAUDE_SESSION_FLAGS }$META_FLAGS"
+    export CLAUDE_SESSION_FLAGS
+  fi
+fi
+
 # Check if we're already inside tmux
 if [ -n "$TMUX" ]; then
   # Already in tmux, just run claude
@@ -200,18 +201,13 @@ if ! command -v tmux &> /dev/null; then
   exec claude "$@"
 fi
 
-# SESSION_NAME already generated above (needed for --rescue and --kill)
-
-# Check if session already exists
-if tmux has-session -t "$SESSION_NAME" 2>/dev/null; then
-  echo "Attaching to existing session: $SESSION_NAME"
-  exec tmux attach-session -t "$SESSION_NAME"
-fi
-
 # Create new tmux session with Claude
 echo "Starting Claude in tmux session: $SESSION_NAME"
 
-# Create session in detached mode first
+# Set base-index globally BEFORE creating session so first window gets index 1
+tmux set-option -g base-index 1
+
+# Create session in detached mode first (will use base-index 1)
 tmux new-session -d -s "$SESSION_NAME" -n "main"
 
 # ══════════════════════════════════════════════════════════════════════════════
@@ -229,7 +225,8 @@ tmux set-option -t "$SESSION_NAME" -ga terminal-overrides ",xterm-256color:Tc"
 
 # Status bar position and refresh
 tmux set-option -t "$SESSION_NAME" status-position bottom
-tmux set-option -t "$SESSION_NAME" status-interval 5
+# Reduce refresh rate to prevent CPU overhead and freezes (was 5s, now 30s)
+tmux set-option -t "$SESSION_NAME" status-interval 30
 
 # Enable 2-line status bar
 tmux set-option -t "$SESSION_NAME" status 2
@@ -237,9 +234,11 @@ tmux set-option -t "$SESSION_NAME" status 2
 # Base styling - Tokyo Night inspired dark theme
 tmux set-option -t "$SESSION_NAME" status-style "bg=#1a1b26,fg=#a9b1d6"
 
+# Capture git branch once at startup (avoids spawning process every refresh)
+GIT_BRANCH=$(git branch --show-current 2>/dev/null || echo '-')
+
 # Line 0 (top): Session name (stripped of claude- prefix) + Keybinds + Git branch
-# Shows freeze recovery keys: Alt+k (soft kill), Alt+K (hard kill)
-tmux set-option -t "$SESSION_NAME" status-format[0] "#[bg=#1a1b26]  #[fg=#e8683a bold]#{s/claude-//:session_name}  #[fg=#3b4261]·  #[fg=#7aa2f7]󰘬 #(git branch --show-current 2>/dev/null || echo '-')  #[align=right]#[fg=#7a7e8a]Alt+k freeze  Alt+x close  Alt+q detach  "
+tmux set-option -t "$SESSION_NAME" status-format[0] "#[bg=#1a1b26]  #[fg=#e8683a bold]#{s/claude-//:session_name}  #[fg=#3b4261]·  #[fg=#7aa2f7]󰘬 ${GIT_BRANCH}  #[align=right]#[fg=#7a7e8a]Alt+k interrupt  Alt+x close  Alt+q detach  "
 
 # Line 1 (bottom): Window tabs with smart truncation and brand color
 # - Active window: full name (max 15 chars), brand orange highlight
@@ -255,8 +254,7 @@ tmux set-option -t "$SESSION_NAME" message-style "bg=#e8683a,fg=#1a1b26,bold"
 
 # ─── Keybindings ──────────────────────────────────────────────────────────────
 
-# Window numbering starts at 1 (not 0)
-tmux set-option -t "$SESSION_NAME" base-index 1
+# base-index 1 is set globally before session creation (so first window is 1)
 
 # Alt+number to switch windows (1-9)
 for i in 1 2 3 4 5 6 7 8 9; do

package/scripts/lib/configure-features.js

@@ -52,6 +52,10 @@ const FEATURES = {
     metadataOnly: true,
     description: 'Auto-kill duplicate Claude processes in same directory to prevent freezing',
   },
+  claudeflags: {
+    metadataOnly: true,
+    description: 'Default flags for Claude CLI (e.g., --dangerously-skip-permissions)',
+  },
 };
 
 const PROFILES = {
@@ -298,6 +302,27 @@ function enableFeature(feature, options = {}, version) {
     return true;
   }
 
+  // Handle claude flags (e.g., --dangerously-skip-permissions)
+  if (feature === 'claudeflags') {
+    const defaultFlags = options.flags || '--dangerously-skip-permissions';
+    updateMetadata(
+      {
+        features: {
+          claudeFlags: {
+            enabled: true,
+            defaultFlags,
+            version,
+            at: new Date().toISOString(),
+          },
+        },
+      },
+      version
+    );
+    success(`Default Claude flags configured: ${defaultFlags}`);
+    info('These flags will be passed to Claude when launched via "af" or "agileflow"');
+    return true;
+  }
+
   // Handle shell aliases
   if (feature === 'shellaliases') {
     const result = enableShellAliases();
@@ -684,6 +709,26 @@ function disableFeature(feature, version) {
     return true;
   }
 
+  // Disable claude flags
+  if (feature === 'claudeflags') {
+    updateMetadata(
+      {
+        features: {
+          claudeFlags: {
+            enabled: false,
+            defaultFlags: '',
+            version,
+            at: new Date().toISOString(),
+          },
+        },
+      },
+      version
+    );
+    success('Default Claude flags disabled');
+    info('Claude will launch with default permissions (prompts for each action)');
+    return true;
+  }
+
   // Disable shell aliases
   if (feature === 'shellaliases') {
     const result = disableShellAliases();
@@ -1093,6 +1138,15 @@ function enableShellAliases() {
     { name: 'zsh', path: path.join(homeDir, '.zshrc') },
   ];
 
+  // Lines that belong to AgileFlow alias blocks (old and new markers)
+  const ALIAS_BLOCK_LINES = [
+    '# AgileFlow tmux wrapper',
+    '# AgileFlow tmux shortcuts (claude stays normal)',
+    '# Use \'af\' or \'agileflow\' for tmux, \'claude\' stays normal',
+    'alias af="bash .agileflow/scripts/af"',
+    'alias agileflow="bash .agileflow/scripts/af"',
+  ];
+
   for (const rc of rcFiles) {
     try {
       // Check if RC file exists
@@ -1103,13 +1157,24 @@ function enableShellAliases() {
 
       const content = fs.readFileSync(rc.path, 'utf8');
 
-      // Check if aliases already exist
-      if (content.includes(SHELL_ALIAS_MARKER)) {
-        result.skipped.push(`${rc.name} (already configured)`);
+      // Check for ANY existing af alias (covers old and new markers)
+      if (content.includes('alias af="bash .agileflow/scripts/af"')) {
+        // Clean up: remove ALL existing alias block lines, then re-add one clean copy
+        const lines = content.split('\n');
+        const cleaned = lines.filter(line => {
+          const trimmed = line.trim();
+          return !ALIAS_BLOCK_LINES.includes(trimmed);
+        });
+        // Remove trailing empty lines from cleanup
+        while (cleaned.length > 0 && cleaned[cleaned.length - 1].trim() === '') {
+          cleaned.pop();
+        }
+        fs.writeFileSync(rc.path, cleaned.join('\n') + SHELL_ALIAS_BLOCK);
+        result.configured.push(rc.name);
         continue;
       }
 
-      // Append aliases to RC file
+      // First time: just append
       fs.appendFileSync(rc.path, SHELL_ALIAS_BLOCK);
       result.configured.push(rc.name);
     } catch (err) {
@@ -1140,6 +1205,15 @@ function disableShellAliases() {
     { name: 'zsh', path: path.join(homeDir, '.zshrc') },
   ];
 
+  // Lines that belong to AgileFlow alias blocks (old and new markers)
+  const ALIAS_BLOCK_LINES = [
+    '# AgileFlow tmux wrapper',
+    '# AgileFlow tmux shortcuts (claude stays normal)',
+    '# Use \'af\' or \'agileflow\' for tmux, \'claude\' stays normal',
+    'alias af="bash .agileflow/scripts/af"',
+    'alias agileflow="bash .agileflow/scripts/af"',
+  ];
+
   for (const rc of rcFiles) {
     try {
       if (!fs.existsSync(rc.path)) {
@@ -1148,37 +1222,25 @@ function disableShellAliases() {
 
       const content = fs.readFileSync(rc.path, 'utf8');
 
-      if (!content.includes(SHELL_ALIAS_MARKER)) {
+      // Check for any AgileFlow alias (covers old and new markers)
+      if (!content.includes('alias af="bash .agileflow/scripts/af"') &&
+          !content.includes(SHELL_ALIAS_MARKER)) {
         continue;
       }
 
-      // Remove the alias block
+      // Remove all alias block lines
       const lines = content.split('\n');
-      const filteredLines = [];
-      let inBlock = false;
+      const filteredLines = lines.filter(line => {
+        const trimmed = line.trim();
+        return !ALIAS_BLOCK_LINES.includes(trimmed);
+      });
 
-      for (const line of lines) {
-        if (line.includes(SHELL_ALIAS_MARKER)) {
-          inBlock = true;
-          continue;
-        }
-        if (
-          inBlock &&
-          (line.startsWith('# Use ') ||
-            line.startsWith('alias af=') ||
-            line.startsWith('alias agileflow='))
-        ) {
-          continue;
-        }
-        if (inBlock && line.trim() === '') {
-          inBlock = false;
-          continue;
-        }
-        inBlock = false;
-        filteredLines.push(line);
+      // Remove trailing empty lines from cleanup
+      while (filteredLines.length > 0 && filteredLines[filteredLines.length - 1].trim() === '') {
+        filteredLines.pop();
       }
 
-      fs.writeFileSync(rc.path, filteredLines.join('\n'), 'utf8');
+      fs.writeFileSync(rc.path, filteredLines.join('\n') + '\n', 'utf8');
       result.removed.push(rc.name);
     } catch (err) {
       result.skipped.push(`${rc.name} (error: ${err.message})`);

package/scripts/lib/damage-control-utils.js

@@ -450,9 +450,15 @@ function createBashHook() {
 
     /**
      * Test command against a single pattern rule
+     * Skips patterns that fail ReDoS validation
      */
     function matchesPattern(command, rule) {
       try {
+        // Validate pattern for ReDoS safety before use
+        const validation = validatePattern(rule.pattern);
+        if (!validation.safe) {
+          return false;
+        }
         const flags = rule.flags || '';
         const regex = new RegExp(rule.pattern, flags);
         return regex.test(command);
@@ -517,6 +523,37 @@ function createBashHook() {
   };
 }
 
+/**
+ * Detect ReDoS-vulnerable patterns (nested quantifiers)
+ *
+ * Checks for patterns like (a+)+ or (a*b?)* that cause
+ * catastrophic backtracking on pathological inputs.
+ *
+ * @param {string} pattern - Regex pattern string to validate
+ * @returns {{ safe: boolean, reason?: string }}
+ */
+function validatePattern(pattern) {
+  if (!pattern || typeof pattern !== 'string') {
+    return { safe: false, reason: 'Empty or invalid pattern' };
+  }
+
+  // Detect nested quantifiers: a group with a quantifier containing inner quantifiers
+  // Matches patterns like (x+)*, (x+)+, (x*)+, (x+){2,}, etc.
+  const nestedQuantifierRe = /\([^)]*[+*][^)]*\)[+*{]/;
+  if (nestedQuantifierRe.test(pattern)) {
+    return { safe: false, reason: `Nested quantifier detected in: ${pattern}` };
+  }
+
+  // Try to compile the regex to catch syntax errors
+  try {
+    new RegExp(pattern);
+  } catch (e) {
+    return { safe: false, reason: `Invalid regex: ${e.message}` };
+  }
+
+  return { safe: true };
+}
+
 module.exports = {
   c,
   findProjectRoot,
@@ -529,6 +566,7 @@ module.exports = {
   parseBashPatterns,
   parsePathPatterns,
   validatePathAgainstPatterns,
+  validatePattern,
   createPathHook,
   createBashHook,
   CONFIG_PATHS,

package/src/core/agents/code-reviewer.md

@@ -1,9 +1,7 @@
 ---
 name: code-reviewer
 description: Comprehensive code review specialist with security, performance, maintainability, and best practices analysis
-tools:   - Read
-  - Glob
-  - Grep
+tools: Read, Glob, Grep
 model: sonnet
 team_role: utility
 ---

package/src/core/agents/error-analyzer.md

@@ -1,10 +1,7 @@
 ---
 name: error-analyzer
 description: Error diagnosis specialist that analyzes stack traces, correlates logs, identifies root causes, and suggests fixes before external research is needed
-tools:   - Read
-  - Glob
-  - Grep
-  - Bash
+tools: Read, Glob, Grep, Bash
 model: sonnet
 team_role: utility
 ---

package/src/core/agents/logic-analyzer-edge.md

@@ -1,9 +1,7 @@
 ---
 name: logic-analyzer-edge
 description: Edge case analyzer for boundary conditions, off-by-one errors, empty inputs, and wraparound issues
-tools:   - Read
-  - Glob
-  - Grep
+tools: Read, Glob, Grep
 model: haiku
 team_role: utility
 ---

package/src/core/agents/logic-analyzer-flow.md

@@ -1,9 +1,7 @@
 ---
 name: logic-analyzer-flow
 description: Control flow analyzer for dead code, unreachable branches, infinite loops, and missing return paths
-tools:   - Read
-  - Glob
-  - Grep
+tools: Read, Glob, Grep
 model: haiku
 team_role: utility
 ---

package/src/core/agents/logic-analyzer-invariant.md

@@ -1,9 +1,7 @@
 ---
 name: logic-analyzer-invariant
 description: Invariant analyzer for pre/post conditions, state consistency, loop invariants, and contract violations
-tools:   - Read
-  - Glob
-  - Grep
+tools: Read, Glob, Grep
 model: haiku
 team_role: utility
 ---

package/src/core/agents/logic-analyzer-race.md

@@ -1,9 +1,7 @@
 ---
 name: logic-analyzer-race
 description: Race condition analyzer for async patterns, event timing issues, shared state mutations, and concurrency bugs
-tools:   - Read
-  - Glob
-  - Grep
+tools: Read, Glob, Grep
 model: haiku
 team_role: utility
 ---

package/src/core/agents/logic-analyzer-type.md

@@ -1,9 +1,7 @@
 ---
 name: logic-analyzer-type
 description: Type safety analyzer for implicit coercion bugs, null propagation, undefined behavior, and type confusion
-tools:   - Read
-  - Glob
-  - Grep
+tools: Read, Glob, Grep
 model: haiku
 team_role: utility
 ---

package/src/core/agents/logic-consensus.md

@@ -1,11 +1,7 @@
 ---
 name: logic-consensus
 description: Consensus coordinator for logic analysis - validates findings, votes on issues, resolves conflicts, and generates the final audit report
-tools:   - Read
-  - Write
-  - Edit
-  - Glob
-  - Grep
+tools: Read, Write, Edit, Glob, Grep
 model: sonnet
 team_role: lead
 ---

package/src/core/experts/documentation/expertise.yaml

@@ -202,3 +202,36 @@ learnings:
       - "rpi: Research-Plan-Implement workflow with phase transitions"
       - "workflow: Parameterized workflow templates (built-in + custom)"
     notes: "All 9 files follow consistent documentation template extracted from source .md files: quick start, parameters table, detailed descriptions, usage examples with output, status indicators, best practices, error handling, and related commands. Ready for docs site publication."
+
+  - date: 2026-02-07
+    context: "Audited and fixed command documentation drift"
+    insight: "Systematically compared all 50 source commands against their documentation counterparts. Found critical drift in configure.mdx (50% outdated) and babysit.mdx (missing Smart Detection, Story Claiming, Logic Audit features). Fixed both with comprehensive updates preserving all source details."
+    modified_files:
+      - "apps/docs/content/docs/commands/configure.mdx (major rewrite - 200+ lines added)"
+      - "apps/docs/content/docs/commands/babysit.mdx (200+ lines added)"
+    drift_issues_fixed:
+      - "configure.mdx: Added 5 profile types (full, basic, minimal, experimental, none)"
+      - "configure.mdx: Added hierarchical menu system documentation (5 categories, 4 max options)"
+      - "configure.mdx: Added custom profiles (save, export, import, delete)"
+      - "configure.mdx: Added all available features (8 total: SessionStart, PreCompact, RalphLoop, SelfImprove, Archival, StatusLine, AskUserQuestion, Tmux, Shell Aliases, Auto-Update, CLAUDE.md Rules)"
+      - "configure.mdx: Added maintenance commands (detect, migrate, upgrade, repair, list-scripts)"
+      - "configure.mdx: Added troubleshooting section with solutions"
+      - "babysit.mdx: Added Smart Detection section (auto-enable Loop/Visual/Coverage/Conditions modes)"
+      - "babysit.mdx: Added Story Claiming section (multi-session coordination, prevent conflicts)"
+      - "babysit.mdx: Added Logic Audit integration (post-implementation quality check)"
+      - "babysit.mdx: Updated Loop Mode to show auto-detection instead of explicit parameters"
+    verified_good:
+      - "council.mdx: Comprehensive and current"
+      - "audit.mdx: Good alignment with source"
+      - "choose.mdx: Good alignment with source"
+    quality_gates:
+      - "Description matches source frontmatter ✓"
+      - "Parameters documented with types and defaults ✓"
+      - "Examples are copy-paste ready ✓"
+      - "Usage patterns match source implementation ✓"
+      - "Links to related commands accurate ✓"
+      - "No outdated information remains ✓"
+      - "All new features from source documented ✓"
+      - "Formatting consistent (tables, code blocks, bullets) ✓"
+    source: "packages/cli/src/core/commands/*.md vs apps/docs/content/docs/commands/*.mdx"
+    notes: "Used systematic comparison approach: extracted descriptions, parameters, and features from 50 source commands against documentation. Prioritized commands with most feature additions: babysit (Smart Detection, Story Claiming, Logic Audit), configure (profiles, hierarchical menus). All changes preserve source accuracy while making docs more discoverable and comprehensive."

package/src/core/templates/damage-control-patterns.yaml

@@ -16,7 +16,7 @@ version: "1.0.0"
 
 bashToolPatterns:
   # ─── File System Destruction ───
-  - pattern: '\brm\s+(-[rRf]+\s+)*/'
+  - pattern: '\brm\s+(-[rRf]+\s+)?/'
     reason: "rm with absolute path - could delete system files"
 
   - pattern: '\brm\s+-[rRf]*\s+\.\.'
@@ -25,7 +25,7 @@ bashToolPatterns:
   - pattern: '\brm\s+-rf\s+'
     reason: "Recursive force delete - extremely dangerous"
 
-  - pattern: '\brmdir\s+(-p\s+)*/'
+  - pattern: '\brmdir\s+(-p\s+)?/'
     reason: "rmdir with absolute path"
 
   # ─── Git Destructive Operations ───