aw-ecc 1.4.21 → 1.4.25

package/scripts/cursor-aw-home/hooks.json

@@ -3,14 +3,14 @@
   "hooks": {
     "sessionStart": [
       {
-        "command": "node .cursor/hooks/session-start.js",
+        "command": "bash -lc \"for candidate in \\\"$PWD/.cursor/hooks/session-start.sh\\\" \\\"$HOME/.cursor/hooks/session-start.sh\\\"; do if [ -f \\\"$candidate\\\" ]; then exec bash \\\"$candidate\\\"; fi; done; exit 0\"",
         "event": "sessionStart",
         "description": "Load previous context and detect environment"
       }
     ],
     "sessionEnd": [
       {
-        "command": "node .cursor/hooks/session-end.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"session-end.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "sessionEnd",
         "description": "Persist session state and evaluate patterns"
       }
@@ -22,91 +22,91 @@
         "description": "Block git hook-bypass flag to protect pre-commit, commit-msg, and pre-push hooks from being skipped"
       },
       {
-        "command": "node .cursor/hooks/before-shell-execution.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"before-shell-execution.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "beforeShellExecution",
         "description": "Tmux dev server blocker, tmux reminder, git push review"
       }
     ],
     "afterShellExecution": [
       {
-        "command": "node .cursor/hooks/after-shell-execution.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"after-shell-execution.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "afterShellExecution",
         "description": "PR URL logging, build analysis"
       }
     ],
     "afterFileEdit": [
       {
-        "command": "node .cursor/hooks/after-file-edit.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"after-file-edit.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "afterFileEdit",
         "description": "Auto-format, TypeScript check, console.log warning"
       }
     ],
     "beforeMCPExecution": [
       {
-        "command": "node .cursor/hooks/before-mcp-execution.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"before-mcp-execution.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "beforeMCPExecution",
         "description": "MCP audit logging and untrusted server warning"
       }
     ],
     "afterMCPExecution": [
       {
-        "command": "node .cursor/hooks/after-mcp-execution.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"after-mcp-execution.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "afterMCPExecution",
         "description": "MCP result logging"
       }
     ],
     "beforeReadFile": [
       {
-        "command": "node .cursor/hooks/before-read-file.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"before-read-file.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "beforeReadFile",
         "description": "Warn when reading sensitive files (.env, .key, .pem)"
       }
     ],
     "beforeSubmitPrompt": [
       {
-        "command": "node .cursor/hooks/before-submit-prompt.js",
+        "command": "bash -lc \"for candidate in \\\"$PWD/.cursor/hooks/before-submit-prompt.sh\\\" \\\"$HOME/.cursor/hooks/before-submit-prompt.sh\\\"; do if [ -f \\\"$candidate\\\" ]; then exec bash \\\"$candidate\\\"; fi; done; exit 0\"",
         "event": "beforeSubmitPrompt",
         "description": "Detect secrets in prompts (sk-, ghp_, AKIA patterns)"
       }
     ],
     "subagentStart": [
       {
-        "command": "node .cursor/hooks/subagent-start.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"subagent-start.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "subagentStart",
         "description": "Log agent spawning for observability"
       }
     ],
     "subagentStop": [
       {
-        "command": "node .cursor/hooks/subagent-stop.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"subagent-stop.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "subagentStop",
         "description": "Log agent completion"
       }
     ],
     "beforeTabFileRead": [
       {
-        "command": "node .cursor/hooks/before-tab-file-read.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"before-tab-file-read.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "beforeTabFileRead",
         "description": "Block Tab from reading secrets (.env, .key, .pem, credentials)"
       }
     ],
     "afterTabFileEdit": [
       {
-        "command": "node .cursor/hooks/after-tab-file-edit.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"after-tab-file-edit.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "afterTabFileEdit",
         "description": "Auto-format Tab edits"
       }
     ],
     "preCompact": [
       {
-        "command": "node .cursor/hooks/pre-compact.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"pre-compact.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "preCompact",
         "description": "Save state before context compaction"
       }
     ],
     "stop": [
       {
-        "command": "node .cursor/hooks/stop.js",
+        "command": "node -e \"const fs=require('fs');const path=require('path');const os=require('os');const scriptName=\\\"stop.js\\\";const candidates=[path.join(process.cwd(), '.cursor', 'hooks', scriptName),path.join(os.homedir(), '.cursor', 'hooks', scriptName)];const target=candidates.find(candidate => fs.existsSync(candidate));if(!target) process.exit(0);require(target)\"",
         "event": "stop",
         "description": "Console.log audit on all modified files"
       }

package/scripts/cursor-aw-hooks/adapter.js

@@ -6,6 +6,7 @@
  */
 
 const { execFileSync } = require('child_process');
+const fs = require('fs');
 const path = require('path');
 
 const MAX_STDIN = 1024 * 1024;
@@ -22,7 +23,18 @@ function readStdin() {
 }
 
 function getPluginRoot() {
-  return path.resolve(__dirname, '..', '..');
+  const homeStyleRoot = path.resolve(__dirname, '..');
+  const repoStyleRoot = path.resolve(__dirname, '..', '..');
+
+  if (
+    fs.existsSync(path.join(repoStyleRoot, 'package.json'))
+    && fs.existsSync(path.join(repoStyleRoot, 'scripts', 'hooks'))
+    && fs.existsSync(path.join(repoStyleRoot, '.cursor', 'hooks'))
+  ) {
+    return repoStyleRoot;
+  }
+
+  return homeStyleRoot;
 }
 
 function transformToClaude(cursorInput, overrides = {}) {
@@ -83,12 +95,31 @@ function runManagedCommand(command, args, stdinData) {
 }
 
 function runExistingHook(scriptName, stdinData) {
-  const scriptPath = path.join(getPluginRoot(), 'scripts', 'hooks', scriptName);
+  const root = getPluginRoot();
+  const candidates = [
+    path.join(root, 'scripts', 'hooks', scriptName),
+    path.join(root, 'hooks', scriptName),
+  ];
+  const scriptPath = candidates.find(candidate => fs.existsSync(candidate)) || candidates[0];
   return runManagedCommand('node', [scriptPath], stdinData);
 }
 
 function runManagedShellHook(relativeScriptPath, stdinData) {
-  const scriptPath = path.join(getPluginRoot(), relativeScriptPath);
+  const root = getPluginRoot();
+  const normalized = String(relativeScriptPath || '').replace(/\\/g, '/');
+  const fallbackCandidates = [
+    normalized,
+    normalized.replace(/^\.cursor\//, ''),
+    normalized.replace(/^scripts\//, ''),
+    normalized.replace(/^hooks\//, ''),
+    path.posix.join('.cursor', normalized),
+    path.posix.join('scripts', normalized),
+    path.posix.join('hooks', normalized),
+  ];
+  const scriptPath = fallbackCandidates
+    .map(candidate => path.join(root, candidate))
+    .find(candidate => fs.existsSync(candidate))
+    || path.join(root, normalized);
   return runManagedCommand('bash', [scriptPath], stdinData);
 }
 

package/scripts/cursor-aw-hooks/aw-phase-definitions.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+
+const {
+  SHARED_AW_PHASE_STEPS: CURSOR_AW_PHASE_STEPS,
+  getSharedAwPhaseSteps: getCursorAwPhaseSteps,
+} = require('./shared/aw-phase-definitions');
+
+module.exports = {
+  CURSOR_AW_PHASE_STEPS,
+  getCursorAwPhaseSteps,
+};

package/scripts/cursor-aw-hooks/before-submit-prompt.js

@@ -2,7 +2,7 @@
 const { readStdin, runManagedShellHook } = require('./adapter');
 
 function emitAwPromptReminder(raw) {
-  const result = runManagedShellHook('.cursor/hooks/shared/user-prompt-submit.sh', raw);
+  const result = runManagedShellHook('scripts/hooks/shared/user-prompt-submit.sh', raw);
   if (result.stderr) {
     process.stderr.write(result.stderr);
   }

package/scripts/cursor-aw-hooks/before-submit-prompt.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+RAW="$(cat || true)"
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+RESULT="$(printf '%s' "$RAW" | node "$SCRIPT_DIR/before-submit-prompt.js" 2>&1 1>/tmp/aw_cursor_before_submit_stdout.$$)"
+STATUS=$?
+STDOUT_CONTENT="$(cat /tmp/aw_cursor_before_submit_stdout.$$ 2>/dev/null || true)"
+rm -f /tmp/aw_cursor_before_submit_stdout.$$
+
+if [ -n "$RESULT" ]; then
+  printf '%s\n' "$RESULT" >&2
+fi
+
+printf '%s' "${STDOUT_CONTENT:-$RAW}"
+exit "$STATUS"

package/scripts/cursor-aw-hooks/session-start.sh

@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+RAW="$(cat || true)"
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+RESULT="$(printf '%s' "$RAW" | bash "$SCRIPT_DIR/shared/session-start.sh")"
+
+if [ -z "$RESULT" ]; then
+  printf '%s' "$RAW"
+  exit 0
+fi
+
+JSON_CONTEXT="$(
+  printf '%s' "$RESULT" | node -e '
+    let input = "";
+    process.stdin.setEncoding("utf8");
+    process.stdin.on("data", chunk => input += chunk);
+    process.stdin.on("end", () => {
+      try {
+        const parsed = JSON.parse(input || "{}");
+        const context =
+          (parsed && parsed.hookSpecificOutput && parsed.hookSpecificOutput.additionalContext) ||
+          parsed.additional_context ||
+          "";
+        if (typeof context === "string" && context.trim()) {
+          process.stdout.write(JSON.stringify({ additional_context: context }, null, 2) + "\n");
+          return;
+        }
+      } catch {}
+      process.stdout.write(process.env.ECC_FALLBACK_RAW || "");
+    });
+  ' ECC_FALLBACK_RAW="$RAW"
+)"
+
+printf '%s' "$JSON_CONTEXT"

package/scripts/hooks/session-start-rules-context.sh

@@ -2,4 +2,11 @@
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-exec bash "$SCRIPT_DIR/shared/user-prompt-submit.sh"
+REMINDER="$(bash "$SCRIPT_DIR/shared/user-prompt-submit.sh" || true)"
+
+if [[ -z "${REMINDER}" ]]; then
+  exit 0
+fi
+
+JSON_REMINDER="$(printf '%s' "$REMINDER" | python3 -c 'import json, sys; print(json.dumps(sys.stdin.read()))')"
+printf '{"hookSpecificOutput":{"hookEventName":"UserPromptSubmit","additionalContext":%s}}\n' "$JSON_REMINDER"

package/scripts/hooks/shared/aw-phase-definitions.js

@@ -6,6 +6,7 @@ const SHARED_AW_PHASE_STEPS = Object.freeze({
       runner: 'shell',
       relativeScriptPath: '.cursor/hooks/shared/session-start.sh',
       payloadMode: 'raw',
+      outputMode: 'cursor-session-start',
     },
   ],
   'user-prompt-submit': [
@@ -157,24 +158,6 @@ const SHARED_AW_PHASE_STEPS = Object.freeze({
   ],
 });
 
-/**
- * Canonical string constants for all AW hook phase names.
- * Use these instead of raw string literals to get typo-safety and IDE
- * auto-complete in files that call runNamedCursorAwPhase() or equivalent.
- */
-const PHASE_NAMES = Object.freeze({
-  SESSION_START: 'session-start',
-  USER_PROMPT_SUBMIT: 'user-prompt-submit',
-  PRE_TOOL_USE_SHELL: 'pre-tool-use-shell',
-  PRE_TOOL_USE_MCP: 'pre-tool-use-mcp',
-  POST_TOOL_USE_SHELL: 'post-tool-use-shell',
-  POST_TOOL_USE_FILE_EDIT: 'post-tool-use-file-edit',
-  POST_TOOL_USE_MCP: 'post-tool-use-mcp',
-  PRE_COMPACT: 'pre-compact',
-  SESSION_END: 'session-end',
-  STOP: 'stop',
-});
-
 function getSharedAwPhaseSteps(phaseName) {
   const steps = SHARED_AW_PHASE_STEPS[phaseName];
   if (!steps) {
@@ -184,7 +167,6 @@ function getSharedAwPhaseSteps(phaseName) {
 }
 
 module.exports = {
-  PHASE_NAMES,
   SHARED_AW_PHASE_STEPS,
   getSharedAwPhaseSteps,
 };

package/scripts/hooks/shared/aw-phase-runner.js

@@ -26,6 +26,37 @@ function executeStep(runtime, step, payload) {
   return runtime.runManagedNodeHook(step.relativeScriptPath, payload);
 }
 
+function formatCursorSessionStartOutput(stdout, fallbackRaw) {
+  if (typeof stdout !== 'string' || stdout.trim() === '') {
+    return fallbackRaw;
+  }
+
+  try {
+    const payload = JSON.parse(stdout);
+    const additionalContext = payload?.hookSpecificOutput?.additionalContext
+      || payload?.additional_context;
+
+    if (typeof additionalContext === 'string' && additionalContext.trim() !== '') {
+      return `${JSON.stringify({ additional_context: additionalContext }, null, 2)}\n`;
+    }
+  } catch {}
+
+  return fallbackRaw;
+}
+
+function resolveStepOutput(step, execution, fallbackRaw) {
+  if (!execution) {
+    return null;
+  }
+
+  switch (step.outputMode) {
+    case 'cursor-session-start':
+      return formatCursorSessionStartOutput(execution.stdout, fallbackRaw);
+    default:
+      return null;
+  }
+}
+
 async function runSharedAwPhase({ raw, steps, deps = {} }) {
   const runtime = {
     transformToClaude: deps.transformToClaude,
@@ -43,6 +74,7 @@ async function runSharedAwPhase({ raw, steps, deps = {} }) {
 
   const needsClaudeInput = steps.some(step => (step.payloadMode || 'claude') === 'claude');
   const claudeInput = needsClaudeInput ? runtime.transformToClaude(parsedInput) : null;
+  let result = raw;
 
   for (const step of steps) {
     if (!shouldRunStep(step, runtime)) {
@@ -50,10 +82,14 @@ async function runSharedAwPhase({ raw, steps, deps = {} }) {
     }
 
     const payload = resolveStepPayload(step, raw, parsedInput, claudeInput);
-    await executeStep(runtime, step, payload);
+    const execution = await executeStep(runtime, step, payload);
+    const nextResult = resolveStepOutput(step, execution, raw);
+    if (typeof nextResult === 'string') {
+      result = nextResult;
+    }
   }
 
-  return raw;
+  return result;
 }
 
 module.exports = {

package/scripts/hooks/shared/session-start.sh

@@ -1,6 +1,10 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+# Drain stdin because harnesses can stream a JSON payload even though the AW
+# session-start hook only emits routing context.
+cat >/dev/null || true
+
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 ROOT_DIR="$(cd "${SCRIPT_DIR}/../../.." && pwd)"
 

package/scripts/hooks/shared/user-prompt-submit.sh

@@ -1,155 +1,48 @@
 #!/usr/bin/env bash
-# UserPromptSubmit hook — inject a compact AW routing reminder plus scoped rule reminders
-#
-# Output is printed to stdout as a plain-text prompt reminder.
-
 set -euo pipefail
 
-INPUT=$(cat)
-
-TMPFILE=$(mktemp) || exit 0
-trap 'rm -f "$TMPFILE"' EXIT
-
-PYTHON_CMD=""
-PYTHON_ARGS=()
+RAW="$(cat || true)"
 
-resolve_python_cmd() {
-  if [ -n "${CLV2_PYTHON_CMD:-}" ] && command -v "$CLV2_PYTHON_CMD" >/dev/null 2>&1; then
-    PYTHON_CMD="$CLV2_PYTHON_CMD"
-    PYTHON_ARGS=()
-    return 0
-  fi
-
-  if command -v python3 >/dev/null 2>&1; then
-    PYTHON_CMD="python3"
-    PYTHON_ARGS=()
-    return 0
-  fi
+extract_workspace_root() {
+  printf '%s' "$1" | sed -n 's/.*"workspace_roots"[[:space:]]*:[[:space:]]*\[[[:space:]]*"\([^"]*\)".*/\1/p' | head -n 1
+}
 
-  if command -v python >/dev/null 2>&1; then
-    PYTHON_CMD="python"
-    PYTHON_ARGS=()
-    return 0
-  fi
+extract_cwd() {
+  printf '%s' "$1" | sed -n 's/.*"cwd"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' | head -n 1
+}
 
-  if command -v py >/dev/null 2>&1; then
-    PYTHON_CMD="py"
-    PYTHON_ARGS=(-3)
-    return 0
-  fi
+resolve_rules_root() {
+  local root="${1:-}"
+  local cwd_dir
+  cwd_dir="$(pwd)"
+  local candidate
+
+  for candidate in \
+    "$root/.aw_rules/platform" \
+    "$cwd_dir/.aw_rules/platform" \
+    "$HOME/.aw_rules/platform" \
+    "$HOME/.aw/.aw_registry/.aw_rules/platform"
+  do
+    if [ -n "$candidate" ] && [ -d "$candidate" ]; then
+      printf '%s' "$candidate"
+      return 0
+    fi
+  done
 
   return 1
 }
 
-resolve_python_cmd || exit 0
-
-if [ "${#PYTHON_ARGS[@]}" -gt 0 ]; then
-  echo "$INPUT" | "$PYTHON_CMD" "${PYTHON_ARGS[@]}" -c "
-import os, sys, json, re
-d = json.load(sys.stdin)
-cwd = d.get('cwd', '')
-prompt = d.get('prompt', '')
-cwd = re.sub(r'[^a-zA-Z0-9./_@:\\\\~\ -]', '', cwd)
-prompt = prompt[:500]
-stack_overlays_enabled = os.environ.get('AW_ENABLE_STACK_OVERLAY_RULES') == '1'
-print(f'CWD={cwd}')
-prompt_lower = prompt.lower()
-if any(k in prompt_lower for k in ['controller', 'service', 'module', '@body', 'nestjs', 'worker', 'dto']):
-    print('DOMAIN=backend')
-    if stack_overlays_enabled and any(k in prompt_lower for k in ['nestjs', '@body', '@controller', '@module', 'class-validator', 'dto']):
-        print('STACK=nestjs')
-    elif stack_overlays_enabled and any(k in prompt_lower for k in ['connectrpc', 'connect-go', 'buf.gen', 'protoc-gen-connect-go']):
-        print('STACK=go-connect')
-elif any(k in prompt_lower for k in ['vue', 'component', 'template', 'frontend', '<script', 'nuxt']):
-    print('DOMAIN=frontend')
-    if stack_overlays_enabled and any(k in prompt_lower for k in ['nuxt', 'app.vue', 'useasyncdata', 'definepagemeta']):
-        print('STACK=nuxt')
-    elif stack_overlays_enabled and any(k in prompt_lower for k in ['vue', '<script', 'script setup', 'composable']):
-        print('STACK=vue')
-elif any(k in prompt_lower for k in ['mongo', 'redis', 'schema', 'migration', 'database', 'index']):
-    print('DOMAIN=data')
-elif any(k in prompt_lower for k in ['helm', 'terraform', 'kubernetes', 'k8s', 'deploy', 'dockerfile']):
-    print('DOMAIN=infra')
-else:
-    print('DOMAIN=universal')
-" > "$TMPFILE" 2>/dev/null || exit 0
-else
-  echo "$INPUT" | "$PYTHON_CMD" -c "
-import os, sys, json, re
-d = json.load(sys.stdin)
-cwd = d.get('cwd', '')
-prompt = d.get('prompt', '')
-cwd = re.sub(r'[^a-zA-Z0-9./_@:\\\\~\ -]', '', cwd)
-prompt = prompt[:500]
-stack_overlays_enabled = os.environ.get('AW_ENABLE_STACK_OVERLAY_RULES') == '1'
-print(f'CWD={cwd}')
-prompt_lower = prompt.lower()
-if any(k in prompt_lower for k in ['controller', 'service', 'module', '@body', 'nestjs', 'worker', 'dto']):
-    print('DOMAIN=backend')
-    if stack_overlays_enabled and any(k in prompt_lower for k in ['nestjs', '@body', '@controller', '@module', 'class-validator', 'dto']):
-        print('STACK=nestjs')
-    elif stack_overlays_enabled and any(k in prompt_lower for k in ['connectrpc', 'connect-go', 'buf.gen', 'protoc-gen-connect-go']):
-        print('STACK=go-connect')
-elif any(k in prompt_lower for k in ['vue', 'component', 'template', 'frontend', '<script', 'nuxt']):
-    print('DOMAIN=frontend')
-    if stack_overlays_enabled and any(k in prompt_lower for k in ['nuxt', 'app.vue', 'useasyncdata', 'definepagemeta']):
-        print('STACK=nuxt')
-    elif stack_overlays_enabled and any(k in prompt_lower for k in ['vue', '<script', 'script setup', 'composable']):
-        print('STACK=vue')
-elif any(k in prompt_lower for k in ['mongo', 'redis', 'schema', 'migration', 'database', 'index']):
-    print('DOMAIN=data')
-elif any(k in prompt_lower for k in ['helm', 'terraform', 'kubernetes', 'k8s', 'deploy', 'dockerfile']):
-    print('DOMAIN=infra')
-else:
-    print('DOMAIN=universal')
-" > "$TMPFILE" 2>/dev/null || exit 0
+WORKSPACE_ROOT="$(extract_workspace_root "$RAW")"
+if [ -z "$WORKSPACE_ROOT" ]; then
+  WORKSPACE_ROOT="$(extract_cwd "$RAW")"
 fi
 
-CWD="" DOMAIN="universal" STACK=""
-while IFS='=' read -r key value; do
-  # Strip trailing \r from Windows Python CRLF output
-  key="${key%$'\r'}"
-  value="${value%$'\r'}"
-  case "${key:-}" in
-    CWD)    CWD="$value" ;;
-    DOMAIN) DOMAIN="$value" ;;
-    STACK)  STACK="$value" ;;
-  esac
-done < "$TMPFILE"
-
-RULES_DIR=""
-DOMAIN_AGENTS=""
-STACK_AGENTS=""
-
-if [ -d "$CWD/.aw_registry/.aw_rules/platform" ]; then
-  RULES_DIR="$CWD/.aw_registry/.aw_rules/platform"
-  DOMAIN_AGENTS="$RULES_DIR/$DOMAIN/AGENTS.md"
-elif [ -d "$CWD/.aw_rules" ]; then
-  RULES_DIR="$CWD/.aw_rules"
-  DOMAIN_AGENTS="$RULES_DIR/$DOMAIN/AGENTS.md"
+RULES_ROOT="$(resolve_rules_root "$WORKSPACE_ROOT" || true)"
+if [ -z "$RULES_ROOT" ]; then
+  RULES_ROOT="$HOME/.aw_rules/platform"
 fi
 
-[ -n "$RULES_DIR" ] || exit 0
-[ -f "$DOMAIN_AGENTS" ] || exit 0
-
-if [ -n "$STACK" ] && [ -f "$RULES_DIR/$DOMAIN/$STACK/AGENTS.md" ]; then
-  STACK_AGENTS="$RULES_DIR/$DOMAIN/$STACK/AGENTS.md"
-fi
-
-DOMAIN_RULES=$(head -20 "$DOMAIN_AGENTS" 2>/dev/null || echo "")
-STACK_RULES=""
-if [ -n "$STACK_AGENTS" ]; then
-  STACK_RULES=$(head -20 "$STACK_AGENTS" 2>/dev/null || echo "")
-fi
-
-RULE_BULLETS=$(printf '%s\n%s\n' "$DOMAIN_RULES" "$STACK_RULES" | grep -E "^\- .*(MUST|Never)" | awk '!seen[$0]++' | head -8 2>/dev/null || true)
-
-[ -z "$DOMAIN_RULES" ] && [ -z "$STACK_RULES" ] && exit 0
-
-cat << EOF
-[AW Router reminder] Re-apply using-aw-skills for this prompt and re-select the smallest correct AW route and stage skill before substantive work.
-[Rule reminder — $RULES_DIR/$DOMAIN${STACK_AGENTS:+/$STACK}] Active MUST rules for this scope. Follow them.
-${RULE_BULLETS:-See $DOMAIN_AGENTS${STACK_AGENTS:+ and $STACK_AGENTS}}
+cat <<EOF
+[AW Router reminder] Re-apply using-aw-skills and select the smallest correct AW route before substantive work.
+[Rule reminder] Read ${RULES_ROOT}/universal/AGENTS.md and ${RULES_ROOT}/security/AGENTS.md, then the touched domain AGENTS.md plus references/ on demand.
 EOF
-
-exit 0

package/scripts/lib/cursor-aw-hook-files.js

@@ -9,9 +9,11 @@ const CURSOR_AW_HOOK_FILES = Object.freeze([
   'before-mcp-execution.js',
   'before-shell-execution.js',
   'before-submit-prompt.js',
+  'before-submit-prompt.sh',
   'pre-compact.js',
   'session-end.js',
   'session-start.js',
+  'session-start.sh',
   'stop.js',
 ]);