cclaw-cli 0.46.2 → 0.46.4

package/dist/content/hooks.d.ts

@@ -11,6 +11,7 @@ export interface HookRuntimeOptions {
 export declare const RUNTIME_SHELL_DETECT_ROOT = "HARNESS=\"codex\"\nif [ -n \"${CLAUDE_PROJECT_DIR:-}\" ]; then\n  HARNESS=\"claude\"\nelif [ -n \"${CURSOR_PROJECT_DIR:-}\" ] || [ -n \"${CURSOR_PROJECT_ROOT:-}\" ]; then\n  HARNESS=\"cursor\"\nelif [ -n \"${OPENCODE_PROJECT_DIR:-}\" ] || [ -n \"${OPENCODE_PROJECT_ROOT:-}\" ]; then\n  HARNESS=\"opencode\"\nfi\n\nROOT=\"\"\nfor candidate in \"${CCLAW_PROJECT_ROOT:-}\" \"${CLAUDE_PROJECT_DIR:-}\" \"${CURSOR_PROJECT_DIR:-}\" \"${CURSOR_PROJECT_ROOT:-}\" \"${OPENCODE_PROJECT_DIR:-}\" \"${OPENCODE_PROJECT_ROOT:-}\" \"${PWD:-}\"; do\n  if [ -n \"$candidate\" ] && [ -d \"$candidate/.cclaw\" ]; then\n    ROOT=\"$candidate\"\n    break\n  fi\ndone\nif [ -z \"$ROOT\" ]; then\n  ROOT=\"${CCLAW_PROJECT_ROOT:-${CLAUDE_PROJECT_DIR:-${CURSOR_PROJECT_DIR:-${CURSOR_PROJECT_ROOT:-${OPENCODE_PROJECT_DIR:-${OPENCODE_PROJECT_ROOT:-${PWD}}}}}}}\"\nfi";
 export declare function sessionStartScript(_options?: HookRuntimeOptions): string;
 export declare function stopCheckpointScript(): string;
+export declare function runHookDispatcherScript(): string;
 export declare function stageCompleteScript(): string;
 export declare function preCompactScript(): string;
 export { claudeHooksJsonWithObservation as claudeHooksJson } from "./observe.js";

package/dist/content/hooks.js

@@ -769,6 +769,56 @@ case "$HARNESS" in
 esac
 `;
 }
+export function runHookDispatcherScript() {
+    return `#!/usr/bin/env bash
+# cclaw hook dispatcher — generated by cclaw sync
+# Single entrypoint used by harness hook JSON wiring.
+set -euo pipefail
+
+${DETECT_ROOT}
+
+if [ "$#" -lt 1 ]; then
+  printf 'Usage: bash ${RUNTIME_ROOT}/hooks/run-hook.cmd <session-start|stop-checkpoint|pre-compact|prompt-guard|workflow-guard|context-monitor>\\n' >&2
+  exit 1
+fi
+
+HOOK_NAME="$1"
+shift || true
+
+case "$HOOK_NAME" in
+  session-start|session-start.sh)
+    HOOK_FILE="session-start.sh"
+    ;;
+  stop-checkpoint|stop-checkpoint.sh)
+    HOOK_FILE="stop-checkpoint.sh"
+    ;;
+  pre-compact|pre-compact.sh)
+    HOOK_FILE="pre-compact.sh"
+    ;;
+  prompt-guard|prompt-guard.sh)
+    HOOK_FILE="prompt-guard.sh"
+    ;;
+  workflow-guard|workflow-guard.sh)
+    HOOK_FILE="workflow-guard.sh"
+    ;;
+  context-monitor|context-monitor.sh)
+    HOOK_FILE="context-monitor.sh"
+    ;;
+  *)
+    printf '[cclaw] run-hook: unsupported hook "%s".\\n' "$HOOK_NAME" >&2
+    exit 1
+    ;;
+esac
+
+HOOK_PATH="$ROOT/${RUNTIME_ROOT}/hooks/$HOOK_FILE"
+if [ ! -f "$HOOK_PATH" ]; then
+  printf '[cclaw] run-hook: hook script not found at %s\\n' "$HOOK_PATH" >&2
+  exit 1
+fi
+
+exec bash "$HOOK_PATH" "$@"
+`;
+}
 export function stageCompleteScript() {
     return `#!/usr/bin/env bash
 # cclaw stage-complete helper — generated by cclaw sync

package/dist/content/observe.d.ts

@@ -19,9 +19,6 @@ export declare function observeScript(): string;
 export declare function contextMonitorScript(): string;
 export declare function summarizeObservationsRuntimeModule(): string;
 export declare function summarizeObservationsScript(): string;
-/**
- * Updated hooks.json generators with PreToolUse/PostToolUse observation.
- */
 export declare function claudeHooksJsonWithObservation(): string;
 export declare function cursorHooksJsonWithObservation(): string;
 /**

package/dist/content/observe.js

@@ -1808,6 +1808,9 @@ exit 0
 /**
  * Updated hooks.json generators with PreToolUse/PostToolUse observation.
  */
+function hookDispatcherCommand(scriptName) {
+    return `bash ${RUNTIME_ROOT}/hooks/run-hook.cmd ${scriptName}`;
+}
 export function claudeHooksJsonWithObservation() {
     return JSON.stringify({
         cclawHookSchemaVersion: 1,
@@ -1816,30 +1819,30 @@ export function claudeHooksJsonWithObservation() {
                     matcher: "startup|resume|clear|compact",
                     hooks: [{
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/session-start.sh`
+                            command: hookDispatcherCommand("session-start.sh")
                         }]
                 }],
             PreToolUse: [{
                     matcher: "*",
                     hooks: [{
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/prompt-guard.sh`
+                            command: hookDispatcherCommand("prompt-guard.sh")
                         }, {
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/workflow-guard.sh`
+                            command: hookDispatcherCommand("workflow-guard.sh")
                         }]
                 }],
             PostToolUse: [{
                     matcher: "*",
                     hooks: [{
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/context-monitor.sh`
+                            command: hookDispatcherCommand("context-monitor.sh")
                         }]
                 }],
             Stop: [{
                     hooks: [{
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/stop-checkpoint.sh`,
+                            command: hookDispatcherCommand("stop-checkpoint.sh"),
                             timeout: 10
                         }]
                 }],
@@ -1847,7 +1850,7 @@ export function claudeHooksJsonWithObservation() {
                     matcher: "manual|auto",
                     hooks: [{
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/pre-compact.sh`,
+                            command: hookDispatcherCommand("pre-compact.sh"),
                             timeout: 10
                         }]
                 }]
@@ -1860,31 +1863,31 @@ export function cursorHooksJsonWithObservation() {
         version: 1,
         hooks: {
             sessionStart: [{
-                    command: `bash ${RUNTIME_ROOT}/hooks/session-start.sh`
+                    command: hookDispatcherCommand("session-start.sh")
                 }],
             sessionResume: [{
-                    command: `bash ${RUNTIME_ROOT}/hooks/session-start.sh`
+                    command: hookDispatcherCommand("session-start.sh")
                 }],
             sessionClear: [{
-                    command: `bash ${RUNTIME_ROOT}/hooks/session-start.sh`
+                    command: hookDispatcherCommand("session-start.sh")
                 }],
             sessionCompact: [{
-                    command: `bash ${RUNTIME_ROOT}/hooks/pre-compact.sh`
+                    command: hookDispatcherCommand("pre-compact.sh")
                 }, {
-                    command: `bash ${RUNTIME_ROOT}/hooks/session-start.sh`
+                    command: hookDispatcherCommand("session-start.sh")
                 }],
             preToolUse: [{
                     matcher: "*",
-                    command: `bash ${RUNTIME_ROOT}/hooks/prompt-guard.sh`
+                    command: hookDispatcherCommand("prompt-guard.sh")
                 }, {
                     matcher: "*",
-                    command: `bash ${RUNTIME_ROOT}/hooks/workflow-guard.sh`
+                    command: hookDispatcherCommand("workflow-guard.sh")
                 }],
             postToolUse: [{
                     matcher: "*",
-                    command: `bash ${RUNTIME_ROOT}/hooks/context-monitor.sh`
+                    command: hookDispatcherCommand("context-monitor.sh")
                 }],
-            stop: [{ command: `bash ${RUNTIME_ROOT}/hooks/stop-checkpoint.sh`, timeout: 10 }]
+            stop: [{ command: hookDispatcherCommand("stop-checkpoint.sh"), timeout: 10 }]
         }
     }, null, 2);
 }
@@ -1915,13 +1918,13 @@ export function codexHooksJsonWithObservation() {
                     matcher: "startup|resume",
                     hooks: [{
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/session-start.sh`
+                            command: hookDispatcherCommand("session-start.sh")
                         }]
                 }],
             UserPromptSubmit: [{
                     hooks: [{
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/prompt-guard.sh`
+                            command: hookDispatcherCommand("prompt-guard.sh")
                         }, {
                             type: "command",
                             command: "bash -lc 'if command -v cclaw >/dev/null 2>&1; then cclaw internal verify-current-state --quiet >/dev/null || true; else npx -y cclaw-cli internal verify-current-state --quiet >/dev/null || true; fi'"
@@ -1931,23 +1934,23 @@ export function codexHooksJsonWithObservation() {
                     matcher: "Bash",
                     hooks: [{
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/prompt-guard.sh`
+                            command: hookDispatcherCommand("prompt-guard.sh")
                         }, {
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/workflow-guard.sh`
+                            command: hookDispatcherCommand("workflow-guard.sh")
                         }]
                 }],
             PostToolUse: [{
                     matcher: "Bash",
                     hooks: [{
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/context-monitor.sh`
+                            command: hookDispatcherCommand("context-monitor.sh")
                         }]
                 }],
             Stop: [{
                     hooks: [{
                             type: "command",
-                            command: `bash ${RUNTIME_ROOT}/hooks/stop-checkpoint.sh`,
+                            command: hookDispatcherCommand("stop-checkpoint.sh"),
                             timeout: 10
                         }]
                 }]

package/dist/content/stage-schema.js

@@ -43,7 +43,7 @@ const REQUIRED_GATE_IDS = {
         "tdd_red_test_written",
         "tdd_green_full_suite",
         "tdd_refactor_completed",
-        "tdd_traceable_to_plan"
+        "tdd_verified_before_complete"
     ],
     review: [
         "review_layer1_spec_compliance",

package/dist/content/stages/tdd.js

@@ -27,6 +27,7 @@ export const TDD = {
         "Dispatch `test-author` subagent in `BUILD_GREEN_REFACTOR` mode — minimal implementation + full-suite GREEN + refactor notes.",
         "GREEN: Run full suite — execute ALL tests, not just the ones you wrote. The full suite must be GREEN.",
         "GREEN: Verify no regressions — if any existing test breaks, fix the regression before proceeding.",
+        "Run verification-before-completion discipline for the slice — capture a fresh test command, commit SHA, and explicit PASS/FAIL status before completion claims.",
         "REFACTOR: Improve code quality — without changing behavior. Document what you changed and why.",
         "Record evidence — capture RED failure, GREEN output, and REFACTOR notes in the TDD artifact.",
         "Annotate traceability — link to plan task ID and spec criterion.",
@@ -40,6 +41,7 @@ export const TDD = {
         "Capture and store failing output as RED evidence.",
         "Apply minimal change to satisfy RED tests (GREEN).",
         "Run full suite, not partial checks, for GREEN validation.",
+        "Before declaring the slice complete, run a fresh verification check and record command + commit SHA + PASS/FAIL.",
         "Refactor without changing behavior and document rationale (REFACTOR).",
         "Stop if regressions appear and fix before proceeding.",
         "If a test passes unexpectedly, investigate: does the behavior already exist, or is the test wrong?",
@@ -51,6 +53,7 @@ export const TDD = {
         "Run tests and capture failure output.",
         "Dispatch `test-author` in BUILD_GREEN_REFACTOR mode and implement smallest change needed for GREEN.",
         "Run full tests and build checks.",
+        "Run a fresh verification-before-completion check and capture command + commit SHA + PASS/FAIL in guard evidence.",
         "Perform refactor pass preserving behavior.",
         "Record RED, GREEN, and REFACTOR evidence in artifact.",
         "Annotate traceability to plan task and spec criterion; on `sliceReview` triggers, append a Per-Slice Review entry before closing the slice."
@@ -59,12 +62,14 @@ export const TDD = {
         { id: "tdd_red_test_written", description: "Failing tests exist before implementation changes." },
         { id: "tdd_green_full_suite", description: "Full relevant suite passes in GREEN state." },
         { id: "tdd_refactor_completed", description: "Refactor pass completed with behavior preservation verified." },
+        { id: "tdd_verified_before_complete", description: "Fresh verification evidence includes test command, commit SHA, and explicit pass/fail status." },
         { id: "tdd_traceable_to_plan", description: "Change traceability to plan slice is explicit." }
     ],
     requiredEvidence: [
         "Artifact updated at `.cclaw/artifacts/06-tdd.md` with RED, GREEN, and REFACTOR sections.",
         "Failing command output captured (RED).",
         "Full test/build output recorded (GREEN).",
+        "Fresh verification evidence recorded with command, commit SHA, and PASS/FAIL status before completion.",
         "Acceptance mapping documented.",
         "Failure reason analysis recorded.",
         "Refactor rationale captured.",

package/dist/doctor.js

@@ -622,6 +622,7 @@ export async function doctorChecks(projectRoot, options = {}) {
     for (const script of [
         "session-start.sh",
         "stop-checkpoint.sh",
+        "run-hook.cmd",
         "prompt-guard.sh",
         "workflow-guard.sh",
         "context-monitor.sh"

package/dist/install.js

@@ -23,7 +23,7 @@ import { archiveCommandContract, archiveCommandSkillMarkdown } from "./content/a
 import { rewindCommandContract, rewindCommandSkillMarkdown } from "./content/rewind-command.js";
 import { subagentDrivenDevSkill, parallelAgentsSkill } from "./content/subagents.js";
 import { sessionHooksSkillMarkdown } from "./content/session-hooks.js";
-import { sessionStartScript, stopCheckpointScript, stageCompleteScript, preCompactScript, opencodePluginJs, claudeHooksJson, codexHooksJson, cursorHooksJson } from "./content/hooks.js";
+import { sessionStartScript, stopCheckpointScript, runHookDispatcherScript, stageCompleteScript, preCompactScript, opencodePluginJs, claudeHooksJson, codexHooksJson, cursorHooksJson } from "./content/hooks.js";
 import { contextMonitorScript, promptGuardScript, workflowGuardScript } from "./content/observe.js";
 import { META_SKILL_NAME, usingCclawSkillMarkdown } from "./content/meta-skill.js";
 import { decisionProtocolMarkdown, completionProtocolMarkdown, ethosProtocolMarkdown } from "./content/protocols.js";
@@ -616,6 +616,7 @@ async function writeHooks(projectRoot, config) {
     await ensureDir(hooksDir);
     await writeFileSafe(path.join(hooksDir, "session-start.sh"), sessionStartScript());
     await writeFileSafe(path.join(hooksDir, "stop-checkpoint.sh"), stopCheckpointScript());
+    await writeFileSafe(path.join(hooksDir, "run-hook.cmd"), runHookDispatcherScript());
     await writeFileSafe(path.join(hooksDir, "stage-complete.sh"), stageCompleteScript());
     await writeFileSafe(path.join(hooksDir, "pre-compact.sh"), preCompactScript());
     await writeFileSafe(path.join(hooksDir, "prompt-guard.sh"), promptGuardScript({
@@ -633,6 +634,7 @@ async function writeHooks(projectRoot, config) {
         for (const script of [
             "session-start.sh",
             "stop-checkpoint.sh",
+            "run-hook.cmd",
             "stage-complete.sh",
             "pre-compact.sh",
             "prompt-guard.sh",
@@ -1263,7 +1265,8 @@ function stripManagedHookCommands(value) {
 }
 function isManagedRuntimeHookCommand(command) {
     const normalized = command.trim().replace(/\s+/gu, " ");
-    if (/(^|\s)(?:bash\s+)?(?:\.\/)?\.cclaw\/hooks\/(?:session-start|stop-checkpoint|pre-compact|prompt-guard|workflow-guard|context-monitor)\.sh(?:\s|$)/u.test(normalized)) {
+    if (/(^|\s)(?:bash\s+)?(?:\.\/)?\.cclaw\/hooks\/(?:session-start|stop-checkpoint|pre-compact|prompt-guard|workflow-guard|context-monitor)\.sh(?:\s|$)/u.test(normalized) ||
+        /(^|\s)(?:bash\s+)?(?:\.\/)?\.cclaw\/hooks\/run-hook\.cmd\s+(?:session-start|stop-checkpoint|pre-compact|prompt-guard|workflow-guard|context-monitor)(?:\.sh)?(?:\s|$)/u.test(normalized)) {
         return true;
     }
     // Codex UserPromptSubmit non-blocking state nudge:

package/dist/internal/advance-stage.js

@@ -13,6 +13,25 @@ import { FLOW_STAGES } from "../types.js";
 function unique(values) {
     return [...new Set(values)];
 }
+const TEST_COMMAND_HINT_PATTERN = /\b(?:npm test|pnpm test|yarn test|bun test|vitest|jest|pytest|go test|cargo test|mvn test|gradle test|dotnet test)\b/iu;
+const SHA_WITH_LABEL_PATTERN = /\b(?:sha|commit)(?:\s*[:=]|\s+)\s*[0-9a-f]{7,40}\b/iu;
+const PASS_STATUS_PATTERN = /\b(?:pass|passed|green|ok)\b/iu;
+function validateGateEvidenceShape(stage, gateId, evidence) {
+    if (stage !== "tdd" || gateId !== "tdd_verified_before_complete") {
+        return null;
+    }
+    const trimmed = evidence.trim();
+    if (!TEST_COMMAND_HINT_PATTERN.test(trimmed)) {
+        return "must include the fresh verification command that was run (for example `npm test`, `pytest`, `go test`, or equivalent).";
+    }
+    if (!SHA_WITH_LABEL_PATTERN.test(trimmed)) {
+        return "must include a commit SHA token prefixed with `sha` or `commit` (for example `sha: abc1234`).";
+    }
+    if (!PASS_STATUS_PATTERN.test(trimmed)) {
+        return "must include explicit success status (for example `PASS` or `GREEN`).";
+    }
+    return null;
+}
 function parseStringList(raw) {
     if (!Array.isArray(raw))
         return [];
@@ -392,6 +411,21 @@ async function runAdvanceStage(projectRoot, args, io) {
         io.stderr.write(`cclaw internal advance-stage: missing --evidence-json entries for passed gates: ${missingGuardEvidence.join(", ")}.\n`);
         return 1;
     }
+    const malformedGateEvidence = nextPassed.flatMap((gateId) => {
+        const provided = args.evidenceByGate[gateId];
+        const existing = flowState.guardEvidence[gateId];
+        const effectiveEvidence = typeof provided === "string" && provided.trim().length > 0
+            ? provided
+            : typeof existing === "string" && existing.trim().length > 0
+                ? existing
+                : "";
+        const issue = validateGateEvidenceShape(args.stage, gateId, effectiveEvidence);
+        return issue ? [`${gateId}: ${issue}`] : [];
+    });
+    if (malformedGateEvidence.length > 0) {
+        io.stderr.write(`cclaw internal advance-stage: gate evidence format check failed: ${malformedGateEvidence.join(" | ")}.\n`);
+        return 1;
+    }
     const nextGuardEvidence = { ...flowState.guardEvidence };
     for (const gateId of nextPassed) {
         const provided = args.evidenceByGate[gateId];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cclaw-cli",
-  "version": "0.46.2",
+  "version": "0.46.4",
   "description": "Installer-first flow toolkit for coding agents",
   "type": "module",
   "bin": {