claude-all-hands 1.0.1 → 1.0.2

package/.claude/skills/hooks-development/SKILL.md

@@ -0,0 +1,332 @@
+---
+name: hooks-development
+description: Expert guidance for creating, refining, and auditing Claude Code hooks. Use when working with hooks, setting up event listeners, validating commands, automating workflows, adding notifications, or understanding hook types (PreToolUse, PostToolUse, Stop, SessionStart, UserPromptSubmit, etc).
+---
+
+<objective>
+Hooks are event-driven automation for Claude Code that execute shell commands or LLM prompts in response to tool usage, session events, and user interactions. This skill teaches you how to create, configure, and debug hooks for validating commands, automating workflows, injecting context, and implementing custom completion criteria.
+
+Hooks provide programmatic control over Claude's behavior without modifying core code, enabling project-specific automation, safety checks, and workflow customization.
+</objective>
+
+<context>
+Hooks are shell commands or LLM-evaluated prompts that execute in response to Claude Code events. They operate within an event hierarchy: events (PreToolUse, PostToolUse, Stop, etc.) trigger matchers (tool patterns) which fire hooks (commands or prompts). Hooks can block actions, modify tool inputs, inject context, or simply observe and log Claude's operations.
+</context>
+
+<quick_start>
+<workflow>
+1. Create hooks config file:
+   - Project: `.claude/hooks.json`
+   - User: `~/.claude/hooks.json`
+2. Choose hook event (when it fires)
+3. Choose hook type (command or prompt)
+4. Configure matcher (which tools trigger it)
+5. Test with `claude --debug`
+</workflow>
+
+<example>
+**Log all bash commands**:
+
+`.claude/hooks.json`:
+```json
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "jq -r '\"\\(.tool_input.command) - \\(.tool_input.description // \\\"No description\\\")\"' >> ~/.claude/bash-log.txt"
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+This hook:
+- Fires before (`PreToolUse`) every `Bash` tool use
+- Executes a `command` (not an LLM prompt)
+- Logs command + description to a file
+</example>
+</quick_start>
+
+<hook_types>
+| Event | When it fires | Can block? |
+|-------|---------------|------------|
+| **PreToolUse** | Before tool execution | Yes |
+| **PostToolUse** | After tool execution | No |
+| **UserPromptSubmit** | User submits a prompt | Yes |
+| **Stop** | Claude attempts to stop | Yes |
+| **SubagentStop** | Subagent attempts to stop | Yes |
+| **SessionStart** | Session begins | No |
+| **SessionEnd** | Session ends | No |
+| **PreCompact** | Before context compaction | Yes |
+| **Notification** | Claude needs input | No |
+
+Blocking hooks can return `"decision": "block"` to prevent the action. See [references/hook-types.md](references/hook-types.md) for detailed use cases.
+</hook_types>
+
+<hook_anatomy>
+<hook_type name="command">
+**Type**: Executes a shell command
+
+**Use when**:
+- Simple validation (check file exists)
+- Logging (append to file)
+- External tools (formatters, linters)
+- Desktop notifications
+
+**Input**: JSON via stdin
+**Output**: JSON via stdout (optional)
+
+```json
+{
+  "type": "command",
+  "command": "/path/to/script.sh",
+  "timeout": 30000
+}
+```
+</hook_type>
+
+<hook_type name="prompt">
+**Type**: LLM evaluates a prompt
+
+**Use when**:
+- Complex decision logic
+- Natural language validation
+- Context-aware checks
+- Reasoning required
+
+**Input**: Prompt with `$ARGUMENTS` placeholder
+**Output**: JSON with `decision` and `reason`
+
+```json
+{
+  "type": "prompt",
+  "prompt": "Evaluate if this command is safe: $ARGUMENTS\n\nReturn JSON: {\"decision\": \"approve\" or \"block\", \"reason\": \"explanation\"}"
+}
+```
+</hook_type>
+</hook_anatomy>
+
+<matchers>
+Matchers filter which tools trigger the hook:
+
+```json
+{
+  "matcher": "Bash",           // Exact match
+  "matcher": "Write|Edit",     // Multiple tools (regex OR)
+  "matcher": "mcp__.*",        // All MCP tools
+  "matcher": "mcp__memory__.*" // Specific MCP server
+}
+```
+
+**No matcher**: Hook fires for all tools
+```json
+{
+  "hooks": {
+    "UserPromptSubmit": [
+      {
+        "hooks": [...]  // No matcher - fires on every user prompt
+      }
+    ]
+  }
+}
+```
+</matchers>
+
+<input_output>
+Hooks receive JSON via stdin with session info, current directory, and event-specific data. Blocking hooks can return JSON to approve/block actions or modify inputs.
+
+**Example output** (blocking hooks):
+```json
+{
+  "decision": "approve" | "block",
+  "reason": "Why this decision was made"
+}
+```
+
+See [references/input-output-schemas.md](references/input-output-schemas.md) for complete schemas for each hook type.
+</input_output>
+
+<environment_variables>
+Available in hook commands:
+
+| Variable | Value |
+|----------|-------|
+| `$CLAUDE_PROJECT_DIR` | Project root directory |
+| `${CLAUDE_PLUGIN_ROOT}` | Plugin directory (plugin hooks only) |
+| `$ARGUMENTS` | Hook input JSON (prompt hooks only) |
+
+**Example**:
+```json
+{
+  "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/validate.sh"
+}
+```
+</environment_variables>
+
+<common_patterns>
+**Desktop notification when input needed**:
+```json
+{
+  "hooks": {
+    "Notification": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "osascript -e 'display notification \"Claude needs input\" with title \"Claude Code\"'"
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+**Block destructive git commands**:
+```json
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "prompt",
+            "prompt": "Check if this command is destructive: $ARGUMENTS\n\nBlock if it contains: 'git push --force', 'rm -rf', 'git reset --hard'\n\nReturn: {\"decision\": \"approve\" or \"block\", \"reason\": \"explanation\"}"
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+**Auto-format code after edits**:
+```json
+{
+  "hooks": {
+    "PostToolUse": [
+      {
+        "matcher": "Write|Edit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "prettier --write $CLAUDE_PROJECT_DIR",
+            "timeout": 10000
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+**Add context at session start**:
+```json
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "echo '{\"hookSpecificOutput\": {\"hookEventName\": \"SessionStart\", \"additionalContext\": \"Current sprint: Sprint 23. Focus: User authentication\"}}'"
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+</common_patterns>
+
+<debugging>
+Always test hooks with the debug flag:
+```bash
+claude --debug
+```
+
+This shows which hooks matched, command execution, and output. See [references/troubleshooting.md](references/troubleshooting.md) for common issues and solutions.
+</debugging>
+
+<reference_guides>
+**Hook types and events**: [references/hook-types.md](references/hook-types.md)
+- Complete list of hook events
+- When each event fires
+- Input/output schemas for each
+- Blocking vs non-blocking hooks
+
+**Command vs Prompt hooks**: [references/command-vs-prompt.md](references/command-vs-prompt.md)
+- Decision tree: which type to use
+- Command hook patterns and examples
+- Prompt hook patterns and examples
+- Performance considerations
+
+**Matchers and patterns**: [references/matchers.md](references/matchers.md)
+- Regex patterns for tool matching
+- MCP tool matching patterns
+- Multiple tool matching
+- Debugging matcher issues
+
+**Input/Output schemas**: [references/input-output-schemas.md](references/input-output-schemas.md)
+- Complete schema for each hook type
+- Field descriptions and types
+- Hook-specific output fields
+- Example JSON for each event
+
+**Working examples**: [references/examples.md](references/examples.md)
+- Desktop notifications
+- Command validation
+- Auto-formatting workflows
+- Logging and audit trails
+- Stop logic patterns
+- Session context injection
+
+**Troubleshooting**: [references/troubleshooting.md](references/troubleshooting.md)
+- Hooks not triggering
+- Command execution failures
+- Prompt hook issues
+- Permission problems
+- Timeout handling
+- Debug workflow
+</reference_guides>
+
+<security_checklist>
+**Critical safety requirements**:
+
+- **Infinite loop prevention**: Check `stop_hook_active` flag in Stop hooks to prevent recursive triggering
+- **Timeout configuration**: Set reasonable timeouts (default: 60s) to prevent hanging
+- **Permission validation**: Ensure hook scripts have executable permissions (`chmod +x`)
+- **Path safety**: Use absolute paths with `$CLAUDE_PROJECT_DIR` to avoid path injection
+- **JSON validation**: Validate hook config with `jq` before use to catch syntax errors
+- **Selective blocking**: Be conservative with blocking hooks to avoid workflow disruption
+
+**Testing protocol**:
+```bash
+# Always test with debug flag first
+claude --debug
+
+# Validate JSON config
+jq . .claude/hooks.json
+```
+</security_checklist>
+
+<success_criteria>
+A working hook configuration has:
+
+- Valid JSON in `.claude/hooks.json` (validated with `jq`)
+- Appropriate hook event selected for the use case
+- Correct matcher pattern that matches target tools
+- Command or prompt that executes without errors
+- Proper output schema (decision/reason for blocking hooks)
+- Tested with `--debug` flag showing expected behavior
+- No infinite loops in Stop hooks (checks `stop_hook_active` flag)
+- Reasonable timeout set (especially for external commands)
+- Executable permissions on script files if using file paths
+</success_criteria>

package/.claude/skills/hooks-development/references/command-vs-prompt.md

@@ -0,0 +1,269 @@
+# Command vs Prompt Hooks
+
+Decision guide for choosing between command-based and prompt-based hooks.
+
+## Decision Tree
+
+```
+Need to execute a hook?
+│
+├─ Simple yes/no validation?
+│  └─ Use COMMAND (faster, cheaper)
+│
+├─ Need natural language understanding?
+│  └─ Use PROMPT (LLM evaluation)
+│
+├─ External tool interaction?
+│  └─ Use COMMAND (formatters, linters, git)
+│
+├─ Complex decision logic?
+│  └─ Use PROMPT (reasoning required)
+│
+└─ Logging/notification only?
+   └─ Use COMMAND (no decision needed)
+```
+
+---
+
+## Command Hooks
+
+### Characteristics
+
+- **Execution**: Shell command
+- **Input**: JSON via stdin
+- **Output**: JSON via stdout (optional)
+- **Speed**: Fast (no LLM call)
+- **Cost**: Free (no API usage)
+- **Complexity**: Limited to shell scripting logic
+
+### When to use
+
+✅ **Use command hooks for**:
+- File operations (read, write, check existence)
+- Running tools (prettier, eslint, git)
+- Simple pattern matching (grep, regex)
+- Logging to files
+- Desktop notifications
+- Fast validation (file size, permissions)
+
+❌ **Don't use command hooks for**:
+- Natural language analysis
+- Complex decision logic
+- Context-aware validation
+- Semantic understanding
+
+### Examples
+
+**1. Log bash commands**
+```json
+{
+  "type": "command",
+  "command": "jq -r '\"\\(.tool_input.command) - \\(.tool_input.description // \\\"No description\\\")\"' >> ~/.claude/bash-log.txt"
+}
+```
+
+**2. Block if file doesn't exist**
+```bash
+#!/bin/bash
+# check-file-exists.sh
+
+input=$(cat)
+file=$(echo "$input" | jq -r '.tool_input.file_path')
+
+if [ ! -f "$file" ]; then
+  echo '{"decision": "block", "reason": "File does not exist"}'
+  exit 0
+fi
+
+echo '{"decision": "approve", "reason": "File exists"}'
+```
+
+**3. Run prettier after edits**
+```json
+{
+  "type": "command",
+  "command": "prettier --write \"$(echo {} | jq -r '.tool_input.file_path')\"",
+  "timeout": 10000
+}
+```
+
+**4. Desktop notification**
+```json
+{
+  "type": "command",
+  "command": "osascript -e 'display notification \"Claude needs input\" with title \"Claude Code\"'"
+}
+```
+
+### Parsing input in commands
+
+Command hooks receive JSON via stdin. Use `jq` to parse:
+
+```bash
+#!/bin/bash
+input=$(cat)  # Read stdin
+
+# Extract fields
+tool_name=$(echo "$input" | jq -r '.tool_name')
+command=$(echo "$input" | jq -r '.tool_input.command')
+session_id=$(echo "$input" | jq -r '.session_id')
+
+# Your logic here
+if [[ "$command" == *"rm -rf"* ]]; then
+  echo '{"decision": "block", "reason": "Dangerous command"}'
+else
+  echo '{"decision": "approve", "reason": "Safe"}'
+fi
+```
+
+---
+
+## Prompt Hooks
+
+### Characteristics
+
+- **Execution**: LLM evaluates prompt
+- **Input**: Prompt string with `$ARGUMENTS` placeholder
+- **Output**: LLM generates JSON response
+- **Speed**: Slower (~1-3s per evaluation)
+- **Cost**: Uses API credits
+- **Complexity**: Can reason, understand context, analyze semantics
+
+### When to use
+
+✅ **Use prompt hooks for**:
+- Natural language validation
+- Semantic analysis (intent, safety, appropriateness)
+- Complex decision trees
+- Context-aware checks
+- Reasoning about code quality
+- Understanding user intent
+
+❌ **Don't use prompt hooks for**:
+- Simple pattern matching (use regex/grep)
+- File operations (use command hooks)
+- High-frequency events (too slow/expensive)
+- Non-decision tasks (logging, notifications)
+
+### Examples
+
+**1. Validate commit messages**
+```json
+{
+  "type": "prompt",
+  "prompt": "Evaluate this git commit message: $ARGUMENTS\n\nCheck if it:\n1. Starts with conventional commit type (feat|fix|docs|refactor|test|chore)\n2. Is descriptive and clear\n3. Under 72 characters\n\nReturn: {\"decision\": \"approve\" or \"block\", \"reason\": \"specific feedback\"}"
+}
+```
+
+**2. Check if Stop is appropriate**
+```json
+{
+  "type": "prompt",
+  "prompt": "Review the conversation transcript: $ARGUMENTS\n\nDetermine if Claude should stop:\n1. All user tasks completed?\n2. Any errors that need fixing?\n3. Tests passing?\n4. Documentation updated?\n\nIf incomplete: {\"decision\": \"block\", \"reason\": \"what's missing\"}\nIf complete: {\"decision\": \"approve\", \"reason\": \"all done\"}"
+}
+```
+
+**3. Validate code changes for security**
+```json
+{
+  "type": "prompt",
+  "prompt": "Analyze this code change for security issues: $ARGUMENTS\n\nCheck for:\n- SQL injection vulnerabilities\n- XSS attack vectors\n- Authentication bypasses\n- Sensitive data exposure\n\nIf issues found: {\"decision\": \"block\", \"reason\": \"specific vulnerabilities\"}\nIf safe: {\"decision\": \"approve\", \"reason\": \"no issues found\"}"
+}
+```
+
+**4. Semantic prompt validation**
+```json
+{
+  "type": "prompt",
+  "prompt": "Evaluate user prompt: $ARGUMENTS\n\nIs this:\n1. Related to coding/development?\n2. Appropriate and professional?\n3. Clear and actionable?\n\nIf inappropriate: {\"decision\": \"block\", \"reason\": \"why\"}\nIf good: {\"decision\": \"approve\", \"reason\": \"ok\"}"
+}
+```
+
+### Writing effective prompts
+
+**Be specific about output format**:
+```
+Return JSON: {"decision": "approve" or "block", "reason": "explanation"}
+```
+
+**Provide clear criteria**:
+```
+Block if:
+1. Command contains 'rm -rf /'
+2. Force push to main branch
+3. Credentials in plain text
+
+Otherwise approve.
+```
+
+**Use $ARGUMENTS placeholder**:
+```
+Analyze this input: $ARGUMENTS
+
+Check for...
+```
+
+The `$ARGUMENTS` placeholder is replaced with the actual hook input JSON.
+
+---
+
+## Performance Comparison
+
+| Aspect | Command Hook | Prompt Hook |
+|--------|--------------|-------------|
+| **Speed** | <100ms | 1-3s |
+| **Cost** | Free | ~$0.001-0.01 per call |
+| **Complexity** | Shell scripting | Natural language |
+| **Context awareness** | Limited | High |
+| **Reasoning** | No | Yes |
+| **Best for** | Operations, logging | Validation, analysis |
+
+---
+
+## Combining Both
+
+You can use multiple hooks for the same event:
+
+```json
+{
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "echo \"$input\" >> ~/bash-log.txt",
+            "comment": "Log every command (fast)"
+          },
+          {
+            "type": "prompt",
+            "prompt": "Analyze this bash command for safety: $ARGUMENTS",
+            "comment": "Validate with LLM (slower, smarter)"
+          }
+        ]
+      }
+    ]
+  }
+}
+```
+
+Hooks execute in order. If any hook blocks, execution stops.
+
+---
+
+## Recommendations
+
+**High-frequency events** (PreToolUse, PostToolUse):
+- Prefer command hooks
+- Use prompt hooks sparingly
+- Cache LLM decisions when possible
+
+**Low-frequency events** (Stop, UserPromptSubmit):
+- Prompt hooks are fine
+- Cost/latency less critical
+
+**Balance**:
+- Command hooks for simple checks
+- Prompt hooks for complex validation
+- Combine when appropriate