claude-dev-env 1.12.0 → 1.13.0

package/bin/install.mjs

@@ -29,7 +29,6 @@ const INSTALL_GROUPS = {
         description: 'Prompt engineering tools',
         skills: ['prompt-generator', 'agent-prompt'],
         includeHookFiles: [
-            'blocking/agent-execution-intent-gate.py',
             'blocking/prompt_workflow_gate_core.py',
             'blocking/prompt-workflow-stop-guard.py',
             'HOOK_SPECS_PROMPT_WORKFLOW.md',

package/hooks/HOOK_SPECS_PROMPT_WORKFLOW.md

@@ -2,21 +2,9 @@
 
 Deterministic runtime gates for prompt workflows.
 
-## Gate: Execution Intent (PreToolUse Task/Agent)
+## PreToolUse Task/Agent (removed)
 
-- Hook: `hooks/blocking/agent-execution-intent-gate.py`
-- Event: `PreToolUse`
-- Matcher: `Task|Agent`
-- Fail condition:
-  - Missing structured execution intent contract field:
-    - `tool_input.execution_intent: explicit|execute|delegate`, or
-    - `tool_input.execution_intent_explicit: true`, or
-    - `tool_input.metadata.execution_intent: explicit|execute|delegate`
-  - Missing required scope anchors in launch payload (always enforced when execution launch is evaluated)
-- Compatibility fallback:
-  - Text markers are only accepted when `PROMPT_WORKFLOW_ALLOW_TEXT_INTENT_FALLBACK=1` is set.
-  - Fallback usage is logged to stderr.
-- Action: `deny` with concrete missing requirement list.
+The former `agent-execution-intent-gate.py` hook is **removed**. Native Agent/Task launches do not carry stable custom metadata; enforcing scope text on every spawn blocked legitimate `/agent-prompt` and refinement delegations. Scope and checklist rules remain enforced by the Stop guard when a prompt-workflow response is detected.
 
 ## Gate: Leakage + Checklist + Scope (Stop)
 

package/hooks/blocking/prompt-workflow-stop-guard.py

@@ -83,6 +83,8 @@ def _check_checklist_container(assistant_message: str) -> dict | None:
     )
 
 def _check_missing_checklist_rows(assistant_message: str) -> dict | None:
+    if not has_checklist_container(assistant_message):
+        return None
     missing_rows = missing_checklist_rows(assistant_message)
     if not missing_rows:
         return None
@@ -152,7 +154,6 @@ def _evaluate_workflow_gates(assistant_message: str) -> dict | None:
     if not is_prompt_workflow_response(assistant_message):
         return None
     workflow_gate_checks: tuple[Callable[[str], dict | None], ...] = (
-        _check_checklist_container,
         _check_missing_checklist_rows,
         _check_missing_scope_anchors,
         _check_missing_context_signals,

package/hooks/blocking/prompt_workflow_gate_core.py

@@ -54,14 +54,6 @@ INTERNAL_OBJECT_MARKERS: tuple[str, ...] = (
     '"audit_output_contract": {',
 )
 
-EXPLICIT_EXECUTION_MARKERS: tuple[str, ...] = (
-    "/agent-prompt",
-    "execution_intent: explicit",
-    "execution_intent_explicit: true",
-    "explicit execution intent",
-    "explicit delegation intent",
-)
-
 PROMPT_WORKFLOW_RESPONSE_MARKERS: tuple[str, ...] = (
     "checklist_results",
     "overall_status",
@@ -159,36 +151,6 @@ def _contains_any_marker(text: str, markers: Iterable[str]) -> bool:
     return any(marker.lower() in lower_text for marker in markers)
 
 
-def has_explicit_execution_intent(text: str) -> bool:
-    return _contains_any_marker(text, EXPLICIT_EXECUTION_MARKERS)
-
-
-def has_structured_execution_intent(tool_input: object) -> bool:
-    if not isinstance(tool_input, dict):
-        return False
-
-    explicit_flag = tool_input.get("execution_intent_explicit")
-    if isinstance(explicit_flag, bool):
-        return explicit_flag
-
-    intent_value = tool_input.get("execution_intent")
-    if isinstance(intent_value, str):
-        normalized = intent_value.strip().lower()
-        return normalized in {"explicit", "execute", "delegation", "delegate"}
-    if isinstance(intent_value, bool):
-        return intent_value
-
-    metadata = tool_input.get("metadata")
-    if isinstance(metadata, dict):
-        metadata_intent = metadata.get("execution_intent")
-        if isinstance(metadata_intent, str):
-            return metadata_intent.strip().lower() in {"explicit", "execute", "delegate"}
-        if isinstance(metadata_intent, bool):
-            return metadata_intent
-
-    return False
-
-
 def has_debug_intent(text: str) -> bool:
     return _contains_any_marker(text, DEBUG_INTENT_MARKERS)
 

package/hooks/blocking/test_context_control_policy_files.py

@@ -20,8 +20,8 @@ def test_context_control_rule_exists_with_required_sections() -> None:
 
 def test_hook_spec_exists_with_required_gates() -> None:
     text = HOOK_SPEC_PATH.read_text(encoding="utf-8")
-    assert "Execution Intent (PreToolUse Task/Agent)" in text
+    assert "PreToolUse Task/Agent (removed)" in text
+    assert "agent-execution-intent-gate.py" in text
     assert "Leakage + Checklist + Scope (Stop)" in text
     assert "Required Deterministic Checklist Rows" in text
-    assert "structured execution intent contract" in text
     assert "Runtime Context-Control Signals" in text

package/hooks/blocking/test_prompt_workflow_gate_core.py

@@ -3,8 +3,6 @@
 from prompt_workflow_gate_core import (
     find_ambiguous_scope_terms,
     has_checklist_container,
-    has_explicit_execution_intent,
-    has_structured_execution_intent,
     has_internal_object_leak,
     is_prompt_workflow_response,
     missing_context_control_signals,
@@ -13,18 +11,6 @@ from prompt_workflow_gate_core import (
 )
 
 
-def test_execution_intent_marker_detected() -> None:
-    assert has_explicit_execution_intent("execution_intent: explicit")
-
-
-def test_structured_execution_intent_detected_from_contract_field() -> None:
-    assert has_structured_execution_intent({"execution_intent": "explicit"})
-
-
-def test_structured_execution_intent_detected_from_boolean_flag() -> None:
-    assert has_structured_execution_intent({"execution_intent_explicit": True})
-
-
 def test_internal_object_leak_detected() -> None:
     text = '{"pipeline_mode": "internal_section_refinement_with_final_audit"}'
     assert has_internal_object_leak(text)

package/hooks/blocking/test_prompt_workflow_stop_guard.py

@@ -66,7 +66,7 @@ def test_blocks_missing_checklist_rows() -> None:
     assert response["decision"] == "block"
     assert "Deterministic checklist rows missing" in response["reason"]
 
-def test_blocks_missing_checklist_container_for_prompt_workflow_output() -> None:
+def test_allows_prompt_workflow_output_without_checklist_container() -> None:
     payload = {
         "last_assistant_message": (
             "overall_status: pass\n"
@@ -80,9 +80,7 @@ def test_blocks_missing_checklist_container_for_prompt_workflow_output() -> None
         ),
     }
     result = _run_hook(payload)
-    response = json.loads(result.stdout)
-    assert response["decision"] == "block"
-    assert "Deterministic checklist container missing" in response["reason"]
+    assert result.stdout.strip() == ""
 
 def test_blocks_missing_context_control_signals() -> None:
     payload = {

package/hooks/hooks.json

@@ -94,11 +94,6 @@
             "type": "command",
             "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/parallel-task-blocker.py",
             "timeout": 10
-          },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/agent-execution-intent-gate.py",
-            "timeout": 10
           }
         ]
       },

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "1.12.0",
+    "version": "1.13.0",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {

package/skills/agent-prompt/SKILL.md

@@ -68,7 +68,6 @@ Use simplified mode when either condition is true:
 
 This mode is triggered when execution input includes `pipeline_mode: internal_section_refinement_with_final_audit` or equivalent execution-ready orchestration metadata.
 If present, carry forward the scope block (`target_local_roots`, `target_canonical_roots`, `target_file_globs`, `comparison_basis`, `completion_boundary`) so execution remains artifact-bound.
-Execution launch payload must include `execution_intent: explicit`.
 
 1. Spawn exactly 6 refinement agents, one per section in fixed order:
    - `role`
@@ -194,7 +193,7 @@ Section-refinement orchestration is done only when all are true:
 - Gather context before crafting -- do not send an agent in blind
 - Start only after explicit user execution intent; keep prompt authoring/refinement in `/prompt-generator`
 - Default to `section_refinement_with_final_audit` orchestration for execution tasks unless user requests simplified mode
-- Include `execution_intent: explicit` in Task/Agent launch prompts so runtime hooks can enforce deterministic gating
+- Carry scope-block context into execution prompts; native Agent/Task tools have no custom intent metadata
 - If the task is too small for an agent (single file read, quick grep), say so and just do it directly
 - Include obstacle handling: "When encountering obstacles, do not use destructive actions as a shortcut (e.g. --no-verify, discarding unfamiliar files)" -- agents without this guidance may take irreversible shortcuts
 - Frame agent tasks with collaborative language and include permission to express uncertainty — agents produce higher-quality output with collaborative briefing (Anthropic emotion concepts research, 2026)

package/skills/prompt-generator/REFINEMENT_PIPELINE_RUNBOOK.md

@@ -115,7 +115,7 @@ If `overall_status` is `fail`:
 
 - Prompt refinement remains inside `/prompt-generator`.
 - `/agent-prompt` is used only after explicit execution/delegation intent.
-- Execution launch metadata includes `execution_intent: explicit`.
+- Execution handoffs that go through `/agent-prompt` carry scope-block context in the execution prompt as needed.
 - Final refined prompt content is treated as artifact text during refinement and audit.
 - Execution steps (when requested) are bound to scope block artifacts.
 
@@ -128,10 +128,7 @@ If `overall_status` is `fail`:
 
 Validate fail-closed runtime gates:
 
-1. **Execution-intent gate (PreToolUse Task/Agent)**
-   - Deny execution when `execution_intent: explicit` marker is missing.
-   - Deny execution when required scope anchors are missing from launch payload.
-2. **Stop leakage/scope/checklist gate**
+1. **Stop leakage/scope/checklist gate**
    - Block responses that leak raw internal refinement object fields unless debug intent is explicit.
    - Block responses missing deterministic checklist rows when audit output is present.
    - Block responses using ambiguous scope phrasing in scope-bound sections.
@@ -148,8 +145,7 @@ Validate fail-closed runtime gates:
 ## Deterministic vs Semantic Boundary
 
 - **Deterministic (fail-closed):**
-  - Missing execution intent marker
-  - Missing required scope anchors
+  - Missing required scope anchors (when Stop guard applies)
   - Raw internal object leakage without debug intent
   - Missing required checklist rows in audit output
   - Ambiguous scope terms in scope-bound text

package/skills/prompt-generator/SKILL.md

@@ -263,7 +263,7 @@ When refining prompt text:
 
 ### 16. Optional execution handoff (`/agent-prompt`)
 
-Use `/agent-prompt` only after the user explicitly asks to execute. Append `execution_intent: explicit` in **debug** handoff notes when your tooling expects it — not in the default one-line audit.
+Use `/agent-prompt` only after the user explicitly asks to execute. Refinement subagents do not need `/agent-prompt` unless you are performing an execution handoff.
 
 ### 17. Context-footprint controls
 

package/hooks/blocking/agent-execution-intent-gate.py

@@ -1,63 +0,0 @@
-#!/usr/bin/env python3
-"""PreToolUse gate for Task/Agent execution intent and scope anchors."""
-
-from __future__ import annotations
-
-import json
-import sys
-
-from prompt_workflow_gate_core import (
-    has_explicit_execution_intent,
-    has_structured_execution_intent,
-    missing_scope_anchors,
-)
-
-
-def _deny(reason: str) -> None:
-    response = {
-        "hookSpecificOutput": {
-            "hookEventName": "PreToolUse",
-            "permissionDecision": "deny",
-            "permissionDecisionReason": reason,
-        }
-    }
-    print(json.dumps(response))
-
-
-def main() -> None:
-    try:
-        hook_input = json.load(sys.stdin)
-    except json.JSONDecodeError:
-        sys.exit(0)
-
-    tool_name = str(hook_input.get("tool_name", ""))
-    if tool_name not in {"Task", "Agent"}:
-        sys.exit(0)
-
-    tool_input = hook_input.get("tool_input", {})
-    prompt_text = str(tool_input.get("prompt", ""))
-    description = str(tool_input.get("description", ""))
-    combined_text = f"{description}\n{prompt_text}"
-
-    if not has_structured_execution_intent(tool_input):
-        if not has_explicit_execution_intent(combined_text):
-            _deny(
-                "BLOCKED: Missing structured execution intent signal for Agent/Task launch. "
-                "Provide `tool_input.execution_intent: explicit` or "
-                "`tool_input.execution_intent_explicit: true`."
-            )
-            sys.exit(0)
-
-    missing_anchors = missing_scope_anchors(combined_text)
-    if missing_anchors:
-        _deny(
-            "BLOCKED: Scope anchors missing for prompt workflow execution: "
-            + ", ".join(missing_anchors)
-        )
-        sys.exit(0)
-
-    sys.exit(0)
-
-
-if __name__ == "__main__":
-    main()

package/hooks/blocking/test_agent_execution_intent_gate.py

@@ -1,84 +0,0 @@
-"""Tests for agent-execution-intent-gate hook."""
-
-import json
-import subprocess
-import sys
-from pathlib import Path
-
-
-SCRIPT_PATH = Path(__file__).parent / "agent-execution-intent-gate.py"
-
-
-def _run_hook(payload: dict) -> subprocess.CompletedProcess[str]:
-    return subprocess.run(
-        [sys.executable, str(SCRIPT_PATH)],
-        input=json.dumps(payload),
-        text=True,
-        capture_output=True,
-        check=False,
-    )
-
-
-def test_denies_task_without_explicit_intent_marker() -> None:
-    payload = {
-        "tool_name": "Task",
-        "tool_input": {"prompt": "run the workflow", "description": "delegate"},
-    }
-    result = _run_hook(payload)
-    response = json.loads(result.stdout)
-    assert response["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert "structured execution intent signal" in response["hookSpecificOutput"]["permissionDecisionReason"]
-
-
-def test_allows_phrase_marker_with_scope_anchors() -> None:
-    payload = {
-        "tool_name": "Task",
-        "tool_input": {
-            "prompt": (
-                "execution_intent: explicit\n"
-                "target_local_roots\n"
-                "target_canonical_roots\n"
-                "target_file_globs\n"
-                "comparison_basis\n"
-                "completion_boundary\n"
-            ),
-            "description": "explicit delegation intent",
-        },
-    }
-    result = _run_hook(payload)
-    assert result.stdout.strip() == ""
-
-
-def test_denies_when_scope_anchors_missing() -> None:
-    payload = {
-        "tool_name": "Agent",
-        "tool_input": {
-            "execution_intent": "explicit",
-            "prompt": "target_local_roots only",
-            "description": "delegate",
-        },
-    }
-    result = _run_hook(payload)
-    response = json.loads(result.stdout)
-    assert response["hookSpecificOutput"]["permissionDecision"] == "deny"
-    assert "Scope anchors missing" in response["hookSpecificOutput"]["permissionDecisionReason"]
-
-
-def test_allows_when_intent_and_scope_anchors_present() -> None:
-    payload = {
-        "tool_name": "Task",
-        "tool_input": {
-            "execution_intent_explicit": True,
-            "description": "delegate",
-            "prompt": (
-                "target_local_roots\n"
-                "target_canonical_roots\n"
-                "target_file_globs\n"
-                "comparison_basis\n"
-                "completion_boundary\n"
-            ),
-        },
-    }
-    result = _run_hook(payload)
-    assert result.stdout.strip() == ""
-