claude-dev-env 1.15.0 → 1.16.0

package/agents/skill-writer-agent.md

@@ -268,7 +268,7 @@ You are a specialized agent that orchestrates the skill-writer skill for creatin
 ## Examples
 
 <example>
-<context>User wants to create a simple skill for git commit message formatting (single file, straightforward).</context>
+<background>User wants to create a simple skill for git commit message formatting (single file, straightforward).</background>
 
 <user>
 Create a skill for writing good git commit messages following conventional commits.
@@ -303,7 +303,7 @@ This is straightforward enough for the skill to handle directly without needing
 </example>
 
 <example>
-<context>User needs comprehensive web automation skill with TDD patterns, helper scripts, and team deployment.</context>
+<background>User needs comprehensive web automation skill with TDD patterns, helper scripts, and team deployment.</background>
 
 <user>
 We need a comprehensive skill for web automation development. It should include:
@@ -378,7 +378,7 @@ Once I have these details, I'll create the complete package with progressive dis
 </example>
 
 <example>
-<context>User asks about allowed-tools frontmatter field.</context>
+<background>User asks about allowed-tools frontmatter field.</background>
 
 <user>
 When should I use the allowed-tools field in SKILL.md frontmatter?

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "1.15.0",
+    "version": "1.16.0",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {

package/skills/prompt-generator/REFERENCE.md

@@ -217,8 +217,8 @@ Shape (field names stable for internal audit helpers and Stop-hook leak detectio
     "comparison_basis": "...",
     "completion_boundary": "..."
   },
-  "required_sections": ["role", "context", "instructions", "constraints", "output_format", "examples"],
-  "base_prompt_xml": "<role>...</role><context>...</context><instructions>...</instructions><constraints>...</constraints><examples>...</examples><output_format>...</output_format>",
+  "required_sections": ["role", "background", "instructions", "constraints", "output_format", "illustrations"],
+  "base_prompt_xml": "<role>...</role><background>...</background><instructions>...</instructions><constraints>...</constraints><illustrations>...</illustrations><output_format>...</output_format>",
   "section_scope_rule": "Each refiner edits exactly one section and returns sibling sections unchanged.",
   "section_output_contract": {
     "required_fields": ["improved_block", "rationale", "concise_diff"]

package/skills/prompt-generator/REFINEMENT_PIPELINE_RUNBOOK.md

@@ -28,11 +28,11 @@ Use this command:
      - `completion_boundary`
    - XML scaffold includes all sections — verified by the Stop hook at runtime; each required section tag must have both an opening and a closing tag:
      - `<role>`
-     - `<context>`
+     - `<background>`
      - `<instructions>`
      - `<constraints>`
      - `<output_format>`
-     - `<examples>`
+     - `<illustrations>`
    - Includes internal refinement object with:
      - `pipeline_mode: internal_section_refinement_with_final_audit`
      - `required_sections` list with all six sections
@@ -129,7 +129,7 @@ If `overall_status` is `fail`:
 Validate fail-closed runtime gates:
 
 1. **Stop leakage/scope/checklist gate**
-   - **Section-presence gate (Stop)** — Block responses where the fenced XML artifact is missing any of the five required section tag pairs: `role`, `context`, `instructions`, `constraints`, `output_format`.
+   - **Section-presence gate (Stop)** — Block responses where the fenced XML artifact is missing any of the five required section tag pairs: `role`, `background`, `instructions`, `constraints`, `output_format`.
    - Block responses that leak raw internal refinement object fields unless debug intent is explicit.
    - Block responses missing deterministic checklist rows when audit output is present.
    - Block responses using ambiguous scope phrasing in scope-bound sections.
@@ -149,7 +149,7 @@ Validate fail-closed runtime gates:
   - Missing required scope anchors (when Stop guard applies)
   - Raw internal object leakage without debug intent
   - Missing required checklist rows in audit output
-  - Missing required XML sections (`role`, `context`, `instructions`, `constraints`, `output_format`) in the fenced artifact (opening and closing tags)
+  - Missing required XML sections (`role`, `background`, `instructions`, `constraints`, `output_format`) in the fenced artifact (opening and closing tags)
   - Ambiguous scope terms in scope-bound text
   - Negative keywords inside fenced XML artifacts
   - Hedging language inside fenced XML artifacts

package/skills/prompt-generator/SKILL.md

@@ -53,7 +53,7 @@ Match `TARGET_OUTPUT.md`. Summary:
 4. **Full audit table / JSON debug object:** Append only after the user uses an explicit debug phrase such as `show debug`, `full audit table`, or `raw internal object`.
 5. **Commit-and-execute:** Pick a drafting approach, run it to completion, ship the XML; change plans only when **new** facts from the user or tools contradict the earlier scope.
 
-**Required XML sections** inside the fence: `<role>`, `<context>`, `<instructions>`, `<constraints>`, `<output_format>`. Optional: `<examples>`, `<open_question>` (use for unresolved discovery — see structural invariant D in `TARGET_OUTPUT.md`).
+**Required XML sections** inside the fence: `<role>`, `<background>`, `<instructions>`, `<constraints>`, `<output_format>`. Optional: `<illustrations>`, `<open_question>` (use for unresolved discovery — see structural invariant D in `TARGET_OUTPUT.md`).
 
 ## Scenario router
 
@@ -64,14 +64,14 @@ Match `TARGET_OUTPUT.md`. Summary:
 | **3 — Long unstructured input** | Many requirements / paths in one message | Verify repo references (packages, shared utils, configs) with targeted tools **before** questions | First question **confirms extracted intent**; ambiguities as **specific** options; **every** user-stated requirement captured in the generated XML by name — track all requirements from the unstructured input and confirm coverage before shipping |
 | **4 — Noisy context** | Long unrelated thread before `/prompt-generator` | Build the subagent brief from: the user’s literal `/prompt-generator` text, a **≤120-word** summary of on-topic facts, and discovery notes—**exclude** raw stack traces and unrelated tangents | As needed (often Scenario 1-shaped) |
 
-**Handoff (Scenario 2):** `<context>` must be **self-contained** — state, **decisions**, files touched, next steps, constraints — so a new session needs no prior chat. Preserve prior decisions verbatim in the handoff; quote the exact decision text where precision matters rather than paraphrasing it away.
+**Handoff (Scenario 2):** `<background>` must be **self-contained** — state, **decisions**, files touched, next steps, constraints — so a new session needs no prior chat. Preserve prior decisions verbatim in the handoff; quote the exact decision text where precision matters rather than paraphrasing it away.
 
 ## Phase ordering (structural invariant A)
 
 For the **final** user-visible turn that ships the artifact:
 
 - Compose the message as **audit line → opening fence → XML → closing fence → end**; keep the byte stream free of `tool_use` blocks **between** the opening and closing fences.
-- **Completeness:** End every numbered step inside `<instructions>` with a complete sentence and a fully written list item. Balance every XML tag explicitly (open and close each `<role>`, `<context>`, `<instructions>`, `<constraints>`, `<output_format>`). The artifact must be copy-pasteable into a new file with zero manual repair.
+- **Completeness:** End every numbered step inside `<instructions>` with a complete sentence and a fully written list item. Balance every XML tag explicitly (open and close each `<role>`, `<background>`, `<instructions>`, `<constraints>`, `<output_format>`). The artifact must be copy-pasteable into a new file with zero manual repair.
 - Global pipeline: **discovery tools** (when applicable) → **AskUserQuestion** → **subagent** (draft + refinement + internal audit) → **one** orchestrator reply containing only audit line + fence.
 
 ## Interactive discovery mode (default)
@@ -116,7 +116,7 @@ Match specificity to task fragility:
 
 ### 3. Collect required missing facts
 
-If AskUserQuestion did not cover something essential, the drafting agent either (a) inserts `<open_question>` in `<context>` with the missing fact spelled out, or (b) signals the orchestrator to run **another** AskUserQuestion round **before** emitting the fence—avoid free-form clarification paragraphs in the orchestrator chat.
+If AskUserQuestion did not cover something essential, the drafting agent either (a) inserts `<open_question>` in `<background>` with the missing fact spelled out, or (b) signals the orchestrator to run **another** AskUserQuestion round **before** emitting the fence—avoid free-form clarification paragraphs in the orchestrator chat.
 
 ### 3A. Anchor scope to concrete artifacts (required)
 
@@ -132,15 +132,15 @@ Use this scope block as the grounding contract for all generated instructions. E
 
 ### 4. Build the prompt
 
-Apply principles from Anthropic’s prompting guide (see REFERENCE.md): XML sections, role, motivation in `<context>`, positive framing, emotion-informed collaborative tone where appropriate, **commit-and-execute** for multi-step agent prompts.
+Apply principles from Anthropic’s prompting guide (see REFERENCE.md): XML sections, role, motivation in `<background>`, positive framing, emotion-informed collaborative tone where appropriate, **commit-and-execute** for multi-step agent prompts.
 
 **Structural invariant D:** Write `<instructions>` / `<constraints>` as direct imperatives (“Open `path/to/file.ts` and …”). Park unresolved items in `<open_question>` tags—one distinct question per tag with the exact decision you need. Inside the fenced XML artifact, use only confident, definitive language: replace hedging phrases (“let me also check”, “actually”, “one more consideration”) and tentative qualifiers (“might be”, “possibly”, “I think”, “could be”) with direct assertions or move genuine uncertainty into `<open_question>` tags.
 
 **Set a role** in the system prompt. Anthropic: "Setting a role in the system prompt focuses Claude's behavior and tone for your use case. Even a single sentence makes a difference."
 
-**Add motivation behind constraints** in `<context>`. Anthropic: "Providing context or motivation behind your instructions... can help Claude better understand your goals and deliver more targeted responses." Claude generalizes from the explanation.
+**Add motivation behind constraints** in `<background>`. Anthropic: "Providing context or motivation behind your instructions... can help Claude better understand your goals and deliver more targeted responses." Claude generalizes from the explanation.
 
-**Frame positively (zero-negative-keyword rule).** Anthropic: state the desired outcome directly. "Your response should be composed of smoothly flowing prose paragraphs" provides clearer guidance than a prohibition-only instruction. Apply this rule absolutely inside the fenced XML artifact across all sections (`<role>`, `<context>`, `<instructions>`, `<constraints>`, `<output_format>`): every instruction states what to do, what to produce, what to enforce. Use affirmative directives exclusively: "only X", "always X", "ensure X", "require X." Banned keywords inside generated XML: "no", "not", "don't", "do not", "never", "avoid", "without", "refrain", "stop", "prevent", "exclude", "prohibit", "forbid", "reject", "cannot", "unless." Also banned: indirect negative patterns such as "instead of X", "rather than X", "as opposed to." Example pass: "Ensure all functions have explicit return types." Example fail: "Do not leave return types implicit." When a boundary is needed, phrase it as what is permitted: "only run commands within the scoped paths" rather than a prohibition.
+**Frame positively (zero-negative-keyword rule).** Anthropic: state the desired outcome directly. "Your response should be composed of smoothly flowing prose paragraphs" provides clearer guidance than a prohibition-only instruction. Apply this rule absolutely inside the fenced XML artifact across all sections (`<role>`, `<background>`, `<instructions>`, `<constraints>`, `<output_format>`): every instruction states what to do, what to produce, what to enforce. Use affirmative directives exclusively: "only X", "always X", "ensure X", "require X." Banned keywords inside generated XML: "no", "not", "don't", "do not", "never", "avoid", "without", "refrain", "stop", "prevent", "exclude", "prohibit", "forbid", "reject", "cannot", "unless." Also banned: indirect negative patterns such as "instead of X", "rather than X", "as opposed to." Example pass: "Ensure all functions have explicit return types." Example fail: "Do not leave return types implicit." When a boundary is needed, phrase it as what is permitted: "only run commands within the scoped paths" rather than a prohibition.
 
 **Emotion-informed framing.** Anthropic's emotion concepts research (2026) shows that internal activation patterns causally influence output quality. Apply: explicit success criteria with "say so if you're unsure" as an accepted answer; collaborative language ("help figure out", "work on this together"); framing tasks as interesting problems rather than chores; constructive, forward-looking tone. Cross-model caveat: studied on Sonnet 4.5; the patterns align with Anthropic's prompting best practices independently. Full pattern catalog and citations: `packages/claude-dev-env/docs/emotion-informed-prompt-design.md`.
 
@@ -164,9 +164,18 @@ State desired outcomes explicitly; use XML inside the generated prompt when mixi
 
 Tune verbosity in the **generated** prompt: summaries after tool use vs direct answers — as appropriate to the user’s AskUserQuestion answers.
 
-### 7. Add examples
+### 7. Add illustrations (`<illustrations>`)
 
-For format- or tone-sensitive **generated** prompts, include 3–5 `<example>` blocks where helpful.
+Use the optional `<illustrations>` section when concrete samples make format, tone, or structure obvious to the downstream reader.
+
+**Code and command samples inside `<illustrations>` (drafting subagent — follow in order):**
+
+1. **Indented block (default for chat-stable rendering):** Put each line of sample shell, Python, JSON, or config text at **four spaces** of indentation from the left margin of the XML text so the sample reads as a single monospaced block inside `<illustrations>` using **only** leading spaces on each sample line (plain text inside the XML).
+2. **Tilde fence:** When the sample needs explicit fence delimiters, use a **tilde** fence only: an opening line `~~~` plus an optional info word (e.g. `~~~bash`), the sample lines, then a closing line `~~~` alone on its own line.
+3. **Triple-backtick inner fence:** When the sample must use backtick fences, emit a **complete pair**: an opening line beginning with three backticks plus an info string (e.g. `` ```bash ``), the sample lines, then a closing line containing only three backticks. The prompt-workflow hook and clipboard path treat that pair as one unit inside the outer `` ```xml `` fence. For the **most stable on-screen rendering** in chat UIs, use step 1 or step 2 above before this option.
+4. **Cap count:** Include **three to five** distinct illustration blocks (narrative plus optional sample) unless the user’s brief asks for a different depth.
+
+These steps are **machine-facing obligations** for the orchestrator and drafting subagent. The person invoking `/prompt-generator` receives the finished fenced XML; the skill text above is what the model follows when filling `<illustrations>`.
 
 ### 8. Light self-check (subagent, pre-return)
 
@@ -185,7 +194,8 @@ Expand the light self-check with this internal checklist when useful:
 - [ ] Emotion-informed framing is present: collaborative language, explicit success criteria, and explicit permission to express uncertainty ("say so if unsure")
 - [ ] Constraints are surfaced upfront (proactive constraint awareness) so the model can incorporate them into its plan, and each non-obvious constraint carries its motivation
 - [ ] Self-correction chaining is considered when the prompt must hold up over time (generate → review → refine)
-- [ ] All five required XML sections (`<role>`, `<context>`, `<instructions>`, `<constraints>`, `<output_format>`) are present with both opening and closing tags in the fenced artifact
+- [ ] All five required XML sections (`<role>`, `<background>`, `<instructions>`, `<constraints>`, `<output_format>`) are present with both opening and closing tags in the fenced artifact
+- [ ] If `<illustrations>` is present, code or command samples inside it follow §7 (indented block, or tilde fence, or complete triple-backtick pair in that priority order)
 
 ### 9. Deliver (orchestrator)
 
@@ -197,25 +207,25 @@ Audit: pass 15/15
 
 (or `fail N/15 — …`), immediately followed by **one** fenced XML block; **send boundary** is immediately after the closing fence so the user receives a copy-ready pair (audit line + artifact) in one assistant message before the conversation continues.
 
-**Render-survival:** When the fenced XML uses tag names that **collide with HTML5 elements** (`context`, `section`, `summary`, `details`, `header`, `footer`, `main`, `aside`, `article`, `nav`, `figure`), or when the artifact is **very large**, **write the artifact to a file** and give the user the path together with the usual one-line audit. Add a brief **section inventory** (confirming the five required sections) so the user can trust the file even if the inline fence would render poorly. Details: **TARGET_OUTPUT.md — Structural invariant E**.
+**Render-survival:** When the fenced XML uses tag names that **collide with HTML5 elements** (`section`, `summary`, `details`, `header`, `footer`, `main`, `aside`, `article`, `nav`, `figure`), or when the artifact is **very large**, **write the artifact to a file** and give the user the path together with the usual one-line audit. Add a brief **section inventory** (confirming the five required sections) so the user can trust the file even if the inline fence would render poorly. Required grounding uses `<background>` (the old `context` name matched HTML). Details: **TARGET_OUTPUT.md — Structural invariant E**.
 
 ### 10. Default refinement mode (subagent-internal)
 
 For non-trivial requests, run inside the drafting subagent (use **draft-only** when the user explicitly asks for a quick draft / no refinement loop):
 
 1. Base draft
-2. Section refinement in order: `role`, `context`, `instructions`, `constraints`, `output_format`, `examples` (examples optional if unused)
+2. Section refinement in order: `role`, `background`, `instructions`, `constraints`, `output_format`, `illustrations` (illustrations optional if unused)
 3. Merge to one canonical XML prompt
 4. Final **15-row compliance audit** pass/fail with evidence (internal)
 5. If fail: targeted fixes + capped re-audit rounds
 
-Required section list is immutable for this pipeline: `role`, `context`, `instructions`, `constraints`, `output_format`, `examples`.
+Required section list is immutable for this pipeline: `role`, `background`, `instructions`, `constraints`, `output_format`, `illustrations`.
 
 ### 11. Compliance audit — 15-row checklist (internal, audit numerator)
 
 **Two-tier validation — tier 2:** The `15` in `Audit: pass 15/15` counts these **compliance** rows (stable ids for hooks). Tier 1 is the **light self-check** in §8—keep the steps separate so models do not merge them.
 
-**Runtime Stop hook:** In addition to the 15-row internal audit, the `prompt-workflow-stop-guard` Stop hook enforces **section presence** on prompt-workflow responses: any fenced Markdown XML block must include opening and closing tags for `role`, `context`, `instructions`, `constraints`, and `output_format`. Missing tags trigger a retry before the user sees a passing turn. Pair this with **Structural invariant E** in `TARGET_OUTPUT.md` so users still receive intact XML when chat renderers strip HTML-named tags.
+**Runtime Stop hook:** In addition to the 15-row internal audit, the `prompt-workflow-stop-guard` Stop hook enforces **section presence** on prompt-workflow responses: any fenced Markdown XML block must include opening and closing tags for `role`, `background`, `instructions`, `constraints`, and `output_format`. Missing tags trigger a retry before the user sees a passing turn. Pair this with **Structural invariant E** in `TARGET_OUTPUT.md` so users still receive intact XML when chat renderers strip HTML-named tags. `prompt_workflow_gate_core.extract_fenced_xml_content` scans each inner Markdown fence (` ```lang ` through its closing `` ``` `` line) as a unit so hooks and clipboard copy see the **full** XML body, including everything after inner fences inside `<illustrations>`.
 
 | # | Row name |
 |---|----------|

package/skills/prompt-generator/TARGET_OUTPUT.md

@@ -36,7 +36,7 @@ This file is the **target output spec** for eval-driven iteration of the `prompt
 
 **Output:** Send audit line, then one `xml` fence with the full prompt, then stop—the handoff message is complete.
 
-**Handoff prompt quality:** `<context>` must include the bullet lists above so a new session can continue with **zero** access to this chat. Quote decision text verbatim where precision matters.
+**Handoff prompt quality:** `<background>` must include the bullet lists above so a new session can continue with **zero** access to this chat. Quote decision text verbatim where precision matters.
 
 ## Scenario 3: Long unstructured input
 
@@ -70,15 +70,15 @@ This file is the **target output spec** for eval-driven iteration of the `prompt
 ## Structural invariant B — Fenced block closes cleanly
 
 - Use one opening ``` and one closing ``` for the artifact.
-- Balance every XML tag; close `<instructions>`, `<context>`, etc. explicitly.
+- Balance every XML tag; close `<instructions>`, `<background>`, etc. explicitly.
 - End each numbered step inside `<instructions>` with a complete sentence and a fully written list item.
 - The user can copy from the opening ``` through the closing ``` into a new file without manual repair.
 
 ## Structural invariant C — Discovery before lock-in
 
-- When the user is unsure where logic lives, run discovery **before** you freeze the XML; record findings in `<context>` with paths from Glob/Grep.
+- When the user is unsure where logic lives, run discovery **before** you freeze the XML; record findings in `<background>` with paths from Glob/Grep.
 - If discovery finds the owner file(s), reference them with repo-relative paths in `<instructions>`.
-- If discovery is inconclusive, add `<open_question>` in `<context>` naming what you searched and what remains unknown.
+- If discovery is inconclusive, add `<open_question>` in `<background>` naming what you searched and what remains unknown.
 - After the opening fence of the artifact, treat the XML as frozen: finish editing inside that fence; route any new repo searches to a later user turn if needed.
 
 ## Structural invariant D — Certainty in instructions, questions in tags
@@ -89,9 +89,11 @@ This file is the **target output spec** for eval-driven iteration of the `prompt
 
 ## Structural invariant E — Render-survival for XML sections
 
-- **Problem:** Tag names used for prompt XML sections can overlap **HTML5 element names**. Chat renderers may treat those tokens as HTML and hide or alter the content between tags. High-risk examples include: `context`, `section`, `summary`, `details`, `header`, `footer`, `main`, `aside`, `article`, `nav`, `figure`. The raw assistant text may be complete while the **rendered** message looks like sections are missing (notably `<context>`).
-- **Primary mitigation:** When the fenced XML artifact **contains any tag whose local name is on that HTML-collision list**, or when the artifact is **large enough that render truncation is likely**, the orchestrator **must write the full artifact to a file** (default: under `data/prompts/` or a path the user supplied earlier) and **paste the absolute file path** in the chat message. Pair the path with a **short section inventory** confirming all five required sections (`role`, `context`, `instructions`, `constraints`, `output_format`) are present in the file.
-- **Fallback when file write is unavailable:** Escape the **opening angle bracket** of colliding tags (for example `&lt;context>` — user restores `<` when pasting) or use another distinctive wrapper **documented in the same message**, so the user can recover literal XML. State explicitly that the user should restore brackets when copying into another system.
+- **Problem (HTML):** Tag names used for prompt XML sections can overlap **HTML5 element names**. Chat renderers may treat those tokens as HTML and hide or alter the content between tags. High-risk examples include: `section`, `summary`, `details`, `header`, `footer`, `main`, `aside`, `article`, `nav`, `figure`. The former required name `context` matched an HTML element; **required** sections now use `<background>` for situational grounding so the name stays off that list. The raw assistant text may be complete while the **rendered** message looks like sections are missing.
+- **Problem (nested Markdown fences):** A ` ```bash ` (or other inner) line inside the outer ` ```xml ` block is still a line of text in the transcript, but many Markdown renderers treat it as **opening a nested code fence**, which **closes the outer fence early**. Everything after that point (including `</illustrations>` and other closing tags) can appear outside the code block or look “swallowed.” Hooks historically used a regex that stopped at the **first** triple-backtick line; `extract_fenced_xml_content` now walks inner fences (` ```lang ` … closing `` ``` ``) before accepting the outer `` ``` `` that ends the `xml` block.
+- **Primary mitigation:** When the fenced XML artifact **contains any tag whose local name is on the HTML-collision list**, or when the artifact is **large enough that render truncation is likely**, the orchestrator **must write the full artifact to a file** (default: under `data/prompts/` or a path the user supplied earlier) and **paste the absolute file path** in the chat message. Pair the path with a **short section inventory** confirming all five required sections (`role`, `background`, `instructions`, `constraints`, `output_format`) are present in the file.
+- **Authoring rules for code inside `<illustrations>` (orchestrator + drafting subagent — see `SKILL.md` §7):** (1) Format each sample line with **four leading spaces** inside `<illustrations>` as the default for stable rendered chat. (2) **Or** use a **tilde fence**: `~~~` + optional language on the opening line, body, then `~~~` on its own line. (3) **Or** use a **complete triple-backtick pair** (opening `` ```lang `` line, body, closing `` ``` `` line); hooks and clipboard treat the pair as one unit inside the outer `` ```xml `` fence.
+- **Fallback when file write is unavailable:** Escape the **opening angle bracket** of colliding tags (for example `&lt;section>` — user restores `<` when pasting) or use another distinctive wrapper **documented in the same message**, so the user can recover literal XML. State explicitly that the user should restore brackets when copying into another system.
 - **Structural safety net:** Regardless of renderer behavior, the **Stop hook section-presence gate** blocks any prompt-workflow response whose fenced XML is missing any required opening/closing section tag pair. Methodology: [Anthropic — Agent Skills: evaluation and iteration](https://platform.claude.com/docs/en/agents-and-tools/agent-skills/best-practices#evaluation-and-iteration).
 
 ## XML artifact (minimum sections)
@@ -99,12 +101,12 @@ This file is the **target output spec** for eval-driven iteration of the `prompt
 Include at least:
 
 - `<role>...</role>`
-- `<context>...</context>`
+- `<background>...</background>`
 - `<instructions>...</instructions>`
 - `<constraints>...</constraints>`
 - `<output_format>...</output_format>`
 
-Add `<examples>` when format or tone is easy to misunderstand; nest sections when the task has natural hierarchy.
+Add `<illustrations>` when format or tone is easy to misunderstand; nest sections when the task has natural hierarchy. **Long code samples belong in `<illustrations>`** using the same ordered choices as Structural invariant E: four-space-indented lines first, then tilde fences, then a complete triple-backtick pair if the brief requires backtick fences (see `SKILL.md` §7).
 
 ## Internal 15-row compliance checklist (audit numerator)
 

package/skills/prompt-generator/evals/prompt-generator.json

@@ -15,7 +15,7 @@
         "AskUserQuestion contains 2-4 questions, each with 2-4 options, recommended option first",
         "Final response contains exactly: 1-liner audit status + one fenced XML prompt block",
         "No commentary, tables, audit rows, or explanation outside the fenced block",
-        "Fenced block contains <role>, <context>, <instructions>, <constraints>, <output_format>",
+        "Fenced block contains <role>, <background>, <instructions>, <constraints>, <output_format>",
         "Prompt generation delegated to a subagent (Agent tool call visible in the flow)"
       ]
     },
@@ -30,7 +30,7 @@
       ],
       "expected_behavior": [
         "AskUserQuestion has 1-2 questions — lighter than Scenario 1",
-        "Generated prompt <context> includes: session state, decisions, files modified, next steps",
+        "Generated prompt <background> includes: session state, decisions, files modified, next steps",
         "No redundant discovery tool calls for information already in conversation",
         "Handoff prompt is self-contained — a new session can resume without prior context",
         "Prior decisions preserved in the handoff, not lost or paraphrased away",
@@ -101,7 +101,7 @@
       "expected_behavior": [
         "Discovery tool calls attempt to locate scoring logic before prompt generation",
         "If resolved: prompt references concrete file paths from discovery",
-        "If unresolved: prompt contains <open_question> in <context> for downstream agent",
+        "If unresolved: prompt contains <open_question> in <background> for downstream agent",
         "No re-entry to discovery after fenced block starts",
         "AskUserQuestion may surface the uncertainty if discovery was inconclusive"
       ]
@@ -131,7 +131,7 @@
         "Every instruction phrased as a positive directive: what TO do, what TO produce, what TO enforce",
         "Constraints section uses affirmative boundaries: 'only X', 'always X', 'ensure X', 'require X' — positive framing throughout",
         "Example: 'Ensure all functions have explicit return types' passes; 'Do not leave return types implicit' fails; 'Avoid missing return types' fails",
-        "Applies to all sections inside the fenced block: <role>, <context>, <instructions>, <constraints>, <output_format>"
+        "Applies to all sections inside the fenced block: <role>, <background>, <instructions>, <constraints>, <output_format>"
       ]
     },
     {
@@ -141,7 +141,7 @@
       "prompt": "/prompt-generator Write a system prompt for a Python linting agent that auto-fixes code style issues in this repo",
       "files": [],
       "expected_behavior": [
-        "Fenced XML block contains opening and closing tags for all five required sections: role, context, instructions, constraints, output_format",
+        "Fenced XML block contains opening and closing tags for all five required sections: role, background, instructions, constraints, output_format",
         "Each required section contains substantive content (minimum one sentence each)",
         "The Stop hook section-presence check passes for this output (no missing section tags)",
         "Sections appear in order: role first, output_format last among the five required sections"
@@ -151,10 +151,10 @@
       "id": 11,
       "name": "section_missing_triggers_hook_block",
       "scenario": "Section completeness gate — failure path",
-      "prompt": "Synthetic eval: assistant final message is prompt-workflow shaped (overall_status, checklist, scope anchors, runtime signals) with a fenced Markdown XML block whose body omits the entire context section (no context opening/closing tags); observer asserts Stop hook behavior and successful retry.",
+      "prompt": "Synthetic eval: assistant final message is prompt-workflow shaped (overall_status, checklist, scope anchors, runtime signals) with a fenced Markdown XML block whose body omits the entire background section (no background opening/closing tags); observer asserts Stop hook behavior and successful retry.",
       "files": [],
       "expected_behavior": [
-        "The Stop hook runs _check_required_xml_sections and returns a block decision naming context as a missing section",
+        "The Stop hook runs _check_required_xml_sections and returns a block decision naming background as a missing section",
         "The model retry includes all five required sections with both opening and closing tags",
         "The retry output passes the section-presence gate (empty missing list from missing_required_xml_sections)"
       ]
@@ -166,10 +166,22 @@
       "prompt": "/prompt-generator Write a comprehensive agent prompt for migrating a large Prisma schema and all related API routes, with step-by-step rollout, rollback, and verification — artifact sized like the migration prompt that triggered chat render stripping.",
       "files": [],
       "expected_behavior": [
-        "When the artifact exceeds a size threshold or contains XML section tag names that collide with HTML5 elements (context, section, summary, details, header, footer, main, aside, article, nav, figure), the orchestrator writes the full artifact to a file under data/prompts/ or a user-specified path",
+        "When the artifact exceeds a size threshold or contains XML section tag names that collide with HTML5 elements (section, summary, details, header, footer, main, aside, article, nav, figure), the orchestrator writes the full artifact to a file under data/prompts/ or a user-specified path",
         "The file contains the complete XML with all tags preserved as literal text",
         "The user-facing message states the file path and briefly inventories which required sections the artifact contains"
       ]
+    },
+    {
+      "id": 13,
+      "name": "nested_inner_fence_does_not_truncate_xml_for_hooks",
+      "scenario": "Structural invariant E — nested Markdown fences inside ```xml",
+      "prompt": "/prompt-generator Include <illustrations> with a bash snippet using triple-backtick fences inside the XML, mirroring real prompts that previously hid </illustrations> in chat and broke hook extraction.",
+      "files": [],
+      "expected_behavior": [
+        "prompt_workflow_gate_core.extract_fenced_xml_content includes text after inner ```bash ... ``` lines up to the final closing ``` of the xml fence",
+        "missing_required_xml_sections sees closing tags for role, background, instructions, constraints, output_format when those appear after nested fences",
+        "SKILL.md §7 states ordered authoring steps for <illustrations>: four-space-indented sample lines, then tilde fences, then a complete triple-backtick pair when required"
+      ]
     }
   ]
 }