claude-dev-env 2.16.0 → 2.18.0

package/_shared/pr-loop/scripts/tests/test_claude_permissions_common.py

@@ -1,4 +1,4 @@
-"""Tests for _shared permission helpers extracted from skills/bugteam/scripts/."""
+"""Tests for _shared permission helpers (historically extracted from bugteam scripts)."""
 
 import importlib.util
 import inspect

package/_shared/pr-loop/scripts/tests/test_code_rules_gate.py

@@ -1,4 +1,4 @@
-"""Tests for shared code_rules_gate.py extracted from skills/bugteam/scripts/.
+"""Tests for shared code_rules_gate.py (historically extracted from bugteam scripts).
 
 Covers:
 - Module loads from _shared/pr-loop/scripts/ location

package/_shared/pr-loop/scripts/tests/test_fix_hookspath.py

@@ -1,4 +1,4 @@
-"""Tests for shared fix_hookspath.py extracted from skills/bugteam/scripts/.
+"""Tests for shared fix_hookspath.py (historically extracted from bugteam scripts).
 
 Covers:
 - removes a local-scope core.hooksPath override and re-runs preflight

package/_shared/pr-loop/state-schema.md

@@ -13,41 +13,33 @@ State each PR-loop workflow tracks across iterations. Workflows differ on persis
 | `starting_sha` | str | `git rev-parse HEAD` at workflow start |
 | `loop_comment_index` | dict | `{finding_id: {finding_comment_id, finding_comment_url, thread_node_id, fix_status, ...}}` (`thread_node_id` is the PR review thread node id — `PRRT_kwDOxxx` — captured at audit time when calling `get_review_comments`, used by `resolve_thread` at FIX time) |
 
-## Workflow-specific extensions
+## autoconverge (workflow and portable pacer)
 
-### bugteam
+Workflow runs hold round state in the workflow journal. On `pacer=portable`, the
+continuous driver seeds `pr-converge-state.json` under the job directory and
+advances phases through `portable_converge_driver.py`. Portable state carries
+`current_head`, `phase`, `codex_clean_at`, `codex_down`, `codex_required`, and
+pending `next` / `wait_seconds` stamps. Round shape and terminal gates are
+documented in
+[`../../.agents/skills/autoconverge/reference/convergence.md`](../../.agents/skills/autoconverge/reference/convergence.md).
+The machine readiness checklist is
+[`../../.agents/skills/autoconverge/reference/convergence-gates.md`](../../.agents/skills/autoconverge/reference/convergence-gates.md).
 
-Adds:
-- `team_name` — `bugteam-pr-<N>-<YYYYMMDDHHMMSS>` or `bugteam-<YYYYMMDDHHMMSS>` for multi-PR
-- `team_temp_dir` — absolute path resolved from `tempfile.gettempdir()`
-- `pre_fix_sha` — `git rev-parse HEAD` immediately before each FIX
-- `gate_round_count` — consecutive pre-audit gate failures (cap: 5 → exit `error`)
+## Archived workflow extensions
 
-State lives inline in the lead session (orchestrator). Cleared on TeamDelete. A single-subagent cycle returns its loop counter and findings in the exit payload (`{exit_reason, loop_count, final_commit_sha, audit_log, unresolved}`); the orchestrator discards intermediate state.
+Historical field lists for retired entry skills live under
+`packages/claude-dev-env/.agents/skills-archived/`:
 
-### pr-converge
-
-Normative field list, phase enum, dual persistence, and reset semantics: [`../../skills/pr-converge/reference/state-schema.md`](../../skills/pr-converge/reference/state-schema.md). File-backed multi-PR `status` enum: [`../../skills/pr-converge/reference/multi-pr-orchestration.md`](../../skills/pr-converge/reference/multi-pr-orchestration.md).
-
-Multi-PR runs also keep a per-PR JSON state file at `~/.claude/skills/pr-converge/state/<owner>-<repo>-<pr_number>.json`:
-
-| Field | Type | Description |
-|---|---|---|
-| `repo_name` | str | Full `owner/repo` |
-| `pr_number` | int | PR number |
-| `status` | enum | `open`, `blocked_escalation`, `fixing`, `ready_candidate`, `closed` |
-| `copilot_review` | enum | `none`, `requested`, `pending`, `commented`, `approved` |
-| `bugbot_review` | enum | Same vocabulary as `copilot_review`; one of `none`, `requested`, `pending`, `commented`, `approved` |
-| `last_seen_comment_id` | int \| null | Highest processed review-comment id (incremental polling watermark) |
-| `review_comments` | list[object] | Optional cache; `{id, author, path, line}` per entry |
-| `escalation_queue` | list[object] | Pending human-judgment items: `{comment_id, summary, created_at}` |
+- **bugteam** — inline orchestrator state, `team_name`, `gate_round_count`, exit payload fields. See [`../../.agents/skills-archived/bugteam/SKILL.md`](../../.agents/skills-archived/bugteam/SKILL.md).
+- **pr-converge** — file-backed multi-PR state, phase enum, dual persistence. See [`../../.agents/skills-archived/pr-converge/reference/state-schema.md`](../../.agents/skills-archived/pr-converge/reference/state-schema.md) and [`../../.agents/skills-archived/pr-converge/reference/multi-pr-orchestration.md`](../../.agents/skills-archived/pr-converge/reference/multi-pr-orchestration.md).
 
 ## Reset semantics
 
-- bugteam: cleared on each new `/bugteam` invocation
-- pr-converge: see [`../../skills/pr-converge/reference/state-schema.md`](../../skills/pr-converge/reference/state-schema.md); multi-PR file state persists across orchestrator runs and only `last_seen_comment_id` advances monotonically
+- **autoconverge** — portable state resets on a fresh `open-run`; workflow journal is per run id.
+- **Archived bugteam** — cleared on each new invocation; see archived skill body.
+- **Archived pr-converge** — see archived [`state-schema.md`](../../.agents/skills-archived/pr-converge/reference/state-schema.md); multi-PR file state persists across orchestrator runs and only `last_seen_comment_id` advances monotonically.
 
 ## Convergence checks
 
-- bugteam: `last_action == "audited"` AND `last_findings.total == 0` → `converged`
-- pr-converge: see [`../../skills/pr-converge/reference/convergence-gates.md`](../../skills/pr-converge/reference/convergence-gates.md); multi-PR ready when no unresolved comments require code changes, required checks are green, and review policy is satisfied → `gh pr ready`
+- **autoconverge** — `packages/claude-dev-env/_shared/pr-loop/scripts/check_convergence.py` is the single readiness source; gate labels are listed in [`../../.agents/skills/autoconverge/reference/convergence-gates.md`](../../.agents/skills/autoconverge/reference/convergence-gates.md). On pass, mark the PR ready (`gh pr ready`).
+- **Archived pr-converge** — same script and archived [`convergence-gates.md`](../../.agents/skills-archived/pr-converge/reference/convergence-gates.md) reference.

package/_shared/pr-loop/worker-spawn.md

@@ -121,13 +121,14 @@ preflight/runner classification strings (for example `grok_binary_missing`,
 After a grok fallthrough the dispatcher calls `detect_host_profile()` from
 `tier_model_ids` (advisor scripts). Detection order:
 
-1. `ADVISOR_HOST_PROFILE` when set — must be `Claude` or `ThirdParty` (any letter case).
+1. `ADVISOR_HOST_PROFILE` when set — must be `Claude`, `Codex`, or `ThirdParty` (any letter case).
 2. `THIRD_PARTY` when truthy — `1`, `true`, `yes`, or `on`.
 3. Default: `Claude`.
 
-Profiles are the real names `Claude` and `ThirdParty` (not a separate Grok host
+Profiles are the real names `Claude`, `Codex`, and `ThirdParty` (not a separate Grok host
 profile). Grok is tier 1 on every host; host profile only chooses the post-grok
-branch (Agent-tool handoff vs headless claude chain).
+branch (Agent-tool handoff vs headless claude chain). A Codex profile takes the
+non-Claude branch.
 
 ## Code-review host routing
 

package/_shared/process-tree/AGENTS.md

@@ -9,10 +9,10 @@ never outlive the run and hold the capture pipe open.
 | Caller | Use |
 |---|---|
 | `scripts/grok_headless_runner.py` | Kills a timed-out worker's tree between drain attempts |
-| `skills/codex-review/scripts/run_codex_review.py` | Kills the review tree on timeout, then drains |
-| `skills/codex-review/scripts/codex_usage_probe.py` | Tears the app-server tree down after the rate-limits exchange |
+| `_shared/pr-loop/scripts/run_codex_review.py` | Kills the review tree on timeout, then drains |
+| `_shared/pr-loop/scripts/codex_usage_probe.py` | Tears the app-server tree down after the rate-limits exchange |
 
-A skill script reaches this home the way the bugteam scripts reach
+A PR-loop script reaches this home the way convergence scripts reach
 `_shared/pr-loop/scripts`: it puts the directory on `sys.path` and imports by
 module name. `bin/install.mjs` copies `_shared` and `scripts` together, and
 every install group that carries a consumer carries `_shared`, so the import

package/bin/ever-shipped-skills.mjs

@@ -19,36 +19,57 @@
  * and pasting each distinct top-level skill directory name below.
  */
 export const EVER_SHIPPED_SKILL_NAMES = new Set([
+    'agent-prompt',
     'anthropic-plan',
     'auditing-claude-config',
     'autoconverge',
+    'balatro',
     'bdd-protocol',
     'beat-sheet',
     'bg-agent',
+    'build-goal-prompt',
     'bugteam',
     'caveman',
     'closeout',
     'code',
+    'comments',
+    'condensing-instructions',
     'codex-review',
+    'context7-mcp',
     'copilot-finding-triage',
     'copilot-review',
     'deep-research',
+    'descriptions',
+    'emergencies',
     'everything-search',
     'findbugs',
     'fixbugs',
     'fresh-branch',
+    'gen-9-patch-icons',
+    'gen-all-icons',
+    'gen-clock-numbers',
+    'gen-icon-tray',
+    'gen-main-icons',
+    'gen-misc-icons',
     'gh-paginate',
     'gotcha',
     'grok-spawn',
     'grokify',
+    'icon-review-sheet',
     'imagegen',
     'implement',
     'issue-tracker',
     'log-audit',
     'logifix',
+    'midjourney-prompt',
+    'midjourney-submit',
     'monitor-open-prs',
     'orchestrator',
     'orchestrator-refresh',
+    'plan-to-pr',
+    'pmax',
+    'pmid',
+    'pmin',
     'post-audit-findings',
     'pr-consistency-audit',
     'pr-converge',
@@ -59,22 +80,29 @@ export const EVER_SHIPPED_SKILL_NAMES = new Set([
     'pr-scope-resolve',
     'pre-compact',
     'privacy-hygiene',
+    'prompt-generator',
     'qbug',
     'rebase',
     'recall',
+    'reconcile-account',
+    'reddit-post-optimizer',
     'refine',
+    'release-notes-html',
     'remember',
     'research-mode',
     'reviewer-gates',
+    'reviews',
     'run-claude-dev-env',
     'session-log',
     'session-tidy',
+    'show',
     'skill-builder',
+    'small-cl',
+    'split-pr',
     'structure-prompt',
     'task-build',
     'team-advisor',
     'update',
     'usage-pause',
     'verified-build',
-    'split-pr',
 ]);

package/bin/install-constants.mjs

@@ -83,16 +83,25 @@ export const MANAGED_AGENTS_DIRECTORY_NAME = 'agents';
 
 /**
  * The directory name hook scripts carry in a package source and under
- * `~/.claude`.
+ * the agents home.
  *
- * The copy loop reads `<package-root>/hooks` and writes `~/.claude/hooks`, the
- * hooks.json reads sit under the same name in each package source, the git-hook
- * shims and the mypy configuration point at the installed directory, the
- * retired-hook diff takes its relative paths against it, and the per-root
- * stale-file prune names it as one of its roots.
+ * The copy loop reads `<package-root>/.agents/hooks` (or `<package-root>/hooks`
+ * for a dependency with the legacy layout) and writes `~/.agents/hooks`.
+ * Claude and Codex lookup paths point at that canonical directory.
  */
 export const MANAGED_HOOKS_DIRECTORY_NAME = 'hooks';
 
+/**
+ * The directory name reusable scripts carry in a package source and under the
+ * agents home.
+ */
+export const MANAGED_SCRIPTS_DIRECTORY_NAME = 'scripts';
+
+/**
+ * Directory name Codex uses for installed hook scripts.
+ */
+export const CODEX_HOOKS_DIRECTORY_NAME = 'hooks';
+
 /**
  * The `~/.claude` file name that holds the user's harness settings.
  *

package/bin/install.agents-home.test.mjs

@@ -30,6 +30,7 @@ const THIS_DIRECTORY = dirname(fileURLToPath(import.meta.url));
 const INSTALLER_PATH = join(THIS_DIRECTORY, 'install.mjs');
 const PACKAGE_DIRECTORY = dirname(THIS_DIRECTORY);
 const SHIPPED_SKILL_NAME = 'privacy-hygiene';
+const ELI5_SKILL_NAME = 'eli5';
 const SHIPPED_AGENT_FILE_NAME = 'clean-coder.md';
 const PERSONAL_SKILL_NAME = 'my-notes';
 
@@ -70,13 +71,20 @@ test('a full install writes skills and agents under .agents and points .claude a
         const canonicalSkillFile = join(
             skillsInstallDirectory, SHIPPED_SKILL_NAME, 'SKILL.md',
         );
+        const canonicalEli5SkillFile = join(
+            skillsInstallDirectory, ELI5_SKILL_NAME, 'SKILL.md',
+        );
         const lookupSkillFile = join(
             skillsLookupDirectory, SHIPPED_SKILL_NAME, 'SKILL.md',
         );
+        const lookupEli5SkillFile = join(
+            skillsLookupDirectory, ELI5_SKILL_NAME, 'SKILL.md',
+        );
         const canonicalAgentFile = join(agentsInstallDirectory, SHIPPED_AGENT_FILE_NAME);
         const lookupAgentFile = join(agentsLookupDirectory, SHIPPED_AGENT_FILE_NAME);
 
         assert.equal(existsSync(canonicalSkillFile), true, 'skill file lives under .agents/skills');
+        assert.equal(existsSync(canonicalEli5SkillFile), true, 'ELI5 skill file lives under .agents/skills');
         assert.equal(existsSync(canonicalAgentFile), true, 'agent file lives under .agents/agents');
         assert.equal(lstatSync(skillsLookupDirectory).isSymbolicLink(), true);
         assert.equal(lstatSync(agentsLookupDirectory).isSymbolicLink(), true);
@@ -92,7 +100,12 @@ test('a full install writes skills and agents under .agents and points .claude a
             readFileSync(lookupSkillFile, 'utf8'),
             readFileSync(canonicalSkillFile, 'utf8'),
         );
+        assert.equal(
+            readFileSync(lookupEli5SkillFile, 'utf8'),
+            readFileSync(canonicalEli5SkillFile, 'utf8'),
+        );
         assert.equal(realpathSync(lookupSkillFile), realpathSync(canonicalSkillFile));
+        assert.equal(realpathSync(lookupEli5SkillFile), realpathSync(canonicalEli5SkillFile));
         assert.equal(
             readFileSync(lookupAgentFile, 'utf8'),
             readFileSync(canonicalAgentFile, 'utf8'),

package/bin/install.cursor-rules.test.mjs

@@ -45,7 +45,7 @@ test('resolveInstallRoot names ~/.cursor/rules and allows generated mdc files un
     );
     assert.equal(resolution.cursorRulesInstallDirectory, expectedDirectory);
     assert.equal(
-        isAllowedInstallDestination(join(expectedDirectory, 'plain-language.mdc'), resolution),
+        isAllowedInstallDestination(join(expectedDirectory, 'asd-ste100-language.mdc'), resolution),
         true,
     );
     assert.equal(
@@ -72,7 +72,7 @@ test('a full install writes stem-named Cursor rules and leaves a local extra mdc
             homeDirectory,
             DEFAULT_CURSOR_DIRECTORY_NAME,
             CURSOR_RULES_DIRECTORY_NAME,
-            'plain-language.mdc',
+            'asd-ste100-language.mdc',
         );
         assert.equal(existsSync(generatedPath), true);
         const generatedText = readFileSync(generatedPath, 'utf8');
@@ -90,7 +90,7 @@ test('--only journal skips Cursor rule generation; --only core writes them', ()
             homeDirectory,
             DEFAULT_CURSOR_DIRECTORY_NAME,
             CURSOR_RULES_DIRECTORY_NAME,
-            'plain-language.mdc',
+            'asd-ste100-language.mdc',
         );
         runInstaller(homeDirectory, ['--only', 'journal']);
         assert.equal(existsSync(generatedPath), false);

package/bin/install.mjs

@@ -22,6 +22,7 @@ import {
     MANAGED_SKILLS_DIRECTORY_NAME,
     MANAGED_AGENTS_DIRECTORY_NAME,
     MANAGED_HOOKS_DIRECTORY_NAME,
+    MANAGED_SCRIPTS_DIRECTORY_NAME,
     SETTINGS_FILE_NAME,
     CODEX_RULES_PACKAGE_DIRECTORY_NAME,
     CURSOR_SYNC_SCRIPT_FILE_NAME,
@@ -100,7 +101,7 @@ const INSTALL_TARGET_IDENTITY = (() => {
     }
 })();
 
-export const CONTENT_DIRECTORIES = ['rules', 'docs', 'commands', 'system-prompts', 'scripts', '_shared', 'audit-rubrics'];
+export const CONTENT_DIRECTORIES = ['rules', 'docs', 'commands', 'system-prompts', '_shared', 'audit-rubrics'];
 
 /**
  * Every top-level lookup directory the installer writes into under ~/.claude:
@@ -115,6 +116,7 @@ export const MANAGED_TOP_LEVEL_DIRECTORY_NAMES = [
     ...CONTENT_DIRECTORIES,
     MANAGED_SKILLS_DIRECTORY_NAME,
     MANAGED_AGENTS_DIRECTORY_NAME,
+    MANAGED_SCRIPTS_DIRECTORY_NAME,
     MANAGED_HOOKS_DIRECTORY_NAME,
 ];
 
@@ -159,14 +161,14 @@ export const CORE_INCLUDE_DIRECTORIES = [
 ];
 
 export const CORE_SKILLS = [
-    'orchestrator', 'orchestrator-refresh', 'team-advisor', 'grokify',
+    'orchestrator', 'orchestrator-refresh', 'team-advisor',
     'grok-spawn',
-    'small-cl', 'comments', 'reviews', 'descriptions', 'emergencies',
-    'anthropic-plan', 'everything-search',
+    'small-cl',
+    'everything-search',
     'privacy-hygiene',
     'issue-tracker',
-    'recall', 'remember', 'task-build',
-    'show',
+    'task-build',
+    'eli5',
 ];
 
 export function collectPackageSourceConflicts(packageDirectory) {
@@ -766,34 +768,61 @@ function owningManagedRoot(installedFilePath) {
         const managedRoot = join(CLAUDE_HOME, directoryName);
         if (isInsideDirectory(resolvedPath, managedRoot)) return managedRoot;
     }
-    for (const directoryName of [MANAGED_SKILLS_DIRECTORY_NAME, MANAGED_AGENTS_DIRECTORY_NAME]) {
+    for (const directoryName of [
+        MANAGED_SKILLS_DIRECTORY_NAME,
+        MANAGED_AGENTS_DIRECTORY_NAME,
+        MANAGED_HOOKS_DIRECTORY_NAME,
+        MANAGED_SCRIPTS_DIRECTORY_NAME,
+    ]) {
         const agentsRoot = join(AGENTS_HOME, directoryName);
         if (isInsideDirectory(resolvedPath, agentsRoot)) return agentsRoot;
     }
     const codexRulesDirectory = INSTALL_ROOT_RESOLUTION.codexRulesInstallDirectory;
     if (isInsideDirectory(resolvedPath, codexRulesDirectory)) return codexRulesDirectory;
+    const codexHooksDirectory = INSTALL_ROOT_RESOLUTION.codexHooksInstallDirectory;
+    if (isInsideDirectory(resolvedPath, codexHooksDirectory)) return codexHooksDirectory;
     const cursorInstallDirectory = INSTALL_ROOT_RESOLUTION.cursorInstallDirectory;
     if (isInsideDirectory(resolvedPath, cursorInstallDirectory)) return cursorInstallDirectory;
     return null;
 }
 
 /**
- * Publish `~/.claude/skills` and `~/.claude/agents` as directory pointers to
- * the agents home.
+ * Publish harness lookup paths as directory pointers to the agents home.
  *
  * Skills and agents live under `~/.agents` (or the per-root agents home).
  * Claude Code discovers them at the lookup paths under the managed Claude root,
  * so those two paths are pointers. A real directory from an older install at a
  * lookup path is merged into the agents home before the pointer is written.
  *
- * @returns {string[]} The two lookup paths this run published.
+ * @returns {string[]} The lookup paths this run published.
  */
-function publishSkillAndAgentLookupPointers() {
-    const skillsPointer = INSTALL_ROOT_RESOLUTION.skillsLookupDirectory;
-    const agentsPointer = INSTALL_ROOT_RESOLUTION.agentsLookupDirectory;
-    ensureDirectoryPointer(skillsPointer, INSTALL_ROOT_RESOLUTION.skillsInstallDirectory);
-    ensureDirectoryPointer(agentsPointer, INSTALL_ROOT_RESOLUTION.agentsInstallDirectory);
-    return [skillsPointer, agentsPointer];
+function publishManagedLookupPointers() {
+    const pointerPairs = [
+        [
+            INSTALL_ROOT_RESOLUTION.skillsLookupDirectory,
+            INSTALL_ROOT_RESOLUTION.skillsInstallDirectory,
+        ],
+        [
+            INSTALL_ROOT_RESOLUTION.agentsLookupDirectory,
+            INSTALL_ROOT_RESOLUTION.agentsInstallDirectory,
+        ],
+        [
+            INSTALL_ROOT_RESOLUTION.hooksLookupDirectory,
+            INSTALL_ROOT_RESOLUTION.hooksInstallDirectory,
+        ],
+        [
+            INSTALL_ROOT_RESOLUTION.scriptsLookupDirectory,
+            INSTALL_ROOT_RESOLUTION.scriptsInstallDirectory,
+        ],
+        [
+            INSTALL_ROOT_RESOLUTION.codexHooksInstallDirectory,
+            INSTALL_ROOT_RESOLUTION.hooksInstallDirectory,
+        ],
+    ];
+    for (const [pointerPath, targetPath] of pointerPairs) {
+        ensureDirectoryPointer(pointerPath, targetPath);
+    }
+    return pointerPairs.map(([pointerPath]) => pointerPath);
 }
 
 /**
@@ -1083,7 +1112,6 @@ export const FOLDED_HOOK_RELATIVE_PATHS = new Set([
     'blocking/env_var_table_code_drift_blocker.py',
     'blocking/pytest_testpaths_orphan_blocker.py',
     'blocking/open_questions_in_plans_blocker.py',
-    'blocking/plain_language_blocker.py',
     'blocking/md_to_html_blocker.py',
 ]);
 
@@ -1591,7 +1619,11 @@ function loadClaudeSettingsObjectOrExit(settingsPath) {
  * @returns {number} Count of matcher groups merged.
  */
 function mergeHooks(hooksSourceRoot, pythonCommand) {
-    const hooksJsonPath = join(hooksSourceRoot, MANAGED_HOOKS_DIRECTORY_NAME, 'hooks.json');
+    const hooksSource = resolvePackageManagedDirectory(
+        hooksSourceRoot,
+        MANAGED_HOOKS_DIRECTORY_NAME,
+    );
+    const hooksJsonPath = join(hooksSource, 'hooks.json');
     if (!existsSync(hooksJsonPath)) return 0;
     const hooksConfig = JSON.parse(readFileSync(hooksJsonPath, 'utf8'));
     const settingsPath = join(CLAUDE_HOME, SETTINGS_FILE_NAME);
@@ -2011,7 +2043,7 @@ function executeInstallPlanMutations(plan, transactionHelpers) {
     console.log(`\nInstalling ${PACKAGE_NAME} (${groupLabel})...\n`);
     console.log(`  Python: ${pythonCommand}`);
     mkdirSync(CLAUDE_HOME, { recursive: true });
-    const publishedPointerPaths = publishSkillAndAgentLookupPointers();
+    const publishedPointerPaths = publishManagedLookupPointers();
 
     const activeGroups = selectedGroups
         ? selectedGroups.map(groupName => ({ groupName, ...INSTALL_GROUPS[groupName] }))
@@ -2106,6 +2138,27 @@ function executeInstallPlanMutations(plan, transactionHelpers) {
             allInstalledFiles.push(...stats.paths);
         }
     }
+    const shouldCopyScripts = !allowedDirectories
+        || allowedDirectories.has(MANAGED_SCRIPTS_DIRECTORY_NAME);
+    if (shouldCopyScripts) {
+        for (const sourceRoot of allSourceRoots) {
+            const scriptsSource = resolvePackageManagedDirectory(
+                sourceRoot,
+                MANAGED_SCRIPTS_DIRECTORY_NAME,
+            );
+            if (!existsSync(scriptsSource)) continue;
+            const scriptsDestination = INSTALL_ROOT_RESOLUTION.scriptsLookupDirectory;
+            const stats = copyTree(scriptsSource, scriptsDestination);
+            if (!summary[MANAGED_SCRIPTS_DIRECTORY_NAME]) {
+                summary[MANAGED_SCRIPTS_DIRECTORY_NAME] = stats;
+            } else {
+                summary[MANAGED_SCRIPTS_DIRECTORY_NAME].created += stats.created;
+                summary[MANAGED_SCRIPTS_DIRECTORY_NAME].updated += stats.updated;
+                summary[MANAGED_SCRIPTS_DIRECTORY_NAME].paths.push(...stats.paths);
+            }
+            allInstalledFiles.push(...stats.paths);
+        }
+    }
     const shouldInstallCodexRules = !selectedGroups
         || activeGroups.some((eachGroup) => eachGroup.includeCodexRules);
     if (shouldInstallCodexRules) {
@@ -2167,7 +2220,10 @@ function executeInstallPlanMutations(plan, transactionHelpers) {
         let totalHooksUpdated = 0;
         let totalHookGroups = 0;
         for (const sourceRoot of allSourceRoots) {
-            const hooksSource = join(sourceRoot, MANAGED_HOOKS_DIRECTORY_NAME);
+            const hooksSource = resolvePackageManagedDirectory(
+                sourceRoot,
+                MANAGED_HOOKS_DIRECTORY_NAME,
+            );
             if (!existsSync(hooksSource)) continue;
             const hooksDestination = join(CLAUDE_HOME, MANAGED_HOOKS_DIRECTORY_NAME);
             const filesToCopy = collectFiles(hooksSource)
@@ -2341,6 +2397,10 @@ function executeInstallPlanMutations(plan, transactionHelpers) {
         const { created, updated } = summary[MANAGED_AGENTS_DIRECTORY_NAME];
         console.log(`  ${MANAGED_AGENTS_DIRECTORY_NAME}: ${created + updated} files (${created} new, ${updated} updated)`);
     }
+    if (summary[MANAGED_SCRIPTS_DIRECTORY_NAME]) {
+        const { created, updated } = summary[MANAGED_SCRIPTS_DIRECTORY_NAME];
+        console.log(`  ${MANAGED_SCRIPTS_DIRECTORY_NAME}: ${created + updated} files (${created} new, ${updated} updated)`);
+    }
     if (summary.skills) {
         const { created, updated, pruned } = summary.skills;
         const staleClause = pruned > 0 ? `, ${pruned} stale moved aside` : '';

package/bin/install.profile-root.test.mjs

@@ -82,7 +82,7 @@ test('explicit target has precedence over CLAUDE_CONFIG_DIR and the home default
 
 test('isPathWithinManagedRoot requires a separator boundary', () => {
     const managedRoot = resolve(join(tmpdir(), 'containment-root', '.claude'));
-    const insideFile = join(managedRoot, 'rules', 'plain-language.md');
+    const insideFile = join(managedRoot, 'rules', 'asd-ste100-language.md');
     const evilSibling = `${managedRoot}-evil`;
     const evilChild = join(`${managedRoot}-evil`, 'rules', 'x.md');