claude-dev-env 2.4.0 → 2.5.0

package/hooks/blocking/config/verified_commit_constants.py

@@ -1,159 +1,160 @@
-"""Constants for the verified-commit gate hook family.
-
-Shared by ``verification_verdict_store.py``, ``verified_commit_gate.py``,
-and ``verifier_verdict_minter.py`` so every tunable lives in one place.
-"""
-
-from __future__ import annotations
-
-GIT_TIMEOUT_SECONDS = 30
-ROOT_KEY_HEX_LENGTH = 16
-VERDICT_JSON_INDENT = 2
-CLAUDE_HOME_DIRECTORY_NAME = ".claude"
-VERDICT_DIRECTORY_NAME = "verification"
-VERDICT_DIRECTORY_NAME_SEPARATOR_PATTERN = r"['\"\\/,\s]+"
-VERDICT_DIRECTORY_PATH_BOUNDARY_PATTERN = r"(?=['\"]*[\\/,])"
-RELATIVE_VERDICT_DIRECTORY_PATTERN = r"(?:^|(?<=[\s;&|(='\"]))verification[\\/]"
-VERDICT_PATH_GLUE_PATTERN = r"['\"+\\/\s]*[\\/]['\"+\\/\s]*"
-VERDICT_DIRECTORY_CHANGE_TARGET_PATTERN = r"[ \t]+['\"]?verification[\\/]?['\"]?(?=[\s;&|]|$)"
-VERDICT_PATH_JOINED_VARIABLE_PATTERN = r"\$\{?(\w+)\}?[\\/]|[\\/]\$\{?(\w+)\}?"
-VERDICT_PATH_VARIABLE_ASSIGNMENT_PATTERN = r"(?:^|(?<=[\s;&|(]))%s=(\S+)"
-VERDICT_FILE_RELATIVE_REFERENCE_PATTERN = (
-    rf"(?:^|(?<=[\s;&|(='\"\\/]))verification[\\/][0-9a-f]{{{ROOT_KEY_HEX_LENGTH}}}\.json"
-)
-PATH_OBFUSCATION_PRIMITIVE_PATTERN = (
-    r"chr\s*\(|bytes\.fromhex\s*\(|b64decode\s*\(|codecs\.decode\s*\("
-    r"|(?:bytes|bytearray)\s*\(\s*\[|\[char\[?\]?\]"
-)
-ALL_VERDICT_PATH_SEGMENT_NAMES = (".claude", "verification")
-ALL_VERDICT_PATH_SEGMENT_BODIES = ("claude", "verification")
-HEX_TOKEN_PATTERN = r"(?<![0-9a-fx])([0-9a-f]{6,})(?![0-9a-f])"
-BASE64_TOKEN_PATTERN = r"[A-Za-z0-9+/]{8,}={0,2}"
-CHARACTER_CODE_SEQUENCE_PATTERN = r"\d{1,3}(?:\s*,\s*\d{1,3})+"
-CHR_CALL_CHAIN_PATTERN = r"chr\(\s*\d{1,3}\s*\)(?:\s*\+\s*chr\(\s*\d{1,3}\s*\))+"
-CHR_CALL_CODE_PATTERN = r"chr\(\s*(\d{1,3})\s*\)"
-HEX_DIGITS_PER_BYTE = 2
-FILE_WRITE_PRIMITIVE_PATTERN = (
-    r"\bopen\s*\(|\.write_text\s*\(|\.write_bytes\s*\("
-    r"|Out-File|Set-Content|Add-Content|\btee\b|>"
-)
-NON_REDIRECT_FILE_WRITE_PRIMITIVE_PATTERN = (
-    r"\bopen\s*\(|\.write_text\s*\(|\.write_bytes\s*\("
-    r"|Out-File|Set-Content|Add-Content|\btee\b"
-)
-WRITE_CALL_REGION_PATTERN = (
-    r"(?:\bopen\s*\(|\.write_text\s*\(|\.write_bytes\s*\("
-    r"|Out-File|Set-Content|Add-Content|\btee\b)[^;&|\n]*"
-)
-VERDICT_KEY_ALL_PASS = "all_pass"
-VERDICT_KEY_MANIFEST_SHA256 = "manifest_sha256"
-VERDICT_KEY_FINDINGS = "findings"
-VERDICT_FINDING_CHECK_KEY = "check"
-LOGS_DIRECTORY_NAME = "logs"
-VERIFIER_VERDICTS_JSONL_FILENAME = "verifier-verdicts.jsonl"
-LEDGER_KEY_TIMESTAMP = "timestamp"
-LEDGER_KEY_REPO_ROOT = "repo_root"
-LEDGER_KEY_BRANCH = "branch"
-LEDGER_KEY_MANIFEST_HASH = "manifest_hash"
-LEDGER_KEY_ALL_PASS = "all_pass"
-LEDGER_KEY_FINDING_COUNT = "finding_count"
-LEDGER_KEY_FINDING_CHECK_NAMES = "finding_check_names"
-LEDGER_KEY_MINTED_FROM_AGENT_ID = "minted_from_agent_id"
-VERDICT_FILE_GLOB = "*.json"
-SUBAGENTS_DIRECTORY_NAME = "subagents"
-AGENT_TRANSCRIPT_GLOB = "agent-*.jsonl"
-AGENT_META_SIDECAR_SUFFIX = ".meta.json"
-AGENT_META_TYPE_KEY = "agentType"
-TRANSCRIPT_ENTRY_TYPE_KEY = "type"
-TRANSCRIPT_ASSISTANT_ENTRY_TYPE = "assistant"
-TRANSCRIPT_MESSAGE_KEY = "message"
-TRANSCRIPT_CONTENT_KEY = "content"
-TRANSCRIPT_CONTENT_TYPE_KEY = "type"
-TRANSCRIPT_TEXT_CONTENT_TYPE = "text"
-TRANSCRIPT_TEXT_KEY = "text"
-VERDICT_FENCE_PATTERN = r"```verdict\s*\n(.*?)```"
-MANIFEST_HASH_CLI_FLAG = "--manifest-hash"
-MANIFEST_HASH_FOR_BRANCH_CLI_FLAG = "--manifest-hash-for-branch"
-WORKTREE_LIST_PATH_PREFIX = "worktree "
-WORKTREE_LIST_BRANCH_PREFIX = "branch "
-BRANCH_REFERENCE_PREFIX = "refs/heads/"
-EMPTY_SURFACE_GUARD_MESSAGE = (
-    "ERROR: The work tree at {repo_root} has no changed or untracked files "
-    "versus origin/main (empty change surface). This work tree holds nothing "
-    "to verify — you are pointed at the wrong work tree. Run `git worktree list` "
-    "to see all checked-out work trees and target the one on the branch under review."
-)
-BRANCH_WORKTREE_ABSENT_MESSAGE = (
-    "ERROR: No work tree has branch '{branch}' checked out. "
-    "Check it out in a work tree first: "
-    "`git worktree add <path> <branch>` or `git checkout <branch>`."
-)
-DOCS_ONLY_EXTENSIONS = frozenset(
-    {".md", ".txt", ".rst", ".png", ".jpg", ".jpeg", ".gif", ".svg", ".webp", ".ico"}
-)
-PYTHON_EXTENSION = ".py"
-TEST_FILE_PREFIX = "test_"
-TEST_FILE_SUFFIX = "_test.py"
-CONFTEST_FILE_NAME = "conftest.py"
-MINIMUM_STATUS_FIELD_COUNT = 2
-ALL_FALLBACK_BASE_REFERENCES = ("origin/main", "origin/master")
-DETACHED_HEAD_LABEL = "HEAD"
-BRANCH_REMOTE_CONFIG_KEY_TEMPLATE = "branch.{branch_name}.remote"
-ALL_TOOLING_STATE_PREFIXES = (
-    ".claude/verification/",
-    ".claude/worktrees/",
-    ".claude/daemon/",
-    ".claude/teams/",
-    ".claude/sessions/",
-    ".cursor/worktrees/",
-)
-GATED_GIT_SUBCOMMANDS = frozenset({"commit", "push"})
-ALL_GIT_BINARY_NAMES = frozenset({"git", "git.exe"})
-VALUE_TAKING_GIT_OPTIONS = frozenset({"-C", "-c", "--git-dir", "--work-tree", "--namespace"})
-REPO_DIRECTORY_OPTION = "-C"
-WORK_TREE_OPTION = "--work-tree"
-DIRECTORY_CHANGE_VERBS = frozenset({"cd", "pushd", "set-location", "sl"})
-DIRECTORY_CHANGE_PATH_OPTIONS = frozenset({"-path", "-literalpath"})
-DIRECTORY_CHANGE_OPTION_TERMINATOR = "--"
-DIRECTORY_CHANGE_PATTERN_PREFIX = r"(?:^|(?<=[\s;&|(]))(?:"
-DIRECTORY_CHANGE_PATTERN_SUFFIX = r")(?=\s|$)"
-DIRECTORY_CHANGE_OPTION_PREFIX_PATTERN = r"(?:[ \t]+(?:%s)(?=\s|$))*"
-DIRECTORY_CHANGE_TARGET_PATTERN = r"[ \t]+['\"]?\S*"
-CLAUDE_HOME_TARGET_BOUNDARY_PATTERN = r"[\\/]?['\"]?(?=[\s;&|]|$)"
-VERDICT_DIRECTORY_TARGET_BOUNDARY_PATTERN = r"[\\/]?['\"]?(?=[\s;&|]|$)"
-COMMAND_AFTER_DIRECTORY_CHANGE_PATTERN = r"[;&|\n][\s]*\S"
-OPTION_WITH_VALUE_STEP = 2
-ALL_GATED_TOOL_NAMES = ("Bash", "PowerShell")
-HASH_PREVIEW_LENGTH = 16
-VERIFICATION_BYPASS_MARKER = "# verify-skip"
-MINTING_AGENT_TYPE = "code-verifier"
-VERDICT_DIRECTORY_GUARD_MESSAGE = (
-    "BLOCKED: [VERDICT_DIRECTORY_GUARD] Shell access to the verification "
-    "verdict directory (~/.claude/verification/) is denied. Only the "
-    "verifier_verdict_minter.py SubagentStop hook writes verdict files; a "
-    "shell write here would forge a passing verdict and defeat the "
-    "verified-commit gate. Spawn the code-verifier agent to earn a verdict "
-    "instead of writing one."
-)
-CORRECTIVE_MESSAGE = (
-    "BLOCKED: [VERIFIED_COMMIT_GATE] This branch surface has no passing "
-    "verification verdict. Clear commit-committability gates first "
-    "(CODE_RULES on changed lines and merge conflicts vs base — the "
-    "code_verifier_spawn_preflight_gate enforces these on the spawn). If a "
-    "prior commit failed on CODE_RULES or staging, fix those before "
-    "re-verifying. Then spawn the code-verifier agent (Agent or Task tool, "
-    "subagent_type 'code-verifier') with the task texts, the diff scope, "
-    "and recorded baselines; when it finishes with a clean verdict the "
-    "SubagentStop hook mints the verdict and this command will pass. Any "
-    "file change after verification invalidates the verdict, so verify "
-    "last only after commit gates are green. The verdict binds to the exact "
-    "surface content (every changed and untracked file's bytes), not to a "
-    "work-tree path, so a commit from a different work tree passes only "
-    "when its surface is byte-identical; a work tree carrying any extra or "
-    "later edit has a surface no verdict covers. To land this change, run "
-    "this command from the work tree that holds the verified surface, or "
-    "verify this surface here. Exempt automatically: docs/image files, "
-    "pytest test files, and "
-    "Python files whose docstring- and comment-stripped AST is unchanged "
-    "(comment-only edits in non-Python files are not exempt)."
-)
+"""Constants for the verified-commit gate hook family.
+
+Shared by ``verification_verdict_store.py``, ``verified_commit_gate.py``,
+and ``verifier_verdict_minter.py`` so every tunable lives in one place.
+"""
+
+from __future__ import annotations
+
+GIT_TIMEOUT_SECONDS = 30
+ROOT_KEY_HEX_LENGTH = 16
+VERDICT_JSON_INDENT = 2
+CLAUDE_HOME_DIRECTORY_NAME = ".claude"
+VERDICT_DIRECTORY_NAME = "verification"
+VERDICT_DIRECTORY_NAME_SEPARATOR_PATTERN = r"['\"\\/,\s]+"
+VERDICT_DIRECTORY_PATH_BOUNDARY_PATTERN = r"(?=['\"]*[\\/,])"
+RELATIVE_VERDICT_DIRECTORY_PATTERN = r"(?:^|(?<=[\s;&|(='\"]))verification[\\/]"
+VERDICT_PATH_GLUE_PATTERN = r"['\"+\\/\s]*[\\/]['\"+\\/\s]*"
+VERDICT_DIRECTORY_CHANGE_TARGET_PATTERN = r"[ \t]+['\"]?verification[\\/]?['\"]?(?=[\s;&|]|$)"
+VERDICT_PATH_JOINED_VARIABLE_PATTERN = r"\$\{?(\w+)\}?[\\/]|[\\/]\$\{?(\w+)\}?"
+VERDICT_PATH_VARIABLE_ASSIGNMENT_PATTERN = r"(?:^|(?<=[\s;&|(]))%s=(\S+)"
+VERDICT_FILE_RELATIVE_REFERENCE_PATTERN = (
+    rf"(?:^|(?<=[\s;&|(='\"\\/]))verification[\\/][0-9a-f]{{{ROOT_KEY_HEX_LENGTH}}}\.json"
+)
+PATH_OBFUSCATION_PRIMITIVE_PATTERN = (
+    r"chr\s*\(|bytes\.fromhex\s*\(|b64decode\s*\(|codecs\.decode\s*\("
+    r"|(?:bytes|bytearray)\s*\(\s*\[|\[char\[?\]?\]"
+)
+ALL_VERDICT_PATH_SEGMENT_NAMES = (".claude", "verification")
+ALL_VERDICT_PATH_SEGMENT_BODIES = ("claude", "verification")
+HEX_TOKEN_PATTERN = r"(?<![0-9a-fx])([0-9a-f]{6,})(?![0-9a-f])"
+BASE64_TOKEN_PATTERN = r"[A-Za-z0-9+/]{8,}={0,2}"
+CHARACTER_CODE_SEQUENCE_PATTERN = r"\d{1,3}(?:\s*,\s*\d{1,3})+"
+CHR_CALL_CHAIN_PATTERN = r"chr\(\s*\d{1,3}\s*\)(?:\s*\+\s*chr\(\s*\d{1,3}\s*\))+"
+CHR_CALL_CODE_PATTERN = r"chr\(\s*(\d{1,3})\s*\)"
+HEX_DIGITS_PER_BYTE = 2
+FILE_WRITE_PRIMITIVE_PATTERN = (
+    r"\bopen\s*\(|\.write_text\s*\(|\.write_bytes\s*\("
+    r"|Out-File|Set-Content|Add-Content|\btee\b|>"
+)
+NON_REDIRECT_FILE_WRITE_PRIMITIVE_PATTERN = (
+    r"\bopen\s*\(|\.write_text\s*\(|\.write_bytes\s*\("
+    r"|Out-File|Set-Content|Add-Content|\btee\b"
+)
+WRITE_CALL_REGION_PATTERN = (
+    r"(?:\bopen\s*\(|\.write_text\s*\(|\.write_bytes\s*\("
+    r"|Out-File|Set-Content|Add-Content|\btee\b)[^;&|\n]*"
+)
+VERDICT_KEY_ALL_PASS = "all_pass"
+VERDICT_KEY_MANIFEST_SHA256 = "manifest_sha256"
+VERDICT_KEY_FINDINGS = "findings"
+VERDICT_FINDING_CHECK_KEY = "check"
+LOGS_DIRECTORY_NAME = "logs"
+VERIFIER_VERDICTS_JSONL_FILENAME = "verifier-verdicts.jsonl"
+LEDGER_KEY_TIMESTAMP = "timestamp"
+LEDGER_KEY_REPO_ROOT = "repo_root"
+LEDGER_KEY_BRANCH = "branch"
+LEDGER_KEY_MANIFEST_HASH = "manifest_hash"
+LEDGER_KEY_ALL_PASS = "all_pass"
+LEDGER_KEY_FINDING_COUNT = "finding_count"
+LEDGER_KEY_FINDING_CHECK_NAMES = "finding_check_names"
+LEDGER_KEY_MINTED_FROM_AGENT_ID = "minted_from_agent_id"
+VERDICT_FILE_GLOB = "*.json"
+SUBAGENTS_DIRECTORY_NAME = "subagents"
+AGENT_TRANSCRIPT_GLOB = "agent-*.jsonl"
+AGENT_META_SIDECAR_SUFFIX = ".meta.json"
+AGENT_META_TYPE_KEY = "agentType"
+TRANSCRIPT_ENTRY_TYPE_KEY = "type"
+TRANSCRIPT_ASSISTANT_ENTRY_TYPE = "assistant"
+TRANSCRIPT_MESSAGE_KEY = "message"
+TRANSCRIPT_CONTENT_KEY = "content"
+TRANSCRIPT_CONTENT_TYPE_KEY = "type"
+TRANSCRIPT_TEXT_CONTENT_TYPE = "text"
+TRANSCRIPT_TEXT_KEY = "text"
+VERDICT_FENCE_PATTERN = r"```verdict\s*\n(.*?)```"
+MANIFEST_HASH_CLI_FLAG = "--manifest-hash"
+MANIFEST_HASH_FOR_BRANCH_CLI_FLAG = "--manifest-hash-for-branch"
+WORKTREE_LIST_PATH_PREFIX = "worktree "
+WORKTREE_LIST_BRANCH_PREFIX = "branch "
+BRANCH_REFERENCE_PREFIX = "refs/heads/"
+EMPTY_SURFACE_GUARD_MESSAGE = (
+    "ERROR: The work tree at {repo_root} has no changed or untracked files "
+    "versus origin/main (empty change surface). This work tree holds nothing "
+    "to verify — you are pointed at the wrong work tree. Run `git worktree list` "
+    "to see all checked-out work trees and target the one on the branch under review."
+)
+BRANCH_WORKTREE_ABSENT_MESSAGE = (
+    "ERROR: No work tree has branch '{branch}' checked out. "
+    "Check it out in a work tree first: "
+    "`git worktree add <path> <branch>` or `git checkout <branch>`."
+)
+DOCS_ONLY_EXTENSIONS = frozenset(
+    {".md", ".txt", ".rst", ".png", ".jpg", ".jpeg", ".gif", ".svg", ".webp", ".ico"}
+)
+PYTHON_EXTENSION = ".py"
+TEST_FILE_PREFIX = "test_"
+TEST_FILE_SUFFIX = "_test.py"
+CONFTEST_FILE_NAME = "conftest.py"
+MINIMUM_STATUS_FIELD_COUNT = 2
+ALL_FALLBACK_BASE_REFERENCES = ("origin/main", "origin/master")
+DETACHED_HEAD_LABEL = "HEAD"
+BRANCH_REMOTE_CONFIG_KEY_TEMPLATE = "branch.{branch_name}.remote"
+ALL_TOOLING_STATE_PREFIXES = (
+    ".claude/verification/",
+    ".claude/worktrees/",
+    ".claude/daemon/",
+    ".claude/teams/",
+    ".claude/sessions/",
+    ".cursor/worktrees/",
+    ".claude-plugin-data/",
+)
+GATED_GIT_SUBCOMMANDS = frozenset({"commit", "push"})
+ALL_GIT_BINARY_NAMES = frozenset({"git", "git.exe"})
+VALUE_TAKING_GIT_OPTIONS = frozenset({"-C", "-c", "--git-dir", "--work-tree", "--namespace"})
+REPO_DIRECTORY_OPTION = "-C"
+WORK_TREE_OPTION = "--work-tree"
+DIRECTORY_CHANGE_VERBS = frozenset({"cd", "pushd", "set-location", "sl"})
+DIRECTORY_CHANGE_PATH_OPTIONS = frozenset({"-path", "-literalpath"})
+DIRECTORY_CHANGE_OPTION_TERMINATOR = "--"
+DIRECTORY_CHANGE_PATTERN_PREFIX = r"(?:^|(?<=[\s;&|(]))(?:"
+DIRECTORY_CHANGE_PATTERN_SUFFIX = r")(?=\s|$)"
+DIRECTORY_CHANGE_OPTION_PREFIX_PATTERN = r"(?:[ \t]+(?:%s)(?=\s|$))*"
+DIRECTORY_CHANGE_TARGET_PATTERN = r"[ \t]+['\"]?\S*"
+CLAUDE_HOME_TARGET_BOUNDARY_PATTERN = r"[\\/]?['\"]?(?=[\s;&|]|$)"
+VERDICT_DIRECTORY_TARGET_BOUNDARY_PATTERN = r"[\\/]?['\"]?(?=[\s;&|]|$)"
+COMMAND_AFTER_DIRECTORY_CHANGE_PATTERN = r"[;&|\n][\s]*\S"
+OPTION_WITH_VALUE_STEP = 2
+ALL_GATED_TOOL_NAMES = ("Bash", "PowerShell")
+HASH_PREVIEW_LENGTH = 16
+VERIFICATION_BYPASS_MARKER = "# verify-skip"
+MINTING_AGENT_TYPE = "code-verifier"
+VERDICT_DIRECTORY_GUARD_MESSAGE = (
+    "BLOCKED: [VERDICT_DIRECTORY_GUARD] Shell access to the verification "
+    "verdict directory (~/.claude/verification/) is denied. Only the "
+    "verifier_verdict_minter.py SubagentStop hook writes verdict files; a "
+    "shell write here would forge a passing verdict and defeat the "
+    "verified-commit gate. Spawn the code-verifier agent to earn a verdict "
+    "instead of writing one."
+)
+CORRECTIVE_MESSAGE = (
+    "BLOCKED: [VERIFIED_COMMIT_GATE] This branch surface has no passing "
+    "verification verdict. Clear commit-committability gates first "
+    "(CODE_RULES on changed lines and merge conflicts vs base — the "
+    "code_verifier_spawn_preflight_gate enforces these on the spawn). If a "
+    "prior commit failed on CODE_RULES or staging, fix those before "
+    "re-verifying. Then spawn the code-verifier agent (Agent or Task tool, "
+    "subagent_type 'code-verifier') with the task texts, the diff scope, "
+    "and recorded baselines; when it finishes with a clean verdict the "
+    "SubagentStop hook mints the verdict and this command will pass. Any "
+    "file change after verification invalidates the verdict, so verify "
+    "last only after commit gates are green. The verdict binds to the exact "
+    "surface content (every changed and untracked file's bytes), not to a "
+    "work-tree path, so a commit from a different work tree passes only "
+    "when its surface is byte-identical; a work tree carrying any extra or "
+    "later edit has a surface no verdict covers. To land this change, run "
+    "this command from the work tree that holds the verified surface, or "
+    "verify this surface here. Exempt automatically: docs/image files, "
+    "pytest test files, and "
+    "Python files whose docstring- and comment-stripped AST is unchanged "
+    "(comment-only edits in non-Python files are not exempt)."
+)

package/hooks/blocking/orchestrator_refresh_reschedule_gate.py

@@ -0,0 +1,256 @@
+#!/usr/bin/env python3
+"""PreToolUse gate: deny orchestrator-refresh re-arm when the run is not active.
+
+Fires on ``ScheduleWakeup`` and ``CronCreate`` when the prompt targets
+``/orchestrator-refresh``. Uses the same status-file gate as
+``skills/orchestrator/scripts/status_gate.py`` so idle loops
+cannot be re-armed on the Claude host without an active status file.
+"""
+
+from __future__ import annotations
+
+import importlib.util
+import json
+import os
+import re
+import sys
+from pathlib import Path
+from types import ModuleType
+from typing import Mapping
+
+_hooks_dir = str(Path(__file__).resolve().parent.parent)
+if _hooks_dir not in sys.path:
+    sys.path.insert(0, _hooks_dir)
+
+from hooks_constants.hook_block_logger import log_hook_block  # noqa: E402
+from hooks_constants.orchestrator_refresh_reschedule_gate_constants import (  # noqa: E402
+    ALL_HOME_SKILLS_RELATIVE_PARTS,
+    ALL_SCHEDULE_TOOL_NAMES,
+    ALL_SKILL_SCRIPTS_RELATIVE_PARTS,
+    CALLING_HOOK_NAME,
+    CRON_CREATE_TOOL_NAME,
+    CWD_FIELD_NAME,
+    DENY_REASON_TEMPLATE,
+    HOOK_EVENT_NAME,
+    ORCHESTRATOR_REFRESH_PROMPT_TOKEN,
+    PLUGIN_ROOT_ENV_VAR,
+    PROMPT_FIELD_NAME,
+    REASON_CRON_CREATE_FORBIDDEN,
+    RUN_SLUG_PROMPT_FLAG,
+    RUN_SLUG_PROMPT_VALUE_PATTERN,
+    TOOL_INPUT_FIELD_NAME,
+    TOOL_NAME_FIELD_NAME,
+)
+
+
+def _candidate_skill_script_directories() -> list[Path]:
+    """Return ordered paths that may contain status_gate.py.
+
+    Returns:
+        Absolute candidate directories in preference order.
+    """
+    all_candidates: list[Path] = []
+    plugin_root = os.environ.get(PLUGIN_ROOT_ENV_VAR)
+    if plugin_root:
+        all_candidates.append(
+            Path(plugin_root).joinpath(*ALL_SKILL_SCRIPTS_RELATIVE_PARTS)
+        )
+    package_hooks_parent = Path(__file__).resolve().parents[2]
+    all_candidates.append(
+        package_hooks_parent.joinpath(*ALL_SKILL_SCRIPTS_RELATIVE_PARTS)
+    )
+    all_candidates.append(Path.home().joinpath(*ALL_HOME_SKILLS_RELATIVE_PARTS))
+    return all_candidates
+
+
+def _load_status_gate_module() -> ModuleType | None:
+    """Import status_gate from the skill scripts package.
+
+    Returns:
+        The loaded module, or None when no candidate path is usable.
+    """
+    for each_directory in _candidate_skill_script_directories():
+        module_path = each_directory / "status_gate.py"
+        if not module_path.is_file():
+            continue
+        scripts_directory = str(each_directory)
+        if scripts_directory not in sys.path:
+            sys.path.insert(0, scripts_directory)
+        spec = importlib.util.spec_from_file_location(
+            "orchestrator_status_gate_for_reschedule_hook",
+            module_path,
+        )
+        if spec is None or spec.loader is None:
+            continue
+        status_gate_module = importlib.util.module_from_spec(spec)
+        sys.modules[spec.name] = status_gate_module
+        spec.loader.exec_module(status_gate_module)
+        return status_gate_module
+    return None
+
+
+def _prompt_targets_orchestrator_refresh(
+    all_tool_input: Mapping[str, object],
+) -> bool:
+    """Return True when the schedule prompt re-enters orchestrator-refresh.
+
+    Args:
+        all_tool_input: PreToolUse tool_input mapping.
+
+    Returns:
+        True when the prompt field contains the refresh skill token.
+    """
+    prompt_value = all_tool_input.get(PROMPT_FIELD_NAME, "")
+    if not isinstance(prompt_value, str):
+        return False
+    stripped_prompt = prompt_value.lstrip()
+    if not stripped_prompt.startswith(ORCHESTRATOR_REFRESH_PROMPT_TOKEN):
+        return False
+    if len(stripped_prompt) == len(ORCHESTRATOR_REFRESH_PROMPT_TOKEN):
+        return True
+    return stripped_prompt[len(ORCHESTRATOR_REFRESH_PROMPT_TOKEN)] in (" ", "\n", "\t")
+
+
+def _should_evaluate(all_payload_by_field: Mapping[str, object]) -> bool:
+    """Return True for schedule tools re-arming orchestrator-refresh.
+
+    Args:
+        all_payload_by_field: Full PreToolUse payload.
+
+    Returns:
+        True when this gate must run.
+    """
+    tool_name = all_payload_by_field.get(TOOL_NAME_FIELD_NAME, "")
+    if tool_name not in ALL_SCHEDULE_TOOL_NAMES:
+        return False
+    tool_input = all_payload_by_field.get(TOOL_INPUT_FIELD_NAME, {})
+    if not isinstance(tool_input, dict):
+        return False
+    return _prompt_targets_orchestrator_refresh(tool_input)
+
+
+def _run_slug_from_prompt(prompt_value: str) -> str:
+    """Extract ``--run-slug`` from a ScheduleWakeup prompt when present.
+
+    Args:
+        prompt_value: The schedule tool prompt text.
+
+    Returns:
+        The slug string, or empty when the flag is absent.
+    """
+    run_slug_from_prompt_pattern = re.compile(
+        re.escape(RUN_SLUG_PROMPT_FLAG) + RUN_SLUG_PROMPT_VALUE_PATTERN
+    )
+    matched = run_slug_from_prompt_pattern.search(prompt_value)
+    if matched is None:
+        return ""
+    return matched.group(1)
+
+
+def _resolve_status_file_path(
+    status_gate_module: ModuleType,
+    all_payload_by_field: Mapping[str, object],
+) -> Path:
+    """Resolve the run status file for this schedule attempt without chdir.
+
+    Args:
+        status_gate_module: Loaded status_gate module.
+        all_payload_by_field: PreToolUse payload (may carry cwd and prompt).
+
+    Returns:
+        Absolute status file path.
+    """
+    base_directory: Path | None = None
+    working_directory_value = all_payload_by_field.get(CWD_FIELD_NAME)
+    if isinstance(working_directory_value, str) and working_directory_value:
+        base_directory = Path(working_directory_value)
+    run_slug = ""
+    tool_input = all_payload_by_field.get(TOOL_INPUT_FIELD_NAME, {})
+    if isinstance(tool_input, dict):
+        prompt_value = tool_input.get(PROMPT_FIELD_NAME, "")
+        if isinstance(prompt_value, str):
+            run_slug = _run_slug_from_prompt(prompt_value)
+    return status_gate_module.resolve_status_file_path(
+        None, base_directory, run_slug
+    )
+
+
+def build_denial_response(reason_code: str) -> dict[str, dict[str, str]]:
+    """Build the PreToolUse deny payload.
+
+    Args:
+        reason_code: Machine reason from decide_should_reschedule.
+
+    Returns:
+        Hook-specific deny JSON structure.
+    """
+    denial_reason = DENY_REASON_TEMPLATE.format(reason=reason_code)
+    return {
+        "hookSpecificOutput": {
+            "hookEventName": HOOK_EVENT_NAME,
+            "permissionDecision": "deny",
+            "permissionDecisionReason": denial_reason,
+        }
+    }
+
+
+def _emit_denial(
+    reason_code: str,
+    all_payload_by_field: Mapping[str, object],
+) -> None:
+    """Log and print a deny decision for the current schedule attempt.
+
+    Args:
+        reason_code: Machine reason string.
+        all_payload_by_field: PreToolUse payload for logging context.
+    """
+    denial = build_denial_response(reason_code)
+    hook_specific_output = denial["hookSpecificOutput"]
+    block_reason = hook_specific_output["permissionDecisionReason"]
+    log_hook_block(
+        calling_hook_name=CALLING_HOOK_NAME,
+        hook_event=HOOK_EVENT_NAME,
+        block_reason=block_reason,
+        tool_name=str(all_payload_by_field.get(TOOL_NAME_FIELD_NAME, "")),
+        offending_input_preview=str(
+            all_payload_by_field.get(TOOL_INPUT_FIELD_NAME, {})
+        ),
+    )
+    print(json.dumps(denial))
+
+
+def main() -> None:
+    """Read PreToolUse stdin and deny idle orchestrator-refresh re-arms."""
+    try:
+        payload_by_field = json.load(sys.stdin)
+    except json.JSONDecodeError:
+        sys.exit(0)
+
+    if not isinstance(payload_by_field, dict):
+        sys.exit(0)
+    if not _should_evaluate(payload_by_field):
+        sys.exit(0)
+
+    tool_name = payload_by_field.get(TOOL_NAME_FIELD_NAME, "")
+    if tool_name == CRON_CREATE_TOOL_NAME:
+        _emit_denial(REASON_CRON_CREATE_FORBIDDEN, payload_by_field)
+        sys.exit(0)
+
+    status_gate_module = _load_status_gate_module()
+    if status_gate_module is None:
+        _emit_denial("status_gate_unavailable", payload_by_field)
+        sys.exit(0)
+
+    status_file_path = _resolve_status_file_path(status_gate_module, payload_by_field)
+    is_reschedule_allowed, reason_code = status_gate_module.decide_should_reschedule(
+        status_file_path
+    )
+    if is_reschedule_allowed:
+        sys.exit(0)
+
+    _emit_denial(reason_code, payload_by_field)
+    sys.exit(0)
+
+
+if __name__ == "__main__":
+    main()