claude-dev-env 8.78.1 → 8.78.3

package/bin/install.mjs

@@ -131,6 +131,7 @@ const AGENTS_HOME = INSTALL_ROOT_RESOLUTION.agentsHome;
 const MANIFEST_FILE = INSTALL_ROOT_RESOLUTION.manifestFilePath;
 const MYPY_INI_INSTALL_PATH = INSTALL_ROOT_RESOLUTION.mypyIniInstallPath;
 const PACKAGE_NAME = 'claude-dev-env';
+const MANAGED_PROMPT_HOOK_STATUS_PREFIX = `${PACKAGE_NAME}: `;
 const PACKAGE_VERSION = JSON.parse(readFileSync(join(PACKAGE_ROOT, 'package.json'), 'utf8')).version;
 const packageRequire = createRequire(import.meta.url);
 
@@ -1274,6 +1275,7 @@ export function managedHookScriptRelativePaths(hooksConfig) {
     for (const matcherGroups of Object.values(hooksConfig.hooks)) {
         for (const sourceGroup of matcherGroups) {
             for (const hook of sourceGroup.hooks) {
+                if (typeof hook.command !== 'string') continue;
                 for (const scriptMatch of hook.command.matchAll(scriptReferencePattern)) {
                     relativePaths.add(scriptMatch[1]);
                 }
@@ -1322,6 +1324,21 @@ function managedPackageSourceRoots() {
     return [...new Set([PACKAGE_ROOT, ...dependencyRoots])];
 }
 
+/**
+ * Report whether a hook entry is a model-evaluated hook this installer wrote.
+ *
+ * A prompt or agent hook names no script, so the installer marks its own with a
+ * status message that starts with the managed prefix.
+ *
+ * @param {unknown} hook One hook entry from settings.json.
+ * @returns {boolean} True when the entry carries no command and the managed status prefix.
+ */
+export function isManagedPromptHook(hook) {
+    return typeof hook?.command !== 'string'
+        && typeof hook?.statusMessage === 'string'
+        && hook.statusMessage.startsWith(MANAGED_PROMPT_HOOK_STATUS_PREFIX);
+}
+
 /**
  * Reports whether a settings.json hook command points at one of this installer's
  * managed scripts, no matter how the home directory was written ($HOME, ~,
@@ -1512,8 +1529,8 @@ function pruneManagedHooksFromEvent(settings, eventType, managedHookRelativePath
     if (!Array.isArray(existingGroups)) return;
     settings.hooks[eventType] = retainedMatcherGroups(
         existingGroups,
-        commandString => commandReferencesManagedHook(
-            commandString, managedHookRelativePaths, sharedSettingsRealPath,
+        hook => isManagedPromptHook(hook) || commandReferencesManagedHook(
+            hook?.command, managedHookRelativePaths, sharedSettingsRealPath,
         ),
     ).keptGroups;
 }
@@ -1587,6 +1604,7 @@ export function mergeHooksIntoSettings(
         pruneManagedHooksFromEvent(settings, eventType, managedHookRelativePaths, sharedSettingsRealPath);
         for (const sourceGroup of matcherGroups) {
             const rewrittenHooks = sourceGroup.hooks.map(hook => {
+                if (typeof hook.command !== 'string') return hook;
                 let command = hook.command;
                 command = command.replace(
                     /r(['"])\$\{CLAUDE_PLUGIN_ROOT\}\/hooks\1/g,
@@ -1609,7 +1627,7 @@ export function mergeHooksIntoSettings(
             if (existingIndex >= 0) {
                 const existing = settings.hooks[eventType][existingIndex];
                 const userHooks = (groupHookEntries(existing) || []).filter(
-                    hook => !commandReferencesManagedHook(
+                    hook => !isManagedPromptHook(hook) && !commandReferencesManagedHook(
                         hook?.command, managedHookRelativePaths, sharedSettingsRealPath,
                     )
                 );
@@ -1647,7 +1665,7 @@ export function pruneManagedHooksFromSettings(settings, managedHookRelativePaths
         if (!Array.isArray(matcherGroups)) continue;
         const { keptGroups } = retainedMatcherGroups(
             matcherGroups,
-            commandString => commandReferencesManagedHook(commandString, managedHookRelativePaths),
+            hook => isManagedPromptHook(hook) || commandReferencesManagedHook(hook?.command, managedHookRelativePaths),
         );
         settings.hooks[eventType] = keptGroups;
         if (keptGroups.length === 0) delete settings.hooks[eventType];
@@ -1830,12 +1848,11 @@ function commandReferencesRetiredHook(commandString, retiredHookRelativePaths, o
  *
  * Every settings walk shares this pass, so a settings.json a person or another
  * tool wrote meets one set of shape rules. A group carrying no hooks array is
- * handed back untouched, and an entry whose command is not a string reaches the
- * predicate as-is — each predicate reads a non-string command as an entry this
- * installer never wrote — so a shape this installer does not recognize survives.
+ * handed back untouched, and each entry reaches the predicate as-is, whatever its
+ * shape, so a shape this installer does not recognize survives.
  *
  * @param {object[]} matcherGroups The event's matcher groups from settings.json.
- * @param {(commandString: unknown) => boolean} shouldRemoveHook Names the hooks that leave.
+ * @param {(hook: unknown) => boolean} shouldRemoveHook Takes one hook entry, a command hook or a prompt hook, and returns true to drop it.
  * @returns {{keptGroups: object[], removedCount: number}} The surviving groups and how many hooks left.
  */
 function retainedMatcherGroups(matcherGroups, shouldRemoveHook) {
@@ -1847,7 +1864,7 @@ function retainedMatcherGroups(matcherGroups, shouldRemoveHook) {
             keptGroups.push(group);
             continue;
         }
-        const keptHooks = hookEntries.filter(hook => !shouldRemoveHook(hook?.command));
+        const keptHooks = hookEntries.filter(hook => !shouldRemoveHook(hook));
         removedCount += hookEntries.length - keptHooks.length;
         if (keptHooks.length > 0) keptGroups.push({ ...group, hooks: keptHooks });
     }
@@ -1888,8 +1905,8 @@ function stripRetiredHookEntries(settings, retiredHookRelativePaths, ownership)
         if (!Array.isArray(matcherGroups)) continue;
         const eventOutcome = retainedMatcherGroups(
             matcherGroups,
-            commandString => commandReferencesRetiredHook(
-                commandString, retiredHookRelativePaths, ownership,
+            hook => commandReferencesRetiredHook(
+                hook?.command, retiredHookRelativePaths, ownership,
             ),
         );
         removedCount += eventOutcome.removedCount;

package/bin/install.policy-lint.test.mjs

@@ -86,7 +86,7 @@ function legacySettings() {
 
 function allCommands(settings) {
     return Object.values(settings.hooks).flatMap(groups =>
-        groups.flatMap(group => group.hooks.map(hook => hook.command)));
+        groups.flatMap(group => group.hooks.map(hook => hook.command ?? '')));
 }
 
 test('every retired write registration already has an installer-owned prune path', () => {

package/bin/install.profile-settings.test.mjs

@@ -47,7 +47,7 @@ function runCoreInstall(homeDirectory, profileRoot) {
 function stopHookCommands(settingsPath) {
     const settings = JSON.parse(readFileSync(settingsPath, 'utf8'));
     return (settings.hooks?.Stop ?? []).flatMap(
-        (eachGroup) => (eachGroup.hooks ?? []).map((eachHook) => eachHook.command.replace(/\\/g, '/')),
+        (eachGroup) => (eachGroup.hooks ?? []).map((eachHook) => (eachHook.command ?? '').replace(/\\/g, '/')),
     );
 }
 

package/bin/install.prompt-hook.test.mjs

@@ -0,0 +1,105 @@
+import { test } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { readFileSync } from 'node:fs';
+
+import { isManagedPromptHook, mergeHooksIntoSettings, pruneManagedHooksFromSettings } from './install.mjs';
+
+const SHIPPED_HOOKS_CONFIG = JSON.parse(readFileSync(new URL('../hooks/hooks.json', import.meta.url), 'utf8'));
+
+const REPLY_MATCHER = 'mcp__hearthbot__reply';
+const EXAMPLE_HOME = '/home/example';
+const USER_PROMPT_HOOK = { type: 'prompt', prompt: 'User check. $ARGUMENTS', statusMessage: 'my own check' };
+
+function modelHookEntries(hooksConfig) {
+    return Object.entries(hooksConfig.hooks).flatMap(([eventName, matcherGroups]) => matcherGroups.flatMap(
+        eachGroup => (eachGroup.hooks ?? [])
+            .filter(eachHook => typeof eachHook.command !== 'string')
+            .map(eachHook => ({ eventName, matcher: eachGroup.matcher ?? '', hook: eachHook })),
+    ));
+}
+
+function shippedReplyJudgeEntries() {
+    return modelHookEntries(SHIPPED_HOOKS_CONFIG).filter(
+        eachEntry => eachEntry.eventName === 'PreToolUse' && eachEntry.matcher.split('|').includes(REPLY_MATCHER),
+    );
+}
+
+const [SHIPPED_REPLY_JUDGE_ENTRY] = shippedReplyJudgeEntries();
+assert.ok(SHIPPED_REPLY_JUDGE_ENTRY, 'the shipped hooks.json needs a claim judge on reply');
+const MANAGED_STATUS = SHIPPED_REPLY_JUDGE_ENTRY.hook.statusMessage;
+
+function mergeInto(settings, hooksConfig) {
+    mergeHooksIntoSettings(settings, hooksConfig, `${EXAMPLE_HOME}/.claude`, 'python3', null, EXAMPLE_HOME);
+}
+
+function hooksConfigWithPrompt(promptText) {
+    return {
+        hooks: {
+            PreToolUse: [
+                {
+                    matcher: REPLY_MATCHER,
+                    hooks: [{ type: 'prompt', prompt: promptText, timeout: 30, statusMessage: MANAGED_STATUS }],
+                },
+            ],
+        },
+    };
+}
+
+function replyHooks(settings) {
+    return (settings.hooks?.PreToolUse ?? [])
+        .filter(eachGroup => eachGroup.matcher === REPLY_MATCHER)
+        .flatMap(eachGroup => eachGroup.hooks ?? []);
+}
+
+test('should keep one managed prompt hook across reinstalls and carry the new prompt text', () => {
+    const settings = { hooks: { PreToolUse: [{ matcher: REPLY_MATCHER, hooks: [USER_PROMPT_HOOK] }] } };
+
+    mergeInto(settings, hooksConfigWithPrompt('First judge. $ARGUMENTS'));
+    mergeInto(settings, hooksConfigWithPrompt('Second judge. $ARGUMENTS'));
+
+    assert.deepEqual(
+        replyHooks(settings).map(eachHook => eachHook.prompt),
+        ['User check. $ARGUMENTS', 'Second judge. $ARGUMENTS'],
+    );
+});
+
+test('should remove the managed prompt hook on uninstall and keep the user prompt hook', () => {
+    const settings = { hooks: { PreToolUse: [{ matcher: REPLY_MATCHER, hooks: [USER_PROMPT_HOOK] }] } };
+    mergeInto(settings, hooksConfigWithPrompt('Judge. $ARGUMENTS'));
+
+    pruneManagedHooksFromSettings(settings, new Set());
+
+    assert.deepEqual(replyHooks(settings), [USER_PROMPT_HOOK]);
+});
+
+test('should mark the shipped claim judge on reply, and any other shipped model hook, as managed', () => {
+    assert.ok(modelHookEntries(SHIPPED_HOOKS_CONFIG).every(eachEntry => isManagedPromptHook(eachEntry.hook)));
+});
+
+test('should keep the shipped claim judge once, under its own event and matcher, after two installs', () => {
+    const settings = {};
+    mergeInto(settings, structuredClone(SHIPPED_HOOKS_CONFIG));
+    mergeInto(settings, structuredClone(SHIPPED_HOOKS_CONFIG));
+
+    assert.deepEqual(modelHookEntries(settings), modelHookEntries(SHIPPED_HOOKS_CONFIG));
+});
+
+test('should drop a managed prompt hook left under a retired matcher of an event the shipped config lists', () => {
+    const staleMatcher = 'mcp__hearthbot__retired';
+    const judgeOnlyMatcher = 'mcp__hearthbot__retired_alone';
+    const oldJudge = { type: 'prompt', prompt: 'Old judge. $ARGUMENTS', statusMessage: MANAGED_STATUS };
+    const settings = {
+        hooks: {
+            PreToolUse: [
+                { matcher: staleMatcher, hooks: [oldJudge, USER_PROMPT_HOOK] },
+                { matcher: judgeOnlyMatcher, hooks: [oldJudge] },
+            ],
+        },
+    };
+
+    mergeInto(settings, structuredClone(SHIPPED_HOOKS_CONFIG));
+
+    const staleGroup = settings.hooks.PreToolUse.find(eachGroup => eachGroup.matcher === staleMatcher);
+    assert.deepEqual(staleGroup.hooks, [USER_PROMPT_HOOK]);
+    assert.equal(settings.hooks.PreToolUse.some(eachGroup => eachGroup.matcher === judgeOnlyMatcher), false);
+});

package/bin/install.prune.test.mjs

@@ -969,7 +969,7 @@ function allHookCommands(settings) {
     return Object.values(settings.hooks || {})
         .flat()
         .flatMap(group => group.hooks || [])
-        .map(hook => hook.command);
+        .map(hook => hook.command ?? '');
 }
 
 /**
@@ -992,7 +992,7 @@ function seedRetiredManagedHook(sandbox) {
     const settings = readSettings(sandbox.claudeDirectory);
     const liveGroup = settings.hooks[RETIRED_HOOK_EVENT_TYPE]
         .find(group => group.hooks.some(
-            hook => hook.command.includes(DISPATCHER_HOOK_COMMAND_SEGMENT),
+            hook => (hook.command ?? '').includes(DISPATCHER_HOOK_COMMAND_SEGMENT),
         ));
     liveGroup.hooks.push({ type: 'command', command: retiredHookCommand });
     liveGroup.hooks.push({ type: 'command', command: USER_HOOK_COMMAND });

package/bin/install.shared-settings.test.mjs

@@ -78,7 +78,7 @@ function expectedCountByScript(hooksConfig) {
     for (const matcherGroups of Object.values(hooksConfig.hooks)) {
         for (const group of matcherGroups) {
             for (const hook of group.hooks) {
-                for (const match of hook.command.matchAll(/\$\{CLAUDE_PLUGIN_ROOT\}\/hooks\/(\S+?\.(?:py|mjs))/g)) {
+                for (const match of (hook.command ?? '').matchAll(/\$\{CLAUDE_PLUGIN_ROOT\}\/hooks\/(\S+?\.(?:py|mjs))/g)) {
                     countByScript.set(match[1], (countByScript.get(match[1]) ?? 0) + 1);
                 }
             }

package/bin/install.test.mjs

@@ -902,7 +902,7 @@ function countManagedRunAllValidatorsHooks(settings) {
     let runAllValidatorsCount = 0;
     for (const group of writeEditGroups) {
         for (const hook of group.hooks) {
-            if (hook.command.includes('run_all_validators')) {
+            if ((hook.command ?? '').includes('run_all_validators')) {
                 runAllValidatorsCount++;
             }
         }
@@ -1238,7 +1238,7 @@ test('retired hook registrations stay managed so reinstall removes them', () =>
         readFileSync(new URL('../hooks/hooks.json', import.meta.url), 'utf8')
     );
     const shippedCommands = Object.values(shippedHooks.hooks).flatMap(matcherGroups => (
-        matcherGroups.flatMap(matcherGroup => matcherGroup.hooks.map(hook => hook.command))
+        matcherGroups.flatMap(matcherGroup => matcherGroup.hooks.map(hook => hook.command ?? ''))
     ));
     assert.deepEqual(RETIRED_HOOK_REGISTRATION_RELATIVE_PATHS, retiredPaths);
     for (const retiredPath of retiredPaths) {
@@ -1343,7 +1343,7 @@ test('mergeHooksIntoSettings into old folded-hooks settings yields exactly one d
     mergeHooksIntoSettings(settings, DISPATCHER_HOOKS_CONFIG, 'C:/Users/x/.claude', 'py -3');
 
     const allPreToolUseGroups = settings.hooks.PreToolUse || [];
-    const allHookCommands = allPreToolUseGroups.flatMap(group => group.hooks.map(hook => hook.command));
+    const allHookCommands = allPreToolUseGroups.flatMap(group => group.hooks.map(hook => hook.command ?? ''));
 
     const allDispatcherCommands = allHookCommands.filter(isPreToolUseDispatcherCommand);
     assert.equal(allDispatcherCommands.length, 1, 'exactly one dispatcher entry must be present');
@@ -1376,7 +1376,7 @@ test('mergeHooksIntoSettings is idempotent when run twice against an already-upd
     mergeHooksIntoSettings(settings, DISPATCHER_HOOKS_CONFIG, 'C:/Users/x/.claude', 'py -3');
 
     const allPreToolUseGroups = settings.hooks.PreToolUse || [];
-    const allHookCommands = allPreToolUseGroups.flatMap(group => group.hooks.map(hook => hook.command));
+    const allHookCommands = allPreToolUseGroups.flatMap(group => group.hooks.map(hook => hook.command ?? ''));
 
     const allDispatcherCommands = allHookCommands.filter(isPreToolUseDispatcherCommand);
     assert.equal(allDispatcherCommands.length, 1, 'dispatcher must appear exactly once after two merges');
@@ -1407,7 +1407,7 @@ test('shipped hooks.json keeps only nonblocking policy handlers and lifecycle ho
     );
 
     const allPreToolUseGroups = shippedHooksConfig.hooks.PreToolUse || [];
-    const allPreCommands = allPreToolUseGroups.flatMap(group => group.hooks.map(hook => hook.command));
+    const allPreCommands = allPreToolUseGroups.flatMap(group => group.hooks.map(hook => hook.command ?? ''));
     const preDispatcherCommands = allPreCommands.filter(isPreToolUseDispatcherCommand);
     assert.equal(preDispatcherCommands.length, 1, 'shipped hooks.json must register the PreToolUse dispatcher exactly once');
 
@@ -1419,18 +1419,18 @@ test('shipped hooks.json keeps only nonblocking policy handlers and lifecycle ho
 
     const allPostToolUseGroups = shippedHooksConfig.hooks.PostToolUse || [];
     const postDispatcherCommands = allPostToolUseGroups
-        .flatMap(group => group.hooks.map(hook => hook.command))
+        .flatMap(group => group.hooks.map(hook => hook.command ?? ''))
         .filter(cmd => cmd.includes('post_tool_use_dispatcher.py'));
     assert.equal(postDispatcherCommands.length, 1, 'shipped hooks.json must register the PostToolUse dispatcher exactly once');
     const allCommands = Object.values(shippedHooksConfig.hooks).flatMap(matcherGroups => (
-        matcherGroups.flatMap(matcherGroup => matcherGroup.hooks.map(hook => hook.command))
+        matcherGroups.flatMap(matcherGroup => matcherGroup.hooks.map(hook => hook.command ?? ''))
     ));
     for (const retiredPath of RETIRED_HOOK_REGISTRATION_RELATIVE_PATHS) {
         assert.ok(allCommands.every(command => !command.includes(retiredPath)), retiredPath);
     }
 
     const allSessionStartCommands = (shippedHooksConfig.hooks.SessionStart || [])
-        .flatMap(group => group.hooks.map(hook => hook.command));
+        .flatMap(group => group.hooks.map(hook => hook.command ?? ''));
     assert.equal(
         allSessionStartCommands.some(command => command.includes('untracked_repo_detector.py')),
         false,
@@ -1439,7 +1439,7 @@ test('shipped hooks.json keeps only nonblocking policy handlers and lifecycle ho
 
     const writePathCommands = allPreToolUseGroups
         .filter(group => /Write|Edit|MultiEdit/.test(group.matcher || ''))
-        .flatMap(group => group.hooks.map(hook => hook.command));
+        .flatMap(group => group.hooks.map(hook => hook.command ?? ''));
     for (const foldedPath of FOLDED_HOOK_RELATIVE_PATHS) {
         const foldedBasename = foldedPath.split('/').pop();
         const standaloneFoldedCommands = writePathCommands.filter(
@@ -1543,7 +1543,7 @@ test('mergeHooksIntoSettings is idempotent for the PostToolUse dispatcher across
     mergeHooksIntoSettings(settings, POST_DISPATCHER_HOOKS_CONFIG, 'C:/Users/x/.claude', 'py -3');
 
     const writeEditGroup = settings.hooks.PostToolUse.find(group => group.matcher === 'Write|Edit');
-    const dispatcherCommands = writeEditGroup.hooks.filter(hook => hook.command.includes('post_tool_use_dispatcher.py'));
+    const dispatcherCommands = writeEditGroup.hooks.filter(hook => (hook.command ?? '').includes('post_tool_use_dispatcher.py'));
     assert.equal(dispatcherCommands.length, 1, 'PostToolUse dispatcher must appear exactly once after two merges');
     assert.equal(writeEditGroup.hooks.length, 1);
 });
@@ -1598,7 +1598,7 @@ test('mergeHooksIntoSettings prunes the inline run_all_validators runner when th
 
     const writeEditGroup = (settings.hooks.PreToolUse || []).find(group => group.matcher === 'Write|Edit');
     if (writeEditGroup) {
-        const runnerSurvivors = writeEditGroup.hooks.filter(hook => hook.command.includes('run_all_validators'));
+        const runnerSurvivors = writeEditGroup.hooks.filter(hook => (hook.command ?? '').includes('run_all_validators'));
         assert.equal(runnerSurvivors.length, 0);
     }
 

package/hooks/blocking/test_pre_tool_use_dispatcher.py

@@ -720,7 +720,7 @@ def test_folded_write_edit_hooks_have_no_standalone_hooks_json_entry() -> None:
     hooks_json_text = (_HOOKS_ROOT / "hooks.json").read_text(encoding="utf-8")
     hooks_configuration = json.loads(hooks_json_text)
     all_pre_tool_use_commands = [
-        each_hook["command"]
+        each_hook.get("command", "")
         for each_group in hooks_configuration["hooks"]["PreToolUse"]
         for each_hook in each_group["hooks"]
     ]
@@ -740,11 +740,11 @@ def test_folded_write_edit_hooks_have_no_standalone_hooks_json_entry() -> None:
 def _standalone_apply_patch_code_rules_commands(all_pre_tool_use_groups: list[dict]) -> list[str]:
     """Return every standalone apply_patch command naming code_rules_enforcer.py."""
     return [
-        each_hook["command"]
+        each_hook.get("command", "")
         for each_group in all_pre_tool_use_groups
         if each_group["matcher"] == APPLY_PATCH_TOOL_NAME
         for each_hook in each_group["hooks"]
-        if "code_rules_enforcer.py" in each_hook["command"]
+        if "code_rules_enforcer.py" in each_hook.get("command", "")
     ]
 
 
@@ -753,7 +753,7 @@ def _dispatcher_matchers(all_pre_tool_use_groups: list[dict]) -> list[str]:
     return [
         each_group["matcher"]
         for each_group in all_pre_tool_use_groups
-        if "pre_tool_use_dispatcher.py" in each_group["hooks"][0]["command"]
+        if "pre_tool_use_dispatcher.py" in each_group["hooks"][0].get("command", "")
     ]
 
 

package/hooks/features/conduct-gates.md

@@ -5,6 +5,7 @@ This family stops a chat reply, edited message, or tool call when its payload br
 ## Checks
 
 - `blocking/reply_length_gate.py` caps chat reply length, denies a configured banned word, requires a readable link when the text names a pull request number, and denies a causal claim in a reply that cites no code span, output block, or link. With visual reply mode on, it also runs the checks in `visual_reply_rules.py` from the rule list in `rules/visual-reply-rules.json`: no abbreviation or tracker number outside a link, a widget or page before a reply of more than one sentence, and no anchor link inside widget code. The mode is off by default; `~/.claude/visual-reply-mode.json` with `{"enabled": true}` turns the mode checks on.
+- The claim judge is a `prompt` hook in `hooks.json`, with no `model` set, so Claude Code's small default hook model reads each chat message and denies the first claim about how code, a file, a tool, a service, a run, or a process behaves, or why something happened, when nothing in the message shows it: inline code that quotes output or a code line, a file and line, or a link. A pull request link covers what that change does, what it blocks or lets through, and its checks. The author's own actions, a restatement of the user's words, questions, instructions, claims labeled as unchecked, and a decision card's option consequences pass. It catches the plain claims the causal word list in `blocking/reply_length_gate.py` misses, such as "The code lets any of them rewrite it mid-check." `continueOnBlock` returns the reason to the agent as the tool error, so it can add the source and send again. The installer owns it through the `claude-dev-env: ` prefix on its `statusMessage`. It skips `post_widget`, whose input is SVG or HTML markup.
 - `blocking/edit_marker_gate.py` rejects strikethrough and edit-note markers in replacement chat text or cards.
 - `blocking/issue_close_handoff_gate.py` denies an issue comment or issue write that closes the issue and routes a found defect to another issue or epic.
 - `blocking/session_title_format_gate.py` denies a session title that breaks the `<emoji> <name>` shape or has a name longer than 25 characters.
@@ -17,6 +18,7 @@ This family stops a chat reply, edited message, or tool call when its payload br
 ## When it fires
 
 - `blocking/reply_length_gate.py` runs on `PreToolUse`, matcher `mcp__hearthbot__reply|mcp__hearthbot__post_message|mcp__hearthbot__ask_decision|mcp__hearthbot__post_widget`, timeout `10` seconds in `hooks.json`.
+- The claim judge runs on `PreToolUse`, matcher `mcp__hearthbot__reply|mcp__hearthbot__post_message|mcp__hearthbot__update_message|mcp__hearthbot__ask_decision`, timeout `30` seconds in `hooks.json`.
 - `blocking/edit_marker_gate.py` runs on `PreToolUse`, matcher `mcp__.*__update_message`, timeout `10` seconds in `hooks.json`.
 - `blocking/issue_close_handoff_gate.py` runs on `PreToolUse`, matcher `mcp__.*__(add_issue_comment|issue_write|update_issue_comment)`, timeout `10` seconds in `hooks.json`.
 - `blocking/session_title_format_gate.py` runs on `PreToolUse`, matcher `mcp__.*__set_session_title`, timeout `10` seconds in `hooks.json`.
@@ -33,6 +35,7 @@ Preconditions:
 - Run each command from the repository root with Python and pytest available. The tests create transcript and payload fixtures.
 
 - **Reply length.** Input is a reply with four sentences, a plain pull request number, an abbreviation, two sentences with no widget this turn, or widget code with an anchor link. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_reply_length_gate.py -q`. The adjacent test observes a denial and its count, link, or mode reason. Widget code with no flowchart passes with a flowchart reminder in `additionalContext`.
+- **Claim judge.** Input is a headless `claude -p` session with a stub MCP server named `hearthbot` that exposes `reply` and `ask_decision`, told to send "The code lets any of them rewrite it mid-check." The session settings add the `hooks.json` prompt hook. The stub logs zero bytes sent, and the tool error reads `PreToolUse:mcp__hearthbot__reply hook error: [<the prompt>]: Fact with no source: ...`. The same sentence with a `file:line` in backticks posts. A hook whose `model` Claude Code does not recognize lets every message through, so leave `model` unset. Run `node --test packages/claude-dev-env/bin/install.prompt-hook.test.mjs` for the installer side; it observes one managed prompt hook after two installs and none after uninstall.
 - **Edit marker.** Input is an update message with strikethrough or an edit note. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_edit_marker_gate.py -q`. The adjacent test observes a denial; clean replacement text passes.
 - **Handoff close.** Input is an issue comment that says the issue is closed and that the found defect belongs to another issue. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_issue_close_handoff_gate.py -q`. The adjacent test observes a denial; a close with a plain cross-reference and a routing comment on an open issue both pass.
 - **Session title.** Input is a set session title call with no leading emoji or a name over 25 characters. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_session_title_format_gate.py -q`. The adjacent test observes a denial that names the broken rule; a well-formed title passes.

package/hooks/git-hooks/test_installed_policy_lint.py

@@ -123,7 +123,7 @@ def _install_twice(home: Path, settings_path: Path) -> bytes:
 def _assert_retired_registrations(managed_root: Path, settings_bytes: bytes, foreign_command: str) -> None:
     settings = json.loads(settings_bytes)
     all_commands = [
-        each_hook["command"]
+        each_hook.get("command", "")
         for each_groups in settings["hooks"].values()
         for each_group in each_groups
         for each_hook in each_group["hooks"]

package/hooks/hooks.json

@@ -142,6 +142,18 @@
           }
         ]
       },
+      {
+        "matcher": "mcp__hearthbot__reply|mcp__hearthbot__post_message|mcp__hearthbot__update_message|mcp__hearthbot__ask_decision",
+        "hooks": [
+          {
+            "type": "prompt",
+            "prompt": "You check one chat message before it posts. The hook input JSON is: $ARGUMENTS\n\nRead the message prose in tool_input: the text, body, question, context, reason, and option fields. Find each claim the message states as fact about how code, a file, a tool, a service, a run, or a process behaves, what state it is in, or why something happened.\n\nA claim passes when the message carries evidence that shows it: inline code that quotes output, an exit code, a count, a log line, or a code line; a file:line reference; or a URL or markdown link to the run, file, pull request, or page. A pull request or commit link covers what that change does, what it blocks or lets through, and the state of its checks, also in the later sentences about that same change. The evidence may sit in another sentence of the same message when it covers that claim. A link to one thing does not cover a claim about something else.\n\nThese pass with no evidence: the author's own actions, done, in progress, or planned, with or without \"I\", including what the action is aimed at, such as \"I'm finding where the check failed\"; a change the author made; a question; an instruction or request; a restatement of what the user said; a claim labeled as not yet checked; and an option's consequence on a decision card.\n\nWhen every claim passes, return {\"ok\": true}. Otherwise return {\"ok\": false, \"reason\": \"Fact with no source: <the first failing claim>. Put the file:line, the quoted output, or the link that shows it in the message, or say you have not checked it.\"}",
+            "timeout": 30,
+            "continueOnBlock": true,
+            "statusMessage": "claude-dev-env: checking each claim for its source"
+          }
+        ]
+      },
       {
         "matcher": "mcp__.*__update_message",
         "hooks": [

package/hooks/test_context_budget_hooks.py

@@ -39,7 +39,7 @@ def _context_adding_scripts() -> set[str]:
         for each_event in ALL_CONTEXT_EVENTS
         for each_group in registrations["hooks"].get(each_event, [])
         for each_hook in each_group["hooks"]
-        for each_script in SCRIPT_PATTERN.findall(each_hook["command"])
+        for each_script in SCRIPT_PATTERN.findall(each_hook.get("command", ""))
     }
     return {
         each_script

package/hooks/test_hook_feature_map.py

@@ -34,6 +34,7 @@ def registered_hook_commands() -> list[str]:
         for all_groups in registrations["hooks"].values()
         for group in all_groups
         for hook in group["hooks"]
+        if "command" in hook
     ]
 
 

package/hooks/workflow/test_auto_formatter.py

@@ -417,7 +417,7 @@ def _registered_auto_formatter_timeout() -> int:
     for each_event in hooks_configuration["hooks"].values():
         for each_matcher in each_event:
             for each_hook in each_matcher["hooks"]:
-                if POST_TOOL_USE_DISPATCHER_COMMAND_FRAGMENT in each_hook["command"]:
+                if POST_TOOL_USE_DISPATCHER_COMMAND_FRAGMENT in each_hook.get("command", ""):
                     return int(each_hook["timeout"])
     raise AssertionError(
         "post_tool_use_dispatcher (which hosts auto_formatter) is not registered in hooks.json"

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "8.78.1",
+    "version": "8.78.3",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {

package/scripts/ci/install-playtest.mjs

@@ -115,6 +115,7 @@ export function hookCommandsForEvent(settingsPath, eventName) {
     const allCommands = [];
     for (const eachGroup of allMatcherGroups) {
         for (const eachHook of eachGroup.hooks ?? []) {
+            if (typeof eachHook.command !== 'string') continue;
             allCommands.push({ matcher: eachGroup.matcher ?? '', command: eachHook.command });
         }
     }

package/scripts/ci/installer-lifecycle.mjs

@@ -141,7 +141,7 @@ function main() {
             for (const matcherGroups of Object.values(settings.hooks ?? {})) {
                 for (const group of matcherGroups) {
                     for (const hook of group.hooks ?? []) {
-                        if (hook.command.replace(/\\/g, '/').includes('/.claude/hooks')) {
+                        if ((hook.command ?? '').replace(/\\/g, '/').includes('/.claude/hooks')) {
                             managedHookCount += 1;
                         }
                     }

package/scripts/tests/test_codex_compat_materializer.py

@@ -45,7 +45,12 @@ def _hook_group(matcher: str, *all_hook_commands: str) -> dict[str, object]:
 
 
 def _hook_commands(manifest: dict[str, Any], event_name: str) -> list[str]:
-    return [each_hook["command"] for each_group in manifest["hooks"][event_name] for each_hook in each_group["hooks"]]
+    return [
+        each_hook["command"]
+        for each_group in manifest["hooks"][event_name]
+        for each_hook in each_group["hooks"]
+        if "command" in each_hook
+    ]
 
 
 def test_conversion_escapes_toml_content() -> None: