claude-dev-env 8.88.7 → 8.90.0

package/hooks/blocking/test_session_title_turn_gate.py

@@ -0,0 +1,264 @@
+import io
+import json
+from pathlib import Path
+
+import pytest
+
+import session_title_turn_gate
+
+REMOTE_TITLE_TOOL = "mcp__claude-code-remote__set_session_title"
+DESKTOP_TITLE_TOOL = "mcp__ccd_session_mgmt__set_session_title"
+TOOL_LISTING = {
+    "type": "attachment",
+    "attachment": {
+        "type": "prompt_snapshot",
+        "tools": [{"name": "Bash"}, {"name": REMOTE_TITLE_TOOL}],
+    },
+}
+DEFERRED_LISTING = {
+    "type": "attachment",
+    "attachment": {"type": "deferred_tools_delta", "addedNames": [DESKTOP_TITLE_TOOL]},
+}
+PROMPT = {"type": "user", "message": {"role": "user", "content": "Fix the gate"}}
+WORK_CALL = {
+    "type": "assistant",
+    "message": {"content": [{"type": "tool_use", "id": "w1", "name": "Bash", "input": {}}]},
+}
+WORK_RESULT = {
+    "type": "user",
+    "message": {"content": [{"type": "tool_result", "tool_use_id": "w1", "content": "ok"}]},
+}
+REPLY = {"type": "assistant", "message": {"content": [{"type": "text", "text": "Done."}]}}
+
+
+def title_call(tool_use_id: str, tool_name: str = REMOTE_TITLE_TOOL) -> dict[str, object]:
+    return {
+        "type": "assistant",
+        "message": {
+            "content": [
+                {
+                    "type": "tool_use",
+                    "id": tool_use_id,
+                    "name": tool_name,
+                    "input": {"title": "✅ Gate"},
+                }
+            ]
+        },
+    }
+
+
+def title_result(tool_use_id: str, is_error: bool = False) -> dict[str, object]:
+    return {
+        "type": "user",
+        "message": {
+            "content": [
+                {
+                    "type": "tool_result",
+                    "tool_use_id": tool_use_id,
+                    "content": "ok",
+                    "is_error": is_error,
+                }
+            ]
+        },
+    }
+
+
+def run_gate(
+    monkeypatch: pytest.MonkeyPatch,
+    capsys: pytest.CaptureFixture[str],
+    tmp_path: Path,
+    all_entries: list[dict[str, object]],
+    is_stop_hook_active: bool = False,
+) -> tuple[int, str]:
+    transcript_path = tmp_path / "transcript.jsonl"
+    transcript_path.write_text(
+        "\n".join(json.dumps(each) for each in all_entries) + "\n", encoding="utf-8"
+    )
+    hook_input = {
+        "hook_event_name": "Stop",
+        "stop_hook_active": is_stop_hook_active,
+        "transcript_path": str(transcript_path),
+    }
+    monkeypatch.setattr(
+        "sys.stdin", io.TextIOWrapper(io.BytesIO(json.dumps(hook_input).encode("utf-8")))
+    )
+    exit_code = session_title_turn_gate.main()
+    return exit_code, capsys.readouterr().out
+
+
+@pytest.fixture(autouse=True)
+def isolated_home(monkeypatch: pytest.MonkeyPatch, tmp_path: Path) -> None:
+    monkeypatch.setenv("HOME", str(tmp_path))
+    monkeypatch.setenv("USERPROFILE", str(tmp_path))
+
+
+def test_should_hold_a_turn_that_set_no_title(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    exit_code, stdout_text = run_gate(
+        monkeypatch, capsys, tmp_path, [TOOL_LISTING, PROMPT, WORK_CALL, WORK_RESULT, REPLY]
+    )
+    block_output = json.loads(stdout_text)
+    assert exit_code == 0
+    assert block_output["decision"] == "block"
+    assert REMOTE_TITLE_TOOL in block_output["reason"]
+    assert all(
+        each_emoji in block_output["reason"]
+        for each_emoji in ("\U0001f6a9", "\U0001f6a7", "✅", "⏳")
+    )
+
+
+def test_should_pass_a_turn_that_set_a_title(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    all_entries = [
+        TOOL_LISTING,
+        PROMPT,
+        WORK_CALL,
+        WORK_RESULT,
+        title_call("t1"),
+        title_result("t1"),
+        REPLY,
+    ]
+    assert run_gate(monkeypatch, capsys, tmp_path, all_entries) == (0, "")
+
+
+def test_should_hold_a_turn_whose_title_call_was_denied(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    all_entries = [TOOL_LISTING, PROMPT, title_call("t1"), title_result("t1", is_error=True), REPLY]
+    assert (
+        json.loads(run_gate(monkeypatch, capsys, tmp_path, all_entries)[1])["decision"] == "block"
+    )
+
+
+def test_should_pass_a_held_turn_whose_title_call_failed(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    all_entries = [TOOL_LISTING, PROMPT, title_call("t1"), title_result("t1", is_error=True), REPLY]
+    assert run_gate(monkeypatch, capsys, tmp_path, all_entries, is_stop_hook_active=True) == (
+        0,
+        "",
+    )
+
+
+def test_should_hold_a_held_turn_with_no_title_call(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    all_entries = [TOOL_LISTING, PROMPT, WORK_CALL, WORK_RESULT, REPLY]
+    stdout_text = run_gate(monkeypatch, capsys, tmp_path, all_entries, is_stop_hook_active=True)[1]
+    assert json.loads(stdout_text)["decision"] == "block"
+
+
+def test_should_hold_when_the_title_was_set_only_in_an_earlier_turn(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    all_entries = [
+        PROMPT,
+        title_call("t1"),
+        title_result("t1"),
+        REPLY,
+        PROMPT,
+        WORK_CALL,
+        WORK_RESULT,
+        REPLY,
+    ]
+    block_output = json.loads(run_gate(monkeypatch, capsys, tmp_path, all_entries)[1])
+    assert block_output["decision"] == "block"
+
+
+def test_should_start_a_turn_at_an_image_only_prompt(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    image_prompt = {
+        "type": "user",
+        "message": {"content": [{"type": "image", "source": {"type": "base64", "data": ""}}]},
+    }
+    all_entries = [
+        TOOL_LISTING,
+        PROMPT,
+        title_call("t1"),
+        title_result("t1"),
+        REPLY,
+        image_prompt,
+        REPLY,
+    ]
+    stdout_text = run_gate(monkeypatch, capsys, tmp_path, all_entries)[1]
+    assert json.loads(stdout_text)["decision"] == "block"
+
+
+def test_should_hold_a_turn_whose_only_title_call_ran_on_a_sidechain(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    sidechain_call = {**title_call("s1"), "isSidechain": True}
+    sidechain_result = {**title_result("s1"), "isSidechain": True}
+    all_entries = [TOOL_LISTING, PROMPT, sidechain_call, sidechain_result, REPLY]
+    stdout_text = run_gate(monkeypatch, capsys, tmp_path, all_entries)[1]
+    assert json.loads(stdout_text)["decision"] == "block"
+
+
+def test_should_keep_the_turn_across_a_stop_block_and_a_meta_entry(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    stop_block = {
+        "type": "attachment",
+        "attachment": {"type": "hook_blocking_error", "hookEvent": "Stop"},
+    }
+    meta_entry = {"type": "user", "isMeta": True, "message": {"content": "Stop hook feedback"}}
+    all_entries = [
+        TOOL_LISTING,
+        PROMPT,
+        title_call("t1"),
+        title_result("t1"),
+        REPLY,
+        stop_block,
+        meta_entry,
+        REPLY,
+    ]
+    assert run_gate(monkeypatch, capsys, tmp_path, all_entries) == (0, "")
+
+
+def test_should_name_a_deferred_title_tool_in_the_reason(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    block_output = json.loads(
+        run_gate(monkeypatch, capsys, tmp_path, [DEFERRED_LISTING, PROMPT, REPLY])[1]
+    )
+    assert DESKTOP_TITLE_TOOL in block_output["reason"]
+
+
+@pytest.mark.parametrize(
+    "all_entries",
+    [
+        [PROMPT, WORK_CALL, WORK_RESULT, REPLY],
+        [
+            DEFERRED_LISTING,
+            {
+                "type": "attachment",
+                "attachment": {
+                    "type": "deferred_tools_delta",
+                    "removedNames": [DESKTOP_TITLE_TOOL],
+                },
+            },
+            PROMPT,
+            REPLY,
+        ],
+    ],
+)
+def test_should_pass_a_session_without_the_title_tool(
+    monkeypatch: pytest.MonkeyPatch,
+    capsys: pytest.CaptureFixture[str],
+    tmp_path: Path,
+    all_entries: list[dict[str, object]],
+) -> None:
+    assert run_gate(monkeypatch, capsys, tmp_path, all_entries) == (0, "")
+
+
+def test_should_pass_when_the_transcript_cannot_be_read(
+    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str], tmp_path: Path
+) -> None:
+    hook_input = {"hook_event_name": "Stop", "transcript_path": str(tmp_path / "missing.jsonl")}
+    monkeypatch.setattr(
+        "sys.stdin", io.TextIOWrapper(io.BytesIO(json.dumps(hook_input).encode("utf-8")))
+    )
+    assert (session_title_turn_gate.main(), capsys.readouterr().out) == (0, "")

package/hooks/features/bash-dispatchers.md

@@ -11,6 +11,7 @@ This family rewrites a Git Bash command when path conversion would change a revi
 - `blocking/cloud_graphql_gate.py` denies the `gh` commands that call GraphQL (`gh api graphql` with any flags before the endpoint, `gh pr`, `gh issue`, `gh project` and `gh discussion` except `gh pr diff` and `gh pr list --web`, `gh status`, `gh org list`, `gh release list`, `gh release view` with a tag, `gh workflow run` without `--ref`, and a few `repo`, `label`, `search`, `ruleset` and `gist` commands, read past `if`, `!` and command substitutions) and an HTTP client or `python -c` style call to `api.github.com/graphql`, with or without a port, inside a cloud session, where the proxy answers GraphQL with HTTP 403, and names the REST routes to run instead.
 - `blocking/bash_post_call_dispatcher.py` runs hosted observers and joins their context output without blocking the call.
 - `advisory/pr_done_reminder.py` adds a pull request checklist after a successful push or pull request creation.
+- `advisory/owned_pr_review_loop.py` adds review-loop instructions after the agent opens a pull request on an owned repository outside the preset list of repositories that run their own automated review: run efficient-review until clean, mark the pull request ready, babysit it, and ship it to merge.
 
 ## When it fires
 
@@ -21,6 +22,7 @@ This family rewrites a Git Bash command when path conversion would change a revi
 - `blocking/cloud_graphql_gate.py` runs inside that dispatcher on `PreToolUse`, matcher `Bash`, timeout `60` seconds, for the Bash and PowerShell tools, when `CLAUDE_CODE_REMOTE` is `true`.
 - `blocking/bash_post_call_dispatcher.py` runs on `PostToolUse`, matcher `Bash|PowerShell`, timeout `60` seconds in `hooks.json`.
 - `advisory/pr_done_reminder.py` runs inside that dispatcher on `PostToolUse`, matcher `Bash|PowerShell`, timeout `60` seconds. `ALL_BASH_POST_TOOL_USE_HOSTED_HOOK_ENTRIES` selects `Bash` and `PowerShell`.
+- `advisory/owned_pr_review_loop.py` runs on `PostToolUse`, matcher `Bash|PowerShell|exec_command|shell_command|mcp__.*__(create_pull_request|github_create_pull_request)`, timeout `10` seconds in `hooks.json`. It wakes on `gh pr create`, `gh pr new`, a POST to `gh api repos/<owner>/<repo>/pulls`, and an MCP pull request creation. The installer also registers it on Codex `PostToolUse` through `ALL_CODEX_NATIVE_POST_TOOL_USE_HOOK_SCRIPT_NAMES`.
 
 ## Proving it
 
@@ -34,6 +36,7 @@ Preconditions:
 - **Cloud GraphQL gate.** Input is a `gh api graphql` command with `CLAUDE_CODE_REMOTE=true`. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_cloud_graphql_gate.py -q`. The adjacent test observes a denial that names the REST routes, and silence outside a cloud session.
 - **Post-call dispatch.** Input is a Bash call that yields hosted context. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_bash_post_call_dispatcher.py -q`. The adjacent test observes a joined context payload and exit code zero.
 - **Pull request reminder.** Input is a completed push or pull request creation. Run `python -m pytest packages/claude-dev-env/hooks/advisory/test_pr_done_reminder.py -q`. The adjacent test checks the reminder trigger and checklist verdict.
+- **Owned pull request review loop.** Input is a pull request creation result on an owned repository. Run `python -m pytest packages/claude-dev-env/hooks/advisory/test_owned_pr_review_loop.py -q`. The adjacent test observes the review-loop block for owned repositories and silence for the preset and foreign repositories.
 
 ## Gotchas
 

package/hooks/features/conduct-gates.md

@@ -12,6 +12,7 @@ This family stops a chat reply, edited message, or tool call when its payload br
 - `blocking/edit_marker_gate.py` rejects strikethrough and edit-note markers in replacement chat text or cards.
 - `blocking/issue_close_handoff_gate.py` denies an issue comment or issue write that closes the issue and routes a found defect to another issue or epic.
 - `blocking/session_title_format_gate.py` denies a session title that breaks the `<emoji> <name>` shape or has a name longer than 25 characters.
+- `blocking/session_title_turn_gate.py` holds the end of a turn in a session that has a `__set_session_title` tool until a title call in that turn comes back without an error. A held turn whose title call failed may end.
 - `blocking/step_note_gate.py` requires a status line before a tool call while its opt-in flag is on.
 - `blocking/verify_before_acting.py` blocks a completed mutating call when the agent's reasoning contains an unchecked claim.
 - `blocking/pr_lifecycle_skill_gate.py` denies a commit, push, pull request action, or merge until the `pr-lifecycle` skill appears in the transcript since the last compaction.
@@ -30,6 +31,7 @@ This family stops a chat reply, edited message, or tool call when its payload br
 - `blocking/edit_marker_gate.py` runs on `PreToolUse`, matcher `mcp__.*__update_message`, timeout `10` seconds in `hooks.json`.
 - `blocking/issue_close_handoff_gate.py` runs on `PreToolUse`, matcher `mcp__.*__(add_issue_comment|issue_write|update_issue_comment)`, timeout `10` seconds in `hooks.json`.
 - `blocking/session_title_format_gate.py` runs on `PreToolUse`, matcher `mcp__.*__set_session_title`, timeout `10` seconds in `hooks.json`.
+- `blocking/session_title_turn_gate.py` runs on `Stop`, timeout `10` seconds in `hooks.json`.
 - `blocking/step_note_gate.py` runs on `PreToolUse`, matcher `*`, timeout `15` seconds in `hooks.json`.
 - `blocking/verify_before_acting.py` runs on `PostToolUse`, matcher `Write|Edit|MultiEdit|NotebookEdit|Agent|Task|apply_patch|Bash|PowerShell|mcp__.*`, timeout `10` seconds in `hooks.json`.
 - `blocking/pr_lifecycle_skill_gate.py` runs on `PreToolUse`, matcher `Bash|PowerShell|mcp__.*__(create_pull_request|merge_pull_request|enable_pr_auto_merge|update_pull_request|actions_run_trigger)`, timeout `10` seconds in `hooks.json`.
@@ -52,6 +54,7 @@ Preconditions:
 - **Edit marker.** Input is an update message with strikethrough or an edit note. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_edit_marker_gate.py -q`. The adjacent test observes a denial; clean replacement text passes.
 - **Handoff close.** Input is an issue comment that says the issue is closed and that the found defect belongs to another issue. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_issue_close_handoff_gate.py -q`. The adjacent test observes a denial; a close with a plain cross-reference and a routing comment on an open issue both pass.
 - **Session title.** Input is a set session title call with no leading emoji or a name over 25 characters. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_session_title_format_gate.py -q`. The adjacent test observes a denial that names the broken rule; a well-formed title passes.
+- **Title this turn.** Input is a transcript that lists the title tool and a turn with no title call. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_session_title_turn_gate.py -q`. The adjacent test observes a `block` decision that names the tool and the four status emoji; a turn whose title call came back without an error passes.
 - **Step note.** Input is a tool call after a transcript message without a status line while the flag is on. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_step_note_gate.py -q`. The adjacent test observes a block until a status line appears.
 - **Checked claim.** Input is a Write after hedged reasoning in the transcript. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_verify_before_acting.py -q`. The adjacent test observes a block and a logged blocked outcome.
 - **Lifecycle skill.** Input is a `git commit` or `gh pr create` command with no `pr-lifecycle` invocation in the transcript. Run `python -m pytest packages/claude-dev-env/hooks/blocking/test_pr_lifecycle_skill_gate.py -q`. The adjacent test observes a denial, then a silent allow once the skill or its slash command appears.

package/hooks/features/session-context.md

@@ -10,7 +10,6 @@ This family injects reminders and task guidance when an agent starts, resumes, s
 - `session/working_style_prompt.py` injects the session's working style at session start.
 - `session/advisor_rules_prompt.py` injects advisor guidance when the built-in advisor is enabled.
 - `session/orchestrator_auto_starter.py` injects an orchestrator directive when its environment flag is enabled.
-- `session/deepen_first_prompt.py` rewrites a first interactive user task so the worker does the omitted expert job.
 - `session/artifact_template_pointer.py` routes an agent that starts an artifact page by scope. A status or progress report prefers the status flowchart from `docs/templates/artifact-page/status-flowchart.html`, unless the person asks for another shape. One flow or one comparison is an inline SVG flowchart with minimal text. A multi-part plan or evidence is an html-plan page from `docs/templates/html-plan/README.md`. When the request names the older artifact page template, it points at `docs/templates/artifact-page/README.md`, which names the tracker template and the diagram template and which ask each fits.
 - `advisory/auto_mode_denial_quick_fix.py` proposes one `autoMode.allow` entry and a PowerShell block that writes it after an auto mode denial. It never retries the denied call.
 
@@ -19,8 +18,6 @@ This family injects reminders and task guidance when an agent starts, resumes, s
 - `session/skill_loaded_reminder.py` runs on `PreToolUse` matcher `Agent|Task` at `10` seconds, `UserPromptSubmit` matcher empty at `10` seconds, `SessionStart` matcher `compact` at `10` seconds, and `SubagentStart` matcher `workflow-subagent` at `10` seconds in `hooks.json`.
 - `session/compaction_recall_prompt.py` runs on `SessionStart` matcher `compact` at `10` seconds in `hooks.json`. The condensing hook is a `type: "agent"` hook on `PostToolUse` matcher `Bash`, with `if` set to `Bash(*compaction_user_messages.py*)`, model `haiku`, and a `180` second timeout. The hook's Read call obeys session permissions, so the package `settings.json` allows `Read(~/.claude/compaction-recall/**)`.
 - `session/task_tool_prompt.py`, `session/working_style_prompt.py`, `session/advisor_rules_prompt.py`, and `session/orchestrator_auto_starter.py` run on `SessionStart`, matcher empty, timeout `10` seconds each in `hooks.json`.
-- `session/deepen_first_prompt.py` runs on `UserPromptSubmit`, matcher empty, timeout `10` seconds in `hooks.json`.
-- In Cursor, `session/deepen_first_prompt.py` also runs on `beforeSubmitPrompt`. Cursor passes that event name to the `UserPromptSubmit` copy it imports from the Claude Code settings too. When both copies run, `session/deepen_turn_marker.py` creates the turn marker only when it does not exist yet, so one copy injects. A later prompt skips when either the transcript marker or the session marker exists, or when the transcript already has a user line in Claude Code's or Cursor's shape.
 - `session/artifact_template_pointer.py` runs on `PreToolUse` matcher `Artifact|Skill` at `10` seconds in `hooks.json`. It speaks only on an `Artifact` call with action `quickstart` or a `Skill` call that loads `artifact-design`.
 - `advisory/auto_mode_denial_quick_fix.py` runs on `PermissionDenied`, matcher `*`, timeout `10` seconds in `hooks.json`.
 
@@ -36,7 +33,6 @@ Preconditions:
 - **Working style.** Input is a SessionStart event. Run `python -m pytest packages/claude-dev-env/hooks/session/test_working_style_prompt.py -q`. The adjacent test observes the fixed context text.
 - **Advisor guidance.** Input is SessionStart with `advisorModel` set. Run `python -m pytest packages/claude-dev-env/hooks/session/test_advisor_rules_prompt.py -q`. The adjacent test observes guidance only when the advisor setting is enabled.
 - **Orchestrator start.** Input is SessionStart with its opt-in flag set. Run `python -m pytest packages/claude-dev-env/hooks/session/test_orchestrator_auto_starter.py -q`. The adjacent test observes an orchestrator directive.
-- **First-task deepen.** Input is a first UserPromptSubmit task. Run `python -m pytest packages/claude-dev-env/hooks/session/test_deepen_first_prompt.py -q`. The adjacent test observes a skip table, a refusal of the paste path, a rewrite that carries the SCOPE, EXAMPLES, and ZOOM-IN BLOCKER lines, and one injection when two copies see the same Cursor prompt. `python -m pytest packages/claude-dev-env/hooks/session/test_deepen_turn_marker.py -q` observes that only the first marker claim wins. With nothing configured, `deepen_default_rewrite.py` builds that role-shaped rewrite, and `test_deepen_default_rewrite.py` checks the gate accepts it.
 - **Artifact template pointer.** Input is an `Artifact` quickstart call. Run `python -m pytest packages/claude-dev-env/hooks/session/test_artifact_template_pointer.py -q`. The adjacent test observes the status flowchart path first, the html-plan path ahead of the template path in `additionalContext`, and silence on a publish call or another skill.
 - **Denial quick fix.** Input is a `PermissionDenied` event with a bracketed rule label and a classifier verdict. Run `python -m pytest packages/claude-dev-env/hooks/advisory/test_auto_mode_denial_quick_fix.py -q`. The adjacent test observes the named rule, the allow entry, and the PowerShell block; a denial with no verdict gets a note and no block.
 

package/hooks/hooks.json

@@ -284,11 +284,6 @@
             "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/session/skill_loaded_reminder.py",
             "timeout": 10
           },
-          {
-            "type": "command",
-            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/session/deepen_first_prompt.py",
-            "timeout": 10
-          },
           {
             "type": "command",
             "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/lifecycle/nested_project_hooks.py",
@@ -389,6 +384,11 @@
             "type": "command",
             "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/open_tasks_stop_gate.py",
             "timeout": 10
+          },
+          {
+            "type": "command",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/blocking/session_title_turn_gate.py",
+            "timeout": 10
           }
         ]
       }
@@ -456,6 +456,16 @@
           }
         ]
       },
+      {
+        "matcher": "Bash|PowerShell|exec_command|shell_command|mcp__.*__(create_pull_request|github_create_pull_request)",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/advisory/owned_pr_review_loop.py",
+            "timeout": 10
+          }
+        ]
+      },
       {
         "matcher": "Bash",
         "hooks": [

package/hooks/hooks_constants/mod_handoff_constants.py

@@ -14,7 +14,6 @@ __all__ = [
     "ENABLED_PLUGINS_SETTINGS_KEY",
     "PLUGIN_MARKETPLACE_SEPARATOR",
     "PROJECT_SETTINGS_DIRECTORY_NAME",
-    "DEEPEN_FIRST_PROMPT_PLUGIN_NAME",
     "SESSION_PROMPTS_PLUGIN_NAME",
     "SHELL_GUARDS_PLUGIN_NAME",
     "USER_SETTINGS_FILE_NAME",
@@ -24,7 +23,6 @@ ENABLED_PLUGINS_SETTINGS_KEY = "enabledPlugins"
 PLUGIN_MARKETPLACE_SEPARATOR = "@"
 SHELL_GUARDS_PLUGIN_NAME = "shell-guards"
 SESSION_PROMPTS_PLUGIN_NAME = "session-prompts"
-DEEPEN_FIRST_PROMPT_PLUGIN_NAME = "deepen-first-prompt"
 CLAUDE_CONFIG_DIR_ENV_VAR = "CLAUDE_CONFIG_DIR"
 CLAUDE_PROJECT_DIR_ENV_VAR = "CLAUDE_PROJECT_DIR"
 DEFAULT_CLAUDE_CONFIG_DIRECTORY_NAME = ".claude"

package/hooks/hooks_constants/owned_pr_review_loop_constants.py

@@ -0,0 +1,120 @@
+"""Constants for the owned pull request review-loop context hook.
+
+The hook is a PostToolUse observer. It never blocks. After the agent opens a
+pull request on a repository we own, outside the preset list of repositories
+that run their own automated review, it tells the agent to own an efficient
+review loop and drive the pull request through to merge.
+
+Private owner and repository names stay out of this public tree. Each set holds the
+SHA-256 digest of a name normalized to lower-case ASCII letters and digits,
+the same form ``scripts/private_terms.py`` uses::
+
+    "Acme-Widgets"          -> "acmewidgets"
+    "Acme-Widgets/tools"    -> "acmewidgetstools"
+
+To add an owner or a preset repository, append the digest of its normalized
+form.
+"""
+
+from __future__ import annotations
+
+import re
+
+__all__ = [
+    "NAME_DIGEST_TEXT_ENCODING",
+    "ALL_OWNED_OWNER_DIGESTS",
+    "ALL_PRESET_REPOSITORY_DIGESTS",
+    "ALL_SHELL_TOOL_NAMES",
+    "ALL_SHELL_COMMAND_INPUT_KEYS",
+    "SHELL_ARGUMENT_SEPARATOR",
+    "ALL_GH_PR_CREATE_ACTIONS",
+    "GH_PROGRAM_NAME",
+    "GH_PR_SUBCOMMAND",
+    "GH_API_SUBCOMMAND",
+    "GH_API_PULLS_ENDPOINT_PATTERN",
+    "ALL_GH_API_BODY_OPTIONS",
+    "ALL_GH_API_METHOD_OPTIONS",
+    "GH_API_POST_METHOD",
+    "GH_LONG_OPTION_PREFIX",
+    "GH_SHORT_OPTION_LENGTH",
+    "ALL_GH_API_SHORT_OPTIONS",
+    "GH_OPTION_VALUE_SEPARATOR",
+    "MCP_TOOL_NAME_PREFIX",
+    "ALL_MCP_CREATE_PULL_REQUEST_TOOL_SUFFIXES",
+    "MCP_OWNER_INPUT_KEY",
+    "MCP_REPOSITORY_INPUT_KEY",
+    "PULL_REQUEST_URL_PATTERN",
+    "ALREADY_EXISTS_MARKER",
+    "ALL_DECLARED_URL_KEYS",
+    "JSON_OBJECT_OPENER",
+    "REVIEW_LOOP_CONTEXT_TEMPLATE",
+]
+
+NAME_DIGEST_TEXT_ENCODING: str = "utf-8"
+ALL_OWNED_OWNER_DIGESTS: frozenset[str] = frozenset(
+    {
+        "2e8b9d88060d471690c122e6843f3bec8c95116d643af2f5501e0881b10e83c4",
+        "3a92fc8d256dc1f50dc8794573f80de695516f0f0e5c235118bd0c18be3d4434",
+        "d526db5593d5986500e4770cb6018f2d33c459ed93657487958a6086e52e6147",
+        "95d4d8808440e130d0ee753e0b7530eba4534dd41a7320ad8b710a44d40441f4",
+    }
+)
+ALL_PRESET_REPOSITORY_DIGESTS: frozenset[str] = frozenset(
+    {"d362bee4d80f5474921b917c127f2b0680c0a5261cb352e59de35cc87b00989f"}
+)
+
+ALL_SHELL_TOOL_NAMES: frozenset[str] = frozenset(
+    {"Bash", "PowerShell", "exec_command", "shell_command"}
+)
+ALL_SHELL_COMMAND_INPUT_KEYS: tuple[str, ...] = ("command", "cmd")
+SHELL_ARGUMENT_SEPARATOR: str = " "
+GH_PROGRAM_NAME: str = "gh"
+GH_PR_SUBCOMMAND: str = "pr"
+ALL_GH_PR_CREATE_ACTIONS: frozenset[str] = frozenset({"create", "new"})
+GH_API_SUBCOMMAND: str = "api"
+GH_API_PULLS_ENDPOINT_PATTERN: re.Pattern[str] = re.compile(r"/?repos/[^/\s]+/[^/\s]+/pulls")
+ALL_GH_API_BODY_OPTIONS: frozenset[str] = frozenset(
+    {"-f", "-F", "--field", "--raw-field", "--input"}
+)
+ALL_GH_API_METHOD_OPTIONS: frozenset[str] = frozenset({"-X", "--method"})
+GH_API_POST_METHOD: str = "POST"
+GH_LONG_OPTION_PREFIX: str = "--"
+GH_SHORT_OPTION_LENGTH: int = 2
+ALL_GH_API_SHORT_OPTIONS: frozenset[str] = frozenset({"-f", "-F", "-X"})
+GH_OPTION_VALUE_SEPARATOR: str = "="
+
+MCP_TOOL_NAME_PREFIX: str = "mcp__"
+ALL_MCP_CREATE_PULL_REQUEST_TOOL_SUFFIXES: tuple[str, ...] = (
+    "__create_pull_request",
+    "__github_create_pull_request",
+)
+MCP_OWNER_INPUT_KEY: str = "owner"
+MCP_REPOSITORY_INPUT_KEY: str = "repo"
+
+PULL_REQUEST_URL_PATTERN: re.Pattern[str] = re.compile(
+    r"https://github\.com/(?P<owner>[A-Za-z0-9][A-Za-z0-9-]*)/"
+    r"(?P<repository>[A-Za-z0-9._-]+)/pull/(?P<number>\d+)"
+)
+ALREADY_EXISTS_MARKER: str = "already exists"
+ALL_DECLARED_URL_KEYS: tuple[str, ...] = ("html_url", "url")
+JSON_OBJECT_OPENER: str = "{"
+
+REVIEW_LOOP_CONTEXT_TEMPLATE: str = (
+    "=== OWNED PR REVIEW LOOP (context reminder, never a block) ===\n"
+    "You opened {owner}/{repository}#{number}  {url}\n"
+    "This repository has no automated review, so you own the review and the merge.\n"
+    "1. Review loop. Load the efficient-review skill (/efficient-review). Review the\n"
+    "   branch, check each finding against the code, fix every one that holds, push,\n"
+    "   and review again. Repeat until a pass reports no findings.\n"
+    "2. Mark ready. Once the loop is clean, CI is green, and no review thread is open,\n"
+    "   mark the PR ready for review (gh pr ready {number} --repo {owner}/{repository},\n"
+    "   or update_pull_request with draft false).\n"
+    "3. Babysit. Follow the pstack babysit playbook (poteto-mode/playbooks/babysit.md,\n"
+    "   or the standalone babysit skill outside poteto-mode). Fix failing CI, resolve\n"
+    "   merge conflicts, and answer review threads until the PR is green and mergeable.\n"
+    "   Any new code goes back through step 1 before the next push.\n"
+    "4. Ship. Follow the pstack shipping playbook (poteto-mode/playbooks/shipping.md)\n"
+    "   to land the PR, or the pr-lifecycle skill outside poteto-mode. Read the PR\n"
+    "   back and confirm it reads merged.\n"
+    "Run each step yourself. The task ends at a merged PR or a named blocker."
+)

package/hooks/hooks_constants/session_title_constants.py

@@ -1,4 +1,4 @@
-"""Constants for session_title_format_gate.py."""
+"""Constants for session_title_format_gate.py and session_title_turn_gate.py."""
 
 import re
 
@@ -10,14 +10,15 @@ FORMAT_GATE_EVENT_NAME = "PreToolUse"
 ALLOW_EXIT_CODE = 0
 BLOCK_EXIT_CODE = 2
 
-STATUS_PREFIX_PATTERN = re.compile("^(\U0001f6a9|\u2705|\u23f3)\ufe0f? (?=\\S)")
+STATUS_PREFIX_PATTERN = re.compile("^(\U0001f6a9|\U0001f6a7|\u2705|\u23f3)\ufe0f? (?=\\S)")
 MAXIMUM_NAME_LENGTH = 25
 TRAILING_PUNCTUATION = ".!?,;:"
 IDENTIFIER_DIGITS_PATTERN = re.compile(r"\d{3,}")
 
 STATUS_PREFIX_MESSAGE = (
     "The title must start with one status emoji and one space:"
-    " \U0001f6a9 when the user must act, \u2705 when the work is done,"
+    " \U0001f6a9 when the user must act, \U0001f6a7 when an outside dependency"
+    " blocks the work, \u2705 when the work is done,"
     " \u23f3 while work runs and nothing waits on the user."
 )
 SINGLE_LINE_MESSAGE = "The title must be one line."
@@ -31,3 +32,40 @@ FORMAT_RETRY_INSTRUCTION = (
     " the main change or outcome in concrete nouns, such as"
     " '\u23f3 Broker gate + replay rule'."
 )
+
+TURN_GATE_EVENT_NAME = "Stop"
+TRANSCRIPT_PATH_KEY = "transcript_path"
+STOP_HOOK_ACTIVE_KEY = "stop_hook_active"
+DECISION_KEY = "decision"
+REASON_KEY = "reason"
+BLOCK_DECISION = "block"
+UTF8_ENCODING = "utf-8"
+DECODE_ERRORS_POLICY = "replace"
+ENTRY_TYPE_KEY = "type"
+USER_ENTRY_TYPE = "user"
+ASSISTANT_ENTRY_TYPE = "assistant"
+ATTACHMENT_KEY = "attachment"
+MESSAGE_KEY = "message"
+CONTENT_KEY = "content"
+TOOL_USE_BLOCK_TYPE = "tool_use"
+TOOL_RESULT_BLOCK_TYPE = "tool_result"
+BLOCK_ID_KEY = "id"
+BLOCK_NAME_KEY = "name"
+TOOL_USE_ID_KEY = "tool_use_id"
+IS_ERROR_KEY = "is_error"
+SIDECHAIN_FLAG_KEY = "isSidechain"
+ALL_SKIPPED_PROMPT_FLAGS = ("isMeta", SIDECHAIN_FLAG_KEY, "isCompactSummary")
+ALL_TOOL_LISTING_NAME_KEYS = ("addedNames", "readdedNames")
+ALL_TOOL_LISTING_RECORD_KEYS = ("tools", "entries")
+REMOVED_NAMES_KEY = "removedNames"
+TITLE_TOOL_DISPLAY_SEPARATOR = " or "
+
+TURN_BLOCK_REASON = (
+    "This turn set no session title. Call {tool_name} now with '<emoji> <name>':"
+    " \U0001f6a9 the user must act, \U0001f6a7 an outside dependency blocks the work,"
+    " \u2705 the work is done, \u23f3 work runs and nothing waits on the user."
+    " When the tool is deferred, load its schema with ToolSearch first."
+    " When it asks for a session id, get it from get_session with no session_id."
+    " After the call, end the turn with one short closing sentence."
+    " Leave the earlier reply as it stands and do not repeat it."
+)

package/hooks/lifecycle/nested_project_hooks.py

@@ -4,8 +4,8 @@
 Claude Code reads project hooks from ``<project>/.claude/settings.json`` of the
 directory a session starts in. A cloud session that holds several repository
 checkouts starts in their parent directory, which has no settings of its own,
-and ``--add-dir`` loads no hooks from the checkouts. Their start hooks, first
-prompt deepeners, and tool guards then never run. This hook runs them::
+and ``--add-dir`` loads no hooks from the checkouts. Their start hooks, prompt
+hooks, and tool guards then never run. This hook runs them::
 
     session directory (no .git, no .claude/settings.json)
     |-- checkout-a/.claude/settings.json   hooks run with CLAUDE_PROJECT_DIR=checkout-a

package/hooks/lifecycle/test_nested_project_hooks.py

@@ -362,7 +362,7 @@ def test_should_carry_child_user_prompt_submit_output_as_additional_context(
     context_output = {
         "hookSpecificOutput": {
             "hookEventName": "UserPromptSubmit",
-            "additionalContext": "CDE_DEEPEN:v1\nTreat the submitted prompt as this rewritten task.",
+            "additionalContext": "CHILD_CONTEXT:v1\nTreat the submitted prompt as this rewritten task.",
         }
     }
     _make_checkout(
@@ -382,7 +382,7 @@ def test_should_carry_child_user_prompt_submit_output_as_additional_context(
     assert completed_process.returncode == 0
     hook_output = json.loads(completed_process.stdout)
     assert hook_output["hookSpecificOutput"]["hookEventName"] == "UserPromptSubmit"
-    assert "CDE_DEEPEN:v1" in hook_output["hookSpecificOutput"]["additionalContext"]
+    assert "CHILD_CONTEXT:v1" in hook_output["hookSpecificOutput"]["additionalContext"]
 
 
 def test_should_stay_quiet_on_an_event_it_does_not_forward(

package/hooks/session/compaction_user_messages.py

@@ -168,8 +168,8 @@ def typed_user_messages(all_transcript_lines: Iterable[str]) -> list[TypedMessag
     ::
 
         user "fix the login bug"                       -> kept
-        user "<command-name>/deepen</command-name>
-              <command-args>speed it up</command-args>" -> "/deepen speed it up"
+        user "<command-name>/deepstack-mode</command-name>
+              <command-args>speed it up</command-args>" -> "/deepstack-mode speed it up"
         user tool_result, isMeta skill body,
         isCompactSummary, isSidechain, origin peer     -> left out
         user "<system-reminder>...", "<local-command-stdout>" -> left out

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "claude-dev-env",
-    "version": "8.88.7",
+    "version": "8.90.0",
     "description": "Claude Code development standards — rules, hooks, agents, commands, and skills",
     "type": "module",
     "bin": {
@@ -9,7 +9,7 @@
         "cde": "bin/cde.mjs"
     },
     "scripts": {
-        "test": "node --test --test-concurrency=1 \"bin/*.test.mjs\" \".agents/skills/**/*.test.mjs\" \"tests/fresh-session/**/*.test.mjs\" \"scripts/ci/*.test.mjs\""
+        "test": "node --test --test-concurrency=4 \"bin/*.test.mjs\" \".agents/skills/**/*.test.mjs\" \"tests/fresh-session/**/*.test.mjs\" \"scripts/ci/*.test.mjs\""
     },
     "files": [
         "bin/",