claudecode-linter 2.1.148 → 2.1.150-patch.1

package/contracts/settings.schema.json

@@ -1,13 +1,13 @@
 {
-	"extractedFromClaudeCodeVersion": "2.1.146",
-	"extractedAt": "2026-05-21T20:50:34.861Z",
+	"extractedFromClaudeCodeVersion": "2.1.150",
+	"extractedAt": "2026-05-23T18:30:08.375Z",
 	"schema": {
 		"$schema": "https://json-schema.org/draft/2020-12/schema",
 		"title": "Claude Code settings.json",
 		"type": "object",
 		"properties": {
 			"$schema": {
-				"const": "pXq",
+				"const": "https://json.schemastore.org/claude-code-settings.json",
 				"description": "JSON Schema reference for Claude Code settings"
 			},
 			"apiKeyHelper": {
@@ -78,6 +78,48 @@
 				"type": "boolean",
 				"description": "Whether file picker should respect .gitignore files (default: true). Note: .ignore files are always respected."
 			},
+			"breakReminder": {
+				"type": "object",
+				"properties": {
+					"enabled": {
+						"type": "boolean",
+						"description": "Show a friendly nudge after sustained continuous use (default false). Must be true for the reminder to fire."
+					},
+					"intervalMinutes": {
+						"type": "number",
+						"description": "Minutes of continuous use before the reminder fires (default 120). Re-fires every interval until you take a break."
+					},
+					"breakThresholdMinutes": {
+						"type": "number",
+						"description": "Minutes of inactivity that count as a break and reset the timer (default 15)"
+					},
+					"message": {
+						"type": "string",
+						"description": "Custom reminder text. Leave unset for a rotating set of friendly nudges."
+					}
+				},
+				"description": "@internal Opt-in break reminder. When enabled, shows a dismissible nudge after sustained continuous use. Never blocks — just a friendly heads-up."
+			},
+			"quietHours": {
+				"type": "object",
+				"properties": {
+					"enabled": {
+						"type": "boolean",
+						"description": "Show a one-time nudge when you start or keep using the CLI inside your quiet-hours window (default false)."
+					},
+					"start": {
+						"type": "string",
+						"pattern": "^([01]?\\d|2[0-3]):[0-5]\\d$",
+						"description": "Start of the quiet-hours window, 24-hour local time \"HH:MM\"."
+					},
+					"end": {
+						"type": "string",
+						"pattern": "^([01]?\\d|2[0-3]):[0-5]\\d$",
+						"description": "End of the quiet-hours window, 24-hour local time \"HH:MM\". May be earlier than start for an overnight range."
+					}
+				},
+				"description": "@internal Opt-in quiet hours. When enabled, shows a single soft nudge per session while inside the configured local-time window. Never blocks."
+			},
 			"cleanupPeriodDays": {
 				"type": "number",
 				"description": "Number of days to retain chat transcripts before automatic cleanup (default: 30). Minimum 1. Use a large value for long retention; use --no-session-persistence to disable transcript writes entirely."
@@ -225,6 +267,264 @@
 				"description": "Enterprise denylist of MCP servers that are explicitly blocked. If a server is on the denylist, it will be blocked across all scopes including enterprise. Denylist takes precedence over allowlist - if a server is on both lists, it is denied."
 			},
 			"hooks": {
+				"type": "object",
+				"additionalProperties": {
+					"type": "array",
+					"items": {
+						"type": "object",
+						"properties": {
+							"matcher": {
+								"type": "string",
+								"description": "String pattern to match (e.g. tool names like \"Write\")"
+							},
+							"hooks": {
+								"type": "array",
+								"items": {
+									"oneOf": [
+										{
+											"type": "object",
+											"properties": {
+												"type": {
+													"const": "command",
+													"description": "Shell command hook type"
+												},
+												"command": {
+													"type": "string",
+													"description": "Shell command to execute"
+												},
+												"args": {
+													"type": "array",
+													"items": {
+														"type": "string"
+													},
+													"description": "Argument list for exec form. When present, `command` is resolved as \"+\"an executable and spawned directly with these arguments \\u2014 no shell. \"+\"Path placeholders like ${CLAUDE_PLUGIN_ROOT} are substituted per-element as plain strings, so paths with quotes, $, or backticks never reach a shell parser. When absent, `command` runs through a shell (bash on POSIX, PowerShell on Windows without Git Bash)."
+												},
+												"if": {
+													"type": "string",
+													"description": "Permission rule syntax to filter when this hook runs (e.g., \"Bash(git *)\"). Only runs if the tool call matches the pattern. Avoids spawning hooks for non-matching commands."
+												},
+												"shell": {
+													"enum": [
+														"bash",
+														"powershell"
+													],
+													"description": "Shell interpreter. 'bash' uses your $SHELL (bash/zsh/sh); 'powershell' uses pwsh. Defaults to bash (powershell on Windows without Git Bash)."
+												},
+												"timeout": {
+													"type": "number",
+													"description": "Timeout in seconds for this specific command"
+												},
+												"statusMessage": {
+													"type": "string",
+													"description": "Custom status message to display in spinner while hook runs"
+												},
+												"once": {
+													"type": "boolean",
+													"description": "If true, hook runs once and is removed after execution"
+												},
+												"async": {
+													"type": "boolean",
+													"description": "If true, hook runs in background without blocking"
+												},
+												"asyncRewake": {
+													"type": "boolean",
+													"description": "If true, hook runs in background and wakes the model on exit code 2 (blocking error). Implies async."
+												},
+												"rewakeMessage": {
+													"type": "string",
+													"minLength": 1,
+													"description": "@internal Custom prefix for the system-reminder shown to the model when an asyncRewake hook exits with code 2. The hook output is appended after this prefix."
+												},
+												"rewakeSummary": {
+													"type": "string",
+													"minLength": 1,
+													"description": "@internal One-line summary shown to the user in the terminal when an asyncRewake hook exits with code 2. Defaults to \"Stop hook feedback\"."
+												}
+											},
+											"required": [
+												"type",
+												"command"
+											]
+										},
+										{
+											"type": "object",
+											"properties": {
+												"type": {
+													"const": "prompt",
+													"description": "LLM prompt hook type"
+												},
+												"prompt": {
+													"type": "string",
+													"description": "Prompt to evaluate with LLM. Use $ARGUMENTS placeholder for hook input JSON."
+												},
+												"if": {
+													"type": "string",
+													"description": "Permission rule syntax to filter when this hook runs (e.g., \"Bash(git *)\"). Only runs if the tool call matches the pattern. Avoids spawning hooks for non-matching commands."
+												},
+												"timeout": {
+													"type": "number",
+													"description": "Timeout in seconds for this specific prompt evaluation"
+												},
+												"model": {
+													"type": "string",
+													"description": "Model to use for this prompt hook (e.g., \"claude-sonnet-4-6\"). If not specified, uses the default small fast model."
+												},
+												"continueOnBlock": {
+													"type": "boolean",
+													"description": "`Sets the continue value for the decision:\"block\" produced when ok is false. Default false (turn ends). Whether continue:true lets the turn proceed depends on the event's decision:\"block\" semantics. On PostToolUse, the reason is fed back to Claude and the turn continues.`"
+												},
+												"statusMessage": {
+													"type": "string",
+													"description": "Custom status message to display in spinner while hook runs"
+												},
+												"once": {
+													"type": "boolean",
+													"description": "If true, hook runs once and is removed after execution"
+												}
+											},
+											"required": [
+												"type",
+												"prompt"
+											]
+										},
+										{
+											"type": "object",
+											"properties": {
+												"type": {
+													"const": "agent",
+													"description": "Agentic verifier hook type"
+												},
+												"prompt": {
+													"type": "string",
+													"description": "Prompt describing what to verify (e.g. \"Verify that unit tests ran and passed.\"). Use $ARGUMENTS placeholder for hook input JSON."
+												},
+												"if": {
+													"type": "string",
+													"description": "Permission rule syntax to filter when this hook runs (e.g., \"Bash(git *)\"). Only runs if the tool call matches the pattern. Avoids spawning hooks for non-matching commands."
+												},
+												"timeout": {
+													"type": "number",
+													"description": "Timeout in seconds for agent execution (default 60)"
+												},
+												"model": {
+													"type": "string",
+													"description": "Model to use for this agent hook (e.g., \"claude-sonnet-4-6\"). If not specified, uses Haiku."
+												},
+												"statusMessage": {
+													"type": "string",
+													"description": "Custom status message to display in spinner while hook runs"
+												},
+												"once": {
+													"type": "boolean",
+													"description": "If true, hook runs once and is removed after execution"
+												}
+											},
+											"required": [
+												"type",
+												"prompt"
+											]
+										},
+										{
+											"type": "object",
+											"properties": {
+												"type": {
+													"const": "http",
+													"description": "HTTP hook type"
+												},
+												"url": {
+													"type": "string",
+													"format": "uri",
+													"description": "URL to POST the hook input JSON to"
+												},
+												"if": {
+													"type": "string",
+													"description": "Permission rule syntax to filter when this hook runs (e.g., \"Bash(git *)\"). Only runs if the tool call matches the pattern. Avoids spawning hooks for non-matching commands."
+												},
+												"timeout": {
+													"type": "number",
+													"description": "Timeout in seconds for this specific request"
+												},
+												"headers": {
+													"type": "object",
+													"additionalProperties": {
+														"type": "string"
+													},
+													"description": "Additional headers to include in the request. Values may reference environment variables using $VAR_NAME or ${VAR_NAME} syntax (e.g., \"Authorization\": \"Bearer $MY_TOKEN\"). Only variables listed in allowedEnvVars will be interpolated."
+												},
+												"allowedEnvVars": {
+													"type": "array",
+													"items": {
+														"type": "string"
+													},
+													"description": "Explicit list of environment variable names that may be interpolated in header values. Only variables listed here will be resolved; all other $VAR references are left as empty strings. Required for env var interpolation to work."
+												},
+												"statusMessage": {
+													"type": "string",
+													"description": "Custom status message to display in spinner while hook runs"
+												},
+												"once": {
+													"type": "boolean",
+													"description": "If true, hook runs once and is removed after execution"
+												}
+											},
+											"required": [
+												"type",
+												"url"
+											]
+										},
+										{
+											"type": "object",
+											"properties": {
+												"type": {
+													"const": "mcp_tool",
+													"description": "MCP tool hook type"
+												},
+												"server": {
+													"type": "string",
+													"description": "Name of an already-configured MCP server to invoke"
+												},
+												"tool": {
+													"type": "string",
+													"description": "Name of the tool on that server to call"
+												},
+												"input": {
+													"type": "object",
+													"additionalProperties": {},
+													"description": "Arguments passed to the MCP tool. String values support ${path} interpolation from the hook input JSON (e.g. \"${tool_input.file_path}\")."
+												},
+												"if": {
+													"type": "string",
+													"description": "Permission rule syntax to filter when this hook runs (e.g., \"Bash(git *)\"). Only runs if the tool call matches the pattern. Avoids spawning hooks for non-matching commands."
+												},
+												"timeout": {
+													"type": "number",
+													"description": "Timeout in seconds for this specific tool call"
+												},
+												"statusMessage": {
+													"type": "string",
+													"description": "Custom status message to display in spinner while hook runs"
+												},
+												"once": {
+													"type": "boolean",
+													"description": "If true, hook runs once and is removed after execution"
+												}
+											},
+											"required": [
+												"type",
+												"server",
+												"tool"
+											]
+										}
+									]
+								},
+								"description": "List of hooks to execute when the matcher matches"
+							}
+						},
+						"required": [
+							"hooks"
+						]
+					}
+				},
 				"description": "Custom commands to run before/after tool executions"
 			},
 			"worktree": {
@@ -310,6 +610,10 @@
 				"type": "boolean",
 				"description": "When true (and set in managed settings), allowedMcpServers is only read from managed settings. deniedMcpServers still merges from all sources, so users can deny servers for themselves. Users can still add their own MCP servers, but only the admin-defined allowlist applies."
 			},
+			"allowAllClaudeAiMcps": {
+				"type": "boolean",
+				"description": "When true (and set in managed settings), claude.ai cloud MCP connectors load alongside managed-mcp.json instead of being suppressed by its exclusive-control lockdown. Default off preserves the lockdown. Read from managed settings only."
+			},
 			"strictPluginOnlyCustomization": {
 				"anyOf": [
 					{
@@ -317,7 +621,14 @@
 					},
 					{
 						"type": "array",
-						"items": {}
+						"items": {
+							"enum": [
+								"skills",
+								"agents",
+								"hooks",
+								"mcp"
+							]
+						}
 					}
 				],
 				"description": "'When set in managed settings, blocks non-plugin customization sources for the listed surfaces. Array form locks specific surfaces (e.g. [\"skills\", \"hooks\"]); `true` locks all four; `false` is an explicit no-op. Blocked: ~/.claude/{surface}/, .claude/{surface}/ (project), settings.json hooks, .mcp.json. NOT blocked: managed (policySettings) sources, plugin-provided customizations. '+\"Composes with strictKnownMarketplaces for end-to-end admin control \\u2014 plugins gated by \"+\"marketplace allowlist, everything else blocked here.\""
@@ -2138,6 +2449,10 @@
 				"description": "Color theme for the UI"
 			},
 			"editorMode": {
+				"enum": [
+					"normal",
+					"vim"
+				],
 				"description": "Key binding mode for the prompt input"
 			},
 			"verbose": {
@@ -2145,6 +2460,15 @@
 				"description": "Show full tool output instead of truncated summaries"
 			},
 			"preferredNotifChannel": {
+				"enum": [
+					"auto",
+					"iterm2",
+					"iterm2_with_bell",
+					"terminal_bell",
+					"kitty",
+					"ghostty",
+					"notifications_disabled"
+				],
 				"description": "Preferred OS notification channel"
 			},
 			"autoCompactEnabled": {
@@ -2176,6 +2500,11 @@
 				"description": "Enable the todo / task tracking panel"
 			},
 			"teammateMode": {
+				"enum": [
+					"auto",
+					"tmux",
+					"in-process"
+				],
 				"description": "How spawned teammates execute (tmux, in-process, auto)"
 			},
 			"remoteControlAtStartup": {

package/contracts/skill-frontmatter.schema.json

@@ -1,18 +1,60 @@
 {
-	"extractedFromClaudeCodeVersion": "2.1.146",
-	"extractedAt": "2026-05-21T21:04:24.797Z",
+	"extractedFromClaudeCodeVersion": "2.1.150",
+	"extractedAt": "2026-05-23T18:30:08.380Z",
 	"schema": {
 		"$schema": "https://json-schema.org/draft/2020-12/schema",
 		"title": "Claude Code SKILL.md frontmatter",
 		"type": "object",
 		"properties": {
 			"name": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "Display name. Defaults to the filename without extension."
 			},
 			"description": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "One-line summary shown in listings and the Skill tool."
 			},
 			"model": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "Model override (`haiku`, `sonnet`, `opus`, or a full ID). Use `inherit` to match the parent conversation."
 			},
 			"allowed-tools": {
@@ -43,6 +85,20 @@
 				"description": "Tools available to the model while this file is active. Comma-separated string or YAML list."
 			},
 			"argument-hint": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "Placeholder text shown after the slash command name."
 			},
 			"arguments": {
@@ -73,21 +129,105 @@
 				"description": "@internal — typed variant of argument-hint; argument-hint is the documented form"
 			},
 			"disable-model-invocation": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "If true, the model cannot invoke this via the Skill tool; only users can type the slash command."
 			},
 			"user-invocable": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "If false, hides the slash command from users; only the model can invoke it via the Skill tool."
 			},
 			"effort": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "Thinking effort for the model: `low`, `medium`, `high`, `max`, or an integer."
 			},
 			"shell": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "Shell for `!`-command blocks: `bash` or `powershell`. Defaults to bash regardless of platform."
 			},
 			"version": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "@internal — bookkeeping, not surfaced to users"
 			},
 			"when_to_use": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "Guidance for when the model should reach for this skill. Becomes part of the tool description."
 			},
 			"paths": {
@@ -129,15 +269,71 @@
 				"description": "Where the skill runs: `inline` expands into the current conversation; `fork` spawns a subagent."
 			},
 			"agent": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "Agent type to spawn when `context: fork`."
 			},
 			"fallback": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "@internal — interim defense-in-depth for thin-pointer skill stubs. If true, this skill yields to a same-suffix plugin or MCP skill (`<plugin>:<name>` / `<server>:<name>`) when one is loaded. Stubs carrying this should be deleted once their canonical plugin/MCP skill ships, not maintained."
 			},
 			"created_by": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "@internal — provenance marker (e.g. dream-proposal)"
 			},
 			"improved_by": {
+				"anyOf": [
+					{
+						"type": "string"
+					},
+					{
+						"type": "number"
+					},
+					{
+						"type": "boolean"
+					},
+					{
+						"type": "null"
+					}
+				],
 				"description": "@internal — provenance marker (e.g. dream-proposal)"
 			},
 			"mcpServers": {

package/dist/config.js

@@ -1,9 +1,8 @@
 import { readFileSync, existsSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
+import { join } from "node:path";
 import { homedir } from "node:os";
 import { parse as parseYaml } from "yaml";
-const __dirname = dirname(fileURLToPath(import.meta.url));
+import { assetCandidates } from "./utils/asset-path.js";
 const DEFAULT_CONFIG = {
     rules: {},
 };
@@ -13,7 +12,7 @@ export function loadConfig(configPath) {
         return DEFAULT_CONFIG;
     try {
         const content = readFileSync(path, "utf-8");
-        const parsed = parseYaml(content);
+        const parsed = parseYaml(content, { maxAliasCount: 100 });
         if (!parsed || typeof parsed !== "object")
             return DEFAULT_CONFIG;
         const config = { rules: {} };
@@ -47,10 +46,16 @@ function findConfigFile() {
         if (existsSync(homePath))
             return homePath;
     }
-    // 3. Fall back to bundled defaults
-    const bundled = join(__dirname, "..", ".claudecode-lint.defaults.yaml");
-    if (existsSync(bundled))
-        return bundled;
+    // 3. Fall back to bundled defaults. Resolved relative to import.meta.url
+    //    first (Node / npm package), then relative to process.execPath as a
+    //    fallback for the `bun build --compile` single-executable variant.
+    for (const bundled of assetCandidates(import.meta.url, [
+        "..",
+        ".claudecode-lint.defaults.yaml",
+    ])) {
+        if (existsSync(bundled))
+            return bundled;
+    }
     return undefined;
 }
 export function mergeCliRules(config, enable, disable) {