code-auditor-mcp 5.0.2 → 5.3.3

package/examples/.auditrc.json

@@ -1,22 +1,11 @@
 {
-  "// Configuration for TypeScript/JavaScript Code Auditor": "",
-  "// This example shows common configuration options": "",
-  "// Remove comment lines before using this file": "",
-  
-  "// Project Settings": "",
-  "projectRoot": ".",
-  "reportTitle": "My Project Code Quality Audit",
-  
-  "// File Discovery": "",
-  "// Specify which files to include in the audit": "",
   "includePaths": [
     "src/**/*.{ts,tsx,js,jsx}",
     "app/**/*.{ts,tsx,js,jsx}",
     "lib/**/*.{ts,tsx,js,jsx}",
     "components/**/*.{ts,tsx,js,jsx}"
   ],
-  
-  "// Files and directories to exclude": "",
+
   "excludePaths": [
     "**/node_modules/**",
     "**/.next/**",
@@ -29,162 +18,30 @@
     "**/vendor/**",
     "**/*.min.js"
   ],
-  
-  "// Analyzer-specific configuration": "",
-  "analyzerConfig": {
+
+  "analyzerConfigs": {
     "solid": {
-      "// Maximum allowed methods per class": "",
       "maxMethodsPerClass": 10,
-      "// Maximum lines per method": "",
       "maxLinesPerMethod": 50,
-      "// Maximum parameters per method": "",
       "maxParametersPerMethod": 4,
-      "// Maximum cyclomatic complexity": "",
-      "maxComplexity": 10,
-      "// Which SOLID principles to check": "",
-      "checkPatterns": {
-        "singleResponsibility": true,
-        "openClosed": true,
-        "liskovSubstitution": true,
-        "interfaceSegregation": true,
-        "dependencyInversion": true
-      }
+      "maxMethodComplexity": 10
     },
-    
+
     "dry": {
-      "// Minimum lines to consider as duplication": "",
       "minLineThreshold": 5,
-      "// Similarity threshold (0-1)": "",
       "similarityThreshold": 0.85,
-      "// Check for duplicate imports": "",
       "checkImports": true,
-      "// Check for duplicate string literals": "",
       "checkStrings": true
     },
-    
-    "security": {
-      "// Authentication wrapper patterns to look for": "",
-      "authPatterns": [
-        "withAuth",
-        "requireAuth",
-        "isAuthenticated",
-        "useAuth"
-      ],
-      "// Admin authentication patterns": "",
-      "adminPatterns": [
-        "withAdminAuth",
-        "requireAdmin",
-        "isAdmin"
-      ],
-      "// Rate limiting patterns": "",
-      "rateLimitPatterns": [
-        "rateLimit",
-        "withRateLimit",
-        "throttle"
-      ]
-    },
-    
-    "component": {
-      "// Check for error boundaries": "",
-      "checkErrorBoundaries": true,
-      "// Check for prop type validation": "",
-      "checkPropTypes": true,
-      "// Maximum component complexity": "",
-      "maxComplexity": 15,
-      "// Maximum nesting depth": "",
-      "maxNesting": 4
-    },
-    
-    "data-access": {
-      "// Security patterns to look for": "",
-      "securityPatterns": {
-        "parameterized": ["?", "$1", ":param"],
-        "sanitized": ["sanitize", "escape", "clean"]
-      },
-      "// Performance thresholds": "",
-      "performanceThresholds": {
-        "maxJoins": 5,
-        "warnOnSelectStar": true
-      }
+
+    "react": {
+      "maxComponentComplexity": 15
     }
   },
-  
-  "// Output Configuration": "",
-  "// Available formats: html, json, csv": "",
-  "outputFormats": ["html", "json"],
-  "outputDirectory": "./audit-reports",
-  
-  "// Report Theme (for HTML reports)": "",
-  "reportTheme": {
-    "primaryColor": "#007bff",
-    "criticalColor": "#dc3545",
-    "warningColor": "#ffc107",
-    "suggestionColor": "#17a2b8"
-  },
-  
-  "// Behavior": "",
-  "// Minimum severity level to report: critical, severe, high": "",
+
   "minSeverity": "high",
-  "// Exit with error code if critical issues found": "",
-  "failOnCritical": false,
-  "// Show detailed progress during analysis": "",
-  "verbose": false,
-  "// Show progress indicators": "",
-  "showProgress": true,
-  
-  "// Performance": "",
-  "// Run analyzers in parallel": "",
-  "parallel": true,
-  "// Maximum concurrent operations": "",
-  "maxConcurrency": 4,
-  
-  "// Quality Thresholds": "",
-  "// Set to undefined to disable threshold": "",
+
   "thresholds": {
-    "// Maximum allowed critical issues": "",
-    "maxCritical": 0,
-    "// Maximum allowed warnings": "",
-    "maxWarnings": 50,
-    "// Minimum required health score (0-100)": "",
-    "minHealthScore": 80,
-    "// Maximum allowed complexity per file": "",
-    "maxComplexity": 10,
-    "// Maximum allowed code duplication instances": "",
-    "maxDuplication": 5
-  },
-  
-  "// Custom Patterns": "",
-  "// Additional patterns for file discovery": "",
-  "customPatterns": {
-    "// Component file patterns": "",
-    "components": [
-      "**/*Component.{ts,tsx,js,jsx}",
-      "**/*Page.{ts,tsx,js,jsx}",
-      "**/*View.{ts,tsx,js,jsx}"
-    ],
-    "// API endpoint patterns": "",
-    "endpoints": [
-      "**/api/**/*.{ts,js}",
-      "**/routes/**/*.{ts,js}",
-      "**/controllers/**/*.{ts,js}"
-    ],
-    "// Test file patterns": "",
-    "tests": [
-      "**/*.test.{ts,tsx,js,jsx}",
-      "**/*.spec.{ts,tsx,js,jsx}",
-      "**/__tests__/**"
-    ]
-  },
-  
-  "// CI/CD Integration": "",
-  "integrations": {
-    "ci": {
-      "// CI provider: github, gitlab, jenkins, circleci": "",
-      "provider": "github",
-      "// Fail the build if thresholds are exceeded": "",
-      "failOnThreshold": true,
-      "// Comment on pull requests with audit results": "",
-      "commentOnPR": true
-    }
+    "minHealthScore": 80
   }
-}
+}

package/examples/.code-auditor.json

@@ -1,73 +1,30 @@
 {
-  "projectRoot": ".",
-  "reportTitle": "Code Quality Audit",
-  
   "includePaths": [
     "src/**/*.{ts,tsx,js,jsx}",
     "lib/**/*.{ts,tsx}"
   ],
-  
+
   "excludePaths": [
     "**/node_modules/**",
     "**/dist/**",
     "**/*.test.{ts,tsx}",
     "**/*.spec.{ts,tsx}"
   ],
-  
+
   "analyzerConfigs": {
     "solid": {
-      "// Component responsibility thresholds": "Adjust based on your architecture",
-      "componentResponsibilityThresholds": {
-        "default": 2,
-        "layout": 2,      
-        "dashboard": 3,   
-        "table": 2       
-      },
-      
-      "// Class responsibility thresholds": "Service layers might need more responsibilities",
-      "classResponsibilityThresholds": {
-        "default": 2,
-        "repository": 2,  
-        "service": 3     
-      },
-      
-      "// Control flow thresholds": "Adjust if you have complex business logic",
-      "ifElseChainThreshold": 4,
-      "switchCaseThreshold": 6,
-      
-      "// Size thresholds": "Larger values for utility classes",
-      "classMethodThreshold": 10,
-      "interfaceMemberThreshold": 15
+      "classMethodsThreshold": 10,
+      "maxInterfaceMembers": 15
     },
-    
+
     "dry": {
       "minLineThreshold": 10,
       "similarityThreshold": 0.90,
-      "checkImports": true,
-      "unusedImportsConfig": {
-        "checkLevel": "function",
-        "ignorePatterns": ["React", "^_"]
-      }
-    },
-    
-    "security": {
-      "checkAuthentication": true,
-      "checkAuthorization": true,
-      "checkRateLimiting": true,
-      "allowedUnprotectedRoutes": [
-        "/api/health",
-        "/api/version",
-        "/api/public/*"
-      ]
+      "checkImports": true
     }
   },
-  
-  "outputFormats": ["html"],
-  "outputDirectory": "./audit-reports",
-  
+
   "thresholds": {
-    "maxCritical": 0,
-    "maxWarnings": 30,
     "minHealthScore": 80
   }
-}
+}

package/examples/nextjs.auditrc.json

@@ -1,7 +1,4 @@
 {
-  "projectRoot": ".",
-  "reportTitle": "Next.js Project Audit",
-  
   "includePaths": [
     "app/**/*.{ts,tsx,js,jsx}",
     "pages/**/*.{ts,tsx,js,jsx}",
@@ -9,7 +6,7 @@
     "lib/**/*.{ts,tsx,js,jsx}",
     "utils/**/*.{ts,tsx,js,jsx}"
   ],
-  
+
   "excludePaths": [
     "**/node_modules/**",
     "**/.next/**",
@@ -20,38 +17,14 @@
     "**/__tests__/**",
     "**/coverage/**"
   ],
-  
-  "analyzerConfig": {
-    "component": {
-      "checkErrorBoundaries": true,
-      "checkPropTypes": false,
-      "maxComplexity": 15
-    },
-    "security": {
-      "authPatterns": ["withAuth", "useSession", "getServerSession"],
-      "publicPatterns": ["public", "skipAuth"]
+
+  "analyzerConfigs": {
+    "react": {
+      "maxComponentComplexity": 15
     }
   },
-  
-  "customPatterns": {
-    "components": [
-      "**/app/**/page.{ts,tsx}",
-      "**/app/**/layout.{ts,tsx}",
-      "**/pages/**/*.{ts,tsx}",
-      "**/components/**/*.{ts,tsx}"
-    ],
-    "endpoints": [
-      "**/app/api/**/route.{ts,js}",
-      "**/pages/api/**/*.{ts,js}"
-    ]
-  },
-  
-  "outputFormats": ["html"],
-  "outputDirectory": "./audit-reports",
-  
+
   "thresholds": {
-    "maxCritical": 0,
-    "maxWarnings": 20,
     "minHealthScore": 85
   }
-}
+}

package/examples/node-api.auditrc.json

@@ -1,7 +1,4 @@
 {
-  "projectRoot": ".",
-  "reportTitle": "Node.js API Audit",
-  
   "includePaths": [
     "src/**/*.{ts,js}",
     "lib/**/*.{ts,js}",
@@ -11,7 +8,7 @@
     "services/**/*.{ts,js}",
     "models/**/*.{ts,js}"
   ],
-  
+
   "excludePaths": [
     "**/node_modules/**",
     "**/dist/**",
@@ -21,55 +18,18 @@
     "**/__tests__/**",
     "**/coverage/**"
   ],
-  
-  "analyzerConfig": {
-    "security": {
-      "authPatterns": ["authenticate", "authorize", "requireAuth", "passport"],
-      "rateLimitPatterns": ["rateLimit", "throttle", "limiter"],
-      "securityHeaders": [
-        "helmet",
-        "cors",
-        "Content-Security-Policy"
-      ]
-    },
-    "data-access": {
-      "databasePatterns": {
-        "postgres": ["pg", "postgres"],
-        "mysql": ["mysql", "mysql2"],
-        "mongodb": ["mongodb", "mongoose"]
-      },
-      "securityPatterns": {
-        "parameterized": ["?", "$1", ":id"],
-        "sanitized": ["sanitize", "escape", "validator"]
-      },
-      "performanceThresholds": {
-        "maxJoins": 4,
-        "warnOnSelectStar": true
-      }
-    },
+
+  "analyzerConfigs": {
     "solid": {
       "maxMethodsPerClass": 12,
       "maxLinesPerMethod": 60,
       "maxParametersPerMethod": 5
     }
   },
-  
-  "outputFormats": ["json", "html"],
-  "outputDirectory": "./audit-reports",
-  
+
   "minSeverity": "severe",
-  "failOnCritical": true,
-  
+
   "thresholds": {
-    "maxCritical": 0,
-    "maxWarnings": 10,
     "minHealthScore": 90
-  },
-  
-  "integrations": {
-    "ci": {
-      "provider": "github",
-      "failOnThreshold": true
-    }
   }
-}
+}

package/examples/react.auditrc.json

@@ -1,11 +1,8 @@
 {
-  "projectRoot": ".",
-  "reportTitle": "React Project Audit",
-  
   "includePaths": [
     "src/**/*.{ts,tsx,js,jsx}"
   ],
-  
+
   "excludePaths": [
     "**/node_modules/**",
     "**/build/**",
@@ -16,18 +13,10 @@
     "**/coverage/**",
     "**/*.stories.{ts,tsx,js,jsx}"
   ],
-  
-  "analyzerConfig": {
-    "component": {
-      "checkErrorBoundaries": true,
-      "checkPropTypes": true,
-      "maxComplexity": 12,
-      "frameworkPatterns": {
-        "react": {
-          "hooks": ["use*"],
-          "context": ["*Context", "*Provider"]
-        }
-      }
+
+  "analyzerConfigs": {
+    "react": {
+      "maxComponentComplexity": 12
     },
     "solid": {
       "maxMethodsPerClass": 8,
@@ -38,16 +27,10 @@
       "checkImports": true
     }
   },
-  
-  "outputFormats": ["html", "json"],
-  "outputDirectory": "./audit-reports",
-  
+
   "minSeverity": "severe",
-  "showProgress": true,
-  
+
   "thresholds": {
-    "maxCritical": 0,
-    "maxWarnings": 30,
     "minHealthScore": 75
   }
-}
+}

package/examples/tolerant-solid.auditrc.json

@@ -1,11 +1,8 @@
 {
-  "projectRoot": ".",
-  "reportTitle": "Project Audit with Relaxed SOLID Tolerances",
-  
   "includePaths": [
     "src/**/*.{ts,tsx,js,jsx}"
   ],
-  
+
   "excludePaths": [
     "**/node_modules/**",
     "**/build/**",
@@ -13,53 +10,24 @@
     "**/*.test.{ts,tsx,js,jsx}",
     "**/*.spec.{ts,tsx,js,jsx}"
   ],
-  
+
   "analyzerConfigs": {
     "solid": {
-      "componentResponsibilityThresholds": {
-        "default": 2,
-        "layout": 2,      
-        "dashboard": 4,   
-        "table": 3,      
-        "form": 3        
-      },
-      
-      "classResponsibilityThresholds": {
-        "default": 2,
-        "repository": 2,  
-        "service": 3,     
-        "controller": 3,  
-        "model": 3        
-      },
-      
-      "ifElseChainThreshold": 5,         
-      "switchCaseThreshold": 7,          
-      "classMethodThreshold": 12,        
-      "interfaceMemberThreshold": 20,    
-      "dependencyInjectionLimit": 6      
+      "classMethodsThreshold": 40,
+      "maxInterfaceMembers": 50,
+      "maxMethodComplexity": 100
     },
-    
+
     "dry": {
-      "minLineThreshold": 15,            
-      "similarityThreshold": 0.85,       
-      "checkImports": true,
-      "unusedImportsConfig": {
-        "checkLevel": "function",
-        "includeTypeOnlyImports": false,
-        "ignorePatterns": ["React", "^_", "test.*"]
-      }
+      "minLineThreshold": 15,
+      "similarityThreshold": 0.85,
+      "checkImports": true
     }
   },
-  
-  "outputFormats": ["html", "json"],
-  "outputDirectory": "./audit-reports",
-  
+
   "minSeverity": "severe",
-  "showProgress": true,
-  
+
   "thresholds": {
-    "maxCritical": 5,
-    "maxWarnings": 50,
     "minHealthScore": 70
   }
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-auditor-mcp",
-  "version": "5.0.2",
+  "version": "5.3.3",
   "description": "Enforces architectural invariants and code quality rules inside your AI agent's edit loop.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -12,11 +12,12 @@
     "code-auditor-daemon": "dist/daemon/main.js"
   },
   "scripts": {
-    "build": "pnpm run build:version && tsc && pnpm run build:grammars && pnpm run download:natives && pnpm run build:skills && pnpm run build:manifest",
+    "build": "pnpm run build:version && pnpm run build:hooklog && tsc && pnpm run build:grammars && pnpm run build:skills && pnpm run build:manifest-version && pnpm run build:manifest",
     "build:version": "node scripts/write-version.mjs",
-    "download:natives": "bash scripts/download-natives.sh",
+    "build:hooklog": "node scripts/write-hook-log-path.mjs",
     "build:grammars": "mkdir -p dist/grammars && cp node_modules/tree-sitter-typescript/tree-sitter-typescript.wasm node_modules/tree-sitter-typescript/tree-sitter-tsx.wasm node_modules/tree-sitter-go/tree-sitter-go.wasm node_modules/tree-sitter-css/tree-sitter-css.wasm grammars/tree-sitter-scss.wasm dist/grammars/",
     "build:skills": "node scripts/build-skills.mjs",
+    "build:manifest-version": "node scripts/write-manifest-version.mjs",
     "build:manifest": "node scripts/build-manifest.mjs",
     "watch": "tsc --watch",
     "dev": "tsx src/cli.ts",
@@ -32,10 +33,13 @@
     "test": "vitest run",
     "test:integration": "vitest run --config vitest.integration.config.ts",
     "bench": "tsx bench/verify.ts",
+    "bench:gate-timing": "node bench/gate-timing.mjs",
     "test:watch": "vitest watch",
     "verify:disk-space": "node scripts/verify-disk-space.mjs",
     "verify:types": "tsc --noEmit",
     "verify:dist-fresh": "node scripts/verify-dist-fresh.mjs",
+    "verify:hook-log-path": "node scripts/verify-hook-log-path.mjs",
+    "verify:version-fresh": "node scripts/verify-version-fresh.mjs",
     "verify:clean-install": "bash scripts/verify-clean-install.sh",
     "verify:dist": "npm pack --silent && bash scripts/verify-dist.sh && rm -f code-auditor-mcp-*.tgz",
     "verify:self": "node scripts/verify-self.mjs && node scripts/verify-languages.mjs",
@@ -45,7 +49,7 @@
     "verify:gate-budget": "node scripts/verify-gate-budget.mjs",
     "verify:recall-value-drift": "tsx scripts/verify-recall-value-drift.ts",
     "verify:extraction-completeness": "tsx scripts/verify-extraction-completeness.ts",
-    "verify:oracle-shortfalls": "tsx scripts/verify-oracle-shortfalls.ts",
+    "verify:recall-cases": "tsx scripts/verify-recall-cases.ts",
     "verify:close": "node scripts/verify-close.mjs"
   },
   "keywords": [
@@ -122,7 +126,6 @@
   "files": [
     "dist/**/*",
     "dist/grammars/",
-    "dist/native/",
     "plugin/**/*",
     ".claude-plugin/**/*",
     "examples/**/*",

package/plugin/.claude-plugin/manifest.json

@@ -1,16 +1,17 @@
 {
-  "version": "5.0.2",
+  "version": "5.3.3",
   "files": {
-    ".claude-plugin/plugin.json": "1b950b987f07b25990f29959dc696fd1323dc4dfdda367e2c21fb32638e083be",
+    ".claude-plugin/plugin.json": "ba020a5103419ee7c4d71dfda7f2e49bc69b0f863ee8d64d9df2e0a58c8881de",
     "README.md": "6e51516ead6c7d0b4e77629e071e139b899d30a47838e8721c0d534eb733ad45",
-    "hooks/hooks.json": "28c4d7e87f1bb0daae8d9c714a196c39809039509568cf89a67c0377090f7211",
-    "scripts/hook-audit.sh": "25353d88a020d71586bb52ec6800438ab1f500e987c639837be52529fe2dc5fe",
-    "scripts/hook-common.sh": "85fd91c7a3817c01557383aadeff578696a9400698806d2d310ffd1caa954e06",
-    "scripts/hook-drift-check.sh": "fdf1f8098d9dda8911daedfd4b038c310c8383da57938a6737131cd33cb9492e",
-    "scripts/hook-self-audit.sh": "1a19f4ddec4cf66d9feb97999e70eb664817b0d6dd811f498d3cdef2f26d63b2",
-    "scripts/hook-warm.sh": "3d0fa8d811a26eda29c1a4dcbd88e6861eef93425355c87d6fe72356b3e7b5b3",
+    "hooks/hooks.json": "ad0f827dbfb8ff4b633d2138d8ff2ed60bec85fa7b48ad1235dfaefb20a01187",
+    "scripts/hook-audit.sh": "d5192a31e770d4bfbe52c48c08b445fb75ebb17eb8cfb39bb8d125cd9e2f456d",
+    "scripts/hook-common.sh": "496d5a35f9813cc1e8d315c4bc4282117f185a53ffbe8f39b31d22925948bf29",
+    "scripts/hook-drift-check.sh": "4e6ed8e4e33d0765a5ed6adfda6fb3ecec5750d836632aa4ee6d7a6acce69665",
+    "scripts/hook-log-path.sh": "4ac27ac22dcb29fd82cbd9a936b3da7115c5182386a0e3290ed5ac9e529bc132",
+    "scripts/hook-self-audit.sh": "16bb573c0f12bff083af9028d512cd5c55a7cbf004c09409926153d12894e82a",
+    "scripts/hook-warm.sh": "22d750e8e36164920515c8370f02dd48f9f09f26bfe4a21e67de91f45b5ffef9",
     "skills/code-auditor/SKILL-RULE-KINDS.md": "be1bbe1b56b19dc112c2657c1f5984f6f704b2ac9c1c0f78a561a58b110d508a",
     "skills/code-auditor/SKILL-SEARCH.md": "95d2df4474995bc5b18e14cc55ac55fb828024541463f109239567e2aa5ab7b0",
-    "skills/code-auditor/SKILL.md": "a66b4849ffa98adac0817e6ef0712e6b5e1fa292ceaa094717795aeb7299b9a6"
+    "skills/code-auditor/SKILL.md": "6bc5fc6c1a31cffc3e94978823f6c6f4394b8d832c3a9ac3f134a03e32fe69fa"
   }
 }

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "code-auditor",
   "description": "Diff-scoped code quality auditing on every edit. Indexes your codebase, enforces invariants, and feeds violations back to the agent so fixes happen inline.",
-  "version": "5.0.2",
+  "version": "5.3.3",
   "author": {
     "name": "Ben Hammond",
     "email": "ben@benhammond.tech"

package/plugin/hooks/hooks.json

@@ -6,11 +6,11 @@
         "hooks": [
           {
             "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}\"/scripts/hook-warm.sh"
+            "command": "if [ -z \"${CLAUDE_PLUGIN_ROOT}\" ]; then dir=\"${XDG_CACHE_HOME:-$HOME/.cache}/code-auditor/logs\"; mkdir -p \"$dir\" 2>/dev/null || true; msg=\"[code-auditor] HOOK NOT RUNNING: CLAUDE_PLUGIN_ROOT is unset — could not locate the plugin; the warm-up is not running.\"; echo \"[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ${msg}\" >> \"$dir/hook.log\" 2>/dev/null || true; echo \"${msg}\" >&2; exit 1; fi; \"${CLAUDE_PLUGIN_ROOT}\"/scripts/hook-warm.sh"
           },
           {
             "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}\"/scripts/hook-drift-check.sh"
+            "command": "if [ -z \"${CLAUDE_PLUGIN_ROOT}\" ]; then dir=\"${XDG_CACHE_HOME:-$HOME/.cache}/code-auditor/logs\"; mkdir -p \"$dir\" 2>/dev/null || true; msg=\"[code-auditor] HOOK NOT RUNNING: CLAUDE_PLUGIN_ROOT is unset — could not locate the plugin; the drift check is not running.\"; echo \"[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ${msg}\" >> \"$dir/hook.log\" 2>/dev/null || true; echo \"${msg}\" >&2; exit 1; fi; \"${CLAUDE_PLUGIN_ROOT}\"/scripts/hook-drift-check.sh"
           }
         ]
       }
@@ -21,11 +21,11 @@
         "hooks": [
           {
             "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}\"/scripts/hook-audit.sh"
+            "command": "if [ -z \"${CLAUDE_PLUGIN_ROOT}\" ]; then dir=\"${XDG_CACHE_HOME:-$HOME/.cache}/code-auditor/logs\"; mkdir -p \"$dir\" 2>/dev/null || true; msg=\"[code-auditor] HOOK NOT RUNNING: CLAUDE_PLUGIN_ROOT is unset — could not locate the plugin; the audit is not running.\"; echo \"[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ${msg}\" >> \"$dir/hook.log\" 2>/dev/null || true; echo \"${msg}\" >&2; exit 1; fi; \"${CLAUDE_PLUGIN_ROOT}\"/scripts/hook-audit.sh"
           },
           {
             "type": "command",
-            "command": "\"${CLAUDE_PLUGIN_ROOT}\"/scripts/hook-self-audit.sh"
+            "command": "if [ -z \"${CLAUDE_PLUGIN_ROOT}\" ]; then dir=\"${XDG_CACHE_HOME:-$HOME/.cache}/code-auditor/logs\"; mkdir -p \"$dir\" 2>/dev/null || true; msg=\"[code-auditor] HOOK NOT RUNNING: CLAUDE_PLUGIN_ROOT is unset — could not locate the plugin; the self-audit is not running.\"; echo \"[$(date -u +%Y-%m-%dT%H:%M:%SZ)] ${msg}\" >> \"$dir/hook.log\" 2>/dev/null || true; echo \"${msg}\" >&2; exit 1; fi; \"${CLAUDE_PLUGIN_ROOT}\"/scripts/hook-self-audit.sh"
           }
         ]
       }