cortexhawk 3.1.0

package/hooks/commit-guard.sh

@@ -0,0 +1,71 @@
+#!/bin/bash
+# commit-guard — Validates commit format and checks for staged secrets
+# Hook type: PreToolUse (Bash)
+
+# Read command from stdin JSON (Claude Code hook protocol)
+if [ -n "$CORTEXHAWK_COMMAND" ]; then
+  CMD="$CORTEXHAWK_COMMAND"
+else
+  INPUT=$(cat)
+  CMD=$(printf '%s' "$INPUT" | grep -o '"command" *: *"[^"]*"' | head -1 | sed 's/.*: *"//;s/"$//')
+fi
+
+if [[ -z "$CMD" ]]; then
+  exit 0
+fi
+
+# Only check git commit commands
+if ! echo "$CMD" | grep -qE 'git\s+commit'; then
+  exit 0
+fi
+
+# Extract commit message from -m flag
+COMMIT_MSG=$(echo "$CMD" | grep -oP '(?<=-m\s["\x27]).*?(?=["\x27])' 2>/dev/null)
+if [[ -z "$COMMIT_MSG" ]]; then
+  COMMIT_MSG=$(echo "$CMD" | grep -oP '(?<=-m\s)(\S+)' 2>/dev/null)
+fi
+
+# Load git workflow config — skip conventional check if freeform
+CONF_FILE="$(git rev-parse --show-toplevel 2>/dev/null)/.claude/git-workflow.conf"
+_COMMIT_CONVENTION="conventional"
+if [[ -f "$CONF_FILE" ]]; then
+  _COMMIT_CONVENTION=$(grep '^COMMIT_CONVENTION=' "$CONF_FILE" | cut -d= -f2)
+fi
+
+# Validate conventional commit format
+if [[ -n "$COMMIT_MSG" ]] && [[ "$_COMMIT_CONVENTION" != "freeform" ]]; then
+  VALID_TYPES="feat|fix|docs|style|refactor|perf|test|build|ci|chore|revert"
+  if ! echo "$COMMIT_MSG" | grep -qE "^(${VALID_TYPES})(\(.+\))?!?:\s.+"; then
+    echo "commit-guard: Non-conventional commit format detected"
+    echo "Expected: type(scope): description"
+    echo "Types: $VALID_TYPES"
+    echo "Got: $COMMIT_MSG"
+    # Warning only — don't block
+  fi
+fi
+
+# Check staged files for secrets
+STAGED_FILES=$(git diff --cached --name-only 2>/dev/null)
+if [[ -n "$STAGED_FILES" ]]; then
+  SECRET_PATTERNS='(PRIVATE.KEY|AWS_SECRET|api_key|password|secret)\s*[=:]\s*["\x27][^\s"'\'']{8,}'
+
+  while IFS= read -r file; do
+    if [[ -f "$file" ]]; then
+      MATCHES=$(grep -cEi "$SECRET_PATTERNS" "$file" 2>/dev/null || echo 0)
+      if [[ "$MATCHES" -gt 0 ]]; then
+        echo "BLOCKED: Potential secret detected in staged file: $file" >&2
+        echo "Review the file and remove secrets before committing" >&2
+        exit 2
+      fi
+    fi
+  done <<< "$STAGED_FILES"
+
+  # Warn if .env files are staged
+  if echo "$STAGED_FILES" | grep -qE '\.env($|\.)'; then
+    echo "BLOCKED: .env file staged for commit" >&2
+    echo "Remove with: git reset HEAD <file>" >&2
+    exit 2
+  fi
+fi
+
+exit 0

package/hooks/compose.yml

@@ -0,0 +1,47 @@
+# CortexHawk Hook Compositions
+# Defines hook pipelines per event type. Converted to settings.json at install.
+#
+# Format:
+#   composition-name:
+#     event: SessionStart|PreToolUse|PostToolUse|SessionEnd
+#     matcher: tool pattern (e.g., "Read|Edit|Write", "Bash", "*")
+#     hooks:
+#       - hook-name (matches .sh file in hooks/)
+#
+# To add a hook: add its name to the hooks list
+# To remove a hook: delete or comment the line
+
+compositions:
+  session-init:
+    event: SessionStart
+    matcher: "*"
+    hooks:
+      - session-start
+
+  pre-file-access:
+    event: PreToolUse
+    matcher: "Read|Edit|Write"
+    hooks:
+      - file-guard
+
+  pre-command:
+    event: PreToolUse
+    matcher: Bash
+    hooks:
+      - branch-guard
+      - commit-guard
+
+  post-edit:
+    event: PostToolUse
+    matcher: "Write|Edit"
+    hooks:
+      - self-review
+      - dependency-check
+      - test-reminder
+      - agent-analytics
+
+  session-cleanup:
+    event: SessionEnd
+    matcher: "*"
+    hooks:
+      - session-telemetry

package/hooks/dependency-check.sh

@@ -0,0 +1,56 @@
+#!/bin/bash
+# dependency-check — Alerts when dependency files are modified
+# Hook type: PostToolUse (Write|Edit)
+
+# Read file_path from stdin JSON (Claude Code hook protocol)
+if [ -n "$CORTEXHAWK_FILE_PATH" ]; then
+  MODIFIED_FILE="$CORTEXHAWK_FILE_PATH"
+else
+  INPUT=$(cat)
+  MODIFIED_FILE=$(printf '%s' "$INPUT" | grep -o '"file_path" *: *"[^"]*"' | head -1 | sed 's/.*: *"//;s/"$//')
+fi
+
+if [[ -z "$MODIFIED_FILE" ]]; then
+  exit 0
+fi
+
+BASENAME=$(basename "$MODIFIED_FILE")
+
+case "$BASENAME" in
+  package.json)
+    echo "Dependencies modified: $BASENAME"
+    echo "- Run 'npm install' to sync node_modules"
+    echo "- Run 'npm audit' to check for vulnerabilities"
+    echo "- Commit package-lock.json alongside package.json"
+    ;;
+  requirements.txt|requirements-*.txt)
+    echo "Dependencies modified: $BASENAME"
+    echo "- Run 'pip install -r $BASENAME' to sync"
+    echo "- Run 'pip audit' or 'safety check' for vulnerabilities"
+    echo "- Pin exact versions for reproducible builds"
+    ;;
+  pyproject.toml)
+    if grep -q '\[project.dependencies\]\|dependencies\s*=' "$MODIFIED_FILE" 2>/dev/null; then
+      echo "Dependencies modified: $BASENAME"
+      echo "- Run 'pip install -e .' or 'poetry install' to sync"
+      echo "- Lock file should be committed too"
+    fi
+    ;;
+  Cargo.toml)
+    echo "Dependencies modified: $BASENAME"
+    echo "- Run 'cargo build' to sync and generate Cargo.lock"
+    echo "- Run 'cargo audit' for vulnerability check"
+    ;;
+  go.mod)
+    echo "Dependencies modified: $BASENAME"
+    echo "- Run 'go mod tidy' to sync"
+    echo "- Commit go.sum alongside go.mod"
+    ;;
+  Gemfile)
+    echo "Dependencies modified: $BASENAME"
+    echo "- Run 'bundle install' to sync"
+    echo "- Commit Gemfile.lock alongside Gemfile"
+    ;;
+esac
+
+exit 0

package/hooks/file-guard.sh

@@ -0,0 +1,69 @@
+#!/bin/bash
+# file-guard — Blocks Claude from accessing sensitive files
+# Hook type: PreToolUse (Read|Edit|Write)
+
+BLOCKED_PATTERNS=(
+  ".env"
+  ".env.*"
+  "*.pem"
+  "*.key"
+  "*credentials*"
+  "*secret*"
+  "id_rsa"
+  "id_ed25519"
+  ".ssh/*"
+  "*.p12"
+  "*.pfx"
+  "*.keystore"
+  "docker-compose*.yml"
+)
+
+# Read file_path from stdin JSON (Claude Code hook protocol)
+if [ -n "$CORTEXHAWK_FILE_PATH" ]; then
+  FILE_ARG="$CORTEXHAWK_FILE_PATH"
+else
+  INPUT=$(cat)
+  FILE_ARG=$(printf '%s' "$INPUT" | grep -o '"file_path" *: *"[^"]*"' | head -1 | sed 's/.*: *"//;s/"$//')
+fi
+
+if [[ -z "$FILE_ARG" ]]; then
+  exit 0
+fi
+
+# Normalize path — resolve symlinks and relative paths
+if command -v realpath &>/dev/null; then
+  RESOLVED=$(realpath -m "$FILE_ARG" 2>/dev/null || echo "$FILE_ARG")
+else
+  RESOLVED=$(cd "$(dirname "$FILE_ARG")" 2>/dev/null && echo "$(pwd)/$(basename "$FILE_ARG")" || echo "$FILE_ARG")
+fi
+
+# Extract just the filename for pattern matching
+BASENAME=$(basename "$RESOLVED")
+# Also check against the full resolved path
+RELPATH="$RESOLVED"
+
+for pattern in "${BLOCKED_PATTERNS[@]}"; do
+  if [[ "$BASENAME" == $pattern ]] || [[ "$RELPATH" == *$pattern ]]; then
+    echo "BLOCKED: Access to '$FILE_ARG' denied by file-guard" >&2
+    echo "Resolved path: $RESOLVED" >&2
+    echo "Matched pattern: '$pattern'" >&2
+    exit 2
+  fi
+done
+
+# Block symlinks pointing to sensitive files
+if [[ -L "$FILE_ARG" ]]; then
+  LINK_TARGET=$(readlink -f "$FILE_ARG" 2>/dev/null)
+  if [[ -n "$LINK_TARGET" ]]; then
+    LINK_BASENAME=$(basename "$LINK_TARGET")
+    for pattern in "${BLOCKED_PATTERNS[@]}"; do
+      if [[ "$LINK_BASENAME" == $pattern ]]; then
+        echo "BLOCKED: Symlink '$FILE_ARG' -> '$LINK_TARGET' denied by file-guard" >&2
+        echo "Matched pattern: '$pattern'" >&2
+        exit 2
+      fi
+    done
+  fi
+fi
+
+exit 0

package/hooks/hooks.json

@@ -0,0 +1,46 @@
+{
+  "hooks": [
+    {
+      "name": "session-start",
+      "type": "SessionStart",
+      "script": "hooks/session-start.sh",
+      "description": "Injects project context on startup"
+    },
+    {
+      "name": "file-guard",
+      "type": "PreToolUse",
+      "script": "hooks/file-guard.sh",
+      "description": "Blocks access to sensitive files (.env, keys, secrets)"
+    },
+    {
+      "name": "self-review",
+      "type": "PostToolUse",
+      "script": "hooks/self-review.sh",
+      "description": "Auto-review after code edits"
+    },
+    {
+      "name": "branch-guard",
+      "type": "PreToolUse",
+      "script": "hooks/branch-guard.sh",
+      "description": "Prevents direct push to protected branches"
+    },
+    {
+      "name": "dependency-check",
+      "type": "PostToolUse",
+      "script": "hooks/dependency-check.sh",
+      "description": "Alerts when dependency files are modified"
+    },
+    {
+      "name": "commit-guard",
+      "type": "PreToolUse",
+      "script": "hooks/commit-guard.sh",
+      "description": "Validates commit format and checks for staged secrets"
+    },
+    {
+      "name": "test-reminder",
+      "type": "PostToolUse",
+      "script": "hooks/test-reminder.sh",
+      "description": "Reminds to update tests when source files change"
+    }
+  ]
+}

package/hooks/self-review.sh

@@ -0,0 +1,71 @@
+#!/bin/bash
+# self-review — Auto-review after file edits
+# Hook type: PostToolUse (Write|Edit)
+
+# Read file_path from stdin JSON (Claude Code hook protocol)
+if [ -n "$CORTEXHAWK_FILE_PATH" ]; then
+  MODIFIED_FILE="$CORTEXHAWK_FILE_PATH"
+else
+  INPUT=$(cat)
+  MODIFIED_FILE=$(printf '%s' "$INPUT" | grep -o '"file_path" *: *"[^"]*"' | head -1 | sed 's/.*: *"//;s/"$//')
+fi
+
+if [[ -z "$MODIFIED_FILE" ]] || [[ ! -f "$MODIFIED_FILE" ]]; then
+  exit 0
+fi
+
+# Only review code files
+case "$MODIFIED_FILE" in
+  *.py|*.js|*.ts|*.jsx|*.tsx|*.go|*.rs|*.java|*.rb|*.sh)
+    ;;
+  *)
+    exit 0
+    ;;
+esac
+
+ISSUES=""
+
+# Check for TODO/FIXME
+TODO_COUNT=$(grep -cEi 'TODO|FIXME|HACK|XXX' "$MODIFIED_FILE" 2>/dev/null || echo 0)
+if [[ "$TODO_COUNT" -gt 0 ]]; then
+  ISSUES="${ISSUES}\n- $TODO_COUNT TODO/FIXME markers found"
+fi
+
+# Check for hardcoded secrets patterns
+SECRET_PATTERNS='(api[_-]?key|api[_-]?secret|password|passwd|token|secret[_-]?key)\s*[=:]\s*["\x27][^\s"'\'']{8,}'
+SECRET_COUNT=$(grep -cEi "$SECRET_PATTERNS" "$MODIFIED_FILE" 2>/dev/null || echo 0)
+if [[ "$SECRET_COUNT" -gt 0 ]]; then
+  ISSUES="${ISSUES}\n- ⚠️  $SECRET_COUNT potential hardcoded secret(s) detected"
+fi
+
+# Check for debug artifacts
+case "$MODIFIED_FILE" in
+  *.py)
+    DBG_COUNT=$(grep -cE '^\s*(print\(|breakpoint\(\)|import pdb|pdb\.set_trace)' "$MODIFIED_FILE" 2>/dev/null || echo 0)
+    ;;
+  *.js|*.ts|*.jsx|*.tsx)
+    DBG_COUNT=$(grep -cE '^\s*console\.(log|debug|warn|error)\(' "$MODIFIED_FILE" 2>/dev/null || echo 0)
+    ;;
+  *)
+    DBG_COUNT=0
+    ;;
+esac
+if [[ "$DBG_COUNT" -gt 0 ]]; then
+  ISSUES="${ISSUES}\n- $DBG_COUNT debug statement(s) found (console.log/print)"
+fi
+
+# Syntax check for shell scripts
+if [[ "$MODIFIED_FILE" == *.sh ]]; then
+  SYNTAX_ERR=$(bash -n "$MODIFIED_FILE" 2>&1)
+  if [[ $? -ne 0 ]]; then
+    ISSUES="${ISSUES}\n- Syntax error: $SYNTAX_ERR"
+  fi
+fi
+
+# Report
+if [[ -n "$ISSUES" ]]; then
+  echo "🔍 Self-review: $MODIFIED_FILE"
+  echo -e "$ISSUES"
+fi
+
+exit 0

package/hooks/session-start.sh

@@ -0,0 +1,132 @@
+#!/bin/bash
+# session-start — Inject project context on Claude Code startup
+# Hook type: SessionStart
+
+echo "CortexHawk loaded"
+echo ""
+
+# Write session start timestamp for telemetry
+if [ -d "docs/.metrics" ] || [ -d "docs" ]; then
+    mkdir -p "docs/.metrics"
+    date +%s > "docs/.metrics/.session-start"
+fi
+
+# Detect project type
+if [ -f "package.json" ]; then
+  echo "Project: Node.js/TypeScript"
+  DEP_COUNT=$(grep -c '"dependencies"' package.json 2>/dev/null || echo 0)
+  echo "Dependency groups: $DEP_COUNT"
+fi
+
+if [ -f "requirements.txt" ] || [ -f "pyproject.toml" ]; then
+  echo "Project: Python"
+fi
+
+if [ -f "Cargo.toml" ]; then
+  echo "Project: Rust"
+fi
+
+if [ -f "go.mod" ]; then
+  echo "Project: Go"
+fi
+
+if [ -f "docker-compose.yml" ] || [ -f "docker-compose.yaml" ]; then
+  echo "Docker: compose detected"
+fi
+
+if [ -f ".env.example" ] && [ ! -f ".env" ]; then
+  echo "Warning: .env missing — copy from .env.example"
+fi
+
+# Generate shared context for all agents
+if [ -d "docs/.context" ] && [ ! -L "docs/.context" ]; then
+    SHARED="docs/.context/_shared.md"
+
+    echo "# Shared Context" > "$SHARED"
+    echo "" >> "$SHARED"
+    echo "_Auto-generated by session-start. Do not edit manually._" >> "$SHARED"
+    echo "" >> "$SHARED"
+
+    # Backlog summary
+    if [ -f "docs/backlog.md" ]; then
+        ACTIVE=$(grep -c '| todo |' docs/backlog.md 2>/dev/null || echo 0)
+        DEFERRED=$(grep -c '| deferred |' docs/backlog.md 2>/dev/null || echo 0)
+        DONE=$(grep -c '| done |' docs/backlog.md 2>/dev/null || echo 0)
+        echo "## Backlog" >> "$SHARED"
+        echo "- Active: $ACTIVE | Deferred: $DEFERRED | Done: $DONE" >> "$SHARED"
+        # List active items
+        grep '| todo |' docs/backlog.md >> "$SHARED" 2>/dev/null || true
+        echo "" >> "$SHARED"
+    fi
+
+    # Recent commits
+    if git rev-parse --is-inside-work-tree > /dev/null 2>&1; then
+        echo "## Recent Commits" >> "$SHARED"
+        git log --oneline -5 2>/dev/null >> "$SHARED" || true
+        echo "" >> "$SHARED"
+    fi
+
+    # User context (persistent key-value pairs from /context set)
+    if [ -f "docs/.context/_user.md" ]; then
+        cat "docs/.context/_user.md" >> "$SHARED"
+        echo "" >> "$SHARED"
+    fi
+
+    # Active warnings
+    echo "## Warnings" >> "$SHARED"
+    WARNINGS=0
+    if [ -f ".env.example" ] && [ ! -f ".env" ]; then
+        echo "- .env missing — copy from .env.example" >> "$SHARED"
+        WARNINGS=$((WARNINGS + 1))
+    fi
+    if [ "$WARNINGS" -eq 0 ]; then
+        echo "- None" >> "$SHARED"
+    fi
+    echo "" >> "$SHARED"
+fi
+
+# Agent memory status
+if [ -d "docs/.context" ] && [ ! -L "docs/.context" ]; then
+    CONTEXT_COUNT=$(find docs/.context -maxdepth 1 -type f -name '*.md' 2>/dev/null | wc -l | tr -d ' ')
+    if [ "$CONTEXT_COUNT" -gt 0 ]; then
+        echo "Agent memory: $CONTEXT_COUNT context file(s)"
+    fi
+fi
+
+# Agent analytics summary
+if [ -d "docs/.metrics" ]; then
+    TODAY=$(date +"%Y-%m-%d")
+    if [ -f "docs/.metrics/$TODAY.jsonl" ]; then
+        INVOCATIONS=$(grep -c '"agent"' "docs/.metrics/$TODAY.jsonl" 2>/dev/null || echo 0)
+        echo "Agent analytics: $INVOCATIONS invocation(s) today"
+    fi
+fi
+
+# Skill suggestions — detect relevant but uninstalled skills
+CORTEXHAWK_SRC="$(cd "$(dirname "${BASH_SOURCE[0]:-$0}")/.." && pwd)"
+SKILL_DIR=".claude/skills"
+if [ -d "$SKILL_DIR" ]; then
+    MISSING=""
+    for skill_file in "$CORTEXHAWK_SRC"/skills/*/*/SKILL.md; do
+        [ -f "$skill_file" ] || continue
+        detect=$(sed -n '/^---$/,/^---$/{ /^detect:/{ s/^detect: //; p; } }' "$skill_file")
+        [ -z "$detect" ] && continue
+        skill_path="${skill_file#$CORTEXHAWK_SRC/skills/}"
+        skill_path="${skill_path%/SKILL.md}"
+        [ -f "$SKILL_DIR/$skill_path/SKILL.md" ] && continue
+        for marker in $detect; do
+            case "$marker" in
+                base) matched=true ;;
+                dir:*) [ -d "${marker#dir:}" ] && matched=true ;;
+                *:*) f="${marker%%:*}"; p="${marker#*:}"; [ -f "$f" ] && grep -qi "$p" "$f" 2>/dev/null && matched=true ;;
+                *) [ -f "$marker" ] && matched=true ;;
+            esac
+            [ "${matched:-}" = true ] && { MISSING="${MISSING:+$MISSING, }$skill_path"; break; }
+            unset matched
+        done
+    done
+    [ -n "$MISSING" ] && echo "Suggested skills: $MISSING"
+fi
+
+echo ""
+echo "Commands: /plan /build /test /review /ship /debug /scan /check /refactor /research /doc /bootstrap /tdd /optimize /migrate /monitor /api-gen /changelog /journal /brainstorm /simplify /deploy /export /backlog /pulse /map /learn /chain /task /ci /context"

package/hooks/session-telemetry.sh

@@ -0,0 +1,60 @@
+#!/bin/bash
+# session-telemetry — Generate session summary on exit
+# Hook type: SessionEnd
+
+# Read session_id from stdin JSON (Claude Code hook protocol)
+INPUT=$(cat)
+SESSION_ID=$(printf '%s' "$INPUT" | grep -o '"session_id" *: *"[^"]*"' | head -1 | sed 's/.*: *"//;s/"$//')
+SESSION_ID="${SESSION_ID:-unknown}"
+METRICS_DIR="docs/.metrics"
+TODAY=$(date +"%Y-%m-%d")
+JSONL_FILE="$METRICS_DIR/$TODAY.jsonl"
+START_FILE="$METRICS_DIR/.session-start"
+TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+
+mkdir -p "$METRICS_DIR"
+
+# Duration
+DURATION=0
+if [ -f "$START_FILE" ]; then
+    START_TS=$(cat "$START_FILE")
+    NOW_TS=$(date +%s)
+    DURATION=$((NOW_TS - START_TS))
+    [ "$DURATION" -lt 0 ] && DURATION=0
+fi
+
+# Agent invocations from today's JSONL
+AGENTS_INVOKED=0
+UNIQUE_AGENTS=""
+TOTAL_TOKENS=0
+if [ -f "$JSONL_FILE" ]; then
+    AGENTS_INVOKED=$(grep -c '"agent"' "$JSONL_FILE" 2>/dev/null || echo 0)
+    UNIQUE_AGENTS=$(grep -o '"agent":"[^"]*"' "$JSONL_FILE" 2>/dev/null \
+        | sort -u | sed 's/"agent":"//;s/"//' | paste -sd ',' - || echo "")
+    TOTAL_TOKENS=$(grep -o '"estimated_tokens":[0-9]*' "$JSONL_FILE" 2>/dev/null \
+        | sed 's/"estimated_tokens"://' | awk '{s+=$1} END {print s+0}')
+fi
+
+# Files modified (uncommitted + last commit)
+FILES_MODIFIED=0
+if git rev-parse --is-inside-work-tree > /dev/null 2>&1; then
+    UNCOMMITTED=$(git diff --name-only HEAD 2>/dev/null | wc -l | tr -d ' ')
+    UNTRACKED=$(git ls-files --others --exclude-standard 2>/dev/null | wc -l | tr -d ' ')
+    FILES_MODIFIED=$((UNCOMMITTED + UNTRACKED))
+fi
+
+# Escape strings for safe JSON
+json_escape() { printf '%s' "$1" | sed 's/\\/\\\\/g; s/"/\\"/g'; }
+
+SESSION_ESC=$(json_escape "$SESSION_ID")
+AGENTS_ESC=$(json_escape "$UNIQUE_AGENTS")
+
+# Append session summary to JSONL
+printf '{"type":"session","timestamp":"%s","session_id":"%s","duration_seconds":%d,"agents_invoked":%d,"unique_agents":"%s","total_estimated_tokens":%d,"files_modified":%d}\n' \
+    "$TIMESTAMP" "$SESSION_ESC" "$DURATION" "$AGENTS_INVOKED" "$AGENTS_ESC" "$TOTAL_TOKENS" "$FILES_MODIFIED" \
+    >> "$JSONL_FILE"
+
+# Cleanup start marker
+rm -f "$START_FILE"
+
+exit 0

package/hooks/test-reminder.sh

@@ -0,0 +1,75 @@
+#!/bin/bash
+# test-reminder — Reminds to update tests when source files change
+# Hook type: PostToolUse (Write|Edit)
+
+# Read file_path from stdin JSON (Claude Code hook protocol)
+if [ -n "$CORTEXHAWK_FILE_PATH" ]; then
+  MODIFIED_FILE="$CORTEXHAWK_FILE_PATH"
+else
+  INPUT=$(cat)
+  MODIFIED_FILE=$(printf '%s' "$INPUT" | grep -o '"file_path" *: *"[^"]*"' | head -1 | sed 's/.*: *"//;s/"$//')
+fi
+
+if [[ -z "$MODIFIED_FILE" ]] || [[ ! -f "$MODIFIED_FILE" ]]; then
+  exit 0
+fi
+
+# Skip non-code files
+case "$MODIFIED_FILE" in
+  *.py|*.js|*.ts|*.jsx|*.tsx|*.go|*.rs|*.java|*.rb)
+    ;;
+  *)
+    exit 0
+    ;;
+esac
+
+# Skip if already a test file
+if echo "$MODIFIED_FILE" | grep -qE '(test_|_test\.|\.test\.|\.spec\.|tests/|__tests__/)'; then
+  exit 0
+fi
+
+BASENAME=$(basename "$MODIFIED_FILE")
+FILENAME="${BASENAME%.*}"
+EXT="${BASENAME##*.}"
+DIR=$(dirname "$MODIFIED_FILE")
+
+# Build possible test file paths
+TEST_CANDIDATES=()
+
+case "$EXT" in
+  py)
+    TEST_CANDIDATES+=("${DIR}/test_${BASENAME}" "${DIR}/tests/test_${BASENAME}" "${DIR}/../tests/test_${BASENAME}")
+    ;;
+  js|ts|jsx|tsx)
+    TEST_CANDIDATES+=("${DIR}/${FILENAME}.test.${EXT}" "${DIR}/${FILENAME}.spec.${EXT}")
+    TEST_CANDIDATES+=("${DIR}/__tests__/${BASENAME}" "${DIR}/../__tests__/${BASENAME}")
+    ;;
+  go)
+    TEST_CANDIDATES+=("${DIR}/${FILENAME}_test.go")
+    ;;
+  rs)
+    # Rust tests are usually inline — skip
+    exit 0
+    ;;
+  java)
+    TEST_CANDIDATES+=("${DIR}/${FILENAME}Test.java" "${DIR}/../test/${BASENAME}")
+    ;;
+  rb)
+    TEST_CANDIDATES+=("${DIR}/${FILENAME}_spec.rb" "${DIR}/../spec/${BASENAME}")
+    ;;
+esac
+
+# Check if any test file exists
+for candidate in "${TEST_CANDIDATES[@]}"; do
+  if [[ -f "$candidate" ]]; then
+    echo "Test reminder: $BASENAME has tests at $(basename "$candidate")"
+    echo "- Consider updating tests to cover your changes"
+    exit 0
+  fi
+done
+
+# No test file found
+echo "Test reminder: No test file found for $BASENAME"
+echo "- Consider creating tests for this file"
+
+exit 0