crewforth 3.0.0 → 3.0.1-rc.2

package/kit/agents/crew-session-manager.md

@@ -38,7 +38,7 @@ Appends a single line to the very END of the response:
 
 **Actual fill is MEASURED, guessing is FORBIDDEN.** The `UserPromptSubmit` hook runs `context-usage.sh` each turn,
 automatically injecting the real `🔋 Session: %.. (token) → level` line into the context — use that value. If you want an
-exact/fresh reading, run it by hand: `bash .claude/hooks/context-usage.sh`
+exact/fresh reading, run it by hand with the Bash tool, not PowerShell: `bash .claude/hooks/context-usage.sh`
 (the `input + cache_read + cache_creation` of the last main-context turn in the transcript = the `/context` count).
 If there's no injected line (hook off / transcript unreachable) **don't invent a %** — run `bash .claude/hooks/context-usage.sh --verbose` once; if that also fails, say so once, drop the 🔋 line for the rest of the session, and only report a topic change.
 

package/kit/eval/doctor.sh

@@ -59,6 +59,9 @@ _mt() {
       "no .claude/ in '%s' — is Crewforth installed here?") s="'%s' içinde .claude/ yok — Crewforth burada kurulu mu?" ;;
       'VERSION present (%s)') s='VERSION var (%s)' ;;
       'VERSION missing') s='VERSION yok' ;;
+      "no install trace: VERSION is here but .claude/kit-manifest.txt is not — the last update did not finish, or .claude/ was copied; run: npx crewforth update --here (information only — nothing was changed)") s="kurulum izi yok: VERSION var ama .claude/kit-manifest.txt yok — son güncelleme bitmemiş ya da .claude/ kopyalanmış; çalıştırın: npx crewforth update --here (yalnız bilgi — hiçbir şey değiştirilmedi)" ;;
+      'no install trace: components the install manifest lists are not here (%s) — the last update did not finish, or .claude/ was copied; run: npx crewforth update --here (information only — nothing was changed; if you removed a component on purpose, ignore this line)') s='kurulum izi yok: kurulum manifestinin listelediği bileşenler burada yok (%s) — son güncelleme bitmemiş ya da .claude/ kopyalanmış; çalıştırın: npx crewforth update --here (yalnız bilgi — hiçbir şey değiştirilmedi; bir bileşeni bilerek sildiyseniz bu satırı yok sayın)' ;;
+      'install trace: the components on disk match the install manifest') s='kurulum izi: diskteki bileşenler kurulum manifestiyle uyuşuyor' ;;
       'reinstall or update Crewforth (npx crewforth update)') s="Crewforth'u yeniden kurun ya da güncelleyin (npx crewforth update)" ;;
       'Crewforth v%s installed, v%s published — update with /crew-update') s='Crewforth v%s kurulu, v%s yayında — /crew-update ile güncelleyin' ;;
       'required git hooks present (pre-commit, commit-msg)') s="gerekli git hook'ları yerinde (pre-commit, commit-msg)" ;;
@@ -96,9 +99,9 @@ _mt() {
       'skill listing: %s skill(s) use when_to_use or a folded description — a shape the count was not measured on') s='skill listesi: %s skill when_to_use ya da katlanmış açıklama kullanıyor — sayımın ölçülmediği bir biçim' ;;
       'skill listing %s chars for %s skills fits the %s-char budget (fraction %s from %s, %s-token window%s)') s="skill listesi %s karakter, %s skill; %s karakterlik bütçeye sığıyor (kesir %s, kaynak %s; %s token'lık pencere%s)" ;;
       'skill listing %s chars for %s skills EXCEEDS the %s-char budget (fraction %s from %s, %s-token window%s)') s="skill listesi %s karakter, %s skill; %s karakterlik bütçeyi AŞIYOR (kesir %s, kaynak %s; %s token'lık pencere%s)" ;;
-      '  — Claude Code drops the descriptions of the least-used skills, and those stop matching requests.') s="  — Claude Code en az kullanılan skill'lerin açıklamalarını düşürür; o skill'ler isteklerle eşleşmez olur." ;;
+      '  — Claude Code drops the descriptions of the least-used skills, and those are less likely to be picked on their own.') s="  — Claude Code en az kullanılan skill'lerin açıklamalarını düşürür; o skill'lerin kendiliğinden seçilmesi zorlaşır." ;;
       '  Fixes: raise %s in settings, or set rarely-used skills to %s in %s.') s="  Çözüm: ayarlarda %s değerini yükseltin ya da nadir kullanılan skill'leri %s olarak %s içine yazın." ;;
-      '  Which skills? bash .claude/eval/utilization.sh — it reports the ones nothing in this project reached.') s="  Hangileri? bash .claude/eval/utilization.sh — bu projede hiçbir şeyin ulaşmadığı skill'leri listeler." ;;
+      '  Which skills? bash .claude/eval/utilization.sh (Bash tool, not PowerShell) — it reports the ones nothing in this project reached.') s="  Hangileri? bash .claude/eval/utilization.sh (PowerShell değil, Bash aracıyla) — bu projede hiçbir şeyin ulaşmadığı skill'leri listeler." ;;
       "on a 200,000-token model the whole listing would be ~%s chars (Crewforth %s + your personal skills %s + Claude Code's own ~%s, measured) against %s at fraction %s — the least-used skills there lose their descriptions.") s="200 000 token'lık bir modelde listenin tamamı ~%s karakter olur (Crewforth %s + kişisel skill'leriniz %s + Claude Code'un kendi ~%s, ölçüldü); bütçe ise %s karakter (kesir %s). Orada en az kullanılan skill'ler açıklamalarını kaybeder." ;;
       '  If you use such a model, one line in %s/settings.json fixes it: %s') s='  Böyle bir model kullanıyorsanız %s/settings.json dosyasına tek satır yeter: %s' ;;
       '  What it costs: the listing is sent every turn. At 0.04 it stays whole — ~%s chars, about %s tokens,') s="  Bedeli: liste her turda gönderilir. 0.04'te bütün kalır — ~%s karakter, yaklaşık %s token," ;;
@@ -126,6 +129,9 @@ _mt() {
       'DOCTOR: %s issue(s) ❌ — apply the fixes above%s') s='DOCTOR: %s sorun ❌ — yukarıdaki çözümleri uygulayın%s' ;;
       'shell gates watch both Bash and PowerShell') s="kabuk kapıları hem Bash'i hem PowerShell'i izliyor" ;;
       'shell gates watch only Bash — PowerShell commands bypass every §4.5 rule') s="kabuk kapıları yalnız Bash'i izliyor — PowerShell komutları her §4.5 kuralını atlıyor" ;;
+      'shell gates watch only PowerShell — Bash commands bypass every §4.5 rule') s="kabuk kapıları yalnız PowerShell'i izliyor — Bash komutları her §4.5 kuralını atlıyor" ;;
+      'guard-bash.sh is not wired in PreToolUse — every shell command bypasses §4.4/§4.5') s="guard-bash.sh PreToolUse'a bağlı değil — her kabuk komutu §4.4/§4.5'i atlıyor" ;;
+      'update Crewforth (npx crewforth update), which rewires it') s="Crewforth'u güncelleyin (npx crewforth update); bağlantıyı yeniden kurar" ;;
       'update Crewforth (npx crewforth update), or set the PreToolUse matcher to') s="Crewforth'u güncelleyin (npx crewforth update) ya da PreToolUse matcher'ını şuna ayarlayın:" ;;
       'auto-mode classifier config: built-ins intact, Crewforth rules present (config, not a gate)') s='auto-mode sınıflandırıcı ayarı: yerleşik kurallar sağlam, Crewforth kuralları var (ayar, kapı değil)' ;;
       'auto-mode classifier BUILT-INS DROPPED — an autoMode array lacks %s') s='auto-mode sınıflandırıcının YERLEŞİK KURALLARI DÜŞMÜŞ — bir autoMode dizisinde %s yok' ;;
@@ -191,6 +197,31 @@ if [ -f .claude/VERSION ] && [ -f .claude/.state/update-check ]; then
   fi
 fi
 
+# 1c) Install trace. An update leaves VERSION, the install manifest and the components on disk agreeing; when they do
+#     not, the last update did not finish or .claude/ came from somewhere else (a copy from another project), and the
+#     update's own steps — the legacy sweep, the pattern skill's trust — never ran here. Information only: nothing is
+#     changed, the fix is the update. Measured case: a project whose trust record was missing after a 3.0 update.
+if [ -f .claude/VERSION ]; then
+  if [ ! -f .claude/kit-manifest.txt ]; then
+    warn "no install trace: VERSION is here but .claude/kit-manifest.txt is not — the last update did not finish, or .claude/ was copied; run: npx crewforth update --here (information only — nothing was changed)"
+  else
+    DTMISS=""
+    while IFS= read -r e || [ -n "$e" ]; do
+      e="${e%$'\r'}"; case "$e" in ''|'#'*) continue ;; esac
+      [ -e ".claude/$e" ] || DTMISS="$DTMISS $e"
+    done < .claude/kit-manifest.txt
+    # Only "listed but absent" is a signal. A crew-* component on disk that the manifest does not list may be the user's
+    # own (review: a user's skills/crew-mine read as a broken install), so it is not reported.
+    # A component the user deleted on purpose looks exactly like one an interrupted update never wrote: nothing on disk
+    # tells the two apart, and recording deletions would be a new file to keep in step. So the line says it instead.
+    if [ -n "$DTMISS" ]; then
+      warn "no install trace: components the install manifest lists are not here (%s) — the last update did not finish, or .claude/ was copied; run: npx crewforth update --here (information only — nothing was changed; if you removed a component on purpose, ignore this line)" "${DTMISS# }"
+    else
+      ok "install trace: the components on disk match the install manifest"
+    fi
+  fi
+fi
+
 # 2) Hooks present + executable. The .sh set is a glob (extras ok); pre-commit + commit-msg are REQUIRED — they
 #    ARE the §4.1/§4.2 trace/secret gate, so a MISSING one is a failure, not a silent skip.
 NX=""; GONE=""
@@ -318,9 +349,9 @@ EOF_SLA
       ok "skill listing %s chars for %s skills fits the %s-char budget (fraction %s from %s, %s-token window%s)" "$LISTING" "$NLISTED" "$BUDGET" "$FRAC" "$FROM" "$CW" "$EST"
     else
       warn "skill listing %s chars for %s skills EXCEEDS the %s-char budget (fraction %s from %s, %s-token window%s)" "$LISTING" "$NLISTED" "$BUDGET" "$FRAC" "$FROM" "$CW" "$EST"
-      warn "  — Claude Code drops the descriptions of the least-used skills, and those stop matching requests."
+      warn "  — Claude Code drops the descriptions of the least-used skills, and those are less likely to be picked on their own."
       warn "  Fixes: raise %s in settings, or set rarely-used skills to %s in %s." '"skillListingBudgetFraction"' '"name-only"' '"skillOverrides"'
-      warn "  Which skills? bash .claude/eval/utilization.sh — it reports the ones nothing in this project reached."
+      warn "  Which skills? bash .claude/eval/utilization.sh (Bash tool, not PowerShell) — it reports the ones nothing in this project reached."
     fi
     # The whole listing, not only Crewforth's share: the user's personal skills and Claude Code's own bundled skills
     # sit in the same budget. The bundled ones were measured once (14 skills, 5898 chars, Claude Code v2.1.282, an
@@ -465,6 +496,48 @@ if [ -f .claude/DISCIPLINE.md ]; then
   fi
 fi
 
+# 8b) The shell matcher. Claude Code's hooks reference is explicit: inspect shell commands with
+#     `Bash|PowerShell`, because wherever the PowerShell tool is enabled it IS the shell — and it is on by
+#     default for claude.ai and Console accounts on Windows. An install from before 2.5.0 watches only `Bash`,
+#     so every PowerShell command walks past the §4.5 rules with nothing firing. Nothing about the session
+#     looks wrong, which is why this is a check and not a release note.
+#     The matcher read is the one of the PreToolUse entry that runs guard-bash.sh, through the one JSON reader.
+#     Any matcher naming PowerShell used to pass — and 3.0.1 wires guard-powershell.sh on a PowerShell-only entry, so
+#     an install whose guard-bash watched only Bash read as healthy (measured). A line-by-line read also answered
+#     wrong on another key order or on one-line JSON. Placed BEFORE the verdict, so a failure here counts in it.
+#     An entry with no matcher applies to every tool.
+SJ8="${SJ:-.claude/eval/lib/settings-json.awk}"
+if [ -f .claude/settings.json ] && [ -f "$SJ8" ] && awk -v op=validate -f "$SJ8" .claude/settings.json 2>/dev/null; then
+  _n8="$(awk -v op=len -v path=hooks.PreToolUse -f "$SJ8" .claude/settings.json 2>/dev/null)" || _n8=0
+  _gbm="none"; _i8=0
+  while [ "$_i8" -lt "${_n8:-0}" ] 2>/dev/null; do
+    case "$(awk -v op=get -v path="hooks.PreToolUse.$_i8.hooks" -f "$SJ8" .claude/settings.json 2>/dev/null)" in
+      *guard-bash.sh*) _gbm="$(awk -v op=get -v path="hooks.PreToolUse.$_i8.matcher" -f "$SJ8" .claude/settings.json 2>/dev/null)" || _gbm='"*"'
+                       _gbm="${_gbm#\"}"; _gbm="${_gbm%\"}"; break ;;
+    esac
+    _i8=$((_i8+1))
+  done
+  case "|$_gbm|" in
+    "|none|") BAD_TAIL=''
+              bad "guard-bash.sh is not wired in PreToolUse — every shell command bypasses §4.4/§4.5" \
+                  "update Crewforth (npx crewforth update), which rewires it" ;;
+    "|*|"|"||"|*"|PowerShell|"*) case "|$_gbm|" in *"|Bash|"*|"|*|"|"||") ok "shell gates watch both Bash and PowerShell" ;;
+                                   *) BAD_TAIL=' "Bash|PowerShell"'
+                                      bad "shell gates watch only PowerShell — Bash commands bypass every §4.5 rule" \
+                                          "update Crewforth (npx crewforth update), or set the PreToolUse matcher to" ;; esac ;;
+    *"|Bash|"*) BAD_TAIL=' "Bash|PowerShell"'
+                bad "shell gates watch only Bash — PowerShell commands bypass every §4.5 rule" \
+                    "update Crewforth (npx crewforth update), or set the PreToolUse matcher to" ;;
+    *) BAD_TAIL=''
+       bad "guard-bash.sh is not wired in PreToolUse — every shell command bypasses §4.4/§4.5" \
+           "update Crewforth (npx crewforth update), which rewires it" ;;
+  esac
+fi
+# 8c) Windows: can Claude Code find Git Bash? Without one it runs every hook through PowerShell and no gate runs.
+#     The check lives in ONE script, eval/lib/git-bash.sh, which the plugin edition's /crew-doctor runs as well. It
+#     prints nothing off Windows, and its exit 1 (not found) counts in this verdict.
+_gbs="$(dirname "$0")/lib/git-bash.sh"
+if [ -f "$_gbs" ]; then bash "$_gbs"; [ "$?" = 1 ] && FAIL=$((FAIL+1)); fi
 echo "---"
 # The verdict is the line people read, and some read only it. The preflight block
 # below reports a missing node, but it prints AFTER this — so on a machine that
@@ -494,20 +567,6 @@ if [ "$FAIL" -eq 0 ]; then _mt "DOCTOR: healthy ✅%s" "$PANEL_NOTE"; echo "$_M"
   [ -f "$(dirname "$0")/lib/star.sh" ] && bash "$(dirname "$0")/lib/star.sh" --once .
 else _mt "DOCTOR: %s issue(s) ❌ — apply the fixes above%s" "$FAIL" "$PANEL_NOTE"; echo "$_M"; fi
 
-# 8b) The shell matcher. Claude Code's hooks reference is explicit: inspect shell commands with
-#     `Bash|PowerShell`, because wherever the PowerShell tool is enabled it IS the shell — and it is on by
-#     default for claude.ai and Console accounts on Windows. An install from before 2.5.0 watches only `Bash`,
-#     so every PowerShell command walks past the §4.5 rules with nothing firing. Nothing about the session
-#     looks wrong, which is why this is a check and not a release note.
-if [ -f .claude/settings.json ]; then
-  if grep -q '"matcher"[[:space:]]*:[[:space:]]*"[^"]*PowerShell' .claude/settings.json; then
-    ok "shell gates watch both Bash and PowerShell"
-  elif grep -q '"matcher"[[:space:]]*:[[:space:]]*"Bash"' .claude/settings.json; then
-    BAD_TAIL=' "Bash|PowerShell"'
-    bad "shell gates watch only Bash — PowerShell commands bypass every §4.5 rule" \
-        "update Crewforth (npx crewforth update), or set the PreToolUse matcher to"
-  fi
-fi
 # 9) The auto-mode classifier. Since 2026-08-14 auto mode is the default permission mode on Pro/Max/Team, so a
 #     classifier answers permission prompts the user used to answer. Two things can be wrong and neither shows
 #     up in a session. Only ONE of them is a real gate finding: a custom autoMode block that dropped the

package/kit/eval/golden-routing.txt

@@ -14,12 +14,20 @@ add a new handler for the order endpoint|crew-backend-expert
 write a migration for this table|crew-database-expert
 build a responsive component for the login screen|crew-frontend-expert
 # Positive twins of the seven over-broad-word rows below: the replacement phrase must still route.
+add a settings screen in the frontend|frontend
+frontend'de bir ekran ekle|frontend
+the UI component re-renders on every keystroke|frontend
 cut a release and tag it|release
 review the code in this PR|crew-code-review
 the page layout is broken on mobile|frontend-design
 requests are timing out under load|crew-performance-expert
 add client routing to the app|crew-frontend-expert
 add a new rn screen with expo router|frontend-rn-expo
+# The client side is stack-neutral (3.0.1): a mobile request on another stack goes to the frontend owner, never to
+# the React Native layer. Turkish as typed in the field, and English.
+flutter ekranı ekle|crew-frontend-expert
+add a SwiftUI view for the profile|crew-frontend-expert
+build a Jetpack Compose screen for settings|crew-frontend-expert
 run an OWASP check and a full security scan|crew-security-expert
 we need a kvkk privacy audit|crew-privacy-agent
 commit the changes|crew-commit-agent
@@ -92,6 +100,13 @@ set up the project structure for a new API|backend-architecture
 choose a database for this service|backend-architecture
 
 # --- Negative: prompt must NOT route to target (over-broad-trigger guard) ---
+flutter ekranı ekle|!frontend-rn-expo
+add a SwiftUI view for the profile|!frontend-rn-expo
+build a Jetpack Compose screen for settings|!frontend-rn-expo
+# Field case (3.0.1, P2 case A): a user handing work over to another team named the area in passing — the bare word
+# "frontend" and a project called <x>_ui each routed it to the frontend skill. Turkish as it was typed, and in English.
+acme_ui için yapılacak iş varsa aktarır mısın? frontend tarafından o sorumlu|!frontend
+if there is work for acme_ui, pass it over — the frontend team owns that|!frontend
 #
 # The seven rows below are the ones that were REPORTED FROM LIVE USE, not invented. Each generic English word
 # was a standalone trigger, and a single trigger of six characters or more clears the score floor on its own —

package/kit/eval/lib/git-bash.sh

@@ -0,0 +1,108 @@
+#!/usr/bin/env bash
+# Can Claude Code find Git Bash on this Windows machine? The ONE copy of this check: doctor.sh runs it for a full
+# install, and /crew-doctor runs it on a plugin install, where doctor.sh does not ship (eval/lib ships in both).
+#
+#   bash eval/lib/git-bash.sh   nothing off Windows; on Windows one line (and a fix line), in doctor's format
+#   exit 0  found, or not Windows · 1  NOT FOUND, a failure · 3  a warning · 4  not checked (no cygpath)
+#
+# WHY: Claude Code runs every hook through the bash it finds, and without one it runs them through PowerShell, where
+# a Crewforth hook exits 0 and no gate runs — measured in the field (a `git push --force` went through). The lookup
+# is Claude Code's own, read from its 2.1.284 binary, in its order: CLAUDE_CODE_GIT_BASH_PATH (a bash/sh binary that
+# exists) · C:\Program Files\Git\bin\bash.exe · C:\Program Files (x86)\Git\bin\bash.exe ·
+# <git.exe on PATH>\..\..\bin\bash.exe. The bash running THIS script proves nothing: it can come from anywhere on
+# PATH. The last step depends on the PATH Claude Code starts with, which is not this shell's (Git Bash puts its own
+# git first), so a bash found only there is a warning.
+set -u
+RC=0
+
+# Language: CREW_LANG, else the install's kit.conf, else the locale — the doctor's rule, so both editions agree.
+case "${CREW_LANG:-}" in tr|en) ;; *)
+  CREW_LANG=""
+  if [ -f .claude/kit.conf ]; then
+    while IFS= read -r _l || [ -n "$_l" ]; do case "$_l" in lang=*) CREW_LANG="${_l#lang=}"; CREW_LANG="${CREW_LANG%$'\r'}" ;; esac; done < .claude/kit.conf
+  fi
+  case "$CREW_LANG" in tr|en) ;; *)
+    _loc="${LC_ALL:-}"; [ -n "$_loc" ] || _loc="${LC_MESSAGES:-}"; [ -n "$_loc" ] || _loc="${LANG:-}"
+    case "$_loc" in tr*|TR*) CREW_LANG=tr ;; *) CREW_LANG=en ;; esac ;;
+  esac ;;
+esac
+# The English string is the key; a missing translation prints English and lands in CREW_I18N_MISS (smoke reads it).
+_mt(){ local s="$1"; shift
+  if [ "$CREW_LANG" = tr ]; then
+    case "$s" in
+      'fix: ') s='çözüm: ' ;;
+      'Git Bash lookup not checked (no cygpath in this shell)') s='Git Bash araması denetlenmedi (bu kabukta cygpath yok)' ;;
+      'CLAUDE_CODE_GIT_BASH_PATH (%s) is not a bash that exists — Claude Code ignores it') s='CLAUDE_CODE_GIT_BASH_PATH (%s) var olan bir bash değil — Claude Code onu yok sayıyor' ;;
+      'Claude Code finds Git Bash (%s) — hooks run under bash') s="Claude Code Git Bash'i buluyor (%s) — hook'lar bash altında koşuyor" ;;
+      'Claude Code finds Git Bash only through git on PATH (%s) — started without it on PATH, its hooks run under PowerShell and the gates do not run; set CLAUDE_CODE_GIT_BASH_PATH to that path') s="Claude Code Git Bash'i yalnız PATH'teki git üzerinden buluyor (%s) — PATH'te o yokken başlarsa hook'lar PowerShell altında koşar ve kapılar çalışmaz; CLAUDE_CODE_GIT_BASH_PATH'i bu yola ayarlayın" ;;
+      'Git Bash is installed for this user only (%s), where Claude Code does not look — its hooks may run under PowerShell and the gates may not run') s="Git Bash yalnız bu kullanıcı için kurulu (%s) ve Claude Code oraya bakmıyor — hook'lar PowerShell altında koşabilir ve kapılar çalışmayabilir" ;;
+      'set CLAUDE_CODE_GIT_BASH_PATH to') s="CLAUDE_CODE_GIT_BASH_PATH'i şuna ayarlayın:" ;;
+      "Claude Code cannot find Git Bash — its hooks run under PowerShell and Crewforth's gates do not run") s="Claude Code Git Bash'i bulamıyor — hook'lar PowerShell altında koşuyor ve Crewforth'un kapıları çalışmıyor" ;;
+      'install Git for Windows in its default folder, or set CLAUDE_CODE_GIT_BASH_PATH to') s="Git for Windows'u varsayılan klasörüne kurun ya da CLAUDE_CODE_GIT_BASH_PATH'i şuna ayarlayın:" ;;
+      *) [ -n "${CREW_I18N_MISS:-}" ] && printf '%s\n' "$s" >> "$CREW_I18N_MISS" ;;
+    esac
+  fi
+  printf -v _M "$s" "$@"; }
+ok(){   _mt "$@"; echo "  ✅ $_M"; }
+warn(){ _mt "$@"; echo "  ⚠️  $_M"; [ "$RC" = 0 ] && RC=3; }
+skip(){ _mt "$@"; echo "  ·  $_M"; RC=4; }
+# bad MESSAGE FIX [arguments for MESSAGE]: the fix takes none; what follows it goes in BAD_TAIL, printed once.
+bad(){ local _m="$1" _x="$2"; shift 2; _mt "$_m" "$@"; echo "  ❌ $_M"; _mt "fix: "; local _f="$_M"; _mt "$_x"
+       echo "     ↳ $_f$_M${BAD_TAIL:-}"; BAD_TAIL=""; RC=1; }
+
+case "$(uname -s 2>/dev/null)" in MINGW*|MSYS*|CYGWIN*)
+  if ! command -v cygpath >/dev/null 2>&1; then
+    skip "Git Bash lookup not checked (no cygpath in this shell)"
+  else
+    # Exists the way Claude Code's existsSync means it: MSYS answers `[ -f …/bash ]` true when only bash.exe is
+    # there, so a name without .exe must also appear in its folder's listing (case-insensitively, as Windows does).
+    _gbx(){ local u d f n; u="$(cygpath -u "$1" 2>/dev/null)" || return 1; [ -n "$u" ] && [ -f "$u" ] || return 1
+      case "$u" in *.[Ee][Xx][Ee]) return 0 ;; esac
+      d="${u%/*}"; n="$(printf '%s' "${u##*/}" | tr '[:upper:]' '[:lower:]')"
+      for f in "$d"/*; do [ "$(printf '%s' "${f##*/}" | tr '[:upper:]' '[:lower:]')" = "$n" ] && return 0; done; return 1; }
+    _gbf=""; _gbv="${CLAUDE_CODE_GIT_BASH_PATH:-}"
+    if [ -n "$_gbv" ]; then
+      _gbn="${_gbv##*[\\/]}"; _gbn="$(printf '%s' "$_gbn" | tr '[:upper:]' '[:lower:]')"
+      case "$_gbn" in bash.exe|sh.exe|bash|sh) _gbx "$_gbv" && _gbf="$_gbv" ;; esac
+      [ -n "$_gbf" ] || warn "CLAUDE_CODE_GIT_BASH_PATH (%s) is not a bash that exists — Claude Code ignores it" "$_gbv"
+    fi
+    if [ -z "$_gbf" ]; then
+      for _gbc in 'C:\Program Files\Git\bin\bash.exe' 'C:\Program Files (x86)\Git\bin\bash.exe'; do
+        _gbx "$_gbc" && { _gbf="$_gbc"; break; }
+      done
+    fi
+    if [ -n "$_gbf" ]; then ok "Claude Code finds Git Bash (%s) — hooks run under bash" "$_gbf"
+    else
+      # A per-user Git for Windows install lives in %LOCALAPPDATA%\Programs\Git — none of Claude Code's fixed folders.
+      # Checked FIRST and counted: such an install usually puts its cmd folder on PATH, so Claude Code's last step
+      # may find it, but that hangs on the PATH Claude Code starts with, and the field's per-user install ran its hooks
+      # under PowerShell. The path in the advice is the one that exists here, never a guess.
+      _gbu=""
+      if [ -n "${LOCALAPPDATA:-}" ] && _gbl="$(cygpath -u "$LOCALAPPDATA" 2>/dev/null)" && [ -n "$_gbl" ]; then
+        _gbu="$(cygpath -w "$_gbl/Programs/Git/bin/bash.exe" 2>/dev/null)" || _gbu=""
+        [ -n "$_gbu" ] && _gbx "$_gbu" || _gbu=""
+      fi
+      _gbp=""
+      [ -n "$_gbu" ] || while IFS= read -r _gbg; do
+        [ -n "$_gbg" ] || continue
+        _gbw="$(cygpath -w "$_gbg" 2>/dev/null)" || continue
+        _gbw="${_gbw%\\*}"; _gbw="${_gbw%\\*}"'\bin\bash.exe'
+        _gbx "$_gbw" && { _gbp="$_gbw"; break; }
+      done <<GBEOF
+$(type -ap git 2>/dev/null)
+GBEOF
+      if [ -n "$_gbu" ]; then
+        BAD_TAIL=" \"$_gbu\""
+        bad "Git Bash is installed for this user only (%s), where Claude Code does not look — its hooks may run under PowerShell and the gates may not run" \
+            "set CLAUDE_CODE_GIT_BASH_PATH to" "$_gbu"
+      elif [ -n "$_gbp" ]; then
+        warn "Claude Code finds Git Bash only through git on PATH (%s) — started without it on PATH, its hooks run under PowerShell and the gates do not run; set CLAUDE_CODE_GIT_BASH_PATH to that path" "$_gbp"
+      else
+        BAD_TAIL=' <Git>\bin\bash.exe'   # a backslash in the key would be a printf escape
+        bad "Claude Code cannot find Git Bash — its hooks run under PowerShell and Crewforth's gates do not run" \
+            "install Git for Windows in its default folder, or set CLAUDE_CODE_GIT_BASH_PATH to"
+      fi
+    fi
+  fi ;;
+esac
+exit "$RC"

package/kit/eval/preflight.sh

@@ -108,7 +108,7 @@ _mt() {
       "Optional gaps above are safe but worth closing.") s='Yukarıdaki isteğe bağlı eksikler sorun çıkarmaz ama gidermeye değer.' ;;
       "Everything Crewforth needs is here.") s="Crewforth'un ihtiyaç duyduğu her şey kurulu." ;;
       "is the panel only — every gate still holds without it.") s='yalnızca panel için gerekli — o olmadan da tüm kapılar çalışır.' ;;
-      "Or let Crewforth get one: %s") s='İsterseniz Crewforth sizin için indirebilir: %s' ;;
+      "Or let Crewforth get one (Bash tool, not PowerShell): %s") s='İsterseniz Crewforth sizin için indirebilir (PowerShell değil, Bash aracıyla): %s' ;;
       "fix: ") s='çözüm: ' ;;
       "node 18+") s='node 18+' ;;
       "sha256 tool") s='sha256 aracı' ;;
@@ -171,7 +171,7 @@ if [ -n "$MISSING_REQ" ]; then
       *node*) _mt 'is the panel only — every gate still holds without it.'; printf '    %snode%s %s\n' "$B" "$R" "$_M"
               # And it is not a dead end: Crewforth fetches a runtime for the panel itself, into one
               # directory under $HOME, verified against the published checksum. It asks first.
-              printf '    %s\n' "$(m 'Or let Crewforth get one: %s' "${B}bash .claude/studio/ensure-node.sh --plan${R}")" ;;
+              printf '    %s\n' "$(m 'Or let Crewforth get one (Bash tool, not PowerShell): %s' "${B}bash .claude/studio/ensure-node.sh --plan${R}")" ;;
     esac
 elif [ -n "$MISSING_OPT" ]; then
   [ "$QUIET" = 1 ] || { _mt 'All required tools present.'; _a="$_M"; _mt 'Optional gaps above are safe but worth closing.'