dino-spec 16.2.0 → 17.2.0

package/dist/hooks/pre-validate.js

@@ -100,552 +100,552 @@ export function generatePreValidateScript(options) {
 }
 function generatePowerShellScript() {
     const platform = 'win32';
-    return `${utils.scriptHeader(platform, VERSION, 'pre-validate hook (v2 - default-on)')}
-# Smart Pre-Validation v2 - Default-on self-supervision
-# Only triggers for high-impact operations
-# Shows confidence inline instead of blocking
-
-# ============================================================================
-# OPT-OUT CHECK - Exit early if pre-validate is explicitly disabled
-# v13.2.0: Now default-on, use DINO_PRE_VALIDATE=false to disable
-# ============================================================================
-$preValidateDisabled = $env:DINO_PRE_VALIDATE -eq "false"
-
-# Also check config file for pre-validate flag (explicit false disables)
-if (-not $preValidateDisabled) {
-    ${paths.getDinoDir(platform)}
-    if ($dinoDir) {
-        $configPath = Join-Path $dinoDir "config.json"
-        if (Test-Path $configPath) {
-            try {
-                $config = Get-Content $configPath -Raw | ConvertFrom-Json
-                if ($config.features.preValidate -eq $false) {
-                    $preValidateDisabled = $true
-                }
-            } catch {}
-        }
-    }
-}
-
-if ($preValidateDisabled) {
-    exit 0
-}
-
-# ============================================================================
-# TOOL AND INPUT SETUP
-# ============================================================================
-$toolName = $env:TOOL_NAME
-$toolInput = $env:TOOL_INPUT
-
-if (-not $toolName) {
-    exit 0
-}
-
-# ============================================================================
-# HIGH-IMPACT OPERATION CHECK
-# ============================================================================
-# Read-only tools: never validate
-$readOnlyTools = @("Read", "Glob", "Grep", "WebFetch", "WebSearch")
-if ($readOnlyTools -contains $toolName) {
-    exit 0
-}
-
-# High-impact tools: always validate
-$highImpactTools = @("Edit", "Write", "NotebookEdit")
-$isHighImpact = $highImpactTools -contains $toolName
-
-# Bash: only validate destructive commands
-if ($toolName -eq "Bash" -and -not $isHighImpact) {
-    $destructiveCommands = @("rm", "rmdir", "del", "delete", "drop", "truncate", "reset", "clean", "purge", "wipe", "shred", "erase", "git reset --hard", "git clean", "git checkout .")
-
-    if ($toolInput) {
-        try {
-            $input = $toolInput | ConvertFrom-Json
-            $command = $input.command
-            if ($command) {
-                $normalizedCmd = $command.ToLower().Trim()
-                foreach ($dc in $destructiveCommands) {
-                    if ($normalizedCmd.StartsWith($dc) -or $normalizedCmd -match "\\s$dc\\s" -or $normalizedCmd.EndsWith(" $dc")) {
-                        $isHighImpact = $true
-                        break
-                    }
-                }
-            }
-        } catch {}
-    }
-
-    if (-not $isHighImpact) {
-        exit 0
-    }
-}
-
-# Skip validation for non-high-impact operations
-if (-not $isHighImpact) {
-    exit 0
-}
-
-# ============================================================================
-# DINO DIRECTORY AND TRUSTED PATTERNS CHECK
-# ============================================================================
-${paths.getDinoDir(platform)}
-${paths.checkDinoDirExists(platform)}
-
-# Check trusted patterns
-$trustedPatternsPath = Join-Path $dinoDir "trusted-patterns.json"
-$isTrusted = $false
-
-if (Test-Path $trustedPatternsPath) {
-    try {
-        $trustedState = Get-Content $trustedPatternsPath -Raw | ConvertFrom-Json
-
-        # Build operation signature for matching
-        $opSignature = $toolName
-
-        if ($toolInput) {
-            try {
-                $input = $toolInput | ConvertFrom-Json
-                if ($input.file_path) {
-                    # Extract first two path parts + extension
-                    $pathParts = ($input.file_path -replace '\\\\', '/').Split('/')
-                    if ($pathParts.Count -gt 1) {
-                        $ext = if ($input.file_path -match '\\.[^.]+$') { $matches[0] } else { "" }
-                        $opSignature = $toolName + ":" + $pathParts[0] + "/" + $pathParts[1] + "/**/*" + $ext
-                    }
-                }
-            } catch {}
-        }
-
-        # Check if operation matches any trusted pattern
-        foreach ($pattern in $trustedState.patterns) {
-            if ($opSignature -like $pattern.pattern -or $opSignature -eq $pattern.pattern) {
-                $isTrusted = $true
-                break
-            }
-        }
-    } catch {}
-}
-
-if ($isTrusted) {
-    exit 0
-}
-
-# ============================================================================
-# VALIDATION LOGIC
-# ============================================================================
-${paths.getSessionPath(platform)}
-$issues = @()
-$hints = @()
-$shouldBlock = $false
-$confidence = 0.7  # Base confidence
-
-# Vague term patterns
-$vaguePatterns = @(
-    @{ Pattern = '\\b(maybe|might|could|possibly|perhaps)\\b'; Message = 'Vague term detected'; Weight = -0.1 },
-    @{ Pattern = '\\b(handle|process|deal with)\\s+(it|them|this)\\b'; Message = 'Missing specifics'; Weight = -0.1 },
-    @{ Pattern = '\\b(make\\s+it|do\\s+it)\\s+(work|better|right)\\b'; Message = 'Unclear criteria'; Weight = -0.15 },
-    @{ Pattern = '\\b(TBD|TODO|FIXME)\\b'; Message = 'Incomplete requirement'; Weight = -0.15 }
-)
-
-# Parse tool input content
-$content = ""
-$filePath = ""
-if ($toolInput) {
-    try {
-        $input = $toolInput | ConvertFrom-Json
-        $filePath = $input.file_path
-        if ($toolName -eq "Bash") {
-            $content = $input.command
-        } elseif ($input.new_string) {
-            $content = $input.new_string
-        } elseif ($input.content) {
-            $content = $input.content
-        }
-    } catch {}
-}
-
-# Check for ambiguities in content
-if ($content) {
-    foreach ($p in $vaguePatterns) {
-        if ($content -match $p.Pattern) {
-            $issues += $p.Message
-            $confidence += $p.Weight
-        }
-    }
-}
-
-# Boost confidence for known patterns
-if ($filePath) {
-    # Known safe patterns
-    if ($filePath -match "\\.(test|spec)\\.(ts|js|tsx|jsx)\$") {
-        $confidence += 0.1  # Test files are generally safer
-    }
-    if ($filePath -match "^(src|lib|test)/") {
-        $confidence += 0.05  # Standard directories
-    }
-}
-
-# Check session state for context
-$testsPassing = $false
-$buildPassing = $false
-
-if (Test-Path $sessionPath) {
-    $sessionContent = Get-Content $sessionPath -Raw
-
-    # Check test status
-    if ($sessionContent -match "## Test Status[^#]*\\*\\*Status:\\*\\*\\s*passing") {
-        $testsPassing = $true
-        $confidence += 0.1
-    } elseif ($sessionContent -match "## Test Status[^#]*\\*\\*Status:\\*\\*\\s*failing") {
-        $hints += "Tests are failing"
-        $confidence -= 0.1
-    }
-
-    # Check build status
-    if ($sessionContent -match "## Build Status[^#]*\\*\\*Status:\\*\\*\\s*passing") {
-        $buildPassing = $true
-        $confidence += 0.1
-    } elseif ($sessionContent -match "## Build Status[^#]*\\*\\*Status:\\*\\*\\s*failing") {
-        $hints += "Build is failing"
-        $confidence -= 0.1
-    }
-
-    # Check blockers
-    if ($sessionContent -match "## Blockers\\s*\\n([^#]+)") {
-        $blockerContent = $matches[1]
-        if ($blockerContent -notmatch "^_") {
-            $blockerCount = ($blockerContent | Select-String "^- " -AllMatches).Matches.Count
-            if ($blockerCount -gt 0) {
-                $hints += "$blockerCount active blocker(s)"
-                $confidence -= 0.05
-            }
-        }
-    }
-}
-
-# Clamp confidence to 0-1 range
-$confidence = [Math]::Max(0, [Math]::Min(1, $confidence))
-$confidencePercent = [Math]::Round($confidence * 100)
-
-# ============================================================================
-# OUTPUT - Inline confidence display (non-blocking)
-# ============================================================================
-# Only show output if confidence < 90%
-if ($confidence -lt 0.9) {
-    # Determine operation type for display
-    $opType = switch ($toolName) {
-        "Edit" { "file edit" }
-        "Write" { "file creation" }
-        "NotebookEdit" { "notebook edit" }
-        "Bash" { "command execution" }
-        default { "operation" }
-    }
-
-    if ($confidence -lt 0.5) {
-        Write-Output "[dino] CAUTION: [$confidencePercent%] Low confidence for $opType - consider clarifying requirements"
-    } elseif ($confidence -lt 0.7) {
-        Write-Output "[dino] [$confidencePercent%] Medium confidence for $opType"
-    } else {
-        Write-Output "[dino] [$confidencePercent%] Confidence for $opType"
-    }
-
-    if ($issues.Count -gt 0) {
-        Write-Output "[dino] Issues: $($issues -join '; ')"
-    }
-
-    if ($hints.Count -gt 0) {
-        Write-Output "[dino] Context: $($hints -join '; ')"
-    }
-}
-
-# ============================================================================
-# BLOCKING DECISION - Only block for very high-risk scenarios
-# ============================================================================
-# Block only if: destructive command + very low confidence + multiple issues
-if ($toolName -eq "Bash" -and $content -match "(rm|del|drop|truncate)" -and $confidence -lt 0.3 -and $issues.Count -gt 1) {
-    Write-Output "[dino] BLOCKED: High-risk destructive command with low confidence"
-    Write-Output "[dino] Suggestion: Use /dino.sniff to clarify requirements"
-    Write-Output "[dino] Or set: \$env:DINO_PRE_VALIDATE='false' to disable validation"
-    exit 1
-}
-
-exit 0
+    return `${utils.scriptHeader(platform, VERSION, 'pre-validate hook (v2 - default-on)')}
+# Smart Pre-Validation v2 - Default-on self-supervision
+# Only triggers for high-impact operations
+# Shows confidence inline instead of blocking
+
+# ============================================================================
+# OPT-OUT CHECK - Exit early if pre-validate is explicitly disabled
+# v13.2.0: Now default-on, use DINO_PRE_VALIDATE=false to disable
+# ============================================================================
+$preValidateDisabled = $env:DINO_PRE_VALIDATE -eq "false"
+
+# Also check config file for pre-validate flag (explicit false disables)
+if (-not $preValidateDisabled) {
+    ${paths.getDinoDir(platform)}
+    if ($dinoDir) {
+        $configPath = Join-Path $dinoDir "config.json"
+        if (Test-Path $configPath) {
+            try {
+                $config = Get-Content $configPath -Raw | ConvertFrom-Json
+                if ($config.features.preValidate -eq $false) {
+                    $preValidateDisabled = $true
+                }
+            } catch {}
+        }
+    }
+}
+
+if ($preValidateDisabled) {
+    exit 0
+}
+
+# ============================================================================
+# TOOL AND INPUT SETUP
+# ============================================================================
+$toolName = $env:TOOL_NAME
+$toolInput = $env:TOOL_INPUT
+
+if (-not $toolName) {
+    exit 0
+}
+
+# ============================================================================
+# HIGH-IMPACT OPERATION CHECK
+# ============================================================================
+# Read-only tools: never validate
+$readOnlyTools = @("Read", "Glob", "Grep", "WebFetch", "WebSearch")
+if ($readOnlyTools -contains $toolName) {
+    exit 0
+}
+
+# High-impact tools: always validate
+$highImpactTools = @("Edit", "Write", "NotebookEdit")
+$isHighImpact = $highImpactTools -contains $toolName
+
+# Bash: only validate destructive commands
+if ($toolName -eq "Bash" -and -not $isHighImpact) {
+    $destructiveCommands = @("rm", "rmdir", "del", "delete", "drop", "truncate", "reset", "clean", "purge", "wipe", "shred", "erase", "git reset --hard", "git clean", "git checkout .")
+
+    if ($toolInput) {
+        try {
+            $input = $toolInput | ConvertFrom-Json
+            $command = $input.command
+            if ($command) {
+                $normalizedCmd = $command.ToLower().Trim()
+                foreach ($dc in $destructiveCommands) {
+                    if ($normalizedCmd.StartsWith($dc) -or $normalizedCmd -match "\\s$dc\\s" -or $normalizedCmd.EndsWith(" $dc")) {
+                        $isHighImpact = $true
+                        break
+                    }
+                }
+            }
+        } catch {}
+    }
+
+    if (-not $isHighImpact) {
+        exit 0
+    }
+}
+
+# Skip validation for non-high-impact operations
+if (-not $isHighImpact) {
+    exit 0
+}
+
+# ============================================================================
+# DINO DIRECTORY AND TRUSTED PATTERNS CHECK
+# ============================================================================
+${paths.getDinoDir(platform)}
+${paths.checkDinoDirExists(platform)}
+
+# Check trusted patterns
+$trustedPatternsPath = Join-Path $dinoDir "trusted-patterns.json"
+$isTrusted = $false
+
+if (Test-Path $trustedPatternsPath) {
+    try {
+        $trustedState = Get-Content $trustedPatternsPath -Raw | ConvertFrom-Json
+
+        # Build operation signature for matching
+        $opSignature = $toolName
+
+        if ($toolInput) {
+            try {
+                $input = $toolInput | ConvertFrom-Json
+                if ($input.file_path) {
+                    # Extract first two path parts + extension
+                    $pathParts = ($input.file_path -replace '\\\\', '/').Split('/')
+                    if ($pathParts.Count -gt 1) {
+                        $ext = if ($input.file_path -match '\\.[^.]+$') { $matches[0] } else { "" }
+                        $opSignature = $toolName + ":" + $pathParts[0] + "/" + $pathParts[1] + "/**/*" + $ext
+                    }
+                }
+            } catch {}
+        }
+
+        # Check if operation matches any trusted pattern
+        foreach ($pattern in $trustedState.patterns) {
+            if ($opSignature -like $pattern.pattern -or $opSignature -eq $pattern.pattern) {
+                $isTrusted = $true
+                break
+            }
+        }
+    } catch {}
+}
+
+if ($isTrusted) {
+    exit 0
+}
+
+# ============================================================================
+# VALIDATION LOGIC
+# ============================================================================
+${paths.getSessionPath(platform)}
+$issues = @()
+$hints = @()
+$shouldBlock = $false
+$confidence = 0.7  # Base confidence
+
+# Vague term patterns
+$vaguePatterns = @(
+    @{ Pattern = '\\b(maybe|might|could|possibly|perhaps)\\b'; Message = 'Vague term detected'; Weight = -0.1 },
+    @{ Pattern = '\\b(handle|process|deal with)\\s+(it|them|this)\\b'; Message = 'Missing specifics'; Weight = -0.1 },
+    @{ Pattern = '\\b(make\\s+it|do\\s+it)\\s+(work|better|right)\\b'; Message = 'Unclear criteria'; Weight = -0.15 },
+    @{ Pattern = '\\b(TBD|TODO|FIXME)\\b'; Message = 'Incomplete requirement'; Weight = -0.15 }
+)
+
+# Parse tool input content
+$content = ""
+$filePath = ""
+if ($toolInput) {
+    try {
+        $input = $toolInput | ConvertFrom-Json
+        $filePath = $input.file_path
+        if ($toolName -eq "Bash") {
+            $content = $input.command
+        } elseif ($input.new_string) {
+            $content = $input.new_string
+        } elseif ($input.content) {
+            $content = $input.content
+        }
+    } catch {}
+}
+
+# Check for ambiguities in content
+if ($content) {
+    foreach ($p in $vaguePatterns) {
+        if ($content -match $p.Pattern) {
+            $issues += $p.Message
+            $confidence += $p.Weight
+        }
+    }
+}
+
+# Boost confidence for known patterns
+if ($filePath) {
+    # Known safe patterns
+    if ($filePath -match "\\.(test|spec)\\.(ts|js|tsx|jsx)$") {
+        $confidence += 0.1  # Test files are generally safer
+    }
+    if ($filePath -match "^(src|lib|test)/") {
+        $confidence += 0.05  # Standard directories
+    }
+}
+
+# Check session state for context
+$testsPassing = $false
+$buildPassing = $false
+
+if (Test-Path $sessionPath) {
+    $sessionContent = Get-Content $sessionPath -Raw
+
+    # Check test status
+    if ($sessionContent -match "## Test Status[^#]*\\*\\*Status:\\*\\*\\s*passing") {
+        $testsPassing = $true
+        $confidence += 0.1
+    } elseif ($sessionContent -match "## Test Status[^#]*\\*\\*Status:\\*\\*\\s*failing") {
+        $hints += "Tests are failing"
+        $confidence -= 0.1
+    }
+
+    # Check build status
+    if ($sessionContent -match "## Build Status[^#]*\\*\\*Status:\\*\\*\\s*passing") {
+        $buildPassing = $true
+        $confidence += 0.1
+    } elseif ($sessionContent -match "## Build Status[^#]*\\*\\*Status:\\*\\*\\s*failing") {
+        $hints += "Build is failing"
+        $confidence -= 0.1
+    }
+
+    # Check blockers
+    if ($sessionContent -match "## Blockers\\s*\\n([^#]+)") {
+        $blockerContent = $matches[1]
+        if ($blockerContent -notmatch "^_") {
+            $blockerCount = ($blockerContent | Select-String "^- " -AllMatches).Matches.Count
+            if ($blockerCount -gt 0) {
+                $hints += "$blockerCount active blocker(s)"
+                $confidence -= 0.05
+            }
+        }
+    }
+}
+
+# Clamp confidence to 0-1 range
+$confidence = [Math]::Max(0, [Math]::Min(1, $confidence))
+$confidencePercent = [Math]::Round($confidence * 100)
+
+# ============================================================================
+# OUTPUT - Inline confidence display (non-blocking)
+# ============================================================================
+# Only show output if confidence < 90%
+if ($confidence -lt 0.9) {
+    # Determine operation type for display
+    $opType = switch ($toolName) {
+        "Edit" { "file edit" }
+        "Write" { "file creation" }
+        "NotebookEdit" { "notebook edit" }
+        "Bash" { "command execution" }
+        default { "operation" }
+    }
+
+    if ($confidence -lt 0.5) {
+        Write-Output "[dino] CAUTION: [$confidencePercent%] Low confidence for $opType - consider clarifying requirements"
+    } elseif ($confidence -lt 0.7) {
+        Write-Output "[dino] [$confidencePercent%] Medium confidence for $opType"
+    } else {
+        Write-Output "[dino] [$confidencePercent%] Confidence for $opType"
+    }
+
+    if ($issues.Count -gt 0) {
+        Write-Output "[dino] Issues: $($issues -join '; ')"
+    }
+
+    if ($hints.Count -gt 0) {
+        Write-Output "[dino] Context: $($hints -join '; ')"
+    }
+}
+
+# ============================================================================
+# BLOCKING DECISION - Only block for very high-risk scenarios
+# ============================================================================
+# Block only if: destructive command + very low confidence + multiple issues
+if ($toolName -eq "Bash" -and $content -match "(rm|del|drop|truncate)" -and $confidence -lt 0.3 -and $issues.Count -gt 1) {
+    Write-Output "[dino] BLOCKED: High-risk destructive command with low confidence"
+    Write-Output "[dino] Suggestion: Use /dino.sniff to clarify requirements"
+    Write-Output "[dino] Or set: $env:DINO_PRE_VALIDATE='false' to disable validation"
+    exit 1
+}
+
+exit 0
 `;
 }
 function generateBashScript() {
     const platform = 'linux';
-    return `${utils.scriptHeader(platform, VERSION, 'pre-validate hook (v2 - default-on)')}
-# Smart Pre-Validation v2 - Default-on self-supervision
-# Only triggers for high-impact operations
-# Shows confidence inline instead of blocking
-
-# ============================================================================
-# OPT-OUT CHECK - Exit early if pre-validate is explicitly disabled
-# v13.2.0: Now default-on, use DINO_PRE_VALIDATE=false to disable
-# ============================================================================
-PRE_VALIDATE_DISABLED="\${DINO_PRE_VALIDATE:-}"
-
-# Check if explicitly disabled via env var
-if [ "\$PRE_VALIDATE_DISABLED" = "false" ]; then
-    exit 0
-fi
-
-# Also check config file for pre-validate flag (explicit false disables)
-${paths.getDinoDir(platform)}
-if [ -n "\$DINO_DIR" ]; then
-    CONFIG_PATH="\$DINO_DIR/config.json"
-    if [ -f "\$CONFIG_PATH" ]; then
-        # Simple JSON check for preValidate: false
-        if grep -q '"preValidate"[[:space:]]*:[[:space:]]*false' "\$CONFIG_PATH" 2>/dev/null; then
-            exit 0
-        fi
-    fi
-fi
-
-# ============================================================================
-# TOOL AND INPUT SETUP
-# ============================================================================
-TOOL_NAME="\${TOOL_NAME:-}"
-TOOL_INPUT_VAL="\${TOOL_INPUT:-}"
-
-if [ -z "\$TOOL_NAME" ]; then
-    exit 0
-fi
-
-# ============================================================================
-# HIGH-IMPACT OPERATION CHECK
-# ============================================================================
-# Read-only tools: never validate
-case "\$TOOL_NAME" in
-    Read|Glob|Grep|WebFetch|WebSearch)
-        exit 0
-        ;;
-esac
-
-# Check if operation is high-impact
-IS_HIGH_IMPACT=false
-
-# High-impact tools: always validate
-case "\$TOOL_NAME" in
-    Edit|Write|NotebookEdit)
-        IS_HIGH_IMPACT=true
-        ;;
-    Bash)
-        # Only validate destructive commands
-        if [ -n "\$TOOL_INPUT_VAL" ]; then
-            COMMAND=\$(echo "\$TOOL_INPUT_VAL" | grep -o '"command"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"command"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
-            if [ -n "\$COMMAND" ]; then
-                NORMALIZED_CMD=\$(echo "\$COMMAND" | tr '[:upper:]' '[:lower:]')
-                case "\$NORMALIZED_CMD" in
-                    rm*|rmdir*|del*|delete*|drop*|truncate*|reset*|clean*|purge*|wipe*|shred*|erase*|*"git reset --hard"*|*"git clean"*|*"git checkout ."*)
-                        IS_HIGH_IMPACT=true
-                        ;;
-                esac
-            fi
-        fi
-        ;;
-esac
-
-if [ "\$IS_HIGH_IMPACT" != "true" ]; then
-    exit 0
-fi
-
-# ============================================================================
-# DINO DIRECTORY AND TRUSTED PATTERNS CHECK
-# ============================================================================
-${paths.getDinoDir(platform)}
-${paths.checkDinoDirExists(platform)}
-
-# Check trusted patterns
-TRUSTED_PATTERNS_PATH="\$DINO_DIR/trusted-patterns.json"
-IS_TRUSTED=false
-
-if [ -f "\$TRUSTED_PATTERNS_PATH" ]; then
-    # Build operation signature for matching
-    OP_SIGNATURE="\$TOOL_NAME"
-
-    if [ -n "\$TOOL_INPUT_VAL" ]; then
-        FILE_PATH=\$(echo "\$TOOL_INPUT_VAL" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"file_path"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
-        if [ -n "\$FILE_PATH" ]; then
-            # Extract pattern from file path
-            NORMALIZED_PATH=\$(echo "\$FILE_PATH" | sed 's/\\\\/\\//g')
-            PATH_PART1=\$(echo "\$NORMALIZED_PATH" | cut -d'/' -f1)
-            PATH_PART2=\$(echo "\$NORMALIZED_PATH" | cut -d'/' -f2)
-            EXT=\$(echo "\$FILE_PATH" | grep -o '\\.[^.]*\$' || echo "")
-            if [ -n "\$PATH_PART1" ] && [ -n "\$PATH_PART2" ]; then
-                OP_SIGNATURE="\$TOOL_NAME:\$PATH_PART1/\$PATH_PART2/**/*\$EXT"
-            fi
-        fi
-    fi
-
-    # Simple pattern matching (check if signature matches any pattern)
-    if grep -q "\\"pattern\\"[[:space:]]*:[[:space:]]*\\"\$OP_SIGNATURE\\"" "\$TRUSTED_PATTERNS_PATH" 2>/dev/null; then
-        IS_TRUSTED=true
-    fi
-fi
-
-if [ "\$IS_TRUSTED" = "true" ]; then
-    exit 0
-fi
-
-# ============================================================================
-# VALIDATION LOGIC
-# ============================================================================
-${paths.getSessionPath(platform)}
-ISSUES=""
-HINTS=""
-CONFIDENCE=70  # Base confidence (as integer percentage)
-
-# Helper functions
-add_issue() {
-    if [ -n "\$ISSUES" ]; then
-        ISSUES="\$ISSUES; "
-    fi
-    ISSUES="\${ISSUES}\$1"
-}
-
-add_hint() {
-    if [ -n "\$HINTS" ]; then
-        HINTS="\$HINTS; "
-    fi
-    HINTS="\${HINTS}\$1"
-}
-
-# Parse tool input content
-CONTENT=""
-FILE_PATH=""
-if [ -n "\$TOOL_INPUT_VAL" ]; then
-    if [ "\$TOOL_NAME" = "Bash" ]; then
-        CONTENT=\$(echo "\$TOOL_INPUT_VAL" | grep -o '"command"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"command"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
-    else
-        FILE_PATH=\$(echo "\$TOOL_INPUT_VAL" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"file_path"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
-        CONTENT=\$(echo "\$TOOL_INPUT_VAL" | grep -o '"new_string"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"new_string"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
-        if [ -z "\$CONTENT" ]; then
-            CONTENT=\$(echo "\$TOOL_INPUT_VAL" | grep -o '"content"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/"content"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
-        fi
-    fi
-fi
-
-# Check for ambiguities in content
-if [ -n "\$CONTENT" ]; then
-    # Vague terms
-    if echo "\$CONTENT" | grep -qiE "\\b(maybe|might|could|possibly|perhaps)\\b"; then
-        add_issue "Vague term detected"
-        CONFIDENCE=\$((CONFIDENCE - 10))
-    fi
-
-    # Missing specifics
-    if echo "\$CONTENT" | grep -qiE "\\b(handle|process|deal with)\\s+(it|them|this)\\b"; then
-        add_issue "Missing specifics"
-        CONFIDENCE=\$((CONFIDENCE - 10))
-    fi
-
-    # Unclear criteria
-    if echo "\$CONTENT" | grep -qiE "\\b(make\\s+it|do\\s+it)\\s+(work|better|right)\\b"; then
-        add_issue "Unclear criteria"
-        CONFIDENCE=\$((CONFIDENCE - 15))
-    fi
-
-    # Incomplete requirements
-    if echo "\$CONTENT" | grep -qiE "\\b(TBD|TODO|FIXME)\\b"; then
-        add_issue "Incomplete requirement"
-        CONFIDENCE=\$((CONFIDENCE - 15))
-    fi
-fi
-
-# Boost confidence for known patterns
-if [ -n "\$FILE_PATH" ]; then
-    # Test files are generally safer
-    if echo "\$FILE_PATH" | grep -qE "\\.(test|spec)\\.(ts|js|tsx|jsx)\$"; then
-        CONFIDENCE=\$((CONFIDENCE + 10))
-    fi
-    # Standard directories
-    if echo "\$FILE_PATH" | grep -qE "^(src|lib|test)/"; then
-        CONFIDENCE=\$((CONFIDENCE + 5))
-    fi
-fi
-
-# Check session state for context
-if [ -f "\$SESSION_PATH" ]; then
-    SESSION_CONTENT=\$(cat "\$SESSION_PATH")
-
-    # Check test status
-    if echo "\$SESSION_CONTENT" | grep -q "## Test Status" && echo "\$SESSION_CONTENT" | grep -qi "Status:\\*\\* passing"; then
-        CONFIDENCE=\$((CONFIDENCE + 10))
-    elif echo "\$SESSION_CONTENT" | grep -q "## Test Status" && echo "\$SESSION_CONTENT" | grep -qi "Status:\\*\\* failing"; then
-        add_hint "Tests are failing"
-        CONFIDENCE=\$((CONFIDENCE - 10))
-    fi
-
-    # Check build status
-    if echo "\$SESSION_CONTENT" | grep -q "## Build Status" && echo "\$SESSION_CONTENT" | grep -qi "Status:\\*\\* passing"; then
-        CONFIDENCE=\$((CONFIDENCE + 10))
-    elif echo "\$SESSION_CONTENT" | grep -q "## Build Status" && echo "\$SESSION_CONTENT" | grep -qi "Status:\\*\\* failing"; then
-        add_hint "Build is failing"
-        CONFIDENCE=\$((CONFIDENCE - 10))
-    fi
-
-    # Check blockers
-    if echo "\$SESSION_CONTENT" | grep -q "## Blockers"; then
-        BLOCKER_COUNT=\$(echo "\$SESSION_CONTENT" | sed -n '/## Blockers/,/## /p' | grep -c "^- " 2>/dev/null || echo "0")
-        if [ "\$BLOCKER_COUNT" -gt 0 ]; then
-            add_hint "\$BLOCKER_COUNT active blocker(s)"
-            CONFIDENCE=\$((CONFIDENCE - 5))
-        fi
-    fi
-fi
-
-# Clamp confidence to 0-100 range
-if [ "\$CONFIDENCE" -lt 0 ]; then CONFIDENCE=0; fi
-if [ "\$CONFIDENCE" -gt 100 ]; then CONFIDENCE=100; fi
-
-# ============================================================================
-# OUTPUT - Inline confidence display (non-blocking)
-# ============================================================================
-# Only show output if confidence < 90%
-if [ "\$CONFIDENCE" -lt 90 ]; then
-    # Determine operation type for display
-    case "\$TOOL_NAME" in
-        Edit) OP_TYPE="file edit" ;;
-        Write) OP_TYPE="file creation" ;;
-        NotebookEdit) OP_TYPE="notebook edit" ;;
-        Bash) OP_TYPE="command execution" ;;
-        *) OP_TYPE="operation" ;;
-    esac
-
-    if [ "\$CONFIDENCE" -lt 50 ]; then
-        echo "[dino] CAUTION: [\$CONFIDENCE%] Low confidence for \$OP_TYPE - consider clarifying requirements"
-    elif [ "\$CONFIDENCE" -lt 70 ]; then
-        echo "[dino] [\$CONFIDENCE%] Medium confidence for \$OP_TYPE"
-    else
-        echo "[dino] [\$CONFIDENCE%] Confidence for \$OP_TYPE"
-    fi
-
-    if [ -n "\$ISSUES" ]; then
-        echo "[dino] Issues: \$ISSUES"
-    fi
-
-    if [ -n "\$HINTS" ]; then
-        echo "[dino] Context: \$HINTS"
-    fi
-fi
-
-# ============================================================================
-# BLOCKING DECISION - Only block for very high-risk scenarios
-# ============================================================================
-# Block only if: destructive command + very low confidence + multiple issues
-if [ "\$TOOL_NAME" = "Bash" ] && [ -n "\$CONTENT" ]; then
-    if echo "\$CONTENT" | grep -qiE "(rm|del|drop|truncate)"; then
-        ISSUE_COUNT=\$(echo "\$ISSUES" | tr ';' '\\n' | grep -c . 2>/dev/null || echo "0")
-        if [ "\$CONFIDENCE" -lt 30 ] && [ "\$ISSUE_COUNT" -gt 1 ]; then
-            echo "[dino] BLOCKED: High-risk destructive command with low confidence"
-            echo "[dino] Suggestion: Use /dino.sniff to clarify requirements"
-            echo "[dino] Or set: DINO_PRE_VALIDATE=false to disable validation"
-            exit 1
-        fi
-    fi
-fi
-
-exit 0
+    return `${utils.scriptHeader(platform, VERSION, 'pre-validate hook (v2 - default-on)')}
+# Smart Pre-Validation v2 - Default-on self-supervision
+# Only triggers for high-impact operations
+# Shows confidence inline instead of blocking
+
+# ============================================================================
+# OPT-OUT CHECK - Exit early if pre-validate is explicitly disabled
+# v13.2.0: Now default-on, use DINO_PRE_VALIDATE=false to disable
+# ============================================================================
+PRE_VALIDATE_DISABLED="\${DINO_PRE_VALIDATE:-}"
+
+# Check if explicitly disabled via env var
+if [ "$PRE_VALIDATE_DISABLED" = "false" ]; then
+    exit 0
+fi
+
+# Also check config file for pre-validate flag (explicit false disables)
+${paths.getDinoDir(platform)}
+if [ -n "$DINO_DIR" ]; then
+    CONFIG_PATH="$DINO_DIR/config.json"
+    if [ -f "$CONFIG_PATH" ]; then
+        # Simple JSON check for preValidate: false
+        if grep -q '"preValidate"[[:space:]]*:[[:space:]]*false' "$CONFIG_PATH" 2>/dev/null; then
+            exit 0
+        fi
+    fi
+fi
+
+# ============================================================================
+# TOOL AND INPUT SETUP
+# ============================================================================
+TOOL_NAME="\${TOOL_NAME:-}"
+TOOL_INPUT_VAL="\${TOOL_INPUT:-}"
+
+if [ -z "$TOOL_NAME" ]; then
+    exit 0
+fi
+
+# ============================================================================
+# HIGH-IMPACT OPERATION CHECK
+# ============================================================================
+# Read-only tools: never validate
+case "$TOOL_NAME" in
+    Read|Glob|Grep|WebFetch|WebSearch)
+        exit 0
+        ;;
+esac
+
+# Check if operation is high-impact
+IS_HIGH_IMPACT=false
+
+# High-impact tools: always validate
+case "$TOOL_NAME" in
+    Edit|Write|NotebookEdit)
+        IS_HIGH_IMPACT=true
+        ;;
+    Bash)
+        # Only validate destructive commands
+        if [ -n "$TOOL_INPUT_VAL" ]; then
+            COMMAND=$(echo "$TOOL_INPUT_VAL" | grep -o '"command"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"command"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
+            if [ -n "$COMMAND" ]; then
+                NORMALIZED_CMD=$(echo "$COMMAND" | tr '[:upper:]' '[:lower:]')
+                case "$NORMALIZED_CMD" in
+                    rm*|rmdir*|del*|delete*|drop*|truncate*|reset*|clean*|purge*|wipe*|shred*|erase*|*"git reset --hard"*|*"git clean"*|*"git checkout ."*)
+                        IS_HIGH_IMPACT=true
+                        ;;
+                esac
+            fi
+        fi
+        ;;
+esac
+
+if [ "$IS_HIGH_IMPACT" != "true" ]; then
+    exit 0
+fi
+
+# ============================================================================
+# DINO DIRECTORY AND TRUSTED PATTERNS CHECK
+# ============================================================================
+${paths.getDinoDir(platform)}
+${paths.checkDinoDirExists(platform)}
+
+# Check trusted patterns
+TRUSTED_PATTERNS_PATH="$DINO_DIR/trusted-patterns.json"
+IS_TRUSTED=false
+
+if [ -f "$TRUSTED_PATTERNS_PATH" ]; then
+    # Build operation signature for matching
+    OP_SIGNATURE="$TOOL_NAME"
+
+    if [ -n "$TOOL_INPUT_VAL" ]; then
+        FILE_PATH=$(echo "$TOOL_INPUT_VAL" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"file_path"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
+        if [ -n "$FILE_PATH" ]; then
+            # Extract pattern from file path
+            NORMALIZED_PATH=$(echo "$FILE_PATH" | sed 's/\\\\/\\//g')
+            PATH_PART1=$(echo "$NORMALIZED_PATH" | cut -d'/' -f1)
+            PATH_PART2=$(echo "$NORMALIZED_PATH" | cut -d'/' -f2)
+            EXT=$(echo "$FILE_PATH" | grep -o '\\.[^.]*$' || echo "")
+            if [ -n "$PATH_PART1" ] && [ -n "$PATH_PART2" ]; then
+                OP_SIGNATURE="$TOOL_NAME:$PATH_PART1/$PATH_PART2/**/*$EXT"
+            fi
+        fi
+    fi
+
+    # Simple pattern matching (check if signature matches any pattern)
+    if grep -q "\\"pattern\\"[[:space:]]*:[[:space:]]*\\"$OP_SIGNATURE\\"" "$TRUSTED_PATTERNS_PATH" 2>/dev/null; then
+        IS_TRUSTED=true
+    fi
+fi
+
+if [ "$IS_TRUSTED" = "true" ]; then
+    exit 0
+fi
+
+# ============================================================================
+# VALIDATION LOGIC
+# ============================================================================
+${paths.getSessionPath(platform)}
+ISSUES=""
+HINTS=""
+CONFIDENCE=70  # Base confidence (as integer percentage)
+
+# Helper functions
+add_issue() {
+    if [ -n "$ISSUES" ]; then
+        ISSUES="$ISSUES; "
+    fi
+    ISSUES="\${ISSUES}$1"
+}
+
+add_hint() {
+    if [ -n "$HINTS" ]; then
+        HINTS="$HINTS; "
+    fi
+    HINTS="\${HINTS}$1"
+}
+
+# Parse tool input content
+CONTENT=""
+FILE_PATH=""
+if [ -n "$TOOL_INPUT_VAL" ]; then
+    if [ "$TOOL_NAME" = "Bash" ]; then
+        CONTENT=$(echo "$TOOL_INPUT_VAL" | grep -o '"command"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"command"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
+    else
+        FILE_PATH=$(echo "$TOOL_INPUT_VAL" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"file_path"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
+        CONTENT=$(echo "$TOOL_INPUT_VAL" | grep -o '"new_string"[[:space:]]*:[[:space:]]*"[^"]*"' | sed 's/"new_string"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
+        if [ -z "$CONTENT" ]; then
+            CONTENT=$(echo "$TOOL_INPUT_VAL" | grep -o '"content"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/"content"[[:space:]]*:[[:space:]]*"//' | sed 's/"$//')
+        fi
+    fi
+fi
+
+# Check for ambiguities in content
+if [ -n "$CONTENT" ]; then
+    # Vague terms
+    if echo "$CONTENT" | grep -qiE "\\b(maybe|might|could|possibly|perhaps)\\b"; then
+        add_issue "Vague term detected"
+        CONFIDENCE=$((CONFIDENCE - 10))
+    fi
+
+    # Missing specifics
+    if echo "$CONTENT" | grep -qiE "\\b(handle|process|deal with)\\s+(it|them|this)\\b"; then
+        add_issue "Missing specifics"
+        CONFIDENCE=$((CONFIDENCE - 10))
+    fi
+
+    # Unclear criteria
+    if echo "$CONTENT" | grep -qiE "\\b(make\\s+it|do\\s+it)\\s+(work|better|right)\\b"; then
+        add_issue "Unclear criteria"
+        CONFIDENCE=$((CONFIDENCE - 15))
+    fi
+
+    # Incomplete requirements
+    if echo "$CONTENT" | grep -qiE "\\b(TBD|TODO|FIXME)\\b"; then
+        add_issue "Incomplete requirement"
+        CONFIDENCE=$((CONFIDENCE - 15))
+    fi
+fi
+
+# Boost confidence for known patterns
+if [ -n "$FILE_PATH" ]; then
+    # Test files are generally safer
+    if echo "$FILE_PATH" | grep -qE "\\.(test|spec)\\.(ts|js|tsx|jsx)$"; then
+        CONFIDENCE=$((CONFIDENCE + 10))
+    fi
+    # Standard directories
+    if echo "$FILE_PATH" | grep -qE "^(src|lib|test)/"; then
+        CONFIDENCE=$((CONFIDENCE + 5))
+    fi
+fi
+
+# Check session state for context
+if [ -f "$SESSION_PATH" ]; then
+    SESSION_CONTENT=$(cat "$SESSION_PATH")
+
+    # Check test status
+    if echo "$SESSION_CONTENT" | grep -q "## Test Status" && echo "$SESSION_CONTENT" | grep -qi "Status:\\*\\* passing"; then
+        CONFIDENCE=$((CONFIDENCE + 10))
+    elif echo "$SESSION_CONTENT" | grep -q "## Test Status" && echo "$SESSION_CONTENT" | grep -qi "Status:\\*\\* failing"; then
+        add_hint "Tests are failing"
+        CONFIDENCE=$((CONFIDENCE - 10))
+    fi
+
+    # Check build status
+    if echo "$SESSION_CONTENT" | grep -q "## Build Status" && echo "$SESSION_CONTENT" | grep -qi "Status:\\*\\* passing"; then
+        CONFIDENCE=$((CONFIDENCE + 10))
+    elif echo "$SESSION_CONTENT" | grep -q "## Build Status" && echo "$SESSION_CONTENT" | grep -qi "Status:\\*\\* failing"; then
+        add_hint "Build is failing"
+        CONFIDENCE=$((CONFIDENCE - 10))
+    fi
+
+    # Check blockers
+    if echo "$SESSION_CONTENT" | grep -q "## Blockers"; then
+        BLOCKER_COUNT=$(echo "$SESSION_CONTENT" | sed -n '/## Blockers/,/## /p' | grep -c "^- " 2>/dev/null || echo "0")
+        if [ "$BLOCKER_COUNT" -gt 0 ]; then
+            add_hint "$BLOCKER_COUNT active blocker(s)"
+            CONFIDENCE=$((CONFIDENCE - 5))
+        fi
+    fi
+fi
+
+# Clamp confidence to 0-100 range
+if [ "$CONFIDENCE" -lt 0 ]; then CONFIDENCE=0; fi
+if [ "$CONFIDENCE" -gt 100 ]; then CONFIDENCE=100; fi
+
+# ============================================================================
+# OUTPUT - Inline confidence display (non-blocking)
+# ============================================================================
+# Only show output if confidence < 90%
+if [ "$CONFIDENCE" -lt 90 ]; then
+    # Determine operation type for display
+    case "$TOOL_NAME" in
+        Edit) OP_TYPE="file edit" ;;
+        Write) OP_TYPE="file creation" ;;
+        NotebookEdit) OP_TYPE="notebook edit" ;;
+        Bash) OP_TYPE="command execution" ;;
+        *) OP_TYPE="operation" ;;
+    esac
+
+    if [ "$CONFIDENCE" -lt 50 ]; then
+        echo "[dino] CAUTION: [$CONFIDENCE%] Low confidence for $OP_TYPE - consider clarifying requirements"
+    elif [ "$CONFIDENCE" -lt 70 ]; then
+        echo "[dino] [$CONFIDENCE%] Medium confidence for $OP_TYPE"
+    else
+        echo "[dino] [$CONFIDENCE%] Confidence for $OP_TYPE"
+    fi
+
+    if [ -n "$ISSUES" ]; then
+        echo "[dino] Issues: $ISSUES"
+    fi
+
+    if [ -n "$HINTS" ]; then
+        echo "[dino] Context: $HINTS"
+    fi
+fi
+
+# ============================================================================
+# BLOCKING DECISION - Only block for very high-risk scenarios
+# ============================================================================
+# Block only if: destructive command + very low confidence + multiple issues
+if [ "$TOOL_NAME" = "Bash" ] && [ -n "$CONTENT" ]; then
+    if echo "$CONTENT" | grep -qiE "(rm|del|drop|truncate)"; then
+        ISSUE_COUNT=$(echo "$ISSUES" | tr ';' '\\n' | grep -c . 2>/dev/null || echo "0")
+        if [ "$CONFIDENCE" -lt 30 ] && [ "$ISSUE_COUNT" -gt 1 ]; then
+            echo "[dino] BLOCKED: High-risk destructive command with low confidence"
+            echo "[dino] Suggestion: Use /dino.sniff to clarify requirements"
+            echo "[dino] Or set: DINO_PRE_VALIDATE=false to disable validation"
+            exit 1
+        fi
+    fi
+fi
+
+exit 0
 `;
 }
 //# sourceMappingURL=pre-validate.js.map