dw-kit 1.2.0 → 1.3.0

package/.claude/hooks/safety-guard.sh

@@ -1,54 +1,60 @@
-#!/bin/bash
-# .claude/hooks/safety-guard.sh
-# Intercept destructive Bash commands trước khi execute.
-# exit 0 = allow, exit 2 = block
-#
-# Được gọi bởi PreToolUse hook cho tất cả Bash commands.
-
-INPUT=$(cat)
-
-COMMAND=$(echo "$INPUT" | grep -o '"command"[[:space:]]*:[[:space:]]*"[^"]*"' \
-  | sed 's/"command"[[:space:]]*:[[:space:]]*"//;s/"$//' | head -1)
-
-[ -z "$COMMAND" ] && exit 0
-
-# ── Pattern 1: rm -rf với path quá rộng ──────────────────────────────────────
-# Block: rm -rf / | rm -rf * | rm -rf . (nguy hiểm)
-# Allow: rm -rf ./specific/path | rm -rf /tmp/specific-file
-if echo "$COMMAND" | grep -qE 'rm\s+-rf?\s+(\/\s*$|\*|\.(\s|$))'; then
-  echo "🚨 BLOCKED: rm -rf với path nguy hiểm ($COMMAND)" >&2
-  echo "   Chỉ định path cụ thể hơn để proceed." >&2
-  exit 2
-fi
-
-# ── Pattern 2: git push --force lên main/master ───────────────────────────────
-if echo "$COMMAND" | grep -qE 'git\s+push\s+.*--force'; then
-  BRANCH=$(echo "$COMMAND" | grep -oE '(main|master|develop|dev)' | head -1)
-  if [ -n "$BRANCH" ]; then
-    echo "🚨 BLOCKED: git push --force lên $BRANCH" >&2
-    echo "   Force push lên protected branch không được phép." >&2
-    exit 2
-  fi
-  # Force push lên non-protected branch: warn nhưng allow
-  echo "⚠  Warning: git push --force (non-protected branch)" >&2
-  echo "   Proceed nếu intentional." >&2
-  exit 0
-fi
-
-# ── Pattern 3: Destructive SQL không có WHERE ─────────────────────────────────
-if echo "$COMMAND" | grep -qiE '(DELETE\s+FROM|UPDATE\s+\w+\s+SET)' \
-   && ! echo "$COMMAND" | grep -qi 'WHERE'; then
-  echo "🚨 BLOCKED: Destructive SQL không có WHERE clause" >&2
-  echo "   Thêm WHERE clause hoặc confirm intentional." >&2
-  exit 2
-fi
-
-# ── Pattern 4: DROP TABLE / DROP DATABASE ────────────────────────────────────
-if echo "$COMMAND" | grep -qiE 'DROP\s+(TABLE|DATABASE|SCHEMA)'; then
-  echo "⚠  Warning: DROP statement detected ($COMMAND)" >&2
-  echo "   Đây có phải migration script đã được review không?" >&2
-  # Warn but allow — user có thể đang chạy migration
-  exit 0
-fi
-
-exit 0
+#!/bin/bash
+# .claude/hooks/safety-guard.sh
+# Intercept destructive Bash commands trước khi execute.
+# exit 0 = allow, exit 2 = block
+#
+# Được gọi bởi PreToolUse hook cho tất cả Bash commands.
+
+# Telemetry (local, fire-and-forget)
+TELEMETRY_SCRIPT="${CLAUDE_PROJECT_DIR:-$(pwd)}/.claude/hooks/telemetry-log.sh"
+if [ -x "$TELEMETRY_SCRIPT" ] && [ "${DW_NO_TELEMETRY:-}" != "1" ]; then
+  "$TELEMETRY_SCRIPT" hook safety-guard >/dev/null 2>&1 || true
+fi
+
+INPUT=$(cat)
+
+COMMAND=$(echo "$INPUT" | grep -o '"command"[[:space:]]*:[[:space:]]*"[^"]*"' \
+  | sed 's/"command"[[:space:]]*:[[:space:]]*"//;s/"$//' | head -1)
+
+[ -z "$COMMAND" ] && exit 0
+
+# ── Pattern 1: rm -rf với path quá rộng ──────────────────────────────────────
+# Block: rm -rf / | rm -rf * | rm -rf . (nguy hiểm)
+# Allow: rm -rf ./specific/path | rm -rf /tmp/specific-file
+if echo "$COMMAND" | grep -qE 'rm\s+-rf?\s+(\/\s*$|\*|\.(\s|$))'; then
+  echo "🚨 BLOCKED: rm -rf với path nguy hiểm ($COMMAND)" >&2
+  echo "   Chỉ định path cụ thể hơn để proceed." >&2
+  exit 2
+fi
+
+# ── Pattern 2: git push --force lên main/master ───────────────────────────────
+if echo "$COMMAND" | grep -qE 'git\s+push\s+.*--force'; then
+  BRANCH=$(echo "$COMMAND" | grep -oE '(main|master|develop|dev)' | head -1)
+  if [ -n "$BRANCH" ]; then
+    echo "🚨 BLOCKED: git push --force lên $BRANCH" >&2
+    echo "   Force push lên protected branch không được phép." >&2
+    exit 2
+  fi
+  # Force push lên non-protected branch: warn nhưng allow
+  echo "⚠  Warning: git push --force (non-protected branch)" >&2
+  echo "   Proceed nếu intentional." >&2
+  exit 0
+fi
+
+# ── Pattern 3: Destructive SQL không có WHERE ─────────────────────────────────
+if echo "$COMMAND" | grep -qiE '(DELETE\s+FROM|UPDATE\s+\w+\s+SET)' \
+   && ! echo "$COMMAND" | grep -qi 'WHERE'; then
+  echo "🚨 BLOCKED: Destructive SQL không có WHERE clause" >&2
+  echo "   Thêm WHERE clause hoặc confirm intentional." >&2
+  exit 2
+fi
+
+# ── Pattern 4: DROP TABLE / DROP DATABASE ────────────────────────────────────
+if echo "$COMMAND" | grep -qiE 'DROP\s+(TABLE|DATABASE|SCHEMA)'; then
+  echo "⚠  Warning: DROP statement detected ($COMMAND)" >&2
+  echo "   Đây có phải migration script đã được review không?" >&2
+  # Warn but allow — user có thể đang chạy migration
+  exit 0
+fi
+
+exit 0

package/.claude/hooks/scout-block.sh

@@ -1,82 +1,88 @@
-#!/usr/bin/env bash
-# .claude/hooks/scout-block.sh — dw-kit v1.2
-# Block agent reads vào heavy/irrelevant directories để tăng performance.
-# Học từ claudekit scout-block pattern.
-#
-# PreToolUse hook cho: Read, Glob
-# exit 0 = allow, exit 2 = block
-
-INPUT=$(cat)
-
-# Extract tool name và file path từ JSON input
-TOOL_NAME=$(echo "$INPUT" | node -e "
-let d='';
-process.stdin.on('data',c=>d+=c).on('end',()=>{
-  try{ process.stdout.write(JSON.parse(d).tool_name||''); }catch(e){}
-});
-" 2>/dev/null || true)
-
-# Extract path tùy theo tool
-if [ "$TOOL_NAME" = "Read" ]; then
-  TARGET=$(echo "$INPUT" | node -e "
-let d='';
-process.stdin.on('data',c=>d+=c).on('end',()=>{
-  try{ const p=JSON.parse(d); process.stdout.write((p.tool_input&&p.tool_input.file_path)||''); }catch(e){}
-});
-" 2>/dev/null || true)
-elif [ "$TOOL_NAME" = "Glob" ]; then
-  TARGET=$(echo "$INPUT" | node -e "
-let d='';
-process.stdin.on('data',c=>d+=c).on('end',()=>{
-  try{ const p=JSON.parse(d); const ti=p.tool_input||{}; process.stdout.write(ti.path||ti.pattern||''); }catch(e){}
-});
-" 2>/dev/null || true)
-else
-  exit 0
-fi
-
-[ -z "$TARGET" ] && exit 0
-
-# Normalize: lowercase, forward slashes
-NORM=$(echo "$TARGET" | tr '\\' '/')
-
-# ── Danh sách heavy/irrelevant directories ─────────────────────────────────────
-BLOCKED_PATTERNS=(
-  "node_modules/"
-  "/node_modules"
-  "dist/"
-  "/dist/"
-  "build/"
-  "/build/"
-  ".git/"
-  "/__pycache__/"
-  "/.pytest_cache/"
-  "/.next/"
-  "/.nuxt/"
-  "/vendor/"
-  "/coverage/"
-  "/.tmp/"
-  "/tmp/"
-  "/.cache/"
-)
-
-for pattern in "${BLOCKED_PATTERNS[@]}"; do
-  if echo "$NORM" | grep -q "$pattern"; then
-    echo "⚡ scout-block: Skipped heavy directory [${TOOL_NAME}] $(basename "$TARGET")/" >&2
-    echo "   Path: $TARGET" >&2
-    echo "   Dùng path cụ thể hơn nếu thực sự cần đọc file này." >&2
-    exit 2
-  fi
-done
-
-# Block pattern: kết thúc bằng thư mục blocked (không có trailing slash)
-BLOCKED_EXACT=("node_modules" ".git" "dist" "build" "__pycache__" ".next" ".nuxt" "vendor" "coverage")
-BASENAME=$(basename "$NORM")
-for exact in "${BLOCKED_EXACT[@]}"; do
-  if [ "$BASENAME" = "$exact" ]; then
-    echo "⚡ scout-block: Skipped heavy directory [${TOOL_NAME}] $BASENAME/" >&2
-    exit 2
-  fi
-done
-
-exit 0
+#!/usr/bin/env bash
+# .claude/hooks/scout-block.sh — dw-kit v1.2
+# Block agent reads vào heavy/irrelevant directories để tăng performance.
+# Học từ claudekit scout-block pattern.
+#
+# PreToolUse hook cho: Read, Glob
+# exit 0 = allow, exit 2 = block
+
+# Telemetry (local, fire-and-forget)
+TELEMETRY_SCRIPT="${CLAUDE_PROJECT_DIR:-$(pwd)}/.claude/hooks/telemetry-log.sh"
+if [ -x "$TELEMETRY_SCRIPT" ] && [ "${DW_NO_TELEMETRY:-}" != "1" ]; then
+  "$TELEMETRY_SCRIPT" hook scout-block >/dev/null 2>&1 || true
+fi
+
+INPUT=$(cat)
+
+# Extract tool name và file path từ JSON input
+TOOL_NAME=$(echo "$INPUT" | node -e "
+let d='';
+process.stdin.on('data',c=>d+=c).on('end',()=>{
+  try{ process.stdout.write(JSON.parse(d).tool_name||''); }catch(e){}
+});
+" 2>/dev/null || true)
+
+# Extract path tùy theo tool
+if [ "$TOOL_NAME" = "Read" ]; then
+  TARGET=$(echo "$INPUT" | node -e "
+let d='';
+process.stdin.on('data',c=>d+=c).on('end',()=>{
+  try{ const p=JSON.parse(d); process.stdout.write((p.tool_input&&p.tool_input.file_path)||''); }catch(e){}
+});
+" 2>/dev/null || true)
+elif [ "$TOOL_NAME" = "Glob" ]; then
+  TARGET=$(echo "$INPUT" | node -e "
+let d='';
+process.stdin.on('data',c=>d+=c).on('end',()=>{
+  try{ const p=JSON.parse(d); const ti=p.tool_input||{}; process.stdout.write(ti.path||ti.pattern||''); }catch(e){}
+});
+" 2>/dev/null || true)
+else
+  exit 0
+fi
+
+[ -z "$TARGET" ] && exit 0
+
+# Normalize: lowercase, forward slashes
+NORM=$(echo "$TARGET" | tr '\\' '/')
+
+# ── Danh sách heavy/irrelevant directories ─────────────────────────────────────
+BLOCKED_PATTERNS=(
+  "node_modules/"
+  "/node_modules"
+  "dist/"
+  "/dist/"
+  "build/"
+  "/build/"
+  ".git/"
+  "/__pycache__/"
+  "/.pytest_cache/"
+  "/.next/"
+  "/.nuxt/"
+  "/vendor/"
+  "/coverage/"
+  "/.tmp/"
+  "/tmp/"
+  "/.cache/"
+)
+
+for pattern in "${BLOCKED_PATTERNS[@]}"; do
+  if echo "$NORM" | grep -q "$pattern"; then
+    echo "⚡ scout-block: Skipped heavy directory [${TOOL_NAME}] $(basename "$TARGET")/" >&2
+    echo "   Path: $TARGET" >&2
+    echo "   Dùng path cụ thể hơn nếu thực sự cần đọc file này." >&2
+    exit 2
+  fi
+done
+
+# Block pattern: kết thúc bằng thư mục blocked (không có trailing slash)
+BLOCKED_EXACT=("node_modules" ".git" "dist" "build" "__pycache__" ".next" ".nuxt" "vendor" "coverage")
+BASENAME=$(basename "$NORM")
+for exact in "${BLOCKED_EXACT[@]}"; do
+  if [ "$BASENAME" = "$exact" ]; then
+    echo "⚡ scout-block: Skipped heavy directory [${TOOL_NAME}] $BASENAME/" >&2
+    exit 2
+  fi
+done
+
+exit 0

package/.claude/hooks/session-init.sh

@@ -1,74 +1,91 @@
-#!/usr/bin/env bash
-# .claude/hooks/session-init.sh — dw-kit v1.2
-# Inject active task context vào đầu session, giải quyết "session amnesia".
-# Chỉ chạy một lần mỗi session (track bằng session_id).
-#
-# UserPromptSubmit hook
-# Stdout output → được inject vào context của user prompt
-# exit 0 = allow
-
-INPUT=$(cat)
-
-SESSION_ID=$(echo "$INPUT" | node -e "
-let d='';
-process.stdin.on('data',c=>d+=c).on('end',()=>{
-  try{ process.stdout.write(JSON.parse(d).session_id||''); }catch(e){}
-});
-" 2>/dev/null || true)
-
-[ -z "$SESSION_ID" ] && exit 0
-
-# ── Track session: chỉ chạy một lần mỗi session ───────────────────────────────
-SESSION_MARKER="/tmp/dw-session-${SESSION_ID}"
-if [ -f "$SESSION_MARKER" ]; then
-  exit 0
-fi
-touch "$SESSION_MARKER" 2>/dev/null || true
-
-# ── Scan .dw/tasks/ tìm tasks In Progress ─────────────────────────────────────
-PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
-TASKS_DIR="$PROJECT_DIR/.dw/tasks"
-
-[ ! -d "$TASKS_DIR" ] && exit 0
-
-ACTIVE_TASKS=()
-ACTIVE_SUMMARIES=()
-
-while IFS= read -r progress_file; do
-  if grep -q "Trạng thái: In Progress" "$progress_file" 2>/dev/null; then
-    task_name=$(basename "$(dirname "$progress_file")")
-
-    # Extract current subtask (dòng "In Progress" trong table)
-    current_st=$(grep -m1 "In Progress" "$progress_file" 2>/dev/null \
-      | grep -oP '\| ST-\d+ \| [^|]+' | sed 's/|//g' | xargs 2>/dev/null || echo "")
-
-    # Extract last handoff note nếu có
-    last_handoff=$(awk '/## Handoff Notes/{found=1} found{print}' "$progress_file" 2>/dev/null \
-      | grep -m1 "Bước tiếp theo:" | sed 's/.*Bước tiếp theo://' | xargs 2>/dev/null || echo "")
-
-    ACTIVE_TASKS+=("$task_name")
-    summary="$task_name"
-    [ -n "$current_st" ] && summary="$summary — $current_st"
-    [ -n "$last_handoff" ] && summary="$summary | Next: $last_handoff"
-    ACTIVE_SUMMARIES+=("$summary")
-  fi
-done < <(find "$TASKS_DIR" -name "*-progress.md" 2>/dev/null)
-
-[ ${#ACTIVE_TASKS[@]} -eq 0 ] && exit 0
-
-# ── Output context vào stdout (injected vào conversation) ─────────────────────
-echo ""
-echo "---"
-echo "[dw-kit session-init] Task đang in-progress:"
-for summary in "${ACTIVE_SUMMARIES[@]}"; do
-  echo "  • $summary"
-done
-if [ ${#ACTIVE_TASKS[@]} -eq 1 ]; then
-  echo "Context: .dw/tasks/${ACTIVE_TASKS[0]}/"
-else
-  echo "Nhiều tasks đang active — hỏi user task nào cần tiếp tục."
-fi
-echo "---"
-echo ""
-
-exit 0
+#!/usr/bin/env bash
+# .claude/hooks/session-init.sh — dw-kit v1.2
+# Inject active task context vào đầu session, giải quyết "session amnesia".
+# Chỉ chạy một lần mỗi session (track bằng session_id).
+#
+# UserPromptSubmit hook
+# Stdout output → được inject vào context của user prompt
+# exit 0 = allow
+
+INPUT=$(cat)
+
+SESSION_ID=$(echo "$INPUT" | node -e "
+let d='';
+process.stdin.on('data',c=>d+=c).on('end',()=>{
+  try{ process.stdout.write(JSON.parse(d).session_id||''); }catch(e){}
+});
+" 2>/dev/null || true)
+
+# Tier 2: pure-bash grep fallback — works without node (e.g. node absent or CRLF-corrupt shebang)
+if [ -z "$SESSION_ID" ]; then
+  SESSION_ID=$(echo "$INPUT" | grep -o '"session_id":"[^"]*"' | cut -d'"' -f4 2>/dev/null || true)
+fi
+
+# Tier 3: project-scoped + hour-scoped stable ID
+# cksum is POSIX — available on Linux, macOS, and Git Bash on Windows.
+# Ensures marker is always created so re-injection is suppressed even when tiers 1+2 fail.
+if [ -z "$SESSION_ID" ]; then
+  _dir_hash=$(pwd | cksum | cut -d' ' -f1)
+  SESSION_ID="fallback-${_dir_hash}-$(date +%Y%m%d-%H)"
+fi
+
+# ── Track session: chỉ chạy một lần mỗi session ───────────────────────────────
+SESSION_MARKER="/tmp/dw-session-${SESSION_ID}"
+if [ -f "$SESSION_MARKER" ]; then
+  exit 0
+fi
+touch "$SESSION_MARKER" 2>/dev/null || true
+
+# Telemetry (once per session, fire-and-forget)
+TELEMETRY_SCRIPT="${CLAUDE_PROJECT_DIR:-$(pwd)}/.claude/hooks/telemetry-log.sh"
+if [ -x "$TELEMETRY_SCRIPT" ] && [ "${DW_NO_TELEMETRY:-}" != "1" ]; then
+  "$TELEMETRY_SCRIPT" hook session-init >/dev/null 2>&1 || true
+fi
+
+# ── Scan .dw/tasks/ tìm tasks In Progress ─────────────────────────────────────
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+TASKS_DIR="$PROJECT_DIR/.dw/tasks"
+
+[ ! -d "$TASKS_DIR" ] && exit 0
+
+ACTIVE_TASKS=()
+ACTIVE_SUMMARIES=()
+
+while IFS= read -r progress_file; do
+  if grep -q "Trạng thái: In Progress" "$progress_file" 2>/dev/null; then
+    task_name=$(basename "$(dirname "$progress_file")")
+
+    # Extract current subtask (dòng "In Progress" trong table)
+    current_st=$(grep -m1 "In Progress" "$progress_file" 2>/dev/null \
+      | grep -oP '\| ST-\d+ \| [^|]+' | sed 's/|//g' | xargs 2>/dev/null || echo "")
+
+    # Extract last handoff note nếu có
+    last_handoff=$(awk '/## Handoff Notes/{found=1} found{print}' "$progress_file" 2>/dev/null \
+      | grep -m1 "Bước tiếp theo:" | sed 's/.*Bước tiếp theo://' | xargs 2>/dev/null || echo "")
+
+    ACTIVE_TASKS+=("$task_name")
+    summary="$task_name"
+    [ -n "$current_st" ] && summary="$summary — $current_st"
+    [ -n "$last_handoff" ] && summary="$summary | Next: $last_handoff"
+    ACTIVE_SUMMARIES+=("$summary")
+  fi
+done < <(find "$TASKS_DIR" -name "*-progress.md" 2>/dev/null)
+
+[ ${#ACTIVE_TASKS[@]} -eq 0 ] && exit 0
+
+# ── Output context vào stdout (injected vào conversation) ─────────────────────
+echo ""
+echo "---"
+echo "[dw-kit session-init] Task đang in-progress:"
+for summary in "${ACTIVE_SUMMARIES[@]}"; do
+  echo "  • $summary"
+done
+if [ ${#ACTIVE_TASKS[@]} -eq 1 ]; then
+  echo "Context: .dw/tasks/${ACTIVE_TASKS[0]}/"
+else
+  echo "Nhiều tasks đang active — hỏi user task nào cần tiếp tục."
+fi
+echo "---"
+echo ""
+
+exit 0

package/.claude/hooks/stop-check.sh

@@ -1,36 +1,88 @@
-#!/usr/bin/env bash
-# Stop hook: warn nếu có uncommitted changes hoặc task in-progress chưa update
-# Output ra stderr để hiện thị cho user, exit 0 để không block
-
-PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
-WARNINGS=()
-
-# Check uncommitted changes
-if git -C "$PROJECT_DIR" diff --quiet && git -C "$PROJECT_DIR" diff --cached --quiet; then
-  : # clean
-else
-  CHANGED=$(git -C "$PROJECT_DIR" diff --stat --cached && git -C "$PROJECT_DIR" diff --stat)
-  WARNINGS+=("Uncommitted changes:"$'\n'"$CHANGED")
-fi
-
-# Check in-progress tasks
-TASKS_DIR="$PROJECT_DIR/.dw/tasks"
-if [ -d "$TASKS_DIR" ]; then
-  while IFS= read -r progress_file; do
-    if grep -q "Trạng thái: In Progress" "$progress_file" 2>/dev/null; then
-      task_name=$(basename "$(dirname "$progress_file")")
-      WARNINGS+=("Task in-progress chưa được update: $task_name")
-    fi
-  done < <(find "$TASKS_DIR" -name "*-progress.md" 2>/dev/null)
-fi
-
-# Print warnings
-if [ ${#WARNINGS[@]} -gt 0 ]; then
-  echo "--- dw stop-check ---" >&2
-  for w in "${WARNINGS[@]}"; do
-    printf "⚠ %b\n" "$w" >&2
-  done
-  echo "---------------------" >&2
-fi
-
-exit 0
+#!/usr/bin/env bash
+# Stop hook: warn on uncommitted changes + auto-append handoff to active task tracking.md
+# v1.4: auto-handoff (ST-2.5) — append session summary to tracking.md when uncommitted
+# Output via stderr for user visibility. Always exit 0 (non-blocking).
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+WARNINGS=()
+
+# --- Telemetry (local, fire-and-forget) ---
+TELEMETRY_SCRIPT="$PROJECT_DIR/.claude/hooks/telemetry-log.sh"
+if [ -x "$TELEMETRY_SCRIPT" ] && [ "${DW_NO_TELEMETRY:-}" != "1" ]; then
+  "$TELEMETRY_SCRIPT" hook stop-check >/dev/null 2>&1 || true
+fi
+
+# --- Check uncommitted changes ---
+HAS_UNCOMMITTED=0
+if git -C "$PROJECT_DIR" diff --quiet && git -C "$PROJECT_DIR" diff --cached --quiet; then
+  : # clean
+else
+  HAS_UNCOMMITTED=1
+  CHANGED=$(git -C "$PROJECT_DIR" diff --stat --cached && git -C "$PROJECT_DIR" diff --stat)
+  WARNINGS+=("Uncommitted changes:"$'\n'"$CHANGED")
+fi
+
+# --- Check in-progress tasks (both v1 3-file and v2 2-file formats) ---
+TASKS_DIR="$PROJECT_DIR/.dw/tasks"
+ACTIVE_TASK=""
+
+if [ -d "$TASKS_DIR" ]; then
+  # v1 format: {task}-progress.md with "Trạng thái: In Progress"
+  while IFS= read -r progress_file; do
+    if grep -q "Trạng thái: In Progress" "$progress_file" 2>/dev/null; then
+      task_name=$(basename "$(dirname "$progress_file")")
+      WARNINGS+=("Task in-progress (v1): $task_name")
+      [ -z "$ACTIVE_TASK" ] && ACTIVE_TASK="$task_name"
+    fi
+  done < <(find "$TASKS_DIR" -maxdepth 3 -name "*-progress.md" -not -path "*/archive/*" 2>/dev/null)
+
+  # v2 format: tracking.md with frontmatter status In Progress
+  while IFS= read -r tracking_file; do
+    if grep -qE "^status:.*(In Progress|Code Complete)" "$tracking_file" 2>/dev/null; then
+      task_name=$(basename "$(dirname "$tracking_file")")
+      WARNINGS+=("Task active (v2): $task_name")
+      [ -z "$ACTIVE_TASK" ] && ACTIVE_TASK="$task_name"
+    fi
+  done < <(find "$TASKS_DIR" -maxdepth 3 -name "tracking.md" -not -path "*/archive/*" 2>/dev/null)
+fi
+
+# --- Auto-handoff: append snippet to active task's tracking.md if uncommitted + active task ---
+if [ "$HAS_UNCOMMITTED" = "1" ] && [ -n "$ACTIVE_TASK" ]; then
+  TRACKING_FILE="$TASKS_DIR/$ACTIVE_TASK/tracking.md"
+  if [ -f "$TRACKING_FILE" ]; then
+    TS=$(date -u +"%Y-%m-%d %H:%M UTC")
+    MARKER="<!-- dw-auto-handoff -->"
+
+    # Only append if no handoff snippet added in last 10 minutes (idempotency via marker + timestamp grep)
+    if ! grep -q "$MARKER.*$TS" "$TRACKING_FILE" 2>/dev/null; then
+      {
+        echo ""
+        echo "$MARKER"
+        echo "### Auto-handoff — $TS"
+        echo ""
+        echo "Session ended with uncommitted changes."
+        echo ""
+        echo "**Files changed:**"
+        echo '```'
+        git -C "$PROJECT_DIR" diff --stat --cached 2>/dev/null
+        git -C "$PROJECT_DIR" diff --stat 2>/dev/null
+        echo '```'
+        echo ""
+        echo "Next session: commit or continue work. Re-read spec.md + this tracking.md first."
+        echo ""
+      } >> "$TRACKING_FILE" 2>/dev/null
+      WARNINGS+=("Auto-handoff appended to: $TRACKING_FILE")
+    fi
+  fi
+fi
+
+# --- Print warnings ---
+if [ ${#WARNINGS[@]} -gt 0 ]; then
+  printf -- "--- dw stop-check ---\n" >&2
+  for w in "${WARNINGS[@]}"; do
+    printf "⚠ %b\n" "$w" >&2
+  done
+  printf -- "---------------------\n" >&2
+fi
+
+exit 0

package/.claude/hooks/telemetry-log.sh

@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+# Lightweight telemetry logger — invoked by other hooks to record events.
+# Usage: telemetry-log.sh <event-type> <name> [result] [latency_ms]
+# Silently no-ops if DW_NO_TELEMETRY=1 or .dw/metrics unavailable.
+
+set -e
+
+if [ "${DW_NO_TELEMETRY:-}" = "1" ] || [ "${DW_NO_TELEMETRY:-}" = "true" ]; then
+  exit 0
+fi
+
+EVENT_TYPE="${1:-unknown}"
+NAME="${2:-unknown}"
+RESULT="${3:-}"
+LATENCY="${4:-}"
+
+METRICS_DIR=".dw/metrics"
+EVENTS_FILE="$METRICS_DIR/events.jsonl"
+
+if [ ! -d "$METRICS_DIR" ]; then
+  mkdir -p "$METRICS_DIR" 2>/dev/null || exit 0
+fi
+
+TS=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+SESSION_HASH=$(echo "$$:${CLAUDE_SESSION_ID:-default}" | sha256sum 2>/dev/null | cut -c1-8 || echo "unknown")
+
+JSON="{\"ts\":\"$TS\",\"session\":\"$SESSION_HASH\",\"event\":\"$EVENT_TYPE\",\"name\":\"$NAME\""
+[ -n "$RESULT" ] && JSON="$JSON,\"result\":\"$RESULT\""
+[ -n "$LATENCY" ] && JSON="$JSON,\"latency_ms\":$LATENCY"
+JSON="$JSON}"
+
+echo "$JSON" >> "$EVENTS_FILE" 2>/dev/null || true
+
+exit 0