dw-kit 1.2.1 → 1.3.0

package/.claude/hooks/safety-guard.sh

@@ -1,54 +1,60 @@
-#!/bin/bash
-# .claude/hooks/safety-guard.sh
-# Intercept destructive Bash commands trước khi execute.
-# exit 0 = allow, exit 2 = block
-#
-# Được gọi bởi PreToolUse hook cho tất cả Bash commands.
-
-INPUT=$(cat)
-
-COMMAND=$(echo "$INPUT" | grep -o '"command"[[:space:]]*:[[:space:]]*"[^"]*"' \
-  | sed 's/"command"[[:space:]]*:[[:space:]]*"//;s/"$//' | head -1)
-
-[ -z "$COMMAND" ] && exit 0
-
-# ── Pattern 1: rm -rf với path quá rộng ──────────────────────────────────────
-# Block: rm -rf / | rm -rf * | rm -rf . (nguy hiểm)
-# Allow: rm -rf ./specific/path | rm -rf /tmp/specific-file
-if echo "$COMMAND" | grep -qE 'rm\s+-rf?\s+(\/\s*$|\*|\.(\s|$))'; then
-  echo "🚨 BLOCKED: rm -rf với path nguy hiểm ($COMMAND)" >&2
-  echo "   Chỉ định path cụ thể hơn để proceed." >&2
-  exit 2
-fi
-
-# ── Pattern 2: git push --force lên main/master ───────────────────────────────
-if echo "$COMMAND" | grep -qE 'git\s+push\s+.*--force'; then
-  BRANCH=$(echo "$COMMAND" | grep -oE '(main|master|develop|dev)' | head -1)
-  if [ -n "$BRANCH" ]; then
-    echo "🚨 BLOCKED: git push --force lên $BRANCH" >&2
-    echo "   Force push lên protected branch không được phép." >&2
-    exit 2
-  fi
-  # Force push lên non-protected branch: warn nhưng allow
-  echo "⚠  Warning: git push --force (non-protected branch)" >&2
-  echo "   Proceed nếu intentional." >&2
-  exit 0
-fi
-
-# ── Pattern 3: Destructive SQL không có WHERE ─────────────────────────────────
-if echo "$COMMAND" | grep -qiE '(DELETE\s+FROM|UPDATE\s+\w+\s+SET)' \
-   && ! echo "$COMMAND" | grep -qi 'WHERE'; then
-  echo "🚨 BLOCKED: Destructive SQL không có WHERE clause" >&2
-  echo "   Thêm WHERE clause hoặc confirm intentional." >&2
-  exit 2
-fi
-
-# ── Pattern 4: DROP TABLE / DROP DATABASE ────────────────────────────────────
-if echo "$COMMAND" | grep -qiE 'DROP\s+(TABLE|DATABASE|SCHEMA)'; then
-  echo "⚠  Warning: DROP statement detected ($COMMAND)" >&2
-  echo "   Đây có phải migration script đã được review không?" >&2
-  # Warn but allow — user có thể đang chạy migration
-  exit 0
-fi
-
-exit 0
+#!/bin/bash
+# .claude/hooks/safety-guard.sh
+# Intercept destructive Bash commands trước khi execute.
+# exit 0 = allow, exit 2 = block
+#
+# Được gọi bởi PreToolUse hook cho tất cả Bash commands.
+
+# Telemetry (local, fire-and-forget)
+TELEMETRY_SCRIPT="${CLAUDE_PROJECT_DIR:-$(pwd)}/.claude/hooks/telemetry-log.sh"
+if [ -x "$TELEMETRY_SCRIPT" ] && [ "${DW_NO_TELEMETRY:-}" != "1" ]; then
+  "$TELEMETRY_SCRIPT" hook safety-guard >/dev/null 2>&1 || true
+fi
+
+INPUT=$(cat)
+
+COMMAND=$(echo "$INPUT" | grep -o '"command"[[:space:]]*:[[:space:]]*"[^"]*"' \
+  | sed 's/"command"[[:space:]]*:[[:space:]]*"//;s/"$//' | head -1)
+
+[ -z "$COMMAND" ] && exit 0
+
+# ── Pattern 1: rm -rf với path quá rộng ──────────────────────────────────────
+# Block: rm -rf / | rm -rf * | rm -rf . (nguy hiểm)
+# Allow: rm -rf ./specific/path | rm -rf /tmp/specific-file
+if echo "$COMMAND" | grep -qE 'rm\s+-rf?\s+(\/\s*$|\*|\.(\s|$))'; then
+  echo "🚨 BLOCKED: rm -rf với path nguy hiểm ($COMMAND)" >&2
+  echo "   Chỉ định path cụ thể hơn để proceed." >&2
+  exit 2
+fi
+
+# ── Pattern 2: git push --force lên main/master ───────────────────────────────
+if echo "$COMMAND" | grep -qE 'git\s+push\s+.*--force'; then
+  BRANCH=$(echo "$COMMAND" | grep -oE '(main|master|develop|dev)' | head -1)
+  if [ -n "$BRANCH" ]; then
+    echo "🚨 BLOCKED: git push --force lên $BRANCH" >&2
+    echo "   Force push lên protected branch không được phép." >&2
+    exit 2
+  fi
+  # Force push lên non-protected branch: warn nhưng allow
+  echo "⚠  Warning: git push --force (non-protected branch)" >&2
+  echo "   Proceed nếu intentional." >&2
+  exit 0
+fi
+
+# ── Pattern 3: Destructive SQL không có WHERE ─────────────────────────────────
+if echo "$COMMAND" | grep -qiE '(DELETE\s+FROM|UPDATE\s+\w+\s+SET)' \
+   && ! echo "$COMMAND" | grep -qi 'WHERE'; then
+  echo "🚨 BLOCKED: Destructive SQL không có WHERE clause" >&2
+  echo "   Thêm WHERE clause hoặc confirm intentional." >&2
+  exit 2
+fi
+
+# ── Pattern 4: DROP TABLE / DROP DATABASE ────────────────────────────────────
+if echo "$COMMAND" | grep -qiE 'DROP\s+(TABLE|DATABASE|SCHEMA)'; then
+  echo "⚠  Warning: DROP statement detected ($COMMAND)" >&2
+  echo "   Đây có phải migration script đã được review không?" >&2
+  # Warn but allow — user có thể đang chạy migration
+  exit 0
+fi
+
+exit 0

package/.claude/hooks/scout-block.sh

@@ -1,82 +1,88 @@
-#!/usr/bin/env bash
-# .claude/hooks/scout-block.sh — dw-kit v1.2
-# Block agent reads vào heavy/irrelevant directories để tăng performance.
-# Học từ claudekit scout-block pattern.
-#
-# PreToolUse hook cho: Read, Glob
-# exit 0 = allow, exit 2 = block
-
-INPUT=$(cat)
-
-# Extract tool name và file path từ JSON input
-TOOL_NAME=$(echo "$INPUT" | node -e "
-let d='';
-process.stdin.on('data',c=>d+=c).on('end',()=>{
-  try{ process.stdout.write(JSON.parse(d).tool_name||''); }catch(e){}
-});
-" 2>/dev/null || true)
-
-# Extract path tùy theo tool
-if [ "$TOOL_NAME" = "Read" ]; then
-  TARGET=$(echo "$INPUT" | node -e "
-let d='';
-process.stdin.on('data',c=>d+=c).on('end',()=>{
-  try{ const p=JSON.parse(d); process.stdout.write((p.tool_input&&p.tool_input.file_path)||''); }catch(e){}
-});
-" 2>/dev/null || true)
-elif [ "$TOOL_NAME" = "Glob" ]; then
-  TARGET=$(echo "$INPUT" | node -e "
-let d='';
-process.stdin.on('data',c=>d+=c).on('end',()=>{
-  try{ const p=JSON.parse(d); const ti=p.tool_input||{}; process.stdout.write(ti.path||ti.pattern||''); }catch(e){}
-});
-" 2>/dev/null || true)
-else
-  exit 0
-fi
-
-[ -z "$TARGET" ] && exit 0
-
-# Normalize: lowercase, forward slashes
-NORM=$(echo "$TARGET" | tr '\\' '/')
-
-# ── Danh sách heavy/irrelevant directories ─────────────────────────────────────
-BLOCKED_PATTERNS=(
-  "node_modules/"
-  "/node_modules"
-  "dist/"
-  "/dist/"
-  "build/"
-  "/build/"
-  ".git/"
-  "/__pycache__/"
-  "/.pytest_cache/"
-  "/.next/"
-  "/.nuxt/"
-  "/vendor/"
-  "/coverage/"
-  "/.tmp/"
-  "/tmp/"
-  "/.cache/"
-)
-
-for pattern in "${BLOCKED_PATTERNS[@]}"; do
-  if echo "$NORM" | grep -q "$pattern"; then
-    echo "⚡ scout-block: Skipped heavy directory [${TOOL_NAME}] $(basename "$TARGET")/" >&2
-    echo "   Path: $TARGET" >&2
-    echo "   Dùng path cụ thể hơn nếu thực sự cần đọc file này." >&2
-    exit 2
-  fi
-done
-
-# Block pattern: kết thúc bằng thư mục blocked (không có trailing slash)
-BLOCKED_EXACT=("node_modules" ".git" "dist" "build" "__pycache__" ".next" ".nuxt" "vendor" "coverage")
-BASENAME=$(basename "$NORM")
-for exact in "${BLOCKED_EXACT[@]}"; do
-  if [ "$BASENAME" = "$exact" ]; then
-    echo "⚡ scout-block: Skipped heavy directory [${TOOL_NAME}] $BASENAME/" >&2
-    exit 2
-  fi
-done
-
-exit 0
+#!/usr/bin/env bash
+# .claude/hooks/scout-block.sh — dw-kit v1.2
+# Block agent reads vào heavy/irrelevant directories để tăng performance.
+# Học từ claudekit scout-block pattern.
+#
+# PreToolUse hook cho: Read, Glob
+# exit 0 = allow, exit 2 = block
+
+# Telemetry (local, fire-and-forget)
+TELEMETRY_SCRIPT="${CLAUDE_PROJECT_DIR:-$(pwd)}/.claude/hooks/telemetry-log.sh"
+if [ -x "$TELEMETRY_SCRIPT" ] && [ "${DW_NO_TELEMETRY:-}" != "1" ]; then
+  "$TELEMETRY_SCRIPT" hook scout-block >/dev/null 2>&1 || true
+fi
+
+INPUT=$(cat)
+
+# Extract tool name và file path từ JSON input
+TOOL_NAME=$(echo "$INPUT" | node -e "
+let d='';
+process.stdin.on('data',c=>d+=c).on('end',()=>{
+  try{ process.stdout.write(JSON.parse(d).tool_name||''); }catch(e){}
+});
+" 2>/dev/null || true)
+
+# Extract path tùy theo tool
+if [ "$TOOL_NAME" = "Read" ]; then
+  TARGET=$(echo "$INPUT" | node -e "
+let d='';
+process.stdin.on('data',c=>d+=c).on('end',()=>{
+  try{ const p=JSON.parse(d); process.stdout.write((p.tool_input&&p.tool_input.file_path)||''); }catch(e){}
+});
+" 2>/dev/null || true)
+elif [ "$TOOL_NAME" = "Glob" ]; then
+  TARGET=$(echo "$INPUT" | node -e "
+let d='';
+process.stdin.on('data',c=>d+=c).on('end',()=>{
+  try{ const p=JSON.parse(d); const ti=p.tool_input||{}; process.stdout.write(ti.path||ti.pattern||''); }catch(e){}
+});
+" 2>/dev/null || true)
+else
+  exit 0
+fi
+
+[ -z "$TARGET" ] && exit 0
+
+# Normalize: lowercase, forward slashes
+NORM=$(echo "$TARGET" | tr '\\' '/')
+
+# ── Danh sách heavy/irrelevant directories ─────────────────────────────────────
+BLOCKED_PATTERNS=(
+  "node_modules/"
+  "/node_modules"
+  "dist/"
+  "/dist/"
+  "build/"
+  "/build/"
+  ".git/"
+  "/__pycache__/"
+  "/.pytest_cache/"
+  "/.next/"
+  "/.nuxt/"
+  "/vendor/"
+  "/coverage/"
+  "/.tmp/"
+  "/tmp/"
+  "/.cache/"
+)
+
+for pattern in "${BLOCKED_PATTERNS[@]}"; do
+  if echo "$NORM" | grep -q "$pattern"; then
+    echo "⚡ scout-block: Skipped heavy directory [${TOOL_NAME}] $(basename "$TARGET")/" >&2
+    echo "   Path: $TARGET" >&2
+    echo "   Dùng path cụ thể hơn nếu thực sự cần đọc file này." >&2
+    exit 2
+  fi
+done
+
+# Block pattern: kết thúc bằng thư mục blocked (không có trailing slash)
+BLOCKED_EXACT=("node_modules" ".git" "dist" "build" "__pycache__" ".next" ".nuxt" "vendor" "coverage")
+BASENAME=$(basename "$NORM")
+for exact in "${BLOCKED_EXACT[@]}"; do
+  if [ "$BASENAME" = "$exact" ]; then
+    echo "⚡ scout-block: Skipped heavy directory [${TOOL_NAME}] $BASENAME/" >&2
+    exit 2
+  fi
+done
+
+exit 0

package/.claude/hooks/session-init.sh

@@ -36,6 +36,12 @@ if [ -f "$SESSION_MARKER" ]; then
 fi
 touch "$SESSION_MARKER" 2>/dev/null || true
 
+# Telemetry (once per session, fire-and-forget)
+TELEMETRY_SCRIPT="${CLAUDE_PROJECT_DIR:-$(pwd)}/.claude/hooks/telemetry-log.sh"
+if [ -x "$TELEMETRY_SCRIPT" ] && [ "${DW_NO_TELEMETRY:-}" != "1" ]; then
+  "$TELEMETRY_SCRIPT" hook session-init >/dev/null 2>&1 || true
+fi
+
 # ── Scan .dw/tasks/ tìm tasks In Progress ─────────────────────────────────────
 PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
 TASKS_DIR="$PROJECT_DIR/.dw/tasks"

package/.claude/hooks/stop-check.sh

@@ -1,36 +1,88 @@
-#!/usr/bin/env bash
-# Stop hook: warn nếu có uncommitted changes hoặc task in-progress chưa update
-# Output ra stderr để hiện thị cho user, exit 0 để không block
-
-PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
-WARNINGS=()
-
-# Check uncommitted changes
-if git -C "$PROJECT_DIR" diff --quiet && git -C "$PROJECT_DIR" diff --cached --quiet; then
-  : # clean
-else
-  CHANGED=$(git -C "$PROJECT_DIR" diff --stat --cached && git -C "$PROJECT_DIR" diff --stat)
-  WARNINGS+=("Uncommitted changes:"$'\n'"$CHANGED")
-fi
-
-# Check in-progress tasks
-TASKS_DIR="$PROJECT_DIR/.dw/tasks"
-if [ -d "$TASKS_DIR" ]; then
-  while IFS= read -r progress_file; do
-    if grep -q "Trạng thái: In Progress" "$progress_file" 2>/dev/null; then
-      task_name=$(basename "$(dirname "$progress_file")")
-      WARNINGS+=("Task in-progress chưa được update: $task_name")
-    fi
-  done < <(find "$TASKS_DIR" -name "*-progress.md" 2>/dev/null)
-fi
-
-# Print warnings
-if [ ${#WARNINGS[@]} -gt 0 ]; then
-  echo "--- dw stop-check ---" >&2
-  for w in "${WARNINGS[@]}"; do
-    printf "⚠ %b\n" "$w" >&2
-  done
-  echo "---------------------" >&2
-fi
-
-exit 0
+#!/usr/bin/env bash
+# Stop hook: warn on uncommitted changes + auto-append handoff to active task tracking.md
+# v1.4: auto-handoff (ST-2.5) — append session summary to tracking.md when uncommitted
+# Output via stderr for user visibility. Always exit 0 (non-blocking).
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+WARNINGS=()
+
+# --- Telemetry (local, fire-and-forget) ---
+TELEMETRY_SCRIPT="$PROJECT_DIR/.claude/hooks/telemetry-log.sh"
+if [ -x "$TELEMETRY_SCRIPT" ] && [ "${DW_NO_TELEMETRY:-}" != "1" ]; then
+  "$TELEMETRY_SCRIPT" hook stop-check >/dev/null 2>&1 || true
+fi
+
+# --- Check uncommitted changes ---
+HAS_UNCOMMITTED=0
+if git -C "$PROJECT_DIR" diff --quiet && git -C "$PROJECT_DIR" diff --cached --quiet; then
+  : # clean
+else
+  HAS_UNCOMMITTED=1
+  CHANGED=$(git -C "$PROJECT_DIR" diff --stat --cached && git -C "$PROJECT_DIR" diff --stat)
+  WARNINGS+=("Uncommitted changes:"$'\n'"$CHANGED")
+fi
+
+# --- Check in-progress tasks (both v1 3-file and v2 2-file formats) ---
+TASKS_DIR="$PROJECT_DIR/.dw/tasks"
+ACTIVE_TASK=""
+
+if [ -d "$TASKS_DIR" ]; then
+  # v1 format: {task}-progress.md with "Trạng thái: In Progress"
+  while IFS= read -r progress_file; do
+    if grep -q "Trạng thái: In Progress" "$progress_file" 2>/dev/null; then
+      task_name=$(basename "$(dirname "$progress_file")")
+      WARNINGS+=("Task in-progress (v1): $task_name")
+      [ -z "$ACTIVE_TASK" ] && ACTIVE_TASK="$task_name"
+    fi
+  done < <(find "$TASKS_DIR" -maxdepth 3 -name "*-progress.md" -not -path "*/archive/*" 2>/dev/null)
+
+  # v2 format: tracking.md with frontmatter status In Progress
+  while IFS= read -r tracking_file; do
+    if grep -qE "^status:.*(In Progress|Code Complete)" "$tracking_file" 2>/dev/null; then
+      task_name=$(basename "$(dirname "$tracking_file")")
+      WARNINGS+=("Task active (v2): $task_name")
+      [ -z "$ACTIVE_TASK" ] && ACTIVE_TASK="$task_name"
+    fi
+  done < <(find "$TASKS_DIR" -maxdepth 3 -name "tracking.md" -not -path "*/archive/*" 2>/dev/null)
+fi
+
+# --- Auto-handoff: append snippet to active task's tracking.md if uncommitted + active task ---
+if [ "$HAS_UNCOMMITTED" = "1" ] && [ -n "$ACTIVE_TASK" ]; then
+  TRACKING_FILE="$TASKS_DIR/$ACTIVE_TASK/tracking.md"
+  if [ -f "$TRACKING_FILE" ]; then
+    TS=$(date -u +"%Y-%m-%d %H:%M UTC")
+    MARKER="<!-- dw-auto-handoff -->"
+
+    # Only append if no handoff snippet added in last 10 minutes (idempotency via marker + timestamp grep)
+    if ! grep -q "$MARKER.*$TS" "$TRACKING_FILE" 2>/dev/null; then
+      {
+        echo ""
+        echo "$MARKER"
+        echo "### Auto-handoff — $TS"
+        echo ""
+        echo "Session ended with uncommitted changes."
+        echo ""
+        echo "**Files changed:**"
+        echo '```'
+        git -C "$PROJECT_DIR" diff --stat --cached 2>/dev/null
+        git -C "$PROJECT_DIR" diff --stat 2>/dev/null
+        echo '```'
+        echo ""
+        echo "Next session: commit or continue work. Re-read spec.md + this tracking.md first."
+        echo ""
+      } >> "$TRACKING_FILE" 2>/dev/null
+      WARNINGS+=("Auto-handoff appended to: $TRACKING_FILE")
+    fi
+  fi
+fi
+
+# --- Print warnings ---
+if [ ${#WARNINGS[@]} -gt 0 ]; then
+  printf -- "--- dw stop-check ---\n" >&2
+  for w in "${WARNINGS[@]}"; do
+    printf "⚠ %b\n" "$w" >&2
+  done
+  printf -- "---------------------\n" >&2
+fi
+
+exit 0

package/.claude/hooks/telemetry-log.sh

@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+# Lightweight telemetry logger — invoked by other hooks to record events.
+# Usage: telemetry-log.sh <event-type> <name> [result] [latency_ms]
+# Silently no-ops if DW_NO_TELEMETRY=1 or .dw/metrics unavailable.
+
+set -e
+
+if [ "${DW_NO_TELEMETRY:-}" = "1" ] || [ "${DW_NO_TELEMETRY:-}" = "true" ]; then
+  exit 0
+fi
+
+EVENT_TYPE="${1:-unknown}"
+NAME="${2:-unknown}"
+RESULT="${3:-}"
+LATENCY="${4:-}"
+
+METRICS_DIR=".dw/metrics"
+EVENTS_FILE="$METRICS_DIR/events.jsonl"
+
+if [ ! -d "$METRICS_DIR" ]; then
+  mkdir -p "$METRICS_DIR" 2>/dev/null || exit 0
+fi
+
+TS=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
+SESSION_HASH=$(echo "$$:${CLAUDE_SESSION_ID:-default}" | sha256sum 2>/dev/null | cut -c1-8 || echo "unknown")
+
+JSON="{\"ts\":\"$TS\",\"session\":\"$SESSION_HASH\",\"event\":\"$EVENT_TYPE\",\"name\":\"$NAME\""
+[ -n "$RESULT" ] && JSON="$JSON,\"result\":\"$RESULT\""
+[ -n "$LATENCY" ] && JSON="$JSON,\"latency_ms\":$LATENCY"
+JSON="$JSON}"
+
+echo "$JSON" >> "$EVENTS_FILE" 2>/dev/null || true
+
+exit 0

package/.claude/rules/dw.md

@@ -0,0 +1,136 @@
+# dw Workflow (consolidated)
+
+Config: `.dw/config/dw.config.yml`
+Full methodology: `.dw/core/` (WORKFLOW · THINKING · QUALITY · ROLES · PILLARS)
+
+---
+
+## Override
+
+Prompt contains `--no-dw` → ignore all dw instructions for that request, work as plain Claude Code.
+
+---
+
+## 5-Pillar Architecture (v2.0)
+
+| Pillar | Role | Owners | Examples |
+|--------|------|--------|----------|
+| **Guards** | Block unsafe actions | privacy-block, pre-commit-gate | Non-negotiable safety |
+| **Surfaces** | Make state visible | ACTIVE.md, project-map, modules | Shared team context |
+| **Records** | Capture decisions | ADRs in `.dw/decisions/` | Organizational memory |
+| **Bridges** | Connect across sessions | auto-handoff, tracking.md | Continuity over time |
+| **Tunes** | Behavioral knobs | roles, depth, presets | Team/solo customization |
+
+---
+
+## Depth Routing
+
+Assess per task — file count, API changes, git blame:
+
+| Scope | Depth | Approach |
+|-------|-------|----------|
+| ≤2 files, hotfix | quick | Understand → Execute → Close |
+| 3–5 files, new module | standard | spec.md + tracking.md |
+| 6+ files, API/DB/security | thorough | Full 2-file + optional reports/ |
+
+Default when unsure: `standard`.
+
+---
+
+## Session Start
+
+1. Read `.dw/tasks/ACTIVE.md` — single source of truth for team state
+2. Resume any task with status `In Progress` from its `tracking.md`
+3. Check `.dw/decisions/` for recent ADRs if task touches architecture
+
+---
+
+## Task Docs (v2 default — 2 files)
+
+```
+.dw/tasks/{task-name}/
+├── spec.md      # Intent + plan (stable after approve)
+└── tracking.md  # Progress + handoff (mutable)
+```
+
+Legacy 3-file (`context + plan + progress`) still supported for older tasks.
+
+Templates at `.dw/core/templates/v2/`.
+
+---
+
+## Skills — Namespace `/dw:*`
+
+All dw skills invoke via `/dw:{name}` (colon namespace separator).
+
+Core workflow: `/dw:flow` · `/dw:task-init` · `/dw:research` · `/dw:plan` · `/dw:execute` · `/dw:commit` · `/dw:handoff`
+
+Decisions: `/dw:decision [title]` — create ADR
+
+Dev: `/dw:debug` · `/dw:review` · `/dw:thinking` · `/dw:prompt` · `/dw:docs-update`
+
+Role-specific: `/dw:requirements` · `/dw:test-plan` · `/dw:arch-review` · `/dw:dashboard` · `/dw:sprint-review`
+
+Setup: `/dw:onboard` · `/dw:retroactive` · `/dw:config-init` · `/dw:upgrade` · `/dw:rollback` · `/dw:archive`
+
+See `.dw/core/skills-index.md` for complete list with descriptions.
+
+---
+
+## Commit Format
+
+```
+<type>(<scope>): <description ≤72 chars>
+```
+
+Types: `feat` `fix` `refactor` `test` `docs` `chore` `style` `perf`
+
+---
+
+## Hooks
+
+| Hook | Purpose |
+|------|---------|
+| `privacy-block` | Guard — block .env/credentials/keys |
+| `pre-commit-gate` | Guard — quality check + sensitive scan |
+| `stop-check` | Bridge — auto-handoff to tracking.md + uncommitted warning |
+| `telemetry-log` | Meta — local event log for v1.4 cut decisions |
+
+Legacy (deprecated, removal in v2.0 based on telemetry): scout-block, post-write, progress-ping, session-init, safety-guard.
+
+---
+
+## Decisions Layer
+
+ADRs at `.dw/decisions/{NNNN}-{title}.md`. Create with `/dw:decision`.
+
+Status values: `Proposed | Accepted | Deprecated | Superseded by ADR-{NNNN}`
+
+When to write: architectural choice · cross-cutting concern · breaking change · trade-off with long-term impact.
+
+---
+
+## Telemetry (Local-Only)
+
+- Storage: `.dw/metrics/events.jsonl`
+- Inspect: `dw metrics show`
+- Privacy: zero network; `DW_NO_TELEMETRY=1` to disable
+- Used for: v1.4 data-driven cut decisions (internal teams only)
+
+---
+
+## Config Local Override
+
+`.dw/config/dw.config.local.yml` (gitignored) for machine-specific overrides.
+
+---
+
+## Presets
+
+| Preset | Audience | Config |
+|--------|----------|--------|
+| `solo` | Vibe coders, solo dev | Guards only, zero task docs |
+| `team` | 5-15 dev teams | Full hooks, tracking encouraged |
+| `enterprise` | Regulated / large teams | Full + roles + audit |
+
+Install: `dw init --preset {name}` or `dw init --solo`.

package/.claude/settings.json

@@ -13,7 +13,26 @@
       "Bash(git stash list)",
       "Bash(ls *)",
       "Bash(wc *)",
-      "Bash(node src/smoke-test.mjs)"
+      "Bash(node src/smoke-test.mjs)",
+      "Bash(xargs echo *)",
+      "Edit(/.claude/skills/dw-decision/**)",
+      "Bash(node bin/dw.mjs active)",
+      "Bash(node bin/dw.mjs metrics show)",
+      "Bash(node bin/dw.mjs dashboard)",
+      "Bash(node bin/dw.mjs init --help)",
+      "Bash(mkdir -p /tmp/test-solo)",
+      "Read(//tmp/**)",
+      "Bash(DW_NAME=test node /d/huygdv_projects/dw-kit/bin/dw.mjs init --solo)",
+      "Bash(npm test *)",
+      "Bash(node bin/dw.mjs metrics cut-analysis)",
+      "Bash(bash -n .claude/hooks/pre-commit-gate.sh)",
+      "Bash(bash -n /dev/stdin)",
+      "Bash(dos2unix .claude/hooks/pre-commit-gate.sh)",
+      "Bash(sed -i 's/\\\\r$//' .claude/hooks/pre-commit-gate.sh)",
+      "Bash(git add *)"
+    ],
+    "additionalDirectories": [
+      "D:\\huygdv_projects\\dw-kit\\.claude\\rules"
     ]
   },
   "hooks": {