monomind 1.11.9 → 1.11.10

package/.claude/agents/github/issue-tracker.md

@@ -39,7 +39,7 @@ mcp__monomind__agent_spawn { type: "coder", name: "Implementation Planner" }
 
 // Create comprehensive issue
 mcp__github__create_issue {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind",
   title: "Integration Review: Monomind CLI and hooks complete integration",
   body: `## 🔄 Integration Review
@@ -56,7 +56,7 @@ mcp__github__create_issue {
   ### Swarm Coordination
   This issue will be managed by coordinated swarm agents for optimal progress tracking.`,
   labels: ["integration", "review", "enhancement"],
-  assignees: ["nokhodian"]
+  assignees: ["monoes"]
 }
 
 // Set up automated tracking
@@ -77,7 +77,7 @@ mcp__monomind__memory_store {
 
 // Add coordinated progress comment
 mcp__github__add_issue_comment {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind",
   issue_number: 54,
   body: `## 🚀 Progress Update
@@ -110,14 +110,14 @@ mcp__monomind__memory_store {
 ```javascript
 // Search and coordinate related issues
 mcp__github__search_issues {
-  q: "repo:nokhodian/monomind label:integration state:open",
+  q: "repo:monoes/monomind label:integration state:open",
   sort: "created",
   order: "desc"
 }
 
 // Create coordinated issue updates
 mcp__github__update_issue {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind",
   issue_number: 54,
   state: "open",

package/.claude/agents/github/pr-manager.md

@@ -29,7 +29,7 @@ mcp__monomind__agent_spawn { type: "coordinator", name: "PR Coordinator" }
 
 // Create PR and orchestrate review
 mcp__github__create_pull_request {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind",
   title: "Integration: Monomind CLI and hooks",
   head: "integration/monomind-cli-hooks",
@@ -48,11 +48,11 @@ mcp__monomind__task_orchestrate {
 ### 2. Automated Multi-File Review
 ```javascript
 // Get PR files and create parallel review tasks
-mcp__github__get_pull_request_files { owner: "nokhodian", repo: "monomind", pull_number: 54 }
+mcp__github__get_pull_request_files { owner: "monoes", repo: "monomind", pull_number: 54 }
 
 // Create coordinated reviews
 mcp__github__create_pull_request_review {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind", 
   pull_number: 54,
   body: "Automated swarm review with comprehensive analysis",
@@ -67,11 +67,11 @@ mcp__github__create_pull_request_review {
 ### 3. Merge Coordination with Testing
 ```javascript
 // Validate PR status and merge when ready
-mcp__github__get_pull_request_status { owner: "nokhodian", repo: "monomind", pull_number: 54 }
+mcp__github__get_pull_request_status { owner: "monoes", repo: "monomind", pull_number: 54 }
 
 // Merge with coordination
 mcp__github__merge_pull_request {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind",
   pull_number: 54,
   merge_method: "squash",

package/.claude/agents/github/release-manager.md

@@ -34,7 +34,7 @@ mcp__monomind__agent_spawn { type: "analyst", name: "Deployment Analyst" }
 
 // Create release preparation branch
 mcp__github__create_branch {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind",
   branch: "release/v1.8.0",
   from_branch: "main"
@@ -53,7 +53,7 @@ mcp__monomind__task_orchestrate {
 ```javascript
 // Update versions across packages
 mcp__github__push_files {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind",
   branch: "release/v1.8.0",
   files: [
@@ -99,7 +99,7 @@ Bash("cd packages/@monomind/cli && npm run build")
 
 // Create release PR with validation results
 mcp__github__create_pull_request {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind",
   title: "Release v1.8.0: GitHub Integration and Swarm Enhancements",
   head: "release/v1.8.0",

package/.claude/agents/github/repo-architect.md

@@ -37,7 +37,7 @@ LS("packages/@monomind/hooks")
 
 // Search for related repositories
 mcp__github__search_repositories {
-  query: "user:nokhodian monomind",
+  query: "user:monoes monomind",
   sort: "updated",
   order: "desc"
 }
@@ -63,7 +63,7 @@ mcp__github__create_repository {
 
 // Push template structure
 mcp__github__push_files {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind-project-template",
   branch: "main",
   files: [
@@ -136,7 +136,7 @@ const repositories = ["monomind", "monomind-docs", "monomind-examples"];
 
 repositories.forEach((repo) => {
   mcp__github__create_or_update_file({
-    owner: "nokhodian",
+    owner: "monoes",
     repo,
     path: ".github/workflows/integration.yml",
     content: `name: Integration Tests

package/.claude/agents/github/swarm-issue.md

@@ -263,7 +263,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Process Issue
-        uses: nokhodian/swarm-action@v1
+        uses: monoes/swarm-action@v1
         with:
           command: |
             if [[ "${{ github.event.label.name }}" == "swarm-ready" ]]; then

package/.claude/agents/github/sync-coordinator.md

@@ -90,7 +90,7 @@ mcp__monomind__memory_store {
 ```javascript
 // Coordinate feature implementation across packages
 mcp__github__push_files {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind",
   branch: "feature/github-commands",
   files: [

package/.claude/agents/github/workflow-automation.md

@@ -27,7 +27,7 @@ jobs:
       - uses: actions/checkout@v1
 
       - name: Initialize Swarm
-        uses: nokhodian/swarm-action@v1
+        uses: monoes/swarm-action@v1
         with:
           topology: mesh
           max-agents: 6

package/.claude/commands/github/repo-architect.md

@@ -149,7 +149,7 @@ const repositories = ["@monomind/cli", "@monomind/hooks", "@monomind/memory"];
 // Update common files across repositories
 repositories.forEach((repo) => {
   mcp__github__create_or_update_file({
-    owner: "nokhodian",
+    owner: "monoes",
     repo: "monomind",
     path: `${repo}/.github/workflows/integration.yml`,
     content: `name: Integration Tests

package/.claude/commands/github/sync-coordinator.md

@@ -86,7 +86,7 @@ mcp__monomind__memory_store {
 ```javascript
 // Coordinate feature implementation across packages
 mcp__github__push_files {
-  owner: "nokhodian",
+  owner: "monoes",
   repo: "monomind",
   branch: "feature/github-commands",
   files: [

package/.claude/commands/mastermind/createorg.md

@@ -30,12 +30,14 @@ Use orgs when the work is ongoing, not single-shot. A content team that ships 10
 **Options:**
 `--name <slug>` — org identifier used with `/mastermind:runorg` (derived from goal if omitted)
 `--roles <list>` — explicit role list (e.g. "boss, writer, reviewer, marketer")
+`--schedule <interval>` — make this a self-scheduling loop org (e.g. `"every 30 minutes"`, `"every hour"`, `"daily"`)
 `--auto` — skip confirmation, create immediately
 `--confirm` — always ask before saving (default)
 `--delete <name>` — delete a saved org and all associated data files
 `--list` — list all saved orgs with their status
 
 Once created, start the org with `/mastermind:runorg --org <name>`.
+For scheduled orgs: `runorg` activates the loop; `stoporg` stops it; `orgs` lists all.
 
 ---
 
@@ -48,6 +50,7 @@ Parse `$ARGUMENTS` for:
 - `--confirm` flag → mode = confirm
 - `--name <name>` → org_name = <name> (must match `^[a-z0-9][a-z0-9-]{0,63}$`; if omitted, derived from goal)
 - `--roles <desc>` → roles_desc = <desc> (explicit role list, e.g. "boss, writer, reviewer, marketer")
+- `--schedule <interval>` → schedule = <interval> (e.g. `"every 30 minutes"`, `"every hour"`, `"daily"`; triggers loop org generation)
 - `--delete <name>` → delete_mode = true, delete_name = <name>
 - `--list` flag → list_mode = true
 - Remaining text = prompt (goal description)
@@ -118,7 +121,7 @@ curl -s -X POST "${CTRL_URL}/api/mastermind/event" \
     '{type:"domain:dispatch",session:$session,domain:"ops",cmd:"Designing and saving org definition",ts:(now*1000|floor)}')" || true
 ```
 
-Invoke `Skill("mastermind:createorg")` passing: brain_context, prompt, org_name, roles_desc, mode, session_id: `$session_id`, caller: "command".
+Invoke `Skill("mastermind:createorg")` passing: brain_context, prompt, org_name, roles_desc, schedule, mode, session_id: `$session_id`, caller: "command".
 
 After skill returns: note the status (`complete`, `partial`, or `blocked`). Emit `session:complete`:
 ```bash

package/.claude/commands/mastermind/help.md

@@ -114,5 +114,5 @@ mcp__monomind__agent_health({})
 
 ## Support
 
-- Documentation: https://github.com/nokhodian/monomind
-- Issues: https://github.com/nokhodian/monomind/issues
+- Documentation: https://github.com/monoes/monomind
+- Issues: https://github.com/monoes/monomind/issues

package/.claude/commands/mastermind/orgs.md

@@ -0,0 +1,21 @@
+---
+name: mastermind-orgs
+description: List all saved orgs with their status, schedule interval, and last/next run times. Shows stopped/active/paused state for scheduled orgs.
+---
+
+**If $ARGUMENTS is empty:** Execute the listing below directly.
+
+---
+
+**MASTERMIND: ORGS**
+
+Lists all saved orgs.
+
+---
+
+Parse `$ARGUMENTS` for:
+- No flags expected — this command takes no arguments.
+
+Execute `Skill("mastermind:orgs")` passing: caller: "command".
+
+Invoke `Skill("mastermind:_repeat")` now to execute the REPEAT POSTAMBLE. This is a required tool call — do not skip it.

package/.claude/commands/mastermind/orgstatus.md

@@ -0,0 +1,59 @@
+---
+name: mastermind-orgstatus
+description: Show detailed status for a single org — lifecycle state, schedule, last/next run, recent activity, and roles. For scheduled orgs shows loop health.
+---
+
+**If $ARGUMENTS is empty:** Output the following and wait.
+
+---
+
+**MASTERMIND: ORG STATUS**
+
+Shows detailed status for a saved org.
+
+**Usage:**
+
+```
+/mastermind:orgstatus --org <name>
+```
+
+**Examples:**
+
+```
+/mastermind:orgstatus --org livarto-issue-resolver
+/mastermind:orgstatus --org newsroom
+```
+
+Your saved orgs:
+
+```bash
+ls .monomind/orgs/*.json 2>/dev/null | grep -v -- '-approvals\|-state\|-activity' | \
+  xargs -I{} basename {} .json 2>/dev/null || echo "(none — run /mastermind:createorg to define one)"
+```
+
+---
+
+**If $ARGUMENTS is non-empty:** Execute the flow below.
+
+---
+
+Parse `$ARGUMENTS` for:
+- `--org <name>` → org_name = <name>
+
+If `--org` is not provided, list orgs and ask which to inspect.
+
+Verify the org file exists:
+```bash
+[ -f ".monomind/orgs/${org_name}.json" ] || { echo "Org '${org_name}' not found."; exit 1; }
+```
+
+Generate a session ID:
+```bash
+REPO_ROOT=$(git rev-parse --show-toplevel 2>/dev/null || pwd)
+session_id="mm-$(date -u +%Y%m%dT%H%M%S)"
+CTRL_URL=$(jq -r '.url // "http://localhost:4242"' "$REPO_ROOT/.monomind/control.json" 2>/dev/null || echo "http://localhost:4242")
+```
+
+Invoke `Skill("mastermind:orgstatus")` passing: org_name: `$org_name`, caller: "command".
+
+Invoke `Skill("mastermind:_repeat")` now to execute the REPEAT POSTAMBLE. This is a required tool call — do not skip it.

package/.claude/commands/mastermind/runorg.md

@@ -9,9 +9,11 @@ description: Start a saved org as a persistent autonomous agent organization. Th
 
 **MASTERMIND: RUN ORG**
 
-Running an org starts a persistent agent organization: a boss agent loads the org definition, assigns work to specialists, monitors progress, and keeps agents on task until you stop them. Agents pick up cards from a shared board — one role per agent, all running in parallel.
+Running an org starts an autonomous agent organization. There are two modes:
 
-This is continuous operation, not a one-shot run. The org loops: plan → execute → review → plan. Stop it explicitly with `/mastermind:ops --stop-org <name>`.
+**Persistent org** (no schedule): a boss agent loads the org definition, assigns work to specialists from a shared board, and loops indefinitely. Stop with `/mastermind:stoporg --org <name>`.
+
+**Scheduled org** (created with `--schedule`): sets the org to `active` and runs the first iteration immediately. Subsequent iterations are self-scheduled via ScheduleWakeup. The loop stops cleanly within one interval after `/mastermind:stoporg --org <name>`.
 
 **Your saved orgs:**
 

package/.claude/commands/mastermind/stoporg.md

@@ -0,0 +1,78 @@
+---
+name: mastermind-stoporg
+description: Stop a running scheduled org loop. Sets status to "stopped" — the next scheduled wakeup reads the status, skips all work, and does not reschedule. Loop dies within one interval.
+---
+
+**If $ARGUMENTS is empty:** Output the following and wait.
+
+---
+
+**MASTERMIND: STOP ORG**
+
+Stops a scheduled org loop cleanly. The org's `status` is set to `"stopped"` — the next scheduled wakeup will read the status, skip all work, and not reschedule itself. The loop is guaranteed to die within one interval (no orphaned wakeups).
+
+**Usage:**
+
+```
+/mastermind:stoporg --org <name>
+```
+
+**Examples:**
+
+```
+/mastermind:stoporg --org livarto-issue-resolver
+/mastermind:stoporg --org research-pod
+```
+
+**Lifecycle:**
+```
+stopped  →  (runorg)   →  active
+active   →  (stoporg)  →  stopped
+active   →  (HIL)      →  paused    (set manually in .monomind/orgs/<name>.json)
+paused   →  (set active) →  active  (resume by setting status back to "active" in the JSON)
+```
+
+Your scheduled orgs:
+
+```bash
+ls .monomind/orgs/*.json 2>/dev/null | grep -v -- '-approvals\|-state\|-activity' | \
+  xargs -I{} sh -c 'name=$(jq -r ".name" "{}"); status=$(jq -r ".status // \"no-loop\"" "{}"); interval=$(jq -r "if .loop.poll_interval_minutes then \"\(.loop.poll_interval_minutes)m\" else \"—\" end" "{}"); echo "  $name  ($status, $interval)"' 2>/dev/null || echo "(none)"
+```
+
+---
+
+**If $ARGUMENTS is non-empty:** Execute the flow below.
+
+---
+
+Parse `$ARGUMENTS` for:
+- `--org <name>` → org_name = <name>
+
+If `--org` is not provided, list orgs with schedules and ask which to stop.
+
+Verify the org file exists:
+```bash
+[ -f ".monomind/orgs/${org_name}.json" ] || { echo "Org '${org_name}' not found."; exit 1; }
+```
+
+Generate a session ID:
+```bash
+REPO_ROOT=$(git rev-parse --show-toplevel 2>/dev/null || pwd)
+session_id="mm-$(date -u +%Y%m%dT%H%M%S)"
+CTRL_URL=$(jq -r '.url // "http://localhost:4242"' "$REPO_ROOT/.monomind/control.json" 2>/dev/null || echo "http://localhost:4242")
+```
+
+Invoke `Skill("mastermind:stoporg")` passing: org_name: `$org_name`, session_id: `$session_id`, caller: "command".
+
+After skill returns: emit `session:complete`:
+```bash
+curl -s -X POST "${CTRL_URL}/api/mastermind/event" \
+  -H "Content-Type: application/json" \
+  -d "$(jq -cn \
+    --arg session "$session_id" \
+    '{type:"session:complete",session:$session,domain:"ops",status:"complete",domains:["ops"],ts:(now*1000|floor)}')" || true
+```
+
+Follow _protocol.md Brain Write Procedure for domain `ops`.
+
+Invoke `Skill("mastermind:_repeat")` now to execute the REPEAT POSTAMBLE. This is a required tool call — do not skip it.

package/.claude/commands/mastermind/swarm.md

@@ -158,4 +158,4 @@ mcp__monomind__swarm_shutdown({})
 - `npx monomind hive-mind init` — Byzantine fault-tolerant consensus
 - `/mastermind` — Interactive swarm topology selection
 
-Documentation: https://github.com/nokhodian/monomind
+Documentation: https://github.com/monoes/monomind

package/.claude/helpers/handlers/gates-handler.cjs

@@ -0,0 +1,135 @@
+/**
+ * Enforcement Gates Handler
+ *
+ * Inline gate logic for PreToolUse hooks — no ESM/package dependency.
+ *
+ * Patterns are an INTENTIONAL SUPERSET of @monomind/guidance/src/gates.ts defaults:
+ *   - All categories from DEFAULT_GATE_CONFIG are covered here
+ *   - Many patterns are enhanced (e.g. --force-with-lease, -fr reversed flags, broader kubectl)
+ *   - Key thresholds MUST stay aligned: password/secret min length = 8 chars (both files)
+ *
+ * When updating patterns in gates.ts, check whether the corresponding pattern here
+ * also needs updating — and vice versa.
+ *
+ * Gates enforced at runtime:
+ *   pre-bash  → destructive-ops  (require-confirmation → block)
+ *   pre-write → secrets          (block)
+ */
+
+'use strict';
+
+// ─── Patterns (superset of DEFAULT_GATE_CONFIG in gates.ts) ──────────────────
+
+const DESTRUCTIVE_PATTERNS = [
+  /\brm\s+(?:-[a-z]*f[a-z]*r|-[a-z]*r[a-z]*f|--recursive.*--force|--force.*--recursive|-rf?)\b/i,
+  /\bdrop\s+(database|table|schema|index|view|function|procedure)\b/i,
+  /\btruncate\s+table\b/i,
+  /\bgit\s+push\s+(?:.*\s)?(?:--force(?:-with-lease)?|-[a-z]*f)\b/i,
+  /\bgit\s+reset\s+--hard\b/i,
+  /\bgit\s+clean\s+.*-f/i,
+  /\bformat\s+[a-z]:/i,
+  /\bdel\s+\/[sf]\b/i,
+  /\b(?:kubectl|helm)\s+delete\b.*\b(?:--all|namespace|all)\b/i,
+  /\bDELETE\s+FROM\s+\w+/i,
+  /\bALTER\s+TABLE\s+\w+\s+DROP\b/i,
+];
+
+const SECRET_PATTERNS = [
+  /(?:api[_-]?key|apikey)\s*[:=]\s*['"][^'"]{8,}['"]/gi,
+  /(?:secret|password|passwd|pwd)\s*[:=]\s*['"][^'"]{8,}['"]/gi,
+  /(?:token|bearer)\s*[:=]\s*['"][^'"]{10,}['"]/gi,
+  /-----BEGIN (?:RSA |EC |DSA )?PRIVATE KEY-----/g,
+  /sk-[a-zA-Z0-9]{20,}/g,
+  /ghp_[a-zA-Z0-9]{36}/g,
+  /npm_[a-zA-Z0-9]{36}/g,
+  /AKIA[0-9A-Z]{16}/g,
+];
+
+// ─── Helpers ──────────────────────────────────────────────────────────────────
+
+function redact(match) {
+  return match.length > 12
+    ? match.slice(0, 4) + '*'.repeat(match.length - 8) + match.slice(-4)
+    : '*'.repeat(match.length);
+}
+
+function checkDestructive(command) {
+  for (const pattern of DESTRUCTIVE_PATTERNS) {
+    pattern.lastIndex = 0;
+    const match = pattern.exec(command);
+    if (match) {
+      return {
+        triggered: true,
+        matched: match[0],
+        reason: `Destructive operation detected: "${match[0]}". Confirm this is intentional and document a rollback plan before proceeding.`,
+      };
+    }
+  }
+  return { triggered: false };
+}
+
+function checkSecrets(content) {
+  const found = [];
+  for (const pattern of SECRET_PATTERNS) {
+    pattern.lastIndex = 0;
+    const matches = content.match(pattern);
+    if (matches) {
+      for (const m of matches) found.push(redact(m));
+    }
+  }
+  if (found.length === 0) return { triggered: false };
+  return {
+    triggered: true,
+    count: found.length,
+    redacted: found,
+    reason: `Potential secret(s) detected in file content (${found.length} match${found.length > 1 ? 'es' : ''}): ${found.join(', ')}. Move secrets to environment variables or a .env file (add to .gitignore).`,
+  };
+}
+
+// ─── Hook handlers ────────────────────────────────────────────────────────────
+
+/**
+ * pre-bash: check for destructive shell commands.
+ * Outputs Claude Code block decision to stdout when triggered.
+ */
+function handlePreBash(hCtx) {
+  var cmd = (hCtx.toolInput && (hCtx.toolInput.command || hCtx.toolInput.cmd)) || '';
+  if (!cmd) return;
+
+  var result = checkDestructive(cmd);
+  if (result.triggered) {
+    // Output block decision and set exit code 2 — both required by Claude Code PreToolUse protocol
+    console.log(JSON.stringify({
+      decision: 'block',
+      reason: '[gates] ' + result.reason,
+    }));
+    process.exitCode = 2;
+  }
+}
+
+/**
+ * pre-write: check for secrets in Write / Edit / MultiEdit content before it lands on disk.
+ * Outputs Claude Code block decision to stdout when triggered.
+ */
+function handlePreWrite(hCtx) {
+  var toolInput = hCtx.toolInput || {};
+  // Write: toolInput.content — Edit: toolInput.new_string
+  // MultiEdit: toolInput.edits is an array of { old_string, new_string }
+  var content = toolInput.content || toolInput.new_string || '';
+  if (!content && Array.isArray(toolInput.edits)) {
+    content = toolInput.edits.map(function(e) { return e.new_string || ''; }).join('\n');
+  }
+  if (!content || typeof content !== 'string') return;
+
+  var result = checkSecrets(content);
+  if (result.triggered) {
+    // Output block decision and set exit code 2 — both required by Claude Code PreToolUse protocol
+    console.log(JSON.stringify({
+      decision: 'block',
+      reason: '[gates] ' + result.reason,
+    }));
+    process.exitCode = 2;
+  }
+}
+
+module.exports = { handlePreBash, handlePreWrite, checkDestructive, checkSecrets };

package/.claude/helpers/handlers/task-handler.cjs

@@ -73,9 +73,13 @@ module.exports = {
     try {
       var mgDbPath1 = path.join(CWD, '.monomind', 'monograph.db');
       if (fs.existsSync(mgDbPath1)) {
-        var execSync1 = require('child_process').execSync;
-        var changedFiles1 = '';
-        try { changedFiles1 = execSync1('git diff --name-only HEAD 2>/dev/null || git diff --name-only 2>/dev/null', { cwd: CWD, timeout: 3000, shell: true }).toString().trim(); } catch(e) {}
+        var changedFiles1 = await new Promise(function(resolve) {
+          require('child_process').exec(
+            'git diff --name-only HEAD 2>/dev/null || git diff --name-only 2>/dev/null',
+            { cwd: CWD, timeout: 3000 },
+            function(err, stdout) { resolve(err ? '' : (stdout || '').trim()); }
+          );
+        });
         if (changedFiles1) {
           var mgMod1 = null;
           mgMod1 = hCtx._requireMonograph();

package/.claude/helpers/hook-handler.cjs

@@ -272,6 +272,15 @@ const handlers = {
     var cmd = (hCtx.toolInput && (hCtx.toolInput.command || hCtx.toolInput.cmd)) || '';
     if (/\bgrep\b/.test(cmd)) _recordGraphTelemetry('bash_grep_call');
     else if (/\bfind\b/.test(cmd)) _recordGraphTelemetry('bash_find_call');
+    // Enforcement gate: destructive operations
+    var gates = require('./handlers/gates-handler.cjs');
+    gates.handlePreBash(hCtx);
+  },
+
+  'pre-write': () => {
+    // Enforcement gate: secrets detection before Write/Edit/MultiEdit lands on disk
+    var gates = require('./handlers/gates-handler.cjs');
+    gates.handlePreWrite(hCtx);
   },
 
   'pre-search': () => {
@@ -330,6 +339,6 @@ if (command && handlers[command]) {
 main().catch(function(e) {
   console.log('[WARN] Hook handler error: ' + e.message);
 }).finally(function() {
-  // Ensure clean exit for Claude Code hooks
-  process.exit(0);
+  // Use process.exitCode if a gate set it (exit 2 = block), otherwise clean exit
+  process.exit(process.exitCode || 0);
 });