oh-my-customcode 0.117.0 → 0.118.1

package/package.json

@@ -3,7 +3,7 @@
   "workspaces": [
     "packages/*"
   ],
-  "version": "0.117.0",
+  "version": "0.118.1",
   "description": "Batteries-included agent harness for Claude Code",
   "type": "module",
   "bin": {

package/templates/.claude/hooks/hooks.json

@@ -10,7 +10,7 @@
             "command": "bash .claude/hooks/scripts/stage-blocker.sh"
           }
         ],
-        "description": "Block Write/Edit tools during plan/verify/compound stages — only allow in implement stage"
+        "description": "Block Write/Edit tools during plan/verify/compound stages \u2014 only allow in implement stage"
       },
       {
         "matcher": "tool == \"Bash\" && tool_input.command matches \"(npm run dev|pnpm( run)? dev|yarn dev|bun run dev)\"",
@@ -70,7 +70,7 @@
             "command": "bash .claude/hooks/scripts/content-hash-validator.sh"
           }
         ],
-        "description": "Validate file content hash before Edit — advisory staleness warning"
+        "description": "Validate file content hash before Edit \u2014 advisory staleness warning"
       },
       {
         "matcher": "tool == \"Write\" || tool == \"Edit\" || tool == \"Bash\"",
@@ -80,7 +80,7 @@
             "command": "bash .claude/hooks/scripts/schema-validator.sh"
           }
         ],
-        "description": "Schema-based tool input validation — Phase 1 advisory only"
+        "description": "Schema-based tool input validation \u2014 Phase 1 advisory only"
       },
       {
         "matcher": "tool == \"Bash\"",
@@ -90,7 +90,7 @@
             "command": "bash .claude/hooks/scripts/rtk-intercept.sh"
           }
         ],
-        "description": "RTK auto-intercept — transparently rewrites CLI commands through RTK proxy when available (R015 advisory)"
+        "description": "RTK auto-intercept \u2014 transparently rewrites CLI commands through RTK proxy when available (R015 advisory)"
       },
       {
         "matcher": "tool == \"Bash\" && tool_input.command matches \"(rm|git rm|mv|unlink|claude/rules)\"",
@@ -100,14 +100,14 @@
             "command": "bash .claude/hooks/scripts/rule-deletion-guard.sh"
           }
         ],
-        "description": "Block rule file deletion — requires individual user confirmation per rule (R001 safety)"
+        "description": "Block rule file deletion \u2014 requires individual user confirmation per rule (R001 safety)"
       },
       {
         "matcher": "tool == \"Task\" || tool == \"Agent\"",
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\nagent_type=$(echo \"$input\" | jq -r '.tool_input.subagent_type // \"unknown\"')\nmodel=$(echo \"$input\" | jq -r '.tool_input.model // \"inherit\"')\ndesc=$(echo \"$input\" | jq -r '.tool_input.description // \"\"' | head -c 40)\nresume=$(echo \"$input\" | jq -r '.tool_input.resume // empty')\nif [ -n \"$resume\" ]; then\n  echo \"─── [Resume] ${agent_type}:${model} | ${desc} ───\" >&2\nelse\n  echo \"─── [Spawn] ${agent_type}:${model} | ${desc} ───\" >&2\nfi\necho \"$input\""
+            "command": "#!/bin/bash\ninput=$(cat)\nagent_type=$(echo \"$input\" | jq -r '.tool_input.subagent_type // \"unknown\"')\nmodel=$(echo \"$input\" | jq -r '.tool_input.model // \"inherit\"')\ndesc=$(echo \"$input\" | jq -r '.tool_input.description // \"\"' | head -c 40)\nresume=$(echo \"$input\" | jq -r '.tool_input.resume // empty')\nif [ -n \"$resume\" ]; then\n  echo \"\u2500\u2500\u2500 [Resume] ${agent_type}:${model} | ${desc} \u2500\u2500\u2500\" >&2\nelse\n  echo \"\u2500\u2500\u2500 [Spawn] ${agent_type}:${model} | ${desc} \u2500\u2500\u2500\" >&2\nfi\necho \"$input\""
           },
           {
             "type": "command",
@@ -186,7 +186,7 @@
             "command": "bash .claude/hooks/scripts/user-prompt-preprocessor.sh"
           }
         ],
-        "description": "Advisory pre-processing of user input — skill matching hints and intent analysis"
+        "description": "Advisory pre-processing of user input \u2014 skill matching hints and intent analysis"
       },
       {
         "matcher": "*",
@@ -205,7 +205,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\nagent_type=$(echo \"$input\" | jq -r '.agent_type // \"unknown\"')\nmodel=$(echo \"$input\" | jq -r '.model // \"inherit\"')\ndesc=$(echo \"$input\" | jq -r '.description // \"\"' | head -c 40)\necho \"─── [SubagentStart] ${agent_type}:${model} | ${desc} ───\" >&2\necho \"$input\""
+            "command": "#!/bin/bash\ninput=$(cat)\nagent_type=$(echo \"$input\" | jq -r '.agent_type // \"unknown\"')\nmodel=$(echo \"$input\" | jq -r '.model // \"inherit\"')\ndesc=$(echo \"$input\" | jq -r '.description // \"\"' | head -c 40)\necho \"\u2500\u2500\u2500 [SubagentStart] ${agent_type}:${model} | ${desc} \u2500\u2500\u2500\" >&2\necho \"$input\""
           },
           {
             "type": "command",
@@ -233,7 +233,7 @@
           },
           {
             "type": "prompt",
-            "prompt": "A background subagent just completed. Check if there are pending workflow steps that depend on this result. If the previous subagent FAILED, do NOT auto-continue — report the failure and wait for user input. If the previous step succeeded and there are pending steps, proceed automatically. If no pending steps, report results and wait. Safety: The file /tmp/.claude-loop-count-$PPID tracks auto-continue count. After 3 consecutive auto-continues without user interaction, pause and ask the user before proceeding."
+            "prompt": "A background subagent just completed. Check if there are pending workflow steps that depend on this result. If the previous subagent FAILED, do NOT auto-continue \u2014 report the failure and wait for user input. If the previous step succeeded and there are pending steps, proceed automatically. If no pending steps, report results and wait. Safety: The file /tmp/.claude-loop-count-$PPID tracks auto-continue count. After 3 consecutive auto-continues without user interaction, pause and ask the user before proceeding."
           }
         ],
         "description": "Record agent outcomes + auto-continue workflow on subagent completion"
@@ -260,7 +260,7 @@
             "command": "bash .claude/hooks/scripts/file-change-validator.sh"
           }
         ],
-        "description": "Validate externally modified files — advisory staleness warning (v2.1.83+)"
+        "description": "Validate externally modified files \u2014 advisory staleness warning (v2.1.83+)"
       }
     ],
     "Notification": [
@@ -281,7 +281,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\nteammate=$(echo \"$input\" | jq -r '.teammate_id // \"unknown\"' 2>/dev/null)\necho \"[Hook] TeammateIdle: $teammate — available for reassignment\" >&2\necho \"$input\""
+            "command": "#!/bin/bash\ninput=$(cat)\nteammate=$(echo \"$input\" | jq -r '.teammate_id // \"unknown\"' 2>/dev/null)\necho \"[Hook] TeammateIdle: $teammate \u2014 available for reassignment\" >&2\necho \"$input\""
           }
         ],
         "description": "Track idle Agent Teams members for work reassignment"
@@ -293,7 +293,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\ntask_id=$(echo \"$input\" | jq -r '.task_id // \"\"' 2>/dev/null)\ndesc=$(echo \"$input\" | jq -r '.description // \"\"' 2>/dev/null | head -c 60)\necho \"[Hook] TaskCreated: $task_id — $desc\" >&2\necho \"$input\""
+            "command": "#!/bin/bash\ninput=$(cat)\ntask_id=$(echo \"$input\" | jq -r '.task_id // \"\"' 2>/dev/null)\ndesc=$(echo \"$input\" | jq -r '.description // \"\"' 2>/dev/null | head -c 60)\necho \"[Hook] TaskCreated: $task_id \u2014 $desc\" >&2\necho \"$input\""
           }
         ],
         "description": "Log task creation events for Agent Teams coordination"
@@ -305,7 +305,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\ntask_id=$(echo \"$input\" | jq -r '.task_id // \"\"' 2>/dev/null)\nresult=$(echo \"$input\" | jq -r '.result // \"\"' 2>/dev/null | head -c 60)\necho \"[Hook] TaskCompleted: $task_id — $result\" >&2\necho \"$input\""
+            "command": "#!/bin/bash\ninput=$(cat)\ntask_id=$(echo \"$input\" | jq -r '.task_id // \"\"' 2>/dev/null)\nresult=$(echo \"$input\" | jq -r '.result // \"\"' 2>/dev/null | head -c 60)\necho \"[Hook] TaskCompleted: $task_id \u2014 $result\" >&2\necho \"$input\""
           }
         ],
         "description": "Log task completion events for Agent Teams coordination"
@@ -320,7 +320,7 @@
             "command": "bash .claude/hooks/scripts/task-state-precompact.sh"
           }
         ],
-        "description": "Serialize active task state before compaction — pairs with PostCompact restore (#922)"
+        "description": "Serialize active task state before compaction \u2014 pairs with PostCompact restore (#922)"
       }
     ],
     "PostCompact": [
@@ -329,10 +329,10 @@
         "hooks": [
           {
             "type": "prompt",
-            "prompt": "Context compacted. RULES ACTIVE.\n\nR007: next response MUST start with ┌─ Agent: claude (default) / └─ Task: {task}\nR008: before EVERY tool call → [claude][model] → Tool: Name / Target: path\nR010: write→delegate to subagent; orchestrator read-only (Read/Glob/Grep); git→mgr-gitnerd\nR009: 2+ independent tasks → parallel agents, same message\nR018: 3+ agents OR review cycle → Agent Teams\nR000: user communication in Korean (한국어); code/files in English — NON-NEGOTIABLE\nR001: prohibited actions (no secrets, no system files, no rm -rf); stop on violation → preserve state → report → wait\nR002: tool tiers (Read/Grep=free, Write/Edit=notify, Bash=approval); no writes outside project; no .env/.git/config\n\nAutonomous mode: if /tmp/.claude-autonomous-$PPID exists → simple git (add/commit/push) may run directly; Write/Edit still delegates.\nbypassPermissions does NOT persist across compaction — re-enable if tasks seem blocked.\n\nTask state restore: if /tmp/.claude-task-state-$PPID.json exists, read it to recover active pipeline, dev stage, and autonomous mode state. This was saved by PreCompact hook.\n\nRe-read CLAUDE.md NOW."
+            "prompt": "Context compacted. RULES ACTIVE.\n\nR007: next response MUST start with \u250c\u2500 Agent: claude (default) / \u2514\u2500 Task: {task}\nR008: before EVERY tool call \u2192 [claude][model] \u2192 Tool: Name / Target: path\nR010: write\u2192delegate to subagent; orchestrator read-only (Read/Glob/Grep); git\u2192mgr-gitnerd\nR009: 2+ independent tasks \u2192 parallel agents, same message\nR018: 3+ agents OR review cycle \u2192 Agent Teams\nR000: user communication in Korean (\ud55c\uad6d\uc5b4); code/files in English \u2014 NON-NEGOTIABLE\nR001: prohibited actions (no secrets, no system files, no rm -rf); stop on violation \u2192 preserve state \u2192 report \u2192 wait\nR002: tool tiers (Read/Grep=free, Write/Edit=notify, Bash=approval); no writes outside project; no .env/.git/config\n\nAutonomous mode: if /tmp/.claude-autonomous-$PPID exists \u2192 simple git (add/commit/push) may run directly; Write/Edit still delegates.\nbypassPermissions does NOT persist across compaction \u2014 re-enable if tasks seem blocked.\n\nTask state restore: if /tmp/.claude-task-state-$PPID.json exists, read it to recover active pipeline, dev stage, and autonomous mode state. This was saved by PreCompact hook.\n\nRe-read CLAUDE.md NOW."
           }
         ],
-        "description": "Reinforce enforced rules after context compaction — prevents rule amnesia (v2.1.76+)"
+        "description": "Reinforce enforced rules after context compaction \u2014 prevents rule amnesia (v2.1.76+)"
       }
     ],
     "PostToolUse": [
@@ -414,7 +414,7 @@
             "command": "bash .claude/hooks/scripts/context-budget-advisor.sh"
           }
         ],
-        "description": "Context budget advisor — track tool usage patterns and advise ecomode activation"
+        "description": "Context budget advisor \u2014 track tool usage patterns and advise ecomode activation"
       },
       {
         "matcher": "tool == \"Edit\" || tool == \"Write\" || tool == \"Bash\" || tool == \"Task\" || tool == \"Agent\"",
@@ -434,7 +434,7 @@
             "command": "bash .claude/hooks/scripts/cost-cap-advisor.sh"
           }
         ],
-        "description": "Advisory cost cap monitoring — warn when session cost approaches configurable limit"
+        "description": "Advisory cost cap monitoring \u2014 warn when session cost approaches configurable limit"
       },
       {
         "matcher": "tool == \"Read\"",
@@ -444,7 +444,7 @@
             "command": "bash .claude/hooks/scripts/content-hash-validator.sh"
           }
         ],
-        "description": "Store content hashes for Read operations — enables Edit staleness detection"
+        "description": "Store content hashes for Read operations \u2014 enables Edit staleness detection"
       },
       {
         "matcher": "tool == \"Bash\" || tool == \"Read\" || tool == \"Grep\"",
@@ -454,7 +454,7 @@
             "command": "bash .claude/hooks/scripts/secret-filter.sh"
           }
         ],
-        "description": "Detect potential secrets in Bash/Read/Grep output — advisory warning only"
+        "description": "Detect potential secrets in Bash/Read/Grep output \u2014 advisory warning only"
       },
       {
         "matcher": "tool == \"Edit\" || tool == \"Write\" || tool == \"Bash\" || tool == \"Agent\"",
@@ -485,6 +485,16 @@
           }
         ],
         "description": "Layer 4: Compress Playwright/Chrome MCP output via Haiku summarization"
+      },
+      {
+        "matcher": "tool == \"Task\" || tool == \"Agent\"",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash .claude/hooks/scripts/auto-dev-token-tracker.sh"
+          }
+        ],
+        "description": "auto-dev token spend tracker \u2014 records per-phase token estimates during /pipeline auto-dev (Issue #1057, advisory)"
       }
     ],
     "Stop": [
@@ -533,10 +543,20 @@
         "hooks": [
           {
             "type": "prompt",
-            "prompt": "Session-end memory checkpoint (R011 enforcement). Check if the session-end memory save workflow was completed: 1) sys-memory-keeper was delegated to update MEMORY.md 2) claude-mem save was attempted via ToolSearch + mcp__plugin_claude-mem_mcp-search__save_memory. Note: episodic-memory auto-indexes after session — no manual action needed. Decision rules (evaluate in order): 1. If session had no explicit session-end signal (quick question, no memory work): APPROVE immediately. 2. If BOTH steps were already attempted (success or failure both count): APPROVE. 3. If MCP tools unavailable after ToolSearch attempt: APPROVE with note. 4. If steps were NOT yet performed: PERFORM THEM NOW (maximum 1 attempt each): a. Delegate to sys-memory-keeper to update MEMORY.md — call Agent tool with sys-memory-keeper. b. Attempt claude-mem save — ToolSearch for save_memory tool, then call it. c. After completion (success or failure), APPROVE stop. IMPORTANT: Do NOT block indefinitely. After 1 attempt per step, always APPROVE. IMPORTANT: Do NOT loop — if you already performed these steps in this same stop hook evaluation, APPROVE."
+            "prompt": "Session-end memory checkpoint (R011 enforcement). Check if the session-end memory save workflow was completed: 1) sys-memory-keeper was delegated to update MEMORY.md 2) claude-mem save was attempted via ToolSearch + mcp__plugin_claude-mem_mcp-search__save_memory. Note: episodic-memory auto-indexes after session \u2014 no manual action needed. Decision rules (evaluate in order): 1. If session had no explicit session-end signal (quick question, no memory work): APPROVE immediately. 2. If BOTH steps were already attempted (success or failure both count): APPROVE. 3. If MCP tools unavailable after ToolSearch attempt: APPROVE with note. 4. If steps were NOT yet performed: PERFORM THEM NOW (maximum 1 attempt each): a. Delegate to sys-memory-keeper to update MEMORY.md \u2014 call Agent tool with sys-memory-keeper. b. Attempt claude-mem save \u2014 ToolSearch for save_memory tool, then call it. c. After completion (success or failure), APPROVE stop. IMPORTANT: Do NOT block indefinitely. After 1 attempt per step, always APPROVE. IMPORTANT: Do NOT loop \u2014 if you already performed these steps in this same stop hook evaluation, APPROVE."
+          }
+        ],
+        "description": "Enforce R011 session-end memory saves \u2014 auto-perform if not yet done (episodic-memory auto-indexes)"
+      },
+      {
+        "matcher": "*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash .claude/hooks/scripts/auto-dev-token-summary.sh"
           }
         ],
-        "description": "Enforce R011 session-end memory saves — auto-perform if not yet done (episodic-memory auto-indexes)"
+        "description": "Print auto-dev token spend summary on session end (Issue #1057, advisory)"
       }
     ]
   }

package/templates/.claude/hooks/scripts/auto-dev-token-summary.sh

@@ -0,0 +1,67 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# auto-dev Token Spend Summary (Issue #1057, Option 1)
+# Trigger: Stop event
+# Purpose: Print phase-by-phase token spend table to stderr
+# Protocol: stdin pass-through, stderr summary, exit 0 always
+
+input=$(cat 2>/dev/null || true)
+trap 'printf "%s" "$input"' EXIT
+
+LOG_FILE="/tmp/auto-dev-spend-${PPID}.json"
+[ -f "$LOG_FILE" ] || exit 0
+[ -s "$LOG_FILE" ] || exit 0
+
+command -v jq >/dev/null 2>&1 || exit 0
+
+# Aggregate per phase: sum tokens_in, tokens_out, count entries
+summary=$(jq -s -r '
+  group_by(.phase)
+  | map({
+      phase: .[0].phase,
+      calls: length,
+      tokens_in: (map(.tokens_in) | add),
+      tokens_out: (map(.tokens_out) | add),
+      total: (map(.tokens_in + .tokens_out) | add)
+    })
+  | sort_by(-.total)
+' "$LOG_FILE" 2>/dev/null) || exit 0
+
+[ -z "$summary" ] && exit 0
+[ "$summary" = "[]" ] && exit 0
+
+# Totals
+totals=$(echo "$summary" | jq -r '
+  {
+    total_calls: (map(.calls) | add),
+    total_in: (map(.tokens_in) | add),
+    total_out: (map(.tokens_out) | add),
+    grand: (map(.total) | add)
+  }
+')
+total_calls=$(echo "$totals" | jq -r '.total_calls')
+total_in=$(echo "$totals" | jq -r '.total_in')
+total_out=$(echo "$totals" | jq -r '.total_out')
+grand=$(echo "$totals" | jq -r '.grand')
+
+{
+  echo ""
+  echo "=== [auto-dev Token Spend Summary] (Issue #1057, advisory) ==="
+  echo "Source: $LOG_FILE  |  Heuristic: bytes ÷ 4"
+  echo ""
+  printf "| %-32s | %5s | %10s | %10s | %10s |\n" "Phase" "Calls" "Tokens In" "Tokens Out" "Total"
+  printf "| %-32s | %5s | %10s | %10s | %10s |\n" "--------------------------------" "-----" "----------" "----------" "----------"
+  echo "$summary" | jq -r '.[] | "\(.phase)\t\(.calls)\t\(.tokens_in)\t\(.tokens_out)\t\(.total)"' | \
+    while IFS=$'\t' read -r phase calls tin tout tot; do
+      phase_trunc=$(printf "%s" "$phase" | head -c 32)
+      printf "| %-32s | %5s | %10s | %10s | %10s |\n" "$phase_trunc" "$calls" "$tin" "$tout" "$tot"
+    done
+  printf "| %-32s | %5s | %10s | %10s | %10s |\n" "TOTAL" "$total_calls" "$total_in" "$total_out" "$grand"
+  echo ""
+  echo "Note: Estimates only. For exact usage, integrate Anthropic API usage events (Option 2, separate issue)."
+  echo "================================================================"
+  echo ""
+} >&2
+
+exit 0

package/templates/.claude/hooks/scripts/auto-dev-token-tracker.sh

@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# auto-dev Token Spend Tracker (Issue #1057, Option 1)
+# Trigger: PostToolUse on Agent/Task during auto-dev pipeline
+# Purpose: Estimate token spend per phase from byte counts (÷4 heuristic)
+# Protocol: stdin JSON -> log -> stdout pass-through, exit 0 always
+# Gate: only logs when /tmp/.claude-pipeline-auto-dev-${PPID}.json exists
+
+# Always pass through input no matter what
+input=$(cat)
+trap 'echo "$input"' EXIT
+
+# Gate: only active during auto-dev pipeline
+PIPELINE_STATE="/tmp/.claude-pipeline-auto-dev-${PPID}.json"
+[ -f "$PIPELINE_STATE" ] || exit 0
+
+# Dependency check
+command -v jq >/dev/null 2>&1 || exit 0
+
+LOG_FILE="/tmp/auto-dev-spend-${PPID}.json"
+
+# Extract fields (PostToolUse Agent shape)
+agent_type=$(echo "$input" | jq -r '.tool_input.subagent_type // "unknown"' 2>/dev/null || echo "unknown")
+description=$(echo "$input" | jq -r '.tool_input.description // ""' 2>/dev/null || echo "")
+prompt_text=$(echo "$input" | jq -r '.tool_input.prompt // ""' 2>/dev/null || echo "")
+output_text=$(echo "$input" | jq -r '.tool_output.output // .tool_output // ""' 2>/dev/null || echo "")
+
+# Derive phase from pipeline state (current_phase) or fallback to description prefix
+phase=$(jq -r '.current_phase // .phase // "unknown"' "$PIPELINE_STATE" 2>/dev/null || echo "unknown")
+if [ "$phase" = "unknown" ] || [ "$phase" = "null" ]; then
+  # Fallback: extract [N] prefix or first word from description
+  phase=$(echo "$description" | grep -oE '^\[[0-9]+\][^|]*' | head -c 40 || true)
+  [ -z "$phase" ] && phase=$(echo "$description" | head -c 30)
+  [ -z "$phase" ] && phase="unknown"
+fi
+
+# Byte counts -> token estimate (÷4 heuristic)
+in_bytes=$(printf '%s' "$prompt_text" | wc -c | tr -d ' ')
+out_bytes=$(printf '%s' "$output_text" | wc -c | tr -d ' ')
+tokens_in=$((in_bytes / 4))
+tokens_out=$((out_bytes / 4))
+
+ts=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+
+# Append JSONL entry
+entry=$(jq -n -c \
+  --arg ts "$ts" \
+  --arg phase "$phase" \
+  --arg agent "$agent_type" \
+  --argjson tin "$tokens_in" \
+  --argjson tout "$tokens_out" \
+  '{ts: $ts, phase: $phase, agent: $agent, tokens_in: $tin, tokens_out: $tout}' 2>/dev/null) || exit 0
+
+echo "$entry" >> "$LOG_FILE" 2>/dev/null || true
+
+exit 0

package/templates/.claude/rules/MUST-agent-design.md

@@ -31,6 +31,12 @@ Extended context suffix: `[1m]` (e.g., `claude-opus-4-6[1m]`) — enables 1M tok
 
 Key optional fields: `memory`, `effort`, `skills`, `soul`, `isolation`, `background`, `maxTurns`, `maxTokens`, `mcpServers`, `hooks`, `permissionMode`, `disallowedTools`, `limitations`, `domain`, `disableSkillShellExecution`. Supported since CC v2.1.63+. See full optional frontmatter via Read tool.
 
+### Note on `skills:` field
+
+The `skills:` frontmatter field is **advisory metadata** consumed by oh-my-customcode tooling (graph-builder, mgr-sauron) for documentation and validation. It is **NOT a runtime allowlist** — Claude Code does not filter the available skills based on this field, and subagents can invoke any registered skill regardless of what `skills:` declares. Use it to document a subagent's intended skill dependencies; do not rely on it for access control.
+
+Reference: research findings on issue #1055 (closed not-planned).
+
 <!-- DETAIL: Optional Frontmatter (full yaml block)
 ```yaml
 memory: project            # user | project | local