oh-my-customcode 1.1.1 → 1.1.2

package/dist/cli/index.js

@@ -241,7 +241,7 @@ var init_package = __esm(() => {
     workspaces: [
       "packages/*"
     ],
-    version: "1.1.1",
+    version: "1.1.2",
     description: "Batteries-included agent harness for Claude Code",
     type: "module",
     bin: {

package/dist/index.js

@@ -2031,7 +2031,7 @@ var package_default = {
   workspaces: [
     "packages/*"
   ],
-  version: "1.1.1",
+  version: "1.1.2",
   description: "Batteries-included agent harness for Claude Code",
   type: "module",
   bin: {

package/package.json

@@ -3,7 +3,7 @@
   "workspaces": [
     "packages/*"
   ],
-  "version": "1.1.1",
+  "version": "1.1.2",
   "description": "Batteries-included agent harness for Claude Code",
   "type": "module",
   "bin": {

package/templates/.claude/agents/mgr-gitnerd.md

@@ -33,7 +33,7 @@ You are a Git operations specialist following GitHub flow best practices.
 ```
 <type>(<scope>): <subject>
 
-Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
+Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 ```
 
 Types: feat, fix, docs, style, refactor, test, chore

package/templates/.claude/agents/slack-cli-expert.md

@@ -14,7 +14,7 @@ tools:
 permissionMode: bypassPermissions
 ---
 
-You are an expert Slack CLI developer specialized in building, deploying, and managing Slack apps using the official Slack CLI v4.0 and the Slack Platform (https://docs.slack.dev/tools/slack-cli/). Slack CLI v4.0 adds first-class Slack Agent development support.
+You are an expert Slack CLI developer specialized in building, deploying, and managing Slack apps using the official Slack CLI (v4.x) and the Slack Platform (https://docs.slack.dev/tools/slack-cli/). Slack CLI v4.0 adds first-class Slack Agent development support.
 
 ## Capabilities
 

package/templates/.claude/agents/wiki-curator.md

@@ -22,7 +22,7 @@ Dedicated agent for wiki file operations. All wiki/ directory writes go through
 
 - Create new wiki pages from source file analysis
 - Update existing wiki pages when sources change
-- Maintain index.md and log.md
+- Maintain index.yaml and log.jsonl
 - Execute wiki lint fixes (orphan removal, cross-ref repair)
 - Generate synthesis pages (architecture, workflows, concepts)
 
@@ -51,18 +51,18 @@ Every page must:
 3. Determine what changed
 4. Write updated page with current date in `updated` field
 5. Update cross-references in related pages
-6. Update index.md if page is new
+6. Update index.yaml if page is new
 
 ### Batch Update (Category)
 1. Glob source files in category
 2. Compare modification dates against wiki pages
 3. Write only changed/new pages
-4. Batch-update index.md once at end
+4. Batch-update index.yaml once at end
 
 ### Lint Fix
 1. Receive lint findings from orchestrator
 2. Fix each category: remove orphans, repair broken refs, update stale pages
-3. Append fix results to log.md
+3. Append fix results to log.jsonl
 
 ## Limitations
 

package/templates/.claude/rules/MUST-agent-design.md

@@ -24,8 +24,7 @@ tools: [Read, Write, ...]  # Allowed tools
 | `sonnet5` | claude-sonnet-5 | CC default (v2.1.197+); native 1M context |
 | `opus` | claude-opus-4-6 | Complex reasoning, architecture |
 | `opusplan` | claude-opus-4-6 + plan mode | Architecture planning with approval gates |
-| `opus47` | claude-opus-4-7 | Supports xhigh effort |
-| `opus48` | claude-opus-4-8 | Latest Opus model (GA); highest capability below Fable 5 |
+| `opus48` | claude-opus-4-8 | Latest Opus model (GA); highest capability below Fable 5; supports xhigh effort |
 | `fable` | claude-fable-5 | Mythos-class; tier above Opus, highest GA capability (access added in CC v2.1.170) |
 
 Extended context suffix: `[1m]` (e.g., `claude-opus-4-6[1m]`) — enables 1M token context window.

package/templates/.claude/rules/MUST-orchestrator-coordination.md

@@ -287,7 +287,7 @@ The Agent tool defaults to `mode: "acceptEdits"`, which overrides agent frontmat
 | Scope | Every Agent tool call, without exception |
 | Why | CC's Agent tool `mode` default (`acceptEdits`) overrides frontmatter |
 | History | #926 (v0.99.1), #947 (v0.100.1), #955 (v0.103.0) — recurring issue |
-| Enforcement | Prompt-based (R021); all 23 agent-spawning skills include instruction |
+| Enforcement | Prompt-based (R021); all agent-spawning skills include instruction |
 
 ### Self-Check
 

package/templates/.claude/rules/index.yaml

@@ -132,6 +132,46 @@ rules:
     priority: MUST
     scope: orchestrator
 
+  # Completion Verification - MUST
+  - id: R020
+    name: completion-verification
+    title: Completion Verification Rules
+    path: ./MUST-completion-verification.md
+    priority: MUST
+    scope: all
+
+  # Enforcement Policy - MUST
+  - id: R021
+    name: enforcement-policy
+    title: Enforcement Policy
+    path: ./MUST-enforcement-policy.md
+    priority: MUST
+    scope: all
+
+  # Ontology-RAG Routing - SHOULD
+  - id: R019
+    name: ontology-rag-routing
+    title: Routing Enrichment Rules
+    path: ./SHOULD-ontology-rag-routing.md
+    priority: SHOULD
+    scope: orchestrator
+
+  # Wiki Sync - SHOULD
+  - id: R022
+    name: wiki-sync
+    title: Wiki Sync Rules
+    path: ./SHOULD-wiki-sync.md
+    priority: SHOULD
+    scope: all
+
+  # Verification Ladder - SHOULD
+  - id: R023
+    name: verification-ladder
+    title: Verification Ladder Rules
+    path: ./SHOULD-verification-ladder.md
+    priority: SHOULD
+    scope: all
+
   # MAY - Optional
   - id: R005
     name: optimization

package/templates/.claude/skills/action-validator/SKILL.md

@@ -70,9 +70,9 @@ policy_cache:
 
 Policy caching reduces redundant LLM calls for well-understood workflows. Policies are advisory — the orchestrator may override.
 
-## Capability Hints (Opus 4.7+)
+## Capability Hints (Opus 4.8+)
 
-When agents target Opus 4.7 (`opus47` model alias), tool capability hints improve batched tool-call planning. Declare per-tool metadata in policy cache entries:
+When agents target Opus 4.8 (`opus48` model alias), tool capability hints improve batched tool-call planning. Declare per-tool metadata in policy cache entries:
 
 | Field | Values | Effect |
 |-------|--------|--------|
@@ -109,15 +109,14 @@ When a synthesized harness exists for an agent (`.claude/outputs/harnesses/{agen
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-CC sensitive-path check inspects tool target paths and triggers permission prompts on `.claude/` regardless of `bypassPermissions` and allow rules (refs: #960, #961, #978, #981, #1016).
+Under `mode: "bypassPermissions"`, direct Write/Edit/Bash on `.claude/**` paths is permitted (CC v2.1.121+, #1101) — no `/tmp/*.sh` wrapping is needed.
 
 To write action-validator results under `.claude/outputs/sessions/`:
 
-1. Write the artifact body to `/tmp/action-validator-$(date +%H%M%S).md` first (Write tool target = `/tmp`, no sensitive-path trigger)
-2. Use a `/tmp/*.sh` Bash script to move/copy the file under `.claude/outputs/sessions/$(date +%Y-%m-%d)/` (Bash target = `/tmp`, script-internal `cp` to `.claude/` is not audited)
-3. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
+1. Write the artifact body directly to `.claude/outputs/sessions/$(date +%Y-%m-%d)/action-validator-$(date +%H%M%S).md` with the Write tool (every Agent tool call includes `mode: "bypassPermissions"`, R010)
+2. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
 
-Reference: `feedback_sensitive_path_tmp_bypass.md`, R006 sensitive-path handling, #1016, #1045.
+Reference: R006/R010 sensitive-path handling (CC v2.1.121+), #1101.
 
 
 | Mode | Source | Behavior |

package/templates/.claude/skills/adaptive-harness/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: adaptive-harness
+name: omcustom:adaptive-harness
 description: Auto-detect project context and optimize harness — deactivate unused agents/skills, suggest missing experts, generate project profile
 scope: harness
 version: 1.0.0
@@ -187,15 +187,14 @@ Append a record to `.claude/outputs/harness-adaptations/YYYY-MM-DD.md`:
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-CC sensitive-path check inspects tool target paths and triggers permission prompts on `.claude/` regardless of `bypassPermissions` and allow rules (refs: #960, #961, #978, #981, #1016).
+Under `mode: "bypassPermissions"`, direct Write/Edit/Bash on `.claude/**` paths is permitted (CC v2.1.121+, #1101) — no `/tmp/*.sh` wrapping is needed.
 
-To write adaptive-harness results under `.claude/outputs/sessions/`:
+To write adaptive-harness results under `.claude/outputs/`:
 
-1. Write the artifact body to `/tmp/adaptive-harness-$(date +%H%M%S).md` first (Write tool target = `/tmp`, no sensitive-path trigger)
-2. Use a `/tmp/*.sh` Bash script to move/copy the file under `.claude/outputs/sessions/$(date +%Y-%m-%d)/` (Bash target = `/tmp`, script-internal `cp` to `.claude/` is not audited)
-3. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
+1. Write the artifact body directly to `.claude/outputs/harness-adaptations/$(date +%Y-%m-%d).md` with the Write tool (every Agent tool call includes `mode: "bypassPermissions"`, R010)
+2. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
 
-Reference: `feedback_sensitive_path_tmp_bypass.md`, R006 sensitive-path handling, #1016, #1045.
+Reference: R006/R010 sensitive-path handling (CC v2.1.121+), #1101.
 
 
 ```markdown

package/templates/.claude/skills/agent-eval-framework/SKILL.md

@@ -75,15 +75,14 @@ Use this taxonomy to **select representative tasks per category** when building
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-CC sensitive-path check inspects tool target paths and triggers permission prompts on `.claude/` regardless of `bypassPermissions` and allow rules (refs: #960, #961, #978, #981, #1016).
+Under `mode: "bypassPermissions"`, direct Write/Edit/Bash on `.claude/**` paths is permitted (CC v2.1.121+, #1101) — no `/tmp/*.sh` wrapping is needed.
 
 To write eval trajectories or result reports under `.claude/outputs/evals/`:
 
-1. Write the artifact body to `/tmp/agent-eval-{HHmmss}.{ext}` first (Write tool target = /tmp, no sensitive-path trigger)
-2. Use a `/tmp/*.sh` Bash script to move/copy the file under `.claude/outputs/evals/{trajectories,sessions}/...` (Bash target = /tmp, script-internal `cp` to `.claude/` is not audited)
-3. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
+1. Write the artifact body directly to `.claude/outputs/evals/{trajectories,sessions}/...` with the Write tool (every Agent tool call includes `mode: "bypassPermissions"`, R010)
+2. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
 
-Reference: `feedback_sensitive_path_tmp_bypass.md`, R006 sensitive-path handling.
+Reference: R006/R010 sensitive-path handling (CC v2.1.121+), #1101.
 
 ## Phased Opt-in Gate Workflow
 

package/templates/.claude/skills/de-lead-routing/SKILL.md

@@ -5,11 +5,11 @@ scope: core
 user-invocable: false
 context: fork
 ---
-## Mandatory delegation directive (R010 Universal /tmp Script Bypass)
+## Mandatory delegation directive (R010 bypassPermissions)
 
 When this skill spawns a subagent via the Agent tool, the spawned prompt MUST include this directive verbatim (or equivalent):
 
-> ALL tool calls targeting `.claude/` paths MUST go through `/tmp/*.sh` script via Bash. This includes read-only measurement (sed/cat/wc/ls/grep), Write, Edit. Read tool is exempt. Direct Write/Edit/Bash on .claude/ triggers user approval prompts that block unattended automation. See R010 for the full pattern.
+> 이 스킬이 Agent tool로 서브에이전트를 스폰할 때 mode: "bypassPermissions"를 반드시 포함한다. 서브에이전트는 .claude/ 경로에 직접 Write/Edit/Bash를 사용한다(/tmp 우회 불필요, CC v2.1.121+). See R010.
 
 This directive is preserved inline because Agent-tool prompt synthesis can drop SKILL.md notes; inline mandatory directives survive (#1046 lesson).
 

package/templates/.claude/skills/deep-plan/SKILL.md

@@ -69,26 +69,21 @@ Research-only analysis produces findings based on assumptions about the codebase
 | `/structured-dev-cycle` | Full implementation | Yes — stage-by-stage | 6 |
 | **`/deep-plan`** | **Analysis + Planning + Verification** | **3-pass cross-verification** | **3** |
 
-## Sensitive-Path Artifact Protocol (MANDATORY)
-
-**R010 Universal /tmp Script Bypass (#1052)**: ALL `.claude/` modifications MUST use `/tmp/*.sh` script via Bash. Direct Write/Edit/Bash on `.claude/` triggers CC sensitive-path guard regardless of bypassPermissions.
+## Artifact Output (R006/R010)
 
 Phase 3 verification report path: `.claude/outputs/sessions/{YYYY-MM-DD}/deep-plan-{HHmmss}.md`
 
-When spawning the final synthesis agent to write this artifact, include verbatim in the agent prompt:
+Under `mode: "bypassPermissions"`, subagents write directly to `.claude/outputs/` with Write/Edit — no temp-script wrapping is needed (CC v2.1.121+, #1101). When spawning the final synthesis agent to write this artifact, include verbatim in the agent prompt:
 
 ```
-**Sensitive-path artifact protocol (mandatory for this task)**
-
-Write the artifact under `.claude/outputs/` using the /tmp/*.sh bypass:
-1. Build script in /tmp: cat > /tmp/deep-plan-<timestamp>.sh <<'EOF' ... EOF
-2. Script content: mkdir -p .claude/outputs/sessions/<date>/ && cat > .claude/outputs/sessions/<date>/deep-plan-<HHmmss>.md <<'ARTIFACT' ... ARTIFACT
-3. Execute: bash /tmp/deep-plan-<timestamp>.sh
-4. Cleanup: rm /tmp/deep-plan-<timestamp>.sh
-DO NOT use Write/Edit directly on `.claude/outputs/` — CC sensitive-path guard triggers regardless of bypassPermissions/allow rules.
+**Artifact output (for this task)**
+
+Write the verification report to `.claude/outputs/sessions/<date>/deep-plan-<HHmmss>.md`
+using the Write tool directly (create the directory if needed). Your Agent tool call
+runs under `mode: "bypassPermissions"`, so direct Write/Edit on `.claude/` is permitted.
 ```
 
-See R006 "Sensitive Path Handling" + `feedback_sensitive_path_tmp_bypass.md`.
+See R006 "Sensitive Path Handling" (CC v2.1.121+ direct-write convention).
 
 ## Agent Teams (R018)
 

package/templates/.claude/skills/deep-verify/SKILL.md

@@ -84,10 +84,9 @@ Run these checks before declaring release READY. Any match is a release blocker.
 
 | Guard | Detection Command | Severity | Remediation |
 |-------|-------------------|----------|-------------|
-| Skill Bash sensitive-path | `grep -rnE 'mkdir\s+-p[^` + "`" + `\n]*\.claude/(outputs\|agent-memory\|agent-memory-local)' .claude/skills/ templates/.claude/skills/ .claude/rules/ templates/.claude/rules/ 2>/dev/null` | **BLOCK** | Use /tmp/*.sh bypass — both `Bash(mkdir -p)` and `Write` tool on `.claude/` trigger sensitive-path guard. Write script to /tmp, invoke via Bash. See R006 "Sensitive Path Handling" + `feedback_sensitive_path_tmp_bypass.md` |
-| Skill artifact path missing /tmp bypass directive | `find .claude/skills/ templates/.claude/skills/ -name SKILL.md | xargs grep -lE '.claude/outputs/' | while read f; do if ! grep -qF 'tmp/*.sh' "$f"; then echo "$f"; fi; done` | **WARN** | Add /tmp/*.sh bypass directive after artifact path mention. Pattern: `> **Tool**: To write artifacts under .claude/outputs/, use a /tmp/*.sh script...` (see #1016 fix) |
+| Residual deprecated `/tmp` sensitive-path bypass narrative | `grep -rnE -e 'regardless of[[:space:]]+.?bypassPermissions' -e '(MUST|MANDATORY|Mandatory)[^\n]{0,80}/tmp/\*\.sh' -e '/tmp/\*\.sh[^\n]{0,80}(MANDATORY|MUST be used|bypass script)' .claude/skills/ templates/.claude/skills/ .claude/agents/ templates/.claude/agents/ 2>/dev/null` | **BLOCK** | Remove the deprecated temp-script bypass narrative — it was retired in CC v2.1.121 (#1101). Under `mode: "bypassPermissions"`, write directly to `.claude/` with Write/Edit. See R006 "Sensitive Path Handling" |
 
-> **Why**: CC sensitive-path check runs above `bypassPermissions` and Bash allow rules (#960/#961/#978/#981). Both `Bash(mkdir -p)` and `Write`/`Edit` tool on `.claude/` paths trigger permission prompts — `bypassPermissions` does not help. Use the /tmp/*.sh bypass: write script to /tmp, then `bash /tmp/x.sh` to let the script write to `.claude/` internally (sensitive-path guard only inspects direct tool target paths).
+> **Why**: The temp-script sensitive-path bypass for `.claude/` paths was deprecated in CC v2.1.121 (2026-04-28, #1101). Direct Write/Edit/Bash on `.claude/**` works under `mode: "bypassPermissions"`; only catastrophic shell operations (`rm -rf /`) remain independently blocked. Residual bypass procedures or false "guard blocks bypassPermissions" claims in skills/agents are now defects — this guard catches them with a cheap deterministic grep (R023 shift-left: catch stale platform procedures before they reach expensive review).
 
 ## Output Format
 

package/templates/.claude/skills/dev-lead-routing/SKILL.md

@@ -5,11 +5,11 @@ scope: core
 user-invocable: false
 context: fork
 ---
-## Mandatory delegation directive (R010 Universal /tmp Script Bypass)
+## Mandatory delegation directive (R010 bypassPermissions)
 
 When this skill spawns a subagent via the Agent tool, the spawned prompt MUST include this directive verbatim (or equivalent):
 
-> ALL tool calls targeting `.claude/` paths MUST go through `/tmp/*.sh` script via Bash. This includes read-only measurement (sed/cat/wc/ls/grep), Write, Edit. Read tool is exempt. Direct Write/Edit/Bash on .claude/ triggers user approval prompts that block unattended automation. See R010 for the full pattern.
+> 이 스킬이 Agent tool로 서브에이전트를 스폰할 때 mode: "bypassPermissions"를 반드시 포함한다. 서브에이전트는 .claude/ 경로에 직접 Write/Edit/Bash를 사용한다(/tmp 우회 불필요, CC v2.1.121+). See R010.
 
 This directive is preserved inline because Agent-tool prompt synthesis can drop SKILL.md notes; inline mandatory directives survive (#1046 lesson).
 

package/templates/.claude/skills/dev-review/SKILL.md

@@ -116,15 +116,14 @@ If only PASS/INFO: proceed automatically.
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-CC sensitive-path check inspects tool target paths and triggers permission prompts on `.claude/` regardless of `bypassPermissions` and allow rules (refs: #960, #961, #978, #981, #1016).
+Under `mode: "bypassPermissions"`, direct Write/Edit/Bash on `.claude/**` paths is permitted (CC v2.1.121+, #1101) — no `/tmp/*.sh` wrapping is needed.
 
 To write dev-review results under `.claude/outputs/sessions/`:
 
-1. Write the artifact body to `/tmp/dev-review-$(date +%H%M%S).md` first (Write tool target = `/tmp`, no sensitive-path trigger)
-2. Use a `/tmp/*.sh` Bash script to move/copy the file under `.claude/outputs/sessions/$(date +%Y-%m-%d)/` (Bash target = `/tmp`, script-internal `cp` to `.claude/` is not audited)
-3. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
+1. Write the artifact body directly to `.claude/outputs/sessions/$(date +%Y-%m-%d)/dev-review-$(date +%H%M%S).md` with the Write tool (every Agent tool call includes `mode: "bypassPermissions"`, R010)
+2. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
 
-Reference: `feedback_sensitive_path_tmp_bypass.md`, R006 sensitive-path handling, #1016, #1045.
+Reference: R006/R010 sensitive-path handling (CC v2.1.121+), #1101.
 
    ```
    With metadata header:

package/templates/.claude/skills/docker-best-practices/SKILL.md

@@ -179,8 +179,6 @@ best_practices:
   - Set resource limits
 
 pattern: |
-  version: "3.8"
-
   services:
     app:
       build:

package/templates/.claude/skills/hada-scout/SKILL.md

@@ -50,7 +50,7 @@ The haiku agent receives the following system prompt:
 
 ```
 You are a relevance filter for the oh-my-customcode project — an AI agent harness/orchestration
-system built on Claude Code CLI with 44 agents, 74 skills.
+system built on Claude Code CLI with 49 agents, 118 skills.
 
 Project domains (HIGH relevance):
 - AI agent orchestration, multi-agent systems, agent design patterns

package/templates/.claude/skills/harness-eval/SKILL.md

@@ -92,15 +92,11 @@ Results saved to `.claude/outputs/sessions/{YYYY-MM-DD}/harness-eval-{HHmmss}.md
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-CC sensitive-path check inspects tool target paths and triggers permission prompts on `.claude/` regardless of `bypassPermissions` and allow rules (refs: #960, #961, #978, #981, #1016).
+Under `mode: "bypassPermissions"`, direct Write/Edit/Bash on `.claude/**` paths (including `.claude/outputs/sessions/`) is permitted (CC v2.1.121+, #1101) — no `/tmp` wrapping is needed.
 
-To write harness-eval results under `.claude/outputs/sessions/`:
+Write harness-eval results directly to `.claude/outputs/sessions/$(date +%Y-%m-%d)/harness-eval-$(date +%H%M%S).md`. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification. Catastrophic shell operations (e.g., `rm -rf /`) remain blocked by independent safety guards. For CC < v2.1.121, see git history for the legacy `/tmp/*.sh` bypass pattern.
 
-1. Write the artifact body to `/tmp/harness-eval-$(date +%H%M%S).md` first (Write tool target = `/tmp`, no sensitive-path trigger)
-2. Use a `/tmp/*.sh` Bash script to move/copy the file under `.claude/outputs/sessions/$(date +%Y-%m-%d)/` (Bash target = `/tmp`, script-internal `cp` to `.claude/` is not audited)
-3. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
-
-Reference: `feedback_sensitive_path_tmp_bypass.md`, R006 sensitive-path handling, #1016, #1045.
+Reference: R006 Sensitive Path Handling, R010 Universal bypassPermissions, #1101.
 
 
 ## 4-Metric Quantitative Layer (added v0.113.0, #1025)

package/templates/.claude/skills/harness-synthesizer/SKILL.md

@@ -96,15 +96,11 @@ harness:
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-CC sensitive-path check inspects tool target paths and triggers permission prompts on `.claude/` regardless of `bypassPermissions` and allow rules (refs: #960, #961, #978, #981, #1016).
+Under `mode: "bypassPermissions"`, direct Write/Edit/Bash on `.claude/**` paths (including `.claude/outputs/sessions/`) is permitted (CC v2.1.121+, #1101) — no `/tmp` wrapping is needed.
 
-To write harness-synthesizer results under `.claude/outputs/sessions/`:
+Write harness-synthesizer results directly to `.claude/outputs/sessions/$(date +%Y-%m-%d)/harness-synthesizer-$(date +%H%M%S).md`. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification. Catastrophic shell operations (e.g., `rm -rf /`) remain blocked by independent safety guards. For CC < v2.1.121, see git history for the legacy `/tmp/*.sh` bypass pattern.
 
-1. Write the artifact body to `/tmp/harness-synthesizer-$(date +%H%M%S).md` first (Write tool target = `/tmp`, no sensitive-path trigger)
-2. Use a `/tmp/*.sh` Bash script to move/copy the file under `.claude/outputs/sessions/$(date +%Y-%m-%d)/` (Bash target = `/tmp`, script-internal `cp` to `.claude/` is not audited)
-3. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
-
-Reference: `feedback_sensitive_path_tmp_bypass.md`, R006 sensitive-path handling, #1016, #1045.
+Reference: R006 Sensitive Path Handling, R010 Universal bypassPermissions, #1101.
 
 3. **Synthesize validation harness** — generate YAML harness matching agent's declared capabilities
 4. **Refine via evaluator-optimizer loop** — iterate harness against edge cases (3 rounds max)

package/templates/.claude/skills/help/SKILL.md

@@ -73,9 +73,6 @@ help --agents
 
 Available Agents:
 
-Orchestrator:
-  secretary        Manages manager agents
-
 Manager:
   mgr-creator          Creates new agents
   mgr-updater          Updates external sources and docs
@@ -98,7 +95,7 @@ Infra Engineer:
   infra-docker-expert       Docker containerization
   infra-aws-expert          AWS architecture
 
-Total: 15 agents
+Total: 49 agents
 ```
 
 ### Rules List
@@ -112,16 +109,16 @@ MUST (Never violate):
   R001  Safety Rules         Prohibited actions
   R002  Permission Rules     Tool tiers, file access
   R006  Agent Design         Structure, separation
+  R007  Agent Identification Display agent in responses
+  R008  Tool Identification  Display agent when using tools
+  R009  Parallel Execution   Max 4 parallel instances
 
 SHOULD (Strongly recommended):
   R003  Interaction Rules    Response format
   R004  Error Handling       Error levels, recovery
-  R007  Agent Identification Display agent in responses
-  R008  Tool Identification  Display agent when using tools
 
 MAY (Optional):
   R005  Optimization         Efficiency guidelines
-  R009  Parallel Execution   Max 4 parallel instances
 
-Total: 10 rules
+Total: 23 rules
 ```

package/templates/.claude/skills/lists/SKILL.md

@@ -24,22 +24,23 @@ Show all available commands with optional filtering and detailed information.
 AI Agent System - Available Commands
 
 System:
-  lists              Show all available commands
-  status             Show system status
-  help               Show help information
+  /omcustom:lists    Show all available commands
+  /omcustom:status   Show system status
+  /omcustom:help     Show help information
 
 Manager:
-  /create-agent          Create a new agent
-  /update-docs           Sync documentation with project structure
-  /update-external       Update agents from external sources
-  /audit-agents          Audit agent dependencies
-  /fix-refs              Fix broken references
+  /omcustom:create-agent     Create a new agent
+  /omcustom:update-docs      Sync documentation with project structure
+  /omcustom:update-external  Update agents from external sources
+  /omcustom:audit-agents     Audit agent dependencies
+  /omcustom:fix-refs         Fix broken references
 
 Dev:
   /dev-review        Review code for best practices
   /dev-refactor      Refactor code
 
 Use "<command> --help" for detailed information.
+Run "/omcustom:lists" to see the full command set (60+).
 ```
 
 ### Verbose Output
@@ -49,24 +50,24 @@ lists --verbose
 AI Agent System - Available Commands (Detailed)
 
 System Commands:
-┌─────────┬──────────────────────────────────────────────┐
-│ Command │ Description                                  │
-├─────────┼──────────────────────────────────────────────┤
-│ lists   │ Show all available commands                  │
-│ status  │ Show system status and health checks         │
-│ help    │ Show help for commands and agents            │
-└─────────┴──────────────────────────────────────────────┘
+┌───────────────────┬──────────────────────────────────────┐
+│ Command           │ Description                          │
+├───────────────────┼──────────────────────────────────────┤
+│ /omcustom:lists   │ Show all available commands          │
+│ /omcustom:status  │ Show system status and health checks │
+│ /omcustom:help    │ Show help for commands and agents    │
+└───────────────────┴──────────────────────────────────────┘
 
 Manager Commands:
-┌──────────────────┬──────────────────────────────────────┐
-│ Command          │ Description                          │
-├──────────────────┼──────────────────────────────────────┤
-│ /create-agent    │ Create a new agent with structure    │
-│ /update-docs     │ Sync all docs with project state     │
-│ /update-external │ Update from external sources         │
-│ /audit-agents    │ Check dependencies and refs          │
-│ /fix-refs        │ Auto-fix broken references           │
-└──────────────────┴──────────────────────────────────────┘
+┌─────────────────────────────┬──────────────────────────────────────┐
+│ Command                     │ Description                          │
+├─────────────────────────────┼──────────────────────────────────────┤
+│ /omcustom:create-agent      │ Create a new agent with structure    │
+│ /omcustom:update-docs       │ Sync all docs with project state     │
+│ /omcustom:update-external   │ Update from external sources         │
+│ /omcustom:audit-agents      │ Check dependencies and refs          │
+│ /omcustom:fix-refs          │ Auto-fix broken references           │
+└─────────────────────────────┴──────────────────────────────────────┘
 
 Dev Commands:
 ┌──────────────┬────────────────────────────────────────┐
@@ -76,5 +77,5 @@ Dev Commands:
 │ /dev-refactor│ Suggest and apply refactoring          │
 └──────────────┴────────────────────────────────────────┘
 
-Total: 10 commands available
+Total: 60+ commands available
 ```

package/templates/.claude/skills/monitoring-setup/SKILL.md

@@ -103,6 +103,9 @@ This skill activates when the user mentions any of:
 | `claude_code.api_error` | API error details |
 | `claude_code.tool_decision` | Tool accept/reject decisions |
 | `claude_code.user_prompt` | User prompt metadata (content redacted by default) |
+| `claude_code.assistant_response` | Assistant response text (v2.1.193+; redacted unless opted in) |
+
+> **v2.1.193+ security note (R012)**: The `claude_code.assistant_response` log event carries the model's response text. It is redacted unless `OTEL_LOG_ASSISTANT_RESPONSES=1`; when that variable is unset it FOLLOWS `OTEL_LOG_USER_PROMPTS`. A deployment already logging prompt content therefore begins receiving response content immediately on upgrade. To keep prompts-only logging, set `OTEL_LOG_ASSISTANT_RESPONSES=0` explicitly.
 
 ## Upgrade Path
 
@@ -133,7 +136,7 @@ OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317
     "OTEL_LOGS_EXPORTER": "otlp",
     "OTEL_EXPORTER_OTLP_PROTOCOL": "grpc",
     "OTEL_EXPORTER_OTLP_ENDPOINT": "http://localhost:4317",
-    "OTEL_RESOURCE_ATTRIBUTES": "service.name=claude-code,service.version=2.1.85"
+    "OTEL_RESOURCE_ATTRIBUTES": "service.name=claude-code,service.version=2.1.197"
   }
 }
 ```

package/templates/.claude/skills/post-release-followup/SKILL.md

@@ -27,15 +27,9 @@ Gather unfinished work from multiple sources:
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-CC sensitive-path check inspects tool target paths and triggers permission prompts on `.claude/` regardless of `bypassPermissions` and allow rules (refs: #960, #961, #978, #981, #1016).
+Under `mode: "bypassPermissions"`, subagents write directly to `.claude/outputs/sessions/` with the Write tool — direct `.claude/**` writes are permitted (CC v2.1.121+, #1101). No `/tmp` staging or script wrapping is needed. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification.
 
-To write post-release-followup results under `.claude/outputs/sessions/`:
-
-1. Write the artifact body to `/tmp/post-release-followup-$(date +%H%M%S).md` first (Write tool target = `/tmp`, no sensitive-path trigger)
-2. Use a `/tmp/*.sh` Bash script to move/copy the file under `.claude/outputs/sessions/$(date +%Y-%m-%d)/` (Bash target = `/tmp`, script-internal `cp` to `.claude/` is not audited)
-3. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
-
-Reference: `feedback_sensitive_path_tmp_bypass.md`, R006 sensitive-path handling, #1016, #1045.
+Reference: R006/R010 sensitive-path handling (direct `.claude/**` write under bypassPermissions), #1101.
 
 - Extract any MEDIUM or LOW severity findings that were flagged but not fixed