oh-my-customcode 2.0.7 → 2.0.8

package/README.md

@@ -117,13 +117,14 @@ Soft default is 4 concurrent agents, hard cap 5. Agent Teams (shared task list,
 
 | Category | Count | Agents |
 |----------|-------|--------|
-| Languages | 6 | lang-golang, lang-python, lang-rust, lang-kotlin, lang-typescript, lang-java21 |
+| Languages | 6 | lang-golang, lang-python, lang-rust, lang-kotlin, lang-typescript, lang-java |
 | Backend | 6 | be-fastapi, be-springboot, be-go-backend, be-express, be-nestjs, be-django |
 | Frontend | 5 | fe-vercel, fe-vuejs, fe-svelte, fe-flutter, fe-design |
 | Data Engineering | 6 | de-airflow, de-dbt, de-spark, de-kafka, de-snowflake, de-pipeline |
 | Database | 4 | db-supabase, db-postgres, db-redis, db-alembic |
 | Tooling | 4 | tool-npm, tool-optimizer, tool-bun, slack-cli |
-| Architecture | 3 | arch-documenter, arch-speckit, agora-runner |
+| Architecture | 2 | arch-documenter, arch-speckit |
+| Agora | 1 | agora-runner |
 | Infrastructure | 2 | infra-docker, infra-aws |
 | QA | 3 | qa-planner, qa-writer, qa-engineer |
 | Security | 1 | sec-codeql |

package/dist/cli/index.js

@@ -335,7 +335,7 @@ var init_package = __esm(() => {
     workspaces: [
       "packages/*"
     ],
-    version: "2.0.7",
+    version: "2.0.8",
     description: "Batteries-included agent harness for Claude Code",
     type: "module",
     bin: {
@@ -17315,7 +17315,11 @@ import { basename as basename3, join as join8 } from "node:path";
 // src/core/hook-group-merge.ts
 var LEGACY_OMCUSTOM_DESCRIPTIONS = [
   "Record agent outcomes + auto-continue workflow + R007/R008 drift advisory on subagent completion (autonomous-loop re-entry, #1545)",
-  'Re-inject project CLAUDE.md into model context on session start/resume/clear and compact re-entry — matcher "*" covers all SessionStart sources including "compact" (#1617)'
+  'Re-inject project CLAUDE.md into model context on session start/resume/clear and compact re-entry — matcher "*" covers all SessionStart sources including "compact" (#1617)',
+  "Block dev servers outside tmux - ensures you can access logs",
+  "Block creation of random .md files - keeps docs consolidated",
+  "Record agent outcomes + auto-continue workflow + R007/R008 drift advisory + failure advisory on subagent completion (autonomous-loop re-entry, #1545; #1631 replaced the self-referential prompt-type judge hook with an advisory-only command hook)",
+  "Validate externally modified files — advisory staleness warning (v2.1.83+)"
 ];
 var STANDALONE_SCRIPT_COMMAND = /^(?:bash )?(?:"(?:\$\{CLAUDE_PROJECT_DIR:-\.\}\/|\.\/)?\.claude\/hooks\/((?:scripts\/)?[A-Za-z0-9._-]+\.sh)"|(?:\.\/)?\.claude\/hooks\/((?:scripts\/)?[A-Za-z0-9._-]+\.sh))$/;
 var SCRIPT_REFERENCE = /\.claude\/hooks\/((?:scripts\/)?[A-Za-z0-9._-]+\.sh)/g;
@@ -18199,6 +18203,16 @@ function analyzeMatcher(raw) {
   }
   return analyzeMixedAndExpr(ast, raw);
 }
+var FILE_CHANGED_LITERAL_SEGMENT = /^(?!\.+$)[A-Za-z0-9._-]+$/;
+function analyzeFileChangedMatcher(raw) {
+  if (raw === undefined)
+    return null;
+  const segments = raw.split("|");
+  if (!segments.every((segment) => FILE_CHANGED_LITERAL_SEGMENT.test(segment))) {
+    return null;
+  }
+  return { toolRegex: raw, fieldNode: null };
+}
 function fieldNodeToJq(node) {
   switch (node.kind) {
     case "and":
@@ -18235,9 +18249,9 @@ function buildGuardedCommand(jqCond, originalCommand) {
 var CLASSIFICATION_TABLE = [
   {
     event: "PreToolUse",
-    description: "Block dev servers outside tmux - ensures you can access logs",
+    description: "Advise (additionalContext, never blocks) when a foreground dev server starts outside tmux/run_in_background - keeps logs accessible",
     decision: "wrap-guard",
-    reason: 'inline script unconditionally `exit 1`-blocks on ANY match once invoked; it never re-parses tool_input.command, so widening the matcher to bare "Bash" would block every Bash call'
+    reason: "inline script is an advisory (always exit 0, additionalContext only); it re-parses tool_input.command for a dev command at command position and stays silent for tmux, `run_in_background: true`, backgrounded and mention-only commands, but the wrap-guard is kept as a cheap pre-filter so non-matching Bash calls do not spawn the POSIX-sh segment parser"
   },
   {
     event: "PreToolUse",
@@ -18253,9 +18267,9 @@ var CLASSIFICATION_TABLE = [
   },
   {
     event: "PreToolUse",
-    description: "Block creation of random .md files - keeps docs consolidated",
+    description: "Non-blocking notice on new .md/.txt files (exit 1) - keeps docs consolidated",
     decision: "drop-condition",
-    reason: "inline script re-parses tool_input.file_path via jq and re-tests both the `\\.(md|txt)$` and the README/CLAUDE/AGENT/SKILL exclusion with its own [[ =~ ]] checks before blocking — the matcher condition is fully redundant with the script body"
+    reason: "inline script re-parses tool_input.file_path via jq and re-tests both the `\\.(md|txt)$` and the README/CLAUDE/AGENT/SKILL exclusion with its own POSIX `case` patterns before printing its non-blocking exit-1 notice (per a CC 2.1.310 runtime probe, neither the tool block nor the stderr of an exit-1 PreToolUse hook reaches the model) — the matcher condition is fully redundant with the script body"
   },
   {
     event: "PreToolUse",
@@ -18339,16 +18353,23 @@ function convertHookCommand(cmd, fieldNode, decision, warnCollector, context) {
     command: buildGuardedCommand(jqCond, cmd.command)
   };
 }
+function warnNonLiteralFileChangedMatcher(event, rawMatcher, analysis, context, warnCollector) {
+  if (event !== "FileChanged" || rawMatcher === undefined || analyzeFileChangedMatcher(rawMatcher) !== null) {
+    return;
+  }
+  warnCollector.push(`hooks: ${context} — FileChanged matcher ${JSON.stringify(rawMatcher)} is not a |-separated list of literal filenames; FileChanged matchers are literal filenames (not tool-name regexes, globs, or expressions), so the converted matcher ${JSON.stringify(analysis.toolRegex)} would watch a file of that exact name — use e.g. "CLAUDE.md|bun.lock"`);
+}
 function convertHooksEntry(event, entry, warnCollector) {
   const context = `${event} / "${entry.description ?? "(no description)"}"`;
   let analysis;
   try {
-    analysis = analyzeMatcher(entry.matcher);
+    analysis = (event === "FileChanged" ? analyzeFileChangedMatcher(entry.matcher) : null) ?? analyzeMatcher(entry.matcher);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     warnCollector.push(`hooks: ${context} — matcher could not be auto-converted, entry EXCLUDED: ${message}`);
     return null;
   }
+  warnNonLiteralFileChangedMatcher(event, entry.matcher, analysis, context, warnCollector);
   let decision = "auto";
   if (analysis.fieldNode !== null) {
     const classification = findClassification(event, entry.description);

package/dist/index.js

@@ -1151,7 +1151,11 @@ import { basename, join as join3 } from "node:path";
 // src/core/hook-group-merge.ts
 var LEGACY_OMCUSTOM_DESCRIPTIONS = [
   "Record agent outcomes + auto-continue workflow + R007/R008 drift advisory on subagent completion (autonomous-loop re-entry, #1545)",
-  'Re-inject project CLAUDE.md into model context on session start/resume/clear and compact re-entry — matcher "*" covers all SessionStart sources including "compact" (#1617)'
+  'Re-inject project CLAUDE.md into model context on session start/resume/clear and compact re-entry — matcher "*" covers all SessionStart sources including "compact" (#1617)',
+  "Block dev servers outside tmux - ensures you can access logs",
+  "Block creation of random .md files - keeps docs consolidated",
+  "Record agent outcomes + auto-continue workflow + R007/R008 drift advisory + failure advisory on subagent completion (autonomous-loop re-entry, #1545; #1631 replaced the self-referential prompt-type judge hook with an advisory-only command hook)",
+  "Validate externally modified files — advisory staleness warning (v2.1.83+)"
 ];
 var STANDALONE_SCRIPT_COMMAND = /^(?:bash )?(?:"(?:\$\{CLAUDE_PROJECT_DIR:-\.\}\/|\.\/)?\.claude\/hooks\/((?:scripts\/)?[A-Za-z0-9._-]+\.sh)"|(?:\.\/)?\.claude\/hooks\/((?:scripts\/)?[A-Za-z0-9._-]+\.sh))$/;
 var SCRIPT_REFERENCE = /\.claude\/hooks\/((?:scripts\/)?[A-Za-z0-9._-]+\.sh)/g;
@@ -1788,6 +1792,16 @@ function analyzeMatcher(raw) {
   }
   return analyzeMixedAndExpr(ast, raw);
 }
+var FILE_CHANGED_LITERAL_SEGMENT = /^(?!\.+$)[A-Za-z0-9._-]+$/;
+function analyzeFileChangedMatcher(raw) {
+  if (raw === undefined)
+    return null;
+  const segments = raw.split("|");
+  if (!segments.every((segment) => FILE_CHANGED_LITERAL_SEGMENT.test(segment))) {
+    return null;
+  }
+  return { toolRegex: raw, fieldNode: null };
+}
 function fieldNodeToJq(node) {
   switch (node.kind) {
     case "and":
@@ -1824,9 +1838,9 @@ function buildGuardedCommand(jqCond, originalCommand) {
 var CLASSIFICATION_TABLE = [
   {
     event: "PreToolUse",
-    description: "Block dev servers outside tmux - ensures you can access logs",
+    description: "Advise (additionalContext, never blocks) when a foreground dev server starts outside tmux/run_in_background - keeps logs accessible",
     decision: "wrap-guard",
-    reason: 'inline script unconditionally `exit 1`-blocks on ANY match once invoked; it never re-parses tool_input.command, so widening the matcher to bare "Bash" would block every Bash call'
+    reason: "inline script is an advisory (always exit 0, additionalContext only); it re-parses tool_input.command for a dev command at command position and stays silent for tmux, `run_in_background: true`, backgrounded and mention-only commands, but the wrap-guard is kept as a cheap pre-filter so non-matching Bash calls do not spawn the POSIX-sh segment parser"
   },
   {
     event: "PreToolUse",
@@ -1842,9 +1856,9 @@ var CLASSIFICATION_TABLE = [
   },
   {
     event: "PreToolUse",
-    description: "Block creation of random .md files - keeps docs consolidated",
+    description: "Non-blocking notice on new .md/.txt files (exit 1) - keeps docs consolidated",
     decision: "drop-condition",
-    reason: "inline script re-parses tool_input.file_path via jq and re-tests both the `\\.(md|txt)$` and the README/CLAUDE/AGENT/SKILL exclusion with its own [[ =~ ]] checks before blocking — the matcher condition is fully redundant with the script body"
+    reason: "inline script re-parses tool_input.file_path via jq and re-tests both the `\\.(md|txt)$` and the README/CLAUDE/AGENT/SKILL exclusion with its own POSIX `case` patterns before printing its non-blocking exit-1 notice (per a CC 2.1.310 runtime probe, neither the tool block nor the stderr of an exit-1 PreToolUse hook reaches the model) — the matcher condition is fully redundant with the script body"
   },
   {
     event: "PreToolUse",
@@ -1928,16 +1942,23 @@ function convertHookCommand(cmd, fieldNode, decision, warnCollector, context) {
     command: buildGuardedCommand(jqCond, cmd.command)
   };
 }
+function warnNonLiteralFileChangedMatcher(event, rawMatcher, analysis, context, warnCollector) {
+  if (event !== "FileChanged" || rawMatcher === undefined || analyzeFileChangedMatcher(rawMatcher) !== null) {
+    return;
+  }
+  warnCollector.push(`hooks: ${context} — FileChanged matcher ${JSON.stringify(rawMatcher)} is not a |-separated list of literal filenames; FileChanged matchers are literal filenames (not tool-name regexes, globs, or expressions), so the converted matcher ${JSON.stringify(analysis.toolRegex)} would watch a file of that exact name — use e.g. "CLAUDE.md|bun.lock"`);
+}
 function convertHooksEntry(event, entry, warnCollector) {
   const context = `${event} / "${entry.description ?? "(no description)"}"`;
   let analysis;
   try {
-    analysis = analyzeMatcher(entry.matcher);
+    analysis = (event === "FileChanged" ? analyzeFileChangedMatcher(entry.matcher) : null) ?? analyzeMatcher(entry.matcher);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     warnCollector.push(`hooks: ${context} — matcher could not be auto-converted, entry EXCLUDED: ${message}`);
     return null;
   }
+  warnNonLiteralFileChangedMatcher(event, entry.matcher, analysis, context, warnCollector);
   let decision = "auto";
   if (analysis.fieldNode !== null) {
     const classification = findClassification(event, entry.description);
@@ -2906,7 +2927,7 @@ var package_default = {
   workspaces: [
     "packages/*"
   ],
-  version: "2.0.7",
+  version: "2.0.8",
   description: "Batteries-included agent harness for Claude Code",
   type: "module",
   bin: {

package/package.json

@@ -3,7 +3,7 @@
   "workspaces": [
     "packages/*"
   ],
-  "version": "2.0.7",
+  "version": "2.0.8",
   "description": "Batteries-included agent harness for Claude Code",
   "type": "module",
   "bin": {

package/templates/.claude/hooks/hooks.json

@@ -17,10 +17,10 @@
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\ncmd=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.command // \"\"')\n\n# Block dev servers that aren't run in tmux\necho '[Hook] BLOCKED: Dev server must run in tmux for log access' >&2\necho '[Hook] Use this command instead:' >&2\necho \"[Hook] tmux new-session -d -s dev 'npm run dev'\" >&2\necho '[Hook] Then: tmux attach -t dev' >&2\nexit 1"
+            "command": "#!/bin/sh\ninput=$(cat)\ncmd=$(printf '%s' \"$input\" | jq -r '.tool_input.command // \"\"' 2>/dev/null)\nbg=$(printf '%s' \"$input\" | jq -r '.tool_input.run_in_background // false' 2>/dev/null)\n\n# Advisory only: never blocks (always exit 0). Stay silent for background runs, tmux-wrapped commands,\n# mentions of the dev command in other commands, and variants like dev:test / develop / devtools.\n[ \"$bg\" = \"true\" ] && exit 0\nif printf '%s' \"$cmd\" | grep -Eq '^[[:space:]]*tmux([[:space:]]|$)'; then exit 0; fi\n\n# Drop quoted strings, then split into segments at && || ; | ( ) and newlines\nsegs=$(printf '%s' \"$cmd\" | sed -e 's/\"[^\"]*\"//g' -e \"s/'[^']*'//g\" -e 's/&&/;/g' -e 's/||/;/g' | tr ';|()\\n' '\\n\\n\\n\\n\\n')\n\n# Command position (optionally after VAR=value), word boundary after the dev command, segment not backgrounded with &\nhit=$(printf '%s\\n' \"$segs\" | grep -E '^[[:space:]]*([A-Za-z_][A-Za-z0-9_]*=[^[:space:]]*[[:space:]]+)*(npm run dev|pnpm( run)? dev|yarn dev|bun run dev)([[:space:])]|$)' | grep -Ev '(^|[^>&])&([^&>]|$)' | head -n 1)\n\nif [ -n \"$hit\" ]; then\n  printf '%s\\n' '{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"additionalContext\":\"[Hook] 포그라운드 dev 서버 시작이 감지되었습니다. 로그 접근을 위해 run_in_background: true 로 실행하거나 tmux 세션(예: tmux new-session -d -s dev) 안에서 실행하는 것을 권장합니다. 이 알림은 차단하지 않습니다.\"}}'\nfi\nexit 0"
           }
         ],
-        "description": "Block dev servers outside tmux - ensures you can access logs"
+        "description": "Advise (additionalContext, never blocks) when a foreground dev server starts outside tmux/run_in_background - keeps logs accessible"
       },
       {
         "matcher": "tool == \"Bash\" && tool_input.command matches \"(npm (install|test)|pnpm (install|test)|yarn (install|test)|bun (install|test)|cargo build|make|docker|pytest|vitest|playwright)\"",
@@ -47,10 +47,10 @@
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\nfile_path=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.file_path // \"\"')\n\nif [[ \"$file_path\" =~ \\.(md|txt)$ ]] && [[ ! \"$file_path\" =~ (README|CLAUDE|AGENT|SKILL)\\.md$ ]]; then\n  echo \"[Hook] BLOCKED: Unnecessary documentation file creation\" >&2\n  echo \"[Hook] File: $file_path\" >&2\n  echo \"[Hook] Use README.md or AGENT.md for documentation instead\" >&2\n  exit 1\nfi\n\nprintf '%s\\n' \"$input\""
+            "command": "#!/bin/sh\ninput=$(cat)\nfile_path=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.file_path // \"\"')\n\ncase \"$file_path\" in\n  *README.md|*CLAUDE.md|*AGENT.md|*SKILL.md) ;;\n  *.md|*.txt)\n    echo \"[Hook] NOTICE (non-blocking): new documentation file - the write is not blocked\" >&2\n    echo \"[Hook] File: $file_path\" >&2\n    echo \"[Hook] Prefer README.md or AGENT.md for documentation if this is not a deliberate new doc\" >&2\n    exit 1\n    ;;\nesac\n\nprintf '%s\\n' \"$input\""
           }
         ],
-        "description": "Block creation of random .md files - keeps docs consolidated"
+        "description": "Non-blocking notice on new .md/.txt files (exit 1) - keeps docs consolidated"
       },
       {
         "matcher": "tool == \"Edit\" || tool == \"Write\"",
@@ -102,6 +102,16 @@
         ],
         "description": "Block rule file deletion — requires individual user confirmation per rule (R001 safety)"
       },
+      {
+        "matcher": "tool == \"Bash\"",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/bash-cd-advisor.sh\""
+          }
+        ],
+        "description": "Advise against top-level (non-subshell) cd in Bash commands; cd persists as session cwd (R005, #1834/#1816 H2)"
+      },
       {
         "matcher": "tool == \"Task\" || tool == \"Agent\"",
         "hooks": [
@@ -274,13 +284,9 @@
           {
             "type": "command",
             "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/r007-r008-drift-advisor.sh\""
-          },
-          {
-            "type": "command",
-            "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/subagent-failure-advisor.sh\""
           }
         ],
-        "description": "Record agent outcomes + auto-continue workflow + R007/R008 drift advisory + failure advisory on subagent completion (autonomous-loop re-entry, #1545; #1631 replaced the self-referential prompt-type judge hook with an advisory-only command hook)"
+        "description": "Record agent outcomes + stall and consecutive-completion advisories + R007/R008 drift advisory on subagent completion — advisory-only, never continues or blocks the workflow (autonomous-loop re-entry, #1545; #1631 replaced the self-referential prompt-type judge hook with an advisory-only command hook; #1880)"
       }
     ],
     "CwdChanged": [
@@ -297,14 +303,14 @@
     ],
     "FileChanged": [
       {
-        "matcher": "*",
+        "matcher": "CLAUDE.md|bun.lock|yarn.lock|Cargo.lock|poetry.lock|package-lock.json|pnpm-lock.yaml",
         "hooks": [
           {
             "type": "command",
             "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/file-change-validator.sh\""
           }
         ],
-        "description": "Validate externally modified files — advisory staleness warning (v2.1.83+)"
+        "description": "Warn on external changes to CLAUDE.md and the bun/yarn/Cargo/poetry/npm/pnpm lock files in the working directory — stderr shown to the user only, never blocks; the matcher lists literal filenames because CC registers each |-separated segment as a literal file to watch (v2.1.83+, #1775)"
       }
     ],
     "Notification": [
@@ -385,7 +391,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\ncmd=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.command')\n\nif echo \"$cmd\" | grep -qE 'gh pr create'; then\n  output=$(printf '%s\\n' \"$input\" | jq -r '.tool_output.output // \"\"')\n  pr_url=$(echo \"$output\" | grep -oE 'https://github.com/[^/]+/[^/]+/pull/[0-9]+')\n  \n  if [ -n \"$pr_url\" ]; then\n    echo \"[Hook] PR created: $pr_url\" >&2\n    echo \"[Hook] Checking GitHub Actions status...\" >&2\n    repo=$(echo \"$pr_url\" | sed -E 's|https://github.com/([^/]+/[^/]+)/pull/[0-9]+|\\1|')\n    pr_num=$(echo \"$pr_url\" | sed -E 's|.*/pull/([0-9]+)|\\1|')\n    echo \"[Hook] To review PR: gh pr review $pr_num --repo $repo\" >&2\n  fi\nfi\n\nprintf '%s\\n' \"$input\""
+            "command": "#!/bin/bash\ninput=$(cat)\ncmd=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.command')\n\nif echo \"$cmd\" | grep -qE 'gh pr create'; then\n  output=$(printf '%s\\n' \"$input\" | jq -r '.tool_response.stdout // .tool_output.output // \"\"')\n  pr_url=$(echo \"$output\" | grep -oE 'https://github.com/[^/]+/[^/]+/pull/[0-9]+')\n  \n  if [ -n \"$pr_url\" ]; then\n    echo \"[Hook] PR created: $pr_url\" >&2\n    echo \"[Hook] Checking GitHub Actions status...\" >&2\n    repo=$(echo \"$pr_url\" | sed -E 's|https://github.com/([^/]+/[^/]+)/pull/[0-9]+|\\1|')\n    pr_num=$(echo \"$pr_url\" | sed -E 's|.*/pull/([0-9]+)|\\1|')\n    echo \"[Hook] To review PR: gh pr review $pr_num --repo $repo\" >&2\n  fi\nfi\n\nprintf '%s\\n' \"$input\""
           }
         ],
         "description": "Log PR URL and provide review command after PR creation"
@@ -632,6 +638,16 @@
           }
         ],
         "description": "FAIL-axis instrumentation — append tool failures to the error ledger (JSONL). Never blocks; feeds fail-axis-cause-advisor.sh (#1561)"
+      },
+      {
+        "matcher": "tool == \"Task\" || tool == \"Agent\"",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/subagent-failure-advisor.sh\""
+          }
+        ],
+        "description": "Advise on failed Agent/Task spawns via additionalContext (e.g. unknown subagent_type). Advisory only (additionalContext); the script's only explicit exit is exit 0 (#1775)"
       }
     ]
   }

package/templates/.claude/hooks/scripts/auto-continue-guard.sh

@@ -1,16 +1,16 @@
 #!/bin/bash
 set -euo pipefail
 
-# Auto-Continue Guard
+# Consecutive-Completion Guard (file name kept for hook wiring)
 # Trigger: SubagentStop
-# Purpose: Count consecutive subagent completions and warn when auto-continue limit reached
+# Purpose: Count consecutive subagent completions and emit an advisory from the 4th consecutive completion on
 # Protocol: stdin JSON -> count check -> stdout pass-through, the only explicit exit is exit 0 (R021); under set -u a corrupt counter file can exit 1 (non-blocking for SubagentStop)
 
 input=$(cat)
 
 count_file="/tmp/.claude-loop-count-${PPID}"
 
-# Reset counter if stale (>60s since last update)
+# Reset counter if >60s idle since the LAST update (window chains per completion)
 if [ -f "$count_file" ]; then
   last_mod=$(stat -c%Y "$count_file" 2>/dev/null || stat -f%m "$count_file" 2>/dev/null || echo 0)
   now=$(date +%s)
@@ -24,9 +24,9 @@ count=$(cat "$count_file" 2>/dev/null || echo 0)
 count=$((count + 1))
 echo "$count" > "$count_file"
 
-# Warn if limit reached
+# Advisory from the 4th consecutive completion (each within 60s of the previous)
 if [ "$count" -ge 4 ]; then
-  echo '[AutoContinue] SAFETY: auto-continue limit (3) reached. Pausing.' >&2
+  echo '[ConsecutiveCompletions] ADVISORY: 4+ consecutive subagent completions, each within 60s of the previous (advisory only; nothing is paused).' >&2
 fi
 
 printf '%s\n' "$input"

package/templates/.claude/hooks/scripts/auto-dev-token-tracker.sh

@@ -24,7 +24,18 @@ LOG_FILE="/tmp/auto-dev-spend-${PPID}.json"
 agent_type=$(printf '%s\n' "$input" | jq -r '.tool_input.subagent_type // "unknown"' 2>/dev/null || echo "unknown")
 description=$(printf '%s\n' "$input" | jq -r '.tool_input.description // ""' 2>/dev/null || echo "")
 prompt_text=$(printf '%s\n' "$input" | jq -r '.tool_input.prompt // ""' 2>/dev/null || echo "")
-output_text=$(printf '%s\n' "$input" | jq -r '.tool_output.output // .tool_output // ""' 2>/dev/null || echo "")
+# PostToolUse carries "tool_response", not "tool_output" (#1775; probe: CC 2.1.310,
+# "claude -p", one run, haiku). Measured async Agent launch shape: object {agentId,
+# canContinueAgent, canReadOutputFile, description, isAsync, outputFile, prompt,
+# resolvedModel, status:"async_launched"} - it has NO subagent result text, so the
+# tokens_out estimate is 0 for async launches. A synchronous Agent result shape was
+# NOT measured [가설]; a string tool_response or an object .stdout/.output string is
+# used when present, then the legacy .tool_output fallback.
+output_text=$(printf '%s\n' "$input" | jq -r '
+  (.tool_response) as $r
+  | if ($r | type) == "string" then $r
+    elif ($r | type) == "object" and (($r.stdout // $r.output | type) == "string") then ($r.stdout // $r.output)
+    else (.tool_output.output // .tool_output // "") end' 2>/dev/null || echo "")
 
 # Derive phase from pipeline state (current_phase) or fallback to description prefix
 phase=$(jq -r '.current_phase // .phase // "unknown"' "$PIPELINE_STATE" 2>/dev/null || echo "unknown")

package/templates/.claude/hooks/scripts/bash-cd-advisor.sh

@@ -0,0 +1,172 @@
+#!/usr/bin/env bash
+# bash-cd-advisor.sh — PreToolUse(Bash): 서브셸 밖 최상위 `cd` 감지 (advisory)
+#
+# 배경 (#1834 / #1816 H2, R005 "Bash `cd`는 세션 cwd로 남습니다"):
+#   Bash 도구에서 괄호 밖에 놓인 `cd`는 세션 cwd로 남아(CwdChanged 발화로 확인) 이후 명령의
+#   상대 경로를 어긋나게 한다. `cd X && ( … )`도 `cd`가 서브셸 밖이므로 지속 `cd`다.
+#   안전한 형태는 절대 경로 또는 `( cd <dir> && … )`.
+#
+# 역할:
+#   .tool_input.command 에서 괄호 깊이 0, 따옴표/`$( … )`/백틱/히어독 본문 밖의 `cd`/`pushd`/`popd`
+#   명령어 단어를 찾으면 한국어 advisory 한 단락을 전달한다. 그 외에는 아무것도 출력하지 않는다.
+#   명령 시작 위치 = 문장 처음, `&&` `||` `;` 개행 `|` `&` 뒤, 그리고 접두 키워드(`then` `do` `else`
+#   `elif` `if` `while` `until` `{` `!` `time` `builtin` `command`)와 선행 `VAR=value` 할당 뒤.
+#   파이프의 마지막이 아닌 구간(`cd x | b`)과 백그라운드(`cd x &`)의 cd 는 서브셸에서 실행되어 cwd가
+#   남지 않으므로 감지하지 않는다. 파이프의 마지막 구간(`a | cd x`)은 감지한다: 이 규칙은 zsh 의미론을
+#   따른다 — Bash 도구의 셸이 zsh(측정: $ZSH_VERSION=5.9)이고 zsh 는 마지막 파이프 요소를 현재 셸에서
+#   실행한다(`zsh -fc 'cd /; echo x | cd /tmp; pwd'` → /tmp; bash 는 `/` 라 남지 않는다).
+#
+# 구현: 스캐너는 awk 한 번의 선형 패스(LC_ALL=C, 바이트 단위)다. 측정(macOS, awk 20200816): 30K자 0.03s.
+#   `cd`/`pushd`/`popd` 부분문자열이 없는 명령은 스캐너를 건너뛴다.
+#
+# 전달 경로 (Measured):
+#   CC 2.1.310, `claude -p`, haiku(claude-haiku-5-5), 1회 실행, PreToolUse(Bash) 훅.
+#   - exit 0 + stderr  : 모델에 도달하지 않음 (마커 미관측)
+#   - exit 0 + stdout JSON hookSpecificOutput.additionalContext : 모델에 도달
+#     ("PreToolUse:Bash hook additional context: <text>" 형태로 모델이 인용)
+#   따라서 additionalContext 로만 전달한다. 미측정: 대화형 세션, 다른 모델.
+#
+# 차단하지 않는다 (R021 advisory-first):
+#   항상 exit 0. permissionDecision/decision 필드를 출력하지 않고 tool input도 수정하지 않는다.
+#   fail-open: stdin이 객체가 아니거나 command 가 없거나 jq 가 없으면 조용히 exit 0.
+#
+# 환경변수 override:
+#   OMCUSTOM_CD_ADVISOR=off — advisory 비활성화
+#
+# 알려진 한계 (documents … 테스트로 고정):
+#   - `eval "cd x"`, `bash -c 'cd x'` 등 문자열 안의 cd 는 따옴표 안이라 감지하지 않는다.
+#   - 셸 함수 본문 `f() { cd x; }` 의 cd 는 `)` 뒤라 명령 시작이 아니어서 감지하지 않는다
+#     (`{ cd x; }` 그룹 자체는 감지한다).
+#   - `case $x in a) cd x ;; esac` 의 case arm 안 cd 는 감지하지 않는다(`)` 뒤).
+#   - 히어독 구분자 줄은 `<<[-]WORD` 의 WORD(따옴표 제거)와 일치하는 줄로 판정한다. 히어독 본문은
+#     건너뛰지만, 큰따옴표 문자열 안의 `$( … <<EOF … )` 형태는 큰따옴표 구간을 통째로 불투명하게 취급한다.
+#   - bash 로 실행되는 환경에서는 `ls | cd x` 가 cwd 를 바꾸지 않으나 zsh 기준으로 감지한다(위 참조).
+#   - `command -p cd x` 처럼 옵션이 낀 접두 형태는 감지하지 않는다.
+
+set -uo pipefail
+
+[ "${OMCUSTOM_CD_ADVISOR:-}" = "off" ] && exit 0
+command -v jq >/dev/null 2>&1 || exit 0
+
+input=$(cat) || exit 0
+cmd=$(printf '%s' "$input" | jq -r 'if type == "object" then (.tool_input.command // "" | if type == "string" then . else "" end) else "" end' 2>/dev/null) || exit 0
+[ -n "$cmd" ] || exit 0
+
+# 사전 필터: cwd 변경 명령어 부분문자열이 없으면 스캔하지 않는다.
+case "$cmd" in
+  *cd*|*pushd*|*popd*) ;;
+  *) exit 0 ;;
+esac
+
+# 선형 awk 스캐너: 따옴표 / 괄호 깊이(`(`, `$(` 포함) / 백틱 / 히어독 / 명령 시작 위치 / 구간 종결자 추적.
+# 종료코드 0 = 지속 cd 발견. 입력은 stdin 단일 레코드(RS=\001)로 받는다.
+# shellcheck disable=SC2016
+AWK_PROG='
+BEGIN { RS = "\001" }
+{ s = s $0 }
+function isdelim(c) { return (c == " " || c == "\t" || c == "\n" || c == ";" || c == "&" || c == "|" || c == "(" || c == ")" || c == "<" || c == ">" || c == "\"" || c == "\047" || c == "\\" || c == "`") }
+function scan(   n, ch, i, c, nx, pv, q, depth, bt, start, assign, cand, arith, akind, sep, adv, j, w, hn, hd, hdash, k, line, dq, d, dash) {
+  n = split(s, ch, "")
+  q = ""; depth = 0; bt = 0; start = 1; assign = 0; cand = 0; arith = 0; hn = 0
+  i = 1
+  while (i <= n) {
+    c = ch[i]
+    if (q == "\047") { if (c == "\047") q = ""; i++; continue }
+    if (q == "\"") {
+      if (c == "\\") { i += 2; continue }
+      if (c == "\"") q = ""
+      i++; continue
+    }
+    if (c == "\\") { i += 2; start = 0; continue }
+    if (c == "\047") { q = "\047"; start = 0; i++; continue }
+    if (c == "\"") { q = "\""; start = 0; i++; continue }
+    if (c == "`") { bt = 1 - bt; start = bt;  assign = 0; i++; continue }
+    if (c == "(") { depth++; if (i > 1 && ch[i - 1] == "(") { akind[depth] = 1; arith++ } start = 1; assign = 0; i++; continue }
+    if (c == ")") { if (akind[depth]) { akind[depth] = 0; arith-- } if (depth > 0) depth--; start = 0; assign = 0; i++; continue }
+    if (c == " " || c == "\t") { if (assign) { start = 1; assign = 0 } i++; continue }
+    if (c == "<") {
+      nx = ch[i + 1]
+      if (nx == "<") {
+        if (ch[i + 2] == "<") { i += 3; start = 0; continue }
+        if (arith > 0) { i += 2; start = 0; continue }
+        i += 2; dash = 0
+        if (ch[i] == "-") { dash = 1; i++ }
+        while (i <= n && (ch[i] == " " || ch[i] == "\t")) i++
+        dq = ""
+        while (i <= n) {
+          d = ch[i]
+          if (d == "\047" || d == "\"" || d == "\\") { i++; continue }
+          if (d == " " || d == "\t" || d == "\n" || d == ";" || d == "&" || d == "|" || d == "(" || d == ")" || d == "<" || d == ">") break
+          dq = dq d; i++
+        }
+        hn++; hd[hn] = dq; hdash[hn] = dash
+        start = 0; continue
+      }
+      start = 0; i++; continue
+    }
+    sep = ""; adv = 1
+    if (c == ";" || c == "\n") sep = "term"
+    else if (c == "|") {
+      nx = ch[i + 1]
+      if (nx == "|") { sep = "term"; adv = 2 }
+      else if (nx == "&") { sep = "pipe"; adv = 2 }
+      else sep = "pipe"
+    } else if (c == "&") {
+      nx = ch[i + 1]; pv = (i > 1) ? ch[i - 1] : ""
+      if (nx == "&") { sep = "term"; adv = 2 }
+      else if (pv == ">" || pv == "<" || nx == ">") { start = 0; i++; continue }
+      else sep = "bg"
+    }
+    if (sep != "") {
+      if (cand) { if (sep == "term") return 1; cand = 0 }
+      start = 1; assign = 0
+      i += adv
+      if (c == "\n" && hn > 0) {
+        for (k = 1; k <= hn; k++) {
+          while (i <= n) {
+            line = ""
+            while (i <= n && ch[i] != "\n") { line = line ch[i]; i++ }
+            i++
+            if (hdash[k]) sub(/^\t+/, "", line)
+            if (line == hd[k]) break
+          }
+        }
+        hn = 0
+      }
+      continue
+    }
+    if (c == "#" && start == 1) {
+      while (i <= n && ch[i] != "\n") i++
+      continue
+    }
+    if (start == 1) {
+      j = i; w = ""
+      while (j <= n && !isdelim(ch[j])) { w = w ch[j]; j++ }
+      if (j == i) { start = 0; i++; continue }
+      if ((w == "cd" || w == "pushd" || w == "popd") && depth == 0 && bt == 0 && !cand) {
+        cand = 1; start = 0; i = j; continue
+      }
+      if (w == "then" || w == "do" || w == "else" || w == "elif" || w == "if" || w == "while" || w == "until" || w == "time" || w == "builtin" || w == "command" || w == "!" || w == "{") {
+        i = j; continue
+      }
+      if (w ~ /^[A-Za-z_][A-Za-z0-9_]*=/) { assign = 1; start = 0; i = j; continue }
+      start = 0; i = j; continue
+    }
+    i++
+  }
+  return cand ? 1 : 0
+}
+END { exit (scan() ? 0 : 1) }
+'
+
+has_toplevel_cd() {
+  printf '%s' "$1" | LC_ALL=C awk "$AWK_PROG" 2>/dev/null
+}
+
+if has_toplevel_cd "$cmd"; then
+  advisory_text='[CD Advisory] 이 Bash 명령에는 서브셸 밖에 놓인 최상위 `cd`(또는 `pushd`/`popd`)가 있습니다. Bash 도구의 `cd`는 세션 cwd로 남아 이후 명령의 상대 경로를 어긋나게 합니다(`cd X && ( … )` 형태도 `cd`가 괄호 밖이므로 동일합니다). 절대 경로를 쓰거나 `( cd <dir> && … )`처럼 서브셸 안에서만 이동하십시오(R005). 이미 의도한 지속 이동이라면 이후 명령의 경로가 이를 전제하는지 확인하십시오.'
+  jq -cn --arg ctx "$advisory_text" \
+    '{hookSpecificOutput: {hookEventName: "PreToolUse", additionalContext: $ctx}}'
+fi
+
+exit 0

package/templates/.claude/hooks/scripts/fail-axis-cause-advisor.sh

@@ -9,7 +9,7 @@
 #
 # 역할:
 #   (1) 짧은 진행 지시이고 (2) 원인 언급이 없으며 (3) 이 세션에 기록된 도구 실패가 있을 때,
-#   Claude에게 "진행 전에 사용자에게 원인 가설 한 줄을 되물어라"는 advisory를 전달한다.
+#   Claude에게 "재시도 전에 원인 가설 한 줄을 명시하고, 사용자가 묻지 말라고 지시하지 않았을 때만 확인하라"는 advisory를 전달한다 (#1834: 훅은 세션 지시를 볼 수 없다).
 #
 # 왜 사용자가 아니라 Claude에게 전달하는가:
 #   hookSpecificOutput.additionalContext는 모델 컨텍스트로만 들어간다(사용자에게 표시되지 않음).
@@ -121,7 +121,7 @@ fail_tools=$(tail -n 300 "$LEDGER" 2>/dev/null \
   | sort | uniq -c | sort -rn | head -3 \
   | awk '{printf "%s(%s) ", $2, $1}') || fail_tools=""
 
-advisory_text=$(printf '[FAIL Advisory] 이 세션에 도구 실패 %s건이 기록되어 있습니다 (%s). 방금 입력은 원인 언급이 없는 진행 지시입니다. 곧바로 재시도하지 말고, 먼저 직전 실패의 원인 가설을 한 줄로 제시한 뒤 사용자에게 "이 진단이 맞는지 / 다른 원인이 짚이는지" 짧게 한 번만 확인하십시오. 사용자가 답하면 그대로 진행합니다. 이 확인은 한 턴을 넘기지 마십시오.' \
+advisory_text=$(printf '[FAIL Advisory] 이 세션에 도구 실패 %s건이 기록되어 있습니다 (%s). 방금 입력은 원인 언급이 없는 진행 지시입니다. 곧바로 재시도하지 말고, 먼저 직전 실패의 원인 가설을 한 줄로 명시하십시오. 사용자가 묻지 말고 진행하라고 지시하지 않은 경우에만 "이 진단이 맞는지" 짧게 한 번 확인하고, 그런 지시가 있었다면 확인 없이 가설만 기록하고 진행하십시오.' \
   "$fail_count" "${fail_tools:-unknown}")
 
 # 사람이 보는 감사 추적용 (exit 0에서 stderr는 모델에 전달되지 않음)

package/templates/.claude/hooks/scripts/failure-ledger.sh

@@ -18,6 +18,15 @@
 #   - 어떤 실패에도 exit 0 — 원장 기록 실패가 본 작업을 막아서는 안 된다 (R021 advisory-first).
 #   - 명령/에러 문자열은 절단하여 기록한다 (원장 비대화 방지).
 #
+# exit_code 필드 (#1834 / #1814 R2):
+#   PostToolUseFailure에는 숫자 exit code 필드가 없고 `error` 문자열("Exit code 3")만 온다
+#   (실측: CC 2.1.310, `claude -p`, haiku, 1회, `sh -c 'exit 3'`). 그래서 `^Exit code ([0-9]+)`
+#   일 때만 정수를 파싱해 exit_code로 기록하고, 아니면 null이다.
+#   기대 exit 화이트리스트는 두지 않는다 — 동기였던 `git grep` no-match(exit 1)는 같은
+#   조건에서 PostToolUseFailure를 발생시키지 않고, returnCodeInterpretation "No matches found"를
+#   가진 PostToolUse로만 도달했다(실측). `false`, 일반 `grep` 등 다른 exit-1 명령, 대화형 세션,
+#   다른 모델/버전은 미측정이다.
+#
 # 환경변수 override:
 #   OMCUSTOM_FAILURE_LEDGER=off   — 기록 완전 비활성화
 #   OMCUSTOM_ERROR_LEDGER=<path>  — 원장 경로 override (기본: ~/.claude/error-ledger.jsonl)
@@ -36,6 +45,14 @@ if ! command -v jq >/dev/null 2>&1; then
   exit 0
 fi
 
+# HOME guard: with no override, skip when HOME is unset, empty or not absolute
+# (otherwise `set -u` exits 1 on an unset HOME, or the ledger lands in a relative path).
+if [ -z "${OMCUSTOM_ERROR_LEDGER:-}" ]; then
+  case "${HOME:-}" in
+    /*) ;;
+    *) exit 0 ;;
+  esac
+fi
 LEDGER="${OMCUSTOM_ERROR_LEDGER:-${HOME}/.claude/error-ledger.jsonl}"
 
 if ! mkdir -p "$(dirname "$LEDGER")" 2>/dev/null; then
@@ -68,6 +85,7 @@ printf '%s' "$input" \
                     then (.tool_input.command // .tool_input.file_path // "")
                     else "" end) | tostring | .[0:160]),
         interrupt: (.is_interrupt == true),
+        exit_code: ((.error | if type == "string" then (capture("^Exit code (?<c>[0-9]+)") | .c | tonumber) else null end) // null),
         err:     ((.error
                    // .tool_error
                    // (if (.tool_response | type) == "object"

package/templates/.claude/hooks/scripts/file-change-validator.sh

@@ -4,7 +4,7 @@
 
 input=$(cat)
 file_path=$(printf '%s\n' "$input" | jq -r '.file_path // ""' 2>/dev/null)
-change_type=$(printf '%s\n' "$input" | jq -r '.change_type // "modified"' 2>/dev/null)
+change_type=$(printf '%s\n' "$input" | jq -r '.event // .change_type // "modified"' 2>/dev/null)
 
 if [ -z "$file_path" ]; then
   printf '%s\n' "$input"
@@ -14,11 +14,14 @@ fi
 echo "[Hook] External file change detected: ${change_type} ${file_path}" >&2
 
 # Warn about important files
+# Arms mirror the hooks.json FileChanged matcher (literal working-directory filenames).
+# Nested paths such as .claude/hooks/hooks.json or .claude/settings*.json cannot be matched
+# (the matcher only registers literal filenames in the working directory), so no arm for them.
 case "$file_path" in
-  */CLAUDE.md|*/hooks.json|*/settings*.json)
+  CLAUDE.md|*/CLAUDE.md)
     echo "[Hook] WARNING: Configuration file changed externally — re-read recommended" >&2
     ;;
-  *.lock|*lockfile*)
+  package-lock.json|*/package-lock.json|pnpm-lock.yaml|*/pnpm-lock.yaml|*.lock)
     echo "[Hook] Lock file changed — dependency state may have shifted" >&2
     ;;
 esac