oh-my-customcode 2.0.7 → 2.0.8

package/templates/.claude/ontology/graphs/agent-skill.json

@@ -17,7 +17,9 @@
     "lang-typescript-expert": [
       "typescript-best-practices"
     ],
-    "lang-java-expert": [],
+    "lang-java-expert": [
+      "java-best-practices"
+    ],
     "be-fastapi-expert": [
       "fastapi-best-practices"
     ],
@@ -105,7 +107,32 @@
       "claude-code-bible"
     ],
     "sys-memory-keeper": [],
-    "sys-naggy": []
+    "sys-naggy": [],
+    "agora-runner": [
+      "agora"
+    ],
+    "be-django-expert": [
+      "django-best-practices"
+    ],
+    "db-alembic-expert": [
+      "alembic-best-practices",
+      "postgres-best-practices"
+    ],
+    "fe-design-expert": [
+      "impeccable-design",
+      "web-design-guidelines",
+      "diagram-design"
+    ],
+    "sec-codeql-expert": [
+      "cve-triage",
+      "adversarial-review"
+    ],
+    "slack-cli-expert": [],
+    "tracker-checkpoint": [
+      "dag-orchestration",
+      "pipeline-guards"
+    ],
+    "wiki-curator": []
   },
   "reverse": {
     "go-best-practices": [
@@ -136,7 +163,8 @@
       "fe-vercel-agent"
     ],
     "web-design-guidelines": [
-      "fe-vercel-agent"
+      "fe-vercel-agent",
+      "fe-design-expert"
     ],
     "vercel-deploy": [
       "fe-vercel-agent"
@@ -163,7 +191,8 @@
       "de-pipeline-expert"
     ],
     "postgres-best-practices": [
-      "db-postgres-expert"
+      "db-postgres-expert",
+      "db-alembic-expert"
     ],
     "redis-best-practices": [
       "db-redis-expert"
@@ -225,7 +254,37 @@
     "lists": [],
     "monitoring-setup": [],
     "result-aggregation": [],
-    "status": []
+    "status": [],
+    "java-best-practices": [
+      "lang-java-expert"
+    ],
+    "agora": [
+      "agora-runner"
+    ],
+    "django-best-practices": [
+      "be-django-expert"
+    ],
+    "alembic-best-practices": [
+      "db-alembic-expert"
+    ],
+    "impeccable-design": [
+      "fe-design-expert"
+    ],
+    "diagram-design": [
+      "fe-design-expert"
+    ],
+    "cve-triage": [
+      "sec-codeql-expert"
+    ],
+    "adversarial-review": [
+      "sec-codeql-expert"
+    ],
+    "dag-orchestration": [
+      "tracker-checkpoint"
+    ],
+    "pipeline-guards": [
+      "tracker-checkpoint"
+    ]
   },
   "nodes": [],
   "links": []

package/templates/.claude/ontology/graphs/full-graph.json

@@ -433,6 +433,66 @@
     "R005": {
       "type": "Rule",
       "class": "MayRule"
+    },
+    "java-best-practices": {
+      "type": "Skill",
+      "class": "BestPracticeSkill"
+    },
+    "agora": {
+      "type": "Skill"
+    },
+    "django-best-practices": {
+      "type": "Skill",
+      "class": "BestPracticeSkill"
+    },
+    "alembic-best-practices": {
+      "type": "Skill",
+      "class": "BestPracticeSkill"
+    },
+    "impeccable-design": {
+      "type": "Skill"
+    },
+    "diagram-design": {
+      "type": "Skill"
+    },
+    "cve-triage": {
+      "type": "Skill"
+    },
+    "adversarial-review": {
+      "type": "Skill"
+    },
+    "dag-orchestration": {
+      "type": "Skill"
+    },
+    "pipeline-guards": {
+      "type": "Skill"
+    },
+    "agora-runner": {
+      "type": "Agent"
+    },
+    "be-django-expert": {
+      "type": "Agent",
+      "class": "BackendExpert"
+    },
+    "db-alembic-expert": {
+      "type": "Agent",
+      "class": "DatabaseExpert"
+    },
+    "fe-design-expert": {
+      "type": "Agent",
+      "class": "FrontendExpert"
+    },
+    "sec-codeql-expert": {
+      "type": "Agent"
+    },
+    "slack-cli-expert": {
+      "type": "Agent"
+    },
+    "tracker-checkpoint": {
+      "type": "Agent"
+    },
+    "wiki-curator": {
+      "type": "Agent"
     }
   },
   "edges": [
@@ -721,6 +781,66 @@
       "target": "flutter-best-practices",
       "relation": "requires"
     },
+    {
+      "source": "lang-java-expert",
+      "target": "java-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "agora-runner",
+      "target": "agora",
+      "relation": "requires"
+    },
+    {
+      "source": "be-django-expert",
+      "target": "django-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "db-alembic-expert",
+      "target": "alembic-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "db-alembic-expert",
+      "target": "postgres-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "fe-design-expert",
+      "target": "impeccable-design",
+      "relation": "requires"
+    },
+    {
+      "source": "fe-design-expert",
+      "target": "web-design-guidelines",
+      "relation": "requires"
+    },
+    {
+      "source": "fe-design-expert",
+      "target": "diagram-design",
+      "relation": "requires"
+    },
+    {
+      "source": "sec-codeql-expert",
+      "target": "cve-triage",
+      "relation": "requires"
+    },
+    {
+      "source": "sec-codeql-expert",
+      "target": "adversarial-review",
+      "relation": "requires"
+    },
+    {
+      "source": "tracker-checkpoint",
+      "target": "dag-orchestration",
+      "relation": "requires"
+    },
+    {
+      "source": "tracker-checkpoint",
+      "target": "pipeline-guards",
+      "relation": "requires"
+    },
     {
       "source": "dev-lead-routing",
       "target": "be-fastapi-expert",
@@ -884,7 +1004,9 @@
       ]
     },
     "lang-java-expert": {
-      "requires": [],
+      "requires": [
+        "java-best-practices"
+      ],
       "routed_by": [
         "dev-lead-routing"
       ]
@@ -1219,7 +1341,8 @@
     },
     "web-design-guidelines": {
       "required_by": [
-        "fe-vercel-agent"
+        "fe-vercel-agent",
+        "fe-design-expert"
       ],
       "depends_on": []
     },
@@ -1267,7 +1390,8 @@
     },
     "postgres-best-practices": {
       "required_by": [
-        "db-postgres-expert"
+        "db-postgres-expert",
+        "db-alembic-expert"
       ],
       "depends_on": []
     },
@@ -1527,6 +1651,115 @@
     },
     "R018": {
       "referenced_by": []
+    },
+    "java-best-practices": {
+      "required_by": [
+        "lang-java-expert"
+      ],
+      "depends_on": []
+    },
+    "agora": {
+      "required_by": [
+        "agora-runner"
+      ],
+      "depends_on": []
+    },
+    "django-best-practices": {
+      "required_by": [
+        "be-django-expert"
+      ],
+      "depends_on": []
+    },
+    "alembic-best-practices": {
+      "required_by": [
+        "db-alembic-expert"
+      ],
+      "depends_on": []
+    },
+    "impeccable-design": {
+      "required_by": [
+        "fe-design-expert"
+      ],
+      "depends_on": []
+    },
+    "diagram-design": {
+      "required_by": [
+        "fe-design-expert"
+      ],
+      "depends_on": []
+    },
+    "cve-triage": {
+      "required_by": [
+        "sec-codeql-expert"
+      ],
+      "depends_on": []
+    },
+    "adversarial-review": {
+      "required_by": [
+        "sec-codeql-expert"
+      ],
+      "depends_on": []
+    },
+    "dag-orchestration": {
+      "required_by": [
+        "tracker-checkpoint"
+      ],
+      "depends_on": []
+    },
+    "pipeline-guards": {
+      "required_by": [
+        "tracker-checkpoint"
+      ],
+      "depends_on": []
+    },
+    "agora-runner": {
+      "requires": [
+        "agora"
+      ],
+      "routed_by": []
+    },
+    "be-django-expert": {
+      "requires": [
+        "django-best-practices"
+      ],
+      "routed_by": []
+    },
+    "db-alembic-expert": {
+      "requires": [
+        "alembic-best-practices",
+        "postgres-best-practices"
+      ],
+      "routed_by": []
+    },
+    "fe-design-expert": {
+      "requires": [
+        "impeccable-design",
+        "web-design-guidelines",
+        "diagram-design"
+      ],
+      "routed_by": []
+    },
+    "sec-codeql-expert": {
+      "requires": [
+        "cve-triage",
+        "adversarial-review"
+      ],
+      "routed_by": []
+    },
+    "slack-cli-expert": {
+      "requires": [],
+      "routed_by": []
+    },
+    "tracker-checkpoint": {
+      "requires": [
+        "dag-orchestration",
+        "pipeline-guards"
+      ],
+      "routed_by": []
+    },
+    "wiki-curator": {
+      "requires": [],
+      "routed_by": []
     }
   }
 }

package/templates/.claude/ontology/skills.yaml

@@ -17,7 +17,8 @@ classes:
       go-backend-best-practices, docker-best-practices, aws-best-practices,
       postgres-best-practices, redis-best-practices, supabase-postgres-best-practices,
       airflow-best-practices, dbt-best-practices, kafka-best-practices,
-      spark-best-practices, snowflake-best-practices, pipeline-architecture-patterns
+      spark-best-practices, snowflake-best-practices, pipeline-architecture-patterns,
+      java-best-practices, django-best-practices, alembic-best-practices
     ]
     description: "Language/framework best practices and architecture patterns"
 
@@ -533,3 +534,66 @@ skills:
     summary: "UI code review guidelines for accessibility, performance, and UX best practices"
     keywords: [ui, accessibility, ux, performance, design]
     rule_references: []
+
+  java-best-practices:
+    class: BestPracticeSkill
+    description: "Modern Java 25 LTS patterns from Virtual Threads, Pattern Matching, Records, and Sealed Classes"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  agora:
+    description: "Use when a design or decision needs adversarial multi-round scrutiny from several independent model vendors. Runs anonymized A/B/C reviewer rounds with a rotating judge and produces a consensus report."
+    user_invocable: true
+    model_invocable: true
+    scope: core
+
+  django-best-practices:
+    class: BestPracticeSkill
+    description: "Django patterns for production-ready Python web applications"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  alembic-best-practices:
+    class: BestPracticeSkill
+    description: "Alembic migration patterns for naming conventions, safety checks, expand-contract, env.py configuration, and CI integration"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  impeccable-design:
+    description: "AI design language for production-grade UI — 10 commands covering typography, color, motion, layout, and UX writing quality"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  diagram-design:
+    description: "Brand-consistent editorial diagrams — SVG generation for release notes, architecture docs, and marketing materials"
+    user_invocable: true
+    model_invocable: true
+    scope: package
+
+  cve-triage:
+    description: "CVE triage workflow for vulnerability analysis, reproduction assessment, and patch verification"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  adversarial-review:
+    description: "Adversarial code review using attacker mindset — trust boundary, attack surface, business logic, and defense evaluation"
+    user_invocable: true
+    model_invocable: true
+    scope: core
+
+  dag-orchestration:
+    description: "YAML-based DAG workflow engine with topological execution and failure strategies"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  pipeline-guards:
+    description: "Safety constraints and quality gates for pipeline and workflow execution"
+    user_invocable: false
+    model_invocable: true
+    scope: core

package/templates/.claude/rules/MUST-enforcement-policy.md

@@ -16,12 +16,12 @@ oh-my-customcode uses an **advisory-first enforcement model**. Most rules are en
 
 | Tier | Mechanism | Rules | Behavior |
 |------|-----------|-------|----------|
-| Hard Block | PreToolUse hook, exit 2 | stage-blocker, dev-server tmux, rule-deletion-guard | Prevents tool execution |
+| Hard Block | PreToolUse hook, exit 2 | stage-blocker, rule-deletion-guard | Prevents tool execution |
 | Soft Block | Stop hook prompt | R011 session-end saves | Auto-performs then approves |
 | Conversation Block | PostToolUse hook + `continueOnBlock` (CC v2.1.139+), exit 2 | stuck-detector, context-budget-advisor, cost-cap-advisor | Feeds rejection reason into conversation; Claude continues with awareness |
 | Advisory | PostToolUse hooks | R007, R008, R009, R010, R018 | Warns via stderr, never blocks |
 | Advisory (proactive) | UserPromptSubmit + SubagentStop + PostToolUse hooks | R007, R008 (`r007-r008-drift-advisor.sh` — #1229 UserPromptSubmit, #1545 SubagentStop, #1553 PostToolUse) | Reads last assistant turn; emits advisory if header/prefix absent. SubagentStop wiring (#1545) covers subagent stops in no-user-input loops (`/fsd`); PostToolUse (#1553) covers the orchestrator-only stretch before the first subagent spawn. Complements retroactive Stop-hook (`session-reflection.sh`, #1190). **v1.1.43부터 실제 발화**(파서 셀렉터 `.role`→`.message.role` 수정 — 상세는 Read 도구로 원문 주석 참조). v1.1.49부터 역방향(announce > tool_use) 신호 포함, 기본 off 옵트인 (#1595 #6). v1.1.73의 narration 채널 분리 옵션(`OMCUSTOM_R008_NARRATION`, #1701 #2)은 실 세션 5건(CC 2.1.233~2.1.274) 실측에서 narration 마커 매칭 0/354·판정 on/off 동일로 전제가 성립하지 않아 v1.1.74에서 은퇴했습니다(#1703) — R008 누락은 채널 오선택이 아니라 마커 미직렬화 형태입니다. **v1.1.62(#1650 D)부터 서브에이전트 세션에서는 침묵**: hook stdin의 `agent_id`(CC 스키마상 서브에이전트 내부 발화에만 존재)가 있으면 exit 0 — 단 `SubagentStart`/`SubagentStop`은 `agent_id`가 대상 식별자라 예외(판정 수행). 중첩 서브에이전트 안의 SubagentStop은 억제 못 함(R010 정책상 도달 불가 경로). 완료 보고가 advisory 응답으로 대체되던 훅 피드백 잠식(R020 8항, #1652 #3)의 advisory 계열 차단. |
-| Advisory (telemetry) | PostToolUseFailure hook | — (계측 전용, 규칙 강제 없음) | `failure-ledger.sh` (#1561, v1.1.44) — 도구 실패를 JSONL 원장에 append. stdout/stderr 무출력이라 모델에 도달하지 않으며 절대 차단하지 않음 |
+| Advisory (telemetry + advisory) | PostToolUseFailure hook | — (계측+어드바이저리, 규칙 강제 없음) | `failure-ledger.sh` (#1561, v1.1.44) — 실패를 JSONL 원장에 append, 무출력(모델 미도달)·비차단. 같은 이벤트의 `subagent-failure-advisor.sh`(Agent/Task)는 additionalContext advisory 전달 |
 | Advisory (proactive) | UserPromptSubmit hook | R020 (원인 진단) | `fail-axis-cause-advisor.sh` (#1561, v1.1.44) — 원장에 실패 기록이 있는데 원인 진술 없는 재촉 프롬프트가 오면 `hookSpecificOutput.additionalContext`로 "원인 가설 되묻기" advisory 전달. 원장 부재 시 조용히 통과 |
 | Prompt-based | CLAUDE.md + rules/ + `SessionStart` 재주입(matcher `*`; PostCompact 이벤트 배선은 유지되나 효과 미보장[^postcompact]) | All MUST rules | Behavioral guidance in context |
 
@@ -54,7 +54,7 @@ oh-my-customcode uses an **advisory-first enforcement model**. Most rules are en
 <!-- DETAIL: CC version notes (v2.1.211-v2.1.275)
 > **v2.1.211/212/214+**: 훅의 enforcement 결정이 auto/unattended 모드에서 안정적으로 존중되도록 세 건이 수정되었습니다 — (211) auto mode가 unsandboxed Bash에 대한 PreToolUse 훅의 `ask` 결정을 덮어쓰던 문제가 수정되어 훅 `ask`가 최소 prompt로 floor되고, (212) `continue:false` 훅의 halt가 도구 실패·중간 완료 시 누락되던 문제 및 훅 인프라 오류가 user rejection으로 오보고되던 문제가 수정되었으며, (214) 훅 stdout JSON이 스키마 검증에 실패할 때 exit code 2가 문서대로 차단하지 못하던 문제가 수정되었습니다. R021 Enforcement Tiers(Hard Block=exit 2, Conversation Block=continueOnBlock exit 2, Advisory)가 훅의 block/ask 결정 존중에 의존하므로, 세 수정 모두 hard-block·advisory 훅(stage-blocker, rule-deletion-guard, stuck-detector 등)의 강제 신뢰성을 강화합니다 — v2.1.210 훅 timeout phantom-rejection 수정의 연장선.
 
-> **v2.1.222+**: PreToolUse auto-allow 훅이 background agent task(summaries/compaction/renames)에서 tool restriction을 우회하던 문제가 수정되었습니다. 즉 위 Enforcement Tiers 표의 **Hard Block 계층(stage-blocker, dev-server tmux, rule-deletion-guard)이 background agent task 경로에서 우회될 수 있었다**는 뜻이며, background agent를 쓰는 장기 무인 루프에서 hard-block 훅이 실제로는 강제되지 않는 구간이 존재했습니다. v2.1.211/212/214 훅 결정 존중 체인의 연장선입니다.
+> **v2.1.222+**: PreToolUse auto-allow 훅이 background agent task(summaries/compaction/renames)에서 tool restriction을 우회하던 문제가 수정되었습니다. 즉 위 Enforcement Tiers 표의 **Hard Block 계층(stage-blocker, rule-deletion-guard)이 background agent task 경로에서 우회될 수 있었다**는 뜻이며, background agent를 쓰는 장기 무인 루프에서 hard-block 훅이 실제로는 강제되지 않는 구간이 존재했습니다. v2.1.211/212/214 훅 결정 존중 체인의 연장선입니다.
 
 > **v2.1.247+**: 훅 또는 background agent가 수 메가바이트의 error 출력을 찍어 대화를 overflow시켜 세션이 "Prompt is too long"으로 멈추던 결함이 수정되었습니다. 같은 릴리즈에서 hook/background task의 output file을 쓸 수 없을 때 무한 메모리 증가하던 문제도 수정되어, 이제 출력이 소실된 위치를 파일에 남깁니다. 이 저장소는 advisory 훅(`r007-r008-drift-advisor.sh`, `failure-ledger.sh`, `fail-axis-cause-advisor.sh` 등)을 다수 운용하므로, 훅 출력 폭주가 세션 자체를 wedge시키는 이 실패 클래스에 해당합니다 — v2.1.211/212/214/222 훅 신뢰성 계열의 연장선입니다.
 

package/templates/.claude/rules/MUST-orchestrator-coordination.md

@@ -209,7 +209,7 @@ When the user explicitly signals full-delegation intent, the orchestrator operat
 - **R001 (Safety)**: All safety rules remain absolute — no exceptions
 - **R007/R008 (Identification)**: Agent/tool identification still required for traceability
 - **File Write/Edit delegation**: Still requires specialist agents — autonomous mode only relaxes git and gate overhead
-- **Hard-block hooks**: stage-blocker, dev-server tmux, .md creation blocker remain active
+- **Hard-block hooks**: stage-blocker, rule-deletion-guard remain active
 - **R009 (Parallel execution)**: Still required for efficiency
 
 ### Scope and Lifetime

package/templates/.claude/rules/SHOULD-memory-integration.md

@@ -549,7 +549,7 @@ References: #1226 (item 3), #1227.
 -->
 
 <!-- DETAIL: v2.1.271/273+ background dedup/resume file-read/blockReadsOutside
-> **v2.1.271/273+**: (271) 대화가 compact된 뒤에도 계속 돌고 있던 백그라운드 명령(watch task, dev server)의 **중복 사본**이 새로 시작되던 결함이 수정되었습니다 — 구버전에서 post-compact 중복 프로세스는 지시가 아니라 compaction 아티팩트였습니다(cross-ref R010 dev-server tmux hard block). (271) `/resume`·`/teleport`가 이전 대화의 파일-읽음 추적을 그대로 유지해, 재개된 대화가 **한 번도 읽지 않은 파일**을 편집할 수 있던 결함이 수정되었습니다(cross-ref R005 v2.1.228 read-before-write 노트). (271) claude.ai에서 동기화된 스킬이 로그아웃 후에도 디스크에 남아있던 결함이 수정되어, `cleanupPeriodDays` 내 갱신되지 않은 사본은 이제 복구 가능한 휴지통으로 이동합니다. (273) `permissions.blockReadsOutsideWorkingDirectories`: 저장소 settings가 지정한 메모리 디렉토리는 더 이상 프롬프트에 로드·회상·색인·memory extraction에 사용되지 않습니다 — 이 규칙의 `autoMemoryDirectory`와 관련됩니다: 이 설정 하에서는 저장소가 지정한 메모리 디렉토리가 제외됩니다.
+> **v2.1.271/273+**: (271) 대화가 compact된 뒤에도 계속 돌고 있던 백그라운드 명령(watch task, dev server)의 **중복 사본**이 새로 시작되던 결함이 수정되었습니다 — 구버전에서 post-compact 중복 프로세스는 지시가 아니라 compaction 아티팩트였습니다(cross-ref #1856: dev-server tmux hook is an advisory). (271) `/resume`·`/teleport`가 이전 대화의 파일-읽음 추적을 그대로 유지해, 재개된 대화가 **한 번도 읽지 않은 파일**을 편집할 수 있던 결함이 수정되었습니다(cross-ref R005 v2.1.228 read-before-write 노트). (271) claude.ai에서 동기화된 스킬이 로그아웃 후에도 디스크에 남아있던 결함이 수정되어, `cleanupPeriodDays` 내 갱신되지 않은 사본은 이제 복구 가능한 휴지통으로 이동합니다. (273) `permissions.blockReadsOutsideWorkingDirectories`: 저장소 settings가 지정한 메모리 디렉토리는 더 이상 프롬프트에 로드·회상·색인·memory extraction에 사용되지 않습니다 — 이 규칙의 `autoMemoryDirectory`와 관련됩니다: 이 설정 하에서는 저장소가 지정한 메모리 디렉토리가 제외됩니다.
 -->
 
 <!-- DETAIL: v2.1.275+ CHANGELOG memory age note/resume malformed block

package/templates/.claude/settings.json

@@ -15,11 +15,11 @@
         "hooks": [
           {
             "type": "command",
-            "command": "input=$(cat)\nif printf '%s' \"$input\" | jq -e '((.tool_input.command // \"\") | test(\"(npm run dev|pnpm( run)? dev|yarn dev|bun run dev)\"))' >/dev/null 2>&1; then\n  printf '%s' \"$input\" | (\n#!/bin/bash\ninput=$(cat)\ncmd=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.command // \"\"')\n\n# Block dev servers that aren't run in tmux\necho '[Hook] BLOCKED: Dev server must run in tmux for log access' >&2\necho '[Hook] Use this command instead:' >&2\necho \"[Hook] tmux new-session -d -s dev 'npm run dev'\" >&2\necho '[Hook] Then: tmux attach -t dev' >&2\nexit 1\n  )\nelse\n  printf '%s' \"$input\"\nfi"
+            "command": "input=$(cat)\nif printf '%s' \"$input\" | jq -e '((.tool_input.command // \"\") | test(\"(npm run dev|pnpm( run)? dev|yarn dev|bun run dev)\"))' >/dev/null 2>&1; then\n  printf '%s' \"$input\" | (\n#!/bin/sh\ninput=$(cat)\ncmd=$(printf '%s' \"$input\" | jq -r '.tool_input.command // \"\"' 2>/dev/null)\nbg=$(printf '%s' \"$input\" | jq -r '.tool_input.run_in_background // false' 2>/dev/null)\n\n# Advisory only: never blocks (always exit 0). Stay silent for background runs, tmux-wrapped commands,\n# mentions of the dev command in other commands, and variants like dev:test / develop / devtools.\n[ \"$bg\" = \"true\" ] && exit 0\nif printf '%s' \"$cmd\" | grep -Eq '^[[:space:]]*tmux([[:space:]]|$)'; then exit 0; fi\n\n# Drop quoted strings, then split into segments at && || ; | ( ) and newlines\nsegs=$(printf '%s' \"$cmd\" | sed -e 's/\"[^\"]*\"//g' -e \"s/'[^']*'//g\" -e 's/&&/;/g' -e 's/||/;/g' | tr ';|()\\n' '\\n\\n\\n\\n\\n')\n\n# Command position (optionally after VAR=value), word boundary after the dev command, segment not backgrounded with &\nhit=$(printf '%s\\n' \"$segs\" | grep -E '^[[:space:]]*([A-Za-z_][A-Za-z0-9_]*=[^[:space:]]*[[:space:]]+)*(npm run dev|pnpm( run)? dev|yarn dev|bun run dev)([[:space:])]|$)' | grep -Ev '(^|[^>&])&([^&>]|$)' | head -n 1)\n\nif [ -n \"$hit\" ]; then\n  printf '%s\\n' '{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"additionalContext\":\"[Hook] 포그라운드 dev 서버 시작이 감지되었습니다. 로그 접근을 위해 run_in_background: true 로 실행하거나 tmux 세션(예: tmux new-session -d -s dev) 안에서 실행하는 것을 권장합니다. 이 알림은 차단하지 않습니다.\"}}'\nfi\nexit 0\n  )\nelse\n  printf '%s' \"$input\"\nfi"
           }
         ],
         "matcher": "Bash",
-        "description": "Block dev servers outside tmux - ensures you can access logs"
+        "description": "Advise (additionalContext, never blocks) when a foreground dev server starts outside tmux/run_in_background - keeps logs accessible"
       },
       {
         "hooks": [
@@ -45,11 +45,11 @@
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\nfile_path=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.file_path // \"\"')\n\nif [[ \"$file_path\" =~ \\.(md|txt)$ ]] && [[ ! \"$file_path\" =~ (README|CLAUDE|AGENT|SKILL)\\.md$ ]]; then\n  echo \"[Hook] BLOCKED: Unnecessary documentation file creation\" >&2\n  echo \"[Hook] File: $file_path\" >&2\n  echo \"[Hook] Use README.md or AGENT.md for documentation instead\" >&2\n  exit 1\nfi\n\nprintf '%s\\n' \"$input\""
+            "command": "#!/bin/sh\ninput=$(cat)\nfile_path=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.file_path // \"\"')\n\ncase \"$file_path\" in\n  *README.md|*CLAUDE.md|*AGENT.md|*SKILL.md) ;;\n  *.md|*.txt)\n    echo \"[Hook] NOTICE (non-blocking): new documentation file - the write is not blocked\" >&2\n    echo \"[Hook] File: $file_path\" >&2\n    echo \"[Hook] Prefer README.md or AGENT.md for documentation if this is not a deliberate new doc\" >&2\n    exit 1\n    ;;\nesac\n\nprintf '%s\\n' \"$input\""
           }
         ],
         "matcher": "Write",
-        "description": "Block creation of random .md files - keeps docs consolidated"
+        "description": "Non-blocking notice on new .md/.txt files (exit 1) - keeps docs consolidated"
       },
       {
         "hooks": [
@@ -101,6 +101,16 @@
         "matcher": "Bash",
         "description": "Block rule file deletion — requires individual user confirmation per rule (R001 safety)"
       },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/bash-cd-advisor.sh\""
+          }
+        ],
+        "matcher": "Bash",
+        "description": "Advise against top-level (non-subshell) cd in Bash commands; cd persists as session cwd (R005, #1834/#1816 H2)"
+      },
       {
         "hooks": [
           {
@@ -272,14 +282,10 @@
           {
             "type": "command",
             "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/r007-r008-drift-advisor.sh\""
-          },
-          {
-            "type": "command",
-            "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/subagent-failure-advisor.sh\""
           }
         ],
         "matcher": "*",
-        "description": "Record agent outcomes + auto-continue workflow + R007/R008 drift advisory + failure advisory on subagent completion (autonomous-loop re-entry, #1545; #1631 replaced the self-referential prompt-type judge hook with an advisory-only command hook)"
+        "description": "Record agent outcomes + stall and consecutive-completion advisories + R007/R008 drift advisory on subagent completion — advisory-only, never continues or blocks the workflow (autonomous-loop re-entry, #1545; #1631 replaced the self-referential prompt-type judge hook with an advisory-only command hook; #1880)"
       }
     ],
     "CwdChanged": [
@@ -302,8 +308,8 @@
             "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/file-change-validator.sh\""
           }
         ],
-        "matcher": "*",
-        "description": "Validate externally modified files — advisory staleness warning (v2.1.83+)"
+        "matcher": "CLAUDE.md|bun.lock|yarn.lock|Cargo.lock|poetry.lock|package-lock.json|pnpm-lock.yaml",
+        "description": "Warn on external changes to CLAUDE.md and the bun/yarn/Cargo/poetry/npm/pnpm lock files in the working directory — stderr shown to the user only, never blocks; the matcher lists literal filenames because CC registers each |-separated segment as a literal file to watch (v2.1.83+, #1775)"
       }
     ],
     "Notification": [
@@ -383,7 +389,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\ncmd=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.command')\n\nif echo \"$cmd\" | grep -qE 'gh pr create'; then\n  output=$(printf '%s\\n' \"$input\" | jq -r '.tool_output.output // \"\"')\n  pr_url=$(echo \"$output\" | grep -oE 'https://github.com/[^/]+/[^/]+/pull/[0-9]+')\n  \n  if [ -n \"$pr_url\" ]; then\n    echo \"[Hook] PR created: $pr_url\" >&2\n    echo \"[Hook] Checking GitHub Actions status...\" >&2\n    repo=$(echo \"$pr_url\" | sed -E 's|https://github.com/([^/]+/[^/]+)/pull/[0-9]+|\\1|')\n    pr_num=$(echo \"$pr_url\" | sed -E 's|.*/pull/([0-9]+)|\\1|')\n    echo \"[Hook] To review PR: gh pr review $pr_num --repo $repo\" >&2\n  fi\nfi\n\nprintf '%s\\n' \"$input\""
+            "command": "#!/bin/bash\ninput=$(cat)\ncmd=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.command')\n\nif echo \"$cmd\" | grep -qE 'gh pr create'; then\n  output=$(printf '%s\\n' \"$input\" | jq -r '.tool_response.stdout // .tool_output.output // \"\"')\n  pr_url=$(echo \"$output\" | grep -oE 'https://github.com/[^/]+/[^/]+/pull/[0-9]+')\n  \n  if [ -n \"$pr_url\" ]; then\n    echo \"[Hook] PR created: $pr_url\" >&2\n    echo \"[Hook] Checking GitHub Actions status...\" >&2\n    repo=$(echo \"$pr_url\" | sed -E 's|https://github.com/([^/]+/[^/]+)/pull/[0-9]+|\\1|')\n    pr_num=$(echo \"$pr_url\" | sed -E 's|.*/pull/([0-9]+)|\\1|')\n    echo \"[Hook] To review PR: gh pr review $pr_num --repo $repo\" >&2\n  fi\nfi\n\nprintf '%s\\n' \"$input\""
           }
         ],
         "matcher": "Bash",
@@ -631,6 +637,16 @@
         ],
         "matcher": "*",
         "description": "FAIL-axis instrumentation — append tool failures to the error ledger (JSONL). Never blocks; feeds fail-axis-cause-advisor.sh (#1561)"
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/subagent-failure-advisor.sh\""
+          }
+        ],
+        "matcher": "Task|Agent",
+        "description": "Advise on failed Agent/Task spawns via additionalContext (e.g. unknown subagent_type). Advisory only (additionalContext); the script's only explicit exit is exit 0 (#1775)"
       }
     ]
   }