oh-my-customcode 2.0.7 → 2.0.9

package/templates/.claude/ontology/graphs/full-graph.json

@@ -433,6 +433,66 @@
     "R005": {
       "type": "Rule",
       "class": "MayRule"
+    },
+    "java-best-practices": {
+      "type": "Skill",
+      "class": "BestPracticeSkill"
+    },
+    "agora": {
+      "type": "Skill"
+    },
+    "django-best-practices": {
+      "type": "Skill",
+      "class": "BestPracticeSkill"
+    },
+    "alembic-best-practices": {
+      "type": "Skill",
+      "class": "BestPracticeSkill"
+    },
+    "impeccable-design": {
+      "type": "Skill"
+    },
+    "diagram-design": {
+      "type": "Skill"
+    },
+    "cve-triage": {
+      "type": "Skill"
+    },
+    "adversarial-review": {
+      "type": "Skill"
+    },
+    "dag-orchestration": {
+      "type": "Skill"
+    },
+    "pipeline-guards": {
+      "type": "Skill"
+    },
+    "agora-runner": {
+      "type": "Agent"
+    },
+    "be-django-expert": {
+      "type": "Agent",
+      "class": "BackendExpert"
+    },
+    "db-alembic-expert": {
+      "type": "Agent",
+      "class": "DatabaseExpert"
+    },
+    "fe-design-expert": {
+      "type": "Agent",
+      "class": "FrontendExpert"
+    },
+    "sec-codeql-expert": {
+      "type": "Agent"
+    },
+    "slack-cli-expert": {
+      "type": "Agent"
+    },
+    "tracker-checkpoint": {
+      "type": "Agent"
+    },
+    "wiki-curator": {
+      "type": "Agent"
     }
   },
   "edges": [
@@ -721,6 +781,66 @@
       "target": "flutter-best-practices",
       "relation": "requires"
     },
+    {
+      "source": "lang-java-expert",
+      "target": "java-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "agora-runner",
+      "target": "agora",
+      "relation": "requires"
+    },
+    {
+      "source": "be-django-expert",
+      "target": "django-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "db-alembic-expert",
+      "target": "alembic-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "db-alembic-expert",
+      "target": "postgres-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "fe-design-expert",
+      "target": "impeccable-design",
+      "relation": "requires"
+    },
+    {
+      "source": "fe-design-expert",
+      "target": "web-design-guidelines",
+      "relation": "requires"
+    },
+    {
+      "source": "fe-design-expert",
+      "target": "diagram-design",
+      "relation": "requires"
+    },
+    {
+      "source": "sec-codeql-expert",
+      "target": "cve-triage",
+      "relation": "requires"
+    },
+    {
+      "source": "sec-codeql-expert",
+      "target": "adversarial-review",
+      "relation": "requires"
+    },
+    {
+      "source": "tracker-checkpoint",
+      "target": "dag-orchestration",
+      "relation": "requires"
+    },
+    {
+      "source": "tracker-checkpoint",
+      "target": "pipeline-guards",
+      "relation": "requires"
+    },
     {
       "source": "dev-lead-routing",
       "target": "be-fastapi-expert",
@@ -884,7 +1004,9 @@
       ]
     },
     "lang-java-expert": {
-      "requires": [],
+      "requires": [
+        "java-best-practices"
+      ],
       "routed_by": [
         "dev-lead-routing"
       ]
@@ -1219,7 +1341,8 @@
     },
     "web-design-guidelines": {
       "required_by": [
-        "fe-vercel-agent"
+        "fe-vercel-agent",
+        "fe-design-expert"
       ],
       "depends_on": []
     },
@@ -1267,7 +1390,8 @@
     },
     "postgres-best-practices": {
       "required_by": [
-        "db-postgres-expert"
+        "db-postgres-expert",
+        "db-alembic-expert"
       ],
       "depends_on": []
     },
@@ -1527,6 +1651,115 @@
     },
     "R018": {
       "referenced_by": []
+    },
+    "java-best-practices": {
+      "required_by": [
+        "lang-java-expert"
+      ],
+      "depends_on": []
+    },
+    "agora": {
+      "required_by": [
+        "agora-runner"
+      ],
+      "depends_on": []
+    },
+    "django-best-practices": {
+      "required_by": [
+        "be-django-expert"
+      ],
+      "depends_on": []
+    },
+    "alembic-best-practices": {
+      "required_by": [
+        "db-alembic-expert"
+      ],
+      "depends_on": []
+    },
+    "impeccable-design": {
+      "required_by": [
+        "fe-design-expert"
+      ],
+      "depends_on": []
+    },
+    "diagram-design": {
+      "required_by": [
+        "fe-design-expert"
+      ],
+      "depends_on": []
+    },
+    "cve-triage": {
+      "required_by": [
+        "sec-codeql-expert"
+      ],
+      "depends_on": []
+    },
+    "adversarial-review": {
+      "required_by": [
+        "sec-codeql-expert"
+      ],
+      "depends_on": []
+    },
+    "dag-orchestration": {
+      "required_by": [
+        "tracker-checkpoint"
+      ],
+      "depends_on": []
+    },
+    "pipeline-guards": {
+      "required_by": [
+        "tracker-checkpoint"
+      ],
+      "depends_on": []
+    },
+    "agora-runner": {
+      "requires": [
+        "agora"
+      ],
+      "routed_by": []
+    },
+    "be-django-expert": {
+      "requires": [
+        "django-best-practices"
+      ],
+      "routed_by": []
+    },
+    "db-alembic-expert": {
+      "requires": [
+        "alembic-best-practices",
+        "postgres-best-practices"
+      ],
+      "routed_by": []
+    },
+    "fe-design-expert": {
+      "requires": [
+        "impeccable-design",
+        "web-design-guidelines",
+        "diagram-design"
+      ],
+      "routed_by": []
+    },
+    "sec-codeql-expert": {
+      "requires": [
+        "cve-triage",
+        "adversarial-review"
+      ],
+      "routed_by": []
+    },
+    "slack-cli-expert": {
+      "requires": [],
+      "routed_by": []
+    },
+    "tracker-checkpoint": {
+      "requires": [
+        "dag-orchestration",
+        "pipeline-guards"
+      ],
+      "routed_by": []
+    },
+    "wiki-curator": {
+      "requires": [],
+      "routed_by": []
     }
   }
 }

package/templates/.claude/ontology/skills.yaml

@@ -17,7 +17,8 @@ classes:
       go-backend-best-practices, docker-best-practices, aws-best-practices,
       postgres-best-practices, redis-best-practices, supabase-postgres-best-practices,
       airflow-best-practices, dbt-best-practices, kafka-best-practices,
-      spark-best-practices, snowflake-best-practices, pipeline-architecture-patterns
+      spark-best-practices, snowflake-best-practices, pipeline-architecture-patterns,
+      java-best-practices, django-best-practices, alembic-best-practices
     ]
     description: "Language/framework best practices and architecture patterns"
 
@@ -533,3 +534,66 @@ skills:
     summary: "UI code review guidelines for accessibility, performance, and UX best practices"
     keywords: [ui, accessibility, ux, performance, design]
     rule_references: []
+
+  java-best-practices:
+    class: BestPracticeSkill
+    description: "Modern Java 25 LTS patterns from Virtual Threads, Pattern Matching, Records, and Sealed Classes"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  agora:
+    description: "Use when a design or decision needs adversarial multi-round scrutiny from several independent model vendors. Runs anonymized A/B/C reviewer rounds with a rotating judge and produces a consensus report."
+    user_invocable: true
+    model_invocable: true
+    scope: core
+
+  django-best-practices:
+    class: BestPracticeSkill
+    description: "Django patterns for production-ready Python web applications"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  alembic-best-practices:
+    class: BestPracticeSkill
+    description: "Alembic migration patterns for naming conventions, safety checks, expand-contract, env.py configuration, and CI integration"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  impeccable-design:
+    description: "AI design language for production-grade UI — 10 commands covering typography, color, motion, layout, and UX writing quality"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  diagram-design:
+    description: "Brand-consistent editorial diagrams — SVG generation for release notes, architecture docs, and marketing materials"
+    user_invocable: true
+    model_invocable: true
+    scope: package
+
+  cve-triage:
+    description: "CVE triage workflow for vulnerability analysis, reproduction assessment, and patch verification"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  adversarial-review:
+    description: "Adversarial code review using attacker mindset — trust boundary, attack surface, business logic, and defense evaluation"
+    user_invocable: true
+    model_invocable: true
+    scope: core
+
+  dag-orchestration:
+    description: "YAML-based DAG workflow engine with topological execution and failure strategies"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  pipeline-guards:
+    description: "Safety constraints and quality gates for pipeline and workflow execution"
+    user_invocable: false
+    model_invocable: true
+    scope: core

package/templates/.claude/rules/MUST-agent-design.md

@@ -212,10 +212,6 @@ source:                    # For external agents
   origin: github | npm
   url: https://...
   version: 1.0.0
-escalation:              # Model escalation policy (optional)
-  enabled: true          # Enable auto-escalation advisory
-  path: haiku → sonnet → opus  # Escalation sequence (Tier-3 Agent-tool aliases only)
-  threshold: 2           # Failures before advisory
 soul: true                 # Enable SOUL.md identity injection
 isolation: worktree | sandbox  # worktree = git worktree, sandbox = restricted bash
 sandboxFailIfUnavailable: true  # Exit if sandbox unavailable (v2.1.83+)
@@ -422,13 +418,7 @@ The `limitations` field declares what an agent explicitly CANNOT or SHOULD NOT d
 
 ### Escalation Policy
 
-When `escalation.enabled: true`, the model-escalation hooks will track outcomes for this agent type and advise escalation when failures exceed the threshold. This is advisory-only — the orchestrator decides whether to accept the recommendation.
-
-| Field | Default | Description |
-|-------|---------|-------------|
-| `enabled` | false | Enable escalation tracking for this agent |
-| `path` | haiku → sonnet → opus | Model upgrade sequence (Tier-3 Agent-tool aliases only) |
-| `threshold` | 2 | Failure count before escalation advisory |
+Model escalation is not configured via agent frontmatter; thresholds are hard-coded in model-escalation-advisor.sh; see the model-escalation skill.
 -->
 
 ## Memory Scopes

package/templates/.claude/rules/MUST-enforcement-policy.md

@@ -16,12 +16,12 @@ oh-my-customcode uses an **advisory-first enforcement model**. Most rules are en
 
 | Tier | Mechanism | Rules | Behavior |
 |------|-----------|-------|----------|
-| Hard Block | PreToolUse hook, exit 2 | stage-blocker, dev-server tmux, rule-deletion-guard | Prevents tool execution |
+| Hard Block | PreToolUse hook, exit 2 | stage-blocker, rule-deletion-guard | Prevents tool execution |
 | Soft Block | Stop hook prompt | R011 session-end saves | Auto-performs then approves |
 | Conversation Block | PostToolUse hook + `continueOnBlock` (CC v2.1.139+), exit 2 | stuck-detector, context-budget-advisor, cost-cap-advisor | Feeds rejection reason into conversation; Claude continues with awareness |
-| Advisory | PostToolUse hooks | R007, R008, R009, R010, R018 | Warns via stderr, never blocks |
+| Advisory | PreToolUse + PostToolUse + SubagentStop hooks | R007, R008, R009, R010, R018 | Warns via stderr or stdout `additionalContext`, never blocks |
 | Advisory (proactive) | UserPromptSubmit + SubagentStop + PostToolUse hooks | R007, R008 (`r007-r008-drift-advisor.sh` — #1229 UserPromptSubmit, #1545 SubagentStop, #1553 PostToolUse) | Reads last assistant turn; emits advisory if header/prefix absent. SubagentStop wiring (#1545) covers subagent stops in no-user-input loops (`/fsd`); PostToolUse (#1553) covers the orchestrator-only stretch before the first subagent spawn. Complements retroactive Stop-hook (`session-reflection.sh`, #1190). **v1.1.43부터 실제 발화**(파서 셀렉터 `.role`→`.message.role` 수정 — 상세는 Read 도구로 원문 주석 참조). v1.1.49부터 역방향(announce > tool_use) 신호 포함, 기본 off 옵트인 (#1595 #6). v1.1.73의 narration 채널 분리 옵션(`OMCUSTOM_R008_NARRATION`, #1701 #2)은 실 세션 5건(CC 2.1.233~2.1.274) 실측에서 narration 마커 매칭 0/354·판정 on/off 동일로 전제가 성립하지 않아 v1.1.74에서 은퇴했습니다(#1703) — R008 누락은 채널 오선택이 아니라 마커 미직렬화 형태입니다. **v1.1.62(#1650 D)부터 서브에이전트 세션에서는 침묵**: hook stdin의 `agent_id`(CC 스키마상 서브에이전트 내부 발화에만 존재)가 있으면 exit 0 — 단 `SubagentStart`/`SubagentStop`은 `agent_id`가 대상 식별자라 예외(판정 수행). 중첩 서브에이전트 안의 SubagentStop은 억제 못 함(R010 정책상 도달 불가 경로). 완료 보고가 advisory 응답으로 대체되던 훅 피드백 잠식(R020 8항, #1652 #3)의 advisory 계열 차단. |
-| Advisory (telemetry) | PostToolUseFailure hook | — (계측 전용, 규칙 강제 없음) | `failure-ledger.sh` (#1561, v1.1.44) — 도구 실패를 JSONL 원장에 append. stdout/stderr 무출력이라 모델에 도달하지 않으며 절대 차단하지 않음 |
+| Advisory (telemetry + advisory) | PostToolUseFailure hook | — (계측+어드바이저리, 규칙 강제 없음) | `failure-ledger.sh` (#1561, v1.1.44) — 실패를 JSONL 원장에 append, 무출력(모델 미도달)·비차단. 같은 이벤트의 `subagent-failure-advisor.sh`(Agent/Task)는 additionalContext advisory 전달 |
 | Advisory (proactive) | UserPromptSubmit hook | R020 (원인 진단) | `fail-axis-cause-advisor.sh` (#1561, v1.1.44) — 원장에 실패 기록이 있는데 원인 진술 없는 재촉 프롬프트가 오면 `hookSpecificOutput.additionalContext`로 "원인 가설 되묻기" advisory 전달. 원장 부재 시 조용히 통과 |
 | Prompt-based | CLAUDE.md + rules/ + `SessionStart` 재주입(matcher `*`; PostCompact 이벤트 배선은 유지되나 효과 미보장[^postcompact]) | All MUST rules | Behavioral guidance in context |
 
@@ -54,7 +54,7 @@ oh-my-customcode uses an **advisory-first enforcement model**. Most rules are en
 <!-- DETAIL: CC version notes (v2.1.211-v2.1.275)
 > **v2.1.211/212/214+**: 훅의 enforcement 결정이 auto/unattended 모드에서 안정적으로 존중되도록 세 건이 수정되었습니다 — (211) auto mode가 unsandboxed Bash에 대한 PreToolUse 훅의 `ask` 결정을 덮어쓰던 문제가 수정되어 훅 `ask`가 최소 prompt로 floor되고, (212) `continue:false` 훅의 halt가 도구 실패·중간 완료 시 누락되던 문제 및 훅 인프라 오류가 user rejection으로 오보고되던 문제가 수정되었으며, (214) 훅 stdout JSON이 스키마 검증에 실패할 때 exit code 2가 문서대로 차단하지 못하던 문제가 수정되었습니다. R021 Enforcement Tiers(Hard Block=exit 2, Conversation Block=continueOnBlock exit 2, Advisory)가 훅의 block/ask 결정 존중에 의존하므로, 세 수정 모두 hard-block·advisory 훅(stage-blocker, rule-deletion-guard, stuck-detector 등)의 강제 신뢰성을 강화합니다 — v2.1.210 훅 timeout phantom-rejection 수정의 연장선.
 
-> **v2.1.222+**: PreToolUse auto-allow 훅이 background agent task(summaries/compaction/renames)에서 tool restriction을 우회하던 문제가 수정되었습니다. 즉 위 Enforcement Tiers 표의 **Hard Block 계층(stage-blocker, dev-server tmux, rule-deletion-guard)이 background agent task 경로에서 우회될 수 있었다**는 뜻이며, background agent를 쓰는 장기 무인 루프에서 hard-block 훅이 실제로는 강제되지 않는 구간이 존재했습니다. v2.1.211/212/214 훅 결정 존중 체인의 연장선입니다.
+> **v2.1.222+**: PreToolUse auto-allow 훅이 background agent task(summaries/compaction/renames)에서 tool restriction을 우회하던 문제가 수정되었습니다. 즉 위 Enforcement Tiers 표의 **Hard Block 계층(stage-blocker, rule-deletion-guard)이 background agent task 경로에서 우회될 수 있었다**는 뜻이며, background agent를 쓰는 장기 무인 루프에서 hard-block 훅이 실제로는 강제되지 않는 구간이 존재했습니다. v2.1.211/212/214 훅 결정 존중 체인의 연장선입니다.
 
 > **v2.1.247+**: 훅 또는 background agent가 수 메가바이트의 error 출력을 찍어 대화를 overflow시켜 세션이 "Prompt is too long"으로 멈추던 결함이 수정되었습니다. 같은 릴리즈에서 hook/background task의 output file을 쓸 수 없을 때 무한 메모리 증가하던 문제도 수정되어, 이제 출력이 소실된 위치를 파일에 남깁니다. 이 저장소는 advisory 훅(`r007-r008-drift-advisor.sh`, `failure-ledger.sh`, `fail-axis-cause-advisor.sh` 등)을 다수 운용하므로, 훅 출력 폭주가 세션 자체를 wedge시키는 이 실패 클래스에 해당합니다 — v2.1.211/212/214/222 훅 신뢰성 계열의 연장선입니다.
 
@@ -80,14 +80,14 @@ oh-my-customcode uses an **advisory-first enforcement model**. Most rules are en
 3. **Composability**: External skills and internal rules can coexist without deadlocks
 4. **Post-compact reinforcement**: R007/R008/R009/R010/R018 are re-injected after context compaction via `SessionStart`(matcher `*`/`compact`) — not via the PostCompact event itself[^postcompact]
 
-## Hard Enforcement Candidates — R010 git-delegation-guard (conditional), R007/R008 advisory **implemented & firing** (#1229 UserPromptSubmit, proactive) + **#1545 SubagentStop** (covers subagent stops) + **#1553 PostToolUse** + retroactive Stop-hook (#1190); `additionalContext` 전달 경로는 #1547(v1.1.40)에서 구현됐으나 파서 셀렉터 결함으로 v1.1.42까지 **양 계층 모두 미발화**였고, **v1.1.43에서 수정 완료·발화 확인**(#1553); hard-block variant still candidate if advisory insufficient (#1096). Promoted: rule-deletion-guard.sh (2026-04-08). See details via Read tool.
+## Hard Enforcement Candidates — R007/R008 advisory **implemented & firing** (#1229 UserPromptSubmit, proactive) + **#1545 SubagentStop** (covers subagent stops) + **#1553 PostToolUse** + retroactive Stop-hook (#1190); `additionalContext` 전달 경로는 #1547(v1.1.40)에서 구현됐으나 파서 셀렉터 결함으로 v1.1.42까지 **양 계층 모두 미발화**였고, **v1.1.43에서 수정 완료·발화 확인**(#1553); hard-block variant still candidate if advisory insufficient (#1096). Promoted: rule-deletion-guard.sh (2026-04-08). See details via Read tool.
 
 <!-- DETAIL: Hard Enforcement Candidates (Future)
 If advisory enforcement proves insufficient for specific rules, these are candidates for promotion to hard-block:
 
 | Rule | Candidate Hook | Status | Condition for Promotion |
 |------|---------------|--------|------------------------|
-| R010 | git-delegation-guard.sh | Candidate | If orchestrator-direct-write violations exceed 3/session |
+| R010 | git-delegation-guard.sh | Advisory (not a candidate) | Flags git keywords in delegation prompts to non-mgr-gitnerd agents; does not detect orchestrator direct writes; transcript replays found no clear true positive among residual fires (five borderline), so hard-block promotion is not supported (#1885) |
 | R007/R008 | `r007-r008-drift-advisor.sh` (UserPromptSubmit #1229 + SubagentStop #1545 + PostToolUse #1553) | **Advisory implemented and firing** — proactive pre-response check wired to three trigger points; the SubagentStop leg (#1545) covers subagent stops in no-user-input loops (`/fsd`), and the PostToolUse leg (#1553) covers the orchestrator-only stretch before the first subagent spawn. Retroactive: `session-reflection.sh` (Stop, #1190). Two-layer drift detection: proactive (#1229/#1545/#1553) + retroactive (#1190). **Historical defect (v1.1.40–v1.1.42): delivery path implemented but never fired** — #1547 (v1.1.40) switched delivery from stderr (never model-visible on exit 0) to `hookSpecificOutput.additionalContext` on JSON stdout, non-blocking (no top-level `decision`/`continue`/`stopReason`), but both scripts short-circuited BEFORE emitting: `jq -r '.role'` read a key absent at transcript top level (it is `.message.role`), so `last_assistant` was always empty and the script exited 0 silently. Measured then: 0 `"additionalContext":` occurrences across 771 transcripts; live probe emitted 0 bytes on both streams. **Resolved in v1.1.43** — parser fix on both layers + `PostToolUse` wiring, first fire confirmed by live probe (#1553). Follow-ups: v1.1.44 turn-level R008 prefix counting (#1563), v1.1.45 Skill-tool exemption (#1569), v1.1.49 reverse signal — announce > tool_use, own anchored regex, fires only when ALL tool_use blocks (Skill included) are 0, opt-in via `OMCUSTOM_R008_REVERSE=on` and NOT replicated into `session-reflection.sh` (#1595 #6). | Promote to hard-block if advisory proves insufficient (#1096) |
 
 Promotion requires: (1) measured violation rate data, (2) user approval, (3) rollback plan.
@@ -103,6 +103,6 @@ Promotion requires: (1) measured violation rate data, (2) user approval, (3) rol
 
 | Rule | Interaction |
 |------|-------------|
-| R010 | git-delegation-guard.sh is advisory; could promote to blocking |
+| R010 | git-delegation-guard.sh is model-visible advisory (#1885) |
 | R016 | Violations trigger rule updates, not enforcement changes |
 | SessionStart (compact re-entry) | Re-injects critical rules to combat context compaction amnesia — see [^postcompact] |

package/templates/.claude/rules/MUST-orchestrator-coordination.md

@@ -209,7 +209,7 @@ When the user explicitly signals full-delegation intent, the orchestrator operat
 - **R001 (Safety)**: All safety rules remain absolute — no exceptions
 - **R007/R008 (Identification)**: Agent/tool identification still required for traceability
 - **File Write/Edit delegation**: Still requires specialist agents — autonomous mode only relaxes git and gate overhead
-- **Hard-block hooks**: stage-blocker, dev-server tmux, .md creation blocker remain active
+- **Hard-block hooks**: stage-blocker, rule-deletion-guard remain active
 - **R009 (Parallel execution)**: Still required for efficiency
 
 ### Scope and Lifetime

package/templates/.claude/rules/SHOULD-memory-integration.md

@@ -549,7 +549,7 @@ References: #1226 (item 3), #1227.
 -->
 
 <!-- DETAIL: v2.1.271/273+ background dedup/resume file-read/blockReadsOutside
-> **v2.1.271/273+**: (271) 대화가 compact된 뒤에도 계속 돌고 있던 백그라운드 명령(watch task, dev server)의 **중복 사본**이 새로 시작되던 결함이 수정되었습니다 — 구버전에서 post-compact 중복 프로세스는 지시가 아니라 compaction 아티팩트였습니다(cross-ref R010 dev-server tmux hard block). (271) `/resume`·`/teleport`가 이전 대화의 파일-읽음 추적을 그대로 유지해, 재개된 대화가 **한 번도 읽지 않은 파일**을 편집할 수 있던 결함이 수정되었습니다(cross-ref R005 v2.1.228 read-before-write 노트). (271) claude.ai에서 동기화된 스킬이 로그아웃 후에도 디스크에 남아있던 결함이 수정되어, `cleanupPeriodDays` 내 갱신되지 않은 사본은 이제 복구 가능한 휴지통으로 이동합니다. (273) `permissions.blockReadsOutsideWorkingDirectories`: 저장소 settings가 지정한 메모리 디렉토리는 더 이상 프롬프트에 로드·회상·색인·memory extraction에 사용되지 않습니다 — 이 규칙의 `autoMemoryDirectory`와 관련됩니다: 이 설정 하에서는 저장소가 지정한 메모리 디렉토리가 제외됩니다.
+> **v2.1.271/273+**: (271) 대화가 compact된 뒤에도 계속 돌고 있던 백그라운드 명령(watch task, dev server)의 **중복 사본**이 새로 시작되던 결함이 수정되었습니다 — 구버전에서 post-compact 중복 프로세스는 지시가 아니라 compaction 아티팩트였습니다(cross-ref #1856: dev-server tmux hook is an advisory). (271) `/resume`·`/teleport`가 이전 대화의 파일-읽음 추적을 그대로 유지해, 재개된 대화가 **한 번도 읽지 않은 파일**을 편집할 수 있던 결함이 수정되었습니다(cross-ref R005 v2.1.228 read-before-write 노트). (271) claude.ai에서 동기화된 스킬이 로그아웃 후에도 디스크에 남아있던 결함이 수정되어, `cleanupPeriodDays` 내 갱신되지 않은 사본은 이제 복구 가능한 휴지통으로 이동합니다. (273) `permissions.blockReadsOutsideWorkingDirectories`: 저장소 settings가 지정한 메모리 디렉토리는 더 이상 프롬프트에 로드·회상·색인·memory extraction에 사용되지 않습니다 — 이 규칙의 `autoMemoryDirectory`와 관련됩니다: 이 설정 하에서는 저장소가 지정한 메모리 디렉토리가 제외됩니다.
 -->
 
 <!-- DETAIL: v2.1.275+ CHANGELOG memory age note/resume malformed block

package/templates/.claude/settings.json

@@ -15,11 +15,11 @@
         "hooks": [
           {
             "type": "command",
-            "command": "input=$(cat)\nif printf '%s' \"$input\" | jq -e '((.tool_input.command // \"\") | test(\"(npm run dev|pnpm( run)? dev|yarn dev|bun run dev)\"))' >/dev/null 2>&1; then\n  printf '%s' \"$input\" | (\n#!/bin/bash\ninput=$(cat)\ncmd=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.command // \"\"')\n\n# Block dev servers that aren't run in tmux\necho '[Hook] BLOCKED: Dev server must run in tmux for log access' >&2\necho '[Hook] Use this command instead:' >&2\necho \"[Hook] tmux new-session -d -s dev 'npm run dev'\" >&2\necho '[Hook] Then: tmux attach -t dev' >&2\nexit 1\n  )\nelse\n  printf '%s' \"$input\"\nfi"
+            "command": "input=$(cat)\nif printf '%s' \"$input\" | jq -e '((.tool_input.command // \"\") | test(\"(npm run dev|pnpm( run)? dev|yarn dev|bun run dev)\"))' >/dev/null 2>&1; then\n  printf '%s' \"$input\" | (\n#!/bin/sh\ninput=$(cat)\ncmd=$(printf '%s' \"$input\" | jq -r '.tool_input.command // \"\"' 2>/dev/null)\nbg=$(printf '%s' \"$input\" | jq -r '.tool_input.run_in_background // false' 2>/dev/null)\n\n# Advisory only: never blocks (always exit 0). Stay silent for background runs, tmux-wrapped commands,\n# mentions of the dev command in other commands, and variants like dev:test / develop / devtools.\n[ \"$bg\" = \"true\" ] && exit 0\nif printf '%s' \"$cmd\" | grep -Eq '^[[:space:]]*tmux([[:space:]]|$)'; then exit 0; fi\n\n# Drop quoted strings, then split into segments at && || ; | ( ) and newlines\nsegs=$(printf '%s' \"$cmd\" | sed -e 's/\"[^\"]*\"//g' -e \"s/'[^']*'//g\" -e 's/&&/;/g' -e 's/||/;/g' | tr ';|()\\n' '\\n\\n\\n\\n\\n')\n\n# Command position (optionally after VAR=value), word boundary after the dev command, segment not backgrounded with &\nhit=$(printf '%s\\n' \"$segs\" | grep -E '^[[:space:]]*([A-Za-z_][A-Za-z0-9_]*=[^[:space:]]*[[:space:]]+)*(npm run dev|pnpm( run)? dev|yarn dev|bun run dev)([[:space:])]|$)' | grep -Ev '(^|[^>&])&([^&>]|$)' | head -n 1)\n\nif [ -n \"$hit\" ]; then\n  printf '%s\\n' '{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"additionalContext\":\"[Hook] 포그라운드 dev 서버 시작이 감지되었습니다. 로그 접근을 위해 run_in_background: true 로 실행하거나 tmux 세션(예: tmux new-session -d -s dev) 안에서 실행하는 것을 권장합니다. 이 알림은 차단하지 않습니다.\"}}'\nfi\nexit 0\n  )\nelse\n  printf '%s' \"$input\"\nfi"
           }
         ],
         "matcher": "Bash",
-        "description": "Block dev servers outside tmux - ensures you can access logs"
+        "description": "Advise (additionalContext, never blocks) when a foreground dev server starts outside tmux/run_in_background - keeps logs accessible"
       },
       {
         "hooks": [
@@ -45,11 +45,11 @@
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\nfile_path=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.file_path // \"\"')\n\nif [[ \"$file_path\" =~ \\.(md|txt)$ ]] && [[ ! \"$file_path\" =~ (README|CLAUDE|AGENT|SKILL)\\.md$ ]]; then\n  echo \"[Hook] BLOCKED: Unnecessary documentation file creation\" >&2\n  echo \"[Hook] File: $file_path\" >&2\n  echo \"[Hook] Use README.md or AGENT.md for documentation instead\" >&2\n  exit 1\nfi\n\nprintf '%s\\n' \"$input\""
+            "command": "#!/bin/sh\ninput=$(cat)\nfile_path=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.file_path // \"\"')\n\ncase \"$file_path\" in\n  *README.md|*CLAUDE.md|*AGENT.md|*SKILL.md) ;;\n  *.md|*.txt)\n    echo \"[Hook] NOTICE (non-blocking): new documentation file - the write is not blocked\" >&2\n    echo \"[Hook] File: $file_path\" >&2\n    echo \"[Hook] Prefer README.md or AGENT.md for documentation if this is not a deliberate new doc\" >&2\n    exit 1\n    ;;\nesac\n\nprintf '%s\\n' \"$input\""
           }
         ],
         "matcher": "Write",
-        "description": "Block creation of random .md files - keeps docs consolidated"
+        "description": "Non-blocking notice on new .md/.txt files (exit 1) - keeps docs consolidated"
       },
       {
         "hooks": [
@@ -101,6 +101,16 @@
         "matcher": "Bash",
         "description": "Block rule file deletion — requires individual user confirmation per rule (R001 safety)"
       },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/bash-cd-advisor.sh\""
+          }
+        ],
+        "matcher": "Bash",
+        "description": "Advise against top-level (non-subshell) cd in Bash commands; cd persists as session cwd (R005, #1834/#1816 H2)"
+      },
       {
         "hooks": [
           {
@@ -272,14 +282,10 @@
           {
             "type": "command",
             "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/r007-r008-drift-advisor.sh\""
-          },
-          {
-            "type": "command",
-            "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/subagent-failure-advisor.sh\""
           }
         ],
         "matcher": "*",
-        "description": "Record agent outcomes + auto-continue workflow + R007/R008 drift advisory + failure advisory on subagent completion (autonomous-loop re-entry, #1545; #1631 replaced the self-referential prompt-type judge hook with an advisory-only command hook)"
+        "description": "Record agent outcomes + stall and consecutive-completion advisories + R007/R008 drift advisory on subagent completion — advisory-only, never continues or blocks the workflow (autonomous-loop re-entry, #1545; #1631 replaced the self-referential prompt-type judge hook with an advisory-only command hook; #1880)"
       }
     ],
     "CwdChanged": [
@@ -302,8 +308,8 @@
             "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/file-change-validator.sh\""
           }
         ],
-        "matcher": "*",
-        "description": "Validate externally modified files — advisory staleness warning (v2.1.83+)"
+        "matcher": "CLAUDE.md|bun.lock|yarn.lock|Cargo.lock|poetry.lock|package-lock.json|pnpm-lock.yaml",
+        "description": "Warn on external changes to CLAUDE.md and the bun/yarn/Cargo/poetry/npm/pnpm lock files in the working directory — stderr shown to the user only, never blocks; the matcher lists literal filenames because CC registers each |-separated segment as a literal file to watch (v2.1.83+, #1775)"
       }
     ],
     "Notification": [
@@ -383,7 +389,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "#!/bin/bash\ninput=$(cat)\ncmd=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.command')\n\nif echo \"$cmd\" | grep -qE 'gh pr create'; then\n  output=$(printf '%s\\n' \"$input\" | jq -r '.tool_output.output // \"\"')\n  pr_url=$(echo \"$output\" | grep -oE 'https://github.com/[^/]+/[^/]+/pull/[0-9]+')\n  \n  if [ -n \"$pr_url\" ]; then\n    echo \"[Hook] PR created: $pr_url\" >&2\n    echo \"[Hook] Checking GitHub Actions status...\" >&2\n    repo=$(echo \"$pr_url\" | sed -E 's|https://github.com/([^/]+/[^/]+)/pull/[0-9]+|\\1|')\n    pr_num=$(echo \"$pr_url\" | sed -E 's|.*/pull/([0-9]+)|\\1|')\n    echo \"[Hook] To review PR: gh pr review $pr_num --repo $repo\" >&2\n  fi\nfi\n\nprintf '%s\\n' \"$input\""
+            "command": "#!/bin/bash\ninput=$(cat)\ncmd=$(printf '%s\\n' \"$input\" | jq -r '.tool_input.command')\n\nif echo \"$cmd\" | grep -qE 'gh pr create'; then\n  output=$(printf '%s\\n' \"$input\" | jq -r '.tool_response.stdout // .tool_output.output // \"\"')\n  pr_url=$(echo \"$output\" | grep -oE 'https://github.com/[^/]+/[^/]+/pull/[0-9]+')\n  \n  if [ -n \"$pr_url\" ]; then\n    echo \"[Hook] PR created: $pr_url\" >&2\n    echo \"[Hook] Checking GitHub Actions status...\" >&2\n    repo=$(echo \"$pr_url\" | sed -E 's|https://github.com/([^/]+/[^/]+)/pull/[0-9]+|\\1|')\n    pr_num=$(echo \"$pr_url\" | sed -E 's|.*/pull/([0-9]+)|\\1|')\n    echo \"[Hook] To review PR: gh pr review $pr_num --repo $repo\" >&2\n  fi\nfi\n\nprintf '%s\\n' \"$input\""
           }
         ],
         "matcher": "Bash",
@@ -504,7 +510,7 @@
             "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/content-hash-validator.sh\""
           }
         ],
-        "matcher": "Read",
+        "matcher": "Read|Edit|Write",
         "description": "Store content hashes for Read operations — enables Edit staleness detection"
       },
       {
@@ -631,6 +637,16 @@
         ],
         "matcher": "*",
         "description": "FAIL-axis instrumentation — append tool failures to the error ledger (JSONL). Never blocks; feeds fail-axis-cause-advisor.sh (#1561)"
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash \"${CLAUDE_PROJECT_DIR:-.}/.claude/hooks/scripts/subagent-failure-advisor.sh\""
+          }
+        ],
+        "matcher": "Task|Agent",
+        "description": "Advise on failed Agent/Task spawns via additionalContext (e.g. unknown subagent_type). Advisory only (additionalContext); the script's only explicit exit is exit 0 (#1775)"
       }
     ]
   }

package/templates/.claude/skills/fsd/SKILL.md

@@ -16,7 +16,7 @@ Autonomous release loop. Can be expressed as running:
 /goal "모든 이슈가 처리될 때까지" /loop "/pipeline auto-dev -> /homework"
 ```
 
-> The main conversation may also drive the same loop inline without invoking `goal`/`loop` — see 「인라인 실행 허용 — 계약과 실측의 정합 (#1683 #4)」 below.
+> The main conversation may also drive the same loop inline without invoking `/goal`/`/loop` — see 「인라인 실행 허용 — 계약과 실측의 정합 (#1683 #4)」 below.
 
 This is a **thin alias / orchestrator skill**. It does not implement loop, issue-polling, release, or verification logic — it delegates entirely to existing skills.
 
@@ -33,9 +33,10 @@ No arguments are required. The default behavior runs until the auto-dev-eligible
 
 FSD expands into:
 
-1. **`/goal` wrapper** — applies disciplined goal-to-execution workflow:
-   - Objective: "모든 이슈가 처리될 때까지"
-   - Delegates planning, gap detection, and R020 completion verification to the `goal` skill
+1. **`/goal` completion condition** — Claude Code's built-in command (CHANGELOG 2.1.139: "Added `/goal` command: set a completion condition and Claude keeps working across turns until it's met."), here with the objective "모든 이슈가 처리될 때까지"
+   - The `omcustom:goal` skill (`/omcustom:goal`) is a separate planning workflow, renamed in v0.130.0 (commit 6e57404b) so that bare `/goal` reaches the built-in; the expression above does not invoke it
+   - Completion verification is owned by R020 and this skill's own loop contract (see 「인라인 실행 허용」 below)
+   - [가설 — 2026-05-12 이름 변경 이후 세션이라 내장 `/goal`로 추정, 세션 기록 미확인] Session 114's bare `/goal` (see 「Session 114 Precedent」)
 2. **`/loop` recurrence** — self-paced loop (model decides cadence), each iteration runs:
    1. `/pipeline auto-dev` — full release pipeline for the next eligible issue
    2. `/homework` — retrospective 찐빠 audit gate
@@ -159,7 +160,7 @@ printf '%s\n' "$(date -u +%Y-%m-%dT%H:%M:%SZ)" > "/tmp/.claude-fsd-$PPID"
 
 ### 인라인 실행 허용 — 계약과 실측의 정합 (#1683 #4)
 
-FSD의 루프 드라이버는 **메인 대화(오케스트레이터) 자신**입니다. `/goal`·`/loop`(ScheduleWakeup) 스킬 호출은 루프를 표현하는 한 방법일 뿐 필수 호출이 아니며, 오케스트레이터가 아래 최소 계약을 지키면 스킬 호출 없이 인라인으로 반복을 진행하는 것도 이 스킬의 정상 실행입니다. v1.1.64 반복이 인라인으로 실행된 것을 계약 이탈로 회고한 것(#1683 찐빠 #4)이 이 절의 기원이며, 같은 세션의 v1.1.65·v1.1.66 반복도 인라인으로 실행되었습니다(세션 실측, 이슈 범위 밖).
+FSD의 루프 드라이버는 **메인 대화(오케스트레이터) 자신**입니다. `/goal`·`/loop`(ScheduleWakeup) 호출은 루프를 표현하는 한 방법일 뿐 필수 호출이 아니며, 오케스트레이터가 아래 최소 계약을 지키면 명령/스킬 호출 없이 인라인으로 반복을 진행하는 것도 이 스킬의 정상 실행입니다. v1.1.64 반복이 인라인으로 실행된 것을 계약 이탈로 회고한 것(#1683 찐빠 #4)이 이 절의 기원이며, 같은 세션의 v1.1.65·v1.1.66 반복도 인라인으로 실행되었습니다(세션 실측, 이슈 범위 밖).
 
 | 반복마다 지켜야 할 최소 계약 | 근거 |
 |------------------------------|------|
@@ -169,7 +170,7 @@ FSD의 루프 드라이버는 **메인 대화(오케스트레이터) 자신**입
 | 종료 경로와 무관하게 마커 제거(`command rm -f`) | 「무인 모드 마커」 |
 | 반복의 릴리즈는 PR 생성 전에 auto-dev 릴리즈 단계의 마일스톤 배정 게이트가 PASS여야 합니다(마일스톤 vX.Y.Z가 open이고 스코프 이슈 전부가 배정됨) | auto-dev.yaml release 단계 "Milestone assignment gate", #1789 찐빠 #2(인라인 루프가 scope-selection의 마일스톤 생성·배정 부수효과를 건너뛰어 릴리즈가 마일스톤 없이 나감) |
 
-`/goal`·`/loop`를 호출하는 경로는 여전히 유효하며, 세션이 무인(`claude -p`, 예약 실행)이라 자기 페이싱이 필요할 때 권장됩니다. 대화형 세션에서는 인라인 실행이 스킬 호출 오버헤드 없이 같은 계약을 만족합니다.
+`/goal`·`/loop`를 호출하는 경로는 여전히 유효하며, 세션이 무인(`claude -p`, 예약 실행)이라 자기 페이싱이 필요할 때 권장됩니다. 대화형 세션에서는 인라인 실행이 명령/스킬 호출 오버헤드 없이 같은 계약을 만족합니다.
 
 ## Safety and Discipline
 
@@ -240,7 +241,7 @@ That session ran 2 iterations (v0.177.0 and v0.178.0) before converging with 0 e
 
 | Skill / Rule | Role |
 |--------------|------|
-| `goal` | Disciplined goal-to-execution wrapper — objective parse, gap detection, R020 verification |
+| `omcustom:goal` | Separate planning workflow skill (`/omcustom:goal`); not invoked by the `/goal` in the expression above (built-in command) |
 | `omcustom-loop` | SubagentStop command hooks (outcome recording and advisories only) — no orchestrator-workflow continuation; these hooks do not wake an idle model (no `asyncRewake` configured in `.claude/hooks/hooks.json` or `.claude/settings.json`) and `auto-continue-guard.sh` has no `exit 2` statement (its only explicit exit is `exit 0`), echoes the payload, and the CC 2.1.310 SubagentStop payload has no top-level `decision`/`continue` key (CC 2.1.310 binary SubagentStop payload builder, inspected during the v2.0.6/v2.0.7 reviews), so it does not block |
 | `pipeline` | `/pipeline auto-dev` — the core release pipeline per iteration |
 | `homework` | Retrospective 찐빠 audit gate per iteration |
@@ -260,8 +261,8 @@ This skill is intentionally a **thin alias**. It does NOT duplicate:
 - Release pipeline steps (owned by `pipeline auto-dev`)
 - Retrospective analysis (owned by `homework`)
 - PR merge execution (owned by `mgr-gitnerd`)
-- Completion verification (owned by R020 + `goal`)
-- Loop driving itself — the main conversation may run the iteration inline (see 「인라인 실행 허용」); `goal`/`/loop` are optional expressions of the same contract; `omcustom-loop` hooks are advisory only
+- Completion verification (owned by R020 + this skill's loop contract)
+- Loop driving itself — the main conversation may run the iteration inline (see 「인라인 실행 허용」); `/goal`/`/loop` are optional expressions of the same contract; `omcustom-loop` hooks are advisory only
 
 If any of those underlying skills evolve, FSD automatically benefits — its only responsibility is declaring the intent and forwarding to the right components.