specweave 0.23.14 → 0.23.18

package/plugins/specweave/hooks/lib/validate-spec-status.sh

@@ -16,7 +16,7 @@
 #
 # Requires: bash 4.0+ (for associative arrays)
 
-set -euo pipefail
+set +e  # EMERGENCY FIX: Changed from set -euo pipefail to prevent Claude Code crashes
 
 # Find project root
 find_project_root() {

package/plugins/specweave/hooks/lib/validate-spec-status.sh.bak

@@ -0,0 +1,163 @@
+#!/bin/bash
+#
+# validate-spec-status.sh
+#
+# Validates that spec.md status values match IncrementStatus enum.
+# Prevents vocabulary drift and ensures status line hook compatibility.
+#
+# Usage:
+#   bash validate-spec-status.sh <increment-id>
+#   bash validate-spec-status.sh --all  # Validate all increments
+#
+# Exit codes:
+#   0 = Valid
+#   1 = Invalid status found
+#   2 = Error (file not found, etc.)
+#
+# Requires: bash 4.0+ (for associative arrays)
+
+set -euo pipefail
+
+# Find project root
+find_project_root() {
+  local dir="$PWD"
+  while [[ "$dir" != "/" ]]; do
+    if [[ -d "$dir/.specweave" ]]; then
+      echo "$dir"
+      return 0
+    fi
+    dir=$(dirname "$dir")
+  done
+  echo "$PWD"
+}
+
+PROJECT_ROOT=$(find_project_root)
+INCREMENTS_DIR="$PROJECT_ROOT/.specweave/increments"
+
+# Valid IncrementStatus enum values (from src/core/types/increment-metadata.ts)
+VALID_STATUSES=("planning" "active" "backlog" "paused" "completed" "abandoned")
+
+# Get suggested correction for invalid status
+get_correction() {
+  local status="$1"
+  case "$status" in
+    "planned") echo "planning" ;;
+    "in-progress"|"in_progress") echo "active" ;;
+    "done") echo "completed" ;;
+    "cancelled"|"canceled") echo "abandoned" ;;
+    *) echo "" ;;
+  esac
+}
+
+# Validate a single spec file
+validate_spec() {
+  local spec_file="$1"
+  local increment_id=$(basename "$(dirname "$spec_file")")
+
+  if [[ ! -f "$spec_file" ]]; then
+    echo "❌ Error: spec.md not found for increment $increment_id"
+    return 2
+  fi
+
+  # Extract status from YAML frontmatter
+  local status=$(grep -m1 "^status:" "$spec_file" 2>/dev/null | cut -d: -f2 | tr -d ' "' || echo "")
+
+  if [[ -z "$status" ]]; then
+    echo "⚠️  Warning: No status field in $increment_id/spec.md"
+    return 0  # Not an error, just a warning
+  fi
+
+  # Check if status is valid
+  local is_valid=0
+  for valid_status in "${VALID_STATUSES[@]}"; do
+    if [[ "$status" == "$valid_status" ]]; then
+      is_valid=1
+      break
+    fi
+  done
+
+  if [[ $is_valid -eq 1 ]]; then
+    echo "✅ $increment_id: status '$status' is valid"
+    return 0
+  else
+    # Invalid status found - suggest correction
+    echo ""
+    echo "❌ Invalid status in $increment_id/spec.md"
+    echo "   Found: '$status'"
+    echo ""
+
+    # Check if we have a suggested correction
+    local correction=$(get_correction "$status")
+    if [[ -n "$correction" ]]; then
+      echo "   💡 Did you mean: '$correction'?"
+      echo ""
+      echo "   Fix:"
+      echo "   sed -i '' 's/^status: $status/status: $correction/' $spec_file"
+    else
+      echo "   Valid statuses: ${VALID_STATUSES[*]}"
+    fi
+    echo ""
+
+    return 1
+  fi
+}
+
+# Validate all increments
+validate_all() {
+  local exit_code=0
+  local total=0
+  local valid=0
+  local invalid=0
+
+  echo "Validating all increments in $INCREMENTS_DIR"
+  echo ""
+
+  for spec_file in "$INCREMENTS_DIR"/*/spec.md; do
+    if [[ -f "$spec_file" ]]; then
+      total=$((total + 1))
+      if validate_spec "$spec_file"; then
+        valid=$((valid + 1))
+      else
+        invalid=$((invalid + 1))
+        exit_code=1
+      fi
+    fi
+  done
+
+  echo ""
+  echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+  echo "Summary: $total increments checked"
+  echo "  ✅ Valid: $valid"
+  echo "  ❌ Invalid: $invalid"
+  echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+
+  if [[ $invalid -gt 0 ]]; then
+    echo ""
+    echo "⚠️  Please fix invalid status values to use official IncrementStatus enum."
+    echo ""
+    echo "Valid statuses:"
+    for status in "${VALID_STATUSES[@]}"; do
+      echo "  - $status"
+    done
+  fi
+
+  return $exit_code
+}
+
+# Main logic
+if [[ $# -eq 0 ]]; then
+  echo "Usage: $0 <increment-id> | --all"
+  echo ""
+  echo "Examples:"
+  echo "  $0 0042-test-infrastructure-cleanup"
+  echo "  $0 --all"
+  exit 2
+fi
+
+if [[ "$1" == "--all" ]]; then
+  validate_all
+else
+  INCREMENT_ID="$1"
+  SPEC_FILE="$INCREMENTS_DIR/$INCREMENT_ID/spec.md"
+  validate_spec "$SPEC_FILE"
+fi

package/plugins/specweave/hooks/post-first-increment.sh

@@ -6,7 +6,7 @@
 #
 # NON-INTERACTIVE: Just shows a message (hooks run in background)
 
-set -euo pipefail
+set +e  # EMERGENCY FIX: Changed from set -euo pipefail to prevent Claude Code crashes
 
 # Get project root (where .specweave/ lives)
 PROJECT_ROOT="$(pwd)"

package/plugins/specweave/hooks/post-first-increment.sh.bak

@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+# SpecWeave Post-First-Increment Hook
+#
+# Triggers after the first increment is completed
+# Congratulates the user on completing their first increment
+#
+# NON-INTERACTIVE: Just shows a message (hooks run in background)
+
+set -euo pipefail
+
+# Get project root (where .specweave/ lives)
+PROJECT_ROOT="$(pwd)"
+
+# Check if .specweave directory exists
+if [ ! -d ".specweave" ]; then
+  # Not in SpecWeave project, skip
+  exit 0
+fi
+
+# Check if this is the first increment completion
+# Count completed increments in .specweave/increments/
+COMPLETED_COUNT=0
+if [ -d ".specweave/increments" ]; then
+  # Count directories that have COMPLETION-REPORT.md or completion metadata
+  for inc_dir in .specweave/increments/[0-9][0-9][0-9][0-9]-*/; do
+    if [ -d "$inc_dir" ]; then
+      if [ -f "${inc_dir}reports/COMPLETION-REPORT.md" ] || \
+         [ -f "${inc_dir}COMPLETION-SUMMARY.md" ] || \
+         ([ -f "${inc_dir}metadata.json" ] && grep -q '"status".*"completed"' "${inc_dir}metadata.json" 2>/dev/null); then
+        COMPLETED_COUNT=$((COMPLETED_COUNT + 1))
+      fi
+    fi
+  done
+fi
+
+# Only trigger on first completion
+if [ "$COMPLETED_COUNT" -ne 1 ]; then
+  exit 0
+fi
+
+# Show congratulations message (non-interactive)
+echo ""
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "🎉 Congratulations! You completed your first increment!"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo ""
+echo "✅ Your increment has been documented in:"
+echo "   .specweave/increments/[increment-id]/"
+echo ""
+echo "📚 View your documentation:"
+echo "   - Specs: .specweave/docs/internal/specs/"
+echo "   - Architecture: .specweave/docs/internal/architecture/"
+echo ""
+echo "🚀 Next steps:"
+echo "   - Review your increment: /specweave:status"
+echo "   - Start next increment: /specweave:increment \"feature name\""
+echo ""
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo ""
+
+exit 0

package/plugins/specweave/hooks/post-spec-update.sh

@@ -27,7 +27,7 @@
 #
 ###############################################################################
 
-set -euo pipefail
+set +e  # EMERGENCY FIX: Changed from set -euo pipefail to prevent Claude Code crashes
 
 # Arguments
 SPEC_FILE_PATH="${1:-}"

package/plugins/specweave/hooks/post-spec-update.sh.bak

@@ -0,0 +1,158 @@
+#!/bin/bash
+
+###############################################################################
+# SpecWeave Post-Spec-Update Hook
+#
+# CRITICAL ARCHITECTURE:
+# - Fires when .specweave/docs/internal/specs/spec-*.md is updated
+# - Auto-syncs to linked external tool (GitHub Project/Jira Epic/ADO Feature)
+# - Replaces increment-based sync (which was wrong!)
+#
+# Trigger Points:
+# 1. After /specweave:sync-docs update (spec updated from increment)
+# 2. After manual spec.md edits (user updates living docs directly)
+# 3. After bidirectional sync from external tool
+#
+# What It Does:
+# - Detects which spec was updated
+# - Checks if spec is linked to external tool (frontmatter: externalLinks)
+# - Syncs changes to GitHub Project / Jira Epic / ADO Feature
+# - Updates user stories, acceptance criteria, progress
+#
+# Usage:
+#   post-spec-update.sh <spec-file-path>
+#
+# Example:
+#   post-spec-update.sh .specweave/docs/internal/specs/spec-001-core-framework.md
+#
+###############################################################################
+
+set -euo pipefail
+
+# Arguments
+SPEC_FILE_PATH="${1:-}"
+
+# Validate arguments
+if [[ -z "$SPEC_FILE_PATH" ]]; then
+  echo "❌ Error: Spec file path required"
+  echo "Usage: post-spec-update.sh <spec-file-path>"
+  exit 1
+fi
+
+# Check if spec file exists
+if [[ ! -f "$SPEC_FILE_PATH" ]]; then
+  echo "❌ Error: Spec file not found: $SPEC_FILE_PATH"
+  exit 1
+fi
+
+# Extract spec ID from file path
+# Example: .specweave/docs/internal/specs/spec-001-core-framework.md → spec-001
+SPEC_ID=$(basename "$SPEC_FILE_PATH" .md)
+
+echo ""
+echo "🔗 Post-Spec-Update Hook"
+echo "   Spec: $SPEC_ID"
+echo "   File: $SPEC_FILE_PATH"
+
+# Load config to check if auto-sync is enabled
+CONFIG_FILE=".specweave/config.json"
+if [[ ! -f "$CONFIG_FILE" ]]; then
+  echo "   ℹ️  No config file found, skipping auto-sync"
+  exit 0
+fi
+
+# Check if auto-sync is enabled
+AUTO_SYNC=$(jq -r '.hooks.post_spec_update.auto_sync // true' "$CONFIG_FILE")
+
+if [[ "$AUTO_SYNC" != "true" ]]; then
+  echo "   ℹ️  Auto-sync disabled in config, skipping"
+  exit 0
+fi
+
+# Parse spec frontmatter to detect external links
+# Use gray-matter or similar to extract YAML frontmatter
+# For now, use simple grep/sed approach
+
+# Check if GitHub link exists
+GITHUB_LINK=$(grep -A 10 "^externalLinks:" "$SPEC_FILE_PATH" | grep -A 5 "github:" | grep "projectId:" | sed 's/.*projectId: *//; s/ *$//' || echo "")
+
+# Check if Jira link exists
+JIRA_LINK=$(grep -A 10 "^externalLinks:" "$SPEC_FILE_PATH" | grep -A 5 "jira:" | grep "epicKey:" | sed 's/.*epicKey: *//; s/ *$//' || echo "")
+
+# Check if ADO link exists
+ADO_LINK=$(grep -A 10 "^externalLinks:" "$SPEC_FILE_PATH" | grep -A 5 "ado:" | grep "featureId:" | sed 's/.*featureId: *//; s/ *$//' || echo "")
+
+# Determine which provider to sync
+PROVIDER=""
+if [[ -n "$GITHUB_LINK" ]]; then
+  PROVIDER="github"
+  EXTERNAL_ID="$GITHUB_LINK"
+elif [[ -n "$JIRA_LINK" ]]; then
+  PROVIDER="jira"
+  EXTERNAL_ID="$JIRA_LINK"
+elif [[ -n "$ADO_LINK" ]]; then
+  PROVIDER="ado"
+  EXTERNAL_ID="$ADO_LINK"
+fi
+
+# No external link found - skip sync
+if [[ -z "$PROVIDER" ]]; then
+  echo "   ℹ️  Spec not linked to external tool, skipping sync"
+  echo "   Hint: Use /specweave-github:sync-spec or /specweave-jira:sync-spec to link"
+  exit 0
+fi
+
+echo "   🔗 Detected external link: $PROVIDER (ID: $EXTERNAL_ID)"
+
+# Sync to external tool based on provider
+case "$PROVIDER" in
+  github)
+    echo "   🔄 Syncing to GitHub Project..."
+
+    # Check if GitHub CLI is available
+    if ! command -v gh &> /dev/null; then
+      echo "   ⚠️  GitHub CLI (gh) not found, skipping sync"
+      exit 0
+    fi
+
+    # TODO: Call GitHub spec sync
+    # For now, just log the action
+    echo "   ✅ GitHub sync queued (implementation pending)"
+    ;;
+
+  jira)
+    echo "   🔄 Syncing to Jira Epic..."
+
+    # Check if Jira config exists
+    if [[ -z "${JIRA_DOMAIN:-}" ]]; then
+      echo "   ⚠️  Jira not configured (.env), skipping sync"
+      exit 0
+    fi
+
+    # TODO: Call Jira spec sync
+    echo "   ✅ Jira sync queued (implementation pending)"
+    ;;
+
+  ado)
+    echo "   🔄 Syncing to Azure DevOps Feature..."
+
+    # Check if ADO config exists
+    if [[ -z "${ADO_ORGANIZATION:-}" ]]; then
+      echo "   ⚠️  ADO not configured (.env), skipping sync"
+      exit 0
+    fi
+
+    # TODO: Call ADO spec sync
+    echo "   ✅ ADO sync queued (implementation pending)"
+    ;;
+
+  *)
+    echo "   ⚠️  Unknown provider: $PROVIDER"
+    exit 0
+    ;;
+esac
+
+echo "   ✅ Post-spec-update hook complete"
+echo ""
+
+exit 0

package/plugins/specweave/hooks/post-user-story-complete.sh

@@ -27,7 +27,7 @@
 #
 ###############################################################################
 
-set -euo pipefail
+set +e  # EMERGENCY FIX: Changed from set -euo pipefail to prevent Claude Code crashes
 
 # Arguments
 SPEC_ID="${1:-}"

package/plugins/specweave/hooks/post-user-story-complete.sh.bak

@@ -0,0 +1,179 @@
+#!/bin/bash
+
+###############################################################################
+# SpecWeave Post-User-Story-Complete Hook
+#
+# CRITICAL ARCHITECTURE:
+# - Fires when user story marked complete in spec.md (AC checkbox checked)
+# - Updates external PM tool (GitHub Issue/Jira Story/ADO User Story)
+# - Moves GitHub card to "Done" / Closes Jira story / Completes ADO story
+#
+# Trigger Points:
+# 1. After user manually checks AC checkbox in spec.md
+# 2. After bidirectional sync updates AC status
+# 3. After increment completion syncs to spec
+#
+# What It Does:
+# - Detects which user story was completed (all AC checkboxes checked)
+# - Finds corresponding external item (GitHub Issue/Jira Story/ADO User Story)
+# - Updates item status to "Done" / "Closed"
+# - Adds completion comment with timestamp
+#
+# Usage:
+#   post-user-story-complete.sh <spec-id> <user-story-id>
+#
+# Example:
+#   post-user-story-complete.sh spec-001 US-001
+#
+###############################################################################
+
+set -euo pipefail
+
+# Arguments
+SPEC_ID="${1:-}"
+USER_STORY_ID="${2:-}"
+
+# Validate arguments
+if [[ -z "$SPEC_ID" || -z "$USER_STORY_ID" ]]; then
+  echo "❌ Error: Spec ID and User Story ID required"
+  echo "Usage: post-user-story-complete.sh <spec-id> <user-story-id>"
+  exit 1
+fi
+
+echo ""
+echo "🎉 Post-User-Story-Complete Hook"
+echo "   Spec: $SPEC_ID"
+echo "   User Story: $USER_STORY_ID"
+
+# Find spec file
+SPEC_FILE=""
+if [[ -f ".specweave/docs/internal/specs/$SPEC_ID.md" ]]; then
+  SPEC_FILE=".specweave/docs/internal/specs/$SPEC_ID.md"
+elif [[ -f ".specweave/docs/internal/projects/default/specs/$SPEC_ID.md" ]]; then
+  SPEC_FILE=".specweave/docs/internal/projects/default/specs/$SPEC_ID.md"
+else
+  echo "❌ Error: Spec file not found for $SPEC_ID"
+  exit 1
+fi
+
+# Load config to check if auto-sync is enabled
+CONFIG_FILE=".specweave/config.json"
+if [[ ! -f "$CONFIG_FILE" ]]; then
+  echo "   ℹ️  No config file found, skipping auto-sync"
+  exit 0
+fi
+
+# Check if auto-sync is enabled
+AUTO_SYNC=$(jq -r '.hooks.post_user_story_complete.auto_sync // true' "$CONFIG_FILE")
+
+if [[ "$AUTO_SYNC" != "true" ]]; then
+  echo "   ℹ️  Auto-sync disabled in config, skipping"
+  exit 0
+fi
+
+# Parse spec frontmatter to detect external links
+# Check if GitHub link exists
+GITHUB_LINK=$(grep -A 10 "^externalLinks:" "$SPEC_FILE" | grep -A 5 "github:" | grep "projectId:" | sed 's/.*projectId: *//; s/ *$//' || echo "")
+
+# Check if Jira link exists
+JIRA_LINK=$(grep -A 10 "^externalLinks:" "$SPEC_FILE" | grep -A 5 "jira:" | grep "epicKey:" | sed 's/.*epicKey: *//; s/ *$//' || echo "")
+
+# Check if ADO link exists
+ADO_LINK=$(grep -A 10 "^externalLinks:" "$SPEC_FILE" | grep -A 5 "ado:" | grep "featureId:" | sed 's/.*featureId: *//; s/ *$//' || echo "")
+
+# Determine which provider to sync
+PROVIDER=""
+if [[ -n "$GITHUB_LINK" ]]; then
+  PROVIDER="github"
+  EXTERNAL_ID="$GITHUB_LINK"
+elif [[ -n "$JIRA_LINK" ]]; then
+  PROVIDER="jira"
+  EXTERNAL_ID="$JIRA_LINK"
+elif [[ -n "$ADO_LINK" ]]; then
+  PROVIDER="ado"
+  EXTERNAL_ID="$ADO_LINK"
+fi
+
+# No external link found - skip sync
+if [[ -z "$PROVIDER" ]]; then
+  echo "   ℹ️  Spec not linked to external tool, skipping sync"
+  exit 0
+fi
+
+echo "   🔗 Detected external link: $PROVIDER"
+
+# Update external tool based on provider
+case "$PROVIDER" in
+  github)
+    echo "   🔄 Updating GitHub Issue for $USER_STORY_ID..."
+
+    # Check if GitHub CLI is available
+    if ! command -v gh &> /dev/null; then
+      echo "   ⚠️  GitHub CLI (gh) not found, skipping sync"
+      exit 0
+    fi
+
+    # Find GitHub Issue for this user story
+    # Search for issue with title pattern "[USER_STORY_ID]"
+    REPO=$(git remote get-url origin | sed -E 's/.*github\.com[:/]([^/]+\/[^/]+)(\.git)?$/\1/')
+
+    # Search for issue
+    ISSUE_NUMBER=$(gh issue list --repo "$REPO" --search "\"[$USER_STORY_ID]\" in:title" --json number --jq '.[0].number' 2>/dev/null || echo "")
+
+    if [[ -z "$ISSUE_NUMBER" ]]; then
+      echo "   ⚠️  GitHub Issue not found for $USER_STORY_ID"
+      exit 0
+    fi
+
+    echo "   📝 Found GitHub Issue #$ISSUE_NUMBER"
+
+    # Close issue
+    gh issue close "$ISSUE_NUMBER" --repo "$REPO" --comment "✅ User story completed
+
+🤖 Auto-closed by SpecWeave hook
+Completed at: $(date -u +%Y-%m-%dT%H:%M:%SZ)" 2>/dev/null || {
+      echo "   ⚠️  Failed to close issue"
+      exit 0
+    }
+
+    echo "   ✅ GitHub Issue #$ISSUE_NUMBER closed"
+    ;;
+
+  jira)
+    echo "   🔄 Updating Jira Story for $USER_STORY_ID..."
+
+    # Check if Jira config exists
+    if [[ -z "${JIRA_DOMAIN:-}" ]]; then
+      echo "   ⚠️  Jira not configured (.env), skipping sync"
+      exit 0
+    fi
+
+    # TODO: Find Jira Story by title pattern
+    # TODO: Transition story to "Done" status
+    echo "   ✅ Jira story transition queued (implementation pending)"
+    ;;
+
+  ado)
+    echo "   🔄 Updating ADO User Story for $USER_STORY_ID..."
+
+    # Check if ADO config exists
+    if [[ -z "${ADO_ORGANIZATION:-}" ]]; then
+      echo "   ⚠️  ADO not configured (.env), skipping sync"
+      exit 0
+    fi
+
+    # TODO: Find ADO User Story by title pattern
+    # TODO: Update state to "Closed"
+    echo "   ✅ ADO user story update queued (implementation pending)"
+    ;;
+
+  *)
+    echo "   ⚠️  Unknown provider: $PROVIDER"
+    exit 0
+    ;;
+esac
+
+echo "   ✅ Post-user-story-complete hook complete"
+echo ""
+
+exit 0

package/plugins/specweave/hooks/pre-command-deduplication.sh

@@ -4,7 +4,7 @@
 # Fires BEFORE any command executes (UserPromptSubmit hook)
 # Purpose: Prevent duplicate command invocations within configurable time window
 
-set -euo pipefail
+set +e  # EMERGENCY FIX: Changed from set -euo pipefail to prevent Claude Code crashes
 
 # ==============================================================================
 # PROJECT ROOT DETECTION

package/plugins/specweave/hooks/pre-command-deduplication.sh.bak

@@ -0,0 +1,83 @@
+#!/bin/bash
+
+# SpecWeave Pre-Command Deduplication Hook
+# Fires BEFORE any command executes (UserPromptSubmit hook)
+# Purpose: Prevent duplicate command invocations within configurable time window
+
+set -euo pipefail
+
+# ==============================================================================
+# PROJECT ROOT DETECTION
+# ==============================================================================
+
+# Find project root by searching upward for .specweave/ directory
+find_project_root() {
+  local dir="$1"
+  while [ "$dir" != "/" ]; do
+    if [ -d "$dir/.specweave" ]; then
+      echo "$dir"
+      return 0
+    fi
+    dir="$(dirname "$dir")"
+  done
+  # Fallback: try current directory
+  if [ -d "$(pwd)/.specweave" ]; then
+    pwd
+  else
+    echo "$(pwd)"
+  fi
+}
+
+PROJECT_ROOT="$(find_project_root "$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)")"
+cd "$PROJECT_ROOT" 2>/dev/null || true
+
+# Read input JSON from stdin
+INPUT=$(cat)
+
+# ==============================================================================
+# DEDUPLICATION CHECK: Block duplicate commands within 1 second
+# ==============================================================================
+
+# Check if deduplication module is available
+if command -v node >/dev/null 2>&1 && [[ -f "dist/src/core/deduplication/command-deduplicator.js" ]]; then
+  # Use dedicated wrapper script for ES module compatibility
+  DEDUP_RESULT=$(echo "$INPUT" | node scripts/check-deduplication.js 2>/dev/null || echo "OK")
+
+  # Parse result
+  STATUS=$(echo "$DEDUP_RESULT" | head -1)
+
+  if [[ "$STATUS" == "DUPLICATE" ]]; then
+    # Get stats
+    STATS=$(echo "$DEDUP_RESULT" | tail -1)
+
+    # Extract command and stats for readable message
+    COMMAND=$(echo "$STATS" | grep -o '"lastCommand":"[^"]*"' | cut -d'"' -f4 || echo "unknown")
+    TOTAL_BLOCKED=$(echo "$STATS" | grep -o '"totalDuplicatesBlocked":[0-9]*' | cut -d':' -f2 || echo "1")
+    CACHE_SIZE=$(echo "$STATS" | grep -o '"currentCacheSize":[0-9]*' | cut -d':' -f2 || echo "1")
+
+    # Build error message WITHOUT embedding JSON (avoid escaping issues)
+    MESSAGE=$(cat <<'EOF'
+{
+  "decision": "block",
+  "reason": "🚫 DUPLICATE COMMAND DETECTED\n\nCommand: `COMMAND_PLACEHOLDER`\nTime window: 1 second\n\nThis command was just executed! To prevent unintended duplicates, this invocation has been blocked.\n\n💡 If you meant to run this command again:\n  1. Wait 1 second\n  2. Run the command again\n\nDeduplication Stats:\n- Total duplicates blocked: BLOCKED_PLACEHOLDER\n- Commands in cache: CACHE_PLACEHOLDER"
+}
+EOF
+)
+    # Replace placeholders (avoids JSON escaping issues)
+    # Use | as sed delimiter to avoid conflicts with / in command names
+    echo "$MESSAGE" | sed "s|COMMAND_PLACEHOLDER|$COMMAND|g" | sed "s|BLOCKED_PLACEHOLDER|$TOTAL_BLOCKED|g" | sed "s|CACHE_PLACEHOLDER|$CACHE_SIZE|g"
+    exit 0
+  fi
+fi
+
+# ==============================================================================
+# PASS THROUGH: No duplicate detected, proceed with command
+# ==============================================================================
+
+cat <<EOF
+{
+  "decision": "approve"
+}
+EOF
+
+exit 0