specweave 1.0.27 → 1.0.29

package/CLAUDE.md

@@ -1297,6 +1297,54 @@ npm run rebuild
 
 ---
 
+## Hook Development (v1.0.27+)
+
+### Claude Code Hook Input Format
+
+**CRITICAL: PreToolUse hooks receive JSON with `tool_input` wrapper!**
+
+```json
+// PreToolUse:Write/Edit receives:
+{
+  "tool_name": "Write",
+  "tool_input": {
+    "file_path": "/path/to/file.md",
+    "content": "file content..."
+  }
+}
+
+// PreToolUse:Bash receives (NO tool_input wrapper):
+{
+  "command": "npm install"
+}
+```
+
+**Correct extraction patterns:**
+```bash
+# For Write/Edit tools (nested in tool_input):
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .file_path // empty')
+CONTENT=$(echo "$INPUT" | jq -r '.tool_input.content // .tool_input.new_string // empty')
+
+# For Bash tool (direct):
+COMMAND=$(echo "$INPUT" | jq -r '.command // empty')
+
+# ⚠️ WRONG - will fail silently:
+FILE_PATH=$(echo "$INPUT" | jq -r '.file_path // empty')  # Missing tool_input!
+```
+
+**Hook return format (PreToolUse):**
+```bash
+# Allow the tool call:
+echo '{"decision": "allow"}'
+exit 0
+
+# Block the tool call:
+echo '{"decision": "block", "reason": "Error message here"}'
+exit 2
+```
+
+---
+
 ## Quick Reference
 
 | Aspect | Rule |
@@ -1305,6 +1353,7 @@ npm run rebuild
 | **Bash guard** | Hook `bash-file-guard.sh` BLOCKS dangerous patterns (v0.32.1+) |
 | Skills vs Agents | Skills = auto-activate (keywords), Agents = explicit `Task()` |
 | Hook events | PostToolUse, PreToolUse, UserPromptSubmit, Stop, SessionStart/End, etc. |
+| Hook input | Write/Edit use `.tool_input.file_path`, Bash uses `.command` |
 | Cache location | `.specweave/cache/` (24h TTL) |
 | Pre-commit | Blocks 50+ deletions, `rm -rf` on protected dirs |
 | Stuck session | Kill + `pkill -f "cat.*EOF"` + clean locks + restart |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specweave",
-  "version": "1.0.27",
+  "version": "1.0.29",
   "description": "Spec-driven development framework for Claude Code. AI-native workflow with living documentation, intelligent agents, and multilingual support (9 languages). Enterprise-grade traceability with permanent specs and temporary increments.",
   "type": "module",
   "main": "dist/index.js",

package/plugins/specweave/hooks/project-folder-guard.sh

@@ -15,17 +15,19 @@
 
 set -euo pipefail
 
-TOOL_NAME="$1"
-shift
-TOOL_ARGS="$*"
+# Read stdin for tool input (Claude Code passes JSON via stdin)
+INPUT=$(cat)
+
+# Extract tool name - Claude Code passes it at top level
+TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name // ""' 2>/dev/null || echo "")
 
 # Only check Write tool operations to specs/ folder
 if [ "$TOOL_NAME" != "Write" ]; then
   exit 0
 fi
 
-# Extract file_path from tool args (JSON format)
-FILE_PATH=$(echo "$TOOL_ARGS" | jq -r '.file_path // empty')
+# Extract file_path from tool_input (correct structure for Claude Code hooks)
+FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .file_path // empty' 2>/dev/null || echo "")
 
 if [ -z "$FILE_PATH" ]; then
   exit 0

package/plugins/specweave/hooks/v2/guards/bash-file-guard.sh

@@ -208,4 +208,5 @@ if [[ $BLOCKED -eq 1 ]]; then
 fi
 
 # All other bash commands are allowed
+echo '{"decision":"allow"}'
 exit 0

package/plugins/specweave/hooks/v2/guards/completion-guard.sh

@@ -18,7 +18,12 @@ INPUT=$(cat)
 # Pattern: file_path contains metadata.json AND (new_string OR content) contains "status"..."completed"
 
 # Extract file_path
-FILE_PATH=$(echo "$INPUT" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)".*/\1/')
+# Claude Code passes tool input in .tool_input.file_path format
+if command -v jq &> /dev/null; then
+  FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .file_path // empty' 2>/dev/null)
+else
+  FILE_PATH=$(echo "$INPUT" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)".*/\1/')
+fi
 
 # Only care about metadata.json files
 if [[ "$FILE_PATH" != *metadata.json ]]; then
@@ -26,9 +31,14 @@ if [[ "$FILE_PATH" != *metadata.json ]]; then
 fi
 
 # Extract the content being written (new_string for Edit, content for Write)
-NEW_CONTENT=$(echo "$INPUT" | grep -o '"new_string"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1)
-if [[ -z "$NEW_CONTENT" ]]; then
-  NEW_CONTENT=$(echo "$INPUT" | grep -o '"content"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1)
+# Claude Code passes tool input in .tool_input format
+if command -v jq &> /dev/null; then
+  NEW_CONTENT=$(echo "$INPUT" | jq -r '.tool_input.new_string // .tool_input.content // .new_string // .content // empty' 2>/dev/null)
+else
+  NEW_CONTENT=$(echo "$INPUT" | grep -o '"new_string"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1)
+  if [[ -z "$NEW_CONTENT" ]]; then
+    NEW_CONTENT=$(echo "$INPUT" | grep -o '"content"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1)
+  fi
 fi
 
 # Check if trying to set status to "completed" directly

package/plugins/specweave/hooks/v2/guards/features-folder-guard.sh

@@ -20,8 +20,9 @@ set +e
 INPUT=$(cat)
 
 # Extract the file_path being written/edited
+# Claude Code passes tool input in .tool_input.file_path format
 if command -v jq &> /dev/null; then
-  FILE_PATH=$(echo "$INPUT" | jq -r '.file_path // empty' 2>/dev/null)
+  FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .file_path // empty' 2>/dev/null)
 else
   FILE_PATH=$(echo "$INPUT" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*"file_path"[[:space:]]*:[[:space:]]*"\(.*\)"/\1/')
 fi

package/plugins/specweave/hooks/v2/guards/increment-duplicate-guard.sh

@@ -19,7 +19,12 @@ set +e
 INPUT=$(cat)
 
 # Extract file_path from the tool call
-FILE_PATH=$(echo "$INPUT" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)".*/\1/')
+# Claude Code passes tool input in .tool_input.file_path format
+if command -v jq &> /dev/null; then
+  FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .file_path // empty' 2>/dev/null)
+else
+  FILE_PATH=$(echo "$INPUT" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)".*/\1/')
+fi
 
 # Only care about .specweave/increments/ paths
 if [[ "$FILE_PATH" != *.specweave/increments/* ]]; then

package/plugins/specweave/hooks/v2/guards/increment-root-guard.sh

@@ -21,9 +21,11 @@ set +e
 INPUT=$(cat)
 
 # Extract the file_path being written
+# Claude Code passes tool input in .tool_input.file_path format
 if command -v jq &> /dev/null; then
-  FILE_PATH=$(echo "$INPUT" | jq -r '.file_path // empty' 2>/dev/null)
+  FILE_PATH=$(echo "$INPUT" | jq -r '.tool_input.file_path // .file_path // empty' 2>/dev/null)
 else
+  # Fallback: try both patterns
   FILE_PATH=$(echo "$INPUT" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*"file_path"[[:space:]]*:[[:space:]]*"\(.*\)"/\1/')
 fi
 

package/src/templates/AGENTS.md.template

@@ -5,6 +5,18 @@
 
 ---
 
+> ⛔ **NON-CLAUDE TOOLS (Cursor, Copilot, etc.): READ THIS FIRST!**
+>
+> Before creating ANY increment, you MUST run: `specweave context projects`
+>
+> Then add `**Project**: <value>` to EVERY User Story in spec.md.
+> For 2-level structures, also add `**Board**: <value>`.
+>
+> **Missing this = increment creation will FAIL!**
+> See [#user-story-format](#user-story-format) for details.
+
+---
+
 ## Section Index (Use Ctrl+F to Navigate)
 
 | Section | Search For | Purpose |