specweave 1.0.550 → 1.0.552

package/plugins/specweave/hooks/v2/dispatchers/post-tool-use.sh

@@ -1,447 +0,0 @@
-#!/bin/bash
-# post-tool-use.sh - Single dispatcher for ALL PostToolUse events
-#
-# v1.0.148+: NEW ARCHITECTURE - No background processor
-#
-# CRITICAL DESIGN PRINCIPLE:
-#   - Tool operations ALWAYS succeed (Edit/Write never blocked by hooks)
-#   - All hook errors become visible warnings to user
-#   - Logs captured for debugging
-#   - Background processes for heavy work
-#
-# Architecture (v1.0.148 - Simplified):
-# - Detectors run asynchronously (don't block tool results)
-# - CRITICAL events (increment.done/reopened) sync IMMEDIATELY
-# - Other events queued to pending.jsonl for stop-sync.sh (session end)
-# - NO background processor daemon
-#
-# Event flow:
-# 1. metadata.json change -> lifecycle-detector -> increment.* events
-#    - IF done/reopened: IMMEDIATE sync via project-bridge-handler
-#    - ELSE: queued for stop-sync.sh
-# 2. tasks.md/spec.md change -> queued for stop-sync.sh (batched at session end)
-#
-# Goal: Never crash Claude, always exit 0, warn on errors
-
-set +e  # CRITICAL: Never exit on error
-
-[[ "${SPECWEAVE_DISABLE_HOOKS:-0}" == "1" ]] && exit 0
-
-# ============================================================================
-# CONSTANTS
-# ============================================================================
-
-HOOK_NAME="post-tool-use"
-HOOK_VERSION="1.0.148"
-
-# ============================================================================
-# PROJECT ROOT DETECTION
-# ============================================================================
-
-PROJECT_ROOT="$PWD"
-while [[ "$PROJECT_ROOT" != "/" ]] && [[ ! -f "$PROJECT_ROOT/.specweave/config.json" ]]; do
-  PROJECT_ROOT=$(dirname "$PROJECT_ROOT")
-done
-[[ ! -f "$PROJECT_ROOT/.specweave/config.json" ]] && exit 0
-
-STATE_DIR="$PROJECT_ROOT/.specweave/state"
-
-# ============================================================================
-# LOGGING INFRASTRUCTURE
-# ============================================================================
-
-LOGS_DIR="$PROJECT_ROOT/.specweave/logs"
-DEBUG_LOG="$LOGS_DIR/post-tool-use.log"
-WARNING_LOG="$LOGS_DIR/hook-warnings.log"
-mkdir -p "$LOGS_DIR" 2>/dev/null || true
-
-log_debug() {
-  echo "[$(date '+%Y-%m-%d %H:%M:%S')] [$HOOK_NAME] $*" >> "$DEBUG_LOG" 2>/dev/null || true
-}
-
-log_warning() {
-  local message="$1"
-  local details="${2:-}"
-
-  # Always log to file
-  {
-    echo "[$(date '+%Y-%m-%d %H:%M:%S')] WARNING [$HOOK_NAME]: $message"
-    [[ -n "$details" ]] && echo "  Details: $details"
-  } >> "$WARNING_LOG" 2>/dev/null || true
-
-  # Show to user so they know something went wrong
-  echo ""
-  echo "  [Hook Warning] $HOOK_NAME: $message"
-  [[ -n "$details" ]] && echo "  $details"
-  echo "  (Tool operation succeeded - hook issue only)"
-  echo ""
-}
-
-# ============================================================================
-# SAFE EXECUTION HELPERS
-# ============================================================================
-
-# Run a hook script safely in background (never blocks, logs errors)
-safe_run_background() {
-  local script="$1"
-  local context="$2"
-  shift 2
-
-  if [[ ! -f "$script" ]]; then
-    log_debug "Script not found (skipping): $script"
-    return 0
-  fi
-
-  if [[ ! -x "$script" ]] && [[ ! "$script" == *.sh ]]; then
-    log_debug "Script not executable (skipping): $script"
-    return 0
-  fi
-
-  # Run in background, capture errors to log
-  (
-    set +e
-    local output
-    local exit_code
-
-    output=$(bash "$script" "$@" 2>&1)
-    exit_code=$?
-
-    if [[ $exit_code -ne 0 ]]; then
-      echo "[$(date '+%Y-%m-%d %H:%M:%S')] BACKGROUND ERROR [$context]: exit $exit_code" >> "$WARNING_LOG" 2>/dev/null || true
-      echo "  Output: $output" >> "$WARNING_LOG" 2>/dev/null || true
-    fi
-  ) &
-
-  return 0
-}
-
-# Run a hook script safely in foreground (for sync guards)
-safe_run_sync() {
-  local script="$1"
-  local context="$2"
-  local input="$3"
-
-  if [[ ! -f "$script" ]]; then
-    log_debug "Script not found (skipping): $script"
-    return 0
-  fi
-
-  local output
-  local exit_code
-
-  # Run with timeout protection (5 second max)
-  if command -v gtimeout >/dev/null 2>&1; then
-    output=$(echo "$input" | gtimeout --kill-after=2 5 bash "$script" 2>&1)
-    exit_code=$?
-  elif command -v timeout >/dev/null 2>&1; then
-    output=$(echo "$input" | timeout --kill-after=2 5 bash "$script" 2>&1)
-    exit_code=$?
-  else
-    output=$(echo "$input" | bash "$script" 2>&1)
-    exit_code=$?
-  fi
-
-  # Log errors but don't fail
-  if [[ $exit_code -ne 0 ]]; then
-    if [[ $exit_code -eq 124 ]] || [[ $exit_code -eq 137 ]]; then
-      log_warning "Hook timed out: $context" "Script: $script"
-    else
-      log_debug "Hook exited with code $exit_code: $context"
-    fi
-  fi
-
-  # Output any non-error output (for status messages, etc.)
-  if [[ -n "$output" ]] && [[ "$output" != *"ERROR"* ]] && [[ "$output" != *"error"* ]]; then
-    echo "$output"
-  fi
-
-  return 0  # Always succeed
-}
-
-# ============================================================================
-# TASK COMPLETION SOUND (plays when task marked [x])
-# ============================================================================
-
-play_task_completion_sound() {
-  local tasks_file="$1"
-  local state_file="$STATE_DIR/.last-task-completion"
-  local session_file="$STATE_DIR/auto-mode.json"
-
-  # DISABLED: Sound notifications are disabled by default
-  # To re-enable, set SPECWEAVE_SOUND_ENABLED=1 in environment
-  if [[ "${SPECWEAVE_SOUND_ENABLED:-0}" != "1" ]]; then
-    log_debug "Sound disabled (set SPECWEAVE_SOUND_ENABLED=1 to enable)"
-    return 0
-  fi
-
-  # CRITICAL: Skip sound if auto mode is active
-  # Auto mode has its own completion sound via Stop hook (plays once at END)
-  if [[ -f "$session_file" ]]; then
-    local auto_status=$(jq -r '.status // "unknown"' "$session_file" 2>/dev/null || echo "unknown")
-    if [[ "$auto_status" == "active" ]] || [[ "$auto_status" == "running" ]]; then
-      log_debug "Auto mode active - skipping task completion sound (Stop hook will handle it)"
-      return 0
-    fi
-  fi
-
-  # Extract current completion count
-  local current_count=$(grep -c '\*\*Status\*\*:.*\[x\]' "$tasks_file" 2>/dev/null || echo "0")
-
-  # Read previous count
-  local previous_count="0"
-  if [[ -f "$state_file" ]]; then
-    previous_count=$(cat "$state_file" 2>/dev/null || echo "0")
-  fi
-
-  # If count increased, a task was just completed
-  if [[ "$current_count" -gt "$previous_count" ]]; then
-    # Save new count
-    echo "$current_count" > "$state_file" 2>/dev/null
-
-    # Play completion sound (background, never blocks)
-    (
-      if [[ "$OSTYPE" == "darwin"* ]]; then
-        # macOS - use Glass.aiff for pleasant completion sound
-        afplay /System/Library/Sounds/Glass.aiff 2>/dev/null &
-      elif command -v paplay >/dev/null 2>&1; then
-        # Linux with PulseAudio
-        paplay /usr/share/sounds/freedesktop/stereo/complete.oga 2>/dev/null &
-      elif command -v aplay >/dev/null 2>&1; then
-        # Linux with ALSA
-        aplay /usr/share/sounds/alsa/Front_Center.wav 2>/dev/null &
-      fi
-    ) &
-
-    log_debug "Task completion sound played (count: $previous_count → $current_count)"
-  fi
-}
-
-# ============================================================================
-# INPUT PARSING (with safe fallbacks)
-# ============================================================================
-
-# Read stdin (tool result JSON) - with safe fallback and timeout
-INPUT=""
-if command -v gtimeout >/dev/null 2>&1; then
-  INPUT=$(gtimeout 1 cat 2>/dev/null || echo '{}')
-elif command -v timeout >/dev/null 2>&1; then
-  INPUT=$(timeout 1 cat 2>/dev/null || echo '{}')
-else
-  INPUT=$(cat 2>/dev/null || echo '{}')
-fi
-
-# Extract file path (fast grep, no jq required)
-FILE_PATH=$(echo "$INPUT" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' | head -1 | sed 's/.*"\([^"]*\)".*/\1/')
-[[ -z "$FILE_PATH" ]] && exit 0
-
-# Extract increment ID from path
-INC_ID=$(echo "$FILE_PATH" | grep -o '[0-9][0-9][0-9][0-9]-[^/]*' | head -1)
-[[ -z "$INC_ID" ]] && exit 0
-
-log_debug "Processing: $FILE_PATH (increment: $INC_ID)"
-
-# ============================================================================
-# SETUP PATHS
-# ============================================================================
-
-# Script is at: hooks/v2/dispatchers/post-tool-use.sh
-# HOOK_DIR should be: hooks/v2 (one level up from dispatchers)
-# PLUGIN_ROOT should be: plugin root (TWO levels up from hooks/v2)
-HOOK_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-PLUGIN_ROOT="$(cd "$HOOK_DIR/../.." && pwd)"
-DETECTOR_DIR="$HOOK_DIR/detectors"
-SCRIPTS_DIR="$PLUGIN_ROOT/scripts"
-
-# ============================================================================
-# EDA DISPATCHER: Route to detectors based on file type
-# All errors become warnings, never block the tool operation
-# ============================================================================
-
-case "$FILE_PATH" in
-  */.specweave/increments/*/metadata.json)
-    log_debug "Metadata change detected"
-
-    # Metadata changed -> check for lifecycle transitions (background)
-    safe_run_background "$DETECTOR_DIR/lifecycle-detector.sh" "lifecycle-detector" "$INC_ID"
-
-    # Update dashboard cache (background)
-    safe_run_background "$SCRIPTS_DIR/update-dashboard-cache.sh" "dashboard-cache" "$INC_ID" "metadata"
-
-    # ========================================================================
-    # IMMEDIATE EXTERNAL SYNC for done/reopened (v1.0.148)
-    # ========================================================================
-    # Critical events sync IMMEDIATELY - user expects external tools updated
-    # Other events batched for session end (stop-sync.sh)
-    METADATA_FILE="$PROJECT_ROOT/.specweave/increments/$INC_ID/metadata.json"
-    if [[ -f "$METADATA_FILE" ]]; then
-      CURRENT_STATUS=$(grep -o '"status"[[:space:]]*:[[:space:]]*"[^"]*"' "$METADATA_FILE" | head -1 | sed 's/.*"\([^"]*\)".*/\1/')
-
-      if [[ "$CURRENT_STATUS" == "completed" ]] || [[ "$CURRENT_STATUS" == "done" ]] || [[ "$CURRENT_STATUS" == "reopened" ]]; then
-        log_debug "IMMEDIATE SYNC: Status is $CURRENT_STATUS - syncing to external tools"
-
-        # ====================================================================
-        # SYNC MODE CHECK (0618): queued vs immediate
-        # ====================================================================
-        SYNC_CONFIG_PATH="$PROJECT_ROOT/.specweave/config.json"
-        SYNC_MODE="queued"
-        if command -v jq >/dev/null 2>&1 && [[ -f "$SYNC_CONFIG_PATH" ]]; then
-          SYNC_MODE=$(jq -r '.sync.mode // "queued"' "$SYNC_CONFIG_PATH" 2>/dev/null || echo "queued")
-        fi
-
-        if [[ "$SYNC_MODE" == "queued" ]]; then
-          # Queue event to pending.jsonl instead of direct sync
-          QUEUE_DIR="$PROJECT_ROOT/.specweave/state/event-queue"
-          mkdir -p "$QUEUE_DIR" 2>/dev/null || true
-          TIMESTAMP=$(date -u +"%Y-%m-%dT%H:%M:%SZ")
-          echo "{\"incrementId\":\"$INC_ID\",\"eventType\":\"status.changed\",\"metadata\":{\"newStatus\":\"$CURRENT_STATUS\"},\"timestamp\":\"$TIMESTAMP\"}" >> "$QUEUE_DIR/pending.jsonl"
-          log_debug "QUEUED SYNC: Event queued for $INC_ID (status.changed -> $CURRENT_STATUS)"
-        else
-          # IMMEDIATE MODE (legacy): direct sync calls
-
-          # Map raw status to canonical event name (consistent with lifecycle-detector)
-          case "$CURRENT_STATUS" in
-            completed|done) BRIDGE_EVENT="increment.done" ;;
-            reopened) BRIDGE_EVENT="increment.reopened" ;;
-            *) BRIDGE_EVENT="increment.$CURRENT_STATUS" ;;
-          esac
-
-          BRIDGE_HANDLER="$HOOK_DIR/handlers/project-bridge-handler.sh"
-          if [[ -f "$BRIDGE_HANDLER" ]]; then
-            # Run synchronously but with timeout to not block too long
-            (
-              if command -v gtimeout >/dev/null 2>&1; then
-                gtimeout 15 bash "$BRIDGE_HANDLER" "$BRIDGE_EVENT" "$INC_ID" 2>/dev/null || true
-              elif command -v timeout >/dev/null 2>&1; then
-                timeout 15 bash "$BRIDGE_HANDLER" "$BRIDGE_EVENT" "$INC_ID" 2>/dev/null || true
-              else
-                bash "$BRIDGE_HANDLER" "$BRIDGE_EVENT" "$INC_ID" 2>/dev/null || true
-              fi
-            )
-            log_debug "IMMEDIATE SYNC completed for $INC_ID"
-          fi
-
-          # ========================================================================
-          # EXPLICIT CLOSURE (v1.0.257+): Close external issues on completion
-          # ========================================================================
-          # Only on completed/done - triggers provider-agnostic closure for ALL
-          # user stories, ensuring external issues are closed even if AC sync
-          # missed them. NOT called on reopened or on every AC change.
-          if [[ "$CURRENT_STATUS" == "completed" ]] || [[ "$CURRENT_STATUS" == "done" ]]; then
-            AC_CLOSE_DISPATCHER="${HOOK_DIR}/handlers/ac-sync-dispatcher.sh"
-            if [[ -f "$AC_CLOSE_DISPATCHER" ]]; then
-              log_debug "EXPLICIT CLOSURE: Triggering provider-agnostic closure for $INC_ID"
-              SPECWEAVE_CLOSE_ALL=1 safe_run_background "$AC_CLOSE_DISPATCHER" "ac-close" "$INC_ID"
-            fi
-          fi
-        fi
-      fi
-    fi
-    ;;
-
-  */.specweave/increments/*/tasks.md|*/.specweave/increments/*/spec.md)
-    log_debug "Tasks/spec change detected"
-
-    # ========================================================================
-    # TASK-AC SYNC (v0.35.2+): Sync task completion to spec.md ACs
-    # ========================================================================
-    # When tasks.md is edited, sync completed task ACs to spec.md
-    # Runs in BACKGROUND (non-blocking) — FILE_PATH passed as $1 argument
-    if [[ "$FILE_PATH" == *tasks.md ]]; then
-      SYNC_SCRIPT="$HOOK_DIR/guards/task-ac-sync-guard.sh"
-      if [[ -f "$SYNC_SCRIPT" ]]; then
-        log_debug "Running task-ac-sync guard (background)"
-        safe_run_background "$SYNC_SCRIPT" "task-ac-sync" "$FILE_PATH"
-      fi
-
-      # ========================================================================
-      # PROVIDER-AGNOSTIC AC SYNC (v1.0.255+): Sync progress to all providers
-      # ========================================================================
-      AC_SYNC_DISPATCHER="${HOOK_DIR}/handlers/ac-sync-dispatcher.sh"
-      if [[ -f "$AC_SYNC_DISPATCHER" ]]; then
-        safe_run_background "$AC_SYNC_DISPATCHER" "ac-sync" "$INC_ID"
-      fi
-
-      # ========================================================================
-      # TDD ENFORCEMENT (v1.0.160+): Enforce TDD discipline
-      # ========================================================================
-      # When tasks.md is edited in TDD mode, check for violations
-      # v1.0.160: In STRICT mode, runs synchronously and shows blocking warning
-      TDD_GUARD="$HOOK_DIR/guards/tdd-enforcement-guard.sh"
-      if [[ -f "$TDD_GUARD" ]]; then
-        # Check if strict TDD enforcement is enabled
-        TDD_STRICT=false
-        CONFIG_FILE="$PROJECT_ROOT/.specweave/config.json"
-        if [[ -f "$CONFIG_FILE" ]] && command -v jq >/dev/null 2>&1; then
-          TDD_ENFORCEMENT=$(jq -r '.testing.tddEnforcement // "warn"' "$CONFIG_FILE" 2>/dev/null)
-          [[ "$TDD_ENFORCEMENT" == "strict" ]] && TDD_STRICT=true
-        fi
-
-        if [[ "$TDD_STRICT" == "true" ]]; then
-          log_debug "Running TDD enforcement guard (STRICT - synchronous)"
-          # Run synchronously and capture output for strict mode
-          TDD_OUTPUT=$(bash "$TDD_GUARD" "$PROJECT_ROOT" "$FILE_PATH" "Edit" 2>&1)
-          TDD_EXIT=$?
-          if [[ $TDD_EXIT -ne 0 ]]; then
-            # Show blocking warning to user
-            echo ""
-            echo "  ⚠️  TDD STRICT MODE VIOLATION DETECTED"
-            echo "$TDD_OUTPUT" | head -20
-            echo ""
-            log_debug "TDD violation detected (exit code: $TDD_EXIT)"
-          fi
-        else
-          log_debug "Running TDD enforcement guard (warn mode - background)"
-          safe_run_background "$TDD_GUARD" "tdd-enforcement" "$PROJECT_ROOT" "$FILE_PATH" "Edit"
-        fi
-      fi
-
-      # Play completion sound if task was marked complete (v1.0.77+)
-      play_task_completion_sound "$FILE_PATH"
-    fi
-
-    # ========================================================================
-    # UNIVERSAL AUTO-CREATE (v1.0.256+): Create items in ALL enabled providers
-    # ========================================================================
-    # When spec.md is created/updated AND has user stories, auto-create
-    # items in GitHub/JIRA/ADO if autoSync or auto_create is enabled.
-    if [[ "$FILE_PATH" == *spec.md ]]; then
-      UNIVERSAL_AUTO_CREATE="${HOOK_DIR}/handlers/universal-auto-create-dispatcher.sh"
-      if [[ -f "$UNIVERSAL_AUTO_CREATE" ]]; then
-        safe_run_background "$UNIVERSAL_AUTO_CREATE" "universal-auto-create" "$INC_ID"
-      fi
-    fi
-
-    # Tasks or spec changed -> check for US completion (background)
-    safe_run_background "$DETECTOR_DIR/us-completion-detector.sh" "us-completion-detector" "$INC_ID"
-
-    # Queue events for backward compatibility (background)
-    if [[ "$FILE_PATH" == *tasks.md ]]; then
-      safe_run_background "$HOOK_DIR/queue/enqueue.sh" "enqueue-task" "task.updated" "$INC_ID"
-      safe_run_background "$SCRIPTS_DIR/update-dashboard-cache.sh" "dashboard-cache" "$INC_ID" "tasks"
-    else
-      safe_run_background "$HOOK_DIR/queue/enqueue.sh" "enqueue-spec" "spec.updated" "$INC_ID"
-      safe_run_background "$SCRIPTS_DIR/update-dashboard-cache.sh" "dashboard-cache" "$INC_ID" "spec"
-    fi
-    ;;
-
-  */.specweave/increments/*/plan.md)
-    log_debug "Plan change detected"
-    # Queue plan update event (background)
-    safe_run_background "$HOOK_DIR/queue/enqueue.sh" "enqueue-plan" "plan.updated" "$INC_ID"
-    ;;
-
-  *)
-    # Not a specweave increment file, ignore
-    exit 0
-    ;;
-esac
-
-# ============================================================================
-# NO BACKGROUND PROCESSOR (v1.0.148)
-# ============================================================================
-# Events are now batched and processed by stop-sync.sh at session end.
-# Critical events (increment.done/reopened) sync immediately above.
-# This eliminates the need for a background processor daemon.
-
-log_debug "Dispatcher completed successfully"
-exit 0

package/plugins/specweave/hooks/v2/dispatchers/pre-tool-use.sh

@@ -1,104 +0,0 @@
-#!/bin/bash
-# pre-tool-use.sh - Dispatcher for PreToolUse guards
-#
-# Routes to appropriate guards based on tool type:
-# - Write: spec-template-enforcement-guard for spec.md
-# - Edit: status-completion-guard for metadata.json protection
-#
-# Returns: {"decision":"allow"} or {"decision":"block","reason":"..."}
-#
-# @since 1.0.167
-# @updated 1.0.196 - Added status-completion-guard for Edit operations
-# @updated 1.0.352 - Added interview-enforcement-guard for agent-spawned spec.md writes
-
-set +e  # CRITICAL: Never exit on error - matches all other hook scripts
-
-# Read input once and store
-INPUT=$(cat)
-
-# Skip if hooks disabled
-[[ "${SPECWEAVE_DISABLE_HOOKS:-0}" == "1" ]] && echo '{"decision":"allow"}' && exit 0
-
-# Detect project root via walk-up (cwd may not be root)
-_DIR="$PWD"
-_LIMIT=0
-while [[ "$_DIR" != "/" ]] && [[ ! -f "$_DIR/.specweave/config.json" ]] && [[ $_LIMIT -lt 50 ]]; do
-  _DIR=$(dirname "$_DIR")
-  _LIMIT=$((_LIMIT + 1))
-done
-[[ ! -f "$_DIR/.specweave/config.json" ]] && echo '{"decision":"allow"}' && exit 0
-
-# Fast file_path check: skip non-increment files before jq (< 5ms)
-if ! echo "$INPUT" | grep -q '"file_path".*\.specweave/increments/'; then
-  echo '{"decision":"allow"}'
-  exit 0
-fi
-
-# Get plugin root for guard paths
-PLUGIN_ROOT="${CLAUDE_PLUGIN_ROOT:-$(dirname "$(dirname "$(dirname "$0")")")}"
-GUARDS_DIR="$PLUGIN_ROOT/hooks/v2/guards"
-
-# Extract tool info
-TOOL_NAME=$(echo "$INPUT" | jq -r '.tool_name // .toolName // ""')
-
-# ============================================================================
-# Edit Tool Guards
-# ============================================================================
-
-if [[ "$TOOL_NAME" == "Edit" ]]; then
-  # Status Completion Guard - Prevents direct status changes to "completed"
-  # RULE: Use /sw:done or /sw:auto instead of direct metadata.json edits
-  STATUS_GUARD="$GUARDS_DIR/status-completion-guard.sh"
-  if [[ -x "$STATUS_GUARD" ]]; then
-    STATUS_RESULT=$(echo "$INPUT" | "$STATUS_GUARD" 2>/dev/null || echo '{"decision":"allow"}')
-    STATUS_DECISION=$(echo "$STATUS_RESULT" | jq -r '.decision // "allow"')
-
-    if [[ "$STATUS_DECISION" == "block" ]]; then
-      echo "$STATUS_RESULT"
-      exit 0
-    fi
-  fi
-
-  echo '{"decision":"allow"}'
-  exit 0
-fi
-
-# ============================================================================
-# Write Tool Guards
-# ============================================================================
-
-if [[ "$TOOL_NAME" == "Write" ]]; then
-  # Spec Template Enforcement Guard
-  # Enforces template-first workflow for spec.md (skill usage)
-  SPEC_GUARD="$GUARDS_DIR/spec-template-enforcement-guard.sh"
-  if [[ -x "$SPEC_GUARD" ]]; then
-    SPEC_RESULT=$(echo "$INPUT" | "$SPEC_GUARD" 2>/dev/null || echo '{"decision":"allow"}')
-    SPEC_DECISION=$(echo "$SPEC_RESULT" | jq -r '.decision // "allow"')
-
-    if [[ "$SPEC_DECISION" == "block" ]]; then
-      echo "$SPEC_RESULT"
-      exit 0
-    fi
-  fi
-
-  # Interview Enforcement Guard
-  # Blocks spec.md writes until deep interview is complete (when strict mode enabled)
-  # Needed here because agent-spawned writes don't inherit skill-level hooks
-  INTERVIEW_GUARD="$GUARDS_DIR/interview-enforcement-guard.sh"
-  if [[ -x "$INTERVIEW_GUARD" ]]; then
-    INTERVIEW_RESULT=$(echo "$INPUT" | "$INTERVIEW_GUARD" 2>/dev/null || echo '{"decision":"allow"}')
-    INTERVIEW_DECISION=$(echo "$INTERVIEW_RESULT" | jq -r '.decision // "allow"')
-
-    if [[ "$INTERVIEW_DECISION" == "block" ]]; then
-      echo "$INTERVIEW_RESULT"
-      exit 0
-    fi
-  fi
-
-  echo '{"decision":"allow"}'
-  exit 0
-fi
-
-# Allow all other tools
-echo '{"decision":"allow"}'
-exit 0