voidmachine 0.0.0 → 4.0.0

package/core-assets/hooks/activation-meter.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# Non-blocking adapter to the generated, runtime-agnostic Node event writer.
+set -uo pipefail
+
+ROOT="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2>/dev/null || pwd)}"
+RUNNER="${BASH_SOURCE[0]%/*}/_void-hook.mjs"
+
+if command -v node >/dev/null 2>&1 && [[ -f "$RUNNER" ]]; then
+  VOID_PROJECT_ROOT="$ROOT" \
+    node "$RUNNER" activation "${VOID_AGENT_RUNTIME:-unknown}" 2>/dev/null || true
+fi
+
+exit 0

package/core-assets/hooks/anti-ai-slop-grep.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+# anti-ai-slop-grep — pre-commit hook
+#
+# Warns on banned copy patterns that signal "vibe coded" AI output.
+# Composed with the `frontend-design` skill. WARN ONLY — false positives
+# expected, writer is final.
+#
+# Allowlist:
+#   - Lines tagged `// allow-slop: <reason>` (rare, brand-justified)
+#
+# Exit codes: 0 allow, 2 warn.
+
+set -euo pipefail
+
+STAGED=$(git diff --cached --name-only --diff-filter=ACMR | grep -E '\.(tsx|jsx|ts|md|mdx)$' || true)
+[[ -z "$STAGED" ]] && exit 0
+
+WARNINGS=""
+for FILE in $STAGED; do
+  [[ "$FILE" =~ \.(test|spec)\.(ts|tsx|js|jsx)$ ]] && continue
+  [[ "$FILE" =~ /__fixtures__/ ]] && continue
+
+  ADDED=$(git diff --cached -- "$FILE" | grep -E '^\+' | grep -v '^+++' | grep -vE '// *allow-slop:' || true)
+  HITS=$(printf "%s" "$ADDED" | grep -niE \
+    'Build faster.{0,20}(ship smarter|ship faster)|Ship.{0,5}(10|five|three|five).{0,3}x faster|Unlock your potential|Empower your team|Transform your workflow|Get Started Free Forever|Take your.{0,20}to the next level|Supercharge your' \
+    || true)
+  if [[ -n "$HITS" ]]; then
+    WARNINGS="${WARNINGS}\n  $FILE:\n$HITS"
+  fi
+done
+
+if [[ -n "$WARNINGS" ]]; then
+  printf "anti-ai-slop-grep (warn): generic AI copy patterns detected:" >&2
+  printf "%b\n" "$WARNINGS" >&2
+  printf "\nRewrite with specific, brand-aligned copy. See frontend-design skill.\n" >&2
+  printf "If brand justifies the pattern, tag the line '// allow-slop: <reason>'.\n" >&2
+  exit 2
+fi

package/core-assets/hooks/auto-format.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+# Compatibility adapter; native manifests invoke the same Node bundle directly.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  exit 0
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" lifecycle format "${VOID_AGENT_RUNTIME:-unknown}"

package/core-assets/hooks/axe-precommit.sh

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+# axe-precommit — pre-commit hook
+#
+# Runs axe-core static analysis on staged UI changes. Blocks on WCAG AA
+# violations. Composed with the `accessibility` skill.
+#
+# Requires axe-core CLI installed via pack-nextjs devDependencies.
+# Reads the command from .void/config.json .commands.axeStatic
+# (defaults to `npx axe-static --staged --rules wcag2a,wcag2aa`).
+#
+# If axe-core CLI is not available, the hook warns once and continues
+# (does not block) so the harness install is not gated by axe.
+#
+# Exit codes: 0 allow, 1 block (axe-core reported violations).
+
+set -euo pipefail
+
+CONFIG="${VOIDCORP_CONFIG:-.void/config.json}"
+CMD=$(jq -r '.commands.axeStatic // empty' "$CONFIG" 2>/dev/null || true)
+[[ -z "$CMD" ]] && CMD="npx --yes axe-static --staged --rules wcag2a,wcag2aa"
+
+# Bail-out if axe-static is not installed
+if ! command -v npx >/dev/null 2>&1; then
+  printf "axe-precommit (skipped): npx not found.\n" >&2
+  exit 0
+fi
+
+STAGED=$(git diff --cached --name-only --diff-filter=ACMR | grep -E '\.(tsx|jsx)$' | grep -vE '\.(test|spec)\.' || true)
+[[ -z "$STAGED" ]] && exit 0
+
+if ! eval "$CMD" 2>&1; then
+  printf "\naxe-precommit: WCAG AA violations detected. Commit blocked.\n" >&2
+  printf "Fix the accessibility issues above. See accessibility skill.\n" >&2
+  exit 1
+fi

package/core-assets/hooks/block-dangerous-bash.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Compatibility adapter; native manifests invoke the same Node bundle directly.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  printf 'HOOK_RUNNER_FAILED: Node.js is required for enforcement\n' >&2
+  exit 2
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" enforce dangerous-command

package/core-assets/hooks/block-protected-push.sh

@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+# block-protected-push — l hook. Reads the agent's tool-call JSON from stdin and
+# refuses any `git push` whose resolved target is a protected branch (main /
+# master). This is a SECONDARY net, NOT the boundary: the real A1 boundary is
+# server-side branch protection plus the orchestrator owning push + PR (the
+# worker has no `git push` in its allowlist). A string-matching hook is
+# bypassable by an agent with arbitrary code execution (node -e "git push ..."),
+# so it backstops regressions; it does not stand alone. Runtime-agnostic: Claude
+# "Bash" + Codex "shell" (string or argv array).
+#
+# Override (a deliberate, reviewed run that intends to push a protected branch):
+# AUTO_MERGE=1. The orchestrator derives this from --auto-merge, never the
+# ambient env (preflight fails on divergence). Exit codes: 0 allow, 2 block.
+
+set -euo pipefail
+
+INPUT=$(cat)
+# Guard the jq calls: under `set -e`, malformed JSON on stdin would otherwise
+# exit non-0/non-2, which the hook runner treats as an error that lets the call
+# through. Empty TOOL → the case below exits 0 (allow + no-op), a deterministic
+# fail-safe for this secondary net (the real boundary is server-side).
+TOOL=$(printf "%s" "$INPUT" | jq -r '.tool_name // empty' 2>/dev/null || true)
+CMD=$(printf "%s" "$INPUT" | jq -r 'if (.tool_input.command? | type) == "array" then (.tool_input.command | join(" ")) else (.tool_input.command // empty) end' 2>/dev/null || true)
+
+case "$TOOL" in Bash | shell) ;; *) exit 0 ;; esac
+[[ -z "$CMD" ]] && exit 0
+[[ "${AUTO_MERGE:-}" == "1" ]] && exit 0
+printf "%s" "$CMD" | grep -qE '\bgit\b([^&|;]*\s)?push\b' || exit 0
+
+block() {
+  printf "block-protected-push: refusing a push to a protected branch (main/master).\n" >&2
+  printf "Matched: %s\n" "$1" >&2
+  printf "The orchestrator owns protected-branch pushes; AUTO_MERGE=1 to override.\n" >&2
+  exit 2
+}
+
+is_protected() { case "$1" in main | master) return 0 ;; *) return 1 ;; esac; }
+
+# Always-dangerous forms, independent of any refspec: --mirror / --all push every
+# ref (main included); a `-c push.default=` override changes where a bare push
+# lands. None are ever needed here.
+printf "%s" "$CMD" | grep -qE '(^|[[:space:]])--mirror([[:space:]]|$)' && block "git push --mirror"
+printf "%s" "$CMD" | grep -qE '(^|[[:space:]])--all([[:space:]]|$)' && block "git push --all"
+printf "%s" "$CMD" | grep -qE 'push\.default' && block "git -c push.default override"
+
+# Positional args after `push` (the remote, then refspecs), stopping at a shell
+# chain operator so `git push && echo` is still seen as a bare push. Flags are
+# dropped; `-c push.default=` sits before `push` so it is never captured here.
+POSITIONALS=$(printf "%s" "$CMD" | awk '{
+  seen = 0
+  for (i = 1; i <= NF; i++) {
+    if ($i == "push") { seen = 1; continue }
+    if (!seen) continue
+    if ($i == "&&" || $i == "||" || $i == ";" || $i == "|") break
+    if ($i ~ /^-/) continue
+    print $i
+  }
+}')
+
+# Drop the remote (first positional); whatever remains are refspecs / branches.
+REFSPECS=$(printf "%s\n" "$POSITIONALS" | sed '/^$/d' | tail -n +2)
+
+if [[ -n "$REFSPECS" ]]; then
+  # Explicit destination(s): block only if one resolves to a protected branch.
+  while IFS= read -r r; do
+    [[ -z "$r" ]] && continue
+    dst="${r##*:}"            # part after the last colon (delete refspec ":main" → main)
+    dst="${dst#refs/heads/}"  # normalise refs/heads/main → main
+    is_protected "$dst" && block "explicit push to $dst"
+  done <<<"$REFSPECS"
+  exit 0
+fi
+
+# Bare push (no refspec): resolve the current branch + upstream in the cwd (the
+# worker's worktree) and block if either is a protected branch.
+CUR=$(git rev-parse --abbrev-ref HEAD 2>/dev/null || true)
+UP=$(git rev-parse --abbrev-ref '@{u}' 2>/dev/null || true)
+is_protected "$CUR" && block "bare push on $CUR"
+is_protected "${UP##*/}" && block "bare push tracking $UP"
+
+exit 0

package/core-assets/hooks/boundary-direction-check.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Compatibility adapter; native manifests invoke the same Node bundle directly.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  printf 'HOOK_RUNNER_FAILED: Node.js is required for enforcement\n' >&2
+  exit 2
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" enforce boundary-direction

package/core-assets/hooks/control-character-grep.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Compatibility adapter; native manifests invoke the same Node bundle directly.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  printf 'HOOK_RUNNER_FAILED: Node.js is required for enforcement\n' >&2
+  exit 2
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" enforce control-character

package/core-assets/hooks/fowler-refactors.txt

@@ -0,0 +1,71 @@
+# Allowed Fowler refactor names (case-insensitive substring match).
+# Source: Martin Fowler "Refactoring" 2nd ed. 2018, curated subset.
+# Add a new name only with an audit-note update.
+
+# --- basic moves ---
+extract function
+inline function
+extract variable
+inline variable
+rename variable
+rename function
+rename field
+move function
+move field
+move statements into function
+move statements to callers
+slide statements
+
+# --- encapsulation ---
+encapsulate variable
+encapsulate record
+encapsulate collection
+hide delegate
+remove middle man
+
+# --- making conditions explicit ---
+decompose conditional
+consolidate conditional
+replace nested conditional with guard clauses
+replace conditional with polymorphism
+introduce special case
+introduce assertion
+
+# --- removing data smell ---
+replace magic number with symbolic constant
+replace primitive with object
+replace primitive with branded type
+replace type code with subclasses
+
+# --- functional / pipeline ---
+replace loop with pipeline
+combine functions into transform
+split loop
+
+# --- function refinement ---
+change function declaration
+separate query from modifier
+parameterize function
+remove flag argument
+preserve whole object
+replace parameter with query
+replace query with parameter
+remove dead code
+
+# --- larger structural ---
+split phase
+combine functions into class
+extract class
+inline class
+extract superclass
+extract subclass
+pull up method
+pull up field
+push down method
+push down field
+replace subclass with delegate
+replace superclass with delegate
+
+# --- legacy / Feathers ---
+sprout method
+wrap method

package/core-assets/hooks/large-cl-grep.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+# Compatibility adapter; portable policy lives in @voidcorp/hook-runner.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  exit 0
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" lifecycle large-change "${VOID_AGENT_RUNTIME:-unknown}"

package/core-assets/hooks/llm-cost-precommit.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# llm-cost-precommit — pre-commit hook
+#
+# Warns on LLM cost-discipline violations in staged code:
+#   - model: 'opus' without `// using Opus because` comment in nearby line
+#   - missing max_tokens
+#   - missing cache_control on large system arrays (best-effort static check)
+#
+# Composed with the `llm-cost-discipline` skill.
+#
+# Files: TS files importing @anthropic-ai/sdk OR matching .paths.ai
+#
+# Exit codes: 0 allow, 2 warn.
+
+set -euo pipefail
+
+STAGED=$(git diff --cached --name-only --diff-filter=ACMR | grep -E '\.(ts|tsx)$' || true)
+[[ -z "$STAGED" ]] && exit 0
+
+WARNINGS=""
+for FILE in $STAGED; do
+  if ! grep -q 'anthropic-ai/sdk' "$FILE" 2>/dev/null; then continue; fi
+
+  ADDED=$(git diff --cached -- "$FILE" | grep -E '^\+' | grep -v '^+++' || true)
+
+  # Opus without justifying comment
+  OPUS=$(printf "%s" "$ADDED" | grep -nE "model:\s*['\"](claude-)?opus" || true)
+  if [[ -n "$OPUS" ]]; then
+    # check if a `using Opus because` comment appears in the file near the call
+    if ! grep -qE 'using Opus because|// allow-opus' "$FILE" 2>/dev/null; then
+      WARNINGS="${WARNINGS}\n  $FILE [Opus without justifying comment]:\n$OPUS"
+    fi
+  fi
+
+  # Missing max_tokens in messages.create call (best-effort: scan for messages.create blocks lacking max_tokens)
+  if printf "%s" "$ADDED" | grep -qE 'messages\.create\('; then
+    if ! grep -qE 'max_tokens' "$FILE" 2>/dev/null; then
+      WARNINGS="${WARNINGS}\n  $FILE [missing max_tokens in messages.create]"
+    fi
+  fi
+
+  # Missing cache_control on long system prompt (best-effort: scan for system: with a > 100-line string ref)
+  if printf "%s" "$ADDED" | grep -qE 'system:'; then
+    if ! grep -qE 'cache_control|// allow-no-cache' "$FILE" 2>/dev/null; then
+      WARNINGS="${WARNINGS}\n  $FILE [system: present but no cache_control in file — verify >1024-token threshold]"
+    fi
+  fi
+done
+
+if [[ -n "$WARNINGS" ]]; then
+  printf "llm-cost-precommit (warn): cost-discipline checks:" >&2
+  printf "%b\n" "$WARNINGS" >&2
+  printf "\nSee llm-cost-discipline skill. Tag '// allow-opus: <reason>' or '// allow-no-cache: <reason>' for exceptions.\n" >&2
+  exit 2
+fi

package/core-assets/hooks/migration-lint.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+# migration-lint — pre-commit hook
+#
+# Greps staged migration SQL files for banned patterns and warns the
+# author. Composed with the `migrations` skill.
+#
+# Banned patterns:
+#   - NOT NULL direct add: ALTER TABLE ... ADD COLUMN ... NOT NULL
+#   - RENAME COLUMN direct
+#   - Column type change direct: ALTER COLUMN ... TYPE
+#   - DROP COLUMN
+#   - CREATE INDEX without CONCURRENTLY (warned, not blocked — small tables OK)
+#
+# Allowlist:
+#   - Lines tagged `-- migration-allow: <reason>`
+#
+# Path: read from .void/config.json .paths.migrations, defaults to
+# **/{migrations,drizzle/migrations}/**
+#
+# Exit codes: 0 allow, 2 warn.
+
+set -euo pipefail
+
+CONFIG="${VOIDCORP_CONFIG:-.void/config.json}"
+MIG_GLOB=$(jq -r '.paths.migrations // "**/{migrations,drizzle/migrations}/**"' "$CONFIG" 2>/dev/null)
+
+STAGED=$(git diff --cached --name-only --diff-filter=ACMR | grep -E '\.(sql|ts)$' || true)
+[[ -z "$STAGED" ]] && exit 0
+
+WARNINGS=""
+for FILE in $STAGED; do
+  case "$FILE" in $MIG_GLOB) ;; *) continue ;; esac
+  ADDED=$(git diff --cached -- "$FILE" | grep -E '^\+' | grep -v '^+++' | grep -vE '-- *migration-allow:' || true)
+
+  HIT_NN=$(printf "%s" "$ADDED" | grep -niE 'ADD COLUMN[^;]*NOT NULL' || true)
+  HIT_RN=$(printf "%s" "$ADDED" | grep -niE 'RENAME COLUMN' || true)
+  HIT_TY=$(printf "%s" "$ADDED" | grep -niE 'ALTER COLUMN[^;]*TYPE' || true)
+  HIT_DR=$(printf "%s" "$ADDED" | grep -niE 'DROP COLUMN' || true)
+  HIT_CI=$(printf "%s" "$ADDED" | grep -niE 'CREATE INDEX' | grep -v 'CONCURRENTLY' || true)
+
+  for KIND_HIT in "ADD NOT NULL direct" "$HIT_NN" "RENAME COLUMN direct" "$HIT_RN" "ALTER COLUMN TYPE direct" "$HIT_TY" "DROP COLUMN" "$HIT_DR" "CREATE INDEX without CONCURRENTLY" "$HIT_CI"; do
+    :
+  done
+
+  if [[ -n "$HIT_NN" ]]; then WARNINGS="${WARNINGS}\n  $FILE [ADD NOT NULL direct]:\n$HIT_NN"; fi
+  if [[ -n "$HIT_RN" ]]; then WARNINGS="${WARNINGS}\n  $FILE [RENAME COLUMN direct]:\n$HIT_RN"; fi
+  if [[ -n "$HIT_TY" ]]; then WARNINGS="${WARNINGS}\n  $FILE [ALTER COLUMN TYPE direct]:\n$HIT_TY"; fi
+  if [[ -n "$HIT_DR" ]]; then WARNINGS="${WARNINGS}\n  $FILE [DROP COLUMN]:\n$HIT_DR"; fi
+  if [[ -n "$HIT_CI" ]]; then WARNINGS="${WARNINGS}\n  $FILE [CREATE INDEX without CONCURRENTLY]:\n$HIT_CI"; fi
+done
+
+if [[ -n "$WARNINGS" ]]; then
+  printf "migration-lint (warn): risky DDL patterns detected:" >&2
+  printf "%b\n" "$WARNINGS" >&2
+  printf "\nApply two-phase change pattern. See migrations skill.\n" >&2
+  printf "Tag '-- migration-allow: <reason>' for surgical exceptions (small tables, etc.).\n" >&2
+  exit 2
+fi

package/core-assets/hooks/migration-pr-template.sh

@@ -0,0 +1,55 @@
+#!/usr/bin/env bash
+# migration-pr-template — pre-push hook
+#
+# Warns if a PR touching migrations lacks the required body sections.
+# Composed with the `migrations` skill.
+#
+# Required sections (case-insensitive substring match):
+#   - Table affected
+#   - Approximate row count
+#   - Locking impact
+#   - Backfill strategy
+#   - Rollback plan
+#   - Tested on dev branch
+#
+# Exit codes: 0 allow, 2 warn.
+
+set -euo pipefail
+
+CONFIG="${VOIDCORP_CONFIG:-.void/config.json}"
+MIG_GLOB=$(jq -r '.paths.migrations // "**/{migrations,drizzle/migrations}/**"' "$CONFIG" 2>/dev/null)
+
+# Detect if migrations were touched in the branch
+BASE=$(gh pr view --json baseRefName --jq .baseRefName 2>/dev/null || echo "")
+[[ -z "$BASE" ]] && exit 0
+
+BASE_SHA=$(git merge-base "HEAD" "origin/$BASE" 2>/dev/null || echo "")
+[[ -z "$BASE_SHA" ]] && exit 0
+
+TOUCHED_MIGRATIONS=""
+for FILE in $(git diff --name-only "$BASE_SHA"..HEAD); do
+  case "$FILE" in $MIG_GLOB) TOUCHED_MIGRATIONS="$FILE"; break ;; esac
+done
+
+[[ -z "$TOUCHED_MIGRATIONS" ]] && exit 0
+
+# Inspect PR body
+BODY=$(gh pr view --json body --jq .body 2>/dev/null || echo "")
+if [[ -z "$BODY" ]]; then
+  printf "migration-pr-template: no open PR found, skipping.\n" >&2
+  exit 0
+fi
+
+MISSING=()
+for SECTION in "Table affected" "row count" "Locking impact" "Backfill" "Rollback" "Tested on dev"; do
+  if ! printf "%s" "$BODY" | grep -qi "$SECTION"; then
+    MISSING+=("$SECTION")
+  fi
+done
+
+if [[ ${#MISSING[@]} -gt 0 ]]; then
+  printf "migration-pr-template (warn): PR touches migrations but lacks required sections:\n" >&2
+  for s in "${MISSING[@]}"; do printf "  - %s\n" "$s" >&2; done
+  printf "\nSee void-migrations skill for the template.\n" >&2
+  exit 2
+fi

package/core-assets/hooks/no-ai-design-slop.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Compatibility adapter; native manifests invoke the same Node bundle directly.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  printf 'HOOK_RUNNER_FAILED: Node.js is required for enforcement\n' >&2
+  exit 2
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" enforce design-slop

package/core-assets/hooks/no-any-grep.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Compatibility adapter; native manifests invoke the same Node bundle directly.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  printf 'HOOK_RUNNER_FAILED: Node.js is required for enforcement\n' >&2
+  exit 2
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" enforce no-any

package/core-assets/hooks/no-as-cast-grep.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Compatibility adapter; native manifests invoke the same Node bundle directly.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  printf 'HOOK_RUNNER_FAILED: Node.js is required for enforcement\n' >&2
+  exit 2
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" enforce no-as-cast

package/core-assets/hooks/no-console-log-grep.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Compatibility adapter; native manifests invoke the same Node bundle directly.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  printf 'HOOK_RUNNER_FAILED: Node.js is required for enforcement\n' >&2
+  exit 2
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" enforce no-console

package/core-assets/hooks/no-null-grep.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Compatibility adapter; native manifests invoke the same Node bundle directly.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  printf 'HOOK_RUNNER_FAILED: Node.js is required for enforcement\n' >&2
+  exit 2
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" enforce no-null

package/core-assets/hooks/no-only-no-skip.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Compatibility adapter; native manifests invoke the same Node bundle directly.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  printf 'HOOK_RUNNER_FAILED: Node.js is required for enforcement\n' >&2
+  exit 2
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" enforce no-focused-test

package/core-assets/hooks/outcome-meter.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+# Non-blocking adapter for PostToolUse and Stop canonical events.
+set -uo pipefail
+
+ROOT="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2>/dev/null || pwd)}"
+RUNNER="${BASH_SOURCE[0]%/*}/_void-hook.mjs"
+
+if command -v node >/dev/null 2>&1 && [[ -f "$RUNNER" ]]; then
+  VOID_PROJECT_ROOT="$ROOT" \
+    node "$RUNNER" outcome "${VOID_AGENT_RUNTIME:-unknown}" 2>/dev/null || true
+fi
+
+exit 0

package/core-assets/hooks/pre-PR-review-evidence.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+# pre-PR-review-evidence — pre-push hook
+#
+# Warns (does NOT block) if the PR body lacks a Review Evidence block, in
+# strict mode. Reads the PR body via `gh pr view --json body` for the
+# current branch.
+#
+# Composed with the `code-review` skill.
+#
+# Strict mode trigger: pushing to a branch tracked as `main` / `develop` /
+# `release/*`, OR `.void/config.json` modes.codeReview = strict.
+#
+# Exit codes: 0 allow, 2 warn.
+
+set -euo pipefail
+
+CONFIG="${VOIDCORP_CONFIG:-.void/config.json}"
+MODE=$(jq -r '.modes.codeReview // "auto"' "$CONFIG" 2>/dev/null || echo "auto")
+BRANCH=$(git symbolic-ref --short HEAD 2>/dev/null || echo "")
+
+# Only warn in strict (auto mode warns only on protected base branches)
+case "$MODE" in
+  strict) ;;
+  auto)
+    BASE=$(gh pr view --json baseRefName --jq .baseRefName 2>/dev/null || echo "")
+    case "$BASE" in main|develop|release/*) ;; *) exit 0 ;; esac
+    ;;
+  *) exit 0 ;;
+esac
+
+# Need an open PR to inspect
+BODY=$(gh pr view --json body --jq .body 2>/dev/null || true)
+if [[ -z "$BODY" ]]; then
+  printf "pre-PR-review-evidence: no open PR for branch '%s', skipping.\n" "$BRANCH" >&2
+  exit 0
+fi
+
+if ! printf "%s" "$BODY" | grep -qiE '##\s*Review\s*Evidence'; then
+  cat >&2 <<EOF
+pre-PR-review-evidence (warn): PR body lacks a '## Review Evidence' block.
+
+In strict mode, the PR body must include the review evidence (dimensions
+covered, blockers, nits, composed agents). See the 'void-code-review' skill for
+the template.
+EOF
+  exit 2
+fi

package/core-assets/hooks/protect-sensitive-files.sh

@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+# Compatibility adapter; native manifests invoke the same Node bundle directly.
+set -uo pipefail
+HOOK_DIR="${BASH_SOURCE[0]%/*}"
+NODE_BIN=$(command -v node 2>/dev/null || true)
+if [[ -z "$NODE_BIN" ]]; then
+  printf 'HOOK_RUNNER_FAILED: Node.js is required for enforcement\n' >&2
+  exit 2
+fi
+exec "$NODE_BIN" "$HOOK_DIR/_void-hook.mjs" enforce protected-file

package/core-assets/hooks/refactor-named-grep.sh

@@ -0,0 +1,49 @@
+#!/usr/bin/env bash
+# refactor-named-grep — commit-msg hook
+#
+# Warns (does NOT block) on `refactor:` commit subjects that do not name a
+# recognized Fowler refactor from the allowlist (../fowler-refactors.txt).
+# Encourages clear vocabulary in git log.
+#
+# Composed with the `refactor` skill.
+#
+# Inputs: $1 = path to the commit message file.
+# Exit codes: 0 allow, 2 warn.
+
+set -euo pipefail
+
+MSG_FILE="${1:-}"
+[[ -z "$MSG_FILE" || ! -f "$MSG_FILE" ]] && exit 0
+
+SUBJECT=$(head -1 "$MSG_FILE")
+echo "$SUBJECT" | grep -qE '^refactor[(:]' || exit 0
+
+# Locate the allowlist
+HOOK_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ALLOWLIST="$HOOK_DIR/fowler-refactors.txt"
+[[ ! -f "$ALLOWLIST" ]] && exit 0   # no allowlist available, skip silently
+
+# Lowercase the subject for matching
+SUBJECT_LOWER=$(printf "%s" "$SUBJECT" | tr '[:upper:]' '[:lower:]')
+
+MATCHED=0
+while IFS= read -r NAME; do
+  [[ -z "$NAME" || "$NAME" =~ ^# ]] && continue
+  NAME_LOWER=$(printf "%s" "$NAME" | tr '[:upper:]' '[:lower:]')
+  if printf "%s" "$SUBJECT_LOWER" | grep -qF "$NAME_LOWER"; then
+    MATCHED=1
+    break
+  fi
+done < "$ALLOWLIST"
+
+if [[ "$MATCHED" -eq 0 ]]; then
+  cat >&2 <<EOF
+refactor-named-grep (warn): 'refactor:' subject does not name a recognized Fowler refactor.
+
+Examples: "refactor: extract validateEmail helper", "refactor: rename userQty to userCount",
+"refactor: replace magic number 0.21 with TAX_RATE".
+
+See ${ALLOWLIST} for the allowed names.
+EOF
+  exit 2
+fi