wogiflow 1.5.2 → 1.5.3

package/lib/installer.js

@@ -583,6 +583,24 @@ function createCLIConfig(projectRoot, cliKey, config) {
 
 You are an AI development assistant using the WogiFlow methodology v1.0.
 
+---
+
+## Task Gating (MANDATORY — NO EXCEPTIONS)
+
+**STOP. Before doing ANYTHING with a user message, you MUST route it through a \`/wogi-*\` command.**
+
+**EVERY user message** MUST be routed through either:
+1. **A matching \`/wogi-*\` command** (e.g., "code review" → \`/wogi-review\`, "show tasks" → \`/wogi-ready\`)
+2. **\`/wogi-start\`** for everything else (the universal fallback router)
+
+This applies to ALL message types — implementation requests, questions, exploration, research, operational requests. No exceptions.
+
+**You do NOT handle requests directly.** Always invoke a \`/wogi-*\` command first. If you find yourself thinking "this is just a question, I can handle it directly" — that thought is the exact bypass this rule exists to prevent.
+
+**Do NOT use EnterPlanMode directly.** Route through \`/wogi-start\` which will use plan mode internally when appropriate.
+
+---
+
 ## Quick Start
 
 \`\`\`bash
@@ -593,9 +611,12 @@ cat .workflow/state/ready.json # Check tasks
 ## Core Commands
 
 - \`/wogi-ready\` - Show available tasks
-- \`/wogi-start TASK-X\` - Start a task
+- \`/wogi-start TASK-X\` - Start a task (or \`/wogi-start "description"\` to route any request)
+- \`/wogi-story "title"\` - Create story with acceptance criteria
 - \`/wogi-status\` - Project overview
 - \`/wogi-health\` - Check workflow health
+- \`/wogi-review\` - Code review
+- \`/wogi-bug "description"\` - Report a bug
 
 Run \`flow bridge sync\` to regenerate this file with full template.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wogiflow",
-  "version": "1.5.2",
+  "version": "1.5.3",
   "description": "AI-powered development workflow management system with multi-model support",
   "main": "lib/index.js",
   "bin": {

package/scripts/flow-health.js

@@ -441,6 +441,117 @@ function main() {
     console.log(`  ${color('yellow', '○')} .claude/settings.local.json not found (run 'flow bridge sync')`);
   }
 
+  // Check hook integrity
+  console.log('');
+  printSection('Checking hook integrity...');
+
+  const settingsLocalPath = path.join(PROJECT_ROOT, '.claude', 'settings.local.json');
+  if (fileExists(settingsLocalPath)) {
+    try {
+      const settings = safeJsonParse(settingsLocalPath, {});
+      const hooks = settings.hooks || {};
+
+      // Check PreToolUse matcher includes EnterPlanMode
+      const preToolHooks = hooks.PreToolUse || [];
+      let hasEnterPlanMode = false;
+      let hasCorrectMatcher = false;
+      let hookScriptsMissing = [];
+
+      for (const hookEntry of preToolHooks) {
+        const matcher = hookEntry.matcher || '';
+        if (matcher.includes('EnterPlanMode')) {
+          hasEnterPlanMode = true;
+        }
+        if (matcher.includes('Edit') && matcher.includes('Write') && matcher.includes('Bash') && matcher.includes('Skill')) {
+          hasCorrectMatcher = true;
+        }
+
+        // Check hook script files exist
+        for (const h of (hookEntry.hooks || [])) {
+          if (h.command) {
+            // Extract script path from command like: node "/path/to/script.js"
+            const scriptMatch = h.command.match(/node\s+"([^"]+)"/);
+            if (scriptMatch) {
+              const scriptPath = scriptMatch[1];
+              if (!fileExists(scriptPath)) {
+                hookScriptsMissing.push(scriptPath);
+              }
+            }
+          }
+        }
+      }
+
+      // Also check other hook types for missing scripts
+      for (const hookType of ['PostToolUse', 'UserPromptSubmit', 'SessionStart']) {
+        for (const hookEntry of (hooks[hookType] || [])) {
+          for (const h of (hookEntry.hooks || [])) {
+            if (h.command) {
+              const scriptMatch = h.command.match(/node\s+"([^"]+)"/);
+              if (scriptMatch && !fileExists(scriptMatch[1])) {
+                hookScriptsMissing.push(scriptMatch[1]);
+              }
+            }
+          }
+        }
+      }
+
+      if (hasEnterPlanMode) {
+        console.log(`  ${color('green', '✓')} PreToolUse matcher includes EnterPlanMode`);
+      } else {
+        console.log(`  ${color('red', '✗')} PreToolUse matcher MISSING EnterPlanMode — Claude can bypass /wogi-start`);
+        console.log(`    ${color('dim', "→ Run 'flow bridge sync' to regenerate hooks")}`);
+        issues++;
+      }
+
+      if (hasCorrectMatcher) {
+        console.log(`  ${color('green', '✓')} PreToolUse matcher has core tools (Edit|Write|Bash|Skill)`);
+      } else if (preToolHooks.length > 0) {
+        console.log(`  ${color('yellow', '⚠')} PreToolUse matcher may be outdated — missing core tools`);
+        console.log(`    ${color('dim', "→ Run 'flow bridge sync' to regenerate hooks")}`);
+        warnings++;
+      }
+
+      if (hookScriptsMissing.length > 0) {
+        console.log(`  ${color('red', '✗')} ${hookScriptsMissing.length} hook script(s) MISSING:`);
+        for (const missing of hookScriptsMissing.slice(0, 5)) {
+          console.log(`    - ${missing}`);
+        }
+        console.log(`    ${color('dim', "→ Run 'npm install wogiflow' or 'flow init' to restore scripts")}`);
+        issues++;
+      } else if (preToolHooks.length > 0) {
+        console.log(`  ${color('green', '✓')} All hook scripts exist`);
+      }
+    } catch (err) {
+      console.log(`  ${color('yellow', '⚠')} Could not parse settings.local.json for hooks: ${err.message}`);
+      warnings++;
+    }
+  } else {
+    console.log(`  ${color('yellow', '⚠')} .claude/settings.local.json not found — hooks not configured`);
+    console.log(`    ${color('dim', "→ Run 'flow bridge sync' to generate hooks")}`);
+    warnings++;
+  }
+
+  // Check CLAUDE.md has routing instructions (not just product description)
+  if (fileExists(claudeMdPath)) {
+    try {
+      const claudeContent = fs.readFileSync(claudeMdPath, 'utf-8');
+      const hasRouting = claudeContent.includes('wogi-start') && (
+        claudeContent.includes('Task Gating') ||
+        claudeContent.includes('MUST route') ||
+        claudeContent.includes('MANDATORY')
+      );
+      if (hasRouting) {
+        console.log(`  ${color('green', '✓')} CLAUDE.md contains routing instructions`);
+      } else {
+        console.log(`  ${color('red', '✗')} CLAUDE.md has NO routing instructions — Claude will bypass /wogi-start`);
+        console.log(`    ${color('dim', "→ Run 'flow bridge sync' to regenerate CLAUDE.md from template")}`);
+        issues++;
+      }
+    } catch (err) {
+      // Already warned about CLAUDE.md read failure above
+    }
+  }
+
   // Check git status
   console.log('');
   printSection('Checking git status...');

package/scripts/hooks/adapters/claude-code.js

@@ -513,7 +513,7 @@ Run: /wogi-start ${coreResult.nextTaskId}`;
     // Task gating for Edit/Write + TodoWrite gating + Skill tracking + Bash strict adherence
     if (rules.taskGating?.enabled !== false || rules.todoWriteGate?.enabled !== false) {
       preToolUseMatchers.push({
-        matcher: 'Edit|Write|TodoWrite|Skill|Bash',
+        matcher: 'Edit|Write|TodoWrite|Skill|Bash|EnterPlanMode',
         hooks: [{
           type: 'command',
           command: `node "${path.join(scriptsDir, 'pre-tool-use.js')}"`,

package/scripts/hooks/core/routing-gate.js

@@ -163,9 +163,11 @@ function isRoutingPending() {
  * @returns {{ allowed: boolean, blocked: boolean, reason: string, message: string|null }}
  */
 function checkRoutingGate(toolName) {
-  // Only gate Bash calls
-  if (toolName !== 'Bash') {
-    return { allowed: true, blocked: false, reason: 'not_bash', message: null };
+  // Gate Bash and EnterPlanMode calls
+  // EnterPlanMode bypasses /wogi-start routing — must be blocked before routing
+  const GATED_TOOLS = new Set(['Bash', 'EnterPlanMode']);
+  if (!GATED_TOOLS.has(toolName)) {
+    return { allowed: true, blocked: false, reason: 'not_gated_tool', message: null };
   }
 
   // Check if routing gate is enabled

package/scripts/hooks/entry/claude-code/pre-tool-use.js

@@ -151,9 +151,9 @@ async function main() {
       }
     }
 
-    // v6.0: Routing gate check (for Bash)
-    // Blocks Bash calls when no /wogi-* command has been invoked first
-    if (toolName === 'Bash') {
+    // v6.0: Routing gate check (for Bash and EnterPlanMode)
+    // Blocks Bash/EnterPlanMode calls when no /wogi-* command has been invoked first
+    if (toolName === 'Bash' || toolName === 'EnterPlanMode') {
       try {
         const routingResult = checkRoutingGate(toolName);
         if (routingResult.blocked) {