wogiflow 1.5.2 → 1.5.4

package/.workflow/templates/claude-md.hbs

@@ -305,6 +305,25 @@ You: [edits header.tsx]  ← Tracked properly
 ```
 
 **When in doubt, use `/wogi-start`.** It will route appropriately.
+
+### When a Tool Call Is Blocked by the Routing Gate
+
+If you attempt to use Bash or EnterPlanMode and receive a "BLOCKED" denial from WogiFlow's routing gate, here is the ONLY correct response:
+
+1. **Invoke `/wogi-start`** immediately with the user's original request:
+   ```
+   Skill(skill="wogi-start", args="<the user's original request>")
+   ```
+2. `/wogi-start` will classify the request and clear the routing gate
+3. After `/wogi-start` routes the request, you can use Bash/EnterPlanMode normally
+
+**NEVER do these when blocked:**
+- Suggest the user run commands manually in their terminal
+- Try alternative tools to work around the block
+- Explain the block to the user and ask them what to do
+- Give up and say "I can't do that"
+
+The routing gate exists because EVERY request must be classified by `/wogi-start` first. The block is not an error — it's a reminder that you skipped a mandatory step. Fix it by invoking `/wogi-start`.
 {{/if}}
 
 ## Session Startup

package/lib/installer.js

@@ -583,6 +583,24 @@ function createCLIConfig(projectRoot, cliKey, config) {
 
 You are an AI development assistant using the WogiFlow methodology v1.0.
 
+---
+
+## Task Gating (MANDATORY — NO EXCEPTIONS)
+
+**STOP. Before doing ANYTHING with a user message, you MUST route it through a \`/wogi-*\` command.**
+
+**EVERY user message** MUST be routed through either:
+1. **A matching \`/wogi-*\` command** (e.g., "code review" → \`/wogi-review\`, "show tasks" → \`/wogi-ready\`)
+2. **\`/wogi-start\`** for everything else (the universal fallback router)
+
+This applies to ALL message types — implementation requests, questions, exploration, research, operational requests. No exceptions.
+
+**You do NOT handle requests directly.** Always invoke a \`/wogi-*\` command first. If you find yourself thinking "this is just a question, I can handle it directly" — that thought is the exact bypass this rule exists to prevent.
+
+**Do NOT use EnterPlanMode directly.** Route through \`/wogi-start\` which will use plan mode internally when appropriate.
+
+---
+
 ## Quick Start
 
 \`\`\`bash
@@ -593,9 +611,12 @@ cat .workflow/state/ready.json # Check tasks
 ## Core Commands
 
 - \`/wogi-ready\` - Show available tasks
-- \`/wogi-start TASK-X\` - Start a task
+- \`/wogi-start TASK-X\` - Start a task (or \`/wogi-start "description"\` to route any request)
+- \`/wogi-story "title"\` - Create story with acceptance criteria
 - \`/wogi-status\` - Project overview
 - \`/wogi-health\` - Check workflow health
+- \`/wogi-review\` - Code review
+- \`/wogi-bug "description"\` - Report a bug
 
 Run \`flow bridge sync\` to regenerate this file with full template.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wogiflow",
-  "version": "1.5.2",
+  "version": "1.5.4",
   "description": "AI-powered development workflow management system with multi-model support",
   "main": "lib/index.js",
   "bin": {

package/scripts/flow-health.js

@@ -441,6 +441,117 @@ function main() {
     console.log(`  ${color('yellow', '○')} .claude/settings.local.json not found (run 'flow bridge sync')`);
   }
 
+  // Check hook integrity
+  console.log('');
+  printSection('Checking hook integrity...');
+
+  const settingsLocalPath = path.join(PROJECT_ROOT, '.claude', 'settings.local.json');
+  if (fileExists(settingsLocalPath)) {
+    try {
+      const settings = safeJsonParse(settingsLocalPath, {});
+      const hooks = settings.hooks || {};
+
+      // Check PreToolUse matcher includes EnterPlanMode
+      const preToolHooks = hooks.PreToolUse || [];
+      let hasEnterPlanMode = false;
+      let hasCorrectMatcher = false;
+      let hookScriptsMissing = [];
+
+      for (const hookEntry of preToolHooks) {
+        const matcher = hookEntry.matcher || '';
+        if (matcher.includes('EnterPlanMode')) {
+          hasEnterPlanMode = true;
+        }
+        if (matcher.includes('Edit') && matcher.includes('Write') && matcher.includes('Bash') && matcher.includes('Skill')) {
+          hasCorrectMatcher = true;
+        }
+
+        // Check hook script files exist
+        for (const h of (hookEntry.hooks || [])) {
+          if (h.command) {
+            // Extract script path from command like: node "/path/to/script.js"
+            const scriptMatch = h.command.match(/node\s+"([^"]+)"/);
+            if (scriptMatch) {
+              const scriptPath = scriptMatch[1];
+              if (!fileExists(scriptPath)) {
+                hookScriptsMissing.push(scriptPath);
+              }
+            }
+          }
+        }
+      }
+
+      // Also check other hook types for missing scripts
+      for (const hookType of ['PostToolUse', 'UserPromptSubmit', 'SessionStart']) {
+        for (const hookEntry of (hooks[hookType] || [])) {
+          for (const h of (hookEntry.hooks || [])) {
+            if (h.command) {
+              const scriptMatch = h.command.match(/node\s+"([^"]+)"/);
+              if (scriptMatch && !fileExists(scriptMatch[1])) {
+                hookScriptsMissing.push(scriptMatch[1]);
+              }
+            }
+          }
+        }
+      }
+
+      if (hasEnterPlanMode) {
+        console.log(`  ${color('green', '✓')} PreToolUse matcher includes EnterPlanMode`);
+      } else {
+        console.log(`  ${color('red', '✗')} PreToolUse matcher MISSING EnterPlanMode — Claude can bypass /wogi-start`);
+        console.log(`    ${color('dim', "→ Run 'flow bridge sync' to regenerate hooks")}`);
+        issues++;
+      }
+
+      if (hasCorrectMatcher) {
+        console.log(`  ${color('green', '✓')} PreToolUse matcher has core tools (Edit|Write|Bash|Skill)`);
+      } else if (preToolHooks.length > 0) {
+        console.log(`  ${color('yellow', '⚠')} PreToolUse matcher may be outdated — missing core tools`);
+        console.log(`    ${color('dim', "→ Run 'flow bridge sync' to regenerate hooks")}`);
+        warnings++;
+      }
+
+      if (hookScriptsMissing.length > 0) {
+        console.log(`  ${color('red', '✗')} ${hookScriptsMissing.length} hook script(s) MISSING:`);
+        for (const missing of hookScriptsMissing.slice(0, 5)) {
+          console.log(`    - ${missing}`);
+        }
+        console.log(`    ${color('dim', "→ Run 'npm install wogiflow' or 'flow init' to restore scripts")}`);
+        issues++;
+      } else if (preToolHooks.length > 0) {
+        console.log(`  ${color('green', '✓')} All hook scripts exist`);
+      }
+    } catch (err) {
+      console.log(`  ${color('yellow', '⚠')} Could not parse settings.local.json for hooks: ${err.message}`);
+      warnings++;
+    }
+  } else {
+    console.log(`  ${color('yellow', '⚠')} .claude/settings.local.json not found — hooks not configured`);
+    console.log(`    ${color('dim', "→ Run 'flow bridge sync' to generate hooks")}`);
+    warnings++;
+  }
+
+  // Check CLAUDE.md has routing instructions (not just product description)
+  if (fileExists(claudeMdPath)) {
+    try {
+      const claudeContent = fs.readFileSync(claudeMdPath, 'utf-8');
+      const hasRouting = claudeContent.includes('wogi-start') && (
+        claudeContent.includes('Task Gating') ||
+        claudeContent.includes('MUST route') ||
+        claudeContent.includes('MANDATORY')
+      );
+      if (hasRouting) {
+        console.log(`  ${color('green', '✓')} CLAUDE.md contains routing instructions`);
+      } else {
+        console.log(`  ${color('red', '✗')} CLAUDE.md has NO routing instructions — Claude will bypass /wogi-start`);
+        console.log(`    ${color('dim', "→ Run 'flow bridge sync' to regenerate CLAUDE.md from template")}`);
+        issues++;
+      }
+    } catch (err) {
+      // Already warned about CLAUDE.md read failure above
+    }
+  }
+
   // Check git status
   console.log('');
   printSection('Checking git status...');

package/scripts/hooks/adapters/claude-code.js

@@ -513,7 +513,7 @@ Run: /wogi-start ${coreResult.nextTaskId}`;
     // Task gating for Edit/Write + TodoWrite gating + Skill tracking + Bash strict adherence
     if (rules.taskGating?.enabled !== false || rules.todoWriteGate?.enabled !== false) {
       preToolUseMatchers.push({
-        matcher: 'Edit|Write|TodoWrite|Skill|Bash',
+        matcher: 'Edit|Write|TodoWrite|Skill|Bash|EnterPlanMode',
         hooks: [{
           type: 'command',
           command: `node "${path.join(scriptsDir, 'pre-tool-use.js')}"`,

package/scripts/hooks/core/routing-gate.js

@@ -163,9 +163,11 @@ function isRoutingPending() {
  * @returns {{ allowed: boolean, blocked: boolean, reason: string, message: string|null }}
  */
 function checkRoutingGate(toolName) {
-  // Only gate Bash calls
-  if (toolName !== 'Bash') {
-    return { allowed: true, blocked: false, reason: 'not_bash', message: null };
+  // Gate Bash and EnterPlanMode calls
+  // EnterPlanMode bypasses /wogi-start routing — must be blocked before routing
+  const GATED_TOOLS = new Set(['Bash', 'EnterPlanMode']);
+  if (!GATED_TOOLS.has(toolName)) {
+    return { allowed: true, blocked: false, reason: 'not_gated_tool', message: null };
   }
 
   // Check if routing gate is enabled
@@ -186,11 +188,21 @@ function checkRoutingGate(toolName) {
   }
 
   // Block: routing is pending and no active task
+  // NOTE: This message is shown to the AI as permissionDecisionReason.
+  // It must be prescriptive enough that the AI invokes /wogi-start instead of
+  // trying workarounds or suggesting the user run commands manually.
   return {
     allowed: false,
     blocked: true,
     reason: 'routing_pending',
-    message: 'Route through a /wogi-* command first. Use /wogi-start to route your request.'
+    message: [
+      'BLOCKED: You must route through /wogi-start before using Bash or EnterPlanMode.',
+      'ACTION REQUIRED: Invoke the Skill tool with skill="wogi-start" and pass the user\'s request as args.',
+      'Example: Skill(skill="wogi-start", args="<the user\'s original request>")',
+      '/wogi-start will classify the request (operational, exploration, implementation) and unblock the appropriate tools.',
+      'Do NOT suggest the user run commands manually in their terminal.',
+      'Do NOT try alternative approaches to bypass this gate.'
+    ].join(' ')
   };
 }
 

package/scripts/hooks/entry/claude-code/pre-tool-use.js

@@ -151,9 +151,9 @@ async function main() {
       }
     }
 
-    // v6.0: Routing gate check (for Bash)
-    // Blocks Bash calls when no /wogi-* command has been invoked first
-    if (toolName === 'Bash') {
+    // v6.0: Routing gate check (for Bash and EnterPlanMode)
+    // Blocks Bash/EnterPlanMode calls when no /wogi-* command has been invoked first
+    if (toolName === 'Bash' || toolName === 'EnterPlanMode') {
       try {
         const routingResult = checkRoutingGate(toolName);
         if (routingResult.blocked) {

package/scripts/hooks/entry/claude-code/user-prompt-submit.js

@@ -119,13 +119,22 @@ async function main() {
     // v6.0: Set routing-pending flag for routing gate enforcement
     // This blocks Bash calls until a /wogi-* skill is invoked
     // Skipped when an active task exists (follow-ups during tracked work are allowed)
-    try {
-      setRoutingPending();
-    } catch (err) {
-      // Non-blocking - don't fail the hook if routing gate fails (fail-open)
-      if (process.env.DEBUG) {
-        console.error(`[Hook] Routing gate set failed: ${err.message}`);
+    // v6.1: Also skip when the prompt IS a /wogi-* command — the user is already routing.
+    // When users type "/wogi-start ..." directly, Claude Code expands the skill inline
+    // (not through the Skill tool), so clearRoutingPending() in PreToolUse never fires.
+    // Setting the flag here would create an uncleable block.
+    const isWogiCommand = typeof prompt === 'string' && /^\/(wogi-\S+)/i.test(prompt.trim());
+    if (!isWogiCommand) {
+      try {
+        setRoutingPending();
+      } catch (err) {
+        // Non-blocking - don't fail the hook if routing gate fails (fail-open)
+        if (process.env.DEBUG) {
+          console.error(`[Hook] Routing gate set failed: ${err.message}`);
+        }
       }
+    } else if (process.env.DEBUG) {
+      console.error(`[Hook] Skipping routing flag — prompt is a /wogi-* command`);
     }
 
     // Check research gate first (before implementation gate)