x-dd 0.1.1__tar.gz

x_dd-0.1.1/.agent/hooks/README.md

@@ -0,0 +1,88 @@
+# X-DD Hooks
+
+Catálogo de hooks event-driven inspirado en ECC (Sprint 7).
+Definidos en [`hooks.json`](hooks.json) y validados contra
+[`schemas/hooks.schema.json`](../../schemas/hooks.schema.json).
+
+## Eventos soportados
+
+- **PreToolUse** — antes de ejecutar tool. Puede bloquear (`exit_on_match: 2`).
+- **PostToolUse** — después. No bloquea; útil para indexar / loguear.
+- **SessionStart** — al iniciar sesión del orquestador.
+- **SessionEnd** — al cerrar sesión (cleanup).
+- **Stop** — al finalizar respuesta del agente.
+- **PreCompact** — antes de compactar contexto.
+
+## Profiles
+
+Cada hook declara en qué profiles aplica: `minimal | standard | strict`.
+Configurable vía env:
+
+```bash
+export XDD_HOOK_PROFILE=standard   # default
+```
+
+## Catálogo v0.1.0
+
+| ID | Evento | Profile | Comportamiento |
+|----|--------|---------|----------------|
+| `pre:bash:dangerous-command` | PreToolUse `Bash` | standard, strict | **Bloquea** `rm -rf /`, `git push --force`, `git reset --hard origin/...`, `chmod 777`, `curl \| sh`, fork bombs, `dd >/dev/sda` |
+| `pre:edit:config-protection` | PreToolUse `Edit\|Write` | strict | **Bloquea** edición de configs sensibles (linters, schemas). Override: `XDD_ALLOW_CONFIG_EDIT=1` |
+| `pre:write:doc-file-warning` | PreToolUse `Write` | standard, strict | Advierte sobre `.md` fuera de paths canónicos (no bloquea) |
+| `post:edit:mempalace-index` | PostToolUse `Edit\|Write\|NotebookEdit` | minimal+ | Re-indexa MemPalace en background |
+| `post:bash:pr-logger` | PostToolUse `Bash` | standard, strict | Loguea URL de PR tras `gh pr create` en `~/.xdd/pr-history.log` |
+| `session-start:context-load` | SessionStart | standard, strict | Imprime `WORKING-CONTEXT.md` + última sesión de `memoria.md` |
+| `stop:git-check` | Stop | standard, strict | Advierte si hay cambios sin commitear/pushear |
+| `stop:pattern-extraction` | Stop | strict | Stub para Sprint 9 (Continuous Learning) |
+
+## Instalación
+
+```bash
+# Manual (futuro: vía manifests, Sprint 7.3)
+cp -r .agent/hooks/scripts ~/.claude/hooks/
+# O via xdd-adapt.sh (próxima iteración)
+```
+
+Los hooks usan `bash` puro (sin Node) para portabilidad. Reciben JSON por
+stdin con `{tool_name, tool_input, tool_output?}`. Salida:
+- `exit 0` — permitir y continuar
+- `exit 2` — **bloquear** la herramienta (solo PreToolUse)
+- otro código — error logueado, no bloquea
+
+## Variables de entorno
+
+| Var | Default | Efecto |
+|-----|---------|--------|
+| `XDD_HOOK_PROFILE` | `standard` | `minimal\|standard\|strict` |
+| `XDD_DISABLED_HOOKS` | (vacío) | CSV de IDs a desactivar, ej `pre:bash:dangerous-command,stop:git-check` |
+| `XDD_ALLOW_CONFIG_EDIT` | `0` | `1` permite editar configs protegidos |
+| `XDD_SESSION_START_MAX_CHARS` | `8000` | cap del contexto inicial cargado |
+
+## Tests
+
+```bash
+# Manual quick-check
+echo '{"tool_input":{"command":"rm -rf /"}}' | bash .agent/hooks/scripts/pre-bash-dangerous-command.sh
+# → BLOCKED + exit 2
+
+echo '{"tool_input":{"file_path":".markdownlint.yaml"}}' | bash .agent/hooks/scripts/pre-edit-config-protection.sh
+# → BLOCKED + exit 2
+
+# Suite bats (Sprint 7.5)
+bats tests/hooks/
+```
+
+## Crear un hook propio
+
+1. Escribir script bash/node en `.agent/hooks/scripts/`.
+2. Registrar entry en `.agent/hooks/hooks.json` siguiendo el schema.
+3. Validar: `python3 -c "import json,jsonschema; jsonschema.validate(json.load(open('.agent/hooks/hooks.json')), json.load(open('schemas/hooks.schema.json')))"`.
+4. Test manual con stdin.
+
+## Threat model coverage
+
+Los hooks mitigan amenazas listadas en [.xdd/spec/THREATS.md](../../.xdd/spec/THREATS.md):
+
+- **T2.6** (hook ejecutando script malicioso) — `pre:edit:config-protection` defiende los configs de linters/CI
+- **T6.2** (workflow ejecuta `sudo` o accede fuera de scope) — `pre:bash:dangerous-command` bloquea ataques destructivos típicos
+- **V2** (Hook ejecutando script malicioso post-commit) — todos los hooks viven en `.agent/hooks/scripts/` versionado y auditable, no en `.git/hooks/`

x_dd-0.1.1/.agent/hooks/hooks.json

@@ -0,0 +1,184 @@
+{
+  "$schema": "../../schemas/hooks.schema.json",
+  "version": "0.1.0",
+  "description": "Catálogo de hooks X-DD event-driven (inspirado en ECC). Profiles: minimal | standard | strict.",
+  "hooks": {
+    "PreToolUse": [
+      {
+        "id": "pre:bash:dangerous-command",
+        "matcher": "Bash",
+        "description": "Bloquea comandos peligrosos: rm -rf, git push --force, git reset --hard, chmod 777, curl|sh.",
+        "profile": [
+          "standard",
+          "strict"
+        ],
+        "exit_on_match": 2,
+        "script": ".agent/hooks/scripts/pre-bash-dangerous-command.sh"
+      },
+      {
+        "id": "pre:edit:config-protection",
+        "matcher": "Edit|Write",
+        "description": "Bloquea modificaciones a configs de linters/formatters sin justificación explícita (steers a arreglar código, no a debilitar configs).",
+        "profile": [
+          "strict"
+        ],
+        "exit_on_match": 2,
+        "script": ".agent/hooks/scripts/pre-edit-config-protection.sh"
+      },
+      {
+        "id": "pre:write:doc-file-warning",
+        "matcher": "Write",
+        "description": "Advierte cuando se crean archivos .md fuera de paths estándar (README, CHANGELOG, docs/, .xdd/).",
+        "profile": [
+          "standard",
+          "strict"
+        ],
+        "exit_on_match": 0,
+        "script": ".agent/hooks/scripts/pre-write-doc-warning.sh"
+      }
+    ],
+    "PostToolUse": [
+      {
+        "id": "post:edit:mempalace-index",
+        "matcher": "Edit|Write|NotebookEdit",
+        "description": "Re-indexa MemPalace en background tras cada Edit/Write (heredado del retrofit original).",
+        "profile": [
+          "minimal",
+          "standard",
+          "strict"
+        ],
+        "async": true,
+        "script": ".agent/hooks/scripts/post-edit-mempalace-index.sh"
+      },
+      {
+        "id": "post:bash:pr-logger",
+        "matcher": "Bash",
+        "description": "Log de PR URL tras gh pr create (facilita seguimiento).",
+        "profile": [
+          "standard",
+          "strict"
+        ],
+        "async": true,
+        "script": ".agent/hooks/scripts/post-bash-pr-logger.sh"
+      },
+      {
+        "id": "post:write:auto-organize",
+        "matcher": "Edit|Write|NotebookEdit",
+        "description": "Sprint 31: auto-organize workspace (move docs canónicos, gitignore framework pollution + cache + secrets). Idempotente, no destructivo. Opt-out: XDD_NO_ORGANIZE=1.",
+        "profile": [
+          "standard",
+          "strict"
+        ],
+        "async": true,
+        "script": ".agent/hooks/scripts/post-write-auto-organize.sh"
+      }
+    ],
+    "SessionStart": [
+      {
+        "id": "session-start:context-load",
+        "matcher": "*",
+        "description": "Carga last entry de memoria.md + estado de WORKING-CONTEXT.md al iniciar sesión.",
+        "profile": [
+          "standard",
+          "strict"
+        ],
+        "script": ".agent/hooks/scripts/session-start-context-load.sh"
+      }
+    ],
+    "Stop": [
+      {
+        "id": "stop:git-check",
+        "matcher": "*",
+        "description": "Advierte (no bloquea) si hay cambios no commiteados al cerrar la sesión.",
+        "profile": [
+          "standard",
+          "strict"
+        ],
+        "exit_on_match": 0,
+        "script": ".agent/hooks/scripts/stop-git-check.sh"
+      },
+      {
+        "id": "stop:pattern-extraction",
+        "matcher": "*",
+        "description": "Stub para Sprint 9 (Continuous Learning). Hoy no-op; será punto de extracción de instincts.",
+        "profile": [
+          "strict"
+        ],
+        "async": true,
+        "script": ".agent/hooks/scripts/stop-pattern-extraction.sh"
+      }
+    ],
+    "before_agent": [
+      {
+        "id": "ba:otel:trace-start",
+        "matcher": "*",
+        "description": "Sprint 18 ADR-0021: abre span OTel agent.invocation al inicio de agent loop.",
+        "profile": [
+          "strict"
+        ],
+        "async": true,
+        "script": ".agent/hooks/scripts/ba-otel-trace-start.sh"
+      }
+    ],
+    "before_model": [
+      {
+        "id": "bm:cost:budget-check",
+        "matcher": "*",
+        "description": "Sprint 18 ADR-0022: pre-call check de cost budget (warning si exceede).",
+        "profile": [
+          "strict"
+        ],
+        "exit_on_match": 0,
+        "script": ".agent/hooks/scripts/bm-cost-budget-check.sh"
+      }
+    ],
+    "wrap_model_call": [
+      {
+        "id": "wm:otel:span",
+        "matcher": "*",
+        "description": "Sprint 18 ADR-0021: wrap LLM call con span llm.call (input/output tokens, latency, cost).",
+        "profile": [
+          "strict"
+        ],
+        "async": true,
+        "script": ".agent/hooks/scripts/wm-otel-span.sh"
+      }
+    ],
+    "wrap_tool_call": [
+      {
+        "id": "wt:otel:span",
+        "matcher": "*",
+        "description": "Sprint 18 ADR-0021: wrap tool call con span tool.call (tool name, args, duration).",
+        "profile": [
+          "strict"
+        ],
+        "async": true,
+        "script": ".agent/hooks/scripts/wt-otel-span.sh"
+      }
+    ],
+    "after_model": [
+      {
+        "id": "am:cost:record",
+        "matcher": "*",
+        "description": "Sprint 18 ADR-0022: post-call registra cost en SQLite cost.db.",
+        "profile": [
+          "strict"
+        ],
+        "async": true,
+        "script": ".agent/hooks/scripts/am-cost-record.sh"
+      }
+    ],
+    "after_agent": [
+      {
+        "id": "aa:replay:flush",
+        "matcher": "*",
+        "description": "Sprint 18 ADR-0021: flush session events a .xdd/traces/<sid>.jsonl.",
+        "profile": [
+          "strict"
+        ],
+        "async": true,
+        "script": ".agent/hooks/scripts/aa-replay-flush.sh"
+      }
+    ]
+  }
+}

x_dd-0.1.1/.agent/hooks/scripts/aa-replay-flush.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# Sprint 18 stub: aa-replay-flush
+# Real implementation: invoke scripts/xdd-otel.py o scripts/xdd-cost.py.
+# Stub no-op por defecto; activable cuando orchestrator soporte 6-stage middleware.
+set -eu
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/am-cost-record.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# Sprint 18 stub: am-cost-record
+# Real implementation: invoke scripts/xdd-otel.py o scripts/xdd-cost.py.
+# Stub no-op por defecto; activable cuando orchestrator soporte 6-stage middleware.
+set -eu
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/ba-otel-trace-start.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# Sprint 18 stub: ba-otel-trace-start
+# Real implementation: invoke scripts/xdd-otel.py o scripts/xdd-cost.py.
+# Stub no-op por defecto; activable cuando orchestrator soporte 6-stage middleware.
+set -eu
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/bm-cost-budget-check.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# Sprint 18 stub: bm-cost-budget-check
+# Real implementation: invoke scripts/xdd-otel.py o scripts/xdd-cost.py.
+# Stub no-op por defecto; activable cuando orchestrator soporte 6-stage middleware.
+set -eu
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/post-bash-pr-logger.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+# post:bash:pr-logger — log de PR URL tras gh pr create.
+# No bloquea. Async OK.
+set +e
+
+CMD=""
+OUTPUT=""
+if [ ! -t 0 ]; then
+  RAW=$(cat || true)
+  if command -v python3 >/dev/null 2>&1; then
+    CMD=$(echo "$RAW" | python3 -c "import json,sys; d=json.loads(sys.stdin.read() or '{}'); print((d.get('tool_input') or {}).get('command') or '')" 2>/dev/null || echo "")
+    OUTPUT=$(echo "$RAW" | python3 -c "import json,sys; d=json.loads(sys.stdin.read() or '{}'); print((d.get('tool_output') or {}).get('output') or '')" 2>/dev/null || echo "")
+  fi
+fi
+
+# Detectar gh pr create
+if echo "$CMD" | grep -qE "gh\s+pr\s+create"; then
+  PR_URL=$(echo "$OUTPUT" | grep -oE 'https://github\.com/[^/]+/[^/]+/pull/[0-9]+' | head -1)
+  if [ -n "$PR_URL" ]; then
+    mkdir -p ~/.xdd
+    echo "$(date -u +%Y-%m-%dT%H:%M:%SZ) PR opened: $PR_URL" >> ~/.xdd/pr-history.log
+    echo "[xdd:hook] PR logged → $PR_URL"
+  fi
+fi
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/post-edit-mempalace-index.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+# post:edit:mempalace-index — re-indexa MemPalace en background tras cada Edit/Write.
+# Heredado del retrofit original. No bloquea nunca.
+set +e
+if command -v mempalace >/dev/null 2>&1; then
+  ( mempalace mine "$PWD" >>"$HOME/.mempalace/mine.log" 2>&1 & ) >/dev/null 2>&1
+fi
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/post-write-auto-organize.sh

@@ -0,0 +1,42 @@
+#!/bin/bash
+# post:write:auto-organize — Sprint 31 / ADR-0041
+# Hook PostToolUse que invoca xdd-organize en modo apply (non-destructive) tras
+# Write/Edit/NotebookEdit. Real-time auto-organize sin destruir.
+#
+# Comportamiento:
+#   - NO bloquea (exit 0 siempre)
+#   - Async (no demora respuesta del orquestador)
+#   - Solo gitignore_only + move (NO gitignore_and_delete sin --confirm-delete)
+#   - Opt-out: XDD_NO_ORGANIZE=1 env var (mismo opt-out que xdd-organize)
+#
+# Output: log line por acción al stderr. Captura en .xdd/organize.log si dir existe.
+set +e
+
+# Skip si opt-out activo
+[ "${XDD_NO_ORGANIZE:-0}" = "1" ] && exit 0
+
+# Resolver path del repo X-DD source (script xdd-organize vive ahí)
+XDD_ORGANIZE=""
+if [ -x ./scripts/xdd-organize.sh ]; then
+  XDD_ORGANIZE="./scripts/xdd-organize.sh"
+elif [ -x "$HOME/Documentos/Desarrollos/scripts/xdd-organize.sh" ]; then
+  XDD_ORGANIZE="$HOME/Documentos/Desarrollos/scripts/xdd-organize.sh"
+elif command -v xdd-organize >/dev/null 2>&1; then
+  XDD_ORGANIZE="$(command -v xdd-organize)"
+else
+  # No disponible — skip silencioso
+  exit 0
+fi
+
+# Ejecutar apply (non-destructive). Log a .xdd/organize.log si dir existe.
+LOG=""
+[ -d .xdd ] && LOG=".xdd/organize.log"
+
+if [ -n "$LOG" ]; then
+  echo "=== $(date -Iseconds) post:write:auto-organize ===" >> "$LOG"
+  bash "$XDD_ORGANIZE" apply --dest=. 2>&1 | tee -a "$LOG" >&2
+else
+  bash "$XDD_ORGANIZE" apply --dest=. 2>&1 >&2
+fi
+
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/pre-bash-dangerous-command.sh

@@ -0,0 +1,48 @@
+#!/bin/bash
+# pre:bash:dangerous-command — bloquea comandos peligrosos.
+# Recibe el comando como JSON por stdin (formato Claude Code) o $1.
+# Exit 2 = bloquea ejecución; Exit 0 = permite.
+set -eu
+
+# Obtener el comando del input
+CMD=""
+if [ -t 0 ]; then
+  CMD="${1:-}"
+else
+  RAW=$(cat || true)
+  if command -v python3 >/dev/null 2>&1; then
+    CMD=$(echo "$RAW" | python3 -c "import json,sys; d=json.loads(sys.stdin.read() or '{}'); print((d.get('tool_input') or {}).get('command') or '')" 2>/dev/null || echo "")
+  else
+    CMD=$(echo "$RAW" | grep -oE '"command"\s*:\s*"[^"]*"' | head -1 | sed 's/.*"command"\s*:\s*"\(.*\)"/\1/' || echo "")
+  fi
+fi
+
+[ -z "$CMD" ] && exit 0
+
+# Patrones peligrosos
+DANGEROUS_PATTERNS=(
+  'rm[[:space:]]+-[rR][fF]?[[:space:]]+/'
+  'rm[[:space:]]+-[fF][rR]?[[:space:]]+/'
+  'git[[:space:]]+push[[:space:]]+.*--force'
+  'git[[:space:]]+push[[:space:]]+.*-f([[:space:]]|$)'
+  'git[[:space:]]+reset[[:space:]]+--hard[[:space:]]+(origin|HEAD~)'
+  'git[[:space:]]+clean[[:space:]]+-[fdx]'
+  'chmod[[:space:]]+-?R?[[:space:]]+777'
+  'curl[[:space:]]+.*\|[[:space:]]*(bash|sh)([[:space:]]|$)'
+  'wget[[:space:]]+.*\|[[:space:]]*(bash|sh)([[:space:]]|$)'
+  'dd[[:space:]]+if=.*of=/dev/(sda|hda|nvme)'
+  ':(){.*}'
+  '>\s*/dev/(sda|hda|nvme)'
+)
+
+for pat in "${DANGEROUS_PATTERNS[@]}"; do
+  if echo "$CMD" | grep -qE "$pat"; then
+    echo "[xdd:hook] BLOCKED — comando peligroso detectado:" >&2
+    echo "[xdd:hook]   patrón: $pat" >&2
+    echo "[xdd:hook]   comando: $CMD" >&2
+    echo "[xdd:hook] Si es intencional, ejecutalo manualmente fuera del agente." >&2
+    exit 2
+  fi
+done
+
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/pre-edit-config-protection.sh

@@ -0,0 +1,54 @@
+#!/bin/bash
+# pre:edit:config-protection — bloquea modificación de configs sensibles.
+# Profile: strict. Steers al agente a arreglar el código, no a debilitar la config.
+set -eu
+
+# Lista de paths protegidos (configs que NO deben relajarse silenciosamente)
+PROTECTED=(
+  ".markdownlint.yaml"
+  ".markdownlint.json"
+  ".editorconfig"
+  ".gitignore"
+  ".pre-commit-config.yaml"
+  ".eslintrc"
+  ".eslintrc.js"
+  ".eslintrc.json"
+  ".prettierrc"
+  ".prettierrc.json"
+  "eslint.config.js"
+  "ruff.toml"
+  "pyproject.toml"
+  "tsconfig.json"
+  ".github/renovate.json"
+  ".github/dependabot.yml"
+  "schemas/"
+)
+
+# Obtener path del input
+FILE_PATH=""
+if [ -t 0 ]; then
+  FILE_PATH="${1:-}"
+else
+  RAW=$(cat || true)
+  if command -v python3 >/dev/null 2>&1; then
+    FILE_PATH=$(echo "$RAW" | python3 -c "import json,sys; d=json.loads(sys.stdin.read() or '{}'); print((d.get('tool_input') or {}).get('file_path') or '')" 2>/dev/null || echo "")
+  fi
+fi
+
+[ -z "$FILE_PATH" ] && exit 0
+
+# Verificar contra paths protegidos
+for prot in "${PROTECTED[@]}"; do
+  if [[ "$FILE_PATH" == *"$prot"* ]]; then
+    if [ "${XDD_ALLOW_CONFIG_EDIT:-}" = "1" ]; then
+      echo "[xdd:hook] WARN — editando config protegido: $FILE_PATH (XDD_ALLOW_CONFIG_EDIT=1)" >&2
+      exit 0
+    fi
+    echo "[xdd:hook] BLOCKED — modificación a config protegido: $FILE_PATH" >&2
+    echo "[xdd:hook] Steers: ¿podés arreglar el código en lugar de debilitar la config?" >&2
+    echo "[xdd:hook] Si es realmente necesario: export XDD_ALLOW_CONFIG_EDIT=1" >&2
+    exit 2
+  fi
+done
+
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/pre-llm-budget.sh

@@ -0,0 +1,21 @@
+#!/bin/bash
+# Sprint 19 ADR-0023: pre-LLM-call budget check.
+# Lee tokens estimados desde stdin o XDD_TOKENS_ESTIMATE env var.
+# Invoca xdd-context check con budget de xdd.config.yml.
+set -eu
+
+TOKENS="${XDD_TOKENS_ESTIMATE:-}"
+if [ -z "$TOKENS" ]; then
+  # Sin input → no-op (stub no bloquea)
+  exit 0
+fi
+
+XDD_ROOT="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/../../.." && pwd)"
+python3 "$XDD_ROOT/scripts/xdd-context.py" check --tokens="$TOKENS"
+RC=$?
+# rc=0 ok, rc=1 warning (no bloquea), rc=2 block
+if [ "$RC" -eq 2 ]; then
+  echo "[hook] BLOCK: context budget exceeded" >&2
+  exit 2
+fi
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/pre-tool-authz.sh

@@ -0,0 +1,21 @@
+#!/bin/bash
+# Sprint 21 ADR-0028: hook PreToolUse que invoca xdd-authz.
+# Si exit 2 = deny → bloquea tool call.
+# Si exit 1 = require_approval → orchestrator debería prompt humano.
+set -eu
+
+TOOL="${XDD_TOOL_NAME:-}"
+ARGS_JSON="${XDD_TOOL_ARGS:-{}}"
+if [ -z "$TOOL" ]; then
+  exit 0  # no info, no-op
+fi
+
+XDD_ROOT="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/../../.." && pwd)"
+python3 "$XDD_ROOT/scripts/xdd-authz.py" check --tool="$TOOL" --args="$ARGS_JSON"
+RC=$?
+case "$RC" in
+  0) exit 0 ;;
+  1) echo "[hook] require_approval: $TOOL" >&2; exit 1 ;;
+  2) echo "[hook] DENY: $TOOL blocked by authz policy" >&2; exit 2 ;;
+  *) exit 0 ;;
+esac

x_dd-0.1.1/.agent/hooks/scripts/pre-write-doc-warning.sh

@@ -0,0 +1,36 @@
+#!/bin/bash
+# pre:write:doc-file-warning — advierte sobre archivos .md fuera de paths estándar.
+# Exit 0 siempre (solo warn).
+set -eu
+
+FILE_PATH=""
+if [ -t 0 ]; then
+  FILE_PATH="${1:-}"
+else
+  RAW=$(cat || true)
+  if command -v python3 >/dev/null 2>&1; then
+    FILE_PATH=$(echo "$RAW" | python3 -c "import json,sys; d=json.loads(sys.stdin.read() or '{}'); print((d.get('tool_input') or {}).get('file_path') or '')" 2>/dev/null || echo "")
+  fi
+fi
+
+[ -z "$FILE_PATH" ] && exit 0
+
+# Solo aplica a .md
+case "$FILE_PATH" in
+  *.md|*.MD|*.Md) ;;
+  *) exit 0 ;;
+esac
+
+# Paths estándar permitidos sin warn
+case "$FILE_PATH" in
+  *README.md|*CHANGELOG.md|*CONTRIBUTING.md|*CODE_OF_CONDUCT.md|*SECURITY.md|*LICENSE.md|*NOTICE.md|*CLAUDE.md|*AGENTS.md|*SOUL.md|*RULES.md|*MEMORY.md|*memoria.md|*lecciones.md|*MEJORAS-X-DD.md|*DEPENDENCIES.md|*PROJ-MASTER-PLAN.md|*WORKING-CONTEXT.md|*EVALUATION.md|*the-*-guide.md)
+    exit 0 ;;
+  docs/*|.xdd/*|.agent/*|prompts/*|templates/*|schemas/*|RELEASES/*|skills/*)
+    exit 0 ;;
+  */docs/*|*/.xdd/*|*/.agent/*|*/prompts/*|*/templates/*|*/schemas/*|*/RELEASES/*|*/skills/*|*SKILL.md|*ADR-*.md|*adr/*.md)
+    exit 0 ;;
+esac
+
+echo "[xdd:hook] WARN — creando archivo .md fuera de paths estándar: $FILE_PATH" >&2
+echo "[xdd:hook] Considerá: docs/, .xdd/, prompts/, templates/, skills/, o uno de los archivos raíz canónicos." >&2
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/session-start-context-load.sh

@@ -0,0 +1,43 @@
+#!/bin/bash
+# session-start:context-load — imprime el contexto vivo al iniciar sesión.
+# Sprint 28 / ADR-0038: enforce lectura memoria + lecciones + WORKING-CONTEXT + doctor + gate.
+# Lección retroactiva: en proyecto piloto multi-IDE el orquestador omitía leer lecciones,
+# repitiendo errores conocidos. Ahora carga forzada y visible al inicio.
+# Exit 0 siempre. El orquestador captura stdout como contexto del prompt.
+set +e
+
+if [ -f WORKING-CONTEXT.md ]; then
+  echo "=== Working Context (live) ==="
+  head -30 WORKING-CONTEXT.md
+  echo
+fi
+
+if [ -f memoria.md ]; then
+  echo "=== Memoria — última sesión ==="
+  awk '/^### Sesión/{p=1} p' memoria.md | head -25
+  echo
+fi
+
+# Sprint 28: carga lecciones recientes (last 5 entries) — previene repetición de errores
+if [ -f lecciones.md ]; then
+  echo "=== Lecciones — últimas 5 entries (consultar ANTES de proponer arquitectura) ==="
+  awk '/^### \[/{count++; if (count>5) exit} count>=1' lecciones.md | head -80
+  echo
+fi
+
+# Sprint 28: micro-doctor — verifica salud crítica del entorno (NO bloquea, solo reporta)
+if [ -x ./scripts/xdd-doctor.sh ]; then
+  echo "=== Doctor (resumen) ==="
+  bash ./scripts/xdd-doctor.sh 2>/dev/null | tail -5
+  echo
+fi
+
+# Sprint 28: gate status — fase actual + estado
+if [ -f ./scripts/xdd-gate.py ] && command -v python3 >/dev/null 2>&1; then
+  echo "=== Gate keeper (fase actual) ==="
+  python3 ./scripts/xdd-gate.py status 2>/dev/null | head -10
+  echo
+fi
+
+# Cap a ~8000 chars total (similar a ECC_SESSION_START_MAX_CHARS)
+exit 0

x_dd-0.1.1/.agent/hooks/scripts/stop-git-check.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+# stop:git-check — advierte si hay cambios sin commitear al cerrar sesión.
+# Exit 0 siempre (warn-only).
+set +e
+
+if [ ! -d .git ]; then
+  exit 0
+fi
+
+UNCOMMITTED=$(git status --porcelain 2>/dev/null | wc -l)
+UNPUSHED=$(git log --branches --not --remotes --oneline 2>/dev/null | wc -l)
+
+if [ "$UNCOMMITTED" -gt 0 ] || [ "$UNPUSHED" -gt 0 ]; then
+  echo "[xdd:hook] WARN — al cerrar sesión:" >&2
+  [ "$UNCOMMITTED" -gt 0 ] && echo "[xdd:hook]   · $UNCOMMITTED archivos modificados sin commitear" >&2
+  [ "$UNPUSHED" -gt 0 ] && echo "[xdd:hook]   · $UNPUSHED commits locales sin pushear" >&2
+  echo "[xdd:hook] Considerá ejecutar: git status / git push origin HEAD" >&2
+fi
+exit 0