3 Commits

• fix: integrate recent hook and docs PRs (#1905)

  Integrates useful changes from #1882, #1884, #1889, #1893, #1898, #1899, and #1903:
  - fix rule install docs to preserve language directories
  - correct Ruby security command examples
  - harden dev-server hook command-substitution parsing
  - add Prisma patterns skill and catalog/package surfaces
  - allow first-time protected config creation while blocking existing configs
  - read cost metrics from Stop hook transcripts
  - emit suggest-compact additionalContext on stdout
  
  Co-authored-by: Jamkris <dltmdgus1412@gmail.com>
  Co-authored-by: Levi-Evan <levishantz@gmail.com>
  Co-authored-by: gaurav0107 <gauravdubey0107@gmail.com>
  Co-authored-by: richm-spp <richard.millar@salarypackagingplus.com.au>
  Co-authored-by: zomia <zomians@outlook.jp>
  Co-authored-by: donghyeun02 <donghyeun02@gmail.com>

  Affaan Mustafa · 2026-05-14 21:37:28 -04:00
  375d750b4c
• fix: fold session manager blockers into one candidate
  Affaan Mustafa · 2026-03-24 23:08:27 -04:00
  1d0aa5ac2a
• feat(hooks): add config protection hook to block linter config manipulation (#758)

  * feat(hooks): add config protection hook to block linter config manipulation
  
  Agents frequently modify linter/formatter configs (.eslintrc, biome.json,
  .prettierrc, .ruff.toml, etc.) to make checks pass instead of fixing
  the actual code.
  
  This PreToolUse hook intercepts Write/Edit/MultiEdit calls targeting
  known config files and blocks them with a steering message that directs
  the agent to fix the source code instead.
  
  Covers: ESLint, Prettier, Biome, Ruff, ShellCheck, Stylelint, and
  Markdownlint configs.
  
  Fixes #733
  
  * Address review: fix dead code, add missing configs, export run()
  
  - Removed pyproject.toml from PROTECTED_FILES (was dead code since
    it was also in PARTIAL_CONFIG_FILES). Added comment explaining why
    it's intentionally excluded.
  - Removed PARTIAL_CONFIG_FILES entirely (no longer needed).
  - Added missing ESLint v9 TypeScript flat configs: eslint.config.ts,
    eslint.config.mts, eslint.config.cts
  - Added missing Prettier ESM config: prettier.config.mjs
  - Exported run() function for in-process execution via run-with-flags,
    avoiding the spawnSync overhead (~50-100ms per call).
  
  * Handle stdin truncation gracefully, log warning instead of fail-open
  
  If stdin exceeds 1MB, the JSON would be malformed and the catch
  block would silently pass through. Now we detect truncation and
  log a warning. The in-process run() path is not affected.

  Charlie Tonneslan · 2026-03-22 15:39:54 -07:00
  fdb10ba116