Stop Prompting.
Start Harnessing.

#!/usr/bin/env bash
# Read the hook payload from stdin
PAYLOAD=$(cat /dev/stdin)
IS_ACTIVE=$(echo "$PAYLOAD" | jq -r '.stop_hook_active // false')

# CRITICAL: If already in recovery, exit clean to break the loop
if [ "$IS_ACTIVE" = "true" ]; then
  exit 0
fi

# Run your actual check
npx tsc --noEmit > /tmp/gate.log 2>&1
if [ $? -ne 0 ]; then
  echo "QUALITY GATE FAILED. Fix these errors:" >&2
  cat /tmp/gate.log >&2
  exit 2  # Block completion — agent must fix first
fi
exit 0

#!/usr/bin/env python3
import sys, json, re

payload = json.load(sys.stdin)
if payload.get("tool_name") != "Bash":
    sys.exit(0)  # Only guard shell commands

command = payload.get("parameters", {}).get("command", "")

BLOCKED = [
    r"rm\s+-r[fF]",           # Recursive forced deletion
    r"git\s+push\s+.*main",   # Push to main branch
    r"git\s+push\s+.*master", # Push to master branch
    r"chmod\s+777",           # Reckless permissions
    r"curl\s+.*\|\s*(?:sudo\s+)?(?:bash|sh)",  # Pipe to shell
    r">\s*~/",                # Overwrite home dotfiles
]

for pattern in BLOCKED:
    if re.search(pattern, command):
        print(f"BLOCKED: {pattern}", file=sys.stderr)
        sys.exit(2)  # Block execution

sys.exit(0)  # Allow

# Agent North Star
Write reliable code within architectural boundaries.

## Stack
React + TypeScript + Express

## Constraints
- Never push to main
- UI must not access DB directly — use services/ layer
- If stuck 3 times on same error, ask the human

## Active Hooks
- PreToolUse: security guard blocks dangerous commands
- Stop: type-checker must pass before completion

## Skills (load when relevant)
- API work → load skills/api-reviewer
- DB work → load skills/db-schema

{
  "hooks": {
    "PreToolUse": [{
      "match": "Bash",
      "command": "python3 scripts/harness/security_guard.py"
    }],
    "PostToolUse": [{
      "match": "Edit|Write",
      "command": "npx prettier --write $FILE_PATH"
    }],
    "Stop": [{
      "command": "bash scripts/harness/quality_gate.sh"
    }]
  }
}

# In AGENTS.md, instruct the agent:
## Context Management
- For codebase searches: delegate to a sub-agent
- For research tasks: delegate to a sub-agent
- Sub-agents return ONLY the answer (max 200 words)
- Never paste raw grep output into main context

# The sub-agent gets a fresh context window.
# It searches, processes, and returns only:
# "The function is in src/auth/login.ts:42"
# NOT the 200 lines of grep results.