Merge bugfix/design-toolchain-trigger into develop

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XpphkdTosUzokBDNG7PToS

.claude/memory/decisions.md

@@ -776,3 +776,15 @@ rules:
 - **Reference**: read-only clone (scratchpad), 4 parallel analyzer agents +
   eval-harness spike, this session. No branch on ECC, no import. See [[BDR-045]]
   (chore/ aiguillage), [[BDR-009]] (caveman registries).
+- **Corroboration 2026-07-03** (Opus 4.8 re-audit; repo UNCHANGED — HEAD 81af407
+  2026-06-29, 2232 commits identical, zero commits since 01/07): 6 parallel analyzer
+  agents re-verified every BDR-047 fact w/ fresh file:line. rules/ inert (paths: 0
+  consumers, rules/README.md:333 "cannot distribute rules automatically"); contexts/
+  overwrite (the-longform-guide.md:68-74 `--system-prompt`); eval-harness no runner
+  (/eval absent; gan-harness.sh + skill-improvement/evaluate.js exist but hors-scope,
+  deliver NEITHER pass@k nor model-upgrade battery); memory auto-capture conflicts
+  approve-first (continuous-learning-v2 observer-loop.sh:160-164 "Do NOT ask for
+  permission"); distribution = product scaffolding, N/A. ZERO factual divergence.
+  ONE scope gap: BDR-047 never opened hooks/ — ECC's only WIRED subsystem. Fruit:
+  config-protection hook (own idiom, NOT ECC import), shipped
+  feature/config-protection-hook. Lesson holds + refined by [[LRN-090]].

.claude/memory/journal.md

@@ -308,3 +308,9 @@ rules:
 - Same branch, 3 doctor false-warns fixed ([[LRN-047]] corrob — a doctor that cries false is ignored): cargo "(RTK unavailable)" → optional info (RTK prebuilt, detect_rtk); check_symlink passes children of dir-level symlinks (hooks/session-start.sh); gstack counts 34 per-skill symlinks not a mythical skills/gstack link (link.sh removes it); token budget vs 200k context window not bogus 11k "session budget" → killed false "92% CRITICAL" (measured ~11.4k [[LRN-088]]; 200k confirmed by user — 1M pin revoked at audit #7, calibrate on default not the exceptional session).
 - Suites green: gitflow 71/71 (+7), deterministic 13, doc-commit 32, doc-shape 19, reconcile 20, deploy-commit 13, release-candidate 5/5 tag-mode. doctor: 0 false-warn (1 legit survivor = gstack tracks branch=main advisory). shellcheck clean. T12 named to dodge collision with reconcile's own T6c (darwin path, audit #3).
 - 3 atomic commits (fix gitflow / fix doctor / docs changelog Unreleased) + memory. finish bugfix→develop on GO; user pushes develop.
+- ECC 2nd-look (Opus 4.8, 6 agents, repo unchanged since 01/07): all [[BDR-047]] facts corroborated w/ file:line, zero divergence. Scope gap = hooks/ (only wired subsystem) unaudited 01/07 → [[LRN-090]] wired > declarative.
+- Shipped config-protection hook (feature/config-protection-hook): PreToolUse blocks Edit/Write to quality-gate files (settings/gitflow/.githooks/doctor/hooks-self/lib-tests/lint). One-shot sentinel .claude/.config-edit-ok (non-empty reason, logged+consumed) — NOT env-var (launch-time = set-and-forget = garde mort). Own idiom, not ECC import. shellcheck clean, test 20/20.
+- Live dogfood: hook went active mid-session via symlinked settings (link.sh); v1 (no self-guard) let its OWN edit through → v2 added hooks/*.sh + lib/tests/* self-guard, then blocked the test-file edit; recovered via sentinel. User's self-guard requirement vindicated.
+- Next: #2 design-toolchain trigger fix (residual false-fires post-ed2408e, 5× this session).
+- #2 done (bugfix/design-toolchain-trigger): trigger tightened — dropped bare design|component|composant|theme|thème|transition|frontend|front-end|palette; dashboard→\bdashboard\b (kills ecc_dashboard.py filename match, keeps "admin dashboard"); kept animation; added "front-?end design" bigram + fire-log counter (time+token+excerpt, ~/.claude/logs/design-toolchain-fires.log) so future "re-firing?" is measured. Test 18/18, shellcheck clean, live dogfood green. [[LRN-091]] corrob [[LRN-047]].
+- Double dogfood of #1 guard: config-protection blocked + sentinel-bypassed my own edits to the now-guarded design hook + its test — first real use of the guard, friction validated in passing (one-shot sentinel .claude/.config-edit-ok, non-empty reason, logged+consumed). ECC second-regard closed: #1 config-protection + #2 trigger fix, both merged to develop, nothing pushed.

.claude/memory/learnings.md

@@ -965,3 +965,15 @@ rules:
 - **context**: audit 2026-07-02, `lib/gitflow.sh:257` `finish) gitflow_finish "$@"` passed args the function never consulted. Surfaced when a finish "for" one branch merged another (LOT3). [[BLK-015]].
 - **future application**: any wrapper/dispatcher forwarding args to a callee that resolves its target from ambient state — either (a) make the callee USE the args as the target, or (b) if the ambient-state contract is deliberate, treat passed args as an ASSERTION and refuse loudly when they disagree with the state. Never let forwarded args be silently dropped: silent-drop = the caller believes they steered, the callee ignored them. Sibling of "presence-flag ≠ capability" [[LRN-087]] — both = a visible signal lying about the real behavior.
 - **Reference**: `lib/gitflow.sh` gitflow_finish arg-guard, `lib/gitflow-test.sh` T12. [[BLK-015]].
+
+## LRN-090 — external-repo audit: open WIRED subsystems before declarative
+- **pattern**: auditing external config/framework repo for transferable value → rank subsystems WIRED (executable: hooks/, runners, dispatchers) vs DECLARATIVE (docs, rules/, aspirational frontmatter). Wired > declarative: declarative often inert (ECC rules/ `paths:` = 0 consumers; eval-harness = SKILL.md, no runner — "belle méthodo / vaporware"); wired = a real mechanism worth adapting.
+- **context**: ECC 2nd-look 2026-07-03 (Opus 4.8, 6 agents, repo unchanged since 01/07). [[BDR-047]] audit (01/07) inventoried the declarative surface + concluded zero import — right on facts, but hooks/ (ECC's only live subsystem) was OUT of scope and held the sole real adaptation → config-protection PreToolUse guard.
+- **future application**: next external-repo value audit → enumerate hooks/, scripts/, runners FIRST; treat rules/docs/SKILL.md as claims to verify ("is it wired?"), not value. Described capability ≠ wired capability.
+- **cousin**: [[LRN-087]] presence-flag ≠ capability; [[LRN-089]] forwarded-args silently dropped — same family: a visible signal (a file, a flag, a `paths:`) lying about real behavior.
+
+## LRN-091 — a soft-nudge hook that over-fires gets ignored (banner-blindness)
+- **pattern**: keyword-triggered nudge (design-toolchain reminder) with bare common tokens fires on non-UI work → reader tunes it out. Same class as a diagnostic that cries false [[LRN-047]]: a signal wrong too often stops being read.
+- **rule**: keep a token BARE only when its UI sense dominates largely in a dev context (glassmorphism, navbar). Token common in non-UI talk (design, component, theme, transition, frontend) → require a UI-specific bigram (design system, front-end design) or drop; in doubt → bigram-or-drop. Borderline standalone nouns (dashboard, animation) may stay bare as an assumed call — the fire-log arbitrates later on data, not gut. (NOT "never bare tokens" — animation stays bare here by design.)
+- **context**: design-toolchain-reminder.sh — 07-02 tightening (dropped page/form/menu/…) insufficient; 6 bare tokens still false-fired ~6×/session during the ECC config audit (design, ecc_dashboard.py, component, frontend, theme, transition, palette). 07-03 fix: dropped them, dashboard→`\bdashboard\b` (filename match killed, "admin dashboard" kept), added a fire-log (time+token+excerpt). `lib/tests/design-toolchain-reminder.test.sh` locks it (18 checks).
+- **cousin**: [[LRN-047]] a doctor that cries false is ignored.

.claude/tasks/TODO.md

@@ -1,5 +1,35 @@
 # TODO
 
+## 2026-07-03 — design-toolchain trigger fix (bugfix/design-toolchain-trigger)
+Root cause (NOT a kill-switch, per user): ed2408e (07-02) dropped ultra-generic
+tokens but left bare tokens common in non-UI talk → ~6× false-fire THIS session
+(design, dashboard via ecc_dashboard.py, component, frontend, theme, transition,
+palette). Fix = tighten the trigger only + a fire-log counter for measured
+re-fire decisions.
+
+- [ ] hooks/design-toolchain-reminder.sh — drop bare design|component|composant|theme|thème|transition|frontend|front-end|palette; dashboard→\bdashboard\b; keep animation; add "front-?end design" bigram; + fire-log (time+token+excerpt)
+- [ ] lib/tests/design-toolchain-reminder.test.sh — 8 dropped tokens quiet; button/navbar/landing/glassmorphism/redesign/"frontend design"/"admin dashboard"/animation fire; ecc_dashboard.py quiet; fire logged
+- [ ] Verify — shellcheck + bash -n + test PASS + live dogfood (hook now quiet on session tokens)
+- [ ] GATE before finish (user); sentinel one-shot to edit the now-guarded hook
+
+## 2026-07-03 — config-protection hook (feature/config-protection-hook)
+Goal: PreToolUse hook blocks Edit/Write to this config's quality-gate files
+(guardrails an agent must not weaken to make an error pass). Adaptation from ECC
+second-look (BDR-047 corrob, Opus 4.8 re-audit) — MY idiom (~15-line bash), NOT
+ECC's Node dispatcher. Extends config's own doctrine ("backstops déterministes
+car l'advisory s'oublie"). Guarded: settings.json (+ .claude/settings*.json),
+lib/gitflow.sh, .githooks/*, doctor.sh, lint configs (preemptive, absent today).
+Bypass: CONFIG_EDIT_OK="reason" (logged). Mid-session env caveat flagged at gate.
+
+- [x] hooks/config-protection.sh — case-match guarded path, exit 2 else 0; fail-open
+- [x] Guarded: settings.json(+.claude/settings*), lib/gitflow.sh, .githooks/*, doctor.sh, hooks/*.sh (self-guard), lib/tests/* (T6c/LRN-077), lint (preemptive)
+- [x] Bypass: one-shot sentinel .claude/.config-edit-ok (non-empty reason, logged+consumed) — NOT env-var (launch-time env = set-and-forget = garde mort)
+- [x] lib/tests/config-protection.test.sh — block/allow/self-guard/near-miss/fail-open/sentinel-one-shot/empty-refuse (17 checks)
+- [x] settings.json — register PreToolUse matcher Edit|Write|MultiEdit -> hook
+- [x] Verify — shellcheck clean + 17/17 PASS + bash -n + bootstrap-safe (hook fires on Edit/Write only, not shell cp/ln)
+- [x] GATE passed — guarded list +2 (hooks/, tests/), sentinel over env-var
+- [ ] Capitalize (BDR-047 corrob + LRN-090 câblé>déclaratif) + finish this branch only
+
 ## 2026-06-23 — install self-sufficient + gstack on-demand par profil
 Goal: `make install`/`make plugin`/`make update` installent TOUT sans étape
 manuelle. Plus le profil-driven gstack on-demand (option 1 user : gstack OFF

hooks/config-protection.sh

@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+# config-protection.sh
+#
+# PreToolUse hook (Edit|Write|MultiEdit). Blocks edits to this config's
+# quality-gate files — the guardrails an agent must not silently weaken to make
+# an error "pass" (permission/hook registry, gitflow enforcement, the git
+# pre-commit guard, the hooks themselves, the test suite, the health diagnostic,
+# lint config). Exit 2 blocks the tool call and feeds the message back to the
+# model (Claude Code PreToolUse contract).
+#
+# It fires only on the model's Edit/Write tool calls — never on shell-level file
+# ops (the cp/ln in install.sh, link.sh), so bootstrap/deploy is unaffected.
+#
+# One-shot escape hatch: create .claude/.config-edit-ok (CWD-relative) with a
+# NON-EMPTY reason inside; the hook logs the reason, consumes (rm) the sentinel,
+# and allows that single edit. It never persists — a lingering sentinel would be
+# a footgun. Discipline, per CLAUDE.md "Root causes only. No temp fixes.": fix
+# the code, don't loosen the gate. Fails OPEN (exit 0) on parse failure so it can
+# never wedge editing.
+
+set -euo pipefail
+
+log="${HOME}/.claude/logs/config-protection.log"
+sentinel="${PWD}/.claude/.config-edit-ok"
+
+input="$(cat)"
+path="$(printf '%s' "$input" \
+  | python3 -c 'import sys, json; print(json.load(sys.stdin).get("tool_input", {}).get("file_path", ""))' \
+  2>/dev/null || true)"
+[ -z "$path" ] && exit 0
+
+# Guardrail files, matched by path suffix (covers both the repo source and the
+# deployed ~/.claude copy). Precise: lib/gitflow.sh only, not gitflow-migrate.sh.
+case "$path" in
+  */.claude/settings.json|*/.claude/settings.local.json|*/claude/settings.json) ;;
+  */lib/gitflow.sh|*/.githooks/*|*/doctor.sh) ;;
+  */hooks/*.sh|*/lib/tests/*) ;;
+  */.shellcheckrc|*/.markdownlint.json|*/.editorconfig) ;;
+  *) exit 0 ;;
+esac
+
+# One-shot sentinel bypass: non-empty reason required; consumed on sight.
+if [ -f "$sentinel" ]; then
+  reason="$(head -c 500 "$sentinel" 2>/dev/null | tr '\n\r\t' '   ' || true)"
+  rm -f "$sentinel"
+  if printf '%s' "$reason" | grep -q '[^[:space:]]'; then
+    mkdir -p "$(dirname "$log")"
+    printf '%s\tBYPASS\t%s\treason=%s\n' "$(date -Iseconds)" "$path" "$reason" >> "$log"
+    exit 0
+  fi
+  printf '%s\n' "[config-protection] .claude/.config-edit-ok had an EMPTY reason -> refused (sentinel consumed). Recreate it with a non-empty reason." >&2
+  exit 2
+fi
+
+cat >&2 <<EOF
+[config-protection] BLOCKED edit to a quality-gate file:
+  $path
+This is a guardrail (permission/hook registry, gitflow enforcement, git
+pre-commit guard, a hook, the test suite, health diagnostic, or lint config).
+Don't weaken the gate to make an error pass — fix the root cause instead
+(CLAUDE.md: "Root causes only. No temp fixes."). To make one intended edit,
+create .claude/.config-edit-ok with a non-empty reason; it is logged and
+consumed (one-shot).
+EOF
+exit 2

hooks/design-toolchain-reminder.sh

@@ -9,6 +9,10 @@
 # This is a soft nudge: the tiered rule itself says trivial work uses NO
 # toolchain, so a false positive (e.g. "API design") costs only a reminder the
 # model can disregard. Always exits 0 so it never blocks prompt submission.
+#
+# Every fire appends one line (time, matched token, prompt excerpt) to
+# ~/.claude/logs/design-toolchain-fires.log — a counter so the next "is it
+# over-firing?" decision is measured, not anecdotal.
 
 set -euo pipefail
 
@@ -24,15 +28,25 @@ prompt="$(printf '%s' "$input" \
 lc="$(printf '%s' "$prompt" | tr '[:upper:]' '[:lower:]')"
 
 # UI/design build and review signals (FR + EN). Word boundaries (\b) avoid
-# substring false matches like perform/platform/information. Tightened
-# 2026-07-02: ultra-generic English tokens (page, form, menu, card, style,
-# look, screen, interface, color) fired on a large share of NON-UI prompts —
-# ~200 tokens of reminder each time (measured: 6 fires during a pure config
-# audit). Kept: unambiguous design vocabulary + FR aesthetic words; specific
-# compounds (stylesheet, styling, formulaire, écran) still match.
-pattern='design|redesign|refonte|refont|ui/ux|ux/ui|\bui\b|\bux\b|ui kit|design system|design-system|frontend|front-end|front end|composant|component|\bnavbar\b|\bsidebar\b|\bmodal\b|\bbouton\b|\bbutton\b|formulaire|\bhero\b|\bheader\b|\bfooter\b|dropdown|tooltip|\bbadge\b|\bchart\b|graphique|accordion|carousel|\bslider\b|landing|dashboard|homepage|home page|\baccueil\b|\bécran\b|\becran\b|portfolio|maquette|mockup|wireframe|prototype|\bjoli\b|\bjolie\b|\bbeau\b|\bbelle\b|esth[eé]tique|aesthetic|\bvisuel\b|\bvisual\b|embellir|fignol|peaufin|polish|styliser|styling|stylesheet|\bskin\b|charte graphique|\bbrand\b|branding|\blogo\b|favicon|ic[oô]ne|\bicon\b|\bcss\b|tailwind|shadcn|couleur|palette|gradient|d[eé]grad[eé]|\bombre\b|spacing|espacement|\bmarge\b|\bpadding\b|\bmargin\b|\bradius\b|arrondi|\bhover\b|dark mode|light mode|\btheme\b|th[eè]me|typograph|\bfont\b|\bfonts\b|font pairing|\bpolice\b|animation|\bmotion\b|transition|micro-interaction|keyframe|glassmorph|neumorph|claymorph|skeuomorph|brutalis|bento|minimalis|responsive|figma'
+# substring false matches like perform/platform/information.
+# Tightened 2026-07-02: dropped ultra-generic tokens (page, form, menu, card,
+# style, look, screen, interface, color) that fired on non-UI prompts.
+# Tightened again 2026-07-03: dropped bare design|component|composant|theme|
+# thème|transition|frontend|front-end|palette — all common in non-UI technical
+# talk (a design decision, a system component, the theme of a discussion, a
+# state transition, frontend architecture). Kept as UI-specific compounds:
+# "design system", "redesign", "front-?end design". dashboard -> \bdashboard\b
+# so a filename like ecc_dashboard.py no longer matches while "admin dashboard"
+# still does. animation kept (rarely non-UI).
+pattern='redesign|refonte|refont|ui/ux|ux/ui|\bui\b|\bux\b|ui kit|design system|design-system|front-?end design|\bnavbar\b|\bsidebar\b|\bmodal\b|\bbouton\b|\bbutton\b|formulaire|\bhero\b|\bheader\b|\bfooter\b|dropdown|tooltip|\bbadge\b|\bchart\b|graphique|accordion|carousel|\bslider\b|landing|\bdashboard\b|homepage|home page|\baccueil\b|\bécran\b|\becran\b|portfolio|maquette|mockup|wireframe|prototype|\bjoli\b|\bjolie\b|\bbeau\b|\bbelle\b|esth[eé]tique|aesthetic|\bvisuel\b|\bvisual\b|embellir|fignol|peaufin|polish|styliser|styling|stylesheet|\bskin\b|charte graphique|\bbrand\b|branding|\blogo\b|favicon|ic[oô]ne|\bicon\b|\bcss\b|tailwind|shadcn|couleur|gradient|d[eé]grad[eé]|\bombre\b|spacing|espacement|\bmarge\b|\bpadding\b|\bmargin\b|\bradius\b|arrondi|\bhover\b|dark mode|light mode|typograph|\bfont\b|\bfonts\b|font pairing|\bpolice\b|animation|\bmotion\b|micro-interaction|keyframe|glassmorph|neumorph|claymorph|skeuomorph|brutalis|bento|minimalis|responsive|figma'
 
 if printf '%s' "$lc" | grep -Eq "$pattern"; then
+  # Counter: log the fire (time, matched token, excerpt) — best-effort, never blocks.
+  logf="${HOME}/.claude/logs/design-toolchain-fires.log"
+  mkdir -p "$(dirname "$logf")" 2>/dev/null || true
+  printf '%s\t%s\t%s\n' "$(date -Iseconds)" \
+    "$(printf '%s' "$lc" | grep -oiE "$pattern" | head -1 || true)" \
+    "$(printf '%s' "$prompt" | tr '\n\t' '  ' | cut -c1-100)" >> "$logf" 2>/dev/null || true
   cat <<'EOF'
 [design-toolchain] UI/design signal detected. Apply CLAUDE.md "Design work — full toolchain (tiered by scope)":
 - Trivial (≤2 files, single cosmetic value, CSS tweak) → /hotfix, NO toolchain.

lib/tests/config-protection.test.sh

@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+# lib/tests/config-protection.test.sh
+set -u
+H="$(cd "$(dirname "$0")/../.." && pwd)/hooks/config-protection.sh"
+pass=0; fail=0
+check() { if [ "$2" = "$3" ]; then pass=$((pass+1)); else fail=$((fail+1));
+  printf 'FAIL %s: got[%s] want[%s]\n' "$1" "$2" "$3"; fi; }
+# Run hook for a file_path with NO sentinel present (CWD = a clean temp dir).
+run() { local c r; c="$(mktemp -d)"; ( cd "$c" && printf \
+  '{"tool_name":"Edit","tool_input":{"file_path":"%s"}}' "$1" | bash "$H" ) \
+  >/dev/null 2>&1; r=$?; rm -rf "$c"; return "$r"; }
+
+# --- Guarded quality-gate files -> blocked (exit 2) ---
+run "/home/u/Documents/claude/lib/gitflow.sh";              check T1-gitflow           "$?" 2
+run "/home/u/.claude/settings.json";                        check T2-live-settings     "$?" 2
+run "/home/u/Documents/claude/.claude/settings.local.json"; check T3-local-settings    "$?" 2
+run "/home/u/Documents/claude/settings.json";               check T4-root-settings     "$?" 2
+run "/home/u/Documents/claude/.githooks/pre-commit";        check T5-githook           "$?" 2
+run "/home/u/Documents/claude/doctor.sh";                   check T6-doctor            "$?" 2
+run "/home/u/Documents/claude/.shellcheckrc";               check T7-shellcheckrc      "$?" 2
+# self-guard: the hook itself, other hooks, and the test suite are guarded
+run "/home/u/Documents/claude/hooks/config-protection.sh";  check T8-self-guard        "$?" 2
+run "/home/u/.claude/hooks/session-start.sh";               check T9-deployed-hook     "$?" 2
+run "/home/u/Documents/claude/lib/tests/config-protection.test.sh"; check T10-tests-guarded "$?" 2
+
+# --- Non-guarded -> allowed (exit 0) ---
+run "/home/u/Documents/claude/lib/gitflow-migrate.sh";      check T11-near-miss        "$?" 0
+run "/home/u/project/src/app.js";                           check T12-code             "$?" 0
+run "/home/u/project/settings.json";                        check T13-foreign-settings "$?" 0
+
+# --- Fail-open on malformed input (no file_path) -> allowed ---
+c="$(mktemp -d)"; ( cd "$c" && printf '{}' | bash "$H" ) >/dev/null 2>&1
+check T14-fail-open "$?" 0; rm -rf "$c"
+
+# --- Sentinel one-shot: non-empty reason -> allow + log + consume; 2nd edit blocked ---
+tmp="$(mktemp -d)"; mkdir -p "$tmp/.claude"
+printf 'fixing eslint false-positive' > "$tmp/.claude/.config-edit-ok"
+( cd "$tmp" && printf '{"tool_name":"Edit","tool_input":{"file_path":"/x/doctor.sh"}}' \
+  | HOME="$tmp" bash "$H" ) >/dev/null 2>&1
+check T15-sentinel-allow "$?" 0
+check T15-consumed "$([ -e "$tmp/.claude/.config-edit-ok" ] && echo present || echo gone)" gone
+check T15-logged "$(grep -c 'BYPASS.*doctor.sh.*fixing eslint' \
+  "$tmp/.claude/logs/config-protection.log" 2>/dev/null)" 1
+( cd "$tmp" && printf '{"tool_name":"Edit","tool_input":{"file_path":"/x/doctor.sh"}}' \
+  | HOME="$tmp" bash "$H" ) >/dev/null 2>&1
+check T16-second-blocked "$?" 2
+rm -rf "$tmp"
+
+# --- Sentinel with EMPTY reason -> refused + consumed ---
+tmp="$(mktemp -d)"; mkdir -p "$tmp/.claude"; : > "$tmp/.claude/.config-edit-ok"
+( cd "$tmp" && printf '{"tool_name":"Edit","tool_input":{"file_path":"/x/doctor.sh"}}' \
+  | HOME="$tmp" bash "$H" ) >/dev/null 2>&1
+check T17-empty-refused "$?" 2
+check T17-consumed "$([ -e "$tmp/.claude/.config-edit-ok" ] && echo present || echo gone)" gone
+rm -rf "$tmp"
+
+printf 'PASS=%s FAIL=%s\n' "$pass" "$fail"; [ "$fail" -eq 0 ]

lib/tests/design-toolchain-reminder.test.sh

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+# lib/tests/design-toolchain-reminder.test.sh
+set -u
+H="$(cd "$(dirname "$0")/../.." && pwd)/hooks/design-toolchain-reminder.sh"
+pass=0; fail=0
+check() { if [ "$2" = "$3" ]; then pass=$((pass+1)); else fail=$((fail+1));
+  printf 'FAIL %s: got[%s] want[%s]\n' "$1" "$2" "$3"; fi; }
+# fire() -> "fire" if the hook emits the reminder, else "quiet".
+fire() { if printf '{"prompt":"%s"}' "$1" | bash "$H" | grep -q "design-toolchain"; then
+  echo fire; else echo quiet; fi; }
+
+# --- Dropped/neutralized tokens must be QUIET (non-UI senses) ---
+check D1-design      "$(fire 'a design decision for the API')" quiet
+check D2-component   "$(fire 'this system component')"         quiet
+check D3-composant   "$(fire 'le composant backend')"          quiet
+check D4-theme       "$(fire 'the theme of the audit')"        quiet
+check D5-transition  "$(fire 'state transition to develop')"   quiet
+check D6-frontend    "$(fire 'frontend architecture')"         quiet
+check D7-palette     "$(fire 'a palette of options')"          quiet
+check D8-dash-file   "$(fire 'ecc_dashboard.py')"              quiet
+
+# --- Real UI signals must still FIRE ---
+check F1-button      "$(fire 'add a button')"            fire
+check F2-navbar      "$(fire 'the navbar layout')"       fire
+check F3-landing     "$(fire 'build a landing page')"    fire
+check F4-glass       "$(fire 'a glassmorphism card')"    fire
+check F5-redesign    "$(fire 'redesign the app')"        fire
+check F6-frontdesign "$(fire 'frontend design work')"    fire
+check F7-admin-dash  "$(fire 'admin dashboard screen')"  fire
+check F8-animation   "$(fire 'add an animation')"        fire
+check F9-designsys   "$(fire 'our design system')"       fire
+
+# --- Fire is logged (time + token + excerpt) ---
+tmp="$(mktemp -d)"
+printf '{"prompt":"a glassmorphism card"}' | HOME="$tmp" bash "$H" >/dev/null 2>&1
+check L1-logged "$(grep -c 'glassmorph' "$tmp/.claude/logs/design-toolchain-fires.log" 2>/dev/null)" 1
+rm -rf "$tmp"
+
+printf 'PASS=%s FAIL=%s\n' "$pass" "$fail"; [ "$fail" -eq 0 ]

settings.json

@@ -245,6 +245,16 @@
             "command": "bash ~/.claude/hooks/rtk-rewrite.sh"
           }
         ]
+      },
+      {
+        "matcher": "Edit|Write|MultiEdit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "bash ~/.claude/hooks/config-protection.sh",
+            "timeout": 5
+          }
+        ]
       }
     ],
     "UserPromptSubmit": [