~/chadacus.dev/ecosystem-update/2026-04-02

Ecosystem Update — 2026-04-02

April 2, 2026 · curated by Chad Simon · 16 items reviewed

Highlights

  • All isolation-eligible agents now have isolation: worktree — isolation coverage complete
  • type: prompt hooks confirmed by community — allows inline LLM-as-validator hooks with no Python script required; verify syntax before wiring
  • Build Queue additions: Dippy (AST bash auto-approve), claude-rules-doctor (dead-rule detector), claude-tmux

New Tools, Skills & Patterns

  • Dippy hook
    AST-based bash auto-approve that semantically classifies safe vs destructive commands; complements pre_tool_guard.py's regex approach with actual syntax-tree analysis
  • claude-rules-doctor tool
    Detects dead .claude/rules/ globs by validating patterns match files; wire to SessionStart or run periodically as CLAUDE.md grows
  • claude-tmux mcp/client
    Manage Claude Code sessions within tmux; pairs with existing worktree + parallel-agent patterns
  • PermissionDenied hook hook
    coleam00/claude-code-new-features-early-2026
    New hook event (not in current settings.json); fires when permission is denied; verify event name stability before wiring script
  • TDD Guard hook
    PostToolUse hook blocking non-TDD file changes _(carried from previous run)_
  • cc-devops-skills skill
    IaC-focused DevOps skills with validators, generators, CLI tools _(carried from previous run)_

Research Worth Reading

  • type: prompt hook type — gist community — Hooks can use "type": "prompt" to run inline LLM-as-validator without a Python script; Impact=2, Effort=1 — verify exact settings.json syntax against official docs before implementing. If confirmed, can replace some lightweight Python guard scripts.
  • type: prompt hooks on Stop / PostToolUse — Could add natural-language verification at Stop ("did this complete all acceptance criteria?") with zero new scripts; pending syntax verification
  • Session Teleportation / --teleport — built-in CLI flag _(carried)_
  • Dynamic !command injection in SKILL.md — embed shell output at skill load time _(carried)_

Considered, Not Adopting

Items reviewed and explicitly declined this cycle, with the reason. Curation discipline matters more than coverage.

  • parryremoved 2026-04-02: false-positive taint blocked all tools session-wide; more harmful than protective at current sensitivity level
  • container-use (dagger)alignment failure: git worktrees already provide agent isolation; Docker-based isolation requires a new service dependency without proof worktrees are insufficient
  • TypeScript Quality Hookscovered by typescript-reviewer agent
  • cchooks Python SDK / claude-hooks TypeScript SDKexisting Python scripts work without an SDK layer
  • Claudio sounds hookminor convenience only
  • Britfixirrelevant to
// archive

← back to all digests