Ecosystem Update — 2026-04-02
Highlights
- All isolation-eligible agents now have
isolation: worktree— isolation coverage complete type: prompthooks confirmed by community — allows inline LLM-as-validator hooks with no Python script required; verify syntax before wiring- Build Queue additions: Dippy (AST bash auto-approve), claude-rules-doctor (dead-rule detector), claude-tmux
New Tools, Skills & Patterns
-
Dippy hookAST-based bash auto-approve that semantically classifies safe vs destructive commands; complements
pre_tool_guard.py's regex approach with actual syntax-tree analysis -
claude-rules-doctor toolDetects dead
.claude/rules/globs by validating patterns match files; wire to SessionStart or run periodically as CLAUDE.md grows -
claude-tmux mcp/clientManage Claude Code sessions within tmux; pairs with existing worktree + parallel-agent patterns
-
PermissionDenied hook hookNew hook event (not in current settings.json); fires when permission is denied; verify event name stability before wiring script
-
TDD Guard hookPostToolUse hook blocking non-TDD file changes _(carried from previous run)_
-
cc-devops-skills skillIaC-focused DevOps skills with validators, generators, CLI tools _(carried from previous run)_
Research Worth Reading
-
type: prompthook type — gist community — Hooks can use"type": "prompt"to run inline LLM-as-validator without a Python script; Impact=2, Effort=1 — verify exact settings.json syntax against official docs before implementing. If confirmed, can replace some lightweight Python guard scripts. -
type: prompthooks on Stop / PostToolUse — Could add natural-language verification at Stop ("did this complete all acceptance criteria?") with zero new scripts; pending syntax verification -
Session Teleportation / --teleport — built-in CLI flag _(carried)_
-
Dynamic
!commandinjection in SKILL.md — embed shell output at skill load time _(carried)_
Considered, Not Adopting
Items reviewed and explicitly declined this cycle, with the reason. Curation discipline matters more than coverage.
- parry — removed 2026-04-02: false-positive taint blocked all tools session-wide; more harmful than protective at current sensitivity level
- container-use (dagger) — alignment failure: git worktrees already provide agent isolation; Docker-based isolation requires a new service dependency without proof worktrees are insufficient
- TypeScript Quality Hooks — covered by typescript-reviewer agent
- cchooks Python SDK / claude-hooks TypeScript SDK — existing Python scripts work without an SDK layer
- Claudio sounds hook — minor convenience only
- Britfix — irrelevant to