0.35.2
Turned on the PreToolUse guard and cleared a stale scaffold
The PreToolUse slot had been open since v0.6.0. It is now filled by a hook that blocks irreversible shell commands before they run — the first Kiyo hook that blocks rather than advises.
- Behavior change after install: the guard blocks git push --force, git reset --hard, git clean -f, git checkout ., and rm -rf outside build output
- Cleanup of node_modules, bin, obj, dist, coverage, TestResults, and /tmp still works, on relative paths only — absolute paths stay blocked, so rm -rf /bin is never mistaken for rm -rf bin
- It fails open: an unreadable payload allows the command, because a guard that cannot see what it is guarding must not break every shell call
- dotnet-post-project-change.js is registered as a PostToolUse advisory; the other three scripts stay unregistered, notably dotnet-post-edit-format.js, whose format-on-every-edit conflicts with surgical-change discipline
- Removed the empty kiyo-plan directory from the Codex package. It was not a missing command but a scaffold with no SKILL.md at all, so all three hosts now carry 83 skills
- Added two parity guards: no Codex skill directory without a Claude counterpart, and every skill directory must contain a SKILL.md