fix(claude-init): write hooks with full binary path instead of bare 'agentguard'

[jpleva91]

Problem

agentguard claude-init writes hooks in .claude/settings.json that reference bare agentguard:

"command": "agentguard claude-hook stop --store sqlite"

This fails with agentguard: not found when the binary isn't on PATH (common in npm projects where it's only in node_modules/.bin/).

Expected

Hooks should use the resolved binary path:

"command": "bash -c '\${AGENTGUARD_BIN:-./node_modules/.bin/agentguard} claude-hook stop --store sqlite'"

Impact

Every repo that installs AgentGuard via npm gets broken Stop/PostToolUse/Notification hooks. PreToolUse works because it goes through claude-hook-wrapper.sh.

Workaround

Manually edit .claude/settings.json to use the full path (done in workspace, cloud, analytics).

---

Filed via dogfood — discovered during rollout pipeline setup

[jpleva91]

HQ EM Escalation (2026-03-26T07:10Z)

Priority: P0 / Critical

This blocks the v3.0 stranger test (#919). Every npm consumer running agentguard claude-init gets broken Stop/PostToolUse/Notification hooks because the bare agentguard command isn't on PATH.

Sequencing: Fix #964 first → then #955 (wire Go kernel into hook path) → then #957 (Go kernel pack/YAML resolution).

Assigned to kernel squad. This should be the next item kernel picks up.