fix: fix Claude Code hooks for Windows and add branch name validation

- enrich-context.sh: move backslash normalization into node (bash
  ${VAR//\//} fails on Git Bash); use additionalContext output format
  so context surfaces in Claude's conversation; include file/symbol
  details instead of just counts
- guard-git.sh: add branch name validation on git push — blocks
  branches that don't match the conventional prefix pattern
  (feat/, fix/, docs/, etc.)
- rebuild-graph.sh → update-graph.sh: rename to reflect incremental
  behavior; fix same backslash normalization bug
- settings.json: bump enrich-context timeout to 10s, reference renamed
  update-graph.sh

Author: github-actions[bot]

.claude/hooks/enrich-context.sh

@@ -8,20 +8,23 @@ set -euo pipefail
 # Read the tool input from stdin
 INPUT=$(cat)
 
-# Extract file path based on tool type
-# Read tool uses tool_input.file_path, Grep uses tool_input.path
-FILE_PATH=$(echo "$INPUT" | node -e "
+# Extract file path and convert to relative — all in node to avoid
+# bash backslash issues on Windows/Git Bash
+REL_PATH=$(printf '%s' "$INPUT" | CLAUDE_PROJECT_DIR="${CLAUDE_PROJECT_DIR:-.}" node -e "
   let d='';
   process.stdin.on('data',c=>d+=c);
   process.stdin.on('end',()=>{
     const o=JSON.parse(d).tool_input||{};
-    const p=o.file_path||o.path||'';
-    if(p)process.stdout.write(p);
+    let p=(o.file_path||o.path||'').replace(/\\\\/g,'/');
+    if(!p)return;
+    let dir=(process.env.CLAUDE_PROJECT_DIR||'.').replace(/\\\\/g,'/');
+    if(p.startsWith(dir))p=p.slice(dir.length+1);
+    process.stdout.write(p);
   });
 " 2>/dev/null) || true
 
 # Guard: no file path found
-if [ -z "$FILE_PATH" ]; then
+if [ -z "$REL_PATH" ]; then
   exit 0
 fi
 
@@ -36,15 +39,6 @@ if ! command -v codegraph &>/dev/null && ! command -v npx &>/dev/null; then
   exit 0
 fi
 
-# Convert absolute path to relative (strip project dir prefix)
-REL_PATH="$FILE_PATH"
-PROJECT_DIR="${CLAUDE_PROJECT_DIR:-.}"
-if [[ "$FILE_PATH" == "${PROJECT_DIR}"* ]]; then
-  REL_PATH="${FILE_PATH#"${PROJECT_DIR}"/}"
-fi
-# Normalize backslashes to forward slashes (Windows compatibility)
-REL_PATH="${REL_PATH//\\//}"
-
 # Run codegraph deps and capture output
 DEPS=""
 if command -v codegraph &>/dev/null; then
@@ -58,20 +52,24 @@ if [ -z "$DEPS" ] || [ "$DEPS" = "null" ]; then
   exit 0
 fi
 
-# Output as informational context (never deny)
-echo "$DEPS" | node -e "
+# Output as additionalContext so it surfaces in Claude's context
+printf '%s' "$DEPS" | node -e "
   let d='';
   process.stdin.on('data',c=>d+=c);
   process.stdin.on('end',()=>{
     try {
       const o=JSON.parse(d);
       const r=o.results?.[0]||{};
-      const imports=(r.imports||[]).length;
-      const importedBy=(r.importedBy||[]).length;
-      const defs=(r.definitions||[]).length;
+      const imports=(r.imports||[]).map(i=>i.file).join(', ');
+      const importedBy=(r.importedBy||[]).map(i=>i.file).join(', ');
+      const defs=(r.definitions||[]).map(d=>d.kind+' '+d.name).join(', ');
       const file=o.file||'unknown';
+      let ctx='[codegraph] '+file;
+      if(imports)ctx+='\n  Imports: '+imports;
+      if(importedBy)ctx+='\n  Imported by: '+importedBy;
+      if(defs)ctx+='\n  Defines: '+defs;
       console.log(JSON.stringify({
-        hookSpecificOutput: 'Codegraph context for '+file+':\\n  Imports: '+imports+' files\\n  Imported by: '+importedBy+' files\\n  Definitions: '+defs+' symbols'
+        hookSpecificOutput: { additionalContext: ctx }
       }));
     } catch(e) {}
   });

.claude/hooks/guard-git.sh

@@ -74,6 +74,18 @@ if echo "$COMMAND" | grep -qE '^\s*git\s+stash'; then
   deny "BLOCKED: 'git stash' hides all working tree changes including other sessions' work. In worktree mode, commit your changes directly instead."
 fi
 
+# --- Branch name validation on push ---
+
+if echo "$COMMAND" | grep -qE '^\s*git\s+push'; then
+  BRANCH=$(git rev-parse --abbrev-ref HEAD 2>/dev/null) || true
+  if [ -n "$BRANCH" ] && [ "$BRANCH" != "main" ] && [ "$BRANCH" != "HEAD" ]; then
+    PATTERN="^(feat|fix|docs|refactor|test|chore|ci|perf|build|release|dependabot|revert)/"
+    if [[ ! "$BRANCH" =~ $PATTERN ]]; then
+      deny "BLOCKED: Branch '$BRANCH' does not match required pattern. Branch names must start with: feat/, fix/, docs/, refactor/, test/, chore/, ci/, perf/, build/, release/, revert/"
+    fi
+  fi
+fi
+
 # --- Commit validation against edit log ---
 
 if echo "$COMMAND" | grep -qE '^\s*git\s+commit'; then

.claude/hooks/rebuild-graph.sh .claude/hooks/update-graph.sh.claude/hooks/rebuild-graph.sh renamed to .claude/hooks/update-graph.sh

@@ -1,18 +1,19 @@
 #!/usr/bin/env bash
 # rebuild-graph.sh — PostToolUse hook for Edit and Write tools
-# Incrementally rebuilds the codegraph after source file edits.
+# Incrementally updates the codegraph after source file edits.
 # Always exits 0 (informational only, never blocks).
 
 set -euo pipefail
 
 INPUT=$(cat)
 
-# Extract file path using node (jq may not be available on Windows)
+# Extract file path and normalize backslashes — all in node to avoid
+# bash backslash issues on Windows/Git Bash
 FILE_PATH=$(echo "$INPUT" | node -e "
   let d='';
   process.stdin.on('data',c=>d+=c);
   process.stdin.on('end',()=>{
-    const p=JSON.parse(d).tool_input?.file_path||'';
+    const p=(JSON.parse(d).tool_input?.file_path||'').replace(/\\\\/g,'/');
     if(p)process.stdout.write(p);
   });
 " 2>/dev/null) || true

.claude/settings.json

@@ -22,7 +22,7 @@
           {
             "type": "command",
             "command": "bash \"$CLAUDE_PROJECT_DIR/.claude/hooks/enrich-context.sh\"",
-            "timeout": 5
+            "timeout": 10
           }
         ]
       },
@@ -32,7 +32,7 @@
           {
             "type": "command",
             "command": "bash \"$CLAUDE_PROJECT_DIR/.claude/hooks/enrich-context.sh\"",
-            "timeout": 5
+            "timeout": 10
           }
         ]
       }
@@ -43,7 +43,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "bash \"$CLAUDE_PROJECT_DIR/.claude/hooks/rebuild-graph.sh\"",
+            "command": "bash \"$CLAUDE_PROJECT_DIR/.claude/hooks/update-graph.sh\"",
             "timeout": 30
           },
           {