echook

Imported from ChanMeng666/echook (AGENTS.md). Install upstream with npx skills add ChanMeng666/echook. Copyright stays with the author.

echook — AI Operator Guide

v6.5.1 · Multi-platform: Claude Code (plugin) · Cursor (native + auto-bridge) · Codex (plugin + native). Source-of-truth for every capability is audio-hooks manifest (live JSON, includes pointers, editor_targets, supported_editors). This file is orientation only.

Install commands

Verify with audio-hooks status + audio-hooks diagnose + audio-hooks test all.

Hook events and matcher variants (v6.4)

39 canonical events + 44 matcher variants. A variant is one matcher value of a matcher-scoped event — notification has 16 (notification_idle_prompt, notification_worker_permission_prompt, …), stop_failure 11, session_start 5, session_end 4, precompact/postcompact/setup/directory_added 2 each. Since v6.4 each is independently switchable; before that they all shared their parent's single flag.

• Variant keys are ordinary booleans in enabled_hooks, alongside canonical names. No nesting, no schema change.
• audio-hooks hooks list --variants to enumerate; hooks enable|disable|enable-only accept variant names.
• Live truth: audio-hooks manifest → variants and variant_gating.

Gating precedence (hook_runner.is_hook_enabled(hook, variant)), highest first — the second rule is the one that surprises people:

1. explicit enabled_hooks[<variant>]
2. enabled_hooks[<parent>] is false — hard kill switch for every variant under it
3. per-variant default (SYNTHETIC_VARIANT_DEFAULTS)
4. explicit enabled_hooks[<parent>] is true
5. built-in default set: notification, stop, permission_request

To keep exactly one variant of a muted parent, set that variant key explicitly — rule 1 outranks rule 2. Never reach for the parent to express "all but one".

Registration chain. hooks.json matcher X → command arg <parent>_X → SYNTHETIC_EVENT_MAP["<parent>_X"] → (canonical, audio_override). Nothing enforces this at runtime — an unresolvable arg falls through _resolve_synthetic_event and the event silently becomes a permanent no-op. tests/test_plugin_hooks_contract.py is what makes a break loud; run it after touching any of those three surfaces.

stop does not mean "task complete"

Its mirror image is the second most common complaint: "the task-finished sound stopped working." That is almost always this same advice having been taken earlier — stop sitting at false in user_preferences.json months later, with the user reading the silence as an upstream regression. audio-hooks diagnose reports it as NO_COMPLETION_SIGNAL when notification is off too. Check hooks list before investigating Claude Code; the restore is:

audio-hooks hooks enable stop
audio-hooks set filters.stop.skip_if_background_tasks_running true

The single most common user complaint is audio firing too often, and it is almost always stop. It maps to Claude Code's Stop, which fires at the end of every turn; the payload carries no field distinguishing a final turn from an intermediate one, so no configuration can make it mean "the work is done". Say this rather than tuning debounce and hoping. Real fixes, in order: hooks enable-only notification permission_request (fires only when the user must act — idle_prompt is the genuine "waiting for you" signal); filters.stop.skip_if_background_tasks_running true (v6.4, stays quiet while teammates/subagents are still running); debounce last.

Tests, CI, and version bumps

• Run tests: python -m unittest discover -v tests (399 tests). NOT pytest — no pyproject.toml / pytest.ini.
• CI: .github/workflows/smoke.yml — Ubuntu/Windows/macOS × Python 3.9/3.12/3.13, plus bash scripts/build-plugin.sh --check.
• Bump version: bash scripts/bump-version.sh <new_version> — rewrites all 11 canonical version locations (locations 9-11 are config/default_preferences.json — see the gotcha below) and runs build-plugin.sh. Idempotent. Outputs JSON with files_changed and next_steps.

Pointers (also exposed as audio-hooks manifest.pointers)

• Natural-language → CLI mapping: plugins/audio-hooks/skills/audio-hooks/SKILL.md (auto-loaded on audio-related prompts — covers the full decision tree).
• Status line (both editors): docs/STATUS_LINE.md — the complete reference for track 2 (Claude Code renders 29 segments; Codex curates a fixed item list). Live truth: audio-hooks statusline segments / audio-hooks statusline codex show.
• Observed event behaviour: docs/EVENT_BEHAVIOR_NOTES.md — what Claude Code's hook events actually do, measured, where that differs from or is absent from the upstream docs. Consult before trusting an event name.
• Human docs: README.md, docs/INSTALLATION_GUIDE.md, CHANGELOG.md, docs/ARCHITECTURE.md, docs/TROUBLESHOOTING.md.
• Canonical sources: /hooks/, /bin/, /audio/, /config/, /cursor-hooks/, /codex-hooks/. /plugins/audio-hooks/{audio,bin,hooks,config,cursor-hooks,codex-hooks}/ mirror these — never edit by hand. plugin.json, runner/run.py, skills/ are hand-edited under /plugins/audio-hooks/ directly.

Silent-bite gotchas

• terminalSequence (v6.5.0) is inert and must not be recommended. Claude Code writes a hook's OSC escape from exactly one function, called only on synchronous completion paths; all 67 handlers in the Claude Code template are async: true, so the escape is never emitted. Measured live (async 0/3, sync 2/2) — see docs/EVENT_BEHAVIOR_NOTES.md. diagnose reports TERMINAL_SEQUENCE_INERT. For a desktop toast, point users at notification_settings.mode = audio_and_notification. Do not "fix" it by flipping the existing handlers to sync — that puts a Python start-up on the end of every turn; the recorded design is a second minimal sync handler beside the async one.
• PreModelSwitch must never be registered. Claude Code 2.1.251 added PreModelSwitch/PostModelSwitch. PreModelSwitch is a blocking decision hook — permissionDecision: allow|deny|ask, "same contract as PreToolUse" — and Claude Code waits for it, with six distinct error strings for a hook that does not answer (model switch blocked by a PreModelSwitch hook, did not respond before its timeout, Fast mode was not changed: the PreModelSwitch check failed). Same trap as WorktreeCreate in v6.3.4. PostModelSwitch is the safe one (additionalContext only) and is cleared for a later release; see docs/EVENT_BEHAVIOR_NOTES.md for its payload and the registration steps.
• Do not migrate hooks.json to the args exec form. It looks like the fix for every Windows quoting bug — "spawned directly with these arguments — no shell" — but anthropics/claude-code#90495 reports args being dropped on Windows and still routed through bash.exe with no argv. Windows is this project's primary platform. Shell form stays.
• Two escapers, and using the wrong one is silent. escape_powershell_string() (backticks) is for PowerShell; _escape_notification_string() (backslashes) is for macOS osascript only. Through 6.5.0 the Windows toast used the osascript one, so any notification containing a " produced a script that failed to parse and no toast at all — invisible, because the dispatch was fire-and-forget into DEVNULL and returned True regardless. It shipped twice — send_desktop_notification() and play_tts(), so Windows/WSL TTS went silent on the same inputs. Both fixed in 6.5.1; the osascript escaper now reaches exactly one branch (macOS). If you add a platform branch that builds a shell string, pick the escaper that matches the shell and add a parse assertion to tests/test_desktop_notification.py — the real guard is feeding the generated script to PowerShell's own parser, not comparing strings.
• _migrate_if_needed is gated structurally, not on the version string. Through 6.5.0 it returned early whenever user._version == template._version, and config/default_preferences.json was left stamped 5.1.5 from 5.1.5 through 6.5.0 — so for a large class of installs migration never ran and four minor versions of new keys never landed. scripts/bump-version.sh now owns that stamp as canonical locations 9–11. If you add a version location, add it there too.
• A dead notification channel used to look identical to a working one. send_desktop_notification() now logs desktop_notification at info with the backend it used, and emits NOTIFICATION_FAILED when every backend fails. Keep it that way: anything that dispatches fire-and-forget into DEVNULL and returns True is unfalsifiable, and this project has now shipped that bug once.
• Cursor does not inject CLAUDE_PLUGIN_DATA when bridging — UserPreferences._resolve_data_dir() in hooks/user_preferences.py is the fallback chain. Do not assume the env var exists. Codex is the opposite: it does inject CLAUDE_PLUGIN_ROOT/CLAUDE_PLUGIN_DATA compat aliases alongside its native PLUGIN_ROOT/PLUGIN_DATA, so do not generalise Cursor's behaviour to it.
• Codex sets no CODEX_VERSION env var. Invoker detection uses the --invoker codex CLI flag baked into the Codex install template, parsed by hooks/invoker.py.
• Claude Code registers 30 of the 39 canonical events plus 44 matcher variants; Cursor (native: 19 template entries → 18 distinct events, incl. granular per-tool shell/MCP/file events; auto-bridge: 8 coarse) and Codex (11 of 39) have smaller hook surfaces and no variant support. The other 9 canonical events are Cursor-only (shell_*, mcp_*, file_read, agent_response, agent_thinking, workspace_open, tab_file_edit) and Claude Code has no equivalent — manifest.supported_editors["claude-code"].events is derived from the template, not from HOOK_CATALOG (before v6.4.1 it was, and wrongly claimed every canonical event). Codex's 11th event, SessionEnd, is registered by install --codex only when the installed Codex is ≥ 0.145.0. The runner no-ops unsupported events with skipped_no_*_equivalent debug NDJSON.
• Windows paths in install templates must be JSON-escaped (D:\path → D:\\path). 5.1.6 fix; covered by tests/test_codex_hooks.py and tests/test_cursor_bridge.py.
• plugins/audio-hooks/hooks/hooks.json is hand-edited and has no repo-root counterpart. It sits inside an otherwise generated directory and build-plugin.sh does not sync it, so it looks generated but isn't. Edit it in place; build-plugin.sh will not carry your change and will not warn you.
• A new variant of an on-by-default parent needs SYNTHETIC_VARIANT_DEFAULTS[<variant>] = False. Otherwise merely registering the matcher starts making noise on every existing install the moment it ships. New events are opt-in; new variants are too.
• Every event and every variant owns a distinct sound (83 slots, 83 files, both themes). A variant that reuses its parent's file is audibly identical to it, so its independent toggle buys the user nothing. Add the audio override and the two config/audio_manifest.json entries; tests/test_plugin_hooks_contract.py::TestAudioUniqueness fails on a shared file, a variant with no override, a file missing from either theme, or two identical manifest prompts.
• Verify an event's real semantics empirically before relying on its name. v6.3.4 was an emergency rollback because WorktreeCreate turned out to be a provider hook that hijacked worktree creation. Observed-vs-documented behaviour for Claude Code's events — including payload fields the docs omit and matchers that never fire — lives in docs/EVENT_BEHAVIOR_NOTES.md. Read it before adding or trusting an event.