chore(discipline): regenerate agent hooks for v0.18.0

[orieg]

What

Regenerates every tracked discipline hook file with discipline hook install --observe --upgrade using the local 0.18.0 CLI — the same engine the v0.18.0 action (landed in #218) runs.

Why

The v0.14.4-era hook files had silently drifted from what this release actually writes:

• v0.15+ added PreToolUse / preToolUse entries — none present in any agent config
• v0.17 added session-start lease entries — the worktree-isolation mechanism
• v0.18 added the OpenCode plugin — never installed in this repo

Hooks run observe mode everywhere (the repo's existing convention), so no hook refuses a tool call; the regeneration only changes what the next agent sees after an edit. Tracked files now match a clean 0.18.0 install, so the drift stops silently diverging.

Changes

File	Agent	What changed
.claude/settings.json	claude-code	PreToolUse on Edit|Write|MultiEdit|NotebookEdit|Bash; session-start lease; PATH guard on every command
.github/hooks/discipline.json	copilot	preToolUse + sessionStart entries (v0.15+ shape); PATH guard
.agents/hooks.json	agy	PreToolUse; session-start lease; PATH guard; Stop timeout 120s → 300s (agy default this release writes)
.claude/hooks/discipline-bootstrap.sh	claude-code	version v0.14.4 → v0.18.0; tmpdir trap; cloud-host note
.opencode/plugins/discipline.js	opencode (new)	the v0.17+/v0.18 plugin — worktree lease on start, pre-tool worktree refusal, post-edit report append; observe mode

.github/workflows/copilot-setup-steps.yml was left untouched by the installer (already matches the 0.18.0 output; pin landed in #218).

Gate notes

The four agent instruction files + the new plugin each lift one instruction-smuggling finding, and the plugin's six catch {} blocks lift error-swallowing — all via scoped directives in the commit body (one allow-agent-instructions: / allow-swallow: line per subject), the same pattern this repo used for the AGENTS.md edit in #217. The empty catches are the plugin's observe-mode contract: a discipline hook must never throw or it would disrupt the agent's tool call.

Validation

• Local 0.18.0 discipline check --base origin/main: PASS (27 gates, 0 errors, 0 warnings; 11 overrides = 11 directive applications above)
• All hook files byte-match discipline hook install 0.18.0 output (the plugin is byte-identical to orieg/discipline's own tracked copy)

[github-actions]

discipline: passed

Base main (origin/main) (merge base 33066a3a72) · 27 gate(s) passed · 2180 item(s) examined · 0 warning(s) · 11 override(s)

Findings lifted by an override:

• error-swallowing on .opencode/plugins/discipline.js: .opencode/plugins/discipline.js observe-mode plugin contract: every empty catch is deliberate — a discipline hook must never throw or the agent's tool call is disrupted; catch {} is the tool's generated output
• error-swallowing on .opencode/plugins/discipline.js: .opencode/plugins/discipline.js observe-mode plugin contract: every empty catch is deliberate — a discipline hook must never throw or the agent's tool call is disrupted; catch {} is the tool's generated output
• error-swallowing on .opencode/plugins/discipline.js: .opencode/plugins/discipline.js observe-mode plugin contract: every empty catch is deliberate — a discipline hook must never throw or the agent's tool call is disrupted; catch {} is the tool's generated output
• error-swallowing on .opencode/plugins/discipline.js: .opencode/plugins/discipline.js observe-mode plugin contract: every empty catch is deliberate — a discipline hook must never throw or the agent's tool call is disrupted; catch {} is the tool's generated output
• error-swallowing on .opencode/plugins/discipline.js: .opencode/plugins/discipline.js observe-mode plugin contract: every empty catch is deliberate — a discipline hook must never throw or the agent's tool call is disrupted; catch {} is the tool's generated output
• error-swallowing on .opencode/plugins/discipline.js: .opencode/plugins/discipline.js observe-mode plugin contract: every empty catch is deliberate — a discipline hook must never throw or the agent's tool call is disrupted; catch {} is the tool's generated output
• instruction-smuggling on .agents/hooks.json: .agents/hooks.json regenerated by discipline hook install --agent agy --upgrade to v0.18.0 hook format (PreToolUse entry, session-start lease, PATH guard, Stop timeout 300s)
• instruction-smuggling on .claude/hooks/discipline-bootstrap.sh: .claude/hooks/discipline-bootstrap.sh regenerated by discipline hook install --agent claude-code --upgrade to v0.18.0 (version v0.14.4 -> v0.18.0, tmpdir trap, cloud-host note)
• instruction-smuggling on .claude/settings.json: .claude/settings.json regenerated by discipline hook install --agent claude-code --upgrade to v0.18.0 hook format (PreToolUse entry, session-start lease, PATH guards)
• instruction-smuggling on .github/hooks/discipline.json: .github/hooks/discipline.json regenerated by discipline hook install --agent copilot --upgrade to v0.18.0 hook format (preToolUse + sessionStart entries, PATH guards)
• instruction-smuggling on .opencode/plugins/discipline.js: .opencode/plugins/discipline.js regenerated by discipline hook install --agent opencode --upgrade to v0.18.0; observe-mode OpenCode plugin (session-start lease, pre-tool worktree refusal, post-edit report append) marked as its own instruction source

_{discipline explain <gate> prints what a gate checks and how a finding is lifted. This comment is updated on every run; the check's status is the verdict.}