fix(hooks): Read stdin JSON in dangerous-cmd/pre-commit-lint/enforce-uv

These three PreToolUse hooks read only $1, so under the modern hook
contract (tool call delivered as JSON on stdin) they received an empty
INPUT and silently no-op'd — including the destructive-command block.

Copy the exact stdin-JSON pattern already used by every other
Bash-matcher hook (pre-install-scan.sh, worktree-guard.sh): when $1 is
empty and stdin is not a TTY, read stdin and extract
.tool_input.command via jq, keeping $1 as the legacy fallback. Matching
logic and exit-code semantics (deny=2 vs allow=0) are unchanged.

Verified by piping sample PreToolUse payloads into each script (fires
on "git push --force", "git commit", "pip install"; exits 0 on safe
commands and empty input) and confirming the legacy $1 path still
works. tests/validate.sh: 111 passed, 0 failed.

NOTE: ~/.claude is a copy of this repo — re-run scripts/install.ps1
after landing or the stale global hooks keep no-op'ing.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

hooks/dangerous-cmd-warn.sh

@@ -18,10 +18,17 @@
 #   2 = block with message (dangerous command detected)
 
 INPUT="$1"
-
-if [[ -z "$INPUT" ]]; then
-  exit 0
+# Modern Claude Code delivers the tool call as JSON on stdin
+# ({"tool_input":{"command":"..."}}); older configs pass it as $TOOL_INPUT/$1.
+# Support both so the hook works regardless of harness version.
+if [[ -z "$INPUT" && ! -t 0 ]]; then
+  RAW="$(cat 2>/dev/null)"
+  if [[ -n "$RAW" ]] && command -v jq >/dev/null 2>&1; then
+    INPUT="$(printf '%s' "$RAW" | jq -r '.tool_input.command // .tool_input // empty' 2>/dev/null)"
+  fi
+  [[ -z "$INPUT" ]] && INPUT="$RAW"
 fi
+[[ -z "$INPUT" ]] && exit 0
 
 # -------------------------------------------------------------------
 # Dangerous patterns and their risk descriptions

hooks/enforce-uv.sh

@@ -28,7 +28,16 @@
 #   - Honors ENFORCE_UV=0 to disable for a single command or session.
 
 INPUT="$1"
-
+# Modern Claude Code delivers the tool call as JSON on stdin
+# ({"tool_input":{"command":"..."}}); older configs pass it as $TOOL_INPUT/$1.
+# Support both so the hook works regardless of harness version.
+if [[ -z "$INPUT" && ! -t 0 ]]; then
+  RAW="$(cat 2>/dev/null)"
+  if [[ -n "$RAW" ]] && command -v jq >/dev/null 2>&1; then
+    INPUT="$(printf '%s' "$RAW" | jq -r '.tool_input.command // .tool_input // empty' 2>/dev/null)"
+  fi
+  [[ -z "$INPUT" ]] && INPUT="$RAW"
+fi
 [[ -z "$INPUT" ]] && exit 0
 [[ "$ENFORCE_UV" == "0" ]] && exit 0
 

hooks/pre-commit-lint.sh

@@ -14,6 +14,17 @@
 # }
 
 INPUT="$1"
+# Modern Claude Code delivers the tool call as JSON on stdin
+# ({"tool_input":{"command":"..."}}); older configs pass it as $TOOL_INPUT/$1.
+# Support both so the hook works regardless of harness version.
+if [[ -z "$INPUT" && ! -t 0 ]]; then
+  RAW="$(cat 2>/dev/null)"
+  if [[ -n "$RAW" ]] && command -v jq >/dev/null 2>&1; then
+    INPUT="$(printf '%s' "$RAW" | jq -r '.tool_input.command // .tool_input // empty' 2>/dev/null)"
+  fi
+  [[ -z "$INPUT" ]] && INPUT="$RAW"
+fi
+[[ -z "$INPUT" ]] && exit 0
 
 # Only trigger on git commit commands
 if ! echo "$INPUT" | grep -qE 'git\s+commit'; then