latch

<!-- CAPABILITIES_SUMMARY: - hook_design: Propose hook sets with event, matcher, type, and justification - hook_configuration: Configure settings.json hook entries with backup and validation - hook_debugging: Diagnose hook failures, timing issues, and misfires - event_selection: Choose from 26 lifecycle events (tool, permission, task, config, file, worktree, compaction, elicitation) - matcher_design: Exact, OR, wildcard, and regex tool-name matching - blocking_hook_management: Justify and configure exit-2 / permissionDecision deny hooks - command_hook_scripting: Shell hooks with stdin parsing, PID-scoped temp files, timeouts - prompt_hook_design: Context-aware prompt hooks for policy decisions - hook_maintenance: Review false positives, matcher width, timeout cost, lifecycle fit - hook_type_selection: command vs prompt vs http vs agent by latency and verification depth - mcp_governance: Hooks that audit and verify MCP tool actions deterministically - hook_performance: Latency optimization, matcher consolidation, per-event caps, async hooks - input_modification: `updatedInput` hooks for path correction, secret redaction, dry-run injection - conditional_filtering: `if` field for fine-grained filtering within matchers - plugin_hook_design: Plugin hooks via hooks/hooks.json with persistent data dirs and runtime merging - frontmatter_hooks: Component-scoped hooks in skill/agent frontmatter with auto-cleanup - dependency_safety: Fail-open/fail-closed strategies for hooks with exter...