Watchdog test fixture, not a mod to install. release-delivery probe: hold one main turn.complete and time the next turn's hooks

A second model reviews each step that Claude Code takes and sends it short notes while it works: nit, concern or blocker.

Claude Code 2.1.290 or later. Watchdog is a mod: a plugin whose code Claude Code runs inside your session. The npm stable channel (2.1.285 on 2026-10-06) has no mods. Below 2.1.290 the plugin shows unsupported. Desktop support starts when Claude.app bundles Claude Code 2.1.290 or later.
Check claude --version first. If it is below 2.1.290, move to the npm latest channel: npm install -g @anthropic-ai/claude-code@latest.
/plugin marketplace add matteoantoci/claude-plugins
/plugin install watchdog@matteoantoci-plugins
Then run /watchdog on (reviews are off until you do) and ask Claude for a small change. The note shows as a watchdog: [concern] … line in the transcript and as a card, one line with its first sentence above the prompt box. Click the card's ▸, or press ctrl+x tab and then its letter (a, b, c), to read the whole note with its watchdog, age and state; Esc gives the focus back to the prompt. Run /watchdog status to see each watchdog's reviews, notes, tokens and cost. A card names its watchdog when you run two or more.
At its right end a card shows only what needs a look: the subagent type for a note on a subagent; the state while the note has not reached Claude yet, nudge pending (the plugin starts a turn so that Claude reads it), held or aside (Claude reads it with your next prompt); nothing once it is steered (Claude reads it after its next tool result) or nudged. When Claude edited files after the review read its update, the card says outdated? N edits (the open card says may be outdated: N edits since), and Claude reads the same mark with the note. The next review of the same watchdog sees the edits and the note; when the note no longer holds, it retracts it: the card goes, and a note that waits never reaches Claude. A blocker that may be outdated and came after Claude's reply waits as held for that review before it nudges, so Claude does not go after a bug it already fixed.
plugins/watchdog/hooks/.WATCHDOG.json and WATCHDOG.md files, the session's memory files (such as CLAUDE.md), each update of the agent you work with and, when CLAUDE_WATCHDOG is set in a claude -p run, your project and local settings./watchdog on also sends one 1-token request for each model, to check that it exists. Apart from these model requests through Claude Code, the mod makes no network calls: its code never calls $.http.fetch or fetch.<config>/watchdog/dumps/ (<config> is $CLAUDE_CONFIG_DIR or ~/.claude). It keeps its notes and review state in Claude Code's session state and plugin store. In the terminal, /watchdog dump also copies the dump text to the clipboard.Read, Grep and Glob. A project WATCHDOG.json can grant no more; only <config>/WATCHDOG.json can grant other tools and mcp__* tools. Bash, Edit, Write, NotebookEdit, Agent, SendMessage, AskUserQuestion and ToolSearch are always refused. A reviewer never asks you for a permission.Agent call of a watchdog:* type) when Claude Code would ask, so no dialog or Auto-mode classifier sees it. A permission rule that denies Agent still wins.WATCHDOG.json or WATCHDOG.md sets the number of reviewers, their model, effort and instructions. In a repo you did not write, read these files before /watchdog on. Once on, /watchdog status lists each watchdog with its model, effort and file.opus with medium effort by default (in the demo: 3 reviews, 37.2k tokens, $0.07). The built-in "You should know" mod, when on, runs its own side agent too; turn it off in /plugin to pay for one only./watchdog off stops reviews for this session. /plugin uninstall watchdog@matteoantoci-plugins removes the plugin./plugin (Installed, Watchdog, Configure options) or /config: onByDefault (default false) turns reviews on in each new interactive session. immuneTurns (0 to 5, default 3) is the number of turns after a nudge before the next nudge for a concern; a nudge is a turn that the plugin starts so that Claude reads a note that came after its reply./watchdog status shows both counts, for example nudge 1/1 · blocker 0/2./watchdog or /watchdog status: each watchdog's state, reviews, notes, tokens and cost, and the session totals. For a state such as halted, see docs/failures.md./watchdog on and /watchdog off: turn reviews on or off for this session./watchdog dump and /watchdog dump raw: write the review log to a file (raw adds the review prompts).A WATCHDOG.json in your project or in ~/.claude sets the watchdogs. The load order, every key and the tool grants are in docs/configuration.md. This file adds a second reviewer to the default one:
{ "watchdogs": [{ "name": "default" }, { "name": "security", "model": "sonnet", "effort": "high" }] }
claude -p needs CLAUDE_WATCHDOG=on and has no nudge and no cards: see docs/headless.md.plugins/watchdog/hooks/prices.ts); a model not in it shows $?.npm install sets up the tools and the pre-commit hook. npm run check runs the 6 checks of pre-commit and CI: rules, fmt:check, lint, typecheck, validate and test. See docs/plugin-dev.md. Before a release and before a bump of the pinned Claude Code version, run the live probe by hand, on a real model and login: scripts/live-probe/README.md.
Apache-2.0
hooks/queue.mjs 69 lines1// Release-probe mod (spec §16.5 queue order and time; research/smoke-aside-nudge.md:267, case Q3d): the main
2// turn.complete of the turn whose prompt holds RDHOLD waits HOLD_MS before next(e). Its prompt.submit, turn.start
3// and turn.step hooks log when they run, so the next turn's dispatches can be timed against that hold.
4const FILE = '__LOG__/rd-queue.jsonl';
5const MARK = 'RDHOLD';
6// Under the 10 s hook budget: a $.clock.sleep is the hook's own time (d.ts HookBudget).
7const HOLD_MS = 6000;
8const lines = [];
9let writing = null;
10let isDirty = false;
11let holdTurn = null;
12let isHeld = false;
13
14// Rewrites the whole log file; a write asked while one runs is folded into one more pass (as the observer does).
15const flush = ($) => {
16 if (writing) {
17 isDirty = true;
18 return writing;
19 }
20 writing = (async () => {
21 do {
22 isDirty = false;
23 await $.fs.write(FILE, `${lines.join('\n')}\n`);
24 } while (isDirty);
25 })()
26 .catch(() => undefined)
27 .finally(() => {
28 writing = null;
29 });
30 return writing;
31};
32
33// The time is taken when the hook runs, before any $ call of its own.
34const record = ($, data) => {
35 lines.push(JSON.stringify({ t: Date.now(), ...data }));
36 return flush($);
37};
38
39export const register = (on) => {
40 on('prompt.submit', async ($, e, next) => {
41 await record($, { kind: 'submit', text: String(e.text ?? '').slice(0, 120), turnId: e.turnId ?? null });
42 return next(e);
43 });
44 on('turn.start', async ($, e, next) => {
45 const text = String(e.text ?? '');
46 if (holdTurn === null && text.includes(MARK)) {
47 holdTurn = e.turnId;
48 }
49 await record($, { kind: 'start', turnId: e.turnId, text: text.slice(0, 120) });
50 return next(e);
51 });
52 on('turn.step', async function* ($, e, next) {
53 if (!e.agentId) {
54 await record($, { kind: 'step', turnId: e.turnId, index: e.index });
55 }
56 return yield* next(e);
57 });
58 // smoke-aside-nudge.md Q3d: the hold sits before next(e), as `O_before_hold_CTX` held.
59 on('turn.complete', async ($, e, next) => {
60 if (!e.agentId && e.turnId === holdTurn && !isHeld) {
61 isHeld = true;
62 await record($, { kind: 'hold-start', turnId: e.turnId });
63 await $.clock.sleep(HOLD_MS);
64 await record($, { kind: 'hold-end', turnId: e.turnId });
65 }
66 return next(e);
67 });
68};
69