fix(floor): LOW batch 1 — hooks + run markers (6.28.5)

[PrzemekGalarowicz]

Summary

First delivery pass on the LOW backlog (items L5, L6, L7, L9). Does not merge remaining LOW items; follow-up PRs planned.

Changes

ID	Fix
L7	Both pre-write hooks exit 2 on invalid JSON or non-object stdin (no more fail-open {}). enforce-writes-scope uses lstat on pharn.config.json and skips FIFOs.
L5	Symlinked .pharn or symlink scope file → malformed scope (install posture deny-all).
L6	scanRuns() refreshes valid marker mtimes; run-marker.mjs resolves project root (same workTreeRoot / CLAUDE_PROJECT_DIR pattern as hooks).
L9	Scoped writes match declared globs under case fold (pathMatchesScope).

SKILLS_VERSION: 6.28.5

Verification

• Hook suites updated; new ★ cases for L5/L7/L9
• node pharn/floor/validate.mjs . → GREEN
• npm run check:changelog → pass

Remaining LOW (not in this PR)

L1–L4, L8, L10–L22 — separate increments/PRs to follow.

  

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}