feat: Add subagent-aware blocking rules

.gitattributes

@@ -2,4 +2,4 @@
 *.sh text eol=lf
 *.bash text eol=lf
 *.bats text eol=lf
-hooks/run-hook.cmd text eol=lf
+hooks/*.cmd text eol=lf

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 All notable changes to this project are documented in this file.
 
+## Unreleased
+
+- **Subagent-aware blocking rules** (Claude Code only): `.block` files can now scope protection rules to specific subagent types using new `agents` and `disable_main_agent` configuration keys. For example, `{"agents": ["Explore"], "disable_main_agent": true}` blocks only Explore subagents while allowing the main agent and other subagent types. Rules are backward-compatible — existing `.block` files without agent keys continue to block all agents. Agent fields are inherited through hierarchical and same-directory merges with child/local overrides. (PR #26)
+
 ## v1.2.1 (2026-02-19)
 
 - Added `CHANGELOG.md` documenting all releases from v1.0.2 through v1.2.0.

README.md

@@ -140,6 +140,34 @@ Keep Claude focused on specific directories during feature work:
 }
 ```
 
+### Agent-Specific Rules (Claude Code only)
+
+Scope protection to specific subagent types. For example, only allow a TDD agent to write test files:
+
+```
+tests/
+└── .block      → {"agents": ["TDD_agent"], "disable_main_agent": true}
+```
+
+This blocks all subagents except `TDD_agent` from writing to `tests/`, while the main agent is also exempt.
+
+| Key | Type | Description |
+|-----|------|-------------|
+| `agents` | `string[]` | Subagent types to block (e.g. `"TDD_agent"`, `"Bash"`) |
+| `disable_main_agent` | `bool` | When `true`, the main agent is exempt from blocking |
+
+**Truth table:**
+
+| Config | Main agent | Listed subagents | Other subagents |
+|--------|-----------|-----------------|-----------------|
+| No agent keys | Blocked | Blocked | Blocked |
+| `agents: ["TDD_agent"]` | Blocked | Blocked | Allowed |
+| `disable_main_agent: true` | Allowed | Blocked | Blocked |
+| Both keys set | Allowed | Blocked | Allowed |
+| `agents: []` | Blocked | Allowed | Allowed |
+
+Existing `.block` files without agent keys continue to block all agents (backward-compatible). Agent fields are inherited through hierarchical merges, with child/local files overriding parent values.
+
 ## Pattern Syntax
 
 | Pattern | Description |
@@ -231,7 +259,9 @@ pytest tests/ -v --cov=hooks --cov-report=term-missing
 block/
 ├── hooks/
 │   ├── protect_directories.py   # Main protection logic (Python)
-│   └── run-hook.cmd             # Cross-platform entry point (Claude Code)
+│   ├── subagent_tracker.py      # Subagent event tracker (Claude Code)
+│   ├── run-hook.cmd             # Cross-platform entry point (Claude Code)
+│   └── run-subagent-hook.cmd    # Subagent hook entry point (Claude Code)
 ├── opencode/
 │   ├── index.ts                 # OpenCode plugin entry point
 │   └── package.json             # npm package metadata

hooks/hooks.json

@@ -12,6 +12,30 @@
           }
         ]
       }
+    ],
+    "SubagentStart": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-subagent-hook.cmd\"",
+            "timeout": 3000
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "matcher": ".*",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/run-subagent-hook.cmd\"",
+            "timeout": 3000
+          }
+        ]
+      }
     ]
   }
 }