@khoavu882/doflow 2.0.0-beta.3 → 2.0.0-beta.5

package/bin/doflow.js

@@ -31,7 +31,7 @@ if (typeof nodeModule.enableCompileCache === 'function') {
 // error thrown while it loads is recorded under the command name `unknown`.
 let cli = null;
 try {
-  const { captureError } = require('../src/runtime/failure/capture.ts');
+  const { captureError } = require('../src/runtime/failure/capture.js');
   process.on('uncaughtExceptionMonitor', (error) => {
     try {
       const argv = process.argv.slice(2);
@@ -40,5 +40,5 @@ try {
     } catch { /* best-effort */ }
   });
 } catch { /* best-effort */ }
-cli = require('../src/cli/index.ts');
+cli = require('../src/cli/index.js');
 cli.main(process.argv.slice(2));

package/core/.antigravity-plugin/plugin.json

@@ -26,6 +26,5 @@
   "agents": [
     "../../core/shared/agent-specs/"
   ],
-  "hooks": "./hooks.json",
   "mcp": "./mcp_config.json"
 }

package/core/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "doflow",
-  "version": "2.0.0-beta.3",
+  "version": "2.0.0-beta.5",
   "description": "Reusable engineering workflows, quality gates, and specialist guidance for Claude Code.",
   "author": {
     "name": "DoFlow"

package/core/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "doflow",
-  "version": "2.0.0-beta.3",
+  "version": "2.0.0-beta.5",
   "description": "Reusable engineering workflows, quality gates, and specialist guidance for Codex.",
   "author": {
     "name": "DoFlow",

package/core/.plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "doflow",
-  "version": "2.0.0-beta.3",
+  "version": "2.0.0-beta.5",
   "description": "Reusable engineering workflows, quality gates, and specialist guidance for GitHub Copilot CLI.",
   "author": {
     "name": "DoFlow",

package/core/harnesses/claude/hooks/mcp-tool-guard.sh

@@ -1,20 +1,10 @@
 #!/usr/bin/env bash
-# Claude front door: delegates the mcp-tool-guard decision to the Canonical Policy
-# Library, then translates it into Claude Code's verified deny contract.
-#
-# Schema verified (Phase 8.3, 2026-04-17): hookSpecificOutput.permissionDecision
-# "deny" is correctly recognized by Claude Code and blocks execution — exit code
-# alone is not sufficient here, so this front door is a translator, not a bare
-# exec (unlike session-context/stop-check, which never need this translation).
+# Claude front door: mcp-tool-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/mcp-tool-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-MCP tool call blocked by mcp-tool-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t claude"}}'
+  exit 0
+fi
+doflow_bridge claude PreToolUse mcp-tool-guard
+exit $?

package/core/harnesses/claude/hooks/pre-bash-guard.sh

@@ -1,20 +1,10 @@
 #!/usr/bin/env bash
-# Claude front door: delegates the pre-bash-guard decision to the Canonical Policy
-# Library, then translates it into Claude Code's verified deny contract.
-#
-# Schema verified (Phase 8.3, 2026-04-17): hookSpecificOutput.permissionDecision
-# "deny" is correctly recognized by Claude Code and blocks execution — exit code
-# alone is not sufficient here, so this front door is a translator, not a bare
-# exec (unlike session-context/stop-check, which never need this translation).
+# Claude front door: pre-bash-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-bash-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-Command blocked by pre-bash-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t claude"}}'
+  exit 0
+fi
+doflow_bridge claude PreToolUse pre-bash-guard
+exit $?

package/core/harnesses/claude/hooks/pre-implement-gate.sh

@@ -1,21 +1,10 @@
 #!/usr/bin/env bash
-# Claude front door: delegates the pre-implementation-gate decision to the
-# Canonical Policy Library, then translates it into Claude Code's verified deny
-# contract.
-#
-# Schema verified (Phase 8.3, 2026-04-17): hookSpecificOutput.permissionDecision
-# "deny" is correctly recognized by Claude Code and blocks execution — exit code
-# alone is not sufficient here, so this front door is a translator, not a bare
-# exec (unlike session-context/stop-check, which never need this translation).
+# Claude front door: pre-implementation-gate through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-implementation-gate.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-Implementation requires an approved plan.md}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t claude"}}'
+  exit 0
+fi
+doflow_bridge claude PreToolUse pre-implementation-gate
+exit $?

package/core/harnesses/claude/hooks/session-start.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# Claude adapter: reuse the shared session initializer with Claude attribution.
-set -euo pipefail
+# Claude front door: session-context through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/session-context.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge claude SessionStart session-context
+exit $?

package/core/harnesses/claude/hooks/stop-check.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# Claude adapter: reuse the shared stop-completion check with Claude attribution.
-set -euo pipefail
+# Claude front door: stop-check through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/stop-check.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge claude Stop stop-check
+exit $?

package/core/harnesses/claude/hooks/subagent-audit.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
-# Claude front door: reuse the canonical subagent-audit policy with Claude attribution.
-# No JSON-shape translation needed — claude/codex's copies were byte-identical
-# (022-hooks-remaining-duplication).
-set -euo pipefail
+# Claude front door: subagent-audit through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/subagent-audit.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge claude SubagentStart subagent-audit
+exit $?

package/core/harnesses/claude/hooks/user-prompt-submit.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# Claude front door: reuse the canonical context policy with Claude's output envelope.
-set -euo pipefail
+# Claude front door: user-prompt-submit through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/user-prompt-submit.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge claude UserPromptSubmit user-prompt-submit
+exit $?

package/core/harnesses/codex/hooks/mcp-tool-guard.sh

@@ -1,18 +1,10 @@
 #!/usr/bin/env bash
-# Codex front door: delegates the mcp-tool-guard decision to the Canonical Policy
-# Library, then translates it into the hookSpecificOutput.permissionDecision deny
-# contract this script's Codex/Claude originals both used — exit code alone is
-# not sufficient here, so this front door is a translator, not a bare exec
-# (unlike session-context/stop-check, which never need this translation).
+# Codex front door: mcp-tool-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/mcp-tool-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-MCP tool call blocked by mcp-tool-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t codex"}}'
+  exit 0
+fi
+doflow_bridge codex PreToolUse mcp-tool-guard
+exit $?

package/core/harnesses/codex/hooks/pre-bash-guard.sh

@@ -1,18 +1,10 @@
 #!/usr/bin/env bash
-# Codex front door: delegates the pre-bash-guard decision to the Canonical Policy
-# Library, then translates it into the hookSpecificOutput.permissionDecision deny
-# contract this script's Codex/Claude originals both used — exit code alone is
-# not sufficient here, so this front door is a translator, not a bare exec
-# (unlike session-context/stop-check, which never need this translation).
+# Codex front door: pre-bash-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-bash-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-Command blocked by pre-bash-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t codex"}}'
+  exit 0
+fi
+doflow_bridge codex PreToolUse pre-bash-guard
+exit $?

package/core/harnesses/codex/hooks/pre-implement-gate.sh

@@ -1,19 +1,10 @@
 #!/usr/bin/env bash
-# Codex front door: delegates the pre-implementation-gate decision to the
-# Canonical Policy Library, then translates it into the
-# hookSpecificOutput.permissionDecision deny contract this script's Codex/Claude
-# originals both used — exit code alone is not sufficient here, so this front
-# door is a translator, not a bare exec (unlike session-context/stop-check,
-# which never need this translation).
+# Codex front door: pre-implementation-gate through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-implementation-gate.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-Implementation requires an approved plan.md}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t codex"}}'
+  exit 0
+fi
+doflow_bridge codex PreToolUse pre-implementation-gate
+exit $?

package/core/harnesses/codex/hooks/session-start.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# Codex adapter: reuse the canonical session-context policy with Codex attribution.
-set -euo pipefail
+# Codex front door: session-context through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/session-context.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge codex SessionStart session-context
+exit $?

package/core/harnesses/codex/hooks/stop-check.sh

@@ -1,8 +1,9 @@
 #!/usr/bin/env bash
-# Codex adapter: preserve a blocking exit while returning valid Stop JSON on success.
-set -euo pipefail
+# Codex front door: stop-check through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then printf '{}\n'; exit 0; fi
 rc=0
-bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/stop-check.sh" || rc=$?
-[ "$rc" -eq 2 ] && exit 2
-printf '{}\n'
+output="$(doflow_bridge codex Stop stop-check)" || rc=$?
+if [ "$rc" -eq 0 ]; then printf '%s\n' "$output"; fi
+exit "$rc"

package/core/harnesses/codex/hooks/subagent-audit.sh

@@ -1,8 +1,19 @@
 #!/usr/bin/env bash
-# Codex front door: reuse the canonical subagent-audit policy with Codex attribution, then emit
-# the empty-JSON SubagentStop requires on success (022-hooks-remaining-duplication: claude/codex's
-# copies were byte-identical; only this trailing JSON requirement is Codex-specific).
-set -euo pipefail
+# Codex front door: subagent-audit through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/subagent-audit.sh"
-printf '{}\n'
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+payload=$(cat)
+event=$(printf '%s' "$payload" | jq -r '.hook_event_name // "SubagentStart"' 2>/dev/null || printf 'SubagentStart')
+has_jq=1
+command -v jq >/dev/null 2>&1 || has_jq=0
+rc=0
+doflow_bridge codex "$event" subagent-audit <<<"$payload" || rc=$?
+if [ "$has_jq" -eq 0 ]; then
+  printf '{}\n'
+  exit 0
+fi
+if [ "$rc" -eq 0 ]; then
+  case "$DF_BRIDGE_OUTCOME" in allow|advisory) printf '{}\n' ;; esac
+fi
+exit "$rc"

package/core/harnesses/codex/hooks/user-prompt-submit.sh

@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
-# Codex front door: reuse the canonical context policy with the Codex output envelope.
-# The shared policy selects Codex's hookSpecificOutput shape from this attribution.
-set -euo pipefail
+# Codex front door: user-prompt-submit through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/user-prompt-submit.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge codex UserPromptSubmit user-prompt-submit
+exit $?

package/core/harnesses/gemini/hooks/mcp-tool-guard.sh

@@ -1,21 +1,10 @@
 #!/usr/bin/env bash
-# Gemini front door: delegates the mcp-tool-guard decision to the Canonical
-# Policy Library, then translates it into Gemini's verified deny contract.
-#
-# Gemini's hook output schema (packages/core/src/hooks/types.ts, confirmed this
-# session) is a top-level {"decision": "deny", "reason": "..."} — NOT nested
-# under hookSpecificOutput.permissionDecision like Claude/Codex. Exit code alone
-# is not sufficient here, so this front door is a translator, not a bare exec
-# (unlike session-context, which never needs this translation).
+# Gemini front door: mcp-tool-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-gemini}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/mcp-tool-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_flat "${REASON:-MCP tool call blocked by mcp-tool-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"decision":"deny","reason":"[doflow] shared hooks lack the bridge; run: doflow update -t gemini"}'
+  exit 0
+fi
+doflow_bridge gemini BeforeTool mcp-tool-guard
+exit $?

package/core/harnesses/gemini/hooks/pre-bash-guard.sh

@@ -1,21 +1,10 @@
 #!/usr/bin/env bash
-# Gemini front door: delegates the pre-bash-guard decision to the Canonical
-# Policy Library, then translates it into Gemini's verified deny contract.
-#
-# Gemini's hook output schema (packages/core/src/hooks/types.ts, confirmed this
-# session) is a top-level {"decision": "deny", "reason": "..."} — NOT nested
-# under hookSpecificOutput.permissionDecision like Claude/Codex. Exit code alone
-# is not sufficient here, so this front door is a translator, not a bare exec
-# (unlike session-context, which never needs this translation).
+# Gemini front door: pre-bash-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-gemini}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-bash-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_flat "${REASON:-Command blocked by pre-bash-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"decision":"deny","reason":"[doflow] shared hooks lack the bridge; run: doflow update -t gemini"}'
+  exit 0
+fi
+doflow_bridge gemini BeforeTool pre-bash-guard
+exit $?

package/core/harnesses/gemini/hooks/pre-implement-gate.sh

@@ -1,22 +1,10 @@
 #!/usr/bin/env bash
-# Gemini front door: delegates the pre-implementation-gate decision to the
-# Canonical Policy Library, then translates it into Gemini's verified deny
-# contract.
-#
-# Gemini's hook output schema (packages/core/src/hooks/types.ts, confirmed this
-# session) is a top-level {"decision": "deny", "reason": "..."} — NOT nested
-# under hookSpecificOutput.permissionDecision like Claude/Codex. Exit code alone
-# is not sufficient here, so this front door is a translator, not a bare exec
-# (unlike session-context, which never needs this translation).
+# Gemini front door: pre-implementation-gate through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-gemini}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-implementation-gate.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_flat "${REASON:-Implementation requires an approved plan.md}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"decision":"deny","reason":"[doflow] shared hooks lack the bridge; run: doflow update -t gemini"}'
+  exit 0
+fi
+doflow_bridge gemini BeforeTool pre-implementation-gate
+exit $?

package/core/harnesses/gemini/hooks/session-start.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# Gemini adapter: reuse the Canonical Policy Library's session-context policy.
-set -euo pipefail
+# Gemini front door: session-context through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-gemini}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/session-context.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge gemini SessionStart session-context
+exit $?

package/core/harnesses/kiro/hooks/mcp-tool-guard.sh

@@ -1,9 +1,24 @@
 #!/usr/bin/env bash
-# Kiro adapter: reuse the canonical mcp-tool-guard policy with Kiro attribution.
+# Kiro front door: mcp-tool-guard through the shared lifecycle bridge.
 set -euo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"
+here="$(dirname "$0")"
 # shellcheck source=lib.sh
-source "$(dirname "$0")/lib.sh"
-# Translate Kiro's payload (tool names, KIRO_SESSION_ID, assistant_response) to the canonical one.
-payload=$(kiro_bridge_payload)
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/mcp-tool-guard.sh" <<<"$payload"
+source "$here/lib.sh"
+raw=$(cat)
+payload=$(kiro_bridge_payload <<<"$raw")
+event="PreToolUse"
+if command -v jq >/dev/null 2>&1; then event=$(printf '%s' "$raw" | jq -r '.hook_event_name // "PreToolUse"' 2>/dev/null) || event="PreToolUse"; fi
+bridge="$here/../../.doflow/shared/hooks/bridge/bridge.sh"
+if [ ! -f "$bridge" ]; then
+  printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2
+  exit 2
+fi
+. "$bridge" 2>/dev/null || { printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2; exit 2; }
+if doflow_bridge kiro "$event" mcp-tool-guard <<<"$payload"; then
+  status=0
+else
+  status=$?
+fi
+if [ "$status" -eq 2 ]; then printf '\n' >&2; fi
+exit "$status"

package/core/harnesses/kiro/hooks/pre-bash-guard.sh

@@ -1,9 +1,24 @@
 #!/usr/bin/env bash
-# Kiro adapter: reuse the canonical pre-bash-guard policy with Kiro attribution.
+# Kiro front door: pre-bash-guard through the shared lifecycle bridge.
 set -euo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"
+here="$(dirname "$0")"
 # shellcheck source=lib.sh
-source "$(dirname "$0")/lib.sh"
-# Translate Kiro's payload (tool names, KIRO_SESSION_ID, assistant_response) to the canonical one.
-payload=$(kiro_bridge_payload)
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-bash-guard.sh" <<<"$payload"
+source "$here/lib.sh"
+raw=$(cat)
+payload=$(kiro_bridge_payload <<<"$raw")
+event="PreToolUse"
+if command -v jq >/dev/null 2>&1; then event=$(printf '%s' "$raw" | jq -r '.hook_event_name // "PreToolUse"' 2>/dev/null) || event="PreToolUse"; fi
+bridge="$here/../../.doflow/shared/hooks/bridge/bridge.sh"
+if [ ! -f "$bridge" ]; then
+  printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2
+  exit 2
+fi
+. "$bridge" 2>/dev/null || { printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2; exit 2; }
+if doflow_bridge kiro "$event" pre-bash-guard <<<"$payload"; then
+  status=0
+else
+  status=$?
+fi
+if [ "$status" -eq 2 ]; then printf '\n' >&2; fi
+exit "$status"

package/core/harnesses/kiro/hooks/pre-implement-gate.sh

@@ -1,9 +1,24 @@
 #!/usr/bin/env bash
-# Kiro adapter: reuse the canonical pre-implementation-gate policy with Kiro attribution.
+# Kiro front door: pre-implementation-gate through the shared lifecycle bridge.
 set -euo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"
+here="$(dirname "$0")"
 # shellcheck source=lib.sh
-source "$(dirname "$0")/lib.sh"
-# Translate Kiro's payload (tool names, KIRO_SESSION_ID, assistant_response) to the canonical one.
-payload=$(kiro_bridge_payload)
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-implementation-gate.sh" <<<"$payload"
+source "$here/lib.sh"
+raw=$(cat)
+payload=$(kiro_bridge_payload <<<"$raw")
+event="PreToolUse"
+if command -v jq >/dev/null 2>&1; then event=$(printf '%s' "$raw" | jq -r '.hook_event_name // "PreToolUse"' 2>/dev/null) || event="PreToolUse"; fi
+bridge="$here/../../.doflow/shared/hooks/bridge/bridge.sh"
+if [ ! -f "$bridge" ]; then
+  printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2
+  exit 2
+fi
+. "$bridge" 2>/dev/null || { printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2; exit 2; }
+if doflow_bridge kiro "$event" pre-implementation-gate <<<"$payload"; then
+  status=0
+else
+  status=$?
+fi
+if [ "$status" -eq 2 ]; then printf '\n' >&2; fi
+exit "$status"

package/core/harnesses/kiro/hooks/session-start.sh

@@ -1,9 +1,15 @@
 #!/usr/bin/env bash
-# Kiro adapter: reuse the canonical session-context policy with Kiro attribution.
+# Kiro front door: session-context through the shared lifecycle bridge.
 set -euo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"
+here="$(dirname "$0")"
 # shellcheck source=lib.sh
-source "$(dirname "$0")/lib.sh"
-# Translate Kiro's payload (tool names, KIRO_SESSION_ID, assistant_response) to the canonical one.
-payload=$(kiro_bridge_payload)
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/session-context.sh" <<<"$payload"
+source "$here/lib.sh"
+raw=$(cat)
+payload=$(kiro_bridge_payload <<<"$raw")
+event="SessionStart"
+if command -v jq >/dev/null 2>&1; then event=$(printf '%s' "$raw" | jq -r '.hook_event_name // "SessionStart"' 2>/dev/null) || event="SessionStart"; fi
+bridge="$here/../../.doflow/shared/hooks/bridge/bridge.sh"
+if [ ! -f "$bridge" ]; then exit 0; fi
+. "$bridge" 2>/dev/null || exit 0
+doflow_bridge kiro "$event" session-context <<<"$payload"