@khoavu882/doflow 2.0.0-beta.4 → 2.0.0-beta.5

package/core/.antigravity-plugin/plugin.json

@@ -26,6 +26,5 @@
   "agents": [
     "../../core/shared/agent-specs/"
   ],
-  "hooks": "./hooks.json",
   "mcp": "./mcp_config.json"
 }

package/core/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "doflow",
-  "version": "2.0.0-beta.4",
+  "version": "2.0.0-beta.5",
   "description": "Reusable engineering workflows, quality gates, and specialist guidance for Claude Code.",
   "author": {
     "name": "DoFlow"

package/core/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "doflow",
-  "version": "2.0.0-beta.4",
+  "version": "2.0.0-beta.5",
   "description": "Reusable engineering workflows, quality gates, and specialist guidance for Codex.",
   "author": {
     "name": "DoFlow",

package/core/.plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "doflow",
-  "version": "2.0.0-beta.4",
+  "version": "2.0.0-beta.5",
   "description": "Reusable engineering workflows, quality gates, and specialist guidance for GitHub Copilot CLI.",
   "author": {
     "name": "DoFlow",

package/core/harnesses/claude/hooks/mcp-tool-guard.sh

@@ -1,20 +1,10 @@
 #!/usr/bin/env bash
-# Claude front door: delegates the mcp-tool-guard decision to the Canonical Policy
-# Library, then translates it into Claude Code's verified deny contract.
-#
-# Schema verified (Phase 8.3, 2026-04-17): hookSpecificOutput.permissionDecision
-# "deny" is correctly recognized by Claude Code and blocks execution — exit code
-# alone is not sufficient here, so this front door is a translator, not a bare
-# exec (unlike session-context/stop-check, which never need this translation).
+# Claude front door: mcp-tool-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/mcp-tool-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-MCP tool call blocked by mcp-tool-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t claude"}}'
+  exit 0
+fi
+doflow_bridge claude PreToolUse mcp-tool-guard
+exit $?

package/core/harnesses/claude/hooks/pre-bash-guard.sh

@@ -1,20 +1,10 @@
 #!/usr/bin/env bash
-# Claude front door: delegates the pre-bash-guard decision to the Canonical Policy
-# Library, then translates it into Claude Code's verified deny contract.
-#
-# Schema verified (Phase 8.3, 2026-04-17): hookSpecificOutput.permissionDecision
-# "deny" is correctly recognized by Claude Code and blocks execution — exit code
-# alone is not sufficient here, so this front door is a translator, not a bare
-# exec (unlike session-context/stop-check, which never need this translation).
+# Claude front door: pre-bash-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-bash-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-Command blocked by pre-bash-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t claude"}}'
+  exit 0
+fi
+doflow_bridge claude PreToolUse pre-bash-guard
+exit $?

package/core/harnesses/claude/hooks/pre-implement-gate.sh

@@ -1,21 +1,10 @@
 #!/usr/bin/env bash
-# Claude front door: delegates the pre-implementation-gate decision to the
-# Canonical Policy Library, then translates it into Claude Code's verified deny
-# contract.
-#
-# Schema verified (Phase 8.3, 2026-04-17): hookSpecificOutput.permissionDecision
-# "deny" is correctly recognized by Claude Code and blocks execution — exit code
-# alone is not sufficient here, so this front door is a translator, not a bare
-# exec (unlike session-context/stop-check, which never need this translation).
+# Claude front door: pre-implementation-gate through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-implementation-gate.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-Implementation requires an approved plan.md}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t claude"}}'
+  exit 0
+fi
+doflow_bridge claude PreToolUse pre-implementation-gate
+exit $?

package/core/harnesses/claude/hooks/session-start.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# Claude adapter: reuse the shared session initializer with Claude attribution.
-set -euo pipefail
+# Claude front door: session-context through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/session-context.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge claude SessionStart session-context
+exit $?

package/core/harnesses/claude/hooks/stop-check.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# Claude adapter: reuse the shared stop-completion check with Claude attribution.
-set -euo pipefail
+# Claude front door: stop-check through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/stop-check.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge claude Stop stop-check
+exit $?

package/core/harnesses/claude/hooks/subagent-audit.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
-# Claude front door: reuse the canonical subagent-audit policy with Claude attribution.
-# No JSON-shape translation needed — claude/codex's copies were byte-identical
-# (022-hooks-remaining-duplication).
-set -euo pipefail
+# Claude front door: subagent-audit through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/subagent-audit.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge claude SubagentStart subagent-audit
+exit $?

package/core/harnesses/claude/hooks/user-prompt-submit.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# Claude front door: reuse the canonical context policy with Claude's output envelope.
-set -euo pipefail
+# Claude front door: user-prompt-submit through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-claude}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/user-prompt-submit.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge claude UserPromptSubmit user-prompt-submit
+exit $?

package/core/harnesses/codex/hooks/mcp-tool-guard.sh

@@ -1,18 +1,10 @@
 #!/usr/bin/env bash
-# Codex front door: delegates the mcp-tool-guard decision to the Canonical Policy
-# Library, then translates it into the hookSpecificOutput.permissionDecision deny
-# contract this script's Codex/Claude originals both used — exit code alone is
-# not sufficient here, so this front door is a translator, not a bare exec
-# (unlike session-context/stop-check, which never need this translation).
+# Codex front door: mcp-tool-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/mcp-tool-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-MCP tool call blocked by mcp-tool-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t codex"}}'
+  exit 0
+fi
+doflow_bridge codex PreToolUse mcp-tool-guard
+exit $?

package/core/harnesses/codex/hooks/pre-bash-guard.sh

@@ -1,18 +1,10 @@
 #!/usr/bin/env bash
-# Codex front door: delegates the pre-bash-guard decision to the Canonical Policy
-# Library, then translates it into the hookSpecificOutput.permissionDecision deny
-# contract this script's Codex/Claude originals both used — exit code alone is
-# not sufficient here, so this front door is a translator, not a bare exec
-# (unlike session-context/stop-check, which never need this translation).
+# Codex front door: pre-bash-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-bash-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-Command blocked by pre-bash-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t codex"}}'
+  exit 0
+fi
+doflow_bridge codex PreToolUse pre-bash-guard
+exit $?

package/core/harnesses/codex/hooks/pre-implement-gate.sh

@@ -1,19 +1,10 @@
 #!/usr/bin/env bash
-# Codex front door: delegates the pre-implementation-gate decision to the
-# Canonical Policy Library, then translates it into the
-# hookSpecificOutput.permissionDecision deny contract this script's Codex/Claude
-# originals both used — exit code alone is not sufficient here, so this front
-# door is a translator, not a bare exec (unlike session-context/stop-check,
-# which never need this translation).
+# Codex front door: pre-implementation-gate through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-implementation-gate.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_nested "${REASON:-Implementation requires an approved plan.md}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"[doflow] shared hooks lack the bridge; run: doflow update -t codex"}}'
+  exit 0
+fi
+doflow_bridge codex PreToolUse pre-implementation-gate
+exit $?

package/core/harnesses/codex/hooks/session-start.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# Codex adapter: reuse the canonical session-context policy with Codex attribution.
-set -euo pipefail
+# Codex front door: session-context through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/session-context.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge codex SessionStart session-context
+exit $?

package/core/harnesses/codex/hooks/stop-check.sh

@@ -1,8 +1,9 @@
 #!/usr/bin/env bash
-# Codex adapter: preserve a blocking exit while returning valid Stop JSON on success.
-set -euo pipefail
+# Codex front door: stop-check through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then printf '{}\n'; exit 0; fi
 rc=0
-bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/stop-check.sh" || rc=$?
-[ "$rc" -eq 2 ] && exit 2
-printf '{}\n'
+output="$(doflow_bridge codex Stop stop-check)" || rc=$?
+if [ "$rc" -eq 0 ]; then printf '%s\n' "$output"; fi
+exit "$rc"

package/core/harnesses/codex/hooks/subagent-audit.sh

@@ -1,8 +1,19 @@
 #!/usr/bin/env bash
-# Codex front door: reuse the canonical subagent-audit policy with Codex attribution, then emit
-# the empty-JSON SubagentStop requires on success (022-hooks-remaining-duplication: claude/codex's
-# copies were byte-identical; only this trailing JSON requirement is Codex-specific).
-set -euo pipefail
+# Codex front door: subagent-audit through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/subagent-audit.sh"
-printf '{}\n'
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+payload=$(cat)
+event=$(printf '%s' "$payload" | jq -r '.hook_event_name // "SubagentStart"' 2>/dev/null || printf 'SubagentStart')
+has_jq=1
+command -v jq >/dev/null 2>&1 || has_jq=0
+rc=0
+doflow_bridge codex "$event" subagent-audit <<<"$payload" || rc=$?
+if [ "$has_jq" -eq 0 ]; then
+  printf '{}\n'
+  exit 0
+fi
+if [ "$rc" -eq 0 ]; then
+  case "$DF_BRIDGE_OUTCOME" in allow|advisory) printf '{}\n' ;; esac
+fi
+exit "$rc"

package/core/harnesses/codex/hooks/user-prompt-submit.sh

@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
-# Codex front door: reuse the canonical context policy with the Codex output envelope.
-# The shared policy selects Codex's hookSpecificOutput shape from this attribution.
-set -euo pipefail
+# Codex front door: user-prompt-submit through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-codex}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/user-prompt-submit.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge codex UserPromptSubmit user-prompt-submit
+exit $?

package/core/harnesses/gemini/hooks/mcp-tool-guard.sh

@@ -1,21 +1,10 @@
 #!/usr/bin/env bash
-# Gemini front door: delegates the mcp-tool-guard decision to the Canonical
-# Policy Library, then translates it into Gemini's verified deny contract.
-#
-# Gemini's hook output schema (packages/core/src/hooks/types.ts, confirmed this
-# session) is a top-level {"decision": "deny", "reason": "..."} — NOT nested
-# under hookSpecificOutput.permissionDecision like Claude/Codex. Exit code alone
-# is not sufficient here, so this front door is a translator, not a bare exec
-# (unlike session-context, which never needs this translation).
+# Gemini front door: mcp-tool-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-gemini}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/mcp-tool-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_flat "${REASON:-MCP tool call blocked by mcp-tool-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"decision":"deny","reason":"[doflow] shared hooks lack the bridge; run: doflow update -t gemini"}'
+  exit 0
+fi
+doflow_bridge gemini BeforeTool mcp-tool-guard
+exit $?

package/core/harnesses/gemini/hooks/pre-bash-guard.sh

@@ -1,21 +1,10 @@
 #!/usr/bin/env bash
-# Gemini front door: delegates the pre-bash-guard decision to the Canonical
-# Policy Library, then translates it into Gemini's verified deny contract.
-#
-# Gemini's hook output schema (packages/core/src/hooks/types.ts, confirmed this
-# session) is a top-level {"decision": "deny", "reason": "..."} — NOT nested
-# under hookSpecificOutput.permissionDecision like Claude/Codex. Exit code alone
-# is not sufficient here, so this front door is a translator, not a bare exec
-# (unlike session-context, which never needs this translation).
+# Gemini front door: pre-bash-guard through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-gemini}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-bash-guard.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_flat "${REASON:-Command blocked by pre-bash-guard}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"decision":"deny","reason":"[doflow] shared hooks lack the bridge; run: doflow update -t gemini"}'
+  exit 0
+fi
+doflow_bridge gemini BeforeTool pre-bash-guard
+exit $?

package/core/harnesses/gemini/hooks/pre-implement-gate.sh

@@ -1,22 +1,10 @@
 #!/usr/bin/env bash
-# Gemini front door: delegates the pre-implementation-gate decision to the
-# Canonical Policy Library, then translates it into Gemini's verified deny
-# contract.
-#
-# Gemini's hook output schema (packages/core/src/hooks/types.ts, confirmed this
-# session) is a top-level {"decision": "deny", "reason": "..."} — NOT nested
-# under hookSpecificOutput.permissionDecision like Claude/Codex. Exit code alone
-# is not sufficient here, so this front door is a translator, not a bare exec
-# (unlike session-context, which never needs this translation).
+# Gemini front door: pre-implementation-gate through the shared lifecycle bridge.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-gemini}"
-
-command -v jq >/dev/null 2>&1 || exit 0
-source "$(dirname "$0")/../../.doflow/shared/hooks/policies/deny-json.sh"
-
-POLICY="$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-implementation-gate.sh"
-REASON=$(bash "$POLICY" 2>&1 >/dev/null)
-CODE=$?
-
-[ "$CODE" -ne 0 ] && emit_pretooluse_deny_flat "${REASON:-Implementation requires an approved plan.md}"
-exit 0
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then
+  printf '%s\n' '{"decision":"deny","reason":"[doflow] shared hooks lack the bridge; run: doflow update -t gemini"}'
+  exit 0
+fi
+doflow_bridge gemini BeforeTool pre-implementation-gate
+exit $?

package/core/harnesses/gemini/hooks/session-start.sh

@@ -1,5 +1,7 @@
 #!/usr/bin/env bash
-# Gemini adapter: reuse the Canonical Policy Library's session-context policy.
-set -euo pipefail
+# Gemini front door: session-context through the shared lifecycle bridge.
+set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-gemini}"
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/session-context.sh"
+if ! . "$(dirname "$0")/../../.doflow/shared/hooks/bridge/bridge.sh" 2>/dev/null; then exit 0; fi
+doflow_bridge gemini SessionStart session-context
+exit $?

package/core/harnesses/kiro/hooks/mcp-tool-guard.sh

@@ -1,9 +1,24 @@
 #!/usr/bin/env bash
-# Kiro adapter: reuse the canonical mcp-tool-guard policy with Kiro attribution.
+# Kiro front door: mcp-tool-guard through the shared lifecycle bridge.
 set -euo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"
+here="$(dirname "$0")"
 # shellcheck source=lib.sh
-source "$(dirname "$0")/lib.sh"
-# Translate Kiro's payload (tool names, KIRO_SESSION_ID, assistant_response) to the canonical one.
-payload=$(kiro_bridge_payload)
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/mcp-tool-guard.sh" <<<"$payload"
+source "$here/lib.sh"
+raw=$(cat)
+payload=$(kiro_bridge_payload <<<"$raw")
+event="PreToolUse"
+if command -v jq >/dev/null 2>&1; then event=$(printf '%s' "$raw" | jq -r '.hook_event_name // "PreToolUse"' 2>/dev/null) || event="PreToolUse"; fi
+bridge="$here/../../.doflow/shared/hooks/bridge/bridge.sh"
+if [ ! -f "$bridge" ]; then
+  printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2
+  exit 2
+fi
+. "$bridge" 2>/dev/null || { printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2; exit 2; }
+if doflow_bridge kiro "$event" mcp-tool-guard <<<"$payload"; then
+  status=0
+else
+  status=$?
+fi
+if [ "$status" -eq 2 ]; then printf '\n' >&2; fi
+exit "$status"

package/core/harnesses/kiro/hooks/pre-bash-guard.sh

@@ -1,9 +1,24 @@
 #!/usr/bin/env bash
-# Kiro adapter: reuse the canonical pre-bash-guard policy with Kiro attribution.
+# Kiro front door: pre-bash-guard through the shared lifecycle bridge.
 set -euo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"
+here="$(dirname "$0")"
 # shellcheck source=lib.sh
-source "$(dirname "$0")/lib.sh"
-# Translate Kiro's payload (tool names, KIRO_SESSION_ID, assistant_response) to the canonical one.
-payload=$(kiro_bridge_payload)
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-bash-guard.sh" <<<"$payload"
+source "$here/lib.sh"
+raw=$(cat)
+payload=$(kiro_bridge_payload <<<"$raw")
+event="PreToolUse"
+if command -v jq >/dev/null 2>&1; then event=$(printf '%s' "$raw" | jq -r '.hook_event_name // "PreToolUse"' 2>/dev/null) || event="PreToolUse"; fi
+bridge="$here/../../.doflow/shared/hooks/bridge/bridge.sh"
+if [ ! -f "$bridge" ]; then
+  printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2
+  exit 2
+fi
+. "$bridge" 2>/dev/null || { printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2; exit 2; }
+if doflow_bridge kiro "$event" pre-bash-guard <<<"$payload"; then
+  status=0
+else
+  status=$?
+fi
+if [ "$status" -eq 2 ]; then printf '\n' >&2; fi
+exit "$status"

package/core/harnesses/kiro/hooks/pre-implement-gate.sh

@@ -1,9 +1,24 @@
 #!/usr/bin/env bash
-# Kiro adapter: reuse the canonical pre-implementation-gate policy with Kiro attribution.
+# Kiro front door: pre-implementation-gate through the shared lifecycle bridge.
 set -euo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"
+here="$(dirname "$0")"
 # shellcheck source=lib.sh
-source "$(dirname "$0")/lib.sh"
-# Translate Kiro's payload (tool names, KIRO_SESSION_ID, assistant_response) to the canonical one.
-payload=$(kiro_bridge_payload)
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/pre-implementation-gate.sh" <<<"$payload"
+source "$here/lib.sh"
+raw=$(cat)
+payload=$(kiro_bridge_payload <<<"$raw")
+event="PreToolUse"
+if command -v jq >/dev/null 2>&1; then event=$(printf '%s' "$raw" | jq -r '.hook_event_name // "PreToolUse"' 2>/dev/null) || event="PreToolUse"; fi
+bridge="$here/../../.doflow/shared/hooks/bridge/bridge.sh"
+if [ ! -f "$bridge" ]; then
+  printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2
+  exit 2
+fi
+. "$bridge" 2>/dev/null || { printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2; exit 2; }
+if doflow_bridge kiro "$event" pre-implementation-gate <<<"$payload"; then
+  status=0
+else
+  status=$?
+fi
+if [ "$status" -eq 2 ]; then printf '\n' >&2; fi
+exit "$status"

package/core/harnesses/kiro/hooks/session-start.sh

@@ -1,9 +1,15 @@
 #!/usr/bin/env bash
-# Kiro adapter: reuse the canonical session-context policy with Kiro attribution.
+# Kiro front door: session-context through the shared lifecycle bridge.
 set -euo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"
+here="$(dirname "$0")"
 # shellcheck source=lib.sh
-source "$(dirname "$0")/lib.sh"
-# Translate Kiro's payload (tool names, KIRO_SESSION_ID, assistant_response) to the canonical one.
-payload=$(kiro_bridge_payload)
-exec bash "$(dirname "$0")/../../.doflow/shared/hooks/policies/session-context.sh" <<<"$payload"
+source "$here/lib.sh"
+raw=$(cat)
+payload=$(kiro_bridge_payload <<<"$raw")
+event="SessionStart"
+if command -v jq >/dev/null 2>&1; then event=$(printf '%s' "$raw" | jq -r '.hook_event_name // "SessionStart"' 2>/dev/null) || event="SessionStart"; fi
+bridge="$here/../../.doflow/shared/hooks/bridge/bridge.sh"
+if [ ! -f "$bridge" ]; then exit 0; fi
+. "$bridge" 2>/dev/null || exit 0
+doflow_bridge kiro "$event" session-context <<<"$payload"

package/core/harnesses/kiro/hooks/stop-check.sh

@@ -1,43 +1,34 @@
 #!/usr/bin/env bash
-# Kiro adapter: run the canonical stop-check policy and translate its verdict to the Kiro engine.
-#
-# The policy exits 2 to deny the stop. Kiro engines read a Stop hook differently:
-#   - Kiro CLI V3 / IDE (payload carries session_id): exit 0 finishes the turn; exit 0 with stdout
-#     JSON {"decision":"block","reason":"..."} starts another turn with that reason; exit 1 also
-#     starts another turn; other codes finish without forwarding output. Exit 2 does NOT block.
-#     So a policy deny becomes the JSON block on stdout with exit 0.
-#   - Kiro CLI 2.x (payload has no session_id): exit 0 succeeded, any other code shows stderr to the
-#     user as a warning. A policy deny is passed through as stderr with exit 2.
-# Every other policy outcome exits 0, never 1: V3 treats exit 1 as "continue another turn".
-# The policy blocks a given message once, so the continuation turn is not blocked again.
-# Docs: https://kiro.dev/docs/hooks/types/ , https://kiro.dev/docs/cli/v3/hooks-migration/
+# Kiro Stop front door: translate the native payload, then render the bridge verdict for its engine.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"
 here="$(dirname "$0")"
 # shellcheck source=lib.sh
 source "$here/lib.sh"
-set +e # lib.sh enables errexit; the policy exit code is handled explicitly below
-
 raw=$(cat)
-# Translate Kiro's payload (tool names, KIRO_SESSION_ID, assistant_response) to the canonical one.
 payload=$(kiro_bridge_payload <<<"$raw")
-
-# V3 and the IDE send session_id in the payload; 2.x does not (the bridge injects it from the env).
 raw_sid=""
+event="Stop"
 if command -v jq >/dev/null 2>&1; then
   raw_sid=$(printf '%s' "$raw" | jq -r '.session_id // empty' 2>/dev/null) || raw_sid=""
+  event=$(printf '%s' "$raw" | jq -r '.hook_event_name // "Stop"' 2>/dev/null) || event="Stop"
 fi
-
-# Capture the policy's stderr (stdout discarded) and its exit code without a temp file.
-errtext=$(bash "$here/../../.doflow/shared/hooks/policies/stop-check.sh" <<<"$payload" 2>&1 >/dev/null)
-rc=$?
-
-if [ "$rc" -eq 2 ]; then
-  if [ -n "$raw_sid" ] && command -v jq >/dev/null 2>&1; then
-    jq -n --arg reason "$errtext" '{decision: "block", reason: $reason}'
-    exit 0
-  fi
-  printf '%s\n' "$errtext" >&2
-  exit 2
+if [ -n "$raw_sid" ]; then
+  export DOFLOW_KIRO_ENGINE=v3
+else
+  export DOFLOW_KIRO_ENGINE=2x
 fi
-exit 0
+bridge="$here/../../.doflow/shared/hooks/bridge/bridge.sh"
+if [ ! -f "$bridge" ]; then exit 0; fi
+. "$bridge" 2>/dev/null || exit 0
+exec 4>&1
+if bridge_stderr=$(doflow_bridge kiro "$event" stop-check <<<"$payload" 2>&1 1>&4); then
+  status=0
+else
+  status=$?
+fi
+exec 4>&-
+if [ "$status" -eq 2 ] && [ "$DOFLOW_KIRO_ENGINE" = 2x ]; then
+  printf '%s\n' "$bridge_stderr" >&2
+fi
+exit "$status"