@khoavu882/doflow 2.0.0-beta.5 → 2.0.1

package/core/harnesses/copilot/hooks/doflow.json

@@ -0,0 +1,51 @@
+{
+  "version": 1,
+  "hooks": {
+    "sessionStart": [
+      {
+        "type": "command",
+        "bash": "bash \"$(root=$(git rev-parse --show-toplevel 2>/dev/null) && [ -f \"$root/.github/hooks/doflow-session-start.sh\" ] && printf '%s/.github/hooks/doflow-session-start.sh' \"$root\" || printf '%s/hooks/doflow-session-start.sh' \"${COPILOT_HOME:-$HOME/.copilot}\")\"",
+        "cwd": ".",
+        "timeoutSec": 10
+      }
+    ],
+    "preToolUse": [
+      {
+        "type": "command",
+        "bash": "bash \"$(root=$(git rev-parse --show-toplevel 2>/dev/null) && [ -f \"$root/.github/hooks/doflow-pre-implement-gate.sh\" ] && printf '%s/.github/hooks/doflow-pre-implement-gate.sh' \"$root\" || printf '%s/hooks/doflow-pre-implement-gate.sh' \"${COPILOT_HOME:-$HOME/.copilot}\")\"",
+        "cwd": ".",
+        "timeoutSec": 20
+      },
+      {
+        "type": "command",
+        "bash": "bash \"$(root=$(git rev-parse --show-toplevel 2>/dev/null) && [ -f \"$root/.github/hooks/doflow-mcp-tool-guard.sh\" ] && printf '%s/.github/hooks/doflow-mcp-tool-guard.sh' \"$root\" || printf '%s/hooks/doflow-mcp-tool-guard.sh' \"${COPILOT_HOME:-$HOME/.copilot}\")\"",
+        "cwd": ".",
+        "timeoutSec": 20
+      }
+    ],
+    "agentStop": [
+      {
+        "type": "command",
+        "bash": "bash \"$(root=$(git rev-parse --show-toplevel 2>/dev/null) && [ -f \"$root/.github/hooks/doflow-stop-check.sh\" ] && printf '%s/.github/hooks/doflow-stop-check.sh' \"$root\" || printf '%s/hooks/doflow-stop-check.sh' \"${COPILOT_HOME:-$HOME/.copilot}\")\"",
+        "cwd": ".",
+        "timeoutSec": 30
+      }
+    ],
+    "subagentStart": [
+      {
+        "type": "command",
+        "bash": "bash \"$(root=$(git rev-parse --show-toplevel 2>/dev/null) && [ -f \"$root/.github/hooks/doflow-subagent-start.sh\" ] && printf '%s/.github/hooks/doflow-subagent-start.sh' \"$root\" || printf '%s/hooks/doflow-subagent-start.sh' \"${COPILOT_HOME:-$HOME/.copilot}\")\"",
+        "cwd": ".",
+        "timeoutSec": 10
+      }
+    ],
+    "subagentStop": [
+      {
+        "type": "command",
+        "bash": "bash \"$(root=$(git rev-parse --show-toplevel 2>/dev/null) && [ -f \"$root/.github/hooks/doflow-subagent-stop.sh\" ] && printf '%s/.github/hooks/doflow-subagent-stop.sh' \"$root\" || printf '%s/hooks/doflow-subagent-stop.sh' \"${COPILOT_HOME:-$HOME/.copilot}\")\"",
+        "cwd": ".",
+        "timeoutSec": 10
+      }
+    ]
+  }
+}

package/core/harnesses/kiro/agents/doflow.json

@@ -1,7 +1,7 @@
 {
   "name": "doflow",
   "description": "DoFlow main session: spec-driven delivery with lifecycle hooks and specialist dispatch",
-  "prompt": "You are the DoFlow main session. Follow the DoFlow steering files under .kiro/steering (principles, rules, the spec-driven chain) and the skills under .kiro/skills. Dispatch specialist work by role to core-implementer, quality-guardian, spec-analyst, system-architect or research-writer, and keep decisions, verification and records in this session.\n",
+  "prompt": "You are the DoFlow main session. Follow the DoFlow steering files under .kiro/steering (principles, rules, the spec-driven chain) and the skills under .kiro/skills. Dispatch specialist work by role to core-implementer, delivery-lead, quality-guardian, reviewer, spec-analyst, system-architect or research-writer, and keep decisions, verification and records in this session.\n",
   "tools": [
     "*"
   ],
@@ -16,16 +16,6 @@
       },
       "timeout": 10
     },
-    {
-      "name": "doflow-pre-bash-guard",
-      "trigger": "preToolUse",
-      "matcher": "shell",
-      "action": {
-        "type": "command",
-        "command": "bash \"$(root=$(git rev-parse --show-toplevel 2>/dev/null) && [ -f \"$root/.kiro/hooks/pre-bash-guard.sh\" ] && printf '%s/.kiro/hooks/pre-bash-guard.sh' \"$root\" || printf '%s/.kiro/hooks/pre-bash-guard.sh' \"$HOME\")\""
-      },
-      "timeout": 10
-    },
     {
       "name": "doflow-mcp-tool-guard",
       "trigger": "preToolUse",

package/core/harnesses/kiro/hooks/doflow.json

@@ -19,16 +19,6 @@
       },
       "enabled": true
     },
-    {
-      "name": "doflow-pre-bash-guard",
-      "trigger": "PreToolUse",
-      "matcher": "shell",
-      "action": {
-        "type": "command",
-        "command": "bash \"$(root=$(git rev-parse --show-toplevel 2>/dev/null) && [ -f \"$root/.kiro/hooks/pre-bash-guard.sh\" ] && printf '%s/.kiro/hooks/pre-bash-guard.sh' \"$root\" || printf '%s/.kiro/hooks/pre-bash-guard.sh' \"$HOME\")\""
-      },
-      "enabled": true
-    },
     {
       "name": "doflow-mcp-tool-guard",
       "trigger": "PreToolUse",

package/core/harnesses/kiro/hooks/lib.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; then jq() { command jq -b "$@"; }; fi ;; esac # native jq.exe ends lines with CRLF unless -b
 # lib.sh — shared constants and helpers for session lifecycle hooks
 #
 # Usage: source "$(dirname "$0")/lib.sh"
@@ -17,13 +18,30 @@ set -euo pipefail
 
 # ── State directories ────────────────────────────────────────────────────────
 
-# XDG-compliant, agent-agnostic store shared by Claude Code, Codex, Gemini, etc.
-DOFLOW_HOME="${XDG_CONFIG_HOME:-$HOME/.config}/doflow"
-STATE_DIR="$DOFLOW_HOME/session-env"
-SESSION_DIR="$STATE_DIR/sessions"
-PROJECTS_DIR="$STATE_DIR/projects"
+# XDG-compliant, agent-agnostic store shared by every harness DoFlow supports, under the config home
+# (doflow_config_home: an absolute XDG_CONFIG_HOME, else an absolute HOME + /.config, else none). With
+# no config home every state path below is empty, sourcing this file still never exits, and each state
+# function returns 0 at once: session work is skipped and a guard reaches its own decision (086 IC-010).
+# BEGIN doflow-config-home v1 (rule: src/runtime/config-home.js; checked by test/guards/settings.test.js)
+doflow_config_home() {
+  DOFLOW_HOME=""
+  case "${XDG_CONFIG_HOME:-}" in
+    /*) DOFLOW_HOME="${XDG_CONFIG_HOME}/doflow"; return 0 ;;
+    [A-Za-z]:[\\/]*) case "${OSTYPE:-}" in msys*|cygwin*|win32*) DOFLOW_HOME="${XDG_CONFIG_HOME}/doflow"; return 0 ;; esac ;;
+  esac
+  case "${HOME:-}" in
+    /*) DOFLOW_HOME="${HOME}/.config/doflow" ;;
+    [A-Za-z]:[\\/]*) case "${OSTYPE:-}" in msys*|cygwin*|win32*) DOFLOW_HOME="${HOME}/.config/doflow" ;; esac ;;
+  esac
+  return 0
+}
+# END doflow-config-home v1
+doflow_config_home
+STATE_DIR="${DOFLOW_HOME:+$DOFLOW_HOME/session-env}"
+SESSION_DIR="${STATE_DIR:+$STATE_DIR/sessions}"
+PROJECTS_DIR="${STATE_DIR:+$STATE_DIR/projects}"
 # shellcheck disable=SC2034  # used by session-start.sh and session-end.sh which source this file
-SESSIONS_LOG="$DOFLOW_HOME/sessions.log"
+SESSIONS_LOG="${DOFLOW_HOME:+$DOFLOW_HOME/sessions.log}"
 
 # Identifies which agent is running. Override via env var for non-Claude agents.
 export DOFLOW_AGENT="${DOFLOW_AGENT:-unknown}"
@@ -246,6 +264,7 @@ cwd_hash() {
 # Safe to call multiple times (mkdir -p is idempotent).
 ensure_session_dir() {
   local session_id="$1"
+  [ -n "$SESSION_DIR" ] || return 0
   mkdir -p "$SESSION_DIR/$session_id"
   echo "$SESSION_DIR/$session_id"
 }
@@ -255,6 +274,7 @@ ensure_session_dir() {
 ensure_project_dir() {
   local cwd="$1"
   local hash
+  [ -n "$PROJECTS_DIR" ] || return 0
   hash=$(cwd_hash "$cwd")
   mkdir -p "$PROJECTS_DIR/$hash"
   echo "$PROJECTS_DIR/$hash"

package/core/harnesses/kiro/hooks/mcp-tool-guard.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; then jq() { command jq -b "$@"; }; fi ;; esac # native jq.exe ends lines with CRLF unless -b
 # Kiro front door: mcp-tool-guard through the shared lifecycle bridge.
 set -euo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"
@@ -10,11 +11,15 @@ payload=$(kiro_bridge_payload <<<"$raw")
 event="PreToolUse"
 if command -v jq >/dev/null 2>&1; then event=$(printf '%s' "$raw" | jq -r '.hook_event_name // "PreToolUse"' 2>/dev/null) || event="PreToolUse"; fi
 bridge="$here/../../.doflow/shared/hooks/bridge/bridge.sh"
-if [ ! -f "$bridge" ]; then
+# D1: a missing bridge allows with a warning on stderr. Only strict-1, a person's opt-in, blocks.
+bridge_missing=0
+[ -f "$bridge" ] || bridge_missing=1
+if [ "$bridge_missing" -eq 0 ]; then . "$bridge" 2>/dev/null || bridge_missing=1; fi
+if [ "$bridge_missing" -eq 1 ]; then
   printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2
-  exit 2
+  if [ "${DOFLOW_FAULT_PROFILE:-}" = strict-1 ]; then exit 2; fi
+  exit 0
 fi
-. "$bridge" 2>/dev/null || { printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2; exit 2; }
 if doflow_bridge kiro "$event" mcp-tool-guard <<<"$payload"; then
   status=0
 else

package/core/harnesses/kiro/hooks/pre-implement-gate.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; then jq() { command jq -b "$@"; }; fi ;; esac # native jq.exe ends lines with CRLF unless -b
 # Kiro front door: pre-implementation-gate through the shared lifecycle bridge.
 set -euo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"
@@ -10,11 +11,15 @@ payload=$(kiro_bridge_payload <<<"$raw")
 event="PreToolUse"
 if command -v jq >/dev/null 2>&1; then event=$(printf '%s' "$raw" | jq -r '.hook_event_name // "PreToolUse"' 2>/dev/null) || event="PreToolUse"; fi
 bridge="$here/../../.doflow/shared/hooks/bridge/bridge.sh"
-if [ ! -f "$bridge" ]; then
+# D1: a missing bridge allows with a warning on stderr. Only strict-1, a person's opt-in, blocks.
+bridge_missing=0
+[ -f "$bridge" ] || bridge_missing=1
+if [ "$bridge_missing" -eq 0 ]; then . "$bridge" 2>/dev/null || bridge_missing=1; fi
+if [ "$bridge_missing" -eq 1 ]; then
   printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2
-  exit 2
+  if [ "${DOFLOW_FAULT_PROFILE:-}" = strict-1 ]; then exit 2; fi
+  exit 0
 fi
-. "$bridge" 2>/dev/null || { printf '%s\n' '[doflow] shared hooks lack the bridge; run: doflow update -t kiro' >&2; exit 2; }
 if doflow_bridge kiro "$event" pre-implementation-gate <<<"$payload"; then
   status=0
 else

package/core/harnesses/kiro/hooks/session-start.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; then jq() { command jq -b "$@"; }; fi ;; esac # native jq.exe ends lines with CRLF unless -b
 # Kiro front door: session-context through the shared lifecycle bridge.
 set -euo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"

package/core/harnesses/kiro/hooks/stop-check.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; then jq() { command jq -b "$@"; }; fi ;; esac # native jq.exe ends lines with CRLF unless -b
 # Kiro Stop front door: translate the native payload, then render the bridge verdict for its engine.
 set -uo pipefail
 export DOFLOW_AGENT="${DOFLOW_AGENT:-kiro}"

package/core/harnesses/pi/extensions/doflow-guard.js

@@ -6,7 +6,6 @@ import { fileURLToPath } from 'node:url';
 const BRIDGE = new URL('../../shared/hooks/bridge/bridge.sh', import.meta.url);
 const ROUTES = [
   { tools: ['edit', 'write'], policy: 'pre-implementation-gate' },
-  { tools: ['bash'], policy: 'pre-bash-guard' },
 ];
 const LIMIT = 1024 * 1024;
 const TIMEOUT_MS = 5000;
@@ -136,7 +135,16 @@ export default function (pi) {
       if (profile !== 'compat-1' && profile !== 'strict-1') captureFailure(policy, 'fault-profile-unknown');
       if (!existsSync(BRIDGE)) {
         captureFailure(policy, 'bridge-missing');
-        return { block: true, reason: '[doflow] shared hooks lack the bridge; run: doflow update -t pi' };
+        // D1: a missing bridge allows (the failure is recorded for doctor); only strict-1, a person's opt-in, blocks.
+        if (profile === 'strict-1') return { block: true, reason: '[doflow] shared hooks lack the bridge; run: doflow update -t pi' };
+        return undefined;
+      }
+      let model;
+      try {
+        const modelId = ctx.model?.id;
+        if (typeof modelId === 'string' && modelId.length > 0) model = modelId;
+      } catch {
+        // A model getter must not prevent the tool call from reaching the bridge.
       }
       const payload = JSON.stringify({
         type: event.type,
@@ -146,6 +154,7 @@ export default function (pi) {
         input: event.input,
         cwd: ctx.cwd,
         sessionId: ctx.sessionManager?.getSessionId?.() ?? null,
+        ...(model ? { model } : {}),
       });
       if (Buffer.byteLength(payload) > LIMIT) throw Object.assign(new Error('bridge input exceeded limit'), { failurePoint: 'bridge-input-limit' });
       return await bridgeCall(policy, payload, ctx);

package/core/harnesses/shared/hooks/ENVELOPE_MIGRATION.md

@@ -22,7 +22,6 @@ tool's official docs (cross-checked against tool source where docs were incomple
 |---|---|---|
 | Claude Code | `PreToolUse` | `tool_name` Edit/Write/MultiEdit; `tool_input.file_path` |
 | Codex | `PreToolUse` | `apply_patch` carries paths inside a unified diff under `tool_input.command` — the ONE decoder that must parse patch text |
-| Gemini CLI | `BeforeTool` | also offers `BeforeToolSelection` (pre-selection restriction), which the gate does not use |
 | GitHub Copilot | `preToolUse` | camelCase event names; `permissionRequest` is CLI-only, not fired in the cloud agent |
 | OpenCode | `tool.execute.before` | a pluggable hook method, not a sub-event of the generic `event` hook |
 | Pi | `tool_call` | The live-observed `cli-extension` pre-implementation gate row blocks. Project-interactive and user-interactive rows remain unknown; interactive loading and project-trust behavior were not observed. `tool_execution_start` is observation-only |
@@ -37,7 +36,7 @@ them through), but sending nothing for a non-edit tool is equally correct and ch
 ## Version and mixed-install rules
 
 - A missing envelope or version, empty or non-object input, or a missing `contract.sh` is out of
-  step. The gate, bash guard and MCP guard deny with `DoFlow hooks out of step; run: doflow update
+  step. The gate and MCP guard deny with `DoFlow hooks out of step; run: doflow update
   -t <harness>`; Stop and context policies exit silently, except the prompt hook emits its `{}`
   no-op. Other envelope versions are unsupported and policies evaluate nothing.
 - If a door cannot load `bridge/bridge.sh`, it renders its fixed native out-of-step response. The

package/core/harnesses/shared/hooks/adapters/antigravity.js

@@ -20,7 +20,7 @@
  *
  * SessionStart and PostToolUse have no dedicated Antigravity-native shim in
  * src/adapters/antigravity/index.js's live projection. No Phase A canonical policy owns PostToolUse today (only
- * session-context, pre-implementation-gate, mcp-tool-guard, stop-check, pre-bash-guard exist),
+ * session-context, pre-implementation-gate, mcp-tool-guard, stop-check exist),
  * so its native shape is an ack passthrough either way.
  */
 

package/core/harnesses/shared/hooks/bridge/bridge.sh

@@ -1,6 +1,7 @@
 #!/usr/bin/env bash
+case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; then jq() { command jq -b "$@"; }; fi ;; esac # native jq.exe ends lines with CRLF unless -b
 # Shared lifecycle bridge. Sourcing defines functions only; it sets no shell options or traps.
-case ${BASH_SOURCE[0]} in */*) _DOFLOW_BRIDGE_DIR=${BASH_SOURCE[0]%/*} ;; *) _DOFLOW_BRIDGE_DIR=. ;; esac
+_DOFLOW_SRC=${BASH_SOURCE[0]//\\//}; case $_DOFLOW_SRC in */*) _DOFLOW_BRIDGE_DIR=${_DOFLOW_SRC%/*} ;; *) _DOFLOW_BRIDGE_DIR=. ;; esac
 
 doflow_bridge_failure() {
   local policy="$1" point="$2"
@@ -41,64 +42,151 @@ doflow_bridge_effect() {
     profile=compat-1; doflow_bridge_failure "$policy" fault-profile-unknown
   fi
   DF_BRIDGE_PROFILE="$profile"
-  case "$policy" in pre-implementation-gate|pre-bash-guard|mcp-tool-guard|stop-check) block=1;; esac
+  case "$policy" in pre-implementation-gate|mcp-tool-guard|stop-check) block=1;; esac
   DF_BRIDGE_EFFECT=proceed
   if [ "$outcome" = deny ]; then DF_BRIDGE_EFFECT=block
   elif [ "$profile" = strict-1 ] && [ "$block" -eq 1 ] && [ "$policy" != stop-check ] && { [ "$outcome" = error ] || [ "$outcome" = unsupported ] || [ "$DF_BRIDGE_CODE" = bridge-spawn ] || [ "$DF_BRIDGE_CODE" = envelope-encode ]; }; then DF_BRIDGE_EFFECT=block
-  elif [ "$outcome" = error ] && [ "$DF_BRIDGE_CODE" != bridge-spawn ] && [ -n "$DF_BRIDGE_POINT" ] && [ "$profile" = compat-1 ]; then
-    case "$harness:$event" in
-      claude:PreToolUse|codex:PreToolUse|gemini:BeforeTool|pi:tool_call) DF_BRIDGE_EFFECT=block ;;
-      antigravity:PreToolUse|antigravity:Stop) case "$DF_BRIDGE_CODE" in signal-*) DF_BRIDGE_EFFECT=proceed;; *) DF_BRIDGE_EFFECT=block;; esac ;;
-      kiro:PreToolUse) [ "$DF_BRIDGE_CODE" = exit-2-unmarked ] && DF_BRIDGE_EFFECT=block ;;
-      claude:Stop) [ "$DF_BRIDGE_CODE" = exit-2-unmarked ] && DF_BRIDGE_EFFECT=block ;;
-      codex:Stop|codex:stop|kiro:Stop|kiro:stop) [ "$DF_BRIDGE_CODE" = exit-2-unmarked ] && DF_BRIDGE_EFFECT=block || DF_BRIDGE_EFFECT=proceed ;;
-    esac
   fi
+  # D1 (advise-only hooks): under compat-1 a faulting policy never blocks, on any harness. Only a policy
+  # that answered deny (mcp-tool-guard blocked-pattern) blocks, and strict-1, a person's opt-in, blocks
+  # on a fault of a blocking policy (above).
 }
 
 doflow_bridge_drops_tool_streams() {
   case "$1" in
-    pre-implementation-gate|pre-bash-guard|mcp-tool-guard) ;;
+    pre-implementation-gate|mcp-tool-guard) ;;
     *) return 1 ;;
   esac
   case "$2:$3" in
-    claude:PreToolUse|codex:PreToolUse|gemini:BeforeTool|kiro:PreToolUse|antigravity:PreToolUse|antigravity:Stop|pi:tool_call) return 0 ;;
+    claude:PreToolUse|codex:PreToolUse|copilot:PreToolUse|kiro:PreToolUse|antigravity:PreToolUse|antigravity:Stop|pi:tool_call) return 0 ;;
     *) return 1 ;;
   esac
 }
 
 doflow_bridge_drops_tool_stderr() {
   case "$1:$2:$3" in
-    pre-implementation-gate:kiro:PreToolUse|pre-bash-guard:kiro:PreToolUse|mcp-tool-guard:kiro:PreToolUse) return 1 ;;
+    pre-implementation-gate:kiro:PreToolUse|mcp-tool-guard:kiro:PreToolUse) return 1 ;;
   esac
   doflow_bridge_drops_tool_streams "$1" "$2" "$3"
 }
 
+# One hook line (IC-004) for an allowlisted surface, from the encode tuple in DF_TUPLE, appended to
+# <config>/state/runs/telemetry/<UTC date>.jsonl. Builtins only on the path that writes; every step
+# returns 0, and nothing reaches stdout or stderr. Args: harness, normalised event, policy, and the
+# policy's emit record (rider R1, user-prompt-submit only): its reason, byte count and digest are
+# written only when each passes its pattern (a vocabulary member, digits, 8 lowercase hex or null),
+# else all three are null, as they are on every other line.
+doflow_bridge_hook_line() {
+  local d="" f="" day="" rest="" duration=null t1="" er=null eb=null eg=null r="" b="" g=""
+  [ "${DOFLOW_TELEMETRY:-}" != off ] || return 0
+  case "$DF_TUPLE" in ''|'{"dft":1}') return 0 ;; esac
+  case "$1:$3:$2" in
+    claude:user-prompt-submit:UserPromptSubmit|codex:user-prompt-submit:UserPromptSubmit) ;;
+    *) return 0 ;;
+  esac
+  if [ -n "${DOFLOW_CONFIG_DIR:-}" ]; then
+    d=$DOFLOW_CONFIG_DIR
+  else
+    d=${PWD:-}
+    case "$d" in /*) ;; *) return 0 ;; esac
+    while :; do
+      if [ -d "$d/.doflow" ]; then
+        case "$d/" in
+          */.doflow/*) ;;
+          *) d=${d%/}/.doflow; break ;;
+        esac
+      fi
+      [ -n "$d" ] && [ "$d" != "/" ] || return 0
+      d=${d%/*}
+    done
+  fi
+  [ -d "$d/state" ] || return 0
+  day=${DF_TUPLE:17:10}
+  case "$day" in [0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]) ;; *) return 0 ;; esac
+  rest=${DF_TUPLE#\{\"dft\":1,\"date\":\"??????????\",}
+  case "$rest" in \"timestamp\":*\}) ;; *) return 0 ;; esac
+  if [ -n "$_df_t0" ]; then
+    t1=${EPOCHREALTIME:-}; t1=${t1/[.,]/}; _df_t0=${_df_t0/[.,]/}
+    case "$t1$_df_t0" in ''|*[!0-9]*) ;; *) duration=$(( (t1 - _df_t0) / 1000 )); [ "$duration" -ge 0 ] || duration=null ;; esac
+  fi
+  if [ "$3" = user-prompt-submit ] && [ -n "${4:-}" ]; then
+    r=${4#*\"reason\":\"}; r=${r%%\"*}
+    b=${4#*\"bytes\":}; b=${b%%[,\}]*}
+    g=${4#*\"digest\":}; g=${g%%[,\}]*}
+    case "$r" in
+      emit|refused:mandatory-over-budget|silent:already-bootstrapped|silent:unchanged|silent:no-home|fault:deps|fault:unit|fault:slot|fault:summary|fault:grant|fault:warning|fault:render) ;;
+      *) r="" ;;
+    esac
+    # Explicit character lists: a locale's collation can put capitals inside a range such as [a-f].
+    case "$b" in ''|*[!0123456789]*|0?*|???????????*) b="" ;; esac
+    case "$g" in
+      null|\"[0123456789abcdef][0123456789abcdef][0123456789abcdef][0123456789abcdef][0123456789abcdef][0123456789abcdef][0123456789abcdef][0123456789abcdef]\") ;;
+      *) g="" ;;
+    esac
+    if [ -n "$r" ] && [ -n "$b" ] && [ -n "$g" ]; then er=\"$r\"; eb=$b; eg=$g; fi
+  fi
+  [ -d "$d/state/runs/telemetry" ] || mkdir "$d/state/runs/telemetry" 2>/dev/null || return 0
+  f=$d/state/runs/telemetry/$day.jsonl
+  [ ! -e "$f" ] || [ -f "$f" ] || return 0
+  { printf '{"kind":"hook","harness":"%s","event":"%s","policy":"%s","verdict":"%s","duration_ms":%s,"emit_reason":%s,"emit_bytes":%s,"emit_digest":%s,%s\n' "$1" "$2" "$3" "$DF_BRIDGE_OUTCOME" "$duration" "$er" "$eb" "$eg" "$rest" >>"$f"; } 2>/dev/null || true
+  return 0
+}
+
 doflow_bridge() {
-  local harness="${1:-}" event="${2:-}" policy="${3:-}" response_event="" emit="native" payload="" encoded="" policy_path="" captured="" err="" code=0 policy_code=0 record="" reason="" decision_reason="" stdout="" status=0 decision="" line="" spawn_failed=0 encode_failed=0
+  local harness="${1:-}" event="${2:-}" policy="${3:-}" response_event="" emit="native" payload="" encoded="" policy_path="" captured="" err="" code=0 policy_code=0 record="" emit_record="" reason="" decision_reason="" stdout="" status=0 decision="" advice="" out_of_step=0 line="" spawn_failed=0 encode_failed=0 _df_t0=""
+  DF_TUPLE=""
+  if [ "${BASH_VERSINFO[0]:-0}" -ge 5 ] 2>/dev/null; then _df_t0=${EPOCHREALTIME:-}; fi
   . "$_DOFLOW_BRIDGE_DIR/respond.sh"
   doflow_bridge_native_event_var "$harness" "$event"; response_event=$DF_NE
   if [ "${4:-}" = --emit ]; then emit="${5:-native}"; fi
   payload="$(cat)"
   if command -v jq >/dev/null 2>&1; then
-    encoded="$(printf '%s\n' "$payload" | DOFLOW_TASK_ID="${DOFLOW_TASK_ID:-}" DOFLOW_RUN_ID="${DOFLOW_RUN_ID:-}" DOFLOW_ATTEMPT="${DOFLOW_ATTEMPT:-}" DOFLOW_SESSION_ROLE="${DOFLOW_SESSION_ROLE:-}" jq -c --arg harness "$harness" --arg event "$event" --arg policy "$policy" --arg mode encode -f "$_DOFLOW_BRIDGE_DIR/envelope.jq" 2>/dev/null)" && {
+    encoded="$(printf '%s\n' "$payload" | DOFLOW_TASK_ID="${DOFLOW_TASK_ID:-}" DOFLOW_RUN_ID="${DOFLOW_RUN_ID:-}" DOFLOW_ATTEMPT="${DOFLOW_ATTEMPT:-}" DOFLOW_LINEAGE_ID="${DOFLOW_LINEAGE_ID:-}" DOFLOW_SESSION_ROLE="${DOFLOW_SESSION_ROLE:-}" DOFLOW_WORKTREE="${DOFLOW_WORKTREE:-}" jq -c --arg harness "$harness" --arg event "$event" --arg policy "$policy" --arg mode encode -f "$_DOFLOW_BRIDGE_DIR/envelope.jq" 2>/dev/null)" || encode_failed=1
+    # The telemetry tuple is the first line; without an envelope line after it there is no envelope.
+    case "$encoded" in
+      '{"dft"'*)
+        DF_TUPLE=${encoded%%$'\n'*}
+        case "$encoded" in *$'\n'*) encoded=${encoded#*$'\n'} ;; *) encoded="" ;; esac
+        ;;
+    esac
+    if [ "$encode_failed" -eq 0 ]; then
       case "$encoded" in \{*) payload="$encoded" ;; *) encode_failed=1 ;; esac
-    } || { encode_failed=1; }
+    fi
     if [ "$encode_failed" -eq 1 ]; then
       encoded="$(jq -cn --arg harness "$harness" --arg event "$event" --arg policy "$policy" --arg mode minimal -f "$_DOFLOW_BRIDGE_DIR/envelope.jq" 2>/dev/null)" || encoded=""
       case "$encoded" in \{*) payload="$encoded" ;; *) payload="{\"doflow_event\":{\"version\":1,\"harness\":\"$harness\",\"event\":\"$event\",\"operation\":\"tool\"}}" ;; esac
       doflow_bridge_failure "$policy" envelope-encode
+    else
+      # Step observe-model (row 120 IC-005): an envelope whose identity names a model is recorded
+      # under the config home. It never changes the decision, the exit code or the streams.
+      case "$payload" in
+        *'"doflow_event":{'*'"model":"'*)
+          [ ! -f "$_DOFLOW_BRIDGE_DIR/observe-model.sh" ] || ( . "$_DOFLOW_BRIDGE_DIR/observe-model.sh" && doflow_observe_model "$harness" "$payload" ) >/dev/null 2>&1 </dev/null || true
+          ;;
+      esac
     fi
   else
     doflow_bridge_failure "$policy" dependency-missing:jq
   fi
   case "$policy" in
-    pre-implementation-gate|pre-bash-guard|mcp-tool-guard|stop-check|session-context|user-prompt-submit|subagent-audit) ;;
+    pre-implementation-gate|mcp-tool-guard|stop-check|session-context|user-prompt-submit|subagent-audit) ;;
     *) spawn_failed=1 ;;
   esac
   policy_path="$_DOFLOW_BRIDGE_DIR/../policies/$policy.sh"
-  if [ "$spawn_failed" -eq 1 ] || [ ! -f "$policy_path" ]; then
+  if [ "$spawn_failed" -eq 1 ] || [ ! -f "$policy_path" ] || [ ! -f "$_DOFLOW_BRIDGE_DIR/../policies/contract.sh" ]; then
     code=127; err=""; spawn_failed=1
+    # Without contract.sh no policy can run. The gate and the tool guard still say so: the one
+    # out-of-step line goes out as advice below, and the fault is recorded as bridge-spawn.
+    case "$policy" in
+      pre-implementation-gate|mcp-tool-guard)
+        if [ -f "$policy_path" ] && [ ! -f "$_DOFLOW_BRIDGE_DIR/../policies/contract.sh" ]; then
+          out_of_step="${DOFLOW_AGENT:-$harness}"
+          if [[ "$out_of_step" =~ ^[a-z]+$ ]]; then err="[$policy] DoFlow hooks out of step; run: doflow update -t $out_of_step"$'\n'
+          else err="[$policy] DoFlow hooks out of step; run: doflow update"$'\n'; fi
+          out_of_step=1
+        fi
+        ;;
+    esac
   else
     if [ "$emit" = decision ] || doflow_bridge_drops_tool_streams "$policy" "$harness" "$response_event" || { [ "$harness" = kiro ] && [ "$response_event" = Stop ]; }; then exec 5>/dev/null; else exec 5>&1; fi
     captured="$( {
@@ -113,7 +201,11 @@ doflow_bridge() {
     case "$line" in
       *$'\036'*)
         local prefix="${line%%$'\036'*}"
-        record="${line#*$'\036'}"
+        # Rider R1: the emit record is telemetry, never the decision record.
+        case "${line#*$'\036'}" in
+          '{"v":1,"emit":'*) emit_record="${line#*$'\036'}" ;;
+          *) record="${line#*$'\036'}" ;;
+        esac
         [ -z "$prefix" ] || err="$err$prefix"$'\n'
         ;;
       *) err="$err$line"$'\n' ;;
@@ -125,6 +217,7 @@ doflow_bridge() {
   if [ "$spawn_failed" -eq 1 ]; then DF_BRIDGE_OUTCOME=error; DF_BRIDGE_CODE=bridge-spawn; DF_BRIDGE_REASON=bridge-spawn; DF_BRIDGE_VERSION=0; DF_BRIDGE_POINT=bridge-spawn; fi
   if [ -n "$DF_BRIDGE_POINT" ] && [ "$DF_BRIDGE_POINT" != decision-mismatch ] && [ "$DF_BRIDGE_POINT" != eval-error:signal-TERM ] && [ "$DF_BRIDGE_POINT" != eval-error:signal-INT ] && [ "$DF_BRIDGE_POINT" != eval-error:signal-PIPE ]; then doflow_bridge_failure "$policy" "$DF_BRIDGE_POINT"; fi
   doflow_bridge_effect "$harness" "$event" "$policy" "$DF_BRIDGE_OUTCOME"
+  doflow_bridge_hook_line "$harness" "$response_event" "$policy" "$emit_record"
   if [ "$DF_BRIDGE_EFFECT" = block ] && [ "$DF_BRIDGE_OUTCOME" != deny ]; then reason="[$policy] DoFlow policy error; details: doflow-run failure list"; fi
   if [ "$DF_BRIDGE_OUTCOME" != deny ] && [ "$DF_BRIDGE_EFFECT" = proceed ]; then
     case "$harness:$response_event:$DF_BRIDGE_OUTCOME" in
@@ -155,7 +248,9 @@ doflow_bridge() {
     status=0
     if [ "$DF_BRIDGE_OUTCOME" = error ]; then
       case "$policy:$harness:$response_event" in
-        session-context:*:*|user-prompt-submit:*:*|subagent-audit:*:*|*:kiro:PreToolUse|*:claude:Stop) status="$code" ;;
+        session-context:*:*|user-prompt-submit:*:*|subagent-audit:*:*) status="$code" ;;
+        # The blocking-set policies are advise-only (D1): a proceed effect must not let a raw exit 2 block.
+        *:kiro:PreToolUse|*:claude:Stop) case "$policy" in pre-implementation-gate|mcp-tool-guard|stop-check) status=0 ;; *) status="$code" ;; esac ;;
       esac
     fi
   fi
@@ -165,14 +260,22 @@ doflow_bridge() {
     local render_status=$?
     return "$render_status"
   fi
+  # D1: an advisory (or out-of-step) line from a blocking-set policy is shown where the harness shows it.
+  advice=""
+  if [ "$DF_BRIDGE_EFFECT" = proceed ] && { [ "$DF_BRIDGE_OUTCOME" = advisory ] || [ "$DF_BRIDGE_OUTCOME" = unsupported ] || [ "$out_of_step" = 1 ]; } && [ -n "$err" ]; then
+    case "$policy:$harness:$response_event" in
+      pre-implementation-gate:claude:PreToolUse|pre-implementation-gate:codex:PreToolUse|mcp-tool-guard:claude:PreToolUse|mcp-tool-guard:codex:PreToolUse|stop-check:claude:Stop|stop-check:codex:Stop|stop-check:codex:stop)
+        advice="${err%$'\n'}"; advice="${advice//$'\n'/ }" ;;
+    esac
+  fi
   case "$policy:$DF_BRIDGE_OUTCOME:$harness:$response_event:$DF_BRIDGE_CODE" in
     session-context:error:*:*:*|user-prompt-submit:error:*:*:*|subagent-audit:error:*:*:*|session-context:unsupported:*:*:*|user-prompt-submit:unsupported:*:*:*|subagent-audit:unsupported:*:*:*) ;;
-    *:error:codex:Stop:exit-*|*:error:codex:Stop:signal-*|*:error:codex:stop:exit-*|*:error:codex:stop:signal-*|*:error:kiro:PreToolUse:exit-*|*:error:kiro:PreToolUse:signal-*|*:error:kiro:Stop:exit-*|*:error:kiro:Stop:signal-*|*:error:claude:Stop:exit-*|*:error:claude:Stop:signal-*) ;;
+    *:error:codex:Stop:exit-*|*:error:codex:Stop:signal-*|*:error:copilot:Stop:exit-*|*:error:copilot:Stop:signal-*|*:error:codex:stop:exit-*|*:error:codex:stop:signal-*|*:error:kiro:PreToolUse:exit-*|*:error:kiro:PreToolUse:signal-*|*:error:kiro:Stop:exit-*|*:error:kiro:Stop:signal-*|*:error:claude:Stop:exit-*|*:error:claude:Stop:signal-*) ;;
     *)
-      if ! doflow_bridge_drops_tool_stderr "$policy" "$harness" "$response_event" && [ -n "$err" ]; then printf '%s' "$err" >&2; fi
+      if [ -z "$advice" ] && ! doflow_bridge_drops_tool_stderr "$policy" "$harness" "$response_event" && [ -n "$err" ]; then printf '%s' "$err" >&2; fi
       ;;
   esac
-  doflow_render_response "$harness" "$event" "$DF_BRIDGE_OUTCOME" "$reason" "$status"
+  doflow_render_response "$harness" "$event" "$DF_BRIDGE_OUTCOME" "$reason" "$status" "$advice"
   local render_status=$?
   return "$render_status"
 }