@khoavu882/doflow 2.0.0-beta.5 → 2.0.1

package/core/harnesses/shared/hooks/policies/pre-implementation-gate.sh

@@ -1,11 +1,12 @@
 #!/usr/bin/env bash
-case $0 in */*) _DOFLOW_POLDIR=${0%/*} ;; *) _DOFLOW_POLDIR=. ;; esac
+case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; then jq() { command jq -b "$@"; }; fi ;; esac # native jq.exe ends lines with CRLF unless -b
+_DOFLOW_SRC=${0//\\//}; case $_DOFLOW_SRC in */*) _DOFLOW_POLDIR=${_DOFLOW_SRC%/*} ;; *) _DOFLOW_POLDIR=. ;; esac
 # pre-implementation-gate.sh — Canonical Policy Library: PreToolUse(Edit|Write|...)
-# backstop for the doflow implement gate. The HARD half of the one enforced
-# gate (the other half is the prompt-level do-prereqs.sh inside
-# /do-execute-plan — defense in depth).
+# advisory for the doflow implement gate (the other half is the prompt-level
+# do-prereqs.sh inside /do-execute-plan). It never denies: each finding below is
+# a doflow_decide advisory code plus one stderr line.
 #
-# Denies a SOURCE-file edit in two cases:
+# Advises on a SOURCE-file edit in two cases:
 #   1. a feature has been STARTED (its feature_dir exists, in this checkout or,
 #      from a linked worktree, in the main checkout) but requirement.md,
 #      design.md, or plan.md is still missing: "don't write code before you've
@@ -22,20 +23,20 @@ case $0 in */*) _DOFLOW_POLDIR=${0%/*} ;; *) _DOFLOW_POLDIR=. ;; esac
 #   - edit target is under agent-docs/ -> allow (editing the artifacts themselves)
 #   - edit target outside the repo     -> allow
 # It reads files with jq and lists checkouts with one git call; it never runs
-# the DoFlow runtime. Missing or malformed v1 input is denied as out of step; other faults follow IC-011.
+# the DoFlow runtime. Missing or malformed v1 input is allowed with an out-of-step line; other faults follow IC-011.
 #
 # Canonical Policy Script Contract (design.md §4):
 #   env    DOFLOW_PROJECT_DIR (repo root, if the front door sets it),
 #          DOFLOW_AGENT (harness id, informational only here),
-#          CLAUDE_CONFIG_DIR / CLAUDE_PROJECT_DIR / GEMINI_CONFIG_DIR / CODEX_HOME
+#          CLAUDE_CONFIG_DIR / CLAUDE_PROJECT_DIR / CODEX_HOME
 #          (each already read by the harness-specific dispatcher this policy
 #          replaces — kept so an unmodified front door still resolves its own
 #          harness's do-paths.sh resolver)
 #   stdin  a native payload encoded as envelope v1 by the lifecycle bridge.
-#   exit   exit 2 + doflow_decide deny = deny; other faults per IC-011. A front
-#          door translates this into its native response shape.
+#   exit   always 0: every finding is a doflow_decide advisory code plus one stderr
+#          line, which the lifecycle bridge renders per harness. This policy never denies.
 #
-# Reconciliation note (022-normalize-hooks, Phase A): claude/gemini/codex/kiro
+# Reconciliation note (022-normalize-hooks, Phase A): claude/codex/kiro
 # each shipped a separately-adapted copy of this gate; antigravity's copy
 # additionally never depended on a do-paths.sh resolver at all — it computed
 # feature_dir itself from the current branch name and checked the three
@@ -64,8 +65,7 @@ else
   else
     printf '[pre-implementation-gate] DoFlow hooks out of step; run: doflow update\n' >&2
   fi
-  doflow_decide deny contract-missing
-  exit 2
+  exit 0
 fi
 doflow_decision_init pre-implementation-gate 1
 command -v jq >/dev/null 2>&1 || {
@@ -112,8 +112,8 @@ else
     ( . "$_DOFLOW_POLDIR/capture-failure.sh"; doflow_capture_failure pre-implementation-gate envelope-missing ) >/dev/null 2>&1 || true
   fi
   if [[ "${DOFLOW_AGENT:-}" =~ ^[a-z]+$ ]]; then printf '[pre-implementation-gate] DoFlow hooks out of step; run: doflow update -t %s\n' "$DOFLOW_AGENT" >&2; else printf '[pre-implementation-gate] DoFlow hooks out of step; run: doflow update\n' >&2; fi
-  doflow_decide deny "${DF_ENV_CODE:-envelope-missing}"
-  exit 2
+  doflow_decide unsupported "${DF_ENV_CODE:-envelope-missing}"
+  exit 0
 fi
 
 # ── Resolve repo root ───────────────────────────────────────────────────────
@@ -139,13 +139,11 @@ RESOLVER_CANDIDATES=(
   "$ROOT/.doflow/scripts/doflow/bash/do-paths.sh"
   "$ROOT/.claude/scripts/doflow/bash/do-paths.sh"
   "$ROOT/.codex/scripts/doflow/bash/do-paths.sh"
-  "$ROOT/.gemini/scripts/doflow/bash/do-paths.sh"
   "$ROOT/.kiro/scripts/doflow/bash/do-paths.sh"
   "$HOME/.doflow/scripts/doflow/bash/do-paths.sh"
   "${CLAUDE_CONFIG_DIR:-$HOME/.claude}/scripts/doflow/bash/do-paths.sh"
   "${CLAUDE_PROJECT_DIR:-}/.claude/scripts/doflow/bash/do-paths.sh"
   "${CODEX_HOME:-$HOME/.codex}/scripts/doflow/bash/do-paths.sh"
-  "${GEMINI_CONFIG_DIR:-$HOME/.gemini}/scripts/doflow/bash/do-paths.sh"
   "$HOME/.kiro/scripts/doflow/bash/do-paths.sh"
 )
 
@@ -163,11 +161,14 @@ has_plan=""
 if [ -n "$RESOLVER" ]; then
   json=$("$RESOLVER" --json 2>/dev/null) || json=""
   if [ -n "$json" ]; then
-    feature_dir=$(printf '%s' "$json"     | jq -r '.feature_dir // empty' 2>/dev/null)
-    repo_root=$(printf '%s' "$json"       | jq -r '.repo_root // empty' 2>/dev/null)
-    has_requirement=$(printf '%s' "$json" | jq -r '.has_requirement // false' 2>/dev/null)
-    has_design=$(printf '%s' "$json"      | jq -r '.has_design // false' 2>/dev/null)
-    has_plan=$(printf '%s' "$json"        | jq -r '.has_plan // false' 2>/dev/null)
+    # One jq run for all five fields, one per line (none of them can hold a newline).
+    {
+      IFS= read -r feature_dir
+      IFS= read -r repo_root
+      IFS= read -r has_requirement
+      IFS= read -r has_design
+      IFS= read -r has_plan
+    } < <(printf '%s' "$json" | jq -r '(.feature_dir // ""), (.repo_root // ""), (.has_requirement // false), (.has_design // false), (.has_plan // false)' 2>/dev/null) || true
   fi
 fi
 
@@ -247,18 +248,41 @@ real_path() {
 repo_real=$(cd -P "$repo_root" 2>/dev/null && pwd) || repo_real="$repo_root"
 
 # Only source files inside this repo are gated: edits to doflow artifacts are
-# always allowed, and an absolute path elsewhere is not this repo's.
+# always allowed, an absolute path elsewhere is not this repo's, and neither is a
+# path git ignores.
 GATED=false
 while IFS= read -r file; do
   [ -z "$file" ] && continue
-  case "$file" in *"/agent-docs/"*|agent-docs/*) continue ;; esac
+  # A ".." segment can lead out of agent-docs (agent-docs/../src/x), so such a path is judged by
+  # its real path below, never by the text before the "..".
+  case "/$file/" in
+    */../*) ;;
+    *) case "$file" in *"/agent-docs/"*|agent-docs/*) continue ;; esac ;;
+  esac
+  check="$file"
   case "$file" in
     /*)
       real=$(real_path "$file") || real="$file"
-      case "$real" in *"/agent-docs/"*) continue ;; esac
+      case "/$real/" in */../*) ;; *) case "$real" in *"/agent-docs/"*) continue ;; esac ;; esac
       case "$real" in "$repo_real"/*) ;; *) continue ;; esac
+      check="$real"
+      ;;
+    *)
+      real=$(real_path "$repo_root/$file") || real="$repo_root/$file"
+      # real_path folds a ".." only through directories that exist, so one left in it is not folded.
+      case "/$file/" in */../*) case "/$real/" in */../*) ;; *) case "${real#"$repo_real"}/" in */agent-docs/*) continue ;; esac ;; esac ;; esac
       ;;
   esac
+  # A path git ignores (a local config file such as .mcp.json) is not source. check-ignore
+  # without --no-index answers "not ignored" for a tracked file, so tracked source stays gated.
+  # The skip never applies to DoFlow's own state or gate artifacts: .doflow/ is gitignored, and
+  # skipping it would let an edit forge a readiness record. Any `.doflow` or `agent-docs/doflow`
+  # segment of the real path, or of the path as written (a `..` the resolver could not fold), keeps it gated.
+  # The same holds for the do-paths.sh resolver the gate runs (any RESOLVER_CANDIDATES path, whichever
+  # harness directory holds it, ignored or not): rewriting it can make the gate find no feature.
+  case "/$file/" in */.doflow/*|*/agent-docs/doflow/*|*/../*|*/scripts/doflow/bash/do-paths.sh/) GATED=true; break ;; esac
+  case "${real#"$repo_real"}/" in */.doflow/*|*/agent-docs/doflow/*|*/scripts/doflow/bash/do-paths.sh/) GATED=true; break ;; esac
+  git -C "$repo_root" check-ignore -q -- "$check" 2>/dev/null && continue
   GATED=true
   break
 done <<< "$FILES"
@@ -304,25 +328,71 @@ checkouts() {
   return 0
 }
 
-# A state file under this checkout, else under exactly one other checkout, at
-# the first of the given paths that exists in each; held in two or more others,
-# it cannot be told which is meant -> allow.
+# Whether two files hold the same bytes.
+same_bytes() {
+  if command -v cmp >/dev/null 2>&1; then cmp -s "$1" "$2"; else [ "$(cat "$1")" = "$(cat "$2")" ]; fi
+}
+
+# Whether the flat record $1 of a namespaced task may be read as feature $2's
+# (115 D-3): it names that feature (featureSlug on a run, slug on a readiness
+# record) or none. A file that does not parse names nobody.
+flat_is_ours() {
+  local named
+  named=$(jq -r '[.featureSlug, .slug] | map(select(type == "string" and . != "")) | first // empty' "$1" 2>/dev/null) || return 1
+  [ -z "$named" ] || [ "$named" = "$2" ]
+}
+
+# The task's record of store $2 (readiness | orchestration) under checkout $1,
+# keyed by feature $3 as the runtime keys it (115 C-1): <store>/<feature>/<id>.json
+# for a task id other than the feature's slug, else the flat file; the flat file
+# of a namespaced task only when it is this feature's or names none. Sets HIT.
+HIT=""
+record_in() {
+  local store="$1/.doflow/state/$2"
+  HIT=""
+  if [ -n "$3" ] && [ "$3" != "$task_id" ]; then
+    if [ -f "$store/$3/$task_id.json" ]; then HIT="$store/$3/$task_id.json"; return 0; fi
+    [ -f "$store/$task_id.json" ] && flat_is_ours "$store/$task_id.json" "$3" && HIT="$store/$task_id.json"
+    return 0
+  fi
+  [ -f "$store/$task_id.json" ] && HIT="$store/$task_id.json"
+  return 0
+}
+
+# The task's readiness record, keyed by feature $1. From a linked worktree the
+# main checkout's comes first, since every record lives there (115 IC-004), and
+# a copy at the same path here with other bytes refuses (C-3). Else this
+# checkout's, else exactly one other checkout's; held in two or more others it
+# cannot be told which is meant -> allow.
 FOUND=""
 find_state() {
-  local rel root count=0 hit
+  local root count=0 copy
   FOUND=""
-  for rel in "$@"; do
-    if [ -f "$repo_root/$rel" ]; then FOUND="$repo_root/$rel"; return 0; fi
-  done
+  if [ -f "$repo_root/.git" ]; then
+    checkouts
+    if [ -n "$MAIN" ]; then
+      record_in "$MAIN" readiness "$1"
+      if [ -n "$HIT" ]; then
+        copy="$repo_root${HIT#"$MAIN"}"
+        if [ -f "$copy" ] && ! same_bytes "$copy" "$HIT"; then
+          printf "doflow gate readiness-before-implementation: task '%s' has a readiness record in this worktree (%s) that differs from the main checkout's (%s). Next: keep one of the two and remove the other, then re-run. Nothing was changed.\n" "$task_id" "$copy" "$HIT" >&2
+          doflow_decide advisory readiness-store-conflict
+          exit 0
+        fi
+        FOUND="$HIT"
+        return 0
+      fi
+    fi
+  fi
+  record_in "$repo_root" readiness "$1"
+  if [ -n "$HIT" ]; then FOUND="$HIT"; return 0; fi
   checkouts
   for root in ${OTHERS[@]+"${OTHERS[@]}"}; do
-    hit=""
-    for rel in "$@"; do
-      [ -f "$root/$rel" ] && { hit="$root/$rel"; break; }
-    done
-    [ -n "$hit" ] || continue
+    [ "$root" = "$MAIN" ] && continue
+    record_in "$root" readiness "$1"
+    [ -n "$HIT" ] || continue
     count=$((count + 1))
-    FOUND="$hit"
+    FOUND="$HIT"
   done
   [ "$count" -le 1 ] || exit 0
 }
@@ -338,18 +408,26 @@ run_feature() {
   return 0
 }
 
+# The feature the task's records are keyed by, as the runtime keys them
+# (featureSlugFor): a task id that names a feature folder in this checkout is
+# its own feature, else the branch's.
+run_key="$slug"
+[ -d "$repo_root/agent-docs/doflow/$task_id" ] && run_key="$task_id"
+
 # The task's run: this checkout's, else the one other checkout's run of the same
 # feature. A run with the same id for another feature is a different task.
 find_run() {
-  local rel=".doflow/state/orchestration/$task_id.json" root count=0
+  local root count=0
   FOUND=""
-  if [ -f "$repo_root/$rel" ]; then FOUND="$repo_root/$rel"; return 0; fi
+  record_in "$repo_root" orchestration "$run_key"
+  if [ -n "$HIT" ]; then FOUND="$HIT"; return 0; fi
   checkouts
   for root in ${OTHERS[@]+"${OTHERS[@]}"}; do
-    [ -f "$root/$rel" ] || continue
-    [ "$(run_feature "$root/$rel")" = "$slug" ] || continue
+    record_in "$root" orchestration "$run_key"
+    [ -n "$HIT" ] || continue
+    [ "$(run_feature "$HIT")" = "$run_key" ] || continue
     count=$((count + 1))
-    FOUND="$root/$rel"
+    FOUND="$HIT"
   done
   [ "$count" -le 1 ] || exit 0
 }
@@ -374,8 +452,8 @@ PLANNED=false
 # plan.md all exist. Classes that cannot be a feature skip this check.
 if [ "$exempt" = false ] && [ -n "$FEATURE_ROOT" ] && [ "$PLANNED" = false ]; then
   echo "[pre-implementation-gate] doflow gate: feature $feature_dir is missing requirement.md, design.md, or plan.md — run /do-brainstorm, /do-design, then /do-plan before editing source. (Edits under agent-docs/ are always allowed; skip the flow by removing the feature dir.)" >&2
-  doflow_decide deny missing-artifacts
-  exit 2
+  doflow_decide advisory missing-artifacts
+  exit 0
 fi
 
 # ── Readiness ────────────────────────────────────────────────────────────────
@@ -443,13 +521,10 @@ if [ -n "$RUN" ]; then
 fi
 
 # The record, where the runtime looks: under the feature's namespace (the run's
-# own feature when it recorded one), then flat; this checkout first.
-record_slug="${run_slug:-$slug}"
-if [ -n "$record_slug" ] && [ "$record_slug" != "$task_id" ]; then
-  find_state ".doflow/state/readiness/$record_slug/$task_id.json" ".doflow/state/readiness/$task_id.json"
-else
-  find_state ".doflow/state/readiness/$task_id.json"
-fi
+# own feature when it recorded one), then flat; the main checkout first from a
+# linked worktree, else this checkout first.
+record_slug="${run_slug:-$run_key}"
+find_state "$record_slug"
 record_state=""; record_class=""; record_at=""
 if [ -n "$FOUND" ]; then
   record_info=$(jq -r '(.state // ""), (.taskClass // ""), (.evaluatedAt // "")' "$FOUND" 2>/dev/null) || exit 0
@@ -471,20 +546,20 @@ gate="doflow gate readiness-before-implementation: task '$task_id'"
 rest="Next: $next, then gather what it lists until it reports READY. Nothing was changed."
 if [ -z "$FOUND" ]; then
   printf "%s has no readiness record for the '%s' template. %s\n" "$gate" "$STAGE_TEMPLATE" "$rest" >&2
-  doflow_decide deny readiness-missing
-  exit 2
+  doflow_decide advisory readiness-missing
+  exit 0
 fi
 if [ "$record_state" != READY ]; then
   printf "%s was last evaluated %s at %s against the '%s' template, not READY. %s\n" \
     "$gate" "$record_state" "$record_at" "$STAGE_TEMPLATE" "$rest" >&2
-  doflow_decide deny readiness-not-ready
-  exit 2
+  doflow_decide advisory readiness-not-ready
+  exit 0
 fi
 if [ "$record_class" != "$STAGE_TEMPLATE" ]; then
   printf "%s has a READY record for the '%s' template, and this stage needs '%s'. %s\n" \
     "$gate" "$record_class" "$STAGE_TEMPLATE" "$rest" >&2
-  doflow_decide deny readiness-wrong-template
-  exit 2
+  doflow_decide advisory readiness-wrong-template
+  exit 0
 fi
 
 exit 0

package/core/harnesses/shared/hooks/policies/session-context.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-case $0 in */*) _DOFLOW_POLDIR=${0%/*} ;; *) _DOFLOW_POLDIR=. ;; esac
+case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; then jq() { command jq -b "$@"; }; fi ;; esac # native jq.exe ends lines with CRLF unless -b
+_DOFLOW_SRC=${0//\\//}; case $_DOFLOW_SRC in */*) _DOFLOW_POLDIR=${_DOFLOW_SRC%/*} ;; *) _DOFLOW_POLDIR=. ;; esac
 # session-context.sh — Canonical Policy Library: SessionStart guard policy
 #
 # Fires when a harness starts a new session. Captures git state into a
@@ -61,9 +62,36 @@ if [ "$ENVELOPE_CLASS" = unsupported ] || [ "$ENVELOPE_CLASS" = missing ]; then
 fi
 CWD=$(json_field "$INPUT" ".cwd")
 
+package_verify_async() {
+  local home="${HOME:-}" lock run config_dir detach=""
+  [ -n "$home" ] || return 0
+  lock="$home/.doflow/doflow.lock"
+  [ -f "$lock" ] || return 0
+  jq -e '(.packages // []) | length > 0' "$lock" >/dev/null 2>&1 || return 0
+  config_dir="${CLAUDE_CONFIG_DIR:-$home/.claude}"
+  command -v setsid >/dev/null 2>&1 && detach="setsid"
+  for run in \
+    "$home/.doflow/scripts/doflow/bin/doflow-run" \
+    "$config_dir/scripts/doflow/bin/doflow-run"
+  do
+    [ -x "$run" ] || continue
+    ( cd "$home/.doflow" 2>/dev/null && nohup $detach "$run" package --action verify </dev/null >/dev/null 2>&1 ) >/dev/null 2>&1 3>&- 5>&- &
+    return 0
+  done
+  return 0
+}
+
 # Guard: if we can't determine the session, nothing to do
 [[ -z "$SESSION_ID" ]] && exit 0
 
+# No config home (lib.sh leaves the state paths empty): no session store to write, but the
+# storage upkeep still starts (086 IC-010).
+if [[ -z "$SESSION_DIR" ]]; then
+  package_verify_async
+  storage_upkeep_async "$CWD"
+  exit 0
+fi
+
 SESSION_PATH=$(ensure_session_dir "$SESSION_ID")
 
 # Clean up stale injected flag from a prior crashed session
@@ -167,5 +195,6 @@ fi
 mkdir -p "$(dirname "$SESSIONS_LOG")"
 echo "$TIMESTAMP START $SESSION_ID ${CWD:-unknown}" >> "$SESSIONS_LOG"
 
+package_verify_async
 storage_upkeep_async "$CWD"
 exit 0

package/core/harnesses/shared/hooks/policies/stop-check.sh

@@ -1,5 +1,6 @@
 #!/usr/bin/env bash
-case $0 in */*) _DOFLOW_POLDIR=${0%/*} ;; *) _DOFLOW_POLDIR=. ;; esac
+case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; then jq() { command jq -b "$@"; }; fi ;; esac # native jq.exe ends lines with CRLF unless -b
+_DOFLOW_SRC=${0//\\//}; case $_DOFLOW_SRC in */*) _DOFLOW_POLDIR=${_DOFLOW_SRC%/*} ;; *) _DOFLOW_POLDIR=. ;; esac
 # stop-check.sh — Canonical Policy Library: Stop hook
 #
 # Two responsibilities:
@@ -12,10 +13,11 @@ case $0 in */*) _DOFLOW_POLDIR=${0%/*} ;; *) _DOFLOW_POLDIR=. ;; esac
 #   2. Stub detection: takes the payload's last_assistant_message, or else the
 #      last assistant message in the JSONL transcript (Claude Code, Codex and
 #      flat {role,content} shapes), then checks for unfinished-work markers.
-#      Exits non-zero if stubs are found (blocks the session from stopping).
+#      Records an advisory and prints one warning line when stubs are found; it never
+#      blocks the session from stopping.
 #      Runs independently of (1) — it needs only the payload field or a
 #      transcript path, not a session_id, so it still fires for a harness that
-#      has no edited-files queue. A given message blocks once: harnesses without
+#      has no edited-files queue. A given message is warned about once: harnesses without
 #      stop_hook_active (Antigravity, Kiro) have no other loop guard.
 #   3. Process-leak scan: DoFlow's own identifiers (FR-###, agent-docs/, chain
 #      artifact names) reaching files that ship. Warns, never blocks.
@@ -26,7 +28,7 @@ case $0 in */*) _DOFLOW_POLDIR=${0%/*} ;; *) _DOFLOW_POLDIR=. ;; esac
 # Canonical Policy Script Contract (design.md §4):
 #   env    DOFLOW_PROJECT_DIR, DOFLOW_AGENT (both optional here)
 #   stdin  envelope v1 from a native front door via the shared lifecycle bridge.
-#   exit   exit 2 + doflow_decide deny = deny; other faults per IC-011.
+#   exit   always 0; a finding is a doflow_decide advisory code plus one stderr line.
 #
 # Depends on lib.sh (require_jq, json_field, ensure_session_dir,
 # run_with_timeout) being discoverable next to this script when it runs — see
@@ -84,7 +86,8 @@ TRANSCRIPT_PATH=$(json_field "$INPUT" ".transcript_path")
 
 # ── 1. Lint dispatch (only when we have a session-scoped edited-files queue) ──
 
-if [ -n "$SESSION_ID" ]; then
+# With no config home (SESSION_DIR empty) there is no queue to read; the stub check below still runs.
+if [ -n "$SESSION_ID" ] && [ -n "$SESSION_DIR" ]; then
   SESSION_PATH=$(ensure_session_dir "$SESSION_ID")
   EDITED_FILES="$SESSION_PATH/edited-files.txt"
   PROC_FILE="$SESSION_PATH/edited-files.txt.proc"
@@ -104,12 +107,14 @@ if [ -n "$SESSION_ID" ]; then
     # The resolver for the leak-scan verb. Absent install -> the scan is
     # skipped, like every other tool below: this hook has never required
     # anything to be present.
+    # HOME may be unset (an absolute XDG_CONFIG_HOME alone gives a config home): its candidates drop out.
     DOFLOW_RUN=""
+    claude_dir="${CLAUDE_CONFIG_DIR:-${HOME:+$HOME/.claude}}"
     for candidate in \
-      "${CLAUDE_CONFIG_DIR:-$HOME/.claude}/scripts/doflow/bin/doflow-run" \
-      "$HOME/.doflow/scripts/doflow/bin/doflow-run"
+      "${claude_dir:+$claude_dir/scripts/doflow/bin/doflow-run}" \
+      "${HOME:+$HOME/.doflow/scripts/doflow/bin/doflow-run}"
     do
-      [ -x "$candidate" ] && { DOFLOW_RUN="$candidate"; break; }
+      [ -n "$candidate" ] && [ -x "$candidate" ] && { DOFLOW_RUN="$candidate"; break; }
     done
 
     while IFS= read -r path; do
@@ -187,9 +192,10 @@ fi
 
 # The payload's own last_assistant_message is the response being stopped on. A present key
 # (even null or empty) is authoritative: the transcript is only read when the key is absent.
-# jq filter for the transcript fallback: one JSON object per line, assistant text from three
+# jq filter for the transcript fallback: one JSON object per line, assistant text from four
 # shapes — Claude Code (.message with text blocks), Codex rollout (response_item .payload with
-# output_text blocks) and the flat {role,content} line. A partial or foreign line yields "".
+# output_text blocks), Copilot CLI events.jsonl (type assistant.message, .data.content a string) and
+# the flat {role,content} line. A partial or foreign line yields "".
 read -r -d '' LAST_ASSISTANT_JQ <<'JQ' || true
 def text: if type == "string" then .
   elif type == "array" then [ .[]? | objects | select(.type == "text" or .type == "output_text") | .text | strings ] | join("\n")
@@ -197,6 +203,7 @@ def text: if type == "string" then .
 [ inputs | fromjson? | objects
   | if ((.message | objects | .role) // null) == "assistant" then .message.content
     elif .type == "response_item" and ((.payload | objects | .role) // null) == "assistant" then .payload.content
+    elif .type == "assistant.message" then .data.content
     elif .role == "assistant" then .content
     else empty end
   | text | select(length > 0) ] | last // ""
@@ -271,21 +278,26 @@ BEGIN {
 STUB_PATTERN='(#|//)[[:space:]]*(TODO|FIXME)([^[:alnum:]_]|$)|raise NotImplementedError|throw new Error\(.*[Nn]ot [Ii]mplemented|(#|//)[[:space:]]*stub([^[:alnum:]_]|$)'
 
 if grep -qiE -- "$STUB_PATTERN" <<<"$STUB_TEXT" 2>/dev/null; then
-  # Block a given message once: the continuation that follows is judged on new text, and a
+  # Warn about a given message once: the continuation that follows is judged on new text, and a
   # harness with no stop_hook_active would otherwise be blocked on this one forever. State is
   # per session, or per transcript when the harness sends no session_id; any failure here
-  # leaves the block in force only for this call.
+  # leaves the block in force only for this call. With no config home there is no state store, so
+  # this policy cannot remember a block and allows the stop.
+  [ -n "$SESSION_DIR" ] || exit 0
   GUARD_KEY="$SESSION_ID"
   [ -z "$GUARD_KEY" ] && GUARD_KEY="t$(printf '%s' "$TRANSCRIPT_PATH" | cksum | cut -d' ' -f1)"
-  GUARD_FILE="$(ensure_session_dir "$GUARD_KEY" 2>/dev/null)/stop-last-blocked" || GUARD_FILE=""
+  GUARD_FILE=""
+  if [ -n "$SESSION_DIR" ]; then
+    GUARD_FILE="$(ensure_session_dir "$GUARD_KEY" 2>/dev/null)/stop-last-blocked" || GUARD_FILE=""
+  fi
   MESSAGE_SUM=$(printf '%s' "$LAST_ASSISTANT_CONTENT" | cksum 2>/dev/null) || MESSAGE_SUM=""
   if [ -n "$MESSAGE_SUM" ] && [ -n "$GUARD_FILE" ] && [ "$(cat "$GUARD_FILE" 2>/dev/null)" = "$MESSAGE_SUM" ]; then
     exit 0
   fi
   [ -n "$MESSAGE_SUM" ] && [ -n "$GUARD_FILE" ] && { printf '%s\n' "$MESSAGE_SUM" > "$GUARD_FILE"; } 2>/dev/null || true
   echo "[stop-check] The last response contains an unfinished-work marker (TODO/FIXME/stub comment or a not-implemented raise/throw)." >&2
-  doflow_decide deny unfinished-work
-  exit 2
+  doflow_decide advisory unfinished-work
+  exit 0
 fi
 
 exit 0

package/core/harnesses/shared/hooks/policies/subagent-audit.sh

@@ -1,16 +1,17 @@
 #!/usr/bin/env bash
-case $0 in */*) _DOFLOW_POLDIR=${0%/*} ;; *) _DOFLOW_POLDIR=. ;; esac
+case "${OSTYPE:-}" in msys*|cygwin*|win32*) if command -v jq >/dev/null 2>&1; then jq() { command jq -b "$@"; }; fi ;; esac # native jq.exe ends lines with CRLF unless -b
+_DOFLOW_SRC=${0//\\//}; case $_DOFLOW_SRC in */*) _DOFLOW_POLDIR=${_DOFLOW_SRC%/*} ;; *) _DOFLOW_POLDIR=. ;; esac
 # subagent-audit.sh — Canonical Policy Library: SubagentStart + SubagentStop hook
 # (pure observability, no deny path)
 #
 # 022-hooks-remaining-duplication: claude and codex's copies were byte-identical — moved here as
-# the single canonical copy. Gemini has no SubagentStart/SubagentStop-equivalent event.
+# the single canonical copy.
 #
 # Appends {timestamp, session_id, event, agent_type, agent_id} to a session-scoped audit log.
 # Today there is zero record of which of the installed agents/ specialists actually run, how often, or
 # whether one is invoked outside its intended use (e.g. everything routing through general-purpose
 # instead of do-code-review/security-engineer) — this hook is the evidence base a future policy
-# hook (e.g. an agent-aware pre-bash-guard extension) would need before writing rules on a guess.
+# hook (e.g. an agent-aware tool guard) would need before writing rules on a guess.
 # Per agent-docs/research/hook-governance-agent-tool-mcp-skill.md §3.1: pure logging, no deny path,
 # safe to ship immediately, and the recommended first step before any tighter agent governance.
 #
@@ -56,6 +57,8 @@ fi
 
 # Guard: if we can't determine the session, nothing to do
 [[ -z "$SESSION_ID" ]] && exit 0
+# No config home (lib.sh leaves the state paths empty): no session store to write (086 IC-010).
+[[ -n "$SESSION_DIR" ]] || exit 0
 
 EVENT=$(json_field "$INPUT" ".hook_event_name")
 AGENT_TYPE=$(json_field "$INPUT" ".agent_type")