@khoavu882/doflow 2.0.0-beta.5 → 2.0.1

package/core/harnesses/shared/hooks/stream-hook-runner.js

@@ -21,11 +21,10 @@ const antigravityAdapter = require('./adapters/antigravity');
 
 // Tool-name classification for PreToolUse, generalized to the union every Phase A canonical
 // script's own case statement already recognizes (session-context.sh/pre-implementation-gate.sh/
-// mcp-tool-guard.sh/pre-bash-guard.sh headers) rather than only the two harnesses this runner
+// mcp-tool-guard.sh headers) rather than only the two harnesses this runner
 // drives — kept in sync with those scripts, not redefined independently of them.
 const MCP_TOOL_PATTERN = /^mcp_/i;
 const EDIT_TOOL_PATTERN = /^(replace_file_content|write_to_file|multi_replace_file_content|edit_file|write_file|create_file|replace_file|replace|Edit|Write|MultiEdit|apply_patch)$/i;
-const COMMAND_TOOL_PATTERN = /^(run_command|run_shell_command|Bash|bash)$/i;
 
 // ── Failure capture (feature 046: IC-010, IC-011, IC-014, IC-015, IC-018) ─────────────────────────
 //
@@ -70,19 +69,58 @@ function isProgrammingError(error) {
   }
 }
 
-/** IC-011: `$XDG_CONFIG_HOME/doflow/failures` when absolute, else `$HOME/.config/doflow/failures` when HOME is absolute, else null. */
-function failureHome(env) {
+// The config home and the lexical failure.capture rule, copied from src/runtime/config-home.js and
+// src/runtime/settings/lexical.js (086 IC-003, IC-004); the marked text is the same in every reader.
+// BEGIN doflow-config-home v1 (rule: src/runtime/config-home.js; checked by test/guards/settings.test.js)
+function doflowConfigHome(env) {
   const xdg = env.XDG_CONFIG_HOME;
-  if (typeof xdg === 'string' && xdg !== '') return path.isAbsolute(xdg) ? path.join(xdg, 'doflow', 'failures') : null;
+  if (typeof xdg === 'string' && xdg !== '' && path.isAbsolute(xdg)) return path.join(xdg, 'doflow');
   const home = env.HOME;
-  return typeof home === 'string' && path.isAbsolute(home) ? path.join(home, '.config', 'doflow', 'failures') : null;
+  if (typeof home === 'string' && home !== '' && path.isAbsolute(home)) return path.join(home, '.config', 'doflow');
+  return null;
+}
+// END doflow-config-home v1
+
+// BEGIN doflow-settings-lexical v1 (rule: src/runtime/settings/lexical.js; checked by test/guards/settings.test.js)
+const WS = '[ \\t\\n\\v\\f\\r]';
+const CAPTURE_RE = new RegExp(`"failure\\.capture"${WS}*:${WS}*("[^"]*"|[^,}" \\t\\n\\v\\f\\r]*)`, 'g');
+function lexicalCapture(text) {
+  let out = null;
+  for (const m of text.split('\0', 1)[0].matchAll(CAPTURE_RE)) out = m[1] === '"on"' ? (out ?? 'on') : 'off';
+  return out;
+}
+function readLexicalCapture(file) {
+  try {
+    if (!fs.statSync(file).isFile()) return 'off';
+  } catch (error) {
+    const code = error && error.code;
+    if (code === 'ENOENT' || code === 'ELOOP' || code === 'ENOTDIR') return null;
+    if (code === 'EACCES') {
+      try {
+        const parent = path.dirname(file);
+        if (!fs.statSync(parent).isDirectory()) return null;
+        try { fs.accessSync(parent, fs.constants.X_OK); return null; }
+        catch (accessError) { return accessError && accessError.code === 'EACCES' ? 'off' : null; }
+      } catch { return null; }
+    }
+    return 'off';
+  }
+  try { return lexicalCapture(fs.readFileSync(file, 'latin1')); } catch { return 'off'; }
 }
+// END doflow-settings-lexical v1
 
-/** IC-014: the environment first, then one stat of the sentinel file. */
+/** IC-011: `<config home>/failures`, or null with no config home. */
+function failureHome(env) {
+  const dir = doflowConfigHome(env);
+  return dir === null ? null : path.join(dir, 'failures');
+}
+
+/** IC-014, IC-005: the environment first, then one stat of the sentinel file, then settings.json beside the failure home. */
 function captureIsOff(home, env) {
   const setting = env.DOFLOW_FAILURE_CAPTURE;
   if (typeof setting === 'string' && CAPTURE_OFF_VALUES.includes(setting.trim().toLowerCase())) return true;
-  try { return fs.statSync(path.join(home, 'off')).isFile(); } catch { return false; }
+  try { if (fs.statSync(path.join(home, 'off')).isFile()) return true; } catch { /* no sentinel */ }
+  return readLexicalCapture(path.join(path.dirname(home), 'settings.json')) === 'off';
 }
 
 /** The first stack frame inside this hooks folder as `<path relative to it>:<function>`, no line number. */
@@ -324,21 +362,22 @@ function resolveProjectRoot(workspacePaths) {
  */
 function delegateToPolicy(projectRoot, agent, event, policyId, nativeRaw) {
   const bridgeSh = path.join(__dirname, 'bridge', 'bridge.sh');
+  const profile = process.env.DOFLOW_FAULT_PROFILE || 'compat-1';
+  const effectiveProfile = profile === 'compat-1' || profile === 'strict-1' ? profile : 'compat-1';
+  if (profile !== effectiveProfile) captureHookFailure({ command: policyId, kind: 'fault-profile-unknown' });
+  const blockingPolicy = ['pre-implementation-gate', 'mcp-tool-guard', 'stop-check'].includes(policyId);
+  const faultEffect = effectiveProfile === 'strict-1' && blockingPolicy ? 'block' : 'proceed';
   if (!fs.existsSync(bridgeSh)) {
     captureHookFailure({ command: policyId, kind: 'bridge-missing' });
-    if (policyId === 'stop-check') {
-      return { v: 1, harness: agent, event, policy: policyId, policyVersion: 0, outcome: 'unsupported', code: 'bridge-missing', effect: 'proceed' };
+    // D1: a missing bridge allows with a recorded warning; only strict-1, a person's opt-in, blocks a tool call.
+    if (policyId === 'stop-check' || faultEffect === 'proceed') {
+      return { v: 1, harness: agent, event, policy: policyId, policyVersion: 0, outcome: 'unsupported', code: 'bridge-missing', faultProfile: effectiveProfile, effect: 'proceed' };
     }
     return {
       v: 1, harness: agent, event, policy: policyId, policyVersion: 0,
-      outcome: 'deny', code: 'bridge-missing', reason: '[doflow] shared hooks lack the bridge; run: doflow update -t antigravity', effect: 'block',
+      outcome: 'deny', code: 'bridge-missing', reason: '[doflow] shared hooks lack the bridge; run: doflow update -t antigravity', faultProfile: effectiveProfile, effect: 'block',
     };
   }
-  const profile = process.env.DOFLOW_FAULT_PROFILE || 'compat-1';
-  const effectiveProfile = profile === 'compat-1' || profile === 'strict-1' ? profile : 'compat-1';
-  if (profile !== effectiveProfile) captureHookFailure({ command: policyId, kind: 'fault-profile-unknown' });
-  const blockingPolicy = ['pre-implementation-gate', 'pre-bash-guard', 'mcp-tool-guard', 'stop-check'].includes(policyId);
-  const faultEffect = effectiveProfile === 'strict-1' && blockingPolicy ? 'block' : 'proceed';
   const faultDecision = (code) => ({
     v: 1, harness: agent, event, policy: policyId, policyVersion: 0,
     outcome: 'error', code, reason: code, faultProfile: effectiveProfile, effect: faultEffect,
@@ -356,9 +395,9 @@ function delegateToPolicy(projectRoot, agent, event, policyId, nativeRaw) {
     captureHookFailure({ command: policyId, kind: 'bridge-timeout' });
     return faultDecision('bridge-timeout');
   }
-  // A bridge that exits before spawnSync finishes writing its stdin reports EPIPE although it ran to
+  // A bridge that exits before spawnSync finishes writing its stdin reports EPIPE (EOF on Windows) although it ran to
   // completion; its exit status and answer are judged below, like any other run.
-  const completed = result.error && result.error.code === 'EPIPE' && result.status !== null;
+  const completed = result.error && (result.error.code === 'EPIPE' || result.error.code === 'EOF') && result.status !== null;
   if ((result.error && !completed) || result.status === null) {
     if (result.signal && !['SIGTERM', 'SIGINT', 'SIGPIPE'].includes(result.signal)) {
       captureHookFailure({ command: policyId, kind: `bridge-exec-fault:${result.signal}` });
@@ -376,7 +415,6 @@ function delegateToPolicy(projectRoot, agent, event, policyId, nativeRaw) {
 function classifyPreToolUsePolicy(toolName) {
   if (MCP_TOOL_PATTERN.test(toolName)) return 'mcp-tool-guard.sh';
   if (EDIT_TOOL_PATTERN.test(toolName)) return 'pre-implementation-gate.sh';
-  if (COMMAND_TOOL_PATTERN.test(toolName)) return 'pre-bash-guard.sh';
   return null;
 }
 
@@ -392,7 +430,7 @@ function evaluatePreToolUsePolicy(payload, nativeRaw, projectRoot, agent) {
  * decision. Every event this runner drives maps to at most one Phase A script:
  *   SessionStart -> session-context.sh (side-effect only; the script's own contract says it never
  *                   denies, so its exit code is not propagated as a decision)
- *   PreToolUse   -> mcp-tool-guard.sh | pre-implementation-gate.sh | pre-bash-guard.sh, chosen by
+ *   PreToolUse   -> mcp-tool-guard.sh | pre-implementation-gate.sh, chosen by
  *                   the tool-name classification above
  *   Stop         -> stop-check.sh
  *   PostToolUse, PreInvocation -> no Phase A policy owns these yet (post-edit-lint.sh's collector

package/core/harnesses/shared/locator/doflow-run

@@ -1,5 +1,5 @@
 #!/bin/sh
-# DoFlow locator shim — projected to all eight harnesses by the `locator.doflow` asset in
+# DoFlow locator shim — projected to every harness by the `locator.doflow` asset in
 # core/registry/assets.json (design.md §3 C2, §4.1).
 #
 # Its ONLY job is to find the single dispatcher (at $REL below, under the config dir) and exec it
@@ -40,8 +40,7 @@
 
 # The dispatcher ships inside the `scripts.doflow` asset (`core/shared/scripts`), so it sits at
 # `scripts/doflow/bin/doflow-run` under the shared tree. Every harness projects that tree to its
-# scope root (`<project>/.doflow` or `$HOME/.doflow`), so this one path holds for all eight,
-# Antigravity at global scope excepted (it projects no runtime there).
+# scope root (`<project>/.doflow` or `$HOME/.doflow`), so this one path holds for every harness.
 REL='scripts/doflow/bin/doflow-run'
 dispatcher=''
 

package/core/registry/advice.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "timeoutMs": 5000,
+  "timeoutMs": 15000,
   "probeTimeoutMs": 1500,
   "doctorBudgetMs": 6000,
   "limits": {
@@ -72,8 +72,8 @@
         "single": "One frontier reviewer, different from the author",
         "deep": "Two independent frontier reviewers with different lenses"
       },
-      "staticFrom": "single",
-      "askedBy": []
+      "staticFrom": "the IC-002 rule: single only for a light-path change at a singleRisks risk, else deep; the gate-b floor can raise seats",
+      "askedBy": ["review"]
     },
     {
       "id": "mcp-need",

package/core/registry/assets.json

@@ -6,17 +6,12 @@
       "kind": "guidance",
       "source": "core/shared/guidance/pointers/claude-gemini.md",
       "appliesTo": [
-        "claude",
-        "gemini"
+        "claude"
       ],
       "projection": {
         "claude": {
           "renderer": "claude-instructions",
           "capability": "instructions"
-        },
-        "gemini": {
-          "renderer": "gemini-instructions",
-          "capability": "instructions"
         }
       },
       "ownership": "managed-file-section"
@@ -63,7 +58,6 @@
       "appliesTo": [
         "claude",
         "codex",
-        "gemini",
         "kiro",
         "antigravity",
         "opencode",
@@ -79,13 +73,10 @@
           "renderer": "copy-tree",
           "capability": "instructions"
         },
-        "gemini": {
-          "renderer": "copy-tree",
-          "capability": "instructions"
-        },
         "kiro": {
           "renderer": "copy-tree",
-          "capability": "instructions"
+          "capability": "instructions",
+          "select": "guidance-manifest"
         },
         "antigravity": {
           "renderer": "copy-tree",
@@ -108,7 +99,6 @@
       "nativeDir": {
         "claude": "../.doflow/guidance",
         "codex": "../.doflow/guidance",
-        "gemini": "../.doflow/guidance",
         "kiro": "steering",
         "antigravity": "../.doflow/guidance",
         "opencode": "../.doflow/guidance",
@@ -141,7 +131,6 @@
       "appliesTo": [
         "claude",
         "codex",
-        "gemini",
         "opencode",
         "pi",
         "copilot",
@@ -155,38 +144,39 @@
         },
         "codex": {
           "renderer": "copy-tree",
-          "capability": "skills"
-        },
-        "gemini": {
-          "renderer": "copy-tree",
-          "capability": "skills"
+          "capability": "skills",
+          "transform": "skill-frontmatter-codex"
         },
         "opencode": {
           "renderer": "copy-tree",
-          "capability": "skills"
+          "capability": "skills",
+          "transform": "skill-frontmatter-opencode"
         },
         "pi": {
           "renderer": "copy-tree",
-          "capability": "skills"
+          "capability": "skills",
+          "transform": "skill-frontmatter-pi"
         },
         "copilot": {
           "renderer": "copy-tree",
-          "capability": "skills"
+          "capability": "skills",
+          "transform": "skill-frontmatter-copilot"
         },
         "kiro": {
           "renderer": "copy-tree",
-          "capability": "skills"
+          "capability": "skills",
+          "transform": "skill-frontmatter-kiro"
         },
         "antigravity": {
           "renderer": "copy-tree",
-          "capability": "skills"
+          "capability": "skills",
+          "transform": "skill-frontmatter-antigravity"
         }
       },
       "ownership": "managed-tree",
       "nativeDir": {
         "claude": "skills",
         "codex": "../.agents/skills",
-        "gemini": "skills",
         "opencode": "skills",
         "pi": "skills",
         "copilot": "skills",
@@ -201,7 +191,6 @@
       "appliesTo": [
         "claude",
         "codex",
-        "gemini",
         "copilot",
         "kiro",
         "antigravity",
@@ -210,20 +199,18 @@
       "projection": {
         "claude": {
           "renderer": "copy-tree",
-          "capability": "agents"
+          "capability": "agents",
+          "transform": "claude-agents"
         },
         "codex": {
-          "renderer": "copy-tree",
-          "capability": "agents"
-        },
-        "gemini": {
           "renderer": "copy-tree",
           "capability": "agents",
-          "transform": "gemini-agents"
+          "transform": "codex-agents"
         },
         "copilot": {
           "renderer": "copilot-agents",
-          "capability": "agents"
+          "capability": "agents",
+          "transform": "copilot-agents"
         },
         "kiro": {
           "renderer": "kiro-agents",
@@ -234,7 +221,8 @@
         "antigravity": {
           "renderer": "copy-tree",
           "capability": "agents",
-          "layout": "dir-per-file:agent.md"
+          "layout": "dir-per-file:agent.md",
+          "transform": "antigravity-agents"
         },
         "opencode": {
           "renderer": "opencode-agents",
@@ -246,7 +234,6 @@
       "nativeDir": {
         "claude": "agents",
         "codex": "agents",
-        "gemini": "../.gemini/agents",
         "copilot": "agents",
         "kiro": "agents",
         "antigravity": ".agents/agents",
@@ -259,8 +246,7 @@
       "source": "core/shared/templates",
       "appliesTo": [
         "claude",
-        "codex",
-        "gemini"
+        "codex"
       ],
       "projection": {
         "claude": {
@@ -270,17 +256,12 @@
         "codex": {
           "renderer": "copy-tree",
           "capability": "templates"
-        },
-        "gemini": {
-          "renderer": "copy-tree",
-          "capability": "templates"
         }
       },
       "ownership": "managed-tree",
       "nativeDir": {
         "claude": "../.doflow/templates",
-        "codex": "../.doflow/templates",
-        "gemini": "../.doflow/templates"
+        "codex": "../.doflow/templates"
       }
     },
     {
@@ -290,7 +271,6 @@
       "appliesTo": [
         "claude",
         "codex",
-        "gemini",
         "opencode",
         "pi",
         "copilot",
@@ -306,10 +286,6 @@
           "renderer": "copy-tree",
           "capability": "scripts"
         },
-        "gemini": {
-          "renderer": "copy-tree",
-          "capability": "scripts"
-        },
         "opencode": {
           "renderer": "copy-tree",
           "capability": "scripts"
@@ -335,7 +311,6 @@
       "nativeDir": {
         "claude": "../.doflow/scripts",
         "codex": "../.doflow/scripts",
-        "gemini": "../.doflow/scripts",
         "opencode": "../.doflow/scripts",
         "pi": "../.doflow/scripts",
         "copilot": "../.doflow/scripts",
@@ -350,7 +325,6 @@
       "appliesTo": [
         "claude",
         "codex",
-        "gemini",
         "opencode",
         "pi",
         "copilot",
@@ -366,10 +340,6 @@
           "renderer": "copy-tree",
           "capability": "scripts"
         },
-        "gemini": {
-          "renderer": "copy-tree",
-          "capability": "scripts"
-        },
         "opencode": {
           "renderer": "copy-tree",
           "capability": "scripts"
@@ -395,7 +365,6 @@
       "nativeDir": {
         "claude": "../.doflow/runtime/bin",
         "codex": "../.doflow/runtime/bin",
-        "gemini": "../.doflow/runtime/bin",
         "opencode": "../.doflow/runtime/bin",
         "pi": "../.doflow/runtime/bin",
         "copilot": "../.doflow/runtime/bin",
@@ -410,7 +379,6 @@
       "appliesTo": [
         "claude",
         "codex",
-        "gemini",
         "opencode",
         "pi",
         "copilot",
@@ -426,10 +394,6 @@
           "renderer": "copy-tree",
           "capability": "scripts"
         },
-        "gemini": {
-          "renderer": "copy-tree",
-          "capability": "scripts"
-        },
         "opencode": {
           "renderer": "copy-tree",
           "capability": "scripts"
@@ -455,7 +419,6 @@
       "nativeDir": {
         "claude": "../.doflow/runtime/src",
         "codex": "../.doflow/runtime/src",
-        "gemini": "../.doflow/runtime/src",
         "opencode": "../.doflow/runtime/src",
         "pi": "../.doflow/runtime/src",
         "copilot": "../.doflow/runtime/src",
@@ -470,7 +433,6 @@
       "appliesTo": [
         "claude",
         "codex",
-        "gemini",
         "opencode",
         "pi",
         "copilot",
@@ -486,10 +448,6 @@
           "renderer": "copy-tree",
           "capability": "scripts"
         },
-        "gemini": {
-          "renderer": "copy-tree",
-          "capability": "scripts"
-        },
         "opencode": {
           "renderer": "copy-tree",
           "capability": "scripts"
@@ -515,7 +473,6 @@
       "nativeDir": {
         "claude": "../.doflow/runtime/core/registry",
         "codex": "../.doflow/runtime/core/registry",
-        "gemini": "../.doflow/runtime/core/registry",
         "opencode": "../.doflow/runtime/core/registry",
         "pi": "../.doflow/runtime/core/registry",
         "copilot": "../.doflow/runtime/core/registry",
@@ -530,7 +487,6 @@
       "appliesTo": [
         "claude",
         "codex",
-        "gemini",
         "opencode",
         "pi",
         "copilot",
@@ -546,10 +502,6 @@
           "renderer": "copy-tree",
           "capability": "scripts"
         },
-        "gemini": {
-          "renderer": "copy-tree",
-          "capability": "scripts"
-        },
         "opencode": {
           "renderer": "copy-tree",
           "capability": "scripts"
@@ -575,7 +527,6 @@
       "nativeDir": {
         "claude": "bin",
         "codex": "bin",
-        "gemini": "bin",
         "opencode": "bin",
         "pi": "bin",
         "copilot": "bin",
@@ -637,6 +588,24 @@
         "kiro": "hooks"
       }
     },
+    {
+      "id": "copilot.hooks-scripts",
+      "kind": "hooks",
+      "source": "core/harnesses/copilot/hooks",
+      "appliesTo": [
+        "copilot"
+      ],
+      "projection": {
+        "copilot": {
+          "renderer": "copilot-hooks",
+          "capability": "hooks"
+        }
+      },
+      "ownership": "managed-tree",
+      "nativeDir": {
+        "copilot": "hooks"
+      }
+    },
     {
       "id": "claude.settings",
       "kind": "settings",
@@ -655,7 +624,7 @@
     {
       "id": "instructions.copilot",
       "kind": "instructions",
-      "source": "core/shared/guidance/rules",
+      "source": "core/shared/guidance",
       "appliesTo": [
         "copilot"
       ],
@@ -668,7 +637,8 @@
           "renderer": "copilot-rule-instructions",
           "capability": "instructions",
           "transform": "copilot-rule-instructions",
-          "layout": "instructions-md"
+          "layout": "instructions-md",
+          "select": "guidance-manifest"
         }
       }
     },
@@ -695,7 +665,7 @@
     {
       "id": "rules.antigravity",
       "kind": "guidance",
-      "source": "core/shared/guidance/rules",
+      "source": "core/shared/guidance",
       "appliesTo": [
         "antigravity"
       ],
@@ -706,7 +676,10 @@
       "projection": {
         "antigravity": {
           "renderer": "copy-tree",
-          "capability": "instructions"
+          "capability": "instructions",
+          "transform": "antigravity-always-on-rules",
+          "layout": "flat",
+          "select": "guidance-manifest"
         }
       }
     },
@@ -753,18 +726,18 @@
       "appliesTo": [
         "claude",
         "codex",
-        "gemini",
         "pi",
         "kiro",
+        "copilot",
         "antigravity"
       ],
       "ownership": "managed-tree",
       "nativeDir": {
         "claude": "../.doflow/shared/hooks",
         "codex": "../.doflow/shared/hooks",
-        "gemini": "../.doflow/shared/hooks",
         "pi": "../.doflow/shared/hooks",
         "kiro": "../.doflow/shared/hooks",
+        "copilot": "../.doflow/shared/hooks",
         "antigravity": "../.doflow/shared/hooks"
       },
       "projection": {
@@ -776,15 +749,15 @@
           "renderer": "copy-tree",
           "capability": "hooks"
         },
-        "gemini": {
+        "pi": {
           "renderer": "copy-tree",
           "capability": "hooks"
         },
-        "pi": {
+        "kiro": {
           "renderer": "copy-tree",
           "capability": "hooks"
         },
-        "kiro": {
+        "copilot": {
           "renderer": "copy-tree",
           "capability": "hooks"
         },

package/core/registry/capabilities.json

@@ -115,6 +115,18 @@
           "sourceMode": "live"
         }
       ]
+    },
+    "document.extract": {
+      "description": "Extract plain text or structured key-value data from documents or images.",
+      "providers": []
+    },
+    "media.transcribe": {
+      "description": "Convert audio/media recording into text transcription with optional timestamps.",
+      "providers": []
+    },
+    "text.compress": {
+      "description": "Perform context-preserving semantic text compression.",
+      "providers": []
     }
   }
 }