@kunlv/atdc 1.0.0

package/commands/opencode/atdc/commit.md

@@ -0,0 +1,6 @@
+---
+description: Git Commit Message 规范化生成，跳过自动路由
+---
+用 Read 工具读取 ${ATDC_DIR}/prompts/X-commit.md，然后直接开始执行。
+
+$ARGUMENTS

package/commands/opencode/atdc/compound.md

@@ -0,0 +1,8 @@
+---
+description: 知识沉淀（docs/solutions/ + CONCEPTS.md），跳过自动路由
+---
+请用 Read 工具读取 ${ATDC_DIR}/prompts/X-compound.md，然后根据以下参数开始执行：
+
+$ARGUMENTS
+
+跳过 GO.md 路由，直接进行知识沉淀。无参数时进入交互模式。

package/commands/opencode/atdc/context.md

@@ -0,0 +1,6 @@
+---
+description: 首次入场扫描，生成项目全景文档 CONTEXT.md，跳过自动路由
+---
+请用 Read 工具读取 ${ATDC_DIR}/prompts/X-context-scan.md，然后直接开始执行。
+
+跳过 GO.md 路由，直接进入 context 阶段：首次入场扫描，生成项目全景文档 CONTEXT.md。

package/commands/opencode/atdc/diagnose.md

@@ -0,0 +1,8 @@
+---
+description: 结构化调试循环（复现→最小化→假设→插桩→修复→回归）。用法 /atdc:diagnose <bug描述>
+---
+请用 Read 工具读取 ${ATDC_DIR}/prompts/X-diagnose.md，然后根据以下输入开始执行：
+
+$ARGUMENTS
+
+跳过 GO.md 路由，直接进入结构化调试循环。

package/commands/opencode/atdc/git-guardrails.md

@@ -0,0 +1,18 @@
+---
+description: Git 安全防护（安装/检查 pre-push hook，拦截危险命令）。用法 /atdc:git-guardrails [install|check]
+---
+执行以下步骤：
+
+1. 检查 hook 是否已安装：
+```bash
+ls -la .git/hooks/pre-push 2>/dev/null && echo "✅ 已安装" || echo "❌ 未安装"
+```
+
+2. 如果用户说 `install` 或未安装：
+```bash
+ln -sf ~/atdc/hooks/guardrails.sh .git/hooks/pre-push && echo "✅ git-guardrails 已安装"
+```
+
+3. 输出当前防护状态（参考 reference/git-guardrails.md 说明规则）
+
+$ARGUMENTS

package/commands/opencode/atdc/grill-with-docs.md

@@ -0,0 +1,8 @@
+---
+description: 深度拷问 + 文档沉淀（挑战领域模型、更新CONTEXT.md、生成ADR）。用法 /atdc:grill-with-docs [<change-name>]
+---
+请用 Read 工具读取 ${ATDC_DIR}/prompts/X-grill-with-docs.md，然后根据以下输入开始执行：
+
+$ARGUMENTS
+
+跳过 GO.md 路由，直接进入深度拷问 + 文档沉淀。

package/commands/opencode/atdc/handoff.md

@@ -0,0 +1,8 @@
+---
+description: 会话交接文档生成（决策上下文、关键文件、未解决问题）。用法 /atdc:handoff [<change-name>]
+---
+请用 Read 工具读取 ${ATDC_DIR}/prompts/X-handoff.md，然后根据以下输入开始执行：
+
+$ARGUMENTS
+
+跳过 GO.md 路由，直接生成交接文档。

package/commands/opencode/atdc/health.md

@@ -0,0 +1,6 @@
+---
+description: 项目健康巡检（活跃 change、记忆文件、野代码、spec 覆盖率、CRG+CodeGraph 图引擎健康），跳过自动路由
+---
+执行前先运行 `~/.claude/scripts/link-crg.sh` 确保 CRG 图数据就绪，然后用 Read 工具读取 ${ATDC_DIR}/prompts/X-health.md 开始执行。
+
+跳过 GO.md 路由，直接进行项目健康巡检。

package/commands/opencode/atdc/learn.md

@@ -0,0 +1,6 @@
+---
+description: self-learning 桥接：从 session 中检测 golden path 并自动沉淀为 atd skill/memory/command，跳过自动路由
+---
+用 Read 工具读取 ${ATDC_DIR}/prompts/X-learn.md，然后直接开始执行。
+
+$ARGUMENTS

package/commands/opencode/atdc/review.md

@@ -0,0 +1,7 @@
+请用 Read 工具读取 ${ATDC_DIR}/prompts/X-review.md，然后根据以下参数开始执行：
+
+$ARGUMENTS
+
+跳过 GO.md 路由，直接进行代码级 review。无参数时执行全量 review。
+
+子模式：delta=仅变更 | pr=PR review | gaps=仅测试缺口 | flows=仅受影响流程 | arch=架构健康检查 | crg=CRG 深度分析

package/commands/opencode/atdc/search.md

@@ -0,0 +1,6 @@
+---
+description: Semble代码搜索（语义+词法双路检索），跳过自动路由
+---
+用 Read 工具读取 ${ATDC_DIR}/prompts/X-search.md，然后直接开始执行。
+
+$ARGUMENTS

package/commands/opencode/atdc/strategy.md

@@ -0,0 +1,6 @@
+---
+description: 产品策略锚点（STRATEGY.md 创建/更新），跳过自动路由
+---
+请用 Read 工具读取 ${ATDC_DIR}/prompts/X-strategy.md，然后直接开始执行。
+
+跳过 GO.md 路由，直接创建或更新 STRATEGY.md。

package/commands/opencode/atdc/table2xlsx.md

@@ -0,0 +1,6 @@
+---
+description: 解析 CREATE TABLE DDL 生成 Excel 模板，跳过自动路由
+---
+用 Read 工具读取 ${ATDC_DIR}/prompts/X-table2xlsx.md，然后直接开始执行。
+
+$ARGUMENTS

package/commands/opencode/atdc/test-plan.md

@@ -0,0 +1,6 @@
+---
+description: 自测计划阶段：基于 change 的 tasks.md 生成可执行自测计划文档和集成测试文件
+---
+请用 Read 工具读取 ${ATDC_DIR}/prompts/X-test-plan.md，然后直接开始执行。
+
+跳过 GO.md 路由，直接进入自测计划阶段：生成自测计划文档 + 集成测试 Go 文件。

package/commands/opencode/atdc/travel-planner.md

@@ -0,0 +1,6 @@
+---
+description: 全栈旅行规划助手：目的地推荐→深度研究→智能规划→精美攻略生成，跳过自动路由
+---
+用 skill 工具加载 travel-planner skill，然后根据用户需求执行旅行规划。
+
+用户需求：$ARGUMENTS

package/commands/opencode/atdc/xlsx2sql-insert.md

@@ -0,0 +1,6 @@
+---
+description: Excel → INSERT SQL，跳过自动路由
+---
+用 Read 工具读取 ${ATDC_DIR}/prompts/X-xlsx2sql-insert.md，然后直接开始执行。
+
+$ARGUMENTS

package/commands/opencode/atdc/xlsx2sql-update.md

@@ -0,0 +1,6 @@
+---
+description: Excel → UPDATE SQL，跳过自动路由
+---
+用 Read 工具读取 ${ATDC_DIR}/prompts/X-xlsx2sql-update.md，然后直接开始执行。
+
+$ARGUMENTS

package/commands/opencode/atdc/zoom-out.md

@@ -0,0 +1,8 @@
+---
+description: 代码全景分析（系统定位、数据流、影响面、架构一致性）。用法 /atdc:zoom-out <文件/函数/模块>
+---
+请用 Read 工具读取 ${ATDC_DIR}/prompts/X-zoom-out.md，然后根据以下输入开始执行：
+
+$ARGUMENTS
+
+跳过 GO.md 路由，直接进行代码全景分析。

package/config/cls-defaults.json

@@ -0,0 +1,19 @@
+{
+  "_comment": "CLS MCP Client 配置文件。cls --init 自动生成，请按需修改。",
+  "skill_dir": "/Users/lvkun/Documents/Codes/agent-skills/cls-log-query",
+  "python": "python3",
+  "accounts": {
+    "tcs": { "account": "ticket", "project_id": "11559" }
+  },
+  "defaults": {
+    "limit": 200,
+    "out_dir": "~/.cls/logs",
+    "topic_type": "error",
+    "regions": "gz,bj",
+    "time_range": "15m"
+  },
+  "output": {
+    "format": "jsonl",
+    "filename": "{account}_{query}_{ts}-{suffix}.jsonl"
+  }
+}

package/hooks/atd-archive.sh

@@ -0,0 +1,86 @@
+#!/bin/sh
+# atd-archive.sh — one-command archive automation
+# Merges delta specs, moves change to archive, updates state.
+#
+# Usage:
+#   atd-archive.sh <change-name>              archive
+#   atd-archive.sh --dry-run <change-name>     preview only
+
+set -e
+
+DIR=$(CDPATH='' cd -- "$(dirname -- "$0")" && pwd)
+GUARD_SH="$DIR/phase-guard.sh"
+STATE_SH="$DIR/atd-state.sh"
+
+die() { echo "[HARD STOP] $*" >&2; exit 1; }
+ok() { echo "  ✓ $*"; }
+
+_dry=false
+_name=""
+
+for arg in "$@"; do
+  case "$arg" in
+    --dry-run) _dry=true;;
+    *) _name="$arg";;
+  esac
+done
+
+[ -z "$_name" ] && die "Usage: atd-archive.sh [--dry-run] <change-name>"
+
+_d="openspec/changes/$_name"
+[ -d "$_d" ] || die "change directory not found: $_d"
+
+# Step 1: guard check
+echo "⚙  atd-archive: checking preconditions for $_name"
+sh "$GUARD_SH" "$_name" archive || die "archive guard failed"
+
+if $_dry; then
+  echo ""
+  echo "📋 DRY RUN — would archive: $_name"
+  echo "  merge specs:"
+  for spec in "$_d"/specs/*/spec.md; do
+    [ -f "$spec" ] || continue
+    _module=$(basename "$(dirname "$spec")")
+    echo "    $spec → openspec/specs/$_module/spec.md"
+  done
+  echo "  move: $_d → openspec/changes/archive/$_name"
+  echo "  state: archived = true"
+  exit 0
+fi
+
+# Step 2: merge delta specs
+echo ""
+echo "📦 merging specs..."
+for spec in "$_d"/specs/*/spec.md; do
+  [ -f "$spec" ] || continue
+  _module=$(basename "$(dirname "$spec")")
+  _target="openspec/specs/$_module/spec.md"
+  mkdir -p "$(dirname "$_target")"
+  if [ -f "$_target" ]; then
+    echo "  appending: $_module/spec.md → $_target"
+    echo "" >> "$_target"
+    echo "<!-- merged from change $_name -->" >> "$_target"
+    cat "$spec" >> "$_target"
+  else
+    echo "  creating: $_module/spec.md"
+    cp "$spec" "$_target"
+  fi
+  ok "merged $_module/spec.md"
+done
+
+# Step 3: update state (before move, while file is still accessible)
+echo ""
+echo "📝 updating state..."
+sh "$STATE_SH" set "$_name" archived true
+ok "archived = true"
+
+# Step 4: move to archive
+echo ""
+echo "📁 moving to archive..."
+_archive_dir="openspec/changes/archive"
+mkdir -p "$_archive_dir"
+mv "$_d" "$_archive_dir/$_name"
+ok "moved to $_archive_dir/$_name"
+
+echo ""
+echo "✅ archive complete: $_name"

package/hooks/atd-state.sh

@@ -0,0 +1,165 @@
+#!/bin/sh
+# atd-state.sh — unified state management for .phase-state.json
+# Usage: atd-state.sh <cmd> [args...]
+#   init <change-name>  create .phase-state.json in openspec/changes/<name>/
+#   set <key> <value>   update a field
+#   get <key>           read a field
+#   check <phase>       validate current phase legality
+#   transition <from> <to>  execute phase transition with guard check
+
+set -e
+
+DIR=$(CDPATH='' cd -- "$(dirname -- "$0")" && pwd)
+EVIDENCE_LOG="$DIR/evidence-log.sh"
+
+die() { echo "$@" >&2; exit 1; }
+warn() { echo "$@" >&2; }
+
+# JSON helper — prefer jq, fallback to node -e
+_json_get() {
+  if command -v jq >/dev/null 2>&1; then
+    jq -r ".$2 // \"\"" "$1"
+  elif command -v node >/dev/null 2>&1; then
+    node -e "try{var d=require('$(cd "$(dirname "$1")" && pwd)/$(basename "$1")');console.log(d.$2||'')}catch(e){console.log('')}"
+  else
+    die "jq or node required for JSON operations"
+  fi
+}
+
+_json_set() {
+  local file="$1" key="$2" value="$3"
+  if command -v jq >/dev/null 2>&1; then
+    jq ".$key = $value" "$file" > "${file}.tmp" && mv "${file}.tmp" "$file"
+  elif command -v node >/dev/null 2>&1; then
+    node -e "
+var fs=require('fs');
+var d=JSON.parse(fs.readFileSync('$file','utf8'));
+d.$key = $value;
+fs.writeFileSync('$file',JSON.stringify(d,null,2)+'\n');
+"
+  else
+    die "jq or node required for JSON operations"
+  fi
+}
+
+# Valid phase sequence: open -> design -> build -> verify -> archive
+_valid_phases="open design build verify archive"
+_phase_index() {
+  _i=0; for _p in $_valid_phases; do
+    [ "$_p" = "$1" ] && echo "$_i" && return 0
+    _i=$((_i + 1))
+  done
+  echo "-1"
+}
+
+# Resolve change dir from current directory or explicit name
+_find_change_dir() {
+  local name="$1"
+  [ -z "$name" ] && die "change name required"
+  local d="openspec/changes/$name"
+  [ -d "$d" ] || die "change directory not found: $d"
+  echo "$d"
+}
+
+_state_file() {
+  echo "$(_find_change_dir "$1")/.phase-state.json"
+}
+
+cmd_init() {
+  local name="$1" mode="${2:-full}"
+  [ -z "$name" ] && die "Usage: atd-state.sh init <change-name> [mode]"
+  local d="openspec/changes/$name"
+  mkdir -p "$d"
+  local sf="$d/.phase-state.json"
+  local ts now
+  ts=$(date -u +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u +"%Y-%m-%dT%H:%M:%SZ" 2>/dev/null || echo "")
+  cat > "$sf" <<EOF
+{
+  "change": "$name",
+  "phase": "open",
+  "mode": "$mode",
+  "tasks": { "total": 0, "completed": 0 },
+  "verifiedAt": null,
+  "archived": false,
+  "verificationReport": null,
+  "branchStatus": "pending",
+  "startedAt": "$ts",
+  "updatedAt": "$ts"
+}
+EOF
+  echo "initialized $sf"
+  sh "$EVIDENCE_LOG" intake "$name" "$mode" 2>/dev/null || true
+}
+
+cmd_get() {
+  [ -z "$1" ] && die "Usage: atd-state.sh get <change-name> <key>"
+  local sf
+  sf=$(_state_file "$1")
+  [ -f "$sf" ] || die "state file not found: $sf"
+  shift
+  _json_get "$sf" "$1"
+}
+
+cmd_set() {
+  [ -z "$1" ] && die "Usage: atd-state.sh set <change-name> <key> <value>"
+  local name="$1"; shift
+  local sf
+  sf=$(_state_file "$name")
+  [ -f "$sf" ] || die "state file not found: $sf"
+  local key="$1" value="$2"
+  # Auto-wrap non-JSON values in double quotes for jq compatibility
+  case "$value" in
+    \"*\"|true|false|null|{*|\[*) ;;  # already valid JSON
+    *) value="\"$value\"" ;;          # wrap string in quotes
+  esac
+  _json_set "$sf" "$key" "$value"
+  # update updatedAt
+  local ts
+  ts=$(date -u +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u +"%Y-%m-%dT%H:%M:%SZ" 2>/dev/null || echo "")
+  _json_set "$sf" "updatedAt" "\"$ts\""
+  echo "ok"
+}
+
+cmd_check() {
+  [ -z "$1" ] && die "Usage: atd-state.sh check <change-name> <target-phase>"
+  local name="$1" target="$2"
+  local sf cur
+  sf=$(_state_file "$name")
+  [ -f "$sf" ] || die "state file not found: $sf"
+  cur=$(_json_get "$sf" "phase")
+  local ci ti
+  ci=$(_phase_index "$cur")
+  ti=$(_phase_index "$target")
+  [ "$ci" -lt 0 ] && die "invalid current phase: $cur"
+  [ "$ti" -lt 0 ] && die "invalid target phase: $target"
+  [ "$ti" -le "$ci" ] && die "cannot go backward: $cur -> $target"
+  [ $((ti - ci)) -gt 1 ] && die "cannot skip phases: $cur -> $target (must go through intermediate)"
+  echo "phase check ok: $cur -> $target"
+}
+
+cmd_transition() {
+  [ -z "$1" ] && die "Usage: atd-state.sh transition <change-name> <from> <to>"
+  local name="$1" from="$2" to="$3"
+  cmd_check "$name" "$to" || die "transition check failed"
+  local sf
+  sf=$(_state_file "$name")
+  local cur
+  cur=$(_json_get "$sf" "phase")
+  [ "$cur" = "$from" ] || die "current phase mismatch: expected $from, got $cur"
+  _json_set "$sf" "phase" "\"$to\""
+  local ts
+  ts=$(date -u +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u +"%Y-%m-%dT%H:%M:%SZ" 2>/dev/null || echo "")
+  _json_set "$sf" "updatedAt" "\"$ts\""
+  [ "$to" = "verify" ] && _json_set "$sf" "verifiedAt" "\"$ts\""
+  echo "transitioned: $from -> $to"
+  sh "$EVIDENCE_LOG" phase "$name" "$from" "$to" 2>/dev/null || true
+}
+
+case "${1:-}" in
+  init) shift; cmd_init "$@";;
+  get) shift; cmd_get "$@";;
+  set) shift; cmd_set "$@";;
+  check) shift; cmd_check "$@";;
+  transition) shift; cmd_transition "$@";;
+  *) die "Usage: atd-state.sh {init|set|get|check|transition} ...";;
+esac

package/hooks/evidence-hook.sh

@@ -0,0 +1,88 @@
+#!/bin/sh
+# evidence-hook.sh — PostToolUse hook for automatic evidence recording
+# Detects writes to .phase-state.json / .progress.json and records events.
+# No agent compliance needed — fires automatically on every tool use.
+#
+# Registered via: atdc hook install
+# Detects events:
+#   - Write to .phase-state.json with phase change → phase_transition event
+#   - Write to .progress.json with new completed task → task_complete event
+
+DIR=$(CDPATH='' cd -- "$(dirname -- "$0")" && pwd)
+EVIDENCE_LOG="$DIR/evidence-log.sh"
+STATE_SH="$DIR/atd-state.sh"
+
+_file="${1:-}"
+[ -z "$_file" ] && exit 0
+
+_file=$(echo "$_file" | sed 's|^\./||')
+
+# Only care about state file writes
+case "$_file" in
+  */.phase-state.json)
+    ;;
+  */.progress.json)
+    ;;
+  *)
+    exit 0
+    ;;
+esac
+
+[ -f "$_file" ] || exit 0
+
+_record_phase() {
+  local f="$1"
+  if ! command -v node >/dev/null 2>&1; then exit 0; fi
+  local change_dir
+  change_dir=$(dirname "$f")
+  local change_name
+  change_name=$(basename "$change_dir")
+  local phase mode
+  phase=$(python3 -c "import json; print(json.load(open('$f')).get('phase',''))" 2>/dev/null || node -e "console.log(JSON.parse(require('fs').readFileSync('$f','utf8')).phase||'')" 2>/dev/null)
+  mode=$(python3 -c "import json; print(json.load(open('$f')).get('mode','full'))" 2>/dev/null || node -e "console.log(JSON.parse(require('fs').readFileSync('$f','utf8')).mode||'full')" 2>/dev/null)
+  [ -z "$phase" ] && exit 0
+
+  local stamp="$change_dir/.evidence/.phase-stamp"
+  local prev=""
+  [ -f "$stamp" ] && prev=$(cat "$stamp")
+
+  if [ "$prev" != "$phase" ]; then
+    local from="${prev:-init}"
+    local to="$phase"
+    sh "$EVIDENCE_LOG" phase "$change_name" "$from" "$to" 2>/dev/null
+    mkdir -p "$(dirname "$stamp")"
+    echo "$phase" > "$stamp"
+  fi
+}
+
+_record_progress() {
+  local f="$1"
+  if ! command -v node >/dev/null 2>&1; then exit 0; fi
+  local change_dir change_name
+  change_dir=$(dirname "$f")
+  change_name=$(basename "$change_dir")
+
+  local status
+  status=$(python3 -c "import json; print(json.load(open('$f')).get('status',''))" 2>/dev/null || node -e "console.log(JSON.parse(require('fs').readFileSync('$f','utf8')).status||'')" 2>/dev/null)
+
+  local stamp="$change_dir/.evidence/.progress-stamp"
+  local prev=""
+  [ -f "$stamp" ] && prev=$(cat "$stamp")
+
+  if [ "$status" = "completed" ] && [ "$prev" != "completed" ]; then
+    sh "$EVIDENCE_LOG" done "$change_name" 2>/dev/null
+    mkdir -p "$(dirname "$stamp")"
+    echo "completed" > "$stamp"
+  fi
+}
+
+case "$_file" in
+  */.phase-state.json)
+    _record_phase "$_file"
+    ;;
+  */.progress.json)
+    _record_progress "$_file"
+    ;;
+esac
+
+exit 0

package/hooks/evidence-log.sh

@@ -0,0 +1,54 @@
+#!/bin/sh
+# evidence-log.sh — record evidence events during phase transitions
+# Usage:
+#   evidence-log.sh record <change-name> <event-type> [--phase=<p>] [--key=value...]
+#
+# Called automatically by atd-state.sh during transitions.
+
+DIR=$(CDPATH='' cd -- "$(dirname -- "$0")" && pwd)
+ATD_BIN="$DIR/../bin/atdc.js"
+
+_record() {
+  local change="$1" type="$2" phase="${3:-unknown}"
+  shift 3 2>/dev/null || true
+
+  local extra=""
+  for arg in "$@"; do
+    extra="$extra $arg"
+  done
+
+  if command -v node >/dev/null 2>&1; then
+    node "$ATD_BIN" evidence record "$change" "$type" "--phase=$phase" $extra 2>/dev/null || true
+  fi
+}
+
+_phase_event() {
+  local change="$1" from="$2" to="$3"
+  _record "$change" "phase_transition" "$to" "--from=$from" "--to=$to"
+}
+
+_intake_event() {
+  local change="$1" mode="$2"
+  _record "$change" "intake" "open" "--mode=$mode"
+}
+
+_gate_event() {
+  local change="$1" gate="$2" result="$3"
+  _record "$change" "gate_check" "build" "--gate=$gate" "--result=$result"
+}
+
+_done_event() {
+  local change="$1"
+  _record "$change" "done" "archive"
+}
+
+case "${1:-}" in
+  phase) shift; _phase_event "$@";;
+  intake) shift; _intake_event "$@";;
+  gate) shift; _gate_event "$@";;
+  done) shift; _done_event "$@";;
+  record) shift; _record "$@";;
+  *)
+    echo "Usage: evidence-log.sh {phase|intake|gate|done|record} ..." >&2
+    ;;
+esac

package/hooks/guardrails.sh

@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+# atdc git guardrails — pre-push hook
+# 拦截危险 git 命令，保护 main/master 分支
+# 安装：ln -sf ~/atdc/hooks/guardrails.sh .git/hooks/pre-push
+# 卸载：rm .git/hooks/pre-push
+
+set -e
+
+REMOTE="$1"
+REMOTE_URL="$2"
+
+# 当前分支
+CURRENT_BRANCH=$(git rev-parse --abbrev-ref HEAD)
+
+# 保护分支列表
+PROTECTED_BRANCHES="main master"
+
+# ── 检查是否推送到保护分支 ──
+for branch in $PROTECTED_BRANCHES; do
+  if [ "$CURRENT_BRANCH" = "$branch" ]; then
+    echo "🔒 atdc guardrails: 禁止直接推送到 $branch 分支"
+    echo ""
+    echo "   请使用 PR/MR 方式合并代码。"
+    echo "   如果必须直推（紧急 hotfix），运行："
+    echo "   git push --no-verify"
+    echo ""
+    exit 1
+  fi
+done
+
+# ── 检查 WIP commit ──
+while read local_ref local_sha remote_ref remote_sha; do
+  if [ "$local_sha" = "0000000000000000000000000000000000000000" ]; then
+    # 删除远程分支，允许
+    continue
+  fi
+
+  if [ "$remote_sha" = "0000000000000000000000000000000000000000" ]; then
+    # 新分支首次推送，检查所有新 commit
+    WIP_COUNT=$(git log "$local_sha" --not --all --oneline 2>/dev/null | grep -ci "WIP" || true)
+  else
+    WIP_COUNT=$(git log "$remote_sha..$local_sha" --oneline 2>/dev/null | grep -ci "WIP" || true)
+  fi
+
+  if [ "$WIP_COUNT" -gt 0 ]; then
+    echo "⚠️  atdc guardrails: 检测到 $WIP_COUNT 个 WIP commit"
+    echo ""
+    echo "   建议 squash 后再推送。"
+    echo "   继续推送：git push --no-verify"
+    echo ""
+    exit 1
+  fi
+done
+
+# ── CUSTOM RULES ──────────────────────────────────────────
+# 在此处添加项目特定的检查规则
+# 示例：
+# if git log $remote_sha..$local_sha --oneline | grep -q "TODO"; then
+#   echo "❌ commit 中包含 TODO，请处理后再推送"
+#   exit 1
+# fi
+# ───────────────────────────────────────────────────────────
+
+echo "✅ atdc guardrails: 检查通过"
+exit 0