@kunlv/atdc 1.0.0

package/hooks/handoff-compress.sh

@@ -0,0 +1,104 @@
+#!/bin/sh
+# handoff-compress.sh — design→build context compression
+# Generates compact handoff package with SHA256 hashes instead of full content.
+# Output: openspec/changes/<name>/.comet/handoff/context.json
+#
+# Usage: handoff-compress.sh <change-name>
+
+DIR=$(CDPATH='' cd -- "$(dirname -- "$0")" && pwd)
+STATE_SH="$DIR/atd-state.sh"
+
+die() { echo "$@" >&2; exit 1; }
+
+_name="${1:-}"
+[ -z "$_name" ] && die "Usage: handoff-compress.sh <change-name>"
+
+_d="openspec/changes/$_name"
+[ -d "$_d" ] || die "change directory not found: $_d"
+
+_handoff_dir="$_d/.comet/handoff"
+mkdir -p "$_handoff_dir"
+
+# SHA256 via shasum (macOS) or sha256sum (Linux)
+_sha256() {
+  if command -v shasum >/dev/null 2>&1; then
+    shasum -a 256 "$1" | awk '{print $1}'
+  elif command -v sha256sum >/dev/null 2>&1; then
+    sha256sum "$1" | awk '{print $1}'
+  else
+    node -e "console.log(require('crypto').createHash('sha256').update(require('fs').readFileSync('$1')).digest('hex'))" 2>/dev/null || echo "unknown"
+  fi
+}
+
+# Collect source file info
+_specs="["
+_first=true
+for f in "$_d"/specs/*/spec.md; do
+  [ -f "$f" ] || continue
+  _hash=$(_sha256 "$f")
+  _rel=$(echo "$f" | sed "s|$_d/||")
+  if $_first; then _first=false; else _specs="$_specs,"; fi
+  _specs="$_specs{\"file\":\"$_rel\",\"sha256\":\"$_hash\"}"
+done
+_specs="$_specs]"
+
+# Design doc
+_design="null"
+[ -f "$_d/design.md" ] && _design="{\"file\":\"design.md\",\"sha256\":\"$(_sha256 "$_d/design.md")\"}"
+
+# Tasks summary
+_tasks_summary() {
+  local total completed remaining
+  [ -f "$_d/tasks.md" ] || { echo '{"total":0,"completed":0,"remaining":0,"titles":[]}'; return 0; }
+  total=$(grep -c '^\- \[' "$_d/tasks.md" 2>/dev/null | tr -d ' [:space:]' || echo 0)
+  [ -z "$total" ] && total=0
+  completed=$(grep -c '^\- \[x\]' "$_d/tasks.md" 2>/dev/null | tr -d ' [:space:]' || echo 0)
+  [ -z "$completed" ] && completed=0
+  remaining=$((total - completed))
+  # Extract task titles
+  local titles="["
+  local first_t=true
+  while IFS= read -r line; do
+    case "$line" in
+      "### "*) 
+        local t=${line#"### "}
+        if $first_t; then first_t=false; else titles="$titles,"; fi
+        titles="$titles\"$t\""
+        ;;
+    esac
+  done < "$_d/tasks.md"
+  titles="$titles]"
+  echo "{\"total\":$total,\"completed\":$completed,\"remaining\":$remaining,\"titles\":$titles}"
+}
+
+_tasks=$(_tasks_summary)
+
+# Proposal summary (first 3 lines after ##)
+_proposal="null"
+if [ -f "$_d/proposal.md" ]; then
+  _summary=$(grep -A2 "^## 背景与目标" "$_d/proposal.md" 2>/dev/null | tail -n +2 | tr '\n' ' ' || echo "")
+  [ -n "$_summary" ] && _proposal="\"$_summary\""
+fi
+
+cat > "$_handoff_dir/context.json" << JSONEOF
+{
+  "change": "$_name",
+  "generatedAt": "$(date -u +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u +"%Y-%m-%dT%H:%M:%SZ" 2>/dev/null || echo "")",
+  "specs": $_specs,
+  "design": $_design,
+  "proposalSummary": $_proposal,
+  "tasks": $_tasks
+}
+JSONEOF
+
+echo "handoff context generated: $_handoff_dir/context.json"
+
+# Size report
+_src_size=$(cat "$_d"/specs/*/spec.md "$_d"/design.md 2>/dev/null | wc -c | tr -d ' ')
+_hf_size=$(wc -c < "$_handoff_dir/context.json" | tr -d ' ')
+echo "  source total: $_src_size bytes"
+echo "  handoff size: $_hf_size bytes"
+if [ "$_src_size" -gt 0 ]; then
+  _ratio=$((_hf_size * 100 / _src_size))
+  echo "  ratio: $_ratio%"
+fi

package/hooks/phase-guard.sh

@@ -0,0 +1,134 @@
+#!/bin/sh
+# phase-guard.sh — phase transition validation gate
+# Usage:
+#   phase-guard.sh <change-name> <target-phase>   check if can enter target phase
+#   phase-guard.sh --report <change-name>          show full status summary
+
+set -e
+
+DIR=$(CDPATH='' cd -- "$(dirname -- "$0")" && pwd)
+STATE_SH="$DIR/atd-state.sh"
+
+die() { echo "[HARD STOP] $*" >&2; exit 1; }
+ok() { echo "  ✓ $*"; }
+warn_line() { echo "  ⚠ $*"; }
+
+_get_state() { sh "$STATE_SH" get "$1" "$2"; }
+
+# ── guard: build ──
+guard_build() {
+  local d="$1"
+  local mode
+  mode=$(_get_state "$name" "mode")
+  if [ "$mode" = "bugfix" ]; then
+    if [ -f "$d/bug-report.md" ]; then
+      ok "bug-report.md exists (bugfix mode)"
+      echo "build guard: passed (bugfix)"
+      return
+    else
+      die "bugfix requires bug-report.md"
+    fi
+  fi
+  local ok_count=0 fail_count=0
+  for f in proposal.md design.md tasks.md; do
+    if [ -f "$d/$f" ]; then
+      ok "$f exists"; ok_count=$((ok_count + 1))
+    else
+      warn_line "$f missing"; fail_count=$((fail_count + 1))
+    fi
+  done
+  # check specs
+  if ls "$d/specs"/*/spec.md >/dev/null 2>&1; then
+    ok "specs/ exists"; ok_count=$((ok_count + 1))
+  else
+    warn_line "specs/*/spec.md missing"; fail_count=$((fail_count + 1))
+  fi
+  [ "$fail_count" -gt 0 ] && die "build guard failed: $fail_count missing files"
+  echo "build guard: $ok_count checks passed"
+}
+
+# ── guard: verify ──
+guard_verify() {
+  local d="$1"
+  # check incomplete tasks
+  local incomplete
+  incomplete=$(grep -c '^\- \[ \]' "$d/tasks.md" 2>/dev/null | tr -d ' [:space:]' || echo 0)
+  [ -z "$incomplete" ] && incomplete=0
+  if [ "$incomplete" -gt 0 ]; then
+    die "verify guard failed: $incomplete incomplete tasks in tasks.md"
+  fi
+  ok "all tasks complete"
+  # check verification report
+  local vr
+  vr=$(_get_state "$name" "verificationReport")
+  if [ -z "$vr" ] || [ "$vr" = "null" ]; then
+    die "verify guard failed: verificationReport not set"
+  fi
+  [ -f "$d/$vr" ] && ok "verificationReport $vr exists" || die "verify guard failed: $vr not found"
+  echo "verify guard: passed"
+}
+
+# ── guard: archive ──
+guard_archive() {
+  local phase
+  phase=$(_get_state "$name" "phase")
+  [ "$phase" = "verify" ] || die "archive guard failed: phase must be verify, got $phase"
+  ok "phase is verify"
+  local bs
+  bs=$(_get_state "$name" "branchStatus")
+  [ "$bs" = "handled" ] || die "archive guard failed: branchStatus must be handled, got $bs"
+  ok "branchStatus is handled"
+  local vr
+  vr=$(_get_state "$name" "verificationReport")
+  [ -n "$vr" ] && [ "$vr" != "null" ] || die "archive guard failed: verificationReport not set"
+  ok "verificationReport set"
+  echo "archive guard: passed"
+}
+
+# ── report ──
+cmd_report() {
+  local name="$1" d
+  d="openspec/changes/$name"
+  [ -d "$d" ] || die "change directory not found: $d"
+  local phase mode arch tasks_completed tasks_total vr bs
+  phase=$(_get_state "$name" "phase")
+  mode=$(_get_state "$name" "mode")
+  arch=$(_get_state "$name" "archived")
+  tasks_completed=$(_get_state "$name" "tasks.completed")
+  tasks_total=$(_get_state "$name" "tasks.total")
+  vr=$(_get_state "$name" "verificationReport")
+  bs=$(_get_state "$name" "branchStatus")
+
+  echo "📋 Phase Guard Report — $name"
+  echo "  phase:       $phase"
+  echo "  mode:        $mode"
+  echo "  tasks:       ${tasks_completed:-0}/${tasks_total:-0}"
+  echo "  archived:    $arch"
+  echo "  branch:      ${bs:-pending}"
+  echo "  verify rpt:  ${vr:-none}"
+  echo "  directory:   $d"
+}
+
+# ── main ──
+case "${1:-}" in
+  --report)
+    [ -z "$2" ] && die "Usage: phase-guard.sh --report <change-name>"
+    shift
+    cmd_report "$1"
+    ;;
+  *)
+    [ -z "$2" ] && die "Usage: phase-guard.sh <change-name> <target-phase>"
+    name="$1"
+    target="$2"
+    d="openspec/changes/$name"
+    [ -d "$d" ] || die "change directory not found: $d"
+    echo "⚙  phase-guard: checking $name → $target"
+    case "$target" in
+      build) guard_build "$d";;
+      verify) guard_verify "$d";;
+      archive) guard_archive "$d";;
+      *) die "unknown target phase: $target (valid: build, verify, archive)";;
+    esac
+    echo "✅ phase guard passed: $target"
+    ;;
+esac

package/hooks/phase-write-guard.sh

@@ -0,0 +1,96 @@
+#!/bin/sh
+# phase-write-guard.sh — PreToolUse hook for write protection
+# Blocks file writes in restricted phases:
+#   open/design: blocks paths listed in $ATDC_DIR/config.yaml write_guard.paths
+#   archive:     blocks openspec/changes/
+#   build:       all paths allowed
+#
+# Global config at $ATDC_DIR/config.yaml (no project-level files):
+#   write_guard:
+#     paths: [src, lib, pkg, internal, cmd]  # default if not set
+#
+# Usage:
+#   phase-write-guard.sh <file-path>
+#   PHASE=<phase> phase-write-guard.sh <file-path>  # override for testing
+#
+# Exit: 0 = allowed, 1 = blocked
+
+DIR=$(CDPATH='' cd -- "$(dirname -- "$0")" && pwd)
+STATE_SH="$DIR/atd-state.sh"
+
+# Default protected paths (covers JS/TS + Go projects)
+_DEFAULT_PATHS="src/ lib/ pkg/ internal/ cmd/"
+
+_load_config() {
+  if [ -n "$ATDC_DIR" ] && [ -f "$ATDC_DIR/config.yaml" ]; then
+    _config_file="$ATDC_DIR/config.yaml"
+  elif [ -f "$DIR/../config.yaml" ]; then
+    # fallback: config.yaml next to hooks/ directory
+    _config_file="$DIR/../config.yaml"
+  else
+    echo "$_DEFAULT_PATHS"
+    return
+  fi
+  if command -v node >/dev/null 2>&1; then
+    node -e "
+var fs=require('fs'),yaml=fs.readFileSync('$_config_file','utf8');
+var m=yaml.match(/write_guard:\s*\n(\s+paths:\s*\[([^\]]+)\])?/);
+if(m&&m[2]) console.log(m[2].split(',').map(s=>s.trim().replace(/['\"]/g,'')+'/').join(' '));
+else console.log('$_DEFAULT_PATHS');
+" 2>/dev/null || echo "$_DEFAULT_PATHS"
+  else
+    echo "$_DEFAULT_PATHS"
+  fi
+}
+
+_detect_phase() {
+  for d in openspec/changes/*/; do
+    [ -d "$d" ] || continue
+    local name
+    name=$(basename "$d")
+    if [ -f "$d.phase-state.json" ]; then
+      sh "$STATE_SH" get "$name" phase 2>/dev/null && return 0
+    fi
+  done
+  echo "build"
+}
+
+_protected="$(_load_config)"
+_phase="${PHASE:-$(_detect_phase)}"
+_file="${1:-}"
+
+[ -z "$_file" ] && { echo "Usage: phase-write-guard.sh <file-path>" >&2; exit 1; }
+
+# Normalize path
+_file=$(echo "$_file" | sed 's|^\./||')
+
+case "$_phase" in
+  open|design)
+    for p in $_protected; do
+      case "$_file" in
+        $p*)
+          echo "[WRITE GUARD] BLOCKED: phase=$_phase prohibits writing to $_file (protected: $p)" >&2
+          exit 1
+          ;;
+      esac
+    done
+    exit 0
+    ;;
+  archive)
+    case "$_file" in
+      openspec/changes/*)
+        echo "[WRITE GUARD] BLOCKED: phase=$_phase prohibits writing to $_file" >&2
+        exit 1
+        ;;
+      *)
+        exit 0
+        ;;
+    esac
+    ;;
+  build|verify)
+    exit 0
+    ;;
+  *)
+    exit 0
+    ;;
+esac

package/hooks/ponytail-fix.sh

@@ -0,0 +1,179 @@
+#!/bin/sh
+# ponytail-fix.sh — apply generic refactors automatically
+# Usage: ponytail-fix.sh [--dry-run] --pattern=<id>
+#   --dry-run      preview only
+#   --pattern=<id> one of: crud | rpc | di
+
+set -e
+
+DRY=false
+PATTERN=""
+
+for arg in "$@"; do
+  case "$arg" in
+    --dry-run) DRY=true ;;
+    --pattern=*) PATTERN="${arg#*=}" ;;
+  esac
+done
+
+TMP="/tmp/ponytail-fix"
+mkdir -p "$TMP"
+
+fix_crud() {
+  echo "📦 CRUD → BaseModel[T]"
+  count=$(grep -rn "func.*Find.*ctx\.Context\|func.*Find.*context\.Context" models/ --include="*.go" 2>/dev/null | wc -l | tr -d ' ')
+  if $DRY; then
+    echo "  DRY: 将为 $count model 提取 BaseModel[T]，预估减少 ~$((count * 40)) 行"
+    return
+  fi
+  cat > "$TMP/base_model.go" << 'GOEOF'
+package models
+
+import (
+	"context"
+	"fmt"
+	"git.kugou.net/opensource/kugo/model"
+)
+
+// BaseModel provides generic CRUD for GORM models with sharding.
+// Embed in your struct to inherit Create/Find/Update/Delete.
+type BaseModel[T any] struct {
+	ShardingVal *int64
+	ShardingBiz string
+	TableBase   string
+}
+
+func (m *BaseModel[T]) db(ctx context.Context) *gorm.DB {
+	ms := models.CreateModSharding(m.ShardingBiz, models.ModShardingParam{
+		ShardingVal: m.ShardingVal, ShardingBiz: m.ShardingBiz, ShardingSubBiz: m.ShardingBiz,
+	})
+	dbName := fmt.Sprintf("%s_%s", ms.GetDbRoute(), ms.GetDbSuffix())
+	tableName := fmt.Sprintf("%s_%s", m.TableBase, ms.GetTableSuffix())
+	return model.Db(dbName).Table(tableName).WithContext(ctx)
+}
+
+func (m *BaseModel[T]) Find(ctx context.Context, where any, args ...any) ([]*T, error) {
+	var data []*T
+	err := m.db(ctx).Where(where, args...).Find(&data).Error
+	return data, err
+}
+
+func (m *BaseModel[T]) FindOne(ctx context.Context, where any, args ...any) error {
+	return m.db(ctx).Where(where, args...).Limit(1).Find(new(T)).Error
+}
+
+func (m *BaseModel[T]) Create(ctx context.Context, val *T) error {
+	return m.db(ctx).Create(val).Error
+}
+
+func (m *BaseModel[T]) Updates(ctx context.Context, where, data map[string]any) error {
+	tx := m.db(ctx)
+	for q, arg := range where { tx = tx.Where(q, arg) }
+	return tx.Model(new(T)).Updates(data).Error
+}
+
+func (m *BaseModel[T]) UpdateOne(ctx context.Context, where, data map[string]any) (int64, error) {
+	tx := m.db(ctx)
+	for q, arg := range where { tx = tx.Where(q, arg) }
+	res := tx.Model(new(T)).Limit(1).Updates(data)
+	return res.RowsAffected, res.Error
+}
+GOEOF
+  echo "  已生成: $TMP/base_model.go"
+}
+
+fix_rpc() {
+  echo "📦 RPC → callLocalRPC[T]"
+  count=$(grep -rn "\.Post(" service/rpc/ --include="*.go" 2>/dev/null | wc -l | tr -d ' ')
+  if $DRY; then
+    echo "  DRY: 将为 $count RPC 函数提取 callLocalRPC[T]，预估减少 ~$((count * 25)) 行"
+    return
+  fi
+  cat > "$TMP/call_rpc.go" << 'GOEOF'
+package rpc
+
+import (
+	"context" "encoding/json" "strconv"
+	"ticket_center_server/internal/cerror" "ticket_center_server/utils"
+	"git.kugou.net/opensource/kugo/httpclient" "git.kugou.net/opensource/kugo/gerror"
+)
+
+type LocalResponse[T any] struct {
+	ErrCode int    `json:"err_code"`
+	Status  int    `json:"status"`
+	ErrMsg  string `json:"err_msg"`
+	Data    T      `json:"data"`
+}
+
+func callLocalRPC[T any](ctx context.Context, path string, reqBody any) (*T, error) {
+	rpcConfig := utils.Rpc("local")
+	url := rpcConfig.String("url", "http://ticketcenter.kgidc.cn") + path
+	host := rpcConfig.String("host", "")
+	req := httpclient.Post(url)
+	if len(host) > 0 { req = req.SetHost(host) }
+	jsonBytes, _ := json.Marshal(reqBody)
+	req.Body(jsonBytes)
+	req.FillingDefaultServerCommonParams()
+	respStr, err := req.String()
+	if err != nil {
+		utils.LoggerWithCtx(ctx).Errorf("RPC net: curl=%s err=%v", utils.GenCURL(req.GetRequest(), string(jsonBytes)), err)
+		return nil, cerror.RpcNetErr
+	}
+	var resp LocalResponse[T]
+	if err := json.Unmarshal([]byte(respStr), &resp); err != nil {
+		return nil, gerror.NewCode(cerror.RpcServerErr)
+	}
+	if resp.ErrCode != 0 || resp.Status != 1 {
+		return nil, gerror.NewCode(cerror.RpcServerErrCodeErr.SetMsg(strconv.Itoa(resp.ErrCode)+":"+resp.ErrMsg))
+	}
+	return &resp.Data, nil
+}
+GOEOF
+  echo "  已生成: $TMP/call_rpc.go"
+}
+
+fix_di() {
+  echo "📦 DI → 泛型容器"
+  reg=$(grep -rn "func Register" service/biz/ --include="*.go" 2>/dev/null | wc -l | tr -d ' ')
+  initc=$(find service/biz/ -name "*_init.go" 2>/dev/null | wc -l | tr -d ' ')
+  if $DRY; then
+    echo "  DRY: $reg Register + $initc init 文件 → ~$((initc)) 文件删除"
+    return
+  fi
+  cat > "$TMP/di_container.go" << 'GOEOF'
+package di
+
+import "reflect"
+
+var services = map[reflect.Type]any{}
+
+func Get[T any]() T {
+	return services[reflect.TypeOf((*T)(nil)).Elem()].(T)
+}
+
+func Register[T any](impl T) {
+	services[reflect.TypeOf((*T)(nil)).Elem()] = impl
+}
+
+// Register all implementations here:
+// func init() {
+//     Register[IOrder](order.NewOrderImpl())
+//     Register[ITicket](ticket.NewTicketImpl())
+// }
+GOEOF
+  echo "  已生成: $TMP/di_container.go"
+  echo "  手动: 将各 service 的 init() 内容移至此 init()，删除 *_init.go 文件"
+}
+
+case "$PATTERN" in
+  crud)   fix_crud ;;
+  rpc)    fix_rpc ;;
+  di)     fix_di ;;
+  "")
+    echo "Usage: ponytail-fix.sh [--dry-run] --pattern=<crud|rpc|di>"
+    exit 1
+    ;;
+  *) echo "Unknown pattern: $PATTERN"; exit 1 ;;
+esac
+echo ""
+echo "📝 将 $TMP/ 下生成的文件复制到项目目录即可"

package/hooks/ponytail-guard.sh

@@ -0,0 +1,66 @@
+#!/bin/sh
+# ponytail-guard.sh — enforce ponytail rules before build phase
+# Usage: ponytail-guard.sh [--strict|--warn]
+
+set -e
+
+MODE="${1:---warn}"
+PROJECT="${2:-.}"
+HARD=0
+
+_c() { command grep -rn "$1" "$PROJECT/$2" --include="*.go" 2>/dev/null | wc -l | tr -d ' '; }
+
+echo "⚙  Ponytail Guard ($MODE)"
+echo ""
+
+# CRUD
+n=$(_c "func.*Find.*ctx\.Context\|func.*Find.*context\.Context" "models/")
+if [ "$n" -gt 10 ]; then
+  if [ "$MODE" = "--strict" ]; then
+    echo "[HARD STOP] CRUD: $n models 重复 → 必须先提取 BaseModel[T]"; HARD=1
+  else
+    echo "⚠️  CRUD: $n models 重复 (建议 BaseModel[T])"
+  fi
+fi
+
+# RPC
+n=$(_c "httpclient\.Post\|\\.Post(" "service/rpc/")
+if [ "$n" -gt 3 ]; then
+  if [ "$MODE" = "--strict" ]; then
+    echo "[HARD STOP] RPC: $n funcs 同构 → 必须先提取 callLocalRPC[T]"; HARD=1
+  else
+    echo "⚠️  RPC: $n funcs 同构 (建议 callLocalRPC[T])"
+  fi
+fi
+
+# DI
+reg=$(_c "func Register" "service/biz/")
+init=$(find "$PROJECT/service/biz/" -name "*_init.go" 2>/dev/null | wc -l | tr -d ' ')
+if [ "$reg" -gt 5 ] || [ "$init" -gt 5 ]; then
+  if [ "$MODE" = "--strict" ]; then
+    echo "[HARD STOP] DI: $reg Register + $init init → 必须先提取 DI 容器"; HARD=1
+  else
+    echo "⚠️  DI: $reg Register + $init init (建议 DI 容器)"
+  fi
+fi
+
+# Error framework
+gerr=$(ls "$PROJECT/internal/errors/gerror/" 2>/dev/null | wc -l | tr -d ' ')
+gcode=$(ls "$PROJECT/internal/errors/gcode/" 2>/dev/null | wc -l | tr -d ' ')
+total=$((gerr + gcode))
+if [ "$total" -gt 3 ]; then
+  if [ "$MODE" = "--strict" ]; then
+    echo "[HARD STOP] Error: $total files 冗余 → stdlib errors"; HARD=1
+  else
+    echo "⚠️  Error: $total files 冗余 (建议 stdlib errors)"
+  fi
+fi
+
+echo ""
+if [ "$HARD" -eq 1 ]; then
+  echo "🔒 发现阻塞项"
+  echo "  修复: atdc ponytail fix --dry-run (预览)"
+  echo "  修复: atdc ponytail fix (执行)"
+  exit 1
+fi
+echo "✅ Ponytail guard: passed"

package/hooks/ponytail-scan.sh

@@ -0,0 +1,62 @@
+#!/bin/sh
+# ponytail-scan.sh — scan project for backend over-engineering patterns
+# Usage: ponytail-scan.sh [--diff]
+
+set -e
+
+MODE="${1:---full}"
+PROJECT="${2:-.}"
+FAIL=0
+
+_c() { command grep -rn "$1" "$PROJECT/$2" --include="*.go" 2>/dev/null | wc -l | tr -d ' '; }
+_d() { find "$PROJECT/$1" -name "*.go" 2>/dev/null | wc -l | tr -d ' '; }
+
+count_crud() { _c "func.*Find.*ctx\.Context\|func.*Find.*context\.Context" "models/"; }
+count_rpc() { _c "httpclient\.Post\|\\.Post(" "service/rpc/"; }
+count_di() { _c "func Register" "service/biz/"; }
+count_init() { find "$PROJECT/service/biz/" -name "*_init.go" 2>/dev/null | wc -l | tr -d ' '; }
+count_gerror() { ls "$PROJECT/internal/errors/gerror/" 2>/dev/null | wc -l | tr -d ' '; }
+count_gcode() { ls "$PROJECT/internal/errors/gcode/" 2>/dev/null | wc -l | tr -d ' '; }
+count_whitelist() { _c "BuildWhitelistExcludeSet" "service/"; }
+count_contains() { _c "func.*Contains\[" "utils/"; }
+count_time() { _c "TimeToString\|GetLevelTimeFormat" "utils/"; }
+count_phone() { _c "FormatPhoneNumber" "utils/"; }
+count_gencurl() { _c "func.*GenCURL" "utils/"; }
+count_serverip() { _c "getServerIP" "utils/"; }
+count_config() { _c "type Apollo.*Config \[" "service/rtconf/"; }
+count_retry() { _c "retry" "utils/"; }
+
+echo "⚙  atdc Ponytail Scanner"
+echo "  project: $PROJECT"
+echo ""
+
+# P0
+n=$(count_crud)
+if [ "$n" -gt 10 ]; then echo "🔴 [P0] CRUD 模板: $n models → BaseModel[T]"; FAIL=1; fi
+
+n=$(count_rpc)
+if [ "$n" -gt 3 ]; then echo "🔴 [P0] RPC 模板: $n funcs → callLocalRPC[T]"; FAIL=1; fi
+
+# P1
+n=$(count_di); m=$(count_init)
+if [ "$n" -gt 5 ] || [ "$m" -gt 5 ]; then echo "🟡 [P1] DI 样板: $n Register + $m init → DI 容器"; FAIL=1; fi
+
+n=$(( $(count_gerror) + $(count_gcode) ))
+if [ "$n" -gt 3 ]; then echo "🟡 [P1] 错误框架: $n files → stdlib errors"; FAIL=1; fi
+
+n=$(count_whitelist)
+[ "$n" -gt 2 ] && echo "🟡 [P1] 白名单 filter: $n dup → 泛型"
+
+# P2
+n=$(count_contains); [ "$n" -gt 0 ] && echo "🟢 [P2] 自定义 Contains($n) → slices.Contains"
+n=$(count_time);     [ "$n" -gt 0 ] && echo "🟢 [P2] Time 工具($n) → time.Format"
+n=$(count_phone);    [ "$n" -gt 0 ] && echo "🟢 [P2] Phone wrapper → 直调 nyaruka/phonenumbers"
+n=$(count_gencurl);  [ "$n" -gt 0 ] && echo "🟢 [P2] GenCURL → HTTP 库内建"
+n=$(count_serverip); [ "$n" -gt 0 ] && echo "🟢 [P2] getServerIP → net.InterfaceAddrs"
+n=$(count_config);   [ "$n" -gt 5 ] && echo "🟢 [P2] Config type($n) → 合并"
+n=$(count_retry);    [ "$n" -gt 0 ] && echo "🟢 [P2] Custom retry → cenkalti/backoff"
+
+echo ""
+echo "──"
+[ "$FAIL" -eq 0 ] && echo "✅ 无 P0/P1 阻塞项" || echo "🔒 发现阻塞项 — atdc ponytail fix"
+[ "$FAIL" -ne 0 ] && exit 1