@windyroad/jtbd 0.14.12 → 0.15.0

package/.claude-plugin/plugin.json

@@ -90,5 +90,5 @@
     }
   },
   "name": "wr-jtbd",
-  "version": "0.14.12"
+  "version": "0.15.0"
 }

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "wr-jtbd",
-  "version": "0.14.12",
+  "version": "0.15.0",
   "description": "Jobs-to-be-done governance for product changes",
   "author": {
     "name": "Windy Road Technology",

package/hooks/lib/gate-helpers.sh

@@ -154,6 +154,9 @@ _HOOK_INPUT=""
 
 _parse_input() {
     _HOOK_INPUT=$(cat)
+    if ! printf '%s' "$_HOOK_INPUT" | python3 -c 'import json,sys; assert isinstance(json.load(sys.stdin),dict)' 2>/dev/null; then
+        _governance_advisory "Hook input could not be parsed."
+    fi
 }
 
 _get_tool_name() {
@@ -327,3 +330,8 @@ _is_doc_file() {
     esac
     return 1
 }
+
+# Mechanical evaluation failures are advisory; never mint approval receipts.
+_governance_advisory() {
+    python3 -c 'import json,sys; print(json.dumps({"systemMessage": "Governance evidence unavailable; action permitted. " + sys.argv[1]}))' "$1" || echo 'Governance evidence unavailable; action permitted.' >&2
+}

package/hooks/lib/review-gate.sh

@@ -7,10 +7,10 @@
 _REVIEW_GATE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 source "$_REVIEW_GATE_DIR/gate-helpers.sh"
 
-# Check review gate marker. Returns 0 if marker is valid (allow), 1 if invalid (deny).
+# Validate review receipt; the public gate below converts unavailable evidence to an advisory.
 # Sets REVIEW_GATE_REASON on failure.
 # Usage: check_review_gate "$SESSION_ID" "style-guide" "docs/STYLE-GUIDE.md"
-check_review_gate() {
+_check_review_receipt() {
   local SESSION_ID="$1"
   local SYSTEM="$2"        # e.g., "a11y", "voice-tone", "style-guide"
   local POLICY_FILE="$3"   # e.g., "docs/STYLE-GUIDE.md"
@@ -82,24 +82,21 @@ store_review_hash() {
   return 0
 }
 
-# Emit fail-closed deny JSON for PreToolUse hooks.
+# Emit an advisory for unverifiable review requirements.
 review_gate_deny() {
-  local REASON="$1"
-  cat <<EOF
-{
-  "hookSpecificOutput": {
-    "hookEventName": "PreToolUse",
-    "permissionDecision": "deny",
-    "permissionDecisionReason": "$REASON"
-  }
-}
-EOF
+    _governance_advisory "$1"
 }
 
-# Emit fail-closed deny JSON for parse failures.
+# Permit parsing failures with an unavailable-evidence advisory.
 review_gate_parse_error() {
   cat <<'EOF'
-{ "hookSpecificOutput": { "hookEventName": "PreToolUse", "permissionDecision": "deny",
-    "permissionDecisionReason": "BLOCKED: Could not parse hook input. Gate is fail-closed." } }
+{ "hookSpecificOutput": { "hookEventName": "PreToolUse", "permissionDecision": "allow",
+    "permissionDecisionReason": "Governance evidence unavailable: could not parse hook input; action permitted." } }
 EOF
 }
+
+check_review_gate() {
+    if _check_review_receipt "$@"; then return 0; fi
+    _governance_advisory "$REVIEW_GATE_REASON"
+    return 0
+}

package/hooks-codex/codex-adapter.sh

@@ -5,8 +5,34 @@ target="$1"
 input="$(cat)"
 tool="$(printf '%s' "$input" | jq -r '.tool_name // empty')"
 
+ADVISORIES=""
+collect_gate_output() {
+  local output="$1" parsed
+  [ -n "$output" ] || return 0
+  if ! parsed="$(printf '%s' "$output" | jq -cs '
+    if any(.[]; .hookSpecificOutput.permissionDecision == "deny")
+    then map(select(.hookSpecificOutput.permissionDecision == "deny"))[0]
+    else {systemMessage: map(.systemMessage // .hookSpecificOutput.permissionDecisionReason // "Governance evidence unavailable; action permitted.") | join("\n")} end' 2>/dev/null)"; then
+    parsed='{"systemMessage":"Governance evidence unavailable: malformed evaluator output; action permitted."}'
+  fi
+  if printf '%s' "$parsed" | jq -e '.hookSpecificOutput.permissionDecision == "deny"' >/dev/null 2>&1; then
+    printf '%s\n' "$parsed"
+    exit 0
+  fi
+  ADVISORIES="$ADVISORIES
+$parsed"
+}
+flush_advisories() {
+  [ -n "$ADVISORIES" ] || return 0
+  printf '%s' "$ADVISORIES" | jq -s '{systemMessage: map(.systemMessage // .hookSpecificOutput.permissionDecisionReason // "Governance evidence unavailable; action permitted.") | join("\n")}'
+}
 run_hook() {
-  printf '%s' "$1" | "$target"
+  local output
+  if ! output="$(printf '%s' "$1" | "$target" 2>/dev/null)"; then
+    collect_gate_output '{"systemMessage":"Governance evaluator unavailable; action permitted. A crashed hook output was discarded."}'
+    return 0
+  fi
+  collect_gate_output "$output"
 }
 
 if [ "$tool" = "apply_patch" ]; then
@@ -16,6 +42,7 @@ if [ "$tool" = "apply_patch" ]; then
       payload="$(printf '%s' "$input" | jq --arg path "$path" '.tool_name = "Edit" | .tool_input.file_path = $path')"
       run_hook "$payload" || exit $?
     done <<< "$paths"
+    flush_advisories
     exit 0
   fi
 fi
@@ -25,3 +52,4 @@ if [ "$tool" = "spawn_agent" ] || [ "$tool" = "Agent" ]; then
 fi
 
 run_hook "$input"
+flush_advisories

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/jtbd",
-  "version": "0.14.12",
+  "version": "0.15.0",
   "description": "Jobs-to-be-done enforcement for UI changes",
   "bin": {
     "windyroad-jtbd": "./bin/install.mjs"