@windyroad/voice-tone 0.9.8 → 0.10.0

package/.claude-plugin/plugin.json

@@ -145,5 +145,5 @@
     }
   },
   "name": "wr-voice-tone",
-  "version": "0.9.8"
+  "version": "0.10.0"
 }

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "wr-voice-tone",
-  "version": "0.9.8",
+  "version": "0.10.0",
   "description": "Voice, tone, and external-communications governance",
   "author": {
     "name": "Windy Road Technology",

package/hooks/external-comms-gate.sh

@@ -439,11 +439,6 @@ print(json.dumps({
 " "$reason"
 }
 
-if [ "$BODY_FILE_ERROR" -eq 1 ]; then
-    deny_with_reason "BLOCKED (external-comms gate): body-file could not be read unambiguously from the command checkout. Use one readable UTF-8 --body-file path and review its exact contents before retrying."
-    exit 0
-fi
-
 permit_with_advisory() {
     local msg="$1"
     python3 -c "
@@ -452,6 +447,11 @@ print(json.dumps({'systemMessage': sys.argv[1]}))
 " "$msg"
 }
 
+if [ "$BODY_FILE_ERROR" -eq 1 ]; then
+    permit_with_advisory "Governance evidence unavailable (external-comms gate): body-file could not be read unambiguously from the command checkout. Use one readable UTF-8 --body-file path and review its exact contents before retrying."
+    exit 0
+fi
+
 # ---------- Advisory-only fallback when policy file is absent ----------
 if [ ! -f "$EXTERNAL_COMMS_POLICY_FILE" ]; then
     permit_with_advisory "$EXTERNAL_COMMS_POLICY_FILE not found — $EXTERNAL_COMMS_SUBAGENT_TYPE gate is advisory-only on $SURFACE."
@@ -537,5 +537,5 @@ VERDICT_PREFIX="${EXTERNAL_COMMS_VERDICT_PREFIX:-EXTERNAL_COMMS_${EXTERNAL_COMMS
 COMPLETION_GUIDANCE='On Codex, the calling agent waits for the reviewer to finish, then invokes `interrupt_agent` exactly once on that completed target before retrying; the PostToolUse compatibility hook consumes the completed response and persists its structured verdict, with no transcript parsing or nested codex exec. On Claude Code, the calling agent dispatches the reviewer synchronously (`run_in_background: false`) before retrying; the completion hook does not persist the marker for a background reviewer.'
 REASON=$(printf 'BLOCKED (external-comms gate / %s evaluator): %s draft has not been reviewed by %s. Delegate to %s (subagent_type: '"'"'%s'"'"') with a prompt that starts with the line `SURFACE: %s` and wraps the draft body verbatim inside `<draft>...</draft>` markers (for the changeset-author surface the body is the changeset summary WITHOUT the leading `---` frontmatter block — the gate strips frontmatter before hashing the marker key). The completion hook marks the draft reviewed when the subagent emits %s_VERDICT: PASS — single fire suffices. %s Use %s for an interactive walkthrough. There is no environment-variable override; `BYPASS_RISK_GATE` is unavailable.' \
     "$EXTERNAL_COMMS_EVALUATOR_ID" "$SURFACE" "$EXTERNAL_COMMS_SUBAGENT_TYPE" "$EXTERNAL_COMMS_SUBAGENT_TYPE" "$EXTERNAL_COMMS_SUBAGENT_TYPE" "$SURFACE" "$VERDICT_PREFIX" "$COMPLETION_GUIDANCE" "$EXTERNAL_COMMS_ASSESS_SKILL")
-deny_with_reason "$REASON"
+permit_with_advisory "Governance evidence unavailable; action permitted. $REASON"
 exit 0

package/hooks/lib/gate-helpers.sh

@@ -154,6 +154,9 @@ _HOOK_INPUT=""
 
 _parse_input() {
     _HOOK_INPUT=$(cat)
+    if ! printf '%s' "$_HOOK_INPUT" | python3 -c 'import json,sys; assert isinstance(json.load(sys.stdin),dict)' 2>/dev/null; then
+        _governance_advisory "Hook input could not be parsed."
+    fi
 }
 
 _get_tool_name() {
@@ -327,3 +330,8 @@ _is_doc_file() {
     esac
     return 1
 }
+
+# Mechanical evaluation failures are advisory; never mint approval receipts.
+_governance_advisory() {
+    python3 -c 'import json,sys; print(json.dumps({"systemMessage": "Governance evidence unavailable; action permitted. " + sys.argv[1]}))' "$1" || echo 'Governance evidence unavailable; action permitted.' >&2
+}

package/hooks/lib/review-gate.sh

@@ -7,10 +7,10 @@
 _REVIEW_GATE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 source "$_REVIEW_GATE_DIR/gate-helpers.sh"
 
-# Check review gate marker. Returns 0 if marker is valid (allow), 1 if invalid (deny).
+# Validate review receipt; the public gate below converts unavailable evidence to an advisory.
 # Sets REVIEW_GATE_REASON on failure.
 # Usage: check_review_gate "$SESSION_ID" "style-guide" "docs/STYLE-GUIDE.md"
-check_review_gate() {
+_check_review_receipt() {
   local SESSION_ID="$1"
   local SYSTEM="$2"        # e.g., "a11y", "voice-tone", "style-guide"
   local POLICY_FILE="$3"   # e.g., "docs/STYLE-GUIDE.md"
@@ -82,24 +82,21 @@ store_review_hash() {
   return 0
 }
 
-# Emit fail-closed deny JSON for PreToolUse hooks.
+# Emit an advisory for unverifiable review requirements.
 review_gate_deny() {
-  local REASON="$1"
-  cat <<EOF
-{
-  "hookSpecificOutput": {
-    "hookEventName": "PreToolUse",
-    "permissionDecision": "deny",
-    "permissionDecisionReason": "$REASON"
-  }
-}
-EOF
+    _governance_advisory "$1"
 }
 
-# Emit fail-closed deny JSON for parse failures.
+# Permit parsing failures with an unavailable-evidence advisory.
 review_gate_parse_error() {
   cat <<'EOF'
-{ "hookSpecificOutput": { "hookEventName": "PreToolUse", "permissionDecision": "deny",
-    "permissionDecisionReason": "BLOCKED: Could not parse hook input. Gate is fail-closed." } }
+{ "hookSpecificOutput": { "hookEventName": "PreToolUse", "permissionDecision": "allow",
+    "permissionDecisionReason": "Governance evidence unavailable: could not parse hook input; action permitted." } }
 EOF
 }
+
+check_review_gate() {
+    if _check_review_receipt "$@"; then return 0; fi
+    _governance_advisory "$REVIEW_GATE_REASON"
+    return 0
+}

package/hooks-codex/codex-adapter.sh

@@ -5,8 +5,34 @@ target="$1"
 input="$(cat)"
 tool="$(printf '%s' "$input" | jq -r '.tool_name // empty')"
 
+ADVISORIES=""
+collect_gate_output() {
+  local output="$1" parsed
+  [ -n "$output" ] || return 0
+  if ! parsed="$(printf '%s' "$output" | jq -cs '
+    if any(.[]; .hookSpecificOutput.permissionDecision == "deny")
+    then map(select(.hookSpecificOutput.permissionDecision == "deny"))[0]
+    else {systemMessage: map(.systemMessage // .hookSpecificOutput.permissionDecisionReason // "Governance evidence unavailable; action permitted.") | join("\n")} end' 2>/dev/null)"; then
+    parsed='{"systemMessage":"Governance evidence unavailable: malformed evaluator output; action permitted."}'
+  fi
+  if printf '%s' "$parsed" | jq -e '.hookSpecificOutput.permissionDecision == "deny"' >/dev/null 2>&1; then
+    printf '%s\n' "$parsed"
+    exit 0
+  fi
+  ADVISORIES="$ADVISORIES
+$parsed"
+}
+flush_advisories() {
+  [ -n "$ADVISORIES" ] || return 0
+  printf '%s' "$ADVISORIES" | jq -s '{systemMessage: map(.systemMessage // .hookSpecificOutput.permissionDecisionReason // "Governance evidence unavailable; action permitted.") | join("\n")}'
+}
 run_hook() {
-  printf '%s' "$1" | "$target"
+  local output
+  if ! output="$(printf '%s' "$1" | "$target" 2>/dev/null)"; then
+    collect_gate_output '{"systemMessage":"Governance evaluator unavailable; action permitted. A crashed hook output was discarded."}'
+    return 0
+  fi
+  collect_gate_output "$output"
 }
 
 if [ "$tool" = "apply_patch" ]; then
@@ -16,6 +42,7 @@ if [ "$tool" = "apply_patch" ]; then
       payload="$(printf '%s' "$input" | jq --arg path "$path" '.tool_name = "Edit" | .tool_input.file_path = $path')"
       run_hook "$payload" || exit $?
     done <<< "$paths"
+    flush_advisories
     exit 0
   fi
 fi
@@ -25,3 +52,4 @@ if [ "$tool" = "spawn_agent" ] || [ "$tool" = "Agent" ]; then
 fi
 
 run_hook "$input"
+flush_advisories

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/voice-tone",
-  "version": "0.9.8",
+  "version": "0.10.0",
   "description": "Voice and tone enforcement for user-facing copy",
   "bin": {
     "windyroad-voice-tone": "./bin/install.mjs"