add-coder 0.1.15 → 0.2.0

package/README.en.md

@@ -67,7 +67,15 @@ Hooks are not "notification push" — they are the **IDE runtime interception la
 | PreCompact | Forces retention of critical document paths during cross-session context compression |
 | PromptSubmit | Injects ADD vocabulary triggers, ensuring zero-latency LLM response to commands like "acceptance" and "gateway" |
 
-Each IDE (Claude/Qoder/VS Code) has its own hook implementation, but the **governance logic is unified** — the architecture is consistent, only the adapter layer differs.
+Each IDE（Claude Code / Qoder CN / VS Code Copilot / Trae / Codex）has its own hook implementation, but the **governance logic is unified** — the architecture is consistent, only the adapter layer differs.
+
+| IDE | Governance Doc | Events Covered | Hook Config |
+|---|---|---|---|
+| Claude Code | [ADD-governance-claude-code.md](./ADD-governance-claude-code.md) | 14/17 | `.claude/hooks/*.sh` |
+| Qoder CN | [ADD-governance-qoder-cn.md](./ADD-governance-qoder-cn.md) | 10/17 | `.qoder/hooks/*.sh` |
+| VS Code Copilot | [ADD-governance-vscode-copilot.md](./ADD-governance-vscode-copilot.md) | 10/17 | `.github/hooks/*.json` → `.vscode/hooks/*.sh` |
+| Trae | [ADD-governance-trae.md](./ADD-governance-trae.md) | 6/17 | `hooks.json` → `.trae/hooks/*.sh` |
+| Codex | [ADD-governance-codex.md](./ADD-governance-codex.md) | 0 native / 14 (via Claude import) | `.codex/hooks.json` |
 
 ---
 
@@ -116,7 +124,7 @@ npx add-coder init
 
 | Option | Description |
 |--------|-------------|
-| `--adapter <type>` | Target IDE: claude / qoder / vscode / auto (default) |
+| `--adapter <type>` | Target IDE: claude / qoder / vscode / trae / codex / auto (default) |
 | `--config <path>` | Specify config file |
 | `--yes` | Skip interactions, create new files only |
 | `--force` | Overwrite existing files |
@@ -127,9 +135,11 @@ npx add-coder init
 | Directory | Content |
 |-----------|---------|
 | `.add/` | ADD shared core (skills, agents, docs, scripts, rules, etc.) |
-| `.claude/` | Claude Code adapter (hooks, settings.json) |
+| `.claude/` | Claude Code adapter (hooks, settings.json, mcp.json) |
 | `.qoder/` | Qoder adapter (hooks, settings.json, mcp.json) |
 | `.vscode/` | VS Code adapter (settings.json, tasks.json) |
+| `.trae/` | Trae adapter (hooks.json, settings.json) |
+| `.codex/` | Codex adapter (hooks.json, settings.json) |
 
 ## MCP Audit Toolchain
 

package/README.md

@@ -58,16 +58,17 @@ AI 对话的致命缺陷：上次讨论的架构决策、已修复的 Bug、达
 
 ### ⑤ 多 IDE 的 Hook 即治理层
 
-hook 不是「通知推送」，而是 **IDE 运行时拦截层**：
+hook 不是「通知推送」，而是 **ADD 范式在 IDE agent 生命周期中的 17 个确定性治理卡位**。每个 IDE（Claude Code / Qoder CN / VS Code Copilot / Trae / Codex）有各自的 hook 机制，但治理逻辑统一——架构一致，适配层不同。
 
-| Hook 类型 | 作用 |
-|----------|------|
-| PreToolUse | 工具调用前校验白名单、注入上下文、DPS 条件检查 |
-| PostToolUse | 自动审计记录、Plan 同步检测、格式守卫 |
-| PreCompact | 跨轮上下文压缩时强制保留关键文档路径 |
-| PromptSubmit | 注入 ADD 词汇表触发词，确保 LLM 对「验收」「门禁」等命令零延迟响应 |
+| IDE | 治理文档 | 覆盖事件 | Hook 配置 |
+|---|---|---|---|
+| Claude Code | [ADD-governance-claude-code.md](./ADD-governance-claude-code.md) | 14/17 | `.claude/hooks/*.sh` |
+| Qoder CN | [ADD-governance-qoder-cn.md](./ADD-governance-qoder-cn.md) | 10/17 | `.qoder/hooks/*.sh` |
+| VS Code Copilot | [ADD-governance-vscode-copilot.md](./ADD-governance-vscode-copilot.md) | 10/17 | `.github/hooks/*.json` → `.vscode/hooks/*.sh` |
+| Trae | [ADD-governance-trae.md](./ADD-governance-trae.md) | 6/17 | `hooks.json` → `.trae/hooks/*.sh` |
+| Codex | [ADD-governance-codex.md](./ADD-governance-codex.md) | 0 (原生) / 14 (导入 Claude) | `.codex/hooks.json` |
 
-每个 IDE（Claude/Qoder/VS Code）有各自的 hook 实现，但**治理逻辑统一** — 架构一致，适配层不同。
+> 实施 Plan: [add-coder-hook-full-alignment-plan-v1](./.qoder/plans/2026-07/17/add-coder-hook-full-alignment-plan-v1.md) | 触发源: [GitHub Issue #6](https://github.com/xiaomingming92/add-coder/issues/6)
 
 ---
 

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/cli/index.ts
-import { readFileSync as readFileSync8 } from "fs";
+import { readFileSync as readFileSync5 } from "fs";
 import { Command } from "commander";
 
 // src/caijuehub/strategies/detect.strategy.ts
@@ -51,7 +51,7 @@ import { join as join2 } from "path";
 
 // src/config/schema.ts
 import { z } from "zod";
-var AdapterEnum = z.enum(["claude", "qoder", "vscode"]);
+var AdapterEnum = z.enum(["claude", "qoder", "vscode", "trae", "codex"]);
 var AddCoderConfigSchema = z.object({
   projectName: z.string().min(1, "\u9879\u76EE\u540D\u4E0D\u80FD\u4E3A\u7A7A"),
   projectRoot: z.string().default(""),
@@ -230,6 +230,9 @@ function renderCore(config, dryRun) {
         const rendered = render(content, config);
         const targetRel = join4(CORE_TARGET, relative(CORE_DIR, full));
         files.set(targetRel, rendered);
+        if (relative(CORE_DIR, full).startsWith("docs/")) {
+          files.set(name, rendered);
+        }
       }
     }
   }
@@ -239,107 +242,70 @@ function renderCore(config, dryRun) {
   }
   return files;
 }
-
-// src/adapters/claude/renderer.ts
-import { readFileSync as readFileSync3, readdirSync as readdirSync2, statSync as statSync2 } from "fs";
-import { join as join5, relative as relative2, dirname as dirname3 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-var __filename2 = fileURLToPath2(import.meta.url);
-var __dirname2 = dirname3(__filename2);
-var TEMPLATES_ROOT2 = join5(__dirname2, "../templates");
-var ADAPTER_DIR = join5(TEMPLATES_ROOT2, "adapters", "claude");
-var TARGET_MAGIC_PATH = ".claude";
-function renderAdapter(config, targetDir, dryRun) {
+function renderAdapterBase(config, magicPath, githubHooksToRoot, dryRun) {
   const files = /* @__PURE__ */ new Map();
-  function walk(dir, base) {
-    for (const name of readdirSync2(dir)) {
-      const full = join5(dir, name);
-      if (statSync2(full).isDirectory()) {
-        walk(full, join5(base, name));
+  const adapterDir = join4(TEMPLATES_ROOT, "adapters", magicPath.replace(".", ""));
+  const coreHooksLib = join4(TEMPLATES_ROOT, "core", "hooks", "lib");
+  function walk(dir, base, targetPrefix) {
+    for (const name of readdirSync(dir)) {
+      const full = join4(dir, name);
+      if (statSync(full).isDirectory()) {
+        walk(full, join4(base, name), targetPrefix);
       } else {
-        const content = readFileSync3(full, "utf-8");
+        const content = readFileSync2(full, "utf-8");
         const rendered = render(content, config);
-        const targetRel = join5(TARGET_MAGIC_PATH, relative2(ADAPTER_DIR, full));
+        let targetRel;
+        if (targetPrefix) {
+          targetRel = join4(targetPrefix, relative(dir, full));
+        } else if (githubHooksToRoot && relative(adapterDir, full).startsWith(".github/")) {
+          targetRel = relative(adapterDir, full);
+        } else {
+          targetRel = join4(magicPath, relative(adapterDir, full));
+        }
         files.set(targetRel, rendered);
       }
     }
   }
-  walk(ADAPTER_DIR, "");
+  walk(adapterDir, "");
+  walk(coreHooksLib, "", join4(magicPath, "hooks", "lib"));
   if (dryRun) {
-    console.log(`[dry-run] Claude adapter: ${files.size} files`);
+    console.log(`[dry-run] ${magicPath} adapter: ${files.size} files`);
   }
   return files;
 }
 
+// src/adapters/claude/renderer.ts
+function renderAdapter(config, targetDir, dryRun, magicDir) {
+  return renderAdapterBase(config, magicDir, magicDir === ".vscode", dryRun);
+}
+
 // src/adapters/qoder/renderer.ts
-import { readFileSync as readFileSync4, readdirSync as readdirSync3, statSync as statSync3 } from "fs";
-import { join as join6, relative as relative3, dirname as dirname4 } from "path";
-import { fileURLToPath as fileURLToPath3 } from "url";
-var __filename3 = fileURLToPath3(import.meta.url);
-var __dirname3 = dirname4(__filename3);
-var TEMPLATES_ROOT3 = join6(__dirname3, "../templates");
-var ADAPTER_DIR2 = join6(TEMPLATES_ROOT3, "adapters", "qoder");
-var TARGET_MAGIC_PATH2 = ".qoder";
-function renderAdapter2(config, targetDir, dryRun) {
-  const files = /* @__PURE__ */ new Map();
-  function walk(dir, base) {
-    for (const name of readdirSync3(dir)) {
-      const full = join6(dir, name);
-      if (statSync3(full).isDirectory()) {
-        walk(full, join6(base, name));
-      } else {
-        const content = readFileSync4(full, "utf-8");
-        const rendered = render(content, config);
-        const targetRel = join6(TARGET_MAGIC_PATH2, relative3(ADAPTER_DIR2, full));
-        files.set(targetRel, rendered);
-      }
-    }
-  }
-  walk(ADAPTER_DIR2, "");
-  if (dryRun) {
-    console.log(`[dry-run] Qoder adapter: ${files.size} files`);
-  }
-  return files;
+function renderAdapter2(config, targetDir, dryRun, magicDir) {
+  return renderAdapterBase(config, magicDir, magicDir === ".vscode", dryRun);
 }
 
 // src/adapters/vscode/renderer.ts
-import { readFileSync as readFileSync5, readdirSync as readdirSync4, statSync as statSync4 } from "fs";
-import { join as join7, relative as relative4, dirname as dirname5 } from "path";
-import { fileURLToPath as fileURLToPath4 } from "url";
-var __filename4 = fileURLToPath4(import.meta.url);
-var __dirname4 = dirname5(__filename4);
-var TEMPLATES_ROOT4 = join7(__dirname4, "../templates");
-var ADAPTER_DIR3 = join7(TEMPLATES_ROOT4, "adapters", "vscode");
-var TARGET_MAGIC_PATH3 = ".vscode";
-function renderAdapter3(config, targetDir, dryRun) {
-  const files = /* @__PURE__ */ new Map();
-  function walk(dir, base) {
-    for (const name of readdirSync4(dir)) {
-      const full = join7(dir, name);
-      if (statSync4(full).isDirectory()) {
-        walk(full, join7(base, name));
-      } else {
-        const content = readFileSync5(full, "utf-8");
-        const rendered = render(content, config);
-        const targetRel = join7(TARGET_MAGIC_PATH3, relative4(ADAPTER_DIR3, full));
-        files.set(targetRel, rendered);
-      }
-    }
-  }
-  walk(ADAPTER_DIR3, "");
-  if (dryRun) {
-    console.log(`[dry-run] VS Code adapter: ${files.size} files`);
-  }
-  return files;
+function renderAdapter3(config, targetDir, dryRun, magicDir) {
+  return renderAdapterBase(config, magicDir, magicDir === ".vscode", dryRun);
+}
+
+// src/adapters/trae/renderer.ts
+function renderAdapter4(config, targetDir, dryRun, magicDir) {
+  return renderAdapterBase(config, magicDir, magicDir === ".vscode", dryRun);
+}
+
+// src/adapters/codex/renderer.ts
+function renderAdapter5(config, targetDir, dryRun, magicDir) {
+  return renderAdapterBase(config, magicDir, magicDir === ".vscode", dryRun);
 }
 
 // src/cli/prisma-injector.ts
-import { resolve as resolve3, dirname as dirname6 } from "path";
-import { fileURLToPath as fileURLToPath5 } from "url";
+import { resolve as resolve3, dirname as dirname3 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/caijuehub/strategies/prisma.strategy.ts
 import { spawnSync } from "child_process";
-import { copyFileSync, existsSync as existsSync5, readFileSync as readFileSync6, unlinkSync, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2 } from "fs";
+import { copyFileSync, existsSync as existsSync5, readFileSync as readFileSync3, unlinkSync, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2 } from "fs";
 import { resolve as resolve2 } from "path";
 var PRISMA_CONFIG = {
   onMissing: "ask",
@@ -419,10 +385,10 @@ function postInitSetup(projectRoot, schemaPath, addPrismaTemplate, destPath) {
   const envPath = resolve2(projectRoot, ".env");
   const devEnvPath = resolve2(projectRoot, ".env.development");
   if (existsSync5(envPath)) {
-    const envContent = readFileSync6(envPath, "utf-8");
+    const envContent = readFileSync3(envPath, "utf-8");
     const dbUrl = envContent.match(/DATABASE_URL=.*/);
     if (dbUrl) {
-      const existing = existsSync5(devEnvPath) ? readFileSync6(devEnvPath, "utf-8") : "";
+      const existing = existsSync5(devEnvPath) ? readFileSync3(devEnvPath, "utf-8") : "";
       if (!existing.includes("DATABASE_URL=")) {
         writeFileSync2(devEnvPath, `${existing}${existing ? "\n" : ""}${dbUrl[0]}
 `, "utf-8");
@@ -476,8 +442,8 @@ async function injectPrisma(projectRoot, addPrismaTemplate, options = {}) {
         console.log("\u8986\u76D6");
       } else if (choice === "d") {
         copyFileSync(destPath, destPath + ".bak");
-        console.log("=== \u5F53\u524D\uFF08\u5DF2\u5907\u4EFD\uFF09===\n" + readFileSync6(destPath, "utf-8"));
-        console.log("=== \u6A21\u677F ===\n" + readFileSync6(addPrismaTemplate, "utf-8"));
+        console.log("=== \u5F53\u524D\uFF08\u5DF2\u5907\u4EFD\uFF09===\n" + readFileSync3(destPath, "utf-8"));
+        console.log("=== \u6A21\u677F ===\n" + readFileSync3(addPrismaTemplate, "utf-8"));
         if (await ask("\u786E\u8BA4\u8986\u76D6\uFF1F[y/N] ") !== "y") {
           console.log("\u5DF2\u8DF3\u8FC7");
           return true;
@@ -524,24 +490,26 @@ async function injectPrisma(projectRoot, addPrismaTemplate, options = {}) {
 }
 
 // src/cli/prisma-injector.ts
-var __filename5 = fileURLToPath5(import.meta.url);
-var __dirname5 = dirname6(__filename5);
-var ADD_PRISMA_TEMPLATE = resolve3(__dirname5, "../templates/core/prisma/add.prisma");
+var __filename2 = fileURLToPath2(import.meta.url);
+var __dirname2 = dirname3(__filename2);
+var ADD_PRISMA_TEMPLATE = resolve3(__dirname2, "../templates/core/prisma/add.prisma");
 async function injectPrisma2(projectRoot, options = {}) {
   return injectPrisma(projectRoot, ADD_PRISMA_TEMPLATE, options);
 }
 
 // src/cli/commands/init.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync3, existsSync as existsSync6, mkdirSync as mkdirSync3, copyFileSync as copyFileSync2, readdirSync as readdirSync5 } from "fs";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, existsSync as existsSync6, mkdirSync as mkdirSync3, copyFileSync as copyFileSync2, readdirSync as readdirSync2 } from "fs";
 import { resolve as resolve4 } from "path";
 import { spawnSync as spawnSync2 } from "child_process";
 import { createConnection } from "net";
 var ADAPTER_RENDERERS = {
   claude: renderAdapter,
   qoder: renderAdapter2,
-  vscode: renderAdapter3
+  vscode: renderAdapter3,
+  trae: renderAdapter4,
+  codex: renderAdapter5
 };
-var MAGIC_DIR_MAP = { claude: ".claude", qoder: ".qoder", vscode: ".vscode" };
+var MAGIC_DIR_MAP = { claude: ".claude", qoder: ".qoder", vscode: ".vscode", trae: ".trae", codex: ".codex" };
 async function resolveAdapter(projectRoot, specified) {
   if (specified) {
     if (!MAGIC_DIR_MAP[specified]) throw new Error(`\u672A\u77E5 adapter: ${specified}`);
@@ -712,7 +680,7 @@ function injectDbExportScript(projectRoot, dryRun) {
     console.log("[dry-run] \u5C06\u6CE8\u5165 db:export");
     return;
   }
-  const pkg = JSON.parse(readFileSync7(pkgPath, "utf-8"));
+  const pkg = JSON.parse(readFileSync4(pkgPath, "utf-8"));
   if (!pkg.scripts) pkg.scripts = {};
   if (!pkg.scripts["db:export"]) {
     pkg.scripts["db:export"] = "npx tsx scripts/export-db.ts";
@@ -736,7 +704,7 @@ async function initCommand(options) {
   }
   if (db.engine === "postgresql" && db.container && db.container !== "manual") {
     if (!db.reuseExisting) {
-      const composeName = db.container === "podman" ? "podman-compose.yml" : "docker-compose.yml";
+      const composeName = db.container === "podman" ? "podman-compose.add.yml" : "docker-compose.add.yml";
       const composePath = resolve4(projectRoot, composeName);
       if (!options.dryRun && (!existsSync6(composePath) || options.force)) {
         writeFileSync3(composePath, composeContent(config.projectName || "add-project"), "utf-8");
@@ -745,7 +713,7 @@ async function initCommand(options) {
     }
     const devEnvPath = resolve4(projectRoot, ".env.development");
     if (!options.dryRun && existsSync6(devEnvPath)) {
-      const existing = readFileSync7(devEnvPath, "utf-8");
+      const existing = readFileSync4(devEnvPath, "utf-8");
       if (!/^DATABASE_USER=/m.test(existing)) {
         writeFileSync3(devEnvPath, existing + `
 DATABASE_USER=${db.user || "admin"}
@@ -767,14 +735,20 @@ PROJECT_NAME=${config.projectName || "add-project"}
       if (!allFiles.has(targetPath)) allFiles.set(targetPath, content);
     }
   }
-  for (const adapter of resolveAdapters2(target)) {
+  const resolved = resolveAdapters2(target);
+  for (const adapter of resolved) {
     const renderFn = ADAPTER_RENDERERS[adapter];
     if (renderFn) {
-      const adapterFiles = renderFn(config, projectRoot, !!options.dryRun);
+      const adapterFiles = renderFn(config, projectRoot, !!options.dryRun, magicDir);
       for (const [p, c] of adapterFiles) allFiles.set(p, c);
       console.log(`${adapter} adapter: ${adapterFiles.size} \u6587\u4EF6`);
     }
   }
+  if (resolved.includes("vscode") || resolved.includes("trae") || resolved.includes("codex")) {
+    const claudeFiles = renderAdapter(config, projectRoot, !!options.dryRun, ".claude");
+    for (const [p, c] of claudeFiles) allFiles.set(p, c);
+    console.log(`claude adapter (via Agent Host): ${claudeFiles.size} \u6587\u4EF6`);
+  }
   const result = await writeFiles2(projectRoot, allFiles, { force: options.force, dryRun: options.dryRun });
   if (db.engine === "postgresql" && db.container && db.container !== "manual") {
     if (!options.dryRun) {
@@ -822,7 +796,7 @@ PROJECT_NAME=${config.projectName || "add-project"}
       const destDir = resolve4(docsBase, d);
       if (!existsSync6(destDir)) mkdirSync3(destDir, { recursive: true });
       if (!existsSync6(srcDir)) continue;
-      for (const f of readdirSync5(srcDir)) {
+      for (const f of readdirSync2(srcDir)) {
         const src = resolve4(srcDir, f);
         const dest = resolve4(destDir, f);
         if (existsSync6(dest)) continue;
@@ -837,7 +811,7 @@ PROJECT_NAME=${config.projectName || "add-project"}
 \u5B8C\u6210: \u65B0\u5EFA ${result.created}, \u8DF3\u8FC7 ${result.skipped}, \u8986\u76D6 ${result.overwritten}`);
   if (!options.dryRun) {
     if (db.engine === "sqlite") console.log("\u6570\u636E\u5907\u4EFD: npm run db:export \u2192 data/exports/");
-    const pkg = JSON.parse(readFileSync7(resolve4(import.meta.dirname, "../package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync4(resolve4(import.meta.dirname, "../package.json"), "utf-8"));
     const peerNames = Object.keys(pkg.peerDependencies || {});
     if (peerNames.length > 0) {
       console.log(`
@@ -902,7 +876,7 @@ async function statusCommand() {
 
 // src/cli/index.ts
 var { version } = JSON.parse(
-  readFileSync8(new URL("../package.json", import.meta.url), "utf-8")
+  readFileSync5(new URL("../package.json", import.meta.url), "utf-8")
 );
 var program = new Command();
 program.name("add-coder").description("\u521D\u59CB\u5316 ADD \u8303\u5F0F\u5DE5\u4F5C\u6D41\u6A21\u677F").version(version);

package/package.json

@@ -1,8 +1,12 @@
 {
   "name": "add-coder",
-  "version": "0.1.15",
+  "version": "0.2.0",
   "private": false,
   "description": "[codein2027](https://github.com/xiaomingming92/codein2027) 快速构建 ADD 编程范式的完整脚手架——AI 代码治理的落地方案。以「审计即基础设施」为核心，彻底打破编程过程黑盒与跨轮失忆，让编程范式进化为可审计、可追溯、可收敛的新时代。npx 即用，人人可体验。",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/xiaomingming92/add-coder.git"
+  },
   "type": "module",
   "bin": {
     "add-coder": "bin/add-coder.js"

package/templates/adapters/claude/hooks/doc-format-guard.sh

@@ -1,17 +1,172 @@
 #!/bin/bash
-# doc-format-guard.sh — 文档格式守卫（Claude Code 适配）
+# doc-format-guard.sh — schema.json 驱动的 ADD 文档格式守卫
 set -euo pipefail
 
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-SHARED_LIB="$HOOK_DIR/../../shared/hooks-lib/common.sh"
-[ -f "$SHARED_LIB" ] && source "$SHARED_LIB"
+input=$(cat)
 
-input=$(parse_input)
+# DEBUG: dump stdin for investigation
+mkdir -p .qoder/debug-dump
+echo "=== $(date) ===" >> .qoder/debug-dump/stdin.log
+echo "file_path: $(echo "$input" | jq -r '.tool_input.file_path // "EMPTY"')" >> .qoder/debug-dump/stdin.log
+echo "has_file_content: $(echo "$input" | jq 'has("tool_input") and (.tool_input | has("file_content"))')" >> .qoder/debug-dump/stdin.log
+echo "has_replacements: $(echo "$input" | jq 'has("tool_input") and (.tool_input | has("replacements"))')" >> .qoder/debug-dump/stdin.log
+echo "top_keys: $(echo "$input" | jq -r 'keys | join(", ")')" >> .qoder/debug-dump/stdin.log
+echo "tool_input_keys: $(echo "$input" | jq -r '.tool_input | keys | join(", ") // "NO_TOOL_INPUT"')" >> .qoder/debug-dump/stdin.log
+echo "=== DONE ===" >> .qoder/debug-dump/stdin.log
 file_path=$(echo "$input" | jq -r '.tool_input.file_path // empty')
+# L17: 非文件工具事件（空 stdin）→ 不拦截（由 matcher 层过滤）
 [ -z "$file_path" ] && exit 0
 
-# 检查 ADD 文档格式
-if echo "$file_path" | grep -qE '\.qoder/(specs|plans|reviews)/.*\.md$'; then
-  echo "[ADD DocFormatGuard] 检测到 ADD 文档变更，请确保格式符合模板规范。"
+if ! echo "$file_path" | grep -qE '\.qoder/(plans|specs)/'; then
+  exit 0
 fi
-exit 0
+
+CONTENT=$(echo "$input" | jq -r '
+  if .tool_input.file_content then .tool_input.file_content
+  elif .tool_input.content then .tool_input.content
+  elif .tool_input.replacements then .tool_input.replacements[0].new_text
+  else "" end')
+# L24: PostToolUse 不可阻断（仅反馈），PreToolUse exit 2 + ask 可拦截
+# L24: 文件在 .qoder/(plans|specs)/ 下但 Write 工具未传 content → 无法校验，阻断
+if [ -z "$CONTENT" ]; then
+  echo "⛔ 拒绝：Write 工具未传 file_content，无法校验手写文档格式" >&2
+  echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"Write 工具未传 file_content，无法校验手写文档。请用 SearchReplace 改写已有文件，或用 Write 工具重试。"}}'
+  exit 2
+fi
+
+PROJECT_DIR="${QODER_PROJECT_DIR:-${QODERCN_PROJECT_DIR:-$PWD}}"
+TEMPLATES_DIR="$PROJECT_DIR/.qoder/templates"
+
+# 通过 filename 匹配模板名
+TEMPLATE_NAME=""
+for tmpl in "$TEMPLATES_DIR"/*.md; do
+  base=$(basename "$tmpl")
+  if echo "$file_path" | grep -q "$base"; then
+    TEMPLATE_NAME="$base"
+    break
+  fi
+done
+
+# 退一步：根据文件内容特征猜测模板类型
+if [ -z "$TEMPLATE_NAME" ]; then
+  if echo "$CONTENT" | grep -q "## 四、Handoff"; then
+    TEMPLATE_NAME="simple-standard-plan-template.md"
+  elif echo "$CONTENT" | grep -q "## PLAN 元信息"; then
+    TEMPLATE_NAME="standard-plan-template.md"
+  elif echo "$CONTENT" | grep -q "## Review 元信息"; then
+    if echo "$CONTENT" | grep -q "运行时验证"; then
+      TEMPLATE_NAME="review-runtime-template.md"
+    elif echo "$CONTENT" | grep -q "跨仓库格式契约"; then
+      TEMPLATE_NAME="review-implementation-template.md"
+    else
+      TEMPLATE_NAME="review-template.md"
+    fi
+  elif echo "$CONTENT" | grep -q "## Why"; then
+    TEMPLATE_NAME="spec-template.md"
+  elif echo "$CONTENT" | grep -q "## Preconditions"; then
+    TEMPLATE_NAME="tasks-template.md"
+  elif echo "$CONTENT" | grep -q "审计链（证据→devlog→checklist）"; then
+    TEMPLATE_NAME="checklist-template.md"
+  else
+    case "$file_path" in
+      *handoff*)
+        # ★ 按内容特征区分单/多轮 handoff，不依赖文件名
+        if echo "$CONTENT" | grep -qF "## 全局元信息"; then
+          TEMPLATE_NAME="handoff-multi-round-template.md"
+        elif echo "$CONTENT" | grep -qF "## 1. 交接前状态"; then
+          TEMPLATE_NAME="handoff-single-round-template.md"
+        else
+          echo "⛔ handoff 文件内容无法识别模板类型（缺 '## 全局元信息' 或 '## 1. 交接前状态'），拒绝写入" >&2
+          echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"handoff 内容不符合 single/multi 模板规范"}}'
+          exit 2
+        fi
+        ;;
+      *plan*)            TEMPLATE_NAME="standard-plan-template.md" ;;
+      *add-route*heavy*) TEMPLATE_NAME="add-route-template-heavyweight.md" ;;
+      *add-route*)       TEMPLATE_NAME="add-route-template.md" ;;
+      *tasks*)           TEMPLATE_NAME="tasks-template.md" ;;
+      *spec*)            TEMPLATE_NAME="spec-template.md" ;;
+      *checklist*)       TEMPLATE_NAME="checklist-template.md" ;;
+      *report*runtime*)  TEMPLATE_NAME="runtime-report-template.md" ;;
+      *report*)          TEMPLATE_NAME="report-template.md" ;;
+      *fix-verif*)       TEMPLATE_NAME="fix-verification-template.md" ;;
+      *) 
+        # 增量修订识别：包含 ~~删除线~~ / → 新增标记 / [修订日期] 任意一个 → 视为增量更新，放行
+        if echo "$CONTENT" | grep -qE '~~.+~~|→|\[[0-9]{4}-[0-9]{2}-[0-9]{2}\s+修订'; then
+          echo "[doc-format-guard] 检测到增量修订格式，跳过完整章节校验" >&2
+          exit 0
+        fi
+        echo "⛔ 拒绝：无法识别文档类型 (file_path: $file_path)，缺少模板匹配规则" >&2
+        echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"无法识别 ADD 文档类型，请联系管理员更新 doc-format-guard.sh"}}'
+        exit 2
+        ;;
+    esac
+  fi
+fi
+
+SCHEMA_FILE="$TEMPLATES_DIR/$(echo "${TEMPLATE_NAME%.md}" | sed 's/-template$//').schema.json"
+# L84: schema 文件不存在 → 无校验规则，阻断（不允许无规则放行）
+if [ ! -f "$SCHEMA_FILE" ]; then
+  echo "⛔ 阻断：模板 ${TEMPLATE_NAME} 缺少对应的 .schema.json 校验规则" >&2
+  echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"缺少 .schema.json 校验规则文件，禁止无规则放行"}}'
+  exit 2
+fi
+
+# SearchReplace 只传 patch（replacements[].new_text），不传全文件 → 跳过章节校验
+IS_SEARCH_REPLACE=$(echo "$input" | jq -r '.tool_input.replacements | length > 0 // false')
+
+ISSUES=""
+
+# ── 章节校验 ──
+# 使用项目目录下的临时文件，避免 /tmp 在沙箱中不可写导致静默跳过
+TMPFILE="$PROJECT_DIR/.qoder/.doc-guard-issues.tmp"
+: > "$TMPFILE"
+trap "rm -f $TMPFILE" EXIT
+# SearchReplace 只传 patch → 跳过章节/子章节校验（无法从 patch 推断完整文档结构）
+if [ "$IS_SEARCH_REPLACE" != "true" ]; then
+  jq -r '.sections[] | select(.required == true) | .heading' "$SCHEMA_FILE" 2>/dev/null | while IFS= read -r heading; do
+    if ! echo "$CONTENT" | grep -qF "$heading"; then
+      echo "  缺章节: $heading"
+    fi
+  done > "$TMPFILE"
+
+  # 子章节
+  jq -r '.sections[].subsections[]?.heading' "$SCHEMA_FILE" 2>/dev/null | while IFS= read -r sub; do
+    if ! echo "$CONTENT" | grep -qF "$sub"; then
+      echo "  缺子章节: $sub"
+    fi
+  done >> "$TMPFILE"
+fi
+
+# ── 占位符校验 ──
+jq -r '.placeholders[]?' "$SCHEMA_FILE" 2>/dev/null | while IFS= read -r ph; do
+  if echo "$CONTENT" | grep -qF "$ph"; then
+    echo "  未替换占位符: $ph"
+  fi
+done >> "$TMPFILE"
+
+# ── 禁止词校验 ──
+jq -r '.forbidden_terms[]?' "$SCHEMA_FILE" 2>/dev/null | while IFS= read -r term; do
+  if echo "$CONTENT" | grep -qw "$term"; then
+    echo "  禁止词: $term"
+  fi
+done >> "$TMPFILE"
+
+ISSUES=$(cat "$TMPFILE" 2>/dev/null)
+
+# ── 阻断或放行 ──
+if [ -n "$ISSUES" ]; then
+  echo "⛔ $TEMPLATE_NAME 校验不通过:
+$ISSUES" >&2
+  echo "{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"ask\",\"permissionDecisionReason\":\"文档格式校验不通过，请对照模板修正\"}}"
+  exit 2
+fi
+
+# ── 自动更新 index.md ──
+if echo "$file_path" | grep -q '\.qoder/plans/'; then
+  if [ -x "$PROJECT_DIR/scripts/gen-plan-index.sh" ]; then
+    "$PROJECT_DIR/scripts/gen-plan-index.sh" 2>/dev/null || true
+  fi
+fi
+
+exit 0

package/templates/adapters/claude/hooks/notification.sh

@@ -1,4 +1,33 @@
 #!/bin/bash
+# Notification — Review 提醒 + Token 预警（Claude Code 适配）
+# 治理卡位 #12: 开发提醒/Token 预警
+set -euo pipefail
+
+input=$(cat)
+ntype=$(echo "$input" | jq -r '.notification_type // ""' 2>/dev/null || echo "")
+
+if [ "$ntype" != "result" ]; then
+  exit 0
+fi
+
+HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
+export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
+COMMON_LIB="$HOOK_DIR/lib/common.sh"
+[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
+
+export PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$PWD}"
+
+state=$(detect_active_add 2>/dev/null || true)
+[ -z "$state" ] && exit 0
+
+IFS='::' read -r plan _ _ _ _ <<< "$state"
+
+reviews_dir="${PROJECT_DIR}/.qoder/reviews"
+if ls "$reviews_dir"/*.md >/dev/null 2>&1; then
+  echo "[ADD Notification] Plan: ${plan} — 请检查 Review 文档: ${reviews_dir}"
+fi
+exit 0
+#!/bin/bash
 # Notification — 通知事件处理（Claude Code 适配）
 set -euo pipefail
 

package/templates/adapters/claude/hooks/permission-denied.sh

@@ -0,0 +1,42 @@
+#!/bin/bash
+###
+ # @Author       : xiaomingming wujixmm@gmail.com
+ # @Date         : 2026-07-17 13:36:32
+ # @LastEditors  : xiaomingming wujixmm@gmail.com
+ # @LastEditTime : 2026-07-17 13:36:33
+ # @FilePath     : /add-coder/templates/adapters/claude/hooks/permission-denied.sh
+ # @Description  : 
+### 
+# permission-denied.sh — Claude Code PermissionDenied：拒绝记录 + 替代方案
+# 治理卡位 #14: 拒绝原因记录 + 替代方案注入
+# Claude Code 独有事件
+set -euo pipefail
+
+HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
+COMMON_LIB="$HOOK_DIR/lib/common.sh"
+[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
+
+input=$(parse_input)
+tool_name=$(json_get "$input" "tool_name")
+[ -z "$tool_name" ] && tool_name=$(echo "$input" | grep -o '"tool_name"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "unknown")
+
+reason=$(json_get "$input" "reason")
+[ -z "$reason" ] && reason=$(echo "$input" | grep -o '"reason"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "权限被拒绝")
+
+# 记录拒绝
+echo "[ADD PermissionDenied] ${tool_name} 被拒绝: ${reason}" >&2
+
+# 按工具类型提供替代建议
+case "$tool_name" in
+  Bash)
+    echo "[ADD PermissionDenied] 建议: 使用安全的等价命令，或通过 permission-gate.sh 白名单放行" >&2
+    ;;
+  Write|Edit)
+    echo "[ADD PermissionDenied] 建议: 检查目标路径是否在项目范围内，敏感文件（.env等）不可写入" >&2
+    ;;
+  Read)
+    echo "[ADD PermissionDenied] 建议: 该文件可能受读保护，尝试读取项目公有文件替代" >&2
+    ;;
+esac
+
+exit 0