add-coder 0.2.8 → 0.3.0

package/templates/.add-coder-src-hash.json

@@ -0,0 +1,256 @@
+{
+  "_version": "0.3.0",
+  "adapters/claude/hooks/doc-format-guard.sh": "ec59ad3f",
+  "adapters/claude/hooks/lib/common.sh": "db321ef6",
+  "adapters/claude/hooks/lib/context-inject.sh": "4132f203",
+  "adapters/claude/hooks/lib/notify.sh": "e0033e53",
+  "adapters/claude/hooks/lib/preload-templates.sh": "96dd67fe",
+  "adapters/claude/hooks/lib/session-end.sh": "29813cbc",
+  "adapters/claude/hooks/lib/state-detect.sh": "b87dd85a",
+  "adapters/claude/hooks/lib/subagent-stop.sh": "4cc1d446",
+  "adapters/claude/hooks/lib/vocabulary.sh": "d5a92ac3",
+  "adapters/claude/hooks/notification.sh": "60bf9b01",
+  "adapters/claude/hooks/permission-denied.sh": "0a0605df",
+  "adapters/claude/hooks/permission-gate.sh": "bcca7732",
+  "adapters/claude/hooks/post-tool-failure.sh": "669b1b65",
+  "adapters/claude/hooks/post-tool-use.sh": "f54dd009",
+  "adapters/claude/hooks/pre-compact.sh": "4248f84f",
+  "adapters/claude/hooks/pre-tool-use.sh": "34e7e4de",
+  "adapters/claude/hooks/prompt-submit.sh": "680b41f4",
+  "adapters/claude/hooks/review-checklist.sh": "b383a983",
+  "adapters/claude/hooks/session-end.sh": "777ae808",
+  "adapters/claude/hooks/session-start.sh": "fd1d5e4f",
+  "adapters/claude/hooks/stop-check.sh": "41bc519a",
+  "adapters/claude/hooks/stop-failure.sh": "e3d6c335",
+  "adapters/claude/hooks/subagent-guard.sh": "5922efba",
+  "adapters/claude/hooks/subagent-stop.sh": "0f89e28c",
+  "adapters/claude/mcp.json": "e8c54cbd",
+  "adapters/claude/settings.json": "067ccc45",
+  "adapters/codex/hooks/doc-format-guard.sh": "94ebd860",
+  "adapters/codex/hooks/lib/common.sh": "db321ef6",
+  "adapters/codex/hooks/lib/context-inject.sh": "4132f203",
+  "adapters/codex/hooks/lib/notify.sh": "e0033e53",
+  "adapters/codex/hooks/lib/preload-templates.sh": "96dd67fe",
+  "adapters/codex/hooks/lib/session-end.sh": "29813cbc",
+  "adapters/codex/hooks/lib/state-detect.sh": "64c23045",
+  "adapters/codex/hooks/lib/subagent-stop.sh": "4cc1d446",
+  "adapters/codex/hooks/lib/vocabulary.sh": "d5a92ac3",
+  "adapters/codex/hooks/notification.sh": "f7aed25d",
+  "adapters/codex/hooks/permission-gate.sh": "bcca7732",
+  "adapters/codex/hooks/post-tool-failure.sh": "669b1b65",
+  "adapters/codex/hooks/post-tool-use.sh": "f54dd009",
+  "adapters/codex/hooks/pre-compact.sh": "6164c007",
+  "adapters/codex/hooks/pre-tool-use.sh": "a7072670",
+  "adapters/codex/hooks/prompt-submit.sh": "bea6f381",
+  "adapters/codex/hooks/review-checklist.sh": "b383a983",
+  "adapters/codex/hooks/session-end.sh": "3cc8c346",
+  "adapters/codex/hooks/session-start.sh": "8a5a2c62",
+  "adapters/codex/hooks/stop-check.sh": "dc4829be",
+  "adapters/codex/hooks/subagent-guard.sh": "47d04662",
+  "adapters/codex/hooks/subagent-stop.sh": "0a34648b",
+  "adapters/codex/hooks.json": "d9c99f6b",
+  "adapters/codex/settings.json": "44136fa3",
+  "adapters/qoder/hooks/doc-format-guard.sh": "bd4ffffb",
+  "adapters/qoder/hooks/lib/common.sh": "db321ef6",
+  "adapters/qoder/hooks/lib/context-inject.sh": "4132f203",
+  "adapters/qoder/hooks/lib/notify.sh": "e0033e53",
+  "adapters/qoder/hooks/lib/preload-templates.sh": "96dd67fe",
+  "adapters/qoder/hooks/lib/session-end.sh": "29813cbc",
+  "adapters/qoder/hooks/lib/state-detect.sh": "b87dd85a",
+  "adapters/qoder/hooks/lib/subagent-stop.sh": "4cc1d446",
+  "adapters/qoder/hooks/lib/vocabulary.sh": "d5a92ac3",
+  "adapters/qoder/hooks/notification.sh": "7d4efea6",
+  "adapters/qoder/hooks/permission-gate.sh": "3bf27b1a",
+  "adapters/qoder/hooks/post-tool-failure.sh": "8bc7a0e4",
+  "adapters/qoder/hooks/post-tool-use.sh": "47dd691c",
+  "adapters/qoder/hooks/pre-compact.sh": "092fa6cf",
+  "adapters/qoder/hooks/pre-tool-use.sh": "51d31986",
+  "adapters/qoder/hooks/prompt-submit.sh": "ac37b64c",
+  "adapters/qoder/hooks/review-checklist.sh": "666831c8",
+  "adapters/qoder/hooks/session-end.sh": "c50339df",
+  "adapters/qoder/hooks/session-start.sh": "7cf070d6",
+  "adapters/qoder/hooks/stop-check.sh": "974db988",
+  "adapters/qoder/hooks/subagent-guard.sh": "ce60eaac",
+  "adapters/qoder/hooks/subagent-stop.sh": "5a2c78c6",
+  "adapters/qoder/mcp.json": "209444d5",
+  "adapters/qoder/settings.json": "4bae3c9a",
+  "adapters/qoder/sync-policy.json": "a4bcbbaf",
+  "adapters/trae/hooks/doc-format-guard.sh": "a563db0f",
+  "adapters/trae/hooks/lib/common.sh": "db321ef6",
+  "adapters/trae/hooks/lib/context-inject.sh": "4132f203",
+  "adapters/trae/hooks/lib/notify.sh": "e0033e53",
+  "adapters/trae/hooks/lib/preload-templates.sh": "96dd67fe",
+  "adapters/trae/hooks/lib/session-end.sh": "29813cbc",
+  "adapters/trae/hooks/lib/state-detect.sh": "64c23045",
+  "adapters/trae/hooks/lib/subagent-stop.sh": "4cc1d446",
+  "adapters/trae/hooks/lib/vocabulary.sh": "d5a92ac3",
+  "adapters/trae/hooks/notification.sh": "f7aed25d",
+  "adapters/trae/hooks/permission-gate.sh": "bcca7732",
+  "adapters/trae/hooks/post-tool-failure.sh": "669b1b65",
+  "adapters/trae/hooks/post-tool-use.sh": "f54dd009",
+  "adapters/trae/hooks/pre-compact.sh": "6164c007",
+  "adapters/trae/hooks/pre-tool-use.sh": "a7072670",
+  "adapters/trae/hooks/prompt-submit.sh": "bea6f381",
+  "adapters/trae/hooks/review-checklist.sh": "b383a983",
+  "adapters/trae/hooks/session-end.sh": "3cc8c346",
+  "adapters/trae/hooks/session-start.sh": "8a5a2c62",
+  "adapters/trae/hooks/stop-check.sh": "dc4829be",
+  "adapters/trae/hooks/subagent-guard.sh": "47d04662",
+  "adapters/trae/hooks/subagent-stop.sh": "0a34648b",
+  "adapters/trae/hooks.json": "e5045c2c",
+  "adapters/trae/settings.json": "ca3d163b",
+  "adapters/vscode/.github/hooks/error-occurred.json": "9caa13dc",
+  "adapters/vscode/.github/hooks/post-tool-use.json": "bff9d4d8",
+  "adapters/vscode/.github/hooks/pre-compact.json": "fade404e",
+  "adapters/vscode/.github/hooks/pre-tool-use.json": "19c59396",
+  "adapters/vscode/.github/hooks/session-end.json": "3089c017",
+  "adapters/vscode/.github/hooks/session-start.json": "fa0b3d63",
+  "adapters/vscode/.github/hooks/stop-check.json": "e5a16e33",
+  "adapters/vscode/.github/hooks/subagent-start.json": "169857ad",
+  "adapters/vscode/.github/hooks/subagent-stop.json": "47dbdd8d",
+  "adapters/vscode/.github/hooks/user-prompt-submit.json": "3a608d62",
+  "adapters/vscode/extensions.json": "0f4024c1",
+  "adapters/vscode/hooks/doc-format-guard.sh": "0db27261",
+  "adapters/vscode/hooks/lib/common.sh": "db321ef6",
+  "adapters/vscode/hooks/lib/context-inject.sh": "4132f203",
+  "adapters/vscode/hooks/lib/notify.sh": "e0033e53",
+  "adapters/vscode/hooks/lib/preload-templates.sh": "96dd67fe",
+  "adapters/vscode/hooks/lib/session-end.sh": "29813cbc",
+  "adapters/vscode/hooks/lib/state-detect.sh": "b87dd85a",
+  "adapters/vscode/hooks/lib/subagent-stop.sh": "4cc1d446",
+  "adapters/vscode/hooks/lib/vocabulary.sh": "d5a92ac3",
+  "adapters/vscode/hooks/notification.sh": "f7aed25d",
+  "adapters/vscode/hooks/permission-gate.sh": "bcca7732",
+  "adapters/vscode/hooks/post-tool-failure.sh": "355cfab1",
+  "adapters/vscode/hooks/post-tool-use.sh": "5f188718",
+  "adapters/vscode/hooks/pre-compact.sh": "a0908f0e",
+  "adapters/vscode/hooks/pre-tool-use.sh": "0da68eed",
+  "adapters/vscode/hooks/prompt-submit.sh": "4529a394",
+  "adapters/vscode/hooks/review-checklist.sh": "b383a983",
+  "adapters/vscode/hooks/session-end.sh": "7b407b9f",
+  "adapters/vscode/hooks/session-start.sh": "ad724a3e",
+  "adapters/vscode/hooks/stop-check.sh": "df1ad9dd",
+  "adapters/vscode/hooks/subagent-guard.sh": "5d0ea685",
+  "adapters/vscode/hooks/subagent-stop.sh": "dd19f712",
+  "adapters/vscode/launch.json": "f2b79855",
+  "adapters/vscode/settings.json": "f2a30bf7",
+  "adapters/vscode/tasks.json": "654d7fbd",
+  "core/agents/add-flow-guardian.md": "697d422f",
+  "core/agents/add-orchestrator.md": "0d555e99",
+  "core/docs/ADD-governance-claude-code.md": "0f582a7e",
+  "core/docs/ADD-governance-codex.md": "289e8b71",
+  "core/docs/ADD-governance-qoder-cn.md": "332a7253",
+  "core/docs/ADD-governance-trae.md": "ffb29a0e",
+  "core/docs/ADD-governance-vscode-copilot.md": "74062e88",
+  "core/hooks/doc-format-guard.sh": "6f14934b",
+  "core/hooks/lib/common.sh": "db321ef6",
+  "core/hooks/lib/context-inject.sh": "4132f203",
+  "core/hooks/lib/notify.sh": "e0033e53",
+  "core/hooks/lib/preload-templates.sh": "96dd67fe",
+  "core/hooks/lib/session-end.sh": "29813cbc",
+  "core/hooks/lib/state-detect.sh": "135bde23",
+  "core/hooks/lib/subagent-stop.sh": "4cc1d446",
+  "core/hooks/lib/vocabulary.sh": "d5a92ac3",
+  "core/hooks/notification.sh": "f7aed25d",
+  "core/hooks/permission-gate.sh": "bcca7732",
+  "core/hooks/post-tool-failure.sh": "669b1b65",
+  "core/hooks/post-tool-use.sh": "f54dd009",
+  "core/hooks/pre-compact.sh": "6164c007",
+  "core/hooks/pre-tool-use.sh": "a7072670",
+  "core/hooks/prompt-submit.sh": "bea6f381",
+  "core/hooks/review-checklist.sh": "b383a983",
+  "core/hooks/session-end.sh": "3cc8c346",
+  "core/hooks/session-start.sh": "8a5a2c62",
+  "core/hooks/stop-check.sh": "dc4829be",
+  "core/hooks/subagent-guard.sh": "47d04662",
+  "core/hooks/subagent-stop.sh": "0a34648b",
+  "core/plans/2026-07/08/add-coder-npm-package-add-route-v1.md": "b05fce99",
+  "core/plans/2026-07/08/add-coder-npm-package-handoff-v1.md": "1bd40a4a",
+  "core/plans/2026-07/08/add-coder-npm-package-plan-v1.md": "323cbc7c",
+  "core/prisma/add.prisma": "83700ec2",
+  "core/reports/REPORT-WORKFLOW.md": "03d39b21",
+  "core/reports/boundary-runtime-report.md": "6fd8053f",
+  "core/reports/code-review-combined-report.md": "195d52aa",
+  "core/reports/code-review-fix-verification-report.md": "478e38e2",
+  "core/reports/code-review-suggestions.md": "1b8f6a16",
+  "core/reports/index.md": "6348c374",
+  "core/reports/runtime-report/gateway.md": "a5751665",
+  "core/reviews/.gitkeep": "e3b0c442",
+  "core/rules/project_rules.md": "5bf3dc94",
+  "core/rules/theory-practice-map.toml": "876192f5",
+  "core/scripts/db-ensure.sh": "fb81c10a",
+  "core/scripts/gen-plan-index.sh": "bfc6ad3e",
+  "core/scripts/mcp-server/elicitation/confirm.ts": "924857b8",
+  "core/scripts/mcp-server/elicitation/index.ts": "44c5dc3f",
+  "core/scripts/mcp-server/index.ts": "3483ec45",
+  "core/scripts/mcp-server/notifications/hitl.ts": "96eb7c5d",
+  "core/scripts/mcp-server/notifications/hook.ts": "a6cb861f",
+  "core/scripts/mcp-server/notifications/index.ts": "b6615afa",
+  "core/scripts/mcp-server/resources/add-coder-version.ts": "299fa071",
+  "core/scripts/mcp-server/resources/add-state.ts": "1c1cc3a2",
+  "core/scripts/mcp-server/resources/hook-events-report.ts": "1d4b5996",
+  "core/scripts/mcp-server/resources/index.ts": "50e19629",
+  "core/scripts/mcp-server/resources/round-task.ts": "104a0d74",
+  "core/scripts/mcp-server/sampling/index.ts": "7ee26d92",
+  "core/scripts/mcp-server/sampling/review.ts": "5db7a8df",
+  "core/scripts/mcp-server/shared/env.ts": "4b295e42",
+  "core/scripts/mcp-server/shared/fs.ts": "97257db9",
+  "core/scripts/mcp-server/shared/prisma.ts": "5133f329",
+  "core/scripts/mcp-server/shared/response.ts": "f7806b67",
+  "core/scripts/mcp-server/tasks/index.ts": "c040eb75",
+  "core/scripts/mcp-server/tasks/runner.ts": "d84bd35d",
+  "core/scripts/mcp-server/tasks/store.ts": "2fce1a92",
+  "core/scripts/mcp-server/tools/audit.ts": "47ea912f",
+  "core/scripts/mcp-server/tools/context.ts": "463df4f4",
+  "core/scripts/mcp-server/tools/docs.ts": "a3937aec",
+  "core/scripts/mcp-server/tools/gateway.ts": "388ff183",
+  "core/scripts/mcp-server/tools/hook-event-report.ts": "3926005b",
+  "core/scripts/mcp-server/tools/index.ts": "d5b3bc68",
+  "core/scripts/mcp-server/tools/quality.ts": "26ddf75d",
+  "core/scripts/mcp-server/types.ts": "6c5e60bc",
+  "core/scripts/mcp-server.ts": "99cc6833",
+  "core/skills/add-paradigm/SKILL.md": "082b1fb2",
+  "core/skills/session-init/SKILL.md": "0fbdc5cd",
+  "core/specs/add-coder-npm-package/checklist.md": "ed92032c",
+  "core/specs/add-coder-npm-package/spec.md": "c7d0f235",
+  "core/specs/add-coder-npm-package/tasks.md": "c34301e5",
+  "core/templates/01-架构/《ADD开发工作路径与文档协同规范》.md": "811716d8",
+  "core/templates/TERMINOLOGY.md": "e9f4f781",
+  "core/templates/add-route-template-heavyweight.md": "8b1eb7c2",
+  "core/templates/add-route-template.md": "670f9ebe",
+  "core/templates/add-route-template.schema.json": "c29a8f65",
+  "core/templates/checklist-template.md": "f904e049",
+  "core/templates/checklist-template.schema.json": "fb3a73e8",
+  "core/templates/fix-verification-template.md": "9c9ed175",
+  "core/templates/fix-verification-template.schema.json": "a18bc6a5",
+  "core/templates/handoff-multi-round-template.md": "d3a2375d",
+  "core/templates/handoff-multi-round.schema.json": "abed4220",
+  "core/templates/handoff-single-round-template.md": "dceb7c86",
+  "core/templates/handoff-single-round.schema.json": "0627cda2",
+  "core/templates/index.md": "7ffab71a",
+  "core/templates/prd-incremental-template.md": "bf8a4a1a",
+  "core/templates/prd-incremental-template.schema.json": "7d0d6a39",
+  "core/templates/prd-standard-template.md": "f9c53727",
+  "core/templates/prd-standard-template.schema.json": "79e7fae0",
+  "core/templates/report-template.md": "bc4602ac",
+  "core/templates/report-template.schema.json": "44dd2bd0",
+  "core/templates/review-implementation-template.md": "a8f8c748",
+  "core/templates/review-implementation-template.schema.json": "d97b9eb6",
+  "core/templates/review-runtime-template.md": "c5960af1",
+  "core/templates/review-runtime-template.schema.json": "c346ea7d",
+  "core/templates/review-template.md": "d5fd3323",
+  "core/templates/review-template.schema.json": "abc2ece6",
+  "core/templates/runtime-report-template.md": "7b35208a",
+  "core/templates/runtime-report-template.schema.json": "6c1143e6",
+  "core/templates/simple-plan-template.md": "0bb1ebbe",
+  "core/templates/simple-plan-template.schema.json": "99d53cc1",
+  "core/templates/spec-template.md": "3fe8f818",
+  "core/templates/spec-template.schema.json": "b13b3de8",
+  "core/templates/standard-plan-template.md": "44d30a4e",
+  "core/templates/standard-plan-template.schema.json": "2b767928",
+  "core/templates/tasks-template.md": "3a0f318d",
+  "core/templates/tasks-template.schema.json": "c046de41",
+  "core/tools/README.md": "26a63460",
+  "core/vocabulary/add-governance-vocabulary.md": "e2227fae",
+  "shared/hooks-lib/common.sh": "441eee52"
+}

package/templates/adapters/claude/hooks/doc-format-guard.sh

@@ -8,6 +8,18 @@ input=$(cat)
 HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
 PARENT_DIR="$(dirname "$HOOK_DIR")"
 MAGIC_DIR="$(basename "$PARENT_DIR")"
+PROJECT_DIR="$PWD"
+
+# ── Hook 通知: 拦截事件写入 jsonl（旁路，失败不阻断 exit 2）──
+source "${HOOK_DIR}/lib/notify.sh" 2>/dev/null || true
+ACTIVE_PLAN=$(detect_active_add 2>/dev/null || true)
+if [ -n "$ACTIVE_PLAN" ]; then
+  PLAN_KEYWORD="${ACTIVE_PLAN%%::*}"
+  PLAN_STATUS="active"
+else
+  PLAN_KEYWORD="no-active-plan"
+  PLAN_STATUS="none"
+fi
 
 # DEBUG: dump stdin for investigation
 mkdir -p "$MAGIC_DIR/debug-dump"
@@ -44,6 +56,7 @@ CONTENT=$(echo "$input" | jq -r '
 if [ -z "$CONTENT" ]; then
   echo "⛔ 拒绝：Write 工具未传 file_content，无法校验手写文档格式" >&2
   echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"Write 工具未传 file_content，无法校验手写文档。请用 SearchReplace 改写已有文件，或用 Write 工具重试。"}}'
+  write_hook_event "doc-format-guard" "deny" "Write" "Write 工具未传 file_content" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
   exit 2
 fi
 
@@ -91,6 +104,7 @@ if [ -z "$TEMPLATE_NAME" ]; then
         else
           echo "⛔ handoff 文件内容无法识别模板类型（缺 '## 全局元信息' 或 '## 1. 交接前状态'），拒绝写入" >&2
           echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"handoff 内容不符合 single/multi 模板规范"}}'
+          write_hook_event "doc-format-guard" "deny" "$file_path" "handoff 模板类型无法识别" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
           exit 2
         fi
         ;;
@@ -111,6 +125,7 @@ if [ -z "$TEMPLATE_NAME" ]; then
         fi
         echo "⛔ 拒绝：无法识别文档类型 (file_path: $file_path)，缺少模板匹配规则" >&2
         echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"无法识别 ADD 文档类型，请联系管理员更新 doc-format-guard.sh"}}'
+        write_hook_event "doc-format-guard" "deny" "$file_path" "无法识别文档类型" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
         exit 2
         ;;
     esac
@@ -122,6 +137,7 @@ SCHEMA_FILE="$TEMPLATES_DIR/${TEMPLATE_NAME%.md}.schema.json"
 if [ ! -f "$SCHEMA_FILE" ]; then
   echo "⛔ 阻断：模板 ${TEMPLATE_NAME} 缺少对应的 .schema.json 校验规则" >&2
   echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"缺少 .schema.json 校验规则文件，禁止无规则放行"}}'
+  write_hook_event "doc-format-guard" "deny" "$file_path" "缺少 .schema.json 校验规则" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
   exit 2
 fi
 
@@ -172,6 +188,7 @@ if [ -n "$ISSUES" ]; then
   echo "⛔ $TEMPLATE_NAME 校验不通过:
 $ISSUES" >&2
   echo "{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"ask\",\"permissionDecisionReason\":\"文档格式校验不通过，请对照模板修正\"}}"
+  write_hook_event "doc-format-guard" "deny" "$file_path" "文档格式校验不通过" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
   exit 2
 fi
 

package/templates/adapters/claude/hooks/lib/notify.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+# notify.sh — Hook 拦截事件写入 jsonl（零外部依赖，bash 原生）
+# 用法: source 后在 exit 2 前调用 write_hook_event
+#
+# 写入格式（7 字段 jsonl）:
+#   {"ts":"ISO8601","hook":"...","decision":"deny","cmd":"...","reason":"...","planKeyword":"...","planStatus":"..."}
+#
+# 磁盘管理:
+#   - 单文件 ≤256KB，超限轮转为 .old（覆盖，不累积多份）
+#   - 总量 ≤512KB（当前 + 一个 .old）
+#   - MCP Server 宕机不丢事件，重启后从文件恢复消费
+
+write_hook_event() {
+  local hook="$1" decision="$2" cmd="$3" reason="$4" plan="${5:-unknown}" status="${6:-none}"
+  local dir="${MAGIC_DIR:-.qoder}/reports"
+  mkdir -p "$dir" 2>/dev/null || true
+  local file="$dir/hook-events.jsonl"
+
+  # 超过 256KB 自动轮转（262144 bytes）
+  if [ -f "$file" ]; then
+    local sz
+    sz=$(stat -c%s "$file" 2>/dev/null || echo 0)
+    [ "$sz" -gt 262144 ] && mv "$file" "${file}.old" 2>/dev/null || true
+  fi
+
+  printf '{"ts":"%s","hook":"%s","decision":"%s","cmd":"%s","reason":"%s","planKeyword":"%s","planStatus":"%s"}\n' \
+    "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
+    "$hook" \
+    "$decision" \
+    "$cmd" \
+    "$reason" \
+    "$plan" \
+    "$status" >> "$file"
+}

package/templates/adapters/claude/hooks/pre-tool-use.sh

@@ -7,6 +7,17 @@ HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
 export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
 COMMON_LIB="$HOOK_DIR/lib/common.sh"
 [ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
+[ -f "$HOOK_DIR/lib/notify.sh" ] && source "$HOOK_DIR/lib/notify.sh" 2>/dev/null || true
+
+# ── Hook 通知: 提前计算 Plan 关联信息 ──
+ACTIVE_PLAN=$(detect_active_add 2>/dev/null || true)
+if [ -n "$ACTIVE_PLAN" ]; then
+  PLAN_KEYWORD="${ACTIVE_PLAN%%::*}"
+  PLAN_STATUS="active"
+else
+  PLAN_KEYWORD="no-active-plan"
+  PLAN_STATUS="none"
+fi
 
 input=$(parse_input)
 tool_name=$(json_get "$input" "tool_name")
@@ -20,21 +31,25 @@ if [ "$tool_name" = "Bash" ]; then
   # 危险命令
   if echo "$cmd" | grep -qiE 'rm[[:space:]]+-rf[[:space:]]+/|DROP[[:space:]]+TABLE|git[[:space:]]+push[[:space:]]+--force|mkfs\.|dd[[:space:]]+if='; then
     echo "⛔ 危险命令已被阻止: $cmd" >&2
+    write_hook_event "pre-tool-use" "deny" "$cmd" "危险命令已被阻止" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
     exit $EXIT_BLOCK
   fi
   # 终端写文件拦截（含 > / >> / << heredoc / mv / touch / python -c > file）
   if echo "$cmd" | grep -qE '(cat|echo|tee|sed[[:space:]]+-i|awk|printf|cp|mv|dd|touch)[[:space:]]*.*([>]{1,2}|[|][[:space:]]*tee|<<)'; then
     echo "⛔ 禁止通过终端命令直接写文件: $cmd。请使用 Write/Edit/SearchReplace 工具。" >&2
+    write_hook_event "pre-tool-use" "deny" "$cmd" "禁止通过终端直接写文件" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
     exit $EXIT_BLOCK
   fi
-  # mv 无重定向但仍操作文件
-  if echo "$cmd" | grep -qE '^[[:space:]]*mv[[:space:]]+/tmp/'; then
-    echo "⛔ 禁止通过 mv /tmp/ 绕过 IDE 工具: $cmd" >&2
+  # cp / mv / touch — 可创建或覆盖文件，无重定向也拦（对齐 core §A 检测5）
+  if echo "$cmd" | grep -qE '(^|;|\|\||&&|\|)\s*(cp|mv|touch)\b'; then
+    echo "⛔ 禁止通过 cp/mv/touch 操作文件: $cmd。请使用 Write 或 SearchReplace 工具。" >&2
+    write_hook_event "pre-tool-use" "deny" "$cmd" "禁止通过 cp/mv/touch 操作文件" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
     exit $EXIT_BLOCK
   fi
-  # python/node 脚本写文件
-  if echo "$cmd" | grep -qE '(python3|python|node)[[:space:]].*[>]{1,2}'; then
-    echo "⛔ 禁止通过脚本语言直接写文件: $cmd。请使用 Write/Edit/SearchReplace 工具。" >&2
+  # python/node/ruby/perl/php 脚本解释器 — 可写任意文件
+  if echo "$cmd" | grep -qE '(^|;|\|\||&&|\|)\s*(python3?|node|ruby|perl|php)(\s|$)'; then
+    echo "⛔ 禁止通过脚本解释器直接写文件: $cmd。请使用 Write 或 SearchReplace 工具。" >&2
+    write_hook_event "pre-tool-use" "deny" "$cmd" "禁止通过脚本解释器直接修改文件" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
     exit $EXIT_BLOCK
   fi
   mark_dev_action
@@ -51,7 +66,10 @@ if [ "$tool_name" = "Write" ] || [ "$tool_name" = "Edit" ]; then
     if type detect_active_add >/dev/null 2>&1; then
       state=$(detect_active_add 2>/dev/null || true)
       if [ -z "$state" ]; then
-        echo "[ADD PreToolUse] ⚠️ 正在写入 Plan/Spec/Review 文档但无活跃 ADD Plan——请先执行 add-paradigm" >&2
+        echo "⛔ 正在写入 Plan/Spec/Review 文档但无活跃 ADD Plan——请先执行 add-paradigm" >&2
+        echo "{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"deny\",\"permissionDecisionReason\":\"Plan/Spec/Review 写入需要活跃 ADD Plan，请先执行 add-paradigm\"}}"
+        write_hook_event "pre-tool-use" "deny" "$file_path" "Plan/Spec/Review 写入需活跃 ADD Plan" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
+        exit $EXIT_BLOCK
       fi
     fi
   fi
@@ -59,6 +77,7 @@ if [ "$tool_name" = "Write" ] || [ "$tool_name" = "Edit" ]; then
   # 敏感文件保护
   if echo "$file_path" | grep -qE '\.env$|\.env\.production$|\.env\.local$|credentials|secrets'; then
     echo "⛔ 敏感文件受保护，禁止写入: $file_path" >&2
+    write_hook_event "pre-tool-use" "deny" "$file_path" "敏感文件受保护" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
     exit $EXIT_BLOCK
   fi
 

package/templates/adapters/claude/hooks/prompt-submit.sh

@@ -8,6 +8,7 @@ export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
 
 COMMON_LIB="$HOOK_DIR/lib/common.sh"
 [ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
+[ -f "$HOOK_DIR/lib/notify.sh" ] && source "$HOOK_DIR/lib/notify.sh" 2>/dev/null || true
 
 export PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$PWD}"
 
@@ -56,6 +57,7 @@ if [ -z "$state" ]; then
   Step 8: 收敛判断
 如果 add-paradigm SKILL 尚未激活，请先调用它。
 EOF
+  write_hook_event "prompt-submit" "deny" "$prompt" "无活跃 ADD Plan 下检测到开发任务" "no-active-plan" "none" 2>/dev/null || true
   exit 2
 fi
 
@@ -69,6 +71,20 @@ cat <<EOF
   handoff: ${handoff}
 EOF
 
+# ─── Hook 治理日报（注入 AI 上下文）───
+HOOK_JSONL="${MAGIC_DIR:-.qoder}/reports/hook-events.jsonl"
+if [ -f "$HOOK_JSONL" ]; then
+  TODAY="$(date +%Y-%m-%d)"
+  TOTAL=$(grep -c "\"ts\":\"${TODAY}" "$HOOK_JSONL" 2>/dev/null || echo 0)
+  NO_PLAN=$(grep "\"ts\":\"${TODAY}" "$HOOK_JSONL" 2>/dev/null | grep -c '"planKeyword":"no-active-plan"' || echo 0)
+  if [ "$TOTAL" -gt 0 ] 2>/dev/null; then
+    echo "[Hook 治理] 今日拦截: ${TOTAL} 次 | 无 Plan 违规: ${NO_PLAN} 次"
+    if [ "$NO_PLAN" -ge 10 ] 2>/dev/null; then
+      echo "[Hook ⚠️] 无 Plan 违规已达 ${NO_PLAN} 次（≥10），建议创建 Plan"
+    fi
+  fi
+fi
+
 # 模板全文注入（tpl-injected 去重）
 TPL_SCRIPT="$HOOK_DIR/lib/preload-templates.sh"
 if [ -f "$TPL_SCRIPT" ]; then

package/templates/adapters/codex/hooks/doc-format-guard.sh

@@ -5,6 +5,18 @@ set -euo pipefail
 input=$(cat)
 
 MAGIC_DIR=".codex"
+PROJECT_DIR="$PWD"
+
+# ── Hook 通知: 拦截事件写入 jsonl（旁路，失败不阻断 exit 2）──
+source "${HOOK_DIR}/lib/notify.sh" 2>/dev/null || true
+ACTIVE_PLAN=$(detect_active_add 2>/dev/null || true)
+if [ -n "$ACTIVE_PLAN" ]; then
+  PLAN_KEYWORD="${ACTIVE_PLAN%%::*}"
+  PLAN_STATUS="active"
+else
+  PLAN_KEYWORD="no-active-plan"
+  PLAN_STATUS="none"
+fi
 
 # DEBUG: dump stdin for investigation
 mkdir -p "$MAGIC_DIR/debug-dump"
@@ -41,6 +53,7 @@ CONTENT=$(echo "$input" | jq -r '
 if [ -z "$CONTENT" ]; then
   echo "⛔ 拒绝：Write 工具未传 file_content，无法校验手写文档格式" >&2
   echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"Write 工具未传 file_content，无法校验手写文档。请用 SearchReplace 改写已有文件，或用 Write 工具重试。"}}'
+  write_hook_event "doc-format-guard" "deny" "Write" "Write 工具未传 file_content" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
   exit 2
 fi
 
@@ -90,6 +103,7 @@ if [ -z "$TEMPLATE_NAME" ]; then
         else
           echo "⛔ handoff 文件内容无法识别模板类型（缺 '## 全局元信息' 或 '## 1. 交接前状态'），拒绝写入" >&2
           echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"handoff 内容不符合 single/multi 模板规范"}}'
+          write_hook_event "doc-format-guard" "deny" "$file_path" "handoff 模板类型无法识别" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
           exit 2
         fi
         ;;
@@ -110,6 +124,7 @@ if [ -z "$TEMPLATE_NAME" ]; then
         fi
         echo "⛔ 拒绝：无法识别文档类型 (file_path: $file_path)，缺少模板匹配规则" >&2
         echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"无法识别 ADD 文档类型，请联系管理员更新 doc-format-guard.sh"}}'
+        write_hook_event "doc-format-guard" "deny" "$file_path" "无法识别文档类型" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
         exit 2
         ;;
     esac
@@ -121,6 +136,7 @@ SCHEMA_FILE="$TEMPLATES_DIR/${TEMPLATE_NAME%.md}.schema.json"
 if [ ! -f "$SCHEMA_FILE" ]; then
   echo "⛔ 阻断：模板 ${TEMPLATE_NAME} 缺少对应的 .schema.json 校验规则" >&2
   echo '{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"ask","permissionDecisionReason":"缺少 .schema.json 校验规则文件，禁止无规则放行"}}'
+  write_hook_event "doc-format-guard" "deny" "$file_path" "缺少 .schema.json 校验规则" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
   exit 2
 fi
 
@@ -227,6 +243,7 @@ if [ -n "$ISSUES" ]; then
   echo "⛔ $TEMPLATE_NAME 校验不通过:
 $ISSUES" >&2
   echo "{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"ask\",\"permissionDecisionReason\":\"文档格式校验不通过，请对照模板修正\"}}"
+  write_hook_event "doc-format-guard" "deny" "$file_path" "文档格式校验不通过" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
   exit 2
 fi
 

package/templates/adapters/codex/hooks/lib/notify.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+# notify.sh — Hook 拦截事件写入 jsonl（零外部依赖，bash 原生）
+# 用法: source 后在 exit 2 前调用 write_hook_event
+#
+# 写入格式（7 字段 jsonl）:
+#   {"ts":"ISO8601","hook":"...","decision":"deny","cmd":"...","reason":"...","planKeyword":"...","planStatus":"..."}
+#
+# 磁盘管理:
+#   - 单文件 ≤256KB，超限轮转为 .old（覆盖，不累积多份）
+#   - 总量 ≤512KB（当前 + 一个 .old）
+#   - MCP Server 宕机不丢事件，重启后从文件恢复消费
+
+write_hook_event() {
+  local hook="$1" decision="$2" cmd="$3" reason="$4" plan="${5:-unknown}" status="${6:-none}"
+  local dir="${MAGIC_DIR:-.qoder}/reports"
+  mkdir -p "$dir" 2>/dev/null || true
+  local file="$dir/hook-events.jsonl"
+
+  # 超过 256KB 自动轮转（262144 bytes）
+  if [ -f "$file" ]; then
+    local sz
+    sz=$(stat -c%s "$file" 2>/dev/null || echo 0)
+    [ "$sz" -gt 262144 ] && mv "$file" "${file}.old" 2>/dev/null || true
+  fi
+
+  printf '{"ts":"%s","hook":"%s","decision":"%s","cmd":"%s","reason":"%s","planKeyword":"%s","planStatus":"%s"}\n' \
+    "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
+    "$hook" \
+    "$decision" \
+    "$cmd" \
+    "$reason" \
+    "$plan" \
+    "$status" >> "$file"
+}