add-coder 0.3.27 → 0.3.28

package/templates/adapters/claude/hooks/lib/subagent-stop.sh

@@ -1,90 +0,0 @@
-#!/bin/bash
-###
- # @Author       : xiaomingming wujixmm@gmail.com
- # @Date         : 2026-07-17 13:21:03
- # @LastEditors  : xiaomingming wujixmm@gmail.com
- # @LastEditTime : 2026-07-17 13:21:22
- # @FilePath     : /add-coder/templates/core/hooks/lib/subagent-stop.sh
- # @Description  : SubagentStop 治理卡位
-### 
-# subagent-stop.sh — SubagentStop 治理卡位
-# 路径: templates/core/hooks/lib/subagent-stop.sh
-#
-# 治理职能（卡位 #11）:
-#   ① 子 agent 结果边界校验: 检查交付物是否在 spec 边界内（不越界、不遗漏）
-#   ② 审计聚合: 将子 agent 的 sub-traceId 审计记录合并回主 traceId
-#   ③ 阻断能力: 子 agent 结果不符合 spec → exit 2 要求重做
-#
-# 用法: 被各 IDE adapter 的 SubagentStop hook 脚本 source 并调用 main
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-source "$SCRIPT_DIR/common.sh" 2>/dev/null || true
-
-# 边界校验: 检查子 agent 交付物是否超出 spec 定义的文件范围
-# 参数: $1 = subagent_name, $2 = 子 agent 交付物文件列表（空格分隔）
-check_boundary() {
-  local subagent_name="$1"
-  local deliverables="$2"
-
-  # 获取活跃 ADD 状态
-  local state=""
-  if type detect_active_add >/dev/null 2>&1; then
-    state=$(detect_active_add 2>/dev/null || true)
-  fi
-
-  if [ -z "$state" ]; then
-    # 无活跃 Plan —— 无 spec 可参考，仅告警不阻断
-    echo "[ADD SubagentStop] ⚠️ 无活跃 ADD Plan，无法校验 $subagent_name 的交付物边界" >&2
-    return 0
-  fi
-
-  local plan_kw=$(echo "$state" | awk -F'::' '{print $1}')
-  local handoff=$(echo "$state" | awk -F'::' '{print $4}')
-
-  echo "[ADD SubagentStop] $subagent_name 已完成，交付物: $deliverables" >&2
-  echo "[ADD SubagentStop] 关联 Plan: $plan_kw | handoff: $handoff" >&2
-
-  # best-effort: 如果 handoff 中列出了允许的文件范围，检查交付物是否在其中
-  if [ -f "$handoff" ] && [ -n "$deliverables" ]; then
-    local violations=""
-    for f in $deliverables; do
-      if ! grep -q "$f" "$handoff" 2>/dev/null; then
-        violations="${violations} $f"
-      fi
-    done
-    if [ -n "$violations" ]; then
-      echo "[ADD SubagentStop] ❌ $subagent_name 交付物超出 spec 边界: $violations" >&2
-      echo "[ADD SubagentStop] 请检查这些文件是否属于本轮 spec 范围，或更新 handoff 文件清单" >&2
-      return 1
-    fi
-  fi
-
-  return 0
-}
-
-main() {
-  local subagent_name="${1:-unknown}"
-
-  # 从 stdin 解析 JSON（hook 事件传入）
-  local input=$(parse_input 2>/dev/null || echo "{}")
-  local deliverables=""
-
-  # 尝试从 stdin JSON 提取交付物信息
-  local agent_type=$(echo "$input" | grep -o '"agent_type"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-  [ -n "$agent_type" ] && subagent_name="${subagent_name}($agent_type)"
-
-  # ① 边界校验
-  if ! check_boundary "$subagent_name" "$deliverables"; then
-    echo "[ADD SubagentStop] 要求重做——交付物超出 spec 边界" >&2
-    exit "${EXIT_BLOCK:-2}"
-  fi
-
-  # ② 审计聚合（输出到 stderr 供日志记录）
-  echo "[ADD SubagentStop] $subagent_name 边界校验通过 — $(date -Iseconds)" >&2
-
-  exit 0
-}
-
-if [ "${BASH_SOURCE[0]}" = "$0" ]; then
-  main "$@"
-fi

package/templates/adapters/claude/hooks/lib/vocabulary.sh

@@ -1,62 +0,0 @@
-#!/bin/bash
-# vocabulary.sh — 从 vocabulary markdown 表格加载触发词
-# 单一数据源: {MAGIC_DIR}/vocabulary/add-governance-vocabulary.md §类别 A-F 表格
-# 协议层契约（Review P1 #5）: 仅当前 magicDir scope；入口注入 MAGIC_DIR 或物理位置推导；
-# 禁止跨端扫描与 .add fallback，禁止 adapter 名称默认值。
-
-# MAGIC_DIR 解析: 入口注入优先；未注入时从脚本物理位置（<magicDir>/hooks/lib/）反推
-if [ -z "${MAGIC_DIR:-}" ]; then
-  if [ -n "${HOOK_DIR:-}" ]; then
-    MAGIC_DIR="$(basename "$(dirname "$HOOK_DIR")")"
-  else
-    # 无注入且无物理位置 → 无法判定 → 返回空（调用方 fail-closed，禁止猜测 adapter）
-    VOCABULARY_FILE=""
-  fi
-fi
-if [ -n "${MAGIC_DIR:-}" ]; then
-  VOCABULARY_FILE="${PROJECT_DIR:-$PWD}/$MAGIC_DIR/vocabulary/add-governance-vocabulary.md"
-fi
-
-# 输出格式: 优先级::触发词正则::响应文本（:: 避免与触发词内的 | 冲突）
-load_triggers() {
-  [ ! -f "$VOCABULARY_FILE" ] && return 1
-  sed -n '/^## 类别 A: 文档类型/,/^## 类别 [G-Z]/p' "$VOCABULARY_FILE" \
-    | grep -E '^\| (P0|P1|P2) ' \
-    | while IFS='|' read -r _ prio raw_trigger action; do
-        prio=$(echo "$prio" | xargs)
-        trigger=$(echo "$raw_trigger" | sed 's/`//g;s/ *\/ */|/g;s/^ *//;s/ *$//')
-        action=$(echo "$action" | xargs)
-        [ -z "$trigger" ] && continue
-        echo "${prio}::${trigger}::${action}"
-      done || true
-}
-
-match_trigger() {
-  local prompt="$1"
-  while IFS= read -r line; do
-    [ -z "$line" ] && continue
-    local prio="${line%%::*}"
-    local rest="${line#*::}"
-    local regex="${rest%%::*}"
-    local action="${rest#*::}"
-    # 跳过开发关键词检测行（由 Layer 2/3 分流处理，特征：超长regex含"修bug"）
-    if echo "$regex" | grep -qE '修\.\?bug|fix\.\?bug' 2>/dev/null; then
-      continue
-    fi
-    if echo "$prompt" | grep -qiE "$regex" 2>/dev/null; then
-      echo "[ADD 触发] ${regex} → ${action}"
-    fi
-  done < <(load_triggers 2>/dev/null)
-}
-
-load_dev_keywords() {
-  load_triggers 2>/dev/null | while IFS= read -r line; do
-    [ -z "$line" ] && continue
-    # 只取包含"开发|改功能"的开发关键词检测行
-    if echo "$line" | grep -q '开发|改功能' 2>/dev/null; then
-      local rest="${line#*::}"
-      local regex="${rest%%::*}"
-      echo "$regex"
-    fi
-  done || true
-}

package/templates/adapters/claude/hooks/notification.sh

@@ -1,45 +0,0 @@
-#!/bin/bash
-# Notification — Review 提醒 + Token 预警（Claude Code 适配）
-# 治理卡位 #12: 开发提醒/Token 预警
-set -euo pipefail
-
-input=$(cat)
-ntype=$(echo "$input" | jq -r '.notification_type // ""' 2>/dev/null || echo "")
-
-if [ "$ntype" != "result" ]; then
-  exit 0
-fi
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-export PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$PWD}"
-
-state=$(detect_active_add 2>/dev/null || true)
-[ -z "$state" ] && exit 0
-
-IFS='::' read -r plan _ _ _ _ <<< "$state"
-
-# 动态探测
-if [ -z "${MAGIC_DIR:-}" ]; then
-  for m in ".claude" ".qoder" ".vscode" ".add"; do
-    [ -d "${PROJECT_DIR:-$PWD}/$m" ] && { MAGIC_DIR="$m"; break; }
-  done
-  MAGIC_DIR="${MAGIC_DIR:-.claude}"
-fi
-reviews_dir="${PROJECT_DIR}/$MAGIC_DIR/reviews"
-if ls "$reviews_dir"/*.md >/dev/null 2>&1; then
-  echo "[ADD Notification] Plan: ${plan} — 请检查 Review 文档: ${reviews_dir}"
-fi
-exit 0
-#!/bin/bash
-# Notification — 通知事件处理（Claude Code 适配）
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-SHARED_LIB="$HOOK_DIR/../../shared/hooks-lib/common.sh"
-[ -f "$SHARED_LIB" ] && source "$SHARED_LIB"
-
-exit 0

package/templates/adapters/claude/hooks/permission-denied.sh

@@ -1,42 +0,0 @@
-#!/bin/bash
-###
- # @Author       : xiaomingming wujixmm@gmail.com
- # @Date         : 2026-07-17 13:36:32
- # @LastEditors  : xiaomingming wujixmm@gmail.com
- # @LastEditTime : 2026-07-17 13:36:33
- # @FilePath     : /add-coder/templates/adapters/claude/hooks/permission-denied.sh
- # @Description  : 
-### 
-# permission-denied.sh — Claude Code PermissionDenied：拒绝记录 + 替代方案
-# 治理卡位 #14: 拒绝原因记录 + 替代方案注入
-# Claude Code 独有事件
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-input=$(parse_input)
-tool_name=$(json_get "$input" "tool_name")
-[ -z "$tool_name" ] && tool_name=$(echo "$input" | grep -o '"tool_name"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "unknown")
-
-reason=$(json_get "$input" "reason")
-[ -z "$reason" ] && reason=$(echo "$input" | grep -o '"reason"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "权限被拒绝")
-
-# 记录拒绝
-echo "[ADD PermissionDenied] ${tool_name} 被拒绝: ${reason}" >&2
-
-# 按工具类型提供替代建议
-case "$tool_name" in
-  Bash)
-    echo "[ADD PermissionDenied] 建议: 使用安全的等价命令，或通过 permission-gate.sh 白名单放行" >&2
-    ;;
-  Write|Edit)
-    echo "[ADD PermissionDenied] 建议: 检查目标路径是否在项目范围内，敏感文件（.env等）不可写入" >&2
-    ;;
-  Read)
-    echo "[ADD PermissionDenied] 建议: 该文件可能受读保护，尝试读取项目公有文件替代" >&2
-    ;;
-esac
-
-exit 0

package/templates/adapters/claude/hooks/permission-gate.sh

@@ -1,18 +0,0 @@
-#!/bin/bash
-# PermissionRequest — 权限请求门禁（Claude Code 适配）
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-SHARED_LIB="$HOOK_DIR/../../shared/hooks-lib/common.sh"
-[ -f "$SHARED_LIB" ] && source "$SHARED_LIB"
-
-input=$(parse_input)
-tool_name=$(echo "$input" | jq -r '.tool_name // empty')
-
-# 高风险工具需要二次确认
-case "$tool_name" in
-  Bash|Write|Edit)
-    echo "[ADD PermissionGate] 高风险工具: ${tool_name}，请确认操作。"
-    ;;
-esac
-exit 0

package/templates/adapters/claude/hooks/post-tool-failure.sh

@@ -1,10 +0,0 @@
-#!/bin/bash
-# PostToolUseFailure — 工具失败后处理（Claude Code 适配）
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-SHARED_LIB="$HOOK_DIR/../../shared/hooks-lib/common.sh"
-[ -f "$SHARED_LIB" ] && source "$SHARED_LIB"
-
-echo "[ADD PostToolFailure] 工具调用失败，请检查错误信息并修复。"
-exit 0

package/templates/adapters/claude/hooks/post-tool-use.sh

@@ -1,35 +0,0 @@
-#!/bin/bash
-# post-tool-use.sh — Claude Code PostToolUse：格式化 + 文档守卫 + 审计提醒
-# 治理卡位 #5: 格式化 + ADD文档守卫 + 审计落库 + 结果增强
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-input=$(parse_input)
-tool_name=$(json_get "$input" "tool_name")
-[ -z "$tool_name" ] && tool_name=$(echo "$input" | grep -o '"tool_name"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-
-# ── Edit/Write matcher: 格式化 + ADD文档守卫 ──
-if [ "$tool_name" = "Edit" ] || [ "$tool_name" = "Write" ]; then
-  file_path=$(echo "$input" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-  [ -z "$file_path" ] && exit 0
-
-  # ADD 文档结构守卫：写入 plans/specs/reviews 后提示
-  if echo "$file_path" | grep -qE '\.(qoder|claude|add)/(plans|specs|reviews)/'; then
-    echo "[ADD PostToolUse] ADD 文档已写入: ${file_path}。请确保章节完整、双向链接齐全、增量修订格式正确。" >&2
-  fi
-
-  # 审计提醒（所有文件写入）
-  echo "[ADD PostToolUse] 文件已写入: ${file_path}。请执行 record_dev_operation 落库审计（ADD-7）。" >&2
-  exit 0
-fi
-
-# ── Bash matcher: 结果增强 ──
-if [ "$tool_name" = "Bash" ]; then
-  echo "[ADD PostToolUse] 命令执行完成。如有 lint/tsc 错误请修复。" >&2
-  exit 0
-fi
-
-exit 0

package/templates/adapters/claude/hooks/pre-compact.sh

@@ -1,37 +0,0 @@
-#!/bin/bash
-# pre-compact.sh — 上下文压缩前 ADD 状态保存（Claude Code 适配）
-# 治理卡位 #9: ADD状态保存 + 恢复清单导出 + tpl标记清理
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-export PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$PWD}"
-
-# ── ① 获取 ADD 状态并保存到标记文件 ──
-if type detect_active_add >/dev/null 2>&1; then
-  state=$(detect_active_add 2>/dev/null || true)
-  if [ -n "$state" ]; then
-    IFS='::' read -r plan step rounds handoff add_route <<< "$state"
-
-    # 写入恢复标记文件（SessionStart 恢复时读取）
-    RECOVERY_FILE="/tmp/add_recovery_$(echo "${PROJECT_DIR}" | md5sum 2>/dev/null | cut -c1-8 || echo "default")"
-    cat > "$RECOVERY_FILE" <<EOF
-plan=${plan}
-step=${step}
-rounds=${rounds}
-handoff=${handoff}
-add_route=${add_route}
-EOF
-
-    echo "[ADD PreCompact] ADD 状态已保存: Plan=${plan}, Step=${step}" >&2
-  fi
-fi
-
-# ── ② 清理 tpl-injected 标记（compact 后上下文丢失，下次需重注） ──
-TPL_FLAG="/tmp/add_tpl_$(echo "${PROJECT_DIR}" | md5sum 2>/dev/null | cut -c1-8 || echo "default")"
-rm -f "$TPL_FLAG" 2>/dev/null || true
-
-exit 0

package/templates/adapters/claude/hooks/pre-tool-use.sh

@@ -1,153 +0,0 @@
-#!/bin/bash
-# pre-tool-use.sh — Claude Code PreToolUse：四路守卫
-# 治理卡位 #4: 危险命令拦截 / 模板路径兜底 / 写入前置守卫 / 敏感文件保护
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-[ -f "$HOOK_DIR/lib/notify.sh" ] && source "$HOOK_DIR/lib/notify.sh" 2>/dev/null || true
-MAGIC_DIR="$CURRENT_MAGIC"
-
-# ── Hook 通知: 提前计算 Plan 关联信息 ──
-ACTIVE_PLAN=$(detect_active_add 2>/dev/null || true)
-if [ -n "$ACTIVE_PLAN" ]; then
-  PLAN_KEYWORD="${ACTIVE_PLAN%%::*}"
-  PLAN_STATUS="active"
-else
-  PLAN_KEYWORD="no-active-plan"
-  PLAN_STATUS="none"
-fi
-
-input=$(parse_input)
-tool_name=$(json_get "$input" "tool_name")
-[ -z "$tool_name" ] && tool_name=$(echo "$input" | grep -o '"tool_name"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-
-export PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$PWD}"
-
-# ── ① Bash matcher: 危险命令拦截 + 终端写文件拦截 ──
-if [ "$tool_name" = "Bash" ]; then
-  cmd=$(echo "$input" | grep -o '"command"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-  # 危险命令
-  if echo "$cmd" | grep -qiE 'rm[[:space:]]+-rf[[:space:]]+/|DROP[[:space:]]+TABLE|git[[:space:]]+push[[:space:]]+--force|mkfs\.|dd[[:space:]]+if='; then
-    echo "⛔ 危险命令已被阻止: $cmd" >&2
-    write_hook_event "pre-tool-use" "deny" "$cmd" "危险命令已被阻止" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-    exit $EXIT_BLOCK
-  fi
-  # 终端写文件拦截（含 > / >> / << heredoc / mv / touch / python -c > file）
-  if echo "$cmd" | grep -qE '(cat|echo|tee|sed[[:space:]]+-i|awk|printf|cp|mv|dd|touch)[[:space:]]*.*([>]{1,2}|[|][[:space:]]*tee|<<)'; then
-    echo "⛔ 禁止通过终端命令直接写文件: $cmd。请使用 Write/Edit/SearchReplace 工具。" >&2
-    write_hook_event "pre-tool-use" "deny" "$cmd" "禁止通过终端直接写文件" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-    exit $EXIT_BLOCK
-  fi
-  # cp / mv / touch — 可创建或覆盖文件，无重定向也拦（对齐 core §A 检测5）
-  if echo "$cmd" | grep -qE '(^|;|\|\||&&|\|)\s*(cp|mv|touch)\b'; then
-    echo "⛔ 禁止通过 cp/mv/touch 操作文件: $cmd。请使用 Write 或 SearchReplace 工具。" >&2
-    write_hook_event "pre-tool-use" "deny" "$cmd" "禁止通过 cp/mv/touch 操作文件" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-    exit $EXIT_BLOCK
-  fi
-  # python/node/ruby/perl/php 脚本解释器 — 可写任意文件
-  if echo "$cmd" | grep -qE '(^|;|\|\||&&|\|)\s*(python3?|node|ruby|perl|php)(\s|$)'; then
-    echo "⛔ 禁止通过脚本解释器直接写文件: $cmd。请使用 Write 或 SearchReplace 工具。" >&2
-    write_hook_event "pre-tool-use" "deny" "$cmd" "禁止通过脚本解释器直接修改文件" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-    exit $EXIT_BLOCK
-  fi
-  mark_dev_action
-  exit 0
-fi
-
-# ── ② Write/Edit matcher: 文件写入前置守卫 ──
-if [ "$tool_name" = "Write" ] || [ "$tool_name" = "Edit" ] || [ "$tool_name" = "SearchReplace" ]; then
-  file_path=$(echo "$input" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-  [ -z "$file_path" ] && exit 0
-
-  # 检查是否写入 plans/specs/reviews 目录但无活跃 ADD Plan
-  if echo "$file_path" | grep -qE '\.(qoder|claude|add)/plans/|\.(qoder|claude|add)/specs/|\.(qoder|claude|add)/reviews/'; then
-    if type detect_active_add >/dev/null 2>&1; then
-      state=$(detect_active_add 2>/dev/null || true)
-      if [ -z "$state" ]; then
-        echo "[ADD 提示] 正在写入 Plan/Spec/Review 文档但无活跃 ADD Plan——首次创建场景放行，建议先执行 add-paradigm 生成 Plan+add-route" >&2
-        echo "{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"allow\",\"permissionDecisionReason\":\"无活跃 ADD Plan 但为 Plan/Spec/Review 写入（首次创建场景），提示而非拦截\"}}"
-        write_hook_event "pre-tool-use" "info" "$file_path" "无活跃 ADD Plan 下写入 Plan/Spec/Review（首次创建放行）" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-        exit $EXIT_BLOCK
-      fi
-    fi
-  fi
-
-  # 敏感文件保护
-  if echo "$file_path" | grep -qE '\.env$|\.env\.production$|\.env\.local$|credentials|secrets'; then
-    echo "⛔ 敏感文件受保护，禁止写入: $file_path" >&2
-    write_hook_event "pre-tool-use" "deny" "$file_path" "敏感文件受保护" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-    exit $EXIT_BLOCK
-  fi
-
-  # 模板类型前置注入 — plans/ 写入前提示应选模板
-  if echo "$file_path" | grep -qE '\.(qoder|claude|add|vscode|trae)/(plans)/'; then
-    fname=$(basename "$file_path")
-    if echo "$fname" | grep -qE 'plan-v[0-9]'; then
-      echo "💡 [ADD PreToolUse] 写入 Plan → 模板: standard-plan-template.md（标准）或 simple-plan-template.md（≤3文件）" >&2
-    elif echo "$fname" | grep -qE 'add-route'; then
-      echo "💡 [ADD PreToolUse] 写入 ADD Route → 模板: add-route-template.md" >&2
-    elif echo "$fname" | grep -qE 'handoff'; then
-      echo "💡 [ADD PreToolUse] 写入 Handoff → 模板: handoff-single-round-template.md（单轮）或 handoff-multi-round-template.md（多轮）" >&2
-    fi
-    # Write 大文件适配 — 已存在大文件建议用 SearchReplace 分块
-    if echo "$tool_name" | grep -qE 'Write' && [ -f "$file_path" ]; then
-      fsize=$(wc -c < "$file_path" 2>/dev/null || echo "0")
-      if [ "$fsize" -gt 2000 ] 2>/dev/null; then
-        echo "⚠️ [ADD PreToolUse] 文件已有 ${fsize} 字节，Write 全量覆盖可能触发工具 payload 限制。建议用 SearchReplace 分块追加。" >&2
-      fi
-    fi
-  fi
-
-  # §C: HITL tongyi 检查 — plans/ + PLAN_REVIEW reviews/ 写入前必须有 .hitl-tongyi-{planName} 哨兵
-  # implementation/runtime review 不需要 HITL，走 §B 活跃 Plan 检查
-  # handoff 是 Step 8 收敛产物（多轮交接手册），不经 HITL 审批，同样豁免
-  if echo "$file_path" | grep -qE '\.(qoder|claude|add|vscode|trae)/(plans)/'; then
-    if echo "$file_path" | grep -qE '\-handoff'; then
-      _do_hitl=false  # handoff 不被 HITL 拦截（Step 8 产物，无独立审批）
-    else
-      _do_hitl=true
-    fi
-  elif echo "$file_path" | grep -qE '\.(qoder|claude|add|vscode|trae)/(reviews)/'; then
-    if echo "$file_path" | grep -qE '-(implementation|runtime)'; then
-      _do_hitl=false  # implementation/runtime review 不被 HITL 拦截
-    else
-      _do_hitl=true   # PLAN_REVIEW 需要 HITL
-    fi
-  else
-    _do_hitl=false
-  fi
-
-  if [ "$_do_hitl" = true ]; then
-    _relative=$(echo "$file_path" | sed 's|.*/\.\(qoder\|claude\|add\|vscode\|trae\)/\(plans\|reviews\)/||')
-    _planName=$(basename "$_relative" .md | sed 's/\.hitl$//;s/-plan-v[0-9]*$//;s/-add-route-v[0-9]*$//;s/-review-v[0-9]*$//;s/-review-implementation$//;s/-review-runtime$//')
-    if [ -n "$_planName" ]; then
-      _tongyi_marker="${PROJECT_DIR}/${MAGIC_DIR}/hitl/.tongyi-${_planName}"
-      if [ ! -f "$_tongyi_marker" ]; then
-        echo "⛔ [ADD PreToolUse §C] HITL 未 tongyi: $file_path" >&2
-        echo "   原因: 哨兵文件 $_tongyi_marker 不存在" >&2
-        echo "   操作: 请先调用 create_hitl 创建审批，再 update_hitl({ status: \"TONGYI\" })" >&2
-        _reason="HITL 未 tongyi: 哨兵 ${_tongyi_marker} 不存在。请先 create_hitl → 人工 tongyi → update_hitl 后再写入"
-        echo "{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"deny\",\"permissionDecisionReason\":\"${_reason}\",\"additionalContext\":\"${_reason}\"}}"
-        write_hook_event "pre-tool-use" "deny" "$file_path" "HITL 未 tongyi: $_tongyi_marker" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-        exit 0
-      fi
-    fi
-  fi
-
-  mark_dev_action
-  exit 0
-fi
-
-# ── ③ Read matcher: 模板路径兜底 ──
-if [ "$tool_name" = "Read" ]; then
-  file_path=$(echo "$input" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-  if echo "$file_path" | grep -q 'templates/'; then
-    echo "[ADD PreToolUse] 提示: 模板文件已通过 hook 预读到上下文，可跳过重复读取" >&2
-  fi
-  exit 0
-fi
-
-exit 0

package/templates/adapters/claude/hooks/prompt-submit.sh

@@ -1,99 +0,0 @@
-#!/bin/bash
-# UserPromptSubmit — 触发词路由 + 模板全文注入（Claude Code 适配）
-# 治理卡位 #3: Layer 1 精准触发 → Layer 2 阻断 → Layer 3 状态注入
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
-
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-[ -f "$HOOK_DIR/lib/notify.sh" ] && source "$HOOK_DIR/lib/notify.sh" 2>/dev/null || true
-[ -f "$HOOK_DIR/lib/vocabulary.sh" ] && source "$HOOK_DIR/lib/vocabulary.sh" 2>/dev/null || true
-
-export PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$PWD}"
-
-input=$(parse_input)
-prompt=$(echo "$input" | grep -o '"prompt"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-[ -z "$prompt" ] && exit 0
-
-# ─── Layer 1: 精准触发词路由 + 验收幂等保护 ───
-matched=$(match_trigger "$prompt")
-if [ -n "$matched" ]; then
-  if echo "$prompt" | grep -qiE '验收|收敛' 2>/dev/null; then
-    add_state=$(detect_active_add 2>/dev/null || true)
-    if [ -n "$add_state" ]; then
-      _handoff=$(echo "$add_state" | awk -F'::' '{print $4}')
-      _add_route=$(echo "$add_state" | awk -F'::' '{print $5}')
-      if is_already_accepted "$_add_route" "$_handoff" 2>/dev/null; then
-        cat <<EOF
-[ADD 验收] ⚠️ 已验收。进入 Review 模式:
-  ① 重新检查 checklist [T]/[R] 项
-  ② 审查 audit 记录完整性
-  ③ 如有差异 → Review 回流至 handoff（增量更新）
-  ④ 无差异 → 记录 'Review 已确认，无新发现'
-EOF
-        exit 0
-      fi
-    fi
-  fi
-  echo "$matched"
-  exit 0
-fi
-
-# ─── 开发关键词检测（从词汇表动态加载） ───
-dev_kw=$(load_dev_keywords 2>/dev/null || true)
-if [ -z "$dev_kw" ]; then
-  exit 0
-fi
-
-if ! echo "$prompt" | grep -qiE "$dev_kw"; then
-  exit 0
-fi
-
-echo "[ADD PromptSubmit] 检测到开发关键词" >&2
-
-# ─── Layer 2: 无活跃 ADD → 提示（不阻断） ───
-state=$(detect_active_add 2>/dev/null || true)
-if [ -z "$state" ]; then
-  cat <<'EOF'
-[ADD 提示] 检测到开发任务，但无活跃 ADD Plan。建议先执行 add-paradigm SKILL:
-  Step 0: 文档先行 (Plan → Review → Specs)
-  Step 3: 代码实现 + 审计植入
-  Step 8: 收敛判断
-EOF
-  write_hook_event "prompt-submit" "info" "$prompt" "无活跃 ADD Plan 下检测到开发任务" "no-active-plan" "none" 2>/dev/null || true
-  exit 0
-fi
-
-# ─── Layer 3: 有活跃 ADD → 注入状态 + 模板全文 ───
-IFS='::' read -r plan step rounds handoff add_route <<< "$state"
-cat <<EOF
-[ADD 当前状态]
-  Plan: ${plan}
-  轮次: ${rounds}
-  当前 Step: ${step}
-  handoff: ${handoff}
-EOF
-
-# ─── Hook 治理日报（注入 AI 上下文）───
-HOOK_JSONL="${MAGIC_DIR}/reports/hook-events.jsonl"
-if [ -f "$HOOK_JSONL" ]; then
-  TODAY="$(date +%Y-%m-%d)"
-  TOTAL=$(grep -c "\"ts\":\"${TODAY}" "$HOOK_JSONL" 2>/dev/null || echo 0)
-  NO_PLAN=$(grep "\"ts\":\"${TODAY}" "$HOOK_JSONL" 2>/dev/null | grep -c '"planKeyword":"no-active-plan"' || echo 0)
-  if [ "$TOTAL" -gt 0 ] 2>/dev/null; then
-    echo "[Hook 治理] 今日提示: ${TOTAL} 次 | 无 Plan 提示: ${NO_PLAN} 次"
-    if [ "$NO_PLAN" -ge 10 ] 2>/dev/null; then
-      echo "[Hook ⚠️] 无 Plan 提示已达 ${NO_PLAN} 次（≥10），建议创建 Plan"
-    fi
-  fi
-fi
-
-# 模板全文注入（tpl-injected 去重）
-TPL_SCRIPT="$HOOK_DIR/lib/preload-templates.sh"
-if [ -f "$TPL_SCRIPT" ]; then
-  bash "$TPL_SCRIPT" --full --top 5
-fi
-
-exit 0

package/templates/adapters/claude/hooks/review-checklist.sh

@@ -1,10 +0,0 @@
-#!/bin/bash
-# review-checklist.sh — Review 检查清单校验（Claude Code 适配）
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-SHARED_LIB="$HOOK_DIR/../../shared/hooks-lib/common.sh"
-[ -f "$SHARED_LIB" ] && source "$SHARED_LIB"
-
-echo "[ADD ReviewChecklist] 请在提交前确认 checklist.md 全部项已勾选。"
-exit 0

package/templates/adapters/claude/hooks/session-end.sh

@@ -1,21 +0,0 @@
-#!/bin/bash
-###
- # @Author       : xiaomingming wujixmm@gmail.com
- # @Date         : 2026-07-17 13:35:03
- # @LastEditors  : xiaomingming wujixmm@gmail.com
- # @LastEditTime : 2026-07-17 13:35:04
- # @FilePath     : /add-coder/templates/adapters/claude/hooks/session-end.sh
- # @Description  : 
-### 
-# SessionEnd — Claude Code 适配（薄包装）
-# 治理卡位 #2: 标记清理 + 会话审计结算 + Stop未触发兜底
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$PWD}"
-
-# source 共享版本并自动执行 main()
-SHARED="$HOOK_DIR/lib/session-end.sh"
-if [ -f "$SHARED" ]; then
-  source "$SHARED"
-fi