add-coder 0.3.27 → 0.3.29

package/templates/adapters/codex/hooks/lib/subagent-stop.sh

@@ -1,90 +0,0 @@
-#!/bin/bash
-###
- # @Author       : xiaomingming wujixmm@gmail.com
- # @Date         : 2026-07-17 13:21:03
- # @LastEditors  : xiaomingming wujixmm@gmail.com
- # @LastEditTime : 2026-07-17 13:21:22
- # @FilePath     : /add-coder/templates/core/hooks/lib/subagent-stop.sh
- # @Description  : SubagentStop 治理卡位
-### 
-# subagent-stop.sh — SubagentStop 治理卡位
-# 路径: templates/core/hooks/lib/subagent-stop.sh
-#
-# 治理职能（卡位 #11）:
-#   ① 子 agent 结果边界校验: 检查交付物是否在 spec 边界内（不越界、不遗漏）
-#   ② 审计聚合: 将子 agent 的 sub-traceId 审计记录合并回主 traceId
-#   ③ 阻断能力: 子 agent 结果不符合 spec → exit 2 要求重做
-#
-# 用法: 被各 IDE adapter 的 SubagentStop hook 脚本 source 并调用 main
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-source "$SCRIPT_DIR/common.sh" 2>/dev/null || true
-
-# 边界校验: 检查子 agent 交付物是否超出 spec 定义的文件范围
-# 参数: $1 = subagent_name, $2 = 子 agent 交付物文件列表（空格分隔）
-check_boundary() {
-  local subagent_name="$1"
-  local deliverables="$2"
-
-  # 获取活跃 ADD 状态
-  local state=""
-  if type detect_active_add >/dev/null 2>&1; then
-    state=$(detect_active_add 2>/dev/null || true)
-  fi
-
-  if [ -z "$state" ]; then
-    # 无活跃 Plan —— 无 spec 可参考，仅告警不阻断
-    echo "[ADD SubagentStop] ⚠️ 无活跃 ADD Plan，无法校验 $subagent_name 的交付物边界" >&2
-    return 0
-  fi
-
-  local plan_kw=$(echo "$state" | awk -F'::' '{print $1}')
-  local handoff=$(echo "$state" | awk -F'::' '{print $4}')
-
-  echo "[ADD SubagentStop] $subagent_name 已完成，交付物: $deliverables" >&2
-  echo "[ADD SubagentStop] 关联 Plan: $plan_kw | handoff: $handoff" >&2
-
-  # best-effort: 如果 handoff 中列出了允许的文件范围，检查交付物是否在其中
-  if [ -f "$handoff" ] && [ -n "$deliverables" ]; then
-    local violations=""
-    for f in $deliverables; do
-      if ! grep -q "$f" "$handoff" 2>/dev/null; then
-        violations="${violations} $f"
-      fi
-    done
-    if [ -n "$violations" ]; then
-      echo "[ADD SubagentStop] ❌ $subagent_name 交付物超出 spec 边界: $violations" >&2
-      echo "[ADD SubagentStop] 请检查这些文件是否属于本轮 spec 范围，或更新 handoff 文件清单" >&2
-      return 1
-    fi
-  fi
-
-  return 0
-}
-
-main() {
-  local subagent_name="${1:-unknown}"
-
-  # 从 stdin 解析 JSON（hook 事件传入）
-  local input=$(parse_input 2>/dev/null || echo "{}")
-  local deliverables=""
-
-  # 尝试从 stdin JSON 提取交付物信息
-  local agent_type=$(echo "$input" | grep -o '"agent_type"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-  [ -n "$agent_type" ] && subagent_name="${subagent_name}($agent_type)"
-
-  # ① 边界校验
-  if ! check_boundary "$subagent_name" "$deliverables"; then
-    echo "[ADD SubagentStop] 要求重做——交付物超出 spec 边界" >&2
-    exit "${EXIT_BLOCK:-2}"
-  fi
-
-  # ② 审计聚合（输出到 stderr 供日志记录）
-  echo "[ADD SubagentStop] $subagent_name 边界校验通过 — $(date -Iseconds)" >&2
-
-  exit 0
-}
-
-if [ "${BASH_SOURCE[0]}" = "$0" ]; then
-  main "$@"
-fi

package/templates/adapters/codex/hooks/lib/vocabulary.sh

@@ -1,51 +0,0 @@
-#!/bin/bash
-# vocabulary.sh — 从 vocabulary markdown 表格加载触发词
-# 单一数据源: 当前 adapter 的 vocabulary/add-governance-vocabulary.md §类别 A-F 表格
-
-# Codex 真源固定读取 `.codex`，禁止遍历或回退其他 magicDir。
-MAGIC_DIR=".codex"
-VOCABULARY_FILE="${PROJECT_DIR:-$PWD}/$MAGIC_DIR/vocabulary/add-governance-vocabulary.md"
-
-# 输出格式: 优先级::触发词正则::响应文本（:: 避免与触发词内的 | 冲突）
-load_triggers() {
-  [ ! -f "$VOCABULARY_FILE" ] && return 1
-  sed -n '/^## 类别 A: 文档类型/,/^## 类别 [G-Z]/p' "$VOCABULARY_FILE" \
-    | grep -E '^\| (P0|P1|P2) ' \
-    | while IFS='|' read -r _ prio raw_trigger action; do
-        prio=$(echo "$prio" | xargs)
-        trigger=$(echo "$raw_trigger" | sed 's/`//g;s/ *\/ */|/g;s/^ *//;s/ *$//')
-        action=$(echo "$action" | xargs)
-        [ -z "$trigger" ] && continue
-        echo "${prio}::${trigger}::${action}"
-      done || true
-}
-
-match_trigger() {
-  local prompt="$1"
-  while IFS= read -r line; do
-    [ -z "$line" ] && continue
-    local prio="${line%%::*}"
-    local rest="${line#*::}"
-    local regex="${rest%%::*}"
-    local action="${rest#*::}"
-    # 跳过开发关键词检测行（由 Layer 2/3 分流处理，特征：超长regex含"修bug"）
-    if echo "$regex" | grep -qE '修\.\?bug|fix\.\?bug' 2>/dev/null; then
-      continue
-    fi
-    if echo "$prompt" | grep -qiE "$regex" 2>/dev/null; then
-      echo "[ADD 触发] ${regex} → ${action}"
-    fi
-  done < <(load_triggers 2>/dev/null)
-}
-
-load_dev_keywords() {
-  load_triggers 2>/dev/null | while IFS= read -r line; do
-    [ -z "$line" ] && continue
-    # 只取包含"开发|改功能"的开发关键词检测行
-    if echo "$line" | grep -q '开发|改功能' 2>/dev/null; then
-      local rest="${line#*::}"
-      local regex="${rest%%::*}"
-      echo "$regex"
-    fi
-  done || true
-}

package/templates/adapters/codex/hooks/notification.sh

@@ -1,30 +0,0 @@
-#!/bin/bash
-# Notification — Review 提醒 + Token 预警（Codex 适配）
-# 治理卡位 #12: 开发提醒/Token 预警
-set -euo pipefail
-
-input=$(cat)
-ntype=$(echo "$input" | jq -r '.notification_type // ""' 2>/dev/null || echo "")
-
-if [ "$ntype" != "result" ]; then
-  exit 0
-fi
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=".codex"
-export MAGIC_DIR=".codex"
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-export PROJECT_DIR="$PWD"
-
-state=$(detect_active_add 2>/dev/null || true)
-[ -z "$state" ] && exit 0
-
-IFS='::' read -r plan _ _ _ _ <<< "$state"
-
-reviews_dir="${PROJECT_DIR}/$MAGIC_DIR/reviews"
-if ls "$reviews_dir"/*.md >/dev/null 2>&1; then
-  echo "[ADD Notification] Plan: ${plan} — 请检查 Review 文档: ${reviews_dir}"
-fi
-exit 0

package/templates/adapters/codex/hooks/permission-gate.sh

@@ -1,18 +0,0 @@
-#!/bin/bash
-# PermissionRequest — 权限请求门禁（Claude Code 适配）
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-SHARED_LIB="$HOOK_DIR/../../shared/hooks-lib/common.sh"
-[ -f "$SHARED_LIB" ] && source "$SHARED_LIB"
-
-input=$(parse_input)
-tool_name=$(echo "$input" | jq -r '.tool_name // empty')
-
-# 高风险工具需要二次确认
-case "$tool_name" in
-  Bash|Write|Edit)
-    echo "[ADD PermissionGate] 高风险工具: ${tool_name}，请确认操作。"
-    ;;
-esac
-exit 0

package/templates/adapters/codex/hooks/post-tool-failure.sh

@@ -1,10 +0,0 @@
-#!/bin/bash
-# PostToolUseFailure — 工具失败后处理（Claude Code 适配）
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-SHARED_LIB="$HOOK_DIR/../../shared/hooks-lib/common.sh"
-[ -f "$SHARED_LIB" ] && source "$SHARED_LIB"
-
-echo "[ADD PostToolFailure] 工具调用失败，请检查错误信息并修复。"
-exit 0

package/templates/adapters/codex/hooks/post-tool-use.sh

@@ -1,43 +0,0 @@
-#!/bin/bash
-# post-tool-use.sh — Codex PostToolUse：ADD 文档提示与开发操作审计提醒
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=".codex"
-export MAGIC_DIR=".codex"
-export PROJECT_DIR="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-input=$(cat)
-tool_name=$(echo "$input" | jq -r '.tool_name // empty')
-
-_report_file() {
-  local file_path="$1"
-  [ -n "$file_path" ] || return 0
-  if echo "$file_path" | grep -qE '(^|/)\.codex/(plans|specs|reviews)/'; then
-    echo "[ADD PostToolUse] ADD 文档已写入: $file_path；请检查双向链接与 Plan/Spec 状态。" >&2
-  fi
-  echo "[ADD PostToolUse] 文件已写入: $file_path；请执行 record_dev_operation 落库审计。" >&2
-}
-
-if [ "$tool_name" = "apply_patch" ]; then
-  patch_command=$(echo "$input" | jq -r '.tool_input.command // empty')
-  patch_paths=$(printf '%s\n' "$patch_command" | sed -nE 's/^\*\*\* (Add|Update|Delete) File: (.+)$/\2/p')
-  while IFS= read -r file_path; do
-    _report_file "$file_path"
-  done <<< "$patch_paths"
-  exit 0
-fi
-
-if [ "$tool_name" = "Write" ] || [ "$tool_name" = "Edit" ] || [ "$tool_name" = "SearchReplace" ]; then
-  file_path=$(echo "$input" | jq -r '.tool_input.file_path // .tool_input.path // empty')
-  _report_file "$file_path"
-  exit 0
-fi
-
-if [ "$tool_name" = "Bash" ]; then
-  echo "[ADD PostToolUse] Bash 命令完成；若产生 lint/typecheck/test 错误，请在本轮闭环。" >&2
-fi
-
-exit 0

package/templates/adapters/codex/hooks/pre-compact.sh

@@ -1,37 +0,0 @@
-#!/bin/bash
-# pre-compact.sh — 上下文压缩前 ADD 状态保存（Claude Code 适配）
-# 治理卡位 #9: ADD状态保存 + 恢复清单导出 + tpl标记清理
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-export PROJECT_DIR="$PWD"
-
-# ── ① 获取 ADD 状态并保存到标记文件 ──
-if type detect_active_add >/dev/null 2>&1; then
-  state=$(detect_active_add 2>/dev/null || true)
-  if [ -n "$state" ]; then
-    IFS='::' read -r plan step rounds handoff add_route <<< "$state"
-
-    # 写入恢复标记文件（SessionStart 恢复时读取）
-    RECOVERY_FILE="/tmp/add_recovery_$(echo "${PROJECT_DIR}" | md5sum 2>/dev/null | cut -c1-8 || echo "default")"
-    cat > "$RECOVERY_FILE" <<EOF
-plan=${plan}
-step=${step}
-rounds=${rounds}
-handoff=${handoff}
-add_route=${add_route}
-EOF
-
-    echo "[ADD PreCompact] ADD 状态已保存: Plan=${plan}, Step=${step}" >&2
-  fi
-fi
-
-# ── ② 清理 tpl-injected 标记（compact 后上下文丢失，下次需重注） ──
-TPL_FLAG="/tmp/add_tpl_$(echo "${PROJECT_DIR}" | md5sum 2>/dev/null | cut -c1-8 || echo "default")"
-rm -f "$TPL_FLAG" 2>/dev/null || true
-
-exit 0

package/templates/adapters/codex/hooks/pre-tool-use.sh

@@ -1,130 +0,0 @@
-#!/bin/bash
-# pre-tool-use.sh — Codex PreToolUse：Bash 裸写保护 + apply_patch 文件守卫
-set -euo pipefail
-
-input=$(cat)
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=".codex"
-export MAGIC_DIR=".codex"
-export PROJECT_DIR="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
-# core notify helper 使用相对 MAGIC_DIR；统一 cwd，避免从 repo 子目录启动时写偏审计文件。
-cd "$PROJECT_DIR"
-
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-source "$HOOK_DIR/lib/notify.sh" 2>/dev/null || true
-
-tool_name=$(echo "$input" | jq -r '.tool_name // empty')
-tool_command=$(echo "$input" | jq -r '.tool_input.command // empty')
-active_plan=$(detect_active_add 2>/dev/null || true)
-if [ -n "$active_plan" ]; then
-  plan_keyword="${active_plan%%::*}"
-  plan_status="active"
-else
-  plan_keyword="no-active-plan"
-  plan_status="none"
-fi
-
-_log_block() {
-  local rule="$1" detail="$2"
-  mkdir -p "$PROJECT_DIR/$MAGIC_DIR/debug-dump" 2>/dev/null || return 0
-  printf '=== %s [BLOCKED: %s] ===\n%s\n=== DONE ===\n' \
-    "$(date -Iseconds)" "$rule" "${detail:0:500}" \
-    >> "$PROJECT_DIR/$MAGIC_DIR/debug-dump/stdin.log" 2>/dev/null || true
-}
-
-_deny() {
-  local rule="$1" reason="$2" detail="${3:-$tool_name}"
-  echo "⛔ [ADD PreToolUse] $reason" >&2
-  jq -nc --arg reason "$reason" '{
-    hookSpecificOutput: {
-      hookEventName: "PreToolUse",
-      permissionDecision: "deny",
-      permissionDecisionReason: $reason
-    }
-  }'
-  _log_block "$rule" "$detail"
-  write_hook_event "pre-tool-use" "deny" "$tool_name" "$reason" "$plan_keyword" "$plan_status" 2>/dev/null || true
-  exit "${EXIT_BLOCK:-2}"
-}
-
-_require_hitl_for() {
-  local file_path="$1" do_hitl=false plan_name marker_base marker_full
-
-  if echo "$file_path" | grep -qE '(^|/)\.codex/plans/'; then
-    if ! echo "$file_path" | grep -qE -- '-handoff'; then
-      do_hitl=true
-    fi
-  elif echo "$file_path" | grep -qE '(^|/)\.codex/reviews/'; then
-    # Runtime Review 是运行时证据容器；Plan Review 与 Implementation Review 都必须走 create_hitl。
-    if ! echo "$file_path" | grep -qE -- '-runtime'; then
-      do_hitl=true
-    fi
-  fi
-
-  [ "$do_hitl" = true ] || return 0
-
-  plan_name=$(basename "$file_path" .md | sed 's/\.hitl$//')
-  marker_full="$PROJECT_DIR/$MAGIC_DIR/hitl/.tongyi-${plan_name}"
-  marker_base="$PROJECT_DIR/$MAGIC_DIR/hitl/.tongyi-$(echo "$plan_name" | sed 's/-plan-v[0-9]*$//;s/-add-route-v[0-9]*$//;s/-review-v[0-9]*$//;s/-review-implementation[^/]*$//')"
-  if [ ! -f "$marker_full" ] && [ ! -f "$marker_base" ]; then
-    _deny "hitl" "HITL 未同意: $file_path。请先 create_hitl，再由人工 update_hitl(TONGYI)。" "$file_path"
-  fi
-}
-
-_guard_file_path() {
-  local file_path="$1"
-  [ -n "$file_path" ] || return 0
-
-  if echo "$file_path" | grep -qE '(^|/)(\.env|\.env\.production|\.env\.local)$|credentials|secrets'; then
-    _deny "sensitive-file" "敏感文件受保护，禁止写入: $file_path" "$file_path"
-  fi
-
-  _require_hitl_for "$file_path"
-
-  if echo "$file_path" | grep -qE '(^|/)\.codex/(plans|specs|reviews)/'; then
-    if [ -z "$active_plan" ]; then
-      echo "[ADD PreToolUse] 正在修改 ADD 文档但未检测到活跃 Plan: $file_path" >&2
-    fi
-  fi
-}
-
-# Codex 对 Bash 与 apply_patch 都把 payload 放在 tool_input.command。
-# 只有 canonical Bash 才执行 shell 命令检查，避免把 patch body 误判成 shell。
-if [ "$tool_name" = "Bash" ]; then
-  if echo "$tool_command" | grep -qE '(^|;|\|\||&&|\|)[[:space:]]*(python3?|node|ruby|perl|php)([[:space:]]|$)'; then
-    _deny "script-interpreter" "禁止通过脚本解释器直接修改文件；请使用 apply_patch。" "$tool_command"
-  fi
-  # `-i` 必须是 sed 命令中的独立 option；不能把 session-init 等后续路径子串当成原地写入。
-  if echo "$tool_command" | grep -qE '(^|[;&|][[:space:]]*)sed[[:space:]]+([^;&|]*[[:space:]])?(-[[:alpha:]]*i[^[:space:];&|]*|--in-place(=[^[:space:];&|]*)?)([[:space:];&|]|$)'; then
-    _deny "sed-i" "禁止通过 sed -i 直接编辑文件；请使用 apply_patch。" "$tool_command"
-  fi
-  if echo "$tool_command" | grep -qE '[>]{1,2}[[:space:]]+[^[:space:]]'; then
-    _deny "redirect" "禁止通过重定向写入文件；请使用 apply_patch。" "$tool_command"
-  fi
-  if echo "$tool_command" | grep -qE '\btee\b|\bdd\b.*of='; then
-    _deny "tee-dd" "禁止通过 tee/dd 写入文件；请使用 apply_patch。" "$tool_command"
-  fi
-  if echo "$tool_command" | grep -qE '(^|;|\|\||&&|\|)[[:space:]]*(cp|mv|touch)\b'; then
-    _deny "copy-move-touch" "禁止通过 cp/mv/touch 改变文件；请使用 apply_patch。" "$tool_command"
-  fi
-  exit 0
-fi
-
-if [ "$tool_name" = "apply_patch" ]; then
-  patch_paths=$(printf '%s\n' "$tool_command" | sed -nE 's/^\*\*\* (Add|Update|Delete) File: (.+)$/\2/p')
-  while IFS= read -r file_path; do
-    [ -n "$file_path" ] && _guard_file_path "$file_path"
-  done <<< "$patch_paths"
-  mark_dev_action 2>/dev/null || true
-  exit 0
-fi
-
-# 兼容尚未 canonicalize 的宿主输入；当前 Codex 正常上报 apply_patch。
-if [ "$tool_name" = "Write" ] || [ "$tool_name" = "Edit" ] || [ "$tool_name" = "SearchReplace" ]; then
-  file_path=$(echo "$input" | jq -r '.tool_input.file_path // .tool_input.path // empty')
-  _guard_file_path "$file_path"
-  mark_dev_action 2>/dev/null || true
-fi
-
-exit 0

package/templates/adapters/codex/hooks/prompt-submit.sh

@@ -1,92 +0,0 @@
-#!/bin/bash
-# prompt-submit.sh — Codex UserPromptSubmit 触发词智能路由
-# 治理卡位 #3: Layer 1 精准触发 → Layer 2 阻断 → Layer 3 状态注入
-set -euo pipefail
-
-input=$(cat)
-prompt=$(echo "$input" | jq -r '.prompt // empty')
-[ -z "$prompt" ] && exit 0
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=".codex"
-export MAGIC_DIR=".codex"
-export PROJECT_DIR="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
-# Codex hook command 继承 session cwd；先统一 git root，确保状态与报告路径稳定。
-cd "$PROJECT_DIR"
-source "$HOOK_DIR/lib/vocabulary.sh" 2>/dev/null || true
-source "$HOOK_DIR/lib/common.sh" 2>/dev/null || true
-source "$HOOK_DIR/lib/notify.sh" 2>/dev/null || true
-
-# ─── Layer 1: 精准 P0 触发词 ───
-matched=$(match_trigger "$prompt" 2>/dev/null || true)
-if [ -n "$matched" ]; then
-  # 验收幂等保护: 如果已验收，提示不重复
-  if echo "$prompt" | grep -qiE '验收|收敛' 2>/dev/null; then
-    add_state=$(detect_active_add 2>/dev/null || true)
-    if [ -n "$add_state" ]; then
-      _handoff=$(echo "$add_state" | awk -F'::' '{print $4}')
-      _add_route=$(echo "$add_state" | awk -F'::' '{print $5}')
-      if is_already_accepted "$_add_route" "$_handoff" 2>/dev/null; then
-        cat <<EOF
-[ADD 验收] ⚠️ 已验收。进入 Review 模式:
-  ① 重新检查 checklist [T]/[R] 项
-  ② 审查 audit 记录完整性
-  ③ 如有差异 → Review 回流至 handoff（增量更新，不覆盖已有结论）
-  ④ 无差异 → 记录 'Review 已确认，无新发现'
-  ★ 同步检查: 如 checklist 有新 cuid 但 handoff 审计表缺失 → 更新 handoff ADD-7 表 + query_audit_logs 命令
-EOF
-        HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-        "$HOOK_DIR/review-checklist.sh" "$_handoff" "$_add_route" 2>/dev/null || true
-        exit 0
-      fi
-    fi
-  fi
-  echo "$matched"
-  exit 0
-fi
-
-# ─── 开发关键词检测（动态加载） ───
-dev_kw=$(load_dev_keywords 2>/dev/null || true)
-if [ -z "$dev_kw" ]; then
-  exit 0
-fi
-
-if ! echo "$prompt" | grep -qiE "$dev_kw"; then
-  exit 0
-fi
-
-# ─── Layer 2/3: 按活跃 ADD 分流 ───
-state=$(detect_active_add 2>/dev/null || true)
-if [ -z "$state" ]; then
-  # Layer 2: 无活跃 ADD → 提示启动（不阻断）
-  cat >&2 <<'EOF'
-[ADD 提示] 检测到开发任务，但无活跃 ADD Plan。建议先执行 add-paradigm SKILL:
-  Step 0: 文档先行 (Plan → Review → Specs)
-  Step 3: 代码实现 + 审计植入
-  Step 8: 收敛判断
-EOF
-  write_hook_event "prompt-submit" "info" "$prompt" "无活跃 ADD Plan 下检测到开发任务" "no-active-plan" "none" 2>/dev/null || true
-  exit 0
-fi
-
-# Layer 3: 有活跃 ADD → 注入状态
-plan=$(echo "$state" | awk -F'::' '{print $1}')
-step=$(echo "$state" | awk -F'::' '{print $2}')
-rounds=$(echo "$state" | awk -F'::' '{print $3}')
-handoff=$(echo "$state" | awk -F'::' '{print $4}')
-echo "[ADD 状态] Plan: ${plan}, 轮次: ${rounds}, Step: ${step}, handoff: ${handoff}"
-
-# ─── Hook 治理日报（注入 AI 上下文）───
-HOOK_JSONL="${MAGIC_DIR:-.codex}/reports/hook-events.jsonl"
-if [ -f "$HOOK_JSONL" ]; then
-  TODAY="$(date +%Y-%m-%d)"
-  TOTAL=$(grep -c "\"ts\":\"${TODAY}" "$HOOK_JSONL" 2>/dev/null || echo 0)
-  NO_PLAN=$(grep "\"ts\":\"${TODAY}" "$HOOK_JSONL" 2>/dev/null | grep -c '"planKeyword":"no-active-plan"' || echo 0)
-  if [ "$TOTAL" -gt 0 ] 2>/dev/null; then
-    echo "[Hook 治理] 今日提示: ${TOTAL} 次 | 无 Plan 提示: ${NO_PLAN} 次"
-    if [ "$NO_PLAN" -ge 10 ] 2>/dev/null; then
-      echo "[Hook ⚠️] 无 Plan 提示已达 ${NO_PLAN} 次（≥10），建议创建 Plan 或检查 hooks 误报"
-    fi
-  fi
-fi
-exit 0

package/templates/adapters/codex/hooks/review-checklist.sh

@@ -1,10 +0,0 @@
-#!/bin/bash
-# review-checklist.sh — Review 检查清单校验（Claude Code 适配）
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-SHARED_LIB="$HOOK_DIR/../../shared/hooks-lib/common.sh"
-[ -f "$SHARED_LIB" ] && source "$SHARED_LIB"
-
-echo "[ADD ReviewChecklist] 请在提交前确认 checklist.md 全部项已勾选。"
-exit 0

package/templates/adapters/codex/hooks/session-end.sh

@@ -1,38 +0,0 @@
-#!/bin/bash
-# SessionEnd — 通用版（核心模板，Trae 等适配器继承）
-# 治理卡位 #2: 标记清理 + 会话审计结算 + Stop未触发兜底
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-export PROJECT_DIR="$PWD"
-
-# ── ① 清理 tpl-injected 标记 ──
-project_hash=$(echo "${PROJECT_DIR:-$PWD}" | md5sum 2>/dev/null | cut -c1-8 || echo "default")
-rm -f "/tmp/add_tpl_${project_hash}" 2>/dev/null || true
-
-# ── ② 清理 dev action 标记 ──
-rm -f "/tmp/add_dev_${project_hash}" 2>/dev/null || true
-
-# ── ③ Stop 未触发兜底: 如果 dev action 标记还在，补执行 checklist 快照 ──
-if has_dev_action 2>/dev/null; then
-  echo "[ADD SessionEnd] ⚠️ 检测到 dev action 标记未清除——Stop 可能未触发验收检查" >&2
-
-  state=$(detect_active_add 2>/dev/null || true)
-  if [ -n "$state" ]; then
-    handoff=$(echo "$state" | awk -F'::' '{print $4}')
-    add_route=$(echo "$state" | awk -F'::' '{print $5}')
-    if [ -f "$handoff" ]; then
-      echo "[ADD SessionEnd] 补执行 checklist 快照（best-effort，不阻断）" >&2
-      if type check_add_completeness >/dev/null 2>&1; then
-        check_add_completeness "$handoff" "$add_route" >&2 2>/dev/null || true
-      fi
-    fi
-  fi
-fi
-
-# ── ④ 审计结算 ──
-echo "[ADD SessionEnd] 会话结束 — $(date -Iseconds)" >&2
-exit 0

package/templates/adapters/codex/hooks/session-start.sh

@@ -1,63 +0,0 @@
-#!/bin/bash
-# SessionStart — ADD 上下文恢复 + 模板索引注入（Codex 适配）
-# 治理卡位 #1: ADD状态恢复 + 模板索引注入
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=".codex"
-export MAGIC_DIR=".codex"
-export PROJECT_DIR="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
-
-# 加载四端通用函数（路径统一后: .claude/hooks/lib/common.sh）
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-# Codex 可能从 repo 子目录启动；状态仍只读取 Codex 自己的 `.codex`。
-export PLANS_DIR="$PROJECT_DIR/$MAGIC_DIR/plans"
-
-# ── ① ADD 状态恢复 ──
-state=$(detect_active_add 2>/dev/null || true)
-if [ -n "$state" ]; then
-  plan=$(echo "$state" | awk -F'::' '{print $1}')
-  step=$(echo "$state" | awk -F'::' '{print $2}')
-  rounds=$(echo "$state" | awk -F'::' '{print $3}')
-  handoff=$(echo "$state" | awk -F'::' '{print $4}')
-  add_route=$(echo "$state" | awk -F'::' '{print $5}')
-  cat <<EOF
-[ADD SessionStart] 检测到活跃 ADD Plan:
-  Plan: ${plan}
-  轮次: ${rounds}
-  当前 Step: ${step}
-  handoff: ${handoff}
-  恢复命令: query_audit_logs({ planKeyword: '${plan}' })
-EOF
-fi
-
-# ── ② 模板索引注入 ──
-# core lib 的相对路径面向其他 adapter；Codex 直接读取项目 `.codex/templates`。
-TEMPLATES_DIR="$PROJECT_DIR/$CURRENT_MAGIC/templates"
-if [ -d "$TEMPLATES_DIR" ]; then
-  echo "## ADD 可用模板清单"
-  for template_path in "$TEMPLATES_DIR"/*.md; do
-    [ -f "$template_path" ] || continue
-    echo "- $(basename "$template_path")"
-  done
-fi
-
-# ── ③ §代办刷新：活跃 Plan 时提醒加载 IDE 代办 ──
-# session-init Step 2.6 依赖 IDE resume invoke SKILL，本段作为兜底
-if [ -n "$state" ]; then
-  cat <<EOF
-[代办] 检测到活跃 Plan: ${plan}。如有未加载的 IDE 代办清单，请从 tasks.md §IDE JSON 刷新 TodoWrite。
-EOF
-fi
-
-# ── ④ §HITL 待审批检测 ──
-if [ -d "$PLANS_DIR" ]; then
-  hitl_count=$(find "$PLANS_DIR" -name "*.hitl.md" -mtime -7 -type f 2>/dev/null | wc -l)
-  if [ "$hitl_count" -gt 0 ] 2>/dev/null; then
-    echo "[HITL 待审批] 检测到 ${hitl_count} 个待审批 HITL 提案，请检查并处理"
-  fi
-fi
-
-exit 0