add-coder 0.3.27 → 0.3.29

package/templates/adapters/vscode/hooks/pre-tool-use.sh

@@ -1,153 +0,0 @@
-#!/bin/bash
-# pre-tool-use.sh — VS Code Copilot PreToolUse：四路守卫
-# 治理卡位 #4: 危险命令拦截 / 模板路径兜底 / 写入前置守卫 / 敏感文件保护
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-[ -f "$HOOK_DIR/lib/notify.sh" ] && source "$HOOK_DIR/lib/notify.sh" 2>/dev/null || true
-MAGIC_DIR="$CURRENT_MAGIC"
-
-# ── Hook 通知: 提前计算 Plan 关联信息 ──
-ACTIVE_PLAN=$(detect_active_add 2>/dev/null || true)
-if [ -n "$ACTIVE_PLAN" ]; then
-  PLAN_KEYWORD="${ACTIVE_PLAN%%::*}"
-  PLAN_STATUS="active"
-else
-  PLAN_KEYWORD="no-active-plan"
-  PLAN_STATUS="none"
-fi
-
-input=$(parse_input)
-tool_name=$(json_get "$input" "tool_name")
-[ -z "$tool_name" ] && tool_name=$(echo "$input" | grep -o '"tool_name"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-
-export PROJECT_DIR="$PWD"
-
-# ── ① Bash matcher: 危险命令拦截 + 终端写文件拦截 ──
-if [ "$tool_name" = "Bash" ]; then
-  cmd=$(echo "$input" | grep -o '"command"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-  # 危险命令
-  if echo "$cmd" | grep -qiE 'rm[[:space:]]+-rf[[:space:]]+/|DROP[[:space:]]+TABLE|git[[:space:]]+push[[:space:]]+--force|mkfs\.|dd[[:space:]]+if='; then
-    echo "⛔ 危险命令已被阻止: $cmd" >&2
-    write_hook_event "pre-tool-use" "deny" "$cmd" "危险命令已被阻止" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-    exit $EXIT_BLOCK
-  fi
-  # 终端写文件拦截（含 > / >> / << heredoc / mv / touch / python -c > file）
-  if echo "$cmd" | grep -qE '(cat|echo|tee|sed[[:space:]]+-i|awk|printf|cp|mv|dd|touch)[[:space:]]*.*([>]{1,2}|[|][[:space:]]*tee|<<)'; then
-    echo "⛔ 禁止通过终端命令直接写文件: $cmd。请使用 Write/Edit/SearchReplace 工具。" >&2
-    write_hook_event "pre-tool-use" "deny" "$cmd" "禁止通过终端直接写文件" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-    exit $EXIT_BLOCK
-  fi
-  # cp / mv / touch — 可创建或覆盖文件，无重定向也拦（对齐 core §A 检测5）
-  if echo "$cmd" | grep -qE '(^|;|\|\||&&|\|)\s*(cp|mv|touch)\b'; then
-    echo "⛔ 禁止通过 cp/mv/touch 操作文件: $cmd。请使用 Write 或 SearchReplace 工具。" >&2
-    write_hook_event "pre-tool-use" "deny" "$cmd" "禁止通过 cp/mv/touch 操作文件" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-    exit $EXIT_BLOCK
-  fi
-  # python/node/ruby/perl/php 脚本解释器 — 可写任意文件
-  if echo "$cmd" | grep -qE '(^|;|\|\||&&|\|)\s*(python3?|node|ruby|perl|php)(\s|$)'; then
-    echo "⛔ 禁止通过脚本解释器直接写文件: $cmd。请使用 Write 或 SearchReplace 工具。" >&2
-    write_hook_event "pre-tool-use" "deny" "$cmd" "禁止通过脚本解释器直接修改文件" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-    exit $EXIT_BLOCK
-  fi
-  mark_dev_action
-  exit 0
-fi
-
-# ── ② Write/Edit matcher: 文件写入前置守卫 ──
-if [ "$tool_name" = "Write" ] || [ "$tool_name" = "Edit" ] || [ "$tool_name" = "SearchReplace" ]; then
-  file_path=$(echo "$input" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-  [ -z "$file_path" ] && exit 0
-
-  # 检查是否写入 plans/specs/reviews 目录但无活跃 ADD Plan
-  if echo "$file_path" | grep -qE '\.(qoder|claude|add|vscode)/(plans|specs|reviews)/'; then
-    if type detect_active_add >/dev/null 2>&1; then
-      state=$(detect_active_add 2>/dev/null || true)
-      if [ -z "$state" ]; then
-        echo "[ADD 提示] 正在写入 Plan/Spec/Review 文档但无活跃 ADD Plan——首次创建场景放行，建议先执行 add-paradigm 生成 Plan+add-route" >&2
-        echo "{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"allow\",\"permissionDecisionReason\":\"无活跃 ADD Plan 但为 Plan/Spec/Review 写入（首次创建场景），提示而非拦截\"}}"
-        write_hook_event "pre-tool-use" "info" "$file_path" "无活跃 ADD Plan 下写入 Plan/Spec/Review（首次创建放行）" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-        exit $EXIT_BLOCK
-      fi
-    fi
-  fi
-
-  # 敏感文件保护
-  if echo "$file_path" | grep -qE '\.env$|\.env\.production$|\.env\.local$|credentials|secrets'; then
-    echo "⛔ 敏感文件受保护，禁止写入: $file_path" >&2
-    write_hook_event "pre-tool-use" "deny" "$file_path" "敏感文件受保护" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-    exit $EXIT_BLOCK
-  fi
-
-  # 模板类型前置注入 — plans/ 写入前提示应选模板
-  if echo "$file_path" | grep -qE '\.(qoder|claude|add|vscode|trae)/(plans)/'; then
-    fname=$(basename "$file_path")
-    if echo "$fname" | grep -qE 'plan-v[0-9]'; then
-      echo "💡 [ADD PreToolUse] 写入 Plan → 模板: standard-plan-template.md（标准）或 simple-plan-template.md（≤3文件）" >&2
-    elif echo "$fname" | grep -qE 'add-route'; then
-      echo "💡 [ADD PreToolUse] 写入 ADD Route → 模板: add-route-template.md" >&2
-    elif echo "$fname" | grep -qE 'handoff'; then
-      echo "💡 [ADD PreToolUse] 写入 Handoff → 模板: handoff-single-round-template.md（单轮）或 handoff-multi-round-template.md（多轮）" >&2
-    fi
-    # Write 大文件适配 — 已存在大文件建议用 SearchReplace 分块
-    if echo "$tool_name" | grep -qE 'Write' && [ -f "$file_path" ]; then
-      fsize=$(wc -c < "$file_path" 2>/dev/null || echo "0")
-      if [ "$fsize" -gt 2000 ] 2>/dev/null; then
-        echo "⚠️ [ADD PreToolUse] 文件已有 ${fsize} 字节，Write 全量覆盖可能触发工具 payload 限制。建议用 SearchReplace 分块追加。" >&2
-      fi
-    fi
-  fi
-
-  # §C: HITL tongyi 检查 — plans/ + PLAN_REVIEW reviews/ 写入前必须有 .hitl-tongyi-{planName} 哨兵
-  # implementation/runtime review 不需要 HITL，走 §B 活跃 Plan 检查
-  # handoff 是 Step 8 收敛产物（多轮交接手册），不经 HITL 审批，同样豁免
-  if echo "$file_path" | grep -qE '\.(qoder|claude|add|vscode|trae)/(plans)/'; then
-    if echo "$file_path" | grep -qE '\-handoff'; then
-      _do_hitl=false  # handoff 不被 HITL 拦截（Step 8 产物，无独立审批）
-    else
-      _do_hitl=true
-    fi
-  elif echo "$file_path" | grep -qE '\.(qoder|claude|add|vscode|trae)/(reviews)/'; then
-    if echo "$file_path" | grep -qE '-(implementation|runtime)'; then
-      _do_hitl=false  # implementation/runtime review 不被 HITL 拦截
-    else
-      _do_hitl=true   # PLAN_REVIEW 需要 HITL
-    fi
-  else
-    _do_hitl=false
-  fi
-
-  if [ "$_do_hitl" = true ]; then
-    _relative=$(echo "$file_path" | sed 's|.*/\.\(qoder\|claude\|add\|vscode\|trae\)/\(plans\|reviews\)/||')
-    _planName=$(basename "$_relative" .md | sed 's/\.hitl$//;s/-plan-v[0-9]*$//;s/-add-route-v[0-9]*$//;s/-review-v[0-9]*$//;s/-review-implementation$//;s/-review-runtime$//')
-    if [ -n "$_planName" ]; then
-      _tongyi_marker="${PROJECT_DIR}/${MAGIC_DIR}/hitl/.tongyi-${_planName}"
-      if [ ! -f "$_tongyi_marker" ]; then
-        echo "⛔ [ADD PreToolUse §C] HITL 未 tongyi: $file_path" >&2
-        echo "   原因: 哨兵文件 $_tongyi_marker 不存在" >&2
-        echo "   操作: 请先调用 create_hitl 创建审批，再 update_hitl({ status: \"TONGYI\" })" >&2
-        _reason="HITL 未 tongyi: 哨兵 ${_tongyi_marker} 不存在。请先 create_hitl → 人工 tongyi → update_hitl 后再写入"
-        echo "{\"hookSpecificOutput\":{\"hookEventName\":\"PreToolUse\",\"permissionDecision\":\"deny\",\"permissionDecisionReason\":\"${_reason}\",\"additionalContext\":\"${_reason}\"}}"
-        write_hook_event "pre-tool-use" "deny" "$file_path" "HITL 未 tongyi: $_tongyi_marker" "$PLAN_KEYWORD" "$PLAN_STATUS" 2>/dev/null || true
-        exit 0
-      fi
-    fi
-  fi
-
-  mark_dev_action
-  exit 0
-fi
-
-# ── ③ Read matcher: 模板路径兜底 ──
-if [ "$tool_name" = "Read" ]; then
-  file_path=$(echo "$input" | grep -o '"file_path"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-  if echo "$file_path" | grep -q 'templates/'; then
-    echo "[ADD PreToolUse] 提示: 模板文件已通过 hook 预读到上下文，可跳过重复读取" >&2
-  fi
-  exit 0
-fi
-
-exit 0

package/templates/adapters/vscode/hooks/prompt-submit.sh

@@ -1,99 +0,0 @@
-#!/bin/bash
-# UserPromptSubmit — 触发词路由 + 模板全文注入（VS Code Copilot 适配）
-# 治理卡位 #3: Layer 1 精准触发 → Layer 2 阻断 → Layer 3 状态注入
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
-
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-[ -f "$HOOK_DIR/lib/notify.sh" ] && source "$HOOK_DIR/lib/notify.sh" 2>/dev/null || true
-[ -f "$HOOK_DIR/lib/vocabulary.sh" ] && source "$HOOK_DIR/lib/vocabulary.sh" 2>/dev/null || true
-
-export PROJECT_DIR="$PWD"
-
-input=$(parse_input)
-prompt=$(echo "$input" | grep -o '"prompt"[[:space:]]*:[[:space:]]*"[^"]*"' 2>/dev/null | sed 's/.*: *"\([^"]*\)".*/\1/' || echo "")
-[ -z "$prompt" ] && exit 0
-
-# ─── Layer 1: 精准触发词路由 + 验收幂等保护 ───
-matched=$(match_trigger "$prompt")
-if [ -n "$matched" ]; then
-  if echo "$prompt" | grep -qiE '验收|收敛' 2>/dev/null; then
-    add_state=$(detect_active_add 2>/dev/null || true)
-    if [ -n "$add_state" ]; then
-      _handoff=$(echo "$add_state" | awk -F'::' '{print $4}')
-      _add_route=$(echo "$add_state" | awk -F'::' '{print $5}')
-      if is_already_accepted "$_add_route" "$_handoff" 2>/dev/null; then
-        cat <<EOF
-[ADD 验收] ⚠️ 已验收。进入 Review 模式:
-  ① 重新检查 checklist [T]/[R] 项
-  ② 审查 audit 记录完整性
-  ③ 如有差异 → Review 回流至 handoff（增量更新）
-  ④ 无差异 → 记录 'Review 已确认，无新发现'
-EOF
-        exit 0
-      fi
-    fi
-  fi
-  echo "$matched"
-  exit 0
-fi
-
-# ─── 开发关键词检测（从词汇表动态加载） ───
-dev_kw=$(load_dev_keywords 2>/dev/null || true)
-if [ -z "$dev_kw" ]; then
-  exit 0
-fi
-
-if ! echo "$prompt" | grep -qiE "$dev_kw"; then
-  exit 0
-fi
-
-echo "[ADD PromptSubmit] 检测到开发关键词" >&2
-
-# ─── Layer 2: 无活跃 ADD → 提示（不阻断） ───
-state=$(detect_active_add 2>/dev/null || true)
-if [ -z "$state" ]; then
-  cat <<'EOF'
-[ADD 提示] 检测到开发任务，但无活跃 ADD Plan。建议先执行 add-paradigm SKILL:
-  Step 0: 文档先行 (Plan → Review → Specs)
-  Step 3: 代码实现 + 审计植入
-  Step 8: 收敛判断
-EOF
-  write_hook_event "prompt-submit" "info" "$prompt" "无活跃 ADD Plan 下检测到开发任务" "no-active-plan" "none" 2>/dev/null || true
-  exit 0
-fi
-
-# ─── Layer 3: 有活跃 ADD → 注入状态 + 模板全文 ───
-IFS='::' read -r plan step rounds handoff add_route <<< "$state"
-cat <<EOF
-[ADD 当前状态]
-  Plan: ${plan}
-  轮次: ${rounds}
-  当前 Step: ${step}
-  handoff: ${handoff}
-EOF
-
-# ─── Hook 治理日报（注入 AI 上下文）───
-HOOK_JSONL="${MAGIC_DIR}/reports/hook-events.jsonl"
-if [ -f "$HOOK_JSONL" ]; then
-  TODAY="$(date +%Y-%m-%d)"
-  TOTAL=$(grep -c "\"ts\":\"${TODAY}" "$HOOK_JSONL" 2>/dev/null || echo 0)
-  NO_PLAN=$(grep "\"ts\":\"${TODAY}" "$HOOK_JSONL" 2>/dev/null | grep -c '"planKeyword":"no-active-plan"' || echo 0)
-  if [ "$TOTAL" -gt 0 ] 2>/dev/null; then
-    echo "[Hook 治理] 今日提示: ${TOTAL} 次 | 无 Plan 提示: ${NO_PLAN} 次"
-    if [ "$NO_PLAN" -ge 10 ] 2>/dev/null; then
-      echo "[Hook ⚠️] 无 Plan 提示已达 ${NO_PLAN} 次（≥10），建议创建 Plan"
-    fi
-  fi
-fi
-
-# 模板全文注入（tpl-injected 去重）
-TPL_SCRIPT="$HOOK_DIR/lib/preload-templates.sh"
-if [ -f "$TPL_SCRIPT" ]; then
-  bash "$TPL_SCRIPT" --full --top 5
-fi
-
-exit 0

package/templates/adapters/vscode/hooks/review-checklist.sh

@@ -1,10 +0,0 @@
-#!/bin/bash
-# review-checklist.sh — Review 检查清单校验（Claude Code 适配）
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-SHARED_LIB="$HOOK_DIR/../../shared/hooks-lib/common.sh"
-[ -f "$SHARED_LIB" ] && source "$SHARED_LIB"
-
-echo "[ADD ReviewChecklist] 请在提交前确认 checklist.md 全部项已勾选。"
-exit 0

package/templates/adapters/vscode/hooks/session-end.sh

@@ -1,13 +0,0 @@
-#!/bin/bash
-# SessionEnd — VS Code Copilot 适配（薄包装）
-# 治理卡位 #2: 标记清理 + 会话审计结算 + Stop未触发兜底
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export PROJECT_DIR="$PWD"
-
-# source 共享版本并自动执行 main()
-SHARED="$HOOK_DIR/lib/session-end.sh"
-if [ -f "$SHARED" ]; then
-  source "$SHARED"
-fi

package/templates/adapters/vscode/hooks/session-start.sh

@@ -1,35 +0,0 @@
-#!/bin/bash
-# SessionStart — ADD 上下文恢复 + 模板索引注入（VS Code Copilot 适配）
-# 治理卡位 #1: ADD状态恢复 + 模板索引注入
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
-
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-# VS Code Copilot 运行 hook 时 cwd=项目根
-export PROJECT_DIR="$PWD"
-
-# ── ① ADD 状态恢复 ──
-state=$(detect_active_add 2>/dev/null || true)
-if [ -n "$state" ]; then
-  IFS='::' read -r plan step rounds handoff add_route <<< "$state"
-  cat <<EOF
-[ADD SessionStart] 检测到活跃 ADD Plan:
-  Plan: ${plan}
-  轮次: ${rounds}
-  当前 Step: ${step}
-  handoff: ${handoff}
-  恢复命令: query_audit_logs({ planKeyword: '${plan}' })
-EOF
-fi
-
-# ── ② 模板索引注入 ──
-TPL_SCRIPT="$HOOK_DIR/lib/preload-templates.sh"
-if [ -f "$TPL_SCRIPT" ]; then
-  bash "$TPL_SCRIPT" --index
-fi
-
-exit 0

package/templates/adapters/vscode/hooks/stop-check.sh

@@ -1,62 +0,0 @@
-#!/bin/bash
-###
- # @Author       : xiaomingming wujixmm@gmail.com
- # @Date         : 2026-07-17 17:05:03
- # @LastEditors  : xiaomingming wujixmm@gmail.com
- # @LastEditTime : 2026-07-17 17:05:06
- # @FilePath     : /add-coder/templates/adapters/vscode/hooks/stop-check.sh
- # @Description  : 
-### 
-# stop-check.sh — VS Code Copilot Stop：四象限分流 + 验收检查
-# 治理卡位 #7: 验收检查 + devlog + 阻断
-# DB lifecycle 真相源（协议层）：DB 不可用时 fail-closed，禁止回退 Handoff/add-route 猜测
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
-export MAGIC_DIR=$(basename "$(dirname "$HOOK_DIR")")
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-export PROJECT_DIR="$PWD"
-
-state=$(detect_active_add 2>/dev/null || true)
-has_dev=$(has_dev_action 2>/dev/null && echo "true" || echo "false")
-
-# ═══════ Q0: DB 不可用 → fail closed（禁止当“无 Plan”） ═══════
-if [ "${state%%::*}" = "__STATUS_UNAVAILABLE__" ]; then
-  reason=$(echo "$state" | awk -F'::' '{print $2}')
-  echo "[ADD Stop] ⛔ Plan status 暂不可用（${reason}）。未回退 Handoff/add-route 猜测，请恢复数据库或 MCP resolver 后重试。" >&2
-  exit "${EXIT_BLOCK:-2}"
-fi
-
-# ═══════ Q1: 无 ADD + 无 dev → 正常停 ═══════
-if [ -z "$state" ] && [ "$has_dev" != "true" ]; then
-  exit 0
-fi
-
-# ═══════ Q2: 无 ADD + 有 dev → 严重违规，few-shot 注入 ═══════
-if [ -z "$state" ] && [ "$has_dev" = "true" ]; then
-  build_stop_context "no_add_has_dev" >&2
-  exit $EXIT_BLOCK
-fi
-
-IFS='::' read -r plan step rounds handoff add_route <<< "$state"
-
-# ═══════ Q3: 有 ADD + 无 dev → 注入状态 ═══════
-if [ "$has_dev" != "true" ]; then
-  echo "[ADD Stop] Plan: ${plan}, 轮次: ${rounds}, Step: ${step}"
-  echo "本次无代码改动。下次继续时执行 session-init 恢复上下文。"
-  exit 0
-fi
-
-# ═══════ Q4: 有 ADD + 有 dev → 验收检查 ═══════
-issues=$(check_add_completeness "$handoff" "$add_route" 2>/dev/null || true)
-if [ -n "$issues" ]; then
-  build_stop_context "has_add_dev_unclosed" "$issues" >&2
-  exit $EXIT_BLOCK
-fi
-
-clear_dev_action 2>/dev/null || true
-echo "[ADD Stop] ✅ 验收通过——checklist 全部勾选，devlog 已记录。"
-exit 0

package/templates/adapters/vscode/hooks/subagent-guard.sh

@@ -1,37 +0,0 @@
-#!/bin/bash
-###
- # @Author       : xiaomingming wujixmm@gmail.com
- # @Date         : 2026-07-17 17:05:26
- # @LastEditors  : xiaomingming wujixmm@gmail.com
- # @LastEditTime : 2026-07-17 17:05:29
- # @FilePath     : /add-coder/templates/adapters/vscode/hooks/subagent-guard.sh
- # @Description  : 
-### 
-# SubagentStart — 子代理 ADD 上下文注入（VS Code Copilot 适配）
-# 治理卡位 #10: ADD上下文注入子agent + 审计初始化
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export CURRENT_MAGIC=$(basename "$(dirname "$HOOK_DIR")")
-COMMON_LIB="$HOOK_DIR/lib/common.sh"
-[ -f "$COMMON_LIB" ] && source "$COMMON_LIB"
-
-export PROJECT_DIR="$PWD"
-
-# 获取当前 ADD 状态并注入子 agent
-if type detect_active_add >/dev/null 2>&1; then
-  state=$(detect_active_add 2>/dev/null || true)
-  if [ -n "$state" ]; then
-    IFS='::' read -r plan step rounds handoff add_route <<< "$state"
-    cat <<EOF
-[ADD SubagentStart] 子代理上下文注入:
-  Plan: ${plan}
-  Step: ${step}
-  轮次: ${rounds}
-  handoff: ${handoff}
-  遵循 ADD 规范，完成后请检查 checklist 对应项
-EOF
-  fi
-fi
-
-exit 0

package/templates/adapters/vscode/hooks/subagent-stop.sh

@@ -1,12 +0,0 @@
-#!/bin/bash
-# SubagentStop — VS Code Copilot 适配（薄包装）
-# 治理卡位 #11: 子agent边界校验 + 审计聚合 + 阻断
-set -euo pipefail
-
-HOOK_DIR="$(cd "$(dirname "$0")" && pwd)"
-export PROJECT_DIR="$PWD"
-
-SHARED="$HOOK_DIR/lib/subagent-stop.sh"
-if [ -f "$SHARED" ]; then
-  source "$SHARED"
-fi