phasegate 0.160.11 → 0.160.13

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.160.12] - 2026-05-20
+
+### Added
+
+- **WI-206 — hook-visible Full Mode sessions** — adds `phasegate session begin/end` for TTL-scoped Full Mode authorization, lets PreToolUse allow matching unit/category edits through `.phasegate/session.json`, updates `/story-implementor` to use the session route, and improves full-mode block guidance so users are not sent to a guide-only route.
+
 ## [0.160.11] - 2026-05-17
 
 ### Fixed

package/README.md

@@ -102,6 +102,15 @@ npx phasegate doctor
 
 `install` merges PhaseGate into the current project without discarding existing Claude/Codex hooks or Husky scripts. It reports planned changes before writing, adds package scripts and the `phasegate` devDependency, creates agent skill links, writes `AGENTS.md` / `CLAUDE.md` PhaseGate managed sections for the selected agent targets, writes the CI workflow when missing, and records managed files in `.phasegate/manifest.json`. If an existing file needs a forced managed update, run `npx phasegate install --apply --force`; PhaseGate backs up replaced files under `.phasegate/backups/`. <!-- @work-item-id WI-174 -->
 
+For personal evaluation inside a team-owned repository, use local-only install:
+
+```bash
+npx phasegate install --personal --dry-run
+npx phasegate install --personal --apply
+```
+
+`--personal` does not plan or write `package.json`, `AGENTS.md`, `CLAUDE.md`, `.husky/*`, `.github/workflows/*`, or `.gitignore`. It creates `.phasegate-local/config.json`, adds a managed local-only block to `.git/info/exclude`, records personal artifacts in `.phasegate/manifest.json`, and reports Codex user-level hook setup as a manual action instead of writing `.codex/hooks.json`. <!-- @work-item-id WI-207 -->
+
 For agent-driven setup planning, use:
 
 ```bash
@@ -135,7 +144,7 @@ npx phasegate reconcile --apply
 
 ```bash
 npx phasegate init --name my-project --agent codex --with-husky
-codex features enable codex_hooks
+codex features enable hooks
 ```
 
 Use `--agent both` for projects that use Claude Code and Codex together. Codex native `apply_patch` currently cannot be intercepted before the edit, so those violations are caught at pre-commit; Bash-based writes are blocked before execution.
@@ -482,12 +491,12 @@ Phasegate also integrates with [OpenAI Codex CLI](https://developers.openai.com/
 npx phasegate init --name my-project --agent codex --with-husky
 
 # 2. Enable the Codex CLI feature flag manually on your machine
-codex features enable codex_hooks
+codex features enable hooks
 ```
 
 For dual-agent projects (Claude + Codex), use `--agent both`.
 
-`init` sets up files inside the project. The Codex CLI user-level setting (`codex_hooks`) remains an explicit manual step.
+`init` sets up files inside the project. The Codex CLI user-level hooks feature remains an explicit manual step.
 
 ### Coverage and known limitation
 

package/docs/guide/cli-reference.md

@@ -29,6 +29,7 @@ Command names in this document are split into three surfaces:
 | `reconcile --dry-run` / `--apply` | Update PhaseGate-managed files to current package templates and refresh manifest hashes; `--force` allows managed-file replacement with backup. |
 | `setup:agent` | Agent-readable setup planner and optional apply path. Options: `--intent <minimal\|recommended\|strict\|ci-only\|agent-hooks\|retrofit>`, `--agent <claude\|codex\|both>`, `--workflow <standard\|strict>`, `--with-husky`, `--with-ci`, `--dry-run`, `--apply`, `--json`. <!-- @work-item-id WI-172 --> |
 | `config:plan` | Agent-readable configuration change planner. Options: `--intent <l4-strict\|codex-hooks\|ci-fail-on-warning\|baseline-reset\|quick-mode-strict\|quick-mode-relax\|retrofit-bootstrap\|planning-mode-relax>`, `--dry-run`, `--apply`, `--json`. <!-- @work-item-id WI-173 --> <!-- @work-item-id WI-201 --> <!-- @work-item-id WI-204 --> |
+| `session begin` / `session end` | Hook-visible Full Mode session manager. Use `session begin --mode full --unit <unit> --work-item <WI-XXX> --reason <text> --duration <ttl>` before implementation that must touch Quick Mode disallowed categories, and `session end --work-item <WI-XXX>` after completion. <!-- @work-item-id WI-206 --> |
 | `update-skills` | Compatibility alias for `reconcile`; use `reconcile` for new automation. |
 | `scaffold-wi <unit> <type>` | Create `docs/inception/{unit}/WI-XXX/description.md` using the next free WI number. |
 | `emit-agent-rules` | Print the AGENTS.md / CLAUDE.md WI workflow rules block. |

package/docs/guide/codex-integration.md

@@ -11,7 +11,7 @@ Phasegate supports [OpenAI Codex CLI](https://developers.openai.com/codex/cli) t
 npx phasegate init --name my-project --agent codex --with-husky
 
 # 2. Enable the Codex CLI feature flag manually
-codex features enable codex_hooks
+codex features enable hooks
 ```
 
 For dual-agent projects (Claude + Codex), use `--agent both`.
@@ -19,7 +19,7 @@ For dual-agent projects (Claude + Codex), use `--agent both`.
 Responsibility split:
 
 - `phasegate init --agent codex` sets up **project-local artifacts** such as `phasegate.config.json`, `skills/`, `.codex/hooks.json`, and `.codex/skills`
-- `codex features enable codex_hooks` updates the **Codex CLI user environment** and is intentionally left as a manual step
+- `codex features enable hooks` updates the **Codex CLI user environment** and is intentionally left as a manual step
 
 ### Manual setup
 
@@ -31,7 +31,7 @@ Add to `~/.codex/config.toml` (or project `.codex/config.toml`):
 
 ```toml
 [features]
-codex_hooks = true
+hooks = true
 ```
 
 #### 2. Install Phasegate hooks
@@ -148,7 +148,7 @@ Codex documents that the newer `unified_exec` mechanism has incomplete intercept
 
 ### Hooks don't seem to run
 
-- Verify `codex_hooks = true` is set in `config.toml`
+- Verify `hooks = true` is set in `config.toml`
 - Verify `.codex/hooks.json` is in the project root or `~/.codex/`
 - Run `codex --version` to ensure you're on a version that supports hooks
 

package/docs/guide/getting-started.md

@@ -12,6 +12,7 @@ Start with one question: what kind of repository are you setting up?
 |---|---|---|
 | New project with agent hooks | `npx phasegate init --name <project> --agent both --with-husky --with-ci` | `phasegate.config.json`, skills, hooks, agent context files, Husky, and CI targets exist |
 | Existing repository | `npx phasegate install --dry-run` then `npx phasegate install --apply` | Existing hooks/scripts are preserved and `.phasegate/manifest.json` records managed targets |
+| Personal evaluation in a team repository | `npx phasegate install --personal --dry-run` then `npx phasegate install --personal --apply` | Team-owned files stay untouched; `.phasegate-local/config.json` and `.git/info/exclude` local-only entries are recorded |
 | CI-only rollout | `npx phasegate setup:agent --intent ci-only --with-ci --dry-run --json` | The plan explains CI changes without requiring local hooks |
 | Codex-only project | `npx phasegate init --agent codex --with-husky` | `.codex/hooks.json`, `AGENTS.md`, `.codex/skills`, and pre-commit backstop are present |
 | Strict validation rollout | `npx phasegate setup:agent --intent strict --dry-run --json` | The plan lists strict checks, L4 risk, rollback, and validation commands |

package/docs/guide/installation.md

@@ -43,7 +43,7 @@ This deploys 30 skills to `skills/`, creates the agent-facing skill links (for e
 For Codex, project initialization stops at the project boundary. After `npx phasegate init --agent codex`, enable the Codex CLI feature flag manually:
 
 ```bash
-codex features enable codex_hooks
+codex features enable hooks
 ```
 
 ### Existing Projects
@@ -58,6 +58,15 @@ npx phasegate doctor
 
 `install --dry-run` reports whether each target will be created, merged, skipped, or refused. `install --apply` performs the merge, adds package scripts and the `phasegate` devDependency, creates `.claude/skills` and `.codex/skills` links, writes `CLAUDE.md` / `AGENTS.md` managed sections for selected agent targets, writes `.github/workflows/phasegate-aidlc-gate.yml` when CI is enabled, and records managed entries in `.phasegate/manifest.json`. See [Setup Artifacts](setup-artifacts.md) for the full managed target, generated artifact, runtime state, legacy artifact, and user-level setting inventory. <!-- @work-item-id WI-152 --> <!-- @work-item-id WI-169 --> <!-- @work-item-id WI-174 -->
 
+For personal evaluation inside a team-owned repository:
+
+```bash
+npx phasegate install --personal --dry-run
+npx phasegate install --personal --apply
+```
+
+Personal install keeps team-owned files out of both the plan and apply path: `package.json`, `AGENTS.md`, `CLAUDE.md`, `.husky/*`, `.github/workflows/*`, and `.gitignore` are not touched. PhaseGate writes only local artifacts: `.phasegate-local/config.json`, `.phasegate/manifest.json`, and a managed block in `.git/info/exclude`. Codex user-level hook setup is reported as a manual action instead of writing project-local `.codex/hooks.json`. <!-- @work-item-id WI-207 -->
+
 For agent-readable planning before writing files:
 
 ```bash

package/docs/guide/quick-vs-full-mode.md

@@ -62,6 +62,15 @@ Even when you launch `/quick-implementor`, the harness re-checks whether the in-
 
 Introduced in v0.63.0 (ISSUE-006 Story A — config-driven flags + `check-change-category` CLI) and wired into the hook in v0.64.0 (Story B). Each flag can be flipped to `false` only when a project intentionally accepts the risk of merging that category of change without the design ceremony — e.g. early-stage prototypes where new domain files churn freely.
 
+When the escalation is intentional, do not widen `quickMode.allowedCategories` by hand. Start a hook-visible Full Mode session for the approved Unit/WI before the implementation step, then end it after completion:
+
+```bash
+npx phasegate session begin --mode full --unit <unit> --work-item <WI-XXX> --reason "story-implementor Phase 2" --duration 1h
+npx phasegate session end --work-item <WI-XXX>
+```
+
+The PreToolUse hook validates `.phasegate/session.json` by TTL, unit, and dominant category. The `/story-implementor` skill is still the design/TDD guide; the session marker is the authorization the hook can actually observe. <!-- @work-item-id WI-206 -->
+
 ### Dry-running the classifier
 
 Use `check-change-category` to evaluate an arbitrary file list without actually starting an implementation:

package/docs/guide/recipes.md

@@ -24,12 +24,21 @@ npx phasegate baseline --dry-run
 
 Use this when a repository already has meaningful history or custom automation. Treat any refused target as an agent-assisted review task instead of forcing it blindly.
 
+## Personal Evaluation Recipe
+
+```bash
+npx phasegate install --personal --dry-run
+npx phasegate install --personal --apply
+```
+
+Use this inside a team-owned repository when you want local PhaseGate artifacts without changing `package.json`, agent context files, Husky hooks, CI workflows, or team `.gitignore`. <!-- @work-item-id WI-207 -->
+
 ## Agent Hooks Recipe
 
 ```bash
 npx phasegate setup:agent --intent agent-hooks --agent both --with-husky --dry-run --json
 npx phasegate install --agent both --apply
-codex features enable codex_hooks
+codex features enable hooks
 npx phasegate doctor --json
 ```
 

package/docs/guide/setup-artifacts.md

@@ -14,8 +14,9 @@ PhaseGate setup is more than `phasegate.config.json`. A healthy installation is
 | Configuration | `phasegate.config.json`, `package.json` | User owned, PhaseGate assisted | Created by `init`; `install` may merge scripts/devDependency into `package.json` |
 | Generated artifact | `.phasegate/manifest.json`, `.phasegate/backups/*`, `.phasegate/uninstalled-*.json`, `.phasegate/baseline.json` | PhaseGate | Written by lifecycle commands and validators; safe to regenerate only through the owning command |
 | Runtime state/report | `.phasegate/hook-skip-events.jsonl`, explicit `doctor --report-out <path>` output, `reports/regression/*`, resolved `reporting.outputDir` reports | PhaseGate command output | Produced while hooks, doctor, and validation commands run |
+| Personal install artifact | `.phasegate-local/config.json`, `.git/info/exclude` PhaseGate block | One developer on one machine | Created by `phasegate install --personal`; team `.gitignore` and team-owned files are not modified |
 | Legacy artifact | `.harness-hooks.yml`, old Fuse hook files, `.harness/session-state.json`, `.harness/context-priority.json`, `.harness/reports` fallback | Compatibility only | Not required for current install lifecycle unless a project intentionally keeps an archived integration |
-| User-level setting | Codex CLI `codex_hooks` feature flag | User machine | Must be enabled manually with `codex features enable codex_hooks`; project commands do not modify it |
+| User-level setting | Codex CLI `hooks` feature flag | User machine | Must be enabled manually with `codex features enable hooks`; project commands do not modify it |
 
 ## Managed Targets
 

package/docs/guide/troubleshooting.md

@@ -42,7 +42,7 @@ Check both project and user-level state:
 
 ```bash
 npx phasegate doctor --json
-codex features enable codex_hooks
+codex features enable hooks
 npx phasegate phasegate:status --json
 ```
 

package/docs/templates/agent-context/AGENTS.md.template.md

@@ -32,7 +32,7 @@
 
 ### Codex Notes
 
-- Enable native hook execution with `codex features enable codex_hooks` when Codex hooks are installed.
+- Enable native hook execution with `codex features enable hooks` when Codex hooks are installed.
 - Keep local-only Codex settings outside repository-managed targets unless PhaseGate explicitly reports them as managed.
 <!-- phasegate:managed-section:end -->
 

package/docs/templates/personal/git-info-exclude

@@ -0,0 +1,6 @@
+.phasegate/
+.phasegate-local/
+.codex/
+.claude/
+skills/
+phasegate.config.json

package/docs/templates/personal/phasegate-local-config.json

@@ -0,0 +1,7 @@
+{
+  "version": "1.0",
+  "project": {
+    "name": "personal-phasegate"
+  },
+  "personal": true
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phasegate",
-  "version": "0.160.11",
+  "version": "0.160.13",
   "packageManager": "pnpm@10.30.1",
   "description": "Phasegate — AI-agnostic quality defense toolkit. Enforces structural integrity between design intent and code.",
   "license": "MIT",

package/scripts/harness/agent-integration/application/dto/handle-pre-tool-use-dto.ts

@@ -30,4 +30,9 @@ export interface HandlePreToolUseOutput {
   quickModeAllowed?: {
     dominantCategory?: string;
   };
+  fullModeSessionAllowed?: {
+    workItemId?: string;
+    unit?: string;
+    expiresAt?: string;
+  };
 }

package/scripts/harness/agent-integration/application/usecases/handle-pre-tool-use-usecase.ts

@@ -3,6 +3,8 @@
  * @unit agent-integration
  * @story H11-02
  * @work-item-id WI-201
+ * @work-item-id WI-202 / WI-204
+ * @work-item-id WI-206
  *
  * HandlePreToolUseUseCase
  * PreToolUse Hook処理のオーケストレーション
@@ -14,6 +16,10 @@ import type {
 } from "../../domain/ports/baseline-grandfather-query-port.js";
 import type { ConfigQueryPort } from "../../domain/ports/config-query-port.js";
 import type { ErrorGuidance, ErrorGuidanceQueryPort } from "../../domain/ports/error-guidance-query-port.js";
+import type {
+  FullModeSessionQueryPort,
+  FullModeSessionQueryResult,
+} from "../../domain/ports/full-mode-session-query-port.js";
 import type { FullModeRequirementQueryPort } from "../../domain/ports/full-mode-requirement-query-port.js";
 import type { PhaseGateQueryPort } from "../../domain/ports/phase-gate-query-port.js";
 import type { StoryReflectionQueryPort } from "../../domain/ports/story-reflection-query-port.js";
@@ -31,6 +37,7 @@ export interface HandlePreToolUseUseCasePorts {
   baselineGrandfatherQueryPort?: BaselineGrandfatherQueryPort;
   grandfatherLogger?: (reason: string, targetFilePaths: readonly string[]) => void;
   errorGuidanceQueryPort?: ErrorGuidanceQueryPort;
+  fullModeSessionQueryPort?: FullModeSessionQueryPort;
 }
 
 export class HandlePreToolUseInputValidationError extends Error {
@@ -56,6 +63,7 @@ export class HandlePreToolUseUseCase {
   private readonly fullModeRequirementQueryPort?: FullModeRequirementQueryPort;
   private readonly baselineGrandfatherQueryPort?: BaselineGrandfatherQueryPort;
   private readonly errorGuidanceQueryPort?: ErrorGuidanceQueryPort;
+  private readonly fullModeSessionQueryPort?: FullModeSessionQueryPort;
   private readonly grandfatherLogger: (reason: string, targetFilePaths: readonly string[]) => void;
 
   constructor(ports: HandlePreToolUseUseCasePorts) {
@@ -65,6 +73,7 @@ export class HandlePreToolUseUseCase {
     this.fullModeRequirementQueryPort = ports.fullModeRequirementQueryPort;
     this.baselineGrandfatherQueryPort = ports.baselineGrandfatherQueryPort;
     this.errorGuidanceQueryPort = ports.errorGuidanceQueryPort;
+    this.fullModeSessionQueryPort = ports.fullModeSessionQueryPort;
     this.grandfatherLogger =
       ports.grandfatherLogger ??
       ((reason, paths) => process.stderr.write(`[baseline] grandfather skip (${reason}): ${paths.join(", ")}\n`));
@@ -149,12 +158,27 @@ export class HandlePreToolUseUseCase {
           input.targetChanges,
         );
         if (fullModeResult.requiresFullMode) {
+          const unitIdForGuidance = this.deriveUnitIdFromPaths(input.targetFilePaths);
+          const sessionResult = await this.checkFullModeSession(
+            input.targetFilePaths,
+            unitIdForGuidance,
+            fullModeResult.dominantCategory,
+          );
+          if (sessionResult.allowed) {
+            return {
+              shouldBlock: false,
+              fullModeSessionAllowed: {
+                workItemId: sessionResult.workItemId,
+                unit: sessionResult.unit,
+                expiresAt: sessionResult.expiresAt,
+              },
+            };
+          }
           // ISSUE-021: 当該Unitの必須設計文書が揃っている場合は full mode block を bypass
           //（hook がスキルコンテキストを参照できない構造的ギャップへの対処）
           const bypassedByDesignDocs = await this.isFullModeBypassedByDesignDocs(input.targetFilePaths);
           if (!bypassedByDesignDocs) {
             const guidance = await this.resolveGuidance("L2-001");
-            const unitIdForGuidance = this.deriveUnitIdFromPaths(input.targetFilePaths);
             return HandlePreToolUseUseCase.buildFullModeRequiredBlockOutput(
               input.targetFilePaths[0],
               fullModeResult,
@@ -227,6 +251,25 @@ export class HandlePreToolUseUseCase {
     }
   }
 
+  private async checkFullModeSession(
+    targetFilePaths: readonly string[],
+    unitId: string | undefined,
+    dominantCategory: string | undefined,
+  ): Promise<FullModeSessionQueryResult> {
+    if (this.fullModeSessionQueryPort === undefined) {
+      return { active: false, allowed: false };
+    }
+    try {
+      return await this.fullModeSessionQueryPort.check({
+        targetFilePaths,
+        unitId,
+        dominantCategory,
+      });
+    } catch {
+      return { active: false, allowed: false };
+    }
+  }
+
   private static buildFullModeRequiredBlockOutput(
     blockedFilePath: string | undefined,
     result: {
@@ -304,6 +347,12 @@ export class HandlePreToolUseUseCase {
     }
     const suggestedSkill = guidance?.suggestedSkill ?? "/story-implementor";
     lines.push(`次のアクション: ${suggestedSkill} スキルを使用して設計フェーズから開始してください。`);
+    if (unitId !== undefined && unitId !== "") {
+      lines.push(
+        `  実装フェーズ開始時: phasegate session begin --mode full --unit ${unitId} --work-item <WI-XXX> --reason "<reason>" --duration 1h`,
+      );
+      lines.push("  実装完了時: phasegate session end --work-item <WI-XXX>");
+    }
     HandlePreToolUseUseCase.appendGuidanceLines(lines, guidance, unitId);
 
     return {

package/scripts/harness/agent-integration/domain/ports/full-mode-session-query-port.ts

@@ -0,0 +1,22 @@
+// @unit agent-integration
+// @layer domain
+// @work-item-id WI-206
+
+export interface FullModeSessionQueryInput {
+  readonly targetFilePaths: readonly string[];
+  readonly unitId?: string;
+  readonly dominantCategory?: string;
+}
+
+export interface FullModeSessionQueryResult {
+  readonly active: boolean;
+  readonly allowed: boolean;
+  readonly reason?: string;
+  readonly workItemId?: string;
+  readonly unit?: string;
+  readonly expiresAt?: string;
+}
+
+export interface FullModeSessionQueryPort {
+  check(input: FullModeSessionQueryInput): Promise<FullModeSessionQueryResult>;
+}

package/scripts/harness/agent-integration/infrastructure/adapters/file-system-full-mode-session-query-adapter.ts

@@ -0,0 +1,119 @@
+// @unit agent-integration
+// @layer infrastructure
+// @work-item-id WI-206
+
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+
+import type {
+  FullModeSessionQueryInput,
+  FullModeSessionQueryPort,
+  FullModeSessionQueryResult,
+} from '../../domain/ports/full-mode-session-query-port.js';
+import type { ConfigQueryPort } from '../../domain/ports/config-query-port.js';
+import { WriteTargetScope } from '../../domain/value-objects/write-target-scope.js';
+
+interface FullModeSessionDocument {
+  readonly mode?: unknown;
+  readonly unit?: unknown;
+  readonly workItemId?: unknown;
+  readonly allowedCategories?: unknown;
+  readonly reason?: unknown;
+  readonly startedAt?: unknown;
+  readonly expiresAt?: unknown;
+}
+
+export class FileSystemFullModeSessionQueryAdapter implements FullModeSessionQueryPort {
+  constructor(
+    private readonly options: {
+      readonly rootDir: string;
+      readonly configQueryPort: ConfigQueryPort;
+      readonly now?: () => Date;
+    },
+  ) {}
+
+  async check(input: FullModeSessionQueryInput): Promise<FullModeSessionQueryResult> {
+    let document: FullModeSessionDocument;
+    try {
+      const raw = await fs.readFile(path.join(this.options.rootDir, '.phasegate', 'session.json'), 'utf8');
+      document = JSON.parse(raw) as FullModeSessionDocument;
+    } catch {
+      return { active: false, allowed: false, reason: 'session marker not found or unreadable' };
+    }
+
+    if (document.mode !== 'full') {
+      return { active: false, allowed: false, reason: 'session mode is not full' };
+    }
+    if (typeof document.unit !== 'string' || document.unit === '') {
+      return { active: true, allowed: false, reason: 'session unit is missing' };
+    }
+    if (typeof document.workItemId !== 'string' || !/^WI-\d+$/.test(document.workItemId)) {
+      return { active: true, allowed: false, reason: 'session work item is invalid' };
+    }
+    if (typeof document.expiresAt !== 'string' || Number.isNaN(Date.parse(document.expiresAt))) {
+      return { active: true, allowed: false, reason: 'session expiry is invalid' };
+    }
+    if ((this.options.now?.() ?? new Date()).getTime() >= Date.parse(document.expiresAt)) {
+      return {
+        active: true,
+        allowed: false,
+        reason: 'session expired',
+        workItemId: document.workItemId,
+        unit: document.unit,
+        expiresAt: document.expiresAt,
+      };
+    }
+    if (!Array.isArray(document.allowedCategories) || document.allowedCategories.some((value) => typeof value !== 'string')) {
+      return { active: true, allowed: false, reason: 'session allowedCategories is invalid' };
+    }
+    if (input.dominantCategory === undefined || !document.allowedCategories.includes(input.dominantCategory)) {
+      return {
+        active: true,
+        allowed: false,
+        reason: `category ${input.dominantCategory ?? '<unknown>'} is not allowed by session`,
+        workItemId: document.workItemId,
+        unit: document.unit,
+        expiresAt: document.expiresAt,
+      };
+    }
+    if (input.unitId === undefined || input.unitId !== document.unit) {
+      return {
+        active: true,
+        allowed: false,
+        reason: `target unit ${input.unitId ?? '<unknown>'} does not match session unit ${document.unit}`,
+        workItemId: document.workItemId,
+        unit: document.unit,
+        expiresAt: document.expiresAt,
+      };
+    }
+    if (!this.allTargetPathsBelongToUnit(input.targetFilePaths, document.unit)) {
+      return {
+        active: true,
+        allowed: false,
+        reason: `one or more target paths are outside session unit ${document.unit}`,
+        workItemId: document.workItemId,
+        unit: document.unit,
+        expiresAt: document.expiresAt,
+      };
+    }
+
+    return {
+      active: true,
+      allowed: true,
+      workItemId: document.workItemId,
+      unit: document.unit,
+      expiresAt: document.expiresAt,
+    };
+  }
+
+  private allTargetPathsBelongToUnit(targetFilePaths: readonly string[], unit: string): boolean {
+    const projectPaths = this.options.configQueryPort.getProjectPaths();
+    for (const targetFilePath of targetFilePaths) {
+      const scope = WriteTargetScope.fromPath(targetFilePath, projectPaths);
+      if (scope?.unitId !== undefined && scope.unitId !== unit) {
+        return false;
+      }
+    }
+    return true;
+  }
+}

package/scripts/harness/agent-integration/presentation/pre-tool-use-hook.ts

@@ -1,6 +1,8 @@
 /**
  * @layer presentation
  * @unit agent-integration
+ * @work-item-id WI-202 / WI-204
+ * @work-item-id WI-206
  *
  * PreToolUse Hook Adapter
  * Claude Code の PreToolUse Hook エントリポイント
@@ -15,6 +17,7 @@ import { FileSystemStoryReflectionQueryAdapter } from '../infrastructure/adapter
 import { QuickModeFullModeRequirementAdapter } from '../infrastructure/adapters/quick-mode-full-mode-requirement-adapter.js';
 import { CiGovernanceBaselineGrandfatherAdapter } from '../infrastructure/adapters/ci-governance-baseline-grandfather-adapter.js';
 import { HarnessErrorGuidanceAdapter } from '../infrastructure/adapters/harness-error-guidance-adapter.js';
+import { FileSystemFullModeSessionQueryAdapter } from '../infrastructure/adapters/file-system-full-mode-session-query-adapter.js';
 import { createQuickModeCompositionRoot } from '../../quick-mode/composition-root.js';
 import * as path from 'node:path';
 import * as fs from 'node:fs/promises';
@@ -152,6 +155,10 @@ async function main(): Promise<void> {
     const errorGuidanceQueryPort = new HarnessErrorGuidanceAdapter({
       rootDir: path.dirname(configPath),
     });
+    const fullModeSessionQueryPort = new FileSystemFullModeSessionQueryAdapter({
+      rootDir: path.dirname(configPath),
+      configQueryPort,
+    });
     const useCase = new HandlePreToolUseUseCase({
       configQueryPort,
       phaseGateQueryPort,
@@ -159,6 +166,7 @@ async function main(): Promise<void> {
       fullModeRequirementQueryPort,
       baselineGrandfatherQueryPort,
       errorGuidanceQueryPort,
+      fullModeSessionQueryPort,
     });
 
     const callerSkill = input.caller_skill ?? process.env.PHASEGATE_CALLER_SKILL;
@@ -183,6 +191,12 @@ async function main(): Promise<void> {
       const suffix = cat !== undefined && cat !== '' ? `, category=${cat}` : '';
       process.stderr.write(`phasegate: write allowed (Quick Mode${suffix})\n`);
     }
+    if (output.fullModeSessionAllowed !== undefined) {
+      const session = output.fullModeSessionAllowed;
+      const workItem = session.workItemId !== undefined ? `, workItem=${session.workItemId}` : '';
+      const unit = session.unit !== undefined ? `, unit=${session.unit}` : '';
+      process.stderr.write(`phasegate: write allowed (Full Mode session${workItem}${unit})\n`);
+    }
 
     process.exit(0);
   } catch (error) {

package/scripts/harness/installation/application/usecases/run-install.ts

@@ -7,6 +7,7 @@
 // @work-item-id WI-177
 // @work-item-id WI-182
 // @work-item-id WI-183
+// @work-item-id WI-207
 
 import { mkdir, readFile, writeFile, copyFile, chmod, access, lstat, readlink, symlink } from "node:fs/promises";
 import { dirname, join } from "node:path";
@@ -18,7 +19,7 @@ import type { ManifestRepositoryPort } from "../ports/manifest-repository-port.j
 import type { HashCalculatorPort } from "../ports/hash-calculator-port.js";
 
 type InstallAction = "missing" | "will-merge" | "will-skip" | "will-overwrite";
-type StrategyType = "json" | "shell" | "yaml-add" | "package-json" | "markdown-managed";
+type StrategyType = "json" | "shell" | "yaml-add" | "package-json" | "markdown-managed" | "text-managed" | "copy";
 
 export interface InstallPlanItem {
   readonly path: string;
@@ -45,6 +46,7 @@ export interface RunInstallInput {
   readonly skillSet?: "core" | "all";
   readonly workflow?: "standard" | "strict";
   readonly agent?: "claude" | "codex" | "both";
+  readonly personal?: boolean;
 }
 
 export interface RunInstallResult {
@@ -79,6 +81,8 @@ const SHELL_BEGIN = "# === phasegate managed (BEGIN) ===";
 const SHELL_END = "# === phasegate managed (END) ===";
 const MARKDOWN_BEGIN = "<!-- phasegate:managed-section:start -->";
 const MARKDOWN_END = "<!-- phasegate:managed-section:end -->";
+const TEXT_BEGIN = "# phasegate personal install exclude (BEGIN)";
+const TEXT_END = "# phasegate personal install exclude (END)";
 
 function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -152,6 +156,14 @@ function mergeShell(existing: string | null, incoming: string): string {
   return `${existing.replace(/\s*$/, "\n\n")}${block}\n`;
 }
 
+function mergeTextManaged(existing: string | null, incoming: string): string {
+  const block = `${TEXT_BEGIN}\n${incoming.trim()}\n${TEXT_END}`;
+  if (existing === null || existing.trim().length === 0) return `${block}\n`;
+  const pattern = new RegExp(`${escapeRegExp(TEXT_BEGIN)}[\\s\\S]*?${escapeRegExp(TEXT_END)}`);
+  if (pattern.test(existing)) return existing.replace(pattern, block).replace(/\s*$/, "\n");
+  return `${existing.replace(/\s*$/, "\n\n")}${block}\n`;
+}
+
 function managedMarkdownBlock(content: string): string {
   const start = content.indexOf(MARKDOWN_BEGIN);
   const end = content.indexOf(MARKDOWN_END);
@@ -282,7 +294,9 @@ export class RunInstallUseCase {
     const skillSet = input.skillSet ?? "all";
     const workflow = input.workflow ?? "standard";
     const agent = input.agent ?? (includeClaude && includeCodex ? "both" : includeCodex ? "codex" : "claude");
-    const targets = this.createTargets({ includeClaude, includeCodex, includeHusky, includeCi });
+    const targets = input.personal
+      ? this.createPersonalTargets()
+      : this.createTargets({ includeClaude, includeCodex, includeHusky, includeCi });
     const existingManifest = await this.manifestRepository.load(input.projectRoot);
     const baseManifest = existingManifest ?? DeploymentManifest.create(input.phasegateVersion);
     let manifest = baseManifest;
@@ -363,7 +377,7 @@ export class RunInstallUseCase {
       }
     }
 
-    const linkPaths = [
+    const linkPaths = input.personal ? [] : [
       ...(includeClaude ? [".claude/skills"] : []),
       ...(includeCodex ? [".codex/skills"] : []),
     ];
@@ -400,6 +414,19 @@ export class RunInstallUseCase {
       }
     }
 
+    if (input.personal && includeCodex) {
+      plan.push({
+        path: "~/.codex/hooks.json",
+        action: "will-skip",
+        repairMode: "manual",
+        strategy: "json",
+        changed: false,
+        summary: "~/.codex/hooks.json: personal mode does not write user-level Codex settings; configure hooks manually",
+        diff: "manual user-level Codex hook setup required",
+        skillHint: null,
+      });
+    }
+
     if (input.apply && changed.length > 0) {
       try {
         await this.manifestRepository.save(input.projectRoot, manifest);
@@ -498,8 +525,26 @@ export class RunInstallUseCase {
     ];
   }
 
+  private createPersonalTargets(): readonly InstallTarget[] {
+    return [
+      {
+        path: ".phasegate-local/config.json",
+        strategy: "copy" as const,
+        templatePath: "docs/templates/personal/phasegate-local-config.json",
+      },
+      {
+        path: ".git/info/exclude",
+        strategy: "text-managed" as const,
+        templatePath: "docs/templates/personal/git-info-exclude",
+        block: { start: TEXT_BEGIN, end: TEXT_END, content: "phasegate personal install exclude block" },
+      },
+    ];
+  }
+
   private repairMode(target: InstallTarget, before: string | null): RepairMode {
     if (target.strategy === "shell") return shellRepairMode(before);
+    if (target.strategy === "text-managed") return "mechanical";
+    if (target.strategy === "copy") return "mechanical";
     if (target.strategy === "json") return jsonRepairMode(before);
     if (target.strategy === "markdown-managed") return "mechanical";
     return "mechanical";
@@ -513,7 +558,9 @@ export class RunInstallUseCase {
 
   private merge(target: InstallTarget, before: string | null, template: string, version: string): string {
     if (target.strategy === "yaml-add") return before ?? template;
+    if (target.strategy === "copy") return before ?? template;
     if (target.strategy === "shell") return mergeShell(before, template);
+    if (target.strategy === "text-managed") return mergeTextManaged(before, template);
     if (target.strategy === "markdown-managed") return mergeManagedMarkdown(before, template);
     if (target.strategy === "package-json") {
       const existing = before === null ? {} : (JSON.parse(before) as unknown);

package/scripts/harness/installation/application/usecases/run-uninstall.ts

@@ -3,6 +3,7 @@
 // @work-item-id WI-147
 // @work-item-id WI-174
 // @work-item-id WI-199
+// @work-item-id WI-207
 
 import { access, copyFile, lstat, mkdir, readFile, readlink, rm, rmdir, writeFile } from "node:fs/promises";
 import { dirname, join, relative, resolve } from "node:path";
@@ -12,7 +13,7 @@ import type { HashCalculatorPort } from "../ports/hash-calculator-port.js";
 import type { ManifestRepositoryPort } from "../ports/manifest-repository-port.js";
 
 type UninstallAction = "missing-manifest" | "delete" | "unlink" | "reverse-merge" | "skip" | "refuse";
-type StrategyType = "created" | "json" | "shell" | "package-json" | "markdown-managed" | "symlink" | "yaml-add" | "unknown";
+type StrategyType = "created" | "json" | "shell" | "package-json" | "markdown-managed" | "symlink" | "yaml-add" | "text-managed" | "unknown";
 
 export interface UninstallPlanItem {
   readonly path: string;
@@ -47,6 +48,8 @@ const SHELL_BEGIN = "# === phasegate managed (BEGIN) ===";
 const SHELL_END = "# === phasegate managed (END) ===";
 const MARKDOWN_BEGIN = "<!-- phasegate:managed-section:start -->";
 const MARKDOWN_END = "<!-- phasegate:managed-section:end -->";
+const TEXT_BEGIN = "# phasegate personal install exclude (BEGIN)";
+const TEXT_END = "# phasegate personal install exclude (END)";
 const PHASEGATE_SCRIPT_PREFIX = "phasegate:";
 const PROTECTED_UNINSTALL_PATHS = new Set(["package.json", "package-lock.json"]);
 
@@ -119,6 +122,11 @@ export function reverseManagedMarkdown(currentContent: string): string {
   return currentContent.replace(pattern, "\n").replace(/\n{3,}/g, "\n\n").replace(/\s*$/, "\n").replace(/^\n/, "");
 }
 
+export function reverseTextManaged(currentContent: string): string {
+  const pattern = new RegExp(`\\n?${escapeRegExp(TEXT_BEGIN)}[\\s\\S]*?${escapeRegExp(TEXT_END)}\\n?`);
+  return currentContent.replace(pattern, "\n").replace(/\n{3,}/g, "\n\n").replace(/\s*$/, "\n").replace(/^\n/, "");
+}
+
 export function reversePackageJsonMerge(currentContent: string): string {
   const parsed = JSON.parse(currentContent) as unknown;
   const result = isRecord(parsed) ? { ...parsed } : {};
@@ -312,6 +320,7 @@ export class RunUninstallUseCase {
   private async reverseMerged(harnessRoot: string, path: string, currentContent: string, strategy: StrategyType): Promise<string> {
     if (strategy === "shell") return currentContent.includes(SHELL_BEGIN) ? reverseShellMerge(currentContent) : currentContent;
     if (strategy === "markdown-managed") return currentContent.includes(MARKDOWN_BEGIN) ? reverseManagedMarkdown(currentContent) : currentContent;
+    if (strategy === "text-managed") return currentContent.includes(TEXT_BEGIN) ? reverseTextManaged(currentContent) : currentContent;
     if (strategy === "package-json") return reversePackageJsonMerge(currentContent);
     if (strategy === "json") return reverseJsonMerge(currentContent, await readFile(join(harnessRoot, this.templateFor(path)), "utf8"));
     throw new Error(`Unsupported merged strategy: ${strategy}`);
@@ -322,6 +331,7 @@ export class RunUninstallUseCase {
     if (mode === "created") return path.endsWith(".yml") || path.endsWith(".yaml") ? "yaml-add" : "created";
     if (path === "package.json") return "package-json";
     if (path === "AGENTS.md" || path === "CLAUDE.md") return "markdown-managed";
+    if (path === ".git/info/exclude") return "text-managed";
     if (path.endsWith(".json")) return "json";
     if (path.startsWith(".husky/")) return "shell";
     return "unknown";

package/scripts/harness/installation/presentation/cli/install-handler.ts

@@ -2,6 +2,7 @@
 // @layer presentation
 // @work-item-id WI-146
 // @work-item-id WI-175
+// @work-item-id WI-207
 
 import type { RunInstallUseCase } from "../../application/usecases/run-install.js";
 
@@ -20,6 +21,7 @@ export interface InstallHandlerInput {
   readonly skillSet?: "core" | "all";
   readonly workflow?: "standard" | "strict";
   readonly agent?: "claude" | "codex" | "both";
+  readonly personal?: boolean;
 }
 
 export interface InstallHandlerResult {
@@ -39,7 +41,7 @@ export class InstallHandler {
       };
     }
     const lines = [
-      input.apply ? "phasegate install apply" : "phasegate install dry-run",
+      input.apply ? `phasegate install${input.personal ? " --personal" : ""} apply` : `phasegate install${input.personal ? " --personal" : ""} dry-run`,
       ...result.plan.map((item) => {
         const hint = item.skillHint ? `; hint: ${item.skillHint}` : "";
         return `- ${item.path}: ${item.action} (${item.repairMode}, ${item.strategy}); diff: ${item.diff}${hint}`;

package/scripts/harness/main.ts

@@ -14,6 +14,9 @@
  * @work-item-id WI-197
  * @work-item-id WI-200
  * @work-item-id WI-201
+ * @work-item-id WI-202 / WI-204
+ * @work-item-id WI-205
+ * @work-item-id WI-206
  *
  * Phasegate CLI エントリポイント。
  * 各Unitの Composition Root からハンドラーを取得し、コマンドに応じてディスパッチする。
@@ -27,6 +30,7 @@ import {
   readdir as fsReaddir,
   readlink as fsReadlink,
   rename as fsRename,
+  rm as fsRm,
   writeFile as fsWriteFile,
 } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";
@@ -167,7 +171,7 @@ Setup:
   scaffold-wi <unit|_cross> <story|issue|chore>
                                Create docs/inception/{unit}/WI-XXX/description.md
   emit-agent-rules             Print AGENTS.md / CLAUDE.md WI workflow rules block
-  install                      Install phasegate managed files (--dry-run|--apply, --force)
+  install                      Install phasegate managed files (--dry-run|--apply, --force, --personal)
   uninstall                    Uninstall phasegate managed files (--dry-run|--apply, --force)
   reconcile                    Reconcile phasegate managed files (--dry-run|--apply, --force)
   setup:agent                  Diagnose repo setup and produce/apply an agent-readable setup plan
@@ -180,6 +184,7 @@ Commands:
   migrate                      Migrate phasegate.config.json (--schema v3, --config <path>)
   migrate work-items           Migrate legacy inception work item directories (--dry-run|--apply)
   work-items:status            Report or apply derived WI frontmatter status (--dry-run|--apply, --id, --fail-on-stale, --json)
+  session begin|end            Manage hook-visible Full Mode sessions
 
   render-errors                Render harness errors (--format human|agent|ci)
   validate-fix                 Validate fix examples (--code <code>)
@@ -223,6 +228,8 @@ Gate semantics:
   ci:check-repetition          Check error repetition (--code <errorCode>, --reset, --json)
   baseline                     Create retrofit baseline snapshot (--dry-run, --force, --paths <glob,glob,...>, --json)
   scaffold-design              Scaffold a design doc (--unit <id>, --phase <logical|domain|uiux|unit-test|it-test>, --dry-run|--apply, --force, --json)
+  session begin                Start a Full Mode session (--mode full, --unit, --work-item, --reason, --duration)
+  session end                  End a Full Mode session (--work-item)
 
   skill:execute-tdd-cycle      Execute TDD cycle (--unit, --story, --desc, --phase RED|GREEN|REFACTOR, --passed)
   skill:check-coverage         Check coverage (--story <storyId>, --json)
@@ -476,6 +483,109 @@ function validateKnownFlags(args: readonly string[], known: readonly string[]):
   return null;
 }
 
+const FULL_MODE_SESSION_ALLOWED_CATEGORIES = Object.freeze([
+  "domain",
+  "application",
+  "infrastructure",
+  "presentation",
+  "config",
+]);
+
+interface FullModeSessionFile {
+  readonly mode: "full";
+  readonly unit: string;
+  readonly workItemId: string;
+  readonly allowedCategories: readonly string[];
+  readonly reason: string;
+  readonly startedAt: string;
+  readonly expiresAt: string;
+}
+
+function parseSessionDurationMs(raw: string | undefined): number {
+  const value = raw ?? "1h";
+  const match = value.match(/^(\d+)(s|m|h)$/);
+  if (match === null) {
+    throw new Error("Invalid --duration. Use values like 30m, 1h, or 3600s.");
+  }
+  const amount = Number(match[1]);
+  if (!Number.isSafeInteger(amount) || amount <= 0) {
+    throw new Error("Invalid --duration. Duration must be a positive integer.");
+  }
+  const unit = match[2];
+  const multiplier = unit === "s" ? 1_000 : unit === "m" ? 60_000 : 3_600_000;
+  return amount * multiplier;
+}
+
+function validateWorkItemId(value: string | undefined): string {
+  if (value === undefined || !/^WI-\d+$/.test(value)) {
+    throw new Error("--work-item must be a WI id such as WI-206.");
+  }
+  return value;
+}
+
+function validateSessionUnit(value: string | undefined): string {
+  if (value === undefined || !/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(value)) {
+    throw new Error("--unit must be a non-empty unit id.");
+  }
+  return value;
+}
+
+async function readFullModeSession(sessionPath: string): Promise<FullModeSessionFile | null> {
+  try {
+    return JSON.parse(await fsReadFile(sessionPath, "utf8")) as FullModeSessionFile;
+  } catch {
+    return null;
+  }
+}
+
+async function beginFullModeSession(rootDir: string, args: readonly string[]): Promise<FullModeSessionFile> {
+  if ((parseFlag(args, "--mode") ?? "full") !== "full") {
+    throw new Error("--mode must be full.");
+  }
+  const unit = validateSessionUnit(parseFlag(args, "--unit"));
+  const workItemId = validateWorkItemId(parseFlag(args, "--work-item"));
+  const reason = parseFlag(args, "--reason");
+  if (reason === undefined || reason.trim() === "") {
+    throw new Error("--reason is required.");
+  }
+  const startedAt = new Date();
+  const expiresAt = new Date(startedAt.getTime() + parseSessionDurationMs(parseFlag(args, "--duration")));
+  const session: FullModeSessionFile = {
+    mode: "full",
+    unit,
+    workItemId,
+    allowedCategories: FULL_MODE_SESSION_ALLOWED_CATEGORIES,
+    reason,
+    startedAt: startedAt.toISOString(),
+    expiresAt: expiresAt.toISOString(),
+  };
+  const phasegateDir = join(rootDir, ".phasegate");
+  await fsMkdir(phasegateDir, { recursive: true });
+  await fsWriteFile(join(phasegateDir, "session.json"), `${JSON.stringify(session, null, 2)}\n`, "utf8");
+  return session;
+}
+
+async function endFullModeSession(
+  rootDir: string,
+  args: readonly string[],
+): Promise<{ removed: boolean; session: FullModeSessionFile | null }> {
+  const sessionPath = join(rootDir, ".phasegate", "session.json");
+  const session = await readFullModeSession(sessionPath);
+  const requestedWorkItemId = parseFlag(args, "--work-item");
+  if (requestedWorkItemId !== undefined && session?.workItemId !== requestedWorkItemId) {
+    throw new Error(`Active session work item is ${session?.workItemId ?? "<none>"}, not ${requestedWorkItemId}.`);
+  }
+  try {
+    await fsRm(sessionPath);
+    return { removed: true, session };
+  } catch (error) {
+    if ((error as NodeJS.ErrnoException).code === "ENOENT") {
+      return { removed: false, session: null };
+    }
+    throw error;
+  }
+}
+
 const SUBCOMMAND_HELP: Record<string, string> = {
   init: `Usage: phasegate init [options]
 
@@ -515,6 +625,7 @@ Options:
   --workflow <standard|strict>    Rendered agent context workflow mode (default: standard)
   --with-husky                    Include Husky hook targets
   --with-ci                       Include GitHub Actions target
+  --personal                      Use local-only install: no package.json, agent docs, Husky, CI, or .gitignore writes
   --json                          Output machine-readable JSON
   --help, -h                      Show this help`,
   "setup:agent": `Usage: phasegate setup:agent [options]
@@ -663,6 +774,22 @@ Options:
   --force                    Overwrite an existing target when applying.
   --json                     Output machine-readable JSON.
   --help, -h                 Show this help`,
+  session: `Usage: phasegate session <begin|end> [options]
+
+Manage hook-visible Full Mode sessions.
+
+Begin options:
+  --mode full                Required session mode.
+  --unit <id>                Unit id allowed by the session.
+  --work-item <WI-XXX>       Work item authorizing the session.
+  --reason <text>            Human-readable reason for audit.
+  --duration <ttl>           TTL such as 30m, 1h, or 3600s. Default: 1h.
+  --json                     Output machine-readable JSON.
+
+End options:
+  --work-item <WI-XXX>       Optional safety check before removing the session.
+  --json                     Output machine-readable JSON.
+  --help, -h                 Show this help`,
   "ci:generate-template": `Usage: phasegate ci:generate-template [options]
 
 Generates a CI template configuration.
@@ -1002,7 +1129,7 @@ function buildSetupCompleteness(input: {
   ];
 
   const externalActions: string[] = [];
-  if (includeCodex) externalActions.push("Run codex features enable codex_hooks if Codex hooks are not enabled for the user.");
+  if (includeCodex) externalActions.push("Run codex features enable hooks if Codex hooks are not enabled for the user.");
   if (input.withCi) externalActions.push("Trigger or inspect the first GitHub Actions PhaseGate workflow run.");
   if (input.intent === "strict") externalActions.push("Confirm team policy accepts strict local and CI enforcement.");
   entries.push({
@@ -1108,7 +1235,7 @@ function buildAgentReadiness(input: {
         "setup:agent will create or refresh the AGENTS.md PhaseGate managed section.",
         "setup:agent will deploy bundled skills for Codex.",
       ],
-      nextAction: "Run setup:agent --agent codex --apply, then enable codex_hooks at user level if needed.",
+      nextAction: "Run setup:agent --agent codex --apply, then enable hooks at user level if needed.",
       risk: "Codex user-level hook feature enablement remains a manual external check.",
     }),
     setupReadinessEntry({
@@ -1338,8 +1465,8 @@ async function buildConfigChangePlan(rootDir: string, intent: ConfigChangeIntent
     "codex-hooks": {
       targets: [".codex/hooks.json", "AGENTS.md", ".codex/skills"],
       managedTargets: [".codex/hooks.json", "AGENTS.md", ".codex/skills"],
-      externalActions: [{ id: "codex-hooks-feature", label: "Enable Codex user-level hooks feature.", command: "codex features enable codex_hooks", blocking: true }],
-      commands: ["phasegate install --agent codex --apply", "codex features enable codex_hooks"],
+      externalActions: [{ id: "codex-hooks-feature", label: "Enable Codex user-level hooks feature.", command: "codex features enable hooks", blocking: true }],
+      commands: ["phasegate install --agent codex --apply", "codex features enable hooks"],
       validations: ["phasegate doctor --json", "phasegate phasegate:status --json"],
       risks: ["Codex apply_patch writes still require the pre-commit backstop for full coverage."],
     },
@@ -1830,7 +1957,7 @@ async function main(): Promise<void> {
           console.log("  3. Edit .claude/scripts/hook-config.json to set target directories");
         }
         if (deployCodex) {
-          console.log(`  ${deployClaude ? "4" : "3"}. Enable Codex hooks: codex features enable codex_hooks`);
+          console.log(`  ${deployClaude ? "4" : "3"}. Enable Codex hooks: codex features enable hooks`);
           console.log(
             `  ${deployClaude ? "5" : "4"}. (Recommended) Install pre-commit backstop: rerun with --with-husky or set up husky manually`,
           );
@@ -1919,7 +2046,7 @@ async function main(): Promise<void> {
       }
 
       case "install": {
-        const KNOWN_INSTALL_FLAGS = ["--dry-run", "--apply", "--force", "--json", "--agent", "--skills", "--workflow", "--with-husky", "--with-ci"];
+        const KNOWN_INSTALL_FLAGS = ["--dry-run", "--apply", "--force", "--json", "--agent", "--skills", "--workflow", "--with-husky", "--with-ci", "--personal"];
         const flagError = validateKnownFlags(args, KNOWN_INSTALL_FLAGS);
         if (flagError) {
           console.error(flagError);
@@ -1940,6 +2067,7 @@ async function main(): Promise<void> {
         }
         const includeClaude = agent === "claude" || agent === "both";
         const includeCodex = agent === "codex" || agent === "both";
+        const personal = hasFlag(args, "--personal");
         const mod = createInstallationModule();
         const phasegateVersion = await getHarnessVersion(harnessRoot);
         const result = await mod.installHandler.execute({
@@ -1951,11 +2079,12 @@ async function main(): Promise<void> {
           force: hasFlag(args, "--force"),
           includeClaude,
           includeCodex,
-          includeHusky: true,
-          includeCi: true,
+          includeHusky: personal ? false : true,
+          includeCi: personal ? false : true,
           skillSet: skillSetRaw,
           workflow: parseWorkflowMode(workflowRaw),
           agent,
+          personal,
           json,
         });
         console.log(result.stdout);
@@ -2081,6 +2210,61 @@ async function main(): Promise<void> {
         break;
       }
 
+      case "session": {
+        const subcommand = args[1];
+        const knownFlags = ["--mode", "--unit", "--work-item", "--reason", "--duration", "--json"];
+        const flagError = validateKnownFlags(args.slice(2), knownFlags);
+        if (flagError) {
+          console.error(flagError);
+          process.exit(2);
+        }
+        if (subcommand === "begin") {
+          try {
+            const session = await beginFullModeSession(rootDir, args);
+            if (json) {
+              console.log(JSON.stringify({ ok: true, sessionPath: ".phasegate/session.json", session }, null, 2));
+            } else {
+              console.log(
+                `Full Mode session started: ${session.workItemId} unit=${session.unit} expiresAt=${session.expiresAt}`,
+              );
+            }
+            process.exit(0);
+          } catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            if (json) {
+              console.log(JSON.stringify({ ok: false, error: message }, null, 2));
+            } else {
+              console.error(`Error: ${message}`);
+            }
+            process.exit(2);
+          }
+        }
+        if (subcommand === "end") {
+          try {
+            const result = await endFullModeSession(rootDir, args);
+            if (json) {
+              console.log(JSON.stringify({ ok: true, ...result }, null, 2));
+            } else if (result.removed) {
+              console.log(`Full Mode session ended: ${result.session?.workItemId ?? "<unknown>"}`);
+            } else {
+              console.log("No Full Mode session was active.");
+            }
+            process.exit(0);
+          } catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            if (json) {
+              console.log(JSON.stringify({ ok: false, error: message }, null, 2));
+            } else {
+              console.error(`Error: ${message}`);
+            }
+            process.exit(2);
+          }
+        }
+        console.error("Error: session subcommand must be begin or end.");
+        process.exit(2);
+        break;
+      }
+
       case "uninstall": {
         const KNOWN_UNINSTALL_FLAGS = ["--dry-run", "--apply", "--force", "--json"];
         const flagError = validateKnownFlags(args, KNOWN_UNINSTALL_FLAGS);

package/scripts/harness/quick-mode/domain/services/quick-mode-judgment-engine.ts

@@ -1,6 +1,7 @@
 /**
  * @layer domain
  * @unit quick-mode
+ * @work-item-id WI-204
  *
  * ChangedFile[]をChangeClassificationに変換し、3拒否ルールを評価してQuickModeEligibilityを返すドメインサービス
  */

package/scripts/harness/setup/skill-deployer.ts

@@ -3,6 +3,7 @@
 // @work-item-id WI-086 / WI-087
 // @work-item-id WI-127
 // @work-item-id WI-184
+// @work-item-id WI-202
 // Note: import.meta.url を使わず、呼び出し元 (main.ts) がパスを解決して渡す設計。
 
 import { promises as fs } from "node:fs";

package/skills/README.md

@@ -16,6 +16,8 @@
 
 `.agent/skills` は旧 setup 由来の互換パスです。新規導入では管理対象にしません。<!-- @work-item-id WI-157 -->
 
+`phasegate install --personal` はチーム所有リポジトリでの個人評価用です。このモードでは `.claude/skills` / `.codex/skills` のリンクを作成せず、`.phasegate-local/config.json` と `.git/info/exclude` の local-only managed block だけを扱います。通常の共有導入が必要になった時点で `phasegate install --dry-run` / `phasegate install --apply` を使います。<!-- @work-item-id WI-207 -->
+
 ## 新しいスキルの追加
 
 新しいスキルを追加する場合は、この `skills` ディレクトリに直接追加してください。あわせて `docs/guide/skills-overview.md`、README の skill 数、必要なら `skills/phasegate-toolkit-guide/SKILL.md` の参照先を更新します。シンボリックリンクを通じて、対応エージェントから利用可能になります。<!-- @work-item-id WI-154 -->

package/skills/phasegate-config-doctor/SKILL.md

@@ -35,6 +35,8 @@ phasegate を導入した直後の config は単純な default で、実プロ
 | hook config | `.claude/scripts/hook-config.json` | 既存 hook 設定確認 |
 | doctor report | 明示された report path、またはユーザーが指定した `.phasegate/last-doctor-report.json` | `repairMode` / `repairHint` / `suggestedSkill` の確認 |
 | manifest | `.phasegate/manifest.json` | install / reconcile / uninstall の managed target と hash 状態確認 |
+| personal config | `.phasegate-local/config.json` | `install --personal` の local-only 設定確認 |
+| git local exclude | `.git/info/exclude` | `install --personal` の repository-local ignore block 確認 |
 | Claude hooks | `.claude/settings.json` | managed hook JSON と user customization の確認 |
 | Codex hooks | `.codex/hooks.json` | managed hook JSON と Codex hook 配線確認 |
 | Husky scripts | `.husky/pre-commit`, `.husky/commit-msg`, `.husky/pre-push` | pre-commit backstop と bypass audit の確認 |
@@ -127,11 +129,12 @@ product-architect で Unit を作り、いくつかの logical_design を書い
 #### 観点 9: setup lifecycle と doctor finding
 
 - `phasegate doctor --json` の finding に `repairMode: "ai-assisted"` と `suggestedSkill.skillName = "phasegate-config-doctor"` がある → 本 skill が merge 方針、保持する user content、実行すべき `install --apply` / `--force` / `reconcile --apply` を提案する
+- チーム所有リポジトリで個人評価だけを行う相談では、通常の `install --apply` ではなく `phasegate install --personal --dry-run` を先に提案する。personal install は `package.json`, `AGENTS.md`, `CLAUDE.md`, `.husky/*`, `.github/workflows/*`, `.gitignore`, `.codex/hooks.json`, skill symlink を変更対象にしない。変更対象は `.phasegate-local/config.json`, `.phasegate/manifest.json`, `.git/info/exclude` の managed block に限定し、Codex user-level hook setup は manual action として扱う。<!-- @work-item-id WI-207 -->
 - Claude-only / Codex-only 導入後は `phasegate doctor --agent claude --json` または `phasegate doctor --agent codex --json` を使って selected agent の readiness を読む。`scopedOutFindings` は未選択 agent の `not-applicable` 情報なので、ユーザーがその agent を導入したいと言っていない限り repair 提案にしない。`repairHint: null` / `suggestedSkill: null` は意図的な抑制で、`currentScopeRepairTarget: false` と `repairModeApplicability: "only-if-agent-selected"` は raw `repairMode` が current scope の修復指示ではないという印である。<!-- @work-item-id WI-178, WI-179, WI-180 -->
 - `repairHint` がある mechanical finding → 原則として hint のコマンドを優先し、実行前に対象ファイルと manifest の差分を確認
 - manifest parse error → `.phasegate/manifest.json` を手で修復する前に backup / uninstall / reinstall の選択肢を提示
 - reconcile / uninstall が refuse → user modified managed target として扱い、`--force` のリスクと backup path を説明して承認を取る
-- Codex の `codex_hooks` feature flag は user-level setting。project-local `install` では変更されないため、必要なら `codex features enable codex_hooks` を案内
+- Codex の `hooks` feature flag は user-level setting。project-local `install` では変更されないため、必要なら `codex features enable hooks` を案内。`codex_hooks` は legacy alias として扱う。<!-- @work-item-id WI-205 -->
 - Codex native `apply_patch` bypass は hook で完全捕捉できない。`.husky/pre-commit` の `phasegate pre-commit` が backstop になるため、Husky 配線を診断対象に含める
 - 初回 setup / retrofit / CI-only / agent-hooks の判断が曖昧な場合は `npx phasegate setup:agent --dry-run --json` を先に使い、検出済み状態、質問、変更案、rollback、validation を根拠として提案する。<!-- @work-item-id WI-172 -->
 - Claude Code setup 相談では `npx phasegate setup:agent --agent claude --dry-run --json` を先に使い、`plan.agentReadiness` の `claude` / `shared` が `configured` なら setup 修復ではなく WI 起票、inception 計画、product reflection、validation の順で作業開始を案内する。`setup:agent --apply --json` または `install --apply --json` の structured `error` がある場合は、`target`, `operation`, `code`, `likelyCause`, `recovery`, `partialChanges` を読み、`.claude` が file として存在する path conflict、sandbox/permission denial、PhaseGate managed target hash mismatch を区別して説明する。<!-- @work-item-id WI-177 -->

package/skills/phasegate-toolkit-guide/SKILL.md

@@ -130,6 +130,8 @@ docs/guide/                          # phasegate リポジトリ自体 (dogfood)
 - 既存プロジェクト導入: `docs/guide/retrofit-adoption.md`
 - setup artifact / doctor finding / legacy artifact: `docs/guide/setup-artifacts.md`
 
+チーム所有リポジトリで個人評価だけを行いたい場合は、`docs/guide/installation.md` の personal install セクションを読む。`phasegate install --personal` は `package.json`、`AGENTS.md`、`CLAUDE.md`、`.husky/*`、`.github/workflows/*`、`.gitignore`、`.codex/hooks.json`、skill symlink を変更せず、`.phasegate-local/config.json` と `.git/info/exclude` の managed block を使う。Codex user-level hook setup は manual action として説明する。<!-- @work-item-id WI-207 -->
+
 `setup-artifacts.md` は managed target / generated artifact / runtime state / legacy artifact / user-level setting の分類を持つ。`doctor --report-out` は明示 path への出力で、`.phasegate/last-doctor-report.json` は固定生成物ではない点もここを参照する。<!-- @work-item-id WI-153 -->
 
 Claude-only / Codex-only setup の確認では、full `phasegate doctor` と scoped doctor を区別する。ユーザーが `setup:agent --agent claude` を選んだ場合は `phasegate doctor --agent claude --json` を優先し、`scopedOutFindings` の Codex finding は「未選択 agent の not-applicable 情報」であり修復対象ではないと説明する。`repairHint: null` / `suggestedSkill: null` は意図的な抑制で、`currentScopeRepairTarget: false` と `repairModeApplicability: "only-if-agent-selected"` は `repairMode` が current scope の修復指示ではないという印である。full doctor は両 agent を導入したい場合の診断として扱う。<!-- @work-item-id WI-178, WI-179, WI-180 -->

package/skills/story-implementor/SKILL.md

@@ -263,6 +263,23 @@ TDD実装の順序・スコープ・不明点を整理し、人間の承認を
 ### 開始条件
 - 人間がPhase 1の計画を承認した
 - QAセクションの全[Question]に[Answer]が記入されている（QAがある場合）
+- Quick Mode の許可カテゴリ外（domain/application/infrastructure/presentation/config）を変更する場合、実装前に hook-visible Full Mode session を開始している
+
+### Full Mode session
+
+Quick Mode の許可カテゴリ外を変更する Phase 2 では、手作業で `quickMode.allowedCategories` を広げない。以下の CLI で対象 Unit / WI に限定した一時 session を作成し、実装完了時に終了する。
+
+```bash
+phasegate session begin --mode full --unit <unit> --work-item <WI-XXX> --reason "story-implementor Phase 2" --duration 1h
+```
+
+実装完了または中断時:
+
+```bash
+phasegate session end --work-item <WI-XXX>
+```
+
+PreToolUse hook は `.phasegate/session.json` の TTL・unit・カテゴリを検証する。スキル名だけでは hook 通過の根拠にならない。
 
 ### ワークフロー