phasegate 0.264.0 → 0.315.0

package/scripts/harness/agent-integration/domain/services/bash-write-target-extractor.ts

@@ -140,6 +140,28 @@ function getCommandName(tokens: Token[]): string | undefined {
   return undefined;
 }
 
+/** リダイレクト演算子の右辺を解釈し、fd 複製の場合は書き込み先なしとして扱う。 */
+function getRedirectTarget(tokens: Token[], redirectIndex: number): string | undefined {
+  const next = tokens[redirectIndex + 1];
+  if (next === undefined) return undefined;
+
+  if (next.quoted === 'none' && /^&\d+$/.test(next.value)) {
+    return undefined;
+  }
+
+  if (next.quoted === 'none' && next.value === '&') {
+    const afterAmpersand = tokens[redirectIndex + 2];
+    if (afterAmpersand === undefined) return undefined;
+    if (afterAmpersand.quoted === 'none' && /^\d+$/.test(afterAmpersand.value)) {
+      return undefined;
+    }
+    // `>& file` は csh 形式の実ファイル書き込みとして安全側で抽出する。
+    return afterAmpersand.value;
+  }
+
+  return next.value;
+}
+
 /**
  * 1 コマンド分のトークン列から書き込み先を抽出する。
  * リダイレクト先はコマンド種別によらず検出する (全コマンド共通)。
@@ -151,9 +173,9 @@ function extractFromSingleCommand(tokens: Token[]): string[] {
   for (let i = 0; i < tokens.length; i += 1) {
     const t = tokens[i];
     if (t.quoted === 'none' && (t.value === '>' || t.value === '>>' || t.value === '>|')) {
-      const next = tokens[i + 1];
-      if (next !== undefined) {
-        results.push(next.value);
+      const target = getRedirectTarget(tokens, i);
+      if (target !== undefined) {
+        results.push(target);
       }
     }
   }

package/scripts/harness/agent-integration/infrastructure/adapters/file-system-full-mode-session-query-adapter.ts

@@ -1,17 +1,59 @@
 // @unit agent-integration
 // @layer infrastructure
 // @work-item-id WI-206
+// @work-item-id WI-348
+// @work-item-id WI-350
 
-import * as fs from 'node:fs/promises';
-import * as path from 'node:path';
-
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import type { ConfigQueryPort } from "../../domain/ports/config-query-port.js";
 import type {
   FullModeSessionQueryInput,
   FullModeSessionQueryPort,
   FullModeSessionQueryResult,
-} from '../../domain/ports/full-mode-session-query-port.js';
-import type { ConfigQueryPort } from '../../domain/ports/config-query-port.js';
-import { WriteTargetScope } from '../../domain/value-objects/write-target-scope.js';
+} from "../../domain/ports/full-mode-session-query-port.js";
+import { WriteTargetScope } from "../../domain/value-objects/write-target-scope.js";
+
+/**
+ * quick-mode の `ChangeCategoryValue` と同一の語彙。
+ * 照合相手は quick-mode 分類結果（`dominantCategory`）なので、この語彙以外は
+ * session.json 側の書式誤りとして扱う。
+ * `session begin` 側との同期は
+ * `__tests__/integration/harness-api/session-begin-allowed-categories.integration.test.ts`
+ * が検証する（WI-348）。
+ */
+const KNOWN_CHANGE_CATEGORIES: ReadonlySet<string> = new Set([
+  "bugfix",
+  "docs",
+  "test",
+  "config",
+  "feature",
+  "domain",
+  "api",
+]);
+
+/**
+ * WI-348: v0.301.0 以前の `phasegate session begin` は allowedCategories に
+ * レイヤー名（domain / application / infrastructure / presentation / config）を
+ * 書き出していた。この語彙は ChangeCategory と domain / config でしか交差せず、
+ * 旧形式 session.json をそのまま照合すると feature / api / bugfix などが
+ * 恒常的に拒否され session が事実上無力化する。
+ *
+ * `session begin` はカテゴリ指定フラグを持たず常に定数を書き出すため、
+ * 「ChangeCategory 語彙に無い値が混ざっている」= 旧形式生成物と判断できる。
+ * その場合のみ全カテゴリ許可へ正規化する。
+ * 全要素が既知カテゴリなら手編集による意図的な絞り込みとみなし原文を尊重する。
+ * unit / 期限 / target path のスコープ判定は正規化後も従来どおり効く。
+ */
+function normalizeAllowedCategories(rawCategories: readonly string[]): readonly string[] {
+  if (rawCategories.length === 0) {
+    return rawCategories;
+  }
+  if (rawCategories.every((value) => KNOWN_CHANGE_CATEGORIES.has(value))) {
+    return rawCategories;
+  }
+  return [...KNOWN_CHANGE_CATEGORIES];
+}
 
 interface FullModeSessionDocument {
   readonly mode?: unknown;
@@ -35,52 +77,62 @@ export class FileSystemFullModeSessionQueryAdapter implements FullModeSessionQue
   async check(input: FullModeSessionQueryInput): Promise<FullModeSessionQueryResult> {
     let document: FullModeSessionDocument;
     try {
-      const raw = await fs.readFile(path.join(this.options.rootDir, '.phasegate', 'session.json'), 'utf8');
+      const raw = await fs.readFile(path.join(this.options.rootDir, ".phasegate", "session.json"), "utf8");
       document = JSON.parse(raw) as FullModeSessionDocument;
     } catch {
-      return { active: false, allowed: false, reason: 'session marker not found or unreadable' };
+      return { active: false, allowed: false, reason: "session marker not found or unreadable" };
     }
 
-    if (document.mode !== 'full') {
-      return { active: false, allowed: false, reason: 'session mode is not full' };
+    if (document.mode !== "full") {
+      return { active: false, allowed: false, reason: "session mode is not full" };
     }
-    if (typeof document.unit !== 'string' || document.unit === '') {
-      return { active: true, allowed: false, reason: 'session unit is missing' };
+    if (typeof document.unit !== "string" || document.unit === "") {
+      return { active: true, allowed: false, reason: "session unit is missing" };
     }
-    if (typeof document.workItemId !== 'string' || !/^WI-\d+$/.test(document.workItemId)) {
-      return { active: true, allowed: false, reason: 'session work item is invalid' };
+    if (typeof document.workItemId !== "string" || !/^WI-\d+$/.test(document.workItemId)) {
+      return { active: true, allowed: false, reason: "session work item is invalid" };
     }
-    if (typeof document.expiresAt !== 'string' || Number.isNaN(Date.parse(document.expiresAt))) {
-      return { active: true, allowed: false, reason: 'session expiry is invalid' };
+    if (typeof document.expiresAt !== "string" || Number.isNaN(Date.parse(document.expiresAt))) {
+      return { active: true, allowed: false, reason: "session expiry is invalid" };
     }
     if ((this.options.now?.() ?? new Date()).getTime() >= Date.parse(document.expiresAt)) {
       return {
         active: true,
         allowed: false,
-        reason: 'session expired',
+        reason: "session expired",
         workItemId: document.workItemId,
         unit: document.unit,
         expiresAt: document.expiresAt,
       };
     }
-    if (!Array.isArray(document.allowedCategories) || document.allowedCategories.some((value) => typeof value !== 'string')) {
-      return { active: true, allowed: false, reason: 'session allowedCategories is invalid' };
+    if (
+      !Array.isArray(document.allowedCategories) ||
+      document.allowedCategories.some((value) => typeof value !== "string")
+    ) {
+      return { active: true, allowed: false, reason: "session allowedCategories is invalid" };
     }
-    if (input.dominantCategory === undefined || !document.allowedCategories.includes(input.dominantCategory)) {
+    const allowedCategories = normalizeAllowedCategories(document.allowedCategories as readonly string[]);
+    if (input.dominantCategory === undefined || !allowedCategories.includes(input.dominantCategory)) {
       return {
         active: true,
         allowed: false,
-        reason: `category ${input.dominantCategory ?? '<unknown>'} is not allowed by session`,
+        reason: `category ${input.dominantCategory ?? "<unknown>"} is not allowed by session`,
         workItemId: document.workItemId,
         unit: document.unit,
         expiresAt: document.expiresAt,
       };
     }
-    if (input.unitId === undefined || input.unitId !== document.unit) {
+    // WI-350: unit を持たないパス（プロジェクト直下のファイル・__tests__ 配下など）は
+    // 集約 unitId が undefined になる。旧実装はこれを即拒否していたが、
+    // 直下の allTargetPathsBelongToUnit は unitless パスを許容しており内部矛盾していた。
+    // 集約チェックは「unitId が定義済みかつ session unit と不一致」の場合のみ拒否し、
+    // unitless は per-path チェックへ委ねる。unit 付きパスが 1 つでも混ざれば
+    // per-path 側が従来どおり拒否するため、unit 境界は緩まない。
+    if (input.unitId !== undefined && input.unitId !== document.unit) {
       return {
         active: true,
         allowed: false,
-        reason: `target unit ${input.unitId ?? '<unknown>'} does not match session unit ${document.unit}`,
+        reason: `target unit ${input.unitId} does not match session unit ${document.unit}`,
         workItemId: document.workItemId,
         unit: document.unit,
         expiresAt: document.expiresAt,

package/scripts/harness/agent-integration/infrastructure/adapters/harness-config-config-query-adapter.ts

@@ -6,13 +6,9 @@
  * HarnessConfigV2 の harnesses セクションから Hook 設定を読み取る
  */
 
-import * as fs from 'node:fs';
-import type {
-  BaselineConfig,
-  ConfigQueryPort,
-  HookType,
-} from '../../domain/ports/config-query-port.js';
-import { ProjectPaths } from '../../domain/value-objects/project-paths.js';
+import * as fs from "node:fs";
+import type { BaselineConfig, ConfigQueryPort, HookType } from "../../domain/ports/config-query-port.js";
+import { ProjectPaths } from "../../domain/value-objects/project-paths.js";
 
 interface ProjectDocsSection {
   inception?: string;
@@ -84,8 +80,37 @@ export class HarnessConfigConfigQueryAdapter implements ConfigQueryPort {
     if (this.cachedConfig !== null) {
       return this.cachedConfig;
     }
-    const raw = fs.readFileSync(this.configPath, 'utf8');
-    const doc = JSON.parse(raw) as HarnessConfigDocument;
+    // GitHub #40: config が JSON として壊れている場合に hook プロセス全体を throw で
+    // 落とすと、エージェントの全ツール呼び出しが遮断され config の修復自体が不能になる。
+    // main.ts の ConfigPersistenceError と同じ意味論（警告 + 既定値で続行）に揃える。
+    // ADR-038 §4 G1 / WI-333: config **不在**（ENOENT）も同じデッドロックを起こすため、
+    // invalid-json と同じ「警告 + 既定値で続行」の fail-open とする。config を作成する
+    // Write 自体が遮断されない（自己修復経路が残る）ことがこの adapter の契約。
+    // それ以外の fs エラー（EACCES 等の真の異常）は従来どおり throw する。
+    // gated スコープへの書き込みは phase-gate 側が既定設定で fail-closed を維持する。
+    let raw: string;
+    try {
+      raw = fs.readFileSync(this.configPath, "utf8");
+    } catch (error) {
+      if ((error as NodeJS.ErrnoException).code === "ENOENT") {
+        process.stderr.write(
+          `Warning: phasegate.config.json not found at ${this.configPath}; continuing with default hook settings so self-repair stays possible (run \`phasegate init\` to generate one).\n`,
+        );
+        this.cachedConfig = {};
+        return this.cachedConfig;
+      }
+      throw error;
+    }
+    let doc: HarnessConfigDocument;
+    try {
+      doc = JSON.parse(raw) as HarnessConfigDocument;
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      process.stderr.write(
+        `Warning: phasegate.config.json could not be parsed as JSON (${message}); continuing with default hook settings so self-repair stays possible.\n`,
+      );
+      doc = {};
+    }
     this.cachedConfig = doc;
     return doc;
   }
@@ -98,10 +123,10 @@ export class HarnessConfigConfigQueryAdapter implements ConfigQueryPort {
     // pre-tool-use → agentLessonCollection
     // post-tool-use → cascadeUpdate
     // stop → デフォルト有効
-    if (hookType === 'pre-tool-use') {
+    if (hookType === "pre-tool-use") {
       return harnesses.agentLessonCollection ?? true;
     }
-    if (hookType === 'post-tool-use') {
+    if (hookType === "post-tool-use") {
       return harnesses.cascadeUpdate ?? true;
     }
     // stop はデフォルト有効
@@ -111,13 +136,9 @@ export class HarnessConfigConfigQueryAdapter implements ConfigQueryPort {
   async getProtectedFilePatterns(): Promise<string[]> {
     const config = this.loadConfig();
     const configured = config.protectedFiles?.patterns ?? [];
-    const principlesDocs = config.paths?.principlesDocs ?? 'docs/principles';
-    const folderRulesDoc = config.paths?.folderRulesDoc ?? 'docs/folder_management_rules.md';
-    return [
-      ...configured,
-      `${normalizeProjectPath(principlesDocs)}/**`,
-      normalizeProjectPath(folderRulesDoc),
-    ];
+    const principlesDocs = config.paths?.principlesDocs ?? "docs/principles";
+    const folderRulesDoc = config.paths?.folderRulesDoc ?? "docs/folder_management_rules.md";
+    return [...configured, `${normalizeProjectPath(principlesDocs)}/**`, normalizeProjectPath(folderRulesDoc)];
   }
 
   async getProtectedFileExclusions(): Promise<string[]> {
@@ -135,13 +156,10 @@ export class HarnessConfigConfigQueryAdapter implements ConfigQueryPort {
     const paths = config.project?.paths;
     const topLevelPaths = config.paths;
 
-    return ProjectPaths.create(
-      paths?.source ?? ['scripts/harness'],
-      {
-        construction: paths?.docs?.construction ?? topLevelPaths?.designDocs ?? 'docs/product/construction',
-        inception: paths?.docs?.inception ?? topLevelPaths?.inceptionDocs ?? 'docs/inception',
-      },
-    );
+    return ProjectPaths.create(paths?.source ?? ["scripts/harness"], {
+      construction: paths?.docs?.construction ?? topLevelPaths?.designDocs ?? "docs/product/construction",
+      inception: paths?.docs?.inception ?? topLevelPaths?.inceptionDocs ?? "docs/inception",
+    });
   }
 
   async getBaselineConfig(): Promise<BaselineConfig> {
@@ -149,7 +167,7 @@ export class HarnessConfigConfigQueryAdapter implements ConfigQueryPort {
     const baseline = config.baseline ?? {};
     return {
       enabled: baseline.enabled ?? true,
-      path: baseline.path ?? '.phasegate/baseline.json',
+      path: baseline.path ?? ".phasegate/baseline.json",
     };
   }
 
@@ -162,5 +180,5 @@ export class HarnessConfigConfigQueryAdapter implements ConfigQueryPort {
 }
 
 function normalizeProjectPath(path: string): string {
-  return path.replace(/\\/g, '/').replace(/\/+$/g, '');
+  return path.replace(/\\/g, "/").replace(/\/+$/g, "");
 }

package/scripts/harness/agent-integration/presentation/post-tool-use-hook.ts

@@ -2,18 +2,19 @@
  * @layer presentation
  * @unit agent-integration
  * @work-item-id WI-208
+ * @work-item-id WI-323
  *
  * PostToolUse Hook Adapter
  * Claude Code の PostToolUse Hook エントリポイント
  */
 
-import { HandlePostToolUseUseCase } from '../application/usecases/handle-post-tool-use-usecase.js';
-import { HarnessConfigConfigQueryAdapter } from '../infrastructure/adapters/harness-config-config-query-adapter.js';
-import { HarnessApiCliCommandRegistryAdapter } from '../infrastructure/adapters/harness-api-cli-command-registry-adapter.js';
-import { ChildProcessCliExecutorAdapter } from '../infrastructure/adapters/child-process-cli-executor-adapter.js';
-import { recordHookSkipEvent } from './hook-skip-event-recorder.js';
-import * as path from 'node:path';
-import * as fs from 'node:fs/promises';
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { HandlePostToolUseUseCase } from "../application/usecases/handle-post-tool-use-usecase.js";
+import { ChildProcessCliExecutorAdapter } from "../infrastructure/adapters/child-process-cli-executor-adapter.js";
+import { HarnessApiCliCommandRegistryAdapter } from "../infrastructure/adapters/harness-api-cli-command-registry-adapter.js";
+import { HarnessConfigConfigQueryAdapter } from "../infrastructure/adapters/harness-config-config-query-adapter.js";
+import { recordHookSkipEvent } from "./hook-skip-event-recorder.js";
 
 interface PostToolUseHookInput {
   tool_name?: string;
@@ -25,15 +26,15 @@ async function readStdin(): Promise<string> {
   for await (const chunk of process.stdin) {
     chunks.push(chunk as Buffer);
   }
-  return Buffer.concat(chunks).toString('utf8');
+  return Buffer.concat(chunks).toString("utf8");
 }
 
 async function findConfigPath(): Promise<string> {
   let dir = process.cwd();
   while (true) {
     const candidates = [
-      path.join(dir, 'phasegate.config.json'),
-      path.join(dir, '.phasegate-local', 'phasegate.config.json'),
+      path.join(dir, "phasegate.config.json"),
+      path.join(dir, ".phasegate-local", "phasegate.config.json"),
     ];
     for (const candidate of candidates) {
       try {
@@ -45,12 +46,12 @@ async function findConfigPath(): Promise<string> {
     if (parent === dir) break;
     dir = parent;
   }
-  return path.join(process.cwd(), 'phasegate.config.json');
+  return path.join(process.cwd(), "phasegate.config.json");
 }
 
 function projectRootForConfig(configPath: string): string {
   const configDir = path.dirname(configPath);
-  return path.basename(configDir) === '.phasegate-local' ? path.dirname(configDir) : configDir;
+  return path.basename(configDir) === ".phasegate-local" ? path.dirname(configDir) : configDir;
 }
 
 async function main(): Promise<void> {
@@ -58,7 +59,7 @@ async function main(): Promise<void> {
   try {
     raw = await readStdin();
   } catch {
-    process.stderr.write('stdin読み取りエラー\n');
+    process.stderr.write("stdin読み取りエラー\n");
     process.exit(2);
   }
 
@@ -72,8 +73,20 @@ async function main(): Promise<void> {
 
   const toolName = input.tool_name;
   if (!toolName) {
-    process.stderr.write('tool_nameフィールドが必要です\n');
-    process.exit(2);
+    // WI-323: PostToolUse はツール実行後の lint フィードバックでありゲートではないため、
+    // tool_name 欠落は fail-open でスキップする（WI-314 / github#40 方針）。
+    // ※ pre-tool-use-hook の同ガードは書き込みゲートなので fail-closed (exit 2) を維持する。
+    const configPath = await findConfigPath();
+    await recordHookSkipEvent({
+      projectRoot: projectRootForConfig(configPath),
+      hookType: "post-tool-use",
+      reason: "TOOL_NAME_MISSING",
+      targetPaths: [],
+    });
+    process.stderr.write(
+      "警告: stdin payload に tool_name が無いため post-tool-use hook の処理をスキップしました (fail-open)\n",
+    );
+    process.exit(0);
   }
 
   try {
@@ -93,7 +106,7 @@ async function main(): Promise<void> {
     if (output.skipReason) {
       await recordHookSkipEvent({
         projectRoot: projectRootForConfig(configPath),
-        hookType: 'post-tool-use',
+        hookType: "post-tool-use",
         reason: output.skipReason,
         targetPaths: [],
       });

package/scripts/harness/agent-integration/presentation/pre-tool-use-hook.ts

@@ -4,6 +4,8 @@
  * @work-item-id WI-202 / WI-204
  * @work-item-id WI-206
  * @work-item-id WI-208
+ * @work-item-id WI-345
+ * @work-item-id WI-347
  *
  * PreToolUse Hook Adapter
  * Claude Code の PreToolUse Hook エントリポイント
@@ -80,8 +82,10 @@ function projectRootForConfig(configPath: string): string {
   return path.basename(configDir) === '.phasegate-local' ? path.dirname(configDir) : configDir;
 }
 
-function isProjectExternalAbsolutePath(filePath: string): boolean {
-  return path.isAbsolute(filePath);
+function isProjectExternalPath(filePath: string, cwd: string, projectRoot: string): boolean {
+  const resolvedPath = path.resolve(cwd, filePath);
+  const relativePath = path.relative(projectRoot, resolvedPath);
+  return relativePath === '..' || relativePath.startsWith(`..${path.sep}`) || path.isAbsolute(relativePath);
 }
 
 async function main(): Promise<void> {
@@ -141,15 +145,29 @@ async function main(): Promise<void> {
     const bashTargets = extractor.extract(input.tool_input.command);
     if (bashTargets.length > 0) {
       targetFilePaths.push(...bashTargets.map(toRelative));
+      const recordedTargetPaths = new Set(targetChanges.map((change) => change.filePath));
+      const bashTargetChanges = await Promise.all(
+        bashTargets.map((bashTarget) => buildBashTargetChange(cwd, bashTarget, toRelative)),
+      );
+      for (const change of bashTargetChanges) {
+        if (!recordedTargetPaths.has(change.filePath)) {
+          targetChanges.push(change);
+          recordedTargetPaths.add(change.filePath);
+        }
+      }
       effectiveToolName = 'Write';
     }
   }
 
   try {
     const configPath = await findConfigPath(cwd);
-    const projectTargetFilePaths = targetFilePaths.filter((filePath) => !isProjectExternalAbsolutePath(filePath));
-    const projectTargetChanges = targetChanges.filter((change) => !isProjectExternalAbsolutePath(change.filePath));
     const projectRoot = projectRootForConfig(configPath);
+    const projectTargetFilePaths = targetFilePaths.filter(
+      (filePath) => !isProjectExternalPath(filePath, cwd, projectRoot),
+    );
+    const projectTargetChanges = targetChanges.filter(
+      (change) => !isProjectExternalPath(change.filePath, cwd, projectRoot),
+    );
     const configQueryPort = new HarnessConfigConfigQueryAdapter(configPath);
     const phaseGateQueryPort = new PhaseGateQueryAdapter();
     const storyReflectionQueryPort = new FileSystemStoryReflectionQueryAdapter({
@@ -157,7 +175,8 @@ async function main(): Promise<void> {
       configPath,
     });
     const fullModeRequirementQueryPort = new QuickModeFullModeRequirementAdapter({
-      classifyUseCaseFactory: () => createQuickModeCompositionRoot().classifyUseCase,
+      classifyUseCaseFactory: () =>
+        createQuickModeCompositionRoot({ configPath, rootDir: projectRoot }).classifyUseCase,
     });
     const baselineGrandfatherQueryPort = new CiGovernanceBaselineGrandfatherAdapter({
       baseDir: projectRoot,
@@ -222,7 +241,7 @@ async function buildTargetChanges(
   toRelative: (p: string) => string,
 ): Promise<TargetChange[]> {
   const toolInput = input.tool_input;
-  if (toolInput === undefined) {
+  if (toolInput == null || typeof toolInput !== 'object') {
     return [];
   }
 
@@ -258,6 +277,32 @@ async function readExistingContent(cwd: string, filePath: string): Promise<strin
   }
 }
 
+async function buildBashTargetChange(
+  cwd: string,
+  rawPath: string,
+  toRelative: (p: string) => string,
+): Promise<TargetChange> {
+  const filePath = toRelative(rawPath);
+  if (rawPath.includes('$') || rawPath.includes('`') || rawPath.startsWith('~')) {
+    // hook ではシェル展開後の実パスを解決できないため、存在チェックを避けて MODIFY 既定にする。
+    return { filePath };
+  }
+  const absolutePath = path.isAbsolute(rawPath) ? rawPath : path.join(cwd, rawPath);
+  try {
+    await fs.stat(absolutePath);
+    return { filePath };
+  } catch (error) {
+    const code = (error as NodeJS.ErrnoException).code;
+    if (code === 'ENOENT' || code === 'ENOTDIR') {
+      // Bash では afterContent を取得できないため、空文字を CREATE 判定用の
+      // 「変更後内容あり」sentinel として渡す。実ファイルへの書き込みは行わない。
+      return { filePath, beforeContent: null, afterContent: '' };
+    }
+    // 権限エラー等で存在を確認できない場合は従来どおり MODIFY 既定（安全側）。
+    return { filePath };
+  }
+}
+
 main().catch((error) => {
   process.stderr.write(`予期しないエラー: ${String(error)}\n`);
   process.exit(2);

package/scripts/harness/agent-integration/presentation/stop-hook.ts

@@ -3,19 +3,20 @@
  * @unit agent-integration
  * @work-item-id WI-203
  * @work-item-id WI-208
+ * @work-item-id WI-323
  *
  * Stop Hook Adapter
  * Claude Code の Stop Hook エントリポイント
  */
 
-import { HandleStopUseCase } from '../application/usecases/handle-stop-usecase.js';
-import { EnvFileReentryGuardStateAdapter } from '../infrastructure/adapters/env-file-reentry-guard-state-adapter.js';
-import { HarnessConfigConfigQueryAdapter } from '../infrastructure/adapters/harness-config-config-query-adapter.js';
-import { HarnessApiCliCommandRegistryAdapter } from '../infrastructure/adapters/harness-api-cli-command-registry-adapter.js';
-import { ChildProcessCliExecutorAdapter } from '../infrastructure/adapters/child-process-cli-executor-adapter.js';
-import { recordHookSkipEvent } from './hook-skip-event-recorder.js';
-import * as path from 'node:path';
-import * as fs from 'node:fs/promises';
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { HandleStopUseCase } from "../application/usecases/handle-stop-usecase.js";
+import { ChildProcessCliExecutorAdapter } from "../infrastructure/adapters/child-process-cli-executor-adapter.js";
+import { EnvFileReentryGuardStateAdapter } from "../infrastructure/adapters/env-file-reentry-guard-state-adapter.js";
+import { HarnessApiCliCommandRegistryAdapter } from "../infrastructure/adapters/harness-api-cli-command-registry-adapter.js";
+import { HarnessConfigConfigQueryAdapter } from "../infrastructure/adapters/harness-config-config-query-adapter.js";
+import { recordHookSkipEvent } from "./hook-skip-event-recorder.js";
 
 interface StopHookInput {
   session_id?: string;
@@ -23,8 +24,7 @@ interface StopHookInput {
 
 function isCompleteCheckExecutionWiringFailure(stderr: string): boolean {
   return (
-    /scripts\/harness\/cli\/complete-check\.ts/.test(stderr) ||
-    /ERR_MODULE_NOT_FOUND|Cannot find module/i.test(stderr)
+    /scripts\/harness\/cli\/complete-check\.ts/.test(stderr) || /ERR_MODULE_NOT_FOUND|Cannot find module/i.test(stderr)
   );
 }
 
@@ -40,15 +40,15 @@ async function readStdin(): Promise<string> {
   for await (const chunk of process.stdin) {
     chunks.push(chunk as Buffer);
   }
-  return Buffer.concat(chunks).toString('utf8');
+  return Buffer.concat(chunks).toString("utf8");
 }
 
 async function findConfigPath(): Promise<string> {
   let dir = process.cwd();
   while (true) {
     const candidates = [
-      path.join(dir, 'phasegate.config.json'),
-      path.join(dir, '.phasegate-local', 'phasegate.config.json'),
+      path.join(dir, "phasegate.config.json"),
+      path.join(dir, ".phasegate-local", "phasegate.config.json"),
     ];
     for (const candidate of candidates) {
       try {
@@ -60,12 +60,12 @@ async function findConfigPath(): Promise<string> {
     if (parent === dir) break;
     dir = parent;
   }
-  return path.join(process.cwd(), 'phasegate.config.json');
+  return path.join(process.cwd(), "phasegate.config.json");
 }
 
 function projectRootForConfig(configPath: string): string {
   const configDir = path.dirname(configPath);
-  return path.basename(configDir) === '.phasegate-local' ? path.dirname(configDir) : configDir;
+  return path.basename(configDir) === ".phasegate-local" ? path.dirname(configDir) : configDir;
 }
 
 async function main(): Promise<void> {
@@ -73,7 +73,7 @@ async function main(): Promise<void> {
   try {
     raw = await readStdin();
   } catch {
-    process.stderr.write('stdin読み取りエラー\n');
+    process.stderr.write("stdin読み取りエラー\n");
     process.exit(2);
   }
 
@@ -87,13 +87,24 @@ async function main(): Promise<void> {
 
   const sessionId = input.session_id;
   if (!sessionId) {
-    process.stderr.write('session_idフィールドが必要です\n');
-    process.exit(2);
+    // WI-323: session_id 欠落は呼び出し側環境の不備であり、stop hook はゲートではないため
+    // fail-open でスキップする（WI-314 / github#40 の「hook は開発フローを止めない」方針）。
+    const configPath = await findConfigPath();
+    await recordHookSkipEvent({
+      projectRoot: projectRootForConfig(configPath),
+      hookType: "stop",
+      reason: "SESSION_ID_MISSING",
+      targetPaths: [],
+    });
+    process.stderr.write(
+      "警告: stdin payload に session_id が無いため stop hook の処理をスキップしました (fail-open)\n",
+    );
+    process.exit(0);
   }
 
   try {
     const configPath = await findConfigPath();
-    const reentryGuardStatePort = new EnvFileReentryGuardStateAdapter({ strategy: 'env' });
+    const reentryGuardStatePort = new EnvFileReentryGuardStateAdapter({ strategy: "env" });
     const configQueryPort = new HarnessConfigConfigQueryAdapter(configPath);
     const cliCommandRegistryPort = new HarnessApiCliCommandRegistryAdapter();
     const cliExecutorPort = new ChildProcessCliExecutorAdapter();
@@ -107,14 +118,14 @@ async function main(): Promise<void> {
 
     const output = await useCase.execute({ sessionId });
 
-    if (output.skipReason === 'REENTRY_DETECTED') {
+    if (output.skipReason === "REENTRY_DETECTED") {
       await recordHookSkipEvent({
         projectRoot: projectRootForConfig(configPath),
-        hookType: 'stop',
+        hookType: "stop",
         reason: output.skipReason,
         targetPaths: [],
       });
-      process.stderr.write('ReentryGuard: 再入検出によりスキップ\n');
+      process.stderr.write("ReentryGuard: 再入検出によりスキップ\n");
       process.exit(0);
     }
 
@@ -123,10 +134,8 @@ async function main(): Promise<void> {
         // WI-087 finding #4: enforce=true なら exit 2 + decision JSON で turn block
         if (output.shouldEnforceFailure === true) {
           const reason = formatCompleteCheckFailureReason(output.cliResult.exitCode, output.cliResult.stderr);
-          process.stdout.write(`${JSON.stringify({ decision: 'block', reason })}\n`);
-          process.stderr.write(
-            `${reason} — strict mode により turn を block します\n`,
-          );
+          process.stdout.write(`${JSON.stringify({ decision: "block", reason })}\n`);
+          process.stderr.write(`${reason} — strict mode により turn を block します\n`);
           process.exit(2);
         }
         process.stderr.write(`Complete Check失敗 (exitCode=${output.cliResult.exitCode})\n`);