universal-dev-standards 6.11.0 → 6.13.0-beta.1

package/bundled/locales/zh-TW/docs/FEATURE-REFERENCE.md

@@ -1,7 +1,7 @@
 # UDS 功能參考手冊
 
 > Universal Development Standards - 完整功能文件
-> Auto-generated | Last updated: 2026-09-18
+> Auto-generated | Last updated: 2026-09-23
 
 **Language**: [English](../../../docs/reference/FEATURE-REFERENCE.md) | 繁體中文 | [简体中文](../../zh-CN/docs/FEATURE-REFERENCE.md)
 
@@ -14,10 +14,10 @@
 3. [技能](#skills) (55)
 4. [代理](#agents) (5)
 5. [工作流程](#workflows) (5)
-6. [核心規範](#core-standards) (152)
+6. [核心規範](#core-standards) (153)
 7. [腳本](#scripts) (59)
 
-**Total Features: 350**
+**Total Features: 351**
 
 ---
 
@@ -516,6 +516,7 @@
 | `mutation-testing` | 1.1.0 | Mutation testing evaluates test suite effectiveness by injecting artificial bugs |
 | `no-cicd-deployment` | - |  |
 | `observability-standards` | 1.0.0 |  |
+| `open-work-tracking` | 1.0.0 | The deferred-item-exit standard requires that a deferred item leave its document |
 | `packaging-standards` | 1.1.0 | This standard defines a Recipe-based packaging framework that enables user proje |
 | `performance-standards` | 1.2.0 | This standard defines comprehensive guidelines for software performance engineer |
 | `pii-classification` | 1.1.0 | **Status**: Active | **Updated**: 2026-06-19 |  |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "universal-dev-standards",
-  "version": "6.11.0",
+  "version": "6.13.0-beta.1",
   "description": "CLI tool for adopting Universal Development Standards",
   "keywords": [
     "documentation",

package/src/commands/init.js

@@ -279,6 +279,32 @@ export async function initCommand(options) {
         console.log(chalk.gray(`        ${line}`));
       }
     }
+
+    // turn-completion-integrity is also extended to Codex and Gemini CLI
+    // (2026-09-25), each with its own config file and output contract — see
+    // installCodexHooks/installGeminiHooks in hooks-installer.js. Gated on the
+    // tools the adopter actually selected: writing a hooks.json into every
+    // project's .codex/ regardless of whether Codex is used would be noise,
+    // not help.
+    const selectedTools = config.integrations || config.aiTools || [];
+    if (selectedTools.includes('codex')) {
+      const { installCodexHooks } = await import('../installers/hooks-installer.js');
+      const codexResult = installCodexHooks(projectPath);
+      if (codexResult.installed) {
+        console.log(chalk.green('  ✓ Codex Stop hook installed (turn-completion-integrity)'));
+      } else {
+        console.log(chalk.yellow(`  ⚠ Codex hook not installed — ${codexResult.reason}`));
+      }
+    }
+    if (selectedTools.includes('gemini-cli')) {
+      const { installGeminiHooks } = await import('../installers/hooks-installer.js');
+      const geminiResult = installGeminiHooks(projectPath);
+      if (geminiResult.installed) {
+        console.log(chalk.green('  ✓ Gemini CLI AfterAgent hook installed (turn-completion-integrity)'));
+      } else {
+        console.log(chalk.yellow(`  ⚠ Gemini CLI hook not installed — ${geminiResult.reason}`));
+      }
+    }
   }
 
   // 5. Setup Pre-commit Hook

package/src/installers/hooks-installer.js

@@ -218,3 +218,107 @@ export function installHooks(projectPath) {
     languageLimits: probeLanguageLimits(hooksDir, scripts),
   };
 }
+
+/**
+ * turn-completion-integrity is the only standard extended to Codex and Gemini
+ * CLI so far (2026-09-25). Unlike installHooks() above, these two functions do
+ * NOT walk every standard's `enforcement:` block — the other three shipped
+ * standards declare Claude-Code-specific events (PreToolUse/PostToolUse with
+ * a Bash/Write matcher) that Codex and Gemini CLI's hook models don't obviously
+ * map onto, and generalizing that mapping is a separate piece of work. These
+ * are narrowly scoped to the one hook that has been verified against each
+ * tool's own docs.
+ *
+ * @see core/turn-completion-integrity.md
+ */
+const CODEX_HOOK_SCRIPT = 'check-turn-completion-codex.mjs';
+const GEMINI_HOOK_SCRIPT = 'check-turn-completion-gemini.mjs';
+
+/** Copy the shared hook scripts into the project, same as installHooks() does. */
+function copyHookScripts(hookDir, hooksDir) {
+  if (!existsSync(hooksDir)) mkdirSync(hooksDir, { recursive: true });
+  cpSync(hookDir, hooksDir, { recursive: true });
+}
+
+/**
+ * Install the turn-completion-integrity Stop hook for Codex.
+ *
+ * Config lives at <project>/.codex/hooks.json — a dedicated file, NOT
+ * config.toml's [hooks] table. Codex runs matching hooks from every file that
+ * defines them (https://learn.chatgpt.com/docs/hooks, fetched 2026-09-25), so
+ * writing only hooks.json here is a deliberate choice, not an oversight: it
+ * does not need to also read or merge config.toml to avoid double-registering
+ * the same hook, and an adopter who already has a Stop hook in config.toml
+ * keeps it untouched.
+ *
+ * @param {string} projectPath
+ * @returns {{ installed: boolean, settingsPath: string, event?: string, reason?: string }}
+ */
+export function installCodexHooks(projectPath) {
+  const hooksJsonPath = join(projectPath, '.codex', 'hooks.json');
+  const hookDir = hooksSourceDir();
+
+  if (!hookDir || !existsSync(join(hookDir, CODEX_HOOK_SCRIPT))) {
+    return { installed: false, settingsPath: hooksJsonPath, reason: `hook script not found: ${CODEX_HOOK_SCRIPT}` };
+  }
+
+  const codexDir = join(projectPath, '.codex');
+  if (!existsSync(codexDir)) mkdirSync(codexDir, { recursive: true });
+  copyHookScripts(hookDir, join(projectPath, 'scripts', 'hooks'));
+
+  let config = {};
+  if (existsSync(hooksJsonPath)) {
+    try { config = JSON.parse(readFileSync(hooksJsonPath, 'utf-8')); } catch { config = {}; }
+  }
+  if (!config.hooks) config.hooks = {};
+  if (!config.hooks.Stop) config.hooks.Stop = [];
+
+  // Matcher is omitted, not empty-stringed: Codex ignores any matcher on Stop
+  // ("any configured matcher is ignored"), and mergeHookArray's dedupe treats
+  // undefined === undefined, so this still merges idempotently.
+  config.hooks.Stop = mergeHookArray(config.hooks.Stop, [
+    { hooks: [{ type: 'command', command: `node scripts/hooks/${CODEX_HOOK_SCRIPT}`, timeout: 30 }] },
+  ]);
+
+  writeFileSync(hooksJsonPath, JSON.stringify(config, null, 2) + '\n');
+  return { installed: true, settingsPath: hooksJsonPath, event: 'Stop' };
+}
+
+/**
+ * Install the turn-completion-integrity AfterAgent hook for Gemini CLI.
+ *
+ * Config lives at <project>/.gemini/settings.json — shared with the rest of
+ * Gemini CLI's project settings, so only the `hooks.AfterAgent` key is ever
+ * touched here (https://geminicli.com/docs/hooks/, fetched 2026-09-25).
+ *
+ * @param {string} projectPath
+ * @returns {{ installed: boolean, settingsPath: string, event?: string, reason?: string }}
+ */
+export function installGeminiHooks(projectPath) {
+  const settingsPath = join(projectPath, '.gemini', 'settings.json');
+  const hookDir = hooksSourceDir();
+
+  if (!hookDir || !existsSync(join(hookDir, GEMINI_HOOK_SCRIPT))) {
+    return { installed: false, settingsPath, reason: `hook script not found: ${GEMINI_HOOK_SCRIPT}` };
+  }
+
+  const geminiDir = join(projectPath, '.gemini');
+  if (!existsSync(geminiDir)) mkdirSync(geminiDir, { recursive: true });
+  copyHookScripts(hookDir, join(projectPath, 'scripts', 'hooks'));
+
+  let settings = {};
+  if (existsSync(settingsPath)) {
+    try { settings = JSON.parse(readFileSync(settingsPath, 'utf-8')); } catch { settings = {}; }
+  }
+  if (!settings.hooks) settings.hooks = {};
+  if (!settings.hooks.AfterAgent) settings.hooks.AfterAgent = [];
+
+  // AfterAgent does not use matchers either (matchers apply only to Tool
+  // hooks); see the Codex function above for why matcher is omitted, not "".
+  settings.hooks.AfterAgent = mergeHookArray(settings.hooks.AfterAgent, [
+    { hooks: [{ type: 'command', command: `node scripts/hooks/${GEMINI_HOOK_SCRIPT}`, timeout: 5000 }] },
+  ]);
+
+  writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
+  return { installed: true, settingsPath, event: 'AfterAgent' };
+}

package/standards-registry.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "version": "6.11.0",
+  "version": "6.13.0-beta.1",
   "lastUpdated": "2026-05-13",
   "description": "Standards registry for universal-dev-standards with integrated skills and AI-optimized formats",
   "formats": {
@@ -58,14 +58,14 @@
     "standards": {
       "name": "universal-dev-standards",
       "url": "https://github.com/AsiaOstrich/universal-dev-standards",
-      "version": "6.11.0"
+      "version": "6.13.0-beta.1"
     },
     "skills": {
       "name": "universal-dev-standards",
       "url": "https://github.com/AsiaOstrich/universal-dev-standards",
       "localPath": "skills",
       "rawUrl": "https://raw.githubusercontent.com/AsiaOstrich/universal-dev-standards/main/skills",
-      "version": "6.11.0",
+      "version": "6.13.0-beta.1",
       "note": "Skills are now included in the main repository under skills/"
     }
   },
@@ -1789,6 +1789,18 @@
       "skillName": null,
       "description": "A deferred item must leave the document: a traceable exit outside it, identified beside the item. The carrier is deliberately unspecified. A present link is not a working link — verified and unverified links are two states, never one green. Anchor on document structure, not wording"
     },
+    {
+      "id": "open-work-tracking",
+      "name": "Open Work Tracking Standard",
+      "nameZh": "開放工作追蹤標準",
+      "source": {
+        "human": "core/open-work-tracking.md",
+        "ai": "ai/standards/open-work-tracking.ai.yaml"
+      },
+      "category": "reference",
+      "skillName": null,
+      "description": "Downstream of deferred-item-exit: once an item has an exit, its carrier must stay trustworthy. Capture costs no more than two fields; a waiting item records its release condition; derivable fields are generated, not hand-written; a coverage figure states what it could not see; a checkpoint at turn end reports open work but never blocks"
+    },
     {
       "id": "verification-evidence",
       "name": "Verification Evidence Standard",
@@ -2283,7 +2295,7 @@
       "id": "license-compliance",
       "name": "License Compliance Standards",
       "nameZh": "授權合規標準",
-      "version": "6.11.0",
+      "version": "6.13.0-beta.1",
       "source": {
         "human": "core/license-compliance.md",
         "ai": "ai/standards/license-compliance.ai.yaml"
@@ -2295,7 +2307,7 @@
       "id": "verification-oracle",
       "name": "Verification Oracle Standards",
       "nameZh": "驗證 Oracle 標準",
-      "version": "6.11.0",
+      "version": "6.13.0-beta.1",
       "source": {
         "human": "core/verification-oracle.md",
         "ai": "ai/standards/verification-oracle.ai.yaml"
@@ -2307,7 +2319,7 @@
       "id": "model-provenance",
       "name": "Model Provenance Policy Standards",
       "nameZh": "模型來源政策標準",
-      "version": "6.11.0",
+      "version": "6.13.0-beta.1",
       "source": {
         "human": "core/model-provenance.md",
         "ai": "ai/standards/model-provenance.ai.yaml"
@@ -2319,7 +2331,7 @@
       "id": "resource-cost-boundary",
       "name": "Resource / Cost Boundary Declaration Standards",
       "nameZh": "資源／成本邊界宣告標準",
-      "version": "6.11.0",
+      "version": "6.13.0-beta.1",
       "source": {
         "human": "core/resource-cost-boundary.md",
         "ai": "ai/standards/resource-cost-boundary.ai.yaml"