feat: route pinned Rust prompt candidate in CodeGuard 0.18.0

Author: loong10k

.agents/plugins/marketplace.json

@@ -9,20 +9,20 @@
       "source": {
         "source": "url",
         "url": "https://github.com/full-stack-plugins/codeguard-plugin.git",
-        "ref": "v0.17.0"
+        "ref": "v0.18.0"
       },
       "policy": {
         "installation": "AVAILABLE",
         "authentication": "ON_USE"
       },
       "category": "Developer Tools",
-      "version": "0.17.0",
+      "version": "0.18.0",
       "description": "Evidence-backed code checks and Git content gates for AI assistants, with Maven/Gradle module impact analysis. Save hooks provide feedback; unverified checks are explicit.",
-      "icon": "https://cdn.jsdelivr.net/gh/full-stack-plugins/codeguard-plugin@v0.17.0/assets/official-logo.png",
+      "icon": "https://cdn.jsdelivr.net/gh/full-stack-plugins/codeguard-plugin@v0.18.0/assets/official-logo.png",
       "interface": {
         "displayName": "代码规范守卫",
         "shortDescription": "Trustworthy code checks and Java impact analysis",
-        "logo": "https://cdn.jsdelivr.net/gh/full-stack-plugins/codeguard-plugin@v0.17.0/assets/official-logo.png"
+        "logo": "https://cdn.jsdelivr.net/gh/full-stack-plugins/codeguard-plugin@v0.18.0/assets/official-logo.png"
       }
     }
   ]

.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
     {
       "name": "codeguard",
       "description": "Evidence-backed code checks and Git content gates for AI assistants, with Maven/Gradle module impact analysis. Save hooks provide feedback; unverified checks are explicit.",
-      "version": "0.17.0",
+      "version": "0.18.0",
       "source": "./"
     }
   ]

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "codeguard",
-  "version": "0.17.0+codex.20260929",
+  "version": "0.18.0+codex.20260929",
   "description": "Evidence-backed code checks and Git content gates for AI assistants, with Maven/Gradle module impact analysis. Save hooks provide feedback; unverified checks are explicit.",
   "author": {
     "name": "Full Stack Skills / PartMe.AI",

.zcode-plugin/plugin.json

@@ -5,7 +5,7 @@
     "en": "代码规范守卫",
     "zh-CN": "代码规范检查"
   },
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "Evidence-backed code checks and Git content gates for AI assistants, with Maven/Gradle module impact analysis. Save hooks provide feedback; unverified checks are explicit.",
   "description_i18n": {
     "en": "Evidence-backed code checks and Git content gates for AI assistants, with Maven/Gradle module impact analysis. Save hooks provide feedback; unverified checks are explicit.",

README.md

@@ -12,14 +12,14 @@ CodeGuard provides native check evidence and guards supported Git commit/push ca
 
 ### Rust runtime candidate (macOS arm64)
 
-The plugin now contains a **candidate**, explicit Rust runtime binding. It pins `@partme.ai/codeguard@0.1.1`, its registry tarball and native binary hashes, candidate source commit, platform, and check protocol major in [`runtime/codeguard.lock.json`](runtime/codeguard.lock.json). Install only on Apple Silicon macOS:
+The plugin now contains a **candidate**, explicit Rust runtime binding. It pins `@partme.ai/codeguard@0.1.2`, its registry tarball and native binary hashes, candidate source commit, platform, and check protocol major in [`runtime/codeguard.lock.json`](runtime/codeguard.lock.json). Install only on Apple Silicon macOS:
 
 ```bash
 node runtime/codeguard_runtime.cjs install --download
 node runtime/codeguard_runtime.cjs verify
 ```
 
-For offline installation, use `install --tarball /absolute/path/to/partme.ai-codeguard-0.1.1.tgz`; the same lock hashes are enforced. Installation stages and verifies the package before switching the active receipt. [`hooks/rust_runtime_dispatch.cjs`](hooks/rust_runtime_dispatch.cjs) is a candidate Claude Code adapter for SessionStart, PostToolUse, PostToolUseFailure, and Stop. It rechecks the active binary before each call, never selects a random `codeguard` on `PATH`, and reports an incomplete runtime instead of falling back to Python. The current [`hooks/hooks.json`](hooks/hooks.json) still uses the legacy Python hooks; the Rust candidate has not been made the default, connected to a strict Git gate, or accepted on Codex/ZCode/Kimi. See the [candidate acceptance record](tests/rust-runtime-candidate.md) and [hook protocol](hooks/__protocol__.md).
+For offline installation, use `install --tarball /absolute/path/to/partme.ai-codeguard-0.1.2.tgz`; the same lock hashes are enforced. Installation stages and verifies the package before switching the active receipt. [`hooks/rust_runtime_dispatch.cjs`](hooks/rust_runtime_dispatch.cjs) is a candidate Claude Code adapter for SessionStart, UserPromptSubmit, PostToolUse, PostToolUseFailure, and Stop. It rechecks the active binary before each call, never selects a random `codeguard` on `PATH`, and reports an incomplete runtime instead of falling back to Python. UserPromptSubmit returns fixed, non-blocking timing guidance; it does not run lint or treat prompt words as a Git gate. The current [`hooks/hooks.json`](hooks/hooks.json) still uses the legacy Python hooks; the Rust candidate has not been made the default, connected to a strict Git gate, or accepted on Codex/ZCode/Kimi. See the [candidate acceptance record](tests/rust-runtime-candidate.md) and [hook protocol](hooks/__protocol__.md).
 
 The installed plugin version is recorded in its manifests. The architecture refactor keeps the existing 68 managed skills and focuses on reliable evidence, clear module ownership and Java project awareness.
 

README.zh-CN.md

@@ -12,14 +12,14 @@ CodeGuard 为 AI 编程助手提供原生检查证据，守护已支持的 Git 
 
 ### Rust 运行时候选（macOS arm64）
 
-插件新增**显式候选** Rust 运行时绑定。[`runtime/codeguard.lock.json`](runtime/codeguard.lock.json) 固定 `@partme.ai/codeguard@0.1.1`、注册表 tarball 和原生二进制摘要、候选源码提交、平台及检查协议主版本。仅在 Apple Silicon macOS 上安装：
+插件新增**显式候选** Rust 运行时绑定。[`runtime/codeguard.lock.json`](runtime/codeguard.lock.json) 固定 `@partme.ai/codeguard@0.1.2`、注册表 tarball 和原生二进制摘要、候选源码提交、平台及检查协议主版本。仅在 Apple Silicon macOS 上安装：
 
 ```bash
 node runtime/codeguard_runtime.cjs install --download
 node runtime/codeguard_runtime.cjs verify
 ```
 
-离线安装可执行 `install --tarball /absolute/path/to/partme.ai-codeguard-0.1.1.tgz`，仍须满足同一锁定摘要。安装器先在暂存目录核验包，再切换活动收据。[`hooks/rust_runtime_dispatch.cjs`](hooks/rust_runtime_dispatch.cjs) 是 Claude Code 的 SessionStart、PostToolUse、PostToolUseFailure、Stop 候选适配器；每次调用前复核活动二进制，不从 PATH 随机选择 `codeguard`，缺运行时时报告未完成而不回退 Python。当前 [`hooks/hooks.json`](hooks/hooks.json) 仍使用旧 Python 钩子；Rust 候选尚未成为默认入口，未接严格 Git 门禁，也未在 Codex/ZCode/Kimi 完成宿主验收。见[候选验收记录](tests/rust-runtime-candidate.md)和[钩子协议](hooks/__protocol__.md)。
+离线安装可执行 `install --tarball /absolute/path/to/partme.ai-codeguard-0.1.2.tgz`，仍须满足同一锁定摘要。安装器先在暂存目录核验包，再切换活动收据。[`hooks/rust_runtime_dispatch.cjs`](hooks/rust_runtime_dispatch.cjs) 是 Claude Code 的 SessionStart、UserPromptSubmit、PostToolUse、PostToolUseFailure、Stop 候选适配器；每次调用前复核活动二进制，不从 PATH 随机选择 `codeguard`，缺运行时时报告未完成而不回退 Python。UserPromptSubmit 仅返回固定、非阻断的检查时机建议，不运行 lint，也不把提示词当作 Git 门禁。当前 [`hooks/hooks.json`](hooks/hooks.json) 仍使用旧 Python 钩子；Rust 候选尚未成为默认入口，未接严格 Git 门禁，也未在 Codex/ZCode/Kimi 完成宿主验收。见[候选验收记录](tests/rust-runtime-candidate.md)和[钩子协议](hooks/__protocol__.md)。
 
 已安装插件的版本以各清单为准。本次架构重构保留现有 68 个受管技能，重点收敛判定证据、模块职责与 Java 项目感知。
 

com.github.copilot/hooks/__protocol__.md

@@ -1,6 +1,6 @@
 # hooks/ 与宿主 CLI 之间的契约（canonical cheat-sheet）
 
-> Rust 候选入口：`runtime/codeguard_runtime.cjs` 固定 npm 0.1.1 制品和本机二进制身份；`hooks/rust_runtime_dispatch.cjs` 显式处理 Claude Code 的 SessionStart/PostToolUse/PostToolUseFailure/Stop。候选入口在运行时缺失、摘要或版本失配时返回对话中的“未完成”，不执行 PATH 上的 `codeguard`，也不回退到 Python。它尚未写入 `hooks/hooks.json`，以下旧协议表仍描述默认 Python 运行时。Rust 严格交付门禁与其它宿主接线尚未完成，不能把候选保存反馈当作通过。
+> Rust 候选入口：`runtime/codeguard_runtime.cjs` 固定 npm 0.1.2 制品和本机二进制身份；`hooks/rust_runtime_dispatch.cjs` 显式处理 Claude Code 的 SessionStart/UserPromptSubmit/PostToolUse/PostToolUseFailure/Stop。UserPromptSubmit 只输出固定的非阻断检查时机建议，源码检查未运行、交付未评估；提示词不能触发 lint 或替代真实 Git 门禁。候选入口在运行时缺失、摘要或版本失配时返回对话中的“未完成”，不执行 PATH 上的 `codeguard`，也不回退到 Python。它尚未写入 `hooks/hooks.json`，以下旧协议表仍描述默认 Python 运行时。Rust 严格交付门禁与其它宿主接线尚未完成，不能把候选保存反馈当作通过。
 
 > 这份文档是 codeguard-plugin 与 Codex CLI / ZCode / Kimi Code 三端宿主
 > 交互契约的**单源事实**。所有 hook 脚本（`hooks/*.py`）的实现都必须与本文件

com.github.copilot/hooks/rust_runtime_dispatch.cjs

@@ -11,6 +11,7 @@ const { activeBinary } = require(path.join(pluginRoot, 'runtime', 'codeguard_run
 
 const EVENTS = new Map([
   ['session-start', 'SessionStart'],
+  ['user-prompt-submit', 'UserPromptSubmit'],
   ['post-tool-use', 'PostToolUse'],
   ['post-tool-use-failure', 'PostToolUseFailure'],
   ['stop', 'Stop'],

dev.openhands/hooks/__protocol__.md

@@ -1,6 +1,6 @@
 # hooks/ 与宿主 CLI 之间的契约（canonical cheat-sheet）
 
-> Rust 候选入口：`runtime/codeguard_runtime.cjs` 固定 npm 0.1.1 制品和本机二进制身份；`hooks/rust_runtime_dispatch.cjs` 显式处理 Claude Code 的 SessionStart/PostToolUse/PostToolUseFailure/Stop。候选入口在运行时缺失、摘要或版本失配时返回对话中的“未完成”，不执行 PATH 上的 `codeguard`，也不回退到 Python。它尚未写入 `hooks/hooks.json`，以下旧协议表仍描述默认 Python 运行时。Rust 严格交付门禁与其它宿主接线尚未完成，不能把候选保存反馈当作通过。
+> Rust 候选入口：`runtime/codeguard_runtime.cjs` 固定 npm 0.1.2 制品和本机二进制身份；`hooks/rust_runtime_dispatch.cjs` 显式处理 Claude Code 的 SessionStart/UserPromptSubmit/PostToolUse/PostToolUseFailure/Stop。UserPromptSubmit 只输出固定的非阻断检查时机建议，源码检查未运行、交付未评估；提示词不能触发 lint 或替代真实 Git 门禁。候选入口在运行时缺失、摘要或版本失配时返回对话中的“未完成”，不执行 PATH 上的 `codeguard`，也不回退到 Python。它尚未写入 `hooks/hooks.json`，以下旧协议表仍描述默认 Python 运行时。Rust 严格交付门禁与其它宿主接线尚未完成，不能把候选保存反馈当作通过。
 
 > 这份文档是 codeguard-plugin 与 Codex CLI / ZCode / Kimi Code 三端宿主
 > 交互契约的**单源事实**。所有 hook 脚本（`hooks/*.py`）的实现都必须与本文件

dev.openhands/hooks/rust_runtime_dispatch.cjs

@@ -11,6 +11,7 @@ const { activeBinary } = require(path.join(pluginRoot, 'runtime', 'codeguard_run
 
 const EVENTS = new Map([
   ['session-start', 'SessionStart'],
+  ['user-prompt-submit', 'UserPromptSubmit'],
   ['post-tool-use', 'PostToolUse'],
   ['post-tool-use-failure', 'PostToolUseFailure'],
   ['stop', 'Stop'],