@accelerator-mzq/forge 1.4.0

package/dist/core/ack-log.d.ts

@@ -0,0 +1,107 @@
+/** ack 操作日志条目(kind='ack') */
+export interface AckEntry {
+    schema: 'forge-ack-log/v1';
+    kind: 'ack';
+    timestamp: string;
+    action: string;
+    change_id: string;
+    finding_id: string | null;
+    user: string;
+    rationale: string | null;
+    git_head: string | null;
+    finding_hash: string | null;
+    target_severity?: 'WARNING' | 'SUGGESTION';
+    /**
+     * plan-9g Task 3 新增 — superset additive(brainstorm spec §9.11 全 JSONL 链)
+     * 与 EvidenceHelperEntry 同字段;沿全 JSONL 链协议,所有 kind entry 都参与链
+     */
+    prev_entry_hash?: string | null;
+    extra: Record<string, unknown>;
+}
+/** evidence helper 操作日志条目(kind='evidence-helper') */
+export interface EvidenceHelperEntry {
+    schema: 'forge-ack-log/v1';
+    kind: 'evidence-helper';
+    timestamp: string;
+    helper_name: 'record-tdd' | 'record-verify' | 'record-review' | 'freeze';
+    change_id: string;
+    task_ref: string;
+    payload_hash: string;
+    status: 'success' | 'partial' | 'failed';
+    git_head: string | null;
+    /**
+     * plan-9g Task 3 新增 — superset additive(brainstorm spec §9.11)
+     * 全 JSONL 链 prev_entry_hash:指上一条 entry(任意 kind)的 canonicalHash;
+     * 链头 null(空 ack-log 或 plan-9a 旧 entry 缺等价 null)
+     */
+    prev_entry_hash?: string | null;
+    extra: Record<string, unknown>;
+}
+/** ack 日志条目判别联合 */
+export type AckLogEntry = AckEntry | EvidenceHelperEntry;
+/** listPending 返回的单条记录 */
+export interface PendingItem {
+    /** 文件绝对路径(plan §7 line 1000 spec 字段名 'path') */
+    path: string;
+    /** finding id(从文件名解析) */
+    findingId: string;
+    /** 时间戳字符串(从文件名解析,冒号已还原) */
+    timestamp: string;
+}
+/**
+ * appendAckLog — 以 NDJSON 格式追加一条日志到 ack-log.jsonl
+ *
+ * plan-9g Task 3 修订(brainstorm spec §9.11):
+ *   1. 读 ack-log.jsonl 最后一非空行(若文件不存在 → prev=null)
+ *   2. 算 prev_entry_hash = canonicalHash(lastEntry)
+ *   3. entry.prev_entry_hash = prev(全 JSONL 链,跨 kind)
+ *   4. appendFile
+ *
+ * 兼容性:plan-9a 旧 entries 缺 prev_entry_hash 字段 → 视为 undefined(链头);
+ *   9g 第一条新 entry 的 prev 必须等于旧最后一条 entry 的 canonicalHash(向后兼容)
+ */
+export declare function appendAckLog(changeRoot: string, entry: AckLogEntry): Promise<void>;
+/**
+ * getPendingPath — 构造 pending-ack 文件的绝对路径
+ *
+ * 路径格式：<changeRoot>/.evidence/pending-acks/<findingId>-<safeTimestamp>.yaml
+ * Windows 安全：ISO 时间戳中的 ':' 替换为 '-'(冒号在 Windows 文件名中非法)
+ */
+export declare function getPendingPath(changeRoot: string, findingId: string, timestamp: string): string;
+/**
+ * listPending — 列出 pending-acks 目录下的文件,按时间戳升序排列
+ *
+ * @param changeRoot  change 根目录
+ * @param findingId   可选过滤条件;不传则返回所有 pending 文件
+ * @returns           PendingItem 数组(时间戳升序)
+ *
+ * 目录不存在时返回空数组,不抛异常。
+ */
+export declare function listPending(changeRoot: string, findingId?: string): Promise<PendingItem[]>;
+/**
+ * readAllAckLogEntries — 读全 ack-log.jsonl 解析所有 entry(plan-9g §9.11)
+ *
+ * 跳过空行;遇坏 JSON 行抛错(fence 视为 ack-log corrupted)
+ *
+ * @param changeRoot change 根目录
+ * @returns 全 ack-log entry array(空 ack-log 或文件不存在 → [])
+ * @throws Error 若有坏 JSON 行,error message 含行号
+ */
+export declare function readAllAckLogEntries(changeRoot: string): Promise<AckLogEntry[]>;
+/** ack-log 链校验结果(plan-9g §9.11 三重校验) */
+export interface AckLogChainVerifyResult {
+    ok: boolean;
+    reason?: string;
+}
+/**
+ * verifyAckLogChain — 三重校验 ack-log 链完整性(brainstorm spec §9.11)
+ *   1. 链内自洽:prev_entry_hash 逐行 match(挡中间一行被改)
+ *   2. 行数固化:实际 entry count 必 == markerEntryCount(挡"重写整链 + 链内自洽")
+ *   3. 尾 hash 固化:链尾 hash 必 == markerTailHash(挡"改最后一行无下一行引用")
+ *
+ * @param allEntries 全 JSONL 解析后(已跳空行 + 顺序与文件序一致)
+ * @param markerTailHash marker.ack_log_tail_hash 快照(freeze 时固化)
+ * @param markerEntryCount marker.ack_log_entry_count 快照
+ */
+export declare function verifyAckLogChain(allEntries: AckLogEntry[], markerTailHash: string | null, markerEntryCount: number | null): AckLogChainVerifyResult;
+//# sourceMappingURL=ack-log.d.ts.map

package/dist/core/ack-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ack-log.d.ts","sourceRoot":"","sources":["../../src/core/ack-log.ts"],"names":[],"mappings":"AAaA,6BAA6B;AAC7B,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,IAAI,EAAE,KAAK,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IAC3C;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,qDAAqD;AACrD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,IAAI,EAAE,iBAAiB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,YAAY,GAAG,eAAe,GAAG,eAAe,GAAG,QAAQ,CAAC;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,mBAAmB;AACnB,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,mBAAmB,CAAC;AAMzD,0BAA0B;AAC1B,MAAM,WAAW,WAAW;IAC1B,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAkBD;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA0BxF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAO/F;AAED;;;;;;;;GAQG;AACH,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CA0ChG;AAMD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAkBrF;AAED,wCAAwC;AACxC,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,WAAW,EAAE,EACzB,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAC9B,uBAAuB,CAsCzB"}

package/dist/core/ack-log.js

@@ -0,0 +1,197 @@
+// ack-log.ts:ack 日志和 pending-acks 目录的共用 helper
+// 被 Task 3 ack.ts + Task 5 evidence.ts 同时调用
+// 提供 NDJSON append-only 日志写入 + pending 文件路径管理
+import { appendFile, mkdir, readdir, readFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import path from 'node:path';
+import { canonicalHash } from './canonical-json.js'; // plan-9g Task 3:全 JSONL 链 hash 算法
+// ──────────────────────────────────────────────────────────────────────────────
+// 常量
+// ──────────────────────────────────────────────────────────────────────────────
+/** pending-acks 目录相对于 changeRoot 的路径 */
+const PENDING_DIR_REL = '.evidence/pending-acks';
+/** 文件名正则:匹配 <findingId>-<safeTimestamp>.yaml */
+// findingId 由数字组成;\d+ 捕获
+// safeTimestamp 是 ISO 时间戳中冒号已替换为连字符后的结果
+const PENDING_FILE_RE = /^(\d+)-(.+)\.yaml$/;
+// ──────────────────────────────────────────────────────────────────────────────
+// 公开 API
+// ──────────────────────────────────────────────────────────────────────────────
+/**
+ * appendAckLog — 以 NDJSON 格式追加一条日志到 ack-log.jsonl
+ *
+ * plan-9g Task 3 修订(brainstorm spec §9.11):
+ *   1. 读 ack-log.jsonl 最后一非空行(若文件不存在 → prev=null)
+ *   2. 算 prev_entry_hash = canonicalHash(lastEntry)
+ *   3. entry.prev_entry_hash = prev(全 JSONL 链,跨 kind)
+ *   4. appendFile
+ *
+ * 兼容性:plan-9a 旧 entries 缺 prev_entry_hash 字段 → 视为 undefined(链头);
+ *   9g 第一条新 entry 的 prev 必须等于旧最后一条 entry 的 canonicalHash(向后兼容)
+ */
+export async function appendAckLog(changeRoot, entry) {
+    // 自动创建父目录,避免首次写入时 ENOENT
+    const evidenceDir = path.join(changeRoot, '.evidence');
+    await mkdir(evidenceDir, { recursive: true });
+    const logPath = path.join(evidenceDir, 'ack-log.jsonl');
+    // plan-9g:算 prev_entry_hash(全 JSONL 链)
+    let prevHash = null;
+    if (existsSync(logPath)) {
+        const content = await readFile(logPath, 'utf8');
+        const lines = content.split('\n').filter((l) => l.trim().length > 0);
+        if (lines.length > 0) {
+            const lastLine = lines[lines.length - 1] ?? '';
+            try {
+                const lastEntry = JSON.parse(lastLine);
+                prevHash = canonicalHash(lastEntry);
+            }
+            catch {
+                // 坏 JSON 行 → 视为 chain corrupted,fence 会单独拒签;append 仍走 prev=null
+                prevHash = null;
+            }
+        }
+    }
+    const entryWithChain = { ...entry, prev_entry_hash: prevHash };
+    // JSON.stringify 不含换行,手动添加 \n 实现 NDJSON 格式
+    await appendFile(logPath, JSON.stringify(entryWithChain) + '\n', 'utf8');
+}
+/**
+ * getPendingPath — 构造 pending-ack 文件的绝对路径
+ *
+ * 路径格式：<changeRoot>/.evidence/pending-acks/<findingId>-<safeTimestamp>.yaml
+ * Windows 安全：ISO 时间戳中的 ':' 替换为 '-'(冒号在 Windows 文件名中非法)
+ */
+export function getPendingPath(changeRoot, findingId, timestamp) {
+    // 将 ISO 时间戳中的冒号替换为连字符,确保 Windows 文件系统兼容
+    const safeTimestamp = timestamp.replace(/:/g, '-');
+    const fileName = `${findingId}-${safeTimestamp}.yaml`;
+    // path.join 在 Windows 上返回反斜杠;统一替换为正斜杠,使路径在跨平台测试中可靠匹配
+    // Windows 文件系统 API 同时接受正斜杠路径
+    return path.join(changeRoot, PENDING_DIR_REL, fileName).replace(/\\/g, '/');
+}
+/**
+ * listPending — 列出 pending-acks 目录下的文件,按时间戳升序排列
+ *
+ * @param changeRoot  change 根目录
+ * @param findingId   可选过滤条件;不传则返回所有 pending 文件
+ * @returns           PendingItem 数组(时间戳升序)
+ *
+ * 目录不存在时返回空数组,不抛异常。
+ */
+export async function listPending(changeRoot, findingId) {
+    const pendingDir = path.join(changeRoot, PENDING_DIR_REL);
+    // 读取目录内容,目录不存在时返回空数组
+    let files;
+    try {
+        files = await readdir(pendingDir);
+    }
+    catch (err) {
+        // ENOENT:目录不存在,属于正常情况(clean workspace)
+        if (err.code === 'ENOENT') {
+            return [];
+        }
+        throw err;
+    }
+    // 解析文件名,过滤非法格式和不匹配的 findingId
+    const items = [];
+    for (const file of files) {
+        const match = PENDING_FILE_RE.exec(file);
+        if (!match)
+            continue; // 跳过不符合命名规范的文件
+        // match[1] 和 match[2] 由正则捕获组保证存在,但 TypeScript 认为可能 undefined
+        const parsedFindingId = match[1] ?? '';
+        const safeTimestamp = match[2] ?? '';
+        // 可选 findingId 过滤
+        if (findingId !== undefined && parsedFindingId !== findingId)
+            continue;
+        // 将文件名中的安全时间戳还原为 ISO 格式(仅用于排序比较,无需实际还原冒号)
+        // 因为替换是单调的,字符串排序结果与原始 ISO 时间戳排序结果一致
+        items.push({
+            // 路径正斜杠规范化,与 getPendingPath 输出一致,避免下游字符串比较失配
+            path: path.join(pendingDir, file).replace(/\\/g, '/'),
+            findingId: parsedFindingId,
+            timestamp: safeTimestamp, // 保持安全格式,字符串排序等价于时间升序
+        });
+    }
+    // 按时间戳字符串升序排列(ISO 格式时间戳字典序等价于时间序)
+    items.sort((a, b) => (a.timestamp < b.timestamp ? -1 : a.timestamp > b.timestamp ? 1 : 0));
+    return items;
+}
+// ──────────────────────────────────────────────────────────────────────────────
+// plan-9g Task 3 新增:全 JSONL 链 helper(brainstorm spec §9.11)
+// ──────────────────────────────────────────────────────────────────────────────
+/**
+ * readAllAckLogEntries — 读全 ack-log.jsonl 解析所有 entry(plan-9g §9.11)
+ *
+ * 跳过空行;遇坏 JSON 行抛错(fence 视为 ack-log corrupted)
+ *
+ * @param changeRoot change 根目录
+ * @returns 全 ack-log entry array(空 ack-log 或文件不存在 → [])
+ * @throws Error 若有坏 JSON 行,error message 含行号
+ */
+export async function readAllAckLogEntries(changeRoot) {
+    const logPath = path.join(changeRoot, '.evidence', 'ack-log.jsonl');
+    if (!existsSync(logPath))
+        return [];
+    const content = await readFile(logPath, 'utf8');
+    const lines = content.split('\n');
+    const entries = [];
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i].trim();
+        if (line.length === 0)
+            continue; // 跳过空行
+        try {
+            entries.push(JSON.parse(line));
+        }
+        catch (e) {
+            throw new Error(`ack-log corrupted at line ${i + 1}: ${e instanceof Error ? e.message : String(e)}`);
+        }
+    }
+    return entries;
+}
+/**
+ * verifyAckLogChain — 三重校验 ack-log 链完整性(brainstorm spec §9.11)
+ *   1. 链内自洽:prev_entry_hash 逐行 match(挡中间一行被改)
+ *   2. 行数固化:实际 entry count 必 == markerEntryCount(挡"重写整链 + 链内自洽")
+ *   3. 尾 hash 固化:链尾 hash 必 == markerTailHash(挡"改最后一行无下一行引用")
+ *
+ * @param allEntries 全 JSONL 解析后(已跳空行 + 顺序与文件序一致)
+ * @param markerTailHash marker.ack_log_tail_hash 快照(freeze 时固化)
+ * @param markerEntryCount marker.ack_log_entry_count 快照
+ */
+export function verifyAckLogChain(allEntries, markerTailHash, markerEntryCount) {
+    // 0. 空日志边界
+    if (allEntries.length === 0) {
+        if (markerTailHash !== null || (markerEntryCount !== null && markerEntryCount !== 0)) {
+            return { ok: false, reason: 'empty ack-log but marker has tail/count' };
+        }
+        return { ok: true };
+    }
+    // 1. 链内自洽
+    let expectedPrev = null;
+    for (let i = 0; i < allEntries.length; i++) {
+        const entry = allEntries[i];
+        // plan-9a 旧 entry 缺字段 → 视为 undefined === null 等价(链头逻辑)
+        const actualPrev = entry.prev_entry_hash ?? null;
+        if (actualPrev !== expectedPrev) {
+            return { ok: false, reason: `chain broken at entry ${i + 1}` };
+        }
+        expectedPrev = canonicalHash(entry);
+    }
+    // 2. 行数固化(挡"重写整链且每行 hash 自洽")
+    if (markerEntryCount !== null && allEntries.length !== markerEntryCount) {
+        return {
+            ok: false,
+            reason: `entry count mismatch: actual=${allEntries.length} expected=${markerEntryCount}`,
+        };
+    }
+    // 3. 尾 hash 固化(挡"改最后一行 + 没下一行引用")
+    if (markerTailHash !== null && expectedPrev !== markerTailHash) {
+        return {
+            ok: false,
+            reason: `tail hash mismatch: actual=${expectedPrev} marker=${markerTailHash}`,
+        };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=ack-log.js.map

package/dist/core/ack-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ack-log.js","sourceRoot":"","sources":["../../src/core/ack-log.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,4CAA4C;AAC5C,8CAA8C;AAE9C,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC,CAAC,mCAAmC;AAgExF,iFAAiF;AACjF,KAAK;AACL,iFAAiF;AAEjF,wCAAwC;AACxC,MAAM,eAAe,GAAG,wBAAwB,CAAC;AAEjD,gDAAgD;AAChD,yBAAyB;AACzB,wCAAwC;AACxC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C,iFAAiF;AACjF,SAAS;AACT,iFAAiF;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,UAAkB,EAAE,KAAkB;IACvE,yBAAyB;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IAExD,uCAAuC;IACvC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAgB,CAAC;gBACtD,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;gBAChE,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAgB,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;IAE5E,2CAA2C;IAC3C,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,SAAiB,EAAE,SAAiB;IACrF,wCAAwC;IACxC,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,aAAa,OAAO,CAAC;IACtD,qDAAqD;IACrD,6BAA6B;IAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAAkB,EAAE,SAAkB;IACtE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAE1D,qBAAqB;IACrB,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,uCAAuC;QACvC,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,8BAA8B;IAC9B,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,SAAS,CAAC,eAAe;QAErC,6DAA6D;QAC7D,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAErC,kBAAkB;QAClB,IAAI,SAAS,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS;YAAE,SAAS;QAEvE,0CAA0C;QAC1C,oCAAoC;QACpC,KAAK,CAAC,IAAI,CAAC;YACT,6CAA6C;YAC7C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;YACrD,SAAS,EAAE,eAAe;YAC1B,SAAS,EAAE,aAAa,EAAE,sBAAsB;SACjD,CAAC,CAAC;IACL,CAAC;IAED,kCAAkC;IAClC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,4DAA4D;AAC5D,iFAAiF;AAEjF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IACpE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS,CAAC,OAAO;QACxC,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAQD;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAyB,EACzB,cAA6B,EAC7B,gBAA+B;IAE/B,WAAW;IACX,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,IAAI,cAAc,KAAK,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,CAAC,CAAC,EAAE,CAAC;YACrF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;QAC1E,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,UAAU;IACV,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAC7B,uDAAuD;QACvD,MAAM,UAAU,GAAG,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC;QACjD,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACjE,CAAC;QACD,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,8BAA8B;IAC9B,IAAI,gBAAgB,KAAK,IAAI,IAAI,UAAU,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACxE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gCAAgC,UAAU,CAAC,MAAM,aAAa,gBAAgB,EAAE;SACzF,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,IAAI,cAAc,KAAK,IAAI,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;QAC/D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,8BAA8B,YAAY,WAAW,cAAc,EAAE;SAC9E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/core/archive/ack-log-consistency.d.ts

@@ -0,0 +1,15 @@
+import { type ValidationResult } from '../validate/types.js';
+/**
+ * 校验 ack-log.jsonl ↔ marker verify_findings 中 ack 字段一致性
+ *
+ * 四条规则(沿 design line 496-500):
+ * 1. marker WARNING+resolved=false+severity_acked_by 非空 → ack-log 必须有匹配 finding_id+action+finding_hash 的 kind=ack 行
+ * 2. pending-acks/ 目录非空 → 拒签 + 列所有 pending 文件
+ * 3. ack-log 条目的 finding_hash 与 marker finding_hash 一致(JCS 重算 marker payload 比对)
+ * 4. AI 直填 marker ack 字段但 ack-log 无对应条目 → 等价规则 1 的反向,拒签
+ *
+ * v3 m-1 修订:加 ack-log user 字段与 marker severity_acked_by 一致性校验
+ * (防止 AI 在 marker 写 'msc' 但 ack-log 'ai-agent' 不一致路径)
+ */
+export declare function validateAckLogConsistency(changeDir: string, verifyMarker: Record<string, unknown>, changeId: string): Promise<ValidationResult>;
+//# sourceMappingURL=ack-log-consistency.d.ts.map

package/dist/core/archive/ack-log-consistency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ack-log-consistency.d.ts","sourceRoot":"","sources":["../../../src/core/archive/ack-log-consistency.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,gBAAgB,EAA4B,MAAM,sBAAsB,CAAC;AAmBvF;;;;;;;;;;;GAWG;AACH,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACrC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,CAAC,CAqL3B"}

package/dist/core/archive/ack-log-consistency.js

@@ -0,0 +1,164 @@
+// src/core/archive/ack-log-consistency.ts — plan-9d Task 6 v2 B-4 修订
+// ack-log.jsonl ↔ marker ack 字段一致性校验
+// 沿 design line 496-500 四条 cross-check + master §3.12.4 ack-log schema
+import { readFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { computeFindingHash, extractHashPayload } from '../validate/finding-hash.js';
+import { ok, failed, mergeResults } from '../validate/types.js';
+/**
+ * 校验 ack-log.jsonl ↔ marker verify_findings 中 ack 字段一致性
+ *
+ * 四条规则(沿 design line 496-500):
+ * 1. marker WARNING+resolved=false+severity_acked_by 非空 → ack-log 必须有匹配 finding_id+action+finding_hash 的 kind=ack 行
+ * 2. pending-acks/ 目录非空 → 拒签 + 列所有 pending 文件
+ * 3. ack-log 条目的 finding_hash 与 marker finding_hash 一致(JCS 重算 marker payload 比对)
+ * 4. AI 直填 marker ack 字段但 ack-log 无对应条目 → 等价规则 1 的反向,拒签
+ *
+ * v3 m-1 修订:加 ack-log user 字段与 marker severity_acked_by 一致性校验
+ * (防止 AI 在 marker 写 'msc' 但 ack-log 'ai-agent' 不一致路径)
+ */
+export async function validateAckLogConsistency(changeDir, verifyMarker, changeId) {
+    // v3 codex BLOCKER 1 修订:findings / pauseDecisions 都 normalize 为数组(防止 pause-only marker 进入后续 findings.length 循环崩溃)
+    const findingsArr = Array.isArray(verifyMarker.verify_findings)
+        ? verifyMarker.verify_findings
+        : [];
+    const pauseDecisionsArr = Array.isArray(verifyMarker.pause_decisions)
+        ? verifyMarker.pause_decisions
+        : [];
+    // 两个字段都缺失(非数组) → 老兼容通过(沿 baseline !Array.isArray(findings) 语义)
+    if (!Array.isArray(verifyMarker.verify_findings) &&
+        !Array.isArray(verifyMarker.pause_decisions)) {
+        return ok();
+    }
+    const evidenceDir = join(changeDir, '.evidence');
+    const ackLogPath = join(evidenceDir, 'ack-log.jsonl');
+    const pendingDir = join(evidenceDir, 'pending-acks');
+    const results = [];
+    // 1. pending-acks/ 残留检测
+    try {
+        const pending = await readdir(pendingDir);
+        const pendingYamls = pending.filter((n) => n.endsWith('.yaml'));
+        if (pendingYamls.length > 0) {
+            results.push(failed({
+                artifact: 'change',
+                field: 'pending-acks',
+                message: `pending-acks/ 目录残留 ${pendingYamls.length} 个未 confirm/reject 的 pending 文件:${pendingYamls.join(', ')};必须先 /forge:ack-confirm 或 forge ack reject(沿 design line 498)`,
+                file: pendingDir,
+            }));
+        }
+    }
+    catch (err) {
+        // pending-acks/ 不存在是 OK(沿 9a:目录在第一次 propose 时才创建)
+        if (err.code !== 'ENOENT') {
+            results.push(failed({
+                artifact: 'change',
+                message: `[fs] pending-acks/ 读取失败: ${err.message}`,
+            }));
+        }
+    }
+    // 2-4. ack-log.jsonl 解析 + marker ↔ ack-log 一致性
+    let ackEntries = [];
+    try {
+        const ackText = await readFile(ackLogPath, 'utf8');
+        ackEntries = ackText
+            .split('\n')
+            .filter((line) => line.trim())
+            .map((line) => JSON.parse(line))
+            .filter((e) => e.kind === 'ack'); // 仅看 kind=ack(沿 master §3.12.4)
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT') {
+            results.push(failed({
+                artifact: 'change',
+                message: `[fs] ack-log.jsonl 读取失败: ${err.message}`,
+            }));
+        }
+        // ack-log 不存在但 marker 有 ack 字段非空 → 拒签(下面循环处理)
+    }
+    for (let i = 0; i < findingsArr.length; i++) {
+        const f = findingsArr[i];
+        const fieldBase = `verify_findings[${i}]`;
+        // 规则 1 + 4:WARNING ack 字段非空必须有 ack-log 匹配条目
+        if (f.severity === 'WARNING' &&
+            f.resolved === false &&
+            (f.severity_acked_by || f.severity_acked_at)) {
+            const matchAck = ackEntries.find((e) => e.change_id === changeId && e.finding_id === String(f.id) && e.action === 'ack-warning');
+            if (!matchAck) {
+                results.push(failed({
+                    artifact: 'marker',
+                    field: `${fieldBase}.severity_acked_by`,
+                    message: `marker WARNING ack 字段非空但 ack-log.jsonl 无对应 kind=ack + change_id=${changeId} + finding_id=${f.id} + action=ack-warning 条目;AI 不能跨过 user 直接写 marker(沿 design §2.3.3 B 两步协议)`,
+                    file: ackLogPath,
+                }));
+                continue;
+            }
+            // 规则 3:ack-log 条目的 finding_hash 与 marker 重算 finding_hash 一致
+            const expectedHash = computeFindingHash(extractHashPayload(f));
+            if (matchAck.finding_hash !== expectedHash) {
+                results.push(failed({
+                    artifact: 'marker',
+                    field: `${fieldBase}.finding_hash`,
+                    message: `ack-log finding_hash (${matchAck.finding_hash?.slice(0, 16)}...) 与 marker finding (重算 ${expectedHash.slice(0, 16)}...) 不一致 — ack 被绑定到不同 payload 的 finding,拒签(沿 design line 499)`,
+                    file: ackLogPath,
+                }));
+            }
+            // v3 m-1 修订:ack-log user 字段必须与 marker severity_acked_by 一致
+            // (防止 AI 在 marker 写 'msc' 但 ack-log 写 'ai-agent' 或反之的不一致路径)
+            if (matchAck.user !== f.severity_acked_by) {
+                results.push(failed({
+                    artifact: 'marker',
+                    field: `${fieldBase}.severity_acked_by`,
+                    message: `ack-log user (${matchAck.user}) 与 marker severity_acked_by (${f.severity_acked_by}) 不一致 — ack 主体不匹配,拒签`,
+                    file: ackLogPath,
+                }));
+            }
+        }
+        // downgrade 路径同样需要 ack-log 验证(规则 1 + 3 类比)
+        if (f.downgraded_from && f.downgrade_acked_by) {
+            const matchDowngrade = ackEntries.find((e) => e.change_id === changeId && e.finding_id === String(f.id) && e.action === 'downgrade');
+            if (!matchDowngrade) {
+                results.push(failed({
+                    artifact: 'marker',
+                    field: `${fieldBase}.downgrade_acked_by`,
+                    message: `marker downgrade ack 字段非空但 ack-log.jsonl 无对应 action=downgrade 条目;AI 不能跨过 user 直接降级(沿 design §2.3.3 C)`,
+                    file: ackLogPath,
+                }));
+            }
+        }
+    }
+    // —— v2 codex BLOCKER 1 新增:pause_decisions ack-log 一致性 ——
+    // 规则:WARNING + severity_acked_by 非空 → ack-log 必须有匹配 action=ack-pause-warning + finding_id=pause_decisions:<id> 条目
+    // 沿 design §2.1.5 "WARNING 必须有 severity_acked_by" + design line 496-500 ack-log cross-check
+    if (pauseDecisionsArr.length > 0) {
+        for (let i = 0; i < pauseDecisionsArr.length; i++) {
+            const p = pauseDecisionsArr[i];
+            const fieldBase = `pause_decisions[${i}]`;
+            // 仅校验 WARNING ack 路径(SUGGESTION 允许空 ack;CRITICAL 由 fence 重定向拒签)
+            if (p.severity === 'WARNING' && (p.severity_acked_by || p.severity_acked_at)) {
+                const findingId = `pause_decisions:${p.id}`;
+                const matchAck = ackEntries.find((e) => e.change_id === changeId &&
+                    e.finding_id === findingId &&
+                    e.action === 'ack-pause-warning');
+                if (!matchAck) {
+                    results.push(failed({
+                        artifact: 'marker',
+                        field: `${fieldBase}.severity_acked_by`,
+                        message: `marker pause_decision id=${p.id} ack 字段非空但 ack-log.jsonl 无对应 kind=ack + action=ack-pause-warning + finding_id=${findingId} 条目;AI 不能跨过 user 直接写 pause_decision ack(沿 design §2.1.5 + 9d v2 B-4 同模式)`,
+                        file: ackLogPath,
+                    }));
+                    continue;
+                }
+                if (matchAck.user !== p.severity_acked_by) {
+                    results.push(failed({
+                        artifact: 'marker',
+                        field: `${fieldBase}.severity_acked_by`,
+                        message: `ack-log user (${matchAck.user}) 与 pause_decision severity_acked_by (${p.severity_acked_by}) 不一致 — ack 主体不匹配,拒签`,
+                        file: ackLogPath,
+                    }));
+                }
+            }
+        }
+    }
+    return mergeResults(...results);
+}
+//# sourceMappingURL=ack-log-consistency.js.map

package/dist/core/archive/ack-log-consistency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ack-log-consistency.js","sourceRoot":"","sources":["../../../src/core/archive/ack-log-consistency.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,qCAAqC;AACrC,uEAAuE;AAEvE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAErF,OAAO,EAAyB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAmBvF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAiB,EACjB,YAAqC,EACrC,QAAgB;IAEhB,kHAAkH;IAClH,MAAM,WAAW,GAAc,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC;QACxE,CAAC,CAAE,YAAY,CAAC,eAA6B;QAC7C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,iBAAiB,GAAc,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC;QAC9E,CAAC,CAAE,YAAY,CAAC,eAA6B;QAC7C,CAAC,CAAC,EAAE,CAAC;IACP,+DAA+D;IAC/D,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC;QAC5C,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,EAC5C,CAAC;QACD,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAErD,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,wBAAwB;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;gBACL,QAAQ,EAAE,QAAQ;gBAClB,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,sBAAsB,YAAY,CAAC,MAAM,mCAAmC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,+DAA+D;gBAC3K,IAAI,EAAE,UAAU;aACjB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kDAAkD;QAClD,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;gBACL,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,4BAA6B,GAAa,CAAC,OAAO,EAAE;aAC9D,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,IAAI,UAAU,GAAkB,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnD,UAAU,GAAG,OAAO;aACjB,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC7B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;aAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,gCAAgC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;gBACL,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,4BAA6B,GAAa,CAAC,OAAO,EAAE;aAC9D,CAAC,CACH,CAAC;QACJ,CAAC;QACD,8CAA8C;IAChD,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAY,CAAC;QACpC,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC;QAE1C,4CAA4C;QAC5C,IACE,CAAC,CAAC,QAAQ,KAAK,SAAS;YACxB,CAAC,CAAC,QAAQ,KAAK,KAAK;YACpB,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,iBAAiB,CAAC,EAC5C,CAAC;YACD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa,CAC1F,CAAC;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;oBACL,QAAQ,EAAE,QAAQ;oBAClB,KAAK,EAAE,GAAG,SAAS,oBAAoB;oBACvC,OAAO,EAAE,mEAAmE,QAAQ,iBAAiB,CAAC,CAAC,EAAE,0EAA0E;oBACnL,IAAI,EAAE,UAAU;iBACjB,CAAC,CACH,CAAC;gBACF,SAAS;YACX,CAAC;YACD,4DAA4D;YAC5D,MAAM,YAAY,GAAG,kBAAkB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,IAAI,QAAQ,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;oBACL,QAAQ,EAAE,QAAQ;oBAClB,KAAK,EAAE,GAAG,SAAS,eAAe;oBAClC,OAAO,EAAE,yBAAyB,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,+DAA+D;oBAC1L,IAAI,EAAE,UAAU;iBACjB,CAAC,CACH,CAAC;YACJ,CAAC;YACD,2DAA2D;YAC3D,4DAA4D;YAC5D,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,iBAAiB,EAAE,CAAC;gBAC1C,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;oBACL,QAAQ,EAAE,QAAQ;oBAClB,KAAK,EAAE,GAAG,SAAS,oBAAoB;oBACvC,OAAO,EAAE,iBAAiB,QAAQ,CAAC,IAAI,iCAAiC,CAAC,CAAC,iBAAiB,sBAAsB;oBACjH,IAAI,EAAE,UAAU;iBACjB,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,kBAAkB,EAAE,CAAC;YAC9C,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CACxF,CAAC;YACF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;oBACL,QAAQ,EAAE,QAAQ;oBAClB,KAAK,EAAE,GAAG,SAAS,qBAAqB;oBACxC,OAAO,EAAE,uGAAuG;oBAChH,IAAI,EAAE,UAAU;iBACjB,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,kHAAkH;IAClH,4FAA4F;IAC5F,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAA4B,CAAC;YAC1D,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC;YAC1C,gEAAgE;YAChE,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,SAAS,KAAK,QAAQ;oBACxB,CAAC,CAAC,UAAU,KAAK,SAAS;oBAC1B,CAAC,CAAC,MAAM,KAAK,mBAAmB,CACnC,CAAC;gBACF,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;wBACL,QAAQ,EAAE,QAAQ;wBAClB,KAAK,EAAE,GAAG,SAAS,oBAAoB;wBACvC,OAAO,EAAE,4BAA4B,CAAC,CAAC,EAAE,iFAAiF,SAAS,0EAA0E;wBAC7M,IAAI,EAAE,UAAU;qBACjB,CAAC,CACH,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,iBAAiB,EAAE,CAAC;oBAC1C,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;wBACL,QAAQ,EAAE,QAAQ;wBAClB,KAAK,EAAE,GAAG,SAAS,oBAAoB;wBACvC,OAAO,EAAE,iBAAiB,QAAQ,CAAC,IAAI,yCAAyC,CAAC,CAAC,iBAAiB,sBAAsB;wBACzH,IAAI,EAAE,UAAU;qBACjB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC,GAAG,OAAO,CAAC,CAAC;AAClC,CAAC"}

package/dist/core/archive/fence.d.ts

@@ -0,0 +1,66 @@
+import type { ProcessEvidenceFinding } from './process-evidence-fence.js';
+/** 单个不变量的检查结果(plan-9e2 v2 codex 一轮 MAJOR 修订:加 status 4 态 enum) */
+export interface FenceInvariantResult {
+    invariant: string;
+    /** plan-9g 现有字段,保留 backwards-compat;不变式 status === 'fail' ⟺ ok === false */
+    ok: boolean;
+    /** plan-9e2 新增 4 态 status;优先级 fail > legacy-skip > warning > pass */
+    status: 'pass' | 'warning' | 'fail' | 'legacy-skip';
+    reason: string;
+}
+/** fence 整体检查结果 */
+export interface FenceCheckResult {
+    ok: boolean;
+    results: FenceInvariantResult[];
+    /** 9g 完成后 permanent 0;legacy 兼容字段保留 */
+    notImplementedCount: number;
+}
+/** fence 调用选项(9g 删 allowStubFence;签名 backward-compat 保留可选字段) */
+export interface FenceCheckOptions {
+    /** @deprecated plan-9g 已填实,本字段无效;保留兼容旧调用 */
+    allowStubFence?: boolean;
+}
+/** 14 不变量名(brainstorm v6 加第 14 个) */
+export declare const FENCE_INVARIANT_NAMES: readonly ["fence-1", "fence-2", "fence-3", "fence-4", "fence-5", "fence-6", "fence-7", "fence-8", "fence-9", "fence-10", "fence-11", "fence-12", "fence-13", "fence-14"];
+export type FenceInvariantName = (typeof FENCE_INVARIANT_NAMES)[number];
+/**
+ * plan-9e2 v2 codex 一轮 MAJOR 修订:legacy 路径下被精确豁免的 invariant 编号集合
+ * 沿 master §3.4.4.1:14 不变量中 #1-8/10/13 跳过(共 10 个),#9/11/12/14 保留校验
+ *
+ * 导出供测试断言用(`expect(LEGACY_EXEMPT_INVARIANTS.size).toBe(10)`)
+ * + summary builder buildProcessEvidenceSummary reference(但不直接用,通过 status='legacy-skip' 折数)
+ */
+export declare const LEGACY_EXEMPT_INVARIANTS: ReadonlySet<number>;
+/**
+ * 横切 fence 检查入口(plan-9g 填实)
+ *
+ * 流程:
+ *   1. 从 changeRoot 读 .verify-passed + .review-passed marker
+ *   2. buildProcessEvidenceFenceContext 一次读全(marker / staging / ack-log / tasks / HEAD)
+ *   3. runFieldFence(ctx)— 不变量 1-4/8/9/11/12/14 同步
+ *   4. await runRerunFence(ctx)— 不变量 5/6/13(worktree 重跑;Task 6 实施)
+ *   5. CRITICAL → fence.ok=false → archive 拒签 exit 1
+ *
+ * @param changeRoot change 目录绝对路径
+ * @param _options FenceCheckOptions(allowStubFence 已无效,保留签名兼容)
+ */
+export declare function crossCuttingFenceCheck(changeRoot: string, _options?: FenceCheckOptions): Promise<FenceCheckResult>;
+/**
+ * mapFindingsToResults — 14 不变量 finding → FenceInvariantResult[14] 纯函数 mapper
+ *
+ * plan-9e2 v2 codex 一轮 MAJOR 修订:从内联代码提取为纯函数(沿 plan-9d / 9j 同模式),便于单元测试
+ *
+ * 优先级:fail > legacy-skip > warning > pass
+ *   1. 任一 invariant 有 CRITICAL → status='fail' / ok=false
+ *   2. legacy 路径下被豁免 invariant(在 LEGACY_EXEMPT_INVARIANTS 集合内)→ status='legacy-skip' / ok=true
+ *   3. 任一 invariant 有 WARNING(未被前两级覆盖)→ status='warning' / ok=true
+ *   4. 默认 → status='pass' / ok=true
+ *
+ * 精度损失:legacy 路径下被豁免 invariant 即使产 WARNING 也被吞为 'legacy-skip',不计入 warning
+ *           (沿 brainstorm spec §4.3 副作用,v1.0 接受,v1.1+ side-aware 拆分)
+ */
+export declare function mapFindingsToResults(opts: {
+    findings: readonly ProcessEvidenceFinding[];
+    effectiveLegacyExempt: boolean;
+}): FenceInvariantResult[];
+//# sourceMappingURL=fence.d.ts.map

package/dist/core/archive/fence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fence.d.ts","sourceRoot":"","sources":["../../../src/core/archive/fence.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAEV,sBAAsB,EACvB,MAAM,6BAA6B,CAAC;AAKrC,kEAAkE;AAClE,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,EAAE,EAAE,OAAO,CAAC;IACZ,qEAAqE;IACrE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,aAAa,CAAC;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,mBAAmB;AACnB,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,oBAAoB,EAAE,CAAC;IAChC,uCAAuC;IACvC,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,qCAAqC;AACrC,eAAO,MAAM,qBAAqB,0KAexB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAEvD,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,QAAQ,GAAE,iBAAsB,GAC/B,OAAO,CAAC,gBAAgB,CAAC,CAoI3B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC5C,qBAAqB,EAAE,OAAO,CAAC;CAChC,GAAG,oBAAoB,EAAE,CA6BzB"}