@accelerator-mzq/forge 1.4.0

package/dist/core/hash/content.js

@@ -0,0 +1,131 @@
+// content_hash:[proposal.md, design.md, specs/**/*.md, tasks.md] 按字典序拼接 SHA256
+import { createHash } from 'node:crypto';
+import { readFile, readdir } from 'node:fs/promises';
+import { join, posix, relative, sep } from 'node:path';
+import { parseMarkdown } from '../parse/markdown.js';
+import { SCOPE_ANCHOR_IDS } from '../schemas/scope-entries.js';
+/**
+ * 计算 content_hash(spec §3.4)。
+ * 规则:
+ * 1. 收集 [proposal.md, design.md, specs/**\/*.md(递归), tasks.md]
+ * 2. 用 POSIX 风格 path 排序(无论 OS,跨平台一致)
+ * 3. 每个文件用同款规范化(LF + 去尾空白)
+ * 4. 拼接 `<path>\0<normalized_content>\0` 各文件 → SHA256
+ */
+export async function computeContentHash(changeDir) {
+    // 收集顶层固定文件(POSIX 路径)
+    const files = ['proposal.md', 'design.md', 'tasks.md'];
+    // specs/ 下的所有 .md 文件(递归扫描子目录,用 posix 路径保证跨平台一致)
+    const specsDir = join(changeDir, 'specs');
+    try {
+        const entries = await readdir(specsDir, { recursive: true, withFileTypes: true });
+        for (const entry of entries) {
+            if (entry.isFile() && entry.name.endsWith('.md')) {
+                // Node 20.12+ 提供 parentPath;旧版本 fallback 到 path
+                const parent = entry.parentPath ??
+                    entry.path;
+                const absPath = join(parent, entry.name);
+                const relFromSpecs = relative(specsDir, absPath);
+                const posixRel = relFromSpecs.split(sep).join('/');
+                files.push(posix.join('specs', posixRel));
+            }
+        }
+    }
+    catch (err) {
+        // 仅 ENOENT(specs/ 不存在)允许跳过,其他 IO 错误抛出
+        const code = err.code;
+        if (code !== 'ENOENT')
+            throw err;
+    }
+    // 字典序排序确保顺序一致
+    files.sort();
+    const hash = createHash('sha256');
+    for (const rel of files) {
+        let content;
+        try {
+            // 注意:读文件时用 OS join,但哈希 key 用 posix rel 路径
+            content = await readFile(join(changeDir, rel), 'utf8');
+        }
+        catch {
+            // 文件不存在 → 用 <MISSING> 占位(让 hash 跟"存在但空"区分)
+            content = '<MISSING>';
+        }
+        // plan-9b §2.6.3:proposal.md / design.md 在算 hash 前剔除 anchor 三段
+        const stripped = rel === 'proposal.md' || rel === 'design.md' ? stripScopeAnchoredSections(content) : content;
+        const normalized = normalizeForHash(stripped);
+        hash.update(rel); // POSIX 路径名
+        hash.update('\0'); // 空字节分隔符
+        hash.update(normalized);
+        hash.update('\0'); // 空字节分隔符
+    }
+    return `sha256:${hash.digest('hex')}`;
+}
+/**
+ * 规范化文本内容:
+ * 1. CRLF / CR → LF
+ * 2. 每行末尾空白(空格 / tab)去除
+ */
+function normalizeForHash(text) {
+    return text
+        .replace(/\r\n?/g, '\n') // 统一行尾
+        .split('\n')
+        .map((line) => line.replace(/[ \t]+$/, '')) // 去尾部空白
+        .join('\n');
+}
+/**
+ * 从 markdown 文本剔除带 SCOPE_ANCHOR_IDS(forge-oos / forge-non-goals / forge-future-work)
+ * 的段(含 heading 行 + 该段全部 body + 任意 H3+ 子标题及其内容,
+ * 直到下一个同级或更高级 heading 或文件末尾)。
+ *
+ * v2 codex MAJOR 2 修订:不能直接用 parseMarkdown 的 section.endLine,
+ * 因为 parseMarkdown 任意 level heading 都关 section,H3 子标题会被切成独立 section
+ * 让剔除不完整。本函数自己扫 sections,根据 level 自行算"下一同级或更高级"区间。
+ *
+ * 实施:proposal.md / design.md 走此过滤后再计 content_hash。
+ */
+function stripScopeAnchoredSections(text) {
+    const md = parseMarkdown(text);
+    const sections = md.sections;
+    // 收集要剔除的行号区间 [start, end](1-indexed,inclusive,在 body 行坐标系)
+    const ranges = [];
+    // body 的总行数(用于"剔除到文件末尾"的边界)
+    const bodyLineCount = md.body.split('\n').length;
+    for (let i = 0; i < sections.length; i++) {
+        const sec = sections[i];
+        if (!sec)
+            continue;
+        // 仅处理带目标 anchor ID 的段
+        if (!sec.anchor || !SCOPE_ANCHOR_IDS.includes(sec.anchor))
+            continue;
+        // 找下一个 level <= sec.level 的 section,作为本剔除区间的结束(exclusive)
+        let endLineInclusive = bodyLineCount; // 默认到文件末尾
+        for (let j = i + 1; j < sections.length; j++) {
+            const nextSec = sections[j];
+            if (!nextSec)
+                continue;
+            if (nextSec.level <= sec.level) {
+                // 区间结束于下一同级或更高级 heading 的前一行
+                endLineInclusive = nextSec.startLine - 1;
+                break;
+            }
+        }
+        ranges.push({ start: sec.startLine, end: endLineInclusive });
+    }
+    if (ranges.length === 0)
+        return text;
+    // 剥 frontmatter — parseMarkdown 内部已剥掉,sections 行号是 body 内 1-indexed
+    const fmMatch = text.match(/^---\n[\s\S]*?\n---\n/);
+    const frontmatter = fmMatch ? fmMatch[0] : '';
+    const body = fmMatch ? text.slice(fmMatch[0].length) : text;
+    const lines = body.split('\n');
+    // 构建"保留行"
+    const keepLines = [];
+    for (let i = 0; i < lines.length; i++) {
+        const lineNum = i + 1; // 1-indexed body 内
+        const inRange = ranges.some((r) => lineNum >= r.start && lineNum <= r.end);
+        if (!inRange)
+            keepLines.push(lines[i] ?? '');
+    }
+    return frontmatter + keepLines.join('\n');
+}
+//# sourceMappingURL=content.js.map

package/dist/core/hash/content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../../src/core/hash/content.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAE/D;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,qBAAqB;IACrB,MAAM,KAAK,GAAa,CAAC,aAAa,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAEjE,gDAAgD;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,gDAAgD;gBAChD,MAAM,MAAM,GACT,KAA0D,CAAC,UAAU;oBACrE,KAAqC,CAAC,IAAI,CAAC;gBAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzC,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACnD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sCAAsC;QACtC,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IACnC,CAAC;IAED,cAAc;IACd,KAAK,CAAC,IAAI,EAAE,CAAC;IAEb,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,0CAA0C;YAC1C,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;YAC3C,OAAO,GAAG,WAAW,CAAC;QACxB,CAAC;QACD,+DAA+D;QAC/D,MAAM,QAAQ,GACZ,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/F,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY;QAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC5B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;IAC9B,CAAC;IAED,OAAO,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI;SACR,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO;SAC/B,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ;SACnD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,0BAA0B,CAAC,IAAY;IAC9C,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC;IAE7B,2DAA2D;IAC3D,MAAM,MAAM,GAAqC,EAAE,CAAC;IACpD,4BAA4B;IAC5B,MAAM,aAAa,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAEjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,sBAAsB;QACtB,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAE3F,0DAA0D;QAC1D,IAAI,gBAAgB,GAAG,aAAa,CAAC,CAAC,UAAU;QAChD,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBAC/B,6BAA6B;gBAC7B,gBAAgB,GAAG,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;gBACzC,MAAM;YACR,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,oEAAoE;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE/B,UAAU;IACV,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO;YAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC"}

package/dist/core/hash/diff.d.ts

@@ -0,0 +1,26 @@
+/**
+ * diff hash 的默认排除 glob 列表（等同于 DEFAULT_CODE_EXCLUDE）。
+ * 包含所有 marker 文件路径，确保 marker 写入不会影响代码 diff hash。
+ */
+export declare const DEFAULT_DIFF_EXCLUDE: readonly ["forge/**", "**/*.md", "**/.verify-passed", "**/.review-passed", "**/.verify-failed", "**/.review-failed", "**/.evidence/**"];
+/**
+ * git diff pathspec 参数结构。
+ * include：要纳入 diff 的 glob 路径列表（如 ['src/**']）。
+ * exclude：要排除的 glob 路径列表（用 `:!<glob>` 语法传给 git）。
+ */
+export interface DiffPathspec {
+    include: string[];
+    exclude: string[];
+}
+/**
+ * 计算 diff hash。
+ *
+ * 执行 `git diff HEAD -- <include...> :!<exclude...>`，对 stdout 做 SHA256。
+ * 当工作区与 HEAD 完全一致时（无未提交修改），diff 为空，hash 为空字符串的 SHA256。
+ *
+ * @param repoRoot git 仓库根目录（绝对路径）
+ * @param pathspec include/exclude pathspec 配置
+ * @returns `sha256:<64位hex>` 格式的 hash 字符串
+ */
+export declare function computeDiffHash(repoRoot: string, pathspec: DiffPathspec): Promise<string>;
+//# sourceMappingURL=diff.d.ts.map

package/dist/core/hash/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../../src/core/hash/diff.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,eAAO,MAAM,oBAAoB,yIAAuB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAe/F"}

package/dist/core/hash/diff.js

@@ -0,0 +1,40 @@
+// diff_hash：对 `git diff HEAD -- <pathspec>` 输出做 SHA256 — spec §3.4
+// 通过 include/exclude pathspec 精准控制哪些文件参与 hash 计算，
+// 防止 .verify-passed 等 marker 文件写入后污染 diff（自引用悖论）。
+import { createHash } from 'node:crypto';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { DEFAULT_CODE_EXCLUDE } from '../schema/index.js';
+const execFileAsync = promisify(execFile);
+/**
+ * diff hash 的默认排除 glob 列表（等同于 DEFAULT_CODE_EXCLUDE）。
+ * 包含所有 marker 文件路径，确保 marker 写入不会影响代码 diff hash。
+ */
+export const DEFAULT_DIFF_EXCLUDE = DEFAULT_CODE_EXCLUDE;
+/**
+ * 计算 diff hash。
+ *
+ * 执行 `git diff HEAD -- <include...> :!<exclude...>`，对 stdout 做 SHA256。
+ * 当工作区与 HEAD 完全一致时（无未提交修改），diff 为空，hash 为空字符串的 SHA256。
+ *
+ * @param repoRoot git 仓库根目录（绝对路径）
+ * @param pathspec include/exclude pathspec 配置
+ * @returns `sha256:<64位hex>` 格式的 hash 字符串
+ */
+export async function computeDiffHash(repoRoot, pathspec) {
+    // 构建 git diff 参数：'diff HEAD -- <include> :!<exclude>'
+    const args = ['diff', 'HEAD', '--'];
+    for (const p of pathspec.include)
+        args.push(p);
+    for (const e of pathspec.exclude)
+        args.push(`:!${e}`);
+    const { stdout } = await execFileAsync('git', args, {
+        cwd: repoRoot,
+        encoding: 'utf8',
+        maxBuffer: 50 * 1024 * 1024, // 50 MB，大 diff 兜底
+    });
+    // 对 diff 输出做 SHA256，空 diff 也会得到固定 hash
+    const sha = createHash('sha256').update(stdout, 'utf8').digest('hex');
+    return `sha256:${sha}`;
+}
+//# sourceMappingURL=diff.js.map

package/dist/core/hash/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../../src/core/hash/diff.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,kDAAkD;AAClD,kDAAkD;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAYzD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,QAAsB;IAC5E,sDAAsD;IACtD,MAAM,IAAI,GAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEtD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE;QAClD,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,kBAAkB;KAChD,CAAC,CAAC;IAEH,uCAAuC;IACvC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,OAAO,UAAU,GAAG,EAAE,CAAC;AACzB,CAAC"}

package/dist/core/hash/index.d.ts

@@ -0,0 +1,6 @@
+export { computeTasksHash } from './tasks.js';
+export { computeContentHash } from './content.js';
+export { computeLogHash } from './log.js';
+export { computeDiffHash, DEFAULT_DIFF_EXCLUDE } from './diff.js';
+export type { DiffPathspec } from './diff.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/hash/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/hash/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAClE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/dist/core/hash/index.js

@@ -0,0 +1,7 @@
+// hash 模块公共 API — 统一导出四个 hash 函数
+export { computeTasksHash } from './tasks.js';
+export { computeContentHash } from './content.js';
+export { computeLogHash } from './log.js';
+// Task 15：git diff pathspec hash
+export { computeDiffHash, DEFAULT_DIFF_EXCLUDE } from './diff.js';
+//# sourceMappingURL=index.js.map

package/dist/core/hash/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/hash/index.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,iCAAiC;AACjC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC"}

package/dist/core/hash/log.d.ts

@@ -0,0 +1,7 @@
+/**
+ * 计算 log 文件的字节级 SHA256 hash。
+ * 不做任何规范化,保证字节级一致性。
+ * 文件不存在时抛出异常(由调用方处理)。
+ */
+export declare function computeLogHash(logPath: string): Promise<string>;
+//# sourceMappingURL=log.d.ts.map

package/dist/core/hash/log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../../src/core/hash/log.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIrE"}

package/dist/core/hash/log.js

@@ -0,0 +1,14 @@
+// log_hash:对 evidence log 文件的字节做 SHA256(不规范化,字节级一致)
+import { createHash } from 'node:crypto';
+import { readFile } from 'node:fs/promises';
+/**
+ * 计算 log 文件的字节级 SHA256 hash。
+ * 不做任何规范化,保证字节级一致性。
+ * 文件不存在时抛出异常(由调用方处理)。
+ */
+export async function computeLogHash(logPath) {
+    const buf = await readFile(logPath); // 字节读取,不指定编码
+    const sha = createHash('sha256').update(buf).digest('hex');
+    return `sha256:${sha}`;
+}
+//# sourceMappingURL=log.js.map

package/dist/core/hash/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../../../src/core/hash/log.ts"],"names":[],"mappings":"AAAA,oDAAoD;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe;IAClD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;IAClD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,OAAO,UAAU,GAAG,EAAE,CAAC;AACzB,CAAC"}

package/dist/core/hash/tasks.d.ts

@@ -0,0 +1,9 @@
+/**
+ * 规范化:
+ * 1. CRLF / CR → LF
+ * 2. 每行末尾空白(空格 / tab)去除
+ * 3. UTF-8 字节
+ * 然后 SHA256。
+ */
+export declare function computeTasksHash(content: string): string;
+//# sourceMappingURL=tasks.d.ts.map

package/dist/core/hash/tasks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../../src/core/hash/tasks.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CASxD"}

package/dist/core/hash/tasks.js

@@ -0,0 +1,20 @@
+// tasks.md hash 计算 — 规范化:LF 行尾、UTF-8、去尾空白(spec §3.4)
+import { createHash } from 'node:crypto';
+/**
+ * 规范化:
+ * 1. CRLF / CR → LF
+ * 2. 每行末尾空白(空格 / tab)去除
+ * 3. UTF-8 字节
+ * 然后 SHA256。
+ */
+export function computeTasksHash(content) {
+    const normalized = content
+        .replace(/\r\n?/g, '\n') // CRLF/CR 统一转 LF
+        .split('\n')
+        .map((line) => line.replace(/[ \t]+$/, '')) // 去除每行尾部空白
+        .join('\n');
+    const buf = Buffer.from(normalized, 'utf8');
+    const sha = createHash('sha256').update(buf).digest('hex');
+    return `sha256:${sha}`;
+}
+//# sourceMappingURL=tasks.js.map

package/dist/core/hash/tasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tasks.js","sourceRoot":"","sources":["../../../src/core/hash/tasks.ts"],"names":[],"mappings":"AAAA,qDAAqD;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,UAAU,GAAG,OAAO;SACvB,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,iBAAiB;SACzC,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW;SACtD,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,OAAO,UAAU,GAAG,EAAE,CAAC;AACzB,CAAC"}

package/dist/core/legacy-bridge/ack.d.ts

@@ -0,0 +1,30 @@
+import type { LegacyAnchorsFile } from './types.js';
+import type { ForgeConfig } from '../schema/types.js';
+/** ack 文件路径 */
+export declare function ackPath(forgeRoot: string): string;
+/** 计算 config.yaml#legacy_bridge 段的 hash(用于检测用户改 config 后要求重新 ack) */
+export declare function computeConfigHash(config: ForgeConfig): string;
+/** ack 校验结果 */
+export interface AckCheckResult {
+    ok: boolean;
+    /** ok=false 时给 caller 的下一步提示 */
+    reason?: 'allow_llm_calls=false' | 'ack-missing' | 'ack-stale-config-changed' | 'customer-data-not-acknowledged';
+    /** 当前 config_hash(供 caller 写入新 ack) */
+    currentConfigHash: string;
+    /** 含客户数据的 anchor 路径(reason=customer-data-not-acknowledged 时填) */
+    customerDataPaths?: string[];
+}
+/** 检查 ack 状态:是否允许跑 LLM 命令 */
+export declare function checkAck(forgeRoot: string, config: ForgeConfig, anchors: LegacyAnchorsFile | null): Promise<AckCheckResult>;
+/**
+ * 写 ack 文件(`forge legacy-bridge --acknowledge-data-transfer`)。
+ *
+ * @param forgeRoot           forge 根目录
+ * @param config              当前 config(用于计算 config_hash)
+ * @param customerDataAck    若 anchors 中存在 contains_customer_data=true 的项,
+ *                            必须传 true 才写入(否则抛错引导用户先看 §4.5 提示)
+ */
+export declare function writeAck(forgeRoot: string, config: ForgeConfig, customerDataAck?: boolean): Promise<void>;
+/** 渲染 opt-in 拒绝时给用户的完整提示(spec §2.7) */
+export declare function renderOptinPrompt(reason: AckCheckResult['reason'], customerDataPaths?: string[]): string;
+//# sourceMappingURL=ack.d.ts.map

package/dist/core/legacy-bridge/ack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ack.d.ts","sourceRoot":"","sources":["../../../src/core/legacy-bridge/ack.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAc,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,eAAe;AACf,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,qEAAqE;AACrE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAM7D;AAED,eAAe;AACf,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,gCAAgC;IAChC,MAAM,CAAC,EACH,uBAAuB,GACvB,aAAa,GACb,0BAA0B,GAC1B,gCAAgC,CAAC;IACrC,uCAAuC;IACvC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,6BAA6B;AAC7B,wBAAsB,QAAQ,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAChC,OAAO,CAAC,cAAc,CAAC,CA6CzB;AAED;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAC5B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,eAAe,GAAE,OAAe,GAC/B,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,uCAAuC;AACvC,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,EAChC,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAC3B,MAAM,CAgDR"}

package/dist/core/legacy-bridge/ack.js

@@ -0,0 +1,133 @@
+// LLM opt-in ack 流程 — Plan 7 Phase B1
+// 决策 #22:首次跑 brownfield 命令时,要求用户显式 ack 数据传输到 LLM provider
+// §4.5 GDPR:含客户数据的 anchor 还需 customer_data_acknowledged 二次确认
+import { writeFile, readFile, mkdir } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { createHash } from 'node:crypto';
+import { parse as parseYaml, stringify as stringifyYaml } from 'yaml';
+/** ack 文件路径 */
+export function ackPath(forgeRoot) {
+    return join(forgeRoot, '.cache', 'llm-ack.yaml');
+}
+/** 计算 config.yaml#legacy_bridge 段的 hash(用于检测用户改 config 后要求重新 ack) */
+export function computeConfigHash(config) {
+    const lb = config.legacy_bridge ?? {};
+    // I2 修:JSON.stringify 第二参数为数组时,作为 key 白名单 + 输出顺序保证(MDN replacer array
+    // 语义)。等效于按 sorted key 顺序序列化 lb 全部字段,产出对 key 顺序无关的 stable 字符串。
+    const stable = JSON.stringify(lb, Object.keys(lb).sort());
+    return createHash('sha256').update(stable).digest('hex').slice(0, 16);
+}
+/** 检查 ack 状态:是否允许跑 LLM 命令 */
+export async function checkAck(forgeRoot, config, anchors) {
+    const currentConfigHash = computeConfigHash(config);
+    // 1. allow_llm_calls 必须为 true
+    if (!config.legacy_bridge?.allow_llm_calls) {
+        return { ok: false, reason: 'allow_llm_calls=false', currentConfigHash };
+    }
+    // 2. ack 文件必须存在
+    const path = ackPath(forgeRoot);
+    if (!existsSync(path)) {
+        return { ok: false, reason: 'ack-missing', currentConfigHash };
+    }
+    // 3. ack 与当前 config 一致(hash 比对)
+    // C1 修:writeFile 中途中断会留 0 字节空文件;parseYaml('') 返 null;
+    // 直接 ack.schema 抛 TypeError。包 try/catch + null 判断,异常 → ack-missing 让用户重 ack。
+    const raw = await readFile(path, 'utf8');
+    let ack;
+    try {
+        ack = parseYaml(raw);
+    }
+    catch {
+        return { ok: false, reason: 'ack-missing', currentConfigHash };
+    }
+    if (ack == null || ack.schema !== 'forge-llm-ack/v1') {
+        return { ok: false, reason: 'ack-missing', currentConfigHash };
+    }
+    if (ack.config_hash !== currentConfigHash) {
+        return { ok: false, reason: 'ack-stale-config-changed', currentConfigHash };
+    }
+    // 4. GDPR:含客户数据的 anchor 是否单独 ack
+    const customerDataPaths = (anchors?.anchors ?? [])
+        .filter((a) => a.contains_customer_data === true)
+        .map((a) => a.path);
+    if (customerDataPaths.length > 0 && !ack.customer_data_acknowledged) {
+        return {
+            ok: false,
+            reason: 'customer-data-not-acknowledged',
+            currentConfigHash,
+            customerDataPaths,
+        };
+    }
+    return { ok: true, currentConfigHash };
+}
+/**
+ * 写 ack 文件(`forge legacy-bridge --acknowledge-data-transfer`)。
+ *
+ * @param forgeRoot           forge 根目录
+ * @param config              当前 config(用于计算 config_hash)
+ * @param customerDataAck    若 anchors 中存在 contains_customer_data=true 的项,
+ *                            必须传 true 才写入(否则抛错引导用户先看 §4.5 提示)
+ */
+export async function writeAck(forgeRoot, config, customerDataAck = false) {
+    await mkdir(join(forgeRoot, '.cache'), { recursive: true });
+    const ack = {
+        schema: 'forge-llm-ack/v1',
+        acknowledged_at: new Date().toISOString(),
+        config_hash: computeConfigHash(config),
+        customer_data_acknowledged: customerDataAck,
+    };
+    // M1 修:0o600(rw-------)防 enterprise 多用户机器上其他 user 读 config_hash 推测 legacy_bridge 段结构
+    await writeFile(ackPath(forgeRoot), stringifyYaml(ack), { encoding: 'utf8', mode: 0o600 });
+}
+/** 渲染 opt-in 拒绝时给用户的完整提示(spec §2.7) */
+export function renderOptinPrompt(reason, customerDataPaths) {
+    if (reason === 'allow_llm_calls=false' || reason === 'ack-missing') {
+        return `
+✗ legacy-bridge 命令需要发送数据到 Anthropic API。
+
+数据传输内容:
+- docs/legacy/ 下的老文档全文
+- src/ 下的代码片段
+- tests/ 下的测试用例
+
+数据已通过 forge/legacy-anchors.yaml#redact 配置 mask。
+提供商:Anthropic Claude API(默认,v0.2 唯一支持)
+数据驻留:Anthropic 当前默认不保留 30+ 天
+
+启用步骤:
+1. 在 forge/config.yaml 加:
+   legacy_bridge:
+     allow_llm_calls: true
+2. 跑 forge legacy-bridge --acknowledge-data-transfer
+   (一次性 ack,记录到 forge/.cache/llm-ack.yaml)
+3. 重新跑当前命令
+
+合规场景:enterprise / air-gapped / GDPR 要求数据驻留时,
+保持 false 或省略此字段。brownfield 工具拒绝运行,
+archive sync-check 自动 graceful skip,forge 主工作流不变。
+`.trim();
+    }
+    if (reason === 'ack-stale-config-changed') {
+        return `
+✗ forge/config.yaml#legacy_bridge 段已变化,llm-ack.yaml 已过期。
+请重新跑 forge legacy-bridge --acknowledge-data-transfer 确认新配置。
+`.trim();
+    }
+    if (reason === 'customer-data-not-acknowledged') {
+        const paths = customerDataPaths ?? [];
+        return `
+✗ 以下 anchor 标为含客户数据(contains_customer_data: true):
+${paths.map((p) => `  - ${p}`).join('\n')}
+
+启用 LLM 调用前请确认有数据出境授权(GDPR Art. 44+ / DPA 协议),
+并已签 Anthropic DPA。然后跑:
+
+  forge legacy-bridge --acknowledge-data-transfer --acknowledge-customer-data
+
+来一并确认两项 ack。
+`.trim();
+    }
+    return `✗ unknown ack state: ${reason}`;
+}
+//# sourceMappingURL=ack.js.map

package/dist/core/legacy-bridge/ack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ack.js","sourceRoot":"","sources":["../../../src/core/legacy-bridge/ack.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,0DAA0D;AAC1D,6DAA6D;AAE7D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAItE,eAAe;AACf,MAAM,UAAU,OAAO,CAAC,SAAiB;IACvC,OAAO,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;AACnD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,EAAE,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;IACtC,sEAAsE;IACtE,8DAA8D;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAiBD,6BAA6B;AAC7B,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,SAAiB,EACjB,MAAmB,EACnB,OAAiC;IAEjC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAEpD,8BAA8B;IAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,CAAC;IAC3E,CAAC;IAED,gBAAgB;IAChB,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC;IACjE,CAAC;IAED,gCAAgC;IAChC,sDAAsD;IACtD,6EAA6E;IAC7E,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,GAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,GAAG,GAAG,SAAS,CAAC,GAAG,CAAsB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,iBAAiB,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,CAAC;IAC9E,CAAC;IAED,iCAAiC;IACjC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;SAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB,KAAK,IAAI,CAAC;SAChD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gCAAgC;YACxC,iBAAiB;YACjB,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,SAAiB,EACjB,MAAmB,EACnB,kBAA2B,KAAK;IAEhC,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAe;QACtB,MAAM,EAAE,kBAAkB;QAC1B,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACzC,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;QACtC,0BAA0B,EAAE,eAAe;KAC5C,CAAC;IACF,qFAAqF;IACrF,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,iBAAiB,CAC/B,MAAgC,EAChC,iBAA4B;IAE5B,IAAI,MAAM,KAAK,uBAAuB,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QACnE,OAAO;;;;;;;;;;;;;;;;;;;;;;;CAuBV,CAAC,IAAI,EAAE,CAAC;IACP,CAAC;IACD,IAAI,MAAM,KAAK,0BAA0B,EAAE,CAAC;QAC1C,OAAO;;;CAGV,CAAC,IAAI,EAAE,CAAC;IACP,CAAC;IACD,IAAI,MAAM,KAAK,gCAAgC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,iBAAiB,IAAI,EAAE,CAAC;QACtC,OAAO;;EAET,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;CAQxC,CAAC,IAAI,EAAE,CAAC;IACP,CAAC;IACD,OAAO,wBAAwB,MAAM,EAAE,CAAC;AAC1C,CAAC"}

package/dist/core/legacy-bridge/anchors.d.ts

@@ -0,0 +1,15 @@
+import type { LegacyAnchorsFile, LegacyAnchor, LegacyAnchorRole } from './types.js';
+/** 自定义异常:legacy-anchors.yaml 解析或校验失败(供 CLI 转 exit 1) */
+export declare class LegacyAnchorsError extends Error {
+    readonly path?: string | undefined;
+    constructor(message: string, path?: string | undefined);
+}
+/** 读 legacy-anchors.yaml + 校验;不存在时返回 null(供 graceful skip) */
+export declare function loadAnchorsFile(forgeRoot: string): Promise<LegacyAnchorsFile | null>;
+/** 校验 LegacyAnchorsFile 结构 */
+export declare function validateAnchorsFile(data: unknown, ctx: string): LegacyAnchorsFile;
+/** 取所有 authoritative=true 的 anchor(用于 regenerate / sync-check 仅用当前版,决策 #10) */
+export declare function getAuthoritativeAnchors(file: LegacyAnchorsFile): LegacyAnchor[];
+/** 按 role 分组(用于跨 role 一致性判定,决策 #18) */
+export declare function groupAnchorsByRole(file: LegacyAnchorsFile): Map<LegacyAnchorRole, LegacyAnchor[]>;
+//# sourceMappingURL=anchors.d.ts.map

package/dist/core/legacy-bridge/anchors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchors.d.ts","sourceRoot":"","sources":["../../../src/core/legacy-bridge/anchors.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAapF,wDAAwD;AACxD,qBAAa,kBAAmB,SAAQ,KAAK;aAGzB,IAAI,CAAC,EAAE,MAAM;gBAD7B,OAAO,EAAE,MAAM,EACC,IAAI,CAAC,EAAE,MAAM,YAAA;CAKhC;AAED,8DAA8D;AAC9D,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAmB1F;AAED,8BAA8B;AAC9B,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAqCjF;AAuCD,+EAA+E;AAC/E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,iBAAiB,GAAG,YAAY,EAAE,CAE/E;AAED,uCAAuC;AACvC,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,GAAG,CAAC,gBAAgB,EAAE,YAAY,EAAE,CAAC,CAQjG"}

package/dist/core/legacy-bridge/anchors.js

@@ -0,0 +1,119 @@
+// legacy-anchors.yaml 解析 + 校验(forge-legacy-anchor/v1)
+// spec §2.2 / §4.1 / 决策 #9-10 / §4.3 不变量
+import { readFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { parse as parseYaml } from 'yaml';
+// `as const satisfies` 让数组元素被 LegacyAnchorRole 收窄,加新元素时 TS 类型层报错
+const VALID_ROLES = [
+    'requirements',
+    'high-level-design',
+    'low-level-design',
+    'system-tests',
+    'acceptance-report',
+    'rationale',
+    'glossary',
+];
+/** 自定义异常:legacy-anchors.yaml 解析或校验失败(供 CLI 转 exit 1) */
+export class LegacyAnchorsError extends Error {
+    path;
+    constructor(message, path) {
+        super(path ? `${path}: ${message}` : message);
+        this.path = path;
+        this.name = 'LegacyAnchorsError';
+    }
+}
+/** 读 legacy-anchors.yaml + 校验;不存在时返回 null(供 graceful skip) */
+export async function loadAnchorsFile(forgeRoot) {
+    const path = `${forgeRoot}/legacy-anchors.yaml`;
+    if (!existsSync(path))
+        return null;
+    // 包装 IO 错误(EACCES / EISDIR / ENOENT race / EMFILE)统一抛 LegacyAnchorsError,
+    // caller 不必区分 LegacyAnchorsError vs raw NodeJS.ErrnoException(C1 修复)
+    let raw;
+    try {
+        raw = await readFile(path, 'utf8');
+    }
+    catch (err) {
+        throw new LegacyAnchorsError(`读取失败:${err.message}`, path);
+    }
+    let parsed;
+    try {
+        parsed = parseYaml(raw);
+    }
+    catch (err) {
+        // §4.1:YAML 解析失败 — 行号 + 错误描述,不擅自修复
+        throw new LegacyAnchorsError(`YAML 解析失败:${err.message}`, path);
+    }
+    return validateAnchorsFile(parsed, path);
+}
+/** 校验 LegacyAnchorsFile 结构 */
+export function validateAnchorsFile(data, ctx) {
+    if (!data || typeof data !== 'object') {
+        throw new LegacyAnchorsError('legacy-anchors.yaml 顶层必须是对象', ctx);
+    }
+    const file = data;
+    if (file.schema !== 'forge-legacy-anchor/v1') {
+        throw new LegacyAnchorsError(`schema 字段必须为 'forge-legacy-anchor/v1',实际:${String(file.schema)}`, ctx);
+    }
+    if (!Array.isArray(file.anchors)) {
+        throw new LegacyAnchorsError('anchors 字段必须是数组', ctx);
+    }
+    // 校验每条 anchor
+    for (const [idx, a] of file.anchors.entries()) {
+        validateAnchor(a, `${ctx}#anchors[${idx}]`);
+    }
+    // §4.1 + 决策 #10:同 role 多个 authoritative=true → 抛错
+    const authByRole = new Map();
+    for (const a of file.anchors) {
+        if (a.authoritative) {
+            authByRole.set(a.role, (authByRole.get(a.role) ?? 0) + 1);
+        }
+    }
+    for (const [role, count] of authByRole.entries()) {
+        if (count > 1) {
+            throw new LegacyAnchorsError(`role '${role}' 有 ${count} 个 authoritative=true;每 role 仅允许 1 个(决策 #10)`, ctx);
+        }
+    }
+    return file;
+}
+/** 允许的文件扩展名(决策 #13 + P7-04 修复:加白名单硬校验) */
+const ALLOWED_EXTENSIONS = ['.md', '.txt', '.csv', '.xlsx'];
+function validateAnchor(a, ctx) {
+    if (!a || typeof a !== 'object') {
+        throw new LegacyAnchorsError('anchor 必须是对象', ctx);
+    }
+    const an = a;
+    if (typeof an.role !== 'string' || !VALID_ROLES.includes(an.role)) {
+        throw new LegacyAnchorsError(`role '${String(an.role)}' 非预定义角色;可选:${VALID_ROLES.join(', ')}`, ctx);
+    }
+    if (typeof an.path !== 'string' || !an.path.trim()) {
+        throw new LegacyAnchorsError('path 字段缺失或非字符串', ctx);
+    }
+    // P7-04 修复:决策 #12 拒绝外部 URL
+    if (/^(https?|ftp|s3|gs|ssh|file):\/\//i.test(an.path)) {
+        throw new LegacyAnchorsError(`path '${an.path}' 是外部 URL;v0.2 仅支持 git 内文件(决策 #12),先 export 到 git`, ctx);
+    }
+    // P7-04 修复:决策 #13 文件格式白名单(.md / .txt / .csv / .xlsx)
+    const lower = an.path.toLowerCase();
+    if (!ALLOWED_EXTENSIONS.some((ext) => lower.endsWith(ext))) {
+        throw new LegacyAnchorsError(`path '${an.path}' 扩展名不在白名单 ${ALLOWED_EXTENSIONS.join('/')};Word/PDF 先 pandoc 转 markdown(决策 #13)`, ctx);
+    }
+    if (typeof an.authoritative !== 'boolean') {
+        throw new LegacyAnchorsError('authoritative 字段必须是 boolean', ctx);
+    }
+}
+/** 取所有 authoritative=true 的 anchor(用于 regenerate / sync-check 仅用当前版,决策 #10) */
+export function getAuthoritativeAnchors(file) {
+    return file.anchors.filter((a) => a.authoritative);
+}
+/** 按 role 分组(用于跨 role 一致性判定,决策 #18) */
+export function groupAnchorsByRole(file) {
+    const m = new Map();
+    for (const a of file.anchors) {
+        const arr = m.get(a.role) ?? [];
+        arr.push(a);
+        m.set(a.role, arr);
+    }
+    return m;
+}
+//# sourceMappingURL=anchors.js.map