@accelerator-mzq/forge 1.4.0

package/dist/core/validate/change.js

@@ -0,0 +1,205 @@
+// src/core/validate/change.ts — 顶层 validateChange，读取 change 目录，跑所有 artifact 校验，合并结果
+// v2 B1 + v3 B1 修订:计算真实运行时 ctx(contentHash + gitHead),不含 ephemeral runId
+// v3 B2 修订:fs 错(cannot read X)不标 severity + [fs] message 前缀;business-fail 标 CRITICAL
+// plan-9d Task 4 v2 B-2 修订:加 coverage_gap finding 自动产 + test_failure stub warning
+import { readFile, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { execFileSync } from 'node:child_process';
+import { parseProposal, parseSpec, parseDesign, parseTasks } from '../parse/index.js';
+import { validateProposal } from './proposal.js';
+import { validateSpec } from './specs.js';
+import { validateTasks } from './tasks.js';
+import { validateScopeEntries } from './scope-entries.js';
+import { computeContentHash } from '../hash/content.js';
+import { ok, failed, mergeResults } from './types.js';
+// plan-9d Task 4 v2:auto-findings + coverage-gap + test-failure-stub
+import { buildAutoCriticalFinding, FindingIdSequence } from './auto-findings.js';
+import { scanCoverageGaps } from './coverage-gap.js';
+import { checkTestFailureStub } from './test-failure-stub.js';
+// plan-9e1 Task 5:scanOrphanTmp 检测孤立 archive_summary.tmp.yaml
+import { scanOrphanTmp } from './orphan-tmp.js';
+export async function validateChange(changeDir) {
+    const results = [];
+    // plan-9d Task 4 v2 m-2:独立 id 计数器,避免 fs error 也算进 finding id 跳号
+    const findingIds = new FindingIdSequence();
+    // v2 B1 + v3 B1 修订:计算真实稳定运行时 ctx(不含 ephemeral runId)
+    // 用于 validateScopeEntries 的 finding_hash 绑定
+    let ctx;
+    try {
+        ctx = {
+            contentHash: await computeContentHash(changeDir),
+            gitHead: getGitHead() ?? 'no-git-head',
+        };
+    }
+    catch {
+        // computeContentHash 抛错(罕见 — 仅 specs/ 非 ENOENT 类 IO 错)
+        // 退化为 'no-content-hash' 让校验仍能跑(scope finding 仍可产但 hash 弱化)
+        ctx = { contentHash: 'no-content-hash', gitHead: 'no-git-head' };
+    }
+    // 校验 proposal.md
+    const proposalPath = join(changeDir, 'proposal.md');
+    try {
+        const text = await readFile(proposalPath, 'utf8');
+        // 校验 proposal 结构
+        results.push(validateProposal(parseProposal(text), proposalPath));
+        // plan-9b Task 4:同时校验 proposal.md 中 scope anchor 三段 YAML block
+        const scopeP = validateScopeEntries(text, proposalPath, ctx);
+        if (!scopeP.valid) {
+            for (const e of scopeP.errors)
+                results.push({ valid: false, errors: [e], warnings: [] });
+        }
+    }
+    catch (err) {
+        // v3 B2 修订:fs 错不标 severity(走 exit 2);message 加 '[fs]' 前缀
+        results.push(failed({
+            artifact: 'proposal',
+            message: `[fs] cannot read proposal.md: ${err.message}`,
+            file: proposalPath,
+        }));
+    }
+    // 校验 design.md（只检测能否读取/解析，没有专门 validator）
+    const designPath = join(changeDir, 'design.md');
+    try {
+        const text = await readFile(designPath, 'utf8');
+        void parseDesign(text); // 只需检测 throw，不使用返回值
+        // plan-9b Task 4:同时校验 design.md 中 scope anchor 三段 YAML block
+        const scopeD = validateScopeEntries(text, designPath, ctx);
+        if (!scopeD.valid) {
+            for (const e of scopeD.errors)
+                results.push({ valid: false, errors: [e], warnings: [] });
+        }
+    }
+    catch (err) {
+        // v3 B2 修订:fs 错不标 severity(走 exit 2);message 加 '[fs]' 前缀
+        results.push(failed({
+            artifact: 'design',
+            message: `[fs] cannot read design.md: ${err.message}`,
+            file: designPath,
+        }));
+    }
+    // 校验 tasks.md
+    const tasksPath = join(changeDir, 'tasks.md');
+    try {
+        const text = await readFile(tasksPath, 'utf8');
+        results.push(validateTasks(parseTasks(text), tasksPath));
+    }
+    catch (err) {
+        // v3 B2 修订:fs 错不标 severity(走 exit 2);message 加 '[fs]' 前缀
+        results.push(failed({
+            artifact: 'tasks',
+            message: `[fs] cannot read tasks.md: ${err.message}`,
+            file: tasksPath,
+        }));
+    }
+    // 校验 specs/*.md 目录下所有 spec 文件
+    const specsDir = join(changeDir, 'specs');
+    try {
+        const entries = await readdir(specsDir);
+        const mdFiles = entries.filter((n) => n.endsWith('.md'));
+        if (mdFiles.length === 0) {
+            // v3 B2 修订 + plan-9d Task 4:specs/ 存在但空 — 产 spec-files-missing CRITICAL finding(含 finding_hash)
+            const finding = buildAutoCriticalFinding({
+                id: findingIds.next(),
+                dimension: 'completeness',
+                check_type: 'spec-files-missing',
+                evidence: `specs/ 目录存在但 0 个 .md 文件 (${specsDir})`,
+                recommendation: '在 specs/ 下添加至少一个 spec .md 文件,或修订 proposal 移除 specs 需求',
+                contentHash: ctx.contentHash,
+                gitHead: ctx.gitHead,
+            });
+            results.push(failed({
+                artifact: 'specs',
+                message: 'no spec files in specs/',
+                file: specsDir,
+                severity: 'CRITICAL',
+                finding_hash: finding.finding_hash,
+            }));
+        }
+        for (const name of mdFiles) {
+            const path = join(specsDir, name);
+            const text = await readFile(path, 'utf8');
+            results.push(validateSpec(parseSpec(text), path));
+        }
+    }
+    catch (err) {
+        // v3 B2 修订:fs 错不标 severity(走 exit 2);message 加 '[fs]' 前缀
+        results.push(failed({
+            artifact: 'specs',
+            message: `[fs] cannot read specs/: ${err.message}`,
+            file: specsDir,
+        }));
+    }
+    // plan-9d Task 4 v2 B-2 修订:coverage_gap 扫描(spec Requirement grep 0 命中 → CRITICAL finding)
+    // 从 changeDir 推断 codebase root:forge/changes/<id>/ 上两级 = cwd
+    const codebaseRoot = changeDir.includes('forge/changes/')
+        ? (changeDir.split('forge/changes/')[0] ?? process.cwd())
+        : process.cwd();
+    try {
+        const gaps = await scanCoverageGaps(changeDir, codebaseRoot);
+        for (const gap of gaps) {
+            const finding = buildAutoCriticalFinding({
+                id: findingIds.next(),
+                dimension: 'completeness',
+                check_type: 'spec-coverage',
+                evidence: `spec ${gap.spec_file} 的 Requirement '${gap.requirement_id}' 在 codebase 完全 0 命中(keywords: ${gap.searched_keywords.join(', ')}, results: ${JSON.stringify(gap.grep_results)})`,
+                recommendation: `实施该 Requirement,或修订 spec 移除/拆分该项;或确认 keyword 抽取不够准(在 spec 标题用更具体的实施关键词)`,
+                contentHash: ctx.contentHash,
+                gitHead: ctx.gitHead,
+            });
+            results.push(failed({
+                artifact: 'specs',
+                field: `requirement.${gap.requirement_id}`,
+                message: `coverage_gap: spec Requirement '${gap.requirement_id}' 在 codebase 完全 0 命中(candidate_type=coverage_gap,沿 design line 446)`,
+                file: gap.spec_file,
+                severity: 'CRITICAL',
+                finding_hash: finding.finding_hash,
+            }));
+        }
+    }
+    catch (err) {
+        // coverage_gap 扫描异常不阻断;记录 fs 警告
+        results.push(failed({
+            artifact: 'specs',
+            message: `[fs] coverage_gap 扫描失败: ${err.message}`,
+        }));
+    }
+    // plan-9d Task 4 v2 B-2 修订:test_failure stub(9g 完成后接 reporter parser)
+    const testStub = await checkTestFailureStub();
+    if (testStub.status === 'not_implemented') {
+        // stub 不产 finding,只在 ValidationResult.warnings 标记
+        results.push({
+            valid: true,
+            errors: [],
+            warnings: [
+                {
+                    artifact: 'change',
+                    message: `[stub] ${testStub.message}`,
+                },
+            ],
+        });
+    }
+    // plan-9e1 Task 5:扫描孤立 archive_summary.tmp.yaml(active change 目录残留)
+    // 沿 design §2.4.5 line 759 "孤立 .tmp" 行,给 WARNING + 提示
+    const orphanResult = await scanOrphanTmp(changeDir);
+    if (orphanResult.warnings.length > 0) {
+        results.push(orphanResult);
+    }
+    // 没有任何结果表示空目录，直接返回 ok；否则合并所有结果
+    return results.length === 0 ? ok() : mergeResults(...results);
+}
+/**
+ * 获取当前 git HEAD commit SHA(40-char hex)。
+ * 非 git 仓库或 git 命令不可用时返回 null。
+ */
+function getGitHead() {
+    try {
+        return execFileSync('git', ['rev-parse', 'HEAD'], {
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=change.js.map

package/dist/core/validate/change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change.js","sourceRoot":"","sources":["../../../src/core/validate/change.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,yEAAyE;AACzE,qFAAqF;AACrF,kFAAkF;AAClF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAyB,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC7E,qEAAqE;AACrE,OAAO,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,8DAA8D;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB;IACpD,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,gEAAgE;IAChE,MAAM,UAAU,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAE3C,qDAAqD;IACrD,4CAA4C;IAC5C,IAAI,GAA6C,CAAC;IAClD,IAAI,CAAC;QACH,GAAG,GAAG;YACJ,WAAW,EAAE,MAAM,kBAAkB,CAAC,SAAS,CAAC;YAChD,OAAO,EAAE,UAAU,EAAE,IAAI,aAAa;SACvC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;QACvD,2DAA2D;QAC3D,GAAG,GAAG,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACnE,CAAC;IAED,iBAAiB;IACjB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAClD,iBAAiB;QACjB,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QAClE,+DAA+D;QAC/D,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yDAAyD;QACzD,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;YACL,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,iCAAkC,GAAa,CAAC,OAAO,EAAE;YAClE,IAAI,EAAE,YAAY;SACnB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB;QAC5C,6DAA6D;QAC7D,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yDAAyD;QACzD,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;YACL,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,+BAAgC,GAAa,CAAC,OAAO,EAAE;YAChE,IAAI,EAAE,UAAU;SACjB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,cAAc;IACd,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yDAAyD;QACzD,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;YACL,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,8BAA+B,GAAa,CAAC,OAAO,EAAE;YAC/D,IAAI,EAAE,SAAS;SAChB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,gGAAgG;YAChG,MAAM,OAAO,GAAG,wBAAwB,CAAC;gBACvC,EAAE,EAAE,UAAU,CAAC,IAAI,EAAE;gBACrB,SAAS,EAAE,cAAc;gBACzB,UAAU,EAAE,oBAAoB;gBAChC,QAAQ,EAAE,4BAA4B,QAAQ,GAAG;gBACjD,cAAc,EAAE,uDAAuD;gBACvE,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;gBACL,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,yBAAyB;gBAClC,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yDAAyD;QACzD,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;YACL,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,4BAA6B,GAAa,CAAC,OAAO,EAAE;YAC7D,IAAI,EAAE,QAAQ;SACf,CAAC,CACH,CAAC;IACJ,CAAC;IAED,0FAA0F;IAC1F,6DAA6D;IAC7D,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACvD,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzD,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAC7D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,wBAAwB,CAAC;gBACvC,EAAE,EAAE,UAAU,CAAC,IAAI,EAAE;gBACrB,SAAS,EAAE,cAAc;gBACzB,UAAU,EAAE,eAAe;gBAC3B,QAAQ,EAAE,QAAQ,GAAG,CAAC,SAAS,mBAAmB,GAAG,CAAC,cAAc,kCAAkC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG;gBACvL,cAAc,EAAE,yEAAyE;gBACzF,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;aACrB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;gBACL,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,eAAe,GAAG,CAAC,cAAc,EAAE;gBAC1C,OAAO,EAAE,mCAAmC,GAAG,CAAC,cAAc,qEAAqE;gBACnI,IAAI,EAAE,GAAG,CAAC,SAAS;gBACnB,QAAQ,EAAE,UAAU;gBACpB,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gCAAgC;QAChC,OAAO,CAAC,IAAI,CACV,MAAM,CAAC;YACL,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,2BAA4B,GAAa,CAAC,OAAO,EAAE;SAC7D,CAAC,CACH,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC1C,kDAAkD;QAClD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE;gBACR;oBACE,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,UAAU,QAAQ,CAAC,OAAO,EAAE;iBACtC;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,sDAAsD;IACtD,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IACpD,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7B,CAAC;IAED,+BAA+B;IAC/B,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;YAChD,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/core/validate/coverage-gap.d.ts

@@ -0,0 +1,37 @@
+export interface SpecRequirement {
+    id: string;
+    title: string;
+}
+export interface CoverageGapHit {
+    spec_file: string;
+    requirement_id: string;
+    searched_keywords: string[];
+    grep_results: Record<string, number>;
+    total_hits: number;
+}
+/**
+ * 从 spec.md 文本抽 Requirement 列表(沿 design Requirement 命名约定):
+ * `## Requirement: <id>` 或 `### Requirement: <id>` 或更深(H2-H6)
+ *
+ * v4 D-4 修订:扩 H2-H6(不限 H2-H3) — design line 304 没限制 Requirement 必须 H2;
+ * 若 spec 用 H4+ 写 Requirement 应被识别,而非静默漏扫
+ */
+export declare function extractRequirements(specText: string): SpecRequirement[];
+/**
+ * 扫描 specs/*.md 中每个 Requirement,在 codebase grep 关键词。
+ * 完全 0 命中的 Requirement 收集到列表,供 validateChange 产 CRITICAL coverage_gap finding。
+ *
+ * codebase 扫描范围:codebaseRoot,排除 node_modules / dist / .git / forge / tests/fixtures
+ */
+export declare function scanCoverageGaps(changeDir: string, codebaseRoot: string): Promise<CoverageGapHit[]>;
+/**
+ * 从 Requirement 标题抽 1-5 个关键词(v3 M-1 修订:拆 hyphen / camelCase)
+ *
+ * 示例:
+ *   'token-refresh-flow' → ['token', 'refresh', 'flow']
+ *   'tokenRefreshFlow' → ['token', 'refresh', 'flow']
+ *   'token_refresh_flow' → ['token', 'refresh', 'flow']
+ *   'JWT API Endpoint' → ['jwt', 'api', 'endpoint']
+ */
+export declare function extractKeywords(title: string): string[];
+//# sourceMappingURL=coverage-gap.d.ts.map

package/dist/core/validate/coverage-gap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage-gap.d.ts","sourceRoot":"","sources":["../../../src/core/validate/coverage-gap.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,EAAE,CAUvE;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,cAAc,EAAE,CAAC,CAsC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAuCvD"}

package/dist/core/validate/coverage-gap.js

@@ -0,0 +1,181 @@
+// src/core/validate/coverage-gap.ts — plan-9d Task 4 v3
+// 扫描 spec.md 列出的 Requirement,grep codebase 找实施证据;0 命中产 coverage_gap finding
+// 沿 design §2.3.3 line 446 grep + AST 0 命中原则;v1.0 仅 grep,AST 留 v1.1 增强
+//
+// v3 B-1 修订:不依赖 src/core/parse/specs.ts 的 parseSpec(它只解析 Scenario,无 Requirement);
+// 改用 parseMarkdown 直接找 `## Requirement:` heading
+//
+// 注:本模块不读 marker 文件(verify 阶段 marker 尚未产);
+// 只扫 spec 与 codebase(由 changeDir 的上一级 cwd 推断)
+import { readFile, readdir } from 'node:fs/promises';
+import { join, relative, sep } from 'node:path'; // v6 N-2 修订:补 sep import
+import { parseMarkdown } from '../parse/markdown.js';
+/**
+ * 从 spec.md 文本抽 Requirement 列表(沿 design Requirement 命名约定):
+ * `## Requirement: <id>` 或 `### Requirement: <id>` 或更深(H2-H6)
+ *
+ * v4 D-4 修订:扩 H2-H6(不限 H2-H3) — design line 304 没限制 Requirement 必须 H2;
+ * 若 spec 用 H4+ 写 Requirement 应被识别,而非静默漏扫
+ */
+export function extractRequirements(specText) {
+    const md = parseMarkdown(specText);
+    const reqSections = md.sections.filter((s) => s.level >= 2 && s.level <= 6 && /^Requirement\s*[:#]?\s*/i.test(s.heading));
+    return reqSections.map((sec) => {
+        const m = sec.heading.match(/^Requirement\s*[:#]?\s*(.+)$/i);
+        const id = (m?.[1] ?? sec.heading).trim();
+        return { id, title: sec.heading };
+    });
+}
+/**
+ * 扫描 specs/*.md 中每个 Requirement,在 codebase grep 关键词。
+ * 完全 0 命中的 Requirement 收集到列表,供 validateChange 产 CRITICAL coverage_gap finding。
+ *
+ * codebase 扫描范围:codebaseRoot,排除 node_modules / dist / .git / forge / tests/fixtures
+ */
+export async function scanCoverageGaps(changeDir, codebaseRoot) {
+    const specsDir = join(changeDir, 'specs');
+    let entries;
+    try {
+        entries = await readdir(specsDir);
+    }
+    catch {
+        return [];
+    }
+    const mdFiles = entries.filter((n) => n.endsWith('.md'));
+    const hits = [];
+    for (const name of mdFiles) {
+        const specPath = join(specsDir, name);
+        const specText = await readFile(specPath, 'utf8');
+        const requirements = extractRequirements(specText);
+        for (const req of requirements) {
+            const keywords = extractKeywords(req.id || req.title);
+            if (keywords.length === 0)
+                continue;
+            const grepResults = {};
+            let total = 0;
+            for (const kw of keywords) {
+                const count = await grepCountInDir(codebaseRoot, kw);
+                grepResults[kw] = count;
+                total += count;
+            }
+            if (total === 0) {
+                hits.push({
+                    spec_file: relative(codebaseRoot, specPath),
+                    requirement_id: req.id,
+                    searched_keywords: keywords,
+                    grep_results: grepResults,
+                    total_hits: 0,
+                });
+            }
+        }
+    }
+    return hits;
+}
+/**
+ * 从 Requirement 标题抽 1-5 个关键词(v3 M-1 修订:拆 hyphen / camelCase)
+ *
+ * 示例:
+ *   'token-refresh-flow' → ['token', 'refresh', 'flow']
+ *   'tokenRefreshFlow' → ['token', 'refresh', 'flow']
+ *   'token_refresh_flow' → ['token', 'refresh', 'flow']
+ *   'JWT API Endpoint' → ['jwt', 'api', 'endpoint']
+ */
+export function extractKeywords(title) {
+    const stopwords = new Set([
+        'the',
+        'a',
+        'an',
+        'and',
+        'or',
+        'of',
+        'to',
+        'in',
+        'for',
+        'with',
+        'is',
+        'be',
+        'on',
+        'at',
+        'by',
+        'as',
+        'it',
+        'if',
+    ]);
+    // v3 M-1:把 camelCase 边界改成空格 + 把 hyphen / underscore / 标点 改空格
+    const tokens = title
+        .replace(/([a-z])([A-Z])/g, '$1 $2') // camelCase split
+        .replace(/[-_./:]+/g, ' ') // hyphen / underscore / 标点 → 空格
+        .toLowerCase()
+        .replace(/[^\w\s]/g, ' ')
+        .split(/\s+/)
+        .filter((w) => w.length >= 3 && !stopwords.has(w));
+    // 去重保序
+    const seen = new Set();
+    const result = [];
+    for (const t of tokens) {
+        if (!seen.has(t)) {
+            seen.add(t);
+            result.push(t);
+        }
+    }
+    return result.slice(0, 5); // 取前 5 个,提高命中率(v3 M-1 修订:从 3 → 5)
+}
+/**
+ * 在 dir 下递归 grep 关键词(简化版 — 不用 child_process,用 readFile;v1.0 性能可接受)
+ *
+ * v4 R-3 修订 + v6 N-1 简化 + v7 N-2 注释同步:SKIP_DIRS 兼顾两种路径形态:
+ *   - 单层 directory name(node_modules / dist / forge / coverage / build)— 用 SKIP_BASENAMES Set 匹配 e.name
+ *   - 顶层 relative path(tests / docs / forge-eval)— 用 SKIP_REL_PATHS exact match path.relative(root, currentDir);
+ *     walk 从 rootDir 开始,进入 tests/ 时 rel='tests' 命中 catch-all → continue,后续 tests/core, tests/cli 等子目录永远进不来
+ * 同时跳所有以 . 或 _ 开头的目录(.git / .evidence / _shared 等)
+ */
+async function grepCountInDir(rootDir, keyword) {
+    const SKIP_BASENAMES = new Set(['node_modules', 'dist', 'forge', 'coverage', 'build']);
+    const SKIP_REL_PATHS = new Set([
+        // v5 REG-3 修订 + v6 N-1 修订:tests 顶层是 catch-all(walk 进入 tests/ 时 rel='tests' 命中 continue,
+        // 后续 tests/core, tests/cli 等子目录永远进不来);docs 同样原理。简化为顶层 catch-all,无冗余。
+        'tests',
+        'docs',
+        'forge-eval',
+    ]);
+    let total = 0;
+    async function walk(d) {
+        let entries;
+        try {
+            entries = await readdir(d, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            const p = join(d, e.name);
+            if (e.isDirectory()) {
+                // 1. basename skip(node_modules / dist / 等)
+                if (SKIP_BASENAMES.has(e.name))
+                    continue;
+                // 2. dot / underscore prefix skip(.git / .evidence / _shared)
+                if (e.name.startsWith('.') || e.name.startsWith('_'))
+                    continue;
+                // 3. relative path skip(顶层 catch-all:tests / docs / forge-eval — walk 进入后不会下钻)
+                const rel = relative(rootDir, p).split(sep).join('/');
+                if (SKIP_REL_PATHS.has(rel))
+                    continue;
+                await walk(p);
+            }
+            else if (e.isFile() && /\.(ts|tsx|js|jsx|md)$/.test(e.name)) {
+                try {
+                    const text = await readFile(p, 'utf8');
+                    const matches = text.match(new RegExp(keyword.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'), 'gi'));
+                    if (matches)
+                        total += matches.length;
+                }
+                catch {
+                    /* 文件读失败跳过 */
+                }
+            }
+        }
+    }
+    await walk(rootDir);
+    return total;
+}
+//# sourceMappingURL=coverage-gap.js.map

package/dist/core/validate/coverage-gap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage-gap.js","sourceRoot":"","sources":["../../../src/core/validate/coverage-gap.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,4EAA4E;AAC5E,uEAAuE;AACvE,EAAE;AACF,kFAAkF;AAClF,iDAAiD;AACjD,EAAE;AACF,2CAA2C;AAC3C,8CAA8C;AAE9C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC,CAAC,yBAAyB;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAerD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAClF,CAAC;IACF,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC7D,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAqB,EAAE,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAEnD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACpC,MAAM,WAAW,GAA2B,EAAE,CAAC;YAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;gBACrD,WAAW,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;gBACxB,KAAK,IAAI,KAAK,CAAC;YACjB,CAAC;YACD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC;oBACR,SAAS,EAAE,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC;oBAC3C,cAAc,EAAE,GAAG,CAAC,EAAE;oBACtB,iBAAiB,EAAE,QAAQ;oBAC3B,YAAY,EAAE,WAAW;oBACzB,UAAU,EAAE,CAAC;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;QACxB,KAAK;QACL,GAAG;QACH,IAAI;QACJ,KAAK;QACL,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,KAAK;QACL,MAAM;QACN,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;QACJ,IAAI;KACL,CAAC,CAAC;IACH,6DAA6D;IAC7D,MAAM,MAAM,GAAG,KAAK;SACjB,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC,kBAAkB;SACtD,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,gCAAgC;SAC1D,WAAW,EAAE;SACb,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO;IACP,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kCAAkC;AAC/D,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,OAAe;IAC5D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IACvF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;QAC7B,wFAAwF;QACxF,qEAAqE;QACrE,OAAO;QACP,MAAM;QACN,YAAY;KACb,CAAC,CAAC;IACH,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,UAAU,IAAI,CAAC,CAAS;QAC3B,IAAI,OAAmC,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,4CAA4C;gBAC5C,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACzC,8DAA8D;gBAC9D,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC/D,+EAA+E;gBAC/E,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtD,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACtC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;oBACvC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CACjE,CAAC;oBACF,IAAI,OAAO;wBAAE,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;gBACvC,CAAC;gBAAC,MAAM,CAAC;oBACP,aAAa;gBACf,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/core/validate/finding-hash.d.ts

@@ -0,0 +1,14 @@
+import type { FindingHashPayload, Finding } from '../schemas/severity.js';
+/**
+ * 计算 finding_hash:对 FindingHashPayload 8 字段做 JCS 序列化后 SHA256
+ * 输出为 64 字符十六进制字符串
+ * plan-9b v3 B1 修订:payload 已移除 validate_run_id,现为 8 个稳定字段
+ */
+export declare function computeFindingHash(payload: FindingHashPayload): string;
+/**
+ * 从完整 Finding 提取 hash payload
+ * 剥离 id / resolved / finding_hash / validate_run_id / severity_candidate / candidate_type 等可变字段,
+ * 只保留 FindingHashPayload 中定义的 8 个不可变字段(plan-9b v3 B1 修订)
+ */
+export declare function extractHashPayload(finding: Finding): FindingHashPayload;
+//# sourceMappingURL=finding-hash.d.ts.map

package/dist/core/validate/finding-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-hash.d.ts","sourceRoot":"","sources":["../../../src/core/validate/finding-hash.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAE1E;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,CAEtE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,kBAAkB,CAWvE"}

package/dist/core/validate/finding-hash.js

@@ -0,0 +1,29 @@
+// finding-hash.ts: Task 7(plan-9a §8) — finding_hash 计算辅助模块
+// 封装 canonicalHash,为 Finding 提供确定性 SHA256 hash 计算与 payload 提取
+import { canonicalHash } from '../canonical-json.js';
+/**
+ * 计算 finding_hash:对 FindingHashPayload 8 字段做 JCS 序列化后 SHA256
+ * 输出为 64 字符十六进制字符串
+ * plan-9b v3 B1 修订:payload 已移除 validate_run_id,现为 8 个稳定字段
+ */
+export function computeFindingHash(payload) {
+    return canonicalHash(payload);
+}
+/**
+ * 从完整 Finding 提取 hash payload
+ * 剥离 id / resolved / finding_hash / validate_run_id / severity_candidate / candidate_type 等可变字段,
+ * 只保留 FindingHashPayload 中定义的 8 个不可变字段(plan-9b v3 B1 修订)
+ */
+export function extractHashPayload(finding) {
+    return {
+        content_hash: finding.content_hash,
+        git_head: finding.git_head,
+        dimension: finding.dimension,
+        check_type: finding.check_type,
+        severity: finding.severity,
+        automated: finding.automated,
+        evidence: finding.evidence,
+        recommendation: finding.recommendation,
+    };
+}
+//# sourceMappingURL=finding-hash.js.map

package/dist/core/validate/finding-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding-hash.js","sourceRoot":"","sources":["../../../src/core/validate/finding-hash.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,8DAA8D;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC;AACJ,CAAC"}

package/dist/core/validate/index.d.ts

@@ -0,0 +1,15 @@
+export * from './types.js';
+export * from './proposal.js';
+export * from './specs.js';
+export * from './tasks.js';
+export * from './change.js';
+export * from './marker-schema.js';
+export * from './marker-integrity.js';
+export * from './finding-hash.js';
+export * from './candidate-validators.js';
+export * from './scope-entries.js';
+export * from './auto-findings.js';
+export * from './coverage-gap.js';
+export * from './test-failure-stub.js';
+export * from './archive-summary-schema.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/validate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/validate/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AAEtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAE1C,cAAc,oBAAoB,CAAC;AAEnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AAEvC,cAAc,6BAA6B,CAAC"}

package/dist/core/validate/index.js

@@ -0,0 +1,19 @@
+export * from './types.js';
+export * from './proposal.js';
+export * from './specs.js';
+export * from './tasks.js';
+export * from './change.js';
+export * from './marker-schema.js';
+export * from './marker-integrity.js';
+// Task 7(plan-9a §8): cross-cutting framework — finding_hash 计算 + candidate 验证骨架
+export * from './finding-hash.js';
+export * from './candidate-validators.js';
+// plan-9b Task 4: scope YAML block 校验
+export * from './scope-entries.js';
+// plan-9d Task 4 v2 新增
+export * from './auto-findings.js';
+export * from './coverage-gap.js';
+export * from './test-failure-stub.js';
+// plan-9e1 Task 1: archive summary schema 校验
+export * from './archive-summary-schema.js';
+//# sourceMappingURL=index.js.map

package/dist/core/validate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/validate/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,iFAAiF;AACjF,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,sCAAsC;AACtC,cAAc,oBAAoB,CAAC;AACnC,uBAAuB;AACvB,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,6CAA6C;AAC7C,cAAc,6BAA6B,CAAC"}

package/dist/core/validate/marker-integrity.d.ts

@@ -0,0 +1,28 @@
+import { type ValidationResult } from './types.js';
+/**
+ * 验证 verify marker 的 evidence 完整性(P1.2)。
+ * 每条 evidence:
+ *   - log_path(相对 marker 文件目录)必须存在
+ *   - log 文件字节 SHA256 必须等于 log_hash
+ *   - pass 必须为 true
+ */
+export declare function validateEvidence(marker: Record<string, unknown>, markerPath: string): Promise<ValidationResult>;
+/**
+ * 验证 review marker 的 git 完整性(P1.3)。
+ * 仅在 git.is_git_repo === true 时验证;非 git 由调用方决定是否 --force。
+ *
+ * 验证项:
+ *   - 重算 git.head(`git rev-parse HEAD`)与 marker 中的 head 比对
+ *   - 重算 git.diff_hash(用 marker 中的 diff_pathspec)与 marker 中的 diff_hash 比对
+ */
+export declare function validateReviewGitIntegrity(marker: Record<string, unknown>, repoRoot: string, markerPath: string): Promise<ValidationResult>;
+/**
+ * 验证 review_outcomes(P1.3 子项)。
+ * 每条 accepted=true 必须 resolved=true。
+ */
+export declare function validateReviewOutcomes(marker: Record<string, unknown>, markerPath: string): ValidationResult;
+/**
+ * 读取文件内容,用于内容比对(P2.2 recover case B 校验)。
+ */
+export declare function readFileContent(filePath: string): Promise<string | null>;
+//# sourceMappingURL=marker-integrity.d.ts.map

package/dist/core/validate/marker-integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"marker-integrity.d.ts","sourceRoot":"","sources":["../../../src/core/validate/marker-integrity.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,KAAK,gBAAgB,EAA4B,MAAM,YAAY,CAAC;AAI7E;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,gBAAgB,CAAC,CA4D3B;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,gBAAgB,CAAC,CAyD3B;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,UAAU,EAAE,MAAM,GACjB,gBAAgB,CA2BlB;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAM9E"}