@chenmk/superflow 0.2.4 → 0.3.0

package/assets/skills-en/superflow-pipeline/references/superpower-technical-design-template.md

@@ -59,6 +59,52 @@ orchestrator unless the OpenSpec/SDD contract explicitly says that module owns
 the new entry point and records the owner approval. If the correct owner is
 unclear, mark the design blocked.
 
+## External Integration Configuration And Deployment Contract
+
+Use this whenever the change integrates with a third-party platform/tool, SDK,
+MQ/Kafka, callback, payment gateway, cloud service, or other external system.
+
+| External dependency/resource | Config/resource item | Local source/provisioning | Test source/provisioning | Production source/provisioning | Injection/creation method | Runtime owner | Provisioning owner/time | Readiness evidence | Rollback | Secret handling | Blocker |
+| ---------------------------- | -------------------- | ------------------------- | ------------------------ | ------------------------------ | ------------------------- | ------------- | ----------------------- | ------------------ | -------- | --------------- | ------- |
+| `<TDMQ>` | `<Consumer Group>` | `<auto/manual/IaC>` | `<existing resource>` | `<pre-created by ops>` | `<config/secret/IaC/console>` | `<service>` | `<owner + before deploy>` | `<console/API/trace>` | `<disable/rollback>` | `<secret reference only>` | `<none/blocker>` |
+
+Required checks:
+
+```bash
+rg -ni "https?://|endpoint|base.?url|app.?id|tenant|project.?id|topic|tag|consumer.?group|namespace|webhook|acl|role|secret|token|password|timeout" <source-and-config-paths>
+rg -ni "@.*Listener|new.*Client|builder\(|System\.getenv|ConfigurationProperties|Value\(" <source-and-config-paths>
+```
+
+Do not hard-code environment-dependent endpoints, resource names, identifiers,
+credentials, ACLs, or operational switches in annotations, constants, or
+business code. Stable protocol constants may remain code constants only when
+the design proves they are not environment-specific and no server-side
+resource must be provisioned. Test auto-creation, a successful local startup,
+or an already-existing test resource is not evidence that production is
+ready. Every server-side resource must have an explicit production owner,
+creation timing, readiness check, and rollback path. Missing production
+provisioning evidence is a blocker.
+
+## Concurrency And Idempotency Ownership
+
+Complete this section for concurrent requests, batch issue/activation/renewal,
+duplicate callbacks, duplicate consumption, or repeated external delivery.
+
+| Scenario | Business idempotency key | Claim owner/resource | Application-layer atomic claim | Short transaction boundary | State machine | Retry code reuse | External-call boundary | Uncertain-result handling | Unique-index role | Test evidence |
+| -------- | ------------------------ | -------------------- | ------------------------------ | -------------------------- | ------------- | ---------------- | ---------------------- | ------------------------- | ----------------- | ------------- |
+| `<batch issue>` | `<package+vehicle+period>` | `<period row>` | `<lock owner then persist PENDING>` | `<commit claim independently>` | `PENDING/SUCCESS/FAILED` | `<reuse original business code>` | `<call after commit>` | `<block duplicates and reconcile>` | `<not default; optional fallback>` | `<concurrent/duplicate/retry cases>` |
+
+Application-layer atomic claim is the default: use a stable business
+idempotency key, lock an explicit owner resource in a short transaction,
+persist `PENDING`, commit, and release the database lock before the external
+call. Update the state after the call; every retry reuses the original business
+code. An uncertain result blocks duplicate delivery and remains reconcilable.
+Do not use check-then-insert, process-local locks, or random IDs as cross-instance
+idempotency, and do not hold a database lock across an external call. A unique
+index is not the default; it is only an optional database fallback when natural
+uniqueness, historical cleanup, NULL/soft-delete behavior, and conflict handling
+are explicitly contracted.
+
 ## Field And Status Reverse Impact
 
 Use this whenever changing field values, enum/status values, derived fields,
@@ -83,6 +129,52 @@ third-party adapters, and sibling repos when the table or DTO is shared.
 The technical design must say which references are intentionally unchanged and
 why. A change is not ready when only the direct setter/writer is designed.
 
+## Money Precision Boundary
+
+Use this whenever the change involves amount, fee, discount, deduction, refund,
+sharing, payment, invoice, balance, electricity fee, service fee, package
+settlement, proration, allocation, reconciliation, or financial display.
+
+| Amount identity | Authoritative total | Exact type/construction | Currency and unit | Calculation-state source | Rounding level/boundary | Scale/mode/source | Allocation strategy/tie-breaker | Complement derivation | Audit evidence | Test evidence |
+|---|---|---|---|---|---|---|---|---|---|---|
+| `original = discount + actual` | `original` | `<BigDecimal from string>` | `<currency; internal scale; provider minor unit>` | `<rate * quantity>` | `<order/payment adapter>` | `<scale/mode/contract>` | `<largest remainder/business key>` | `actual = original - discount` | `<pre/post round; residual recipient>` | `<positive/zero/refund/half-unit/tied residual IDs>` |
+
+Use `money-precision-algorithms.md` to complete the contract. State exact
+representation and construction; currency and ISO/provider minor-unit boundary;
+rounding level, mode, and policy source; residual strategy and stable
+tie-breaker; negative/refund symmetry; persistence precision/scale and overflow
+checks. Never assume every currency has two decimals or treat implicit database
+conversion as the rounding policy.
+
+For FX changes, additionally record:
+
+| Base/quote | Rate source/time | Rate precision | Canonical path | Target unit/rounding | Round-trip tolerance | Evidence |
+|---|---|---|---|---|---|---|
+| `<base/quote>` | `<source/timestamp>` | `<scale>` | `<direct/triangulated order>` | `<currency/provider rule>` | `<contract tolerance>` | `<case IDs>` |
+
+Required precision checks:
+
+```bash
+rg -ni "setScale|round|RoundingMode|BigDecimal|double|float|money\\(" <source-and-test-paths>
+rg -ni "amount|fee|price|discount|deduction|refund|pay|invoice|balance|serviceFee|chargeFee" <source-and-test-paths>
+```
+
+The design must separate calculation-state money from settlement/display-state
+money. Intermediate calculations must keep original rate, product, proportion,
+process evidence, and allocation precision. Round only at explicit outbound
+boundaries such as settlement posting, persistence fields that require cents,
+payment/fiscal interfaces, invoices, exports, or display. For multi-detail
+allocation, compute the high-precision target first, then distribute the final
+rounded amount deterministically so totals match and identities such as
+`original = discount + actual` hold. When an additive identity exists and its
+total is the authoritative source, calculate only the required N-1 components
+independently and derive the final complement as `authoritative total - sum(other
+components)`. Do not independently calculate and round every component and then
+rebuild the authoritative total. If complement derivation is not applicable,
+record why, identify the actual source of truth, and provide owner evidence.
+Do not calculate later slices, discounts, ratios, or unit prices from
+already-rounded money.
+
 ## Execution Architecture
 
 - Worker boundaries:
@@ -119,6 +211,9 @@ why. A change is not ready when only the direct setter/writer is designed.
   that only shows "can call through this module" is not ready.
 - For field/status changes, prove reverse impact before coding: writers,
   readers, filters, derived sync paths, external consumers, and tests.
+- For money changes, prove the precision boundary before coding: calculation
+  state, settlement/display state, final rounding point, allocation rule, and
+  half-cent/residual tests.
 - Do not invent API fields, DB columns, status semantics, fallback behavior, or
   acceptance criteria.
 - Keep unresolved source facts as blockers. Do not convert them to guesses.

package/assets/skills-en/superflow-pipeline/references/test-execution-template.md

@@ -20,3 +20,33 @@
 - Result:
 - Evidence:
 - Blocker if not executed:
+
+## Money Precision Boundary Evidence
+
+Required when monetary calculation, settlement, proration, allocation,
+reconciliation, or financial display changes:
+
+| Case | Identity/authoritative total | Currency/minor unit | Complement | Pre/post round | Strategy/residual recipient | Positive/zero/refund/tied residual | Reconciliation |
+|---|---|---|---|---|---|---|---|
+| TC-M01 | `original = discount + actual` / `original` | CNY/minor unit | `actual = original - discount` | | largest remainder / | | pass/blocked |
+
+Prove that calculation-state values were not rounded before the confirmed final
+boundary and that original, discount, actual, refund, and allocated totals obey
+the design contract. When an authoritative total exists, prove the final
+component was derived by subtraction instead of independently calculated and
+rounded. Record currency, provider minor unit, pre/post-round values, residual
+recipient, and positive/zero/negative or refund, tied remainder, and idempotent
+recalculation evidence. FX cases also record base/quote, rate source, and target
+settlement rounding. A two-decimal display assertion alone is insufficient.
+
+## Closeout
+
+Verification Result: PASS / FAIL / BLOCKED / PARTIALLY_VERIFIED
+Archive Readiness: PASS / BLOCKED
+
+Required for `verify_mode: full`:
+
+- Test environment:
+- Branch/commit/build number or image:
+- Base URL:
+- Verification timestamp:

package/assets/skills-en/superflow-pipeline/scripts/superflow-guard.sh

@@ -178,6 +178,60 @@ require_state_file() {
   require_file .sdd/state.yaml
 }
 
+require_tasks_complete() {
+  local task_count unchecked_count
+  require_file tasks.md
+  [[ -f "$CHANGE_DIR/tasks.md" ]] || return 0
+  task_count="$(grep -Ec '^[[:space:]]*-[[:space:]]+\[[ xX]\]' "$CHANGE_DIR/tasks.md" || true)"
+  unchecked_count="$(grep -Ec '^[[:space:]]*-[[:space:]]+\[[[:space:]]\]' "$CHANGE_DIR/tasks.md" || true)"
+  [[ "$task_count" -gt 0 ]] || issues+=("tasks.md has no checkbox tasks")
+  [[ "$unchecked_count" -eq 0 ]] || issues+=("$unchecked_count unchecked task(s) remain in tasks.md")
+}
+
+verification_report_path() {
+  local value
+  value="$(state_get verification_report)"
+  [[ -n "$value" && "$value" != "null" ]] || return 1
+  if [[ -f "$CHANGE_DIR/$value" ]]; then
+    printf '%s\n' "$CHANGE_DIR/$value"
+    return 0
+  fi
+  if [[ -f "$value" ]]; then
+    printf '%s\n' "$value"
+    return 0
+  fi
+  return 1
+}
+
+require_closeout_markers() {
+  local report="${1:-$CHANGE_DIR/test-report.md}"
+  if [[ ! -f "$report" ]]; then
+    issues+=("verification report path does not exist: $report")
+    return 0
+  fi
+  if ! grep -Eiq '(Verification Result)[[:space:]:|*-]*(PASS)' "$report"; then
+    issues+=("verification result PASS marker not found in verification report")
+  fi
+  if ! grep -Eiq '(Archive Readiness)[[:space:]:|*-]*(PASS|READY)' "$report"; then
+    issues+=("archive readiness PASS marker not found in verification report")
+  fi
+}
+
+require_branch_handled() {
+  local branch_status
+  branch_status="$(state_get branch_status)"
+  [[ "$branch_status" == "handled" ]] || issues+=("branch_status must be handled before verification closeout")
+}
+
+require_full_verification_fingerprint() {
+  local report="$CHANGE_DIR/test-report.md"
+  [[ "$(state_get verify_mode)" == "full" ]] || return 0
+  require_grep 'test environment|staging|sandbox' "$report" "full verification test environment"
+  require_grep 'branch|commit|tag|build|image' "$report" "full verification deployment fingerprint"
+  require_grep 'https?://|Base URL' "$report" "full verification base URL"
+  require_grep 'timestamp|verified[_ -]?at|20[0-9]{2}-[0-9]{2}-[0-9]{2}' "$report" "full verification timestamp"
+}
+
 require_spec_doc() {
   if [[ -f "$CHANGE_DIR/spec.md" ]]; then
     return
@@ -248,6 +302,50 @@ change_has_field_status_risk() {
     "$CHANGE_DIR"/*.md "$CHANGE_DIR"/**/*.md 2>/dev/null
 }
 
+change_has_external_config_risk() {
+  grep -RIEiq \
+    'third[- ]party|external (platform|tool|integration|system)|SDK|MQ|Kafka|RocketMQ|TDMQ|callback|webhook|payment gateway|cloud service' \
+    "$CHANGE_DIR/proposal.md" \
+    "$CHANGE_DIR/api.md" \
+    "$CHANGE_DIR/design.md" \
+    "$CHANGE_DIR/tests.md" \
+    "$CHANGE_DIR/spec.md" \
+    "$CHANGE_DIR"/specs/*/spec.md 2>/dev/null
+}
+
+change_has_concurrency_idempotency_risk() {
+  grep -RIEiq \
+    'concurren|idempoten|race condition|duplicate (request|callback|consumption|delivery)|atomic claim|batch (issue|activate|renew)' \
+    "$CHANGE_DIR/proposal.md" \
+    "$CHANGE_DIR/api.md" \
+    "$CHANGE_DIR/design.md" \
+    "$CHANGE_DIR/tests.md" \
+    "$CHANGE_DIR/spec.md" \
+    "$CHANGE_DIR"/specs/*/spec.md 2>/dev/null
+}
+
+change_has_money_precision_risk() {
+  grep -RIEiq \
+    '(^|[^[:alnum:]_])(amount|fee|fees|price|discount|deduction|refund|payment|invoice|balance|proration|allocation|reconciliation|residual|precision|rounding)([^[:alnum:]_]|$)|revenue sharing|profit sharing|split payment|electricity fee|service fee|package settlement|serviceFee|chargeFee|totalAmount|actualAmount|payAmount|refundAmount|discountAmount|invoiceAmount|balanceAmount' \
+    "$CHANGE_DIR/proposal.md" \
+    "$CHANGE_DIR/api.md" \
+    "$CHANGE_DIR/design.md" \
+    "$CHANGE_DIR/tests.md" \
+    "$CHANGE_DIR/spec.md" \
+    "$CHANGE_DIR"/specs/*/spec.md 2>/dev/null
+}
+
+change_has_fx_precision_risk() {
+  grep -RIEiq \
+    '(^|[^[:alnum:]_])(exchange rate|fx rate|currency conversion|cross.currency|base currency|quote currency)([^[:alnum:]_]|$)' \
+    "$CHANGE_DIR/proposal.md" \
+    "$CHANGE_DIR/api.md" \
+    "$CHANGE_DIR/design.md" \
+    "$CHANGE_DIR/tests.md" \
+    "$CHANGE_DIR/spec.md" \
+    "$CHANGE_DIR"/specs/*/spec.md 2>/dev/null
+}
+
 change_has_architecture_boundary_risk() {
   grep -RIEiq \
     'cross-repo|cross-service|sibling|SDK|MQ|topic|consumer|scheduler|scheduled|device|callback|third[- ]party|mini[- ]program|gateway|adapter|protocol|interconnect|call chain|entry|exit' \
@@ -281,6 +379,87 @@ require_prompt_set() {
   fi
 }
 
+require_money_precision_contract() {
+  local path="$1"
+  local label="$2"
+  require_grep 'Money Precision Boundary' "$path" "$label"
+  require_grep 'calculation.state|calculation source|intermediate precision' "$path" "$label calculation state"
+  require_grep 'settlement|display.state|rounding boundary' "$path" "$label settlement/display boundary"
+  require_grep 'scale|rounding mode|RoundingMode' "$path" "$label scale and rounding mode"
+  require_grep 'allocation|reconciliation|residual' "$path" "$label allocation/reconciliation rule"
+  require_grep 'authoritative total|source.of.truth total' "$path" "$label authoritative total"
+  require_grep 'authoritative total.*minus|derive.*complement|complement amount' "$path" "$label complement derivation"
+  require_grep 'do not.*independently|must not.*calculate.*separately' "$path" "$label independent calculation prohibition"
+  require_grep 'forbidden early rounding|do not.*round' "$path" "$label forbidden early rounding"
+  require_grep 'half.cent|residual|multi.detail' "$path" "$label boundary test evidence"
+  require_grep 'BigDecimal|MonetaryAmount|integer minor unit|exact decimal' "$path" "$label exact representation"
+  require_grep 'never.*(float|double)|do not.*(float|double)' "$path" "$label binary floating-point prohibition"
+  require_grep 'currency' "$path" "$label currency contract"
+  require_grep 'minor unit|provider unit' "$path" "$label minor-unit boundary"
+  require_grep 'rounding level|rounding point|line.level.*aggregate' "$path" "$label rounding level"
+  require_grep 'policy source|contract source' "$path" "$label rounding policy source"
+  require_grep 'largest remainder|stable tie.break|business key' "$path" "$label deterministic residual tie-breaker"
+  require_grep 'positive.*zero.*negative|positive.*refund' "$path" "$label signed-value evidence"
+  require_grep 'pre.round.*post.round' "$path" "$label rounding audit evidence"
+  require_grep 'DECIMAL|NUMERIC|persistence.*not applicable' "$path" "$label persistence precision contract"
+  if change_has_fx_precision_risk; then
+    require_grep 'base/quote|base currency.*quote currency' "$path" "$label FX direction"
+    require_grep 'rate source' "$path" "$label FX source"
+    require_grep 'rate.*timestamp|rate.*effective' "$path" "$label FX timestamp"
+    require_grep 'canonical conversion path|canonical path' "$path" "$label FX canonical path"
+    require_grep 'target.*settlement.*round' "$path" "$label FX target rounding"
+  fi
+}
+
+require_external_config_contract() {
+  local path="$1"
+  local label="$2"
+  require_grep 'External Integration Configuration And Deployment Contract' "$path" "$label"
+  require_grep 'local.*test.*production|local.*staging.*production' "$path" "$label environment matrix"
+  require_grep 'provision|injection|IaC|Secret|console' "$path" "$label injection/provisioning"
+  require_grep 'provisioning owner|runtime owner|owner.*time' "$path" "$label owner and timing"
+  require_grep 'readiness|trace|health' "$path" "$label readiness evidence"
+  require_grep 'rollback|disable' "$path" "$label rollback"
+  require_grep 'secret|credential' "$path" "$label secret handling"
+  require_grep 'not.*hard.?cod|must not.*hard.?cod|do not hard.?code' "$path" "$label no hard-coded external config"
+  require_grep 'test.*production|staging.*production' "$path" "$label test-production distinction"
+}
+
+require_concurrency_idempotency_contract() {
+  local path="$1"
+  local label="$2"
+  require_grep 'Concurrency And Idempotency Ownership|application.layer atomic claim|atomic claim' "$path" "$label"
+  require_grep 'business idempotency key|business key' "$path" "$label business idempotency key"
+  require_grep 'application.layer atomic claim|atomic claim' "$path" "$label application-layer atomic claim"
+  require_grep 'short transaction|transaction boundary' "$path" "$label short transaction boundary"
+  require_grep 'pending|success|failed|state machine' "$path" "$label state machine"
+  require_grep 'retry' "$path" "$label retry contract"
+  require_grep 'external call|third.party call' "$path" "$label external-call boundary"
+  require_grep 'unique index.*not.*default|do not.*default.*unique index' "$path" "$label unique index is not the default"
+}
+
+require_money_precision_evidence() {
+  local path="$1"
+  local label="$2"
+  require_grep 'Money Precision Boundary' "$path" "$label"
+  require_grep 'half.cent|residual|multi.detail' "$path" "$label boundary cases"
+  require_grep 'original.*discount.*actual|allocated total|reconciliation' "$path" "$label reconciliation evidence"
+  require_grep 'authoritative total' "$path" "$label authoritative total evidence"
+  require_grep 'authoritative total.*minus|derive.*complement|complement amount' "$path" "$label complement derivation evidence"
+  require_grep 'currency' "$path" "$label currency evidence"
+  require_grep 'minor unit|provider unit' "$path" "$label minor-unit reconciliation"
+  require_grep 'positive.*zero.*negative|positive.*refund' "$path" "$label signed-value cases"
+  require_grep 'pre.round.*post.round' "$path" "$label rounding audit evidence"
+  require_grep 'residual recipient' "$path" "$label residual audit evidence"
+  require_grep 'tied remainder' "$path" "$label tied-residual cases"
+  require_grep 'idempoten' "$path" "$label allocation idempotence"
+  if change_has_fx_precision_risk; then
+    require_grep 'base/quote|base currency.*quote currency' "$path" "$label FX direction evidence"
+    require_grep 'rate source' "$path" "$label FX source evidence"
+    require_grep 'target.*settlement.*round' "$path" "$label FX target rounding evidence"
+  fi
+}
+
 transition_event=""
 
 if [[ -x "$VALIDATE" && -f "$CHANGE_DIR/.sdd/state.yaml" ]]; then
@@ -310,6 +489,16 @@ case "$PHASE" in
     require_grep 'RED|red-green|GREEN' tests.md "RED/GREEN test contract"
     require_grep 'curl|Postman|Newman|pytest|RestAssured|automation command' tests.md "interface automation command"
     require_grep 'handoff_hash|sdd-context|context package|anti-drift' sdd-quality-gate.md "handoff/context-drift gate"
+    if change_has_money_precision_risk; then
+      require_grep 'Money Precision Boundary' sdd-quality-gate.md "money precision quality gate"
+    fi
+    if change_has_external_config_risk; then
+      require_external_config_contract api.md "external integration configuration contract"
+      require_external_config_contract sdd-quality-gate.md "external integration deployment gate"
+    fi
+    if change_has_concurrency_idempotency_risk; then
+      require_concurrency_idempotency_contract sdd-quality-gate.md "concurrency and idempotency ownership quality gate"
+    fi
     require_markdown_links_valid
     transition_event="docs-complete"
     ;;
@@ -342,6 +531,15 @@ case "$PHASE" in
         if change_has_field_status_risk; then
           require_grep 'Field And Status Reverse Impact|Field And Status Reverse Impact|write point.*read|read/filter points|derived/sync points' "$technical_design_rel" "field/status reverse impact matrix"
         fi
+        if change_has_external_config_risk; then
+          require_external_config_contract "$technical_design_rel" "external integration configuration and deployment contract"
+        fi
+        if change_has_concurrency_idempotency_risk; then
+          require_concurrency_idempotency_contract "$technical_design_rel" "concurrency and idempotency ownership contract"
+        fi
+        if change_has_money_precision_risk; then
+          require_money_precision_contract "$technical_design_rel" "money precision boundary"
+        fi
       fi
     fi
     require_grep 'Superpowers Technical Design Handoff|Superpowers Technical Design|technical_design|source-level HOW' design.md "Superpowers technical design handoff"
@@ -367,6 +565,15 @@ case "$PHASE" in
         if change_has_field_status_risk; then
           require_grep 'Field And Status Reverse Impact|Field And Status Reverse Impact|read/filter points|derived/sync points' "$prompt_rel" "prompt field/status reverse impact inheritance"
         fi
+        if change_has_external_config_risk; then
+          require_external_config_contract "$prompt_rel" "prompt external integration configuration inheritance"
+        fi
+        if change_has_concurrency_idempotency_risk; then
+          require_concurrency_idempotency_contract "$prompt_rel" "prompt concurrency and idempotency ownership inheritance"
+        fi
+        if change_has_money_precision_risk; then
+          require_money_precision_contract "$prompt_rel" "prompt money precision inheritance"
+        fi
       fi
       require_grep 'context anti-drift|handoff_hash|sdd-context' "$prompt_rel" "prompt context drift inheritance"
     fi
@@ -386,13 +593,28 @@ case "$PHASE" in
     ;;
   verify)
     require_state_file
+    require_tasks_complete
     require_file test-report.md
     require_grep 'RED|failure evidence' test-report.md "RED evidence"
     require_grep 'GREEN|pass evidence' test-report.md "GREEN evidence"
     require_grep 'interface automation|curl|Postman|Newman|pytest|RestAssured' test-report.md "interface automation evidence"
     require_grep 'DB|database|SELECT|SHOW CREATE' test-report.md "DB evidence"
     require_grep 'superflow-verify-integration|superflow-delivery-check|superflow-test-report-lint' test-report.md "SuperBridge Flow hook/script evidence"
+    if change_has_money_precision_risk; then
+      require_money_precision_evidence test-report.md "money precision runtime evidence"
+    fi
+    if change_has_external_config_risk; then
+      require_grep 'External Integration Configuration And Deployment Contract' test-report.md "external integration configuration runtime evidence"
+      require_grep 'production.*ready|provision.*verified|resource.*exists' test-report.md "external production readiness evidence"
+    fi
+    if change_has_concurrency_idempotency_risk; then
+      require_grep 'Concurrency And Idempotency Ownership|application.layer atomic claim|atomic claim' test-report.md "concurrency and idempotency runtime evidence"
+      require_grep 'concurren|duplicate|retry' test-report.md "concurrency duplicate and retry cases"
+    fi
     require_test_report_lint
+    require_closeout_markers "$CHANGE_DIR/test-report.md"
+    require_branch_handled
+    require_full_verification_fingerprint
     require_markdown_links_valid
     if [[ "$(state_get verification_report)" == "" || "$(state_get verification_report)" == "null" ]]; then
       "$STATE" set "$CHANGE_DIR" verification_report test-report.md
@@ -401,11 +623,20 @@ case "$PHASE" in
     ;;
   archive)
     require_state_file
+    require_tasks_complete
     verify_result="$(state_get verify_result)"
     [[ "$verify_result" == "pass" ]] || issues+=("verify_result must be pass before archive")
     archived="$(state_get archived)"
     [[ "$archived" != "true" ]] || issues+=("archived is already true")
     require_state_value verification_report "verification_report"
+    report_path="$(verification_report_path || true)"
+    if [[ -z "$report_path" ]]; then
+      issues+=("verification_report path does not exist")
+    else
+      require_closeout_markers "$report_path"
+    fi
+    require_branch_handled
+    require_state_value verified_at "verified_at"
     transition_event="archived"
     ;;
   *)

package/assets/skills-en/superflow-verify/SKILL.md

@@ -43,6 +43,16 @@ Use `.sdd/state.yaml` `verify_mode` after `scale`.
 prove the complete evidence chain: source/Mapper/XML, DB when needed, real
 entry point, interface automation, logs, SQL sync, and consumer behavior.
 
+Money-related changes always require full verification of
+`Money Precision Boundary`: original calculation inputs and intermediate precision, the actual
+rounding boundary and mode, half-cent/residual/multi-detail cases, deterministic
+allocation, and reconciliation identities. A final two-decimal display value
+or unit-test-only evidence is not sufficient.
+For additive identities, verification must prove which total was authoritative,
+which N-1 components were calculated independently, and which final complement
+was derived as `authoritative total - sum(other components)`. Evidence that all
+components were independently calculated and rounded is a failure.
+
 ## Required Superpowers
 
 Immediately load and apply these Superpowers when available:
@@ -94,8 +104,21 @@ Before pass:
    delivery or branch closeout.
 5. Code review findings are either fixed or explicitly recorded with accepted
    risk.
-6. Branch/worktree status is handled and `.sdd/state.yaml` has:
+6. For money-related changes, `test-report.md` records the `Money Precision
+   Boundary` cases and proves original, discount, actual/refund, and allocated
+   totals reconcile without early rounding. For additive identities it also
+   records the authoritative total and the subtraction used to derive the final
+   complement.
+7. Branch/worktree status is handled and `.sdd/state.yaml` has:
    `branch_status: handled`.
+8. Every checkbox in `tasks.md` is checked. A completed implementation with
+   stale task documentation is a verification failure, not an archive-time
+   cleanup item.
+9. `test-report.md` ends with the machine-checkable closeout markers
+   `Verification Result: PASS` and `Archive Readiness: PASS`. For
+   `verify_mode: full`, it also records the test environment,
+   branch/commit/build or image fingerprint, Base URL, and verification
+   timestamp.
 
 Only then run:
 

package/dist/app/commands/archive.js

@@ -1,6 +1,10 @@
-import { checkSkillDeployment } from '../../domains/skill/check.js';
-const SKILL_NAME = 'superflow-archive';
-export async function archiveCommand(_change, options = {}) {
+import { checkSkillDeployment, } from "../../domains/skill/check.js";
+import { runArchiveDryRun } from "./change-guard.js";
+const SKILL_NAME = "superflow-archive";
+export async function archiveCommand(change, options = {}) {
+    if (change) {
+        runArchiveDryRun(change);
+    }
     checkSkillDeployment(SKILL_NAME, options);
 }
 //# sourceMappingURL=archive.js.map

package/dist/app/commands/archive.js.map

@@ -1 +1 @@
-{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../../src/app/commands/archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAA0B,MAAM,8BAA8B,CAAC;AAE5F,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgB,EAChB,UAA6B,EAAE;IAE/B,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../../src/app/commands/archive.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAe,EACf,UAA6B,EAAE;IAE/B,IAAI,MAAM,EAAE,CAAC;QACX,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IACD,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/dist/app/commands/change-guard.js

@@ -0,0 +1,27 @@
+import { execFileSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import path from "node:path";
+import { ASSETS_DIR } from "../../platform/assets.js";
+const PIPELINE_SCRIPTS = path.resolve(ASSETS_DIR, "skills", "superflow-pipeline", "scripts");
+export function resolveChangeDir(change) {
+    const direct = path.resolve(change);
+    if (existsSync(direct))
+        return direct;
+    const openspecChange = path.resolve("openspec", "changes", change);
+    if (existsSync(openspecChange))
+        return openspecChange;
+    return direct;
+}
+export function runChangeGuard(change, phase) {
+    const guard = path.join(PIPELINE_SCRIPTS, "superflow-guard.sh");
+    execFileSync("bash", [guard, resolveChangeDir(change), phase], {
+        stdio: "inherit",
+    });
+}
+export function runArchiveDryRun(change) {
+    const archive = path.join(PIPELINE_SCRIPTS, "superflow-archive.sh");
+    execFileSync("bash", [archive, resolveChangeDir(change), "--dry-run"], {
+        stdio: "inherit",
+    });
+}
+//# sourceMappingURL=change-guard.js.map

package/dist/app/commands/change-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-guard.js","sourceRoot":"","sources":["../../../src/app/commands/change-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CACnC,UAAU,EACV,QAAQ,EACR,oBAAoB,EACpB,SAAS,CACV,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAEtC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACnE,IAAI,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,cAAc,CAAC;IAEtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,KAA0B;IAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;IAChE,YAAY,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,EAAE;QAC7D,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,sBAAsB,CAAC,CAAC;IACpE,YAAY,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,EAAE;QACrE,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;AACL,CAAC"}

package/dist/app/commands/design.js

@@ -1,28 +1,10 @@
-import { execFileSync } from "node:child_process";
-import { existsSync } from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
 import { checkSkillDeployment, } from "../../domains/skill/check.js";
+import { runChangeGuard } from "./change-guard.js";
 const SKILL_NAME = "superflow-design";
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const GUARD = path.resolve(__dirname, "..", "..", "assets", "skills", "superflow-pipeline", "scripts", "superflow-guard.sh");
 export async function designCommand(change, options = {}) {
     if (change) {
-        runDesignGuard(resolveChangeDir(change));
+        runChangeGuard(change, "design");
     }
     checkSkillDeployment(SKILL_NAME, options);
 }
-function resolveChangeDir(change) {
-    const direct = path.resolve(change);
-    if (existsSync(direct))
-        return direct;
-    const openspecChange = path.resolve("openspec", "changes", change);
-    if (existsSync(openspecChange))
-        return openspecChange;
-    return direct;
-}
-function runDesignGuard(changeDir) {
-    execFileSync("bash", [GUARD, changeDir, "design"], { stdio: "inherit" });
-}
 //# sourceMappingURL=design.js.map

package/dist/app/commands/design.js.map

@@ -1 +1 @@
-{"version":3,"file":"design.js","sourceRoot":"","sources":["../../../src/app/commands/design.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AACtC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CACxB,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,oBAAoB,EACpB,SAAS,EACT,oBAAoB,CACrB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAe,EACf,UAA6B,EAAE;IAE/B,IAAI,MAAM,EAAE,CAAC;QACX,cAAc,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAEtC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACnE,IAAI,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,cAAc,CAAC;IAEtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACvC,YAAY,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AAC3E,CAAC"}
+{"version":3,"file":"design.js","sourceRoot":"","sources":["../../../src/app/commands/design.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,GAErB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAe,EACf,UAA6B,EAAE;IAE/B,IAAI,MAAM,EAAE,CAAC;QACX,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IACD,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/dist/app/commands/init.js

@@ -1,5 +1,4 @@
 import path from 'path';
-import { fileURLToPath } from 'url';
 import { existsSync } from 'fs';
 import { createInterface } from 'readline/promises';
 import { stdin as input, stdout as output } from 'process';
@@ -16,10 +15,7 @@ import { loadState, saveState, initState } from '../../domains/state.js';
 import { scaffoldBusinessContext, checkUnderstandScan, printSoftPrompt } from '../../domains/config/context.js';
 import { ALL_RULES, ALL_SKILLS, CODEX_PROMPTS, scriptsForAgent, hookScriptsForAgent, } from '../../domains/skill/assets.js';
 import { normalizeLanguage, t } from '../../domains/config/i18n.js';
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-// dist/commands/init.js → ../../assets
-const ASSETS_DIR = path.resolve(__dirname, '..', '..', 'assets');
+import { ASSETS_DIR } from '../../platform/assets.js';
 export async function initCommand(cmdOptions) {
     // commander 的 --no-hooks 标志让 options.hooks = false；默认是 true
     // commander 的 --no-scan 标志让 options.scan = false；默认是 true