@chenmk/superflow 0.5.20 → 0.5.22

package/INSTALL.en.md

@@ -183,3 +183,5 @@ superflow uninstall --agent claude --force
 
 This removes SuperBridge Flow managed assets only. It does not remove unrelated
 agent configuration.
+
+`--agent` limits both current-scope and registered-project refreshes; selecting Codex does not add Claude. `--scope` selects the current entry scope. Existing registered projects still refresh the selected platforms at their recorded scope; the update plan lists every target.

package/INSTALL.md

@@ -741,3 +741,5 @@ Claude Code：
 
 恢复时 SDD 会读取 `superflow status`、`.sdd/state.yaml` 和 `.sdd/handoff/`
 上下文包来判断当前 phase，用户不需要手动列出这些步骤。
+
+`--agent` 同时限定当前作用域与已登记项目的刷新平台；选择 Codex 不会扩展为 Claude。`--scope` 决定当前入口的安装范围，既有受管项目仍按登记范围刷新所选平台，更新计划列出全部目标。

package/assets/scripts/superflow-delivery-check.sh

@@ -139,14 +139,31 @@ has_staged_file() {
   printf '%s\n' "$CHANGED" | grep -Fxq "$path"
 }
 
+read_report_body() {
+  python3 - "$LINT" "$1" <<'PYBODY'
+import runpy, sys
+from pathlib import Path
+module = runpy.run_path(sys.argv[1])
+lines, ambiguous = module["markdown_body_lines"](Path(sys.argv[2]).read_text())
+if ambiguous:
+    raise SystemExit("report Markdown body is ambiguous")
+print("\n".join(lines))
+PYBODY
+}
+
 check_no_open_placeholders() {
   local file="$1"
+  local body
   if [ ! -f "$file" ]; then
     fail "[$file] 文件不存在"
     return
   fi
 
-  if grep -Eiq '待执行|待补充|后续补测|后续测试|TODO|测试报告待更新|验证待回填' "$file"; then
+  if ! body="$(read_report_body "$file")"; then
+    fail "[$file] 无法确定报告正文，不能沿用交付结论"
+    return
+  fi
+  if printf '%s\n' "$body" | grep -Eiq '待执行|待补充|后续补测|后续测试|TODO|测试报告待更新|验证待回填'; then
     fail "[$file] 仍包含待执行/待补充/TODO 类交付占位"
   else
     ok "[$file] 未发现明显交付占位"
@@ -155,7 +172,12 @@ check_no_open_placeholders() {
 
 check_has_closeout_status() {
   local file="$1"
-  if grep -Eiq 'Real integration passed|Partially verified|Partial real entry|Blocked|真实入口|真实接口|验证闭环|阻塞|部分验证' "$file"; then
+  local body
+  if ! body="$(read_report_body "$file")"; then
+    fail "[$file] 无法确定报告正文，不能沿用交付结论"
+    return
+  fi
+  if printf '%s\n' "$body" | grep -Eiq 'Real integration passed|Partially verified|Partial real entry|Blocked|真实入口|真实接口|验证闭环|阻塞|部分验证'; then
     ok "[$file] 包含交付结论"
   else
     fail "[$file] 缺少 Real integration passed / Partially verified / Blocked 等交付结论"
@@ -222,7 +244,10 @@ import runpy, sys
 from pathlib import Path
 module = runpy.run_path(sys.argv[1])
 text = Path(sys.argv[2]).read_text()
-lines = text.splitlines()
+lines, ambiguous = module["markdown_body_lines"](text)
+if ambiguous:
+    print("INVALID")
+    raise SystemExit
 header = next((i for i, line in enumerate(lines) if module["CASE_EVIDENCE_HEADER"].fullmatch(line.strip())), None)
 active_pass = False
 if header is not None:
@@ -233,9 +258,14 @@ if header is not None:
 print("CASE_PASS" if active_pass else module["final_report_result"](text))
 PYFINAL
 )" || return 1
-  case "$final_result" in PASS|CONFLICT|CASE_PASS) return 1 ;; esac
-  grep -Eiq 'Blocked|阻塞' "$file" \
-    && grep -Eiq 'SDD 文档|文档阶段|范围收口|范围冻结|任务冻结|不包含代码实现|没有 Java 实现变更|未进入实现|当前报告记录可交付边界' "$file"
+  case "$final_result" in
+    BLOCKED|MISSING) ;;
+    *) return 1 ;;
+  esac
+  local body
+  body="$(read_report_body "$file")" || return 1
+  printf '%s\n' "$body" | grep -Eiq 'Blocked|阻塞' \
+    && printf '%s\n' "$body" | grep -Eiq 'SDD 文档|文档阶段|范围收口|范围冻结|任务冻结|不包含代码实现|没有 Java 实现变更|未进入实现|当前报告记录可交付边界'
 }
 
 DOC_FREEZE_ALLOWED=0

package/assets/scripts/superflow-review-coverage.mjs

@@ -170,6 +170,40 @@ export function validateCoverage(root, review, issues, checkCode = true) {
     )
       issues.push(`用例 ${test.id} 的 evidenceKind 无效`);
 
+    if (Object.hasOwn(test, "executionContext")) {
+      const context = test.executionContext;
+      const environmentKeys = context?.environmentKeys;
+      const supported = [
+        "PATH",
+        "PATHEXT",
+        "NODE_ENV",
+        "NODE_OPTIONS",
+        "LANG",
+        "LC_ALL",
+        "TZ",
+        "JAVA_HOME",
+      ];
+      if (
+        !context ||
+        typeof context !== "object" ||
+        Array.isArray(context) ||
+        Object.keys(context).sort().join(",") !== "argv,cwd,environmentKeys" ||
+        !Array.isArray(context.argv) ||
+        !context.argv.length ||
+        context.argv.some((arg) => !nonempty(arg)) ||
+        !nonempty(context.cwd) ||
+        path.isAbsolute(context.cwd) ||
+        path.win32.isAbsolute(context.cwd) ||
+        /^[A-Za-z]:/.test(context.cwd) ||
+        !Array.isArray(environmentKeys) ||
+        environmentKeys.some((key) => !supported.includes(key)) ||
+        new Set(environmentKeys).size !== environmentKeys.length
+      )
+        issues.push(
+          `用例 ${test.id} 的 executionContext 必须冻结 argv、相对 cwd 与受支持的非秘密 environmentKeys`,
+        );
+    }
+
     const layer = test.testLayer;
     const realDatabase = ["database", "http-entry"].includes(layer);
     if (

package/assets/scripts/superflow-test-report-lint.py

@@ -16,6 +16,8 @@ from __future__ import annotations
 import argparse
 import hashlib
 import json
+import ntpath
+import os
 import re
 import subprocess
 import sys
@@ -262,13 +264,87 @@ def lint_against_tests_contract(report_path: Path, report_text: str, tests_path:
     return issues
 
 
+def fence_container_line(line: str) -> tuple[str, list]:
+    prefixes = []
+    text = line
+    while True:
+        quote = re.match(r"^ {0,3}> ?", text)
+        item = re.match(r"^ {0,3}(?:[-+*]|\d{1,9}[.)]) +", text)
+        prefix = quote or item
+        if prefix is None:
+            return text, prefixes
+        prefixes.append("quote" if quote else len(prefix[0]))
+        text = text[len(prefix[0]):]
+
+
+def closing_fence_line(line: str, prefixes: list) -> str | None:
+    text = line
+    for prefix in prefixes:
+        pattern = r"^ {0,3}> ?" if prefix == "quote" else r"^ {%d}" % prefix
+        match = re.match(pattern, text)
+        if match is None:
+            return None
+        text = text[len(match[0]):]
+    return text
+
+
+def markdown_body_lines(text: str) -> tuple[list[str], bool]:
+    """Structural report content only; preserve original line positions."""
+    fence = None
+    prefixes = []
+    unsupported_tab = False
+    result = []
+    for line in text.splitlines():
+        if fence is not None:
+            candidate = closing_fence_line(line, prefixes)
+            marker = None if candidate is None else re.match(r"^ {0,3}(`{3,}|~{3,})(.*)$", candidate)
+            if (marker and marker[1][0] == fence[0]
+                    and len(marker[1]) >= len(fence)
+                    and not marker[2].strip(" \t")):
+                fence = None
+            result.append("")
+            continue
+        possible_container = re.match(r"^((?:[ \t]*>[ \t]*|[ \t]*(?:[-+*]|\d{1,9}[.)])[ \t]+)+)(`{3,}|~{3,})", line)
+        if possible_container and "\t" in possible_container[1]:
+            unsupported_tab = True
+        candidate, next_prefixes = fence_container_line(line)
+        marker = re.match(r"^ {0,3}(`{3,}|~{3,})(.*)$", candidate)
+        if marker and (marker[1][0] == "~" or "`" not in marker[2]):
+            fence = marker[1]
+            prefixes = next_prefixes
+            result.append("")
+        else:
+            result.append(line)
+    return result, unsupported_tab or (fence is not None and bool(prefixes))
+
+
 def final_report_result(text: str) -> str:
     # Only the latest explicit summary per language is authoritative. Historical
     # notes and fenced examples do not invalidate the final execution ledger.
-    text = re.sub(r"```.*?```", "", text, flags=re.S)
+    return report_summary_result(text, {"验证结果": "zh", "验证结论": "zh",
+                                        "Verification Result": "en"},
+                                 {"通过": "PASS", "失败": "FAIL"})
+
+
+def archive_readiness_result(text: str) -> str:
+    return report_summary_result(text, {"归档就绪": "zh", "Archive Readiness": "en"},
+                                 {"READY": "PASS", "通过": "PASS",
+                                  "就绪": "PASS", "失败": "FAIL"})
+
+
+def report_summary_result(text: str, labels: dict[str, str], aliases: dict[str, str]) -> str:
+    lines, ambiguous = markdown_body_lines(text)
+    if ambiguous:
+        return "INVALID"
+    text = "\n".join(lines)
+    pattern = "|".join(re.escape(label) for label in labels)
+    label_keys = {label.lower(): key for label, key in labels.items()}
     results = {}
-    for match in re.finditer(r"^(验证结果|Verification Result)\s*[:：]\s*([A-Z_]+)\s*$", text, re.I | re.M):
-        results[match[1].lower()] = match[2].upper()
+    for match in re.finditer(rf"^({pattern})[ \t]*[:：][ \t]*([^\r\n]*)$", text, re.I | re.M):
+        value = match[2].strip().upper()
+        # MISSING denotes an absent summary, never an explicit unknown status.
+        value = "UNKNOWN" if not value or value == "MISSING" else value
+        results[label_keys[match[1].lower()]] = aliases.get(value, value)
     if len(set(results.values())) > 1:
         return "CONFLICT"
     return next(iter(results.values()), "MISSING")
@@ -367,6 +443,48 @@ def validate_database_receipt(receipt: dict, event: dict, case: dict,
             raise ValueError("数据库数据/影响行数/不变断言未达到冻结预期")
 
 
+EXECUTION_ENV_KEYS = frozenset([
+    "PATH", "PATHEXT", "NODE_ENV", "NODE_OPTIONS", "LANG", "LC_ALL", "TZ", "JAVA_HOME",
+])
+
+
+def validate_execution_context(receipt: dict, event: dict, case: dict, change: Path) -> None:
+    """Optional frozen bindings strengthen reuse without rewriting legacy proof."""
+    if "executionContext" not in case:
+        # Legacy extra metadata is retained, but never proves declared-context reuse.
+        return
+    binding = case["executionContext"]
+    if (not isinstance(binding, dict)
+            or set(binding) != {"argv", "cwd", "environmentKeys"}
+            or not isinstance(binding["argv"], list) or not binding["argv"]
+            or any(not isinstance(arg, str) or not arg.strip() for arg in binding["argv"])
+            or not isinstance(binding["cwd"], str) or not binding["cwd"].strip()
+            or Path(binding["cwd"]).is_absolute() or ntpath.isabs(binding["cwd"])
+            or bool(ntpath.splitdrive(binding["cwd"])[0])):
+        raise ValueError("executionContext 需要冻结 argv、相对 cwd 和 environmentKeys")
+    keys = binding["environmentKeys"]
+    if (not isinstance(keys, list)
+            or any(not isinstance(key, str) or key not in EXECUTION_ENV_KEYS for key in keys)
+            or len(set(keys)) != len(keys)):
+        raise ValueError("executionContext 环境项必须是受支持且不重复的非秘密运行配置")
+    context = receipt.get("executionContext")
+    if (not isinstance(context, dict) or set(context) != {"cwd", "environmentSha256"}
+            or not json_equal(event.get("executionContext"), context)):
+        raise ValueError("原始执行输出与凭证 executionContext 不一致或缺失")
+    if not json_equal(receipt["command"]["argv"], binding["argv"]):
+        raise ValueError("执行命令与冻结 executionContext.argv 不一致")
+    cwd = (change / binding["cwd"]).resolve()
+    if (not cwd.is_dir() or not isinstance(context["cwd"], str)
+            or context["cwd"] != str(cwd)):
+        raise ValueError("执行工作目录与冻结 executionContext.cwd 不一致")
+    expected = {
+        key: hashlib.sha256(json.dumps(os.environ.get(key), ensure_ascii=False).encode()).hexdigest()
+        for key in keys
+    }
+    if not json_equal(context["environmentSha256"], expected):
+        raise ValueError("绑定运行环境已变化或观测缺失；旧结果不能用于当前完整通过")
+
+
 def validate_execution_receipt(file: Path, case: dict, coverage: dict, change: Path) -> None:
     receipt = json.loads(file.read_text(encoding="utf-8"))
     if receipt.get("schemaVersion") != "superflow.execution-receipt.v1":
@@ -403,6 +521,7 @@ def validate_execution_receipt(file: Path, case: dict, coverage: dict, change: P
             raise ValueError(f"原始执行输出与凭证 {key} 不一致")
     if not json_equal(event.get("command"), {"argv": command["argv"], "exitCode": command["exitCode"]}):
         raise ValueError("原始执行命令与凭证不一致")
+    validate_execution_context(receipt, event, case, change)
     sources = receipt["sources"]
     if not isinstance(sources, list) or not sources:
         raise ValueError("缺少当前源码/构建指纹")
@@ -541,7 +660,9 @@ def lint_case_evidence(report_path: Path, report_text: str, review_path: Path, i
     }
     if final_report_result(report_text) == "CONFLICT":
         issues.append(Issue("FAIL", report_path, 0, "中英文最终验证结果冲突"))
-    lines = report_text.splitlines()
+    lines, ambiguous = markdown_body_lines(report_text)
+    if ambiguous:
+        return [Issue("FAIL", report_path, 0, "列表/引用代码块结构无法确定；用空格缩进并明确闭合后再核验，不能沿用早期 PASS")]
     header_at = next(
         (i for i, line in enumerate(lines) if CASE_EVIDENCE_HEADER.fullmatch(line.strip())),
         None,

package/assets/skill-registry.json

@@ -7,7 +7,9 @@
       "triggers": [
         "implement approved change"
       ],
-      "excludes": [],
+      "excludes": [
+        "test plan design or signal selection; inherit frozen project/Superflow contracts"
+      ],
       "outputs": [
         "tasks.md progress"
       ],
@@ -19,11 +21,15 @@
       "triggers": [
         "archive completed change"
       ],
-      "excludes": [],
+      "excludes": [
+        "change directory contains .sdd/state.yaml; SDD lifecycle closeout belongs to superflow-archive"
+      ],
       "outputs": [
         "archive result"
       ],
-      "neighbors": []
+      "neighbors": [
+        "superflow-archive"
+      ]
     },
     {
       "name": "openspec-explore",
@@ -105,7 +111,9 @@
       "triggers": [
         "SDD contract documents"
       ],
-      "excludes": [],
+      "excludes": [
+        "runtime execution or implementation prompt generation"
+      ],
       "outputs": [
         "api.md tests.md sdd-quality-gate.md"
       ],
@@ -133,7 +141,9 @@
       "triggers": [
         "generate implementation prompts"
       ],
-      "excludes": [],
+      "excludes": [
+        "test strategy redesign; inherit tests.md"
+      ],
       "outputs": [
         "prompt/ test-report.md"
       ],
@@ -199,7 +209,8 @@
       ],
       "excludes": [
         "public API or database change",
-        "cross-module change"
+        "cross-module change",
+        "application, database, or real-entry acceptance outside the approved Quick Spec"
       ],
       "outputs": [
         ".sdd/tasks/<date>-<slug>/spec.md",
@@ -214,9 +225,13 @@
       "name": "superflow-verify",
       "owner": "verify",
       "triggers": [
-        "verify implementation"
+        "verify implementation",
+        "review code changes"
+      ],
+      "excludes": [
+        "implementation or environment execution; assess evidence read-only",
+        "requirement or test strategy redesign; inherit frozen contracts"
       ],
-      "excludes": [],
       "outputs": [
         "verification report"
       ],

package/assets/skills/openspec-apply-change/SKILL.md

@@ -11,6 +11,13 @@ metadata:
 
 Implement tasks from an OpenSpec change.
 
+## Superflow 实施验证入口
+
+在 Superflow 工作流中，实施首个任务前读取
+[测试指南](../superflow-pipeline/references/test-guide.md)，加载已冻结的 tests.md 与项目测试。
+逐任务按既有用例执行 RED/GREEN 与必要真实验证，证据成立才勾选完成；缺合同回
+superflow-docs，缺环境记录阻塞。普通 OpenSpec 使用项目自己的验证规则。
+
 **Input**: Optionally specify a change name. If omitted, check if it can be inferred from conversation context. If vague or ambiguous you MUST prompt for available changes.
 
 **Steps**

package/assets/skills/openspec-archive-change/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: openspec-archive-change
-description: Archive a completed change in the experimental workflow. Use when the user wants to finalize and archive a change after implementation is complete.
+description: Use when the user wants to archive a completed pure OpenSpec change without .sdd/state.yaml.
 license: MIT
 compatibility: Requires openspec CLI.
 metadata:
@@ -13,6 +13,18 @@ Archive a completed change in the experimental workflow.
 
 **Input**: Optionally specify a change name. If omitted, check if it can be inferred from conversation context. If vague or ambiguous you MUST prompt for available changes.
 
+## SDD 归档分流（先执行）
+
+先确定目标 change 目录；目标不明确时沿下方选择步骤确认，再检查该目录的
+`.sdd/state.yaml`。文件存在时立即加载 `$superflow-archive` 并停止本技能的后续步骤。
+验证未通过或任务未完成时，按该技能返回验证/实施；不能退回本技能继续归档。
+SDD 变更不能使用下方的未完成任务确认、`Archive without syncing` 或 `mv` 捷径；
+归档门禁、确认、OpenSpec 合并和 state 收口均由 `superflow-archive` 持有。
+已搬迁的 SDD 目录也使用该 owner 的精确归档路径恢复流程。
+
+只有目标目录没有 `.sdd/state.yaml` 时，才执行下方纯 OpenSpec 流程。
+这属于 Agent 语义路由；命令 Hook 不是操作系统级拦截，不能假定它会阻止任意 `mv`。
+
 **Steps**
 
 1. **If no change name provided, prompt for selection**

package/assets/skills/superflow-archive/SKILL.md

@@ -39,6 +39,23 @@ do not mark archived until the user confirms final closeout.
    ~/.codex/skills/superflow-pipeline/scripts/superflow-archive.sh <change-dir> --apply
    ```
 
+## 归档搬迁后的恢复
+
+OpenSpec 已移动目录但文档标注或 state 收口失败时，保留现场与原始错误。
+根据本次 archive 输出或实际操作记录确认精确 `openspec/changes/archive/<archive-name>`；
+不能凭同名选择旧日期目录，也不对失效的原路径重复归档。明确目标后运行原 helper：
+
+```bash
+~/.codex/skills/superflow-pipeline/scripts/superflow-archive.sh <explicit-archived-dir> --dry-run
+# 核对摘要、原授权与当前未完成步骤后继续；不扩大原归档授权
+~/.codex/skills/superflow-pipeline/scripts/superflow-archive.sh <explicit-archived-dir> --apply
+```
+
+已移动目录只恢复剩余标注与原 state transition，仍需 validate/guard；done + archived 状态
+正确时只读幂等返回。非标准任务目录保留既有 state-only fallback。
+检查实际 `.sdd/state.yaml`、技术详设/设计/计划标注和输出；缺失或冲突记录阻塞。
+此恢复不自动 commit/push/merge，不重做已完成 OpenSpec 合并，不创建第二套收口状态机。
+
 ## Rules
 
 - Do not archive if verification failed or is only partially verified unless

package/assets/skills/superflow-design/SKILL.md

@@ -44,6 +44,13 @@ Superpowers own source-level HOW without weakening OpenSpec/SDD contracts.
 
 1. Read `.sdd/handoff/sdd-context.md` plus original `api.md`, `design.md`,
    `tasks.md`, and `tests.md`.
+   Read applicable project rules and use the Host's normal skill discovery for
+   relevant skills referenced by those rules or applicable to the task. Read
+   each complete skill file and its relevant references before designing.
+   Do not scan personal skill directories, record personal absolute paths, or
+   copy user-level rule/skill text into project artifacts. Apply the discovered
+   content when designing; freeze only task-relevant constraints through the
+   existing `mandatoryEngineeringRules` handoff for implementation and review.
 2. If the change has any schema, index, constraint, seed-data, or historical
    migration impact, verify `release-sql.md` before source-level HOW design:
    - front matter sets `database_change: true`, an exact `target_sql_path`,
@@ -77,7 +84,14 @@ Superpowers own source-level HOW without weakening OpenSpec/SDD contracts.
    when they satisfy the contract. Remove speculative extension points,
    duplicate DTO/API layers, derivable persistence, premature caches, and
    async compensation without measured need. Record the retained and removed
-   counts; unresolved simpler alternatives keep the design blocked.
+   counts; unresolved simpler alternatives keep the design blocked. For
+   data-intensive paths (large or growing collections, batch processing,
+   imports/exports, aggregation, repeated scans, or fan-out), also record
+   current/expected scale and growth boundary, work and primary cost per
+   request/job, alternatives considered, and evidence validating the choice.
+   Match evidence to risk: source/query analysis or representative functional
+   cases may suffice; do not require benchmarks for small tasks. Mark this not
+   applicable with a brief reason when data volume is not material.
 7. For cross-repository, service-to-service, SDK, MQ, scheduler, device,
    callback, third-party, mini-program, gateway, or adapter changes, include
    `Architecture Boundary And Call Direction`. Prove owner module, call

package/assets/skills/superflow-docs/SKILL.md

@@ -5,6 +5,12 @@ description: Use when confirmed OpenSpec artifacts need SDD contract docs such a
 
 # SDD Docs
 
+## 测试方案入口
+
+写 tests.md 前读取[测试指南](../superflow-pipeline/references/test-guide.md)，先复用项目测试与环境，
+把受影响行为映射到验证信号，在本阶段冻结用例、实际后端、mockBoundary、命令和断言。
+实现阶段只继承；不能把必要数据库验证留到编码时临场决定。
+
 完整文档交付必须读取并执行
 [需求×真实入口评审](../superflow-pipeline/references/document-review-coverage.md)：
 扩展现有三轮评审凭证，逐项核对原始需求、真实调用分支、EXCLUDED/VERIFY_EXISTING
@@ -15,6 +21,11 @@ created the base OpenSpec artifacts. This skill is an SDD contract-doc wrapper;
 it must not replace the installed OpenSpec skills for core artifact generation
 and must not generate implementation prompts.
 
+需要跨轮复用对命令/目录/调用环境敏感的检查时，本阶段按
+[executionContext 合同](../superflow-pipeline/references/document-review-coverage.md#声明式执行上下文与证据复用)
+冻结 argv、相对 cwd 和已选非秘密环境项；历史未绑定证据不自动升级为新上下文完整通过。
+
+
 ## OpenSpec First
 
 For new OpenSpec document generation, invoke `$openspec-propose` first. The

package/assets/skills/superflow-implement/SKILL.md

@@ -5,11 +5,22 @@ description: SDD 实现阶段，基于已完成的 SDD 文档生成分批 implem
 
 # SDD Implement
 
+## 验证合同继承
+
+生成 Prompt 前读取[测试指南](../superflow-pipeline/references/test-guide.md)，将 tests.md 的
+用例、命令、实际后端和断言逐项继承，并要求实施方开工前核对、逐项执行与回填。
+缺少信号或真实环境义务时返回 superflow-docs；本阶段不创建另一套测试策略。
+
 Use `$openspec-apply-change` as the primary path for implementing tasks from an
 OpenSpec change. Use this skill only after SDD docs exist and the user needs
 extra SDD-specific prompt splitting, P0/P1/P2 handoff, CR/Px follow-up prompts,
 review checklists, validation plans, or test-report updates.
 
+Prompt 只继承已冻结的 executionContext；执行入口生成实际 cwd 与选中环境摘要，
+与原始事件/receipt 对账，不能由 Agent 手填预期观测。缺字段或环境错配回文档 owner
+或执行必要重跑，不改变原始成功记录。
+
+
 ## Preconditions
 
 - `proposal.md`, `api.md`, `design.md`, `tasks.md`, `tests.md`,
@@ -145,6 +156,17 @@ Before implementation phase can exit:
   compare the new hash. A stale or mismatched hash blocks coding and delivery.
   The prompt must also require `.sdd/state.yaml` phase evidence and
   `superflow-guard.sh <change-dir> implement` before moving to verification.
+  Identify applicable project rules through the frozen handoff and task-relevant
+  skills through the Host's normal skill discovery. The Host must read applicable
+  skill content and pass the relevant rule statements through the existing
+  `mandatoryEngineeringRules` input; do not pass skill names alone or scan
+  personal configuration directories. The Executor and Reviewer receive the
+  same frozen statements. Require both to read applicable project rule files
+  completely before acting. Do not copy personal rules into project artifacts.
+- Data-intensive work must carry the technical design's data scale, growth
+  boundary, processing-cost trade-offs, and validation evidence into the prompt.
+  Keep this conditional and proportional to risk; simple work does not acquire
+  a mandatory benchmark.
 - Every implementation prompt must include a "状态机执行决策" section. It must
   record `build_mode`, `isolation`, `tdd_mode`, `review_mode`,
   `subagent_dispatch` when applicable, `implementation_prompt`, and the derived

package/assets/skills/superflow-pipeline/SKILL.md

@@ -3,6 +3,11 @@ name: superflow-pipeline
 description: SDD 总入口和路由技能。Use when the user says sdd, SDD 流程, OpenSpec 文档, 需求澄清, 生成 spec/design/tasks/tests, 生成任务 prompt, 进入开发, or asks which SDD/OpenSpec phase to use. Routes OpenSpec documents to openspec-propose, source-level technical design to superflow-design, implementation to openspec-apply-change, and uses SDD skills for quality gates, handoff, prompt splitting, and validation.
 ---
 
+## 测试指导唯一入口
+
+生成测试文档、准备实施或核验交付时，读取 [test-guide.md](references/test-guide.md)。
+文档阶段冻结必要信号；实施继承，评审核验。Mock 边界和示例不得覆盖规范数据库合同。
+
 # SDD Spec Pipeline
 
 This is the lightweight SDD router. Do not load the whole SDD process when a smaller phase skill is enough.
@@ -1045,7 +1050,7 @@ starter、connector 或任何被当前项目引用的外部项目时，必须把
 实现 prompt，必须同时落下三层门禁：
 
 1. **Prompt 完成定义**：明确"单元测试通过不等于完成"，任务完成必须包含
-   应用新进程启动、真实 curl/API 调用、数据库查询、日志检查和 test-report
+   当前待测构建的应用启动/身份核验、真实 curl/API 调用、数据库查询、日志检查和 test-report
    证据回填。
 2. **Hook 过程拦截**：启用 `.sdd-enforced` / `.db-verified`，禁止跳过
    worktree、数据库前置核查和版本总 SQL 收口；运行时代码提交前必须有

package/assets/skills/superflow-pipeline/references/architecture-design-template.md

@@ -79,7 +79,7 @@ Order 1:N OrderItem
 
 | 外部依赖 | 实际能力 | Mock 方式 | 替代验证方式 |
 |----------|----------|-----------|-------------|
-| 支付网关 | 真实支付 | Spring MockBean | 固定返回 success |
+| 支付网关 | 真实支付 | 合同允许隔离 PaymentClient | 真实 Service/Mapper 落库断言；不证明实际扣款 |
 | 短信服务 | 真实发送 | WireMock | 验证调用次数 |
 | 设备回调 | 硬件触发 | 本地模拟 HTTP 服务 | 手动调接口模拟 |
 
@@ -88,7 +88,7 @@ Order 1:N OrderItem
 ## 7. 部署架构
 
 ```
-开发环境：本地 IDEA + H2/MySQL
+开发环境：本地 IDE + design/tests 冻结的生产同类型数据库引擎及兼容版本
 测试环境：Docker Compose（MySQL + Redis + App）
 生产环境：K8s / 物理机
 ```
@@ -117,3 +117,5 @@ ENTRYPOINT ["java", "-jar", "/app.jar"]
 | 日志 | SLF4J + Logback，结构化日志 |
 | 监控 | Actuator + 自定义指标 |
 | 异常 | 全局异常处理器，统一错误码 |
+
+测试信号按 [test-guide.md](test-guide.md)冻结；Mock 边界按 [mock-strategy-guide.md](mock-strategy-guide.md)声明，真实数据库不可用替代引擎关闭。

package/assets/skills/superflow-pipeline/references/batch-prompt-template.md

@@ -1,5 +1,10 @@
 # 分批 Implementation Prompt 模板
 
+验证方案只继承 tests.md，并先读 [test-guide.md](test-guide.md)。模板中的启动、
+接口、DB 和团队 checklist 按已冻结的适用项执行，不适用项给出源码依据；缺失必测
+环境保持阻塞。当前构建与健康实例一致时复用；新代码/配置必须加载后才可验证。
+独立核验原始证据，失效或合同要求的路径由实施方重跑，不能由角色切换触发重复环境。
+
 ## 模板结构
 
 每份 implementation prompt 必须包含以下全部章节。缺失任何一节都可能导致 agent 偏离设计。
@@ -347,7 +352,7 @@ curl -s -c /tmp/cookies.txt -b /tmp/cookies.txt \
 
 本批次涉及接口、CRUD、Mapper/XML、数据库字段或配置驱动行为时，必须同时满足：
 
-1. **Prompt 完成定义**：编译、单测、应用新进程启动、真实 curl/API 调用、
+1. **Prompt 完成定义**：编译、单测、当前待测构建的应用启动/身份核验、真实 curl/API 调用、
    数据库查询、日志检查、test-report 回填全部完成。
 2. **Hook 过程拦截**：`.sdd-enforced` 和 `.db-verified` 保持激活，直到
    集成验收脚本通过；运行时代码提交必须同步提交 test-report 证据。

package/assets/skills/superflow-pipeline/references/document-review-coverage.md

@@ -155,3 +155,29 @@ before 与 after 均须匹配冻结 expected。布尔成功标志不能替代快
 数组/对象中的字段同样适用；具体业务键与快照字段由文档与独立评审决定。
 
 Git 交付路径还会对 tracked 报告依赖（receipt、原始事件、构建、源码、schema/合同）核对标准化 index 对象；仅在工作树修正不能证明待提交快照。未受版本控制的私有证据不强制提交；当前源码/构建适用性仍由独立评审判断。
+
+## 声明式执行上下文与证据复用
+
+沿用 coverage/receipt v1；需要跨轮复用对命令、工作目录或调用环境敏感的检查时，
+由文档 owner 在 tests.md 与对应 case 中冻结
+`executionContext={argv:[命令参数],cwd:相对change目录的工作目录,environmentKeys:[变量名]}`。
+argv 必须非空且逐项明确；cwd 使用相对路径，不使用盘符或绝对路径。作用范围仍由任务授权
+和源码/合同决定，cwd 声明不授予额外读取权限。执行者不能临场改变此合同。
+
+当前支持的环境项仅为 PATH、PATHEXT、NODE_ENV、NODE_OPTIONS、LANG、LC_ALL、TZ、JAVA_HOME；
+只选择影响本条验证命令的项。密码、token、账号凭据和完整环境不进入合同或凭证。
+命令需使用项目验证入口并从运行时读取认证，不能为填写 argv 把秘密写进命令/文档。
+变量缺失与空值不同：每项摘要为 UTF-8 SHA-256(JSON.stringify(字符串值或 null))；
+receipt 和原始事件记录
+`executionContext={cwd:实际规范绝对目录,environmentSha256:{已选变量名:摘要}}`。
+这些观测必须由实际执行入口生成，不由 Agent 根据预期手填。
+
+既有 lint 检查：实际 command.argv 与冻结 argv 相同；receipt/原始事件上下文相同；
+cwd 对应当前 change 的冻结相对目录；已选环境摘要与运行 lint 的当前调用环境一致。
+因此复核应在 tests.md 的同一调用环境中执行。无关环境项变化不使证据失效；已选项、
+命令、目录、源码、构建或实际入口变化不能用旧结果关闭当前完整 PASS。
+此绑定不证明远端服务的启动环境；服务/数据库引擎、生产链与证据充分性仍须独立评审。
+
+未声明新字段的历史合同继续按已有源码/构建/入口规则核验，保留其原结论，不能声称
+已按此新增上下文要求核验。声明后缺观测、形状错误或错配必须补证据，不能把旧记录改成
+预期值。若需要修订冻结合同，返回文档 owner 重新评审，而非执行者放宽检查。

package/assets/skills/superflow-pipeline/references/document-templates.md

@@ -133,3 +133,10 @@
 - **自动化**: [自动化] / [需手工]
 - **关联**: spec.md Requirement N → Scenario X
 ```
+
+## tests.md：验证信号冻结
+
+按 [test-guide.md](test-guide.md)选择项目适用信号，使用已有测试层级编号。
+表头：`改动/风险 | 用例 ID | 验证信号 | 实际环境/后端 | 命令 | 断言 | 证据位置 | 不适用依据/阻塞`。
+数据库分层只继承 [document-review-coverage.md](document-review-coverage.md) 的
+`testLayer` / `mockBoundary`；关键业务主流程和 Bug 复现优先复用项目场景回归资产。