@chenmk/superflow 0.5.6 → 0.5.8

package/README.md

@@ -195,6 +195,17 @@ superflow pipeline "<prompt path, change directory, or task>" --managed \
   --project "<project root>" --supervisor current --executor peer
 ```
 
+For a prompt path or SDD change, also pass a Host-authored frozen acceptance
+contract. Its JSON declares business invariants, existing repository-relative
+source coverage, deliverables, verification, and exclusions; start fails closed
+without it.
+
+```bash
+superflow pipeline "<prompt path or change directory>" --managed \
+  --project "<project root>" --acceptance-contract ./acceptance-contract.json \
+  --supervisor current --executor peer
+```
+
 The selected language is frozen into the task contract and reused by Agent
 prompts, reviews, journals, reports, notifications, and resumed rounds.
 The first executor invocation runs continuously without a Superflow tool-turn
@@ -315,6 +326,7 @@ best-effort and does not block initialization.
 | `superflow scan --language en`                               | Regenerate project context templates in English                          |
 | `superflow pipeline`                                         | Check pipeline skill deployment                                          |
 | `superflow pipeline "<task>" --managed --project <path>`     | Run short-session execution with direct review by the current host agent |
+| `--acceptance-contract <file>`                                | Required frozen acceptance JSON for prompt/SDD starts                    |
 | `superflow docs [change]`                                    | Run the docs gate and check the phase skill                              |
 | `superflow design`                                           | Check design-phase skill deployment                                      |
 | `superflow implement [change]`                               | Create a current Coding Ready receipt before implementation              |

package/README.zh-CN.md

@@ -158,6 +158,15 @@ superflow pipeline "<prompt 路径、change 目录或任务>" --managed \
   --project "<项目根目录>" --supervisor current --executor peer
 ```
 
+Prompt 路径或 SDD change 启动还必须传入由 Host 编写的冻结验收合同：JSON 内声明业务不变量、
+启动时已存在的仓库内源码覆盖路径、交付物、验证和排除范围；缺失即失败关闭。
+
+```bash
+superflow pipeline "<prompt 路径或 change 目录>" --managed \
+  --project "<项目根目录>" --acceptance-contract ./acceptance-contract.json \
+  --supervisor current --executor peer
+```
+
 语言会冻结进任务合同；执行 Prompt、评审、账本、报告、通知和恢复轮次保持一致。
 执行 Agent 每轮使用全新短会话；当前 Host Agent 直接评审，不再由后台启动第二个同名
 CLI。首轮自动使用冻结任务 Prompt，后续每轮生成压缩交接包，因此旧会话或新会话均能从
@@ -258,6 +267,7 @@ MCP 是主 Agent 与本地托管状态机的通信通道，不会把 Superflow
 | `superflow implement [change]`                               | 生成当前 Coding Ready 凭证后进入实现阶段                    |
 | `superflow pipeline`                                         | 校验 SuperBridge Flow pipeline 阶段技能部署                 |
 | `superflow pipeline "<任务>" --managed --project <目录>`     | 执行 Agent 短会话开发，当前 Host Agent 直接评审             |
+| `--acceptance-contract <文件>`                                | Prompt/SDD 启动必填的冻结验收合同 JSON                      |
 | `superflow check <change> --level files\|docs\|coding-ready` | 分级检查文件、文档交付或可直接编码就绪度                    |
 | `superflow config <change> --review-mode <mode>`             | 设置代码审查强度（off/standard/thorough）                   |
 | `superflow config <change> --auto-transition <bool>`         | 控制阶段自动流转（true/false）                              |

package/assets/scripts/superflow-managed-command-guard.py

@@ -171,6 +171,28 @@ def guard_supervisor(tool_name: str, command: str) -> None:
         )
 
 
+PATCH_TARGET_PATTERN = re.compile(
+    r"\*{3}\s*(Update|Add|Delete)\s+File:\s*([^\r\n]+)"
+)
+
+
+def patch_target_paths(command: str) -> list[tuple[str, str]]:
+    """Extracts (action, path) targets from patch markup inside a command.
+
+    Codex 0.154 routes ``tools.apply_patch(patch)`` through the hook as an
+    ``apply_patch`` tool call whose input only carries the patch text, so the
+    declared file_path is empty.  The patch markup itself names every target
+    path, which lets the guard validate real targets instead of failing closed.
+    """
+    targets: list[tuple[str, str]] = []
+    for match in PATCH_TARGET_PATTERN.finditer(command or ""):
+        action = match.group(1).lower()
+        value = match.group(2).strip().strip("\"'")
+        if value:
+            targets.append((action, value))
+    return targets
+
+
 def guard_executor(
     tool_name: str,
     file_path: str,
@@ -181,22 +203,35 @@ def guard_executor(
 ) -> None:
     write_tools = {"Edit", "Write", "MultiEdit", "NotebookEdit", "apply_patch"}
     if tool_name in write_tools:
-        if not file_path:
-            block(
-                "写入工具缺少目标路径，按失败关闭。",
-                "The write tool has no target path; failing closed.",
-            )
-        target = canonical(file_path, root)
-        if ".superflow/tasks" in target.as_posix():
-            block(
-                "执行角色禁止修改托管状态、事件、Prompt 和过程报告。",
-                "The executor cannot edit managed state, events, prompts, or run reports.",
-            )
-        if target in immutable:
-            block(
-                f"冻结输入只读，禁止修改：{target}",
-                f"Frozen input is read-only: {target}",
-            )
+        if file_path:
+            targets: list[tuple[Path, str]] = [(canonical(file_path, root), "update")]
+        else:
+            patch_targets = patch_target_paths(command)
+            if not patch_targets:
+                block(
+                    "写入工具缺少目标路径，按失败关闭。",
+                    "The write tool has no target path; failing closed.",
+                )
+            targets = [
+                (canonical(value, root), action)
+                for action, value in patch_targets
+            ]
+        for target, action in targets:
+            if ".superflow/tasks" in target.as_posix():
+                block(
+                    "执行角色禁止修改托管状态、事件、Prompt 和过程报告。",
+                    "The executor cannot edit managed state, events, prompts, or run reports.",
+                )
+            if target in immutable:
+                block(
+                    f"冻结输入只读，禁止修改：{target}",
+                    f"Frozen input is read-only: {target}",
+                )
+            if action == "delete" and target in retained:
+                block(
+                    "命令试图删除受保护的交付文档。",
+                    "The command would delete a retained delivery document.",
+                )
 
     if command and ".superflow/tasks/" in command.replace("\\", "/"):
         block(
@@ -286,7 +321,7 @@ def main() -> None:
 
     tool_name = str(payload.get("tool_name") or payload.get("tool") or "")
     file_path = tool_field(payload, "file_path", "path", "file")
-    command = tool_field(payload, "command", "cmd").replace("\n", " ")
+    command = tool_field(payload, "command", "cmd")
     root = Path(
         os.environ.get("SUPERFLOW_MANAGED_PROJECT_ROOT", os.getcwd())
     ).resolve(strict=False)