@cyning/harness 0.4.0 → 1.0.1

package/lib/audit.js

@@ -0,0 +1,166 @@
+import { spawnSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import { resolveHarnessRootForTarget } from './paths.js';
+import { loadTaskSidecar, validateTaskSidecar } from './task.js';
+
+/**
+ * 在目标仓运行 ICVO audit（D3/D5/S5 子集）。
+ */
+export function auditTarget(target, options = {}) {
+  const taskFile = options.taskFile;
+
+  const gate = runGateCheck(target, taskFile);
+  const testCheck = runTestCheck(target, taskFile);
+  const gitCheck = runGitCleanCheck(target);
+
+  const ok = gate.ok && testCheck.ok;
+
+  return {
+    ok,
+    target,
+    taskFile,
+    gate,
+    test: testCheck,
+    git: gitCheck,
+  };
+}
+
+function runGateCheck(target, taskFile) {
+  const harnessRoot = resolveHarnessRootForTarget(target);
+  const script = path.join(harnessRoot, 'wizard', 'gate-check.sh');
+  const args = [script, '--target', target];
+  if (taskFile) args.push('--task', taskFile);
+
+  const result = spawnSync('bash', args, {
+    encoding: 'utf8',
+    env: { ...process.env, CYNING_HARNESS: harnessRoot },
+  });
+
+  return {
+    ok: result.status === 0,
+    status: result.status,
+    stdout: result.stdout,
+    stderr: result.stderr,
+  };
+}
+
+function runTestCheck(target, taskFile) {
+  // 未指定 task 文件时，D5 跳过（在 active task 上跑 gate-check 已覆盖 D3）
+  if (!taskFile) {
+    return { ok: true, skipped: true, reason: '未指定 --task，跳过 D5' };
+  }
+
+  const absTask = path.isAbsolute(taskFile) ? taskFile : path.join(target, taskFile);
+  if (!fs.existsSync(absTask)) {
+    return { ok: true, skipped: true, reason: 'task 文件不存在，跳过 D5' };
+  }
+
+  const sidecar = resolveTaskSidecar(absTask, target);
+  if (!sidecar) {
+    return { ok: true, skipped: true, reason: '未找到 task sidecar，跳过 D5' };
+  }
+
+  let data;
+  try {
+    data = loadTaskSidecar(sidecar);
+  } catch (err) {
+    return { ok: false, reason: `sidecar 解析失败: ${err.message}` };
+  }
+
+  const validation = validateTaskSidecar(data, path.basename(sidecar));
+  if (!validation.ok) {
+    return { ok: false, reason: validation.errors.join('; ') };
+  }
+
+  if (data.test_strategy !== 'required') {
+    return {
+      ok: true,
+      skipped: true,
+      reason: `test_strategy=${data.test_strategy}，无需 D5 强检查`,
+    };
+  }
+
+  const hasTest = hasTestArtifacts(target);
+  if (!hasTest) {
+    return {
+      ok: false,
+      reason: 'test_strategy=required 但目标仓未声明测试路径或 CI 引用',
+    };
+  }
+
+  return { ok: true, reason: 'test_strategy=required 且检测到测试/CI 制品' };
+}
+
+function resolveTaskSidecar(taskMarkdownPath, target) {
+  const dir = path.dirname(taskMarkdownPath);
+  const base = path.basename(taskMarkdownPath, '.md');
+
+  // 1. 同目录 <name>.harness.json
+  const sameDir = path.join(dir, `${base}.harness.json`);
+  if (fs.existsSync(sameDir)) return sameDir;
+
+  // 2. 目标仓根 task.harness.v1.json（legacy / 单 task 仓）
+  const rootSidecar = path.join(target, 'task.harness.v1.json');
+  if (fs.existsSync(rootSidecar)) return rootSidecar;
+
+  return null;
+}
+
+function hasTestArtifacts(target) {
+  const probes = [
+    'test',
+    'tests',
+    'spec',
+    'specs',
+    '__tests__',
+    'jest.config.js',
+    'jest.config.ts',
+    'vitest.config.js',
+    'vitest.config.ts',
+    'playwright.config.js',
+    'playwright.config.ts',
+    'cypress.config.js',
+    'pytest.ini',
+    'pyproject.toml',
+    'setup.py',
+  ];
+
+  for (const p of probes) {
+    const full = path.join(target, p);
+    if (fs.existsSync(full)) return true;
+  }
+
+  // 任意 *.test.js / *.spec.js / *.test.ts / *.spec.ts
+  const jsTests = spawnSync(
+    'find',
+    [target, '-maxdepth', '3', '-type', 'f', '(', '-name', '*.test.js', '-o', '-name', '*.spec.js', '-o', '-name', '*.test.ts', '-o', '-name', '*.spec.ts', '-o', '-name', '*_test.py', '-o', '-name', 'test_*.py', ')'],
+    { encoding: 'utf8' },
+  );
+  if (jsTests.status === 0 && jsTests.stdout.trim()) return true;
+
+  // CI 工作流引用
+  const ciDir = path.join(target, '.github', 'workflows');
+  if (fs.existsSync(ciDir)) {
+    const files = fs.readdirSync(ciDir);
+    if (files.some((f) => f.endsWith('.yml') || f.endsWith('.yaml'))) return true;
+  }
+
+  return false;
+}
+
+function runGitCleanCheck(target) {
+  const result = spawnSync('git', ['status', '--porcelain'], {
+    encoding: 'utf8',
+    cwd: target,
+  });
+
+  const dirty = result.status === 0 && result.stdout.trim().length > 0;
+
+  return {
+    ok: true, // audit 不因此失败，仅 warn
+    dirty,
+    stdout: result.stdout,
+    warning: dirty ? '工作区未 clean（S5）：建议 commit 后再执行 apply' : null,
+  };
+}

package/lib/cli.js

@@ -1,26 +1,41 @@
+import { spawnSync } from 'node:child_process';
+import path from 'node:path';
 import { readManifest, isNewerVersion } from './manifest.js';
 import {
   resolveHarnessRoot,
+  resolveHarnessRootForTarget,
   resolvePackageVersion,
   resolveTarget,
   wizardScript,
 } from './paths.js';
 import { runBash } from './run.js';
 import { checkTaskFile } from './task.js';
+import { auditTarget } from './audit.js';
+import { mergePackageScripts } from './package-scripts.js';
 
 function usage() {
-  console.log(`@cyning/harness · cyning-harness CLI (v0.3+)
+  console.log(`@cyning/harness · cyning-harness CLI (v1.0.1)
 
 用法:
-  npx @cyning/harness init [--preset NAME] [--ide LIST] [--target PATH] [--yes]
-  npx @cyning/harness upgrade [--target PATH] [--ide LIST] [--yes] [--force] [--gate-check]
+  npx @cyning/harness --version | -V
+  npx @cyning/harness --help | -h
+  npx @cyning/harness init [--preset NAME] [--ide LIST] [--target PATH] [--yes] [--with-scripts] [--pm pnpm|npm|yarn|auto]
+  npx @cyning/harness upgrade [--target PATH] [--ide LIST] [--yes] [--force] [--gate-check] [--with-scripts] [--pm pnpm|npm|yarn|auto]
   npx @cyning/harness check [--target PATH]
+  npx @cyning/harness audit [--target PATH] [--task FILE]
+  npx @cyning/harness gate-check [--target PATH] [--task FILE] [--graph] [--json]
+  npx @cyning/harness verify [--target PATH] [--task FILE] [--graph]
+  npx @cyning/harness sync index [--target PATH]
   npx @cyning/harness task check --file PATH [--no-circular] [--registry DIR]...
 
 说明:
   init        首次接入 · 内部调用 wizard/install.sh + harness-sync.sh apply
   upgrade     升级已接入仓 · 等价 wizard/upgrade.sh --yes
   check       读 manifest.json · 对比当前包版本是否有可升级版本
+  audit       ICVO 机械审计：复用 gate-check · D5 测试声明检查 · S5 git-clean 提醒
+  gate-check  调用 wizard/gate-check.sh（业务仓无需 clone 即可用）
+  verify      30 前聚合：gate-check + audit D5 + S5 warn + 可选 --graph
+  sync index  生成 .cyning-harness/invoke_index.json
   task check  校验 task.harness.v1.json sidecar · --no-circular 检测 depends_on 环
 
 环境:
@@ -48,6 +63,11 @@ export async function runCli(argv) {
     return;
   }
 
+  if (argv.includes('--version') || argv.includes('-V')) {
+    console.log(pkgVersion);
+    return;
+  }
+
   const [cmd, ...rest] = argv;
 
   if (cmd === 'init') {
@@ -62,6 +82,22 @@ export async function runCli(argv) {
     await cmdCheck(rest, harnessRoot, pkgVersion);
     return;
   }
+  if (cmd === 'audit') {
+    await cmdAudit(rest);
+    return;
+  }
+  if (cmd === 'gate-check') {
+    await cmdGateCheck(rest);
+    return;
+  }
+  if (cmd === 'verify') {
+    await cmdVerify(rest);
+    return;
+  }
+  if (cmd === 'sync') {
+    await cmdSync(rest);
+    return;
+  }
   if (cmd === 'task') {
     await cmdTask(rest);
     return;
@@ -74,13 +110,16 @@ export async function runCli(argv) {
 
 async function cmdInit(args, harnessRoot, pkgVersion) {
   const yes = args.includes('--yes');
-  let rest = args.filter((a) => a !== '--yes');
+  const withScripts = args.includes('--with-scripts');
+  let rest = args.filter((a) => a !== '--yes' && a !== '--with-scripts');
   const { value: preset, rest: r1 } = takeOption(rest, '--preset');
   rest = r1;
   const { value: ide, rest: r2 } = takeOption(rest, '--ide');
   rest = r2;
   const { value: targetArg, rest: r3 } = takeOption(rest, '--target');
   rest = r3;
+  const { value: pm, rest: r4 } = takeOption(rest, '--pm');
+  rest = r4;
 
   if (rest.length > 0) {
     const err = new Error(`init 未知参数: ${rest.join(' ')}`);
@@ -102,6 +141,18 @@ async function cmdInit(args, harnessRoot, pkgVersion) {
     inherit: true,
   });
 
+  if (withScripts) {
+    const ps = mergePackageScripts(target, pkgVersion, pm || 'auto');
+    if (ps.skipped) {
+      console.log(`warn: ${ps.reason}`);
+    } else if (ps.changed) {
+      console.log(`scripts: ${ps.reason}（pm: ${ps.pm}）`);
+      console.log('提示: 运行 `pnpm install` 或对应 install 使 devDep 生效');
+    } else {
+      console.log(`scripts: ${ps.reason}`);
+    }
+  }
+
   console.log(`manifest: ${target}/.cyning-harness/manifest.json`);
   if (!yes) {
     console.log('init 完成。');
@@ -113,13 +164,23 @@ async function cmdUpgrade(args, harnessRoot, pkgVersion) {
   const force = args.includes('--force');
   const gateCheck = args.includes('--gate-check');
   const yes = args.includes('--yes') || !checkOnly;
+  const withScripts = args.includes('--with-scripts');
   let rest = args.filter(
-    (a) => !['--check', '--force', '--gate-check', '--yes'].includes(a),
+    (a) =>
+      ![
+        '--check',
+        '--force',
+        '--gate-check',
+        '--yes',
+        '--with-scripts',
+      ].includes(a),
   );
   const { value: ide, rest: r1 } = takeOption(rest, '--ide');
   rest = r1;
   const { value: targetArg, rest: r2 } = takeOption(rest, '--target');
   rest = r2;
+  const { value: pm, rest: r3 } = takeOption(rest, '--pm');
+  rest = r3;
 
   if (rest.length > 0) {
     const err = new Error(`upgrade 未知参数: ${rest.join(' ')}`);
@@ -149,6 +210,18 @@ async function cmdUpgrade(args, harnessRoot, pkgVersion) {
     },
     inherit: true,
   });
+
+  if (withScripts) {
+    const ps = mergePackageScripts(target, pkgVersion, pm || 'auto');
+    if (ps.skipped) {
+      console.log(`warn: ${ps.reason}`);
+    } else if (ps.changed) {
+      console.log(`scripts: ${ps.reason}（pm: ${ps.pm}）`);
+      console.log('提示: 运行 `pnpm install` 或对应 install 使 devDep 生效');
+    } else {
+      console.log(`scripts: ${ps.reason}`);
+    }
+  }
 }
 
 async function cmdCheck(args, harnessRoot, pkgVersion) {
@@ -186,6 +259,173 @@ async function cmdCheck(args, harnessRoot, pkgVersion) {
   }
 }
 
+async function cmdAudit(args) {
+  let rest = args;
+  const { value: targetArg, rest: r1 } = takeOption(rest, '--target');
+  rest = r1;
+  const { value: taskFile, rest: r2 } = takeOption(rest, '--task');
+  rest = r2;
+
+  if (rest.length > 0) {
+    const err = new Error(`audit 未知参数: ${rest.join(' ')}`);
+    err.exitCode = 1;
+    throw err;
+  }
+
+  const target = resolveTarget(process.cwd(), targetArg);
+  const result = auditTarget(target, { taskFile });
+
+  console.log(`目标: ${target}`);
+  if (taskFile) console.log(`task: ${taskFile}`);
+  console.log(`audit: ${result.ok ? 'PASS' : 'FAIL'}`);
+
+  // D3 gate-check
+  console.log(`  gate-check: ${result.gate.ok ? 'PASS' : 'FAIL'}`);
+  if (!result.gate.ok && result.gate.stdout) {
+    for (const line of result.gate.stdout.split('\n')) {
+      if (line.trim()) console.log(`    ${line}`);
+    }
+  }
+
+  // D5 test
+  console.log(`  test-check: ${result.test.ok ? 'PASS' : 'FAIL'}`);
+  if (result.test.reason) console.log(`    ${result.test.reason}`);
+
+  // S5 git-clean
+  console.log(`  git-clean: ${result.git.dirty ? 'DIRTY' : 'CLEAN'}`);
+  if (result.git.warning) console.log(`    ${result.git.warning}`);
+
+  if (!result.ok) {
+    const err = new Error('ICVO audit 未通过');
+    err.exitCode = 2;
+    throw err;
+  }
+}
+
+async function cmdGateCheck(args) {
+  if (args.includes('--help') || args.includes('-h')) {
+    console.log(`用法: npx @cyning/harness gate-check [--target PATH] [--task FILE] [--graph] [--json]`);
+    return;
+  }
+
+  let rest = args;
+  const { value: targetArg, rest: r1 } = takeOption(rest, '--target');
+  rest = r1;
+  const { value: taskFile, rest: r2 } = takeOption(rest, '--task');
+  rest = r2;
+  const graph = rest.includes('--graph');
+  const json = rest.includes('--json');
+  rest = rest.filter((a) => a !== '--graph' && a !== '--json');
+
+  if (rest.length > 0) {
+    const err = new Error(`gate-check 未知参数: ${rest.join(' ')}`);
+    err.exitCode = 1;
+    throw err;
+  }
+
+  const target = resolveTarget(process.cwd(), targetArg);
+  const harnessRoot = resolveHarnessRootForTarget(target);
+  const script = wizardScript(harnessRoot, 'gate-check.sh');
+  const childArgs = ['--target', target];
+  if (taskFile) childArgs.push('--task', taskFile);
+  if (graph) childArgs.push('--graph');
+  if (json) childArgs.push('--json');
+
+  const result = spawnSync('bash', [script, ...childArgs], {
+    stdio: 'inherit',
+    env: { ...process.env, CYNING_HARNESS: harnessRoot },
+  });
+
+  const exitCode = result.status ?? 1;
+  if (exitCode !== 0) {
+    const err = new Error('');
+    err.exitCode = exitCode;
+    throw err;
+  }
+}
+
+async function cmdVerify(args) {
+  // D3 · implemented in lib/verify.js
+  const { verifyTarget } = await import('./verify.js');
+  if (args.includes('--help') || args.includes('-h')) {
+    console.log(`用法: npx @cyning/harness verify [--target PATH] [--task FILE] [--graph]`);
+    return;
+  }
+
+  let rest = args;
+  const { value: targetArg, rest: r1 } = takeOption(rest, '--target');
+  rest = r1;
+  const { value: taskFile, rest: r2 } = takeOption(rest, '--task');
+  rest = r2;
+  const graph = rest.includes('--graph');
+  rest = rest.filter((a) => a !== '--graph');
+
+  if (rest.length > 0) {
+    const err = new Error(`verify 未知参数: ${rest.join(' ')}`);
+    err.exitCode = 1;
+    throw err;
+  }
+
+  const target = resolveTarget(process.cwd(), targetArg);
+  const result = verifyTarget(target, { taskFile, graph });
+
+  // forward gate-check/audit/graph stdout if any
+  if (result.stdout) {
+    process.stdout.write(result.stdout);
+  }
+
+  const summary = taskFile
+    ? `VERIFY: ${result.ok ? 'PASS' : 'BLOCKED'}${result.reason ? ` · ${result.reason}` : ''} · ${path.basename(taskFile)}`
+    : `VERIFY: ${result.ok ? 'PASS' : 'BLOCKED'}${result.reason ? ` · ${result.reason}` : ''}`;
+  console.log(summary);
+
+  if (!result.ok) {
+    const err = new Error('');
+    err.exitCode = result.exitCode ?? 2;
+    throw err;
+  }
+}
+
+async function cmdSync(args) {
+  if (args.includes('--help') || args.includes('-h')) {
+    console.log(`用法: npx @cyning/harness sync index [--target PATH]`);
+    return;
+  }
+
+  const [sub, ...rest] = args;
+  if (sub !== 'index') {
+    const err = new Error(`sync 子命令未知: ${sub ?? '(空)'}\n用法: sync index [--target PATH]`);
+    err.exitCode = 1;
+    throw err;
+  }
+
+  let remaining = rest;
+  const { value: targetArg, rest: r1 } = takeOption(remaining, '--target');
+  remaining = r1;
+
+  if (remaining.length > 0) {
+    const err = new Error(`sync index 未知参数: ${remaining.join(' ')}`);
+    err.exitCode = 1;
+    throw err;
+  }
+
+  const target = resolveTarget(process.cwd(), targetArg);
+  const harnessRoot = resolveHarnessRootForTarget(target);
+  const script = wizardScript(harnessRoot, 'harness-sync.sh');
+
+  const result = spawnSync('bash', [script, '--index', '--target', target], {
+    stdio: 'inherit',
+    env: { ...process.env, CYNING_HARNESS: harnessRoot },
+  });
+
+  const exitCode = result.status ?? 1;
+  if (exitCode !== 0) {
+    const err = new Error('');
+    err.exitCode = exitCode;
+    throw err;
+  }
+}
+
 async function cmdTask(args) {
   const [sub, ...rest] = args;
   if (sub !== 'check') {

package/lib/package-scripts.js

@@ -0,0 +1,65 @@
+import fs from 'node:fs';
+import path from 'node:path';
+
+const DEFAULT_SCRIPTS = {
+  'harness:verify': 'harness verify',
+  'harness:gate': 'harness gate-check',
+  'harness:audit': 'harness audit',
+};
+
+function detectPackageManager(target) {
+  if (fs.existsSync(path.join(target, 'pnpm-lock.yaml'))) return 'pnpm';
+  if (fs.existsSync(path.join(target, 'yarn.lock'))) return 'yarn';
+  if (fs.existsSync(path.join(target, 'package-lock.json'))) return 'npm';
+  return 'npm';
+}
+
+/**
+ * 在 target 仓的 package.json 中 merge devDep + scripts（不覆盖已有 key）。
+ * @returns {{ok: boolean, skipped?: boolean, reason?: string, changed: boolean}}
+ */
+export function mergePackageScripts(target, version, pm = 'auto') {
+  const pkgPath = path.join(target, 'package.json');
+  if (!fs.existsSync(pkgPath)) {
+    return {
+      ok: true,
+      skipped: true,
+      reason: '未找到 package.json，跳过 --with-scripts',
+      changed: false,
+    };
+  }
+
+  const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+  const original = JSON.stringify(pkg);
+
+  if (!pkg.devDependencies) pkg.devDependencies = {};
+  if (pkg.devDependencies['@cyning/harness'] !== version) {
+    pkg.devDependencies['@cyning/harness'] = version;
+  }
+
+  if (!pkg.scripts) pkg.scripts = {};
+  for (const [key, value] of Object.entries(DEFAULT_SCRIPTS)) {
+    if (!Object.prototype.hasOwnProperty.call(pkg.scripts, key)) {
+      pkg.scripts[key] = value;
+    }
+  }
+
+  if (JSON.stringify(pkg) !== original) {
+    fs.writeFileSync(pkgPath, `${JSON.stringify(pkg, null, 2)}\n`);
+    return {
+      ok: true,
+      skipped: false,
+      changed: true,
+      pm: pm === 'auto' ? detectPackageManager(target) : pm,
+      reason: `已写入 @cyning/harness@${version} 与 scripts`,
+    };
+  }
+
+  return {
+    ok: true,
+    skipped: false,
+    changed: false,
+    pm: pm === 'auto' ? detectPackageManager(target) : pm,
+    reason: 'package.json 已包含所需 devDep/scripts',
+  };
+}

package/lib/paths.js

@@ -12,6 +12,33 @@ export function resolveHarnessRoot() {
   return path.resolve(__dirname, '..');
 }
 
+/**
+ * 对指定业务仓 target 解析可用产品包根。
+ * 顺序：env CYNING_HARNESS → target/.cyning-harness/local.json → npm 包根
+ */
+export function resolveHarnessRootForTarget(target) {
+  if (process.env.CYNING_HARNESS) {
+    return path.resolve(process.env.CYNING_HARNESS);
+  }
+
+  const localJson = path.join(target, '.cyning-harness', 'local.json');
+  if (fs.existsSync(localJson)) {
+    try {
+      const data = JSON.parse(fs.readFileSync(localJson, 'utf8'));
+      if (data.cyning_harness_root) {
+        const candidate = path.resolve(target, data.cyning_harness_root);
+        if (fs.existsSync(path.join(candidate, 'wizard', 'gate-check.sh'))) {
+          return candidate;
+        }
+      }
+    } catch {
+      // fall through
+    }
+  }
+
+  return path.resolve(__dirname, '..');
+}
+
 export function resolvePackageVersion(harnessRoot) {
   if (process.env.HARNESS_VERSION) {
     return process.env.HARNESS_VERSION;

package/lib/verify.js

@@ -0,0 +1,103 @@
+import { spawnSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import { resolveHarnessRootForTarget, wizardScript } from './paths.js';
+import { auditTarget } from './audit.js';
+
+/**
+ * 30 前聚合验证：gate-check + audit D5（仅 --task）+ S5 git-clean warn + 可选 --graph
+ */
+export function verifyTarget(target, options = {}) {
+  const { taskFile, graph } = options;
+  const harnessRoot = resolveHarnessRootForTarget(target);
+
+  // 1. gate-check（含 --graph）
+  const gateResult = runGateCheck(target, taskFile, graph, harnessRoot);
+  if (!gateResult.ok) {
+    return {
+      ok: false,
+      exitCode: 2,
+      reason: gateResult.reason,
+      stdout: gateResult.stdout,
+    };
+  }
+
+  // 2. audit D5（仅当指定 task）
+  if (taskFile) {
+    const audit = auditTarget(target, { taskFile });
+    if (!audit.ok) {
+      return {
+        ok: false,
+        exitCode: 2,
+        reason: audit.test.ok ? 'gate-check 或 audit 未通过' : audit.test.reason,
+        stdout: gateResult.stdout,
+      };
+    }
+  }
+
+  // 3. S5 git-clean：warn 不挡
+  const gitResult = runGitCleanCheck(target);
+  if (gitResult.dirty) {
+    // 把 warn 拼到 stdout 里让 CLI 透传
+    const warn = `WARN: 工作区未 clean（S5）：建议 commit 后再执行 apply\n`;
+    gateResult.stdout += warn;
+  }
+
+  return {
+    ok: true,
+    exitCode: 0,
+    stdout: gateResult.stdout,
+  };
+}
+
+function runGateCheck(target, taskFile, graph, harnessRoot) {
+  const script = wizardScript(harnessRoot, 'gate-check.sh');
+  const args = [script, '--target', target];
+  if (taskFile) args.push('--task', taskFile);
+  if (graph) args.push('--graph');
+
+  const result = spawnSync('bash', args, {
+    encoding: 'utf8',
+    env: { ...process.env, CYNING_HARNESS: harnessRoot },
+  });
+
+  if (result.status !== 0) {
+    return {
+      ok: false,
+      status: result.status,
+      stdout: result.stdout,
+      reason: extractBlockReason(result.stdout, taskFile),
+    };
+  }
+
+  return {
+    ok: true,
+    status: 0,
+    stdout: result.stdout,
+  };
+}
+
+function extractBlockReason(stdout) {
+  const lines = stdout.split('\n');
+  for (const line of lines) {
+    if (line.includes('→ 30 不可开工')) {
+      return line.trim().replace(/^→\s*/, '');
+    }
+  }
+  for (const line of lines) {
+    if (line.includes('❌ 拒 30')) {
+      return line.trim();
+    }
+  }
+  return 'gate-check blocked';
+}
+
+function runGitCleanCheck(target) {
+  const result = spawnSync('git', ['status', '--porcelain'], {
+    encoding: 'utf8',
+    cwd: target,
+  });
+
+  const dirty = result.status === 0 && result.stdout.trim().length > 0;
+  return { dirty };
+}