@dommaker/harness 0.16.9 → 0.17.1

package/src/cli/commands/__tests__/check-skip-output.test.ts

@@ -0,0 +1,128 @@
+/**
+ * check 命令 skip 输出形态测试（ADR-0001 P4）
+ *
+ * skipped 结果单独列示，不进 pass/fail 统计。
+ */
+
+import { check } from '../check';
+import * as fs from 'fs';
+import { constraintChecker } from '../../../core/constraints/checker';
+import { ProjectConfigLoader } from '../../../core/project-config-loader';
+
+// Mock fs
+jest.mock('fs', () => ({
+  existsSync: jest.fn(),
+  readFileSync: jest.fn(),
+  mkdirSync: jest.fn(),
+  writeFileSync: jest.fn(),
+  readdirSync: jest.fn(),
+}));
+
+// Mock execAsync（getChangedFiles 失败 → 空变更列表）
+jest.mock('../../../utils/exec', () => ({
+  execAsync: jest.fn(),
+}));
+
+jest.mock('child_process', () => ({
+  exec: jest.fn(),
+  execSync: jest.fn(() => Buffer.from('')),
+}));
+
+// Mock constraintChecker
+jest.mock('../../../core/constraints/checker', () => ({
+  constraintChecker: {
+    setCustomConfig: jest.fn(),
+    setTraceRecorder: jest.fn(),
+    checkConstraints: jest.fn(),
+  },
+}));
+
+// Mock ProjectConfigLoader
+jest.mock('../../../core/project-config-loader', () => ({
+  ProjectConfigLoader: jest.fn().mockImplementation(() => ({
+    load: jest.fn(),
+    hasCustomConfig: jest.fn().mockReturnValue(false),
+    mergeConstraints: jest.fn().mockReturnValue({ custom: [], disabled: [] }),
+  })),
+}));
+
+// Mock chalk
+jest.mock('chalk', () => ({
+  blue: jest.fn((str: string) => str),
+  yellow: jest.fn((str: string) => str),
+  green: jest.fn((str: string) => str),
+  gray: jest.fn((str: string) => str),
+  red: jest.fn((str: string) => str),
+}));
+
+const mockChecker = constraintChecker as jest.Mocked<typeof constraintChecker>;
+
+function fakeConstraint(id: string, level: 'iron_law' | 'guideline') {
+  return {
+    kind: 'check' as const,
+    id,
+    rule: 'test',
+    message: `msg-${id}`,
+    level,
+    trigger: 'code_implementation',
+    enforcement: 'test',
+  };
+}
+
+describe('check 命令 skip 输出', () => {
+  let consoleSpy: jest.SpyInstance;
+
+  beforeEach(() => {
+    jest.clearAllMocks();
+    consoleSpy = jest.spyOn(console, 'log').mockImplementation();
+    process.exitCode = 0;
+  });
+
+  afterEach(() => {
+    consoleSpy.mockRestore();
+    process.exitCode = 0;
+  });
+
+  it('skipped 单独列示，不计入铁律通过条数', async () => {
+    mockChecker.checkConstraints.mockResolvedValue({
+      passed: true,
+      ironLaws: [
+        { id: 'law_pass', level: 'iron_law', satisfied: true, checkedAt: new Date(), constraint: fakeConstraint('law_pass', 'iron_law') },
+        { id: 'law_skip', level: 'iron_law', satisfied: true, skipped: true, checkedAt: new Date(), constraint: fakeConstraint('law_skip', 'iron_law') },
+      ],
+      guidelines: [],
+      tips: [],
+      warningCount: 0,
+      tipCount: 0,
+    });
+
+    await check({ preset: 'default', staged: false });
+
+    // 通过条数只计实际评估的 1 条
+    expect(consoleSpy).toHaveBeenCalledWith(expect.stringContaining('铁律: 全部通过 (1 条)'));
+    // skipped 单独列示
+    expect(consoleSpy).toHaveBeenCalledWith(expect.stringContaining('跳过评估: 1 条'));
+    expect(consoleSpy).toHaveBeenCalledWith(expect.stringContaining('- law_skip'));
+    // skip 不影响整体通过
+    expect(consoleSpy).toHaveBeenCalledWith(expect.stringContaining('约束检查通过'));
+  });
+
+  it('指导原则通过计数排除 skipped', async () => {
+    mockChecker.checkConstraints.mockResolvedValue({
+      passed: true,
+      ironLaws: [],
+      guidelines: [
+        { id: 'g_pass', level: 'guideline', satisfied: true, checkedAt: new Date(), constraint: fakeConstraint('g_pass', 'guideline') },
+        { id: 'g_skip', level: 'guideline', satisfied: true, skipped: true, checkedAt: new Date(), constraint: fakeConstraint('g_skip', 'guideline') },
+      ],
+      tips: [],
+      warningCount: 0,
+      tipCount: 0,
+    });
+
+    await check({ preset: 'default', staged: false });
+
+    expect(consoleSpy).toHaveBeenCalledWith(expect.stringContaining('指导原则: 1/1 通过'));
+    expect(consoleSpy).toHaveBeenCalledWith(expect.stringContaining('跳过评估: 1 条'));
+  });
+});

package/src/cli/commands/__tests__/check.test.ts

@@ -6,7 +6,6 @@ import { check, listLaws } from '../check';
 import * as fs from 'fs';
 import { constraintChecker } from '../../../core/constraints/checker';
 import { ProjectConfigLoader } from '../../../core/project-config-loader';
-import { IRON_LAWS, GUIDELINES, TIPS } from '../../../core/constraints/definitions';
 import { execAsync } from '../../../utils/exec';
 
 // Mock fs
@@ -88,7 +87,7 @@ describe('check command', () => {
     it('应该通过所有约束检查', async () => {
       mockChecker.checkConstraints.mockResolvedValue({
         passed: true,
-        ironLaws: [{ id: 'test', level: 'iron_law', satisfied: true, checkedAt: new Date(), constraint: { id: 'test', rule: 'test', message: 'test', level: 'iron_law', trigger: 'code_implementation', enforcement: 'checkpoint-required' } }],
+        ironLaws: [{ id: 'test', level: 'iron_law', satisfied: true, checkedAt: new Date(), constraint: { kind: 'check' as const, id: 'test', rule: 'test', message: 'test', level: 'iron_law', trigger: 'code_implementation', enforcement: 'checkpoint-required' } }],
         guidelines: [],
         tips: [],
         warningCount: 0,
@@ -102,7 +101,7 @@ describe('check command', () => {
     it('应该显示铁律违规', async () => {
       mockChecker.checkConstraints.mockResolvedValue({
         passed: false,
-        ironLaws: [{ id: 'no_bypass_checkpoint', level: 'iron_law', satisfied: false, checkedAt: new Date(), constraint: { id: 'no_bypass_checkpoint', rule: 'test', message: 'test', level: 'iron_law', trigger: 'code_implementation', enforcement: 'checkpoint-required' } }],
+        ironLaws: [{ id: 'no_bypass_checkpoint', level: 'iron_law', satisfied: false, checkedAt: new Date(), constraint: { kind: 'check' as const, id: 'no_bypass_checkpoint', rule: 'test', message: 'test', level: 'iron_law', trigger: 'code_implementation', enforcement: 'checkpoint-required' } }],
         guidelines: [],
         tips: [],
         warningCount: 0,
@@ -120,7 +119,7 @@ describe('check command', () => {
       mockChecker.checkConstraints.mockResolvedValue({
         passed: false,
         ironLaws: [],
-        guidelines: [{ id: 'test_guideline', level: 'guideline', satisfied: false, checkedAt: new Date(), constraint: { id: 'test_guideline', rule: 'test', message: 'test', level: 'guideline', trigger: 'code_implementation', enforcement: 'warning' } }],
+        guidelines: [{ id: 'test_guideline', level: 'guideline', satisfied: false, checkedAt: new Date(), constraint: { kind: 'check' as const, id: 'test_guideline', rule: 'test', message: 'test', level: 'guideline', trigger: 'code_implementation', enforcement: 'warning' } }],
         tips: [],
         warningCount: 1,
         tipCount: 0,
@@ -157,7 +156,7 @@ describe('check command', () => {
         passed: true,
         ironLaws: [],
         guidelines: [],
-        tips: [{ id: 'test_tip', level: 'tip', satisfied: false, checkedAt: new Date(), constraint: { id: 'test_tip', rule: 'test', message: 'test tip', level: 'tip', trigger: 'code_implementation', enforcement: 'info' } }],
+        tips: [{ id: 'test_tip', level: 'tip', satisfied: false, checkedAt: new Date(), constraint: { kind: 'check' as const, id: 'test_tip', rule: 'test', message: 'test tip', level: 'tip', trigger: 'code_implementation', enforcement: 'info' } }],
         warningCount: 0,
         tipCount: 1,
       });
@@ -170,7 +169,7 @@ describe('check command', () => {
       mockChecker.checkConstraints.mockResolvedValue({
         passed: true,
         ironLaws: [],
-        guidelines: [{ id: 'test_guideline', level: 'guideline', satisfied: true, checkedAt: new Date(), constraint: { id: 'test_guideline', rule: 'test', message: 'test', level: 'guideline', trigger: 'code_implementation', enforcement: 'warning' } }],
+        guidelines: [{ id: 'test_guideline', level: 'guideline', satisfied: true, checkedAt: new Date(), constraint: { kind: 'check' as const, id: 'test_guideline', rule: 'test', message: 'test', level: 'guideline', trigger: 'code_implementation', enforcement: 'warning' } }],
         tips: [],
         warningCount: 0,
         tipCount: 0,
@@ -352,6 +351,7 @@ describe('check command', () => {
           satisfied: false,
           checkedAt: new Date(),
           constraint: {
+            kind: 'check' as const,
             id: 'no_bypass_checkpoint',
             rule: 'NO BYPASSING CHECKPOINTS',
             message: '禁止跳过检查点验证',
@@ -384,6 +384,7 @@ describe('check command', () => {
           satisfied: false,
           checkedAt: new Date(),
           constraint: {
+            kind: 'check' as const,
             id: 'prefer_composition',
             rule: 'PREFER COMPOSITION OVER INHERITANCE',
             message: '优先使用组合而非继承',
@@ -413,6 +414,7 @@ describe('check command', () => {
           satisfied: false,
           checkedAt: new Date(),
           constraint: {
+            kind: 'check' as const,
             id: 'consider_reuse',
             rule: 'CONSIDER REUSE',
             message: '考虑复用',
@@ -455,7 +457,7 @@ describe('check command', () => {
     it('应该在 trace 数达到 50 时提示查看统计', async () => {
       const traces = Array(50).fill('{"result":"pass"}').join('\n');
       mockFs.existsSync.mockImplementation((p: any) => {
-        if (p.includes('execution.log')) return true;
+        if (p.includes('traces.log')) return true;
         if (p.includes('.state.json')) return false;
         return false;
       });
@@ -465,19 +467,6 @@ describe('check command', () => {
       expect(consoleSpy).toHaveBeenCalledWith(expect.stringContaining('记录已足够'));
     });
 
-    it('应该在 trace 数达到 100 且无诊断历史时提示运行 flow', async () => {
-      const traces = Array(100).fill('{"result":"pass"}').join('\n');
-      mockFs.existsSync.mockImplementation((p: any) => {
-        if (p.includes('execution.log')) return true;
-        if (p.includes('.state.json')) return false;
-        return false;
-      });
-      mockFs.readFileSync.mockReturnValue(traces);
-
-      await check({ preset: 'default', staged: false });
-      expect(consoleSpy).toHaveBeenCalledWith(expect.stringContaining('建议运行 harness flow'));
-    });
-
     it('应该在绕过率高时提示查看详情', async () => {
       // 20 条记录，15 条 bypassed (75% > 30%)
       const traces = [
@@ -485,7 +474,7 @@ describe('check command', () => {
         ...Array(15).fill('{"result":"bypassed"}'),
       ].join('\n');
       mockFs.existsSync.mockImplementation((p: any) => {
-        if (p.includes('execution.log')) return true;
+        if (p.includes('traces.log')) return true;
         if (p.includes('.state.json')) return false;
         return false;
       });
@@ -513,7 +502,7 @@ describe('check command', () => {
     it('应该在 trace 数少于 50 时不提示', async () => {
       const traces = Array(10).fill('{"result":"pass"}').join('\n');
       mockFs.existsSync.mockImplementation((p: any) => {
-        if (p.includes('execution.log')) return true;
+        if (p.includes('traces.log')) return true;
         if (p.includes('.state.json')) return false;
         return false;
       });
@@ -531,7 +520,7 @@ describe('check command', () => {
         ...Array(2).fill('{"result":"bypassed"}'),
       ].join('\n');
       mockFs.existsSync.mockImplementation((p: any) => {
-        if (p.includes('execution.log')) return true;
+        if (p.includes('traces.log')) return true;
         if (p.includes('.state.json')) return false;
         return false;
       });
@@ -550,7 +539,7 @@ describe('check command', () => {
         ...Array(10).fill('{"result":"bypassed"}'),
       ].join('\n');
       mockFs.existsSync.mockImplementation((p: any) => {
-        if (p.includes('execution.log')) return true;
+        if (p.includes('traces.log')) return true;
         if (p.includes('.state.json')) return false;
         return false;
       });
@@ -564,7 +553,7 @@ describe('check command', () => {
     it('应该保存状态文件当有提示时', async () => {
       const traces = Array(50).fill('{"result":"pass"}').join('\n');
       mockFs.existsSync.mockImplementation((p: any) => {
-        if (p.includes('execution.log')) return true;
+        if (p.includes('traces.log')) return true;
         if (p.includes('.state.json')) return false;
         return false;
       });

package/src/cli/commands/__tests__/constraints-report.test.ts

@@ -0,0 +1,327 @@
+/**
+ * harness constraints report 测试（ADR-0001 P5）
+ *
+ * 覆盖：无 trace 文件、空 trace、含 skip 的统计、四类候选诊断、
+ * --export 内容脱敏（无 projectPath）、unknownIds 配置健康提示。
+ *
+ * 使用真实临时目录（getEffectiveConstraints/ProjectConfigLoader 读真实 fs）。
+ */
+
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import type { ExecutionTrace } from '../../../types/trace';
+import {
+  buildConstraintsUsageReport,
+  diagnoseRetireCandidates,
+  readProjectTraces,
+} from '../../../core/constraints/usage-report';
+import { constraintsReport, renderExportMarkdown } from '../constraints-report';
+
+function makeTmpProject(): string {
+  return fs.mkdtempSync(path.join(os.tmpdir(), 'harness-report-test-'));
+}
+
+function writeTraces(root: string, traces: Partial<ExecutionTrace>[]): void {
+  const dir = path.join(root, '.harness', 'logs');
+  fs.mkdirSync(dir, { recursive: true });
+  const lines = traces.map(t =>
+    JSON.stringify({
+      level: 'guideline',
+      timestamp: 1700000000000,
+      result: 'pass',
+      ...t,
+    })
+  );
+  fs.writeFileSync(path.join(dir, 'traces.log'), lines.join('\n') + '\n', 'utf-8');
+}
+
+/** 生成 N 条同结果 trace */
+function tracesOf(id: string, result: ExecutionTrace['result'], n: number, startTs = 1700000000000): Partial<ExecutionTrace>[] {
+  return Array.from({ length: n }, (_, i) => ({ constraintId: id, result, timestamp: startTs + i * 1000 }));
+}
+
+let logSpy: jest.SpyInstance;
+
+beforeEach(() => {
+  logSpy = jest.spyOn(console, 'log').mockImplementation(() => {});
+});
+
+afterEach(() => {
+  logSpy.mockRestore();
+});
+
+describe('buildConstraintsUsageReport', () => {
+  it('无 trace 文件：生效集 check 约束全部列出且 total=0，全部判为零触发候选', () => {
+    const root = makeTmpProject();
+    const report = buildConstraintsUsageReport(root);
+
+    expect(report.traceFileExists).toBe(false);
+    expect(report.stats.length).toBe(9); // 5 iron + 4 guideline
+    for (const s of report.stats) {
+      expect(s.total).toBe(0);
+      expect(s.evaluated).toBe(0);
+      expect(s.failRate).toBe(0);
+      expect(s.firstAt).toBeUndefined();
+    }
+    expect(report.candidates.length).toBe(9);
+    expect(report.candidates.every(c => c.kind === 'zero_trigger')).toBe(true);
+    // prompt 注入清单（standard preset、无 scenes → 14 条通用 prompt）
+    expect(report.activePromptIds.length).toBe(14);
+    expect(report.activePromptIds).toContain('no_fuzzy_completion_claim');
+  });
+
+  it('空 trace 文件：与无文件一致，但 traceFileExists=true', () => {
+    const root = makeTmpProject();
+    writeTraces(root, []);
+    const report = buildConstraintsUsageReport(root);
+
+    expect(report.traceFileExists).toBe(true);
+    expect(report.stats.every(s => s.total === 0)).toBe(true);
+    expect(report.candidates.every(c => c.kind === 'zero_trigger')).toBe(true);
+  });
+
+  it('含 skip 的统计：skip 不计入 fail 率分母，首次/最近时间正确', () => {
+    const root = makeTmpProject();
+    writeTraces(root, [
+      ...tracesOf('no_hardcoded_credentials', 'pass', 3, 1700000000000),
+      ...tracesOf('no_hardcoded_credentials', 'fail', 1, 1700000100000),
+      ...tracesOf('no_hardcoded_credentials', 'skip', 2, 1700000200000),
+    ]);
+    const report = buildConstraintsUsageReport(root);
+    const s = report.stats.find(x => x.id === 'no_hardcoded_credentials')!;
+
+    expect(s.total).toBe(6);
+    expect(s.pass).toBe(3);
+    expect(s.fail).toBe(1);
+    expect(s.skip).toBe(2);
+    expect(s.evaluated).toBe(4);
+    expect(s.failRate).toBeCloseTo(0.25);
+    expect(s.firstAt).toBe(1700000000000);
+    expect(s.lastAt).toBe(1700000201000);
+    // 4 次评估 1 次 fail：不构成任何候选
+    expect(report.candidates.find(c => c.id === 'no_hardcoded_credentials')).toBeUndefined();
+  });
+
+  it('坏行容错：单行 JSON 损坏不影响其他行统计', () => {
+    const root = makeTmpProject();
+    const dir = path.join(root, '.harness', 'logs');
+    fs.mkdirSync(dir, { recursive: true });
+    fs.writeFileSync(
+      path.join(dir, 'traces.log'),
+      '{"constraintId":"docs_freshness","timestamp":1,"result":"pass","level":"iron_law"}\n{bad json\n',
+      'utf-8'
+    );
+    expect(readProjectTraces(root).length).toBe(1);
+  });
+
+  it('四类候选诊断：零触发/不可评估(flag)/不可评估(探测)/高噪/零拦截', () => {
+    const root = makeTmpProject();
+    writeTraces(root, [
+      // 不可评估（flag 未接线）：全部 skip
+      ...tracesOf('no_completion_without_verification', 'skip', 3),
+      // 不可评估（存在性探测未命中）：全部 skip
+      ...tracesOf('capability_sync', 'skip', 5),
+      // 高噪：24 次评估 fail 率 83% > 80%
+      ...tracesOf('no_bypass_checkpoint', 'fail', 20),
+      ...tracesOf('no_bypass_checkpoint', 'pass', 4, 1700001000000),
+      // 零拦截：50 次评估 0 fail
+      ...tracesOf('no_hardcoded_credentials', 'pass', 50, 1700010000000),
+    ]);
+    const report = buildConstraintsUsageReport(root);
+    const byId = new Map(report.candidates.map(c => [c.id, c]));
+
+    // 零触发（未出现在 trace 的 check 约束）
+    expect(byId.get('docs_freshness')?.kind).toBe('zero_trigger');
+
+    // 不可评估 · flag 未接线
+    const flagC = byId.get('no_completion_without_verification');
+    expect(flagC?.kind).toBe('unevaluable');
+    expect(flagC?.reason).toContain('证据 flag 未接线');
+
+    // 不可评估 · 约定未采用
+    const probeC = byId.get('capability_sync');
+    expect(probeC?.kind).toBe('unevaluable');
+    expect(probeC?.reason).toContain('约定未采用');
+
+    // 高噪
+    const noiseC = byId.get('no_bypass_checkpoint');
+    expect(noiseC?.kind).toBe('high_noise');
+    expect(noiseC?.reason).toContain('83%');
+
+    // 零拦截
+    const zeroC = byId.get('no_hardcoded_credentials');
+    expect(zeroC?.kind).toBe('zero_intercept');
+    expect(zeroC?.reason).toContain('50 次评估');
+  });
+
+  it('阈值可配：放宽零拦截样本阈值后 10 次全 pass 也成为候选', () => {
+    const root = makeTmpProject();
+    writeTraces(root, tracesOf('no_hardcoded_credentials', 'pass', 10));
+
+    const strict = buildConstraintsUsageReport(root);
+    expect(strict.candidates.find(c => c.id === 'no_hardcoded_credentials')).toBeUndefined();
+
+    const relaxed = buildConstraintsUsageReport(root, { zeroInterceptMinEvaluated: 10 });
+    expect(relaxed.candidates.find(c => c.id === 'no_hardcoded_credentials')?.kind).toBe('zero_intercept');
+  });
+
+  it('diagnoseRetireCandidates 优先级：全 skip 不重复计入零拦截', () => {
+    const candidates = diagnoseRetireCandidates([
+      {
+        id: 'x', level: 'guideline',
+        total: 60, pass: 0, fail: 0, skip: 60, bypassed: 0,
+        evaluated: 0, failRate: 0,
+      },
+    ]);
+    expect(candidates.length).toBe(1);
+    expect(candidates[0].kind).toBe('unevaluable');
+  });
+
+  it('配置健康：config.yml 中未知 id 进入 unknownIds', () => {
+    const root = makeTmpProject();
+    fs.mkdirSync(path.join(root, '.harness'), { recursive: true });
+    fs.writeFileSync(
+      path.join(root, '.harness', 'config.yml'),
+      'constraints:\n  ghost_constraint:\n    enabled: false\n',
+      'utf-8'
+    );
+    const report = buildConstraintsUsageReport(root);
+    expect(report.lint.unknownIds).toContain('ghost_constraint');
+  });
+});
+
+describe('constraintsReport CLI', () => {
+  it('console 输出包含统计表、候选、注入清单、unknownIds 提示', async () => {
+    const root = makeTmpProject();
+    fs.mkdirSync(path.join(root, '.harness'), { recursive: true });
+    fs.writeFileSync(
+      path.join(root, '.harness', 'config.yml'),
+      'constraints:\n  ghost_constraint:\n    enabled: false\n',
+      'utf-8'
+    );
+    writeTraces(root, tracesOf('no_hardcoded_credentials', 'pass', 3));
+
+    await constraintsReport({ projectPath: root });
+
+    const output = logSpy.mock.calls.map(c => String(c[0])).join('\n');
+    expect(output).toContain('约束使用报告');
+    expect(output).toContain('no_hardcoded_credentials');
+    expect(output).toContain('total=3');
+    expect(output).toContain('退役候选');
+    expect(output).toContain('当前生效 prompt 注入');
+    expect(output).toContain('ghost_constraint');
+  });
+
+  it('--export 缺省路径：写入 .harness/reports/constraints-<YYYYMMDD>.md 且内容脱敏', async () => {
+    const root = makeTmpProject();
+    writeTraces(root, [
+      ...tracesOf('no_bypass_checkpoint', 'fail', 20),
+      // projectPath 字段进 trace，但不得进 export
+      { constraintId: 'no_bypass_checkpoint', result: 'fail', projectPath: root, timestamp: 1700001000000 },
+    ]);
+
+    await constraintsReport({ projectPath: root, export: true });
+
+    const date = new Date().toISOString().slice(0, 10).replace(/-/g, '');
+    const exportPath = path.join(root, '.harness', 'reports', `constraints-${date}.md`);
+    expect(fs.existsSync(exportPath)).toBe(true);
+
+    const content = fs.readFileSync(exportPath, 'utf-8');
+    expect(content).toContain('harness 版本');
+    expect(content).toContain('| id | total | pass | fail | skip |');
+    expect(content).toContain('no_bypass_checkpoint');
+    expect(content).toContain('高噪');
+    // 脱敏：不包含项目路径
+    expect(content).not.toContain(root);
+    expect(content).not.toContain('projectPath');
+
+    // 打印了导出路径
+    const output = logSpy.mock.calls.map(c => String(c[0])).join('\n');
+    expect(output).toContain(exportPath);
+  });
+
+  it('--export 指定文件：写到给定路径', async () => {
+    const root = makeTmpProject();
+    await constraintsReport({ projectPath: root, export: 'my-report.md' });
+    expect(fs.existsSync(path.join(root, 'my-report.md'))).toBe(true);
+  });
+
+  it('renderExportMarkdown：无候选时显式标注', () => {
+    const root = makeTmpProject();
+    writeTraces(root, [
+      // 所有 check 约束给少量健康数据（低于一切阈值）
+      ...buildConstraintsUsageReport(root).stats.flatMap(s => tracesOf(s.id, 'pass', 5)),
+    ]);
+    const report = buildConstraintsUsageReport(root);
+    expect(report.candidates.length).toBe(0);
+    const md = renderExportMarkdown(report, '0.0.0-test', new Date(1700000000000));
+    expect(md).toContain('（无候选）');
+    expect(md).toContain('0.0.0-test');
+    expect(md).toContain('2023-11-14');
+  });
+});
+
+describe('constraintsReport 注入漂移小节（ADR-0001 决策 7）', () => {
+  // eslint-disable-next-line @typescript-eslint/no-var-requires
+  const realVersion = require('../../../../package.json').version as string;
+
+  const writeSyncedClaudeMd = (root: string, version = realVersion) => {
+    const { renderConstraintsSection } = require('../../../core/constraints/injection-renderer');
+    const { getEffectiveConstraints } = require('../../../core/effective-constraints');
+    const section = '## Governance Rules\n' + renderConstraintsSection(getEffectiveConstraints(root), version);
+    fs.writeFileSync(path.join(root, 'CLAUDE.md'), `# Test Project\n\n${section}`, 'utf-8');
+  };
+
+  it('有漂移：输出条目级差异（缺失/多余）与修复指引', async () => {
+    const root = makeTmpProject();
+    writeSyncedClaudeMd(root, '0.0.1-old');
+    const claudeMdPath = path.join(root, 'CLAUDE.md');
+    const content = fs.readFileSync(claudeMdPath, 'utf-8');
+    const originalLine = content.split('\n').find((l: string) => l.startsWith('- **'))!;
+    const editedLine = originalLine.replace(/: .+$/, ': 手工篡改');
+    fs.writeFileSync(claudeMdPath, content.replace(originalLine, editedLine), 'utf-8');
+
+    await constraintsReport({ projectPath: root });
+
+    const output = logSpy.mock.calls.map(c => String(c[0])).join('\n');
+    expect(output).toContain('注入漂移');
+    expect(output).toContain('版本漂移');
+    expect(output).toContain('0.0.1-old');
+    expect(output).toContain(`缺失: ${originalLine}`);
+    expect(output).toContain(`多余: ${editedLine}`);
+    expect(output).toContain('npx harness init');
+  });
+
+  it('重复章节：输出重复章节提示', async () => {
+    const root = makeTmpProject();
+    writeSyncedClaudeMd(root);
+    fs.appendFileSync(path.join(root, 'CLAUDE.md'), '\n## Governance Rules\n\n旧版遗留\n', 'utf-8');
+
+    await constraintsReport({ projectPath: root });
+
+    const output = logSpy.mock.calls.map(c => String(c[0])).join('\n');
+    expect(output).toContain('重复章节');
+  });
+
+  it('无漂移：小节显示无漂移', async () => {
+    const root = makeTmpProject();
+    writeSyncedClaudeMd(root);
+
+    await constraintsReport({ projectPath: root });
+
+    const output = logSpy.mock.calls.map(c => String(c[0])).join('\n');
+    expect(output).toContain('注入漂移');
+    expect(output).toContain('无漂移');
+  });
+
+  it('未注入（无标记段）：一句话提示，不算漂移', async () => {
+    const root = makeTmpProject();
+    fs.writeFileSync(path.join(root, 'CLAUDE.md'), '# Test Project\n', 'utf-8');
+
+    await constraintsReport({ projectPath: root });
+
+    const output = logSpy.mock.calls.map(c => String(c[0])).join('\n');
+    expect(output).toContain('未注入');
+  });
+});