@fantasticit/sumi 0.0.0-stage → 0.5.0

package/node_modules/@sumi/plugins-governance/dist/state.js

@@ -0,0 +1,155 @@
+import { execFileSync } from 'node:child_process';
+import { createHash, randomBytes } from 'node:crypto';
+import { closeSync, existsSync, mkdirSync, openSync, readFileSync, readSync, writeFileSync, writeSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { WriteStream } from 'node:tty';
+/** 共享状态目录：由 git 公共目录定位，所有 worktree 共用，不在工作树中、不随提交传播。 */
+export function stateDir(root) {
+    const common = execFileSync('git', ['rev-parse', '--git-common-dir'], { cwd: root, encoding: 'utf8', windowsHide: true }).trim();
+    const dir = join(resolve(root, common), 'sumi');
+    mkdirSync(dir, { recursive: true });
+    return dir;
+}
+export function bindingKey(kind, binding) {
+    const canonical = JSON.stringify(binding, Object.keys(binding).sort());
+    return createHash('sha256').update(`${kind}\0${canonical}`).digest('hex');
+}
+function readJson(path) {
+    return existsSync(path) ? JSON.parse(readFileSync(path, 'utf8')) : null;
+}
+export function isApproved(root, kind, binding) {
+    return existsSync(join(stateDir(root), 'approvals', `${bindingKey(kind, binding)}.json`));
+}
+/** 登记待确认请求（同一对象重复登记得到同一 id），返回请求 id。 */
+export function registerRequest(root, kind, binding, summary) {
+    const key = bindingKey(kind, binding);
+    const id = key.slice(0, 8);
+    const dir = join(stateDir(root), 'requests');
+    mkdirSync(dir, { recursive: true });
+    const request = { id, kind, binding, summary, createdAt: new Date().toISOString() };
+    writeFileSync(join(dir, `${id}.json`), JSON.stringify(request, null, 2));
+    return id;
+}
+export function readRequest(root, id) {
+    return readJson(join(stateDir(root), 'requests', `${id}.json`));
+}
+export function recordApproval(root, request) {
+    const dir = join(stateDir(root), 'approvals');
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(join(dir, `${bindingKey(request.kind, request.binding)}.json`), JSON.stringify({ ...request, approvedAt: new Date().toISOString() }, null, 2));
+}
+/**
+ * 需要人工确认时的统一入口：已确认返回 null；否则登记请求并返回 ask-human 所需的请求 id。
+ * 评审与判例插件也通过它请求确认。
+ */
+export function requireApproval(root, kind, binding, summary) {
+    return isApproved(root, kind, binding) ? null : registerRequest(root, kind, binding, summary);
+}
+export function unlockActive(root, now = Date.now()) {
+    const window = readJson(join(stateDir(root), 'unlock.json'));
+    return !!window && Date.parse(window.until) > now;
+}
+export function writeUnlock(root, minutes) {
+    const until = new Date(Date.now() + minutes * 60_000).toISOString();
+    writeFileSync(join(stateDir(root), 'unlock.json'), JSON.stringify({ until }));
+    return until;
+}
+/** Windows 控制台输入、输出是两个设备；POSIX 的 /dev/tty 可双向复用。 */
+export function controlTerminalPaths(platform = process.platform) {
+    return platform === 'win32' ? { input: '\\\\.\\CONIN$', output: '\\\\.\\CONOUT$' } : { input: '/dev/tty', output: '/dev/tty' };
+}
+/** 打开当前进程所属的控制终端；调用者必须执行返回值的 close。 */
+export function openControlTerminal(platform = process.platform, open = (path, flags) => openSync(path, flags), close = closeSync) {
+    const paths = controlTerminalPaths(platform);
+    const openDevice = (path, flags) => {
+        try {
+            return open(path, flags);
+        }
+        catch (cause) {
+            const code = cause?.code;
+            const unavailable = code === 'ENXIO' || code === 'ENODEV' || code === 'ENOTTY';
+            const reason = unavailable ? '没有可用控制台' : '打开控制台失败';
+            const detail = cause instanceof Error ? cause.message : String(cause);
+            throw new Error(`${reason}（${path}${code ? `，${code}` : ''}）：${detail}。需要交互式终端，请由人在自己的终端窗口中运行该命令。`, {
+                cause,
+            });
+        }
+    };
+    if (paths.input === paths.output) {
+        const fd = openDevice(paths.input, 'r+');
+        return {
+            readFd: fd,
+            writeFd: fd,
+            write: async (text) => {
+                writeSync(fd, text);
+            },
+            close: () => close(fd),
+        };
+    }
+    const readFd = openDevice(paths.input, 'r');
+    let writeFd;
+    try {
+        // TTY 输出需要读取屏幕缓冲区信息；只写句柄不能初始化 libuv 的 Unicode 控制台输出。
+        writeFd = openDevice(paths.output, 'r+');
+    }
+    catch (error) {
+        close(readFd);
+        throw error;
+    }
+    let output;
+    return {
+        readFd,
+        writeFd,
+        write: async (text) => {
+            // fs.writeSync 写入的 UTF-8 字节会被旧代码页误解码；TTY 在 Windows 使用 WriteConsoleW。
+            const stream = (output ??= new WriteStream(writeFd));
+            await new Promise((resolve, reject) => {
+                stream.once('error', reject);
+                stream.write(text, 'utf8', (error) => {
+                    if (error)
+                        reject(error);
+                    else {
+                        stream.off('error', reject);
+                        resolve();
+                    }
+                });
+            });
+        },
+        close: () => {
+            try {
+                // WriteStream 接管输出 fd 后由流关闭，不能再次 closeSync 同一 fd。
+                if (output)
+                    output.destroy();
+                else
+                    close(writeFd);
+            }
+            finally {
+                close(readFd);
+            }
+        },
+    };
+}
+/**
+ * 在控制终端上与人交互：展示内容和随机短码，从控制台输入设备读取输入。
+ * 无法打开控制终端或读写失败时抛错。确认只表达交互意图，不作为身份认证。
+ */
+export async function confirmOnTty(lines) {
+    const terminal = openControlTerminal();
+    try {
+        const code = randomBytes(2).toString('hex');
+        await terminal.write(`${lines.join('\n')}\n\n确认请输入短码 ${code}：`);
+        const buffer = Buffer.alloc(256);
+        let input = '';
+        while (!input.includes('\n')) {
+            const n = readSync(terminal.readFd, buffer, 0, buffer.length, null);
+            if (n <= 0)
+                break;
+            input += buffer.subarray(0, n).toString('utf8');
+        }
+        return input.trim() === code;
+    }
+    finally {
+        terminal.close();
+    }
+}
+//# sourceMappingURL=state.js.map

package/node_modules/@sumi/plugins-governance/dist/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../src/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACvH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,wDAAwD;AACxD,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjI,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAChD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,GAAG,CAAC;AACb,CAAC;AAWD,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAgC;IACvE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,KAAK,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAI,IAAY;IAC/B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,OAAgC;IACrF,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY,EAAE,OAAgC,EAAE,OAAiB;IAC7G,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;IAC7C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,OAAO,GAAoB,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACrG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,EAAU;IAClD,OAAO,QAAQ,CAAkB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,OAAwB;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;IAC9C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CACX,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAC9D,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAC9E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY,EAAE,OAAgC,EAAE,OAAiB;IAC7G,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAChG,CAAC;AAMD,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACzD,MAAM,MAAM,GAAG,QAAQ,CAAe,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACvD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAiBD,oDAAoD;AACpD,MAAM,UAAU,oBAAoB,CAAC,WAA4B,OAAO,CAAC,QAAQ;IAC/E,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACjI,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,mBAAmB,CACjC,WAA4B,OAAO,CAAC,QAAQ,EAC5C,OAAwB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EAC9D,QAA0B,SAAS;IAEnC,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAClD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,EAAE,IAAI,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC;YAC/E,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACnD,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,6BAA6B,EAAE;gBAClG,KAAK;aACN,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO;YACL,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACpB,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACtB,CAAC;YACD,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SACvB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,qDAAqD;QACrD,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAA+B,CAAC;IACpC,OAAO;QACL,MAAM;QACN,OAAO;QACP,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACpB,qEAAqE;YACrE,MAAM,MAAM,GAAG,CAAC,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACrD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBACnC,IAAI,KAAK;wBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;yBACpB,CAAC;wBACJ,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;wBAC5B,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,CAAC;gBACH,kDAAkD;gBAClD,IAAI,MAAM;oBAAE,MAAM,CAAC,OAAO,EAAE,CAAC;;oBACxB,KAAK,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,MAAM,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAe;IAChD,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,GAAG,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpE,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM;YAClB,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;IAC/B,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/node_modules/@sumi/plugins-governance/instructions/push.md

@@ -0,0 +1,20 @@
+---
+description: 推送前使用：按推送门禁的档位在工作区运行检查并完成评审，再 git push
+---
+
+# 推送前（推送门禁）
+
+推送时 pre-push hook 运行 `sumi gate`：先判断这次推送是否需要人工确认（control 变更、删除或强制更新 ref 等），需要而未确认时立即拒绝、不运行检查；确认后重新推送，才在被推送提交的独立检出中安装依赖，按项目配置 `gate.tier` 的档位重跑 check。门禁不派发评审、不做人工确认，所以评审要在推送前于工作区完成，人工确认由用户完成。
+
+1. 读 `control/config.yaml` 的 `gate.tier`（未配置时为最低档位）。
+2. 运行 `sumi run check --tier <该档位>`。分支还没有上游时，工作区与门禁都以与远端默认分支的合并基础为基准，评审范围一致。
+3. 简报中的评审派发动作（`sumi submit <运行> <步骤> --ticket <t>`）：用全新上下文的子代理，按派发动作给出的评审请求逐条评审（只评审、不修改代码），结果写入指定文件，再运行给出的 `sumi submit` 命令；然后重跑第 2 步。评审不通过时，按 findings 修改代码后重跑。
+4. 第 2 步通过后再 `git push`。门禁拒绝时按它的提示处理：
+   - 提示在工作区运行某条 `sumi run …`（带 `--base <基准>` 或 `--all`）时，原样运行并完成待处理项，再推送同一提交；
+   - 需要人工确认（`sumi approve <请求 id>`）时停下，请用户在自己的终端执行，确认后再推送同一提交（此时才运行检查）。
+5. 用户要求创建 PR 或向已有 PR 分支推送时，当前 PR 头提交的 Sumi 审查报告是工作流的必需产物：PR 可访问后直接运行 `sumi pr-report <PR 号>`，无需为同一 PR 工作流再次请求评论发布授权。同一 PR 再次运行会更新原评论。
+   - 命令提示有待处理项时，按提示在工作区运行给出的命令（带 `--base <合并基础>`）完成评审，再重新运行；
+   - 只有报告成功发布并绑定当前 PR head 后才可宣告 PR 工作流完成；报告缺失、过期或发布失败时不得结束；
+   - PR 头提交变化后，旧报告立即过期，必须对新 head 重新运行 `sumi pr-report`；
+   - Claude Code、Codex 与 Cursor 的停止阶段 hook 会只读复查当前 PR head 的报告；它不会代替代理发布，但会在缺失或过期时强制继续处理。
+6. 不要替用户运行 `sumi approve` 或 `sumi unlock`，不要用 `--no-verify`、`HUSKY=0` 等方式绕过 hook。

package/node_modules/@sumi/plugins-governance/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@sumi/plugins-governance",
+  "version": "0.5.0",
+  "description": "治理插件",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@sumi/plugin-sdk": "0.5.0",
+    "yaml": "2.9.1",
+    "picomatch": "4.0.7"
+  },
+  "files": [
+    "dist",
+    "sumi-plugins.yaml",
+    "instructions"
+  ]
+}

package/node_modules/@sumi/plugins-governance/sumi-plugins.yaml

@@ -0,0 +1,23 @@
+# 治理插件：本地推送门禁、受保护路径、人工确认、AI 编辑拦截。不依赖托管 CI，不以防御刻意对抗的代理为目标。
+plugins:
+  - id: gov/protected-paths
+    version: 0.1.0
+    description: control 区变更需要人工确认
+    kind: check
+    command: [node, ./dist/plugins/protected-paths.js]
+    timeout: 30
+    hooks:
+      git: { pre-push: gate }
+      agent: { beforeTool: guard, stop: pr-report-check }
+    instructions: { push: ./instructions/push.md }
+    commands:
+      - { name: gate, argv: [node, ./dist/commands/gate.js], description: 推送门禁（由 git 推送前 hook 调用） }
+      - { name: approve, argv: [node, ./dist/commands/approve.js], description: 人工确认待确认请求（需要交互式终端） }
+      - { name: unlock, argv: [node, ./dist/commands/unlock.js], description: 由人开启 control 编辑窗口（需要交互式终端） }
+      - { name: guard, argv: [node, ./dist/commands/guard.js], description: AI 工具前置 hook 的拦截命令 }
+      - { name: pr-report, argv: [node, ./dist/commands/pr-report.js], description: 把 PR 范围的检查与评审结论发布为 PR 评论（需要 gh） }
+      - {
+          name: pr-report-check,
+          argv: [node, ./dist/commands/pr-report-check.js],
+          description: 只读核验当前 PR head 是否已有 Sumi 审查报告,
+        }

package/node_modules/@sumi/plugins-openspec/README.md

@@ -0,0 +1,80 @@
+# @sumi/plugins-openspec
+
+OpenSpec 插件：为运行关联所属的 OpenSpec change，对 change 做严格规格校验，并控制 change 流程的 propose / apply / archive 阶段。
+
+## 插件
+
+| id                      | kind    | 作用                                      | 触发条件 / 档位                                                      | `with` 配置项 |
+| ----------------------- | ------- | ----------------------------------------- | -------------------------------------------------------------------- | ------------- |
+| `openspec/planner`      | planner | 为运行设置 `change` 标签                  | 每次运行                                                             | 无            |
+| `openspec/validate`     | check   | 用 openspec CLI 严格校验相关的 change     | 不声明触发条件；校验范围见下文                                       | 无            |
+| `openspec/change-tasks` | check   | change 流程的阶段控制：任务进度与归档条件 | 按 `stage` 标签工作；apply 与 archive 阶段要求以配置中的最高档位运行 | 无            |
+
+三个插件都不读取 `with` 配置，行为由运行标签决定：
+
+| 标签     | 取值                                            | 来源                                                      |
+| -------- | ----------------------------------------------- | --------------------------------------------------------- |
+| `change` | `openspec/changes/` 下进行中的 change 名称      | `--label change=<名称>`，或由 `openspec/planner` 自动设置 |
+| `stage`  | `propose` \| `apply` \| `archive`，默认 `apply` | `--label stage=<阶段>`                                    |
+
+本包不注册命令，不提供指令主题，也不提供约束查询命令。
+
+## 进行中的 change
+
+`openspec/changes/` 下除 `archive` 以外的目录都视为进行中的 change。
+
+## 规划器：关联 change
+
+- 调用者已通过 `--label change=<名称>` 指定时，沿用该值。
+- 否则，恰好只有一个进行中的 change 时，把运行的 `change` 标签设为它。
+- 有多个或没有进行中的 change 时不设置标签（步骤仍为 `pass`，摘要说明原因）。
+
+## `openspec/validate`
+
+校验范围：
+
+| 情况                 | 校验哪些 change                                                    |
+| -------------------- | ------------------------------------------------------------------ |
+| 运行带 `change` 标签 | 只校验该 change                                                    |
+| 全量运行（`all`）    | 全部进行中的 change                                                |
+| 日常改动             | 只校验本次改动涉及（`openspec/changes/<名称>/` 下有改动）的 change |
+
+这样其他 change 的存量问题不会拦住无关的改动。没有需要校验的 change 时步骤 `pass`。
+
+调用方式：
+
+- 单个 change：`openspec validate <change> --type change --strict --json --no-interactive`；
+- 多个 change：一次调用 `openspec validate --changes --strict --json --no-interactive`，从结果中取需要的项。
+
+openspec 报告的每个问题转为一条 finding（规则名 `openspec`）：`WARNING`、`INFO` 级为 warning，其他为 error；带路径的问题定位到 `openspec/changes/<名称>/` 下的文件（delta 规格路径补上 `specs/` 前缀）。有 error 时步骤 `fail`。批量调用的输出无法解析时步骤 `blocked`。
+
+## `openspec/change-tasks`
+
+先检查前提：
+
+- 没有 `change` 标签，或该 change 不是进行中的 change：`blocked`，`next` 列出进行中的 change，提示用 `--label change=<名称>` 指定。
+- `stage` 不是三个阶段之一：`blocked`。
+- apply 与 archive 阶段的运行档位不是最高档位：`blocked`，`next` 给出以最高档位重跑的命令：
+
+  ```
+  sumi run change --tier <最高档位> --label change=<名称> --label stage=<阶段>
+  ```
+
+各阶段的行为：
+
+| 阶段      | 检查内容                                                                                                | 通过后的 `next`                 |
+| --------- | ------------------------------------------------------------------------------------------------------- | ------------------------------- |
+| `propose` | 对该 change 运行 `openspec validate`（严格模式），问题转为 error 级 finding；不要求最高档位             | 以最高档位运行 `stage=apply`    |
+| `apply`   | 统计 `openspec/changes/<名称>/tasks.md` 中的任务进度，只报告不拦截                                      | 无                              |
+| `archive` | `tasks.md` 中每个未勾选的任务（`- [ ]`）报为一条 `task-open` finding（定位到行），有未完成任务时 `fail` | `openspec archive <名称> --yes` |
+
+任务进度按 `- [ ]`（未完成）与 `- [x]`（已完成，不区分大小写）计数。
+
+## 依赖 openspec CLI 的方式
+
+本包不把 openspec 作为依赖。运行时按以下顺序查找：
+
+1. 从仓库根目录向上逐级查找 `node_modules/.bin/openspec`；
+2. 否则使用 `PATH` 中的 `openspec`（以 `openspec --version` 能否成功运行判断）。
+
+找不到时，`openspec/validate` 与 propose 阶段的 `openspec/change-tasks` 返回 `skipped`。

package/node_modules/@sumi/plugins-openspec/dist/index.d.ts

@@ -0,0 +1 @@
+export * from './openspec.js';

package/node_modules/@sumi/plugins-openspec/dist/index.js

@@ -0,0 +1,2 @@
+export * from './openspec.js';
+//# sourceMappingURL=index.js.map

package/node_modules/@sumi/plugins-openspec/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC"}

package/node_modules/@sumi/plugins-openspec/dist/openspec.d.ts

@@ -0,0 +1,21 @@
+/** 进行中的 change（openspec/changes 下除 archive 外的目录）。 */
+export declare function changesInProgress(root: string): string[];
+/** 查找 openspec CLI：项目 node_modules/.bin（自根向上），否则用 PATH 中的 openspec。 */
+export declare function openspecBin(root: string): string | null;
+export interface ValidationIssue {
+    level: string;
+    path?: string;
+    message: string;
+}
+/** 一次批量校验全部进行中的 change，避免逐个启动 openspec。返回 change → 校验结果。 */
+export declare function validateAll(root: string, bin: string): Map<string, {
+    valid: boolean;
+    issues: ValidationIssue[];
+}> | {
+    error: string;
+};
+export declare function validate(root: string, bin: string, change: string): {
+    valid: boolean;
+    issues: ValidationIssue[];
+    error?: string;
+};

package/node_modules/@sumi/plugins-openspec/dist/openspec.js

@@ -0,0 +1,59 @@
+import { existsSync, readdirSync, statSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { commandFileNames, spawnCommandSync } from '@sumi/plugin-sdk';
+/** 进行中的 change（openspec/changes 下除 archive 外的目录）。 */
+export function changesInProgress(root) {
+    const dir = join(root, 'openspec', 'changes');
+    if (!existsSync(dir))
+        return [];
+    return readdirSync(dir)
+        .filter((n) => n !== 'archive' && statSync(join(dir, n)).isDirectory())
+        .sort();
+}
+/** 查找 openspec CLI：项目 node_modules/.bin（自根向上），否则用 PATH 中的 openspec。 */
+export function openspecBin(root) {
+    let dir = root;
+    for (;;) {
+        for (const file of commandFileNames('openspec')) {
+            const candidate = join(dir, 'node_modules', '.bin', file);
+            if (existsSync(candidate))
+                return candidate;
+        }
+        const parent = dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return spawnCommandSync('openspec', ['--version'], { encoding: 'utf8', windowsHide: true }).status === 0 ? 'openspec' : null;
+}
+/** 一次批量校验全部进行中的 change，避免逐个启动 openspec。返回 change → 校验结果。 */
+export function validateAll(root, bin) {
+    const r = spawnCommandSync(bin, ['validate', '--changes', '--strict', '--json', '--no-interactive'], {
+        cwd: root,
+        encoding: 'utf8',
+        maxBuffer: 64 * 1024 * 1024,
+        windowsHide: true,
+    });
+    try {
+        const items = JSON.parse(r.stdout).items;
+        return new Map(items.map((i) => [i.id, { valid: i.valid, issues: i.issues }]));
+    }
+    catch {
+        return { error: (r.stderr || r.stdout).split('\n')[0] ?? 'openspec 运行出错' };
+    }
+}
+export function validate(root, bin, change) {
+    const r = spawnCommandSync(bin, ['validate', change, '--type', 'change', '--strict', '--json', '--no-interactive'], {
+        cwd: root,
+        encoding: 'utf8',
+        windowsHide: true,
+    });
+    try {
+        const item = JSON.parse(r.stdout).items[0];
+        return { valid: !!item?.valid, issues: item?.issues ?? [] };
+    }
+    catch {
+        return { valid: false, issues: [], error: (r.stderr || r.stdout).split('\n')[0] ?? 'openspec 运行出错' };
+    }
+}
+//# sourceMappingURL=openspec.js.map

package/node_modules/@sumi/plugins-openspec/dist/openspec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openspec.js","sourceRoot":"","sources":["../src/openspec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEtE,qDAAqD;AACrD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,WAAW,CAAC,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SACtE,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,SAAS,CAAC;QACR,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1D,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC9C,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,gBAAgB,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/H,CAAC;AAQD,4DAA4D;AAC5D,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,GAAW;IACnD,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,CAAC,EAAE;QACnG,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC3B,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAA4E,CAAC,KAAK,CAAC;QACrH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,GAAW,EAAE,MAAc;IAChE,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,kBAAkB,CAAC,EAAE;QAClH,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAgE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3G,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;IACvG,CAAC;AACH,CAAC"}

package/node_modules/@sumi/plugins-openspec/dist/plugins/change-tasks.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@sumi/plugins-openspec/dist/plugins/change-tasks.js

@@ -0,0 +1,85 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { definePlugin, result } from '@sumi/plugin-sdk';
+import { changesInProgress, openspecBin, validate } from '../openspec.js';
+/**
+ * change 流程的阶段控制（stage 标签：propose | apply | archive，默认 apply）。
+ * propose 只做严格校验；apply 与 archive 要求以最高档位运行，使流程中的 check 步骤生效；
+ * archive 要求任务全部完成，满足时给出归档命令。
+ */
+await definePlugin((ctx) => {
+    const change = ctx.labels.change;
+    const stage = ctx.labels.stage ?? 'apply';
+    const highest = ctx.tiers.at(-1);
+    if (!change || !changesInProgress(ctx.repoRoot).includes(change)) {
+        const list = changesInProgress(ctx.repoRoot);
+        return result({
+            status: 'blocked',
+            summary: change ? `change ${change} 不存在` : '没有关联的 change',
+            next: [{ type: 'stop', reason: `进行中的 change：${list.join('、') || '无'}`, why: '用 --label change=<名称> 指定' }],
+        });
+    }
+    if (!['propose', 'apply', 'archive'].includes(stage))
+        return result({ status: 'blocked', summary: `未知阶段 ${stage}` });
+    const rerun = ['sumi', 'run', 'change', '--tier', highest, '--label', `change=${change}`, '--label', `stage=${stage}`];
+    if (stage !== 'propose' && ctx.tier !== highest) {
+        return result({
+            status: 'blocked',
+            summary: `${stage} 阶段需要以 ${highest} 档位运行`,
+            next: [{ type: 'run', argv: rerun, effects: ['none'], why: `${stage} 阶段要运行完整检查` }],
+        });
+    }
+    if (stage === 'propose') {
+        const bin = openspecBin(ctx.repoRoot);
+        if (!bin)
+            return result({ status: 'skipped', summary: '未找到 openspec CLI' });
+        const r = validate(ctx.repoRoot, bin, change);
+        return result({
+            status: r.valid ? 'pass' : 'fail',
+            summary: r.valid ? `${change} 方案校验通过` : `${change} 方案校验未通过`,
+            findings: r.issues.map((i, n) => ({ id: `F${n + 1}`, rule: 'openspec', severity: 'error', message: i.message })),
+            next: r.valid
+                ? [
+                    {
+                        type: 'run',
+                        argv: ['sumi', 'run', 'change', '--tier', highest, '--label', `change=${change}`, '--label', 'stage=apply'],
+                        effects: ['none'],
+                        why: '方案就绪后按 tasks 实施，并运行 apply 阶段',
+                    },
+                ]
+                : undefined,
+        });
+    }
+    const tasksFile = join(ctx.repoRoot, 'openspec', 'changes', change, 'tasks.md');
+    const lines = existsSync(tasksFile) ? readFileSync(tasksFile, 'utf8').split(/\r?\n/) : [];
+    const open = lines.map((l, i) => ({ l, i })).filter(({ l }) => /^\s*- \[ \]/.test(l));
+    const done = lines.filter((l) => /^\s*- \[x\]/i.test(l)).length;
+    const progress = `任务进度 ${done}/${done + open.length}`;
+    if (stage === 'apply')
+        return result({ status: 'pass', summary: progress });
+    const findings = open.map(({ l, i }, n) => ({
+        id: `F${n + 1}`,
+        rule: 'task-open',
+        severity: 'error',
+        message: `未完成的任务：${l.replace(/^\s*- \[ \]\s*/, '')}`,
+        file: `openspec/changes/${change}/tasks.md`,
+        line: i + 1,
+    }));
+    return result({
+        status: findings.length ? 'fail' : 'pass',
+        summary: findings.length ? `${progress}，不能归档` : `${progress}，可以归档`,
+        findings,
+        checked: [`openspec/changes/${change}/tasks.md`],
+        next: findings.length
+            ? undefined
+            : [
+                {
+                    type: 'run',
+                    argv: ['openspec', 'archive', change, '--yes'],
+                    effects: ['writes-worktree'],
+                    why: '任务完成、检查通过、判例候选已处置，执行归档',
+                },
+            ],
+    });
+});
+//# sourceMappingURL=change-tasks.js.map

package/node_modules/@sumi/plugins-openspec/dist/plugins/change-tasks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-tasks.js","sourceRoot":"","sources":["../../src/plugins/change-tasks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAgB,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1E;;;;GAIG;AACH,MAAM,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE;IACzB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;IAClC,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC;YACZ,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,MAAM,CAAC,CAAC,CAAC,cAAc;YACzD,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,0BAA0B,EAAE,CAAC;SAC1G,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,KAAK,EAAE,EAAE,CAAC,CAAC;IACrH,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,KAAK,EAAE,CAAC,CAAC;IACvH,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC;YACZ,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,GAAG,KAAK,UAAU,OAAO,OAAO;YACzC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,YAAY,EAAE,CAAC;SACnF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC;YACZ,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACjC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,UAAU;YAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAChH,IAAI,EAAE,CAAC,CAAC,KAAK;gBACX,CAAC,CAAC;oBACE;wBACE,IAAI,EAAE,KAAK;wBACX,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,MAAM,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC;wBAC3G,OAAO,EAAE,CAAC,MAAM,CAAC;wBACjB,GAAG,EAAE,8BAA8B;qBACpC;iBACF;gBACH,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChE,MAAM,QAAQ,GAAG,QAAQ,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IACtD,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE5E,MAAM,QAAQ,GAAc,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE;QACf,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,EAAE;QACpD,IAAI,EAAE,oBAAoB,MAAM,WAAW;QAC3C,IAAI,EAAE,CAAC,GAAG,CAAC;KACZ,CAAC,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC;QACZ,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACzC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,OAAO;QAClE,QAAQ;QACR,OAAO,EAAE,CAAC,oBAAoB,MAAM,WAAW,CAAC;QAChD,IAAI,EAAE,QAAQ,CAAC,MAAM;YACnB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,KAAK;oBACX,IAAI,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC;oBAC9C,OAAO,EAAE,CAAC,iBAAiB,CAAC;oBAC5B,GAAG,EAAE,wBAAwB;iBAC9B;aACF;KACN,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/node_modules/@sumi/plugins-openspec/dist/plugins/planner.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@sumi/plugins-openspec/dist/plugins/planner.js

@@ -0,0 +1,16 @@
+import { definePlugin, result } from '@sumi/plugin-sdk';
+import { changesInProgress } from '../openspec.js';
+/** 为运行设置 change 标签：调用者指定时沿用，否则在恰好只有一个进行中的 change 时使用它。 */
+await definePlugin((ctx) => {
+    if (ctx.labels.change)
+        return result({ status: 'pass', summary: `change：${ctx.labels.change}`, plan: {} });
+    const changes = changesInProgress(ctx.repoRoot);
+    if (changes.length === 1)
+        return result({ status: 'pass', summary: `change：${changes[0]}`, plan: { labels: { change: changes[0] } } });
+    return result({
+        status: 'pass',
+        summary: changes.length ? `${changes.length} 个进行中的 change，未自动关联` : '没有进行中的 change',
+        plan: {},
+    });
+});
+//# sourceMappingURL=planner.js.map

package/node_modules/@sumi/plugins-openspec/dist/plugins/planner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.js","sourceRoot":"","sources":["../../src/plugins/planner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,0DAA0D;AAC1D,MAAM,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE;IACzB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3G,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACxI,OAAO,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,qBAAqB,CAAC,CAAC,CAAC,eAAe;QAClF,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/node_modules/@sumi/plugins-openspec/dist/plugins/validate.d.ts

@@ -0,0 +1 @@
+export {};

package/node_modules/@sumi/plugins-openspec/dist/plugins/validate.js

@@ -0,0 +1,45 @@
+import { definePlugin, result } from '@sumi/plugin-sdk';
+import { changesInProgress, openspecBin, validate, validateAll } from '../openspec.js';
+/** OpenSpec 严格校验：校验关联的 change（未关联时校验全部进行中的 change）；没有进行中的 change 时通过。 */
+await definePlugin((ctx) => {
+    // 关联了 change 时只校验它；全量运行校验全部进行中的 change；日常改动只校验这次动到的 change，
+    // 避免其他 change 的存量问题拦住无关的改动。
+    const inProgress = changesInProgress(ctx.repoRoot);
+    const touched = inProgress.filter((c) => ctx.files.some((f) => f.startsWith(`openspec/changes/${c}/`)));
+    const changes = ctx.labels.change ? [ctx.labels.change] : ctx.all ? inProgress : touched;
+    if (changes.length === 0)
+        return result({ status: 'pass', summary: inProgress.length ? '本次改动没有涉及进行中的 change' : '没有待校验的 change' });
+    const bin = openspecBin(ctx.repoRoot);
+    if (!bin)
+        return result({ status: 'skipped', summary: '未找到 openspec CLI，请在项目中安装' });
+    const findings = [];
+    // 未关联 change 时一次批量校验全部进行中的 change；关联了就只校验它。
+    const bulk = changes.length > 1 ? validateAll(ctx.repoRoot, bin) : null;
+    if (bulk && 'error' in bulk)
+        return result({ status: 'blocked', summary: `openspec 运行出错：${bulk.error}` });
+    for (const change of changes) {
+        const r = bulk ? (bulk.get(change) ?? { valid: true, issues: [] }) : validate(ctx.repoRoot, bin, change);
+        if ('error' in r && r.error)
+            findings.push({ id: `F${findings.length + 1}`, rule: 'openspec', severity: 'error', message: `${change}：${r.error}` });
+        for (const issue of r.issues) {
+            findings.push({
+                id: `F${findings.length + 1}`,
+                rule: 'openspec',
+                severity: issue.level === 'WARNING' || issue.level === 'INFO' ? 'warning' : 'error',
+                message: `${change}：${issue.message}`,
+                file: issue.path
+                    ? `openspec/changes/${change}/${/spec\.md$/.test(issue.path) && !issue.path.startsWith('specs/') ? `specs/${issue.path}` : issue.path}`
+                    : undefined,
+                subject: `${change}:${issue.path ?? ''}:${issue.message}`,
+            });
+        }
+    }
+    const errors = findings.filter((f) => f.severity === 'error').length;
+    return result({
+        status: errors ? 'fail' : 'pass',
+        summary: errors ? `OpenSpec 校验未通过（${errors} 个问题）` : `OpenSpec 校验通过（${changes.join('、')}）`,
+        findings,
+        checked: changes.map((c) => `openspec/changes/${c}`),
+    });
+});
+//# sourceMappingURL=validate.js.map

package/node_modules/@sumi/plugins-openspec/dist/plugins/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/plugins/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,EAAgB,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEvF,yEAAyE;AACzE,MAAM,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE;IACzB,4DAA4D;IAC5D,4BAA4B;IAC5B,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxG,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;IACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACtB,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IAC1G,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,4CAA4C;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,IAAI,IAAI,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1G,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACzG,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK;YACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzH,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC;gBACZ,EAAE,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE;gBAC7B,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBACnF,OAAO,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,KAAK,CAAC,IAAI;oBACd,CAAC,CAAC,oBAAoB,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;oBACvI,CAAC,CAAC,SAAS;gBACb,OAAO,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACrE,OAAO,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAChC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,MAAM,OAAO,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;QACzF,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/node_modules/@sumi/plugins-openspec/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "@sumi/plugins-openspec",
+  "version": "0.5.0",
+  "description": "OpenSpec 插件",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@sumi/plugin-sdk": "0.5.0"
+  },
+  "files": [
+    "dist",
+    "sumi-plugins.yaml"
+  ]
+}