@furongjun1999/dsh-memory 0.4.11 → 0.5.1

package/md_cg/test_access_hints.py

@@ -0,0 +1,147 @@
+# -*- coding: utf-8 -*-
+"""test_access_hints —— AccessDenied 可操作指引专项（issue #34）
+
+背景：新用户三步接入后必然撞上的第一条失败是 guest 只读写入被拒，而该错误
+无任何 hint（与本仓 md_cg/*.py 70 处 hint 标准不一致）——issue #34 判定为
+「同一仓内标准不一致，且恰落在最影响首次体验的位置」。
+
+覆盖：
+- guest op 拒绝：hint 含为什么（MDCG_TOKEN 未配置）+ 怎么办（tokens issue /
+  setx / 重启 / README 指针）+ 安抚（不是故障）+ help 指引
+- 有令牌但白名单缺 op：hint 指「换角色 / --ops-allow 补授权重签」（不误导成配凭据）
+- 令牌过期：hint 指重新签发
+- guest require_write：hint 同步到位（同口径）
+- MCP stdio 端到端（issue 复现路径）：干净库 + 无 MDCG_TOKEN → cg(op=write)
+  的 error JSON 结构化携带 hint
+
+运行：python -X utf8 -m md_cg.test_access_hints
+"""
+import json
+import os
+import subprocess
+import sys
+import tempfile
+
+sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+
+from md_cg.security import AccessDenied, Principal  # noqa: E402
+
+passed = failed = 0
+
+
+def check(name, cond, detail=""):
+    global passed, failed
+    if cond:
+        passed += 1
+        print("  [PASS] " + name)
+    else:
+        failed += 1
+        print("  [FAIL] " + name + "  " + str(detail)[:200])
+
+
+def _denied(fn):
+    try:
+        fn()
+        return None
+    except AccessDenied as e:
+        return e
+
+
+GUEST_OPS = ("info", "route", "read", "recent", "whitebox", "status", "edges")
+
+
+def main():
+    print("[1] guest op 拒绝（issue #34 主场景）")
+    guest = Principal(actor="world", role="guest", ops_allow=GUEST_OPS,
+                      can_write=False)
+    e = _denied(lambda: guest.require_op("write"))
+    check("guest op=write 抛 AccessDenied", e is not None)
+    h = (e.hint if e else "") or ""
+    for kw, label in [("MDCG_TOKEN", "点明凭据来源"),
+                      ("tokens issue", "给签发命令"),
+                      ("setx", "给配置动作"),
+                      ("README", "给文档指针"),
+                      ("不是故障", "安抚语气"),
+                      ('cg(op="help"', "help 指引"),
+                      ("重启", "重启生效提示")]:
+        check(f"hint {label}（{kw}）", kw in h, h[:120])
+    check("hint 非空且 error 消息保留原口径",
+          bool(h) and "无权执行 op=write" in str(e))
+
+    print("[2] 有令牌但白名单缺 op（不误导成配凭据）")
+    rec = Principal(actor="demo", role="recorder",
+                    ops_allow=("read", "write", "recent"), can_write=True)
+    e2 = _denied(lambda: rec.require_op("forget"))
+    check("recorder op=forget 抛 AccessDenied", e2 is not None)
+    h2 = (e2.hint if e2 else "") or ""
+    check("hint 指补授权/换角色（--ops-allow / 重新签发）",
+          "--ops-allow" in h2 and "重新签发" in h2, h2[:120])
+    check("hint 不误指 guest 成因（不含 MDCG_TOKEN 未配置口径）",
+          "未检测到写入凭据" not in h2, h2[:120])
+
+    print("[3] 令牌过期")
+    exp = Principal(actor="demo", role="designer",
+                    expires_at=1, can_write=True)
+    e3 = _denied(lambda: exp.require_op("read"))
+    check("过期抛 AccessDenied 且 hint 指重新签发",
+          e3 is not None and "重新签发" in (e3.hint or ""), e3.hint)
+
+    print("[4] guest require_write 同口径")
+    e4 = _denied(lambda: guest.require_write("internal"))
+    check("guest 写拒绝带 hint（含 MDCG_TOKEN）",
+          e4 is not None and "MDCG_TOKEN" in (e4.hint or ""), e4.hint)
+
+    print("[5] MCP stdio 端到端（issue 复现路径：干净库 + 无令牌）")
+    root = tempfile.mkdtemp(prefix="acc_hint_")
+    env = dict(os.environ)
+    env.pop("MDCG_TOKEN", None)
+    env["MDCG_ROOT"] = root
+    env["PYTHONUTF8"] = "1"
+    py = sys.executable
+    proc = subprocess.Popen(
+        [py, "-X", "utf8", "-m", "md_cg.mcp_server"],
+        stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=subprocess.DEVNULL,
+        env=env, cwd=os.path.dirname(os.path.dirname(os.path.abspath(__file__))),
+        text=True, encoding="utf-8")
+
+    def rpc(id_, method, params=None):
+        req = {"jsonrpc": "2.0", "id": id_, "method": method,
+               "params": params or {}}
+        proc.stdin.write(json.dumps(req) + "\n")
+        proc.stdin.flush()
+        line = proc.stdout.readline()
+        return json.loads(line) if line.strip() else {}
+
+    try:
+        rpc(1, "initialize", {"protocolVersion": "2024-11-05",
+                              "capabilities": {}, "clientInfo": {"name": "t"}})
+        # 通知无应答：直写不等（带 id 等通知应答会错位/阻塞）
+        proc.stdin.write(json.dumps(
+            {"jsonrpc": "2.0", "method": "notifications/initialized"}) + "\n")
+        proc.stdin.flush()
+        r = rpc(3, "tools/call", {"name": "cg", "arguments": {
+            "op": "write", "content": "测试写入", "content_kind": "code"}})
+        proc.stdin.close()
+        body = ((r.get("result") or {}).get("content") or [{}])[0].get("text", "")
+        obj = json.loads(body) if body.startswith("{") else {}
+        check("stdio error JSON 含 AccessDenied", "AccessDenied" in obj.get("error", ""),
+              body[:160])
+        check("stdio error JSON 结构化携带 hint（含 MDCG_TOKEN 与签发命令）",
+              "MDCG_TOKEN" in (obj.get("hint") or "")
+              and "tokens issue" in (obj.get("hint") or ""),
+              (obj.get("hint") or "")[:160])
+        check("isError=True 形态", bool((r.get("result") or {}).get("isError")))
+    finally:
+        try:
+            proc.wait(timeout=10)
+        except Exception:                                  # noqa: BLE001
+            proc.kill()
+        import shutil
+        shutil.rmtree(root, ignore_errors=True)
+
+    print(f"\naccess_hints: {passed} 通过 / {failed} 失败")
+    return 0 if not failed else 1
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/md_cg/test_action_derive.py

@@ -1,203 +1,203 @@
-# -*- coding: utf-8 -*-
-"""test_action_derive · action 缺省静默降级防呆（与 op 推导同构）
-
-背景：`op` 传了、`action` 漏了 → 各分支按字面量默认 action 执行。若默认恰是
-读类（list / routes / stat / outlook / ping），写意图会被**静默吞掉**且返回
-形似正常的结果。最典型是文档化契约 `cg(op=review, pid, decision, reason)`
-（不带 action，见 docs/mdcg/主代理子代理记忆架构设计.md）实际静默走
-review_list —— 裁决从未落盘，属契约与实现漂移。
-
-修复（md_cg/mcp_server.py `_ACTION_SIGS` / `_action_sig` / `_cg_call`）：
-  ① 签名明确指向非默认 action → 按签名推导并补进 args（不再被默认吞掉）；
-  ② 无签名可依 → 维持默认执行，但透出 action_derived + hint_action（不再静默）；
-  ③ 判据用「键存在且非 None」——False / 0 / "" 属显式传入，避免真值判断误吞；
-  ④ `_ACTION_DEFAULT` 是「分支缺省 action 字面量」的唯一登记表，本测试含
-     **同源守卫**（表 ↔ 源码双向比对），防表与实现漂移。
-
-边界：action 仍是可选参数；推导只在「缺 action 且签名明确」时生效，显式传
-action 的行为逐位不变；`ingest` 的 path→类型推导取**保守优先**（file 最保守：
-若实为目录会报错可见，而不会误把整棵目录树摄进来）。
-"""
-import os
-import re
-import sys
-import tempfile
-
-sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
-
-# Windows cmd 默认 GBK：带圈数字等非 GBK 字符打印即 UnicodeEncodeError，且崩在
-# 断言之后、报告之前 —— 同一测试「因环境而异」。自带 UTF-8 兜底。
-if hasattr(sys.stdout, "reconfigure"):
-    sys.stdout.reconfigure(encoding="utf-8", errors="replace")
-
-from md_cg import mcp_server as M
-from md_cg.mdcos import MdCGSecure
-from md_cg.security import DEFAULT_SENSITIVITY, Principal
-
-_ok = 0
-_fail = []
-
-
-def check(name, cond, detail=""):
-    global _ok
-    if cond:
-        _ok += 1
-        print("[PASS] " + name)
-    else:
-        _fail.append(name)
-        print("[FAIL] %s  · %s" % (name, str(detail)[:240]))
-
-
-def _p(actor="tester", session="sess_a"):
-    return Principal(actor=actor, clearance=DEFAULT_SENSITIVITY,
-                     can_write=True, can_admin=True, role="designer",
-                     session=session, harness="test-harness")
-
-
-def _raises(fn):
-    try:
-        fn()
-        return None
-    except Exception as e:                                   # noqa: BLE001
-        return e
-
-
-# ==================== A. 纯函数：签名推导 ====================
-SIG = M._action_sig
-
-check("A1 review+decision→decide（契约漂移核心）",
-      SIG({"decision": "accept"}, "review") == ("decide", "decision"))
-check("A2 review+node_id→verify_record",
-      SIG({"node_id": "n1"}, "review") == ("verify_record", "node_id"))
-check("A3 review 仅 pid 不猜（保持 list，避免误判 rounds/records）",
-      SIG({"pid": "p1"}, "review") == (None, None))
-check("A4 recent+text→add", SIG({"text": "hi"}, "recent") == ("add", "text"))
-check("A4b recent+content→add",
-      SIG({"content": "hi"}, "recent") == ("add", "content"))
-check("A5 goal+goal→add", SIG({"goal": "G"}, "goal") == ("add", "goal"))
-check("A6 predict+hit=False 仍推导（键存在即签名，非真值判断）",
-      SIG({"hit": False}, "predict") == ("feedback", "hit"))
-check("A7 predict 空参数→不猜", SIG({}, "predict") == (None, None))
-check("A8 session+summary→note",
-      SIG({"summary": "s"}, "session") == ("note", "summary"))
-check("A9 insight+statement→record",
-      SIG({"statement": "x"}, "insight") == ("record", "statement"))
-check("A10 whitebox+question→ask",
-      SIG({"question": "q"}, "whitebox") == ("ask", "question"))
-check("A10b whitebox+questions→verify_existing",
-      SIG({"questions": ["q"]}, "whitebox") == ("verify_existing", "questions"))
-check("A11 ingest+*.jsonl→jsonl",
-      SIG({"path": "a/b.jsonl"}, "ingest") == ("jsonl", "path(*.jsonl)"))
-check("A12 ingest+patterns→dir",
-      SIG({"path": "d", "patterns": ["*.md"]}, "ingest") == ("dir", "patterns"))
-check("A13 ingest 裸 path→file（保守优先，不猜 dir）",
-      SIG({"path": "d"}, "ingest") == ("file", "path"))
-check("A14 ingest 空 path→不猜", SIG({"path": "   "}, "ingest") == (None, None))
-check("A15 非推导 op 不猜", SIG({"decision": "accept"}, "link") == (None, None))
-check("A16 显式 None 不算签名",
-      SIG({"decision": None, "node_id": "n1"}, "review") == ("verify_record", "node_id"))
-
-
-# ==================== B. 同源守卫：表 ↔ 源码双向 ====================
-_MCP_SRC = open(M.__file__, encoding="utf-8", errors="replace").read()
-_WB_SRC = open(os.path.join(os.path.dirname(M.__file__), "whitebox.py"),
-               encoding="utf-8", errors="replace").read()
-# 源码中所有 `a.get("action") or "<默认>"` 形式的缺省字面量
-_pairs = set(re.findall(r'a\.get\("action"\)\s*or\s*"([a-z_]+)"', _MCP_SRC))
-# ccg 的嵌套形态：`o.get("action") or a.get("action") or "<默认>"`
-_oc = set(re.findall(r'o\.get\("action"\)\s*or\s+a\.get\("action"\)\s*or\s*"([a-z_]+)"',
-                     _MCP_SRC))
-_wb_pairs = set(re.findall(r'a\.get\("action"\)\s*or\s*"([a-z_]+)"', _WB_SRC))
-_src_vals = _pairs | _oc | _wb_pairs
-_table_vals = set(M._ACTION_DEFAULT.values())
-check("B1 源码每个缺省 action 都在 _ACTION_DEFAULT 值域内（防漏列）",
-      _src_vals <= _table_vals, sorted(_src_vals - _table_vals))
-check("B2 _ACTION_DEFAULT 每项都在源码中真实出现（防幻影表）",
-      _table_vals <= _src_vals, sorted(_table_vals - _src_vals))
-check("B3 whitebox dispatch 的缺省 action=ping 真实存在（跨文件守卫）",
-      'ping' in re.findall(r'a\.get\("action"\)\s*or\s*"([a-z_]+)"', _WB_SRC), _wb_pairs)
-# 推导规则的目标 action 必须真实存在于对应分支识别面（抽样防幻影推导）
-for _op, _acts in M._ACTION_SIGS.items():
-    _missing = [act for _, act in _acts
-                if ('"%s"' % act) not in _MCP_SRC and ('"%s"' % act) not in _WB_SRC]
-    check("B4 推导目标 action 在分支中被识别：%s" % _op, not _missing, _missing)
-
-
-# ==================== C. 端到端：不再静默吞意图 ====================
-root = tempfile.mkdtemp(prefix="mdcg_act_")
-try:
-    cg = MdCGSecure(root, principal=_p())
-
-    # C1 review 契约漂移：带 decision 但不带 action（文档化契约形态）
-    out = M._cg_call(cg, {"op": "review", "pid": "no_such_pid",
-                          "decision": "accept", "reason": "防呆测试"})
-    check("C1 review+decision 不再静默走 list（旧行为返回 pending）",
-          "pending" not in out, out)
-    check("C1b 确实进了 decide 分支（pid_not_found 属预期）",
-          out.get("error") == "pid_not_found", out)
-    check("C1c 透出 action_derived + hint_action",
-          out.get("action_derived") is True and bool(out.get("hint_action")), out)
-
-    # C2 全链路：真实提案 → 不传 action 裁决 accept → 必须真实落盘
-    pid = cg.propose("act_probe_1", "防呆测试候选内容（裁决真实落盘）",
-                     layer="knowledge")
-    out2 = M._cg_call(cg, {"op": "review", "pid": pid, "decision": "accept",
-                           "reason": "防呆测试：不带 action 的契约形态"})
-    check("C2 不带 action 的裁决真实落盘", out2.get("ok") is True, out2)
-    check("C2b 裁决后队列清空", len(cg.review_list()) == 0, cg.review_list())
-    got = cg.get("act_probe_1")
-    check("C2c 候选节点已按裁决写入", bool(got) and
-          "防呆测试候选内容" in (got.get("content") or ""), got)
-
-    # C3 recent + text 不再静默走 list（事件必须落盘）
-    out3 = M._cg_call(cg, {"op": "recent", "text": "防呆事件A"})
-    check("C3 recent+text 推导 add（旧行为返回 events 列表）",
-          "events" not in out3 and "event" in out3, out3)
-    _evs = cg.recent_events(limit=5)
-    check("C3b 事件确实写入近况窗口",
-          any("防呆事件A" in (e.get("text") or "") for e in _evs), _evs)
-    check("C3c 透出 action_derived", out3.get("action_derived") is True, out3)
-
-    # C4 goal + goal 不再静默走 list
-    out4 = M._cg_call(cg, {"op": "goal", "goal": "防呆目标G"})
-    check("C4 goal+goal 推导 add（旧行为返回 goals 列表）",
-          out4.get("ok") is True and bool(out4.get("id")), out4)
-    check("C4b 目标确实落盘",
-          any("防呆目标G" in (g.get("goal") or "") for g in cg.active_goals(limit=10)),
-          cg.active_goals(limit=10))
-
-    # C5 显式 action 零回归（推导不得覆盖显式意图）
-    out5 = M._cg_call(cg, {"op": "review", "action": "list"})
-    check("C5 显式 action=list 行为逐位不变",
-          "pending" in out5 and "action_derived" not in out5, out5)
-
-    # C6 无签名缺省：维持默认但可见（不再静默）
-    out6 = M._cg_call(cg, {"op": "review"})
-    check("C6 无签名缺省走默认 list 且透出",
-          "pending" in out6 and out6.get("action_derived") is True
-          and out6.get("action") == "list", out6)
-    check("C6b hint_action 点名默认 action 便于纠偏",
-          "list" in (out6.get("hint_action") or ""), out6)
-
-    # C7 未知 op 仍 fail-closed（不静默）
-    check("C7 未知 op fail-closed 抛错",
-          _raises(lambda: M._cg_call(cg, {"op": "not_an_op", "query": "x"})) is not None)
-
-    # C8 stg 缺 op fail-closed 且提示可操作
-    _e8 = _raises(lambda: M._stg_call(None, {"op": ""}))
-    check("C8 stg 缺 op fail-closed 且提示必填",
-          _e8 is not None and "必填" in str(_e8), _e8)
-
-    # C9 op 缺省推导仍工作（本轮不回归）
-    out9 = M._cg_call(cg, {"content": "op 推导回归探针", "layer": "knowledge"})
-    check("C9 op 缺省推导仍透出 op_derived",
-          out9.get("op_derived") is True and out9.get("op") == "write", out9)
-finally:
-    import shutil
-    shutil.rmtree(root, ignore_errors=True)
-
-print("=" * 60)
-print("action_derive：%d 通过 / %d 失败" % (_ok, len(_fail)))
-if _fail:
-    print("失败项：" + "; ".join(_fail))
-sys.exit(1 if _fail else 0)
+# -*- coding: utf-8 -*-
+"""test_action_derive · action 缺省静默降级防呆（与 op 推导同构）
+
+背景：`op` 传了、`action` 漏了 → 各分支按字面量默认 action 执行。若默认恰是
+读类（list / routes / stat / outlook / ping），写意图会被**静默吞掉**且返回
+形似正常的结果。最典型是文档化契约 `cg(op=review, pid, decision, reason)`
+（不带 action，见 docs/mdcg/主代理子代理记忆架构设计.md）实际静默走
+review_list —— 裁决从未落盘，属契约与实现漂移。
+
+修复（md_cg/mcp_server.py `_ACTION_SIGS` / `_action_sig` / `_cg_call`）：
+  ① 签名明确指向非默认 action → 按签名推导并补进 args（不再被默认吞掉）；
+  ② 无签名可依 → 维持默认执行，但透出 action_derived + hint_action（不再静默）；
+  ③ 判据用「键存在且非 None」——False / 0 / "" 属显式传入，避免真值判断误吞；
+  ④ `_ACTION_DEFAULT` 是「分支缺省 action 字面量」的唯一登记表，本测试含
+     **同源守卫**（表 ↔ 源码双向比对），防表与实现漂移。
+
+边界：action 仍是可选参数；推导只在「缺 action 且签名明确」时生效，显式传
+action 的行为逐位不变；`ingest` 的 path→类型推导取**保守优先**（file 最保守：
+若实为目录会报错可见，而不会误把整棵目录树摄进来）。
+"""
+import os
+import re
+import sys
+import tempfile
+
+sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+
+# Windows cmd 默认 GBK：带圈数字等非 GBK 字符打印即 UnicodeEncodeError，且崩在
+# 断言之后、报告之前 —— 同一测试「因环境而异」。自带 UTF-8 兜底。
+if hasattr(sys.stdout, "reconfigure"):
+    sys.stdout.reconfigure(encoding="utf-8", errors="replace")
+
+from md_cg import mcp_server as M
+from md_cg.mdcos import MdCGSecure
+from md_cg.security import DEFAULT_SENSITIVITY, Principal
+
+_ok = 0
+_fail = []
+
+
+def check(name, cond, detail=""):
+    global _ok
+    if cond:
+        _ok += 1
+        print("[PASS] " + name)
+    else:
+        _fail.append(name)
+        print("[FAIL] %s  · %s" % (name, str(detail)[:240]))
+
+
+def _p(actor="tester", session="sess_a"):
+    return Principal(actor=actor, clearance=DEFAULT_SENSITIVITY,
+                     can_write=True, can_admin=True, role="designer",
+                     session=session, harness="test-harness")
+
+
+def _raises(fn):
+    try:
+        fn()
+        return None
+    except Exception as e:                                   # noqa: BLE001
+        return e
+
+
+# ==================== A. 纯函数：签名推导 ====================
+SIG = M._action_sig
+
+check("A1 review+decision→decide（契约漂移核心）",
+      SIG({"decision": "accept"}, "review") == ("decide", "decision"))
+check("A2 review+node_id→verify_record",
+      SIG({"node_id": "n1"}, "review") == ("verify_record", "node_id"))
+check("A3 review 仅 pid 不猜（保持 list，避免误判 rounds/records）",
+      SIG({"pid": "p1"}, "review") == (None, None))
+check("A4 recent+text→add", SIG({"text": "hi"}, "recent") == ("add", "text"))
+check("A4b recent+content→add",
+      SIG({"content": "hi"}, "recent") == ("add", "content"))
+check("A5 goal+goal→add", SIG({"goal": "G"}, "goal") == ("add", "goal"))
+check("A6 predict+hit=False 仍推导（键存在即签名，非真值判断）",
+      SIG({"hit": False}, "predict") == ("feedback", "hit"))
+check("A7 predict 空参数→不猜", SIG({}, "predict") == (None, None))
+check("A8 session+summary→note",
+      SIG({"summary": "s"}, "session") == ("note", "summary"))
+check("A9 insight+statement→record",
+      SIG({"statement": "x"}, "insight") == ("record", "statement"))
+check("A10 whitebox+question→ask",
+      SIG({"question": "q"}, "whitebox") == ("ask", "question"))
+check("A10b whitebox+questions→verify_existing",
+      SIG({"questions": ["q"]}, "whitebox") == ("verify_existing", "questions"))
+check("A11 ingest+*.jsonl→jsonl",
+      SIG({"path": "a/b.jsonl"}, "ingest") == ("jsonl", "path(*.jsonl)"))
+check("A12 ingest+patterns→dir",
+      SIG({"path": "d", "patterns": ["*.md"]}, "ingest") == ("dir", "patterns"))
+check("A13 ingest 裸 path→file（保守优先，不猜 dir）",
+      SIG({"path": "d"}, "ingest") == ("file", "path"))
+check("A14 ingest 空 path→不猜", SIG({"path": "   "}, "ingest") == (None, None))
+check("A15 非推导 op 不猜", SIG({"decision": "accept"}, "link") == (None, None))
+check("A16 显式 None 不算签名",
+      SIG({"decision": None, "node_id": "n1"}, "review") == ("verify_record", "node_id"))
+
+
+# ==================== B. 同源守卫：表 ↔ 源码双向 ====================
+_MCP_SRC = open(M.__file__, encoding="utf-8", errors="replace").read()
+_WB_SRC = open(os.path.join(os.path.dirname(M.__file__), "whitebox.py"),
+               encoding="utf-8", errors="replace").read()
+# 源码中所有 `a.get("action") or "<默认>"` 形式的缺省字面量
+_pairs = set(re.findall(r'a\.get\("action"\)\s*or\s*"([a-z_]+)"', _MCP_SRC))
+# ccg 的嵌套形态：`o.get("action") or a.get("action") or "<默认>"`
+_oc = set(re.findall(r'o\.get\("action"\)\s*or\s+a\.get\("action"\)\s*or\s*"([a-z_]+)"',
+                     _MCP_SRC))
+_wb_pairs = set(re.findall(r'a\.get\("action"\)\s*or\s*"([a-z_]+)"', _WB_SRC))
+_src_vals = _pairs | _oc | _wb_pairs
+_table_vals = set(M._ACTION_DEFAULT.values())
+check("B1 源码每个缺省 action 都在 _ACTION_DEFAULT 值域内（防漏列）",
+      _src_vals <= _table_vals, sorted(_src_vals - _table_vals))
+check("B2 _ACTION_DEFAULT 每项都在源码中真实出现（防幻影表）",
+      _table_vals <= _src_vals, sorted(_table_vals - _src_vals))
+check("B3 whitebox dispatch 的缺省 action=ping 真实存在（跨文件守卫）",
+      'ping' in re.findall(r'a\.get\("action"\)\s*or\s*"([a-z_]+)"', _WB_SRC), _wb_pairs)
+# 推导规则的目标 action 必须真实存在于对应分支识别面（抽样防幻影推导）
+for _op, _acts in M._ACTION_SIGS.items():
+    _missing = [act for _, act in _acts
+                if ('"%s"' % act) not in _MCP_SRC and ('"%s"' % act) not in _WB_SRC]
+    check("B4 推导目标 action 在分支中被识别：%s" % _op, not _missing, _missing)
+
+
+# ==================== C. 端到端：不再静默吞意图 ====================
+root = tempfile.mkdtemp(prefix="mdcg_act_")
+try:
+    cg = MdCGSecure(root, principal=_p())
+
+    # C1 review 契约漂移：带 decision 但不带 action（文档化契约形态）
+    out = M._cg_call(cg, {"op": "review", "pid": "no_such_pid",
+                          "decision": "accept", "reason": "防呆测试"})
+    check("C1 review+decision 不再静默走 list（旧行为返回 pending）",
+          "pending" not in out, out)
+    check("C1b 确实进了 decide 分支（pid_not_found 属预期）",
+          out.get("error") == "pid_not_found", out)
+    check("C1c 透出 action_derived + hint_action",
+          out.get("action_derived") is True and bool(out.get("hint_action")), out)
+
+    # C2 全链路：真实提案 → 不传 action 裁决 accept → 必须真实落盘
+    pid = cg.propose("act_probe_1", "防呆测试候选内容（裁决真实落盘）",
+                     layer="knowledge")
+    out2 = M._cg_call(cg, {"op": "review", "pid": pid, "decision": "accept",
+                           "reason": "防呆测试：不带 action 的契约形态"})
+    check("C2 不带 action 的裁决真实落盘", out2.get("ok") is True, out2)
+    check("C2b 裁决后队列清空", len(cg.review_list()) == 0, cg.review_list())
+    got = cg.get("act_probe_1")
+    check("C2c 候选节点已按裁决写入", bool(got) and
+          "防呆测试候选内容" in (got.get("content") or ""), got)
+
+    # C3 recent + text 不再静默走 list（事件必须落盘）
+    out3 = M._cg_call(cg, {"op": "recent", "text": "防呆事件A"})
+    check("C3 recent+text 推导 add（旧行为返回 events 列表）",
+          "events" not in out3 and "event" in out3, out3)
+    _evs = cg.recent_events(limit=5)
+    check("C3b 事件确实写入近况窗口",
+          any("防呆事件A" in (e.get("text") or "") for e in _evs), _evs)
+    check("C3c 透出 action_derived", out3.get("action_derived") is True, out3)
+
+    # C4 goal + goal 不再静默走 list
+    out4 = M._cg_call(cg, {"op": "goal", "goal": "防呆目标G"})
+    check("C4 goal+goal 推导 add（旧行为返回 goals 列表）",
+          out4.get("ok") is True and bool(out4.get("id")), out4)
+    check("C4b 目标确实落盘",
+          any("防呆目标G" in (g.get("goal") or "") for g in cg.active_goals(limit=10)),
+          cg.active_goals(limit=10))
+
+    # C5 显式 action 零回归（推导不得覆盖显式意图）
+    out5 = M._cg_call(cg, {"op": "review", "action": "list"})
+    check("C5 显式 action=list 行为逐位不变",
+          "pending" in out5 and "action_derived" not in out5, out5)
+
+    # C6 无签名缺省：维持默认但可见（不再静默）
+    out6 = M._cg_call(cg, {"op": "review"})
+    check("C6 无签名缺省走默认 list 且透出",
+          "pending" in out6 and out6.get("action_derived") is True
+          and out6.get("action") == "list", out6)
+    check("C6b hint_action 点名默认 action 便于纠偏",
+          "list" in (out6.get("hint_action") or ""), out6)
+
+    # C7 未知 op 仍 fail-closed（不静默）
+    check("C7 未知 op fail-closed 抛错",
+          _raises(lambda: M._cg_call(cg, {"op": "not_an_op", "query": "x"})) is not None)
+
+    # C8 stg 缺 op fail-closed 且提示可操作
+    _e8 = _raises(lambda: M._stg_call(None, {"op": ""}))
+    check("C8 stg 缺 op fail-closed 且提示必填",
+          _e8 is not None and "必填" in str(_e8), _e8)
+
+    # C9 op 缺省推导仍工作（本轮不回归）
+    out9 = M._cg_call(cg, {"content": "op 推导回归探针", "layer": "knowledge"})
+    check("C9 op 缺省推导仍透出 op_derived",
+          out9.get("op_derived") is True and out9.get("op") == "write", out9)
+finally:
+    import shutil
+    shutil.rmtree(root, ignore_errors=True)
+
+print("=" * 60)
+print("action_derive：%d 通过 / %d 失败" % (_ok, len(_fail)))
+if _fail:
+    print("失败项：" + "; ".join(_fail))
+sys.exit(1 if _fail else 0)