@givolt/i3-composer-agent 3.1.0 → 3.2.1

package/skills/i3-enterprise-sop/references/verification/review-output.schema.json

@@ -1,155 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "urn:i3:i3-enterprise-sop:review-output:v1",
-  "title": "企业 SOP 只读文档审查会话输出 v1",
-  "description": "只约束审查报告结构；不是业务 handoff.json、批准或测试结果。",
-  "type": "object",
-  "required": [
-    "verdict",
-    "findings",
-    "checkedFacts",
-    "unread"
-  ],
-  "additionalProperties": false,
-  "properties": {
-    "verdict": {
-      "type": "string",
-      "enum": [
-        "交人工审阅",
-        "可交人工审阅",
-        "需修订",
-        "无法判断"
-      ]
-    },
-    "findings": {
-      "type": "array",
-      "items": {
-        "$ref": "#/$defs/finding"
-      }
-    },
-    "checkedFacts": {
-      "type": "array",
-      "minItems": 1,
-      "items": {
-        "$ref": "#/$defs/fact"
-      }
-    },
-    "unread": {
-      "type": "array",
-      "items": {
-        "type": "string",
-        "minLength": 1
-      }
-    }
-  },
-  "$defs": {
-    "reference": {
-      "type": "object",
-      "required": [
-        "path",
-        "startLine",
-        "quote"
-      ],
-      "additionalProperties": false,
-      "properties": {
-        "path": {
-          "type": "string",
-          "minLength": 1
-        },
-        "startLine": {
-          "type": "integer",
-          "minimum": 1
-        },
-        "endLine": {
-          "type": "integer",
-          "minimum": 1
-        },
-        "quote": {
-          "type": "string",
-          "minLength": 1
-        },
-        "role": {
-          "type": "string",
-          "minLength": 1,
-          "description": "可选的机器来源标识。实际作业必须由build_review_schema(scope)注入sourceRoles键的枚举；普通资料引用省略role，资料性质写入reason或conclusion。"
-        }
-      }
-    },
-    "finding": {
-      "type": "object",
-      "required": [
-        "id",
-        "severity",
-        "target",
-        "source",
-        "reason",
-        "suggestion"
-      ],
-      "additionalProperties": false,
-      "properties": {
-        "id": {
-          "type": "string",
-          "minLength": 1
-        },
-        "severity": {
-          "type": "string",
-          "enum": [
-            "low",
-            "medium",
-            "high",
-            "critical"
-          ]
-        },
-        "kind": {
-          "type": "string",
-          "enum": [
-            "contradiction",
-            "evidence-gap",
-            "clarification",
-            "optional"
-          ]
-        },
-        "target": {
-          "$ref": "#/$defs/reference"
-        },
-        "source": {
-          "$ref": "#/$defs/reference"
-        },
-        "reason": {
-          "type": "string",
-          "minLength": 1
-        },
-        "suggestion": {
-          "type": "string",
-          "minLength": 1
-        }
-      }
-    },
-    "fact": {
-      "type": "object",
-      "required": [
-        "id",
-        "target",
-        "source",
-        "conclusion"
-      ],
-      "additionalProperties": false,
-      "properties": {
-        "id": {
-          "type": "string",
-          "minLength": 1
-        },
-        "target": {
-          "$ref": "#/$defs/reference"
-        },
-        "source": {
-          "$ref": "#/$defs/reference"
-        },
-        "conclusion": {
-          "type": "string",
-          "minLength": 1
-        }
-      }
-    }
-  }
-}

package/skills/i3-enterprise-sop/references/verification/review_handoff.py

@@ -1,329 +0,0 @@
-#!/usr/bin/env python3
-"""One explicit CodeBuddy review/recheck in a fresh read-only tool context.
-
-Evidence goes outside the project. This is not a workflow scheduler, a business
-approval mechanism, or an operating-system filesystem sandbox.
-"""
-import argparse
-import copy
-import hashlib
-import importlib.util
-import json
-import os
-from pathlib import Path
-import shutil
-import subprocess
-import sys
-import time
-import uuid
-
-sys.dont_write_bytecode = True
-HERE = Path(__file__).resolve().parent
-RESOURCES = HERE.parent
-VERSION = '0.2.0'
-# Filled from the reviewed source and its existing branding transform. These are
-# compatibility fingerprints, not a lock on business documents or project edits.
-CONTEXT_BASELINES = {"readme.md":["c4a7a2cdd5f81612ec58f15a24c682ceb329820b1b36b9becdaec3dcba2c46dc","79da8b70f3975046a35cd464cb690a4f2f87290dce41b980c74208926d97a200"],"ad/readme.md":["70b8e0b39b3e8c2ee6f1123fd0f57a10d9848c697ab43240970414b7f79a0246","0052fe43876055749d6988f9ad246c08bdfa3929985bcb53cc9d89e063ba0056"],"ad/assets-manifest.json":["952a14ca0e675d6faca73ba751cda6695b3244bbff37e5e371bae8574fcaa431","7b6e771687f4a50da500cca262620235d2c6171e71c41a227e7413619a3f5703"],"ad/prompts/02-review.md":["35178174982907ee623fa89a8f69cb7fc20bfbcef98b0c33a14c861e7dffd5ad","11a5b03a62ff7e78cff62881e3e22c2b14b5f65024264cb97c8893f8b47f228d"],"ad/prompts/04-recheck.md":["702e3c221a4b5e688eb13dccd9edc4bf8ccbe2f7b8b7aa2ca8c1af46434806e8","239031036b1877a88deb221355c39dd0dd25894b464487be73a718ebe227cdd8"],"ad/templates/ad.md":["0e48c7149792aede3b5c7be70b65b7e4f9b312889760f2fb4105d184162abeae","37d3f77efe23b85ebaf50cfad09d92344227d4f778ea7e965c4fea70d89817bb"],"brd/readme.md":["ea267d7072a0b257b82c79fe3524d3d13dd9360c7485e77edcde7dba3631d3b8","b0ac06d121b4fa34a3cdbaa4a43fd453fa08e20ead81679c2d90d1afaf865717"],"brd/assets-manifest.json":["5925d5f7e402602d81208a82311e505ea79e6a32edd6e1afa78ab20db40c9f5c","f4178f99b5210645dd2b03f5af2f0bfd839c8a8ae415f97be36347c217dfda1e"],"brd/prompts/02-review.md":["d93e6123e1149fad579dabf82de32bd4172a5fb1da19fb8ca4e6f3c791d0543e","45971e0896c80253f92de03de1246cd2ee0edafbe411144e72be8665916b35d0"],"brd/prompts/04-recheck.md":["573a81502f554a05c78c25e55385b67116c79d67914e4b235d766d4fe483881d","422442b1491457e8e05d1b1ec3df240d835fdce817ac2fb8eb324d813f52d7bb"],"brd/templates/brd.md":["2c9c4061e720877e984c6094232f797ebdf0380b8ff27693ac8d930fe648c47c","777f408fb596ec5f90ea8507d3b59974df11dde647df7edef070b30ee6f380af"],"handoff-contract.md":["0a38d6858e298f14e1a8cb07b3f67649f450cfb47e894d19835a014185c3df53","47337cadc2060a8ef24f2d00ea88ee712e47ac0ac7390dcaa7953263a666d110"],"lifecycle-contract.md":["0fd7446bf53b43795dcbde03832c7d8a1e7680ee53b8c1898185da8aa8a444c0","479a6ea40077594229fbddc8971ad92a73aad6a0f83b65ae6c0bf7d06b566a8b"],"prd/readme.md":["60603eaa38487fa2eb6ead60378ba4f832830c2dafc4fee612dac3a0679a05e3","c9667e22973d6c7b2a5e14d8fa6311fd99192a46404339e9cab5d044fc6038da"],"prd/assets-manifest.json":["efba4a5c287f89cde8a6f621b17faddf443577fe9afb60f9e7d3ce314c815381","b0d0e3e33b799ab26409a6c97c9230e485039df230001f185734209d3ec2db95"],"prd/prompts/02-review.md":["83b03378d7dec4a18217571e777b715a8aba02443ac453f3a5e118f114882f09","03278975fb19b69d9023ec834c450322582d92672422f4b04e555cac8472b07e"],"prd/prompts/04-recheck.md":["33f6d6f20b2c08daaf6ec833fd775c3ad73fa70803c7e386f8f27395e46521ae","bb457ebaadf55edd0aa913c4228b66786d2727c1b91d81abd4e8c3a2e5e22638"],"prd/templates/prd.md":["1c728d4865ae1ad3936a735d3543c21f4a06fd195f7f94c5ac721d560ca10aee","22f7b09d1b9914975d602e24f39ce7e63d945493f55a4654b6484a8569b73a8a"],"review-handoff.md":["ebe62b4a7d50bfd7a54dcff6897686a2fd3736302242a9144b6281ddff6085cb","a04238ea42eda2c9ed198a20917f589a53ee3a301472b312ffa60a68614115e3"],"stages.json":["e25f2ae57486912df3f4505d4af4b813e49dcb06998ae4480c5b7267a5e06ae0","ccf1cea6e4f2efc5a487f41915387c520af3792dcf20b5194ff97f8aec934942"],"template-contracts.md":["43c9fccc2319f476514df2c14a4520941b1176f77ef27a72022458db61aaee2b","b9b6ee9d936b7745a88616e5ffd77992fead16d89092b34147ab2c33237397ad"],"testcase/readme.md":["0919de2fa32c3c66383b357b1dc3e0142da2c7d07efbe943e9c34dfd6db9827c","4c24ab0f434e414afd94437cc5caf8bd27e454eb832335eb9d97c1ea702bcb0c"],"testcase/assets-manifest.json":["c9e017fd85b7e2382748cc4bd4017a0c9c62c6c05fc4b94a211def1b264dd95d","c3495698bff33906f4e458e9d09dba7ea984cf9964fc38d48d8954f312b370c6"],"testcase/prompts/02-review.md":["eb78b1c515e720be6910ae7d08d0f3833959e9684159dfb978046ae266c93fd6","7b8d6bc672bba40f191bc154efe48971024f988e990c4a5f9b0f3e2a9a8b3a26"],"testcase/prompts/04-recheck.md":["18555bad45f167ee121310b4e627549317d5bdeddf48596c16e05f8a98121b50","3d81f78a3a18a76abed8e18e2771c64063b830c6c1aec10c2a454257201da758"],"testcase/templates/testcase.md":["9b3d04762a37ca05f99567b2f1beb371f0d10a65e1c7ad1bdebbe6c9af71b914","ffb317bb73397a350fbd0b98fa4bcb6c03773c223dd06fcf6c94420cba19cf6a"],"verification/readme.md":["2ce5c4984bd2da9b1c3b451eeecf79fc50b189bea32844bb337592a86032b04c","fa39cdc3639911676397e891ed85d11558abf36ff8f0397384dd9b76d655c4a3"],"verification/review-output.schema.json":["366dcfe39d5dca6a99b6eff5af400f288ed164cca04e28de316b36cadcfc42b1","70e2e5c66c72fc52193310a5b52f43faaabda192619baa365751c398b4a4d944"]}  # s10-fixed-context-baselines
-
-
-def module(name, path):
-    spec = importlib.util.spec_from_file_location(name, path)
-    value = importlib.util.module_from_spec(spec)
-    spec.loader.exec_module(value)
-    return value
-
-
-reads = module('s09_read_evidence', HERE / 'check_reads.py')
-native = module('s09_native_evidence', HERE / 'check_native_execution.py')
-
-
-def save(path, value):
-    path.write_text(json.dumps(value, ensure_ascii=False, indent=2) + '\n')
-
-
-def file_at(base, raw, boundary=None):
-    if not isinstance(raw, str) or not raw.strip():
-        raise ValueError('input_path_missing')
-    path = (base / raw).resolve()
-    if not path.is_relative_to(boundary or base):
-        raise ValueError('outside_project_or_selected_resource:' + raw)
-    if not path.is_file():
-        raise ValueError('input_unreadable:' + raw)
-    path.read_text()  # Fail before launch on unreadable or non-text input.
-    return path
-
-
-def fingerprint(path):
-    return {'sha256': hashlib.sha256(path.read_bytes()).hexdigest(),
-            'mode': path.stat().st_mode & 0o777}
-
-
-def prepare(project_root, request, *, resource_root=RESOURCES, session_id=None):
-    root, resources = Path(project_root).resolve(), Path(resource_root).resolve()
-    if not root.is_dir():
-        raise ValueError('project_root_unavailable')
-    if request.get('action') not in ('review', 'recheck'):
-        raise ValueError('review_action_required')
-    action, stage = request['action'], request.get('stage')
-    if stage not in ('brd', 'prd', 'ad', 'testcase'):
-        raise ValueError('explicit_document_stage_required')
-    target = file_at(root, request.get('target'))
-    sources = request.get('sources')
-    if not isinstance(sources, list) or not sources:
-        raise ValueError('explicit_business_sources_required')
-    sources = [file_at(root, raw) for raw in sources]
-    if target in sources:
-        raise ValueError('target_cannot_be_its_own_business_source')
-    authors = request.get('authorSessionIds', [])
-    if not isinstance(authors, list) or any(not isinstance(x, str) or not x for x in authors):
-        raise ValueError('author_sessions_invalid')
-    session = session_id or str(uuid.uuid4())
-    if session in authors:
-        raise ValueError('author_session_reused')
-    index_file = file_at(resources, 'stages.json')
-    index = native.loads(index_file.read_text())
-    shared = [file_at(resources, 'readme.md'), index_file]
-    shared += [file_at(resources, index[key]) for key in ('sharedContract', 'handoffContract', 'lifecycleContract')]
-    contract = file_at(resources, index['independentReview']['contract'])
-    guide = file_at(resources, index['readEvidenceChecker']['entry'])
-    schema_file = file_at(resources, index['readEvidenceChecker']['reviewOutputContract'])
-    shared += [contract, guide, schema_file]
-    selected = index['stages'][stage]
-    manifest = file_at(resources, selected['manifest'])
-    data = native.loads(manifest.read_text())
-    bundle_file = file_at(resources, 'assets-manifest.json')
-    bundle = native.loads(bundle_file.read_text())
-    if bundle.get('resourceVersion') != index.get('resourceVersion'):
-        raise ValueError('resource_version_mismatch:bundle')
-    if (selected.get('resourceVersion') != data.get('resourceVersion')
-            or selected.get('templateVersion') != data['source'].get('templateVersion')):
-        raise ValueError('resource_version_mismatch:' + stage)
-    stage_readme = file_at(manifest.parent, 'readme.md', resources)
-    template = file_at(manifest.parent, data['source']['resourcePath'], resources)
-    action_file = file_at(manifest.parent, data['prompts'][action], resources)
-    dependencies = [file_at(manifest.parent, item['path'], resources) for item in data.get('dependencies', [])]
-    stage_files = [manifest, stage_readme, template, action_file]
-    covered = {str(p.relative_to(resources)): p for p in shared + stage_files + dependencies}
-    compact = (index['independentReview'].get('contextProfile') == 'fixed-review-context-v1'
-               and all(fingerprint(p)['sha256'] in CONTEXT_BASELINES.get(name, [])
-                       for name, p in covered.items()))
-    reason = 'fixed_resources_covered; project_rules_remain_authoritative' if compact else 'selected_resources_not_covered_by_fixed_profile'
-    project_rules = [file_at(root, name) for name in ('CODEBUDDY.md', 'README.md') if (root / name).is_file()]
-    if compact and any('三份共用合同' in p.read_text() and 'review／recheck按' not in p.read_text()
-                       for p in project_rules):
-        compact, reason = False, 'project_instruction_requires_full_context'
-    files = [contract, stage_readme, template, action_file] if compact else shared + stage_files + dependencies
-    protected = shared + stage_files + dependencies
-    # Never drop metadata from drift protection merely because the model no
-    # longer reads it. Schema/checker/helper bytes also bind this one execution.
-    protected += [bundle_file,
-                  file_at(resources, 'verification/review_handoff.py'),
-                  file_at(resources, 'verification/check_reads.py'),
-                  file_at(resources, 'verification/check_native_execution.py')]
-    files += [target, *sources]
-    prior = None
-    if action == 'recheck':
-        for key in ('priorReport', 'responses', 'previousTarget'):
-            if not request.get(key):
-                raise ValueError('recheck_input_missing:' + key)
-            files.append(file_at(root, request[key]))
-        prior = native.loads(file_at(root, request['priorReport']).read_text())
-        if not isinstance(prior, dict) or not isinstance(prior.get('findings'), list):
-            raise ValueError('prior_review_report_invalid')
-        ids = [item.get('id') for item in prior['findings']]
-        if any(not isinstance(x, str) or not x for x in ids) or len(ids) != len(set(ids)):
-            raise ValueError('prior_review_ids_invalid')
-    files += project_rules
-    for raw in request.get('inputs', []):
-        files.append(file_at(root, raw))
-    files = list(dict.fromkeys(files))
-
-    def relative(path):
-        return str(path.relative_to(root)) if path.is_relative_to(root) else str(path)
-
-    scope = {'requiredReads': [relative(path) for path in files], 'allowedWrites': [],
-             'forbiddenAccessPrefixes': request.get('forbiddenAccessPrefixes', []),
-             'reviewCarrier': 'structured_output'}
-    if request.get('sourceRoles') or request.get('requiredSourceRoles'):
-        scope['sourceRoles'] = copy.deepcopy(request.get('sourceRoles', {}))
-        scope['requiredSourceRoles'] = copy.deepcopy(request.get('requiredSourceRoles', []))
-        for raw in scope['sourceRoles'].values():
-            if file_at(root, raw) not in files:
-                raise ValueError('role_not_in_model_inputs:' + raw)
-    protected = list(dict.fromkeys(protected + files))
-    return {'root': str(root), 'request': copy.deepcopy(request), 'sessionId': session,
-            'target': relative(target), 'sources': [relative(path) for path in sources],
-            'scope': scope, 'schema': reads.build_review_schema(scope),
-            'files': native.inventory(root),
-            'inputSnapshots': {str(path): fingerprint(path) for path in protected},
-            'context': {'mode': 'compact' if compact else 'full-selected', 'reason': reason,
-                        'profile': 'fixed-review-context-v1',
-                        'modelRequiredFileCount': len(files),
-                        'modelRequiredBytes': sum(p.stat().st_size for p in files),
-                        'outerOnlyPaths': [relative(p) for p in protected if p not in files],
-                        'outerParsingIsModelReadEvidence': False},
-            'priorFindingIds': [item['id'] for item in prior['findings']] if prior else []}
-
-
-def prompt_for(prepared):
-    request = prepared['request']
-    return '\n'.join([
-        '本次是已明确委托的企业SOP独立只读' + request['action'] + '，不是文档生成或工程实施。',
-        '这是全新会话，不继承作者自查。只用Read/Glob/Grep读取准确材料，StructuredOutput返回报告；不要调用Skill、Shell、写入或其他Agent。',
-        '先完整读列出的统一审查约定、本阶段README、完整模板及唯一动作，再核目标和真实业务来源。只读标注问题，保留人工修改空间。',
-        '外层已经解析并保护索引、清单和校验说明，不冒充你已读；只按下列模型必读清单完整读正文，不重复加载纯元数据。',
-        '若实际项目规则另要求完整读选定原件，遵守项目规则并说明精简未适用；不要回退低优先级发行模板。',
-        '本次资源加载判定：' + prepared['context']['mode'] + '；' + prepared['context']['reason'],
-        '任务范围：' + request.get('task', '按本阶段审查规则核对指定目标和必要来源。'),
-        '精确目标：' + prepared['target'],
-        '真实业务来源：' + json.dumps(prepared['sources'], ensure_ascii=False),
-        '必读文件（长文允许分段覆盖，不用摘要冒充全文）：',
-        *prepared['scope']['requiredReads'],
-        '不得读取未选版本、历史、其他主题或低优先级模板；必要来源未列入或不可读时如实报告缺口，不猜补。',
-        '复查时读旧稿、旧报告和逐项回应；checkedFacts中按旧finding.id逐项给结论，conclusion以“已关闭”“部分关闭”“未关闭”或“无法核实”开头。',
-        '原问题未核清不得关闭，新问题使用新ID。报告审查语义，不声称业务认可、工程通过或发布许可。',
-        '最终使用所给Schema的StructuredOutput，只提交verdict/findings/checkedFacts/unread。',
-        '每条引文用真实路径、实际行号和行内逐字短摘录；普通引用不加role，有绑定才用Schema枚举。无真实问题则findings为空。',
-        '报告由外层调用者另存；不要自行保存、修订目标、更新JSON或进入下一阶段。'])
-
-
-def command(prepared, executable, max_turns=60):
-    if prepared['schema'] != reads.build_review_schema(prepared['scope']):
-        raise ValueError('schema_scope_mismatch')
-    return [executable, '-p', '--verbose', '--output-format', 'stream-json',
-            '--permission-mode', 'default', '--tools', 'Read,Glob,Grep,StructuredOutput',
-            '--allowedTools', 'Read', 'Glob', 'Grep', 'StructuredOutput',
-            '--disallowedTools', 'Bash', 'Write', 'Edit', 'PowerShell', 'NotebookEdit', 'Skill', 'Task', 'Agent',
-            '--strict-mcp-config', '--mcp-config', '{"mcpServers":{}}',
-            '--no-session-persistence', '--session-id', prepared['sessionId'],
-            '--max-turns', str(max_turns), '--json-schema',
-            json.dumps(prepared['schema'], ensure_ascii=False, separators=(',', ':'))]
-
-
-def evaluate(prepared, events, process):
-    root, issues = Path(prepared['root']), []
-    finals = [event for event in events if event.get('type') == 'result']
-    starts = [event for event in events if event.get('type') == 'system' and event.get('subtype') == 'init']
-    if not starts or not finals or any(event.get('session_id') != prepared['sessionId'] for event in starts + finals):
-        issues.append('session_identity_mismatch')
-    if process.get('exitCode') != 0 or process.get('timedOut') or not finals or finals[-1].get('is_error'):
-        issues.append('native_completion_not_proven')
-    # CodeBuddy init lists the agent catalog before options.tools filtering.
-    # Bind the actual launch argv and inspect every real tool attempt instead.
-    calls, receipts, trace_issues = native.trace_calls(events)
-    issues += trace_issues
-    for call in calls:
-        name = call['name']
-        if name not in ('Read', 'Glob', 'Grep', 'StructuredOutput'):
-            issues.append('tool_outside_readonly_scope:' + name)
-        result = receipts.get(call['id'])
-        status, _ = native.outcome(result[1] if result else None, name)
-        if status != 'succeeded':
-            issues.append('tool_attempt_' + status + ':' + name)
-        if name == 'Read':
-            file = (root / (call.get('input') or {}).get('file_path', '')).resolve()
-            if str(file) not in prepared['inputSnapshots']:
-                issues.append('read_outside_selected_inputs:' + str(file))
-    current = native.inventory(root)
-    changed = sorted(name for name in set(current) | set(prepared['files'])
-                     if current.get(name) != prepared['files'].get(name))
-    if changed:
-        issues.append('project_changed_during_review')
-    if any(not Path(raw).is_file() or fingerprint(Path(raw)) != frozen
-           for raw, frozen in prepared['inputSnapshots'].items()):
-        issues.append('inputs_changed')
-    reading = reads.assess(root, prepared['scope'], events)
-    quoting = reads.check_review(root, events, reading, prepared['scope'])
-    if not reading['passed']:
-        issues += reading['failures']
-    if not quoting['passed']:
-        issues += quoting['errorCodes']
-    report = finals[-1].get('structured_output') if finals else None
-    if quoting['passed']:
-        references = report['findings'] + report['checkedFacts']
-        targets = str((root / prepared['target']).resolve())
-        sources = {str((root / raw).resolve()) for raw in prepared['sources']}
-        if not any(str((root / item['target']['path']).resolve()) == targets
-                   and str((root / item['source']['path']).resolve()) in sources for item in references):
-            issues.append('review_target_not_bound')
-        facts = {item['id']: item for item in report['checkedFacts']}
-        for old_id in prepared['priorFindingIds']:
-            if old_id not in facts or not facts[old_id]['conclusion'].startswith(('已关闭', '部分关闭', '未关闭', '无法核实')):
-                issues.append('prior_finding_not_rechecked:' + old_id)
-    return {'helperVersion': VERSION, 'status': 'needs_human_review' if issues else 'evidence_accepted',
-            'issues': list(dict.fromkeys(issues)), 'sessionId': prepared['sessionId'],
-            'target': prepared['target'], 'changedFiles': changed,
-            'hostToolCatalogIsEffectiveAllowlist': False,
-            'reads': reading, 'quotes': quoting, 'report': report,
-            'context': copy.deepcopy(prepared['context']),
-            'businessApproved': False, 'implementationApproved': False, 'published': False,
-            'proofScope': 'one fresh CLI session, readonly tool/trace evidence, input snapshots and report references; not semantic approval or OS sandbox'}
-
-
-def run(project_root, request, evidence_dir, *, resource_root=RESOURCES, timeout=420, max_turns=60):
-    root, evidence = Path(project_root).resolve(), Path(evidence_dir).resolve()
-    if evidence.is_relative_to(root):
-        raise ValueError('evidence_must_be_outside_project')
-    prepared = prepare(root, request, resource_root=resource_root)
-    evidence.mkdir(parents=True, exist_ok=False)
-    save(evidence / 'request.json', request)
-    save(evidence / 'prepared.json', prepared)
-    (evidence / 'task.md').write_text(prompt_for(prepared) + '\n')
-    executable = shutil.which('codebuddy')
-    if not executable:
-        result = {'status': 'new_session_required', 'reason': 'codebuddy_unavailable',
-                  'recommendation': '在明确的新会话中使用task.md；没有宿主权限证明时只声明提示约束。',
-                  'businessApproved': False, 'implementationApproved': False, 'published': False}
-        save(evidence / 'result.json', result)
-        return result
-    argv = command(prepared, executable, max_turns)
-    save(evidence / 'invocation.json', {'argv': argv, 'cwd': str(root), 'attempts': 1,
-                                      'newSession': True, 'resumed': False,
-                                      'modelOverridden': False, 'systemPromptOverridden': False})
-    started, timed_out = time.monotonic(), False
-    with (evidence / 'task.md').open('rb') as inp, (evidence / 'trace.jsonl').open('wb') as out, (evidence / 'stderr.log').open('wb') as err:
-        proc = subprocess.Popen(argv, cwd=root, stdin=inp, stdout=out, stderr=err,
-                                env={**os.environ, 'PYTHONDONTWRITEBYTECODE': '1',
-                                     'CODEBUDDY_DISABLE_AUTO_MEMORY': '1', 'CODEBUDDY_CODE_DISABLE_AUTO_MEMORY': '1'})
-        try:
-            proc.wait(timeout=timeout)
-        except subprocess.TimeoutExpired:
-            timed_out = True
-            proc.terminate()
-            try:
-                proc.wait(timeout=10)
-            except subprocess.TimeoutExpired:
-                proc.kill()
-                proc.wait()
-    process = {'exitCode': proc.returncode, 'timedOut': timed_out,
-               'elapsedSeconds': round(time.monotonic() - started, 2)}
-    save(evidence / 'process.json', process)
-    events = [native.loads(line) for line in (evidence / 'trace.jsonl').read_text().splitlines() if line.strip()]
-    result = evaluate(prepared, events, process)
-    save(evidence / 'result.json', result)
-    if result.get('report') is not None:
-        save(evidence / 'report.json', result['report'])
-    return result
-
-
-def main():
-    parser = argparse.ArgumentParser(description=__doc__)
-    parser.add_argument('--project-root', required=True)
-    parser.add_argument('--request', required=True)
-    parser.add_argument('--evidence-dir', required=True)
-    parser.add_argument('--timeout', type=int, default=420)
-    parser.add_argument('--max-turns', type=int, default=60)
-    args = parser.parse_args()
-    try:
-        result = run(args.project_root, native.loads(Path(args.request).read_text()), args.evidence_dir,
-                     timeout=args.timeout, max_turns=args.max_turns)
-    except (ValueError, OSError, KeyError, TypeError) as error:
-        result = {'status': 'blocked', 'reason': str(error),
-                  'recommendation': '核对准确目标、来源及所选资料；缺隔离时使用新会话任务，不修改业务稿。',
-                  'businessApproved': False, 'implementationApproved': False, 'published': False}
-    print(json.dumps(result, ensure_ascii=False))
-    return 0 if result['status'] == 'evidence_accepted' else 1
-
-
-if __name__ == '__main__':
-    raise SystemExit(main())