@godv61/dsh-task-engine 0.19.2 → 0.22.0

package/lib/hook.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Commit-msg hook source — the SINGLE source the installed hook is generated from.
+ *
+ * `build-hook.mjs` bundles this file (plus the pure {@link ../engine} and
+ * {@link ../workflows} modules it imports) into a self-contained CommonJS
+ * `hooks/commit-msg`. The gate logic therefore lives in exactly one place
+ * (`engine.ts` + `workflows.ts`); the hook no longer hand-mirrors it. Edit this
+ * file and rebuild — never edit `hooks/commit-msg` directly.
+ *
+ * @module dsh-task-engine/hook
+ */
+export {};

package/lib/hook.js

@@ -0,0 +1,288 @@
+/**
+ * Commit-msg hook source — the SINGLE source the installed hook is generated from.
+ *
+ * `build-hook.mjs` bundles this file (plus the pure {@link ../engine} and
+ * {@link ../workflows} modules it imports) into a self-contained CommonJS
+ * `hooks/commit-msg`. The gate logic therefore lives in exactly one place
+ * (`engine.ts` + `workflows.ts`); the hook no longer hand-mirrors it. Edit this
+ * file and rebuild — never edit `hooks/commit-msg` directly.
+ *
+ * @module dsh-task-engine/hook
+ */
+import { execSync } from 'node:child_process';
+import fs from 'node:fs';
+import path from 'node:path';
+import { checkFileScope, commitCheckpoint, validateCommitMessage, } from "./engine.js";
+import { resolveFlow } from "./workflows.js";
+import { hashConfig } from "./snapshot.js";
+import { DEFAULT_RISK_POLICY } from "./project.js";
+const messageFile = process.argv[2];
+function refuse(reason) {
+    console.error('');
+    console.error('dsh-task-engine 提交门禁拒绝: ' + reason);
+    console.error('请先用 dev_task 走完前置阶段（或修正提交消息），再提交。');
+    console.error('');
+    process.exit(1);
+}
+function readJson(abs) {
+    try {
+        return JSON.parse(fs.readFileSync(abs, 'utf8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Fill every field missing from a legacy task record so the engine's pure
+ * functions (`commitCheckpoint`, `checkFileScope`) never read an absent field.
+ */
+function normalizeTask(task) {
+    return {
+        schema: 1,
+        id: String(task.id ?? ''),
+        title: String(task.title ?? ''),
+        branch: String(task.branch ?? ''),
+        work_size: task.work_size ?? 'standard',
+        risk_level: task.risk_level ?? 'standard',
+        stage: String(task.stage ?? ''),
+        requirement_confirmed: task.requirement_confirmed === true,
+        solution_confirmed: task.solution_confirmed === true,
+        items: Array.isArray(task.items) ? task.items : [],
+        verification: task.verification ?? { passed: false, evidence: [] },
+        review: task.review ?? { outcome: 'pending' },
+        artifacts: task.artifacts ?? {},
+        files: Array.isArray(task.files) ? task.files : [],
+        commits: Array.isArray(task.commits) ? task.commits : [],
+        ...(task.flow !== undefined ? { flow: task.flow } : {}),
+    };
+}
+function loadTasks() {
+    const dir = path.join(process.cwd(), '.dsh');
+    if (!fs.existsSync(dir))
+        return [];
+    const out = [];
+    const names = fs.readdirSync(dir).filter(name => name.startsWith('task-') && name.endsWith('.json'));
+    for (const name of names) {
+        const json = readJson(path.join(dir, name));
+        if (json !== undefined && json.id !== undefined)
+            out.push({ file: path.join(dir, name), task: normalizeTask(json) });
+    }
+    return out;
+}
+function currentBranch() {
+    try {
+        return execSync('git rev-parse --abbrev-ref HEAD', { encoding: 'utf8' }).trim();
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * The commit's touched paths with their git status (e.g. `M`, `A`, `D`, `T`,
+ * `R100`). Read as raw bytes under `quotePath=false` so non-ASCII filenames
+ * survive verbatim; `ACMRDT` includes deletions and type changes so every
+ * touched path — plus a rename's old and new path — is held to the declared
+ * scope. The status is surfaced on refusal for audit.
+ */
+function stagedEntries() {
+    try {
+        const raw = execSync('git -c core.quotePath=false diff --cached --name-status -z --diff-filter=ACMRDT', { encoding: 'utf8' });
+        const parts = raw.split('\0');
+        const entries = [];
+        let i = 0;
+        while (i < parts.length) {
+            const status = parts[i];
+            if (status === undefined || status === '') {
+                i++;
+                continue;
+            }
+            if (status.startsWith('R') || status.startsWith('C')) {
+                // rename/copy carry `<status><score>\0<oldpath>\0<newpath>`; both paths
+                // are in the commit, so both are scope-checked.
+                const from = parts[i + 1];
+                const to = parts[i + 2];
+                if (from !== undefined && from !== '')
+                    entries.push({ status, path: from });
+                if (to !== undefined && to !== '')
+                    entries.push({ status, path: to });
+                i += 3;
+            }
+            else {
+                const path = parts[i + 1];
+                if (path !== undefined && path !== '')
+                    entries.push({ status, path });
+                i += 2;
+            }
+        }
+        return entries;
+    }
+    catch {
+        return [];
+    }
+}
+function fileMtime(file) {
+    try {
+        return fs.statSync(file).mtimeMs;
+    }
+    catch {
+        return 0;
+    }
+}
+/** Fallback only for pattern-less flows: newest task on the branch, else the sole task. */
+function pickTask(tasks, branch) {
+    if (tasks.length === 0)
+        return undefined;
+    const byBranch = tasks.find(({ task }) => task.branch === branch);
+    if (byBranch)
+        return byBranch.task;
+    if (tasks.length === 1)
+        return tasks[0].task;
+    const sorted = [...tasks].sort((a, b) => fileMtime(b.file) - fileMtime(a.file));
+    return sorted[0].task;
+}
+function readCommitMessage(file) {
+    return fs.readFileSync(file, 'utf8')
+        .split('\n')
+        .filter(line => !line.startsWith('#'))
+        .join('\n')
+        .trim();
+}
+/**
+ * Extract the task id from the leading `【…】` of the summary, independent of the
+ * live config (the hook must locate the task before it knows that task's frozen
+ * config). Pattern-less flows simply carry no `【…】` here.
+ */
+function extractTaskId(message) {
+    const match = /^【([^【】\s]+)】/.exec(message);
+    return match ? match[1] : undefined;
+}
+/** Engine-owned state files are exempt from scope and risk checks. */
+function isEngineMeta(file) {
+    return /^\.dsh\/(task-[^/]+\.json|eng\.json)$/.test(file);
+}
+/** Staged paths that hit the risk policy's sensitive paths (engine files exempt). */
+function riskyPaths(entries) {
+    return entries
+        .filter(entry => !isEngineMeta(entry.path))
+        .filter(entry => DEFAULT_RISK_POLICY.sensitive_paths.some(prefix => entry.path === prefix || entry.path.startsWith(`${prefix}/`)))
+        .map(entry => entry.path);
+}
+/** Only a high-risk task that passed a real command receipt may touch sensitive paths. */
+function riskVerified(state) {
+    const receipt = state.verification.receipt;
+    return state.risk_level === 'high_risk'
+        && receipt !== undefined
+        && receipt.exit_code === 0
+        && !receipt.timed_out
+        && !receipt.aborted;
+}
+/** The standard preset, applied when the project has no `.dsh/eng.json` at all. */
+function defaultConfig() {
+    const resolved = resolveFlow('standard');
+    if (!resolved.ok)
+        throw new Error('built-in "standard" preset is missing');
+    return resolved.config;
+}
+/**
+ * Resolve the project's live workflow — used only as a FALLBACK when a legacy
+ * task record carries no frozen snapshot. Mirrors `dev_task` `resolveWorkflow`:
+ * no file → standard; missing/unknown `flow` → fail closed (never silent fallback).
+ */
+function loadWorkflow(parsed) {
+    if (parsed === undefined)
+        return defaultConfig();
+    const flow = parsed.flow;
+    if (typeof flow !== 'string' || flow.trim() === '') {
+        refuse('项目 .dsh/eng.json 缺 "flow" 字段——设为 standard|agile|minimal，或删除该文件');
+    }
+    const override = typeof parsed.stage_bindings === 'object' && parsed.stage_bindings !== null && !Array.isArray(parsed.stage_bindings)
+        ? { stage_bindings: parsed.stage_bindings }
+        : undefined;
+    const resolved = resolveFlow(flow, override);
+    if (!resolved.ok) {
+        refuse(`未知流程 "${resolved.flow}"（已知流程：${resolved.knownFlows.join('、')}）`);
+    }
+    return resolved.config;
+}
+// --- gather project state (fallback config) ---
+const cwd = process.cwd();
+const configPath = path.join(cwd, '.dsh', 'eng.json');
+let config;
+if (fs.existsSync(configPath)) {
+    let raw = '';
+    try {
+        raw = fs.readFileSync(configPath, 'utf8');
+    }
+    catch {
+        raw = '';
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (error) {
+        refuse('invalid JSON in .dsh/eng.json: ' + (error instanceof Error ? error.message : String(error)));
+    }
+    config = loadWorkflow(parsed);
+}
+else {
+    config = loadWorkflow(undefined);
+}
+// --- the gate ---
+if (!messageFile) {
+    process.exit(0);
+}
+const message = readCommitMessage(messageFile);
+const tasks = loadTasks();
+// Locate the task by id from the summary first; only then read its frozen config.
+const taskId = extractTaskId(message);
+let state;
+if (taskId !== undefined) {
+    const found = tasks.find(({ task }) => task.id === taskId);
+    if (!found) {
+        refuse(`提交消息里的任务 id "${taskId}" 找不到对应的任务记录（.dsh/task-<id>.json）`);
+    }
+    state = found.task;
+}
+else {
+    state = pickTask(tasks, currentBranch());
+}
+if (!state) {
+    refuse('没有找到 dev_task 任务记录（.dsh/task-*.json）——请先 dev_task operation=create 建立任务');
+}
+if (state.flow?.hash !== undefined && hashConfig(state.flow.config) !== state.flow.hash) {
+    refuse(`任务 ${state.id} 的流程快照 hash 不匹配——task 记录在创建后被改动过，修复或重建任务后再提交`);
+}
+// Check this task against its frozen snapshot, not the live .dsh/eng.json
+// (which may have drifted mid-task). Fall back to the live config only for
+// legacy records that predate the snapshot field.
+if (state.flow !== undefined && state.flow.config !== undefined) {
+    config = state.flow.config;
+}
+const verdict = validateCommitMessage(message, config);
+if (!verdict.ok) {
+    refuse(verdict.errors?.[0] ?? 'commit summary does not match the configured pattern');
+}
+const checkpoint = commitCheckpoint(state, config);
+if (!checkpoint.allowed) {
+    refuse((checkpoint.reason ?? 'commit checkpoint rejected') + '（当前阶段: ' + state.stage + '）');
+}
+const entries = stagedEntries();
+const scope = checkFileScope(state, entries.map(entry => entry.path), config);
+if (!scope.ok) {
+    if (scope.noScope) {
+        refuse('任务没有声明文件范围（files 为空）——先用 dev_task operation=scope 声明本任务涉及的文件');
+    }
+    const described = scope.outside.map(outside => {
+        const entry = entries.find(candidate => candidate.path === outside);
+        return entry === undefined ? outside : `${entry.status}\t${outside}`;
+    });
+    refuse('提交了任务范围之外的文件: ' + described.join(', '));
+}
+const sensitive = riskyPaths(entries);
+if (sensitive.length > 0 && !riskVerified(state)) {
+    refuse('提交触及敏感路径: ' + sensitive.join(', ') +
+        ' — 这类变更要求任务声明为 high_risk，且验证必须是真实命令回执（exit 0）');
+}
+process.exit(0);
+//# sourceMappingURL=hook.js.map

package/lib/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../src/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,EAAE,MAAM,SAAS,CAAA;AACxB,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,qBAAqB,GAKtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAEnC,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjB,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,MAAM,CAAC,CAAA;IAClD,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAA;IAClD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAA4B,CAAA;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,IAA6B;IAClD,OAAO;QACL,MAAM,EAAE,CAAC;QACT,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QACzB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QACjC,SAAS,EAAG,IAAI,CAAC,SAAoC,IAAI,UAAU;QACnE,UAAU,EAAG,IAAI,CAAC,UAAsC,IAAI,UAAU;QACtE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,qBAAqB,EAAE,IAAI,CAAC,qBAAqB,KAAK,IAAI;QAC1D,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,KAAK,IAAI;QACpD,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAA4B,CAAC,CAAC,CAAC,EAAE;QAC1E,YAAY,EAAG,IAAI,CAAC,YAA0C,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QACjG,MAAM,EAAG,IAAI,CAAC,MAA8B,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE;QACtE,SAAS,EAAG,IAAI,CAAC,SAAoC,IAAI,EAAE;QAC3D,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAkB,CAAC,CAAC,CAAC,EAAE;QAChE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,OAAgC,CAAC,CAAC,CAAC,EAAE;QAClF,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAA;AACH,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAA;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAClC,MAAM,GAAG,GAAwC,EAAE,CAAA;IACnD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;IACpG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;QAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACtH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,iCAAiC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,iFAAiF,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;QAC7H,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7B,MAAM,OAAO,GAAuC,EAAE,CAAA;QACtD,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACvB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;gBAAC,CAAC,EAAE,CAAE;gBAAC,SAAQ;YAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrD,wEAAwE;gBACxE,gDAAgD;gBAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;gBACzB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;gBACvB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC3E,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;gBACrE,CAAC,IAAI,CAAC,CAAA;YACR,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;gBACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBACrE,CAAC,IAAI,CAAC,CAAA;YACR,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,SAAS,QAAQ,CAAC,KAA0C,EAAE,MAAc;IAC1E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;IACjE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAA;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,CAAA;IAC7C,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAC/E,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC,IAAI,CAAA;AACxB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;SACjC,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACrC,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAA;AACX,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC3C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACrC,CAAC;AAED,sEAAsE;AACtE,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,uCAAuC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC3D,CAAC;AAED,qFAAqF;AACrF,SAAS,UAAU,CAAC,OAA2C;IAC7D,OAAO,OAAO;SACX,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC1C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACjE,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC;SAC/D,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;AAC7B,CAAC;AAED,0FAA0F;AAC1F,SAAS,YAAY,CAAC,KAAgB;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAA;IAC1C,OAAO,KAAK,CAAC,UAAU,KAAK,WAAW;WAClC,OAAO,KAAK,SAAS;WACrB,OAAO,CAAC,SAAS,KAAK,CAAC;WACvB,CAAC,OAAO,CAAC,SAAS;WAClB,CAAC,OAAO,CAAC,OAAO,CAAA;AACvB,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa;IACpB,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAA;IACxC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC1E,OAAO,QAAQ,CAAC,MAAM,CAAA;AACxB,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,MAA+D;IACnF,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,aAAa,EAAE,CAAA;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAA;IACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,CAAC,gEAAgE,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;QACnI,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAA8C,EAAE;QAC3E,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC5C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,CAAC,SAAS,QAAQ,CAAC,IAAI,UAAU,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC1E,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAA;AACxB,CAAC;AAED,iDAAiD;AACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAA;AACzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;AACrD,IAAI,MAAsB,CAAA;AAC1B,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,GAAG,EAAE,CAAA;IACV,CAAC;IACD,IAAI,MAAmD,CAAA;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgD,CAAA;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,iCAAiC,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACtG,CAAC;IACD,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;AAC/B,CAAC;KAAM,CAAC;IACN,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;AAClC,CAAC;AAED,mBAAmB;AACnB,IAAI,CAAC,WAAW,EAAE,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAA;AAC9C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAA;AAEzB,kFAAkF;AAClF,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;AACrC,IAAI,KAA4B,CAAA;AAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAA;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,gBAAgB,MAAM,mCAAmC,CAAC,CAAA;IACnE,CAAC;IACD,KAAK,GAAG,KAAK,CAAC,IAAI,CAAA;AACpB,CAAC;KAAM,CAAC;IACN,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;AAC1C,CAAC;AACD,IAAI,CAAC,KAAK,EAAE,CAAC;IACX,MAAM,CAAC,yEAAyE,CAAC,CAAA;AACnF,CAAC;AAED,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACxF,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,8CAA8C,CAAC,CAAA;AACtE,CAAC;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,kDAAkD;AAClD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;IAChE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAA;AAC5B,CAAC;AAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;AACtD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAChB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,sDAAsD,CAAC,CAAA;AACvF,CAAC;AAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;AAClD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IACxB,MAAM,CAAC,CAAC,UAAU,CAAC,MAAM,IAAI,4BAA4B,CAAC,GAAG,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAA;AAC7F,CAAC;AAED,MAAM,OAAO,GAAG,aAAa,EAAE,CAAA;AAC/B,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;AAC7E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACd,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,CAAC,8DAA8D,CAAC,CAAA;IACxE,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAA;QACnE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAA;IACtE,CAAC,CAAC,CAAA;IACF,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AACjD,CAAC;AAED,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;AACrC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;IACjD,MAAM,CACJ,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,+CAA+C,CAChD,CAAA;AACH,CAAC;AAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA"}

package/lib/project.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Project adaptation knowledge shared by the tool plane, the workbench, and
+ * the commit hook: language detection, root discovery, default verification
+ * commands, governance-file names, and the risk policy.
+ *
+ * Everything here is a pure function over a narrow {@link FileProbe}, so it
+ * unit-tests without a harness and the commit hook can reuse the same tables.
+ *
+ * @module dsh-task-engine/project
+ */
+/**
+ * Read one file relative to a directory. `undefined` means missing or unreadable;
+ * every caller implements this against its own filesystem (sandboxed `Fs` in the
+ * tool plane, `node:fs` in the commit hook).
+ */
+export interface FileProbe {
+    read(dir: string, relPath: string): Promise<string | undefined>;
+    /** Basenames of a directory's children; implementations without listing return `[]`. */
+    list?(dir: string, relPath: string): Promise<string[]>;
+}
+export type ProjectType = 'node' | 'java' | 'python' | 'go' | 'rust' | 'unknown';
+/** Default verification command per language; a project can override via `.dsh/eng.json`. */
+export declare const DEFAULT_VERIFY_COMMANDS: Record<Exclude<ProjectType, 'unknown'>, string>;
+/**
+ * Governance files that steer AI behavior in this workspace. `init` must not
+ * overwrite any of them without an explicit, approved overwrite — they are
+ * siblings of `AGENTS.md`, not alternatives it may ignore.
+ */
+export declare const GOVERNANCE_FILES: readonly string[];
+/** Directory names inside a project that hold project-level skills / rules. */
+export declare const PROJECT_SKILL_DIR = ".dsh/skills";
+export declare const PROJECT_RULE_DIR = ".dsh/rules";
+/**
+ * Risk policy: paths whose change is sensitive, and git operations that are
+ * inherently risky regardless of path. The commit hook surfaces these; a task
+ * touching them should be verified with a real command receipt.
+ */
+export interface RiskPolicy {
+    /** Exact relative paths or directory prefixes whose change is sensitive. */
+    sensitive_paths: readonly string[];
+    /** Git `--name-status` operation letters treated as risky (delete / type change). */
+    risky_operations: readonly string[];
+}
+export declare const DEFAULT_RISK_POLICY: RiskPolicy;
+/** All languages detected in `dir` by marker files, in marker declaration order. */
+export declare function detectLanguages(probe: FileProbe, dir: string): Promise<ProjectType[]>;
+/** The single dominant language of `dir`; a mixed tree reports `unknown`. */
+export declare function detectType(probe: FileProbe, dir: string): Promise<ProjectType>;
+/** Default verification command for a language; `unknown` has none. */
+export declare function defaultVerifyCommand(type: ProjectType): string | undefined;
+/**
+ * Discover the project root from `startDir` by climbing toward the filesystem
+ * root: the first directory containing a git repository, a `.dsh/eng.json`
+ * marker, or any language marker file wins. Falls back to `startDir` when
+ * nothing is found, so a plain directory still behaves as its own project.
+ */
+export declare function detectRoot(probe: FileProbe, startDir: string): Promise<string>;
+/**
+ * Governance files actually present in `dir`; `init` uses this to refuse silent
+ * overwrites of anything steering other agents (AGENTS.md, CLAUDE.md, …).
+ */
+export declare function presentGovernanceFiles(probe: FileProbe, dir: string): Promise<string[]>;
+/** Project-level rule names from `.dsh/rules/*.md` (stem names, sorted). */
+export declare function listProjectRules(probe: FileProbe, dir: string): Promise<string[]>;
+/** Project-level skill names from `.dsh/skills/<name>/SKILL.md` (sorted). */
+export declare function listProjectSkills(probe: FileProbe, dir: string): Promise<string[]>;

package/lib/project.js

@@ -0,0 +1,128 @@
+/**
+ * Project adaptation knowledge shared by the tool plane, the workbench, and
+ * the commit hook: language detection, root discovery, default verification
+ * commands, governance-file names, and the risk policy.
+ *
+ * Everything here is a pure function over a narrow {@link FileProbe}, so it
+ * unit-tests without a harness and the commit hook can reuse the same tables.
+ *
+ * @module dsh-task-engine/project
+ */
+import { dirname } from 'node:path';
+/** Marker files that identify a language stack, checked in declaration order. */
+const TYPE_MARKERS = {
+    node: ['package.json'],
+    java: ['pom.xml', 'build.gradle', 'build.gradle.kts', 'settings.gradle'],
+    python: ['pyproject.toml', 'requirements.txt', 'setup.py'],
+    go: ['go.mod'],
+    rust: ['Cargo.toml'],
+};
+/** Default verification command per language; a project can override via `.dsh/eng.json`. */
+export const DEFAULT_VERIFY_COMMANDS = {
+    node: 'npm test',
+    java: 'mvn -q test',
+    python: 'python -m pytest',
+    go: 'go test ./...',
+    rust: 'cargo test',
+};
+/**
+ * Governance files that steer AI behavior in this workspace. `init` must not
+ * overwrite any of them without an explicit, approved overwrite — they are
+ * siblings of `AGENTS.md`, not alternatives it may ignore.
+ */
+export const GOVERNANCE_FILES = ['AGENTS.md', 'CLAUDE.md', '.cursorrules'];
+/** Directory names inside a project that hold project-level skills / rules. */
+export const PROJECT_SKILL_DIR = '.dsh/skills';
+export const PROJECT_RULE_DIR = '.dsh/rules';
+export const DEFAULT_RISK_POLICY = {
+    // `.dsh/task-*.json` and `.dsh/eng.json` are protected by the snapshot hash and
+    // the engine-meta exemption, not by this list; `.dsh/rules` / `.dsh/skills`
+    // hold regular project content and stay committable by normal tasks.
+    sensitive_paths: ['.git', '.env', '.credentials.yaml', 'credentials', 'secrets'],
+    risky_operations: ['D', 'T'],
+};
+/** All marker files across languages, for root discovery. */
+const ALL_MARKERS = Object.values(TYPE_MARKERS).flat();
+/** Git repository markers: a real `.git` directory or a worktree's `.git` file. */
+const GIT_MARKERS = ['.git/HEAD', '.git'];
+/** How many directory levels to climb while hunting for a project root. */
+const MAX_ROOT_CLIMB = 8;
+/** All languages detected in `dir` by marker files, in marker declaration order. */
+export async function detectLanguages(probe, dir) {
+    const found = [];
+    for (const type of Object.keys(TYPE_MARKERS)) {
+        for (const marker of TYPE_MARKERS[type]) {
+            if (await probe.read(dir, marker) !== undefined) {
+                found.push(type);
+                break;
+            }
+        }
+    }
+    return found;
+}
+/** The single dominant language of `dir`; a mixed tree reports `unknown`. */
+export async function detectType(probe, dir) {
+    const languages = await detectLanguages(probe, dir);
+    return languages.length === 1 ? languages[0] : 'unknown';
+}
+/** Default verification command for a language; `unknown` has none. */
+export function defaultVerifyCommand(type) {
+    return type === 'unknown' ? undefined : DEFAULT_VERIFY_COMMANDS[type];
+}
+/**
+ * Discover the project root from `startDir` by climbing toward the filesystem
+ * root: the first directory containing a git repository, a `.dsh/eng.json`
+ * marker, or any language marker file wins. Falls back to `startDir` when
+ * nothing is found, so a plain directory still behaves as its own project.
+ */
+export async function detectRoot(probe, startDir) {
+    let current = startDir;
+    for (let level = 0; level <= MAX_ROOT_CLIMB; level++) {
+        if (await probe.read(current, '.dsh/eng.json') !== undefined)
+            return current;
+        for (const marker of GIT_MARKERS) {
+            if (await probe.read(current, marker) !== undefined)
+                return current;
+        }
+        for (const marker of ALL_MARKERS) {
+            if (await probe.read(current, marker) !== undefined)
+                return current;
+        }
+        const parent = dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+    }
+    return startDir;
+}
+/**
+ * Governance files actually present in `dir`; `init` uses this to refuse silent
+ * overwrites of anything steering other agents (AGENTS.md, CLAUDE.md, …).
+ */
+export async function presentGovernanceFiles(probe, dir) {
+    const present = [];
+    for (const file of GOVERNANCE_FILES) {
+        if (await probe.read(dir, file) !== undefined)
+            present.push(file);
+    }
+    return present;
+}
+/** Project-level rule names from `.dsh/rules/*.md` (stem names, sorted). */
+export async function listProjectRules(probe, dir) {
+    const entries = await probe.list?.(dir, PROJECT_RULE_DIR) ?? [];
+    return entries
+        .filter(name => name.endsWith('.md'))
+        .map(name => name.slice(0, -'.md'.length))
+        .sort();
+}
+/** Project-level skill names from `.dsh/skills/<name>/SKILL.md` (sorted). */
+export async function listProjectSkills(probe, dir) {
+    const entries = await probe.list?.(dir, PROJECT_SKILL_DIR) ?? [];
+    const names = [];
+    for (const entry of entries) {
+        if (await probe.read(dir, `${PROJECT_SKILL_DIR}/${entry}/SKILL.md`) !== undefined)
+            names.push(entry);
+    }
+    return names.sort();
+}
+//# sourceMappingURL=project.js.map

package/lib/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAenC,iFAAiF;AACjF,MAAM,YAAY,GAA+D;IAC/E,IAAI,EAAE,CAAC,cAAc,CAAC;IACtB,IAAI,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,CAAC;IACxE,MAAM,EAAE,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,CAAC;IAC1D,EAAE,EAAE,CAAC,QAAQ,CAAC;IACd,IAAI,EAAE,CAAC,YAAY,CAAC;CACrB,CAAA;AAED,6FAA6F;AAC7F,MAAM,CAAC,MAAM,uBAAuB,GAAoD;IACtF,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,aAAa;IACnB,MAAM,EAAE,kBAAkB;IAC1B,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,YAAY;CACnB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAsB,CAAC,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,CAAA;AAE7F,+EAA+E;AAC/E,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAA;AAC9C,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAA;AAc5C,MAAM,CAAC,MAAM,mBAAmB,GAAe;IAC7C,gFAAgF;IAChF,4EAA4E;IAC5E,qEAAqE;IACrE,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,aAAa,EAAE,SAAS,CAAC;IAChF,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;CAC7B,CAAA;AAED,6DAA6D;AAC7D,MAAM,WAAW,GAAsB,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAA;AAEzE,mFAAmF;AACnF,MAAM,WAAW,GAAsB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;AAE5D,2EAA2E;AAC3E,MAAM,cAAc,GAAG,CAAC,CAAA;AAExB,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAgB,EAAE,GAAW;IACjE,MAAM,KAAK,GAAkB,EAAE,CAAA;IAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAwC,EAAE,CAAC;QACpF,KAAK,MAAM,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;gBAChD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAChB,MAAK;YACP,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAgB,EAAE,GAAW;IAC5D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACnD,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC3D,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,IAAiB;IACpD,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAA;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAgB,EAAE,QAAgB;IACjE,IAAI,OAAO,GAAG,QAAQ,CAAA;IACtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,KAAK,SAAS;YAAE,OAAO,OAAO,CAAA;QAC5E,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAA;QACrE,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAA;QACrE,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAC/B,IAAI,MAAM,KAAK,OAAO;YAAE,MAAK;QAC7B,OAAO,GAAG,MAAM,CAAA;IAClB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAgB,EAAE,GAAW;IACxE,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAgB,EAAE,GAAW;IAClE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,gBAAgB,CAAC,IAAI,EAAE,CAAA;IAC/D,OAAO,OAAO;SACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SACpC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;SACzC,IAAI,EAAE,CAAA;AACX,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAgB,EAAE,GAAW;IACnE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAA;IAChE,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,IAAI,KAAK,WAAW,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtG,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC"}

package/lib/snapshot.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Frozen-snapshot integrity: the canonical hash of a workflow config.
+ *
+ * Lives outside {@link ../engine} because the browser client bundles engine
+ * (for `validateWorkflow`) but must never pull `node:crypto`; the tool plane
+ * and the commit hook import this module directly, both on the Node platform.
+ *
+ * @module dsh-task-engine/snapshot
+ */
+import type { WorkflowConfig } from './engine.ts';
+/**
+ * SHA-256 of arbitrary text; the integrity primitive behind both the frozen
+ * config hash and the installed-hook integrity check.
+ */
+export declare function hashText(text: string): string;
+/**
+ * SHA-256 of a workflow config's canonical JSON, the frozen-snapshot integrity
+ * stamp. The same JSON object re-serializes byte-identically, so a task record
+ * whose `config` was hand-edited after creation no longer matches its `hash`.
+ */
+export declare function hashConfig(config: WorkflowConfig): string;

package/lib/snapshot.js

@@ -0,0 +1,26 @@
+/**
+ * Frozen-snapshot integrity: the canonical hash of a workflow config.
+ *
+ * Lives outside {@link ../engine} because the browser client bundles engine
+ * (for `validateWorkflow`) but must never pull `node:crypto`; the tool plane
+ * and the commit hook import this module directly, both on the Node platform.
+ *
+ * @module dsh-task-engine/snapshot
+ */
+import { createHash } from 'node:crypto';
+/**
+ * SHA-256 of arbitrary text; the integrity primitive behind both the frozen
+ * config hash and the installed-hook integrity check.
+ */
+export function hashText(text) {
+    return createHash('sha256').update(text).digest('hex');
+}
+/**
+ * SHA-256 of a workflow config's canonical JSON, the frozen-snapshot integrity
+ * stamp. The same JSON object re-serializes byte-identically, so a task record
+ * whose `config` was hand-edited after creation no longer matches its `hash`.
+ */
+export function hashConfig(config) {
+    return hashText(JSON.stringify(config));
+}
+//# sourceMappingURL=snapshot.js.map

package/lib/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../src/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGxC;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAsB;IAC/C,OAAO,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;AACzC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@godv61/dsh-task-engine",
-  "version": "0.19.2",
+  "version": "0.22.0",
   "description": "Preset-workflow engineering delivery engine for DeepSeek Harness: a `dev_task` tool that hard-gates stage transitions and commit scope/message, per-node skill/rule bindings with progressive disclosure, a workbench to pick a flow preset and mount skills/rules, and preset-scoped activation — the tool and skills activate only for sessions on a preset that names the agent row.",
   "type": "module",
   "main": "lib/index.js",
@@ -51,7 +51,7 @@
     }
   },
   "scripts": {
-    "build": "tsc -p tsconfig.json && node build-client.mjs",
+    "build": "tsc -p tsconfig.json && node build-client.mjs && node build-hook.mjs",
     "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.client.json --noEmit",
     "test": "node .p0-test.mjs",
     "prepare": "npm run build"

package/skills/code-verify/SKILL.md

@@ -7,7 +7,7 @@ description: 交付验证节点：执行目标测试、编译与契约检查，
 
 1. `dev_task`（operation=status）读风险等级与验收条件。
 2. 执行聚焦验证：目标测试、受影响模块编译、契约检查与必要人工步骤，不默认叠加 clean/package 全家桶。
-3. 结果用 `dev_task`（operation=verify, passed=..., evidence=[...]) 记录；high_risk 必须附证据。
+3. 结果用 `dev_task`（operation=verify）记录：`high_risk` 必须跑真实命令回执（显式传 `command` 指定验收命令；不传时引擎按 `.dsh/eng.json` 的 `verify_command` → 语言默认自动选，但默认命令可能不覆盖验收点，高风险仍建议显式传）。退出码由引擎当客观结论，不得自报 passed；常规风险可用 `passed` + `evidence` 文本。
 4. 环境受阻时如实记"未编译/未联调"；high_risk 核心行为无法验证时不得通过。
 
 验证失败不得 advance。