@guanlin4924/devflow-pi 0.1.88 → 0.1.91

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guanlin4924/devflow-pi",
-  "version": "0.1.88",
+  "version": "0.1.91",
   "type": "module",
   "description": "Devflow 专项研发 Pi，基于固定版本 OMP Runtime 组装研发状态机、代码智能、设计、实现与质量门禁。",
   "license": "UNLICENSED",

package/plugins/devflow-core/extensions/devflow-core.ts

@@ -414,7 +414,7 @@ export function isRequirementDraftToolAllowed(toolName: string, input: unknown,
   return normalized === "task" && taskAgents.length > 0 && taskAgents.every(agent => PLANNING_AGENTS.has(agent));
 }
 
-type InternalDevflowControlResource = "contract" | "state" | "mainflow" | "requirement_graph" | "requirement_coverage" | "project_context" | "skill_script";
+type InternalDevflowControlResource = "contract" | "state" | "mainflow" | "requirement_graph" | "requirement_coverage" | "project_context" | "skill_script" | "code_index" | "review_preflight" | "review_run" | "review_submit";
 
 /** Resolve an xdev target only when all supplied target aliases agree.
  * A direct/eval caller can otherwise provide `path` for a real file plus an
@@ -443,6 +443,10 @@ export function internalDevflowControlResource(toolName: string, input: unknown)
   if (target === "xd://devflow_requirement_coverage") return "requirement_coverage";
   if (target === "xd://devflow_project_context") return "project_context";
   if (target === "xd://devflow_skill_script") return "skill_script";
+  if (target === "xd://devflow_code_index") return "code_index";
+  if (target === "xd://devflow_review_preflight") return "review_preflight";
+  if (target === "xd://devflow_review_run") return "review_run";
+  if (target === "xd://devflow_review_submit") return "review_submit";
   return undefined;
 }
 

package/plugins/devflow-core/skills/workflow-orchestrator/scripts/execution_contract.rb

@@ -101,6 +101,22 @@ begin
   CheckerRegistry.validate!(checker_ids)
   CheckerRegistry.validate_executable!(checker_ids)
   paths = (Array(step["outputs"]).map { |output| output["path"] } + [step.dig("meta_output", "path")]).compact.map { |value| interpolate(value, state) }.uniq
+  # Execute contracts must authorize the production files declared by the
+  # approved change plan. Workflow outputs only contain progress artifacts;
+  # omitting production_paths strands implementation workers in a contract
+  # that can write summaries but never code.
+  if options[:step] == "execute"
+    binding_path = File.join(root, ".planning/features", options[:feature], "test-bindings.json")
+    if File.file?(binding_path)
+      bindings = JSON.parse(File.read(binding_path))
+      Array(bindings["tasks"]).each do |task|
+        Array(task["production_paths"]).each do |production_path|
+          paths << interpolate(production_path.to_s, state) unless production_path.to_s.empty?
+        end
+      end
+    end
+  end
+  paths = paths.uniq
   contract = {
     "schema_version" => 2, "origin" => "core_execution_contract", "feature" => options[:feature], "step" => options[:step],
     "state_revision" => state["revision"], "graph_revision" => graph["revision"], "workflow_path" => workflow_relative,
@@ -110,7 +126,7 @@ begin
     # part of the frozen contract.  The tool layer still applies per-tool
     # mutation ownership and the step's allowed paths.
     "allowed_tools" => %w[
-      read grep find glob lsp search write edit apply_patch bash shell exec_command task
+      read grep find glob lsp search write edit apply_patch bash shell exec_command task todo
       devflow_api_test_matrix devflow_tdd_evidence devflow_run_acceptance_tests devflow_mainflow
       devflow_requirement_graph devflow_static_runtime_context
       devflow_architecture_constraint devflow_architecture_feasibility devflow_architecture_brief

package/src/constants.ts

@@ -1,5 +1,5 @@
 export const PRODUCT_NAME = "Devflow Pi";
-export const PRODUCT_VERSION = "0.1.88";
+export const PRODUCT_VERSION = "0.1.91";
 export const PROJECT_SCHEMA_VERSION = 1;
 export const OMP_RUNTIME_VERSION = "17.2.7";