@hunyed15/codecgc 0.1.7 → 0.1.9

package/scripts/normalize_codecgc_audits.py

@@ -6,6 +6,8 @@ from codecgc_artifact_roots import discover_flow_directory
 from codecgc_artifact_roots import flow_root
 from codecgc_artifact_roots import execution_root
 from codecgc_artifact_roots import normalize_artifact_class
+from codecgc_path_contract import normalize_audit_path_fields
+from codecgc_path_contract import normalize_persisted_project_path
 
 
 WORKSPACE = Path(__file__).resolve().parents[1]
@@ -35,11 +37,11 @@ def build_expected_artifact_file(source: dict[str, Any], artifact_class: str) ->
     artifact_slug = str(source.get("artifact_slug", "")).strip()
     if artifact_type not in {"feature", "issue"} or not artifact_slug:
         current = str(source.get("artifact_file", "")).strip()
-        return replace_repo_name(current) if current else current
+        return normalize_persisted_project_path(replace_repo_name(current)) if current else current
 
     base_slug = artifact_slug[11:] if len(artifact_slug) > 11 and artifact_slug[4] == "-" else artifact_slug
     checklist_name = f"{base_slug}-checklist.yaml" if artifact_type == "feature" else f"{base_slug}-fix.yaml"
-    return str(flow_root(artifact_type, artifact_class) / artifact_slug / checklist_name)
+    return normalize_persisted_project_path(flow_root(artifact_type, artifact_class) / artifact_slug / checklist_name)
 
 
 def normalize_audit_record(data: dict[str, Any]) -> tuple[dict[str, Any], str]:
@@ -55,7 +57,7 @@ def normalize_audit_record(data: dict[str, Any]) -> tuple[dict[str, Any], str]:
     source["artifact_file"] = build_expected_artifact_file(source, artifact_class)
     source["artifact_class"] = artifact_class
     data["source"] = source
-    return data, artifact_class
+    return normalize_audit_path_fields(data), artifact_class
 
 
 def normalize_file(path: Path) -> tuple[Path, bool]:

package/scripts/postinstall_codecgc.js

@@ -1,9 +1,6 @@
 #!/usr/bin/env node
 
-const { spawnSync } = require("node:child_process");
-const path = require("node:path");
-
-function shouldRunUserInstall() {
+function isGlobalInstall() {
   const globalFlag = String(process.env.npm_config_global || "").toLowerCase();
   const localPrefix = String(process.env.npm_config_local_prefix || "");
   const prefix = String(process.env.npm_config_prefix || "");
@@ -11,64 +8,17 @@ function shouldRunUserInstall() {
   if (globalFlag === "true") {
     return true;
   }
-  if (prefix && localPrefix && prefix !== localPrefix) {
-    return true;
-  }
-  return false;
-}
-
-function findPython() {
-  const override = String(process.env.CODECGC_PYTHON_COMMAND || "").trim();
-  const candidates = override
-    ? [override]
-    : (process.platform === "win32" ? ["python", "py"] : ["python3", "python"]);
-
-  for (const command of candidates) {
-    const probe = spawnSync(command, ["--version"], {
-      encoding: "utf8",
-      shell: false,
-    });
-    if (probe.status === 0) {
-      return command;
-    }
-  }
-  return "";
+  return Boolean(prefix && localPrefix && prefix !== localPrefix);
 }
 
 function main() {
-  if (!shouldRunUserInstall()) {
+  if (!isGlobalInstall()) {
     return 0;
   }
 
-  const python = findPython();
-  if (!python) {
-    console.warn("[codecgc] Skipped automatic Claude integration: Python was not found.");
-    console.warn("[codecgc] Run `cgc-install --mode user` after installing Python.");
-    return 0;
-  }
-
-  const repoRoot = path.resolve(__dirname, "..");
-  const installScript = path.join(repoRoot, "scripts", "install_codecgc.py");
-  const result = spawnSync(
-    python,
-    [installScript, "--mode", "user", "--format", "summary"],
-    {
-      cwd: repoRoot,
-      stdio: "inherit",
-      shell: false,
-      env: {
-        ...process.env,
-        PYTHONIOENCODING: process.env.PYTHONIOENCODING || "utf-8",
-        PYTHONUTF8: process.env.PYTHONUTF8 || "1",
-      },
-    },
-  );
-
-  if (result.status !== 0) {
-    console.warn("[codecgc] Automatic Claude integration did not complete during npm install.");
-    console.warn("[codecgc] You can retry manually with `cgc-install --mode user`.");
-  }
-
+  console.warn("[codecgc] Global CLI installed.");
+  console.warn("[codecgc] CodeCGC no longer writes Claude user-level files during npm install.");
+  console.warn("[codecgc] Run `cgc-install` from each target project to create project-local .mcp.json, .claude/, and model-routing.yaml.");
   return 0;
 }
 

package/scripts/review_codecgc_workflow.py

@@ -4,6 +4,8 @@ from pathlib import Path
 
 from codecgc_console_io import configure_utf8_stdio
 from codecgc_console_io import print_json
+from codecgc_path_contract import normalize_persisted_project_path
+from codecgc_path_contract import resolve_project_path
 from codecgc_review_control import evaluate_review
 from write_codecgc_review import load_json
 from write_codecgc_review import render_review_decision
@@ -33,10 +35,11 @@ def main() -> int:
     args = parser.parse_args()
 
     try:
-        audit = load_json(Path(args.audit_file))
+        audit_file = resolve_project_path(args.audit_file)
+        audit = load_json(audit_file)
         values = evaluate_review(audit, args.decision, args.risk, args.next_step)
         writeback = write_review(
-            audit_path=Path(args.audit_file),
+            audit_path=audit_file,
             decision=args.decision,
             risks=args.risk,
             next_step=args.next_step,
@@ -44,7 +47,7 @@ def main() -> int:
         )
         result = {
             "success": True,
-            "audit_file": args.audit_file,
+            "audit_file": normalize_persisted_project_path(audit_file),
             "requested_decision": args.decision,
             "final_decision": values["final_decision"],
             "accepted": values["accepted"],

package/scripts/route_codecgc_workflow.py

@@ -13,6 +13,7 @@ from codecgc_artifact_roots import normalize_artifact_class
 from codecgc_command_surface import to_public_command
 from codecgc_console_io import configure_utf8_stdio
 from codecgc_console_io import print_json
+from codecgc_path_contract import normalize_persisted_project_path
 from codecgc_routing_paths import resolve_active_routing_file
 from codecgc_runtime_paths import PACKAGE_ROOT
 from codecgc_step_control import is_test_codecgc_block
@@ -23,6 +24,10 @@ WORKSPACE = PACKAGE_ROOT
 ROUTING_FILE = resolve_active_routing_file()
 
 
+def display_path(path: Path | None) -> str:
+    return normalize_persisted_project_path(path) if path else ""
+
+
 def attach_route_summary(result: dict[str, Any]) -> dict[str, Any]:
     review = result.get("review", {}) if isinstance(result.get("review"), dict) else {}
     current_step = result.get("current_step", {}) if isinstance(result.get("current_step"), dict) else {}
@@ -189,16 +194,28 @@ def find_audit_for_task_id(task_id: str, artifact_class: str) -> tuple[Path | No
     return audit_path, audit
 
 
-def extract_review_metadata(path: Path) -> dict[str, Any]:
-    text = load_text(path)
+def parse_review_metadata(markdown: str) -> dict[str, Any]:
+    text = str(markdown or "")
     decision_match = re.search(
         r"## [45]\. (?:Review Decision|审核结论)\s+[\r\n]+- (?:审核结果:\s*)?(accepted|changes-requested|通过|需修改)",
         text,
     )
     if not decision_match:
         decision_match = re.search(r"- (?:Final decision|最终决策): (accepted|changes-requested|通过|需修改)", text)
+    if not decision_match:
+        decision_match = re.search(
+            r"-\s*(?:Review decision|审核决策|审核结果|瀹℃牳鍐崇瓥):\s*(accepted|changes-requested|通过|需修改)",
+            text,
+            flags=re.IGNORECASE,
+        )
     task_match = re.search(r"- (?:Reviewed task_id|审核 task_id): (.+)", text)
     step_match = re.search(r"- (?:Reviewed step_number|审核 step_number|审核步骤序号): (\d+)", text)
+    if not step_match:
+        step_match = re.search(
+            r"-\s*(?:Reviewed step_number|审核 step_number|审核步骤序号|瀹℃牳姝ラ搴忓彿):\s*(\d+)",
+            text,
+            flags=re.IGNORECASE,
+        )
     action_kind_match = re.search(r"- (?:Review action kind|审核动作类型): (.+)", text)
     fallback_stage_match = re.search(r"- (?:Review fallback stage|审核回退阶段): (.+)", text)
     policy_reason_match = re.search(r"- (?:Review policy reason|审核策略原因): (.+)", text)
@@ -214,6 +231,10 @@ def extract_review_metadata(path: Path) -> dict[str, Any]:
     }
 
 
+def extract_review_metadata(path: Path) -> dict[str, Any]:
+    return parse_review_metadata(load_text(path))
+
+
 def review_matches_step(review: dict[str, Any], step: dict[str, Any]) -> bool:
     return (
         str(review.get("task_id", "")) == str(step.get("task_id", ""))
@@ -265,7 +286,7 @@ def route_feature(slug: str) -> dict[str, Any]:
             "flow": "feature",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "recommended_command": "cgc-plan",
             "reason": "当前功能开发工作流骨架不完整。",
             "next": "补齐或修复缺失的功能开发产物文件。",
@@ -277,7 +298,7 @@ def route_feature(slug: str) -> dict[str, Any]:
             "flow": "feature",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "recommended_command": "cgc-plan",
             "reason": "当前功能开发工作流已存在，但还不可执行。",
             "next": "继续细化设计，并补上有效的 CodeCGC 步骤契约。",
@@ -289,7 +310,7 @@ def route_feature(slug: str) -> dict[str, Any]:
             "flow": "feature",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "recommended_command": "cgc-plan",
             "reason": "当前功能开发清单里仍然存在仅规划用途的拆分或路由确认步骤。",
             "next": "先完成必须的拆分或路由澄清，再执行剩余的限定范围步骤。",
@@ -302,7 +323,7 @@ def route_feature(slug: str) -> dict[str, Any]:
             "flow": "feature",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "recommended_command": "cgc-plan",
             "reason": "当前功能开发清单仍以不可执行的占位步骤开头。",
             "next": "先澄清范围、归属和目标路径，再尝试执行该功能开发工作流。",
@@ -335,7 +356,7 @@ def route_feature(slug: str) -> dict[str, Any]:
                 "flow": "feature",
                 "slug": slug,
                 "artifact_class": artifact_class,
-                "directory": str(directory),
+                "directory": display_path(directory),
                 "review": review,
                 "current_step": None,
                 "audit_path": "",
@@ -348,7 +369,7 @@ def route_feature(slug: str) -> dict[str, Any]:
             "flow": "feature",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "review": review,
             "current_step": None,
             "audit_path": "",
@@ -363,6 +384,7 @@ def route_feature(slug: str) -> dict[str, Any]:
         "step_number": int(next_step.get("step_number", 0) or 0),
         "task_id": str(next_step.get("task_id", "")),
         "kind": str(next_step.get("kind", "")),
+        "step_type": str(next_step.get("step_type", "")),
         "target_paths": next_step.get("target_paths", []),
         "task_summary": str(next_step.get("task_summary", "")),
     }
@@ -372,7 +394,7 @@ def route_feature(slug: str) -> dict[str, Any]:
             "task_id": current_step["task_id"],
             "task_summary": current_step["task_summary"],
             "target_paths": current_step["target_paths"],
-            "step_type": "test" if "-test-step-" in current_step["task_id"] else "",
+            "step_type": current_step["step_type"] or ("test" if "-test-step-" in current_step["task_id"] else ""),
         }
     ):
         return {
@@ -380,25 +402,29 @@ def route_feature(slug: str) -> dict[str, Any]:
             "flow": "feature",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "review": review,
             "current_step": current_step,
-            "audit_path": str(audit_path) if audit_path else "",
+            "audit_path": display_path(audit_path),
             "recommended_command": "cgc-test",
             "reason": "当前功能开发工作流正在等待测试步骤执行。",
             "next": "执行当前测试步骤。",
         }
 
-    if review_for_current_step and review.get("decision") == "changes-requested":
+    if (
+        review_for_current_step
+        and review.get("decision") == "changes-requested"
+        and not (audit and audit_is_ready_for_review(audit, next_step))
+    ):
         return {
             "success": True,
             "flow": "feature",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "review": review,
             "current_step": current_step,
-            "audit_path": str(audit_path) if audit_path else "",
+            "audit_path": display_path(audit_path),
             "recommended_command": "cgc-build",
             "reason": "当前功能开发步骤在审核后仍需继续补充修改。",
             "next": "完成要求的后续修改后，重新执行当前功能开发步骤。",
@@ -411,10 +437,10 @@ def route_feature(slug: str) -> dict[str, Any]:
                 "flow": "feature",
                 "slug": slug,
                 "artifact_class": artifact_class,
-                "directory": str(directory),
+                "directory": display_path(directory),
                 "review": review,
                 "current_step": current_step,
-                "audit_path": str(audit_path) if audit_path else "",
+                "audit_path": display_path(audit_path),
                 "recommended_command": "cgc-review",
                 "reason": "当前功能开发步骤已有执行证据，但还没有对应的审核结论。",
                 "next": f"审核最新审计产物 {audit_path}，并回写验收结论。",
@@ -424,10 +450,10 @@ def route_feature(slug: str) -> dict[str, Any]:
             "flow": "feature",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "review": review,
             "current_step": current_step,
-            "audit_path": str(audit_path) if audit_path else "",
+            "audit_path": display_path(audit_path),
             "recommended_command": "cgc-build",
             "reason": "当前功能开发步骤还没有“通过”审核结论。",
             "next": "执行或继续推进当前待执行的功能开发步骤。",
@@ -438,7 +464,7 @@ def route_feature(slug: str) -> dict[str, Any]:
         "flow": "feature",
         "slug": slug,
         "artifact_class": artifact_class,
-        "directory": str(directory),
+        "directory": display_path(directory),
         "review": review,
         "current_step": current_step,
         "audit_path": "",
@@ -472,7 +498,7 @@ def route_issue(slug: str) -> dict[str, Any]:
             "flow": "issue",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "recommended_command": "cgc-plan",
             "reason": "Issue 工作流骨架不完整。",
             "next": "补齐或修复缺失的 issue 产物文件。",
@@ -484,7 +510,7 @@ def route_issue(slug: str) -> dict[str, Any]:
             "flow": "issue",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "recommended_command": "cgc-plan",
             "reason": "当前问题修复工作流已存在，但还不可执行。",
             "next": "继续细化修复范围，并补上有效的 CodeCGC 步骤契约。",
@@ -496,7 +522,7 @@ def route_issue(slug: str) -> dict[str, Any]:
             "flow": "issue",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "recommended_command": "cgc-plan",
             "reason": "当前问题修复清单里仍然存在仅规划用途的拆分或路由确认步骤。",
             "next": "先完成必须的拆分或路由澄清，再执行剩余的限定范围修复步骤。",
@@ -509,7 +535,7 @@ def route_issue(slug: str) -> dict[str, Any]:
             "flow": "issue",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "recommended_command": "cgc-plan",
             "reason": "当前问题修复清单仍以不可执行的占位步骤开头。",
             "next": "先澄清修复范围、归属和目标路径，再尝试执行该问题修复工作流。",
@@ -542,7 +568,7 @@ def route_issue(slug: str) -> dict[str, Any]:
                 "flow": "issue",
                 "slug": slug,
                 "artifact_class": artifact_class,
-                "directory": str(directory),
+                "directory": display_path(directory),
                 "review": review,
                 "current_step": None,
                 "audit_path": "",
@@ -555,7 +581,7 @@ def route_issue(slug: str) -> dict[str, Any]:
             "flow": "issue",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "review": review,
             "current_step": None,
             "audit_path": "",
@@ -570,6 +596,7 @@ def route_issue(slug: str) -> dict[str, Any]:
         "step_number": int(next_step.get("step_number", 0) or 0),
         "task_id": str(next_step.get("task_id", "")),
         "kind": str(next_step.get("kind", "")),
+        "step_type": str(next_step.get("step_type", "")),
         "target_paths": next_step.get("target_paths", []),
         "task_summary": str(next_step.get("task_summary", "")),
     }
@@ -579,7 +606,7 @@ def route_issue(slug: str) -> dict[str, Any]:
             "task_id": current_step["task_id"],
             "task_summary": current_step["task_summary"],
             "target_paths": current_step["target_paths"],
-            "step_type": "test" if "-test-step-" in current_step["task_id"] else "",
+            "step_type": current_step["step_type"] or ("test" if "-test-step-" in current_step["task_id"] else ""),
         }
     ):
         return {
@@ -587,25 +614,29 @@ def route_issue(slug: str) -> dict[str, Any]:
             "flow": "issue",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "review": review,
             "current_step": current_step,
-            "audit_path": str(audit_path) if audit_path else "",
+            "audit_path": display_path(audit_path),
             "recommended_command": "cgc-test",
             "reason": "当前问题修复工作流正在等待测试步骤执行。",
             "next": "执行当前测试步骤。",
         }
 
-    if review_for_current_step and review.get("decision") == "changes-requested":
+    if (
+        review_for_current_step
+        and review.get("decision") == "changes-requested"
+        and not (audit and audit_is_ready_for_review(audit, next_step))
+    ):
         return {
             "success": True,
             "flow": "issue",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "review": review,
             "current_step": current_step,
-            "audit_path": str(audit_path) if audit_path else "",
+            "audit_path": display_path(audit_path),
             "recommended_command": "cgc-fix",
             "reason": "当前问题修复步骤在审核后仍需继续补充修改。",
             "next": "完成要求的后续修复后，重新执行当前问题修复步骤。",
@@ -618,10 +649,10 @@ def route_issue(slug: str) -> dict[str, Any]:
                 "flow": "issue",
                 "slug": slug,
                 "artifact_class": artifact_class,
-                "directory": str(directory),
+                "directory": display_path(directory),
                 "review": review,
                 "current_step": current_step,
-                "audit_path": str(audit_path) if audit_path else "",
+                "audit_path": display_path(audit_path),
                 "recommended_command": "cgc-review",
                 "reason": "当前问题修复步骤已有执行证据，但还没有对应的审核结论。",
                 "next": f"审核最新审计产物 {audit_path}，并回写修复结论。",
@@ -631,10 +662,10 @@ def route_issue(slug: str) -> dict[str, Any]:
             "flow": "issue",
             "slug": slug,
             "artifact_class": artifact_class,
-            "directory": str(directory),
+            "directory": display_path(directory),
             "review": review,
             "current_step": current_step,
-            "audit_path": str(audit_path) if audit_path else "",
+            "audit_path": display_path(audit_path),
             "recommended_command": "cgc-fix",
             "reason": "当前问题修复步骤还没有“通过”审核结论。",
             "next": "执行或继续推进当前待执行的问题修复步骤。",
@@ -645,7 +676,7 @@ def route_issue(slug: str) -> dict[str, Any]:
         "flow": "issue",
         "slug": slug,
         "artifact_class": artifact_class,
-        "directory": str(directory),
+        "directory": display_path(directory),
         "review": review,
         "current_step": current_step,
         "audit_path": "",

package/scripts/run_codecgc_build.py

@@ -7,6 +7,9 @@ from codecgc_console_io import configure_utf8_stdio
 from codecgc_console_io import print_json
 from codecgc_flow_control import build_execution_result
 from codecgc_flow_control import build_not_ready_result
+from codecgc_policy import load_policy
+from codecgc_policy import validate_executor_target
+from codecgc_routing_paths import resolve_active_routing_file
 from codecgc_session_recovery import resolve_session_id_from_task
 from codecgc_step_control import get_step_metadata
 from codecgc_step_control import select_next_executable_step
@@ -62,6 +65,31 @@ def main() -> int:
         print_json(result)
         return 1
 
+    try:
+        policy_result = validate_executor_target(
+            str(selected.get("kind", "")),
+            [str(path) for path in selected.get("target_paths", [])],
+            load_policy(resolve_active_routing_file()),
+        )
+        if not policy_result.get("allowed"):
+            result = {
+                "success": False,
+                "flow": "feature",
+                "slug": args.slug,
+                "state": "not-ready",
+                "failure_type": "policy",
+                "route": route,
+                "selected_step": selected,
+                "policy": policy_result,
+                "recommended_command": to_public_command("cgc-plan"),
+                "next": "Adjust target_paths or split the task before build execution.",
+            }
+            print_json(result)
+            return 1
+    except Exception as error:
+        print_json({"success": False, "error": str(error), "failure_type": "policy"}, file=sys.stderr)
+        return 1
+
     effective_session_id = args.session_id.strip()
     if not effective_session_id:
         effective_session_id = resolve_session_id_from_task(

package/scripts/run_codecgc_fix.py

@@ -7,6 +7,9 @@ from codecgc_console_io import configure_utf8_stdio
 from codecgc_console_io import print_json
 from codecgc_flow_control import build_execution_result
 from codecgc_flow_control import build_not_ready_result
+from codecgc_policy import load_policy
+from codecgc_policy import validate_executor_target
+from codecgc_routing_paths import resolve_active_routing_file
 from codecgc_session_recovery import resolve_session_id_from_task
 from codecgc_step_control import get_step_metadata
 from codecgc_step_control import select_next_executable_step
@@ -62,6 +65,31 @@ def main() -> int:
         print_json(result)
         return 1
 
+    try:
+        policy_result = validate_executor_target(
+            str(selected.get("kind", "")),
+            [str(path) for path in selected.get("target_paths", [])],
+            load_policy(resolve_active_routing_file()),
+        )
+        if not policy_result.get("allowed"):
+            result = {
+                "success": False,
+                "flow": "issue",
+                "slug": args.slug,
+                "state": "not-ready",
+                "failure_type": "policy",
+                "route": route,
+                "selected_step": selected,
+                "policy": policy_result,
+                "recommended_command": to_public_command("cgc-plan"),
+                "next": "Adjust target_paths or split the task before fix execution.",
+            }
+            print_json(result)
+            return 1
+    except Exception as error:
+        print_json({"success": False, "error": str(error), "failure_type": "policy"}, file=sys.stderr)
+        return 1
+
     effective_session_id = args.session_id.strip()
     if not effective_session_id:
         effective_session_id = resolve_session_id_from_task(

package/scripts/run_codecgc_task.py

@@ -14,6 +14,8 @@ from codecgc_executor_registry import build_executor_env
 from codecgc_executor_registry import get_executor_config
 from codecgc_file_evidence import snapshot_workspace
 from codecgc_file_evidence import verify_workspace_changes
+from codecgc_path_contract import normalize_audit_path_fields
+from codecgc_path_contract import normalize_persisted_project_path
 from codecgc_runtime_paths import PACKAGE_ROOT
 from codecgc_runtime_paths import PROJECT_ROOT
 from mcp import ClientSession
@@ -215,7 +217,7 @@ def build_audit_record(
     if not isinstance(reported_changed_files, list):
         reported_changed_files = []
 
-    return {
+    record = {
         "product": "CodeCGC",
         "version": 1,
         "mode": mode,
@@ -262,6 +264,7 @@ def build_audit_record(
             },
         },
     }
+    return normalize_audit_path_fields(record, PROJECT_WORKSPACE)
 
 
 def write_audit_file(audit_root: Path, audit_record: dict[str, Any]) -> Path:
@@ -379,7 +382,7 @@ async def run_task(args: argparse.Namespace) -> dict[str, Any]:
         "result": task_result,
         "audit": {
             "written": not args.skip_audit_write,
-            "path": str(audit_path) if audit_path else "",
+            "path": normalize_persisted_project_path(audit_path) if audit_path else "",
         },
     }
     return sanitize_for_json(output)

package/scripts/run_codecgc_test.py

@@ -7,6 +7,9 @@ from codecgc_console_io import configure_utf8_stdio
 from codecgc_console_io import print_json
 from codecgc_flow_control import build_execution_result
 from codecgc_flow_control import build_not_ready_result
+from codecgc_policy import load_policy
+from codecgc_policy import validate_executor_target
+from codecgc_routing_paths import resolve_active_routing_file
 from codecgc_session_recovery import resolve_session_id_from_task
 from codecgc_step_control import get_step_metadata
 from codecgc_step_control import select_next_executable_step
@@ -63,6 +66,31 @@ def main() -> int:
         print_json(result)
         return 1
 
+    try:
+        policy_result = validate_executor_target(
+            str(selected.get("kind", "")),
+            [str(path) for path in selected.get("target_paths", [])],
+            load_policy(resolve_active_routing_file()),
+        )
+        if not policy_result.get("allowed"):
+            result = {
+                "success": False,
+                "flow": args.flow,
+                "slug": args.slug,
+                "state": "not-ready",
+                "failure_type": "policy",
+                "route": route,
+                "selected_step": selected,
+                "policy": policy_result,
+                "recommended_command": to_public_command("cgc-plan"),
+                "next": "Adjust target_paths or split the task before test execution.",
+            }
+            print_json(result)
+            return 1
+    except Exception as error:
+        print_json({"success": False, "error": str(error), "failure_type": "policy"}, file=sys.stderr)
+        return 1
+
     effective_session_id = args.session_id.strip()
     if not effective_session_id:
         effective_session_id = resolve_session_id_from_task(