@mc-and-his-agents/loom-installer 0.1.111 → 0.1.113

package/payload/plugin/loom/skills/loom-handoff/.loom-runtime/loom-adopt/SKILL.md

@@ -57,6 +57,7 @@ description: 负责把仓库接入 Loom 的初始化场景入口。Use when Code
 2. `judge`
    - 判断这是 `新项目`、`小型既有仓库` 还是 `复杂既有仓库`
    - 消费或输出 `adoption_intent`；当 intent 不明确且写入会创建重执行控制面时，先停在 decision prompt / dry-run，不静默写入
+   - 输出 `scaffold_profile`，并按该 profile 列出 required、planned、intentionally absent 与 forbidden authored carriers
    - 输出本轮启用能力、暂不启用能力、升级触发条件、source locator、write target 与 validation command
 3. `write`
    - 只有用户要求实际落盘时才执行 `bootstrap --write`

package/payload/plugin/loom/skills/loom-handoff/.loom-runtime/loom-init/SKILL.md

@@ -66,6 +66,8 @@ description: Loom 的 root entry。负责初始化新项目或既有仓库，并
 
 `--intent` 用来表达采用意图，而不是仓库静态分类。未显式给出 intent 时，dry-run 仍会输出推荐路径、风险摘要和计划写入载体；如果实际写入会创建重执行控制面，必须先显式选择 `execution-control` 或 `strong-governance`。
 
+每个 intent 会收敛到一个 `scaffold_profile`。`observe-only` 与 `skill-install-only` 不写 adoption carriers；`attach-only` 只写 companion/read surfaces，并显式禁止 `.loom/work-items/**`、`.loom/progress/**`、`.loom/status/current.md`、`.loom/reviews/**`、`.loom/specs/**` 等 Loom-authored truth carriers；`light-governance` 写 companion、review/spec 与 PR 最小闭环但不写 Loom-owned work/progress/status；`execution-control` 与 `strong-governance` 才写 Loom-owned execution carriers。
+
 ## 1. 读取顺序
 
 按以下顺序读取材料：

package/payload/plugin/loom/skills/loom-handoff/.loom-runtime/loom-init/contract.json

@@ -31,11 +31,15 @@
     "required_sections": [
       "project_judgment",
       "recommended_adoption",
+      "scaffold_profile",
       "adoption_intent",
       "detected_repository_mode",
       "risk_summary",
+      "required_carriers",
       "planned_writes",
+      "forbidden_authored_carriers",
       "deferred_capabilities",
+      "upgrade_triggers",
       "fact_chain",
       "initial_artifacts",
       "initial_work_items",

package/payload/plugin/loom/skills/loom-handoff/.loom-runtime/loom-init/references/output-contract.md

@@ -30,6 +30,13 @@
   - `effective`
   - `source`
   - `requires_explicit_confirmation`
+- `scaffold_profile`
+  - `name`
+  - `writes_artifacts`
+  - `writes_work_item_carriers`
+  - `description`
+  - `required_carriers`
+  - `forbidden_authored_carriers`
 - 本轮启用的能力清单
 - 每项能力分别映射到哪些 `governance`、`harness`、`templates`、`adoption` 规则
 - 这次采用的是最小装配、轻量 retrofit 还是更完整装配
@@ -46,6 +53,7 @@
 - 当前不引入哪些 Loom 能力
 - 不引入的原因是什么
 - 这些能力未来的升级触发条件是什么
+- 顶层 `upgrade_triggers` 必须把 deferred capability 映射回当前 `scaffold_profile`
 
 ### 4. 首批工件
 
@@ -53,8 +61,10 @@
 
 - `detected_repository_mode`：静态检测到的仓库模式和 scenario
 - `risk_summary`：是否会写入重执行控制面、是否保护 repo-owned truth、是否需要显式 intent
+- `required_carriers`：本 profile 必须落盘或保持可读的稳定载体
 - `planned_writes`：dry-run / write 即将落盘的稳定载体集合
-- `intentionally_absent`：因 attach-only、observe-only 或 skill-install-only 而明确不生成的载体
+- `forbidden_authored_carriers`：本 profile 明确禁止生成、声明或保留的 Loom-authored truth carrier
+- `intentionally_absent`：因 attach-only、light-governance、observe-only 或 skill-install-only 而明确不生成的载体
 - 初始能力清单的承载位置
 - 首批 `Work Item` 或等价事项清单的承载位置
 - 恢复主入口是什么
@@ -113,6 +123,8 @@
 - attach-only 必备工件是什么
 - 哪些 repo-native carriers 继续保留
 - 哪些 Loom-owned carriers 本轮不会生成
+- `forbidden_authored_carriers` 必须至少包含 `.loom/work-items/**`、`.loom/progress/**`、`.loom/status/current.md`、`.loom/reviews/**`、`.loom/specs/**`
+- verify 必须同时检查磁盘存在、`init-result` 声明、`planned_writes`、manifest artifacts 与 write touched，不得让 forbidden carrier 形成第二事实链
 
 `init-result` 只允许承接 locator-only 信息，不并行复制实时停点、下一步、阻断项或最近验证摘要。
 

package/payload/plugin/loom/skills/loom-handoff/.loom-runtime/shared/references/adoption/deep-existing-repo-default.md

@@ -57,9 +57,13 @@
 - `.loom/work-items/*`
 - `.loom/progress/*`
 - `.loom/status/current.md`
+- `.loom/reviews/*`
+- `.loom/specs/*`
 - Loom-owned recovery/status carriers 的 bootstrap placeholder
 - 对 branch / PR / worktree / merge / ruleset 的底层宿主重写
 
+若上述 Loom-authored carriers 已存在、被 `init-result` / manifest 声明为 generated，或出现在 attach-only planned writes 中，verify 必须 fail closed。执行者只能迁移到宿主 truth locator、删除 competing carrier，或显式升级 intent 到 `execution-control`。
+
 ## 6. 升级信号
 
 以下任一条件出现时，不应继续停留在 attach-only 默认路径：

package/payload/plugin/loom/skills/loom-handoff/.loom-runtime/shared/references/adoption/repo-companion-contract.md

@@ -162,6 +162,7 @@
 - `policy_locators`
 - `hook_locators`
 - `release_targets`
+- `host_truth_locators`
 
 稳定约束：
 
@@ -171,8 +172,9 @@
 - `policy_locators` 只在 `v2` 合法
 - `hook_locators` 只在 `v2` 合法
 - `release_targets` 只在 `v2` 合法
+- `host_truth_locators` 只在 `v2` 合法，且只能声明宿主事实源 locator，例如 GitHub Issue、GitHub Project、PR review / guardian、PR metadata 与 issue state
 - `v2` 不改变 `repo_specific_requirements` 与 `specialized_gates` 的既有纪律
-- `v2` 不把 repo runtime state、review summary、validation status 或 retained host action result 写入 `repo-interface.json`
+- `v2` 不把 repo runtime state、progress/current stop、review verdict、review summary、validation status、closeout result 或 retained host action result 写入 `repo-interface.json`
 
 ### 4.3 通用字段纪律
 

package/payload/plugin/loom/skills/loom-handoff/.loom-runtime/shared/scripts/governance_surface.py

@@ -352,6 +352,7 @@ REPO_INTERFACE_V2_KEYS = REPO_INTERFACE_V1_KEYS | {
     "policy_locators",
     "hook_locators",
     "release_targets",
+    "host_truth_locators",
 }
 DECLARED_LOCATOR_REQUIREMENTS = {"required", "optional", "advisory"}
 DECLARED_LOCATOR_OWNERS = {"repo", "repo-companion", "host", "host-adapter", "platform", "external-tool"}

package/payload/plugin/loom/skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py

@@ -4336,6 +4336,28 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
             if pr_template:
                 (target / ".github" / "PULL_REQUEST_TEMPLATE.md").write_text("## Summary\n", encoding="utf-8")
 
+        attach_only_forbidden_patterns = (
+            ".loom/work-items/**",
+            ".loom/progress/**",
+            ".loom/status/current.md",
+            ".loom/reviews/**",
+            ".loom/specs/**",
+        )
+
+        def matches_forbidden(path: str, pattern: str) -> bool:
+            if pattern.endswith("/**"):
+                prefix = pattern[:-3]
+                return path == prefix or path.startswith(prefix + "/")
+            return path == pattern
+
+        def forbidden_match(path: object) -> str | None:
+            if not isinstance(path, str):
+                return None
+            for pattern in attach_only_forbidden_patterns:
+                if matches_forbidden(path, pattern):
+                    return pattern
+            return None
+
         deep_target = tmp_root / "deep-existing"
         write_repo(deep_target, validation_entry=True, pr_template=True, workflow_doc=True)
         deep_dry_payload, deep_dry_error = load_command_json(
@@ -4356,6 +4378,8 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
             intent = deep_dry_payload.get("adoption_intent")
             risk = deep_dry_payload.get("risk_summary")
             planned = deep_dry_payload.get("planned_writes")
+            required = deep_dry_payload.get("required_carriers")
+            forbidden = deep_dry_payload.get("forbidden_authored_carriers")
             detected = deep_dry_payload.get("detected_repository_mode")
             write = deep_dry_payload.get("write")
             if not isinstance(intent, dict) or intent.get("effective") != "attach-only":
@@ -4364,6 +4388,18 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
                 failures.append(Failure("deep-existing-bootstrap", "`deep-existing dry-run` must report preserved repo-owned truth risk"))
             if not isinstance(planned, list) or not planned:
                 failures.append(Failure("deep-existing-bootstrap", "`deep-existing dry-run` must report planned write targets"))
+            else:
+                for item in planned:
+                    if isinstance(item, dict):
+                        pattern = forbidden_match(item.get("path"))
+                        if pattern:
+                            failures.append(Failure("deep-existing-bootstrap", f"`deep-existing dry-run` planned write must not match forbidden carrier `{pattern}`"))
+            if not isinstance(required, list) or not required:
+                failures.append(Failure("deep-existing-bootstrap", "`deep-existing dry-run` must report required carriers"))
+            if not isinstance(forbidden, list) or {
+                item.get("path") for item in forbidden if isinstance(item, dict)
+            } != set(attach_only_forbidden_patterns):
+                failures.append(Failure("deep-existing-bootstrap", "`deep-existing dry-run` must report the full attach-only forbidden carrier list"))
             if not isinstance(detected, dict) or detected.get("scenario_key") != "complex-existing":
                 failures.append(Failure("deep-existing-bootstrap", "`deep-existing dry-run` must report detected repository mode"))
             if not isinstance(write, dict) or write.get("enabled") is not False:
@@ -4391,6 +4427,7 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
             recommended = deep_payload.get("recommended_adoption")
             verification = deep_payload.get("verification")
             governance_surface = deep_payload.get("governance_surface")
+            repo_interface_path = deep_target / ".loom/companion/repo-interface.json"
             if not isinstance(recommended, dict) or recommended.get("path") != "deep-existing-repo":
                 failures.append(Failure("deep-existing-bootstrap", "`deep-existing bootstrap` must select `recommended_adoption.path = deep-existing-repo`"))
             run = deep_payload.get("run")
@@ -4413,12 +4450,79 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
                 ".loom/work-items/INIT-0001.md",
                 ".loom/progress/INIT-0001.md",
                 ".loom/status/current.md",
+                ".loom/reviews/INIT-0001.json",
+                ".loom/specs/INIT-0001/spec.md",
             ):
                 if (deep_target / forbidden).exists():
                     failures.append(Failure("deep-existing-bootstrap", f"`deep-existing bootstrap` must not generate `{forbidden}`"))
             fact_chain = deep_payload.get("fact_chain")
             if not isinstance(fact_chain, dict) or fact_chain.get("mode") != "repo-native attach-only":
                 failures.append(Failure("deep-existing-bootstrap", "`deep-existing bootstrap` must keep `fact_chain.mode = repo-native attach-only`"))
+            if repo_interface_path.exists():
+                repo_interface = json.loads(repo_interface_path.read_text(encoding="utf-8"))
+                host_truth = repo_interface.get("host_truth_locators")
+                if not isinstance(host_truth, dict) or set(host_truth.keys()) != {"work_item", "project_status", "review", "closeout"}:
+                    failures.append(Failure("deep-existing-bootstrap", "`deep-existing bootstrap` repo-interface must declare attach-only host truth locators"))
+
+        poisoned_files_target = tmp_root / "deep-existing-poison-files"
+        if deep_target.exists() and (deep_target / ".loom/bin/loom_init.py").exists():
+            shutil.copytree(deep_target, poisoned_files_target)
+            (poisoned_files_target / ".loom/reviews").mkdir(parents=True, exist_ok=True)
+            (poisoned_files_target / ".loom/specs/EXISTING").mkdir(parents=True, exist_ok=True)
+            (poisoned_files_target / ".loom/reviews/EXISTING.json").write_text("{}", encoding="utf-8")
+            (poisoned_files_target / ".loom/specs/EXISTING/spec.md").write_text("# Existing Spec\n", encoding="utf-8")
+            poisoned_payload, poisoned_error = load_command_json(
+                root,
+                [
+                    "python3",
+                    str(poisoned_files_target / ".loom/bin/loom_init.py"),
+                    "verify",
+                    "--target",
+                    str(poisoned_files_target),
+                ],
+            )
+            if poisoned_error:
+                failures.append(Failure("deep-existing-bootstrap", f"`attach-only forbidden file verify` failed: {poisoned_error}"))
+            else:
+                errors_text = json.dumps(poisoned_payload.get("errors", []), ensure_ascii=False) if poisoned_payload else ""
+                if poisoned_payload.get("ok") is not False:
+                    failures.append(Failure("deep-existing-bootstrap", "`attach-only forbidden file verify` must fail closed"))
+                if "forbidden authored carrier" not in errors_text or "second truth chain" not in errors_text:
+                    failures.append(Failure("deep-existing-bootstrap", "`attach-only forbidden file verify` must explain the second truth-chain risk"))
+
+        poisoned_decl_target = tmp_root / "deep-existing-poison-declarations"
+        if deep_target.exists() and (deep_target / ".loom/bin/loom_init.py").exists():
+            shutil.copytree(deep_target, poisoned_decl_target)
+            init_result_path = poisoned_decl_target / ".loom/bootstrap/init-result.json"
+            manifest_path = poisoned_decl_target / ".loom/bootstrap/manifest.json"
+            init_result = json.loads(init_result_path.read_text(encoding="utf-8"))
+            init_result.setdefault("planned_writes", []).append(
+                {"path": ".loom/work-items/POISON.md", "kind": "work-item", "owner": "loom"}
+            )
+            init_result_path.write_text(json.dumps(init_result, indent=2, ensure_ascii=False) + "\n", encoding="utf-8")
+            manifest = json.loads(manifest_path.read_text(encoding="utf-8"))
+            manifest.setdefault("artifacts", []).append(
+                {"path": ".loom/progress/POISON.md", "kind": "progress", "source": "generated"}
+            )
+            manifest_path.write_text(json.dumps(manifest, indent=2, ensure_ascii=False) + "\n", encoding="utf-8")
+            poisoned_payload, poisoned_error = load_command_json(
+                root,
+                [
+                    "python3",
+                    str(poisoned_decl_target / ".loom/bin/loom_init.py"),
+                    "verify",
+                    "--target",
+                    str(poisoned_decl_target),
+                ],
+            )
+            if poisoned_error:
+                failures.append(Failure("deep-existing-bootstrap", f"`attach-only forbidden declaration verify` failed: {poisoned_error}"))
+            else:
+                errors_text = json.dumps(poisoned_payload.get("errors", []), ensure_ascii=False) if poisoned_payload else ""
+                if poisoned_payload.get("ok") is not False:
+                    failures.append(Failure("deep-existing-bootstrap", "`attach-only forbidden declaration verify` must fail closed"))
+                if "planned_writes" not in errors_text or "manifest.artifacts" not in errors_text:
+                    failures.append(Failure("deep-existing-bootstrap", "`attach-only forbidden declaration verify` must name poisoned declaration sources"))
 
         full_target = tmp_root / "full-bootstrap"
         write_repo(full_target, validation_entry=False, pr_template=False, workflow_doc=False)
@@ -4478,17 +4582,61 @@ def check_deep_existing_repo_bootstrap(root: Path) -> list[Failure]:
         else:
             intent = explicit_payload.get("adoption_intent")
             recommended = explicit_payload.get("recommended_adoption")
+            profile = explicit_payload.get("scaffold_profile")
             if not isinstance(intent, dict) or intent.get("effective") != "execution-control":
                 failures.append(Failure("deep-existing-bootstrap", "explicit full-bootstrap sample must report `adoption_intent.effective = execution-control`"))
             if not isinstance(recommended, dict) or recommended.get("path") != "full-bootstrap":
                 failures.append(Failure("deep-existing-bootstrap", "explicit execution-control sample must select `recommended_adoption.path = full-bootstrap`"))
+            if not isinstance(profile, dict) or profile.get("name") != "execution-control":
+                failures.append(Failure("deep-existing-bootstrap", "explicit execution-control sample must report `scaffold_profile.name = execution-control`"))
             for required in (
                 ".loom/work-items/INIT-0001.md",
                 ".loom/progress/INIT-0001.md",
                 ".loom/status/current.md",
+                ".loom/reviews/INIT-0001.json",
+                ".loom/specs/INIT-0001/spec.md",
             ):
                 if not (explicit_full_target / required).exists():
                     failures.append(Failure("deep-existing-bootstrap", f"`explicit execution-control bootstrap sample` must generate `{required}`"))
+
+        light_target = tmp_root / "light-governance"
+        write_repo(light_target, validation_entry=True, pr_template=False, workflow_doc=False)
+        light_payload, light_error = load_command_json(
+            root,
+            [
+                "python3",
+                "tools/loom_init.py",
+                "bootstrap",
+                "--target",
+                str(light_target),
+                "--intent",
+                "light-governance",
+                "--write",
+                "--force",
+                "--verify",
+                "--install-pr-template",
+            ],
+        )
+        if light_error:
+            failures.append(Failure("deep-existing-bootstrap", f"`light-governance bootstrap sample` failed: {light_error}"))
+        else:
+            profile = light_payload.get("scaffold_profile")
+            if not isinstance(profile, dict) or profile.get("name") != "light-governance":
+                failures.append(Failure("deep-existing-bootstrap", "light-governance sample must report `scaffold_profile.name = light-governance`"))
+            if not isinstance(light_payload.get("upgrade_triggers"), list) or not light_payload["upgrade_triggers"]:
+                failures.append(Failure("deep-existing-bootstrap", "light-governance sample must report top-level upgrade_triggers"))
+            planned = light_payload.get("planned_writes")
+            planned_paths = {item.get("path") for item in planned if isinstance(item, dict)} if isinstance(planned, list) else set()
+            for required in (".loom/reviews/INIT-0001.json", ".loom/specs/INIT-0001/spec.md", ".github/PULL_REQUEST_TEMPLATE.md"):
+                if required not in planned_paths or not (light_target / required).exists():
+                    failures.append(Failure("deep-existing-bootstrap", f"`light-governance bootstrap sample` must generate `{required}`"))
+            for forbidden in (
+                ".loom/work-items/INIT-0001.md",
+                ".loom/progress/INIT-0001.md",
+                ".loom/status/current.md",
+            ):
+                if forbidden in planned_paths or (light_target / forbidden).exists():
+                    failures.append(Failure("deep-existing-bootstrap", f"`light-governance bootstrap sample` must not generate `{forbidden}`"))
     return failures