@mstar-harness/engine 3.9.0 → 3.9.2

package/dist/dispatch.d.ts

@@ -6,6 +6,19 @@ export type AssignmentFields = {
     taskCategory?: string;
     workingBranch?: string;
     branchPolicy?: string;
+    /**
+     * `Budget (review / QC seats)` round cap. Required (present, non-empty,
+     * not `N/A`) on review-seat and audit rounds — see
+     * {@link REVIEW_SEAT_ROLES}. The value is prose (file opens / wall clock);
+     * it is never parsed numerically.
+     */
+    budget?: string;
+    /**
+     * `Return shape (review / QC seats)` — what the seat returns and how it
+     * stops. Same presence-only rule as {@link AssignmentFields.budget}, one
+     * violation code per field so the PM sees exactly which label is missing.
+     */
+    returnShape?: string;
 };
 export type ValidateAssignmentFieldsOptions = {
     /**
@@ -39,7 +52,15 @@ export type ExecutionModeToNResult = GateResult & {
  * are accepted so the engine parser is the SINGLE grammar for Assignment
  * header fields (the Slice-2 opencode presence parser tolerated bullets;
  * its acceptance is folded into this parser, not forked —).
- */
+ *
+ * The function scopes its OWN input: it reads the {@link
+ * assignmentHeaderRegion} of whatever text it is handed, so any caller (host
+ * gate, CLI, plugin) may pass the whole dispatch/prompt — a field label
+ * quoted in the task body can never be read as a header field. An
+ * already-sliced header may be passed as well: a slice holds no body marker,
+ * so re-slicing is a no-op (idempotent). Every Assignment field/branch read
+ * therefore shares ONE header rule by construction, rather than by each call
+ * site remembering to pre-slice. */
 export declare function parseAssignmentFields(assignmentText: string): AssignmentFields;
 /** Where the `Enforcement` flag was declared (roadmap §8.5 C4/D2). */
 export type EnforcementSource = "assignment" | "compass" | "mstarc" | "none";
@@ -51,9 +72,11 @@ export type EnforcementFlag = {
 /**
  * Slice an Assignment's header region — the text before the first body
  * marker (see {@link ASSIGNMENT_BODY_START_RE}). Returns the full text when
- * no marker is present. The Assignment enforcement flag is parsed against
- * THIS region only, so an example line `**Enforcement**: hard` quoted in the
- * task body cannot harden the dispatch. */
+ * no marker is present. This is the SINGLE header-scope rule: the Assignment
+ * field parsers ({@link parseAssignmentFields} plus the branch forms built
+ * on it) apply it to their own input, and the Assignment enforcement flag is
+ * parsed against THIS region, so an example line `**Enforcement**: hard`
+ * quoted in the task body cannot harden the dispatch. */
 export declare function assignmentHeaderRegion(assignmentText: string): string;
 /**
  * Parse the `Enforcement: hard` flag (roadmap §8.5 C4 + decision D2 — v2
@@ -110,8 +133,9 @@ export type AssignmentBranchForms = {
  * Parse an Assignment's branch forms via the engine's single parser
  * (`parseAssignmentFields` + {@link parseWorkingBranchValue}). Consumed by
  * the CLI `dispatch validate` gate-branch derivation and the opencode hook;
- * also the internal grammar behind `validateAssignmentFields`.
- */
+ * also the internal grammar behind `validateAssignmentFields`. Input may be
+ * the whole dispatch — the header scope is inherited from
+ * {@link parseAssignmentFields}. */
 export declare function parseAssignmentBranchForms(assignmentText: string): AssignmentBranchForms;
 /**
  * Parse the Assignment's `Branch policy: direct on <branch> — <reason>`
@@ -119,7 +143,8 @@ export declare function parseAssignmentBranchForms(assignmentText: string): Assi
  * form (branch + non-empty reason; separator set [—–]|--|-); undefined when
  * absent or malformed — the default-branch gate recognizes explicit
  * direct-on exceptions only. Single engine grammar shared by CLI + plugin
- *. */
+ * (the header scope is inherited from {@link parseAssignmentBranchForms}, so
+ * a whole dispatch may be passed). */
 export declare function parseBranchPolicyDirectOnBranch(assignmentText: string): string | undefined;
 /**
  * True when the Assignment's `Execute as` role is a read-only orientation
@@ -134,11 +159,23 @@ export declare function isReadOnlyAssignmentRole(roleId: string): boolean;
  *
  * Required: `Execute as` / `Delegation` / `Task category` present with
  * non-empty values (paste-only shells are caught here — every field missing).
- * Writable assignments must carry EXACTLY ONE branch form; `create <new>
+ * Review-seat and audit rounds must additionally declare both round-bounding
+ * fields, `Budget (review / QC seats)` and `Return shape (review / QC
+ * seats)` (one violation code per missing label). Writable assignments must
+ * carry EXACTLY ONE branch form; `create <new>`
  * from <base>` without `<base>` (incl. the dangling `create <new> from`
  * / `create from <base>` typos) and `Branch policy` without branch/reason
  * are flagged. The three core-field violations carry the legacy
- * `assignment.presence.*` codes as aliases. */
+ * `assignment.presence.*` codes as aliases.
+ *
+ * Every read is scoped to the Assignment HEADER region — the scope is
+ * applied by the field parsers themselves ({@link parseAssignmentFields} /
+ * {@link parseAssignmentBranchForms}), never the task body — the same rule
+ * {@link parseEnforcementFlag} follows at the compose gate. Dispatch text
+ * routinely quotes the field labels (template blocks, `## Task` bodies, the
+ * `**Task**:` line's own prose), and a quoted `**Budget (review / QC
+ * seats)**: …` line must not satisfy a gate the Assignment header left
+ * open. */
 export declare function validateAssignmentFields(assignmentText: string, opts?: ValidateAssignmentFieldsOptions): GateResult;
 /**
  * Flag writable work on a default protected branch (`main`/`master` per

package/dist/engine.js

@@ -600,12 +600,18 @@ var REQUIRED_FIELDS = [
   { key: "delegation", label: "Delegation", code: "delegation" },
   { key: "taskCategory", label: "Task category", code: "task-category" }
 ];
+var REVIEW_SEAT_ROLES = ["qc-specialist", "qc-specialist-2", "qc-specialist-3", "code-reviewer", "qa-engineer"];
+var BUDGET_LABELS = ["Budget (review / QC seats)", "Budget"];
+var RETURN_SHAPE_LABELS = ["Return shape (review / QC seats)", "Return shape"];
 function violation2(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
+function describeAbsence(value) {
+  return value === undefined ? "the field is absent" : value === "" ? "the field is empty" : value.trim().toLowerCase() === "n/a" ? 'the value is "N/A"' : undefined;
+}
 function parseAssignmentFields(assignmentText) {
   const fields = {};
-  for (const line of assignmentText.split(/\r?\n/)) {
+  for (const line of assignmentHeaderRegion(assignmentText).split(/\r?\n/)) {
     const match = line.match(/^[ \t]*(?:[-*][ \t]+)?\*\*\s*([^*:]+?)\s*\*\*\s*:\s*(.*)$/) ?? line.match(/^[ \t]*(?:[-*][ \t]+)?([A-Za-z][A-Za-z -]*?)\s*:\s*(.*)$/);
     if (!match)
       continue;
@@ -620,6 +626,10 @@ function parseAssignmentFields(assignmentText) {
       fields.workingBranch = value;
     else if (label === "Branch policy")
       fields.branchPolicy = value;
+    else if (BUDGET_LABELS.includes(label))
+      fields.budget = value;
+    else if (RETURN_SHAPE_LABELS.includes(label))
+      fields.returnShape = value;
   }
   return fields;
 }
@@ -707,6 +717,33 @@ function validateAssignmentFields(assignmentText, opts = {}) {
   for (const { key, label, code } of REQUIRED_FIELDS) {
     requireField(violations, fields[key], label, code);
   }
+  const role = (fields.executeAs ?? "").trim().replace(/^@/, "").toLowerCase().split(/\s+/)[0] ?? "";
+  const reviewSeat = REVIEW_SEAT_ROLES.includes(role);
+  const category = (fields.taskCategory ?? "").replace(/^[*_`"'\s]+/, "").toLowerCase();
+  const auditRound = /^audit(?![A-Za-z0-9])/.test(category);
+  if (reviewSeat || auditRound) {
+    const subject = reviewSeat ? `review seat "${role}"` : `audit round (Task category: ${category})`;
+    const boundingFields = [
+      {
+        code: "assignment.field.budget-missing",
+        label: "Budget",
+        fix: `add "**Budget (review / QC seats)**: <cap> — may only tighten the default in mstar-harness-core § 定向执行与验证边界, never loosen it"`,
+        value: fields.budget
+      },
+      {
+        code: "assignment.field.return-shape-missing",
+        label: "Return shape",
+        fix: `add "**Return shape (review / QC seats)**: <what the seat returns and how it stops — verdict + findings shape; a clean round returns findings: [] explicitly>"`,
+        value: fields.returnShape
+      }
+    ];
+    for (const field of boundingFields) {
+      const missing = describeAbsence(field.value);
+      if (missing === undefined)
+        continue;
+      violations.push(violation2("high", field.code, `${subject} must declare a round ${field.label} — ${missing}`, field.fix));
+    }
+  }
   if (writable) {
     const workingPresent = fields.workingBranch !== undefined && fields.workingBranch !== "";
     const policyPresent = fields.branchPolicy !== undefined && fields.branchPolicy !== "";
@@ -2039,7 +2076,9 @@ function findingsCleanupGate(register, planId, opts) {
     const id = typeof entry.id === "string" ? entry.id : "<unnamed>";
     const label = `R#${id}`;
     if (mode === "zero-residual") {
-      if (entry.severity === "nit") {
+      if (normalizeSeverity(entry.severity) === "critical") {
+        violations.push(violation6("high", "findings.zero-residual-critical", `${label}: unresolved critical blocks approval under zero-residual — fix now or close via explicit risk acceptance`));
+      } else if (entry.severity === "nit") {
         violations.push(violation6("medium", "findings.zero-residual-nit", `${label}: style-only nits must be fixed in-session or dropped — never left open under zero-residual`));
       } else if (entry.decision === "risk-accepted" || entry.lifecycle === "waived") {
         violations.push(violation6("medium", "findings.zero-residual-risk-accepted", `${label}: waived/risk-accepted findings must be closed/archived, not left open under zero-residual`));
@@ -8447,6 +8486,203 @@ function resolvePrReviewTier(input) {
     return "quick";
   return "default";
 }
+// src/qcreview.ts
+var QC_VERDICTS = ["Approve", "Request Changes", "Needs Discussion", "Unconfirmed"];
+var REPORT_FIELDS = ["report_kind", "reviewer", "reviewer_index", "plan_id", "verdict", "generated_at"];
+var REPORT_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
+var REPORT_SEVERITIES = ["Critical", "Warning", "Suggestion", "Unconfirmed"];
+var BODY_VERDICT_RE = /^[ \t]*(?:[-*+][ \t]+)?(?:#{1,6}[ \t]+)?[*_\s]*Verdict[*_\s]*:[ \t]*(.*)$/i;
+var VERDICT_DECORATION_RE = /^[*_`"'\s~]+/;
+var TRUNCATED_COVERAGE_RE = /^[ \t]*(?:[-*+][ \t]+)?(?:\*\*)?Truncated coverage(?:\*\*)?[ \t]*:/;
+var EMPTY_SECTION_RE = /^(?:\(none\)|none(?![A-Za-z])|\uff08?\u65e0\uff09?)/i;
+var LIST_ITEM_RE = /^(?:[-*][ \t]+|\d+[.)][ \t]+)(.*)$/;
+function sectionRange(lines, heading) {
+  const start = lines.findIndex((line) => {
+    const m = /^(#{1,6})[ \t]+(.*?)[ \t]*$/.exec(line);
+    return m !== null && m[1].length === 2 && m[2] === heading;
+  });
+  if (start < 0)
+    return;
+  let end = lines.length;
+  for (let i = start + 1;i < lines.length; i++) {
+    if (/^##[ \t]/.test(lines[i])) {
+      end = i;
+      break;
+    }
+  }
+  return [start + 1, end];
+}
+function bodyLines(lines) {
+  if (lines[0]?.trim() !== "---")
+    return lines;
+  for (let i = 1;i < lines.length; i++) {
+    if (lines[i].trim() === "---")
+      return lines.slice(i + 1);
+  }
+  return lines;
+}
+function linesUnclosedFence(text) {
+  const lines = text.replace(/^\uFEFF/, "").split(/\r?\n/);
+  if (lines.length === 0 || lines[0].trim() !== "---")
+    return false;
+  return !lines.slice(1).some((line) => line.trim() === "---");
+}
+function tableCells(line) {
+  const trimmed = line.trim();
+  if (!trimmed.startsWith("|") || !trimmed.endsWith("|"))
+    return;
+  const cells = trimmed.slice(1, -1).split("|").map((cell) => cell.trim());
+  return cells.length >= 2 ? cells : undefined;
+}
+function namesSeverity(text, severity) {
+  const index = text.indexOf(severity);
+  if (index < 0)
+    return false;
+  return !/[A-Za-z]/.test(text.charAt(index - 1)) && !/[A-Za-z]/.test(text.charAt(index + severity.length));
+}
+function summaryCounts(lines) {
+  const counts = {};
+  const range = sectionRange(lines, "Summary");
+  if (range === undefined)
+    return counts;
+  for (let i = range[0];i < range[1]; i++) {
+    const cells = tableCells(lines[i]);
+    if (cells === undefined)
+      continue;
+    const values = cells.slice(1).map((cell) => /(\d+)/.exec(cell)?.[1]);
+    const tail = values.filter((digits) => digits !== undefined).pop();
+    if (tail === undefined)
+      continue;
+    for (const severity of REPORT_SEVERITIES) {
+      if (!namesSeverity(cells[0], severity))
+        continue;
+      counts[severity] = Number(tail);
+    }
+  }
+  return counts;
+}
+function findingsCounts(lines) {
+  const counts = {};
+  const range = sectionRange(lines, "Findings");
+  if (range === undefined)
+    return counts;
+  let current;
+  for (let i = range[0];i < range[1]; i++) {
+    const line = lines[i];
+    const heading = /^###[ \t]+(.*?)[ \t]*$/.exec(line);
+    if (heading !== null) {
+      current = REPORT_SEVERITIES.find((severity) => namesSeverity(heading[1], severity));
+      if (current !== undefined && counts[current] === undefined)
+        counts[current] = 0;
+      continue;
+    }
+    if (current === undefined)
+      continue;
+    const item = LIST_ITEM_RE.exec(line);
+    if (item === null || EMPTY_SECTION_RE.test(item[1].trim()))
+      continue;
+    counts[current] = (counts[current] ?? 0) + 1;
+  }
+  return counts;
+}
+function bodyVerdictPhrase(lines) {
+  let phrase;
+  for (const line of bodyLines(lines)) {
+    const m = BODY_VERDICT_RE.exec(line);
+    if (m === null)
+      continue;
+    const text = m[1].trim().replace(VERDICT_DECORATION_RE, "");
+    phrase = text.split(/\s+/)[0] ?? "";
+    for (const verdict of [...QC_VERDICTS].sort((a, b) => b.length - a.length)) {
+      if (!text.startsWith(verdict))
+        continue;
+      const next = text.charAt(verdict.length);
+      if (next === "" || !/[A-Za-z0-9]/.test(next)) {
+        phrase = verdict;
+        break;
+      }
+    }
+  }
+  return phrase;
+}
+function violation16(severity, code, message, fix) {
+  return { ok: false, severity, code, message, fix };
+}
+function validateQcReport(text) {
+  const violations = [];
+  if (lines_missing_fence(text)) {
+    return {
+      ok: false,
+      violations: [
+        violation16("high", "qcreview.report.missing-frontmatter", "no `---` fenced frontmatter found - a QC seat report must open with the machine-readable frontmatter block (report-template.md § Frontmatter)", "open the report with `---` and the fields `report_kind: qc` / `reviewer` / `reviewer_index` / `plan_id` / `verdict` / `generated_at`")
+      ]
+    };
+  }
+  const lines = text.replace(/^\uFEFF/, "").split(/\r?\n/);
+  if (linesUnclosedFence(text)) {
+    return {
+      ok: false,
+      violations: [
+        violation16("high", "qcreview.report.unclosed-frontmatter", "the frontmatter `---` fence is never closed - every line after it is read as frontmatter, so the report body is not part of the document", "add a closing `---` line after the last frontmatter key (report-template.md § Frontmatter)")
+      ]
+    };
+  }
+  const { doc } = parseReportFrontmatter(text);
+  for (const field of REPORT_FIELDS) {
+    const value = doc[field];
+    if (value === undefined || value.trim() === "") {
+      violations.push(violation16("medium", `qcreview.report.missing-${field}`, `missing required frontmatter field: ${field}`, `add "${field}: <value>" to the frontmatter block (report-template.md § Frontmatter)`));
+    }
+  }
+  const reportKind = doc.report_kind?.trim() ?? "";
+  if (reportKind !== "" && reportKind !== "qc") {
+    violations.push(violation16("medium", "qcreview.report.invalid-report-kind", `report_kind "${reportKind}" is not "qc"`, "use `report_kind: qc` for a QC seat report (a PM consolidated report is not a seat report)"));
+  }
+  const frontmatterVerdict = doc.verdict?.trim() ?? "";
+  const frontmatterVerdictIsValid = QC_VERDICTS.includes(frontmatterVerdict);
+  if (frontmatterVerdict !== "" && !frontmatterVerdictIsValid) {
+    violations.push(violation16("medium", "qcreview.report.invalid-verdict", `frontmatter verdict "${frontmatterVerdict}" is not one of ${JSON.stringify(QC_VERDICTS)}`, `use one of: ${QC_VERDICTS.join(" | ")} - the vocabulary is verbatim (report-template.md § Report body template)`));
+  }
+  const generatedAt = doc.generated_at?.trim() ?? "";
+  if (generatedAt !== "" && !REPORT_DATE_RE.test(generatedAt)) {
+    violations.push(violation16("medium", "qcreview.report.invalid-generated-at", `generated_at "${generatedAt}" must be a calendar date (YYYY-MM-DD)`, 'write `generated_at: "YYYY-MM-DD"` (report-template.md § Frontmatter)'));
+  }
+  const bodyPhrase = bodyVerdictPhrase(lines);
+  const bodyPhraseIsValid = bodyPhrase !== undefined && QC_VERDICTS.includes(bodyPhrase);
+  if (bodyPhrase === undefined) {
+    violations.push(violation16("high", "qcreview.report.missing-body-verdict", "the report body carries no verdict line (`**Verdict**: <verdict>` or `## Verdict: <verdict>`)", `add a body verdict line using one of: ${QC_VERDICTS.join(" | ")}`));
+  } else if (!bodyPhraseIsValid) {
+    violations.push(violation16("high", "qcreview.report.verdict-mismatch", bodyPhrase === "" ? `the body verdict line is empty - expected one of ${JSON.stringify(QC_VERDICTS)}` : `body verdict "${bodyPhrase}" is not one of ${JSON.stringify(QC_VERDICTS)}`, `start the verdict line with one of: ${QC_VERDICTS.join(" | ")}`));
+  } else if (frontmatterVerdictIsValid && bodyPhrase !== frontmatterVerdict) {
+    violations.push(violation16("high", "qcreview.report.verdict-mismatch", `body verdict "${bodyPhrase}" does not match the frontmatter verdict "${frontmatterVerdict}"`, "make the frontmatter verdict and the body verdict line agree on the same final verdict"));
+  }
+  const summary = summaryCounts(lines);
+  const findings = findingsCounts(lines);
+  for (const severity of REPORT_SEVERITIES) {
+    const claimed = summary[severity];
+    const counted = findings[severity];
+    if (claimed === undefined || counted === undefined || claimed === counted)
+      continue;
+    violations.push(violation16("high", "qcreview.report.summary-count-mismatch", `## Summary ${severity} count ${claimed} does not match the ${counted} top-level entr${counted === 1 ? "y" : "ies"} under ## Findings (§ ${severity})`, `recount § ${severity} and update the ## Summary row - one top-level entry per finding, detail lines indented (report-template.md § Findings)`));
+  }
+  const effectiveVerdict = frontmatterVerdictIsValid ? frontmatterVerdict : bodyPhraseIsValid ? bodyPhrase : undefined;
+  if (effectiveVerdict !== undefined) {
+    const critical = summary.Critical;
+    const warning = summary.Warning;
+    const blocking = (critical ?? 0) + (warning ?? 0);
+    if (effectiveVerdict === "Approve" && blocking > 0) {
+      violations.push(violation16("high", "qcreview.report.verdict-contradicts-counts", `verdict "Approve" with ${blocking} Critical/Warning finding(s) in ## Summary (Critical ${critical ?? 0}, Warning ${warning ?? 0})`, 'do not Approve with open Critical/Warning findings - close them or use "Request Changes" / "Needs Discussion"'));
+    }
+    const unconfirmed = summary.Unconfirmed;
+    if (unconfirmed !== undefined && unconfirmed > 0 && effectiveVerdict !== "Unconfirmed") {
+      violations.push(violation16("high", "qcreview.report.verdict-contradicts-counts", `verdict "${effectiveVerdict}" with ${unconfirmed} Unconfirmed finding(s) in ## Summary - a failed evidence channel transmits as "Unconfirmed" (mstar-review-qc § 席位预算与截断)`, 'set the verdict to "Unconfirmed" or re-establish the evidence channel before converging'));
+    }
+    if (effectiveVerdict === "Unconfirmed" && lines.some((line) => TRUNCATED_COVERAGE_RE.test(line))) {
+      violations.push(violation16("high", "qcreview.report.truncation-verdict", 'the report declares `Truncated coverage:` but carries the verdict "Unconfirmed" - a budget/scope cut is not a failed evidence channel', 'keep the verdict earned for the reviewed scope and reserve "Unconfirmed" for a failed evidence channel'));
+    }
+  }
+  return { ok: violations.length === 0, violations };
+}
 export {
   ARCHIVED_STATUS_V1_FILE,
   AUDIT_CATEGORIES,
@@ -8481,6 +8717,7 @@ export {
   PR_REVIEW_TIER_BUDGETS,
   PR_VERDICTS,
   QC_REVIEWER_PARAMS,
+  QC_VERDICTS,
   REVIEW_EMOJI,
   ROADMAP_STATUSES,
   ROLE_MAPPING,
@@ -8633,6 +8870,7 @@ export {
   validatePlanRow,
   validatePrReviewReport,
   validateProjectRegister,
+  validateQcReport,
   validateResidual,
   validateRoadmap,
   validateRoleMapping,

package/dist/index.d.ts

@@ -17,7 +17,10 @@
  * compound-refresh scope. `roles` validates the role reference mapping +
  * parameter tables and the load-order contract, `prreview` implements the
  * PR-review tally/score/verdict arithmetic and the merge-class/verdict
- * constants (mstar-audit pr-review.md § Tally and derived score), `host`
+ * constants (mstar-audit pr-review.md § Tally and derived score), `qcreview`
+ * is the QC seat-report contract (frontmatter fields + verbatim verdict
+ * vocabulary + body-verdict agreement + Summary/Findings count parity +
+ * truncation/verdict coherence, `mstar-review-qc` SKILL.md § 席位预算与截断), `host`
  * detects the active
  * host from tool shapes, resolves skill roots and defines the type-only
  * `HostAdapter` contract, `gates` is the host-neutral coordination-write
@@ -77,6 +80,8 @@ export type { FiveQuestionMode, FiveQuestionSection, SkillLintKind, SkillLintPro
 export { classifySkillLint, FIVE_QUESTION_SECTIONS, RUNTIME_HEADING_ALIASES, lintFiveQuestion, lintFrontmatter, resolveAssetPath, stripFrontmatter, } from "./skill-authoring.js";
 export type { MergeClass, MstarReviewFinding, MstarReviewV1, PrReportTarget, PrReviewSeatPromptOptions, PrReviewSizing, PrReviewTier, PrTierKeyword, PrSizeBand, PrTallyInput, PrTallyResult, PrVerdict, ResolvePrReviewTierInput, ReviewChangesetMode, ReviewInlineComment, ReviewPostPlan, ValidateFindingDocOptions, } from "./prreview.js";
 export { MERGE_CLASSES, PR_REVIEW_TIER_BUDGETS, PR_VERDICTS, REVIEW_EMOJI, computePrTally, pickReviewBranchName, planReviewPost, preflightChangeset, prReviewReportPath, prReviewSeatPrompt, prReviewSizing, resolvePrReviewTier, synthesizeReview, validateFindingDoc, validateMstarReviewV1, validatePrReviewReport, } from "./prreview.js";
+export type { QcVerdict } from "./qcreview.js";
+export { QC_VERDICTS, validateQcReport } from "./qcreview.js";
 export type { ArtifactDoc, ArtifactKind, ArtifactRef, ArtifactStore } from "./store.js";
 export { assertFsStorePath, createFsStore, getArtifactStore, loadStoreModule, resolveArtifactPath, setArtifactStore } from "./store.js";
 export { collectActiveLifecycleBranches, scanActiveLifecycleBranches, type ActiveLifecycleScan } from "./lifecycle-branches.js";

package/dist/project.d.ts

@@ -170,7 +170,9 @@ export declare function closeProjectRegisterEntry(opts: CloseProjectRegisterEntr
  * snapshot's plan row). Every OPEN entry of the plan is checked.
  * `zero-residual`: only true blocker-defers (`decision: defer` + non-empty
  * `target`) may stay open — fixable findings, `nit`s, and waived/
- * risk-accepted entries are violations. `allow-residual` (default): open
+ * risk-accepted entries are violations, and an unresolved Critical is a
+ * violation for EVERY decision (it must be fixed or closed by explicit
+ * risk acceptance, not carried as a defer). `allow-residual` (default): open
  * residuals are fine unless an unresolved Critical remains. Mode resolution:
  * explicit `opts.mode` → `allow-residual` (the v1
  * `plans[].metadata.findings_cleanup` mirror is deleted — no dual-track).

package/dist/prreview.d.ts

@@ -166,6 +166,16 @@ export declare function prReviewReportPath(opts: {
     stage?: 1 | 2;
     slug?: string;
 }): string;
+/**
+ * Parse the narrow frontmatter subset reports actually carry: scalar
+ * `key: value` lines inside a leading `---` fence (inline `# comment`
+ * tails stripped, surrounding quotes trimmed). Returns null when the fence
+ * is missing. Unreadable lines surface as violations, never throws.
+ */
+export declare function parseReportFrontmatter(text: string): {
+    doc: Record<string, string>;
+    unreadable: number;
+};
 /**
  * Validate a saved local PR-review report against the machine-readable
  * contract (pr-review.md § Local report archive Frontmatter + § Output
@@ -191,6 +201,8 @@ export declare function prReviewReportPath(opts: {
  * (legacy reports without elapsed still pass).
  */
 export declare function validatePrReviewReport(text: string): GateResult;
+/** True when `text` opens with a `---` fenced frontmatter block. */
+export declare function lines_missing_fence(text: string): boolean;
 /** One inline review comment: `path` + `line` in the three-dot diff, RIGHT
  * side only (§ Comment posting step 2 — comments[] entry shape). */
 export type ReviewInlineComment = {

package/dist/qcreview.d.ts

@@ -0,0 +1,50 @@
+/**
+ * qcreview — QC 席位报告契约（review-seat return side）。
+ *
+ * spec: `mstar-review-qc` SKILL.md § 席位预算与截断（该节 callout 声明的
+ * `qc validate-report`）、`report-template.md` § Frontmatter / § Report body
+ * template / § Findings（verdict 词表与报告形状逐字来源）、
+ * `qc-specialist-shared.md` § Budget and stopping / § Targeted re-review
+ * （就地 revalidation 刷新当前状态，报告只有一份计数）。
+ *
+ * 机器可判定的十一条规则（violation code 前缀一律 `qcreview.report.`）：
+ * 1. `missing-frontmatter` — 报告必须以 `---` 围栏 frontmatter 开头。
+ * 2. `unclosed-frontmatter` — 起始围栏必须有闭合 `---` 行。缺闭合行时其后的
+ *    全部内容都被读作 frontmatter（`parseReportFrontmatter` 直到文末收集
+ *    `key: value`），正文与 frontmatter 的边界不存在，后续规则无从判定。
+ * 3. `missing-<field>` — `report_kind` / `reviewer` / `reviewer_index` /
+ *    `plan_id` / `verdict` / `generated_at` 缺失或空值。
+ * 4. `invalid-report-kind` — `report_kind` 必须是 `qc`。
+ * 5. `invalid-verdict` — frontmatter `verdict` 必须逐字属于 `QC_VERDICTS`。
+ * 6. `invalid-generated-at` — `generated_at` 必须是日历日期 `YYYY-MM-DD`。
+ * 7. `missing-body-verdict` — 正文必须有 verdict 行。
+ * 8. `verdict-mismatch` — 正文 verdict 取词必须属于 `QC_VERDICTS` 且与
+ *    frontmatter verdict 一致；允许尾随散文（真实报告写
+ *    `**Verdict**: Approve. The diff keeps ...`，历史上还出现
+ *    `## Verdict: **Approve with residuals**`）。
+ * 9. `summary-count-mismatch` — `## Summary` 计数必须等于 `## Findings`
+ *    对应 severity 分区的顶层条目数（`None.` = 0）。`## Summary` 是报告
+ *    唯一的当前计数：就地 revalidation 刷新它与 `## Findings`，
+ *    `## Revalidation` 只记过程与逐 finding 处置，不另立计数。
+ * 10. `verdict-contradicts-counts` — Critical / Warning 计数 > 0 不允许
+ *    `Approve`；Unconfirmed 计数 > 0 要求 verdict 为 `Unconfirmed`。
+ * 11. `truncation-verdict` — 已声明 `Truncated coverage:` 行时 verdict 不得为
+ *    `Unconfirmed`（截断是范围收缩，不是证据通道失败）。
+ *
+ * 不可判定即静默：形状未文档化（分区或计数行缺失、计数单元格非数字、
+ * frontmatter verdict 本身非法）时不出 violation，绝不猜测；每条 violation
+ * 都带可执行的 `fix`。
+ */
+import type { GateResult } from "./core.js";
+/**
+ * Verdict 词表 —— 逐字取自 `report-template.md` § Report body template。
+ * `Unconfirmed` 是证据通道失败态（不是"未审"），预算截断不得用它。
+ */
+export declare const QC_VERDICTS: readonly ["Approve", "Request Changes", "Needs Discussion", "Unconfirmed"];
+/** 席位报告 verdict 取值（`QC_VERDICTS` 成员）。 */
+export type QcVerdict = (typeof QC_VERDICTS)[number];
+/**
+ * Validate a QC 席位报告 against the rules in the module header.
+ * Structural checks only — 报告形状与 frontmatter 一致性，不重审审查内容。
+ */
+export declare function validateQcReport(text: string): GateResult;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mstar-harness/engine",
-  "version": "3.9.0",
+  "version": "3.9.2",
   "description": "Morning Star Harness Workflow Engine — deterministic workflow enforcement library (path, status, lease, dispatch, sdd, iteration, lint gates).",
   "license": "MIT",
   "repository": {