@pm_zhousl/xinyun-ai-init 1.10.1 → 1.12.0

package/init/xinyun-ai-init/README.md

@@ -2,7 +2,7 @@
 
 本目录是“欣芸技术开发 Agent 流”的初始化包，负责把完整 AI 执行要求下发到目标项目。
 
-当前规则版本：`1.10.1`。
+当前规则版本：`1.12.0`。
 
 ## Codex 一句话入口
 
@@ -54,6 +54,8 @@ AI 读取本文件后，必须按以下方式执行：
 24. 初始化控制面完成后归档初始化登记任务，更新 `xinyun-ai/tasks/task-index.json`；没有可执行任务时 `current-task.md` 使用 `status=idle`、`taskId=null`、`title=暂无待执行任务`。
 25. 用户一句话初始化授权包含 `.codegraph/` 工具控制目录；首次缺失且命令可用时自动执行一次 `codegraph init -i`，不自动安装 CodeGraph 或修改系统环境。
 26. 完成后用中文输出初始化或升级结果、项目导读、团队责任状态、任务状态、CodeGraph 状态、待确认问题和后续短指令。
+27. v1.10.2 必须区分宿主线程、宿主会话、项目会话和主调度会话；真实 sessionId 只能来自宿主返回值，无法验证时保持 blocked。
+28. v1.11.0 使用固定模板物化、阶段状态、项目快照、24 小时缓存和最多 3 个角色并发；缓存命中不能跳过必要会话、授权或最终门禁。
 
 ## 初始化授权边界
 

package/init/xinyun-ai-init/rules/directory-self-completion.md

@@ -34,6 +34,10 @@
 - `framework-profile.json` 和 `migration-record.json` 创建后必须确认 JSON 可解析，并同步 `xinyun-ai/index/project-index.json`。
 - 首次极速初始化不强制创建上述目录；普通咨询也不创建迁移或 profile 记录。
 
+## v1.12 接管恢复目录
+
+When takeover initialization is authorized, create `host-preflight.json`, `index/initialization-recovery.json`, `sessions/manual-bindings.json`, `index/shared-project-snapshot.json`, and `index/initialization-timing.json` under `xinyun-ai/`. Use atomic writes and preserve blocked state on host or permission failure.
+
 ## v1.7.1 任务树、归档与 CodeGraph 目录
 
 - 初始化或升级流程必须补齐 `xinyun-ai/tasks/task-index.json`、`xinyun-ai/tasks/archive/`、`xinyun-ai/tasks/.archive-transactions/`、`xinyun-ai/tasks/.archive-tmp/`。

package/init/xinyun-ai-init/rules/init-rules.md

@@ -56,6 +56,19 @@
 - CodeGraph 必需任务失败时进入 `blocked`；只有用户明确授权限定范围降级时才允许 `partial`。
 - 不自动安装 CodeGraph，不修改系统环境、业务代码、数据库、API、配置、依赖或 Git。
 
+## v1.12 initialization gate recovery
+
+Run the seven-capability host preflight before role sessions. Materialize the main task and five role tasks first; on failure preserve `sessionId=null`, `blockedReason`, and `nextAction`. Explicit `确认执行` or `确认继续初始化` reuses task IDs and increments `attempt` without duplicates.
+
+## v1.10.2 and v1.11.0 gate
+
+- Keep `hostThreadId`, `hostSessionId`, `projectSessionId`, and `orchestratorSessionId` separate. Any value without host evidence remains `null`.
+- All five role sessions and the orchestrator must use unique, host-returned session IDs. A host thread, task ID, role ID, title, or random value is never a session ID.
+- Use the v1.9 eight-field RFC8785-JCS-SHA-256 project-isolated reuse key. The legacy four-field index is creation compatibility only.
+- `task.status` is the cross-file source of truth. Illegal task/result/lock combinations become `blocked` and stop further writes.
+- `businessCodeChanged.value=no` requires structured evidence; without evidence it must be `unknown`. Missing real behavior evidence cannot produce `ready`.
+- v1.11 stages are `preflight`, `fixed-materialization`, `control-plane`, `codegraph`, `bootstrap-snapshot`, `role-sessions`, `onboarding`, and `final-gate`. Fixed templates, a bounded project snapshot, a 24-hour cache, and at most three role sessions may reduce repeated work but cannot bypass the final gate.
+
 ## v1.7.2 角色后续任务可见性
 
 - 初始化主任务使用 `taskKind=initialization-main`；角色登记使用 `taskKind=initialization-record`；后续执行任务使用 `taskKind=role-execution`。

package/init/xinyun-ai-init/rules/session-workbench.md

@@ -285,6 +285,10 @@ HTML 迁移只允许评估和单页面 / 区块试点计划；实际代码迁移
 
 任何跨会话冲突、状态源缺失、预算超限、权限失败或敏感信息无法确认时暂停或阻塞，不自动重试、合并、覆盖或释放。
 
+## v1.12 host preflight and resumable sessions
+
+Record all seven host capabilities before role sessions. `available-with-dependency` is not ready until authorized. Manual binding requires a real host-returned session ID and interaction evidence; host thread IDs cannot substitute for project session IDs.
+
 ## v1.10 接管 preflight 与交接
 
 交接必须记录 host capability、真实 sessionId、executionEligible 和阻塞原因；宿主不支持时保持 sessionId=null，不得伪造 sessionId。

package/init/xinyun-ai-init/rules/upgrade-rules.md

@@ -116,6 +116,10 @@
 
 升级先校验共享事实、状态源和 coordination transaction；再校验 Skill registry、`assignmentStatus`/`usageStatus` 映射；然后处理前端 audit-only 或已确认的单页面试点；最后才创建临时程序员会话。已有用户修改的控制文件不得静默覆盖，冲突或哈希不一致进入 `blocked`/`recovery-required`。
 
+## v1.12 recovery and host preflight
+
+Before upgrade role-session work, read `xinyun-ai/index/initialization-recovery.json` and `xinyun-ai/host-preflight.json`. Only explicit `确认执行` or `确认继续初始化` resumes the original task IDs with an incremented attempt; missing host sessions remain `sessionId=null` and blocked.
+
 ## v1.10 接管状态升级与恢复
 
 升级前读取 `projectStatus` 和全部 preflight 控制文件；冲突进入 blocked/recovery-required，不覆盖用户修改。

package/init/xinyun-ai-init/rules/v1.10.2-contract.md

@@ -0,0 +1,30 @@
+# v1.10.2 contract
+
+This contract is the implementation boundary for real role-session takeover.
+
+## Identity
+
+Keep these identities separate: `hostThreadId`, `hostSessionId`, `projectSessionId`, and `orchestratorSessionId`. A host thread, task ID, role ID, title, or random value is never a project session ID. A value without host evidence remains `null` and the mapping status remains `unbound`, `unknown`, or `failed`.
+
+Every role binding records `projectRootHash`, `workspaceScope`, `repositoryScopeHash`, `workstream`, `taskId`, `roleId`, `provider`, and `targetVersion`. The reuse key is `RFC8785-JCS-SHA-256` over these fields. The old four-field index is compatibility-only and never selects or reuses a candidate.
+
+## State source and legal combinations
+
+`task.status` is the cross-file source of truth. `current-task.md`, `tasks/<taskId>.md`, `init-result.json`, and `task-lock.json` must reference the same `taskId`, `executionId`, `attempt`, and status evidence.
+
+Legal combinations are:
+
+- `task/result=completed` with `lock=released`.
+- `task/result=partial` with `lock=released`.
+- `task/result=blocked` with `lock=blocked` or `lock=unknown`.
+- `task/result=cancelled` with `lock=released`.
+
+An illegal combination is `blocked`, stops further writes, and creates a recovery record. `partial` means a bounded non-blocking part completed; `blocked` means a required gate, identity, write, lock, or evidence condition prevents continuation.
+
+## Evidence and safety
+
+`businessCodeChanged.value=no` requires evidence objects with `evidenceType`, `path`, `beforeHash`, `afterHash`, and `checkedAt`. Without evidence the value is `unknown`. Real session creation, send, receive, status, and recovery evidence must include the real returned `sessionId`, request/response IDs or hashes, snapshots, changed files, forbidden operations, and sensitive-scan status.
+
+The project cannot become `ready` until the orchestrator and all five required role sessions have valid identity evidence, authorization, onboarding, and execution eligibility. Missing host capability stays `blocked`; local degradation may document the task but cannot authorize business-code execution or invent a session ID.
+
+Database access remains `sql-only`. Without explicit user authorization, output SQL and a plan only; do not connect, install a driver, or execute a statement.

package/init/xinyun-ai-init/rules/v1.11.0-acceleration.md

@@ -0,0 +1,27 @@
+# v1.11.0 initialization acceleration contract
+
+v1.11.0 accelerates control-plane initialization without weakening the v1.10.2 takeover gate.
+
+## Stages
+
+Run stages in this order: `preflight`, `fixed-materialization`, `control-plane`, `codegraph`, `bootstrap-snapshot`, `role-sessions`, `onboarding`, and `final-gate`. Each stage records `stageId`, `status`, `startedAt`, `finishedAt`, `durationMs`, `attempt`, `cacheHit`, `failureReason`, and `nextAction`.
+
+Stage states are `pending`, `running`, `completed`, `skipped`, `partial`, `blocked`, and `recovery-required`. Project states are `initializing`, `partial`, `blocked`, and `ready`. A failed required stage cannot be silently skipped or changed to `ready`.
+
+## Fixed materialization
+
+The package owns the fixed-file manifest and template hashes. Materialize only registered control files under `AGENTS.md`, `xinyun-ai/`, and `xinyun-ai-init/`. Compare baseline, current, and template hashes before writing. Missing files may be created; user-modified files become `conflict-pending`; unreadable or unverifiable files become `unknown`. Use a temporary file, complete write, and atomic rename.
+
+## Snapshot and cache
+
+Create one current-project bootstrap snapshot for the five roles to read. It must contain project identity, repository/workstream summary, detected framework evidence, CodeGraph status, scan budget, evidence, coverage, unverified scope, and a snapshot hash. It must never contain another project, raw secrets, tokens, passwords, private keys, or complete sensitive responses.
+
+Reuse requires a cache key over project identity, target version, fixed-template hash, CodeGraph index hash, snapshot hash, and role-binding summary. The default cache lifetime is 24 hours. Cache corruption, expiry, clock rollback, identity change, template change, CodeGraph change, snapshot change, or session evidence expiry exits the fast path and records `unknown` or revalidation.
+
+## Parallel role sessions
+
+Role-session creation may run with an effective concurrency of at most 3 by default. If the host cannot parallelize, fall back to serial execution and record `concurrencyFallback`. Each role remains independently bound and evidenced; a successful role never substitutes for a failed role. Same-domain tasks remain queued or blocked by the existing coordination rules.
+
+## Final gate
+
+Only a complete final gate may produce `projectStatus=ready`. The output must show completed stages, skipped stages, cache hits, parallelism, unverified scope, blockers, recovery actions, and forbidden operations. No business code, database, API, dependency, configuration, Git write, or npm publish operation is part of this acceleration feature.

package/init/xinyun-ai-init/rules/v1.12.0-recovery.md

@@ -0,0 +1,34 @@
+# v1.12.0 initialization gate recovery contract
+
+v1.12 keeps the v1.10 takeover gate and v1.11 acceleration boundary. It adds a bounded host preflight, task-first initialization, resumable role-session binding, CodeGraph reuse, one shared project snapshot, and stage timing. The npm CLI still creates only `xinyun-ai-init/`.
+
+## Host preflight
+
+- Before creating or reusing role sessions, check `createRealSession`, `reuseExistingSession`, `sendTask`, `receiveResult`, `recoverSession`, `closeSession`, and `controlFileReadWrite`.
+- Every capability record uses `capabilityId`, `detectionMethod`, `status`, `evidence`, `dependencyStatus`, `fallbackPlan`, `usedTools`, `unusedTools`, `unverifiedScope`, `failureReason`, and `checkedAt`.
+- `available-with-dependency` requires dependency authorization. `unknown`, `unavailable`, `permission-denied`, `failed`, `not-checked`, `not-verified`, and an unauthorized dependency block `ready`.
+- A host thread ID is not a project session ID. Without a real host-returned session ID, keep `sessionId=null`, record the blocker, and do not fabricate an ID.
+
+## Task first and resume
+
+- The first initialization write creates one named main task and five role task records before attempting role sessions. The task records remain when host preflight fails.
+- A failed preflight records `sessionId=null`, `blockedReason`, `failureReason`, and `nextAction`; it does not delete tasks or write an idle current task while active tasks exist.
+- Explicit `确认执行` or `确认继续初始化` resumes the same `taskId` and role task IDs from the recorded stage, increments `attempt`, and creates no duplicate tasks.
+- Recovery uses atomic temp-file, fsync, rename, and recovery evidence. Conflicts, user-edited control files, or lock failures pause or block without overwrite or forced unlock.
+
+## Manual binding
+
+- A user may bind a real role session through `manual-session-bindings.json`. The record must contain role/task IDs, a host-returned `sessionId`, `boundBy`, `boundAt`, interaction and before/after snapshot evidence, and an audit entry.
+- No evidence means `bindingStatus=blocked` or `pending` and `executionEligible=false`. A bound session becomes eligible only after evidence verification, role onboarding, responsibility confirmation, and all existing gates pass.
+
+## CodeGraph and shared snapshot
+
+- Reuse a healthy or initialized CodeGraph index by matching `codeGraphRecordId`, index hash, and source revision. Otherwise run the existing `codegraph init -i` boundary when authorized and available; do not install CodeGraph or repair business code.
+- Record version, index hash, source revision, parse failures, unindexed scope, and failure reason. A required failure cannot claim complete understanding.
+- Build one `shared-project-snapshot.json` for the five roles. Reuse it while business baseline, control-plane hash, CodeGraph index hash, and source revision are unchanged. Rebuild only when a refresh trigger is recorded.
+
+## Timing and safety
+
+- Record each stage's attempt, status, start/end, duration, cache hit, failure reason, bottleneck, and recovery action. Stage timing is evidence, not permission to skip a gate.
+- Git none, no test framework, and missing optional toolchains are recorded as limited coverage and do not alone block. Database defaults remain `authorization=not-requested`, `executionStatus=needs-confirmation`, `redactionStatus=verified`; do not connect or execute SQL.
+- Sensitive values never enter tasks, logs, handoffs, JSON, Markdown, stdout, or stderr. No business code, database, API, dependency, system environment, Git write, or npm publish operation is authorized by initialization.

package/init/xinyun-ai-init/templates/bootstrap-snapshot.template.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": 1,
+  "snapshotId": "bootstrap-snapshot-template",
+  "projectRootHash": null,
+  "repositoryScopeHash": null,
+  "workstreams": [],
+  "detectedFrameworks": [],
+  "codeGraph": {"recordId": null, "status": "unknown", "indexHash": null, "checkedAt": null},
+  "scanBudget": {"maxDepth": 3, "maxFiles": 60, "maxMatches": 200},
+  "evidence": [],
+  "coverage": "unknown",
+  "unverifiedScope": [],
+  "snapshotHash": null,
+  "sensitiveScan": {"status": "not-run", "matches": []},
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/core-rules.template.md

@@ -431,6 +431,8 @@ A single-role write failure records `status=blocked` and `blockedReason=write-fa
 v1.7.3 Codex role session orchestration is host-level only; CLI still only creates `xinyun-ai-init/`.
 v1.7.3 fixed Codex role session compatibility fields: `provider=codex`, `sessionStatus=pending/creating/created/onboarding/ready/blocked/failed/closed`, and legacy creation index `{taskId,roleId,provider,targetVersion}`. The v1.9 project-isolated role session reuse contract is authoritative.
 
+v1.12 host preflight and recovery are authoritative for initialization gating: materialize the main task and five role tasks first, preserve `sessionId=null` when the host is unavailable, resume only after `确认执行` or `确认继续初始化`, reuse task IDs while incrementing attempt, and require real evidence for manual session binding. Reuse healthy CodeGraph and one shared project snapshot only when their hashes and source revision remain stable. Record stage duration, cache hit, bottleneck, failure reason, and recovery action.
+
 ## v1.7.3 Codex 角色会话自动创建与绑定
 
 - v1.7.3 只在 5 个 `role-execution` 本地任务已经创建或恢复后，才由 Codex 主会话尝试创建 5 个真实角色子会话：`project-owner`、`project-product`、`chief-engineer`、`programmer`、`test-reviewer`。

package/init/xinyun-ai-init/templates/fixed-materialization.template.json

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": 1,
+  "manifestId": "fixed-materialization-template",
+  "targetVersion": "1.11.0",
+  "sourcePackage": "@pm_zhousl/xinyun-ai-init",
+  "hashAlgorithm": "SHA-256",
+  "statusEnum": ["pending", "created", "updated", "skipped", "conflict-pending", "unknown", "failed"],
+  "files": [],
+  "atomicWrite": {"required": true, "tempFile": true, "completeWrite": true, "rename": true},
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/host-capabilities.template.json

@@ -7,6 +7,8 @@
   "statusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
   "dependencyStatusEnum": ["not-required", "required", "authorized", "not-authorized", "unknown"],
   "capabilityRequiredFields": ["capabilityId", "detectionMethod", "status", "evidence", "dependencyStatus", "fallbackPlan", "usedTools", "unusedTools", "unverifiedScope", "failureReason", "checkedAt"],
+  "evidenceRequiredFields": ["evidenceType", "source", "summaryOrHash", "checkedAt"],
+  "unknownPolicy": "unknown-means-no-verifiable-evidence; never report verified or unavailable without evidence",
   "checkedAt": null,
   "capabilities": {
     "createRealSession": { "capabilityId": "createRealSession", "detectionMethod": "host-api", "status": "unknown", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "local-degraded-no-fake-session-id", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null },

package/init/xinyun-ai-init/templates/host-preflight.template.json

@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "preflightId": "host-preflight-template",
+  "status": "not-checked",
+  "statusEnum": ["not-checked", "running", "passed", "partial", "blocked", "failed", "unknown"],
+  "requiredCapabilities": [
+    "createRealSession",
+    "reuseExistingSession",
+    "sendTask",
+    "receiveResult",
+    "recoverSession",
+    "closeSession",
+    "controlFileReadWrite"
+  ],
+  "capabilityStatusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
+  "dependencyStatusEnum": ["not-required", "required", "authorized", "not-authorized", "unknown"],
+  "capabilities": {
+    "createRealSession": {"capabilityId": "createRealSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; keep sessionId=null", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "reuseExistingSession": {"capabilityId": "reuseExistingSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; query existing binding only", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "sendTask": {"capabilityId": "sendTask", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; preserve task for resume", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "receiveResult": {"capabilityId": "receiveResult", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; preserve task for resume", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "recoverSession": {"capabilityId": "recoverSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "manual binding with evidence", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "closeSession": {"capabilityId": "closeSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "manual host close", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "controlFileReadWrite": {"capabilityId": "controlFileReadWrite", "detectionMethod": "filesystem", "status": "not-checked", "evidence": [], "dependencyStatus": "not-required", "fallbackPlan": "blocked on control-file write failure", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null}
+  },
+  "realSessionIdEvidence": {"required": true, "sessionIds": [], "source": null, "verified": false},
+  "readyGate": {"allRequiredCapabilitiesPassed": false, "dependencyAuthorizationRequired": true, "unknownBlocksReady": true, "fakeSessionIdProhibited": true},
+  "nextAction": "Run host capability preflight before starting role sessions.",
+  "checkedAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/init-result.template.json

@@ -6,8 +6,10 @@
   "attempt": 1,
   "mode": "initialization",
   "status": "pending",
+  "statusEnum": ["pending", "initializing", "completed", "partial", "blocked", "unknown", "failed", "cancelled"],
+  "statusSource": "xinyun-ai/current-task.md",
   "currentVersion": null,
-  "targetVersion": "1.10.1",
+  "targetVersion": "1.12.0",
   "idempotencyKey": null,
   "createdFiles": [],
   "updatedFiles": [],
@@ -16,7 +18,8 @@
   "blockedReason": null,
   "businessCodeChanged": {
     "value": "unknown",
-    "evidence": []
+    "evidence": [],
+    "evidenceSchema": ["evidenceType", "path", "beforeHash", "afterHash", "checkedAt"]
   },
   "upgradeStatus": "not-started",
   "lockStatus": "released",
@@ -33,6 +36,8 @@
   },
   "roleSessions": {
     "provider": "codex",
+    "orchestratorSessionId": null,
+    "orchestratorIdentityType": "orchestrator-session",
     "parentSessionId": null,
     "requiredRoleCount": 5,
     "createdCount": 0,
@@ -41,9 +46,36 @@
     "blockedCount": 0,
     "localDegradedCount": 0,
     "bindings": [],
+    "identityMapping": {
+      "hostThreadId": null,
+      "hostSessionId": null,
+      "projectSessionId": null,
+      "orchestratorSessionId": null,
+      "mappingStatus": "pending",
+      "identityEvidence": [],
+      "creationEvidence": []
+    },
+    "realAiSessionVerified": false,
     "hostCapability": "unknown",
     "degradationReason": null
   },
+  "v112": {
+    "hostPreflightPath": "xinyun-ai/host-preflight.json",
+    "initializationRecoveryPath": "xinyun-ai/index/initialization-recovery.json",
+    "manualSessionBindingsPath": "xinyun-ai/sessions/manual-bindings.json",
+    "sharedProjectSnapshotPath": "xinyun-ai/index/shared-project-snapshot.json",
+    "initializationTimingPath": "xinyun-ai/index/initialization-timing.json",
+    "resumeStatus": "not-started",
+    "resumeStatusEnum": ["not-started", "ready-to-resume", "resuming", "completed", "blocked", "failed"],
+    "attempt": 1,
+    "reusedTaskIds": [],
+    "reusedRoleTaskIds": [],
+    "duplicateTasksCreated": 0,
+    "realSessionIdRequired": true,
+    "manualBindingEvidenceRequired": true,
+    "projectSnapshotReuse": "not-checked",
+    "stageTimingRecorded": false
+  },
   "v19": {
     "projectIdentityPath": "xinyun-ai/project-identity.json",
     "technicalLandscapePath": "xinyun-ai/technical-landscape.json",
@@ -60,6 +92,11 @@
     "connected": false,
     "evidence": []
   },
+  "sensitiveScan": {
+    "status": "not-run",
+    "scannedOutputs": [],
+    "matches": []
+  },
   "codeGraph": {
     "codeGraphRecordId": null,
     "statusSource": "xinyun-ai/manifest.json",

package/init/xinyun-ai-init/templates/initialization-cache.template.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": 1,
+  "cacheId": "initialization-cache-template",
+  "keyAlgorithm": "RFC8785-JCS-SHA-256",
+  "keyFields": ["projectRootHash", "targetVersion", "fixedTemplateHash", "codeGraphIndexHash", "snapshotHash", "roleBindingSummaryHash"],
+  "ttlHours": 24,
+  "statusEnum": ["valid", "expired", "corrupt", "unknown", "revalidate"],
+  "cacheKey": null,
+  "observedAt": null,
+  "expiresAt": null,
+  "invalidReason": null,
+  "sensitiveScan": {"status": "not-run", "matches": []}
+}

package/init/xinyun-ai-init/templates/initialization-recovery.template.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "recoveryId": "initialization-recovery-template",
+  "taskId": null,
+  "mainTaskId": null,
+  "roleTaskIds": [],
+  "attempt": 1,
+  "status": "not-started",
+  "statusEnum": ["not-started", "ready-to-resume", "resuming", "completed", "blocked", "failed"],
+  "resumeTriggers": ["确认执行", "确认继续初始化"],
+  "resumeFromStage": null,
+  "stageIdEnum": ["preflight", "task-materialization", "role-sessions", "codegraph", "snapshot", "onboarding", "final-gate"],
+  "reuseContract": {
+    "reuseTaskId": true,
+    "reuseRoleTaskIds": true,
+    "incrementAttempt": true,
+    "createDuplicateTasks": false,
+    "idempotencyKey": null,
+    "keyAlgorithm": "RFC8785-JCS-SHA-256"
+  },
+  "blockedRoles": [],
+  "blockedReason": null,
+  "nextAction": "Wait for explicit confirmation or repair the recorded blocker.",
+  "lastRecoveryAction": null,
+  "recoveryEvidence": [],
+  "atomicWrite": {"tempFileRequired": true, "fsyncBeforeRename": true, "rename": true, "recoveryOnFailure": true},
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/initialization-stages.template.json

@@ -0,0 +1,18 @@
+{
+  "schemaVersion": 1,
+  "initializationId": "initialization-template",
+  "status": "initializing",
+  "statusEnum": ["initializing", "partial", "blocked", "ready"],
+  "stageStatusEnum": ["pending", "running", "completed", "skipped", "partial", "blocked", "recovery-required"],
+  "stages": [
+    {"stageId": "preflight", "status": "pending", "attempt": 0, "cacheHit": false, "startedAt": null, "finishedAt": null, "durationMs": null, "failureReason": null, "nextAction": null},
+    {"stageId": "fixed-materialization", "status": "pending", "attempt": 0, "cacheHit": false, "startedAt": null, "finishedAt": null, "durationMs": null, "failureReason": null, "nextAction": null},
+    {"stageId": "control-plane", "status": "pending", "attempt": 0, "cacheHit": false, "startedAt": null, "finishedAt": null, "durationMs": null, "failureReason": null, "nextAction": null},
+    {"stageId": "codegraph", "status": "pending", "attempt": 0, "cacheHit": false, "startedAt": null, "finishedAt": null, "durationMs": null, "failureReason": null, "nextAction": null},
+    {"stageId": "bootstrap-snapshot", "status": "pending", "attempt": 0, "cacheHit": false, "startedAt": null, "finishedAt": null, "durationMs": null, "failureReason": null, "nextAction": null},
+    {"stageId": "role-sessions", "status": "pending", "attempt": 0, "cacheHit": false, "startedAt": null, "finishedAt": null, "durationMs": null, "failureReason": null, "nextAction": null},
+    {"stageId": "onboarding", "status": "pending", "attempt": 0, "cacheHit": false, "startedAt": null, "finishedAt": null, "durationMs": null, "failureReason": null, "nextAction": null},
+    {"stageId": "final-gate", "status": "pending", "attempt": 0, "cacheHit": false, "startedAt": null, "finishedAt": null, "durationMs": null, "failureReason": null, "nextAction": null}
+  ],
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/initialization-timing.template.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": 1,
+  "timingId": "initialization-timing-template",
+  "taskId": null,
+  "attempt": 1,
+  "status": "not-started",
+  "stageStatusEnum": ["pending", "running", "completed", "skipped", "partial", "blocked", "failed", "recovery-required"],
+  "stages": [],
+  "stageRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"],
+  "cacheSummary": {"hitCount": 0, "missCount": 0, "reusedSnapshot": false, "reusedCodeGraph": false, "reusedSessions": 0},
+  "bottlenecks": [],
+  "recoveryActions": [],
+  "totalDurationMs": null,
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/managed-baseline.template.json

@@ -3,13 +3,13 @@
   "hashAlgorithm": "sha256",
   "contentEncoding": "utf8-normalized",
   "managedBy": "@pm_zhousl/xinyun-ai-init",
-  "lastAppliedVersion": "1.10.1",
+  "lastAppliedVersion": "1.11.0",
   "files": [
     {
       "path": "xinyun-ai/rules/core-rules.md",
       "baselineHash": null,
       "templateHash": null,
-      "lastAppliedVersion": "1.10.1",
+      "lastAppliedVersion": "1.11.0",
       "managedBy": "@pm_zhousl/xinyun-ai-init",
       "status": "unknown"
     }

package/init/xinyun-ai-init/templates/manifest.template.json

@@ -1,6 +1,6 @@
 {
   "projectName": "",
-  "xinyunAiVersion": "1.10.1",
+  "xinyunAiVersion": "1.12.0",
   "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "initializationMode": "fast",
@@ -56,6 +56,11 @@
     ,"technicalLandscapeCoordination": true
     ,"databaseSqlOnlyAuthorization": true
     ,"projectAiTakeoverGate": true
+    ,"hostPreflightRecovery": true
+    ,"manualRoleSessionBinding": true
+    ,"codeGraphIncrementalReuse": true
+    ,"sharedProjectSnapshot": true
+    ,"initializationTiming": true
     ,"hostCapabilityPreflight": true
     ,"projectStatusGate": true
     ,"takeoverBaseline": true
@@ -94,7 +99,7 @@
     "bindings": "xinyun-ai/sessions/role-session-bindings.json",
     "bindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
     "parentSessionId": null,
-    "targetVersion": "1.10.1",
+    "targetVersion": "1.12.0",
     "requiredRoleCount": 5,
     "statusEnum": [
       "pending",
@@ -249,5 +254,34 @@
     "requiredRoleSessionBlockedReason": "required-role-session-not-created",
     "databaseDefault": { "authorization": "not-requested", "executionStatus": "needs-confirmation", "redactionStatus": "verified" },
     "readyRequires": ["projectIdentity", "codeGraph", "baseline", "teamResponsibility", "roleSessions", "taskTree", "localControlPlane", "legacyHandoff", "hostCapabilities", "sensitiveScan", "noHighRiskBlocker"]
+  },
+  "v112": {
+    "status": "implemented-in-package",
+    "capability": "initializationGateRecovery",
+    "hostPreflight": "xinyun-ai/host-preflight.json",
+    "initializationRecovery": "xinyun-ai/index/initialization-recovery.json",
+    "manualSessionBindings": "xinyun-ai/sessions/manual-bindings.json",
+    "sharedProjectSnapshot": "xinyun-ai/index/shared-project-snapshot.json",
+    "initializationTiming": "xinyun-ai/index/initialization-timing.json",
+    "hostCapabilityStatusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
+    "preflightRequiredCapabilities": ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "recoverSession", "closeSession", "controlFileReadWrite"],
+    "resumeConfirmationPhrases": ["确认执行", "确认继续初始化"],
+    "codeGraphReuseStatuses": ["healthy", "initialized"],
+    "projectSnapshotReusePolicy": "reuse-until-business-or-codegraph-hash-changes",
+    "stageTimingRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"]
+  },
+  "v111": {
+    "status": "implemented-in-package",
+    "capability": "initializationAcceleration",
+    "fixedMaterialization": "xinyun-ai/fixed-materialization.json",
+    "initializationStages": "xinyun-ai/initialization-stages.json",
+    "bootstrapSnapshot": "xinyun-ai/bootstrap-snapshot.json",
+    "initializationCache": "xinyun-ai/index/initialization-cache.json",
+    "parallelism": "xinyun-ai/sessions/parallelism.json",
+    "stageStatusEnum": ["pending", "running", "completed", "skipped", "partial", "blocked", "recovery-required"],
+    "projectStatusEnum": ["initializing", "partial", "blocked", "ready"],
+    "defaultRoleConcurrency": 3,
+    "cacheTtlHours": 24,
+    "cacheKeyAlgorithm": "RFC8785-JCS-SHA-256"
   }
 }

package/init/xinyun-ai-init/templates/manual-session-binding.template.json

@@ -0,0 +1,23 @@
+{
+  "schemaVersion": 1,
+  "bindingId": "manual-session-binding-template",
+  "taskId": null,
+  "roleTaskId": null,
+  "roleId": null,
+  "sessionId": null,
+  "sessionIdType": "host-returned-real-session",
+  "provider": "codex",
+  "boundBy": null,
+  "boundAt": null,
+  "evidence": [],
+  "evidenceRequiredFields": ["evidenceType", "source", "sessionId", "interactionHash", "beforeSnapshotHash", "afterSnapshotHash", "recordedAt"],
+  "bindingStatus": "pending",
+  "bindingStatusEnum": ["pending", "bound", "rejected", "blocked", "released"],
+  "executionEligible": false,
+  "eligibilityRule": "bound + real sessionId + evidence verified + role onboarding ready",
+  "fakeSessionIdProhibited": true,
+  "rejectionReason": null,
+  "audit": [],
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/parallelism.template.json

@@ -0,0 +1,13 @@
+{
+  "schemaVersion": 1,
+  "parallelismId": "parallelism-template",
+  "requestedConcurrency": 3,
+  "effectiveConcurrency": 0,
+  "maxConcurrency": 3,
+  "providerCapability": "unknown",
+  "concurrencyFallback": null,
+  "queueOrder": ["priority", "confirmedAt", "taskId"],
+  "roleRuns": [],
+  "startedAt": null,
+  "finishedAt": null
+}

package/init/xinyun-ai-init/templates/project-index.template.json

@@ -273,6 +273,35 @@
     "databaseDefault": { "authorization": "not-requested", "executionStatus": "needs-confirmation", "redactionStatus": "verified" },
     "readyRequires": ["projectIdentity", "codeGraph", "baseline", "teamResponsibility", "roleSessions", "taskTree", "localControlPlane", "legacyHandoff", "hostCapabilities", "sensitiveScan", "noHighRiskBlocker"]
   },
+  "v112": {
+    "status": "implemented-in-package",
+    "capability": "initializationGateRecovery",
+    "hostPreflight": "xinyun-ai/host-preflight.json",
+    "initializationRecovery": "xinyun-ai/index/initialization-recovery.json",
+    "manualSessionBindings": "xinyun-ai/sessions/manual-bindings.json",
+    "sharedProjectSnapshot": "xinyun-ai/index/shared-project-snapshot.json",
+    "initializationTiming": "xinyun-ai/index/initialization-timing.json",
+    "hostCapabilityStatusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
+    "preflightRequiredCapabilities": ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "recoverSession", "closeSession", "controlFileReadWrite"],
+    "resumeConfirmationPhrases": ["确认执行", "确认继续初始化"],
+    "codeGraphReuseStatuses": ["healthy", "initialized"],
+    "projectSnapshotReusePolicy": "reuse-until-business-or-codegraph-hash-changes",
+    "stageTimingRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"]
+  },
+  "v111": {
+    "status": "implemented-in-package",
+    "capability": "initializationAcceleration",
+    "fixedMaterialization": "xinyun-ai/fixed-materialization.json",
+    "initializationStages": "xinyun-ai/initialization-stages.json",
+    "bootstrapSnapshot": "xinyun-ai/bootstrap-snapshot.json",
+    "initializationCache": "xinyun-ai/index/initialization-cache.json",
+    "parallelism": "xinyun-ai/sessions/parallelism.json",
+    "stageStatusEnum": ["pending", "running", "completed", "skipped", "partial", "blocked", "recovery-required"],
+    "projectStatusEnum": ["initializing", "partial", "blocked", "ready"],
+    "defaultRoleConcurrency": 3,
+    "cacheTtlHours": 24,
+    "cacheKeyAlgorithm": "RFC8785-JCS-SHA-256"
+  },
   "requirementParsing": {
     "enabled": true,
     "trigger": "ambiguous_or_change_or_high_risk",

package/init/xinyun-ai-init/templates/requirement-packet.template.json

@@ -4,7 +4,7 @@
   "requirementId": null,
   "taskId": null,
   "projectRootHash": null,
-  "version": "1.10.1",
+  "version": "1.11.0",
   "status": "captured",
   "content": {
     "userQuote": null,