@pm_zhousl/xinyun-ai-init 1.11.0 → 1.12.0

package/init/xinyun-ai-init/README.md

@@ -2,7 +2,7 @@
 
 本目录是“欣芸技术开发 Agent 流”的初始化包，负责把完整 AI 执行要求下发到目标项目。
 
-当前规则版本：`1.11.0`。
+当前规则版本：`1.12.0`。
 
 ## Codex 一句话入口
 

package/init/xinyun-ai-init/rules/directory-self-completion.md

@@ -34,6 +34,10 @@
 - `framework-profile.json` 和 `migration-record.json` 创建后必须确认 JSON 可解析，并同步 `xinyun-ai/index/project-index.json`。
 - 首次极速初始化不强制创建上述目录；普通咨询也不创建迁移或 profile 记录。
 
+## v1.12 接管恢复目录
+
+When takeover initialization is authorized, create `host-preflight.json`, `index/initialization-recovery.json`, `sessions/manual-bindings.json`, `index/shared-project-snapshot.json`, and `index/initialization-timing.json` under `xinyun-ai/`. Use atomic writes and preserve blocked state on host or permission failure.
+
 ## v1.7.1 任务树、归档与 CodeGraph 目录
 
 - 初始化或升级流程必须补齐 `xinyun-ai/tasks/task-index.json`、`xinyun-ai/tasks/archive/`、`xinyun-ai/tasks/.archive-transactions/`、`xinyun-ai/tasks/.archive-tmp/`。

package/init/xinyun-ai-init/rules/init-rules.md

@@ -56,6 +56,10 @@
 - CodeGraph 必需任务失败时进入 `blocked`；只有用户明确授权限定范围降级时才允许 `partial`。
 - 不自动安装 CodeGraph，不修改系统环境、业务代码、数据库、API、配置、依赖或 Git。
 
+## v1.12 initialization gate recovery
+
+Run the seven-capability host preflight before role sessions. Materialize the main task and five role tasks first; on failure preserve `sessionId=null`, `blockedReason`, and `nextAction`. Explicit `确认执行` or `确认继续初始化` reuses task IDs and increments `attempt` without duplicates.
+
 ## v1.10.2 and v1.11.0 gate
 
 - Keep `hostThreadId`, `hostSessionId`, `projectSessionId`, and `orchestratorSessionId` separate. Any value without host evidence remains `null`.

package/init/xinyun-ai-init/rules/session-workbench.md

@@ -285,6 +285,10 @@ HTML 迁移只允许评估和单页面 / 区块试点计划；实际代码迁移
 
 任何跨会话冲突、状态源缺失、预算超限、权限失败或敏感信息无法确认时暂停或阻塞，不自动重试、合并、覆盖或释放。
 
+## v1.12 host preflight and resumable sessions
+
+Record all seven host capabilities before role sessions. `available-with-dependency` is not ready until authorized. Manual binding requires a real host-returned session ID and interaction evidence; host thread IDs cannot substitute for project session IDs.
+
 ## v1.10 接管 preflight 与交接
 
 交接必须记录 host capability、真实 sessionId、executionEligible 和阻塞原因；宿主不支持时保持 sessionId=null，不得伪造 sessionId。

package/init/xinyun-ai-init/rules/upgrade-rules.md

@@ -116,6 +116,10 @@
 
 升级先校验共享事实、状态源和 coordination transaction；再校验 Skill registry、`assignmentStatus`/`usageStatus` 映射；然后处理前端 audit-only 或已确认的单页面试点；最后才创建临时程序员会话。已有用户修改的控制文件不得静默覆盖，冲突或哈希不一致进入 `blocked`/`recovery-required`。
 
+## v1.12 recovery and host preflight
+
+Before upgrade role-session work, read `xinyun-ai/index/initialization-recovery.json` and `xinyun-ai/host-preflight.json`. Only explicit `确认执行` or `确认继续初始化` resumes the original task IDs with an incremented attempt; missing host sessions remain `sessionId=null` and blocked.
+
 ## v1.10 接管状态升级与恢复
 
 升级前读取 `projectStatus` 和全部 preflight 控制文件；冲突进入 blocked/recovery-required，不覆盖用户修改。

package/init/xinyun-ai-init/rules/v1.12.0-recovery.md

@@ -0,0 +1,34 @@
+# v1.12.0 initialization gate recovery contract
+
+v1.12 keeps the v1.10 takeover gate and v1.11 acceleration boundary. It adds a bounded host preflight, task-first initialization, resumable role-session binding, CodeGraph reuse, one shared project snapshot, and stage timing. The npm CLI still creates only `xinyun-ai-init/`.
+
+## Host preflight
+
+- Before creating or reusing role sessions, check `createRealSession`, `reuseExistingSession`, `sendTask`, `receiveResult`, `recoverSession`, `closeSession`, and `controlFileReadWrite`.
+- Every capability record uses `capabilityId`, `detectionMethod`, `status`, `evidence`, `dependencyStatus`, `fallbackPlan`, `usedTools`, `unusedTools`, `unverifiedScope`, `failureReason`, and `checkedAt`.
+- `available-with-dependency` requires dependency authorization. `unknown`, `unavailable`, `permission-denied`, `failed`, `not-checked`, `not-verified`, and an unauthorized dependency block `ready`.
+- A host thread ID is not a project session ID. Without a real host-returned session ID, keep `sessionId=null`, record the blocker, and do not fabricate an ID.
+
+## Task first and resume
+
+- The first initialization write creates one named main task and five role task records before attempting role sessions. The task records remain when host preflight fails.
+- A failed preflight records `sessionId=null`, `blockedReason`, `failureReason`, and `nextAction`; it does not delete tasks or write an idle current task while active tasks exist.
+- Explicit `确认执行` or `确认继续初始化` resumes the same `taskId` and role task IDs from the recorded stage, increments `attempt`, and creates no duplicate tasks.
+- Recovery uses atomic temp-file, fsync, rename, and recovery evidence. Conflicts, user-edited control files, or lock failures pause or block without overwrite or forced unlock.
+
+## Manual binding
+
+- A user may bind a real role session through `manual-session-bindings.json`. The record must contain role/task IDs, a host-returned `sessionId`, `boundBy`, `boundAt`, interaction and before/after snapshot evidence, and an audit entry.
+- No evidence means `bindingStatus=blocked` or `pending` and `executionEligible=false`. A bound session becomes eligible only after evidence verification, role onboarding, responsibility confirmation, and all existing gates pass.
+
+## CodeGraph and shared snapshot
+
+- Reuse a healthy or initialized CodeGraph index by matching `codeGraphRecordId`, index hash, and source revision. Otherwise run the existing `codegraph init -i` boundary when authorized and available; do not install CodeGraph or repair business code.
+- Record version, index hash, source revision, parse failures, unindexed scope, and failure reason. A required failure cannot claim complete understanding.
+- Build one `shared-project-snapshot.json` for the five roles. Reuse it while business baseline, control-plane hash, CodeGraph index hash, and source revision are unchanged. Rebuild only when a refresh trigger is recorded.
+
+## Timing and safety
+
+- Record each stage's attempt, status, start/end, duration, cache hit, failure reason, bottleneck, and recovery action. Stage timing is evidence, not permission to skip a gate.
+- Git none, no test framework, and missing optional toolchains are recorded as limited coverage and do not alone block. Database defaults remain `authorization=not-requested`, `executionStatus=needs-confirmation`, `redactionStatus=verified`; do not connect or execute SQL.
+- Sensitive values never enter tasks, logs, handoffs, JSON, Markdown, stdout, or stderr. No business code, database, API, dependency, system environment, Git write, or npm publish operation is authorized by initialization.

package/init/xinyun-ai-init/templates/core-rules.template.md

@@ -431,6 +431,8 @@ A single-role write failure records `status=blocked` and `blockedReason=write-fa
 v1.7.3 Codex role session orchestration is host-level only; CLI still only creates `xinyun-ai-init/`.
 v1.7.3 fixed Codex role session compatibility fields: `provider=codex`, `sessionStatus=pending/creating/created/onboarding/ready/blocked/failed/closed`, and legacy creation index `{taskId,roleId,provider,targetVersion}`. The v1.9 project-isolated role session reuse contract is authoritative.
 
+v1.12 host preflight and recovery are authoritative for initialization gating: materialize the main task and five role tasks first, preserve `sessionId=null` when the host is unavailable, resume only after `确认执行` or `确认继续初始化`, reuse task IDs while incrementing attempt, and require real evidence for manual session binding. Reuse healthy CodeGraph and one shared project snapshot only when their hashes and source revision remain stable. Record stage duration, cache hit, bottleneck, failure reason, and recovery action.
+
 ## v1.7.3 Codex 角色会话自动创建与绑定
 
 - v1.7.3 只在 5 个 `role-execution` 本地任务已经创建或恢复后，才由 Codex 主会话尝试创建 5 个真实角色子会话：`project-owner`、`project-product`、`chief-engineer`、`programmer`、`test-reviewer`。

package/init/xinyun-ai-init/templates/host-preflight.template.json

@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "preflightId": "host-preflight-template",
+  "status": "not-checked",
+  "statusEnum": ["not-checked", "running", "passed", "partial", "blocked", "failed", "unknown"],
+  "requiredCapabilities": [
+    "createRealSession",
+    "reuseExistingSession",
+    "sendTask",
+    "receiveResult",
+    "recoverSession",
+    "closeSession",
+    "controlFileReadWrite"
+  ],
+  "capabilityStatusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
+  "dependencyStatusEnum": ["not-required", "required", "authorized", "not-authorized", "unknown"],
+  "capabilities": {
+    "createRealSession": {"capabilityId": "createRealSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; keep sessionId=null", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "reuseExistingSession": {"capabilityId": "reuseExistingSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; query existing binding only", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "sendTask": {"capabilityId": "sendTask", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; preserve task for resume", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "receiveResult": {"capabilityId": "receiveResult", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; preserve task for resume", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "recoverSession": {"capabilityId": "recoverSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "manual binding with evidence", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "closeSession": {"capabilityId": "closeSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "manual host close", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "controlFileReadWrite": {"capabilityId": "controlFileReadWrite", "detectionMethod": "filesystem", "status": "not-checked", "evidence": [], "dependencyStatus": "not-required", "fallbackPlan": "blocked on control-file write failure", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null}
+  },
+  "realSessionIdEvidence": {"required": true, "sessionIds": [], "source": null, "verified": false},
+  "readyGate": {"allRequiredCapabilitiesPassed": false, "dependencyAuthorizationRequired": true, "unknownBlocksReady": true, "fakeSessionIdProhibited": true},
+  "nextAction": "Run host capability preflight before starting role sessions.",
+  "checkedAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/init-result.template.json

@@ -9,7 +9,7 @@
   "statusEnum": ["pending", "initializing", "completed", "partial", "blocked", "unknown", "failed", "cancelled"],
   "statusSource": "xinyun-ai/current-task.md",
   "currentVersion": null,
-  "targetVersion": "1.11.0",
+  "targetVersion": "1.12.0",
   "idempotencyKey": null,
   "createdFiles": [],
   "updatedFiles": [],
@@ -59,6 +59,23 @@
     "hostCapability": "unknown",
     "degradationReason": null
   },
+  "v112": {
+    "hostPreflightPath": "xinyun-ai/host-preflight.json",
+    "initializationRecoveryPath": "xinyun-ai/index/initialization-recovery.json",
+    "manualSessionBindingsPath": "xinyun-ai/sessions/manual-bindings.json",
+    "sharedProjectSnapshotPath": "xinyun-ai/index/shared-project-snapshot.json",
+    "initializationTimingPath": "xinyun-ai/index/initialization-timing.json",
+    "resumeStatus": "not-started",
+    "resumeStatusEnum": ["not-started", "ready-to-resume", "resuming", "completed", "blocked", "failed"],
+    "attempt": 1,
+    "reusedTaskIds": [],
+    "reusedRoleTaskIds": [],
+    "duplicateTasksCreated": 0,
+    "realSessionIdRequired": true,
+    "manualBindingEvidenceRequired": true,
+    "projectSnapshotReuse": "not-checked",
+    "stageTimingRecorded": false
+  },
   "v19": {
     "projectIdentityPath": "xinyun-ai/project-identity.json",
     "technicalLandscapePath": "xinyun-ai/technical-landscape.json",

package/init/xinyun-ai-init/templates/initialization-recovery.template.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "recoveryId": "initialization-recovery-template",
+  "taskId": null,
+  "mainTaskId": null,
+  "roleTaskIds": [],
+  "attempt": 1,
+  "status": "not-started",
+  "statusEnum": ["not-started", "ready-to-resume", "resuming", "completed", "blocked", "failed"],
+  "resumeTriggers": ["确认执行", "确认继续初始化"],
+  "resumeFromStage": null,
+  "stageIdEnum": ["preflight", "task-materialization", "role-sessions", "codegraph", "snapshot", "onboarding", "final-gate"],
+  "reuseContract": {
+    "reuseTaskId": true,
+    "reuseRoleTaskIds": true,
+    "incrementAttempt": true,
+    "createDuplicateTasks": false,
+    "idempotencyKey": null,
+    "keyAlgorithm": "RFC8785-JCS-SHA-256"
+  },
+  "blockedRoles": [],
+  "blockedReason": null,
+  "nextAction": "Wait for explicit confirmation or repair the recorded blocker.",
+  "lastRecoveryAction": null,
+  "recoveryEvidence": [],
+  "atomicWrite": {"tempFileRequired": true, "fsyncBeforeRename": true, "rename": true, "recoveryOnFailure": true},
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/initialization-timing.template.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": 1,
+  "timingId": "initialization-timing-template",
+  "taskId": null,
+  "attempt": 1,
+  "status": "not-started",
+  "stageStatusEnum": ["pending", "running", "completed", "skipped", "partial", "blocked", "failed", "recovery-required"],
+  "stages": [],
+  "stageRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"],
+  "cacheSummary": {"hitCount": 0, "missCount": 0, "reusedSnapshot": false, "reusedCodeGraph": false, "reusedSessions": 0},
+  "bottlenecks": [],
+  "recoveryActions": [],
+  "totalDurationMs": null,
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/manifest.template.json

@@ -1,6 +1,6 @@
 {
   "projectName": "",
-  "xinyunAiVersion": "1.11.0",
+  "xinyunAiVersion": "1.12.0",
   "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "initializationMode": "fast",
@@ -56,6 +56,11 @@
     ,"technicalLandscapeCoordination": true
     ,"databaseSqlOnlyAuthorization": true
     ,"projectAiTakeoverGate": true
+    ,"hostPreflightRecovery": true
+    ,"manualRoleSessionBinding": true
+    ,"codeGraphIncrementalReuse": true
+    ,"sharedProjectSnapshot": true
+    ,"initializationTiming": true
     ,"hostCapabilityPreflight": true
     ,"projectStatusGate": true
     ,"takeoverBaseline": true
@@ -94,7 +99,7 @@
     "bindings": "xinyun-ai/sessions/role-session-bindings.json",
     "bindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
     "parentSessionId": null,
-    "targetVersion": "1.11.0",
+    "targetVersion": "1.12.0",
     "requiredRoleCount": 5,
     "statusEnum": [
       "pending",
@@ -250,6 +255,21 @@
     "databaseDefault": { "authorization": "not-requested", "executionStatus": "needs-confirmation", "redactionStatus": "verified" },
     "readyRequires": ["projectIdentity", "codeGraph", "baseline", "teamResponsibility", "roleSessions", "taskTree", "localControlPlane", "legacyHandoff", "hostCapabilities", "sensitiveScan", "noHighRiskBlocker"]
   },
+  "v112": {
+    "status": "implemented-in-package",
+    "capability": "initializationGateRecovery",
+    "hostPreflight": "xinyun-ai/host-preflight.json",
+    "initializationRecovery": "xinyun-ai/index/initialization-recovery.json",
+    "manualSessionBindings": "xinyun-ai/sessions/manual-bindings.json",
+    "sharedProjectSnapshot": "xinyun-ai/index/shared-project-snapshot.json",
+    "initializationTiming": "xinyun-ai/index/initialization-timing.json",
+    "hostCapabilityStatusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
+    "preflightRequiredCapabilities": ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "recoverSession", "closeSession", "controlFileReadWrite"],
+    "resumeConfirmationPhrases": ["确认执行", "确认继续初始化"],
+    "codeGraphReuseStatuses": ["healthy", "initialized"],
+    "projectSnapshotReusePolicy": "reuse-until-business-or-codegraph-hash-changes",
+    "stageTimingRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"]
+  },
   "v111": {
     "status": "implemented-in-package",
     "capability": "initializationAcceleration",

package/init/xinyun-ai-init/templates/manual-session-binding.template.json

@@ -0,0 +1,23 @@
+{
+  "schemaVersion": 1,
+  "bindingId": "manual-session-binding-template",
+  "taskId": null,
+  "roleTaskId": null,
+  "roleId": null,
+  "sessionId": null,
+  "sessionIdType": "host-returned-real-session",
+  "provider": "codex",
+  "boundBy": null,
+  "boundAt": null,
+  "evidence": [],
+  "evidenceRequiredFields": ["evidenceType", "source", "sessionId", "interactionHash", "beforeSnapshotHash", "afterSnapshotHash", "recordedAt"],
+  "bindingStatus": "pending",
+  "bindingStatusEnum": ["pending", "bound", "rejected", "blocked", "released"],
+  "executionEligible": false,
+  "eligibilityRule": "bound + real sessionId + evidence verified + role onboarding ready",
+  "fakeSessionIdProhibited": true,
+  "rejectionReason": null,
+  "audit": [],
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/project-index.template.json

@@ -273,6 +273,21 @@
     "databaseDefault": { "authorization": "not-requested", "executionStatus": "needs-confirmation", "redactionStatus": "verified" },
     "readyRequires": ["projectIdentity", "codeGraph", "baseline", "teamResponsibility", "roleSessions", "taskTree", "localControlPlane", "legacyHandoff", "hostCapabilities", "sensitiveScan", "noHighRiskBlocker"]
   },
+  "v112": {
+    "status": "implemented-in-package",
+    "capability": "initializationGateRecovery",
+    "hostPreflight": "xinyun-ai/host-preflight.json",
+    "initializationRecovery": "xinyun-ai/index/initialization-recovery.json",
+    "manualSessionBindings": "xinyun-ai/sessions/manual-bindings.json",
+    "sharedProjectSnapshot": "xinyun-ai/index/shared-project-snapshot.json",
+    "initializationTiming": "xinyun-ai/index/initialization-timing.json",
+    "hostCapabilityStatusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
+    "preflightRequiredCapabilities": ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "recoverSession", "closeSession", "controlFileReadWrite"],
+    "resumeConfirmationPhrases": ["确认执行", "确认继续初始化"],
+    "codeGraphReuseStatuses": ["healthy", "initialized"],
+    "projectSnapshotReusePolicy": "reuse-until-business-or-codegraph-hash-changes",
+    "stageTimingRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"]
+  },
   "v111": {
     "status": "implemented-in-package",
     "capability": "initializationAcceleration",

package/init/xinyun-ai-init/templates/role-session-binding.template.json

@@ -16,7 +16,7 @@
     "identityEvidence": [],
     "creationEvidence": []
   },
-  "targetVersion": "1.11.0",
+  "targetVersion": "1.12.0",
   "projectRootHash": null,
   "workspaceScope": {"scopeType": "project-root", "scopePathHashes": [], "scopeRevision": null},
   "repositoryScopeHash": null,
@@ -66,5 +66,5 @@
   "roleDisplayName": null,
   "responsibilityLabel": null,
   "titleSource": "role-contract",
-  "titleVersion": "1.11.0"
+  "titleVersion": "1.12.0"
 }

package/init/xinyun-ai-init/templates/shared-project-snapshot.template.json

@@ -0,0 +1,24 @@
+{
+  "schemaVersion": 1,
+  "snapshotId": "shared-project-snapshot-template",
+  "projectRootHash": null,
+  "businessBaselineHash": null,
+  "controlPlaneHash": null,
+  "codeGraphRecordId": null,
+  "codeGraphIndexHash": null,
+  "sourceRevision": null,
+  "snapshotStatus": "not-checked",
+  "snapshotStatusEnum": ["not-checked", "building", "ready", "stale", "partial", "blocked", "failed"],
+  "reuseDecision": "unknown",
+  "reuseDecisionEnum": ["reuse", "rebuild", "unknown", "blocked"],
+  "reusedByRoleIds": [],
+  "generatedOnce": false,
+  "refreshTriggers": ["business-baseline-changed", "control-plane-conflict", "codegraph-index-hash-changed", "source-revision-changed", "snapshot-corrupt"],
+  "coverage": "unknown",
+  "unverifiedScope": [],
+  "evidence": [],
+  "snapshotHash": null,
+  "sensitiveScan": {"status": "not-run", "matches": []},
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/version.json

@@ -1,7 +1,7 @@
 {
   "packageName": "xinyun-ai-init",
   "displayName": "欣芸技术开发 Agent 流初始化包",
-  "version": "1.11.0",
+  "version": "1.12.0",
   "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "defaultMode": "fast-init",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pm_zhousl/xinyun-ai-init",
-  "version": "1.11.0",
+  "version": "1.12.0",
   "description": "欣芸技术开发 Agent 流初始化包",
   "bin": {
     "xinyun-ai-init": "bin/xinyun-ai-init.js"

package/scripts/verify-init-package.js

@@ -6,7 +6,7 @@ const crypto = require("crypto");
 
 const root = path.resolve(__dirname, "..");
 const initRoot = path.join(root, "init", "xinyun-ai-init");
-const CURRENT_VERSION = "1.11.0";
+const CURRENT_VERSION = "1.12.0";
 
 const checks = [];
 
@@ -1901,6 +1901,78 @@ function verifyV110BehaviorEvidence() {
   }
 }
 
+function verifyV112Contracts() {
+  const requiredFiles = [
+    "init/xinyun-ai-init/rules/v1.12.0-recovery.md",
+    "init/xinyun-ai-init/templates/host-preflight.template.json",
+    "init/xinyun-ai-init/templates/initialization-recovery.template.json",
+    "init/xinyun-ai-init/templates/manual-session-binding.template.json",
+    "init/xinyun-ai-init/templates/shared-project-snapshot.template.json",
+    "init/xinyun-ai-init/templates/initialization-timing.template.json",
+    "test-scenarios/v1.12.0-scenarios.md",
+    "test-scenarios/v1.12.0-behavior-evidence.json",
+  ];
+  for (const file of requiredFiles) requireFile(file);
+
+  let manifest;
+  let projectIndex;
+  let host;
+  let recovery;
+  let binding;
+  let snapshot;
+  let timing;
+  let initResult;
+  try {
+    manifest = JSON.parse(readText("init/xinyun-ai-init/templates/manifest.template.json"));
+    projectIndex = JSON.parse(readText("init/xinyun-ai-init/templates/project-index.template.json"));
+    host = JSON.parse(readText("init/xinyun-ai-init/templates/host-preflight.template.json"));
+    recovery = JSON.parse(readText("init/xinyun-ai-init/templates/initialization-recovery.template.json"));
+    binding = JSON.parse(readText("init/xinyun-ai-init/templates/manual-session-binding.template.json"));
+    snapshot = JSON.parse(readText("init/xinyun-ai-init/templates/shared-project-snapshot.template.json"));
+    timing = JSON.parse(readText("init/xinyun-ai-init/templates/initialization-timing.template.json"));
+    initResult = JSON.parse(readText("init/xinyun-ai-init/templates/init-result.template.json"));
+  } catch (error) {
+    addCheck("v1.12 template JSON parse", false, error.message);
+    return;
+  }
+
+  const paths = ["hostPreflight", "initializationRecovery", "manualSessionBindings", "sharedProjectSnapshot", "initializationTiming"];
+  addCheck("v1.12 manifest/project-index registration", manifest.v112 && projectIndex.v112 && paths.every((key) => manifest.v112[key] === projectIndex.v112[key]), "v1.12 paths must match across index files");
+  addCheck("v1.12 capability flags", ["hostPreflightRecovery", "manualRoleSessionBinding", "codeGraphIncrementalReuse", "sharedProjectSnapshot", "initializationTiming"].every((key) => manifest.capabilities && manifest.capabilities[key] === true), "v1.12 manifest capabilities");
+  addCheck("v1.12 capability enum consistency", JSON.stringify(manifest.v112.hostCapabilityStatusEnum) === JSON.stringify(projectIndex.v112.hostCapabilityStatusEnum) && host.capabilityStatusEnum.every((status) => manifest.v112.hostCapabilityStatusEnum.includes(status)), "host capability statuses are consistent");
+  addCheck("v1.12 required host capabilities", JSON.stringify(host.requiredCapabilities) === JSON.stringify(manifest.v112.preflightRequiredCapabilities) && host.capabilities && manifest.v112.preflightRequiredCapabilities.every((id) => host.capabilities[id]), "all seven host capabilities are required");
+  const capabilityFields = ["capabilityId", "detectionMethod", "status", "evidence", "dependencyStatus", "fallbackPlan", "usedTools", "unusedTools", "unverifiedScope", "failureReason", "checkedAt"];
+  addCheck("v1.12 host capability evidence fields", Object.values(host.capabilities).every((capability) => capabilityFields.every((field) => Object.prototype.hasOwnProperty.call(capability, field))), "host capability minimum evidence fields");
+  addCheck("v1.12 conservative preflight default", host.status === "not-checked" && host.readyGate && host.readyGate.allRequiredCapabilitiesPassed === false && host.readyGate.unknownBlocksReady === true && host.readyGate.fakeSessionIdProhibited === true && host.realSessionIdEvidence.verified === false, "preflight cannot default to ready");
+  addCheck("v1.12 task-first recovery", recovery.status === "not-started" && recovery.reuseContract.reuseTaskId === true && recovery.reuseContract.reuseRoleTaskIds === true && recovery.reuseContract.incrementAttempt === true && recovery.reuseContract.createDuplicateTasks === false && recovery.resumeTriggers.every((trigger) => manifest.v112.resumeConfirmationPhrases.includes(trigger)), "resume reuses IDs and prevents duplicate tasks");
+  addCheck("v1.12 atomic recovery", recovery.atomicWrite && recovery.atomicWrite.tempFileRequired === true && recovery.atomicWrite.fsyncBeforeRename === true && recovery.atomicWrite.rename === true && recovery.atomicWrite.recoveryOnFailure === true, "recovery writes are atomic");
+  addCheck("v1.12 manual binding gate", binding.sessionId === null && binding.bindingStatus === "pending" && binding.executionEligible === false && binding.fakeSessionIdProhibited === true && binding.evidenceRequiredFields.includes("sessionId") && binding.evidenceRequiredFields.includes("interactionHash"), "manual binding requires real evidence");
+  addCheck("v1.12 snapshot reuse", snapshot.generatedOnce === false && snapshot.snapshotStatus === "not-checked" && snapshot.reuseDecision === "unknown" && snapshot.reusedByRoleIds.length === 0 && manifest.v112.projectSnapshotReusePolicy === "reuse-until-business-or-codegraph-hash-changes", "one shared snapshot with explicit refresh triggers");
+  addCheck("v1.12 timing schema", JSON.stringify(timing.stageRequiredFields) === JSON.stringify(manifest.v112.stageTimingRequiredFields) && timing.attempt === 1 && timing.stages.length === 0, "stage duration and recovery evidence fields");
+  addCheck("v1.12 init-result links", initResult.targetVersion === CURRENT_VERSION && initResult.v112 && paths.every((key) => initResult.v112[`${key}Path`] === manifest.v112[key]) && initResult.v112.duplicateTasksCreated === 0 && initResult.v112.realSessionIdRequired === true, "init-result links v1.12 control files");
+  const scenarioText = readText("test-scenarios/v1.12.0-scenarios.md");
+  addCheck("v1.12 scenarios", Array.from({ length: 12 }, (_, index) => 134 + index).every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("sessionId=null") && scenarioText.includes("确认继续初始化"), "v1.12 scenarios 134-145");
+  let behaviorEvidence;
+  try {
+    behaviorEvidence = JSON.parse(readText("test-scenarios/v1.12.0-behavior-evidence.json"));
+  } catch (error) {
+    addCheck("v1.12 behavior evidence JSON", false, error.message);
+    behaviorEvidence = null;
+  }
+  const behaviorScenarios = behaviorEvidence && Array.isArray(behaviorEvidence.scenarios) ? behaviorEvidence.scenarios : [];
+  addCheck("v1.12 behavior evidence honest gate", behaviorEvidence && behaviorEvidence.evidenceType === "not-verified" && behaviorEvidence.realAiSessionVerified === false && behaviorEvidence.publishBlocked === true && behaviorEvidence.sessionIdPolicy.includes("sessionId remains null"), "real host behavior is not fabricated");
+  addCheck("v1.12 behavior evidence IDs", JSON.stringify(behaviorScenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(Array.from({ length: 12 }, (_, index) => 134 + index)), "behavior evidence covers 134-145");
+  addCheck("v1.12 behavior evidence not-verified", behaviorScenarios.length === 12 && behaviorScenarios.every((scenario) => scenario.sessionId === null && scenario.result === "not-verified" && scenario.actualOutput === "not-verified" && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0), "unavailable host remains blocked without fake IDs");
+  const releasePath = path.join(root, "version-plans/releases/v1.12.0.md");
+  if (fs.existsSync(releasePath)) {
+    const releaseText = readText("version-plans/releases/v1.12.0.md");
+    addCheck("v1.12 release exclusions", releaseText.includes("No automatic host login") && releaseText.includes("no database connection") && releaseText.includes("no npm publish"), "v1.12 safety and scope exclusions");
+  } else {
+    addCheck("v1.12 release exclusions", true, "source-only release material is not required in tarball");
+  }
+  addCheck("v1.12 rule contract", readText("init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("available-with-dependency") && readText("init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("shared-project-snapshot.json"), "v1.12 recovery rule is present");
+}
+
 function main() {
   requireFile("bin/xinyun-ai-init.js");
   requireFile("init/xinyun-ai-init/README.md");
@@ -1920,6 +1992,7 @@ function main() {
   verifyV19Contracts();
   verifyV19SessionReuseText();
   verifyV110Contracts();
+  verifyV112Contracts();
   verifyTestScenarios();
   verifyJsonAndMarkdown();
 

package/scripts/verify-rules-package.js

@@ -5,7 +5,7 @@ const os = require("os");
 const path = require("path");
 const { spawnSync } = require("child_process");
 
-const VERSION = "1.11.0";
+const VERSION = "1.12.0";
 const checks = [];
 
 function parseArgs(argv) {
@@ -257,12 +257,20 @@ function validatePackageFiles(root, target, isTarball) {
     "test-scenarios/v1.9.0-behavior-evidence.json",
     "test-scenarios/v1.10.0-scenarios.md",
     "test-scenarios/v1.10.0-behavior-evidence.json",
+    "test-scenarios/v1.12.0-scenarios.md",
+    "test-scenarios/v1.12.0-behavior-evidence.json",
     "init/xinyun-ai-init/templates/project-identity.template.json",
     "init/xinyun-ai-init/templates/session-candidates.template.json",
     "init/xinyun-ai-init/templates/technical-landscape.template.json",
     "init/xinyun-ai-init/templates/requirement-packet.template.json",
     "init/xinyun-ai-init/templates/technical-impact-packet.template.json",
     "init/xinyun-ai-init/templates/database-authorization.template.json",
+    "init/xinyun-ai-init/templates/host-preflight.template.json",
+    "init/xinyun-ai-init/templates/initialization-recovery.template.json",
+    "init/xinyun-ai-init/templates/manual-session-binding.template.json",
+    "init/xinyun-ai-init/templates/shared-project-snapshot.template.json",
+    "init/xinyun-ai-init/templates/initialization-timing.template.json",
+    "init/xinyun-ai-init/rules/v1.12.0-recovery.md",
   ];
 
   for (const file of requiredFiles) requireFile(root, target, file);
@@ -730,6 +738,46 @@ function validateV111Content(root, target) {
   requireIncludes(root, target, "init/xinyun-ai-init/rules/init-rules.md", ["v1.10.2 and v1.11.0 gate", "fixed-materialization", "bootstrap-snapshot"]);
 }
 
+function validateV112Content(root, target) {
+  const requiredFiles = [
+    "init/xinyun-ai-init/rules/v1.12.0-recovery.md",
+    "init/xinyun-ai-init/templates/host-preflight.template.json",
+    "init/xinyun-ai-init/templates/initialization-recovery.template.json",
+    "init/xinyun-ai-init/templates/manual-session-binding.template.json",
+    "init/xinyun-ai-init/templates/shared-project-snapshot.template.json",
+    "init/xinyun-ai-init/templates/initialization-timing.template.json",
+    "test-scenarios/v1.12.0-scenarios.md",
+    "test-scenarios/v1.12.0-behavior-evidence.json",
+  ];
+  for (const file of requiredFiles) requireFile(root, target, file);
+  const manifest = readJson(root, "init/xinyun-ai-init/templates/manifest.template.json");
+  const projectIndex = readJson(root, "init/xinyun-ai-init/templates/project-index.template.json");
+  const host = readJson(root, "init/xinyun-ai-init/templates/host-preflight.template.json");
+  const recovery = readJson(root, "init/xinyun-ai-init/templates/initialization-recovery.template.json");
+  const binding = readJson(root, "init/xinyun-ai-init/templates/manual-session-binding.template.json");
+  const snapshot = readJson(root, "init/xinyun-ai-init/templates/shared-project-snapshot.template.json");
+  const timing = readJson(root, "init/xinyun-ai-init/templates/initialization-timing.template.json");
+  const initResult = readJson(root, "init/xinyun-ai-init/templates/init-result.template.json");
+  const behaviorEvidence = readJson(root, "test-scenarios/v1.12.0-behavior-evidence.json");
+  const paths = ["hostPreflight", "initializationRecovery", "manualSessionBindings", "sharedProjectSnapshot", "initializationTiming"];
+  const statuses = ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"];
+  addCheck(target, "v1.12.registration", "registry", manifest.v112 && projectIndex.v112 && paths.every((key) => manifest.v112[key] === projectIndex.v112[key]) ? "pass" : "fail", "manifest/project-index.v112", "paths", "same", {manifest: manifest.v112, projectIndex: projectIndex.v112}, "v1.12 paths are registered consistently.", "Synchronize v1.12 paths.");
+  addCheck(target, "v1.12.capabilities", "manifest", manifest.capabilities && ["hostPreflightRecovery", "manualRoleSessionBinding", "codeGraphIncrementalReuse", "sharedProjectSnapshot", "initializationTiming"].every((key) => manifest.capabilities[key] === true) ? "pass" : "fail", "manifest.template.json", "capabilities", "v1.12 flags", manifest.capabilities, "v1.12 capabilities are registered.", "Register all v1.12 capabilities.");
+  addCheck(target, "v1.12.host-enum", "schema", JSON.stringify(host.capabilityStatusEnum) === JSON.stringify(statuses) && JSON.stringify(manifest.v112.hostCapabilityStatusEnum) === JSON.stringify(statuses) && JSON.stringify(projectIndex.v112.hostCapabilityStatusEnum) === JSON.stringify(statuses) ? "pass" : "fail", "host-preflight/manifest/project-index", "capabilityStatusEnum", statuses, {host: host.capabilityStatusEnum, manifest: manifest.v112 && manifest.v112.hostCapabilityStatusEnum, projectIndex: projectIndex.v112 && projectIndex.v112.hostCapabilityStatusEnum}, "Host capability enum is shared.", "Use one complete host capability enum.");
+  addCheck(target, "v1.12.host-fields", "schema", host.requiredCapabilities.length === 7 && Object.values(host.capabilities).length === 7 && Object.values(host.capabilities).every((capability) => ["capabilityId", "detectionMethod", "status", "evidence", "dependencyStatus", "fallbackPlan", "usedTools", "unusedTools", "unverifiedScope", "failureReason", "checkedAt"].every((field) => Object.prototype.hasOwnProperty.call(capability, field))) ? "pass" : "fail", "host-preflight.template.json", "capabilities", "seven records with minimum fields", host.capabilities, "Host preflight evidence fields are complete.", "Complete host preflight evidence fields.");
+  addCheck(target, "v1.12.ready-gate", "schema", host.readyGate && host.readyGate.allRequiredCapabilitiesPassed === false && host.readyGate.unknownBlocksReady === true && host.readyGate.fakeSessionIdProhibited === true ? "pass" : "fail", "host-preflight.template.json", "readyGate", "conservative default", host.readyGate, "Preflight cannot default to ready.", "Block ready until host evidence is verified.");
+  addCheck(target, "v1.12.recovery", "schema", recovery.reuseContract && recovery.reuseContract.reuseTaskId === true && recovery.reuseContract.reuseRoleTaskIds === true && recovery.reuseContract.incrementAttempt === true && recovery.reuseContract.createDuplicateTasks === false && recovery.atomicWrite && recovery.atomicWrite.rename === true ? "pass" : "fail", "initialization-recovery.template.json", "reuse/atomicWrite", "reuse IDs, no duplicate, atomic", recovery, "Recovery contract checked.", "Restore task reuse and atomic recovery.");
+  addCheck(target, "v1.12.manual-binding", "schema", binding.sessionId === null && binding.executionEligible === false && binding.fakeSessionIdProhibited === true && binding.evidenceRequiredFields.includes("interactionHash") ? "pass" : "fail", "manual-session-binding.template.json", "binding", "real evidence required", binding, "Manual binding gate checked.", "Require real session evidence.");
+  addCheck(target, "v1.12.snapshot", "schema", snapshot.generatedOnce === false && snapshot.snapshotStatus === "not-checked" && snapshot.refreshTriggers.length >= 4 ? "pass" : "fail", "shared-project-snapshot.template.json", "reuse", "conservative snapshot default", snapshot, "Shared snapshot reuse contract checked.", "Record snapshot refresh triggers.");
+  addCheck(target, "v1.12.timing", "schema", timing.stageRequiredFields.length === 10 && timing.attempt === 1 && timing.stages.length === 0 ? "pass" : "fail", "initialization-timing.template.json", "stageRequiredFields", "10 fields", timing.stageRequiredFields, "Stage timing contract checked.", "Record all timing fields.");
+  addCheck(target, "v1.12.init-result", "schema", initResult.targetVersion === VERSION && initResult.v112 && paths.every((key) => initResult.v112[`${key}Path`] === manifest.v112[key]) && initResult.v112.duplicateTasksCreated === 0 ? "pass" : "fail", "init-result.template.json", "v112", "registered links and zero duplicates", initResult.v112, "Init-result v1.12 links checked.", "Synchronize init-result links.");
+  const scenarioText = readText(root, "test-scenarios/v1.12.0-scenarios.md");
+  addCheck(target, "v1.12.scenarios", "scenario", Array.from({ length: 12 }, (_, index) => 134 + index).every((id) => scenarioText.includes(`## ${id}.`)) && scenarioText.includes("sessionId=null") ? "pass" : "fail", "test-scenarios/v1.12.0-scenarios.md", "scenarioIds", "134-145", "scanned", "v1.12 scenarios are registered.", "Add all v1.12 scenarios.");
+  const behaviorIds = Array.from({ length: 12 }, (_, index) => 134 + index);
+  addCheck(target, "v1.12.behavior-evidence", "evidence", behaviorEvidence.evidenceType === "not-verified" && behaviorEvidence.realAiSessionVerified === false && behaviorEvidence.publishBlocked === true && JSON.stringify(behaviorEvidence.scenarios.map((scenario) => scenario.scenarioId)) === JSON.stringify(behaviorIds) && behaviorEvidence.scenarios.every((scenario) => scenario.sessionId === null && scenario.result === "not-verified" && scenario.actualOutput === "not-verified" && scenario.sensitiveScan && scenario.sensitiveScan.status === "pass" && scenario.sensitiveScan.matches.length === 0) ? "pass" : "fail", "v1.12.0-behavior-evidence.json", "realAiSessionVerified/result", "not-verified with null session IDs", behaviorEvidence, "Unavailable host evidence is honest and complete.", "Do not fabricate real session evidence.");
+  addCheck(target, "v1.12.rule", "content", readText(root, "init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("available-with-dependency") && readText(root, "init/xinyun-ai-init/rules/v1.12.0-recovery.md").includes("sessionId=null") ? "pass" : "fail", "v1.12.0-recovery.md", "contract", "preflight and no fake IDs", "scanned", "v1.12 rule contract checked.", "Restore the v1.12 rule contract.");
+}
+
 function validateJsonFiles(root, target) {
   const jsonFiles = [
     "package.json",
@@ -747,6 +795,11 @@ function validateJsonFiles(root, target) {
     "init/xinyun-ai-init/templates/requirement-packet.template.json",
     "init/xinyun-ai-init/templates/technical-impact-packet.template.json",
     "init/xinyun-ai-init/templates/database-authorization.template.json",
+    "init/xinyun-ai-init/templates/host-preflight.template.json",
+    "init/xinyun-ai-init/templates/initialization-recovery.template.json",
+    "init/xinyun-ai-init/templates/manual-session-binding.template.json",
+    "init/xinyun-ai-init/templates/shared-project-snapshot.template.json",
+    "init/xinyun-ai-init/templates/initialization-timing.template.json",
   ];
 
   for (const file of jsonFiles) {
@@ -779,6 +832,7 @@ function validateRoot(root, target, isTarball = false) {
   validateV19Content(root, target);
   validateV110Content(root, target);
   validateV111Content(root, target);
+  validateV112Content(root, target);
   validateJsonFiles(root, target);
 }
 

package/test-scenarios/v1.12.0-behavior-evidence.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "version": "1.12.0",
+  "evidenceType": "not-verified",
+  "executionMode": "host-capability-unavailable",
+  "realAiSessionVerified": false,
+  "publishBlocked": true,
+  "sessionIdPolicy": "sessionId remains null when the host cannot provide a real project role session",
+  "fixturePath": null,
+  "businessBaseline": {"beforeHash": null, "afterHash": null, "unchanged": null},
+  "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false},
+  "blockedReason": "real-role-session-host-unavailable",
+  "nextAction": "Run scenarios 134-145 in a host that can return and verify real project role session IDs.",
+  "recordedAt": "2026-07-27T00:00:00.000Z",
+  "scenarios": [
+    {"scenarioId": 134, "sessionId": null, "input": "not executed: host preflight cannot create a real project role session", "expectedOutput": "all seven host capabilities are checked before role sessions", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"},
+    {"scenarioId": 135, "sessionId": null, "input": "not executed: host capability failure matrix requires a real role session", "expectedOutput": "unknown and dependency-gated capabilities block ready", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"},
+    {"scenarioId": 136, "sessionId": null, "input": "not executed: task-first initialization requires a real host interaction", "expectedOutput": "main and five role tasks persist before session creation", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"},
+    {"scenarioId": 137, "sessionId": null, "input": "not executed: confirmation resume requires a real host interaction", "expectedOutput": "same task IDs are reused and attempt increments without duplicates", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"},
+    {"scenarioId": 138, "sessionId": null, "input": "not executed: recovery write failure requires a real host interaction", "expectedOutput": "control state is preserved and recovery-required or blocked is recorded", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"},
+    {"scenarioId": 139, "sessionId": null, "input": "not executed: manual binding requires a real host-returned session ID", "expectedOutput": "binding is blocked without real evidence and executionEligible remains false", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"},
+    {"scenarioId": 140, "sessionId": null, "input": "not executed: CodeGraph reuse requires a real host interaction", "expectedOutput": "healthy index is reused when record, hash, and revision match", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"},
+    {"scenarioId": 141, "sessionId": null, "input": "not executed: CodeGraph incremental initialization requires a real host interaction", "expectedOutput": "missing or unusable index records init evidence and unverified scope", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"},
+    {"scenarioId": 142, "sessionId": null, "input": "not executed: shared project snapshot requires a real host interaction", "expectedOutput": "one snapshot is reused by five roles until a refresh trigger", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"},
+    {"scenarioId": 143, "sessionId": null, "input": "not executed: stage timing requires a real host interaction", "expectedOutput": "each stage records duration, cache hit, bottleneck, failure, and recovery", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"},
+    {"scenarioId": 144, "sessionId": null, "input": "not executed: optional capability degradation requires a real host interaction", "expectedOutput": "Git none and missing optional tools reduce coverage without false pass", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"},
+    {"scenarioId": 145, "sessionId": null, "input": "not executed: database and safety boundary requires a real host interaction", "expectedOutput": "database remains not-requested and no forbidden operation runs", "actualOutput": "not-verified", "beforeSnapshotHash": null, "afterSnapshotHash": null, "changedFiles": [], "controlFilesChanged": [], "forbiddenOperations": {"databaseConnection": false, "sqlExecution": false, "gitWrite": false, "businessCodeWrite": false, "dependencyInstall": false, "npmPublish": false}, "evidence": [], "sensitiveScan": {"status": "pass", "matches": []}, "result": "not-verified", "recordedAt": "2026-07-27T00:00:00.000Z"}
+  ]
+}

package/test-scenarios/v1.12.0-scenarios.md

@@ -0,0 +1,51 @@
+# v1.12.0 Behavior Scenarios
+
+Every scenario records input, expected output, actual output, before/after control-plane snapshots, changed business files, control files changed, forbidden operations, evidence, and sensitive-scan status. A host thread ID is never accepted as a project session ID.
+
+## 134. Host preflight success
+
+Check all seven required capabilities and real session ID evidence before role-session creation. Only a complete, verified matrix may continue.
+
+## 135. Host preflight blocked
+
+Simulate unavailable, permission-denied, unknown, failed, and available-with-dependency capabilities. The result is blocked or partial with failure reason and next action; it is never ready.
+
+## 136. Task-first initialization
+
+Create the named main task and five role tasks before session creation. When the host is unavailable, each role `sessionId=null` and active tasks remain visible.
+
+## 137. Resume after confirmation
+
+After `确认执行` or `确认继续初始化`, reuse the original task and role task IDs, increment attempt, resume from the recorded stage, and create zero duplicate tasks.
+
+## 138. Recovery and atomic write failure
+
+Simulate a failed write, lock conflict, user-edited control file, and recovery. Preserve prior state, record recovery-required/blocked, and do not force unlock or overwrite.
+
+## 139. Manual real-session binding
+
+Bind a real host-returned session with actor, time, interaction evidence, before/after snapshot hashes, and audit. Missing evidence keeps the binding blocked and executionEligible=false.
+
+## 140. CodeGraph healthy reuse
+
+Reuse a healthy index when record ID, index hash, and source revision match. No second initialization is performed.
+
+## 141. CodeGraph incremental initialization
+
+When the index is missing or unusable, run the existing `codegraph init -i` boundary only when available and authorized. Record version, hash, parse failures, unindexed scope, and failure reason.
+
+## 142. Shared project snapshot
+
+Generate one snapshot and reference its hash from all five role records. Reuse it without rescanning while hashes are unchanged; rebuild after a recorded refresh trigger.
+
+## 143. Stage timing
+
+Record stage status, attempt, start/end, duration, cache hit, failure reason, bottleneck, and recovery action. Timing must not bypass gates.
+
+## 144. Optional capability degradation
+
+Git none, missing test framework, or an undetected optional toolchain is recorded as limited coverage and unverified scope, without falsely claiming tests passed or unnecessarily blocking takeover.
+
+## 145. Database and safety boundary
+
+Keep `authorization=not-requested`, `executionStatus=needs-confirmation`, and `redactionStatus=verified`. The AI must not connect, execute SQL, install dependencies, modify business files, write Git, or publish.