@pm_zhousl/xinyun-ai-init 1.11.0 → 1.12.1

package/init/xinyun-ai-init/README.md

@@ -2,7 +2,7 @@
 
 本目录是“欣芸技术开发 Agent 流”的初始化包，负责把完整 AI 执行要求下发到目标项目。
 
-当前规则版本：`1.11.0`。
+当前规则版本：`1.12.1`。
 
 ## Codex 一句话入口
 

package/init/xinyun-ai-init/rules/directory-self-completion.md

@@ -34,6 +34,10 @@
 - `framework-profile.json` 和 `migration-record.json` 创建后必须确认 JSON 可解析，并同步 `xinyun-ai/index/project-index.json`。
 - 首次极速初始化不强制创建上述目录；普通咨询也不创建迁移或 profile 记录。
 
+## v1.12 接管恢复目录
+
+When takeover initialization is authorized, create `host-preflight.json`, `index/initialization-recovery.json`, `sessions/manual-bindings.json`, `index/shared-project-snapshot.json`, and `index/initialization-timing.json` under `xinyun-ai/`. Use atomic writes and preserve blocked state on host or permission failure.
+
 ## v1.7.1 任务树、归档与 CodeGraph 目录
 
 - 初始化或升级流程必须补齐 `xinyun-ai/tasks/task-index.json`、`xinyun-ai/tasks/archive/`、`xinyun-ai/tasks/.archive-transactions/`、`xinyun-ai/tasks/.archive-tmp/`。
@@ -57,6 +61,7 @@
 - `manifest.json`、`project-index.json` 和 `task-index.json` 必须登记 `roleSessions`、`roleSessionBindingIds`、`roleSessionBindings`、`provider=codex` 和 `sessionStatus` 枚举。
 - 绑定目录只保存 Codex 宿主返回的真实 `sessionId` 摘要、onboarding 状态、失败原因和 audit，不保存伪造 sessionId。
 - 宿主不支持创建子会话时，仍可补齐本地目录和降级记录，状态使用 `local-degraded-no-fake-session-id`。
+- v1.12.1 provider 绑定记录固定写入 `xinyun-ai/sessions/provider-session-bindings.json`，模板来源为 `xinyun-ai-init/templates/provider-session-binding.template.json`。只有宿主 canonical `providerSessionId`、身份/交互证据和独占占用均通过时才可绑定；未知或普通线程 ID 保持 blocked/pending。
 
 ## v1.8 按需目录
 

package/init/xinyun-ai-init/rules/init-rules.md

@@ -1,5 +1,9 @@
 # 初始化规则
 
+## v1.12.1 provider session binding
+
+Use the provider-specific binding contract before role-session work. `providerSessionId` must be a provider canonical session value, not a normal thread ID. Identity and interaction evidence are required for binding; missing evidence remains pending or blocked.
+
 - 首次只创建最小 `xinyun-ai/` 骨架和极简 `AGENTS.md`。
 - 首次不创建大量规则、模板、脚本和业务沉淀目录。
 - 首次不执行语言级语法检查、lint、typecheck、测试或构建命令。
@@ -56,6 +60,10 @@
 - CodeGraph 必需任务失败时进入 `blocked`；只有用户明确授权限定范围降级时才允许 `partial`。
 - 不自动安装 CodeGraph，不修改系统环境、业务代码、数据库、API、配置、依赖或 Git。
 
+## v1.12 initialization gate recovery
+
+Run the seven-capability host preflight before role sessions. Materialize the main task and five role tasks first; on failure preserve `sessionId=null`, `blockedReason`, and `nextAction`. Explicit `确认执行` or `确认继续初始化` reuses task IDs and increments `attempt` without duplicates.
+
 ## v1.10.2 and v1.11.0 gate
 
 - Keep `hostThreadId`, `hostSessionId`, `projectSessionId`, and `orchestratorSessionId` separate. Any value without host evidence remains `null`.

package/init/xinyun-ai-init/rules/session-workbench.md

@@ -1,5 +1,11 @@
 # 会话工作台规则
 
+## v1.12.1 provider-specific session binding
+
+Read `v1.12.1-provider-session-binding.md` before role-session work. `providerSessionId` must come from the provider's canonical session API; a normal thread ID, task ID, title, history summary, or user statement is not a binding. Verify project identity, roleId, taskId, title, cwd, occupancy, and real send/receive evidence before binding. Missing evidence stays `bindingStatus=pending/blocked` and `executionEligible=false`.
+
+Recovery reuses taskId and roleTaskId, increments attempt, and enters `recovery-required` after a writeback failure without creating duplicates. Unsupported hosts use `local-degraded` with `providerSessionId=null`; never fabricate a session ID.
+
 首次初始化不创建会话工作台。复杂任务中可按需创建：
 
 ```md
@@ -285,6 +291,10 @@ HTML 迁移只允许评估和单页面 / 区块试点计划；实际代码迁移
 
 任何跨会话冲突、状态源缺失、预算超限、权限失败或敏感信息无法确认时暂停或阻塞，不自动重试、合并、覆盖或释放。
 
+## v1.12 host preflight and resumable sessions
+
+Record all seven host capabilities before role sessions. `available-with-dependency` is not ready until authorized. Manual binding requires a real host-returned session ID and interaction evidence; host thread IDs cannot substitute for project session IDs.
+
 ## v1.10 接管 preflight 与交接
 
 交接必须记录 host capability、真实 sessionId、executionEligible 和阻塞原因；宿主不支持时保持 sessionId=null，不得伪造 sessionId。

package/init/xinyun-ai-init/rules/upgrade-rules.md

@@ -1,5 +1,9 @@
 # 升级规则
 
+## v1.12.1 provider session binding
+
+Validate provider canonical session identity, project identity, role/task, title/cwd, interaction evidence, and exclusive occupancy before reuse. Unknown or missing evidence is blocked; ordinary thread IDs cannot be reused. Writeback recovery reuses the original task IDs, increments attempt, and cannot create duplicate sessions.
+
 如果项目已存在 `xinyun-ai/`，不要重复初始化，应进入升级检查模式。
 
 升级流程：
@@ -116,6 +120,10 @@
 
 升级先校验共享事实、状态源和 coordination transaction；再校验 Skill registry、`assignmentStatus`/`usageStatus` 映射；然后处理前端 audit-only 或已确认的单页面试点；最后才创建临时程序员会话。已有用户修改的控制文件不得静默覆盖，冲突或哈希不一致进入 `blocked`/`recovery-required`。
 
+## v1.12 recovery and host preflight
+
+Before upgrade role-session work, read `xinyun-ai/index/initialization-recovery.json` and `xinyun-ai/host-preflight.json`. Only explicit `确认执行` or `确认继续初始化` resumes the original task IDs with an incremented attempt; missing host sessions remain `sessionId=null` and blocked.
+
 ## v1.10 接管状态升级与恢复
 
 升级前读取 `projectStatus` 和全部 preflight 控制文件；冲突进入 blocked/recovery-required，不覆盖用户修改。

package/init/xinyun-ai-init/rules/v1.12.0-recovery.md

@@ -0,0 +1,34 @@
+# v1.12.0 initialization gate recovery contract
+
+v1.12 keeps the v1.10 takeover gate and v1.11 acceleration boundary. It adds a bounded host preflight, task-first initialization, resumable role-session binding, CodeGraph reuse, one shared project snapshot, and stage timing. The npm CLI still creates only `xinyun-ai-init/`.
+
+## Host preflight
+
+- Before creating or reusing role sessions, check `createRealSession`, `reuseExistingSession`, `sendTask`, `receiveResult`, `recoverSession`, `closeSession`, and `controlFileReadWrite`.
+- Every capability record uses `capabilityId`, `detectionMethod`, `status`, `evidence`, `dependencyStatus`, `fallbackPlan`, `usedTools`, `unusedTools`, `unverifiedScope`, `failureReason`, and `checkedAt`.
+- `available-with-dependency` requires dependency authorization. `unknown`, `unavailable`, `permission-denied`, `failed`, `not-checked`, `not-verified`, and an unauthorized dependency block `ready`.
+- A host thread ID is not a project session ID. Without a real host-returned session ID, keep `sessionId=null`, record the blocker, and do not fabricate an ID.
+
+## Task first and resume
+
+- The first initialization write creates one named main task and five role task records before attempting role sessions. The task records remain when host preflight fails.
+- A failed preflight records `sessionId=null`, `blockedReason`, `failureReason`, and `nextAction`; it does not delete tasks or write an idle current task while active tasks exist.
+- Explicit `确认执行` or `确认继续初始化` resumes the same `taskId` and role task IDs from the recorded stage, increments `attempt`, and creates no duplicate tasks.
+- Recovery uses atomic temp-file, fsync, rename, and recovery evidence. Conflicts, user-edited control files, or lock failures pause or block without overwrite or forced unlock.
+
+## Manual binding
+
+- A user may bind a real role session through `manual-session-bindings.json`. The record must contain role/task IDs, a host-returned `sessionId`, `boundBy`, `boundAt`, interaction and before/after snapshot evidence, and an audit entry.
+- No evidence means `bindingStatus=blocked` or `pending` and `executionEligible=false`. A bound session becomes eligible only after evidence verification, role onboarding, responsibility confirmation, and all existing gates pass.
+
+## CodeGraph and shared snapshot
+
+- Reuse a healthy or initialized CodeGraph index by matching `codeGraphRecordId`, index hash, and source revision. Otherwise run the existing `codegraph init -i` boundary when authorized and available; do not install CodeGraph or repair business code.
+- Record version, index hash, source revision, parse failures, unindexed scope, and failure reason. A required failure cannot claim complete understanding.
+- Build one `shared-project-snapshot.json` for the five roles. Reuse it while business baseline, control-plane hash, CodeGraph index hash, and source revision are unchanged. Rebuild only when a refresh trigger is recorded.
+
+## Timing and safety
+
+- Record each stage's attempt, status, start/end, duration, cache hit, failure reason, bottleneck, and recovery action. Stage timing is evidence, not permission to skip a gate.
+- Git none, no test framework, and missing optional toolchains are recorded as limited coverage and do not alone block. Database defaults remain `authorization=not-requested`, `executionStatus=needs-confirmation`, `redactionStatus=verified`; do not connect or execute SQL.
+- Sensitive values never enter tasks, logs, handoffs, JSON, Markdown, stdout, or stderr. No business code, database, API, dependency, system environment, Git write, or npm publish operation is authorized by initialization.

package/init/xinyun-ai-init/rules/v1.12.1-provider-session-binding.md

@@ -0,0 +1,25 @@
+# v1.12.1 provider-specific session binding
+
+## Canonical provider identity
+
+`providerSessionId` is valid only when it is returned by the declared provider's supported session API as a canonical session identifier. A normal Codex thread ID, task ID, local filename, random value, title, history summary, or user statement is not sufficient evidence and must never be copied into `providerSessionId`.
+
+Every binding records `provider`, `providerSessionId`, `roleId`, `taskId`, `projectRootHash`, `workspaceScope`, `repositoryScopeHash`, `workstream`, `title`, `cwd`, `createdAt`, `identityEvidence`, `interactionEvidence`, `bindingMode`, `bindingStatus`, `boundBy`, and `boundAt`.
+
+`identityEvidence` must verify the provider session ID, project identity, role, task, title, cwd, evidence source, verification time, and evidence hash. `interactionEvidence` must contain a real send receipt, receive receipt, transcript hash, message count, recorded time, and evidence hash. Sensitive prompt or response content is redacted before persistence.
+
+## Binding gate and states
+
+`bindingMode` is one of `auto-created`, `auto-reused`, `manual`, `recovery`, or `local-degraded`. `bindingStatus` is one of `pending`, `validating`, `bound`, `blocked`, `rejected`, `released`, `conflict`, or `recovery-required`.
+
+Only `bindingStatus=bound` with both evidence groups verified and exclusive occupancy may produce a project `sessionId` or `executionEligible=true`. Manual binding without evidence remains `pending` or `blocked`. Host unsupported, identity mismatch, role/task mismatch, invalid title/cwd, missing interaction evidence, occupied session, or writeback failure must not become ready.
+
+## Reuse and recovery
+
+Candidate reuse first validates the provider session and all project identity fields. The v1.9 eight-field JCS-SHA-256 key remains the candidate reuse key. v1.7.3 four-field data is compatibility lookup only and never selects or binds a candidate. Recovery reuses the original task and role-task IDs, increments `attempt`, preserves audit, and never creates duplicate tasks or sessions.
+
+If the host cannot provide a canonical provider session ID, keep `providerSessionId=null`, record `bindingStatus=blocked`, `blockedReason=host-session-capability-unavailable`, and a concrete `nextAction`. Do not fabricate an ID.
+
+## Boundaries
+
+Do not install or log in to a provider, change business files, connect to a database, execute SQL, write Git, install dependencies, or publish npm packages as part of binding.

package/init/xinyun-ai-init/templates/AGENTS.template.md

@@ -195,6 +195,7 @@ CodeGraph 为必需能力时，只有 `initialized` 或 `healthy` 才能将结
 - 真实 `sessionId` 必须来自 Codex 宿主返回值；不得伪造 sessionId。宿主不支持时记录 `local-degraded-no-fake-session-id`，保持 `sessionId=null`。
 - 创建后的角色会话先进入只读 `onboarding`；只有职责理解、职责确认、成员 / 会话绑定、确认门禁和执行资格都满足后才允许 `sessionStatus=ready`。
 - 创建成功不等于业务代码修改授权；普通咨询不创建角色会话，不写绑定文件，不创建外部账号或第三个会话。
+- v1.12.1 起，角色会话必须另外记录 provider canonical `providerSessionId`；普通线程 ID、taskId、标题或历史摘要不得直接绑定。绑定前必须验证项目身份、roleId、taskId、title、cwd、独占占用、`identityEvidence` 和 `interactionEvidence`；证据不全时保持 pending/blocked。
 
 AI 接手本项目时，请先读取：
 

package/init/xinyun-ai-init/templates/README.template.md

@@ -2,6 +2,10 @@
 
 本目录是当前项目的 AI 协作工作区，采用“欣芸技术开发 Agent 流”。
 
+## v1.12.1 provider session binding
+
+The canonical external identity of a role session is the provider-returned `providerSessionId`. A normal thread ID, taskId, title, or history summary cannot bind a role. Binding requires project identity, roleId, taskId, title, cwd, exclusive occupancy, and real send/receive evidence; incomplete evidence cannot become ready or executionEligible.
+
 ## v1.10 接管门禁
 
 当前项目必须先完成 `preflight-report.json` 和 `onboarding-report.json`，再进入业务代码开发。`project-status.json` 只有在项目身份、CodeGraph、基线、团队职责、五个真实角色会话、本地控制面、旧沉淀、宿主能力和敏感扫描全部通过时才可为 `ready`；缺失真实角色会话必须为 `blocked + required-role-session-not-created`。CLI 只创建 `xinyun-ai-init/`，AI 获得授权后才创建项目控制面。

package/init/xinyun-ai-init/templates/core-rules.template.md

@@ -431,6 +431,8 @@ A single-role write failure records `status=blocked` and `blockedReason=write-fa
 v1.7.3 Codex role session orchestration is host-level only; CLI still only creates `xinyun-ai-init/`.
 v1.7.3 fixed Codex role session compatibility fields: `provider=codex`, `sessionStatus=pending/creating/created/onboarding/ready/blocked/failed/closed`, and legacy creation index `{taskId,roleId,provider,targetVersion}`. The v1.9 project-isolated role session reuse contract is authoritative.
 
+v1.12 host preflight and recovery are authoritative for initialization gating: materialize the main task and five role tasks first, preserve `sessionId=null` when the host is unavailable, resume only after `确认执行` or `确认继续初始化`, reuse task IDs while incrementing attempt, and require real evidence for manual session binding. Reuse healthy CodeGraph and one shared project snapshot only when their hashes and source revision remain stable. Record stage duration, cache hit, bottleneck, failure reason, and recovery action.
+
 ## v1.7.3 Codex 角色会话自动创建与绑定
 
 - v1.7.3 只在 5 个 `role-execution` 本地任务已经创建或恢复后，才由 Codex 主会话尝试创建 5 个真实角色子会话：`project-owner`、`project-product`、`chief-engineer`、`programmer`、`test-reviewer`。
@@ -604,6 +606,10 @@ Skill 分配使用 `assignmentStatus`，使用记录使用 `usageStatus`。固
 
 总工维护 `xinyun-ai/technical-landscape.json`。只有 coverageStatus=full、unverifiedScope=[]、核心对象均有有效证据且无未登记冲突时才可 ready；partial/unknown 只能保持 partial/blocked。主会话维护 requirementPacket，总工输出 technicalImpactPacket；两个 packet 最小字段固定为 schemaVersion、packetId、requirementId、taskId、projectRootHash、version、status、content、evidence、sourceRevision、contentHash、createdAt、updatedAt，使用 RFC8785 JCS-SHA-256。需求、影响范围、身份、版本或 sourceRevision 变化时写 blockedReason=packet-stale。
 
+## v1.12.1 provider-specific session binding
+
+角色会话的外部身份只能是 provider 返回的 canonical `providerSessionId`。普通线程 ID、taskId、标题、历史摘要或用户口述不能直接绑定。绑定前必须验证项目身份、roleId、taskId、title、cwd、独占占用和真实发送/接收交互证据；证据不全保持 `bindingStatus=pending/blocked`，不得 ready 或 executionEligible。创建回写失败复用原 taskId/roleTaskId、递增 attempt，不创建重复会话；宿主不可用时 `providerSessionId=null`，不得伪造。
+
 数据库默认 databaseAccessMode=sql-only。连接、只读查询、结构变更、数据修改分别授权，四类授权状态固定为 not-requested/requested/authorized/denied/expired/failed/unknown，redactionStatus 固定为 verified/unverified/failed；SQL 执行前校验规范化 SQL、参数、方言、targetEnvironment、授权范围生成的 statementHash。授权或输入变化时回到 needs-confirmation，并追加包含 auditId、action、actorType、actorId、authorizationType、statementHash、targetEnvironment、resultStatus、redactionStatus、evidence、at 的 audit。
 
 ## 自我学习

package/init/xinyun-ai-init/templates/current-task.template.md

@@ -148,6 +148,8 @@
   - blockedCount：
   - localDegradedCount：
   - bindingsPath：xinyun-ai/sessions/role-session-bindings.json
+  - providerBindingsPath：xinyun-ai/sessions/provider-session-bindings.json
+  - providerSessionId：null；无宿主 canonical ID 时不得伪造
   - sessionStatusEnum：pending / creating / created / onboarding / ready / blocked / failed / closed
   - 角色会话入口：
     - roleId：

package/init/xinyun-ai-init/templates/host-preflight.template.json

@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "preflightId": "host-preflight-template",
+  "status": "not-checked",
+  "statusEnum": ["not-checked", "running", "passed", "partial", "blocked", "failed", "unknown"],
+  "requiredCapabilities": [
+    "createRealSession",
+    "reuseExistingSession",
+    "sendTask",
+    "receiveResult",
+    "recoverSession",
+    "closeSession",
+    "controlFileReadWrite"
+  ],
+  "capabilityStatusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
+  "dependencyStatusEnum": ["not-required", "required", "authorized", "not-authorized", "unknown"],
+  "capabilities": {
+    "createRealSession": {"capabilityId": "createRealSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; keep sessionId=null", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "reuseExistingSession": {"capabilityId": "reuseExistingSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; query existing binding only", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "sendTask": {"capabilityId": "sendTask", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; preserve task for resume", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "receiveResult": {"capabilityId": "receiveResult", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; preserve task for resume", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "recoverSession": {"capabilityId": "recoverSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "manual binding with evidence", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "closeSession": {"capabilityId": "closeSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "manual host close", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "controlFileReadWrite": {"capabilityId": "controlFileReadWrite", "detectionMethod": "filesystem", "status": "not-checked", "evidence": [], "dependencyStatus": "not-required", "fallbackPlan": "blocked on control-file write failure", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null}
+  },
+  "realSessionIdEvidence": {"required": true, "sessionIds": [], "source": null, "verified": false},
+  "readyGate": {"allRequiredCapabilitiesPassed": false, "dependencyAuthorizationRequired": true, "unknownBlocksReady": true, "fakeSessionIdProhibited": true},
+  "nextAction": "Run host capability preflight before starting role sessions.",
+  "checkedAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/init-result.template.json

@@ -9,7 +9,7 @@
   "statusEnum": ["pending", "initializing", "completed", "partial", "blocked", "unknown", "failed", "cancelled"],
   "statusSource": "xinyun-ai/current-task.md",
   "currentVersion": null,
-  "targetVersion": "1.11.0",
+  "targetVersion": "1.12.1",
   "idempotencyKey": null,
   "createdFiles": [],
   "updatedFiles": [],
@@ -59,6 +59,32 @@
     "hostCapability": "unknown",
     "degradationReason": null
   },
+  "v112": {
+    "hostPreflightPath": "xinyun-ai/host-preflight.json",
+    "initializationRecoveryPath": "xinyun-ai/index/initialization-recovery.json",
+    "manualSessionBindingsPath": "xinyun-ai/sessions/manual-bindings.json",
+    "sharedProjectSnapshotPath": "xinyun-ai/index/shared-project-snapshot.json",
+    "initializationTimingPath": "xinyun-ai/index/initialization-timing.json",
+    "resumeStatus": "not-started",
+    "resumeStatusEnum": ["not-started", "ready-to-resume", "resuming", "completed", "blocked", "failed"],
+    "attempt": 1,
+    "reusedTaskIds": [],
+    "reusedRoleTaskIds": [],
+    "duplicateTasksCreated": 0,
+    "realSessionIdRequired": true,
+    "manualBindingEvidenceRequired": true,
+    "projectSnapshotReuse": "not-checked",
+    "stageTimingRecorded": false
+  },
+  "v1121": {
+    "providerSessionBindingsPath": "xinyun-ai/sessions/provider-session-bindings.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "bindingGateStatus": "blocked",
+    "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"],
+    "realProviderSessionRequired": true,
+    "fakeProviderSessionIdProhibited": true,
+    "unverifiedScope": ["provider-specific host session evidence"]
+  },
   "v19": {
     "projectIdentityPath": "xinyun-ai/project-identity.json",
     "technicalLandscapePath": "xinyun-ai/technical-landscape.json",

package/init/xinyun-ai-init/templates/initialization-recovery.template.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "recoveryId": "initialization-recovery-template",
+  "taskId": null,
+  "mainTaskId": null,
+  "roleTaskIds": [],
+  "attempt": 1,
+  "status": "not-started",
+  "statusEnum": ["not-started", "ready-to-resume", "resuming", "completed", "blocked", "failed"],
+  "resumeTriggers": ["确认执行", "确认继续初始化"],
+  "resumeFromStage": null,
+  "stageIdEnum": ["preflight", "task-materialization", "role-sessions", "codegraph", "snapshot", "onboarding", "final-gate"],
+  "reuseContract": {
+    "reuseTaskId": true,
+    "reuseRoleTaskIds": true,
+    "incrementAttempt": true,
+    "createDuplicateTasks": false,
+    "idempotencyKey": null,
+    "keyAlgorithm": "RFC8785-JCS-SHA-256"
+  },
+  "blockedRoles": [],
+  "blockedReason": null,
+  "nextAction": "Wait for explicit confirmation or repair the recorded blocker.",
+  "lastRecoveryAction": null,
+  "recoveryEvidence": [],
+  "atomicWrite": {"tempFileRequired": true, "fsyncBeforeRename": true, "rename": true, "recoveryOnFailure": true},
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/initialization-timing.template.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": 1,
+  "timingId": "initialization-timing-template",
+  "taskId": null,
+  "attempt": 1,
+  "status": "not-started",
+  "stageStatusEnum": ["pending", "running", "completed", "skipped", "partial", "blocked", "failed", "recovery-required"],
+  "stages": [],
+  "stageRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"],
+  "cacheSummary": {"hitCount": 0, "missCount": 0, "reusedSnapshot": false, "reusedCodeGraph": false, "reusedSessions": 0},
+  "bottlenecks": [],
+  "recoveryActions": [],
+  "totalDurationMs": null,
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/manifest.template.json

@@ -1,6 +1,6 @@
 {
   "projectName": "",
-  "xinyunAiVersion": "1.11.0",
+  "xinyunAiVersion": "1.12.1",
   "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "initializationMode": "fast",
@@ -56,9 +56,15 @@
     ,"technicalLandscapeCoordination": true
     ,"databaseSqlOnlyAuthorization": true
     ,"projectAiTakeoverGate": true
+    ,"hostPreflightRecovery": true
+    ,"manualRoleSessionBinding": true
+    ,"codeGraphIncrementalReuse": true
+    ,"sharedProjectSnapshot": true
+    ,"initializationTiming": true
     ,"hostCapabilityPreflight": true
     ,"projectStatusGate": true
     ,"takeoverBaseline": true
+    ,"providerSpecificSessionBinding": true
   },
   "tasking": {
     "currentTask": "xinyun-ai/current-task.md",
@@ -80,6 +86,8 @@
     "roleExecutionTemplate": "xinyun-ai-init/templates/role-execution.template.md",
     "roleSessionBindings": "xinyun-ai/sessions/role-session-bindings.json",
     "roleSessionBindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
     "projectStatus": "xinyun-ai/project-status.json",
     "preflightReport": "xinyun-ai/preflight-report.json",
     "onboardingReport": "xinyun-ai/onboarding-report.json",
@@ -93,8 +101,10 @@
     "directory": "xinyun-ai/sessions/roles/",
     "bindings": "xinyun-ai/sessions/role-session-bindings.json",
     "bindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
     "parentSessionId": null,
-    "targetVersion": "1.11.0",
+    "targetVersion": "1.12.1",
     "requiredRoleCount": 5,
     "statusEnum": [
       "pending",
@@ -250,6 +260,34 @@
     "databaseDefault": { "authorization": "not-requested", "executionStatus": "needs-confirmation", "redactionStatus": "verified" },
     "readyRequires": ["projectIdentity", "codeGraph", "baseline", "teamResponsibility", "roleSessions", "taskTree", "localControlPlane", "legacyHandoff", "hostCapabilities", "sensitiveScan", "noHighRiskBlocker"]
   },
+  "v112": {
+    "status": "implemented-in-package",
+    "capability": "initializationGateRecovery",
+    "hostPreflight": "xinyun-ai/host-preflight.json",
+    "initializationRecovery": "xinyun-ai/index/initialization-recovery.json",
+    "manualSessionBindings": "xinyun-ai/sessions/manual-bindings.json",
+    "sharedProjectSnapshot": "xinyun-ai/index/shared-project-snapshot.json",
+    "initializationTiming": "xinyun-ai/index/initialization-timing.json",
+    "hostCapabilityStatusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
+    "preflightRequiredCapabilities": ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "recoverSession", "closeSession", "controlFileReadWrite"],
+    "resumeConfirmationPhrases": ["确认执行", "确认继续初始化"],
+    "codeGraphReuseStatuses": ["healthy", "initialized"],
+    "projectSnapshotReusePolicy": "reuse-until-business-or-codegraph-hash-changes",
+    "stageTimingRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"]
+  },
+  "v1121": {
+    "status": "implemented-in-package",
+    "capability": "providerSpecificSessionBinding",
+    "providerBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerBindings": "xinyun-ai/sessions/provider-session-bindings.json",
+    "providerEnum": ["codex"],
+    "bindingModeEnum": ["auto-created", "auto-reused", "manual", "recovery", "local-degraded"],
+    "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"],
+    "identityEvidenceRequired": ["providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "source", "verifiedAt", "evidenceHash"],
+    "interactionEvidenceRequired": ["sendReceipt", "receiveReceipt", "transcriptHash", "messageCount", "recordedAt", "evidenceHash"],
+    "bindingGate": "provider canonical ID + identity evidence + interaction evidence + exclusive occupancy",
+    "unsupportedHostPolicy": "blocked-without-fake-provider-session-id"
+  },
   "v111": {
     "status": "implemented-in-package",
     "capability": "initializationAcceleration",

package/init/xinyun-ai-init/templates/manual-session-binding.template.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "bindingId": "manual-session-binding-template",
+  "taskId": null,
+  "roleTaskId": null,
+  "roleId": null,
+  "sessionId": null,
+  "providerSessionId": null,
+  "projectRootHash": null,
+  "workspaceScope": null,
+  "title": null,
+  "cwd": null,
+  "sessionIdType": "host-returned-real-session",
+  "provider": "codex",
+  "bindingMode": "manual",
+  "boundBy": null,
+  "boundAt": null,
+  "evidence": [],
+  "evidenceRequiredFields": ["evidenceType", "source", "sessionId", "providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "interactionHash", "beforeSnapshotHash", "afterSnapshotHash", "recordedAt"],
+  "bindingStatus": "pending",
+  "bindingStatusEnum": ["pending", "bound", "rejected", "blocked", "released"],
+  "executionEligible": false,
+  "eligibilityRule": "bound + real sessionId + evidence verified + role onboarding ready",
+  "fakeSessionIdProhibited": true,
+  "rejectionReason": null,
+  "audit": [],
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/project-check.template.md

@@ -168,6 +168,15 @@
 - 敏感扫描、业务文件 changedFiles 和禁止操作证明是否通过：待填写
 - `projectStatus=ready` 和 `executionEligible=true` 是否仅在全部门禁通过后出现：待填写
 
+## v1.12.1 provider session checks
+
+- provider binding uses a host canonical `providerSessionId`: pending
+- ordinary thread IDs, task IDs, titles, and summaries are rejected as provider identity: pending
+- project, role, task, title, cwd, and exclusive occupancy evidence: pending
+- redacted send/receive interaction evidence and transcript hash: pending
+- manual binding without evidence remains pending/blocked: pending
+- writeback recovery reuses task IDs, increments attempt, and creates no duplicate session: pending
+
 ## v1.9 检查
 
 - 项目身份是否使用 realpath / lexical-fallback、Unicode NFC、projectRootHash 和 repositoryScopeHash：待填写

package/init/xinyun-ai-init/templates/project-guide.template.md

@@ -218,6 +218,8 @@
 - roleSessionIdempotency：RFC8785-JCS-SHA-256(projectRootHash, workspaceScope, repositoryScopeHash, workstream, taskId, roleId, provider, targetVersion)；v1.7.3 四字段仅作创建兼容索引，不参与候选选择、复用或跨项目身份判定
 - parentSessionId：待填写
 - real sessionId：待填写；不得伪造 sessionId
+- providerSessionId：待填写；只能来自宿主 canonical session API，普通线程 ID 不得直接绑定
+- provider binding：xinyun-ai/sessions/provider-session-bindings.json；必须有 identityEvidence、interactionEvidence 和 exclusive occupancy
 - onboarding：created 后先只读 onboarding，不能直接 ready
 - host unsupported：local-degraded-no-fake-session-id
 - created-but-writeback-failed：待填写恢复线索

package/init/xinyun-ai-init/templates/project-index.template.json

@@ -147,6 +147,10 @@
     "directory": "xinyun-ai/sessions/roles/",
     "bindings": "xinyun-ai/sessions/role-session-bindings.json",
     "bindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
     "requiredRoleCount": 5,
     "statusEnum": [
       "pending",
@@ -273,6 +277,30 @@
     "databaseDefault": { "authorization": "not-requested", "executionStatus": "needs-confirmation", "redactionStatus": "verified" },
     "readyRequires": ["projectIdentity", "codeGraph", "baseline", "teamResponsibility", "roleSessions", "taskTree", "localControlPlane", "legacyHandoff", "hostCapabilities", "sensitiveScan", "noHighRiskBlocker"]
   },
+  "v112": {
+    "status": "implemented-in-package",
+    "capability": "initializationGateRecovery",
+    "hostPreflight": "xinyun-ai/host-preflight.json",
+    "initializationRecovery": "xinyun-ai/index/initialization-recovery.json",
+    "manualSessionBindings": "xinyun-ai/sessions/manual-bindings.json",
+    "sharedProjectSnapshot": "xinyun-ai/index/shared-project-snapshot.json",
+    "initializationTiming": "xinyun-ai/index/initialization-timing.json",
+    "hostCapabilityStatusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
+    "preflightRequiredCapabilities": ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "recoverSession", "closeSession", "controlFileReadWrite"],
+    "resumeConfirmationPhrases": ["确认执行", "确认继续初始化"],
+    "codeGraphReuseStatuses": ["healthy", "initialized"],
+    "projectSnapshotReusePolicy": "reuse-until-business-or-codegraph-hash-changes",
+    "stageTimingRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"]
+  },
+  "v1121": {
+    "status": "implemented-in-package",
+    "providerBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerBindings": "xinyun-ai/sessions/provider-session-bindings.json",
+    "providerEnum": ["codex"],
+    "bindingModeEnum": ["auto-created", "auto-reused", "manual", "recovery", "local-degraded"],
+    "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"],
+    "bindingGate": "provider canonical ID + identity evidence + interaction evidence + exclusive occupancy"
+  },
   "v111": {
     "status": "implemented-in-package",
     "capability": "initializationAcceleration",

package/init/xinyun-ai-init/templates/provider-session-binding.template.json

@@ -0,0 +1,60 @@
+{
+  "schemaVersion": 1,
+  "bindingId": "provider-session-binding-template",
+  "provider": "codex",
+  "providerSessionId": null,
+  "providerSessionIdType": "provider-canonical-session",
+  "roleId": null,
+  "taskId": null,
+  "projectRootHash": null,
+  "workspaceScope": null,
+  "repositoryScopeHash": null,
+  "workstream": null,
+  "title": null,
+  "cwd": null,
+  "createdAt": null,
+  "identityEvidence": {
+    "providerSessionId": null,
+    "projectRootHash": null,
+    "workspaceScope": null,
+    "roleId": null,
+    "taskId": null,
+    "title": null,
+    "cwd": null,
+    "source": null,
+    "verifiedAt": null,
+    "evidenceHash": null
+  },
+  "interactionEvidence": {
+    "sendReceipt": null,
+    "receiveReceipt": null,
+    "transcriptHash": null,
+    "messageCount": 0,
+    "recordedAt": null,
+    "evidenceHash": null
+  },
+  "bindingMode": "auto-created",
+  "bindingStatus": "pending",
+  "executionEligible": false,
+  "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"],
+  "boundBy": null,
+  "boundAt": null,
+  "attempt": 1,
+  "recovery": {
+    "reuseTaskId": true,
+    "reuseRoleTaskId": true,
+    "incrementAttempt": true,
+    "createdDuplicateSession": false,
+    "recoveryReason": null,
+    "nextAction": null
+  },
+  "occupancy": {
+    "occupancyStatus": "unknown",
+    "occupiedByProjectRootHash": null,
+    "occupiedByRoleId": null,
+    "checkedAt": null
+  },
+  "blockedReason": null,
+  "audit": [],
+  "fakeProviderSessionIdProhibited": true
+}

package/init/xinyun-ai-init/templates/role-execution.template.md

@@ -44,6 +44,7 @@
 - 会话创建成功后先进入 `sessionStatus=onboarding`，只读职责范围内资料并生成角色理解记录；不得因会话创建成功直接把任务标为 `ready` 或获得业务代码修改授权。
 - 只有角色理解完成、职责确认完成、成员/会话绑定满足、确认人关系无冲突且执行门禁满足时，才允许 `sessionStatus=ready` 与 `executionEligible=true`。
 - Codex 宿主不支持创建子会话、权限不足或创建失败时，必须保留 `sessionId=null`，记录 `sessionStatus=blocked/failed`、失败原因和本地降级说明，不得伪造会话。
+- v1.12.1 起，`providerSessionId` 必须是 Codex 宿主 canonical session API 返回值；普通线程 ID、taskId、标题或历史摘要不得直接绑定。绑定前需验证项目身份、roleId、taskId、title、cwd、独占占用、`identityEvidence` 和 `interactionEvidence`。
 
 ## 幂等