@pm_zhousl/xinyun-ai-init 1.12.0 → 1.13.0

package/init/xinyun-ai-init/README.md

@@ -2,7 +2,7 @@
 
 本目录是“欣芸技术开发 Agent 流”的初始化包，负责把完整 AI 执行要求下发到目标项目。
 
-当前规则版本：`1.12.0`。
+当前规则版本：`1.13.0`。
 
 ## Codex 一句话入口
 

package/init/xinyun-ai-init/rules/directory-self-completion.md

@@ -61,6 +61,8 @@ When takeover initialization is authorized, create `host-preflight.json`, `index
 - `manifest.json`、`project-index.json` 和 `task-index.json` 必须登记 `roleSessions`、`roleSessionBindingIds`、`roleSessionBindings`、`provider=codex` 和 `sessionStatus` 枚举。
 - 绑定目录只保存 Codex 宿主返回的真实 `sessionId` 摘要、onboarding 状态、失败原因和 audit，不保存伪造 sessionId。
 - 宿主不支持创建子会话时，仍可补齐本地目录和降级记录，状态使用 `local-degraded-no-fake-session-id`。
+- v1.12.1 provider 绑定记录固定写入 `xinyun-ai/sessions/provider-session-bindings.json`，模板来源为 `xinyun-ai-init/templates/provider-session-binding.template.json`。只有宿主 canonical `providerSessionId`、身份/交互证据和独占占用均通过时才可绑定；未知或普通线程 ID 保持 blocked/pending。
+- v1.13.0 按需补齐 `provider-adapter.json`、`manual-session-recovery.json` 和 `index/initialization-change-report.json`；宿主预检失败时只生成恢复引导和阻断记录，不先执行大规模 CodeGraph 扫描。
 
 ## v1.8 按需目录
 

package/init/xinyun-ai-init/rules/init-rules.md

@@ -1,5 +1,13 @@
 # 初始化规则
 
+## v1.12.1 provider session binding
+
+Use the provider-specific binding contract before role-session work. `providerSessionId` must be a provider canonical session value, not a normal thread ID. Identity and interaction evidence are required for binding; missing evidence remains pending or blocked.
+
+v1.13.0 preflight is a hard early gate. Check all adapter operations before large CodeGraph analysis; on host failure preserve tasks, emit manual recovery prompts, and record `codeGraphDeferred=true`.
+
+After an automatic role-session failure, the user decision gate offers `manual-create`, `defer`, and `redetect` exactly once. No decision means blocked state with no fake binding and no repeated prompt. Manual recovery requires the explicit confirmation `已创建，继续绑定`; defer preserves all task, snapshot, CodeGraph and recovery IDs; redetect runs only host preflight. Ready requires all five real role bindings and onboarding.
+
 - 首次只创建最小 `xinyun-ai/` 骨架和极简 `AGENTS.md`。
 - 首次不创建大量规则、模板、脚本和业务沉淀目录。
 - 首次不执行语言级语法检查、lint、typecheck、测试或构建命令。

package/init/xinyun-ai-init/rules/session-workbench.md

@@ -1,5 +1,17 @@
 # 会话工作台规则
 
+## v1.12.1 provider-specific session binding
+
+Read `v1.12.1-provider-session-binding.md` before role-session work. `providerSessionId` must come from the provider's canonical session API; a normal thread ID, task ID, title, history summary, or user statement is not a binding. Verify project identity, roleId, taskId, title, cwd, occupancy, and real send/receive evidence before binding. Missing evidence stays `bindingStatus=pending/blocked` and `executionEligible=false`.
+
+Recovery reuses taskId and roleTaskId, increments attempt, and enters `recovery-required` after a writeback failure without creating duplicates. Unsupported hosts use `local-degraded` with `providerSessionId=null`; never fabricate a session ID.
+
+## v1.13.0 host adapter preflight
+
+Automatic session failure enters a one-time user decision gate: `manual-create`, `defer`, or `redetect`. Manual creation outputs all five role prompts and binds only after `已创建，继续绑定` plus canonical provider ID and identity/interaction evidence. Defer preserves task and snapshot IDs; redetect does host preflight only. Until all five role sessions complete onboarding, keep the project blocked.
+
+Run the provider adapter preflight for create/reuse/send/receive/query-status/recover/close/control-file access before broad CodeGraph work. Any required unknown, unavailable, permission-denied, failed, not-verified, or dependency-gated capability blocks the role-session stage and defers the expensive scan. Unsupported hosts emit the five-role manual recovery guide and preserve original task IDs.
+
 首次初始化不创建会话工作台。复杂任务中可按需创建：
 
 ```md

package/init/xinyun-ai-init/rules/upgrade-rules.md

@@ -1,5 +1,13 @@
 # 升级规则
 
+## v1.12.1 provider session binding
+
+Validate provider canonical session identity, project identity, role/task, title/cwd, interaction evidence, and exclusive occupancy before reuse. Unknown or missing evidence is blocked; ordinary thread IDs cannot be reused. Writeback recovery reuses the original task IDs, increments attempt, and cannot create duplicate sessions.
+
+v1.13.0 upgrades must compare initialization and pre-existing user changes by before/after hashes. Never replace an unverified old session or roll back pre-existing admin, supplier, uniapp, SQL, configuration, or business files.
+
+If automatic role-session creation fails, write `decisionStatus=awaiting-user` and offer `manual-create`, `defer`, or `redetect` once. `manual-create` waits for `已创建，继续绑定` before canonical provider binding; `defer` reuses the original task, snapshot, CodeGraph and recovery records; `redetect` performs host preflight only. Missing decisions and missing role bindings remain blocked and never become ready.
+
 如果项目已存在 `xinyun-ai/`，不要重复初始化，应进入升级检查模式。
 
 升级流程：

package/init/xinyun-ai-init/rules/v1.12.1-provider-session-binding.md

@@ -0,0 +1,25 @@
+# v1.12.1 provider-specific session binding
+
+## Canonical provider identity
+
+`providerSessionId` is valid only when it is returned by the declared provider's supported session API as a canonical session identifier. A normal Codex thread ID, task ID, local filename, random value, title, history summary, or user statement is not sufficient evidence and must never be copied into `providerSessionId`.
+
+Every binding records `provider`, `providerSessionId`, `roleId`, `taskId`, `projectRootHash`, `workspaceScope`, `repositoryScopeHash`, `workstream`, `title`, `cwd`, `createdAt`, `identityEvidence`, `interactionEvidence`, `bindingMode`, `bindingStatus`, `boundBy`, and `boundAt`.
+
+`identityEvidence` must verify the provider session ID, project identity, role, task, title, cwd, evidence source, verification time, and evidence hash. `interactionEvidence` must contain a real send receipt, receive receipt, transcript hash, message count, recorded time, and evidence hash. Sensitive prompt or response content is redacted before persistence.
+
+## Binding gate and states
+
+`bindingMode` is one of `auto-created`, `auto-reused`, `manual`, `recovery`, or `local-degraded`. `bindingStatus` is one of `pending`, `validating`, `bound`, `blocked`, `rejected`, `released`, `conflict`, or `recovery-required`.
+
+Only `bindingStatus=bound` with both evidence groups verified and exclusive occupancy may produce a project `sessionId` or `executionEligible=true`. Manual binding without evidence remains `pending` or `blocked`. Host unsupported, identity mismatch, role/task mismatch, invalid title/cwd, missing interaction evidence, occupied session, or writeback failure must not become ready.
+
+## Reuse and recovery
+
+Candidate reuse first validates the provider session and all project identity fields. The v1.9 eight-field JCS-SHA-256 key remains the candidate reuse key. v1.7.3 four-field data is compatibility lookup only and never selects or binds a candidate. Recovery reuses the original task and role-task IDs, increments `attempt`, preserves audit, and never creates duplicate tasks or sessions.
+
+If the host cannot provide a canonical provider session ID, keep `providerSessionId=null`, record `bindingStatus=blocked`, `blockedReason=host-session-capability-unavailable`, and a concrete `nextAction`. Do not fabricate an ID.
+
+## Boundaries
+
+Do not install or log in to a provider, change business files, connect to a database, execute SQL, write Git, install dependencies, or publish npm packages as part of binding.

package/init/xinyun-ai-init/rules/v1.13.0-host-adapter.md

@@ -0,0 +1,43 @@
+# v1.13.0 host adapter and manual recovery
+
+## Session identity contract
+
+The host identity fields are not interchangeable. `hostThreadId` identifies a host UI thread, `hostSessionId` identifies a host-side session record, `providerSessionId` is the only canonical provider session identity, `projectSessionId` is the local project binding identity, `sessionId` is a compatibility alias, and `orchestratorSessionId` identifies the parent orchestrator session. A host thread, task ID, filename, title, history summary or user statement must never be copied into `providerSessionId`.
+
+For one role binding, `sessionId` and `projectSessionId` remain null until a provider canonical ID has been verified. They may then be written only according to the binding record's mapping rule, with `sessionId=providerSessionId`. The same `roleId`, `taskId`, project identity, provider ID, attempt and status must agree in role-session-binding, provider-session-binding, assignments, the role task, task-index and init-result. A project identity mismatch, a second verified binding for the same role/task, or an occupied provider session blocks the binding and records an audit entry.
+
+Binding requires independently recorded evidence for all six provider operations: create-or-reuse, send, receive, query-status, recover and close. Missing evidence keeps the binding pending/blocked and `executionEligible=false`.
+
+## Task-first session confirmation
+
+Initialization first creates the named main task and five role-execution tasks. It must not create, reuse, or complete a provider session before the user chooses `create-and-onboard`. The initial control files record `sessionCreationDecision.status=awaiting-confirmation`, keep every `sessionId` and `providerSessionId` null, and remain `projectStatus=blocked` with `executionEligible=false`.
+
+The user may choose `create-and-onboard` to enter provider create/reuse and read-only onboarding, or `defer` to preserve the task tree, snapshot, CodeGraph record and recovery record for later. A deferred run reuses the original task IDs and does not rescan or create duplicates. A missing decision does not auto-select either branch and does not repeatedly prompt.
+
+## Preflight first
+
+Before CodeGraph or broad project analysis, check the provider adapter for create, reuse, send, receive, query status, recover, close, and local control-file read/write. If a required host capability is unavailable, unknown, permission-denied, failed, not-verified, or dependency-gated, stop at preflight, keep project initialization blocked, and do not start a large CodeGraph scan.
+
+## Adapter identity
+
+The adapter must return the provider canonical `providerSessionId` through a supported provider API. Ordinary `threadId`, `taskId`, filename, title, history summary, or user statement cannot be used as a provider session ID. Automatic create/reuse validates projectRootHash, workspaceScope, roleId, taskId, title, cwd, identityEvidence, interactionEvidence, occupancy, and the original idempotency key.
+
+## Manual recovery
+
+When the host is unsupported, create only the local manual recovery guide for the five named roles. The guide contains the Chinese session title, responsibility, cwd and first read-only task prompt. After the user creates sessions, record the provider canonical ID and evidence; missing or unverifiable evidence remains pending/unknown/blocked. Recovery reuses taskId and roleTaskId, increments attempt, preserves the old binding, and never creates duplicate tasks or replaces an unverified session.
+
+## Change isolation
+
+Capture business, control-plane, Git and existing-task/session baselines before initialization. Classify every after-change path as initialization-created, initialization-updated, pre-existing-user-change, or control-plane-only. Never roll back or attribute pre-existing admin, supplier, uniapp, SQL, configuration or other business changes to initialization.
+
+No provider login/install, dependency install, database connection, SQL, Git write, business-code change, or npm publish is allowed.
+
+## Failure decision and manual recovery
+
+When automatic role-session creation fails, record one decision record and present exactly three choices: `manual-create`, `defer`, or `redetect`. Until the user chooses, keep `projectStatus=blocked`, `decisionStatus=awaiting-user`, `executionEligible=false`, and all missing provider IDs null. Do not silently skip, fabricate a binding, or repeat the prompt.
+
+`manual-create` emits the five standard role names, responsibilities, working directory and first read-only task prompts. Only the explicit phrase `已创建，继续绑定` starts binding. The host must return a real canonical `providerSessionId`; validate project identity, role, task, cwd, title, occupancy and send/receive evidence before binding. Reuse the original task IDs and increment `attempt`.
+
+`defer` preserves the main task, five role tasks, project snapshot, CodeGraph record and recovery record. A later run must reuse them and must not rescan or create duplicate tasks. `redetect` runs host preflight only and does not repeat project initialization. All five roles must be bound and complete read-only onboarding before `projectStatus=ready`.
+
+Each decision is one immutable record with `decisionId`, `userDecision`, `actor`, `source`, `decidedAt` and `decisionEvidence` containing `inputHash` and `evidenceHash`. The same decision fields must be equal in manual-session-recovery and init-result. Only one of `manual-create`, `defer`, or `redetect` may be selected; an absent choice remains blocked without a repeated prompt. Record `userDecision`, `requiredRoleCount`, `createdRoleCount`, `remainingRoleIds`, `decisionStatus`, `decidedAt`, `nextAction` and `decisionEvidence` in the recovery record and mirror them in `init-result.json`. Recovery reuses the original task IDs and increments `attempt`.

package/init/xinyun-ai-init/templates/AGENTS.template.md

@@ -195,6 +195,8 @@ CodeGraph 为必需能力时，只有 `initialized` 或 `healthy` 才能将结
 - 真实 `sessionId` 必须来自 Codex 宿主返回值；不得伪造 sessionId。宿主不支持时记录 `local-degraded-no-fake-session-id`，保持 `sessionId=null`。
 - 创建后的角色会话先进入只读 `onboarding`；只有职责理解、职责确认、成员 / 会话绑定、确认门禁和执行资格都满足后才允许 `sessionStatus=ready`。
 - 创建成功不等于业务代码修改授权；普通咨询不创建角色会话，不写绑定文件，不创建外部账号或第三个会话。
+- v1.12.1 起，角色会话必须另外记录 provider canonical `providerSessionId`；普通线程 ID、taskId、标题或历史摘要不得直接绑定。绑定前必须验证项目身份、roleId、taskId、title、cwd、独占占用、`identityEvidence` 和 `interactionEvidence`；证据不全时保持 pending/blocked。
+- v1.13.0 起先执行 provider adapter preflight；宿主必要能力失败或未知时快速 blocked，设置 `codeGraphDeferred=true`，只生成五角色人工恢复引导，不先做大规模 CodeGraph 扫描。初始化变更必须与项目原有 admin、supplier、uniapp、SQL 等改动分开归因，不回滚用户内容。
 
 AI 接手本项目时，请先读取：
 

package/init/xinyun-ai-init/templates/README.template.md

@@ -2,6 +2,14 @@
 
 本目录是当前项目的 AI 协作工作区，采用“欣芸技术开发 Agent 流”。
 
+## v1.12.1 provider session binding
+
+The canonical external identity of a role session is the provider-returned `providerSessionId`. A normal thread ID, taskId, title, or history summary cannot bind a role. Binding requires project identity, roleId, taskId, title, cwd, exclusive occupancy, and real send/receive evidence; incomplete evidence cannot become ready or executionEligible.
+
+## v1.13.0 host adapter and manual recovery
+
+Run host adapter preflight before large CodeGraph analysis. Unsupported or unverifiable host capability blocks role sessions and emits a five-role manual recovery guide. Initialization change reports must separate newly created control files from pre-existing user changes.
+
 ## v1.10 接管门禁
 
 当前项目必须先完成 `preflight-report.json` 和 `onboarding-report.json`，再进入业务代码开发。`project-status.json` 只有在项目身份、CodeGraph、基线、团队职责、五个真实角色会话、本地控制面、旧沉淀、宿主能力和敏感扫描全部通过时才可为 `ready`；缺失真实角色会话必须为 `blocked + required-role-session-not-created`。CLI 只创建 `xinyun-ai-init/`，AI 获得授权后才创建项目控制面。

package/init/xinyun-ai-init/templates/core-rules.template.md

@@ -606,6 +606,16 @@ Skill 分配使用 `assignmentStatus`，使用记录使用 `usageStatus`。固
 
 总工维护 `xinyun-ai/technical-landscape.json`。只有 coverageStatus=full、unverifiedScope=[]、核心对象均有有效证据且无未登记冲突时才可 ready；partial/unknown 只能保持 partial/blocked。主会话维护 requirementPacket，总工输出 technicalImpactPacket；两个 packet 最小字段固定为 schemaVersion、packetId、requirementId、taskId、projectRootHash、version、status、content、evidence、sourceRevision、contentHash、createdAt、updatedAt，使用 RFC8785 JCS-SHA-256。需求、影响范围、身份、版本或 sourceRevision 变化时写 blockedReason=packet-stale。
 
+## v1.12.1 provider-specific session binding
+
+角色会话的外部身份只能是 provider 返回的 canonical `providerSessionId`。普通线程 ID、taskId、标题、历史摘要或用户口述不能直接绑定。绑定前必须验证项目身份、roleId、taskId、title、cwd、独占占用和真实发送/接收交互证据；证据不全保持 `bindingStatus=pending/blocked`，不得 ready 或 executionEligible。创建回写失败复用原 taskId/roleTaskId、递增 attempt，不创建重复会话；宿主不可用时 `providerSessionId=null`，不得伪造。
+
+## v1.13.0 host adapter and change isolation
+
+宿主 adapter 必须先检测 create/reuse/send/receive/query-status/recover/close/control-file 读写。任一必要能力为 unknown、unavailable、permission-denied、failed、not-verified 或依赖未授权时，先 blocked 并设置 `codeGraphDeferred=true`，不得先做大规模 CodeGraph 扫描。宿主不可用时只生成五角色人工恢复引导。
+
+初始化结果必须按 before/after hash 区分 `initialization-created`、`initialization-updated`、`pre-existing-user-change` 和 `control-plane-only`；不得回滚或归因用户已有业务改动。
+
 数据库默认 databaseAccessMode=sql-only。连接、只读查询、结构变更、数据修改分别授权，四类授权状态固定为 not-requested/requested/authorized/denied/expired/failed/unknown，redactionStatus 固定为 verified/unverified/failed；SQL 执行前校验规范化 SQL、参数、方言、targetEnvironment、授权范围生成的 statementHash。授权或输入变化时回到 needs-confirmation，并追加包含 auditId、action、actorType、actorId、authorizationType、statementHash、targetEnvironment、resultStatus、redactionStatus、evidence、at 的 audit。
 
 ## 自我学习

package/init/xinyun-ai-init/templates/current-task.template.md

@@ -148,6 +148,8 @@
   - blockedCount：
   - localDegradedCount：
   - bindingsPath：xinyun-ai/sessions/role-session-bindings.json
+  - providerBindingsPath：xinyun-ai/sessions/provider-session-bindings.json
+  - providerSessionId：null；无宿主 canonical ID 时不得伪造
   - sessionStatusEnum：pending / creating / created / onboarding / ready / blocked / failed / closed
   - 角色会话入口：
     - roleId：

package/init/xinyun-ai-init/templates/host-preflight.template.json

@@ -8,6 +8,7 @@
     "reuseExistingSession",
     "sendTask",
     "receiveResult",
+    "querySessionStatus",
     "recoverSession",
     "closeSession",
     "controlFileReadWrite"
@@ -19,6 +20,7 @@
     "reuseExistingSession": {"capabilityId": "reuseExistingSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; query existing binding only", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
     "sendTask": {"capabilityId": "sendTask", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; preserve task for resume", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
     "receiveResult": {"capabilityId": "receiveResult", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; preserve task for resume", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
+    "querySessionStatus": {"capabilityId": "querySessionStatus", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "blocked; require manual provider verification", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
     "recoverSession": {"capabilityId": "recoverSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "manual binding with evidence", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
     "closeSession": {"capabilityId": "closeSession", "detectionMethod": "host-api", "status": "not-checked", "evidence": [], "dependencyStatus": "unknown", "fallbackPlan": "manual host close", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null},
     "controlFileReadWrite": {"capabilityId": "controlFileReadWrite", "detectionMethod": "filesystem", "status": "not-checked", "evidence": [], "dependencyStatus": "not-required", "fallbackPlan": "blocked on control-file write failure", "usedTools": [], "unusedTools": [], "unverifiedScope": [], "failureReason": null, "checkedAt": null}

package/init/xinyun-ai-init/templates/init-result.template.json

@@ -9,7 +9,7 @@
   "statusEnum": ["pending", "initializing", "completed", "partial", "blocked", "unknown", "failed", "cancelled"],
   "statusSource": "xinyun-ai/current-task.md",
   "currentVersion": null,
-  "targetVersion": "1.12.0",
+  "targetVersion": "1.13.0",
   "idempotencyKey": null,
   "createdFiles": [],
   "updatedFiles": [],
@@ -49,11 +49,15 @@
     "identityMapping": {
       "hostThreadId": null,
       "hostSessionId": null,
+      "providerSessionId": null,
       "projectSessionId": null,
+      "sessionId": null,
       "orchestratorSessionId": null,
       "mappingStatus": "pending",
       "identityEvidence": [],
-      "creationEvidence": []
+      "creationEvidence": [],
+      "equivalenceRule": "sessionId equals providerSessionId only after canonical provider evidence is verified",
+      "requiredHostEvidence": ["create-or-reuse", "send", "receive", "query-status", "recover", "close"]
     },
     "realAiSessionVerified": false,
     "hostCapability": "unknown",
@@ -76,6 +80,50 @@
     "projectSnapshotReuse": "not-checked",
     "stageTimingRecorded": false
   },
+  "v1121": {
+    "providerSessionBindingsPath": "xinyun-ai/sessions/provider-session-bindings.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "bindingGateStatus": "blocked",
+    "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"],
+    "realProviderSessionRequired": true,
+    "fakeProviderSessionIdProhibited": true,
+    "unverifiedScope": ["provider-specific host session evidence"]
+  },
+  "v113": {
+    "providerAdapterPath": "xinyun-ai/sessions/provider-adapter.json",
+    "manualSessionRecoveryPath": "xinyun-ai/sessions/manual-session-recovery.json",
+    "initializationChangeReportPath": "xinyun-ai/index/initialization-change-report.json",
+    "preflightStatus": "not-checked",
+    "codeGraphDeferred": false,
+    "changeOriginStatus": "not-checked",
+    "realProviderSessionRequired": true,
+    "userDecision": null,
+    "decisionId": null,
+    "actor": null,
+    "source": "user-confirmation",
+    "requiredRoleCount": 5,
+    "createdRoleCount": 0,
+    "remainingRoleIds": ["project-owner", "project-product", "chief-engineer", "programmer", "test-reviewer"],
+    "decisionStatus": "not-asked",
+    "decidedAt": null,
+    "nextAction": "present-choice-once",
+    "decisionEvidence": [],
+    "decisionEvidenceSchema": ["decisionId", "userDecision", "actor", "source", "decidedAt", "inputHash", "evidenceHash"],
+    "sessionCreationDecision": {
+      "decision": null,
+      "decisionId": null,
+      "status": "awaiting-confirmation",
+      "statusEnum": ["not-asked", "awaiting-confirmation", "approved", "deferred", "processing", "completed", "blocked"],
+      "actor": null,
+      "source": "user-confirmation",
+      "decidedAt": null,
+      "decisionEvidence": [],
+      "nextAction": "ask-create-or-defer",
+      "mainTaskCreatedBeforeSession": true,
+      "roleTasksCreatedBeforeSession": true,
+      "sessionIdsRemainNullUntilDecision": true
+    }
+  },
   "v19": {
     "projectIdentityPath": "xinyun-ai/project-identity.json",
     "technicalLandscapePath": "xinyun-ai/technical-landscape.json",

package/init/xinyun-ai-init/templates/initialization-change-report.template.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": 1,
+  "reportId": "initialization-change-report-template",
+  "status": "not-checked",
+  "changeOriginEnum": ["initialization-created", "initialization-updated", "pre-existing-user-change", "control-plane-only"],
+  "baseline": {"businessFilesHash": null, "controlFilesHash": null, "gitStatusHash": null, "capturedAt": null},
+  "changes": [],
+  "classificationRule": "Compare before and after file hashes; never attribute pre-existing user changes to initialization and never roll them back.",
+  "requiredChangeFields": ["path", "origin", "beforeHash", "afterHash", "changedBy", "checkedAt", "evidence"],
+  "businessCodeChanged": {"value": "unknown", "evidence": []},
+  "sensitiveScan": {"status": "not-checked", "matches": []},
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/manifest.template.json

@@ -1,6 +1,6 @@
 {
   "projectName": "",
-  "xinyunAiVersion": "1.12.0",
+  "xinyunAiVersion": "1.13.0",
   "scriptVersion": "2026.07.23",
   "schemaVersion": "1",
   "initializationMode": "fast",
@@ -64,6 +64,7 @@
     ,"hostCapabilityPreflight": true
     ,"projectStatusGate": true
     ,"takeoverBaseline": true
+    ,"providerSpecificSessionBinding": true
   },
   "tasking": {
     "currentTask": "xinyun-ai/current-task.md",
@@ -85,12 +86,17 @@
     "roleExecutionTemplate": "xinyun-ai-init/templates/role-execution.template.md",
     "roleSessionBindings": "xinyun-ai/sessions/role-session-bindings.json",
     "roleSessionBindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
     "projectStatus": "xinyun-ai/project-status.json",
     "preflightReport": "xinyun-ai/preflight-report.json",
     "onboardingReport": "xinyun-ai/onboarding-report.json",
     "hostCapabilities": "xinyun-ai/host-capabilities.json",
     "takeoverBaseline": "xinyun-ai/index/takeover-baseline.json",
-    "controlPlaneIndex": "xinyun-ai/index/control-plane-index.json"
+    "controlPlaneIndex": "xinyun-ai/index/control-plane-index.json",
+    "providerAdapter": "xinyun-ai/sessions/provider-adapter.json",
+    "manualSessionRecovery": "xinyun-ai/sessions/manual-session-recovery.json",
+    "initializationChangeReport": "xinyun-ai/index/initialization-change-report.json"
   },
   "roleSessions": {
     "enabled": true,
@@ -98,8 +104,10 @@
     "directory": "xinyun-ai/sessions/roles/",
     "bindings": "xinyun-ai/sessions/role-session-bindings.json",
     "bindingTemplate": "xinyun-ai-init/templates/role-session-binding.template.json",
+    "providerSessionBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerSessionBindings": "xinyun-ai/sessions/provider-session-bindings.json",
     "parentSessionId": null,
-    "targetVersion": "1.12.0",
+    "targetVersion": "1.13.0",
     "requiredRoleCount": 5,
     "statusEnum": [
       "pending",
@@ -264,12 +272,58 @@
     "sharedProjectSnapshot": "xinyun-ai/index/shared-project-snapshot.json",
     "initializationTiming": "xinyun-ai/index/initialization-timing.json",
     "hostCapabilityStatusEnum": ["available", "available-with-dependency", "unavailable", "permission-denied", "unknown", "not-checked", "not-verified", "failed"],
-    "preflightRequiredCapabilities": ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "recoverSession", "closeSession", "controlFileReadWrite"],
+    "preflightRequiredCapabilities": ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "querySessionStatus", "recoverSession", "closeSession", "controlFileReadWrite"],
     "resumeConfirmationPhrases": ["确认执行", "确认继续初始化"],
     "codeGraphReuseStatuses": ["healthy", "initialized"],
     "projectSnapshotReusePolicy": "reuse-until-business-or-codegraph-hash-changes",
     "stageTimingRequiredFields": ["stageId", "attempt", "status", "startedAt", "finishedAt", "durationMs", "cacheHit", "failureReason", "bottleneck", "recoveryAction"]
   },
+  "v1121": {
+    "status": "implemented-in-package",
+    "capability": "providerSpecificSessionBinding",
+    "providerBindingTemplate": "xinyun-ai-init/templates/provider-session-binding.template.json",
+    "providerBindings": "xinyun-ai/sessions/provider-session-bindings.json",
+    "providerEnum": ["codex"],
+    "bindingModeEnum": ["auto-created", "auto-reused", "manual", "recovery", "local-degraded"],
+    "bindingStatusEnum": ["pending", "validating", "bound", "blocked", "rejected", "released", "conflict", "recovery-required"],
+    "identityEvidenceRequired": ["providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "source", "verifiedAt", "evidenceHash"],
+    "interactionEvidenceRequired": ["sendReceipt", "receiveReceipt", "transcriptHash", "messageCount", "recordedAt", "evidenceHash"],
+    "sessionIdentityFields": ["hostThreadId", "hostSessionId", "providerSessionId", "projectSessionId", "sessionId", "orchestratorSessionId"],
+    "canonicalSessionIdentity": "providerSessionId",
+    "sessionCompatibilityAlias": "sessionId",
+    "sessionIdentityMappingRule": "sessionId equals providerSessionId only after canonical provider evidence is verified; hostThreadId and hostSessionId are evidence only",
+    "requiredHostEvidence": ["create-or-reuse", "send", "receive", "query-status", "recover", "close"],
+    "crossFileSessionConsistency": "role-session-binding, provider-session-binding, assignments, task, task-index and init-result must agree on roleId, taskId, projectRootHash, providerSessionId, sessionId, attempt and status",
+    "bindingGate": "provider canonical ID + identity evidence + interaction evidence + exclusive occupancy",
+    "unsupportedHostPolicy": "blocked-without-fake-provider-session-id"
+  },
+  "v113": {
+    "status": "implemented-in-package",
+    "capability": "hostAdapterAndManualRecovery",
+    "providerAdapter": "xinyun-ai/sessions/provider-adapter.json",
+    "manualSessionRecovery": "xinyun-ai/sessions/manual-session-recovery.json",
+    "initializationChangeReport": "xinyun-ai/index/initialization-change-report.json",
+    "preflightRequiredCapabilities": ["createRealSession", "reuseExistingSession", "sendTask", "receiveResult", "querySessionStatus", "recoverSession", "closeSession", "controlFileReadWrite"],
+    "fastBlockBeforeCodeGraph": true,
+    "sessionIdentityFields": ["hostThreadId", "hostSessionId", "providerSessionId", "projectSessionId", "sessionId", "orchestratorSessionId"],
+    "canonicalSessionIdentity": "providerSessionId",
+    "sessionCompatibilityAlias": "sessionId",
+    "sessionIdentityMappingRule": "sessionId equals providerSessionId only after canonical provider evidence is verified; hostThreadId and hostSessionId are evidence only",
+    "requiredHostEvidence": ["create-or-reuse", "send", "receive", "query-status", "recover", "close"],
+    "crossFileSessionConsistency": "role-session-binding, provider-session-binding, assignments, task, task-index and init-result must agree on roleId, taskId, projectRootHash, providerSessionId, sessionId, attempt and status",
+    "changeOriginEnum": ["initialization-created", "initialization-updated", "pre-existing-user-change", "control-plane-only"],
+    "manualRecoveryRoles": ["project-owner", "project-product", "chief-engineer", "programmer", "test-reviewer"],
+    "userDecisionEnum": ["manual-create", "defer", "redetect"],
+    "decisionStatusEnum": ["not-asked", "awaiting-user", "selected", "processing", "completed", "blocked"],
+    "decisionRequiredFields": ["decisionId", "userDecision", "actor", "source", "requiredRoleCount", "createdRoleCount", "remainingRoleIds", "decisionStatus", "decidedAt", "nextAction", "decisionEvidence"],
+    "decisionEvidenceFields": ["decisionId", "userDecision", "actor", "source", "decidedAt", "inputHash", "evidenceHash"],
+    "sessionCreationDecisionEnum": ["create-and-onboard", "defer"],
+    "sessionCreationStatusEnum": ["not-asked", "awaiting-confirmation", "approved", "deferred", "processing", "completed", "blocked"],
+    "sessionCreationDecisionRequiredFields": ["decision", "decisionId", "status", "actor", "source", "decidedAt", "decisionEvidence", "nextAction"],
+    "taskFirstSessionGate": "create main task and five role tasks first; ask user before creating or completing role sessions",
+    "manualBindingConfirmationPhrase": "已创建，继续绑定",
+    "noChoicePolicy": "remain-blocked-without-repeat-prompt"
+  },
   "v111": {
     "status": "implemented-in-package",
     "capability": "initializationAcceleration",

package/init/xinyun-ai-init/templates/manual-session-binding.template.json

@@ -5,16 +5,32 @@
   "roleTaskId": null,
   "roleId": null,
   "sessionId": null,
-  "sessionIdType": "host-returned-real-session",
+  "providerSessionId": null,
+  "projectRootHash": null,
+  "workspaceScope": null,
+  "title": null,
+  "cwd": null,
+  "sessionIdType": "legacy-project-compatibility-alias",
+  "sessionIdSemantics": "legacy compatibility field; it cannot be bound from hostThreadId, hostSessionId, ordinary threadId, taskId, title or history summary",
+  "canonicalSessionIdField": "providerSessionId",
+  "canonicalSessionIdSource": "provider-supported-session-api-response",
+  "hostIdentityFields": ["hostThreadId", "hostSessionId", "projectSessionId", "orchestratorSessionId"],
+  "hostThreadId": null,
+  "hostSessionId": null,
+  "projectSessionId": null,
+  "orchestratorSessionId": null,
   "provider": "codex",
+  "bindingMode": "manual",
   "boundBy": null,
   "boundAt": null,
   "evidence": [],
-  "evidenceRequiredFields": ["evidenceType", "source", "sessionId", "interactionHash", "beforeSnapshotHash", "afterSnapshotHash", "recordedAt"],
+  "evidenceRequiredFields": ["evidenceType", "source", "sessionId", "providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "interactionHash", "beforeSnapshotHash", "afterSnapshotHash", "recordedAt"],
+  "requiredHostEvidence": ["create-or-reuse", "send", "receive", "query-status", "recover", "close"],
+  "identityMappingRule": "sessionId and projectSessionId remain null until providerSessionId and all requiredHostEvidence are verified; then sessionId=providerSessionId",
   "bindingStatus": "pending",
   "bindingStatusEnum": ["pending", "bound", "rejected", "blocked", "released"],
   "executionEligible": false,
-  "eligibilityRule": "bound + real sessionId + evidence verified + role onboarding ready",
+  "eligibilityRule": "bound + verified providerSessionId + all requiredHostEvidence + identity evidence + interaction evidence + role onboarding ready",
   "fakeSessionIdProhibited": true,
   "rejectionReason": null,
   "audit": [],

package/init/xinyun-ai-init/templates/manual-session-recovery.template.json

@@ -0,0 +1,49 @@
+{
+  "schemaVersion": 1,
+  "recoveryId": "manual-session-recovery-template",
+  "provider": "codex",
+  "status": "not-started",
+  "statusEnum": ["not-started", "guided", "awaiting-user", "validating", "recovered", "blocked", "failed"],
+  "userDecisionEnum": ["manual-create", "defer", "redetect"],
+  "decisionStatusEnum": ["not-asked", "awaiting-user", "selected", "processing", "completed", "blocked"],
+  "reuseContract": {"reuseTaskId": true, "reuseRoleTaskId": true, "incrementAttempt": true, "createDuplicateTasks": false, "replaceUnverifiedSession": false},
+  "taskFirstSessionGate": {
+    "mainTaskCreatedBeforeSession": true,
+    "roleTasksCreatedBeforeSession": true,
+    "sessionIdsRemainNullUntilDecision": true,
+    "sessionCreationDecisionEnum": ["create-and-onboard", "defer"],
+    "sessionCreationStatusEnum": ["not-asked", "awaiting-confirmation", "approved", "deferred", "processing", "completed", "blocked"],
+    "sessionCreationDecision": null,
+    "status": "awaiting-confirmation",
+    "decisionId": null,
+    "actor": null,
+    "source": "user-confirmation",
+    "decidedAt": null,
+    "decisionEvidence": [],
+    "nextAction": "ask-create-or-defer"
+  },
+  "roles": [
+    {"roleId":"project-owner","sessionTitle":"项目负责人｜项目接管｜项目范围与授权","responsibility":"项目范围、授权边界和最终项目确认","firstTaskPrompt":"请只读确认项目身份、接管范围、禁止操作和当前阻断，不修改业务代码。","providerSessionId":null,"bindingStatus":"pending"},
+    {"roleId":"project-product","sessionTitle":"产品负责人｜项目接管｜需求与验收","responsibility":"需求、验收标准和用户目标","firstTaskPrompt":"请只读整理项目目标、需求边界和验收条件，不修改业务代码。","providerSessionId":null,"bindingStatus":"pending"},
+    {"roleId":"chief-engineer","sessionTitle":"总工程师｜项目接管｜技术全景与影响","responsibility":"技术全景、架构影响和风险门禁","firstTaskPrompt":"请只读检查技术栈、架构、CodeGraph 状态和影响范围，不修改业务代码。","providerSessionId":null,"bindingStatus":"pending"},
+    {"roleId":"programmer","sessionTitle":"程序员｜项目接管｜实现准备","responsibility":"实现准备、文件责任和执行边界","firstTaskPrompt":"请只读确认实现范围、预计文件和禁止操作，不修改业务代码。","providerSessionId":null,"bindingStatus":"pending"},
+    {"roleId":"test-reviewer","sessionTitle":"测试审查员｜项目接管｜验证与发布门禁","responsibility":"测试证据、回归范围和发布门禁","firstTaskPrompt":"请只读确认验证命令、行为证据要求和发布阻断，不修改业务代码。","providerSessionId":null,"bindingStatus":"pending"}
+  ],
+  "userDecision": null,
+  "decisionId": null,
+  "actor": null,
+  "source": "user-confirmation",
+  "requiredRoleCount": 5,
+  "createdRoleCount": 0,
+  "remainingRoleIds": ["project-owner", "project-product", "chief-engineer", "programmer", "test-reviewer"],
+  "decisionStatus": "not-asked",
+  "decidedAt": null,
+  "nextAction": "present-choice-once",
+  "decisionEvidence": [],
+  "noChoicePolicy": "remain-blocked-without-repeat-prompt",
+  "bindingRequiredFields": ["provider", "providerSessionId", "projectRootHash", "workspaceScope", "roleId", "taskId", "title", "cwd", "boundBy", "boundAt", "identityEvidence", "interactionEvidence"],
+  "decisionEvidenceSchema": ["decisionId", "userDecision", "actor", "source", "decidedAt", "inputHash", "evidenceHash"],
+  "fakeProviderSessionIdProhibited": true,
+  "createdAt": null,
+  "updatedAt": null
+}

package/init/xinyun-ai-init/templates/project-check.template.md

@@ -168,6 +168,15 @@
 - 敏感扫描、业务文件 changedFiles 和禁止操作证明是否通过：待填写
 - `projectStatus=ready` 和 `executionEligible=true` 是否仅在全部门禁通过后出现：待填写
 
+## v1.12.1 provider session checks
+
+- provider binding uses a host canonical `providerSessionId`: pending
+- ordinary thread IDs, task IDs, titles, and summaries are rejected as provider identity: pending
+- project, role, task, title, cwd, and exclusive occupancy evidence: pending
+- redacted send/receive interaction evidence and transcript hash: pending
+- manual binding without evidence remains pending/blocked: pending
+- writeback recovery reuses task IDs, increments attempt, and creates no duplicate session: pending
+
 ## v1.9 检查
 
 - 项目身份是否使用 realpath / lexical-fallback、Unicode NFC、projectRootHash 和 repositoryScopeHash：待填写

package/init/xinyun-ai-init/templates/project-guide.template.md

@@ -218,6 +218,11 @@
 - roleSessionIdempotency：RFC8785-JCS-SHA-256(projectRootHash, workspaceScope, repositoryScopeHash, workstream, taskId, roleId, provider, targetVersion)；v1.7.3 四字段仅作创建兼容索引，不参与候选选择、复用或跨项目身份判定
 - parentSessionId：待填写
 - real sessionId：待填写；不得伪造 sessionId
+- providerSessionId：待填写；只能来自宿主 canonical session API，普通线程 ID 不得直接绑定
+- provider binding：xinyun-ai/sessions/provider-session-bindings.json；必须有 identityEvidence、interactionEvidence 和 exclusive occupancy
+- v1.13 host adapter：xinyun-ai/sessions/provider-adapter.json；预检失败时先 blocked 并延后 CodeGraph 大扫描
+- manual recovery：xinyun-ai/sessions/manual-session-recovery.json；恢复原 taskId/roleTaskId 并递增 attempt
+- initialization change report：xinyun-ai/index/initialization-change-report.json；区分初始化改动与项目原有改动
 - onboarding：created 后先只读 onboarding，不能直接 ready
 - host unsupported：local-degraded-no-fake-session-id
 - created-but-writeback-failed：待填写恢复线索